------------[ cut here ------------[ cut here ]------------ WARNING: CPU: 0 PID: 25338 at kernel/bpf/verifier.c:2715 reg_bounds_sanity_check+0x390/0x45c kernel/bpf/verifier.c:2715 verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0xffffdfcd, 0xffffffffffffdfcc] s64=[0x80000000ffffdfcd, 0x7fffffffffffdfcc] u32=[0xffffdfcd, 0xffffdfcc] s32=[0xffffdfcd, 0xffffdfcc] var_off=(0xffffdfcc, 0xffffffff00000000) Modules linked in: Kernel panic - not syncing: kernel: panic_on_warn set ... CPU: 0 UID: 0 PID: 25338 Comm: syz.3.4609 Not tainted syzkaller #0 PREEMPT Hardware name: ARM-Versatile Express Call trace: [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:257) r7:82240780 r6:8398b000 r5:00000000 r4:82252488 [<80201b08>] (show_stack) from [<8021f920>] (__dump_stack lib/dump_stack.c:94 [inline]) [<80201b08>] (show_stack) from [<8021f920>] (dump_stack_lvl+0x54/0x7c lib/dump_stack.c:120) [<8021f8cc>] (dump_stack_lvl) from [<8021f960>] (dump_stack+0x18/0x1c lib/dump_stack.c:129) r5:00000000 r4:82a78d18 [<8021f948>] (dump_stack) from [<802025f8>] (vpanic+0xe0/0x2e8 kernel/panic.c:489) [<80202518>] (vpanic) from [<80202834>] (trace_suspend_resume+0x0/0xd8 kernel/panic.c:626) r7:803d7b9c [<80202800>] (panic) from [<80252948>] (check_panic_on_warn kernel/panic.c:376 [inline]) [<80202800>] (panic) from [<80252948>] (get_taint+0x0/0x1c kernel/panic.c:371) r3:8280c684 r2:00000001 r1:82238ce4 r0:82240780 [<802528d0>] (check_panic_on_warn) from [<80252aac>] (__warn+0x80/0x188 kernel/panic.c:897) [<80252a2c>] (__warn) from [<80252d9c>] (warn_slowpath_fmt+0x1e8/0x1f4 kernel/panic.c:932) r8:00000009 r7:82258de4 r6:dffbd91c r5:8398b000 r4:00000000 [<80252bb8>] (warn_slowpath_fmt) from [<803d7b9c>] (reg_bounds_sanity_check+0x390/0x45c kernel/bpf/verifier.c:2715) r10:867c8000 r9:ffffdfcd r8:80000000 r7:ffffdfcd r6:ffffdfcc r5:82259608 r4:84995a30 [<803d780c>] (reg_bounds_sanity_check) from [<803e279c>] (reg_set_min_max kernel/bpf/verifier.c:16407 [inline]) [<803d780c>] (reg_bounds_sanity_check) from [<803e279c>] (reg_set_min_max+0x1b0/0x26c kernel/bpf/verifier.c:16381) r10:00000001 r9:8639fb10 r8:00000010 r7:867c8000 r6:84995b10 r5:84995a30 r4:8639fa30 [<803e25ec>] (reg_set_min_max) from [<803f3fdc>] (check_cond_jmp_op+0x85c/0x1860 kernel/bpf/verifier.c:16841) r10:8639fb10 r9:84995800 r8:ffffdfcd r7:860e0f80 r6:8414d600 r5:867c8000 r4:df9bc0c0 r3:8639fa30 [<803f3780>] (check_cond_jmp_op) from [<803fb31c>] (do_check_insn kernel/bpf/verifier.c:19929 [inline]) [<803f3780>] (check_cond_jmp_op) from [<803fb31c>] (do_check kernel/bpf/verifier.c:20069 [inline]) [<803f3780>] (check_cond_jmp_op) from [<803fb31c>] (do_check_common+0x2010/0x30f4 kernel/bpf/verifier.c:23259) r10:00000018 r9:860e0f80 r8:867cd000 r7:00000003 r6:867c8000 r5:df9bc078 r4:df9bc000 [<803f930c>] (do_check_common) from [<803ffb48>] (do_check_main kernel/bpf/verifier.c:23342 [inline]) [<803f930c>] (do_check_common) from [<803ffb48>] (bpf_check+0x29f8/0x2f50 kernel/bpf/verifier.c:24647) r10:00000000 r9:867c8000 r8:867cd000 r7:00000a7b r6:867c87bc r5:00000001 r4:00000016 [<803fd150>] (bpf_check) from [<803d1318>] (bpf_prog_load+0x650/0xd74 kernel/bpf/syscall.c:3077) r10:dffbdd90 r9:8398b000 r8:86956330 r7:dffbdd50 r6:00000000 r5:00000000 r4:dffbdeb0 [<803d0cc8>] (bpf_prog_load) from [<803d3170>] (__sys_bpf+0xab8/0x2240 kernel/bpf/syscall.c:6149) r10:200054c0 r9:8398b000 r8:dffbdea8 r7:00000000 r6:00000005 r5:dffbde80 r4:00000048 [<803d26b8>] (__sys_bpf) from [<803d4e98>] (__do_sys_bpf kernel/bpf/syscall.c:6259 [inline]) [<803d26b8>] (__sys_bpf) from [<803d4e98>] (sys_bpf+0x2c/0x48 kernel/bpf/syscall.c:6257) r10:00000182 r9:8398b000 r8:8020029c r7:00000182 r6:00316308 r5:00000000 r4:00000000 [<803d4e6c>] (sys_bpf) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:67) Exception stack(0xdffbdfa8 to 0xdffbdff0) dfa0: 00000000 00000000 00000005 200054c0 00000048 00000000 dfc0: 00000000 00000000 00316308 00000182 00300000 00000000 00006364 76fd40bc dfe0: 76fd3ec0 76fd3eb0 000195a4 00132510 Rebooting in 86400 seconds..