[GIT PULL] BPF fixes for 6.17-rc6

[Alexei Starovoitov <alexei.starovoitov@gmail.com>]

Hi Linus,

The following changes since commit 8f5ae30d69d7543eee0d70083daf4de8fe15d585:

  Linux 6.17-rc1 (2025-08-10 19:41:16 +0300)

are available in the Git repository at:

  https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf.git tags/bpf-fixes

for you to fetch changes up to 91f34aaae06e425e4644afde92ddff949b6abb54:

  Merge branch 'bpf-reject-bpf_timer-for-preempt_rt' (2025-09-10 12:34:09 -0700)

----------------------------------------------------------------
A number of fixes accumulated due to summer vacations

- Fix out-of-bounds dynptr write in bpf_crypto_crypt() kfunc
  which was misidentified as a security issue (Daniel Borkmann)

- Update the list of BPF selftests maintainers (Eduard Zingerman)

- Fix selftests warnings with icecc compiler (Ilya Leoshkevich)

- Disable XDP/cpumap direct return optimization (Jesper Dangaard Brouer)

- Fix unexpected get_helper_proto() result in unusual configuration
  BPF_SYSCALL=y and BPF_EVENTS=n (Jiri Olsa)

- Allow fallback to interpreter when JIT support is limited
  (KaFai Wan)

- Fix rqspinlock and choose trylock fallback for NMI waiters.
  Pick the simplest fix. More involved fix is targeted bpf-next.
  (Kumar Kartikeya Dwivedi)

- Fix cleanup when tcp_bpf_send_verdict() fails to allocate psock->cork
  (Kuniyuki Iwashima)

- Disallow bpf_timer in PREEMPT_RT for now. Proper solution
  is being discussed for bpf-next. (Leon Hwang)

- Fix XSK cq descriptor production (Maciej Fijalkowski)

- Tell memcg to use allow_spinning=false path in bpf_timer_init()
  to avoid lockup in cgroup_file_notify() (Peilin Ye)

- Fix bpf_strnstr() to handle suffix match cases (Rong Tao)

Signed-off-by: Alexei Starovoitov <ast@kernel.org>
----------------------------------------------------------------
Alexei Starovoitov (2):
      Merge branch 'selftests-bpf-fix-expression-result-unused-warnings-with-icecc'
      Merge branch 'bpf-reject-bpf_timer-for-preempt_rt'

Andrii Nakryiko (1):
      Merge branch 'fix-bpf_strnstr-len-error'

Daniel Borkmann (2):
      bpf: Fix out-of-bounds dynptr write in bpf_crypto_crypt
      selftests/bpf: Extend crypto_sanity selftest with invalid dst buffer

Eduard Zingerman (1):
      bpf: Update the list of BPF selftests maintainers

Ilya Leoshkevich (1):
      selftests/bpf: Fix "expression result unused" warnings with icecc

Jesper Dangaard Brouer (1):
      bpf, cpumap: Disable page_pool direct xdp_return need larger scope

Jiri Olsa (1):
      bpf: Check the helper function is valid in get_helper_proto

KaFai Wan (1):
      bpf: Allow fall back to interpreter for programs with stack size <= 512

Kumar Kartikeya Dwivedi (1):
      rqspinlock: Choose trylock fallback for NMI waiters

Kuniyuki Iwashima (1):
      tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork.

Leon Hwang (2):
      bpf: Reject bpf_timer for PREEMPT_RT
      selftests/bpf: Skip timer cases when bpf_timer is not supported

Maciej Fijalkowski (1):
      xsk: Fix immature cq descriptor production

Peilin Ye (1):
      bpf: Tell memcg to use allow_spinning=false path in bpf_timer_init()

Rong Tao (2):
      bpf: Fix bpf_strnstr() to handle suffix match cases better
      selftests/bpf: Add tests for bpf_strnstr

 MAINTAINERS                                        |   1 -
 kernel/bpf/Makefile                                |   1 +
 kernel/bpf/core.c                                  |  21 ++--
 kernel/bpf/cpumap.c                                |   4 +-
 kernel/bpf/crypto.c                                |   2 +-
 kernel/bpf/helpers.c                               |  16 ++-
 kernel/bpf/rqspinlock.c                            |   2 +-
 kernel/bpf/verifier.c                              |   6 +-
 net/ipv4/tcp_bpf.c                                 |   5 +-
 net/xdp/xsk.c                                      | 113 ++++++++++++++++++---
 net/xdp/xsk_queue.h                                |  12 +++
 .../testing/selftests/bpf/prog_tests/free_timer.c  |   4 +
 tools/testing/selftests/bpf/prog_tests/timer.c     |   4 +
 .../testing/selftests/bpf/prog_tests/timer_crash.c |   4 +
 .../selftests/bpf/prog_tests/timer_lockup.c        |   4 +
 tools/testing/selftests/bpf/prog_tests/timer_mim.c |   4 +
 .../selftests/bpf/progs/bpf_arena_spin_lock.h      |   4 +-
 tools/testing/selftests/bpf/progs/crypto_sanity.c  |  46 ++++++---
 .../testing/selftests/bpf/progs/linked_list_fail.c |   5 +-
 .../selftests/bpf/progs/string_kfuncs_success.c    |   8 +-
 20 files changed, 213 insertions(+), 53 deletions(-)