Date: Tue, 9 Jul 2024 11:14:52 +0200 From: Daniel Borkmann To: davem@davemloft.net Cc: kuba@kernel.org, pabeni@redhat.com, edumazet@google.com, daniel@iogearbox.net, ast@kernel.org, andrii@kernel.org, martin.lau@linux.dev, netdev@vger.kernel.org, bpf@vger.kernel.org Subject: pull-request: bpf 2024-07-09 Hi David, hi Jakub, hi Paolo, hi Eric, The following pull-request contains BPF updates for your *net* tree. We've added 3 non-merge commits during the last 1 day(s) which contain a total of 5 files changed, 81 insertions(+), 11 deletions(-). The main changes are: 1) Fix a use-after-free in a corner case where tcx_entry got released too early. Also add BPF test coverage along with the fix, from Daniel Borkmann. 2) Fix a kernel panic on Loongarch in sk_msg_recvmsg() which got triggered by running BPF sockmap selftests, from Geliang Tang. Please consider pulling these changes from: git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf.git tags/for-netdev Thanks a lot! Also thanks to reporters, reviewers and testers of commits in this pull-request: John Fastabend, Pedro Pinto ---------------------------------------------------------------- The following changes since commit 83c36e7cfd74e41a5c145640dba581b38f12aa15: docs: networking: devlink: capitalise length value (2024-07-08 13:39:07 +0100) are available in the Git repository at: https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf.git tags/for-netdev for you to fetch changes up to f0c18025693707ec344a70b6887f7450bf4c826b: skmsg: Skip zero length skb in sk_msg_recvmsg (2024-07-09 10:24:50 +0200) ---------------------------------------------------------------- bpf-for-netdev ---------------------------------------------------------------- Daniel Borkmann (2): bpf: Fix too early release of tcx_entry selftests/bpf: Extend tcx tests to cover late tcx_entry release Geliang Tang (1): skmsg: Skip zero length skb in sk_msg_recvmsg include/net/tcx.h | 13 +++-- net/core/skmsg.c | 3 +- net/sched/sch_ingress.c | 12 ++--- tools/testing/selftests/bpf/config | 3 ++ tools/testing/selftests/bpf/prog_tests/tc_links.c | 61 +++++++++++++++++++++++ 5 files changed, 81 insertions(+), 11 deletions(-) . Date: Thu, 11 Jul 2024 10:40:16 +0200 From: Daniel Borkmann To: davem@davemloft.net Cc: kuba@kernel.org, pabeni@redhat.com, edumazet@google.com, daniel@iogearbox.net, ast@kernel.org, andrii@kernel.org, martin.lau@linux.dev, netdev@vger.kernel.org, bpf@vger.kernel.org Subject: pull-request: bpf 2024-07-11 Hi David, hi Jakub, hi Paolo, hi Eric, The following pull-request contains BPF updates for your *net* tree. We've added 4 non-merge commits during the last 2 day(s) which contain a total of 4 files changed, 262 insertions(+), 19 deletions(-). The main changes are: 1) Fixes for a BPF timer lockup and a use-after-free scenario when timers are used concurrently, from Kumar Kartikeya Dwivedi. 2) Fix the argument order in the call to bpf_map_kvcalloc() which could otherwise lead to a compilation error, from Mohammad Shehar Yaar Tausif. Please consider pulling these changes from: git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf.git tags/for-netdev Thanks a lot! Also thanks to reporters, reviewers and testers of commits in this pull-request: Andrii Nakryiko, Christian Kujau, Dohyun Kim, Neel Natu ---------------------------------------------------------------- The following changes since commit e1533b6319ab9c3a97dad314dd88b3783bc41b69: net: ethernet: lantiq_etop: fix double free in detach (2024-07-09 19:02:07 -0700) are available in the Git repository at: https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf.git tags/for-netdev for you to fetch changes up to 50bd5a0c658d132507673c4d59347c025dd149ed: selftests/bpf: Add timer lockup selftest (2024-07-11 10:18:31 +0200) ---------------------------------------------------------------- bpf-for-netdev ---------------------------------------------------------------- Alexei Starovoitov (1): Merge branch 'fixes-for-bpf-timer-lockup-and-uaf' Kumar Kartikeya Dwivedi (3): bpf: Fail bpf_timer_cancel when callback is being cancelled bpf: Defer work in bpf_timer_cancel_and_free selftests/bpf: Add timer lockup selftest Mohammad Shehar Yaar Tausif (1): bpf: fix order of args in call to bpf_map_kvcalloc kernel/bpf/bpf_local_storage.c | 4 +- kernel/bpf/helpers.c | 99 ++++++++++++++++++---- .../selftests/bpf/prog_tests/timer_lockup.c | 91 ++++++++++++++++++++ tools/testing/selftests/bpf/progs/timer_lockup.c | 87 +++++++++++++++++++ 4 files changed, 262 insertions(+), 19 deletions(-) create mode 100644 tools/testing/selftests/bpf/prog_tests/timer_lockup.c create mode 100644 tools/testing/selftests/bpf/progs/timer_lockup.c .