ci2 starts bisection 2024-09-28 03:33:51.548346621 +0000 UTC m=+36060.733005210 bisecting fixing commit since 5d96939590c0122be2138255c921e57e3f78b7bd building syzkaller on 3ba885bcb66dec1678d8842ddeb6805786d32a3f ensuring issue is reproducible on original commit 5d96939590c0122be2138255c921e57e3f78b7bd testing commit 5d96939590c0122be2138255c921e57e3f78b7bd gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 1bda03bffd09ff338fa10d871cebbdfa966b492146b3fdb92149c74148dab8dd run #0: crashed: BUG: soft lockup in ipv6_rcv run #1: crashed: BUG: soft lockup in inet_release run #2: crashed: BUG: soft lockup in inet_release run #3: crashed: BUG: soft lockup in bpf_prog_free_deferred run #4: crashed: BUG: soft lockup in sk_psock_destroy run #5: crashed: BUG: soft lockup in inet_release run #6: crashed: BUG: soft lockup in bpf_map_free_deferred run #7: crashed: BUG: soft lockup in ipv6_rcv run #8: crashed: BUG: soft lockup in kernfs_fop_open run #9: crashed: BUG: soft lockup in inet_release run #10: crashed: BUG: soft lockup in kauditd_thread run #11: crashed: BUG: soft lockup in rcu_core_si run #12: crashed: BUG: soft lockup in ipv6_rcv run #13: crashed: BUG: soft lockup in inet_release run #14: crashed: BUG: soft lockup in ipv6_rcv run #15: crashed: BUG: soft lockup in inet_release run #16: crashed: BUG: soft lockup in inet_release run #17: crashed: BUG: soft lockup in ipv6_rcv run #18: crashed: no output from test machine run #19: crashed: no output from test machine representative crash: BUG: soft lockup in ipv6_rcv, types: [HANG] check whether we can drop unnecessary instrumentation disabling configs for [LEAK UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP], they are not needed testing commit 5d96939590c0122be2138255c921e57e3f78b7bd gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: d490e12b2388dc8d9dbc9307e4fd75d778a64ba9551d8c5ceb6162b7ddb7481a run #0: crashed: BUG: soft lockup in bpf_prog_free_deferred run #1: crashed: BUG: soft lockup in bpf_map_free_deferred run #2: crashed: BUG: soft lockup in mld_ifc_work run #3: crashed: BUG: soft lockup in ipv6_rcv run #4: crashed: BUG: soft lockup in ipv6_rcv run #5: crashed: BUG: soft lockup in kauditd_thread run #6: crashed: BUG: soft lockup in kauditd_thread run #7: crashed: BUG: soft lockup in ipv6_rcv run #8: crashed: BUG: soft lockup in inet_release run #9: crashed: no output from test machine representative crash: BUG: soft lockup in bpf_prog_free_deferred, types: [HANG] the bug reproduces without the instrumentation disabling configs for [LEAK UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP], they are not needed kconfig minimization: base=4920 full=6158 leaves diff=242 split chunks (needed=false): <242> split chunk #0 of len 242 into 5 parts testing without sub-chunk 1/5 disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP LEAK UBSAN BUG], they are not needed testing commit 5d96939590c0122be2138255c921e57e3f78b7bd gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: b991ecfa1f76688b56b0876b1461bad51de680f4eb909fb80b25517d66788379 run #0: crashed: BUG: soft lockup in inet_release run #1: crashed: BUG: soft lockup in rcu_core_si run #2: crashed: BUG: soft lockup in inet_release run #3: crashed: BUG: soft lockup in ipv6_rcv run #4: crashed: BUG: soft lockup in bpf_prog_free_deferred run #5: crashed: BUG: soft lockup in rcu_core_si run #6: crashed: BUG: soft lockup in rcu_core_si run #7: crashed: BUG: soft lockup in inet_release run #8: crashed: BUG: soft lockup in inet_release run #9: crashed: no output from test machine representative crash: BUG: soft lockup in inet_release, types: [HANG] the chunk can be dropped testing without sub-chunk 2/5 disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP LEAK UBSAN BUG], they are not needed testing commit 5d96939590c0122be2138255c921e57e3f78b7bd gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 2019aa35832d05120c1b689fd5867d40613d19169088b2634fb35f882dea9a27 run #0: crashed: BUG: soft lockup in rcu_core_si run #1: crashed: BUG: soft lockup in bpf_prog_free_deferred run #2: crashed: BUG: soft lockup in sys_syslog run #3: crashed: BUG: soft lockup in sock_read_iter run #4: crashed: BUG: soft lockup in bpf_map_free_deferred run #5: crashed: BUG: soft lockup in inet_release run #6: crashed: BUG: soft lockup in sock_read_iter run #7: crashed: BUG: soft lockup in bpf_prog_free_deferred run #8: crashed: BUG: soft lockup in inet_release run #9: crashed: BUG: soft lockup in rcu_core_si representative crash: BUG: soft lockup in rcu_core_si, types: [HANG] the chunk can be dropped testing without sub-chunk 3/5 disabling configs for [ATOMIC_SLEEP LEAK UBSAN BUG KASAN LOCKDEP], they are not needed testing commit 5d96939590c0122be2138255c921e57e3f78b7bd gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 2d7836dc0dcab25e500b98a92211f6d7756d57c24fc67c8d783c9d05318e9c01 run #0: crashed: BUG: soft lockup in bpf_map_free_deferred run #1: crashed: BUG: soft lockup in bpf_map_free_deferred run #2: crashed: BUG: soft lockup in rcu_core_si run #3: crashed: BUG: soft lockup in kauditd_thread run #4: crashed: BUG: soft lockup in ipv6_rcv run #5: crashed: BUG: soft lockup in bpf_prog_free_deferred run #6: crashed: BUG: soft lockup in inet_release run #7: crashed: BUG: soft lockup in ipv6_rcv run #8: crashed: BUG: soft lockup in rcu_core_si run #9: crashed: BUG: soft lockup in kauditd_thread representative crash: BUG: soft lockup in bpf_map_free_deferred, types: [HANG] the chunk can be dropped testing without sub-chunk 4/5 disabling configs for [LEAK UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP], they are not needed testing commit 5d96939590c0122be2138255c921e57e3f78b7bd gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 4f9b1db5ee2f8067466214eab8b9aca28095996dcb15ccd77390c6cfa426f22e run #0: crashed: BUG: soft lockup in rcu_core_si run #1: crashed: BUG: soft lockup in inet_release run #2: crashed: BUG: soft lockup in inet_release run #3: crashed: BUG: soft lockup in inet_release run #4: crashed: BUG: soft lockup in inet_release run #5: crashed: BUG: soft lockup in wg_packet_handshake_receive_worker run #6: crashed: BUG: soft lockup in kauditd_thread run #7: crashed: BUG: soft lockup in rcu_core_si run #8: crashed: no output from test machine run #9: crashed: no output from test machine representative crash: BUG: soft lockup in rcu_core_si, types: [HANG] the chunk can be dropped testing without sub-chunk 5/5 disabling configs for [LEAK UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP], they are not needed testing commit 5d96939590c0122be2138255c921e57e3f78b7bd gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 failed building 5d96939590c0122be2138255c921e57e3f78b7bd: net/socket.c:1191: undefined reference to `wext_handle_ioctl' net/socket.c:3385: undefined reference to `compat_wext_handle_ioctl' net/core/net-procfs.c:343: undefined reference to `wext_proc_exit' net/core/net-procfs.c:327: undefined reference to `wext_proc_init' minimized to 46 configs; suspects: [HID_ZEROPLUS USB_NET_GL620A USB_NET_MCS7830 USB_NET_NET1080 USB_NET_PLUSB USB_NET_RNDIS_HOST USB_NET_SMSC75XX USB_NET_SMSC95XX USB_NET_SR9700 USB_NET_SR9800 USB_NET_ZAURUS USB_OHCI_HCD USB_OHCI_HCD_PCI USB_OHCI_HCD_PLATFORM USB_OTG USB_OTG_FSM USB_PRINTER USB_SERIAL USB_SERIAL_FTDI_SIO USB_SERIAL_GENERIC USB_SERIAL_PL2303 USB_STORAGE_ALAUDA USB_STORAGE_CYPRESS_ATACB USB_STORAGE_DATAFAB USB_STORAGE_FREECOM USB_STORAGE_ISD200 USB_STORAGE_JUMPSHOT USB_STORAGE_KARMA USB_STORAGE_ONETOUCH USB_STORAGE_SDDR09 USB_STORAGE_SDDR55 USB_STORAGE_USBAT USB_TRANCEVIBRATOR USB_U_AUDIO USB_U_ETHER USB_U_SERIAL USB_WDM WLAN WLAN_VENDOR_ATH WLAN_VENDOR_ATMEL WLAN_VENDOR_BROADCOM WLAN_VENDOR_INTERSIL WLAN_VENDOR_MARVELL WLAN_VENDOR_MEDIATEK WLAN_VENDOR_MICROCHIP WLAN_VENDOR_RALINK WLAN_VENDOR_REALTEK WLAN_VENDOR_RSI WLAN_VENDOR_ZYDAS X86_X32 ZEROPLUS_FF] disabling configs for [LEAK UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP], they are not needed testing current HEAD 8e36931104ac380ff51ac23c96def63697a748f7 testing commit 8e36931104ac380ff51ac23c96def63697a748f7 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 40705b51b8116af1fc4c4d4beae7f19f56b9fafe280f620a594f9aa4be2ebeb8 all runs: OK false negative chance: 0.000 # git bisect start 8e36931104ac380ff51ac23c96def63697a748f7 5d96939590c0122be2138255c921e57e3f78b7bd Bisecting: 1241 revisions left to test after this (roughly 10 steps) [b5a439e8b087963bf860bbe3b092c196c6eccf16] nfsd: add some comments to nfsd_file_do_acquire determine whether the revision contains the guilty commit checking the merge base 458ce51d0356ee60c93f9f807d9827cf2a41643d no existing result, test the revision testing commit 458ce51d0356ee60c93f9f807d9827cf2a41643d gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 472ab8e2c7d89a53522c81bb0fbacf1a62ed7662b9bbfcb86bc46d66d990a0c9 run #0: crashed: BUG: soft lockup in kauditd_thread run #1: crashed: BUG: soft lockup in bpf_prog_free_deferred run #2: crashed: BUG: soft lockup in ipv6_rcv run #3: crashed: BUG: soft lockup in inet_release run #4: crashed: BUG: soft lockup in ipv6_rcv run #5: crashed: BUG: soft lockup in sys_syslog run #6: crashed: BUG: soft lockup in rcu_core_si run #7: crashed: BUG: soft lockup in sys_openat run #8: crashed: BUG: soft lockup in net_rx_action run #9: crashed: no output from test machine representative crash: BUG: soft lockup in kauditd_thread, types: [HANG] testing commit b5a439e8b087963bf860bbe3b092c196c6eccf16 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 913c5bdbcbd1f3eaf26af6b7dcbf5eb8bbf2277bef6015702b5319fc5862f541 run #0: crashed: BUG: soft lockup in rcu_core_si run #1: crashed: BUG: soft lockup in sys_unlink run #2: crashed: BUG: soft lockup in sys_openat run #3: crashed: BUG: soft lockup in ipv6_rcv run #4: crashed: BUG: soft lockup in inet_release run #5: crashed: BUG: soft lockup in ipv6_rcv run #6: crashed: BUG: soft lockup in inet_release run #7: crashed: BUG: soft lockup in rcu_core_si run #8: crashed: no output from test machine run #9: crashed: no output from test machine representative crash: BUG: soft lockup in rcu_core_si, types: [HANG] # git bisect good b5a439e8b087963bf860bbe3b092c196c6eccf16 Bisecting: 620 revisions left to test after this (roughly 9 steps) [528a620c1397a6fa329e9d62ee0d49898e31b4f6] Revert "r8169: don't try to disable interrupts if NAPI is, scheduled already" determine whether the revision contains the guilty commit revision 458ce51d0356ee60c93f9f807d9827cf2a41643d crashed and is reachable testing commit 528a620c1397a6fa329e9d62ee0d49898e31b4f6 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 5fd2e44b9563f87460b7b1a845d1af8d5b7524e7e34720b659ca55826d1f323c run #0: crashed: BUG: soft lockup in bpf_map_free_deferred run #1: crashed: BUG: soft lockup in inet_release run #2: crashed: BUG: soft lockup in inet_release run #3: crashed: BUG: soft lockup in mld_ifc_work run #4: crashed: BUG: soft lockup in sk_psock_destroy run #5: crashed: BUG: soft lockup in rcu_core_si run #6: crashed: BUG: soft lockup in inet_release run #7: crashed: BUG: soft lockup in ipv6_rcv run #8: crashed: BUG: soft lockup in x64_sys_call run #9: crashed: BUG: soft lockup in kauditd_thread representative crash: BUG: soft lockup in bpf_map_free_deferred, types: [HANG] # git bisect good 528a620c1397a6fa329e9d62ee0d49898e31b4f6 Bisecting: 310 revisions left to test after this (roughly 8 steps) [477c137131ecd46215eac4c74934d0af272a38bf] net: ena: Reduce lines with longer column width boundary determine whether the revision contains the guilty commit revision 458ce51d0356ee60c93f9f807d9827cf2a41643d crashed and is reachable testing commit 477c137131ecd46215eac4c74934d0af272a38bf gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 02512a3a1e4deeffb5f5b4661026738ef924594dbdb49de9459b589fcb30e677 all runs: OK false negative chance: 0.000 # git bisect bad 477c137131ecd46215eac4c74934d0af272a38bf Bisecting: 154 revisions left to test after this (roughly 7 steps) [33feac2e8df3a299258ee37d8f32c165b4937fe7] sunrpc: removed redundant procp check determine whether the revision contains the guilty commit revision 458ce51d0356ee60c93f9f807d9827cf2a41643d crashed and is reachable testing commit 33feac2e8df3a299258ee37d8f32c165b4937fe7 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: a6e8448606117af7c0b69909ac81ef786e9cc72aca228c3cb566a9cd254038bf run #0: crashed: BUG: soft lockup in bpf_map_free_deferred run #1: crashed: BUG: soft lockup in handle_softirqs run #2: crashed: BUG: soft lockup in ipv6_rcv run #3: crashed: BUG: soft lockup in inet_release run #4: crashed: BUG: soft lockup in bpf_map_free_deferred run #5: crashed: BUG: soft lockup in inet_release run #6: crashed: BUG: soft lockup in sock_read_iter run #7: crashed: BUG: soft lockup in inet_release run #8: crashed: BUG: soft lockup in handle_softirqs run #9: crashed: BUG: soft lockup in inet_release representative crash: BUG: soft lockup in bpf_map_free_deferred, types: [HANG] # git bisect good 33feac2e8df3a299258ee37d8f32c165b4937fe7 Bisecting: 77 revisions left to test after this (roughly 6 steps) [81360e7fdc3c9a8f00ce89c6aea82dca4a2962cb] mmc: sdhci_am654: Add OTAP/ITAP delay enable determine whether the revision contains the guilty commit revision b5a439e8b087963bf860bbe3b092c196c6eccf16 crashed and is reachable testing commit 81360e7fdc3c9a8f00ce89c6aea82dca4a2962cb gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 8c5ff8893810e5a7e1afa9a8c9c1b8a02b84ec2d056d24f3f7cf447a04f05b78 run #0: crashed: BUG: soft lockup in handle_softirqs run #1: crashed: BUG: soft lockup in bpf_prog_free_deferred run #2: crashed: BUG: soft lockup in bpf_map_free_deferred run #3: crashed: BUG: soft lockup in inet_release run #4: crashed: BUG: soft lockup in inet_release run #5: crashed: BUG: soft lockup in ipv6_rcv run #6: crashed: BUG: soft lockup in ipv6_rcv run #7: crashed: BUG: soft lockup in bpf_map_free_deferred run #8: crashed: BUG: soft lockup in x64_sys_call run #9: crashed: BUG: soft lockup in ipv6_rcv representative crash: BUG: soft lockup in handle_softirqs, types: [HANG] # git bisect good 81360e7fdc3c9a8f00ce89c6aea82dca4a2962cb Bisecting: 38 revisions left to test after this (roughly 5 steps) [518a994aa0b87d96f1bc6678a7035df5d1fcd7a1] af_unix: Update unix_sk(sk)->oob_skb under sk_receive_queue lock. determine whether the revision contains the guilty commit revision 33feac2e8df3a299258ee37d8f32c165b4937fe7 crashed and is reachable testing commit 518a994aa0b87d96f1bc6678a7035df5d1fcd7a1 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 9cca70a99813ecf8fb4c56597b92296e5a456c4f059b1d1e7c684fd6fe68c3f6 run #0: crashed: BUG: soft lockup in bpf_prog_free_deferred run #1: crashed: BUG: soft lockup in handle_softirqs run #2: crashed: BUG: soft lockup in kauditd_thread run #3: crashed: BUG: soft lockup in ipv6_rcv run #4: crashed: BUG: soft lockup in inet_release run #5: crashed: BUG: soft lockup in inet_release run #6: crashed: BUG: soft lockup in ipv6_rcv run #7: crashed: BUG: soft lockup in handle_softirqs run #8: crashed: BUG: soft lockup in bpf_map_free_deferred run #9: crashed: no output from test machine representative crash: BUG: soft lockup in bpf_prog_free_deferred, types: [HANG] # git bisect good 518a994aa0b87d96f1bc6678a7035df5d1fcd7a1 Bisecting: 19 revisions left to test after this (roughly 4 steps) [16f0de9191004a1ed8bccb5b2ecc78748f3115f3] net: phy: micrel: set soft_reset callback to genphy_soft_reset for KSZ8061 determine whether the revision contains the guilty commit revision 81360e7fdc3c9a8f00ce89c6aea82dca4a2962cb crashed and is reachable testing commit 16f0de9191004a1ed8bccb5b2ecc78748f3115f3 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 4ebfe3e79c502b4025d16b089502399244a8744a8b7476cfef19d3295677b074 run #0: crashed: BUG: soft lockup in handle_softirqs run #1: crashed: BUG: soft lockup in handle_softirqs run #2: crashed: BUG: soft lockup in bpf_prog_free_deferred run #3: crashed: BUG: soft lockup in handle_softirqs run #4: crashed: BUG: soft lockup in inet_release run #5: crashed: BUG: soft lockup in inet_release run #6: crashed: BUG: soft lockup in kauditd_thread run #7: crashed: BUG: soft lockup in inet_release run #8: crashed: BUG: soft lockup in sock_read_iter run #9: crashed: BUG: soft lockup in inet_release representative crash: BUG: soft lockup in handle_softirqs, types: [HANG] # git bisect good 16f0de9191004a1ed8bccb5b2ecc78748f3115f3 Bisecting: 9 revisions left to test after this (roughly 3 steps) [ae4053a6d4e38665604fbddd77488a710576fedf] netfilter: nft_payload: rebuild vlan header when needed determine whether the revision contains the guilty commit revision b5a439e8b087963bf860bbe3b092c196c6eccf16 crashed and is reachable testing commit ae4053a6d4e38665604fbddd77488a710576fedf gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: edc97f91beccca932b1c76b646d82e1366e128e8b18d5d95457a1d1ea0074d11 all runs: OK false negative chance: 0.000 # git bisect bad ae4053a6d4e38665604fbddd77488a710576fedf Bisecting: 4 revisions left to test after this (roughly 2 steps) [25571a12fbc8a1283bd8380d461267956fd426f7] enic: Validate length of nl attributes in enic_set_vf_port determine whether the revision contains the guilty commit revision 16f0de9191004a1ed8bccb5b2ecc78748f3115f3 crashed and is reachable testing commit 25571a12fbc8a1283bd8380d461267956fd426f7 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 4b15e7e0dbc27b5f7cec54b16f907e452c40f1f9e993c9d030fc5bd86771d526 run #0: crashed: BUG: soft lockup in x64_sys_call run #1: crashed: BUG: soft lockup in mld_ifc_work run #2: crashed: BUG: soft lockup in kauditd_thread run #3: crashed: BUG: soft lockup in ipv6_rcv run #4: crashed: BUG: soft lockup in inet_release run #5: crashed: BUG: soft lockup in mld_ifc_work run #6: crashed: BUG: soft lockup in mld_ifc_work run #7: crashed: BUG: soft lockup in addrconf_dad_work run #8: crashed: BUG: soft lockup in inet_release run #9: crashed: BUG: soft lockup in inet_release representative crash: BUG: soft lockup in x64_sys_call, types: [HANG] # git bisect good 25571a12fbc8a1283bd8380d461267956fd426f7 Bisecting: 2 revisions left to test after this (roughly 1 step) [11e8ecc5b86037fec43d07b1c162e233e131b1d9] bpf: Allow delete from sockmap/sockhash only if update is allowed determine whether the revision contains the guilty commit revision b5a439e8b087963bf860bbe3b092c196c6eccf16 crashed and is reachable testing commit 11e8ecc5b86037fec43d07b1c162e233e131b1d9 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: fbf6f344d2027b9e6985954ab1e610da15865d6a5a88a6005cf204346f729e12 all runs: OK false negative chance: 0.000 # git bisect bad 11e8ecc5b86037fec43d07b1c162e233e131b1d9 Bisecting: 0 revisions left to test after this (roughly 0 steps) [a1f34dd7b8bbf4422cb09b5642aba3c178d88ef9] net: usb: smsc95xx: fix changing LED_SEL bit value updated from EEPROM determine whether the revision contains the guilty commit revision 25571a12fbc8a1283bd8380d461267956fd426f7 crashed and is reachable testing commit a1f34dd7b8bbf4422cb09b5642aba3c178d88ef9 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: b0183ceec2afb51bb1d029b6427c7649596cae576c1d32c89f18136ea267fc0c run #0: crashed: BUG: soft lockup in bpf_prog_free_deferred run #1: crashed: BUG: soft lockup in handle_softirqs run #2: crashed: BUG: soft lockup in sock_read_iter run #3: crashed: BUG: soft lockup in sock_read_iter run #4: crashed: BUG: soft lockup in ipv6_rcv run #5: crashed: BUG: soft lockup in inet_release run #6: crashed: BUG: soft lockup in handle_softirqs run #7: crashed: BUG: soft lockup in inet_release run #8: crashed: BUG: soft lockup in handle_softirqs run #9: crashed: no output from test machine representative crash: BUG: soft lockup in bpf_prog_free_deferred, types: [HANG] # git bisect good a1f34dd7b8bbf4422cb09b5642aba3c178d88ef9 11e8ecc5b86037fec43d07b1c162e233e131b1d9 is the first bad commit commit 11e8ecc5b86037fec43d07b1c162e233e131b1d9 Author: Jakub Sitnicki Date: Mon May 27 13:20:07 2024 +0200 bpf: Allow delete from sockmap/sockhash only if update is allowed [ Upstream commit 98e948fb60d41447fd8d2d0c3b8637fc6b6dc26d ] We have seen an influx of syzkaller reports where a BPF program attached to a tracepoint triggers a locking rule violation by performing a map_delete on a sockmap/sockhash. We don't intend to support this artificial use scenario. Extend the existing verifier allowed-program-type check for updating sockmap/sockhash to also cover deleting from a map. From now on only BPF programs which were previously allowed to update sockmap/sockhash can delete from these map types. Fixes: ff9105993240 ("bpf, sockmap: Prevent lock inversion deadlock in map delete elem") Reported-by: Tetsuo Handa Reported-by: syzbot+ec941d6e24f633a59172@syzkaller.appspotmail.com Signed-off-by: Jakub Sitnicki Signed-off-by: Daniel Borkmann Tested-by: syzbot+ec941d6e24f633a59172@syzkaller.appspotmail.com Acked-by: John Fastabend Closes: https://syzkaller.appspot.com/bug?extid=ec941d6e24f633a59172 Link: https://lore.kernel.org/bpf/20240527-sockmap-verify-deletes-v1-1-944b372f2101@cloudflare.com Signed-off-by: Sasha Levin kernel/bpf/verifier.c | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) accumulated error probability: 0.00 culprit signature: fbf6f344d2027b9e6985954ab1e610da15865d6a5a88a6005cf204346f729e12 parent signature: b0183ceec2afb51bb1d029b6427c7649596cae576c1d32c89f18136ea267fc0c revisions tested: 19, total time: 4h38m7.115200553s (build: 56m25.057526395s, test: 3h37m38.937935348s) first good commit: 11e8ecc5b86037fec43d07b1c162e233e131b1d9 bpf: Allow delete from sockmap/sockhash only if update is allowed recipients (to): ["daniel@iogearbox.net" "jakub@cloudflare.com" "john.fastabend@gmail.com" "sashal@kernel.org" "syzbot+ec941d6e24f633a59172@syzkaller.appspotmail.com"] recipients (cc): []