[GIT PULL] Networking for v6.18-rc6

From: Paolo Abeni

Date: Thu Nov 13 2025 - 11:00:24 EST


Hi Linus!

The following changes since commit c2c2ccfd4ba72718266a56f3ecc34c989cb5b7a0:

Merge tag 'net-6.18-rc5' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net (2025-11-06 08:52:30 -0800)

are available in the Git repository at:

git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git net-6.18-rc6

for you to fetch changes up to 94909c53e442474a432c57c96b99d99357ac3593:

Merge branch 'hsr-send-correct-hsrv0-supervision-frames' (2025-11-13 15:55:06 +0100)

----------------------------------------------------------------
Including fixes from Bluetooth and Wireless. No known outstanding
regressions.

Current release - regressions:

- eth: bonding: fix mii_status when slave is down

- eth: mlx5e: fix missing error assignment in mlx5e_xfrm_add_state()

Previous releases - regressions:

- sched: limit try_bulk_dequeue_skb() batches

- ipv4: route: prevent rt_bind_exception() from rebinding stale fnhe

- af_unix: initialise scc_index in unix_add_edge()

- netpoll: fix incorrect refcount handling causing incorrect cleanup

- bluetooth: don't hold spin lock over sleeping functions

- hsr: Fix supervision frame sending on HSRv0

- sctp: prevent possible shift out-of-bounds

- tipc: fix use-after-free in tipc_mon_reinit_self().

- dsa: tag_brcm: do not mark link local traffic as offloaded

- eth: virtio-net: fix incorrect flags recording in big mode

Previous releases - always broken:

- sched: initialize struct tc_ife to fix kernel-infoleak

- wifi:
- mac80211: reject address change while connecting
- iwlwifi: avoid toggling links due to wrong element use

- bluetooth: cancel mesh send timer when hdev removed

- strparser: fix signed/unsigned mismatch bug

- handshake: fix memory leak in tls_handshake_accept()

Misc:

- selftests: mptcp: fix some flaky tests

Signed-off-by: Paolo Abeni <pabeni@xxxxxxxxxx>

----------------------------------------------------------------
Akiva Goldberger (1):
mlx5: Fix default values in create CQ

Aksh Garg (2):
net: ethernet: ti: am65-cpsw-qos: fix IET verify/response timeout
net: ethernet: ti: am65-cpsw-qos: fix IET verify retry mechanism

Alexander Sverdlin (1):
selftests: net: local_termination: Wait for interfaces to come up

Benjamin Berg (1):
wifi: mac80211: skip rate verification for not captured PSDUs

Breno Leitao (4):
net: netpoll: fix incorrect refcount handling causing incorrect cleanup
selftest: netcons: refactor target creation
selftest: netcons: create a torture test
selftest: netcons: add test for netconsole over bonded interfaces

Buday Csaba (1):
net: mdio: fix resource leak in mdiobus_register_device()

Carolina Jubran (1):
net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state()

Chuang Wang (1):
ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe

Cosmin Ratiu (1):
net/mlx5e: Trim the length of the num_doorbell error

D. Wythe (1):
net/smc: fix mismatch between CLC header and proposal

Eric Dumazet (2):
sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto
net_sched: limit try_bulk_dequeue_skb() batches

Felix Maurer (2):
hsr: Fix supervision frame sending on HSRv0
hsr: Follow standard for HSRv0 supervision frames

Gal Pressman (4):
docs: netlink: Couple of intro-specs documentation fixes
net/mlx5e: Fix maxrate wraparound in threshold between units
net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps
net/mlx5e: Fix potentially misleading debug message

Horatiu Vultur (1):
net: phy: micrel: lan8814 fix reset of the QSGMII interface

Ilan Peer (1):
wifi: mac80211_hwsim: Fix possible NULL dereference

Jakub Kicinski (5):
Merge branch 'fix-iet-verification-implementation-for-cpsw-driver'
Merge branch 'net-netpoll-fix-memory-leak-and-add-comprehensive-selftests'
Merge tag 'for-net-2025-11-11' of git://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth
Merge branch 'selftests-mptcp-join-fix-some-flaky-tests'
Merge tag 'wireless-2025-11-12' of https://git.kernel.org/pub/scm/linux/kernel/git/wireless/wireless

Johannes Berg (4):
wifi: mac80211: reject address change while connecting
Merge tag 'ath-current-20251110' of git://git.kernel.org/pub/scm/linux/kernel/git/ath/ath
wifi: iwlwifi: mvm: fix beacon template/fixed rate
Merge tag 'iwlwifi-fixes-2025-11-12' of https://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/iwlwifi-next

Jonas Gorski (1):
net: dsa: tag_brcm: do not mark link local traffic as offloaded

Junjie Cao (1):
wifi: iwlwifi: fix aux ROC time event iterator usage

Kriish Sharma (1):
ethtool: fix incorrect kernel-doc style comment in ethtool.h

Kuniyuki Iwashima (2):
tipc: Fix use-after-free in tipc_mon_reinit_self().
af_unix: Initialise scc_index in unix_add_edge().

Luiz Augusto von Dentz (2):
Bluetooth: hci_conn: Fix not cleaning up PA_LINK connections
Bluetooth: hci_event: Fix not handling PA Sync Lost event

Matthieu Baerts (NGI0) (6):
selftests: mptcp: connect: fix fallback note due to OoO
selftests: mptcp: join: rm: set backup flag
selftests: mptcp: join: endpoints: longer transfer
selftests: mptcp: join: userspace: longer transfer
selftests: mptcp: connect: trunc: read all recv data
selftests: mptcp: join: properly kill background tasks

Max Chou (1):
Bluetooth: btrtl: Avoid loading the config file on security chips

Miri Korenblit (1):
wifi: iwlwifi: mld: always take beacon ies in link grading

Nate Karstens (1):
strparser: Fix signed/unsigned mismatch bug

Nicolas Dichtel (1):
bonding: fix mii_status when slave is down

Nicolas Escande (1):
wifi: ath11k: zero init info->status in wmi_process_mgmt_tx_comp()

Paolo Abeni (3):
Merge branch 'net-sched-initialize-struct-tc_ife-to-fix-kernel-infoleak'
Merge branch 'mlx5e-misc-fixes-2025-11-09'
Merge branch 'hsr-send-correct-hsrv0-supervision-frames'

Pauli Virtanen (6):
Bluetooth: MGMT: cancel mesh send timer when hdev removed
Bluetooth: 6lowpan: reset link-local header on ipv6 recv path
Bluetooth: 6lowpan: fix BDADDR_LE vs ADDR_LE_DEV address type confusion
Bluetooth: L2CAP: export l2cap_chan_hold for modules
Bluetooth: 6lowpan: Don't hold spin lock over sleeping functions
Bluetooth: 6lowpan: add missing l2cap_chan_lock()

Pawel Dembicki (1):
wifi: mwl8k: inject DSSS Parameter Set element into beacons if missing

Ranganath V N (2):
net: sched: act_connmark: initialize struct tc_ife to fix kernel leak
net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak

Raphael Pinsonneault-Thibeault (1):
Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF

Victor Nogueira (2):
net/sched: Abort __tc_modify_qdisc if parent is a clsact/ingress qdisc
selftests/tc-testing: Create tests trying to add children to clsact/ingress qdiscs

Wei Fang (1):
net: fec: correct rx_bytes statistic for the case SHIFT16 is set

Xuan Zhuo (1):
virtio-net: fix incorrect flags recording in big mode

Zahari Doychev (1):
tools: ynl: call nested attribute free function for indexed arrays

Zilin Guan (1):
net/handshake: Fix memory leak in tls_handshake_accept()

.../userspace-api/netlink/intro-specs.rst | 4 +-
drivers/bluetooth/btrtl.c | 24 +-
drivers/bluetooth/btusb.c | 13 +-
drivers/infiniband/hw/mlx5/cq.c | 11 +-
drivers/net/bonding/bond_main.c | 5 +-
drivers/net/ethernet/freescale/fec_main.c | 2 +
drivers/net/ethernet/mellanox/mlx5/core/cq.c | 23 +-
drivers/net/ethernet/mellanox/mlx5/core/devlink.c | 2 +-
.../ethernet/mellanox/mlx5/core/en_accel/ipsec.c | 3 +-
drivers/net/ethernet/mellanox/mlx5/core/en_dcbnl.c | 33 +-
drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 1 -
.../net/ethernet/mellanox/mlx5/core/fpga/conn.c | 15 +-
.../mellanox/mlx5/core/steering/hws/send.c | 7 -
.../mellanox/mlx5/core/steering/sws/dr_send.c | 28 +-
drivers/net/ethernet/ti/am65-cpsw-qos.c | 51 ++-
drivers/net/phy/mdio_bus.c | 5 +-
drivers/net/phy/micrel.c | 12 +-
drivers/net/virtio_net.c | 16 +-
drivers/net/wireless/ath/ath11k/wmi.c | 3 +
drivers/net/wireless/intel/iwlwifi/mld/link.c | 7 +-
drivers/net/wireless/intel/iwlwifi/mvm/mac-ctxt.c | 13 +-
.../net/wireless/intel/iwlwifi/mvm/time-event.c | 14 +-
drivers/net/wireless/intel/iwlwifi/mvm/utils.c | 12 +-
drivers/net/wireless/marvell/mwl8k.c | 71 +++-
drivers/net/wireless/virtual/mac80211_hwsim.c | 14 +-
drivers/vdpa/mlx5/net/mlx5_vnet.c | 6 +-
include/linux/ethtool.h | 2 +-
include/linux/mlx5/cq.h | 1 +
include/net/bluetooth/hci.h | 5 +
net/bluetooth/6lowpan.c | 105 ++++--
net/bluetooth/hci_conn.c | 33 +-
net/bluetooth/hci_event.c | 56 ++--
net/bluetooth/hci_sync.c | 2 +-
net/bluetooth/l2cap_core.c | 1 +
net/bluetooth/mgmt.c | 1 +
net/core/netpoll.c | 7 +-
net/dsa/tag_brcm.c | 6 +-
net/handshake/tlshd.c | 1 +
net/hsr/hsr_device.c | 5 +-
net/hsr/hsr_forward.c | 22 +-
net/ipv4/route.c | 5 +
net/mac80211/iface.c | 14 +-
net/mac80211/rx.c | 10 +-
net/sched/act_connmark.c | 12 +-
net/sched/act_ife.c | 12 +-
net/sched/sch_api.c | 5 +
net/sched/sch_generic.c | 17 +-
net/sctp/transport.c | 13 +-
net/smc/smc_clc.c | 1 +
net/strparser/strparser.c | 2 +-
net/tipc/net.c | 2 +
net/unix/garbage.c | 14 +-
tools/net/ynl/pyynl/ynl_gen_c.py | 12 +
tools/testing/selftests/drivers/net/Makefile | 1 +
.../testing/selftests/drivers/net/bonding/Makefile | 2 +
tools/testing/selftests/drivers/net/bonding/config | 4 +
.../drivers/net/bonding/netcons_over_bonding.sh | 361 +++++++++++++++++++++
.../selftests/drivers/net/lib/sh/lib_netcons.sh | 78 ++++-
.../selftests/drivers/net/netcons_torture.sh | 130 ++++++++
.../selftests/net/forwarding/local_termination.sh | 2 +
tools/testing/selftests/net/mptcp/mptcp_connect.c | 18 +-
tools/testing/selftests/net/mptcp/mptcp_connect.sh | 2 +-
tools/testing/selftests/net/mptcp/mptcp_join.sh | 90 ++---
tools/testing/selftests/net/mptcp/mptcp_lib.sh | 21 ++
.../tc-testing/tc-tests/infra/qdiscs.json | 44 +++
65 files changed, 1202 insertions(+), 312 deletions(-)
create mode 100755 tools/testing/selftests/drivers/net/bonding/netcons_over_bonding.sh
create mode 100755 tools/testing/selftests/drivers/net/netcons_torture.sh