1811 	err = check_reg_arg(env, insn->dst_reg, SRC_OP);  in check_xadd()
1820 	if (is_ctx_reg(env, insn->dst_reg) ||  in check_xadd()
1821 	    is_pkt_reg(env, insn->dst_reg)) {  in check_xadd()
1823 			insn->dst_reg, is_ctx_reg(env, insn->dst_reg) ?  in check_xadd()
1829 	err = check_mem_access(env, insn_idx, insn->dst_reg, insn->off,  in check_xadd()
1835 	return check_mem_access(env, insn_idx, insn->dst_reg, insn->off,  in check_xadd()
2697 	struct bpf_reg_state *regs = state->regs, *dst_reg;  in adjust_ptr_min_max_vals()  local
2704 	u32 dst = insn->dst_reg;  in adjust_ptr_min_max_vals()
2706 	dst_reg = &regs[dst];  in adjust_ptr_min_max_vals()
2713 		__mark_reg_unknown(dst_reg);  in adjust_ptr_min_max_vals()
2744 	dst_reg->type = ptr_reg->type;  in adjust_ptr_min_max_vals()
2745 	dst_reg->id = ptr_reg->id;  in adjust_ptr_min_max_vals()
2759 			dst_reg->smin_value = smin_ptr;  in adjust_ptr_min_max_vals()
2760 			dst_reg->smax_value = smax_ptr;  in adjust_ptr_min_max_vals()
2761 			dst_reg->umin_value = umin_ptr;  in adjust_ptr_min_max_vals()
2762 			dst_reg->umax_value = umax_ptr;  in adjust_ptr_min_max_vals()
2763 			dst_reg->var_off = ptr_reg->var_off;  in adjust_ptr_min_max_vals()
2764 			dst_reg->off = ptr_reg->off + smin_val;  in adjust_ptr_min_max_vals()
2765 			dst_reg->range = ptr_reg->range;  in adjust_ptr_min_max_vals()
2779 			dst_reg->smin_value = S64_MIN;  in adjust_ptr_min_max_vals()
2780 			dst_reg->smax_value = S64_MAX;  in adjust_ptr_min_max_vals()
2782 			dst_reg->smin_value = smin_ptr + smin_val;  in adjust_ptr_min_max_vals()
2783 			dst_reg->smax_value = smax_ptr + smax_val;  in adjust_ptr_min_max_vals()
2787 			dst_reg->umin_value = 0;  in adjust_ptr_min_max_vals()
2788 			dst_reg->umax_value = U64_MAX;  in adjust_ptr_min_max_vals()
2790 			dst_reg->umin_value = umin_ptr + umin_val;  in adjust_ptr_min_max_vals()
2791 			dst_reg->umax_value = umax_ptr + umax_val;  in adjust_ptr_min_max_vals()
2793 		dst_reg->var_off = tnum_add(ptr_reg->var_off, off_reg->var_off);  in adjust_ptr_min_max_vals()
2794 		dst_reg->off = ptr_reg->off;  in adjust_ptr_min_max_vals()
2796 			dst_reg->id = ++env->id_gen;  in adjust_ptr_min_max_vals()
2798 			dst_reg->range = 0;  in adjust_ptr_min_max_vals()
2802 		if (dst_reg == off_reg) {  in adjust_ptr_min_max_vals()
2820 			dst_reg->smin_value = smin_ptr;  in adjust_ptr_min_max_vals()
2821 			dst_reg->smax_value = smax_ptr;  in adjust_ptr_min_max_vals()
2822 			dst_reg->umin_value = umin_ptr;  in adjust_ptr_min_max_vals()
2823 			dst_reg->umax_value = umax_ptr;  in adjust_ptr_min_max_vals()
2824 			dst_reg->var_off = ptr_reg->var_off;  in adjust_ptr_min_max_vals()
2825 			dst_reg->id = ptr_reg->id;  in adjust_ptr_min_max_vals()
2826 			dst_reg->off = ptr_reg->off - smin_val;  in adjust_ptr_min_max_vals()
2827 			dst_reg->range = ptr_reg->range;  in adjust_ptr_min_max_vals()
2836 			dst_reg->smin_value = S64_MIN;  in adjust_ptr_min_max_vals()
2837 			dst_reg->smax_value = S64_MAX;  in adjust_ptr_min_max_vals()
2839 			dst_reg->smin_value = smin_ptr - smax_val;  in adjust_ptr_min_max_vals()
2840 			dst_reg->smax_value = smax_ptr - smin_val;  in adjust_ptr_min_max_vals()
2844 			dst_reg->umin_value = 0;  in adjust_ptr_min_max_vals()
2845 			dst_reg->umax_value = U64_MAX;  in adjust_ptr_min_max_vals()
2848 			dst_reg->umin_value = umin_ptr - umax_val;  in adjust_ptr_min_max_vals()
2849 			dst_reg->umax_value = umax_ptr - umin_val;  in adjust_ptr_min_max_vals()
2851 		dst_reg->var_off = tnum_sub(ptr_reg->var_off, off_reg->var_off);  in adjust_ptr_min_max_vals()
2852 		dst_reg->off = ptr_reg->off;  in adjust_ptr_min_max_vals()
2854 			dst_reg->id = ++env->id_gen;  in adjust_ptr_min_max_vals()
2857 				dst_reg->range = 0;  in adjust_ptr_min_max_vals()
2874 	if (!check_reg_sane_offset(env, dst_reg, ptr_reg->type))  in adjust_ptr_min_max_vals()
2877 	__update_reg_bounds(dst_reg);  in adjust_ptr_min_max_vals()
2878 	__reg_deduce_bounds(dst_reg);  in adjust_ptr_min_max_vals()
2879 	__reg_bound_offset(dst_reg);  in adjust_ptr_min_max_vals()
2889 				      struct bpf_reg_state *dst_reg,  in adjust_scalar_min_max_vals()  argument
2904 		coerce_reg_to_size(dst_reg, 4);  in adjust_scalar_min_max_vals()
2913 	dst_known = tnum_is_const(dst_reg->var_off);  in adjust_scalar_min_max_vals()
2920 		__mark_reg_unknown(dst_reg);  in adjust_scalar_min_max_vals()
2926 		__mark_reg_unknown(dst_reg);  in adjust_scalar_min_max_vals()
2932 		if (signed_add_overflows(dst_reg->smin_value, smin_val) ||  in adjust_scalar_min_max_vals()
2933 		    signed_add_overflows(dst_reg->smax_value, smax_val)) {  in adjust_scalar_min_max_vals()
2934 			dst_reg->smin_value = S64_MIN;  in adjust_scalar_min_max_vals()
2935 			dst_reg->smax_value = S64_MAX;  in adjust_scalar_min_max_vals()
2937 			dst_reg->smin_value += smin_val;  in adjust_scalar_min_max_vals()
2938 			dst_reg->smax_value += smax_val;  in adjust_scalar_min_max_vals()
2940 		if (dst_reg->umin_value + umin_val < umin_val ||  in adjust_scalar_min_max_vals()
2941 		    dst_reg->umax_value + umax_val < umax_val) {  in adjust_scalar_min_max_vals()
2942 			dst_reg->umin_value = 0;  in adjust_scalar_min_max_vals()
2943 			dst_reg->umax_value = U64_MAX;  in adjust_scalar_min_max_vals()
2945 			dst_reg->umin_value += umin_val;  in adjust_scalar_min_max_vals()
2946 			dst_reg->umax_value += umax_val;  in adjust_scalar_min_max_vals()
2948 		dst_reg->var_off = tnum_add(dst_reg->var_off, src_reg.var_off);  in adjust_scalar_min_max_vals()
2951 		if (signed_sub_overflows(dst_reg->smin_value, smax_val) ||  in adjust_scalar_min_max_vals()
2952 		    signed_sub_overflows(dst_reg->smax_value, smin_val)) {  in adjust_scalar_min_max_vals()
2954 			dst_reg->smin_value = S64_MIN;  in adjust_scalar_min_max_vals()
2955 			dst_reg->smax_value = S64_MAX;  in adjust_scalar_min_max_vals()
2957 			dst_reg->smin_value -= smax_val;  in adjust_scalar_min_max_vals()
2958 			dst_reg->smax_value -= smin_val;  in adjust_scalar_min_max_vals()
2960 		if (dst_reg->umin_value < umax_val) {  in adjust_scalar_min_max_vals()
2962 			dst_reg->umin_value = 0;  in adjust_scalar_min_max_vals()
2963 			dst_reg->umax_value = U64_MAX;  in adjust_scalar_min_max_vals()
2966 			dst_reg->umin_value -= umax_val;  in adjust_scalar_min_max_vals()
2967 			dst_reg->umax_value -= umin_val;  in adjust_scalar_min_max_vals()
2969 		dst_reg->var_off = tnum_sub(dst_reg->var_off, src_reg.var_off);  in adjust_scalar_min_max_vals()
2972 		dst_reg->var_off = tnum_mul(dst_reg->var_off, src_reg.var_off);  in adjust_scalar_min_max_vals()
2973 		if (smin_val < 0 || dst_reg->smin_value < 0) {  in adjust_scalar_min_max_vals()
2975 			__mark_reg_unbounded(dst_reg);  in adjust_scalar_min_max_vals()
2976 			__update_reg_bounds(dst_reg);  in adjust_scalar_min_max_vals()
2982 		if (umax_val > U32_MAX || dst_reg->umax_value > U32_MAX) {  in adjust_scalar_min_max_vals()
2984 			__mark_reg_unbounded(dst_reg);  in adjust_scalar_min_max_vals()
2986 			__update_reg_bounds(dst_reg);  in adjust_scalar_min_max_vals()
2989 		dst_reg->umin_value *= umin_val;  in adjust_scalar_min_max_vals()
2990 		dst_reg->umax_value *= umax_val;  in adjust_scalar_min_max_vals()
2991 		if (dst_reg->umax_value > S64_MAX) {  in adjust_scalar_min_max_vals()
2993 			dst_reg->smin_value = S64_MIN;  in adjust_scalar_min_max_vals()
2994 			dst_reg->smax_value = S64_MAX;  in adjust_scalar_min_max_vals()
2996 			dst_reg->smin_value = dst_reg->umin_value;  in adjust_scalar_min_max_vals()
2997 			dst_reg->smax_value = dst_reg->umax_value;  in adjust_scalar_min_max_vals()
3002 			__mark_reg_known(dst_reg, dst_reg->var_off.value &  in adjust_scalar_min_max_vals()
3009 		dst_reg->var_off = tnum_and(dst_reg->var_off, src_reg.var_off);  in adjust_scalar_min_max_vals()
3010 		dst_reg->umin_value = dst_reg->var_off.value;  in adjust_scalar_min_max_vals()
3011 		dst_reg->umax_value = min(dst_reg->umax_value, umax_val);  in adjust_scalar_min_max_vals()
3012 		if (dst_reg->smin_value < 0 || smin_val < 0) {  in adjust_scalar_min_max_vals()
3016 			dst_reg->smin_value = S64_MIN;  in adjust_scalar_min_max_vals()
3017 			dst_reg->smax_value = S64_MAX;  in adjust_scalar_min_max_vals()
3022 			dst_reg->smin_value = dst_reg->umin_value;  in adjust_scalar_min_max_vals()
3023 			dst_reg->smax_value = dst_reg->umax_value;  in adjust_scalar_min_max_vals()
3026 		__update_reg_bounds(dst_reg);  in adjust_scalar_min_max_vals()
3030 			__mark_reg_known(dst_reg, dst_reg->var_off.value |  in adjust_scalar_min_max_vals()
3037 		dst_reg->var_off = tnum_or(dst_reg->var_off, src_reg.var_off);  in adjust_scalar_min_max_vals()
3038 		dst_reg->umin_value = max(dst_reg->umin_value, umin_val);  in adjust_scalar_min_max_vals()
3039 		dst_reg->umax_value = dst_reg->var_off.value |  in adjust_scalar_min_max_vals()
3040 				      dst_reg->var_off.mask;  in adjust_scalar_min_max_vals()
3041 		if (dst_reg->smin_value < 0 || smin_val < 0) {  in adjust_scalar_min_max_vals()
3045 			dst_reg->smin_value = S64_MIN;  in adjust_scalar_min_max_vals()
3046 			dst_reg->smax_value = S64_MAX;  in adjust_scalar_min_max_vals()
3051 			dst_reg->smin_value = dst_reg->umin_value;  in adjust_scalar_min_max_vals()
3052 			dst_reg->smax_value = dst_reg->umax_value;  in adjust_scalar_min_max_vals()
3055 		__update_reg_bounds(dst_reg);  in adjust_scalar_min_max_vals()
3062 			mark_reg_unknown(env, regs, insn->dst_reg);  in adjust_scalar_min_max_vals()
3068 		dst_reg->smin_value = S64_MIN;  in adjust_scalar_min_max_vals()
3069 		dst_reg->smax_value = S64_MAX;  in adjust_scalar_min_max_vals()
3071 		if (dst_reg->umax_value > 1ULL << (63 - umax_val)) {  in adjust_scalar_min_max_vals()
3072 			dst_reg->umin_value = 0;  in adjust_scalar_min_max_vals()
3073 			dst_reg->umax_value = U64_MAX;  in adjust_scalar_min_max_vals()
3075 			dst_reg->umin_value <<= umin_val;  in adjust_scalar_min_max_vals()
3076 			dst_reg->umax_value <<= umax_val;  in adjust_scalar_min_max_vals()
3078 		dst_reg->var_off = tnum_lshift(dst_reg->var_off, umin_val);  in adjust_scalar_min_max_vals()
3080 		__update_reg_bounds(dst_reg);  in adjust_scalar_min_max_vals()
3087 			mark_reg_unknown(env, regs, insn->dst_reg);  in adjust_scalar_min_max_vals()
3104 		dst_reg->smin_value = S64_MIN;  in adjust_scalar_min_max_vals()
3105 		dst_reg->smax_value = S64_MAX;  in adjust_scalar_min_max_vals()
3106 		dst_reg->var_off = tnum_rshift(dst_reg->var_off, umin_val);  in adjust_scalar_min_max_vals()
3107 		dst_reg->umin_value >>= umax_val;  in adjust_scalar_min_max_vals()
3108 		dst_reg->umax_value >>= umin_val;  in adjust_scalar_min_max_vals()
3110 		__update_reg_bounds(dst_reg);  in adjust_scalar_min_max_vals()
3117 			mark_reg_unknown(env, regs, insn->dst_reg);  in adjust_scalar_min_max_vals()
3124 		dst_reg->smin_value >>= umin_val;  in adjust_scalar_min_max_vals()
3125 		dst_reg->smax_value >>= umin_val;  in adjust_scalar_min_max_vals()
3126 		dst_reg->var_off = tnum_arshift(dst_reg->var_off, umin_val);  in adjust_scalar_min_max_vals()
3131 		dst_reg->umin_value = 0;  in adjust_scalar_min_max_vals()
3132 		dst_reg->umax_value = U64_MAX;  in adjust_scalar_min_max_vals()
3133 		__update_reg_bounds(dst_reg);  in adjust_scalar_min_max_vals()
3136 		mark_reg_unknown(env, regs, insn->dst_reg);  in adjust_scalar_min_max_vals()
3142 		coerce_reg_to_size(dst_reg, 4);  in adjust_scalar_min_max_vals()
3145 	__reg_deduce_bounds(dst_reg);  in adjust_scalar_min_max_vals()
3146 	__reg_bound_offset(dst_reg);  in adjust_scalar_min_max_vals()
3158 	struct bpf_reg_state *regs = state->regs, *dst_reg, *src_reg;  in adjust_reg_min_max_vals()  local
3162 	dst_reg = &regs[insn->dst_reg];  in adjust_reg_min_max_vals()
3164 	if (dst_reg->type != SCALAR_VALUE)  in adjust_reg_min_max_vals()
3165 		ptr_reg = dst_reg;  in adjust_reg_min_max_vals()
3169 			if (dst_reg->type != SCALAR_VALUE) {  in adjust_reg_min_max_vals()
3175 					mark_reg_unknown(env, regs, insn->dst_reg);  in adjust_reg_min_max_vals()
3179 					insn->dst_reg,  in adjust_reg_min_max_vals()
3188 							       src_reg, dst_reg);  in adjust_reg_min_max_vals()
3193 						       dst_reg, src_reg);  in adjust_reg_min_max_vals()
3218 	return adjust_scalar_min_max_vals(env, insn, dst_reg, *src_reg);  in adjust_reg_min_max_vals()
3246 		err = check_reg_arg(env, insn->dst_reg, SRC_OP);  in check_alu_op()
3250 		if (is_pointer_value(env, insn->dst_reg)) {  in check_alu_op()
3252 				insn->dst_reg);  in check_alu_op()
3257 		err = check_reg_arg(env, insn->dst_reg, DST_OP);  in check_alu_op()
3281 		err = check_reg_arg(env, insn->dst_reg, DST_OP_NO_MARK);  in check_alu_op()
3290 				regs[insn->dst_reg] = regs[insn->src_reg];  in check_alu_op()
3291 				regs[insn->dst_reg].live |= REG_LIVE_WRITTEN;  in check_alu_op()
3300 				mark_reg_unknown(env, regs, insn->dst_reg);  in check_alu_op()
3301 				coerce_reg_to_size(&regs[insn->dst_reg], 4);  in check_alu_op()
3308 			mark_reg_unknown(env, regs, insn->dst_reg);  in check_alu_op()
3309 			regs[insn->dst_reg].type = SCALAR_VALUE;  in check_alu_op()
3311 				__mark_reg_known(regs + insn->dst_reg,  in check_alu_op()
3314 				__mark_reg_known(regs + insn->dst_reg,  in check_alu_op()
3342 		err = check_reg_arg(env, insn->dst_reg, SRC_OP);  in check_alu_op()
3368 		err = check_reg_arg(env, insn->dst_reg, DST_OP_NO_MARK);  in check_alu_op()
3379 				   struct bpf_reg_state *dst_reg,  in find_good_pkt_pointers()  argument
3388 	if (dst_reg->off < 0 ||  in find_good_pkt_pointers()
3389 	    (dst_reg->off == 0 && range_right_open))  in find_good_pkt_pointers()
3393 	if (dst_reg->umax_value > MAX_PACKET_OFF ||  in find_good_pkt_pointers()
3394 	    dst_reg->umax_value + dst_reg->off > MAX_PACKET_OFF)  in find_good_pkt_pointers()
3400 	new_range = dst_reg->off;  in find_good_pkt_pointers()
3452 		if (regs[i].type == type && regs[i].id == dst_reg->id)  in find_good_pkt_pointers()
3462 			if (reg->type == type && reg->id == dst_reg->id)  in find_good_pkt_pointers()
3622 				  struct bpf_reg_state *dst_reg)  in __reg_combine_min_max()  argument
3624 	src_reg->umin_value = dst_reg->umin_value = max(src_reg->umin_value,  in __reg_combine_min_max()
3625 							dst_reg->umin_value);  in __reg_combine_min_max()
3626 	src_reg->umax_value = dst_reg->umax_value = min(src_reg->umax_value,  in __reg_combine_min_max()
3627 							dst_reg->umax_value);  in __reg_combine_min_max()
3628 	src_reg->smin_value = dst_reg->smin_value = max(src_reg->smin_value,  in __reg_combine_min_max()
3629 							dst_reg->smin_value);  in __reg_combine_min_max()
3630 	src_reg->smax_value = dst_reg->smax_value = min(src_reg->smax_value,  in __reg_combine_min_max()
3631 							dst_reg->smax_value);  in __reg_combine_min_max()
3632 	src_reg->var_off = dst_reg->var_off = tnum_intersect(src_reg->var_off,  in __reg_combine_min_max()
3633 							     dst_reg->var_off);  in __reg_combine_min_max()
3636 	__update_reg_bounds(dst_reg);  in __reg_combine_min_max()
3639 	__reg_deduce_bounds(dst_reg);  in __reg_combine_min_max()
3642 	__reg_bound_offset(dst_reg);  in __reg_combine_min_max()
3648 	__update_reg_bounds(dst_reg);  in __reg_combine_min_max()
3724 				   struct bpf_reg_state *dst_reg,  in try_match_pkt_pointers()  argument
3734 		if ((dst_reg->type == PTR_TO_PACKET &&  in try_match_pkt_pointers()
3736 		    (dst_reg->type == PTR_TO_PACKET_META &&  in try_match_pkt_pointers()
3739 			find_good_pkt_pointers(this_branch, dst_reg,  in try_match_pkt_pointers()
3740 					       dst_reg->type, false);  in try_match_pkt_pointers()
3741 		} else if ((dst_reg->type == PTR_TO_PACKET_END &&  in try_match_pkt_pointers()
3743 			   (reg_is_init_pkt_pointer(dst_reg, PTR_TO_PACKET) &&  in try_match_pkt_pointers()
3753 		if ((dst_reg->type == PTR_TO_PACKET &&  in try_match_pkt_pointers()
3755 		    (dst_reg->type == PTR_TO_PACKET_META &&  in try_match_pkt_pointers()
3758 			find_good_pkt_pointers(other_branch, dst_reg,  in try_match_pkt_pointers()
3759 					       dst_reg->type, true);  in try_match_pkt_pointers()
3760 		} else if ((dst_reg->type == PTR_TO_PACKET_END &&  in try_match_pkt_pointers()
3762 			   (reg_is_init_pkt_pointer(dst_reg, PTR_TO_PACKET) &&  in try_match_pkt_pointers()
3772 		if ((dst_reg->type == PTR_TO_PACKET &&  in try_match_pkt_pointers()
3774 		    (dst_reg->type == PTR_TO_PACKET_META &&  in try_match_pkt_pointers()
3777 			find_good_pkt_pointers(this_branch, dst_reg,  in try_match_pkt_pointers()
3778 					       dst_reg->type, true);  in try_match_pkt_pointers()
3779 		} else if ((dst_reg->type == PTR_TO_PACKET_END &&  in try_match_pkt_pointers()
3781 			   (reg_is_init_pkt_pointer(dst_reg, PTR_TO_PACKET) &&  in try_match_pkt_pointers()
3791 		if ((dst_reg->type == PTR_TO_PACKET &&  in try_match_pkt_pointers()
3793 		    (dst_reg->type == PTR_TO_PACKET_META &&  in try_match_pkt_pointers()
3796 			find_good_pkt_pointers(other_branch, dst_reg,  in try_match_pkt_pointers()
3797 					       dst_reg->type, false);  in try_match_pkt_pointers()
3798 		} else if ((dst_reg->type == PTR_TO_PACKET_END &&  in try_match_pkt_pointers()
3800 			   (reg_is_init_pkt_pointer(dst_reg, PTR_TO_PACKET) &&  in try_match_pkt_pointers()
3822 	struct bpf_reg_state *dst_reg, *other_branch_regs;  in check_cond_jmp_op()  local
3855 	err = check_reg_arg(env, insn->dst_reg, SRC_OP);  in check_cond_jmp_op()
3859 	dst_reg = &regs[insn->dst_reg];  in check_cond_jmp_op()
3864 	    dst_reg->type == SCALAR_VALUE &&  in check_cond_jmp_op()
3865 	    tnum_is_const(dst_reg->var_off)) {  in check_cond_jmp_op()
3866 		if ((opcode == BPF_JEQ && dst_reg->var_off.value == insn->imm) ||  in check_cond_jmp_op()
3867 		    (opcode == BPF_JNE && dst_reg->var_off.value != insn->imm)) {  in check_cond_jmp_op()
3895 		if (dst_reg->type == SCALAR_VALUE &&  in check_cond_jmp_op()
3898 				reg_set_min_max(&other_branch_regs[insn->dst_reg],  in check_cond_jmp_op()
3899 						dst_reg, regs[insn->src_reg].var_off.value,  in check_cond_jmp_op()
3901 			else if (tnum_is_const(dst_reg->var_off))  in check_cond_jmp_op()
3904 						    dst_reg->var_off.value, opcode);  in check_cond_jmp_op()
3908 						    &other_branch_regs[insn->dst_reg],  in check_cond_jmp_op()
3910 						    &regs[insn->dst_reg], opcode);  in check_cond_jmp_op()
3912 	} else if (dst_reg->type == SCALAR_VALUE) {  in check_cond_jmp_op()
3913 		reg_set_min_max(&other_branch_regs[insn->dst_reg],  in check_cond_jmp_op()
3914 					dst_reg, insn->imm, opcode);  in check_cond_jmp_op()
3920 	    dst_reg->type == PTR_TO_MAP_VALUE_OR_NULL) {  in check_cond_jmp_op()
3924 		mark_map_regs(this_branch, insn->dst_reg, opcode == BPF_JNE);  in check_cond_jmp_op()
3925 		mark_map_regs(other_branch, insn->dst_reg, opcode == BPF_JEQ);  in check_cond_jmp_op()
3926 	} else if (!try_match_pkt_pointers(insn, dst_reg, &regs[insn->src_reg],  in check_cond_jmp_op()
3928 		   is_pointer_value(env, insn->dst_reg)) {  in check_cond_jmp_op()
3930 			insn->dst_reg);  in check_cond_jmp_op()
3961 	err = check_reg_arg(env, insn->dst_reg, DST_OP);  in check_ld_imm()
3968 		regs[insn->dst_reg].type = SCALAR_VALUE;  in check_ld_imm()
3969 		__mark_reg_known(&regs[insn->dst_reg], imm);  in check_ld_imm()
3976 	regs[insn->dst_reg].type = CONST_PTR_TO_MAP;  in check_ld_imm()
3977 	regs[insn->dst_reg].map_ptr = ld_imm64_to_map_ptr(insn);  in check_ld_imm()
4036 	if (insn->dst_reg != BPF_REG_0 || insn->off != 0 ||  in check_ld_abs()
4840 			err = check_reg_arg(env, insn->dst_reg, DST_OP_NO_MARK);  in do_check()
4851 					       insn->dst_reg, false);  in do_check()
4894 			err = check_reg_arg(env, insn->dst_reg, SRC_OP);  in do_check()
4898 			dst_reg_type = regs[insn->dst_reg].type;  in do_check()
4901 			err = check_mem_access(env, insn_idx, insn->dst_reg, insn->off,  in do_check()
4925 			err = check_reg_arg(env, insn->dst_reg, SRC_OP);  in do_check()
4929 			if (is_ctx_reg(env, insn->dst_reg)) {  in do_check()
4931 					insn->dst_reg);  in do_check()
4936 			err = check_mem_access(env, insn_idx, insn->dst_reg, insn->off,  in do_check()
4950 				    insn->dst_reg != BPF_REG_0) {  in do_check()
4966 				    insn->dst_reg != BPF_REG_0) {  in do_check()
4978 				    insn->dst_reg != BPF_REG_0) {  in do_check()
5138 			    insn[1].dst_reg != 0 || insn[1].src_reg != 0 ||  in replace_map_fd_with_map_ptr()
5450 				insn_buf[cnt++] = BPF_ALU32_IMM(BPF_AND, insn->dst_reg,  in convert_ctx_accesses()
5453 				insn_buf[cnt++] = BPF_ALU64_IMM(BPF_AND, insn->dst_reg,  in convert_ctx_accesses()
5685 				BPF_ALU32_REG(BPF_XOR, insn->dst_reg, insn->dst_reg),  in fixup_bpf_calls()