syzkaller login: [ 33.750164] kauditd_printk_skb: 9 callbacks suppressed [ 33.750170] audit: type=1400 audit(1578689397.197:35): avc: denied { map } for pid=6973 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 40.218613] audit: type=1400 audit(1578689403.667:36): avc: denied { map } for pid=6984 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16480 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 42.425530] IPVS: ftp: loaded support on port[0] = 21 [ 42.861605] can: request_module (can-proto-0) failed. [ 43.931838] can: request_module (can-proto-0) failed. [ 44.086000] audit: type=1400 audit(1578689407.537:37): avc: denied { create } for pid=6984 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 44.109845] audit: type=1400 audit(1578689407.537:38): avc: denied { create } for pid=6984 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 44.133520] audit: type=1400 audit(1578689407.537:39): avc: denied { create } for pid=6984 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 Warning: Permanently added '10.128.0.136' (ECDSA) to the list of known hosts. 2020/01/10 20:50:15 parsed 1 programs 2020/01/10 20:50:15 executed programs: 0 [ 52.586828] IPVS: ftp: loaded support on port[0] = 21 [ 52.589320] IPVS: ftp: loaded support on port[0] = 21 [ 52.603979] IPVS: ftp: loaded support on port[0] = 21 [ 52.612416] IPVS: ftp: loaded support on port[0] = 21 [ 52.620531] IPVS: ftp: loaded support on port[0] = 21 [ 52.621600] IPVS: ftp: loaded support on port[0] = 21 [ 52.807733] chnl_net:caif_netlink_parms(): no params data found [ 52.944622] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.951015] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.958493] device bridge_slave_0 entered promiscuous mode [ 52.966076] chnl_net:caif_netlink_parms(): no params data found [ 52.992173] chnl_net:caif_netlink_parms(): no params data found [ 53.000900] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.007398] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.014454] device bridge_slave_1 entered promiscuous mode [ 53.038294] chnl_net:caif_netlink_parms(): no params data found [ 53.060751] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 53.068624] chnl_net:caif_netlink_parms(): no params data found [ 53.110485] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 53.150708] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 53.159263] team0: Port device team_slave_0 added [ 53.175245] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.181679] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.188830] device bridge_slave_0 entered promiscuous mode [ 53.202036] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.208539] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.216059] device bridge_slave_0 entered promiscuous mode [ 53.223213] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 53.231067] team0: Port device team_slave_1 added [ 53.236947] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 53.244269] chnl_net:caif_netlink_parms(): no params data found [ 53.252345] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 53.259683] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.266447] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.274650] device bridge_slave_0 entered promiscuous mode [ 53.281450] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.288547] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.295816] device bridge_slave_1 entered promiscuous mode [ 53.310113] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.317987] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.325358] device bridge_slave_1 entered promiscuous mode [ 53.344774] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.351707] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.359707] device bridge_slave_1 entered promiscuous mode [ 53.389711] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.396429] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.403907] device bridge_slave_0 entered promiscuous mode [ 53.423287] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 53.436878] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 53.494703] device hsr_slave_0 entered promiscuous mode [ 53.543192] device hsr_slave_1 entered promiscuous mode [ 53.613054] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.619441] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.626822] device bridge_slave_1 entered promiscuous mode [ 53.641412] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 53.652131] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 53.666178] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 53.674317] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 53.682111] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 53.698615] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 53.710845] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 53.727654] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.734328] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.741256] device bridge_slave_0 entered promiscuous mode [ 53.749009] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 53.767116] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 53.776066] team0: Port device team_slave_0 added [ 53.786895] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.794059] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.801397] device bridge_slave_1 entered promiscuous mode [ 53.819609] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 53.827641] team0: Port device team_slave_0 added [ 53.834063] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 53.841691] team0: Port device team_slave_0 added [ 53.847213] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 53.854564] team0: Port device team_slave_1 added [ 53.860167] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 53.868642] team0: Port device team_slave_0 added [ 53.877738] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 53.887617] team0: Port device team_slave_1 added [ 53.899732] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 53.907083] team0: Port device team_slave_1 added [ 53.912610] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 53.920105] team0: Port device team_slave_1 added [ 53.925621] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 53.933104] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 53.941112] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 53.949307] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 53.956848] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 53.964585] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 53.971798] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 53.984783] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 53.998546] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 54.017528] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 54.064686] device hsr_slave_0 entered promiscuous mode [ 54.113060] device hsr_slave_1 entered promiscuous mode [ 54.168082] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 54.215474] device hsr_slave_0 entered promiscuous mode [ 54.253128] device hsr_slave_1 entered promiscuous mode [ 54.305350] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.312018] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 54.334706] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 54.341599] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 54.349973] team0: Port device team_slave_0 added [ 54.355526] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 54.362898] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 54.370125] team0: Port device team_slave_1 added [ 54.415730] device hsr_slave_0 entered promiscuous mode [ 54.453311] device hsr_slave_1 entered promiscuous mode [ 54.575400] device hsr_slave_0 entered promiscuous mode [ 54.643098] device hsr_slave_1 entered promiscuous mode [ 54.713549] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 54.720473] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 54.728189] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 54.746037] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 54.757112] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 54.764257] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 54.777868] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.825632] device hsr_slave_0 entered promiscuous mode [ 54.873083] device hsr_slave_1 entered promiscuous mode [ 54.933497] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 54.944377] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.958204] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 54.987199] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 55.012278] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 55.025181] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 55.055043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.066658] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.087673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.106389] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.117598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.125695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.145156] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.152499] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 55.159492] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.169229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.183657] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.192186] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.202450] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 55.213511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.222015] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.228516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.237838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.245649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.253982] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.261940] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.268600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.275923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.284971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.292244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.302952] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 55.313861] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 55.324944] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 55.331047] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.341954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.350609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.359771] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.366415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.373528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.383261] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 55.390545] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.398672] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.410658] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 55.424751] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 55.438396] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 55.448265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.455678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.463889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.471585] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.478043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.485296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.493880] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.501900] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.508448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.515474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.525635] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 55.535052] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.545783] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 55.554291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.562480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.570021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.578133] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.587053] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.593456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.600579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.607690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.614939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.623588] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.631977] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.641686] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 55.651724] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.659856] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 55.667078] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.675158] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 55.684708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.692639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.700601] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.707155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.714877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.726555] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 55.735704] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 55.744655] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 55.758288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.765171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.774100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.782101] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.790112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.798038] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.805804] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.812474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.819794] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.828751] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 55.837885] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 55.846965] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 55.857093] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.864667] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.871971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.881775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.889616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.897679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.905973] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.914010] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.920370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.927368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.934454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.943641] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 55.951249] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 55.962577] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 55.971139] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 55.981056] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 55.989783] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.997695] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.004096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.012009] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.020756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.028742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.036310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.044287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.051899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.059088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.066030] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.075415] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 56.085464] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 56.091510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.102941] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 56.110612] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 56.120303] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 56.129000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.140664] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.149968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.158049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.166398] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.174069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.181755] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.189578] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.195998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.204268] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 56.213873] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 56.226883] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 56.236755] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 56.245989] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.256581] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.264160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.271960] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.279800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.287794] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.296314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.304446] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.312145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.320006] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.328005] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.337397] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 56.344180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.355071] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 56.365835] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 56.373907] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 56.382439] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 56.388859] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.398871] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 56.405660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.413753] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.421452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.429280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.436975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.445294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.453507] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.460066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.473614] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 56.481920] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 56.494177] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 56.507508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.515922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.524127] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.531727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.540607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.548715] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.555132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.562936] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.571563] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 56.581791] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 56.590081] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 56.603747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.611416] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.611627] audit: type=1400 audit(1578689420.057:40): avc: denied { associate } for pid=7090 comm="syz-executor.4" name="syz4" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 56.633284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.652173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.660807] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.670859] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.677899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.687887] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 56.694495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.702517] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 56.714556] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 56.725318] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 56.737383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.748023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.761716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.771202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.781513] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 56.789178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.800083] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 56.811745] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 56.822489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.837280] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 56.840624] FAULT_INJECTION: forcing a failure. [ 56.840624] name failslab, interval 1, probability 0, space 0, times 1 [ 56.843851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.860265] CPU: 0 PID: 7103 Comm: syz-executor.4 Not tainted 4.19.94-syzkaller #0 [ 56.864481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.870726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.878888] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.887436] Call Trace: [ 56.887454] dump_stack+0x123/0x177 [ 56.887466] should_fail.cold.4+0x5/0x13 [ 56.887474] ? fault_create_debugfs_attr+0x1a0/0x1a0 [ 56.887482] ? lock_downgrade+0x860/0x860 [ 56.887495] __should_failslab+0xba/0xf0 [ 56.887504] should_failslab+0x9/0x14 [ 56.887513] __kmalloc+0x2dd/0x770 [ 56.895362] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.897198] ? tls_push_record+0xf3/0x1720 [ 56.907729] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 56.910064] ? __sk_mem_schedule+0x5f/0xc0 [ 56.919071] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 56.922302] tls_push_record+0xf3/0x1720 [ 56.928251] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 56.932326] ? lockdep_hardirqs_on+0x421/0x5c0 [ 56.940136] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 56.943446] ? alloc_encrypted_sg+0x81/0x100 [ 56.943456] tls_sw_sendpage+0x458/0xc00 [ 56.943476] ? tls_sw_sendmsg+0x1020/0x1020 [ 56.943485] ? pipe_lock+0x4f/0x60 [ 56.943497] inet_sendpage+0x122/0x600 [ 56.943507] ? kernel_sendpage+0xd0/0xd0 [ 56.943514] kernel_sendpage+0x60/0xd0 [ 56.951549] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 56.953896] ? lock_downgrade+0x860/0x860 [ 56.953904] ? pipe_lock+0x4f/0x60 [ 56.953915] sock_sendpage+0x6d/0xd0 [ 56.953925] pipe_to_sendpage+0x212/0x430 [ 56.953931] ? generic_pipe_buf_nosteal+0x10/0x10 [ 56.953940] ? kasan_check_write+0x14/0x20 [ 56.953944] ? anon_pipe_buf_release+0x149/0x1f0 [ 56.953952] __splice_from_pipe+0x2cb/0x720 [ 56.960806] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.964771] ? generic_pipe_buf_nosteal+0x10/0x10 [ 56.964780] ? generic_pipe_buf_nosteal+0x10/0x10 [ 56.964784] splice_from_pipe+0xbb/0x120 [ 56.964790] ? splice_shrink_spd+0xa0/0xa0 [ 56.964802] ? rw_verify_area+0xb8/0x2b0 [ 56.964809] generic_splice_sendpage+0x10/0x20 [ 56.964813] do_splice+0x4fd/0x12d0 [ 56.964823] ? ksys_dup3+0x2e0/0x2e0 [ 56.964831] ? opipe_prep.part.13+0x320/0x320 [ 56.964838] ? __fget_light+0x174/0x1e0 [ 56.964847] __x64_sys_splice+0x248/0x300 [ 56.964860] do_syscall_64+0xd0/0x4e0 [ 56.970982] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.976193] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 56.976200] RIP: 0033:0x4592c9 [ 56.976207] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 56.976210] RSP: 002b:00007fd716ee0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 56.976216] RAX: ffffffffffffffda RBX: 00007fd716ee0c90 RCX: 00000000004592c9 [ 56.976218] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 56.976221] RBP: 000000000075bf20 R08: 0000000100000300 R09: 0000000000000000 [ 56.976224] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd716ee16d4 [ 56.976226] R13: 00000000004c87fb R14: 00000000004de630 R15: 0000000000000005 [ 57.187020] ================================================================== [ 57.192917] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 57.196290] BUG: KASAN: use-after-free in scatterwalk_copychunks+0x1e1/0x610 [ 57.209567] Read of size 4094 at addr ffff8880902ca000 by task syz-executor.4/7103 [ 57.217381] [ 57.219009] CPU: 0 PID: 7103 Comm: syz-executor.4 Not tainted 4.19.94-syzkaller #0 [ 57.226808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 57.236167] Call Trace: [ 57.238751] dump_stack+0x123/0x177 [ 57.242371] print_address_description.cold.8+0x9/0x1ff [ 57.247801] kasan_report.cold.9+0x242/0x309 [ 57.252198] ? scatterwalk_copychunks+0x1e1/0x610 [ 57.257029] check_memory_region+0x13e/0x1b0 [ 57.261426] memcpy+0x23/0x50 [ 57.264511] scatterwalk_copychunks+0x1e1/0x610 [ 57.269180] scatterwalk_map_and_copy+0x128/0x190 [ 57.274044] ? __lock_is_held+0xb5/0x140 [ 57.278114] ? scatterwalk_copychunks+0x610/0x610 [ 57.282948] ? rcu_read_lock_sched_held+0x108/0x120 [ 57.287955] ? __kmalloc+0x5f1/0x770 [ 57.291655] ? depot_save_stack+0x292/0x466 [ 57.296028] ? gcmaes_encrypt.constprop.15+0x630/0xda0 [ 57.301324] gcmaes_encrypt.constprop.15+0x6d6/0xda0 [ 57.306421] ? tls_push_record+0xf3/0x1720 [ 57.310702] ? tls_sw_sendpage+0x458/0xc00 [ 57.314938] ? inet_sendpage+0x122/0x600 [ 57.318985] ? kernel_sendpage+0x60/0xd0 [ 57.323024] ? sock_sendpage+0x6d/0xd0 [ 57.326908] ? pipe_to_sendpage+0x212/0x430 [ 57.331222] ? gcmaes_crypt_by_sg.constprop.16+0x14c0/0x14c0 [ 57.337012] ? usleep_range+0x130/0x130 [ 57.340971] ? __lock_is_held+0xb5/0x140 [ 57.345016] generic_gcmaes_encrypt+0xfd/0x150 [ 57.349592] ? generic_gcmaes_encrypt+0xfd/0x150 [ 57.354326] ? helper_rfc4106_encrypt+0x450/0x450 [ 57.359159] ? __kmalloc+0x5f1/0x770 [ 57.362859] gcmaes_wrapper_encrypt+0x109/0x180 [ 57.367518] tls_push_record+0x966/0x1720 [ 57.371646] ? sk_stream_kill_queues+0x510/0x510 [ 57.376386] tls_sw_sendpage+0x458/0xc00 [ 57.380462] ? tls_sw_sendmsg+0x1020/0x1020 [ 57.384790] ? pipe_lock+0x4f/0x60 [ 57.388323] inet_sendpage+0x122/0x600 [ 57.392191] ? kernel_sendpage+0xd0/0xd0 [ 57.396338] kernel_sendpage+0x60/0xd0 [ 57.400214] ? lock_downgrade+0x860/0x860 [ 57.404339] ? pipe_lock+0x4f/0x60 [ 57.407886] sock_sendpage+0x6d/0xd0 [ 57.411581] pipe_to_sendpage+0x212/0x430 [ 57.415705] ? generic_pipe_buf_nosteal+0x10/0x10 [ 57.420528] ? kasan_check_write+0x14/0x20 [ 57.424767] ? anon_pipe_buf_release+0x149/0x1f0 [ 57.429572] __splice_from_pipe+0x2cb/0x720 [ 57.433891] ? generic_pipe_buf_nosteal+0x10/0x10 [ 57.438726] ? generic_pipe_buf_nosteal+0x10/0x10 [ 57.443553] splice_from_pipe+0xbb/0x120 [ 57.447590] ? splice_shrink_spd+0xa0/0xa0 [ 57.451814] ? rw_verify_area+0xb8/0x2b0 [ 57.455863] generic_splice_sendpage+0x10/0x20 [ 57.460421] do_splice+0x4fd/0x12d0 [ 57.464040] ? ksys_dup3+0x2e0/0x2e0 [ 57.467742] ? opipe_prep.part.13+0x320/0x320 [ 57.472214] ? __fget_light+0x174/0x1e0 [ 57.476168] __x64_sys_splice+0x248/0x300 [ 57.480297] do_syscall_64+0xd0/0x4e0 [ 57.484086] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 57.489252] RIP: 0033:0x4592c9 [ 57.492424] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 57.511420] RSP: 002b:00007fd716ee0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 57.519121] RAX: ffffffffffffffda RBX: 00007fd716ee0c90 RCX: 00000000004592c9 [ 57.526718] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 57.533976] RBP: 000000000075bf20 R08: 0000000100000300 R09: 0000000000000000 [ 57.541225] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd716ee16d4 [ 57.548474] R13: 00000000004c87fb R14: 00000000004de630 R15: 0000000000000005 [ 57.555792] [ 57.557397] The buggy address belongs to the page: [ 57.562302] page:ffffea000240b280 count:0 mapcount:-128 mapping:0000000000000000 index:0xffff8880902cab80 [ 57.571992] flags: 0x1fffc0000000000() [ 57.575869] raw: 01fffc0000000000 ffffea00022e9588 ffffea0002544188 0000000000000000 [ 57.583727] raw: ffff8880902cab80 0000000000000001 00000000ffffff7f 0000000000000000 [ 57.591597] page dumped because: kasan: bad access detected [ 57.597292] [ 57.598895] Memory state around the buggy address: [ 57.603802] ffff8880902c9f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 57.611277] ffff8880902c9f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 57.618639] >ffff8880902ca000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 57.625982] ^ [ 57.629410] ffff8880902ca080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 57.636770] ffff8880902ca100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 57.644128] ================================================================== [ 57.651516] Disabling lock debugging due to kernel taint [ 57.658436] Kernel panic - not syncing: panic_on_warn set ... [ 57.658436] [ 57.665824] CPU: 0 PID: 7103 Comm: syz-executor.4 Tainted: G B 4.19.94-syzkaller #0 [ 57.674934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 57.684346] Call Trace: [ 57.686927] dump_stack+0x123/0x177 [ 57.690547] panic+0x1cd/0x375 [ 57.693753] ? __warn_printk+0xd6/0xd6 [ 57.697631] ? do_raw_spin_unlock+0x54/0x260 [ 57.702028] kasan_end_report+0x47/0x4f [ 57.705999] kasan_report.cold.9+0x76/0x309 [ 57.710305] ? scatterwalk_copychunks+0x1e1/0x610 [ 57.715141] check_memory_region+0x13e/0x1b0 [ 57.719549] memcpy+0x23/0x50 [ 57.722655] scatterwalk_copychunks+0x1e1/0x610 [ 57.727342] scatterwalk_map_and_copy+0x128/0x190 [ 57.732176] ? __lock_is_held+0xb5/0x140 [ 57.736225] ? scatterwalk_copychunks+0x610/0x610 [ 57.741153] ? rcu_read_lock_sched_held+0x108/0x120 [ 57.746146] ? __kmalloc+0x5f1/0x770 [ 57.749834] ? depot_save_stack+0x292/0x466 [ 57.754133] ? gcmaes_encrypt.constprop.15+0x630/0xda0 [ 57.759385] gcmaes_encrypt.constprop.15+0x6d6/0xda0 [ 57.764730] ? tls_push_record+0xf3/0x1720 [ 57.769041] ? tls_sw_sendpage+0x458/0xc00 [ 57.773396] ? inet_sendpage+0x122/0x600 [ 57.778348] ? kernel_sendpage+0x60/0xd0 [ 57.782399] ? sock_sendpage+0x6d/0xd0 [ 57.786272] ? pipe_to_sendpage+0x212/0x430 [ 57.790590] ? gcmaes_crypt_by_sg.constprop.16+0x14c0/0x14c0 [ 57.796410] ? usleep_range+0x130/0x130 [ 57.800392] ? __lock_is_held+0xb5/0x140 [ 57.804469] generic_gcmaes_encrypt+0xfd/0x150 [ 57.809048] ? generic_gcmaes_encrypt+0xfd/0x150 [ 57.813892] ? helper_rfc4106_encrypt+0x450/0x450 [ 57.818882] ? __kmalloc+0x5f1/0x770 [ 57.822585] gcmaes_wrapper_encrypt+0x109/0x180 [ 57.827265] tls_push_record+0x966/0x1720 [ 57.831420] ? sk_stream_kill_queues+0x510/0x510 [ 57.836176] tls_sw_sendpage+0x458/0xc00 [ 57.840229] ? tls_sw_sendmsg+0x1020/0x1020 [ 57.844535] ? pipe_lock+0x4f/0x60 [ 57.848076] inet_sendpage+0x122/0x600 [ 57.851963] ? kernel_sendpage+0xd0/0xd0 [ 57.856146] kernel_sendpage+0x60/0xd0 [ 57.860064] ? lock_downgrade+0x860/0x860 [ 57.864241] ? pipe_lock+0x4f/0x60 [ 57.867784] sock_sendpage+0x6d/0xd0 [ 57.871656] pipe_to_sendpage+0x212/0x430 [ 57.876810] ? generic_pipe_buf_nosteal+0x10/0x10 [ 57.881642] ? kasan_check_write+0x14/0x20 [ 57.885860] ? anon_pipe_buf_release+0x149/0x1f0 [ 57.890606] __splice_from_pipe+0x2cb/0x720 [ 57.895006] ? generic_pipe_buf_nosteal+0x10/0x10 [ 57.899840] ? generic_pipe_buf_nosteal+0x10/0x10 [ 57.904661] splice_from_pipe+0xbb/0x120 [ 57.908702] ? splice_shrink_spd+0xa0/0xa0 [ 57.912933] ? rw_verify_area+0xb8/0x2b0 [ 57.917032] generic_splice_sendpage+0x10/0x20 [ 57.922466] do_splice+0x4fd/0x12d0 [ 57.926075] ? ksys_dup3+0x2e0/0x2e0 [ 57.929791] ? opipe_prep.part.13+0x320/0x320 [ 57.934302] ? __fget_light+0x174/0x1e0 [ 57.938258] __x64_sys_splice+0x248/0x300 [ 57.942457] do_syscall_64+0xd0/0x4e0 [ 57.946361] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 57.951646] RIP: 0033:0x4592c9 [ 57.954836] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 57.973822] RSP: 002b:00007fd716ee0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 57.981605] RAX: ffffffffffffffda RBX: 00007fd716ee0c90 RCX: 00000000004592c9 [ 57.988858] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 57.996126] RBP: 000000000075bf20 R08: 0000000100000300 R09: 0000000000000000 [ 58.003482] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd716ee16d4 [ 58.011199] R13: 00000000004c87fb R14: 00000000004de630 R15: 0000000000000005 [ 58.019907] Kernel Offset: disabled [ 58.023718] Rebooting in 86400 seconds..