[ 38.289590][ T40] audit: type=1400 audit(1764365003.825:61): avc: denied { siginh } for pid=5834 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:32999' (ED25519) to the list of known hosts. [ 44.881968][ T40] audit: type=1400 audit(1764365010.435:62): avc: denied { execute } for pid=5922 comm="sh" name="syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 44.890761][ T40] audit: type=1400 audit(1764365010.435:63): avc: denied { execute_no_trans } for pid=5922 comm="sh" path="/syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2025/11/28 21:23:31 parsed 1 programs [ 46.222483][ T40] audit: type=1400 audit(1764365011.775:64): avc: denied { write } for pid=5922 comm="syz-execprog" path="pipe:[6531]" dev="pipefs" ino=6531 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 46.231866][ T40] audit: type=1400 audit(1764365011.785:65): avc: denied { node_bind } for pid=5922 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 48.170734][ T40] audit: type=1400 audit(1764365013.725:66): avc: denied { mounton } for pid=5936 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 48.178607][ T40] audit: type=1400 audit(1764365013.735:67): avc: denied { mount } for pid=5936 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 48.187930][ T5936] cgroup: Unknown subsys name 'net' [ 48.190808][ T40] audit: type=1400 audit(1764365013.745:68): avc: denied { unmount } for pid=5936 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 48.380550][ T5936] cgroup: Unknown subsys name 'cpuset' [ 48.386070][ T5936] cgroup: Unknown subsys name 'rlimit' [ 48.600144][ T40] audit: type=1400 audit(1764365014.155:69): avc: denied { setattr } for pid=5936 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.609039][ T40] audit: type=1400 audit(1764365014.155:70): avc: denied { create } for pid=5936 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.616913][ T40] audit: type=1400 audit(1764365014.155:71): avc: denied { write } for pid=5936 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.671273][ T5940] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 49.359262][ T5936] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 50.812684][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 50.812693][ T40] audit: type=1400 audit(1764365016.365:80): avc: denied { execmem } for pid=5946 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 50.823325][ T40] audit: type=1400 audit(1764365016.375:81): avc: denied { read } for pid=5947 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 50.830139][ T40] audit: type=1400 audit(1764365016.385:82): avc: denied { open } for pid=5947 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 50.837606][ T40] audit: type=1400 audit(1764365016.385:83): avc: denied { mounton } for pid=5947 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 50.886844][ T40] audit: type=1400 audit(1764365016.435:84): avc: denied { mount } for pid=5947 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 50.895591][ T40] audit: type=1400 audit(1764365016.435:85): avc: denied { mounton } for pid=5947 comm="syz-executor" path="/syzkaller.nM0ZmN/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 50.906017][ T40] audit: type=1400 audit(1764365016.435:86): avc: denied { mount } for pid=5947 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 50.915349][ T40] audit: type=1400 audit(1764365016.435:87): avc: denied { mounton } for pid=5947 comm="syz-executor" path="/syzkaller.nM0ZmN/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 50.925691][ T40] audit: type=1400 audit(1764365016.445:88): avc: denied { mounton } for pid=5947 comm="syz-executor" path="/syzkaller.nM0ZmN/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6588 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 50.936773][ T40] audit: type=1400 audit(1764365016.445:89): avc: denied { unmount } for pid=5947 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 50.939882][ T5947] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 51.332726][ T5957] chnl_net:caif_netlink_parms(): no params data found [ 51.414147][ T5957] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.417010][ T5957] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.419382][ T5957] bridge_slave_0: entered allmulticast mode [ 51.421976][ T5957] bridge_slave_0: entered promiscuous mode [ 51.425973][ T5957] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.428327][ T5957] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.430669][ T5957] bridge_slave_1: entered allmulticast mode [ 51.433202][ T5957] bridge_slave_1: entered promiscuous mode [ 51.450465][ T5957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.454688][ T5957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.469363][ T5957] team0: Port device team_slave_0 added [ 51.472467][ T5957] team0: Port device team_slave_1 added [ 51.485577][ T5957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.487808][ T5957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.495326][ T5957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.499973][ T5957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.502081][ T5957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.509936][ T5957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.536688][ T5957] hsr_slave_0: entered promiscuous mode [ 51.539049][ T5957] hsr_slave_1: entered promiscuous mode [ 51.638039][ T5957] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 51.645475][ T5957] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 51.650772][ T5957] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 51.655690][ T5957] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 51.676194][ T5957] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.678866][ T5957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.682184][ T5957] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.684734][ T5957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.723604][ T5957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.733036][ T91] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.736026][ T91] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.744298][ T5957] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.750502][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.753119][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.759534][ T91] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.761772][ T91] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.893236][ T5957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.918620][ T5957] veth0_vlan: entered promiscuous mode [ 51.923603][ T5957] veth1_vlan: entered promiscuous mode [ 51.939563][ T5957] veth0_macvtap: entered promiscuous mode [ 51.943923][ T5957] veth1_macvtap: entered promiscuous mode [ 51.953983][ T5957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.962065][ T5957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.971896][ T1054] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.974740][ T1054] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.979246][ T1054] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.981954][ T1054] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.082607][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.176963][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.264651][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.284615][ T1054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.290870][ T1054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.312173][ T91] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.314987][ T91] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.334475][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.639776][ T6032] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.642704][ T6032] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.645376][ T6032] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.649400][ T6032] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.652166][ T6032] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2025/11/28 21:23:39 executed programs: 0 [ 54.054981][ T6032] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.057942][ T6032] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.060654][ T6032] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.063801][ T6032] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.066641][ T6032] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.176457][ T6042] chnl_net:caif_netlink_parms(): no params data found [ 54.235069][ T6042] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.237399][ T6042] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.239933][ T6042] bridge_slave_0: entered allmulticast mode [ 54.242517][ T6042] bridge_slave_0: entered promiscuous mode [ 54.245776][ T6042] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.248465][ T6042] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.250736][ T6042] bridge_slave_1: entered allmulticast mode [ 54.253319][ T6042] bridge_slave_1: entered promiscuous mode [ 54.267956][ T6042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.272225][ T6042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.286687][ T6042] team0: Port device team_slave_0 added [ 54.289944][ T6042] team0: Port device team_slave_1 added [ 54.303187][ T6042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.305414][ T6042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.313239][ T6042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.317668][ T6042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.319721][ T6042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.327649][ T6042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.355531][ T6042] hsr_slave_0: entered promiscuous mode [ 54.357994][ T6042] hsr_slave_1: entered promiscuous mode [ 54.360023][ T6042] debugfs: 'hsr0' already exists in 'hsr' [ 54.361778][ T6042] Cannot create hsr debugfs directory [ 54.959302][ T13] bridge_slave_1: left allmulticast mode [ 54.961855][ T13] bridge_slave_1: left promiscuous mode [ 54.964825][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.972531][ T13] bridge_slave_0: left allmulticast mode [ 54.974897][ T13] bridge_slave_0: left promiscuous mode [ 54.978610][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.175222][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 55.179925][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 55.184684][ T13] bond0 (unregistering): Released all slaves [ 55.316534][ T13] hsr_slave_0: left promiscuous mode [ 55.318690][ T13] hsr_slave_1: left promiscuous mode [ 55.320590][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.322821][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.325640][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.328204][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.336554][ T13] veth1_macvtap: left promiscuous mode [ 55.338584][ T13] veth0_macvtap: left promiscuous mode [ 55.341195][ T13] veth1_vlan: left promiscuous mode [ 55.343481][ T13] veth0_vlan: left promiscuous mode [ 55.614345][ T13] team0 (unregistering): Port device team_slave_1 removed [ 55.630968][ T13] team0 (unregistering): Port device team_slave_0 removed [ 56.121929][ T64] Bluetooth: hci0: command tx timeout [ 56.221837][ T6042] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.230293][ T6042] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.239951][ T6042] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.245506][ T6042] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.307598][ T6042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.317856][ T6042] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.324580][ T91] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.326970][ T91] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.335455][ T1054] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.337903][ T1054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.755772][ T6042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.792895][ T6042] veth0_vlan: entered promiscuous mode [ 56.800813][ T6042] veth1_vlan: entered promiscuous mode [ 56.824375][ T6042] veth0_macvtap: entered promiscuous mode [ 56.833860][ T6042] veth1_macvtap: entered promiscuous mode [ 56.847971][ T6042] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.857519][ T6042] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.863686][ T91] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.867442][ T91] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.871163][ T91] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.874203][ T91] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.952759][ T91] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.956087][ T91] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.976557][ T91] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.979947][ T91] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.009593][ T40] kauditd_printk_skb: 27 callbacks suppressed [ 57.009603][ T40] audit: type=1400 audit(1764365022.565:117): avc: denied { prog_load } for pid=6088 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 57.018511][ T40] audit: type=1400 audit(1764365022.565:118): avc: denied { bpf } for pid=6088 comm="syz.0.17" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 57.025672][ T40] audit: type=1400 audit(1764365022.565:119): avc: denied { perfmon } for pid=6088 comm="syz.0.17" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 57.033476][ T40] audit: type=1400 audit(1764365022.565:120): avc: denied { prog_run } for pid=6088 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 57.042627][ T6088] BUG: Bad page state in process syz.0.17 pfn:43885 [ 57.045168][ T6088] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x7ff80a781 pfn:0x43885 [ 57.047936][ T40] audit: type=1400 audit(1764365022.605:121): avc: denied { read } for pid=5324 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 57.049639][ T6088] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 57.056668][ T40] audit: type=1400 audit(1764365022.605:122): avc: denied { search } for pid=5324 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.059024][ T6088] raw: 00fff00000000000 dead000000000040 ffff888021ea5000 0000000000000000 [ 57.059037][ T6088] raw: 00000007ff80a781 3fffffffffffffff 00000000ffffffff 0000000000000000 [ 57.059043][ T6088] page dumped because: page_pool leak [ 57.059049][ T6088] page_owner tracks the page as allocated [ 57.059058][ T6088] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6088, tgid 6088 (syz.0.17), ts 57042558177, free_ts 56757319716 [ 57.066065][ T40] audit: type=1400 audit(1764365022.605:123): avc: denied { search } for pid=5324 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.068974][ T6088] post_alloc_hook+0x1af/0x220 [ 57.068996][ T6088] get_page_from_freelist+0x10a3/0x3a30 [ 57.069010][ T6088] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 57.071798][ T40] audit: type=1400 audit(1764365022.605:124): avc: denied { add_name } for pid=5324 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.073736][ T6088] alloc_pages_bulk_noprof+0x77a/0x1410 [ 57.075542][ T40] audit: type=1400 audit(1764365022.605:125): avc: denied { create } for pid=5324 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 57.081733][ T6088] __page_pool_alloc_netmems_slow+0x1c7/0xca0 [ 57.088528][ T40] audit: type=1400 audit(1764365022.605:126): avc: denied { append open } for pid=5324 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 57.090032][ T6088] page_pool_alloc_netmems+0xc4/0x190 [ 57.127158][ T6088] page_pool_alloc_frag_netmem+0x219/0x9c0 [ 57.129487][ T6088] skb_pp_cow_data+0x584/0xff0 [ 57.131277][ T6088] skb_cow_data_for_xdp+0x88/0xb0 [ 57.133358][ T6088] do_xdp_generic+0x530/0x1320 [ 57.135329][ T6088] tun_get_user+0x1d41/0x3cc0 [ 57.137388][ T6088] tun_chr_write_iter+0xdc/0x210 [ 57.139474][ T6088] vfs_write+0x7d3/0x11d0 [ 57.141314][ T6088] ksys_write+0x12a/0x250 [ 57.142918][ T6088] do_syscall_64+0xcd/0xfa0 [ 57.144579][ T6088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.146854][ T6088] page last free pid 0 tgid 0 stack trace: [ 57.149001][ T6088] __free_frozen_pages+0x7df/0x1160 [ 57.150861][ T6088] tlb_remove_table_rcu+0x121/0x320 [ 57.152516][ T6088] rcu_core+0x79c/0x1530 [ 57.153887][ T6088] handle_softirqs+0x219/0x8e0 [ 57.155407][ T6088] __irq_exit_rcu+0x109/0x170 [ 57.156967][ T6088] irq_exit_rcu+0x9/0x30 [ 57.158536][ T6088] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 57.160669][ T6088] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 57.162569][ T6088] Modules linked in: [ 57.163785][ T6088] CPU: 3 UID: 0 PID: 6088 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 57.163798][ T6088] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 57.163804][ T6088] Call Trace: [ 57.163809][ T6088] [ 57.163814][ T6088] dump_stack_lvl+0x16c/0x1f0 [ 57.163826][ T6088] bad_page+0xcf/0x220 [ 57.163836][ T6088] ? __pfx_bad_page+0x10/0x10 [ 57.163847][ T6088] ? page_bad_reason+0x9d/0x1f0 [ 57.163857][ T6088] __free_frozen_pages+0x845/0x1160 [ 57.163871][ T6088] ? mark_held_locks+0x49/0x80 [ 57.163881][ T6088] ? kasan_quarantine_put+0x10a/0x240 [ 57.163893][ T6088] page_frag_free+0x27f/0x2e0 [ 57.163903][ T6088] __xdp_return+0x3ab/0xab0 [ 57.163917][ T6088] bpf_xdp_adjust_tail+0x887/0xcb0 [ 57.163932][ T6088] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 57.163941][ T6088] bpf_prog_run_generic_xdp+0x61f/0x1570 [ 57.163960][ T6088] do_xdp_generic+0x8e6/0x1320 [ 57.163973][ T6088] ? __pfx_do_xdp_generic+0x10/0x10 [ 57.163996][ T6088] tun_get_user+0x1d41/0x3cc0 [ 57.164017][ T6088] ? __pfx_tun_get_user+0x10/0x10 [ 57.164032][ T6088] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 57.164050][ T6088] ? find_held_lock+0x2b/0x80 [ 57.164063][ T6088] ? tun_get+0x191/0x370 [ 57.164079][ T6088] tun_chr_write_iter+0xdc/0x210 [ 57.164094][ T6088] vfs_write+0x7d3/0x11d0 [ 57.164105][ T6088] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 57.164121][ T6088] ? __pfx_vfs_write+0x10/0x10 [ 57.164129][ T6088] ? do_futex+0x122/0x350 [ 57.164144][ T6088] ? __x64_sys_futex+0x1e0/0x4c0 [ 57.164153][ T6088] ? __x64_sys_futex+0x1e9/0x4c0 [ 57.164164][ T6088] ksys_write+0x12a/0x250 [ 57.164173][ T6088] ? __pfx_ksys_write+0x10/0x10 [ 57.164187][ T6088] do_syscall_64+0xcd/0xfa0 [ 57.164198][ T6088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.164208][ T6088] RIP: 0033:0x7fa05238e27f [ 57.164217][ T6088] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 57.164227][ T6088] RSP: 002b:00007fff13b3f670 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 57.164236][ T6088] RAX: ffffffffffffffda RBX: 00007fa0525e5fa0 RCX: 00007fa05238e27f [ 57.164242][ T6088] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8 [ 57.164248][ T6088] RBP: 00007fa052413f91 R08: 0000000000000000 R09: 0000000000000000 [ 57.164254][ T6088] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 57.164260][ T6088] R13: 00007fa0525e5fa0 R14: 00007fa0525e5fa0 R15: 0000000000000003 [ 57.164273][ T6088] [ 57.164276][ T6088] Disabling lock debugging due to kernel taint [ 57.243503][ T6088] BUG: Bad page state in process syz.0.17 pfn:43886 [ 57.245587][ T6088] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x7ff80a782 pfn:0x43886 [ 57.248547][ T6088] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 57.250725][ T6088] raw: 00fff00000000000 dead000000000040 ffff888021ea5000 0000000000000000 [ 57.253412][ T6088] raw: 00000007ff80a782 0000000000000001 00000000ffffffff 0000000000000000 [ 57.256103][ T6088] page dumped because: page_pool leak [ 57.257838][ T6088] page_owner tracks the page as allocated [ 57.259769][ T6088] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6088, tgid 6088 (syz.0.17), ts 57042550402, free_ts 56757329446 [ 57.264926][ T6088] post_alloc_hook+0x1af/0x220 [ 57.266555][ T6088] get_page_from_freelist+0x10a3/0x3a30 [ 57.268472][ T6088] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 57.270402][ T6088] alloc_pages_bulk_noprof+0x77a/0x1410 [ 57.272151][ T6088] __page_pool_alloc_netmems_slow+0x1c7/0xca0 [ 57.274121][ T6088] page_pool_alloc_netmems+0xc4/0x190 [ 57.275859][ T6088] skb_pp_cow_data+0x7c0/0xff0 [ 57.277494][ T6088] skb_cow_data_for_xdp+0x88/0xb0 [ 57.279127][ T6088] do_xdp_generic+0x530/0x1320 [ 57.280679][ T6088] tun_get_user+0x1d41/0x3cc0 [ 57.282232][ T6088] tun_chr_write_iter+0xdc/0x210 [ 57.283840][ T6088] vfs_write+0x7d3/0x11d0 [ 57.285263][ T6088] ksys_write+0x12a/0x250 [ 57.286666][ T6088] do_syscall_64+0xcd/0xfa0 [ 57.288183][ T6088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.290090][ T6088] page last free pid 0 tgid 0 stack trace: [ 57.292003][ T6088] __free_frozen_pages+0x7df/0x1160 [ 57.293704][ T6088] tlb_remove_table_rcu+0x121/0x320 [ 57.295564][ T6088] rcu_core+0x79c/0x1530 [ 57.297320][ T6088] handle_softirqs+0x219/0x8e0 [ 57.298869][ T6088] __irq_exit_rcu+0x109/0x170 [ 57.300354][ T6088] irq_exit_rcu+0x9/0x30 [ 57.301711][ T6088] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 57.303455][ T6088] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 57.305368][ T6088] Modules linked in: [ 57.306827][ T6088] CPU: 3 UID: 0 PID: 6088 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full) [ 57.306844][ T6088] Tainted: [B]=BAD_PAGE [ 57.306848][ T6088] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 57.306854][ T6088] Call Trace: [ 57.306860][ T6088] [ 57.306864][ T6088] dump_stack_lvl+0x16c/0x1f0 [ 57.306878][ T6088] bad_page+0xcf/0x220 [ 57.306889][ T6088] ? __pfx_bad_page+0x10/0x10 [ 57.306899][ T6088] ? page_bad_reason+0x9d/0x1f0 [ 57.306908][ T6088] __free_frozen_pages+0x845/0x1160 [ 57.306921][ T6088] ? mark_held_locks+0x49/0x80 [ 57.306931][ T6088] ? kasan_quarantine_put+0x10a/0x240 [ 57.306942][ T6088] page_frag_free+0x27f/0x2e0 [ 57.306952][ T6088] __xdp_return+0x3ab/0xab0 [ 57.306964][ T6088] bpf_xdp_adjust_tail+0x887/0xcb0 [ 57.306976][ T6088] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 57.306985][ T6088] bpf_prog_run_generic_xdp+0x61f/0x1570 [ 57.307000][ T6088] do_xdp_generic+0x8e6/0x1320 [ 57.307011][ T6088] ? __pfx_do_xdp_generic+0x10/0x10 [ 57.307027][ T6088] tun_get_user+0x1d41/0x3cc0 [ 57.307048][ T6088] ? __pfx_tun_get_user+0x10/0x10 [ 57.307062][ T6088] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 57.307078][ T6088] ? find_held_lock+0x2b/0x80 [ 57.307090][ T6088] ? tun_get+0x191/0x370 [ 57.307103][ T6088] tun_chr_write_iter+0xdc/0x210 [ 57.307117][ T6088] vfs_write+0x7d3/0x11d0 [ 57.307127][ T6088] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 57.307142][ T6088] ? __pfx_vfs_write+0x10/0x10 [ 57.307150][ T6088] ? do_futex+0x122/0x350 [ 57.307162][ T6088] ? __x64_sys_futex+0x1e0/0x4c0 [ 57.307171][ T6088] ? __x64_sys_futex+0x1e9/0x4c0 [ 57.307181][ T6088] ksys_write+0x12a/0x250 [ 57.307190][ T6088] ? __pfx_ksys_write+0x10/0x10 [ 57.307200][ T6088] do_syscall_64+0xcd/0xfa0 [ 57.307210][ T6088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.307221][ T6088] RIP: 0033:0x7fa05238e27f [ 57.307230][ T6088] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 57.307239][ T6088] RSP: 002b:00007fff13b3f670 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 57.307249][ T6088] RAX: ffffffffffffffda RBX: 00007fa0525e5fa0 RCX: 00007fa05238e27f [ 57.307255][ T6088] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8 [ 57.307261][ T6088] RBP: 00007fa052413f91 R08: 0000000000000000 R09: 0000000000000000 [ 57.307267][ T6088] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 57.307273][ T6088] R13: 00007fa0525e5fa0 R14: 00007fa0525e5fa0 R15: 0000000000000003 [ 57.307282][ T6088] [ 57.307290][ T6088] BUG: Bad page state in process syz.0.17 pfn:32673 [ 57.388669][ T6088] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x32673 [ 57.391835][ T6088] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 57.394061][ T6088] raw: 00fff00000000000 dead000000000040 ffff888021ea5000 0000000000000000 [ 57.396800][ T6088] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 57.399480][ T6088] page dumped because: page_pool leak [ 57.401198][ T6088] page_owner tracks the page as allocated [ 57.402989][ T6088] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6088, tgid 6088 (syz.0.17), ts 57042543466, free_ts 56757339230 [ 57.408139][ T6088] post_alloc_hook+0x1af/0x220 [ 57.409662][ T6088] get_page_from_freelist+0x10a3/0x3a30 [ 57.411424][ T6088] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 57.413285][ T6088] alloc_pages_bulk_noprof+0x77a/0x1410 [ 57.415025][ T6088] __page_pool_alloc_netmems_slow+0x1c7/0xca0 [ 57.416992][ T6088] page_pool_alloc_netmems+0xc4/0x190 [ 57.418689][ T6088] skb_pp_cow_data+0x7c0/0xff0 [ 57.420209][ T6088] skb_cow_data_for_xdp+0x88/0xb0 [ 57.421815][ T6088] do_xdp_generic+0x530/0x1320 [ 57.423327][ T6088] tun_get_user+0x1d41/0x3cc0 [ 57.424817][ T6088] tun_chr_write_iter+0xdc/0x210 [ 57.426407][ T6088] vfs_write+0x7d3/0x11d0 [ 57.427826][ T6088] ksys_write+0x12a/0x250 [ 57.429196][ T6088] do_syscall_64+0xcd/0xfa0 [ 57.430636][ T6088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.432523][ T6088] page last free pid 0 tgid 0 stack trace: [ 57.434363][ T6088] __free_frozen_pages+0x7df/0x1160 [ 57.435999][ T6088] tlb_remove_table_rcu+0x121/0x320 [ 57.437702][ T6088] rcu_core+0x79c/0x1530 [ 57.439040][ T6088] handle_softirqs+0x219/0x8e0 [ 57.440551][ T6088] __irq_exit_rcu+0x109/0x170 [ 57.442075][ T6088] irq_exit_rcu+0x9/0x30 [ 57.443402][ T6088] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 57.445143][ T6088] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 57.447081][ T6088] Modules linked in: [ 57.448327][ T6088] CPU: 3 UID: 0 PID: 6088 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full) [ 57.448342][ T6088] Tainted: [B]=BAD_PAGE [ 57.448346][ T6088] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 57.448351][ T6088] Call Trace: [ 57.448355][ T6088] [ 57.448359][ T6088] dump_stack_lvl+0x16c/0x1f0 [ 57.448370][ T6088] bad_page+0xcf/0x220 [ 57.448380][ T6088] ? __pfx_bad_page+0x10/0x10 [ 57.448389][ T6088] ? page_bad_reason+0x9d/0x1f0 [ 57.448399][ T6088] __free_frozen_pages+0x845/0x1160 [ 57.448412][ T6088] ? mark_held_locks+0x49/0x80 [ 57.448421][ T6088] ? kasan_quarantine_put+0x10a/0x240 [ 57.448432][ T6088] page_frag_free+0x27f/0x2e0 [ 57.448442][ T6088] __xdp_return+0x3ab/0xab0 [ 57.448453][ T6088] bpf_xdp_adjust_tail+0x887/0xcb0 [ 57.448465][ T6088] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 57.448473][ T6088] bpf_prog_run_generic_xdp+0x61f/0x1570 [ 57.448488][ T6088] do_xdp_generic+0x8e6/0x1320 [ 57.448500][ T6088] ? __pfx_do_xdp_generic+0x10/0x10 [ 57.448516][ T6088] tun_get_user+0x1d41/0x3cc0 [ 57.448533][ T6088] ? __pfx_tun_get_user+0x10/0x10 [ 57.448547][ T6088] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 57.448563][ T6088] ? find_held_lock+0x2b/0x80 [ 57.448575][ T6088] ? tun_get+0x191/0x370 [ 57.448588][ T6088] tun_chr_write_iter+0xdc/0x210 [ 57.448602][ T6088] vfs_write+0x7d3/0x11d0 [ 57.448611][ T6088] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 57.448626][ T6088] ? __pfx_vfs_write+0x10/0x10 [ 57.448634][ T6088] ? do_futex+0x122/0x350 [ 57.448646][ T6088] ? __x64_sys_futex+0x1e0/0x4c0 [ 57.448655][ T6088] ? __x64_sys_futex+0x1e9/0x4c0 [ 57.448665][ T6088] ksys_write+0x12a/0x250 [ 57.448673][ T6088] ? __pfx_ksys_write+0x10/0x10 [ 57.448684][ T6088] do_syscall_64+0xcd/0xfa0 [ 57.448694][ T6088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.448703][ T6088] RIP: 0033:0x7fa05238e27f [ 57.448712][ T6088] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 57.448722][ T6088] RSP: 002b:00007fff13b3f670 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 57.448732][ T6088] RAX: ffffffffffffffda RBX: 00007fa0525e5fa0 RCX: 00007fa05238e27f [ 57.448738][ T6088] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8 [ 57.448744][ T6088] RBP: 00007fa052413f91 R08: 0000000000000000 R09: 0000000000000000 [ 57.448749][ T6088] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 57.448755][ T6088] R13: 00007fa0525e5fa0 R14: 00007fa0525e5fa0 R15: 0000000000000003 [ 57.448764][ T6088] [ 57.448771][ T6088] BUG: Bad page state in process syz.0.17 pfn:3bacb [ 57.531063][ T6088] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803bacb000 pfn:0x3bacb [ 57.534233][ T6088] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 57.536462][ T6088] raw: 00fff00000000000 dead000000000040 ffff888021ea5000 0000000000000000 [ 57.539291][ T6088] raw: ffff88803bacb000 0000000000000001 00000000ffffffff 0000000000000000 [ 57.542082][ T6088] page dumped because: page_pool leak [ 57.543816][ T6088] page_owner tracks the page as allocated [ 57.545671][ T6088] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6088, tgid 6088 (syz.0.17), ts 57042536495, free_ts 56757348653 [ 57.550978][ T6088] post_alloc_hook+0x1af/0x220 [ 57.552550][ T6088] get_page_from_freelist+0x10a3/0x3a30 [ 57.554353][ T6088] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 57.556278][ T6088] alloc_pages_bulk_noprof+0x77a/0x1410 [ 57.558139][ T6088] __page_pool_alloc_netmems_slow+0x1c7/0xca0 [ 57.560105][ T6088] page_pool_alloc_netmems+0xc4/0x190 [ 57.561879][ T6088] skb_pp_cow_data+0x7c0/0xff0 [ 57.563424][ T6088] skb_cow_data_for_xdp+0x88/0xb0 [ 57.565067][ T6088] do_xdp_generic+0x530/0x1320 [ 57.566632][ T6088] tun_get_user+0x1d41/0x3cc0 [ 57.568176][ T6088] tun_chr_write_iter+0xdc/0x210 [ 57.569739][ T6088] vfs_write+0x7d3/0x11d0 [ 57.571139][ T6088] ksys_write+0x12a/0x250 [ 57.572537][ T6088] do_syscall_64+0xcd/0xfa0 [ 57.574017][ T6088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.575869][ T6088] page last free pid 0 tgid 0 stack trace: [ 57.577743][ T6088] __free_frozen_pages+0x7df/0x1160 [ 57.579352][ T6088] tlb_remove_table_rcu+0x121/0x320 [ 57.581011][ T6088] rcu_core+0x79c/0x1530 [ 57.582403][ T6088] handle_softirqs+0x219/0x8e0 [ 57.583917][ T6088] __irq_exit_rcu+0x109/0x170 [ 57.585456][ T6088] irq_exit_rcu+0x9/0x30 [ 57.586837][ T6088] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 57.588586][ T6088] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 57.590479][ T6088] Modules linked in: [ 57.591755][ T6088] CPU: 3 UID: 0 PID: 6088 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full) [ 57.591771][ T6088] Tainted: [B]=BAD_PAGE [ 57.591774][ T6088] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 57.591780][ T6088] Call Trace: [ 57.591785][ T6088] [ 57.591789][ T6088] dump_stack_lvl+0x16c/0x1f0 [ 57.591800][ T6088] bad_page+0xcf/0x220 [ 57.591809][ T6088] ? __pfx_bad_page+0x10/0x10 [ 57.591818][ T6088] ? page_bad_reason+0x9d/0x1f0 [ 57.591828][ T6088] __free_frozen_pages+0x845/0x1160 [ 57.591841][ T6088] ? mark_held_locks+0x49/0x80 [ 57.591850][ T6088] ? kasan_quarantine_put+0x10a/0x240 [ 57.591861][ T6088] page_frag_free+0x27f/0x2e0 [ 57.591870][ T6088] __xdp_return+0x3ab/0xab0 [ 57.591881][ T6088] bpf_xdp_adjust_tail+0x887/0xcb0 [ 57.591894][ T6088] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 57.591902][ T6088] bpf_prog_run_generic_xdp+0x61f/0x1570 [ 57.591916][ T6088] do_xdp_generic+0x8e6/0x1320 [ 57.591928][ T6088] ? __pfx_do_xdp_generic+0x10/0x10 [ 57.591944][ T6088] tun_get_user+0x1d41/0x3cc0 [ 57.591961][ T6088] ? __pfx_tun_get_user+0x10/0x10 [ 57.591975][ T6088] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 57.591991][ T6088] ? find_held_lock+0x2b/0x80 [ 57.592003][ T6088] ? tun_get+0x191/0x370 [ 57.592016][ T6088] tun_chr_write_iter+0xdc/0x210 [ 57.592030][ T6088] vfs_write+0x7d3/0x11d0 [ 57.592040][ T6088] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 57.592054][ T6088] ? __pfx_vfs_write+0x10/0x10 [ 57.592063][ T6088] ? do_futex+0x122/0x350 [ 57.592074][ T6088] ? __x64_sys_futex+0x1e0/0x4c0 [ 57.592083][ T6088] ? __x64_sys_futex+0x1e9/0x4c0 [ 57.592093][ T6088] ksys_write+0x12a/0x250 [ 57.592102][ T6088] ? __pfx_ksys_write+0x10/0x10 [ 57.592112][ T6088] do_syscall_64+0xcd/0xfa0 [ 57.592122][ T6088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.592132][ T6088] RIP: 0033:0x7fa05238e27f [ 57.592141][ T6088] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 57.592151][ T6088] RSP: 002b:00007fff13b3f670 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 57.592161][ T6088] RAX: ffffffffffffffda RBX: 00007fa0525e5fa0 RCX: 00007fa05238e27f [ 57.592167][ T6088] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8 [ 57.592173][ T6088] RBP: 00007fa052413f91 R08: 0000000000000000 R09: 0000000000000000 [ 57.592179][ T6088] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 57.592185][ T6088] R13: 00007fa0525e5fa0 R14: 00007fa0525e5fa0 R15: 0000000000000003 [ 57.592194][ T6088] [ 57.592201][ T6088] BUG: Bad page state in process syz.0.17 pfn:2bc57 [ 57.674512][ T6088] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802bc57d90 pfn:0x2bc57 [ 57.677749][ T6088] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 57.679998][ T6088] raw: 00fff00000000000 dead000000000040 ffff888021ea5000 0000000000000000 [ 57.682657][ T6088] raw: ffff88802bc57d90 0000000000000001 00000000ffffffff 0000000000000000 [ 57.685304][ T6088] page dumped because: page_pool leak [ 57.687055][ T6088] page_owner tracks the page as allocated [ 57.688847][ T6088] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6088, tgid 6088 (syz.0.17), ts 57042529522, free_ts 56757358913 [ 57.694005][ T6088] post_alloc_hook+0x1af/0x220 [ 57.695548][ T6088] get_page_from_freelist+0x10a3/0x3a30 [ 57.697377][ T6088] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 57.699183][ T6088] alloc_pages_bulk_noprof+0x77a/0x1410 [ 57.700912][ T6088] __page_pool_alloc_netmems_slow+0x1c7/0xca0 [ 57.702897][ T6088] page_pool_alloc_netmems+0xc4/0x190 [ 57.704612][ T6088] skb_pp_cow_data+0x7c0/0xff0 [ 57.706177][ T6088] skb_cow_data_for_xdp+0x88/0xb0 [ 57.707851][ T6088] do_xdp_generic+0x530/0x1320 [ 57.709383][ T6088] tun_get_user+0x1d41/0x3cc0 [ 57.710853][ T6088] tun_chr_write_iter+0xdc/0x210 [ 57.712440][ T6088] vfs_write+0x7d3/0x11d0 [ 57.713862][ T6088] ksys_write+0x12a/0x250 [ 57.715259][ T6088] do_syscall_64+0xcd/0xfa0 [ 57.716793][ T6088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.718708][ T6088] page last free pid 0 tgid 0 stack trace: [ 57.720583][ T6088] __free_frozen_pages+0x7df/0x1160 [ 57.722306][ T6088] tlb_remove_table_rcu+0x121/0x320 [ 57.723995][ T6088] rcu_core+0x79c/0x1530 [ 57.725411][ T6088] handle_softirqs+0x219/0x8e0 [ 57.726954][ T6088] __irq_exit_rcu+0x109/0x170 [ 57.728479][ T6088] irq_exit_rcu+0x9/0x30 [ 57.729908][ T6088] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 57.731723][ T6088] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 57.733547][ T6088] Modules linked in: [ 57.734810][ T6088] CPU: 3 UID: 0 PID: 6088 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full) [ 57.734825][ T6088] Tainted: [B]=BAD_PAGE [ 57.734829][ T6088] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 57.734836][ T6088] Call Trace: [ 57.734840][ T6088] [ 57.734845][ T6088] dump_stack_lvl+0x16c/0x1f0 [ 57.734855][ T6088] bad_page+0xcf/0x220 [ 57.734865][ T6088] ? __pfx_bad_page+0x10/0x10 [ 57.734875][ T6088] ? page_bad_reason+0x9d/0x1f0 [ 57.734884][ T6088] __free_frozen_pages+0x845/0x1160 [ 57.734897][ T6088] ? mark_held_locks+0x49/0x80 [ 57.734906][ T6088] ? kasan_quarantine_put+0x10a/0x240 [ 57.734917][ T6088] page_frag_free+0x27f/0x2e0 [ 57.734926][ T6088] __xdp_return+0x3ab/0xab0 [ 57.734937][ T6088] bpf_xdp_adjust_tail+0x887/0xcb0 [ 57.734950][ T6088] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 57.734958][ T6088] bpf_prog_run_generic_xdp+0x61f/0x1570 [ 57.734973][ T6088] do_xdp_generic+0x8e6/0x1320 [ 57.734985][ T6088] ? __pfx_do_xdp_generic+0x10/0x10 [ 57.735001][ T6088] tun_get_user+0x1d41/0x3cc0 [ 57.735018][ T6088] ? __pfx_tun_get_user+0x10/0x10 [ 57.735032][ T6088] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 57.735047][ T6088] ? find_held_lock+0x2b/0x80 [ 57.735063][ T6088] ? tun_get+0x191/0x370 [ 57.735076][ T6088] tun_chr_write_iter+0xdc/0x210 [ 57.735090][ T6088] vfs_write+0x7d3/0x11d0 [ 57.735100][ T6088] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 57.735114][ T6088] ? __pfx_vfs_write+0x10/0x10 [ 57.735122][ T6088] ? do_futex+0x122/0x350 [ 57.735134][ T6088] ? __x64_sys_futex+0x1e0/0x4c0 [ 57.735143][ T6088] ? __x64_sys_futex+0x1e9/0x4c0 [ 57.735153][ T6088] ksys_write+0x12a/0x250 [ 57.735161][ T6088] ? __pfx_ksys_write+0x10/0x10 [ 57.735172][ T6088] do_syscall_64+0xcd/0xfa0 [ 57.735182][ T6088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.735192][ T6088] RIP: 0033:0x7fa05238e27f [ 57.735200][ T6088] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 57.735210][ T6088] RSP: 002b:00007fff13b3f670 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 57.735219][ T6088] RAX: ffffffffffffffda RBX: 00007fa0525e5fa0 RCX: 00007fa05238e27f [ 57.735226][ T6088] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8 [ 57.735232][ T6088] RBP: 00007fa052413f91 R08: 0000000000000000 R09: 0000000000000000 [ 57.735237][ T6088] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 57.735243][ T6088] R13: 00007fa0525e5fa0 R14: 00007fa0525e5fa0 R15: 0000000000000003 [ 57.735252][ T6088] [ 57.735260][ T6088] BUG: Bad page state in process syz.0.17 pfn:32f81 [ 57.817608][ T6088] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x32f81 [ 57.820794][ T6088] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 57.823123][ T6088] raw: 00fff00000000000 dead000000000040 ffff888021ea5000 0000000000000000 [ 57.825873][ T6088] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 57.828662][ T6088] page dumped because: page_pool leak [ 57.830390][ T6088] page_owner tracks the page as allocated [ 57.832238][ T6088] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6088, tgid 6088 (syz.0.17), ts 57042522416, free_ts 56757369327 [ 57.837383][ T6088] post_alloc_hook+0x1af/0x220 [ 57.838896][ T6088] get_page_from_freelist+0x10a3/0x3a30 [ 57.840649][ T6088] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 57.842565][ T6088] alloc_pages_bulk_noprof+0x77a/0x1410 [ 57.844308][ T6088] __page_pool_alloc_netmems_slow+0x1c7/0xca0 [ 57.846242][ T6088] page_pool_alloc_netmems+0xc4/0x190 [ 57.847987][ T6088] skb_pp_cow_data+0x7c0/0xff0 [ 57.849509][ T6088] skb_cow_data_for_xdp+0x88/0xb0 [ 57.851032][ T6088] do_xdp_generic+0x530/0x1320 [ 57.852594][ T6088] tun_get_user+0x1d41/0x3cc0 [ 57.854100][ T6088] tun_chr_write_iter+0xdc/0x210 [ 57.855673][ T6088] vfs_write+0x7d3/0x11d0 [ 57.857136][ T6088] ksys_write+0x12a/0x250 [ 57.858521][ T6088] do_syscall_64+0xcd/0xfa0 [ 57.859969][ T6088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.861881][ T6088] page last free pid 0 tgid 0 stack trace: [ 57.863715][ T6088] __free_frozen_pages+0x7df/0x1160 [ 57.865381][ T6088] tlb_remove_table_rcu+0x121/0x320 [ 57.867088][ T6088] rcu_core+0x79c/0x1530 [ 57.868444][ T6088] handle_softirqs+0x219/0x8e0 [ 57.869979][ T6088] __irq_exit_rcu+0x109/0x170 [ 57.871617][ T6088] irq_exit_rcu+0x9/0x30 [ 57.872992][ T6088] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 57.874799][ T6088] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 57.876789][ T6088] Modules linked in: [ 57.878075][ T6088] CPU: 3 UID: 0 PID: 6088 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full) [ 57.878092][ T6088] Tainted: [B]=BAD_PAGE [ 57.878096][ T6088] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 57.878102][ T6088] Call Trace: [ 57.878106][ T6088] [ 57.878111][ T6088] dump_stack_lvl+0x16c/0x1f0 [ 57.878123][ T6088] bad_page+0xcf/0x220 [ 57.878133][ T6088] ? __pfx_bad_page+0x10/0x10 [ 57.878142][ T6088] ? page_bad_reason+0x9d/0x1f0 [ 57.878152][ T6088] __free_frozen_pages+0x845/0x1160 [ 57.878165][ T6088] ? mark_held_locks+0x49/0x80 [ 57.878174][ T6088] ? kasan_quarantine_put+0x10a/0x240 [ 57.878184][ T6088] page_frag_free+0x27f/0x2e0 [ 57.878194][ T6088] __xdp_return+0x3ab/0xab0 [ 57.878205][ T6088] bpf_xdp_adjust_tail+0x887/0xcb0 [ 57.878218][ T6088] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 57.878226][ T6088] bpf_prog_run_generic_xdp+0x61f/0x1570 [ 57.878241][ T6088] do_xdp_generic+0x8e6/0x1320 [ 57.878253][ T6088] ? __pfx_do_xdp_generic+0x10/0x10 [ 57.878270][ T6088] tun_get_user+0x1d41/0x3cc0 [ 57.878286][ T6088] ? __pfx_tun_get_user+0x10/0x10 [ 57.878300][ T6088] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 57.878315][ T6088] ? find_held_lock+0x2b/0x80 [ 57.878328][ T6088] ? tun_get+0x191/0x370 [ 57.878341][ T6088] tun_chr_write_iter+0xdc/0x210 [ 57.878356][ T6088] vfs_write+0x7d3/0x11d0 [ 57.878365][ T6088] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 57.878379][ T6088] ? __pfx_vfs_write+0x10/0x10 [ 57.878388][ T6088] ? do_futex+0x122/0x350 [ 57.878400][ T6088] ? __x64_sys_futex+0x1e0/0x4c0 [ 57.878409][ T6088] ? __x64_sys_futex+0x1e9/0x4c0 [ 57.878418][ T6088] ksys_write+0x12a/0x250 [ 57.878427][ T6088] ? __pfx_ksys_write+0x10/0x10 [ 57.878438][ T6088] do_syscall_64+0xcd/0xfa0 [ 57.878448][ T6088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.878458][ T6088] RIP: 0033:0x7fa05238e27f [ 57.878466][ T6088] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 57.878476][ T6088] RSP: 002b:00007fff13b3f670 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 57.878485][ T6088] RAX: ffffffffffffffda RBX: 00007fa0525e5fa0 RCX: 00007fa05238e27f [ 57.878491][ T6088] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8 [ 57.878497][ T6088] RBP: 00007fa052413f91 R08: 0000000000000000 R09: 0000000000000000 [ 57.878503][ T6088] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 57.878509][ T6088] R13: 00007fa0525e5fa0 R14: 00007fa0525e5fa0 R15: 0000000000000003 [ 57.878517][ T6088] [ 57.878525][ T6088] BUG: Bad page state in process syz.0.17 pfn:2826c [ 57.960760][ T6088] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802826c060 pfn:0x2826c [ 57.963857][ T6088] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 57.966036][ T6088] raw: 00fff00000000000 dead000000000040 ffff888021ea5000 0000000000000000 [ 57.968720][ T6088] raw: ffff88802826c060 0000000000000001 00000000ffffffff 0000000000000000 [ 57.971434][ T6088] page dumped because: page_pool leak [ 57.973137][ T6088] page_owner tracks the page as allocated [ 57.974931][ T6088] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6088, tgid 6088 (syz.0.17), ts 57042515122, free_ts 56757375128 [ 57.980060][ T6088] post_alloc_hook+0x1af/0x220 [ 57.981612][ T6088] get_page_from_freelist+0x10a3/0x3a30 [ 57.983360][ T6088] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 57.985247][ T6088] alloc_pages_bulk_noprof+0x77a/0x1410 [ 57.987037][ T6088] __page_pool_alloc_netmems_slow+0x1c7/0xca0 [ 57.988936][ T6088] page_pool_alloc_netmems+0xc4/0x190 [ 57.990639][ T6088] skb_pp_cow_data+0x7c0/0xff0 [ 57.992189][ T6088] skb_cow_data_for_xdp+0x88/0xb0 [ 57.993795][ T6088] do_xdp_generic+0x530/0x1320 [ 57.995318][ T6088] tun_get_user+0x1d41/0x3cc0 [ 57.996851][ T6088] tun_chr_write_iter+0xdc/0x210 [ 57.998438][ T6088] vfs_write+0x7d3/0x11d0 [ 57.999809][ T6088] ksys_write+0x12a/0x250 [ 58.001205][ T6088] do_syscall_64+0xcd/0xfa0 [ 58.002648][ T6088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.004510][ T6088] page last free pid 0 tgid 0 stack trace: [ 58.006336][ T6088] __free_frozen_pages+0x7df/0x1160 [ 58.007991][ T6088] tlb_remove_table_rcu+0x121/0x320 [ 58.009610][ T6088] rcu_core+0x79c/0x1530 [ 58.010901][ T6088] handle_softirqs+0x219/0x8e0 [ 58.012436][ T6088] __irq_exit_rcu+0x109/0x170 [ 58.013945][ T6088] irq_exit_rcu+0x9/0x30 [ 58.015301][ T6088] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 58.017151][ T6088] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 58.018993][ T6088] Modules linked in: [ 58.020229][ T6088] CPU: 3 UID: 0 PID: 6088 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full) [ 58.020246][ T6088] Tainted: [B]=BAD_PAGE [ 58.020249][ T6088] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 58.020255][ T6088] Call Trace: [ 58.020260][ T6088] [ 58.020264][ T6088] dump_stack_lvl+0x16c/0x1f0 [ 58.020274][ T6088] bad_page+0xcf/0x220 [ 58.020285][ T6088] ? __pfx_bad_page+0x10/0x10 [ 58.020294][ T6088] ? page_bad_reason+0x9d/0x1f0 [ 58.020304][ T6088] __free_frozen_pages+0x845/0x1160 [ 58.020321][ T6088] ? mark_held_locks+0x49/0x80 [ 58.020330][ T6088] ? kasan_quarantine_put+0x10a/0x240 [ 58.020341][ T6088] page_frag_free+0x27f/0x2e0 [ 58.020350][ T6088] __xdp_return+0x3ab/0xab0 [ 58.020361][ T6088] bpf_xdp_adjust_tail+0x887/0xcb0 [ 58.020373][ T6088] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 58.020381][ T6088] bpf_prog_run_generic_xdp+0x61f/0x1570 [ 58.020396][ T6088] do_xdp_generic+0x8e6/0x1320 [ 58.020408][ T6088] ? __pfx_do_xdp_generic+0x10/0x10 [ 58.020424][ T6088] tun_get_user+0x1d41/0x3cc0 [ 58.020441][ T6088] ? __pfx_tun_get_user+0x10/0x10 [ 58.020455][ T6088] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 58.020470][ T6088] ? find_held_lock+0x2b/0x80 [ 58.020482][ T6088] ? tun_get+0x191/0x370 [ 58.020495][ T6088] tun_chr_write_iter+0xdc/0x210 [ 58.020510][ T6088] vfs_write+0x7d3/0x11d0 [ 58.020519][ T6088] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 58.020534][ T6088] ? __pfx_vfs_write+0x10/0x10 [ 58.020542][ T6088] ? do_futex+0x122/0x350 [ 58.020554][ T6088] ? __x64_sys_futex+0x1e0/0x4c0 [ 58.020563][ T6088] ? __x64_sys_futex+0x1e9/0x4c0 [ 58.020573][ T6088] ksys_write+0x12a/0x250 [ 58.020581][ T6088] ? __pfx_ksys_write+0x10/0x10 [ 58.020592][ T6088] do_syscall_64+0xcd/0xfa0 [ 58.020602][ T6088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.020611][ T6088] RIP: 0033:0x7fa05238e27f [ 58.020620][ T6088] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 58.020629][ T6088] RSP: 002b:00007fff13b3f670 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 58.020639][ T6088] RAX: ffffffffffffffda RBX: 00007fa0525e5fa0 RCX: 00007fa05238e27f [ 58.020645][ T6088] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8 [ 58.020651][ T6088] RBP: 00007fa052413f91 R08: 0000000000000000 R09: 0000000000000000 [ 58.020657][ T6088] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 58.020663][ T6088] R13: 00007fa0525e5fa0 R14: 00007fa0525e5fa0 R15: 0000000000000003 [ 58.020672][ T6088] [ 58.020678][ T6088] BUG: Bad page state in process syz.0.17 pfn:43834 [ 58.102593][ T6088] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x7ff80a730 pfn:0x43834 [ 58.105530][ T6088] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 58.107803][ T6088] raw: 00fff00000000000 dead000000000040 ffff888021ea5000 0000000000000000 [ 58.110492][ T6088] raw: 00000007ff80a730 0000000000000001 00000000ffffffff 0000000000000000 [ 58.113199][ T6088] page dumped because: page_pool leak [ 58.114884][ T6088] page_owner tracks the page as allocated [ 58.116671][ T6088] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6088, tgid 6088 (syz.0.17), ts 57042507509, free_ts 56757381196 [ 58.121841][ T6088] post_alloc_hook+0x1af/0x220 [ 58.123370][ T6088] get_page_from_freelist+0x10a3/0x3a30 [ 58.125141][ T6088] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 58.127110][ T6088] alloc_pages_bulk_noprof+0x77a/0x1410 [ 58.128892][ T6088] __page_pool_alloc_netmems_slow+0x1c7/0xca0 [ 58.130788][ T6088] page_pool_alloc_netmems+0xc4/0x190 [ 58.132479][ T6088] skb_pp_cow_data+0x7c0/0xff0 [ 58.134003][ T6088] skb_cow_data_for_xdp+0x88/0xb0 [ 58.135590][ T6088] do_xdp_generic+0x530/0x1320 [ 58.137148][ T6088] tun_get_user+0x1d41/0x3cc0 [ 58.138625][ T6088] tun_chr_write_iter+0xdc/0x210 [ 58.140183][ T6088] vfs_write+0x7d3/0x11d0 [ 58.141587][ T6088] ksys_write+0x12a/0x250 [ 58.142910][ T6088] do_syscall_64+0xcd/0xfa0 [ 58.144435][ T6088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.146308][ T6088] page last free pid 0 tgid 0 stack trace: [ 58.148188][ T6088] __free_frozen_pages+0x7df/0x1160 [ 58.149845][ T6088] rcu_core+0x79c/0x1530 [ 58.151245][ T6088] handle_softirqs+0x219/0x8e0 [ 58.152768][ T6088] __irq_exit_rcu+0x109/0x170 [ 58.154262][ T6088] irq_exit_rcu+0x9/0x30 [ 58.155607][ T6088] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 58.157418][ T6088] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 58.159282][ T6088] Modules linked in: [ 58.160517][ T6088] CPU: 3 UID: 0 PID: 6088 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full) [ 58.160532][ T6088] Tainted: [B]=BAD_PAGE [ 58.160535][ T6088] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 58.160541][ T6088] Call Trace: [ 58.160546][ T6088] [ 58.160550][ T6088] dump_stack_lvl+0x16c/0x1f0 [ 58.160561][ T6088] bad_page+0xcf/0x220 [ 58.160570][ T6088] ? __pfx_bad_page+0x10/0x10 [ 58.160580][ T6088] ? page_bad_reason+0x9d/0x1f0 [ 58.160589][ T6088] __free_frozen_pages+0x845/0x1160 [ 58.160603][ T6088] ? mark_held_locks+0x49/0x80 [ 58.160611][ T6088] ? kasan_quarantine_put+0x10a/0x240 [ 58.160622][ T6088] page_frag_free+0x27f/0x2e0 [ 58.160631][ T6088] __xdp_return+0x3ab/0xab0 [ 58.160642][ T6088] bpf_xdp_adjust_tail+0x887/0xcb0 [ 58.160655][ T6088] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 58.160663][ T6088] bpf_prog_run_generic_xdp+0x61f/0x1570 [ 58.160678][ T6088] do_xdp_generic+0x8e6/0x1320 [ 58.160690][ T6088] ? __pfx_do_xdp_generic+0x10/0x10 [ 58.160706][ T6088] tun_get_user+0x1d41/0x3cc0 [ 58.160724][ T6088] ? __pfx_tun_get_user+0x10/0x10 [ 58.160738][ T6088] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 58.160754][ T6088] ? find_held_lock+0x2b/0x80 [ 58.160766][ T6088] ? tun_get+0x191/0x370 [ 58.160779][ T6088] tun_chr_write_iter+0xdc/0x210 [ 58.160793][ T6088] vfs_write+0x7d3/0x11d0 [ 58.160802][ T6088] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 58.160817][ T6088] ? __pfx_vfs_write+0x10/0x10 [ 58.160825][ T6088] ? do_futex+0x122/0x350 [ 58.160837][ T6088] ? __x64_sys_futex+0x1e0/0x4c0 [ 58.160845][ T6088] ? __x64_sys_futex+0x1e9/0x4c0 [ 58.160855][ T6088] ksys_write+0x12a/0x250 [ 58.160864][ T6088] ? __pfx_ksys_write+0x10/0x10 [ 58.160874][ T6088] do_syscall_64+0xcd/0xfa0 [ 58.160885][ T6088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.160895][ T6088] RIP: 0033:0x7fa05238e27f [ 58.160903][ T6088] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 58.160913][ T6088] RSP: 002b:00007fff13b3f670 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 58.160923][ T6088] RAX: ffffffffffffffda RBX: 00007fa0525e5fa0 RCX: 00007fa05238e27f [ 58.160929][ T6088] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8 [ 58.160935][ T6088] RBP: 00007fa052413f91 R08: 0000000000000000 R09: 0000000000000000 [ 58.160941][ T6088] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 58.160947][ T6088] R13: 00007fa0525e5fa0 R14: 00007fa0525e5fa0 R15: 0000000000000003 [ 58.160956][ T6088] [ 58.160963][ T6088] BUG: Bad page state in process syz.0.17 pfn:4ff0e [ 58.206917][ T64] Bluetooth: hci0: command tx timeout [ 58.207516][ T6088] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804ff0e1e0 pfn:0x4ff0e [ 58.248059][ T6088] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 58.250217][ T6088] raw: 00fff00000000000 dead000000000040 ffff888021ea5000 0000000000000000 [ 58.252894][ T6088] raw: ffff88804ff0e1e0 0000000000000001 00000000ffffffff 0000000000000000 [ 58.255484][ T6088] page dumped because: page_pool leak [ 58.257185][ T6088] page_owner tracks the page as allocated [ 58.258916][ T6088] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6088, tgid 6088 (syz.0.17), ts 57042500366, free_ts 56766321033 [ 58.263954][ T6088] post_alloc_hook+0x1af/0x220 [ 58.265537][ T6088] get_page_from_freelist+0x10a3/0x3a30 [ 58.267379][ T6088] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 58.269269][ T6088] alloc_pages_bulk_noprof+0x77a/0x1410 [ 58.271049][ T6088] __page_pool_alloc_netmems_slow+0x1c7/0xca0 [ 58.273038][ T6088] page_pool_alloc_netmems+0xc4/0x190 [ 58.274773][ T6088] skb_pp_cow_data+0x7c0/0xff0 [ 58.276331][ T6088] skb_cow_data_for_xdp+0x88/0xb0 [ 58.278021][ T6088] do_xdp_generic+0x530/0x1320 [ 58.279573][ T6088] tun_get_user+0x1d41/0x3cc0 [ 58.281110][ T6088] tun_chr_write_iter+0xdc/0x210 [ 58.282713][ T6088] vfs_write+0x7d3/0x11d0 [ 58.284122][ T6088] ksys_write+0x12a/0x250 [ 58.285539][ T6088] do_syscall_64+0xcd/0xfa0 [ 58.287078][ T6088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.288986][ T6088] page last free pid 13 tgid 13 stack trace: [ 58.290914][ T6088] __free_frozen_pages+0x7df/0x1160 [ 58.292623][ T6088] __put_partials+0x130/0x170 [ 58.294163][ T6088] qlist_free_all+0x4d/0x120 [ 58.295655][ T6088] kasan_quarantine_reduce+0x195/0x1e0 [ 58.297472][ T6088] __kasan_slab_alloc+0x69/0x90 [ 58.299044][ T6088] __kmalloc_cache_noprof+0x274/0x780 [ 58.300779][ T6088] gro_cells_destroy+0x32b/0x540 [ 58.302445][ T6088] ip_tunnel_dev_free+0x19/0x30 [ 58.304106][ T6088] netdev_run_todo+0x78f/0x1320 [ 58.305744][ T6088] ops_undo_list+0x901/0xab0 [ 58.307326][ T6088] cleanup_net+0x41b/0x8b0 [ 58.308783][ T6088] process_one_work+0x9cf/0x1b70 [ 58.310406][ T6088] worker_thread+0x6c8/0xf10 [ 58.311934][ T6088] kthread+0x3c5/0x780 [ 58.313279][ T6088] ret_from_fork+0x675/0x7d0 [ 58.314776][ T6088] ret_from_fork_asm+0x1a/0x30 [ 58.316331][ T6088] Modules linked in: [ 58.317698][ T6088] CPU: 3 UID: 0 PID: 6088 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full) [ 58.317714][ T6088] Tainted: [B]=BAD_PAGE [ 58.317717][ T6088] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 58.317724][ T6088] Call Trace: [ 58.317729][ T6088] [ 58.317733][ T6088] dump_stack_lvl+0x16c/0x1f0 [ 58.317746][ T6088] bad_page+0xcf/0x220 [ 58.317756][ T6088] ? __pfx_bad_page+0x10/0x10 [ 58.317766][ T6088] ? page_bad_reason+0x9d/0x1f0 [ 58.317776][ T6088] __free_frozen_pages+0x845/0x1160 [ 58.317789][ T6088] ? mark_held_locks+0x49/0x80 [ 58.317799][ T6088] ? kasan_quarantine_put+0x10a/0x240 [ 58.317810][ T6088] page_frag_free+0x27f/0x2e0 [ 58.317820][ T6088] __xdp_return+0x3ab/0xab0 [ 58.317831][ T6088] bpf_xdp_adjust_tail+0x887/0xcb0 [ 58.317845][ T6088] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 58.317853][ T6088] bpf_prog_run_generic_xdp+0x61f/0x1570 [ 58.317868][ T6088] do_xdp_generic+0x8e6/0x1320 [ 58.317880][ T6088] ? __pfx_do_xdp_generic+0x10/0x10 [ 58.317896][ T6088] tun_get_user+0x1d41/0x3cc0 [ 58.317913][ T6088] ? __pfx_tun_get_user+0x10/0x10 [ 58.317928][ T6088] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 58.317943][ T6088] ? find_held_lock+0x2b/0x80 [ 58.317956][ T6088] ? tun_get+0x191/0x370 [ 58.317969][ T6088] tun_chr_write_iter+0xdc/0x210 [ 58.317983][ T6088] vfs_write+0x7d3/0x11d0 [ 58.317993][ T6088] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 58.318007][ T6088] ? __pfx_vfs_write+0x10/0x10 [ 58.318016][ T6088] ? do_futex+0x122/0x350 [ 58.318028][ T6088] ? __x64_sys_futex+0x1e0/0x4c0 [ 58.318037][ T6088] ? __x64_sys_futex+0x1e9/0x4c0 [ 58.318046][ T6088] ksys_write+0x12a/0x250 [ 58.318055][ T6088] ? __pfx_ksys_write+0x10/0x10 [ 58.318066][ T6088] do_syscall_64+0xcd/0xfa0 [ 58.318076][ T6088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.318086][ T6088] RIP: 0033:0x7fa05238e27f [ 58.318094][ T6088] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 58.318104][ T6088] RSP: 002b:00007fff13b3f670 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 58.318114][ T6088] RAX: ffffffffffffffda RBX: 00007fa0525e5fa0 RCX: 00007fa05238e27f [ 58.318120][ T6088] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8 [ 58.318126][ T6088] RBP: 00007fa052413f91 R08: 0000000000000000 R09: 0000000000000000 [ 58.318132][ T6088] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 58.318138][ T6088] R13: 00007fa0525e5fa0 R14: 00007fa0525e5fa0 R15: 0000000000000003 [ 58.318147][ T6088] [ 58.318154][ T6088] BUG: Bad page state in process syz.0.17 pfn:4ff0d [ 58.399560][ T6088] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804ff0d780 pfn:0x4ff0d [ 58.402718][ T6088] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 58.404917][ T6088] raw: 00fff00000000000 dead000000000040 ffff888021ea5000 0000000000000000 [ 58.407664][ T6088] raw: ffff88804ff0d780 0000000000000001 00000000ffffffff 0000000000000000 [ 58.410334][ T6088] page dumped because: page_pool leak [ 58.412011][ T6088] page_owner tracks the page as allocated [ 58.413808][ T6088] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6088, tgid 6088 (syz.0.17), ts 57042493170, free_ts 56766328508 [ 58.419111][ T6088] post_alloc_hook+0x1af/0x220 [ 58.420669][ T6088] get_page_from_freelist+0x10a3/0x3a30 [ 58.422495][ T6088] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 58.424413][ T6088] alloc_pages_bulk_noprof+0x77a/0x1410 [ 58.426226][ T6088] __page_pool_alloc_netmems_slow+0x1c7/0xca0 [ 58.428248][ T6088] page_pool_alloc_netmems+0xc4/0x190 [ 58.429993][ T6088] skb_pp_cow_data+0x7c0/0xff0 [ 58.431586][ T6088] skb_cow_data_for_xdp+0x88/0xb0 [ 58.433236][ T6088] do_xdp_generic+0x530/0x1320 [ 58.434794][ T6088] tun_get_user+0x1d41/0x3cc0 [ 58.436334][ T6088] tun_chr_write_iter+0xdc/0x210 [ 58.438005][ T6088] vfs_write+0x7d3/0x11d0 [ 58.439420][ T6088] ksys_write+0x12a/0x250 [ 58.440814][ T6088] do_syscall_64+0xcd/0xfa0 [ 58.442280][ T6088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.444161][ T6088] page last free pid 13 tgid 13 stack trace: [ 58.445956][ T6088] __free_frozen_pages+0x7df/0x1160 [ 58.447564][ T6088] __put_partials+0x130/0x170 [ 58.448981][ T6088] qlist_free_all+0x4d/0x120 [ 58.450464][ T6088] kasan_quarantine_reduce+0x195/0x1e0 [ 58.452213][ T6088] __kasan_slab_alloc+0x69/0x90 [ 58.453778][ T6088] __kmalloc_cache_noprof+0x274/0x780 [ 58.455485][ T6088] gro_cells_destroy+0x32b/0x540 [ 58.457129][ T6088] ip_tunnel_dev_free+0x19/0x30 [ 58.458677][ T6088] netdev_run_todo+0x78f/0x1320 [ 58.460233][ T6088] ops_undo_list+0x901/0xab0 [ 58.461719][ T6088] cleanup_net+0x41b/0x8b0 [ 58.463151][ T6088] process_one_work+0x9cf/0x1b70 [ 58.464725][ T6088] worker_thread+0x6c8/0xf10 [ 58.466212][ T6088] kthread+0x3c5/0x780 [ 58.467541][ T6088] ret_from_fork+0x675/0x7d0 [ 58.469014][ T6088] ret_from_fork_asm+0x1a/0x30 [ 58.470570][ T6088] Modules linked in: [ 58.471849][ T6088] CPU: 3 UID: 0 PID: 6088 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full) [ 58.471865][ T6088] Tainted: [B]=BAD_PAGE [ 58.471868][ T6088] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 58.471874][ T6088] Call Trace: [ 58.471879][ T6088] [ 58.471883][ T6088] dump_stack_lvl+0x16c/0x1f0 [ 58.471895][ T6088] bad_page+0xcf/0x220 [ 58.471905][ T6088] ? __pfx_bad_page+0x10/0x10 [ 58.471915][ T6088] ? page_bad_reason+0x9d/0x1f0 [ 58.471924][ T6088] __free_frozen_pages+0x845/0x1160 [ 58.471937][ T6088] ? mark_held_locks+0x49/0x80 [ 58.471946][ T6088] ? kasan_quarantine_put+0x10a/0x240 [ 58.471956][ T6088] page_frag_free+0x27f/0x2e0 [ 58.471966][ T6088] __xdp_return+0x3ab/0xab0 [ 58.471977][ T6088] bpf_xdp_adjust_tail+0x887/0xcb0 [ 58.471989][ T6088] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 58.471997][ T6088] bpf_prog_run_generic_xdp+0x61f/0x1570 [ 58.472012][ T6088] do_xdp_generic+0x8e6/0x1320 [ 58.472024][ T6088] ? __pfx_do_xdp_generic+0x10/0x10 [ 58.472040][ T6088] tun_get_user+0x1d41/0x3cc0 [ 58.472057][ T6088] ? __pfx_tun_get_user+0x10/0x10 [ 58.472070][ T6088] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 58.472086][ T6088] ? find_held_lock+0x2b/0x80 [ 58.472098][ T6088] ? tun_get+0x191/0x370 [ 58.472111][ T6088] tun_chr_write_iter+0xdc/0x210 [ 58.472125][ T6088] vfs_write+0x7d3/0x11d0 [ 58.472135][ T6088] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 58.472149][ T6088] ? __pfx_vfs_write+0x10/0x10 [ 58.472158][ T6088] ? do_futex+0x122/0x350 [ 58.472169][ T6088] ? __x64_sys_futex+0x1e0/0x4c0 [ 58.472178][ T6088] ? __x64_sys_futex+0x1e9/0x4c0 [ 58.472188][ T6088] ksys_write+0x12a/0x250 [ 58.472197][ T6088] ? __pfx_ksys_write+0x10/0x10 [ 58.472207][ T6088] do_syscall_64+0xcd/0xfa0 [ 58.472218][ T6088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.472228][ T6088] RIP: 0033:0x7fa05238e27f [ 58.472236][ T6088] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 58.472246][ T6088] RSP: 002b:00007fff13b3f670 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 58.472255][ T6088] RAX: ffffffffffffffda RBX: 00007fa0525e5fa0 RCX: 00007fa05238e27f [ 58.472262][ T6088] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8 [ 58.472268][ T6088] RBP: 00007fa052413f91 R08: 0000000000000000 R09: 0000000000000000 [ 58.472273][ T6088] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 58.472279][ T6088] R13: 00007fa0525e5fa0 R14: 00007fa0525e5fa0 R15: 0000000000000003 [ 58.472288][ T6088] [ 58.472296][ T6088] BUG: Bad page state in process syz.0.17 pfn:4ff0a [ 58.554419][ T6088] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804ff0af00 pfn:0x4ff0a [ 58.557574][ T6088] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 58.559754][ T6088] raw: 00fff00000000000 dead000000000040 ffff888021ea5000 0000000000000000 [ 58.562410][ T6088] raw: ffff88804ff0af00 0000000000000001 00000000ffffffff 0000000000000000 [ 58.565086][ T6088] page dumped because: page_pool leak [ 58.566841][ T6088] page_owner tracks the page as allocated [ 58.568631][ T6088] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6088, tgid 6088 (syz.0.17), ts 57042486370, free_ts 56766335263 [ 58.573769][ T6088] post_alloc_hook+0x1af/0x220 [ 58.575304][ T6088] get_page_from_freelist+0x10a3/0x3a30 [ 58.577127][ T6088] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 58.579001][ T6088] alloc_pages_bulk_noprof+0x77a/0x1410 [ 58.580754][ T6088] __page_pool_alloc_netmems_slow+0x1c7/0xca0 [ 58.582715][ T6088] page_pool_alloc_netmems+0xc4/0x190 [ 58.584413][ T6088] skb_pp_cow_data+0x7c0/0xff0 [ 58.585956][ T6088] skb_cow_data_for_xdp+0x88/0xb0 [ 58.587613][ T6088] do_xdp_generic+0x530/0x1320 [ 58.589139][ T6088] tun_get_user+0x1d41/0x3cc0 [ 58.590637][ T6088] tun_chr_write_iter+0xdc/0x210 [ 58.592218][ T6088] vfs_write+0x7d3/0x11d0 [ 58.593604][ T6088] ksys_write+0x12a/0x250 [ 58.594922][ T6088] do_syscall_64+0xcd/0xfa0 [ 58.596368][ T6088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.598262][ T6088] page last free pid 13 tgid 13 stack trace: [ 58.600138][ T6088] __free_frozen_pages+0x7df/0x1160 [ 58.601833][ T6088] __put_partials+0x130/0x170 [ 58.603336][ T6088] qlist_free_all+0x4d/0x120 [ 58.604804][ T6088] kasan_quarantine_reduce+0x195/0x1e0 [ 58.606528][ T6088] __kasan_slab_alloc+0x69/0x90 [ 58.608128][ T6088] __kmalloc_cache_noprof+0x274/0x780 [ 58.609837][ T6088] gro_cells_destroy+0x32b/0x540 [ 58.611433][ T6088] ip_tunnel_dev_free+0x19/0x30 [ 58.612992][ T6088] netdev_run_todo+0x78f/0x1320 [ 58.614565][ T6088] ops_undo_list+0x901/0xab0 [ 58.616042][ T6088] cleanup_net+0x41b/0x8b0 [ 58.617471][ T6088] process_one_work+0x9cf/0x1b70 [ 58.619030][ T6088] worker_thread+0x6c8/0xf10 [ 58.620511][ T6088] kthread+0x3c5/0x780 [ 58.621861][ T6088] ret_from_fork+0x675/0x7d0 [ 58.623336][ T6088] ret_from_fork_asm+0x1a/0x30 [ 58.624868][ T6088] Modules linked in: [ 58.626149][ T6088] CPU: 3 UID: 0 PID: 6088 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full) [ 58.626164][ T6088] Tainted: [B]=BAD_PAGE [ 58.626167][ T6088] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 58.626174][ T6088] Call Trace: [ 58.626179][ T6088] [ 58.626183][ T6088] dump_stack_lvl+0x16c/0x1f0 [ 58.626195][ T6088] bad_page+0xcf/0x220 [ 58.626205][ T6088] ? __pfx_bad_page+0x10/0x10 [ 58.626214][ T6088] ? page_bad_reason+0x9d/0x1f0 [ 58.626223][ T6088] __free_frozen_pages+0x845/0x1160 [ 58.626236][ T6088] ? mark_held_locks+0x49/0x80 [ 58.626245][ T6088] ? kasan_quarantine_put+0x10a/0x240 [ 58.626256][ T6088] page_frag_free+0x27f/0x2e0 [ 58.626265][ T6088] __xdp_return+0x3ab/0xab0 [ 58.626276][ T6088] bpf_xdp_adjust_tail+0x887/0xcb0 [ 58.626289][ T6088] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 58.626297][ T6088] bpf_prog_run_generic_xdp+0x61f/0x1570 [ 58.626317][ T6088] do_xdp_generic+0x8e6/0x1320 [ 58.626329][ T6088] ? __pfx_do_xdp_generic+0x10/0x10 [ 58.626345][ T6088] tun_get_user+0x1d41/0x3cc0 [ 58.626362][ T6088] ? __pfx_tun_get_user+0x10/0x10 [ 58.626376][ T6088] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 58.626392][ T6088] ? find_held_lock+0x2b/0x80 [ 58.626405][ T6088] ? tun_get+0x191/0x370 [ 58.626418][ T6088] tun_chr_write_iter+0xdc/0x210 [ 58.626432][ T6088] vfs_write+0x7d3/0x11d0 [ 58.626442][ T6088] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 58.626456][ T6088] ? __pfx_vfs_write+0x10/0x10 [ 58.626465][ T6088] ? do_futex+0x122/0x350 [ 58.626476][ T6088] ? __x64_sys_futex+0x1e0/0x4c0 [ 58.626485][ T6088] ? __x64_sys_futex+0x1e9/0x4c0 [ 58.626494][ T6088] ksys_write+0x12a/0x250 [ 58.626503][ T6088] ? __pfx_ksys_write+0x10/0x10 [ 58.626514][ T6088] do_syscall_64+0xcd/0xfa0 [ 58.626524][ T6088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.626534][ T6088] RIP: 0033:0x7fa05238e27f [ 58.626543][ T6088] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 58.626553][ T6088] RSP: 002b:00007fff13b3f670 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 58.626562][ T6088] RAX: ffffffffffffffda RBX: 00007fa0525e5fa0 RCX: 00007fa05238e27f [ 58.626568][ T6088] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8 [ 58.626574][ T6088] RBP: 00007fa052413f91 R08: 0000000000000000 R09: 0000000000000000 [ 58.626580][ T6088] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 58.626586][ T6088] R13: 00007fa0525e5fa0 R14: 00007fa0525e5fa0 R15: 0000000000000003 [ 58.626594][ T6088] [ 58.626602][ T6088] BUG: Bad page state in process syz.0.17 pfn:4ff0c [ 58.708346][ T6088] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804ff0cf00 pfn:0x4ff0c [ 58.711511][ T6088] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 58.713740][ T6088] raw: 00fff00000000000 dead000000000040 ffff888021ea5000 0000000000000000 [ 58.716425][ T6088] raw: ffff88804ff0cf00 0000000000000001 00000000ffffffff 0000000000000000 [ 58.719186][ T6088] page dumped because: page_pool leak [ 58.720892][ T6088] page_owner tracks the page as allocated [ 58.722740][ T6088] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6088, tgid 6088 (syz.0.17), ts 57042479157, free_ts 56766341310 [ 58.727933][ T6088] post_alloc_hook+0x1af/0x220 [ 58.729482][ T6088] get_page_from_freelist+0x10a3/0x3a30 [ 58.731276][ T6088] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 58.733158][ T6088] alloc_pages_bulk_noprof+0x77a/0x1410 [ 58.734903][ T6088] __page_pool_alloc_netmems_slow+0x1c7/0xca0 [ 58.736878][ T6088] page_pool_alloc_netmems+0xc4/0x190 [ 58.738581][ T6088] skb_pp_cow_data+0x7c0/0xff0 [ 58.740103][ T6088] skb_cow_data_for_xdp+0x88/0xb0 [ 58.741754][ T6088] do_xdp_generic+0x530/0x1320 [ 58.743231][ T6088] tun_get_user+0x1d41/0x3cc0 [ 58.744735][ T6088] tun_chr_write_iter+0xdc/0x210 [ 58.746325][ T6088] vfs_write+0x7d3/0x11d0 [ 58.747799][ T6088] ksys_write+0x12a/0x250 [ 58.749179][ T6088] do_syscall_64+0xcd/0xfa0 [ 58.750624][ T6088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.752506][ T6088] page last free pid 13 tgid 13 stack trace: [ 58.754401][ T6088] __free_frozen_pages+0x7df/0x1160 [ 58.756035][ T6088] __put_partials+0x130/0x170 [ 58.757606][ T6088] qlist_free_all+0x4d/0x120 [ 58.759071][ T6088] kasan_quarantine_reduce+0x195/0x1e0 [ 58.760788][ T6088] __kasan_slab_alloc+0x69/0x90 [ 58.762374][ T6088] __kmalloc_cache_noprof+0x274/0x780 [ 58.764069][ T6088] gro_cells_destroy+0x32b/0x540 [ 58.765662][ T6088] ip_tunnel_dev_free+0x19/0x30 [ 58.767266][ T6088] netdev_run_todo+0x78f/0x1320 [ 58.768812][ T6088] ops_undo_list+0x901/0xab0 [ 58.770296][ T6088] cleanup_net+0x41b/0x8b0 [ 58.771745][ T6088] process_one_work+0x9cf/0x1b70 [ 58.773326][ T6088] worker_thread+0x6c8/0xf10 [ 58.774795][ T6088] kthread+0x3c5/0x780 [ 58.776094][ T6088] ret_from_fork+0x675/0x7d0 [ 58.777631][ T6088] ret_from_fork_asm+0x1a/0x30 [ 58.779148][ T6088] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 58.780399][ T6088] CPU: 3 UID: 0 PID: 6088 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full) [ 58.780415][ T6088] Tainted: [B]=BAD_PAGE [ 58.780418][ T6088] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 58.780424][ T6088] Call Trace: [ 58.780428][ T6088] [ 58.780432][ T6088] dump_stack_lvl+0x16c/0x1f0 [ 58.780443][ T6088] bad_page+0xcf/0x220 [ 58.780453][ T6088] ? __pfx_bad_page+0x10/0x10 [ 58.780462][ T6088] ? page_bad_reason+0x9d/0x1f0 [ 58.780472][ T6088] __free_frozen_pages+0x845/0x1160 [ 58.780485][ T6088] ? mark_held_locks+0x49/0x80 [ 58.780494][ T6088] ? kasan_quarantine_put+0x10a/0x240 [ 58.780504][ T6088] page_frag_free+0x27f/0x2e0 [ 58.780514][ T6088] __xdp_return+0x3ab/0xab0 [ 58.780524][ T6088] bpf_xdp_adjust_tail+0x887/0xcb0 [ 58.780537][ T6088] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 58.780545][ T6088] bpf_prog_run_generic_xdp+0x61f/0x1570 [ 58.780560][ T6088] do_xdp_generic+0x8e6/0x1320 [ 58.780572][ T6088] ? __pfx_do_xdp_generic+0x10/0x10 [ 58.780588][ T6088] tun_get_user+0x1d41/0x3cc0 [ 58.780605][ T6088] ? __pfx_tun_get_user+0x10/0x10 [ 58.780619][ T6088] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 58.780634][ T6088] ? find_held_lock+0x2b/0x80 [ 58.780646][ T6088] ? tun_get+0x191/0x370 [ 58.780659][ T6088] tun_chr_write_iter+0xdc/0x210 [ 58.780673][ T6088] vfs_write+0x7d3/0x11d0 [ 58.780683][ T6088] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 58.780697][ T6088] ? __pfx_vfs_write+0x10/0x10 [ 58.780706][ T6088] ? do_futex+0x122/0x350 [ 58.780717][ T6088] ? __x64_sys_futex+0x1e0/0x4c0 [ 58.780726][ T6088] ? __x64_sys_futex+0x1e9/0x4c0 [ 58.780736][ T6088] ksys_write+0x12a/0x250 [ 58.780745][ T6088] ? __pfx_ksys_write+0x10/0x10 [ 58.780756][ T6088] do_syscall_64+0xcd/0xfa0 [ 58.780766][ T6088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.780776][ T6088] RIP: 0033:0x7fa05238e27f [ 58.780784][ T6088] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 58.780794][ T6088] RSP: 002b:00007fff13b3f670 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 58.780803][ T6088] RAX: ffffffffffffffda RBX: 00007fa0525e5fa0 RCX: 00007fa05238e27f [ 58.780809][ T6088] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8 [ 58.780815][ T6088] RBP: 00007fa052413f91 R08: 0000000000000000 R09: 0000000000000000 [ 58.780821][ T6088] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 58.780826][ T6088] R13: 00007fa0525e5fa0 R14: 00007fa0525e5fa0 R15: 0000000000000003 [ 58.780835][ T6088] [ 60.679601][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.731137][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.801310][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.880126][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.945323][ T13] bridge_slave_1: left allmulticast mode [ 60.947200][ T13] bridge_slave_1: left promiscuous mode [ 60.949033][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.952072][ T13] bridge_slave_0: left allmulticast mode [ 60.953864][ T13] bridge_slave_0: left promiscuous mode [ 60.955667][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.022775][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.027873][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.032643][ T13] bond0 (unregistering): Released all slaves [ 61.351672][ T13] hsr_slave_0: left promiscuous mode [ 61.354532][ T13] hsr_slave_1: left promiscuous mode [ 61.356848][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.359130][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.361668][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.363965][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.367930][ T13] veth1_macvtap: left promiscuous mode [ 61.369685][ T13] veth0_macvtap: left promiscuous mode [ 61.371460][ T13] veth1_vlan: left promiscuous mode [ 61.373124][ T13] veth0_vlan: left promiscuous mode [ 61.448902][ T13] team0 (unregistering): Port device team_slave_1 removed [ 61.459848][ T13] team0 (unregistering): Port device team_slave_0 removed VM DIAGNOSIS: 21:23:42 Registers: info registers vcpu 0 CPU#0 RAX=00000002000008fb RBX=0000000000000001 RCX=0000000000000830 RDX=0000000000000002 RSI=00000000000000fb RDI=0000000000000002 RBP=ffff88802c58c938 RSP=ffffc90000007a98 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000001 R13=1ffff92000000f56 R14=1ffff110058b1901 R15=0000000000000000 RIP=ffffffff816a6ae8 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a05000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000056325e274e10 CR3=0000000042b57000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000001 Opmask01=0000000000c00000 Opmask02=0000000000030000 Opmask03=0000000000000000 Opmask04=00000000ffbfffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd9157249b 00007ffd9157249b ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd915729a0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd915729a0 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 746e6f637420745f 6d64617379733a72 5f6d64617379733a 746f6f723d747800 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7464656374207455 6764617373733072 5567646173737330 7465657237747200 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 74696c6962617061 63202237312e302e 7a7973223d6d6d6f 6320383830363d64 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 313d657669737369 6d72657020327974 696c696261706163 3d7373616c637420 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 745f6d6461737973 3a725f6d64617379 733a746f6f723d74 7865746e6f637420 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 745f6d6461737973 3a725f6d64617379 733a746f6f723d74 7865746e6f637320 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2039333d7974696c 6962617061632022 37312e302e7a7973 223d6d6d6f632038 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e656d676172 66206562206c6c69 7720656361667265 746e692073696874 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff8b5d5c87 RDX=ffff88802c8f8000 RSI=0000000000000002 RDI=0000000000000001 RBP=ffffc900230a7280 RSP=ffffc900230a71d8 R8 =0000000000000001 R9 =0000000000000002 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=ffffffff8be77066 R14=ffffc900230a7300 R15=0000000000000025 RIP=ffffffff81bce7e0 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007ff55bf70c80 ffffffff 00c00000 GS =0000 ffff8880d6b05000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000c00110eb40 CR3=000000003284f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000800000 Opmask01=0000000000000000 Opmask02=00000000f0000800 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005640d3546600 00005640d3546600 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffffba38b80 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7461747320656761 7020646142203a47 5542205d38383036 54205b5d37323632 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 313d657669737369 6d72657020667062 3d7373616c637420 745f6d6461737973 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a725f6d64617379 733a746f6f723d74 7865746e6f637420 745f6d6461737973 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a725f6d64617379 733a746f6f723d74 7865746e6f637320 2237312e302e7a79 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 73223d6d6d6f6320 383830363d646970 2020726f66207d20 6e75725f676f7270 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000054719 RBX=0000000000000002 RCX=ffffffff8b60f2a9 RDX=0000000000000000 RSI=ffffffff8da2c97f RDI=ffffffff8bf073c0 RBP=ffffed1003bd4920 RSP=ffffc90000187de8 R8 =0000000000000001 R9 =ffffed100d4c6655 R10=ffff88806a6332ab R11=0000000000000001 R12=0000000000000002 R13=ffff88801dea4900 R14=ffffffff90821bd0 R15=0000000000000000 RIP=ffffffff8b60dd5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6c05000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555579c9e808 CR3=0000000051d88000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff13b3f980 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa052415050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa05241505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa052415057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa05241506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa0524150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa0524151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000066 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85298535 RDI=ffffffff9addb7c0 RBP=ffffffff9addb780 RSP=ffffc90004c06f50 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000066 R14=ffffffff9addb780 R15=ffffffff852984d0 RIP=ffffffff8529855f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555579c9e500 ffffffff 00c00000 GS =0000 ffff8880d6d05000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000200000010000 CR3=0000000042b57000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 006e75745f7a7973 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa052415050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa05241505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa052415057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa05241506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa0524150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa0524151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c667265766f20 6772612061746164 000a747261745374 6f68000700080006 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49435740534a05 4257440544514441 000a515744515351 4a4d5655444b5300 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000