[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 55.683122][ T27] audit: type=1800 audit(1565282946.114:25): pid=8477 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 55.717121][ T27] audit: type=1800 audit(1565282946.114:26): pid=8477 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 55.764513][ T27] audit: type=1800 audit(1565282946.114:27): pid=8477 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.174' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 65.431410][ T8632] ------------[ cut here ]------------ [ 65.436896][ T8632] verifier backtracking bug [ 65.436985][ T8632] WARNING: CPU: 0 PID: 8632 at kernel/bpf/verifier.c:1785 __mark_chain_precision+0x19bb/0x1ee0 [ 65.452008][ T8632] Kernel panic - not syncing: panic_on_warn set ... [ 65.458592][ T8632] CPU: 0 PID: 8632 Comm: syz-executor809 Not tainted 5.2.0+ #41 [ 65.466196][ T8632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 65.476230][ T8632] Call Trace: [ 65.479505][ T8632] dump_stack+0x172/0x1f0 [ 65.483834][ T8632] ? __mark_chain_precision+0x18c0/0x1ee0 [ 65.489546][ T8632] panic+0x2dc/0x755 [ 65.493437][ T8632] ? add_taint.cold+0x16/0x16 [ 65.499075][ T8632] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 65.505299][ T8632] ? __warn.cold+0x5/0x4c [ 65.509612][ T8632] ? __warn+0xe7/0x1e0 [ 65.513671][ T8632] ? __mark_chain_precision+0x19bb/0x1ee0 [ 65.519375][ T8632] __warn.cold+0x20/0x4c [ 65.523608][ T8632] ? __mark_chain_precision+0x19bb/0x1ee0 [ 65.529324][ T8632] report_bug+0x263/0x2b0 [ 65.533650][ T8632] do_error_trap+0x11b/0x200 [ 65.538254][ T8632] do_invalid_op+0x37/0x50 [ 65.542647][ T8632] ? __mark_chain_precision+0x19bb/0x1ee0 [ 65.548358][ T8632] invalid_op+0x14/0x20 [ 65.552507][ T8632] RIP: 0010:__mark_chain_precision+0x19bb/0x1ee0 [ 65.558831][ T8632] Code: 08 31 ff 89 de e8 d5 b2 f2 ff 84 db 0f 85 ce fe ff ff e8 88 b1 f2 ff 48 c7 c7 a0 78 91 87 c6 05 3e 2d 1f 08 01 e8 6d 5b c4 ff <0f> 0b 41 bc f2 ff ff ff e9 af fe ff ff e8 33 97 2c 00 e9 c2 e7 ff [ 65.578445][ T8632] RSP: 0018:ffff8880a924f5d8 EFLAGS: 00010286 [ 65.584669][ T8632] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 65.592619][ T8632] RDX: 0000000000000000 RSI: ffffffff815c1016 RDI: ffffed1015249ead [ 65.600569][ T8632] RBP: ffff8880a924f728 R08: ffff888093622040 R09: 0000000000000000 [ 65.608607][ T8632] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 65.616562][ T8632] R13: ffff88809a714440 R14: 0000000000000001 R15: ffff888099e6cd00 [ 65.624531][ T8632] ? vprintk_func+0x86/0x189 [ 65.629120][ T8632] ? __mark_chain_precision+0x19bb/0x1ee0 [ 65.634822][ T8632] ? print_verifier_state+0x11b0/0x11b0 [ 65.641196][ T8632] ? bpf_verifier_log_write+0x240/0x240 [ 65.646740][ T8632] ? krealloc+0xa6/0xd0 [ 65.650888][ T8632] ? push_jmp_history.isra.0+0x1a9/0x260 [ 65.656499][ T8632] do_check+0x36d5/0x8a50 [ 65.660814][ T8632] ? find_held_lock+0x35/0x130 [ 65.665607][ T8632] ? check_helper_call+0x3210/0x3210 [ 65.670914][ T8632] ? kfree+0x226/0x2c0 [ 65.674966][ T8632] ? kvfree+0x61/0x70 [ 65.678928][ T8632] ? kfree+0x226/0x2c0 [ 65.682980][ T8632] ? lockdep_hardirqs_on+0x418/0x5d0 [ 65.688250][ T8632] ? trace_hardirqs_on+0x67/0x240 [ 65.693252][ T8632] ? kvfree+0x61/0x70 [ 65.697217][ T8632] bpf_check+0x6f99/0x9950 [ 65.701639][ T8632] ? do_check+0x8a50/0x8a50 [ 65.706128][ T8632] ? lock_downgrade+0x920/0x920 [ 65.710986][ T8632] ? ktime_get_with_offset+0x13a/0x360 [ 65.716426][ T8632] ? bpf_prog_load+0xdce/0x1670 [ 65.721257][ T8632] ? ktime_get_with_offset+0x13a/0x360 [ 65.726696][ T8632] ? lockdep_hardirqs_on+0x418/0x5d0 [ 65.731960][ T8632] ? trace_hardirqs_on+0x67/0x240 [ 65.736961][ T8632] ? memset+0x32/0x40 [ 65.740929][ T8632] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 65.747236][ T8632] ? bpf_obj_name_cpy+0x13f/0x190 [ 65.752240][ T8632] bpf_prog_load+0xe68/0x1670 [ 65.756899][ T8632] ? bpf_prog_new_fd+0x60/0x60 [ 65.761649][ T8632] ? lock_downgrade+0x920/0x920 [ 65.766490][ T8632] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 65.772716][ T8632] ? security_bpf+0x8b/0xc0 [ 65.777291][ T8632] __do_sys_bpf+0xa46/0x42f0 [ 65.781879][ T8632] ? bpf_prog_load+0x1670/0x1670 [ 65.786805][ T8632] ? lock_downgrade+0x920/0x920 [ 65.791640][ T8632] ? __kasan_check_write+0x14/0x20 [ 65.796730][ T8632] ? up_read+0x159/0x570 [ 65.800961][ T8632] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 65.806402][ T8632] ? do_syscall_64+0x26/0x6a0 [ 65.811081][ T8632] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 65.817130][ T8632] ? do_syscall_64+0x26/0x6a0 [ 65.821820][ T8632] __x64_sys_bpf+0x73/0xb0 [ 65.826222][ T8632] do_syscall_64+0xfd/0x6a0 [ 65.830709][ T8632] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 65.836578][ T8632] RIP: 0033:0x4402b9 [ 65.840457][ T8632] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 65.860039][ T8632] RSP: 002b:00007ffd585507c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 65.868435][ T8632] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004402b9 [ 65.876387][ T8632] RDX: 0000000000000048 RSI: 0000000020000200 RDI: 0000000000000005 [ 65.885117][ T8632] RBP: 00000000006ca018 R08: 0000000000000000 R09: 0000000000000000 [ 65.893069][ T8632] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000401b40 [ 65.901019][ T8632] R13: 0000000000401bd0 R14: 0000000000000000 R15: 0000000000000000 [ 65.910468][ T8632] Kernel Offset: disabled [ 65.914964][ T8632] Rebooting in 86400 seconds..