Syzbot CI

Subject	bpf: use scalar evolution to widen bounded loops
Author	eddyz87@gmail.com
Date	2026-10-09 10:47:19 +0000 UTC
Version
Cc	andrii@kernel.org ast@kernel.org bpf@vger.kernel.org daniel@iogearbox.net eddyz87@gmail.com emil@etsalapatis.com ezingerman@fb.com kernel-team@fb.com yonghong.song@linux.dev

Subject

bpf: use scalar evolution to widen bounded loops

Author

eddyz87@gmail.com

Date

2026-10-09 10:47:19 +0000 UTC

Version

andrii@kernel.org ast@kernel.org bpf@vger.kernel.org daniel@iogearbox.net eddyz87@gmail.com emil@etsalapatis.com ezingerman@fb.com kernel-team@fb.com yonghong.song@linux.dev

Name	Content [All]
[PATCH bpf-next v3 01/51] bpf: represent stack access effects with arg_access_info	[Body]
[PATCH bpf-next v3 02/51] bpf: describe helper stack accesses with arg_access_info	[Body]
[PATCH bpf-next v3 03/51] bpf: describe kfunc stack accesses with arg_access_info	[Body]
[PATCH bpf-next v3 04/51] bpf: track may_write flags in liveness	[Body]
[PATCH bpf-next v3 05/51] bpf: summarize may write stack slots in insn_aux_data	[Body]
[PATCH bpf-next v3 06/51] bpf: summarize live stack slots in insn_aux_data	[Body]
[PATCH bpf-next v3 07/51] bpf: summarize regs that may hold a frame pointer in insn_aux_data	[Body]
[PATCH bpf-next v3 08/51] bpf: record write effects for atomic operations in liveness.c	[Body]
[PATCH bpf-next v3 09/51] bpf: fix arg_track_xfer() for atomic stack spills and fills	[Body]
[PATCH bpf-next v3 10/51] bpf: derive global subprog stack liveness from BTF signatures	[Body]
[PATCH bpf-next v3 11/51] bpf: compute parameters liveness in bpf_compute_live_registers()	[Body]
[PATCH bpf-next v3 12/51] bpf: add tnum_alignment()	[Body]
[PATCH bpf-next v3 13/51] bpf: add cnum{32,64}_union()	[Body]
[PATCH bpf-next v3 14/51] bpf: add cnum64_intersect_linear()	[Body]
[PATCH bpf-next v3 15/51] bpf: expose bpf_rev_opcode() and bpf_flip_opcode()	[Body]
[PATCH bpf-next v3 16/51] bpf: expose bpf_grow_stack_state()	[Body]
[PATCH bpf-next v3 17/51] bpf: expose bpf_verbose_snum()	[Body]
[PATCH bpf-next v3 18/51] bpf: allow subrange relations for PTR_TO_STACK in regsafe()	[Body]
[PATCH bpf-next v3 19/51] bpf: representation for intervals with steps	[Body]
[PATCH bpf-next v3 20/51] bpf: varying offset access support for PTR_TO_BTF_ID pointers	[Body]
[PATCH bpf-next v3 21/51] bpf: save DFS postorder numbers for program instructions	[Body]
[PATCH bpf-next v3 22/51] bpf: move the live-register and SCC printout to a standalone function	[Body]
[PATCH bpf-next v3 23/51] bpf: compute immediate dominators	[Body]
[PATCH bpf-next v3 24/51] bpf: compute loop hierarchy	[Body]
[PATCH bpf-next v3 25/51] bpf: add bpf_set_reg_range()	[Body]
[PATCH bpf-next v3 26/51] bpf: add bpf_mark_reg_known_scalar()	[Body]
[PATCH bpf-next v3 27/51] bpf: add bpf_reg_union() and bpf_reg_union_compatible()	[Body]
[PATCH bpf-next v3 28/51] bpf: add bpf_split_cur_state()	[Body]
[PATCH bpf-next v3 29/51] bpf: add bpf_same_memory_origin()	[Body]
[PATCH bpf-next v3 30/51] bpf: add bpf_spill_size()	[Body]
[PATCH bpf-next v3 31/51] bpf: record basic-block ends in insn_aux_data	[Body]
[PATCH bpf-next v3 32/51] bpf: allow precision backtracking between overlapping checkpoints	[Body]
[PATCH bpf-next v3 33/51] bpf: compute scalar evolution expressions for loops	[Body]
[PATCH bpf-next v3 34/51] bpf: use SCEV to widen bounded loops	[Body]
[PATCH bpf-next v3 35/51] bpf: avoid widening registers that hinder exact stack-slot tracking	[Body]
[PATCH bpf-next v3 36/51] bpf: bpf_func_state size optimization	[Body]
[PATCH bpf-next v3 37/51] selftests/bpf: __msg_next tag for matching messages on consecutive lines	[Body]
[PATCH bpf-next v3 38/51] selftests/bpf: bound UNIX socket path loops by sun_path size	[Body]
[PATCH bpf-next v3 39/51] selftests/bpf: test for stack-pointer subrange pruning	[Body]
[PATCH bpf-next v3 40/51] selftests/bpf: tests for may_write stack-liveness tracking	[Body]
[PATCH bpf-next v3 41/51] selftests/bpf: tests for may_def marks of atomic RMW operations	[Body]
[PATCH bpf-next v3 42/51] selftests/bpf: tests for stack pointer spills/fills through atomics	[Body]
[PATCH bpf-next v3 43/51] selftests/bpf: tests for map special cases in bpf_helper_stack_access_bytes()	[Body]
[PATCH bpf-next v3 44/51] selftests/bpf: tests for BTF-based global subprog stack liveness	[Body]
[PATCH bpf-next v3 45/51] selftests/bpf: test for register liveness of subprogram arguments	[Body]
[PATCH bpf-next v3 46/51] selftests/bpf: tests for register base/step arithmetic	[Body]
[PATCH bpf-next v3 47/51] selftests/bpf: tests for register base/step state pruning	[Body]
[PATCH bpf-next v3 48/51] selftests/bpf: tests for varying offset access to PTR_TO_BTF_ID	[Body]
[PATCH bpf-next v3 49/51] selftests/bpf: tests for loop hierarchy computation	[Body]
[PATCH bpf-next v3 50/51] selftests/bpf: tests for immediate dominator computation	[Body]
[PATCH bpf-next v3 51/51] selftests/bpf: tests for SCEV analysis and loop widening	[Body]

ID (for dev)	df4d8255-8ea4-4667-bdf7-8e7f4eb23a06
Status	finished
Triaged	OK [Log]
Execution Log	[Link]

Test	Base	Patched	Verdict
[KASAN] Build Base	e1d84a37cba984388988d2f1ddc84561413f0db2 [Config]		passed [Log]
[KASAN] Boot test: Base	e1d84a37cba984388988d2f1ddc84561413f0db2 [Config]		passed [Log]
[KASAN] Build Patched		e1d84a37cba984388988d2f1ddc84561413f0db2 [Config] [patched]	passed [Log]
[KASAN] Boot test: Patched		e1d84a37cba984388988d2f1ddc84561413f0db2 [Config] [patched]	passed [Log]
[KASAN] Previous reproducers	e1d84a37cba984388988d2f1ddc84561413f0db2 [Config]	e1d84a37cba984388988d2f1ddc84561413f0db2 [Config] [patched]	passed [Log]
↳ general protection fault in bpf_compute_scev	passed [Log]	passed [Log]
[KASAN] Fuzz	e1d84a37cba984388988d2f1ddc84561413f0db2 [Config]	e1d84a37cba984388988d2f1ddc84561413f0db2 [Config] [patched]	passed [Log] [Artifacts]

Patches (51)

Series Summary

Sessions

Session 2026-10-09