Warning: Permanently added '[localhost]:58996' (ED25519) to the list of known hosts. [ 67.658160][ T5318] BUG: Bad page state in process syz-executor193 pfn:44326 executing program [ 67.661622][ T5318] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x44326 [ 67.666031][ T5318] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 67.668888][ T5318] raw: 04fff00000000000 dead000000000040 ffff88801e572000 0000000000000000 [ 67.672162][ T5318] raw: 0000000000000000 3fffffffffffffff 00000000ffffffff 0000000000000000 [ 67.675532][ T5318] page dumped because: page_pool leak [ 67.677686][ T5318] page_owner tracks the page as allocated [ 67.680029][ T5318] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5318, tgid 5318 (syz-executor193), ts 67658077797, free_ts 67542162652 [ 67.686496][ T5318] post_alloc_hook+0x1f4/0x240 [ 67.688400][ T5318] get_page_from_freelist+0x365c/0x37a0 [ 67.690520][ T5318] __alloc_frozen_pages_noprof+0x292/0x710 [ 67.692817][ T5318] alloc_pages_bulk_noprof+0x847/0xae0 [ 67.695030][ T5318] __page_pool_alloc_pages_slow+0x11f/0x690 [ 67.697426][ T5318] page_pool_alloc_frag_netmem+0x59c/0x940 [ 67.699839][ T5318] skb_pp_cow_data+0xcea/0x1720 [ 67.701749][ T5318] do_xdp_generic+0x505/0xd30 [ 67.703561][ T5318] tun_get_user+0x2a4b/0x4860 [ 67.705637][ T5318] tun_chr_write_iter+0x10d/0x1f0 [ 67.707433][ T5318] vfs_write+0xacf/0xd10 [ 67.709135][ T5318] ksys_write+0x18f/0x2b0 [ 67.710798][ T5318] do_syscall_64+0xf3/0x230 [ 67.712522][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.714692][ T5318] page last free pid 5313 tgid 5313 stack trace: [ 67.716980][ T5318] free_frozen_pages+0xe0d/0x10e0 [ 67.718776][ T5318] __put_partials+0x160/0x1c0 [ 67.720477][ T5318] put_cpu_partial+0x17c/0x250 [ 67.722141][ T5318] __slab_free+0x290/0x380 [ 67.723666][ T5318] qlist_free_all+0x9a/0x140 [ 67.725393][ T5318] kasan_quarantine_reduce+0x14f/0x170 [ 67.727312][ T5318] __kasan_slab_alloc+0x23/0x80 [ 67.729108][ T5318] kmem_cache_alloc_noprof+0x1d9/0x380 [ 67.731041][ T5318] proc_reg_open+0x201/0x530 [ 67.732660][ T5318] do_dentry_open+0xdec/0x1960 [ 67.734489][ T5318] vfs_open+0x3b/0x370 [ 67.736045][ T5318] path_openat+0x2c9f/0x35b0 [ 67.737782][ T5318] do_filp_open+0x282/0x4e0 [ 67.739552][ T5318] do_sys_openat2+0x122/0x1c0 [ 67.741362][ T5318] __x64_sys_openat+0x247/0x2a0 [ 67.743316][ T5318] do_syscall_64+0xf3/0x230 [ 67.745143][ T5318] Modules linked in: [ 67.746628][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: syz-executor193 Not tainted 6.14.0-syzkaller-00624-g2f2d52945852 #0 [ 67.746642][ T5318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 67.746649][ T5318] Call Trace: [ 67.746654][ T5318] [ 67.746659][ T5318] dump_stack_lvl+0x241/0x360 [ 67.746675][ T5318] ? __pfx_dump_stack_lvl+0x10/0x10 [ 67.746686][ T5318] ? __pfx_print_modules+0x10/0x10 [ 67.746707][ T5318] bad_page+0x176/0x1d0 [ 67.746716][ T5318] free_frozen_pages+0x1082/0x10e0 [ 67.746729][ T5318] bpf_xdp_frags_shrink_tail+0x3b3/0x780 [ 67.746744][ T5318] bpf_xdp_adjust_tail+0x1c6/0x210 [ 67.746754][ T5318] bpf_prog_f476d5219b92964a+0x1e/0x20 [ 67.746761][ T5318] bpf_prog_run_generic_xdp+0x686/0x1510 [ 67.746788][ T5318] do_xdp_generic+0x757/0xd30 [ 67.746802][ T5318] ? __pfx_do_xdp_generic+0x10/0x10 [ 67.746818][ T5318] ? __local_bh_disable_ip+0x179/0x220 [ 67.746834][ T5318] ? __pfx_eth_type_trans+0x10/0x10 [ 67.746851][ T5318] ? tun_get_user+0x2914/0x4860 [ 67.746867][ T5318] tun_get_user+0x2a4b/0x4860 [ 67.746890][ T5318] ? __lock_acquire+0x1397/0x2100 [ 67.746908][ T5318] ? __pfx_tun_get_user+0x10/0x10 [ 67.746934][ T5318] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 67.746950][ T5318] ? tun_get+0x1e/0x2f0 [ 67.746964][ T5318] ? __pfx_lock_release+0x10/0x10 [ 67.746985][ T5318] ? tun_get+0x1e/0x2f0 [ 67.746999][ T5318] ? tun_get+0x27d/0x2f0 [ 67.747013][ T5318] tun_chr_write_iter+0x10d/0x1f0 [ 67.747031][ T5318] vfs_write+0xacf/0xd10 [ 67.747044][ T5318] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 67.747060][ T5318] ? __pfx_vfs_write+0x10/0x10 [ 67.747073][ T5318] ? rcu_is_watching+0x15/0xb0 [ 67.747090][ T5318] ksys_write+0x18f/0x2b0 [ 67.747102][ T5318] ? __pfx_ksys_write+0x10/0x10 [ 67.747112][ T5318] ? do_syscall_64+0x100/0x230 [ 67.747127][ T5318] ? do_syscall_64+0xb6/0x230 [ 67.747142][ T5318] do_syscall_64+0xf3/0x230 [ 67.747156][ T5318] ? clear_bhb_loop+0x35/0x90 [ 67.747172][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.747185][ T5318] RIP: 0033:0x7f3ff23dadf0 [ 67.747196][ T5318] Code: 40 00 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b7 0f 1f 00 80 3d b1 e2 07 00 00 74 17 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 58 c3 0f 1f 80 00 00 00 00 48 83 ec 28 48 89 [ 67.747204][ T5318] RSP: 002b:00007ffe2ecb8d28 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 67.747216][ T5318] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3ff23dadf0 [ 67.747224][ T5318] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8 [ 67.747230][ T5318] RBP: 0000000000000000 R08: 00007ffe2ecb8e58 R09: 00007ffe2ecb8e58 [ 67.747236][ T5318] R10: 00007ffe2ecb8e58 R11: 0000000000000202 R12: 0000000000000000 [ 67.747242][ T5318] R13: 0000000000000000 R14: 00007ffe2ecb8d60 R15: 00007ffe2ecb8d50 [ 67.747265][ T5318] [ 67.747270][ T5318] Disabling lock debugging due to kernel taint [ 67.853668][ T5318] BUG: Bad page state in process syz-executor193 pfn:44325 [ 67.856713][ T5318] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x44325 [ 67.860146][ T5318] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 67.862958][ T5318] raw: 04fff00000000000 dead000000000040 ffff88801e572000 0000000000000000 [ 67.866307][ T5318] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 67.869592][ T5318] page dumped because: page_pool leak [ 67.871637][ T5318] page_owner tracks the page as allocated [ 67.873835][ T5318] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5318, tgid 5318 (syz-executor193), ts 67658066743, free_ts 67542162652 [ 67.880486][ T5318] post_alloc_hook+0x1f4/0x240 [ 67.882391][ T5318] get_page_from_freelist+0x365c/0x37a0 [ 67.884683][ T5318] __alloc_frozen_pages_noprof+0x292/0x710 [ 67.886999][ T5318] alloc_pages_bulk_noprof+0x847/0xae0 [ 67.889199][ T5318] __page_pool_alloc_pages_slow+0x11f/0x690 [ 67.891556][ T5318] skb_pp_cow_data+0xcc8/0x1720 [ 67.893465][ T5318] do_xdp_generic+0x505/0xd30 [ 67.895358][ T5318] tun_get_user+0x2a4b/0x4860 [ 67.897160][ T5318] tun_chr_write_iter+0x10d/0x1f0 [ 67.899266][ T5318] vfs_write+0xacf/0xd10 [ 67.900932][ T5318] ksys_write+0x18f/0x2b0 [ 67.902620][ T5318] do_syscall_64+0xf3/0x230 [ 67.904478][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.906743][ T5318] page last free pid 5313 tgid 5313 stack trace: [ 67.909218][ T5318] free_frozen_pages+0xe0d/0x10e0 [ 67.911080][ T5318] __put_partials+0x160/0x1c0 [ 67.912870][ T5318] put_cpu_partial+0x17c/0x250 [ 67.914774][ T5318] __slab_free+0x290/0x380 [ 67.916515][ T5318] qlist_free_all+0x9a/0x140 [ 67.918335][ T5318] kasan_quarantine_reduce+0x14f/0x170 [ 67.920505][ T5318] __kasan_slab_alloc+0x23/0x80 [ 67.922283][ T5318] kmem_cache_alloc_noprof+0x1d9/0x380 [ 67.924446][ T5318] proc_reg_open+0x201/0x530 [ 67.926270][ T5318] do_dentry_open+0xdec/0x1960 [ 67.928188][ T5318] vfs_open+0x3b/0x370 [ 67.929885][ T5318] path_openat+0x2c9f/0x35b0 [ 67.931721][ T5318] do_filp_open+0x282/0x4e0 [ 67.933523][ T5318] do_sys_openat2+0x122/0x1c0 [ 67.935350][ T5318] __x64_sys_openat+0x247/0x2a0 [ 67.937290][ T5318] do_syscall_64+0xf3/0x230 [ 67.939115][ T5318] Modules linked in: [ 67.940674][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: syz-executor193 Tainted: G B 6.14.0-syzkaller-00624-g2f2d52945852 #0 [ 67.940691][ T5318] Tainted: [B]=BAD_PAGE [ 67.940695][ T5318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 67.940701][ T5318] Call Trace: [ 67.940708][ T5318] [ 67.940713][ T5318] dump_stack_lvl+0x241/0x360 [ 67.940726][ T5318] ? __pfx_dump_stack_lvl+0x10/0x10 [ 67.940737][ T5318] ? __pfx_print_modules+0x10/0x10 [ 67.940754][ T5318] bad_page+0x176/0x1d0 [ 67.940767][ T5318] free_frozen_pages+0x1082/0x10e0 [ 67.940784][ T5318] bpf_xdp_frags_shrink_tail+0x3b3/0x780 [ 67.940796][ T5318] bpf_xdp_adjust_tail+0x1c6/0x210 [ 67.940806][ T5318] bpf_prog_f476d5219b92964a+0x1e/0x20 [ 67.940812][ T5318] bpf_prog_run_generic_xdp+0x686/0x1510 [ 67.940829][ T5318] do_xdp_generic+0x757/0xd30 [ 67.940840][ T5318] ? __pfx_do_xdp_generic+0x10/0x10 [ 67.940851][ T5318] ? __local_bh_disable_ip+0x179/0x220 [ 67.940865][ T5318] ? __pfx_eth_type_trans+0x10/0x10 [ 67.940879][ T5318] ? tun_get_user+0x2914/0x4860 [ 67.940895][ T5318] tun_get_user+0x2a4b/0x4860 [ 67.940913][ T5318] ? __lock_acquire+0x1397/0x2100 [ 67.940929][ T5318] ? __pfx_tun_get_user+0x10/0x10 [ 67.940948][ T5318] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 67.940962][ T5318] ? tun_get+0x1e/0x2f0 [ 67.940976][ T5318] ? __pfx_lock_release+0x10/0x10 [ 67.940994][ T5318] ? tun_get+0x1e/0x2f0 [ 67.941008][ T5318] ? tun_get+0x27d/0x2f0 [ 67.941022][ T5318] tun_chr_write_iter+0x10d/0x1f0 [ 67.941037][ T5318] vfs_write+0xacf/0xd10 [ 67.941048][ T5318] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 67.941062][ T5318] ? __pfx_vfs_write+0x10/0x10 [ 67.941072][ T5318] ? rcu_is_watching+0x15/0xb0 [ 67.941086][ T5318] ksys_write+0x18f/0x2b0 [ 67.941097][ T5318] ? __pfx_ksys_write+0x10/0x10 [ 67.941107][ T5318] ? do_syscall_64+0x100/0x230 [ 67.941121][ T5318] ? do_syscall_64+0xb6/0x230 [ 67.941134][ T5318] do_syscall_64+0xf3/0x230 [ 67.941146][ T5318] ? clear_bhb_loop+0x35/0x90 [ 67.941161][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.941174][ T5318] RIP: 0033:0x7f3ff23dadf0 [ 67.941184][ T5318] Code: 40 00 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b7 0f 1f 00 80 3d b1 e2 07 00 00 74 17 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 58 c3 0f 1f 80 00 00 00 00 48 83 ec 28 48 89 [ 67.941192][ T5318] RSP: 002b:00007ffe2ecb8d28 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 67.941203][ T5318] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3ff23dadf0 [ 67.941210][ T5318] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8 [ 67.941217][ T5318] RBP: 0000000000000000 R08: 00007ffe2ecb8e58 R09: 00007ffe2ecb8e58 [ 67.941224][ T5318] R10: 00007ffe2ecb8e58 R11: 0000000000000202 R12: 0000000000000000 [ 67.941230][ T5318] R13: 0000000000000000 R14: 00007ffe2ecb8d60 R15: 00007ffe2ecb8d50 [ 67.941246][ T5318] [ 67.941254][ T5318] BUG: Bad page state in process syz-executor193 pfn:44324 [ 68.055070][ T5318] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x44324 [ 68.058378][ T5318] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 68.061249][ T5318] raw: 04fff00000000000 dead000000000040 ffff88801e572000 0000000000000000 [ 68.064566][ T5318] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 68.067903][ T5318] page dumped because: page_pool leak [ 68.069930][ T5318] page_owner tracks the page as allocated [ 68.072165][ T5318] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5318, tgid 5318 (syz-executor193), ts 67658058700, free_ts 67542162652 [ 68.078826][ T5318] post_alloc_hook+0x1f4/0x240 [ 68.080787][ T5318] get_page_from_freelist+0x365c/0x37a0 [ 68.082966][ T5318] __alloc_frozen_pages_noprof+0x292/0x710 [ 68.085298][ T5318] alloc_pages_bulk_noprof+0x847/0xae0 [ 68.087431][ T5318] __page_pool_alloc_pages_slow+0x11f/0x690 [ 68.089710][ T5318] skb_pp_cow_data+0xcc8/0x1720 [ 68.091578][ T5318] do_xdp_generic+0x505/0xd30 [ 68.093422][ T5318] tun_get_user+0x2a4b/0x4860 [ 68.095473][ T5318] tun_chr_write_iter+0x10d/0x1f0 [ 68.097305][ T5318] vfs_write+0xacf/0xd10 [ 68.098995][ T5318] ksys_write+0x18f/0x2b0 [ 68.100714][ T5318] do_syscall_64+0xf3/0x230 [ 68.102540][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.104887][ T5318] page last free pid 5313 tgid 5313 stack trace: [ 68.107429][ T5318] free_frozen_pages+0xe0d/0x10e0 [ 68.109532][ T5318] __put_partials+0x160/0x1c0 [ 68.111382][ T5318] put_cpu_partial+0x17c/0x250 [ 68.113304][ T5318] __slab_free+0x290/0x380 [ 68.115075][ T5318] qlist_free_all+0x9a/0x140 [ 68.116847][ T5318] kasan_quarantine_reduce+0x14f/0x170 [ 68.118938][ T5318] __kasan_slab_alloc+0x23/0x80 [ 68.121031][ T5318] kmem_cache_alloc_noprof+0x1d9/0x380 [ 68.123176][ T5318] proc_reg_open+0x201/0x530 [ 68.125074][ T5318] do_dentry_open+0xdec/0x1960 [ 68.126911][ T5318] vfs_open+0x3b/0x370 [ 68.128462][ T5318] path_openat+0x2c9f/0x35b0 [ 68.130423][ T5318] do_filp_open+0x282/0x4e0 [ 68.132111][ T5318] do_sys_openat2+0x122/0x1c0 [ 68.133969][ T5318] __x64_sys_openat+0x247/0x2a0 [ 68.135917][ T5318] do_syscall_64+0xf3/0x230 [ 68.137706][ T5318] Modules linked in: [ 68.139289][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: syz-executor193 Tainted: G B 6.14.0-syzkaller-00624-g2f2d52945852 #0 [ 68.139306][ T5318] Tainted: [B]=BAD_PAGE [ 68.139310][ T5318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.139316][ T5318] Call Trace: [ 68.139320][ T5318] [ 68.139324][ T5318] dump_stack_lvl+0x241/0x360 [ 68.139333][ T5318] ? __pfx_dump_stack_lvl+0x10/0x10 [ 68.139340][ T5318] ? __pfx_print_modules+0x10/0x10 [ 68.139351][ T5318] bad_page+0x176/0x1d0 [ 68.139359][ T5318] free_frozen_pages+0x1082/0x10e0 [ 68.139370][ T5318] bpf_xdp_frags_shrink_tail+0x3b3/0x780 [ 68.139383][ T5318] bpf_xdp_adjust_tail+0x1c6/0x210 [ 68.139395][ T5318] bpf_prog_f476d5219b92964a+0x1e/0x20 [ 68.139404][ T5318] bpf_prog_run_generic_xdp+0x686/0x1510 [ 68.139427][ T5318] do_xdp_generic+0x757/0xd30 [ 68.139439][ T5318] ? __pfx_do_xdp_generic+0x10/0x10 [ 68.139451][ T5318] ? __local_bh_disable_ip+0x179/0x220 [ 68.139465][ T5318] ? __pfx_eth_type_trans+0x10/0x10 [ 68.139478][ T5318] ? tun_get_user+0x2914/0x4860 [ 68.139487][ T5318] tun_get_user+0x2a4b/0x4860 [ 68.139500][ T5318] ? __lock_acquire+0x1397/0x2100 [ 68.139510][ T5318] ? __pfx_tun_get_user+0x10/0x10 [ 68.139526][ T5318] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 68.139540][ T5318] ? tun_get+0x1e/0x2f0 [ 68.139553][ T5318] ? __pfx_lock_release+0x10/0x10 [ 68.139569][ T5318] ? tun_get+0x1e/0x2f0 [ 68.139582][ T5318] ? tun_get+0x27d/0x2f0 [ 68.139596][ T5318] tun_chr_write_iter+0x10d/0x1f0 [ 68.139635][ T5318] vfs_write+0xacf/0xd10 [ 68.139645][ T5318] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 68.139658][ T5318] ? __pfx_vfs_write+0x10/0x10 [ 68.139668][ T5318] ? rcu_is_watching+0x15/0xb0 [ 68.139683][ T5318] ksys_write+0x18f/0x2b0 [ 68.139693][ T5318] ? __pfx_ksys_write+0x10/0x10 [ 68.139703][ T5318] ? do_syscall_64+0x100/0x230 [ 68.139717][ T5318] ? do_syscall_64+0xb6/0x230 [ 68.139729][ T5318] do_syscall_64+0xf3/0x230 [ 68.139742][ T5318] ? clear_bhb_loop+0x35/0x90 [ 68.139757][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.139772][ T5318] RIP: 0033:0x7f3ff23dadf0 [ 68.139782][ T5318] Code: 40 00 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b7 0f 1f 00 80 3d b1 e2 07 00 00 74 17 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 58 c3 0f 1f 80 00 00 00 00 48 83 ec 28 48 89 [ 68.139789][ T5318] RSP: 002b:00007ffe2ecb8d28 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 68.139798][ T5318] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3ff23dadf0 [ 68.139803][ T5318] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8 [ 68.139809][ T5318] RBP: 0000000000000000 R08: 00007ffe2ecb8e58 R09: 00007ffe2ecb8e58 [ 68.139816][ T5318] R10: 00007ffe2ecb8e58 R11: 0000000000000202 R12: 0000000000000000 [ 68.139821][ T5318] R13: 0000000000000000 R14: 00007ffe2ecb8d60 R15: 00007ffe2ecb8d50 [ 68.139833][ T5318] [ 68.139841][ T5318] BUG: Bad page state in process syz-executor193 pfn:44323 [ 68.255905][ T5318] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x44323 [ 68.259401][ T5318] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 68.262302][ T5318] raw: 04fff00000000000 dead000000000040 ffff88801e572000 0000000000000000 [ 68.265663][ T5318] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 68.269049][ T5318] page dumped because: page_pool leak [ 68.271189][ T5318] page_owner tracks the page as allocated [ 68.273387][ T5318] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5318, tgid 5318 (syz-executor193), ts 67658048846, free_ts 67542162652 [ 68.280003][ T5318] post_alloc_hook+0x1f4/0x240 [ 68.281880][ T5318] get_page_from_freelist+0x365c/0x37a0 [ 68.284037][ T5318] __alloc_frozen_pages_noprof+0x292/0x710 [ 68.286306][ T5318] alloc_pages_bulk_noprof+0x847/0xae0 [ 68.288501][ T5318] __page_pool_alloc_pages_slow+0x11f/0x690 [ 68.290943][ T5318] skb_pp_cow_data+0xcc8/0x1720 [ 68.292846][ T5318] do_xdp_generic+0x505/0xd30 [ 68.294744][ T5318] tun_get_user+0x2a4b/0x4860 [ 68.296682][ T5318] tun_chr_write_iter+0x10d/0x1f0 [ 68.298630][ T5318] vfs_write+0xacf/0xd10 [ 68.300393][ T5318] ksys_write+0x18f/0x2b0 [ 68.302089][ T5318] do_syscall_64+0xf3/0x230 [ 68.303982][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.306236][ T5318] page last free pid 5313 tgid 5313 stack trace: [ 68.308659][ T5318] free_frozen_pages+0xe0d/0x10e0 [ 68.310758][ T5318] __put_partials+0x160/0x1c0 [ 68.312497][ T5318] put_cpu_partial+0x17c/0x250 [ 68.314508][ T5318] __slab_free+0x290/0x380 [ 68.316397][ T5318] qlist_free_all+0x9a/0x140 [ 68.318264][ T5318] kasan_quarantine_reduce+0x14f/0x170 [ 68.320736][ T5318] __kasan_slab_alloc+0x23/0x80 [ 68.322867][ T5318] kmem_cache_alloc_noprof+0x1d9/0x380 [ 68.324978][ T5318] proc_reg_open+0x201/0x530 [ 68.326843][ T5318] do_dentry_open+0xdec/0x1960 [ 68.328698][ T5318] vfs_open+0x3b/0x370 [ 68.330273][ T5318] path_openat+0x2c9f/0x35b0 [ 68.332113][ T5318] do_filp_open+0x282/0x4e0 [ 68.334002][ T5318] do_sys_openat2+0x122/0x1c0 [ 68.336013][ T5318] __x64_sys_openat+0x247/0x2a0 [ 68.337914][ T5318] do_syscall_64+0xf3/0x230 [ 68.339785][ T5318] Modules linked in: [ 68.341317][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: syz-executor193 Tainted: G B 6.14.0-syzkaller-00624-g2f2d52945852 #0 [ 68.341333][ T5318] Tainted: [B]=BAD_PAGE [ 68.341337][ T5318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.341344][ T5318] Call Trace: [ 68.341351][ T5318] [ 68.341357][ T5318] dump_stack_lvl+0x241/0x360 [ 68.341368][ T5318] ? __pfx_dump_stack_lvl+0x10/0x10 [ 68.341378][ T5318] ? __pfx_print_modules+0x10/0x10 [ 68.341395][ T5318] bad_page+0x176/0x1d0 [ 68.341407][ T5318] free_frozen_pages+0x1082/0x10e0 [ 68.341424][ T5318] bpf_xdp_frags_shrink_tail+0x3b3/0x780 [ 68.341442][ T5318] bpf_xdp_adjust_tail+0x1c6/0x210 [ 68.341455][ T5318] bpf_prog_f476d5219b92964a+0x1e/0x20 [ 68.341464][ T5318] bpf_prog_run_generic_xdp+0x686/0x1510 [ 68.341486][ T5318] do_xdp_generic+0x757/0xd30 [ 68.341498][ T5318] ? __pfx_do_xdp_generic+0x10/0x10 [ 68.341510][ T5318] ? __local_bh_disable_ip+0x179/0x220 [ 68.341523][ T5318] ? __pfx_eth_type_trans+0x10/0x10 [ 68.341538][ T5318] ? tun_get_user+0x2914/0x4860 [ 68.341554][ T5318] tun_get_user+0x2a4b/0x4860 [ 68.341570][ T5318] ? __lock_acquire+0x1397/0x2100 [ 68.341586][ T5318] ? __pfx_tun_get_user+0x10/0x10 [ 68.341605][ T5318] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 68.341618][ T5318] ? tun_get+0x1e/0x2f0 [ 68.341631][ T5318] ? __pfx_lock_release+0x10/0x10 [ 68.341647][ T5318] ? tun_get+0x1e/0x2f0 [ 68.341660][ T5318] ? tun_get+0x27d/0x2f0 [ 68.341674][ T5318] tun_chr_write_iter+0x10d/0x1f0 [ 68.341689][ T5318] vfs_write+0xacf/0xd10 [ 68.341701][ T5318] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 68.341716][ T5318] ? __pfx_vfs_write+0x10/0x10 [ 68.341726][ T5318] ? rcu_is_watching+0x15/0xb0 [ 68.341740][ T5318] ksys_write+0x18f/0x2b0 [ 68.341750][ T5318] ? __pfx_ksys_write+0x10/0x10 [ 68.341759][ T5318] ? do_syscall_64+0x100/0x230 [ 68.341774][ T5318] ? do_syscall_64+0xb6/0x230 [ 68.341787][ T5318] do_syscall_64+0xf3/0x230 [ 68.341800][ T5318] ? clear_bhb_loop+0x35/0x90 [ 68.341815][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.341829][ T5318] RIP: 0033:0x7f3ff23dadf0 [ 68.341840][ T5318] Code: 40 00 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b7 0f 1f 00 80 3d b1 e2 07 00 00 74 17 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 58 c3 0f 1f 80 00 00 00 00 48 83 ec 28 48 89 [ 68.341847][ T5318] RSP: 002b:00007ffe2ecb8d28 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 68.341859][ T5318] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3ff23dadf0 [ 68.341867][ T5318] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8 [ 68.341874][ T5318] RBP: 0000000000000000 R08: 00007ffe2ecb8e58 R09: 00007ffe2ecb8e58 [ 68.341880][ T5318] R10: 00007ffe2ecb8e58 R11: 0000000000000202 R12: 0000000000000000 [ 68.341886][ T5318] R13: 0000000000000000 R14: 00007ffe2ecb8d60 R15: 00007ffe2ecb8d50 [ 68.341896][ T5318] [ 68.341904][ T5318] BUG: Bad page state in process syz-executor193 pfn:44322 [ 68.453380][ T5318] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x44322 [ 68.456866][ T5318] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 68.459897][ T5318] raw: 04fff00000000000 dead000000000040 ffff88801e572000 0000000000000000 [ 68.463292][ T5318] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 68.466684][ T5318] page dumped because: page_pool leak [ 68.468785][ T5318] page_owner tracks the page as allocated [ 68.471022][ T5318] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5318, tgid 5318 (syz-executor193), ts 67658039064, free_ts 67542162652 [ 68.477612][ T5318] post_alloc_hook+0x1f4/0x240 [ 68.479519][ T5318] get_page_from_freelist+0x365c/0x37a0 [ 68.481692][ T5318] __alloc_frozen_pages_noprof+0x292/0x710 [ 68.484007][ T5318] alloc_pages_bulk_noprof+0x847/0xae0 [ 68.486252][ T5318] __page_pool_alloc_pages_slow+0x11f/0x690 [ 68.488566][ T5318] skb_pp_cow_data+0xcc8/0x1720 [ 68.490452][ T5318] do_xdp_generic+0x505/0xd30 [ 68.492420][ T5318] tun_get_user+0x2a4b/0x4860 [ 68.494381][ T5318] tun_chr_write_iter+0x10d/0x1f0 [ 68.496352][ T5318] vfs_write+0xacf/0xd10 [ 68.498049][ T5318] ksys_write+0x18f/0x2b0 [ 68.499914][ T5318] do_syscall_64+0xf3/0x230 [ 68.501940][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.504439][ T5318] page last free pid 5313 tgid 5313 stack trace: [ 68.506722][ T5318] free_frozen_pages+0xe0d/0x10e0 [ 68.508639][ T5318] __put_partials+0x160/0x1c0 [ 68.510493][ T5318] put_cpu_partial+0x17c/0x250 [ 68.512461][ T5318] __slab_free+0x290/0x380 [ 68.514246][ T5318] qlist_free_all+0x9a/0x140 [ 68.516138][ T5318] kasan_quarantine_reduce+0x14f/0x170 [ 68.518289][ T5318] __kasan_slab_alloc+0x23/0x80 [ 68.520270][ T5318] kmem_cache_alloc_noprof+0x1d9/0x380 [ 68.522368][ T5318] proc_reg_open+0x201/0x530 [ 68.524082][ T5318] do_dentry_open+0xdec/0x1960 [ 68.525924][ T5318] vfs_open+0x3b/0x370 [ 68.527584][ T5318] path_openat+0x2c9f/0x35b0 [ 68.529482][ T5318] do_filp_open+0x282/0x4e0 [ 68.531187][ T5318] do_sys_openat2+0x122/0x1c0 [ 68.533202][ T5318] __x64_sys_openat+0x247/0x2a0 [ 68.534817][ T5318] do_syscall_64+0xf3/0x230 [ 68.536430][ T5318] Modules linked in: [ 68.537843][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: syz-executor193 Tainted: G B 6.14.0-syzkaller-00624-g2f2d52945852 #0 [ 68.537859][ T5318] Tainted: [B]=BAD_PAGE [ 68.537863][ T5318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.537869][ T5318] Call Trace: [ 68.537875][ T5318] [ 68.537880][ T5318] dump_stack_lvl+0x241/0x360 [ 68.537895][ T5318] ? __pfx_dump_stack_lvl+0x10/0x10 [ 68.537906][ T5318] ? __pfx_print_modules+0x10/0x10 [ 68.537923][ T5318] bad_page+0x176/0x1d0 [ 68.537936][ T5318] free_frozen_pages+0x1082/0x10e0 [ 68.537953][ T5318] bpf_xdp_frags_shrink_tail+0x3b3/0x780 [ 68.537971][ T5318] bpf_xdp_adjust_tail+0x1c6/0x210 [ 68.537985][ T5318] bpf_prog_f476d5219b92964a+0x1e/0x20 [ 68.537995][ T5318] bpf_prog_run_generic_xdp+0x686/0x1510 [ 68.538018][ T5318] do_xdp_generic+0x757/0xd30 [ 68.538030][ T5318] ? __pfx_do_xdp_generic+0x10/0x10 [ 68.538041][ T5318] ? __local_bh_disable_ip+0x179/0x220 [ 68.538055][ T5318] ? __pfx_eth_type_trans+0x10/0x10 [ 68.538069][ T5318] ? tun_get_user+0x2914/0x4860 [ 68.538083][ T5318] tun_get_user+0x2a4b/0x4860 [ 68.538100][ T5318] ? __lock_acquire+0x1397/0x2100 [ 68.538116][ T5318] ? __pfx_tun_get_user+0x10/0x10 [ 68.538134][ T5318] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 68.538148][ T5318] ? tun_get+0x1e/0x2f0 [ 68.538162][ T5318] ? __pfx_lock_release+0x10/0x10 [ 68.538179][ T5318] ? tun_get+0x1e/0x2f0 [ 68.538187][ T5318] ? tun_get+0x27d/0x2f0 [ 68.538197][ T5318] tun_chr_write_iter+0x10d/0x1f0 [ 68.538207][ T5318] vfs_write+0xacf/0xd10 [ 68.538215][ T5318] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 68.538228][ T5318] ? __pfx_vfs_write+0x10/0x10 [ 68.538237][ T5318] ? rcu_is_watching+0x15/0xb0 [ 68.538255][ T5318] ksys_write+0x18f/0x2b0 [ 68.538265][ T5318] ? __pfx_ksys_write+0x10/0x10 [ 68.538275][ T5318] ? do_syscall_64+0x100/0x230 [ 68.538289][ T5318] ? do_syscall_64+0xb6/0x230 [ 68.538302][ T5318] do_syscall_64+0xf3/0x230 [ 68.538314][ T5318] ? clear_bhb_loop+0x35/0x90 [ 68.538329][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.538343][ T5318] RIP: 0033:0x7f3ff23dadf0 [ 68.538352][ T5318] Code: 40 00 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b7 0f 1f 00 80 3d b1 e2 07 00 00 74 17 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 58 c3 0f 1f 80 00 00 00 00 48 83 ec 28 48 89 [ 68.538358][ T5318] RSP: 002b:00007ffe2ecb8d28 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 68.538366][ T5318] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3ff23dadf0 [ 68.538371][ T5318] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8 [ 68.538376][ T5318] RBP: 0000000000000000 R08: 00007ffe2ecb8e58 R09: 00007ffe2ecb8e58 [ 68.538382][ T5318] R10: 00007ffe2ecb8e58 R11: 0000000000000202 R12: 0000000000000000 [ 68.538388][ T5318] R13: 0000000000000000 R14: 00007ffe2ecb8d60 R15: 00007ffe2ecb8d50 [ 68.538397][ T5318] [ 68.538405][ T5318] BUG: Bad page state in process syz-executor193 pfn:44321 [ 68.648802][ T5318] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x8 pfn:0x44321 [ 68.651848][ T5318] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 68.654537][ T5318] raw: 04fff00000000000 dead000000000040 ffff88801e572000 0000000000000000 [ 68.657872][ T5318] raw: 0000000000000008 0000000000000001 00000000ffffffff 0000000000000000 [ 68.661118][ T5318] page dumped because: page_pool leak [ 68.663304][ T5318] page_owner tracks the page as allocated [ 68.665571][ T5318] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5318, tgid 5318 (syz-executor193), ts 67658029396, free_ts 67542162652 [ 68.672355][ T5318] post_alloc_hook+0x1f4/0x240 [ 68.674181][ T5318] get_page_from_freelist+0x365c/0x37a0 [ 68.676195][ T5318] __alloc_frozen_pages_noprof+0x292/0x710 [ 68.678455][ T5318] alloc_pages_bulk_noprof+0x847/0xae0 [ 68.680650][ T5318] __page_pool_alloc_pages_slow+0x11f/0x690 [ 68.682805][ T5318] skb_pp_cow_data+0xcc8/0x1720 [ 68.684792][ T5318] do_xdp_generic+0x505/0xd30 [ 68.686684][ T5318] tun_get_user+0x2a4b/0x4860 [ 68.688327][ T5318] tun_chr_write_iter+0x10d/0x1f0 [ 68.690406][ T5318] vfs_write+0xacf/0xd10 [ 68.692169][ T5318] ksys_write+0x18f/0x2b0 [ 68.693853][ T5318] do_syscall_64+0xf3/0x230 [ 68.695808][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.698305][ T5318] page last free pid 5313 tgid 5313 stack trace: [ 68.700928][ T5318] free_frozen_pages+0xe0d/0x10e0 [ 68.702760][ T5318] __put_partials+0x160/0x1c0 [ 68.704443][ T5318] put_cpu_partial+0x17c/0x250 [ 68.706203][ T5318] __slab_free+0x290/0x380 [ 68.707876][ T5318] qlist_free_all+0x9a/0x140 [ 68.709489][ T5318] kasan_quarantine_reduce+0x14f/0x170 [ 68.711347][ T5318] __kasan_slab_alloc+0x23/0x80 [ 68.713040][ T5318] kmem_cache_alloc_noprof+0x1d9/0x380 [ 68.715041][ T5318] proc_reg_open+0x201/0x530 [ 68.716792][ T5318] do_dentry_open+0xdec/0x1960 [ 68.718773][ T5318] vfs_open+0x3b/0x370 [ 68.720441][ T5318] path_openat+0x2c9f/0x35b0 [ 68.722379][ T5318] do_filp_open+0x282/0x4e0 [ 68.724148][ T5318] do_sys_openat2+0x122/0x1c0 [ 68.726098][ T5318] __x64_sys_openat+0x247/0x2a0 [ 68.728054][ T5318] do_syscall_64+0xf3/0x230 [ 68.729853][ T5318] Modules linked in: [ 68.731376][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: syz-executor193 Tainted: G B 6.14.0-syzkaller-00624-g2f2d52945852 #0 [ 68.731393][ T5318] Tainted: [B]=BAD_PAGE [ 68.731397][ T5318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.731403][ T5318] Call Trace: [ 68.731410][ T5318] [ 68.731416][ T5318] dump_stack_lvl+0x241/0x360 [ 68.731429][ T5318] ? __pfx_dump_stack_lvl+0x10/0x10 [ 68.731436][ T5318] ? __pfx_print_modules+0x10/0x10 [ 68.731457][ T5318] bad_page+0x176/0x1d0 [ 68.731468][ T5318] free_frozen_pages+0x1082/0x10e0 [ 68.731485][ T5318] bpf_xdp_frags_shrink_tail+0x3b3/0x780 [ 68.731504][ T5318] bpf_xdp_adjust_tail+0x1c6/0x210 [ 68.731517][ T5318] bpf_prog_f476d5219b92964a+0x1e/0x20 [ 68.731525][ T5318] bpf_prog_run_generic_xdp+0x686/0x1510 [ 68.731546][ T5318] do_xdp_generic+0x757/0xd30 [ 68.731557][ T5318] ? __pfx_do_xdp_generic+0x10/0x10 [ 68.731568][ T5318] ? __local_bh_disable_ip+0x179/0x220 [ 68.731586][ T5318] ? __pfx_eth_type_trans+0x10/0x10 [ 68.731624][ T5318] ? tun_get_user+0x2914/0x4860 [ 68.731639][ T5318] tun_get_user+0x2a4b/0x4860 [ 68.731657][ T5318] ? __lock_acquire+0x1397/0x2100 [ 68.731670][ T5318] ? __pfx_tun_get_user+0x10/0x10 [ 68.731682][ T5318] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 68.731692][ T5318] ? tun_get+0x1e/0x2f0 [ 68.731701][ T5318] ? __pfx_lock_release+0x10/0x10 [ 68.731712][ T5318] ? tun_get+0x1e/0x2f0 [ 68.731725][ T5318] ? tun_get+0x27d/0x2f0 [ 68.731738][ T5318] tun_chr_write_iter+0x10d/0x1f0 [ 68.731753][ T5318] vfs_write+0xacf/0xd10 [ 68.731765][ T5318] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 68.731779][ T5318] ? __pfx_vfs_write+0x10/0x10 [ 68.731789][ T5318] ? rcu_is_watching+0x15/0xb0 [ 68.731803][ T5318] ksys_write+0x18f/0x2b0 [ 68.731813][ T5318] ? __pfx_ksys_write+0x10/0x10 [ 68.731824][ T5318] ? do_syscall_64+0x100/0x230 [ 68.731838][ T5318] ? do_syscall_64+0xb6/0x230 [ 68.731851][ T5318] do_syscall_64+0xf3/0x230 [ 68.731864][ T5318] ? clear_bhb_loop+0x35/0x90 [ 68.731875][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.731884][ T5318] RIP: 0033:0x7f3ff23dadf0 [ 68.731892][ T5318] Code: 40 00 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b7 0f 1f 00 80 3d b1 e2 07 00 00 74 17 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 58 c3 0f 1f 80 00 00 00 00 48 83 ec 28 48 89 [ 68.731897][ T5318] RSP: 002b:00007ffe2ecb8d28 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 68.731906][ T5318] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3ff23dadf0 [ 68.731911][ T5318] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8 [ 68.731916][ T5318] RBP: 0000000000000000 R08: 00007ffe2ecb8e58 R09: 00007ffe2ecb8e58 [ 68.731923][ T5318] R10: 00007ffe2ecb8e58 R11: 0000000000000202 R12: 0000000000000000 [ 68.731929][ T5318] R13: 0000000000000000 R14: 00007ffe2ecb8d60 R15: 00007ffe2ecb8d50 [ 68.731938][ T5318] [ 68.731946][ T5318] BUG: Bad page state in process syz-executor193 pfn:44320 [ 68.840577][ T5318] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888044322000 pfn:0x44320 [ 68.845064][ T5318] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 68.848410][ T5318] raw: 04fff00000000000 dead000000000040 ffff88801e572000 0000000000000000 [ 68.851624][ T5318] raw: ffff888044322000 0000000000000001 00000000ffffffff 0000000000000000 [ 68.854703][ T5318] page dumped because: page_pool leak [ 68.856659][ T5318] page_owner tracks the page as allocated [ 68.858973][ T5318] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5318, tgid 5318 (syz-executor193), ts 67658019999, free_ts 67542162652 [ 68.865739][ T5318] post_alloc_hook+0x1f4/0x240 [ 68.867675][ T5318] get_page_from_freelist+0x365c/0x37a0 [ 68.869677][ T5318] __alloc_frozen_pages_noprof+0x292/0x710 [ 68.871906][ T5318] alloc_pages_bulk_noprof+0x847/0xae0 [ 68.874090][ T5318] __page_pool_alloc_pages_slow+0x11f/0x690 [ 68.876531][ T5318] skb_pp_cow_data+0xcc8/0x1720 [ 68.878343][ T5318] do_xdp_generic+0x505/0xd30 [ 68.879967][ T5318] tun_get_user+0x2a4b/0x4860 [ 68.881703][ T5318] tun_chr_write_iter+0x10d/0x1f0 [ 68.883437][ T5318] vfs_write+0xacf/0xd10 [ 68.885112][ T5318] ksys_write+0x18f/0x2b0 [ 68.886751][ T5318] do_syscall_64+0xf3/0x230 [ 68.888642][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.890912][ T5318] page last free pid 5313 tgid 5313 stack trace: [ 68.893329][ T5318] free_frozen_pages+0xe0d/0x10e0 [ 68.895404][ T5318] __put_partials+0x160/0x1c0 [ 68.897400][ T5318] put_cpu_partial+0x17c/0x250 [ 68.899442][ T5318] __slab_free+0x290/0x380 [ 68.901331][ T5318] qlist_free_all+0x9a/0x140 [ 68.903402][ T5318] kasan_quarantine_reduce+0x14f/0x170 [ 68.906122][ T5318] __kasan_slab_alloc+0x23/0x80 [ 68.908545][ T5318] kmem_cache_alloc_noprof+0x1d9/0x380 [ 68.911192][ T5318] proc_reg_open+0x201/0x530 [ 68.913559][ T5318] do_dentry_open+0xdec/0x1960 [ 68.916029][ T5318] vfs_open+0x3b/0x370 [ 68.917968][ T5318] path_openat+0x2c9f/0x35b0 [ 68.920287][ T5318] do_filp_open+0x282/0x4e0 [ 68.922651][ T5318] do_sys_openat2+0x122/0x1c0 [ 68.925042][ T5318] __x64_sys_openat+0x247/0x2a0 [ 68.927228][ T5318] do_syscall_64+0xf3/0x230 [ 68.929165][ T5318] Modules linked in: [ 68.930865][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: syz-executor193 Tainted: G B 6.14.0-syzkaller-00624-g2f2d52945852 #0 [ 68.930882][ T5318] Tainted: [B]=BAD_PAGE [ 68.930886][ T5318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.930893][ T5318] Call Trace: [ 68.930899][ T5318] [ 68.930904][ T5318] dump_stack_lvl+0x241/0x360 [ 68.930918][ T5318] ? __pfx_dump_stack_lvl+0x10/0x10 [ 68.930929][ T5318] ? __pfx_print_modules+0x10/0x10 [ 68.930946][ T5318] bad_page+0x176/0x1d0 [ 68.930959][ T5318] free_frozen_pages+0x1082/0x10e0 [ 68.930976][ T5318] bpf_xdp_frags_shrink_tail+0x3b3/0x780 [ 68.930994][ T5318] bpf_xdp_adjust_tail+0x1c6/0x210 [ 68.931008][ T5318] bpf_prog_f476d5219b92964a+0x1e/0x20 [ 68.931018][ T5318] bpf_prog_run_generic_xdp+0x686/0x1510 [ 68.931040][ T5318] do_xdp_generic+0x757/0xd30 [ 68.931052][ T5318] ? __pfx_do_xdp_generic+0x10/0x10 [ 68.931063][ T5318] ? __local_bh_disable_ip+0x179/0x220 [ 68.931077][ T5318] ? __pfx_eth_type_trans+0x10/0x10 [ 68.931091][ T5318] ? tun_get_user+0x2914/0x4860 [ 68.931107][ T5318] tun_get_user+0x2a4b/0x4860 [ 68.931126][ T5318] ? __lock_acquire+0x1397/0x2100 [ 68.931142][ T5318] ? __pfx_tun_get_user+0x10/0x10 [ 68.931162][ T5318] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 68.931177][ T5318] ? tun_get+0x1e/0x2f0 [ 68.931191][ T5318] ? __pfx_lock_release+0x10/0x10 [ 68.931208][ T5318] ? tun_get+0x1e/0x2f0 [ 68.931235][ T5318] ? tun_get+0x27d/0x2f0 [ 68.931250][ T5318] tun_chr_write_iter+0x10d/0x1f0 [ 68.931267][ T5318] vfs_write+0xacf/0xd10 [ 68.931279][ T5318] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 68.931294][ T5318] ? __pfx_vfs_write+0x10/0x10 [ 68.931305][ T5318] ? rcu_is_watching+0x15/0xb0 [ 68.931320][ T5318] ksys_write+0x18f/0x2b0 [ 68.931331][ T5318] ? __pfx_ksys_write+0x10/0x10 [ 68.931342][ T5318] ? do_syscall_64+0x100/0x230 [ 68.931357][ T5318] ? do_syscall_64+0xb6/0x230 [ 68.931371][ T5318] do_syscall_64+0xf3/0x230 [ 68.931385][ T5318] ? clear_bhb_loop+0x35/0x90 [ 68.931401][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.931416][ T5318] RIP: 0033:0x7f3ff23dadf0 [ 68.931428][ T5318] Code: 40 00 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b7 0f 1f 00 80 3d b1 e2 07 00 00 74 17 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 58 c3 0f 1f 80 00 00 00 00 48 83 ec 28 48 89 [ 68.931437][ T5318] RSP: 002b:00007ffe2ecb8d28 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 68.931449][ T5318] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3ff23dadf0 [ 68.931457][ T5318] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8 [ 68.931463][ T5318] RBP: 0000000000000000 R08: 00007ffe2ecb8e58 R09: 00007ffe2ecb8e58 [ 68.931470][ T5318] R10: 00007ffe2ecb8e58 R11: 0000000000000202 R12: 0000000000000000 [ 68.931477][ T5318] R13: 0000000000000000 R14: 00007ffe2ecb8d60 R15: 00007ffe2ecb8d50 [ 68.931486][ T5318] [ 68.931496][ T5318] BUG: Bad page state in process syz-executor193 pfn:44857 [ 69.044174][ T5318] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x44857 [ 69.047489][ T5318] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 69.050197][ T5318] raw: 04fff00000000000 dead000000000040 ffff88801e572000 0000000000000000 [ 69.053356][ T5318] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 69.056228][ T5318] page dumped because: page_pool leak [ 69.057940][ T5318] page_owner tracks the page as allocated [ 69.059784][ T5318] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5318, tgid 5318 (syz-executor193), ts 67657991941, free_ts 63760645561 [ 69.065764][ T5318] post_alloc_hook+0x1f4/0x240 [ 69.067387][ T5318] get_page_from_freelist+0x365c/0x37a0 [ 69.069429][ T5318] __alloc_frozen_pages_noprof+0x292/0x710 [ 69.071654][ T5318] alloc_pages_bulk_noprof+0x847/0xae0 [ 69.073661][ T5318] __page_pool_alloc_pages_slow+0x11f/0x690 [ 69.075923][ T5318] skb_pp_cow_data+0xcc8/0x1720 [ 69.077800][ T5318] do_xdp_generic+0x505/0xd30 [ 69.079455][ T5318] tun_get_user+0x2a4b/0x4860 [ 69.081210][ T5318] tun_chr_write_iter+0x10d/0x1f0 [ 69.083048][ T5318] vfs_write+0xacf/0xd10 [ 69.084596][ T5318] ksys_write+0x18f/0x2b0 [ 69.086276][ T5318] do_syscall_64+0xf3/0x230 [ 69.088092][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.090375][ T5318] page last free pid 5251 tgid 5251 stack trace: [ 69.092730][ T5318] free_frozen_pages+0xe0d/0x10e0 [ 69.094693][ T5318] skb_release_data+0x6dc/0x8a0 [ 69.096611][ T5318] kfree_skb_list_reason+0x2ee/0x750 [ 69.098545][ T5318] skb_release_data+0x5cc/0x8a0 [ 69.100367][ T5318] skb_attempt_defer_free+0x42f/0x5c0 [ 69.102317][ T5318] tcp_recvmsg_locked+0x2800/0x3a90 [ 69.104245][ T5318] tcp_recvmsg+0x25d/0x920 [ 69.106102][ T5318] inet_recvmsg+0x150/0x2d0 [ 69.107957][ T5318] sock_recvmsg+0x1ae/0x280 [ 69.109809][ T5318] sock_read_iter+0x2c4/0x3d0 [ 69.111700][ T5318] vfs_read+0x975/0xb40 [ 69.113381][ T5318] ksys_read+0x18f/0x2b0 [ 69.115027][ T5318] do_syscall_64+0xf3/0x230 [ 69.116666][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.118810][ T5318] Modules linked in: [ 69.120379][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: syz-executor193 Tainted: G B 6.14.0-syzkaller-00624-g2f2d52945852 #0 [ 69.120396][ T5318] Tainted: [B]=BAD_PAGE [ 69.120399][ T5318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.120406][ T5318] Call Trace: [ 69.120412][ T5318] [ 69.120417][ T5318] dump_stack_lvl+0x241/0x360 [ 69.120431][ T5318] ? __pfx_dump_stack_lvl+0x10/0x10 [ 69.120441][ T5318] ? __pfx_print_modules+0x10/0x10 [ 69.120456][ T5318] bad_page+0x176/0x1d0 [ 69.120468][ T5318] free_frozen_pages+0x1082/0x10e0 [ 69.120484][ T5318] bpf_xdp_frags_shrink_tail+0x3b3/0x780 [ 69.120502][ T5318] bpf_xdp_adjust_tail+0x1c6/0x210 [ 69.120514][ T5318] bpf_prog_f476d5219b92964a+0x1e/0x20 [ 69.120523][ T5318] bpf_prog_run_generic_xdp+0x686/0x1510 [ 69.120544][ T5318] do_xdp_generic+0x757/0xd30 [ 69.120554][ T5318] ? __pfx_do_xdp_generic+0x10/0x10 [ 69.120565][ T5318] ? __local_bh_disable_ip+0x179/0x220 [ 69.120577][ T5318] ? __pfx_eth_type_trans+0x10/0x10 [ 69.120591][ T5318] ? tun_get_user+0x2914/0x4860 [ 69.120605][ T5318] tun_get_user+0x2a4b/0x4860 [ 69.120622][ T5318] ? __lock_acquire+0x1397/0x2100 [ 69.120638][ T5318] ? __pfx_tun_get_user+0x10/0x10 [ 69.120656][ T5318] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 69.120669][ T5318] ? tun_get+0x1e/0x2f0 [ 69.120682][ T5318] ? __pfx_lock_release+0x10/0x10 [ 69.120698][ T5318] ? tun_get+0x1e/0x2f0 [ 69.120711][ T5318] ? tun_get+0x27d/0x2f0 [ 69.120725][ T5318] tun_chr_write_iter+0x10d/0x1f0 [ 69.120739][ T5318] vfs_write+0xacf/0xd10 [ 69.120750][ T5318] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 69.120764][ T5318] ? __pfx_vfs_write+0x10/0x10 [ 69.120774][ T5318] ? rcu_is_watching+0x15/0xb0 [ 69.120787][ T5318] ksys_write+0x18f/0x2b0 [ 69.120797][ T5318] ? __pfx_ksys_write+0x10/0x10 [ 69.120807][ T5318] ? do_syscall_64+0x100/0x230 [ 69.120820][ T5318] ? do_syscall_64+0xb6/0x230 [ 69.120833][ T5318] do_syscall_64+0xf3/0x230 [ 69.120845][ T5318] ? clear_bhb_loop+0x35/0x90 [ 69.120860][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.120873][ T5318] RIP: 0033:0x7f3ff23dadf0 [ 69.120883][ T5318] Code: 40 00 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b7 0f 1f 00 80 3d b1 e2 07 00 00 74 17 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 58 c3 0f 1f 80 00 00 00 00 48 83 ec 28 48 89 [ 69.120891][ T5318] RSP: 002b:00007ffe2ecb8d28 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 69.120902][ T5318] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3ff23dadf0 [ 69.120909][ T5318] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8 [ 69.120916][ T5318] RBP: 0000000000000000 R08: 00007ffe2ecb8e58 R09: 00007ffe2ecb8e58 [ 69.120922][ T5318] R10: 00007ffe2ecb8e58 R11: 0000000000000202 R12: 0000000000000000 [ 69.120928][ T5318] R13: 0000000000000000 R14: 00007ffe2ecb8d60 R15: 00007ffe2ecb8d50 [ 69.120937][ T5318] [ 69.120944][ T5318] BUG: Bad page state in process syz-executor193 pfn:44856 [ 69.227774][ T5318] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x44856 [ 69.231156][ T5318] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 69.233881][ T5318] raw: 04fff00000000000 dead000000000040 ffff88801e572000 0000000000000000 [ 69.237337][ T5318] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 69.240568][ T5318] page dumped because: page_pool leak [ 69.242504][ T5318] page_owner tracks the page as allocated [ 69.244822][ T5318] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5318, tgid 5318 (syz-executor193), ts 67657982342, free_ts 63760645561 [ 69.251323][ T5318] post_alloc_hook+0x1f4/0x240 [ 69.253169][ T5318] get_page_from_freelist+0x365c/0x37a0 [ 69.255308][ T5318] __alloc_frozen_pages_noprof+0x292/0x710 [ 69.257622][ T5318] alloc_pages_bulk_noprof+0x847/0xae0 [ 69.259780][ T5318] __page_pool_alloc_pages_slow+0x11f/0x690 [ 69.262001][ T5318] skb_pp_cow_data+0xcc8/0x1720 [ 69.263785][ T5318] do_xdp_generic+0x505/0xd30 [ 69.265636][ T5318] tun_get_user+0x2a4b/0x4860 [ 69.267318][ T5318] tun_chr_write_iter+0x10d/0x1f0 [ 69.269259][ T5318] vfs_write+0xacf/0xd10 [ 69.270826][ T5318] ksys_write+0x18f/0x2b0 [ 69.272449][ T5318] do_syscall_64+0xf3/0x230 [ 69.274158][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.276478][ T5318] page last free pid 5251 tgid 5251 stack trace: [ 69.278854][ T5318] free_frozen_pages+0xe0d/0x10e0 [ 69.280714][ T5318] skb_release_data+0x6dc/0x8a0 [ 69.282554][ T5318] kfree_skb_list_reason+0x2ee/0x750 [ 69.284535][ T5318] skb_release_data+0x5cc/0x8a0 [ 69.286405][ T5318] skb_attempt_defer_free+0x42f/0x5c0 [ 69.288436][ T5318] tcp_recvmsg_locked+0x2800/0x3a90 [ 69.290403][ T5318] tcp_recvmsg+0x25d/0x920 [ 69.292147][ T5318] inet_recvmsg+0x150/0x2d0 [ 69.293859][ T5318] sock_recvmsg+0x1ae/0x280 [ 69.295734][ T5318] sock_read_iter+0x2c4/0x3d0 [ 69.297531][ T5318] vfs_read+0x975/0xb40 [ 69.299277][ T5318] ksys_read+0x18f/0x2b0 [ 69.300812][ T5318] do_syscall_64+0xf3/0x230 [ 69.302448][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.304818][ T5318] Modules linked in: [ 69.306220][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: syz-executor193 Tainted: G B 6.14.0-syzkaller-00624-g2f2d52945852 #0 [ 69.306236][ T5318] Tainted: [B]=BAD_PAGE [ 69.306239][ T5318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.306245][ T5318] Call Trace: [ 69.306252][ T5318] [ 69.306256][ T5318] dump_stack_lvl+0x241/0x360 [ 69.306270][ T5318] ? __pfx_dump_stack_lvl+0x10/0x10 [ 69.306280][ T5318] ? __pfx_print_modules+0x10/0x10 [ 69.306295][ T5318] bad_page+0x176/0x1d0 [ 69.306308][ T5318] free_frozen_pages+0x1082/0x10e0 [ 69.306325][ T5318] bpf_xdp_frags_shrink_tail+0x3b3/0x780 [ 69.306344][ T5318] bpf_xdp_adjust_tail+0x1c6/0x210 [ 69.306355][ T5318] bpf_prog_f476d5219b92964a+0x1e/0x20 [ 69.306362][ T5318] bpf_prog_run_generic_xdp+0x686/0x1510 [ 69.306376][ T5318] do_xdp_generic+0x757/0xd30 [ 69.306384][ T5318] ? __pfx_do_xdp_generic+0x10/0x10 [ 69.306391][ T5318] ? __local_bh_disable_ip+0x179/0x220 [ 69.306400][ T5318] ? __pfx_eth_type_trans+0x10/0x10 [ 69.306409][ T5318] ? tun_get_user+0x2914/0x4860 [ 69.306419][ T5318] tun_get_user+0x2a4b/0x4860 [ 69.306430][ T5318] ? __lock_acquire+0x1397/0x2100 [ 69.306441][ T5318] ? __pfx_tun_get_user+0x10/0x10 [ 69.306452][ T5318] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 69.306462][ T5318] ? tun_get+0x1e/0x2f0 [ 69.306473][ T5318] ? __pfx_lock_release+0x10/0x10 [ 69.306489][ T5318] ? tun_get+0x1e/0x2f0 [ 69.306503][ T5318] ? tun_get+0x27d/0x2f0 [ 69.306516][ T5318] tun_chr_write_iter+0x10d/0x1f0 [ 69.306531][ T5318] vfs_write+0xacf/0xd10 [ 69.306542][ T5318] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 69.306556][ T5318] ? __pfx_vfs_write+0x10/0x10 [ 69.306567][ T5318] ? rcu_is_watching+0x15/0xb0 [ 69.306581][ T5318] ksys_write+0x18f/0x2b0 [ 69.306591][ T5318] ? __pfx_ksys_write+0x10/0x10 [ 69.306598][ T5318] ? do_syscall_64+0x100/0x230 [ 69.306608][ T5318] ? do_syscall_64+0xb6/0x230 [ 69.306621][ T5318] do_syscall_64+0xf3/0x230 [ 69.306633][ T5318] ? clear_bhb_loop+0x35/0x90 [ 69.306648][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.306661][ T5318] RIP: 0033:0x7f3ff23dadf0 [ 69.306671][ T5318] Code: 40 00 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b7 0f 1f 00 80 3d b1 e2 07 00 00 74 17 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 58 c3 0f 1f 80 00 00 00 00 48 83 ec 28 48 89 [ 69.306679][ T5318] RSP: 002b:00007ffe2ecb8d28 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 69.306691][ T5318] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3ff23dadf0 [ 69.306697][ T5318] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8 [ 69.306704][ T5318] RBP: 0000000000000000 R08: 00007ffe2ecb8e58 R09: 00007ffe2ecb8e58 [ 69.306710][ T5318] R10: 00007ffe2ecb8e58 R11: 0000000000000202 R12: 0000000000000000 [ 69.306717][ T5318] R13: 0000000000000000 R14: 00007ffe2ecb8d60 R15: 00007ffe2ecb8d50 [ 69.306727][ T5318] [ 69.306736][ T5318] BUG: Bad page state in process syz-executor193 pfn:44855 [ 69.415331][ T5318] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x44855 [ 69.418643][ T5318] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 69.421268][ T5318] raw: 04fff00000000000 dead000000000040 ffff88801e572000 0000000000000000 [ 69.424454][ T5318] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 69.427567][ T5318] page dumped because: page_pool leak [ 69.429634][ T5318] page_owner tracks the page as allocated [ 69.431840][ T5318] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5318, tgid 5318 (syz-executor193), ts 67657972939, free_ts 63760645561 [ 69.438251][ T5318] post_alloc_hook+0x1f4/0x240 [ 69.440204][ T5318] get_page_from_freelist+0x365c/0x37a0 [ 69.442225][ T5318] __alloc_frozen_pages_noprof+0x292/0x710 [ 69.444531][ T5318] alloc_pages_bulk_noprof+0x847/0xae0 [ 69.446764][ T5318] __page_pool_alloc_pages_slow+0x11f/0x690 [ 69.449117][ T5318] skb_pp_cow_data+0xcc8/0x1720 [ 69.451009][ T5318] do_xdp_generic+0x505/0xd30 [ 69.452894][ T5318] tun_get_user+0x2a4b/0x4860 [ 69.454714][ T5318] tun_chr_write_iter+0x10d/0x1f0 [ 69.456561][ T5318] vfs_write+0xacf/0xd10 [ 69.458288][ T5318] ksys_write+0x18f/0x2b0 [ 69.459984][ T5318] do_syscall_64+0xf3/0x230 [ 69.461783][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.464079][ T5318] page last free pid 5251 tgid 5251 stack trace: [ 69.466620][ T5318] free_frozen_pages+0xe0d/0x10e0 [ 69.468641][ T5318] skb_release_data+0x6dc/0x8a0 [ 69.470536][ T5318] kfree_skb_list_reason+0x2ee/0x750 [ 69.472641][ T5318] skb_release_data+0x5cc/0x8a0 [ 69.474683][ T5318] skb_attempt_defer_free+0x42f/0x5c0 [ 69.476645][ T5318] tcp_recvmsg_locked+0x2800/0x3a90 [ 69.478496][ T5318] tcp_recvmsg+0x25d/0x920 [ 69.480362][ T5318] inet_recvmsg+0x150/0x2d0 [ 69.482136][ T5318] sock_recvmsg+0x1ae/0x280 [ 69.483934][ T5318] sock_read_iter+0x2c4/0x3d0 [ 69.485872][ T5318] vfs_read+0x975/0xb40 [ 69.487461][ T5318] ksys_read+0x18f/0x2b0 [ 69.489265][ T5318] do_syscall_64+0xf3/0x230 [ 69.491205][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.493478][ T5318] Modules linked in: [ 69.495093][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: syz-executor193 Tainted: G B 6.14.0-syzkaller-00624-g2f2d52945852 #0 [ 69.495110][ T5318] Tainted: [B]=BAD_PAGE [ 69.495114][ T5318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.495120][ T5318] Call Trace: [ 69.495127][ T5318] [ 69.495133][ T5318] dump_stack_lvl+0x241/0x360 [ 69.495147][ T5318] ? __pfx_dump_stack_lvl+0x10/0x10 [ 69.495157][ T5318] ? __pfx_print_modules+0x10/0x10 [ 69.495173][ T5318] bad_page+0x176/0x1d0 [ 69.495186][ T5318] free_frozen_pages+0x1082/0x10e0 [ 69.495203][ T5318] bpf_xdp_frags_shrink_tail+0x3b3/0x780 [ 69.495220][ T5318] bpf_xdp_adjust_tail+0x1c6/0x210 [ 69.495233][ T5318] bpf_prog_f476d5219b92964a+0x1e/0x20 [ 69.495242][ T5318] bpf_prog_run_generic_xdp+0x686/0x1510 [ 69.495264][ T5318] do_xdp_generic+0x757/0xd30 [ 69.495276][ T5318] ? __pfx_do_xdp_generic+0x10/0x10 [ 69.495288][ T5318] ? __local_bh_disable_ip+0x179/0x220 [ 69.495299][ T5318] ? __pfx_eth_type_trans+0x10/0x10 [ 69.495314][ T5318] ? tun_get_user+0x2914/0x4860 [ 69.495330][ T5318] tun_get_user+0x2a4b/0x4860 [ 69.495347][ T5318] ? __lock_acquire+0x1397/0x2100 [ 69.495363][ T5318] ? __pfx_tun_get_user+0x10/0x10 [ 69.495381][ T5318] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 69.495397][ T5318] ? tun_get+0x1e/0x2f0 [ 69.495410][ T5318] ? __pfx_lock_release+0x10/0x10 [ 69.495426][ T5318] ? tun_get+0x1e/0x2f0 [ 69.495440][ T5318] ? tun_get+0x27d/0x2f0 [ 69.495455][ T5318] tun_chr_write_iter+0x10d/0x1f0 [ 69.495470][ T5318] vfs_write+0xacf/0xd10 [ 69.495481][ T5318] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 69.495497][ T5318] ? __pfx_vfs_write+0x10/0x10 [ 69.495506][ T5318] ? rcu_is_watching+0x15/0xb0 [ 69.495520][ T5318] ksys_write+0x18f/0x2b0 [ 69.495530][ T5318] ? __pfx_ksys_write+0x10/0x10 [ 69.495540][ T5318] ? do_syscall_64+0x100/0x230 [ 69.495554][ T5318] ? do_syscall_64+0xb6/0x230 [ 69.495567][ T5318] do_syscall_64+0xf3/0x230 [ 69.495579][ T5318] ? clear_bhb_loop+0x35/0x90 [ 69.495621][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.495635][ T5318] RIP: 0033:0x7f3ff23dadf0 [ 69.495646][ T5318] Code: 40 00 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b7 0f 1f 00 80 3d b1 e2 07 00 00 74 17 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 58 c3 0f 1f 80 00 00 00 00 48 83 ec 28 48 89 [ 69.495654][ T5318] RSP: 002b:00007ffe2ecb8d28 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 69.495665][ T5318] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3ff23dadf0 [ 69.495673][ T5318] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8 [ 69.495679][ T5318] RBP: 0000000000000000 R08: 00007ffe2ecb8e58 R09: 00007ffe2ecb8e58 [ 69.495686][ T5318] R10: 00007ffe2ecb8e58 R11: 0000000000000202 R12: 0000000000000000 [ 69.495692][ T5318] R13: 0000000000000000 R14: 00007ffe2ecb8d60 R15: 00007ffe2ecb8d50 [ 69.495703][ T5318] [ 69.495712][ T5318] BUG: Bad page state in process syz-executor193 pfn:44854 [ 69.607666][ T5318] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x44854 [ 69.611036][ T5318] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 69.613943][ T5318] raw: 04fff00000000000 dead000000000040 ffff88801e572000 0000000000000000 [ 69.617316][ T5318] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 69.620770][ T5318] page dumped because: page_pool leak [ 69.622934][ T5318] page_owner tracks the page as allocated [ 69.625252][ T5318] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5318, tgid 5318 (syz-executor193), ts 67657952044, free_ts 63760645561 [ 69.631860][ T5318] post_alloc_hook+0x1f4/0x240 [ 69.633903][ T5318] get_page_from_freelist+0x365c/0x37a0 [ 69.636280][ T5318] __alloc_frozen_pages_noprof+0x292/0x710 [ 69.638609][ T5318] alloc_pages_bulk_noprof+0x847/0xae0 [ 69.640838][ T5318] __page_pool_alloc_pages_slow+0x11f/0x690 [ 69.643115][ T5318] skb_pp_cow_data+0xcc8/0x1720 [ 69.645188][ T5318] do_xdp_generic+0x505/0xd30 [ 69.647045][ T5318] tun_get_user+0x2a4b/0x4860 [ 69.649041][ T5318] tun_chr_write_iter+0x10d/0x1f0 [ 69.651124][ T5318] vfs_write+0xacf/0xd10 [ 69.652795][ T5318] ksys_write+0x18f/0x2b0 [ 69.654595][ T5318] do_syscall_64+0xf3/0x230 [ 69.656313][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.658803][ T5318] page last free pid 5251 tgid 5251 stack trace: [ 69.661450][ T5318] free_frozen_pages+0xe0d/0x10e0 [ 69.663416][ T5318] skb_release_data+0x6dc/0x8a0 [ 69.665412][ T5318] kfree_skb_list_reason+0x2ee/0x750 [ 69.667415][ T5318] skb_release_data+0x5cc/0x8a0 [ 69.669426][ T5318] skb_attempt_defer_free+0x42f/0x5c0 [ 69.671517][ T5318] tcp_recvmsg_locked+0x2800/0x3a90 [ 69.673578][ T5318] tcp_recvmsg+0x25d/0x920 [ 69.675375][ T5318] inet_recvmsg+0x150/0x2d0 [ 69.677156][ T5318] sock_recvmsg+0x1ae/0x280 [ 69.678968][ T5318] sock_read_iter+0x2c4/0x3d0 [ 69.680773][ T5318] vfs_read+0x975/0xb40 [ 69.682263][ T5318] ksys_read+0x18f/0x2b0 [ 69.683924][ T5318] do_syscall_64+0xf3/0x230 [ 69.685866][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.688361][ T5318] Modules linked in: [ 69.689993][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: syz-executor193 Tainted: G B 6.14.0-syzkaller-00624-g2f2d52945852 #0 [ 69.690018][ T5318] Tainted: [B]=BAD_PAGE [ 69.690022][ T5318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.690029][ T5318] Call Trace: [ 69.690035][ T5318] [ 69.690040][ T5318] dump_stack_lvl+0x241/0x360 [ 69.690055][ T5318] ? __pfx_dump_stack_lvl+0x10/0x10 [ 69.690064][ T5318] ? __pfx_print_modules+0x10/0x10 [ 69.690078][ T5318] bad_page+0x176/0x1d0 [ 69.690090][ T5318] free_frozen_pages+0x1082/0x10e0 [ 69.690107][ T5318] bpf_xdp_frags_shrink_tail+0x3b3/0x780 [ 69.690127][ T5318] bpf_xdp_adjust_tail+0x1c6/0x210 [ 69.690139][ T5318] bpf_prog_f476d5219b92964a+0x1e/0x20 [ 69.690149][ T5318] bpf_prog_run_generic_xdp+0x686/0x1510 [ 69.690171][ T5318] do_xdp_generic+0x757/0xd30 [ 69.690183][ T5318] ? __pfx_do_xdp_generic+0x10/0x10 [ 69.690193][ T5318] ? __local_bh_disable_ip+0x179/0x220 [ 69.690207][ T5318] ? __pfx_eth_type_trans+0x10/0x10 [ 69.690221][ T5318] ? tun_get_user+0x2914/0x4860 [ 69.690236][ T5318] tun_get_user+0x2a4b/0x4860 [ 69.690254][ T5318] ? __lock_acquire+0x1397/0x2100 [ 69.690267][ T5318] ? __pfx_tun_get_user+0x10/0x10 [ 69.690280][ T5318] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 69.690294][ T5318] ? tun_get+0x1e/0x2f0 [ 69.690307][ T5318] ? __pfx_lock_release+0x10/0x10 [ 69.690325][ T5318] ? tun_get+0x1e/0x2f0 [ 69.690338][ T5318] ? tun_get+0x27d/0x2f0 [ 69.690352][ T5318] tun_chr_write_iter+0x10d/0x1f0 [ 69.690367][ T5318] vfs_write+0xacf/0xd10 [ 69.690380][ T5318] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 69.690394][ T5318] ? __pfx_vfs_write+0x10/0x10 [ 69.690405][ T5318] ? rcu_is_watching+0x15/0xb0 [ 69.690416][ T5318] ksys_write+0x18f/0x2b0 [ 69.690422][ T5318] ? __pfx_ksys_write+0x10/0x10 [ 69.690429][ T5318] ? do_syscall_64+0x100/0x230 [ 69.690438][ T5318] ? do_syscall_64+0xb6/0x230 [ 69.690446][ T5318] do_syscall_64+0xf3/0x230 [ 69.690455][ T5318] ? clear_bhb_loop+0x35/0x90 [ 69.690465][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.690475][ T5318] RIP: 0033:0x7f3ff23dadf0 [ 69.690482][ T5318] Code: 40 00 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b7 0f 1f 00 80 3d b1 e2 07 00 00 74 17 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 58 c3 0f 1f 80 00 00 00 00 48 83 ec 28 48 89 [ 69.690490][ T5318] RSP: 002b:00007ffe2ecb8d28 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 69.690501][ T5318] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3ff23dadf0 [ 69.690510][ T5318] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8 [ 69.690516][ T5318] RBP: 0000000000000000 R08: 00007ffe2ecb8e58 R09: 00007ffe2ecb8e58 [ 69.690523][ T5318] R10: 00007ffe2ecb8e58 R11: 0000000000000202 R12: 0000000000000000 [ 69.690529][ T5318] R13: 0000000000000000 R14: 00007ffe2ecb8d60 R15: 00007ffe2ecb8d50 [ 69.690540][ T5318] [ 69.690548][ T5318] BUG: Bad page state in process syz-executor193 pfn:44853 [ 69.802045][ T5318] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x44853 [ 69.805431][ T5318] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 69.807892][ T5318] raw: 04fff00000000000 dead000000000040 ffff88801e572000 0000000000000000 [ 69.810830][ T5318] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 69.813846][ T5318] page dumped because: page_pool leak [ 69.816022][ T5318] page_owner tracks the page as allocated [ 69.818211][ T5318] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5318, tgid 5318 (syz-executor193), ts 67657942907, free_ts 63760645561 [ 69.824967][ T5318] post_alloc_hook+0x1f4/0x240 [ 69.826873][ T5318] get_page_from_freelist+0x365c/0x37a0 [ 69.829029][ T5318] __alloc_frozen_pages_noprof+0x292/0x710 [ 69.831234][ T5318] alloc_pages_bulk_noprof+0x847/0xae0 [ 69.833359][ T5318] __page_pool_alloc_pages_slow+0x11f/0x690 [ 69.835632][ T5318] skb_pp_cow_data+0xcc8/0x1720 [ 69.837524][ T5318] do_xdp_generic+0x505/0xd30 [ 69.839340][ T5318] tun_get_user+0x2a4b/0x4860 [ 69.841097][ T5318] tun_chr_write_iter+0x10d/0x1f0 [ 69.843063][ T5318] vfs_write+0xacf/0xd10 [ 69.844779][ T5318] ksys_write+0x18f/0x2b0 [ 69.846538][ T5318] do_syscall_64+0xf3/0x230 [ 69.848312][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.850616][ T5318] page last free pid 5251 tgid 5251 stack trace: [ 69.853056][ T5318] free_frozen_pages+0xe0d/0x10e0 [ 69.855076][ T5318] skb_release_data+0x6dc/0x8a0 [ 69.856896][ T5318] kfree_skb_list_reason+0x2ee/0x750 [ 69.858893][ T5318] skb_release_data+0x5cc/0x8a0 [ 69.860758][ T5318] skb_attempt_defer_free+0x42f/0x5c0 [ 69.862771][ T5318] tcp_recvmsg_locked+0x2800/0x3a90 [ 69.864738][ T5318] tcp_recvmsg+0x25d/0x920 [ 69.866290][ T5318] inet_recvmsg+0x150/0x2d0 [ 69.867879][ T5318] sock_recvmsg+0x1ae/0x280 [ 69.869502][ T5318] sock_read_iter+0x2c4/0x3d0 [ 69.871246][ T5318] vfs_read+0x975/0xb40 [ 69.872851][ T5318] ksys_read+0x18f/0x2b0 [ 69.874561][ T5318] do_syscall_64+0xf3/0x230 [ 69.876336][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.878615][ T5318] Modules linked in: [ 69.880204][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: syz-executor193 Tainted: G B 6.14.0-syzkaller-00624-g2f2d52945852 #0 [ 69.880225][ T5318] Tainted: [B]=BAD_PAGE [ 69.880234][ T5318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.880241][ T5318] Call Trace: [ 69.880279][ T5318] [ 69.880285][ T5318] dump_stack_lvl+0x241/0x360 [ 69.880298][ T5318] ? __pfx_dump_stack_lvl+0x10/0x10 [ 69.880308][ T5318] ? __pfx_print_modules+0x10/0x10 [ 69.880324][ T5318] bad_page+0x176/0x1d0 [ 69.880336][ T5318] free_frozen_pages+0x1082/0x10e0 [ 69.880353][ T5318] bpf_xdp_frags_shrink_tail+0x3b3/0x780 [ 69.880394][ T5318] bpf_xdp_adjust_tail+0x1c6/0x210 [ 69.880407][ T5318] bpf_prog_f476d5219b92964a+0x1e/0x20 [ 69.880417][ T5318] bpf_prog_run_generic_xdp+0x686/0x1510 [ 69.880439][ T5318] do_xdp_generic+0x757/0xd30 [ 69.880451][ T5318] ? __pfx_do_xdp_generic+0x10/0x10 [ 69.880462][ T5318] ? __local_bh_disable_ip+0x179/0x220 [ 69.880475][ T5318] ? __pfx_eth_type_trans+0x10/0x10 [ 69.880489][ T5318] ? tun_get_user+0x2914/0x4860 [ 69.880504][ T5318] tun_get_user+0x2a4b/0x4860 [ 69.880532][ T5318] ? __lock_acquire+0x1397/0x2100 [ 69.880548][ T5318] ? __pfx_tun_get_user+0x10/0x10 [ 69.880566][ T5318] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 69.880580][ T5318] ? tun_get+0x1e/0x2f0 [ 69.880593][ T5318] ? __pfx_lock_release+0x10/0x10 [ 69.880610][ T5318] ? tun_get+0x1e/0x2f0 [ 69.880623][ T5318] ? tun_get+0x27d/0x2f0 [ 69.880637][ T5318] tun_chr_write_iter+0x10d/0x1f0 [ 69.880652][ T5318] vfs_write+0xacf/0xd10 [ 69.880663][ T5318] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 69.880678][ T5318] ? __pfx_vfs_write+0x10/0x10 [ 69.880689][ T5318] ? rcu_is_watching+0x15/0xb0 [ 69.880703][ T5318] ksys_write+0x18f/0x2b0 [ 69.880713][ T5318] ? __pfx_ksys_write+0x10/0x10 [ 69.880723][ T5318] ? do_syscall_64+0x100/0x230 [ 69.880737][ T5318] ? do_syscall_64+0xb6/0x230 [ 69.880749][ T5318] do_syscall_64+0xf3/0x230 [ 69.880762][ T5318] ? clear_bhb_loop+0x35/0x90 [ 69.880775][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.880789][ T5318] RIP: 0033:0x7f3ff23dadf0 [ 69.880798][ T5318] Code: 40 00 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b7 0f 1f 00 80 3d b1 e2 07 00 00 74 17 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 58 c3 0f 1f 80 00 00 00 00 48 83 ec 28 48 89 [ 69.880807][ T5318] RSP: 002b:00007ffe2ecb8d28 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 69.880817][ T5318] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3ff23dadf0 [ 69.880824][ T5318] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8 [ 69.880831][ T5318] RBP: 0000000000000000 R08: 00007ffe2ecb8e58 R09: 00007ffe2ecb8e58 [ 69.880837][ T5318] R10: 00007ffe2ecb8e58 R11: 0000000000000202 R12: 0000000000000000 [ 69.880843][ T5318] R13: 0000000000000000 R14: 00007ffe2ecb8d60 R15: 00007ffe2ecb8d50 [ 69.880854][ T5318] [ 70.134385][ T5319] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x44326 [ 70.138060][ T5319] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 70.141018][ T5319] raw: 04fff00000000000 dead000000000040 ffff88801e572000 0000000000000000 [ 70.144828][ T5319] raw: 0000000000000000 3fffffffffffffff 00000000ffffffff 0000000000000000 [ 70.148182][ T5319] page dumped because: VM_BUG_ON_PAGE(page_ref_count(page) == 0) [ 70.151370][ T5319] page_owner tracks the page as allocated [ 70.153664][ T5319] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5318, tgid 5318 (syz-executor193), ts 67658077797, free_ts 67542162652 [ 70.160214][ T5319] post_alloc_hook+0x1f4/0x240 [ 70.161898][ T5319] get_page_from_freelist+0x365c/0x37a0 [ 70.163975][ T5319] __alloc_frozen_pages_noprof+0x292/0x710 [ 70.166280][ T5319] alloc_pages_bulk_noprof+0x847/0xae0 [ 70.168424][ T5319] __page_pool_alloc_pages_slow+0x11f/0x690 [ 70.170731][ T5319] page_pool_alloc_frag_netmem+0x59c/0x940 [ 70.173032][ T5319] skb_pp_cow_data+0xcea/0x1720 [ 70.174954][ T5319] do_xdp_generic+0x505/0xd30 [ 70.176837][ T5319] tun_get_user+0x2a4b/0x4860 [ 70.178740][ T5319] tun_chr_write_iter+0x10d/0x1f0 [ 70.180584][ T5319] vfs_write+0xacf/0xd10 [ 70.182297][ T5319] ksys_write+0x18f/0x2b0 [ 70.184004][ T5319] do_syscall_64+0xf3/0x230 [ 70.185775][ T5319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.187965][ T5319] page last free pid 5313 tgid 5313 stack trace: [ 70.190562][ T5319] free_frozen_pages+0xe0d/0x10e0 [ 70.192458][ T5319] __put_partials+0x160/0x1c0 [ 70.194179][ T5319] put_cpu_partial+0x17c/0x250 [ 70.195966][ T5319] __slab_free+0x290/0x380 [ 70.197621][ T5319] qlist_free_all+0x9a/0x140 [ 70.199438][ T5319] kasan_quarantine_reduce+0x14f/0x170 [ 70.201296][ T5319] __kasan_slab_alloc+0x23/0x80 [ 70.203115][ T5319] kmem_cache_alloc_noprof+0x1d9/0x380 [ 70.205280][ T5319] proc_reg_open+0x201/0x530 [ 70.207001][ T5319] do_dentry_open+0xdec/0x1960 [ 70.208859][ T5319] vfs_open+0x3b/0x370 [ 70.210619][ T5319] path_openat+0x2c9f/0x35b0 [ 70.212541][ T5319] do_filp_open+0x282/0x4e0 [ 70.214489][ T5319] do_sys_openat2+0x122/0x1c0 [ 70.216423][ T5319] __x64_sys_openat+0x247/0x2a0 [ 70.218410][ T5319] do_syscall_64+0xf3/0x230 [ 70.220445][ T5319] ------------[ cut here ]------------ [ 70.222631][ T5319] kernel BUG at ./include/linux/mm.h:1153! [ 70.225130][ T5319] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 70.227954][ T5319] CPU: 0 UID: 0 PID: 5319 Comm: syz-executor193 Tainted: G B 6.14.0-syzkaller-00624-g2f2d52945852 #0 [ 70.232152][ T5319] Tainted: [B]=BAD_PAGE [ 70.233672][ T5319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.237530][ T5319] RIP: 0010:page_frag_free+0x182/0x220 [ 70.239550][ T5319] Code: 4c 89 f0 48 25 c0 0f 00 00 74 21 e8 c8 6b a5 ff e9 12 ff ff ff e8 be 6b a5 ff 4c 89 f7 48 c7 c6 40 56 36 8c e8 9f 09 f0 ff 90 <0f> 0b 4c 89 f7 be 08 00 00 00 e8 5f c1 0c 00 4c 89 f0 48 c1 e8 03 [ 70.247017][ T5319] RSP: 0018:ffffc9000d3074e8 EFLAGS: 00010246 [ 70.249542][ T5319] RAX: d1d590b60e3d0700 RBX: ffffea000110c9b4 RCX: ffffffff819d1220 [ 70.255035][ T5319] RDX: 0000000000000000 RSI: ffffffff8c80ec00 RDI: ffffffff8c80ebc0 [ 70.257858][ T5319] RBP: 0000000000000000 R08: ffffffff903ce277 R09: 1ffffffff2079c4e [ 70.261032][ T5319] R10: dffffc0000000000 R11: fffffbfff2079c4f R12: 1ffff11007e607fd [ 70.264049][ T5319] R13: 000000000000bcdd R14: ffffea000110c980 R15: dffffc0000000000 [ 70.266738][ T5319] FS: 000055555d39c380(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 70.270177][ T5319] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 70.272710][ T5319] CR2: 0000200000010000 CR3: 0000000044a4e000 CR4: 0000000000352ef0 [ 70.275649][ T5319] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 70.278378][ T5319] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 70.281202][ T5319] Call Trace: [ 70.282978][ T5319] [ 70.284417][ T5319] ? __die_body+0x5f/0xb0 [ 70.286102][ T5319] ? die+0x9e/0xc0 [ 70.287652][ T5319] ? do_trap+0x15a/0x3a0 [ 70.289338][ T5319] ? page_frag_free+0x182/0x220 [ 70.291287][ T5319] ? do_error_trap+0x1dc/0x2c0 [ 70.293164][ T5319] ? page_frag_free+0x182/0x220 [ 70.294943][ T5319] ? __pfx_do_error_trap+0x10/0x10 [ 70.296840][ T5319] ? handle_invalid_op+0x34/0x40 [ 70.298786][ T5319] ? page_frag_free+0x182/0x220 [ 70.300745][ T5319] ? exc_invalid_op+0x38/0x50 [ 70.302658][ T5319] ? asm_exc_invalid_op+0x1a/0x20 [ 70.304672][ T5319] ? lock_release+0xb0/0xa30 [ 70.306458][ T5319] ? page_frag_free+0x182/0x220 [ 70.308355][ T5319] ? page_frag_free+0x181/0x220 [ 70.310258][ T5319] bpf_xdp_frags_shrink_tail+0x3b3/0x780 [ 70.312498][ T5319] bpf_xdp_adjust_tail+0x1c6/0x210 [ 70.314516][ T5319] bpf_prog_f476d5219b92964a+0x1e/0x20 [ 70.316684][ T5319] bpf_prog_run_generic_xdp+0x686/0x1510 [ 70.318987][ T5319] do_xdp_generic+0x757/0xd30 [ 70.320843][ T5319] ? __pfx_do_xdp_generic+0x10/0x10 [ 70.322876][ T5319] ? lock_acquire+0xe3/0x550 [ 70.324697][ T5319] ? __local_bh_disable_ip+0x179/0x220 [ 70.326868][ T5319] ? __pfx_eth_type_trans+0x10/0x10 [ 70.329018][ T5319] ? tun_get_user+0x2914/0x4860 [ 70.331034][ T5319] tun_get_user+0x2a4b/0x4860 [ 70.333020][ T5319] ? ref_tracker_free+0x643/0x7e0 [ 70.335181][ T5319] ? aa_file_perm+0x137/0xf50 [ 70.337097][ T5319] ? aa_file_perm+0x3ef/0xf50 [ 70.338977][ T5319] ? __pfx_tun_get_user+0x10/0x10 [ 70.341042][ T5319] ? tun_get+0x1e/0x2f0 [ 70.342641][ T5319] ? rcu_is_watching+0x15/0xb0 [ 70.344577][ T5319] ? tun_get+0x1e/0x2f0 [ 70.346271][ T5319] ? lock_release+0xbf/0xa30 [ 70.348110][ T5319] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 70.350290][ T5319] ? __pfx_lock_release+0x10/0x10 [ 70.352173][ T5319] ? end_current_label_crit_section+0x151/0x180 [ 70.354536][ T5319] ? common_file_perm+0x1a6/0x210 [ 70.356495][ T5319] ? tun_get+0x1e/0x2f0 [ 70.358151][ T5319] ? tun_get+0x27d/0x2f0 [ 70.359915][ T5319] tun_chr_write_iter+0x10d/0x1f0 [ 70.361945][ T5319] vfs_write+0xacf/0xd10 [ 70.363709][ T5319] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 70.365838][ T5319] ? __pfx_vfs_write+0x10/0x10 [ 70.367643][ T5319] ? rcu_is_watching+0x15/0xb0 [ 70.369526][ T5319] ksys_write+0x18f/0x2b0 [ 70.371196][ T5319] ? __pfx_ksys_write+0x10/0x10 [ 70.373087][ T5319] ? rcu_is_watching+0x15/0xb0 [ 70.374991][ T5319] ? rcu_is_watching+0x15/0xb0 [ 70.376907][ T5319] do_syscall_64+0xf3/0x230 [ 70.378743][ T5319] ? clear_bhb_loop+0x35/0x90 [ 70.380648][ T5319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.382941][ T5319] RIP: 0033:0x7f3ff23dadf0 [ 70.384777][ T5319] Code: 40 00 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b7 0f 1f 00 80 3d b1 e2 07 00 00 74 17 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 58 c3 0f 1f 80 00 00 00 00 48 83 ec 28 48 89 [ 70.392176][ T5319] RSP: 002b:00007ffe2ecb8d28 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 70.395209][ T5319] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3ff23dadf0 [ 70.398144][ T5319] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8 [ 70.401220][ T5319] RBP: 0000000000000000 R08: 00007ffe2ecb8e58 R09: 00007ffe2ecb8e58 [ 70.404045][ T5319] R10: 00007ffe2ecb8e58 R11: 0000000000000202 R12: 0000000000000000 [ 70.406938][ T5319] R13: 00007ffe2ecb8d44 R14: 00007ffe2ecb8d60 R15: 00007ffe2ecb8d50 [ 70.409944][ T5319] [ 70.411137][ T5319] Modules linked in: [ 70.412892][ T5319] ---[ end trace 0000000000000000 ]--- [ 70.414841][ T5319] RIP: 0010:page_frag_free+0x182/0x220 [ 70.419015][ T5319] Code: 4c 89 f0 48 25 c0 0f 00 00 74 21 e8 c8 6b a5 ff e9 12 ff ff ff e8 be 6b a5 ff 4c 89 f7 48 c7 c6 40 56 36 8c e8 9f 09 f0 ff 90 <0f> 0b 4c 89 f7 be 08 00 00 00 e8 5f c1 0c 00 4c 89 f0 48 c1 e8 03 [ 70.426446][ T5319] RSP: 0018:ffffc9000d3074e8 EFLAGS: 00010246 [ 70.429501][ T5319] RAX: d1d590b60e3d0700 RBX: ffffea000110c9b4 RCX: ffffffff819d1220 [ 70.432749][ T5319] RDX: 0000000000000000 RSI: ffffffff8c80ec00 RDI: ffffffff8c80ebc0 [ 70.435951][ T5319] RBP: 0000000000000000 R08: ffffffff903ce277 R09: 1ffffffff2079c4e [ 70.439121][ T5319] R10: dffffc0000000000 R11: fffffbfff2079c4f R12: 1ffff11007e607fd [ 70.441760][ T5319] R13: 000000000000bcdd R14: ffffea000110c980 R15: dffffc0000000000 [ 70.444626][ T5319] FS: 000055555d39c380(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 70.447802][ T5319] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 70.450445][ T5319] CR2: 0000200000010000 CR3: 0000000044a4e000 CR4: 0000000000352ef0 [ 70.453698][ T5319] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 70.457002][ T5319] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 70.460164][ T5319] Kernel panic - not syncing: Fatal exception in interrupt [ 70.463101][ T5319] Kernel Offset: disabled [ 70.465036][ T5319] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:18:18 Registers: info registers vcpu 0 CPU#0 RAX=000000000000006e RBX=ffffffff9a999080 RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=0000000000000000 RSP=ffffc9000d316b50 R8 =ffffffff8584234b R9 =1ffff110065c1046 R10=dffffc0000000000 R11=ffffffff85842300 R12=dffffc0000000000 R13=000000000000006e R14=000000000000006e R15=00000000000003f8 RIP=ffffffff8584237e RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055555d39c380 ffffffff 00c00000 GS =0000 ffff88801fc00000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000200000010000 CR3=000000003f8fc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffe000d0 Opmask01=0000000000000fff Opmask02=00000000fff7ffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe2ecb8d30 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000100000001 0000000b00000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3ff24456c4 00007f3ff2459260 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7865006a64615f65 726f63735f6d6f6f 2f666c65732f636f 72702f0030303031 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5d40004f41445f40 574a46565f484a4a 0a434940560a464a 57550a0015151514 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000