------------[ cut here ]------------ WARNING: CPU: 0 PID: 7419 at kernel/bpf/verifier.c:2715 reg_bounds_sanity_check+0x390/0x45c kernel/bpf/verifier.c:2715 verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0x4000000, 0x0] s64=[0x4000000, 0x0] u32=[0x4000000, 0x0] s32=[0x4000000, 0x0] var_off=(0x0, 0x0) Modules linked in: Kernel panic - not syncing: kernel: panic_on_warn set ... CPU: 0 UID: 0 PID: 7419 Comm: syz.1.707 Not tainted syzkaller #0 PREEMPT Hardware name: ARM-Versatile Express Call trace: [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:257) r7:822406c0 r6:83a98c00 r5:00000000 r4:822523c8 [<80201b08>] (show_stack) from [<8021f920>] (__dump_stack lib/dump_stack.c:94 [inline]) [<80201b08>] (show_stack) from [<8021f920>] (dump_stack_lvl+0x54/0x7c lib/dump_stack.c:120) [<8021f8cc>] (dump_stack_lvl) from [<8021f960>] (dump_stack+0x18/0x1c lib/dump_stack.c:129) r5:00000000 r4:82a78d18 [<8021f948>] (dump_stack) from [<802025f8>] (vpanic+0xe0/0x2e8 kernel/panic.c:489) [<80202518>] (vpanic) from [<80202834>] (trace_suspend_resume+0x0/0xd8 kernel/panic.c:626) r7:803d7b9c [<80202800>] (panic) from [<80252948>] (check_panic_on_warn kernel/panic.c:376 [inline]) [<80202800>] (panic) from [<80252948>] (get_taint+0x0/0x1c kernel/panic.c:371) r3:8280c684 r2:00000001 r1:82238c24 r0:822406c0 [<802528d0>] (check_panic_on_warn) from [<80252aac>] (__warn+0x80/0x188 kernel/panic.c:897) [<80252a2c>] (__warn) from [<80252d9c>] (warn_slowpath_fmt+0x1e8/0x1f4 kernel/panic.c:932) r8:00000009 r7:82258d24 r6:dfc1191c r5:83a98c00 r4:00000000 [<80252bb8>] (warn_slowpath_fmt) from [<803d7b9c>] (reg_bounds_sanity_check+0x390/0x45c kernel/bpf/verifier.c:2715) r10:85ce8000 r9:04000000 r8:00000000 r7:04000000 r6:00000000 r5:82259548 r4:857e2aa0 [<803d780c>] (reg_bounds_sanity_check) from [<803e27d4>] (reg_set_min_max kernel/bpf/verifier.c:16409 [inline]) [<803d780c>] (reg_bounds_sanity_check) from [<803e27d4>] (reg_set_min_max+0x1e8/0x26c kernel/bpf/verifier.c:16381) r10:00000000 r9:85cee018 r8:00000030 r7:85ce8000 r6:85cedfa8 r5:84fcb2a0 r4:857e2aa0 [<803e25ec>] (reg_set_min_max) from [<803f3ce0>] (check_cond_jmp_op+0x560/0x1860 kernel/bpf/verifier.c:16852) r10:85cedfa8 r9:84fcb000 r8:00000030 r7:85bc9180 r6:85bc9a80 r5:85ce8000 r4:dffd1088 r3:857e2aa0 [<803f3780>] (check_cond_jmp_op) from [<803fb31c>] (do_check_insn kernel/bpf/verifier.c:19929 [inline]) [<803f3780>] (check_cond_jmp_op) from [<803fb31c>] (do_check kernel/bpf/verifier.c:20069 [inline]) [<803f3780>] (check_cond_jmp_op) from [<803fb31c>] (do_check_common+0x2010/0x30f4 kernel/bpf/verifier.c:23259) r10:00000011 r9:85bc9180 r8:85ced000 r7:00000001 r6:85ce8000 r5:dffd1040 r4:dffd1000 [<803f930c>] (do_check_common) from [<803ffb48>] (do_check_main kernel/bpf/verifier.c:23342 [inline]) [<803f930c>] (do_check_common) from [<803ffb48>] (bpf_check+0x29f8/0x2f50 kernel/bpf/verifier.c:24647) r10:00000000 r9:85ce8000 r8:85ced000 r7:00000a7b r6:85ce87bc r5:00000001 r4:00000016 [<803fd150>] (bpf_check) from [<803d1318>] (bpf_prog_load+0x650/0xd74 kernel/bpf/syscall.c:3077) r10:dfc11d90 r9:83a98c00 r8:84e0e730 r7:dfc11d50 r6:00000000 r5:00000000 r4:dfc11eb0 [<803d0cc8>] (bpf_prog_load) from [<803d3170>] (__sys_bpf+0xab8/0x2240 kernel/bpf/syscall.c:6149) r10:200054c0 r9:83a98c00 r8:dfc11ea8 r7:00000000 r6:00000005 r5:dfc11e80 r4:00000048 [<803d26b8>] (__sys_bpf) from [<803d4e98>] (__do_sys_bpf kernel/bpf/syscall.c:6259 [inline]) [<803d26b8>] (__sys_bpf) from [<803d4e98>] (sys_bpf+0x2c/0x48 kernel/bpf/syscall.c:6257) r10:00000182 r9:83a98c00 r8:8020029c r7:00000182 r6:00316308 r5:00000000 r4:00000000 [<803d4e6c>] (sys_bpf) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:67) Exception stack(0xdfc11fa8 to 0xdfc11ff0) 1fa0: 00000000 00000000 00000005 200054c0 00000048 00000000 1fc0: 00000000 00000000 00316308 00000182 00300000 00000000 00006364 76f750bc 1fe0: 76f74ec0 76f74eb0 000195a4 00132510 Rebooting in 86400 seconds..