Re: [PATCH bpf-next 1/4] bpf: Fix linked reg delta tracking when src_reg == dst_reg

[patchwork-bot+netdevbpf@kernel.org]

Hello:

This series was applied to bpf/bpf-next.git (master)
by Alexei Starovoitov <ast@kernel.org>:

On Tue,  7 Apr 2026 21:24:18 +0200 you wrote:
> Consider the case of rX += rX where src_reg and dst_reg are pointers to
> the same bpf_reg_state in adjust_reg_min_max_vals(). The latter first
> modifies the dst_reg in-place, and later in the delta tracking, the
> subsequent is_reg_const(src_reg)/reg_const_value(src_reg) reads the
> post-{add,sub} value instead of the original source.
> 
> This is problematic since it sets an incorrect delta, which sync_linked_regs()
> then propagates to linked registers, thus creating a verifier-vs-runtime
> mismatch. Fix it by just skipping this corner case.
> 
> [...]

Here is the summary with links:
  - [bpf-next,1/4] bpf: Fix linked reg delta tracking when src_reg == dst_reg
    https://git.kernel.org/bpf/bpf-next/c/d7f14173c0d5
  - [bpf-next,2/4] bpf: Clear delta when clearing reg id for non-{add,sub} ops
    https://git.kernel.org/bpf/bpf-next/c/1b327732c846
  - [bpf-next,3/4] selftests/bpf: Add tests for delta tracking when src_reg == dst_reg
    https://git.kernel.org/bpf/bpf-next/c/ed2eecdc0c66
  - [bpf-next,4/4] selftests/bpf: Add tests for stale delta leaking through id reassignment
    https://git.kernel.org/bpf/bpf-next/c/cac16ce1e378

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html