Warning: Permanently added '10.128.10.24' (ED25519) to the list of known hosts.
2025/08/03 03:33:19 ignoring optional flag "sandboxArg"="0"
2025/08/03 03:33:19 parsed 1 programs
[ 123.520112][ T6350] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 126.978570][ T1116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 126.986618][ T1116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 127.102990][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 127.116964][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 128.210911][ T6405] chnl_net:caif_netlink_parms(): no params data found
[ 128.298650][ T6405] bridge0: port 1(bridge_slave_0) entered blocking state
[ 128.305879][ T6405] bridge0: port 1(bridge_slave_0) entered disabled state
[ 128.314605][ T6405] bridge_slave_0: entered allmulticast mode
[ 128.323007][ T6405] bridge_slave_0: entered promiscuous mode
[ 128.335156][ T6405] bridge0: port 2(bridge_slave_1) entered blocking state
[ 128.342773][ T6405] bridge0: port 2(bridge_slave_1) entered disabled state
[ 128.351716][ T6405] bridge_slave_1: entered allmulticast mode
[ 128.359311][ T6405] bridge_slave_1: entered promiscuous mode
[ 128.389482][ T6405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 128.401015][ T6405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 128.429420][ T6405] team0: Port device team_slave_0 added
[ 128.437702][ T6405] team0: Port device team_slave_1 added
[ 128.466124][ T6405] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 128.474518][ T6405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 128.500545][ T6405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 128.513643][ T6405] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 128.520643][ T6405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 128.548001][ T6405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 128.590524][ T6405] hsr_slave_0: entered promiscuous mode
[ 128.597156][ T6405] hsr_slave_1: entered promiscuous mode
[ 129.190224][ T6405] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 129.202056][ T6405] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 129.214439][ T6405] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 129.225638][ T6405] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 129.341648][ T6405] 8021q: adding VLAN 0 to HW filter on device bond0
[ 129.363866][ T6405] 8021q: adding VLAN 0 to HW filter on device team0
[ 129.380114][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state
[ 129.387318][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 129.417836][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state
[ 129.425010][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 129.693461][ T6405] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 129.755386][ T6405] veth0_vlan: entered promiscuous mode
[ 129.772799][ T6405] veth1_vlan: entered promiscuous mode
[ 129.819039][ T6405] veth0_macvtap: entered promiscuous mode
[ 129.830902][ T6405] veth1_macvtap: entered promiscuous mode
[ 129.858466][ T6405] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 129.880249][ T6405] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 129.898789][ T1116] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 129.920211][ T1116] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 129.940680][ T1116] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 129.972529][ T1116] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 130.111072][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 130.210232][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 130.290274][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 130.409556][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 130.909861][ T5885] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 130.921603][ T5885] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 130.931131][ T5885] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 130.940252][ T5885] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 130.949160][ T5885] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
2025/08/03 03:33:31 executed programs: 0
[ 131.719157][ T5171] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 131.727650][ T5171] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 131.735875][ T5171] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 131.744136][ T5171] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 131.751901][ T5171] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 132.110107][ T6520] chnl_net:caif_netlink_parms(): no params data found
[ 132.226527][ T6520] bridge0: port 1(bridge_slave_0) entered blocking state
[ 132.233774][ T6520] bridge0: port 1(bridge_slave_0) entered disabled state
[ 132.242258][ T6520] bridge_slave_0: entered allmulticast mode
[ 132.251011][ T6520] bridge_slave_0: entered promiscuous mode
[ 132.259983][ T6520] bridge0: port 2(bridge_slave_1) entered blocking state
[ 132.267427][ T6520] bridge0: port 2(bridge_slave_1) entered disabled state
[ 132.274818][ T6520] bridge_slave_1: entered allmulticast mode
[ 132.283080][ T6520] bridge_slave_1: entered promiscuous mode
[ 132.333870][ T6520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 132.352966][ T6520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 132.405235][ T6520] team0: Port device team_slave_0 added
[ 132.414103][ T6520] team0: Port device team_slave_1 added
[ 132.486379][ T6520] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 132.493372][ T6520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 132.521713][ T6520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 132.534678][ T6520] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 132.544020][ T6520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 132.572441][ T6520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 132.769607][ T6520] hsr_slave_0: entered promiscuous mode
[ 132.776298][ T6520] hsr_slave_1: entered promiscuous mode
[ 132.783721][ T6520] debugfs: 'hsr0' already exists in 'hsr'
[ 132.793623][ T6520] Cannot create hsr debugfs directory
[ 132.802278][ T36] bridge_slave_1: left allmulticast mode
[ 132.809896][ T36] bridge_slave_1: left promiscuous mode
[ 132.815712][ T36] bridge0: port 2(bridge_slave_1) entered disabled state
[ 132.826221][ T36] bridge_slave_0: left allmulticast mode
[ 132.834392][ T36] bridge_slave_0: left promiscuous mode
[ 132.840795][ T36] bridge0: port 1(bridge_slave_0) entered disabled state
[ 132.883395][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[ 132.894042][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[ 133.137478][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 133.149633][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 133.159501][ T36] bond0 (unregistering): Released all slaves
[ 133.293228][ T36] hsr_slave_0: left promiscuous mode
[ 133.301380][ T36] hsr_slave_1: left promiscuous mode
[ 133.307554][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 133.315144][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 133.323742][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 133.334201][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 133.357967][ T36] veth1_macvtap: left promiscuous mode
[ 133.363608][ T36] veth0_macvtap: left promiscuous mode
[ 133.371020][ T36] veth1_vlan: left promiscuous mode
[ 133.378681][ T36] veth0_vlan: left promiscuous mode
[ 133.836705][ T5171] Bluetooth: hci0: command tx timeout
[ 133.875460][ T36] team0 (unregistering): Port device team_slave_1 removed
[ 133.915749][ T36] team0 (unregistering): Port device team_slave_0 removed
[ 134.984816][ T6520] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 135.008329][ T6520] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 135.031585][ T6520] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 135.055137][ T6520] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 135.281453][ T6520] 8021q: adding VLAN 0 to HW filter on device bond0
[ 135.313012][ T6520] 8021q: adding VLAN 0 to HW filter on device team0
[ 135.330829][ T36] bridge0: port 1(bridge_slave_0) entered blocking state
[ 135.338125][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 135.369063][ T36] bridge0: port 2(bridge_slave_1) entered blocking state
[ 135.376247][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 135.639821][ T6520] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 135.704587][ T6520] veth0_vlan: entered promiscuous mode
[ 135.719924][ T6520] veth1_vlan: entered promiscuous mode
[ 135.759866][ T6520] veth0_macvtap: entered promiscuous mode
[ 135.774051][ T6520] veth1_macvtap: entered promiscuous mode
[ 135.798559][ T6520] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 135.817435][ T6520] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 135.833889][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 135.855841][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 135.875786][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 135.892519][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 135.916879][ T5171] Bluetooth: hci0: command tx timeout
[ 135.968040][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 135.986512][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 136.025708][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 136.035403][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 136.096688][ T6640] BUG: Bad page state in process syz.0.15 pfn:31775
[ 136.103626][ T6640] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888031775fc0 pfn:0x31775
[ 136.113876][ T6640] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 136.121252][ T6640] raw: 00fff00000000000 dead000000000040 ffff888022a93000 0000000000000000
[ 136.129944][ T6640] raw: ffff888031775fc0 0000000000000001 00000000ffffffff 0000000000000000
[ 136.138590][ T6640] page dumped because: page_pool leak
[ 136.143983][ T6640] page_owner tracks the page as allocated
[ 136.149901][ T6640] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6640, tgid 6639 (syz.0.15), ts 136096528152, free_ts 132754140138
[ 136.167353][ T6640] post_alloc_hook+0x240/0x2a0
[ 136.172250][ T6640] get_page_from_freelist+0x21d5/0x22b0
[ 136.178012][ T6640] __alloc_frozen_pages_noprof+0x181/0x370
[ 136.183849][ T6640] alloc_pages_bulk_noprof+0x560/0x710
[ 136.189419][ T6640] __page_pool_alloc_netmems_slow+0x127/0x740
[ 136.195526][ T6640] skb_pp_cow_data+0xb47/0x13e0
[ 136.200445][ T6640] do_xdp_generic+0x699/0x11a0
[ 136.205234][ T6640] __netif_receive_skb_core+0x17f9/0x4020
[ 136.211062][ T6640] __netif_receive_skb+0x72/0x380
[ 136.216215][ T6640] netif_receive_skb+0x1cb/0x790
[ 136.221232][ T6640] tun_rx_batched+0x1b9/0x730
[ 136.225929][ T6640] tun_get_user+0x2aa2/0x3e20
[ 136.230773][ T6640] tun_chr_write_iter+0x113/0x200
[ 136.235827][ T6640] vfs_write+0x54b/0xa90
[ 136.240156][ T6640] ksys_write+0x145/0x250
[ 136.244513][ T6640] do_syscall_64+0xfa/0x3b0
[ 136.249082][ T6640] page last free pid 36 tgid 36 stack trace:
[ 136.255088][ T6640] __free_frozen_pages+0xbb1/0xd20
[ 136.260388][ T6640] __put_partials+0x156/0x1a0
[ 136.265113][ T6640] put_cpu_partial+0x17c/0x250
[ 136.269957][ T6640] __slab_free+0x2d5/0x3c0
[ 136.274402][ T6640] qlist_free_all+0x97/0x140
[ 136.279073][ T6640] kasan_quarantine_reduce+0x148/0x160
[ 136.284573][ T6640] __kasan_slab_alloc+0x22/0x80
[ 136.289526][ T6640] __kmalloc_node_track_caller_noprof+0x216/0x4e0
[ 136.295998][ T6640] kmemdup_noprof+0x2b/0x70
[ 136.300585][ T6640] __addrconf_sysctl_register+0x9e/0x4c0
[ 136.306373][ T6640] addrconf_sysctl_register+0x168/0x1c0
[ 136.312030][ T6640] ipv6_add_dev+0xd46/0x1370
[ 136.316767][ T6640] addrconf_notify+0x794/0x1010
[ 136.321646][ T6640] notifier_call_chain+0x1b3/0x3e0
[ 136.326811][ T6640] register_netdevice+0x1608/0x1ae0
[ 136.332032][ T6640] nsim_create+0xae8/0xf10
[ 136.336525][ T6640] Modules linked in:
[ 136.340478][ T6640] CPU: 1 UID: 0 PID: 6640 Comm: syz.0.15 Not tainted 6.16.0-syzkaller-g186f3edfdd41 #0 PREEMPT(full)
[ 136.340503][ T6640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 136.340518][ T6640] Call Trace:
[ 136.340529][ T6640]
[ 136.340537][ T6640] dump_stack_lvl+0x189/0x250
[ 136.340565][ T6640] ? __pfx_dump_stack_lvl+0x10/0x10
[ 136.340587][ T6640] ? __pfx_print_modules+0x10/0x10
[ 136.340614][ T6640] ? ksys_write+0x145/0x250
[ 136.340640][ T6640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 136.340670][ T6640] bad_page+0x180/0x1c0
[ 136.340697][ T6640] __free_frozen_pages+0xcd1/0xd20
[ 136.340727][ T6640] bpf_xdp_frags_shrink_tail+0x3a5/0x750
[ 136.340771][ T6640] bpf_xdp_adjust_tail+0x1d6/0x220
[ 136.340799][ T6640] bpf_prog_f476d5219b92964a+0x1e/0x24
[ 136.340820][ T6640] bpf_prog_run_generic_xdp+0x64b/0x14c0
[ 136.340877][ T6640] do_xdp_generic+0x9f7/0x11a0
[ 136.340915][ T6640] ? __pfx_do_xdp_generic+0x10/0x10
[ 136.340938][ T6640] ? __skb_flow_dissect+0x5ef8/0x68b0
[ 136.340993][ T6640] __netif_receive_skb_core+0x17f9/0x4020
[ 136.341024][ T6640] ? __pfx___skb_flow_dissect+0x10/0x10
[ 136.341044][ T6640] ? __up_read+0x280/0x680
[ 136.341066][ T6640] ? __pfx___up_read+0x10/0x10
[ 136.341092][ T6640] ? do_user_addr_fault+0xbc1/0x1390
[ 136.341130][ T6640] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 136.341163][ T6640] ? irqentry_exit+0x74/0x90
[ 136.341185][ T6640] ? __lock_acquire+0xab9/0xd20
[ 136.341218][ T6640] ? netif_receive_skb+0x115/0x790
[ 136.341245][ T6640] ? netif_receive_skb+0x115/0x790
[ 136.341276][ T6640] __netif_receive_skb+0x72/0x380
[ 136.341310][ T6640] ? netif_receive_skb+0x115/0x790
[ 136.341335][ T6640] netif_receive_skb+0x1cb/0x790
[ 136.341362][ T6640] ? __pfx___local_bh_disable_ip+0x10/0x10
[ 136.341392][ T6640] ? __pfx_netif_receive_skb+0x10/0x10
[ 136.341419][ T6640] ? __pfx__copy_from_iter+0x10/0x10
[ 136.341439][ T6640] ? sock_alloc_send_pskb+0x875/0x990
[ 136.341465][ T6640] ? tun_rx_batched+0x160/0x730
[ 136.341490][ T6640] tun_rx_batched+0x1b9/0x730
[ 136.341511][ T6640] ? __lock_acquire+0xab9/0xd20
[ 136.341541][ T6640] ? __pfx_tun_rx_batched+0x10/0x10
[ 136.341566][ T6640] ? tun_get_user+0x266c/0x3e20
[ 136.341602][ T6640] tun_get_user+0x2aa2/0x3e20
[ 136.341630][ T6640] ? rcu_is_watching+0x15/0xb0
[ 136.341663][ T6640] ? tun_get_user+0x266c/0x3e20
[ 136.341691][ T6640] ? __pfx_tun_get_user+0x10/0x10
[ 136.341719][ T6640] ? __lock_acquire+0xab9/0xd20
[ 136.341755][ T6640] ? ref_tracker_alloc+0x318/0x460
[ 136.341772][ T6640] ? __lock_acquire+0xab9/0xd20
[ 136.341798][ T6640] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 136.341823][ T6640] ? tun_get+0x1c/0x2f0
[ 136.341849][ T6640] ? tun_get+0x1c/0x2f0
[ 136.341870][ T6640] ? tun_get+0x1c/0x2f0
[ 136.341896][ T6640] tun_chr_write_iter+0x113/0x200
[ 136.341920][ T6640] vfs_write+0x54b/0xa90
[ 136.341953][ T6640] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 136.341975][ T6640] ? __pfx_vfs_write+0x10/0x10
[ 136.342014][ T6640] ? __fget_files+0x2a/0x420
[ 136.342044][ T6640] ksys_write+0x145/0x250
[ 136.342075][ T6640] ? __pfx_ksys_write+0x10/0x10
[ 136.342105][ T6640] ? rcu_is_watching+0x15/0xb0
[ 136.342139][ T6640] ? do_syscall_64+0xbe/0x3b0
[ 136.342162][ T6640] do_syscall_64+0xfa/0x3b0
[ 136.342179][ T6640] ? lockdep_hardirqs_on+0x9c/0x150
[ 136.342206][ T6640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 136.342224][ T6640] ? clear_bhb_loop+0x60/0xb0
[ 136.342247][ T6640] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 136.342265][ T6640] RIP: 0033:0x7fa422f7e98f
[ 136.342281][ T6640] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 136.342297][ T6640] RSP: 002b:00007fa423e56020 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 136.342316][ T6640] RAX: ffffffffffffffda RBX: 00007fa423145fa0 RCX: 00007fa422f7e98f
[ 136.342331][ T6640] RDX: 0000000000011dc0 RSI: 00000000200004c0 RDI: 00000000000000c8
[ 136.342342][ T6640] RBP: 00007fa422ff3cc8 R08: 0000000000000000 R09: 0000000000000000
[ 136.342354][ T6640] R10: 0000000000011dc0 R11: 0000000000000293 R12: 0000000000000000
[ 136.342365][ T6640] R13: 0000000000000000 R14: 00007fa423145fa0 R15: 00007ffd16b0f158
[ 136.342395][ T6640]
[ 136.342402][ T6640] Disabling lock debugging due to kernel taint
[ 136.763433][ T6640] BUG: Bad page state in process syz.0.15 pfn:20bde
[ 136.770428][ T6640] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888020bdefc0 pfn:0x20bde
[ 136.780712][ T6640] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 136.787882][ T6640] raw: 00fff00000000000 dead000000000040 ffff888022a93000 0000000000000000
[ 136.796691][ T6640] raw: ffff888020bdefc0 0000000000000001 00000000ffffffff 0000000000000000
[ 136.805283][ T6640] page dumped because: page_pool leak
[ 136.810716][ T6640] page_owner tracks the page as allocated
[ 136.816464][ T6640] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6640, tgid 6639 (syz.0.15), ts 136096510432, free_ts 132754158529
[ 136.833452][ T6640] post_alloc_hook+0x240/0x2a0
[ 136.838265][ T6640] get_page_from_freelist+0x21d5/0x22b0
[ 136.843831][ T6640] __alloc_frozen_pages_noprof+0x181/0x370
[ 136.849713][ T6640] alloc_pages_bulk_noprof+0x560/0x710
[ 136.855274][ T6640] __page_pool_alloc_netmems_slow+0x127/0x740
[ 136.861420][ T6640] skb_pp_cow_data+0xb47/0x13e0
[ 136.866282][ T6640] do_xdp_generic+0x699/0x11a0
[ 136.871130][ T6640] __netif_receive_skb_core+0x17f9/0x4020
[ 136.876905][ T6640] __netif_receive_skb+0x72/0x380
[ 136.882039][ T6640] netif_receive_skb+0x1cb/0x790
[ 136.887151][ T6640] tun_rx_batched+0x1b9/0x730
[ 136.891863][ T6640] tun_get_user+0x2aa2/0x3e20
[ 136.896604][ T6640] tun_chr_write_iter+0x113/0x200
[ 136.901651][ T6640] vfs_write+0x54b/0xa90
[ 136.905918][ T6640] ksys_write+0x145/0x250
[ 136.910415][ T6640] do_syscall_64+0xfa/0x3b0
[ 136.914975][ T6640] page last free pid 36 tgid 36 stack trace:
[ 136.921012][ T6640] __free_frozen_pages+0xbb1/0xd20
[ 136.926175][ T6640] __put_partials+0x156/0x1a0
[ 136.930919][ T6640] put_cpu_partial+0x17c/0x250
[ 136.935712][ T6640] __slab_free+0x2d5/0x3c0
[ 136.940190][ T6640] qlist_free_all+0x97/0x140
[ 136.944976][ T6640] kasan_quarantine_reduce+0x148/0x160
[ 136.950527][ T6640] __kasan_slab_alloc+0x22/0x80
[ 136.955397][ T6640] __kmalloc_node_track_caller_noprof+0x216/0x4e0
[ 136.961893][ T6640] kmemdup_noprof+0x2b/0x70
[ 136.966455][ T6640] __addrconf_sysctl_register+0x9e/0x4c0
[ 136.972124][ T6640] addrconf_sysctl_register+0x168/0x1c0
[ 136.977750][ T6640] ipv6_add_dev+0xd46/0x1370
[ 136.982377][ T6640] addrconf_notify+0x794/0x1010
[ 136.987306][ T6640] notifier_call_chain+0x1b3/0x3e0
[ 136.992514][ T6640] register_netdevice+0x1608/0x1ae0
[ 136.997789][ T6640] nsim_create+0xae8/0xf10
[ 137.002220][ T6640] Modules linked in:
[ 137.006129][ T6640] CPU: 1 UID: 0 PID: 6640 Comm: syz.0.15 Tainted: G B 6.16.0-syzkaller-g186f3edfdd41 #0 PREEMPT(full)
[ 137.006159][ T6640] Tainted: [B]=BAD_PAGE
[ 137.006166][ T6640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 137.006177][ T6640] Call Trace:
[ 137.006184][ T6640]
[ 137.006191][ T6640] dump_stack_lvl+0x189/0x250
[ 137.006216][ T6640] ? __pfx_dump_stack_lvl+0x10/0x10
[ 137.006236][ T6640] ? __pfx_print_modules+0x10/0x10
[ 137.006260][ T6640] ? ksys_write+0x145/0x250
[ 137.006287][ T6640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 137.006309][ T6640] bad_page+0x180/0x1c0
[ 137.006336][ T6640] __free_frozen_pages+0xcd1/0xd20
[ 137.006354][ T6640] bpf_xdp_frags_shrink_tail+0x3a5/0x750
[ 137.006382][ T6640] bpf_xdp_adjust_tail+0x1d6/0x220
[ 137.006399][ T6640] bpf_prog_f476d5219b92964a+0x1e/0x24
[ 137.006413][ T6640] bpf_prog_run_generic_xdp+0x64b/0x14c0
[ 137.006448][ T6640] do_xdp_generic+0x9f7/0x11a0
[ 137.006478][ T6640] ? __pfx_do_xdp_generic+0x10/0x10
[ 137.006501][ T6640] ? __skb_flow_dissect+0x5ef8/0x68b0
[ 137.006533][ T6640] __netif_receive_skb_core+0x17f9/0x4020
[ 137.006562][ T6640] ? __pfx___skb_flow_dissect+0x10/0x10
[ 137.006583][ T6640] ? __up_read+0x280/0x680
[ 137.006603][ T6640] ? __pfx___up_read+0x10/0x10
[ 137.006621][ T6640] ? do_user_addr_fault+0xbc1/0x1390
[ 137.006652][ T6640] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 137.006681][ T6640] ? irqentry_exit+0x74/0x90
[ 137.006699][ T6640] ? __lock_acquire+0xab9/0xd20
[ 137.006725][ T6640] ? netif_receive_skb+0x115/0x790
[ 137.006751][ T6640] ? netif_receive_skb+0x115/0x790
[ 137.006777][ T6640] __netif_receive_skb+0x72/0x380
[ 137.006806][ T6640] ? netif_receive_skb+0x115/0x790
[ 137.006831][ T6640] netif_receive_skb+0x1cb/0x790
[ 137.006857][ T6640] ? __pfx___local_bh_disable_ip+0x10/0x10
[ 137.006886][ T6640] ? __pfx_netif_receive_skb+0x10/0x10
[ 137.006912][ T6640] ? __pfx__copy_from_iter+0x10/0x10
[ 137.006932][ T6640] ? sock_alloc_send_pskb+0x875/0x990
[ 137.006955][ T6640] ? tun_rx_batched+0x160/0x730
[ 137.006975][ T6640] tun_rx_batched+0x1b9/0x730
[ 137.006994][ T6640] ? __lock_acquire+0xab9/0xd20
[ 137.007028][ T6640] ? __pfx_tun_rx_batched+0x10/0x10
[ 137.007050][ T6640] ? tun_get_user+0x266c/0x3e20
[ 137.007073][ T6640] tun_get_user+0x2aa2/0x3e20
[ 137.007093][ T6640] ? rcu_is_watching+0x15/0xb0
[ 137.007120][ T6640] ? tun_get_user+0x266c/0x3e20
[ 137.007142][ T6640] ? __pfx_tun_get_user+0x10/0x10
[ 137.007164][ T6640] ? __lock_acquire+0xab9/0xd20
[ 137.007191][ T6640] ? ref_tracker_alloc+0x318/0x460
[ 137.007208][ T6640] ? __lock_acquire+0xab9/0xd20
[ 137.007232][ T6640] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 137.007251][ T6640] ? tun_get+0x1c/0x2f0
[ 137.007272][ T6640] ? tun_get+0x1c/0x2f0
[ 137.007291][ T6640] ? tun_get+0x1c/0x2f0
[ 137.007310][ T6640] tun_chr_write_iter+0x113/0x200
[ 137.007331][ T6640] vfs_write+0x54b/0xa90
[ 137.007364][ T6640] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 137.007384][ T6640] ? __pfx_vfs_write+0x10/0x10
[ 137.007413][ T6640] ? __fget_files+0x2a/0x420
[ 137.007435][ T6640] ksys_write+0x145/0x250
[ 137.007460][ T6640] ? __pfx_ksys_write+0x10/0x10
[ 137.007485][ T6640] ? rcu_is_watching+0x15/0xb0
[ 137.007512][ T6640] ? do_syscall_64+0xbe/0x3b0
[ 137.007528][ T6640] do_syscall_64+0xfa/0x3b0
[ 137.007543][ T6640] ? lockdep_hardirqs_on+0x9c/0x150
[ 137.007570][ T6640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 137.007589][ T6640] ? clear_bhb_loop+0x60/0xb0
[ 137.007608][ T6640] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 137.007626][ T6640] RIP: 0033:0x7fa422f7e98f
[ 137.007641][ T6640] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 137.007657][ T6640] RSP: 002b:00007fa423e56020 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 137.007677][ T6640] RAX: ffffffffffffffda RBX: 00007fa423145fa0 RCX: 00007fa422f7e98f
[ 137.007691][ T6640] RDX: 0000000000011dc0 RSI: 00000000200004c0 RDI: 00000000000000c8
[ 137.007703][ T6640] RBP: 00007fa422ff3cc8 R08: 0000000000000000 R09: 0000000000000000
[ 137.007714][ T6640] R10: 0000000000011dc0 R11: 0000000000000293 R12: 0000000000000000
[ 137.007724][ T6640] R13: 0000000000000000 R14: 00007fa423145fa0 R15: 00007ffd16b0f158
[ 137.007742][ T6640]
[ 137.423462][ T6640] BUG: Bad page state in process syz.0.15 pfn:75f59
[ 137.430351][ T6640] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888075f59f50 pfn:0x75f59
[ 137.440469][ T6640] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 137.447637][ T6640] raw: 00fff00000000000 dead000000000040 ffff888022a93000 0000000000000000
[ 137.456364][ T6640] raw: ffff888075f59f50 0000000000000001 00000000ffffffff 0000000000000000
[ 137.464967][ T6640] page dumped because: page_pool leak
[ 137.470396][ T6640] page_owner tracks the page as allocated
[ 137.476119][ T6640] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6640, tgid 6639 (syz.0.15), ts 136096492514, free_ts 132754446638
[ 137.493038][ T6640] post_alloc_hook+0x240/0x2a0
[ 137.497845][ T6640] get_page_from_freelist+0x21d5/0x22b0
[ 137.503425][ T6640] __alloc_frozen_pages_noprof+0x181/0x370
[ 137.509381][ T6640] alloc_pages_bulk_noprof+0x560/0x710
[ 137.514862][ T6640] __page_pool_alloc_netmems_slow+0x127/0x740
[ 137.521129][ T6640] skb_pp_cow_data+0xb47/0x13e0
[ 137.526008][ T6640] do_xdp_generic+0x699/0x11a0
[ 137.530846][ T6640] __netif_receive_skb_core+0x17f9/0x4020
[ 137.536606][ T6640] __netif_receive_skb+0x72/0x380
[ 137.541654][ T6640] netif_receive_skb+0x1cb/0x790
[ 137.546838][ T6640] tun_rx_batched+0x1b9/0x730
[ 137.551551][ T6640] tun_get_user+0x2aa2/0x3e20
[ 137.556240][ T6640] tun_chr_write_iter+0x113/0x200
[ 137.561605][ T6640] vfs_write+0x54b/0xa90
[ 137.565947][ T6640] ksys_write+0x145/0x250
[ 137.570343][ T6640] do_syscall_64+0xfa/0x3b0
[ 137.574948][ T6640] page last free pid 36 tgid 36 stack trace:
[ 137.581227][ T6640] __free_frozen_pages+0xbb1/0xd20
[ 137.586385][ T6640] __put_partials+0x156/0x1a0
[ 137.591069][ T6640] put_cpu_partial+0x17c/0x250
[ 137.595839][ T6640] __slab_free+0x2d5/0x3c0
[ 137.600337][ T6640] qlist_free_all+0x97/0x140
[ 137.604960][ T6640] kasan_quarantine_reduce+0x148/0x160
[ 137.610509][ T6640] __kasan_slab_alloc+0x22/0x80
[ 137.615380][ T6640] __kmalloc_node_track_caller_noprof+0x216/0x4e0
[ 137.621894][ T6640] kmemdup_noprof+0x2b/0x70
[ 137.626486][ T6640] __addrconf_sysctl_register+0x9e/0x4c0
[ 137.632141][ T6640] addrconf_sysctl_register+0x168/0x1c0
[ 137.637756][ T6640] ipv6_add_dev+0xd46/0x1370
[ 137.642362][ T6640] addrconf_notify+0x794/0x1010
[ 137.647274][ T6640] notifier_call_chain+0x1b3/0x3e0
[ 137.652398][ T6640] register_netdevice+0x1608/0x1ae0
[ 137.657660][ T6640] nsim_create+0xae8/0xf10
[ 137.662090][ T6640] Modules linked in:
[ 137.666170][ T6640] CPU: 1 UID: 0 PID: 6640 Comm: syz.0.15 Tainted: G B 6.16.0-syzkaller-g186f3edfdd41 #0 PREEMPT(full)
[ 137.666198][ T6640] Tainted: [B]=BAD_PAGE
[ 137.666204][ T6640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 137.666221][ T6640] Call Trace:
[ 137.666228][ T6640]
[ 137.666235][ T6640] dump_stack_lvl+0x189/0x250
[ 137.666269][ T6640] ? __pfx_dump_stack_lvl+0x10/0x10
[ 137.666289][ T6640] ? __pfx_print_modules+0x10/0x10
[ 137.666319][ T6640] ? ksys_write+0x145/0x250
[ 137.666340][ T6640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 137.666359][ T6640] bad_page+0x180/0x1c0
[ 137.666382][ T6640] __free_frozen_pages+0xcd1/0xd20
[ 137.666404][ T6640] bpf_xdp_frags_shrink_tail+0x3a5/0x750
[ 137.666435][ T6640] bpf_xdp_adjust_tail+0x1d6/0x220
[ 137.666464][ T6640] bpf_prog_f476d5219b92964a+0x1e/0x24
[ 137.666480][ T6640] bpf_prog_run_generic_xdp+0x64b/0x14c0
[ 137.666516][ T6640] do_xdp_generic+0x9f7/0x11a0
[ 137.666542][ T6640] ? __pfx_do_xdp_generic+0x10/0x10
[ 137.666564][ T6640] ? __skb_flow_dissect+0x5ef8/0x68b0
[ 137.666598][ T6640] __netif_receive_skb_core+0x17f9/0x4020
[ 137.666626][ T6640] ? __pfx___skb_flow_dissect+0x10/0x10
[ 137.666646][ T6640] ? __up_read+0x280/0x680
[ 137.666664][ T6640] ? __pfx___up_read+0x10/0x10
[ 137.666683][ T6640] ? do_user_addr_fault+0xbc1/0x1390
[ 137.666713][ T6640] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 137.666742][ T6640] ? irqentry_exit+0x74/0x90
[ 137.666759][ T6640] ? __lock_acquire+0xab9/0xd20
[ 137.666784][ T6640] ? netif_receive_skb+0x115/0x790
[ 137.666808][ T6640] ? netif_receive_skb+0x115/0x790
[ 137.666835][ T6640] __netif_receive_skb+0x72/0x380
[ 137.666864][ T6640] ? netif_receive_skb+0x115/0x790
[ 137.666890][ T6640] netif_receive_skb+0x1cb/0x790
[ 137.666913][ T6640] ? __pfx___local_bh_disable_ip+0x10/0x10
[ 137.666939][ T6640] ? __pfx_netif_receive_skb+0x10/0x10
[ 137.666963][ T6640] ? __pfx__copy_from_iter+0x10/0x10
[ 137.666980][ T6640] ? sock_alloc_send_pskb+0x875/0x990
[ 137.667013][ T6640] ? tun_rx_batched+0x160/0x730
[ 137.667033][ T6640] tun_rx_batched+0x1b9/0x730
[ 137.667051][ T6640] ? __lock_acquire+0xab9/0xd20
[ 137.667074][ T6640] ? __pfx_tun_rx_batched+0x10/0x10
[ 137.667095][ T6640] ? tun_get_user+0x266c/0x3e20
[ 137.667119][ T6640] tun_get_user+0x2aa2/0x3e20
[ 137.667140][ T6640] ? rcu_is_watching+0x15/0xb0
[ 137.667165][ T6640] ? tun_get_user+0x266c/0x3e20
[ 137.667184][ T6640] ? __pfx_tun_get_user+0x10/0x10
[ 137.667202][ T6640] ? __lock_acquire+0xab9/0xd20
[ 137.667232][ T6640] ? ref_tracker_alloc+0x318/0x460
[ 137.667248][ T6640] ? __lock_acquire+0xab9/0xd20
[ 137.667270][ T6640] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 137.667289][ T6640] ? tun_get+0x1c/0x2f0
[ 137.667311][ T6640] ? tun_get+0x1c/0x2f0
[ 137.667329][ T6640] ? tun_get+0x1c/0x2f0
[ 137.667350][ T6640] tun_chr_write_iter+0x113/0x200
[ 137.667374][ T6640] vfs_write+0x54b/0xa90
[ 137.667402][ T6640] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 137.667422][ T6640] ? __pfx_vfs_write+0x10/0x10
[ 137.667453][ T6640] ? __fget_files+0x2a/0x420
[ 137.667476][ T6640] ksys_write+0x145/0x250
[ 137.667502][ T6640] ? __pfx_ksys_write+0x10/0x10
[ 137.667526][ T6640] ? rcu_is_watching+0x15/0xb0
[ 137.667555][ T6640] ? do_syscall_64+0xbe/0x3b0
[ 137.667573][ T6640] do_syscall_64+0xfa/0x3b0
[ 137.667589][ T6640] ? lockdep_hardirqs_on+0x9c/0x150
[ 137.667616][ T6640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 137.667634][ T6640] ? clear_bhb_loop+0x60/0xb0
[ 137.667655][ T6640] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 137.667674][ T6640] RIP: 0033:0x7fa422f7e98f
[ 137.667691][ T6640] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 137.667706][ T6640] RSP: 002b:00007fa423e56020 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 137.667724][ T6640] RAX: ffffffffffffffda RBX: 00007fa423145fa0 RCX: 00007fa422f7e98f
[ 137.667738][ T6640] RDX: 0000000000011dc0 RSI: 00000000200004c0 RDI: 00000000000000c8
[ 137.667750][ T6640] RBP: 00007fa422ff3cc8 R08: 0000000000000000 R09: 0000000000000000
[ 137.667762][ T6640] R10: 0000000000011dc0 R11: 0000000000000293 R12: 0000000000000000
[ 137.667773][ T6640] R13: 0000000000000000 R14: 00007fa423145fa0 R15: 00007ffd16b0f158
[ 137.667793][ T6640]
[ 138.084015][ T6640] BUG: Bad page state in process syz.0.15 pfn:769f6
[ 138.090737][ T6640] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880769f6ee0 pfn:0x769f6
[ 138.100931][ T6640] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 138.108211][ T6640] raw: 00fff00000000000 dead000000000040 ffff888022a93000 0000000000000000
[ 138.116837][ T6640] raw: ffff8880769f6ee0 0000000000000001 00000000ffffffff 0000000000000000
[ 138.125441][ T6640] page dumped because: page_pool leak
[ 138.130948][ T6640] page_owner tracks the page as allocated
[ 138.136715][ T6640] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6640, tgid 6639 (syz.0.15), ts 136096474496, free_ts 132789811135
[ 138.153812][ T6640] post_alloc_hook+0x240/0x2a0
[ 138.158635][ T6640] get_page_from_freelist+0x21d5/0x22b0
[ 138.164209][ T6640] __alloc_frozen_pages_noprof+0x181/0x370
[ 138.170108][ T6640] alloc_pages_bulk_noprof+0x560/0x710
[ 138.175586][ T6640] __page_pool_alloc_netmems_slow+0x127/0x740
[ 138.181734][ T6640] skb_pp_cow_data+0xb47/0x13e0
[ 138.186626][ T6640] do_xdp_generic+0x699/0x11a0
[ 138.191410][ T6640] __netif_receive_skb_core+0x17f9/0x4020
[ 138.197204][ T6640] __netif_receive_skb+0x72/0x380
[ 138.202251][ T6640] netif_receive_skb+0x1cb/0x790
[ 138.207259][ T6640] tun_rx_batched+0x1b9/0x730
[ 138.212017][ T6640] tun_get_user+0x2aa2/0x3e20
[ 138.216762][ T6640] tun_chr_write_iter+0x113/0x200
[ 138.221802][ T6640] vfs_write+0x54b/0xa90
[ 138.226067][ T6640] ksys_write+0x145/0x250
[ 138.230482][ T6640] do_syscall_64+0xfa/0x3b0
[ 138.235148][ T6640] page last free pid 6520 tgid 6520 stack trace:
[ 138.241551][ T6640] __free_frozen_pages+0xbb1/0xd20
[ 138.246803][ T6640] rcu_core+0xca8/0x1770
[ 138.251071][ T6640] handle_softirqs+0x286/0x870
[ 138.255948][ T6640] __irq_exit_rcu+0xca/0x1f0
[ 138.260709][ T6640] irq_exit_rcu+0x9/0x30
[ 138.264999][ T6640] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 138.270721][ T6640] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 138.276741][ T6640] Modules linked in:
[ 138.280662][ T6640] CPU: 1 UID: 0 PID: 6640 Comm: syz.0.15 Tainted: G B 6.16.0-syzkaller-g186f3edfdd41 #0 PREEMPT(full)
[ 138.280691][ T6640] Tainted: [B]=BAD_PAGE
[ 138.280698][ T6640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 138.280709][ T6640] Call Trace:
[ 138.280716][ T6640]
[ 138.280723][ T6640] dump_stack_lvl+0x189/0x250
[ 138.280749][ T6640] ? __pfx_dump_stack_lvl+0x10/0x10
[ 138.280768][ T6640] ? __pfx_print_modules+0x10/0x10
[ 138.280793][ T6640] ? ksys_write+0x145/0x250
[ 138.280819][ T6640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 138.280841][ T6640] bad_page+0x180/0x1c0
[ 138.280866][ T6640] __free_frozen_pages+0xcd1/0xd20
[ 138.280888][ T6640] bpf_xdp_frags_shrink_tail+0x3a5/0x750
[ 138.280920][ T6640] bpf_xdp_adjust_tail+0x1d6/0x220
[ 138.280942][ T6640] bpf_prog_f476d5219b92964a+0x1e/0x24
[ 138.280957][ T6640] bpf_prog_run_generic_xdp+0x64b/0x14c0
[ 138.281001][ T6640] do_xdp_generic+0x9f7/0x11a0
[ 138.281030][ T6640] ? __pfx_do_xdp_generic+0x10/0x10
[ 138.281052][ T6640] ? __skb_flow_dissect+0x5ef8/0x68b0
[ 138.281085][ T6640] __netif_receive_skb_core+0x17f9/0x4020
[ 138.281115][ T6640] ? __pfx___skb_flow_dissect+0x10/0x10
[ 138.281134][ T6640] ? __up_read+0x280/0x680
[ 138.281151][ T6640] ? __pfx___up_read+0x10/0x10
[ 138.281169][ T6640] ? do_user_addr_fault+0xbc1/0x1390
[ 138.281199][ T6640] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 138.281226][ T6640] ? irqentry_exit+0x74/0x90
[ 138.281244][ T6640] ? __lock_acquire+0xab9/0xd20
[ 138.281268][ T6640] ? netif_receive_skb+0x115/0x790
[ 138.281291][ T6640] ? netif_receive_skb+0x115/0x790
[ 138.281317][ T6640] __netif_receive_skb+0x72/0x380
[ 138.281346][ T6640] ? netif_receive_skb+0x115/0x790
[ 138.281370][ T6640] netif_receive_skb+0x1cb/0x790
[ 138.281395][ T6640] ? __pfx___local_bh_disable_ip+0x10/0x10
[ 138.281422][ T6640] ? __pfx_netif_receive_skb+0x10/0x10
[ 138.281446][ T6640] ? __pfx__copy_from_iter+0x10/0x10
[ 138.281466][ T6640] ? sock_alloc_send_pskb+0x875/0x990
[ 138.281491][ T6640] ? tun_rx_batched+0x160/0x730
[ 138.281512][ T6640] tun_rx_batched+0x1b9/0x730
[ 138.281533][ T6640] ? __lock_acquire+0xab9/0xd20
[ 138.281556][ T6640] ? __pfx_tun_rx_batched+0x10/0x10
[ 138.281577][ T6640] ? tun_get_user+0x266c/0x3e20
[ 138.281603][ T6640] tun_get_user+0x2aa2/0x3e20
[ 138.281626][ T6640] ? rcu_is_watching+0x15/0xb0
[ 138.281655][ T6640] ? tun_get_user+0x266c/0x3e20
[ 138.281678][ T6640] ? __pfx_tun_get_user+0x10/0x10
[ 138.281699][ T6640] ? __lock_acquire+0xab9/0xd20
[ 138.281727][ T6640] ? ref_tracker_alloc+0x318/0x460
[ 138.281742][ T6640] ? __lock_acquire+0xab9/0xd20
[ 138.281764][ T6640] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 138.281782][ T6640] ? tun_get+0x1c/0x2f0
[ 138.281800][ T6640] ? tun_get+0x1c/0x2f0
[ 138.281818][ T6640] ? tun_get+0x1c/0x2f0
[ 138.281839][ T6640] tun_chr_write_iter+0x113/0x200
[ 138.281860][ T6640] vfs_write+0x54b/0xa90
[ 138.281888][ T6640] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 138.281905][ T6640] ? __pfx_vfs_write+0x10/0x10
[ 138.281931][ T6640] ? __fget_files+0x2a/0x420
[ 138.281952][ T6640] ksys_write+0x145/0x250
[ 138.281985][ T6640] ? __pfx_ksys_write+0x10/0x10
[ 138.282010][ T6640] ? rcu_is_watching+0x15/0xb0
[ 138.282036][ T6640] ? do_syscall_64+0xbe/0x3b0
[ 138.282054][ T6640] do_syscall_64+0xfa/0x3b0
[ 138.282071][ T6640] ? lockdep_hardirqs_on+0x9c/0x150
[ 138.282098][ T6640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 138.282116][ T6640] ? clear_bhb_loop+0x60/0xb0
[ 138.282136][ T6640] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 138.282154][ T6640] RIP: 0033:0x7fa422f7e98f
[ 138.282170][ T6640] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 138.282185][ T6640] RSP: 002b:00007fa423e56020 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 138.282205][ T6640] RAX: ffffffffffffffda RBX: 00007fa423145fa0 RCX: 00007fa422f7e98f
[ 138.282218][ T6640] RDX: 0000000000011dc0 RSI: 00000000200004c0 RDI: 00000000000000c8
[ 138.282230][ T6640] RBP: 00007fa422ff3cc8 R08: 0000000000000000 R09: 0000000000000000
[ 138.282242][ T6640] R10: 0000000000011dc0 R11: 0000000000000293 R12: 0000000000000000
[ 138.282253][ T6640] R13: 0000000000000000 R14: 00007fa423145fa0 R15: 00007ffd16b0f158
[ 138.282270][ T6640]
[ 138.282281][ T6640] BUG: Bad page state in process syz.0.15 pfn:202b5
[ 138.706269][ T6640] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880202b5aa0 pfn:0x202b5
[ 138.716392][ T6640] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 138.723538][ T6640] raw: 00fff00000000000 dead000000000040 ffff888022a93000 0000000000000000
[ 138.732186][ T6640] raw: ffff8880202b5aa0 0000000000000001 00000000ffffffff 0000000000000000
[ 138.740908][ T6640] page dumped because: page_pool leak
[ 138.746488][ T6640] page_owner tracks the page as allocated
[ 138.752376][ T6640] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6640, tgid 6639 (syz.0.15), ts 136096456294, free_ts 132789854462
[ 138.769446][ T6640] post_alloc_hook+0x240/0x2a0
[ 138.774250][ T6640] get_page_from_freelist+0x21d5/0x22b0
[ 138.779928][ T6640] __alloc_frozen_pages_noprof+0x181/0x370
[ 138.785836][ T6640] alloc_pages_bulk_noprof+0x560/0x710
[ 138.791371][ T6640] __page_pool_alloc_netmems_slow+0x127/0x740
[ 138.797765][ T6640] skb_pp_cow_data+0xb47/0x13e0
[ 138.802616][ T6640] do_xdp_generic+0x699/0x11a0
[ 138.807417][ T6640] __netif_receive_skb_core+0x17f9/0x4020
[ 138.813169][ T6640] __netif_receive_skb+0x72/0x380
[ 138.818325][ T6640] netif_receive_skb+0x1cb/0x790
[ 138.823333][ T6640] tun_rx_batched+0x1b9/0x730
[ 138.828044][ T6640] tun_get_user+0x2aa2/0x3e20
[ 138.832813][ T6640] tun_chr_write_iter+0x113/0x200
[ 138.837908][ T6640] vfs_write+0x54b/0xa90
[ 138.842220][ T6640] ksys_write+0x145/0x250
[ 138.846614][ T6640] do_syscall_64+0xfa/0x3b0
[ 138.851134][ T6640] page last free pid 6520 tgid 6520 stack trace:
[ 138.857667][ T6640] __free_frozen_pages+0xbb1/0xd20
[ 138.862788][ T6640] rcu_core+0xca8/0x1770
[ 138.867167][ T6640] handle_softirqs+0x286/0x870
[ 138.871939][ T6640] __irq_exit_rcu+0xca/0x1f0
[ 138.876570][ T6640] irq_exit_rcu+0x9/0x30
[ 138.880841][ T6640] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 138.886521][ T6640] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 138.892646][ T6640] Modules linked in:
[ 138.896665][ T6640] CPU: 1 UID: 0 PID: 6640 Comm: syz.0.15 Tainted: G B 6.16.0-syzkaller-g186f3edfdd41 #0 PREEMPT(full)
[ 138.896690][ T6640] Tainted: [B]=BAD_PAGE
[ 138.896695][ T6640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 138.896704][ T6640] Call Trace:
[ 138.896710][ T6640]
[ 138.896715][ T6640] dump_stack_lvl+0x189/0x250
[ 138.896738][ T6640] ? __pfx_dump_stack_lvl+0x10/0x10
[ 138.896755][ T6640] ? __pfx_print_modules+0x10/0x10
[ 138.896777][ T6640] ? ksys_write+0x145/0x250
[ 138.896802][ T6640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 138.896824][ T6640] bad_page+0x180/0x1c0
[ 138.896849][ T6640] __free_frozen_pages+0xcd1/0xd20
[ 138.896869][ T6640] bpf_xdp_frags_shrink_tail+0x3a5/0x750
[ 138.896901][ T6640] bpf_xdp_adjust_tail+0x1d6/0x220
[ 138.896930][ T6640] bpf_prog_f476d5219b92964a+0x1e/0x24
[ 138.896945][ T6640] bpf_prog_run_generic_xdp+0x64b/0x14c0
[ 138.896981][ T6640] do_xdp_generic+0x9f7/0x11a0
[ 138.897009][ T6640] ? __pfx_do_xdp_generic+0x10/0x10
[ 138.897030][ T6640] ? __skb_flow_dissect+0x5ef8/0x68b0
[ 138.897063][ T6640] __netif_receive_skb_core+0x17f9/0x4020
[ 138.897090][ T6640] ? __pfx___skb_flow_dissect+0x10/0x10
[ 138.897108][ T6640] ? __up_read+0x280/0x680
[ 138.897126][ T6640] ? __pfx___up_read+0x10/0x10
[ 138.897142][ T6640] ? do_user_addr_fault+0xbc1/0x1390
[ 138.897170][ T6640] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 138.897198][ T6640] ? irqentry_exit+0x74/0x90
[ 138.897215][ T6640] ? __lock_acquire+0xab9/0xd20
[ 138.897241][ T6640] ? netif_receive_skb+0x115/0x790
[ 138.897266][ T6640] ? netif_receive_skb+0x115/0x790
[ 138.897290][ T6640] __netif_receive_skb+0x72/0x380
[ 138.897319][ T6640] ? netif_receive_skb+0x115/0x790
[ 138.897343][ T6640] netif_receive_skb+0x1cb/0x790
[ 138.897372][ T6640] ? __pfx___local_bh_disable_ip+0x10/0x10
[ 138.897399][ T6640] ? __pfx_netif_receive_skb+0x10/0x10
[ 138.897423][ T6640] ? __pfx__copy_from_iter+0x10/0x10
[ 138.897440][ T6640] ? sock_alloc_send_pskb+0x875/0x990
[ 138.897463][ T6640] ? tun_rx_batched+0x160/0x730
[ 138.897484][ T6640] tun_rx_batched+0x1b9/0x730
[ 138.897502][ T6640] ? __lock_acquire+0xab9/0xd20
[ 138.897527][ T6640] ? __pfx_tun_rx_batched+0x10/0x10
[ 138.897547][ T6640] ? tun_get_user+0x266c/0x3e20
[ 138.897571][ T6640] tun_get_user+0x2aa2/0x3e20
[ 138.897591][ T6640] ? rcu_is_watching+0x15/0xb0
[ 138.897615][ T6640] ? tun_get_user+0x266c/0x3e20
[ 138.897633][ T6640] ? __pfx_tun_get_user+0x10/0x10
[ 138.897653][ T6640] ? __lock_acquire+0xab9/0xd20
[ 138.897676][ T6640] ? ref_tracker_alloc+0x318/0x460
[ 138.897690][ T6640] ? __lock_acquire+0xab9/0xd20
[ 138.897714][ T6640] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 138.897733][ T6640] ? tun_get+0x1c/0x2f0
[ 138.897755][ T6640] ? tun_get+0x1c/0x2f0
[ 138.897774][ T6640] ? tun_get+0x1c/0x2f0
[ 138.897795][ T6640] tun_chr_write_iter+0x113/0x200
[ 138.897817][ T6640] vfs_write+0x54b/0xa90
[ 138.897844][ T6640] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 138.897863][ T6640] ? __pfx_vfs_write+0x10/0x10
[ 138.897892][ T6640] ? __fget_files+0x2a/0x420
[ 138.897921][ T6640] ksys_write+0x145/0x250
[ 138.897948][ T6640] ? __pfx_ksys_write+0x10/0x10
[ 138.897972][ T6640] ? rcu_is_watching+0x15/0xb0
[ 138.898000][ T6640] ? do_syscall_64+0xbe/0x3b0
[ 138.898020][ T6640] do_syscall_64+0xfa/0x3b0
[ 138.898036][ T6640] ? lockdep_hardirqs_on+0x9c/0x150
[ 138.898062][ T6640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 138.898079][ T6640] ? clear_bhb_loop+0x60/0xb0
[ 138.898099][ T6640] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 138.898116][ T6640] RIP: 0033:0x7fa422f7e98f
[ 138.898132][ T6640] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 138.898147][ T6640] RSP: 002b:00007fa423e56020 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 138.898166][ T6640] RAX: ffffffffffffffda RBX: 00007fa423145fa0 RCX: 00007fa422f7e98f
[ 138.898178][ T6640] RDX: 0000000000011dc0 RSI: 00000000200004c0 RDI: 00000000000000c8
[ 138.898190][ T6640] RBP: 00007fa422ff3cc8 R08: 0000000000000000 R09: 0000000000000000
[ 138.898201][ T6640] R10: 0000000000011dc0 R11: 0000000000000293 R12: 0000000000000000
[ 138.898212][ T6640] R13: 0000000000000000 R14: 00007fa423145fa0 R15: 00007ffd16b0f158
[ 138.898231][ T6640]
[ 138.898240][ T6640] BUG: Bad page state in process syz.0.15 pfn:7abcc
[ 139.322480][ T6640] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807abccdc0 pfn:0x7abcc
[ 139.332762][ T6640] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 139.339954][ T6640] raw: 00fff00000000000 dead000000000040 ffff888022a93000 0000000000000000
[ 139.348592][ T6640] raw: ffff88807abccdc0 0000000000000001 00000000ffffffff 0000000000000000
[ 139.357223][ T6640] page dumped because: page_pool leak
[ 139.362746][ T6640] page_owner tracks the page as allocated
[ 139.368478][ T6640] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6640, tgid 6639 (syz.0.15), ts 136096440190, free_ts 132789896347
[ 139.385364][ T6640] post_alloc_hook+0x240/0x2a0
[ 139.390159][ T6640] get_page_from_freelist+0x21d5/0x22b0
[ 139.395711][ T6640] __alloc_frozen_pages_noprof+0x181/0x370
[ 139.401594][ T6640] alloc_pages_bulk_noprof+0x560/0x710
[ 139.407106][ T6640] __page_pool_alloc_netmems_slow+0x127/0x740
[ 139.413172][ T6640] skb_pp_cow_data+0xb47/0x13e0
[ 139.418069][ T6640] do_xdp_generic+0x699/0x11a0
[ 139.422842][ T6640] __netif_receive_skb_core+0x17f9/0x4020
[ 139.428793][ T6640] __netif_receive_skb+0x72/0x380
[ 139.433892][ T6640] netif_receive_skb+0x1cb/0x790
[ 139.438934][ T6640] tun_rx_batched+0x1b9/0x730
[ 139.443625][ T6640] tun_get_user+0x2aa2/0x3e20
[ 139.448335][ T6640] tun_chr_write_iter+0x113/0x200
[ 139.453540][ T6640] vfs_write+0x54b/0xa90
[ 139.457911][ T6640] ksys_write+0x145/0x250
[ 139.462261][ T6640] do_syscall_64+0xfa/0x3b0
[ 139.466832][ T6640] page last free pid 6520 tgid 6520 stack trace:
[ 139.473167][ T6640] __free_frozen_pages+0xbb1/0xd20
[ 139.478353][ T6640] rcu_core+0xca8/0x1770
[ 139.482609][ T6640] handle_softirqs+0x286/0x870
[ 139.487405][ T6640] __irq_exit_rcu+0xca/0x1f0
[ 139.492011][ T6640] irq_exit_rcu+0x9/0x30
[ 139.496239][ T6640] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 139.501914][ T6640] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 139.507926][ T6640] Modules linked in:
[ 139.511825][ T6640] CPU: 1 UID: 0 PID: 6640 Comm: syz.0.15 Tainted: G B 6.16.0-syzkaller-g186f3edfdd41 #0 PREEMPT(full)
[ 139.511843][ T6640] Tainted: [B]=BAD_PAGE
[ 139.511847][ T6640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 139.511860][ T6640] Call Trace:
[ 139.511867][ T6640]
[ 139.511872][ T6640] dump_stack_lvl+0x189/0x250
[ 139.511888][ T6640] ? __pfx_dump_stack_lvl+0x10/0x10
[ 139.511899][ T6640] ? __pfx_print_modules+0x10/0x10
[ 139.511912][ T6640] ? ksys_write+0x145/0x250
[ 139.511926][ T6640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 139.511938][ T6640] bad_page+0x180/0x1c0
[ 139.511951][ T6640] __free_frozen_pages+0xcd1/0xd20
[ 139.511963][ T6640] bpf_xdp_frags_shrink_tail+0x3a5/0x750
[ 139.511980][ T6640] bpf_xdp_adjust_tail+0x1d6/0x220
[ 139.511992][ T6640] bpf_prog_f476d5219b92964a+0x1e/0x24
[ 139.512001][ T6640] bpf_prog_run_generic_xdp+0x64b/0x14c0
[ 139.512025][ T6640] do_xdp_generic+0x9f7/0x11a0
[ 139.512045][ T6640] ? __pfx_do_xdp_generic+0x10/0x10
[ 139.512062][ T6640] ? __skb_flow_dissect+0x5ef8/0x68b0
[ 139.512080][ T6640] __netif_receive_skb_core+0x17f9/0x4020
[ 139.512096][ T6640] ? __pfx___skb_flow_dissect+0x10/0x10
[ 139.512106][ T6640] ? __up_read+0x280/0x680
[ 139.512117][ T6640] ? __pfx___up_read+0x10/0x10
[ 139.512126][ T6640] ? do_user_addr_fault+0xbc1/0x1390
[ 139.512142][ T6640] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 139.512157][ T6640] ? irqentry_exit+0x74/0x90
[ 139.512167][ T6640] ? __lock_acquire+0xab9/0xd20
[ 139.512180][ T6640] ? netif_receive_skb+0x115/0x790
[ 139.512193][ T6640] ? netif_receive_skb+0x115/0x790
[ 139.512207][ T6640] __netif_receive_skb+0x72/0x380
[ 139.512222][ T6640] ? netif_receive_skb+0x115/0x790
[ 139.512234][ T6640] netif_receive_skb+0x1cb/0x790
[ 139.512247][ T6640] ? __pfx___local_bh_disable_ip+0x10/0x10
[ 139.512262][ T6640] ? __pfx_netif_receive_skb+0x10/0x10
[ 139.512275][ T6640] ? __pfx__copy_from_iter+0x10/0x10
[ 139.512286][ T6640] ? sock_alloc_send_pskb+0x875/0x990
[ 139.512299][ T6640] ? tun_rx_batched+0x160/0x730
[ 139.512311][ T6640] tun_rx_batched+0x1b9/0x730
[ 139.512321][ T6640] ? __lock_acquire+0xab9/0xd20
[ 139.512335][ T6640] ? __pfx_tun_rx_batched+0x10/0x10
[ 139.512346][ T6640] ? tun_get_user+0x266c/0x3e20
[ 139.512359][ T6640] tun_get_user+0x2aa2/0x3e20
[ 139.512370][ T6640] ? rcu_is_watching+0x15/0xb0
[ 139.512386][ T6640] ? tun_get_user+0x266c/0x3e20
[ 139.512397][ T6640] ? __pfx_tun_get_user+0x10/0x10
[ 139.512408][ T6640] ? __lock_acquire+0xab9/0xd20
[ 139.512422][ T6640] ? ref_tracker_alloc+0x318/0x460
[ 139.512431][ T6640] ? __lock_acquire+0xab9/0xd20
[ 139.512443][ T6640] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 139.512458][ T6640] ? tun_get+0x1c/0x2f0
[ 139.512469][ T6640] ? tun_get+0x1c/0x2f0
[ 139.512478][ T6640] ? tun_get+0x1c/0x2f0
[ 139.512489][ T6640] tun_chr_write_iter+0x113/0x200
[ 139.512500][ T6640] vfs_write+0x54b/0xa90
[ 139.512514][ T6640] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 139.512524][ T6640] ? __pfx_vfs_write+0x10/0x10
[ 139.512540][ T6640] ? __fget_files+0x2a/0x420
[ 139.512551][ T6640] ksys_write+0x145/0x250
[ 139.512565][ T6640] ? __pfx_ksys_write+0x10/0x10
[ 139.512578][ T6640] ? rcu_is_watching+0x15/0xb0
[ 139.512592][ T6640] ? do_syscall_64+0xbe/0x3b0
[ 139.512605][ T6640] do_syscall_64+0xfa/0x3b0
[ 139.512614][ T6640] ? lockdep_hardirqs_on+0x9c/0x150
[ 139.512628][ T6640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 139.512637][ T6640] ? clear_bhb_loop+0x60/0xb0
[ 139.512648][ T6640] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 139.512657][ T6640] RIP: 0033:0x7fa422f7e98f
[ 139.512667][ T6640] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 139.512675][ T6640] RSP: 002b:00007fa423e56020 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 139.512687][ T6640] RAX: ffffffffffffffda RBX: 00007fa423145fa0 RCX: 00007fa422f7e98f
[ 139.512694][ T6640] RDX: 0000000000011dc0 RSI: 00000000200004c0 RDI: 00000000000000c8
[ 139.512700][ T6640] RBP: 00007fa422ff3cc8 R08: 0000000000000000 R09: 0000000000000000
[ 139.512706][ T6640] R10: 0000000000011dc0 R11: 0000000000000293 R12: 0000000000000000
[ 139.512712][ T6640] R13: 0000000000000000 R14: 00007fa423145fa0 R15: 00007ffd16b0f158
[ 139.512722][ T6640]
[ 139.512730][ T6640] BUG: Bad page state in process syz.0.15 pfn:59690
[ 139.936402][ T6640] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888059690a00 pfn:0x59690
[ 139.946600][ T6640] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 139.953726][ T6640] raw: 00fff00000000000 dead000000000040 ffff888022a93000 0000000000000000
[ 139.962389][ T6640] raw: ffff888059690a00 0000000000000001 00000000ffffffff 0000000000000000
[ 139.971130][ T6640] page dumped because: page_pool leak
[ 139.976522][ T6640] page_owner tracks the page as allocated
[ 139.982296][ T6640] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6640, tgid 6639 (syz.0.15), ts 136096422511, free_ts 132789938146
[ 139.999212][ T6640] post_alloc_hook+0x240/0x2a0
[ 140.003996][ T6640] get_page_from_freelist+0x21d5/0x22b0
[ 140.009584][ T6640] __alloc_frozen_pages_noprof+0x181/0x370
[ 140.015406][ T6640] alloc_pages_bulk_noprof+0x560/0x710
[ 140.021000][ T6640] __page_pool_alloc_netmems_slow+0x127/0x740
[ 140.027206][ T6640] skb_pp_cow_data+0xb47/0x13e0
[ 140.032067][ T6640] do_xdp_generic+0x699/0x11a0
[ 140.036939][ T6640] __netif_receive_skb_core+0x17f9/0x4020
[ 140.042759][ T6640] __netif_receive_skb+0x72/0x380
[ 140.047877][ T6640] netif_receive_skb+0x1cb/0x790
[ 140.052865][ T6640] tun_rx_batched+0x1b9/0x730
[ 140.057576][ T6640] tun_get_user+0x2aa2/0x3e20
[ 140.062258][ T6640] tun_chr_write_iter+0x113/0x200
[ 140.067305][ T6640] vfs_write+0x54b/0xa90
[ 140.071557][ T6640] ksys_write+0x145/0x250
[ 140.075868][ T6640] do_syscall_64+0xfa/0x3b0
[ 140.080430][ T6640] page last free pid 6520 tgid 6520 stack trace:
[ 140.086882][ T6640] __free_frozen_pages+0xbb1/0xd20
[ 140.092178][ T6640] rcu_core+0xca8/0x1770
[ 140.096539][ T6640] handle_softirqs+0x286/0x870
[ 140.101317][ T6640] __irq_exit_rcu+0xca/0x1f0
[ 140.105901][ T6640] irq_exit_rcu+0x9/0x30
[ 140.110189][ T6640] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 140.116028][ T6640] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 140.122045][ T6640] Modules linked in:
[ 140.125980][ T6640] CPU: 1 UID: 0 PID: 6640 Comm: syz.0.15 Tainted: G B 6.16.0-syzkaller-g186f3edfdd41 #0 PREEMPT(full)
[ 140.125997][ T6640] Tainted: [B]=BAD_PAGE
[ 140.126001][ T6640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 140.126007][ T6640] Call Trace:
[ 140.126011][ T6640]
[ 140.126015][ T6640] dump_stack_lvl+0x189/0x250
[ 140.126031][ T6640] ? __pfx_dump_stack_lvl+0x10/0x10
[ 140.126042][ T6640] ? __pfx_print_modules+0x10/0x10
[ 140.126055][ T6640] ? ksys_write+0x145/0x250
[ 140.126070][ T6640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 140.126081][ T6640] bad_page+0x180/0x1c0
[ 140.126095][ T6640] __free_frozen_pages+0xcd1/0xd20
[ 140.126106][ T6640] bpf_xdp_frags_shrink_tail+0x3a5/0x750
[ 140.126123][ T6640] bpf_xdp_adjust_tail+0x1d6/0x220
[ 140.126135][ T6640] bpf_prog_f476d5219b92964a+0x1e/0x24
[ 140.126144][ T6640] bpf_prog_run_generic_xdp+0x64b/0x14c0
[ 140.126164][ T6640] do_xdp_generic+0x9f7/0x11a0
[ 140.126179][ T6640] ? __pfx_do_xdp_generic+0x10/0x10
[ 140.126190][ T6640] ? __skb_flow_dissect+0x5ef8/0x68b0
[ 140.126208][ T6640] __netif_receive_skb_core+0x17f9/0x4020
[ 140.126223][ T6640] ? __pfx___skb_flow_dissect+0x10/0x10
[ 140.126236][ T6640] ? __up_read+0x280/0x680
[ 140.126246][ T6640] ? __pfx___up_read+0x10/0x10
[ 140.126255][ T6640] ? do_user_addr_fault+0xbc1/0x1390
[ 140.126271][ T6640] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 140.126286][ T6640] ? irqentry_exit+0x74/0x90
[ 140.126295][ T6640] ? __lock_acquire+0xab9/0xd20
[ 140.126309][ T6640] ? netif_receive_skb+0x115/0x790
[ 140.126334][ T6640] ? netif_receive_skb+0x115/0x790
[ 140.126355][ T6640] __netif_receive_skb+0x72/0x380
[ 140.126379][ T6640] ? netif_receive_skb+0x115/0x790
[ 140.126400][ T6640] netif_receive_skb+0x1cb/0x790
[ 140.126421][ T6640] ? __pfx___local_bh_disable_ip+0x10/0x10
[ 140.126444][ T6640] ? __pfx_netif_receive_skb+0x10/0x10
[ 140.126466][ T6640] ? __pfx__copy_from_iter+0x10/0x10
[ 140.126484][ T6640] ? sock_alloc_send_pskb+0x875/0x990
[ 140.126509][ T6640] ? tun_rx_batched+0x160/0x730
[ 140.126532][ T6640] tun_rx_batched+0x1b9/0x730
[ 140.126553][ T6640] ? __lock_acquire+0xab9/0xd20
[ 140.126579][ T6640] ? __pfx_tun_rx_batched+0x10/0x10
[ 140.126601][ T6640] ? tun_get_user+0x266c/0x3e20
[ 140.126626][ T6640] tun_get_user+0x2aa2/0x3e20
[ 140.126649][ T6640] ? rcu_is_watching+0x15/0xb0
[ 140.126678][ T6640] ? tun_get_user+0x266c/0x3e20
[ 140.126701][ T6640] ? __pfx_tun_get_user+0x10/0x10
[ 140.126723][ T6640] ? __lock_acquire+0xab9/0xd20
[ 140.126748][ T6640] ? ref_tracker_alloc+0x318/0x460
[ 140.126759][ T6640] ? __lock_acquire+0xab9/0xd20
[ 140.126771][ T6640] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 140.126781][ T6640] ? tun_get+0x1c/0x2f0
[ 140.126792][ T6640] ? tun_get+0x1c/0x2f0
[ 140.126802][ T6640] ? tun_get+0x1c/0x2f0
[ 140.126812][ T6640] tun_chr_write_iter+0x113/0x200
[ 140.126832][ T6640] vfs_write+0x54b/0xa90
[ 140.126847][ T6640] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 140.126857][ T6640] ? __pfx_vfs_write+0x10/0x10
[ 140.126873][ T6640] ? __fget_files+0x2a/0x420
[ 140.126884][ T6640] ksys_write+0x145/0x250
[ 140.126898][ T6640] ? __pfx_ksys_write+0x10/0x10
[ 140.126911][ T6640] ? rcu_is_watching+0x15/0xb0
[ 140.126925][ T6640] ? do_syscall_64+0xbe/0x3b0
[ 140.126936][ T6640] do_syscall_64+0xfa/0x3b0
[ 140.126945][ T6640] ? lockdep_hardirqs_on+0x9c/0x150
[ 140.126959][ T6640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 140.126969][ T6640] ? clear_bhb_loop+0x60/0xb0
[ 140.126979][ T6640] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 140.126988][ T6640] RIP: 0033:0x7fa422f7e98f
[ 140.126998][ T6640] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 140.127007][ T6640] RSP: 002b:00007fa423e56020 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 140.127018][ T6640] RAX: ffffffffffffffda RBX: 00007fa423145fa0 RCX: 00007fa422f7e98f
[ 140.127025][ T6640] RDX: 0000000000011dc0 RSI: 00000000200004c0 RDI: 00000000000000c8
[ 140.127032][ T6640] RBP: 00007fa422ff3cc8 R08: 0000000000000000 R09: 0000000000000000
[ 140.127038][ T6640] R10: 0000000000011dc0 R11: 0000000000000293 R12: 0000000000000000
[ 140.127044][ T6640] R13: 0000000000000000 R14: 00007fa423145fa0 R15: 00007ffd16b0f158
[ 140.127053][ T6640]
[ 140.544063][ T6640] BUG: Bad page state in process syz.0.15 pfn:5e509
[ 140.550873][ T6640] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5e509
[ 140.559762][ T6640] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 140.566936][ T6640] raw: 00fff00000000000 dead000000000040 ffff888022a93000 0000000000000000
[ 140.575623][ T6640] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000
[ 140.584356][ T6640] page dumped because: page_pool leak
[ 140.589840][ T6640] page_owner tracks the page as allocated
[ 140.595640][ T6640] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6640, tgid 6639 (syz.0.15), ts 136096399075, free_ts 131810382256
[ 140.612773][ T6640] post_alloc_hook+0x240/0x2a0
[ 140.617563][ T6640] get_page_from_freelist+0x21d5/0x22b0
[ 140.623098][ T6640] __alloc_frozen_pages_noprof+0x181/0x370
[ 140.628922][ T6640] alloc_pages_bulk_noprof+0x560/0x710
[ 140.634554][ T6640] __page_pool_alloc_netmems_slow+0x127/0x740
[ 140.640751][ T6640] skb_pp_cow_data+0xb47/0x13e0
[ 140.645693][ T6640] do_xdp_generic+0x699/0x11a0
[ 140.650511][ T6640] __netif_receive_skb_core+0x17f9/0x4020
[ 140.656253][ T6640] __netif_receive_skb+0x72/0x380
[ 140.661357][ T6640] netif_receive_skb+0x1cb/0x790
[ 140.666365][ T6640] tun_rx_batched+0x1b9/0x730
[ 140.671068][ T6640] tun_get_user+0x2aa2/0x3e20
[ 140.675776][ T6640] tun_chr_write_iter+0x113/0x200
[ 140.680829][ T6640] vfs_write+0x54b/0xa90
[ 140.685083][ T6640] ksys_write+0x145/0x250
[ 140.689459][ T6640] do_syscall_64+0xfa/0x3b0
[ 140.693966][ T6640] page last free pid 10 tgid 10 stack trace:
[ 140.699962][ T6640] __free_frozen_pages+0xbb1/0xd20
[ 140.705080][ T6640] kasan_depopulate_vmalloc_pte+0x74/0xa0
[ 140.710937][ T6640] __apply_to_page_range+0xb92/0x1380
[ 140.716352][ T6640] kasan_release_vmalloc+0xa2/0xd0
[ 140.721588][ T6640] purge_vmap_node+0x214/0x8f0
[ 140.726484][ T6640] __purge_vmap_area_lazy+0x7a4/0xb40
[ 140.731960][ T6640] drain_vmap_area_work+0x27/0x40
[ 140.737027][ T6640] process_scheduled_works+0xae1/0x17b0
[ 140.742583][ T6640] worker_thread+0x8a0/0xda0
[ 140.747244][ T6640] kthread+0x70e/0x8a0
[ 140.751434][ T6640] ret_from_fork+0x3f9/0x770
[ 140.756041][ T6640] ret_from_fork_asm+0x1a/0x30
[ 140.760865][ T6640] Modules linked in:
[ 140.764800][ T6640] CPU: 1 UID: 0 PID: 6640 Comm: syz.0.15 Tainted: G B 6.16.0-syzkaller-g186f3edfdd41 #0 PREEMPT(full)
[ 140.764817][ T6640] Tainted: [B]=BAD_PAGE
[ 140.764820][ T6640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 140.764826][ T6640] Call Trace:
[ 140.764831][ T6640]
[ 140.764836][ T6640] dump_stack_lvl+0x189/0x250
[ 140.764850][ T6640] ? __pfx_dump_stack_lvl+0x10/0x10
[ 140.764861][ T6640] ? __pfx_print_modules+0x10/0x10
[ 140.764874][ T6640] ? ksys_write+0x145/0x250
[ 140.764888][ T6640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 140.764900][ T6640] bad_page+0x180/0x1c0
[ 140.764913][ T6640] __free_frozen_pages+0xcd1/0xd20
[ 140.764925][ T6640] bpf_xdp_frags_shrink_tail+0x3a5/0x750
[ 140.764943][ T6640] bpf_xdp_adjust_tail+0x1d6/0x220
[ 140.764955][ T6640] bpf_prog_f476d5219b92964a+0x1e/0x24
[ 140.764964][ T6640] bpf_prog_run_generic_xdp+0x64b/0x14c0
[ 140.764984][ T6640] do_xdp_generic+0x9f7/0x11a0
[ 140.764999][ T6640] ? __pfx_do_xdp_generic+0x10/0x10
[ 140.765011][ T6640] ? __skb_flow_dissect+0x5ef8/0x68b0
[ 140.765028][ T6640] __netif_receive_skb_core+0x17f9/0x4020
[ 140.765043][ T6640] ? __pfx___skb_flow_dissect+0x10/0x10
[ 140.765054][ T6640] ? __up_read+0x280/0x680
[ 140.765064][ T6640] ? __pfx___up_read+0x10/0x10
[ 140.765073][ T6640] ? do_user_addr_fault+0xbc1/0x1390
[ 140.765089][ T6640] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 140.765104][ T6640] ? irqentry_exit+0x74/0x90
[ 140.765113][ T6640] ? __lock_acquire+0xab9/0xd20
[ 140.765127][ T6640] ? netif_receive_skb+0x115/0x790
[ 140.765140][ T6640] ? netif_receive_skb+0x115/0x790
[ 140.765153][ T6640] __netif_receive_skb+0x72/0x380
[ 140.765168][ T6640] ? netif_receive_skb+0x115/0x790
[ 140.765181][ T6640] netif_receive_skb+0x1cb/0x790
[ 140.765194][ T6640] ? __pfx___local_bh_disable_ip+0x10/0x10
[ 140.765208][ T6640] ? __pfx_netif_receive_skb+0x10/0x10
[ 140.765221][ T6640] ? __pfx__copy_from_iter+0x10/0x10
[ 140.765232][ T6640] ? sock_alloc_send_pskb+0x875/0x990
[ 140.765244][ T6640] ? tun_rx_batched+0x160/0x730
[ 140.765256][ T6640] tun_rx_batched+0x1b9/0x730
[ 140.765267][ T6640] ? __lock_acquire+0xab9/0xd20
[ 140.765279][ T6640] ? __pfx_tun_rx_batched+0x10/0x10
[ 140.765290][ T6640] ? tun_get_user+0x266c/0x3e20
[ 140.765303][ T6640] tun_get_user+0x2aa2/0x3e20
[ 140.765315][ T6640] ? rcu_is_watching+0x15/0xb0
[ 140.765330][ T6640] ? tun_get_user+0x266c/0x3e20
[ 140.765342][ T6640] ? __pfx_tun_get_user+0x10/0x10
[ 140.765353][ T6640] ? __lock_acquire+0xab9/0xd20
[ 140.765367][ T6640] ? ref_tracker_alloc+0x318/0x460
[ 140.765375][ T6640] ? __lock_acquire+0xab9/0xd20
[ 140.765388][ T6640] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 140.765397][ T6640] ? tun_get+0x1c/0x2f0
[ 140.765408][ T6640] ? tun_get+0x1c/0x2f0
[ 140.765418][ T6640] ? tun_get+0x1c/0x2f0
[ 140.765428][ T6640] tun_chr_write_iter+0x113/0x200
[ 140.765439][ T6640] vfs_write+0x54b/0xa90
[ 140.765453][ T6640] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 140.765464][ T6640] ? __pfx_vfs_write+0x10/0x10
[ 140.765479][ T6640] ? __fget_files+0x2a/0x420
[ 140.765490][ T6640] ksys_write+0x145/0x250
[ 140.765505][ T6640] ? __pfx_ksys_write+0x10/0x10
[ 140.765517][ T6640] ? rcu_is_watching+0x15/0xb0
[ 140.765532][ T6640] ? do_syscall_64+0xbe/0x3b0
[ 140.765542][ T6640] do_syscall_64+0xfa/0x3b0
[ 140.765551][ T6640] ? lockdep_hardirqs_on+0x9c/0x150
[ 140.765565][ T6640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 140.765574][ T6640] ? clear_bhb_loop+0x60/0xb0
[ 140.765585][ T6640] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 140.765594][ T6640] RIP: 0033:0x7fa422f7e98f
[ 140.765603][ T6640] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 140.765611][ T6640] RSP: 002b:00007fa423e56020 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 140.765623][ T6640] RAX: ffffffffffffffda RBX: 00007fa423145fa0 RCX: 00007fa422f7e98f
[ 140.765631][ T6640] RDX: 0000000000011dc0 RSI: 00000000200004c0 RDI: 00000000000000c8
[ 140.765637][ T6640] RBP: 00007fa422ff3cc8 R08: 0000000000000000 R09: 0000000000000000
[ 140.765643][ T6640] R10: 0000000000011dc0 R11: 0000000000000293 R12: 0000000000000000
[ 140.765649][ T6640] R13: 0000000000000000 R14: 00007fa423145fa0 R15: 00007ffd16b0f158
[ 140.765658][ T6640]
[ 140.765666][ T6640] BUG: Bad page state in process syz.0.15 pfn:5a9ec
[ 141.188840][ T6640] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5a9ec
[ 141.197656][ T6640] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 141.204829][ T6640] raw: 00fff00000000000 dead000000000040 ffff888022a93000 0000000000000000
[ 141.213490][ T6640] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000
[ 141.222123][ T6640] page dumped because: page_pool leak
[ 141.227525][ T6640] page_owner tracks the page as allocated
[ 141.233282][ T6640] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6640, tgid 6639 (syz.0.15), ts 136096383017, free_ts 131810962136
[ 141.250851][ T6640] post_alloc_hook+0x240/0x2a0
[ 141.255722][ T6640] get_page_from_freelist+0x21d5/0x22b0
[ 141.261326][ T6640] __alloc_frozen_pages_noprof+0x181/0x370
[ 141.267374][ T6640] alloc_pages_bulk_noprof+0x560/0x710
[ 141.272849][ T6640] __page_pool_alloc_netmems_slow+0x127/0x740
[ 141.278961][ T6640] skb_pp_cow_data+0xb47/0x13e0
[ 141.283820][ T6640] do_xdp_generic+0x699/0x11a0
[ 141.288621][ T6640] __netif_receive_skb_core+0x17f9/0x4020
[ 141.294355][ T6640] __netif_receive_skb+0x72/0x380
[ 141.299428][ T6640] netif_receive_skb+0x1cb/0x790
[ 141.304374][ T6640] tun_rx_batched+0x1b9/0x730
[ 141.309081][ T6640] tun_get_user+0x2aa2/0x3e20
[ 141.313917][ T6640] tun_chr_write_iter+0x113/0x200
[ 141.318975][ T6640] vfs_write+0x54b/0xa90
[ 141.323319][ T6640] ksys_write+0x145/0x250
[ 141.327816][ T6640] do_syscall_64+0xfa/0x3b0
[ 141.332355][ T6640] page last free pid 10 tgid 10 stack trace:
[ 141.338371][ T6640] __free_frozen_pages+0xbb1/0xd20
[ 141.343495][ T6640] kasan_depopulate_vmalloc_pte+0x74/0xa0
[ 141.349349][ T6640] __apply_to_page_range+0xb92/0x1380
[ 141.354730][ T6640] kasan_release_vmalloc+0xa2/0xd0
[ 141.359947][ T6640] purge_vmap_node+0x214/0x8f0
[ 141.364858][ T6640] __purge_vmap_area_lazy+0x7a4/0xb40
[ 141.370288][ T6640] drain_vmap_area_work+0x27/0x40
[ 141.375332][ T6640] process_scheduled_works+0xae1/0x17b0
[ 141.380972][ T6640] worker_thread+0x8a0/0xda0
[ 141.385592][ T6640] kthread+0x70e/0x8a0
[ 141.389694][ T6640] ret_from_fork+0x3f9/0x770
[ 141.394289][ T6640] ret_from_fork_asm+0x1a/0x30
[ 141.399102][ T6640] Modules linked in:
[ 141.403006][ T6640] CPU: 1 UID: 0 PID: 6640 Comm: syz.0.15 Tainted: G B 6.16.0-syzkaller-g186f3edfdd41 #0 PREEMPT(full)
[ 141.403023][ T6640] Tainted: [B]=BAD_PAGE
[ 141.403027][ T6640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 141.403033][ T6640] Call Trace:
[ 141.403038][ T6640]
[ 141.403043][ T6640] dump_stack_lvl+0x189/0x250
[ 141.403059][ T6640] ? __pfx_dump_stack_lvl+0x10/0x10
[ 141.403070][ T6640] ? __pfx_print_modules+0x10/0x10
[ 141.403083][ T6640] ? ksys_write+0x145/0x250
[ 141.403097][ T6640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 141.403109][ T6640] bad_page+0x180/0x1c0
[ 141.403122][ T6640] __free_frozen_pages+0xcd1/0xd20
[ 141.403134][ T6640] bpf_xdp_frags_shrink_tail+0x3a5/0x750
[ 141.403152][ T6640] bpf_xdp_adjust_tail+0x1d6/0x220
[ 141.403163][ T6640] bpf_prog_f476d5219b92964a+0x1e/0x24
[ 141.403172][ T6640] bpf_prog_run_generic_xdp+0x64b/0x14c0
[ 141.403192][ T6640] do_xdp_generic+0x9f7/0x11a0
[ 141.403206][ T6640] ? __pfx_do_xdp_generic+0x10/0x10
[ 141.403218][ T6640] ? __skb_flow_dissect+0x5ef8/0x68b0
[ 141.403235][ T6640] __netif_receive_skb_core+0x17f9/0x4020
[ 141.403251][ T6640] ? __pfx___skb_flow_dissect+0x10/0x10
[ 141.403261][ T6640] ? __up_read+0x280/0x680
[ 141.403271][ T6640] ? __pfx___up_read+0x10/0x10
[ 141.403280][ T6640] ? do_user_addr_fault+0xbc1/0x1390
[ 141.403296][ T6640] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 141.403311][ T6640] ? irqentry_exit+0x74/0x90
[ 141.403321][ T6640] ? __lock_acquire+0xab9/0xd20
[ 141.403335][ T6640] ? netif_receive_skb+0x115/0x790
[ 141.403348][ T6640] ? netif_receive_skb+0x115/0x790
[ 141.403361][ T6640] __netif_receive_skb+0x72/0x380
[ 141.403376][ T6640] ? netif_receive_skb+0x115/0x790
[ 141.403389][ T6640] netif_receive_skb+0x1cb/0x790
[ 141.403402][ T6640] ? __pfx___local_bh_disable_ip+0x10/0x10
[ 141.403416][ T6640] ? __pfx_netif_receive_skb+0x10/0x10
[ 141.403429][ T6640] ? __pfx__copy_from_iter+0x10/0x10
[ 141.403439][ T6640] ? sock_alloc_send_pskb+0x875/0x990
[ 141.403452][ T6640] ? tun_rx_batched+0x160/0x730
[ 141.403464][ T6640] tun_rx_batched+0x1b9/0x730
[ 141.403474][ T6640] ? __lock_acquire+0xab9/0xd20
[ 141.403487][ T6640] ? __pfx_tun_rx_batched+0x10/0x10
[ 141.403498][ T6640] ? tun_get_user+0x266c/0x3e20
[ 141.403511][ T6640] tun_get_user+0x2aa2/0x3e20
[ 141.403523][ T6640] ? rcu_is_watching+0x15/0xb0
[ 141.403538][ T6640] ? tun_get_user+0x266c/0x3e20
[ 141.403549][ T6640] ? __pfx_tun_get_user+0x10/0x10
[ 141.403560][ T6640] ? __lock_acquire+0xab9/0xd20
[ 141.403575][ T6640] ? ref_tracker_alloc+0x318/0x460
[ 141.403584][ T6640] ? __lock_acquire+0xab9/0xd20
[ 141.403596][ T6640] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 141.403605][ T6640] ? tun_get+0x1c/0x2f0
[ 141.403621][ T6640] ? tun_get+0x1c/0x2f0
[ 141.403631][ T6640] ? tun_get+0x1c/0x2f0
[ 141.403641][ T6640] tun_chr_write_iter+0x113/0x200
[ 141.403652][ T6640] vfs_write+0x54b/0xa90
[ 141.403666][ T6640] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 141.403677][ T6640] ? __pfx_vfs_write+0x10/0x10
[ 141.403692][ T6640] ? __fget_files+0x2a/0x420
[ 141.403704][ T6640] ksys_write+0x145/0x250
[ 141.403718][ T6640] ? __pfx_ksys_write+0x10/0x10
[ 141.403731][ T6640] ? rcu_is_watching+0x15/0xb0
[ 141.403746][ T6640] ? do_syscall_64+0xbe/0x3b0
[ 141.403756][ T6640] do_syscall_64+0xfa/0x3b0
[ 141.403765][ T6640] ? lockdep_hardirqs_on+0x9c/0x150
[ 141.403779][ T6640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 141.403794][ T6640] ? clear_bhb_loop+0x60/0xb0
[ 141.403805][ T6640] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 141.403814][ T6640] RIP: 0033:0x7fa422f7e98f
[ 141.403824][ T6640] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 141.403832][ T6640] RSP: 002b:00007fa423e56020 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 141.403844][ T6640] RAX: ffffffffffffffda RBX: 00007fa423145fa0 RCX: 00007fa422f7e98f
[ 141.403851][ T6640] RDX: 0000000000011dc0 RSI: 00000000200004c0 RDI: 00000000000000c8
[ 141.403857][ T6640] RBP: 00007fa422ff3cc8 R08: 0000000000000000 R09: 0000000000000000
[ 141.403863][ T6640] R10: 0000000000011dc0 R11: 0000000000000293 R12: 0000000000000000
[ 141.403869][ T6640] R13: 0000000000000000 R14: 00007fa423145fa0 R15: 00007ffd16b0f158
[ 141.403879][ T6640]
[ 141.403887][ T6640] BUG: Bad page state in process syz.0.15 pfn:75b08
[ 141.827549][ T6640] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888075b08dc0 pfn:0x75b08
[ 141.837637][ T6640] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 141.844827][ T6640] raw: 00fff00000000000 dead000000000040 ffff888022a93000 0000000000000000
[ 141.853545][ T6640] raw: ffff888075b08dc0 0000000000000001 00000000ffffffff 0000000000000000
[ 141.862160][ T6640] page dumped because: page_pool leak
[ 141.867581][ T6640] page_owner tracks the page as allocated
[ 141.873297][ T6640] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6640, tgid 6639 (syz.0.15), ts 136096366253, free_ts 131812821933
[ 141.890292][ T6640] post_alloc_hook+0x240/0x2a0
[ 141.895081][ T6640] get_page_from_freelist+0x21d5/0x22b0
[ 141.900770][ T6640] __alloc_frozen_pages_noprof+0x181/0x370
[ 141.906622][ T6640] alloc_pages_bulk_noprof+0x560/0x710
[ 141.912095][ T6640] __page_pool_alloc_netmems_slow+0x127/0x740
[ 141.918209][ T6640] skb_pp_cow_data+0xb47/0x13e0
[ 141.923075][ T6640] do_xdp_generic+0x699/0x11a0
[ 141.927886][ T6640] __netif_receive_skb_core+0x17f9/0x4020
[ 141.933622][ T6640] __netif_receive_skb+0x72/0x380
[ 141.938840][ T6640] netif_receive_skb+0x1cb/0x790
[ 141.943781][ T6640] tun_rx_batched+0x1b9/0x730
[ 141.948480][ T6640] tun_get_user+0x2aa2/0x3e20
[ 141.953155][ T6640] tun_chr_write_iter+0x113/0x200
[ 141.958403][ T6640] vfs_write+0x54b/0xa90
[ 141.962671][ T6640] ksys_write+0x145/0x250
[ 141.967154][ T6640] do_syscall_64+0xfa/0x3b0
[ 141.971666][ T6640] page last free pid 10 tgid 10 stack trace:
[ 141.977707][ T6640] __free_frozen_pages+0xbb1/0xd20
[ 141.982832][ T6640] kasan_depopulate_vmalloc_pte+0x74/0xa0
[ 141.988859][ T6640] __apply_to_page_range+0xb92/0x1380
[ 141.994247][ T6640] kasan_release_vmalloc+0xa2/0xd0
[ 141.999402][ T6640] purge_vmap_node+0x214/0x8f0
[ 142.004184][ T6640] __purge_vmap_area_lazy+0x7a4/0xb40
[ 142.010175][ T6640] drain_vmap_area_work+0x27/0x40
[ 142.015207][ T6640] process_scheduled_works+0xae1/0x17b0
[ 142.020817][ T6640] worker_thread+0x8a0/0xda0
[ 142.025438][ T6640] kthread+0x70e/0x8a0
[ 142.029539][ T6640] ret_from_fork+0x3f9/0x770
[ 142.034142][ T6640] ret_from_fork_asm+0x1a/0x30
[ 142.038941][ T6640] Modules linked in:
[ 142.042837][ T6640] CPU: 1 UID: 0 PID: 6640 Comm: syz.0.15 Tainted: G B 6.16.0-syzkaller-g186f3edfdd41 #0 PREEMPT(full)
[ 142.042854][ T6640] Tainted: [B]=BAD_PAGE
[ 142.042862][ T6640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 142.042868][ T6640] Call Trace:
[ 142.042872][ T6640]
[ 142.042877][ T6640] dump_stack_lvl+0x189/0x250
[ 142.042892][ T6640] ? __pfx_dump_stack_lvl+0x10/0x10
[ 142.042903][ T6640] ? __pfx_print_modules+0x10/0x10
[ 142.042916][ T6640] ? ksys_write+0x145/0x250
[ 142.042930][ T6640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 142.042941][ T6640] bad_page+0x180/0x1c0
[ 142.042955][ T6640] __free_frozen_pages+0xcd1/0xd20
[ 142.042967][ T6640] bpf_xdp_frags_shrink_tail+0x3a5/0x750
[ 142.042984][ T6640] bpf_xdp_adjust_tail+0x1d6/0x220
[ 142.042996][ T6640] bpf_prog_f476d5219b92964a+0x1e/0x24
[ 142.043004][ T6640] bpf_prog_run_generic_xdp+0x64b/0x14c0
[ 142.043024][ T6640] do_xdp_generic+0x9f7/0x11a0
[ 142.043039][ T6640] ? __pfx_do_xdp_generic+0x10/0x10
[ 142.043051][ T6640] ? __skb_flow_dissect+0x5ef8/0x68b0
[ 142.043068][ T6640] __netif_receive_skb_core+0x17f9/0x4020
[ 142.043082][ T6640] ? __pfx___skb_flow_dissect+0x10/0x10
[ 142.043093][ T6640] ? __up_read+0x280/0x680
[ 142.043103][ T6640] ? __pfx___up_read+0x10/0x10
[ 142.043112][ T6640] ? do_user_addr_fault+0xbc1/0x1390
[ 142.043127][ T6640] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 142.043142][ T6640] ? irqentry_exit+0x74/0x90
[ 142.043152][ T6640] ? __lock_acquire+0xab9/0xd20
[ 142.043165][ T6640] ? netif_receive_skb+0x115/0x790
[ 142.043178][ T6640] ? netif_receive_skb+0x115/0x790
[ 142.043191][ T6640] __netif_receive_skb+0x72/0x380
[ 142.043206][ T6640] ? netif_receive_skb+0x115/0x790
[ 142.043219][ T6640] netif_receive_skb+0x1cb/0x790
[ 142.043232][ T6640] ? __pfx___local_bh_disable_ip+0x10/0x10
[ 142.043246][ T6640] ? __pfx_netif_receive_skb+0x10/0x10
[ 142.043259][ T6640] ? __pfx__copy_from_iter+0x10/0x10
[ 142.043269][ T6640] ? sock_alloc_send_pskb+0x875/0x990
[ 142.043282][ T6640] ? tun_rx_batched+0x160/0x730
[ 142.043293][ T6640] tun_rx_batched+0x1b9/0x730
[ 142.043304][ T6640] ? __lock_acquire+0xab9/0xd20
[ 142.043317][ T6640] ? __pfx_tun_rx_batched+0x10/0x10
[ 142.043328][ T6640] ? tun_get_user+0x266c/0x3e20
[ 142.043340][ T6640] tun_get_user+0x2aa2/0x3e20
[ 142.043352][ T6640] ? rcu_is_watching+0x15/0xb0
[ 142.043367][ T6640] ? tun_get_user+0x266c/0x3e20
[ 142.043378][ T6640] ? __pfx_tun_get_user+0x10/0x10
[ 142.043389][ T6640] ? __lock_acquire+0xab9/0xd20
[ 142.043403][ T6640] ? ref_tracker_alloc+0x318/0x460
[ 142.043412][ T6640] ? __lock_acquire+0xab9/0xd20
[ 142.043424][ T6640] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 142.043433][ T6640] ? tun_get+0x1c/0x2f0
[ 142.043444][ T6640] ? tun_get+0x1c/0x2f0
[ 142.043454][ T6640] ? tun_get+0x1c/0x2f0
[ 142.043464][ T6640] tun_chr_write_iter+0x113/0x200
[ 142.043475][ T6640] vfs_write+0x54b/0xa90
[ 142.043489][ T6640] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 142.043499][ T6640] ? __pfx_vfs_write+0x10/0x10
[ 142.043514][ T6640] ? __fget_files+0x2a/0x420
[ 142.043526][ T6640] ksys_write+0x145/0x250
[ 142.043540][ T6640] ? __pfx_ksys_write+0x10/0x10
[ 142.043553][ T6640] ? rcu_is_watching+0x15/0xb0
[ 142.043567][ T6640] ? do_syscall_64+0xbe/0x3b0
[ 142.043577][ T6640] do_syscall_64+0xfa/0x3b0
[ 142.043587][ T6640] ? lockdep_hardirqs_on+0x9c/0x150
[ 142.043605][ T6640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 142.043614][ T6640] ? clear_bhb_loop+0x60/0xb0
[ 142.043625][ T6640] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 142.043634][ T6640] RIP: 0033:0x7fa422f7e98f
[ 142.043644][ T6640] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 142.043653][ T6640] RSP: 002b:00007fa423e56020 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 142.043664][ T6640] RAX: ffffffffffffffda RBX: 00007fa423145fa0 RCX: 00007fa422f7e98f
[ 142.043672][ T6640] RDX: 0000000000011dc0 RSI: 00000000200004c0 RDI: 00000000000000c8
[ 142.043678][ T6640] RBP: 00007fa422ff3cc8 R08: 0000000000000000 R09: 0000000000000000
[ 142.043684][ T6640] R10: 0000000000011dc0 R11: 0000000000000293 R12: 0000000000000000
[ 142.043690][ T6640] R13: 0000000000000000 R14: 00007fa423145fa0 R15: 00007ffd16b0f158
[ 142.043699][ T6640]
[ 142.043707][ T6640] BUG: Bad page state in process syz.0.15 pfn:7121c
[ 142.466697][ T6640] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807121cdc0 pfn:0x7121c
[ 142.476816][ T6640] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 142.483935][ T6640] raw: 00fff00000000000 dead000000000040 ffff888022a93000 0000000000000000
[ 142.492576][ T6640] raw: ffff88807121cdc0 0000000000000001 00000000ffffffff 0000000000000000
[ 142.501275][ T6640] page dumped because: page_pool leak
[ 142.506754][ T6640] page_owner tracks the page as allocated
[ 142.512463][ T6640] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6640, tgid 6639 (syz.0.15), ts 136096307367, free_ts 131812837784
[ 142.529457][ T6640] post_alloc_hook+0x240/0x2a0
[ 142.534229][ T6640] get_page_from_freelist+0x21d5/0x22b0
[ 142.539838][ T6640] __alloc_frozen_pages_noprof+0x181/0x370
[ 142.545660][ T6640] alloc_pages_bulk_noprof+0x560/0x710
[ 142.551170][ T6640] __page_pool_alloc_netmems_slow+0x127/0x740
[ 142.557273][ T6640] skb_pp_cow_data+0xb47/0x13e0
[ 142.562129][ T6640] do_xdp_generic+0x699/0x11a0
[ 142.567012][ T6640] __netif_receive_skb_core+0x17f9/0x4020
[ 142.572770][ T6640] __netif_receive_skb+0x72/0x380
[ 142.577833][ T6640] netif_receive_skb+0x1cb/0x790
[ 142.582788][ T6640] tun_rx_batched+0x1b9/0x730
[ 142.587506][ T6640] tun_get_user+0x2aa2/0x3e20
[ 142.592568][ T6640] tun_chr_write_iter+0x113/0x200
[ 142.597635][ T6640] vfs_write+0x54b/0xa90
[ 142.602081][ T6640] ksys_write+0x145/0x250
[ 142.606444][ T6640] do_syscall_64+0xfa/0x3b0
[ 142.611124][ T6640] page last free pid 10 tgid 10 stack trace:
[ 142.617150][ T6640] __free_frozen_pages+0xbb1/0xd20
[ 142.622265][ T6640] kasan_depopulate_vmalloc_pte+0x74/0xa0
[ 142.628011][ T6640] __apply_to_page_range+0xb92/0x1380
[ 142.633400][ T6640] kasan_release_vmalloc+0xa2/0xd0
[ 142.638573][ T6640] purge_vmap_node+0x214/0x8f0
[ 142.643359][ T6640] __purge_vmap_area_lazy+0x7a4/0xb40
[ 142.648766][ T6640] drain_vmap_area_work+0x27/0x40
[ 142.653829][ T6640] process_scheduled_works+0xae1/0x17b0
[ 142.659403][ T6640] worker_thread+0x8a0/0xda0
[ 142.664020][ T6640] kthread+0x70e/0x8a0
[ 142.668105][ T6640] ret_from_fork+0x3f9/0x770
[ 142.672707][ T6640] ret_from_fork_asm+0x1a/0x30
[ 142.677524][ T6640] Modules linked in:
[ 142.681437][ T6640] CPU: 1 UID: 0 PID: 6640 Comm: syz.0.15 Tainted: G B 6.16.0-syzkaller-g186f3edfdd41 #0 PREEMPT(full)
[ 142.681463][ T6640] Tainted: [B]=BAD_PAGE
[ 142.681468][ T6640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 142.681477][ T6640] Call Trace:
[ 142.681483][ T6640]
[ 142.681490][ T6640] dump_stack_lvl+0x189/0x250
[ 142.681511][ T6640] ? __pfx_dump_stack_lvl+0x10/0x10
[ 142.681527][ T6640] ? __pfx_print_modules+0x10/0x10
[ 142.681548][ T6640] ? ksys_write+0x145/0x250
[ 142.681570][ T6640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 142.681588][ T6640] bad_page+0x180/0x1c0
[ 142.681615][ T6640] __free_frozen_pages+0xcd1/0xd20
[ 142.681633][ T6640] bpf_xdp_frags_shrink_tail+0x3a5/0x750
[ 142.681660][ T6640] bpf_xdp_adjust_tail+0x1d6/0x220
[ 142.681678][ T6640] bpf_prog_f476d5219b92964a+0x1e/0x24
[ 142.681691][ T6640] bpf_prog_run_generic_xdp+0x64b/0x14c0
2025/08/03 03:33:42 executed programs: 3
[ 142.681722][ T6640] do_xdp_generic+0x9f7/0x11a0
[ 142.681746][ T6640] ? __pfx_do_xdp_generic+0x10/0x10
[ 142.681765][ T6640] ? __skb_flow_dissect+0x5ef8/0x68b0
[ 142.681792][ T6640] __netif_receive_skb_core+0x17f9/0x4020
[ 142.681816][ T6640] ? __pfx___skb_flow_dissect+0x10/0x10
[ 142.681832][ T6640] ? __up_read+0x280/0x680
[ 142.681848][ T6640] ? __pfx___up_read+0x10/0x10
[ 142.681863][ T6640] ? do_user_addr_fault+0xbc1/0x1390
[ 142.681888][ T6640] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 142.681912][ T6640] ? irqentry_exit+0x74/0x90
[ 142.681927][ T6640] ? __lock_acquire+0xab9/0xd20
[ 142.681948][ T6640] ? netif_receive_skb+0x115/0x790
[ 142.681969][ T6640] ? netif_receive_skb+0x115/0x790
[ 142.681990][ T6640] __netif_receive_skb+0x72/0x380
[ 142.682014][ T6640] ? netif_receive_skb+0x115/0x790
[ 142.682034][ T6640] netif_receive_skb+0x1cb/0x790
[ 142.682054][ T6640] ? __pfx___local_bh_disable_ip+0x10/0x10
[ 142.682078][ T6640] ? __pfx_netif_receive_skb+0x10/0x10
[ 142.682103][ T6640] ? __pfx__copy_from_iter+0x10/0x10
[ 142.682120][ T6640] ? sock_alloc_send_pskb+0x875/0x990
[ 142.682140][ T6640] ? tun_rx_batched+0x160/0x730
[ 142.682158][ T6640] tun_rx_batched+0x1b9/0x730
[ 142.682175][ T6640] ? __lock_acquire+0xab9/0xd20
[ 142.682195][ T6640] ? __pfx_tun_rx_batched+0x10/0x10
[ 142.682213][ T6640] ? tun_get_user+0x266c/0x3e20
[ 142.682234][ T6640] tun_get_user+0x2aa2/0x3e20
[ 142.682252][ T6640] ? rcu_is_watching+0x15/0xb0
[ 142.682276][ T6640] ? tun_get_user+0x266c/0x3e20
[ 142.682294][ T6640] ? __pfx_tun_get_user+0x10/0x10
[ 142.682313][ T6640] ? __lock_acquire+0xab9/0xd20
[ 142.682335][ T6640] ? ref_tracker_alloc+0x318/0x460
[ 142.682349][ T6640] ? __lock_acquire+0xab9/0xd20
[ 142.682368][ T6640] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 142.682384][ T6640] ? tun_get+0x1c/0x2f0
[ 142.682401][ T6640] ? tun_get+0x1c/0x2f0
[ 142.682415][ T6640] ? tun_get+0x1c/0x2f0
[ 142.682433][ T6640] tun_chr_write_iter+0x113/0x200
[ 142.682450][ T6640] vfs_write+0x54b/0xa90
[ 142.682473][ T6640] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 142.682489][ T6640] ? __pfx_vfs_write+0x10/0x10
[ 142.682513][ T6640] ? __fget_files+0x2a/0x420
[ 142.682531][ T6640] ksys_write+0x145/0x250
[ 142.682554][ T6640] ? __pfx_ksys_write+0x10/0x10
[ 142.682574][ T6640] ? rcu_is_watching+0x15/0xb0
[ 142.682604][ T6640] ? do_syscall_64+0xbe/0x3b0
[ 142.682620][ T6640] do_syscall_64+0xfa/0x3b0
[ 142.682634][ T6640] ? lockdep_hardirqs_on+0x9c/0x150
[ 142.682657][ T6640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 142.682671][ T6640] ? clear_bhb_loop+0x60/0xb0
[ 142.682688][ T6640] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 142.682702][ T6640] RIP: 0033:0x7fa422f7e98f
[ 142.682715][ T6640] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 142.682728][ T6640] RSP: 002b:00007fa423e56020 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 142.682744][ T6640] RAX: ffffffffffffffda RBX: 00007fa423145fa0 RCX: 00007fa422f7e98f
[ 142.682756][ T6640] RDX: 0000000000011dc0 RSI: 00000000200004c0 RDI: 00000000000000c8
[ 142.682766][ T6640] RBP: 00007fa422ff3cc8 R08: 0000000000000000 R09: 0000000000000000
[ 142.682775][ T6640] R10: 0000000000011dc0 R11: 0000000000000293 R12: 0000000000000000
[ 142.682784][ T6640] R13: 0000000000000000 R14: 00007fa423145fa0 R15: 00007ffd16b0f158
[ 142.682800][ T6640]
[ 142.683892][ T5171] Bluetooth: hci0: command tx timeout
[ 142.833491][ T6691] BUG: Bad page state in process syz.0.16 pfn:75d85
[ 143.117617][ T6691] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888075d85b40 pfn:0x75d85
[ 143.127914][ T6691] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 143.135127][ T6691] raw: 00fff00000000000 dead000000000040 ffff888022a93000 0000000000000000
[ 143.143847][ T6691] raw: ffff888075d85b40 0000000000000001 00000000ffffffff 0000000000000000
[ 143.152497][ T6691] page dumped because: page_pool leak
[ 143.158099][ T6691] page_owner tracks the page as allocated
[ 143.163824][ T6691] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6691, tgid 6688 (syz.0.16), ts 142833413904, free_ts 131627280181
[ 143.180875][ T6691] post_alloc_hook+0x240/0x2a0
[ 143.185647][ T6691] get_page_from_freelist+0x21d5/0x22b0
[ 143.191252][ T6691] __alloc_frozen_pages_noprof+0x181/0x370
[ 143.197261][ T6691] alloc_pages_bulk_noprof+0x560/0x710
[ 143.202733][ T6691] __page_pool_alloc_netmems_slow+0x127/0x740
[ 143.209029][ T6691] skb_pp_cow_data+0xb47/0x13e0
[ 143.213887][ T6691] do_xdp_generic+0x699/0x11a0
[ 143.218707][ T6691] __netif_receive_skb_core+0x17f9/0x4020
[ 143.224464][ T6691] __netif_receive_skb+0x72/0x380
[ 143.229552][ T6691] netif_receive_skb+0x1cb/0x790
[ 143.234500][ T6691] tun_rx_batched+0x1b9/0x730
[ 143.239229][ T6691] tun_get_user+0x2aa2/0x3e20
[ 143.243919][ T6691] tun_chr_write_iter+0x113/0x200
[ 143.249162][ T6691] vfs_write+0x54b/0xa90
[ 143.253421][ T6691] ksys_write+0x145/0x250
[ 143.257896][ T6691] do_syscall_64+0xfa/0x3b0
[ 143.262493][ T6691] page last free pid 6500 tgid 6500 stack trace:
[ 143.268863][ T6691] __free_frozen_pages+0xbb1/0xd20
[ 143.273984][ T6691] __tlb_remove_table+0x2d2/0x3b0
[ 143.279160][ T6691] tlb_remove_table_rcu+0x85/0x100
[ 143.284369][ T6691] rcu_core+0xca8/0x1770
[ 143.288733][ T6691] handle_softirqs+0x286/0x870
[ 143.293555][ T6691] __irq_exit_rcu+0xca/0x1f0
[ 143.298220][ T6691] irq_exit_rcu+0x9/0x30
[ 143.302488][ T6691] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 143.308184][ T6691] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 143.314267][ T6691] Modules linked in:
[ 143.318221][ T6691] CPU: 1 UID: 0 PID: 6691 Comm: syz.0.16 Tainted: G B 6.16.0-syzkaller-g186f3edfdd41 #0 PREEMPT(full)
[ 143.318245][ T6691] Tainted: [B]=BAD_PAGE
[ 143.318251][ T6691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 143.318261][ T6691] Call Trace:
[ 143.318267][ T6691]
[ 143.318274][ T6691] dump_stack_lvl+0x189/0x250
[ 143.318298][ T6691] ? __pfx_dump_stack_lvl+0x10/0x10
[ 143.318315][ T6691] ? __pfx_print_modules+0x10/0x10
[ 143.318337][ T6691] ? ksys_write+0x145/0x250
[ 143.318360][ T6691] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 143.318381][ T6691] bad_page+0x180/0x1c0
[ 143.318407][ T6691] __free_frozen_pages+0xcd1/0xd20
[ 143.318430][ T6691] bpf_xdp_frags_shrink_tail+0x3a5/0x750
[ 143.318464][ T6691] bpf_xdp_adjust_tail+0x1d6/0x220
[ 143.318487][ T6691] bpf_prog_f476d5219b92964a+0x1e/0x24
[ 143.318503][ T6691] bpf_prog_run_generic_xdp+0x64b/0x14c0
[ 143.318538][ T6691] do_xdp_generic+0x9f7/0x11a0
[ 143.318567][ T6691] ? __pfx_do_xdp_generic+0x10/0x10
[ 143.318588][ T6691] ? __skb_flow_dissect+0x5ef8/0x68b0
[ 143.318623][ T6691] __netif_receive_skb_core+0x17f9/0x4020
[ 143.318651][ T6691] ? __pfx___skb_flow_dissect+0x10/0x10
[ 143.318671][ T6691] ? __up_read+0x280/0x680
[ 143.318691][ T6691] ? __pfx___up_read+0x10/0x10
[ 143.318708][ T6691] ? lock_release+0x4b/0x3e0
[ 143.318735][ T6691] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 143.318762][ T6691] ? rcu_is_watching+0x15/0xb0
[ 143.318800][ T6691] ? irqentry_exit+0x74/0x90
[ 143.318815][ T6691] ? exc_page_fault+0x9f/0xf0
[ 143.318843][ T6691] ? netif_receive_skb+0x115/0x790
[ 143.318868][ T6691] ? rcu_is_watching+0x15/0xb0
[ 143.318894][ T6691] ? lock_acquire+0x5f/0x360
[ 143.318916][ T6691] __netif_receive_skb+0x72/0x380
[ 143.318943][ T6691] ? netif_receive_skb+0x115/0x790
[ 143.318966][ T6691] netif_receive_skb+0x1cb/0x790
[ 143.318990][ T6691] ? __pfx___local_bh_disable_ip+0x10/0x10
[ 143.319017][ T6691] ? __pfx_netif_receive_skb+0x10/0x10
[ 143.319041][ T6691] ? __pfx__copy_from_iter+0x10/0x10
[ 143.319060][ T6691] ? sock_alloc_send_pskb+0x875/0x990
[ 143.319083][ T6691] ? tun_rx_batched+0x160/0x730
[ 143.319103][ T6691] tun_rx_batched+0x1b9/0x730
[ 143.319121][ T6691] ? skb_header_pointer+0x8e/0x120
[ 143.319145][ T6691] ? __pfx_tun_rx_batched+0x10/0x10
[ 143.319166][ T6691] ? tun_get_user+0x266c/0x3e20
[ 143.319185][ T6691] ? rcu_is_watching+0x15/0xb0
[ 143.319209][ T6691] ? lock_acquire+0x5f/0x360
[ 143.319230][ T6691] ? __pfx___local_bh_enable_ip+0x10/0x10
[ 143.319259][ T6691] tun_get_user+0x2aa2/0x3e20
[ 143.319281][ T6691] ? __pfx_css_rstat_updated+0x10/0x10
[ 143.319309][ T6691] ? tun_get_user+0x266c/0x3e20
[ 143.319331][ T6691] ? __pfx_tun_get_user+0x10/0x10
[ 143.319351][ T6691] ? __folio_batch_add_and_move+0x20a/0xd20
[ 143.319380][ T6691] ? pfn_valid+0xba/0x490
[ 143.319394][ T6691] ? rcu_is_watching+0x15/0xb0
[ 143.319421][ T6691] ? page_table_check_set+0x18d/0x730
[ 143.319447][ T6691] ? rcu_is_watching+0x15/0xb0
[ 143.319476][ T6691] ? ref_tracker_alloc+0x318/0x460
[ 143.319494][ T6691] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 143.319511][ T6691] ? tun_get+0x1c/0x2f0
[ 143.319529][ T6691] ? tun_get+0x1c/0x2f0
[ 143.319547][ T6691] ? rcu_is_watching+0x15/0xb0
[ 143.319571][ T6691] ? tun_get+0x1c/0x2f0
[ 143.319589][ T6691] ? lock_release+0x4b/0x3e0
[ 143.319613][ T6691] ? tun_get+0x1c/0x2f0
[ 143.319634][ T6691] tun_chr_write_iter+0x113/0x200
[ 143.319655][ T6691] vfs_write+0x54b/0xa90
[ 143.319682][ T6691] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 143.319702][ T6691] ? __pfx_vfs_write+0x10/0x10
[ 143.319732][ T6691] ? __fget_files+0x2a/0x420
[ 143.319754][ T6691] ksys_write+0x145/0x250
[ 143.319791][ T6691] ? __pfx_ksys_write+0x10/0x10
[ 143.319818][ T6691] ? rcu_is_watching+0x15/0xb0
[ 143.319846][ T6691] do_syscall_64+0xfa/0x3b0
[ 143.319865][ T6691] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 143.319882][ T6691] ? clear_bhb_loop+0x60/0xb0
[ 143.319902][ T6691] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 143.319919][ T6691] RIP: 0033:0x7fa422f7e98f
[ 143.319934][ T6691] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 143.319949][ T6691] RSP: 002b:00007fa423e35020 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 143.319968][ T6691] RAX: ffffffffffffffda RBX: 00007fa423146080 RCX: 00007fa422f7e98f
[ 143.319982][ T6691] RDX: 0000000000011dc0 RSI: 00000000200004c0 RDI: 00000000000000c8
[ 143.319994][ T6691] RBP: 00007fa422ff3cc8 R08: 0000000000000000 R09: 0000000000000000
[ 143.320004][ T6691] R10: 0000000000011dc0 R11: 0000000000000293 R12: 0000000000000000
[ 143.320014][ T6691] R13: 0000000000000001 R14: 00007fa423146080 R15: 00007ffd16b0f158
[ 143.320032][ T6691]
[ 143.320043][ T6691] BUG: Bad page state in process syz.0.16 pfn:5dfb3
[ 143.787929][ T6691] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805dfb3b40 pfn:0x5dfb3
[ 143.798244][ T6691] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 143.805461][ T6691] raw: 00fff00000000000 dead000000000040 ffff888022a93000 0000000000000000
[ 143.814357][ T6691] raw: ffff88805dfb3b40 0000000000000001 00000000ffffffff 0000000000000000
[ 143.823153][ T6691] page dumped because: page_pool leak
[ 143.828645][ T6691] page_owner tracks the page as allocated
[ 143.834373][ T6691] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6691, tgid 6688 (syz.0.16), ts 142833403318, free_ts 131627356868
[ 143.851432][ T6691] post_alloc_hook+0x240/0x2a0
[ 143.856412][ T6691] get_page_from_freelist+0x21d5/0x22b0
[ 143.861994][ T6691] __alloc_frozen_pages_noprof+0x181/0x370
[ 143.868136][ T6691] alloc_pages_bulk_noprof+0x560/0x710
[ 143.873650][ T6691] __page_pool_alloc_netmems_slow+0x127/0x740
[ 143.879830][ T6691] skb_pp_cow_data+0xb47/0x13e0
[ 143.884790][ T6691] do_xdp_generic+0x699/0x11a0
[ 143.889589][ T6691] __netif_receive_skb_core+0x17f9/0x4020
[ 143.895434][ T6691] __netif_receive_skb+0x72/0x380
[ 143.900534][ T6691] netif_receive_skb+0x1cb/0x790
[ 143.905479][ T6691] tun_rx_batched+0x1b9/0x730
[ 143.910182][ T6691] tun_get_user+0x2aa2/0x3e20
[ 143.914861][ T6691] tun_chr_write_iter+0x113/0x200
[ 143.919916][ T6691] vfs_write+0x54b/0xa90
[ 143.924169][ T6691] ksys_write+0x145/0x250
[ 143.928610][ T6691] do_syscall_64+0xfa/0x3b0
[ 143.933139][ T6691] page last free pid 6500 tgid 6500 stack trace:
[ 143.939524][ T6691] __free_frozen_pages+0xbb1/0xd20
[ 143.944642][ T6691] __tlb_remove_table+0x2d2/0x3b0
[ 143.949705][ T6691] tlb_remove_table_rcu+0x85/0x100
[ 143.954817][ T6691] rcu_core+0xca8/0x1770
[ 143.959081][ T6691] handle_softirqs+0x286/0x870
[ 143.963849][ T6691] __irq_exit_rcu+0xca/0x1f0
[ 143.968508][ T6691] irq_exit_rcu+0x9/0x30
[ 143.972755][ T6691] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 143.978413][ T6691] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 143.984413][ T6691] Modules linked in:
[ 143.988373][ T6691] CPU: 1 UID: 0 PID: 6691 Comm: syz.0.16 Tainted: G B 6.16.0-syzkaller-g186f3edfdd41 #0 PREEMPT(full)
[ 143.988398][ T6691] Tainted: [B]=BAD_PAGE
[ 143.988404][ T6691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 143.988413][ T6691] Call Trace:
[ 143.988418][ T6691]
[ 143.988424][ T6691] dump_stack_lvl+0x189/0x250
[ 143.988447][ T6691] ? __pfx_dump_stack_lvl+0x10/0x10
[ 143.988464][ T6691] ? __pfx_print_modules+0x10/0x10
[ 143.988503][ T6691] ? ksys_write+0x145/0x250
[ 143.988531][ T6691] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 143.988554][ T6691] bad_page+0x180/0x1c0
[ 143.988578][ T6691] __free_frozen_pages+0xcd1/0xd20
[ 143.988598][ T6691] bpf_xdp_frags_shrink_tail+0x3a5/0x750
[ 143.988628][ T6691] bpf_xdp_adjust_tail+0x1d6/0x220
[ 143.988650][ T6691] bpf_prog_f476d5219b92964a+0x1e/0x24
[ 143.988665][ T6691] bpf_prog_run_generic_xdp+0x64b/0x14c0
[ 143.988703][ T6691] do_xdp_generic+0x9f7/0x11a0
[ 143.988732][ T6691] ? __pfx_do_xdp_generic+0x10/0x10
[ 143.988755][ T6691] ? __skb_flow_dissect+0x5ef8/0x68b0
[ 143.988789][ T6691] __netif_receive_skb_core+0x17f9/0x4020
[ 143.988818][ T6691] ? __pfx___skb_flow_dissect+0x10/0x10
[ 143.988838][ T6691] ? __up_read+0x280/0x680
[ 143.988857][ T6691] ? __pfx___up_read+0x10/0x10
[ 143.988874][ T6691] ? lock_release+0x4b/0x3e0
[ 143.988903][ T6691] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 143.988934][ T6691] ? rcu_is_watching+0x15/0xb0
[ 143.988963][ T6691] ? irqentry_exit+0x74/0x90
[ 143.988979][ T6691] ? exc_page_fault+0x9f/0xf0
[ 143.989008][ T6691] ? netif_receive_skb+0x115/0x790
[ 143.989030][ T6691] ? rcu_is_watching+0x15/0xb0
[ 143.989053][ T6691] ? lock_acquire+0x5f/0x360
[ 143.989079][ T6691] __netif_receive_skb+0x72/0x380
[ 143.989112][ T6691] ? netif_receive_skb+0x115/0x790
[ 143.989136][ T6691] netif_receive_skb+0x1cb/0x790
[ 143.989162][ T6691] ? __pfx___local_bh_disable_ip+0x10/0x10
[ 143.989190][ T6691] ? __pfx_netif_receive_skb+0x10/0x10
[ 143.989215][ T6691] ? __pfx__copy_from_iter+0x10/0x10
[ 143.989234][ T6691] ? sock_alloc_send_pskb+0x875/0x990
[ 143.989258][ T6691] ? tun_rx_batched+0x160/0x730
[ 143.989280][ T6691] tun_rx_batched+0x1b9/0x730
[ 143.989299][ T6691] ? skb_header_pointer+0x8e/0x120
[ 143.989322][ T6691] ? __pfx_tun_rx_batched+0x10/0x10
[ 143.989342][ T6691] ? tun_get_user+0x266c/0x3e20
[ 143.989360][ T6691] ? rcu_is_watching+0x15/0xb0
[ 143.989386][ T6691] ? lock_acquire+0x5f/0x360
[ 143.989408][ T6691] ? __pfx___local_bh_enable_ip+0x10/0x10
[ 143.989439][ T6691] tun_get_user+0x2aa2/0x3e20
[ 143.989461][ T6691] ? __pfx_css_rstat_updated+0x10/0x10
[ 143.989497][ T6691] ? tun_get_user+0x266c/0x3e20
[ 143.989519][ T6691] ? __pfx_tun_get_user+0x10/0x10
[ 143.989538][ T6691] ? __folio_batch_add_and_move+0x20a/0xd20
[ 143.989567][ T6691] ? pfn_valid+0xba/0x490
[ 143.989581][ T6691] ? rcu_is_watching+0x15/0xb0
[ 143.989607][ T6691] ? page_table_check_set+0x18d/0x730
[ 143.989634][ T6691] ? rcu_is_watching+0x15/0xb0
[ 143.989662][ T6691] ? ref_tracker_alloc+0x318/0x460
[ 143.989679][ T6691] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 143.989695][ T6691] ? tun_get+0x1c/0x2f0
[ 143.989713][ T6691] ? tun_get+0x1c/0x2f0
[ 143.989731][ T6691] ? rcu_is_watching+0x15/0xb0
[ 143.989755][ T6691] ? tun_get+0x1c/0x2f0
[ 143.989773][ T6691] ? lock_release+0x4b/0x3e0
[ 143.989797][ T6691] ? tun_get+0x1c/0x2f0
[ 143.989818][ T6691] tun_chr_write_iter+0x113/0x200
[ 143.989838][ T6691] vfs_write+0x54b/0xa90
[ 143.989865][ T6691] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 143.989886][ T6691] ? __pfx_vfs_write+0x10/0x10
[ 143.989915][ T6691] ? __fget_files+0x2a/0x420
[ 143.989937][ T6691] ksys_write+0x145/0x250
[ 143.989964][ T6691] ? __pfx_ksys_write+0x10/0x10
[ 143.989991][ T6691] ? rcu_is_watching+0x15/0xb0
[ 143.990018][ T6691] do_syscall_64+0xfa/0x3b0
[ 143.990037][ T6691] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 143.990054][ T6691] ? clear_bhb_loop+0x60/0xb0
[ 143.990074][ T6691] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 143.990091][ T6691] RIP: 0033:0x7fa422f7e98f
[ 143.990107][ T6691] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 143.990122][ T6691] RSP: 002b:00007fa423e35020 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 143.990141][ T6691] RAX: ffffffffffffffda RBX: 00007fa423146080 RCX: 00007fa422f7e98f
[ 143.990154][ T6691] RDX: 0000000000011dc0 RSI: 00000000200004c0 RDI: 00000000000000c8
[ 143.990166][ T6691] RBP: 00007fa422ff3cc8 R08: 0000000000000000 R09: 0000000000000000
[ 143.990177][ T6691] R10: 0000000000011dc0 R11: 0000000000000293 R12: 0000000000000000
[ 143.990188][ T6691] R13: 0000000000000001 R14: 00007fa423146080 R15: 00007ffd16b0f158
[ 143.990208][ T6691]
[ 143.990218][ T6691] BUG: Bad page state in process syz.0.16 pfn:76a50
[ 144.457087][ T6691] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888076a50dc0 pfn:0x76a50
[ 144.467272][ T6691] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 144.474479][ T6691] raw: 00fff00000000000 dead000000000040 ffff888022a93000 0000000000000000
[ 144.483186][ T6691] raw: ffff888076a50dc0 0000000000000001 00000000ffffffff 0000000000000000
[ 144.491791][ T6691] page dumped because: page_pool leak
[ 144.497286][ T6691] page_owner tracks the page as allocated
[ 144.503135][ T6691] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6691, tgid 6688 (syz.0.16), ts 142833392423, free_ts 131627394597
[ 144.520268][ T6691] post_alloc_hook+0x240/0x2a0
[ 144.525045][ T6691] get_page_from_freelist+0x21d5/0x22b0
[ 144.530626][ T6691] __alloc_frozen_pages_noprof+0x181/0x370
[ 144.536471][ T6691] alloc_pages_bulk_noprof+0x560/0x710
[ 144.541917][ T6691] __page_pool_alloc_netmems_slow+0x127/0x740
[ 144.548095][ T6691] skb_pp_cow_data+0xb47/0x13e0
[ 144.552969][ T6691] do_xdp_generic+0x699/0x11a0
[ 144.557784][ T6691] __netif_receive_skb_core+0x17f9/0x4020
[ 144.563517][ T6691] __netif_receive_skb+0x72/0x380
[ 144.568571][ T6691] netif_receive_skb+0x1cb/0x790
[ 144.573517][ T6691] tun_rx_batched+0x1b9/0x730
[ 144.578217][ T6691] tun_get_user+0x2aa2/0x3e20
[ 144.582892][ T6691] tun_chr_write_iter+0x113/0x200
[ 144.588027][ T6691] vfs_write+0x54b/0xa90
[ 144.592276][ T6691] ksys_write+0x145/0x250
[ 144.596628][ T6691] do_syscall_64+0xfa/0x3b0
[ 144.601130][ T6691] page last free pid 6500 tgid 6500 stack trace:
[ 144.607556][ T6691] __free_frozen_pages+0xbb1/0xd20
[ 144.612673][ T6691] __tlb_remove_table+0x2d2/0x3b0
[ 144.617721][ T6691] tlb_remove_table_rcu+0x85/0x100
[ 144.622832][ T6691] rcu_core+0xca8/0x1770
[ 144.627096][ T6691] handle_softirqs+0x286/0x870
[ 144.631869][ T6691] __irq_exit_rcu+0xca/0x1f0
[ 144.636480][ T6691] irq_exit_rcu+0x9/0x30
[ 144.640731][ T6691] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 144.646401][ T6691] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 144.652400][ T6691] Modules linked in:
[ 144.656309][ T6691] CPU: 1 UID: 0 PID: 6691 Comm: syz.0.16 Tainted: G B 6.16.0-syzkaller-g186f3edfdd41 #0 PREEMPT(full)
[ 144.656337][ T6691] Tainted: [B]=BAD_PAGE
[ 144.656343][ T6691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 144.656352][ T6691] Call Trace:
[ 144.656360][ T6691]
[ 144.656368][ T6691] dump_stack_lvl+0x189/0x250
[ 144.656384][ T6691] ? __pfx_dump_stack_lvl+0x10/0x10
[ 144.656394][ T6691] ? __pfx_print_modules+0x10/0x10
[ 144.656407][ T6691] ? ksys_write+0x145/0x250
[ 144.656427][ T6691] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 144.656438][ T6691] bad_page+0x180/0x1c0
[ 144.656452][ T6691] __free_frozen_pages+0xcd1/0xd20
[ 144.656463][ T6691] bpf_xdp_frags_shrink_tail+0x3a5/0x750
[ 144.656481][ T6691] bpf_xdp_adjust_tail+0x1d6/0x220
[ 144.656493][ T6691] bpf_prog_f476d5219b92964a+0x1e/0x24
[ 144.656502][ T6691] bpf_prog_run_generic_xdp+0x64b/0x14c0
[ 144.656521][ T6691] do_xdp_generic+0x9f7/0x11a0
[ 144.656537][ T6691] ? __pfx_do_xdp_generic+0x10/0x10
[ 144.656548][ T6691] ? __skb_flow_dissect+0x5ef8/0x68b0
[ 144.656566][ T6691] __netif_receive_skb_core+0x17f9/0x4020
[ 144.656581][ T6691] ? __pfx___skb_flow_dissect+0x10/0x10
[ 144.656591][ T6691] ? __up_read+0x280/0x680
[ 144.656601][ T6691] ? __pfx___up_read+0x10/0x10
[ 144.656610][ T6691] ? lock_release+0x4b/0x3e0
[ 144.656624][ T6691] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 144.656640][ T6691] ? rcu_is_watching+0x15/0xb0
[ 144.656655][ T6691] ? irqentry_exit+0x74/0x90
[ 144.656663][ T6691] ? exc_page_fault+0x9f/0xf0
[ 144.656680][ T6691] ? netif_receive_skb+0x115/0x790
[ 144.656693][ T6691] ? rcu_is_watching+0x15/0xb0
[ 144.656706][ T6691] ? lock_acquire+0x5f/0x360
[ 144.656718][ T6691] __netif_receive_skb+0x72/0x380
[ 144.656733][ T6691] ? netif_receive_skb+0x115/0x790
[ 144.656746][ T6691] netif_receive_skb+0x1cb/0x790
[ 144.656759][ T6691] ? __pfx___local_bh_disable_ip+0x10/0x10
[ 144.656774][ T6691] ? __pfx_netif_receive_skb+0x10/0x10
[ 144.656787][ T6691] ? __pfx__copy_from_iter+0x10/0x10
[ 144.656798][ T6691] ? sock_alloc_send_pskb+0x875/0x990
[ 144.656811][ T6691] ? tun_rx_batched+0x160/0x730
[ 144.656823][ T6691] tun_rx_batched+0x1b9/0x730
[ 144.656834][ T6691] ? skb_header_pointer+0x8e/0x120
[ 144.656846][ T6691] ? __pfx_tun_rx_batched+0x10/0x10
[ 144.656857][ T6691] ? tun_get_user+0x266c/0x3e20
[ 144.656867][ T6691] ? rcu_is_watching+0x15/0xb0
[ 144.656880][ T6691] ? lock_acquire+0x5f/0x360
[ 144.656892][ T6691] ? __pfx___local_bh_enable_ip+0x10/0x10
[ 144.656908][ T6691] tun_get_user+0x2aa2/0x3e20
[ 144.656920][ T6691] ? __pfx_css_rstat_updated+0x10/0x10
[ 144.656935][ T6691] ? tun_get_user+0x266c/0x3e20
[ 144.656947][ T6691] ? __pfx_tun_get_user+0x10/0x10
[ 144.656957][ T6691] ? __folio_batch_add_and_move+0x20a/0xd20
[ 144.656973][ T6691] ? pfn_valid+0xba/0x490
[ 144.656981][ T6691] ? rcu_is_watching+0x15/0xb0
[ 144.657002][ T6691] ? page_table_check_set+0x18d/0x730
[ 144.657025][ T6691] ? rcu_is_watching+0x15/0xb0
[ 144.657051][ T6691] ? ref_tracker_alloc+0x318/0x460
[ 144.657067][ T6691] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 144.657083][ T6691] ? tun_get+0x1c/0x2f0
[ 144.657101][ T6691] ? tun_get+0x1c/0x2f0
[ 144.657117][ T6691] ? rcu_is_watching+0x15/0xb0
[ 144.657142][ T6691] ? tun_get+0x1c/0x2f0
[ 144.657159][ T6691] ? lock_release+0x4b/0x3e0
[ 144.657184][ T6691] ? tun_get+0x1c/0x2f0
[ 144.657205][ T6691] tun_chr_write_iter+0x113/0x200
[ 144.657226][ T6691] vfs_write+0x54b/0xa90
[ 144.657250][ T6691] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 144.657268][ T6691] ? __pfx_vfs_write+0x10/0x10
[ 144.657297][ T6691] ? __fget_files+0x2a/0x420
[ 144.657319][ T6691] ksys_write+0x145/0x250
[ 144.657341][ T6691] ? __pfx_ksys_write+0x10/0x10
[ 144.657372][ T6691] ? rcu_is_watching+0x15/0xb0
[ 144.657399][ T6691] do_syscall_64+0xfa/0x3b0
[ 144.657448][ T6691] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 144.657465][ T6691] ? clear_bhb_loop+0x60/0xb0
[ 144.657485][ T6691] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 144.657502][ T6691] RIP: 0033:0x7fa422f7e98f
[ 144.657517][ T6691] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 144.657532][ T6691] RSP: 002b:00007fa423e35020 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 144.657551][ T6691] RAX: ffffffffffffffda RBX: 00007fa423146080 RCX: 00007fa422f7e98f
[ 144.657563][ T6691] RDX: 0000000000011dc0 RSI: 00000000200004c0 RDI: 00000000000000c8
[ 144.657575][ T6691] RBP: 00007fa422ff3cc8 R08: 0000000000000000 R09: 0000000000000000
[ 144.657586][ T6691] R10: 0000000000011dc0 R11: 0000000000000293 R12: 0000000000000000
[ 144.657598][ T6691] R13: 0000000000000001 R14: 00007fa423146080 R15: 00007ffd16b0f158
[ 144.657613][ T6691]
[ 144.916561][ T5171] Bluetooth: hci0: command tx timeout
[ 144.919000][ T6691] BUG: Bad page state in process syz.0.16 pfn:71e9c
[ 145.129090][ T6691] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888071e9ca00 pfn:0x71e9c
[ 145.139184][ T6691] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 145.146300][ T6691] raw: 00fff00000000000 dead000000000040 ffff888022a93000 0000000000000000
[ 145.154934][ T6691] raw: ffff888071e9ca00 0000000000000001 00000000ffffffff 0000000000000000
[ 145.163637][ T6691] page dumped because: page_pool leak
[ 145.169060][ T6691] page_owner tracks the page as allocated
[ 145.174772][ T6691] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6691, tgid 6688 (syz.0.16), ts 142833381101, free_ts 131627472046
[ 145.191645][ T6691] post_alloc_hook+0x240/0x2a0
[ 145.196445][ T6691] get_page_from_freelist+0x21d5/0x22b0
[ 145.201980][ T6691] __alloc_frozen_pages_noprof+0x181/0x370
[ 145.207811][ T6691] alloc_pages_bulk_noprof+0x560/0x710
[ 145.213318][ T6691] __page_pool_alloc_netmems_slow+0x127/0x740
[ 145.219510][ T6691] skb_pp_cow_data+0xb47/0x13e0
[ 145.224378][ T6691] do_xdp_generic+0x699/0x11a0
[ 145.229365][ T6691] __netif_receive_skb_core+0x17f9/0x4020
[ 145.235169][ T6691] __netif_receive_skb+0x72/0x380
[ 145.240250][ T6691] netif_receive_skb+0x1cb/0x790
[ 145.245200][ T6691] tun_rx_batched+0x1b9/0x730
[ 145.249929][ T6691] tun_get_user+0x2aa2/0x3e20
[ 145.254621][ T6691] tun_chr_write_iter+0x113/0x200
[ 145.259678][ T6691] vfs_write+0x54b/0xa90
[ 145.263934][ T6691] ksys_write+0x145/0x250
[ 145.268298][ T6691] do_syscall_64+0xfa/0x3b0
[ 145.272893][ T6691] page last free pid 6500 tgid 6500 stack trace:
[ 145.279361][ T6691] __free_frozen_pages+0xbb1/0xd20
[ 145.284597][ T6691] __tlb_remove_table+0x2d2/0x3b0
[ 145.289738][ T6691] tlb_remove_table_rcu+0x85/0x100
[ 145.294939][ T6691] rcu_core+0xca8/0x1770
[ 145.299219][ T6691] handle_softirqs+0x286/0x870
[ 145.304022][ T6691] __irq_exit_rcu+0xca/0x1f0
[ 145.308642][ T6691] irq_exit_rcu+0x9/0x30
[ 145.312897][ T6691] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 145.318568][ T6691] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 145.324574][ T6691] Modules linked in:
[ 145.328646][ T6691] CPU: 1 UID: 0 PID: 6691 Comm: syz.0.16 Tainted: G B 6.16.0-syzkaller-g186f3edfdd41 #0 PREEMPT(full)
[ 145.328680][ T6691] Tainted: [B]=BAD_PAGE
[ 145.328687][ T6691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 145.328698][ T6691] Call Trace:
[ 145.328707][ T6691]
[ 145.328716][ T6691] dump_stack_lvl+0x189/0x250
[ 145.328739][ T6691] ? __pfx_dump_stack_lvl+0x10/0x10
[ 145.328754][ T6691] ? __pfx_print_modules+0x10/0x10
[ 145.328776][ T6691] ? ksys_write+0x145/0x250
[ 145.328798][ T6691] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 145.328819][ T6691] bad_page+0x180/0x1c0
[ 145.328844][ T6691] __free_frozen_pages+0xcd1/0xd20
[ 145.328865][ T6691] bpf_xdp_frags_shrink_tail+0x3a5/0x750
[ 145.328898][ T6691] bpf_xdp_adjust_tail+0x1d6/0x220
[ 145.328920][ T6691] bpf_prog_f476d5219b92964a+0x1e/0x24
[ 145.328935][ T6691] bpf_prog_run_generic_xdp+0x64b/0x14c0
[ 145.328974][ T6691] do_xdp_generic+0x9f7/0x11a0
[ 145.329005][ T6691] ? __pfx_do_xdp_generic+0x10/0x10
[ 145.329028][ T6691] ? __skb_flow_dissect+0x5ef8/0x68b0
[ 145.329063][ T6691] __netif_receive_skb_core+0x17f9/0x4020
[ 145.329091][ T6691] ? __pfx___skb_flow_dissect+0x10/0x10
[ 145.329109][ T6691] ? __up_read+0x280/0x680
[ 145.329127][ T6691] ? __pfx___up_read+0x10/0x10
[ 145.329142][ T6691] ? lock_release+0x4b/0x3e0
[ 145.329170][ T6691] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 145.329198][ T6691] ? rcu_is_watching+0x15/0xb0
[ 145.329225][ T6691] ? irqentry_exit+0x74/0x90
[ 145.329240][ T6691] ? exc_page_fault+0x9f/0xf0
[ 145.329266][ T6691] ? netif_receive_skb+0x115/0x790
[ 145.329287][ T6691] ? rcu_is_watching+0x15/0xb0
[ 145.329317][ T6691] ? lock_acquire+0x5f/0x360
[ 145.329341][ T6691] __netif_receive_skb+0x72/0x380
[ 145.329370][ T6691] ? netif_receive_skb+0x115/0x790
[ 145.329395][ T6691] netif_receive_skb+0x1cb/0x790
[ 145.329420][ T6691] ? __pfx___local_bh_disable_ip+0x10/0x10
[ 145.329448][ T6691] ? __pfx_netif_receive_skb+0x10/0x10
[ 145.329473][ T6691] ? __pfx__copy_from_iter+0x10/0x10
[ 145.329493][ T6691] ? sock_alloc_send_pskb+0x875/0x990
[ 145.329518][ T6691] ? tun_rx_batched+0x160/0x730
[ 145.329538][ T6691] tun_rx_batched+0x1b9/0x730
[ 145.329556][ T6691] ? skb_header_pointer+0x8e/0x120
[ 145.329579][ T6691] ? __pfx_tun_rx_batched+0x10/0x10
[ 145.329599][ T6691] ? tun_get_user+0x266c/0x3e20
[ 145.329617][ T6691] ? rcu_is_watching+0x15/0xb0
[ 145.329650][ T6691] ? lock_acquire+0x5f/0x360
[ 145.329672][ T6691] ? __pfx___local_bh_enable_ip+0x10/0x10
[ 145.329703][ T6691] tun_get_user+0x2aa2/0x3e20
[ 145.329725][ T6691] ? __pfx_css_rstat_updated+0x10/0x10
[ 145.329753][ T6691] ? tun_get_user+0x266c/0x3e20
[ 145.329776][ T6691] ? __pfx_tun_get_user+0x10/0x10
[ 145.329795][ T6691] ? __folio_batch_add_and_move+0x20a/0xd20
[ 145.329823][ T6691] ? pfn_valid+0xba/0x490
[ 145.329837][ T6691] ? rcu_is_watching+0x15/0xb0
[ 145.329865][ T6691] ? page_table_check_set+0x18d/0x730
[ 145.329891][ T6691] ? rcu_is_watching+0x15/0xb0
[ 145.329928][ T6691] ? ref_tracker_alloc+0x318/0x460
[ 145.329946][ T6691] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 145.329964][ T6691] ? tun_get+0x1c/0x2f0
[ 145.329982][ T6691] ? tun_get+0x1c/0x2f0
[ 145.330000][ T6691] ? rcu_is_watching+0x15/0xb0
[ 145.330025][ T6691] ? tun_get+0x1c/0x2f0
[ 145.330043][ T6691] ? lock_release+0x4b/0x3e0
[ 145.330068][ T6691] ? tun_get+0x1c/0x2f0
[ 145.330090][ T6691] tun_chr_write_iter+0x113/0x200
[ 145.330112][ T6691] vfs_write+0x54b/0xa90
[ 145.330141][ T6691] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 145.330162][ T6691] ? __pfx_vfs_write+0x10/0x10
[ 145.330192][ T6691] ? __fget_files+0x2a/0x420
[ 145.330215][ T6691] ksys_write+0x145/0x250
[ 145.330241][ T6691] ? __pfx_ksys_write+0x10/0x10
[ 145.330269][ T6691] ? rcu_is_watching+0x15/0xb0
[ 145.330390][ T6691] do_syscall_64+0xfa/0x3b0
[ 145.330409][ T6691] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 145.330427][ T6691] ? clear_bhb_loop+0x60/0xb0
[ 145.330445][ T6691] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 145.330462][ T6691] RIP: 0033:0x7fa422f7e98f
[ 145.330477][ T6691] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 145.330492][ T6691] RSP: 002b:00007fa423e35020 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 145.330512][ T6691] RAX: ffffffffffffffda RBX: 00007fa423146080 RCX: 00007fa422f7e98f
[ 145.330527][ T6691] RDX: 0000000000011dc0 RSI: 00000000200004c0 RDI: 00000000000000c8
[ 145.330538][ T6691] RBP: 00007fa422ff3cc8 R08: 0000000000000000 R09: 0000000000000000
[ 145.330548][ T6691] R10: 0000000000011dc0 R11: 0000000000000293 R12: 0000000000000000
[ 145.330560][ T6691] R13: 0000000000000001 R14: 00007fa423146080 R15: 00007ffd16b0f158
[ 145.330579][ T6691]
[ 145.330591][ T6691] BUG: Bad page state in process syz.0.16 pfn:7135f
[ 145.798411][ T6691] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807135fdc0 pfn:0x7135f
[ 145.808584][ T6691] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 145.815701][ T6691] raw: 00fff00000000000 dead000000000040 ffff888022a93000 0000000000000000
[ 145.824333][ T6691] raw: ffff88807135fdc0 0000000000000001 00000000ffffffff 0000000000000000
[ 145.833106][ T6691] page dumped because: page_pool leak
[ 145.838579][ T6691] page_owner tracks the page as allocated
[ 145.844329][ T6691] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6691, tgid 6688 (syz.0.16), ts 142833370249, free_ts 131627509379
[ 145.861201][ T6691] post_alloc_hook+0x240/0x2a0
[ 145.865969][ T6691] get_page_from_freelist+0x21d5/0x22b0
[ 145.871543][ T6691] __alloc_frozen_pages_noprof+0x181/0x370
[ 145.877416][ T6691] alloc_pages_bulk_noprof+0x560/0x710
[ 145.882884][ T6691] __page_pool_alloc_netmems_slow+0x127/0x740
[ 145.888982][ T6691] skb_pp_cow_data+0xb47/0x13e0
[ 145.893853][ T6691] do_xdp_generic+0x699/0x11a0
[ 145.898666][ T6691] __netif_receive_skb_core+0x17f9/0x4020
[ 145.904485][ T6691] __netif_receive_skb+0x72/0x380
[ 145.909567][ T6691] netif_receive_skb+0x1cb/0x790
[ 145.914513][ T6691] tun_rx_batched+0x1b9/0x730
[ 145.919928][ T6691] tun_get_user+0x2aa2/0x3e20
[ 145.924605][ T6691] tun_chr_write_iter+0x113/0x200
[ 145.929661][ T6691] vfs_write+0x54b/0xa90
[ 145.933922][ T6691] ksys_write+0x145/0x250
[ 145.938271][ T6691] do_syscall_64+0xfa/0x3b0
[ 145.942774][ T6691] page last free pid 6500 tgid 6500 stack trace:
[ 145.949127][ T6691] __free_frozen_pages+0xbb1/0xd20
[ 145.954239][ T6691] __tlb_remove_table+0x2d2/0x3b0
[ 145.959304][ T6691] tlb_remove_table_rcu+0x85/0x100
[ 145.964425][ T6691] rcu_core+0xca8/0x1770
[ 145.968989][ T6691] handle_softirqs+0x286/0x870
[ 145.973791][ T6691] __irq_exit_rcu+0xca/0x1f0
[ 145.978420][ T6691] irq_exit_rcu+0x9/0x30
[ 145.982715][ T6691] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 145.988495][ T6691] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 145.994533][ T6691] Modules linked in:
[ 145.998591][ T6691] CPU: 1 UID: 0 PID: 6691 Comm: syz.0.16 Tainted: G B 6.16.0-syzkaller-g186f3edfdd41 #0 PREEMPT(full)
[ 145.998617][ T6691] Tainted: [B]=BAD_PAGE
[ 145.998624][ T6691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 145.998635][ T6691] Call Trace:
[ 145.998645][ T6691]
[ 145.998654][ T6691] dump_stack_lvl+0x189/0x250
[ 145.998675][ T6691] ? __pfx_dump_stack_lvl+0x10/0x10
[ 145.998691][ T6691] ? __pfx_print_modules+0x10/0x10
[ 145.998713][ T6691] ? ksys_write+0x145/0x250
[ 145.998735][ T6691] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 145.998754][ T6691] bad_page+0x180/0x1c0
[ 145.998777][ T6691] __free_frozen_pages+0xcd1/0xd20
[ 145.998797][ T6691] bpf_xdp_frags_shrink_tail+0x3a5/0x750
[ 145.998828][ T6691] bpf_xdp_adjust_tail+0x1d6/0x220
[ 145.998850][ T6691] bpf_prog_f476d5219b92964a+0x1e/0x24
[ 145.998865][ T6691] bpf_prog_run_generic_xdp+0x64b/0x14c0
[ 145.998898][ T6691] do_xdp_generic+0x9f7/0x11a0
[ 145.998927][ T6691] ? __pfx_do_xdp_generic+0x10/0x10
[ 145.998949][ T6691] ? __skb_flow_dissect+0x5ef8/0x68b0
[ 145.998984][ T6691] __netif_receive_skb_core+0x17f9/0x4020
[ 145.999015][ T6691] ? __pfx___skb_flow_dissect+0x10/0x10
[ 145.999036][ T6691] ? __up_read+0x280/0x680
[ 145.999056][ T6691] ? __pfx___up_read+0x10/0x10
[ 145.999073][ T6691] ? lock_release+0x4b/0x3e0
[ 145.999102][ T6691] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 145.999131][ T6691] ? rcu_is_watching+0x15/0xb0