Warning: Permanently added '10.128.0.237' (ED25519) to the list of known hosts. 2026/05/30 17:37:06 parsed 1 programs [ 110.265831][ T5659] cgroup: Unknown subsys name 'net' [ 110.354774][ T5659] cgroup: Unknown subsys name 'cpuset' [ 110.363340][ T5659] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 111.766203][ T5659] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 114.328668][ T5668] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 116.142878][ T5700] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.150805][ T5700] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.157973][ T5700] bridge_slave_0: entered allmulticast mode [ 116.166030][ T5700] bridge_slave_0: entered promiscuous mode [ 116.175792][ T5700] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.183043][ T5700] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.190214][ T5700] bridge_slave_1: entered allmulticast mode [ 116.197528][ T5700] bridge_slave_1: entered promiscuous mode [ 116.223273][ T5700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.234359][ T5700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.260534][ T5700] team0: Port device team_slave_0 added [ 116.267980][ T5700] team0: Port device team_slave_1 added [ 116.290686][ T5700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.297663][ T5700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.323792][ T5700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.336071][ T5700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.343072][ T5700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.369162][ T5700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.411666][ T5700] hsr_slave_0: entered promiscuous mode [ 116.418059][ T5700] hsr_slave_1: entered promiscuous mode [ 116.544812][ T5700] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 116.557162][ T5700] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 116.565063][ T5700] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 116.574932][ T5700] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 116.582947][ T5700] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 116.593685][ T5700] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 116.602093][ T5700] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 116.613420][ T5700] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 116.687803][ T5700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.709154][ T5700] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.725879][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.733580][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.749315][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.756465][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.039595][ T5700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.083542][ T5700] veth0_vlan: entered promiscuous mode [ 117.096430][ T5700] veth1_vlan: entered promiscuous mode [ 117.127752][ T5700] veth0_macvtap: entered promiscuous mode [ 117.138018][ T5700] veth1_macvtap: entered promiscuous mode [ 117.157987][ T5700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.175860][ T5700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.195807][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.204881][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.215847][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.226383][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.349734][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.434514][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.519248][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.602089][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.249902][ T5762] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 118.260241][ T5762] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 118.269864][ T5762] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 118.281869][ T5762] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 118.291037][ T5762] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 118.577561][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.586703][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.622437][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.630539][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/05/30 17:37:17 executed programs: 0 [ 119.019132][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 119.029487][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 119.037357][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 119.046619][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 119.055708][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 119.436895][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.444480][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.451772][ T5777] bridge_slave_0: entered allmulticast mode [ 119.458710][ T5777] bridge_slave_0: entered promiscuous mode [ 119.467574][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.475852][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.484458][ T5777] bridge_slave_1: entered allmulticast mode [ 119.493178][ T5777] bridge_slave_1: entered promiscuous mode [ 119.523053][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.548356][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.594556][ T5777] team0: Port device team_slave_0 added [ 119.613280][ T5777] team0: Port device team_slave_1 added [ 119.655470][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.662480][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.688413][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.701117][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.708103][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.734047][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.747874][ T35] bridge_slave_1: left allmulticast mode [ 119.754038][ T35] bridge_slave_1: left promiscuous mode [ 119.761419][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.773643][ T35] bridge_slave_0: left allmulticast mode [ 119.779306][ T35] bridge_slave_0: left promiscuous mode [ 119.785980][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.904434][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.915444][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.925255][ T35] bond0 (unregistering): Released all slaves [ 120.002009][ T5777] hsr_slave_0: entered promiscuous mode [ 120.008678][ T5777] hsr_slave_1: entered promiscuous mode [ 120.023767][ T5777] debugfs: 'hsr0' already exists in 'hsr' [ 120.037213][ T5777] Cannot create hsr debugfs directory [ 120.050924][ T35] hsr_slave_0: left promiscuous mode [ 120.057242][ T35] hsr_slave_1: left promiscuous mode [ 120.064346][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.072734][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.081595][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.089050][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.107296][ T35] veth1_macvtap: left promiscuous mode [ 120.113552][ T35] veth0_macvtap: left promiscuous mode [ 120.119202][ T35] veth1_vlan: left promiscuous mode [ 120.125089][ T35] veth0_vlan: left promiscuous mode [ 120.429448][ T35] team0 (unregistering): Port device team_slave_1 removed [ 120.458383][ T35] team0 (unregistering): Port device team_slave_0 removed [ 120.569352][ T5293] 8021q: adding VLAN 0 to HW filter on device eth1 [ 121.161479][ T5762] Bluetooth: hci0: command tx timeout [ 121.793672][ T5777] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 121.807077][ T5777] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 121.816092][ T5777] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 121.827349][ T5777] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 121.841995][ T5777] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 121.862501][ T5777] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 121.872829][ T5777] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 121.896168][ T5777] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 122.044691][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.076222][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.094555][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.101766][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.133601][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.140816][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.505619][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.543211][ T5777] veth0_vlan: entered promiscuous mode [ 122.559376][ T5777] veth1_vlan: entered promiscuous mode [ 122.587355][ T5777] veth0_macvtap: entered promiscuous mode [ 122.598221][ T5777] veth1_macvtap: entered promiscuous mode [ 122.614672][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.630115][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.644095][ T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.654164][ T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.667674][ T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.678617][ T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.736615][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.744538][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.773144][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.783160][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.826443][ T5866] BUG: Bad page state in process syz.0.17 pfn:781db [ 122.833199][ T5866] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880781db070 pfn:0x781db [ 122.843326][ T5866] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 122.850471][ T5866] raw: 00fff00000000000 dead000000000040 ffff88801af92000 0000000000000000 [ 122.859094][ T5866] raw: ffff8880781db070 3fffffffffffffff 00000000ffffffff 0000000000000000 [ 122.867738][ T5866] page dumped because: page_pool leak [ 122.873193][ T5866] page_owner tracks the page as allocated [ 122.879011][ T5866] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5866, tgid 5866 (syz.0.17), ts 122826352464, free_ts 122568710747 [ 122.896501][ T5866] post_alloc_hook+0x22d/0x280 [ 122.901320][ T5866] get_page_from_freelist+0x2593/0x2610 [ 122.906868][ T5866] __alloc_frozen_pages_noprof+0x18d/0x380 [ 122.912734][ T5866] __alloc_pages_noprof+0x10/0x100 [ 122.917877][ T5866] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 122.923422][ T5866] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 122.929498][ T5866] page_pool_alloc_frag_netmem+0x421/0x9b0 [ 122.935343][ T5866] skb_pp_cow_data+0xcb7/0x19b0 [ 122.940196][ T5866] do_xdp_generic+0x76b/0x12e0 [ 122.944988][ T5866] tun_get_user+0x24ca/0x43e0 [ 122.949667][ T5866] tun_chr_write_iter+0x113/0x200 [ 122.954731][ T5866] vfs_write+0x61d/0xb90 [ 122.958983][ T5866] ksys_write+0x150/0x270 [ 122.963345][ T5866] do_syscall_64+0x174/0x580 [ 122.967940][ T5866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.973872][ T5866] page last free pid 5777 tgid 5777 stack trace: [ 122.980198][ T5866] __free_frozen_pages+0xc1c/0xd30 [ 122.985350][ T5866] __slab_free+0x274/0x2c0 [ 122.989772][ T5866] qlist_free_all+0x99/0x100 [ 122.994424][ T5866] kasan_quarantine_reduce+0x148/0x160 [ 122.999903][ T5866] __kasan_slab_alloc+0x22/0x80 [ 123.004808][ T5866] __kmalloc_cache_noprof+0x2ba/0x660 [ 123.010199][ T5866] netdevice_event+0x3cb/0x8f0 [ 123.015021][ T5866] notifier_call_chain+0x1ad/0x3d0 [ 123.020151][ T5866] netif_set_mac_address+0x39f/0x4e0 [ 123.025474][ T5866] do_setlink+0x9bb/0x45a0 [ 123.029896][ T5866] rtnl_newlink+0x15ad/0x1bb0 [ 123.034611][ T5866] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 123.039562][ T5866] netlink_rcv_skb+0x232/0x4b0 [ 123.044359][ T5866] netlink_unicast+0x75c/0x8e0 [ 123.049485][ T5866] netlink_sendmsg+0x813/0xb40 [ 123.054302][ T5866] __sys_sendto+0x672/0x710 [ 123.058822][ T5866] Modules linked in: [ 123.062836][ T5866] CPU: 1 UID: 0 PID: 5866 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 123.062855][ T5866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 123.062869][ T5866] Call Trace: [ 123.062878][ T5866] [ 123.062885][ T5866] dump_stack_lvl+0xe8/0x150 [ 123.062911][ T5866] bad_page+0x17f/0x1c0 [ 123.062931][ T5866] __free_frozen_pages+0xcd9/0xd30 [ 123.062963][ T5866] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 123.062998][ T5866] bpf_xdp_adjust_tail+0x1d6/0x220 [ 123.063021][ T5866] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 123.063041][ T5866] bpf_prog_run_generic_xdp+0x603/0x1490 [ 123.063085][ T5866] do_xdp_generic+0xac5/0x12e0 [ 123.063103][ T5866] ? __lock_acquire+0x6b5/0x2cf0 [ 123.063127][ T5866] ? __pfx_do_xdp_generic+0x10/0x10 [ 123.063156][ T5866] ? tun_get_user+0x2394/0x43e0 [ 123.063187][ T5866] ? tun_get_user+0x2394/0x43e0 [ 123.063204][ T5866] tun_get_user+0x24ca/0x43e0 [ 123.063235][ T5866] ? aa_file_perm+0x192/0x15e0 [ 123.063257][ T5866] ? aa_file_perm+0x50e/0x15e0 [ 123.063271][ T5866] ? __pfx_tun_get_user+0x10/0x10 [ 123.063290][ T5866] ? __lock_acquire+0x6b5/0x2cf0 [ 123.063319][ T5866] ? ref_tracker_alloc+0x35c/0x4c0 [ 123.063341][ T5866] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 123.063361][ T5866] ? tun_get+0x1c/0x2f0 [ 123.063378][ T5866] ? tun_get+0x1c/0x2f0 [ 123.063398][ T5866] ? tun_get+0x1c/0x2f0 [ 123.063414][ T5866] ? tun_get+0x1c/0x2f0 [ 123.063433][ T5866] tun_chr_write_iter+0x113/0x200 [ 123.063452][ T5866] vfs_write+0x61d/0xb90 [ 123.063482][ T5866] ? __pfx_vfs_write+0x10/0x10 [ 123.063507][ T5866] ? __pfx_do_futex+0x10/0x10 [ 123.063541][ T5866] ksys_write+0x150/0x270 [ 123.063567][ T5866] ? __pfx_ksys_write+0x10/0x10 [ 123.063595][ T5866] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.063627][ T5866] do_syscall_64+0x174/0x580 [ 123.063643][ T5866] ? trace_irq_disable+0x3b/0x140 [ 123.063665][ T5866] ? clear_bhb_loop+0x40/0x90 [ 123.063685][ T5866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.063701][ T5866] RIP: 0033:0x7f8e39d5d68e [ 123.063715][ T5866] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 123.063729][ T5866] RSP: 002b:00007ffee04471c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 123.063746][ T5866] RAX: ffffffffffffffda RBX: 0000555576c62500 RCX: 00007f8e39d5d68e [ 123.063757][ T5866] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 123.063767][ T5866] RBP: 00007f8e39e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 123.063777][ T5866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.063785][ T5866] R13: 00007f8e3a015fac R14: 00007f8e3a015fa0 R15: 00007f8e3a015fa0 [ 123.063818][ T5866] [ 123.063825][ T5866] Disabling lock debugging due to kernel taint [ 123.230746][ T5762] Bluetooth: hci0: command tx timeout [ 123.234587][ T5866] BUG: Bad page state in process syz.0.17 pfn:7db1e [ 123.348324][ T5866] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807db1e770 pfn:0x7db1e [ 123.358409][ T5866] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 123.365542][ T5866] raw: 00fff00000000000 dead000000000040 ffff88801af92000 0000000000000000 [ 123.374163][ T5866] raw: ffff88807db1e770 0000000000000001 00000000ffffffff 0000000000000000 [ 123.382776][ T5866] page dumped because: page_pool leak [ 123.388132][ T5866] page_owner tracks the page as allocated [ 123.393888][ T5866] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5866, tgid 5866 (syz.0.17), ts 122826342554, free_ts 122568721294 [ 123.410767][ T5866] post_alloc_hook+0x22d/0x280 [ 123.415535][ T5866] get_page_from_freelist+0x2593/0x2610 [ 123.421116][ T5866] __alloc_frozen_pages_noprof+0x18d/0x380 [ 123.426923][ T5866] __alloc_pages_noprof+0x10/0x100 [ 123.432061][ T5866] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 123.437525][ T5866] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 123.443627][ T5866] skb_pp_cow_data+0xc91/0x19b0 [ 123.448476][ T5866] do_xdp_generic+0x76b/0x12e0 [ 123.453265][ T5866] tun_get_user+0x24ca/0x43e0 [ 123.457938][ T5866] tun_chr_write_iter+0x113/0x200 [ 123.463078][ T5866] vfs_write+0x61d/0xb90 [ 123.467335][ T5866] ksys_write+0x150/0x270 [ 123.471697][ T5866] do_syscall_64+0x174/0x580 [ 123.476287][ T5866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.482211][ T5866] page last free pid 5777 tgid 5777 stack trace: [ 123.488543][ T5866] __free_frozen_pages+0xc1c/0xd30 [ 123.493687][ T5866] __slab_free+0x274/0x2c0 [ 123.498111][ T5866] qlist_free_all+0x99/0x100 [ 123.502737][ T5866] kasan_quarantine_reduce+0x148/0x160 [ 123.508198][ T5866] __kasan_slab_alloc+0x22/0x80 [ 123.513105][ T5866] __kmalloc_cache_noprof+0x2ba/0x660 [ 123.518501][ T5866] netdevice_event+0x3cb/0x8f0 [ 123.523302][ T5866] notifier_call_chain+0x1ad/0x3d0 [ 123.528422][ T5866] netif_set_mac_address+0x39f/0x4e0 [ 123.533740][ T5866] do_setlink+0x9bb/0x45a0 [ 123.538158][ T5866] rtnl_newlink+0x15ad/0x1bb0 [ 123.542857][ T5866] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 123.547792][ T5866] netlink_rcv_skb+0x232/0x4b0 [ 123.552585][ T5866] netlink_unicast+0x75c/0x8e0 [ 123.557406][ T5866] netlink_sendmsg+0x813/0xb40 [ 123.562201][ T5866] __sys_sendto+0x672/0x710 [ 123.566716][ T5866] Modules linked in: [ 123.570661][ T5866] CPU: 1 UID: 0 PID: 5866 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full) [ 123.570683][ T5866] Tainted: [B]=BAD_PAGE [ 123.570694][ T5866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 123.570702][ T5866] Call Trace: [ 123.570708][ T5866] [ 123.570714][ T5866] dump_stack_lvl+0xe8/0x150 [ 123.570734][ T5866] bad_page+0x17f/0x1c0 [ 123.570752][ T5866] __free_frozen_pages+0xcd9/0xd30 [ 123.570778][ T5866] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 123.570808][ T5866] bpf_xdp_adjust_tail+0x1d6/0x220 [ 123.570827][ T5866] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 123.570840][ T5866] bpf_prog_run_generic_xdp+0x603/0x1490 [ 123.570867][ T5866] do_xdp_generic+0xac5/0x12e0 [ 123.570883][ T5866] ? __lock_acquire+0x6b5/0x2cf0 [ 123.570901][ T5866] ? __pfx_do_xdp_generic+0x10/0x10 [ 123.570922][ T5866] ? tun_get_user+0x2394/0x43e0 [ 123.570940][ T5866] ? tun_get_user+0x2394/0x43e0 [ 123.571038][ T5866] tun_get_user+0x24ca/0x43e0 [ 123.571057][ T5866] ? aa_file_perm+0x192/0x15e0 [ 123.571074][ T5866] ? aa_file_perm+0x50e/0x15e0 [ 123.571088][ T5866] ? __pfx_tun_get_user+0x10/0x10 [ 123.571102][ T5866] ? __lock_acquire+0x6b5/0x2cf0 [ 123.571124][ T5866] ? ref_tracker_alloc+0x35c/0x4c0 [ 123.571144][ T5866] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 123.571166][ T5866] ? tun_get+0x1c/0x2f0 [ 123.571181][ T5866] ? tun_get+0x1c/0x2f0 [ 123.571197][ T5866] ? tun_get+0x1c/0x2f0 [ 123.571212][ T5866] ? tun_get+0x1c/0x2f0 [ 123.571228][ T5866] tun_chr_write_iter+0x113/0x200 [ 123.571246][ T5866] vfs_write+0x61d/0xb90 [ 123.571272][ T5866] ? __pfx_vfs_write+0x10/0x10 [ 123.571293][ T5866] ? __pfx_do_futex+0x10/0x10 [ 123.571313][ T5866] ksys_write+0x150/0x270 [ 123.571333][ T5866] ? __pfx_ksys_write+0x10/0x10 [ 123.571357][ T5866] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.571374][ T5866] do_syscall_64+0x174/0x580 [ 123.571392][ T5866] ? trace_irq_disable+0x3b/0x140 [ 123.571417][ T5866] ? clear_bhb_loop+0x40/0x90 [ 123.571436][ T5866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.571453][ T5866] RIP: 0033:0x7f8e39d5d68e [ 123.571468][ T5866] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 123.571481][ T5866] RSP: 002b:00007ffee04471c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 123.571499][ T5866] RAX: ffffffffffffffda RBX: 0000555576c62500 RCX: 00007f8e39d5d68e [ 123.571511][ T5866] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 123.571521][ T5866] RBP: 00007f8e39e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 123.571532][ T5866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.571542][ T5866] R13: 00007f8e3a015fac R14: 00007f8e3a015fa0 R15: 00007f8e3a015fa0 [ 123.571560][ T5866] [ 123.571570][ T5866] BUG: Bad page state in process syz.0.17 pfn:7da59 [ 123.849978][ T5866] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807da59f60 pfn:0x7da59 [ 123.860053][ T5866] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 123.867187][ T5866] raw: 00fff00000000000 dead000000000040 ffff88801af92000 0000000000000000 [ 123.876231][ T5866] raw: ffff88807da59f60 0000000000000001 00000000ffffffff 0000000000000000 [ 123.884836][ T5866] page dumped because: page_pool leak [ 123.890194][ T5866] page_owner tracks the page as allocated [ 123.895960][ T5866] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5866, tgid 5866 (syz.0.17), ts 122826333157, free_ts 122568760587 [ 123.912824][ T5866] post_alloc_hook+0x22d/0x280 [ 123.917594][ T5866] get_page_from_freelist+0x2593/0x2610 [ 123.923168][ T5866] __alloc_frozen_pages_noprof+0x18d/0x380 [ 123.928984][ T5866] __alloc_pages_noprof+0x10/0x100 [ 123.934136][ T5866] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 123.939615][ T5866] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 123.945730][ T5866] skb_pp_cow_data+0xc91/0x19b0 [ 123.950655][ T5866] do_xdp_generic+0x76b/0x12e0 [ 123.955476][ T5866] tun_get_user+0x24ca/0x43e0 [ 123.960237][ T5866] tun_chr_write_iter+0x113/0x200 [ 123.965311][ T5866] vfs_write+0x61d/0xb90 [ 123.969586][ T5866] ksys_write+0x150/0x270 [ 123.973963][ T5866] do_syscall_64+0x174/0x580 [ 123.978558][ T5866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.984474][ T5866] page last free pid 5777 tgid 5777 stack trace: [ 123.990822][ T5866] __free_frozen_pages+0xc1c/0xd30 [ 123.995927][ T5866] __slab_free+0x274/0x2c0 [ 124.000328][ T5866] qlist_free_all+0x99/0x100 [ 124.004940][ T5866] kasan_quarantine_reduce+0x148/0x160 [ 124.010400][ T5866] __kasan_slab_alloc+0x22/0x80 [ 124.015339][ T5866] __kmalloc_cache_noprof+0x2ba/0x660 [ 124.020746][ T5866] netdevice_event+0x3cb/0x8f0 [ 124.025499][ T5866] notifier_call_chain+0x1ad/0x3d0 [ 124.030592][ T5866] netif_set_mac_address+0x39f/0x4e0 [ 124.035912][ T5866] do_setlink+0x9bb/0x45a0 [ 124.040317][ T5866] rtnl_newlink+0x15ad/0x1bb0 [ 124.045016][ T5866] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 124.049979][ T5866] netlink_rcv_skb+0x232/0x4b0 [ 124.054835][ T5866] netlink_unicast+0x75c/0x8e0 [ 124.059768][ T5866] netlink_sendmsg+0x813/0xb40 [ 124.064582][ T5866] __sys_sendto+0x672/0x710 [ 124.069091][ T5866] Modules linked in: [ 124.073031][ T5866] CPU: 1 UID: 0 PID: 5866 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full) [ 124.073055][ T5866] Tainted: [B]=BAD_PAGE [ 124.073061][ T5866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 124.073071][ T5866] Call Trace: [ 124.073076][ T5866] [ 124.073082][ T5866] dump_stack_lvl+0xe8/0x150 [ 124.073101][ T5866] bad_page+0x17f/0x1c0 [ 124.073118][ T5866] __free_frozen_pages+0xcd9/0xd30 [ 124.073140][ T5866] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 124.073166][ T5866] bpf_xdp_adjust_tail+0x1d6/0x220 [ 124.073184][ T5866] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 124.073197][ T5866] bpf_prog_run_generic_xdp+0x603/0x1490 [ 124.073224][ T5866] do_xdp_generic+0xac5/0x12e0 [ 124.073243][ T5866] ? __lock_acquire+0x6b5/0x2cf0 [ 124.073263][ T5866] ? __pfx_do_xdp_generic+0x10/0x10 [ 124.073285][ T5866] ? tun_get_user+0x2394/0x43e0 [ 124.073307][ T5866] ? tun_get_user+0x2394/0x43e0 [ 124.073323][ T5866] tun_get_user+0x24ca/0x43e0 [ 124.073345][ T5866] ? aa_file_perm+0x192/0x15e0 [ 124.073362][ T5866] ? aa_file_perm+0x50e/0x15e0 [ 124.073375][ T5866] ? __pfx_tun_get_user+0x10/0x10 [ 124.073391][ T5866] ? __lock_acquire+0x6b5/0x2cf0 [ 124.073413][ T5866] ? ref_tracker_alloc+0x35c/0x4c0 [ 124.073433][ T5866] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 124.073451][ T5866] ? tun_get+0x1c/0x2f0 [ 124.073465][ T5866] ? tun_get+0x1c/0x2f0 [ 124.073482][ T5866] ? tun_get+0x1c/0x2f0 [ 124.073496][ T5866] ? tun_get+0x1c/0x2f0 [ 124.073513][ T5866] tun_chr_write_iter+0x113/0x200 [ 124.073530][ T5866] vfs_write+0x61d/0xb90 [ 124.073554][ T5866] ? __pfx_vfs_write+0x10/0x10 [ 124.073576][ T5866] ? __pfx_do_futex+0x10/0x10 [ 124.073600][ T5866] ksys_write+0x150/0x270 [ 124.073622][ T5866] ? __pfx_ksys_write+0x10/0x10 [ 124.073646][ T5866] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.073663][ T5866] do_syscall_64+0x174/0x580 [ 124.073679][ T5866] ? trace_irq_disable+0x3b/0x140 [ 124.073795][ T5866] ? clear_bhb_loop+0x40/0x90 [ 124.073814][ T5866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.073831][ T5866] RIP: 0033:0x7f8e39d5d68e [ 124.073846][ T5866] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 124.073859][ T5866] RSP: 002b:00007ffee04471c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 124.073878][ T5866] RAX: ffffffffffffffda RBX: 0000555576c62500 RCX: 00007f8e39d5d68e [ 124.073890][ T5866] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 124.073900][ T5866] RBP: 00007f8e39e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 124.073916][ T5866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.073925][ T5866] R13: 00007f8e3a015fac R14: 00007f8e3a015fa0 R15: 00007f8e3a015fa0 [ 124.073944][ T5866] [ 124.073955][ T5866] BUG: Bad page state in process syz.0.17 pfn:7dacf [ 124.352858][ T5866] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807dacf0c0 pfn:0x7dacf [ 124.362938][ T5866] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 124.370060][ T5866] raw: 00fff00000000000 dead000000000040 ffff88801af92000 0000000000000000 [ 124.378662][ T5866] raw: ffff88807dacf0c0 0000000000000001 00000000ffffffff 0000000000000000 [ 124.387260][ T5866] page dumped because: page_pool leak [ 124.392660][ T5866] page_owner tracks the page as allocated [ 124.398374][ T5866] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5866, tgid 5866 (syz.0.17), ts 122826323588, free_ts 122568771300 [ 124.415240][ T5866] post_alloc_hook+0x22d/0x280 [ 124.420010][ T5866] get_page_from_freelist+0x2593/0x2610 [ 124.425742][ T5866] __alloc_frozen_pages_noprof+0x18d/0x380 [ 124.431584][ T5866] __alloc_pages_noprof+0x10/0x100 [ 124.436716][ T5866] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 124.442202][ T5866] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 124.448275][ T5866] skb_pp_cow_data+0xc91/0x19b0 [ 124.453147][ T5866] do_xdp_generic+0x76b/0x12e0 [ 124.457912][ T5866] tun_get_user+0x24ca/0x43e0 [ 124.462638][ T5866] tun_chr_write_iter+0x113/0x200 [ 124.467678][ T5866] vfs_write+0x61d/0xb90 [ 124.471951][ T5866] ksys_write+0x150/0x270 [ 124.476388][ T5866] do_syscall_64+0x174/0x580 [ 124.481035][ T5866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.486934][ T5866] page last free pid 5777 tgid 5777 stack trace: [ 124.493281][ T5866] __free_frozen_pages+0xc1c/0xd30 [ 124.498397][ T5866] __slab_free+0x274/0x2c0 [ 124.502840][ T5866] qlist_free_all+0x99/0x100 [ 124.507432][ T5866] kasan_quarantine_reduce+0x148/0x160 [ 124.512926][ T5866] __kasan_slab_alloc+0x22/0x80 [ 124.517785][ T5866] __kmalloc_cache_noprof+0x2ba/0x660 [ 124.523179][ T5866] netdevice_event+0x3cb/0x8f0 [ 124.527971][ T5866] notifier_call_chain+0x1ad/0x3d0 [ 124.533100][ T5866] netif_set_mac_address+0x39f/0x4e0 [ 124.538383][ T5866] do_setlink+0x9bb/0x45a0 [ 124.542812][ T5866] rtnl_newlink+0x15ad/0x1bb0 [ 124.547486][ T5866] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 124.552449][ T5866] netlink_rcv_skb+0x232/0x4b0 [ 124.557215][ T5866] netlink_unicast+0x75c/0x8e0 [ 124.562002][ T5866] netlink_sendmsg+0x813/0xb40 [ 124.566762][ T5866] __sys_sendto+0x672/0x710 [ 124.571278][ T5866] Modules linked in: [ 124.575172][ T5866] CPU: 1 UID: 0 PID: 5866 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full) [ 124.575188][ T5866] Tainted: [B]=BAD_PAGE [ 124.575191][ T5866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 124.575197][ T5866] Call Trace: [ 124.575202][ T5866] [ 124.575206][ T5866] dump_stack_lvl+0xe8/0x150 [ 124.575220][ T5866] bad_page+0x17f/0x1c0 [ 124.575232][ T5866] __free_frozen_pages+0xcd9/0xd30 [ 124.575247][ T5866] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 124.575265][ T5866] bpf_xdp_adjust_tail+0x1d6/0x220 [ 124.575276][ T5866] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 124.575285][ T5866] bpf_prog_run_generic_xdp+0x603/0x1490 [ 124.575303][ T5866] do_xdp_generic+0xac5/0x12e0 [ 124.575315][ T5866] ? __lock_acquire+0x6b5/0x2cf0 [ 124.575327][ T5866] ? __pfx_do_xdp_generic+0x10/0x10 [ 124.575341][ T5866] ? tun_get_user+0x2394/0x43e0 [ 124.575353][ T5866] ? tun_get_user+0x2394/0x43e0 [ 124.575362][ T5866] tun_get_user+0x24ca/0x43e0 [ 124.575374][ T5866] ? aa_file_perm+0x192/0x15e0 [ 124.575384][ T5866] ? aa_file_perm+0x50e/0x15e0 [ 124.575392][ T5866] ? __pfx_tun_get_user+0x10/0x10 [ 124.575401][ T5866] ? __lock_acquire+0x6b5/0x2cf0 [ 124.575413][ T5866] ? ref_tracker_alloc+0x35c/0x4c0 [ 124.575424][ T5866] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 124.575434][ T5866] ? tun_get+0x1c/0x2f0 [ 124.575442][ T5866] ? tun_get+0x1c/0x2f0 [ 124.575451][ T5866] ? tun_get+0x1c/0x2f0 [ 124.575459][ T5866] ? tun_get+0x1c/0x2f0 [ 124.575468][ T5866] tun_chr_write_iter+0x113/0x200 [ 124.575478][ T5866] vfs_write+0x61d/0xb90 [ 124.575493][ T5866] ? __pfx_vfs_write+0x10/0x10 [ 124.575507][ T5866] ? __pfx_do_futex+0x10/0x10 [ 124.575521][ T5866] ksys_write+0x150/0x270 [ 124.575535][ T5866] ? __pfx_ksys_write+0x10/0x10 [ 124.575550][ T5866] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.575559][ T5866] do_syscall_64+0x174/0x580 [ 124.575569][ T5866] ? trace_irq_disable+0x3b/0x140 [ 124.575584][ T5866] ? clear_bhb_loop+0x40/0x90 [ 124.575595][ T5866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.575604][ T5866] RIP: 0033:0x7f8e39d5d68e [ 124.575613][ T5866] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 124.575620][ T5866] RSP: 002b:00007ffee04471c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 124.575631][ T5866] RAX: ffffffffffffffda RBX: 0000555576c62500 RCX: 00007f8e39d5d68e [ 124.575638][ T5866] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 124.575644][ T5866] RBP: 00007f8e39e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 124.575649][ T5866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.575654][ T5866] R13: 00007f8e3a015fac R14: 00007f8e3a015fa0 R15: 00007f8e3a015fa0 [ 124.575664][ T5866] [ 124.575671][ T5866] BUG: Bad page state in process syz.0.17 pfn:62155 [ 124.853809][ T5866] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888062155fc0 pfn:0x62155 [ 124.863904][ T5866] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 124.871043][ T5866] raw: 00fff00000000000 dead000000000040 ffff88801af92000 0000000000000000 [ 124.879615][ T5866] raw: ffff888062155fc0 0000000000000001 00000000ffffffff 0000000000000000 [ 124.888218][ T5866] page dumped because: page_pool leak [ 124.893607][ T5866] page_owner tracks the page as allocated [ 124.899303][ T5866] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5866, tgid 5866 (syz.0.17), ts 122826314179, free_ts 122569374954 [ 124.916185][ T5866] post_alloc_hook+0x22d/0x280 [ 124.920975][ T5866] get_page_from_freelist+0x2593/0x2610 [ 124.926523][ T5866] __alloc_frozen_pages_noprof+0x18d/0x380 [ 124.932338][ T5866] __alloc_pages_noprof+0x10/0x100 [ 124.937454][ T5866] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 124.942938][ T5866] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 124.949005][ T5866] skb_pp_cow_data+0xc91/0x19b0 [ 124.953865][ T5866] do_xdp_generic+0x76b/0x12e0 [ 124.958631][ T5866] tun_get_user+0x24ca/0x43e0 [ 124.963338][ T5866] tun_chr_write_iter+0x113/0x200 [ 124.968360][ T5866] vfs_write+0x61d/0xb90 [ 124.972625][ T5866] ksys_write+0x150/0x270 [ 124.976952][ T5866] do_syscall_64+0x174/0x580 [ 124.981553][ T5866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.987435][ T5866] page last free pid 5777 tgid 5777 stack trace: [ 124.993775][ T5866] __free_frozen_pages+0xc1c/0xd30 [ 124.998890][ T5866] __slab_free+0x274/0x2c0 [ 125.003334][ T5866] qlist_free_all+0x99/0x100 [ 125.007933][ T5866] kasan_quarantine_reduce+0x148/0x160 [ 125.013410][ T5866] __kasan_slab_alloc+0x22/0x80 [ 125.018261][ T5866] __kmalloc_cache_noprof+0x2ba/0x660 [ 125.023663][ T5866] netdevice_event+0x3cb/0x8f0 [ 125.028434][ T5866] notifier_call_chain+0x1ad/0x3d0 [ 125.033620][ T5866] netif_set_mac_address+0x39f/0x4e0 [ 125.038921][ T5866] do_setlink+0x9bb/0x45a0 [ 125.043374][ T5866] rtnl_newlink+0x15ad/0x1bb0 [ 125.048054][ T5866] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 125.053019][ T5866] netlink_rcv_skb+0x232/0x4b0 [ 125.057789][ T5866] netlink_unicast+0x75c/0x8e0 [ 125.062601][ T5866] netlink_sendmsg+0x813/0xb40 [ 125.067380][ T5866] __sys_sendto+0x672/0x710 [ 125.071911][ T5866] Modules linked in: [ 125.075826][ T5866] CPU: 1 UID: 0 PID: 5866 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full) [ 125.075844][ T5866] Tainted: [B]=BAD_PAGE [ 125.075847][ T5866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 125.075853][ T5866] Call Trace: [ 125.075859][ T5866] [ 125.075863][ T5866] dump_stack_lvl+0xe8/0x150 [ 125.075878][ T5866] bad_page+0x17f/0x1c0 [ 125.075891][ T5866] __free_frozen_pages+0xcd9/0xd30 [ 125.075906][ T5866] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 125.075924][ T5866] bpf_xdp_adjust_tail+0x1d6/0x220 [ 125.075936][ T5866] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 125.075945][ T5866] bpf_prog_run_generic_xdp+0x603/0x1490 [ 125.075962][ T5866] do_xdp_generic+0xac5/0x12e0 [ 125.075974][ T5866] ? __lock_acquire+0x6b5/0x2cf0 [ 125.075986][ T5866] ? __pfx_do_xdp_generic+0x10/0x10 [ 125.076000][ T5866] ? tun_get_user+0x2394/0x43e0 [ 125.076013][ T5866] ? tun_get_user+0x2394/0x43e0 [ 125.076021][ T5866] tun_get_user+0x24ca/0x43e0 [ 125.076033][ T5866] ? aa_file_perm+0x192/0x15e0 [ 125.076043][ T5866] ? aa_file_perm+0x50e/0x15e0 [ 125.076051][ T5866] ? __pfx_tun_get_user+0x10/0x10 [ 125.076060][ T5866] ? __lock_acquire+0x6b5/0x2cf0 [ 125.076072][ T5866] ? ref_tracker_alloc+0x35c/0x4c0 [ 125.076084][ T5866] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 125.076094][ T5866] ? tun_get+0x1c/0x2f0 [ 125.076103][ T5866] ? tun_get+0x1c/0x2f0 [ 125.076112][ T5866] ? tun_get+0x1c/0x2f0 [ 125.076120][ T5866] ? tun_get+0x1c/0x2f0 [ 125.076129][ T5866] tun_chr_write_iter+0x113/0x200 [ 125.076139][ T5866] vfs_write+0x61d/0xb90 [ 125.076154][ T5866] ? __pfx_vfs_write+0x10/0x10 [ 125.076168][ T5866] ? __pfx_do_futex+0x10/0x10 [ 125.076182][ T5866] ksys_write+0x150/0x270 [ 125.076196][ T5866] ? __pfx_ksys_write+0x10/0x10 [ 125.076210][ T5866] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.076220][ T5866] do_syscall_64+0x174/0x580 [ 125.076231][ T5866] ? trace_irq_disable+0x3b/0x140 [ 125.076245][ T5866] ? clear_bhb_loop+0x40/0x90 [ 125.076256][ T5866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.076265][ T5866] RIP: 0033:0x7f8e39d5d68e [ 125.076275][ T5866] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 125.076283][ T5866] RSP: 002b:00007ffee04471c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 125.076294][ T5866] RAX: ffffffffffffffda RBX: 0000555576c62500 RCX: 00007f8e39d5d68e [ 125.076300][ T5866] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 125.076306][ T5866] RBP: 00007f8e39e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 125.076312][ T5866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.076317][ T5866] R13: 00007f8e3a015fac R14: 00007f8e3a015fa0 R15: 00007f8e3a015fa0 [ 125.076327][ T5866] [ 125.076334][ T5866] BUG: Bad page state in process syz.0.17 pfn:7db27 [ 125.310703][ T5762] Bluetooth: hci0: command tx timeout [ 125.313360][ T5866] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807db27ec0 pfn:0x7db27 [ 125.370338][ T5866] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 125.377495][ T5866] raw: 00fff00000000000 dead000000000040 ffff88801af92000 0000000000000000 [ 125.386104][ T5866] raw: ffff88807db27ec0 0000000000000001 00000000ffffffff 0000000000000000 [ 125.394716][ T5866] page dumped because: page_pool leak [ 125.400083][ T5866] page_owner tracks the page as allocated [ 125.405821][ T5866] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5866, tgid 5866 (syz.0.17), ts 122826304907, free_ts 122569414166 [ 125.422687][ T5866] post_alloc_hook+0x22d/0x280 [ 125.427455][ T5866] get_page_from_freelist+0x2593/0x2610 [ 125.433046][ T5866] __alloc_frozen_pages_noprof+0x18d/0x380 [ 125.438858][ T5866] __alloc_pages_noprof+0x10/0x100 [ 125.444092][ T5866] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 125.449554][ T5866] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 125.455734][ T5866] skb_pp_cow_data+0xc91/0x19b0 [ 125.460586][ T5866] do_xdp_generic+0x76b/0x12e0 [ 125.465402][ T5866] tun_get_user+0x24ca/0x43e0 [ 125.470068][ T5866] tun_chr_write_iter+0x113/0x200 [ 125.475123][ T5866] vfs_write+0x61d/0xb90 [ 125.479376][ T5866] ksys_write+0x150/0x270 [ 125.483741][ T5866] do_syscall_64+0x174/0x580 [ 125.488342][ T5866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.494272][ T5866] page last free pid 5777 tgid 5777 stack trace: [ 125.500676][ T5866] __free_frozen_pages+0xc1c/0xd30 [ 125.505804][ T5866] __slab_free+0x274/0x2c0 [ 125.510210][ T5866] qlist_free_all+0x99/0x100 [ 125.514816][ T5866] kasan_quarantine_reduce+0x148/0x160 [ 125.520282][ T5866] __kasan_slab_alloc+0x22/0x80 [ 125.525158][ T5866] __kmalloc_cache_noprof+0x2ba/0x660 [ 125.530544][ T5866] netdevice_event+0x3cb/0x8f0 [ 125.535431][ T5866] notifier_call_chain+0x1ad/0x3d0 [ 125.540551][ T5866] netif_set_mac_address+0x39f/0x4e0 [ 125.545863][ T5866] do_setlink+0x9bb/0x45a0 [ 125.550288][ T5866] rtnl_newlink+0x15ad/0x1bb0 [ 125.555027][ T5866] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 125.560003][ T5866] netlink_rcv_skb+0x232/0x4b0 [ 125.564823][ T5866] netlink_unicast+0x75c/0x8e0 [ 125.569585][ T5866] netlink_sendmsg+0x813/0xb40 [ 125.574453][ T5866] __sys_sendto+0x672/0x710 [ 125.579046][ T5866] Modules linked in: [ 125.582963][ T5866] CPU: 1 UID: 0 PID: 5866 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full) [ 125.582984][ T5866] Tainted: [B]=BAD_PAGE [ 125.582990][ T5866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 125.582997][ T5866] Call Trace: [ 125.583003][ T5866] [ 125.583008][ T5866] dump_stack_lvl+0xe8/0x150 [ 125.583028][ T5866] bad_page+0x17f/0x1c0 [ 125.583044][ T5866] __free_frozen_pages+0xcd9/0xd30 [ 125.583068][ T5866] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 125.583094][ T5866] bpf_xdp_adjust_tail+0x1d6/0x220 [ 125.583111][ T5866] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 125.583125][ T5866] bpf_prog_run_generic_xdp+0x603/0x1490 [ 125.583151][ T5866] do_xdp_generic+0xac5/0x12e0 [ 125.583169][ T5866] ? __lock_acquire+0x6b5/0x2cf0 [ 125.583191][ T5866] ? __pfx_do_xdp_generic+0x10/0x10 [ 125.583215][ T5866] ? tun_get_user+0x2394/0x43e0 [ 125.583237][ T5866] ? tun_get_user+0x2394/0x43e0 [ 125.583253][ T5866] tun_get_user+0x24ca/0x43e0 [ 125.583275][ T5866] ? aa_file_perm+0x192/0x15e0 [ 125.583293][ T5866] ? aa_file_perm+0x50e/0x15e0 [ 125.583307][ T5866] ? __pfx_tun_get_user+0x10/0x10 [ 125.583323][ T5866] ? __lock_acquire+0x6b5/0x2cf0 [ 125.583344][ T5866] ? ref_tracker_alloc+0x35c/0x4c0 [ 125.583362][ T5866] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 125.583380][ T5866] ? tun_get+0x1c/0x2f0 [ 125.583394][ T5866] ? tun_get+0x1c/0x2f0 [ 125.583411][ T5866] ? tun_get+0x1c/0x2f0 [ 125.583425][ T5866] ? tun_get+0x1c/0x2f0 [ 125.583457][ T5866] tun_chr_write_iter+0x113/0x200 [ 125.583474][ T5866] vfs_write+0x61d/0xb90 [ 125.583503][ T5866] ? __pfx_vfs_write+0x10/0x10 [ 125.583525][ T5866] ? __pfx_do_futex+0x10/0x10 [ 125.583548][ T5866] ksys_write+0x150/0x270 [ 125.583570][ T5866] ? __pfx_ksys_write+0x10/0x10 [ 125.583595][ T5866] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.583612][ T5866] do_syscall_64+0x174/0x580 [ 125.583628][ T5866] ? trace_irq_disable+0x3b/0x140 [ 125.583650][ T5866] ? clear_bhb_loop+0x40/0x90 [ 125.583668][ T5866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.583684][ T5866] RIP: 0033:0x7f8e39d5d68e [ 125.583699][ T5866] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 125.583712][ T5866] RSP: 002b:00007ffee04471c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 125.583729][ T5866] RAX: ffffffffffffffda RBX: 0000555576c62500 RCX: 00007f8e39d5d68e [ 125.583741][ T5866] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 125.583751][ T5866] RBP: 00007f8e39e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 125.583761][ T5866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.583771][ T5866] R13: 00007f8e3a015fac R14: 00007f8e3a015fa0 R15: 00007f8e3a015fa0 [ 125.583789][ T5866] [ 125.583798][ T5866] BUG: Bad page state in process syz.0.17 pfn:7db2d [ 125.864404][ T5866] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807db2ddc0 pfn:0x7db2d [ 125.874509][ T5866] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 125.881649][ T5866] raw: 00fff00000000000 dead000000000040 ffff88801af92000 0000000000000000 [ 125.890220][ T5866] raw: ffff88807db2ddc0 0000000000000001 00000000ffffffff 0000000000000000 [ 125.898817][ T5866] page dumped because: page_pool leak [ 125.904204][ T5866] page_owner tracks the page as allocated [ 125.909901][ T5866] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5866, tgid 5866 (syz.0.17), ts 122826295497, free_ts 122569506525 [ 125.926776][ T5866] post_alloc_hook+0x22d/0x280 [ 125.931578][ T5866] get_page_from_freelist+0x2593/0x2610 [ 125.937117][ T5866] __alloc_frozen_pages_noprof+0x18d/0x380 [ 125.942943][ T5866] __alloc_pages_noprof+0x10/0x100 [ 125.948059][ T5866] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 125.953551][ T5866] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 125.959626][ T5866] skb_pp_cow_data+0xc91/0x19b0 [ 125.964512][ T5866] do_xdp_generic+0x76b/0x12e0 [ 125.969276][ T5866] tun_get_user+0x24ca/0x43e0 [ 125.973971][ T5866] tun_chr_write_iter+0x113/0x200 [ 125.978994][ T5866] vfs_write+0x61d/0xb90 [ 125.983271][ T5866] ksys_write+0x150/0x270 [ 125.987612][ T5866] do_syscall_64+0x174/0x580 [ 125.992220][ T5866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.998116][ T5866] page last free pid 5777 tgid 5777 stack trace: [ 126.004478][ T5866] __free_frozen_pages+0xc1c/0xd30 [ 126.009601][ T5866] __slab_free+0x274/0x2c0 [ 126.014044][ T5866] qlist_free_all+0x99/0x100 [ 126.018632][ T5866] kasan_quarantine_reduce+0x148/0x160 [ 126.024116][ T5866] __kasan_slab_alloc+0x22/0x80 [ 126.029000][ T5866] __kmalloc_cache_noprof+0x2ba/0x660 [ 126.034401][ T5866] netdevice_event+0x3cb/0x8f0 [ 126.039169][ T5866] notifier_call_chain+0x1ad/0x3d0 [ 126.044306][ T5866] netif_set_mac_address+0x39f/0x4e0 [ 126.049593][ T5866] do_setlink+0x9bb/0x45a0 [ 126.054030][ T5866] rtnl_newlink+0x15ad/0x1bb0 [ 126.058700][ T5866] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 126.063678][ T5866] netlink_rcv_skb+0x232/0x4b0 [ 126.068485][ T5866] netlink_unicast+0x75c/0x8e0 [ 126.073288][ T5866] netlink_sendmsg+0x813/0xb40 [ 126.078054][ T5866] __sys_sendto+0x672/0x710 [ 126.082584][ T5866] Modules linked in: [ 126.086486][ T5866] CPU: 1 UID: 0 PID: 5866 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full) [ 126.086503][ T5866] Tainted: [B]=BAD_PAGE [ 126.086506][ T5866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 126.086512][ T5866] Call Trace: [ 126.086516][ T5866] [ 126.086520][ T5866] dump_stack_lvl+0xe8/0x150 [ 126.086535][ T5866] bad_page+0x17f/0x1c0 [ 126.086547][ T5866] __free_frozen_pages+0xcd9/0xd30 [ 126.086563][ T5866] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 126.086581][ T5866] bpf_xdp_adjust_tail+0x1d6/0x220 [ 126.086593][ T5866] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 126.086602][ T5866] bpf_prog_run_generic_xdp+0x603/0x1490 [ 126.086622][ T5866] do_xdp_generic+0xac5/0x12e0 [ 126.086634][ T5866] ? __lock_acquire+0x6b5/0x2cf0 [ 126.086646][ T5866] ? __pfx_do_xdp_generic+0x10/0x10 [ 126.086659][ T5866] ? tun_get_user+0x2394/0x43e0 [ 126.086672][ T5866] ? tun_get_user+0x2394/0x43e0 [ 126.086680][ T5866] tun_get_user+0x24ca/0x43e0 [ 126.086692][ T5866] ? aa_file_perm+0x192/0x15e0 [ 126.086702][ T5866] ? aa_file_perm+0x50e/0x15e0 [ 126.086710][ T5866] ? __pfx_tun_get_user+0x10/0x10 [ 126.086720][ T5866] ? __lock_acquire+0x6b5/0x2cf0 [ 126.086732][ T5866] ? ref_tracker_alloc+0x35c/0x4c0 [ 126.086743][ T5866] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 126.086753][ T5866] ? tun_get+0x1c/0x2f0 [ 126.086761][ T5866] ? tun_get+0x1c/0x2f0 [ 126.086771][ T5866] ? tun_get+0x1c/0x2f0 [ 126.086779][ T5866] ? tun_get+0x1c/0x2f0 [ 126.086788][ T5866] tun_chr_write_iter+0x113/0x200 [ 126.086797][ T5866] vfs_write+0x61d/0xb90 [ 126.086818][ T5866] ? __pfx_vfs_write+0x10/0x10 [ 126.086839][ T5866] ? __pfx_do_futex+0x10/0x10 [ 126.086861][ T5866] ksys_write+0x150/0x270 [ 126.086875][ T5866] ? __pfx_ksys_write+0x10/0x10 [ 126.086889][ T5866] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.086899][ T5866] do_syscall_64+0x174/0x580 [ 126.086909][ T5866] ? trace_irq_disable+0x3b/0x140 [ 126.086924][ T5866] ? clear_bhb_loop+0x40/0x90 [ 126.086935][ T5866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.086944][ T5866] RIP: 0033:0x7f8e39d5d68e [ 126.086953][ T5866] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 126.086960][ T5866] RSP: 002b:00007ffee04471c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 126.086971][ T5866] RAX: ffffffffffffffda RBX: 0000555576c62500 RCX: 00007f8e39d5d68e [ 126.086978][ T5866] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 126.086984][ T5866] RBP: 00007f8e39e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 126.086990][ T5866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.086996][ T5866] R13: 00007f8e3a015fac R14: 00007f8e3a015fa0 R15: 00007f8e3a015fa0 [ 126.087005][ T5866] [ 126.087012][ T5866] BUG: Bad page state in process syz.0.17 pfn:7db2b [ 126.365138][ T5866] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807db2bcc0 pfn:0x7db2b [ 126.375333][ T5866] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 126.382477][ T5866] raw: 00fff00000000000 dead000000000040 ffff88801af92000 0000000000000000 [ 126.391073][ T5866] raw: ffff88807db2bcc0 0000000000000001 00000000ffffffff 0000000000000000 [ 126.399701][ T5866] page dumped because: page_pool leak [ 126.405099][ T5866] page_owner tracks the page as allocated [ 126.410831][ T5866] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5866, tgid 5866 (syz.0.17), ts 122826285917, free_ts 122569547224 [ 126.427697][ T5866] post_alloc_hook+0x22d/0x280 [ 126.432494][ T5866] get_page_from_freelist+0x2593/0x2610 [ 126.438024][ T5866] __alloc_frozen_pages_noprof+0x18d/0x380 [ 126.443835][ T5866] __alloc_pages_noprof+0x10/0x100 [ 126.448965][ T5866] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 126.454444][ T5866] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 126.460662][ T5866] skb_pp_cow_data+0xc91/0x19b0 [ 126.465525][ T5866] do_xdp_generic+0x76b/0x12e0 [ 126.470294][ T5866] tun_get_user+0x24ca/0x43e0 [ 126.475014][ T5866] tun_chr_write_iter+0x113/0x200 [ 126.480047][ T5866] vfs_write+0x61d/0xb90 [ 126.484320][ T5866] ksys_write+0x150/0x270 [ 126.488651][ T5866] do_syscall_64+0x174/0x580 [ 126.493251][ T5866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.499144][ T5866] page last free pid 5777 tgid 5777 stack trace: [ 126.505494][ T5866] __free_frozen_pages+0xc1c/0xd30 [ 126.510781][ T5866] __slab_free+0x274/0x2c0 [ 126.515235][ T5866] qlist_free_all+0x99/0x100 [ 126.519820][ T5866] kasan_quarantine_reduce+0x148/0x160 [ 126.525304][ T5866] __kasan_slab_alloc+0x22/0x80 [ 126.530173][ T5866] __kmalloc_cache_noprof+0x2ba/0x660 [ 126.535606][ T5866] netdevice_event+0x3cb/0x8f0 [ 126.540377][ T5866] notifier_call_chain+0x1ad/0x3d0 [ 126.545535][ T5866] netif_set_mac_address+0x39f/0x4e0 [ 126.550854][ T5866] do_setlink+0x9bb/0x45a0 [ 126.555254][ T5866] rtnl_newlink+0x15ad/0x1bb0 [ 126.559909][ T5866] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 126.564854][ T5866] netlink_rcv_skb+0x232/0x4b0 [ 126.569624][ T5866] netlink_unicast+0x75c/0x8e0 [ 126.574552][ T5866] netlink_sendmsg+0x813/0xb40 [ 126.579337][ T5866] __sys_sendto+0x672/0x710 [ 126.583868][ T5866] Modules linked in: [ 126.587777][ T5866] CPU: 1 UID: 0 PID: 5866 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full) [ 126.587793][ T5866] Tainted: [B]=BAD_PAGE [ 126.587797][ T5866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 126.587803][ T5866] Call Trace: [ 126.587808][ T5866] [ 126.587812][ T5866] dump_stack_lvl+0xe8/0x150 [ 126.587826][ T5866] bad_page+0x17f/0x1c0 [ 126.587838][ T5866] __free_frozen_pages+0xcd9/0xd30 [ 126.587854][ T5866] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 126.587871][ T5866] bpf_xdp_adjust_tail+0x1d6/0x220 [ 126.587883][ T5866] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 126.587892][ T5866] bpf_prog_run_generic_xdp+0x603/0x1490 [ 126.587915][ T5866] do_xdp_generic+0xac5/0x12e0 [ 126.587927][ T5866] ? __lock_acquire+0x6b5/0x2cf0 [ 126.587939][ T5866] ? __pfx_do_xdp_generic+0x10/0x10 [ 126.587952][ T5866] ? tun_get_user+0x2394/0x43e0 [ 126.587965][ T5866] ? tun_get_user+0x2394/0x43e0 [ 126.587973][ T5866] tun_get_user+0x24ca/0x43e0 [ 126.587986][ T5866] ? aa_file_perm+0x192/0x15e0 [ 126.587996][ T5866] ? aa_file_perm+0x50e/0x15e0 [ 126.588004][ T5866] ? __pfx_tun_get_user+0x10/0x10 [ 126.588013][ T5866] ? __lock_acquire+0x6b5/0x2cf0 [ 126.588025][ T5866] ? ref_tracker_alloc+0x35c/0x4c0 [ 126.588036][ T5866] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 126.588046][ T5866] ? tun_get+0x1c/0x2f0 [ 126.588055][ T5866] ? tun_get+0x1c/0x2f0 [ 126.588064][ T5866] ? tun_get+0x1c/0x2f0 [ 126.588072][ T5866] ? tun_get+0x1c/0x2f0 [ 126.588081][ T5866] tun_chr_write_iter+0x113/0x200 [ 126.588091][ T5866] vfs_write+0x61d/0xb90 [ 126.588106][ T5866] ? __pfx_vfs_write+0x10/0x10 [ 126.588120][ T5866] ? __pfx_do_futex+0x10/0x10 [ 126.588134][ T5866] ksys_write+0x150/0x270 [ 126.588147][ T5866] ? __pfx_ksys_write+0x10/0x10 [ 126.588161][ T5866] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.588171][ T5866] do_syscall_64+0x174/0x580 [ 126.588181][ T5866] ? trace_irq_disable+0x3b/0x140 [ 126.588195][ T5866] ? clear_bhb_loop+0x40/0x90 [ 126.588206][ T5866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.588215][ T5866] RIP: 0033:0x7f8e39d5d68e [ 126.588224][ T5866] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 126.588231][ T5866] RSP: 002b:00007ffee04471c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 126.588242][ T5866] RAX: ffffffffffffffda RBX: 0000555576c62500 RCX: 00007f8e39d5d68e [ 126.588249][ T5866] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 126.588255][ T5866] RBP: 00007f8e39e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 126.588260][ T5866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.588265][ T5866] R13: 00007f8e3a015fac R14: 00007f8e3a015fa0 R15: 00007f8e3a015fa0 [ 126.588275][ T5866] [ 126.588282][ T5866] BUG: Bad page state in process syz.0.17 pfn:7db3e [ 126.866643][ T5866] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807db3ebc0 pfn:0x7db3e [ 126.876777][ T5866] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 126.883921][ T5866] raw: 00fff00000000000 dead000000000040 ffff88801af92000 0000000000000000 [ 126.892525][ T5866] raw: ffff88807db3ebc0 0000000000000001 00000000ffffffff 0000000000000000 [ 126.901118][ T5866] page dumped because: page_pool leak [ 126.906475][ T5866] page_owner tracks the page as allocated [ 126.912209][ T5866] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5866, tgid 5866 (syz.0.17), ts 122826276453, free_ts 122569577710 [ 126.929079][ T5866] post_alloc_hook+0x22d/0x280 [ 126.933863][ T5866] get_page_from_freelist+0x2593/0x2610 [ 126.939411][ T5866] __alloc_frozen_pages_noprof+0x18d/0x380 [ 126.945234][ T5866] __alloc_pages_noprof+0x10/0x100 [ 126.950353][ T5866] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 126.955922][ T5866] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 126.962009][ T5866] skb_pp_cow_data+0xc91/0x19b0 [ 126.966844][ T5866] do_xdp_generic+0x76b/0x12e0 [ 126.971619][ T5866] tun_get_user+0x24ca/0x43e0 [ 126.976290][ T5866] tun_chr_write_iter+0x113/0x200 [ 126.981329][ T5866] vfs_write+0x61d/0xb90 [ 126.985579][ T5866] ksys_write+0x150/0x270 [ 126.989891][ T5866] do_syscall_64+0x174/0x580 [ 126.994506][ T5866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.000399][ T5866] page last free pid 5777 tgid 5777 stack trace: [ 127.006747][ T5866] __free_frozen_pages+0xc1c/0xd30 [ 127.011892][ T5866] __slab_free+0x274/0x2c0 [ 127.016296][ T5866] qlist_free_all+0x99/0x100 [ 127.020901][ T5866] kasan_quarantine_reduce+0x148/0x160 [ 127.026392][ T5866] __kasan_slab_alloc+0x22/0x80 [ 127.031263][ T5866] __kmalloc_cache_noprof+0x2ba/0x660 [ 127.036644][ T5866] netdevice_event+0x3cb/0x8f0 [ 127.041452][ T5866] notifier_call_chain+0x1ad/0x3d0 [ 127.046568][ T5866] netif_set_mac_address+0x39f/0x4e0 [ 127.051963][ T5866] do_setlink+0x9bb/0x45a0 [ 127.056375][ T5866] rtnl_newlink+0x15ad/0x1bb0 [ 127.061072][ T5866] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 127.066007][ T5866] netlink_rcv_skb+0x232/0x4b0 [ 127.070812][ T5866] netlink_unicast+0x75c/0x8e0 [ 127.075586][ T5866] netlink_sendmsg+0x813/0xb40 [ 127.080339][ T5866] __sys_sendto+0x672/0x710 [ 127.084862][ T5866] Modules linked in: [ 127.088755][ T5866] CPU: 1 UID: 0 PID: 5866 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full) [ 127.088771][ T5866] Tainted: [B]=BAD_PAGE [ 127.088774][ T5866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 127.088780][ T5866] Call Trace: [ 127.088784][ T5866] [ 127.088788][ T5866] dump_stack_lvl+0xe8/0x150 [ 127.088802][ T5866] bad_page+0x17f/0x1c0 [ 127.088814][ T5866] __free_frozen_pages+0xcd9/0xd30 [ 127.088830][ T5866] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 127.088848][ T5866] bpf_xdp_adjust_tail+0x1d6/0x220 [ 127.088860][ T5866] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 127.088869][ T5866] bpf_prog_run_generic_xdp+0x603/0x1490 [ 127.088887][ T5866] do_xdp_generic+0xac5/0x12e0 [ 127.088899][ T5866] ? __lock_acquire+0x6b5/0x2cf0 [ 127.088911][ T5866] ? __pfx_do_xdp_generic+0x10/0x10 [ 127.088925][ T5866] ? tun_get_user+0x2394/0x43e0 [ 127.088937][ T5866] ? tun_get_user+0x2394/0x43e0 [ 127.088945][ T5866] tun_get_user+0x24ca/0x43e0 [ 127.088957][ T5866] ? aa_file_perm+0x192/0x15e0 [ 127.088967][ T5866] ? aa_file_perm+0x50e/0x15e0 [ 127.088975][ T5866] ? __pfx_tun_get_user+0x10/0x10 [ 127.088984][ T5866] ? __lock_acquire+0x6b5/0x2cf0 [ 127.088996][ T5866] ? ref_tracker_alloc+0x35c/0x4c0 [ 127.089008][ T5866] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 127.089018][ T5866] ? tun_get+0x1c/0x2f0 [ 127.089026][ T5866] ? tun_get+0x1c/0x2f0 [ 127.089036][ T5866] ? tun_get+0x1c/0x2f0 [ 127.089044][ T5866] ? tun_get+0x1c/0x2f0 [ 127.089053][ T5866] tun_chr_write_iter+0x113/0x200 [ 127.089063][ T5866] vfs_write+0x61d/0xb90 [ 127.089078][ T5866] ? __pfx_vfs_write+0x10/0x10 [ 127.089092][ T5866] ? __pfx_do_futex+0x10/0x10 [ 127.089106][ T5866] ksys_write+0x150/0x270 [ 127.089119][ T5866] ? __pfx_ksys_write+0x10/0x10 [ 127.089134][ T5866] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.089144][ T5866] do_syscall_64+0x174/0x580 [ 127.089154][ T5866] ? trace_irq_disable+0x3b/0x140 [ 127.089168][ T5866] ? clear_bhb_loop+0x40/0x90 [ 127.089179][ T5866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.089187][ T5866] RIP: 0033:0x7f8e39d5d68e [ 127.089196][ T5866] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 127.089204][ T5866] RSP: 002b:00007ffee04471c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 127.089215][ T5866] RAX: ffffffffffffffda RBX: 0000555576c62500 RCX: 00007f8e39d5d68e [ 127.089221][ T5866] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 127.089227][ T5866] RBP: 00007f8e39e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 127.089233][ T5866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.089239][ T5866] R13: 00007f8e3a015fac R14: 00007f8e3a015fa0 R15: 00007f8e3a015fa0 [ 127.089248][ T5866] [ 127.089256][ T5866] BUG: Bad page state in process syz.0.17 pfn:7a09f [ 127.368044][ T5866] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807a09f500 pfn:0x7a09f [ 127.378140][ T5866] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 127.385273][ T5866] raw: 00fff00000000000 dead000000000040 ffff88801af92000 0000000000000000 [ 127.391004][ T5762] Bluetooth: hci0: command tx timeout [ 127.393884][ T5866] raw: ffff88807a09f500 0000000000000001 00000000ffffffff 0000000000000000 [ 127.407811][ T5866] page dumped because: page_pool leak [ 127.413193][ T5866] page_owner tracks the page as allocated [ 127.418901][ T5866] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5866, tgid 5866 (syz.0.17), ts 122826267152, free_ts 122569633604 [ 127.435776][ T5866] post_alloc_hook+0x22d/0x280 [ 127.440544][ T5866] get_page_from_freelist+0x2593/0x2610 [ 127.446109][ T5866] __alloc_frozen_pages_noprof+0x18d/0x380 [ 127.451930][ T5866] __alloc_pages_noprof+0x10/0x100 [ 127.457027][ T5866] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 127.462497][ T5866] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 127.468566][ T5866] skb_pp_cow_data+0xc91/0x19b0 [ 127.473439][ T5866] do_xdp_generic+0x76b/0x12e0 [ 127.478211][ T5866] tun_get_user+0x24ca/0x43e0 [ 127.482901][ T5866] tun_chr_write_iter+0x113/0x200 [ 127.488366][ T5866] vfs_write+0x61d/0xb90 [ 127.492651][ T5866] ksys_write+0x150/0x270 [ 127.496995][ T5866] do_syscall_64+0x174/0x580 [ 127.501617][ T5866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.507508][ T5866] page last free pid 5777 tgid 5777 stack trace: [ 127.513865][ T5866] __free_frozen_pages+0xc1c/0xd30 [ 127.518984][ T5866] __slab_free+0x274/0x2c0 [ 127.523444][ T5866] qlist_free_all+0x99/0x100 [ 127.528040][ T5866] kasan_quarantine_reduce+0x148/0x160 [ 127.533516][ T5866] __kasan_slab_alloc+0x22/0x80 [ 127.538368][ T5866] __kmalloc_cache_noprof+0x2ba/0x660 [ 127.543763][ T5866] netdevice_event+0x3cb/0x8f0 [ 127.548556][ T5866] notifier_call_chain+0x1ad/0x3d0 [ 127.553692][ T5866] netif_set_mac_address+0x39f/0x4e0 [ 127.558980][ T5866] do_setlink+0x9bb/0x45a0 [ 127.563413][ T5866] rtnl_newlink+0x15ad/0x1bb0 [ 127.568087][ T5866] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 127.573046][ T5866] netlink_rcv_skb+0x232/0x4b0 [ 127.577815][ T5866] netlink_unicast+0x75c/0x8e0 [ 127.582600][ T5866] netlink_sendmsg+0x813/0xb40 [ 127.587376][ T5866] __sys_sendto+0x672/0x710 [ 127.591897][ T5866] Modules linked in: [ 127.595789][ T5866] CPU: 1 UID: 0 PID: 5866 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full) [ 127.595804][ T5866] Tainted: [B]=BAD_PAGE [ 127.595807][ T5866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 127.595813][ T5866] Call Trace: [ 127.595817][ T5866] [ 127.595825][ T5866] dump_stack_lvl+0xe8/0x150 [ 127.595839][ T5866] bad_page+0x17f/0x1c0 [ 127.595851][ T5866] __free_frozen_pages+0xcd9/0xd30 [ 127.595867][ T5866] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 127.595884][ T5866] bpf_xdp_adjust_tail+0x1d6/0x220 [ 127.595896][ T5866] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 127.595905][ T5866] bpf_prog_run_generic_xdp+0x603/0x1490 [ 127.595923][ T5866] do_xdp_generic+0xac5/0x12e0 [ 127.595935][ T5866] ? __lock_acquire+0x6b5/0x2cf0 [ 127.595947][ T5866] ? __pfx_do_xdp_generic+0x10/0x10 [ 127.595960][ T5866] ? tun_get_user+0x2394/0x43e0 [ 127.595973][ T5866] ? tun_get_user+0x2394/0x43e0 [ 127.595981][ T5866] tun_get_user+0x24ca/0x43e0 [ 127.595994][ T5866] ? aa_file_perm+0x192/0x15e0 [ 127.596004][ T5866] ? aa_file_perm+0x50e/0x15e0 [ 127.596012][ T5866] ? __pfx_tun_get_user+0x10/0x10 [ 127.596021][ T5866] ? __lock_acquire+0x6b5/0x2cf0 [ 127.596033][ T5866] ? ref_tracker_alloc+0x35c/0x4c0 [ 127.596044][ T5866] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 127.596054][ T5866] ? tun_get+0x1c/0x2f0 [ 127.596063][ T5866] ? tun_get+0x1c/0x2f0 [ 127.596072][ T5866] ? tun_get+0x1c/0x2f0 [ 127.596080][ T5866] ? tun_get+0x1c/0x2f0 [ 127.596089][ T5866] tun_chr_write_iter+0x113/0x200 [ 127.596099][ T5866] vfs_write+0x61d/0xb90 [ 127.596115][ T5866] ? __pfx_vfs_write+0x10/0x10 [ 127.596128][ T5866] ? __pfx_do_futex+0x10/0x10 [ 127.596142][ T5866] ksys_write+0x150/0x270 [ 127.596155][ T5866] ? __pfx_ksys_write+0x10/0x10 [ 127.596170][ T5866] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.596179][ T5866] do_syscall_64+0x174/0x580 [ 127.596189][ T5866] ? trace_irq_disable+0x3b/0x140 [ 127.596204][ T5866] ? clear_bhb_loop+0x40/0x90 [ 127.596215][ T5866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.596224][ T5866] RIP: 0033:0x7f8e39d5d68e [ 127.596233][ T5866] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 127.596241][ T5866] RSP: 002b:00007ffee04471c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 127.596252][ T5866] RAX: ffffffffffffffda RBX: 0000555576c62500 RCX: 00007f8e39d5d68e [ 127.596258][ T5866] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 127.596264][ T5866] RBP: 00007f8e39e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 127.596270][ T5866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.596275][ T5866] R13: 00007f8e3a015fac R14: 00007f8e3a015fa0 R15: 00007f8e3a015fa0 [ 127.596285][ T5866] [ 127.596291][ T5866] BUG: Bad page state in process syz.0.17 pfn:62167 [ 127.874638][ T5866] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888062167070 pfn:0x62167 [ 127.884721][ T5866] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 127.891849][ T5866] raw: 00fff00000000000 dead000000000040 ffff88801af92000 0000000000000000 [ 127.900415][ T5866] raw: ffff888062167070 0000000000000001 00000000ffffffff 0000000000000000 [ 127.909016][ T5866] page dumped because: page_pool leak [ 127.914405][ T5866] page_owner tracks the page as allocated [ 127.920108][ T5866] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5866, tgid 5866 (syz.0.17), ts 122826257954, free_ts 122569813890 [ 127.936970][ T5866] post_alloc_hook+0x22d/0x280 [ 127.941763][ T5866] get_page_from_freelist+0x2593/0x2610 [ 127.947293][ T5866] __alloc_frozen_pages_noprof+0x18d/0x380 [ 127.953117][ T5866] __alloc_pages_noprof+0x10/0x100 [ 127.958235][ T5866] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 127.963714][ T5866] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 127.969782][ T5866] skb_pp_cow_data+0xc91/0x19b0 [ 127.974661][ T5866] do_xdp_generic+0x76b/0x12e0 [ 127.979425][ T5866] tun_get_user+0x24ca/0x43e0 [ 127.984134][ T5866] tun_chr_write_iter+0x113/0x200 [ 127.989157][ T5866] vfs_write+0x61d/0xb90 [ 127.993435][ T5866] ksys_write+0x150/0x270 [ 127.997774][ T5866] do_syscall_64+0x174/0x580 [ 128.002402][ T5866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.008305][ T5866] page last free pid 5777 tgid 5777 stack trace: [ 128.014669][ T5866] __free_frozen_pages+0xc1c/0xd30 [ 128.019820][ T5866] __slab_free+0x274/0x2c0 [ 128.024263][ T5866] qlist_free_all+0x99/0x100 [ 128.028861][ T5866] kasan_quarantine_reduce+0x148/0x160 [ 128.034524][ T5866] __kasan_slab_alloc+0x22/0x80 [ 128.039382][ T5866] __kmalloc_cache_noprof+0x2ba/0x660 [ 128.044788][ T5866] netdevice_event+0x3cb/0x8f0 [ 128.049557][ T5866] notifier_call_chain+0x1ad/0x3d0 [ 128.054697][ T5866] netif_set_mac_address+0x39f/0x4e0 [ 128.059988][ T5866] do_setlink+0x9bb/0x45a0 [ 128.064427][ T5866] rtnl_newlink+0x15ad/0x1bb0 [ 128.069110][ T5866] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 128.074066][ T5866] netlink_rcv_skb+0x232/0x4b0 [ 128.078827][ T5866] netlink_unicast+0x75c/0x8e0 [ 128.083610][ T5866] netlink_sendmsg+0x813/0xb40 [ 128.088371][ T5866] __sys_sendto+0x672/0x710 [ 128.092889][ T5866] Modules linked in: [ 128.096785][ T5866] CPU: 1 UID: 0 PID: 5866 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full) [ 128.096800][ T5866] Tainted: [B]=BAD_PAGE [ 128.096804][ T5866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 128.096809][ T5866] Call Trace: [ 128.096814][ T5866] [ 128.096818][ T5866] dump_stack_lvl+0xe8/0x150 [ 128.096832][ T5866] bad_page+0x17f/0x1c0 [ 128.096844][ T5866] __free_frozen_pages+0xcd9/0xd30 [ 128.096859][ T5866] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 128.096877][ T5866] bpf_xdp_adjust_tail+0x1d6/0x220 [ 128.096888][ T5866] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 128.096897][ T5866] bpf_prog_run_generic_xdp+0x603/0x1490 [ 128.096915][ T5866] do_xdp_generic+0xac5/0x12e0 [ 128.096927][ T5866] ? __lock_acquire+0x6b5/0x2cf0 [ 128.096939][ T5866] ? __pfx_do_xdp_generic+0x10/0x10 [ 128.096953][ T5866] ? tun_get_user+0x2394/0x43e0 [ 128.096966][ T5866] ? tun_get_user+0x2394/0x43e0 [ 128.096974][ T5866] tun_get_user+0x24ca/0x43e0 [ 128.096986][ T5866] ? aa_file_perm+0x192/0x15e0 [ 128.096996][ T5866] ? aa_file_perm+0x50e/0x15e0 [ 128.097004][ T5866] ? __pfx_tun_get_user+0x10/0x10 [ 128.097014][ T5866] ? __lock_acquire+0x6b5/0x2cf0 [ 128.097026][ T5866] ? ref_tracker_alloc+0x35c/0x4c0 [ 128.097037][ T5866] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 128.097047][ T5866] ? tun_get+0x1c/0x2f0 [ 128.097055][ T5866] ? tun_get+0x1c/0x2f0 [ 128.097065][ T5866] ? tun_get+0x1c/0x2f0 [ 128.097073][ T5866] ? tun_get+0x1c/0x2f0 [ 128.097082][ T5866] tun_chr_write_iter+0x113/0x200 [ 128.097091][ T5866] vfs_write+0x61d/0xb90 [ 128.097107][ T5866] ? __pfx_vfs_write+0x10/0x10 [ 128.097120][ T5866] ? __pfx_do_futex+0x10/0x10 [ 128.097134][ T5866] ksys_write+0x150/0x270 [ 128.097148][ T5866] ? __pfx_ksys_write+0x10/0x10 [ 128.097163][ T5866] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.097172][ T5866] do_syscall_64+0x174/0x580 [ 128.097184][ T5866] ? trace_irq_disable+0x3b/0x140 [ 128.097199][ T5866] ? clear_bhb_loop+0x40/0x90 [ 128.097209][ T5866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.097218][ T5866] RIP: 0033:0x7f8e39d5d68e [ 128.097227][ T5866] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 128.097235][ T5866] RSP: 002b:00007ffee04471c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 128.097246][ T5866] RAX: ffffffffffffffda RBX: 0000555576c62500 RCX: 00007f8e39d5d68e [ 128.097252][ T5866] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 128.097258][ T5866] RBP: 00007f8e39e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 128.097264][ T5866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.097269][ T5866] R13: 00007f8e3a015fac R14: 00007f8e3a015fa0 R15: 00007f8e3a015fa0 [ 128.097279][ T5866] [ 128.097286][ T5866] BUG: Bad page state in process syz.0.17 pfn:7db1a [ 128.375622][ T5866] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807db1acb0 pfn:0x7db1a [ 128.385718][ T5866] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 128.392860][ T5866] raw: 00fff00000000000 dead000000000040 ffff88801af92000 0000000000000000 [ 128.401475][ T5866] raw: ffff88807db1acb0 0000000000000001 00000000ffffffff 0000000000000000 [ 128.410060][ T5866] page dumped because: page_pool leak [ 128.415471][ T5866] page_owner tracks the page as allocated [ 128.421199][ T5866] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5866, tgid 5866 (syz.0.17), ts 122826248663, free_ts 122569823508 [ 128.438070][ T5866] post_alloc_hook+0x22d/0x280 [ 128.442864][ T5866] get_page_from_freelist+0x2593/0x2610 [ 128.448405][ T5866] __alloc_frozen_pages_noprof+0x18d/0x380 [ 128.454252][ T5866] __alloc_pages_noprof+0x10/0x100 [ 128.459377][ T5866] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 128.464922][ T5866] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 128.471057][ T5866] skb_pp_cow_data+0xc91/0x19b0 [ 128.475901][ T5866] do_xdp_generic+0x76b/0x12e0 [ 128.480686][ T5866] tun_get_user+0x24ca/0x43e0 [ 128.485451][ T5866] tun_chr_write_iter+0x113/0x200 [ 128.490467][ T5866] vfs_write+0x61d/0xb90 [ 128.494737][ T5866] ksys_write+0x150/0x270 [ 128.499074][ T5866] do_syscall_64+0x174/0x580 [ 128.503689][ T5866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.509579][ T5866] page last free pid 5777 tgid 5777 stack trace: [ 128.515936][ T5866] __free_frozen_pages+0xc1c/0xd30 [ 128.521077][ T5866] __slab_free+0x274/0x2c0 [ 128.525483][ T5866] qlist_free_all+0x99/0x100 [ 128.530056][ T5866] kasan_quarantine_reduce+0x148/0x160 [ 128.535537][ T5866] __kasan_slab_alloc+0x22/0x80 [ 128.540390][ T5866] __kmalloc_cache_noprof+0x2ba/0x660 [ 128.545804][ T5866] netdevice_event+0x3cb/0x8f0 [ 128.550577][ T5866] notifier_call_chain+0x1ad/0x3d0 [ 128.555739][ T5866] netif_set_mac_address+0x39f/0x4e0 [ 128.561053][ T5866] do_setlink+0x9bb/0x45a0 [ 128.565480][ T5866] rtnl_newlink+0x15ad/0x1bb0 [ 128.570181][ T5866] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 128.575176][ T5866] netlink_rcv_skb+0x232/0x4b0 [ 128.579953][ T5866] netlink_unicast+0x75c/0x8e0 [ 128.584743][ T5866] netlink_sendmsg+0x813/0xb40 [ 128.589509][ T5866] __sys_sendto+0x672/0x710 [ 128.594038][ T5866] Modules linked in: [ 128.597939][ T5866] CPU: 1 UID: 0 PID: 5866 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full) [ 128.597956][ T5866] Tainted: [B]=BAD_PAGE [ 128.597959][ T5866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 128.597965][ T5866] Call Trace: [ 128.597970][ T5866] [ 128.597975][ T5866] dump_stack_lvl+0xe8/0x150 [ 128.597990][ T5866] bad_page+0x17f/0x1c0 [ 128.598002][ T5866] __free_frozen_pages+0xcd9/0xd30 [ 128.598018][ T5866] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 128.598044][ T5866] bpf_xdp_adjust_tail+0x1d6/0x220 [ 128.598056][ T5866] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 128.598065][ T5866] bpf_prog_run_generic_xdp+0x603/0x1490 [ 128.598083][ T5866] do_xdp_generic+0xac5/0x12e0 [ 128.598095][ T5866] ? __lock_acquire+0x6b5/0x2cf0 [ 128.598107][ T5866] ? __pfx_do_xdp_generic+0x10/0x10 [ 128.598121][ T5866] ? tun_get_user+0x2394/0x43e0 [ 128.598133][ T5866] ? tun_get_user+0x2394/0x43e0 [ 128.598142][ T5866] tun_get_user+0x24ca/0x43e0 [ 128.598154][ T5866] ? aa_file_perm+0x192/0x15e0 [ 128.598164][ T5866] ? aa_file_perm+0x50e/0x15e0 [ 128.598172][ T5866] ? __pfx_tun_get_user+0x10/0x10 [ 128.598181][ T5866] ? __lock_acquire+0x6b5/0x2cf0 [ 128.598193][ T5866] ? ref_tracker_alloc+0x35c/0x4c0 [ 128.598204][ T5866] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 128.598214][ T5866] ? tun_get+0x1c/0x2f0 [ 128.598223][ T5866] ? tun_get+0x1c/0x2f0 [ 128.598232][ T5866] ? tun_get+0x1c/0x2f0 [ 128.598240][ T5866] ? tun_get+0x1c/0x2f0 [ 128.598249][ T5866] tun_chr_write_iter+0x113/0x200 [ 128.598258][ T5866] vfs_write+0x61d/0xb90 [ 128.598274][ T5866] ? __pfx_vfs_write+0x10/0x10 [ 128.598288][ T5866] ? __pfx_do_futex+0x10/0x10 [ 128.598302][ T5866] ksys_write+0x150/0x270 [ 128.598316][ T5866] ? __pfx_ksys_write+0x10/0x10 [ 128.598330][ T5866] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.598340][ T5866] do_syscall_64+0x174/0x580 [ 128.598351][ T5866] ? trace_irq_disable+0x3b/0x140 [ 128.598365][ T5866] ? clear_bhb_loop+0x40/0x90 [ 128.598376][ T5866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.598385][ T5866] RIP: 0033:0x7f8e39d5d68e [ 128.598394][ T5866] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 128.598402][ T5866] RSP: 002b:00007ffee04471c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 128.598413][ T5866] RAX: ffffffffffffffda RBX: 0000555576c62500 RCX: 00007f8e39d5d68e [ 128.598419][ T5866] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 128.598425][ T5866] RBP: 00007f8e39e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 128.598431][ T5866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.598441][ T5866] R13: 00007f8e3a015fac R14: 00007f8e3a015fa0 R15: 00007f8e3a015fa0 [ 128.598451][ T5866]