From 09e0c6f0798cd6ecaa1d900d4afdc80c0ee28787 Mon Sep 17 00:00:00 2001
From: Aelin <aelin@postmarketos.org>
Date: Mon, 16 Mar 2026 01:56:46 +0100
Subject: [PATCH] linux-postmarketos-mainline: Upgrade to 7.0_rc4

Part-of: <https://gitlab.postmarketos.org/postmarketOS/pmaports/-/merge_requests/8187>
---
 .../main/linux-postmarketos-mainline/APKBUILD | 18 +++----
 .../config-mainline.aarch64                   | 29 ++++++----
 .../config-mainline.armv7                     | 54 +++++++++++++++----
 .../config-mainline.loongarch64               | 32 +++++++----
 .../config-mainline.ppc64le                   | 19 ++++---
 .../config-mainline.riscv64                   | 33 ++++++++----
 .../config-mainline.x86                       | 27 ++++++----
 .../config-mainline.x86_64                    | 28 ++++++----
 .../pmos.aarch64.config                       | 26 +++++++++
 .../pmos.armv7.config                         | 26 +++++++++
 .../pmos.loongarch64.config                   | 26 +++++++++
 .../pmos.ppc64le.config                       | 26 +++++++++
 .../pmos.riscv64.config                       | 26 +++++++++
 .../pmos.x86.config                           | 26 +++++++++
 .../pmos.x86_64.config                        | 26 +++++++++
 15 files changed, 344 insertions(+), 78 deletions(-)

diff --git a/device/main/linux-postmarketos-mainline/APKBUILD b/device/main/linux-postmarketos-mainline/APKBUILD
index 423ebc8fc..c80591e7b 100644
--- a/device/main/linux-postmarketos-mainline/APKBUILD
+++ b/device/main/linux-postmarketos-mainline/APKBUILD
@@ -1,7 +1,7 @@
 # Co-Maintainer: Achill Gilgenast <achill@achill.org>
 maintainer="Aelin <aelin@postmarketos.org>"
 pkgname=linux-postmarketos-mainline
-pkgver=7.0_rc3
+pkgver=7.0_rc4
 pkgrel=0
 _rel=${pkgver#*_p}
 _kver=${pkgver%_p*}
@@ -116,15 +116,15 @@ package() {
 }
 
 sha512sums="
-8f52207ee68fee8880c085db8033367c18cd2c44854add726eb4cdb90ab7502e5394d6c7ccc6896ce589f93ad081af1edc8cc011374cf7f24d37a1ade4e846e8  linux-postmarketos-mainline-7.0_rc3.tar.gz
+215a5f5b13fe9fc41f1ab4d7021988f04ba80cc792c475c794c4235101408ed534f04a1d48dfdcb354471cc58ce8611c3e9e33ca290308d6eaba4944c73677d1  linux-postmarketos-mainline-7.0_rc4.tar.gz
 1f11df2480e9f691573283597160b4c806e492cdca4825f3acb3afb70bde43abfab487bcde1f5553b431a702a0039479d041b0ce7859970e706b5a51d2ad8fb0  0001-WIP-arch-powerpc-boot-Support-LLVM-1-in-wrapper-scri.patch
 26521a9c9ea769534095dc4e306babadc8bcbaf03d7faa523c377e41ba0f742ecd0490fa27791d895f729c3ae8845297dca59b4db2475e7f078e689c447430bc  0002-WIP-arch-powerpc-boot-Use-z-notext-for-pseries-image.patch
 302c20c85559fc9b3b2420ed25be1bfbb76c87f2a470e4141c32e9542cf1f5c6b3b5a7847231a3eaa0f6bc0e5942d0c1599e807175dcf5e63469704c3d6adde3  0003-WIP-arch-powerpc-boot-Add-z-norelro.patch
-395095e082da9a17f18b9d33a0ec9ae649031924aab436f4a8461295bbc926fda85b64e9eb8fc062843f9e76a3ec6536a37a8fe7bf3ecb7454624b4009f6b755  config-mainline.aarch64
-39b64f3e78d87d2d5c8cc66a570c92def6ae9c8cac8eb83b8f0791444cfbb2913fd2b6a2095ee0aeaef9d249fd3a9e4c0b2e854b940141c5264b3cb8283dcf55  config-mainline.armv7
-c8bb1565ce324c57baebe4f961bd3db0c98f4423ae289cb7a255f827bf3e9685184bf2e40b0134c2f4be83470f2d17df11bce01a8d44bc3c4d186244ffd4e30a  config-mainline.loongarch64
-c3830f14ff1583e430cbd8058643135dfe5af3efb323cb1a5364d5a039142e6693749433e1a5d9db106460712bfa7ef04e7cc10fca50cb0279f93dbbf2857dd3  config-mainline.ppc64le
-91f6cb144a47746424b421a3b8bc5391b8fb205699cd1e687f93f1f533a34d23da37c5a8670b41f401c7848bcca673a412ebc59e7acf3acd5e6500e167d6d2e4  config-mainline.riscv64
-6ae12de795291f3f683dc515e8f6375c5476af32b603128e94175455096d0f70f594ac31deec9467937cdc9a8587d6f5bd4597425f8ada6792129b48948d6d03  config-mainline.x86
-195e61b92f2619c9d4c6d464a1aa4862bdd19a4026acf99f75ab71fa4080e9b71a786c91f920e05fa6e9e7a97b40638199914a264b1cbc0cb0da867cf85cce78  config-mainline.x86_64
+f9233358f8fd07150bfdab1d3b369e8450547b40e9da5e3ff9038abdaede6b6078989c5081ae00a890386fbf2ddd7d06be3dac87375d1f0f897fb9da8c5bb0b4  config-mainline.aarch64
+702014aa33181415a378d513077eb9a156e15d956ca3ab08d9cd6581c3682902c37779b1e42d14d4cfdd9b3d11a7542942d43967dbcd0154d2d08b69ec2ea876  config-mainline.armv7
+d2444aedb3ddf5aa1d22d5251b3bdcd9e3bae58dd28b6762d6d8ac0960f2ec085b781c9d47be03bb025417e6e3e124d55a6cf9cdcb284d20807e27a975731186  config-mainline.loongarch64
+15ca8f724af3dbdd8f5eea5266259b6f1e1eea5e2d91837dda60dff6d05dd90862ae347e6e6bce1956bdf8e0d30297e6ad561d679fddf104fac696d0319cfbd5  config-mainline.ppc64le
+86a6cd26f64e74b84421742db059d83724182b74496985bf362055159c53d19cc684698fd794337613cb3085494311151e49f8420b73f6e07d7faf3bfce7628d  config-mainline.riscv64
+f83d58594040cfe18c0312654d5ca959ccd62a3d5ee40e9bb8dc8ab4e3e597e0d308233711ffe52384781586612e8ecba9d637d61f5458306096024ef064fa81  config-mainline.x86
+e9f121b4e82a8df94fc497e40cddb2cf775aad8eb028a1bdef98ffd978de372ebf1891e31484e1cf3eaf9301a898a6b49f7383262b6e53c66a653ad2e775db62  config-mainline.x86_64
 "
diff --git a/device/main/linux-postmarketos-mainline/config-mainline.aarch64 b/device/main/linux-postmarketos-mainline/config-mainline.aarch64
index 8e7b1168e..434977eab 100644
--- a/device/main/linux-postmarketos-mainline/config-mainline.aarch64
+++ b/device/main/linux-postmarketos-mainline/config-mainline.aarch64
@@ -1,16 +1,16 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Linux/arm64 7.0.0-rc3 Kernel Configuration
+# Linux/arm64 7.0.0-rc4 Kernel Configuration
 #
-CONFIG_CC_VERSION_TEXT="Alpine clang version 22.1.0"
+CONFIG_CC_VERSION_TEXT="Alpine clang version 22.1.1"
 CONFIG_GCC_VERSION=0
 CONFIG_CC_IS_CLANG=y
-CONFIG_CLANG_VERSION=220100
+CONFIG_CLANG_VERSION=220101
 CONFIG_AS_IS_LLVM=y
-CONFIG_AS_VERSION=220100
+CONFIG_AS_VERSION=220101
 CONFIG_LD_VERSION=0
 CONFIG_LD_IS_LLD=y
-CONFIG_LLD_VERSION=220100
+CONFIG_LLD_VERSION=220101
 CONFIG_RUSTC_VERSION=109301
 CONFIG_RUST_IS_AVAILABLE=y
 CONFIG_RUSTC_LLVM_VERSION=220100
@@ -119,7 +119,7 @@ CONFIG_BPF_JIT=y
 CONFIG_BPF_JIT_DEFAULT_ON=y
 CONFIG_BPF_UNPRIV_DEFAULT_OFF=y
 # CONFIG_BPF_PRELOAD is not set
-# CONFIG_BPF_LSM is not set
+CONFIG_BPF_LSM=y
 # end of BPF subsystem
 
 CONFIG_PREEMPT_BUILD=y
@@ -810,11 +810,12 @@ CONFIG_SCHED_MC=y
 CONFIG_HOTPLUG_CORE_SYNC=y
 CONFIG_HOTPLUG_CORE_SYNC_DEAD=y
 CONFIG_GENERIC_IRQ_ENTRY=y
-# CONFIG_KPROBES is not set
+CONFIG_KPROBES=y
 CONFIG_JUMP_LABEL=y
 # CONFIG_STATIC_KEYS_SELFTEST is not set
 CONFIG_UPROBES=y
 CONFIG_HAVE_EFFICIENT_UNALIGNED_ACCESS=y
+CONFIG_KRETPROBES=y
 CONFIG_HAVE_IOREMAP_PROT=y
 CONFIG_HAVE_KPROBES=y
 CONFIG_HAVE_KRETPROBES=y
@@ -1364,11 +1365,13 @@ CONFIG_NETFILTER_XT_NAT=m
 # CONFIG_NETFILTER_XT_TARGET_NETMAP is not set
 # CONFIG_NETFILTER_XT_TARGET_NFLOG is not set
 # CONFIG_NETFILTER_XT_TARGET_NFQUEUE is not set
+# CONFIG_NETFILTER_XT_TARGET_NOTRACK is not set
 # CONFIG_NETFILTER_XT_TARGET_RATEEST is not set
 CONFIG_NETFILTER_XT_TARGET_REDIRECT=m
 CONFIG_NETFILTER_XT_TARGET_MASQUERADE=m
 # CONFIG_NETFILTER_XT_TARGET_TEE is not set
 # CONFIG_NETFILTER_XT_TARGET_TPROXY is not set
+# CONFIG_NETFILTER_XT_TARGET_TRACE is not set
 CONFIG_NETFILTER_XT_TARGET_TCPMSS=m
 # CONFIG_NETFILTER_XT_TARGET_TCPOPTSTRIP is not set
 
@@ -1501,7 +1504,7 @@ CONFIG_IP_NF_TARGET_REDIRECT=m
 CONFIG_IP_NF_MANGLE=m
 # CONFIG_IP_NF_TARGET_ECN is not set
 # CONFIG_IP_NF_TARGET_TTL is not set
-# CONFIG_IP_NF_RAW is not set
+CONFIG_IP_NF_RAW=m
 # CONFIG_IP_NF_SECURITY is not set
 # CONFIG_IP_NF_ARPTABLES is not set
 # CONFIG_IP_NF_ARPFILTER is not set
@@ -1536,7 +1539,7 @@ CONFIG_IP6_NF_FILTER=m
 CONFIG_IP6_NF_TARGET_REJECT=m
 # CONFIG_IP6_NF_TARGET_SYNPROXY is not set
 CONFIG_IP6_NF_MANGLE=m
-# CONFIG_IP6_NF_RAW is not set
+CONFIG_IP6_NF_RAW=m
 # CONFIG_IP6_NF_SECURITY is not set
 CONFIG_IP6_NF_NAT=m
 CONFIG_IP6_NF_TARGET_MASQUERADE=m
@@ -4271,6 +4274,7 @@ CONFIG_I2C_SLAVE=y
 # end of I2C support
 
 # CONFIG_I3C is not set
+CONFIG_I3C_OR_I2C=y
 CONFIG_SPI=y
 # CONFIG_SPI_DEBUG is not set
 CONFIG_SPI_MASTER=y
@@ -11319,7 +11323,7 @@ CONFIG_NFS_V3=y
 # CONFIG_NFS_V3_ACL is not set
 CONFIG_NFS_V4=y
 # CONFIG_NFS_SWAP is not set
-# CONFIG_NFS_V4_0 is not set
+CONFIG_NFS_V4_0=y
 CONFIG_NFS_V4_2=y
 CONFIG_PNFS_FILE_LAYOUT=y
 CONFIG_PNFS_BLOCK=y
@@ -12168,6 +12172,7 @@ CONFIG_RCU_TRACE=y
 # CONFIG_DEBUG_WQ_FORCE_RR_CPU is not set
 # CONFIG_CPU_HOTPLUG_STATE_CONTROL is not set
 # CONFIG_LATENCYTOP is not set
+# CONFIG_DEBUG_CGROUP_REF is not set
 CONFIG_USER_STACKTRACE_SUPPORT=y
 CONFIG_NOP_TRACER=y
 CONFIG_HAVE_FUNCTION_TRACER=y
@@ -12213,6 +12218,8 @@ CONFIG_BRANCH_PROFILE_NONE=y
 # CONFIG_PROFILE_ANNOTATED_BRANCHES is not set
 # CONFIG_PROFILE_ALL_BRANCHES is not set
 # CONFIG_BLK_DEV_IO_TRACE is not set
+CONFIG_KPROBE_EVENTS=y
+# CONFIG_KPROBE_EVENTS_ON_NOTRACE is not set
 CONFIG_UPROBE_EVENTS=y
 CONFIG_EPROBE_EVENTS=y
 CONFIG_BPF_EVENTS=y
@@ -12233,6 +12240,7 @@ CONFIG_FTRACE_MCOUNT_USE_PATCHABLE_FUNCTION_ENTRY=y
 # CONFIG_RING_BUFFER_STARTUP_TEST is not set
 # CONFIG_RING_BUFFER_VALIDATE_TIME_DELTAS is not set
 # CONFIG_PREEMPTIRQ_DELAY_TEST is not set
+# CONFIG_KPROBE_EVENT_GEN_TEST is not set
 # CONFIG_RV is not set
 # CONFIG_SAMPLES is not set
 CONFIG_HAVE_SAMPLE_FTRACE_DIRECT=y
@@ -12271,6 +12279,7 @@ CONFIG_CORESIGHT_CTI=m
 #
 # CONFIG_KUNIT is not set
 # CONFIG_NOTIFIER_ERROR_INJECTION is not set
+# CONFIG_FUNCTION_ERROR_INJECTION is not set
 # CONFIG_FAULT_INJECTION is not set
 CONFIG_ARCH_HAS_KCOV=y
 # CONFIG_KCOV is not set
diff --git a/device/main/linux-postmarketos-mainline/config-mainline.armv7 b/device/main/linux-postmarketos-mainline/config-mainline.armv7
index 1c4bbd1d7..5c9bc1da5 100644
--- a/device/main/linux-postmarketos-mainline/config-mainline.armv7
+++ b/device/main/linux-postmarketos-mainline/config-mainline.armv7
@@ -1,16 +1,16 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Linux/arm 7.0.0-rc3 Kernel Configuration
+# Linux/arm 7.0.0-rc4 Kernel Configuration
 #
-CONFIG_CC_VERSION_TEXT="Alpine clang version 22.1.0"
+CONFIG_CC_VERSION_TEXT="Alpine clang version 22.1.1"
 CONFIG_GCC_VERSION=0
 CONFIG_CC_IS_CLANG=y
-CONFIG_CLANG_VERSION=220100
+CONFIG_CLANG_VERSION=220101
 CONFIG_AS_IS_LLVM=y
-CONFIG_AS_VERSION=220100
+CONFIG_AS_VERSION=220101
 CONFIG_LD_VERSION=0
 CONFIG_LD_IS_LLD=y
-CONFIG_LLD_VERSION=220100
+CONFIG_LLD_VERSION=220101
 CONFIG_RUSTC_VERSION=109301
 CONFIG_RUST_IS_AVAILABLE=y
 CONFIG_RUSTC_LLVM_VERSION=220100
@@ -115,9 +115,11 @@ CONFIG_HAVE_EBPF_JIT=y
 # BPF subsystem
 #
 CONFIG_BPF_SYSCALL=y
-# CONFIG_BPF_JIT is not set
+CONFIG_BPF_JIT=y
+# CONFIG_BPF_JIT_ALWAYS_ON is not set
 CONFIG_BPF_UNPRIV_DEFAULT_OFF=y
 # CONFIG_BPF_PRELOAD is not set
+CONFIG_BPF_LSM=y
 # end of BPF subsystem
 
 CONFIG_PREEMPT_VOLUNTARY_BUILD=y
@@ -883,12 +885,14 @@ CONFIG_SCHED_SMT=y
 CONFIG_SCHED_MC=y
 CONFIG_HOTPLUG_CORE_SYNC=y
 CONFIG_HOTPLUG_CORE_SYNC_DEAD=y
-# CONFIG_KPROBES is not set
+CONFIG_KPROBES=y
 CONFIG_JUMP_LABEL=y
 # CONFIG_STATIC_KEYS_SELFTEST is not set
+CONFIG_OPTPROBES=y
 CONFIG_UPROBES=y
 CONFIG_HAVE_EFFICIENT_UNALIGNED_ACCESS=y
 CONFIG_ARCH_USE_BUILTIN_BSWAP=y
+CONFIG_KRETPROBES=y
 CONFIG_HAVE_KPROBES=y
 CONFIG_HAVE_KRETPROBES=y
 CONFIG_HAVE_OPTPROBES=y
@@ -1259,6 +1263,7 @@ CONFIG_IPV6_MULTIPLE_TABLES=y
 # CONFIG_IPV6_SEG6_HMAC is not set
 # CONFIG_IPV6_RPL_LWTUNNEL is not set
 # CONFIG_IPV6_IOAM6_LWTUNNEL is not set
+# CONFIG_NETLABEL is not set
 # CONFIG_MPTCP is not set
 # CONFIG_NETWORK_SECMARK is not set
 CONFIG_NET_PTP_CLASSIFY=y
@@ -1358,11 +1363,13 @@ CONFIG_NETFILTER_XT_NAT=m
 # CONFIG_NETFILTER_XT_TARGET_NETMAP is not set
 # CONFIG_NETFILTER_XT_TARGET_NFLOG is not set
 # CONFIG_NETFILTER_XT_TARGET_NFQUEUE is not set
+# CONFIG_NETFILTER_XT_TARGET_NOTRACK is not set
 # CONFIG_NETFILTER_XT_TARGET_RATEEST is not set
 CONFIG_NETFILTER_XT_TARGET_REDIRECT=m
 CONFIG_NETFILTER_XT_TARGET_MASQUERADE=m
 # CONFIG_NETFILTER_XT_TARGET_TEE is not set
 # CONFIG_NETFILTER_XT_TARGET_TPROXY is not set
+# CONFIG_NETFILTER_XT_TARGET_TRACE is not set
 CONFIG_NETFILTER_XT_TARGET_TCPMSS=m
 # CONFIG_NETFILTER_XT_TARGET_TCPOPTSTRIP is not set
 
@@ -1496,7 +1503,8 @@ CONFIG_IP_NF_TARGET_REDIRECT=m
 CONFIG_IP_NF_MANGLE=m
 # CONFIG_IP_NF_TARGET_ECN is not set
 # CONFIG_IP_NF_TARGET_TTL is not set
-# CONFIG_IP_NF_RAW is not set
+CONFIG_IP_NF_RAW=m
+# CONFIG_IP_NF_SECURITY is not set
 # CONFIG_IP_NF_ARPTABLES is not set
 # CONFIG_IP_NF_ARPFILTER is not set
 # end of IP: Netfilter Configuration
@@ -1530,7 +1538,8 @@ CONFIG_IP6_NF_FILTER=m
 CONFIG_IP6_NF_TARGET_REJECT=m
 # CONFIG_IP6_NF_TARGET_SYNPROXY is not set
 CONFIG_IP6_NF_MANGLE=m
-# CONFIG_IP6_NF_RAW is not set
+CONFIG_IP6_NF_RAW=m
+# CONFIG_IP6_NF_SECURITY is not set
 CONFIG_IP6_NF_NAT=m
 CONFIG_IP6_NF_TARGET_MASQUERADE=m
 # CONFIG_IP6_NF_TARGET_NPT is not set
@@ -4037,6 +4046,7 @@ CONFIG_I2C_SLAVE_EEPROM=y
 # end of I2C support
 
 # CONFIG_I3C is not set
+CONFIG_I3C_OR_I2C=y
 CONFIG_SPI=y
 # CONFIG_SPI_DEBUG is not set
 CONFIG_SPI_MASTER=y
@@ -10798,13 +10808,14 @@ CONFIG_NFS_V3=y
 CONFIG_NFS_V3_ACL=y
 CONFIG_NFS_V4=y
 # CONFIG_NFS_SWAP is not set
-# CONFIG_NFS_V4_0 is not set
+CONFIG_NFS_V4_0=y
 CONFIG_NFS_V4_2=y
 CONFIG_PNFS_FILE_LAYOUT=y
 CONFIG_PNFS_BLOCK=y
 CONFIG_PNFS_FLEXFILE_LAYOUT=y
 CONFIG_NFS_V4_1_IMPLEMENTATION_ID_DOMAIN="kernel.org"
 # CONFIG_NFS_V4_1_MIGRATION is not set
+CONFIG_NFS_V4_SECURITY_LABEL=y
 CONFIG_ROOT_NFS=y
 # CONFIG_NFS_FSCACHE is not set
 # CONFIG_NFS_USE_LEGACY_DNS is not set
@@ -10911,10 +10922,25 @@ CONFIG_KEY_DH_OPERATIONS=y
 CONFIG_PROC_MEM_ALWAYS_FORCE=y
 # CONFIG_PROC_MEM_FORCE_PTRACE is not set
 # CONFIG_PROC_MEM_NO_FORCE is not set
-# CONFIG_SECURITY is not set
+CONFIG_SECURITY=y
 CONFIG_SECURITYFS=y
+# CONFIG_SECURITY_NETWORK is not set
+# CONFIG_SECURITY_PATH is not set
 # CONFIG_STATIC_USERMODEHELPER is not set
+# CONFIG_SECURITY_SMACK is not set
+# CONFIG_SECURITY_TOMOYO is not set
+# CONFIG_SECURITY_APPARMOR is not set
+# CONFIG_SECURITY_LOADPIN is not set
+# CONFIG_SECURITY_YAMA is not set
+# CONFIG_SECURITY_SAFESETID is not set
+# CONFIG_SECURITY_LOCKDOWN_LSM is not set
+# CONFIG_SECURITY_LANDLOCK is not set
+CONFIG_INTEGRITY=y
+# CONFIG_INTEGRITY_SIGNATURE is not set
+# CONFIG_IMA is not set
+# CONFIG_EVM is not set
 CONFIG_DEFAULT_SECURITY_DAC=y
+CONFIG_LSM="landlock,lockdown,yama,loadpin,safesetid,ipe,bpf"
 
 #
 # Kernel hardening options
@@ -11560,6 +11586,7 @@ CONFIG_RCU_TRACE=y
 # CONFIG_DEBUG_WQ_FORCE_RR_CPU is not set
 # CONFIG_CPU_HOTPLUG_STATE_CONTROL is not set
 # CONFIG_LATENCYTOP is not set
+# CONFIG_DEBUG_CGROUP_REF is not set
 CONFIG_NOP_TRACER=y
 CONFIG_HAVE_FUNCTION_TRACER=y
 CONFIG_HAVE_FUNCTION_GRAPH_TRACER=y
@@ -11601,6 +11628,8 @@ CONFIG_BRANCH_PROFILE_NONE=y
 # CONFIG_PROFILE_ANNOTATED_BRANCHES is not set
 # CONFIG_PROFILE_ALL_BRANCHES is not set
 # CONFIG_BLK_DEV_IO_TRACE is not set
+CONFIG_KPROBE_EVENTS=y
+# CONFIG_KPROBE_EVENTS_ON_NOTRACE is not set
 CONFIG_UPROBE_EVENTS=y
 CONFIG_EPROBE_EVENTS=y
 CONFIG_BPF_EVENTS=y
@@ -11620,6 +11649,7 @@ CONFIG_FTRACE_MCOUNT_USE_RECORDMCOUNT=y
 # CONFIG_RING_BUFFER_STARTUP_TEST is not set
 # CONFIG_RING_BUFFER_VALIDATE_TIME_DELTAS is not set
 # CONFIG_PREEMPTIRQ_DELAY_TEST is not set
+# CONFIG_KPROBE_EVENT_GEN_TEST is not set
 # CONFIG_RV is not set
 # CONFIG_SAMPLES is not set
 # CONFIG_STRICT_DEVMEM is not set
@@ -11637,6 +11667,7 @@ CONFIG_ARM_UNWIND=y
 CONFIG_DEBUG_VF_UART_PORT=1
 CONFIG_DEBUG_LL_INCLUDE="mach/debug-macro.S"
 CONFIG_UNCOMPRESS_INCLUDE="debug/uncompress.h"
+# CONFIG_ARM_KPROBES_TEST is not set
 # CONFIG_PID_IN_CONTEXTIDR is not set
 # CONFIG_CORESIGHT is not set
 # end of arm Debugging
@@ -11646,6 +11677,7 @@ CONFIG_UNCOMPRESS_INCLUDE="debug/uncompress.h"
 #
 # CONFIG_KUNIT is not set
 # CONFIG_NOTIFIER_ERROR_INJECTION is not set
+# CONFIG_FUNCTION_ERROR_INJECTION is not set
 # CONFIG_FAULT_INJECTION is not set
 CONFIG_ARCH_HAS_KCOV=y
 # CONFIG_KCOV is not set
diff --git a/device/main/linux-postmarketos-mainline/config-mainline.loongarch64 b/device/main/linux-postmarketos-mainline/config-mainline.loongarch64
index 2609ad67f..bfeb64473 100644
--- a/device/main/linux-postmarketos-mainline/config-mainline.loongarch64
+++ b/device/main/linux-postmarketos-mainline/config-mainline.loongarch64
@@ -1,16 +1,16 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Linux/loongarch 7.0.0-rc3 Kernel Configuration
+# Linux/loongarch 7.0.0-rc4 Kernel Configuration
 #
-CONFIG_CC_VERSION_TEXT="Alpine clang version 22.1.0"
+CONFIG_CC_VERSION_TEXT="Alpine clang version 22.1.1"
 CONFIG_GCC_VERSION=0
 CONFIG_CC_IS_CLANG=y
-CONFIG_CLANG_VERSION=220100
+CONFIG_CLANG_VERSION=220101
 CONFIG_AS_IS_LLVM=y
-CONFIG_AS_VERSION=220100
+CONFIG_AS_VERSION=220101
 CONFIG_LD_VERSION=0
 CONFIG_LD_IS_LLD=y
-CONFIG_LLD_VERSION=220100
+CONFIG_LLD_VERSION=220101
 CONFIG_RUSTC_VERSION=109301
 CONFIG_RUST_IS_AVAILABLE=y
 CONFIG_RUSTC_LLVM_VERSION=220100
@@ -112,7 +112,7 @@ CONFIG_BPF_JIT=y
 CONFIG_BPF_JIT_DEFAULT_ON=y
 CONFIG_BPF_UNPRIV_DEFAULT_OFF=y
 # CONFIG_BPF_PRELOAD is not set
-# CONFIG_BPF_LSM is not set
+CONFIG_BPF_LSM=y
 # end of BPF subsystem
 
 CONFIG_PREEMPT_BUILD=y
@@ -519,12 +519,15 @@ CONFIG_SCHED_MC=y
 CONFIG_GENERIC_IRQ_ENTRY=y
 CONFIG_GENERIC_SYSCALL=y
 CONFIG_GENERIC_ENTRY=y
-# CONFIG_KPROBES is not set
+CONFIG_KPROBES=y
 CONFIG_JUMP_LABEL=y
 # CONFIG_STATIC_KEYS_SELFTEST is not set
+CONFIG_KPROBES_ON_FTRACE=y
 CONFIG_UPROBES=y
 CONFIG_HAVE_64BIT_ALIGNED_ACCESS=y
 CONFIG_ARCH_USE_BUILTIN_BSWAP=y
+CONFIG_KRETPROBES=y
+CONFIG_KRETPROBE_ON_RETHOOK=y
 CONFIG_HAVE_IOREMAP_PROT=y
 CONFIG_HAVE_KPROBES=y
 CONFIG_HAVE_KRETPROBES=y
@@ -1121,11 +1124,13 @@ CONFIG_NETFILTER_XT_NAT=m
 # CONFIG_NETFILTER_XT_TARGET_NETMAP is not set
 # CONFIG_NETFILTER_XT_TARGET_NFLOG is not set
 CONFIG_NETFILTER_XT_TARGET_NFQUEUE=m
+# CONFIG_NETFILTER_XT_TARGET_NOTRACK is not set
 CONFIG_NETFILTER_XT_TARGET_RATEEST=m
 CONFIG_NETFILTER_XT_TARGET_REDIRECT=m
 CONFIG_NETFILTER_XT_TARGET_MASQUERADE=m
 # CONFIG_NETFILTER_XT_TARGET_TEE is not set
 # CONFIG_NETFILTER_XT_TARGET_TPROXY is not set
+# CONFIG_NETFILTER_XT_TARGET_TRACE is not set
 CONFIG_NETFILTER_XT_TARGET_SECMARK=m
 CONFIG_NETFILTER_XT_TARGET_TCPMSS=m
 CONFIG_NETFILTER_XT_TARGET_TCPOPTSTRIP=m
@@ -1281,7 +1286,7 @@ CONFIG_IP_NF_TARGET_REDIRECT=m
 CONFIG_IP_NF_MANGLE=m
 CONFIG_IP_NF_TARGET_ECN=m
 # CONFIG_IP_NF_TARGET_TTL is not set
-# CONFIG_IP_NF_RAW is not set
+CONFIG_IP_NF_RAW=m
 # CONFIG_IP_NF_SECURITY is not set
 # CONFIG_IP_NF_ARPTABLES is not set
 CONFIG_NFT_COMPAT_ARP=m
@@ -1318,7 +1323,7 @@ CONFIG_IP6_NF_FILTER=m
 CONFIG_IP6_NF_TARGET_REJECT=m
 CONFIG_IP6_NF_TARGET_SYNPROXY=m
 CONFIG_IP6_NF_MANGLE=m
-# CONFIG_IP6_NF_RAW is not set
+CONFIG_IP6_NF_RAW=m
 # CONFIG_IP6_NF_SECURITY is not set
 CONFIG_IP6_NF_NAT=m
 CONFIG_IP6_NF_TARGET_MASQUERADE=m
@@ -3497,6 +3502,7 @@ CONFIG_I2C_VIRTIO=m
 # end of I2C support
 
 # CONFIG_I3C is not set
+CONFIG_I3C_OR_I2C=y
 CONFIG_SPI=y
 # CONFIG_SPI_DEBUG is not set
 CONFIG_SPI_MASTER=y
@@ -8034,7 +8040,7 @@ CONFIG_NFS_V3=y
 CONFIG_NFS_V3_ACL=y
 CONFIG_NFS_V4=y
 # CONFIG_NFS_SWAP is not set
-# CONFIG_NFS_V4_0 is not set
+CONFIG_NFS_V4_0=y
 CONFIG_NFS_V4_2=y
 CONFIG_PNFS_FILE_LAYOUT=y
 CONFIG_PNFS_BLOCK=y
@@ -8819,9 +8825,11 @@ CONFIG_RCU_TRACE=y
 
 # CONFIG_DEBUG_WQ_FORCE_RR_CPU is not set
 # CONFIG_CPU_HOTPLUG_STATE_CONTROL is not set
+# CONFIG_DEBUG_CGROUP_REF is not set
 CONFIG_USER_STACKTRACE_SUPPORT=y
 CONFIG_NOP_TRACER=y
 CONFIG_HAVE_RETHOOK=y
+CONFIG_RETHOOK=y
 CONFIG_HAVE_FUNCTION_TRACER=y
 CONFIG_HAVE_FUNCTION_GRAPH_TRACER=y
 CONFIG_HAVE_FUNCTION_GRAPH_FREGS=y
@@ -8867,6 +8875,8 @@ CONFIG_BRANCH_PROFILE_NONE=y
 # CONFIG_PROFILE_ANNOTATED_BRANCHES is not set
 # CONFIG_PROFILE_ALL_BRANCHES is not set
 # CONFIG_BLK_DEV_IO_TRACE is not set
+CONFIG_KPROBE_EVENTS=y
+# CONFIG_KPROBE_EVENTS_ON_NOTRACE is not set
 CONFIG_UPROBE_EVENTS=y
 CONFIG_EPROBE_EVENTS=y
 CONFIG_BPF_EVENTS=y
@@ -8885,6 +8895,7 @@ CONFIG_FTRACE_MCOUNT_USE_RECORDMCOUNT=y
 # CONFIG_RING_BUFFER_STARTUP_TEST is not set
 # CONFIG_RING_BUFFER_VALIDATE_TIME_DELTAS is not set
 # CONFIG_PREEMPTIRQ_DELAY_TEST is not set
+# CONFIG_KPROBE_EVENT_GEN_TEST is not set
 # CONFIG_RV is not set
 # CONFIG_SAMPLES is not set
 CONFIG_HAVE_SAMPLE_FTRACE_DIRECT=y
@@ -8904,6 +8915,7 @@ CONFIG_UNWINDER_ORC=y
 #
 # CONFIG_KUNIT is not set
 # CONFIG_NOTIFIER_ERROR_INJECTION is not set
+# CONFIG_FUNCTION_ERROR_INJECTION is not set
 # CONFIG_FAULT_INJECTION is not set
 CONFIG_ARCH_HAS_KCOV=y
 # CONFIG_KCOV is not set
diff --git a/device/main/linux-postmarketos-mainline/config-mainline.ppc64le b/device/main/linux-postmarketos-mainline/config-mainline.ppc64le
index c77b37d61..a0b28ebd1 100644
--- a/device/main/linux-postmarketos-mainline/config-mainline.ppc64le
+++ b/device/main/linux-postmarketos-mainline/config-mainline.ppc64le
@@ -1,16 +1,16 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Linux/powerpc 7.0.0-rc3 Kernel Configuration
+# Linux/powerpc 7.0.0-rc4 Kernel Configuration
 #
-CONFIG_CC_VERSION_TEXT="Alpine clang version 22.1.0"
+CONFIG_CC_VERSION_TEXT="Alpine clang version 22.1.1"
 CONFIG_GCC_VERSION=0
 CONFIG_CC_IS_CLANG=y
-CONFIG_CLANG_VERSION=220100
+CONFIG_CLANG_VERSION=220101
 CONFIG_AS_IS_LLVM=y
-CONFIG_AS_VERSION=220100
+CONFIG_AS_VERSION=220101
 CONFIG_LD_VERSION=0
 CONFIG_LD_IS_LLD=y
-CONFIG_LLD_VERSION=220100
+CONFIG_LLD_VERSION=220101
 CONFIG_RUSTC_VERSION=109301
 CONFIG_RUST_IS_AVAILABLE=y
 CONFIG_RUSTC_LLVM_VERSION=220100
@@ -1180,11 +1180,13 @@ CONFIG_NETFILTER_XT_NAT=m
 # CONFIG_NETFILTER_XT_TARGET_NETMAP is not set
 CONFIG_NETFILTER_XT_TARGET_NFLOG=m
 # CONFIG_NETFILTER_XT_TARGET_NFQUEUE is not set
+# CONFIG_NETFILTER_XT_TARGET_NOTRACK is not set
 # CONFIG_NETFILTER_XT_TARGET_RATEEST is not set
 CONFIG_NETFILTER_XT_TARGET_REDIRECT=m
 CONFIG_NETFILTER_XT_TARGET_MASQUERADE=m
 # CONFIG_NETFILTER_XT_TARGET_TEE is not set
 # CONFIG_NETFILTER_XT_TARGET_TPROXY is not set
+# CONFIG_NETFILTER_XT_TARGET_TRACE is not set
 CONFIG_NETFILTER_XT_TARGET_SECMARK=m
 CONFIG_NETFILTER_XT_TARGET_TCPMSS=m
 # CONFIG_NETFILTER_XT_TARGET_TCPOPTSTRIP is not set
@@ -1321,7 +1323,7 @@ CONFIG_IP_NF_TARGET_REDIRECT=m
 CONFIG_IP_NF_MANGLE=m
 # CONFIG_IP_NF_TARGET_ECN is not set
 # CONFIG_IP_NF_TARGET_TTL is not set
-# CONFIG_IP_NF_RAW is not set
+CONFIG_IP_NF_RAW=m
 # CONFIG_IP_NF_SECURITY is not set
 # CONFIG_IP_NF_ARPTABLES is not set
 # CONFIG_IP_NF_ARPFILTER is not set
@@ -1356,7 +1358,7 @@ CONFIG_IP6_NF_FILTER=m
 CONFIG_IP6_NF_TARGET_REJECT=m
 # CONFIG_IP6_NF_TARGET_SYNPROXY is not set
 CONFIG_IP6_NF_MANGLE=m
-# CONFIG_IP6_NF_RAW is not set
+CONFIG_IP6_NF_RAW=m
 # CONFIG_IP6_NF_SECURITY is not set
 CONFIG_IP6_NF_NAT=m
 CONFIG_IP6_NF_TARGET_MASQUERADE=m
@@ -3045,6 +3047,7 @@ CONFIG_I2C_VIRTIO=m
 # end of I2C support
 
 # CONFIG_I3C is not set
+CONFIG_I3C_OR_I2C=y
 CONFIG_SPI=y
 # CONFIG_SPI_DEBUG is not set
 CONFIG_SPI_MASTER=y
@@ -5887,7 +5890,7 @@ CONFIG_NFS_V3=y
 CONFIG_NFS_V3_ACL=y
 CONFIG_NFS_V4=y
 # CONFIG_NFS_SWAP is not set
-# CONFIG_NFS_V4_0 is not set
+CONFIG_NFS_V4_0=y
 # CONFIG_NFS_V4_2 is not set
 CONFIG_PNFS_FILE_LAYOUT=y
 CONFIG_PNFS_BLOCK=y
diff --git a/device/main/linux-postmarketos-mainline/config-mainline.riscv64 b/device/main/linux-postmarketos-mainline/config-mainline.riscv64
index debb5ce73..5f72e7af8 100644
--- a/device/main/linux-postmarketos-mainline/config-mainline.riscv64
+++ b/device/main/linux-postmarketos-mainline/config-mainline.riscv64
@@ -1,16 +1,16 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Linux/riscv 7.0.0-rc3 Kernel Configuration
+# Linux/riscv 7.0.0-rc4 Kernel Configuration
 #
-CONFIG_CC_VERSION_TEXT="Alpine clang version 22.1.0"
+CONFIG_CC_VERSION_TEXT="Alpine clang version 22.1.1"
 CONFIG_GCC_VERSION=0
 CONFIG_CC_IS_CLANG=y
-CONFIG_CLANG_VERSION=220100
+CONFIG_CLANG_VERSION=220101
 CONFIG_AS_IS_LLVM=y
-CONFIG_AS_VERSION=220100
+CONFIG_AS_VERSION=220101
 CONFIG_LD_VERSION=0
 CONFIG_LD_IS_LLD=y
-CONFIG_LLD_VERSION=220100
+CONFIG_LLD_VERSION=220101
 CONFIG_RUSTC_VERSION=109301
 CONFIG_RUST_IS_AVAILABLE=y
 CONFIG_RUSTC_LLVM_VERSION=220100
@@ -111,9 +111,11 @@ CONFIG_HAVE_EBPF_JIT=y
 # BPF subsystem
 #
 CONFIG_BPF_SYSCALL=y
-# CONFIG_BPF_JIT is not set
+CONFIG_BPF_JIT=y
+# CONFIG_BPF_JIT_ALWAYS_ON is not set
 CONFIG_BPF_UNPRIV_DEFAULT_OFF=y
 # CONFIG_BPF_PRELOAD is not set
+CONFIG_BPF_LSM=y
 # end of BPF subsystem
 
 CONFIG_PREEMPT_BUILD=y
@@ -617,11 +619,13 @@ CONFIG_HOTPLUG_PARALLEL=y
 CONFIG_GENERIC_IRQ_ENTRY=y
 CONFIG_GENERIC_SYSCALL=y
 CONFIG_GENERIC_ENTRY=y
-# CONFIG_KPROBES is not set
+CONFIG_KPROBES=y
 CONFIG_JUMP_LABEL=y
 # CONFIG_STATIC_KEYS_SELFTEST is not set
 CONFIG_UPROBES=y
 CONFIG_HAVE_64BIT_ALIGNED_ACCESS=y
+CONFIG_KRETPROBES=y
+CONFIG_KRETPROBE_ON_RETHOOK=y
 CONFIG_HAVE_KPROBES=y
 CONFIG_HAVE_KRETPROBES=y
 CONFIG_HAVE_FUNCTION_ERROR_INJECTION=y
@@ -1125,11 +1129,13 @@ CONFIG_NETFILTER_XT_NAT=m
 # CONFIG_NETFILTER_XT_TARGET_NETMAP is not set
 # CONFIG_NETFILTER_XT_TARGET_NFLOG is not set
 # CONFIG_NETFILTER_XT_TARGET_NFQUEUE is not set
+# CONFIG_NETFILTER_XT_TARGET_NOTRACK is not set
 # CONFIG_NETFILTER_XT_TARGET_RATEEST is not set
 CONFIG_NETFILTER_XT_TARGET_REDIRECT=m
 CONFIG_NETFILTER_XT_TARGET_MASQUERADE=m
 # CONFIG_NETFILTER_XT_TARGET_TEE is not set
 # CONFIG_NETFILTER_XT_TARGET_TPROXY is not set
+# CONFIG_NETFILTER_XT_TARGET_TRACE is not set
 # CONFIG_NETFILTER_XT_TARGET_SECMARK is not set
 CONFIG_NETFILTER_XT_TARGET_TCPMSS=m
 # CONFIG_NETFILTER_XT_TARGET_TCPOPTSTRIP is not set
@@ -1265,7 +1271,7 @@ CONFIG_IP_NF_TARGET_REDIRECT=m
 CONFIG_IP_NF_MANGLE=m
 # CONFIG_IP_NF_TARGET_ECN is not set
 # CONFIG_IP_NF_TARGET_TTL is not set
-# CONFIG_IP_NF_RAW is not set
+CONFIG_IP_NF_RAW=m
 # CONFIG_IP_NF_SECURITY is not set
 # CONFIG_IP_NF_ARPTABLES is not set
 # CONFIG_IP_NF_ARPFILTER is not set
@@ -1300,7 +1306,7 @@ CONFIG_IP6_NF_FILTER=m
 CONFIG_IP6_NF_TARGET_REJECT=m
 # CONFIG_IP6_NF_TARGET_SYNPROXY is not set
 CONFIG_IP6_NF_MANGLE=m
-# CONFIG_IP6_NF_RAW is not set
+CONFIG_IP6_NF_RAW=m
 # CONFIG_IP6_NF_SECURITY is not set
 CONFIG_IP6_NF_NAT=m
 CONFIG_IP6_NF_TARGET_MASQUERADE=m
@@ -3119,6 +3125,7 @@ CONFIG_I2C_VIRTIO=m
 # end of I2C support
 
 # CONFIG_I3C is not set
+CONFIG_I3C_OR_I2C=y
 CONFIG_SPI=y
 # CONFIG_SPI_DEBUG is not set
 CONFIG_SPI_MASTER=y
@@ -7108,7 +7115,7 @@ CONFIG_NFS_V3=y
 # CONFIG_NFS_V3_ACL is not set
 CONFIG_NFS_V4=y
 # CONFIG_NFS_SWAP is not set
-# CONFIG_NFS_V4_0 is not set
+CONFIG_NFS_V4_0=y
 CONFIG_NFS_V4_2=y
 CONFIG_PNFS_FILE_LAYOUT=y
 CONFIG_PNFS_BLOCK=y
@@ -7841,9 +7848,11 @@ CONFIG_RCU_TRACE=y
 # CONFIG_DEBUG_WQ_FORCE_RR_CPU is not set
 # CONFIG_CPU_HOTPLUG_STATE_CONTROL is not set
 # CONFIG_LATENCYTOP is not set
+# CONFIG_DEBUG_CGROUP_REF is not set
 CONFIG_USER_STACKTRACE_SUPPORT=y
 CONFIG_NOP_TRACER=y
 CONFIG_HAVE_RETHOOK=y
+CONFIG_RETHOOK=y
 CONFIG_HAVE_FUNCTION_TRACER=y
 CONFIG_HAVE_FUNCTION_GRAPH_TRACER=y
 CONFIG_HAVE_FUNCTION_GRAPH_FREGS=y
@@ -7883,6 +7892,8 @@ CONFIG_BRANCH_PROFILE_NONE=y
 # CONFIG_PROFILE_ANNOTATED_BRANCHES is not set
 # CONFIG_PROFILE_ALL_BRANCHES is not set
 # CONFIG_BLK_DEV_IO_TRACE is not set
+CONFIG_KPROBE_EVENTS=y
+# CONFIG_KPROBE_EVENTS_ON_NOTRACE is not set
 CONFIG_UPROBE_EVENTS=y
 CONFIG_EPROBE_EVENTS=y
 CONFIG_BPF_EVENTS=y
@@ -7902,6 +7913,7 @@ CONFIG_FTRACE_MCOUNT_USE_PATCHABLE_FUNCTION_ENTRY=y
 # CONFIG_RING_BUFFER_STARTUP_TEST is not set
 # CONFIG_RING_BUFFER_VALIDATE_TIME_DELTAS is not set
 # CONFIG_PREEMPTIRQ_DELAY_TEST is not set
+# CONFIG_KPROBE_EVENT_GEN_TEST is not set
 # CONFIG_RV is not set
 # CONFIG_SAMPLES is not set
 CONFIG_HAVE_SAMPLE_FTRACE_DIRECT=y
@@ -7925,6 +7937,7 @@ CONFIG_RUNTIME_KERNEL_TESTING_MENU=y
 #
 # CONFIG_KUNIT is not set
 # CONFIG_NOTIFIER_ERROR_INJECTION is not set
+# CONFIG_FUNCTION_ERROR_INJECTION is not set
 # CONFIG_FAULT_INJECTION is not set
 CONFIG_ARCH_HAS_KCOV=y
 # CONFIG_KCOV is not set
diff --git a/device/main/linux-postmarketos-mainline/config-mainline.x86 b/device/main/linux-postmarketos-mainline/config-mainline.x86
index 52e6df69b..6aa5c9096 100644
--- a/device/main/linux-postmarketos-mainline/config-mainline.x86
+++ b/device/main/linux-postmarketos-mainline/config-mainline.x86
@@ -1,16 +1,16 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Linux/i386 7.0.0-rc3 Kernel Configuration
+# Linux/i386 7.0.0-rc4 Kernel Configuration
 #
-CONFIG_CC_VERSION_TEXT="Alpine clang version 22.1.0"
+CONFIG_CC_VERSION_TEXT="Alpine clang version 22.1.1"
 CONFIG_GCC_VERSION=0
 CONFIG_CC_IS_CLANG=y
-CONFIG_CLANG_VERSION=220100
+CONFIG_CLANG_VERSION=220101
 CONFIG_AS_IS_LLVM=y
-CONFIG_AS_VERSION=220100
+CONFIG_AS_VERSION=220101
 CONFIG_LD_VERSION=0
 CONFIG_LD_IS_LLD=y
-CONFIG_LLD_VERSION=220100
+CONFIG_LLD_VERSION=220101
 CONFIG_RUSTC_VERSION=109301
 CONFIG_RUST_IS_AVAILABLE=y
 CONFIG_RUSTC_LLVM_VERSION=220100
@@ -122,9 +122,11 @@ CONFIG_HAVE_EBPF_JIT=y
 # BPF subsystem
 #
 CONFIG_BPF_SYSCALL=y
-# CONFIG_BPF_JIT is not set
+CONFIG_BPF_JIT=y
+# CONFIG_BPF_JIT_ALWAYS_ON is not set
 CONFIG_BPF_UNPRIV_DEFAULT_OFF=y
 # CONFIG_BPF_PRELOAD is not set
+CONFIG_BPF_LSM=y
 # end of BPF subsystem
 
 CONFIG_PREEMPT_BUILD=y
@@ -1257,11 +1259,13 @@ CONFIG_NETFILTER_XT_NAT=m
 # CONFIG_NETFILTER_XT_TARGET_NETMAP is not set
 CONFIG_NETFILTER_XT_TARGET_NFLOG=m
 # CONFIG_NETFILTER_XT_TARGET_NFQUEUE is not set
+# CONFIG_NETFILTER_XT_TARGET_NOTRACK is not set
 # CONFIG_NETFILTER_XT_TARGET_RATEEST is not set
 CONFIG_NETFILTER_XT_TARGET_REDIRECT=m
 CONFIG_NETFILTER_XT_TARGET_MASQUERADE=m
 # CONFIG_NETFILTER_XT_TARGET_TEE is not set
 # CONFIG_NETFILTER_XT_TARGET_TPROXY is not set
+# CONFIG_NETFILTER_XT_TARGET_TRACE is not set
 CONFIG_NETFILTER_XT_TARGET_SECMARK=m
 CONFIG_NETFILTER_XT_TARGET_TCPMSS=m
 # CONFIG_NETFILTER_XT_TARGET_TCPOPTSTRIP is not set
@@ -1398,7 +1402,7 @@ CONFIG_IP_NF_TARGET_REDIRECT=m
 CONFIG_IP_NF_MANGLE=m
 # CONFIG_IP_NF_TARGET_ECN is not set
 # CONFIG_IP_NF_TARGET_TTL is not set
-# CONFIG_IP_NF_RAW is not set
+CONFIG_IP_NF_RAW=m
 # CONFIG_IP_NF_SECURITY is not set
 # CONFIG_IP_NF_ARPTABLES is not set
 # CONFIG_IP_NF_ARPFILTER is not set
@@ -1433,7 +1437,7 @@ CONFIG_IP6_NF_FILTER=m
 CONFIG_IP6_NF_TARGET_REJECT=m
 # CONFIG_IP6_NF_TARGET_SYNPROXY is not set
 CONFIG_IP6_NF_MANGLE=m
-# CONFIG_IP6_NF_RAW is not set
+CONFIG_IP6_NF_RAW=m
 # CONFIG_IP6_NF_SECURITY is not set
 CONFIG_IP6_NF_NAT=m
 CONFIG_IP6_NF_TARGET_MASQUERADE=m
@@ -3172,6 +3176,7 @@ CONFIG_I2C_VIRTIO=m
 # end of I2C support
 
 # CONFIG_I3C is not set
+CONFIG_I3C_OR_I2C=y
 CONFIG_SPI=y
 # CONFIG_SPI_DEBUG is not set
 CONFIG_SPI_MASTER=y
@@ -4475,6 +4480,7 @@ CONFIG_HID_MCP2221=m
 #
 # HID-BPF support
 #
+# CONFIG_HID_BPF is not set
 # end of HID-BPF support
 
 CONFIG_I2C_HID=y
@@ -6164,7 +6170,7 @@ CONFIG_NFS_V3=y
 CONFIG_NFS_V3_ACL=y
 CONFIG_NFS_V4=y
 # CONFIG_NFS_SWAP is not set
-# CONFIG_NFS_V4_0 is not set
+CONFIG_NFS_V4_0=y
 # CONFIG_NFS_V4_2 is not set
 CONFIG_PNFS_FILE_LAYOUT=y
 CONFIG_PNFS_BLOCK=y
@@ -6279,7 +6285,7 @@ CONFIG_PROC_MEM_ALWAYS_FORCE=y
 # CONFIG_PROC_MEM_NO_FORCE is not set
 CONFIG_SECURITY=y
 CONFIG_HAS_SECURITY_AUDIT=y
-# CONFIG_SECURITYFS is not set
+CONFIG_SECURITYFS=y
 CONFIG_SECURITY_NETWORK=y
 # CONFIG_SECURITY_NETWORK_XFRM is not set
 # CONFIG_SECURITY_PATH is not set
@@ -6301,6 +6307,7 @@ CONFIG_SECURITY_SELINUX_AVC_HASH_BITS=9
 # CONFIG_SECURITY_SAFESETID is not set
 # CONFIG_SECURITY_LOCKDOWN_LSM is not set
 # CONFIG_SECURITY_LANDLOCK is not set
+# CONFIG_SECURITY_IPE is not set
 CONFIG_INTEGRITY=y
 # CONFIG_INTEGRITY_SIGNATURE is not set
 CONFIG_INTEGRITY_AUDIT=y
diff --git a/device/main/linux-postmarketos-mainline/config-mainline.x86_64 b/device/main/linux-postmarketos-mainline/config-mainline.x86_64
index f3681c521..8675cae38 100644
--- a/device/main/linux-postmarketos-mainline/config-mainline.x86_64
+++ b/device/main/linux-postmarketos-mainline/config-mainline.x86_64
@@ -1,16 +1,16 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Linux/x86_64 7.0.0-rc3 Kernel Configuration
+# Linux/x86_64 7.0.0-rc4 Kernel Configuration
 #
-CONFIG_CC_VERSION_TEXT="Alpine clang version 22.1.0"
+CONFIG_CC_VERSION_TEXT="Alpine clang version 22.1.1"
 CONFIG_GCC_VERSION=0
 CONFIG_CC_IS_CLANG=y
-CONFIG_CLANG_VERSION=220100
+CONFIG_CLANG_VERSION=220101
 CONFIG_AS_IS_LLVM=y
-CONFIG_AS_VERSION=220100
+CONFIG_AS_VERSION=220101
 CONFIG_LD_VERSION=0
 CONFIG_LD_IS_LLD=y
-CONFIG_LLD_VERSION=220100
+CONFIG_LLD_VERSION=220101
 CONFIG_RUSTC_VERSION=109301
 CONFIG_RUST_IS_AVAILABLE=y
 CONFIG_RUSTC_LLVM_VERSION=220100
@@ -126,9 +126,12 @@ CONFIG_ARCH_WANT_DEFAULT_BPF_JIT=y
 # BPF subsystem
 #
 CONFIG_BPF_SYSCALL=y
-# CONFIG_BPF_JIT is not set
+CONFIG_BPF_JIT=y
+# CONFIG_BPF_JIT_ALWAYS_ON is not set
+CONFIG_BPF_JIT_DEFAULT_ON=y
 CONFIG_BPF_UNPRIV_DEFAULT_OFF=y
 # CONFIG_BPF_PRELOAD is not set
+CONFIG_BPF_LSM=y
 # end of BPF subsystem
 
 CONFIG_PREEMPT_BUILD=y
@@ -1357,11 +1360,13 @@ CONFIG_NETFILTER_XT_NAT=m
 # CONFIG_NETFILTER_XT_TARGET_NETMAP is not set
 CONFIG_NETFILTER_XT_TARGET_NFLOG=m
 # CONFIG_NETFILTER_XT_TARGET_NFQUEUE is not set
+# CONFIG_NETFILTER_XT_TARGET_NOTRACK is not set
 # CONFIG_NETFILTER_XT_TARGET_RATEEST is not set
 CONFIG_NETFILTER_XT_TARGET_REDIRECT=m
 CONFIG_NETFILTER_XT_TARGET_MASQUERADE=m
 # CONFIG_NETFILTER_XT_TARGET_TEE is not set
 # CONFIG_NETFILTER_XT_TARGET_TPROXY is not set
+# CONFIG_NETFILTER_XT_TARGET_TRACE is not set
 CONFIG_NETFILTER_XT_TARGET_SECMARK=m
 CONFIG_NETFILTER_XT_TARGET_TCPMSS=m
 # CONFIG_NETFILTER_XT_TARGET_TCPOPTSTRIP is not set
@@ -1498,7 +1503,7 @@ CONFIG_IP_NF_TARGET_REDIRECT=m
 CONFIG_IP_NF_MANGLE=m
 # CONFIG_IP_NF_TARGET_ECN is not set
 # CONFIG_IP_NF_TARGET_TTL is not set
-# CONFIG_IP_NF_RAW is not set
+CONFIG_IP_NF_RAW=m
 # CONFIG_IP_NF_SECURITY is not set
 # CONFIG_IP_NF_ARPTABLES is not set
 # CONFIG_IP_NF_ARPFILTER is not set
@@ -1533,7 +1538,7 @@ CONFIG_IP6_NF_FILTER=m
 CONFIG_IP6_NF_TARGET_REJECT=m
 # CONFIG_IP6_NF_TARGET_SYNPROXY is not set
 CONFIG_IP6_NF_MANGLE=m
-# CONFIG_IP6_NF_RAW is not set
+CONFIG_IP6_NF_RAW=m
 # CONFIG_IP6_NF_SECURITY is not set
 CONFIG_IP6_NF_NAT=m
 CONFIG_IP6_NF_TARGET_MASQUERADE=m
@@ -3277,6 +3282,7 @@ CONFIG_I2C_VIRTIO=m
 # end of I2C support
 
 # CONFIG_I3C is not set
+CONFIG_I3C_OR_I2C=y
 CONFIG_SPI=y
 # CONFIG_SPI_DEBUG is not set
 CONFIG_SPI_MASTER=y
@@ -4567,6 +4573,7 @@ CONFIG_HID_MCP2221=m
 #
 # HID-BPF support
 #
+# CONFIG_HID_BPF is not set
 # end of HID-BPF support
 
 CONFIG_I2C_HID=y
@@ -6324,7 +6331,7 @@ CONFIG_NFS_V3=y
 CONFIG_NFS_V3_ACL=y
 CONFIG_NFS_V4=y
 # CONFIG_NFS_SWAP is not set
-# CONFIG_NFS_V4_0 is not set
+CONFIG_NFS_V4_0=y
 # CONFIG_NFS_V4_2 is not set
 CONFIG_PNFS_FILE_LAYOUT=y
 CONFIG_PNFS_BLOCK=y
@@ -6439,7 +6446,7 @@ CONFIG_PROC_MEM_ALWAYS_FORCE=y
 # CONFIG_PROC_MEM_NO_FORCE is not set
 CONFIG_SECURITY=y
 CONFIG_HAS_SECURITY_AUDIT=y
-# CONFIG_SECURITYFS is not set
+CONFIG_SECURITYFS=y
 CONFIG_SECURITY_NETWORK=y
 # CONFIG_SECURITY_NETWORK_XFRM is not set
 # CONFIG_SECURITY_PATH is not set
@@ -6462,6 +6469,7 @@ CONFIG_SECURITY_SELINUX_AVC_HASH_BITS=9
 # CONFIG_SECURITY_SAFESETID is not set
 # CONFIG_SECURITY_LOCKDOWN_LSM is not set
 # CONFIG_SECURITY_LANDLOCK is not set
+# CONFIG_SECURITY_IPE is not set
 CONFIG_INTEGRITY=y
 # CONFIG_INTEGRITY_SIGNATURE is not set
 CONFIG_INTEGRITY_AUDIT=y
diff --git a/device/main/linux-postmarketos-mainline/pmos.aarch64.config b/device/main/linux-postmarketos-mainline/pmos.aarch64.config
index d1ee343b7..762b34c4d 100644
--- a/device/main/linux-postmarketos-mainline/pmos.aarch64.config
+++ b/device/main/linux-postmarketos-mainline/pmos.aarch64.config
@@ -31,6 +31,18 @@ CONFIG_FW_LOADER_COMPRESS_ZSTD=y
 CONFIG_PSI=y
 # CONFIG_PSI_DEFAULT_DISABLED is not set
 CONFIG_UDMABUF=y
+CONFIG_BPF=y
+CONFIG_BPF_JIT=y
+CONFIG_BPF_LSM=y
+CONFIG_IPC_NS=y
+CONFIG_KPROBES=y
+CONFIG_KPROBE_EVENTS=y
+CONFIG_NET_NS=y
+CONFIG_PID_NS=y
+CONFIG_SECURITY=y
+CONFIG_SECURITYFS=y
+CONFIG_USER_NS=y
+CONFIG_UTS_NS=y
 
 # waydroid
 # CONFIG_ANDROID_BINDERFS is not set
@@ -121,9 +133,13 @@ CONFIG_DUMMY=m
 CONFIG_EXT4_FS_POSIX_ACL=y
 CONFIG_EXT4_FS_SECURITY=y
 CONFIG_FAIR_GROUP_SCHED=y
+CONFIG_IP6_NF_MANGLE=m
+CONFIG_IP6_NF_RAW=m
 CONFIG_IPC_NS=y
 CONFIG_IP_NF_FILTER=m
+CONFIG_IP_NF_MANGLE=m
 CONFIG_IP_NF_NAT=m
+CONFIG_IP_NF_RAW=m
 CONFIG_IP_NF_TARGET_MASQUERADE=m
 CONFIG_IP_NF_TARGET_REDIRECT=m
 CONFIG_IP_VS=m
@@ -157,11 +173,21 @@ CONFIG_VXLAN=m
 CONFIG_BRIDGE_VLAN_FILTERING=y
 CONFIG_MACVLAN=m
 CONFIG_NFT_COMPAT=m
+CONFIG_NFT_CT=m
+CONFIG_NFT_NAT=m
+CONFIG_NF_TABLES=m
 CONFIG_CGROUP_NET_PRIO=y
+CONFIG_IP6_NF_NAT=m
+CONFIG_NFT_MASQ=m
 CONFIG_OVERLAY_FS=m
 CONFIG_IPVLAN=m
 CONFIG_SECCOMP=y
 CONFIG_CGROUP_PIDS=y
+CONFIG_CGROUP_BPF=y
+CONFIG_NFT_FIB=m
+CONFIG_NFT_FIB_IPV4=m
+CONFIG_NFT_FIB_IPV6=m
+CONFIG_IP6_NF_FILTER=m
 
 # zram
 CONFIG_SWAP=y
diff --git a/device/main/linux-postmarketos-mainline/pmos.armv7.config b/device/main/linux-postmarketos-mainline/pmos.armv7.config
index 2522e5ad8..1ec6ebbfe 100644
--- a/device/main/linux-postmarketos-mainline/pmos.armv7.config
+++ b/device/main/linux-postmarketos-mainline/pmos.armv7.config
@@ -31,6 +31,18 @@ CONFIG_FW_LOADER_COMPRESS_ZSTD=y
 CONFIG_PSI=y
 # CONFIG_PSI_DEFAULT_DISABLED is not set
 CONFIG_UDMABUF=y
+CONFIG_BPF=y
+CONFIG_BPF_JIT=y
+CONFIG_BPF_LSM=y
+CONFIG_IPC_NS=y
+CONFIG_KPROBES=y
+CONFIG_KPROBE_EVENTS=y
+CONFIG_NET_NS=y
+CONFIG_PID_NS=y
+CONFIG_SECURITY=y
+CONFIG_SECURITYFS=y
+CONFIG_USER_NS=y
+CONFIG_UTS_NS=y
 
 # waydroid
 # CONFIG_ANDROID_BINDERFS is not set
@@ -121,9 +133,13 @@ CONFIG_DUMMY=m
 CONFIG_EXT4_FS_POSIX_ACL=y
 CONFIG_EXT4_FS_SECURITY=y
 CONFIG_FAIR_GROUP_SCHED=y
+CONFIG_IP6_NF_MANGLE=m
+CONFIG_IP6_NF_RAW=m
 CONFIG_IPC_NS=y
 CONFIG_IP_NF_FILTER=m
+CONFIG_IP_NF_MANGLE=m
 CONFIG_IP_NF_NAT=m
+CONFIG_IP_NF_RAW=m
 CONFIG_IP_NF_TARGET_MASQUERADE=m
 CONFIG_IP_NF_TARGET_REDIRECT=m
 CONFIG_IP_VS=m
@@ -157,11 +173,21 @@ CONFIG_VXLAN=m
 CONFIG_BRIDGE_VLAN_FILTERING=y
 CONFIG_MACVLAN=m
 CONFIG_NFT_COMPAT=m
+CONFIG_NFT_CT=m
+CONFIG_NFT_NAT=m
+CONFIG_NF_TABLES=m
 CONFIG_CGROUP_NET_PRIO=y
+CONFIG_IP6_NF_NAT=m
+CONFIG_NFT_MASQ=m
 CONFIG_OVERLAY_FS=m
 CONFIG_IPVLAN=m
 CONFIG_SECCOMP=y
 CONFIG_CGROUP_PIDS=y
+CONFIG_CGROUP_BPF=y
+CONFIG_NFT_FIB=m
+CONFIG_NFT_FIB_IPV4=m
+CONFIG_NFT_FIB_IPV6=m
+CONFIG_IP6_NF_FILTER=m
 
 # zram
 CONFIG_SWAP=y
diff --git a/device/main/linux-postmarketos-mainline/pmos.loongarch64.config b/device/main/linux-postmarketos-mainline/pmos.loongarch64.config
index 0fce7f1ab..1aaf52439 100644
--- a/device/main/linux-postmarketos-mainline/pmos.loongarch64.config
+++ b/device/main/linux-postmarketos-mainline/pmos.loongarch64.config
@@ -31,6 +31,18 @@ CONFIG_FW_LOADER_COMPRESS_ZSTD=y
 CONFIG_PSI=y
 # CONFIG_PSI_DEFAULT_DISABLED is not set
 CONFIG_UDMABUF=y
+CONFIG_BPF=y
+CONFIG_BPF_JIT=y
+CONFIG_BPF_LSM=y
+CONFIG_IPC_NS=y
+CONFIG_KPROBES=y
+CONFIG_KPROBE_EVENTS=y
+CONFIG_NET_NS=y
+CONFIG_PID_NS=y
+CONFIG_SECURITY=y
+CONFIG_SECURITYFS=y
+CONFIG_USER_NS=y
+CONFIG_UTS_NS=y
 
 # waydroid
 # CONFIG_ANDROID_BINDERFS is not set
@@ -121,9 +133,13 @@ CONFIG_DUMMY=m
 CONFIG_EXT4_FS_POSIX_ACL=y
 CONFIG_EXT4_FS_SECURITY=y
 CONFIG_FAIR_GROUP_SCHED=y
+CONFIG_IP6_NF_MANGLE=m
+CONFIG_IP6_NF_RAW=m
 CONFIG_IPC_NS=y
 CONFIG_IP_NF_FILTER=m
+CONFIG_IP_NF_MANGLE=m
 CONFIG_IP_NF_NAT=m
+CONFIG_IP_NF_RAW=m
 CONFIG_IP_NF_TARGET_MASQUERADE=m
 CONFIG_IP_NF_TARGET_REDIRECT=m
 CONFIG_IP_VS=m
@@ -157,11 +173,21 @@ CONFIG_VXLAN=m
 CONFIG_BRIDGE_VLAN_FILTERING=y
 CONFIG_MACVLAN=m
 CONFIG_NFT_COMPAT=m
+CONFIG_NFT_CT=m
+CONFIG_NFT_NAT=m
+CONFIG_NF_TABLES=m
 CONFIG_CGROUP_NET_PRIO=y
+CONFIG_IP6_NF_NAT=m
+CONFIG_NFT_MASQ=m
 CONFIG_OVERLAY_FS=m
 CONFIG_IPVLAN=m
 CONFIG_SECCOMP=y
 CONFIG_CGROUP_PIDS=y
+CONFIG_CGROUP_BPF=y
+CONFIG_NFT_FIB=m
+CONFIG_NFT_FIB_IPV4=m
+CONFIG_NFT_FIB_IPV6=m
+CONFIG_IP6_NF_FILTER=m
 
 # zram
 CONFIG_SWAP=y
diff --git a/device/main/linux-postmarketos-mainline/pmos.ppc64le.config b/device/main/linux-postmarketos-mainline/pmos.ppc64le.config
index 612126b69..005285128 100644
--- a/device/main/linux-postmarketos-mainline/pmos.ppc64le.config
+++ b/device/main/linux-postmarketos-mainline/pmos.ppc64le.config
@@ -31,6 +31,18 @@ CONFIG_FW_LOADER_COMPRESS_ZSTD=y
 CONFIG_PSI=y
 # CONFIG_PSI_DEFAULT_DISABLED is not set
 CONFIG_UDMABUF=y
+CONFIG_BPF=y
+CONFIG_BPF_JIT=y
+CONFIG_BPF_LSM=y
+CONFIG_IPC_NS=y
+CONFIG_KPROBES=y
+CONFIG_KPROBE_EVENTS=y
+CONFIG_NET_NS=y
+CONFIG_PID_NS=y
+CONFIG_SECURITY=y
+CONFIG_SECURITYFS=y
+CONFIG_USER_NS=y
+CONFIG_UTS_NS=y
 
 # waydroid
 # CONFIG_ANDROID_BINDERFS is not set
@@ -121,9 +133,13 @@ CONFIG_DUMMY=m
 CONFIG_EXT4_FS_POSIX_ACL=y
 CONFIG_EXT4_FS_SECURITY=y
 CONFIG_FAIR_GROUP_SCHED=y
+CONFIG_IP6_NF_MANGLE=m
+CONFIG_IP6_NF_RAW=m
 CONFIG_IPC_NS=y
 CONFIG_IP_NF_FILTER=m
+CONFIG_IP_NF_MANGLE=m
 CONFIG_IP_NF_NAT=m
+CONFIG_IP_NF_RAW=m
 CONFIG_IP_NF_TARGET_MASQUERADE=m
 CONFIG_IP_NF_TARGET_REDIRECT=m
 CONFIG_IP_VS=m
@@ -157,11 +173,21 @@ CONFIG_VXLAN=m
 CONFIG_BRIDGE_VLAN_FILTERING=y
 CONFIG_MACVLAN=m
 CONFIG_NFT_COMPAT=m
+CONFIG_NFT_CT=m
+CONFIG_NFT_NAT=m
+CONFIG_NF_TABLES=m
 CONFIG_CGROUP_NET_PRIO=y
+CONFIG_IP6_NF_NAT=m
+CONFIG_NFT_MASQ=m
 CONFIG_OVERLAY_FS=m
 CONFIG_IPVLAN=m
 CONFIG_SECCOMP=y
 CONFIG_CGROUP_PIDS=y
+CONFIG_CGROUP_BPF=y
+CONFIG_NFT_FIB=m
+CONFIG_NFT_FIB_IPV4=m
+CONFIG_NFT_FIB_IPV6=m
+CONFIG_IP6_NF_FILTER=m
 
 # zram
 CONFIG_SWAP=y
diff --git a/device/main/linux-postmarketos-mainline/pmos.riscv64.config b/device/main/linux-postmarketos-mainline/pmos.riscv64.config
index 3ce011e23..1d04ff94d 100644
--- a/device/main/linux-postmarketos-mainline/pmos.riscv64.config
+++ b/device/main/linux-postmarketos-mainline/pmos.riscv64.config
@@ -31,6 +31,18 @@ CONFIG_FW_LOADER_COMPRESS_ZSTD=y
 CONFIG_PSI=y
 # CONFIG_PSI_DEFAULT_DISABLED is not set
 CONFIG_UDMABUF=y
+CONFIG_BPF=y
+CONFIG_BPF_JIT=y
+CONFIG_BPF_LSM=y
+CONFIG_IPC_NS=y
+CONFIG_KPROBES=y
+CONFIG_KPROBE_EVENTS=y
+CONFIG_NET_NS=y
+CONFIG_PID_NS=y
+CONFIG_SECURITY=y
+CONFIG_SECURITYFS=y
+CONFIG_USER_NS=y
+CONFIG_UTS_NS=y
 
 # waydroid
 # CONFIG_ANDROID_BINDERFS is not set
@@ -121,9 +133,13 @@ CONFIG_DUMMY=m
 CONFIG_EXT4_FS_POSIX_ACL=y
 CONFIG_EXT4_FS_SECURITY=y
 CONFIG_FAIR_GROUP_SCHED=y
+CONFIG_IP6_NF_MANGLE=m
+CONFIG_IP6_NF_RAW=m
 CONFIG_IPC_NS=y
 CONFIG_IP_NF_FILTER=m
+CONFIG_IP_NF_MANGLE=m
 CONFIG_IP_NF_NAT=m
+CONFIG_IP_NF_RAW=m
 CONFIG_IP_NF_TARGET_MASQUERADE=m
 CONFIG_IP_NF_TARGET_REDIRECT=m
 CONFIG_IP_VS=m
@@ -157,11 +173,21 @@ CONFIG_VXLAN=m
 CONFIG_BRIDGE_VLAN_FILTERING=y
 CONFIG_MACVLAN=m
 CONFIG_NFT_COMPAT=m
+CONFIG_NFT_CT=m
+CONFIG_NFT_NAT=m
+CONFIG_NF_TABLES=m
 CONFIG_CGROUP_NET_PRIO=y
+CONFIG_IP6_NF_NAT=m
+CONFIG_NFT_MASQ=m
 CONFIG_OVERLAY_FS=m
 CONFIG_IPVLAN=m
 CONFIG_SECCOMP=y
 CONFIG_CGROUP_PIDS=y
+CONFIG_CGROUP_BPF=y
+CONFIG_NFT_FIB=m
+CONFIG_NFT_FIB_IPV4=m
+CONFIG_NFT_FIB_IPV6=m
+CONFIG_IP6_NF_FILTER=m
 
 # zram
 CONFIG_SWAP=y
diff --git a/device/main/linux-postmarketos-mainline/pmos.x86.config b/device/main/linux-postmarketos-mainline/pmos.x86.config
index 370ac7298..a6f5bc512 100644
--- a/device/main/linux-postmarketos-mainline/pmos.x86.config
+++ b/device/main/linux-postmarketos-mainline/pmos.x86.config
@@ -31,6 +31,18 @@ CONFIG_FW_LOADER_COMPRESS_ZSTD=y
 CONFIG_PSI=y
 # CONFIG_PSI_DEFAULT_DISABLED is not set
 CONFIG_UDMABUF=y
+CONFIG_BPF=y
+CONFIG_BPF_JIT=y
+CONFIG_BPF_LSM=y
+CONFIG_IPC_NS=y
+CONFIG_KPROBES=y
+CONFIG_KPROBE_EVENTS=y
+CONFIG_NET_NS=y
+CONFIG_PID_NS=y
+CONFIG_SECURITY=y
+CONFIG_SECURITYFS=y
+CONFIG_USER_NS=y
+CONFIG_UTS_NS=y
 
 # waydroid
 # CONFIG_ANDROID_BINDERFS is not set
@@ -121,9 +133,13 @@ CONFIG_DUMMY=m
 CONFIG_EXT4_FS_POSIX_ACL=y
 CONFIG_EXT4_FS_SECURITY=y
 CONFIG_FAIR_GROUP_SCHED=y
+CONFIG_IP6_NF_MANGLE=m
+CONFIG_IP6_NF_RAW=m
 CONFIG_IPC_NS=y
 CONFIG_IP_NF_FILTER=m
+CONFIG_IP_NF_MANGLE=m
 CONFIG_IP_NF_NAT=m
+CONFIG_IP_NF_RAW=m
 CONFIG_IP_NF_TARGET_MASQUERADE=m
 CONFIG_IP_NF_TARGET_REDIRECT=m
 CONFIG_IP_VS=m
@@ -159,11 +175,21 @@ CONFIG_VXLAN=m
 CONFIG_BRIDGE_VLAN_FILTERING=y
 CONFIG_MACVLAN=m
 CONFIG_NFT_COMPAT=m
+CONFIG_NFT_CT=m
+CONFIG_NFT_NAT=m
+CONFIG_NF_TABLES=m
 CONFIG_CGROUP_NET_PRIO=y
+CONFIG_IP6_NF_NAT=m
+CONFIG_NFT_MASQ=m
 CONFIG_OVERLAY_FS=m
 CONFIG_IPVLAN=m
 CONFIG_SECCOMP=y
 CONFIG_CGROUP_PIDS=y
+CONFIG_CGROUP_BPF=y
+CONFIG_NFT_FIB=m
+CONFIG_NFT_FIB_IPV4=m
+CONFIG_NFT_FIB_IPV6=m
+CONFIG_IP6_NF_FILTER=m
 
 # zram
 CONFIG_SWAP=y
diff --git a/device/main/linux-postmarketos-mainline/pmos.x86_64.config b/device/main/linux-postmarketos-mainline/pmos.x86_64.config
index 7cf263593..9c92edaf1 100644
--- a/device/main/linux-postmarketos-mainline/pmos.x86_64.config
+++ b/device/main/linux-postmarketos-mainline/pmos.x86_64.config
@@ -31,6 +31,18 @@ CONFIG_FW_LOADER_COMPRESS_ZSTD=y
 CONFIG_PSI=y
 # CONFIG_PSI_DEFAULT_DISABLED is not set
 CONFIG_UDMABUF=y
+CONFIG_BPF=y
+CONFIG_BPF_JIT=y
+CONFIG_BPF_LSM=y
+CONFIG_IPC_NS=y
+CONFIG_KPROBES=y
+CONFIG_KPROBE_EVENTS=y
+CONFIG_NET_NS=y
+CONFIG_PID_NS=y
+CONFIG_SECURITY=y
+CONFIG_SECURITYFS=y
+CONFIG_USER_NS=y
+CONFIG_UTS_NS=y
 
 # waydroid
 # CONFIG_ANDROID_BINDERFS is not set
@@ -121,9 +133,13 @@ CONFIG_DUMMY=m
 CONFIG_EXT4_FS_POSIX_ACL=y
 CONFIG_EXT4_FS_SECURITY=y
 CONFIG_FAIR_GROUP_SCHED=y
+CONFIG_IP6_NF_MANGLE=m
+CONFIG_IP6_NF_RAW=m
 CONFIG_IPC_NS=y
 CONFIG_IP_NF_FILTER=m
+CONFIG_IP_NF_MANGLE=m
 CONFIG_IP_NF_NAT=m
+CONFIG_IP_NF_RAW=m
 CONFIG_IP_NF_TARGET_MASQUERADE=m
 CONFIG_IP_NF_TARGET_REDIRECT=m
 CONFIG_IP_VS=m
@@ -159,11 +175,21 @@ CONFIG_VXLAN=m
 CONFIG_BRIDGE_VLAN_FILTERING=y
 CONFIG_MACVLAN=m
 CONFIG_NFT_COMPAT=m
+CONFIG_NFT_CT=m
+CONFIG_NFT_NAT=m
+CONFIG_NF_TABLES=m
 CONFIG_CGROUP_NET_PRIO=y
+CONFIG_IP6_NF_NAT=m
+CONFIG_NFT_MASQ=m
 CONFIG_OVERLAY_FS=m
 CONFIG_IPVLAN=m
 CONFIG_SECCOMP=y
 CONFIG_CGROUP_PIDS=y
+CONFIG_CGROUP_BPF=y
+CONFIG_NFT_FIB=m
+CONFIG_NFT_FIB_IPV4=m
+CONFIG_NFT_FIB_IPV6=m
+CONFIG_IP6_NF_FILTER=m
 
 # zram
 CONFIG_SWAP=y