------------[ cut here ]------------
WARNING: kernel/bpf/verifier.c:2817 at reg_bounds_sanity_check+0x3c0/0x428 kernel/bpf/verifier.c:2817, CPU#1: syz.2.866/7542
verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0xffffdfcd, 0xffffffffffffdfcc] s64=[0x80000000ffffdfcd, 0x7fffffffffffdfcc] u32=[0xffffdfcd, 0xffffdfcc] s32=[0xffffdfcd, 0xffffdfcc] var_off=(0xffffdfcc, 0xffffffff00000000)
Modules linked in:
Kernel panic - not syncing: kernel: panic_on_warn set ...
CPU: 1 UID: 0 PID: 7542 Comm: syz.2.866 Not tainted syzkaller #0 PREEMPT 
Hardware name: ARM-Versatile Express
Call trace: 
[<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:257)
 r7:8281f9b4 r6:00000000 r5:822a865c r4:00000001
[<80201af0>] (show_stack) from [<8021e410>] (__dump_stack lib/dump_stack.c:94 [inline])
[<80201af0>] (show_stack) from [<8021e410>] (dump_stack_lvl+0x5c/0x70 lib/dump_stack.c:120)
[<8021e3b4>] (dump_stack_lvl) from [<8021e43c>] (dump_stack+0x18/0x1c lib/dump_stack.c:129)
 r7:8281f9b4 r6:00000000 r5:840055c0 r4:82a80d14
[<8021e424>] (dump_stack) from [<8020260c>] (vpanic+0x114/0x320 kernel/panic.c:650)
[<802024f8>] (vpanic) from [<8020284c>] (trace_suspend_resume+0x0/0x104 kernel/panic.c:787)
 r7:803e122c
[<80202818>] (panic) from [<80250a70>] (check_panic_on_warn kernel/panic.c:524 [inline])
[<80202818>] (panic) from [<80250a70>] (get_taint+0x0/0x1c kernel/panic.c:519)
 r3:8280c544 r2:00000001 r1:8228f388 r0:82296c54
[<802509f8>] (check_panic_on_warn) from [<80250bec>] (__warn+0x98/0x1ac kernel/panic.c:1062)
[<80250b54>] (__warn) from [<80250ee8>] (warn_slowpath_fmt+0x1e8/0x1f4 kernel/panic.c:1097)
 r8:00000009 r7:822aefc0 r6:e01e58c4 r5:840055c0 r4:00000000
[<80250d04>] (warn_slowpath_fmt) from [<803e122c>] (reg_bounds_sanity_check+0x3c0/0x428 kernel/bpf/verifier.c:2817)
 r10:86e68000 r9:ffffdfcd r8:80000000 r7:ffffdfcd r6:ffffdfcc r5:822af768
 r4:86196a30
[<803e0e6c>] (reg_bounds_sanity_check) from [<803ee180>] (reg_set_min_max kernel/bpf/verifier.c:17165 [inline])
[<803e0e6c>] (reg_bounds_sanity_check) from [<803ee180>] (reg_set_min_max+0x1d4/0x298 kernel/bpf/verifier.c:17132)
 r10:00000001 r9:00000010 r8:86e68000 r7:85a7fb10 r6:86196b10 r5:86196a30
 r4:85a7fa30
[<803edfac>] (reg_set_min_max) from [<803fedd8>] (check_cond_jmp_op+0xc84/0x1988 kernel/bpf/verifier.c:17622)
 r10:86196800 r9:00000010 r8:8339bd00 r7:ffffffff r6:80000000 r5:838813c0
 r4:e040b0c0 r3:85a7fa30
[<803fe154>] (check_cond_jmp_op) from [<80405434>] (do_check_insn kernel/bpf/verifier.c:21185 [inline])
[<803fe154>] (check_cond_jmp_op) from [<80405434>] (do_check kernel/bpf/verifier.c:21325 [inline])
[<803fe154>] (check_cond_jmp_op) from [<80405434>] (do_check_common+0x2584/0x3214 kernel/bpf/verifier.c:24667)
 r10:86e6c000 r9:86e68000 r8:e040b0c0 r7:86e6e000 r6:00000018 r5:e040b078
 r4:e040b000
[<80402eb0>] (do_check_common) from [<80409038>] (do_check_main kernel/bpf/verifier.c:24750 [inline])
[<80402eb0>] (do_check_common) from [<80409038>] (bpf_check+0x2290/0x2d30 kernel/bpf/verifier.c:26073)
 r10:86e6e000 r9:00000001 r8:86e68000 r7:00000a7b r6:86e688bc r5:00000000
 r4:00000016
[<80406da8>] (bpf_check) from [<803da570>] (bpf_prog_load+0x5b8/0xdec kernel/bpf/syscall.c:3089)
 r10:e040b000 r9:840055c0 r8:85b8b330 r7:e01e5d18 r6:00000000 r5:00000000
 r4:e01e5eb0
[<803d9fb8>] (bpf_prog_load) from [<803dbd98>] (__sys_bpf+0x2d8/0x2038 kernel/bpf/syscall.c:6228)
 r10:00000005 r9:00000000 r8:e01e5e50 r7:00000048 r6:840055c0 r5:200054c0
 r4:00000000
[<803dbac0>] (__sys_bpf) from [<803de090>] (__do_sys_bpf kernel/bpf/syscall.c:6341 [inline])
[<803dbac0>] (__sys_bpf) from [<803de090>] (sys_bpf+0x2c/0x48 kernel/bpf/syscall.c:6339)
 r10:00000182 r9:840055c0 r8:8020029c r7:00000182 r6:00346310 r5:00000000
 r4:00000000
[<803de064>] (sys_bpf) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:67)
Exception stack(0xe01e5fa8 to 0xe01e5ff0)
5fa0:                   00000000 00000000 00000005 200054c0 00000048 00000000
5fc0: 00000000 00000000 00346310 00000182 003462d8 00000000 003d0f00 76fe40dc
5fe0: 76fe3e88 76fe3e78 00018bc4 00130300
Rebooting in 86400 seconds..