program: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) [ 75.940688][ T5315] Bluetooth: hci0: command tx timeout [ 76.029530][ T5337] ------------[ cut here ]------------ [ 76.036283][ T5337] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0xffffdfcd, 0xffffffffffffdfcc] s64=[0x80000000ffffdfcd, 0x7fffffffffffdfcc] u32=[0xffffdfcd, 0xffffdfcc] s32=[0xffffdfcd, 0xffffdfcc] var_off=(0xffffdfcc, 0xffffffff00000000) [ 76.047779][ T5337] WARNING: kernel/bpf/verifier.c:2748 at reg_bounds_sanity_check+0x201/0xc30, CPU#0: syz.0.0/5337 [ 76.052879][ T5337] Modules linked in: [ 76.054809][ T5337] CPU: 0 UID: 0 PID: 5337 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 76.058875][ T5337] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.063638][ T5337] RIP: 0010:reg_bounds_sanity_check+0x3e6/0xc30 [ 76.066241][ T5337] Code: 98 00 00 00 4c 8b 8c 24 88 00 00 00 41 ff 34 24 41 57 55 41 55 ff b4 24 f0 00 00 00 ff b4 24 a8 00 00 00 ff b4 24 c0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 49 bf 00 00 00 00 00 fc ff df 48 8b 84 [ 76.076837][ T5337] RSP: 0018:ffffc9000e76eed0 EFLAGS: 00010246 [ 76.079772][ T5337] RAX: dffffc0000000000 RBX: 1ffff1100812ee4a RCX: 00000000ffffdfcd [ 76.083395][ T5337] RDX: ffffffff8b71ce20 RSI: ffffffff8b7255a0 RDI: ffffffff8f8638d0 [ 76.086995][ T5337] RBP: 00000000ffffdfcc R08: ffffffffffffdfcc R09: 80000000ffffdfcd [ 76.090724][ T5337] R10: ffff888040977358 R11: 1ffff1100812ee50 R12: ffff888040977250 [ 76.094326][ T5337] R13: 00000000ffffdfcd R14: 1ffff1100812ee49 R15: 00000000ffffdfcc [ 76.098016][ T5337] FS: 00007fd1771a16c0(0000) GS:ffff88808d414000(0000) knlGS:0000000000000000 [ 76.102047][ T5337] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.105274][ T5337] CR2: 00005557bcea8660 CR3: 0000000042e8f000 CR4: 0000000000352ef0 [ 76.122932][ T5337] Call Trace: [ 76.124573][ T5337] [ 76.126243][ T5337] reg_set_min_max+0x264/0x340 [ 76.128444][ T5337] check_cond_jmp_op+0x19c6/0x2e20 [ 76.131174][ T5337] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 76.133781][ T5337] ? bpf_reset_stack_write_marks+0x1eb/0x260 [ 76.136575][ T5337] ? incomplete_read_marks+0x143/0x1f0 [ 76.138982][ T5337] do_check+0x58f5/0xeba0 [ 76.141036][ T5337] ? _raw_spin_unlock_irqrestore+0x47/0x80 [ 76.143748][ T5337] ? __pfx_do_check+0x10/0x10 [ 76.145903][ T5337] ? init_func_state+0x1ab2/0x28d0 [ 76.148240][ T5337] do_check_common+0x19cc/0x25b0 [ 76.150737][ T5337] bpf_check+0x5e7a/0x1c300 [ 76.152979][ T5337] ? __lock_acquire+0x6b6/0x2cf0 [ 76.155230][ T5337] ? __lock_acquire+0x6b6/0x2cf0 [ 76.157298][ T5337] ? __mutex_trylock_common+0x153/0x260 [ 76.159525][ T5337] ? __mutex_trylock_common+0x153/0x260 [ 76.162147][ T5337] ? __lock_acquire+0x6b6/0x2cf0 [ 76.164275][ T5337] ? pcpu_block_update+0x1b5/0x8d0 [ 76.166685][ T5337] ? css_rstat_updated+0x239/0x520 [ 76.169212][ T5337] ? pcpu_memcg_post_alloc_hook+0x77/0x580 [ 76.172070][ T5337] ? __pfx_bpf_check+0x10/0x10 [ 76.177583][ T5337] ? ktime_get_with_offset+0x93/0x2a0 [ 76.180450][ T5337] ? ktime_get_with_offset+0x93/0x2a0 [ 76.183195][ T5337] ? __asan_memset+0x22/0x50 [ 76.185507][ T5337] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 76.188033][ T5337] ? security_bpf_prog_load+0x125/0x3f0 [ 76.190760][ T5337] bpf_prog_load+0x13ba/0x1a10 [ 76.193351][ T5337] ? __pfx_bpf_prog_load+0x10/0x10 [ 76.195668][ T5337] ? __might_fault+0xb0/0x130 [ 76.198054][ T5337] ? bpf_lsm_bpf+0x9/0x20 [ 76.200389][ T5337] ? security_bpf+0x7e/0x300 [ 76.202654][ T5337] __sys_bpf+0x507/0x860 [ 76.204567][ T5337] ? __pfx___sys_bpf+0x10/0x10 [ 76.206780][ T5337] ? ktime_get+0x1d2/0x200 [ 76.208994][ T5337] __x64_sys_bpf+0x7c/0x90 [ 76.211311][ T5337] do_syscall_64+0xec/0xf80 [ 76.213942][ T5337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.217609][ T5337] ? clear_bhb_loop+0x60/0xb0 [ 76.220263][ T5337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.222990][ T5337] RIP: 0033:0x7fd17638f7c9 [ 76.225035][ T5337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.233386][ T5337] RSP: 002b:00007fd1771a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 76.236683][ T5337] RAX: ffffffffffffffda RBX: 00007fd1765e5fa0 RCX: 00007fd17638f7c9 [ 76.239923][ T5337] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 76.243339][ T5337] RBP: 00007fd176413f91 R08: 0000000000000000 R09: 0000000000000000 [ 76.246786][ T5337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.250565][ T5337] R13: 00007fd1765e6038 R14: 00007fd1765e5fa0 R15: 00007ffe728234e8 [ 76.254345][ T5337] [ 76.255865][ T5337] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 76.259067][ T5337] CPU: 0 UID: 0 PID: 5337 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 76.262995][ T5337] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.267714][ T5337] Call Trace: [ 76.269311][ T5337] [ 76.270683][ T5337] vpanic+0x1e0/0x670 [ 76.272385][ T5337] panic+0xb9/0xc0 [ 76.274072][ T5337] ? __pfx_panic+0x10/0x10 [ 76.276124][ T5337] __warn+0x317/0x4b0 [ 76.278258][ T5337] ? reg_bounds_sanity_check+0x201/0xc30 [ 76.280707][ T5337] ? reg_bounds_sanity_check+0x201/0xc30 [ 76.282928][ T5337] __report_bug+0x288/0x500 [ 76.284712][ T5337] ? __pfx_stack_trace_save+0x10/0x10 [ 76.286823][ T5337] ? reg_bounds_sanity_check+0x201/0xc30 [ 76.289103][ T5337] ? __pfx___report_bug+0x10/0x10 [ 76.291387][ T5337] ? reg_bounds_sanity_check+0x3eb/0xc30 [ 76.293619][ T5337] ? reg_bounds_sanity_check+0x3e6/0xc30 [ 76.296006][ T5337] report_bug_entry+0x19a/0x290 [ 76.298188][ T5337] ? reg_bounds_sanity_check+0x3e6/0xc30 [ 76.300553][ T5337] ? reg_bounds_sanity_check+0x3eb/0xc30 [ 76.303010][ T5337] handle_bug+0xca/0x200 [ 76.304939][ T5337] exc_invalid_op+0x1a/0x50 [ 76.307194][ T5337] asm_exc_invalid_op+0x1a/0x20 [ 76.309353][ T5337] RIP: 0010:reg_bounds_sanity_check+0x3e6/0xc30 [ 76.312048][ T5337] Code: 98 00 00 00 4c 8b 8c 24 88 00 00 00 41 ff 34 24 41 57 55 41 55 ff b4 24 f0 00 00 00 ff b4 24 a8 00 00 00 ff b4 24 c0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 49 bf 00 00 00 00 00 fc ff df 48 8b 84 [ 76.320286][ T5337] RSP: 0018:ffffc9000e76eed0 EFLAGS: 00010246 [ 76.322930][ T5337] RAX: dffffc0000000000 RBX: 1ffff1100812ee4a RCX: 00000000ffffdfcd [ 76.326323][ T5337] RDX: ffffffff8b71ce20 RSI: ffffffff8b7255a0 RDI: ffffffff8f8638d0 [ 76.329649][ T5337] RBP: 00000000ffffdfcc R08: ffffffffffffdfcc R09: 80000000ffffdfcd [ 76.333044][ T5337] R10: ffff888040977358 R11: 1ffff1100812ee50 R12: ffff888040977250 [ 76.336488][ T5337] R13: 00000000ffffdfcd R14: 1ffff1100812ee49 R15: 00000000ffffdfcc [ 76.339996][ T5337] reg_set_min_max+0x264/0x340 [ 76.342048][ T5337] check_cond_jmp_op+0x19c6/0x2e20 [ 76.344367][ T5337] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 76.346770][ T5337] ? bpf_reset_stack_write_marks+0x1eb/0x260 [ 76.349411][ T5337] ? incomplete_read_marks+0x143/0x1f0 [ 76.351776][ T5337] do_check+0x58f5/0xeba0 [ 76.353691][ T5337] ? _raw_spin_unlock_irqrestore+0x47/0x80 [ 76.356223][ T5337] ? __pfx_do_check+0x10/0x10 [ 76.358351][ T5337] ? init_func_state+0x1ab2/0x28d0 [ 76.360569][ T5337] do_check_common+0x19cc/0x25b0 [ 76.362651][ T5337] bpf_check+0x5e7a/0x1c300 [ 76.364483][ T5337] ? __lock_acquire+0x6b6/0x2cf0 [ 76.366508][ T5337] ? __lock_acquire+0x6b6/0x2cf0 [ 76.368583][ T5337] ? __mutex_trylock_common+0x153/0x260 [ 76.370743][ T5337] ? __mutex_trylock_common+0x153/0x260 [ 76.372975][ T5337] ? __lock_acquire+0x6b6/0x2cf0 [ 76.375200][ T5337] ? pcpu_block_update+0x1b5/0x8d0 [ 76.377498][ T5337] ? css_rstat_updated+0x239/0x520 [ 76.379843][ T5337] ? pcpu_memcg_post_alloc_hook+0x77/0x580 [ 76.382413][ T5337] ? __pfx_bpf_check+0x10/0x10 [ 76.384500][ T5337] ? ktime_get_with_offset+0x93/0x2a0 [ 76.386637][ T5337] ? ktime_get_with_offset+0x93/0x2a0 [ 76.388768][ T5337] ? __asan_memset+0x22/0x50 [ 76.390626][ T5337] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 76.392830][ T5337] ? security_bpf_prog_load+0x125/0x3f0 [ 76.395096][ T5337] bpf_prog_load+0x13ba/0x1a10 [ 76.397054][ T5337] ? __pfx_bpf_prog_load+0x10/0x10 [ 76.399216][ T5337] ? __might_fault+0xb0/0x130 [ 76.401297][ T5337] ? bpf_lsm_bpf+0x9/0x20 [ 76.403232][ T5337] ? security_bpf+0x7e/0x300 [ 76.405434][ T5337] __sys_bpf+0x507/0x860 [ 76.407279][ T5337] ? __pfx___sys_bpf+0x10/0x10 [ 76.409430][ T5337] ? ktime_get+0x1d2/0x200 [ 76.411377][ T5337] __x64_sys_bpf+0x7c/0x90 [ 76.413337][ T5337] do_syscall_64+0xec/0xf80 [ 76.415327][ T5337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.417956][ T5337] ? clear_bhb_loop+0x60/0xb0 [ 76.419977][ T5337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.422422][ T5337] RIP: 0033:0x7fd17638f7c9 [ 76.424376][ T5337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.432882][ T5337] RSP: 002b:00007fd1771a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 76.436676][ T5337] RAX: ffffffffffffffda RBX: 00007fd1765e5fa0 RCX: 00007fd17638f7c9 [ 76.440549][ T5337] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 76.444007][ T5337] RBP: 00007fd176413f91 R08: 0000000000000000 R09: 0000000000000000 [ 76.447404][ T5337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.450947][ T5337] R13: 00007fd1765e6038 R14: 00007fd1765e5fa0 R15: 00007ffe728234e8 [ 76.454490][ T5337] [ 76.456286][ T5337] Kernel Offset: disabled [ 76.458230][ T5337] Rebooting in 86400 seconds..