Re: [PATCH bpf-next v2 00/43] bpf: Memory safety, lifetime and locking fixes

[patchwork-bot+netdevbpf@kernel.org]

Hello:

This series was applied to bpf/bpf-next.git (master)
by Alexei Starovoitov <ast@kernel.org>:

On Sat, 17 Oct 2026 16:37:02 +0000 you wrote:
> From: Alexei Starovoitov <ast@kernel.org>
> 
> This series collects fixes for bugs in the BPF core, the verifier and the
> BPF side of the networking stack. Most of them are from Josef.
> 
> Every bug was reproduced in a VM on top of bpf-next, on the kernel right
> before and right after the patch that fixes it. The splats are in the
> commit logs. That goes for what the reviews of v1 have found as well.
> 
> [...]

Here is the summary with links:
  - [bpf-next,v2,01/43] bpf: use the frame mem type in devmap egress XDP
    https://git.kernel.org/bpf/bpf-next/c/b3ca872947ef
  - [bpf-next,v2,02/43] bpf: forbid sleeping in hash map for_each callbacks
    https://git.kernel.org/bpf/bpf-next/c/9bdd5e7f5d83
  - [bpf-next,v2,03/43] bpf: don't leak the inode when token creation fails
    https://git.kernel.org/bpf/bpf-next/c/f52b699c8863
  - [bpf-next,v2,04/43] bpf: don't hand out a linked element as extra element
    https://git.kernel.org/bpf/bpf-next/c/ccb88db8dac8
  - [bpf-next,v2,05/43] bpf: reject sleepable programs for task_vma iterator
    https://git.kernel.org/bpf/bpf-next/c/dfcd17659112
  - [bpf-next,v2,06/43] bpf: forbid sleeping in bpf_find_vma() callbacks
    https://git.kernel.org/bpf/bpf-next/c/c6dc0a288d4e
  - [bpf-next,v2,07/43] bpf: look at all 64 bits of a BPF_JSET mask on 32-bit
    https://git.kernel.org/bpf/bpf-next/c/ee4f44e0e3c8
  - [bpf-next,v2,08/43] bpf: don't let bpf_skb_adjust_room() use up the MSS
    https://git.kernel.org/bpf/bpf-next/c/12d07c38e1b0
  - [bpf-next,v2,09/43] bpf: Read the probe of a perf event under event_mutex
    https://git.kernel.org/bpf/bpf-next/c/3ccd700543f1
  - [bpf-next,v2,10/43] bpf: Don't saturate owner_refcnt on the last unpin
    https://git.kernel.org/bpf/bpf-next/c/30a140c9d479
  - [bpf-next,v2,11/43] bpf: Validate the SRH which End.DT6 uncovers in End.BPF
    https://git.kernel.org/bpf/bpf-next/c/e8b084646b94
  - [bpf-next,v2,12/43] bpf: Pull the inner header for End.DT6 in End.BPF
    https://git.kernel.org/bpf/bpf-next/c/434324c611a9
  - [bpf-next,v2,13/43] bpf: Update the SRH state if End.B6 fails late
    https://git.kernel.org/bpf/bpf-next/c/427e751a231a
  - [bpf-next,v2,14/43] bpf: Clear sk_refcnt of a clone before its storage is linked
    https://git.kernel.org/bpf/bpf-next/c/22f100bd0134
  - [bpf-next,v2,15/43] bpf: Fix NULL deref in the sk_storage map iterator
    https://git.kernel.org/bpf/bpf-next/c/6186c9711ac6
  - [bpf-next,v2,16/43] bpf: Link the first element after its storage is published
    https://git.kernel.org/bpf/bpf-next/c/bd897919e4dc
  - [bpf-next,v2,17/43] bpf: Hold the socket in the sk_storage map iterator
    https://git.kernel.org/bpf/bpf-next/c/070a96b2a98f
  - [bpf-next,v2,18/43] bpf: Bound the nesting that the BTF show code follows
    https://git.kernel.org/bpf/bpf-next/c/13ac7c05bc45
  - [bpf-next,v2,19/43] bpf: Check the new program of an iterator link update
    https://git.kernel.org/bpf/bpf-next/c/45e912fb1db0
  - [bpf-next,v2,20/43] bpf: Fix stale offload->prog pointer after realloc
    https://git.kernel.org/bpf/bpf-next/c/8e83d5359644
  - [bpf-next,v2,21/43] bpf: Don't bind a program to a netdev that goes away
    https://git.kernel.org/bpf/bpf-next/c/af929bc938e0
  - [bpf-next,v2,22/43] bpf: Keep a program until its bpf_wq callback has ended
    https://git.kernel.org/bpf/bpf-next/c/1e28a5e52d32
  - [bpf-next,v2,23/43] bpf: Count sleepable callbacks as sleepable map users
    https://git.kernel.org/bpf/bpf-next/c/927c9c985f3e
  - [bpf-next,v2,24/43] bpf: Check the maps that sleepable callbacks use
    https://git.kernel.org/bpf/bpf-next/c/3e6d7522af2c
  - [bpf-next,v2,25/43] bpf: Assume no bounds for buffers behind a tail call
    https://git.kernel.org/bpf/bpf-next/c/7fa323d77688
  - [bpf-next,v2,26/43] bpf: Don't take an extension for an iterator program
    https://git.kernel.org/bpf/bpf-next/c/7cc639dc45c5
  - [bpf-next,v2,27/43] bpf: Assume no bounds for a writable tp with tail calls
    https://git.kernel.org/bpf/bpf-next/c/cd0490e671d7
  - [bpf-next,v2,28/43] bpf: Don't take an extension for a writable raw tracepoint program
    https://git.kernel.org/bpf/bpf-next/c/7fe348f18b37
  - [bpf-next,v2,29/43] bpf: Keep iterator programs off special map fields
    https://git.kernel.org/bpf/bpf-next/c/8d0358f6e8b3
  - [bpf-next,v2,30/43] bpf: Free what map_free() unlinks for sleepable readers
    https://git.kernel.org/bpf/bpf-next/c/5bdd61e98da5
  - [bpf-next,v2,31/43] bpf: Keep values of a dead owner for sleepable programs
    (no matching commit)
  - [bpf-next,v2,32/43] bpf: Don't take an extension for a function that runs sleepable
    (no matching commit)
  - [bpf-next,v2,33/43] bpf: Keep the symbols of a program until it has ended
    (no matching commit)
  - [bpf-next,v2,34/43] bpf: Use the socket of a sk_lookup test run under RCU
    (no matching commit)
  - [bpf-next,v2,35/43] bpf, cpumap: Hold the device of frames in the queue
    (no matching commit)
  - [bpf-next,v2,36/43] bpf: Drop packet pointers behind kfuncs writing an skb
    (no matching commit)
  - [bpf-next,v2,37/43] bpf: Let bpf_dynptr_write() mark a global function
    (no matching commit)
  - [bpf-next,v2,38/43] bpf: Don't take a dynptr argument for a local dynptr
    (no matching commit)
  - [bpf-next,v2,39/43] bpf: Refuse the prologue for an extension that cannot take it
    (no matching commit)
  - [bpf-next,v2,40/43] bpf: Unclone the skb for kfuncs that write through a dynptr
    (no matching commit)
  - [bpf-next,v2,41/43] bpf: Follow the head if an skb is written from a slice
    (no matching commit)
  - [bpf-next,v2,42/43] bpf: Use memmove() to store bytes in an skb
    (no matching commit)
  - [bpf-next,v2,43/43] bpf: Refuse packet slices for packet-changing helpers
    (no matching commit)

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html