Warning: Permanently added '[localhost]:21968' (ED25519) to the list of known hosts. 2025/10/02 10:10:27 parsed 1 programs [ 126.443684][ T5563] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 132.712933][ T5615] chnl_net:caif_netlink_parms(): no params data found [ 132.773466][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.776663][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.780725][ T5615] bridge_slave_0: entered allmulticast mode [ 132.784513][ T5615] bridge_slave_0: entered promiscuous mode [ 132.790257][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.793471][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.796643][ T5615] bridge_slave_1: entered allmulticast mode [ 132.801612][ T5615] bridge_slave_1: entered promiscuous mode [ 132.825243][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.831733][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.854445][ T5615] team0: Port device team_slave_0 added [ 132.860727][ T5615] team0: Port device team_slave_1 added [ 132.881730][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.884865][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.896350][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.904362][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.907503][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.921847][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.960165][ T5615] hsr_slave_0: entered promiscuous mode [ 132.963614][ T5615] hsr_slave_1: entered promiscuous mode [ 133.430999][ T5615] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 133.451338][ T5615] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 133.459609][ T5615] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 133.471975][ T5615] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 133.532220][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.535502][ T5615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.539025][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.542210][ T5615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.576632][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.584190][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.663843][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.691639][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.719449][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.722767][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.727257][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.730606][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.815284][ T5615] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 134.126043][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.202905][ T5615] veth0_vlan: entered promiscuous mode [ 134.225856][ T5615] veth1_vlan: entered promiscuous mode [ 134.270096][ T5615] veth0_macvtap: entered promiscuous mode [ 134.292172][ T5615] veth1_macvtap: entered promiscuous mode [ 134.321206][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.342268][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.365203][ T172] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.369856][ T172] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.373871][ T172] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.377724][ T172] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.623496][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.710468][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.923280][ T45] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 134.927369][ T45] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 134.932916][ T45] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 134.938407][ T45] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 134.942496][ T45] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 135.523946][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.527479][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.615213][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.651735][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.656054][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.700682][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.303721][ T13] bridge_slave_1: left allmulticast mode [ 137.306256][ T13] bridge_slave_1: left promiscuous mode [ 137.323300][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.339809][ T13] bridge_slave_0: left allmulticast mode [ 137.342316][ T13] bridge_slave_0: left promiscuous mode [ 137.344916][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.961417][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.964566][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 2025/10/02 10:10:42 executed programs: 0 [ 138.125312][ T4680] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 138.132638][ T4680] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 138.136137][ T4680] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 138.140686][ T4680] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 138.145058][ T4680] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 138.241469][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.253591][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.282030][ T13] bond0 (unregistering): Released all slaves [ 138.392759][ T13] hsr_slave_0: left promiscuous mode [ 138.398456][ T13] hsr_slave_1: left promiscuous mode [ 138.401363][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.404667][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.419545][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.422833][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.447534][ T13] veth1_macvtap: left promiscuous mode [ 138.453278][ T13] veth0_macvtap: left promiscuous mode [ 138.455867][ T13] veth1_vlan: left promiscuous mode [ 138.459510][ T13] veth0_vlan: left promiscuous mode [ 138.735886][ T13] team0 (unregistering): Port device team_slave_1 removed [ 138.765040][ T13] team0 (unregistering): Port device team_slave_0 removed [ 139.425447][ T5725] chnl_net:caif_netlink_parms(): no params data found [ 140.014306][ T5725] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.017429][ T5725] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.033474][ T5725] bridge_slave_0: entered allmulticast mode [ 140.045933][ T5725] bridge_slave_0: entered promiscuous mode [ 140.066940][ T5725] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.086085][ T5725] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.095489][ T5725] bridge_slave_1: entered allmulticast mode [ 140.103031][ T5725] bridge_slave_1: entered promiscuous mode [ 140.192113][ T4680] Bluetooth: hci0: command tx timeout [ 140.300129][ T5725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.396382][ T5725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.469611][ T5725] team0: Port device team_slave_0 added [ 140.474060][ T5725] team0: Port device team_slave_1 added [ 140.540117][ T5725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.543437][ T5725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.597402][ T5725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.625942][ T5725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.630009][ T5725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.646038][ T5725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.734087][ T5725] hsr_slave_0: entered promiscuous mode [ 140.737681][ T5725] hsr_slave_1: entered promiscuous mode [ 141.236705][ T5725] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 141.262020][ T5725] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 141.280839][ T5725] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 141.291318][ T5725] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 141.458931][ T5725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.489901][ T5725] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.523435][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.526637][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.561188][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.564429][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.899739][ T5725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.978868][ T5725] veth0_vlan: entered promiscuous mode [ 141.987316][ T5725] veth1_vlan: entered promiscuous mode [ 142.050320][ T5725] veth0_macvtap: entered promiscuous mode [ 142.066035][ T5725] veth1_macvtap: entered promiscuous mode [ 142.106832][ T5725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.126418][ T5725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.136193][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.147430][ T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.160670][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.164798][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.213922][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.217494][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.249236][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.252753][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.269418][ T4680] Bluetooth: hci0: command tx timeout [ 142.311033][ T5781] BUG: Bad page state in process syz.0.16 pfn:560e5 [ 142.314184][ T5781] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880560e51e0 pfn:0x560e5 [ 142.319637][ T5781] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 142.322891][ T5781] raw: 04fff00000000000 dead000000000040 ffff88801e870000 0000000000000000 [ 142.326685][ T5781] raw: ffff8880560e51e0 3fffffffffffffff 00000000ffffffff 0000000000000000 [ 142.330563][ T5781] page dumped because: page_pool leak [ 142.332942][ T5781] page_owner tracks the page as allocated [ 142.335526][ T5781] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5781, tgid 5780 (syz.0.16), ts 142310936648, free_ts 142300612477 [ 142.342741][ T5781] post_alloc_hook+0x240/0x2a0 [ 142.344939][ T5781] get_page_from_freelist+0x21e4/0x22c0 [ 142.347399][ T5781] __alloc_frozen_pages_noprof+0x181/0x370 [ 142.350089][ T5781] alloc_pages_bulk_noprof+0x560/0x710 [ 142.352556][ T5781] __page_pool_alloc_netmems_slow+0x127/0x740 [ 142.355435][ T5781] page_pool_alloc_frag_netmem+0x421/0x9b0 [ 142.358138][ T5781] skb_pp_cow_data+0xb69/0x13e0 [ 142.360331][ T5781] do_xdp_generic+0x699/0x11a0 [ 142.362585][ T5781] tun_get_user+0x2527/0x3ea0 [ 142.364701][ T5781] tun_chr_write_iter+0x113/0x200 [ 142.366913][ T5781] vfs_write+0x5c9/0xb30 [ 142.369166][ T5781] ksys_write+0x145/0x250 [ 142.371100][ T5781] do_syscall_64+0xfa/0x3b0 [ 142.373162][ T5781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.375781][ T5781] page last free pid 4730 tgid 4730 stack trace: [ 142.378709][ T5781] __free_frozen_pages+0xbc4/0xd30 [ 142.381024][ T5781] __put_partials+0x156/0x1a0 [ 142.383162][ T5781] put_cpu_partial+0x17c/0x250 [ 142.385360][ T5781] __slab_free+0x2d5/0x3c0 [ 142.387395][ T5781] qlist_free_all+0x97/0x140 [ 142.389584][ T5781] kasan_quarantine_reduce+0x148/0x160 [ 142.392194][ T5781] __kasan_slab_alloc+0x22/0x80 [ 142.394377][ T5781] __kvmalloc_node_noprof+0x2b0/0x5f0 [ 142.396909][ T5781] seq_read_iter+0x1fd/0xe10 [ 142.399138][ T5781] vfs_read+0x55a/0xa30 [ 142.400966][ T5781] ksys_read+0x145/0x250 [ 142.402902][ T5781] do_syscall_64+0xfa/0x3b0 [ 142.404887][ T5781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.407546][ T5781] Modules linked in: [ 142.409390][ T5781] CPU: 0 UID: 0 PID: 5781 Comm: syz.0.16 Not tainted syzkaller #0 PREEMPT(full) [ 142.409404][ T5781] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 142.409411][ T5781] Call Trace: [ 142.409419][ T5781] [ 142.409425][ T5781] dump_stack_lvl+0x189/0x250 [ 142.409443][ T5781] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.409456][ T5781] ? __pfx_print_modules+0x10/0x10 [ 142.409467][ T5781] ? ksys_write+0x145/0x250 [ 142.409478][ T5781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.409493][ T5781] bad_page+0x180/0x1c0 [ 142.409504][ T5781] __free_frozen_pages+0xce2/0xd30 [ 142.409522][ T5781] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 142.409549][ T5781] bpf_xdp_adjust_tail+0x1d6/0x220 [ 142.409565][ T5781] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 142.409575][ T5781] bpf_prog_run_generic_xdp+0x64b/0x14c0 [ 142.409606][ T5781] do_xdp_generic+0x9f7/0x11a0 [ 142.409627][ T5781] ? __pfx_do_xdp_generic+0x10/0x10 [ 142.409646][ T5781] ? tun_get_user+0x23f3/0x3ea0 [ 142.409659][ T5781] ? tun_vnet_hdr_tnl_to_skb+0xed/0x830 [ 142.409671][ T5781] ? tun_get_user+0x23f3/0x3ea0 [ 142.409682][ T5781] tun_get_user+0x2527/0x3ea0 [ 142.409701][ T5781] ? aa_file_perm+0x44d/0x1550 [ 142.409716][ T5781] ? __pfx_tun_get_user+0x10/0x10 [ 142.409738][ T5781] ? ref_tracker_alloc+0x318/0x460 [ 142.409750][ T5781] ? __lock_acquire+0xab9/0xd20 [ 142.409762][ T5781] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 142.409778][ T5781] ? tun_get+0x1c/0x2f0 [ 142.409789][ T5781] ? tun_get+0x1c/0x2f0 [ 142.409797][ T5781] ? tun_get+0x1c/0x2f0 [ 142.409808][ T5781] tun_chr_write_iter+0x113/0x200 [ 142.409819][ T5781] vfs_write+0x5c9/0xb30 [ 142.409832][ T5781] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 142.409843][ T5781] ? __pfx_vfs_write+0x10/0x10 [ 142.409860][ T5781] ? __fget_files+0x2a/0x420 [ 142.409879][ T5781] ksys_write+0x145/0x250 [ 142.409891][ T5781] ? __pfx_ksys_write+0x10/0x10 [ 142.409903][ T5781] ? rcu_is_watching+0x15/0xb0 [ 142.409918][ T5781] ? do_syscall_64+0xbe/0x3b0 [ 142.409932][ T5781] do_syscall_64+0xfa/0x3b0 [ 142.409944][ T5781] ? lockdep_hardirqs_on+0x9c/0x150 [ 142.409955][ T5781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.409965][ T5781] ? clear_bhb_loop+0x60/0xb0 [ 142.409977][ T5781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.409987][ T5781] RIP: 0033:0x7f7fb1f8bc1f [ 142.409997][ T5781] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 142.410005][ T5781] RSP: 002b:00007f7fb2d23000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 142.410018][ T5781] RAX: ffffffffffffffda RBX: 00007f7fb21a5fa0 RCX: 00007f7fb1f8bc1f [ 142.410025][ T5781] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8 [ 142.410031][ T5781] RBP: 00007f7fb200e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 142.410037][ T5781] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 142.410042][ T5781] R13: 0000000000000000 R14: 00007f7fb21a5fa0 R15: 00007fff79ceca88 [ 142.410057][ T5781] [ 142.410063][ T5781] Disabling lock debugging due to kernel taint [ 142.542218][ T5781] BUG: Bad page state in process syz.0.16 pfn:54f66 [ 142.545151][ T5781] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888054f66a50 pfn:0x54f66 [ 142.549584][ T5781] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 142.552757][ T5781] raw: 04fff00000000000 dead000000000040 ffff88801e870000 0000000000000000 [ 142.556402][ T5781] raw: ffff888054f66a50 0000000000000001 00000000ffffffff 0000000000000000 [ 142.560138][ T5781] page dumped because: page_pool leak [ 142.562595][ T5781] page_owner tracks the page as allocated [ 142.565045][ T5781] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5781, tgid 5780 (syz.0.16), ts 142310927796, free_ts 142300627006 [ 142.572402][ T5781] post_alloc_hook+0x240/0x2a0 [ 142.574536][ T5781] get_page_from_freelist+0x21e4/0x22c0 [ 142.576954][ T5781] __alloc_frozen_pages_noprof+0x181/0x370 [ 142.579685][ T5781] alloc_pages_bulk_noprof+0x560/0x710 [ 142.582138][ T5781] __page_pool_alloc_netmems_slow+0x127/0x740 [ 142.584853][ T5781] skb_pp_cow_data+0xb47/0x13e0 [ 142.587090][ T5781] do_xdp_generic+0x699/0x11a0 [ 142.589274][ T5781] tun_get_user+0x2527/0x3ea0 [ 142.591374][ T5781] tun_chr_write_iter+0x113/0x200 [ 142.593668][ T5781] vfs_write+0x5c9/0xb30 [ 142.595555][ T5781] ksys_write+0x145/0x250 [ 142.597438][ T5781] do_syscall_64+0xfa/0x3b0 [ 142.599705][ T5781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.602596][ T5781] page last free pid 4730 tgid 4730 stack trace: [ 142.605418][ T5781] __free_frozen_pages+0xbc4/0xd30 [ 142.607712][ T5781] __put_partials+0x156/0x1a0 [ 142.609906][ T5781] put_cpu_partial+0x17c/0x250 [ 142.612045][ T5781] __slab_free+0x2d5/0x3c0 [ 142.613998][ T5781] qlist_free_all+0x97/0x140 [ 142.616022][ T5781] kasan_quarantine_reduce+0x148/0x160 [ 142.618558][ T5781] __kasan_slab_alloc+0x22/0x80 [ 142.620679][ T5781] __kvmalloc_node_noprof+0x2b0/0x5f0 [ 142.623012][ T5781] seq_read_iter+0x1fd/0xe10 [ 142.625060][ T5781] vfs_read+0x55a/0xa30 [ 142.626980][ T5781] ksys_read+0x145/0x250 [ 142.628944][ T5781] do_syscall_64+0xfa/0x3b0 [ 142.630967][ T5781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.633612][ T5781] Modules linked in: [ 142.635383][ T5781] CPU: 0 UID: 0 PID: 5781 Comm: syz.0.16 Tainted: G B syzkaller #0 PREEMPT(full) [ 142.635399][ T5781] Tainted: [B]=BAD_PAGE [ 142.635403][ T5781] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 142.635410][ T5781] Call Trace: [ 142.635416][ T5781] [ 142.635422][ T5781] dump_stack_lvl+0x189/0x250 [ 142.635438][ T5781] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.635450][ T5781] ? __pfx_print_modules+0x10/0x10 [ 142.635460][ T5781] ? ksys_write+0x145/0x250 [ 142.635472][ T5781] bad_page+0x180/0x1c0 [ 142.635481][ T5781] __free_frozen_pages+0xce2/0xd30 [ 142.635495][ T5781] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 142.635513][ T5781] bpf_xdp_adjust_tail+0x1d6/0x220 [ 142.635525][ T5781] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 142.635535][ T5781] bpf_prog_run_generic_xdp+0x64b/0x14c0 [ 142.635555][ T5781] do_xdp_generic+0x9f7/0x11a0 [ 142.635569][ T5781] ? __pfx_do_xdp_generic+0x10/0x10 [ 142.635582][ T5781] ? tun_get_user+0x23f3/0x3ea0 [ 142.635592][ T5781] ? tun_vnet_hdr_tnl_to_skb+0xed/0x830 [ 142.635601][ T5781] ? tun_get_user+0x23f3/0x3ea0 [ 142.635610][ T5781] tun_get_user+0x2527/0x3ea0 [ 142.635630][ T5781] ? aa_file_perm+0x44d/0x1550 [ 142.635644][ T5781] ? __pfx_tun_get_user+0x10/0x10 [ 142.635657][ T5781] ? ref_tracker_alloc+0x318/0x460 [ 142.635669][ T5781] ? __lock_acquire+0xab9/0xd20 [ 142.635680][ T5781] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 142.635692][ T5781] ? tun_get+0x1c/0x2f0 [ 142.635702][ T5781] ? tun_get+0x1c/0x2f0 [ 142.635709][ T5781] ? tun_get+0x1c/0x2f0 [ 142.635719][ T5781] tun_chr_write_iter+0x113/0x200 [ 142.635727][ T5781] vfs_write+0x5c9/0xb30 [ 142.635738][ T5781] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 142.635748][ T5781] ? __pfx_vfs_write+0x10/0x10 [ 142.635759][ T5781] ? __fget_files+0x2a/0x420 [ 142.635772][ T5781] ksys_write+0x145/0x250 [ 142.635782][ T5781] ? __pfx_ksys_write+0x10/0x10 [ 142.635790][ T5781] ? rcu_is_watching+0x15/0xb0 [ 142.635802][ T5781] ? do_syscall_64+0xbe/0x3b0 [ 142.635813][ T5781] do_syscall_64+0xfa/0x3b0 [ 142.635824][ T5781] ? lockdep_hardirqs_on+0x9c/0x150 [ 142.635835][ T5781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.635845][ T5781] ? clear_bhb_loop+0x60/0xb0 [ 142.635855][ T5781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.635863][ T5781] RIP: 0033:0x7f7fb1f8bc1f [ 142.635873][ T5781] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 142.635881][ T5781] RSP: 002b:00007f7fb2d23000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 142.635892][ T5781] RAX: ffffffffffffffda RBX: 00007f7fb21a5fa0 RCX: 00007f7fb1f8bc1f [ 142.635899][ T5781] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8 [ 142.635904][ T5781] RBP: 00007f7fb200e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 142.635910][ T5781] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 142.635915][ T5781] R13: 0000000000000000 R14: 00007f7fb21a5fa0 R15: 00007fff79ceca88 [ 142.635926][ T5781] [ 142.635934][ T5781] BUG: Bad page state in process syz.0.16 pfn:54f64 [ 142.769942][ T5781] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888054f645a0 pfn:0x54f64 [ 142.774355][ T5781] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 142.777638][ T5781] raw: 04fff00000000000 dead000000000040 ffff88801e870000 0000000000000000 [ 142.781335][ T5781] raw: ffff888054f645a0 0000000000000001 00000000ffffffff 0000000000000000 [ 142.785112][ T5781] page dumped because: page_pool leak [ 142.787406][ T5781] page_owner tracks the page as allocated [ 142.789978][ T5781] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5781, tgid 5780 (syz.0.16), ts 142310919308, free_ts 142300638197 [ 142.797109][ T5781] post_alloc_hook+0x240/0x2a0 [ 142.799362][ T5781] get_page_from_freelist+0x21e4/0x22c0 [ 142.801815][ T5781] __alloc_frozen_pages_noprof+0x181/0x370 [ 142.804460][ T5781] alloc_pages_bulk_noprof+0x560/0x710 [ 142.806909][ T5781] __page_pool_alloc_netmems_slow+0x127/0x740 [ 142.809674][ T5781] skb_pp_cow_data+0xb47/0x13e0 [ 142.811893][ T5781] do_xdp_generic+0x699/0x11a0 [ 142.814047][ T5781] tun_get_user+0x2527/0x3ea0 [ 142.816193][ T5781] tun_chr_write_iter+0x113/0x200 [ 142.818694][ T5781] vfs_write+0x5c9/0xb30 [ 142.820992][ T5781] ksys_write+0x145/0x250 [ 142.823043][ T5781] do_syscall_64+0xfa/0x3b0 [ 142.825074][ T5781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.827622][ T5781] page last free pid 4730 tgid 4730 stack trace: [ 142.830492][ T5781] __free_frozen_pages+0xbc4/0xd30 [ 142.832728][ T5781] __put_partials+0x156/0x1a0 [ 142.834802][ T5781] put_cpu_partial+0x17c/0x250 [ 142.836887][ T5781] __slab_free+0x2d5/0x3c0 [ 142.838918][ T5781] qlist_free_all+0x97/0x140 [ 142.840911][ T5781] kasan_quarantine_reduce+0x148/0x160 [ 142.843299][ T5781] __kasan_slab_alloc+0x22/0x80 [ 142.845464][ T5781] __kvmalloc_node_noprof+0x2b0/0x5f0 [ 142.847931][ T5781] seq_read_iter+0x1fd/0xe10 [ 142.849926][ T5781] vfs_read+0x55a/0xa30 [ 142.851742][ T5781] ksys_read+0x145/0x250 [ 142.853619][ T5781] do_syscall_64+0xfa/0x3b0 [ 142.855557][ T5781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.858101][ T5781] Modules linked in: [ 142.859866][ T5781] CPU: 0 UID: 0 PID: 5781 Comm: syz.0.16 Tainted: G B syzkaller #0 PREEMPT(full) [ 142.859882][ T5781] Tainted: [B]=BAD_PAGE [ 142.859886][ T5781] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 142.859891][ T5781] Call Trace: [ 142.859899][ T5781] [ 142.859905][ T5781] dump_stack_lvl+0x189/0x250 [ 142.859920][ T5781] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.859931][ T5781] ? __pfx_print_modules+0x10/0x10 [ 142.859941][ T5781] ? ksys_write+0x145/0x250 [ 142.859953][ T5781] bad_page+0x180/0x1c0 [ 142.859962][ T5781] __free_frozen_pages+0xce2/0xd30 [ 142.859976][ T5781] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 142.859993][ T5781] bpf_xdp_adjust_tail+0x1d6/0x220 [ 142.860005][ T5781] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 142.860014][ T5781] bpf_prog_run_generic_xdp+0x64b/0x14c0 [ 142.860032][ T5781] do_xdp_generic+0x9f7/0x11a0 [ 142.860048][ T5781] ? __pfx_do_xdp_generic+0x10/0x10 [ 142.860062][ T5781] ? tun_get_user+0x23f3/0x3ea0 [ 142.860072][ T5781] ? tun_vnet_hdr_tnl_to_skb+0xed/0x830 [ 142.860082][ T5781] ? tun_get_user+0x23f3/0x3ea0 [ 142.860090][ T5781] tun_get_user+0x2527/0x3ea0 [ 142.860102][ T5781] ? aa_file_perm+0x44d/0x1550 [ 142.860115][ T5781] ? __pfx_tun_get_user+0x10/0x10 [ 142.860128][ T5781] ? ref_tracker_alloc+0x318/0x460 [ 142.860140][ T5781] ? __lock_acquire+0xab9/0xd20 [ 142.860151][ T5781] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 142.860163][ T5781] ? tun_get+0x1c/0x2f0 [ 142.860171][ T5781] ? tun_get+0x1c/0x2f0 [ 142.860178][ T5781] ? tun_get+0x1c/0x2f0 [ 142.860187][ T5781] tun_chr_write_iter+0x113/0x200 [ 142.860196][ T5781] vfs_write+0x5c9/0xb30 [ 142.860207][ T5781] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 142.860216][ T5781] ? __pfx_vfs_write+0x10/0x10 [ 142.860226][ T5781] ? __fget_files+0x2a/0x420 [ 142.860241][ T5781] ksys_write+0x145/0x250 [ 142.860251][ T5781] ? __pfx_ksys_write+0x10/0x10 [ 142.860260][ T5781] ? rcu_is_watching+0x15/0xb0 [ 142.860272][ T5781] ? do_syscall_64+0xbe/0x3b0 [ 142.860283][ T5781] do_syscall_64+0xfa/0x3b0 [ 142.860294][ T5781] ? lockdep_hardirqs_on+0x9c/0x150 [ 142.860304][ T5781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.860314][ T5781] ? clear_bhb_loop+0x60/0xb0 [ 142.860325][ T5781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.860335][ T5781] RIP: 0033:0x7f7fb1f8bc1f [ 142.860344][ T5781] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 142.860352][ T5781] RSP: 002b:00007f7fb2d23000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 142.860364][ T5781] RAX: ffffffffffffffda RBX: 00007f7fb21a5fa0 RCX: 00007f7fb1f8bc1f [ 142.860378][ T5781] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8 [ 142.860384][ T5781] RBP: 00007f7fb200e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 142.860389][ T5781] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 142.860394][ T5781] R13: 0000000000000000 R14: 00007f7fb21a5fa0 R15: 00007fff79ceca88 [ 142.860404][ T5781] [ 142.860413][ T5781] BUG: Bad page state in process syz.0.16 pfn:49d0b [ 142.993281][ T5781] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888049d0bf00 pfn:0x49d0b [ 142.997660][ T5781] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 143.000938][ T5781] raw: 04fff00000000000 dead000000000040 ffff88801e870000 0000000000000000 [ 143.004711][ T5781] raw: ffff888049d0bf00 0000000000000001 00000000ffffffff 0000000000000000 [ 143.008551][ T5781] page dumped because: page_pool leak [ 143.010912][ T5781] page_owner tracks the page as allocated [ 143.013441][ T5781] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5781, tgid 5780 (syz.0.16), ts 142310910979, free_ts 142300648733 [ 143.020905][ T5781] post_alloc_hook+0x240/0x2a0 [ 143.023239][ T5781] get_page_from_freelist+0x21e4/0x22c0 [ 143.025689][ T5781] __alloc_frozen_pages_noprof+0x181/0x370 [ 143.028302][ T5781] alloc_pages_bulk_noprof+0x560/0x710 [ 143.030722][ T5781] __page_pool_alloc_netmems_slow+0x127/0x740 [ 143.033475][ T5781] skb_pp_cow_data+0xb47/0x13e0 [ 143.035624][ T5781] do_xdp_generic+0x699/0x11a0 [ 143.037652][ T5781] tun_get_user+0x2527/0x3ea0 [ 143.039793][ T5781] tun_chr_write_iter+0x113/0x200 [ 143.041967][ T5781] vfs_write+0x5c9/0xb30 [ 143.043930][ T5781] ksys_write+0x145/0x250 [ 143.045822][ T5781] do_syscall_64+0xfa/0x3b0 [ 143.047985][ T5781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.050575][ T5781] page last free pid 4730 tgid 4730 stack trace: [ 143.053349][ T5781] __free_frozen_pages+0xbc4/0xd30 [ 143.055667][ T5781] __put_partials+0x156/0x1a0 [ 143.057771][ T5781] put_cpu_partial+0x17c/0x250 [ 143.059957][ T5781] __slab_free+0x2d5/0x3c0 [ 143.061888][ T5781] qlist_free_all+0x97/0x140 [ 143.063900][ T5781] kasan_quarantine_reduce+0x148/0x160 [ 143.066225][ T5781] __kasan_slab_alloc+0x22/0x80 [ 143.068501][ T5781] __kvmalloc_node_noprof+0x2b0/0x5f0 [ 143.070791][ T5781] seq_read_iter+0x1fd/0xe10 [ 143.072919][ T5781] vfs_read+0x55a/0xa30 [ 143.075041][ T5781] ksys_read+0x145/0x250 [ 143.076926][ T5781] do_syscall_64+0xfa/0x3b0 [ 143.078961][ T5781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.081529][ T5781] Modules linked in: [ 143.083345][ T5781] CPU: 0 UID: 0 PID: 5781 Comm: syz.0.16 Tainted: G B syzkaller #0 PREEMPT(full) [ 143.083361][ T5781] Tainted: [B]=BAD_PAGE [ 143.083365][ T5781] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 143.083371][ T5781] Call Trace: [ 143.083377][ T5781] [ 143.083382][ T5781] dump_stack_lvl+0x189/0x250 [ 143.083399][ T5781] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.083410][ T5781] ? __pfx_print_modules+0x10/0x10 [ 143.083420][ T5781] ? ksys_write+0x145/0x250 [ 143.083432][ T5781] bad_page+0x180/0x1c0 [ 143.083440][ T5781] __free_frozen_pages+0xce2/0xd30 [ 143.083455][ T5781] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 143.083472][ T5781] bpf_xdp_adjust_tail+0x1d6/0x220 [ 143.083484][ T5781] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 143.083493][ T5781] bpf_prog_run_generic_xdp+0x64b/0x14c0 [ 143.083513][ T5781] do_xdp_generic+0x9f7/0x11a0 [ 143.083526][ T5781] ? __pfx_do_xdp_generic+0x10/0x10 [ 143.083539][ T5781] ? tun_get_user+0x23f3/0x3ea0 [ 143.083549][ T5781] ? tun_vnet_hdr_tnl_to_skb+0xed/0x830 [ 143.083558][ T5781] ? tun_get_user+0x23f3/0x3ea0 [ 143.083567][ T5781] tun_get_user+0x2527/0x3ea0 [ 143.083580][ T5781] ? aa_file_perm+0x44d/0x1550 [ 143.083593][ T5781] ? __pfx_tun_get_user+0x10/0x10 [ 143.083606][ T5781] ? ref_tracker_alloc+0x318/0x460 [ 143.083620][ T5781] ? __lock_acquire+0xab9/0xd20 [ 143.083629][ T5781] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 143.083649][ T5781] ? tun_get+0x1c/0x2f0 [ 143.083658][ T5781] ? tun_get+0x1c/0x2f0 [ 143.083666][ T5781] ? tun_get+0x1c/0x2f0 [ 143.083673][ T5781] tun_chr_write_iter+0x113/0x200 [ 143.083683][ T5781] vfs_write+0x5c9/0xb30 [ 143.083693][ T5781] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 143.083701][ T5781] ? __pfx_vfs_write+0x10/0x10 [ 143.083713][ T5781] ? __fget_files+0x2a/0x420 [ 143.083727][ T5781] ksys_write+0x145/0x250 [ 143.083737][ T5781] ? __pfx_ksys_write+0x10/0x10 [ 143.083746][ T5781] ? rcu_is_watching+0x15/0xb0 [ 143.083760][ T5781] ? do_syscall_64+0xbe/0x3b0 [ 143.083772][ T5781] do_syscall_64+0xfa/0x3b0 [ 143.083782][ T5781] ? lockdep_hardirqs_on+0x9c/0x150 [ 143.083792][ T5781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.083800][ T5781] ? clear_bhb_loop+0x60/0xb0 [ 143.083810][ T5781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.083819][ T5781] RIP: 0033:0x7f7fb1f8bc1f [ 143.083830][ T5781] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 143.083838][ T5781] RSP: 002b:00007f7fb2d23000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 143.083849][ T5781] RAX: ffffffffffffffda RBX: 00007f7fb21a5fa0 RCX: 00007f7fb1f8bc1f [ 143.083856][ T5781] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8 [ 143.083862][ T5781] RBP: 00007f7fb200e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 143.083868][ T5781] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 143.083874][ T5781] R13: 0000000000000000 R14: 00007f7fb21a5fa0 R15: 00007fff79ceca88 [ 143.083884][ T5781] [ 143.083893][ T5781] BUG: Bad page state in process syz.0.16 pfn:56adb [ 143.213749][ T5781] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888056adb800 pfn:0x56adb [ 143.218183][ T5781] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 143.221402][ T5781] raw: 04fff00000000000 dead000000000040 ffff88801e870000 0000000000000000 [ 143.225358][ T5781] raw: ffff888056adb800 0000000000000001 00000000ffffffff 0000000000000000 [ 143.229168][ T5781] page dumped because: page_pool leak [ 143.231573][ T5781] page_owner tracks the page as allocated [ 143.234036][ T5781] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5781, tgid 5780 (syz.0.16), ts 142310902291, free_ts 142300712841 [ 143.241294][ T5781] post_alloc_hook+0x240/0x2a0 [ 143.243566][ T5781] get_page_from_freelist+0x21e4/0x22c0 [ 143.246032][ T5781] __alloc_frozen_pages_noprof+0x181/0x370 [ 143.248766][ T5781] alloc_pages_bulk_noprof+0x560/0x710 [ 143.251114][ T5781] __page_pool_alloc_netmems_slow+0x127/0x740 [ 143.253790][ T5781] skb_pp_cow_data+0xb47/0x13e0 [ 143.255866][ T5781] do_xdp_generic+0x699/0x11a0 [ 143.257993][ T5781] tun_get_user+0x2527/0x3ea0 [ 143.260151][ T5781] tun_chr_write_iter+0x113/0x200 [ 143.262333][ T5781] vfs_write+0x5c9/0xb30 [ 143.264348][ T5781] ksys_write+0x145/0x250 [ 143.266262][ T5781] do_syscall_64+0xfa/0x3b0 [ 143.268998][ T5781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.272011][ T5781] page last free pid 4730 tgid 4730 stack trace: [ 143.275027][ T5781] __free_frozen_pages+0xbc4/0xd30 [ 143.278053][ T5781] __slab_free+0x303/0x3c0 [ 143.280679][ T5781] qlist_free_all+0x97/0x140 [ 143.283306][ T5781] kasan_quarantine_reduce+0x148/0x160 [ 143.286415][ T5781] __kasan_slab_alloc+0x22/0x80 [ 143.288764][ T5781] __kvmalloc_node_noprof+0x2b0/0x5f0 [ 143.291623][ T5781] seq_read_iter+0x1fd/0xe10 [ 143.293783][ T5781] vfs_read+0x55a/0xa30 [ 143.295607][ T5781] ksys_read+0x145/0x250 [ 143.297675][ T5781] do_syscall_64+0xfa/0x3b0 [ 143.299761][ T5781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.302348][ T5781] Modules linked in: [ 143.304146][ T5781] CPU: 0 UID: 0 PID: 5781 Comm: syz.0.16 Tainted: G B syzkaller #0 PREEMPT(full) [ 143.304164][ T5781] Tainted: [B]=BAD_PAGE [ 143.304168][ T5781] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 143.304174][ T5781] Call Trace: [ 143.304181][ T5781] [ 143.304188][ T5781] dump_stack_lvl+0x189/0x250 [ 143.304206][ T5781] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.304218][ T5781] ? __pfx_print_modules+0x10/0x10 [ 143.304228][ T5781] ? ksys_write+0x145/0x250 [ 143.304241][ T5781] bad_page+0x180/0x1c0 [ 143.304251][ T5781] __free_frozen_pages+0xce2/0xd30 [ 143.304266][ T5781] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 143.304285][ T5781] bpf_xdp_adjust_tail+0x1d6/0x220 [ 143.304300][ T5781] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 143.304310][ T5781] bpf_prog_run_generic_xdp+0x64b/0x14c0 [ 143.304331][ T5781] do_xdp_generic+0x9f7/0x11a0 [ 143.304346][ T5781] ? __pfx_do_xdp_generic+0x10/0x10 [ 143.304362][ T5781] ? tun_get_user+0x23f3/0x3ea0 [ 143.304373][ T5781] ? tun_vnet_hdr_tnl_to_skb+0xed/0x830 [ 143.304384][ T5781] ? tun_get_user+0x23f3/0x3ea0 [ 143.304393][ T5781] tun_get_user+0x2527/0x3ea0 [ 143.304406][ T5781] ? aa_file_perm+0x44d/0x1550 [ 143.304420][ T5781] ? __pfx_tun_get_user+0x10/0x10 [ 143.304434][ T5781] ? ref_tracker_alloc+0x318/0x460 [ 143.304448][ T5781] ? __lock_acquire+0xab9/0xd20 [ 143.304459][ T5781] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 143.304473][ T5781] ? tun_get+0x1c/0x2f0 [ 143.304483][ T5781] ? tun_get+0x1c/0x2f0 [ 143.304492][ T5781] ? tun_get+0x1c/0x2f0 [ 143.304502][ T5781] tun_chr_write_iter+0x113/0x200 [ 143.304512][ T5781] vfs_write+0x5c9/0xb30 [ 143.304525][ T5781] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 143.304533][ T5781] ? __pfx_vfs_write+0x10/0x10 [ 143.304545][ T5781] ? __fget_files+0x2a/0x420 [ 143.304559][ T5781] ksys_write+0x145/0x250 [ 143.304570][ T5781] ? __pfx_ksys_write+0x10/0x10 [ 143.304579][ T5781] ? rcu_is_watching+0x15/0xb0 [ 143.304607][ T5781] ? do_syscall_64+0xbe/0x3b0 [ 143.304620][ T5781] do_syscall_64+0xfa/0x3b0 [ 143.304631][ T5781] ? lockdep_hardirqs_on+0x9c/0x150 [ 143.304643][ T5781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.304652][ T5781] ? clear_bhb_loop+0x60/0xb0 [ 143.304663][ T5781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.304674][ T5781] RIP: 0033:0x7f7fb1f8bc1f [ 143.304685][ T5781] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 143.304694][ T5781] RSP: 002b:00007f7fb2d23000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 143.304706][ T5781] RAX: ffffffffffffffda RBX: 00007f7fb21a5fa0 RCX: 00007f7fb1f8bc1f [ 143.304713][ T5781] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8 [ 143.304719][ T5781] RBP: 00007f7fb200e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 143.304725][ T5781] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 143.304730][ T5781] R13: 0000000000000000 R14: 00007f7fb21a5fa0 R15: 00007fff79ceca88 [ 143.304740][ T5781] [ 143.304749][ T5781] BUG: Bad page state in process syz.0.16 pfn:54e5e [ 143.436951][ T5781] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888054e5e5a0 pfn:0x54e5e [ 143.441289][ T5781] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 143.444337][ T5781] raw: 04fff00000000000 dead000000000040 ffff88801e870000 0000000000000000 [ 143.447997][ T5781] raw: ffff888054e5e5a0 0000000000000001 00000000ffffffff 0000000000000000 [ 143.451553][ T5781] page dumped because: page_pool leak [ 143.453819][ T5781] page_owner tracks the page as allocated [ 143.456292][ T5781] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5781, tgid 5780 (syz.0.16), ts 142310894055, free_ts 142300750904 [ 143.463594][ T5781] post_alloc_hook+0x240/0x2a0 [ 143.465759][ T5781] get_page_from_freelist+0x21e4/0x22c0 [ 143.468258][ T5781] __alloc_frozen_pages_noprof+0x181/0x370 [ 143.470755][ T5781] alloc_pages_bulk_noprof+0x560/0x710 [ 143.473146][ T5781] __page_pool_alloc_netmems_slow+0x127/0x740 [ 143.475727][ T5781] skb_pp_cow_data+0xb47/0x13e0 [ 143.477925][ T5781] do_xdp_generic+0x699/0x11a0 [ 143.480038][ T5781] tun_get_user+0x2527/0x3ea0 [ 143.482384][ T5781] tun_chr_write_iter+0x113/0x200 [ 143.484687][ T5781] vfs_write+0x5c9/0xb30 [ 143.486510][ T5781] ksys_write+0x145/0x250 [ 143.488509][ T5781] do_syscall_64+0xfa/0x3b0 [ 143.490486][ T5781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.492975][ T5781] page last free pid 4730 tgid 4730 stack trace: [ 143.495632][ T5781] __free_frozen_pages+0xbc4/0xd30 [ 143.497759][ T5781] __slab_free+0x303/0x3c0 [ 143.499831][ T5781] qlist_free_all+0x97/0x140 [ 143.501846][ T5781] kasan_quarantine_reduce+0x148/0x160 [ 143.504165][ T5781] __kasan_slab_alloc+0x22/0x80 [ 143.506249][ T5781] __kvmalloc_node_noprof+0x2b0/0x5f0 [ 143.508663][ T5781] seq_read_iter+0x1fd/0xe10 [ 143.510617][ T5781] vfs_read+0x55a/0xa30 [ 143.512454][ T5781] ksys_read+0x145/0x250 [ 143.514274][ T5781] do_syscall_64+0xfa/0x3b0 [ 143.516207][ T5781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.518810][ T5781] Modules linked in: [ 143.520501][ T5781] CPU: 0 UID: 0 PID: 5781 Comm: syz.0.16 Tainted: G B syzkaller #0 PREEMPT(full) [ 143.520517][ T5781] Tainted: [B]=BAD_PAGE [ 143.520520][ T5781] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 143.520526][ T5781] Call Trace: [ 143.520533][ T5781] [ 143.520539][ T5781] dump_stack_lvl+0x189/0x250 [ 143.520555][ T5781] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.520566][ T5781] ? __pfx_print_modules+0x10/0x10 [ 143.520576][ T5781] ? ksys_write+0x145/0x250 [ 143.520589][ T5781] bad_page+0x180/0x1c0 [ 143.520598][ T5781] __free_frozen_pages+0xce2/0xd30 [ 143.520618][ T5781] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 143.520635][ T5781] bpf_xdp_adjust_tail+0x1d6/0x220 [ 143.520646][ T5781] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 143.520655][ T5781] bpf_prog_run_generic_xdp+0x64b/0x14c0 [ 143.520674][ T5781] do_xdp_generic+0x9f7/0x11a0 [ 143.520689][ T5781] ? __pfx_do_xdp_generic+0x10/0x10 [ 143.520703][ T5781] ? tun_get_user+0x23f3/0x3ea0 [ 143.520714][ T5781] ? tun_vnet_hdr_tnl_to_skb+0xed/0x830 [ 143.520724][ T5781] ? tun_get_user+0x23f3/0x3ea0 [ 143.520732][ T5781] tun_get_user+0x2527/0x3ea0 [ 143.520746][ T5781] ? aa_file_perm+0x44d/0x1550 [ 143.520760][ T5781] ? __pfx_tun_get_user+0x10/0x10 [ 143.520772][ T5781] ? ref_tracker_alloc+0x318/0x460 [ 143.520783][ T5781] ? __lock_acquire+0xab9/0xd20 [ 143.520795][ T5781] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 143.520807][ T5781] ? tun_get+0x1c/0x2f0 [ 143.520816][ T5781] ? tun_get+0x1c/0x2f0 [ 143.520825][ T5781] ? tun_get+0x1c/0x2f0 [ 143.520835][ T5781] tun_chr_write_iter+0x113/0x200 [ 143.520844][ T5781] vfs_write+0x5c9/0xb30 [ 143.520855][ T5781] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 143.520864][ T5781] ? __pfx_vfs_write+0x10/0x10 [ 143.520875][ T5781] ? __fget_files+0x2a/0x420 [ 143.520889][ T5781] ksys_write+0x145/0x250 [ 143.520899][ T5781] ? __pfx_ksys_write+0x10/0x10 [ 143.520907][ T5781] ? rcu_is_watching+0x15/0xb0 [ 143.520920][ T5781] ? do_syscall_64+0xbe/0x3b0 [ 143.520932][ T5781] do_syscall_64+0xfa/0x3b0 [ 143.520942][ T5781] ? lockdep_hardirqs_on+0x9c/0x150 [ 143.520952][ T5781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.520962][ T5781] ? clear_bhb_loop+0x60/0xb0 [ 143.520972][ T5781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.520982][ T5781] RIP: 0033:0x7f7fb1f8bc1f [ 143.520993][ T5781] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 143.521000][ T5781] RSP: 002b:00007f7fb2d23000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 143.521012][ T5781] RAX: ffffffffffffffda RBX: 00007f7fb21a5fa0 RCX: 00007f7fb1f8bc1f [ 143.521019][ T5781] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8 [ 143.521024][ T5781] RBP: 00007f7fb200e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 143.521030][ T5781] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 143.521035][ T5781] R13: 0000000000000000 R14: 00007f7fb21a5fa0 R15: 00007fff79ceca88 [ 143.521045][ T5781] [ 143.521053][ T5781] BUG: Bad page state in process syz.0.16 pfn:49d0a [ 143.652086][ T5781] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888049d0ae10 pfn:0x49d0a [ 143.656426][ T5781] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 143.659573][ T5781] raw: 04fff00000000000 dead000000000040 ffff88801e870000 0000000000000000 [ 143.663174][ T5781] raw: ffff888049d0ae10 0000000000000001 00000000ffffffff 0000000000000000 [ 143.666831][ T5781] page dumped because: page_pool leak [ 143.669226][ T5781] page_owner tracks the page as allocated [ 143.671609][ T5781] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5781, tgid 5780 (syz.0.16), ts 142310885036, free_ts 142300767786 [ 143.678572][ T5781] post_alloc_hook+0x240/0x2a0 [ 143.680638][ T5781] get_page_from_freelist+0x21e4/0x22c0 [ 143.683220][ T5781] __alloc_frozen_pages_noprof+0x181/0x370 [ 143.685887][ T5781] alloc_pages_bulk_noprof+0x560/0x710 [ 143.688589][ T5781] __page_pool_alloc_netmems_slow+0x127/0x740 [ 143.691178][ T5781] skb_pp_cow_data+0xb47/0x13e0 [ 143.693341][ T5781] do_xdp_generic+0x699/0x11a0 [ 143.695453][ T5781] tun_get_user+0x2527/0x3ea0 [ 143.697523][ T5781] tun_chr_write_iter+0x113/0x200 [ 143.699802][ T5781] vfs_write+0x5c9/0xb30 [ 143.701647][ T5781] ksys_write+0x145/0x250 [ 143.703622][ T5781] do_syscall_64+0xfa/0x3b0 [ 143.705609][ T5781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.708205][ T5781] page last free pid 4730 tgid 4730 stack trace: [ 143.710956][ T5781] __free_frozen_pages+0xbc4/0xd30 [ 143.713242][ T5781] __slab_free+0x303/0x3c0 [ 143.715149][ T5781] qlist_free_all+0x97/0x140 [ 143.717120][ T5781] kasan_quarantine_reduce+0x148/0x160 [ 143.719560][ T5781] __kasan_slab_alloc+0x22/0x80 [ 143.721631][ T5781] __kvmalloc_node_noprof+0x2b0/0x5f0 [ 143.723966][ T5781] seq_read_iter+0x1fd/0xe10 [ 143.725997][ T5781] vfs_read+0x55a/0xa30 [ 143.727782][ T5781] ksys_read+0x145/0x250 [ 143.729678][ T5781] do_syscall_64+0xfa/0x3b0 [ 143.731617][ T5781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.734215][ T5781] Modules linked in: [ 143.735915][ T5781] CPU: 0 UID: 0 PID: 5781 Comm: syz.0.16 Tainted: G B syzkaller #0 PREEMPT(full) [ 143.735931][ T5781] Tainted: [B]=BAD_PAGE [ 143.735935][ T5781] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 143.735941][ T5781] Call Trace: [ 143.735948][ T5781] [ 143.735953][ T5781] dump_stack_lvl+0x189/0x250 [ 143.735969][ T5781] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.735981][ T5781] ? __pfx_print_modules+0x10/0x10 [ 143.735992][ T5781] ? ksys_write+0x145/0x250 [ 143.736004][ T5781] bad_page+0x180/0x1c0 [ 143.736013][ T5781] __free_frozen_pages+0xce2/0xd30 [ 143.736025][ T5781] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 143.736043][ T5781] bpf_xdp_adjust_tail+0x1d6/0x220 [ 143.736055][ T5781] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 143.736065][ T5781] bpf_prog_run_generic_xdp+0x64b/0x14c0 [ 143.736084][ T5781] do_xdp_generic+0x9f7/0x11a0 [ 143.736099][ T5781] ? __pfx_do_xdp_generic+0x10/0x10 [ 143.736111][ T5781] ? tun_get_user+0x23f3/0x3ea0 [ 143.736122][ T5781] ? tun_vnet_hdr_tnl_to_skb+0xed/0x830 [ 143.736132][ T5781] ? tun_get_user+0x23f3/0x3ea0 [ 143.736141][ T5781] tun_get_user+0x2527/0x3ea0 [ 143.736154][ T5781] ? aa_file_perm+0x44d/0x1550 [ 143.736167][ T5781] ? __pfx_tun_get_user+0x10/0x10 [ 143.736179][ T5781] ? ref_tracker_alloc+0x318/0x460 [ 143.736191][ T5781] ? __lock_acquire+0xab9/0xd20 [ 143.736201][ T5781] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 143.736213][ T5781] ? tun_get+0x1c/0x2f0 [ 143.736222][ T5781] ? tun_get+0x1c/0x2f0 [ 143.736230][ T5781] ? tun_get+0x1c/0x2f0 [ 143.736239][ T5781] tun_chr_write_iter+0x113/0x200 [ 143.736249][ T5781] vfs_write+0x5c9/0xb30 [ 143.736258][ T5781] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 143.736267][ T5781] ? __pfx_vfs_write+0x10/0x10 [ 143.736278][ T5781] ? __fget_files+0x2a/0x420 [ 143.736292][ T5781] ksys_write+0x145/0x250 [ 143.736302][ T5781] ? __pfx_ksys_write+0x10/0x10 [ 143.736311][ T5781] ? rcu_is_watching+0x15/0xb0 [ 143.736324][ T5781] ? do_syscall_64+0xbe/0x3b0 [ 143.736334][ T5781] do_syscall_64+0xfa/0x3b0 [ 143.736344][ T5781] ? lockdep_hardirqs_on+0x9c/0x150 [ 143.736355][ T5781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.736364][ T5781] ? clear_bhb_loop+0x60/0xb0 [ 143.736374][ T5781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.736383][ T5781] RIP: 0033:0x7f7fb1f8bc1f [ 143.736394][ T5781] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 143.736410][ T5781] RSP: 002b:00007f7fb2d23000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 143.736421][ T5781] RAX: ffffffffffffffda RBX: 00007f7fb21a5fa0 RCX: 00007f7fb1f8bc1f [ 143.736428][ T5781] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8 [ 143.736434][ T5781] RBP: 00007f7fb200e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 143.736440][ T5781] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 143.736446][ T5781] R13: 0000000000000000 R14: 00007f7fb21a5fa0 R15: 00007fff79ceca88 [ 143.736455][ T5781] [ 143.736464][ T5781] BUG: Bad page state in process syz.0.16 pfn:49d0e [ 143.868671][ T5781] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888049d0ee10 pfn:0x49d0e [ 143.872975][ T5781] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 143.876036][ T5781] raw: 04fff00000000000 dead000000000040 ffff88801e870000 0000000000000000 [ 143.879980][ T5781] raw: ffff888049d0ee10 0000000000000001 00000000ffffffff 0000000000000000 [ 143.883692][ T5781] page dumped because: page_pool leak [ 143.885980][ T5781] page_owner tracks the page as allocated [ 143.888496][ T5781] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5781, tgid 5780 (syz.0.16), ts 142310875749, free_ts 142300780953 [ 143.895733][ T5781] post_alloc_hook+0x240/0x2a0 [ 143.897755][ T5781] get_page_from_freelist+0x21e4/0x22c0 [ 143.900261][ T5781] __alloc_frozen_pages_noprof+0x181/0x370 [ 143.902865][ T5781] alloc_pages_bulk_noprof+0x560/0x710 [ 143.905604][ T5781] __page_pool_alloc_netmems_slow+0x127/0x740 [ 143.908355][ T5781] skb_pp_cow_data+0xb47/0x13e0 [ 143.910429][ T5781] do_xdp_generic+0x699/0x11a0 [ 143.912523][ T5781] tun_get_user+0x2527/0x3ea0 [ 143.914565][ T5781] tun_chr_write_iter+0x113/0x200 [ 143.916818][ T5781] vfs_write+0x5c9/0xb30 [ 143.918877][ T5781] ksys_write+0x145/0x250 [ 143.920794][ T5781] do_syscall_64+0xfa/0x3b0 [ 143.922833][ T5781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.925340][ T5781] page last free pid 4730 tgid 4730 stack trace: [ 143.928139][ T5781] __free_frozen_pages+0xbc4/0xd30 [ 143.930334][ T5781] __slab_free+0x303/0x3c0 [ 143.932250][ T5781] qlist_free_all+0x97/0x140 [ 143.934353][ T5781] kasan_quarantine_reduce+0x148/0x160 [ 143.936674][ T5781] __kasan_slab_alloc+0x22/0x80 [ 143.938867][ T5781] __kvmalloc_node_noprof+0x2b0/0x5f0 [ 143.941136][ T5781] seq_read_iter+0x1fd/0xe10 [ 143.943136][ T5781] vfs_read+0x55a/0xa30 [ 143.944911][ T5781] ksys_read+0x145/0x250 [ 143.946733][ T5781] do_syscall_64+0xfa/0x3b0 [ 143.948790][ T5781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.951303][ T5781] Modules linked in: [ 143.952951][ T5781] CPU: 0 UID: 0 PID: 5781 Comm: syz.0.16 Tainted: G B syzkaller #0 PREEMPT(full) [ 143.952968][ T5781] Tainted: [B]=BAD_PAGE [ 143.952971][ T5781] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 143.952979][ T5781] Call Trace: [ 143.952987][ T5781] [ 143.952993][ T5781] dump_stack_lvl+0x189/0x250 [ 143.953009][ T5781] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.953020][ T5781] ? __pfx_print_modules+0x10/0x10 [ 143.953029][ T5781] ? ksys_write+0x145/0x250 [ 143.953041][ T5781] bad_page+0x180/0x1c0 [ 143.953050][ T5781] __free_frozen_pages+0xce2/0xd30 [ 143.953065][ T5781] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 143.953084][ T5781] bpf_xdp_adjust_tail+0x1d6/0x220 [ 143.953095][ T5781] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 143.953103][ T5781] bpf_prog_run_generic_xdp+0x64b/0x14c0 [ 143.953122][ T5781] do_xdp_generic+0x9f7/0x11a0 [ 143.953136][ T5781] ? __pfx_do_xdp_generic+0x10/0x10 [ 143.953151][ T5781] ? tun_get_user+0x23f3/0x3ea0 [ 143.953161][ T5781] ? tun_vnet_hdr_tnl_to_skb+0xed/0x830 [ 143.953171][ T5781] ? tun_get_user+0x23f3/0x3ea0 [ 143.953179][ T5781] tun_get_user+0x2527/0x3ea0 [ 143.953192][ T5781] ? aa_file_perm+0x44d/0x1550 [ 143.953207][ T5781] ? __pfx_tun_get_user+0x10/0x10 [ 143.953219][ T5781] ? ref_tracker_alloc+0x318/0x460 [ 143.953231][ T5781] ? __lock_acquire+0xab9/0xd20 [ 143.953242][ T5781] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 143.953256][ T5781] ? tun_get+0x1c/0x2f0 [ 143.953265][ T5781] ? tun_get+0x1c/0x2f0 [ 143.953273][ T5781] ? tun_get+0x1c/0x2f0 [ 143.953281][ T5781] tun_chr_write_iter+0x113/0x200 [ 143.953291][ T5781] vfs_write+0x5c9/0xb30 [ 143.953300][ T5781] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 143.953307][ T5781] ? __pfx_vfs_write+0x10/0x10 [ 143.953319][ T5781] ? __fget_files+0x2a/0x420 [ 143.953331][ T5781] ksys_write+0x145/0x250 [ 143.953340][ T5781] ? __pfx_ksys_write+0x10/0x10 [ 143.953348][ T5781] ? rcu_is_watching+0x15/0xb0 [ 143.953360][ T5781] ? do_syscall_64+0xbe/0x3b0 [ 143.953371][ T5781] do_syscall_64+0xfa/0x3b0 [ 143.953381][ T5781] ? lockdep_hardirqs_on+0x9c/0x150 [ 143.953392][ T5781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.953401][ T5781] ? clear_bhb_loop+0x60/0xb0 [ 143.953411][ T5781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.953421][ T5781] RIP: 0033:0x7f7fb1f8bc1f [ 143.953431][ T5781] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 143.953439][ T5781] RSP: 002b:00007f7fb2d23000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 143.953451][ T5781] RAX: ffffffffffffffda RBX: 00007f7fb21a5fa0 RCX: 00007f7fb1f8bc1f [ 143.953458][ T5781] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8 [ 143.953464][ T5781] RBP: 00007f7fb200e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 143.953470][ T5781] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 143.953477][ T5781] R13: 0000000000000000 R14: 00007f7fb21a5fa0 R15: 00007fff79ceca88 [ 143.953487][ T5781] [ 143.953496][ T5781] BUG: Bad page state in process syz.0.16 pfn:56936 [ 144.084340][ T5781] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888056936400 pfn:0x56936 [ 144.088865][ T5781] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 144.091983][ T5781] raw: 04fff00000000000 dead000000000040 ffff88801e870000 0000000000000000 [ 144.095722][ T5781] raw: ffff888056936400 0000000000000001 00000000ffffffff 0000000000000000 [ 144.099557][ T5781] page dumped because: page_pool leak [ 144.101900][ T5781] page_owner tracks the page as allocated [ 144.104381][ T5781] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5781, tgid 5780 (syz.0.16), ts 142310867008, free_ts 142300819970 [ 144.112209][ T5781] post_alloc_hook+0x240/0x2a0 [ 144.114514][ T5781] get_page_from_freelist+0x21e4/0x22c0 [ 144.116891][ T5781] __alloc_frozen_pages_noprof+0x181/0x370 [ 144.119554][ T5781] alloc_pages_bulk_noprof+0x560/0x710 [ 144.122123][ T5781] __page_pool_alloc_netmems_slow+0x127/0x740 [ 144.124870][ T5781] skb_pp_cow_data+0xb47/0x13e0 [ 144.127006][ T5781] do_xdp_generic+0x699/0x11a0 [ 144.129087][ T5781] tun_get_user+0x2527/0x3ea0 [ 144.131107][ T5781] tun_chr_write_iter+0x113/0x200 [ 144.133308][ T5781] vfs_write+0x5c9/0xb30 [ 144.135195][ T5781] ksys_write+0x145/0x250 [ 144.137031][ T5781] do_syscall_64+0xfa/0x3b0 [ 144.139078][ T5781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.141543][ T5781] page last free pid 4730 tgid 4730 stack trace: [ 144.144211][ T5781] __free_frozen_pages+0xbc4/0xd30 [ 144.146349][ T5781] __slab_free+0x303/0x3c0 [ 144.148307][ T5781] qlist_free_all+0x97/0x140 [ 144.150275][ T5781] kasan_quarantine_reduce+0x148/0x160 [ 144.152718][ T5781] __kasan_slab_alloc+0x22/0x80 [ 144.154821][ T5781] __kvmalloc_node_noprof+0x2b0/0x5f0 [ 144.157088][ T5781] seq_read_iter+0x1fd/0xe10 [ 144.159348][ T5781] vfs_read+0x55a/0xa30 [ 144.161232][ T5781] ksys_read+0x145/0x250 [ 144.163285][ T5781] do_syscall_64+0xfa/0x3b0 [ 144.165241][ T5781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.167751][ T5781] Modules linked in: [ 144.169541][ T5781] CPU: 0 UID: 0 PID: 5781 Comm: syz.0.16 Tainted: G B syzkaller #0 PREEMPT(full) [ 144.169556][ T5781] Tainted: [B]=BAD_PAGE [ 144.169560][ T5781] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 144.169566][ T5781] Call Trace: [ 144.169573][ T5781] [ 144.169579][ T5781] dump_stack_lvl+0x189/0x250 [ 144.169595][ T5781] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.169607][ T5781] ? __pfx_print_modules+0x10/0x10 [ 144.169617][ T5781] ? ksys_write+0x145/0x250 [ 144.169630][ T5781] bad_page+0x180/0x1c0 [ 144.169639][ T5781] __free_frozen_pages+0xce2/0xd30 [ 144.169651][ T5781] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 144.169668][ T5781] bpf_xdp_adjust_tail+0x1d6/0x220 [ 144.169681][ T5781] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 144.169690][ T5781] bpf_prog_run_generic_xdp+0x64b/0x14c0 [ 144.169708][ T5781] do_xdp_generic+0x9f7/0x11a0 [ 144.169721][ T5781] ? __pfx_do_xdp_generic+0x10/0x10 [ 144.169734][ T5781] ? tun_get_user+0x23f3/0x3ea0 [ 144.169745][ T5781] ? tun_vnet_hdr_tnl_to_skb+0xed/0x830 [ 144.169756][ T5781] ? tun_get_user+0x23f3/0x3ea0 [ 144.169765][ T5781] tun_get_user+0x2527/0x3ea0 [ 144.169778][ T5781] ? aa_file_perm+0x44d/0x1550 [ 144.169790][ T5781] ? __pfx_tun_get_user+0x10/0x10 [ 144.169804][ T5781] ? ref_tracker_alloc+0x318/0x460 [ 144.169816][ T5781] ? __lock_acquire+0xab9/0xd20 [ 144.169827][ T5781] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 144.169840][ T5781] ? tun_get+0x1c/0x2f0 [ 144.169850][ T5781] ? tun_get+0x1c/0x2f0 [ 144.169858][ T5781] ? tun_get+0x1c/0x2f0 [ 144.169867][ T5781] tun_chr_write_iter+0x113/0x200 [ 144.169877][ T5781] vfs_write+0x5c9/0xb30 [ 144.169887][ T5781] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 144.169895][ T5781] ? __pfx_vfs_write+0x10/0x10 [ 144.169906][ T5781] ? __fget_files+0x2a/0x420 [ 144.169919][ T5781] ksys_write+0x145/0x250 [ 144.169929][ T5781] ? __pfx_ksys_write+0x10/0x10 [ 144.169937][ T5781] ? rcu_is_watching+0x15/0xb0 [ 144.169950][ T5781] ? do_syscall_64+0xbe/0x3b0 [ 144.169963][ T5781] do_syscall_64+0xfa/0x3b0 [ 144.169973][ T5781] ? lockdep_hardirqs_on+0x9c/0x150 [ 144.169984][ T5781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.169993][ T5781] ? clear_bhb_loop+0x60/0xb0 [ 144.170001][ T5781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.170010][ T5781] RIP: 0033:0x7f7fb1f8bc1f [ 144.170020][ T5781] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 144.170028][ T5781] RSP: 002b:00007f7fb2d23000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 144.170038][ T5781] RAX: ffffffffffffffda RBX: 00007f7fb21a5fa0 RCX: 00007f7fb1f8bc1f [ 144.170045][ T5781] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8 [ 144.170051][ T5781] RBP: 00007f7fb200e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 144.170057][ T5781] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 144.170063][ T5781] R13: 0000000000000000 R14: 00007f7fb21a5fa0 R15: 00007fff79ceca88 [ 144.170073][ T5781] [ 144.170080][ T5781] BUG: Bad page state in process syz.0.16 pfn:560d3 [ 144.301910][ T5781] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880560d3400 pfn:0x560d3 [ 144.306298][ T5781] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 144.309979][ T5781] raw: 04fff00000000000 dead000000000040 ffff88801e870000 0000000000000000 [ 144.313888][ T5781] raw: ffff8880560d3400 0000000000000001 00000000ffffffff 0000000000000000 [ 144.318907][ T5781] page dumped because: page_pool leak [ 144.321315][ T5781] page_owner tracks the page as allocated [ 144.323937][ T5781] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5781, tgid 5780 (syz.0.16), ts 142310858241, free_ts 142300866224 [ 144.331257][ T5781] post_alloc_hook+0x240/0x2a0 [ 144.333360][ T5781] get_page_from_freelist+0x21e4/0x22c0 [ 144.336064][ T5781] __alloc_frozen_pages_noprof+0x181/0x370 [ 144.338975][ T5781] alloc_pages_bulk_noprof+0x560/0x710 [ 144.341405][ T5781] __page_pool_alloc_netmems_slow+0x127/0x740 [ 144.344175][ T5781] skb_pp_cow_data+0xb47/0x13e0 [ 144.346294][ T5781] do_xdp_generic+0x699/0x11a0 [ 144.348480][ T5781] tun_get_user+0x2527/0x3ea0 [ 144.350538][ T5781] tun_chr_write_iter+0x113/0x200 [ 144.352929][ T5781] vfs_write+0x5c9/0xb30 [ 144.354850][ T5781] ksys_write+0x145/0x250 [ 144.356773][ T5781] do_syscall_64+0xfa/0x3b0 [ 144.358902][ T5781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.361444][ T5781] page last free pid 4730 tgid 4730 stack trace: [ 144.364180][ T5781] __free_frozen_pages+0xbc4/0xd30 [ 144.366508][ T5781] __put_partials+0x156/0x1a0 [ 144.368635][ T5781] put_cpu_partial+0x17c/0x250 [ 144.370869][ T5781] __slab_free+0x2d5/0x3c0 [ 144.372825][ T5781] qlist_free_all+0x97/0x140 [ 144.374827][ T5781] kasan_quarantine_reduce+0x148/0x160 [ 144.377184][ T5781] __kasan_slab_alloc+0x22/0x80 [ 144.379471][ T5781] __kvmalloc_node_noprof+0x2b0/0x5f0 [ 144.381693][ T5781] seq_read_iter+0x1fd/0xe10 [ 144.383888][ T5781] vfs_read+0x55a/0xa30 [ 144.385688][ T5781] ksys_read+0x145/0x250 [ 144.387544][ T5781] do_syscall_64+0xfa/0x3b0 [ 144.389631][ T5781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.392262][ T5781] Modules linked in: [ 144.394034][ T5781] CPU: 0 UID: 0 PID: 5781 Comm: syz.0.16 Tainted: G B syzkaller #0 PREEMPT(full) [ 144.394052][ T5781] Tainted: [B]=BAD_PAGE [ 144.394099][ T5781] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 144.394108][ T5781] Call Trace: [ 144.394164][ T5781] [ 144.394199][ T5781] dump_stack_lvl+0x189/0x250 [ 144.394220][ T5781] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.394233][ T5781] ? __pfx_print_modules+0x10/0x10 [ 144.394244][ T5781] ? ksys_write+0x145/0x250 [ 144.394258][ T5781] bad_page+0x180/0x1c0 [ 144.394269][ T5781] __free_frozen_pages+0xce2/0xd30 [ 144.394284][ T5781] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 144.394320][ T5781] bpf_xdp_adjust_tail+0x1d6/0x220 [ 144.394339][ T5781] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 144.394350][ T5781] bpf_prog_run_generic_xdp+0x64b/0x14c0 [ 144.394372][ T5781] do_xdp_generic+0x9f7/0x11a0 [ 144.394389][ T5781] ? __pfx_do_xdp_generic+0x10/0x10 [ 144.394405][ T5781] ? tun_get_user+0x23f3/0x3ea0 [ 144.394417][ T5781] ? tun_vnet_hdr_tnl_to_skb+0xed/0x830 [ 144.394428][ T5781] ? tun_get_user+0x23f3/0x3ea0 [ 144.394438][ T5781] tun_get_user+0x2527/0x3ea0 [ 144.394464][ T5781] ? aa_file_perm+0x44d/0x1550 [ 144.394480][ T5781] ? __pfx_tun_get_user+0x10/0x10 [ 144.394494][ T5781] ? ref_tracker_alloc+0x318/0x460 [ 144.394509][ T5781] ? __lock_acquire+0xab9/0xd20 [ 144.394522][ T5781] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 144.394537][ T5781] ? tun_get+0x1c/0x2f0 [ 144.394548][ T5781] ? tun_get+0x1c/0x2f0 [ 144.394557][ T5781] ? tun_get+0x1c/0x2f0 [ 144.394567][ T5781] tun_chr_write_iter+0x113/0x200 [ 144.394578][ T5781] vfs_write+0x5c9/0xb30 [ 144.394589][ T5781] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 144.394598][ T5781] ? __pfx_vfs_write+0x10/0x10 [ 144.394611][ T5781] ? __fget_files+0x2a/0x420 [ 144.394626][ T5781] ksys_write+0x145/0x250 [ 144.394661][ T5781] ? __pfx_ksys_write+0x10/0x10 [ 144.394670][ T5781] ? rcu_is_watching+0x15/0xb0 [ 144.394688][ T5781] ? do_syscall_64+0xbe/0x3b0 [ 144.394700][ T5781] do_syscall_64+0xfa/0x3b0 [ 144.394711][ T5781] ? lockdep_hardirqs_on+0x9c/0x150 [ 144.394723][ T5781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.394733][ T5781] ? clear_bhb_loop+0x60/0xb0 [ 144.394742][ T5781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.394751][ T5781] RIP: 0033:0x7f7fb1f8bc1f [ 144.394770][ T5781] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 144.394778][ T5781] RSP: 002b:00007f7fb2d23000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 144.394789][ T5781] RAX: ffffffffffffffda RBX: 00007f7fb21a5fa0 RCX: 00007f7fb1f8bc1f [ 144.394798][ T5781] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8 [ 144.394804][ T5781] RBP: 00007f7fb200e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 144.394810][ T5781] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 144.394815][ T5781] R13: 0000000000000000 R14: 00007f7fb21a5fa0 R15: 00007fff79ceca88 [ 144.394826][ T5781] [ 144.394875][ T5781] BUG: Bad page state in process syz.0.16 pfn:4f854 [ 144.525999][ T5781] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804f854800 pfn:0x4f854 [ 144.530266][ T5781] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 144.533373][ T5781] raw: 04fff00000000000 dead000000000040 ffff88801e870000 0000000000000000 [ 144.537109][ T5781] raw: ffff88804f854800 0000000000000001 00000000ffffffff 0000000000000000 [ 144.540894][ T5781] page dumped because: page_pool leak [ 144.543284][ T5781] page_owner tracks the page as allocated [ 144.545702][ T5781] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5781, tgid 5780 (syz.0.16), ts 142310848973, free_ts 142300876013 [ 144.552820][ T5781] post_alloc_hook+0x240/0x2a0 [ 144.554921][ T5781] get_page_from_freelist+0x21e4/0x22c0 [ 144.557296][ T5781] __alloc_frozen_pages_noprof+0x181/0x370 [ 144.559982][ T5781] alloc_pages_bulk_noprof+0x560/0x710 [ 144.562327][ T5781] __page_pool_alloc_netmems_slow+0x127/0x740 [ 144.564975][ T5781] skb_pp_cow_data+0xb47/0x13e0 [ 144.567067][ T5781] do_xdp_generic+0x699/0x11a0 [ 144.569252][ T5781] tun_get_user+0x2527/0x3ea0 [ 144.571316][ T5781] tun_chr_write_iter+0x113/0x200 [ 144.573469][ T5781] vfs_write+0x5c9/0xb30 [ 144.575278][ T5781] ksys_write+0x145/0x250 [ 144.577161][ T5781] do_syscall_64+0xfa/0x3b0 [ 144.579212][ T5781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.581769][ T5781] page last free pid 4730 tgid 4730 stack trace: [ 144.584473][ T5781] __free_frozen_pages+0xbc4/0xd30 [ 144.586622][ T5781] __put_partials+0x156/0x1a0 [ 144.588728][ T5781] put_cpu_partial+0x17c/0x250 [ 144.590798][ T5781] __slab_free+0x2d5/0x3c0 [ 144.592752][ T5781] qlist_free_all+0x97/0x140 [ 144.594822][ T5781] kasan_quarantine_reduce+0x148/0x160 [ 144.597153][ T5781] __kasan_slab_alloc+0x22/0x80 [ 144.599366][ T5781] __kvmalloc_node_noprof+0x2b0/0x5f0 [ 144.601540][ T5781] seq_read_iter+0x1fd/0xe10 [ 144.603632][ T5781] vfs_read+0x55a/0xa30 [ 144.605530][ T5781] ksys_read+0x145/0x250 [ 144.607507][ T5781] do_syscall_64+0xfa/0x3b0 [ 144.609525][ T5781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.611939][ T5781] Modules linked in: [ 144.613644][ T5781] CPU: 0 UID: 0 PID: 5781 Comm: syz.0.16 Tainted: G B syzkaller #0 PREEMPT(full) [ 144.613660][ T5781] Tainted: [B]=BAD_PAGE [ 144.613664][ T5781] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 144.613670][ T5781] Call Trace: [ 144.613677][ T5781] [ 144.613683][ T5781] dump_stack_lvl+0x189/0x250 [ 144.613701][ T5781] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.613712][ T5781] ? __pfx_print_modules+0x10/0x10 [ 144.613721][ T5781] ? ksys_write+0x145/0x250 [ 144.613734][ T5781] bad_page+0x180/0x1c0 [ 144.613743][ T5781] __free_frozen_pages+0xce2/0xd30 [ 144.613756][ T5781] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 144.613773][ T5781] bpf_xdp_adjust_tail+0x1d6/0x220 [ 144.613785][ T5781] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 144.613794][ T5781] bpf_prog_run_generic_xdp+0x64b/0x14c0 [ 144.613815][ T5781] do_xdp_generic+0x9f7/0x11a0 [ 144.613828][ T5781] ? __pfx_do_xdp_generic+0x10/0x10 [ 144.613842][ T5781] ? tun_get_user+0x23f3/0x3ea0 [ 144.613853][ T5781] ? tun_vnet_hdr_tnl_to_skb+0xed/0x830 [ 144.613864][ T5781] ? tun_get_user+0x23f3/0x3ea0 [ 144.613873][ T5781] tun_get_user+0x2527/0x3ea0 [ 144.613887][ T5781] ? aa_file_perm+0x44d/0x1550 [ 144.613900][ T5781] ? __pfx_tun_get_user+0x10/0x10 [ 144.613913][ T5781] ? ref_tracker_alloc+0x318/0x460 [ 144.613924][ T5781] ? __lock_acquire+0xab9/0xd20 [ 144.613933][ T5781] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 144.613945][ T5781] ? tun_get+0x1c/0x2f0 [ 144.613954][ T5781] ? tun_get+0x1c/0x2f0 [ 144.613962][ T5781] ? tun_get+0x1c/0x2f0 [ 144.613971][ T5781] tun_chr_write_iter+0x113/0x200 [ 144.613980][ T5781] vfs_write+0x5c9/0xb30 [ 144.613990][ T5781] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 144.613999][ T5781] ? __pfx_vfs_write+0x10/0x10 [ 144.614010][ T5781] ? __fget_files+0x2a/0x420 [ 144.614022][ T5781] ksys_write+0x145/0x250 [ 144.614032][ T5781] ? __pfx_ksys_write+0x10/0x10 [ 144.614041][ T5781] ? rcu_is_watching+0x15/0xb0 [ 144.614053][ T5781] ? do_syscall_64+0xbe/0x3b0 [ 144.614064][ T5781] do_syscall_64+0xfa/0x3b0 [ 144.614074][ T5781] ? lockdep_hardirqs_on+0x9c/0x150 [ 144.614086][ T5781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.614095][ T5781] ? clear_bhb_loop+0x60/0xb0 [ 144.614104][ T5781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.614113][ T5781] RIP: 0033:0x7f7fb1f8bc1f [ 144.614124][ T5781] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 144.614131][ T5781] RSP: 002b:00007f7fb2d23000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 144.614143][ T5781] RAX: ffffffffffffffda RBX: 00007f7fb21a5fa0 RCX: 00007f7fb1f8bc1f [ 144.614150][ T5781] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8 [ 144.614156][ T5781] RBP: 00007f7fb200e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 144.614162][ T5781] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 144.614168][ T5781] R13: 0000000000000000 R14: 00007f7fb21a5fa0 R15: 00007fff79ceca88 [ 144.614176][ T5781] [ 144.614186][ T5781] BUG: Bad page state in process syz.0.16 pfn:5954f [ 144.747112][ T5781] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805954f400 pfn:0x5954f [ 144.751416][ T5781] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 144.754743][ T5781] raw: 04fff00000000000 dead000000000040 ffff88801e870000 0000000000000000 [ 144.758534][ T5781] raw: ffff88805954f400 0000000000000001 00000000ffffffff 0000000000000000 [ 144.762379][ T5781] page dumped because: page_pool leak [ 144.764696][ T5781] page_owner tracks the page as allocated [ 144.767059][ T5781] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5781, tgid 5780 (syz.0.16), ts 142310840659, free_ts 142300885922 [ 144.774245][ T5781] post_alloc_hook+0x240/0x2a0 [ 144.776260][ T5781] get_page_from_freelist+0x21e4/0x22c0 [ 144.778743][ T5781] __alloc_frozen_pages_noprof+0x181/0x370 [ 144.781213][ T5781] alloc_pages_bulk_noprof+0x560/0x710 [ 144.783496][ T5781] __page_pool_alloc_netmems_slow+0x127/0x740 [ 144.786117][ T5781] skb_pp_cow_data+0xb47/0x13e0 [ 144.788297][ T5781] do_xdp_generic+0x699/0x11a0 [ 144.790339][ T5781] tun_get_user+0x2527/0x3ea0 [ 144.792446][ T5781] tun_chr_write_iter+0x113/0x200 [ 144.794619][ T5781] vfs_write+0x5c9/0xb30 [ 144.796532][ T5781] ksys_write+0x145/0x250 [ 144.798521][ T5781] do_syscall_64+0xfa/0x3b0 [ 144.800540][ T5781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.803142][ T5781] page last free pid 4730 tgid 4730 stack trace: [ 144.805860][ T5781] __free_frozen_pages+0xbc4/0xd30 [ 144.808166][ T5781] __put_partials+0x156/0x1a0 [ 144.810254][ T5781] put_cpu_partial+0x17c/0x250 [ 144.812316][ T5781] __slab_free+0x2d5/0x3c0 [ 144.814292][ T5781] qlist_free_all+0x97/0x140 [ 144.816345][ T5781] kasan_quarantine_reduce+0x148/0x160 [ 144.818849][ T5781] __kasan_slab_alloc+0x22/0x80 [ 144.820932][ T5781] __kvmalloc_node_noprof+0x2b0/0x5f0 [ 144.823283][ T5781] seq_read_iter+0x1fd/0xe10 [ 144.825287][ T5781] vfs_read+0x55a/0xa30 [ 144.827057][ T5781] ksys_read+0x145/0x250 [ 144.828939][ T5781] do_syscall_64+0xfa/0x3b0 [ 144.830870][ T5781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.833449][ T5781] Modules linked in: [ 144.835191][ T5781] CPU: 0 UID: 0 PID: 5781 Comm: syz.0.16 Tainted: G B syzkaller #0 PREEMPT(full) [ 144.835208][ T5781] Tainted: [B]=BAD_PAGE [ 144.835212][ T5781] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 144.835219][ T5781] Call Trace: [ 144.835226][ T5781] [ 144.835231][ T5781] dump_stack_lvl+0x189/0x250 [ 144.835248][ T5781] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.835259][ T5781] ? __pfx_print_modules+0x10/0x10 [ 144.835269][ T5781] ? ksys_write+0x145/0x250 [ 144.835282][ T5781] bad_page+0x180/0x1c0 [ 144.835292][ T5781] __free_frozen_pages+0xce2/0xd30 [ 144.835306][ T5781] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 144.835324][ T5781] bpf_xdp_adjust_tail+0x1d6/0x220 [ 144.835353][ T5781] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 144.835363][ T5781] bpf_prog_run_generic_xdp+0x64b/0x14c0 [ 144.835383][ T5781] do_xdp_generic+0x9f7/0x11a0 [ 144.835397][ T5781] ? __pfx_do_xdp_generic+0x10/0x10 [ 144.835411][ T5781] ? tun_get_user+0x23f3/0x3ea0 [ 144.835422][ T5781] ? tun_vnet_hdr_tnl_to_skb+0xed/0x830 [ 144.835432][ T5781] ? tun_get_user+0x23f3/0x3ea0 [ 144.835441][ T5781] tun_get_user+0x2527/0x3ea0 [ 144.835454][ T5781] ? aa_file_perm+0x44d/0x1550 [ 144.835468][ T5781] ? __pfx_tun_get_user+0x10/0x10 [ 144.835481][ T5781] ? ref_tracker_alloc+0x318/0x460 [ 144.835493][ T5781] ? __lock_acquire+0xab9/0xd20 [ 144.835504][ T5781] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 144.835516][ T5781] ? tun_get+0x1c/0x2f0 [ 144.835524][ T5781] ? tun_get+0x1c/0x2f0 [ 144.835531][ T5781] ? tun_get+0x1c/0x2f0 [ 144.835541][ T5781] tun_chr_write_iter+0x113/0x200 [ 144.835550][ T5781] vfs_write+0x5c9/0xb30 [ 144.835561][ T5781] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 144.835571][ T5781] ? __pfx_vfs_write+0x10/0x10 [ 144.835581][ T5781] ? __fget_files+0x2a/0x420 [ 144.835594][ T5781] ksys_write+0x145/0x250 [ 144.835605][ T5781] ? __pfx_ksys_write+0x10/0x10 [ 144.835614][ T5781] ? rcu_is_watching+0x15/0xb0 [ 144.835626][ T5781] ? do_syscall_64+0xbe/0x3b0 [ 144.835639][ T5781] do_syscall_64+0xfa/0x3b0 [ 144.835650][ T5781] ? lockdep_hardirqs_on+0x9c/0x150 [ 144.835662][ T5781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.835671][ T5781] ? clear_bhb_loop+0x60/0xb0 [ 144.835682][ T5781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.835690][ T5781] RIP: 0033:0x7f7fb1f8bc1f [ 144.835701][ T5781] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 144.835710][ T5781] RSP: 002b:00007f7fb2d23000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 144.835721][ T5781] RAX: ffffffffffffffda RBX: 00007f7fb21a5fa0 RCX: 00007f7fb1f8bc1f [ 144.835729][ T5781] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8 [ 144.835735][ T5781] RBP: 00007f7fb200e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 144.835740][ T5781] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 144.835745][ T5781] R13: 0000000000000000 R14: 00007f7fb21a5fa0 R15: 00007fff79ceca88 [ 144.835755][ T5781] [ 144.968030][ T4680] Bluetooth: hci0: command tx timeout [ 145.058996][ T5783] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880560e51e0 pfn:0x560e5 [ 145.063441][ T5783] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 145.066766][ T5783] raw: 04fff00000000000 dead000000000040 ffff88801e870000 0000000000000000 [ 145.070506][ T5783] raw: ffff8880560e51e0 3fffffffffffffff 00000000ffffffff 0000000000000000 [ 145.074512][ T5783] page dumped because: VM_BUG_ON_PAGE(page_ref_count(page) == 0) [ 145.079206][ T5783] page_owner tracks the page as allocated [ 145.081837][ T5783] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5781, tgid 5780 (syz.0.16), ts 142310936648, free_ts 142300612477 [ 145.089076][ T5783] post_alloc_hook+0x240/0x2a0 [ 145.091253][ T5783] get_page_from_freelist+0x21e4/0x22c0 [ 145.093646][ T5783] __alloc_frozen_pages_noprof+0x181/0x370 [ 145.096251][ T5783] alloc_pages_bulk_noprof+0x560/0x710 [ 145.098734][ T5783] __page_pool_alloc_netmems_slow+0x127/0x740 [ 145.101388][ T5783] page_pool_alloc_frag_netmem+0x421/0x9b0 [ 145.103911][ T5783] skb_pp_cow_data+0xb69/0x13e0 [ 145.106056][ T5783] do_xdp_generic+0x699/0x11a0 [ 145.108217][ T5783] tun_get_user+0x2527/0x3ea0 [ 145.110395][ T5783] tun_chr_write_iter+0x113/0x200 [ 145.112609][ T5783] vfs_write+0x5c9/0xb30 [ 145.114422][ T5783] ksys_write+0x145/0x250 [ 145.116319][ T5783] do_syscall_64+0xfa/0x3b0 [ 145.118452][ T5783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.121055][ T5783] page last free pid 4730 tgid 4730 stack trace: [ 145.123817][ T5783] __free_frozen_pages+0xbc4/0xd30 [ 145.125988][ T5783] __put_partials+0x156/0x1a0 [ 145.128100][ T5783] put_cpu_partial+0x17c/0x250 [ 145.130121][ T5783] __slab_free+0x2d5/0x3c0 [ 145.132081][ T5783] qlist_free_all+0x97/0x140 [ 145.134057][ T5783] kasan_quarantine_reduce+0x148/0x160 [ 145.136379][ T5783] __kasan_slab_alloc+0x22/0x80 [ 145.138573][ T5783] __kvmalloc_node_noprof+0x2b0/0x5f0 [ 145.140903][ T5783] seq_read_iter+0x1fd/0xe10 [ 145.142933][ T5783] vfs_read+0x55a/0xa30 [ 145.144770][ T5783] ksys_read+0x145/0x250 [ 145.146603][ T5783] do_syscall_64+0xfa/0x3b0 [ 145.148811][ T5783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.151498][ T5783] ------------[ cut here ]------------ [ 145.153845][ T5783] kernel BUG at ./include/linux/mm.h:1036! [ 145.156376][ T5783] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 145.159119][ T5783] CPU: 0 UID: 0 PID: 5783 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full) [ 145.163589][ T5783] Tainted: [B]=BAD_PAGE [ 145.165314][ T5783] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 145.169842][ T5783] RIP: 0010:page_frag_free+0x182/0x240 [ 145.172178][ T5783] Code: 38 c1 0f 8c 64 ff ff ff 4c 89 f7 e8 38 0f 0c 00 e9 57 ff ff ff e8 7e db a5 ff 48 89 df 48 c7 c6 e0 e9 56 8b e8 1f 3c 0f ff 90 <0f> 0b f3 0f 1e fa 48 89 de 48 81 e6 ff 0f 00 00 31 ff e8 37 e0 a5 [ 145.180234][ T5783] RSP: 0018:ffffc9000ccaf480 EFLAGS: 00010246 [ 145.182817][ T5783] RAX: c8d4a771c78d1c00 RBX: ffffea0001583940 RCX: c8d4a771c78d1c00 [ 145.186088][ T5783] RDX: 0000000000000000 RSI: ffffffff8b9ed540 RDI: ffff88803a3ea480 [ 145.189564][ T5783] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 145.193038][ T5783] R10: dffffc0000000000 R11: fffffbfff1b7a118 R12: dffffc0000000000 [ 145.196588][ T5783] R13: 000000000000bcdd R14: ffffea0001583974 R15: dead000000000040 [ 145.199899][ T5783] FS: 00007f7fb2d236c0(0000) GS:ffff88808d973000(0000) knlGS:0000000000000000 [ 145.203757][ T5783] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 145.206445][ T5783] CR2: 0000200000010000 CR3: 000000004de43000 CR4: 0000000000352ef0 [ 145.210100][ T5783] Call Trace: [ 145.211632][ T5783] [ 145.213249][ T5783] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 145.215721][ T5783] bpf_xdp_adjust_tail+0x1d6/0x220 [ 145.218016][ T5783] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 145.220540][ T5783] bpf_prog_run_generic_xdp+0x64b/0x14c0 [ 145.223093][ T5783] do_xdp_generic+0x9f7/0x11a0 [ 145.225284][ T5783] ? __pfx_do_xdp_generic+0x10/0x10 [ 145.227579][ T5783] ? __pfx_eth_type_trans+0x10/0x10 [ 145.229868][ T5783] ? tun_vnet_hdr_tnl_to_skb+0xed/0x830 [ 145.232334][ T5783] ? tun_get_user+0x23f3/0x3ea0 [ 145.234421][ T5783] ? tun_get_user+0x23f3/0x3ea0 [ 145.236532][ T5783] tun_get_user+0x2527/0x3ea0 [ 145.238575][ T5783] ? rcu_is_watching+0x15/0xb0 [ 145.240698][ T5783] ? lock_release+0x4b/0x3e0 [ 145.242822][ T5783] ? aa_file_perm+0x44d/0x1550 [ 145.244944][ T5783] ? __pfx_tun_get_user+0x10/0x10 [ 145.247145][ T5783] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 145.249711][ T5783] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 145.252493][ T5783] ? ref_tracker_alloc+0x318/0x460 [ 145.254835][ T5783] ? rcu_is_watching+0x15/0xb0 [ 145.256920][ T5783] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 145.259256][ T5783] ? lock_release+0x4b/0x3e0 [ 145.261192][ T5783] ? tun_get+0x1c/0x2f0 [ 145.263140][ T5783] ? tun_get+0x1c/0x2f0 [ 145.264973][ T5783] ? rcu_is_watching+0x15/0xb0 [ 145.267103][ T5783] ? tun_get+0x1c/0x2f0 [ 145.268846][ T5783] ? lock_release+0x4b/0x3e0 [ 145.270846][ T5783] ? common_file_perm+0x1b5/0x230 [ 145.273077][ T5783] ? tun_get+0x1c/0x2f0 [ 145.274909][ T5783] tun_chr_write_iter+0x113/0x200 [ 145.277037][ T5783] vfs_write+0x5c9/0xb30 [ 145.278914][ T5783] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 145.281293][ T5783] ? __pfx_vfs_write+0x10/0x10 [ 145.283373][ T5783] ? __fget_files+0x2a/0x420 [ 145.285355][ T5783] ksys_write+0x145/0x250 [ 145.287267][ T5783] ? __pfx_ksys_write+0x10/0x10 [ 145.289413][ T5783] ? rcu_is_watching+0x15/0xb0 [ 145.291523][ T5783] ? rcu_is_watching+0x15/0xb0 [ 145.293551][ T5783] do_syscall_64+0xfa/0x3b0 [ 145.295498][ T5783] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.298119][ T5783] ? clear_bhb_loop+0x60/0xb0 [ 145.300163][ T5783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.302754][ T5783] RIP: 0033:0x7f7fb1f8bc1f [ 145.304738][ T5783] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 145.313026][ T5783] RSP: 002b:00007f7fb2d23000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 145.316601][ T5783] RAX: ffffffffffffffda RBX: 00007f7fb21a5fa0 RCX: 00007f7fb1f8bc1f [ 145.320150][ T5783] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8 [ 145.323620][ T5783] RBP: 00007f7fb200e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 145.327109][ T5783] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 145.330422][ T5783] R13: 0000000000000000 R14: 00007f7fb21a5fa0 R15: 00007fff79ceca88 [ 145.333841][ T5783] [ 145.335211][ T5783] Modules linked in: [ 145.336963][ T5783] ---[ end trace 0000000000000000 ]--- [ 145.339339][ T5783] RIP: 0010:page_frag_free+0x182/0x240 [ 145.341644][ T5783] Code: 38 c1 0f 8c 64 ff ff ff 4c 89 f7 e8 38 0f 0c 00 e9 57 ff ff ff e8 7e db a5 ff 48 89 df 48 c7 c6 e0 e9 56 8b e8 1f 3c 0f ff 90 <0f> 0b f3 0f 1e fa 48 89 de 48 81 e6 ff 0f 00 00 31 ff e8 37 e0 a5 [ 145.349860][ T5783] RSP: 0018:ffffc9000ccaf480 EFLAGS: 00010246 [ 145.352525][ T5783] RAX: c8d4a771c78d1c00 RBX: ffffea0001583940 RCX: c8d4a771c78d1c00 [ 145.355906][ T5783] RDX: 0000000000000000 RSI: ffffffff8b9ed540 RDI: ffff88803a3ea480 [ 145.359353][ T5783] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 145.362770][ T5783] R10: dffffc0000000000 R11: fffffbfff1b7a118 R12: dffffc0000000000 [ 145.366249][ T5783] R13: 000000000000bcdd R14: ffffea0001583974 R15: dead000000000040 [ 145.369680][ T5783] FS: 00007f7fb2d236c0(0000) GS:ffff88808d973000(0000) knlGS:0000000000000000 [ 145.373814][ T5783] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 145.376885][ T5783] CR2: 0000200000010000 CR3: 000000004de43000 CR4: 0000000000352ef0 [ 145.380274][ T5783] Kernel panic - not syncing: Fatal exception in interrupt [ 145.383669][ T5783] Kernel Offset: disabled [ 145.385486][ T5783] Rebooting in 86400 seconds..