sys-kernel/hardened-kernel: bump v6.16.8

Signed-off-by: Alexander Miroshnichenko <alex@millerson.name>

sys-kernel/hardened-kernel/Manifest

@@ -1,10 +1,10 @@
-DIST gentoo-kernel-config-g16.tar.gz 5995 BLAKE2B cddb80d45169749c707d87efd186f7a981534aab2479b6c51790008ea61e9f9feac35d0d74b95dc18281e4b81771e09f259a1d9f216f5d7f806fa7cd6aeeb4d1 SHA512 f8114e645e1ab99e45703790b7e43c2fa9ee17b41a2265dccdd9187c122bf8b5a09ba918fbcf094aa899bb959f05d105ed474b75cdfa9a19c4d49fd138825647
+DIST gentoo-kernel-config-g17.tar.gz 6024 BLAKE2B 53ecea1c19cc83bc3f6e13ad3b2e813999a09e2b29526115480e8ea7b870da2f4728918713f8eb0b351730b2cdd9f75e7515dc99a9b34a4079f7d15a1cd78425 SHA512 a5a78da8027492a229f54bfbcddf4e8e14304280db01d856071a9eb1ed9cd86111254498c5546a9908d617a012c914e8ded0afad5bdf28e9f237e321b9ab0f63
-DIST kernel-aarch64-fedora.config.6.15.6-gentoo 294308 BLAKE2B 62b4c06f14572cf3ffda30e0d2d3f1d08d9c45b072888e2ffef7d771a88efecd84a463e9b42f6b676f13adc65ec95bfda9ebfa84cb722514bfb7212ffd08d3bc SHA512 058e072cfdfd0314e38f5b538fd82db4140844366f666ba2afd152ca584067ff53d0c63ae9a73be31dec49c69b4301b2a52e328fb4c712ef1f729d806abea950
+DIST kernel-aarch64-fedora.config.6.16.2-gentoo 297085 BLAKE2B 0adf857e4b81998357f6ee4f254a6c72a4f3556c68e21bda340137a66b5de7e696c4bacaa15f49885b0bc15672b86b0255c51e6a58f74cee0cf72b7c7fa45cec SHA512 e33e1c429e9678d9a86f87d9dac8ac49b8f0c6f7cef071e76b84698435215c97cb302d1f9352346a3f10e544b03bffbfe5ded509a921f363fe25a858d3e24405
-DIST kernel-i686-fedora.config.6.15.6-gentoo 261602 BLAKE2B aa195831ccd61cba9c0b7fde51af25d4accc2953c1fdd35c7b007aea4e2a747ce043b0aff90f71aff1b8dd42d22aa99a387fdbcab844edb40f962a0a1d0e0e41 SHA512 4600b2244b34889cbe6014858d012c208878f1815decbc17dd618bcd2a6f37908b7b869286bd2639f6a64ef73c7c199406edd08ed13cc7f4ba9273d76373222d
+DIST kernel-i686-fedora.config.6.16.2-gentoo 263837 BLAKE2B de77b1dcb3f8a14d83dd0133d6a19858ef15f8e850c0c70cfd1d3dbbccfe9aa0c5de84c7259ed59dcccc78dc5be49664b8cb1b916435540a6272a0177698e5ac SHA512 80433599bf4b50dd046111c182ace71700507db0e2a80806935b93a011c0a61653c4f5dd79630bb039ed268f14ca076c4d113db7d789dd325de2f66597dd3565
-DIST kernel-ppc64le-fedora.config.6.15.6-gentoo 245484 BLAKE2B b59792e2fe18e0b3ad8459bd5f7dedee3149505be63f15f5ca02b88e95eed0e4dfaf204f95a00761595092163d12967aa8a71ba13103682ded8dd9b70063412b SHA512 ca0915a6be9d0028c4f5d57a145d598fa1c2dc77700bbaeaee5116d611da476e3a3849bbe0bf84935c85946f100d1f0b824c7892651b943986cd8a4f042f5c29
+DIST kernel-ppc64le-fedora.config.6.16.2-gentoo 247451 BLAKE2B 19219e8ae6988cb5e80bff24fb1bcdafc1d87d3806133f10df6ed528fd0c6aaa0627f77098f3e036f900cd008b5f3a8da8f2e34bd3e8fb4a2aa4253edc1b7b7d SHA512 3db2fcd4a77fa5f4c0d775c20c4e4fb02c918f80dae251cc68f8d29bb4dda19a240a5f3e0e33f4d6dfcd6bfe1d664a79adf3e8537d17f03a8e451bc48d1eadb7
-DIST kernel-x86_64-fedora.config.6.15.6-gentoo 262707 BLAKE2B 4727bbee8f4458c2627d9f808c7baa1df2828844e92a1d6733b7ed1525e76b0b5664f224ef6e1697f949d64602fb2fcbbe913f68c9ddc008d5be01d29c7a847e SHA512 353e804ef2ee63ad8b353a52ea3c905f58668e4162bda6024a0201db1634250eaa782f30a1dd1220a6bc1df364c141167f4e2eacd221f47c022e3a23dc987afb
+DIST kernel-x86_64-fedora.config.6.16.2-gentoo 264934 BLAKE2B ad8ce402e5ffc1329d9cd8e2988f22540286af761158f22067918fc14223af6c27b5873782fc5f1dd12bd2b68101a537b438960dcb71ac4ded9effd9c4b19d02 SHA512 ea8c66dc9bdff50eb2c74259af6fb3f310ec06b2bb6a4cbb1f1ae3f138ff68e3f01f5871c7b18047859d76d43a1566e397c74fbce6a643f5ad97e12f0a545b15
-DIST linux-6.15.tar.xz 151168812 BLAKE2B 465596c6dc053ff3a3966302a906d3edb4f7ee1ef82f8c20b96360196d3414f5b1deeafa67b8340fcdecd3617280ba9b756d7073ad15c707865e256397b4af53 SHA512 d03788ffa8d8ae1b84ef1286bb44a08fc01432e509dfec6cccae5c5a5a47201d378aec2bcd21e6f0bbd1e625b26f47780c06ee9c1cef3775358f98b160923f30
+DIST linux-6.16.tar.xz 152620004 BLAKE2B 87bc4da7e89cc8265aebffea7ec6c09f711be24fee87cb1c03a264c03fd5a538d66aa806640835aa5103926e612cdfbc52d7c861d7f7065f1a8bb11d893b0921 SHA512 55a00f89ad6db6db2e26ff5dc5cfc96bbf6654e5bd5d17d2a3b944a47640367e54139716d230923187bebc6cb7756edc9511a620fb8abc6f32c50a658a734784
-DIST linux-6.x-sha256sums-20250801.asc 161137 BLAKE2B b2bf0bde731b85404a19a7da414530d7d5c5df672e79d49eb8d55ba57e51d86d53d2cd5e69c7413908c06e4ec7f2a743eb022d6011e81e51faf0b33c2c8086af SHA512 927477c663091ba0003f743d8c82e3116eb95f5f7c10b0443e058fd43d3d7c1746c866e02e11f3ffcf9ccc0dcf7c6958a6ac7c869ee998e1c592893728e2b1e7
+DIST linux-6.x-sha256sums-20250919.asc 170994 BLAKE2B a1082e77bf0a127dc8a256f722fab9087681d1be2b6f0a787171fb3eaaf899ce48f1f4647287e3b5f5f302131561588b0e6ee0a0d172b045034115e0620a88fc SHA512 e66b3334582ed3df4a6c79e252fdf803e208d8995b11b857d5ab80fc4f9c3260db546408a85d962e788f19be40c5bd4a513988983ea08ab3c247beea7adc3bb3
-DIST linux-gentoo-patches-6.15.8.tar.xz 85336 BLAKE2B 04e7f012c9375fac93fdbfd97a7450ed9022110c56eff2b9b76a856d83c2dab97da983c4c577c7df3f06ec889771f772f281d0ae837b3e07dee30fec79dad110 SHA512 cc51a68444a20c4f106fc16d6f6327d40372faf77fad8e76936a50f97102736166efffc107a405cfe8124b61dbf1370095b811d0172af9003d6e6eaca4effa64
+DIST linux-gentoo-patches-6.16.8.tar.xz 85692 BLAKE2B 21676e3d6e11913705c5aec2f6c23db0dca875487323c7b72ff9d367e9c52daca4b9676b91f44a3f51b45f2f110dad6902c3b99d500f54ba5a3266d839af2a4f SHA512 daa71cabd4d36bbc8cbdcb880ed4d76c6c995239d2a0c9c86749d86766ae362f896fb4e7da263b53dc3d81043eae8cc3351476cba62dea73b1529e4d661a9269
-DIST linux-hardened-v6.15.9-hardened1.patch 90401 BLAKE2B 227a8da20e051074ac40286f2355b395f57bc780c1d2b5a449e10a594cdc90107e820041f0b9659a9b247213d4a35f608269aab4baca0d10eb67f01216dd37ec SHA512 0201a13cc89d707433a88beb0eddb28fb9a00ab0c506b9356336087a0f0ada83de22421b79a16f7330d14968a457c5efbdeb735dc9a601a3f277851a20e41b3b
+DIST linux-hardened-v6.16.8-hardened1.patch 90418 BLAKE2B 7bebdb804572ee5c5b70d173450c07dabda8de5127cd4b212acc174ff35af8ead2f0b3c84daba93835aa0ceffc6b71d51e0b87b3e96cd8740d279536c378e6a6 SHA512 b82f3278234f3f1cdd8705f49e9808da5c6b6b56e3d79397a957b50201c4e4c262fd621d87e7ec27477252658b060668e98f07026176ad4868bf1b24e1ea2087
-DIST patch-6.15.9.xz 730252 BLAKE2B 277dee1df9517f06060f1f20b9d6000b3ed6acc0805d0ed55acebab59e996190a8f5d819ede79b5268ebb76e0976a546dc5339a4cf72307fab12c900c3311159 SHA512 34572997debcfac374401783a95d87e7be8754b4f1f4a9f436435c18e75087c05325321d800a22c33f0c4ac379d3b8759095a2b7738807eb51656bdc49b5d382
+DIST patch-6.16.8.xz 719144 BLAKE2B bc4342eda12987323d7b5cb04307fc5454940e71d9c153e5e74876375798f95af6084c23245cfdc9551f6dbe478884d1fcbdea8e1a2d9bc27ab95a2cb30db280 SHA512 ce466430fae6ff8501cca3798d1c3e72b3defc997175f7f1ea78c774c207b97579c1dac5f5eee8b56e3569ca23fabaeaba9186125b5fdce617414a9abd6dda82

sys-kernel/hardened-kernel/files/linux-6.15/1190_bcachefs-revert-6.15-backport-patches-to-prepare-for.patch

@@ -1,392 +0,0 @@
-From 73c097f81f25b59e97de37f326918bd2119ae26e Mon Sep 17 00:00:00 2001
-From: Alexander Miroshnichenko <alex@millerson.name>
-Date: Sun, 3 Aug 2025 19:50:52 +0300
-Subject: [PATCH] bcachefs: revert 6.15 backport patches to prepare for aplying
- master patches
-Content-Type: text/plain; charset="utf-8"
-Content-Transfer-Encoding: 8bit
-
-Signed-off-by: Alexander Miroshnichenko <alex@millerson.name>
----
- fs/bcachefs/dirent.c           | 12 +++++-
- fs/bcachefs/dirent.h           |  4 +-
- fs/bcachefs/errcode.h          |  2 -
- fs/bcachefs/fs.c               |  8 +---
- fs/bcachefs/fsck.c             |  8 ----
- fs/bcachefs/inode.c            | 77 ++++++++++++----------------------
- fs/bcachefs/namei.c            |  4 +-
- fs/bcachefs/sb-errors_format.h |  4 +-
- fs/bcachefs/subvolume.c        | 19 ++-------
- 9 files changed, 46 insertions(+), 92 deletions(-)
-
-diff --git a/fs/bcachefs/dirent.c b/fs/bcachefs/dirent.c
-index 901230ca4a75..a51195088227 100644
---- a/fs/bcachefs/dirent.c
-+++ b/fs/bcachefs/dirent.c
-@@ -395,8 +395,8 @@ int bch2_dirent_read_target(struct btree_trans *trans, subvol_inum dir,
- }
- 
- int bch2_dirent_rename(struct btree_trans *trans,
--		subvol_inum src_dir, struct bch_hash_info *src_hash,
--		subvol_inum dst_dir, struct bch_hash_info *dst_hash,
-+		subvol_inum src_dir, struct bch_hash_info *src_hash, u64 *src_dir_i_size,
-+		subvol_inum dst_dir, struct bch_hash_info *dst_hash, u64 *dst_dir_i_size,
- 		const struct qstr *src_name, subvol_inum *src_inum, u64 *src_offset,
- 		const struct qstr *dst_name, subvol_inum *dst_inum, u64 *dst_offset,
- 		enum bch_rename_mode mode)
-@@ -535,6 +535,14 @@ int bch2_dirent_rename(struct btree_trans *trans,
- 	    new_src->v.d_type == DT_SUBVOL)
- 		new_src->v.d_parent_subvol = cpu_to_le32(src_dir.subvol);
- 
-+	if (old_dst.k)
-+		*dst_dir_i_size -= bkey_bytes(old_dst.k);
-+	*src_dir_i_size -= bkey_bytes(old_src.k);
-+
-+	if (mode == BCH_RENAME_EXCHANGE)
-+		*src_dir_i_size += bkey_bytes(&new_src->k);
-+	*dst_dir_i_size += bkey_bytes(&new_dst->k);
-+
- 	ret = bch2_trans_update(trans, &dst_iter, &new_dst->k_i, 0);
- 	if (ret)
- 		goto out;
-diff --git a/fs/bcachefs/dirent.h b/fs/bcachefs/dirent.h
-index 999b895fa28a..d3e7ae669575 100644
---- a/fs/bcachefs/dirent.h
-+++ b/fs/bcachefs/dirent.h
-@@ -80,8 +80,8 @@ enum bch_rename_mode {
- };
- 
- int bch2_dirent_rename(struct btree_trans *,
--		       subvol_inum, struct bch_hash_info *,
--		       subvol_inum, struct bch_hash_info *,
-+		       subvol_inum, struct bch_hash_info *, u64 *,
-+		       subvol_inum, struct bch_hash_info *, u64 *,
- 		       const struct qstr *, subvol_inum *, u64 *,
- 		       const struct qstr *, subvol_inum *, u64 *,
- 		       enum bch_rename_mode);
-diff --git a/fs/bcachefs/errcode.h b/fs/bcachefs/errcode.h
-index 346766299cb3..d9ebffa5b3a2 100644
---- a/fs/bcachefs/errcode.h
-+++ b/fs/bcachefs/errcode.h
-@@ -209,8 +209,6 @@
- 	x(EINVAL,			remove_would_lose_data)			\
- 	x(EINVAL,			no_resize_with_buckets_nouse)		\
- 	x(EINVAL,			inode_unpack_error)			\
--	x(EINVAL,			inode_not_unlinked)			\
--	x(EINVAL,			inode_has_child_snapshot)		\
- 	x(EINVAL,			varint_decode_error)			\
- 	x(EINVAL,			erasure_coding_found_btree_node)	\
- 	x(EOPNOTSUPP,			may_not_use_incompat_feature)		\
-diff --git a/fs/bcachefs/fs.c b/fs/bcachefs/fs.c
-index 8a47ce3467e8..47f1a64c5c8d 100644
---- a/fs/bcachefs/fs.c
-+++ b/fs/bcachefs/fs.c
-@@ -2181,13 +2181,7 @@ static void bch2_evict_inode(struct inode *vinode)
- 				KEY_TYPE_QUOTA_WARN);
- 		bch2_quota_acct(c, inode->ei_qid, Q_INO, -1,
- 				KEY_TYPE_QUOTA_WARN);
--		int ret = bch2_inode_rm(c, inode_inum(inode));
--		if (ret && !bch2_err_matches(ret, EROFS)) {
--			bch_err_msg(c, ret, "VFS incorrectly tried to delete inode %llu:%llu",
--				    inode->ei_inum.subvol,
--				    inode->ei_inum.inum);
--			bch2_sb_error_count(c, BCH_FSCK_ERR_vfs_bad_inode_rm);
--		}
-+		bch2_inode_rm(c, inode_inum(inode));
- 
- 		/*
- 		 * If we are deleting, we need it present in the vfs hash table
-diff --git a/fs/bcachefs/fsck.c b/fs/bcachefs/fsck.c
-index bf117f2225d8..aaf187085276 100644
---- a/fs/bcachefs/fsck.c
-+++ b/fs/bcachefs/fsck.c
-@@ -1183,14 +1183,6 @@ static int check_inode(struct btree_trans *trans,
- 		ret = 0;
- 	}
- 
--	if (fsck_err_on(S_ISDIR(u.bi_mode) && u.bi_size,
--			trans, inode_dir_has_nonzero_i_size,
--			"directory %llu:%u with nonzero i_size %lli",
--			u.bi_inum, u.bi_snapshot, u.bi_size)) {
--		u.bi_size = 0;
--		do_update = true;
--	}
--
- 	ret = bch2_inode_has_child_snapshots(trans, k.k->p);
- 	if (ret < 0)
- 		goto err;
-diff --git a/fs/bcachefs/inode.c b/fs/bcachefs/inode.c
-index 845efd429d13..490b85841de9 100644
---- a/fs/bcachefs/inode.c
-+++ b/fs/bcachefs/inode.c
-@@ -38,7 +38,6 @@ static const char * const bch2_inode_flag_strs[] = {
- #undef  x
- 
- static int delete_ancestor_snapshot_inodes(struct btree_trans *, struct bpos);
--static int may_delete_deleted_inum(struct btree_trans *, subvol_inum);
- 
- static const u8 byte_table[8] = { 1, 2, 3, 4, 6, 8, 10, 13 };
- 
-@@ -1049,23 +1048,19 @@ int bch2_inode_rm(struct bch_fs *c, subvol_inum inum)
- 	u32 snapshot;
- 	int ret;
- 
--	ret = lockrestart_do(trans, may_delete_deleted_inum(trans, inum));
--	if (ret)
--		goto err2;
--
- 	/*
- 	 * If this was a directory, there shouldn't be any real dirents left -
- 	 * but there could be whiteouts (from hash collisions) that we should
- 	 * delete:
- 	 *
--	 * XXX: the dirent code ideally would delete whiteouts when they're no
-+	 * XXX: the dirent could ideally would delete whiteouts when they're no
- 	 * longer needed
- 	 */
- 	ret   = bch2_inode_delete_keys(trans, inum, BTREE_ID_extents) ?:
- 		bch2_inode_delete_keys(trans, inum, BTREE_ID_xattrs) ?:
- 		bch2_inode_delete_keys(trans, inum, BTREE_ID_dirents);
- 	if (ret)
--		goto err2;
-+		goto err;
- retry:
- 	bch2_trans_begin(trans);
- 
-@@ -1347,8 +1342,10 @@ int bch2_inode_rm_snapshot(struct btree_trans *trans, u64 inum, u32 snapshot)
- 		delete_ancestor_snapshot_inodes(trans, SPOS(0, inum, snapshot));
- }
- 
--static int may_delete_deleted_inode(struct btree_trans *trans, struct bpos pos,
--				    bool from_deleted_inodes)
-+static int may_delete_deleted_inode(struct btree_trans *trans,
-+				    struct btree_iter *iter,
-+				    struct bpos pos,
-+				    bool *need_another_pass)
- {
- 	struct bch_fs *c = trans->c;
- 	struct btree_iter inode_iter;
-@@ -1363,13 +1360,11 @@ static int may_delete_deleted_inode(struct btree_trans *trans, struct bpos pos,
- 		return ret;
- 
- 	ret = bkey_is_inode(k.k) ? 0 : -BCH_ERR_ENOENT_inode;
--	if (fsck_err_on(from_deleted_inodes && ret,
-+	if (fsck_err_on(!bkey_is_inode(k.k),
- 			trans, deleted_inode_missing,
- 			"nonexistent inode %llu:%u in deleted_inodes btree",
- 			pos.offset, pos.snapshot))
- 		goto delete;
--	if (ret)
--		goto out;
- 
- 	ret = bch2_inode_unpack(k, &inode);
- 	if (ret)
-@@ -1377,8 +1372,7 @@ static int may_delete_deleted_inode(struct btree_trans *trans, struct bpos pos,
- 
- 	if (S_ISDIR(inode.bi_mode)) {
- 		ret = bch2_empty_dir_snapshot(trans, pos.offset, 0, pos.snapshot);
--		if (fsck_err_on(from_deleted_inodes &&
--				bch2_err_matches(ret, ENOTEMPTY),
-+		if (fsck_err_on(bch2_err_matches(ret, ENOTEMPTY),
- 				trans, deleted_inode_is_dir,
- 				"non empty directory %llu:%u in deleted_inodes btree",
- 				pos.offset, pos.snapshot))
-@@ -1387,25 +1381,17 @@ static int may_delete_deleted_inode(struct btree_trans *trans, struct bpos pos,
- 			goto out;
- 	}
- 
--	ret = inode.bi_flags & BCH_INODE_unlinked ? 0 : -BCH_ERR_inode_not_unlinked;
--	if (fsck_err_on(from_deleted_inodes && ret,
-+	if (fsck_err_on(!(inode.bi_flags & BCH_INODE_unlinked),
- 			trans, deleted_inode_not_unlinked,
- 			"non-deleted inode %llu:%u in deleted_inodes btree",
- 			pos.offset, pos.snapshot))
- 		goto delete;
--	if (ret)
--		goto out;
--
--	ret = !(inode.bi_flags & BCH_INODE_has_child_snapshot)
--		? 0 : -BCH_ERR_inode_has_child_snapshot;
- 
--	if (fsck_err_on(from_deleted_inodes && ret,
-+	if (fsck_err_on(inode.bi_flags & BCH_INODE_has_child_snapshot,
- 			trans, deleted_inode_has_child_snapshots,
- 			"inode with child snapshots %llu:%u in deleted_inodes btree",
- 			pos.offset, pos.snapshot))
- 		goto delete;
--	if (ret)
--		goto out;
- 
- 	ret = bch2_inode_has_child_snapshots(trans, k.k->p);
- 	if (ret < 0)
-@@ -1422,28 +1408,19 @@ static int may_delete_deleted_inode(struct btree_trans *trans, struct bpos pos,
- 			if (ret)
- 				goto out;
- 		}
--
--		if (!from_deleted_inodes) {
--			ret =   bch2_trans_commit(trans, NULL, NULL, BCH_TRANS_COMMIT_no_enospc) ?:
--				-BCH_ERR_inode_has_child_snapshot;
--			goto out;
--		}
--
- 		goto delete;
- 
- 	}
- 
--	if (from_deleted_inodes) {
--		if (test_bit(BCH_FS_clean_recovery, &c->flags) &&
--		    !fsck_err(trans, deleted_inode_but_clean,
--			      "filesystem marked as clean but have deleted inode %llu:%u",
--			      pos.offset, pos.snapshot)) {
--			ret = 0;
--			goto out;
--		}
--
--		ret = 1;
-+	if (test_bit(BCH_FS_clean_recovery, &c->flags) &&
-+	    !fsck_err(trans, deleted_inode_but_clean,
-+		      "filesystem marked as clean but have deleted inode %llu:%u",
-+		      pos.offset, pos.snapshot)) {
-+		ret = 0;
-+		goto out;
- 	}
-+
-+	ret = 1;
- out:
- fsck_err:
- 	bch2_trans_iter_exit(trans, &inode_iter);
-@@ -1454,19 +1431,12 @@ static int may_delete_deleted_inode(struct btree_trans *trans, struct bpos pos,
- 	goto out;
- }
- 
--static int may_delete_deleted_inum(struct btree_trans *trans, subvol_inum inum)
--{
--	u32 snapshot;
--
--	return bch2_subvolume_get_snapshot(trans, inum.subvol, &snapshot) ?:
--		may_delete_deleted_inode(trans, SPOS(0, inum.inum, snapshot), false);
--}
--
- int bch2_delete_dead_inodes(struct bch_fs *c)
- {
- 	struct btree_trans *trans = bch2_trans_get(c);
-+	bool need_another_pass;
- 	int ret;
--
-+again:
- 	/*
- 	 * if we ran check_inodes() unlinked inodes will have already been
- 	 * cleaned up but the write buffer will be out of sync; therefore we
-@@ -1476,6 +1446,8 @@ int bch2_delete_dead_inodes(struct bch_fs *c)
- 	if (ret)
- 		goto err;
- 
-+	need_another_pass = false;
-+
- 	/*
- 	 * Weird transaction restart handling here because on successful delete,
- 	 * bch2_inode_rm_snapshot() will return a nested transaction restart,
-@@ -1485,7 +1457,7 @@ int bch2_delete_dead_inodes(struct bch_fs *c)
- 	ret = for_each_btree_key_commit(trans, iter, BTREE_ID_deleted_inodes, POS_MIN,
- 					BTREE_ITER_prefetch|BTREE_ITER_all_snapshots, k,
- 					NULL, NULL, BCH_TRANS_COMMIT_no_enospc, ({
--		ret = may_delete_deleted_inode(trans, k.k->p, true);
-+		ret = may_delete_deleted_inode(trans, &iter, k.k->p, &need_another_pass);
- 		if (ret > 0) {
- 			bch_verbose_ratelimited(c, "deleting unlinked inode %llu:%u",
- 						k.k->p.offset, k.k->p.snapshot);
-@@ -1506,6 +1478,9 @@ int bch2_delete_dead_inodes(struct bch_fs *c)
- 
- 		ret;
- 	}));
-+
-+	if (!ret && need_another_pass)
-+		goto again;
- err:
- 	bch2_trans_put(trans);
- 	return ret;
-diff --git a/fs/bcachefs/namei.c b/fs/bcachefs/namei.c
-index 413fb60cff43..9136a9097789 100644
---- a/fs/bcachefs/namei.c
-+++ b/fs/bcachefs/namei.c
-@@ -418,8 +418,8 @@ int bch2_rename_trans(struct btree_trans *trans,
- 	}
- 
- 	ret = bch2_dirent_rename(trans,
--				 src_dir, &src_hash,
--				 dst_dir, &dst_hash,
-+				 src_dir, &src_hash, &src_dir_u->bi_size,
-+				 dst_dir, &dst_hash, &dst_dir_u->bi_size,
- 				 src_name, &src_inum, &src_offset,
- 				 dst_name, &dst_inum, &dst_offset,
- 				 mode);
-diff --git a/fs/bcachefs/sb-errors_format.h b/fs/bcachefs/sb-errors_format.h
-index 9387f6092fe9..4036a20c6adc 100644
---- a/fs/bcachefs/sb-errors_format.h
-+++ b/fs/bcachefs/sb-errors_format.h
-@@ -232,7 +232,6 @@ enum bch_fsck_flags {
- 	x(inode_dir_multiple_links,				206,	FSCK_AUTOFIX)	\
- 	x(inode_dir_missing_backpointer,			284,	FSCK_AUTOFIX)	\
- 	x(inode_dir_unlinked_but_not_empty,			286,	FSCK_AUTOFIX)	\
--	x(inode_dir_has_nonzero_i_size,				319,	FSCK_AUTOFIX)	\
- 	x(inode_multiple_links_but_nlink_0,			207,	FSCK_AUTOFIX)	\
- 	x(inode_wrong_backpointer,				208,	FSCK_AUTOFIX)	\
- 	x(inode_wrong_nlink,					209,	FSCK_AUTOFIX)	\
-@@ -244,7 +243,6 @@ enum bch_fsck_flags {
- 	x(inode_parent_has_case_insensitive_not_set,		317,	FSCK_AUTOFIX)	\
- 	x(vfs_inode_i_blocks_underflow,				311,	FSCK_AUTOFIX)	\
- 	x(vfs_inode_i_blocks_not_zero_at_truncate,		313,	FSCK_AUTOFIX)	\
--	x(vfs_bad_inode_rm,					320,	0)		\
- 	x(deleted_inode_but_clean,				211,	FSCK_AUTOFIX)	\
- 	x(deleted_inode_missing,				212,	FSCK_AUTOFIX)	\
- 	x(deleted_inode_is_dir,					213,	FSCK_AUTOFIX)	\
-@@ -330,7 +328,7 @@ enum bch_fsck_flags {
- 	x(dirent_stray_data_after_cf_name,			305,	0)		\
- 	x(rebalance_work_incorrectly_set,			309,	FSCK_AUTOFIX)	\
- 	x(rebalance_work_incorrectly_unset,			310,	FSCK_AUTOFIX)	\
--	x(MAX,							321,	0)
-+	x(MAX,							319,	0)
- 
- enum bch_sb_error_id {
- #define x(t, n, ...) BCH_FSCK_ERR_##t = n,
-diff --git a/fs/bcachefs/subvolume.c b/fs/bcachefs/subvolume.c
-index bc6009a71284..d0209f7658bb 100644
---- a/fs/bcachefs/subvolume.c
-+++ b/fs/bcachefs/subvolume.c
-@@ -6,7 +6,6 @@
- #include "errcode.h"
- #include "error.h"
- #include "fs.h"
--#include "inode.h"
- #include "recovery_passes.h"
- #include "snapshot.h"
- #include "subvolume.h"
-@@ -114,20 +113,10 @@ static int check_subvol(struct btree_trans *trans,
- 			     "subvolume %llu points to missing subvolume root %llu:%u",
- 			     k.k->p.offset, le64_to_cpu(subvol.v->inode),
- 			     le32_to_cpu(subvol.v->snapshot))) {
--			/*
--			 * Recreate - any contents that are still disconnected
--			 * will then get reattached under lost+found
--			 */
--			bch2_inode_init_early(c, &inode);
--			bch2_inode_init_late(&inode, bch2_current_time(c),
--					     0, 0, S_IFDIR|0700, 0, NULL);
--			inode.bi_inum			= le64_to_cpu(subvol.v->inode);
--			inode.bi_snapshot		= le32_to_cpu(subvol.v->snapshot);
--			inode.bi_subvol			= k.k->p.offset;
--			inode.bi_parent_subvol		= le32_to_cpu(subvol.v->fs_path_parent);
--			ret = __bch2_fsck_write_inode(trans, &inode);
--			if (ret)
--				goto err;
-+			ret = bch2_subvolume_delete(trans, iter->pos.offset);
-+			bch_err_msg(c, ret, "deleting subvolume %llu", iter->pos.offset);
-+			ret = ret ?: -BCH_ERR_transaction_restart_nested;
-+			goto err;
- 		}
- 	} else {
- 		goto err;
--- 
-2.49.1
-

sys-kernel/hardened-kernel/files/linux-6.16.amd64.config

@@ -1,6 +1,6 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Linux/x86 6.15.8-hardened2 Kernel Configuration
+# Linux/x86 6.16.8-hardened1 Kernel Configuration
 #
 CONFIG_CC_VERSION_TEXT="gcc (Gentoo Hardened 14.3.0 p8) 14.3.0"
 CONFIG_CC_IS_GCC=y
@@ -11,8 +11,8 @@ CONFIG_AS_VERSION=24400
 CONFIG_LD_IS_BFD=y
 CONFIG_LD_VERSION=24400
 CONFIG_LLD_VERSION=0
-CONFIG_RUSTC_VERSION=0
+CONFIG_RUSTC_VERSION=108800
-CONFIG_RUSTC_LLVM_VERSION=0
+CONFIG_RUSTC_LLVM_VERSION=200107
 CONFIG_CC_CAN_LINK=y
 CONFIG_CC_HAS_ASM_GOTO_OUTPUT=y
 CONFIG_CC_HAS_ASM_GOTO_TIED_OUTPUT=y
@@ -20,6 +20,9 @@ CONFIG_TOOLS_SUPPORT_RELR=y
 CONFIG_CC_HAS_ASM_INLINE=y
 CONFIG_CC_HAS_NO_PROFILE_FN_ATTR=y
 CONFIG_LD_CAN_USE_KEEP_IN_OVERLAY=y
+CONFIG_RUSTC_HAS_COERCE_POINTEE=y
+CONFIG_RUSTC_HAS_SPAN_FILE=y
+CONFIG_RUSTC_HAS_UNNECESSARY_TRANSMUTES=y
 CONFIG_PAHOLE_VERSION=130
 CONFIG_IRQ_WORK=y
 CONFIG_BUILDTIME_TABLE_SORT=y
@@ -57,7 +60,6 @@ CONFIG_POSIX_MQUEUE=y
 CONFIG_POSIX_MQUEUE_SYSCTL=y
 CONFIG_WATCH_QUEUE=y
 CONFIG_CROSS_MEMORY_ATTACH=y
-# CONFIG_USELIB is not set
 CONFIG_AUDIT=y
 CONFIG_HAVE_ARCH_AUDITSYSCALL=y
 CONFIG_AUDITSYSCALL=y
@@ -271,6 +273,7 @@ CONFIG_ELF_CORE=y
 CONFIG_PCSPKR_PLATFORM=y
 CONFIG_FUTEX=y
 CONFIG_FUTEX_PI=y
+CONFIG_FUTEX_MPOL=y
 CONFIG_EPOLL=y
 CONFIG_SIGNALFD=y
 CONFIG_TIMERFD=y
@@ -307,6 +310,7 @@ CONFIG_TRACEPOINTS=y
 #
 # CONFIG_KEXEC is not set
 # CONFIG_KEXEC_FILE is not set
+# CONFIG_KEXEC_HANDOVER is not set
 # end of Kexec and crash features
 # end of General setup
 
@@ -335,7 +339,7 @@ CONFIG_HAVE_INTEL_TXT=y
 CONFIG_X86_64_SMP=y
 CONFIG_ARCH_SUPPORTS_UPROBES=y
 CONFIG_FIX_EARLYCON_MEM=y
-CONFIG_PGTABLE_LEVELS=4
+CONFIG_PGTABLE_LEVELS=5
 
 #
 # Processor type and features
@@ -345,7 +349,6 @@ CONFIG_X86_X2APIC=y
 CONFIG_X86_POSTED_MSI=y
 CONFIG_X86_MPPARSE=y
 CONFIG_X86_CPU_RESCTRL=y
-CONFIG_RESCTRL_FS_PSEUDO_LOCK=y
 CONFIG_X86_FRED=y
 # CONFIG_X86_EXTENDED_PLATFORM is not set
 CONFIG_X86_INTEL_LPSS=y
@@ -368,6 +371,8 @@ CONFIG_PARAVIRT_CLOCK=y
 # CONFIG_JAILHOUSE_GUEST is not set
 # CONFIG_ACRN_GUEST is not set
 # CONFIG_INTEL_TDX_GUEST is not set
+CONFIG_CC_HAS_MARCH_NATIVE=y
+# CONFIG_X86_NATIVE_CPU is not set
 CONFIG_X86_INTERNODE_CACHE_SHIFT=6
 CONFIG_X86_L1_CACHE_SHIFT=6
 CONFIG_X86_TSC=y
@@ -426,7 +431,6 @@ CONFIG_MICROCODE=y
 # CONFIG_MICROCODE_LATE_LOADING is not set
 CONFIG_X86_MSR=m
 CONFIG_X86_CPUID=m
-# CONFIG_X86_5LEVEL is not set
 CONFIG_X86_DIRECT_GBPAGES=y
 # CONFIG_X86_CPA_STATISTICS is not set
 # CONFIG_AMD_MEM_ENCRYPT is not set
@@ -476,6 +480,7 @@ CONFIG_ARCH_SUPPORTS_KEXEC_SIG=y
 CONFIG_ARCH_SUPPORTS_KEXEC_SIG_FORCE=y
 CONFIG_ARCH_SUPPORTS_KEXEC_BZIMAGE_VERIFY_SIG=y
 CONFIG_ARCH_SUPPORTS_KEXEC_JUMP=y
+CONFIG_ARCH_SUPPORTS_KEXEC_HANDOVER=y
 CONFIG_ARCH_SUPPORTS_CRASH_DUMP=y
 CONFIG_ARCH_DEFAULT_CRASH_DUMP=y
 CONFIG_ARCH_SUPPORTS_CRASH_HOTPLUG=y
@@ -484,7 +489,6 @@ CONFIG_RELOCATABLE=y
 CONFIG_RANDOMIZE_BASE=y
 CONFIG_X86_NEED_RELOCS=y
 CONFIG_PHYSICAL_ALIGN=0x1000000
-CONFIG_DYNAMIC_MEMORY_LAYOUT=y
 CONFIG_RANDOMIZE_MEMORY=y
 CONFIG_RANDOMIZE_MEMORY_PHYSICAL_PADDING=0xa
 CONFIG_HOTPLUG_CPU=y
@@ -536,6 +540,7 @@ CONFIG_MITIGATION_SRBDS=y
 CONFIG_MITIGATION_SSB=y
 CONFIG_MITIGATION_ITS=y
 CONFIG_MITIGATION_TSA=y
+CONFIG_MITIGATION_VMSCAPE=y
 CONFIG_ARCH_HAS_ADD_PAGES=y
 
 #
@@ -621,6 +626,7 @@ CONFIG_ACPI_CONFIGFS=m
 # CONFIG_ACPI_PFRUT is not set
 CONFIG_ACPI_PCC=y
 # CONFIG_ACPI_FFH is not set
+CONFIG_ACPI_MRRM=y
 CONFIG_PMIC_OPREGION=y
 CONFIG_ACPI_VIOT=y
 CONFIG_ACPI_PRMT=y
@@ -760,16 +766,12 @@ CONFIG_X86_DISABLED_FEATURE_VME=y
 CONFIG_X86_DISABLED_FEATURE_K6_MTRR=y
 CONFIG_X86_DISABLED_FEATURE_CYRIX_ARR=y
 CONFIG_X86_DISABLED_FEATURE_CENTAUR_MCR=y
-CONFIG_X86_DISABLED_FEATURE_LA57=y
 CONFIG_X86_DISABLED_FEATURE_LAM=y
 CONFIG_X86_DISABLED_FEATURE_SGX=y
 CONFIG_X86_DISABLED_FEATURE_XENPV=y
 CONFIG_X86_DISABLED_FEATURE_TDX_GUEST=y
 CONFIG_X86_DISABLED_FEATURE_USER_SHSTK=y
 CONFIG_AS_AVX512=y
-CONFIG_AS_SHA1_NI=y
-CONFIG_AS_SHA256_NI=y
-CONFIG_AS_TPAUSE=y
 CONFIG_AS_GFNI=y
 CONFIG_AS_VAES=y
 CONFIG_AS_VPCLMULQDQ=y
@@ -836,6 +838,7 @@ CONFIG_HAVE_ARCH_JUMP_LABEL_RELATIVE=y
 CONFIG_MMU_GATHER_TABLE_FREE=y
 CONFIG_MMU_GATHER_RCU_TABLE_FREE=y
 CONFIG_MMU_GATHER_MERGE_VMAS=y
+CONFIG_ARCH_WANT_IRQS_OFF_ACTIVATE_MM=y
 CONFIG_MMU_LAZY_TLB_REFCOUNT=y
 CONFIG_ARCH_HAVE_NMI_SAFE_CMPXCHG=y
 CONFIG_ARCH_HAVE_EXTRA_ELF_NOTES=y
@@ -912,6 +915,7 @@ CONFIG_ARCH_HAS_STRICT_KERNEL_RWX=y
 CONFIG_STRICT_KERNEL_RWX=y
 CONFIG_ARCH_HAS_STRICT_MODULE_RWX=y
 CONFIG_STRICT_MODULE_RWX=y
+CONFIG_ARCH_HAS_CPU_RESCTRL=y
 CONFIG_HAVE_ARCH_PREL32_RELOCATIONS=y
 CONFIG_ARCH_USE_MEMREMAP_PROT=y
 CONFIG_LOCK_EVENT_COUNTS=y
@@ -1033,8 +1037,6 @@ CONFIG_EFI_PARTITION=y
 # CONFIG_CMDLINE_PARTITION is not set
 # end of Partition Types
 
-CONFIG_BLK_MQ_PCI=y
-CONFIG_BLK_MQ_VIRTIO=y
 CONFIG_BLK_PM=y
 CONFIG_BLOCK_HOLDER_DEPRECATED=y
 CONFIG_BLK_MQ_STACKING=y
@@ -1180,6 +1182,7 @@ CONFIG_NEED_PER_CPU_PAGE_FIRST_CHUNK=y
 CONFIG_USE_PERCPU_NUMA_NODE_ID=y
 CONFIG_HAVE_SETUP_PER_CPU_AREA=y
 # CONFIG_CMA is not set
+CONFIG_PAGE_BLOCK_ORDER=10
 # CONFIG_MEM_SOFT_DIRTY is not set
 CONFIG_GENERIC_EARLY_IOREMAP=y
 # CONFIG_DEFERRED_STRUCT_PAGE_INIT is not set
@@ -1235,6 +1238,7 @@ CONFIG_NET_XGRESS=y
 CONFIG_SKB_DECRYPTED=y
 CONFIG_SKB_EXTENSIONS=y
 CONFIG_NET_DEVMEM=y
+CONFIG_NET_CRC32C=y
 
 #
 # Networking options
@@ -1668,7 +1672,6 @@ CONFIG_BRIDGE_EBT_REDIRECT=m
 CONFIG_BRIDGE_EBT_SNAT=m
 CONFIG_BRIDGE_EBT_LOG=m
 CONFIG_BRIDGE_EBT_NFLOG=m
-# CONFIG_IP_DCCP is not set
 # CONFIG_IP_SCTP is not set
 # CONFIG_RDS is not set
 # CONFIG_TIPC is not set
@@ -1861,7 +1864,6 @@ CONFIG_BT_MTK=m
 CONFIG_BT_HCIBTUSB=m
 CONFIG_BT_HCIBTUSB_AUTOSUSPEND=y
 CONFIG_BT_HCIBTUSB_POLL_SYNC=y
-CONFIG_BT_HCIBTUSB_AUTO_ISOC_ALT=y
 CONFIG_BT_HCIBTUSB_BCM=y
 CONFIG_BT_HCIBTUSB_MTK=y
 CONFIG_BT_HCIBTUSB_RTL=y
@@ -1885,6 +1887,7 @@ CONFIG_AF_RXRPC=m
 # CONFIG_AF_RXRPC_INJECT_RX_DELAY is not set
 # CONFIG_AF_RXRPC_DEBUG is not set
 # CONFIG_RXKAD is not set
+# CONFIG_RXGK is not set
 # CONFIG_RXPERF is not set
 # CONFIG_AF_KCM is not set
 CONFIG_STREAM_PARSER=y
@@ -2018,8 +2021,7 @@ CONFIG_HOTPLUG_PCI_ACPI_IBM=m
 # CONFIG_PCI_SW_SWITCHTEC is not set
 # end of PCI switch controller drivers
 
-CONFIG_PCI_PWRCTL=m
+# CONFIG_PCI_PWRCTRL_SLOT is not set
-CONFIG_PCI_PWRCTL_SLOT=m
 # CONFIG_CXL_BUS is not set
 # CONFIG_PCCARD is not set
 # CONFIG_RAPIDIO is not set
@@ -2189,6 +2191,7 @@ CONFIG_VIRTIO_BLK=m
 CONFIG_BLK_DEV_RBD=m
 CONFIG_BLK_DEV_UBLK=m
 # CONFIG_BLKDEV_UBLK_LEGACY_OPCODES is not set
+# CONFIG_BLK_DEV_ZONED_LOOP is not set
 
 #
 # NVME Support
@@ -2212,6 +2215,7 @@ CONFIG_NVME_HWMON=y
 # CONFIG_IBM_ASM is not set
 # CONFIG_PHANTOM is not set
 # CONFIG_RPMB is not set
+# CONFIG_TI_FPC202 is not set
 # CONFIG_TIFM_CORE is not set
 # CONFIG_ICS932S401 is not set
 CONFIG_ENCLOSURE_SERVICES=m
@@ -2251,7 +2255,6 @@ CONFIG_EEPROM_EE1004=m
 # CONFIG_INTEL_MEI is not set
 # CONFIG_VMWARE_VMCI is not set
 # CONFIG_GENWQE is not set
-# CONFIG_ECHO is not set
 # CONFIG_BCM_VK is not set
 # CONFIG_MISC_ALCOR_PCI is not set
 # CONFIG_MISC_RTSX_PCI is not set
@@ -2259,6 +2262,7 @@ CONFIG_EEPROM_EE1004=m
 # CONFIG_UACCE is not set
 # CONFIG_PVPANIC is not set
 # CONFIG_KEBA_CP500 is not set
+# CONFIG_AMD_SBRMI_I2C is not set
 # end of Misc devices
 
 #
@@ -2435,6 +2439,7 @@ CONFIG_NET_CORE=y
 CONFIG_DUMMY=m
 CONFIG_WIREGUARD=m
 # CONFIG_WIREGUARD_DEBUG is not set
+CONFIG_OVPN=m
 # CONFIG_EQUALIZER is not set
 # CONFIG_NET_FC is not set
 # CONFIG_IFB is not set
@@ -2580,6 +2585,7 @@ CONFIG_FIXED_PHY=m
 #
 # MII PHY device drivers
 #
+# CONFIG_AS21XXX_PHY is not set
 # CONFIG_AIR_EN8811H_PHY is not set
 # CONFIG_AMD_PHY is not set
 # CONFIG_ADIN_PHY is not set
@@ -2604,6 +2610,7 @@ CONFIG_BCM_NET_PHYLIB=m
 # CONFIG_MARVELL_88Q2XXX_PHY is not set
 # CONFIG_MARVELL_88X2222_PHY is not set
 # CONFIG_MAXLINEAR_GPHY is not set
+# CONFIG_MAXLINEAR_86110_PHY is not set
 # CONFIG_MEDIATEK_GE_PHY is not set
 # CONFIG_MICREL_PHY is not set
 # CONFIG_MICROCHIP_T1S_PHY is not set
@@ -2644,11 +2651,9 @@ CONFIG_BCM_NET_PHYLIB=m
 # CONFIG_MCTP_TRANSPORT_USB is not set
 # end of MCTP Device Drivers
 
-CONFIG_MDIO_DEVICE=m
 CONFIG_MDIO_BUS=m
 CONFIG_FWNODE_MDIO=m
 CONFIG_ACPI_MDIO=m
-CONFIG_MDIO_DEVRES=m
 # CONFIG_MDIO_BITBANG is not set
 # CONFIG_MDIO_BCM_UNIMAC is not set
 # CONFIG_MDIO_MVUSB is not set
@@ -3209,7 +3214,6 @@ CONFIG_SPI_MASTER=y
 # CONFIG_SPI_MXIC is not set
 # CONFIG_SPI_XCOMM is not set
 # CONFIG_SPI_XILINX is not set
-# CONFIG_SPI_AMD is not set
 
 #
 # SPI Multiplexer support
@@ -3225,7 +3229,6 @@ CONFIG_SPI_MASTER=y
 # CONFIG_SPI_SLAVE is not set
 CONFIG_SPI_DYNAMIC=y
 CONFIG_SPMI=m
-# CONFIG_SPMI_HISI3670 is not set
 # CONFIG_HSI is not set
 CONFIG_PPS=m
 # CONFIG_PPS_DEBUG is not set
@@ -3303,6 +3306,7 @@ CONFIG_POWER_SUPPLY_HWMON=y
 # CONFIG_IP5XXX_POWER is not set
 # CONFIG_TEST_POWER is not set
 # CONFIG_CHARGER_ADP5061 is not set
+# CONFIG_BATTERY_CHAGALL is not set
 # CONFIG_BATTERY_CW2015 is not set
 # CONFIG_BATTERY_DS2780 is not set
 # CONFIG_BATTERY_DS2781 is not set
@@ -3318,6 +3322,7 @@ CONFIG_POWER_SUPPLY_HWMON=y
 # CONFIG_CHARGER_LP8727 is not set
 # CONFIG_CHARGER_LTC4162L is not set
 # CONFIG_CHARGER_MAX77976 is not set
+# CONFIG_CHARGER_MAX8971 is not set
 # CONFIG_CHARGER_BQ2415X is not set
 # CONFIG_BATTERY_GAUGE_LTC2941 is not set
 # CONFIG_BATTERY_GOLDFISH is not set
@@ -3456,13 +3461,11 @@ CONFIG_SENSORS_NCT6775_I2C=m
 # CONFIG_SENSORS_NZXT_KRAKEN3 is not set
 # CONFIG_SENSORS_NZXT_SMART2 is not set
 # CONFIG_SENSORS_OCC_P8_I2C is not set
-# CONFIG_SENSORS_OXP is not set
 # CONFIG_SENSORS_PCF8591 is not set
 # CONFIG_PMBUS is not set
 # CONFIG_SENSORS_PT5161L is not set
 CONFIG_SENSORS_PWM_FAN=m
 # CONFIG_SENSORS_SBTSI is not set
-# CONFIG_SENSORS_SBRMI is not set
 # CONFIG_SENSORS_SHT21 is not set
 # CONFIG_SENSORS_SHT3x is not set
 # CONFIG_SENSORS_SHT4x is not set
@@ -3606,6 +3609,7 @@ CONFIG_WATCHDOG_SYSFS=y
 # CONFIG_WAFER_WDT is not set
 # CONFIG_I6300ESB_WDT is not set
 # CONFIG_IE6XX_WDT is not set
+# CONFIG_INTEL_OC_WATCHDOG is not set
 CONFIG_ITCO_WDT=m
 CONFIG_ITCO_VENDOR_SUPPORT=y
 CONFIG_IT8712F_WDT=m
@@ -3863,6 +3867,8 @@ CONFIG_VIDEO_CAMERA_SENSOR=y
 # CONFIG_VIDEO_OG01A1B is not set
 # CONFIG_VIDEO_OV01A10 is not set
 # CONFIG_VIDEO_OV02A10 is not set
+# CONFIG_VIDEO_OV02E10 is not set
+# CONFIG_VIDEO_OV02C10 is not set
 # CONFIG_VIDEO_OV08D10 is not set
 # CONFIG_VIDEO_OV08X40 is not set
 # CONFIG_VIDEO_OV13858 is not set
@@ -3962,8 +3968,14 @@ CONFIG_AGP_INTEL=m
 CONFIG_INTEL_GTT=m
 CONFIG_VGA_SWITCHEROO=y
 CONFIG_DRM=y
-CONFIG_DRM_MIPI_DSI=y
+
+#
+# DRM debugging options
+#
 # CONFIG_DRM_DEBUG_MM is not set
+# end of DRM debugging options
+
+CONFIG_DRM_MIPI_DSI=y
 CONFIG_DRM_KMS_HELPER=y
 CONFIG_DRM_DRAW=y
 CONFIG_DRM_PANIC=y
@@ -4005,6 +4017,13 @@ CONFIG_DRM_GEM_SHMEM_HELPER=y
 CONFIG_DRM_SUBALLOC_HELPER=m
 CONFIG_DRM_SCHED=m
 
+#
+# Drivers for system framebuffers
+#
+CONFIG_DRM_SYSFB_HELPER=y
+CONFIG_DRM_SIMPLEDRM=y
+# end of Drivers for system framebuffers
+
 #
 # ARM devices
 #
@@ -4099,7 +4118,6 @@ CONFIG_DRM_BOCHS=m
 # CONFIG_DRM_CIRRUS_QEMU is not set
 # CONFIG_DRM_GM12U320 is not set
 # CONFIG_DRM_PANEL_MIPI_DBI is not set
-CONFIG_DRM_SIMPLEDRM=y
 # CONFIG_TINYDRM_HX8357D is not set
 # CONFIG_TINYDRM_ILI9163 is not set
 # CONFIG_TINYDRM_ILI9225 is not set
@@ -4108,10 +4126,11 @@ CONFIG_DRM_SIMPLEDRM=y
 # CONFIG_TINYDRM_MI0283QT is not set
 # CONFIG_TINYDRM_REPAPER is not set
 # CONFIG_TINYDRM_SHARP_MEMORY is not set
-# CONFIG_TINYDRM_ST7586 is not set
-# CONFIG_TINYDRM_ST7735R is not set
 # CONFIG_DRM_VBOXVIDEO is not set
 CONFIG_DRM_GUD=m
+# CONFIG_DRM_ST7571_I2C is not set
+# CONFIG_DRM_ST7586 is not set
+# CONFIG_DRM_ST7735R is not set
 # CONFIG_DRM_SSD130X is not set
 CONFIG_DRM_PANEL_BACKLIGHT_QUIRKS=m
 CONFIG_DRM_PRIVACY_SCREEN=y
@@ -4353,6 +4372,7 @@ CONFIG_SND_INTEL8X0=m
 CONFIG_SND_HDA=m
 CONFIG_SND_HDA_GENERIC_LEDS=y
 CONFIG_SND_HDA_INTEL=m
+CONFIG_SND_HDA_ACPI=m
 CONFIG_SND_HDA_HWDEP=y
 CONFIG_SND_HDA_RECONFIG=y
 # CONFIG_SND_HDA_INPUT_BEEP is not set
@@ -4412,6 +4432,7 @@ CONFIG_SND_SOC=m
 CONFIG_SND_SOC_COMPRESS=y
 CONFIG_SND_SOC_TOPOLOGY=y
 CONFIG_SND_SOC_ACPI=m
+CONFIG_SND_SOC_USB=m
 # CONFIG_SND_SOC_ADI is not set
 # CONFIG_SND_SOC_AMD_ACP is not set
 # CONFIG_SND_SOC_AMD_ACP3x is not set
@@ -4607,6 +4628,7 @@ CONFIG_SND_SOC_I2C_AND_SPI=m
 # CONFIG_SND_SOC_CS43130 is not set
 # CONFIG_SND_SOC_CS4341 is not set
 # CONFIG_SND_SOC_CS4349 is not set
+# CONFIG_SND_SOC_CS48L32 is not set
 # CONFIG_SND_SOC_CS53L30 is not set
 # CONFIG_SND_SOC_CS530X_I2C is not set
 # CONFIG_SND_SOC_CX2072X is not set
@@ -4620,6 +4642,8 @@ CONFIG_SND_SOC_DMIC=m
 # CONFIG_SND_SOC_ES8326 is not set
 # CONFIG_SND_SOC_ES8328_I2C is not set
 # CONFIG_SND_SOC_ES8328_SPI is not set
+# CONFIG_SND_SOC_ES8375 is not set
+# CONFIG_SND_SOC_ES8389 is not set
 # CONFIG_SND_SOC_GTM601 is not set
 CONFIG_SND_SOC_HDAC_HDA=m
 # CONFIG_SND_SOC_HDA is not set
@@ -4659,6 +4683,8 @@ CONFIG_SND_SOC_HDAC_HDA=m
 # CONFIG_SND_SOC_RT5640 is not set
 # CONFIG_SND_SOC_RT5659 is not set
 # CONFIG_SND_SOC_RT9120 is not set
+# CONFIG_SND_SOC_RT9123 is not set
+# CONFIG_SND_SOC_RT9123P is not set
 # CONFIG_SND_SOC_RTQ9128 is not set
 # CONFIG_SND_SOC_SGTL5000 is not set
 # CONFIG_SND_SOC_SIMPLE_AMPLIFIER is not set
@@ -4940,6 +4966,7 @@ CONFIG_USB_XHCI_HCD=m
 CONFIG_USB_XHCI_PCI=m
 # CONFIG_USB_XHCI_PCI_RENESAS is not set
 CONFIG_USB_XHCI_PLATFORM=m
+CONFIG_USB_XHCI_SIDEBAND=y
 CONFIG_USB_EHCI_HCD=m
 CONFIG_USB_EHCI_ROOT_HUB_TT=y
 CONFIG_USB_EHCI_TT_NEWSCHED=y
@@ -5484,6 +5511,9 @@ CONFIG_VIRTIO_MMIO=m
 # CONFIG_VIRTIO_MMIO_CMDLINE_DEVICES is not set
 CONFIG_VIRTIO_DMA_SHARED_BUFFER=m
 # CONFIG_VIRTIO_DEBUG is not set
+CONFIG_VIRTIO_RTC=m
+CONFIG_VIRTIO_RTC_PTP=y
+CONFIG_VIRTIO_RTC_CLASS=y
 CONFIG_VDPA=m
 # CONFIG_VDPA_SIM is not set
 CONFIG_IFCVF=m
@@ -5499,6 +5529,7 @@ CONFIG_VHOST_MENU=y
 CONFIG_VHOST_NET=m
 CONFIG_VHOST_VDPA=m
 # CONFIG_VHOST_CROSS_ENDIAN_LEGACY is not set
+CONFIG_VHOST_ENABLE_FORK_OWNER_CONTROL=y
 
 #
 # Microsoft Hyper-V guest support
@@ -5536,6 +5567,7 @@ CONFIG_YOGABOOK=m
 # CONFIG_AMD_PMC is not set
 # CONFIG_AMD_3D_VCACHE is not set
 CONFIG_AMD_WBRF=y
+# CONFIG_AMD_ISP_PLATFORM is not set
 # CONFIG_ADV_SWBUTTON is not set
 # CONFIG_APPLE_GMUX is not set
 # CONFIG_ASUS_LAPTOP is not set
@@ -5620,6 +5652,7 @@ CONFIG_INTEL_VSEC=m
 # CONFIG_SERIAL_MULTI_INSTANTIATE is not set
 # CONFIG_INSPUR_PLATFORM_PROFILE is not set
 # CONFIG_LENOVO_WMI_CAMERA is not set
+# CONFIG_DASHARO_ACPI is not set
 CONFIG_FW_ATTR_CLASS=m
 CONFIG_INTEL_IPS=m
 CONFIG_INTEL_SCU_IPC=y
@@ -5629,6 +5662,8 @@ CONFIG_INTEL_SCU_PLATFORM=m
 CONFIG_INTEL_SCU_IPC_UTIL=m
 # CONFIG_SIEMENS_SIMATIC_IPC is not set
 # CONFIG_WINMATE_FM07_KEYS is not set
+# CONFIG_OXP_EC is not set
+# CONFIG_TUXEDO_NB04_WMI_AB is not set
 CONFIG_P2SB=y
 CONFIG_HAVE_CLK=y
 CONFIG_HAVE_CLK_PREPARE=y
@@ -5973,6 +6008,8 @@ CONFIG_BCACHEFS_LOCK_TIME_STATS=y
 # CONFIG_BCACHEFS_NO_LATENCY_ACCT is not set
 CONFIG_BCACHEFS_SIX_OPTIMISTIC_SPIN=y
 # CONFIG_BCACHEFS_PATH_TRACEPOINTS is not set
+# CONFIG_BCACHEFS_TRANS_KMALLOC_TRACE is not set
+# CONFIG_BCACHEFS_ASYNC_OBJECT_LISTS is not set
 CONFIG_ZONEFS_FS=m
 CONFIG_FS_DAX=y
 CONFIG_FS_DAX_PMD=y
@@ -6102,6 +6139,7 @@ CONFIG_SQUASHFS_DECOMP_MULTI_PERCPU=y
 CONFIG_SQUASHFS_CHOICE_DECOMP_BY_MOUNT=y
 CONFIG_SQUASHFS_MOUNT_DECOMP_THREADS=y
 CONFIG_SQUASHFS_XATTR=y
+# CONFIG_SQUASHFS_COMP_CACHE_FULL is not set
 CONFIG_SQUASHFS_ZLIB=y
 CONFIG_SQUASHFS_LZ4=y
 CONFIG_SQUASHFS_LZO=y
@@ -6116,6 +6154,8 @@ CONFIG_SQUASHFS_FRAGMENT_CACHE_SIZE=3
 # CONFIG_HPFS_FS is not set
 # CONFIG_QNX4FS_FS is not set
 # CONFIG_QNX6FS_FS is not set
+CONFIG_RESCTRL_FS=y
+CONFIG_RESCTRL_FS_PSEUDO_LOCK=y
 # CONFIG_ROMFS_FS is not set
 CONFIG_PSTORE=y
 CONFIG_PSTORE_DEFAULT_KMSG_BYTES=10240
@@ -6396,15 +6436,12 @@ CONFIG_CRYPTO_HKDF=y
 CONFIG_CRYPTO_MANAGER=y
 CONFIG_CRYPTO_MANAGER2=y
 # CONFIG_CRYPTO_USER is not set
-CONFIG_CRYPTO_MANAGER_DISABLE_TESTS=y
 CONFIG_CRYPTO_NULL=y
-CONFIG_CRYPTO_NULL2=y
 CONFIG_CRYPTO_PCRYPT=y
 CONFIG_CRYPTO_CRYPTD=y
 CONFIG_CRYPTO_AUTHENC=y
 # CONFIG_CRYPTO_KRB5ENC is not set
-# CONFIG_CRYPTO_TEST is not set
+# CONFIG_CRYPTO_BENCHMARK is not set
-CONFIG_CRYPTO_SIMD=y
 CONFIG_CRYPTO_ENGINE=m
 # end of Crypto core or helper
 
@@ -6483,13 +6520,11 @@ CONFIG_CRYPTO_MD4=m
 CONFIG_CRYPTO_MD5=y
 CONFIG_CRYPTO_MICHAEL_MIC=m
 CONFIG_CRYPTO_POLYVAL=m
-CONFIG_CRYPTO_POLY1305=m
 # CONFIG_CRYPTO_RMD160 is not set
 CONFIG_CRYPTO_SHA1=y
 CONFIG_CRYPTO_SHA256=y
 CONFIG_CRYPTO_SHA512=y
 CONFIG_CRYPTO_SHA3=y
-CONFIG_CRYPTO_SM3=m
 # CONFIG_CRYPTO_SM3_GENERIC is not set
 CONFIG_CRYPTO_STREEBOG=m
 # CONFIG_CRYPTO_WP512 is not set
@@ -6567,15 +6602,11 @@ CONFIG_CRYPTO_TWOFISH_AVX_X86_64=m
 CONFIG_CRYPTO_ARIA_AESNI_AVX_X86_64=m
 CONFIG_CRYPTO_ARIA_AESNI_AVX2_X86_64=m
 CONFIG_CRYPTO_ARIA_GFNI_AVX512_X86_64=m
-CONFIG_CRYPTO_CHACHA20_X86_64=m
 CONFIG_CRYPTO_AEGIS128_AESNI_SSE2=m
 CONFIG_CRYPTO_NHPOLY1305_SSE2=m
 CONFIG_CRYPTO_NHPOLY1305_AVX2=m
-CONFIG_CRYPTO_BLAKE2S_X86=y
 CONFIG_CRYPTO_POLYVAL_CLMUL_NI=m
-CONFIG_CRYPTO_POLY1305_X86_64=m
 CONFIG_CRYPTO_SHA1_SSSE3=m
-CONFIG_CRYPTO_SHA256_SSSE3=m
 CONFIG_CRYPTO_SHA512_SSSE3=m
 CONFIG_CRYPTO_SM3_AVX_X86_64=m
 CONFIG_CRYPTO_GHASH_CLMUL_NI_INTEL=m
@@ -6598,6 +6629,7 @@ CONFIG_CRYPTO_DEV_QAT_C3XXX=m
 CONFIG_CRYPTO_DEV_QAT_C62X=m
 CONFIG_CRYPTO_DEV_QAT_4XXX=m
 # CONFIG_CRYPTO_DEV_QAT_420XX is not set
+# CONFIG_CRYPTO_DEV_QAT_6XXX is not set
 CONFIG_CRYPTO_DEV_QAT_DH895xCCVF=m
 CONFIG_CRYPTO_DEV_QAT_C3XXXVF=m
 CONFIG_CRYPTO_DEV_QAT_C62XVF=m
@@ -6660,7 +6692,6 @@ CONFIG_CRYPTO_ARCH_HAVE_LIB_BLAKE2S=y
 CONFIG_CRYPTO_LIB_BLAKE2S_GENERIC=y
 CONFIG_CRYPTO_ARCH_HAVE_LIB_CHACHA=y
 CONFIG_CRYPTO_LIB_CHACHA_GENERIC=m
-CONFIG_CRYPTO_LIB_CHACHA_INTERNAL=m
 CONFIG_CRYPTO_LIB_CHACHA=m
 CONFIG_CRYPTO_ARCH_HAVE_LIB_CURVE25519=y
 CONFIG_CRYPTO_LIB_CURVE25519_GENERIC=m
@@ -6670,11 +6701,18 @@ CONFIG_CRYPTO_LIB_DES=m
 CONFIG_CRYPTO_LIB_POLY1305_RSIZE=11
 CONFIG_CRYPTO_ARCH_HAVE_LIB_POLY1305=y
 CONFIG_CRYPTO_LIB_POLY1305_GENERIC=m
-CONFIG_CRYPTO_LIB_POLY1305_INTERNAL=m
 CONFIG_CRYPTO_LIB_POLY1305=m
 CONFIG_CRYPTO_LIB_CHACHA20POLY1305=m
 CONFIG_CRYPTO_LIB_SHA1=y
 CONFIG_CRYPTO_LIB_SHA256=y
+CONFIG_CRYPTO_ARCH_HAVE_LIB_SHA256=y
+CONFIG_CRYPTO_ARCH_HAVE_LIB_SHA256_SIMD=y
+CONFIG_CRYPTO_LIB_SHA256_GENERIC=y
+CONFIG_CRYPTO_LIB_SM3=m
+CONFIG_CRYPTO_BLAKE2S_X86=y
+CONFIG_CRYPTO_CHACHA20_X86_64=m
+CONFIG_CRYPTO_POLY1305_X86_64=m
+CONFIG_CRYPTO_SHA256_X86_64=y
 # end of Crypto library routines
 
 CONFIG_CRC_CCITT=m
@@ -7121,7 +7159,6 @@ CONFIG_UNWINDER_ORC=y
 CONFIG_FUNCTION_ERROR_INJECTION=y
 # CONFIG_FAULT_INJECTION is not set
 CONFIG_ARCH_HAS_KCOV=y
-CONFIG_CC_HAS_SANCOV_TRACE_PC=y
 # CONFIG_KCOV is not set
 CONFIG_RUNTIME_TESTING_MENU=y
 # CONFIG_TEST_DHRY is not set

sys-kernel/hardened-kernel/hardened-kernel-6.16.8.ebuild

@@ -9,12 +9,12 @@ KERNEL_IUSE_MODULES_SIGN=1
 inherit kernel-build toolchain-funcs verify-sig
 
 MY_P=linux-${PV%.*}
-PATCHSET=linux-gentoo-patches-6.15.8
+PATCHSET=linux-gentoo-patches-6.16.8
 # https://koji.fedoraproject.org/koji/packageinfo?packageID=8
 # forked to https://github.com/projg2/fedora-kernel-config-for-gentoo
-CONFIG_VER=6.15.6-gentoo
+CONFIG_VER=6.16.2-gentoo
-GENTOO_CONFIG_VER=g16
+GENTOO_CONFIG_VER=g17
-SHA256SUM_DATE=20250801
+SHA256SUM_DATE=20250919
 HARDENED_PATCH_VER="${PV}-hardened1"
 USER_PATCHSET=linux-user-patches-${PV}
 GENPATCHES_EXCLUDE="1500_XATTR_USER_PREFIX.patch
@@ -66,10 +66,10 @@ REQUIRED_USE="
 "
 
 RDEPEND="
-	!sys-kernel/gentoo-kernel-bin:${SLOT}
 "
 BDEPEND="
-	debug? ( dev-util/pahole )
+        debug? ( dev-util/pahole )
+        verify-sig? ( >=sec-keys/openpgp-keys-kernel-20250702 )
 "
 PDEPEND="
 	>=virtual/dist-kernel-${PV}