program:
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
[ 100.299276][ T45] Bluetooth: hci0: command tx timeout
[ 100.574613][ T5326] ------------[ cut here ]------------
[ 100.578394][ T5326] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0xffffdfcd, 0xffffffffffffdfcc] s64=[0x80000000ffffdfcd, 0x7fffffffffffdfcc] u32=[0xffffdfcd, 0xffffdfcc] s32=[0xffffdfcd, 0xffffdfcc] var_off=(0xffffdfcc, 0xffffffff00000000)
[ 100.590729][ T5326] WARNING: kernel/bpf/verifier.c:2823 at reg_bounds_sanity_check+0x201/0xc30, CPU#0: syz.0.0/5326
[ 100.596584][ T5326] Modules linked in:
[ 100.599403][ T5326] CPU: 0 UID: 0 PID: 5326 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 100.604720][ T5326] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 100.610205][ T5326] RIP: 0010:reg_bounds_sanity_check+0x3e6/0xc30
[ 100.613308][ T5326] Code: 98 00 00 00 4c 8b 8c 24 88 00 00 00 41 ff 34 24 41 57 55 41 55 ff b4 24 f0 00 00 00 ff b4 24 a8 00 00 00 ff b4 24 c0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 49 bf 00 00 00 00 00 fc ff df 48 8b 84
[ 100.625002][ T5326] RSP: 0018:ffffc9000d91eeb0 EFLAGS: 00010246
[ 100.628070][ T5326] RAX: dffffc0000000000 RBX: 1ffff1100835104a RCX: 00000000ffffdfcd
[ 100.632118][ T5326] RDX: ffffffff8bd472c0 RSI: ffffffff8bd4fbe0 RDI: ffffffff9015c490
[ 100.636228][ T5326] RBP: 00000000ffffdfcc R08: ffffffffffffdfcc R09: 80000000ffffdfcd
[ 100.644406][ T5326] R10: ffff888041a88358 R11: 1ffff11008351050 R12: ffff888041a88250
[ 100.648684][ T5326] R13: 00000000ffffdfcd R14: 1ffff11008351049 R15: 00000000ffffdfcc
[ 100.653286][ T5326] FS: 00007f3ef89f16c0(0000) GS:ffff88808ca55000(0000) knlGS:0000000000000000
[ 100.658041][ T5326] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 100.661663][ T5326] CR2: 00007f3ef7ded6b8 CR3: 0000000036051000 CR4: 0000000000352ef0
[ 100.758178][ C0] hrtimer: interrupt took 60469 ns
[ 100.819743][ T5326] Call Trace:
[ 100.821596][ T5326]
[ 100.823251][ T5326] reg_set_min_max+0x264/0x340
[ 100.825729][ T5326] check_cond_jmp_op+0x1dbb/0x31a0
[ 100.828616][ T5326] ? __pfx_check_cond_jmp_op+0x10/0x10
[ 100.831767][ T5326] ? compute_scc_callchain+0x2f9/0x350
[ 100.834793][ T5326] ? bpf_reset_stack_write_marks+0x1eb/0x260
[ 100.837768][ T5326] do_check+0x7970/0x10690
[ 100.840236][ T5326] ? __pfx_do_check+0x10/0x10
[ 100.842858][ T5326] ? init_func_state+0x1ab2/0x28d0
[ 100.851012][ T5326] do_check_common+0x19c8/0x25b0
[ 100.853642][ T5326] bpf_check+0x5f3e/0x1ce00
[ 100.856352][ T5326] ? __lock_acquire+0x6b5/0x2cf0
[ 100.859148][ T5326] ? __lock_acquire+0x6b5/0x2cf0
[ 100.861776][ T5326] ? lockdep_hardirqs_on+0x7a/0x110
[ 100.864592][ T5326] ? __pfx___mutex_trylock_common+0x10/0x10
[ 100.867666][ T5326] ? __lock_acquire+0x6b5/0x2cf0
[ 100.871360][ T5326] ? css_rstat_updated+0x23a/0x530
[ 100.874178][ T5326] ? __pfx_css_rstat_updated+0x10/0x10
[ 100.877060][ T5326] ? irqentry_exit+0x59e/0x620
[ 100.879904][ T5326] ? lockdep_hardirqs_on+0x7a/0x110
[ 100.882639][ T5326] ? __lock_acquire+0x6b5/0x2cf0
[ 100.885466][ T5326] ? __pfx_bpf_check+0x10/0x10
[ 100.888543][ T5326] ? irqentry_exit+0x59e/0x620
[ 100.891599][ T5326] ? lockdep_hardirqs_on+0x7a/0x110
[ 100.894521][ T5326] ? irqentry_exit+0x59e/0x620
[ 100.897126][ T5326] ? trace_irq_disable+0x3b/0x150
[ 100.899757][ T5326] ? security_bpf_prog_load+0x55/0x3c0
[ 100.902455][ T5326] ? bpf_lsm_bpf_prog_load+0x9/0x20
[ 100.905222][ T5326] ? security_bpf_prog_load+0x125/0x3c0
[ 100.909231][ T5326] bpf_prog_load+0x1484/0x1ae0
[ 100.912356][ T5326] ? __pfx_bpf_prog_load+0x10/0x10
[ 100.915141][ T5326] ? futex_wake+0x4ac/0x580
[ 100.917808][ T5326] ? bpf_lsm_bpf+0x9/0x20
[ 100.920110][ T5326] ? security_bpf+0x7e/0x2d0
[ 100.922398][ T5326] __sys_bpf+0x618/0x950
[ 100.925319][ T5326] ? __pfx___sys_bpf+0x10/0x10
[ 100.929187][ T5326] ? rcu_is_watching+0x15/0xb0
[ 100.931606][ T5326] __x64_sys_bpf+0x7c/0x90
[ 100.933874][ T5326] do_syscall_64+0x14d/0xf80
[ 100.936207][ T5326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 100.939624][ T5326] ? clear_bhb_loop+0x40/0x90
[ 100.942695][ T5326] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 100.945816][ T5326] RIP: 0033:0x7f3ef7b9c799
[ 100.950167][ T5326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 100.959229][ T5326] RSP: 002b:00007f3ef89f0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 100.964317][ T5326] RAX: ffffffffffffffda RBX: 00007f3ef7e15fa0 RCX: 00007f3ef7b9c799
[ 100.968435][ T5326] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005
[ 100.972358][ T5326] RBP: 00007f3ef7c32c99 R08: 0000000000000000 R09: 0000000000000000
[ 100.976696][ T5326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 100.980610][ T5326] R13: 00007f3ef7e16038 R14: 00007f3ef7e15fa0 R15: 00007fff83057cc8
[ 100.985026][ T5326]
[ 100.987099][ T5326] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 100.991203][ T5326] CPU: 0 UID: 0 PID: 5326 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 100.995201][ T5326] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 100.999616][ T5326] Call Trace:
[ 101.001251][ T5326]
[ 101.002908][ T5326] vpanic+0x56c/0xa60
[ 101.004968][ T5326] ? __pfx__printk+0x10/0x10
[ 101.007470][ T5326] ? __pfx_vpanic+0x10/0x10
[ 101.009985][ T5326] ? is_bpf_text_address+0x292/0x2b0
[ 101.012936][ T5326] ? is_bpf_text_address+0x26/0x2b0
[ 101.015684][ T5326] panic+0xc5/0xd0
[ 101.017604][ T5326] ? __pfx_panic+0x10/0x10
[ 101.019664][ T5326] __warn+0x315/0x4f0
[ 101.021518][ T5326] ? reg_bounds_sanity_check+0x201/0xc30
[ 101.024636][ T5326] ? reg_bounds_sanity_check+0x201/0xc30
[ 101.027862][ T5326] __report_bug+0x29a/0x540
[ 101.030520][ T5326] ? reg_bounds_sanity_check+0x201/0xc30
[ 101.033439][ T5326] ? __pfx___report_bug+0x10/0x10
[ 101.035784][ T5326] ? reg_bounds_sanity_check+0x3eb/0xc30
[ 101.038327][ T5326] ? reg_bounds_sanity_check+0x3e6/0xc30
[ 101.041173][ T5326] ? pt_regs_val+0xc/0x70
[ 101.043480][ T5326] report_bug_entry+0x19a/0x290
[ 101.045731][ T5326] ? reg_bounds_sanity_check+0x3e6/0xc30
[ 101.048220][ T5326] ? reg_bounds_sanity_check+0x3eb/0xc30
[ 101.050659][ T5326] handle_bug+0xce/0x200
[ 101.052684][ T5326] exc_invalid_op+0x1a/0x50
[ 101.054795][ T5326] asm_exc_invalid_op+0x1a/0x20
[ 101.057534][ T5326] RIP: 0010:reg_bounds_sanity_check+0x3e6/0xc30
[ 101.060969][ T5326] Code: 98 00 00 00 4c 8b 8c 24 88 00 00 00 41 ff 34 24 41 57 55 41 55 ff b4 24 f0 00 00 00 ff b4 24 a8 00 00 00 ff b4 24 c0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 49 bf 00 00 00 00 00 fc ff df 48 8b 84
[ 101.070278][ T5326] RSP: 0018:ffffc9000d91eeb0 EFLAGS: 00010246
[ 101.073702][ T5326] RAX: dffffc0000000000 RBX: 1ffff1100835104a RCX: 00000000ffffdfcd
[ 101.077346][ T5326] RDX: ffffffff8bd472c0 RSI: ffffffff8bd4fbe0 RDI: ffffffff9015c490
[ 101.080967][ T5326] RBP: 00000000ffffdfcc R08: ffffffffffffdfcc R09: 80000000ffffdfcd
[ 101.084674][ T5326] R10: ffff888041a88358 R11: 1ffff11008351050 R12: ffff888041a88250
[ 101.089169][ T5326] R13: 00000000ffffdfcd R14: 1ffff11008351049 R15: 00000000ffffdfcc
[ 101.093356][ T5326] reg_set_min_max+0x264/0x340
[ 101.095503][ T5326] check_cond_jmp_op+0x1dbb/0x31a0
[ 101.098100][ T5326] ? __pfx_check_cond_jmp_op+0x10/0x10
[ 101.101144][ T5326] ? compute_scc_callchain+0x2f9/0x350
[ 101.104569][ T5326] ? bpf_reset_stack_write_marks+0x1eb/0x260
[ 101.107594][ T5326] do_check+0x7970/0x10690
[ 101.109820][ T5326] ? __pfx_do_check+0x10/0x10
[ 101.112144][ T5326] ? init_func_state+0x1ab2/0x28d0
[ 101.115100][ T5326] do_check_common+0x19c8/0x25b0
[ 101.118438][ T5326] bpf_check+0x5f3e/0x1ce00
[ 101.121046][ T5326] ? __lock_acquire+0x6b5/0x2cf0
[ 101.123549][ T5326] ? __lock_acquire+0x6b5/0x2cf0
[ 101.125891][ T5326] ? lockdep_hardirqs_on+0x7a/0x110
[ 101.128253][ T5326] ? __pfx___mutex_trylock_common+0x10/0x10
[ 101.131191][ T5326] ? __lock_acquire+0x6b5/0x2cf0
[ 101.134098][ T5326] ? css_rstat_updated+0x23a/0x530
[ 101.137015][ T5326] ? __pfx_css_rstat_updated+0x10/0x10
[ 101.139485][ T5326] ? irqentry_exit+0x59e/0x620
[ 101.141574][ T5326] ? lockdep_hardirqs_on+0x7a/0x110
[ 101.143826][ T5326] ? __lock_acquire+0x6b5/0x2cf0
[ 101.145938][ T5326] ? __pfx_bpf_check+0x10/0x10
[ 101.148194][ T5326] ? irqentry_exit+0x59e/0x620
[ 101.151256][ T5326] ? lockdep_hardirqs_on+0x7a/0x110
[ 101.154545][ T5326] ? irqentry_exit+0x59e/0x620
[ 101.157098][ T5326] ? trace_irq_disable+0x3b/0x150
[ 101.159454][ T5326] ? security_bpf_prog_load+0x55/0x3c0
[ 101.161848][ T5326] ? bpf_lsm_bpf_prog_load+0x9/0x20
[ 101.164390][ T5326] ? security_bpf_prog_load+0x125/0x3c0
[ 101.167171][ T5326] bpf_prog_load+0x1484/0x1ae0
[ 101.169938][ T5326] ? __pfx_bpf_prog_load+0x10/0x10
[ 101.172471][ T5326] ? futex_wake+0x4ac/0x580
[ 101.174606][ T5326] ? bpf_lsm_bpf+0x9/0x20
[ 101.176487][ T5326] ? security_bpf+0x7e/0x2d0
[ 101.178594][ T5326] __sys_bpf+0x618/0x950
[ 101.180905][ T5326] ? __pfx___sys_bpf+0x10/0x10
[ 101.183550][ T5326] ? rcu_is_watching+0x15/0xb0
[ 101.186075][ T5326] __x64_sys_bpf+0x7c/0x90
[ 101.188114][ T5326] do_syscall_64+0x14d/0xf80
[ 101.190235][ T5326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 101.192951][ T5326] ? clear_bhb_loop+0x40/0x90
[ 101.195510][ T5326] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 101.198718][ T5326] RIP: 0033:0x7f3ef7b9c799
[ 101.201290][ T5326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 101.211073][ T5326] RSP: 002b:00007f3ef89f0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 101.214937][ T5326] RAX: ffffffffffffffda RBX: 00007f3ef7e15fa0 RCX: 00007f3ef7b9c799
[ 101.219004][ T5326] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005
[ 101.223082][ T5326] RBP: 00007f3ef7c32c99 R08: 0000000000000000 R09: 0000000000000000
[ 101.226827][ T5326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 101.230309][ T5326] R13: 00007f3ef7e16038 R14: 00007f3ef7e15fa0 R15: 00007fff83057cc8
[ 101.233999][ T5326]
[ 101.236085][ T5326] Kernel Offset: disabled
[ 101.238508][ T5326] Rebooting in 86400 seconds..