program: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x6, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x60}, 0x94) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r5, r6, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f00000001c0)={@remote, @empty, @val={@val={0x88a8, 0x6, 0x0, 0x2}, {0x8100, 0x6, 0x1}}, {@llc_tr={0x11, {@snap={0x55, 0x1, "d7", 'U-l', 0x15}}}}}, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [ 103.275211][ T5282] Bluetooth: hci0: command tx timeout [ 103.368418][ T5329] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 103.387986][ T5329] BUG: Bad page state in process syz.0.0 pfn:31296 [ 103.388002][ T5329] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888031296a80 pfn:0x31296 [ 103.388016][ T5329] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 103.388035][ T5329] raw: 04fff00000000000 dead000000000040 ffff8880002e8000 0000000000000000 [ 103.388047][ T5329] raw: ffff888031296a80 3fffffffffffffff 00000000ffffffff 0000000000000000 [ 103.388055][ T5329] page dumped because: page_pool leak [ 103.388061][ T5329] page_owner tracks the page as allocated [ 103.388066][ T5329] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5329, tgid 5328 (syz.0.0), ts 103387838135 [ 103.388083][ T5329] post_alloc_hook+0x1f9/0x250 [ 103.388162][ T5329] get_page_from_freelist+0x2209/0x2280 [ 103.388180][ T5329] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 103.388197][ T5329] __alloc_pages_noprof+0x10/0x100 [ 103.388213][ T5329] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 103.388229][ T5329] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 103.388280][ T5329] page_pool_alloc_frag_netmem+0x561/0x9b0 [ 103.388297][ T5329] skb_pp_cow_data+0xc2c/0x18e0 [ 103.388307][ T5329] do_xdp_generic+0x78f/0x12f0 [ 103.388319][ T5329] tun_get_user+0x248b/0x4450 [ 103.388370][ T5329] tun_chr_write_iter+0x113/0x200 [ 103.388386][ T5329] vfs_write+0x612/0xba0 [ 103.388411][ T5329] ksys_write+0x150/0x270 [ 103.388425][ T5329] do_syscall_64+0x166/0x520 [ 103.388441][ T5329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.388453][ T5329] page last free pid 5281 tgid 5281 ts 99022128886 stack trace: [ 103.388462][ T5329] __free_frozen_pages+0xc93/0xd90 [ 103.388478][ T5329] __slab_free+0x274/0x2c0 [ 103.388495][ T5329] qlist_free_all+0x99/0x100 [ 103.388521][ T5329] kasan_quarantine_reduce+0x148/0x160 [ 103.388538][ T5329] __kasan_slab_alloc+0x22/0x80 [ 103.388549][ T5329] kmem_cache_alloc_node_noprof+0x34f/0x600 [ 103.388564][ T5329] __alloc_skb+0x1db/0x7a0 [ 103.388580][ T5329] alloc_uevent_skb+0x7d/0x230 [ 103.388591][ T5329] kobject_uevent_net_broadcast+0x184/0x560 [ 103.388601][ T5329] kobject_uevent_env+0x566/0x9e0 [ 103.388610][ T5329] net_rx_queue_update_kobjects+0x3fe/0x780 [ 103.388624][ T5329] netdev_register_kobject+0x23e/0x350 [ 103.388638][ T5329] register_netdevice+0x142e/0x1eb0 [ 103.388650][ T5329] veth_newlink+0x4d7/0xdd0 [ 103.388661][ T5329] rtnl_newlink_create+0x305/0x7b0 [ 103.388673][ T5329] rtnl_newlink+0x166d/0x1c30 [ 103.388683][ T5329] Modules linked in: [ 103.388696][ T5329] CPU: 0 UID: 0 PID: 5329 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 103.388710][ T5329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.388718][ T5329] Call Trace: [ 103.388724][ T5329] [ 103.388730][ T5329] dump_stack_lvl+0xe8/0x150 [ 103.388762][ T5329] bad_page+0x17f/0x1c0 [ 103.388778][ T5329] __free_frozen_pages+0xd37/0xd90 [ 103.388802][ T5329] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 103.388831][ T5329] bpf_xdp_adjust_tail+0x1ce/0x210 [ 103.388849][ T5329] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 103.388862][ T5329] bpf_prog_run_generic_xdp+0x612/0x1560 [ 103.388893][ T5329] do_xdp_generic+0xae1/0x12f0 [ 103.388908][ T5329] ? __lock_acquire+0x747/0x2de0 [ 103.388935][ T5329] ? do_xdp_generic+0x6d9/0x12f0 [ 103.388954][ T5329] ? __pfx_do_xdp_generic+0x10/0x10 [ 103.388985][ T5329] ? tun_get_user+0x1d3f/0x4450 [ 103.389001][ T5329] tun_get_user+0x248b/0x4450 [ 103.389024][ T5329] ? aa_file_perm+0x18b/0x15f0 [ 103.389044][ T5329] ? aa_file_perm+0x4ed/0x15f0 [ 103.389060][ T5329] ? __pfx_tun_get_user+0x10/0x10 [ 103.389081][ T5329] ? __lock_acquire+0x747/0x2de0 [ 103.389118][ T5329] ? ref_tracker_alloc+0x341/0x4b0 [ 103.389137][ T5329] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 103.389155][ T5329] ? lock_acquire+0x115/0x350 [ 103.389173][ T5329] ? tun_get+0x1c/0x2f0 [ 103.389191][ T5329] ? tun_get+0x1c/0x2f0 [ 103.389206][ T5329] ? tun_get+0x1c/0x2f0 [ 103.389225][ T5329] tun_chr_write_iter+0x113/0x200 [ 103.389242][ T5329] vfs_write+0x612/0xba0 [ 103.389264][ T5329] ? __pfx_vfs_write+0x10/0x10 [ 103.389282][ T5329] ? __fget_files+0x3a2/0x420 [ 103.389313][ T5329] ? __fget_files+0x2a/0x420 [ 103.389332][ T5329] ? fdget+0x1ac/0x250 [ 103.389357][ T5329] ksys_write+0x150/0x270 [ 103.389376][ T5329] ? __pfx_ksys_write+0x10/0x10 [ 103.389408][ T5329] do_syscall_64+0x166/0x520 [ 103.389423][ T5329] ? trace_irq_disable+0x3b/0x140 [ 103.389443][ T5329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.389457][ T5329] ? clear_bhb_loop+0x70/0xc0 [ 103.389472][ T5329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.389486][ T5329] RIP: 0033:0x7f9363d5fd8e [ 103.389498][ T5329] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 103.389507][ T5329] RSP: 002b:00007f9364d52f78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 103.389520][ T5329] RAX: ffffffffffffffda RBX: 00007f9364d536c0 RCX: 00007f9363d5fd8e [ 103.389530][ T5329] RDX: 000000000000fdef RSI: 00002000000001c0 RDI: 00000000000000c8 [ 103.389538][ T5329] RBP: 00007f9363e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 103.389546][ T5329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.389553][ T5329] R13: 00007f9364026038 R14: 00007f9364025fa0 R15: 00007fff9ff969b8 [ 103.389573][ T5329] [ 103.389578][ T5329] Disabling lock debugging due to kernel taint [ 103.389585][ T5329] BUG: Bad page state in process syz.0.0 pfn:4098b [ 103.389592][ T5329] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804098baf0 pfn:0x4098b [ 103.389603][ T5329] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 103.389619][ T5329] raw: 04fff00000000000 dead000000000040 ffff8880002e8000 0000000000000000 [ 103.389630][ T5329] raw: ffff88804098baf0 0000000000000001 00000000ffffffff 0000000000000000 [ 103.389636][ T5329] page dumped because: page_pool leak [ 103.389641][ T5329] page_owner tracks the page as allocated [ 103.389646][ T5329] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5329, tgid 5328 (syz.0.0), ts 103387824961 [ 103.389663][ T5329] post_alloc_hook+0x1f9/0x250 [ 103.389677][ T5329] get_page_from_freelist+0x2209/0x2280 [ 103.389694][ T5329] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 103.389710][ T5329] __alloc_pages_noprof+0x10/0x100 [ 103.389726][ T5329] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 103.389741][ T5329] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 103.389755][ T5329] skb_pp_cow_data+0xc08/0x18e0 [ 103.389765][ T5329] do_xdp_generic+0x78f/0x12f0 [ 103.389777][ T5329] tun_get_user+0x248b/0x4450 [ 103.389789][ T5329] tun_chr_write_iter+0x113/0x200 [ 103.389802][ T5329] vfs_write+0x612/0xba0 [ 103.389815][ T5329] ksys_write+0x150/0x270 [ 103.389827][ T5329] do_syscall_64+0x166/0x520 [ 103.389839][ T5329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.389849][ T5329] page last free pid 5281 tgid 5281 ts 99022260060 stack trace: [ 103.389857][ T5329] __free_frozen_pages+0xc93/0xd90 [ 103.389869][ T5329] __slab_free+0x274/0x2c0 [ 103.389883][ T5329] qlist_free_all+0x99/0x100 [ 103.389898][ T5329] kasan_quarantine_reduce+0x148/0x160 [ 103.389913][ T5329] __kasan_slab_alloc+0x22/0x80 [ 103.389923][ T5329] kmem_cache_alloc_node_noprof+0x34f/0x600 [ 103.389937][ T5329] __alloc_skb+0x1db/0x7a0 [ 103.389951][ T5329] alloc_uevent_skb+0x7d/0x230 [ 103.389960][ T5329] kobject_uevent_net_broadcast+0x184/0x560 [ 103.389971][ T5329] kobject_uevent_env+0x566/0x9e0 [ 103.389979][ T5329] net_rx_queue_update_kobjects+0x3fe/0x780 [ 103.389993][ T5329] netdev_register_kobject+0x23e/0x350 [ 103.390007][ T5329] register_netdevice+0x142e/0x1eb0 [ 103.390018][ T5329] veth_newlink+0x4d7/0xdd0 [ 103.390029][ T5329] rtnl_newlink_create+0x305/0x7b0 [ 103.390040][ T5329] rtnl_newlink+0x166d/0x1c30 [ 103.390049][ T5329] Modules linked in: [ 103.390059][ T5329] CPU: 0 UID: 0 PID: 5329 Comm: syz.0.0 Tainted: G B syzkaller #0 PREEMPT(full) [ 103.390074][ T5329] Tainted: [B]=BAD_PAGE [ 103.390078][ T5329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.390084][ T5329] Call Trace: [ 103.390089][ T5329] [ 103.390093][ T5329] dump_stack_lvl+0xe8/0x150 [ 103.390110][ T5329] bad_page+0x17f/0x1c0 [ 103.390124][ T5329] __free_frozen_pages+0xd37/0xd90 [ 103.390140][ T5329] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 103.390160][ T5329] bpf_xdp_adjust_tail+0x1ce/0x210 [ 103.390173][ T5329] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 103.390183][ T5329] bpf_prog_run_generic_xdp+0x612/0x1560 [ 103.390202][ T5329] do_xdp_generic+0xae1/0x12f0 [ 103.390215][ T5329] ? __lock_acquire+0x747/0x2de0 [ 103.390230][ T5329] ? do_xdp_generic+0x6d9/0x12f0 [ 103.390244][ T5329] ? __pfx_do_xdp_generic+0x10/0x10 [ 103.390264][ T5329] ? tun_get_user+0x1d3f/0x4450 [ 103.390278][ T5329] tun_get_user+0x248b/0x4450 [ 103.390295][ T5329] ? aa_file_perm+0x18b/0x15f0 [ 103.390312][ T5329] ? aa_file_perm+0x4ed/0x15f0 [ 103.390327][ T5329] ? __pfx_tun_get_user+0x10/0x10 [ 103.390342][ T5329] ? __lock_acquire+0x747/0x2de0 [ 103.390370][ T5329] ? ref_tracker_alloc+0x341/0x4b0 [ 103.390388][ T5329] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 103.390404][ T5329] ? lock_acquire+0x115/0x350 [ 103.390419][ T5329] ? tun_get+0x1c/0x2f0 [ 103.390435][ T5329] ? tun_get+0x1c/0x2f0 [ 103.390448][ T5329] ? tun_get+0x1c/0x2f0 [ 103.390462][ T5329] tun_chr_write_iter+0x113/0x200 [ 103.390477][ T5329] vfs_write+0x612/0xba0 [ 103.390493][ T5329] ? __pfx_vfs_write+0x10/0x10 [ 103.390507][ T5329] ? __fget_files+0x3a2/0x420 [ 103.390520][ T5329] ? __fget_files+0x2a/0x420 [ 103.390535][ T5329] ? fdget+0x1ac/0x250 [ 103.390549][ T5329] ksys_write+0x150/0x270 [ 103.390564][ T5329] ? __pfx_ksys_write+0x10/0x10 [ 103.390580][ T5329] do_syscall_64+0x166/0x520 [ 103.390592][ T5329] ? trace_irq_disable+0x3b/0x140 [ 103.390603][ T5329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.390614][ T5329] ? clear_bhb_loop+0x70/0xc0 [ 103.390626][ T5329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.390637][ T5329] RIP: 0033:0x7f9363d5fd8e [ 103.390646][ T5329] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 103.390655][ T5329] RSP: 002b:00007f9364d52f78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 103.390666][ T5329] RAX: ffffffffffffffda RBX: 00007f9364d536c0 RCX: 00007f9363d5fd8e [ 103.390674][ T5329] RDX: 000000000000fdef RSI: 00002000000001c0 RDI: 00000000000000c8 [ 103.390682][ T5329] RBP: 00007f9363e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 103.390690][ T5329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.390698][ T5329] R13: 00007f9364026038 R14: 00007f9364025fa0 R15: 00007fff9ff969b8 [ 103.390711][ T5329] [ 103.390717][ T5329] BUG: Bad page state in process syz.0.0 pfn:453a7 [ 103.390724][ T5329] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880453a7fc0 pfn:0x453a7 [ 103.390734][ T5329] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 103.390748][ T5329] raw: 04fff00000000000 dead000000000040 ffff8880002e8000 0000000000000000 [ 103.390758][ T5329] raw: ffff8880453a7fc0 0000000000000001 00000000ffffffff 0000000000000000 [ 103.390765][ T5329] page dumped because: page_pool leak [ 103.390770][ T5329] page_owner tracks the page as allocated [ 103.390851][ T5329] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5329, tgid 5328 (syz.0.0), ts 103387814178 [ 103.390869][ T5329] post_alloc_hook+0x1f9/0x250 [ 103.390883][ T5329] get_page_from_freelist+0x2209/0x2280 [ 103.390899][ T5329] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 103.390917][ T5329] __alloc_pages_noprof+0x10/0x100 [ 103.390933][ T5329] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 103.390948][ T5329] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 103.390962][ T5329] skb_pp_cow_data+0xc08/0x18e0 [ 103.390971][ T5329] do_xdp_generic+0x78f/0x12f0 [ 103.390983][ T5329] tun_get_user+0x248b/0x4450 [ 103.390995][ T5329] tun_chr_write_iter+0x113/0x200 [ 103.391007][ T5329] vfs_write+0x612/0xba0 [ 103.391019][ T5329] ksys_write+0x150/0x270 [ 103.391033][ T5329] do_syscall_64+0x166/0x520 [ 103.391045][ T5329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.391055][ T5329] page last free pid 5281 tgid 5281 ts 99023435739 stack trace: [ 103.391063][ T5329] __free_frozen_pages+0xc93/0xd90 [ 103.391076][ T5329] __slab_free+0x274/0x2c0 [ 103.391087][ T5329] qlist_free_all+0x99/0x100 [ 103.391097][ T5329] kasan_quarantine_reduce+0x148/0x160 [ 103.391107][ T5329] __kasan_slab_alloc+0x22/0x80 [ 103.391114][ T5329] kmem_cache_alloc_node_noprof+0x34f/0x600 [ 103.391124][ T5329] __alloc_skb+0x1db/0x7a0 [ 103.391134][ T5329] alloc_uevent_skb+0x7d/0x230 [ 103.391140][ T5329] kobject_uevent_net_broadcast+0x184/0x560 [ 103.391147][ T5329] kobject_uevent_env+0x566/0x9e0 [ 103.391153][ T5329] net_rx_queue_update_kobjects+0x3fe/0x780 [ 103.391162][ T5329] netdev_register_kobject+0x23e/0x350 [ 103.391172][ T5329] register_netdevice+0x142e/0x1eb0 [ 103.391180][ T5329] veth_newlink+0x4d7/0xdd0 [ 103.391187][ T5329] rtnl_newlink_create+0x305/0x7b0 [ 103.391195][ T5329] rtnl_newlink+0x166d/0x1c30 [ 103.391201][ T5329] Modules linked in: [ 103.391207][ T5329] CPU: 0 UID: 0 PID: 5329 Comm: syz.0.0 Tainted: G B syzkaller #0 PREEMPT(full) [ 103.391216][ T5329] Tainted: [B]=BAD_PAGE [ 103.391219][ T5329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.391223][ T5329] Call Trace: [ 103.391226][ T5329] [ 103.391229][ T5329] dump_stack_lvl+0xe8/0x150 [ 103.391240][ T5329] bad_page+0x17f/0x1c0 [ 103.391247][ T5329] __free_frozen_pages+0xd37/0xd90 [ 103.391258][ T5329] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 103.391271][ T5329] bpf_xdp_adjust_tail+0x1ce/0x210 [ 103.391280][ T5329] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 103.391286][ T5329] bpf_prog_run_generic_xdp+0x612/0x1560 [ 103.391300][ T5329] do_xdp_generic+0xae1/0x12f0 [ 103.391309][ T5329] ? __lock_acquire+0x747/0x2de0 [ 103.391319][ T5329] ? do_xdp_generic+0x6d9/0x12f0 [ 103.391328][ T5329] ? __pfx_do_xdp_generic+0x10/0x10 [ 103.391341][ T5329] ? tun_get_user+0x1d3f/0x4450 [ 103.391355][ T5329] tun_get_user+0x248b/0x4450 [ 103.391366][ T5329] ? aa_file_perm+0x18b/0x15f0 [ 103.391376][ T5329] ? aa_file_perm+0x4ed/0x15f0 [ 103.391386][ T5329] ? __pfx_tun_get_user+0x10/0x10 [ 103.391396][ T5329] ? __lock_acquire+0x747/0x2de0 [ 103.391409][ T5329] ? ref_tracker_alloc+0x341/0x4b0 [ 103.391421][ T5329] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 103.391433][ T5329] ? lock_acquire+0x115/0x350 [ 103.391443][ T5329] ? tun_get+0x1c/0x2f0 [ 103.391453][ T5329] ? tun_get+0x1c/0x2f0 [ 103.391463][ T5329] ? tun_get+0x1c/0x2f0 [ 103.391473][ T5329] tun_chr_write_iter+0x113/0x200 [ 103.391483][ T5329] vfs_write+0x612/0xba0 [ 103.391494][ T5329] ? __pfx_vfs_write+0x10/0x10 [ 103.391504][ T5329] ? __fget_files+0x3a2/0x420 [ 103.391513][ T5329] ? __fget_files+0x2a/0x420 [ 103.391522][ T5329] ? fdget+0x1ac/0x250 [ 103.391531][ T5329] ksys_write+0x150/0x270 [ 103.391560][ T5329] ? __pfx_ksys_write+0x10/0x10 [ 103.391572][ T5329] do_syscall_64+0x166/0x520 [ 103.391581][ T5329] ? trace_irq_disable+0x3b/0x140 [ 103.391588][ T5329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.391595][ T5329] ? clear_bhb_loop+0x70/0xc0 [ 103.391604][ T5329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.391612][ T5329] RIP: 0033:0x7f9363d5fd8e [ 103.391619][ T5329] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 103.391625][ T5329] RSP: 002b:00007f9364d52f78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 103.391633][ T5329] RAX: ffffffffffffffda RBX: 00007f9364d536c0 RCX: 00007f9363d5fd8e [ 103.391639][ T5329] RDX: 000000000000fdef RSI: 00002000000001c0 RDI: 00000000000000c8 [ 103.391645][ T5329] RBP: 00007f9363e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 103.391677][ T5329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.391687][ T5329] R13: 00007f9364026038 R14: 00007f9364025fa0 R15: 00007fff9ff969b8 [ 103.391700][ T5329] [ 103.391747][ T5329] BUG: Bad page state in process syz.0.0 pfn:452a8 [ 103.391755][ T5329] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880452a8770 pfn:0x452a8 [ 103.391763][ T5329] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 103.391773][ T5329] raw: 04fff00000000000 dead000000000040 ffff8880002e8000 0000000000000000 [ 103.391782][ T5329] raw: ffff8880452a8770 0000000000000001 00000000ffffffff 0000000000000000 [ 103.391788][ T5329] page dumped because: page_pool leak [ 103.391793][ T5329] page_owner tracks the page as allocated [ 103.391797][ T5329] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5329, tgid 5328 (syz.0.0), ts 103387802373 [ 103.391812][ T5329] post_alloc_hook+0x1f9/0x250 [ 103.391826][ T5329] get_page_from_freelist+0x2209/0x2280 [ 103.391842][ T5329] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 103.391858][ T5329] __alloc_pages_noprof+0x10/0x100 [ 103.391873][ T5329] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 103.391889][ T5329] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 103.391904][ T5329] skb_pp_cow_data+0xc08/0x18e0 [ 103.391913][ T5329] do_xdp_generic+0x78f/0x12f0 [ 103.391925][ T5329] tun_get_user+0x248b/0x4450 [ 103.391934][ T5329] tun_chr_write_iter+0x113/0x200 [ 103.391942][ T5329] vfs_write+0x612/0xba0 [ 103.391950][ T5329] ksys_write+0x150/0x270 [ 103.391958][ T5329] do_syscall_64+0x166/0x520 [ 103.391970][ T5329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.391980][ T5329] page last free pid 5281 tgid 5281 ts 99023474031 stack trace: [ 103.391988][ T5329] __free_frozen_pages+0xc93/0xd90 [ 103.392041][ T5329] __slab_free+0x274/0x2c0 [ 103.392058][ T5329] qlist_free_all+0x99/0x100 [ 103.392071][ T5329] kasan_quarantine_reduce+0x148/0x160 [ 103.392081][ T5329] __kasan_slab_alloc+0x22/0x80 [ 103.392088][ T5329] kmem_cache_alloc_node_noprof+0x34f/0x600 [ 103.392097][ T5329] __alloc_skb+0x1db/0x7a0 [ 103.392107][ T5329] alloc_uevent_skb+0x7d/0x230 [ 103.392113][ T5329] kobject_uevent_net_broadcast+0x184/0x560 [ 103.392122][ T5329] kobject_uevent_env+0x566/0x9e0 [ 103.392130][ T5329] net_rx_queue_update_kobjects+0x3fe/0x780 [ 103.392143][ T5329] netdev_register_kobject+0x23e/0x350 [ 103.392156][ T5329] register_netdevice+0x142e/0x1eb0 [ 103.392168][ T5329] veth_newlink+0x4d7/0xdd0 [ 103.392179][ T5329] rtnl_newlink_create+0x305/0x7b0 [ 103.392190][ T5329] rtnl_newlink+0x166d/0x1c30 [ 103.392199][ T5329] Modules linked in: [ 103.392209][ T5329] CPU: 0 UID: 0 PID: 5329 Comm: syz.0.0 Tainted: G B syzkaller #0 PREEMPT(full) [ 103.392218][ T5329] Tainted: [B]=BAD_PAGE [ 103.392221][ T5329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.392225][ T5329] Call Trace: [ 103.392228][ T5329] [ 103.392231][ T5329] dump_stack_lvl+0xe8/0x150 [ 103.392242][ T5329] bad_page+0x17f/0x1c0 [ 103.392250][ T5329] __free_frozen_pages+0xd37/0xd90 [ 103.392261][ T5329] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 103.392274][ T5329] bpf_xdp_adjust_tail+0x1ce/0x210 [ 103.392282][ T5329] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 103.392292][ T5329] bpf_prog_run_generic_xdp+0x612/0x1560 [ 103.392312][ T5329] do_xdp_generic+0xae1/0x12f0 [ 103.392324][ T5329] ? __lock_acquire+0x747/0x2de0 [ 103.392340][ T5329] ? do_xdp_generic+0x6d9/0x12f0 [ 103.392362][ T5329] ? __pfx_do_xdp_generic+0x10/0x10 [ 103.392383][ T5329] ? tun_get_user+0x1d3f/0x4450 [ 103.392398][ T5329] tun_get_user+0x248b/0x4450 [ 103.392414][ T5329] ? aa_file_perm+0x18b/0x15f0 [ 103.392425][ T5329] ? aa_file_perm+0x4ed/0x15f0 [ 103.392435][ T5329] ? __pfx_tun_get_user+0x10/0x10 [ 103.392445][ T5329] ? __lock_acquire+0x747/0x2de0 [ 103.392457][ T5329] ? ref_tracker_alloc+0x341/0x4b0 [ 103.392468][ T5329] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 103.392483][ T5329] ? lock_acquire+0x115/0x350 [ 103.392498][ T5329] ? tun_get+0x1c/0x2f0 [ 103.392513][ T5329] ? tun_get+0x1c/0x2f0 [ 103.392527][ T5329] ? tun_get+0x1c/0x2f0 [ 103.392542][ T5329] tun_chr_write_iter+0x113/0x200 [ 103.392557][ T5329] vfs_write+0x612/0xba0 [ 103.392568][ T5329] ? __pfx_vfs_write+0x10/0x10 [ 103.392578][ T5329] ? __fget_files+0x3a2/0x420 [ 103.392586][ T5329] ? __fget_files+0x2a/0x420 [ 103.392594][ T5329] ? fdget+0x1ac/0x250 [ 103.392607][ T5329] ksys_write+0x150/0x270 [ 103.392621][ T5329] ? __pfx_ksys_write+0x10/0x10 [ 103.392637][ T5329] do_syscall_64+0x166/0x520 [ 103.392650][ T5329] ? trace_irq_disable+0x3b/0x140 [ 103.392660][ T5329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.392671][ T5329] ? clear_bhb_loop+0x70/0xc0 [ 103.392684][ T5329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.392694][ T5329] RIP: 0033:0x7f9363d5fd8e [ 103.392700][ T5329] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 103.392706][ T5329] RSP: 002b:00007f9364d52f78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 103.392713][ T5329] RAX: ffffffffffffffda RBX: 00007f9364d536c0 RCX: 00007f9363d5fd8e [ 103.392719][ T5329] RDX: 000000000000fdef RSI: 00002000000001c0 RDI: 00000000000000c8 [ 103.392723][ T5329] RBP: 00007f9363e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 103.392728][ T5329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.392732][ T5329] R13: 00007f9364026038 R14: 00007f9364025fa0 R15: 00007fff9ff969b8 [ 103.392739][ T5329] [ 103.392743][ T5329] BUG: Bad page state in process syz.0.0 pfn:45158 [ 103.392748][ T5329] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888045158500 pfn:0x45158 [ 103.392756][ T5329] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 103.392764][ T5329] raw: 04fff00000000000 dead000000000040 ffff8880002e8000 0000000000000000 [ 103.392770][ T5329] raw: ffff888045158500 0000000000000001 00000000ffffffff 0000000000000000 [ 103.392774][ T5329] page dumped because: page_pool leak [ 103.392777][ T5329] page_owner tracks the page as allocated [ 103.392779][ T5329] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5329, tgid 5328 (syz.0.0), ts 103387791146 [ 103.392789][ T5329] post_alloc_hook+0x1f9/0x250 [ 103.392798][ T5329] get_page_from_freelist+0x2209/0x2280 [ 103.392809][ T5329] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 103.392820][ T5329] __alloc_pages_noprof+0x10/0x100 [ 103.392830][ T5329] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 103.392843][ T5329] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 103.392857][ T5329] skb_pp_cow_data+0xc08/0x18e0 [ 103.392866][ T5329] do_xdp_generic+0x78f/0x12f0 [ 103.392878][ T5329] tun_get_user+0x248b/0x4450 [ 103.392891][ T5329] tun_chr_write_iter+0x113/0x200 [ 103.392904][ T5329] vfs_write+0x612/0xba0 [ 103.392916][ T5329] ksys_write+0x150/0x270 [ 103.392927][ T5329] do_syscall_64+0x166/0x520 [ 103.392939][ T5329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.392949][ T5329] page last free pid 5281 tgid 5281 ts 99023508034 stack trace: [ 103.392957][ T5329] __free_frozen_pages+0xc93/0xd90 [ 103.392971][ T5329] __slab_free+0x274/0x2c0 [ 103.392985][ T5329] qlist_free_all+0x99/0x100 [ 103.392997][ T5329] kasan_quarantine_reduce+0x148/0x160 [ 103.393006][ T5329] __kasan_slab_alloc+0x22/0x80 [ 103.393012][ T5329] kmem_cache_alloc_node_noprof+0x34f/0x600 [ 103.393021][ T5329] __alloc_skb+0x1db/0x7a0 [ 103.393030][ T5329] alloc_uevent_skb+0x7d/0x230 [ 103.393039][ T5329] kobject_uevent_net_broadcast+0x184/0x560 [ 103.393048][ T5329] kobject_uevent_env+0x566/0x9e0 [ 103.393057][ T5329] net_rx_queue_update_kobjects+0x3fe/0x780 [ 103.393071][ T5329] netdev_register_kobject+0x23e/0x350 [ 103.393084][ T5329] register_netdevice+0x142e/0x1eb0 [ 103.393096][ T5329] veth_newlink+0x4d7/0xdd0 [ 103.393107][ T5329] rtnl_newlink_create+0x305/0x7b0 [ 103.393118][ T5329] rtnl_newlink+0x166d/0x1c30 [ 103.393125][ T5329] Modules linked in: [ 103.393131][ T5329] CPU: 0 UID: 0 PID: 5329 Comm: syz.0.0 Tainted: G B syzkaller #0 PREEMPT(full) [ 103.393140][ T5329] Tainted: [B]=BAD_PAGE [ 103.393143][ T5329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.393146][ T5329] Call Trace: [ 103.393149][ T5329] [ 103.393152][ T5329] dump_stack_lvl+0xe8/0x150 [ 103.393162][ T5329] bad_page+0x17f/0x1c0 [ 103.393170][ T5329] __free_frozen_pages+0xd37/0xd90 [ 103.393186][ T5329] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 103.393204][ T5329] bpf_xdp_adjust_tail+0x1ce/0x210 [ 103.393217][ T5329] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 103.393227][ T5329] bpf_prog_run_generic_xdp+0x612/0x1560 [ 103.393247][ T5329] do_xdp_generic+0xae1/0x12f0 [ 103.393261][ T5329] ? __lock_acquire+0x747/0x2de0 [ 103.393273][ T5329] ? do_xdp_generic+0x6d9/0x12f0 [ 103.393282][ T5329] ? __pfx_do_xdp_generic+0x10/0x10 [ 103.393295][ T5329] ? tun_get_user+0x1d3f/0x4450 [ 103.393303][ T5329] tun_get_user+0x248b/0x4450 [ 103.393314][ T5329] ? aa_file_perm+0x18b/0x15f0 [ 103.393330][ T5329] ? aa_file_perm+0x4ed/0x15f0 [ 103.393344][ T5329] ? __pfx_tun_get_user+0x10/0x10 [ 103.393366][ T5329] ? __lock_acquire+0x747/0x2de0 [ 103.393385][ T5329] ? ref_tracker_alloc+0x341/0x4b0 [ 103.393403][ T5329] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 103.393415][ T5329] ? lock_acquire+0x115/0x350 [ 103.393425][ T5329] ? tun_get+0x1c/0x2f0 [ 103.393435][ T5329] ? tun_get+0x1c/0x2f0 [ 103.393445][ T5329] ? tun_get+0x1c/0x2f0 [ 103.393460][ T5329] tun_chr_write_iter+0x113/0x200 [ 103.393474][ T5329] vfs_write+0x612/0xba0 [ 103.393490][ T5329] ? __pfx_vfs_write+0x10/0x10 [ 103.393505][ T5329] ? __fget_files+0x3a2/0x420 [ 103.393518][ T5329] ? __fget_files+0x2a/0x420 [ 103.393533][ T5329] ? fdget+0x1ac/0x250 [ 103.393543][ T5329] ksys_write+0x150/0x270 [ 103.393553][ T5329] ? __pfx_ksys_write+0x10/0x10 [ 103.393563][ T5329] do_syscall_64+0x166/0x520 [ 103.393571][ T5329] ? trace_irq_disable+0x3b/0x140 [ 103.393577][ T5329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.393584][ T5329] ? clear_bhb_loop+0x70/0xc0 [ 103.393591][ T5329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.393598][ T5329] RIP: 0033:0x7f9363d5fd8e [ 103.393607][ T5329] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 103.393616][ T5329] RSP: 002b:00007f9364d52f78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 103.393627][ T5329] RAX: ffffffffffffffda RBX: 00007f9364d536c0 RCX: 00007f9363d5fd8e [ 103.393636][ T5329] RDX: 000000000000fdef RSI: 00002000000001c0 RDI: 00000000000000c8 [ 103.393644][ T5329] RBP: 00007f9363e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 103.393652][ T5329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.393670][ T5329] R13: 00007f9364026038 R14: 00007f9364025fa0 R15: 00007fff9ff969b8 [ 103.393684][ T5329] [ 103.393689][ T5329] BUG: Bad page state in process syz.0.0 pfn:4575a [ 103.393694][ T5329] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804575aa00 pfn:0x4575a [ 103.393702][ T5329] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 103.393711][ T5329] raw: 04fff00000000000 dead000000000040 ffff8880002e8000 0000000000000000 [ 103.393721][ T5329] raw: ffff88804575aa00 0000000000000001 00000000ffffffff 0000000000000000 [ 103.393727][ T5329] page dumped because: page_pool leak [ 103.393732][ T5329] page_owner tracks the page as allocated [ 103.393736][ T5329] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5329, tgid 5328 (syz.0.0), ts 103387779259 [ 103.393751][ T5329] post_alloc_hook+0x1f9/0x250 [ 103.393764][ T5329] get_page_from_freelist+0x2209/0x2280 [ 103.393779][ T5329] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 103.393795][ T5329] __alloc_pages_noprof+0x10/0x100 [ 103.393812][ T5329] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 103.393828][ T5329] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 103.393844][ T5329] skb_pp_cow_data+0xc08/0x18e0 [ 103.393853][ T5329] do_xdp_generic+0x78f/0x12f0 [ 103.393861][ T5329] tun_get_user+0x248b/0x4450 [ 103.393869][ T5329] tun_chr_write_iter+0x113/0x200 [ 103.393877][ T5329] vfs_write+0x612/0xba0 [ 103.393885][ T5329] ksys_write+0x150/0x270 [ 103.393893][ T5329] do_syscall_64+0x166/0x520 [ 103.393900][ T5329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.393907][ T5329] page last free pid 5281 tgid 5281 ts 99023560810 stack trace: [ 103.393911][ T5329] __free_frozen_pages+0xc93/0xd90 [ 103.393920][ T5329] __slab_free+0x274/0x2c0 [ 103.393929][ T5329] qlist_free_all+0x99/0x100 [ 103.393937][ T5329] kasan_quarantine_reduce+0x148/0x160 [ 103.393947][ T5329] __kasan_slab_alloc+0x22/0x80 [ 103.393953][ T5329] kmem_cache_alloc_node_noprof+0x34f/0x600 [ 103.393961][ T5329] __alloc_skb+0x1db/0x7a0 [ 103.393975][ T5329] alloc_uevent_skb+0x7d/0x230 [ 103.393981][ T5329] kobject_uevent_net_broadcast+0x184/0x560 [ 103.393988][ T5329] kobject_uevent_env+0x566/0x9e0 [ 103.393997][ T5329] net_rx_queue_update_kobjects+0x3fe/0x780 [ 103.394009][ T5329] netdev_register_kobject+0x23e/0x350 [ 103.394022][ T5329] register_netdevice+0x142e/0x1eb0 [ 103.394034][ T5329] veth_newlink+0x4d7/0xdd0 [ 103.394044][ T5329] rtnl_newlink_create+0x305/0x7b0 [ 103.394055][ T5329] rtnl_newlink+0x166d/0x1c30 [ 103.394063][ T5329] Modules linked in: [ 103.394072][ T5329] CPU: 0 UID: 0 PID: 5329 Comm: syz.0.0 Tainted: G B syzkaller #0 PREEMPT(full) [ 103.394086][ T5329] Tainted: [B]=BAD_PAGE [ 103.394091][ T5329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.394098][ T5329] Call Trace: [ 103.394103][ T5329] [ 103.394107][ T5329] dump_stack_lvl+0xe8/0x150 [ 103.394124][ T5329] bad_page+0x17f/0x1c0 [ 103.394137][ T5329] __free_frozen_pages+0xd37/0xd90 [ 103.394150][ T5329] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 103.394162][ T5329] bpf_xdp_adjust_tail+0x1ce/0x210 [ 103.394169][ T5329] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 103.394176][ T5329] bpf_prog_run_generic_xdp+0x612/0x1560 [ 103.394188][ T5329] do_xdp_generic+0xae1/0x12f0 [ 103.394196][ T5329] ? __lock_acquire+0x747/0x2de0 [ 103.394205][ T5329] ? do_xdp_generic+0x6d9/0x12f0 [ 103.394214][ T5329] ? __pfx_do_xdp_generic+0x10/0x10 [ 103.394227][ T5329] ? tun_get_user+0x1d3f/0x4450 [ 103.394236][ T5329] tun_get_user+0x248b/0x4450 [ 103.394251][ T5329] ? aa_file_perm+0x18b/0x15f0 [ 103.394261][ T5329] ? aa_file_perm+0x4ed/0x15f0 [ 103.394270][ T5329] ? __pfx_tun_get_user+0x10/0x10 [ 103.394279][ T5329] ? __lock_acquire+0x747/0x2de0 [ 103.394291][ T5329] ? ref_tracker_alloc+0x341/0x4b0 [ 103.394301][ T5329] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 103.394310][ T5329] ? lock_acquire+0x115/0x350 [ 103.394320][ T5329] ? tun_get+0x1c/0x2f0 [ 103.394330][ T5329] ? tun_get+0x1c/0x2f0 [ 103.394339][ T5329] ? tun_get+0x1c/0x2f0 [ 103.394355][ T5329] tun_chr_write_iter+0x113/0x200 [ 103.394365][ T5329] vfs_write+0x612/0xba0 [ 103.394374][ T5329] ? __pfx_vfs_write+0x10/0x10 [ 103.394384][ T5329] ? __fget_files+0x3a2/0x420 [ 103.394392][ T5329] ? __fget_files+0x2a/0x420 [ 103.394402][ T5329] ? fdget+0x1ac/0x250 [ 103.394412][ T5329] ksys_write+0x150/0x270 [ 103.394422][ T5329] ? __pfx_ksys_write+0x10/0x10 [ 103.394433][ T5329] do_syscall_64+0x166/0x520 [ 103.394441][ T5329] ? trace_irq_disable+0x3b/0x140 [ 103.394449][ T5329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.394456][ T5329] ? clear_bhb_loop+0x70/0xc0 [ 103.394465][ T5329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.394475][ T5329] RIP: 0033:0x7f9363d5fd8e [ 103.394484][ T5329] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 103.394493][ T5329] RSP: 002b:00007f9364d52f78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 103.394505][ T5329] RAX: ffffffffffffffda RBX: 00007f9364d536c0 RCX: 00007f9363d5fd8e [ 103.394513][ T5329] RDX: 000000000000fdef RSI: 00002000000001c0 RDI: 00000000000000c8 [ 103.394521][ T5329] RBP: 00007f9363e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 103.394529][ T5329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.394537][ T5329] R13: 00007f9364026038 R14: 00007f9364025fa0 R15: 00007fff9ff969b8 [ 103.394549][ T5329] [ 103.394556][ T5329] BUG: Bad page state in process syz.0.0 pfn:34874 [ 103.394564][ T5329] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888034874280 pfn:0x34874 [ 103.394571][ T5329] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 103.394580][ T5329] raw: 04fff00000000000 dead000000000040 ffff8880002e8000 0000000000000000 [ 103.394587][ T5329] raw: ffff888034874280 0000000000000001 00000000ffffffff 0000000000000000 [ 103.394592][ T5329] page dumped because: page_pool leak [ 103.394595][ T5329] page_owner tracks the page as allocated [ 103.394597][ T5329] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5329, tgid 5328 (syz.0.0), ts 103387766949 [ 103.394607][ T5329] post_alloc_hook+0x1f9/0x250 [ 103.394616][ T5329] get_page_from_freelist+0x2209/0x2280 [ 103.394627][ T5329] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 103.394638][ T5329] __alloc_pages_noprof+0x10/0x100 [ 103.394648][ T5329] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 103.394658][ T5329] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 103.394729][ T5329] skb_pp_cow_data+0xc08/0x18e0 [ 103.394741][ T5329] do_xdp_generic+0x78f/0x12f0 [ 103.394754][ T5329] tun_get_user+0x248b/0x4450 [ 103.394767][ T5329] tun_chr_write_iter+0x113/0x200 [ 103.394780][ T5329] vfs_write+0x612/0xba0 [ 103.394793][ T5329] ksys_write+0x150/0x270 [ 103.394806][ T5329] do_syscall_64+0x166/0x520 [ 103.394818][ T5329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.394828][ T5329] page last free pid 5281 tgid 5281 ts 99023575524 stack trace: [ 103.394836][ T5329] __free_frozen_pages+0xc93/0xd90 [ 103.394849][ T5329] __slab_free+0x274/0x2c0 [ 103.394862][ T5329] qlist_free_all+0x99/0x100 [ 103.394875][ T5329] kasan_quarantine_reduce+0x148/0x160 [ 103.394890][ T5329] __kasan_slab_alloc+0x22/0x80 [ 103.394899][ T5329] kmem_cache_alloc_node_noprof+0x34f/0x600 [ 103.394913][ T5329] __alloc_skb+0x1db/0x7a0 [ 103.394928][ T5329] alloc_uevent_skb+0x7d/0x230 [ 103.394937][ T5329] kobject_uevent_net_broadcast+0x184/0x560 [ 103.394944][ T5329] kobject_uevent_env+0x566/0x9e0 [ 103.394950][ T5329] net_rx_queue_update_kobjects+0x3fe/0x780 [ 103.394958][ T5329] netdev_register_kobject+0x23e/0x350 [ 103.394967][ T5329] register_netdevice+0x142e/0x1eb0 [ 103.394974][ T5329] veth_newlink+0x4d7/0xdd0 [ 103.394981][ T5329] rtnl_newlink_create+0x305/0x7b0 [ 103.394987][ T5329] rtnl_newlink+0x166d/0x1c30 [ 103.394993][ T5329] Modules linked in: [ 103.394999][ T5329] CPU: 0 UID: 0 PID: 5329 Comm: syz.0.0 Tainted: G B syzkaller #0 PREEMPT(full) [ 103.395013][ T5329] Tainted: [B]=BAD_PAGE [ 103.395016][ T5329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.395023][ T5329] Call Trace: [ 103.395028][ T5329] [ 103.395032][ T5329] dump_stack_lvl+0xe8/0x150 [ 103.395049][ T5329] bad_page+0x17f/0x1c0 [ 103.395062][ T5329] __free_frozen_pages+0xd37/0xd90 [ 103.395080][ T5329] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 103.395097][ T5329] bpf_xdp_adjust_tail+0x1ce/0x210 [ 103.395105][ T5329] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 103.395111][ T5329] bpf_prog_run_generic_xdp+0x612/0x1560 [ 103.395123][ T5329] do_xdp_generic+0xae1/0x12f0 [ 103.395131][ T5329] ? __lock_acquire+0x747/0x2de0 [ 103.395168][ T5329] ? do_xdp_generic+0x6d9/0x12f0 [ 103.395185][ T5329] ? __pfx_do_xdp_generic+0x10/0x10 [ 103.395207][ T5329] ? tun_get_user+0x1d3f/0x4450 [ 103.395221][ T5329] tun_get_user+0x248b/0x4450 [ 103.395239][ T5329] ? aa_file_perm+0x18b/0x15f0 [ 103.395255][ T5329] ? aa_file_perm+0x4ed/0x15f0 [ 103.395270][ T5329] ? __pfx_tun_get_user+0x10/0x10 [ 103.395285][ T5329] ? __lock_acquire+0x747/0x2de0 [ 103.395303][ T5329] ? ref_tracker_alloc+0x341/0x4b0 [ 103.395319][ T5329] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 103.395335][ T5329] ? lock_acquire+0x115/0x350 [ 103.395355][ T5329] ? tun_get+0x1c/0x2f0 [ 103.395371][ T5329] ? tun_get+0x1c/0x2f0 [ 103.395384][ T5329] ? tun_get+0x1c/0x2f0 [ 103.395399][ T5329] tun_chr_write_iter+0x113/0x200 [ 103.395413][ T5329] vfs_write+0x612/0xba0 [ 103.395425][ T5329] ? __pfx_vfs_write+0x10/0x10 [ 103.395435][ T5329] ? __fget_files+0x3a2/0x420 [ 103.395443][ T5329] ? __fget_files+0x2a/0x420 [ 103.395454][ T5329] ? fdget+0x1ac/0x250 [ 103.395465][ T5329] ksys_write+0x150/0x270 [ 103.395480][ T5329] ? __pfx_ksys_write+0x10/0x10 [ 103.395497][ T5329] do_syscall_64+0x166/0x520 [ 103.395509][ T5329] ? trace_irq_disable+0x3b/0x140 [ 103.395520][ T5329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.395531][ T5329] ? clear_bhb_loop+0x70/0xc0 [ 103.395543][ T5329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.395554][ T5329] RIP: 0033:0x7f9363d5fd8e [ 103.395560][ T5329] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 103.395566][ T5329] RSP: 002b:00007f9364d52f78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 103.395573][ T5329] RAX: ffffffffffffffda RBX: 00007f9364d536c0 RCX: 00007f9363d5fd8e [ 103.395578][ T5329] RDX: 000000000000fdef RSI: 00002000000001c0 RDI: 00000000000000c8 [ 103.395582][ T5329] RBP: 00007f9363e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 103.395587][ T5329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.395591][ T5329] R13: 00007f9364026038 R14: 00007f9364025fa0 R15: 00007fff9ff969b8 [ 103.395599][ T5329] [ 103.395695][ T5329] BUG: Bad page state in process syz.0.0 pfn:457d5 [ 103.395704][ T5329] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880457d5060 pfn:0x457d5 [ 103.395716][ T5329] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 103.395730][ T5329] raw: 04fff00000000000 dead000000000040 ffff8880002e8000 0000000000000000 [ 103.395740][ T5329] raw: ffff8880457d5060 0000000000000001 00000000ffffffff 0000000000000000 [ 103.395747][ T5329] page dumped because: page_pool leak [ 103.395752][ T5329] page_owner tracks the page as allocated [ 103.395756][ T5329] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5329, tgid 5328 (syz.0.0), ts 103387745063 [ 103.395772][ T5329] post_alloc_hook+0x1f9/0x250 [ 103.395781][ T5329] get_page_from_freelist+0x2209/0x2280 [ 103.395791][ T5329] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 103.395802][ T5329] __alloc_pages_noprof+0x10/0x100 [ 103.395812][ T5329] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 103.395824][ T5329] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 103.395838][ T5329] skb_pp_cow_data+0xc08/0x18e0 [ 103.395847][ T5329] do_xdp_generic+0x78f/0x12f0 [ 103.395858][ T5329] tun_get_user+0x248b/0x4450 [ 103.395877][ T5329] tun_chr_write_iter+0x113/0x200 [ 103.395889][ T5329] vfs_write+0x612/0xba0 [ 103.395902][ T5329] ksys_write+0x150/0x270 [ 103.395914][ T5329] do_syscall_64+0x166/0x520 [ 103.395924][ T5329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.395935][ T5329] page last free pid 5281 tgid 5281 ts 99023596823 stack trace: [ 103.395942][ T5329] __free_frozen_pages+0xc93/0xd90 [ 103.395954][ T5329] __slab_free+0x274/0x2c0 [ 103.395969][ T5329] qlist_free_all+0x99/0x100 [ 103.395985][ T5329] kasan_quarantine_reduce+0x148/0x160 [ 103.396001][ T5329] __kasan_slab_alloc+0x22/0x80 [ 103.396011][ T5329] kmem_cache_alloc_node_noprof+0x34f/0x600 [ 103.396026][ T5329] __alloc_skb+0x1db/0x7a0 [ 103.396038][ T5329] alloc_uevent_skb+0x7d/0x230 [ 103.396044][ T5329] kobject_uevent_net_broadcast+0x184/0x560 [ 103.396050][ T5329] kobject_uevent_env+0x566/0x9e0 [ 103.396055][ T5329] net_rx_queue_update_kobjects+0x3fe/0x780 [ 103.396064][ T5329] netdev_register_kobject+0x23e/0x350 [ 103.396072][ T5329] register_netdevice+0x142e/0x1eb0 [ 103.396080][ T5329] veth_newlink+0x4d7/0xdd0 [ 103.396091][ T5329] rtnl_newlink_create+0x305/0x7b0 [ 103.396101][ T5329] rtnl_newlink+0x166d/0x1c30 [ 103.396109][ T5329] Modules linked in: [ 103.396119][ T5329] CPU: 0 UID: 0 PID: 5329 Comm: syz.0.0 Tainted: G B syzkaller #0 PREEMPT(full) [ 103.396133][ T5329] Tainted: [B]=BAD_PAGE [ 103.396137][ T5329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.396143][ T5329] Call Trace: [ 103.396148][ T5329] [ 103.396152][ T5329] dump_stack_lvl+0xe8/0x150 [ 103.396169][ T5329] bad_page+0x17f/0x1c0 [ 103.396177][ T5329] __free_frozen_pages+0xd37/0xd90 [ 103.396188][ T5329] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 103.396200][ T5329] bpf_xdp_adjust_tail+0x1ce/0x210 [ 103.396210][ T5329] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 103.396219][ T5329] bpf_prog_run_generic_xdp+0x612/0x1560 [ 103.396238][ T5329] do_xdp_generic+0xae1/0x12f0 [ 103.396252][ T5329] ? __lock_acquire+0x747/0x2de0 [ 103.396268][ T5329] ? do_xdp_generic+0x6d9/0x12f0 [ 103.396283][ T5329] ? __pfx_do_xdp_generic+0x10/0x10 [ 103.396301][ T5329] ? tun_get_user+0x1d3f/0x4450 [ 103.396310][ T5329] tun_get_user+0x248b/0x4450 [ 103.396321][ T5329] ? aa_file_perm+0x18b/0x15f0 [ 103.396331][ T5329] ? aa_file_perm+0x4ed/0x15f0 [ 103.396340][ T5329] ? __pfx_tun_get_user+0x10/0x10 [ 103.396383][ T5329] ? __lock_acquire+0x747/0x2de0 [ 103.396405][ T5329] ? ref_tracker_alloc+0x341/0x4b0 [ 103.396422][ T5329] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 103.396439][ T5329] ? lock_acquire+0x115/0x350 [ 103.396452][ T5329] ? tun_get+0x1c/0x2f0 [ 103.396467][ T5329] ? tun_get+0x1c/0x2f0 [ 103.396480][ T5329] ? tun_get+0x1c/0x2f0 [ 103.396494][ T5329] tun_chr_write_iter+0x113/0x200 [ 103.396508][ T5329] vfs_write+0x612/0xba0 [ 103.396522][ T5329] ? __pfx_vfs_write+0x10/0x10 [ 103.396537][ T5329] ? __fget_files+0x3a2/0x420 [ 103.396551][ T5329] ? __fget_files+0x2a/0x420 [ 103.396565][ T5329] ? fdget+0x1ac/0x250 [ 103.396580][ T5329] ksys_write+0x150/0x270 [ 103.396591][ T5329] ? __pfx_ksys_write+0x10/0x10 [ 103.396602][ T5329] do_syscall_64+0x166/0x520 [ 103.396609][ T5329] ? trace_irq_disable+0x3b/0x140 [ 103.396616][ T5329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.396622][ T5329] ? clear_bhb_loop+0x70/0xc0 [ 103.396630][ T5329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.396637][ T5329] RIP: 0033:0x7f9363d5fd8e [ 103.396643][ T5329] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 103.396648][ T5329] RSP: 002b:00007f9364d52f78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 103.396657][ T5329] RAX: ffffffffffffffda RBX: 00007f9364d536c0 RCX: 00007f9363d5fd8e [ 103.396665][ T5329] RDX: 000000000000fdef RSI: 00002000000001c0 RDI: 00000000000000c8 [ 103.396673][ T5329] RBP: 00007f9363e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 103.396679][ T5329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.396686][ T5329] R13: 00007f9364026038 R14: 00007f9364025fa0 R15: 00007fff9ff969b8 [ 103.396698][ T5329] [ 103.396750][ T5329] BUG: Bad page state in process syz.0.0 pfn:453c7 [ 103.396758][ T5329] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880453c7000 pfn:0x453c7 [ 103.396770][ T5329] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 103.396782][ T5329] raw: 04fff00000000000 dead000000000040 ffff8880002e8000 0000000000000000 [ 103.396789][ T5329] raw: ffff8880453c7000 0000000000000001 00000000ffffffff 0000000000000000 [ 103.396793][ T5329] page dumped because: page_pool leak [ 103.396796][ T5329] page_owner tracks the page as allocated [ 103.396799][ T5329] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5329, tgid 5328 (syz.0.0), ts 103387734649 [ 103.396814][ T5329] post_alloc_hook+0x1f9/0x250 [ 103.396828][ T5329] get_page_from_freelist+0x2209/0x2280 [ 103.396845][ T5329] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 103.396861][ T5329] __alloc_pages_noprof+0x10/0x100 [ 103.396877][ T5329] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 103.396893][ T5329] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 103.396902][ T5329] skb_pp_cow_data+0xc08/0x18e0 [ 103.396909][ T5329] do_xdp_generic+0x78f/0x12f0 [ 103.396921][ T5329] tun_get_user+0x248b/0x4450 [ 103.396933][ T5329] tun_chr_write_iter+0x113/0x200 [ 103.396946][ T5329] vfs_write+0x612/0xba0 [ 103.396960][ T5329] ksys_write+0x150/0x270 [ 103.396973][ T5329] do_syscall_64+0x166/0x520 [ 103.396984][ T5329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.396995][ T5329] page last free pid 5281 tgid 5281 ts 99023605625 stack trace: [ 103.397001][ T5329] __free_frozen_pages+0xc93/0xd90 [ 103.397009][ T5329] __slab_free+0x274/0x2c0 [ 103.397020][ T5329] qlist_free_all+0x99/0x100 [ 103.397033][ T5329] kasan_quarantine_reduce+0x148/0x160 [ 103.397047][ T5329] __kasan_slab_alloc+0x22/0x80 [ 103.397057][ T5329] kmem_cache_alloc_node_noprof+0x34f/0x600 [ 103.397071][ T5329] __alloc_skb+0x1db/0x7a0 [ 103.397086][ T5329] alloc_uevent_skb+0x7d/0x230 [ 103.397095][ T5329] kobject_uevent_net_broadcast+0x184/0x560 [ 103.397105][ T5329] kobject_uevent_env+0x566/0x9e0 [ 103.397114][ T5329] net_rx_queue_update_kobjects+0x3fe/0x780 [ 103.397127][ T5329] netdev_register_kobject+0x23e/0x350 [ 103.397139][ T5329] register_netdevice+0x142e/0x1eb0 [ 103.397150][ T5329] veth_newlink+0x4d7/0xdd0 [ 103.397160][ T5329] rtnl_newlink_create+0x305/0x7b0 [ 103.397171][ T5329] rtnl_newlink+0x166d/0x1c30 [ 103.397180][ T5329] Modules linked in: [ 103.397190][ T5329] CPU: 0 UID: 0 PID: 5329 Comm: syz.0.0 Tainted: G B syzkaller #0 PREEMPT(full) [ 103.397204][ T5329] Tainted: [B]=BAD_PAGE [ 103.397206][ T5329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.397210][ T5329] Call Trace: [ 103.397213][ T5329] [ 103.397216][ T5329] dump_stack_lvl+0xe8/0x150 [ 103.397226][ T5329] bad_page+0x17f/0x1c0 [ 103.397236][ T5329] __free_frozen_pages+0xd37/0xd90 [ 103.397252][ T5329] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 103.397271][ T5329] bpf_xdp_adjust_tail+0x1ce/0x210 [ 103.397284][ T5329] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 103.397294][ T5329] bpf_prog_run_generic_xdp+0x612/0x1560 [ 103.397314][ T5329] do_xdp_generic+0xae1/0x12f0 [ 103.397327][ T5329] ? __lock_acquire+0x747/0x2de0 [ 103.397337][ T5329] ? do_xdp_generic+0x6d9/0x12f0 [ 103.397346][ T5329] ? __pfx_do_xdp_generic+0x10/0x10 [ 103.397364][ T5329] ? tun_get_user+0x1d3f/0x4450 [ 103.397373][ T5329] tun_get_user+0x248b/0x4450 [ 103.397386][ T5329] ? aa_file_perm+0x18b/0x15f0 [ 103.397403][ T5329] ? aa_file_perm+0x4ed/0x15f0 [ 103.397417][ T5329] ? __pfx_tun_get_user+0x10/0x10 [ 103.397432][ T5329] ? __lock_acquire+0x747/0x2de0 [ 103.397452][ T5329] ? ref_tracker_alloc+0x341/0x4b0 [ 103.397468][ T5329] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 103.397480][ T5329] ? lock_acquire+0x115/0x350 [ 103.397489][ T5329] ? tun_get+0x1c/0x2f0 [ 103.397498][ T5329] ? tun_get+0x1c/0x2f0 [ 103.397507][ T5329] ? tun_get+0x1c/0x2f0 [ 103.397517][ T5329] tun_chr_write_iter+0x113/0x200 [ 103.397531][ T5329] vfs_write+0x612/0xba0 [ 103.397547][ T5329] ? __pfx_vfs_write+0x10/0x10 [ 103.397563][ T5329] ? __fget_files+0x3a2/0x420 [ 103.397576][ T5329] ? __fget_files+0x2a/0x420 [ 103.397590][ T5329] ? fdget+0x1ac/0x250 [ 103.397604][ T5329] ksys_write+0x150/0x270 [ 103.397614][ T5329] ? __pfx_ksys_write+0x10/0x10 [ 103.397624][ T5329] do_syscall_64+0x166/0x520 [ 103.397635][ T5329] ? trace_irq_disable+0x3b/0x140 [ 103.397645][ T5329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.397655][ T5329] ? clear_bhb_loop+0x70/0xc0 [ 103.397667][ T5329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.397678][ T5329] RIP: 0033:0x7f9363d5fd8e [ 103.397688][ T5329] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 103.397697][ T5329] RSP: 002b:00007f9364d52f78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 103.397709][ T5329] RAX: ffffffffffffffda RBX: 00007f9364d536c0 RCX: 00007f9363d5fd8e [ 103.397718][ T5329] RDX: 000000000000fdef RSI: 00002000000001c0 RDI: 00000000000000c8 [ 103.397723][ T5329] RBP: 00007f9363e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 103.397728][ T5329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.397732][ T5329] R13: 00007f9364026038 R14: 00007f9364025fa0 R15: 00007fff9ff969b8 [ 103.397740][ T5329] [ 103.397744][ T5329] BUG: Bad page state in process syz.0.0 pfn:457f7 [ 103.397749][ T5329] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880457f73c0 pfn:0x457f7 [ 103.397756][ T5329] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 103.397766][ T5329] raw: 04fff00000000000 dead000000000040 ffff8880002e8000 0000000000000000 [ 103.397775][ T5329] raw: ffff8880457f73c0 0000000000000001 00000000ffffffff 0000000000000000 [ 103.397781][ T5329] page dumped because: page_pool leak [ 103.397785][ T5329] page_owner tracks the page as allocated [ 103.397789][ T5329] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5329, tgid 5328 (syz.0.0), ts 103387723298 [ 103.397804][ T5329] post_alloc_hook+0x1f9/0x250 [ 103.397817][ T5329] get_page_from_freelist+0x2209/0x2280 [ 103.397846][ T5329] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 103.397860][ T5329] __alloc_pages_noprof+0x10/0x100 [ 103.397870][ T5329] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 103.397881][ T5329] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 103.397891][ T5329] skb_pp_cow_data+0xc08/0x18e0 [ 103.397897][ T5329] do_xdp_generic+0x78f/0x12f0 [ 103.397905][ T5329] tun_get_user+0x248b/0x4450 [ 103.397914][ T5329] tun_chr_write_iter+0x113/0x200 [ 103.397923][ T5329] vfs_write+0x612/0xba0 [ 103.397931][ T5329] ksys_write+0x150/0x270 [ 103.397940][ T5329] do_syscall_64+0x166/0x520 [ 103.397948][ T5329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.397955][ T5329] page last free pid 5281 tgid 5281 ts 99023628810 stack trace: [ 103.397961][ T5329] __free_frozen_pages+0xc93/0xd90 [ 103.397969][ T5329] __slab_free+0x274/0x2c0 [ 103.397978][ T5329] qlist_free_all+0x99/0x100 [ 103.397987][ T5329] kasan_quarantine_reduce+0x148/0x160 [ 103.397996][ T5329] __kasan_slab_alloc+0x22/0x80 [ 103.398002][ T5329] kmem_cache_alloc_node_noprof+0x34f/0x600 [ 103.398011][ T5329] __alloc_skb+0x1db/0x7a0 [ 103.398020][ T5329] alloc_uevent_skb+0x7d/0x230 [ 103.398025][ T5329] kobject_uevent_net_broadcast+0x184/0x560 [ 103.398032][ T5329] kobject_uevent_env+0x566/0x9e0 [ 103.398037][ T5329] net_rx_queue_update_kobjects+0x3fe/0x780 [ 103.398045][ T5329] netdev_register_kobject+0x23e/0x350 [ 103.398054][ T5329] register_netdevice+0x142e/0x1eb0 [ 103.398061][ T5329] veth_newlink+0x4d7/0xdd0 [ 103.398067][ T5329] rtnl_newlink_create+0x305/0x7b0 [ 103.398074][ T5329] rtnl_newlink+0x166d/0x1c30 [ 103.398079][ T5329] Modules linked in: [ 103.398085][ T5329] CPU: 0 UID: 0 PID: 5329 Comm: syz.0.0 Tainted: G B syzkaller #0 PREEMPT(full) [ 103.398094][ T5329] Tainted: [B]=BAD_PAGE [ 103.398097][ T5329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.398100][ T5329] Call Trace: [ 103.398103][ T5329] [ 103.398105][ T5329] dump_stack_lvl+0xe8/0x150 [ 103.398115][ T5329] bad_page+0x17f/0x1c0 [ 103.398123][ T5329] __free_frozen_pages+0xd37/0xd90 [ 103.398134][ T5329] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 103.398146][ T5329] bpf_xdp_adjust_tail+0x1ce/0x210 [ 103.398154][ T5329] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 103.398160][ T5329] bpf_prog_run_generic_xdp+0x612/0x1560 [ 103.398177][ T5329] do_xdp_generic+0xae1/0x12f0 [ 103.398190][ T5329] ? __lock_acquire+0x747/0x2de0 [ 103.398205][ T5329] ? do_xdp_generic+0x6d9/0x12f0 [ 103.398219][ T5329] ? __pfx_do_xdp_generic+0x10/0x10 [ 103.398238][ T5329] ? tun_get_user+0x1d3f/0x4450 [ 103.398251][ T5329] tun_get_user+0x248b/0x4450 [ 103.398270][ T5329] ? aa_file_perm+0x18b/0x15f0 [ 103.398286][ T5329] ? aa_file_perm+0x4ed/0x15f0 [ 103.398300][ T5329] ? __pfx_tun_get_user+0x10/0x10 [ 103.398314][ T5329] ? __lock_acquire+0x747/0x2de0 [ 103.398329][ T5329] ? ref_tracker_alloc+0x341/0x4b0 [ 103.398344][ T5329] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 103.398367][ T5329] ? lock_acquire+0x115/0x350 [ 103.398383][ T5329] ? tun_get+0x1c/0x2f0 [ 103.398397][ T5329] ? tun_get+0x1c/0x2f0 [ 103.398410][ T5329] ? tun_get+0x1c/0x2f0 [ 103.398425][ T5329] tun_chr_write_iter+0x113/0x200 [ 103.398439][ T5329] vfs_write+0x612/0xba0 [ 103.398454][ T5329] ? __pfx_vfs_write+0x10/0x10 [ 103.398469][ T5329] ? __fget_files+0x3a2/0x420 [ 103.398482][ T5329] ? __fget_files+0x2a/0x420 [ 103.398497][ T5329] ? fdget+0x1ac/0x250 [ 103.398511][ T5329] ksys_write+0x150/0x270 [ 103.398523][ T5329] ? __pfx_ksys_write+0x10/0x10 [ 103.398533][ T5329] do_syscall_64+0x166/0x520 [ 103.398541][ T5329] ? trace_irq_disable+0x3b/0x140 [ 103.398547][ T5329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.398554][ T5329] ? clear_bhb_loop+0x70/0xc0 [ 103.398561][ T5329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.398571][ T5329] RIP: 0033:0x7f9363d5fd8e [ 103.398579][ T5329] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 103.398588][ T5329] RSP: 002b:00007f9364d52f78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 103.398599][ T5329] RAX: ffffffffffffffda RBX: 00007f9364d536c0 RCX: 00007f9363d5fd8e [ 103.398607][ T5329] RDX: 000000000000fdef RSI: 00002000000001c0 RDI: 00000000000000c8 [ 103.398614][ T5329] RBP: 00007f9363e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 103.398622][ T5329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.398629][ T5329] R13: 00007f9364026038 R14: 00007f9364025fa0 R15: 00007fff9ff969b8 [ 103.398643][ T5329] [ 103.398648][ T5329] BUG: Bad page state in process syz.0.0 pfn:45a5a [ 103.398655][ T5329] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888045a5a280 pfn:0x45a5a [ 103.398666][ T5329] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 103.398679][ T5329] raw: 04fff00000000000 dead000000000040 ffff8880002e8000 0000000000000000 [ 103.398689][ T5329] raw: ffff888045a5a280 0000000000000001 00000000ffffffff 0000000000000000 [ 103.398696][ T5329] page dumped because: page_pool leak [ 103.398702][ T5329] page_owner tracks the page as allocated [ 103.398706][ T5329] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5329, tgid 5328 (syz.0.0), ts 103387712458 [ 103.398721][ T5329] post_alloc_hook+0x1f9/0x250 [ 103.398735][ T5329] get_page_from_freelist+0x2209/0x2280 [ 103.398750][ T5329] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 103.398766][ T5329] __alloc_pages_noprof+0x10/0x100 [ 103.398780][ T5329] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 103.398794][ T5329] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 103.398809][ T5329] skb_pp_cow_data+0xc08/0x18e0 [ 103.398818][ T5329] do_xdp_generic+0x78f/0x12f0 [ 103.398845][ T5329] tun_get_user+0x248b/0x4450 [ 103.398859][ T5329] tun_chr_write_iter+0x113/0x200 [ 103.398872][ T5329] vfs_write+0x612/0xba0 [ 103.398885][ T5329] ksys_write+0x150/0x270 [ 103.398900][ T5329] do_syscall_64+0x166/0x520 [ 103.398913][ T5329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.398924][ T5329] page last free pid 5281 tgid 5281 ts 99023694310 stack trace: [ 103.398931][ T5329] __free_frozen_pages+0xc93/0xd90 [ 103.398945][ T5329] __slab_free+0x274/0x2c0 [ 103.398960][ T5329] qlist_free_all+0x99/0x100 [ 103.398974][ T5329] kasan_quarantine_reduce+0x148/0x160 [ 103.398989][ T5329] __kasan_slab_alloc+0x22/0x80 [ 103.398997][ T5329] kmem_cache_alloc_node_noprof+0x34f/0x600 [ 103.399010][ T5329] __alloc_skb+0x1db/0x7a0 [ 103.399025][ T5329] alloc_uevent_skb+0x7d/0x230 [ 103.399035][ T5329] kobject_uevent_net_broadcast+0x184/0x560 [ 103.399045][ T5329] kobject_uevent_env+0x566/0x9e0 [ 103.399054][ T5329] net_rx_queue_update_kobjects+0x3fe/0x780 [ 103.399067][ T5329] netdev_register_kobject+0x23e/0x350 [ 103.399077][ T5329] register_netdevice+0x142e/0x1eb0 [ 103.399084][ T5329] veth_newlink+0x4d7/0xdd0 [ 103.399090][ T5329] rtnl_newlink_create+0x305/0x7b0 [ 103.399097][ T5329] rtnl_newlink+0x166d/0x1c30 [ 103.399103][ T5329] Modules linked in: [ 103.399109][ T5329] CPU: 0 UID: 0 PID: 5329 Comm: syz.0.0 Tainted: G B syzkaller #0 PREEMPT(full) [ 103.399118][ T5329] Tainted: [B]=BAD_PAGE [ 103.399120][ T5329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.399124][ T5329] Call Trace: [ 103.399126][ T5329] [ 103.399129][ T5329] dump_stack_lvl+0xe8/0x150 [ 103.399139][ T5329] bad_page+0x17f/0x1c0 [ 103.399147][ T5329] __free_frozen_pages+0xd37/0xd90 [ 103.399158][ T5329] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 103.399170][ T5329] bpf_xdp_adjust_tail+0x1ce/0x210 [ 103.399178][ T5329] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 103.399185][ T5329] bpf_prog_run_generic_xdp+0x612/0x1560 [ 103.399198][ T5329] do_xdp_generic+0xae1/0x12f0 [ 103.399206][ T5329] ? __lock_acquire+0x747/0x2de0 [ 103.399221][ T5329] ? do_xdp_generic+0x6d9/0x12f0 [ 103.399235][ T5329] ? __pfx_do_xdp_generic+0x10/0x10 [ 103.399254][ T5329] ? tun_get_user+0x1d3f/0x4450 [ 103.399268][ T5329] tun_get_user+0x248b/0x4450 [ 103.399285][ T5329] ? aa_file_perm+0x18b/0x15f0 [ 103.399301][ T5329] ? aa_file_perm+0x4ed/0x15f0 [ 103.399317][ T5329] ? __pfx_tun_get_user+0x10/0x10 [ 103.399332][ T5329] ? __lock_acquire+0x747/0x2de0 [ 103.399360][ T5329] ? ref_tracker_alloc+0x341/0x4b0 [ 103.399372][ T5329] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 103.399382][ T5329] ? lock_acquire+0x115/0x350 [ 103.399393][ T5329] ? tun_get+0x1c/0x2f0 [ 103.399406][ T5329] ? tun_get+0x1c/0x2f0 [ 103.399419][ T5329] ? tun_get+0x1c/0x2f0 [ 103.399434][ T5329] tun_chr_write_iter+0x113/0x200 [ 103.399449][ T5329] vfs_write+0x612/0xba0 [ 103.399465][ T5329] ? __pfx_vfs_write+0x10/0x10 [ 103.399480][ T5329] ? __fget_files+0x3a2/0x420 [ 103.399493][ T5329] ? __fget_files+0x2a/0x420 [ 103.399506][ T5329] ? fdget+0x1ac/0x250 [ 103.399521][ T5329] ksys_write+0x150/0x270 [ 103.399536][ T5329] ? __pfx_ksys_write+0x10/0x10 [ 103.399551][ T5329] do_syscall_64+0x166/0x520 [ 103.399564][ T5329] ? trace_irq_disable+0x3b/0x140 [ 103.399574][ T5329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.399585][ T5329] ? clear_bhb_loop+0x70/0xc0 [ 103.399598][ T5329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.399609][ T5329] RIP: 0033:0x7f9363d5fd8e [ 103.399618][ T5329] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 103.399624][ T5329] RSP: 002b:00007f9364d52f78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 103.399632][ T5329] RAX: ffffffffffffffda RBX: 00007f9364d536c0 RCX: 00007f9363d5fd8e [ 103.399638][ T5329] RDX: 000000000000fdef RSI: 00002000000001c0 RDI: 00000000000000c8 [ 103.399643][ T5329] RBP: 00007f9363e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 103.399648][ T5329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.399652][ T5329] R13: 00007f9364026038 R14: 00007f9364025fa0 R15: 00007fff9ff969b8 [ 103.399686][ T5329] [ 103.399690][ T5329] BUG: Bad page state in process syz.0.0 pfn:44a47 [ 103.399695][ T5329] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888044a47000 pfn:0x44a47 [ 103.399703][ T5329] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 103.399716][ T5329] raw: 04fff00000000000 dead000000000040 ffff8880002e8000 0000000000000000 [ 103.399725][ T5329] raw: ffff888044a47000 0000000000000001 00000000ffffffff 0000000000000000 [ 103.399731][ T5329] page dumped because: page_pool leak [ 103.399736][ T5329] page_owner tracks the page as allocated [ 103.399739][ T5329] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5329, tgid 5328 (syz.0.0), ts 103387701295 [ 103.399755][ T5329] post_alloc_hook+0x1f9/0x250 [ 103.399769][ T5329] get_page_from_freelist+0x2209/0x2280 [ 103.399784][ T5329] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 103.399799][ T5329] __alloc_pages_noprof+0x10/0x100 [ 103.399809][ T5329] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 103.399824][ T5329] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 103.399838][ T5329] skb_pp_cow_data+0xc08/0x18e0 [ 103.399847][ T5329] do_xdp_generic+0x78f/0x12f0 [ 103.399859][ T5329] tun_get_user+0x248b/0x4450 [ 103.399872][ T5329] tun_chr_write_iter+0x113/0x200 [ 103.399884][ T5329] vfs_write+0x612/0xba0 [ 103.399896][ T5329] ksys_write+0x150/0x270 [ 103.399909][ T5329] do_syscall_64+0x166/0x520 [ 103.399920][ T5329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.399930][ T5329] page last free pid 79 tgid 79 ts 99035566626 stack trace: [ 103.399937][ T5329] __free_frozen_pages+0xc93/0xd90 [ 103.399950][ T5329] rcu_core+0x92e/0x1230 [ 103.399972][ T5329] handle_softirqs+0x226/0x860 [ 103.399994][ T5329] __irq_exit_rcu+0xcb/0x220 [ 103.400005][ T5329] irq_exit_rcu+0x9/0x30 [ 103.400016][ T5329] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 103.400028][ T5329] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 103.400039][ T5329] Modules linked in: [ 103.400049][ T5329] CPU: 0 UID: 0 PID: 5329 Comm: syz.0.0 Tainted: G B syzkaller #0 PREEMPT(full) [ 103.400063][ T5329] Tainted: [B]=BAD_PAGE [ 103.400067][ T5329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.400074][ T5329] Call Trace: [ 103.400077][ T5329] [ 103.400080][ T5329] dump_stack_lvl+0xe8/0x150 [ 103.400090][ T5329] bad_page+0x17f/0x1c0 [ 103.400097][ T5329] __free_frozen_pages+0xd37/0xd90 [ 103.400114][ T5329] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 103.400131][ T5329] bpf_xdp_adjust_tail+0x1ce/0x210 [ 103.400144][ T5329] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 103.400154][ T5329] bpf_prog_run_generic_xdp+0x612/0x1560 [ 103.400173][ T5329] do_xdp_generic+0xae1/0x12f0 [ 103.400186][ T5329] ? __lock_acquire+0x747/0x2de0 [ 103.400201][ T5329] ? do_xdp_generic+0x6d9/0x12f0 [ 103.400216][ T5329] ? __pfx_do_xdp_generic+0x10/0x10 [ 103.400236][ T5329] ? tun_get_user+0x1d3f/0x4450 [ 103.400250][ T5329] tun_get_user+0x248b/0x4450 [ 103.400268][ T5329] ? aa_file_perm+0x18b/0x15f0 [ 103.400284][ T5329] ? aa_file_perm+0x4ed/0x15f0 [ 103.400299][ T5329] ? __pfx_tun_get_user+0x10/0x10 [ 103.400313][ T5329] ? __lock_acquire+0x747/0x2de0 [ 103.400331][ T5329] ? ref_tracker_alloc+0x341/0x4b0 [ 103.400353][ T5329] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 103.400369][ T5329] ? lock_acquire+0x115/0x350 [ 103.400385][ T5329] ? tun_get+0x1c/0x2f0 [ 103.400397][ T5329] ? tun_get+0x1c/0x2f0 [ 103.400405][ T5329] ? tun_get+0x1c/0x2f0 [ 103.400414][ T5329] tun_chr_write_iter+0x113/0x200 [ 103.400423][ T5329] vfs_write+0x612/0xba0 [ 103.400433][ T5329] ? __pfx_vfs_write+0x10/0x10 [ 103.400443][ T5329] ? __fget_files+0x3a2/0x420 [ 103.400456][ T5329] ? __fget_files+0x2a/0x420 [ 103.400470][ T5329] ? fdget+0x1ac/0x250 [ 103.400484][ T5329] ksys_write+0x150/0x270 [ 103.400499][ T5329] ? __pfx_ksys_write+0x10/0x10 [ 103.400516][ T5329] do_syscall_64+0x166/0x520