Warning: Permanently added '10.128.1.81' (ED25519) to the list of known hosts.
2025/10/17 09:12:36 parsed 1 programs
[ 86.686748][ T9] cfg80211: failed to load regulatory.db
[ 88.902918][ T5840] cgroup: Unknown subsys name 'net'
[ 89.037493][ T5840] cgroup: Unknown subsys name 'cpuset'
[ 89.046472][ T5840] cgroup: Unknown subsys name 'rlimit'
[ 90.487328][ T5840] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 93.428217][ T5848] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 94.012632][ T5858] chnl_net:caif_netlink_parms(): no params data found
[ 94.098958][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state
[ 94.106871][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[ 94.114264][ T5858] bridge_slave_0: entered allmulticast mode
[ 94.121293][ T5858] bridge_slave_0: entered promiscuous mode
[ 94.131089][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state
[ 94.138664][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[ 94.145894][ T5858] bridge_slave_1: entered allmulticast mode
[ 94.152836][ T5858] bridge_slave_1: entered promiscuous mode
[ 94.180217][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 94.191565][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 94.221919][ T5858] team0: Port device team_slave_0 added
[ 94.230054][ T5858] team0: Port device team_slave_1 added
[ 94.255654][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 94.262713][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 94.288689][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 94.301481][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 94.308489][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 94.334421][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 94.373604][ T5858] hsr_slave_0: entered promiscuous mode
[ 94.380537][ T5858] hsr_slave_1: entered promiscuous mode
[ 94.514644][ T5858] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 94.526802][ T5858] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 94.537923][ T5858] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 94.547582][ T5858] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 94.576524][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state
[ 94.583825][ T5858] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 94.591944][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state
[ 94.599093][ T5858] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 94.652620][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0
[ 94.672491][ T3493] bridge0: port 1(bridge_slave_0) entered disabled state
[ 94.680849][ T3493] bridge0: port 2(bridge_slave_1) entered disabled state
[ 94.698213][ T5858] 8021q: adding VLAN 0 to HW filter on device team0
[ 94.710459][ T3527] bridge0: port 1(bridge_slave_0) entered blocking state
[ 94.718106][ T3527] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 94.732352][ T3493] bridge0: port 2(bridge_slave_1) entered blocking state
[ 94.739546][ T3493] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 94.896119][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 94.938354][ T5858] veth0_vlan: entered promiscuous mode
[ 94.949519][ T5858] veth1_vlan: entered promiscuous mode
[ 94.979245][ T5858] veth0_macvtap: entered promiscuous mode
[ 94.989172][ T5858] veth1_macvtap: entered promiscuous mode
[ 95.006421][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 95.022433][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 95.040236][ T3527] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 95.051450][ T3527] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 95.061082][ T3527] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 95.073710][ T67] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 95.220237][ T67] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 95.278598][ T67] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 95.351570][ T67] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 95.421237][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 95.431580][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 95.442344][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 95.455358][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 95.457204][ T67] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 95.463059][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 95.716401][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 95.725174][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 95.752358][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 95.761816][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2025/10/17 09:12:47 executed programs: 0
[ 98.117447][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 98.126585][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 98.136093][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 98.145337][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 98.153451][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 98.299193][ T5943] chnl_net:caif_netlink_parms(): no params data found
[ 98.369223][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state
[ 98.376580][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state
[ 98.383744][ T5943] bridge_slave_0: entered allmulticast mode
[ 98.391008][ T5943] bridge_slave_0: entered promiscuous mode
[ 98.398808][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state
[ 98.406150][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state
[ 98.413826][ T5943] bridge_slave_1: entered allmulticast mode
[ 98.421412][ T5943] bridge_slave_1: entered promiscuous mode
[ 98.462531][ T5943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 98.484576][ T5943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 98.538490][ T5943] team0: Port device team_slave_0 added
[ 98.548309][ T5943] team0: Port device team_slave_1 added
[ 98.597121][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 98.604448][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 98.631175][ T5943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 98.644230][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 98.651218][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 98.677283][ T5943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 98.710078][ T67] bridge_slave_1: left allmulticast mode
[ 98.715944][ T67] bridge_slave_1: left promiscuous mode
[ 98.722896][ T67] bridge0: port 2(bridge_slave_1) entered disabled state
[ 98.734661][ T67] bridge_slave_0: left allmulticast mode
[ 98.740339][ T67] bridge_slave_0: left promiscuous mode
[ 98.747302][ T67] bridge0: port 1(bridge_slave_0) entered disabled state
[ 98.983639][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 98.995035][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 99.005511][ T67] bond0 (unregistering): Released all slaves
[ 99.066278][ T5943] hsr_slave_0: entered promiscuous mode
[ 99.073147][ T5943] hsr_slave_1: entered promiscuous mode
[ 99.082251][ T5943] debugfs: 'hsr0' already exists in 'hsr'
[ 99.089512][ T5943] Cannot create hsr debugfs directory
[ 99.103787][ T67] hsr_slave_0: left promiscuous mode
[ 99.110087][ T67] hsr_slave_1: left promiscuous mode
[ 99.116772][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 99.124444][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 99.133709][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 99.141418][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 99.163690][ T67] veth1_macvtap: left promiscuous mode
[ 99.169583][ T67] veth0_macvtap: left promiscuous mode
[ 99.175721][ T67] veth1_vlan: left promiscuous mode
[ 99.181761][ T67] veth0_vlan: left promiscuous mode
[ 99.653201][ T67] team0 (unregistering): Port device team_slave_1 removed
[ 99.680823][ T67] team0 (unregistering): Port device team_slave_0 removed
[ 100.205045][ T5148] Bluetooth: hci0: command tx timeout
[ 101.056789][ T5943] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 101.157497][ T5943] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 101.197976][ T5943] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 101.277876][ T5943] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 101.533022][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0
[ 101.580611][ T5943] 8021q: adding VLAN 0 to HW filter on device team0
[ 101.605760][ T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 101.612933][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 101.640288][ T3493] bridge0: port 2(bridge_slave_1) entered blocking state
[ 101.647483][ T3493] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 102.030754][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 102.088388][ T5943] veth0_vlan: entered promiscuous mode
[ 102.099386][ T5943] veth1_vlan: entered promiscuous mode
[ 102.128556][ T5943] veth0_macvtap: entered promiscuous mode
[ 102.139228][ T5943] veth1_macvtap: entered promiscuous mode
[ 102.154610][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 102.167761][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 102.181228][ T3527] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.191236][ T3527] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.201301][ T3527] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.210455][ T3527] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.266734][ T3493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 102.275194][ T3493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 102.285542][ T5148] Bluetooth: hci0: command tx timeout
[ 102.307511][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 102.316072][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 102.376799][ T6017] BUG: Bad page state in process syz.0.17 pfn:79e9b
[ 102.383576][ T6017] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888079e9bdc0 pfn:0x79e9b
[ 102.394240][ T6017] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 102.401539][ T6017] raw: 00fff00000000000 dead000000000040 ffff888020aeb000 0000000000000000
[ 102.410206][ T6017] raw: ffff888079e9bdc0 0000000000000001 00000000ffffffff 0000000000000000
[ 102.418823][ T6017] page dumped because: page_pool leak
[ 102.424255][ T6017] page_owner tracks the page as allocated
[ 102.430155][ T6017] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6017, tgid 6017 (syz.0.17), ts 102376699250, free_ts 101955351190
[ 102.447193][ T6017] post_alloc_hook+0x240/0x2a0
[ 102.452112][ T6017] get_page_from_freelist+0x2365/0x2440
[ 102.457705][ T6017] __alloc_frozen_pages_noprof+0x181/0x370
[ 102.463571][ T6017] alloc_pages_bulk_noprof+0x560/0x710
[ 102.469123][ T6017] __page_pool_alloc_netmems_slow+0x14c/0x710
[ 102.475222][ T6017] skb_pp_cow_data+0xb47/0x13e0
[ 102.480073][ T6017] do_xdp_generic+0x699/0x11a0
[ 102.484847][ T6017] __netif_receive_skb_core+0x18f4/0x4380
[ 102.490625][ T6017] __netif_receive_skb+0x72/0x380
[ 102.495686][ T6017] netif_receive_skb+0x1cb/0x790
[ 102.500634][ T6017] tun_rx_batched+0x1b9/0x730
[ 102.505331][ T6017] tun_get_user+0x2b65/0x3e90
[ 102.510014][ T6017] tun_chr_write_iter+0x113/0x200
[ 102.515070][ T6017] vfs_write+0x5c9/0xb30
[ 102.519316][ T6017] ksys_write+0x145/0x250
[ 102.523635][ T6017] do_syscall_64+0xfa/0xfa0
[ 102.528224][ T6017] page last free pid 23 tgid 23 stack trace:
[ 102.534245][ T6017] __free_frozen_pages+0xbc4/0xd30
[ 102.539347][ T6017] tlb_remove_table_rcu+0x85/0x100
[ 102.544534][ T6017] rcu_core+0xcab/0x1770
[ 102.548789][ T6017] handle_softirqs+0x286/0x870
[ 102.553579][ T6017] run_ksoftirqd+0x9b/0x100
[ 102.558192][ T6017] smpboot_thread_fn+0x542/0xa60
[ 102.563135][ T6017] kthread+0x711/0x8a0
[ 102.567225][ T6017] ret_from_fork+0x4bc/0x870
[ 102.571843][ T6017] ret_from_fork_asm+0x1a/0x30
[ 102.576646][ T6017] Modules linked in:
[ 102.580558][ T6017] CPU: 1 UID: 0 PID: 6017 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 102.580572][ T6017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 102.580582][ T6017] Call Trace:
[ 102.580587][ T6017]
[ 102.580592][ T6017] dump_stack_lvl+0x189/0x250
[ 102.580608][ T6017] ? __pfx_dump_stack_lvl+0x10/0x10
[ 102.580619][ T6017] ? __pfx_print_modules+0x10/0x10
[ 102.580636][ T6017] bad_page+0x180/0x1c0
[ 102.580651][ T6017] __free_frozen_pages+0xce2/0xd30
[ 102.580666][ T6017] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0
[ 102.580688][ T6017] bpf_xdp_adjust_tail+0x1d6/0x220
[ 102.580705][ T6017] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 102.580718][ T6017] bpf_prog_run_generic_xdp+0x606/0x13d0
[ 102.580743][ T6017] do_xdp_generic+0x9f7/0x11a0
[ 102.580760][ T6017] ? __pfx_do_xdp_generic+0x10/0x10
[ 102.580768][ T6017] ? __skb_flow_dissect+0x5ef8/0x68b0
[ 102.580799][ T6017] __netif_receive_skb_core+0x18f4/0x4380
[ 102.580812][ T6017] ? __pfx___skb_flow_dissect+0x10/0x10
[ 102.580828][ T6017] ? do_user_addr_fault+0xbbc/0x1380
[ 102.580844][ T6017] ? do_user_addr_fault+0xc85/0x1380
[ 102.580857][ T6017] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 102.580869][ T6017] ? irqentry_exit+0x74/0x90
[ 102.580879][ T6017] ? lockdep_hardirqs_on+0x9c/0x150
[ 102.580891][ T6017] ? __lock_acquire+0xab9/0xd20
[ 102.580906][ T6017] ? netif_receive_skb+0x115/0x790
[ 102.580918][ T6017] ? netif_receive_skb+0x115/0x790
[ 102.580930][ T6017] __netif_receive_skb+0x72/0x380
[ 102.580940][ T6017] ? _copy_from_iter+0x24f/0x1790
[ 102.580954][ T6017] ? netif_receive_skb+0x115/0x790
[ 102.580964][ T6017] netif_receive_skb+0x1cb/0x790
[ 102.580975][ T6017] ? __pfx___local_bh_disable_ip+0x10/0x10
[ 102.580992][ T6017] ? __pfx_netif_receive_skb+0x10/0x10
[ 102.581008][ T6017] ? __pfx__copy_from_iter+0x10/0x10
[ 102.581018][ T6017] ? sock_alloc_send_pskb+0x86b/0x980
[ 102.581029][ T6017] ? tun_rx_batched+0x160/0x730
[ 102.581042][ T6017] tun_rx_batched+0x1b9/0x730
[ 102.581053][ T6017] ? __lock_acquire+0xab9/0xd20
[ 102.581070][ T6017] ? __pfx_tun_rx_batched+0x10/0x10
[ 102.581084][ T6017] ? tun_get_user+0x272f/0x3e90
[ 102.581101][ T6017] tun_get_user+0x2b65/0x3e90
[ 102.581119][ T6017] ? tun_get_user+0x272f/0x3e90
[ 102.581132][ T6017] ? aa_file_perm+0x44d/0x1550
[ 102.581143][ T6017] ? __pfx_tun_get_user+0x10/0x10
[ 102.581157][ T6017] ? __lock_acquire+0xab9/0xd20
[ 102.581174][ T6017] ? ref_tracker_alloc+0x318/0x460
[ 102.581184][ T6017] ? __lock_acquire+0xab9/0xd20
[ 102.581196][ T6017] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 102.581208][ T6017] ? tun_get+0x1c/0x2f0
[ 102.581222][ T6017] ? tun_get+0x1c/0x2f0
[ 102.581232][ T6017] ? tun_get+0x1c/0x2f0
[ 102.581245][ T6017] tun_chr_write_iter+0x113/0x200
[ 102.581257][ T6017] vfs_write+0x5c9/0xb30
[ 102.581270][ T6017] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 102.581282][ T6017] ? __pfx_vfs_write+0x10/0x10
[ 102.581293][ T6017] ? __pfx_do_futex+0x10/0x10
[ 102.581312][ T6017] ksys_write+0x145/0x250
[ 102.581323][ T6017] ? __pfx_ksys_write+0x10/0x10
[ 102.581335][ T6017] ? do_syscall_64+0xbe/0xfa0
[ 102.581347][ T6017] do_syscall_64+0xfa/0xfa0
[ 102.581355][ T6017] ? lockdep_hardirqs_on+0x9c/0x150
[ 102.581364][ T6017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 102.581373][ T6017] ? clear_bhb_loop+0x60/0xb0
[ 102.581385][ T6017] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 102.581394][ T6017] RIP: 0033:0x7f1abcd8d97f
[ 102.581404][ T6017] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 102.581411][ T6017] RSP: 002b:00007ffd8234fcb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 102.581422][ T6017] RAX: ffffffffffffffda RBX: 00007f1abcfe5fa0 RCX: 00007f1abcd8d97f
[ 102.581429][ T6017] RDX: 0000000000011dc0 RSI: 00002000000004c0 RDI: 00000000000000c8
[ 102.581435][ T6017] RBP: 00007f1abce11f91 R08: 0000000000000000 R09: 0000000000000000
[ 102.581441][ T6017] R10: 0000000000011dc0 R11: 0000000000000293 R12: 0000000000000000
[ 102.581446][ T6017] R13: 00007f1abcfe5fa0 R14: 00007f1abcfe5fa0 R15: 0000000000000003
[ 102.581461][ T6017]
[ 102.581465][ T6017] Disabling lock debugging due to kernel taint
[ 102.985710][ T6017] BUG: Bad page state in process syz.0.17 pfn:7db23
[ 102.992379][ T6017] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807db23a00 pfn:0x7db23
[ 103.002485][ T6017] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 103.009655][ T6017] raw: 00fff00000000000 dead000000000040 ffff888020aeb000 0000000000000000
[ 103.018353][ T6017] raw: ffff88807db23a00 0000000000000001 00000000ffffffff 0000000000000000
[ 103.027051][ T6017] page dumped because: page_pool leak
[ 103.032406][ T6017] page_owner tracks the page as allocated
[ 103.038230][ T6017] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6017, tgid 6017 (syz.0.17), ts 102376689248, free_ts 101955374034
[ 103.055099][ T6017] post_alloc_hook+0x240/0x2a0
[ 103.059873][ T6017] get_page_from_freelist+0x2365/0x2440
[ 103.065516][ T6017] __alloc_frozen_pages_noprof+0x181/0x370
[ 103.071340][ T6017] alloc_pages_bulk_noprof+0x560/0x710
[ 103.076845][ T6017] __page_pool_alloc_netmems_slow+0x14c/0x710
[ 103.082930][ T6017] skb_pp_cow_data+0xb47/0x13e0
[ 103.087845][ T6017] do_xdp_generic+0x699/0x11a0
[ 103.092634][ T6017] __netif_receive_skb_core+0x18f4/0x4380
[ 103.098404][ T6017] __netif_receive_skb+0x72/0x380
[ 103.103444][ T6017] netif_receive_skb+0x1cb/0x790
[ 103.108436][ T6017] tun_rx_batched+0x1b9/0x730
[ 103.113141][ T6017] tun_get_user+0x2b65/0x3e90
[ 103.117884][ T6017] tun_chr_write_iter+0x113/0x200
[ 103.122957][ T6017] vfs_write+0x5c9/0xb30
[ 103.127240][ T6017] ksys_write+0x145/0x250
[ 103.131571][ T6017] do_syscall_64+0xfa/0xfa0
[ 103.136089][ T6017] page last free pid 23 tgid 23 stack trace:
[ 103.142061][ T6017] __free_frozen_pages+0xbc4/0xd30
[ 103.147257][ T6017] tlb_remove_table_rcu+0x85/0x100
[ 103.152403][ T6017] rcu_core+0xcab/0x1770
[ 103.156685][ T6017] handle_softirqs+0x286/0x870
[ 103.161461][ T6017] run_ksoftirqd+0x9b/0x100
[ 103.166001][ T6017] smpboot_thread_fn+0x542/0xa60
[ 103.170957][ T6017] kthread+0x711/0x8a0
[ 103.175066][ T6017] ret_from_fork+0x4bc/0x870
[ 103.179684][ T6017] ret_from_fork_asm+0x1a/0x30
[ 103.184484][ T6017] Modules linked in:
[ 103.188388][ T6017] CPU: 1 UID: 0 PID: 6017 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 103.188406][ T6017] Tainted: [B]=BAD_PAGE
[ 103.188409][ T6017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 103.188416][ T6017] Call Trace:
[ 103.188422][ T6017]
[ 103.188427][ T6017] dump_stack_lvl+0x189/0x250
[ 103.188443][ T6017] ? __pfx_dump_stack_lvl+0x10/0x10
[ 103.188452][ T6017] ? __pfx_print_modules+0x10/0x10
[ 103.188464][ T6017] bad_page+0x180/0x1c0
[ 103.188478][ T6017] __free_frozen_pages+0xce2/0xd30
[ 103.188490][ T6017] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0
[ 103.188505][ T6017] bpf_xdp_adjust_tail+0x1d6/0x220
[ 103.188520][ T6017] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 103.188528][ T6017] bpf_prog_run_generic_xdp+0x606/0x13d0
[ 103.188544][ T6017] do_xdp_generic+0x9f7/0x11a0
[ 103.188556][ T6017] ? __pfx_do_xdp_generic+0x10/0x10
[ 103.188565][ T6017] ? __skb_flow_dissect+0x5ef8/0x68b0
[ 103.188585][ T6017] __netif_receive_skb_core+0x18f4/0x4380
[ 103.188597][ T6017] ? __pfx___skb_flow_dissect+0x10/0x10
[ 103.188610][ T6017] ? do_user_addr_fault+0xbbc/0x1380
[ 103.188623][ T6017] ? do_user_addr_fault+0xc85/0x1380
[ 103.188634][ T6017] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 103.188646][ T6017] ? irqentry_exit+0x74/0x90
[ 103.188655][ T6017] ? lockdep_hardirqs_on+0x9c/0x150
[ 103.188664][ T6017] ? __lock_acquire+0xab9/0xd20
[ 103.188678][ T6017] ? netif_receive_skb+0x115/0x790
[ 103.188688][ T6017] ? netif_receive_skb+0x115/0x790
[ 103.188698][ T6017] __netif_receive_skb+0x72/0x380
[ 103.188708][ T6017] ? _copy_from_iter+0x24f/0x1790
[ 103.188720][ T6017] ? netif_receive_skb+0x115/0x790
[ 103.188732][ T6017] netif_receive_skb+0x1cb/0x790
[ 103.188742][ T6017] ? __pfx___local_bh_disable_ip+0x10/0x10
[ 103.188755][ T6017] ? __pfx_netif_receive_skb+0x10/0x10
[ 103.188764][ T6017] ? __pfx__copy_from_iter+0x10/0x10
[ 103.188774][ T6017] ? sock_alloc_send_pskb+0x86b/0x980
[ 103.188783][ T6017] ? tun_rx_batched+0x160/0x730
[ 103.188796][ T6017] tun_rx_batched+0x1b9/0x730
[ 103.188806][ T6017] ? __lock_acquire+0xab9/0xd20
[ 103.188817][ T6017] ? __pfx_tun_rx_batched+0x10/0x10
[ 103.188828][ T6017] ? tun_get_user+0x272f/0x3e90
[ 103.188841][ T6017] tun_get_user+0x2b65/0x3e90
[ 103.188854][ T6017] ? tun_get_user+0x272f/0x3e90
[ 103.188865][ T6017] ? aa_file_perm+0x44d/0x1550
[ 103.188876][ T6017] ? __pfx_tun_get_user+0x10/0x10
[ 103.188886][ T6017] ? __lock_acquire+0xab9/0xd20
[ 103.188899][ T6017] ? ref_tracker_alloc+0x318/0x460
[ 103.188908][ T6017] ? __lock_acquire+0xab9/0xd20
[ 103.188919][ T6017] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 103.188929][ T6017] ? tun_get+0x1c/0x2f0
[ 103.188968][ T6017] ? tun_get+0x1c/0x2f0
[ 103.188977][ T6017] ? tun_get+0x1c/0x2f0
[ 103.188988][ T6017] tun_chr_write_iter+0x113/0x200
[ 103.188999][ T6017] vfs_write+0x5c9/0xb30
[ 103.189010][ T6017] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 103.189020][ T6017] ? __pfx_vfs_write+0x10/0x10
[ 103.189029][ T6017] ? __pfx_do_futex+0x10/0x10
[ 103.189043][ T6017] ksys_write+0x145/0x250
[ 103.189052][ T6017] ? __pfx_ksys_write+0x10/0x10
[ 103.189062][ T6017] ? do_syscall_64+0xbe/0xfa0
[ 103.189072][ T6017] do_syscall_64+0xfa/0xfa0
[ 103.189081][ T6017] ? lockdep_hardirqs_on+0x9c/0x150
[ 103.189089][ T6017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 103.189098][ T6017] ? clear_bhb_loop+0x60/0xb0
[ 103.189108][ T6017] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 103.189117][ T6017] RIP: 0033:0x7f1abcd8d97f
[ 103.189127][ T6017] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 103.189164][ T6017] RSP: 002b:00007ffd8234fcb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 103.189176][ T6017] RAX: ffffffffffffffda RBX: 00007f1abcfe5fa0 RCX: 00007f1abcd8d97f
[ 103.189184][ T6017] RDX: 0000000000011dc0 RSI: 00002000000004c0 RDI: 00000000000000c8
[ 103.189193][ T6017] RBP: 00007f1abce11f91 R08: 0000000000000000 R09: 0000000000000000
[ 103.189200][ T6017] R10: 0000000000011dc0 R11: 0000000000000293 R12: 0000000000000000
[ 103.189206][ T6017] R13: 00007f1abcfe5fa0 R14: 00007f1abcfe5fa0 R15: 0000000000000003
[ 103.189215][ T6017]
[ 103.189223][ T6017] BUG: Bad page state in process syz.0.17 pfn:75ffc
[ 103.599942][ T6017] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x75ffc
[ 103.610022][ T6017] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 103.617155][ T6017] raw: 00fff00000000000 dead000000000040 ffff888020aeb000 0000000000000000
[ 103.626034][ T6017] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000
[ 103.634724][ T6017] page dumped because: page_pool leak
[ 103.640083][ T6017] page_owner tracks the page as allocated
[ 103.645942][ T6017] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6017, tgid 6017 (syz.0.17), ts 102376679287, free_ts 101955396513
[ 103.662841][ T6017] post_alloc_hook+0x240/0x2a0
[ 103.667768][ T6017] get_page_from_freelist+0x2365/0x2440
[ 103.673333][ T6017] __alloc_frozen_pages_noprof+0x181/0x370
[ 103.679214][ T6017] alloc_pages_bulk_noprof+0x560/0x710
[ 103.684709][ T6017] __page_pool_alloc_netmems_slow+0x14c/0x710
[ 103.690780][ T6017] skb_pp_cow_data+0xb47/0x13e0
[ 103.695684][ T6017] do_xdp_generic+0x699/0x11a0
[ 103.700466][ T6017] __netif_receive_skb_core+0x18f4/0x4380
[ 103.706236][ T6017] __netif_receive_skb+0x72/0x380
[ 103.711275][ T6017] netif_receive_skb+0x1cb/0x790
[ 103.716235][ T6017] tun_rx_batched+0x1b9/0x730
[ 103.720913][ T6017] tun_get_user+0x2b65/0x3e90
[ 103.725606][ T6017] tun_chr_write_iter+0x113/0x200
[ 103.730663][ T6017] vfs_write+0x5c9/0xb30
[ 103.734931][ T6017] ksys_write+0x145/0x250
[ 103.739265][ T6017] do_syscall_64+0xfa/0xfa0
[ 103.743757][ T6017] page last free pid 23 tgid 23 stack trace:
[ 103.749765][ T6017] __free_frozen_pages+0xbc4/0xd30
[ 103.754905][ T6017] tlb_remove_table_rcu+0x85/0x100
[ 103.760008][ T6017] rcu_core+0xcab/0x1770
[ 103.764259][ T6017] handle_softirqs+0x286/0x870
[ 103.769038][ T6017] run_ksoftirqd+0x9b/0x100
[ 103.773549][ T6017] smpboot_thread_fn+0x542/0xa60
[ 103.778517][ T6017] kthread+0x711/0x8a0
[ 103.782587][ T6017] ret_from_fork+0x4bc/0x870
[ 103.787192][ T6017] ret_from_fork_asm+0x1a/0x30
[ 103.791960][ T6017] Modules linked in:
[ 103.795880][ T6017] CPU: 1 UID: 0 PID: 6017 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 103.795902][ T6017] Tainted: [B]=BAD_PAGE
[ 103.795907][ T6017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 103.795915][ T6017] Call Trace:
[ 103.795921][ T6017]
[ 103.795927][ T6017] dump_stack_lvl+0x189/0x250
[ 103.795948][ T6017] ? __pfx_dump_stack_lvl+0x10/0x10
[ 103.795968][ T6017] ? __pfx_print_modules+0x10/0x10
[ 103.795989][ T6017] bad_page+0x180/0x1c0
[ 103.796013][ T6017] __free_frozen_pages+0xce2/0xd30
[ 103.796036][ T6017] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0
[ 103.796063][ T6017] bpf_xdp_adjust_tail+0x1d6/0x220
[ 103.796085][ T6017] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 103.796099][ T6017] bpf_prog_run_generic_xdp+0x606/0x13d0
[ 103.796127][ T6017] do_xdp_generic+0x9f7/0x11a0
[ 103.796146][ T6017] ? __pfx_do_xdp_generic+0x10/0x10
[ 103.796161][ T6017] ? __skb_flow_dissect+0x5ef8/0x68b0
[ 103.796197][ T6017] __netif_receive_skb_core+0x18f4/0x4380
[ 103.796235][ T6017] ? __pfx___skb_flow_dissect+0x10/0x10
[ 103.796259][ T6017] ? do_user_addr_fault+0xbbc/0x1380
[ 103.796283][ T6017] ? do_user_addr_fault+0xc85/0x1380
[ 103.796304][ T6017] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 103.796325][ T6017] ? irqentry_exit+0x74/0x90
[ 103.796345][ T6017] ? lockdep_hardirqs_on+0x9c/0x150
[ 103.796363][ T6017] ? __lock_acquire+0xab9/0xd20
[ 103.796385][ T6017] ? netif_receive_skb+0x115/0x790
[ 103.796404][ T6017] ? netif_receive_skb+0x115/0x790
[ 103.796421][ T6017] __netif_receive_skb+0x72/0x380
[ 103.796438][ T6017] ? _copy_from_iter+0x24f/0x1790
[ 103.796457][ T6017] ? netif_receive_skb+0x115/0x790
[ 103.796475][ T6017] netif_receive_skb+0x1cb/0x790
[ 103.796493][ T6017] ? __pfx___local_bh_disable_ip+0x10/0x10
[ 103.796515][ T6017] ? __pfx_netif_receive_skb+0x10/0x10
[ 103.796533][ T6017] ? __pfx__copy_from_iter+0x10/0x10
[ 103.796555][ T6017] ? sock_alloc_send_pskb+0x86b/0x980
[ 103.796573][ T6017] ? tun_rx_batched+0x160/0x730
[ 103.796594][ T6017] tun_rx_batched+0x1b9/0x730
[ 103.796616][ T6017] ? __lock_acquire+0xab9/0xd20
[ 103.796637][ T6017] ? __pfx_tun_rx_batched+0x10/0x10
[ 103.796658][ T6017] ? tun_get_user+0x272f/0x3e90
[ 103.796682][ T6017] tun_get_user+0x2b65/0x3e90
[ 103.796705][ T6017] ? tun_get_user+0x272f/0x3e90
[ 103.796725][ T6017] ? aa_file_perm+0x44d/0x1550
[ 103.796744][ T6017] ? __pfx_tun_get_user+0x10/0x10
[ 103.796764][ T6017] ? __lock_acquire+0xab9/0xd20
[ 103.796793][ T6017] ? ref_tracker_alloc+0x318/0x460
[ 103.796810][ T6017] ? __lock_acquire+0xab9/0xd20
[ 103.796845][ T6017] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 103.796865][ T6017] ? tun_get+0x1c/0x2f0
[ 103.796885][ T6017] ? tun_get+0x1c/0x2f0
[ 103.796902][ T6017] ? tun_get+0x1c/0x2f0
[ 103.796922][ T6017] tun_chr_write_iter+0x113/0x200
[ 103.796942][ T6017] vfs_write+0x5c9/0xb30
[ 103.796961][ T6017] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 103.796980][ T6017] ? __pfx_vfs_write+0x10/0x10
[ 103.796997][ T6017] ? __pfx_do_futex+0x10/0x10
[ 103.797020][ T6017] ksys_write+0x145/0x250
[ 103.797038][ T6017] ? __pfx_ksys_write+0x10/0x10
[ 103.797056][ T6017] ? do_syscall_64+0xbe/0xfa0
[ 103.797076][ T6017] do_syscall_64+0xfa/0xfa0
[ 103.797091][ T6017] ? lockdep_hardirqs_on+0x9c/0x150
[ 103.797106][ T6017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 103.797123][ T6017] ? clear_bhb_loop+0x60/0xb0
[ 103.797140][ T6017] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 103.797156][ T6017] RIP: 0033:0x7f1abcd8d97f
[ 103.797170][ T6017] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 103.797184][ T6017] RSP: 002b:00007ffd8234fcb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 103.797202][ T6017] RAX: ffffffffffffffda RBX: 00007f1abcfe5fa0 RCX: 00007f1abcd8d97f
[ 103.797214][ T6017] RDX: 0000000000011dc0 RSI: 00002000000004c0 RDI: 00000000000000c8
[ 103.797225][ T6017] RBP: 00007f1abce11f91 R08: 0000000000000000 R09: 0000000000000000
[ 103.797235][ T6017] R10: 0000000000011dc0 R11: 0000000000000293 R12: 0000000000000000
[ 103.797245][ T6017] R13: 00007f1abcfe5fa0 R14: 00007f1abcfe5fa0 R15: 0000000000000003
[ 103.797263][ T6017]
[ 103.797274][ T6017] BUG: Bad page state in process syz.0.17 pfn:75ee3
[ 104.207148][ T6017] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x75ee3
[ 104.217332][ T6017] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 104.224573][ T6017] raw: 00fff00000000000 dead000000000040 ffff888020aeb000 0000000000000000
[ 104.233242][ T6017] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000
[ 104.241975][ T6017] page dumped because: page_pool leak
[ 104.247422][ T6017] page_owner tracks the page as allocated
[ 104.253221][ T6017] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6017, tgid 6017 (syz.0.17), ts 102376669462, free_ts 101955408987
[ 104.270111][ T6017] post_alloc_hook+0x240/0x2a0
[ 104.274912][ T6017] get_page_from_freelist+0x2365/0x2440
[ 104.280521][ T6017] __alloc_frozen_pages_noprof+0x181/0x370
[ 104.286373][ T6017] alloc_pages_bulk_noprof+0x560/0x710
[ 104.291870][ T6017] __page_pool_alloc_netmems_slow+0x14c/0x710
[ 104.297986][ T6017] skb_pp_cow_data+0xb47/0x13e0
[ 104.302855][ T6017] do_xdp_generic+0x699/0x11a0
[ 104.307641][ T6017] __netif_receive_skb_core+0x18f4/0x4380
[ 104.313393][ T6017] __netif_receive_skb+0x72/0x380
[ 104.318445][ T6017] netif_receive_skb+0x1cb/0x790
[ 104.323389][ T6017] tun_rx_batched+0x1b9/0x730
[ 104.328137][ T6017] tun_get_user+0x2b65/0x3e90
[ 104.332829][ T6017] tun_chr_write_iter+0x113/0x200
[ 104.338008][ T6017] vfs_write+0x5c9/0xb30
[ 104.342278][ T6017] ksys_write+0x145/0x250
[ 104.346641][ T6017] do_syscall_64+0xfa/0xfa0
[ 104.351164][ T6017] page last free pid 23 tgid 23 stack trace:
[ 104.357219][ T6017] __free_frozen_pages+0xbc4/0xd30
[ 104.362339][ T6017] tlb_remove_table_rcu+0x85/0x100
[ 104.364188][ T5148] Bluetooth: hci0: command tx timeout
[ 104.367478][ T6017] rcu_core+0xcab/0x1770
[ 104.377062][ T6017] handle_softirqs+0x286/0x870
[ 104.381814][ T6017] run_ksoftirqd+0x9b/0x100
[ 104.386336][ T6017] smpboot_thread_fn+0x542/0xa60
[ 104.391284][ T6017] kthread+0x711/0x8a0
[ 104.395367][ T6017] ret_from_fork+0x4bc/0x870
[ 104.399960][ T6017] ret_from_fork_asm+0x1a/0x30
[ 104.404740][ T6017] Modules linked in:
[ 104.408637][ T6017] CPU: 1 UID: 0 PID: 6017 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 104.408653][ T6017] Tainted: [B]=BAD_PAGE
[ 104.408656][ T6017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 104.408662][ T6017] Call Trace:
[ 104.408666][ T6017]
[ 104.408671][ T6017] dump_stack_lvl+0x189/0x250
[ 104.408685][ T6017] ? __pfx_dump_stack_lvl+0x10/0x10
[ 104.408694][ T6017] ? __pfx_print_modules+0x10/0x10
[ 104.408706][ T6017] bad_page+0x180/0x1c0
[ 104.408720][ T6017] __free_frozen_pages+0xce2/0xd30
[ 104.408732][ T6017] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0
[ 104.408751][ T6017] bpf_xdp_adjust_tail+0x1d6/0x220
[ 104.408770][ T6017] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 104.408783][ T6017] bpf_prog_run_generic_xdp+0x606/0x13d0
[ 104.408799][ T6017] do_xdp_generic+0x9f7/0x11a0
[ 104.408810][ T6017] ? __pfx_do_xdp_generic+0x10/0x10
[ 104.408819][ T6017] ? __skb_flow_dissect+0x5ef8/0x68b0
[ 104.408842][ T6017] __netif_receive_skb_core+0x18f4/0x4380
[ 104.408855][ T6017] ? __pfx___skb_flow_dissect+0x10/0x10
[ 104.408868][ T6017] ? do_user_addr_fault+0xbbc/0x1380
[ 104.408881][ T6017] ? do_user_addr_fault+0xc85/0x1380
[ 104.408892][ T6017] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 104.408907][ T6017] ? irqentry_exit+0x74/0x90
[ 104.408917][ T6017] ? lockdep_hardirqs_on+0x9c/0x150
[ 104.408926][ T6017] ? __lock_acquire+0xab9/0xd20
[ 104.408939][ T6017] ? netif_receive_skb+0x115/0x790
[ 104.408949][ T6017] ? netif_receive_skb+0x115/0x790
[ 104.408959][ T6017] __netif_receive_skb+0x72/0x380
[ 104.408969][ T6017] ? _copy_from_iter+0x24f/0x1790
[ 104.408981][ T6017] ? netif_receive_skb+0x115/0x790
[ 104.408990][ T6017] netif_receive_skb+0x1cb/0x790
[ 104.409000][ T6017] ? __pfx___local_bh_disable_ip+0x10/0x10
[ 104.409013][ T6017] ? __pfx_netif_receive_skb+0x10/0x10
[ 104.409023][ T6017] ? __pfx__copy_from_iter+0x10/0x10
[ 104.409032][ T6017] ? sock_alloc_send_pskb+0x86b/0x980
[ 104.409042][ T6017] ? tun_rx_batched+0x160/0x730
[ 104.409053][ T6017] tun_rx_batched+0x1b9/0x730
[ 104.409064][ T6017] ? __lock_acquire+0xab9/0xd20
[ 104.409075][ T6017] ? __pfx_tun_rx_batched+0x10/0x10
[ 104.409086][ T6017] ? tun_get_user+0x272f/0x3e90
[ 104.409099][ T6017] tun_get_user+0x2b65/0x3e90
[ 104.409111][ T6017] ? tun_get_user+0x272f/0x3e90
[ 104.409122][ T6017] ? aa_file_perm+0x44d/0x1550
[ 104.409133][ T6017] ? __pfx_tun_get_user+0x10/0x10
[ 104.409144][ T6017] ? __lock_acquire+0xab9/0xd20
[ 104.409157][ T6017] ? ref_tracker_alloc+0x318/0x460
[ 104.409166][ T6017] ? __lock_acquire+0xab9/0xd20
[ 104.409177][ T6017] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 104.409186][ T6017] ? tun_get+0x1c/0x2f0
[ 104.409197][ T6017] ? tun_get+0x1c/0x2f0
[ 104.409207][ T6017] ? tun_get+0x1c/0x2f0
[ 104.409217][ T6017] tun_chr_write_iter+0x113/0x200
[ 104.409228][ T6017] vfs_write+0x5c9/0xb30
[ 104.409239][ T6017] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 104.409253][ T6017] ? __pfx_vfs_write+0x10/0x10
[ 104.409263][ T6017] ? __pfx_do_futex+0x10/0x10
[ 104.409276][ T6017] ksys_write+0x145/0x250
[ 104.409286][ T6017] ? __pfx_ksys_write+0x10/0x10
[ 104.409296][ T6017] ? do_syscall_64+0xbe/0xfa0
[ 104.409305][ T6017] do_syscall_64+0xfa/0xfa0
[ 104.409313][ T6017] ? lockdep_hardirqs_on+0x9c/0x150
[ 104.409322][ T6017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 104.409331][ T6017] ? clear_bhb_loop+0x60/0xb0
[ 104.409341][ T6017] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 104.409349][ T6017] RIP: 0033:0x7f1abcd8d97f
[ 104.409358][ T6017] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 104.409366][ T6017] RSP: 002b:00007ffd8234fcb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 104.409377][ T6017] RAX: ffffffffffffffda RBX: 00007f1abcfe5fa0 RCX: 00007f1abcd8d97f
[ 104.409384][ T6017] RDX: 0000000000011dc0 RSI: 00002000000004c0 RDI: 00000000000000c8
[ 104.409390][ T6017] RBP: 00007f1abce11f91 R08: 0000000000000000 R09: 0000000000000000
[ 104.409396][ T6017] R10: 0000000000011dc0 R11: 0000000000000293 R12: 0000000000000000
[ 104.409401][ T6017] R13: 00007f1abcfe5fa0 R14: 00007f1abcfe5fa0 R15: 0000000000000003
[ 104.409411][ T6017]
[ 104.409418][ T6017] BUG: Bad page state in process syz.0.17 pfn:327c5
[ 104.828708][ T6017] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880327c58c0 pfn:0x327c5
[ 104.838874][ T6017] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 104.846278][ T6017] raw: 00fff00000000000 dead000000000040 ffff888020aeb000 0000000000000000
[ 104.855017][ T6017] raw: ffff8880327c58c0 0000000000000001 00000000ffffffff 0000000000000000
[ 104.863653][ T6017] page dumped because: page_pool leak
[ 104.869086][ T6017] page_owner tracks the page as allocated
[ 104.874937][ T6017] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6017, tgid 6017 (syz.0.17), ts 102376659464, free_ts 101955431649
[ 104.891903][ T6017] post_alloc_hook+0x240/0x2a0
[ 104.896716][ T6017] get_page_from_freelist+0x2365/0x2440
[ 104.902266][ T6017] __alloc_frozen_pages_noprof+0x181/0x370
[ 104.908128][ T6017] alloc_pages_bulk_noprof+0x560/0x710
[ 104.913631][ T6017] __page_pool_alloc_netmems_slow+0x14c/0x710
[ 104.919840][ T6017] skb_pp_cow_data+0xb47/0x13e0
[ 104.924718][ T6017] do_xdp_generic+0x699/0x11a0
[ 104.929574][ T6017] __netif_receive_skb_core+0x18f4/0x4380
[ 104.935361][ T6017] __netif_receive_skb+0x72/0x380
[ 104.940403][ T6017] netif_receive_skb+0x1cb/0x790
[ 104.945386][ T6017] tun_rx_batched+0x1b9/0x730
[ 104.950075][ T6017] tun_get_user+0x2b65/0x3e90
[ 104.954785][ T6017] tun_chr_write_iter+0x113/0x200
[ 104.959813][ T6017] vfs_write+0x5c9/0xb30
[ 104.964091][ T6017] ksys_write+0x145/0x250
[ 104.968454][ T6017] do_syscall_64+0xfa/0xfa0
[ 104.972946][ T6017] page last free pid 23 tgid 23 stack trace:
[ 104.978946][ T6017] __free_frozen_pages+0xbc4/0xd30
[ 104.984098][ T6017] tlb_remove_table_rcu+0x85/0x100
[ 104.989315][ T6017] rcu_core+0xcab/0x1770
[ 104.993543][ T6017] handle_softirqs+0x286/0x870
[ 104.998433][ T6017] run_ksoftirqd+0x9b/0x100
[ 105.003203][ T6017] smpboot_thread_fn+0x542/0xa60
[ 105.008225][ T6017] kthread+0x711/0x8a0
[ 105.012300][ T6017] ret_from_fork+0x4bc/0x870
[ 105.017022][ T6017] ret_from_fork_asm+0x1a/0x30
[ 105.021806][ T6017] Modules linked in:
[ 105.025758][ T6017] CPU: 1 UID: 0 PID: 6017 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 105.025787][ T6017] Tainted: [B]=BAD_PAGE
[ 105.025792][ T6017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 105.025801][ T6017] Call Trace:
[ 105.025806][ T6017]
[ 105.025811][ T6017] dump_stack_lvl+0x189/0x250
[ 105.025833][ T6017] ? __pfx_dump_stack_lvl+0x10/0x10
[ 105.025848][ T6017] ? __pfx_print_modules+0x10/0x10
[ 105.025867][ T6017] bad_page+0x180/0x1c0
[ 105.025890][ T6017] __free_frozen_pages+0xce2/0xd30
[ 105.025912][ T6017] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0
[ 105.025948][ T6017] bpf_xdp_adjust_tail+0x1d6/0x220
[ 105.025979][ T6017] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 105.025993][ T6017] bpf_prog_run_generic_xdp+0x606/0x13d0
[ 105.026018][ T6017] do_xdp_generic+0x9f7/0x11a0
[ 105.026042][ T6017] ? __pfx_do_xdp_generic+0x10/0x10
[ 105.026059][ T6017] ? __skb_flow_dissect+0x5ef8/0x68b0
[ 105.026099][ T6017] __netif_receive_skb_core+0x18f4/0x4380
[ 105.026121][ T6017] ? __pfx___skb_flow_dissect+0x10/0x10
[ 105.026146][ T6017] ? do_user_addr_fault+0xbbc/0x1380
[ 105.026169][ T6017] ? do_user_addr_fault+0xc85/0x1380
[ 105.026190][ T6017] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 105.026210][ T6017] ? irqentry_exit+0x74/0x90
[ 105.026226][ T6017] ? lockdep_hardirqs_on+0x9c/0x150
[ 105.026244][ T6017] ? __lock_acquire+0xab9/0xd20
[ 105.026267][ T6017] ? netif_receive_skb+0x115/0x790
[ 105.026286][ T6017] ? netif_receive_skb+0x115/0x790
[ 105.026304][ T6017] __netif_receive_skb+0x72/0x380
[ 105.026320][ T6017] ? _copy_from_iter+0x24f/0x1790
[ 105.026340][ T6017] ? netif_receive_skb+0x115/0x790
[ 105.026354][ T6017] netif_receive_skb+0x1cb/0x790
[ 105.026371][ T6017] ? __pfx___local_bh_disable_ip+0x10/0x10
[ 105.026393][ T6017] ? __pfx_netif_receive_skb+0x10/0x10
[ 105.026411][ T6017] ? __pfx__copy_from_iter+0x10/0x10
[ 105.026429][ T6017] ? sock_alloc_send_pskb+0x86b/0x980
[ 105.026447][ T6017] ? tun_rx_batched+0x160/0x730
[ 105.026468][ T6017] tun_rx_batched+0x1b9/0x730
[ 105.026488][ T6017] ? __lock_acquire+0xab9/0xd20
[ 105.026509][ T6017] ? __pfx_tun_rx_batched+0x10/0x10
[ 105.026531][ T6017] ? tun_get_user+0x272f/0x3e90
[ 105.026554][ T6017] tun_get_user+0x2b65/0x3e90
[ 105.026577][ T6017] ? tun_get_user+0x272f/0x3e90
[ 105.026597][ T6017] ? aa_file_perm+0x44d/0x1550
[ 105.026616][ T6017] ? __pfx_tun_get_user+0x10/0x10
[ 105.026635][ T6017] ? __lock_acquire+0xab9/0xd20
[ 105.026659][ T6017] ? ref_tracker_alloc+0x318/0x460
[ 105.026675][ T6017] ? __lock_acquire+0xab9/0xd20
[ 105.026695][ T6017] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 105.026715][ T6017] ? tun_get+0x1c/0x2f0
[ 105.026735][ T6017] ? tun_get+0x1c/0x2f0
[ 105.026754][ T6017] ? tun_get+0x1c/0x2f0
[ 105.026778][ T6017] tun_chr_write_iter+0x113/0x200
[ 105.026799][ T6017] vfs_write+0x5c9/0xb30
[ 105.026817][ T6017] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 105.026837][ T6017] ? __pfx_vfs_write+0x10/0x10
[ 105.026854][ T6017] ? __pfx_do_futex+0x10/0x10
[ 105.026878][ T6017] ksys_write+0x145/0x250
[ 105.026896][ T6017] ? __pfx_ksys_write+0x10/0x10
[ 105.026914][ T6017] ? do_syscall_64+0xbe/0xfa0
[ 105.026931][ T6017] do_syscall_64+0xfa/0xfa0
[ 105.026952][ T6017] ? lockdep_hardirqs_on+0x9c/0x150
[ 105.026976][ T6017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 105.026996][ T6017] ? clear_bhb_loop+0x60/0xb0
[ 105.027014][ T6017] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 105.027034][ T6017] RIP: 0033:0x7f1abcd8d97f
[ 105.027048][ T6017] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 105.027061][ T6017] RSP: 002b:00007ffd8234fcb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 105.027080][ T6017] RAX: ffffffffffffffda RBX: 00007f1abcfe5fa0 RCX: 00007f1abcd8d97f
[ 105.027092][ T6017] RDX: 0000000000011dc0 RSI: 00002000000004c0 RDI: 00000000000000c8
[ 105.027103][ T6017] RBP: 00007f1abce11f91 R08: 0000000000000000 R09: 0000000000000000
[ 105.027114][ T6017] R10: 0000000000011dc0 R11: 0000000000000293 R12: 0000000000000000
[ 105.027123][ T6017] R13: 00007f1abcfe5fa0 R14: 00007f1abcfe5fa0 R15: 0000000000000003
[ 105.027141][ T6017]
[ 105.027151][ T6017] BUG: Bad page state in process syz.0.17 pfn:77c31
[ 105.439761][ T6017] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x77c31
[ 105.450043][ T6017] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 105.457296][ T6017] raw: 00fff00000000000 dead000000000040 ffff888020aeb000 0000000000000000
[ 105.466004][ T6017] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000
[ 105.474606][ T6017] page dumped because: page_pool leak
[ 105.479963][ T6017] page_owner tracks the page as allocated
[ 105.485803][ T6017] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6017, tgid 6017 (syz.0.17), ts 102376649558, free_ts 101955458047
[ 105.502751][ T6017] post_alloc_hook+0x240/0x2a0
[ 105.507544][ T6017] get_page_from_freelist+0x2365/0x2440
[ 105.513095][ T6017] __alloc_frozen_pages_noprof+0x181/0x370
[ 105.518950][ T6017] alloc_pages_bulk_noprof+0x560/0x710
[ 105.524445][ T6017] __page_pool_alloc_netmems_slow+0x14c/0x710
[ 105.530590][ T6017] skb_pp_cow_data+0xb47/0x13e0
[ 105.535468][ T6017] do_xdp_generic+0x699/0x11a0
[ 105.540228][ T6017] __netif_receive_skb_core+0x18f4/0x4380
[ 105.545972][ T6017] __netif_receive_skb+0x72/0x380
[ 105.550997][ T6017] netif_receive_skb+0x1cb/0x790
[ 105.555959][ T6017] tun_rx_batched+0x1b9/0x730
[ 105.560639][ T6017] tun_get_user+0x2b65/0x3e90
[ 105.565326][ T6017] tun_chr_write_iter+0x113/0x200
[ 105.570354][ T6017] vfs_write+0x5c9/0xb30
[ 105.574608][ T6017] ksys_write+0x145/0x250
[ 105.578934][ T6017] do_syscall_64+0xfa/0xfa0
[ 105.583418][ T6017] page last free pid 23 tgid 23 stack trace:
[ 105.589415][ T6017] __free_frozen_pages+0xbc4/0xd30
[ 105.594549][ T6017] tlb_remove_table_rcu+0x85/0x100
[ 105.599645][ T6017] rcu_core+0xcab/0x1770
[ 105.603869][ T6017] handle_softirqs+0x286/0x870
[ 105.608645][ T6017] run_ksoftirqd+0x9b/0x100
[ 105.613150][ T6017] smpboot_thread_fn+0x542/0xa60
[ 105.618195][ T6017] kthread+0x711/0x8a0
[ 105.622288][ T6017] ret_from_fork+0x4bc/0x870
[ 105.626899][ T6017] ret_from_fork_asm+0x1a/0x30
[ 105.631683][ T6017] Modules linked in:
[ 105.635632][ T6017] CPU: 1 UID: 0 PID: 6017 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 105.635664][ T6017] Tainted: [B]=BAD_PAGE
[ 105.635671][ T6017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 105.635681][ T6017] Call Trace:
[ 105.635691][ T6017]
[ 105.635699][ T6017] dump_stack_lvl+0x189/0x250
[ 105.635720][ T6017] ? __pfx_dump_stack_lvl+0x10/0x10
[ 105.635733][ T6017] ? __pfx_print_modules+0x10/0x10
[ 105.635751][ T6017] bad_page+0x180/0x1c0
[ 105.635772][ T6017] __free_frozen_pages+0xce2/0xd30
[ 105.635790][ T6017] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0
[ 105.635816][ T6017] bpf_xdp_adjust_tail+0x1d6/0x220
[ 105.635842][ T6017] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 105.635856][ T6017] bpf_prog_run_generic_xdp+0x606/0x13d0
[ 105.635885][ T6017] do_xdp_generic+0x9f7/0x11a0
[ 105.635906][ T6017] ? __pfx_do_xdp_generic+0x10/0x10
[ 105.635921][ T6017] ? __skb_flow_dissect+0x5ef8/0x68b0
[ 105.635964][ T6017] __netif_receive_skb_core+0x18f4/0x4380
[ 105.635986][ T6017] ? __pfx___skb_flow_dissect+0x10/0x10
[ 105.636012][ T6017] ? do_user_addr_fault+0xbbc/0x1380
[ 105.636036][ T6017] ? do_user_addr_fault+0xc85/0x1380
[ 105.636057][ T6017] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 105.636090][ T6017] ? irqentry_exit+0x74/0x90
[ 105.636104][ T6017] ? lockdep_hardirqs_on+0x9c/0x150
[ 105.636119][ T6017] ? __lock_acquire+0xab9/0xd20
[ 105.636141][ T6017] ? netif_receive_skb+0x115/0x790
[ 105.636159][ T6017] ? netif_receive_skb+0x115/0x790
[ 105.636178][ T6017] __netif_receive_skb+0x72/0x380
[ 105.636197][ T6017] ? _copy_from_iter+0x24f/0x1790
[ 105.636217][ T6017] ? netif_receive_skb+0x115/0x790
[ 105.636235][ T6017] netif_receive_skb+0x1cb/0x790
[ 105.636252][ T6017] ? __pfx___local_bh_disable_ip+0x10/0x10
[ 105.636271][ T6017] ? __pfx_netif_receive_skb+0x10/0x10
[ 105.636288][ T6017] ? __pfx__copy_from_iter+0x10/0x10
[ 105.636302][ T6017] ? sock_alloc_send_pskb+0x86b/0x980
[ 105.636320][ T6017] ? tun_rx_batched+0x160/0x730
[ 105.636341][ T6017] tun_rx_batched+0x1b9/0x730
[ 105.636360][ T6017] ? __lock_acquire+0xab9/0xd20
[ 105.636381][ T6017] ? __pfx_tun_rx_batched+0x10/0x10
[ 105.636402][ T6017] ? tun_get_user+0x272f/0x3e90
[ 105.636426][ T6017] tun_get_user+0x2b65/0x3e90
[ 105.636455][ T6017] ? tun_get_user+0x272f/0x3e90
[ 105.636479][ T6017] ? aa_file_perm+0x44d/0x1550
[ 105.636499][ T6017] ? __pfx_tun_get_user+0x10/0x10
[ 105.636520][ T6017] ? __lock_acquire+0xab9/0xd20
[ 105.636543][ T6017] ? ref_tracker_alloc+0x318/0x460
[ 105.636558][ T6017] ? __lock_acquire+0xab9/0xd20
[ 105.636578][ T6017] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 105.636596][ T6017] ? tun_get+0x1c/0x2f0
[ 105.636616][ T6017] ? tun_get+0x1c/0x2f0
[ 105.636634][ T6017] ? tun_get+0x1c/0x2f0
[ 105.636696][ T6017] tun_chr_write_iter+0x113/0x200
[ 105.636718][ T6017] vfs_write+0x5c9/0xb30
[ 105.636736][ T6017] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 105.636756][ T6017] ? __pfx_vfs_write+0x10/0x10
[ 105.636773][ T6017] ? __pfx_do_futex+0x10/0x10
[ 105.636797][ T6017] ksys_write+0x145/0x250
[ 105.636815][ T6017] ? __pfx_ksys_write+0x10/0x10
[ 105.636833][ T6017] ? do_syscall_64+0xbe/0xfa0
[ 105.636849][ T6017] do_syscall_64+0xfa/0xfa0
[ 105.636865][ T6017] ? lockdep_hardirqs_on+0x9c/0x150
[ 105.636881][ T6017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 105.636897][ T6017] ? clear_bhb_loop+0x60/0xb0
[ 105.636913][ T6017] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 105.636928][ T6017] RIP: 0033:0x7f1abcd8d97f
[ 105.636943][ T6017] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 105.636956][ T6017] RSP: 002b:00007ffd8234fcb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 105.636975][ T6017] RAX: ffffffffffffffda RBX: 00007f1abcfe5fa0 RCX: 00007f1abcd8d97f
[ 105.636987][ T6017] RDX: 0000000000011dc0 RSI: 00002000000004c0 RDI: 00000000000000c8
[ 105.636998][ T6017] RBP: 00007f1abce11f91 R08: 0000000000000000 R09: 0000000000000000
[ 105.637008][ T6017] R10: 0000000000011dc0 R11: 0000000000000293 R12: 0000000000000000
[ 105.637018][ T6017] R13: 00007f1abcfe5fa0 R14: 00007f1abcfe5fa0 R15: 0000000000000003
[ 105.637037][ T6017]
[ 105.637047][ T6017] BUG: Bad page state in process syz.0.17 pfn:7f880
[ 106.051626][ T6017] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x7f880
[ 106.061727][ T6017] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 106.068864][ T6017] raw: 00fff00000000000 dead000000000040 ffff888020aeb000 0000000000000000
[ 106.077500][ T6017] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000
[ 106.086117][ T6017] page dumped because: page_pool leak
[ 106.091488][ T6017] page_owner tracks the page as allocated
[ 106.097237][ T6017] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6017, tgid 6017 (syz.0.17), ts 102376639585, free_ts 101955470686
[ 106.114146][ T6017] post_alloc_hook+0x240/0x2a0
[ 106.118922][ T6017] get_page_from_freelist+0x2365/0x2440
[ 106.124511][ T6017] __alloc_frozen_pages_noprof+0x181/0x370
[ 106.130338][ T6017] alloc_pages_bulk_noprof+0x560/0x710
[ 106.135861][ T6017] __page_pool_alloc_netmems_slow+0x14c/0x710
[ 106.142004][ T6017] skb_pp_cow_data+0xb47/0x13e0
[ 106.147526][ T6017] do_xdp_generic+0x699/0x11a0
[ 106.152392][ T6017] __netif_receive_skb_core+0x18f4/0x4380
[ 106.158209][ T6017] __netif_receive_skb+0x72/0x380
[ 106.163255][ T6017] netif_receive_skb+0x1cb/0x790
[ 106.168302][ T6017] tun_rx_batched+0x1b9/0x730
[ 106.172998][ T6017] tun_get_user+0x2b65/0x3e90
[ 106.177743][ T6017] tun_chr_write_iter+0x113/0x200
[ 106.182778][ T6017] vfs_write+0x5c9/0xb30
[ 106.187071][ T6017] ksys_write+0x145/0x250
[ 106.191420][ T6017] do_syscall_64+0xfa/0xfa0
[ 106.195969][ T6017] page last free pid 23 tgid 23 stack trace:
[ 106.201947][ T6017] __free_frozen_pages+0xbc4/0xd30
[ 106.207099][ T6017] tlb_remove_table_rcu+0x85/0x100
[ 106.212217][ T6017] rcu_core+0xcab/0x1770
[ 106.216488][ T6017] handle_softirqs+0x286/0x870
[ 106.221251][ T6017] run_ksoftirqd+0x9b/0x100
[ 106.225778][ T6017] smpboot_thread_fn+0x542/0xa60
[ 106.230751][ T6017] kthread+0x711/0x8a0
[ 106.234871][ T6017] ret_from_fork+0x4bc/0x870
[ 106.239462][ T6017] ret_from_fork_asm+0x1a/0x30
[ 106.244336][ T6017] Modules linked in:
[ 106.248228][ T6017] CPU: 1 UID: 0 PID: 6017 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 106.248243][ T6017] Tainted: [B]=BAD_PAGE
[ 106.248246][ T6017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 106.248252][ T6017] Call Trace:
[ 106.248256][ T6017]
[ 106.248261][ T6017] dump_stack_lvl+0x189/0x250
[ 106.248274][ T6017] ? __pfx_dump_stack_lvl+0x10/0x10
[ 106.248284][ T6017] ? __pfx_print_modules+0x10/0x10
[ 106.248296][ T6017] bad_page+0x180/0x1c0
[ 106.248310][ T6017] __free_frozen_pages+0xce2/0xd30
[ 106.248321][ T6017] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0
[ 106.248336][ T6017] bpf_xdp_adjust_tail+0x1d6/0x220
[ 106.248351][ T6017] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 106.248360][ T6017] bpf_prog_run_generic_xdp+0x606/0x13d0
[ 106.248375][ T6017] do_xdp_generic+0x9f7/0x11a0
[ 106.248387][ T6017] ? __pfx_do_xdp_generic+0x10/0x10
[ 106.248396][ T6017] ? __skb_flow_dissect+0x5ef8/0x68b0
[ 106.248415][ T6017] __netif_receive_skb_core+0x18f4/0x4380
[ 106.248427][ T6017] ? __pfx___skb_flow_dissect+0x10/0x10
[ 106.248441][ T6017] ? do_user_addr_fault+0xbbc/0x1380
[ 106.248454][ T6017] ? do_user_addr_fault+0xc85/0x1380
[ 106.248465][ T6017] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 106.248477][ T6017] ? irqentry_exit+0x74/0x90
[ 106.248486][ T6017] ? lockdep_hardirqs_on+0x9c/0x150
[ 106.248496][ T6017] ? __lock_acquire+0xab9/0xd20
[ 106.248508][ T6017] ? netif_receive_skb+0x115/0x790
[ 106.248521][ T6017] ? netif_receive_skb+0x115/0x790
[ 106.248533][ T6017] __netif_receive_skb+0x72/0x380
[ 106.248543][ T6017] ? _copy_from_iter+0x24f/0x1790
[ 106.248558][ T6017] ? netif_receive_skb+0x115/0x790
[ 106.248568][ T6017] netif_receive_skb+0x1cb/0x790
[ 106.248578][ T6017] ? __pfx___local_bh_disable_ip+0x10/0x10
[ 106.248590][ T6017] ? __pfx_netif_receive_skb+0x10/0x10
[ 106.248600][ T6017] ? __pfx__copy_from_iter+0x10/0x10
[ 106.248610][ T6017] ? sock_alloc_send_pskb+0x86b/0x980
[ 106.248619][ T6017] ? tun_rx_batched+0x160/0x730
[ 106.248631][ T6017] tun_rx_batched+0x1b9/0x730
[ 106.248641][ T6017] ? __lock_acquire+0xab9/0xd20
[ 106.248652][ T6017] ? __pfx_tun_rx_batched+0x10/0x10
[ 106.248663][ T6017] ? tun_get_user+0x272f/0x3e90
[ 106.248676][ T6017] tun_get_user+0x2b65/0x3e90
[ 106.248689][ T6017] ? tun_get_user+0x272f/0x3e90
[ 106.248700][ T6017] ? aa_file_perm+0x44d/0x1550
[ 106.248711][ T6017] ? __pfx_tun_get_user+0x10/0x10
[ 106.248722][ T6017] ? __lock_acquire+0xab9/0xd20
[ 106.248735][ T6017] ? ref_tracker_alloc+0x318/0x460
[ 106.248744][ T6017] ? __lock_acquire+0xab9/0xd20
[ 106.248755][ T6017] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 106.248765][ T6017] ? tun_get+0x1c/0x2f0
[ 106.248775][ T6017] ? tun_get+0x1c/0x2f0
[ 106.248785][ T6017] ? tun_get+0x1c/0x2f0
[ 106.248795][ T6017] tun_chr_write_iter+0x113/0x200
[ 106.248806][ T6017] vfs_write+0x5c9/0xb30
[ 106.248817][ T6017] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 106.248832][ T6017] ? __pfx_vfs_write+0x10/0x10
[ 106.248845][ T6017] ? __pfx_do_futex+0x10/0x10
[ 106.248863][ T6017] ksys_write+0x145/0x250
[ 106.248873][ T6017] ? __pfx_ksys_write+0x10/0x10
[ 106.248883][ T6017] ? do_syscall_64+0xbe/0xfa0
[ 106.248892][ T6017] do_syscall_64+0xfa/0xfa0
[ 106.248901][ T6017] ? lockdep_hardirqs_on+0x9c/0x150
[ 106.248916][ T6017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 106.248925][ T6017] ? clear_bhb_loop+0x60/0xb0
[ 106.248934][ T6017] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 106.248943][ T6017] RIP: 0033:0x7f1abcd8d97f
[ 106.248952][ T6017] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 106.248961][ T6017] RSP: 002b:00007ffd8234fcb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 106.248971][ T6017] RAX: ffffffffffffffda RBX: 00007f1abcfe5fa0 RCX: 00007f1abcd8d97f
[ 106.248978][ T6017] RDX: 0000000000011dc0 RSI: 00002000000004c0 RDI: 00000000000000c8
[ 106.248984][ T6017] RBP: 00007f1abce11f91 R08: 0000000000000000 R09: 0000000000000000
[ 106.248990][ T6017] R10: 0000000000011dc0 R11: 0000000000000293 R12: 0000000000000000
[ 106.248996][ T6017] R13: 00007f1abcfe5fa0 R14: 00007f1abcfe5fa0 R15: 0000000000000003
[ 106.249005][ T6017]
[ 106.249013][ T6017] BUG: Bad page state in process syz.0.17 pfn:758a4
[ 106.444250][ T5148] Bluetooth: hci0: command tx timeout
[ 106.446548][ T6017] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880758a4000 pfn:0x758a4
[ 106.676369][ T6017] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 106.683562][ T6017] raw: 00fff00000000000 dead000000000040 ffff888020aeb000 0000000000000000
[ 106.692301][ T6017] raw: ffff8880758a4000 0000000000000001 00000000ffffffff 0000000000000000
[ 106.701071][ T6017] page dumped because: page_pool leak
[ 106.706494][ T6017] page_owner tracks the page as allocated
[ 106.712220][ T6017] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6017, tgid 6017 (syz.0.17), ts 102376629515, free_ts 101955483764
[ 106.729098][ T6017] post_alloc_hook+0x240/0x2a0
[ 106.734146][ T6017] get_page_from_freelist+0x2365/0x2440
[ 106.739710][ T6017] __alloc_frozen_pages_noprof+0x181/0x370
[ 106.745555][ T6017] alloc_pages_bulk_noprof+0x560/0x710
[ 106.751031][ T6017] __page_pool_alloc_netmems_slow+0x14c/0x710
[ 106.757128][ T6017] skb_pp_cow_data+0xb47/0x13e0
[ 106.762007][ T6017] do_xdp_generic+0x699/0x11a0
[ 106.766809][ T6017] __netif_receive_skb_core+0x18f4/0x4380
[ 106.772551][ T6017] __netif_receive_skb+0x72/0x380
[ 106.777661][ T6017] netif_receive_skb+0x1cb/0x790
[ 106.782635][ T6017] tun_rx_batched+0x1b9/0x730
[ 106.787348][ T6017] tun_get_user+0x2b65/0x3e90
[ 106.792025][ T6017] tun_chr_write_iter+0x113/0x200
[ 106.797125][ T6017] vfs_write+0x5c9/0xb30
[ 106.801365][ T6017] ksys_write+0x145/0x250
[ 106.805713][ T6017] do_syscall_64+0xfa/0xfa0
[ 106.810217][ T6017] page last free pid 23 tgid 23 stack trace:
[ 106.816218][ T6017] __free_frozen_pages+0xbc4/0xd30
[ 106.821341][ T6017] rcu_core+0xcab/0x1770
[ 106.825619][ T6017] handle_softirqs+0x286/0x870
[ 106.830414][ T6017] run_ksoftirqd+0x9b/0x100
[ 106.834933][ T6017] smpboot_thread_fn+0x542/0xa60
[ 106.839871][ T6017] kthread+0x711/0x8a0
[ 106.843919][ T6017] ret_from_fork+0x4bc/0x870
[ 106.848526][ T6017] ret_from_fork_asm+0x1a/0x30
[ 106.853305][ T6017] Modules linked in:
[ 106.857583][ T6017] CPU: 1 UID: 0 PID: 6017 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 106.857608][ T6017] Tainted: [B]=BAD_PAGE
[ 106.857613][ T6017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 106.857623][ T6017] Call Trace:
[ 106.857632][ T6017]
[ 106.857641][ T6017] dump_stack_lvl+0x189/0x250
[ 106.857664][ T6017] ? __pfx_dump_stack_lvl+0x10/0x10
[ 106.857679][ T6017] ? __pfx_print_modules+0x10/0x10
[ 106.857696][ T6017] bad_page+0x180/0x1c0
[ 106.857717][ T6017] __free_frozen_pages+0xce2/0xd30
[ 106.857735][ T6017] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0
[ 106.857759][ T6017] bpf_xdp_adjust_tail+0x1d6/0x220
[ 106.857781][ T6017] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 106.857795][ T6017] bpf_prog_run_generic_xdp+0x606/0x13d0
[ 106.857822][ T6017] do_xdp_generic+0x9f7/0x11a0
[ 106.857843][ T6017] ? __pfx_do_xdp_generic+0x10/0x10
[ 106.857859][ T6017] ? __skb_flow_dissect+0x5ef8/0x68b0
[ 106.857894][ T6017] __netif_receive_skb_core+0x18f4/0x4380
[ 106.857916][ T6017] ? __pfx___skb_flow_dissect+0x10/0x10
[ 106.857939][ T6017] ? do_user_addr_fault+0xbbc/0x1380
[ 106.857962][ T6017] ? do_user_addr_fault+0xc85/0x1380
[ 106.857984][ T6017] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 106.858010][ T6017] ? irqentry_exit+0x74/0x90
[ 106.858028][ T6017] ? lockdep_hardirqs_on+0x9c/0x150
[ 106.858046][ T6017] ? __lock_acquire+0xab9/0xd20
[ 106.858070][ T6017] ? netif_receive_skb+0x115/0x790
[ 106.858088][ T6017] ? netif_receive_skb+0x115/0x790
[ 106.858107][ T6017] __netif_receive_skb+0x72/0x380
[ 106.858126][ T6017] ? _copy_from_iter+0x24f/0x1790
[ 106.858147][ T6017] ? netif_receive_skb+0x115/0x790
[ 106.858164][ T6017] netif_receive_skb+0x1cb/0x790
[ 106.858182][ T6017] ? __pfx___local_bh_disable_ip+0x10/0x10
[ 106.858204][ T6017] ? __pfx_netif_receive_skb+0x10/0x10
[ 106.858221][ T6017] ? __pfx__copy_from_iter+0x10/0x10
[ 106.858236][ T6017] ? sock_alloc_send_pskb+0x86b/0x980
[ 106.858251][ T6017] ? tun_rx_batched+0x160/0x730
[ 106.858269][ T6017] tun_rx_batched+0x1b9/0x730
[ 106.858286][ T6017] ? __lock_acquire+0xab9/0xd20
[ 106.858307][ T6017] ? __pfx_tun_rx_batched+0x10/0x10
[ 106.858327][ T6017] ? tun_get_user+0x272f/0x3e90
[ 106.858351][ T6017] tun_get_user+0x2b65/0x3e90
[ 106.858375][ T6017] ? tun_get_user+0x272f/0x3e90
[ 106.858396][ T6017] ? aa_file_perm+0x44d/0x1550
[ 106.858415][ T6017] ? __pfx_tun_get_user+0x10/0x10
[ 106.858436][ T6017] ? __lock_acquire+0xab9/0xd20
[ 106.858460][ T6017] ? ref_tracker_alloc+0x318/0x460
[ 106.858477][ T6017] ? __lock_acquire+0xab9/0xd20
[ 106.858496][ T6017] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 106.858514][ T6017] ? tun_get+0x1c/0x2f0
[ 106.858533][ T6017] ? tun_get+0x1c/0x2f0
[ 106.858551][ T6017] ? tun_get+0x1c/0x2f0
[ 106.858581][ T6017] tun_chr_write_iter+0x113/0x200
[ 106.858601][ T6017] vfs_write+0x5c9/0xb30
[ 106.858619][ T6017] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 106.858639][ T6017] ? __pfx_vfs_write+0x10/0x10
[ 106.858656][ T6017] ? __pfx_do_futex+0x10/0x10
[ 106.858679][ T6017] ksys_write+0x145/0x250
[ 106.858697][ T6017] ? __pfx_ksys_write+0x10/0x10
[ 106.858719][ T6017] ? do_syscall_64+0xbe/0xfa0
[ 106.858737][ T6017] do_syscall_64+0xfa/0xfa0
[ 106.858752][ T6017] ? lockdep_hardirqs_on+0x9c/0x150
[ 106.858767][ T6017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 106.858783][ T6017] ? clear_bhb_loop+0x60/0xb0
[ 106.858801][ T6017] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 106.858816][ T6017] RIP: 0033:0x7f1abcd8d97f
[ 106.858830][ T6017] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 106.858843][ T6017] RSP: 002b:00007ffd8234fcb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 106.858861][ T6017] RAX: ffffffffffffffda RBX: 00007f1abcfe5fa0 RCX: 00007f1abcd8d97f
[ 106.858874][ T6017] RDX: 0000000000011dc0 RSI: 00002000000004c0 RDI: 00000000000000c8
[ 106.858885][ T6017] RBP: 00007f1abce11f91 R08: 0000000000000000 R09: 0000000000000000
[ 106.858895][ T6017] R10: 0000000000011dc0 R11: 0000000000000293 R12: 0000000000000000
[ 106.858905][ T6017] R13: 00007f1abcfe5fa0 R14: 00007f1abcfe5fa0 R15: 0000000000000003
[ 106.858923][ T6017]
[ 106.858933][ T6017] BUG: Bad page state in process syz.0.17 pfn:23716
[ 107.269717][ T6017] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888023716cc0 pfn:0x23716
[ 107.279794][ T6017] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 107.286934][ T6017] raw: 00fff00000000000 dead000000000040 ffff888020aeb000 0000000000000000
[ 107.295534][ T6017] raw: ffff888023716cc0 0000000000000001 00000000ffffffff 0000000000000000
[ 107.304137][ T6017] page dumped because: page_pool leak
[ 107.309499][ T6017] page_owner tracks the page as allocated
[ 107.315228][ T6017] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6017, tgid 6017 (syz.0.17), ts 102376618810, free_ts 101957268766
[ 107.332101][ T6017] post_alloc_hook+0x240/0x2a0
[ 107.336890][ T6017] get_page_from_freelist+0x2365/0x2440
[ 107.342453][ T6017] __alloc_frozen_pages_noprof+0x181/0x370
[ 107.348304][ T6017] alloc_pages_bulk_noprof+0x560/0x710
[ 107.353780][ T6017] __page_pool_alloc_netmems_slow+0x14c/0x710
[ 107.359899][ T6017] skb_pp_cow_data+0xb47/0x13e0
[ 107.364801][ T6017] do_xdp_generic+0x699/0x11a0
[ 107.369739][ T6017] __netif_receive_skb_core+0x18f4/0x4380
[ 107.375509][ T6017] __netif_receive_skb+0x72/0x380
[ 107.380551][ T6017] netif_receive_skb+0x1cb/0x790
[ 107.385639][ T6017] tun_rx_batched+0x1b9/0x730
[ 107.390324][ T6017] tun_get_user+0x2b65/0x3e90
[ 107.395042][ T6017] tun_chr_write_iter+0x113/0x200
[ 107.400077][ T6017] vfs_write+0x5c9/0xb30
[ 107.404373][ T6017] ksys_write+0x145/0x250
[ 107.408738][ T6017] do_syscall_64+0xfa/0xfa0
[ 107.413252][ T6017] page last free pid 23 tgid 23 stack trace:
[ 107.419361][ T6017] __free_frozen_pages+0xbc4/0xd30
[ 107.424528][ T6017] rcu_core+0xcab/0x1770
[ 107.428802][ T6017] handle_softirqs+0x286/0x870
[ 107.433656][ T6017] run_ksoftirqd+0x9b/0x100
[ 107.438252][ T6017] smpboot_thread_fn+0x542/0xa60
[ 107.443221][ T6017] kthread+0x711/0x8a0
[ 107.447328][ T6017] ret_from_fork+0x4bc/0x870
[ 107.452196][ T6017] ret_from_fork_asm+0x1a/0x30
[ 107.457032][ T6017] Modules linked in:
[ 107.461033][ T6017] CPU: 1 UID: 0 PID: 6017 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 107.461050][ T6017] Tainted: [B]=BAD_PAGE
[ 107.461054][ T6017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 107.461060][ T6017] Call Trace:
[ 107.461066][ T6017]
[ 107.461071][ T6017] dump_stack_lvl+0x189/0x250
[ 107.461087][ T6017] ? __pfx_dump_stack_lvl+0x10/0x10
[ 107.461096][ T6017] ? __pfx_print_modules+0x10/0x10
[ 107.461109][ T6017] bad_page+0x180/0x1c0
[ 107.461123][ T6017] __free_frozen_pages+0xce2/0xd30
[ 107.461135][ T6017] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0
[ 107.461150][ T6017] bpf_xdp_adjust_tail+0x1d6/0x220
[ 107.461165][ T6017] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 107.461173][ T6017] bpf_prog_run_generic_xdp+0x606/0x13d0
[ 107.461189][ T6017] do_xdp_generic+0x9f7/0x11a0
[ 107.461201][ T6017] ? __pfx_do_xdp_generic+0x10/0x10
[ 107.461210][ T6017] ? __skb_flow_dissect+0x5ef8/0x68b0
[ 107.461230][ T6017] __netif_receive_skb_core+0x18f4/0x4380
[ 107.461242][ T6017] ? __pfx___skb_flow_dissect+0x10/0x10
[ 107.461256][ T6017] ? do_user_addr_fault+0xbbc/0x1380
[ 107.461269][ T6017] ? do_user_addr_fault+0xc85/0x1380
[ 107.461281][ T6017] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 107.461292][ T6017] ? irqentry_exit+0x74/0x90
[ 107.461302][ T6017] ? lockdep_hardirqs_on+0x9c/0x150
[ 107.461311][ T6017] ? __lock_acquire+0xab9/0xd20
[ 107.461324][ T6017] ? netif_receive_skb+0x115/0x790
[ 107.461335][ T6017] ? netif_receive_skb+0x115/0x790
[ 107.461345][ T6017] __netif_receive_skb+0x72/0x380
[ 107.461355][ T6017] ? _copy_from_iter+0x24f/0x1790
[ 107.461368][ T6017] ? netif_receive_skb+0x115/0x790
[ 107.461377][ T6017] netif_receive_skb+0x1cb/0x790
[ 107.461387][ T6017] ? __pfx___local_bh_disable_ip+0x10/0x10
[ 107.461399][ T6017] ? __pfx_netif_receive_skb+0x10/0x10
[ 107.461410][ T6017] ? __pfx__copy_from_iter+0x10/0x10
[ 107.461419][ T6017] ? sock_alloc_send_pskb+0x86b/0x980
[ 107.461429][ T6017] ? tun_rx_batched+0x160/0x730
[ 107.461441][ T6017] tun_rx_batched+0x1b9/0x730
[ 107.461451][ T6017] ? __lock_acquire+0xab9/0xd20
[ 107.461462][ T6017] ? __pfx_tun_rx_batched+0x10/0x10
[ 107.461473][ T6017] ? tun_get_user+0x272f/0x3e90
[ 107.461486][ T6017] tun_get_user+0x2b65/0x3e90
[ 107.461499][ T6017] ? tun_get_user+0x272f/0x3e90
[ 107.461510][ T6017] ? aa_file_perm+0x44d/0x1550
[ 107.461521][ T6017] ? __pfx_tun_get_user+0x10/0x10
[ 107.461532][ T6017] ? __lock_acquire+0xab9/0xd20
[ 107.461544][ T6017] ? ref_tracker_alloc+0x318/0x460
[ 107.461554][ T6017] ? __lock_acquire+0xab9/0xd20
[ 107.461655][ T6017] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 107.461667][ T6017] ? tun_get+0x1c/0x2f0
[ 107.461679][ T6017] ? tun_get+0x1c/0x2f0
[ 107.461689][ T6017] ? tun_get+0x1c/0x2f0
[ 107.461700][ T6017] tun_chr_write_iter+0x113/0x200
[ 107.461712][ T6017] vfs_write+0x5c9/0xb30
[ 107.461724][ T6017] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 107.461735][ T6017] ? __pfx_vfs_write+0x10/0x10
[ 107.461744][ T6017] ? __pfx_do_futex+0x10/0x10
[ 107.461758][ T6017] ksys_write+0x145/0x250
[ 107.461768][ T6017] ? __pfx_ksys_write+0x10/0x10
[ 107.461779][ T6017] ? do_syscall_64+0xbe/0xfa0
[ 107.461796][ T6017] do_syscall_64+0xfa/0xfa0
[ 107.461805][ T6017] ? lockdep_hardirqs_on+0x9c/0x150
[ 107.461814][ T6017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 107.461823][ T6017] ? clear_bhb_loop+0x60/0xb0
[ 107.461833][ T6017] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 107.461842][ T6017] RIP: 0033:0x7f1abcd8d97f
[ 107.461853][ T6017] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 107.461861][ T6017] RSP: 002b:00007ffd8234fcb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 107.461873][ T6017] RAX: ffffffffffffffda RBX: 00007f1abcfe5fa0 RCX: 00007f1abcd8d97f
[ 107.461880][ T6017] RDX: 0000000000011dc0 RSI: 00002000000004c0 RDI: 00000000000000c8
[ 107.461886][ T6017] RBP: 00007f1abce11f91 R08: 0000000000000000 R09: 0000000000000000
[ 107.461892][ T6017] R10: 0000000000011dc0 R11: 0000000000000293 R12: 0000000000000000
[ 107.461898][ T6017] R13: 00007f1abcfe5fa0 R14: 00007f1abcfe5fa0 R15: 0000000000000003
[ 107.461908][ T6017]
[ 107.461924][ T6017] BUG: Bad page state in process syz.0.17 pfn:71eb1
[ 107.872844][ T6017] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888071eb1000 pfn:0x71eb1
[ 107.883041][ T6017] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 107.890197][ T6017] raw: 00fff00000000000 dead000000000040 ffff888020aeb000 0000000000000000
[ 107.898998][ T6017] raw: ffff888071eb1000 0000000000000001 00000000ffffffff 0000000000000000
[ 107.908804][ T6017] page dumped because: page_pool leak
[ 107.914427][ T6017] page_owner tracks the page as allocated
[ 107.920279][ T6017] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6017, tgid 6017 (syz.0.17), ts 102376608898, free_ts 101957282730
[ 107.937294][ T6017] post_alloc_hook+0x240/0x2a0
[ 107.942079][ T6017] get_page_from_freelist+0x2365/0x2440
[ 107.947696][ T6017] __alloc_frozen_pages_noprof+0x181/0x370
[ 107.953509][ T6017] alloc_pages_bulk_noprof+0x560/0x710
[ 107.959005][ T6017] __page_pool_alloc_netmems_slow+0x14c/0x710
[ 107.965098][ T6017] skb_pp_cow_data+0xb47/0x13e0
[ 107.969950][ T6017] do_xdp_generic+0x699/0x11a0
[ 107.974734][ T6017] __netif_receive_skb_core+0x18f4/0x4380
[ 107.980459][ T6017] __netif_receive_skb+0x72/0x380
[ 107.985503][ T6017] netif_receive_skb+0x1cb/0x790
[ 107.990530][ T6017] tun_rx_batched+0x1b9/0x730
[ 107.995259][ T6017] tun_get_user+0x2b65/0x3e90
[ 107.999966][ T6017] tun_chr_write_iter+0x113/0x200
[ 108.005203][ T6017] vfs_write+0x5c9/0xb30
[ 108.009463][ T6017] ksys_write+0x145/0x250
[ 108.014001][ T6017] do_syscall_64+0xfa/0xfa0
[ 108.018561][ T6017] page last free pid 23 tgid 23 stack trace:
[ 108.024565][ T6017] __free_frozen_pages+0xbc4/0xd30
[ 108.029842][ T6017] rcu_core+0xcab/0x1770
[ 108.034116][ T6017] handle_softirqs+0x286/0x870
[ 108.038888][ T6017] run_ksoftirqd+0x9b/0x100
[ 108.043470][ T6017] smpboot_thread_fn+0x542/0xa60
[ 108.048520][ T6017] kthread+0x711/0x8a0
[ 108.052590][ T6017] ret_from_fork+0x4bc/0x870
[ 108.057329][ T6017] ret_from_fork_asm+0x1a/0x30
[ 108.062093][ T6017] Modules linked in:
[ 108.066182][ T6017] CPU: 1 UID: 0 PID: 6017 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 108.066205][ T6017] Tainted: [B]=BAD_PAGE
[ 108.066210][ T6017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 108.066218][ T6017] Call Trace:
[ 108.066224][ T6017]
[ 108.066230][ T6017] dump_stack_lvl+0x189/0x250
[ 108.066251][ T6017] ? __pfx_dump_stack_lvl+0x10/0x10
[ 108.066266][ T6017] ? __pfx_print_modules+0x10/0x10
[ 108.066284][ T6017] bad_page+0x180/0x1c0
[ 108.066306][ T6017] __free_frozen_pages+0xce2/0xd30
[ 108.066329][ T6017] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0
[ 108.066356][ T6017] bpf_xdp_adjust_tail+0x1d6/0x220
[ 108.066383][ T6017] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 108.066398][ T6017] bpf_prog_run_generic_xdp+0x606/0x13d0
[ 108.066427][ T6017] do_xdp_generic+0x9f7/0x11a0
[ 108.066453][ T6017] ? __pfx_do_xdp_generic+0x10/0x10
[ 108.066469][ T6017] ? __skb_flow_dissect+0x5ef8/0x68b0
[ 108.066505][ T6017] __netif_receive_skb_core+0x18f4/0x4380
[ 108.066527][ T6017] ? __pfx___skb_flow_dissect+0x10/0x10
[ 108.066551][ T6017] ? do_user_addr_fault+0xbbc/0x1380
[ 108.066575][ T6017] ? do_user_addr_fault+0xc85/0x1380
[ 108.066595][ T6017] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 108.066616][ T6017] ? irqentry_exit+0x74/0x90
[ 108.066633][ T6017] ? lockdep_hardirqs_on+0x9c/0x150
[ 108.066651][ T6017] ? __lock_acquire+0xab9/0xd20
[ 108.066673][ T6017] ? netif_receive_skb+0x115/0x790
[ 108.066691][ T6017] ? netif_receive_skb+0x115/0x790
[ 108.066709][ T6017] __netif_receive_skb+0x72/0x380
[ 108.066732][ T6017] ? _copy_from_iter+0x24f/0x1790
[ 108.066753][ T6017] ? netif_receive_skb+0x115/0x790
[ 108.066771][ T6017] netif_receive_skb+0x1cb/0x790
[ 108.066789][ T6017] ? __pfx___local_bh_disable_ip+0x10/0x10
[ 108.066811][ T6017] ? __pfx_netif_receive_skb+0x10/0x10
[ 108.066830][ T6017] ? __pfx__copy_from_iter+0x10/0x10
[ 108.066847][ T6017] ? sock_alloc_send_pskb+0x86b/0x980
[ 108.066865][ T6017] ? tun_rx_batched+0x160/0x730
[ 108.066886][ T6017] tun_rx_batched+0x1b9/0x730
[ 108.066906][ T6017] ? __lock_acquire+0xab9/0xd20
[ 108.066927][ T6017] ? __pfx_tun_rx_batched+0x10/0x10
[ 108.066947][ T6017] ? tun_get_user+0x272f/0x3e90
[ 108.066970][ T6017] tun_get_user+0x2b65/0x3e90
[ 108.066994][ T6017] ? tun_get_user+0x272f/0x3e90
[ 108.067014][ T6017] ? aa_file_perm+0x44d/0x1550
[ 108.067033][ T6017] ? __pfx_tun_get_user+0x10/0x10
[ 108.067053][ T6017] ? __lock_acquire+0xab9/0xd20
[ 108.067077][ T6017] ? ref_tracker_alloc+0x318/0x460
[ 108.067093][ T6017] ? __lock_acquire+0xab9/0xd20
[ 108.067113][ T6017] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 108.067131][ T6017] ? tun_get+0x1c/0x2f0
[ 108.067151][ T6017] ? tun_get+0x1c/0x2f0
[ 108.067169][ T6017] ? tun_get+0x1c/0x2f0
[ 108.067189][ T6017] tun_chr_write_iter+0x113/0x200
[ 108.067211][ T6017] vfs_write+0x5c9/0xb30
[ 108.067230][ T6017] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 108.067250][ T6017] ? __pfx_vfs_write+0x10/0x10
[ 108.067268][ T6017] ? __pfx_do_futex+0x10/0x10
[ 108.067289][ T6017] ksys_write+0x145/0x250
[ 108.067307][ T6017] ? __pfx_ksys_write+0x10/0x10
[ 108.067324][ T6017] ? do_syscall_64+0xbe/0xfa0
[ 108.067342][ T6017] do_syscall_64+0xfa/0xfa0
[ 108.067356][ T6017] ? lockdep_hardirqs_on+0x9c/0x150
[ 108.067372][ T6017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 108.067388][ T6017] ? clear_bhb_loop+0x60/0xb0
[ 108.067406][ T6017] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 108.067422][ T6017] RIP: 0033:0x7f1abcd8d97f
[ 108.067436][ T6017] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 108.067449][ T6017] RSP: 002b:00007ffd8234fcb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 108.067468][ T6017] RAX: ffffffffffffffda RBX: 00007f1abcfe5fa0 RCX: 00007f1abcd8d97f
[ 108.067480][ T6017] RDX: 0000000000011dc0 RSI: 00002000000004c0 RDI: 00000000000000c8
[ 108.067490][ T6017] RBP: 00007f1abce11f91 R08: 0000000000000000 R09: 0000000000000000
[ 108.067500][ T6017] R10: 0000000000011dc0 R11: 0000000000000293 R12: 0000000000000000
[ 108.067510][ T6017] R13: 00007f1abcfe5fa0 R14: 00007f1abcfe5fa0 R15: 0000000000000003
[ 108.067529][ T6017]
[ 108.067540][ T6017] BUG: Bad page state in process syz.0.17 pfn:71eb0
[ 108.490266][ T6017] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888071eb0dc0 pfn:0x71eb0
[ 108.500403][ T6017] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 108.507600][ T6017] raw: 00fff00000000000 dead000000000040 ffff888020aeb000 0000000000000000
[ 108.516216][ T6017] raw: ffff888071eb0dc0 0000000000000001 00000000ffffffff 0000000000000000
[ 108.524817][ T6017] page dumped because: page_pool leak
[ 108.530259][ T6017] page_owner tracks the page as allocated
[ 108.535989][ T6017] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6017, tgid 6017 (syz.0.17), ts 102376599036, free_ts 101957296391
[ 108.552876][ T6017] post_alloc_hook+0x240/0x2a0
[ 108.557696][ T6017] get_page_from_freelist+0x2365/0x2440
[ 108.563266][ T6017] __alloc_frozen_pages_noprof+0x181/0x370
[ 108.569247][ T6017] alloc_pages_bulk_noprof+0x560/0x710
[ 108.574796][ T6017] __page_pool_alloc_netmems_slow+0x14c/0x710
[ 108.580888][ T6017] skb_pp_cow_data+0xb47/0x13e0
[ 108.585787][ T6017] do_xdp_generic+0x699/0x11a0
[ 108.590558][ T6017] __netif_receive_skb_core+0x18f4/0x4380
[ 108.596313][ T6017] __netif_receive_skb+0x72/0x380
[ 108.601350][ T6017] netif_receive_skb+0x1cb/0x790
[ 108.606335][ T6017] tun_rx_batched+0x1b9/0x730
[ 108.611043][ T6017] tun_get_user+0x2b65/0x3e90
[ 108.615749][ T6017] tun_chr_write_iter+0x113/0x200
[ 108.620910][ T6017] vfs_write+0x5c9/0xb30
[ 108.625202][ T6017] ksys_write+0x145/0x250
[ 108.629529][ T6017] do_syscall_64+0xfa/0xfa0
[ 108.634158][ T6017] page last free pid 23 tgid 23 stack trace:
[ 108.640187][ T6017] __free_frozen_pages+0xbc4/0xd30
[ 108.645372][ T6017] rcu_core+0xcab/0x1770
[ 108.649637][ T6017] handle_softirqs+0x286/0x870
[ 108.654455][ T6017] run_ksoftirqd+0x9b/0x100
[ 108.658986][ T6017] smpboot_thread_fn+0x542/0xa60
[ 108.664021][ T6017] kthread+0x711/0x8a0
[ 108.668366][ T6017] ret_from_fork+0x4bc/0x870
[ 108.672952][ T6017] ret_from_fork_asm+0x1a/0x30
[ 108.677746][ T6017] Modules linked in:
[ 108.681662][ T6017] CPU: 1 UID: 0 PID: 6017 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 108.681678][ T6017] Tainted: [B]=BAD_PAGE
[ 108.681681][ T6017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 108.681688][ T6017] Call Trace:
[ 108.681692][ T6017]
[ 108.681697][ T6017] dump_stack_lvl+0x189/0x250
[ 108.681711][ T6017] ? __pfx_dump_stack_lvl+0x10/0x10
[ 108.681721][ T6017] ? __pfx_print_modules+0x10/0x10
[ 108.681733][ T6017] bad_page+0x180/0x1c0
[ 108.681753][ T6017] __free_frozen_pages+0xce2/0xd30
[ 108.681765][ T6017] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0
[ 108.681780][ T6017] bpf_xdp_adjust_tail+0x1d6/0x220
[ 108.681794][ T6017] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 108.681803][ T6017] bpf_prog_run_generic_xdp+0x606/0x13d0
[ 108.681823][ T6017] do_xdp_generic+0x9f7/0x11a0
[ 108.681836][ T6017] ? __pfx_do_xdp_generic+0x10/0x10
[ 108.681845][ T6017] ? __skb_flow_dissect+0x5ef8/0x68b0
[ 108.681864][ T6017] __netif_receive_skb_core+0x18f4/0x4380
[ 108.681877][ T6017] ? __pfx___skb_flow_dissect+0x10/0x10
[ 108.681890][ T6017] ? do_user_addr_fault+0xbbc/0x1380
[ 108.681903][ T6017] ? do_user_addr_fault+0xc85/0x1380
[ 108.681915][ T6017] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 108.681926][ T6017] ? irqentry_exit+0x74/0x90
[ 108.681935][ T6017] ? lockdep_hardirqs_on+0x9c/0x150
[ 108.681945][ T6017] ? __lock_acquire+0xab9/0xd20
[ 108.681958][ T6017] ? netif_receive_skb+0x115/0x790
[ 108.681968][ T6017] ? netif_receive_skb+0x115/0x790
[ 108.681978][ T6017] __netif_receive_skb+0x72/0x380
[ 108.681988][ T6017] ? _copy_from_iter+0x24f/0x1790
[ 108.682000][ T6017] ? netif_receive_skb+0x115/0x790
[ 108.682010][ T6017] netif_receive_skb+0x1cb/0x790
[ 108.682020][ T6017] ? __pfx___local_bh_disable_ip+0x10/0x10
[ 108.682033][ T6017] ? __pfx_netif_receive_skb+0x10/0x10
[ 108.682042][ T6017] ? __pfx__copy_from_iter+0x10/0x10
[ 108.682052][ T6017] ? sock_alloc_send_pskb+0x86b/0x980
[ 108.682062][ T6017] ? tun_rx_batched+0x160/0x730
[ 108.682073][ T6017] tun_rx_batched+0x1b9/0x730
[ 108.682084][ T6017] ? __lock_acquire+0xab9/0xd20
[ 108.682095][ T6017] ? __pfx_tun_rx_batched+0x10/0x10
[ 108.682106][ T6017] ? tun_get_user+0x272f/0x3e90
[ 108.682119][ T6017] tun_get_user+0x2b65/0x3e90
[ 108.682132][ T6017] ? tun_get_user+0x272f/0x3e90
[ 108.682143][ T6017] ? aa_file_perm+0x44d/0x1550
[ 108.682154][ T6017] ? __pfx_tun_get_user+0x10/0x10
[ 108.682165][ T6017] ? __lock_acquire+0xab9/0xd20
[ 108.682178][ T6017] ? ref_tracker_alloc+0x318/0x460
[ 108.682187][ T6017] ? __lock_acquire+0xab9/0xd20
[ 108.682198][ T6017] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 108.682208][ T6017] ? tun_get+0x1c/0x2f0
[ 108.682219][ T6017] ? tun_get+0x1c/0x2f0
[ 108.682228][ T6017] ? tun_get+0x1c/0x2f0
[ 108.682238][ T6017] tun_chr_write_iter+0x113/0x200
[ 108.682250][ T6017] vfs_write+0x5c9/0xb30
[ 108.682260][ T6017] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 108.682270][ T6017] ? __pfx_vfs_write+0x10/0x10
[ 108.682279][ T6017] ? __pfx_do_futex+0x10/0x10
[ 108.682292][ T6017] ksys_write+0x145/0x250
[ 108.682302][ T6017] ? __pfx_ksys_write+0x10/0x10
[ 108.682312][ T6017] ? do_syscall_64+0xbe/0xfa0
[ 108.682321][ T6017] do_syscall_64+0xfa/0xfa0
[ 108.682329][ T6017] ? lockdep_hardirqs_on+0x9c/0x150
[ 108.682338][ T6017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 108.682347][ T6017] ? clear_bhb_loop+0x60/0xb0
[ 108.682356][ T6017] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 108.682365][ T6017] RIP: 0033:0x7f1abcd8d97f
[ 108.682374][ T6017] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 108.682388][ T6017] RSP: 002b:00007ffd8234fcb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 108.682399][ T6017] RAX: ffffffffffffffda RBX: 00007f1abcfe5fa0 RCX: 00007f1abcd8d97f
[ 108.682406][ T6017] RDX: 0000000000011dc0 RSI: 00002000000004c0 RDI: 00000000000000c8
[ 108.682412][ T6017] RBP: 00007f1abce11f91 R08: 0000000000000000 R09: 0000000000000000
[ 108.682418][ T6017] R10: 0000000000011dc0 R11: 0000000000000293 R12: 0000000000000000
[ 108.682423][ T6017] R13: 00007f1abcfe5fa0 R14: 00007f1abcfe5fa0 R15: 0000000000000003
[ 108.682433][ T6017]