pull-request: bpf-next 2025-07-24

[Martin KaFai Lau <martin.lau@linux.dev>]

Hi David, hi Jakub, hi Paolo, hi Eric,

The following pull-request contains BPF updates for your *net-next* tree.

We've added 3 non-merge commits during the last 3 day(s) which contain
a total of 4 files changed, 40 insertions(+), 15 deletions(-).

The main changes are:

1) Improved verifier error message for incorrect narrower load from
   pointer field in ctx, from Paul Chaignon.

2) Disabled migration in nf_hook_run_bpf to address a syzbot report,
   from Kuniyuki Iwashima.

Please consider pulling these changes from:

  git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next.git tags/for-netdev

Thanks a lot!

Also thanks to reporters, reviewers and testers of commits in this pull-request:

Eduard Zingerman, Florian Westphal

----------------------------------------------------------------

The following changes since commit dd500e4aecf25e48e874ca7628697969df679493:

  net: usb: Remove duplicate assignments for net->pcpu_stat_type (2025-07-21 10:43:07 +0100)

are available in the Git repository at:

  https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next.git tags/for-netdev

for you to fetch changes up to ba578b87fe2beef95b37264f8a98c0b505b93de9:

  selftests/bpf: Test invalid narrower ctx load (2025-07-23 19:35:56 -0700)

----------------------------------------------------------------
bpf-next-for-netdev

----------------------------------------------------------------
Kuniyuki Iwashima (1):
      bpf: Disable migration in nf_hook_run_bpf().

Paul Chaignon (2):
      bpf: Reject narrower access to pointer ctx fields
      selftests/bpf: Test invalid narrower ctx load

 kernel/bpf/cgroup.c                              |  8 ++++----
 net/core/filter.c                                | 20 +++++++++----------
 net/netfilter/nf_bpf_link.c                      |  2 +-
 tools/testing/selftests/bpf/progs/verifier_ctx.c | 25 ++++++++++++++++++++++++
 4 files changed, 40 insertions(+), 15 deletions(-)