./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2213386644 <...> DUID 00:04:7c:7c:42:18:3f:30:8d:b4:e2:57:c6:a5:0a:a4:65:8b forked to background, child pid 4660 [ 40.333071][ T4661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.352309][ T4661] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.22' (ECDSA) to the list of known hosts. execve("./syz-executor2213386644", ["./syz-executor2213386644"], 0x7ffd010459f0 /* 10 vars */) = 0 brk(NULL) = 0x555556814000 brk(0x555556814c40) = 0x555556814c40 arch_prctl(ARCH_SET_FS, 0x555556814300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor2213386644", 4096) = 28 brk(0x555556835c40) = 0x555556835c40 brk(0x555556836000) = 0x555556836000 mprotect(0x7fafe069c000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 getpid() = 4995 mkdir("./syzkaller.4iLgEV", 0700) = 0 chmod("./syzkaller.4iLgEV", 0777) = 0 chdir("./syzkaller.4iLgEV") = 0 mkdir("./0", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555568145d0) = 4996 ./strace-static-x86_64: Process 4996 attached [pid 4996] chdir("./0") = 0 [pid 4996] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4996] setpgid(0, 0) = 0 [pid 4996] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4996] write(3, "1000", 4) = 4 [pid 4996] close(3) = 0 [pid 4996] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4996] memfd_create("syzkaller", 0) = 3 [pid 4996] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fafd81c1000 [pid 4996] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 4996] munmap(0x7fafd81c1000, 2097152) = 0 [pid 4996] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 syzkaller login: [ 67.355358][ T4996] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=4996 'syz-executor221' [pid 4996] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 4996] close(3) = 0 [pid 4996] mkdir("./file1", 0777) = 0 [pid 4996] mount("/dev/loop0", "./file1", "ntfs3", MS_NOEXEC|MS_SYNCHRONOUS|MS_REC|MS_STRICTATIME, "") = 0 [pid 4996] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 4996] chdir("./file1") = 0 [pid 4996] ioctl(4, LOOP_CLR_FD) = 0 [ 67.406931][ T4996] loop0: detected capacity change from 0 to 4096 [ 67.421061][ T4996] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 67.440622][ T4996] ntfs3: loop0: Mark volume as dirty due to NTFS errors [pid 4996] close(4) = 0 [pid 4996] open("./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|0x3c, 000) = 4 [pid 4996] fallocate(4, 0, 0, 1048824) = 0 [pid 4996] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 5 [pid 4996] write(5, "22", 2) = 2 [pid 4996] sendfile(4, 4, NULL, 4294967296) = 1048576 [pid 4996] exit_group(0) = ? [pid 4996] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4996, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555556815620 /* 4 entries */, 32768) = 112 umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./0/binderfs") = 0 [ 67.477037][ T28] audit: type=1800 audit(1686169498.027:2): pid=4996 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor221" name="file1" dev="loop0" ino=30 res=0 errno=0 umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./0/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555681d660 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555681d660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./0/file1") = 0 getdents64(3, 0x555556815620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./0") = 0 mkdir("./1", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555568145d0) = 4998 ./strace-static-x86_64: Process 4998 attached [pid 4998] chdir("./1") = 0 [pid 4998] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4998] setpgid(0, 0) = 0 [pid 4998] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4998] write(3, "1000", 4) = 4 [pid 4998] close(3) = 0 [pid 4998] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4998] memfd_create("syzkaller", 0) = 3 [pid 4998] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fafd81c1000 [pid 4998] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 4998] munmap(0x7fafd81c1000, 2097152) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 4998] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 4998] close(3) = 0 [pid 4998] mkdir("./file1", 0777) = 0 [pid 4998] mount("/dev/loop0", "./file1", "ntfs3", MS_NOEXEC|MS_SYNCHRONOUS|MS_REC|MS_STRICTATIME, "") = 0 [pid 4998] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 4998] chdir("./file1") = 0 [pid 4998] ioctl(4, LOOP_CLR_FD) = 0 [pid 4998] close(4) = 0 [ 67.638469][ T4998] loop0: detected capacity change from 0 to 4096 [ 67.650500][ T4998] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 67.665626][ T4998] ntfs3: loop0: Mark volume as dirty due to NTFS errors [pid 4998] open("./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|0x3c, 000) = 4 [pid 4998] fallocate(4, 0, 0, 1048824) = 0 [pid 4998] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 5 [pid 4998] write(5, "22", 2) = 2 [ 67.705448][ T28] audit: type=1800 audit(1686169498.257:3): pid=4998 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor221" name="file1" dev="loop0" ino=30 res=0 errno=0 [ 67.721916][ T4998] FAULT_INJECTION: forcing a failure. [ 67.721916][ T4998] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 67.739221][ T4998] CPU: 1 PID: 4998 Comm: syz-executor221 Not tainted 6.4.0-rc5-syzkaller-00017-ga27648c74210 #0 [ 67.749788][ T4998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 67.759862][ T4998] Call Trace: [ 67.763158][ T4998] [ 67.766272][ T4998] dump_stack_lvl+0x1e7/0x2d0 [ 67.770993][ T4998] ? nf_tcp_handle_invalid+0x650/0x650 [ 67.776475][ T4998] ? panic+0x770/0x770 [ 67.780593][ T4998] should_fail_ex+0x3aa/0x4e0 [ 67.785291][ T4998] prepare_alloc_pages+0x1d9/0x5b0 [ 67.790433][ T4998] __alloc_pages+0x165/0x670 [ 67.795077][ T4998] ? zone_statistics+0x170/0x170 [ 67.800162][ T4998] append_pipe+0x279/0x720 [ 67.804663][ T4998] pipe_zero+0x110/0x230 [ 67.808954][ T4998] ? iov_iter_zero+0xf90/0xf90 [ 67.813757][ T4998] ? do_raw_spin_trylock+0xc8/0x1f0 [ 67.818997][ T4998] iov_iter_zero+0x27b/0xf90 [ 67.823632][ T4998] ? free_unref_page+0x1a3/0x3f0 [ 67.828590][ T4998] ? copy_page_from_iter+0x100/0x100 [ 67.833907][ T4998] ? iov_iter_revert+0x6c7/0x830 [ 67.838908][ T4998] ntfs_direct_IO+0x2d1/0x370 [ 67.843622][ T4998] generic_file_read_iter+0x337/0x540 [ 67.849051][ T4998] generic_file_splice_read+0x240/0x640 [ 67.854639][ T4998] ? direct_splice_read+0xa10/0xa10 [ 67.859880][ T4998] ? fsnotify_perm+0x42f/0x590 [ 67.864679][ T4998] splice_direct_to_actor+0x40c/0xbd0 [ 67.870111][ T4998] ? do_splice_direct+0x3d0/0x3d0 [ 67.875274][ T4998] ? pipe_to_sendpage+0x350/0x350 [ 67.880354][ T4998] ? fsnotify_perm+0x67/0x590 [ 67.885091][ T4998] ? bpf_lsm_file_permission+0x9/0x10 [ 67.890548][ T4998] do_splice_direct+0x283/0x3d0 [ 67.895557][ T4998] ? splice_direct_to_actor+0xbd0/0xbd0 [ 67.901159][ T4998] ? rcu_read_lock_any_held+0xb7/0x160 [ 67.906666][ T4998] do_sendfile+0x620/0xff0 [ 67.911109][ T4998] ? ptrace_stop+0x75a/0x970 [ 67.915727][ T4998] ? do_pwritev+0x360/0x360 [ 67.920246][ T4998] ? _raw_spin_unlock_irq+0x2e/0x50 [ 67.925460][ T4998] ? ptrace_notify+0x278/0x380 [ 67.930241][ T4998] __se_sys_sendfile64+0x17c/0x1e0 [ 67.935368][ T4998] ? __x64_sys_sendfile64+0xb0/0xb0 [ 67.940596][ T4998] ? syscall_enter_from_user_mode+0x32/0x230 [ 67.946600][ T4998] ? syscall_enter_from_user_mode+0x8c/0x230 [ 67.952598][ T4998] do_syscall_64+0x41/0xc0 [ 67.957123][ T4998] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 67.963030][ T4998] RIP: 0033:0x7fafe060e9f9 [ 67.967465][ T4998] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 67.987322][ T4998] RSP: 002b:00007ffc498558c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 67.995933][ T4998] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fafe060e9f9 [ 68.003919][ T4998] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 68.011901][ T4998] RBP: 00007ffc498558f0 R08: 0000000000000002 R09: 00007ffc49855900 [ 68.019882][ T4998] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000005 [ 68.027869][ T4998] R13: 00007ffc49855930 R14: 00007ffc49855910 R15: 0000000000000001 [ 68.035869][ T4998] [ 68.039958][ T4998] ------------[ cut here ]------------ [ 68.045549][ T4998] WARNING: CPU: 1 PID: 4998 at lib/iov_iter.c:970 iov_iter_revert+0x381/0x830 [ 68.054549][ T4998] Modules linked in: [ 68.058510][ T4998] CPU: 1 PID: 4998 Comm: syz-executor221 Not tainted 6.4.0-rc5-syzkaller-00017-ga27648c74210 #0 [ 68.069039][ T4998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 68.079192][ T4998] RIP: 0010:iov_iter_revert+0x381/0x830 [ 68.084775][ T4998] Code: 80 3c 01 00 48 8b 5c 24 18 74 08 48 89 df e8 56 69 b1 fd 4c 89 3b 48 83 c4 60 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 9f 93 59 fd <0f> 0b eb e8 48 8b 6c 24 08 48 89 e8 48 c1 e8 03 42 80 3c 38 00 74 [ 68.104586][ T4998] RSP: 0018:ffffc90003a1f7f0 EFLAGS: 00010293 [ 68.110722][ T4998] RAX: ffffffff8431eb91 RBX: ffffc90003a1f980 RCX: ffff88802c100000 [ 68.118769][ T4998] RDX: 0000000000000000 RSI: ffffffffffff1000 RDI: 000000007ffff000 [ 68.126789][ T4998] RBP: ffffffffffff1000 R08: ffffffff8431e850 R09: fffffbfff1a008b3 [ 68.134968][ T4998] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffffffff1000 [ 68.143043][ T4998] R13: ffffc90003a1f980 R14: ffffc90003a1f998 R15: 0000000000000000 [ 68.151237][ T4998] FS: 0000555556814300(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 68.160242][ T4998] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 68.166845][ T4998] CR2: 00007fafe06a0138 CR3: 0000000017acd000 CR4: 00000000003506e0 [ 68.175065][ T4998] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 68.183147][ T4998] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 68.191241][ T4998] Call Trace: [ 68.194554][ T4998] [ 68.197585][ T4998] ? __warn+0x162/0x4a0 [ 68.201791][ T4998] ? iov_iter_revert+0x381/0x830 [ 68.206764][ T4998] ? report_bug+0x2b3/0x500 [ 68.211388][ T4998] ? iov_iter_revert+0x381/0x830 [ 68.216380][ T4998] ? handle_bug+0x3d/0x70 [ 68.220811][ T4998] ? exc_invalid_op+0x1a/0x50 [ 68.225530][ T4998] ? asm_exc_invalid_op+0x1a/0x20 [ 68.230656][ T4998] ? iov_iter_revert+0x40/0x830 [ 68.235561][ T4998] ? iov_iter_revert+0x381/0x830 [ 68.240712][ T4998] ? iov_iter_revert+0x381/0x830 [ 68.245745][ T4998] ? ntfs_direct_IO+0x2d1/0x370 [ 68.250715][ T4998] generic_file_read_iter+0x3db/0x540 [ 68.256165][ T4998] generic_file_splice_read+0x240/0x640 [ 68.261861][ T4998] ? direct_splice_read+0xa10/0xa10 [ 68.267296][ T4998] ? fsnotify_perm+0x42f/0x590 [ 68.272302][ T4998] splice_direct_to_actor+0x40c/0xbd0 [ 68.277789][ T4998] ? do_splice_direct+0x3d0/0x3d0 [ 68.282864][ T4998] ? pipe_to_sendpage+0x350/0x350 [ 68.287990][ T4998] ? fsnotify_perm+0x67/0x590 [ 68.292719][ T4998] ? bpf_lsm_file_permission+0x9/0x10 [ 68.298180][ T4998] do_splice_direct+0x283/0x3d0 [ 68.303100][ T4998] ? splice_direct_to_actor+0xbd0/0xbd0 [ 68.308778][ T4998] ? rcu_read_lock_any_held+0xb7/0x160 [ 68.314326][ T4998] do_sendfile+0x620/0xff0 [ 68.318843][ T4998] ? ptrace_stop+0x75a/0x970 [ 68.323500][ T4998] ? do_pwritev+0x360/0x360 [ 68.328119][ T4998] ? _raw_spin_unlock_irq+0x2e/0x50 [ 68.333356][ T4998] ? ptrace_notify+0x278/0x380 [ 68.338235][ T4998] __se_sys_sendfile64+0x17c/0x1e0 [ 68.343417][ T4998] ? __x64_sys_sendfile64+0xb0/0xb0 [ 68.348730][ T4998] ? syscall_enter_from_user_mode+0x32/0x230 [ 68.354767][ T4998] ? syscall_enter_from_user_mode+0x8c/0x230 [ 68.360866][ T4998] do_syscall_64+0x41/0xc0 [ 68.365339][ T4998] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 68.371344][ T4998] RIP: 0033:0x7fafe060e9f9 [ 68.375800][ T4998] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 68.395596][ T4998] RSP: 002b:00007ffc498558c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 68.404155][ T4998] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fafe060e9f9 [ 68.412242][ T4998] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 68.420322][ T4998] RBP: 00007ffc498558f0 R08: 0000000000000002 R09: 00007ffc49855900 [ 68.428493][ T4998] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000005 [ 68.436521][ T4998] R13: 00007ffc49855930 R14: 00007ffc49855910 R15: 0000000000000001 [ 68.444633][ T4998] [ 68.447733][ T4998] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 68.455127][ T4998] CPU: 1 PID: 4998 Comm: syz-executor221 Not tainted 6.4.0-rc5-syzkaller-00017-ga27648c74210 #0 [ 68.465559][ T4998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 68.475733][ T4998] Call Trace: [ 68.479040][ T4998] [ 68.482008][ T4998] dump_stack_lvl+0x1e7/0x2d0 [ 68.486936][ T4998] ? nf_tcp_handle_invalid+0x650/0x650 [ 68.492422][ T4998] ? panic+0x770/0x770 [ 68.496512][ T4998] ? vscnprintf+0x5d/0x80 [ 68.500883][ T4998] panic+0x30f/0x770 [ 68.504794][ T4998] ? __warn+0x171/0x4a0 [ 68.508974][ T4998] ? __memcpy_flushcache+0x2b0/0x2b0 [ 68.514293][ T4998] __warn+0x314/0x4a0 [ 68.518300][ T4998] ? iov_iter_revert+0x381/0x830 [ 68.523269][ T4998] report_bug+0x2b3/0x500 [ 68.527698][ T4998] ? iov_iter_revert+0x381/0x830 [ 68.532709][ T4998] handle_bug+0x3d/0x70 [ 68.536885][ T4998] exc_invalid_op+0x1a/0x50 [ 68.541514][ T4998] asm_exc_invalid_op+0x1a/0x20 [ 68.546384][ T4998] RIP: 0010:iov_iter_revert+0x381/0x830 [ 68.551953][ T4998] Code: 80 3c 01 00 48 8b 5c 24 18 74 08 48 89 df e8 56 69 b1 fd 4c 89 3b 48 83 c4 60 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 9f 93 59 fd <0f> 0b eb e8 48 8b 6c 24 08 48 89 e8 48 c1 e8 03 42 80 3c 38 00 74 [ 68.571687][ T4998] RSP: 0018:ffffc90003a1f7f0 EFLAGS: 00010293 [ 68.577776][ T4998] RAX: ffffffff8431eb91 RBX: ffffc90003a1f980 RCX: ffff88802c100000 [ 68.585757][ T4998] RDX: 0000000000000000 RSI: ffffffffffff1000 RDI: 000000007ffff000 [ 68.593736][ T4998] RBP: ffffffffffff1000 R08: ffffffff8431e850 R09: fffffbfff1a008b3 [ 68.601742][ T4998] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffffffff1000 [ 68.609737][ T4998] R13: ffffc90003a1f980 R14: ffffc90003a1f998 R15: 0000000000000000 [ 68.617830][ T4998] ? iov_iter_revert+0x40/0x830 [ 68.622710][ T4998] ? iov_iter_revert+0x381/0x830 [ 68.627683][ T4998] ? ntfs_direct_IO+0x2d1/0x370 [ 68.632682][ T4998] generic_file_read_iter+0x3db/0x540 [ 68.638121][ T4998] generic_file_splice_read+0x240/0x640 [ 68.643700][ T4998] ? direct_splice_read+0xa10/0xa10 [ 68.648924][ T4998] ? fsnotify_perm+0x42f/0x590 [ 68.653713][ T4998] splice_direct_to_actor+0x40c/0xbd0 [ 68.659109][ T4998] ? do_splice_direct+0x3d0/0x3d0 [ 68.664143][ T4998] ? pipe_to_sendpage+0x350/0x350 [ 68.669185][ T4998] ? fsnotify_perm+0x67/0x590 [ 68.673881][ T4998] ? bpf_lsm_file_permission+0x9/0x10 [ 68.679273][ T4998] do_splice_direct+0x283/0x3d0 [ 68.684141][ T4998] ? splice_direct_to_actor+0xbd0/0xbd0 [ 68.689697][ T4998] ? rcu_read_lock_any_held+0xb7/0x160 [ 68.695186][ T4998] do_sendfile+0x620/0xff0 [ 68.699632][ T4998] ? ptrace_stop+0x75a/0x970 [ 68.704256][ T4998] ? do_pwritev+0x360/0x360 [ 68.708775][ T4998] ? _raw_spin_unlock_irq+0x2e/0x50 [ 68.714009][ T4998] ? ptrace_notify+0x278/0x380 [ 68.718824][ T4998] __se_sys_sendfile64+0x17c/0x1e0 [ 68.723982][ T4998] ? __x64_sys_sendfile64+0xb0/0xb0 [ 68.729214][ T4998] ? syscall_enter_from_user_mode+0x32/0x230 [ 68.735229][ T4998] ? syscall_enter_from_user_mode+0x8c/0x230 [ 68.741241][ T4998] do_syscall_64+0x41/0xc0 [ 68.745715][ T4998] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 68.751647][ T4998] RIP: 0033:0x7fafe060e9f9 [ 68.756083][ T4998] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 68.775812][ T4998] RSP: 002b:00007ffc498558c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 68.784252][ T4998] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fafe060e9f9 [ 68.792246][ T4998] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 68.800250][ T4998] RBP: 00007ffc498558f0 R08: 0000000000000002 R09: 00007ffc49855900 [ 68.808418][ T4998] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000005 [ 68.816405][ T4998] R13: 00007ffc49855930 R14: 00007ffc49855910 R15: 0000000000000001 [ 68.824412][ T4998] [ 68.827782][ T4998] Kernel Offset: disabled [ 68.832214][ T4998] Rebooting in 86400 seconds..