ci2 starts bisection 2024-10-01 00:14:31.015723566 +0000 UTC m=+44967.059276443 bisecting fixing commit since 5d96939590c0122be2138255c921e57e3f78b7bd building syzkaller on 07b455f928ae5c2cd07f4d61c1b499f56ea3dd08 ensuring issue is reproducible on original commit 5d96939590c0122be2138255c921e57e3f78b7bd testing commit 5d96939590c0122be2138255c921e57e3f78b7bd gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 008e27b369fac72a381378187148cf121ef31e0d84fe947e978d5a1466be7a8a run #0: crashed: BUG: soft lockup in inet_release run #1: crashed: BUG: soft lockup in inet_release run #2: crashed: BUG: soft lockup in linkwatch_event run #3: crashed: BUG: soft lockup in inet_release run #4: crashed: BUG: soft lockup in inet_release run #5: crashed: BUG: soft lockup in kauditd_thread run #6: crashed: BUG: soft lockup in inet_release run #7: crashed: BUG: soft lockup in linkwatch_event run #8: crashed: BUG: soft lockup in sock_read_iter run #9: crashed: BUG: soft lockup in inet_release run #10: crashed: BUG: soft lockup in sock_read_iter run #11: crashed: BUG: soft lockup in srcu_invoke_callbacks run #12: crashed: BUG: soft lockup in kauditd_thread run #13: crashed: BUG: soft lockup in rcu_core_si run #14: crashed: BUG: soft lockup in inotify_read run #15: crashed: BUG: soft lockup in inet_release run #16: crashed: BUG: soft lockup in sys_recvmsg run #17: crashed: BUG: soft lockup in inet_release run #18: crashed: no output from test machine run #19: crashed: no output from test machine representative crash: BUG: soft lockup in inet_release, types: [HANG] check whether we can drop unnecessary instrumentation disabling configs for [LEAK UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP], they are not needed testing commit 5d96939590c0122be2138255c921e57e3f78b7bd gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 1cc73f63b185be566368cb9f80db29382a4785491871191de52b67b71026859a run #0: crashed: BUG: soft lockup in rcu_core_si run #1: crashed: BUG: soft lockup in sock_read_iter run #2: crashed: BUG: soft lockup in addrconf_dad_work run #3: crashed: BUG: soft lockup in net_rx_action run #4: crashed: BUG: soft lockup in inet_release run #5: crashed: BUG: soft lockup in inet_release run #6: crashed: BUG: soft lockup in inet_release run #7: crashed: BUG: soft lockup in ipv6_rcv run #8: crashed: BUG: soft lockup in sys_openat run #9: crashed: BUG: soft lockup in ipv6_rcv representative crash: BUG: soft lockup in rcu_core_si, types: [HANG] the bug reproduces without the instrumentation disabling configs for [BUG KASAN LOCKDEP ATOMIC_SLEEP LEAK UBSAN], they are not needed kconfig minimization: base=4920 full=6158 leaves diff=242 split chunks (needed=false): <242> split chunk #0 of len 242 into 5 parts testing without sub-chunk 1/5 disabling configs for [LEAK UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP], they are not needed testing commit 5d96939590c0122be2138255c921e57e3f78b7bd gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 8e581763ca41ad4623dedcb07c5693a7a2c646774cb7bfb97aab35334362b5e2 run #0: crashed: BUG: soft lockup in rtnl_newlink run #1: crashed: BUG: soft lockup in rtnl_newlink run #2: crashed: BUG: soft lockup in linkwatch_event run #3: crashed: BUG: soft lockup in sock_read_iter run #4: crashed: BUG: soft lockup in inet_release run #5: crashed: BUG: soft lockup in rtnl_newlink run #6: crashed: BUG: soft lockup in inet_release run #7: crashed: BUG: soft lockup in inet_release run #8: crashed: BUG: soft lockup in inet_release run #9: crashed: BUG: soft lockup in mld_ifc_work representative crash: BUG: soft lockup in rtnl_newlink, types: [HANG] the chunk can be dropped testing without sub-chunk 2/5 disabling configs for [ATOMIC_SLEEP LEAK UBSAN BUG KASAN LOCKDEP], they are not needed testing commit 5d96939590c0122be2138255c921e57e3f78b7bd gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: ab76c92ba583bb2d5944c7750adc0dd46f28d6fe0001c8a5290a6e0802d08b37 run #0: crashed: BUG: soft lockup in sock_read_iter run #1: crashed: BUG: soft lockup in inotify_read run #2: crashed: BUG: soft lockup in inet_release run #3: crashed: BUG: soft lockup in rtnl_newlink run #4: crashed: BUG: soft lockup in inet_release run #5: crashed: BUG: soft lockup in inet_release run #6: crashed: BUG: soft lockup in ipv6_rcv run #7: crashed: BUG: soft lockup in bpf_link_release run #8: crashed: BUG: soft lockup in inet_release run #9: crashed: no output from test machine representative crash: BUG: soft lockup in sock_read_iter, types: [HANG] the chunk can be dropped testing without sub-chunk 3/5 disabling configs for [LOCKDEP ATOMIC_SLEEP LEAK UBSAN BUG KASAN], they are not needed testing commit 5d96939590c0122be2138255c921e57e3f78b7bd gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 1c2f527deab1ba8ae84a14dd083ac3986f0c76a2c0e8247f2fe11b147009ef13 run #0: crashed: BUG: soft lockup in linkwatch_event run #1: crashed: BUG: soft lockup in sock_read_iter run #2: crashed: BUG: soft lockup in inet_release run #3: crashed: BUG: soft lockup in inet_release run #4: crashed: BUG: soft lockup in inet_release run #5: crashed: BUG: soft lockup in arp_rcv run #6: crashed: BUG: soft lockup in inet_release run #7: crashed: BUG: soft lockup in ip_rcv run #8: crashed: BUG: soft lockup in inet_release run #9: crashed: BUG: soft lockup in inet_release representative crash: BUG: soft lockup in linkwatch_event, types: [HANG] the chunk can be dropped testing without sub-chunk 4/5 disabling configs for [LEAK UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP], they are not needed testing commit 5d96939590c0122be2138255c921e57e3f78b7bd gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: caa110e4f2862042eaa0e96e0d54db569f526e6ab28f9ed0ac2614d91b8ea4ae run #0: crashed: BUG: soft lockup in rcu_core_si run #1: crashed: BUG: soft lockup in inet_release run #2: crashed: BUG: soft lockup in kauditd_thread run #3: crashed: BUG: soft lockup in rcu_core_si run #4: crashed: BUG: soft lockup in kernfs_fop_read_iter run #5: crashed: BUG: soft lockup in inet_release run #6: crashed: BUG: soft lockup in linkwatch_event run #7: crashed: BUG: soft lockup in inet_release run #8: crashed: BUG: soft lockup in ip_rcv run #9: crashed: no output from test machine representative crash: BUG: soft lockup in rcu_core_si, types: [HANG] the chunk can be dropped testing without sub-chunk 5/5 disabling configs for [ATOMIC_SLEEP LEAK UBSAN BUG KASAN LOCKDEP], they are not needed testing commit 5d96939590c0122be2138255c921e57e3f78b7bd gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 failed building 5d96939590c0122be2138255c921e57e3f78b7bd: net/socket.c:1191: undefined reference to `wext_handle_ioctl' net/socket.c:3385: undefined reference to `compat_wext_handle_ioctl' net/core/net-procfs.c:343: undefined reference to `wext_proc_exit' net/core/net-procfs.c:327: undefined reference to `wext_proc_init' minimized to 46 configs; suspects: [HID_ZEROPLUS USB_NET_GL620A USB_NET_MCS7830 USB_NET_NET1080 USB_NET_PLUSB USB_NET_RNDIS_HOST USB_NET_SMSC75XX USB_NET_SMSC95XX USB_NET_SR9700 USB_NET_SR9800 USB_NET_ZAURUS USB_OHCI_HCD USB_OHCI_HCD_PCI USB_OHCI_HCD_PLATFORM USB_OTG USB_OTG_FSM USB_PRINTER USB_SERIAL USB_SERIAL_FTDI_SIO USB_SERIAL_GENERIC USB_SERIAL_PL2303 USB_STORAGE_ALAUDA USB_STORAGE_CYPRESS_ATACB USB_STORAGE_DATAFAB USB_STORAGE_FREECOM USB_STORAGE_ISD200 USB_STORAGE_JUMPSHOT USB_STORAGE_KARMA USB_STORAGE_ONETOUCH USB_STORAGE_SDDR09 USB_STORAGE_SDDR55 USB_STORAGE_USBAT USB_TRANCEVIBRATOR USB_U_AUDIO USB_U_ETHER USB_U_SERIAL USB_WDM WLAN WLAN_VENDOR_ATH WLAN_VENDOR_ATMEL WLAN_VENDOR_BROADCOM WLAN_VENDOR_INTERSIL WLAN_VENDOR_MARVELL WLAN_VENDOR_MEDIATEK WLAN_VENDOR_MICROCHIP WLAN_VENDOR_RALINK WLAN_VENDOR_REALTEK WLAN_VENDOR_RSI WLAN_VENDOR_ZYDAS X86_X32 ZEROPLUS_FF] disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP LEAK UBSAN BUG], they are not needed testing current HEAD 8e36931104ac380ff51ac23c96def63697a748f7 testing commit 8e36931104ac380ff51ac23c96def63697a748f7 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 070b8e83fc589a247222285c3d1c484b17eb19da484682ad193a62f713af9792 all runs: OK false negative chance: 0.000 # git bisect start 8e36931104ac380ff51ac23c96def63697a748f7 5d96939590c0122be2138255c921e57e3f78b7bd Bisecting: 1241 revisions left to test after this (roughly 10 steps) [b5a439e8b087963bf860bbe3b092c196c6eccf16] nfsd: add some comments to nfsd_file_do_acquire determine whether the revision contains the guilty commit checking the merge base 458ce51d0356ee60c93f9f807d9827cf2a41643d no existing result, test the revision testing commit 458ce51d0356ee60c93f9f807d9827cf2a41643d gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 814aca4ac006f024707a9a1ed7e022f8d0a960e51e1350be5382da2faa796cce run #0: crashed: BUG: soft lockup in kernfs_fop_open run #1: crashed: BUG: soft lockup in kauditd_thread run #2: crashed: BUG: soft lockup in ipv6_rcv run #3: crashed: BUG: soft lockup in net_rx_action run #4: crashed: BUG: soft lockup in kauditd_thread run #5: crashed: BUG: soft lockup in sock_read_iter run #6: crashed: BUG: soft lockup in sock_read_iter run #7: crashed: BUG: soft lockup in rcu_core_si run #8: crashed: BUG: soft lockup in inet_release run #9: crashed: no output from test machine representative crash: BUG: soft lockup in kernfs_fop_open, types: [HANG] testing commit b5a439e8b087963bf860bbe3b092c196c6eccf16 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: e84fa72cfd7d3904100a09950db1246a838892f62401f2d32a1792c248f8b223 run #0: crashed: BUG: soft lockup in linkwatch_event run #1: crashed: BUG: soft lockup in sock_read_iter run #2: crashed: BUG: soft lockup in inet_release run #3: crashed: BUG: soft lockup in inet_release run #4: crashed: BUG: soft lockup in inet_release run #5: crashed: BUG: soft lockup in unix_release run #6: crashed: BUG: soft lockup in sys_syslog run #7: crashed: BUG: soft lockup in sys_syslog run #8: crashed: BUG: soft lockup in sys_syslog run #9: crashed: BUG: soft lockup in rcu_core_si representative crash: BUG: soft lockup in linkwatch_event, types: [HANG] # git bisect good b5a439e8b087963bf860bbe3b092c196c6eccf16 Bisecting: 620 revisions left to test after this (roughly 9 steps) [528a620c1397a6fa329e9d62ee0d49898e31b4f6] Revert "r8169: don't try to disable interrupts if NAPI is, scheduled already" determine whether the revision contains the guilty commit revision 458ce51d0356ee60c93f9f807d9827cf2a41643d crashed and is reachable testing commit 528a620c1397a6fa329e9d62ee0d49898e31b4f6 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: b89f29f07939dfaa837297d65efd83a6b163ed449b5a0f963b4be54114b2f14f run #0: crashed: BUG: soft lockup in syscall_exit_to_user_mode run #1: crashed: BUG: soft lockup in inet_release run #2: crashed: BUG: soft lockup in inet_release run #3: crashed: BUG: soft lockup in rtnl_newlink run #4: crashed: BUG: soft lockup in linkwatch_event run #5: crashed: BUG: soft lockup in linkwatch_event run #6: crashed: BUG: soft lockup in inet_release run #7: crashed: BUG: soft lockup in rtnl_newlink run #8: crashed: BUG: soft lockup in rcu_core_si run #9: crashed: BUG: soft lockup in inet_release representative crash: BUG: soft lockup in syscall_exit_to_user_mode, types: [HANG] # git bisect good 528a620c1397a6fa329e9d62ee0d49898e31b4f6 Bisecting: 310 revisions left to test after this (roughly 8 steps) [477c137131ecd46215eac4c74934d0af272a38bf] net: ena: Reduce lines with longer column width boundary determine whether the revision contains the guilty commit revision 458ce51d0356ee60c93f9f807d9827cf2a41643d crashed and is reachable testing commit 477c137131ecd46215eac4c74934d0af272a38bf gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 0c54714df856f85767e547fab10ec8e836752b4be2a492e02dab6fa503520a0f all runs: OK false negative chance: 0.000 # git bisect bad 477c137131ecd46215eac4c74934d0af272a38bf Bisecting: 154 revisions left to test after this (roughly 7 steps) [33feac2e8df3a299258ee37d8f32c165b4937fe7] sunrpc: removed redundant procp check determine whether the revision contains the guilty commit revision b5a439e8b087963bf860bbe3b092c196c6eccf16 crashed and is reachable testing commit 33feac2e8df3a299258ee37d8f32c165b4937fe7 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: bc722b6238105bc3c81c072c5ce29567d784ab2a39139451b27c0c691d219ec8 run #0: crashed: BUG: soft lockup in bpf_map_free_deferred run #1: crashed: BUG: soft lockup in handle_softirqs run #2: crashed: BUG: soft lockup in linkwatch_event run #3: crashed: BUG: soft lockup in inet_release run #4: crashed: BUG: soft lockup in inet_release run #5: crashed: BUG: soft lockup in ipv6_rcv run #6: crashed: BUG: soft lockup in inet_release run #7: crashed: BUG: soft lockup in rtnl_newlink run #8: crashed: BUG: soft lockup in inet_release run #9: crashed: BUG: soft lockup in sock_read_iter representative crash: BUG: soft lockup in bpf_map_free_deferred, types: [HANG] # git bisect good 33feac2e8df3a299258ee37d8f32c165b4937fe7 Bisecting: 77 revisions left to test after this (roughly 6 steps) [81360e7fdc3c9a8f00ce89c6aea82dca4a2962cb] mmc: sdhci_am654: Add OTAP/ITAP delay enable determine whether the revision contains the guilty commit revision 33feac2e8df3a299258ee37d8f32c165b4937fe7 crashed and is reachable testing commit 81360e7fdc3c9a8f00ce89c6aea82dca4a2962cb gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: e9ff4f2d4565b38809c7af224fc30df146f8d63805655ec39cdc4f6de436a44d run #0: crashed: BUG: soft lockup in linkwatch_event run #1: crashed: BUG: soft lockup in inet_release run #2: crashed: BUG: soft lockup in inet_release run #3: crashed: BUG: soft lockup in inet_release run #4: crashed: BUG: soft lockup in br_handle_frame run #5: crashed: BUG: soft lockup in inet_release run #6: crashed: BUG: soft lockup in inet_release run #7: crashed: BUG: soft lockup in inet_release run #8: crashed: BUG: soft lockup in inet_release run #9: crashed: BUG: soft lockup in ipv6_rcv representative crash: BUG: soft lockup in linkwatch_event, types: [HANG] # git bisect good 81360e7fdc3c9a8f00ce89c6aea82dca4a2962cb Bisecting: 38 revisions left to test after this (roughly 5 steps) [518a994aa0b87d96f1bc6678a7035df5d1fcd7a1] af_unix: Update unix_sk(sk)->oob_skb under sk_receive_queue lock. determine whether the revision contains the guilty commit revision 458ce51d0356ee60c93f9f807d9827cf2a41643d crashed and is reachable testing commit 518a994aa0b87d96f1bc6678a7035df5d1fcd7a1 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: ebbb35639b47386faf45975c9773cec415bc56059591b1b703ce7752e63a8cf0 run #0: crashed: BUG: soft lockup in mld_ifc_work run #1: crashed: BUG: soft lockup in bpf_map_free_deferred run #2: crashed: BUG: soft lockup in rtnl_newlink run #3: crashed: BUG: soft lockup in rtnl_newlink run #4: crashed: BUG: soft lockup in inet_release run #5: crashed: BUG: soft lockup in handle_softirqs run #6: crashed: BUG: soft lockup in inet_release run #7: crashed: BUG: soft lockup in linkwatch_event run #8: crashed: BUG: soft lockup in inet_release run #9: crashed: no output from test machine representative crash: BUG: soft lockup in mld_ifc_work, types: [HANG] # git bisect good 518a994aa0b87d96f1bc6678a7035df5d1fcd7a1 Bisecting: 19 revisions left to test after this (roughly 4 steps) [16f0de9191004a1ed8bccb5b2ecc78748f3115f3] net: phy: micrel: set soft_reset callback to genphy_soft_reset for KSZ8061 determine whether the revision contains the guilty commit revision 458ce51d0356ee60c93f9f807d9827cf2a41643d crashed and is reachable testing commit 16f0de9191004a1ed8bccb5b2ecc78748f3115f3 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: fafe97276ed05a52359c145cfc69c3d7431bd151bed29a47b1b9ae14ff41eaf4 run #0: crashed: BUG: soft lockup in kauditd_thread run #1: crashed: BUG: soft lockup in sock_read_iter run #2: crashed: BUG: soft lockup in rtnl_newlink run #3: crashed: BUG: soft lockup in rtnl_newlink run #4: crashed: BUG: soft lockup in inet_release run #5: crashed: BUG: soft lockup in linkwatch_event run #6: crashed: BUG: soft lockup in kernfs_fop_read_iter run #7: crashed: BUG: soft lockup in handle_softirqs run #8: crashed: BUG: soft lockup in linkwatch_event run #9: crashed: BUG: soft lockup in inet_release representative crash: BUG: soft lockup in kauditd_thread, types: [HANG] # git bisect good 16f0de9191004a1ed8bccb5b2ecc78748f3115f3 Bisecting: 9 revisions left to test after this (roughly 3 steps) [ae4053a6d4e38665604fbddd77488a710576fedf] netfilter: nft_payload: rebuild vlan header when needed determine whether the revision contains the guilty commit revision 16f0de9191004a1ed8bccb5b2ecc78748f3115f3 crashed and is reachable testing commit ae4053a6d4e38665604fbddd77488a710576fedf gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 1147ac27aa71b5aee9a5a6d4be2c039f245e6578cb05649453f4aac0f14cc678 all runs: OK false negative chance: 0.000 # git bisect bad ae4053a6d4e38665604fbddd77488a710576fedf Bisecting: 4 revisions left to test after this (roughly 2 steps) [25571a12fbc8a1283bd8380d461267956fd426f7] enic: Validate length of nl attributes in enic_set_vf_port determine whether the revision contains the guilty commit revision 528a620c1397a6fa329e9d62ee0d49898e31b4f6 crashed and is reachable testing commit 25571a12fbc8a1283bd8380d461267956fd426f7 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 14f659f09222170054e1afdb46f1ee77f43b0741fd307ac71e38711d1e3a72a2 run #0: crashed: BUG: soft lockup in inet_release run #1: crashed: BUG: soft lockup in inet_release run #2: crashed: BUG: soft lockup in inet_release run #3: crashed: BUG: soft lockup in linkwatch_event run #4: crashed: BUG: soft lockup in inet_release run #5: crashed: BUG: soft lockup in linkwatch_event run #6: crashed: BUG: soft lockup in linkwatch_event run #7: crashed: BUG: soft lockup in x64_sys_call run #8: crashed: BUG: soft lockup in inet_release run #9: crashed: BUG: soft lockup in x64_sys_call representative crash: BUG: soft lockup in inet_release, types: [HANG] # git bisect good 25571a12fbc8a1283bd8380d461267956fd426f7 Bisecting: 2 revisions left to test after this (roughly 1 step) [11e8ecc5b86037fec43d07b1c162e233e131b1d9] bpf: Allow delete from sockmap/sockhash only if update is allowed determine whether the revision contains the guilty commit revision 33feac2e8df3a299258ee37d8f32c165b4937fe7 crashed and is reachable testing commit 11e8ecc5b86037fec43d07b1c162e233e131b1d9 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: c5f22c9974f4b5dd43665b130aafb8e5344d6d5f4e20c6c9c787dd4fdffa44f8 all runs: OK false negative chance: 0.000 # git bisect bad 11e8ecc5b86037fec43d07b1c162e233e131b1d9 Bisecting: 0 revisions left to test after this (roughly 0 steps) [a1f34dd7b8bbf4422cb09b5642aba3c178d88ef9] net: usb: smsc95xx: fix changing LED_SEL bit value updated from EEPROM determine whether the revision contains the guilty commit revision 33feac2e8df3a299258ee37d8f32c165b4937fe7 crashed and is reachable testing commit a1f34dd7b8bbf4422cb09b5642aba3c178d88ef9 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: df11062dac7cb3d411eba604c6ac5d5861abb1621673af172af5bd5d6df997ed run #0: crashed: BUG: soft lockup in inet_release run #1: crashed: BUG: soft lockup in inet_release run #2: crashed: BUG: soft lockup in inet_release run #3: crashed: BUG: soft lockup in x64_sys_call run #4: crashed: BUG: soft lockup in linkwatch_event run #5: crashed: BUG: soft lockup in inet_release run #6: crashed: BUG: soft lockup in sock_read_iter run #7: crashed: BUG: soft lockup in inet_release run #8: crashed: BUG: soft lockup in handle_softirqs run #9: crashed: BUG: soft lockup in bpf_prog_free_deferred representative crash: BUG: soft lockup in inet_release, types: [HANG] # git bisect good a1f34dd7b8bbf4422cb09b5642aba3c178d88ef9 11e8ecc5b86037fec43d07b1c162e233e131b1d9 is the first bad commit commit 11e8ecc5b86037fec43d07b1c162e233e131b1d9 Author: Jakub Sitnicki Date: Mon May 27 13:20:07 2024 +0200 bpf: Allow delete from sockmap/sockhash only if update is allowed [ Upstream commit 98e948fb60d41447fd8d2d0c3b8637fc6b6dc26d ] We have seen an influx of syzkaller reports where a BPF program attached to a tracepoint triggers a locking rule violation by performing a map_delete on a sockmap/sockhash. We don't intend to support this artificial use scenario. Extend the existing verifier allowed-program-type check for updating sockmap/sockhash to also cover deleting from a map. From now on only BPF programs which were previously allowed to update sockmap/sockhash can delete from these map types. Fixes: ff9105993240 ("bpf, sockmap: Prevent lock inversion deadlock in map delete elem") Reported-by: Tetsuo Handa Reported-by: syzbot+ec941d6e24f633a59172@syzkaller.appspotmail.com Signed-off-by: Jakub Sitnicki Signed-off-by: Daniel Borkmann Tested-by: syzbot+ec941d6e24f633a59172@syzkaller.appspotmail.com Acked-by: John Fastabend Closes: https://syzkaller.appspot.com/bug?extid=ec941d6e24f633a59172 Link: https://lore.kernel.org/bpf/20240527-sockmap-verify-deletes-v1-1-944b372f2101@cloudflare.com Signed-off-by: Sasha Levin kernel/bpf/verifier.c | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) accumulated error probability: 0.00 culprit signature: c5f22c9974f4b5dd43665b130aafb8e5344d6d5f4e20c6c9c787dd4fdffa44f8 parent signature: df11062dac7cb3d411eba604c6ac5d5861abb1621673af172af5bd5d6df997ed revisions tested: 19, total time: 4h26m14.975306193s (build: 1h41m56.57972629s, test: 2h39m50.248799161s) first good commit: 11e8ecc5b86037fec43d07b1c162e233e131b1d9 bpf: Allow delete from sockmap/sockhash only if update is allowed recipients (to): ["daniel@iogearbox.net" "jakub@cloudflare.com" "john.fastabend@gmail.com" "sashal@kernel.org" "syzbot+ec941d6e24f633a59172@syzkaller.appspotmail.com"] recipients (cc): []