[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 66.247221][ T24] audit: type=1800 audit(1560618151.596:25): pid=8732 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 66.292013][ T24] audit: type=1800 audit(1560618151.596:26): pid=8732 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 66.352063][ T24] audit: type=1800 audit(1560618151.606:27): pid=8732 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.206' (ECDSA) to the list of known hosts. 2019/06/15 17:09:50 parsed 1 programs 2019/06/15 17:09:52 executed programs: 0 syzkaller login: [ 507.037354][ T8900] IPVS: ftp: loaded support on port[0] = 21 [ 507.124251][ T8900] chnl_net:caif_netlink_parms(): no params data found [ 507.159482][ T8900] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.167723][ T8900] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.176425][ T8900] device bridge_slave_0 entered promiscuous mode [ 507.185667][ T8900] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.192955][ T8900] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.201228][ T8900] device bridge_slave_1 entered promiscuous mode [ 507.222319][ T8900] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 507.232741][ T8900] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 507.253319][ T8900] team0: Port device team_slave_0 added [ 507.260634][ T8900] team0: Port device team_slave_1 added [ 507.334721][ T8900] device hsr_slave_0 entered promiscuous mode [ 507.372465][ T8900] device hsr_slave_1 entered promiscuous mode [ 507.452439][ T8900] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.459599][ T8900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.467268][ T8900] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.474591][ T8900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 507.513179][ T8900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 507.527880][ T8905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 507.548879][ T8905] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.557834][ T8905] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.567247][ T8905] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 507.582732][ T8900] 8021q: adding VLAN 0 to HW filter on device team0 [ 507.594056][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 507.602682][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.609770][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 507.620836][ T8905] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 507.629739][ T8905] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.636952][ T8905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.655144][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 507.664686][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 507.681318][ T8900] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 507.692421][ T8900] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 507.706456][ T8902] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 507.716006][ T8902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 507.725212][ T8902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 507.735305][ T8902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 507.754190][ T8900] 8021q: adding VLAN 0 to HW filter on device batadv0 2019/06/15 17:09:57 executed programs: 36 2019/06/15 17:10:02 executed programs: 77 2019/06/15 17:10:07 executed programs: 120 2019/06/15 17:10:12 executed programs: 163 2019/06/15 17:10:17 executed programs: 207 [ 536.917539][ T9904] ================================================================== [ 536.925941][ T9904] BUG: KASAN: use-after-free in ip4_string+0x471/0x4d0 [ 536.932806][ T9904] Read of size 1 at addr ffff888097a28b9a by task syz-executor.0/9904 [ 536.941052][ T9904] [ 536.943390][ T9904] CPU: 1 PID: 9904 Comm: syz-executor.0 Not tainted 5.2.0-rc4+ #51 [ 536.951274][ T9904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 536.961348][ T9904] Call Trace: [ 536.964693][ T9904] dump_stack+0x172/0x1f0 [ 536.969147][ T9904] ? ip4_string+0x471/0x4d0 [ 536.973786][ T9904] print_address_description.cold+0x7c/0x20d [ 536.979909][ T9904] ? ip4_string+0x471/0x4d0 [ 536.984629][ T9904] ? ip4_string+0x471/0x4d0 [ 536.989153][ T9904] __kasan_report.cold+0x1b/0x40 [ 536.994099][ T9904] ? ip4_string+0x471/0x4d0 [ 536.998619][ T9904] kasan_report+0x12/0x20 [ 537.002969][ T9904] __asan_report_load1_noabort+0x14/0x20 [ 537.008695][ T9904] ip4_string+0x471/0x4d0 [ 537.013089][ T9904] ? number+0xc70/0xc70 [ 537.017703][ T9904] ? mark_held_locks+0xf0/0xf0 [ 537.022621][ T9904] ip4_addr_string+0x8b/0xd0 [ 537.027216][ T9904] ? mac_address_string+0x630/0x630 [ 537.032417][ T9904] ip_addr_string+0x2bd/0x440 [ 537.037099][ T9904] ? ip6_addr_string_sa+0x6f0/0x6f0 [ 537.042396][ T9904] ? kasan_check_read+0x11/0x20 [ 537.047388][ T9904] ? __lock_acquire+0x54f/0x5490 [ 537.052335][ T9904] pointer+0x16c/0x750 [ 537.056411][ T9904] ? dentry_name+0x8b0/0x8b0 [ 537.060994][ T9904] vsnprintf+0x6b6/0x19a0 [ 537.065321][ T9904] ? pointer+0x750/0x750 [ 537.069562][ T9904] ? mark_held_locks+0xf0/0xf0 [ 537.074462][ T9904] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 537.080844][ T9904] sprintf+0xc0/0x100 [ 537.084887][ T9904] ? scnprintf+0x140/0x140 [ 537.089549][ T9904] ? neigh_get_first.isra.0+0x3c7/0x610 [ 537.095136][ T9904] ? arp_seq_show+0x115/0x9d0 [ 537.099942][ T9904] arp_seq_show+0x493/0x9d0 [ 537.104562][ T9904] ? pneigh_get_first.isra.0+0x139/0x200 [ 537.110304][ T9904] ? arp_net_init+0x80/0x80 [ 537.114803][ T9904] ? neightbl_set+0x1290/0x1290 [ 537.119685][ T9904] ? aa_path_link+0x460/0x460 [ 537.124385][ T9904] seq_read+0x4ca/0x1110 [ 537.128630][ T9904] ? seq_dentry+0x2d0/0x2d0 [ 537.133302][ T9904] proc_reg_read+0x1fc/0x2c0 [ 537.137996][ T9904] ? proc_reg_compat_ioctl+0x2a0/0x2a0 [ 537.143688][ T9904] ? rw_verify_area+0x126/0x360 [ 537.148790][ T9904] do_iter_read+0x4a4/0x660 [ 537.153365][ T9904] ? dup_iter+0x260/0x260 [ 537.157832][ T9904] vfs_readv+0xf0/0x160 [ 537.162001][ T9904] ? alloc_pages_current+0x10f/0x210 [ 537.167293][ T9904] ? compat_rw_copy_check_uvector+0x3f0/0x3f0 [ 537.173442][ T9904] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 537.180578][ T9904] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 537.187269][ T9904] ? iov_iter_get_pages_alloc+0x3ae/0x12f0 [ 537.193152][ T9904] ? iov_iter_revert+0xaa0/0xaa0 [ 537.198112][ T9904] ? aa_file_perm+0x40b/0xeb0 [ 537.203047][ T9904] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 537.208790][ T9904] ? iov_iter_pipe+0xba/0x2f0 [ 537.213483][ T9904] default_file_splice_read+0x475/0x890 [ 537.219234][ T9904] ? lock_downgrade+0x880/0x880 [ 537.224343][ T9904] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 537.230851][ T9904] ? iter_file_splice_write+0xbd0/0xbd0 [ 537.236440][ T9904] ? aa_path_link+0x460/0x460 [ 537.241263][ T9904] ? generic_pipe_buf_release+0x105/0x160 [ 537.247260][ T9904] ? do_splice_direct+0x2a0/0x2a0 [ 537.252425][ T9904] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 537.258883][ T9904] ? security_file_permission+0x8f/0x380 [ 537.276138][ T9904] ? default_file_splice_write+0x72/0x90 [ 537.281881][ T9904] ? iter_file_splice_write+0xbd0/0xbd0 [ 537.287458][ T9904] do_splice_to+0x127/0x180 [ 537.291997][ T9904] splice_direct_to_actor+0x2d2/0x970 [ 537.297390][ T9904] ? generic_pipe_buf_nosteal+0x10/0x10 [ 537.302944][ T9904] ? do_splice_to+0x180/0x180 [ 537.307637][ T9904] ? rw_verify_area+0x126/0x360 [ 537.312494][ T9904] do_splice_direct+0x1da/0x2a0 [ 537.317354][ T9904] ? splice_direct_to_actor+0x970/0x970 [ 537.322910][ T9904] ? rcu_read_lock_sched_held+0x110/0x130 [ 537.328645][ T9904] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 537.334109][ T9904] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 537.340492][ T9904] ? __sb_start_write+0x1ac/0x360 [ 537.345658][ T9904] do_sendfile+0x597/0xd00 [ 537.350128][ T9904] ? do_compat_pwritev64+0x1c0/0x1c0 [ 537.355422][ T9904] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 537.361683][ T9904] ? put_timespec64+0xda/0x140 [ 537.366459][ T9904] __x64_sys_sendfile64+0x1dd/0x220 [ 537.371725][ T9904] ? __ia32_sys_sendfile+0x230/0x230 [ 537.377330][ T9904] ? do_syscall_64+0x26/0x680 [ 537.382025][ T9904] ? lockdep_hardirqs_on+0x418/0x5d0 [ 537.387326][ T9904] ? trace_hardirqs_on+0x67/0x220 [ 537.392360][ T9904] do_syscall_64+0xfd/0x680 [ 537.397091][ T9904] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 537.403007][ T9904] RIP: 0033:0x4592c9 [ 537.406903][ T9904] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 537.426689][ T9904] RSP: 002b:00007f181bf89c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 537.435291][ T9904] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000004592c9 [ 537.443263][ T9904] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 537.451308][ T9904] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 537.459636][ T9904] R10: 0000000080000000 R11: 0000000000000246 R12: 00007f181bf8a6d4 [ 537.467764][ T9904] R13: 00000000004c689d R14: 00000000004db828 R15: 00000000ffffffff [ 537.475871][ T9904] [ 537.478253][ T9904] Allocated by task 9905: [ 537.482593][ T9904] save_stack+0x23/0x90 [ 537.486982][ T9904] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 537.492713][ T9904] kasan_kmalloc+0x9/0x10 [ 537.497100][ T9904] __kmalloc+0x15c/0x740 [ 537.501346][ T9904] pneigh_lookup+0x19c/0x4a0 [ 537.506040][ T9904] arp_req_set+0x613/0x720 [ 537.510553][ T9904] arp_ioctl+0x652/0x7f0 [ 537.514867][ T9904] inet_ioctl+0x2a0/0x340 [ 537.519209][ T9904] sock_do_ioctl+0xd8/0x2f0 [ 537.523699][ T9904] sock_ioctl+0x3ed/0x780 [ 537.528016][ T9904] do_vfs_ioctl+0xd5f/0x1380 [ 537.532599][ T9904] ksys_ioctl+0xab/0xd0 [ 537.536835][ T9904] __x64_sys_ioctl+0x73/0xb0 [ 537.541416][ T9904] do_syscall_64+0xfd/0x680 [ 537.545915][ T9904] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 537.551789][ T9904] [ 537.554238][ T9904] Freed by task 9902: [ 537.558211][ T9904] save_stack+0x23/0x90 [ 537.562357][ T9904] __kasan_slab_free+0x102/0x150 [ 537.567275][ T9904] kasan_slab_free+0xe/0x10 [ 537.572084][ T9904] kfree+0xcf/0x220 [ 537.575891][ T9904] __neigh_ifdown+0x236/0x2f0 [ 537.580564][ T9904] neigh_ifdown+0x20/0x30 [ 537.584883][ T9904] arp_ifdown+0x1d/0x21 [ 537.589106][ T9904] inetdev_event+0xa14/0x11f0 [ 537.593819][ T9904] notifier_call_chain+0xc2/0x230 [ 537.598854][ T9904] raw_notifier_call_chain+0x2e/0x40 [ 537.604257][ T9904] call_netdevice_notifiers_info+0x3f/0x90 [ 537.610098][ T9904] rollback_registered_many+0x9b9/0xfc0 [ 537.615818][ T9904] rollback_registered+0x109/0x1d0 [ 537.620927][ T9904] unregister_netdevice_queue+0x1ee/0x2c0 [ 537.626665][ T9904] __tun_detach+0xd8a/0x1040 [ 537.631297][ T9904] tun_chr_close+0xe0/0x180 [ 537.635940][ T9904] __fput+0x2ff/0x890 [ 537.640013][ T9904] ____fput+0x16/0x20 [ 537.644005][ T9904] task_work_run+0x145/0x1c0 [ 537.648797][ T9904] exit_to_usermode_loop+0x273/0x2c0 [ 537.654729][ T9904] do_syscall_64+0x58e/0x680 [ 537.659393][ T9904] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 537.665267][ T9904] [ 537.667580][ T9904] The buggy address belongs to the object at ffff888097a28b80 [ 537.667580][ T9904] which belongs to the cache kmalloc-64 of size 64 [ 537.681649][ T9904] The buggy address is located 26 bytes inside of [ 537.681649][ T9904] 64-byte region [ffff888097a28b80, ffff888097a28bc0) [ 537.695353][ T9904] The buggy address belongs to the page: [ 537.701270][ T9904] page:ffffea00025e8a00 refcount:1 mapcount:0 mapping:ffff8880aa400340 index:0x0 [ 537.710591][ T9904] flags: 0x1fffc0000000200(slab) [ 537.715603][ T9904] raw: 01fffc0000000200 ffffea000217e208 ffffea0002177048 ffff8880aa400340 [ 537.724198][ T9904] raw: 0000000000000000 ffff888097a28000 0000000100000020 0000000000000000 [ 537.733298][ T9904] page dumped because: kasan: bad access detected [ 537.739830][ T9904] [ 537.742388][ T9904] Memory state around the buggy address: [ 537.748200][ T9904] ffff888097a28a80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 537.756439][ T9904] ffff888097a28b00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 537.764664][ T9904] >ffff888097a28b80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 537.772763][ T9904] ^ [ 537.777788][ T9904] ffff888097a28c00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 537.785891][ T9904] ffff888097a28c80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 537.794033][ T9904] ================================================================== [ 537.802132][ T9904] Disabling lock debugging due to kernel taint [ 537.808535][ T9904] Kernel panic - not syncing: panic_on_warn set ... [ 537.815172][ T9904] CPU: 1 PID: 9904 Comm: syz-executor.0 Tainted: G B 5.2.0-rc4+ #51 [ 537.824532][ T9904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 537.834850][ T9904] Call Trace: [ 537.838333][ T9904] dump_stack+0x172/0x1f0 [ 537.842723][ T9904] panic+0x2cb/0x744 [ 537.846704][ T9904] ? __warn_printk+0xf3/0xf3 [ 537.851288][ T9904] ? trace_hardirqs_on+0x5e/0x220 [ 537.856295][ T9904] ? trace_hardirqs_on+0x5e/0x220 [ 537.861470][ T9904] ? ip4_string+0x471/0x4d0 [ 537.866128][ T9904] end_report+0x47/0x4f [ 537.870280][ T9904] ? ip4_string+0x471/0x4d0 [ 537.874964][ T9904] __kasan_report.cold+0xe/0x40 [ 537.879812][ T9904] ? ip4_string+0x471/0x4d0 [ 537.884308][ T9904] kasan_report+0x12/0x20 [ 537.888615][ T9904] __asan_report_load1_noabort+0x14/0x20 [ 537.894238][ T9904] ip4_string+0x471/0x4d0 [ 537.898558][ T9904] ? number+0xc70/0xc70 [ 537.902714][ T9904] ? mark_held_locks+0xf0/0xf0 [ 537.907504][ T9904] ip4_addr_string+0x8b/0xd0 [ 537.912122][ T9904] ? mac_address_string+0x630/0x630 [ 537.917313][ T9904] ip_addr_string+0x2bd/0x440 [ 537.922019][ T9904] ? ip6_addr_string_sa+0x6f0/0x6f0 [ 537.927208][ T9904] ? kasan_check_read+0x11/0x20 [ 537.932166][ T9904] ? __lock_acquire+0x54f/0x5490 [ 537.937178][ T9904] pointer+0x16c/0x750 [ 537.941235][ T9904] ? dentry_name+0x8b0/0x8b0 [ 537.945812][ T9904] vsnprintf+0x6b6/0x19a0 [ 537.950128][ T9904] ? pointer+0x750/0x750 [ 537.954488][ T9904] ? mark_held_locks+0xf0/0xf0 [ 537.959234][ T9904] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 537.965510][ T9904] sprintf+0xc0/0x100 [ 537.969495][ T9904] ? scnprintf+0x140/0x140 [ 537.974126][ T9904] ? neigh_get_first.isra.0+0x3c7/0x610 [ 537.979764][ T9904] ? arp_seq_show+0x115/0x9d0 [ 537.984540][ T9904] arp_seq_show+0x493/0x9d0 [ 537.989068][ T9904] ? pneigh_get_first.isra.0+0x139/0x200 [ 537.994685][ T9904] ? arp_net_init+0x80/0x80 [ 537.999173][ T9904] ? neightbl_set+0x1290/0x1290 [ 538.004028][ T9904] ? aa_path_link+0x460/0x460 [ 538.008703][ T9904] seq_read+0x4ca/0x1110 [ 538.012939][ T9904] ? seq_dentry+0x2d0/0x2d0 [ 538.017424][ T9904] proc_reg_read+0x1fc/0x2c0 [ 538.022015][ T9904] ? proc_reg_compat_ioctl+0x2a0/0x2a0 [ 538.027465][ T9904] ? rw_verify_area+0x126/0x360 [ 538.032307][ T9904] do_iter_read+0x4a4/0x660 [ 538.036947][ T9904] ? dup_iter+0x260/0x260 [ 538.041360][ T9904] vfs_readv+0xf0/0x160 [ 538.045654][ T9904] ? alloc_pages_current+0x10f/0x210 [ 538.050938][ T9904] ? compat_rw_copy_check_uvector+0x3f0/0x3f0 [ 538.057142][ T9904] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 538.063484][ T9904] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 538.069846][ T9904] ? iov_iter_get_pages_alloc+0x3ae/0x12f0 [ 538.075644][ T9904] ? iov_iter_revert+0xaa0/0xaa0 [ 538.080581][ T9904] ? aa_file_perm+0x40b/0xeb0 [ 538.085259][ T9904] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 538.090981][ T9904] ? iov_iter_pipe+0xba/0x2f0 [ 538.095734][ T9904] default_file_splice_read+0x475/0x890 [ 538.101295][ T9904] ? lock_downgrade+0x880/0x880 [ 538.106137][ T9904] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 538.112375][ T9904] ? iter_file_splice_write+0xbd0/0xbd0 [ 538.117918][ T9904] ? aa_path_link+0x460/0x460 [ 538.122681][ T9904] ? generic_pipe_buf_release+0x105/0x160 [ 538.128573][ T9904] ? do_splice_direct+0x2a0/0x2a0 [ 538.133671][ T9904] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 538.139913][ T9904] ? security_file_permission+0x8f/0x380 [ 538.145648][ T9904] ? default_file_splice_write+0x72/0x90 [ 538.151383][ T9904] ? iter_file_splice_write+0xbd0/0xbd0 [ 538.157008][ T9904] do_splice_to+0x127/0x180 [ 538.162535][ T9904] splice_direct_to_actor+0x2d2/0x970 [ 538.168114][ T9904] ? generic_pipe_buf_nosteal+0x10/0x10 [ 538.173665][ T9904] ? do_splice_to+0x180/0x180 [ 538.178429][ T9904] ? rw_verify_area+0x126/0x360 [ 538.183441][ T9904] do_splice_direct+0x1da/0x2a0 [ 538.188287][ T9904] ? splice_direct_to_actor+0x970/0x970 [ 538.193838][ T9904] ? rcu_read_lock_sched_held+0x110/0x130 [ 538.199607][ T9904] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 538.205066][ T9904] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 538.211297][ T9904] ? __sb_start_write+0x1ac/0x360 [ 538.216450][ T9904] do_sendfile+0x597/0xd00 [ 538.220934][ T9904] ? do_compat_pwritev64+0x1c0/0x1c0 [ 538.226210][ T9904] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 538.232455][ T9904] ? put_timespec64+0xda/0x140 [ 538.237403][ T9904] __x64_sys_sendfile64+0x1dd/0x220 [ 538.242602][ T9904] ? __ia32_sys_sendfile+0x230/0x230 [ 538.248026][ T9904] ? do_syscall_64+0x26/0x680 [ 538.252704][ T9904] ? lockdep_hardirqs_on+0x418/0x5d0 [ 538.258107][ T9904] ? trace_hardirqs_on+0x67/0x220 [ 538.263127][ T9904] do_syscall_64+0xfd/0x680 [ 538.267683][ T9904] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 538.273724][ T9904] RIP: 0033:0x4592c9 [ 538.277616][ T9904] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 538.297338][ T9904] RSP: 002b:00007f181bf89c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 538.305913][ T9904] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000004592c9 [ 538.314159][ T9904] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 538.322289][ T9904] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 538.330253][ T9904] R10: 0000000080000000 R11: 0000000000000246 R12: 00007f181bf8a6d4 [ 538.338235][ T9904] R13: 00000000004c689d R14: 00000000004db828 R15: 00000000ffffffff [ 538.347908][ T9904] Kernel Offset: disabled [ 538.352260][ T9904] Rebooting in 86400 seconds..