[ 74.563529][ T40] audit: type=1400 audit(1780133291.780:209): avc: denied { transition } for pid=5965 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 74.571703][ T40] audit: type=1400 audit(1780133291.780:210): avc: denied { noatsecure } for pid=5965 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 74.579040][ T40] audit: type=1400 audit(1780133291.790:211): avc: denied { rlimitinh } for pid=5965 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 74.584900][ T40] audit: type=1400 audit(1780133291.790:212): avc: denied { siginh } for pid=5965 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 76.201702][ T1438] ieee802154 phy0 wpan0: encryption failed: -22
[ 76.204490][ T1438] ieee802154 phy1 wpan1: encryption failed: -22
[ 78.939518][ T40] audit: type=1400 audit(1780133296.150:213): avc: denied { write } for pid=5971 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 78.980937][ T40] audit: type=1400 audit(1780133296.200:214): avc: denied { write } for pid=5974 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 79.318505][ T40] audit: type=1400 audit(1780133296.530:215): avc: denied { write } for pid=5979 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 79.378884][ T40] audit: type=1400 audit(1780133296.590:216): avc: denied { write } for pid=5984 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
Warning: Permanently added '[localhost]:41688' (ED25519) to the list of known hosts.
[ 80.075277][ T40] audit: type=1400 audit(1780133297.290:217): avc: denied { write } for pid=5997 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 80.139274][ T40] audit: type=1400 audit(1780133297.350:218): avc: denied { write } for pid=6000 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 80.245896][ T40] audit: type=1400 audit(1780133297.460:219): avc: denied { write } for pid=6003 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 80.307101][ T40] audit: type=1400 audit(1780133297.520:220): avc: denied { write } for pid=6006 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
2026/05/30 09:28:18 parsed 1 programs
[ 83.545980][ T40] audit: type=1400 audit(1780133300.760:221): avc: denied { read write } for pid=6012 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 83.554506][ T40] audit: type=1400 audit(1780133300.770:222): avc: denied { open } for pid=6012 comm="syz-executor" path="/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 83.613581][ T40] audit: type=1400 audit(1780133300.830:223): avc: denied { unlink } for pid=6012 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 84.085165][ T40] audit: type=1400 audit(1780133301.300:224): avc: denied { relabelto } for pid=6014 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
Setting up swapspace version 1, size = 127995904 bytes
[ 84.835767][ T6012] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 86.444875][ T1346] cfg80211: failed to load regulatory.db
[ 88.144790][ T40] audit: type=1401 audit(1780133305.360:225): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768"
[ 88.193054][ T40] audit: type=1400 audit(1780133305.410:226): avc: denied { sys_module } for pid=6066 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[ 88.542375][ T6066] bridge0: port 1(bridge_slave_0) entered blocking state
[ 88.545355][ T6066] bridge0: port 1(bridge_slave_0) entered disabled state
[ 88.547645][ T6066] bridge_slave_0: entered allmulticast mode
[ 88.551195][ T6066] bridge_slave_0: entered promiscuous mode
[ 88.555450][ T6066] bridge0: port 2(bridge_slave_1) entered blocking state
[ 88.558204][ T6066] bridge0: port 2(bridge_slave_1) entered disabled state
[ 88.560925][ T6066] bridge_slave_1: entered allmulticast mode
[ 88.564408][ T6066] bridge_slave_1: entered promiscuous mode
[ 88.583286][ T6066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 88.588186][ T6066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 88.682548][ T6066] team0: Port device team_slave_0 added
[ 88.686417][ T6066] team0: Port device team_slave_1 added
[ 88.704930][ T6066] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 88.707667][ T6066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 88.717568][ T6066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 88.723141][ T6066] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 88.725829][ T6066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 88.735732][ T6066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 88.769914][ T6066] hsr_slave_0: entered promiscuous mode
[ 88.772864][ T6066] hsr_slave_1: entered promiscuous mode
[ 88.908811][ T40] audit: type=1400 audit(1780133306.120:227): avc: denied { write } for pid=6082 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 88.966975][ T40] audit: type=1400 audit(1780133306.180:228): avc: denied { write } for pid=6085 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 89.062628][ T40] audit: type=1400 audit(1780133306.280:229): avc: denied { write } for pid=6088 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 89.131614][ T40] audit: type=1400 audit(1780133306.350:230): avc: denied { write } for pid=6091 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 89.191512][ T40] audit: type=1400 audit(1780133306.410:231): avc: denied { write } for pid=6093 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 89.251815][ T40] audit: type=1400 audit(1780133306.470:232): avc: denied { write } for pid=6096 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 89.324324][ T40] audit: type=1400 audit(1780133306.540:233): avc: denied { write } for pid=6098 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 89.385832][ T40] audit: type=1400 audit(1780133306.600:234): avc: denied { write } for pid=6101 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 89.470907][ T6066] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 89.476453][ T6066] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 89.480819][ T6066] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 89.486021][ T6066] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 89.492763][ T6066] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 89.498141][ T6066] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 89.503302][ T6066] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 89.508909][ T6066] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 89.571886][ T6066] 8021q: adding VLAN 0 to HW filter on device bond0
[ 89.580503][ T6066] 8021q: adding VLAN 0 to HW filter on device team0
[ 89.585842][ T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 89.588081][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 89.593352][ T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 89.595547][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 89.621991][ T6066] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 89.855257][ T6066] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 89.877674][ T6066] veth0_vlan: entered promiscuous mode
[ 89.884549][ T6066] veth1_vlan: entered promiscuous mode
[ 89.899911][ T6066] veth0_macvtap: entered promiscuous mode
[ 89.905910][ T6066] veth1_macvtap: entered promiscuous mode
[ 89.920548][ T6066] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 89.927607][ T6066] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 89.938291][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 89.943847][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 89.947507][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 89.951109][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 90.036237][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 90.124482][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 90.126829][ T62] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 90.135153][ T62] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 90.138165][ T62] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 90.141710][ T62] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 90.144478][ T62] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 90.217487][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 90.323059][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 90.397021][ T476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 90.400523][ T476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 90.426399][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 90.430703][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/05/30 09:28:27 executed programs: 0
[ 90.760070][ T5095] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 90.763902][ T5095] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 90.767331][ T5095] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 90.774583][ T5095] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 90.778757][ T5095] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 91.163088][ T6187] bridge0: port 1(bridge_slave_0) entered blocking state
[ 91.165956][ T6187] bridge0: port 1(bridge_slave_0) entered disabled state
[ 91.168238][ T6187] bridge_slave_0: entered allmulticast mode
[ 91.171986][ T6187] bridge_slave_0: entered promiscuous mode
[ 91.176618][ T6187] bridge0: port 2(bridge_slave_1) entered blocking state
[ 91.179086][ T6187] bridge0: port 2(bridge_slave_1) entered disabled state
[ 91.181439][ T6187] bridge_slave_1: entered allmulticast mode
[ 91.184652][ T6187] bridge_slave_1: entered promiscuous mode
[ 91.205301][ T6187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 91.210588][ T6187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 91.228358][ T6187] team0: Port device team_slave_0 added
[ 91.231890][ T6187] team0: Port device team_slave_1 added
[ 91.247004][ T6187] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 91.249768][ T6187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 91.258340][ T6187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 91.263171][ T6187] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 91.265585][ T6187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 91.274374][ T6187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 91.304526][ T6187] hsr_slave_0: entered promiscuous mode
[ 91.307441][ T6187] hsr_slave_1: entered promiscuous mode
[ 91.310235][ T6187] debugfs: 'hsr0' already exists in 'hsr'
[ 91.312506][ T6187] Cannot create hsr debugfs directory
[ 92.786331][ T13] bridge_slave_1: left allmulticast mode
[ 92.788566][ T13] bridge_slave_1: left promiscuous mode
[ 92.791262][ T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 92.796946][ T13] bridge_slave_0: left allmulticast mode
[ 92.799390][ T13] bridge_slave_0: left promiscuous mode
[ 92.801739][ T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 92.844328][ T5095] Bluetooth: hci0: command tx timeout
[ 92.963022][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 92.968880][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 92.974354][ T13] bond0 (unregistering): Released all slaves
[ 93.114632][ T13] hsr_slave_0: left promiscuous mode
[ 93.116885][ T13] hsr_slave_1: left promiscuous mode
[ 93.119265][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 93.122245][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 93.124924][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 93.127259][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 93.132994][ T13] veth1_macvtap: left promiscuous mode
[ 93.134712][ T13] veth0_macvtap: left promiscuous mode
[ 93.136436][ T13] veth1_vlan: left promiscuous mode
[ 93.138060][ T13] veth0_vlan: left promiscuous mode
[ 93.302553][ T13] team0 (unregistering): Port device team_slave_1 removed
[ 93.323995][ T13] team0 (unregistering): Port device team_slave_0 removed
[ 93.380681][ T5446] 8021q: adding VLAN 0 to HW filter on device eth2
[ 93.466529][ T40] kauditd_printk_skb: 20 callbacks suppressed
[ 93.466546][ T40] audit: type=1400 audit(1780133310.680:255): avc: denied { write } for pid=6212 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 93.527234][ T40] audit: type=1400 audit(1780133310.740:256): avc: denied { write } for pid=6215 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 93.623018][ T40] audit: type=1400 audit(1780133310.840:257): avc: denied { write } for pid=6218 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 93.684998][ T40] audit: type=1400 audit(1780133310.900:258): avc: denied { write } for pid=6221 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 93.783376][ T40] audit: type=1400 audit(1780133311.000:259): avc: denied { write } for pid=6223 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 93.839161][ T6187] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 93.840201][ T40] audit: type=1400 audit(1780133311.060:260): avc: denied { write } for pid=6226 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 93.855447][ T6187] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 93.858228][ T6187] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 93.862506][ T6187] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 93.865271][ T6187] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 93.869516][ T6187] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 93.872432][ T6187] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 93.877082][ T6187] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 93.939176][ T6187] 8021q: adding VLAN 0 to HW filter on device bond0
[ 93.954899][ T6187] 8021q: adding VLAN 0 to HW filter on device team0
[ 93.961937][ T476] bridge0: port 1(bridge_slave_0) entered blocking state
[ 93.964239][ T476] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 93.971139][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 93.973580][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 94.302698][ T6187] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 94.341755][ T6187] veth0_vlan: entered promiscuous mode
[ 94.347160][ T6187] veth1_vlan: entered promiscuous mode
[ 94.363939][ T6187] veth0_macvtap: entered promiscuous mode
[ 94.368028][ T6187] veth1_macvtap: entered promiscuous mode
[ 94.381018][ T6187] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 94.399604][ T6187] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 94.406325][ T476] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 94.411849][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 94.415243][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 94.418955][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 94.456180][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 94.458582][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 94.471386][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 94.473816][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 94.513993][ T40] audit: type=1400 audit(1780133311.730:261): avc: denied { prog_load } for pid=6244 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 94.522347][ T40] audit: type=1400 audit(1780133311.730:262): avc: denied { bpf } for pid=6244 comm="syz.0.17" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 94.523615][ T6245] BUG: Bad page state in process syz.0.17 pfn:309c3
[ 94.530994][ T40] audit: type=1400 audit(1780133311.730:263): avc: denied { perfmon } for pid=6244 comm="syz.0.17" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 94.532794][ T6245] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x309c3
[ 94.532808][ T6245] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 94.532826][ T6245] raw: 00fff00000000000 dead000000000040 ffff888022e5a000 0000000000000000
[ 94.542510][ T40] audit: type=1400 audit(1780133311.730:264): avc: denied { prog_run } for pid=6244 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 94.545804][ T6245] raw: 0000000000000000 3fffffffffffffff 00000000ffffffff 0000000000000000
[ 94.545818][ T6245] page dumped because: page_pool leak
[ 94.545829][ T6245] page_owner tracks the page as allocated
[ 94.545839][ T6245] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6245, tgid 6244 (syz.0.17), ts 94523491708, free_ts 94231560936
[ 94.574301][ T6245] post_alloc_hook+0xfd/0x120
[ 94.576179][ T6245] get_page_from_freelist+0x11a6/0x3410
[ 94.578432][ T6245] __alloc_frozen_pages_noprof+0x27c/0x2bc0
[ 94.580804][ T6245] alloc_pages_bulk_noprof+0x649/0x1360
[ 94.583092][ T6245] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 94.585600][ T6245] page_pool_alloc_netmems+0xc4/0x1a0
[ 94.587787][ T6245] page_pool_alloc_frag_netmem+0x21d/0xa00
[ 94.590252][ T6245] skb_pp_cow_data+0x5a7/0x1220
[ 94.592227][ T6245] skb_cow_data_for_xdp+0x88/0xb0
[ 94.594307][ T6245] do_xdp_generic+0x56b/0x12c0
[ 94.596274][ T6245] tun_get_user+0x1c1c/0x3c20
[ 94.598235][ T6245] tun_chr_write_iter+0xdc/0x200
[ 94.600374][ T6245] vfs_write+0x6ac/0x1070
[ 94.602172][ T6245] ksys_write+0x12a/0x250
[ 94.603967][ T6245] do_syscall_64+0x115/0x870
[ 94.605888][ T6245] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.607942][ T6245] page last free pid 0 tgid 0 stack trace:
[ 94.609911][ T6245] __free_frozen_pages+0x794/0x10a0
[ 94.612040][ T6245] tlb_remove_table_rcu+0x2cf/0x380
[ 94.614167][ T6245] rcu_core+0x5a2/0x10d0
[ 94.615866][ T6245] handle_softirqs+0x1ea/0xa00
[ 94.617827][ T6245] __irq_exit_rcu+0x162/0x210
[ 94.619803][ T6245] irq_exit_rcu+0x9/0x30
[ 94.621578][ T6245] sysvec_apic_timer_interrupt+0xa3/0xc0
[ 94.623867][ T6245] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 94.626327][ T6245] Modules linked in:
[ 94.627948][ T6245] CPU: 0 UID: 0 PID: 6245 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 94.627969][ T6245] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 94.627979][ T6245] Call Trace:
[ 94.627987][ T6245]
[ 94.627995][ T6245] dump_stack_lvl+0x100/0x190
[ 94.628018][ T6245] bad_page.cold+0xbe/0xdf
[ 94.628045][ T6245] ? __pfx_bad_page+0x10/0x10
[ 94.628063][ T6245] ? rcu_is_watching+0x12/0xc0
[ 94.628089][ T6245] ? page_bad_reason+0x98/0x200
[ 94.628108][ T6245] __free_frozen_pages+0x7d6/0x10a0
[ 94.628138][ T6245] ? kasan_quarantine_put+0x104/0x240
[ 94.628166][ T6245] ? lockdep_hardirqs_on+0x78/0x100
[ 94.628192][ T6245] page_frag_free+0x199/0x1f0
[ 94.628212][ T6245] __xdp_return+0x3b6/0x990
[ 94.628238][ T6245] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 94.628269][ T6245] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 94.628287][ T6245] bpf_prog_run_generic_xdp+0x614/0x1610
[ 94.628321][ T6245] do_xdp_generic+0x92e/0x12c0
[ 94.628347][ T6245] ? __pfx_do_xdp_generic+0x10/0x10
[ 94.628370][ T6245] ? __lock_acquire+0x4a5/0x2630
[ 94.628411][ T6245] tun_get_user+0x1c1c/0x3c20
[ 94.628449][ T6245] ? __pfx_tun_get_user+0x10/0x10
[ 94.628475][ T6245] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 94.628510][ T6245] ? find_held_lock+0x2b/0x80
[ 94.628525][ T6245] ? tun_get+0x191/0x370
[ 94.628547][ T6245] ? tun_get+0x191/0x370
[ 94.628576][ T6245] tun_chr_write_iter+0xdc/0x200
[ 94.628605][ T6245] vfs_write+0x6ac/0x1070
[ 94.628626][ T6245] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 94.628655][ T6245] ? __pfx_vfs_write+0x10/0x10
[ 94.628673][ T6245] ? find_held_lock+0x2b/0x80
[ 94.628703][ T6245] ksys_write+0x12a/0x250
[ 94.628721][ T6245] ? __pfx_ksys_write+0x10/0x10
[ 94.628742][ T6245] ? rcu_is_watching+0x12/0xc0
[ 94.628771][ T6245] do_syscall_64+0x115/0x870
[ 94.628792][ T6245] ? clear_bhb_loop+0x40/0x90
[ 94.628812][ T6245] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.628830][ T6245] RIP: 0033:0x7f1cc575b80e
[ 94.628846][ T6245] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 94.628862][ T6245] RSP: 002b:00007f1cc66a8fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 94.628878][ T6245] RAX: ffffffffffffffda RBX: 00007f1cc66a96c0 RCX: 00007f1cc575b80e
[ 94.628890][ T6245] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8
[ 94.628900][ T6245] RBP: 00007f1cc582fee0 R08: 0000000000000000 R09: 0000000000000000
[ 94.628910][ T6245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 94.628920][ T6245] R13: 00007f1cc5a06038 R14: 00007f1cc5a05fa0 R15: 00007fff6ee09e88
[ 94.628944][ T6245]
[ 94.628951][ T6245] Disabling lock debugging due to kernel taint
[ 94.711506][ T6245] BUG: Bad page state in process syz.0.17 pfn:258a2
[ 94.713511][ T6245] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x258a2
[ 94.716495][ T6245] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 94.718646][ T6245] raw: 00fff00000000000 dead000000000040 ffff888022e5a000 0000000000000000
[ 94.721272][ T6245] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000
[ 94.723834][ T6245] page dumped because: page_pool leak
[ 94.725467][ T6245] page_owner tracks the page as allocated
[ 94.727179][ T6245] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6245, tgid 6244 (syz.0.17), ts 94523477914, free_ts 94231572891
[ 94.732176][ T6245] post_alloc_hook+0xfd/0x120
[ 94.733618][ T6245] get_page_from_freelist+0x11a6/0x3410
[ 94.735296][ T6245] __alloc_frozen_pages_noprof+0x27c/0x2bc0
[ 94.737086][ T6245] alloc_pages_bulk_noprof+0x649/0x1360
[ 94.738793][ T6245] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 94.740677][ T6245] page_pool_alloc_netmems+0xc4/0x1a0
[ 94.742309][ T6245] skb_pp_cow_data+0xa15/0x1220
[ 94.743803][ T6245] skb_cow_data_for_xdp+0x88/0xb0
[ 94.745337][ T6245] do_xdp_generic+0x56b/0x12c0
[ 94.746797][ T6245] tun_get_user+0x1c1c/0x3c20
[ 94.748235][ T6245] tun_chr_write_iter+0xdc/0x200
[ 94.749837][ T6245] vfs_write+0x6ac/0x1070
[ 94.751154][ T6245] ksys_write+0x12a/0x250
[ 94.752490][ T6245] do_syscall_64+0x115/0x870
[ 94.753910][ T6245] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.755701][ T6245] page last free pid 0 tgid 0 stack trace:
[ 94.757464][ T6245] __free_frozen_pages+0x794/0x10a0
[ 94.759054][ T6245] tlb_remove_table_rcu+0x2cf/0x380
[ 94.760690][ T6245] rcu_core+0x5a2/0x10d0
[ 94.761990][ T6245] handle_softirqs+0x1ea/0xa00
[ 94.763465][ T6245] __irq_exit_rcu+0x162/0x210
[ 94.764901][ T6245] irq_exit_rcu+0x9/0x30
[ 94.766208][ T6245] sysvec_apic_timer_interrupt+0xa3/0xc0
[ 94.767904][ T6245] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 94.769785][ T6245] Modules linked in:
[ 94.770983][ T6245] CPU: 0 UID: 0 PID: 6245 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 94.770998][ T6245] Tainted: [B]=BAD_PAGE
[ 94.771002][ T6245] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 94.771008][ T6245] Call Trace:
[ 94.771012][ T6245]
[ 94.771016][ T6245] dump_stack_lvl+0x100/0x190
[ 94.771029][ T6245] bad_page.cold+0xbe/0xdf
[ 94.771044][ T6245] ? __pfx_bad_page+0x10/0x10
[ 94.771053][ T6245] ? rcu_is_watching+0x12/0xc0
[ 94.771068][ T6245] ? page_bad_reason+0x98/0x200
[ 94.771078][ T6245] __free_frozen_pages+0x7d6/0x10a0
[ 94.771091][ T6245] ? kasan_quarantine_put+0x104/0x240
[ 94.771107][ T6245] ? lockdep_hardirqs_on+0x78/0x100
[ 94.771120][ T6245] page_frag_free+0x199/0x1f0
[ 94.771135][ T6245] __xdp_return+0x3b6/0x990
[ 94.771149][ T6245] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 94.771163][ T6245] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 94.771171][ T6245] bpf_prog_run_generic_xdp+0x614/0x1610
[ 94.771188][ T6245] do_xdp_generic+0x92e/0x12c0
[ 94.771201][ T6245] ? __pfx_do_xdp_generic+0x10/0x10
[ 94.771214][ T6245] ? __lock_acquire+0x4a5/0x2630
[ 94.771230][ T6245] tun_get_user+0x1c1c/0x3c20
[ 94.771248][ T6245] ? __pfx_tun_get_user+0x10/0x10
[ 94.771263][ T6245] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 94.771280][ T6245] ? find_held_lock+0x2b/0x80
[ 94.771289][ T6245] ? tun_get+0x191/0x370
[ 94.771302][ T6245] ? tun_get+0x191/0x370
[ 94.771316][ T6245] tun_chr_write_iter+0xdc/0x200
[ 94.771332][ T6245] vfs_write+0x6ac/0x1070
[ 94.771343][ T6245] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 94.771359][ T6245] ? __pfx_vfs_write+0x10/0x10
[ 94.771369][ T6245] ? find_held_lock+0x2b/0x80
[ 94.771380][ T6245] ksys_write+0x12a/0x250
[ 94.771391][ T6245] ? __pfx_ksys_write+0x10/0x10
[ 94.771402][ T6245] ? rcu_is_watching+0x12/0xc0
[ 94.771417][ T6245] do_syscall_64+0x115/0x870
[ 94.771429][ T6245] ? clear_bhb_loop+0x40/0x90
[ 94.771441][ T6245] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.771451][ T6245] RIP: 0033:0x7f1cc575b80e
[ 94.771459][ T6245] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 94.771469][ T6245] RSP: 002b:00007f1cc66a8fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 94.771479][ T6245] RAX: ffffffffffffffda RBX: 00007f1cc66a96c0 RCX: 00007f1cc575b80e
[ 94.771485][ T6245] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8
[ 94.771491][ T6245] RBP: 00007f1cc582fee0 R08: 0000000000000000 R09: 0000000000000000
[ 94.771497][ T6245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 94.771502][ T6245] R13: 00007f1cc5a06038 R14: 00007f1cc5a05fa0 R15: 00007fff6ee09e88
[ 94.771511][ T6245]
[ 94.771517][ T6245] BUG: Bad page state in process syz.0.17 pfn:30a7c
[ 94.858729][ T6245] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x30a7c
[ 94.862094][ T6245] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 94.864773][ T6245] raw: 00fff00000000000 dead000000000040 ffff888022e5a000 0000000000000000
[ 94.868013][ T6245] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000
[ 94.871313][ T6245] page dumped because: page_pool leak
[ 94.873356][ T6245] page_owner tracks the page as allocated
[ 94.875502][ T6245] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6245, tgid 6244 (syz.0.17), ts 94523464832, free_ts 94231596896
[ 94.881742][ T6245] post_alloc_hook+0xfd/0x120
[ 94.883538][ T6245] get_page_from_freelist+0x11a6/0x3410
[ 94.885646][ T6245] __alloc_frozen_pages_noprof+0x27c/0x2bc0
[ 94.887891][ T6245] alloc_pages_bulk_noprof+0x649/0x1360
[ 94.890092][ T6245] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 94.892393][ T6245] page_pool_alloc_netmems+0xc4/0x1a0
[ 94.894441][ T6245] skb_pp_cow_data+0xa15/0x1220
[ 94.896291][ T6245] skb_cow_data_for_xdp+0x88/0xb0
[ 94.898213][ T6245] do_xdp_generic+0x56b/0x12c0
[ 94.900128][ T6245] tun_get_user+0x1c1c/0x3c20
[ 94.901925][ T6245] tun_chr_write_iter+0xdc/0x200
[ 94.903818][ T6245] vfs_write+0x6ac/0x1070
[ 94.905478][ T6245] ksys_write+0x12a/0x250
[ 94.907123][ T6245] do_syscall_64+0x115/0x870
[ 94.908897][ T6245] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.911198][ T6245] page last free pid 0 tgid 0 stack trace:
[ 94.913411][ T6245] __free_frozen_pages+0x794/0x10a0
[ 94.915394][ T6245] tlb_remove_table_rcu+0x2cf/0x380
[ 94.917387][ T6245] rcu_core+0x5a2/0x10d0
[ 94.919037][ T6245] handle_softirqs+0x1ea/0xa00
[ 94.920958][ T6245] __irq_exit_rcu+0x162/0x210
[ 94.922785][ T6245] irq_exit_rcu+0x9/0x30
[ 94.924410][ T6245] sysvec_apic_timer_interrupt+0xa3/0xc0
[ 94.926551][ T6245] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 94.928828][ T6245] Modules linked in:
[ 94.929403][ T5095] Bluetooth: hci0: command tx timeout
[ 94.930394][ T6245] CPU: 0 UID: 0 PID: 6245 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 94.930411][ T6245] Tainted: [B]=BAD_PAGE
[ 94.930414][ T6245] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 94.930420][ T6245] Call Trace:
[ 94.930425][ T6245]
[ 94.930429][ T6245] dump_stack_lvl+0x100/0x190
[ 94.930442][ T6245] bad_page.cold+0xbe/0xdf
[ 94.930463][ T6245] ? __pfx_bad_page+0x10/0x10
[ 94.930477][ T6245] ? rcu_is_watching+0x12/0xc0
[ 94.930500][ T6245] ? page_bad_reason+0x98/0x200
[ 94.930515][ T6245] __free_frozen_pages+0x7d6/0x10a0
[ 94.930535][ T6245] ? kasan_quarantine_put+0x104/0x240
[ 94.930558][ T6245] ? lockdep_hardirqs_on+0x78/0x100
[ 94.930579][ T6245] page_frag_free+0x199/0x1f0
[ 94.930593][ T6245] __xdp_return+0x3b6/0x990
[ 94.930613][ T6245] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 94.930635][ T6245] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 94.930647][ T6245] bpf_prog_run_generic_xdp+0x614/0x1610
[ 94.930672][ T6245] do_xdp_generic+0x92e/0x12c0
[ 94.930693][ T6245] ? __pfx_do_xdp_generic+0x10/0x10
[ 94.930720][ T6245] ? __lock_acquire+0x4a5/0x2630
[ 94.930745][ T6245] tun_get_user+0x1c1c/0x3c20
[ 94.930774][ T6245] ? __pfx_tun_get_user+0x10/0x10
[ 94.930797][ T6245] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 94.930823][ T6245] ? find_held_lock+0x2b/0x80
[ 94.930836][ T6245] ? tun_get+0x191/0x370
[ 94.930855][ T6245] ? tun_get+0x191/0x370
[ 94.930877][ T6245] tun_chr_write_iter+0xdc/0x200
[ 94.930901][ T6245] vfs_write+0x6ac/0x1070
[ 94.930918][ T6245] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 94.930942][ T6245] ? __pfx_vfs_write+0x10/0x10
[ 94.930957][ T6245] ? find_held_lock+0x2b/0x80
[ 94.930975][ T6245] ksys_write+0x12a/0x250
[ 94.930992][ T6245] ? __pfx_ksys_write+0x10/0x10
[ 94.931009][ T6245] ? rcu_is_watching+0x12/0xc0
[ 94.931031][ T6245] do_syscall_64+0x115/0x870
[ 94.931050][ T6245] ? clear_bhb_loop+0x40/0x90
[ 94.931068][ T6245] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.931084][ T6245] RIP: 0033:0x7f1cc575b80e
[ 94.931095][ T6245] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 94.931110][ T6245] RSP: 002b:00007f1cc66a8fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 94.931124][ T6245] RAX: ffffffffffffffda RBX: 00007f1cc66a96c0 RCX: 00007f1cc575b80e
[ 94.931134][ T6245] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8
[ 94.931144][ T6245] RBP: 00007f1cc582fee0 R08: 0000000000000000 R09: 0000000000000000
[ 94.931153][ T6245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 94.931161][ T6245] R13: 00007f1cc5a06038 R14: 00007f1cc5a05fa0 R15: 00007fff6ee09e88
[ 94.931176][ T6245]
[ 94.931184][ T6245] BUG: Bad page state in process syz.0.17 pfn:30a7d
[ 95.036180][ T6245] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x30a7d
[ 95.039576][ T6245] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 95.042258][ T6245] raw: 00fff00000000000 dead000000000040 ffff888022e5a000 0000000000000000
[ 95.045503][ T6245] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000
[ 95.048745][ T6245] page dumped because: page_pool leak
[ 95.050843][ T6245] page_owner tracks the page as allocated
[ 95.052982][ T6245] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6245, tgid 6244 (syz.0.17), ts 94523451427, free_ts 94231617425
[ 95.059444][ T6245] post_alloc_hook+0xfd/0x120
[ 95.061274][ T6245] get_page_from_freelist+0x11a6/0x3410
[ 95.063413][ T6245] __alloc_frozen_pages_noprof+0x27c/0x2bc0
[ 95.065698][ T6245] alloc_pages_bulk_noprof+0x649/0x1360
[ 95.067832][ T6245] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 95.070264][ T6245] page_pool_alloc_netmems+0xc4/0x1a0
[ 95.072319][ T6245] skb_pp_cow_data+0xa15/0x1220
[ 95.074203][ T6245] skb_cow_data_for_xdp+0x88/0xb0
[ 95.076159][ T6245] do_xdp_generic+0x56b/0x12c0
[ 95.078027][ T6245] tun_get_user+0x1c1c/0x3c20
[ 95.079914][ T6245] tun_chr_write_iter+0xdc/0x200
[ 95.081834][ T6245] vfs_write+0x6ac/0x1070
[ 95.083515][ T6245] ksys_write+0x12a/0x250
[ 95.085180][ T6245] do_syscall_64+0x115/0x870
[ 95.087008][ T6245] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.089377][ T6245] page last free pid 0 tgid 0 stack trace:
[ 95.091600][ T6245] __free_frozen_pages+0x794/0x10a0
[ 95.093605][ T6245] tlb_remove_table_rcu+0x2cf/0x380
[ 95.095600][ T6245] rcu_core+0x5a2/0x10d0
[ 95.097246][ T6245] handle_softirqs+0x1ea/0xa00
[ 95.099110][ T6245] __irq_exit_rcu+0x162/0x210
[ 95.100980][ T6245] irq_exit_rcu+0x9/0x30
[ 95.102634][ T6245] sysvec_apic_timer_interrupt+0xa3/0xc0
[ 95.104790][ T6245] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 95.107084][ T6245] Modules linked in:
[ 95.108618][ T6245] CPU: 0 UID: 0 PID: 6245 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 95.108635][ T6245] Tainted: [B]=BAD_PAGE
[ 95.108639][ T6245] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 95.108645][ T6245] Call Trace:
[ 95.108650][ T6245]
[ 95.108654][ T6245] dump_stack_lvl+0x100/0x190
[ 95.108667][ T6245] bad_page.cold+0xbe/0xdf
[ 95.108682][ T6245] ? __pfx_bad_page+0x10/0x10
[ 95.108692][ T6245] ? rcu_is_watching+0x12/0xc0
[ 95.108707][ T6245] ? page_bad_reason+0x98/0x200
[ 95.108717][ T6245] __free_frozen_pages+0x7d6/0x10a0
[ 95.108730][ T6245] ? kasan_quarantine_put+0x104/0x240
[ 95.108746][ T6245] ? lockdep_hardirqs_on+0x78/0x100
[ 95.108760][ T6245] page_frag_free+0x199/0x1f0
[ 95.108770][ T6245] __xdp_return+0x3b6/0x990
[ 95.108783][ T6245] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 95.108797][ T6245] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 95.108806][ T6245] bpf_prog_run_generic_xdp+0x614/0x1610
[ 95.108822][ T6245] do_xdp_generic+0x92e/0x12c0
[ 95.108835][ T6245] ? __pfx_do_xdp_generic+0x10/0x10
[ 95.108848][ T6245] ? __lock_acquire+0x4a5/0x2630
[ 95.108865][ T6245] tun_get_user+0x1c1c/0x3c20
[ 95.108883][ T6245] ? __pfx_tun_get_user+0x10/0x10
[ 95.108899][ T6245] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 95.108915][ T6245] ? find_held_lock+0x2b/0x80
[ 95.108924][ T6245] ? tun_get+0x191/0x370
[ 95.108938][ T6245] ? tun_get+0x191/0x370
[ 95.108952][ T6245] tun_chr_write_iter+0xdc/0x200
[ 95.108968][ T6245] vfs_write+0x6ac/0x1070
[ 95.108979][ T6245] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 95.108995][ T6245] ? __pfx_vfs_write+0x10/0x10
[ 95.109005][ T6245] ? find_held_lock+0x2b/0x80
[ 95.109017][ T6245] ksys_write+0x12a/0x250
[ 95.109027][ T6245] ? __pfx_ksys_write+0x10/0x10
[ 95.109038][ T6245] ? rcu_is_watching+0x12/0xc0
[ 95.109053][ T6245] do_syscall_64+0x115/0x870
[ 95.109066][ T6245] ? clear_bhb_loop+0x40/0x90
[ 95.109077][ T6245] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.109088][ T6245] RIP: 0033:0x7f1cc575b80e
[ 95.109096][ T6245] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 95.109105][ T6245] RSP: 002b:00007f1cc66a8fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 95.109115][ T6245] RAX: ffffffffffffffda RBX: 00007f1cc66a96c0 RCX: 00007f1cc575b80e
[ 95.109121][ T6245] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8
[ 95.109127][ T6245] RBP: 00007f1cc582fee0 R08: 0000000000000000 R09: 0000000000000000
[ 95.109137][ T6245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 95.109143][ T6245] R13: 00007f1cc5a06038 R14: 00007f1cc5a05fa0 R15: 00007fff6ee09e88
[ 95.109152][ T6245]
[ 95.109159][ T6245] BUG: Bad page state in process syz.0.17 pfn:379b3
[ 95.209854][ T6245] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x379b3
[ 95.212475][ T6245] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 95.214608][ T6245] raw: 00fff00000000000 dead000000000040 ffff888022e5a000 0000000000000000
[ 95.217220][ T6245] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000
[ 95.219859][ T6245] page dumped because: page_pool leak
[ 95.221489][ T6245] page_owner tracks the page as allocated
[ 95.223215][ T6245] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6245, tgid 6244 (syz.0.17), ts 94523438052, free_ts 94231624469
[ 95.228093][ T6245] post_alloc_hook+0xfd/0x120
[ 95.229637][ T6245] get_page_from_freelist+0x11a6/0x3410
[ 95.231312][ T6245] __alloc_frozen_pages_noprof+0x27c/0x2bc0
[ 95.233115][ T6245] alloc_pages_bulk_noprof+0x649/0x1360
[ 95.234824][ T6245] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 95.236672][ T6245] page_pool_alloc_netmems+0xc4/0x1a0
[ 95.238343][ T6245] skb_pp_cow_data+0xa15/0x1220
[ 95.239895][ T6245] skb_cow_data_for_xdp+0x88/0xb0
[ 95.241449][ T6245] do_xdp_generic+0x56b/0x12c0
[ 95.242925][ T6245] tun_get_user+0x1c1c/0x3c20
[ 95.244372][ T6245] tun_chr_write_iter+0xdc/0x200
[ 95.246016][ T6245] vfs_write+0x6ac/0x1070
[ 95.247669][ T6245] ksys_write+0x12a/0x250
[ 95.249411][ T6245] do_syscall_64+0x115/0x870
[ 95.251165][ T6245] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.253435][ T6245] page last free pid 0 tgid 0 stack trace:
[ 95.255695][ T6245] __free_frozen_pages+0x794/0x10a0
[ 95.257712][ T6245] tlb_remove_table_rcu+0x2cf/0x380
[ 95.259812][ T6245] rcu_core+0x5a2/0x10d0
[ 95.261469][ T6245] handle_softirqs+0x1ea/0xa00
[ 95.263312][ T6245] __irq_exit_rcu+0x162/0x210
[ 95.265137][ T6245] irq_exit_rcu+0x9/0x30
[ 95.266790][ T6245] sysvec_apic_timer_interrupt+0xa3/0xc0
[ 95.268952][ T6245] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 95.271242][ T6245] Modules linked in:
[ 95.272743][ T6245] CPU: 0 UID: 0 PID: 6245 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 95.272759][ T6245] Tainted: [B]=BAD_PAGE
[ 95.272762][ T6245] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 95.272768][ T6245] Call Trace:
[ 95.272772][ T6245]
[ 95.272776][ T6245] dump_stack_lvl+0x100/0x190
[ 95.272789][ T6245] bad_page.cold+0xbe/0xdf
[ 95.272805][ T6245] ? __pfx_bad_page+0x10/0x10
[ 95.272814][ T6245] ? rcu_is_watching+0x12/0xc0
[ 95.272829][ T6245] ? page_bad_reason+0x98/0x200
[ 95.272839][ T6245] __free_frozen_pages+0x7d6/0x10a0
[ 95.272852][ T6245] ? kasan_quarantine_put+0x104/0x240
[ 95.272868][ T6245] ? lockdep_hardirqs_on+0x78/0x100
[ 95.272881][ T6245] page_frag_free+0x199/0x1f0
[ 95.272891][ T6245] __xdp_return+0x3b6/0x990
[ 95.272905][ T6245] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 95.272919][ T6245] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 95.272927][ T6245] bpf_prog_run_generic_xdp+0x614/0x1610
[ 95.272943][ T6245] do_xdp_generic+0x92e/0x12c0
[ 95.272957][ T6245] ? __pfx_do_xdp_generic+0x10/0x10
[ 95.272969][ T6245] ? __lock_acquire+0x4a5/0x2630
[ 95.272986][ T6245] tun_get_user+0x1c1c/0x3c20
[ 95.273004][ T6245] ? __pfx_tun_get_user+0x10/0x10
[ 95.273019][ T6245] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 95.273036][ T6245] ? find_held_lock+0x2b/0x80
[ 95.273044][ T6245] ? tun_get+0x191/0x370
[ 95.273057][ T6245] ? tun_get+0x191/0x370
[ 95.273072][ T6245] tun_chr_write_iter+0xdc/0x200
[ 95.273088][ T6245] vfs_write+0x6ac/0x1070
[ 95.273099][ T6245] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 95.273114][ T6245] ? __pfx_vfs_write+0x10/0x10
[ 95.273125][ T6245] ? find_held_lock+0x2b/0x80
[ 95.273138][ T6245] ksys_write+0x12a/0x250
[ 95.273149][ T6245] ? __pfx_ksys_write+0x10/0x10
[ 95.273160][ T6245] ? rcu_is_watching+0x12/0xc0
[ 95.273175][ T6245] do_syscall_64+0x115/0x870
[ 95.273188][ T6245] ? clear_bhb_loop+0x40/0x90
[ 95.273221][ T6245] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.273237][ T6245] RIP: 0033:0x7f1cc575b80e
[ 95.273249][ T6245] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 95.273263][ T6245] RSP: 002b:00007f1cc66a8fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 95.273277][ T6245] RAX: ffffffffffffffda RBX: 00007f1cc66a96c0 RCX: 00007f1cc575b80e
[ 95.273283][ T6245] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8
[ 95.273289][ T6245] RBP: 00007f1cc582fee0 R08: 0000000000000000 R09: 0000000000000000
[ 95.273295][ T6245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 95.273300][ T6245] R13: 00007f1cc5a06038 R14: 00007f1cc5a05fa0 R15: 00007fff6ee09e88
[ 95.273309][ T6245]
[ 95.273316][ T6245] BUG: Bad page state in process syz.0.17 pfn:2eae5
[ 95.375711][ T6245] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802eae5c40 pfn:0x2eae5
[ 95.379634][ T6245] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 95.382318][ T6245] raw: 00fff00000000000 dead000000000040 ffff888022e5a000 0000000000000000
[ 95.385571][ T6245] raw: ffff88802eae5c40 0000000000000001 00000000ffffffff 0000000000000000
[ 95.388464][ T6245] page dumped because: page_pool leak
[ 95.390395][ T6245] page_owner tracks the page as allocated
[ 95.392624][ T6245] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6245, tgid 6244 (syz.0.17), ts 94523425040, free_ts 94231634637
[ 95.398169][ T6245] post_alloc_hook+0xfd/0x120
[ 95.400149][ T6245] get_page_from_freelist+0x11a6/0x3410
[ 95.402022][ T6245] __alloc_frozen_pages_noprof+0x27c/0x2bc0
[ 95.404099][ T6245] alloc_pages_bulk_noprof+0x649/0x1360
[ 95.406264][ T6245] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 95.408451][ T6245] page_pool_alloc_netmems+0xc4/0x1a0
[ 95.410166][ T6245] skb_pp_cow_data+0xa15/0x1220
[ 95.411978][ T6245] skb_cow_data_for_xdp+0x88/0xb0
[ 95.413975][ T6245] do_xdp_generic+0x56b/0x12c0
[ 95.415487][ T6245] tun_get_user+0x1c1c/0x3c20
[ 95.417004][ T6245] tun_chr_write_iter+0xdc/0x200
[ 95.419020][ T6245] vfs_write+0x6ac/0x1070
[ 95.420622][ T6245] ksys_write+0x12a/0x250
[ 95.421966][ T6245] do_syscall_64+0x115/0x870
[ 95.423759][ T6245] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.426052][ T6245] page last free pid 0 tgid 0 stack trace:
[ 95.427809][ T6245] __free_frozen_pages+0x794/0x10a0
[ 95.429956][ T6245] rcu_core+0x5a2/0x10d0
[ 95.431651][ T6245] handle_softirqs+0x1ea/0xa00
[ 95.433357][ T6245] __irq_exit_rcu+0x162/0x210
[ 95.434814][ T6245] irq_exit_rcu+0x9/0x30
[ 95.436507][ T6245] sysvec_apic_timer_interrupt+0xa3/0xc0
[ 95.438473][ T6245] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 95.440561][ T6245] Modules linked in:
[ 95.442130][ T6245] CPU: 0 UID: 0 PID: 6245 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 95.442151][ T6245] Tainted: [B]=BAD_PAGE
[ 95.442157][ T6245] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 95.442165][ T6245] Call Trace:
[ 95.442171][ T6245]
[ 95.442177][ T6245] dump_stack_lvl+0x100/0x190
[ 95.442195][ T6245] bad_page.cold+0xbe/0xdf
[ 95.442218][ T6245] ? __pfx_bad_page+0x10/0x10
[ 95.442232][ T6245] ? rcu_is_watching+0x12/0xc0
[ 95.442255][ T6245] ? page_bad_reason+0x98/0x200
[ 95.442269][ T6245] __free_frozen_pages+0x7d6/0x10a0
[ 95.442289][ T6245] ? kasan_quarantine_put+0x104/0x240
[ 95.442314][ T6245] ? lockdep_hardirqs_on+0x78/0x100
[ 95.442334][ T6245] page_frag_free+0x199/0x1f0
[ 95.442363][ T6245] __xdp_return+0x3b6/0x990
[ 95.442383][ T6245] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 95.442405][ T6245] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 95.442418][ T6245] bpf_prog_run_generic_xdp+0x614/0x1610
[ 95.442443][ T6245] do_xdp_generic+0x92e/0x12c0
[ 95.442463][ T6245] ? __pfx_do_xdp_generic+0x10/0x10
[ 95.442481][ T6245] ? __lock_acquire+0x4a5/0x2630
[ 95.442507][ T6245] tun_get_user+0x1c1c/0x3c20
[ 95.442535][ T6245] ? __pfx_tun_get_user+0x10/0x10
[ 95.442558][ T6245] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 95.442583][ T6245] ? find_held_lock+0x2b/0x80
[ 95.442596][ T6245] ? tun_get+0x191/0x370
[ 95.442616][ T6245] ? tun_get+0x191/0x370
[ 95.442643][ T6245] tun_chr_write_iter+0xdc/0x200
[ 95.442666][ T6245] vfs_write+0x6ac/0x1070
[ 95.442683][ T6245] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 95.442707][ T6245] ? __pfx_vfs_write+0x10/0x10
[ 95.442723][ T6245] ? find_held_lock+0x2b/0x80
[ 95.442741][ T6245] ksys_write+0x12a/0x250
[ 95.442757][ T6245] ? __pfx_ksys_write+0x10/0x10
[ 95.442774][ T6245] ? rcu_is_watching+0x12/0xc0
[ 95.442797][ T6245] do_syscall_64+0x115/0x870
[ 95.442816][ T6245] ? clear_bhb_loop+0x40/0x90
[ 95.442833][ T6245] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.442849][ T6245] RIP: 0033:0x7f1cc575b80e
[ 95.442862][ T6245] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 95.442877][ T6245] RSP: 002b:00007f1cc66a8fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 95.442892][ T6245] RAX: ffffffffffffffda RBX: 00007f1cc66a96c0 RCX: 00007f1cc575b80e
[ 95.442902][ T6245] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8
[ 95.442911][ T6245] RBP: 00007f1cc582fee0 R08: 0000000000000000 R09: 0000000000000000
[ 95.442920][ T6245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 95.442928][ T6245] R13: 00007f1cc5a06038 R14: 00007f1cc5a05fa0 R15: 00007fff6ee09e88
[ 95.442942][ T6245]
[ 95.442951][ T6245] BUG: Bad page state in process syz.0.17 pfn:379b5
[ 95.534256][ T6245] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880560955c0 pfn:0x379b5
[ 95.537255][ T6245] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 95.539886][ T6245] raw: 00fff00000000000 dead000000000040 ffff888022e5a000 0000000000000000
[ 95.542803][ T6245] raw: ffff8880560955c0 0000000000000001 00000000ffffffff 0000000000000000
[ 95.545844][ T6245] page dumped because: page_pool leak
[ 95.547633][ T6245] page_owner tracks the page as allocated
[ 95.549467][ T6245] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6245, tgid 6244 (syz.0.17), ts 94523411896, free_ts 94239375196
[ 95.554368][ T6245] post_alloc_hook+0xfd/0x120
[ 95.555814][ T6245] get_page_from_freelist+0x11a6/0x3410
[ 95.557493][ T6245] __alloc_frozen_pages_noprof+0x27c/0x2bc0
[ 95.559354][ T6245] alloc_pages_bulk_noprof+0x649/0x1360
[ 95.561026][ T6245] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 95.562920][ T6245] page_pool_alloc_netmems+0xc4/0x1a0
[ 95.564725][ T6245] skb_pp_cow_data+0xa15/0x1220
[ 95.566231][ T6245] skb_cow_data_for_xdp+0x88/0xb0
[ 95.567779][ T6245] do_xdp_generic+0x56b/0x12c0
[ 95.569369][ T6245] tun_get_user+0x1c1c/0x3c20
[ 95.571147][ T6245] tun_chr_write_iter+0xdc/0x200
[ 95.573028][ T6245] vfs_write+0x6ac/0x1070
[ 95.574711][ T6245] ksys_write+0x12a/0x250
[ 95.576409][ T6245] do_syscall_64+0x115/0x870
[ 95.578215][ T6245] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.580519][ T6245] page last free pid 6187 tgid 6187 stack trace:
[ 95.582480][ T6245] __free_frozen_pages+0x794/0x10a0
[ 95.584056][ T6245] pgd_free+0x3eb/0x540
[ 95.585356][ T6245] __mmdrop+0xe5/0x750
[ 95.586604][ T6245] finish_task_switch.isra.0+0xb0e/0x1010
[ 95.588350][ T6245] __schedule+0x129d/0x67a0
[ 95.589828][ T6245] preempt_schedule_common+0x42/0xc0
[ 95.591470][ T6245] preempt_schedule_thunk+0x16/0x30
[ 95.593058][ T6245] _raw_spin_unlock_irq+0x44/0x50
[ 95.594595][ T6245] __wait_for_common+0x2da/0x4c0
[ 95.596112][ T6245] wait_for_completion_state+0x1c/0x40
[ 95.597778][ T6245] call_usermodehelper_exec+0x3d0/0x4e0
[ 95.599379][ T6245] __request_module+0x3f3/0x6c0
[ 95.600910][ T6245] dev_load+0x204/0x240
[ 95.602295][ T6245] dev_ioctl+0x493/0x10e0
[ 95.604058][ T6245] sock_do_ioctl+0x1a0/0x280
[ 95.605843][ T6245] sock_ioctl+0x599/0x6b0
[ 95.607282][ T6245] Modules linked in:
[ 95.608708][ T6245] CPU: 0 UID: 0 PID: 6245 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 95.608728][ T6245] Tainted: [B]=BAD_PAGE
[ 95.608731][ T6245] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 95.608737][ T6245] Call Trace:
[ 95.608743][ T6245]
[ 95.608749][ T6245] dump_stack_lvl+0x100/0x190
[ 95.608767][ T6245] bad_page.cold+0xbe/0xdf
[ 95.608790][ T6245] ? __pfx_bad_page+0x10/0x10
[ 95.608805][ T6245] ? rcu_is_watching+0x12/0xc0
[ 95.608822][ T6245] ? page_bad_reason+0x98/0x200
[ 95.608832][ T6245] __free_frozen_pages+0x7d6/0x10a0
[ 95.608846][ T6245] ? kasan_quarantine_put+0x104/0x240
[ 95.608863][ T6245] ? lockdep_hardirqs_on+0x78/0x100
[ 95.608883][ T6245] page_frag_free+0x199/0x1f0
[ 95.608898][ T6245] __xdp_return+0x3b6/0x990
[ 95.608917][ T6245] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 95.608936][ T6245] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 95.608945][ T6245] bpf_prog_run_generic_xdp+0x614/0x1610
[ 95.608968][ T6245] do_xdp_generic+0x92e/0x12c0
[ 95.608988][ T6245] ? __pfx_do_xdp_generic+0x10/0x10
[ 95.609007][ T6245] ? __lock_acquire+0x4a5/0x2630
[ 95.609028][ T6245] tun_get_user+0x1c1c/0x3c20
[ 95.609048][ T6245] ? __pfx_tun_get_user+0x10/0x10
[ 95.609073][ T6245] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 95.609099][ T6245] ? find_held_lock+0x2b/0x80
[ 95.609112][ T6245] ? tun_get+0x191/0x370
[ 95.609127][ T6245] ? tun_get+0x191/0x370
[ 95.609143][ T6245] tun_chr_write_iter+0xdc/0x200
[ 95.609158][ T6245] vfs_write+0x6ac/0x1070
[ 95.609169][ T6245] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 95.609185][ T6245] ? __pfx_vfs_write+0x10/0x10
[ 95.609220][ T6245] ? find_held_lock+0x2b/0x80
[ 95.609239][ T6245] ksys_write+0x12a/0x250
[ 95.609254][ T6245] ? __pfx_ksys_write+0x10/0x10
[ 95.609269][ T6245] ? rcu_is_watching+0x12/0xc0
[ 95.609297][ T6245] do_syscall_64+0x115/0x870
[ 95.609311][ T6245] ? clear_bhb_loop+0x40/0x90
[ 95.609322][ T6245] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.609332][ T6245] RIP: 0033:0x7f1cc575b80e
[ 95.609341][ T6245] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 95.609351][ T6245] RSP: 002b:00007f1cc66a8fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 95.609361][ T6245] RAX: ffffffffffffffda RBX: 00007f1cc66a96c0 RCX: 00007f1cc575b80e
[ 95.609367][ T6245] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8
[ 95.609373][ T6245] RBP: 00007f1cc582fee0 R08: 0000000000000000 R09: 0000000000000000
[ 95.609379][ T6245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 95.609385][ T6245] R13: 00007f1cc5a06038 R14: 00007f1cc5a05fa0 R15: 00007fff6ee09e88
[ 95.609394][ T6245]
[ 95.691935][ T6245] BUG: Bad page state in process syz.0.17 pfn:3add8
[ 95.693922][ T6245] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803adda000 pfn:0x3add8
[ 95.696895][ T6245] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 95.699051][ T6245] raw: 00fff00000000000 dead000000000040 ffff888022e5a000 0000000000000000
[ 95.701707][ T6245] raw: ffff88803adda000 0000000000000001 00000000ffffffff 0000000000000000
[ 95.704306][ T6245] page dumped because: page_pool leak
[ 95.705930][ T6245] page_owner tracks the page as allocated
[ 95.707633][ T6245] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6245, tgid 6244 (syz.0.17), ts 94523398951, free_ts 94299570233
[ 95.712669][ T6245] post_alloc_hook+0xfd/0x120
[ 95.714124][ T6245] get_page_from_freelist+0x11a6/0x3410
[ 95.715811][ T6245] __alloc_frozen_pages_noprof+0x27c/0x2bc0
[ 95.717610][ T6245] alloc_pages_bulk_noprof+0x649/0x1360
[ 95.719369][ T6245] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 95.721231][ T6245] page_pool_alloc_netmems+0xc4/0x1a0
[ 95.722872][ T6245] skb_pp_cow_data+0xa15/0x1220
[ 95.724350][ T6245] skb_cow_data_for_xdp+0x88/0xb0
[ 95.725883][ T6245] do_xdp_generic+0x56b/0x12c0
[ 95.727343][ T6245] tun_get_user+0x1c1c/0x3c20
[ 95.728808][ T6245] tun_chr_write_iter+0xdc/0x200
[ 95.730389][ T6245] vfs_write+0x6ac/0x1070
[ 95.731708][ T6245] ksys_write+0x12a/0x250
[ 95.733025][ T6245] do_syscall_64+0x115/0x870
[ 95.734444][ T6245] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.736242][ T6245] page last free pid 5917 tgid 5917 stack trace:
[ 95.738295][ T6245] __free_frozen_pages+0x794/0x10a0
[ 95.739952][ T6245] vfree+0x15f/0x8d0
[ 95.741201][ T6245] delayed_vfree_work+0x56/0x80
[ 95.742705][ T6245] process_one_work+0xa0e/0x1980
[ 95.744221][ T6245] worker_thread+0x5ef/0xe50
[ 95.745642][ T6245] kthread+0x370/0x450
[ 95.746896][ T6245] ret_from_fork+0x72b/0xd50
[ 95.748341][ T6245] ret_from_fork_asm+0x1a/0x30
[ 95.749884][ T6245] Modules linked in:
[ 95.751123][ T6245] CPU: 0 UID: 0 PID: 6245 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 95.751139][ T6245] Tainted: [B]=BAD_PAGE
[ 95.751143][ T6245] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 95.751148][ T6245] Call Trace:
[ 95.751152][ T6245]
[ 95.751156][ T6245] dump_stack_lvl+0x100/0x190
[ 95.751168][ T6245] bad_page.cold+0xbe/0xdf
[ 95.751184][ T6245] ? __pfx_bad_page+0x10/0x10
[ 95.751193][ T6245] ? rcu_is_watching+0x12/0xc0
[ 95.751208][ T6245] ? page_bad_reason+0x98/0x200
[ 95.751218][ T6245] __free_frozen_pages+0x7d6/0x10a0
[ 95.751231][ T6245] ? kasan_quarantine_put+0x104/0x240
[ 95.751247][ T6245] ? lockdep_hardirqs_on+0x78/0x100
[ 95.751261][ T6245] page_frag_free+0x199/0x1f0
[ 95.751271][ T6245] __xdp_return+0x3b6/0x990
[ 95.751284][ T6245] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 95.751298][ T6245] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 95.751306][ T6245] bpf_prog_run_generic_xdp+0x614/0x1610
[ 95.751323][ T6245] do_xdp_generic+0x92e/0x12c0
[ 95.751336][ T6245] ? __pfx_do_xdp_generic+0x10/0x10
[ 95.751349][ T6245] ? __lock_acquire+0x4a5/0x2630
[ 95.751365][ T6245] tun_get_user+0x1c1c/0x3c20
[ 95.751383][ T6245] ? __pfx_tun_get_user+0x10/0x10
[ 95.751398][ T6245] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 95.751415][ T6245] ? find_held_lock+0x2b/0x80
[ 95.751423][ T6245] ? tun_get+0x191/0x370
[ 95.751436][ T6245] ? tun_get+0x191/0x370
[ 95.751451][ T6245] tun_chr_write_iter+0xdc/0x200
[ 95.751467][ T6245] vfs_write+0x6ac/0x1070
[ 95.751478][ T6245] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 95.751493][ T6245] ? __pfx_vfs_write+0x10/0x10
[ 95.751504][ T6245] ? find_held_lock+0x2b/0x80
[ 95.751515][ T6245] ksys_write+0x12a/0x250
[ 95.751526][ T6245] ? __pfx_ksys_write+0x10/0x10
[ 95.751537][ T6245] ? rcu_is_watching+0x12/0xc0
[ 95.751552][ T6245] do_syscall_64+0x115/0x870
[ 95.751565][ T6245] ? clear_bhb_loop+0x40/0x90
[ 95.751576][ T6245] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.751586][ T6245] RIP: 0033:0x7f1cc575b80e
[ 95.751595][ T6245] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 95.751605][ T6245] RSP: 002b:00007f1cc66a8fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 95.751615][ T6245] RAX: ffffffffffffffda RBX: 00007f1cc66a96c0 RCX: 00007f1cc575b80e
[ 95.751621][ T6245] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8
[ 95.751631][ T6245] RBP: 00007f1cc582fee0 R08: 0000000000000000 R09: 0000000000000000
[ 95.751637][ T6245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 95.751643][ T6245] R13: 00007f1cc5a06038 R14: 00007f1cc5a05fa0 R15: 00007fff6ee09e88
[ 95.751652][ T6245]
[ 95.751658][ T6245] BUG: Bad page state in process syz.0.17 pfn:3add9
[ 95.837954][ T6245] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffffffffffffffff pfn:0x3add9
[ 95.841848][ T6245] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 95.844744][ T6245] raw: 00fff00000000000 dead000000000040 ffff888022e5a000 0000000000000000
[ 95.848227][ T6245] raw: ffffffffffffffff 0000000000000001 00000000ffffffff 0000000000000000
[ 95.851819][ T6245] page dumped because: page_pool leak
[ 95.854029][ T6245] page_owner tracks the page as allocated
[ 95.856360][ T6245] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6245, tgid 6244 (syz.0.17), ts 94523385964, free_ts 94299579223
[ 95.862007][ T6245] post_alloc_hook+0xfd/0x120
[ 95.863626][ T6245] get_page_from_freelist+0x11a6/0x3410
[ 95.865368][ T6245] __alloc_frozen_pages_noprof+0x27c/0x2bc0
[ 95.867308][ T6245] alloc_pages_bulk_noprof+0x649/0x1360
[ 95.869048][ T6245] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 95.870976][ T6245] page_pool_alloc_netmems+0xc4/0x1a0
[ 95.872612][ T6245] skb_pp_cow_data+0xa15/0x1220
[ 95.874108][ T6245] skb_cow_data_for_xdp+0x88/0xb0
[ 95.875639][ T6245] do_xdp_generic+0x56b/0x12c0
[ 95.877550][ T6245] tun_get_user+0x1c1c/0x3c20
[ 95.879610][ T6245] tun_chr_write_iter+0xdc/0x200
[ 95.881652][ T6245] vfs_write+0x6ac/0x1070
[ 95.883439][ T6245] ksys_write+0x12a/0x250
[ 95.885209][ T6245] do_syscall_64+0x115/0x870
[ 95.887114][ T6245] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.889715][ T6245] page last free pid 5917 tgid 5917 stack trace:
[ 95.892379][ T6245] __free_frozen_pages+0x794/0x10a0
[ 95.894582][ T6245] vfree+0x15f/0x8d0
[ 95.896207][ T6245] delayed_vfree_work+0x56/0x80
[ 95.898238][ T6245] process_one_work+0xa0e/0x1980
[ 95.900348][ T6245] worker_thread+0x5ef/0xe50
[ 95.902264][ T6245] kthread+0x370/0x450
[ 95.903999][ T6245] ret_from_fork+0x72b/0xd50
[ 95.905767][ T6245] ret_from_fork_asm+0x1a/0x30
[ 95.907758][ T6245] Modules linked in:
[ 95.909488][ T6245] CPU: 0 UID: 0 PID: 6245 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 95.909514][ T6245] Tainted: [B]=BAD_PAGE
[ 95.909520][ T6245] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 95.909530][ T6245] Call Trace:
[ 95.909537][ T6245]
[ 95.909543][ T6245] dump_stack_lvl+0x100/0x190
[ 95.909564][ T6245] bad_page.cold+0xbe/0xdf
[ 95.909590][ T6245] ? __pfx_bad_page+0x10/0x10
[ 95.909606][ T6245] ? rcu_is_watching+0x12/0xc0
[ 95.909630][ T6245] ? page_bad_reason+0x98/0x200
[ 95.909652][ T6245] __free_frozen_pages+0x7d6/0x10a0
[ 95.909674][ T6245] ? kasan_quarantine_put+0x104/0x240
[ 95.909701][ T6245] ? lockdep_hardirqs_on+0x78/0x100
[ 95.909723][ T6245] page_frag_free+0x199/0x1f0
[ 95.909739][ T6245] __xdp_return+0x3b6/0x990
[ 95.909760][ T6245] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 95.909783][ T6245] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 95.909798][ T6245] bpf_prog_run_generic_xdp+0x614/0x1610
[ 95.909825][ T6245] do_xdp_generic+0x92e/0x12c0
[ 95.909847][ T6245] ? __pfx_do_xdp_generic+0x10/0x10
[ 95.909867][ T6245] ? __lock_acquire+0x4a5/0x2630
[ 95.909899][ T6245] tun_get_user+0x1c1c/0x3c20
[ 95.909930][ T6245] ? __pfx_tun_get_user+0x10/0x10
[ 95.909955][ T6245] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 95.909983][ T6245] ? find_held_lock+0x2b/0x80
[ 95.909997][ T6245] ? tun_get+0x191/0x370
[ 95.910018][ T6245] ? tun_get+0x191/0x370
[ 95.910043][ T6245] tun_chr_write_iter+0xdc/0x200
[ 95.910069][ T6245] vfs_write+0x6ac/0x1070
[ 95.910087][ T6245] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 95.910113][ T6245] ? __pfx_vfs_write+0x10/0x10
[ 95.910130][ T6245] ? find_held_lock+0x2b/0x80
[ 95.910149][ T6245] ksys_write+0x12a/0x250
[ 95.910167][ T6245] ? __pfx_ksys_write+0x10/0x10
[ 95.910185][ T6245] ? rcu_is_watching+0x12/0xc0
[ 95.910210][ T6245] do_syscall_64+0x115/0x870
[ 95.910232][ T6245] ? clear_bhb_loop+0x40/0x90
[ 95.910251][ T6245] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.910268][ T6245] RIP: 0033:0x7f1cc575b80e
[ 95.910282][ T6245] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 95.910297][ T6245] RSP: 002b:00007f1cc66a8fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 95.910314][ T6245] RAX: ffffffffffffffda RBX: 00007f1cc66a96c0 RCX: 00007f1cc575b80e
[ 95.910325][ T6245] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8
[ 95.910335][ T6245] RBP: 00007f1cc582fee0 R08: 0000000000000000 R09: 0000000000000000
[ 95.910344][ T6245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 95.910354][ T6245] R13: 00007f1cc5a06038 R14: 00007f1cc5a05fa0 R15: 00007fff6ee09e88
[ 95.910369][ T6245]
[ 95.910379][ T6245] BUG: Bad page state in process syz.0.17 pfn:3adda
[ 96.015923][ T6245] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3adda
[ 96.018812][ T6245] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 96.021608][ T6245] raw: 00fff00000000000 dead000000000040 ffff888022e5a000 0000000000000000
[ 96.025116][ T6245] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000
[ 96.028373][ T6245] page dumped because: page_pool leak
[ 96.030425][ T6245] page_owner tracks the page as allocated
[ 96.032436][ T6245] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6245, tgid 6244 (syz.0.17), ts 94523373006, free_ts 94299584054
[ 96.038302][ T6245] post_alloc_hook+0xfd/0x120
[ 96.040064][ T6245] get_page_from_freelist+0x11a6/0x3410
[ 96.042265][ T6245] __alloc_frozen_pages_noprof+0x27c/0x2bc0
[ 96.044427][ T6245] alloc_pages_bulk_noprof+0x649/0x1360
[ 96.046450][ T6245] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 96.048621][ T6245] page_pool_alloc_netmems+0xc4/0x1a0
[ 96.050496][ T6245] skb_pp_cow_data+0xa15/0x1220
[ 96.052239][ T6245] skb_cow_data_for_xdp+0x88/0xb0
[ 96.054076][ T6245] do_xdp_generic+0x56b/0x12c0
[ 96.055776][ T6245] tun_get_user+0x1c1c/0x3c20
[ 96.057341][ T6245] tun_chr_write_iter+0xdc/0x200
[ 96.059382][ T6245] vfs_write+0x6ac/0x1070
[ 96.060978][ T6245] ksys_write+0x12a/0x250
[ 96.062558][ T6245] do_syscall_64+0x115/0x870
[ 96.064198][ T6245] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.066349][ T6245] page last free pid 5917 tgid 5917 stack trace:
[ 96.068589][ T6245] __free_frozen_pages+0x794/0x10a0
[ 96.070583][ T6245] vfree+0x15f/0x8d0
[ 96.072138][ T6245] delayed_vfree_work+0x56/0x80
[ 96.073812][ T6245] process_one_work+0xa0e/0x1980
[ 96.075544][ T6245] worker_thread+0x5ef/0xe50
[ 96.077017][ T6245] kthread+0x370/0x450
[ 96.078485][ T6245] ret_from_fork+0x72b/0xd50
[ 96.080253][ T6245] ret_from_fork_asm+0x1a/0x30
[ 96.082061][ T6245] Modules linked in:
[ 96.083457][ T6245] CPU: 0 UID: 0 PID: 6245 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 96.083476][ T6245] Tainted: [B]=BAD_PAGE
[ 96.083481][ T6245] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 96.083488][ T6245] Call Trace:
[ 96.083494][ T6245]
[ 96.083498][ T6245] dump_stack_lvl+0x100/0x190
[ 96.083515][ T6245] bad_page.cold+0xbe/0xdf
[ 96.083535][ T6245] ? __pfx_bad_page+0x10/0x10
[ 96.083547][ T6245] ? rcu_is_watching+0x12/0xc0
[ 96.083566][ T6245] ? page_bad_reason+0x98/0x200
[ 96.083578][ T6245] __free_frozen_pages+0x7d6/0x10a0
[ 96.083596][ T6245] ? kasan_quarantine_put+0x104/0x240
[ 96.083616][ T6245] ? lockdep_hardirqs_on+0x78/0x100
[ 96.083633][ T6245] page_frag_free+0x199/0x1f0
[ 96.083646][ T6245] __xdp_return+0x3b6/0x990
[ 96.083662][ T6245] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 96.083681][ T6245] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 96.083692][ T6245] bpf_prog_run_generic_xdp+0x614/0x1610
[ 96.083713][ T6245] do_xdp_generic+0x92e/0x12c0
[ 96.083731][ T6245] ? __pfx_do_xdp_generic+0x10/0x10
[ 96.083746][ T6245] ? __lock_acquire+0x4a5/0x2630
[ 96.083768][ T6245] tun_get_user+0x1c1c/0x3c20
[ 96.083791][ T6245] ? __pfx_tun_get_user+0x10/0x10
[ 96.083810][ T6245] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 96.083836][ T6245] ? find_held_lock+0x2b/0x80
[ 96.083848][ T6245] ? tun_get+0x191/0x370
[ 96.083863][ T6245] ? tun_get+0x191/0x370
[ 96.083878][ T6245] tun_chr_write_iter+0xdc/0x200
[ 96.083894][ T6245] vfs_write+0x6ac/0x1070
[ 96.083905][ T6245] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 96.083921][ T6245] ? __pfx_vfs_write+0x10/0x10
[ 96.083931][ T6245] ? find_held_lock+0x2b/0x80
[ 96.083942][ T6245] ksys_write+0x12a/0x250
[ 96.083953][ T6245] ? __pfx_ksys_write+0x10/0x10
[ 96.083964][ T6245] ? rcu_is_watching+0x12/0xc0
[ 96.083979][ T6245] do_syscall_64+0x115/0x870
[ 96.083997][ T6245] ? clear_bhb_loop+0x40/0x90
[ 96.084012][ T6245] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.084026][ T6245] RIP: 0033:0x7f1cc575b80e
[ 96.084036][ T6245] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 96.084048][ T6245] RSP: 002b:00007f1cc66a8fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 96.084061][ T6245] RAX: ffffffffffffffda RBX: 00007f1cc66a96c0 RCX: 00007f1cc575b80e
[ 96.084070][ T6245] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8
[ 96.084077][ T6245] RBP: 00007f1cc582fee0 R08: 0000000000000000 R09: 0000000000000000
[ 96.084085][ T6245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 96.084093][ T6245] R13: 00007f1cc5a06038 R14: 00007f1cc5a05fa0 R15: 00007fff6ee09e88
[ 96.084105][ T6245]
[ 96.084113][ T6245] BUG: Bad page state in process syz.0.17 pfn:3addb
[ 96.179475][ T6245] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3addb
[ 96.182619][ T6245] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 96.185068][ T6245] raw: 00fff00000000000 dead000000000040 ffff888022e5a000 0000000000000000
[ 96.188119][ T6245] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000
[ 96.191282][ T6245] page dumped because: page_pool leak
[ 96.193233][ T6245] page_owner tracks the page as allocated
[ 96.195156][ T6245] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6245, tgid 6244 (syz.0.17), ts 94523359667, free_ts 94299593587
[ 96.200688][ T6245] post_alloc_hook+0xfd/0x120
[ 96.202394][ T6245] get_page_from_freelist+0x11a6/0x3410
[ 96.204364][ T6245] __alloc_frozen_pages_noprof+0x27c/0x2bc0
[ 96.206474][ T6245] alloc_pages_bulk_noprof+0x649/0x1360
[ 96.208402][ T6245] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 96.210623][ T6245] page_pool_alloc_netmems+0xc4/0x1a0
[ 96.212664][ T6245] skb_pp_cow_data+0xa15/0x1220
[ 96.214431][ T6245] skb_cow_data_for_xdp+0x88/0xb0
[ 96.216244][ T6245] do_xdp_generic+0x56b/0x12c0
[ 96.218010][ T6245] tun_get_user+0x1c1c/0x3c20
[ 96.219795][ T6245] tun_chr_write_iter+0xdc/0x200
[ 96.221577][ T6245] vfs_write+0x6ac/0x1070
[ 96.223129][ T6245] ksys_write+0x12a/0x250
[ 96.224644][ T6245] do_syscall_64+0x115/0x870
[ 96.226353][ T6245] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.228330][ T6245] page last free pid 5917 tgid 5917 stack trace:
[ 96.230608][ T6245] __free_frozen_pages+0x794/0x10a0
[ 96.232288][ T6245] vfree+0x15f/0x8d0
[ 96.233614][ T6245] delayed_vfree_work+0x56/0x80
[ 96.235138][ T6245] process_one_work+0xa0e/0x1980
[ 96.236733][ T6245] worker_thread+0x5ef/0xe50
[ 96.238227][ T6245] kthread+0x370/0x450
[ 96.239686][ T6245] ret_from_fork+0x72b/0xd50
[ 96.241202][ T6245] ret_from_fork_asm+0x1a/0x30
[ 96.242953][ T6245] Modules linked in:
[ 96.244185][ T6245] CPU: 0 UID: 0 PID: 6245 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 96.244200][ T6245] Tainted: [B]=BAD_PAGE
[ 96.244204][ T6245] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 96.244210][ T6245] Call Trace:
[ 96.244214][ T6245]
[ 96.244218][ T6245] dump_stack_lvl+0x100/0x190
[ 96.244231][ T6245] bad_page.cold+0xbe/0xdf
[ 96.244246][ T6245] ? __pfx_bad_page+0x10/0x10
[ 96.244256][ T6245] ? rcu_is_watching+0x12/0xc0
[ 96.244271][ T6245] ? page_bad_reason+0x98/0x200
[ 96.244284][ T6245] __free_frozen_pages+0x7d6/0x10a0
[ 96.244305][ T6245] ? kasan_quarantine_put+0x104/0x240
[ 96.244331][ T6245] ? lockdep_hardirqs_on+0x78/0x100
[ 96.244354][ T6245] page_frag_free+0x199/0x1f0
[ 96.244372][ T6245] __xdp_return+0x3b6/0x990
[ 96.244388][ T6245] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 96.244402][ T6245] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 96.244411][ T6245] bpf_prog_run_generic_xdp+0x614/0x1610
[ 96.244427][ T6245] do_xdp_generic+0x92e/0x12c0
[ 96.244441][ T6245] ? __pfx_do_xdp_generic+0x10/0x10
[ 96.244453][ T6245] ? __lock_acquire+0x4a5/0x2630
[ 96.244470][ T6245] tun_get_user+0x1c1c/0x3c20
[ 96.244488][ T6245] ? __pfx_tun_get_user+0x10/0x10
[ 96.244504][ T6245] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 96.244521][ T6245] ? find_held_lock+0x2b/0x80
[ 96.244530][ T6245] ? tun_get+0x191/0x370
[ 96.244543][ T6245] ? tun_get+0x191/0x370
[ 96.244558][ T6245] tun_chr_write_iter+0xdc/0x200
[ 96.244574][ T6245] vfs_write+0x6ac/0x1070
[ 96.244586][ T6245] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 96.244602][ T6245] ? __pfx_vfs_write+0x10/0x10
[ 96.244612][ T6245] ? find_held_lock+0x2b/0x80
[ 96.244624][ T6245] ksys_write+0x12a/0x250
[ 96.244634][ T6245] ? __pfx_ksys_write+0x10/0x10
[ 96.244646][ T6245] ? rcu_is_watching+0x12/0xc0
[ 96.244661][ T6245] do_syscall_64+0x115/0x870
[ 96.244676][ T6245] ? clear_bhb_loop+0x40/0x90
[ 96.244687][ T6245] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.244698][ T6245] RIP: 0033:0x7f1cc575b80e
[ 96.244707][ T6245] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 96.244717][ T6245] RSP: 002b:00007f1cc66a8fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 96.244727][ T6245] RAX: ffffffffffffffda RBX: 00007f1cc66a96c0 RCX: 00007f1cc575b80e
[ 96.244734][ T6245] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8
[ 96.244740][ T6245] RBP: 00007f1cc582fee0 R08: 0000000000000000 R09: 0000000000000000
[ 96.244746][ T6245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 96.244752][ T6245] R13: 00007f1cc5a06038 R14: 00007f1cc5a05fa0 R15: 00007fff6ee09e88
[ 96.244761][ T6245]
[ 96.244768][ T6245] BUG: Bad page state in process syz.0.17 pfn:3addc
[ 96.340033][ T6245] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3addc
[ 96.342792][ T6245] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 96.344990][ T6245] raw: 00fff00000000000 dead000000000040 ffff888022e5a000 0000000000000000
[ 96.347756][ T6245] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000
[ 96.350566][ T6245] page dumped because: page_pool leak
[ 96.352266][ T6245] page_owner tracks the page as allocated
[ 96.354174][ T6245] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6245, tgid 6244 (syz.0.17), ts 94523325084, free_ts 94299598168
[ 96.359897][ T6245] post_alloc_hook+0xfd/0x120
[ 96.361526][ T6245] get_page_from_freelist+0x11a6/0x3410
[ 96.363309][ T6245] __alloc_frozen_pages_noprof+0x27c/0x2bc0
[ 96.365635][ T6245] alloc_pages_bulk_noprof+0x649/0x1360
[ 96.367871][ T6245] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 96.370446][ T6245] page_pool_alloc_netmems+0xc4/0x1a0
[ 96.372372][ T6245] skb_pp_cow_data+0xa15/0x1220
[ 96.374392][ T6245] skb_cow_data_for_xdp+0x88/0xb0
[ 96.376444][ T6245] do_xdp_generic+0x56b/0x12c0
[ 96.378472][ T6245] tun_get_user+0x1c1c/0x3c20
[ 96.380489][ T6245] tun_chr_write_iter+0xdc/0x200
[ 96.382439][ T6245] vfs_write+0x6ac/0x1070
[ 96.384196][ T6245] ksys_write+0x12a/0x250
[ 96.385971][ T6245] do_syscall_64+0x115/0x870
[ 96.387853][ T6245] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.390358][ T6245] page last free pid 5917 tgid 5917 stack trace:
[ 96.392882][ T6245] __free_frozen_pages+0x794/0x10a0
[ 96.395014][ T6245] vfree+0x15f/0x8d0
[ 96.396563][ T6245] delayed_vfree_work+0x56/0x80
[ 96.398590][ T6245] process_one_work+0xa0e/0x1980
[ 96.400693][ T6245] worker_thread+0x5ef/0xe50
[ 96.402521][ T6245] kthread+0x370/0x450
[ 96.404180][ T6245] ret_from_fork+0x72b/0xd50
[ 96.406090][ T6245] ret_from_fork_asm+0x1a/0x30
[ 96.408023][ T6245] Modules linked in:
[ 96.409631][ T6245] CPU: 0 UID: 0 PID: 6245 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 96.409652][ T6245] Tainted: [B]=BAD_PAGE
[ 96.409657][ T6245] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 96.409666][ T6245] Call Trace:
[ 96.409671][ T6245]
[ 96.409678][ T6245] dump_stack_lvl+0x100/0x190
[ 96.409695][ T6245] bad_page.cold+0xbe/0xdf
[ 96.409716][ T6245] ? __pfx_bad_page+0x10/0x10
[ 96.409729][ T6245] ? rcu_is_watching+0x12/0xc0
[ 96.409748][ T6245] ? page_bad_reason+0x98/0x200
[ 96.409761][ T6245] __free_frozen_pages+0x7d6/0x10a0
[ 96.409779][ T6245] ? kasan_quarantine_put+0x104/0x240
[ 96.409800][ T6245] ? lockdep_hardirqs_on+0x78/0x100
[ 96.409819][ T6245] page_frag_free+0x199/0x1f0
[ 96.409832][ T6245] __xdp_return+0x3b6/0x990
[ 96.409850][ T6245] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 96.409868][ T6245] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 96.409880][ T6245] bpf_prog_run_generic_xdp+0x614/0x1610
[ 96.409902][ T6245] do_xdp_generic+0x92e/0x12c0
[ 96.409920][ T6245] ? __pfx_do_xdp_generic+0x10/0x10
[ 96.409937][ T6245] ? __lock_acquire+0x4a5/0x2630
[ 96.409960][ T6245] tun_get_user+0x1c1c/0x3c20
[ 96.409984][ T6245] ? __pfx_tun_get_user+0x10/0x10
[ 96.410005][ T6245] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 96.410028][ T6245] ? find_held_lock+0x2b/0x80
[ 96.410039][ T6245] ? tun_get+0x191/0x370
[ 96.410056][ T6245] ? tun_get+0x191/0x370
[ 96.410076][ T6245] tun_chr_write_iter+0xdc/0x200
[ 96.410096][ T6245] vfs_write+0x6ac/0x1070
[ 96.410111][ T6245] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 96.410132][ T6245] ? __pfx_vfs_write+0x10/0x10
[ 96.410146][ T6245] ? find_held_lock+0x2b/0x80
[ 96.410163][ T6245] ksys_write+0x12a/0x250
2026/05/30 09:28:33 executed programs: 3
[ 96.410177][ T6245] ? __pfx_ksys_write+0x10/0x10
[ 96.410202][ T6245] ? rcu_is_watching+0x12/0xc0
[ 96.410222][ T6245] do_syscall_64+0x115/0x870
[ 96.410240][ T6245] ? clear_bhb_loop+0x40/0x90
[ 96.410256][ T6245] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.410270][ T6245] RIP: 0033:0x7f1cc575b80e
[ 96.410282][ T6245] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 96.410298][ T6245] RSP: 002b:00007f1cc66a8fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 96.410313][ T6245] RAX: ffffffffffffffda RBX: 00007f1cc66a96c0 RCX: 00007f1cc575b80e
[ 96.410323][ T6245] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8
[ 96.410332][ T6245] RBP: 00007f1cc582fee0 R08: 0000000000000000 R09: 0000000000000000
[ 96.410341][ T6245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 96.410349][ T6245] R13: 00007f1cc5a06038 R14: 00007f1cc5a05fa0 R15: 00007fff6ee09e88
[ 96.410362][ T6245]
[ 96.519977][ T6249] BUG: Bad page state in process syz.0.18 pfn:5df85
[ 96.522176][ T6249] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5df85
[ 96.524868][ T6249] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 96.527183][ T6249] raw: 00fff00000000000 dead000000000040 ffff888022e6b000 0000000000000000
[ 96.530352][ T6249] raw: 0000000000000000 3fffffffffffffff 00000000ffffffff 0000000000000000
[ 96.532949][ T6249] page dumped because: page_pool leak
[ 96.534597][ T6249] page_owner tracks the page as allocated
[ 96.536318][ T6249] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6249, tgid 6248 (syz.0.18), ts 96519944337, free_ts 94199496015
[ 96.541530][ T6249] post_alloc_hook+0xfd/0x120
[ 96.543014][ T6249] get_page_from_freelist+0x11a6/0x3410
[ 96.544847][ T6249] __alloc_frozen_pages_noprof+0x27c/0x2bc0
[ 96.546946][ T6249] alloc_pages_bulk_noprof+0x649/0x1360
[ 96.548788][ T6249] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 96.550853][ T6249] page_pool_alloc_netmems+0xc4/0x1a0
[ 96.552507][ T6249] page_pool_alloc_frag_netmem+0x21d/0xa00
[ 96.554300][ T6249] skb_pp_cow_data+0x5a7/0x1220
[ 96.555795][ T6249] skb_cow_data_for_xdp+0x88/0xb0
[ 96.557530][ T6249] do_xdp_generic+0x56b/0x12c0
[ 96.559034][ T6249] tun_get_user+0x1c1c/0x3c20
[ 96.560625][ T6249] tun_chr_write_iter+0xdc/0x200
[ 96.562185][ T6249] vfs_write+0x6ac/0x1070
[ 96.563523][ T6249] ksys_write+0x12a/0x250
[ 96.564857][ T6249] do_syscall_64+0x115/0x870
[ 96.566289][ T6249] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.568086][ T6249] page last free pid 0 tgid 0 stack trace:
[ 96.569980][ T6249] __free_frozen_pages+0x794/0x10a0
[ 96.571605][ T6249] tlb_remove_table_rcu+0x2cf/0x380
[ 96.573203][ T6249] rcu_core+0x5a2/0x10d0
[ 96.574497][ T6249] handle_softirqs+0x1ea/0xa00
[ 96.575965][ T6249] __irq_exit_rcu+0x162/0x210
[ 96.577411][ T6249] irq_exit_rcu+0x9/0x30
[ 96.578752][ T6249] sysvec_apic_timer_interrupt+0xa3/0xc0
[ 96.580621][ T6249] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 96.582526][ T6249] Modules linked in:
[ 96.583822][ T6249] CPU: 3 UID: 0 PID: 6249 Comm: syz.0.18 Tainted: G B syzkaller #0 PREEMPT(full)
[ 96.583842][ T6249] Tainted: [B]=BAD_PAGE
[ 96.583847][ T6249] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 96.583856][ T6249] Call Trace:
[ 96.583861][ T6249]
[ 96.583868][ T6249] dump_stack_lvl+0x100/0x190
[ 96.583887][ T6249] bad_page.cold+0xbe/0xdf
[ 96.583911][ T6249] ? __pfx_bad_page+0x10/0x10
[ 96.583924][ T6249] ? rcu_is_watching+0x12/0xc0
[ 96.583940][ T6249] ? page_bad_reason+0x98/0x200
[ 96.583950][ T6249] __free_frozen_pages+0x7d6/0x10a0
[ 96.583964][ T6249] ? trace_irq_enable.constprop.0+0x11e/0x160
[ 96.583978][ T6249] page_frag_free+0x199/0x1f0
[ 96.583988][ T6249] __xdp_return+0x3b6/0x990
[ 96.584002][ T6249] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 96.584016][ T6249] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 96.584025][ T6249] bpf_prog_run_generic_xdp+0x614/0x1610
[ 96.584042][ T6249] do_xdp_generic+0x92e/0x12c0
[ 96.584056][ T6249] ? __pfx_do_xdp_generic+0x10/0x10
[ 96.584074][ T6249] tun_get_user+0x1c1c/0x3c20
[ 96.584093][ T6249] ? __pfx_tun_get_user+0x10/0x10
[ 96.584109][ T6249] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 96.584126][ T6249] ? tun_get+0x191/0x370
[ 96.584139][ T6249] ? rcu_is_watching+0x12/0xc0
[ 96.584154][ T6249] ? tun_get+0x191/0x370
[ 96.584167][ T6249] ? lock_release+0x245/0x310
[ 96.584180][ T6249] tun_chr_write_iter+0xdc/0x200
[ 96.584196][ T6249] vfs_write+0x6ac/0x1070
[ 96.584206][ T6249] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 96.584223][ T6249] ? __pfx_vfs_write+0x10/0x10
[ 96.584234][ T6249] ? lock_release+0x245/0x310
[ 96.584248][ T6249] ksys_write+0x12a/0x250
[ 96.584259][ T6249] ? __pfx_ksys_write+0x10/0x10
[ 96.584270][ T6249] ? rcu_is_watching+0x12/0xc0
[ 96.584290][ T6249] do_syscall_64+0x115/0x870
[ 96.584303][ T6249] ? clear_bhb_loop+0x40/0x90
[ 96.584316][ T6249] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.584332][ T6249] RIP: 0033:0x7f1cc575b80e
[ 96.584345][ T6249] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 96.584361][ T6249] RSP: 002b:00007f1cc66a8fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 96.584376][ T6249] RAX: ffffffffffffffda RBX: 00007f1cc66a96c0 RCX: 00007f1cc575b80e
[ 96.584386][ T6249] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8
[ 96.584396][ T6249] RBP: 00007f1cc582fee0 R08: 0000000000000000 R09: 0000000000000000
[ 96.584404][ T6249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 96.584413][ T6249] R13: 00007f1cc5a06038 R14: 00007f1cc5a05fa0 R15: 00007fff6ee09e88
[ 96.584426][ T6249]
[ 96.584432][ T6249] BUG: Bad page state in process syz.0.18 pfn:309c4
[ 96.668317][ T6249] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x309c4
[ 96.671119][ T6249] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 96.673281][ T6249] raw: 00fff00000000000 dead000000000040 ffff888022e6b000 0000000000000000
[ 96.675870][ T6249] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000
[ 96.678596][ T6249] page dumped because: page_pool leak
[ 96.680691][ T6249] page_owner tracks the page as allocated
[ 96.683051][ T6249] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6249, tgid 6248 (syz.0.18), ts 96519939858, free_ts 94199507702
[ 96.689688][ T6249] post_alloc_hook+0xfd/0x120
[ 96.691616][ T6249] get_page_from_freelist+0x11a6/0x3410
[ 96.693714][ T6249] __alloc_frozen_pages_noprof+0x27c/0x2bc0
[ 96.695533][ T6249] alloc_pages_bulk_noprof+0x649/0x1360
[ 96.697245][ T6249] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 96.699125][ T6249] page_pool_alloc_netmems+0xc4/0x1a0
[ 96.700858][ T6249] skb_pp_cow_data+0xa15/0x1220
[ 96.702527][ T6249] skb_cow_data_for_xdp+0x88/0xb0
[ 96.704313][ T6249] do_xdp_generic+0x56b/0x12c0
[ 96.706156][ T6249] tun_get_user+0x1c1c/0x3c20
[ 96.707933][ T6249] tun_chr_write_iter+0xdc/0x200
[ 96.709904][ T6249] vfs_write+0x6ac/0x1070
[ 96.711271][ T6249] ksys_write+0x12a/0x250
[ 96.712594][ T6249] do_syscall_64+0x115/0x870
[ 96.714033][ T6249] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.715806][ T6249] page last free pid 0 tgid 0 stack trace:
[ 96.717596][ T6249] __free_frozen_pages+0x794/0x10a0
[ 96.719221][ T6249] rcu_core+0x5a2/0x10d0
[ 96.720590][ T6249] handle_softirqs+0x1ea/0xa00
[ 96.722073][ T6249] __irq_exit_rcu+0x162/0x210
[ 96.723527][ T6249] irq_exit_rcu+0x9/0x30
[ 96.724838][ T6249] sysvec_apic_timer_interrupt+0xa3/0xc0
[ 96.726566][ T6249] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 96.728494][ T6249] Modules linked in:
[ 96.729949][ T6249] CPU: 3 UID: 0 PID: 6249 Comm: syz.0.18 Tainted: G B syzkaller #0 PREEMPT(full)
[ 96.729966][ T6249] Tainted: [B]=BAD_PAGE
[ 96.729970][ T6249] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 96.729976][ T6249] Call Trace:
[ 96.729980][ T6249]
[ 96.729985][ T6249] dump_stack_lvl+0x100/0x190
[ 96.729999][ T6249] bad_page.cold+0xbe/0xdf
[ 96.730016][ T6249] ? __pfx_bad_page+0x10/0x10
[ 96.730026][ T6249] ? rcu_is_watching+0x12/0xc0
[ 96.730042][ T6249] ? page_bad_reason+0x98/0x200
[ 96.730051][ T6249] __free_frozen_pages+0x7d6/0x10a0
[ 96.730065][ T6249] ? trace_irq_enable.constprop.0+0x11e/0x160
[ 96.730080][ T6249] page_frag_free+0x199/0x1f0
[ 96.730090][ T6249] __xdp_return+0x3b6/0x990
[ 96.730104][ T6249] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 96.730118][ T6249] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 96.730127][ T6249] bpf_prog_run_generic_xdp+0x614/0x1610
[ 96.730144][ T6249] do_xdp_generic+0x92e/0x12c0
[ 96.730157][ T6249] ? __pfx_do_xdp_generic+0x10/0x10
[ 96.730175][ T6249] tun_get_user+0x1c1c/0x3c20
[ 96.730194][ T6249] ? __pfx_tun_get_user+0x10/0x10
[ 96.730209][ T6249] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 96.730227][ T6249] ? tun_get+0x191/0x370
[ 96.730242][ T6249] ? rcu_is_watching+0x12/0xc0
[ 96.730257][ T6249] ? tun_get+0x191/0x370
[ 96.730270][ T6249] ? lock_release+0x245/0x310
[ 96.730283][ T6249] tun_chr_write_iter+0xdc/0x200
[ 96.730299][ T6249] vfs_write+0x6ac/0x1070
[ 96.730310][ T6249] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 96.730327][ T6249] ? __pfx_vfs_write+0x10/0x10
[ 96.730338][ T6249] ? lock_release+0x245/0x310
[ 96.730352][ T6249] ksys_write+0x12a/0x250
[ 96.730363][ T6249] ? __pfx_ksys_write+0x10/0x10
[ 96.730374][ T6249] ? rcu_is_watching+0x12/0xc0
[ 96.730389][ T6249] do_syscall_64+0x115/0x870
[ 96.730403][ T6249] ? clear_bhb_loop+0x40/0x90
[ 96.730414][ T6249] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.730425][ T6249] RIP: 0033:0x7f1cc575b80e
[ 96.730434][ T6249] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 96.730444][ T6249] RSP: 002b:00007f1cc66a8fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 96.730472][ T6249] RAX: ffffffffffffffda RBX: 00007f1cc66a96c0 RCX: 00007f1cc575b80e
[ 96.730481][ T6249] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8
[ 96.730487][ T6249] RBP: 00007f1cc582fee0 R08: 0000000000000000 R09: 0000000000000000
[ 96.730493][ T6249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 96.730499][ T6249] R13: 00007f1cc5a06038 R14: 00007f1cc5a05fa0 R15: 00007fff6ee09e88
[ 96.730509][ T6249]
[ 96.730516][ T6249] BUG: Bad page state in process syz.0.18 pfn:258bb
[ 96.818858][ T6249] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x258bb
[ 96.822031][ T6249] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 96.824389][ T6249] raw: 00fff00000000000 dead000000000040 ffff888022e6b000 0000000000000000
[ 96.827162][ T6249] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000
[ 96.830046][ T6249] page dumped because: page_pool leak
[ 96.831756][ T6249] page_owner tracks the page as allocated
[ 96.834055][ T6249] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6249, tgid 6248 (syz.0.18), ts 96519935899, free_ts 94201573097
[ 96.840694][ T6249] post_alloc_hook+0xfd/0x120
[ 96.842684][ T6249] get_page_from_freelist+0x11a6/0x3410
[ 96.845024][ T6249] __alloc_frozen_pages_noprof+0x27c/0x2bc0
[ 96.847496][ T6249] alloc_pages_bulk_noprof+0x649/0x1360
[ 96.849880][ T6249] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 96.852374][ T6249] page_pool_alloc_netmems+0xc4/0x1a0
[ 96.854612][ T6249] skb_pp_cow_data+0xa15/0x1220
[ 96.856639][ T6249] skb_cow_data_for_xdp+0x88/0xb0
[ 96.858766][ T6249] do_xdp_generic+0x56b/0x12c0
[ 96.860823][ T6249] tun_get_user+0x1c1c/0x3c20
[ 96.862790][ T6249] tun_chr_write_iter+0xdc/0x200
[ 96.864876][ T6249] vfs_write+0x6ac/0x1070
[ 96.866685][ T6249] ksys_write+0x12a/0x250
[ 96.868510][ T6249] do_syscall_64+0x115/0x870
[ 96.870534][ T6249] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.872963][ T6249] page last free pid 33 tgid 33 stack trace:
[ 96.875450][ T6249] __free_frozen_pages+0x794/0x10a0
[ 96.877618][ T6249] tlb_remove_table_rcu+0x2cf/0x380
[ 96.879860][ T6249] rcu_core+0x5a2/0x10d0
[ 96.881619][ T6249] handle_softirqs+0x1ea/0xa00
[ 96.883625][ T6249] run_ksoftirqd+0x38/0x60
[ 96.885525][ T6249] smpboot_thread_fn+0x3d3/0xaa0
[ 96.887577][ T6249] kthread+0x370/0x450
[ 96.889381][ T6249] ret_from_fork+0x72b/0xd50
[ 96.891302][ T6249] ret_from_fork_asm+0x1a/0x30
[ 96.893310][ T6249] Modules linked in:
[ 96.894966][ T6249] CPU: 3 UID: 0 PID: 6249 Comm: syz.0.18 Tainted: G B syzkaller #0 PREEMPT(full)
[ 96.895006][ T6249] Tainted: [B]=BAD_PAGE
[ 96.895012][ T6249] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 96.895022][ T6249] Call Trace:
[ 96.895029][ T6249]
[ 96.895036][ T6249] dump_stack_lvl+0x100/0x190
[ 96.895055][ T6249] bad_page.cold+0xbe/0xdf
[ 96.895081][ T6249] ? __pfx_bad_page+0x10/0x10
[ 96.895098][ T6249] ? rcu_is_watching+0x12/0xc0
[ 96.895123][ T6249] ? page_bad_reason+0x98/0x200
[ 96.895139][ T6249] __free_frozen_pages+0x7d6/0x10a0
[ 96.895162][ T6249] ? trace_irq_enable.constprop.0+0x11e/0x160
[ 96.895186][ T6249] page_frag_free+0x199/0x1f0
[ 96.895203][ T6249] __xdp_return+0x3b6/0x990
[ 96.895225][ T6249] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 96.895250][ T6249] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 96.895265][ T6249] bpf_prog_run_generic_xdp+0x614/0x1610
[ 96.895293][ T6249] do_xdp_generic+0x92e/0x12c0
[ 96.895316][ T6249] ? __pfx_do_xdp_generic+0x10/0x10
[ 96.895348][ T6249] tun_get_user+0x1c1c/0x3c20
[ 96.895379][ T6249] ? __pfx_tun_get_user+0x10/0x10
[ 96.895405][ T6249] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 96.895434][ T6249] ? tun_get+0x191/0x370
[ 96.895457][ T6249] ? rcu_is_watching+0x12/0xc0
[ 96.895481][ T6249] ? tun_get+0x191/0x370
[ 96.895502][ T6249] ? lock_release+0x245/0x310
[ 96.895525][ T6249] tun_chr_write_iter+0xdc/0x200
[ 96.895552][ T6249] vfs_write+0x6ac/0x1070
[ 96.895571][ T6249] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 96.895598][ T6249] ? __pfx_vfs_write+0x10/0x10
[ 96.895617][ T6249] ? lock_release+0x245/0x310
[ 96.895642][ T6249] ksys_write+0x12a/0x250
[ 96.895660][ T6249] ? __pfx_ksys_write+0x10/0x10
[ 96.895679][ T6249] ? rcu_is_watching+0x12/0xc0
[ 96.895705][ T6249] do_syscall_64+0x115/0x870
[ 96.895732][ T6249] ? clear_bhb_loop+0x40/0x90
[ 96.895751][ T6249] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.895767][ T6249] RIP: 0033:0x7f1cc575b80e
[ 96.895781][ T6249] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 96.895797][ T6249] RSP: 002b:00007f1cc66a8fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 96.895813][ T6249] RAX: ffffffffffffffda RBX: 00007f1cc66a96c0 RCX: 00007f1cc575b80e
[ 96.895824][ T6249] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8
[ 96.895835][ T6249] RBP: 00007f1cc582fee0 R08: 0000000000000000 R09: 0000000000000000
[ 96.895845][ T6249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 96.895855][ T6249] R13: 00007f1cc5a06038 R14: 00007f1cc5a05fa0 R15: 00007fff6ee09e88
[ 96.895872][ T6249]
[ 96.895897][ T6249] BUG: Bad page state in process syz.0.18 pfn:5c9b0
[ 96.998292][ T6249] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x5c9b0
[ 97.001503][ T6249] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 97.003753][ T6249] raw: 00fff00000000000 dead000000000040 ffff888022e6b000 0000000000000000
[ 97.006492][ T6249] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000
[ 97.009495][ T6249] page dumped because: page_pool leak
[ 97.011403][ T6249] page_owner tracks the page as allocated
[ 97.013419][ T6249] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6249, tgid 6248 (syz.0.18), ts 96519931694, free_ts 94201590563
[ 97.019177][ T6249] post_alloc_hook+0xfd/0x120
[ 97.020998][ T6249] get_page_from_freelist+0x11a6/0x3410
[ 97.022821][ T6249] __alloc_frozen_pages_noprof+0x27c/0x2bc0
[ 97.024626][ T6249] alloc_pages_bulk_noprof+0x649/0x1360
[ 97.026415][ T6249] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 97.028265][ T6249] page_pool_alloc_netmems+0xc4/0x1a0
[ 97.030052][ T6249] skb_pp_cow_data+0xa15/0x1220
[ 97.031647][ T6249] skb_cow_data_for_xdp+0x88/0xb0
[ 97.033357][ T6249] do_xdp_generic+0x56b/0x12c0
[ 97.035250][ T6249] tun_get_user+0x1c1c/0x3c20
[ 97.036994][ T6249] tun_chr_write_iter+0xdc/0x200
[ 97.038573][ T6249] vfs_write+0x6ac/0x1070
[ 97.040044][ T6249] ksys_write+0x12a/0x250
[ 97.041492][ T6249] do_syscall_64+0x115/0x870
[ 97.042933][ T6249] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 97.044984][ T6249] page last free pid 33 tgid 33 stack trace:
[ 97.047202][ T6249] __free_frozen_pages+0x794/0x10a0
[ 97.049267][ T6249] tlb_remove_table_rcu+0x2cf/0x380
[ 97.051007][ T6249] rcu_core+0x5a2/0x10d0
[ 97.052345][ T6249] handle_softirqs+0x1ea/0xa00
[ 97.053830][ T6249] run_ksoftirqd+0x38/0x60
[ 97.055196][ T6249] smpboot_thread_fn+0x3d3/0xaa0
[ 97.056699][ T6249] kthread+0x370/0x450
[ 97.057975][ T6249] ret_from_fork+0x72b/0xd50
[ 97.059515][ T6249] ret_from_fork_asm+0x1a/0x30
[ 97.061095][ T6249] Modules linked in:
[ 97.062368][ T6249] CPU: 3 UID: 0 PID: 6249 Comm: syz.0.18 Tainted: G B syzkaller #0 PREEMPT(full)
[ 97.062383][ T6249] Tainted: [B]=BAD_PAGE
[ 97.062387][ T6249] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 97.062393][ T6249] Call Trace:
[ 97.062397][ T6249]
[ 97.062402][ T6249] dump_stack_lvl+0x100/0x190
[ 97.062414][ T6249] bad_page.cold+0xbe/0xdf
[ 97.062430][ T6249] ? __pfx_bad_page+0x10/0x10
[ 97.062439][ T6249] ? rcu_is_watching+0x12/0xc0
[ 97.062454][ T6249] ? page_bad_reason+0x98/0x200
[ 97.062464][ T6249] __free_frozen_pages+0x7d6/0x10a0
[ 97.062478][ T6249] ? trace_irq_enable.constprop.0+0x11e/0x160
[ 97.062492][ T6249] page_frag_free+0x199/0x1f0
[ 97.062502][ T6249] __xdp_return+0x3b6/0x990
[ 97.062516][ T6249] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 97.062531][ T6249] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 97.062539][ T6249] bpf_prog_run_generic_xdp+0x614/0x1610
[ 97.062557][ T6249] do_xdp_generic+0x92e/0x12c0
[ 97.062571][ T6249] ? __pfx_do_xdp_generic+0x10/0x10
[ 97.062588][ T6249] tun_get_user+0x1c1c/0x3c20
[ 97.062608][ T6249] ? __pfx_tun_get_user+0x10/0x10
[ 97.062624][ T6249] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 97.062644][ T6249] ? tun_get+0x191/0x370
[ 97.062658][ T6249] ? rcu_is_watching+0x12/0xc0
[ 97.062672][ T6249] ? tun_get+0x191/0x370
[ 97.062685][ T6249] ? lock_release+0x245/0x310
[ 97.062699][ T6249] tun_chr_write_iter+0xdc/0x200
[ 97.062714][ T6249] vfs_write+0x6ac/0x1070
[ 97.062726][ T6249] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 97.062742][ T6249] ? __pfx_vfs_write+0x10/0x10
[ 97.062753][ T6249] ? lock_release+0x245/0x310
[ 97.062767][ T6249] ksys_write+0x12a/0x250
[ 97.062778][ T6249] ? __pfx_ksys_write+0x10/0x10
[ 97.062789][ T6249] ? rcu_is_watching+0x12/0xc0
[ 97.062805][ T6249] do_syscall_64+0x115/0x870
[ 97.062818][ T6249] ? clear_bhb_loop+0x40/0x90
[ 97.062830][ T6249] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 97.062840][ T6249] RIP: 0033:0x7f1cc575b80e
[ 97.062848][ T6249] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 97.062858][ T6249] RSP: 002b:00007f1cc66a8fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 97.062869][ T6249] RAX: ffffffffffffffda RBX: 00007f1cc66a96c0 RCX: 00007f1cc575b80e
[ 97.062876][ T6249] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8
[ 97.062882][ T6249] RBP: 00007f1cc582fee0 R08: 0000000000000000 R09: 0000000000000000
[ 97.062888][ T6249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 97.062894][ T6249] R13: 00007f1cc5a06038 R14: 00007f1cc5a05fa0 R15: 00007fff6ee09e88
[ 97.062903][ T6249]
[ 97.062910][ T6249] BUG: Bad page state in process syz.0.18 pfn:35a25
[ 97.149025][ T6249] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888035a25700 pfn:0x35a25
[ 97.152971][ T6249] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 97.155809][ T6249] raw: 00fff00000000000 dead000000000040 ffff888022e6b000 0000000000000000
[ 97.159100][ T6249] raw: ffff888035a25700 0000000000000001 00000000ffffffff 0000000000000000
[ 97.162561][ T6249] page dumped because: page_pool leak
[ 97.164736][ T6249] page_owner tracks the page as allocated
[ 97.167052][ T6249] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6249, tgid 6248 (syz.0.18), ts 96519927708, free_ts 94201607254
[ 97.173611][ T6249] post_alloc_hook+0xfd/0x120
[ 97.175537][ T6249] get_page_from_freelist+0x11a6/0x3410
[ 97.177874][ T6249] __alloc_frozen_pages_noprof+0x27c/0x2bc0
[ 97.180351][ T6249] alloc_pages_bulk_noprof+0x649/0x1360
[ 97.182684][ T6249] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 97.185214][ T6249] page_pool_alloc_netmems+0xc4/0x1a0
[ 97.187184][ T6249] skb_pp_cow_data+0xa15/0x1220
[ 97.188969][ T6249] skb_cow_data_for_xdp+0x88/0xb0
[ 97.190867][ T6249] do_xdp_generic+0x56b/0x12c0
[ 97.192597][ T6249] tun_get_user+0x1c1c/0x3c20
[ 97.194308][ T6249] tun_chr_write_iter+0xdc/0x200
[ 97.196100][ T6249] vfs_write+0x6ac/0x1070
[ 97.197444][ T6249] ksys_write+0x12a/0x250
[ 97.198789][ T6249] do_syscall_64+0x115/0x870
[ 97.200171][ T6249] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 97.201997][ T6249] page last free pid 33 tgid 33 stack trace:
[ 97.203811][ T6249] __free_frozen_pages+0x794/0x10a0
[ 97.205463][ T6249] tlb_remove_table_rcu+0x2cf/0x380
[ 97.207086][ T6249] rcu_core+0x5a2/0x10d0
[ 97.208413][ T6249] handle_softirqs+0x1ea/0xa00
[ 97.209959][ T6249] run_ksoftirqd+0x38/0x60
[ 97.211329][ T6249] smpboot_thread_fn+0x3d3/0xaa0
[ 97.212914][ T6249] kthread+0x370/0x450
[ 97.214200][ T6249] ret_from_fork+0x72b/0xd50
[ 97.215621][ T6249] ret_from_fork_asm+0x1a/0x30
[ 97.217095][ T6249] Modules linked in:
[ 97.218344][ T6249] CPU: 3 UID: 0 PID: 6249 Comm: syz.0.18 Tainted: G B syzkaller #0 PREEMPT(full)
[ 97.218360][ T6249] Tainted: [B]=BAD_PAGE
[ 97.218364][ T6249] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 97.218370][ T6249] Call Trace:
[ 97.218375][ T6249]
[ 97.218380][ T6249] dump_stack_lvl+0x100/0x190
[ 97.218392][ T6249] bad_page.cold+0xbe/0xdf
[ 97.218407][ T6249] ? __pfx_bad_page+0x10/0x10
[ 97.218417][ T6249] ? rcu_is_watching+0x12/0xc0
[ 97.218433][ T6249] ? page_bad_reason+0x98/0x200
[ 97.218442][ T6249] __free_frozen_pages+0x7d6/0x10a0
[ 97.218456][ T6249] ? trace_irq_enable.constprop.0+0x11e/0x160
[ 97.218471][ T6249] page_frag_free+0x199/0x1f0
[ 97.218481][ T6249] __xdp_return+0x3b6/0x990
[ 97.218494][ T6249] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 97.218508][ T6249] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 97.218517][ T6249] bpf_prog_run_generic_xdp+0x614/0x1610
[ 97.218534][ T6249] do_xdp_generic+0x92e/0x12c0
[ 97.218547][ T6249] ? __pfx_do_xdp_generic+0x10/0x10
[ 97.218565][ T6249] tun_get_user+0x1c1c/0x3c20
[ 97.218583][ T6249] ? __pfx_tun_get_user+0x10/0x10
[ 97.218602][ T6249] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 97.218619][ T6249] ? tun_get+0x191/0x370
[ 97.218633][ T6249] ? rcu_is_watching+0x12/0xc0
[ 97.218650][ T6249] ? tun_get+0x191/0x370
[ 97.218663][ T6249] ? lock_release+0x245/0x310
[ 97.218677][ T6249] tun_chr_write_iter+0xdc/0x200
[ 97.218692][ T6249] vfs_write+0x6ac/0x1070
[ 97.218704][ T6249] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 97.218719][ T6249] ? __pfx_vfs_write+0x10/0x10
[ 97.218731][ T6249] ? lock_release+0x245/0x310
[ 97.218745][ T6249] ksys_write+0x12a/0x250
[ 97.218756][ T6249] ? __pfx_ksys_write+0x10/0x10
[ 97.218767][ T6249] ? rcu_is_watching+0x12/0xc0
[ 97.218782][ T6249] do_syscall_64+0x115/0x870
[ 97.218796][ T6249] ? clear_bhb_loop+0x40/0x90
[ 97.218807][ T6249] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 97.218818][ T6249] RIP: 0033:0x7f1cc575b80e
[ 97.218826][ T6249] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 97.218837][ T6249] RSP: 002b:00007f1cc66a8fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 97.218847][ T6249] RAX: ffffffffffffffda RBX: 00007f1cc66a96c0 RCX: 00007f1cc575b80e
[ 97.218853][ T6249] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8
[ 97.218860][ T6249] RBP: 00007f1cc582fee0 R08: 0000000000000000 R09: 0000000000000000
[ 97.218866][ T6249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 97.218871][ T6249] R13: 00007f1cc5a06038 R14: 00007f1cc5a05fa0 R15: 00007fff6ee09e88
[ 97.218881][ T6249]
[ 97.218888][ T6249] BUG: Bad page state in process syz.0.18 pfn:2e1a4
[ 97.305948][ T6249] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x2e1a4
[ 97.309993][ T6249] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 97.312644][ T6249] raw: 00fff00000000000 dead000000000040 ffff888022e6b000 0000000000000000
[ 97.316109][ T6249] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000
[ 97.319658][ T6249] page dumped because: page_pool leak
[ 97.321837][ T6249] page_owner tracks the page as allocated
[ 97.324134][ T6249] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6249, tgid 6248 (syz.0.18), ts 96519923435, free_ts 96416653789
[ 97.330850][ T6249] post_alloc_hook+0xfd/0x120
[ 97.332802][ T6249] get_page_from_freelist+0x11a6/0x3410
[ 97.335015][ T6249] __alloc_frozen_pages_noprof+0x27c/0x2bc0
[ 97.336814][ T6249] alloc_pages_bulk_noprof+0x649/0x1360
[ 97.338599][ T6249] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 97.340514][ T6249] page_pool_alloc_netmems+0xc4/0x1a0
[ 97.342265][ T6249] skb_pp_cow_data+0xa15/0x1220
[ 97.343999][ T6249] skb_cow_data_for_xdp+0x88/0xb0
[ 97.345577][ T6249] do_xdp_generic+0x56b/0x12c0
[ 97.347040][ T6249] tun_get_user+0x1c1c/0x3c20
[ 97.348509][ T6249] tun_chr_write_iter+0xdc/0x200
[ 97.350108][ T6249] vfs_write+0x6ac/0x1070
[ 97.351426][ T6249] ksys_write+0x12a/0x250
[ 97.352984][ T6249] do_syscall_64+0x115/0x870
[ 97.354482][ T6249] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 97.356269][ T6249] page last free pid 6247 tgid 6247 stack trace:
[ 97.358270][ T6249] __free_frozen_pages+0x794/0x10a0
[ 97.359931][ T6249] tlb_finish_mmu+0x27d/0x810
[ 97.361385][ T6249] exit_mmap+0x454/0xa10
[ 97.362758][ T6249] __mmput+0x12a/0x410
[ 97.364006][ T6249] mmput+0x67/0x80
[ 97.365193][ T6249] do_exit+0x8b2/0x2af0
[ 97.366464][ T6249] do_group_exit+0xd5/0x2a0
[ 97.367891][ T6249] __x64_sys_exit_group+0x3e/0x50
[ 97.369543][ T6249] x64_sys_call+0x102c/0x1530
[ 97.371020][ T6249] do_syscall_64+0x115/0x870
[ 97.372641][ T6249] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 97.375023][ T6249] Modules linked in:
[ 97.376206][ T6249] CPU: 3 UID: 0 PID: 6249 Comm: syz.0.18 Tainted: G B syzkaller #0 PREEMPT(full)
[ 97.376222][ T6249] Tainted: [B]=BAD_PAGE
[ 97.376225][ T6249] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 97.376232][ T6249] Call Trace:
[ 97.376236][ T6249]
[ 97.376241][ T6249] dump_stack_lvl+0x100/0x190
[ 97.376254][ T6249] bad_page.cold+0xbe/0xdf
[ 97.376269][ T6249] ? __pfx_bad_page+0x10/0x10
[ 97.376279][ T6249] ? rcu_is_watching+0x12/0xc0
[ 97.376294][ T6249] ? page_bad_reason+0x98/0x200
[ 97.376304][ T6249] __free_frozen_pages+0x7d6/0x10a0
[ 97.376318][ T6249] ? trace_irq_enable.constprop.0+0x11e/0x160
[ 97.376333][ T6249] page_frag_free+0x199/0x1f0
[ 97.376343][ T6249] __xdp_return+0x3b6/0x990
[ 97.376356][ T6249] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 97.376370][ T6249] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 97.376379][ T6249] bpf_prog_run_generic_xdp+0x614/0x1610
[ 97.376397][ T6249] do_xdp_generic+0x92e/0x12c0
[ 97.376411][ T6249] ? __pfx_do_xdp_generic+0x10/0x10
[ 97.376429][ T6249] tun_get_user+0x1c1c/0x3c20
[ 97.376447][ T6249] ? __pfx_tun_get_user+0x10/0x10
[ 97.376463][ T6249] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 97.376480][ T6249] ? tun_get+0x191/0x370
[ 97.376493][ T6249] ? rcu_is_watching+0x12/0xc0
[ 97.376507][ T6249] ? tun_get+0x191/0x370
[ 97.376521][ T6249] ? lock_release+0x245/0x310
[ 97.376534][ T6249] tun_chr_write_iter+0xdc/0x200
[ 97.376550][ T6249] vfs_write+0x6ac/0x1070
[ 97.376561][ T6249] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 97.376577][ T6249] ? __pfx_vfs_write+0x10/0x10
[ 97.376588][ T6249] ? lock_release+0x245/0x310
[ 97.376607][ T6249] ksys_write+0x12a/0x250
[ 97.376618][ T6249] ? __pfx_ksys_write+0x10/0x10
[ 97.376629][ T6249] ? rcu_is_watching+0x12/0xc0
[ 97.376644][ T6249] do_syscall_64+0x115/0x870
[ 97.376658][ T6249] ? clear_bhb_loop+0x40/0x90
[ 97.376670][ T6249] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 97.376680][ T6249] RIP: 0033:0x7f1cc575b80e
[ 97.376689][ T6249] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 97.376700][ T6249] RSP: 002b:00007f1cc66a8fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 97.376710][ T6249] RAX: ffffffffffffffda RBX: 00007f1cc66a96c0 RCX: 00007f1cc575b80e
[ 97.376717][ T6249] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8
[ 97.376724][ T6249] RBP: 00007f1cc582fee0 R08: 0000000000000000 R09: 0000000000000000
[ 97.376730][ T6249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 97.376736][ T6249] R13: 00007f1cc5a06038 R14: 00007f1cc5a05fa0 R15: 00007fff6ee09e88
[ 97.376745][ T6249]
[ 97.376752][ T6249] BUG: Bad page state in process syz.0.18 pfn:400cb
[ 97.466103][ T6249] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888036073100 pfn:0x400cb
[ 97.469191][ T6249] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 97.471385][ T6249] raw: 00fff00000000000 dead000000000040 ffff888022e6b000 0000000000000000
[ 97.474099][ T6249] raw: ffff888036073100 0000000000000001 00000000ffffffff 0000000000000000
[ 97.476609][ T6249] page dumped because: page_pool leak
[ 97.478266][ T6249] page_owner tracks the page as allocated
[ 97.480016][ T6249] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6249, tgid 6248 (syz.0.18), ts 96519919418, free_ts 96416886420
[ 97.484958][ T6249] post_alloc_hook+0xfd/0x120
[ 97.486402][ T6249] get_page_from_freelist+0x11a6/0x3410
[ 97.488079][ T6249] __alloc_frozen_pages_noprof+0x27c/0x2bc0
[ 97.490030][ T6249] alloc_pages_bulk_noprof+0x649/0x1360
[ 97.491819][ T6249] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 97.493687][ T6249] page_pool_alloc_netmems+0xc4/0x1a0
[ 97.495309][ T6249] skb_pp_cow_data+0xa15/0x1220
[ 97.496793][ T6249] skb_cow_data_for_xdp+0x88/0xb0
[ 97.498343][ T6249] do_xdp_generic+0x56b/0x12c0
[ 97.499912][ T6249] tun_get_user+0x1c1c/0x3c20
[ 97.501372][ T6249] tun_chr_write_iter+0xdc/0x200
[ 97.502960][ T6249] vfs_write+0x6ac/0x1070
[ 97.504279][ T6249] ksys_write+0x12a/0x250
[ 97.505692][ T6249] do_syscall_64+0x115/0x870
[ 97.507110][ T6249] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 97.508918][ T6249] page last free pid 5446 tgid 5446 stack trace:
[ 97.510959][ T6249] __free_frozen_pages+0x794/0x10a0
[ 97.512473][ T6249] pgd_free+0x3eb/0x540
[ 97.513608][ T6249] __mmdrop+0xe5/0x750
[ 97.514705][ T6249] finish_task_switch.isra.0+0xb0e/0x1010
[ 97.516212][ T6249] __schedule+0x129d/0x67a0
[ 97.517436][ T6249] schedule+0xdd/0x390
[ 97.518581][ T6249] schedule_hrtimeout_range_clock+0x2d0/0x310
[ 97.520431][ T6249] poll_schedule_timeout.constprop.0+0xbe/0x1b0
[ 97.522958][ T6249] do_sys_poll+0x9a9/0xe90
[ 97.524789][ T6249] __x64_sys_ppoll+0x2b5/0x350
[ 97.526779][ T6249] do_syscall_64+0x115/0x870
[ 97.528707][ T6249] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 97.531220][ T6249] Modules linked in:
[ 97.532858][ T6249] CPU: 3 UID: 0 PID: 6249 Comm: syz.0.18 Tainted: G B syzkaller #0 PREEMPT(full)
[ 97.532883][ T6249] Tainted: [B]=BAD_PAGE
[ 97.532889][ T6249] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 97.532899][ T6249] Call Trace:
[ 97.532905][ T6249]
[ 97.532912][ T6249] dump_stack_lvl+0x100/0x190
[ 97.532933][ T6249] bad_page.cold+0xbe/0xdf
[ 97.532959][ T6249] ? __pfx_bad_page+0x10/0x10
[ 97.532975][ T6249] ? rcu_is_watching+0x12/0xc0
[ 97.533000][ T6249] ? page_bad_reason+0x98/0x200
[ 97.533017][ T6249] __free_frozen_pages+0x7d6/0x10a0
[ 97.533040][ T6249] ? trace_irq_enable.constprop.0+0x11e/0x160
[ 97.533065][ T6249] page_frag_free+0x199/0x1f0
[ 97.533082][ T6249] __xdp_return+0x3b6/0x990
[ 97.533103][ T6249] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 97.533128][ T6249] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 97.533142][ T6249] bpf_prog_run_generic_xdp+0x614/0x1610
[ 97.533192][ T6249] do_xdp_generic+0x92e/0x12c0
[ 97.533217][ T6249] ? __pfx_do_xdp_generic+0x10/0x10
[ 97.533248][ T6249] tun_get_user+0x1c1c/0x3c20
[ 97.533279][ T6249] ? __pfx_tun_get_user+0x10/0x10
[ 97.533305][ T6249] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 97.533334][ T6249] ? tun_get+0x191/0x370
[ 97.533356][ T6249] ? rcu_is_watching+0x12/0xc0
[ 97.533380][ T6249] ? tun_get+0x191/0x370
[ 97.533402][ T6249] ? lock_release+0x245/0x310
[ 97.533425][ T6249] tun_chr_write_iter+0xdc/0x200
[ 97.533451][ T6249] vfs_write+0x6ac/0x1070
[ 97.533470][ T6249] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 97.533498][ T6249] ? __pfx_vfs_write+0x10/0x10
[ 97.533517][ T6249] ? lock_release+0x245/0x310
[ 97.533542][ T6249] ksys_write+0x12a/0x250
[ 97.533560][ T6249] ? __pfx_ksys_write+0x10/0x10
[ 97.533579][ T6249] ? rcu_is_watching+0x12/0xc0
[ 97.533609][ T6249] do_syscall_64+0x115/0x870
[ 97.533631][ T6249] ? clear_bhb_loop+0x40/0x90
[ 97.533651][ T6249] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 97.533668][ T6249] RIP: 0033:0x7f1cc575b80e
[ 97.533682][ T6249] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 97.533699][ T6249] RSP: 002b:00007f1cc66a8fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 97.533715][ T6249] RAX: ffffffffffffffda RBX: 00007f1cc66a96c0 RCX: 00007f1cc575b80e
[ 97.533727][ T6249] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8
[ 97.533738][ T6249] RBP: 00007f1cc582fee0 R08: 0000000000000000 R09: 0000000000000000
[ 97.533749][ T6249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 97.533759][ T6249] R13: 00007f1cc5a06038 R14: 00007f1cc5a05fa0 R15: 00007fff6ee09e88
[ 97.533776][ T6249]
[ 97.533785][ T6249] BUG: Bad page state in process syz.0.18 pfn:4960c
[ 97.633135][ T6249] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804960c620 pfn:0x4960c
[ 97.636828][ T6249] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 97.638946][ T6249] raw: 00fff00000000000 dead000000000040 ffff888022e6b000 0000000000000000
[ 97.641485][ T6249] raw: ffff88804960c620 0000000000000001 00000000ffffffff 0000000000000000
[ 97.644576][ T6249] page dumped because: page_pool leak
[ 97.646629][ T6249] page_owner tracks the page as allocated
[ 97.648754][ T6249] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6249, tgid 6248 (syz.0.18), ts 96519915222, free_ts 96417538973
[ 97.653879][ T6249] post_alloc_hook+0xfd/0x120
[ 97.655475][ T6249] get_page_from_freelist+0x11a6/0x3410
[ 97.657369][ T6249] __alloc_frozen_pages_noprof+0x27c/0x2bc0
[ 97.659410][ T6249] alloc_pages_bulk_noprof+0x649/0x1360
[ 97.661116][ T6249] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 97.662993][ T6249] page_pool_alloc_netmems+0xc4/0x1a0
[ 97.664625][ T6249] skb_pp_cow_data+0xa15/0x1220
[ 97.666119][ T6249] skb_cow_data_for_xdp+0x88/0xb0
[ 97.667666][ T6249] do_xdp_generic+0x56b/0x12c0
[ 97.669178][ T6249] tun_get_user+0x1c1c/0x3c20
[ 97.670719][ T6249] tun_chr_write_iter+0xdc/0x200
[ 97.672223][ T6249] vfs_write+0x6ac/0x1070
[ 97.673530][ T6249] ksys_write+0x12a/0x250
[ 97.674955][ T6249] do_syscall_64+0x115/0x870
[ 97.676545][ T6249] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 97.678734][ T6249] page last free pid 5144 tgid 5144 stack trace:
[ 97.681040][ T6249] __free_frozen_pages+0x794/0x10a0
[ 97.682738][ T6249] qlist_free_all+0x47/0xf0
[ 97.684131][ T6249] kasan_quarantine_reduce+0x1a0/0x1f0
[ 97.685821][ T6249] __kasan_slab_alloc+0x69/0x90
[ 97.687389][ T6249] kmem_cache_alloc_noprof+0x241/0x6e0
[ 97.689475][ T6249] do_getname+0x35/0x390
[ 97.691007][ T6249] do_readlinkat+0xa9/0x370
[ 97.692699][ T6249] __x64_sys_readlink+0x78/0xc0
[ 97.694551][ T6249] do_syscall_64+0x115/0x870
[ 97.696131][ T6249] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 97.698194][ T6249] Modules linked in:
[ 97.699728][ T6249] CPU: 3 UID: 0 PID: 6249 Comm: syz.0.18 Tainted: G B syzkaller #0 PREEMPT(full)
[ 97.699745][ T6249] Tainted: [B]=BAD_PAGE
[ 97.699749][ T6249] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 97.699755][ T6249] Call Trace:
[ 97.699760][ T6249]
[ 97.699765][ T6249] dump_stack_lvl+0x100/0x190
[ 97.699778][ T6249] bad_page.cold+0xbe/0xdf
[ 97.699794][ T6249] ? __pfx_bad_page+0x10/0x10
[ 97.699803][ T6249] ? rcu_is_watching+0x12/0xc0
[ 97.699819][ T6249] ? page_bad_reason+0x98/0x200
[ 97.699829][ T6249] __free_frozen_pages+0x7d6/0x10a0
[ 97.699843][ T6249] ? trace_irq_enable.constprop.0+0x11e/0x160
[ 97.699858][ T6249] page_frag_free+0x199/0x1f0
[ 97.699868][ T6249] __xdp_return+0x3b6/0x990
[ 97.699882][ T6249] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 97.699896][ T6249] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 97.699905][ T6249] bpf_prog_run_generic_xdp+0x614/0x1610
[ 97.699922][ T6249] do_xdp_generic+0x92e/0x12c0
[ 97.699936][ T6249] ? __pfx_do_xdp_generic+0x10/0x10
[ 97.699954][ T6249] tun_get_user+0x1c1c/0x3c20
[ 97.699973][ T6249] ? __pfx_tun_get_user+0x10/0x10
[ 97.699988][ T6249] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 97.700005][ T6249] ? tun_get+0x191/0x370
[ 97.700019][ T6249] ? rcu_is_watching+0x12/0xc0
[ 97.700033][ T6249] ? tun_get+0x191/0x370
[ 97.700046][ T6249] ? lock_release+0x245/0x310
[ 97.700060][ T6249] tun_chr_write_iter+0xdc/0x200
[ 97.700076][ T6249] vfs_write+0x6ac/0x1070
[ 97.700087][ T6249] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 97.700105][ T6249] ? __pfx_vfs_write+0x10/0x10
[ 97.700116][ T6249] ? lock_release+0x245/0x310
[ 97.700131][ T6249] ksys_write+0x12a/0x250
[ 97.700141][ T6249] ? __pfx_ksys_write+0x10/0x10
[ 97.700153][ T6249] ? rcu_is_watching+0x12/0xc0
[ 97.700168][ T6249] do_syscall_64+0x115/0x870
[ 97.700181][ T6249] ? clear_bhb_loop+0x40/0x90
[ 97.700193][ T6249] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 97.700203][ T6249] RIP: 0033:0x7f1cc575b80e
[ 97.700212][ T6249] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 97.700222][ T6249] RSP: 002b:00007f1cc66a8fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 97.700233][ T6249] RAX: ffffffffffffffda RBX: 00007f1cc66a96c0 RCX: 00007f1cc575b80e
[ 97.700239][ T6249] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8
[ 97.700246][ T6249] RBP: 00007f1cc582fee0 R08: 0000000000000000 R09: 0000000000000000
[ 97.700252][ T6249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 97.700258][ T6249] R13: 00007f1cc5a06038 R14: 00007f1cc5a05fa0 R15: 00007fff6ee09e88
[ 97.700267][ T6249]
[ 97.700274][ T6249] BUG: Bad page state in process syz.0.18 pfn:3652d
[ 97.787051][ T6249] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803652d700 pfn:0x3652d
[ 97.790831][ T6249] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 97.793562][ T6249] raw: 00fff00000000000 dead000000000040 ffff888022e6b000 0000000000000000
[ 97.797019][ T6249] raw: ffff88803652d700 0000000000000001 00000000ffffffff 0000000000000000
[ 97.800460][ T6249] page dumped because: page_pool leak
[ 97.802487][ T6249] page_owner tracks the page as allocated
[ 97.804740][ T6249] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6249, tgid 6248 (syz.0.18), ts 96519911055, free_ts 96417546735
[ 97.810465][ T6249] post_alloc_hook+0xfd/0x120
[ 97.812417][ T6249] get_page_from_freelist+0x11a6/0x3410
[ 97.814278][ T6249] __alloc_frozen_pages_noprof+0x27c/0x2bc0
[ 97.816209][ T6249] alloc_pages_bulk_noprof+0x649/0x1360
[ 97.818446][ T6249] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 97.820874][ T6249] page_pool_alloc_netmems+0xc4/0x1a0
[ 97.822757][ T6249] skb_pp_cow_data+0xa15/0x1220
[ 97.824741][ T6249] skb_cow_data_for_xdp+0x88/0xb0
[ 97.826825][ T6249] do_xdp_generic+0x56b/0x12c0
[ 97.828809][ T6249] tun_get_user+0x1c1c/0x3c20
[ 97.830869][ T6249] tun_chr_write_iter+0xdc/0x200
[ 97.832919][ T6249] vfs_write+0x6ac/0x1070
[ 97.834719][ T6249] ksys_write+0x12a/0x250
[ 97.836492][ T6249] do_syscall_64+0x115/0x870
[ 97.838431][ T6249] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 97.840950][ T6249] page last free pid 5144 tgid 5144 stack trace:
[ 97.843056][ T6249] __free_frozen_pages+0x794/0x10a0
[ 97.844733][ T6249] qlist_free_all+0x47/0xf0
[ 97.846230][ T6249] kasan_quarantine_reduce+0x1a0/0x1f0
[ 97.847944][ T6249] __kasan_slab_alloc+0x69/0x90
[ 97.849561][ T6249] kmem_cache_alloc_noprof+0x241/0x6e0
[ 97.851217][ T6249] do_getname+0x35/0x390
[ 97.852509][ T6249] do_readlinkat+0xa9/0x370
[ 97.853880][ T6249] __x64_sys_readlink+0x78/0xc0
[ 97.855311][ T6249] do_syscall_64+0x115/0x870
[ 97.856668][ T6249] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 97.858360][ T6249] Modules linked in:
[ 97.859597][ T6249] CPU: 3 UID: 0 PID: 6249 Comm: syz.0.18 Tainted: G B syzkaller #0 PREEMPT(full)
[ 97.859614][ T6249] Tainted: [B]=BAD_PAGE
[ 97.859618][ T6249] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 97.859624][ T6249] Call Trace:
[ 97.859629][ T6249]
[ 97.859633][ T6249] dump_stack_lvl+0x100/0x190
[ 97.859646][ T6249] bad_page.cold+0xbe/0xdf
[ 97.859662][ T6249] ? __pfx_bad_page+0x10/0x10
[ 97.859672][ T6249] ? rcu_is_watching+0x12/0xc0
[ 97.859687][ T6249] ? page_bad_reason+0x98/0x200
[ 97.859696][ T6249] __free_frozen_pages+0x7d6/0x10a0
[ 97.859710][ T6249] ? trace_irq_enable.constprop.0+0x11e/0x160
[ 97.859725][ T6249] page_frag_free+0x199/0x1f0
[ 97.859735][ T6249] __xdp_return+0x3b6/0x990
[ 97.859748][ T6249] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 97.859762][ T6249] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 97.859772][ T6249] bpf_prog_run_generic_xdp+0x614/0x1610
[ 97.859788][ T6249] do_xdp_generic+0x92e/0x12c0
[ 97.859802][ T6249] ? __pfx_do_xdp_generic+0x10/0x10
[ 97.859820][ T6249] tun_get_user+0x1c1c/0x3c20
[ 97.859838][ T6249] ? __pfx_tun_get_user+0x10/0x10
[ 97.859854][ T6249] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 97.859871][ T6249] ? tun_get+0x191/0x370
[ 97.859885][ T6249] ? rcu_is_watching+0x12/0xc0
[ 97.859899][ T6249] ? tun_get+0x191/0x370
[ 97.859912][ T6249] ? lock_release+0x245/0x310
[ 97.859925][ T6249] tun_chr_write_iter+0xdc/0x200
[ 97.859941][ T6249] vfs_write+0x6ac/0x1070
[ 97.859953][ T6249] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 97.859969][ T6249] ? __pfx_vfs_write+0x10/0x10
[ 97.859980][ T6249] ? lock_release+0x245/0x310
[ 97.859994][ T6249] ksys_write+0x12a/0x250
[ 97.860005][ T6249] ? __pfx_ksys_write+0x10/0x10
[ 97.860016][ T6249] ? rcu_is_watching+0x12/0xc0
[ 97.860031][ T6249] do_syscall_64+0x115/0x870
[ 97.860044][ T6249] ? clear_bhb_loop+0x40/0x90
[ 97.860056][ T6249] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 97.860066][ T6249] RIP: 0033:0x7f1cc575b80e
[ 97.860075][ T6249] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 97.860085][ T6249] RSP: 002b:00007f1cc66a8fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 97.860096][ T6249] RAX: ffffffffffffffda RBX: 00007f1cc66a96c0 RCX: 00007f1cc575b80e
[ 97.860104][ T6249] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8
[ 97.860110][ T6249] RBP: 00007f1cc582fee0 R08: 0000000000000000 R09: 0000000000000000
[ 97.860116][ T6249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 97.860122][ T6249] R13: 00007f1cc5a06038 R14: 00007f1cc5a05fa0 R15: 00007fff6ee09e88
[ 97.860132][ T6249]
[ 97.860138][ T6249] BUG: Bad page state in process syz.0.18 pfn:3433d
[ 97.941942][ T6249] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803433de40 pfn:0x3433d
[ 97.944942][ T6249] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 97.947156][ T6249] raw: 00fff00000000000 dead000000000040 ffff888022e6b000 0000000000000000
[ 97.949873][ T6249] raw: ffff88803433de40 0000000000000001 00000000ffffffff 0000000000000000
[ 97.952440][ T6249] page dumped because: page_pool leak
[ 97.954030][ T6249] page_owner tracks the page as allocated
[ 97.955693][ T6249] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6249, tgid 6248 (syz.0.18), ts 96519906959, free_ts 96417574851
[ 97.960512][ T6249] post_alloc_hook+0xfd/0x120
[ 97.961955][ T6249] get_page_from_freelist+0x11a6/0x3410
[ 97.963636][ T6249] __alloc_frozen_pages_noprof+0x27c/0x2bc0
[ 97.965431][ T6249] alloc_pages_bulk_noprof+0x649/0x1360
[ 97.967086][ T6249] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 97.968942][ T6249] page_pool_alloc_netmems+0xc4/0x1a0
[ 97.970654][ T6249] skb_pp_cow_data+0xa15/0x1220
[ 97.972119][ T6249] skb_cow_data_for_xdp+0x88/0xb0
[ 97.973659][ T6249] do_xdp_generic+0x56b/0x12c0
[ 97.975123][ T6249] tun_get_user+0x1c1c/0x3c20
[ 97.976578][ T6249] tun_chr_write_iter+0xdc/0x200
[ 97.978159][ T6249] vfs_write+0x6ac/0x1070
[ 97.979599][ T6249] ksys_write+0x12a/0x250
[ 97.980911][ T6249] do_syscall_64+0x115/0x870
[ 97.982341][ T6249] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 97.984133][ T6249] page last free pid 5144 tgid 5144 stack trace:
[ 97.986040][ T6249] __free_frozen_pages+0x794/0x10a0
[ 97.987617][ T6249] qlist_free_all+0x47/0xf0
[ 97.989035][ T6249] kasan_quarantine_reduce+0x1a0/0x1f0
[ 97.990786][ T6249] __kasan_slab_alloc+0x69/0x90
[ 97.992165][ T6249] kmem_cache_alloc_noprof+0x241/0x6e0
[ 97.993831][ T6249] do_getname+0x35/0x390
[ 97.995123][ T6249] do_readlinkat+0xa9/0x370
[ 97.996508][ T6249] __x64_sys_readlink+0x78/0xc0
[ 97.998002][ T6249] do_syscall_64+0x115/0x870
[ 97.999500][ T6249] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 98.001276][ T6249] Modules linked in:
[ 98.002480][ T6249] CPU: 3 UID: 0 PID: 6249 Comm: syz.0.18 Tainted: G B syzkaller #0 PREEMPT(full)
[ 98.002496][ T6249] Tainted: [B]=BAD_PAGE
[ 98.002500][ T6249] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 98.002506][ T6249] Call Trace:
[ 98.002510][ T6249]
[ 98.002515][ T6249] dump_stack_lvl+0x100/0x190
[ 98.002527][ T6249] bad_page.cold+0xbe/0xdf
[ 98.002543][ T6249] ? __pfx_bad_page+0x10/0x10
[ 98.002553][ T6249] ? rcu_is_watching+0x12/0xc0
[ 98.002568][ T6249] ? page_bad_reason+0x98/0x200
[ 98.002578][ T6249] __free_frozen_pages+0x7d6/0x10a0
[ 98.002595][ T6249] ? trace_irq_enable.constprop.0+0x11e/0x160
[ 98.002610][ T6249] page_frag_free+0x199/0x1f0
[ 98.002620][ T6249] __xdp_return+0x3b6/0x990
[ 98.002634][ T6249] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 98.002649][ T6249] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 98.002658][ T6249] bpf_prog_run_generic_xdp+0x614/0x1610
[ 98.002675][ T6249] do_xdp_generic+0x92e/0x12c0
[ 98.002689][ T6249] ? __pfx_do_xdp_generic+0x10/0x10
[ 98.002707][ T6249] tun_get_user+0x1c1c/0x3c20
[ 98.002726][ T6249] ? __pfx_tun_get_user+0x10/0x10
[ 98.002741][ T6249] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 98.002759][ T6249] ? tun_get+0x191/0x370
[ 98.002772][ T6249] ? rcu_is_watching+0x12/0xc0
[ 98.002786][ T6249] ? tun_get+0x191/0x370
[ 98.002799][ T6249] ? lock_release+0x245/0x310
[ 98.002813][ T6249] tun_chr_write_iter+0xdc/0x200
[ 98.002829][ T6249] vfs_write+0x6ac/0x1070
[ 98.002840][ T6249] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 98.002856][ T6249] ? __pfx_vfs_write+0x10/0x10
[ 98.002867][ T6249] ? lock_release+0x245/0x310
[ 98.002882][ T6249] ksys_write+0x12a/0x250
[ 98.002893][ T6249] ? __pfx_ksys_write+0x10/0x10
[ 98.002904][ T6249] ? rcu_is_watching+0x12/0xc0
[ 98.002919][ T6249] do_syscall_64+0x115/0x870
[ 98.002933][ T6249] ? clear_bhb_loop+0x40/0x90
[ 98.002944][ T6249] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 98.002955][ T6249] RIP: 0033:0x7f1cc575b80e
[ 98.002963][ T6249] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 98.002974][ T6249] RSP: 002b:00007f1cc66a8fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 98.002985][ T6249] RAX: ffffffffffffffda RBX: 00007f1cc66a96c0 RCX: 00007f1cc575b80e
[ 98.002991][ T6249] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8
[ 98.002997][ T6249] RBP: 00007f1cc582fee0 R08: 0000000000000000 R09: 0000000000000000
[ 98.003003][ T6249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 98.003009][ T6249] R13: 00007f1cc5a06038 R14: 00007f1cc5a05fa0 R15: 00007fff6ee09e88
[ 98.003019][ T6249]
[ 98.003024][ T6249] BUG: Bad page state in process syz.0.18 pfn:58bb3
[ 98.095574][ T6249] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888058bb3200 pfn:0x58bb3
[ 98.098629][ T6249] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 98.100823][ T6249] raw: 00fff00000000000 dead000000000040 ffff888022e6b000 0000000000000000
[ 98.103437][ T6249] raw: ffff888058bb3200 0000000000000001 00000000ffffffff 0000000000000000
[ 98.106296][ T6249] page dumped because: page_pool leak
[ 98.108014][ T6249] page_owner tracks the page as allocated
[ 98.110435][ T6249] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6249, tgid 6248 (syz.0.18), ts 96519903020, free_ts 96417626791
[ 98.115480][ T6249] post_alloc_hook+0xfd/0x120
[ 98.116919][ T6249] get_page_from_freelist+0x11a6/0x3410
[ 98.118639][ T6249] __alloc_frozen_pages_noprof+0x27c/0x2bc0
[ 98.120496][ T6249] alloc_pages_bulk_noprof+0x649/0x1360
[ 98.122203][ T6249] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 98.124172][ T6249] page_pool_alloc_netmems+0xc4/0x1a0
[ 98.126332][ T6249] skb_pp_cow_data+0xa15/0x1220
[ 98.128254][ T6249] skb_cow_data_for_xdp+0x88/0xb0
[ 98.130252][ T6249] do_xdp_generic+0x56b/0x12c0
[ 98.131698][ T6249] tun_get_user+0x1c1c/0x3c20
[ 98.133351][ T6249] tun_chr_write_iter+0xdc/0x200
[ 98.135422][ T6249] vfs_write+0x6ac/0x1070
[ 98.136871][ T6249] ksys_write+0x12a/0x250
[ 98.138235][ T6249] do_syscall_64+0x115/0x870
[ 98.139727][ T6249] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 98.141580][ T6249] page last free pid 5144 tgid 5144 stack trace:
[ 98.143493][ T6249] __free_frozen_pages+0x794/0x10a0
[ 98.145519][ T6249] qlist_free_all+0x47/0xf0
[ 98.147309][ T6249] kasan_quarantine_reduce+0x1a0/0x1f0
[ 98.149666][ T6249] __kasan_slab_alloc+0x69/0x90
[ 98.151486][ T6249] kmem_cache_alloc_noprof+0x241/0x6e0
[ 98.153151][ T6249] do_getname+0x35/0x390
[ 98.154818][ T6249] do_readlinkat+0xa9/0x370
[ 98.156713][ T6249] __x64_sys_readlink+0x78/0xc0
[ 98.158769][ T6249] do_syscall_64+0x115/0x870
[ 98.160740][ T6249] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 98.163119][ T6249] Modules linked in:
[ 98.164743][ T6249] CPU: 3 UID: 0 PID: 6249 Comm: syz.0.18 Tainted: G B syzkaller #0 PREEMPT(full)
[ 98.164769][ T6249] Tainted: [B]=BAD_PAGE
[ 98.164775][ T6249] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 98.164785][ T6249] Call Trace:
[ 98.164791][ T6249]
[ 98.164798][ T6249] dump_stack_lvl+0x100/0x190
[ 98.164818][ T6249] bad_page.cold+0xbe/0xdf
[ 98.164844][ T6249] ? __pfx_bad_page+0x10/0x10
[ 98.164860][ T6249] ? rcu_is_watching+0x12/0xc0
[ 98.164884][ T6249] ? page_bad_reason+0x98/0x200
[ 98.164899][ T6249] __free_frozen_pages+0x7d6/0x10a0
[ 98.164919][ T6249] ? trace_irq_enable.constprop.0+0x11e/0x160
[ 98.164941][ T6249] page_frag_free+0x199/0x1f0
[ 98.164956][ T6249] __xdp_return+0x3b6/0x990
[ 98.164978][ T6249] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 98.165001][ T6249] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 98.165016][ T6249] bpf_prog_run_generic_xdp+0x614/0x1610
[ 98.165043][ T6249] do_xdp_generic+0x92e/0x12c0
[ 98.165066][ T6249] ? __pfx_do_xdp_generic+0x10/0x10
[ 98.165095][ T6249] tun_get_user+0x1c1c/0x3c20
[ 98.165127][ T6249] ? __pfx_tun_get_user+0x10/0x10
[ 98.165174][ T6249] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 98.165204][ T6249] ? tun_get+0x191/0x370
[ 98.165226][ T6249] ? rcu_is_watching+0x12/0xc0
[ 98.165251][ T6249] ? tun_get+0x191/0x370
[ 98.165271][ T6249] ? lock_release+0x245/0x310
[ 98.165294][ T6249] tun_chr_write_iter+0xdc/0x200
[ 98.165318][ T6249] vfs_write+0x6ac/0x1070
[ 98.165336][ T6249] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 98.165363][ T6249] ? __pfx_vfs_write+0x10/0x10
[ 98.165382][ T6249] ? lock_release+0x245/0x310
[ 98.165407][ T6249] ksys_write+0x12a/0x250
[ 98.165425][ T6249] ? __pfx_ksys_write+0x10/0x10
[ 98.165442][ T6249] ? rcu_is_watching+0x12/0xc0
[ 98.165466][ T6249] do_syscall_64+0x115/0x870
[ 98.165488][ T6249] ? clear_bhb_loop+0x40/0x90
[ 98.165507][ T6249] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 98.165524][ T6249] RIP: 0033:0x7f1cc575b80e
[ 98.165537][ T6249] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 98.165552][ T6249] RSP: 002b:00007f1cc66a8fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 98.165569][ T6249] RAX: ffffffffffffffda RBX: 00007f1cc66a96c0 RCX: 00007f1cc575b80e
[ 98.165586][ T6249] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8
[ 98.165596][ T6249] RBP: 00007f1cc582fee0 R08: 0000000000000000 R09: 0000000000000000
[ 98.165606][ T6249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 98.165616][ T6249] R13: 00007f1cc5a06038 R14: 00007f1cc5a05fa0 R15: 00007fff6ee09e88
[ 98.165631][ T6249]
[ 98.165642][ T6249] BUG: Bad page state in process syz.0.18 pfn:25fda
[ 98.255226][ T6249] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888025fdafc0 pfn:0x25fda
[ 98.259066][ T6249] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 98.261989][ T6249] raw: 00fff00000000000 dead000000000040 ffff888022e6b000 0000000000000000
[ 98.265387][ T6249] raw: ffff888025fdafc0 0000000000000001 00000000ffffffff 0000000000000000
[ 98.268733][ T6249] page dumped because: page_pool leak
[ 98.270925][ T6249] page_owner tracks the page as allocated
[ 98.273211][ T6249] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6249, tgid 6248 (syz.0.18), ts 96519899023, free_ts 96417699439
[ 98.279838][ T6249] post_alloc_hook+0xfd/0x120
[ 98.281775][ T6249] get_page_from_freelist+0x11a6/0x3410
[ 98.284055][ T6249] __alloc_frozen_pages_noprof+0x27c/0x2bc0
[ 98.286479][ T6249] alloc_pages_bulk_noprof+0x649/0x1360
[ 98.288775][ T6249] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 98.291401][ T6249] page_pool_alloc_netmems+0xc4/0x1a0
[ 98.293612][ T6249] skb_pp_cow_data+0xa15/0x1220
[ 98.295584][ T6249] skb_cow_data_for_xdp+0x88/0xb0
[ 98.297642][ T6249] do_xdp_generic+0x56b/0x12c0
[ 98.299719][ T6249] tun_get_user+0x1c1c/0x3c20
[ 98.301632][ T6249] tun_chr_write_iter+0xdc/0x200
[ 98.303620][ T6249] vfs_write+0x6ac/0x1070
[ 98.305332][ T6249] ksys_write+0x12a/0x250
[ 98.307114][ T6249] do_syscall_64+0x115/0x870
[ 98.308866][ T6249] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 98.310946][ T6249] page last free pid 5144 tgid 5144 stack trace:
[ 98.313268][ T6249] __free_frozen_pages+0x794/0x10a0
[ 98.315220][ T6249] qlist_free_all+0x47/0xf0
[ 98.316814][ T6249] kasan_quarantine_reduce+0x1a0/0x1f0
[ 98.318685][ T6249] __kasan_slab_alloc+0x69/0x90
[ 98.320228][ T6249] kmem_cache_alloc_noprof+0x241/0x6e0
[ 98.321916][ T6249] do_getname+0x35/0x390
[ 98.323258][ T6249] do_readlinkat+0xa9/0x370
[ 98.324680][ T6249] __x64_sys_readlink+0x78/0xc0
[ 98.326682][ T6249] do_syscall_64+0x115/0x870
[ 98.328564][ T6249] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 98.331048][ T6249] Modules linked in:
[ 98.332668][ T6249] CPU: 3 UID: 0 PID: 6249 Comm: syz.0.18 Tainted: G B syzkaller #0 PREEMPT(full)
[ 98.332693][ T6249] Tainted: [B]=BAD_PAGE
[ 98.332699][ T6249] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 98.332710][ T6249] Call Trace:
[ 98.332716][ T6249]
[ 98.332722][ T6249] dump_stack_lvl+0x100/0x190
[ 98.332744][ T6249] bad_page.cold+0xbe/0xdf
[ 98.332769][ T6249] ? __pfx_bad_page+0x10/0x10
[ 98.332786][ T6249] ? rcu_is_watching+0x12/0xc0
[ 98.332811][ T6249] ? page_bad_reason+0x98/0x200
[ 98.332827][ T6249] __free_frozen_pages+0x7d6/0x10a0
[ 98.332850][ T6249] ? trace_irq_enable.constprop.0+0x11e/0x160
[ 98.332874][ T6249] page_frag_free+0x199/0x1f0
[ 98.332891][ T6249] __xdp_return+0x3b6/0x990
[ 98.332914][ T6249] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 98.332939][ T6249] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 98.332954][ T6249] bpf_prog_run_generic_xdp+0x614/0x1610
[ 98.332982][ T6249] do_xdp_generic+0x92e/0x12c0
[ 98.333005][ T6249] ? __pfx_do_xdp_generic+0x10/0x10
[ 98.333036][ T6249] tun_get_user+0x1c1c/0x3c20
[ 98.333067][ T6249] ? __pfx_tun_get_user+0x10/0x10
[ 98.333093][ T6249] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 98.333122][ T6249] ? tun_get+0x191/0x370
[ 98.333144][ T6249] ? rcu_is_watching+0x12/0xc0
[ 98.333190][ T6249] ? tun_get+0x191/0x370
[ 98.333212][ T6249] ? lock_release+0x245/0x310
[ 98.333235][ T6249] tun_chr_write_iter+0xdc/0x200
[ 98.333262][ T6249] vfs_write+0x6ac/0x1070
[ 98.333281][ T6249] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 98.333308][ T6249] ? __pfx_vfs_write+0x10/0x10
[ 98.333327][ T6249] ? lock_release+0x245/0x310
[ 98.333352][ T6249] ksys_write+0x12a/0x250
[ 98.333369][ T6249] ? __pfx_ksys_write+0x10/0x10
[ 98.333387][ T6249] ? rcu_is_watching+0x12/0xc0
[ 98.333411][ T6249] do_syscall_64+0x115/0x870
[ 98.333433][ T6249] ? clear_bhb_loop+0x40/0x90
[ 98.333452][ T6249] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 98.333469][ T6249] RIP: 0033:0x7f1cc575b80e
[ 98.333482][ T6249] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 98.333498][ T6249] RSP: 002b:00007f1cc66a8fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 98.333515][ T6249] RAX: ffffffffffffffda RBX: 00007f1cc66a96c0 RCX: 00007f1cc575b80e
[ 98.333526][ T6249] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8
[ 98.333536][ T6249] RBP: 00007f1cc582fee0 R08: 0000000000000000 R09: 0000000000000000
[ 98.333546][ T6249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 98.333556][ T6249] R13: 00007f1cc5a06038 R14: 00007f1cc5a05fa0 R15: 00007fff6ee09e88
[ 98.333578][ T6249]
[ 98.334583][ T5095] Bluetooth: hci0: command tx timeout
[ 98.446526][ T6254] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5df85
[ 98.449379][ T6254] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 98.451625][ T6254] raw: 00fff00000000000 dead000000000040 ffff888022e6b000 0000000000000000
[ 98.454216][ T6254] raw: 0000000000000000 3fffffffffffffff 00000000ffffffff 0000000000000000
[ 98.456770][ T6254] page dumped because: VM_BUG_ON_PAGE(page_ref_count(page) == 0)
[ 98.459422][ T6254] page_owner tracks the page as allocated
[ 98.461494][ T6254] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6249, tgid 6248 (syz.0.18), ts 96519944337, free_ts 94199496015
[ 98.467569][ T6254] post_alloc_hook+0xfd/0x120
[ 98.469626][ T6254] get_page_from_freelist+0x11a6/0x3410
[ 98.471969][ T6254] __alloc_frozen_pages_noprof+0x27c/0x2bc0
[ 98.474412][ T6254] alloc_pages_bulk_noprof+0x649/0x1360
[ 98.476338][ T6254] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 98.478225][ T6254] page_pool_alloc_netmems+0xc4/0x1a0
[ 98.480086][ T6254] page_pool_alloc_frag_netmem+0x21d/0xa00
[ 98.482081][ T6254] skb_pp_cow_data+0x5a7/0x1220
[ 98.483590][ T6254] skb_cow_data_for_xdp+0x88/0xb0
[ 98.485418][ T6254] do_xdp_generic+0x56b/0x12c0
[ 98.487350][ T6254] tun_get_user+0x1c1c/0x3c20
[ 98.489073][ T6254] tun_chr_write_iter+0xdc/0x200
[ 98.491105][ T6254] vfs_write+0x6ac/0x1070
[ 98.492912][ T6254] ksys_write+0x12a/0x250
[ 98.494701][ T6254] do_syscall_64+0x115/0x870
[ 98.496638][ T6254] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 98.498702][ T6254] page last free pid 0 tgid 0 stack trace:
[ 98.500548][ T6254] __free_frozen_pages+0x794/0x10a0
[ 98.502476][ T6254] tlb_remove_table_rcu+0x2cf/0x380
[ 98.504518][ T6254] rcu_core+0x5a2/0x10d0
[ 98.506237][ T6254] handle_softirqs+0x1ea/0xa00
[ 98.507802][ T6254] __irq_exit_rcu+0x162/0x210
[ 98.509617][ T6254] irq_exit_rcu+0x9/0x30
[ 98.511362][ T6254] sysvec_apic_timer_interrupt+0xa3/0xc0
[ 98.513665][ T6254] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 98.516206][ T6254] ------------[ cut here ]------------
[ 98.518432][ T6254] kernel BUG at ./include/linux/mm.h:1766!
[ 98.520897][ T6254] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI
[ 98.523512][ T6254] CPU: 3 UID: 0 PID: 6254 Comm: syz.0.19 Tainted: G B syzkaller #0 PREEMPT(full)
[ 98.527643][ T6254] Tainted: [B]=BAD_PAGE
[ 98.529027][ T6254] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 98.532743][ T6254] RIP: 0010:page_frag_free+0x11a/0x1f0
[ 98.534625][ T6254] Code: ed 75 29 e8 b8 67 9f ff 48 83 c4 08 5b 5d 41 5c c3 cc cc cc cc e8 a6 67 9f ff 48 c7 c6 60 38 c1 8b 48 89 df e8 c7 9f ee ff 90 <0f> 0b e8 8f 67 9f ff be 08 00 00 00 48 89 df e8 12 50 0d 00 48 89
[ 98.541942][ T6254] RSP: 0018:ffffc90004ed7720 EFLAGS: 00010293
[ 98.543807][ T6254] RAX: 0000000000000000 RBX: ffffea000177e140 RCX: ffffffff82827007
[ 98.546920][ T6254] RDX: ffff8880299aa540 RSI: ffffffff8257d918 RDI: ffff8880299aaa04
[ 98.550097][ T6254] RBP: ffffea000177e174 R08: 0000000000000000 R09: 0000000000000000
[ 98.553137][ T6254] R10: 0000000000000000 R11: 7379735f6d736120 R12: 0000000000000000
[ 98.556347][ T6254] R13: 0000000000000000 R14: 0000000000000000 R15: 000000000000bcae
[ 98.559511][ T6254] FS: 00007f1cc66a96c0(0000) GS:ffff8880d6683000(0000) knlGS:0000000000000000
[ 98.563143][ T6254] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 98.565246][ T6254] CR2: 0000200000010000 CR3: 000000005df7b000 CR4: 0000000000352ef0
[ 98.567793][ T6254] Call Trace:
[ 98.569194][ T6254]
[ 98.570430][ T6254] __xdp_return+0x3b6/0x990
[ 98.572029][ T6254] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 98.573968][ T6254] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 98.575644][ T6254] bpf_prog_run_generic_xdp+0x614/0x1610
[ 98.577379][ T6254] do_xdp_generic+0x92e/0x12c0
[ 98.578955][ T6254] ? __pfx_do_xdp_generic+0x10/0x10
[ 98.580548][ T6254] tun_get_user+0x1c1c/0x3c20
[ 98.582038][ T6254] ? __pfx_tun_get_user+0x10/0x10
[ 98.583592][ T6254] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 98.585313][ T6254] ? tun_get+0x191/0x370
[ 98.586613][ T6254] ? rcu_is_watching+0x12/0xc0
[ 98.588083][ T6254] ? tun_get+0x191/0x370
[ 98.589500][ T6254] ? lock_release+0x245/0x310
[ 98.591184][ T6254] tun_chr_write_iter+0xdc/0x200
[ 98.592727][ T6254] vfs_write+0x6ac/0x1070
[ 98.594067][ T6254] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 98.595791][ T6254] ? __pfx_vfs_write+0x10/0x10
[ 98.597279][ T6254] ? lock_release+0x245/0x310
[ 98.598757][ T6254] ksys_write+0x12a/0x250
[ 98.600143][ T6254] ? __pfx_ksys_write+0x10/0x10
[ 98.601918][ T6254] ? rcu_is_watching+0x12/0xc0
[ 98.603428][ T6254] do_syscall_64+0x115/0x870
[ 98.605095][ T6254] ? clear_bhb_loop+0x40/0x90
[ 98.606871][ T6254] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 98.609174][ T6254] RIP: 0033:0x7f1cc575b80e
[ 98.610924][ T6254] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 98.617651][ T6254] RSP: 002b:00007f1cc66a8fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 98.620732][ T6254] RAX: ffffffffffffffda RBX: 00007f1cc66a96c0 RCX: 00007f1cc575b80e
[ 98.623526][ T6254] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8
[ 98.625953][ T6254] RBP: 00007f1cc582fee0 R08: 0000000000000000 R09: 0000000000000000
[ 98.628404][ T6254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 98.630798][ T6254] R13: 00007f1cc5a06038 R14: 00007f1cc5a05fa0 R15: 00007fff6ee09e88
[ 98.633245][ T6254]
[ 98.634196][ T6254] Modules linked in:
[ 98.635476][ T6254] ---[ end trace 0000000000000000 ]---
[ 98.637132][ T6254] RIP: 0010:page_frag_free+0x11a/0x1f0
[ 98.638895][ T6254] Code: ed 75 29 e8 b8 67 9f ff 48 83 c4 08 5b 5d 41 5c c3 cc cc cc cc e8 a6 67 9f ff 48 c7 c6 60 38 c1 8b 48 89 df e8 c7 9f ee ff 90 <0f> 0b e8 8f 67 9f ff be 08 00 00 00 48 89 df e8 12 50 0d 00 48 89
[ 98.645498][ T6254] RSP: 0018:ffffc90004ed7720 EFLAGS: 00010293
[ 98.647956][ T6254] RAX: 0000000000000000 RBX: ffffea000177e140 RCX: ffffffff82827007
[ 98.650730][ T6254] RDX: ffff8880299aa540 RSI: ffffffff8257d918 RDI: ffff8880299aaa04
[ 98.653113][ T6254] RBP: ffffea000177e174 R08: 0000000000000000 R09: 0000000000000000
[ 98.655565][ T6254] R10: 0000000000000000 R11: 7379735f6d736120 R12: 0000000000000000
[ 98.657966][ T6254] R13: 0000000000000000 R14: 0000000000000000 R15: 000000000000bcae
[ 98.660503][ T6254] FS: 00007f1cc66a96c0(0000) GS:ffff8880d6683000(0000) knlGS:0000000000000000
[ 98.663229][ T6254] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 98.665284][ T6254] CR2: 0000200000010000 CR3: 000000005df7b000 CR4: 0000000000352ef0
[ 98.667694][ T6254] Kernel panic - not syncing: Fatal exception in interrupt
[ 98.670567][ T6254] Kernel Offset: disabled
[ 98.671927][ T6254] Rebooting in 86400 seconds..