Hi Linus, The following changes since commit 8f5ae30d69d7543eee0d70083daf4de8fe15d585: Linux 6.17-rc1 (2025-08-10 19:41:16 +0300) are available in the Git repository at: https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf.git tags/bpf-fixes for you to fetch changes up to 91f34aaae06e425e4644afde92ddff949b6abb54: Merge branch 'bpf-reject-bpf_timer-for-preempt_rt' (2025-09-10 12:34:09 -0700) ---------------------------------------------------------------- A number of fixes accumulated due to summer vacations - Fix out-of-bounds dynptr write in bpf_crypto_crypt() kfunc which was misidentified as a security issue (Daniel Borkmann) - Update the list of BPF selftests maintainers (Eduard Zingerman) - Fix selftests warnings with icecc compiler (Ilya Leoshkevich) - Disable XDP/cpumap direct return optimization (Jesper Dangaard Brouer) - Fix unexpected get_helper_proto() result in unusual configuration BPF_SYSCALL=y and BPF_EVENTS=n (Jiri Olsa) - Allow fallback to interpreter when JIT support is limited (KaFai Wan) - Fix rqspinlock and choose trylock fallback for NMI waiters. Pick the simplest fix. More involved fix is targeted bpf-next. (Kumar Kartikeya Dwivedi) - Fix cleanup when tcp_bpf_send_verdict() fails to allocate psock->cork (Kuniyuki Iwashima) - Disallow bpf_timer in PREEMPT_RT for now. Proper solution is being discussed for bpf-next. (Leon Hwang) - Fix XSK cq descriptor production (Maciej Fijalkowski) - Tell memcg to use allow_spinning=false path in bpf_timer_init() to avoid lockup in cgroup_file_notify() (Peilin Ye) - Fix bpf_strnstr() to handle suffix match cases (Rong Tao) Signed-off-by: Alexei Starovoitov <ast@xxxxxxxxxx> ---------------------------------------------------------------- Alexei Starovoitov (2): Merge branch 'selftests-bpf-fix-expression-result-unused-warnings-with-icecc' Merge branch 'bpf-reject-bpf_timer-for-preempt_rt' Andrii Nakryiko (1): Merge branch 'fix-bpf_strnstr-len-error' Daniel Borkmann (2): bpf: Fix out-of-bounds dynptr write in bpf_crypto_crypt selftests/bpf: Extend crypto_sanity selftest with invalid dst buffer Eduard Zingerman (1): bpf: Update the list of BPF selftests maintainers Ilya Leoshkevich (1): selftests/bpf: Fix "expression result unused" warnings with icecc Jesper Dangaard Brouer (1): bpf, cpumap: Disable page_pool direct xdp_return need larger scope Jiri Olsa (1): bpf: Check the helper function is valid in get_helper_proto KaFai Wan (1): bpf: Allow fall back to interpreter for programs with stack size <= 512 Kumar Kartikeya Dwivedi (1): rqspinlock: Choose trylock fallback for NMI waiters Kuniyuki Iwashima (1): tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. Leon Hwang (2): bpf: Reject bpf_timer for PREEMPT_RT selftests/bpf: Skip timer cases when bpf_timer is not supported Maciej Fijalkowski (1): xsk: Fix immature cq descriptor production Peilin Ye (1): bpf: Tell memcg to use allow_spinning=false path in bpf_timer_init() Rong Tao (2): bpf: Fix bpf_strnstr() to handle suffix match cases better selftests/bpf: Add tests for bpf_strnstr MAINTAINERS | 1 - kernel/bpf/Makefile | 1 + kernel/bpf/core.c | 21 ++-- kernel/bpf/cpumap.c | 4 +- kernel/bpf/crypto.c | 2 +- kernel/bpf/helpers.c | 16 ++- kernel/bpf/rqspinlock.c | 2 +- kernel/bpf/verifier.c | 6 +- net/ipv4/tcp_bpf.c | 5 +- net/xdp/xsk.c | 113 ++++++++++++++++++--- net/xdp/xsk_queue.h | 12 +++ .../testing/selftests/bpf/prog_tests/free_timer.c | 4 + tools/testing/selftests/bpf/prog_tests/timer.c | 4 + .../testing/selftests/bpf/prog_tests/timer_crash.c | 4 + .../selftests/bpf/prog_tests/timer_lockup.c | 4 + tools/testing/selftests/bpf/prog_tests/timer_mim.c | 4 + .../selftests/bpf/progs/bpf_arena_spin_lock.h | 4 +- tools/testing/selftests/bpf/progs/crypto_sanity.c | 46 ++++++--- .../testing/selftests/bpf/progs/linked_list_fail.c | 5 +- .../selftests/bpf/progs/string_kfuncs_success.c | 8 +- 20 files changed, 213 insertions(+), 53 deletions(-)
