[ 74.559114][ T42] audit: type=1400 audit(1785618260.037:207): avc: denied { transition } for pid=5968 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 74.568535][ T42] audit: type=1400 audit(1785618260.037:208): avc: denied { noatsecure } for pid=5968 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 74.576714][ T42] audit: type=1400 audit(1785618260.037:209): avc: denied { rlimitinh } for pid=5968 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 74.584823][ T42] audit: type=1400 audit(1785618260.037:210): avc: denied { siginh } for pid=5968 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 77.568511][ T42] audit: type=1400 audit(1785618263.047:211): avc: denied { write } for pid=5972 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 77.634320][ T42] audit: type=1400 audit(1785618263.107:212): avc: denied { write } for pid=5975 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 78.913327][ T42] audit: type=1400 audit(1785618264.387:213): avc: denied { write } for pid=5982 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 78.953924][ T42] audit: type=1400 audit(1785618264.427:214): avc: denied { write } for pid=5985 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 79.813268][ T42] audit: type=1400 audit(1785618265.287:215): avc: denied { write } for pid=5988 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 79.861350][ T42] audit: type=1400 audit(1785618265.337:216): avc: denied { write } for pid=5991 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
Warning: Permanently added '[localhost]:53575' (ED25519) to the list of known hosts.
[ 80.290947][ T42] audit: type=1400 audit(1785618265.767:217): avc: denied { write } for pid=6002 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 80.336495][ T42] audit: type=1400 audit(1785618265.807:218): avc: denied { write } for pid=6005 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
2026/08/01 21:04:27 parsed 1 programs
2026/08/01 21:04:27 serving rpc on tcp://33575
[ 81.783437][ T34] cfg80211: failed to load regulatory.db
[ 83.891121][ T42] audit: type=1400 audit(1785618269.367:219): avc: denied { read write } for pid=6018 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 83.900409][ T42] audit: type=1400 audit(1785618269.367:220): avc: denied { open } for pid=6018 comm="syz-executor" path="/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 83.961862][ T42] audit: type=1400 audit(1785618269.437:221): avc: denied { unlink } for pid=6018 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 84.373072][ T42] audit: type=1400 audit(1785618269.847:222): avc: denied { relabelto } for pid=6021 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
Setting up swapspace version 1, size = 127995904 bytes
[ 85.007733][ T6018] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 86.738155][ T42] audit: type=1400 audit(1785618272.217:223): avc: denied { sys_module } for pid=6024 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[ 87.017729][ T6024] bridge0: port 1(bridge_slave_0) entered blocking state
[ 87.020307][ T6024] bridge0: port 1(bridge_slave_0) entered disabled state
[ 87.022624][ T6024] bridge_slave_0: entered allmulticast mode
[ 87.025418][ T6024] bridge_slave_0: entered promiscuous mode
[ 87.029845][ T6024] bridge0: port 2(bridge_slave_1) entered blocking state
[ 87.032185][ T6024] bridge0: port 2(bridge_slave_1) entered disabled state
[ 87.034504][ T6024] bridge_slave_1: entered allmulticast mode
[ 87.037422][ T6024] bridge_slave_1: entered promiscuous mode
[ 87.057647][ T6024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 87.064672][ T6024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 87.081777][ T6024] team0: Port device team_slave_0 added
[ 87.084957][ T6024] team0: Port device team_slave_1 added
[ 87.100527][ T6024] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 87.102761][ T6024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 87.111424][ T6024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 87.117303][ T6024] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 87.120378][ T6024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 87.130628][ T6024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 87.166884][ T6024] hsr_slave_0: entered promiscuous mode
[ 87.169338][ T6024] hsr_slave_1: entered promiscuous mode
[ 87.261995][ T42] audit: type=1400 audit(1785618272.737:224): avc: denied { write } for pid=6040 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 87.301429][ T42] audit: type=1400 audit(1785618272.777:225): avc: denied { write } for pid=6044 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 87.367680][ T42] audit: type=1400 audit(1785618272.837:226): avc: denied { write } for pid=6046 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 87.406456][ T42] audit: type=1400 audit(1785618272.877:227): avc: denied { write } for pid=6049 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 87.466432][ T42] audit: type=1400 audit(1785618272.937:228): avc: denied { write } for pid=6051 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 87.515919][ T42] audit: type=1400 audit(1785618272.987:229): avc: denied { write } for pid=6054 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 87.573001][ T42] audit: type=1400 audit(1785618273.047:230): avc: denied { write } for pid=6056 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 87.615659][ T42] audit: type=1400 audit(1785618273.087:231): avc: denied { write } for pid=6059 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 87.634398][ T6024] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 87.638585][ T6024] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 87.641894][ T6024] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 87.645801][ T6024] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 87.648830][ T6024] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 87.652751][ T6024] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 87.655634][ T6024] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 87.659932][ T6024] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 87.682590][ T6024] bridge0: port 2(bridge_slave_1) entered blocking state
[ 87.685691][ T6024] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 87.689053][ T6024] bridge0: port 1(bridge_slave_0) entered blocking state
[ 87.690172][ T42] audit: type=1400 audit(1785618273.167:232): avc: denied { write } for pid=6061 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 87.692102][ T6024] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 87.735279][ T6024] 8021q: adding VLAN 0 to HW filter on device bond0
[ 87.748339][ T1167] bridge0: port 1(bridge_slave_0) entered disabled state
[ 87.751209][ T1167] bridge0: port 2(bridge_slave_1) entered disabled state
[ 87.763706][ T6024] 8021q: adding VLAN 0 to HW filter on device team0
[ 87.769689][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state
[ 87.772019][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 87.779117][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state
[ 87.781465][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 88.022582][ T6024] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 88.044044][ T6024] veth0_vlan: entered promiscuous mode
[ 88.050532][ T6024] veth1_vlan: entered promiscuous mode
[ 88.065628][ T6024] veth0_macvtap: entered promiscuous mode
[ 88.071556][ T6024] veth1_macvtap: entered promiscuous mode
[ 88.081204][ T6024] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 88.086983][ T6024] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 88.108676][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 88.114213][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 88.117311][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 88.121594][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 88.231573][ T5922] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 88.330101][ T5922] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 88.417316][ T5922] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 88.512491][ T5922] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 89.803156][ T109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 89.805675][ T109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 89.820622][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 89.823068][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 89.876038][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 89.880180][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 89.883845][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 89.887612][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 89.891630][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
2026/08/01 21:04:35 executed programs: 0
[ 90.373938][ T5098] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 90.379689][ T5098] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 90.383462][ T5098] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 90.386085][ T5098] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 90.389284][ T5098] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 90.733663][ T6198] bridge0: port 1(bridge_slave_0) entered blocking state
[ 90.736711][ T6198] bridge0: port 1(bridge_slave_0) entered disabled state
[ 90.740436][ T6198] bridge_slave_0: entered allmulticast mode
[ 90.744318][ T6198] bridge_slave_0: entered promiscuous mode
[ 90.747993][ T6198] bridge0: port 2(bridge_slave_1) entered blocking state
[ 90.750949][ T6198] bridge0: port 2(bridge_slave_1) entered disabled state
[ 90.754111][ T6198] bridge_slave_1: entered allmulticast mode
[ 90.756896][ T6198] bridge_slave_1: entered promiscuous mode
[ 90.778425][ T6198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 90.784426][ T6198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 90.807055][ T6198] team0: Port device team_slave_0 added
[ 90.811382][ T6198] team0: Port device team_slave_1 added
[ 90.833543][ T6198] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 90.836351][ T6198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 90.846457][ T6198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 90.851179][ T6198] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 90.853352][ T6198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 90.861310][ T6198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 90.884672][ T6198] hsr_slave_0: entered promiscuous mode
[ 90.886901][ T6198] hsr_slave_1: entered promiscuous mode
[ 90.889109][ T6198] debugfs: 'hsr0' already exists in 'hsr'
[ 90.890917][ T6198] Cannot create hsr debugfs directory
[ 91.628283][ T5922] bridge_slave_1: left allmulticast mode
[ 91.630412][ T5922] bridge_slave_1: left promiscuous mode
[ 91.632807][ T5922] bridge0: port 2(bridge_slave_1) entered disabled state
[ 91.638596][ T5922] bridge_slave_0: left allmulticast mode
[ 91.641311][ T5922] bridge_slave_0: left promiscuous mode
[ 91.643645][ T5922] bridge0: port 1(bridge_slave_0) entered disabled state
[ 91.758872][ T5922] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 91.764954][ T5922] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 91.770051][ T5922] bond0 (unregistering): Released all slaves
[ 91.857454][ T42] kauditd_printk_skb: 18 callbacks suppressed
[ 91.857466][ T42] audit: type=1400 audit(1785618277.327:251): avc: denied { write } for pid=6216 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 91.912870][ T42] audit: type=1400 audit(1785618277.387:252): avc: denied { write } for pid=6219 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 91.919983][ T5922] hsr_slave_0: left promiscuous mode
[ 91.922332][ T5922] hsr_slave_1: left promiscuous mode
[ 91.924477][ T5922] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 91.926982][ T5922] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 91.931027][ T5922] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 91.933777][ T5922] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 91.942104][ T5922] veth1_macvtap: left promiscuous mode
[ 91.944105][ T5922] veth0_macvtap: left promiscuous mode
[ 91.945891][ T5922] veth1_vlan: left promiscuous mode
[ 91.947590][ T5922] veth0_vlan: left promiscuous mode
[ 92.057977][ T5922] team0 (unregistering): Port device team_slave_1 removed
[ 92.066461][ T5922] team0 (unregistering): Port device team_slave_0 removed
[ 92.142917][ T5451] 8021q: adding VLAN 0 to HW filter on device eth2
[ 92.215042][ T42] audit: type=1400 audit(1785618277.687:253): avc: denied { write } for pid=6223 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 92.273514][ T42] audit: type=1400 audit(1785618277.747:254): avc: denied { write } for pid=6226 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 92.416479][ T42] audit: type=1400 audit(1785618277.887:255): avc: denied { write } for pid=6230 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 92.426282][ T64] Bluetooth: hci0: command tx timeout
[ 92.480336][ T42] audit: type=1400 audit(1785618277.957:256): avc: denied { write } for pid=6233 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 92.555718][ T42] audit: type=1400 audit(1785618278.027:257): avc: denied { write } for pid=6235 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 92.605801][ T42] audit: type=1400 audit(1785618278.077:258): avc: denied { write } for pid=6238 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 92.638605][ T6198] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 92.642923][ T6198] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 92.645819][ T6198] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 92.652738][ T6198] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 92.656557][ T6198] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 92.663975][ T6198] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 92.668057][ T6198] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 92.673668][ T6198] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 92.714766][ T6198] 8021q: adding VLAN 0 to HW filter on device bond0
[ 92.726122][ T6198] 8021q: adding VLAN 0 to HW filter on device team0
[ 92.731955][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state
[ 92.735154][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 92.742483][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state
[ 92.745584][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 93.379412][ T6198] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 93.406042][ T6198] veth0_vlan: entered promiscuous mode
[ 93.413264][ T6198] veth1_vlan: entered promiscuous mode
[ 93.442671][ T6198] veth0_macvtap: entered promiscuous mode
[ 93.446863][ T6198] veth1_macvtap: entered promiscuous mode
[ 93.455700][ T6198] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 93.462631][ T6198] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 93.548386][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 93.551614][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 93.559372][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 93.568202][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 93.585296][ T109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 93.588081][ T109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 93.588792][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 93.593553][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 93.628843][ T42] audit: type=1400 audit(1785618279.097:259): avc: denied { prog_load } for pid=6256 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 93.636347][ T42] audit: type=1400 audit(1785618279.107:260): avc: denied { bpf } for pid=6256 comm="syz.0.17" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 93.646945][ T6257] BUG: Bad page state in process syz.0.17 pfn:3203d
[ 93.649791][ T6257] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3203d
[ 93.654710][ T6257] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 93.657234][ T6257] raw: 00fff00000000000 dead000000000040 ffff888022fa6000 0000000000000000
[ 93.660204][ T6257] raw: 0000000000000000 3fffffffffffffff 00000000ffffffff 0000000000000000
[ 93.663361][ T6257] page dumped because: page_pool leak
[ 93.665039][ T6257] page_owner tracks the page as allocated
[ 93.667204][ T6257] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6257, tgid 6256 (syz.0.17), ts 93646833836, free_ts 93601478210
[ 93.673304][ T6257] post_alloc_hook+0xfd/0x120
[ 93.674821][ T6257] get_page_from_freelist+0xf48/0x3530
[ 93.676565][ T6257] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 93.678420][ T6257] alloc_pages_bulk_noprof+0x5de/0x13c0
[ 93.680149][ T6257] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 93.682082][ T6257] page_pool_alloc_netmems+0xc4/0x1a0
[ 93.683741][ T6257] page_pool_alloc_frag_netmem+0x21d/0xa10
[ 93.685460][ T6257] skb_pp_cow_data+0x507/0x1140
[ 93.687042][ T6257] skb_cow_data_for_xdp+0x88/0xb0
[ 93.688883][ T6257] do_xdp_generic+0x56b/0x12c0
[ 93.690547][ T6257] tun_get_user+0x1c1c/0x3c20
[ 93.692034][ T6257] tun_chr_write_iter+0xdc/0x200
[ 93.693590][ T6257] vfs_write+0x6ac/0x1050
[ 93.694956][ T6257] ksys_write+0x12a/0x250
[ 93.696432][ T6257] do_syscall_64+0x115/0x870
[ 93.697986][ T6257] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 93.699887][ T6257] page last free pid 34 tgid 34 stack trace:
[ 93.701754][ T6257] __free_frozen_pages+0x79f/0x1090
[ 93.703390][ T6257] kasan_depopulate_vmalloc_pte+0x5d/0x80
[ 93.705191][ T6257] __apply_to_page_range+0xb1d/0x1520
[ 93.706941][ T6257] __kasan_release_vmalloc+0xd7/0xe0
[ 93.708704][ T6257] purge_vmap_node+0x210/0xb40
[ 93.710229][ T6257] __purge_vmap_area_lazy+0x90a/0xc00
[ 93.712018][ T6257] drain_vmap_area_work+0x27/0x40
[ 93.713629][ T6257] process_one_work+0xa23/0x1940
[ 93.715047][ T6257] worker_thread+0x5ef/0xe50
[ 93.716503][ T6257] kthread+0x370/0x450
[ 93.717868][ T6257] ret_from_fork+0x72b/0xd50
[ 93.719339][ T6257] ret_from_fork_asm+0x1a/0x30
[ 93.720867][ T6257] Modules linked in:
[ 93.722134][ T6257] CPU: 3 UID: 0 PID: 6257 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 93.722147][ T6257] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 93.722154][ T6257] Call Trace:
[ 93.722172][ T6257]
[ 93.722176][ T6257] dump_stack_lvl+0x100/0x190
[ 93.722196][ T6257] bad_page.cold+0xbe/0xdf
[ 93.722213][ T6257] ? __pfx_bad_page+0x10/0x10
[ 93.722226][ T6257] ? page_bad_reason+0x98/0x200
[ 93.722238][ T6257] __free_frozen_pages+0x7d1/0x1090
[ 93.722255][ T6257] ? kasan_quarantine_put+0x104/0x240
[ 93.722268][ T6257] ? lockdep_hardirqs_on+0x78/0x100
[ 93.722282][ T6257] page_frag_free+0x199/0x1f0
[ 93.722295][ T6257] __xdp_return+0x3b6/0x990
[ 93.722308][ T6257] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 93.722323][ T6257] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 93.722333][ T6257] bpf_prog_run_generic_xdp+0x614/0x1610
[ 93.722352][ T6257] do_xdp_generic+0x92e/0x12c0
[ 93.722364][ T6257] ? __pfx_do_xdp_generic+0x10/0x10
[ 93.722386][ T6257] tun_get_user+0x1c1c/0x3c20
[ 93.722402][ T6257] ? __pfx_tun_get_user+0x10/0x10
[ 93.722414][ T6257] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 93.722434][ T6257] ? find_held_lock+0x2b/0x80
[ 93.722444][ T6257] ? tun_get+0x191/0x370
[ 93.722452][ T6257] ? tun_get+0x191/0x370
[ 93.722464][ T6257] tun_chr_write_iter+0xdc/0x200
[ 93.722476][ T6257] vfs_write+0x6ac/0x1050
[ 93.722492][ T6257] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 93.722504][ T6257] ? __pfx_vfs_write+0x10/0x10
[ 93.722519][ T6257] ? find_held_lock+0x2b/0x80
[ 93.722536][ T6257] ksys_write+0x12a/0x250
[ 93.722551][ T6257] ? __pfx_ksys_write+0x10/0x10
[ 93.722570][ T6257] do_syscall_64+0x115/0x870
[ 93.722584][ T6257] ? clear_bhb_loop+0x40/0x90
[ 93.722596][ T6257] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 93.722607][ T6257] RIP: 0033:0x7f9f6e95d68e
[ 93.722616][ T6257] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 93.722626][ T6257] RSP: 002b:00007f9f6f7edfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 93.722636][ T6257] RAX: ffffffffffffffda RBX: 00007f9f6f7ee6c0 RCX: 00007f9f6e95d68e
[ 93.722643][ T6257] RDX: 000000000000fe54 RSI: 0000200000001b00 RDI: 00000000000000c8
[ 93.722649][ T6257] RBP: 00007f9f6ea32e6f R08: 0000000000000000 R09: 0000000000000000
[ 93.722655][ T6257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 93.722660][ T6257] R13: 00007f9f6ec16038 R14: 00007f9f6ec15fa0 R15: 00007fff34da8ef8
[ 93.722673][ T6257]
[ 93.722677][ T6257] Disabling lock debugging due to kernel taint
[ 93.817462][ T6257] BUG: Bad page state in process syz.0.17 pfn:32bd1
[ 93.820196][ T6257] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffffffffffffffff pfn:0x32bd1
[ 93.824061][ T6257] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 93.826575][ T6257] raw: 00fff00000000000 dead000000000040 ffff888022fa6000 0000000000000000
[ 93.829352][ T6257] raw: ffffffffffffffff 0000000000000001 00000000ffffffff 0000000000000000
[ 93.832109][ T6257] page dumped because: page_pool leak
[ 93.833791][ T6257] page_owner tracks the page as allocated
[ 93.835644][ T6257] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6257, tgid 6256 (syz.0.17), ts 93646820349, free_ts 93601494552
[ 93.841145][ T6257] post_alloc_hook+0xfd/0x120
[ 93.842862][ T6257] get_page_from_freelist+0xf48/0x3530
[ 93.844567][ T6257] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 93.846339][ T6257] alloc_pages_bulk_noprof+0x5de/0x13c0
[ 93.848250][ T6257] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 93.850252][ T6257] page_pool_alloc_netmems+0xc4/0x1a0
[ 93.852119][ T6257] skb_pp_cow_data+0x975/0x1140
[ 93.853909][ T6257] skb_cow_data_for_xdp+0x88/0xb0
[ 93.855614][ T6257] do_xdp_generic+0x56b/0x12c0
[ 93.857153][ T6257] tun_get_user+0x1c1c/0x3c20
[ 93.858784][ T6257] tun_chr_write_iter+0xdc/0x200
[ 93.860348][ T6257] vfs_write+0x6ac/0x1050
[ 93.861875][ T6257] ksys_write+0x12a/0x250
[ 93.863580][ T6257] do_syscall_64+0x115/0x870
[ 93.865087][ T6257] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 93.867152][ T6257] page last free pid 34 tgid 34 stack trace:
[ 93.869392][ T6257] __free_frozen_pages+0x79f/0x1090
[ 93.871106][ T6257] kasan_depopulate_vmalloc_pte+0x5d/0x80
[ 93.872955][ T6257] __apply_to_page_range+0xb1d/0x1520
[ 93.874627][ T6257] __kasan_release_vmalloc+0xd7/0xe0
[ 93.876227][ T6257] purge_vmap_node+0x210/0xb40
[ 93.878017][ T6257] __purge_vmap_area_lazy+0x90a/0xc00
[ 93.880044][ T6257] drain_vmap_area_work+0x27/0x40
[ 93.881893][ T6257] process_one_work+0xa23/0x1940
[ 93.883536][ T6257] worker_thread+0x5ef/0xe50
[ 93.884962][ T6257] kthread+0x370/0x450
[ 93.886396][ T6257] ret_from_fork+0x72b/0xd50
[ 93.888048][ T6257] ret_from_fork_asm+0x1a/0x30
[ 93.889656][ T6257] Modules linked in:
[ 93.890959][ T6257] CPU: 3 UID: 0 PID: 6257 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 93.890983][ T6257] Tainted: [B]=BAD_PAGE
[ 93.890989][ T6257] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 93.891000][ T6257] Call Trace:
[ 93.891007][ T6257]
[ 93.891014][ T6257] dump_stack_lvl+0x100/0x190
[ 93.891030][ T6257] bad_page.cold+0xbe/0xdf
[ 93.891046][ T6257] ? __pfx_bad_page+0x10/0x10
[ 93.891058][ T6257] ? page_bad_reason+0x98/0x200
[ 93.891069][ T6257] __free_frozen_pages+0x7d1/0x1090
[ 93.891085][ T6257] ? kasan_quarantine_put+0x104/0x240
[ 93.891097][ T6257] ? lockdep_hardirqs_on+0x78/0x100
[ 93.891115][ T6257] page_frag_free+0x199/0x1f0
[ 93.891127][ T6257] __xdp_return+0x3b6/0x990
[ 93.891138][ T6257] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 93.891151][ T6257] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 93.891159][ T6257] bpf_prog_run_generic_xdp+0x614/0x1610
[ 93.891174][ T6257] do_xdp_generic+0x92e/0x12c0
[ 93.891190][ T6257] ? __pfx_do_xdp_generic+0x10/0x10
[ 93.891212][ T6257] tun_get_user+0x1c1c/0x3c20
[ 93.891231][ T6257] ? __pfx_tun_get_user+0x10/0x10
[ 93.891250][ T6257] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 93.891277][ T6257] ? find_held_lock+0x2b/0x80
[ 93.891291][ T6257] ? tun_get+0x191/0x370
[ 93.891304][ T6257] ? tun_get+0x191/0x370
[ 93.891313][ T6257] tun_chr_write_iter+0xdc/0x200
[ 93.891344][ T6257] vfs_write+0x6ac/0x1050
[ 93.891362][ T6257] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 93.891373][ T6257] ? __pfx_vfs_write+0x10/0x10
[ 93.891387][ T6257] ? find_held_lock+0x2b/0x80
[ 93.891399][ T6257] ksys_write+0x12a/0x250
[ 93.891414][ T6257] ? __pfx_ksys_write+0x10/0x10
[ 93.891431][ T6257] do_syscall_64+0x115/0x870
[ 93.891444][ T6257] ? clear_bhb_loop+0x40/0x90
[ 93.891455][ T6257] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 93.891466][ T6257] RIP: 0033:0x7f9f6e95d68e
[ 93.891474][ T6257] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 93.891484][ T6257] RSP: 002b:00007f9f6f7edfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 93.891495][ T6257] RAX: ffffffffffffffda RBX: 00007f9f6f7ee6c0 RCX: 00007f9f6e95d68e
[ 93.891501][ T6257] RDX: 000000000000fe54 RSI: 0000200000001b00 RDI: 00000000000000c8
[ 93.891507][ T6257] RBP: 00007f9f6ea32e6f R08: 0000000000000000 R09: 0000000000000000
[ 93.891513][ T6257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 93.891519][ T6257] R13: 00007f9f6ec16038 R14: 00007f9f6ec15fa0 R15: 00007fff34da8ef8
[ 93.891528][ T6257]
[ 93.891537][ T6257] BUG: Bad page state in process syz.0.17 pfn:2b54e
[ 93.977666][ T6257] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b54e
[ 93.980802][ T6257] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 93.983183][ T6257] raw: 00fff00000000000 dead000000000040 ffff888022fa6000 0000000000000000
[ 93.985918][ T6257] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000
[ 93.988749][ T6257] page dumped because: page_pool leak
[ 93.990479][ T6257] page_owner tracks the page as allocated
[ 93.992367][ T6257] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6257, tgid 6256 (syz.0.17), ts 93646809645, free_ts 93601511012
[ 93.997739][ T6257] post_alloc_hook+0xfd/0x120
[ 93.999356][ T6257] get_page_from_freelist+0xf48/0x3530
[ 94.001159][ T6257] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 94.003106][ T6257] alloc_pages_bulk_noprof+0x5de/0x13c0
[ 94.004876][ T6257] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 94.006837][ T6257] page_pool_alloc_netmems+0xc4/0x1a0
[ 94.008676][ T6257] skb_pp_cow_data+0x975/0x1140
[ 94.010249][ T6257] skb_cow_data_for_xdp+0x88/0xb0
[ 94.012081][ T6257] do_xdp_generic+0x56b/0x12c0
[ 94.013625][ T6257] tun_get_user+0x1c1c/0x3c20
[ 94.015173][ T6257] tun_chr_write_iter+0xdc/0x200
[ 94.016779][ T6257] vfs_write+0x6ac/0x1050
[ 94.018310][ T6257] ksys_write+0x12a/0x250
[ 94.019731][ T6257] do_syscall_64+0x115/0x870
[ 94.021235][ T6257] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.023542][ T6257] page last free pid 34 tgid 34 stack trace:
[ 94.025923][ T6257] __free_frozen_pages+0x79f/0x1090
[ 94.028205][ T6257] kasan_depopulate_vmalloc_pte+0x5d/0x80
[ 94.030565][ T6257] __apply_to_page_range+0xb1d/0x1520
[ 94.032777][ T6257] __kasan_release_vmalloc+0xd7/0xe0
[ 94.034904][ T6257] purge_vmap_node+0x210/0xb40
[ 94.036909][ T6257] __purge_vmap_area_lazy+0x90a/0xc00
[ 94.039274][ T6257] drain_vmap_area_work+0x27/0x40
[ 94.041383][ T6257] process_one_work+0xa23/0x1940
[ 94.043465][ T6257] worker_thread+0x5ef/0xe50
[ 94.045404][ T6257] kthread+0x370/0x450
[ 94.047117][ T6257] ret_from_fork+0x72b/0xd50
[ 94.049192][ T6257] ret_from_fork_asm+0x1a/0x30
[ 94.051215][ T6257] Modules linked in:
[ 94.052881][ T6257] CPU: 3 UID: 0 PID: 6257 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 94.052904][ T6257] Tainted: [B]=BAD_PAGE
[ 94.052910][ T6257] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 94.052919][ T6257] Call Trace:
[ 94.052925][ T6257]
[ 94.052931][ T6257] dump_stack_lvl+0x100/0x190
[ 94.052953][ T6257] bad_page.cold+0xbe/0xdf
[ 94.052976][ T6257] ? __pfx_bad_page+0x10/0x10
[ 94.052995][ T6257] ? page_bad_reason+0x98/0x200
[ 94.053012][ T6257] __free_frozen_pages+0x7d1/0x1090
[ 94.053033][ T6257] ? kasan_quarantine_put+0x104/0x240
[ 94.053051][ T6257] ? lockdep_hardirqs_on+0x78/0x100
[ 94.053070][ T6257] page_frag_free+0x199/0x1f0
[ 94.053088][ T6257] __xdp_return+0x3b6/0x990
[ 94.053110][ T6257] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 94.053127][ T6257] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 94.053141][ T6257] bpf_prog_run_generic_xdp+0x614/0x1610
[ 94.053161][ T6257] do_xdp_generic+0x92e/0x12c0
[ 94.053178][ T6257] ? __pfx_do_xdp_generic+0x10/0x10
[ 94.053201][ T6257] tun_get_user+0x1c1c/0x3c20
[ 94.053220][ T6257] ? __pfx_tun_get_user+0x10/0x10
[ 94.053236][ T6257] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 94.053261][ T6257] ? find_held_lock+0x2b/0x80
[ 94.053275][ T6257] ? tun_get+0x191/0x370
[ 94.053287][ T6257] ? tun_get+0x191/0x370
[ 94.053302][ T6257] tun_chr_write_iter+0xdc/0x200
[ 94.053318][ T6257] vfs_write+0x6ac/0x1050
[ 94.053340][ T6257] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 94.053356][ T6257] ? __pfx_vfs_write+0x10/0x10
[ 94.053377][ T6257] ? find_held_lock+0x2b/0x80
[ 94.053395][ T6257] ksys_write+0x12a/0x250
[ 94.053416][ T6257] ? __pfx_ksys_write+0x10/0x10
[ 94.053440][ T6257] do_syscall_64+0x115/0x870
[ 94.053458][ T6257] ? clear_bhb_loop+0x40/0x90
[ 94.053475][ T6257] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.053490][ T6257] RIP: 0033:0x7f9f6e95d68e
[ 94.053503][ T6257] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 94.053516][ T6257] RSP: 002b:00007f9f6f7edfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 94.053532][ T6257] RAX: ffffffffffffffda RBX: 00007f9f6f7ee6c0 RCX: 00007f9f6e95d68e
[ 94.053542][ T6257] RDX: 000000000000fe54 RSI: 0000200000001b00 RDI: 00000000000000c8
[ 94.053551][ T6257] RBP: 00007f9f6ea32e6f R08: 0000000000000000 R09: 0000000000000000
[ 94.053560][ T6257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 94.053569][ T6257] R13: 00007f9f6ec16038 R14: 00007f9f6ec15fa0 R15: 00007fff34da8ef8
[ 94.053583][ T6257]
[ 94.053594][ T6257] BUG: Bad page state in process syz.0.17 pfn:32bd7
[ 94.142614][ T6257] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x32bd7
[ 94.145330][ T6257] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 94.147561][ T6257] raw: 00fff00000000000 dead000000000040 ffff888022fa6000 0000000000000000
[ 94.150286][ T6257] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000
[ 94.152947][ T6257] page dumped because: page_pool leak
[ 94.154633][ T6257] page_owner tracks the page as allocated
[ 94.156430][ T6257] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6257, tgid 6256 (syz.0.17), ts 93646796707, free_ts 93601594878
[ 94.161642][ T6257] post_alloc_hook+0xfd/0x120
[ 94.163146][ T6257] get_page_from_freelist+0xf48/0x3530
[ 94.164880][ T6257] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 94.166745][ T6257] alloc_pages_bulk_noprof+0x5de/0x13c0
[ 94.168581][ T6257] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 94.170507][ T6257] page_pool_alloc_netmems+0xc4/0x1a0
[ 94.172210][ T6257] skb_pp_cow_data+0x975/0x1140
[ 94.173757][ T6257] skb_cow_data_for_xdp+0x88/0xb0
[ 94.175359][ T6257] do_xdp_generic+0x56b/0x12c0
[ 94.176874][ T6257] tun_get_user+0x1c1c/0x3c20
[ 94.178472][ T6257] tun_chr_write_iter+0xdc/0x200
[ 94.180044][ T6257] vfs_write+0x6ac/0x1050
[ 94.181425][ T6257] ksys_write+0x12a/0x250
[ 94.182804][ T6257] do_syscall_64+0x115/0x870
[ 94.184283][ T6257] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.186139][ T6257] page last free pid 34 tgid 34 stack trace:
[ 94.187986][ T6257] __free_frozen_pages+0x79f/0x1090
[ 94.189646][ T6257] kasan_depopulate_vmalloc_pte+0x5d/0x80
[ 94.191447][ T6257] __apply_to_page_range+0xb1d/0x1520
[ 94.193155][ T6257] __kasan_release_vmalloc+0xd7/0xe0
[ 94.194819][ T6257] purge_vmap_node+0x210/0xb40
[ 94.196344][ T6257] __purge_vmap_area_lazy+0x90a/0xc00
[ 94.198131][ T6257] drain_vmap_area_work+0x27/0x40
[ 94.199728][ T6257] process_one_work+0xa23/0x1940
[ 94.201295][ T6257] worker_thread+0x5ef/0xe50
[ 94.202765][ T6257] kthread+0x370/0x450
[ 94.204066][ T6257] ret_from_fork+0x72b/0xd50
[ 94.205544][ T6257] ret_from_fork_asm+0x1a/0x30
[ 94.207065][ T6257] Modules linked in:
[ 94.208434][ T6257] CPU: 3 UID: 0 PID: 6257 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 94.208450][ T6257] Tainted: [B]=BAD_PAGE
[ 94.208453][ T6257] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 94.208460][ T6257] Call Trace:
[ 94.208465][ T6257]
[ 94.208470][ T6257] dump_stack_lvl+0x100/0x190
[ 94.208483][ T6257] bad_page.cold+0xbe/0xdf
[ 94.208499][ T6257] ? __pfx_bad_page+0x10/0x10
[ 94.208512][ T6257] ? page_bad_reason+0x98/0x200
[ 94.208523][ T6257] __free_frozen_pages+0x7d1/0x1090
[ 94.208539][ T6257] ? kasan_quarantine_put+0x104/0x240
[ 94.208550][ T6257] ? lockdep_hardirqs_on+0x78/0x100
[ 94.208563][ T6257] page_frag_free+0x199/0x1f0
[ 94.208575][ T6257] __xdp_return+0x3b6/0x990
[ 94.208587][ T6257] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 94.208599][ T6257] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 94.208608][ T6257] bpf_prog_run_generic_xdp+0x614/0x1610
[ 94.208622][ T6257] do_xdp_generic+0x92e/0x12c0
[ 94.208633][ T6257] ? __pfx_do_xdp_generic+0x10/0x10
[ 94.208648][ T6257] tun_get_user+0x1c1c/0x3c20
[ 94.208662][ T6257] ? __pfx_tun_get_user+0x10/0x10
[ 94.208672][ T6257] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 94.208690][ T6257] ? find_held_lock+0x2b/0x80
[ 94.208699][ T6257] ? tun_get+0x191/0x370
[ 94.208707][ T6257] ? tun_get+0x191/0x370
[ 94.208716][ T6257] tun_chr_write_iter+0xdc/0x200
[ 94.208727][ T6257] vfs_write+0x6ac/0x1050
[ 94.208742][ T6257] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 94.208753][ T6257] ? __pfx_vfs_write+0x10/0x10
[ 94.208768][ T6257] ? find_held_lock+0x2b/0x80
[ 94.208779][ T6257] ksys_write+0x12a/0x250
[ 94.208794][ T6257] ? __pfx_ksys_write+0x10/0x10
[ 94.208811][ T6257] do_syscall_64+0x115/0x870
[ 94.208823][ T6257] ? clear_bhb_loop+0x40/0x90
[ 94.208835][ T6257] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.208845][ T6257] RIP: 0033:0x7f9f6e95d68e
[ 94.208853][ T6257] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 94.208863][ T6257] RSP: 002b:00007f9f6f7edfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 94.208873][ T6257] RAX: ffffffffffffffda RBX: 00007f9f6f7ee6c0 RCX: 00007f9f6e95d68e
[ 94.208879][ T6257] RDX: 000000000000fe54 RSI: 0000200000001b00 RDI: 00000000000000c8
[ 94.208885][ T6257] RBP: 00007f9f6ea32e6f R08: 0000000000000000 R09: 0000000000000000
[ 94.208891][ T6257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 94.208897][ T6257] R13: 00007f9f6ec16038 R14: 00007f9f6ec15fa0 R15: 00007fff34da8ef8
[ 94.208906][ T6257]
[ 94.208914][ T6257] BUG: Bad page state in process syz.0.17 pfn:32bd4
[ 94.290578][ T6257] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x32bd4
[ 94.293301][ T6257] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 94.295503][ T6257] raw: 00fff00000000000 dead000000000040 ffff888022fa6000 0000000000000000
[ 94.298263][ T6257] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000
[ 94.300931][ T6257] page dumped because: page_pool leak
[ 94.302639][ T6257] page_owner tracks the page as allocated
[ 94.304428][ T6257] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6257, tgid 6256 (syz.0.17), ts 93646785984, free_ts 93601600838
[ 94.309502][ T6257] post_alloc_hook+0xfd/0x120
[ 94.310928][ T6257] get_page_from_freelist+0xf48/0x3530
[ 94.312601][ T6257] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 94.314468][ T6257] alloc_pages_bulk_noprof+0x5de/0x13c0
[ 94.316224][ T6257] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 94.318228][ T6257] page_pool_alloc_netmems+0xc4/0x1a0
[ 94.319931][ T6257] skb_pp_cow_data+0x975/0x1140
[ 94.321407][ T6257] skb_cow_data_for_xdp+0x88/0xb0
[ 94.322988][ T6257] do_xdp_generic+0x56b/0x12c0
[ 94.324531][ T6257] tun_get_user+0x1c1c/0x3c20
[ 94.326028][ T6257] tun_chr_write_iter+0xdc/0x200
[ 94.327636][ T6257] vfs_write+0x6ac/0x1050
[ 94.328981][ T6257] ksys_write+0x12a/0x250
[ 94.330347][ T6257] do_syscall_64+0x115/0x870
[ 94.331831][ T6257] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.333699][ T6257] page last free pid 34 tgid 34 stack trace:
[ 94.335594][ T6257] __free_frozen_pages+0x79f/0x1090
[ 94.337256][ T6257] kasan_depopulate_vmalloc_pte+0x5d/0x80
[ 94.339132][ T6257] __apply_to_page_range+0xb1d/0x1520
[ 94.340843][ T6257] __kasan_release_vmalloc+0xd7/0xe0
[ 94.342522][ T6257] purge_vmap_node+0x210/0xb40
[ 94.344064][ T6257] __purge_vmap_area_lazy+0x90a/0xc00
[ 94.345770][ T6257] drain_vmap_area_work+0x27/0x40
[ 94.347416][ T6257] process_one_work+0xa23/0x1940
[ 94.349042][ T6257] worker_thread+0x5ef/0xe50
[ 94.350525][ T6257] kthread+0x370/0x450
[ 94.351839][ T6257] ret_from_fork+0x72b/0xd50
[ 94.353320][ T6257] ret_from_fork_asm+0x1a/0x30
[ 94.354844][ T6257] Modules linked in:
[ 94.356105][ T6257] CPU: 3 UID: 0 PID: 6257 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 94.356121][ T6257] Tainted: [B]=BAD_PAGE
[ 94.356124][ T6257] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 94.356131][ T6257] Call Trace:
[ 94.356135][ T6257]
[ 94.356140][ T6257] dump_stack_lvl+0x100/0x190
[ 94.356153][ T6257] bad_page.cold+0xbe/0xdf
[ 94.356169][ T6257] ? __pfx_bad_page+0x10/0x10
[ 94.356182][ T6257] ? page_bad_reason+0x98/0x200
[ 94.356193][ T6257] __free_frozen_pages+0x7d1/0x1090
[ 94.356209][ T6257] ? kasan_quarantine_put+0x104/0x240
[ 94.356219][ T6257] ? lockdep_hardirqs_on+0x78/0x100
[ 94.356233][ T6257] page_frag_free+0x199/0x1f0
[ 94.356244][ T6257] __xdp_return+0x3b6/0x990
[ 94.356256][ T6257] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 94.356267][ T6257] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 94.356276][ T6257] bpf_prog_run_generic_xdp+0x614/0x1610
[ 94.356291][ T6257] do_xdp_generic+0x92e/0x12c0
[ 94.356302][ T6257] ? __pfx_do_xdp_generic+0x10/0x10
[ 94.356317][ T6257] tun_get_user+0x1c1c/0x3c20
[ 94.356330][ T6257] ? __pfx_tun_get_user+0x10/0x10
[ 94.356341][ T6257] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 94.356358][ T6257] ? find_held_lock+0x2b/0x80
[ 94.356367][ T6257] ? tun_get+0x191/0x370
[ 94.356375][ T6257] ? tun_get+0x191/0x370
[ 94.356385][ T6257] tun_chr_write_iter+0xdc/0x200
[ 94.356395][ T6257] vfs_write+0x6ac/0x1050
[ 94.356411][ T6257] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 94.356421][ T6257] ? __pfx_vfs_write+0x10/0x10
[ 94.356436][ T6257] ? find_held_lock+0x2b/0x80
[ 94.356448][ T6257] ksys_write+0x12a/0x250
[ 94.356463][ T6257] ? __pfx_ksys_write+0x10/0x10
[ 94.356479][ T6257] do_syscall_64+0x115/0x870
[ 94.356492][ T6257] ? clear_bhb_loop+0x40/0x90
[ 94.356503][ T6257] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.356514][ T6257] RIP: 0033:0x7f9f6e95d68e
[ 94.356521][ T6257] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 94.356531][ T6257] RSP: 002b:00007f9f6f7edfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 94.356542][ T6257] RAX: ffffffffffffffda RBX: 00007f9f6f7ee6c0 RCX: 00007f9f6e95d68e
[ 94.356548][ T6257] RDX: 000000000000fe54 RSI: 0000200000001b00 RDI: 00000000000000c8
[ 94.356554][ T6257] RBP: 00007f9f6ea32e6f R08: 0000000000000000 R09: 0000000000000000
[ 94.356560][ T6257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 94.356566][ T6257] R13: 00007f9f6ec16038 R14: 00007f9f6ec15fa0 R15: 00007fff34da8ef8
[ 94.356575][ T6257]
[ 94.356582][ T6257] BUG: Bad page state in process syz.0.17 pfn:35547
[ 94.437094][ T6257] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888025d3b300 pfn:0x35547
[ 94.440214][ T6257] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 94.442362][ T6257] raw: 00fff00000000000 dead000000000040 ffff888022fa6000 0000000000000000
[ 94.444980][ T6257] raw: ffff888025d3b300 0000000000000001 00000000ffffffff 0000000000000000
[ 94.447607][ T6257] page dumped because: page_pool leak
[ 94.449284][ T6257] page_owner tracks the page as allocated
[ 94.451009][ T6257] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6257, tgid 6256 (syz.0.17), ts 93646775243, free_ts 93601606073
[ 94.455958][ T6257] post_alloc_hook+0xfd/0x120
[ 94.457455][ T6257] get_page_from_freelist+0xf48/0x3530
[ 94.459179][ T6257] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 94.460995][ T6257] alloc_pages_bulk_noprof+0x5de/0x13c0
[ 94.462693][ T6257] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 94.464581][ T6257] page_pool_alloc_netmems+0xc4/0x1a0
[ 94.466249][ T6257] skb_pp_cow_data+0x975/0x1140
[ 94.467769][ T6257] skb_cow_data_for_xdp+0x88/0xb0
[ 94.469401][ T6257] do_xdp_generic+0x56b/0x12c0
[ 94.470860][ T6257] tun_get_user+0x1c1c/0x3c20
[ 94.472300][ T6257] tun_chr_write_iter+0xdc/0x200
[ 94.473800][ T6257] vfs_write+0x6ac/0x1050
[ 94.475122][ T6257] ksys_write+0x12a/0x250
[ 94.476481][ T6257] do_syscall_64+0x115/0x870
[ 94.477982][ T6257] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.479778][ T6257] page last free pid 34 tgid 34 stack trace:
[ 94.481569][ T6257] __free_frozen_pages+0x79f/0x1090
[ 94.483183][ T6257] kasan_depopulate_vmalloc_pte+0x5d/0x80
[ 94.484924][ T6257] __apply_to_page_range+0xb1d/0x1520
[ 94.486526][ T6257] __kasan_release_vmalloc+0xd7/0xe0
[ 94.488188][ T6257] purge_vmap_node+0x210/0xb40
[ 94.489629][ T6257] __purge_vmap_area_lazy+0x90a/0xc00
[ 94.491258][ T6257] drain_vmap_area_work+0x27/0x40
[ 94.492789][ T6257] process_one_work+0xa23/0x1940
[ 94.494320][ T6257] worker_thread+0x5ef/0xe50
[ 94.495742][ T6257] kthread+0x370/0x450
[ 94.497003][ T6257] ret_from_fork+0x72b/0xd50
[ 94.498537][ T6257] ret_from_fork_asm+0x1a/0x30
[ 94.500018][ T6257] Modules linked in:
[ 94.501222][ T6257] CPU: 3 UID: 0 PID: 6257 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 94.501238][ T6257] Tainted: [B]=BAD_PAGE
[ 94.501241][ T6257] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 94.501248][ T6257] Call Trace:
[ 94.501252][ T6257]
[ 94.501257][ T6257] dump_stack_lvl+0x100/0x190
[ 94.501269][ T6257] bad_page.cold+0xbe/0xdf
[ 94.501285][ T6257] ? __pfx_bad_page+0x10/0x10
[ 94.501297][ T6257] ? page_bad_reason+0x98/0x200
[ 94.501309][ T6257] __free_frozen_pages+0x7d1/0x1090
[ 94.501324][ T6257] ? kasan_quarantine_put+0x104/0x240
[ 94.501335][ T6257] ? lockdep_hardirqs_on+0x78/0x100
[ 94.501349][ T6257] page_frag_free+0x199/0x1f0
[ 94.501361][ T6257] __xdp_return+0x3b6/0x990
[ 94.501372][ T6257] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 94.501384][ T6257] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 94.501393][ T6257] bpf_prog_run_generic_xdp+0x614/0x1610
[ 94.501408][ T6257] do_xdp_generic+0x92e/0x12c0
[ 94.501419][ T6257] ? __pfx_do_xdp_generic+0x10/0x10
[ 94.501434][ T6257] tun_get_user+0x1c1c/0x3c20
[ 94.501446][ T6257] ? __pfx_tun_get_user+0x10/0x10
[ 94.501457][ T6257] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 94.501474][ T6257] ? find_held_lock+0x2b/0x80
[ 94.501483][ T6257] ? tun_get+0x191/0x370
[ 94.501491][ T6257] ? tun_get+0x191/0x370
[ 94.501501][ T6257] tun_chr_write_iter+0xdc/0x200
[ 94.501511][ T6257] vfs_write+0x6ac/0x1050
[ 94.501527][ T6257] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 94.501538][ T6257] ? __pfx_vfs_write+0x10/0x10
[ 94.501552][ T6257] ? find_held_lock+0x2b/0x80
[ 94.501564][ T6257] ksys_write+0x12a/0x250
[ 94.501579][ T6257] ? __pfx_ksys_write+0x10/0x10
[ 94.501596][ T6257] do_syscall_64+0x115/0x870
[ 94.501608][ T6257] ? clear_bhb_loop+0x40/0x90
[ 94.501620][ T6257] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.501630][ T6257] RIP: 0033:0x7f9f6e95d68e
[ 94.501638][ T6257] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 94.501648][ T6257] RSP: 002b:00007f9f6f7edfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 94.501658][ T6257] RAX: ffffffffffffffda RBX: 00007f9f6f7ee6c0 RCX: 00007f9f6e95d68e
[ 94.501664][ T6257] RDX: 000000000000fe54 RSI: 0000200000001b00 RDI: 00000000000000c8
[ 94.501670][ T6257] RBP: 00007f9f6ea32e6f R08: 0000000000000000 R09: 0000000000000000
[ 94.501676][ T6257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 94.501682][ T6257] R13: 00007f9f6ec16038 R14: 00007f9f6ec15fa0 R15: 00007fff34da8ef8
[ 94.501691][ T6257]
[ 94.501698][ T6257] BUG: Bad page state in process syz.0.17 pfn:2e9a9
[ 94.581042][ T6257] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffffffffffffffff pfn:0x2e9a9
[ 94.584073][ T6257] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 94.586201][ T6257] raw: 00fff00000000000 dead000000000040 ffff888022fa6000 0000000000000000
[ 94.588884][ T6257] raw: ffffffffffffffff 0000000000000001 00000000ffffffff 0000000000000000
[ 94.591454][ T6257] page dumped because: page_pool leak
[ 94.593090][ T6257] page_owner tracks the page as allocated
[ 94.594832][ T6257] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6257, tgid 6256 (syz.0.17), ts 93646762372, free_ts 93601803040
[ 94.599849][ T6257] post_alloc_hook+0xfd/0x120
[ 94.601304][ T6257] get_page_from_freelist+0xf48/0x3530
[ 94.602966][ T6257] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 94.604777][ T6257] alloc_pages_bulk_noprof+0x5de/0x13c0
[ 94.606438][ T6257] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 94.608289][ T6257] page_pool_alloc_netmems+0xc4/0x1a0
[ 94.609928][ T6257] skb_pp_cow_data+0x975/0x1140
[ 94.611426][ T6257] skb_cow_data_for_xdp+0x88/0xb0
[ 94.612980][ T6257] do_xdp_generic+0x56b/0x12c0
[ 94.614448][ T6257] tun_get_user+0x1c1c/0x3c20
[ 94.615921][ T6257] tun_chr_write_iter+0xdc/0x200
[ 94.617473][ T6257] vfs_write+0x6ac/0x1050
[ 94.618856][ T6257] ksys_write+0x12a/0x250
[ 94.620184][ T6257] do_syscall_64+0x115/0x870
[ 94.621552][ T6257] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.623304][ T6257] page last free pid 34 tgid 34 stack trace:
[ 94.625069][ T6257] __free_frozen_pages+0x79f/0x1090
[ 94.626615][ T6257] kasan_depopulate_vmalloc_pte+0x5d/0x80
[ 94.628395][ T6257] __apply_to_page_range+0xb1d/0x1520
[ 94.629987][ T6257] __kasan_release_vmalloc+0xd7/0xe0
[ 94.631561][ T6257] purge_vmap_node+0x210/0xb40
[ 94.632995][ T6257] __purge_vmap_area_lazy+0x90a/0xc00
[ 94.634603][ T6257] drain_vmap_area_work+0x27/0x40
[ 94.636103][ T6257] process_one_work+0xa23/0x1940
[ 94.637594][ T6257] worker_thread+0x5ef/0xe50
[ 94.639017][ T6257] kthread+0x370/0x450
[ 94.640209][ T6257] ret_from_fork+0x72b/0xd50
[ 94.641557][ T6257] ret_from_fork_asm+0x1a/0x30
[ 94.642983][ T6257] Modules linked in:
[ 94.644186][ T6257] CPU: 3 UID: 0 PID: 6257 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 94.644201][ T6257] Tainted: [B]=BAD_PAGE
[ 94.644205][ T6257] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 94.644211][ T6257] Call Trace:
[ 94.644215][ T6257]
[ 94.644220][ T6257] dump_stack_lvl+0x100/0x190
[ 94.644233][ T6257] bad_page.cold+0xbe/0xdf
[ 94.644249][ T6257] ? __pfx_bad_page+0x10/0x10
[ 94.644262][ T6257] ? page_bad_reason+0x98/0x200
[ 94.644273][ T6257] __free_frozen_pages+0x7d1/0x1090
[ 94.644288][ T6257] ? kasan_quarantine_put+0x104/0x240
[ 94.644299][ T6257] ? lockdep_hardirqs_on+0x78/0x100
[ 94.644313][ T6257] page_frag_free+0x199/0x1f0
[ 94.644324][ T6257] __xdp_return+0x3b6/0x990
[ 94.644336][ T6257] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 94.644348][ T6257] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 94.644357][ T6257] bpf_prog_run_generic_xdp+0x614/0x1610
[ 94.644371][ T6257] do_xdp_generic+0x92e/0x12c0
[ 94.644382][ T6257] ? __pfx_do_xdp_generic+0x10/0x10
[ 94.644397][ T6257] tun_get_user+0x1c1c/0x3c20
[ 94.644410][ T6257] ? __pfx_tun_get_user+0x10/0x10
[ 94.644421][ T6257] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 94.644438][ T6257] ? find_held_lock+0x2b/0x80
[ 94.644447][ T6257] ? tun_get+0x191/0x370
[ 94.644455][ T6257] ? tun_get+0x191/0x370
[ 94.644464][ T6257] tun_chr_write_iter+0xdc/0x200
[ 94.644475][ T6257] vfs_write+0x6ac/0x1050
[ 94.644491][ T6257] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 94.644502][ T6257] ? __pfx_vfs_write+0x10/0x10
[ 94.644517][ T6257] ? find_held_lock+0x2b/0x80
[ 94.644528][ T6257] ksys_write+0x12a/0x250
[ 94.644543][ T6257] ? __pfx_ksys_write+0x10/0x10
[ 94.644560][ T6257] do_syscall_64+0x115/0x870
[ 94.644573][ T6257] ? clear_bhb_loop+0x40/0x90
[ 94.644585][ T6257] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.644595][ T6257] RIP: 0033:0x7f9f6e95d68e
[ 94.644604][ T6257] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 94.644613][ T6257] RSP: 002b:00007f9f6f7edfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 94.644623][ T6257] RAX: ffffffffffffffda RBX: 00007f9f6f7ee6c0 RCX: 00007f9f6e95d68e
[ 94.644630][ T6257] RDX: 000000000000fe54 RSI: 0000200000001b00 RDI: 00000000000000c8
[ 94.644635][ T6257] RBP: 00007f9f6ea32e6f R08: 0000000000000000 R09: 0000000000000000
[ 94.644641][ T6257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 94.644647][ T6257] R13: 00007f9f6ec16038 R14: 00007f9f6ec15fa0 R15: 00007fff34da8ef8
[ 94.644656][ T6257]
[ 94.644664][ T6257] BUG: Bad page state in process syz.0.17 pfn:532e4
[ 94.734655][ T6257] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x532e4
[ 94.737700][ T6257] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 94.740267][ T6257] raw: 00fff00000000000 dead000000000040 ffff888022fa6000 0000000000000000
[ 94.743243][ T6257] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000
[ 94.746264][ T6257] page dumped because: page_pool leak
[ 94.748263][ T6257] page_owner tracks the page as allocated
[ 94.750190][ T6257] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6257, tgid 6256 (syz.0.17), ts 93646751506, free_ts 93602132103
[ 94.755580][ T6257] post_alloc_hook+0xfd/0x120
[ 94.757238][ T6257] get_page_from_freelist+0xf48/0x3530
[ 94.759344][ T6257] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 94.761410][ T6257] alloc_pages_bulk_noprof+0x5de/0x13c0
[ 94.763148][ T6257] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 94.764969][ T6257] page_pool_alloc_netmems+0xc4/0x1a0
[ 94.766955][ T6257] skb_pp_cow_data+0x975/0x1140
[ 94.768843][ T6257] skb_cow_data_for_xdp+0x88/0xb0
[ 94.770662][ T6257] do_xdp_generic+0x56b/0x12c0
[ 94.772446][ T6257] tun_get_user+0x1c1c/0x3c20
[ 94.774154][ T6257] tun_chr_write_iter+0xdc/0x200
[ 94.775866][ T6257] vfs_write+0x6ac/0x1050
[ 94.777453][ T6257] ksys_write+0x12a/0x250
[ 94.779024][ T6257] do_syscall_64+0x115/0x870
[ 94.780682][ T6257] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.782792][ T6257] page last free pid 34 tgid 34 stack trace:
[ 94.785004][ T6257] __free_frozen_pages+0x79f/0x1090
[ 94.786896][ T6257] kasan_depopulate_vmalloc_pte+0x5d/0x80
[ 94.789065][ T6257] __apply_to_page_range+0xb1d/0x1520
[ 94.790988][ T6257] __kasan_release_vmalloc+0xd7/0xe0
[ 94.792958][ T6257] purge_vmap_node+0x210/0xb40
[ 94.794757][ T6257] __purge_vmap_area_lazy+0x90a/0xc00
[ 94.796739][ T6257] drain_vmap_area_work+0x27/0x40
[ 94.798632][ T6257] process_one_work+0xa23/0x1940
[ 94.800455][ T6257] worker_thread+0x5ef/0xe50
[ 94.802113][ T6257] kthread+0x370/0x450
[ 94.803541][ T6257] ret_from_fork+0x72b/0xd50
[ 94.805166][ T6257] ret_from_fork_asm+0x1a/0x30
[ 94.806843][ T6257] Modules linked in:
[ 94.808376][ T6257] CPU: 3 UID: 0 PID: 6257 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 94.808392][ T6257] Tainted: [B]=BAD_PAGE
[ 94.808396][ T6257] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 94.808403][ T6257] Call Trace:
[ 94.808407][ T6257]
[ 94.808412][ T6257] dump_stack_lvl+0x100/0x190
[ 94.808426][ T6257] bad_page.cold+0xbe/0xdf
[ 94.808443][ T6257] ? __pfx_bad_page+0x10/0x10
[ 94.808455][ T6257] ? page_bad_reason+0x98/0x200
[ 94.808467][ T6257] __free_frozen_pages+0x7d1/0x1090
[ 94.808482][ T6257] ? kasan_quarantine_put+0x104/0x240
[ 94.808494][ T6257] ? lockdep_hardirqs_on+0x78/0x100
[ 94.808507][ T6257] page_frag_free+0x199/0x1f0
[ 94.808519][ T6257] __xdp_return+0x3b6/0x990
[ 94.808531][ T6257] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 94.808543][ T6257] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 94.808551][ T6257] bpf_prog_run_generic_xdp+0x614/0x1610
[ 94.808566][ T6257] do_xdp_generic+0x92e/0x12c0
[ 94.808577][ T6257] ? __pfx_do_xdp_generic+0x10/0x10
[ 94.808592][ T6257] tun_get_user+0x1c1c/0x3c20
[ 94.808608][ T6257] ? __pfx_tun_get_user+0x10/0x10
[ 94.808618][ T6257] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 94.808635][ T6257] ? find_held_lock+0x2b/0x80
[ 94.808657][ T6257] ? tun_get+0x191/0x370
[ 94.808666][ T6257] ? tun_get+0x191/0x370
[ 94.808675][ T6257] tun_chr_write_iter+0xdc/0x200
[ 94.808686][ T6257] vfs_write+0x6ac/0x1050
[ 94.808701][ T6257] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 94.808712][ T6257] ? __pfx_vfs_write+0x10/0x10
[ 94.808727][ T6257] ? find_held_lock+0x2b/0x80
[ 94.808738][ T6257] ksys_write+0x12a/0x250
[ 94.808753][ T6257] ? __pfx_ksys_write+0x10/0x10
[ 94.808770][ T6257] do_syscall_64+0x115/0x870
[ 94.808783][ T6257] ? clear_bhb_loop+0x40/0x90
[ 94.808795][ T6257] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.808805][ T6257] RIP: 0033:0x7f9f6e95d68e
[ 94.808814][ T6257] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 94.808824][ T6257] RSP: 002b:00007f9f6f7edfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 94.808834][ T6257] RAX: ffffffffffffffda RBX: 00007f9f6f7ee6c0 RCX: 00007f9f6e95d68e
[ 94.808841][ T6257] RDX: 000000000000fe54 RSI: 0000200000001b00 RDI: 00000000000000c8
[ 94.808847][ T6257] RBP: 00007f9f6ea32e6f R08: 0000000000000000 R09: 0000000000000000
[ 94.808852][ T6257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 94.808858][ T6257] R13: 00007f9f6ec16038 R14: 00007f9f6ec15fa0 R15: 00007fff34da8ef8
[ 94.808867][ T6257]
[ 94.808876][ T6257] BUG: Bad page state in process syz.0.17 pfn:264f1
[ 94.900277][ T6257] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffffffffffffffff pfn:0x264f1
[ 94.903609][ T6257] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 94.906140][ T6257] raw: 00fff00000000000 dead000000000040 ffff888022fa6000 0000000000000000
[ 94.909266][ T6257] raw: ffffffffffffffff 0000000000000001 00000000ffffffff 0000000000000000
[ 94.912321][ T6257] page dumped because: page_pool leak
[ 94.914300][ T6257] page_owner tracks the page as allocated
[ 94.916192][ T6257] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6257, tgid 6256 (syz.0.17), ts 93646740222, free_ts 93602804089
[ 94.921841][ T6257] post_alloc_hook+0xfd/0x120
[ 94.923568][ T6257] get_page_from_freelist+0xf48/0x3530
[ 94.925538][ T6257] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 94.927758][ T6257] alloc_pages_bulk_noprof+0x5de/0x13c0
[ 94.929857][ T6257] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 94.931923][ T6257] page_pool_alloc_netmems+0xc4/0x1a0
[ 94.933639][ T6257] skb_pp_cow_data+0x975/0x1140
[ 94.935268][ T6257] skb_cow_data_for_xdp+0x88/0xb0
[ 94.936973][ T6257] do_xdp_generic+0x56b/0x12c0
[ 94.938880][ T6257] tun_get_user+0x1c1c/0x3c20
[ 94.940552][ T6257] tun_chr_write_iter+0xdc/0x200
[ 94.942329][ T6257] vfs_write+0x6ac/0x1050
[ 94.943663][ T6257] ksys_write+0x12a/0x250
[ 94.945035][ T6257] do_syscall_64+0x115/0x870
[ 94.946713][ T6257] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.948910][ T6257] page last free pid 34 tgid 34 stack trace:
[ 94.950940][ T6257] __free_frozen_pages+0x79f/0x1090
[ 94.952791][ T6257] kasan_depopulate_vmalloc_pte+0x5d/0x80
[ 94.954768][ T6257] __apply_to_page_range+0xb1d/0x1520
[ 94.956595][ T6257] __kasan_release_vmalloc+0xd7/0xe0
[ 94.958568][ T6257] purge_vmap_node+0x210/0xb40
[ 94.960274][ T6257] __purge_vmap_area_lazy+0x90a/0xc00
[ 94.962239][ T6257] drain_vmap_area_work+0x27/0x40
[ 94.964052][ T6257] process_one_work+0xa23/0x1940
[ 94.965691][ T6257] worker_thread+0x5ef/0xe50
[ 94.967173][ T6257] kthread+0x370/0x450
[ 94.968814][ T6257] ret_from_fork+0x72b/0xd50
[ 94.970535][ T6257] ret_from_fork_asm+0x1a/0x30
[ 94.972243][ T6257] Modules linked in:
[ 94.973615][ T6257] CPU: 3 UID: 0 PID: 6257 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 94.973631][ T6257] Tainted: [B]=BAD_PAGE
[ 94.973635][ T6257] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 94.973642][ T6257] Call Trace:
[ 94.973646][ T6257]
[ 94.973651][ T6257] dump_stack_lvl+0x100/0x190
[ 94.973665][ T6257] bad_page.cold+0xbe/0xdf
[ 94.973681][ T6257] ? __pfx_bad_page+0x10/0x10
[ 94.973694][ T6257] ? page_bad_reason+0x98/0x200
[ 94.973706][ T6257] __free_frozen_pages+0x7d1/0x1090
[ 94.973721][ T6257] ? kasan_quarantine_put+0x104/0x240
[ 94.973733][ T6257] ? lockdep_hardirqs_on+0x78/0x100
[ 94.973746][ T6257] page_frag_free+0x199/0x1f0
[ 94.973760][ T6257] __xdp_return+0x3b6/0x990
[ 94.973777][ T6257] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 94.973796][ T6257] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 94.973809][ T6257] bpf_prog_run_generic_xdp+0x614/0x1610
[ 94.973831][ T6257] do_xdp_generic+0x92e/0x12c0
[ 94.973845][ T6257] ? __pfx_do_xdp_generic+0x10/0x10
[ 94.973860][ T6257] tun_get_user+0x1c1c/0x3c20
[ 94.973873][ T6257] ? __pfx_tun_get_user+0x10/0x10
[ 94.973883][ T6257] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 94.973901][ T6257] ? find_held_lock+0x2b/0x80
[ 94.973910][ T6257] ? tun_get+0x191/0x370
[ 94.973918][ T6257] ? tun_get+0x191/0x370
[ 94.973927][ T6257] tun_chr_write_iter+0xdc/0x200
[ 94.973938][ T6257] vfs_write+0x6ac/0x1050
[ 94.973954][ T6257] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 94.973965][ T6257] ? __pfx_vfs_write+0x10/0x10
[ 94.973979][ T6257] ? find_held_lock+0x2b/0x80
[ 94.973991][ T6257] ksys_write+0x12a/0x250
[ 94.974006][ T6257] ? __pfx_ksys_write+0x10/0x10
[ 94.974023][ T6257] do_syscall_64+0x115/0x870
[ 94.974035][ T6257] ? clear_bhb_loop+0x40/0x90
[ 94.974047][ T6257] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.974057][ T6257] RIP: 0033:0x7f9f6e95d68e
[ 94.974066][ T6257] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 94.974076][ T6257] RSP: 002b:00007f9f6f7edfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 94.974087][ T6257] RAX: ffffffffffffffda RBX: 00007f9f6f7ee6c0 RCX: 00007f9f6e95d68e
[ 94.974098][ T6257] RDX: 000000000000fe54 RSI: 0000200000001b00 RDI: 00000000000000c8
[ 94.974104][ T6257] RBP: 00007f9f6ea32e6f R08: 0000000000000000 R09: 0000000000000000
[ 94.974110][ T6257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 94.974115][ T6257] R13: 00007f9f6ec16038 R14: 00007f9f6ec15fa0 R15: 00007fff34da8ef8
[ 94.974124][ T6257]
[ 94.974135][ T6257] BUG: Bad page state in process syz.0.17 pfn:2bcb0
[ 95.062056][ T6257] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802bcb6000 pfn:0x2bcb0
[ 95.065102][ T6257] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 95.067283][ T6257] raw: 00fff00000000000 dead000000000040 ffff888022fa6000 0000000000000000
[ 95.070053][ T6257] raw: ffff88802bcb6000 0000000000000001 00000000ffffffff 0000000000000000
[ 95.072715][ T6257] page dumped because: page_pool leak
[ 95.074347][ T6257] page_owner tracks the page as allocated
[ 95.076037][ T6257] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6257, tgid 6256 (syz.0.17), ts 93646727846, free_ts 93604189068
[ 95.081009][ T6257] post_alloc_hook+0xfd/0x120
[ 95.082461][ T6257] get_page_from_freelist+0xf48/0x3530
[ 95.084103][ T6257] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 95.085875][ T6257] alloc_pages_bulk_noprof+0x5de/0x13c0
[ 95.087564][ T6257] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 95.089468][ T6257] page_pool_alloc_netmems+0xc4/0x1a0
[ 95.091074][ T6257] skb_pp_cow_data+0x975/0x1140
[ 95.092589][ T6257] skb_cow_data_for_xdp+0x88/0xb0
[ 95.094103][ T6257] do_xdp_generic+0x56b/0x12c0
[ 95.095542][ T6257] tun_get_user+0x1c1c/0x3c20
[ 95.096948][ T6257] tun_chr_write_iter+0xdc/0x200
[ 95.098531][ T6257] vfs_write+0x6ac/0x1050
[ 95.099882][ T6257] ksys_write+0x12a/0x250
[ 95.101204][ T6257] do_syscall_64+0x115/0x870
[ 95.102624][ T6257] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.104441][ T6257] page last free pid 34 tgid 34 stack trace:
[ 95.106258][ T6257] __free_frozen_pages+0x79f/0x1090
[ 95.107910][ T6257] kasan_depopulate_vmalloc_pte+0x5d/0x80
[ 95.109639][ T6257] __apply_to_page_range+0xb1d/0x1520
[ 95.111272][ T6257] __kasan_release_vmalloc+0xd7/0xe0
[ 95.112867][ T6257] purge_vmap_node+0x210/0xb40
[ 95.114359][ T6257] __purge_vmap_area_lazy+0x90a/0xc00
[ 95.115994][ T6257] drain_vmap_area_work+0x27/0x40
[ 95.117519][ T6257] process_one_work+0xa23/0x1940
[ 95.119098][ T6257] worker_thread+0x5ef/0xe50
[ 95.120531][ T6257] kthread+0x370/0x450
[ 95.121753][ T6257] ret_from_fork+0x72b/0xd50
[ 95.123156][ T6257] ret_from_fork_asm+0x1a/0x30
[ 95.124586][ T6257] Modules linked in:
[ 95.125781][ T6257] CPU: 3 UID: 0 PID: 6257 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 95.125797][ T6257] Tainted: [B]=BAD_PAGE
[ 95.125800][ T6257] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 95.125807][ T6257] Call Trace:
[ 95.125812][ T6257]
[ 95.125817][ T6257] dump_stack_lvl+0x100/0x190
[ 95.125830][ T6257] bad_page.cold+0xbe/0xdf
[ 95.125846][ T6257] ? __pfx_bad_page+0x10/0x10
[ 95.125859][ T6257] ? page_bad_reason+0x98/0x200
[ 95.125870][ T6257] __free_frozen_pages+0x7d1/0x1090
[ 95.125885][ T6257] ? kasan_quarantine_put+0x104/0x240
[ 95.125897][ T6257] ? lockdep_hardirqs_on+0x78/0x100
[ 95.125910][ T6257] page_frag_free+0x199/0x1f0
[ 95.125923][ T6257] __xdp_return+0x3b6/0x990
[ 95.125934][ T6257] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 95.125946][ T6257] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 95.125955][ T6257] bpf_prog_run_generic_xdp+0x614/0x1610
[ 95.125970][ T6257] do_xdp_generic+0x92e/0x12c0
[ 95.125980][ T6257] ? __pfx_do_xdp_generic+0x10/0x10
[ 95.125995][ T6257] tun_get_user+0x1c1c/0x3c20
[ 95.126008][ T6257] ? __pfx_tun_get_user+0x10/0x10
[ 95.126018][ T6257] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 95.126036][ T6257] ? find_held_lock+0x2b/0x80
[ 95.126045][ T6257] ? tun_get+0x191/0x370
[ 95.126053][ T6257] ? tun_get+0x191/0x370
[ 95.126062][ T6257] tun_chr_write_iter+0xdc/0x200
[ 95.126073][ T6257] vfs_write+0x6ac/0x1050
[ 95.126089][ T6257] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 95.126104][ T6257] ? __pfx_vfs_write+0x10/0x10
[ 95.126118][ T6257] ? find_held_lock+0x2b/0x80
[ 95.126130][ T6257] ksys_write+0x12a/0x250
[ 95.126145][ T6257] ? __pfx_ksys_write+0x10/0x10
[ 95.126162][ T6257] do_syscall_64+0x115/0x870
[ 95.126174][ T6257] ? clear_bhb_loop+0x40/0x90
[ 95.126186][ T6257] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.126196][ T6257] RIP: 0033:0x7f9f6e95d68e
[ 95.126206][ T6257] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 95.126216][ T6257] RSP: 002b:00007f9f6f7edfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 95.126226][ T6257] RAX: ffffffffffffffda RBX: 00007f9f6f7ee6c0 RCX: 00007f9f6e95d68e
[ 95.126232][ T6257] RDX: 000000000000fe54 RSI: 0000200000001b00 RDI: 00000000000000c8
[ 95.126238][ T6257] RBP: 00007f9f6ea32e6f R08: 0000000000000000 R09: 0000000000000000
[ 95.126244][ T6257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 95.126250][ T6257] R13: 00007f9f6ec16038 R14: 00007f9f6ec15fa0 R15: 00007fff34da8ef8
[ 95.126259][ T6257]
[ 95.126268][ T6257] BUG: Bad page state in process syz.0.17 pfn:2bcb3
[ 95.204975][ T6257] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2bcb3
[ 95.207591][ T6257] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 95.209753][ T6257] raw: 00fff00000000000 dead000000000040 ffff888022fa6000 0000000000000000
[ 95.212325][ T6257] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000
[ 95.214878][ T6257] page dumped because: page_pool leak
[ 95.216481][ T6257] page_owner tracks the page as allocated
[ 95.218228][ T6257] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6257, tgid 6256 (syz.0.17), ts 93646717500, free_ts 93604195452
[ 95.223148][ T6257] post_alloc_hook+0xfd/0x120
[ 95.224596][ T6257] get_page_from_freelist+0xf48/0x3530
[ 95.226230][ T6257] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 95.228119][ T6257] alloc_pages_bulk_noprof+0x5de/0x13c0
[ 95.230049][ T6257] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 95.232048][ T6257] page_pool_alloc_netmems+0xc4/0x1a0
[ 95.233675][ T6257] skb_pp_cow_data+0x975/0x1140
[ 95.235154][ T6257] skb_cow_data_for_xdp+0x88/0xb0
[ 95.236695][ T6257] do_xdp_generic+0x56b/0x12c0
[ 95.238219][ T6257] tun_get_user+0x1c1c/0x3c20
[ 95.239665][ T6257] tun_chr_write_iter+0xdc/0x200
[ 95.241159][ T6257] vfs_write+0x6ac/0x1050
[ 95.242467][ T6257] ksys_write+0x12a/0x250
[ 95.243783][ T6257] do_syscall_64+0x115/0x870
[ 95.245187][ T6257] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.247028][ T6257] page last free pid 34 tgid 34 stack trace:
[ 95.249002][ T6257] __free_frozen_pages+0x79f/0x1090
[ 95.250580][ T6257] kasan_depopulate_vmalloc_pte+0x5d/0x80
[ 95.252346][ T6257] __apply_to_page_range+0xb1d/0x1520
[ 95.253944][ T6257] __kasan_release_vmalloc+0xd7/0xe0
[ 95.255560][ T6257] purge_vmap_node+0x210/0xb40
[ 95.257005][ T6257] __purge_vmap_area_lazy+0x90a/0xc00
[ 95.258697][ T6257] drain_vmap_area_work+0x27/0x40
[ 95.260282][ T6257] process_one_work+0xa23/0x1940
[ 95.261784][ T6257] worker_thread+0x5ef/0xe50
[ 95.263190][ T6257] kthread+0x370/0x450
[ 95.264686][ T6257] ret_from_fork+0x72b/0xd50
[ 95.266051][ T6257] ret_from_fork_asm+0x1a/0x30
[ 95.267562][ T6257] Modules linked in:
[ 95.268852][ T6257] CPU: 3 UID: 0 PID: 6257 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 95.268873][ T6257] Tainted: [B]=BAD_PAGE
[ 95.268879][ T6257] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 95.268889][ T6257] Call Trace:
[ 95.268895][ T6257]
[ 95.268902][ T6257] dump_stack_lvl+0x100/0x190
[ 95.268920][ T6257] bad_page.cold+0xbe/0xdf
[ 95.268945][ T6257] ? __pfx_bad_page+0x10/0x10
[ 95.268960][ T6257] ? page_bad_reason+0x98/0x200
[ 95.268971][ T6257] __free_frozen_pages+0x7d1/0x1090
[ 95.268987][ T6257] ? kasan_quarantine_put+0x104/0x240
[ 95.268999][ T6257] ? lockdep_hardirqs_on+0x78/0x100
[ 95.269012][ T6257] page_frag_free+0x199/0x1f0
[ 95.269025][ T6257] __xdp_return+0x3b6/0x990
[ 95.269036][ T6257] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 95.269048][ T6257] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 95.269057][ T6257] bpf_prog_run_generic_xdp+0x614/0x1610
[ 95.269072][ T6257] do_xdp_generic+0x92e/0x12c0
[ 95.269083][ T6257] ? __pfx_do_xdp_generic+0x10/0x10
[ 95.269102][ T6257] tun_get_user+0x1c1c/0x3c20
[ 95.269115][ T6257] ? __pfx_tun_get_user+0x10/0x10
[ 95.269126][ T6257] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 95.269143][ T6257] ? find_held_lock+0x2b/0x80
[ 95.269152][ T6257] ? tun_get+0x191/0x370
[ 95.269160][ T6257] ? tun_get+0x191/0x370
[ 95.269169][ T6257] tun_chr_write_iter+0xdc/0x200
[ 95.269180][ T6257] vfs_write+0x6ac/0x1050
[ 95.269196][ T6257] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 95.269207][ T6257] ? __pfx_vfs_write+0x10/0x10
[ 95.269233][ T6257] ? find_held_lock+0x2b/0x80
[ 95.269245][ T6257] ksys_write+0x12a/0x250
[ 95.269260][ T6257] ? __pfx_ksys_write+0x10/0x10
[ 95.269277][ T6257] do_syscall_64+0x115/0x870
[ 95.269289][ T6257] ? clear_bhb_loop+0x40/0x90
[ 95.269300][ T6257] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.269311][ T6257] RIP: 0033:0x7f9f6e95d68e
[ 95.269320][ T6257] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 95.269329][ T6257] RSP: 002b:00007f9f6f7edfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 95.269339][ T6257] RAX: ffffffffffffffda RBX: 00007f9f6f7ee6c0 RCX: 00007f9f6e95d68e
[ 95.269346][ T6257] RDX: 000000000000fe54 RSI: 0000200000001b00 RDI: 00000000000000c8
[ 95.269351][ T6257] RBP: 00007f9f6ea32e6f R08: 0000000000000000 R09: 0000000000000000
[ 95.269357][ T6257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 95.269363][ T6257] R13: 00007f9f6ec16038 R14: 00007f9f6ec15fa0 R15: 00007fff34da8ef8
[ 95.269372][ T6257]
[ 95.269380][ T6257] BUG: Bad page state in process syz.0.17 pfn:33bcd
[ 95.349075][ T6257] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x33bcd
[ 95.351683][ T6257] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 95.353844][ T6257] raw: 00fff00000000000 dead000000000040 ffff888022fa6000 0000000000000000
[ 95.356399][ T6257] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000
[ 95.359061][ T6257] page dumped because: page_pool leak
[ 95.360705][ T6257] page_owner tracks the page as allocated
[ 95.362430][ T6257] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6257, tgid 6256 (syz.0.17), ts 93646706251, free_ts 93605526932
[ 95.367444][ T6257] post_alloc_hook+0xfd/0x120
[ 95.368974][ T6257] get_page_from_freelist+0xf48/0x3530
[ 95.370609][ T6257] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 95.372397][ T6257] alloc_pages_bulk_noprof+0x5de/0x13c0
[ 95.374041][ T6257] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 95.375864][ T6257] page_pool_alloc_netmems+0xc4/0x1a0
[ 95.377508][ T6257] skb_pp_cow_data+0x975/0x1140
[ 95.379065][ T6257] skb_cow_data_for_xdp+0x88/0xb0
[ 95.380615][ T6257] do_xdp_generic+0x56b/0x12c0
[ 95.382103][ T6257] tun_get_user+0x1c1c/0x3c20
[ 95.383557][ T6257] tun_chr_write_iter+0xdc/0x200
[ 95.385017][ T6257] vfs_write+0x6ac/0x1050
[ 95.386341][ T6257] ksys_write+0x12a/0x250
[ 95.387728][ T6257] do_syscall_64+0x115/0x870
[ 95.389177][ T6257] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.390943][ T6257] page last free pid 34 tgid 34 stack trace:
[ 95.392748][ T6257] __free_frozen_pages+0x79f/0x1090
[ 95.394274][ T6257] kasan_depopulate_vmalloc_pte+0x5d/0x80
[ 95.395995][ T6257] __apply_to_page_range+0xb1d/0x1520
[ 95.397634][ T6257] __kasan_release_vmalloc+0xd7/0xe0
[ 95.399287][ T6257] purge_vmap_node+0x210/0xb40
[ 95.400737][ T6257] __purge_vmap_area_lazy+0x90a/0xc00
[ 95.402361][ T6257] drain_vmap_area_work+0x27/0x40
[ 95.403892][ T6257] process_one_work+0xa23/0x1940
[ 95.405393][ T6257] worker_thread+0x5ef/0xe50
[ 95.406783][ T6257] kthread+0x370/0x450
[ 95.408153][ T6257] ret_from_fork+0x72b/0xd50
[ 95.409566][ T6257] ret_from_fork_asm+0x1a/0x30
[ 95.411014][ T6257] Modules linked in:
[ 95.412226][ T6257] CPU: 3 UID: 0 PID: 6257 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 95.412242][ T6257] Tainted: [B]=BAD_PAGE
[ 95.412246][ T6257] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 95.412253][ T6257] Call Trace:
[ 95.412257][ T6257]
[ 95.412263][ T6257] dump_stack_lvl+0x100/0x190
[ 95.412276][ T6257] bad_page.cold+0xbe/0xdf
[ 95.412292][ T6257] ? __pfx_bad_page+0x10/0x10
[ 95.412306][ T6257] ? page_bad_reason+0x98/0x200
[ 95.412317][ T6257] __free_frozen_pages+0x7d1/0x1090
[ 95.412333][ T6257] ? kasan_quarantine_put+0x104/0x240
[ 95.412344][ T6257] ? lockdep_hardirqs_on+0x78/0x100
[ 95.412358][ T6257] page_frag_free+0x199/0x1f0
[ 95.412370][ T6257] __xdp_return+0x3b6/0x990
[ 95.412382][ T6257] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 95.412395][ T6257] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 95.412404][ T6257] bpf_prog_run_generic_xdp+0x614/0x1610
[ 95.412419][ T6257] do_xdp_generic+0x92e/0x12c0
[ 95.412430][ T6257] ? __pfx_do_xdp_generic+0x10/0x10
[ 95.412446][ T6257] tun_get_user+0x1c1c/0x3c20
[ 95.412459][ T6257] ? __pfx_tun_get_user+0x10/0x10
[ 95.412470][ T6257] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 95.412487][ T6257] ? find_held_lock+0x2b/0x80
[ 95.412496][ T6257] ? tun_get+0x191/0x370
[ 95.412505][ T6257] ? tun_get+0x191/0x370
[ 95.412514][ T6257] tun_chr_write_iter+0xdc/0x200
[ 95.412525][ T6257] vfs_write+0x6ac/0x1050
[ 95.412542][ T6257] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 95.412553][ T6257] ? __pfx_vfs_write+0x10/0x10
[ 95.412568][ T6257] ? find_held_lock+0x2b/0x80
[ 95.412580][ T6257] ksys_write+0x12a/0x250
[ 95.412595][ T6257] ? __pfx_ksys_write+0x10/0x10
[ 95.412612][ T6257] do_syscall_64+0x115/0x870
[ 95.412625][ T6257] ? clear_bhb_loop+0x40/0x90
[ 95.412636][ T6257] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.412647][ T6257] RIP: 0033:0x7f9f6e95d68e
[ 95.412657][ T6257] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 95.412667][ T6257] RSP: 002b:00007f9f6f7edfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 95.412678][ T6257] RAX: ffffffffffffffda RBX: 00007f9f6f7ee6c0 RCX: 00007f9f6e95d68e
[ 95.412685][ T6257] RDX: 000000000000fe54 RSI: 0000200000001b00 RDI: 00000000000000c8
[ 95.412691][ T6257] RBP: 00007f9f6ea32e6f R08: 0000000000000000 R09: 0000000000000000
[ 95.412697][ T6257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 95.412703][ T6257] R13: 00007f9f6ec16038 R14: 00007f9f6ec15fa0 R15: 00007fff34da8ef8
[ 95.412712][ T6257]
[ 95.413107][ T64] Bluetooth: hci0: command tx timeout
[ 95.517867][ T6264] BUG: Bad page state in process syz.0.18 pfn:50b70
[ 95.519951][ T6264] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888050b70000 pfn:0x50b70
[ 95.522859][ T6264] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 95.524993][ T6264] raw: 00fff00000000000 dead000000000040 ffff888022fa0000 0000000000000000
[ 95.527586][ T6264] raw: ffff888050b70000 3fffffffffffffff 00000000ffffffff 0000000000000000
[ 95.530204][ T6264] page dumped because: page_pool leak
[ 95.531904][ T6264] page_owner tracks the page as allocated
[ 95.533666][ T6264] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6264, tgid 6263 (syz.0.18), ts 95517793739, free_ts 93342875518
[ 95.539730][ T6264] post_alloc_hook+0xfd/0x120
[ 95.541216][ T6264] get_page_from_freelist+0xf48/0x3530
[ 95.542971][ T6264] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 95.545186][ T6264] alloc_pages_bulk_noprof+0x5de/0x13c0
[ 95.547265][ T6264] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 95.549399][ T6264] page_pool_alloc_netmems+0xc4/0x1a0
[ 95.551219][ T6264] page_pool_alloc_frag_netmem+0x21d/0xa10
[ 95.553105][ T6264] skb_pp_cow_data+0x507/0x1140
[ 95.554780][ T6264] skb_cow_data_for_xdp+0x88/0xb0
[ 95.556383][ T6264] do_xdp_generic+0x56b/0x12c0
[ 95.558020][ T6264] tun_get_user+0x1c1c/0x3c20
[ 95.559845][ T6264] tun_chr_write_iter+0xdc/0x200
[ 95.561758][ T6264] vfs_write+0x6ac/0x1050
[ 95.563474][ T6264] ksys_write+0x12a/0x250
[ 95.565097][ T6264] do_syscall_64+0x115/0x870
[ 95.566842][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.569093][ T6264] page last free pid 56 tgid 56 stack trace:
[ 95.571190][ T6264] __free_frozen_pages+0x79f/0x1090
[ 95.572828][ T6264] tlb_remove_table_rcu+0x2cf/0x380
[ 95.574431][ T6264] rcu_core+0x5a2/0x10d0
[ 95.575747][ T6264] handle_softirqs+0x1ea/0x9b0
[ 95.577228][ T6264] __irq_exit_rcu+0x162/0x210
[ 95.578813][ T6264] irq_exit_rcu+0x9/0x30
[ 95.580214][ T6264] sysvec_call_function+0xa3/0xc0
[ 95.581748][ T6264] asm_sysvec_call_function+0x1a/0x20
[ 95.583453][ T6264] Modules linked in:
[ 95.584697][ T6264] CPU: 2 UID: 0 PID: 6264 Comm: syz.0.18 Tainted: G B syzkaller #0 PREEMPT(full)
[ 95.584714][ T6264] Tainted: [B]=BAD_PAGE
[ 95.584718][ T6264] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 95.584724][ T6264] Call Trace:
[ 95.584730][ T6264]
[ 95.584736][ T6264] dump_stack_lvl+0x100/0x190
[ 95.584750][ T6264] bad_page.cold+0xbe/0xdf
[ 95.584766][ T6264] ? __pfx_bad_page+0x10/0x10
[ 95.584779][ T6264] ? page_bad_reason+0x98/0x200
[ 95.584791][ T6264] __free_frozen_pages+0x7d1/0x1090
[ 95.584806][ T6264] ? trace_irq_enable.constprop.0+0x122/0x160
[ 95.584823][ T6264] page_frag_free+0x199/0x1f0
[ 95.584835][ T6264] __xdp_return+0x3b6/0x990
[ 95.584847][ T6264] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 95.584860][ T6264] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 95.584869][ T6264] bpf_prog_run_generic_xdp+0x614/0x1610
[ 95.584883][ T6264] do_xdp_generic+0x92e/0x12c0
[ 95.584895][ T6264] ? __pfx_do_xdp_generic+0x10/0x10
[ 95.584910][ T6264] tun_get_user+0x1c1c/0x3c20
[ 95.584923][ T6264] ? futex_hash+0x311/0x400
[ 95.584937][ T6264] ? lock_release+0x24d/0x310
[ 95.584950][ T6264] ? __pfx_tun_get_user+0x10/0x10
[ 95.584961][ T6264] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 95.584978][ T6264] ? tun_get+0x191/0x370
[ 95.584987][ T6264] ? rcu_is_watching+0x12/0xc0
[ 95.585003][ T6264] ? tun_get+0x191/0x370
[ 95.585010][ T6264] ? lock_release+0x24d/0x310
[ 95.585023][ T6264] tun_chr_write_iter+0xdc/0x200
[ 95.585034][ T6264] vfs_write+0x6ac/0x1050
[ 95.585055][ T6264] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 95.585066][ T6264] ? __pfx_vfs_write+0x10/0x10
[ 95.585081][ T6264] ? lock_release+0x24d/0x310
[ 95.585096][ T6264] ksys_write+0x12a/0x250
[ 95.585111][ T6264] ? __pfx_ksys_write+0x10/0x10
[ 95.585127][ T6264] ? rcu_is_watching+0x12/0xc0
[ 95.585143][ T6264] do_syscall_64+0x115/0x870
[ 95.585156][ T6264] ? clear_bhb_loop+0x40/0x90
[ 95.585168][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.585179][ T6264] RIP: 0033:0x7f9f6e95d68e
[ 95.585188][ T6264] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 95.585198][ T6264] RSP: 002b:00007f9f6f7edfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 95.585208][ T6264] RAX: ffffffffffffffda RBX: 00007f9f6f7ee6c0 RCX: 00007f9f6e95d68e
[ 95.585216][ T6264] RDX: 000000000000fe54 RSI: 0000200000001b00 RDI: 00000000000000c8
[ 95.585222][ T6264] RBP: 00007f9f6ea32e6f R08: 0000000000000000 R09: 0000000000000000
[ 95.585228][ T6264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 95.585234][ T6264] R13: 00007f9f6ec16038 R14: 00007f9f6ec15fa0 R15: 00007fff34da8ef8
[ 95.585243][ T6264]
[ 95.585253][ T6264] BUG: Bad page state in process syz.0.18 pfn:35aad
[ 95.674614][ T6264] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888035aadf00 pfn:0x35aad
[ 95.677746][ T6264] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 95.679974][ T6264] raw: 00fff00000000000 dead000000000040 ffff888022fa0000 0000000000000000
[ 95.682605][ T6264] raw: ffff888035aadf00 0000000000000001 00000000ffffffff 0000000000000000
[ 95.685236][ T6264] page dumped because: page_pool leak
[ 95.686899][ T6264] page_owner tracks the page as allocated
[ 95.688971][ T6264] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6264, tgid 6263 (syz.0.18), ts 95517789122, free_ts 93342897250
[ 95.693995][ T6264] post_alloc_hook+0xfd/0x120
[ 95.695495][ T6264] get_page_from_freelist+0xf48/0x3530
[ 95.697236][ T6264] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 95.699251][ T6264] alloc_pages_bulk_noprof+0x5de/0x13c0
[ 95.700975][ T6264] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 95.702866][ T6264] page_pool_alloc_netmems+0xc4/0x1a0
[ 95.704535][ T6264] skb_pp_cow_data+0x975/0x1140
[ 95.706096][ T6264] skb_cow_data_for_xdp+0x88/0xb0
[ 95.707940][ T6264] do_xdp_generic+0x56b/0x12c0
[ 95.709433][ T6264] tun_get_user+0x1c1c/0x3c20
[ 95.710903][ T6264] tun_chr_write_iter+0xdc/0x200
[ 95.712415][ T6264] vfs_write+0x6ac/0x1050
[ 95.713733][ T6264] ksys_write+0x12a/0x250
[ 95.715085][ T6264] do_syscall_64+0x115/0x870
[ 95.716489][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.718419][ T6264] page last free pid 56 tgid 56 stack trace:
[ 95.720357][ T6264] __free_frozen_pages+0x79f/0x1090
[ 95.721957][ T6264] tlb_remove_table_rcu+0x2cf/0x380
[ 95.723592][ T6264] rcu_core+0x5a2/0x10d0
[ 95.724895][ T6264] handle_softirqs+0x1ea/0x9b0
[ 95.726330][ T6264] __irq_exit_rcu+0x162/0x210
[ 95.727947][ T6264] irq_exit_rcu+0x9/0x30
[ 95.729267][ T6264] sysvec_call_function+0xa3/0xc0
[ 95.730813][ T6264] asm_sysvec_call_function+0x1a/0x20
[ 95.732496][ T6264] Modules linked in:
[ 95.733688][ T6264] CPU: 2 UID: 0 PID: 6264 Comm: syz.0.18 Tainted: G B syzkaller #0 PREEMPT(full)
[ 95.733704][ T6264] Tainted: [B]=BAD_PAGE
[ 95.733708][ T6264] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 95.733715][ T6264] Call Trace:
[ 95.733720][ T6264]
[ 95.733725][ T6264] dump_stack_lvl+0x100/0x190
[ 95.733741][ T6264] bad_page.cold+0xbe/0xdf
[ 95.733756][ T6264] ? __pfx_bad_page+0x10/0x10
[ 95.733769][ T6264] ? page_bad_reason+0x98/0x200
[ 95.733781][ T6264] __free_frozen_pages+0x7d1/0x1090
[ 95.733797][ T6264] ? trace_irq_enable.constprop.0+0x122/0x160
[ 95.733813][ T6264] page_frag_free+0x199/0x1f0
[ 95.733825][ T6264] __xdp_return+0x3b6/0x990
[ 95.733837][ T6264] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 95.733849][ T6264] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 95.733859][ T6264] bpf_prog_run_generic_xdp+0x614/0x1610
[ 95.733874][ T6264] do_xdp_generic+0x92e/0x12c0
[ 95.733885][ T6264] ? __pfx_do_xdp_generic+0x10/0x10
[ 95.733900][ T6264] tun_get_user+0x1c1c/0x3c20
[ 95.733913][ T6264] ? futex_hash+0x311/0x400
[ 95.733927][ T6264] ? lock_release+0x24d/0x310
[ 95.733939][ T6264] ? __pfx_tun_get_user+0x10/0x10
[ 95.733950][ T6264] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 95.733967][ T6264] ? tun_get+0x191/0x370
[ 95.733975][ T6264] ? rcu_is_watching+0x12/0xc0
[ 95.733992][ T6264] ? tun_get+0x191/0x370
[ 95.733999][ T6264] ? lock_release+0x24d/0x310
[ 95.734012][ T6264] tun_chr_write_iter+0xdc/0x200
[ 95.734023][ T6264] vfs_write+0x6ac/0x1050
[ 95.734039][ T6264] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 95.734054][ T6264] ? __pfx_vfs_write+0x10/0x10
[ 95.734070][ T6264] ? lock_release+0x24d/0x310
[ 95.734084][ T6264] ksys_write+0x12a/0x250
[ 95.734100][ T6264] ? __pfx_ksys_write+0x10/0x10
[ 95.734116][ T6264] ? rcu_is_watching+0x12/0xc0
[ 95.734131][ T6264] do_syscall_64+0x115/0x870
[ 95.734145][ T6264] ? clear_bhb_loop+0x40/0x90
[ 95.734157][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.734168][ T6264] RIP: 0033:0x7f9f6e95d68e
[ 95.734177][ T6264] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 95.734187][ T6264] RSP: 002b:00007f9f6f7edfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 95.734198][ T6264] RAX: ffffffffffffffda RBX: 00007f9f6f7ee6c0 RCX: 00007f9f6e95d68e
[ 95.734204][ T6264] RDX: 000000000000fe54 RSI: 0000200000001b00 RDI: 00000000000000c8
[ 95.734211][ T6264] RBP: 00007f9f6ea32e6f R08: 0000000000000000 R09: 0000000000000000
[ 95.734217][ T6264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 95.734223][ T6264] R13: 00007f9f6ec16038 R14: 00007f9f6ec15fa0 R15: 00007fff34da8ef8
[ 95.734232][ T6264]
[ 95.734241][ T6264] BUG: Bad page state in process syz.0.18 pfn:26a75
[ 95.829396][ T6264] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888026a75e00 pfn:0x26a75
[ 95.832354][ T6264] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 95.834403][ T6264] raw: 00fff00000000000 dead000000000040 ffff888022fa0000 0000000000000000
[ 95.836909][ T6264] raw: ffff888026a75e00 0000000000000001 00000000ffffffff 0000000000000000
[ 95.839577][ T6264] page dumped because: page_pool leak
[ 95.841148][ T6264] page_owner tracks the page as allocated
[ 95.842809][ T6264] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6264, tgid 6263 (syz.0.18), ts 95517785095, free_ts 93342918788
[ 95.847866][ T6264] post_alloc_hook+0xfd/0x120
[ 95.849572][ T6264] get_page_from_freelist+0xf48/0x3530
[ 95.851202][ T6264] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 95.852986][ T6264] alloc_pages_bulk_noprof+0x5de/0x13c0
[ 95.854974][ T6264] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 95.857182][ T6264] page_pool_alloc_netmems+0xc4/0x1a0
[ 95.859070][ T6264] skb_pp_cow_data+0x975/0x1140
[ 95.860715][ T6264] skb_cow_data_for_xdp+0x88/0xb0
[ 95.862419][ T6264] do_xdp_generic+0x56b/0x12c0
[ 95.863947][ T6264] tun_get_user+0x1c1c/0x3c20
[ 95.865561][ T6264] tun_chr_write_iter+0xdc/0x200
[ 95.867258][ T6264] vfs_write+0x6ac/0x1050
[ 95.868676][ T6264] ksys_write+0x12a/0x250
[ 95.869951][ T6264] do_syscall_64+0x115/0x870
[ 95.871332][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.873099][ T6264] page last free pid 56 tgid 56 stack trace:
[ 95.874857][ T6264] __free_frozen_pages+0x79f/0x1090
[ 95.876426][ T6264] tlb_remove_table_rcu+0x2cf/0x380
[ 95.878063][ T6264] rcu_core+0x5a2/0x10d0
[ 95.879652][ T6264] handle_softirqs+0x1ea/0x9b0
[ 95.881380][ T6264] __irq_exit_rcu+0x162/0x210
[ 95.882843][ T6264] irq_exit_rcu+0x9/0x30
[ 95.884177][ T6264] sysvec_call_function+0xa3/0xc0
[ 95.885857][ T6264] asm_sysvec_call_function+0x1a/0x20
[ 95.887487][ T6264] Modules linked in:
[ 95.888763][ T6264] CPU: 2 UID: 0 PID: 6264 Comm: syz.0.18 Tainted: G B syzkaller #0 PREEMPT(full)
[ 95.888781][ T6264] Tainted: [B]=BAD_PAGE
[ 95.888786][ T6264] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 95.888795][ T6264] Call Trace:
[ 95.888803][ T6264]
[ 95.888811][ T6264] dump_stack_lvl+0x100/0x190
[ 95.888830][ T6264] bad_page.cold+0xbe/0xdf
[ 95.888850][ T6264] ? __pfx_bad_page+0x10/0x10
[ 95.888867][ T6264] ? page_bad_reason+0x98/0x200
[ 95.888882][ T6264] __free_frozen_pages+0x7d1/0x1090
[ 95.888902][ T6264] ? trace_irq_enable.constprop.0+0x122/0x160
[ 95.888924][ T6264] page_frag_free+0x199/0x1f0
[ 95.888940][ T6264] __xdp_return+0x3b6/0x990
[ 95.888956][ T6264] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 95.888973][ T6264] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 95.888985][ T6264] bpf_prog_run_generic_xdp+0x614/0x1610
[ 95.889005][ T6264] do_xdp_generic+0x92e/0x12c0
[ 95.889020][ T6264] ? __pfx_do_xdp_generic+0x10/0x10
[ 95.889046][ T6264] tun_get_user+0x1c1c/0x3c20
[ 95.889064][ T6264] ? futex_hash+0x311/0x400
[ 95.889082][ T6264] ? lock_release+0x24d/0x310
[ 95.889099][ T6264] ? __pfx_tun_get_user+0x10/0x10
[ 95.889113][ T6264] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 95.889136][ T6264] ? tun_get+0x191/0x370
[ 95.889148][ T6264] ? rcu_is_watching+0x12/0xc0
[ 95.889169][ T6264] ? tun_get+0x191/0x370
[ 95.889179][ T6264] ? lock_release+0x24d/0x310
[ 95.889197][ T6264] tun_chr_write_iter+0xdc/0x200
[ 95.889211][ T6264] vfs_write+0x6ac/0x1050
[ 95.889246][ T6264] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 95.889261][ T6264] ? __pfx_vfs_write+0x10/0x10
[ 95.889281][ T6264] ? lock_release+0x24d/0x310
[ 95.889300][ T6264] ksys_write+0x12a/0x250
[ 95.889320][ T6264] ? __pfx_ksys_write+0x10/0x10
[ 95.889341][ T6264] ? rcu_is_watching+0x12/0xc0
[ 95.889362][ T6264] do_syscall_64+0x115/0x870
[ 95.889380][ T6264] ? clear_bhb_loop+0x40/0x90
[ 95.889395][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.889410][ T6264] RIP: 0033:0x7f9f6e95d68e
[ 95.889421][ T6264] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 95.889435][ T6264] RSP: 002b:00007f9f6f7edfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 95.889449][ T6264] RAX: ffffffffffffffda RBX: 00007f9f6f7ee6c0 RCX: 00007f9f6e95d68e
[ 95.889458][ T6264] RDX: 000000000000fe54 RSI: 0000200000001b00 RDI: 00000000000000c8
[ 95.889467][ T6264] RBP: 00007f9f6ea32e6f R08: 0000000000000000 R09: 0000000000000000
[ 95.889476][ T6264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 95.889484][ T6264] R13: 00007f9f6ec16038 R14: 00007f9f6ec15fa0 R15: 00007fff34da8ef8
[ 95.889497][ T6264]
[ 95.889508][ T6264] BUG: Bad page state in process syz.0.18 pfn:221b1
[ 95.984754][ T6264] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x221b1
[ 95.988669][ T6264] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 95.991451][ T6264] raw: 00fff00000000000 dead000000000040 ffff888022fa0000 0000000000000000
[ 95.994707][ T6264] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000
[ 95.998140][ T6264] page dumped because: page_pool leak
[ 96.000296][ T6264] page_owner tracks the page as allocated
[ 96.002493][ T6264] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6264, tgid 6263 (syz.0.18), ts 95517780478, free_ts 93342940346
[ 96.008950][ T6264] post_alloc_hook+0xfd/0x120
[ 96.010877][ T6264] get_page_from_freelist+0xf48/0x3530
[ 96.013002][ T6264] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 96.015304][ T6264] alloc_pages_bulk_noprof+0x5de/0x13c0
[ 96.017523][ T6264] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 96.020524][ T6264] page_pool_alloc_netmems+0xc4/0x1a0
[ 96.023174][ T6264] skb_pp_cow_data+0x975/0x1140
[ 96.026288][ T6264] skb_cow_data_for_xdp+0x88/0xb0
[ 96.028395][ T6264] do_xdp_generic+0x56b/0x12c0
[ 96.030318][ T6264] tun_get_user+0x1c1c/0x3c20
[ 96.032131][ T6264] tun_chr_write_iter+0xdc/0x200
[ 96.034077][ T6264] vfs_write+0x6ac/0x1050
[ 96.035767][ T6264] ksys_write+0x12a/0x250
[ 96.037490][ T6264] do_syscall_64+0x115/0x870
[ 96.039445][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.041737][ T6264] page last free pid 56 tgid 56 stack trace:
[ 96.043996][ T6264] __free_frozen_pages+0x79f/0x1090
[ 96.045988][ T6264] tlb_remove_table_rcu+0x2cf/0x380
[ 96.048120][ T6264] rcu_core+0x5a2/0x10d0
[ 96.049768][ T6264] handle_softirqs+0x1ea/0x9b0
[ 96.051617][ T6264] __irq_exit_rcu+0x162/0x210
[ 96.053402][ T6264] irq_exit_rcu+0x9/0x30
[ 96.054833][ T6264] sysvec_call_function+0xa3/0xc0
[ 96.056367][ T6264] asm_sysvec_call_function+0x1a/0x20
[ 96.058100][ T6264] Modules linked in:
[ 96.059308][ T6264] CPU: 2 UID: 0 PID: 6264 Comm: syz.0.18 Tainted: G B syzkaller #0 PREEMPT(full)
[ 96.059341][ T6264] Tainted: [B]=BAD_PAGE
[ 96.059345][ T6264] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 96.059352][ T6264] Call Trace:
[ 96.059356][ T6264]
[ 96.059361][ T6264] dump_stack_lvl+0x100/0x190
[ 96.059375][ T6264] bad_page.cold+0xbe/0xdf
[ 96.059391][ T6264] ? __pfx_bad_page+0x10/0x10
[ 96.059404][ T6264] ? page_bad_reason+0x98/0x200
[ 96.059416][ T6264] __free_frozen_pages+0x7d1/0x1090
[ 96.059431][ T6264] ? trace_irq_enable.constprop.0+0x122/0x160
[ 96.059448][ T6264] page_frag_free+0x199/0x1f0
[ 96.059460][ T6264] __xdp_return+0x3b6/0x990
[ 96.059472][ T6264] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 96.059485][ T6264] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 96.059493][ T6264] bpf_prog_run_generic_xdp+0x614/0x1610
[ 96.059508][ T6264] do_xdp_generic+0x92e/0x12c0
[ 96.059520][ T6264] ? __pfx_do_xdp_generic+0x10/0x10
[ 96.059535][ T6264] tun_get_user+0x1c1c/0x3c20
[ 96.059548][ T6264] ? futex_hash+0x311/0x400
[ 96.059561][ T6264] ? lock_release+0x24d/0x310
[ 96.059574][ T6264] ? __pfx_tun_get_user+0x10/0x10
[ 96.059584][ T6264] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 96.059602][ T6264] ? tun_get+0x191/0x370
[ 96.059610][ T6264] ? rcu_is_watching+0x12/0xc0
[ 96.059626][ T6264] ? tun_get+0x191/0x370
[ 96.059634][ T6264] ? lock_release+0x24d/0x310
[ 96.059647][ T6264] tun_chr_write_iter+0xdc/0x200
[ 96.059662][ T6264] vfs_write+0x6ac/0x1050
[ 96.059678][ T6264] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 96.059689][ T6264] ? __pfx_vfs_write+0x10/0x10
[ 96.059705][ T6264] ? lock_release+0x24d/0x310
[ 96.059719][ T6264] ksys_write+0x12a/0x250
[ 96.059734][ T6264] ? __pfx_ksys_write+0x10/0x10
[ 96.059750][ T6264] ? rcu_is_watching+0x12/0xc0
[ 96.059765][ T6264] do_syscall_64+0x115/0x870
[ 96.059778][ T6264] ? clear_bhb_loop+0x40/0x90
[ 96.059790][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.059801][ T6264] RIP: 0033:0x7f9f6e95d68e
[ 96.059809][ T6264] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 96.059820][ T6264] RSP: 002b:00007f9f6f7edfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 96.059830][ T6264] RAX: ffffffffffffffda RBX: 00007f9f6f7ee6c0 RCX: 00007f9f6e95d68e
[ 96.059836][ T6264] RDX: 000000000000fe54 RSI: 0000200000001b00 RDI: 00000000000000c8
[ 96.059843][ T6264] RBP: 00007f9f6ea32e6f R08: 0000000000000000 R09: 0000000000000000
[ 96.059849][ T6264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 96.059855][ T6264] R13: 00007f9f6ec16038 R14: 00007f9f6ec15fa0 R15: 00007fff34da8ef8
[ 96.059864][ T6264]
[ 96.059873][ T6264] BUG: Bad page state in process syz.0.18 pfn:359a8
[ 96.145718][ T6264] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880359a8d00 pfn:0x359a8
[ 96.148730][ T6264] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 96.150836][ T6264] raw: 00fff00000000000 dead000000000040 ffff888022fa0000 0000000000000000
[ 96.153437][ T6264] raw: ffff8880359a8d00 0000000000000001 00000000ffffffff 0000000000000000
[ 96.155999][ T6264] page dumped because: page_pool leak
[ 96.157625][ T6264] page_owner tracks the page as allocated
[ 96.159387][ T6264] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6264, tgid 6263 (syz.0.18), ts 95517776158, free_ts 93342951647
[ 96.164346][ T6264] post_alloc_hook+0xfd/0x120
[ 96.165799][ T6264] get_page_from_freelist+0xf48/0x3530
[ 96.167456][ T6264] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 96.169318][ T6264] alloc_pages_bulk_noprof+0x5de/0x13c0
[ 96.170949][ T6264] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 96.172760][ T6264] page_pool_alloc_netmems+0xc4/0x1a0
[ 96.174358][ T6264] skb_pp_cow_data+0x975/0x1140
[ 96.175837][ T6264] skb_cow_data_for_xdp+0x88/0xb0
[ 96.177357][ T6264] do_xdp_generic+0x56b/0x12c0
[ 96.178858][ T6264] tun_get_user+0x1c1c/0x3c20
[ 96.180272][ T6264] tun_chr_write_iter+0xdc/0x200
[ 96.181759][ T6264] vfs_write+0x6ac/0x1050
[ 96.183089][ T6264] ksys_write+0x12a/0x250
[ 96.184630][ T6264] do_syscall_64+0x115/0x870
[ 96.186201][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.188078][ T6264] page last free pid 56 tgid 56 stack trace:
[ 96.189823][ T6264] __free_frozen_pages+0x79f/0x1090
[ 96.191373][ T6264] tlb_remove_table_rcu+0x2cf/0x380
[ 96.192942][ T6264] rcu_core+0x5a2/0x10d0
[ 96.194277][ T6264] handle_softirqs+0x1ea/0x9b0
[ 96.195755][ T6264] __irq_exit_rcu+0x162/0x210
[ 96.197210][ T6264] irq_exit_rcu+0x9/0x30
[ 96.198583][ T6264] sysvec_call_function+0xa3/0xc0
[ 96.200094][ T6264] asm_sysvec_call_function+0x1a/0x20
[ 96.201693][ T6264] Modules linked in:
[ 96.202851][ T6264] CPU: 2 UID: 0 PID: 6264 Comm: syz.0.18 Tainted: G B syzkaller #0 PREEMPT(full)
[ 96.202868][ T6264] Tainted: [B]=BAD_PAGE
[ 96.202872][ T6264] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 96.202878][ T6264] Call Trace:
[ 96.202883][ T6264]
[ 96.202887][ T6264] dump_stack_lvl+0x100/0x190
[ 96.202902][ T6264] bad_page.cold+0xbe/0xdf
[ 96.202917][ T6264] ? __pfx_bad_page+0x10/0x10
[ 96.202930][ T6264] ? page_bad_reason+0x98/0x200
[ 96.202941][ T6264] __free_frozen_pages+0x7d1/0x1090
[ 96.202957][ T6264] ? trace_irq_enable.constprop.0+0x122/0x160
[ 96.202974][ T6264] page_frag_free+0x199/0x1f0
[ 96.202986][ T6264] __xdp_return+0x3b6/0x990
[ 96.202997][ T6264] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 96.203010][ T6264] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 96.203019][ T6264] bpf_prog_run_generic_xdp+0x614/0x1610
[ 96.203035][ T6264] do_xdp_generic+0x92e/0x12c0
[ 96.203047][ T6264] ? __pfx_do_xdp_generic+0x10/0x10
[ 96.203062][ T6264] tun_get_user+0x1c1c/0x3c20
[ 96.203075][ T6264] ? futex_hash+0x311/0x400
[ 96.203088][ T6264] ? lock_release+0x24d/0x310
[ 96.203101][ T6264] ? __pfx_tun_get_user+0x10/0x10
[ 96.203112][ T6264] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 96.203130][ T6264] ? tun_get+0x191/0x370
[ 96.203138][ T6264] ? rcu_is_watching+0x12/0xc0
[ 96.203154][ T6264] ? tun_get+0x191/0x370
[ 96.203161][ T6264] ? lock_release+0x24d/0x310
[ 96.203175][ T6264] tun_chr_write_iter+0xdc/0x200
[ 96.203185][ T6264] vfs_write+0x6ac/0x1050
[ 96.203202][ T6264] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 96.203213][ T6264] ? __pfx_vfs_write+0x10/0x10
[ 96.203229][ T6264] ? lock_release+0x24d/0x310
[ 96.203243][ T6264] ksys_write+0x12a/0x250
[ 96.203259][ T6264] ? __pfx_ksys_write+0x10/0x10
[ 96.203274][ T6264] ? rcu_is_watching+0x12/0xc0
[ 96.203290][ T6264] do_syscall_64+0x115/0x870
[ 96.203302][ T6264] ? clear_bhb_loop+0x40/0x90
[ 96.203332][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.203344][ T6264] RIP: 0033:0x7f9f6e95d68e
[ 96.203353][ T6264] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 96.203363][ T6264] RSP: 002b:00007f9f6f7edfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 96.203374][ T6264] RAX: ffffffffffffffda RBX: 00007f9f6f7ee6c0 RCX: 00007f9f6e95d68e
[ 96.203381][ T6264] RDX: 000000000000fe54 RSI: 0000200000001b00 RDI: 00000000000000c8
[ 96.203387][ T6264] RBP: 00007f9f6ea32e6f R08: 0000000000000000 R09: 0000000000000000
[ 96.203393][ T6264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 96.203399][ T6264] R13: 00007f9f6ec16038 R14: 00007f9f6ec15fa0 R15: 00007fff34da8ef8
[ 96.203409][ T6264]
[ 96.203418][ T6264] BUG: Bad page state in process syz.0.18 pfn:260fe
[ 96.292090][ T6264] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880260fea00 pfn:0x260fe
[ 96.295976][ T6264] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 96.298807][ T6264] raw: 00fff00000000000 dead000000000040 ffff888022fa0000 0000000000000000
[ 96.301992][ T6264] raw: ffff8880260fea00 0000000000000001 00000000ffffffff 0000000000000000
[ 96.304578][ T6264] page dumped because: page_pool leak
[ 96.306157][ T6264] page_owner tracks the page as allocated
[ 96.307986][ T6264] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6264, tgid 6263 (syz.0.18), ts 95517771626, free_ts 93343006251
[ 96.312955][ T6264] post_alloc_hook+0xfd/0x120
[ 96.314433][ T6264] get_page_from_freelist+0xf48/0x3530
[ 96.316170][ T6264] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 96.318460][ T6264] alloc_pages_bulk_noprof+0x5de/0x13c0
[ 96.320500][ T6264] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 96.322744][ T6264] page_pool_alloc_netmems+0xc4/0x1a0
[ 96.324793][ T6264] skb_pp_cow_data+0x975/0x1140
[ 96.326633][ T6264] skb_cow_data_for_xdp+0x88/0xb0
[ 96.328670][ T6264] do_xdp_generic+0x56b/0x12c0
[ 96.330508][ T6264] tun_get_user+0x1c1c/0x3c20
[ 96.332286][ T6264] tun_chr_write_iter+0xdc/0x200
[ 96.334159][ T6264] vfs_write+0x6ac/0x1050
[ 96.335791][ T6264] ksys_write+0x12a/0x250
[ 96.337451][ T6264] do_syscall_64+0x115/0x870
[ 96.339260][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.341450][ T6264] page last free pid 56 tgid 56 stack trace:
[ 96.343698][ T6264] __free_frozen_pages+0x79f/0x1090
[ 96.345589][ T6264] tlb_remove_table_rcu+0x2cf/0x380
[ 96.347580][ T6264] rcu_core+0x5a2/0x10d0
[ 96.349254][ T6264] handle_softirqs+0x1ea/0x9b0
[ 96.351066][ T6264] __irq_exit_rcu+0x162/0x210
[ 96.352881][ T6264] irq_exit_rcu+0x9/0x30
[ 96.354472][ T6264] sysvec_call_function+0xa3/0xc0
[ 96.356412][ T6264] asm_sysvec_call_function+0x1a/0x20
[ 96.358512][ T6264] Modules linked in:
[ 96.359999][ T6264] CPU: 2 UID: 0 PID: 6264 Comm: syz.0.18 Tainted: G B syzkaller #0 PREEMPT(full)
[ 96.360022][ T6264] Tainted: [B]=BAD_PAGE
[ 96.360028][ T6264] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 96.360037][ T6264] Call Trace:
[ 96.360044][ T6264]
[ 96.360051][ T6264] dump_stack_lvl+0x100/0x190
[ 96.360073][ T6264] bad_page.cold+0xbe/0xdf
[ 96.360096][ T6264] ? __pfx_bad_page+0x10/0x10
[ 96.360111][ T6264] ? page_bad_reason+0x98/0x200
[ 96.360128][ T6264] __free_frozen_pages+0x7d1/0x1090
[ 96.360151][ T6264] ? trace_irq_enable.constprop.0+0x122/0x160
[ 96.360176][ T6264] page_frag_free+0x199/0x1f0
[ 96.360195][ T6264] __xdp_return+0x3b6/0x990
[ 96.360209][ T6264] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 96.360228][ T6264] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 96.360241][ T6264] bpf_prog_run_generic_xdp+0x614/0x1610
[ 96.360264][ T6264] do_xdp_generic+0x92e/0x12c0
[ 96.360281][ T6264] ? __pfx_do_xdp_generic+0x10/0x10
[ 96.360301][ T6264] tun_get_user+0x1c1c/0x3c20
[ 96.360320][ T6264] ? futex_hash+0x311/0x400
[ 96.360340][ T6264] ? lock_release+0x24d/0x310
[ 96.360360][ T6264] ? __pfx_tun_get_user+0x10/0x10
[ 96.360375][ T6264] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 96.360401][ T6264] ? tun_get+0x191/0x370
[ 96.360410][ T6264] ? rcu_is_watching+0x12/0xc0
[ 96.360434][ T6264] ? tun_get+0x191/0x370
[ 96.360452][ T6264] ? lock_release+0x24d/0x310
[ 96.360472][ T6264] tun_chr_write_iter+0xdc/0x200
[ 96.360488][ T6264] vfs_write+0x6ac/0x1050
[ 96.360512][ T6264] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 96.360529][ T6264] ? __pfx_vfs_write+0x10/0x10
[ 96.360551][ T6264] ? lock_release+0x24d/0x310
[ 96.360570][ T6264] ksys_write+0x12a/0x250
[ 96.360593][ T6264] ? __pfx_ksys_write+0x10/0x10
[ 96.360618][ T6264] ? rcu_is_watching+0x12/0xc0
[ 96.360638][ T6264] do_syscall_64+0x115/0x870
[ 96.360661][ T6264] ? clear_bhb_loop+0x40/0x90
[ 96.360679][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.360696][ T6264] RIP: 0033:0x7f9f6e95d68e
[ 96.360710][ T6264] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 96.360725][ T6264] RSP: 002b:00007f9f6f7edfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 96.360741][ T6264] RAX: ffffffffffffffda RBX: 00007f9f6f7ee6c0 RCX: 00007f9f6e95d68e
[ 96.360748][ T6264] RDX: 000000000000fe54 RSI: 0000200000001b00 RDI: 00000000000000c8
[ 96.360757][ T6264] RBP: 00007f9f6ea32e6f R08: 0000000000000000 R09: 0000000000000000
[ 96.360767][ T6264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 96.360777][ T6264] R13: 00007f9f6ec16038 R14: 00007f9f6ec15fa0 R15: 00007fff34da8ef8
[ 96.360792][ T6264]
[ 96.360803][ T6264] BUG: Bad page state in process syz.0.18 pfn:28d33
[ 96.457629][ T6264] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x28d33
[ 96.461371][ T6264] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 96.463638][ T6264] raw: 00fff00000000000 dead000000000040 ffff888022fa0000 0000000000000000
[ 96.466642][ T6264] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000
[ 96.469686][ T6264] page dumped because: page_pool leak
[ 96.471538][ T6264] page_owner tracks the page as allocated
[ 96.473535][ T6264] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6264, tgid 6263 (syz.0.18), ts 95517767456, free_ts 93343028422
[ 96.478798][ T6264] post_alloc_hook+0xfd/0x120
[ 96.480215][ T6264] get_page_from_freelist+0xf48/0x3530
[ 96.481836][ T6264] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 96.483590][ T6264] alloc_pages_bulk_noprof+0x5de/0x13c0
[ 96.485238][ T6264] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 96.487188][ T6264] page_pool_alloc_netmems+0xc4/0x1a0
[ 96.489085][ T6264] skb_pp_cow_data+0x975/0x1140
[ 96.490770][ T6264] skb_cow_data_for_xdp+0x88/0xb0
[ 96.492454][ T6264] do_xdp_generic+0x56b/0x12c0
[ 96.493929][ T6264] tun_get_user+0x1c1c/0x3c20
[ 96.495388][ T6264] tun_chr_write_iter+0xdc/0x200
[ 96.496838][ T6264] vfs_write+0x6ac/0x1050
[ 96.498218][ T6264] ksys_write+0x12a/0x250
[ 96.499526][ T6264] do_syscall_64+0x115/0x870
[ 96.500899][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.502643][ T6264] page last free pid 56 tgid 56 stack trace:
[ 96.504448][ T6264] __free_frozen_pages+0x79f/0x1090
[ 96.505970][ T6264] tlb_remove_table_rcu+0x2cf/0x380
[ 96.507890][ T6264] rcu_core+0x5a2/0x10d0
[ 96.509348][ T6264] handle_softirqs+0x1ea/0x9b0
[ 96.510876][ T6264] __irq_exit_rcu+0x162/0x210
[ 96.512317][ T6264] irq_exit_rcu+0x9/0x30
[ 96.513667][ T6264] sysvec_call_function+0xa3/0xc0
[ 96.515657][ T6264] asm_sysvec_call_function+0x1a/0x20
[ 96.517345][ T6264] Modules linked in:
[ 96.518564][ T6264] CPU: 2 UID: 0 PID: 6264 Comm: syz.0.18 Tainted: G B syzkaller #0 PREEMPT(full)
[ 96.518580][ T6264] Tainted: [B]=BAD_PAGE
[ 96.518585][ T6264] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 96.518591][ T6264] Call Trace:
[ 96.518596][ T6264]
[ 96.518601][ T6264] dump_stack_lvl+0x100/0x190
[ 96.518617][ T6264] bad_page.cold+0xbe/0xdf
[ 96.518633][ T6264] ? __pfx_bad_page+0x10/0x10
[ 96.518646][ T6264] ? page_bad_reason+0x98/0x200
[ 96.518663][ T6264] __free_frozen_pages+0x7d1/0x1090
[ 96.518679][ T6264] ? trace_irq_enable.constprop.0+0x122/0x160
[ 96.518696][ T6264] page_frag_free+0x199/0x1f0
[ 96.518708][ T6264] __xdp_return+0x3b6/0x990
[ 96.518720][ T6264] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 96.518733][ T6264] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 96.518742][ T6264] bpf_prog_run_generic_xdp+0x614/0x1610
[ 96.518758][ T6264] do_xdp_generic+0x92e/0x12c0
[ 96.518769][ T6264] ? __pfx_do_xdp_generic+0x10/0x10
[ 96.518784][ T6264] tun_get_user+0x1c1c/0x3c20
[ 96.518798][ T6264] ? futex_hash+0x311/0x400
[ 96.518811][ T6264] ? lock_release+0x24d/0x310
[ 96.518824][ T6264] ? __pfx_tun_get_user+0x10/0x10
[ 96.518835][ T6264] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 96.518852][ T6264] ? tun_get+0x191/0x370
[ 96.518860][ T6264] ? rcu_is_watching+0x12/0xc0
[ 96.518876][ T6264] ? tun_get+0x191/0x370
[ 96.518884][ T6264] ? lock_release+0x24d/0x310
[ 96.518897][ T6264] tun_chr_write_iter+0xdc/0x200
[ 96.518908][ T6264] vfs_write+0x6ac/0x1050
[ 96.518923][ T6264] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 96.518935][ T6264] ? __pfx_vfs_write+0x10/0x10
[ 96.518950][ T6264] ? lock_release+0x24d/0x310
[ 96.518965][ T6264] ksys_write+0x12a/0x250
[ 96.518980][ T6264] ? __pfx_ksys_write+0x10/0x10
[ 96.518996][ T6264] ? rcu_is_watching+0x12/0xc0
[ 96.519012][ T6264] do_syscall_64+0x115/0x870
[ 96.519025][ T6264] ? clear_bhb_loop+0x40/0x90
[ 96.519036][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.519047][ T6264] RIP: 0033:0x7f9f6e95d68e
[ 96.519057][ T6264] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 96.519067][ T6264] RSP: 002b:00007f9f6f7edfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 96.519078][ T6264] RAX: ffffffffffffffda RBX: 00007f9f6f7ee6c0 RCX: 00007f9f6e95d68e
[ 96.519084][ T6264] RDX: 000000000000fe54 RSI: 0000200000001b00 RDI: 00000000000000c8
[ 96.519090][ T6264] RBP: 00007f9f6ea32e6f R08: 0000000000000000 R09: 0000000000000000
[ 96.519096][ T6264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 96.519102][ T6264] R13: 00007f9f6ec16038 R14: 00007f9f6ec15fa0 R15: 00007fff34da8ef8
[ 96.519112][ T6264]
[ 96.519121][ T6264] BUG: Bad page state in process syz.0.18 pfn:2677c
[ 96.601655][ T6264] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802677c600 pfn:0x2677c
[ 96.604604][ T6264] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 96.606769][ T6264] raw: 00fff00000000000 dead000000000040 ffff888022fa0000 0000000000000000
[ 96.609405][ T6264] raw: ffff88802677c600 0000000000000001 00000000ffffffff 0000000000000000
[ 96.611982][ T6264] page dumped because: page_pool leak
[ 96.613589][ T6264] page_owner tracks the page as allocated
[ 96.615281][ T6264] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6264, tgid 6263 (syz.0.18), ts 95517763175, free_ts 93343040029
[ 96.620264][ T6264] post_alloc_hook+0xfd/0x120
[ 96.621716][ T6264] get_page_from_freelist+0xf48/0x3530
[ 96.623368][ T6264] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 96.625141][ T6264] alloc_pages_bulk_noprof+0x5de/0x13c0
[ 96.626843][ T6264] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 96.628755][ T6264] page_pool_alloc_netmems+0xc4/0x1a0
[ 96.630349][ T6264] skb_pp_cow_data+0x975/0x1140
[ 96.631837][ T6264] skb_cow_data_for_xdp+0x88/0xb0
[ 96.633360][ T6264] do_xdp_generic+0x56b/0x12c0
[ 96.634811][ T6264] tun_get_user+0x1c1c/0x3c20
[ 96.636243][ T6264] tun_chr_write_iter+0xdc/0x200
[ 96.637784][ T6264] vfs_write+0x6ac/0x1050
[ 96.639155][ T6264] ksys_write+0x12a/0x250
[ 96.640454][ T6264] do_syscall_64+0x115/0x870
[ 96.641861][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.643580][ T6264] page last free pid 56 tgid 56 stack trace:
[ 96.645357][ T6264] __free_frozen_pages+0x79f/0x1090
[ 96.646988][ T6264] tlb_remove_table_rcu+0x2cf/0x380
[ 96.648606][ T6264] rcu_core+0x5a2/0x10d0
[ 96.649906][ T6264] handle_softirqs+0x1ea/0x9b0
[ 96.651325][ T6264] __irq_exit_rcu+0x162/0x210
[ 96.652781][ T6264] irq_exit_rcu+0x9/0x30
[ 96.654050][ T6264] sysvec_call_function+0xa3/0xc0
[ 96.655549][ T6264] asm_sysvec_call_function+0x1a/0x20
[ 96.657174][ T6264] Modules linked in:
[ 96.658435][ T6264] CPU: 2 UID: 0 PID: 6264 Comm: syz.0.18 Tainted: G B syzkaller #0 PREEMPT(full)
[ 96.658451][ T6264] Tainted: [B]=BAD_PAGE
[ 96.658455][ T6264] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 96.658462][ T6264] Call Trace:
[ 96.658467][ T6264]
[ 96.658472][ T6264] dump_stack_lvl+0x100/0x190
[ 96.658487][ T6264] bad_page.cold+0xbe/0xdf
[ 96.658503][ T6264] ? __pfx_bad_page+0x10/0x10
[ 96.658516][ T6264] ? page_bad_reason+0x98/0x200
[ 96.658528][ T6264] __free_frozen_pages+0x7d1/0x1090
[ 96.658544][ T6264] ? trace_irq_enable.constprop.0+0x122/0x160
[ 96.658560][ T6264] page_frag_free+0x199/0x1f0
[ 96.658572][ T6264] __xdp_return+0x3b6/0x990
[ 96.658584][ T6264] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 96.658596][ T6264] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 96.658606][ T6264] bpf_prog_run_generic_xdp+0x614/0x1610
[ 96.658621][ T6264] do_xdp_generic+0x92e/0x12c0
[ 96.658632][ T6264] ? __pfx_do_xdp_generic+0x10/0x10
[ 96.658647][ T6264] tun_get_user+0x1c1c/0x3c20
[ 96.658664][ T6264] ? futex_hash+0x311/0x400
[ 96.658678][ T6264] ? lock_release+0x24d/0x310
[ 96.658691][ T6264] ? __pfx_tun_get_user+0x10/0x10
[ 96.658701][ T6264] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 96.658718][ T6264] ? tun_get+0x191/0x370
[ 96.658727][ T6264] ? rcu_is_watching+0x12/0xc0
[ 96.658742][ T6264] ? tun_get+0x191/0x370
[ 96.658750][ T6264] ? lock_release+0x24d/0x310
[ 96.658763][ T6264] tun_chr_write_iter+0xdc/0x200
[ 96.658774][ T6264] vfs_write+0x6ac/0x1050
[ 96.658790][ T6264] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 96.658801][ T6264] ? __pfx_vfs_write+0x10/0x10
[ 96.658816][ T6264] ? lock_release+0x24d/0x310
[ 96.658831][ T6264] ksys_write+0x12a/0x250
[ 96.658846][ T6264] ? __pfx_ksys_write+0x10/0x10
[ 96.658862][ T6264] ? rcu_is_watching+0x12/0xc0
[ 96.658878][ T6264] do_syscall_64+0x115/0x870
[ 96.658891][ T6264] ? clear_bhb_loop+0x40/0x90
[ 96.658902][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.658917][ T6264] RIP: 0033:0x7f9f6e95d68e
[ 96.658927][ T6264] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 96.658937][ T6264] RSP: 002b:00007f9f6f7edfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 96.658948][ T6264] RAX: ffffffffffffffda RBX: 00007f9f6f7ee6c0 RCX: 00007f9f6e95d68e
[ 96.658955][ T6264] RDX: 000000000000fe54 RSI: 0000200000001b00 RDI: 00000000000000c8
[ 96.658962][ T6264] RBP: 00007f9f6ea32e6f R08: 0000000000000000 R09: 0000000000000000
[ 96.658968][ T6264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 96.658974][ T6264] R13: 00007f9f6ec16038 R14: 00007f9f6ec15fa0 R15: 00007fff34da8ef8
[ 96.658984][ T6264]
[ 96.658992][ T6264] BUG: Bad page state in process syz.0.18 pfn:54eab
[ 96.750366][ T6264] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888054eab100 pfn:0x54eab
[ 96.753874][ T6264] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 96.756392][ T6264] raw: 00fff00000000000 dead000000000040 ffff888022fa0000 0000000000000000
[ 96.759748][ T6264] raw: ffff888054eab100 0000000000000001 00000000ffffffff 0000000000000000
[ 96.763014][ T6264] page dumped because: page_pool leak
[ 96.765061][ T6264] page_owner tracks the page as allocated
[ 96.767295][ T6264] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6264, tgid 6263 (syz.0.18), ts 95517759142, free_ts 93343051021
[ 96.773676][ T6264] post_alloc_hook+0xfd/0x120
[ 96.775501][ T6264] get_page_from_freelist+0xf48/0x3530
[ 96.777629][ T6264] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 96.779958][ T6264] alloc_pages_bulk_noprof+0x5de/0x13c0
[ 96.782075][ T6264] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 96.784462][ T6264] page_pool_alloc_netmems+0xc4/0x1a0
[ 96.786599][ T6264] skb_pp_cow_data+0x975/0x1140
[ 96.788633][ T6264] skb_cow_data_for_xdp+0x88/0xb0
[ 96.790672][ T6264] do_xdp_generic+0x56b/0x12c0
[ 96.792486][ T6264] tun_get_user+0x1c1c/0x3c20
[ 96.794305][ T6264] tun_chr_write_iter+0xdc/0x200
[ 96.796294][ T6264] vfs_write+0x6ac/0x1050
[ 96.798149][ T6264] ksys_write+0x12a/0x250
[ 96.799836][ T6264] do_syscall_64+0x115/0x870
[ 96.801472][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.803540][ T6264] page last free pid 56 tgid 56 stack trace:
[ 96.805626][ T6264] __free_frozen_pages+0x79f/0x1090
[ 96.807515][ T6264] rcu_core+0x5a2/0x10d0
[ 96.809095][ T6264] handle_softirqs+0x1ea/0x9b0
[ 96.810710][ T6264] __irq_exit_rcu+0x162/0x210
[ 96.812135][ T6264] irq_exit_rcu+0x9/0x30
[ 96.813362][ T6264] sysvec_call_function+0xa3/0xc0
[ 96.814852][ T6264] asm_sysvec_call_function+0x1a/0x20
[ 96.816592][ T6264] Modules linked in:
[ 96.818027][ T6264] CPU: 2 UID: 0 PID: 6264 Comm: syz.0.18 Tainted: G B syzkaller #0 PREEMPT(full)
[ 96.818044][ T6264] Tainted: [B]=BAD_PAGE
[ 96.818048][ T6264] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 96.818055][ T6264] Call Trace:
[ 96.818059][ T6264]
[ 96.818064][ T6264] dump_stack_lvl+0x100/0x190
[ 96.818079][ T6264] bad_page.cold+0xbe/0xdf
[ 96.818095][ T6264] ? __pfx_bad_page+0x10/0x10
[ 96.818108][ T6264] ? page_bad_reason+0x98/0x200
[ 96.818120][ T6264] __free_frozen_pages+0x7d1/0x1090
[ 96.818136][ T6264] ? trace_irq_enable.constprop.0+0x122/0x160
[ 96.818154][ T6264] page_frag_free+0x199/0x1f0
[ 96.818167][ T6264] __xdp_return+0x3b6/0x990
[ 96.818179][ T6264] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 96.818191][ T6264] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 96.818200][ T6264] bpf_prog_run_generic_xdp+0x614/0x1610
[ 96.818215][ T6264] do_xdp_generic+0x92e/0x12c0
[ 96.818226][ T6264] ? __pfx_do_xdp_generic+0x10/0x10
[ 96.818241][ T6264] tun_get_user+0x1c1c/0x3c20
[ 96.818254][ T6264] ? futex_hash+0x311/0x400
[ 96.818268][ T6264] ? lock_release+0x24d/0x310
[ 96.818281][ T6264] ? __pfx_tun_get_user+0x10/0x10
[ 96.818292][ T6264] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 96.818310][ T6264] ? tun_get+0x191/0x370
[ 96.818318][ T6264] ? rcu_is_watching+0x12/0xc0
[ 96.818333][ T6264] ? tun_get+0x191/0x370
[ 96.818341][ T6264] ? lock_release+0x24d/0x310
[ 96.818354][ T6264] tun_chr_write_iter+0xdc/0x200
[ 96.818365][ T6264] vfs_write+0x6ac/0x1050
[ 96.818381][ T6264] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 96.818392][ T6264] ? __pfx_vfs_write+0x10/0x10
[ 96.818408][ T6264] ? lock_release+0x24d/0x310
[ 96.818422][ T6264] ksys_write+0x12a/0x250
[ 96.818437][ T6264] ? __pfx_ksys_write+0x10/0x10
[ 96.818453][ T6264] ? rcu_is_watching+0x12/0xc0
[ 96.818469][ T6264] do_syscall_64+0x115/0x870
[ 96.818482][ T6264] ? clear_bhb_loop+0x40/0x90
[ 96.818494][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.818505][ T6264] RIP: 0033:0x7f9f6e95d68e
[ 96.818514][ T6264] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 96.818525][ T6264] RSP: 002b:00007f9f6f7edfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 96.818535][ T6264] RAX: ffffffffffffffda RBX: 00007f9f6f7ee6c0 RCX: 00007f9f6e95d68e
[ 96.818542][ T6264] RDX: 000000000000fe54 RSI: 0000200000001b00 RDI: 00000000000000c8
[ 96.818548][ T6264] RBP: 00007f9f6ea32e6f R08: 0000000000000000 R09: 0000000000000000
[ 96.818554][ T6264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 96.818560][ T6264] R13: 00007f9f6ec16038 R14: 00007f9f6ec15fa0 R15: 00007fff34da8ef8
[ 96.818569][ T6264]
[ 96.818578][ T6264] BUG: Bad page state in process syz.0.18 pfn:264c1
[ 96.911895][ T6264] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880264c1200 pfn:0x264c1
[ 96.915147][ T6264] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 96.917581][ T6264] raw: 00fff00000000000 dead000000000040 ffff888022fa0000 0000000000000000
[ 96.920368][ T6264] raw: ffff8880264c1200 0000000000000001 00000000ffffffff 0000000000000000
[ 96.923411][ T6264] page dumped because: page_pool leak
[ 96.925036][ T6264] page_owner tracks the page as allocated
[ 96.927041][ T6264] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6264, tgid 6263 (syz.0.18), ts 95517755007, free_ts 93344172376
[ 96.932504][ T6264] post_alloc_hook+0xfd/0x120
[ 96.934333][ T6264] get_page_from_freelist+0xf48/0x3530
[ 96.936312][ T6264] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 96.938319][ T6264] alloc_pages_bulk_noprof+0x5de/0x13c0
[ 96.940465][ T6264] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 96.942451][ T6264] page_pool_alloc_netmems+0xc4/0x1a0
[ 96.944103][ T6264] skb_pp_cow_data+0x975/0x1140
[ 96.946000][ T6264] skb_cow_data_for_xdp+0x88/0xb0
[ 96.947899][ T6264] do_xdp_generic+0x56b/0x12c0
[ 96.949369][ T6264] tun_get_user+0x1c1c/0x3c20
[ 96.951088][ T6264] tun_chr_write_iter+0xdc/0x200
[ 96.952990][ T6264] vfs_write+0x6ac/0x1050
[ 96.954391][ T6264] ksys_write+0x12a/0x250
[ 96.955714][ T6264] do_syscall_64+0x115/0x870
[ 96.957427][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.959662][ T6264] page last free pid 23 tgid 23 stack trace:
[ 96.961475][ T6264] __free_frozen_pages+0x79f/0x1090
[ 96.963405][ T6264] tlb_remove_table_rcu+0x2cf/0x380
[ 96.965264][ T6264] rcu_core+0x5a2/0x10d0
[ 96.966554][ T6264] handle_softirqs+0x1ea/0x9b0
[ 96.968238][ T6264] run_ksoftirqd+0x38/0x60
[ 96.969976][ T6264] smpboot_thread_fn+0x3d3/0xaa0
[ 96.971911][ T6264] kthread+0x370/0x450
[ 96.973210][ T6264] ret_from_fork+0x72b/0xd50
[ 96.974620][ T6264] ret_from_fork_asm+0x1a/0x30
[ 96.976462][ T6264] Modules linked in:
[ 96.978094][ T6264] CPU: 2 UID: 0 PID: 6264 Comm: syz.0.18 Tainted: G B syzkaller #0 PREEMPT(full)
[ 96.978120][ T6264] Tainted: [B]=BAD_PAGE
[ 96.978125][ T6264] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 96.978135][ T6264] Call Trace:
[ 96.978143][ T6264]
[ 96.978151][ T6264] dump_stack_lvl+0x100/0x190
[ 96.978173][ T6264] bad_page.cold+0xbe/0xdf
[ 96.978198][ T6264] ? __pfx_bad_page+0x10/0x10
[ 96.978217][ T6264] ? page_bad_reason+0x98/0x200
[ 96.978235][ T6264] __free_frozen_pages+0x7d1/0x1090
[ 96.978258][ T6264] ? trace_irq_enable.constprop.0+0x122/0x160
[ 96.978275][ T6264] page_frag_free+0x199/0x1f0
[ 96.978287][ T6264] __xdp_return+0x3b6/0x990
[ 96.978299][ T6264] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 96.978311][ T6264] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 96.978320][ T6264] bpf_prog_run_generic_xdp+0x614/0x1610
[ 96.978335][ T6264] do_xdp_generic+0x92e/0x12c0
[ 96.978346][ T6264] ? __pfx_do_xdp_generic+0x10/0x10
[ 96.978361][ T6264] tun_get_user+0x1c1c/0x3c20
[ 96.978374][ T6264] ? futex_hash+0x311/0x400
[ 96.978388][ T6264] ? lock_release+0x24d/0x310
[ 96.978400][ T6264] ? __pfx_tun_get_user+0x10/0x10
[ 96.978411][ T6264] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 96.978429][ T6264] ? tun_get+0x191/0x370
[ 96.978437][ T6264] ? rcu_is_watching+0x12/0xc0
[ 96.978453][ T6264] ? tun_get+0x191/0x370
[ 96.978461][ T6264] ? lock_release+0x24d/0x310
[ 96.978474][ T6264] tun_chr_write_iter+0xdc/0x200
[ 96.978484][ T6264] vfs_write+0x6ac/0x1050
[ 96.978500][ T6264] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 96.978511][ T6264] ? __pfx_vfs_write+0x10/0x10
[ 96.978527][ T6264] ? lock_release+0x24d/0x310
[ 96.978541][ T6264] ksys_write+0x12a/0x250
[ 96.978556][ T6264] ? __pfx_ksys_write+0x10/0x10
[ 96.978572][ T6264] ? rcu_is_watching+0x12/0xc0
[ 96.978593][ T6264] do_syscall_64+0x115/0x870
[ 96.978607][ T6264] ? clear_bhb_loop+0x40/0x90
[ 96.978618][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.978629][ T6264] RIP: 0033:0x7f9f6e95d68e
[ 96.978638][ T6264] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 96.978649][ T6264] RSP: 002b:00007f9f6f7edfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 96.978659][ T6264] RAX: ffffffffffffffda RBX: 00007f9f6f7ee6c0 RCX: 00007f9f6e95d68e
[ 96.978666][ T6264] RDX: 000000000000fe54 RSI: 0000200000001b00 RDI: 00000000000000c8
[ 96.978672][ T6264] RBP: 00007f9f6ea32e6f R08: 0000000000000000 R09: 0000000000000000
[ 96.978678][ T6264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 96.978684][ T6264] R13: 00007f9f6ec16038 R14: 00007f9f6ec15fa0 R15: 00007fff34da8ef8
[ 96.978694][ T6264]
[ 96.978702][ T6264] BUG: Bad page state in process syz.0.18 pfn:54eaa
[ 97.073583][ T6264] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x54eaa
[ 97.076779][ T6264] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 97.079531][ T6264] raw: 00fff00000000000 dead000000000040 ffff888022fa0000 0000000000000000
[ 97.082058][ T6264] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000
[ 97.085055][ T6264] page dumped because: page_pool leak
[ 97.087112][ T6264] page_owner tracks the page as allocated
[ 97.088957][ T6264] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6264, tgid 6263 (syz.0.18), ts 95517749882, free_ts 93344182209
[ 97.094421][ T6264] post_alloc_hook+0xfd/0x120
[ 97.095860][ T6264] get_page_from_freelist+0xf48/0x3530
[ 97.097998][ T6264] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 97.100230][ T6264] alloc_pages_bulk_noprof+0x5de/0x13c0
[ 97.101927][ T6264] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 97.103973][ T6264] page_pool_alloc_netmems+0xc4/0x1a0
[ 97.106014][ T6264] skb_pp_cow_data+0x975/0x1140
[ 97.107519][ T6264] skb_cow_data_for_xdp+0x88/0xb0
[ 97.109223][ T6264] do_xdp_generic+0x56b/0x12c0
[ 97.111023][ T6264] tun_get_user+0x1c1c/0x3c20
[ 97.112659][ T6264] tun_chr_write_iter+0xdc/0x200
[ 97.114176][ T6264] vfs_write+0x6ac/0x1050
[ 97.115720][ T6264] ksys_write+0x12a/0x250
[ 97.117437][ T6264] do_syscall_64+0x115/0x870
[ 97.118921][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 97.120788][ T6264] page last free pid 23 tgid 23 stack trace:
[ 97.123071][ T6264] __free_frozen_pages+0x79f/0x1090
[ 97.124783][ T6264] tlb_remove_table_rcu+0x2cf/0x380
[ 97.126364][ T6264] rcu_core+0x5a2/0x10d0
[ 97.128172][ T6264] handle_softirqs+0x1ea/0x9b0
[ 97.130063][ T6264] run_ksoftirqd+0x38/0x60
[ 97.131462][ T6264] smpboot_thread_fn+0x3d3/0xaa0
[ 97.132921][ T6264] kthread+0x370/0x450
[ 97.134452][ T6264] ret_from_fork+0x72b/0xd50
[ 97.136204][ T6264] ret_from_fork_asm+0x1a/0x30
[ 97.137763][ T6264] Modules linked in:
[ 97.139118][ T6264] CPU: 2 UID: 0 PID: 6264 Comm: syz.0.18 Tainted: G B syzkaller #0 PREEMPT(full)
[ 97.139135][ T6264] Tainted: [B]=BAD_PAGE
[ 97.139139][ T6264] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 97.139146][ T6264] Call Trace:
[ 97.139150][ T6264]
[ 97.139156][ T6264] dump_stack_lvl+0x100/0x190
[ 97.139171][ T6264] bad_page.cold+0xbe/0xdf
[ 97.139188][ T6264] ? __pfx_bad_page+0x10/0x10
[ 97.139200][ T6264] ? page_bad_reason+0x98/0x200
[ 97.139213][ T6264] __free_frozen_pages+0x7d1/0x1090
[ 97.139235][ T6264] ? trace_irq_enable.constprop.0+0x122/0x160
[ 97.139257][ T6264] page_frag_free+0x199/0x1f0
[ 97.139275][ T6264] __xdp_return+0x3b6/0x990
[ 97.139293][ T6264] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 97.139334][ T6264] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 97.139350][ T6264] bpf_prog_run_generic_xdp+0x614/0x1610
[ 97.139374][ T6264] do_xdp_generic+0x92e/0x12c0
[ 97.139392][ T6264] ? __pfx_do_xdp_generic+0x10/0x10
[ 97.139417][ T6264] tun_get_user+0x1c1c/0x3c20
[ 97.139436][ T6264] ? futex_hash+0x311/0x400
[ 97.139457][ T6264] ? lock_release+0x24d/0x310
[ 97.139476][ T6264] ? __pfx_tun_get_user+0x10/0x10
[ 97.139492][ T6264] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 97.139519][ T6264] ? tun_get+0x191/0x370
[ 97.139531][ T6264] ? rcu_is_watching+0x12/0xc0
[ 97.139554][ T6264] ? tun_get+0x191/0x370
[ 97.139567][ T6264] ? lock_release+0x24d/0x310
[ 97.139591][ T6264] tun_chr_write_iter+0xdc/0x200
[ 97.139608][ T6264] vfs_write+0x6ac/0x1050
[ 97.139632][ T6264] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 97.139649][ T6264] ? __pfx_vfs_write+0x10/0x10
[ 97.139672][ T6264] ? lock_release+0x24d/0x310
[ 97.139694][ T6264] ksys_write+0x12a/0x250
[ 97.139717][ T6264] ? __pfx_ksys_write+0x10/0x10
[ 97.139739][ T6264] ? rcu_is_watching+0x12/0xc0
[ 97.139762][ T6264] do_syscall_64+0x115/0x870
[ 97.139782][ T6264] ? clear_bhb_loop+0x40/0x90
[ 97.139801][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 97.139816][ T6264] RIP: 0033:0x7f9f6e95d68e
[ 97.139828][ T6264] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 97.139841][ T6264] RSP: 002b:00007f9f6f7edfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 97.139857][ T6264] RAX: ffffffffffffffda RBX: 00007f9f6f7ee6c0 RCX: 00007f9f6e95d68e
[ 97.139867][ T6264] RDX: 000000000000fe54 RSI: 0000200000001b00 RDI: 00000000000000c8
[ 97.139877][ T6264] RBP: 00007f9f6ea32e6f R08: 0000000000000000 R09: 0000000000000000
[ 97.139886][ T6264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 97.139896][ T6264] R13: 00007f9f6ec16038 R14: 00007f9f6ec15fa0 R15: 00007fff34da8ef8
[ 97.139911][ T6264]
[ 97.139922][ T6264] BUG: Bad page state in process syz.0.18 pfn:357c7
[ 97.235689][ T6264] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x357c7
[ 97.239238][ T6264] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 97.241679][ T6264] raw: 00fff00000000000 dead000000000040 ffff888022fa0000 0000000000000000
[ 97.244688][ T6264] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000
[ 97.247637][ T6264] page dumped because: page_pool leak
[ 97.249617][ T6264] page_owner tracks the page as allocated
[ 97.251641][ T6264] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6264, tgid 6263 (syz.0.18), ts 95517745437, free_ts 93344186694
[ 97.256344][ T6264] post_alloc_hook+0xfd/0x120
[ 97.257787][ T6264] get_page_from_freelist+0xf48/0x3530
[ 97.259481][ T6264] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 97.261239][ T6264] alloc_pages_bulk_noprof+0x5de/0x13c0
[ 97.262843][ T6264] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 97.264625][ T6264] page_pool_alloc_netmems+0xc4/0x1a0
[ 97.266199][ T6264] skb_pp_cow_data+0x975/0x1140
[ 97.267719][ T6264] skb_cow_data_for_xdp+0x88/0xb0
[ 97.269582][ T6264] do_xdp_generic+0x56b/0x12c0
[ 97.271344][ T6264] tun_get_user+0x1c1c/0x3c20
[ 97.272967][ T6264] tun_chr_write_iter+0xdc/0x200
[ 97.274671][ T6264] vfs_write+0x6ac/0x1050
[ 97.276338][ T6264] ksys_write+0x12a/0x250
[ 97.278006][ T6264] do_syscall_64+0x115/0x870
[ 97.279710][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 97.281830][ T6264] page last free pid 23 tgid 23 stack trace:
[ 97.283824][ T6264] __free_frozen_pages+0x79f/0x1090
[ 97.285740][ T6264] rcu_core+0x5a2/0x10d0
[ 97.287049][ T6264] handle_softirqs+0x1ea/0x9b0
[ 97.288922][ T6264] run_ksoftirqd+0x38/0x60
[ 97.290567][ T6264] smpboot_thread_fn+0x3d3/0xaa0
[ 97.292346][ T6264] kthread+0x370/0x450
[ 97.293863][ T6264] ret_from_fork+0x72b/0xd50
[ 97.295605][ T6264] ret_from_fork_asm+0x1a/0x30
[ 97.297378][ T6264] Modules linked in:
2026/08/01 21:04:42 executed programs: 3
[ 97.298766][ T6264] CPU: 2 UID: 0 PID: 6264 Comm: syz.0.18 Tainted: G B syzkaller #0 PREEMPT(full)
[ 97.298804][ T6264] Tainted: [B]=BAD_PAGE
[ 97.298809][ T6264] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 97.298820][ T6264] Call Trace:
[ 97.298826][ T6264]
[ 97.298832][ T6264] dump_stack_lvl+0x100/0x190
[ 97.298853][ T6264] bad_page.cold+0xbe/0xdf
[ 97.298877][ T6264] ? __pfx_bad_page+0x10/0x10
[ 97.298895][ T6264] ? page_bad_reason+0x98/0x200
[ 97.298913][ T6264] __free_frozen_pages+0x7d1/0x1090
[ 97.298938][ T6264] ? trace_irq_enable.constprop.0+0x122/0x160
[ 97.298959][ T6264] page_frag_free+0x199/0x1f0
[ 97.298975][ T6264] __xdp_return+0x3b6/0x990
[ 97.298993][ T6264] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 97.299012][ T6264] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 97.299025][ T6264] bpf_prog_run_generic_xdp+0x614/0x1610
[ 97.299048][ T6264] do_xdp_generic+0x92e/0x12c0
[ 97.299065][ T6264] ? __pfx_do_xdp_generic+0x10/0x10
[ 97.299089][ T6264] tun_get_user+0x1c1c/0x3c20
[ 97.299104][ T6264] ? futex_hash+0x311/0x400
[ 97.299123][ T6264] ? lock_release+0x24d/0x310
[ 97.299143][ T6264] ? __pfx_tun_get_user+0x10/0x10
[ 97.299159][ T6264] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 97.299186][ T6264] ? tun_get+0x191/0x370
[ 97.299197][ T6264] ? rcu_is_watching+0x12/0xc0
[ 97.299218][ T6264] ? tun_get+0x191/0x370
[ 97.299229][ T6264] ? lock_release+0x24d/0x310
[ 97.299248][ T6264] tun_chr_write_iter+0xdc/0x200
[ 97.299264][ T6264] vfs_write+0x6ac/0x1050
[ 97.299289][ T6264] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 97.299325][ T6264] ? __pfx_vfs_write+0x10/0x10
[ 97.299350][ T6264] ? lock_release+0x24d/0x310
[ 97.299373][ T6264] ksys_write+0x12a/0x250
[ 97.299395][ T6264] ? __pfx_ksys_write+0x10/0x10
[ 97.299420][ T6264] ? rcu_is_watching+0x12/0xc0
[ 97.299443][ T6264] do_syscall_64+0x115/0x870
[ 97.299458][ T6264] ? clear_bhb_loop+0x40/0x90
[ 97.299476][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 97.299493][ T6264] RIP: 0033:0x7f9f6e95d68e
[ 97.299506][ T6264] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 97.299520][ T6264] RSP: 002b:00007f9f6f7edfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 97.299536][ T6264] RAX: ffffffffffffffda RBX: 00007f9f6f7ee6c0 RCX: 00007f9f6e95d68e
[ 97.299546][ T6264] RDX: 000000000000fe54 RSI: 0000200000001b00 RDI: 00000000000000c8
[ 97.299556][ T6264] RBP: 00007f9f6ea32e6f R08: 0000000000000000 R09: 0000000000000000
[ 97.299566][ T6264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 97.299575][ T6264] R13: 00007f9f6ec16038 R14: 00007f9f6ec15fa0 R15: 00007fff34da8ef8
[ 97.299592][ T6264]
[ 97.395976][ T6266] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3203d
[ 97.399473][ T6266] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 97.402208][ T6266] raw: 00fff00000000000 dead000000000040 ffff888022fa6000 0000000000000000
[ 97.405432][ T6266] raw: 0000000000000000 3fffffffffffffff 00000000ffffffff 0000000000000000
[ 97.408671][ T6266] page dumped because: VM_BUG_ON_PAGE(page_ref_count(page) == 0)
[ 97.411679][ T6266] page_owner tracks the page as allocated
[ 97.413873][ T6266] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6257, tgid 6256 (syz.0.17), ts 93646833836, free_ts 93601478210
[ 97.419958][ T6266] post_alloc_hook+0xfd/0x120
[ 97.421389][ T6266] get_page_from_freelist+0xf48/0x3530
[ 97.423212][ T6266] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 97.425476][ T6266] alloc_pages_bulk_noprof+0x5de/0x13c0
[ 97.427278][ T6266] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 97.429135][ T6266] page_pool_alloc_netmems+0xc4/0x1a0
[ 97.431187][ T6266] page_pool_alloc_frag_netmem+0x21d/0xa10
[ 97.433353][ T6266] skb_pp_cow_data+0x507/0x1140
[ 97.435182][ T6266] skb_cow_data_for_xdp+0x88/0xb0
[ 97.436977][ T6266] do_xdp_generic+0x56b/0x12c0
[ 97.438889][ T6266] tun_get_user+0x1c1c/0x3c20
[ 97.440568][ T6266] tun_chr_write_iter+0xdc/0x200
[ 97.442337][ T6266] vfs_write+0x6ac/0x1050
[ 97.444007][ T6266] ksys_write+0x12a/0x250
[ 97.445710][ T6266] do_syscall_64+0x115/0x870
[ 97.447509][ T6266] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 97.449889][ T6266] page last free pid 34 tgid 34 stack trace:
[ 97.452148][ T6266] __free_frozen_pages+0x79f/0x1090
[ 97.454105][ T6266] kasan_depopulate_vmalloc_pte+0x5d/0x80
[ 97.456242][ T6266] __apply_to_page_range+0xb1d/0x1520
[ 97.458527][ T6266] __kasan_release_vmalloc+0xd7/0xe0
[ 97.460609][ T6266] purge_vmap_node+0x210/0xb40
[ 97.462471][ T6266] __purge_vmap_area_lazy+0x90a/0xc00
[ 97.464493][ T6266] drain_vmap_area_work+0x27/0x40
[ 97.466346][ T6266] process_one_work+0xa23/0x1940
[ 97.468253][ T6266] worker_thread+0x5ef/0xe50
[ 97.470064][ T6266] kthread+0x370/0x450
[ 97.471686][ T6266] ret_from_fork+0x72b/0xd50
[ 97.473501][ T6266] ret_from_fork_asm+0x1a/0x30
[ 97.475386][ T6266] ------------[ cut here ]------------
[ 97.477283][ T6266] kernel BUG at ./include/linux/mm.h:1810!
[ 97.479640][ T6266] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI
[ 97.482016][ T6266] CPU: 3 UID: 0 PID: 6266 Comm: syz.0.19 Tainted: G B syzkaller #0 PREEMPT(full)
[ 97.486030][ T6266] Tainted: [B]=BAD_PAGE
[ 97.487669][ T6266] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 97.491473][ T6266] RIP: 0010:page_frag_free+0x11a/0x1f0
[ 97.493540][ T6266] Code: ed 75 29 e8 38 fe 9c ff 48 83 c4 08 5b 5d 41 5c c3 cc cc cc cc e8 26 fe 9c ff 48 c7 c6 c0 ab e1 8b 48 89 df e8 f7 a7 ee ff 90 <0f> 0b e8 0f fe 9c ff be 08 00 00 00 48 89 df e8 52 8d 0d 00 48 89
[ 97.500768][ T6266] RSP: 0018:ffffc90004367720 EFLAGS: 00010293
[ 97.503088][ T6266] RAX: 0000000000000000 RBX: ffffea0000c80f40 RCX: ffffffff828705f7
[ 97.506094][ T6266] RDX: ffff88802b5e0000 RSI: ffffffff825c0c48 RDI: ffff88802b5e04c4
[ 97.509193][ T6266] RBP: ffffea0000c80f74 R08: 0000000000000000 R09: 0000000000000000
[ 97.512224][ T6266] R10: 0000000000000000 R11: 6f72665f74657220 R12: 0000000000000000
[ 97.515201][ T6266] R13: 0000000000000000 R14: 0000000000000000 R15: 000000000000bc49
[ 97.518218][ T6266] FS: 00007f9f6f7ee6c0(0000) GS:ffff8880d60d8000(0000) knlGS:0000000000000000
[ 97.521548][ T6266] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 97.524047][ T6266] CR2: 0000200000011000 CR3: 000000002bed5000 CR4: 0000000000352ef0
[ 97.527086][ T6266] Call Trace:
[ 97.528428][ T6266]
[ 97.529582][ T6266] __xdp_return+0x3b6/0x990
[ 97.531289][ T6266] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 97.533203][ T6266] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 97.535235][ T6266] bpf_prog_run_generic_xdp+0x614/0x1610
[ 97.537358][ T6266] do_xdp_generic+0x92e/0x12c0
[ 97.537970][ T64] Bluetooth: hci0: command tx timeout
[ 97.539190][ T6266] ? __pfx_do_xdp_generic+0x10/0x10
[ 97.539221][ T6266] tun_get_user+0x1c1c/0x3c20
[ 97.544655][ T6266] ? futex_hash+0x311/0x400
[ 97.546386][ T6266] ? lock_release+0x24d/0x310
[ 97.548203][ T6266] ? __pfx_tun_get_user+0x10/0x10
[ 97.550066][ T6266] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 97.552136][ T6266] ? tun_get+0x191/0x370
[ 97.553743][ T6266] ? rcu_is_watching+0x12/0xc0
[ 97.555564][ T6266] ? tun_get+0x191/0x370
[ 97.557192][ T6266] ? lock_release+0x24d/0x310
[ 97.558992][ T6266] tun_chr_write_iter+0xdc/0x200
[ 97.560879][ T6266] vfs_write+0x6ac/0x1050
[ 97.562535][ T6266] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 97.564620][ T6266] ? __pfx_vfs_write+0x10/0x10
[ 97.566461][ T6266] ? lock_release+0x24d/0x310
[ 97.568308][ T6266] ksys_write+0x12a/0x250
[ 97.569900][ T6266] ? __pfx_ksys_write+0x10/0x10
[ 97.571746][ T6266] ? rcu_is_watching+0x12/0xc0
[ 97.573618][ T6266] do_syscall_64+0x115/0x870
[ 97.575441][ T6266] ? clear_bhb_loop+0x40/0x90
[ 97.577285][ T6266] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 97.579523][ T6266] RIP: 0033:0x7f9f6e95d68e
[ 97.581200][ T6266] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 97.588385][ T6266] RSP: 002b:00007f9f6f7edfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 97.591487][ T6266] RAX: ffffffffffffffda RBX: 00007f9f6f7ee6c0 RCX: 00007f9f6e95d68e
[ 97.593858][ T6266] RDX: 000000000000fe54 RSI: 0000200000001b00 RDI: 00000000000000c8
[ 97.596142][ T6266] RBP: 00007f9f6ea32e6f R08: 0000000000000000 R09: 0000000000000000
[ 97.598450][ T6266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 97.600753][ T6266] R13: 00007f9f6ec16038 R14: 00007f9f6ec15fa0 R15: 00007fff34da8ef8
[ 97.603149][ T6266]
[ 97.604317][ T6266] Modules linked in:
[ 97.605572][ T6266] ---[ end trace 0000000000000000 ]---
[ 97.607449][ T6266] RIP: 0010:page_frag_free+0x11a/0x1f0
[ 97.609145][ T6266] Code: ed 75 29 e8 38 fe 9c ff 48 83 c4 08 5b 5d 41 5c c3 cc cc cc cc e8 26 fe 9c ff 48 c7 c6 c0 ab e1 8b 48 89 df e8 f7 a7 ee ff 90 <0f> 0b e8 0f fe 9c ff be 08 00 00 00 48 89 df e8 52 8d 0d 00 48 89
[ 97.614718][ T6266] RSP: 0018:ffffc90004367720 EFLAGS: 00010293
[ 97.616530][ T6266] RAX: 0000000000000000 RBX: ffffea0000c80f40 RCX: ffffffff828705f7
[ 97.618906][ T6266] RDX: ffff88802b5e0000 RSI: ffffffff825c0c48 RDI: ffff88802b5e04c4
[ 97.621199][ T6266] RBP: ffffea0000c80f74 R08: 0000000000000000 R09: 0000000000000000
[ 97.623507][ T6266] R10: 0000000000000000 R11: 6f72665f74657220 R12: 0000000000000000
[ 97.625759][ T6266] R13: 0000000000000000 R14: 0000000000000000 R15: 000000000000bc49
[ 97.628218][ T6266] FS: 00007f9f6f7ee6c0(0000) GS:ffff8880d60d8000(0000) knlGS:0000000000000000
[ 97.630793][ T6266] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 97.632708][ T6266] CR2: 0000200000011000 CR3: 000000002bed5000 CR4: 0000000000352ef0
[ 97.635041][ T6266] Kernel panic - not syncing: Fatal exception in interrupt
[ 97.638032][ T6266] Kernel Offset: disabled
[ 97.639325][ T6266] Rebooting in 86400 seconds..