[PATCH bpf-next 0/8] bpf: Expand ksock send-path support

[Mahe Tardy <mahe.tardy@gmail.com>]

This patch series improves the bpf_ksock infrastructure in line with the
work proposed during Prague Plumbers 2026 presentation[^1]:
* refine the LSM verifier filter
* allow bpf_ksock_connect() to be called in the send path
* add bpf_ksock_sendto() kfunc to complement to bpf_ksock_send()

This is useful when using ksock to reply to differents peers while
reusing the same UDP socket and generally works toward the goal of ksock
to support the basic socket operations.

[^1]: https://lpc.events/event/20/contributions/2430/

Mahe Tardy (8):
  bpf: improve ksock_kfunc_set LSM recursion filter
  selftests/bpf: Test allowed bpf_ksock operations at send LSM attach
  bpf: move ksock_connect() out of init kfunc set
  selftests/bpf: Test verifier filter for ksock connect on LSM attach
  selftests/bpf: Test ksock connect/send combinations
  bpf: add bpf_ksock_sendto() kfunc
  selftests/bpf: Test forbidden bpf_ksock_sendto() LSM attach
  selftests/bpf: Test ksock sendto()

 net/core/bpf_ksock.c                          | 129 +++++++++++++-----
 .../testing/selftests/bpf/prog_tests/ksock.c  |  53 +++++--
 .../selftests/bpf/prog_tests/ksock_sendto.c   | 108 +++++++++++++++
 .../selftests/bpf/progs/ksock_common.h        |   2 +
 tools/testing/selftests/bpf/progs/ksock_lsm.c |  32 +++--
 .../selftests/bpf/progs/ksock_lsm_verifier.c  |  98 ++++++++++++-
 .../selftests/bpf/progs/ksock_sendto.c        |  59 ++++++++
 7 files changed, 432 insertions(+), 49 deletions(-)
 create mode 100644 tools/testing/selftests/bpf/prog_tests/ksock_sendto.c
 create mode 100644 tools/testing/selftests/bpf/progs/ksock_sendto.c

--
2.43.0