NIPA Branch net-next-hw-2026-09-23--08-00

Branches
Base trees

No differences found.

New patches
@@ -1,706 +1,658 @@
eth: i40e: sync MAC filters before restarting queues after a reset
ice: don't switch to symmetric RSS hash on indir-only ethtool -X
nipa-local: dbg: add debug to rss xfrm
selftests: netfilter: nft_queue.sh: only queue icmp echo request/reply
nipa-local: selftests/nci: increase t4t_tag_read timeout for debug kernels
tmp add missing stddef for af_alg
nipa: disable some lib/ kunit tests
nipa: config: disable CPU_MITIGATIONS
nipa: disable 6.17's merge window kunit tests
nipa: forwarding: set timeout to 3 hours
nipa: selftests: net: enable profiling
nipa: profile (time) test output
nipa: config: x86: use periodic HZ tick
nipa: config: x86: disable GPUs and sound
nipa: config: disable kmemleak auto scan
nipa: disable random kunit tests
ptp: idt82p33: Stop PTP work producers before teardown
net: phy: mxl-gpy: add 2.5G for MXL68211C
net: vmxnet3: unwind partial IRQ setup
net: dsa: mxl-gsw1xx: force internal PHYs into a known reset state
octeontx2-af: mcs: Fix SC resource cleanup loop
octeontx2-pf: Fix aura BPID assignment when CONFIG_DCB is enabled
nfc: nci: ignore unexpected CORE_RESET_NTF and CORE_RESET_RSP
net: ngbe: clear DRV_LOAD bit when ngbe_open() fails
net: ngbe: propagate resume errors to the PM core
udp: restore hlist_nulls for primary and secondary hash tables
netfilter: nf_dup: disable duplication in user namespaces
llc: reserve device headroom for allocated frames
i40e: limit the DDP profile count returned by the firmware
net: macb: Clear SRTSM outside PTPv2 receive filters
net: macb: Disable one-step mode when TX timestamping is off
net: macb: Enable RX timestamping for specific PTPv1 filters
net: macb: Preserve timestamp settings on rejected requests
net: ipv6: seg6: report lwtunnel setup errors via extack
[-] ipvs: skip committing sync_threshold when proc_dointvec fails
net/rds: restrict the rdma_cm ids to IB devices
tipc: Fix a data race on mon->peer_cnt in mon_timeout()
net: phy: intel-xway: workaround 100BASE-TX Link-Up issue
net/mlx5: HV VHCA: Fix the agent registration race
net/smc: fix UAF on lgr list traversal in smcr_port_err()
MAINTAINERS: add Nicolai Buchwitz as GENET maintainer
net: gso: limit recursive IP-in-IP segmentation
net: mana: fix reset work race with device removal
net: ethtool: let tsconfig reach a PHY-only timestamp provider
netfilter: nf_nat: Fix stale outer UDP checksum on VXLAN encapsulated packets
bnge: Create NQ0 during probe and keep active across open/close
bnge: Quiesce NQ0 around ring teardown in bnge_free_core()
bnge: Drop obsolete bn->bnapi NULL checks in open/close paths
bnge: Move bnapi and ring_grp allocation to probe/remove
bnge: Extract per-NQ ring allocation and init helpers
bnge: Extract bnapi allocation and cleanup into helpers
rds: ib: Clear the sg list when mapping an MR fails
bna: prevent IOC timer rearm during teardown
usb: atm: cxacru: fix NULL deref of atm_dev on sysfs writes
[-] tcp: remove dead code in tcp_rcv_state_process()
[-] firmware: broadcom: tee_bnxt_fw: publish the TEE context last
[-] net: dsa: mv88e6060: publish the OF module alias
net: stmmac: sun8i: add support for Allwinner H616 EMAC1
dt-bindings: net: allwinner: add H616 EMAC1
net: stmmac: sun8i: reset the MAC after PHY initialization
selftests: net: move log_test to lib file and remove duplicate code
net: airoha: npu: cancel wdt_work after releasing the WDT IRQ
selftests: net: test AF_PACKET multicast dumps
netlink: specs: rt-addr: document AF_PACKET multicast dumps
net: add AF_PACKET multicast dumps
netlink: specs: rt-addr: fix the type of target-netnsid
veth: manage XDP program pointers during channel resize
net: bcmgenet: mask DMA_TIMEOUT_MASK when reading DMA_RING0_TIMEOUT
net: bcmgenet: validate Ethernet address in bcmgenet_set_mac_addr
net: bcmgenet: do not skip WoL power up on GENET V1
net: bcmgenet: initialize u64 stats seq counter for all queues
net: bcmgenet: fix 64-bit RTNL stats reading in ethtool on 32-bit systems
net/rds: include the scope id in the sendmsg connection cache check
net/rds: size a connection's path set by the transport it ends up with
net: ipv6: keep room for the mac header in dst_dev_overhead()
macsec: initialize SecY before registering the netdevice
net: dsa: motorcomm: Use safe 64-bit counter reader
net: dsa: motorcomm: Fix MIB synchronization
net: dsa: motorcomm: Use u64_stats_t for MIB stats
net: dsa: motorcomm: Split MIB module
net: dsa: motorcomm: Split MIB buffers
net: dsa: motorcomm: Rename MIB stuff
net: dsa: motorcomm: Hoist port_to_priv helper into chip.h
selftests: drv-net: add BIG TCP coverage to TSO test
dpll: sit9531x: allow the device tree to override two board facts
dpll: sit9531x: model the inter-PLL sync net as a pair of pins
dpll: sit9531x: add support to get fractional frequency offset
dpll: sit9531x: add support to get phase offset on the connected input pin
dpll: sit9531x: add support to adjust output phase
dpll: sit9531x: implement output pin state on a DPLL
dpll: sit9531x: add support to get and set frequency on pins
dpll: sit9531x: add support to get and set priority on input pins
dpll: sit9531x: implement input pin state on a DPLL
dpll: sit9531x: register DPLL devices and pins
dpll: sit9531x: read DPLL types and pin properties from system firmware
dpll: add basic SiTime SiT9531x support
dt-bindings: dpll: add SiTime SiT95316 clock generator
dt-bindings: vendor-prefixes: add SiTime Corporation
enic: configure V2 VF receive mode over mailbox
enic: manage V2 VF station and administrative MAC
enic: validate V2 VF configuration replies
enic: recover V2 VF mailbox when PF state is unknown
enic: serialize V2 VF mailbox requests
net: add netif_rx_mode_schedule_fresh()
[-] net: devmem: document that bind-tx is unprivileged by design
[-] af_packet: fix integer overflow in prb_calc_retire_blk_tmo()
hinic3: handle auxiliary device ID allocation failure
net: flush skb_defer_nodes in dev_cpu_dead()
ice: fix stats array overflow when VF requests more queues
ice: rebuild ring stats arrays instead of reallocating them in place
ice: extract ice_vsi_get_num_qs()
ice: extract ice_vsi_new_stat_arrays()
ice: extract __ice_vsi_free_stats()
nfp: hold IPsec RX state under the XArray lock
[-] sctp: hold asoc or transport before mod_timer() in timer handlers
sfc: add multipf support
cxl/memdev: Add support for multi PF devices
cxl/region: Add region reference in memdev attach
driver core: Rely on supplier driver binding at link creation
net: ethernet: ravb: Add gPTP support for Gen4
dt-bindings: net: renesas,etheravb: Add optional gPTP phandle for Gen4
net: ethernet: ravb: Add callback for gPTP clock index
net: ethernet: ravb: Add callback for gPTP probe
net: ethernet: ravb: Replace gPTP flags with callbacks
net: ethernet: ravb: Propagate error from ptp_clock_register()
net: ethernet: ravb: Remove redundant argument to ravb_ptp_init()
net: ethernet: ravb: Simplify gPTP start and stop
net: ethernet: ravb: Move programming of gPTP timer interval
net: ethernet: ravb: Remove gPTP control from WoL setup and restore
net: emac: move setting of netops to fix crash
net: phy: realtek: add LED support for RTL8261C/D
net: phy: realtek: apply SerDes lane polarity on RTL8261C/D
dt-bindings: net: realtek,rtl82xx: Document RTL8261C/D PHYs
net: ena: fix MMIO read buffer leak on probe failure
net: ena: fix PHC cleanup on probe failure
net/ncsi: Fix Use-After-Free in NCSI teardown using synchronize_rcu
net: xps: reject an out of range traffic class
net/sched: act_ct: fix helper UAF due to extensions realloc
net/sched: act_ct: remove 'add_helper' dead code
net/sched: act_ct: avoid modifying shared unconfirmed ct entry
net: openvswitch: conntrack: fix helper UAF due to extensions realloc
net: openvswitch: conntrack: remove 'add_helper' dead code
net: openvswitch: conntrack: avoid modifying shared unconfirmed ct entry
net: mediatek: fix PPE resource leak on remove
net: cap skb->queue_mapping when the tx queue is picked
net: stmmac: fix a divide by zero in stmmac_xdp_xmit_xdpf()
net: stmmac: ethtool: ignore inapplicable per-queue coalesce fields
sctp: carry peer capabilities across an INIT collision
net: bcmasp: fix MDIO child device leaks
ipv4: fib: treat an unbuildable encapsulation as a nexthop mismatch
net/sched: act_ife: validate metadata length before decoding
dt-bindings: net: nvidia,tegra234-mgbe: Add missing properties
w5100: detect carrier state using link status bit and optional interrupt
dt-bindings: net: wiznet,w5100: add link status interrupt
dt-bindings: net: wiznet,w5100: convert to DT schema
selftests: ovpn: validate peer VPN addresses
ovpn: reject invalid peer VPN addresses
ovpn: reject multipeer peers without VPN addresses
ovpn: reject duplicate peer VPN addresses
ovpn: always unhash old VPN addresses before rehashing
ovpn: replace bind when clearing stale local source
ovpn: replace bind when learning local endpoint
ovpn: validate peer state before caching UDP dst
ovpn: track UDP socket route key for peer dst cache
ovpn: skip UDP source validation for unspecified addresses
ovpn: preserve IPv6 scope id for netlink peer endpoints
tipc: make conn_idr teardown safe
tipc: stop the listener before draining connections
[-] sctp: discard the rest of the packet on a stale-cookie error
net: usb: qmi_wwan: add Quectel EG120K-EA
net: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean read
net: atl1e: fix soft lockup on out-of-range hw_next_to_clean read
net: atl1c: fix soft lockup on out-of-range tpd_cons read
net: stmmac: rework stmmac_rx to support XDP rx multi-buff
xfrm: iptfs: hold a device reference while packets are queued
ieee802154: mcr20a: fix 1-byte out-of-bounds read in mcr20a_handle_tx()
ieee802154: mcr20a: drop corrupted RX frames instead of reading 125 stale bytes
ieee802154: cc2520: flush fifop_irqwork before destroying buffer_mutex in probe
ieee802154: cc2520: ensure tailroom before skb_put() in promiscuous TX
ieee802154: ca8210: validate data_ind length upfront in ca8210_skb_rx()
ieee802154: ca8210: prevent stack buffer overflow in hwme_get_request_sync()
ieee802154: ca8210: prevent stack buffer overflow in ca8210_rx_done()
mac802154: rx: ensure tailroom before appending CRC
mac802154: rx: fix skb leak in beacon and mac_cmd rx paths
af_unix: skip consumed OOB skb and pull consumed bytes in unix_stream_read_skb()
af_unix: decrement u->inq_len when skipping unread OOB skb in manage_oob()
fou: reject omitted FOU_ATTR_IPPROTO on FOU_ENCAP_DIRECT
net: dsa: mv88e6xxx: 88E6191X and 88E6193X have no PTP
net: mctp: add MCTP_OPT_ROUTE_SRCADDR getsockopt
ip_gre: Reject enabling collect metadata through changelink
net: stmmac: request the MDIO reset GPIO only once
net: ethernet: cortina: Scale Gemini RX queues to system memory
net: ethernet: cortina: Manage RX buffers with page_pool
net: ethernet: cortina: Keep shared free queue parent-owned
net: rnpgbe: Add link status handling support
net: rnpgbe: Add receive mode support
net: rnpgbe: Add basic RX data path support
net: rnpgbe: Add basic TX packet transmission support
net: rnpgbe: Add interrupt handling
arm64: dts: amlogic: add T7 peripheral nodes
dt-bindings: net: meson-dwmac: add T7 support
spi: dt-bindings: amlogic,meson-gx-spicc: add T7 compatible
net: mvneta: clear XDP pfmemalloc flag between frames
net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist
[-] ice: roll back the port VLAN when ice_eswitch_br_set_pvid() fails
net/iucv: require IUCV for AF_IUCV sockets
net: wwan: qcom_bam_dmux: Assign restricted DMA pool to remote processor
dt-bindings: net: qcom,bam-dmux: Add memory-region and qcom,vmid properties
net: tun: fix race condition between tun_attach and tun_get_user with XDP
ipv4: reject partial checksums covering the IP header
net: validate virtio checksum start after network header
net: wan: lapbether: validate frame length and headroom in lapbeth_rcv() and xmit
atm: br2684, pppoatm: add missing pskb_may_pull() and headroom checks
net/rds: fix incoming message refcount leak and header bounds check in rds_recv.c
ipmr: validate IPv4 header length in reg_vif_xmit() and zero iphdr in ipmr_get_route()
netlabel: cipso_v4: reject empty MLS level/cat lists and zero tail in cipso_v4_delopt()
net/packet: zero-pad spkt_device and preserve sa.origlen across MSG_PEEK
net: lapb: fix uninitialized stack frame fields in lapb_decode()
6lowpan: add missing pskb_may_pull() checks in IPHC and NHC compression
net: llc: clean up unaccepted child sockets in llc_ui_release()
sctp: copy zeroed stats to user in sctp_getsockopt_pr_streamstatus() when !streamoute
net/tcp: check rnext_key for NULL in tcp_ao_prepare_reset()
tipc: fix TLV out-of-bounds read in tipc_nl_compat_net_set() and depth mask
ppp: pptp: fix out-of-bounds read on short payload_len in pptp_rcv_core()
kcm: fix socket memory accounting leak on TX completion, error, and close
phonet: pep: fix out-of-bounds reads in pep_ctrlreq_error() and pep_sock_accept()
mctp: route: verify socket ownership in mctp_lookup_prealloc_tag()
net: qrtr: ns: validate msglen and sq_port in qrtr_ns_worker() and ctrl_cmd_bye()
net: qrtr: fix kernel stack infoleak in qrtr_getname() and qrtr_ioctl()
net: qrtr: use u32 for port in qrtr_port_assign() and __qrtr_bind()
net/sched: ematch: check nla_put_nohdr() return value in tcf_em_tree_dump()
ipv6: calipso: fix 8-bit hdrlen overflow and missing pskb_may_pull() in hop-by-hop options
ipv6: fix payload_len inflation in ip6_xmit() when IPV6_RTHDRDSTOPTS is set without IPV6_RTHDR
ipv6: exthdrs: copy old IPv6 header before skb_mac_header_rebuild() in ipv6_rpl_srh_rcv()
ipv6: sr: fix 16-byte kernel heap leak in seg6_genl_set_tunsrc()
ethtool: tsinfo: release net_device reference in ethnl_tsinfo_start()
net: bridge: fail link info that does not fit in a netlink attribute
rtnetlink: pass extack to ndo_bridge_getlink()
net: skbuff: fix pull-bound underflow in skb_checksum_setup_ipv6()
net: stmmac: remove software VLAN tag stripping
net: stmmac: selftests: Prevent RXC from being disabled in LPI
vsock/vmci: enforce per-netns mode on the datagram receive path
vsock/vmci: make the cached_peer dgram decision race-safe
vsock/hv_sock: don't finish a connection on a socket being released
vsock: keep SOCK_SEQPACKET message boundaries on interrupted send
net: stmmac: fix error path cleanup in DMA descriptor ring allocation
net/sched: cls_flower: exact-match ERSPAN key when no mask supplied
net: ipconfig: bound DHCP option construction
net: phy: refuse to attach a PHY whose driver is being unbound
net: phylink: unwind the PHY binding when bringup fails late
[-] packet: use ubuf_info completion for TX_RING packets
[-] virtio_net: copy zerocopy frags in start_xmit without NAPI
tg3: use random MAC address when tg3_get_device_address fails
[-] selftests: net: test untracked NA recovery of FAILED neighbors
[-] ipv6: update NUD_FAILED neighbors from NA messages
i40e: xsk: fix multi-buffer XDP_PASS skb construction
i40e: keep q_vectors array in sync with channel count changes
i40e: do not expose netdev too early
i40e: fix potential UAF in i40e_vsi_setup()'s error path
i40e: avoid deadlock when calling unregister_netdev()
i40e: make ring pointers unreachable before freeing via rcu
i40e: avoid null ptr dereference in i40e_ptp_stop()
i40e: unregister netdev before clearing VSI on reinit failure
bonding: crypto offload enabled, non-offload slave failover, rekey failed
net: macb: quiesce IRQs and drain BH on interface close
net: macb: propagate RX ring refill errors
net: macb: never give hardware a NULL RX buffer
[-] net: macb: take bp->lock around NCR read-modify-writes
net: usb: qmi_wwan: add common Huawei modem IDs
[-] selftests: mptcp: cover IP_RECVERR sockopt propagation
[-] mptcp: propagate RECVERR sockopts to subflows
[-] mptcp: sockopt: factor inet_flags propagation into a mask
[-] mptcp: support MSG_ERRQUEUE on the parent socket
net: ethernet: mediatek: only enable WED for ARM64 architecture
selftests/net/openvswitch: add SCTP flow key test across conntrack NAT
selftests/net/openvswitch: add SCTP flow key test over IPv6
net: phy: microchip_t1s: fix collision detection for LAN867X Rev.D0
microchip: lan865x: enable PHY interrupt via virtual IRQ
net: ethernet: oa_tc6: deliver the PHY interrupt to phylib
net: phy: microchip_t1s: fix collision detection on PLCA status change
amd-xgbe: fix comm_ownership mutex deadlock on SFP module removal
[-] net/sched: fix potential stack infoleak in em_text_dump()
pfcp: fix socket lifetime on netdevice registration failure
[-] eth: fbnic: Avoid rounding zero ring sizes
net: stmmac: add tc-mqprio qdisc offload
misc: lan966x-pci: dts: add fdma interrupt to overlay
misc: lan966x-pci: dts: extend cpu reg to cover PCIE DBI space
net: lan966x: add PCIe FDMA XDP support
net: lan966x: add PCIe FDMA MTU change support
net: lan966x: add PCIe FDMA support
net: lan966x: add shutdown callback to stop the FDMA on reboot
net: lan966x: clear FDMA interrupt stickies after switch reset
net: lan966x: add FDMA ops dispatch for PCIe support
net: lan966x: use a dedicated device for DMA operations
net: lan966x: export FDMA helpers for reuse
net: lan966x: add FDMA LLP register write helper
net: microchip: fdma: add PCIe ATU support
net: microchip: fdma: rename contiguous dataptr helpers
MAINTAINERS: add FDMA library to Sparx5 SoC entry
[-] net/mlx5: Bridge, don't fail unlink of untracked/unsupported peer ports
[-] net/mlx5: Bridge, don't fail switchdev events of sibling eswitch ports
bonding: 3ad: select a port when the TX array is empty
net: net_test: add tests for bounded GSO segmentation
net: core: resegment oversized TCP GSO skbs
net: gso: support bounded TCP segmentation
net: core: factor out the GSO device limit check
net: ti: am65-cpsw-switchdev: flush dynamic FDB entries by port on delete
net: dsa: netc: add PTP one-step timestamping support
net: dsa: netc: add PTP two-step timestamping support
net: dsa: netc: enable ingress port filtering lookup by default
net: dsa: netc: check return value of ntmp_ipft_delete_entry()
net: dsa: netc: use entry ID instead of pointer to track host flood rule
ptp: netc: export netc_timer_get_current_time() for cross-driver use
ptp: netc: remove unnecessary pcie_flr() call in probe
ptp: netc: use ioread64_lo_hi/iowrite64_lo_hi for 64-bit register access
r8169: add get_channel support for ethtool
r8169: move struct ethtool_ops
r8169: add support and enable rss
r8169: enable new interrupt mapping
r8169: add support for new interrupt mapping
r8169: refactor RX path to prepare for multi-queue
r8169: prepare for multi irqs and napi
net: stmmac: qcom-ethqos: enable 2500BASE-X in integrated PCS
net: stmmac: advertise integrated PCS interfaces to phylink
net: stmmac: propagate platform mac_finish errors
selftests/net: packetdrill: check rcv_ssthresh vs scaling_ratio changes
net: pcs: rzn1-miic: Reset PRCMD state before unprotect sequence
[-] octeontx2-af: Add couple of mailbox support.
vxlan: use one headroom snapshot for neighbour replies
net: bcmgenet: add hwtstamp callbacks to restore PHY timestamping
net: stmmac: Setup TBS only if HW supports it
net: dsa: mt7530: leave the MDIO IRQ mappings to regmap-irq
net: dsa: mt7530: fix NULL dereference on unbind of MT7531 and MT7621
[-] tls: document TLS 1.3 hardware offload rekey handling
[-] selftests: net: add TLS hardware offload test
[-] tls: device: add tracepoints for the KeyUpdate path
[-] tls: device: add RX KeyUpdate support
[-] tls: device: add TX KeyUpdate support
[-] net/mlx5e: flag TLS RX records that failed device decryption
[-] net: skbuff: add skb->decrypt_failed bit
[-] tcp: fence collapse against rtx-queue tail when write queue is empty
[-] net: sched: re-validate parked decrypted skbs on requeue
[-] tls: prep helpers and refactors for HW offload KeyUpdate
[-] tls: split tls_set_sw_offload into init and finalize stages
[-] tls: add TLS 1.3 hardware offload support
[-] tls: reject rekey attempts on an existing HW-offloaded connection
[-] net/mlx5e: add TLS 1.3 hardware offload support
[-] net: tls: reject TLS 1.3 offload in chcr_ktls and nfp drivers
net: phy: marvell: keep WOL_EIE across interrupt reconfiguration
[-] i40e: trigger PF reset when re-enabling ATR via ethtool
[-] i40e: add devlink parameter for Flow Director ATR sample rate
[-] i40e: move ATR sample rate from ring to PF level
net: ti: icss-iep: Cancel compare work before releasing device resources
[-] ice: use ACL for ntuple rules that conflict with FDir
[-] ice: re-introduce ice_dealloc_flow_entry() helper
[-] ice: add ACL reset recovery and NTUPLE feature toggle
[-] ice: program ACL entry
[-] ice: create ACL entry
[-] ice: use plain alloc/dealloc for ice_ntuple_fltr
[-] Revert "ice: remove unused ice_flow_entry fields"
[-] ice: create flow profile
[-] ice: initialize ACL scenario
[-] ice: initialize ACL table
[-] ice: remove unused ICE_FD_FLUSH_REQ from PF state
[-] ice: rename shared Flow Director functions and structs
tcp: prevent stale tx timestamp keys on rtx fallback
[-] net/smc: Fix socket use-after-free in smc_shutdown()
kcm: Fix socket use-after-free in kcm_unattach()
[-] net: ethernet: mtk_wed: setup WDMA_RING_TX(0) for non-DBDC MT7986
[-] net: ethernet: mtk_wed: fix reset condition for rx wdma
[-] net: ethernet: mtk_wed: skip ring reset in wdma_tx_ring_setup for WED v3
mptcp: annotate lockless access to sk->sk_err
tcp: annotate lockless access to sk->sk_err
[-] net/sched: sch_cake: check negative transport offset in cake_overhead()
[-] net: fix OOB read in qdisc_pkt_len_segs_init() on negative transport offset
[-] net: stmmac: dwmac-sun8i: Fix EPHY clock leak in get_ephy_nodes()
[-] mlxsw: spectrum_flower: Fix port range register leak
[-] net/mlx5: Fix rev_entry reference leak in mlx5_tc_ct_shared_counter_get()
[-] net: cxgb: Fix skb reference leak in espibug_workaround_t204()
[-] tg3: Fix peer device double put in tg3_find_peer()
[-] net: dsa: vitesse-vsc73xx: Fix SPI device reference leak in vsc73xx_spi_probe()
net: xilinx: axienet: Free outstanding DMA buffers on dmaengine stop
[-] r8152: enable UPS for RTL8157 and RTL8159 QFN68
[-] r8152: extract rtl_fc_pause_pkt_en() and apply it to RTL8156/8157/8159
[-] r8152: add TGPHY register access for RTL8157 and RTL8159
[-] r8152: add rtl8157_unload and rtl8157_change_mtu
[-] r8152: split r8157_hw_phy_cfg into RTL8157 and RTL8159 variants
[-] r8152: split rtl8156_enable/up/down into per-chip-family functions
[-] r8152: split RTL_VER_17 into QFN68 and QFN100 package variants
[-] r8152: split r8156_init per chip and add missing init writes
[-] octeontx2-af: Fix rep link state sync and workqueue races
[-] tcp: add TCP_ECN and TCP_ECN_OPTION socket options
net: mdio: realtek-rtl9300: support non-default clock frequencies
net: mdio: realtek-rtl9300: reject duplicate MDIO bus IDs
net: mdio: realtek-rtl9300: convert "fwnode" left-overs to "of"
dt-bindings: net: realtek,rtl9301-mdio: add clock-frequency
dt-bindings: net: realtek,rtl9301-mdio: restrict MDIO buses by family
Merge https://kernel.googlesource.com/pub/scm/linux/kernel/git/netdev/net
[+] net/sched: fix potential stack infoleak in em_text_dump()
[+] tcp: remove dead code in tcp_rcv_state_process()
[+] net: dsa: mv88e6060: publish the OF module alias
[+] eth: fbnic: Avoid rounding zero ring sizes
[+] Merge branch 'net-stmmac-more-selftest-related-fixes'
[+] net: stmmac: selftests: Account for alignment shift on dwmac1000 for Jumbo test
[+] net: stmmac: size the RX buffers from the frame length, not the MTU
[+] net: stmmac: dwmac4: Use the correct bufzise when the len is exactly 8K
[+] net: stmmac: selftests: Capture all packets for vlan checks
[+] net: stmmac: selftests: Check the dev->features for S-TAG offload testing
[+] net: stmmac: selftests: Validate EEE based on the actual LPI timer value
[+] net: stmmac: selftests: Support running selftests on DSA conduits
[+] net: devmem: document that bind-tx is unprivileged by design
[+] sctp: hold asoc or transport before mod_timer() in timer handlers
[+] Merge branch 'packet-fix-packet_tx_ring-data-corruption-on-skb_orphan'
[+] packet: use ubuf_info completion for TX_RING packets
[+] virtio_net: copy zerocopy frags in start_xmit without NAPI
[+] sctp: discard the rest of the packet on a stale-cookie error
[+] Merge branch '100GbE' of git://git.kernel.org/pub/scm/linux/kernel/git/tnguy/next-queue
[+] net: dsa: vitesse-vsc73xx: Fix SPI device reference leak in vsc73xx_spi_probe()
[+] net: stmmac: dwmac-sun8i: Fix EPHY clock leak in get_ephy_nodes()
[+] net/mlx5: Fix rev_entry reference leak in mlx5_tc_ct_shared_counter_get()
[+] Merge branch 'net-mlx5-bridge-fix-remaining-switchdev-ownership-gaps-on-merged-eswitch'
[+] net/mlx5: Bridge, don't fail unlink of untracked/unsupported peer ports
[+] net/mlx5: Bridge, don't fail switchdev events of sibling eswitch ports
net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs()
net: pcs: xpcs: fix clock reference leak on xpcs_init_clks failure
selftests: net: nl_nlctrl: check the op ids in the policy map
genetlink: report the real command id for dump-only ops in policy dumps
vsock: remove dev_hold() and dev_put() in __vsock_deliver_tap_skb()
net: macb: fix dma_alloc_coherent() leak on macb_alloc() error paths
Merge branch 'net-dsa-mv88e6xxx-ethtool-n-tuple-follow-ups'
net: dsa: mv88e6xxx: check the port when deleting a policy rule
net: dsa: mv88e6xxx: check the port when reading back a policy rule
net: hisilicon: hns_dsaf_mac: fix mdio device leak in hns_mac_register_phy()
net: ethernet: ti: netcp: fix pm_runtime usage counter leak on error
net: spacemit: clear TX descriptor on fragment mapping failure
Merge branch 'net-dsa-realtek-eee-support-for-rtl8365mb-vc'
net: dsa: realtek: rtl8365mb: add EEE support
net: dsa: realtek: rtl8365mb: extract PHY OCP address halves with FIELD_GET
net: phy: realtek: use C45 for RTL8365MB-VC internal PHY MMD access
Merge branch 'net-sched-complete-action-notification-accounting'
net/sched: act_api: budget TCA_ROOT_EXT_WARN_MSG in notify skbs
net/sched: add get_fill_size() to the five actions that lack one
net/sched: act_mirred: account for TCA_MIRRED_BLOCKID in get_fill_size
fsl/fman: Fix clk reference leak in read_dts_node()
tg3: clean up PHYLIB resources on probe failure
Merge branch 'udp-two-fixes-for-the-4-tuple-hash-table'
udp: remove a disconnected socket from the 4-tuple hash table
udp: relocate a connected socket in the 4-tuple hash table on re-connect
Merge tag 'for-net-2026-09-21' of git://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth
Merge tag 'wireless-next-2026-09-21' of https://git.kernel.org/pub/scm/linux/kernel/git/wireless/wireless-next
ipv6: Fix dst leak for uncached routes.
netlink: remove dev_hold() and dev_put() in __netlink_deliver_tap_skb()
Merge branch 'net-bridge-vlan-broadcast-fwding-path-optimizations'
net: bridge: avoid VLAN lookups for flood neighbour suppression
net: bridge: avoid egress VLAN lookups when flooding
net: bridge: introduce a forwarding destination structure
net: bridge: vlan: use an RCU array for large flood sets
net: bridge: consider only port-VLAN members when flooding
net: bridge: vlan: introduce a list of port-VLANs in the master VLAN
net: bridge: vlan: cache the pvid vlan entry directly
net: bridge: factor out port flooding
net: bridge: factor out common flood completion handling
octeontx2-af: Allocate ikpu2 with ARRAY_SIZE()
net/mlx5e: fix swapped IPv6 IPsec policy masks
selftests: net: fix CONFIG_SYSCTL sort order in configs
net/sched: Avoid quadratic handle scan in qdisc_alloc_handle
net: hip04: use 16-bit byte order for HI13X1 TX fields
selftests/net: run tun tests in a dedicated network namespace
net: mvneta: rely on napi_build_skb() in mvneta_swbm_build_skb()
net: xscale: publish the IXP46x PTP OF module alias
net: usb: sr9700: include receive overhead in the length check
dpll: use exact lookup for reference sync pin id
net: protocol: use assign_bit() where applicable
net: alacritech: publish the PCI module aliases
selftests: net: fou_mcast_encap: load the fou module
bnge: update HSI
net: don't require the hwtstamp NDOs when a PHY provides timestamping
Merge branch 'net-devmem-remove-gen_pool-from-dma-buf-allocations'
net: devmem: batch net_iov allocations into the page_pool cache
net: devmem: embed net_iov_area in binding
net: devmem: replace gen_pool with freelist
tls: drop duplicate check_app_limited in tls_push_sg
ipv6: Prevent rt6_insert_exception() for dying fib6_info.
octeontx2-af: Fix memory scaling limitation in SR-IOV mode
Merge branch 'ptp-ocp-add-tap-cpld-support-for-adva-timecard-x1'
ptp: ocp: add TAP CPLD flashing via devlink
ptp: ocp: add TAP CPLD access for ADVA TimeCard X1
ptp: ocp: fix dpll cleanup on probe error
ptp: ocp: unregister devlink before detach on probe error
sfc: fix CONFIG_CXL_MEM dependency
Merge tag 'nf-26-09-18' of git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf
net: microchip: vcap: Stop selecting DEBUG_FS for KUnit tests
net: dsa: motorcomm: fix unused-function warning
Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame()
Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO
Bluetooth: btintel_pcie: validate device-supplied DMA indices
Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough
dt-bindings: net: wireless: Convert WL1251 to DT schema
libertas: mesh: remove unused and undocumented sysfs attribute groups
wifi: mac80211: fix multi-link UHR association
wifi: nl80211: rename no-ACK bitmap to TID bitmap
wifi: radiotap: correct EHT TB U-SIG 1 B20:25
wifi: ieee80211: fix FTM bufferable check
wifi: mac80211: allow advertising 20 MHz-only non-AP STA
wifi: mac80211: WARN on 40 MHz HT/HE mismatch
wifi: mac80211: tests: fix memory leak
wifi: mac80211: use assign_bit() where applicable
Merge tag 'ath-next-20260916' of git://git.kernel.org/pub/scm/linux/kernel/git/ath/ath
net: use assign_bit() where applicable
net: gro_cells: add drop reasons to gro_cells_receive()
Merge branch 'add-support-for-phy-chip-and-firmware'
net: phy: realtek: add support for RTL8261D_VM
net: phy: realtek: add firmware for RTL8261D
net: phy: realtek: add support for RTL8261CE_CG
r8169: set eee_enable_default base on LPI cap
net: hibmcge: fix spelling mistakes in comments and identifiers
net: remove ndo_do_ioctl handler
ieee802154: avoid deprecated .ndo_do_ioctl callback
selftests: tc-testing: add a lateral-drift hfsc classify-walk test
net/sched: sch_hfsc: bound the classify inner-filter walk with a drift budget
Merge branch 'nbl-driver-for-nebulamatrix-nics'
net/nebula-matrix: add core driver architecture and HW layer initialization
net/nebula-matrix: add minimum nbl build framework
vlan: require the MAC header to be present in __vlan_insert_inner_tag()
net: usb: catc: bound the RX packet length in catc_rx_done()
ax88179_178a: Fix endianness of pause watermark register
net/sched: reject IDR error pointers when deleting actions
net: dsa: motorcomm: avoid unused variable warning
net: allow IFLA_INET_CONF messages when NLA_F_NESTED unset
net/mlx5e: advertise MACsec offload only when supported
Merge branch 'ip6_gre-support-per-netns-device-unregistration'
ip6_gre: Support per-netns device unregistration.
ip6_gre: Protect ip6gre_net.tunnels[][] with mutex.
ip6_gre: Unlink ip6gre_tunnel_unlink() from ->dellink().
ip6_gre: Clear ign->fb_tunnel_dev in ip6gre_exit_rtnl_net().
ip6_gre: Convert ip6gre_net.tunnels[][] to hlist.
ip6_gre: Initialise ign->tunnels_wc[0] before register_netdev().
Merge branch 'net-mlx5-more-hws-misc-enhancements'
net/mlx5: HWS, Remove unneeded WRITE_ONCE in post send
net/mlx5: HWS, Handle timeout draining the send queue for FW STEs
net/mlx5: HWS, Add timeout mechanism to draining send queues
net/mlx5: HWS, Replace kzalloc with kzalloc_obj
net/mlx5: HWS, Fix error message in mlx5hws_cmd_generate_wqe
net/mlx5: HWS, Return meaningful error code in hws_send_wqe_fw
Merge branch 'net-dsa-microchip-add-support-for-ksz8995xa-ks8995xa'
net: dsa: ks8995: Delete surplus driver
net: dsa: microchip: Support Microchip KSZ8995XA / KS8995XA
net: dsa: tag_ks8995: Add the KS8995 tag handling
dt-bindings: net: dsa: microchip: Add KSZ8995XA
tcp: Set unhashed_state in inet_twsk_hashdance_schedule().
net: phy: Fix device_set_wakeup_enable() reference in kernel-doc
net: phy: factor out legacy PHY fixup support and make it always built-in
selftests: net: update netfilter netlink config
sctp: avoid livelock while updating retransmit path
Merge branch 'eth-fbnic-a-collection-of-fixes'
eth: fbnic: Handle FW mailbox completions flagged with an error
eth: fbnic: Set AW_FLUSH_MODE alongside AW_FLUSH when flushing the mailbox
eth: fbnic: reset num_napi when the napi vectors are freed
eth: fbnic: use the Rx queue napi pointer to find the napi vector
eth: fbnic: Handle maximum standalone channels
net: ethtool: keep rtnl_lock for the ioctl self test
net: phy: micrel: Advance register data pointer in write loop
ip6_gre: Call ip6erspan_tunnel_unlink_md() in ip6erspan_changelink().
net: ionic: free VF resources on remove
ipv6: do not let ipv6_find_hdr() return an offset past the packet end
sfc: add X4D PF support
net: ethernet: mtk_eth_soc: unregister net_devices in case of probe failure
Merge branch 'hsr-lockless-hsr_fill_info'
hsr: no longer rely on RTNL in hsr_fill_info()
hsr: annotate data-race around hsr->sequence_nr
Merge branch 'vlan-lockless-vlan_fill_info'
vlan: no longer rely on RTNL in vlan_fill_info()
vlan: annotate data-races in vlan_dev_priv fields
net: dpaa2: ptp: fix device node reference leak on remove
net: gue: reject invalid REMCSUM offsets
Merge branch 'net-a-sockopt_t-quirk-for-the-options-that-write-past-optlen'
ipv4: igmp: convert ip_mc_msfget() to sockopt_t
net: add sockopt_expand_out()
net/sched: act_ct: don't WARN on benign flow_offload_alloc() failure
Merge branch 'net-rmnet-lockless-rmnet_fill_info'
net: rmnet: no longer rely on RTNL in rmnet_fill_info()
net: rmnet: annotate data-races around mux_id
net: rmnet: annotate data-races around port->data_format
net: fs_enet: fix platform info memory leak on remove
tipc: reject invalid and unexpected GRP_ACK_MSG to prevent bc_ackers underflow
dt-bindings: net: snps,dwmac: allow stmmaceth-ocp reset name
netfilter: nf_tables: skip expired catchall elements on insert and delete
netfilter: ctnetlink: fix suspicious RCU usage in expect_iter_name
ipvs: revalidate ihl before icmp_send
netfilter: nft_synproxy: use the family-aware checksum helper
netfilter: ip6t_rt: fix zero-address non-strict match out-of-bounds read
netfilter: ip6t_rpfilter: reject routes without inet6_dev
netfilter: nfnetlink_queue: hold nfnl mutex in event notifier
netfilter: flowtable: publish HW_DEAD after worker is done
tipc: replace deprecated strcpy with strscpy in tipc_bearer_get_name()
ipv4: fib: fix data-race and stale genid check around nh->nh_saddr
net: txgbe: fix FDIR filter restore for VF rules
vsock: ignore empty child namespace mode writes
Merge branch 'devlink-netlink-spec-fixes'
devlink: validate the port index in the rate set request
netlink: specs: devlink: add pad to the subsets carrying padded u64s
netlink: specs: devlink: describe the netns id in the parent-dev nest
netlink: specs: devlink: populate multi-attr attrs for region read and line card
devlink: generate the port function policy from the spec
netlink: specs: devlink: complete the port function nest
netlink: specs: devlink: describe DEVLINK_ATTR_NESTED_DEVLINK
netlink: specs: devlink: drop the stale port dump reply value
devlink: fix the enum behind DEVLINK_ATTR_RELOAD_LIMITS
net: stmmac: propagate PTP init failures in __stmmac_open() and stmmac_resume()
Merge branch 'net-mlx5-sd-lag-and-devcom-stability-fixes'
net/mlx5: LAG, reload IB reps of LAG master before the rest
net/mlx5: SD, unload reps on shared FDB create error path
net/mlx5: devcom, Base component size on linked devices
Documentation: net: dsa: Fix bracket
octeontx2-af: use seq_file for rsrc_alloc debugfs
docs: ethtool: Fix bracket
docs: networking: radiotap: Fix bracket
net: pcs: rzn1-miic: Fix config array initialization
rust: net: netlink: Migrate to zerocopy's IntoBytes
netlink: specs: nlctrl: let getfamily take a family id
netlink: specs: nlctrl: fix the policy attribute numbering
Merge branch 'net-phy-qca808x-fix-the-active-high-led-polarity-mode'
net: phy: qca808x: keep an explicit active-high LED across the reset
net: phy: qca808x: accept the active-high LED polarity mode
selftests/tc-testing: add u32 manual table handle IDR tests
net/sched: cls_u32: fix manual hash table handle IDR aliasing
eth: fbnic: Fix payload page pool error cleanup
netkit: no longer rely on RTNL in netkit_fill_info()
netlink: specs: netdev: update doc for xsk tx-checksum and zc-max-segs
mailmap: add entry for Wei Wang
[+] ice: remove unused ICE_FD_FLUSH_REQ from PF state
[+] ice: rename shared Flow Director functions and structs
Bluetooth: mgmt: fix race in read_unconf_index_list()
Bluetooth: L2CAP: validate frame length before control and FCS access
Bluetooth: ISO: balance the parent hold in hci_bind_bis()
Bluetooth: hci_sock: validate event length before filtering
Bluetooth: hci_sock: reject out-of-range OCF values
Bluetooth: ISO: release unused CIS holds after channel attach
Bluetooth: hci_conn: fix CIS hold ownership on reuse
Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel
Bluetooth: btnxpuart: Fix skb leak in nxp_process_fw_dump()
Bluetooth: SMP: reject Security Request over BR/EDR
wifi: mac80211: pass error station if non-STA transmit was requested
wifi: mac80211: pass station to ieee80211_tx_skb_tid
wifi: mac80211: report to cfg80211 when no STA is known for a frame
wifi: cfg80211: add attribute for TX/RX denoting there is no station
wifi: mac80211: rework RX packet handling
wifi: mac80211: refactor RX link_id and station handling
wifi: mac80211: change public RX API to use link stations
wifi: iwlwifi: use link_sta internally to the driver
MAINTAINERS: Replace wireless.wiki.kernel.org links
wifi: brcmfmac: log the firmware status when a connect fails
wifi: brcmfmac: advertise firmware fast roam offload support
wifi: brcmfmac: report port authorization after offloaded roaming
wifi: brcmfmac: add PMK programming for firmware roaming offload
wifi: brcmfmac: detect firmware FBT and OKC support
wifi: nl80211: add fast roam offload extended feature
wifi: rt2x00: Use device-managed register buffers
wifi: wfx: fix error code on unsupported firmware
wifi: wfx: fix use-after-free of the cooling work on device removal
wifi: mac80211_hwsim: overwrite report SKB
wifi: mac80211_hwsim: fix potential channel crash
wifi: mac80211: don't reset the TXQ scheduling round number
wifi: mac80211: Fix the return value in mesh_path_add() kernel-doc
wifi: mac80211: fix stats/preemption in ieee80211_tx_control_port()
wifi: mac80211: report 900MHz channel for S1G band radiotap header
wifi: radiotap: add S1G TLVs and channel frequency
wifi: mac80211_hwsim: send config events to the radio's net namespace
wifi: mac80211: fix monitor filter refcount leak
wifi: ath12k: add support to load shared firmware on multiPD
wifi: ath9k: use rcu_dereference_bh() for sta->rates in ath_merge_ratetbl()
wifi: ath12k: preserve PPDU state across monitor status buffers
wifi: ath12k: Free allocated external IRQs on request_irq() failure
wifi: ath12k: Free allocated CE IRQs on request_irq() failure
wifi: ath12k: fix truncated TX buffer DMA address in MSDU ext descriptor
wifi: ath12k: fix stale skb pointers after aligned TX payload shift
wifi: ath12k: fix DMA unwind for ext MSDU descriptor retry
wifi: ath12k: clear dangling channel pointers on error paths
wifi: ath12k: use kernel types instead of userspace stdint types
wifi: ath12k: advertise AP_VLAN interface mode for IPQ5332
wifi: ath11k: fix locking problem in ath11k_dp_rx_tid_del_func()
wifi: ath11k: modify null check logic in ath11k_ce_rx_post_pipe()
wifi: mac80211: queue frames while off-channel
mac80211: tx: Use info->flags in ieee80211_tx_h_select_key()
wifi: mac80211: serialize debugfs netdev rename with recreate
wifi: mac80211: avoid trimming injected FCS twice
wifi: nl80211: add support to configure 6 GHz non-HT duplicate transmission
wifi: mac80211: fix swapped fq_overlimit/fq_overmemory in aqm debugfs
wifi: libertas: validate firmware block extents
wifi: libertas_tf: validate firmware block extents
wifi: mwifiex: add dt flag to avoid conflict with platform reg domain
dt-bindings: net: wireless: add flag marvell,invalid-reg-hint-in-rom
dt-bindings: net: wireless: wfx: discourage OOB IRQ with SDIO
wifi: wfx: fix possible device hang during init
wifi: mac80211: store the ack skb before building the header
wifi: mac80211: set flags/ctrl_flags before ieee80211_build_hdr()
wifi: mac80211: report multicast transmission from lookup_ra_sta()
wifi: mac80211: unshare the skb before building the header
wifi: mac80211: remove cookie from __ieee80211_subif_start_xmit()
wifi: mac80211: tx: simplify control port frame transmission
wifi: mac80211: fix IEEE80211_TX_CTL_REQ_TX_STATUS mixup
wifi: mac80211: make ieee80211_is_tx_data() internal
wifi: mac80211: remove ieee80211_sta_ps_transition() return value
wifi: nl80211: don't export nl80211_mlo_reconf_add_done()
wifi: mac80211: drop encap offload frames with a tainted key
wifi: mac80211: don't send encap offload frames unencrypted
wifi: mac80211: fix key selection for encap offload frames
wifi: mac80211: fix unauthorised port check for encap offload
wifi: update UHR to Draft_P802.11bn D1.5
wifi: skip DUO params when looking for NPCA
wifi: b43legacy: Use flexible array for DMA metadata
wifi: mwifiex: Use flexible array for RX reorder table
wifi: cfg80211: remove duplicate s1g_cap kerneldoc
wifi: mac80211: don't seed an S1G sta's last_rate
wifi: ath11k: unregister PM notifier on QMI init failure path
wifi: ath11k: fix NULL dereference in ahb remove when QMI init incomplete
wifi: ath11k: fix sporadic WLAN initialization failures
dt-bindings: wireless: ath12k: drop qcom,ath12k-calibration-variant
wifi: ath12k: support calibration-variant from device tree
mailmap: add entries for Aaradhana Sahu
mailmap: update email address for Vasanthakumar Thiagarajan
mailmap: add entries for Manish Dharanenthiran
mailmap: add entries for Baochen Qiang
mailmap: add entries for Sriram R
mailmap: add entries for Rameshkumar Sundaram
wifi: ath11k: disable interrupts during firmware crash recovery
wifi: ath11k: implement CE interrupt enable/disable for AHB
wifi: ath11k: Fix possible memory leak in ath11k_dp_srng_setup()
wifi: ath12k: skip setting country code during registration when unchanged
wifi: ath12k: protect new_alpha2 access with base_lock
wifi: ath12k: use per-radio ab in ath12k_mac_hw_register()
wifi: ath12k: signal regd update completion when reg event is dropped
wifi: ath12k: remove skb->data check in ath12k_wmi_process_tpc_stats()
Test results