2776 	struct bpf_reg_state *ptr_reg = NULL, *value_reg = NULL;  in check_stack_write_var_off()  local
2784 	ptr_reg = &cur->regs[ptr_regno];  in check_stack_write_var_off()
2785 	min_off = ptr_reg->smin_value + off;  in check_stack_write_var_off()
2786 	max_off = ptr_reg->smax_value + off + size;  in check_stack_write_var_off()
6638 static int retrieve_ptr_limit(const struct bpf_reg_state *ptr_reg,  in retrieve_ptr_limit()  argument
6643 	switch (ptr_reg->type) {  in retrieve_ptr_limit()
6651 		ptr_limit = -(ptr_reg->var_off.value + ptr_reg->off);  in retrieve_ptr_limit()
6654 		max = ptr_reg->map_ptr->value_size;  in retrieve_ptr_limit()
6656 			     ptr_reg->smin_value :  in retrieve_ptr_limit()
6657 			     ptr_reg->umax_value) + ptr_reg->off;  in retrieve_ptr_limit()
6736 			    const struct bpf_reg_state *ptr_reg,  in sanitize_ptr_alu()  argument
6746 	bool ptr_is_dst_reg = ptr_reg == dst_reg;  in sanitize_ptr_alu()
6772 	err = retrieve_ptr_limit(ptr_reg, &alu_limit, info->mask_to_left);  in sanitize_ptr_alu()
6821 		*dst_reg = *ptr_reg;  in sanitize_ptr_alu()
6955 				   const struct bpf_reg_state *ptr_reg,  in adjust_ptr_min_max_vals()  argument
6963 	    smin_ptr = ptr_reg->smin_value, smax_ptr = ptr_reg->smax_value;  in adjust_ptr_min_max_vals()
6965 	    umin_ptr = ptr_reg->umin_value, umax_ptr = ptr_reg->umax_value;  in adjust_ptr_min_max_vals()
6995 	switch (ptr_reg->type) {  in adjust_ptr_min_max_vals()
6998 			dst, reg_type_str[ptr_reg->type]);  in adjust_ptr_min_max_vals()
7014 			dst, reg_type_str[ptr_reg->type]);  in adjust_ptr_min_max_vals()
7023 	dst_reg->type = ptr_reg->type;  in adjust_ptr_min_max_vals()
7024 	dst_reg->id = ptr_reg->id;  in adjust_ptr_min_max_vals()
7026 	if (!check_reg_sane_offset(env, off_reg, ptr_reg->type) ||  in adjust_ptr_min_max_vals()
7027 	    !check_reg_sane_offset(env, ptr_reg, ptr_reg->type))  in adjust_ptr_min_max_vals()
7034 		ret = sanitize_ptr_alu(env, insn, ptr_reg, off_reg, dst_reg,  in adjust_ptr_min_max_vals()
7045 		if (known && (ptr_reg->off + smin_val ==  in adjust_ptr_min_max_vals()
7046 			      (s64)(s32)(ptr_reg->off + smin_val))) {  in adjust_ptr_min_max_vals()
7052 			dst_reg->var_off = ptr_reg->var_off;  in adjust_ptr_min_max_vals()
7053 			dst_reg->off = ptr_reg->off + smin_val;  in adjust_ptr_min_max_vals()
7054 			dst_reg->raw = ptr_reg->raw;  in adjust_ptr_min_max_vals()
7082 		dst_reg->var_off = tnum_add(ptr_reg->var_off, off_reg->var_off);  in adjust_ptr_min_max_vals()
7083 		dst_reg->off = ptr_reg->off;  in adjust_ptr_min_max_vals()
7084 		dst_reg->raw = ptr_reg->raw;  in adjust_ptr_min_max_vals()
7085 		if (reg_is_pkt_pointer(ptr_reg)) {  in adjust_ptr_min_max_vals()
7102 		if (ptr_reg->type == PTR_TO_STACK) {  in adjust_ptr_min_max_vals()
7107 		if (known && (ptr_reg->off - smin_val ==  in adjust_ptr_min_max_vals()
7108 			      (s64)(s32)(ptr_reg->off - smin_val))) {  in adjust_ptr_min_max_vals()
7114 			dst_reg->var_off = ptr_reg->var_off;  in adjust_ptr_min_max_vals()
7115 			dst_reg->id = ptr_reg->id;  in adjust_ptr_min_max_vals()
7116 			dst_reg->off = ptr_reg->off - smin_val;  in adjust_ptr_min_max_vals()
7117 			dst_reg->raw = ptr_reg->raw;  in adjust_ptr_min_max_vals()
7141 		dst_reg->var_off = tnum_sub(ptr_reg->var_off, off_reg->var_off);  in adjust_ptr_min_max_vals()
7142 		dst_reg->off = ptr_reg->off;  in adjust_ptr_min_max_vals()
7143 		dst_reg->raw = ptr_reg->raw;  in adjust_ptr_min_max_vals()
7144 		if (reg_is_pkt_pointer(ptr_reg)) {  in adjust_ptr_min_max_vals()
7165 	if (!check_reg_sane_offset(env, dst_reg, ptr_reg->type))  in adjust_ptr_min_max_vals()
7925 	struct bpf_reg_state *ptr_reg = NULL, off_reg = {0};  in adjust_reg_min_max_vals()  local
7932 		ptr_reg = dst_reg;  in adjust_reg_min_max_vals()
7965 		} else if (ptr_reg) {  in adjust_reg_min_max_vals()
7980 		if (ptr_reg) /* pointer += K */  in adjust_reg_min_max_vals()
7982 						       ptr_reg, src_reg);  in adjust_reg_min_max_vals()
7986 	if (WARN_ON_ONCE(ptr_reg)) {  in adjust_reg_min_max_vals()