program: syz_usb_connect(0x2, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xffff0000}, 0xffffffffffffffd2}, 0x48) [ 92.459851][ T786] cfg80211: failed to load regulatory.db [ 92.471823][ T4675] Bluetooth: hci0: command tx timeout [ 92.669003][ T5332] ------------[ cut here ]------------ [ 92.671745][ T5332] verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0x4000000, 0x0] s64=[0x4000000, 0x0] u32=[0x4000000, 0x0] s32=[0x4000000, 0x0] var_off=(0x0, 0x0) [ 92.680708][ T5332] WARNING: kernel/bpf/verifier.c:2748 at 0x0, CPU#0: syz.0.0/5332 [ 92.684795][ T5332] Modules linked in: [ 92.686886][ T5332] CPU: 0 UID: 0 PID: 5332 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 92.690966][ T5332] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 92.696120][ T5332] RIP: 0010:reg_bounds_sanity_check+0x3e6/0xc30 [ 92.699281][ T5332] Code: 98 00 00 00 4c 8b 8c 24 88 00 00 00 41 ff 34 24 41 57 55 41 55 ff b4 24 f0 00 00 00 ff b4 24 a8 00 00 00 ff b4 24 c0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 49 bf 00 00 00 00 00 fc ff df 48 8b 84 [ 92.708992][ T5332] RSP: 0018:ffffc9000d1beed0 EFLAGS: 00010246 [ 92.712391][ T5332] RAX: dffffc0000000000 RBX: 1ffff11007144c58 RCX: 0000000004000000 [ 92.716802][ T5332] RDX: ffffffff8b91cda0 RSI: ffffffff8b925560 RDI: ffffffff8fa60d70 [ 92.720597][ T5332] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000004000000 [ 92.724636][ T5332] R10: 00000000000000d0 R11: 0000000000000002 R12: ffff888038a262c0 [ 92.728743][ T5332] R13: 0000000004000000 R14: 1ffff11007144c57 R15: 0000000000000000 [ 92.732459][ T5332] FS: 00007f506999e6c0(0000) GS:ffff88808d22f000(0000) knlGS:0000000000000000 [ 92.737723][ T5332] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 92.741315][ T5332] CR2: 00007fd46dcc7ac8 CR3: 0000000011528000 CR4: 0000000000352ef0 [ 92.745097][ T5332] Call Trace: [ 92.747004][ T5332] [ 92.748539][ T5332] reg_set_min_max+0x2b4/0x340 [ 92.750859][ T5332] check_cond_jmp_op+0x19c6/0x2e20 [ 92.753824][ T5332] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 92.757846][ T5332] ? bpf_reset_stack_write_marks+0x1eb/0x260 [ 92.761413][ T5332] do_check+0x58f5/0xeba0 [ 92.763496][ T5332] ? __pfx_do_check+0x10/0x10 [ 92.766565][ T5332] ? init_func_state+0x1ab2/0x28d0 [ 92.769134][ T5332] do_check_common+0x19cc/0x25b0 [ 92.771722][ T5332] bpf_check+0x5e7a/0x1c300 [ 92.774083][ T5332] ? __lock_acquire+0x6b6/0x2cf0 [ 92.777416][ T5332] ? __lock_acquire+0x6b6/0x2cf0 [ 92.780163][ T5332] ? __lock_acquire+0x6b6/0x2cf0 [ 92.782560][ T5332] ? __lock_acquire+0x6b6/0x2cf0 [ 92.784917][ T5332] ? css_rstat_updated+0x23a/0x4f0 [ 92.787234][ T5332] ? __lock_acquire+0x6b6/0x2cf0 [ 92.789449][ T5332] ? __pfx_bpf_check+0x10/0x10 [ 92.792142][ T5332] ? seqcount_lockdep_reader_access+0x122/0x1c0 [ 92.795388][ T5332] ? lockdep_hardirqs_on+0x98/0x140 [ 92.797694][ T5332] ? ktime_get_with_offset+0x93/0x2a0 [ 92.800791][ T5332] ? seqcount_lockdep_reader_access+0x174/0x1c0 [ 92.804414][ T5332] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 92.807530][ T5332] ? __asan_memset+0x22/0x50 [ 92.809769][ T5332] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 92.812273][ T5332] ? security_bpf_prog_load+0x125/0x3f0 [ 92.815135][ T5332] bpf_prog_load+0x13ba/0x1a10 [ 92.818015][ T5332] ? __pfx_bpf_prog_load+0x10/0x10 [ 92.821124][ T5332] ? bpf_lsm_bpf+0x9/0x20 [ 92.823309][ T5332] ? security_bpf+0x7e/0x300 [ 92.825245][ T5332] __sys_bpf+0x507/0x860 [ 92.827413][ T5332] ? __pfx___sys_bpf+0x10/0x10 [ 92.829699][ T5332] ? rcu_is_watching+0x15/0xb0 [ 92.832125][ T5332] __x64_sys_bpf+0x7c/0x90 [ 92.834321][ T5332] do_syscall_64+0xfa/0xf80 [ 92.837881][ T5332] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.842771][ T5332] ? clear_bhb_loop+0x60/0xb0 [ 92.845432][ T5332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.848047][ T5332] RIP: 0033:0x7f5068b8f7c9 [ 92.849990][ T5332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.858419][ T5332] RSP: 002b:00007f506999e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 92.861945][ T5332] RAX: ffffffffffffffda RBX: 00007f5068de5fa0 RCX: 00007f5068b8f7c9 [ 92.866431][ T5332] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 92.870933][ T5332] RBP: 00007f5068c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 92.874395][ T5332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.878463][ T5332] R13: 00007f5068de6038 R14: 00007f5068de5fa0 R15: 00007ffe49a2e858 [ 92.882375][ T5332] [ 92.883974][ T5332] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 92.887707][ T5332] CPU: 0 UID: 0 PID: 5332 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 92.892874][ T5332] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 92.897715][ T5332] Call Trace: [ 92.899353][ T5332] [ 92.900963][ T5332] dump_stack_lvl+0x99/0x250 [ 92.903367][ T5332] ? __asan_memcpy+0x40/0x70 [ 92.905900][ T5332] ? __pfx_dump_stack_lvl+0x10/0x10 [ 92.908579][ T5332] ? __pfx__printk+0x10/0x10 [ 92.911019][ T5332] vpanic+0x237/0x6d0 [ 92.913049][ T5332] ? __pfx_vpanic+0x10/0x10 [ 92.915177][ T5332] ? is_bpf_text_address+0x292/0x2b0 [ 92.917808][ T5332] ? is_bpf_text_address+0x26/0x2b0 [ 92.920476][ T5332] panic+0xb9/0xc0 [ 92.922549][ T5332] ? __pfx_panic+0x10/0x10 [ 92.924948][ T5332] __warn+0x317/0x4b0 [ 92.927296][ T5332] __report_bug+0x288/0x500 [ 92.929482][ T5332] ? __pfx___report_bug+0x10/0x10 [ 92.931844][ T5332] ? check_cond_jmp_op+0x1840/0x2e20 [ 92.934281][ T5332] ? do_check+0x58f5/0xeba0 [ 92.936378][ T5332] ? do_check_common+0x19cc/0x25b0 [ 92.939140][ T5332] ? bpf_check+0x5e7a/0x1c300 [ 92.941254][ T5332] ? bpf_prog_load+0x13ba/0x1a10 [ 92.943588][ T5332] ? __sys_bpf+0x507/0x860 [ 92.945847][ T5332] ? __x64_sys_bpf+0x7c/0x90 [ 92.948269][ T5332] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.951204][ T5332] report_bug_entry+0x16a/0x220 [ 92.953651][ T5332] ? reg_bounds_sanity_check+0x3e6/0xc30 [ 92.956741][ T5332] ? reg_bounds_sanity_check+0x3eb/0xc30 [ 92.960013][ T5332] handle_bug+0xca/0x200 [ 92.962266][ T5332] exc_invalid_op+0x1a/0x50 [ 92.964916][ T5332] asm_exc_invalid_op+0x1a/0x20 [ 92.967585][ T5332] RIP: 0010:reg_bounds_sanity_check+0x3e6/0xc30 [ 92.970566][ T5332] Code: 98 00 00 00 4c 8b 8c 24 88 00 00 00 41 ff 34 24 41 57 55 41 55 ff b4 24 f0 00 00 00 ff b4 24 a8 00 00 00 ff b4 24 c0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 49 bf 00 00 00 00 00 fc ff df 48 8b 84 [ 92.980114][ T5332] RSP: 0018:ffffc9000d1beed0 EFLAGS: 00010246 [ 92.983794][ T5332] RAX: dffffc0000000000 RBX: 1ffff11007144c58 RCX: 0000000004000000 [ 92.988225][ T5332] RDX: ffffffff8b91cda0 RSI: ffffffff8b925560 RDI: ffffffff8fa60d70 [ 92.991657][ T5332] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000004000000 [ 92.995279][ T5332] R10: 00000000000000d0 R11: 0000000000000002 R12: ffff888038a262c0 [ 93.002744][ T5332] R13: 0000000004000000 R14: 1ffff11007144c57 R15: 0000000000000000 [ 93.006949][ T5332] reg_set_min_max+0x2b4/0x340 [ 93.009477][ T5332] check_cond_jmp_op+0x19c6/0x2e20 [ 93.012303][ T5332] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 93.015084][ T5332] ? bpf_reset_stack_write_marks+0x1eb/0x260 [ 93.017895][ T5332] do_check+0x58f5/0xeba0 [ 93.020121][ T5332] ? __pfx_do_check+0x10/0x10 [ 93.022593][ T5332] ? init_func_state+0x1ab2/0x28d0 [ 93.025220][ T5332] do_check_common+0x19cc/0x25b0 [ 93.027855][ T5332] bpf_check+0x5e7a/0x1c300 [ 93.029936][ T5332] ? __lock_acquire+0x6b6/0x2cf0 [ 93.032211][ T5332] ? __lock_acquire+0x6b6/0x2cf0 [ 93.034428][ T5332] ? __lock_acquire+0x6b6/0x2cf0 [ 93.036639][ T5332] ? __lock_acquire+0x6b6/0x2cf0 [ 93.038875][ T5332] ? css_rstat_updated+0x23a/0x4f0 [ 93.041282][ T5332] ? __lock_acquire+0x6b6/0x2cf0 [ 93.043706][ T5332] ? __pfx_bpf_check+0x10/0x10 [ 93.046011][ T5332] ? seqcount_lockdep_reader_access+0x122/0x1c0 [ 93.049229][ T5332] ? lockdep_hardirqs_on+0x98/0x140 [ 93.051586][ T5332] ? ktime_get_with_offset+0x93/0x2a0 [ 93.053920][ T5332] ? seqcount_lockdep_reader_access+0x174/0x1c0 [ 93.057047][ T5332] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 93.060294][ T5332] ? __asan_memset+0x22/0x50 [ 93.062594][ T5332] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 93.064988][ T5332] ? security_bpf_prog_load+0x125/0x3f0 [ 93.067454][ T5332] bpf_prog_load+0x13ba/0x1a10 [ 93.069664][ T5332] ? __pfx_bpf_prog_load+0x10/0x10 [ 93.072493][ T5332] ? bpf_lsm_bpf+0x9/0x20 [ 93.074610][ T5332] ? security_bpf+0x7e/0x300 [ 93.076701][ T5332] __sys_bpf+0x507/0x860 [ 93.078654][ T5332] ? __pfx___sys_bpf+0x10/0x10 [ 93.081214][ T5332] ? rcu_is_watching+0x15/0xb0 [ 93.083671][ T5332] __x64_sys_bpf+0x7c/0x90 [ 93.086084][ T5332] do_syscall_64+0xfa/0xf80 [ 93.088567][ T5332] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.091517][ T5332] ? clear_bhb_loop+0x60/0xb0 [ 93.093673][ T5332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.096354][ T5332] RIP: 0033:0x7f5068b8f7c9 [ 93.098315][ T5332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.108804][ T5332] RSP: 002b:00007f506999e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 93.112891][ T5332] RAX: ffffffffffffffda RBX: 00007f5068de5fa0 RCX: 00007f5068b8f7c9 [ 93.117346][ T5332] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 93.121768][ T5332] RBP: 00007f5068c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 93.125991][ T5332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.129973][ T5332] R13: 00007f5068de6038 R14: 00007f5068de5fa0 R15: 00007ffe49a2e858 [ 93.133917][ T5332] [ 93.135636][ T5332] Kernel Offset: disabled [ 93.137565][ T5332] Rebooting in 86400 seconds..