pull-request: bpf 2024-05-13

[Daniel Borkmann <daniel@iogearbox.net>]

Hi David, hi Jakub, hi Paolo, hi Eric,

The following pull-request contains BPF updates for your *net* tree.

We've added 3 non-merge commits during the last 2 day(s) which contain
a total of 2 files changed, 62 insertions(+), 8 deletions(-).

The main changes are:

1) Fix a case where syzkaller found that it's unexpectedly possible to attach a
   cgroup_skb program to the sockopt hooks. The fix adds missing attach_type
   enforcement for the link_create case along with selftests, from Stanislav Fomichev.

Please consider pulling these changes from:

  git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf.git tags/for-netdev

Thanks a lot!

Also thanks to reporters, reviewers and testers of commits in this pull-request:

Eduard Zingerman

----------------------------------------------------------------

The following changes since commit b867247555c4181bf84eb10b72b176862c29112d:

  Merge branch 'qed-error-codes' (2024-04-29 10:02:43 +0100)

are available in the Git repository at:

  https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf.git tags/for-netdev

for you to fetch changes up to 3e9bc0472b910d4115e16e9c2d684c7757cb6c60:

  Merge branch 'bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE' (2024-04-30 10:45:44 -0700)

----------------------------------------------------------------
bpf-for-netdev

----------------------------------------------------------------
Martin KaFai Lau (1):
      Merge branch 'bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE'

Stanislav Fomichev (3):
      bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
      selftests/bpf: Extend sockopt tests to use BPF_LINK_CREATE
      selftests/bpf: Add sockopt case to verify prog_type

 kernel/bpf/syscall.c                             |  5 ++
 tools/testing/selftests/bpf/prog_tests/sockopt.c | 65 +++++++++++++++++++++---
 2 files changed, 62 insertions(+), 8 deletions(-)