[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 64.386488][ T26] audit: type=1800 audit(1562256978.225:25): pid=8948 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 64.409290][ T26] audit: type=1800 audit(1562256978.225:26): pid=8948 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 64.448330][ T26] audit: type=1800 audit(1562256978.225:27): pid=8948 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.198' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 75.567215][ T9104] ------------[ cut here ]------------ [ 75.572684][ T9104] verifier backtracking bug [ 75.572764][ T9104] WARNING: CPU: 0 PID: 9104 at kernel/bpf/verifier.c:1785 __mark_chain_precision+0x19bb/0x1ee0 [ 75.587563][ T9104] Kernel panic - not syncing: panic_on_warn set ... [ 75.594153][ T9104] CPU: 0 PID: 9104 Comm: syz-executor284 Not tainted 5.2.0-rc5+ #34 [ 75.602114][ T9104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 75.612172][ T9104] Call Trace: [ 75.615454][ T9104] dump_stack+0x172/0x1f0 [ 75.619949][ T9104] ? __mark_chain_precision+0x1970/0x1ee0 [ 75.625680][ T9104] panic+0x2cb/0x744 [ 75.629591][ T9104] ? __warn_printk+0xf3/0xf3 [ 75.634556][ T9104] ? __mark_chain_precision+0x19bb/0x1ee0 [ 75.640271][ T9104] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 75.646574][ T9104] ? __warn.cold+0x5/0x4d [ 75.650926][ T9104] ? __warn+0xe8/0x1d0 [ 75.655026][ T9104] ? __mark_chain_precision+0x19bb/0x1ee0 [ 75.660738][ T9104] __warn.cold+0x20/0x4d [ 75.665329][ T9104] ? vprintk_emit+0x1ea/0x700 [ 75.670022][ T9104] ? __mark_chain_precision+0x19bb/0x1ee0 [ 75.676012][ T9104] report_bug+0x263/0x2b0 [ 75.680518][ T9104] do_error_trap+0x11b/0x200 [ 75.685186][ T9104] do_invalid_op+0x37/0x50 [ 75.689606][ T9104] ? __mark_chain_precision+0x19bb/0x1ee0 [ 75.695317][ T9104] invalid_op+0x14/0x20 [ 75.699472][ T9104] RIP: 0010:__mark_chain_precision+0x19bb/0x1ee0 [ 75.705815][ T9104] Code: 08 31 ff 89 de e8 95 ba f2 ff 84 db 0f 85 ce fe ff ff e8 48 b9 f2 ff 48 c7 c7 e0 44 91 87 c6 05 1c 15 1f 08 01 e8 03 f1 c4 ff <0f> 0b 41 bc f2 ff ff ff e9 af fe ff ff e8 d3 3c 2c 00 e9 c2 e7 ff [ 75.725780][ T9104] RSP: 0018:ffff88809f04f380 EFLAGS: 00010286 [ 75.731857][ T9104] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 75.739826][ T9104] RDX: 0000000000000000 RSI: ffffffff815ad926 RDI: ffffed1013e09e62 [ 75.747850][ T9104] RBP: ffff88809f04f4d0 R08: ffff88809987a540 R09: 0000000000000000 [ 75.756078][ T9104] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 75.764047][ T9104] R13: ffff88809af0c280 R14: 0000000000000001 R15: ffff88809f65cb00 [ 75.773133][ T9104] ? vprintk_func+0x86/0x189 [ 75.777760][ T9104] ? print_verifier_state+0x11b0/0x11b0 [ 75.783475][ T9104] ? __x64_sys_bpf+0x73/0xb0 [ 75.788055][ T9104] ? bpf_verifier_log_write+0x240/0x240 [ 75.793599][ T9104] ? check_reg_arg+0x1f1/0x480 [ 75.798364][ T9104] ? apparmor_capable+0x2ed/0x630 [ 75.803394][ T9104] check_cond_jmp_op+0xcd8/0x3c30 [ 75.808413][ T9104] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 75.814037][ T9104] ? find_held_lock+0x35/0x130 [ 75.819761][ T9104] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 75.825484][ T9104] ? check_func_arg+0x11c0/0x11c0 [ 75.830620][ T9104] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 75.836866][ T9104] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 75.843108][ T9104] ? krealloc+0x7b/0xd0 [ 75.847279][ T9104] ? krealloc+0x7b/0xd0 [ 75.851434][ T9104] ? rcu_read_lock_sched_held+0x110/0x130 [ 75.857144][ T9104] ? kfree+0x1f7/0x220 [ 75.861201][ T9104] ? krealloc+0x7b/0xd0 [ 75.865373][ T9104] ? push_jmp_history.isra.0+0x1a9/0x260 [ 75.871016][ T9104] do_check+0x60f4/0x8a20 [ 75.875335][ T9104] ? debug_check_no_obj_freed+0x200/0x464 [ 75.881075][ T9104] ? check_helper_call+0x3210/0x3210 [ 75.886351][ T9104] ? kfree+0x170/0x220 [ 75.890403][ T9104] ? kvfree+0x61/0x70 [ 75.894393][ T9104] ? kfree+0x170/0x220 [ 75.898530][ T9104] ? lockdep_hardirqs_on+0x418/0x5d0 [ 75.903807][ T9104] ? trace_hardirqs_on+0x67/0x220 [ 75.908818][ T9104] ? kvfree+0x61/0x70 [ 75.912787][ T9104] bpf_check+0x6f99/0x9950 [ 75.917207][ T9104] ? do_check+0x8a20/0x8a20 [ 75.921784][ T9104] ? ktime_get_with_offset+0x13a/0x360 [ 75.927375][ T9104] ? bpf_prog_load+0xdce/0x1670 [ 75.932209][ T9104] ? ktime_get_with_offset+0x13a/0x360 [ 75.937679][ T9104] ? lockdep_hardirqs_on+0x418/0x5d0 [ 75.942955][ T9104] ? trace_hardirqs_on+0x67/0x220 [ 75.948003][ T9104] ? memset+0x32/0x40 [ 75.951987][ T9104] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 75.958230][ T9104] ? bpf_obj_name_cpy+0x13f/0x190 [ 75.963242][ T9104] bpf_prog_load+0xe68/0x1670 [ 75.967981][ T9104] ? bpf_prog_new_fd+0x60/0x60 [ 75.972742][ T9104] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 75.978978][ T9104] ? security_bpf+0x8b/0xc0 [ 75.985031][ T9104] __do_sys_bpf+0xa20/0x42d0 [ 75.989703][ T9104] ? bpf_prog_load+0x1670/0x1670 [ 75.994621][ T9104] ? __do_page_fault+0x623/0xda0 [ 75.999657][ T9104] ? find_held_lock+0x35/0x130 [ 76.004433][ T9104] ? __do_page_fault+0x623/0xda0 [ 76.009361][ T9104] ? lock_downgrade+0x880/0x880 [ 76.014199][ T9104] ? kasan_check_read+0x11/0x20 [ 76.019056][ T9104] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 76.024527][ T9104] ? do_syscall_64+0x26/0x680 [ 76.029189][ T9104] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 76.035266][ T9104] ? do_syscall_64+0x26/0x680 [ 76.039930][ T9104] __x64_sys_bpf+0x73/0xb0 [ 76.044332][ T9104] do_syscall_64+0xfd/0x680 [ 76.048821][ T9104] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 76.054723][ T9104] RIP: 0033:0x440369 [ 76.058613][ T9104] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 76.078211][ T9104] RSP: 002b:00007ffca85a2fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 76.086822][ T9104] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440369 [ 76.094807][ T9104] RDX: 0000000000000048 RSI: 0000000020000200 RDI: 0000000000000005 [ 76.109236][ T9104] RBP: 00000000006ca018 R08: 0000000000000000 R09: 0000000000000000 [ 76.117212][ T9104] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000401bf0 [ 76.125406][ T9104] R13: 0000000000401c80 R14: 0000000000000000 R15: 0000000000000000 [ 76.134794][ T9104] Kernel Offset: disabled [ 76.139173][ T9104] Rebooting in 86400 seconds..