NIPA Branch net-next-2025-09-22--21-00

Branches
Base trees
[+] Bluetooth: Fix build after header cleanup
[+] Bluetooth: hci_sync: Fix hci_resume_advertising_sync
[+] Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue
[+] Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync
[+] Bluetooth: MGMT: Fix possible UAFs
[+] broadcom: fix support for PTP_PEROUT_DUTY_CYCLE
[+] broadcom: fix support for PTP_EXTTS_REQUEST2 ioctl
[+] ptp: document behavior of PTP_STRICT_FLAGS
[+] Merge branch 'broadcom-report-the-supported-flags-for-ancillary-features'
[+] selftests: forwarding: Reorder (ar)ping arguments to obey POSIX getopt
[+] tcp: Remove osk from __inet_hash() arg.
[+] tcp: Remove inet6_hash().
[+] tcp: Remove redundant sk_unhashed() in inet_unhash().
[+] Merge branch 'tcp-clean-up-inet_hash-and-inet_unhash'
[+] net: enetc: fix sleeping function called from rcu_read_lock() context
[+] net: enetc: use generic interfaces to get phc_index for ENETC v1
[+] Merge branch 'net-enetc-improve-the-interface-for-obtaining-phc_index'
[+] net: spacemit: Make stats_lock softirq-safe
[+] mptcp: pm: netlink: only add server-side attr when true
[+] mptcp: pm: netlink: announce server-side flag
[+] mptcp: pm: netlink: deprecate server-side attribute
[+] selftests: mptcp: pm: get server-side flag
[+] mptcp: use _BITUL() instead of (1 << x)
[+] mptcp: remove unused returned value of check_data_fin
[+] Merge branch 'mptcp-pm-netlink-announce-server-side-flag'
[+] Merge tag 'for-net-2025-09-22' of git://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth
Documentation/netlink/specs/mptcp_pm.yaml | 5 +- drivers/bluetooth/Kconfig | 6 + drivers/bluetooth/hci_uart.h | 8 +- drivers/net/ethernet/freescale/enetc/enetc.h | 3 - .../net/ethernet/freescale/enetc/enetc_ethtool.c | 29 +-- drivers/net/ethernet/freescale/enetc/enetc_ptp.c | 5 - drivers/net/ethernet/spacemit/k1_emac.c | 30 +-- drivers/net/phy/bcm-phy-ptp.c | 6 +- include/net/bluetooth/hci_core.h | 21 ++ include/net/inet6_hashtables.h | 2 - include/net/inet_hashtables.h | 1 - include/uapi/linux/mptcp.h | 11 +- include/uapi/linux/mptcp_pm.h | 4 +- include/uapi/linux/ptp_clock.h | 3 + net/bluetooth/hci_event.c | 30 ++- net/bluetooth/hci_sync.c | 7 + net/bluetooth/mgmt.c | 259 +++++++++++++++------ net/bluetooth/mgmt_util.c | 46 ++++ net/bluetooth/mgmt_util.h | 3 + net/ipv4/inet_hashtables.c | 28 +-- net/ipv6/inet6_hashtables.c | 11 - net/ipv6/tcp_ipv6.c | 2 +- net/mptcp/pm_netlink.c | 9 +- net/mptcp/protocol.c | 5 +- .../net/forwarding/custom_multipath_hash.sh | 2 +- .../net/forwarding/gre_custom_multipath_hash.sh | 2 +- .../net/forwarding/ip6_forward_instats_vrf.sh | 6 +- .../net/forwarding/ip6gre_custom_multipath_hash.sh | 2 +- tools/testing/selftests/net/forwarding/lib.sh | 8 +- .../net/forwarding/mirror_gre_bridge_1q_lag.sh | 2 +- .../net/forwarding/mirror_gre_vlan_bridge_1q.sh | 4 +- tools/testing/selftests/net/mptcp/pm_nl_ctl.c | 9 +- tools/testing/selftests/net/mptcp/userspace_pm.sh | 2 +- 33 files changed, 376 insertions(+), 195 deletions(-)
New patches
@@ -1,187 +1,167 @@
nipa: config: disable kmemleak auto scan
selftests: net: fix server bind failure in sctp_vrf.sh
nipa: config: x86: disable GPUs and sound
nipa: drv: net: add timeout
nipa: forwarding: set timeout to 3 hours
nipa: config: disable CPU_MITIGATIONS
nipa: tc_action dbg
nipa: selftests: net: enable profiling
nipa: dbg: tests: bonding: print info on failure
nipa: timestamp - try waking
nipa: profile (time) test output
nipa: config: x86: use periodic HZ tick
nipa: disable 6.17's merge window kunit tests
nipa: disable random kunit tests
[+] netfilter/x_tables: allocate entry_offsets with vcalloc
[+] netfilter/x_tables: introduce a helper for freeing entry offsets
[+] netfilter/x_tables: go back to using vmalloc for xt_table_info
[+] net: allow alloc_skb_with_frags() to use MAX_SKB_FRAGS
selftests: drv-net: add HW timestamping tests
mlx5: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set()
bnxt_en: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set()
tg3: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set()
[c] Merge tag 'for-net-2025-09-22' of git://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth
selftests: bridge_fdb_local_vlan_0: Test FDB vs. NET_ADDR_SET behavior
net: bridge: Install FDB for bridge MAC on VLAN 0
net: airoha: Avoid -Wflex-array-member-not-at-end warning
net: dsa: yt921x: Add support for Motorcomm YT921x
net: dsa: tag_yt921x: add support for Motorcomm YT921x tags
dt-bindings: net: dsa: yt921x: Add Motorcomm YT921x switch support
net: phy: introduce PHY_INTERFACE_MODE_REVSGMII
dt-bindings: ethernet-phy: add reverse SGMII phy interface type
net: phy: micrel: Fix default LED behaviour
Documentation: rxrpc: Demote three sections
net/smc: fix general protection fault in __smc_diag_dump
Documentation: net: add flow control guide and document ethtool API
net: ovpn: use new noref xmit flow in ovpn_udp{4,6}_output
net: tunnel: implement noref flows in udp_tunnel{,6}_xmit_skb
net: dst_cache: implement RCU variants for dst_cache helpers
udp: remove busylock and add per NUMA queues
selftests: net-drv: stats: sanity check FEC histogram
net/mlx5e: Report RS-FEC histogram statistics via ethtool
net/mlx5e: Add logic to read RS-FEC histogram bin ranges from PPHCR
net/mlx5e: Don't query FEC statistics when FEC is disabled
ethtool: add FEC bins histogram report
net: dns_resolver: Fix request-key cross-reference
net: dns_resolver: Move dns_query() explanation out of code block
net: dns_resolver: Use reST bullet list for features list
net: libwx: restrict change user-set RSS configuration
net: wangxun: add RSS reta and rxfh fields support
net: libwx: move rss_field to struct wx
net: libwx: support separate RSS configuration for every pool
net/hsr: add protocol version to fill_info output
net/mlx5e: Clamp page_pool size to max
net: page_pool: Expose internal limit
selftests/net: test ipip packets in gro.sh
net: gro: remove unnecessary df checks
net: gso: restore ids of outer ip headers correctly
net: gro: only merge packets with incrementing or fixed outer ids
net: gro: remove is_ipv6 from napi_gro_cb
[-] net: mv643xx_eth: Fix an error handling path in mv643xx_eth_probe()
net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs
xfrm: fix offloading of cross-family tunnels
xfrm: xfrm_alloc_spi shouldn't use 0 as SPI
net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD
net/mlx5: HWS, ignore flow level for multi-dest table
net/mlx5: fs, fix UAF in flow counter release
net: rnpgbe: Add register_netdev
net: rnpgbe: Add basic mbx_fw support
net: rnpgbe: Add basic mbx ops support
net: rnpgbe: Add n500/n210 chip support with BAR2 mapping
net: rnpgbe: Add build support for rnpgbe
net/smc: handle -ENOMEM from smc_wr_alloc_link_mem gracefully
net/smc: make wr buffer count configurable
selftests: rtnetlink: correct error message in rtnetlink.sh fou test
net: nfc: nci: Add parameter validation for packet data
selftests: fib_nexthops: Add test cases for FDB status change
selftests: fib_nexthops: Fix creation of non-FDB nexthops
nexthop: Forbid FDB status change while nexthop is in a group
Merge tag 'mlx5-next-counters' of git://git.kernel.org/pub/scm/linux/kernel/git/mellanox/linux
[-] net/xfrm: Refuse to allocate xfrm_state with SPI value 0
net: phy: stop exporting phy_driver_register
net: phy: dp83640: improve phydev and driver removal handling
net: phy: move config symbol MDIO_BUS to drivers/net/phy/Kconfig
net: usb: Remove disruptive netif_wake_queue in rtl8150_set_multicast
bnxt_en: correct offset handling for IPv6 destination address
tcp: reclaim 8 bytes in struct request_sock_queue
tcp: move mtu_info to remove two 32bit holes
tcp: move tcp_clean_acked to tcp_sock_read_tx group
tcp: move recvmsg_inq to tcp_sock_read_txrx
tcp: move tcp->rcv_tstamp to tcp_sock_write_txrx group
tcp: remove CACHELINE_ASSERT_GROUP_SIZE() uses
net: move sk->sk_err_soft and sk->sk_sndbuf
net: move sk_uid and sk_protocol to sock_read_tx
i40e: improve VF MAC filters accounting
i40e: add mask to apply valid bits for itr_idx
i40e: add max boundary check for VF filters
i40e: fix validation of VF state in get resources
i40e: fix input validation logic for action_meta
i40e: fix idx validation in config queues msg
i40e: fix idx validation in i40e_validate_queue_map
i40e: add validation for ring_len param
net: intel: fm10k: Fix parameter idx set but not used
ixgbevf: fix proper type for error code in ixgbevf_resume()
iavf: fix proper type for error code in iavf_resume()
idpf: add HW timestamping statistics
ice: Remove deprecated ice_lag_move_new_vf_nodes() call
ice: add E830 Earliest TxTime First Offload support
ice: move ice_qp_[ena|dis] for reuse
bng_en: Configure default VNIC
bng_en: Register default VNIC
bng_en: Register rings with the firmware
bng_en: Allocate stat contexts
bng_en: Allocate packet buffers
bng_en: Initialise core resources
bng_en: Introduce VNIC
bng_en: Add initial support for CP and NQ rings
bng_en: Add initial support for RX and TX rings
bng_en: make bnge_alloc_ring() self-unwind on failure
[c] mptcp: remove unused returned value of check_data_fin
[c] mptcp: use _BITUL() instead of (1 << x)
[c] selftests: mptcp: pm: get server-side flag
[c] mptcp: pm: netlink: deprecate server-side attribute
[c] mptcp: pm: netlink: announce server-side flag
[c] mptcp: pm: netlink: only add server-side attr when true
[c] net: spacemit: Make stats_lock softirq-safe
rust: net::phy inline if expressions to improve read_status
net: phy: ax88796b: Replace hard-coded values with PHY_ID_MATCH_MODEL()
net: xilinx: axienet: Fix kernel-doc warnings for missing return descriptions
[c] net: enetc: use generic interfaces to get phc_index for ENETC v1
[c] net: enetc: fix sleeping function called from rcu_read_lock() context
[c] tcp: Remove redundant sk_unhashed() in inet_unhash().
[c] tcp: Remove inet6_hash().
[c] tcp: Remove osk from __inet_hash() arg.
[c] selftests: forwarding: Reorder (ar)ping arguments to obey POSIX getopt
[c] ptp: document behavior of PTP_STRICT_FLAGS
[c] broadcom: fix support for PTP_EXTTS_REQUEST2 ioctl
[c] broadcom: fix support for PTP_PEROUT_DUTY_CYCLE
quic: add packet builder and parser base
quic: add frame encoder and decoder base
quic: add timer management
quic: add crypto packet encryption and decryption
quic: add crypto key derivation and installation
quic: add packet number space
quic: add congestion control
quic: add path management
quic: add connection id management
quic: add stream management
quic: provide quic.h header files for kernel and userspace
quic: provide family ops for address and protocol
quic: provide common utilities and data structures
net: build socket infrastructure for QUIC protocol
net: define IPPROTO_QUIC and SOL_QUIC constants
tcp: accecn: enable AccECN
tcp: accecn: stop sending AccECN opt when loss ACK w/ option
tcp: accecn: verify ACE counter in 1st ACK after AccECN negotiation
tcp: accecn: fallback outgoing half link to non-AccECN
tcp: accecn: unset ECT if receive or send ACE=0 in AccECN negotiaion
tcp: accecn: retransmit SYN/ACK without AccECN option or non-AccECN SYN/ACK
tcp: move increment of num_retrans
tcp: accecn: retransmit downgraded SYN in AccECN negotiation
tcp: accecn: handle unexpected AccECN negotiation feedback
tcp: disable RFC3168 fallback identifier for CC modules
tcp: L4S ECT(1) identifier and NEEDS_ACCECN for CC modules
tcp: accecn: Add ece_delta to rate_sample
gro: flushing when CWR is set negatively affects AccECN
tcp: try to avoid safer when ACKs are thinned
Merge tag 'for_linus' of https://git.kernel.org/pub/scm/linux/kernel/git/mst/vhost
net: WQ_PERCPU added to alloc_workqueue users
net: replace use of system_wq with system_percpu_wq
net: replace use of system_unbound_wq with system_dfl_wq
net/mlx5: Use %pe format specifier for error pointers
scripts/coccinelle: Find PTR_ERR() to %pe candidates
net: dsa: microchip: Set SPI as bus interface during reset for KSZ8463
dt-bindings: net: dsa: microchip: Add strap description to set SPI mode
dt-bindings: net: dsa: microchip: Group if clause under allOf tag
selftests/net: Test tcp port reuse after unbinding a socket
tcp: Update bind bucket state on port release
[c] Bluetooth: MGMT: Fix possible UAFs
MAINTAINERS, mailmap: Update address for Peter Hilber
virtio_config: clarify output parameters
uapi: vduse: fix typo in comment
vhost: Take a reference on the task in struct vhost_task.
[c] Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync
[c] Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue
[c] Bluetooth: hci_sync: Fix hci_resume_advertising_sync
[c] Bluetooth: Fix build after header cleanup
vhost-net: flush batched before enabling notifications
Revert "vhost/net: Defer TX queue re-enable until after sendmsg"
vhost-net: unbreak busy polling
net/mlx5: Add uar access and odp page fault counters
vhost-scsi: fix argument order in tport allocation error message
Test results