------------[ cut here ]------------ WARNING: kernel/bpf/verifier.c:2742 at reg_bounds_sanity_check+0x3c0/0x428 kernel/bpf/verifier.c:2742, CPU#1: syz.0.1469/9452 verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0xfffffffefffff630, 0xffffffff00000000] s64=[0xfffffffefffff630, 0xffffffff00000000] u32=[0x30, 0x8000050] s32=[0x30, 0x0] var_off=(0xfffffffe00000030, 0x10fffffc0) Modules linked in: Kernel panic - not syncing: kernel: panic_on_warn set ... CPU: 1 UID: 0 PID: 9452 Comm: syz.0.1469 Tainted: G L syzkaller #0 PREEMPT Tainted: [L]=SOFTLOCKUP Hardware name: ARM-Versatile Express Call trace: [<80201a40>] (dump_backtrace) from [<80201b34>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:257) r7:82290758 r6:00000000 r5:822a20bc r4:00000001 [<80201b1c>] (show_stack) from [<8021ed6c>] (__dump_stack lib/dump_stack.c:94 [inline]) [<80201b1c>] (show_stack) from [<8021ed6c>] (dump_stack_lvl+0x5c/0x70 lib/dump_stack.c:120) [<8021ed10>] (dump_stack_lvl) from [<8021ed98>] (dump_stack+0x18/0x1c lib/dump_stack.c:129) r7:82290758 r6:83ec6000 r5:00000000 r4:82a7cd14 [<8021ed80>] (dump_stack) from [<802025c4>] (vpanic+0xe0/0x2e4 kernel/panic.c:490) [<802024e4>] (vpanic) from [<802027fc>] (trace_suspend_resume+0x0/0xd8 kernel/panic.c:627) r7:803dc648 [<802027c8>] (panic) from [<80251f68>] (check_panic_on_warn kernel/panic.c:377 [inline]) [<802027c8>] (panic) from [<80251f68>] (get_taint+0x0/0x1c kernel/panic.c:372) r3:8280c504 r2:00000001 r1:82288f44 r0:82290758 [<80251ef0>] (check_panic_on_warn) from [<802520e0>] (__warn+0x94/0x1a0 kernel/panic.c:902) [<8025204c>] (__warn) from [<802523d4>] (warn_slowpath_fmt+0x1e8/0x1f4 kernel/panic.c:937) r8:00000009 r7:822a8958 r6:dfbe18bc r5:83ec6000 r4:00000000 [<802521f0>] (warn_slowpath_fmt) from [<803dc648>] (reg_bounds_sanity_check+0x3c0/0x428 kernel/bpf/verifier.c:2742) r10:86160000 r9:fffff630 r8:fffffffe r7:00000030 r6:00000000 r5:822a90bc r4:8502d950 [<803dc288>] (reg_bounds_sanity_check) from [<803e9098>] (reg_set_min_max kernel/bpf/verifier.c:16577 [inline]) [<803dc288>] (reg_bounds_sanity_check) from [<803e9098>] (reg_set_min_max+0x230/0x288 kernel/bpf/verifier.c:16542) r10:00000001 r9:00000020 r8:86160000 r7:8502d800 r6:85a74000 r5:85a74150 r4:8502d950 [<803e8e68>] (reg_set_min_max) from [<803f91c8>] (check_cond_jmp_op+0xc64/0x1968 kernel/bpf/verifier.c:17010) r10:85a74000 r9:00000020 r8:85b6fa00 r7:ffffffff r6:fffff630 r5:85bade40 r4:dfbdd078 r3:8502d950 [<803f8564>] (check_cond_jmp_op) from [<803ff450>] (do_check_insn kernel/bpf/verifier.c:20446 [inline]) [<803f8564>] (check_cond_jmp_op) from [<803ff450>] (do_check kernel/bpf/verifier.c:20586 [inline]) [<803f8564>] (check_cond_jmp_op) from [<803ff450>] (do_check_common+0x2160/0x31c4 kernel/bpf/verifier.c:23870) r10:86160000 r9:00000000 r8:85b6fa00 r7:86166000 r6:dfbdd078 r5:dfbdd030 r4:dfbdd000 [<803fd2f0>] (do_check_common) from [<80403890>] (do_check_main kernel/bpf/verifier.c:23953 [inline]) [<803fd2f0>] (do_check_common) from [<80403890>] (bpf_check+0x275c/0x2d2c kernel/bpf/verifier.c:25260) r10:86166000 r9:00000001 r8:86160000 r7:00000a7b r6:861608bc r5:fffffff0 r4:0000000e [<80401134>] (bpf_check) from [<803d59d8>] (bpf_prog_load+0x5b0/0xdd8 kernel/bpf/syscall.c:3088) r10:dfbe1d58 r9:83ec6000 r8:85a10730 r7:dfbe1d18 r6:00000000 r5:00000000 r4:dfbe1eb0 [<803d5428>] (bpf_prog_load) from [<803d71d4>] (__sys_bpf+0x334/0x2118 kernel/bpf/syscall.c:6164) r10:00000005 r9:00000000 r8:dfbe1e50 r7:00000048 r6:83ec6000 r5:200017c0 r4:00000000 [<803d6ea0>] (__sys_bpf) from [<803d954c>] (__do_sys_bpf kernel/bpf/syscall.c:6274 [inline]) [<803d6ea0>] (__sys_bpf) from [<803d954c>] (sys_bpf+0x2c/0x48 kernel/bpf/syscall.c:6272) r10:00000182 r9:83ec6000 r8:8020029c r7:00000182 r6:00346310 r5:00000000 r4:00000000 [<803d9520>] (sys_bpf) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:67) Exception stack(0xdfbe1fa8 to 0xdfbe1ff0) 1fa0: 00000000 00000000 00000005 200017c0 00000048 00000000 1fc0: 00000000 00000000 00346310 00000182 003462d8 00000000 00000001 76f3e0dc 1fe0: 76f3de88 76f3de78 00018734 0012fc20 Rebooting in 86400 seconds..