------------[ cut here ]------------
WARNING: CPU: 0 PID: 5013 at kernel/bpf/verifier.c:2722 reg_bounds_sanity_check+0x390/0x45c kernel/bpf/verifier.c:2722
verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0x23fbc38, 0x8003ff838] s64=[0x23fbc38, 0x8003ff838] u32=[0x1481b3f, 0x1481b07] s32=[0x1481b3f, 0x1481b07] var_off=(0x1481b3f, 0xf00000000)(1)
Modules linked in:
Kernel panic - not syncing: kernel: panic_on_warn set ...
CPU: 0 UID: 0 PID: 5013 Comm: syz.1.283 Not tainted syzkaller #0 PREEMPT 
Hardware name: ARM-Versatile Express
Call trace: 
[<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:257)
 r7:00000000 r6:8281f77c r5:00000000 r4:82260878
[<80201b08>] (show_stack) from [<8021fbe4>] (__dump_stack lib/dump_stack.c:94 [inline])
[<80201b08>] (show_stack) from [<8021fbe4>] (dump_stack_lvl+0x54/0x7c lib/dump_stack.c:120)
[<8021fb90>] (dump_stack_lvl) from [<8021fc24>] (dump_stack+0x18/0x1c lib/dump_stack.c:129)
 r5:00000000 r4:82a77d18
[<8021fc0c>] (dump_stack) from [<80202624>] (vpanic+0x10c/0x30c kernel/panic.c:430)
[<80202518>] (vpanic) from [<80202858>] (trace_suspend_resume+0x0/0xd8 kernel/panic.c:566)
 r7:803d4454
[<80202824>] (panic) from [<80254960>] (check_panic_on_warn kernel/panic.c:323 [inline])
[<80202824>] (panic) from [<80254960>] (get_taint+0x0/0x1c kernel/panic.c:318)
 r3:8280c684 r2:00000001 r1:82247294 r0:8224ed10
[<802548e8>] (check_panic_on_warn) from [<80254ac4>] (__warn+0x80/0x188 kernel/panic.c:837)
[<80254a44>] (__warn) from [<80254db4>] (warn_slowpath_fmt+0x1e8/0x1f4 kernel/panic.c:872)
 r8:00000009 r7:82267178 r6:df985984 r5:84fda400 r4:00000000
[<80254bd0>] (warn_slowpath_fmt) from [<803d4454>] (reg_bounds_sanity_check+0x390/0x45c kernel/bpf/verifier.c:2722)
 r10:849e8000 r9:023fbc38 r8:00000000 r7:01481b3f r6:003ff838 r5:82267ad4
 r4:85a84800
[<803d40c4>] (reg_bounds_sanity_check) from [<803e2920>] (reg_set_min_max kernel/bpf/verifier.c:16334 [inline])
[<803d40c4>] (reg_bounds_sanity_check) from [<803e2920>] (reg_set_min_max+0x1b0/0x26c kernel/bpf/verifier.c:16308)
 r10:00000001 r9:849edc18 r8:00000010 r7:849e8000 r6:849edba0 r5:85a84800
 r4:85a86800
[<803e2770>] (reg_set_min_max) from [<803eca40>] (check_cond_jmp_op+0x560/0x1718 kernel/bpf/verifier.c:16779)
 r10:849edba0 r9:85a84800 r8:00000010 r7:85b6ad80 r6:85b6a600 r5:849e8000
 r4:df969048 r3:85a86800
[<803ec4e0>] (check_cond_jmp_op) from [<803f6eb8>] (do_check_insn kernel/bpf/verifier.c:19956 [inline])
[<803ec4e0>] (check_cond_jmp_op) from [<803f6eb8>] (do_check kernel/bpf/verifier.c:20093 [inline])
[<803ec4e0>] (check_cond_jmp_op) from [<803f6eb8>] (do_check_common+0x2008/0x311c kernel/bpf/verifier.c:23260)
 r10:00000009 r9:849ed000 r8:df969018 r7:00000003 r6:df969000 r5:85b650c0
 r4:849e8000
[<803f4eb0>] (do_check_common) from [<803fb788>] (do_check_main kernel/bpf/verifier.c:23343 [inline])
[<803f4eb0>] (do_check_common) from [<803fb788>] (bpf_check+0x28c8/0x3038 kernel/bpf/verifier.c:24703)
 r10:00000000 r9:849e87b8 r8:849e8000 r7:00000001 r6:849ed000 r5:00000016
 r4:00000a7b
[<803f8ec0>] (bpf_check) from [<803cdc34>] (bpf_prog_load+0x68c/0xc20 kernel/bpf/syscall.c:2979)
 r10:84fda400 r9:85987730 r8:00000048 r7:df985d90 r6:00000000 r5:00000000
 r4:df985ec0
[<803cd5a8>] (bpf_prog_load) from [<803cf270>] (__sys_bpf+0x42c/0x20f0 kernel/bpf/syscall.c:6029)
 r10:b5403587 r9:200054c0 r8:00000000 r7:00000000 r6:00000005 r5:df985e90
 r4:00000048
[<803cee44>] (__sys_bpf) from [<803d14d4>] (__do_sys_bpf kernel/bpf/syscall.c:6139 [inline])
[<803cee44>] (__sys_bpf) from [<803d14d4>] (sys_bpf+0x2c/0x48 kernel/bpf/syscall.c:6137)
 r10:00000182 r9:84fda400 r8:8020029c r7:00000182 r6:002f6448 r5:00000000
 r4:00000000
[<803d14a8>] (sys_bpf) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:67)
Exception stack(0xdf985fa8 to 0xdf985ff0)
5fa0:                   00000000 00000000 00000005 200054c0 00000048 00000000
5fc0: 00000000 00000000 002f6448 00000182 002e0000 00000000 00006364 76f240bc
5fe0: 76f23ec0 76f23eb0 0001946c 00132280
Rebooting in 86400 seconds..