commit 80de0a9581338406f591d505f9545244c7a99b68
Author: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Date:   Mon Apr 6 09:55:59 2026 +0200

    Linux 6.6.133
    
    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

commit 9a3a2ae5efbbcaed37551218abed94e23c537157
Author: Al Viro <viro@zeniv.linux.org.uk>
Date:   Sun Apr 5 12:45:05 2026 +0100

    xattr: switch to CLASS(fd)
    
    [ Upstream commit a71874379ec8c6e788a61d71b3ad014a8d9a5c08 ]
    
    Reviewed-by: Christian Brauner <brauner@kernel.org>
    Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
    Link: https://lore.kernel.org/all/20241002012230.4174585-1-viro@zeniv.linux.org.uk/
    [ Neither `fd_file` nor `fd_empty` are available in 6.6.y, so the
      changes to the check are dropped. Kept the minor formatting change. ]
    Signed-off-by: Tomasz Kramkowski <tomasz@kramkow.ski>
    Tested-by: Barry K. Nathan <barryn@pobox.com>
    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

commit 16d41d32b7c76f547f98932f2d1e4b6ae2c0666c
Author: Tomasz Kramkowski <tomasz@kramkow.ski>
Date:   Sun Apr 5 12:45:04 2026 +0100

    Revert "xattr: switch to CLASS(fd)"
    
    This reverts commit 5a1e865e51063d6c56f673ec8ad4b6604321b455 which is
    commit a71874379ec8c6e788a61d71b3ad014a8d9a5c08 upstream.
    
    A backporting mistake erroneously removed file descriptor checks for
    `fgetxattr`, `flistxattr`, `fremovexattr`, and `fsetxattr` which lead to
    kernel panics when those functions were called from userspace with a
    file descriptor which did not reference an open file.
    
    Reported-by: Brad Spengler <spender@grsecurity.net>
    Closes: https://x.com/spendergrsec/status/2040049852793450561
    Cc: Alva Lan <alvalan9@foxmail.com>
    Cc: Al Viro <viro@zeniv.linux.org.uk>
    Signed-off-by: Tomasz Kramkowski <tomasz@kramkow.ski>
    Tested-by: Barry K. Nathan <barryn@pobox.com>
    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>