program: prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) [ 116.827093][ T4666] Bluetooth: hci0: command tx timeout [ 116.990822][ T5333] ------------[ cut here ]------------ [ 116.993598][ T5333] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0xffffdfcd, 0xffffffffffffdfcc] s64=[0x80000000ffffdfcd, 0x7fffffffffffdfcc] u32=[0xffffdfcd, 0xffffdfcc] s32=[0xffffdfcd, 0xffffdfcc] var_off=(0xffffdfcc, 0xffffffff00000000) [ 117.006320][ T5333] WARNING: kernel/bpf/verifier.c:2823 at reg_bounds_sanity_check+0x201/0xc30, CPU#0: syz.0.0/5333 [ 117.011859][ T5333] Modules linked in: [ 117.013719][ T5333] CPU: 0 UID: 0 PID: 5333 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 117.017846][ T5333] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 117.023167][ T5333] RIP: 0010:reg_bounds_sanity_check+0x3e6/0xc30 [ 117.027040][ T5333] Code: 98 00 00 00 4c 8b 8c 24 88 00 00 00 41 ff 34 24 41 57 55 41 55 ff b4 24 f0 00 00 00 ff b4 24 a8 00 00 00 ff b4 24 c0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 49 bf 00 00 00 00 00 fc ff df 48 8b 84 [ 117.036572][ T5333] RSP: 0018:ffffc9000fa1eeb0 EFLAGS: 00010246 [ 117.039583][ T5333] RAX: dffffc0000000000 RBX: 1ffff110024f844a RCX: 00000000ffffdfcd [ 117.043908][ T5333] RDX: ffffffff8bd47520 RSI: ffffffff8bd4fe60 RDI: ffffffff9015f9c0 [ 117.047558][ T5333] RBP: 00000000ffffdfcc R08: ffffffffffffdfcc R09: 80000000ffffdfcd [ 117.051172][ T5333] R10: ffff8880127c2358 R11: 1ffff110024f8450 R12: ffff8880127c2250 [ 117.055092][ T5333] R13: 00000000ffffdfcd R14: 1ffff110024f8449 R15: 00000000ffffdfcc [ 117.058665][ T5333] FS: 00007fd100bff6c0(0000) GS:ffff88808ca4c000(0000) knlGS:0000000000000000 [ 117.062707][ T5333] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.066257][ T5333] CR2: 00007fd100bfefe8 CR3: 000000004441d000 CR4: 0000000000352ef0 [ 117.070849][ T5333] Call Trace: [ 117.072681][ T5333] [ 117.074164][ T5333] reg_set_min_max+0x264/0x340 [ 117.076626][ T5333] check_cond_jmp_op+0x1dbb/0x31a0 [ 117.079480][ T5333] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 117.082315][ T5333] ? kfree+0x1c1/0x630 [ 117.084476][ T5333] ? do_check+0x6326/0x10610 [ 117.086673][ T5333] ? bpf_reset_stack_write_marks+0x1eb/0x260 [ 117.089439][ T5333] do_check+0x7970/0x10610 [ 117.091753][ T5333] ? __pfx_do_check+0x10/0x10 [ 117.094637][ T5333] ? init_func_state+0x1ab2/0x28d0 [ 117.100017][ T5333] do_check_common+0x19c8/0x25b0 [ 117.102352][ T5333] bpf_check+0x5f3e/0x1ce00 [ 117.104274][ T5333] ? __lock_acquire+0x6b5/0x2cf0 [ 117.107283][ T5333] ? __lock_acquire+0x6b5/0x2cf0 [ 117.110186][ T5333] ? __mutex_trylock_common+0x158/0x260 [ 117.112860][ T5333] ? __pfx___mutex_trylock_common+0x10/0x10 [ 117.115706][ T5333] ? __lock_acquire+0x6b5/0x2cf0 [ 117.118224][ T5333] ? css_rstat_updated+0x23a/0x530 [ 117.120662][ T5333] ? __pfx_css_rstat_updated+0x10/0x10 [ 117.123740][ T5333] ? pcpu_alloc_noprof+0xe8f/0x19c0 [ 117.126768][ T5333] ? __lock_acquire+0x6b5/0x2cf0 [ 117.129218][ T5333] ? __pfx_bpf_check+0x10/0x10 [ 117.131944][ T5333] ? pcpu_memcg_post_alloc_hook+0x77/0x580 [ 117.135450][ T5333] ? pcpu_memcg_post_alloc_hook+0x44a/0x580 [ 117.139005][ T5333] ? ktime_get_with_offset+0x93/0x2a0 [ 117.142028][ T5333] ? ktime_get_with_offset+0x93/0x2a0 [ 117.144662][ T5333] ? __asan_memset+0x22/0x50 [ 117.147483][ T5333] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 117.150567][ T5333] ? security_bpf_prog_load+0x125/0x3c0 [ 117.153607][ T5333] bpf_prog_load+0x1484/0x1ae0 [ 117.156136][ T5333] ? __pfx_bpf_prog_load+0x10/0x10 [ 117.158591][ T5333] ? tomoyo_path_number_perm+0x219/0x630 [ 117.161619][ T5333] ? bpf_lsm_bpf+0x9/0x20 [ 117.164597][ T5333] ? security_bpf+0x7e/0x2d0 [ 117.167244][ T5333] __sys_bpf+0x618/0x950 [ 117.169317][ T5333] ? __pfx___sys_bpf+0x10/0x10 [ 117.172131][ T5333] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 117.175118][ T5333] ? __pfx_kcov_ioctl+0x10/0x10 [ 117.177601][ T5333] __x64_sys_bpf+0x7c/0x90 [ 117.179857][ T5333] do_syscall_64+0x14d/0xf80 [ 117.182221][ T5333] ? trace_irq_disable+0x3b/0x150 [ 117.185060][ T5333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.188609][ T5333] ? clear_bhb_loop+0x40/0x90 [ 117.191172][ T5333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.194461][ T5333] RIP: 0033:0x7fd0ffd9c819 [ 117.197118][ T5333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.206400][ T5333] RSP: 002b:00007fd100bfefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 117.211370][ T5333] RAX: ffffffffffffffda RBX: 00007fd100016180 RCX: 00007fd0ffd9c819 [ 117.214955][ T5333] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 117.218921][ T5333] RBP: 00007fd0ffe32c91 R08: 0000000000000000 R09: 0000000000000000 [ 117.222604][ T5333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.226321][ T5333] R13: 00007fd100016218 R14: 00007fd100016180 R15: 00007ffd8d053dd8 [ 117.230373][ T5333] [ 117.232003][ T5333] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 117.235682][ T5333] CPU: 0 UID: 0 PID: 5333 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 117.241897][ T5333] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 117.246869][ T5333] Call Trace: [ 117.248515][ T5333] [ 117.250049][ T5333] vpanic+0x56c/0xa60 [ 117.251947][ T5333] ? __pfx__printk+0x10/0x10 [ 117.254268][ T5333] ? __pfx_vpanic+0x10/0x10 [ 117.256629][ T5333] ? is_bpf_text_address+0x292/0x2b0 [ 117.259347][ T5333] ? is_bpf_text_address+0x26/0x2b0 [ 117.261835][ T5333] panic+0xc5/0xd0 [ 117.263705][ T5333] ? __pfx_panic+0x10/0x10 [ 117.265884][ T5333] __warn+0x315/0x4f0 [ 117.267834][ T5333] ? reg_bounds_sanity_check+0x201/0xc30 [ 117.270698][ T5333] ? reg_bounds_sanity_check+0x201/0xc30 [ 117.273694][ T5333] __report_bug+0x29a/0x540 [ 117.276133][ T5333] ? __pfx_stack_trace_save+0x10/0x10 [ 117.278738][ T5333] ? reg_bounds_sanity_check+0x201/0xc30 [ 117.281633][ T5333] ? __pfx___report_bug+0x10/0x10 [ 117.284807][ T5333] ? check_cond_jmp_op+0x1c5b/0x31a0 [ 117.288203][ T5333] ? do_check+0x7970/0x10610 [ 117.290774][ T5333] ? do_check_common+0x19c8/0x25b0 [ 117.293863][ T5333] ? bpf_check+0x5f3e/0x1ce00 [ 117.296902][ T5333] ? bpf_prog_load+0x1484/0x1ae0 [ 117.299896][ T5333] ? __sys_bpf+0x618/0x950 [ 117.302693][ T5333] ? __x64_sys_bpf+0x7c/0x90 [ 117.305349][ T5333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.308411][ T5333] report_bug_entry+0x19a/0x290 [ 117.312105][ T5333] ? reg_bounds_sanity_check+0x3e6/0xc30 [ 117.315552][ T5333] ? reg_bounds_sanity_check+0x3eb/0xc30 [ 117.318547][ T5333] handle_bug+0xce/0x200 [ 117.320851][ T5333] exc_invalid_op+0x1a/0x50 [ 117.323411][ T5333] asm_exc_invalid_op+0x1a/0x20 [ 117.326043][ T5333] RIP: 0010:reg_bounds_sanity_check+0x3e6/0xc30 [ 117.329298][ T5333] Code: 98 00 00 00 4c 8b 8c 24 88 00 00 00 41 ff 34 24 41 57 55 41 55 ff b4 24 f0 00 00 00 ff b4 24 a8 00 00 00 ff b4 24 c0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 49 bf 00 00 00 00 00 fc ff df 48 8b 84 [ 117.338832][ T5333] RSP: 0018:ffffc9000fa1eeb0 EFLAGS: 00010246 [ 117.342308][ T5333] RAX: dffffc0000000000 RBX: 1ffff110024f844a RCX: 00000000ffffdfcd [ 117.345523][ T5333] RDX: ffffffff8bd47520 RSI: ffffffff8bd4fe60 RDI: ffffffff9015f9c0 [ 117.349074][ T5333] RBP: 00000000ffffdfcc R08: ffffffffffffdfcc R09: 80000000ffffdfcd [ 117.353321][ T5333] R10: ffff8880127c2358 R11: 1ffff110024f8450 R12: ffff8880127c2250 [ 117.357025][ T5333] R13: 00000000ffffdfcd R14: 1ffff110024f8449 R15: 00000000ffffdfcc [ 117.360682][ T5333] reg_set_min_max+0x264/0x340 [ 117.363160][ T5333] check_cond_jmp_op+0x1dbb/0x31a0 [ 117.365820][ T5333] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 117.368683][ T5333] ? kfree+0x1c1/0x630 [ 117.370648][ T5333] ? do_check+0x6326/0x10610 [ 117.373598][ T5333] ? bpf_reset_stack_write_marks+0x1eb/0x260 [ 117.376677][ T5333] do_check+0x7970/0x10610 [ 117.378995][ T5333] ? __pfx_do_check+0x10/0x10 [ 117.381696][ T5333] ? init_func_state+0x1ab2/0x28d0 [ 117.384680][ T5333] do_check_common+0x19c8/0x25b0 [ 117.387013][ T5333] bpf_check+0x5f3e/0x1ce00 [ 117.389432][ T5333] ? __lock_acquire+0x6b5/0x2cf0 [ 117.392454][ T5333] ? __lock_acquire+0x6b5/0x2cf0 [ 117.395271][ T5333] ? __mutex_trylock_common+0x158/0x260 [ 117.397869][ T5333] ? __pfx___mutex_trylock_common+0x10/0x10 [ 117.400843][ T5333] ? __lock_acquire+0x6b5/0x2cf0 [ 117.403824][ T5333] ? css_rstat_updated+0x23a/0x530 [ 117.406315][ T5333] ? __pfx_css_rstat_updated+0x10/0x10 [ 117.408667][ T5333] ? pcpu_alloc_noprof+0xe8f/0x19c0 [ 117.411035][ T5333] ? __lock_acquire+0x6b5/0x2cf0 [ 117.413181][ T5333] ? __pfx_bpf_check+0x10/0x10 [ 117.415953][ T5333] ? pcpu_memcg_post_alloc_hook+0x77/0x580 [ 117.419227][ T5333] ? pcpu_memcg_post_alloc_hook+0x44a/0x580 [ 117.422216][ T5333] ? ktime_get_with_offset+0x93/0x2a0 [ 117.424973][ T5333] ? ktime_get_with_offset+0x93/0x2a0 [ 117.428077][ T5333] ? __asan_memset+0x22/0x50 [ 117.430755][ T5333] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 117.433236][ T5333] ? security_bpf_prog_load+0x125/0x3c0 [ 117.435821][ T5333] bpf_prog_load+0x1484/0x1ae0 [ 117.438348][ T5333] ? __pfx_bpf_prog_load+0x10/0x10 [ 117.441395][ T5333] ? tomoyo_path_number_perm+0x219/0x630 [ 117.444300][ T5333] ? bpf_lsm_bpf+0x9/0x20 [ 117.446289][ T5333] ? security_bpf+0x7e/0x2d0 [ 117.448521][ T5333] __sys_bpf+0x618/0x950 [ 117.450919][ T5333] ? __pfx___sys_bpf+0x10/0x10 [ 117.453638][ T5333] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 117.456838][ T5333] ? __pfx_kcov_ioctl+0x10/0x10 [ 117.459332][ T5333] __x64_sys_bpf+0x7c/0x90 [ 117.461514][ T5333] do_syscall_64+0x14d/0xf80 [ 117.464243][ T5333] ? trace_irq_disable+0x3b/0x150 [ 117.466768][ T5333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.469434][ T5333] ? clear_bhb_loop+0x40/0x90 [ 117.471571][ T5333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.474307][ T5333] RIP: 0033:0x7fd0ffd9c819 [ 117.476320][ T5333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.484855][ T5333] RSP: 002b:00007fd100bfefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 117.489233][ T5333] RAX: ffffffffffffffda RBX: 00007fd100016180 RCX: 00007fd0ffd9c819 [ 117.493078][ T5333] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 117.497169][ T5333] RBP: 00007fd0ffe32c91 R08: 0000000000000000 R09: 0000000000000000 [ 117.501379][ T5333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.505298][ T5333] R13: 00007fd100016218 R14: 00007fd100016180 R15: 00007ffd8d053dd8 [ 117.509265][ T5333] [ 117.511330][ T5333] Kernel Offset: disabled [ 117.513451][ T5333] Rebooting in 86400 seconds..