Jason Baron 3bc813c5e6 net: allow alloc_skb_with_frags() to use MAX_SKB_FRAGS ... [ Upstream commit ca9f9cdc4de97d0221100b11224738416696163c ] Currently, alloc_skb_with_frags() will only fill (MAX_SKB_FRAGS - 1) slots. I think it should use all MAX_SKB_FRAGS slots, as callers of alloc_skb_with_frags() will size their allocation of frags based on MAX_SKB_FRAGS. This issue was discovered via a test patch that sets 'order' to 0 in alloc_skb_with_frags(), which effectively tests/simulates high fragmentation. In this case sendmsg() on unix sockets will fail every time for large allocations. If the PAGE_SIZE is 4K, then data_len will request 68K or 17 pages, but alloc_skb_with_frags() can only allocate 64K in this case or 16 pages. Fixes: 09c2c90705 ("net: allow alloc_skb_with_frags() to allocate bigger packets") Signed-off-by: Jason Baron <jbaron@akamai.com> Reviewed-by: Eric Dumazet <edumazet@google.com> Link: https://patch.msgid.link/20250922191957.2855612-1-jbaron@akamai.com Signed-off-by: Jakub Kicinski <kuba@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>		2025-10-02 13:44:10 +02:00
..
6lowpan
9p
802
8021q	net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime	2025-07-24 08:56:34 +02:00
appletalk	net: appletalk: Fix use-after-free in AARP proxy probe	2025-08-01 09:48:41 +01:00
atm	net: atm: fix memory leak in atm_register_sysfs when device_register fail	2025-09-09 18:58:13 +02:00
ax25	ax25: properly unshare skbs in ax25_kiss_rcv()	2025-09-09 18:58:13 +02:00
batman-adv	batman-adv: fix OOB read/write in network-coding decode	2025-09-09 18:58:18 +02:00
bluetooth	Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync	2025-10-02 13:44:10 +02:00
bpf
bridge	net: bridge: Bounce invalid boolopts	2025-09-19 16:35:48 +02:00
caif	caif: reduce stack size, again	2025-08-15 12:13:40 +02:00
can	can: j1939: j1939_local_ecu_get(): undo increment when j1939_local_ecu_get() fails	2025-09-19 16:35:49 +02:00
ceph	libceph: fix invalid accesses to ceph_connection_v1_info	2025-09-19 16:35:47 +02:00
core	net: allow alloc_skb_with_frags() to use MAX_SKB_FRAGS	2025-10-02 13:44:10 +02:00
dcb
dccp
devlink
dns_resolver
dsa	net: dsa: provide implementation of .support_eee()	2025-09-09 18:58:19 +02:00
ethernet
ethtool
handshake
hsr	hsr: use hsr_for_each_port_rtnl in hsr_port_get_hsr	2025-09-19 16:35:50 +02:00
ieee802154
ife
ipv4	tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect().	2025-09-25 11:13:44 +02:00
ipv6	net/tcp: Fix socket memory leak in TCP-AO failure handling for IPv6	2025-09-09 18:58:10 +02:00
iucv
kcm	net: kcm: Fix race condition in kcm_unattach()	2025-08-20 18:30:18 +02:00
key
l2tp	l2tp: do not use sock_hold() in pppol2tp_session_get_sock()	2025-09-04 15:31:51 +02:00
l3mdev
lapb
llc	llc: fix data loss when reading from a socket in llc_ui_recvmsg()	2025-05-29 11:03:20 +02:00
mac80211	wifi: mac80211: fix incorrect type for ret	2025-09-25 11:13:41 +02:00
mac802154
mctp	mctp: return -ENOPROTOOPT for unknown getsockopt options	2025-09-09 18:58:13 +02:00
mpls	mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().	2025-06-27 11:11:43 +01:00
mptcp	mptcp: pm: nl: announce deny-join-id0 flag	2025-09-25 11:13:50 +02:00
ncsi	net: ncsi: Fix buffer overflow in fetching version id	2025-08-20 18:30:38 +02:00
netfilter	netfilter: nft_set_pipapo: fix null deref for empty set	2025-09-19 16:35:51 +02:00
netlabel	calipso: unlock rcu before returning -EAFNOSUPPORT	2025-06-19 15:32:37 +02:00
netlink	genetlink: fix genl_bind() invoking bind() after -EPERM	2025-09-19 16:35:48 +02:00
netrom
nfc	NFC: nci: uart: Set tty->disc_data only in success path	2025-06-27 11:11:21 +01:00
nsh
openvswitch	net: openvswitch: Fix the dead loop of MPLS parse	2025-06-19 15:31:55 +02:00
packet	net/packet: fix a race in packet_set_ring() and packet_notifier()	2025-08-15 12:14:09 +02:00
phonet	phonet/pep: Move call to pn_skb_get_dst_sockaddr() earlier in pep_sock_accept()	2025-07-24 08:56:24 +02:00
psample
qrtr
rds	rds: ib: Increment i_fastreg_wrs before bailing out	2025-09-25 11:13:47 +02:00
rfkill	net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer	2025-09-25 11:13:47 +02:00
rose	net: rose: fix a typo in rose_clear_routes()	2025-09-04 15:31:55 +02:00
rxrpc	rxrpc: Fix transmission of an abort in response to an abort	2025-07-24 08:56:35 +02:00
sched	net/sched: Remove unnecessary WARNING condition for empty child qdisc in htb_activate	2025-08-28 16:31:15 +02:00
sctp	sctp: initialize more fields in sctp_v6_from_sk()	2025-09-04 15:31:51 +02:00
smc	net/smc: fix warning in smc_rx_splice() when calling get_page()	2025-10-02 13:44:10 +02:00
strparser
sunrpc	Revert "SUNRPC: Don't allow waiting for exiting tasks"	2025-09-19 16:35:45 +02:00
switchdev
tipc	tipc: Fix use-after-free in tipc_conn_close().	2025-07-17 18:37:05 +02:00
tls	tls: make sure to abort the stream if headers are bogus	2025-09-25 11:13:44 +02:00
unix	af_unix: Don't set -ECONNRESET for consumed OOB skb.	2025-07-06 11:01:40 +02:00
vmw_vsock	vsock/virtio: Validate length in packet header before skb_put()	2025-08-28 16:30:59 +02:00
wireless	wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result()	2025-09-09 18:58:12 +02:00
x25
xdp
xfrm	xfrm: xfrm_alloc_spi shouldn't use 0 as SPI	2025-10-02 13:44:09 +02:00
compat.c
devres.c
Kconfig
Kconfig.debug
Makefile
socket.c
sysctl_net.c