Syzbot CI

Subject	cells: a container as one kernel object
Author	josef@toxicpanda.com
Date	2026-11-05 14:56:52 +0000 UTC
Version
Cc	andrew@amutable.com brauner@kernel.org james.bottomley@hansenpartnership.com jbingham@gmail.com josef@toxicpanda.com linux-fsdevel@vger.kernel.org linux-kernel@vger.kernel.org sergeh@kernel.org taherafahimi@linux.microsoft.com

Name	Content [All]
[PATCH RFC v3 01/90] Documentation: add a design document for cells	[Body]
[PATCH RFC v3 02/90] Documentation: add examples for cells	[Body]
[PATCH RFC v3 03/90] cells: reserve a window of ids	[Body]
[PATCH RFC v3 04/90] user_namespace: let a cell own a user namespace	[Body]
[PATCH RFC v3 05/90] user_namespace: refuse setns() into a cell	[Body]
[PATCH RFC v3 06/90] capability: give the owner no say over a cell	[Body]
[PATCH RFC v3 07/90] ucount: count the id blocks a user holds	[Body]
[PATCH RFC v3 08/90] user_namespace: let the kernel map the ids of a cell	[Body]
[PATCH RFC v3 09/90] user_namespace: keep legacy maps out of the window	[Body]
[PATCH RFC v3 10/90] user: add uid_range_in_use()	[Body]
[PATCH RFC v3 11/90] keys: add key_user_range_in_use()	[Body]
[PATCH RFC v3 12/90] fs: add kuid_has_fsmapping() and kgid_has_fsmapping()	[Body]
[PATCH RFC v3 13/90] fs: never store an id that was lent to a cell	[Body]
[PATCH RFC v3 14/90] fs: take no id of a cell for a mount option	[Body]
[PATCH RFC v3 15/90] fs: let an idmapping pin the ids of a cell	[Body]
[PATCH RFC v3 16/90] cgroup: let a cgroup become the budget of a cell	[Body]
[PATCH RFC v3 17/90] cgroup: add cgroup_cell_chown()	[Body]
[PATCH RFC v3 18/90] cgroup: give the budget of a cell back	[Body]
[PATCH RFC v3 19/90] cgroup: add cgroup_cell_kill()	[Body]
[PATCH RFC v3 20/90] cgroup: root a cgroup namespace at a given cgroup	[Body]
[PATCH RFC v3 21/90] fs: seal a mount namespace for a cell	[Body]
[PATCH RFC v3 22/90] nsfs: make open_namespace() available outside of fs/	[Body]
[PATCH RFC v3 23/90] nsproxy: build the nsproxy the tasks of a cell share	[Body]
[PATCH RFC v3 24/90] cells: add the cell object and cell_create()	[Body]
[PATCH RFC v3 25/90] cells: add cell_kill()	[Body]
[PATCH RFC v3 26/90] cells: add cell_configure()	[Body]
[PATCH RFC v3 27/90] cells: add the "budget" slot	[Body]
[PATCH RFC v3 28/90] cells: add the "root" slot	[Body]
[PATCH RFC v3 29/90] cells: add the "ids" slot, for a single id	[Body]
[PATCH RFC v3 30/90] cells: lend a cell a block of ids	[Body]
[PATCH RFC v3 31/90] cells: reserve the "spawn" slot	[Body]
[PATCH RFC v3 32/90] cells: add CELL_CMD_SEAL	[Body]
[PATCH RFC v3 33/90] cells: add cell_open()	[Body]
[PATCH RFC v3 34/90] pid: allocate a struct pid ahead of its numbers	[Body]
[PATCH RFC v3 35/90] fork: let copy_process() place a task in a cell	[Body]
[PATCH RFC v3 36/90] cgroup: fork a task of a cell into the budget	[Body]
[PATCH RFC v3 37/90] x86: give a task without an mm no user state	[Body]
[PATCH RFC v3 38/90] uprobes: cope with a new task that has no mm	[Body]
[PATCH RFC v3 39/90] fork: add tasks that start out with nothing	[Body]
[PATCH RFC v3 40/90] pidfd: add PIDFD_EMPTY	[Body]
[PATCH RFC v3 41/90] pidfd: add pidfd_configure()	[Body]
[PATCH RFC v3 42/90] pidfd: let pidfd_configure() place files	[Body]
[PATCH RFC v3 43/90] pidfd: let pidfd_configure() set credentials	[Body]
[PATCH RFC v3 44/90] pidfd: let pidfd_configure() name a cgroup to start in	[Body]
[PATCH RFC v3 45/90] ptrace: keep everybody off an embryo	[Body]
[PATCH RFC v3 46/90] cells: end a cell when its init exits	[Body]
[PATCH RFC v3 47/90] cells: refuse a task of a cell a change of namespaces	[Body]
[PATCH RFC v3 48/90] fs: refuse a task of a cell a new mount namespace	[Body]
[PATCH RFC v3 49/90] nsproxy: refuse to enter a namespace of a cell	[Body]
[PATCH RFC v3 50/90] cgroup: keep a task of a cell within the budget	[Body]
[PATCH RFC v3 51/90] cgroup: let nothing but a spawn into a budget	[Body]
[PATCH RFC v3 52/90] kernfs: let a filesystem refuse a change to a node	[Body]
[PATCH RFC v3 53/90] cgroup: let a cell change nothing outside its budget	[Body]
[PATCH RFC v3 54/90] cgroup: leave the limits of a budget to who is above	[Body]
[PATCH RFC v3 55/90] fs: let a filesystem hold ids that go with the cell	[Body]
[PATCH RFC v3 56/90] cgroup: let a cell make cgroups below its budget	[Body]
[PATCH RFC v3 57/90] resctrl: let a cell change nothing	[Body]
[PATCH RFC v3 58/90] cred: let no id count across cells	[Body]
[PATCH RFC v3 59/90] ptrace: refuse PTRACE_TRACEME across cells	[Body]
[PATCH RFC v3 60/90] keys: ignore an equal uid or gid across cells	[Body]
[PATCH RFC v3 61/90] fs: accept a cellfd for MOUNT_ATTR_IDMAP	[Body]
[PATCH RFC v3 62/90] fs: let a cell set no set-id bits	[Body]
[PATCH RFC v3 63/90] fs: drop privileges from what a cell may write to	[Body]
[PATCH RFC v3 64/90] cells: add the "caps" slot	[Body]
[PATCH RFC v3 65/90] capabilities: take nothing from a file in a cell	[Body]
[PATCH RFC v3 66/90] capabilities: let a cell shrink its bounding sets	[Body]
[PATCH RFC v3 67/90] af_unix: deliver ancillary data only within a cell	[Body]
[PATCH RFC v3 68/90] af_unix: tell a sender that control data will not cross	[Body]
[PATCH RFC v3 69/90] net: do not identify a peer in another cell	[Body]
[PATCH RFC v3 70/90] seccomp: let a listener put no file into a cell	[Body]
[PATCH RFC v3 71/90] umh: run no program for a task of a cell	[Body]
[PATCH RFC v3 72/90] coredump: let no core dump leave a cell	[Body]
[PATCH RFC v3 73/90] cells: add the "net" slot	[Body]
[PATCH RFC v3 74/90] net: give a cell without a network no sockets	[Body]
[PATCH RFC v3 75/90] net: add net_may()	[Body]
[PATCH RFC v3 76/90] rtnetlink: use net_may() for requests that change state	[Body]
[PATCH RFC v3 77/90] net: use net_may() in the configuration ioctls	[Body]
[PATCH RFC v3 78/90] netfilter: use net_may() for configuration	[Body]
[PATCH RFC v3 79/90] tun: use net_may() to create and attach to devices	[Body]
[PATCH RFC v3 80/90] net: use net_may() for the net sysctls	[Body]
[PATCH RFC v3 81/90] net: use net_may() for privileged socket options	[Body]
[PATCH RFC v3 82/90] net: use net_may() for raw and packet sockets	[Body]
[PATCH RFC v3 83/90] cells: add the "net-rights" slot	[Body]
[PATCH RFC v3 84/90] net: honour the rights of a cell in net_may()	[Body]
[PATCH RFC v3 85/90] tun: ignore an equal uid or gid across cells	[Body]
[PATCH RFC v3 86/90] cells: add cell_info()	[Body]
[PATCH RFC v3 87/90] cells: add CONFIG_CELLS	[Body]
[PATCH RFC v3 88/90] arch: wire up the cell system calls	[Body]
[PATCH RFC v3 89/90] MAINTAINERS: add an entry for cells	[Body]
[PATCH RFC v3 90/90] selftests: add tests for cells	[Body]

ID (for dev)	f3cf4fc6-e693-478e-aeda-224e91cac679
Status	waiting

Patches (90)

Series Summary

Sessions

Session 2026-11-09