Warning: Permanently added '10.128.0.57' (ED25519) to the list of known hosts.
2025/09/10 00:03:15 parsed 1 programs
[ 118.129598][ T6214] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 122.033905][ T6246] chnl_net:caif_netlink_parms(): no params data found
[ 122.139520][ T6246] bridge0: port 1(bridge_slave_0) entered blocking state
[ 122.146763][ T6246] bridge0: port 1(bridge_slave_0) entered disabled state
[ 122.153994][ T6246] bridge_slave_0: entered allmulticast mode
[ 122.161233][ T6246] bridge_slave_0: entered promiscuous mode
[ 122.172603][ T6246] bridge0: port 2(bridge_slave_1) entered blocking state
[ 122.180296][ T6246] bridge0: port 2(bridge_slave_1) entered disabled state
[ 122.187488][ T6246] bridge_slave_1: entered allmulticast mode
[ 122.194522][ T6246] bridge_slave_1: entered promiscuous mode
[ 122.226225][ T6246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 122.238421][ T6246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 122.272182][ T6246] team0: Port device team_slave_0 added
[ 122.279765][ T6246] team0: Port device team_slave_1 added
[ 122.303568][ T6246] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 122.311732][ T6246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 122.337824][ T6246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 122.350132][ T6246] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 122.357455][ T6246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 122.383342][ T6246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 122.420051][ T6246] hsr_slave_0: entered promiscuous mode
[ 122.427228][ T6246] hsr_slave_1: entered promiscuous mode
[ 122.952553][ T6246] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 122.963609][ T6246] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 122.976801][ T6246] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 123.001629][ T6246] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 123.116153][ T6246] 8021q: adding VLAN 0 to HW filter on device bond0
[ 123.143435][ T6246] 8021q: adding VLAN 0 to HW filter on device team0
[ 123.162366][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 123.169541][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 123.188198][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 123.195402][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 123.449169][ T6246] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 123.503087][ T6246] veth0_vlan: entered promiscuous mode
[ 123.519105][ T6246] veth1_vlan: entered promiscuous mode
[ 123.560217][ T6246] veth0_macvtap: entered promiscuous mode
[ 123.572298][ T6246] veth1_macvtap: entered promiscuous mode
[ 123.598348][ T6246] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 123.615917][ T6246] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 123.636429][ T973] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 123.649671][ T973] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 123.667418][ T973] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 123.682118][ T973] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 123.809676][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 123.887454][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 123.967500][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 124.083301][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 124.781364][ T5185] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 124.795589][ T5185] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 124.803283][ T5185] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 124.816701][ T5185] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 124.824337][ T5185] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 125.229631][ T973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 125.247104][ T973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 125.283404][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 125.291826][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 126.618537][ T49] bridge_slave_1: left allmulticast mode
[ 126.624239][ T49] bridge_slave_1: left promiscuous mode
[ 126.631756][ T49] bridge0: port 2(bridge_slave_1) entered disabled state
[ 126.658426][ T49] bridge_slave_0: left allmulticast mode
[ 126.674571][ T49] bridge_slave_0: left promiscuous mode
[ 126.680405][ T49] bridge0: port 1(bridge_slave_0) entered disabled state
2025/09/10 00:03:28 executed programs: 0
[ 127.330680][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 127.349183][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 127.366277][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 127.379419][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 127.387890][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 127.411802][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 127.423825][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 127.434088][ T49] bond0 (unregistering): Released all slaves
[ 127.547652][ T49] hsr_slave_0: left promiscuous mode
[ 127.553721][ T49] hsr_slave_1: left promiscuous mode
[ 127.559792][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 127.567300][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 127.575294][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 127.582690][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 127.602457][ T49] veth1_macvtap: left promiscuous mode
[ 127.608239][ T49] veth0_macvtap: left promiscuous mode
[ 127.613899][ T49] veth1_vlan: left promiscuous mode
[ 127.619282][ T49] veth0_vlan: left promiscuous mode
[ 128.016855][ T49] team0 (unregistering): Port device team_slave_1 removed
[ 128.044107][ T49] team0 (unregistering): Port device team_slave_0 removed
[ 128.461950][ T6432] chnl_net:caif_netlink_parms(): no params data found
[ 128.672294][ T6432] bridge0: port 1(bridge_slave_0) entered blocking state
[ 128.680240][ T6432] bridge0: port 1(bridge_slave_0) entered disabled state
[ 128.689178][ T6432] bridge_slave_0: entered allmulticast mode
[ 128.696927][ T6432] bridge_slave_0: entered promiscuous mode
[ 128.707418][ T6432] bridge0: port 2(bridge_slave_1) entered blocking state
[ 128.715628][ T6432] bridge0: port 2(bridge_slave_1) entered disabled state
[ 128.722821][ T6432] bridge_slave_1: entered allmulticast mode
[ 128.730903][ T6432] bridge_slave_1: entered promiscuous mode
[ 128.794095][ T6432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 128.814562][ T6432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 128.862273][ T6432] team0: Port device team_slave_0 added
[ 128.871080][ T6432] team0: Port device team_slave_1 added
[ 129.388294][ T6432] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 129.406022][ T6432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 129.462893][ T6432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 129.495444][ T5185] Bluetooth: hci0: command tx timeout
[ 129.503397][ T6432] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 129.517010][ T6432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 129.545785][ T6432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 129.757447][ T6432] hsr_slave_0: entered promiscuous mode
[ 129.764050][ T6432] hsr_slave_1: entered promiscuous mode
[ 130.487238][ T6432] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 130.499069][ T6432] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 130.511486][ T6432] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 130.523798][ T6432] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 130.640384][ T6432] 8021q: adding VLAN 0 to HW filter on device bond0
[ 130.664075][ T6432] 8021q: adding VLAN 0 to HW filter on device team0
[ 130.679836][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 130.687006][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 130.712138][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 130.719248][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 130.970756][ T6432] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 131.023116][ T6432] veth0_vlan: entered promiscuous mode
[ 131.037105][ T6432] veth1_vlan: entered promiscuous mode
[ 131.079851][ T6432] veth0_macvtap: entered promiscuous mode
[ 131.091249][ T6432] veth1_macvtap: entered promiscuous mode
[ 131.113996][ T6432] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 131.130610][ T6432] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 131.148453][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 131.159527][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 131.178154][ T2997] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 131.188044][ T2997] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 131.260424][ T2997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 131.279136][ T2997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 131.318112][ T2997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 131.326027][ T2997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 131.359950][ T6530] BUG: Bad page state in process syz.0.17 pfn:330f5
[ 131.366754][ T6530] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880330f5dc0 pfn:0x330f5
[ 131.376864][ T6530] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 131.383995][ T6530] raw: 00fff00000000000 dead000000000040 ffff88802229b000 0000000000000000
[ 131.392637][ T6530] raw: ffff8880330f5dc0 0000000000000001 00000000ffffffff 0000000000000000
[ 131.401243][ T6530] page dumped because: page_pool leak
[ 131.406667][ T6530] page_owner tracks the page as allocated
[ 131.412464][ T6530] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6530, tgid 6529 (syz.0.17), ts 131359863181, free_ts 129255598185
[ 131.429353][ T6530] post_alloc_hook+0x240/0x2a0
[ 131.434146][ T6530] get_page_from_freelist+0x21e4/0x22c0
[ 131.439723][ T6530] __alloc_frozen_pages_noprof+0x181/0x370
[ 131.445555][ T6530] alloc_pages_bulk_noprof+0x560/0x710
[ 131.451000][ T6530] __page_pool_alloc_netmems_slow+0x127/0x740
[ 131.457140][ T6530] skb_pp_cow_data+0xb47/0x13e0
[ 131.461990][ T6530] do_xdp_generic+0x699/0x11a0
[ 131.466782][ T6530] __netif_receive_skb_core+0x17f9/0x4020
[ 131.472527][ T6530] __netif_receive_skb+0x72/0x380
[ 131.477597][ T6530] netif_receive_skb+0x1cb/0x790
[ 131.482553][ T6530] tun_rx_batched+0x1b9/0x730
[ 131.487275][ T6530] tun_get_user+0x2aa2/0x3e20
[ 131.491951][ T6530] tun_chr_write_iter+0x113/0x200
[ 131.496990][ T6530] vfs_write+0x5c6/0xb30
[ 131.501300][ T6530] ksys_write+0x145/0x250
[ 131.505650][ T6530] do_syscall_64+0xfa/0x3b0
[ 131.510153][ T6530] page last free pid 6478 tgid 6478 stack trace:
[ 131.516508][ T6530] __free_frozen_pages+0xbc4/0xd30
[ 131.521685][ T6530] __tlb_remove_table+0x2d2/0x3b0
[ 131.526750][ T6530] tlb_remove_table_rcu+0x85/0x100
[ 131.531861][ T6530] rcu_core+0xcab/0x1770
[ 131.536156][ T6530] handle_softirqs+0x283/0x870
[ 131.540917][ T6530] __irq_exit_rcu+0xca/0x1f0
[ 131.545545][ T6530] irq_exit_rcu+0x9/0x30
[ 131.549784][ T6530] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 131.555453][ T6530] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 131.561436][ T6530] Modules linked in:
[ 131.565382][ T6530] CPU: 1 UID: 0 PID: 6530 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 131.565401][ T6530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 131.565416][ T6530] Call Trace:
[ 131.565423][ T6530]
[ 131.565430][ T6530] dump_stack_lvl+0x189/0x250
[ 131.565455][ T6530] ? __pfx_dump_stack_lvl+0x10/0x10
[ 131.565472][ T6530] ? __pfx_print_modules+0x10/0x10
[ 131.565494][ T6530] ? ksys_write+0x145/0x250
[ 131.565512][ T6530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 131.565536][ T6530] bad_page+0x180/0x1c0
[ 131.565555][ T6530] __free_frozen_pages+0xce2/0xd30
[ 131.565588][ T6530] bpf_xdp_frags_shrink_tail+0x3a5/0x750
[ 131.565628][ T6530] bpf_xdp_adjust_tail+0x1d6/0x220
[ 131.565653][ T6530] bpf_prog_f476d5219b92964a+0x1e/0x24
[ 131.565677][ T6530] bpf_prog_run_generic_xdp+0x64b/0x14c0
[ 131.565727][ T6530] do_xdp_generic+0x9f7/0x11a0
[ 131.565758][ T6530] ? __pfx_do_xdp_generic+0x10/0x10
[ 131.565775][ T6530] ? __skb_flow_dissect+0x5ef8/0x68b0
[ 131.565822][ T6530] __netif_receive_skb_core+0x17f9/0x4020
[ 131.565847][ T6530] ? __pfx___skb_flow_dissect+0x10/0x10
[ 131.565869][ T6530] ? do_user_addr_fault+0xbc1/0x1390
[ 131.565898][ T6530] ? do_user_addr_fault+0xc8a/0x1390
[ 131.565923][ T6530] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 131.565947][ T6530] ? irqentry_exit+0x74/0x90
[ 131.565968][ T6530] ? lockdep_hardirqs_on+0x9c/0x150
[ 131.565994][ T6530] ? __lock_acquire+0xab9/0xd20
[ 131.566031][ T6530] ? netif_receive_skb+0x115/0x790
[ 131.566053][ T6530] ? netif_receive_skb+0x115/0x790
[ 131.566075][ T6530] __netif_receive_skb+0x72/0x380
[ 131.566094][ T6530] ? _copy_from_iter+0x24f/0x1790
[ 131.566116][ T6530] ? netif_receive_skb+0x115/0x790
[ 131.566135][ T6530] netif_receive_skb+0x1cb/0x790
[ 131.566155][ T6530] ? __pfx___local_bh_disable_ip+0x10/0x10
[ 131.566173][ T6530] ? __pfx_netif_receive_skb+0x10/0x10
[ 131.566194][ T6530] ? __pfx__copy_from_iter+0x10/0x10
[ 131.566207][ T6530] ? sock_alloc_send_pskb+0x875/0x990
[ 131.566229][ T6530] ? tun_rx_batched+0x160/0x730
[ 131.566248][ T6530] tun_rx_batched+0x1b9/0x730
[ 131.566265][ T6530] ? __lock_acquire+0xab9/0xd20
[ 131.566290][ T6530] ? __pfx_tun_rx_batched+0x10/0x10
[ 131.566310][ T6530] ? tun_get_user+0x266c/0x3e20
[ 131.566340][ T6530] tun_get_user+0x2aa2/0x3e20
[ 131.566370][ T6530] ? tun_get_user+0x266c/0x3e20
[ 131.566392][ T6530] ? aa_file_perm+0x44d/0x1550
[ 131.566409][ T6530] ? __pfx_tun_get_user+0x10/0x10
[ 131.566424][ T6530] ? __futex_wait+0x34f/0x3e0
[ 131.566457][ T6530] ? __pfx___futex_wait+0x10/0x10
[ 131.566484][ T6530] ? ref_tracker_alloc+0x318/0x460
[ 131.566504][ T6530] ? __lock_acquire+0xab9/0xd20
[ 131.566527][ T6530] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 131.566553][ T6530] ? tun_get+0x1c/0x2f0
[ 131.566574][ T6530] ? tun_get+0x1c/0x2f0
[ 131.566590][ T6530] ? tun_get+0x1c/0x2f0
[ 131.566610][ T6530] tun_chr_write_iter+0x113/0x200
[ 131.566630][ T6530] vfs_write+0x5c6/0xb30
[ 131.566656][ T6530] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 131.566673][ T6530] ? __pfx_vfs_write+0x10/0x10
[ 131.566703][ T6530] ? __fget_files+0x2a/0x420
[ 131.566728][ T6530] ksys_write+0x145/0x250
[ 131.566750][ T6530] ? __pfx_ksys_write+0x10/0x10
[ 131.566775][ T6530] ? do_syscall_64+0xbe/0x3b0
[ 131.566795][ T6530] do_syscall_64+0xfa/0x3b0
[ 131.566809][ T6530] ? lockdep_hardirqs_on+0x9c/0x150
[ 131.566830][ T6530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 131.566846][ T6530] ? clear_bhb_loop+0x60/0xb0
[ 131.566866][ T6530] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 131.566881][ T6530] RIP: 0033:0x7f8b6a38d69f
[ 131.566896][ T6530] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 131.566909][ T6530] RSP: 002b:00007f8b6b1b3000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 131.566927][ T6530] RAX: ffffffffffffffda RBX: 00007f8b6a5b5fa0 RCX: 00007f8b6a38d69f
[ 131.566938][ T6530] RDX: 0000000000011dc0 RSI: 00002000000004c0 RDI: 00000000000000c8
[ 131.566948][ T6530] RBP: 00007f8b6a411e19 R08: 0000000000000000 R09: 0000000000000000
[ 131.566958][ T6530] R10: 0000000000011dc0 R11: 0000000000000293 R12: 0000000000000000
[ 131.566967][ T6530] R13: 00007f8b6a5b6038 R14: 00007f8b6a5b5fa0 R15: 00007fff3db8b248
[ 131.566992][ T6530]
[ 131.566999][ T6530] Disabling lock debugging due to kernel taint
[ 131.984995][ T6530] BUG: Bad page state in process syz.0.17 pfn:67739
[ 131.991669][ T6530] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x67739
[ 132.001823][ T6530] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 132.008943][ T6530] raw: 00fff00000000000 dead000000000040 ffff88802229b000 0000000000000000
[ 132.017545][ T6530] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000
[ 132.026131][ T6530] page dumped because: page_pool leak
[ 132.031481][ T6530] page_owner tracks the page as allocated
[ 132.037210][ T6530] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6530, tgid 6529 (syz.0.17), ts 131359853718, free_ts 129255634756
[ 132.054077][ T6530] post_alloc_hook+0x240/0x2a0
[ 132.059042][ T6530] get_page_from_freelist+0x21e4/0x22c0
[ 132.064602][ T6530] __alloc_frozen_pages_noprof+0x181/0x370
[ 132.070401][ T6530] alloc_pages_bulk_noprof+0x560/0x710
[ 132.075884][ T6530] __page_pool_alloc_netmems_slow+0x127/0x740
[ 132.081959][ T6530] skb_pp_cow_data+0xb47/0x13e0
[ 132.086827][ T6530] do_xdp_generic+0x699/0x11a0
[ 132.091623][ T6530] __netif_receive_skb_core+0x17f9/0x4020
[ 132.097356][ T6530] __netif_receive_skb+0x72/0x380
[ 132.102375][ T6530] netif_receive_skb+0x1cb/0x790
[ 132.107324][ T6530] tun_rx_batched+0x1b9/0x730
[ 132.111998][ T6530] tun_get_user+0x2aa2/0x3e20
[ 132.116696][ T6530] tun_chr_write_iter+0x113/0x200
[ 132.121720][ T6530] vfs_write+0x5c6/0xb30
[ 132.125979][ T6530] ksys_write+0x145/0x250
[ 132.130304][ T6530] do_syscall_64+0xfa/0x3b0
[ 132.134813][ T6530] page last free pid 6478 tgid 6478 stack trace:
[ 132.141126][ T6530] __free_frozen_pages+0xbc4/0xd30
[ 132.146517][ T6530] __tlb_remove_table+0x2d2/0x3b0
[ 132.151534][ T6530] tlb_remove_table_rcu+0x85/0x100
[ 132.156664][ T6530] rcu_core+0xcab/0x1770
[ 132.160908][ T6530] handle_softirqs+0x283/0x870
[ 132.165682][ T6530] __irq_exit_rcu+0xca/0x1f0
[ 132.170264][ T6530] irq_exit_rcu+0x9/0x30
[ 132.174510][ T6530] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 132.180144][ T6530] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 132.186140][ T6530] Modules linked in:
[ 132.190035][ T6530] CPU: 1 UID: 0 PID: 6530 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 132.190055][ T6530] Tainted: [B]=BAD_PAGE
[ 132.190061][ T6530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 132.190069][ T6530] Call Trace:
[ 132.190075][ T6530]
[ 132.190081][ T6530] dump_stack_lvl+0x189/0x250
[ 132.190101][ T6530] ? __pfx_dump_stack_lvl+0x10/0x10
[ 132.190117][ T6530] ? __pfx_print_modules+0x10/0x10
[ 132.190137][ T6530] ? ksys_write+0x145/0x250
[ 132.190153][ T6530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 132.190168][ T6530] bad_page+0x180/0x1c0
[ 132.190183][ T6530] __free_frozen_pages+0xce2/0xd30
[ 132.190203][ T6530] bpf_xdp_frags_shrink_tail+0x3a5/0x750
[ 132.190224][ T6530] bpf_xdp_adjust_tail+0x1d6/0x220
[ 132.190238][ T6530] bpf_prog_f476d5219b92964a+0x1e/0x24
[ 132.190249][ T6530] bpf_prog_run_generic_xdp+0x64b/0x14c0
[ 132.190273][ T6530] do_xdp_generic+0x9f7/0x11a0
[ 132.190290][ T6530] ? __pfx_do_xdp_generic+0x10/0x10
[ 132.190304][ T6530] ? __skb_flow_dissect+0x5ef8/0x68b0
[ 132.190326][ T6530] __netif_receive_skb_core+0x17f9/0x4020
[ 132.190343][ T6530] ? __pfx___skb_flow_dissect+0x10/0x10
[ 132.190357][ T6530] ? do_user_addr_fault+0xbc1/0x1390
[ 132.190377][ T6530] ? do_user_addr_fault+0xc8a/0x1390
[ 132.190395][ T6530] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 132.190411][ T6530] ? irqentry_exit+0x74/0x90
[ 132.190428][ T6530] ? lockdep_hardirqs_on+0x9c/0x150
[ 132.190445][ T6530] ? __lock_acquire+0xab9/0xd20
[ 132.190463][ T6530] ? netif_receive_skb+0x115/0x790
[ 132.190478][ T6530] ? netif_receive_skb+0x115/0x790
[ 132.190494][ T6530] __netif_receive_skb+0x72/0x380
[ 132.190509][ T6530] ? _copy_from_iter+0x24f/0x1790
[ 132.190522][ T6530] ? netif_receive_skb+0x115/0x790
[ 132.190537][ T6530] netif_receive_skb+0x1cb/0x790
[ 132.190552][ T6530] ? __pfx___local_bh_disable_ip+0x10/0x10
[ 132.190564][ T6530] ? __pfx_netif_receive_skb+0x10/0x10
[ 132.190579][ T6530] ? __pfx__copy_from_iter+0x10/0x10
[ 132.190590][ T6530] ? sock_alloc_send_pskb+0x875/0x990
[ 132.190605][ T6530] ? tun_rx_batched+0x160/0x730
[ 132.190617][ T6530] tun_rx_batched+0x1b9/0x730
[ 132.190629][ T6530] ? __lock_acquire+0xab9/0xd20
[ 132.190646][ T6530] ? __pfx_tun_rx_batched+0x10/0x10
[ 132.190659][ T6530] ? tun_get_user+0x266c/0x3e20
[ 132.190674][ T6530] tun_get_user+0x2aa2/0x3e20
[ 132.190689][ T6530] ? tun_get_user+0x266c/0x3e20
[ 132.190703][ T6530] ? aa_file_perm+0x44d/0x1550
[ 132.190715][ T6530] ? __pfx_tun_get_user+0x10/0x10
[ 132.190726][ T6530] ? __futex_wait+0x34f/0x3e0
[ 132.190746][ T6530] ? __pfx___futex_wait+0x10/0x10
[ 132.190764][ T6530] ? ref_tracker_alloc+0x318/0x460
[ 132.190781][ T6530] ? __lock_acquire+0xab9/0xd20
[ 132.190797][ T6530] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 132.190814][ T6530] ? tun_get+0x1c/0x2f0
[ 132.190827][ T6530] ? tun_get+0x1c/0x2f0
[ 132.190838][ T6530] ? tun_get+0x1c/0x2f0
[ 132.190850][ T6530] tun_chr_write_iter+0x113/0x200
[ 132.190863][ T6530] vfs_write+0x5c6/0xb30
[ 132.190879][ T6530] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 132.190891][ T6530] ? __pfx_vfs_write+0x10/0x10
[ 132.190908][ T6530] ? __fget_files+0x2a/0x420
[ 132.190921][ T6530] ksys_write+0x145/0x250
[ 132.190937][ T6530] ? __pfx_ksys_write+0x10/0x10
[ 132.190959][ T6530] ? do_syscall_64+0xbe/0x3b0
[ 132.190971][ T6530] do_syscall_64+0xfa/0x3b0
[ 132.190982][ T6530] ? lockdep_hardirqs_on+0x9c/0x150
[ 132.190998][ T6530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 132.191009][ T6530] ? clear_bhb_loop+0x60/0xb0
[ 132.191023][ T6530] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 132.191034][ T6530] RIP: 0033:0x7f8b6a38d69f
[ 132.191045][ T6530] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 132.191056][ T6530] RSP: 002b:00007f8b6b1b3000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 132.191069][ T6530] RAX: ffffffffffffffda RBX: 00007f8b6a5b5fa0 RCX: 00007f8b6a38d69f
[ 132.191079][ T6530] RDX: 0000000000011dc0 RSI: 00002000000004c0 RDI: 00000000000000c8
[ 132.191087][ T6530] RBP: 00007f8b6a411e19 R08: 0000000000000000 R09: 0000000000000000
[ 132.191095][ T6530] R10: 0000000000011dc0 R11: 0000000000000293 R12: 0000000000000000
[ 132.191103][ T6530] R13: 00007f8b6a5b6038 R14: 00007f8b6a5b5fa0 R15: 00007fff3db8b248
[ 132.191116][ T6530]
[ 132.191127][ T6530] BUG: Bad page state in process syz.0.17 pfn:31105
[ 132.616567][ T6530] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888031105c80 pfn:0x31105
[ 132.626646][ T6530] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 132.633751][ T6530] raw: 00fff00000000000 dead000000000040 ffff88802229b000 0000000000000000
[ 132.642409][ T6530] raw: ffff888031105c80 0000000000000001 00000000ffffffff 0000000000000000
[ 132.651035][ T6530] page dumped because: page_pool leak
[ 132.656421][ T6530] page_owner tracks the page as allocated
[ 132.662128][ T6530] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6530, tgid 6529 (syz.0.17), ts 131359844223, free_ts 129255668158
[ 132.679077][ T6530] post_alloc_hook+0x240/0x2a0
[ 132.683869][ T6530] get_page_from_freelist+0x21e4/0x22c0
[ 132.689460][ T6530] __alloc_frozen_pages_noprof+0x181/0x370
[ 132.695375][ T6530] alloc_pages_bulk_noprof+0x560/0x710
[ 132.700834][ T6530] __page_pool_alloc_netmems_slow+0x127/0x740
[ 132.706934][ T6530] skb_pp_cow_data+0xb47/0x13e0
[ 132.711789][ T6530] do_xdp_generic+0x699/0x11a0
[ 132.716586][ T6530] __netif_receive_skb_core+0x17f9/0x4020
[ 132.722318][ T6530] __netif_receive_skb+0x72/0x380
[ 132.727369][ T6530] netif_receive_skb+0x1cb/0x790
[ 132.732306][ T6530] tun_rx_batched+0x1b9/0x730
[ 132.736999][ T6530] tun_get_user+0x2aa2/0x3e20
[ 132.741671][ T6530] tun_chr_write_iter+0x113/0x200
[ 132.746702][ T6530] vfs_write+0x5c6/0xb30
[ 132.750938][ T6530] ksys_write+0x145/0x250
[ 132.755368][ T6530] do_syscall_64+0xfa/0x3b0
[ 132.757116][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 132.759874][ T6530] page last free pid 6478 tgid 6478 stack trace:
[ 132.768180][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 132.772414][ T6530] __free_frozen_pages+0xbc4/0xd30
[ 132.783735][ T6530] __tlb_remove_table+0x2d2/0x3b0
[ 132.788774][ T6530] tlb_remove_table_rcu+0x85/0x100
[ 132.793875][ T6530] rcu_core+0xcab/0x1770
[ 132.798128][ T6530] handle_softirqs+0x283/0x870
[ 132.802881][ T6530] __irq_exit_rcu+0xca/0x1f0
[ 132.807473][ T6530] irq_exit_rcu+0x9/0x30
[ 132.811706][ T6530] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 132.817346][ T6530] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 132.823331][ T6530] Modules linked in:
[ 132.827266][ T6530] CPU: 1 UID: 0 PID: 6530 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 132.827287][ T6530] Tainted: [B]=BAD_PAGE
[ 132.827292][ T6530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 132.827300][ T6530] Call Trace:
[ 132.827306][ T6530]
[ 132.827312][ T6530] dump_stack_lvl+0x189/0x250
[ 132.827333][ T6530] ? __pfx_dump_stack_lvl+0x10/0x10
[ 132.827349][ T6530] ? __pfx_print_modules+0x10/0x10
[ 132.827369][ T6530] ? ksys_write+0x145/0x250
[ 132.827385][ T6530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 132.827402][ T6530] bad_page+0x180/0x1c0
[ 132.827418][ T6530] __free_frozen_pages+0xce2/0xd30
[ 132.827437][ T6530] bpf_xdp_frags_shrink_tail+0x3a5/0x750
[ 132.827458][ T6530] bpf_xdp_adjust_tail+0x1d6/0x220
[ 132.827472][ T6530] bpf_prog_f476d5219b92964a+0x1e/0x24
[ 132.827484][ T6530] bpf_prog_run_generic_xdp+0x64b/0x14c0
[ 132.827508][ T6530] do_xdp_generic+0x9f7/0x11a0
[ 132.827526][ T6530] ? __pfx_do_xdp_generic+0x10/0x10
[ 132.827539][ T6530] ? __skb_flow_dissect+0x5ef8/0x68b0
[ 132.827561][ T6530] __netif_receive_skb_core+0x17f9/0x4020
[ 132.827579][ T6530] ? __pfx___skb_flow_dissect+0x10/0x10
[ 132.827593][ T6530] ? do_user_addr_fault+0xbc1/0x1390
[ 132.827612][ T6530] ? do_user_addr_fault+0xc8a/0x1390
[ 132.827638][ T6530] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 132.827654][ T6530] ? irqentry_exit+0x74/0x90
[ 132.827671][ T6530] ? lockdep_hardirqs_on+0x9c/0x150
[ 132.827688][ T6530] ? __lock_acquire+0xab9/0xd20
[ 132.827707][ T6530] ? netif_receive_skb+0x115/0x790
[ 132.827721][ T6530] ? netif_receive_skb+0x115/0x790
[ 132.827737][ T6530] __netif_receive_skb+0x72/0x380
[ 132.827753][ T6530] ? _copy_from_iter+0x24f/0x1790
[ 132.827766][ T6530] ? netif_receive_skb+0x115/0x790
[ 132.827781][ T6530] netif_receive_skb+0x1cb/0x790
[ 132.827795][ T6530] ? __pfx___local_bh_disable_ip+0x10/0x10
[ 132.827808][ T6530] ? __pfx_netif_receive_skb+0x10/0x10
[ 132.827823][ T6530] ? __pfx__copy_from_iter+0x10/0x10
[ 132.827833][ T6530] ? sock_alloc_send_pskb+0x875/0x990
[ 132.827849][ T6530] ? tun_rx_batched+0x160/0x730
[ 132.827861][ T6530] tun_rx_batched+0x1b9/0x730
[ 132.827874][ T6530] ? __lock_acquire+0xab9/0xd20
[ 132.827891][ T6530] ? __pfx_tun_rx_batched+0x10/0x10
[ 132.827904][ T6530] ? tun_get_user+0x266c/0x3e20
[ 132.827919][ T6530] tun_get_user+0x2aa2/0x3e20
[ 132.827934][ T6530] ? tun_get_user+0x266c/0x3e20
[ 132.827947][ T6530] ? aa_file_perm+0x44d/0x1550
[ 132.827960][ T6530] ? __pfx_tun_get_user+0x10/0x10
[ 132.827974][ T6530] ? __futex_wait+0x34f/0x3e0
[ 132.827994][ T6530] ? __pfx___futex_wait+0x10/0x10
[ 132.828012][ T6530] ? ref_tracker_alloc+0x318/0x460
[ 132.828028][ T6530] ? __lock_acquire+0xab9/0xd20
[ 132.828044][ T6530] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 132.828062][ T6530] ? tun_get+0x1c/0x2f0
[ 132.828074][ T6530] ? tun_get+0x1c/0x2f0
[ 132.828085][ T6530] ? tun_get+0x1c/0x2f0
[ 132.828097][ T6530] tun_chr_write_iter+0x113/0x200
[ 132.828109][ T6530] vfs_write+0x5c6/0xb30
[ 132.828125][ T6530] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 132.828137][ T6530] ? __pfx_vfs_write+0x10/0x10
[ 132.828154][ T6530] ? __fget_files+0x2a/0x420
[ 132.828167][ T6530] ksys_write+0x145/0x250
[ 132.828183][ T6530] ? __pfx_ksys_write+0x10/0x10
[ 132.828198][ T6530] ? do_syscall_64+0xbe/0x3b0
[ 132.828211][ T6530] do_syscall_64+0xfa/0x3b0
[ 132.828221][ T6530] ? lockdep_hardirqs_on+0x9c/0x150
[ 132.828237][ T6530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 132.828248][ T6530] ? clear_bhb_loop+0x60/0xb0
[ 132.828262][ T6530] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 132.828274][ T6530] RIP: 0033:0x7f8b6a38d69f
[ 132.828285][ T6530] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 132.828295][ T6530] RSP: 002b:00007f8b6b1b3000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 132.828309][ T6530] RAX: ffffffffffffffda RBX: 00007f8b6a5b5fa0 RCX: 00007f8b6a38d69f
[ 132.828318][ T6530] RDX: 0000000000011dc0 RSI: 00002000000004c0 RDI: 00000000000000c8
[ 132.828326][ T6530] RBP: 00007f8b6a411e19 R08: 0000000000000000 R09: 0000000000000000
[ 132.828334][ T6530] R10: 0000000000011dc0 R11: 0000000000000293 R12: 0000000000000000
[ 132.828342][ T6530] R13: 00007f8b6a5b6038 R14: 00007f8b6a5b5fa0 R15: 00007fff3db8b248
[ 132.828355][ T6530]
[ 132.828366][ T6530] BUG: Bad page state in process syz.0.17 pfn:31102
[ 133.252509][ T6530] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x31102
[ 133.262586][ T6530] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 133.269717][ T6530] raw: 00fff00000000000 dead000000000040 ffff88802229b000 0000000000000000
[ 133.278318][ T6530] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000
[ 133.286911][ T6530] page dumped because: page_pool leak
[ 133.292261][ T6530] page_owner tracks the page as allocated
[ 133.297984][ T6530] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6530, tgid 6529 (syz.0.17), ts 131359834567, free_ts 129255701144
[ 133.314928][ T6530] post_alloc_hook+0x240/0x2a0
[ 133.319682][ T6530] get_page_from_freelist+0x21e4/0x22c0
[ 133.325229][ T6530] __alloc_frozen_pages_noprof+0x181/0x370
[ 133.331040][ T6530] alloc_pages_bulk_noprof+0x560/0x710
[ 133.336527][ T6530] __page_pool_alloc_netmems_slow+0x127/0x740
[ 133.342631][ T6530] skb_pp_cow_data+0xb47/0x13e0
[ 133.347503][ T6530] do_xdp_generic+0x699/0x11a0
[ 133.352266][ T6530] __netif_receive_skb_core+0x17f9/0x4020
[ 133.358009][ T6530] __netif_receive_skb+0x72/0x380
[ 133.363031][ T6530] netif_receive_skb+0x1cb/0x790
[ 133.367991][ T6530] tun_rx_batched+0x1b9/0x730
[ 133.372663][ T6530] tun_get_user+0x2aa2/0x3e20
[ 133.377341][ T6530] tun_chr_write_iter+0x113/0x200
[ 133.382365][ T6530] vfs_write+0x5c6/0xb30
[ 133.386626][ T6530] ksys_write+0x145/0x250
[ 133.390951][ T6530] do_syscall_64+0xfa/0x3b0
[ 133.395458][ T6530] page last free pid 6478 tgid 6478 stack trace:
[ 133.401785][ T6530] __free_frozen_pages+0xbc4/0xd30
[ 133.406944][ T6530] __tlb_remove_table+0x2d2/0x3b0
[ 133.411957][ T6530] tlb_remove_table_rcu+0x85/0x100
[ 133.417084][ T6530] rcu_core+0xcab/0x1770
[ 133.421323][ T6530] handle_softirqs+0x283/0x870
[ 133.426092][ T6530] __irq_exit_rcu+0xca/0x1f0
[ 133.430670][ T6530] irq_exit_rcu+0x9/0x30
[ 133.434948][ T6530] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 133.440574][ T6530] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 133.446566][ T6530] Modules linked in:
[ 133.450454][ T6530] CPU: 1 UID: 0 PID: 6530 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 133.450468][ T6530] Tainted: [B]=BAD_PAGE
[ 133.450472][ T6530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 133.450478][ T6530] Call Trace:
[ 133.450482][ T6530]
[ 133.450486][ T6530] dump_stack_lvl+0x189/0x250
[ 133.450501][ T6530] ? __pfx_dump_stack_lvl+0x10/0x10
[ 133.450512][ T6530] ? __pfx_print_modules+0x10/0x10
[ 133.450526][ T6530] ? ksys_write+0x145/0x250
[ 133.450544][ T6530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 133.450555][ T6530] bad_page+0x180/0x1c0
[ 133.450566][ T6530] __free_frozen_pages+0xce2/0xd30
[ 133.450582][ T6530] bpf_xdp_frags_shrink_tail+0x3a5/0x750
[ 133.450598][ T6530] bpf_xdp_adjust_tail+0x1d6/0x220
[ 133.450608][ T6530] bpf_prog_f476d5219b92964a+0x1e/0x24
[ 133.450617][ T6530] bpf_prog_run_generic_xdp+0x64b/0x14c0
[ 133.450634][ T6530] do_xdp_generic+0x9f7/0x11a0
[ 133.450648][ T6530] ? __pfx_do_xdp_generic+0x10/0x10
[ 133.450659][ T6530] ? __skb_flow_dissect+0x5ef8/0x68b0
[ 133.450674][ T6530] __netif_receive_skb_core+0x17f9/0x4020
[ 133.450688][ T6530] ? __pfx___skb_flow_dissect+0x10/0x10
[ 133.450698][ T6530] ? do_user_addr_fault+0xbc1/0x1390
[ 133.450714][ T6530] ? do_user_addr_fault+0xc8a/0x1390
[ 133.450729][ T6530] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 133.450742][ T6530] ? irqentry_exit+0x74/0x90
[ 133.450756][ T6530] ? lockdep_hardirqs_on+0x9c/0x150
[ 133.450770][ T6530] ? __lock_acquire+0xab9/0xd20
[ 133.450785][ T6530] ? netif_receive_skb+0x115/0x790
[ 133.450797][ T6530] ? netif_receive_skb+0x115/0x790
[ 133.450809][ T6530] __netif_receive_skb+0x72/0x380
[ 133.450821][ T6530] ? _copy_from_iter+0x24f/0x1790
[ 133.450831][ T6530] ? netif_receive_skb+0x115/0x790
[ 133.450843][ T6530] netif_receive_skb+0x1cb/0x790
[ 133.450855][ T6530] ? __pfx___local_bh_disable_ip+0x10/0x10
[ 133.450864][ T6530] ? __pfx_netif_receive_skb+0x10/0x10
[ 133.450876][ T6530] ? __pfx__copy_from_iter+0x10/0x10
[ 133.450884][ T6530] ? sock_alloc_send_pskb+0x875/0x990
[ 133.450895][ T6530] ? tun_rx_batched+0x160/0x730
[ 133.450905][ T6530] tun_rx_batched+0x1b9/0x730
[ 133.450914][ T6530] ? __lock_acquire+0xab9/0xd20
[ 133.450927][ T6530] ? __pfx_tun_rx_batched+0x10/0x10
[ 133.450937][ T6530] ? tun_get_user+0x266c/0x3e20
[ 133.450948][ T6530] tun_get_user+0x2aa2/0x3e20
[ 133.450959][ T6530] ? tun_get_user+0x266c/0x3e20
[ 133.450968][ T6530] ? aa_file_perm+0x44d/0x1550
[ 133.450978][ T6530] ? __pfx_tun_get_user+0x10/0x10
[ 133.450986][ T6530] ? __futex_wait+0x34f/0x3e0
[ 133.451001][ T6530] ? __pfx___futex_wait+0x10/0x10
[ 133.451016][ T6530] ? ref_tracker_alloc+0x318/0x460
[ 133.451029][ T6530] ? __lock_acquire+0xab9/0xd20
[ 133.451042][ T6530] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 133.451056][ T6530] ? tun_get+0x1c/0x2f0
[ 133.451065][ T6530] ? tun_get+0x1c/0x2f0
[ 133.451073][ T6530] ? tun_get+0x1c/0x2f0
[ 133.451082][ T6530] tun_chr_write_iter+0x113/0x200
[ 133.451091][ T6530] vfs_write+0x5c6/0xb30
[ 133.451103][ T6530] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 133.451112][ T6530] ? __pfx_vfs_write+0x10/0x10
[ 133.451125][ T6530] ? __fget_files+0x2a/0x420
[ 133.451135][ T6530] ksys_write+0x145/0x250
[ 133.451147][ T6530] ? __pfx_ksys_write+0x10/0x10
[ 133.451160][ T6530] ? do_syscall_64+0xbe/0x3b0
[ 133.451169][ T6530] do_syscall_64+0xfa/0x3b0
[ 133.451176][ T6530] ? lockdep_hardirqs_on+0x9c/0x150
[ 133.451189][ T6530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 133.451198][ T6530] ? clear_bhb_loop+0x60/0xb0
[ 133.451208][ T6530] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 133.451217][ T6530] RIP: 0033:0x7f8b6a38d69f
[ 133.451226][ T6530] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 133.451234][ T6530] RSP: 002b:00007f8b6b1b3000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 133.451244][ T6530] RAX: ffffffffffffffda RBX: 00007f8b6a5b5fa0 RCX: 00007f8b6a38d69f
[ 133.451251][ T6530] RDX: 0000000000011dc0 RSI: 00002000000004c0 RDI: 00000000000000c8
[ 133.451257][ T6530] RBP: 00007f8b6a411e19 R08: 0000000000000000 R09: 0000000000000000
[ 133.451262][ T6530] R10: 0000000000011dc0 R11: 0000000000000293 R12: 0000000000000000
[ 133.451267][ T6530] R13: 00007f8b6a5b6038 R14: 00007f8b6a5b5fa0 R15: 00007fff3db8b248
[ 133.451277][ T6530]
[ 133.451283][ T6530] BUG: Bad page state in process syz.0.17 pfn:67738
[ 133.875507][ T6530] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888067738dc0 pfn:0x67738
[ 133.885573][ T6530] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 133.892695][ T6530] raw: 00fff00000000000 dead000000000040 ffff88802229b000 0000000000000000
[ 133.901288][ T6530] raw: ffff888067738dc0 0000000000000001 00000000ffffffff 0000000000000000
[ 133.909874][ T6530] page dumped because: page_pool leak
[ 133.915263][ T6530] page_owner tracks the page as allocated
[ 133.920963][ T6530] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6530, tgid 6529 (syz.0.17), ts 131359824946, free_ts 129255715869
[ 133.937809][ T6530] post_alloc_hook+0x240/0x2a0
[ 133.942603][ T6530] get_page_from_freelist+0x21e4/0x22c0
[ 133.948160][ T6530] __alloc_frozen_pages_noprof+0x181/0x370
[ 133.953957][ T6530] alloc_pages_bulk_noprof+0x560/0x710
[ 133.959429][ T6530] __page_pool_alloc_netmems_slow+0x127/0x740
[ 133.965512][ T6530] skb_pp_cow_data+0xb47/0x13e0
[ 133.970455][ T6530] do_xdp_generic+0x699/0x11a0
[ 133.975228][ T6530] __netif_receive_skb_core+0x17f9/0x4020
[ 133.980943][ T6530] __netif_receive_skb+0x72/0x380
[ 133.985979][ T6530] netif_receive_skb+0x1cb/0x790
[ 133.990912][ T6530] tun_rx_batched+0x1b9/0x730
[ 133.995599][ T6530] tun_get_user+0x2aa2/0x3e20
[ 134.000267][ T6530] tun_chr_write_iter+0x113/0x200
[ 134.005309][ T6530] vfs_write+0x5c6/0xb30
[ 134.009554][ T6530] ksys_write+0x145/0x250
[ 134.013877][ T6530] do_syscall_64+0xfa/0x3b0
[ 134.018390][ T6530] page last free pid 6478 tgid 6478 stack trace:
[ 134.024808][ T6530] __free_frozen_pages+0xbc4/0xd30
[ 134.029927][ T6530] __tlb_remove_table+0x2d2/0x3b0
[ 134.034956][ T6530] tlb_remove_table_rcu+0x85/0x100
[ 134.040058][ T6530] rcu_core+0xcab/0x1770
[ 134.044401][ T6530] handle_softirqs+0x283/0x870
[ 134.049150][ T6530] __irq_exit_rcu+0xca/0x1f0
[ 134.053731][ T6530] irq_exit_rcu+0x9/0x30
[ 134.057981][ T6530] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 134.063608][ T6530] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 134.069590][ T6530] Modules linked in:
[ 134.073478][ T6530] CPU: 1 UID: 0 PID: 6530 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 134.073492][ T6530] Tainted: [B]=BAD_PAGE
[ 134.073495][ T6530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 134.073501][ T6530] Call Trace:
[ 134.073505][ T6530]
[ 134.073509][ T6530] dump_stack_lvl+0x189/0x250
[ 134.073523][ T6530] ? __pfx_dump_stack_lvl+0x10/0x10
[ 134.073534][ T6530] ? __pfx_print_modules+0x10/0x10
[ 134.073548][ T6530] ? ksys_write+0x145/0x250
[ 134.073560][ T6530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 134.073571][ T6530] bad_page+0x180/0x1c0
[ 134.073582][ T6530] __free_frozen_pages+0xce2/0xd30
[ 134.073598][ T6530] bpf_xdp_frags_shrink_tail+0x3a5/0x750
[ 134.073614][ T6530] bpf_xdp_adjust_tail+0x1d6/0x220
[ 134.073624][ T6530] bpf_prog_f476d5219b92964a+0x1e/0x24
[ 134.073632][ T6530] bpf_prog_run_generic_xdp+0x64b/0x14c0
[ 134.073650][ T6530] do_xdp_generic+0x9f7/0x11a0
[ 134.073663][ T6530] ? __pfx_do_xdp_generic+0x10/0x10
[ 134.073674][ T6530] ? __skb_flow_dissect+0x5ef8/0x68b0
[ 134.073690][ T6530] __netif_receive_skb_core+0x17f9/0x4020
[ 134.073704][ T6530] ? __pfx___skb_flow_dissect+0x10/0x10
[ 134.073714][ T6530] ? do_user_addr_fault+0xbc1/0x1390
[ 134.073730][ T6530] ? do_user_addr_fault+0xc8a/0x1390
[ 134.073744][ T6530] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 134.073758][ T6530] ? irqentry_exit+0x74/0x90
[ 134.073772][ T6530] ? lockdep_hardirqs_on+0x9c/0x150
[ 134.073786][ T6530] ? __lock_acquire+0xab9/0xd20
[ 134.073800][ T6530] ? netif_receive_skb+0x115/0x790
[ 134.073817][ T6530] ? netif_receive_skb+0x115/0x790
[ 134.073830][ T6530] __netif_receive_skb+0x72/0x380
[ 134.073842][ T6530] ? _copy_from_iter+0x24f/0x1790
[ 134.073852][ T6530] ? netif_receive_skb+0x115/0x790
[ 134.073863][ T6530] netif_receive_skb+0x1cb/0x790
[ 134.073875][ T6530] ? __pfx___local_bh_disable_ip+0x10/0x10
[ 134.073884][ T6530] ? __pfx_netif_receive_skb+0x10/0x10
[ 134.073896][ T6530] ? __pfx__copy_from_iter+0x10/0x10
[ 134.073904][ T6530] ? sock_alloc_send_pskb+0x875/0x990
[ 134.073915][ T6530] ? tun_rx_batched+0x160/0x730
[ 134.073924][ T6530] tun_rx_batched+0x1b9/0x730
[ 134.073933][ T6530] ? __lock_acquire+0xab9/0xd20
[ 134.073947][ T6530] ? __pfx_tun_rx_batched+0x10/0x10
[ 134.073957][ T6530] ? tun_get_user+0x266c/0x3e20
[ 134.073968][ T6530] tun_get_user+0x2aa2/0x3e20
[ 134.073979][ T6530] ? tun_get_user+0x266c/0x3e20
[ 134.073988][ T6530] ? aa_file_perm+0x44d/0x1550
[ 134.073997][ T6530] ? __pfx_tun_get_user+0x10/0x10
[ 134.074005][ T6530] ? __futex_wait+0x34f/0x3e0
[ 134.074021][ T6530] ? __pfx___futex_wait+0x10/0x10
[ 134.074035][ T6530] ? ref_tracker_alloc+0x318/0x460
[ 134.074048][ T6530] ? __lock_acquire+0xab9/0xd20
[ 134.074061][ T6530] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 134.074075][ T6530] ? tun_get+0x1c/0x2f0
[ 134.074084][ T6530] ? tun_get+0x1c/0x2f0
[ 134.074092][ T6530] ? tun_get+0x1c/0x2f0
[ 134.074101][ T6530] tun_chr_write_iter+0x113/0x200
[ 134.074110][ T6530] vfs_write+0x5c6/0xb30
[ 134.074122][ T6530] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 134.074131][ T6530] ? __pfx_vfs_write+0x10/0x10
[ 134.074144][ T6530] ? __fget_files+0x2a/0x420
[ 134.074154][ T6530] ksys_write+0x145/0x250
[ 134.074166][ T6530] ? __pfx_ksys_write+0x10/0x10
[ 134.074178][ T6530] ? do_syscall_64+0xbe/0x3b0
[ 134.074187][ T6530] do_syscall_64+0xfa/0x3b0
[ 134.074195][ T6530] ? lockdep_hardirqs_on+0x9c/0x150
[ 134.074208][ T6530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 134.074217][ T6530] ? clear_bhb_loop+0x60/0xb0
[ 134.074227][ T6530] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 134.074235][ T6530] RIP: 0033:0x7f8b6a38d69f
[ 134.074244][ T6530] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 134.074251][ T6530] RSP: 002b:00007f8b6b1b3000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 134.074261][ T6530] RAX: ffffffffffffffda RBX: 00007f8b6a5b5fa0 RCX: 00007f8b6a38d69f
[ 134.074268][ T6530] RDX: 0000000000011dc0 RSI: 00002000000004c0 RDI: 00000000000000c8
[ 134.074274][ T6530] RBP: 00007f8b6a411e19 R08: 0000000000000000 R09: 0000000000000000
[ 134.074279][ T6530] R10: 0000000000011dc0 R11: 0000000000000293 R12: 0000000000000000
[ 134.074285][ T6530] R13: 00007f8b6a5b6038 R14: 00007f8b6a5b5fa0 R15: 00007fff3db8b248
[ 134.074294][ T6530]
[ 134.074301][ T6530] BUG: Bad page state in process syz.0.17 pfn:7a931
[ 134.498486][ T6530] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807a931140 pfn:0x7a931
[ 134.508563][ T6530] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 134.515689][ T6530] raw: 00fff00000000000 dead000000000040 ffff88802229b000 0000000000000000
[ 134.524252][ T6530] raw: ffff88807a931140 0000000000000001 00000000ffffffff 0000000000000000
[ 134.532838][ T6530] page dumped because: page_pool leak
[ 134.538209][ T6530] page_owner tracks the page as allocated
[ 134.543901][ T6530] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6530, tgid 6529 (syz.0.17), ts 131359815115, free_ts 129255751949
[ 134.560758][ T6530] post_alloc_hook+0x240/0x2a0
[ 134.565554][ T6530] get_page_from_freelist+0x21e4/0x22c0
[ 134.571081][ T6530] __alloc_frozen_pages_noprof+0x181/0x370
[ 134.576893][ T6530] alloc_pages_bulk_noprof+0x560/0x710
[ 134.582352][ T6530] __page_pool_alloc_netmems_slow+0x127/0x740
[ 134.588515][ T6530] skb_pp_cow_data+0xb47/0x13e0
[ 134.593371][ T6530] do_xdp_generic+0x699/0x11a0
[ 134.598170][ T6530] __netif_receive_skb_core+0x17f9/0x4020
[ 134.603899][ T6530] __netif_receive_skb+0x72/0x380
[ 134.608948][ T6530] netif_receive_skb+0x1cb/0x790
[ 134.613886][ T6530] tun_rx_batched+0x1b9/0x730
[ 134.618598][ T6530] tun_get_user+0x2aa2/0x3e20
[ 134.623269][ T6530] tun_chr_write_iter+0x113/0x200
[ 134.628323][ T6530] vfs_write+0x5c6/0xb30
[ 134.632572][ T6530] ksys_write+0x145/0x250
[ 134.636922][ T6530] do_syscall_64+0xfa/0x3b0
[ 134.641421][ T6530] page last free pid 6478 tgid 6478 stack trace:
[ 134.647773][ T6530] __free_frozen_pages+0xbc4/0xd30
[ 134.652995][ T6530] __tlb_remove_table+0x2d2/0x3b0
[ 134.658068][ T6530] tlb_remove_table_rcu+0x85/0x100
[ 134.663181][ T6530] rcu_core+0xcab/0x1770
[ 134.667449][ T6530] handle_softirqs+0x283/0x870
[ 134.672206][ T6530] __irq_exit_rcu+0xca/0x1f0
[ 134.676809][ T6530] irq_exit_rcu+0x9/0x30
[ 134.681041][ T6530] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 134.686691][ T6530] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 134.692702][ T6530] Modules linked in:
[ 134.696608][ T6530] CPU: 1 UID: 0 PID: 6530 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 134.696630][ T6530] Tainted: [B]=BAD_PAGE
[ 134.696635][ T6530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 134.696644][ T6530] Call Trace:
[ 134.696649][ T6530]
[ 134.696656][ T6530] dump_stack_lvl+0x189/0x250
[ 134.696677][ T6530] ? __pfx_dump_stack_lvl+0x10/0x10
[ 134.696693][ T6530] ? __pfx_print_modules+0x10/0x10
[ 134.696712][ T6530] ? ksys_write+0x145/0x250
[ 134.696730][ T6530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 134.696748][ T6530] bad_page+0x180/0x1c0
[ 134.696766][ T6530] __free_frozen_pages+0xce2/0xd30
[ 134.696791][ T6530] bpf_xdp_frags_shrink_tail+0x3a5/0x750
[ 134.696818][ T6530] bpf_xdp_adjust_tail+0x1d6/0x220
[ 134.696836][ T6530] bpf_prog_f476d5219b92964a+0x1e/0x24
[ 134.696850][ T6530] bpf_prog_run_generic_xdp+0x64b/0x14c0
[ 134.696879][ T6530] do_xdp_generic+0x9f7/0x11a0
[ 134.696901][ T6530] ? __pfx_do_xdp_generic+0x10/0x10
[ 134.696918][ T6530] ? __skb_flow_dissect+0x5ef8/0x68b0
[ 134.696945][ T6530] __netif_receive_skb_core+0x17f9/0x4020
[ 134.696967][ T6530] ? __pfx___skb_flow_dissect+0x10/0x10
[ 134.696984][ T6530] ? do_user_addr_fault+0xbc1/0x1390
[ 134.697008][ T6530] ? do_user_addr_fault+0xc8a/0x1390
[ 134.697030][ T6530] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 134.697050][ T6530] ? irqentry_exit+0x74/0x90
[ 134.697068][ T6530] ? lockdep_hardirqs_on+0x9c/0x150
[ 134.697089][ T6530] ? __lock_acquire+0xab9/0xd20
[ 134.697111][ T6530] ? netif_receive_skb+0x115/0x790
[ 134.697129][ T6530] ? netif_receive_skb+0x115/0x790
[ 134.697149][ T6530] __netif_receive_skb+0x72/0x380
[ 134.697168][ T6530] ? _copy_from_iter+0x24f/0x1790
[ 134.697185][ T6530] ? netif_receive_skb+0x115/0x790
[ 134.697203][ T6530] netif_receive_skb+0x1cb/0x790
[ 134.697222][ T6530] ? __pfx___local_bh_disable_ip+0x10/0x10
[ 134.697238][ T6530] ? __pfx_netif_receive_skb+0x10/0x10
[ 134.697256][ T6530] ? __pfx__copy_from_iter+0x10/0x10
[ 134.697269][ T6530] ? sock_alloc_send_pskb+0x875/0x990
[ 134.697288][ T6530] ? tun_rx_batched+0x160/0x730
[ 134.697304][ T6530] tun_rx_batched+0x1b9/0x730
[ 134.697318][ T6530] ? __lock_acquire+0xab9/0xd20
[ 134.697339][ T6530] ? __pfx_tun_rx_batched+0x10/0x10
[ 134.697355][ T6530] ? tun_get_user+0x266c/0x3e20
[ 134.697375][ T6530] tun_get_user+0x2aa2/0x3e20
[ 134.697394][ T6530] ? tun_get_user+0x266c/0x3e20
[ 134.697410][ T6530] ? aa_file_perm+0x44d/0x1550
[ 134.697426][ T6530] ? __pfx_tun_get_user+0x10/0x10
[ 134.697448][ T6530] ? __futex_wait+0x34f/0x3e0
[ 134.697471][ T6530] ? __pfx___futex_wait+0x10/0x10
[ 134.697494][ T6530] ? ref_tracker_alloc+0x318/0x460
[ 134.697513][ T6530] ? __lock_acquire+0xab9/0xd20
[ 134.697532][ T6530] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 134.697554][ T6530] ? tun_get+0x1c/0x2f0
[ 134.697570][ T6530] ? tun_get+0x1c/0x2f0
[ 134.697584][ T6530] ? tun_get+0x1c/0x2f0
[ 134.697599][ T6530] tun_chr_write_iter+0x113/0x200
[ 134.697616][ T6530] vfs_write+0x5c6/0xb30
[ 134.697635][ T6530] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 134.697651][ T6530] ? __pfx_vfs_write+0x10/0x10
[ 134.697671][ T6530] ? __fget_files+0x2a/0x420
[ 134.697687][ T6530] ksys_write+0x145/0x250
[ 134.697706][ T6530] ? __pfx_ksys_write+0x10/0x10
[ 134.697726][ T6530] ? do_syscall_64+0xbe/0x3b0
[ 134.697741][ T6530] do_syscall_64+0xfa/0x3b0
[ 134.697753][ T6530] ? lockdep_hardirqs_on+0x9c/0x150
[ 134.697770][ T6530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 134.697783][ T6530] ? clear_bhb_loop+0x60/0xb0
[ 134.697798][ T6530] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 134.697811][ T6530] RIP: 0033:0x7f8b6a38d69f
[ 134.697825][ T6530] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 134.697837][ T6530] RSP: 002b:00007f8b6b1b3000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 134.697853][ T6530] RAX: ffffffffffffffda RBX: 00007f8b6a5b5fa0 RCX: 00007f8b6a38d69f
[ 134.697865][ T6530] RDX: 0000000000011dc0 RSI: 00002000000004c0 RDI: 00000000000000c8
[ 134.697875][ T6530] RBP: 00007f8b6a411e19 R08: 0000000000000000 R09: 0000000000000000
[ 134.697885][ T6530] R10: 0000000000011dc0 R11: 0000000000000293 R12: 0000000000000000
[ 134.697894][ T6530] R13: 00007f8b6a5b6038 R14: 00007f8b6a5b5fa0 R15: 00007fff3db8b248
[ 134.697910][ T6530]
[ 134.697920][ T6530] BUG: Bad page state in process syz.0.17 pfn:7a932
[ 135.122312][ T6530] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807a932780 pfn:0x7a932
[ 135.132425][ T6530] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 135.139558][ T6530] raw: 00fff00000000000 dead000000000040 ffff88802229b000 0000000000000000
[ 135.148156][ T6530] raw: ffff88807a932780 0000000000000001 00000000ffffffff 0000000000000000
[ 135.156777][ T6530] page dumped because: page_pool leak
[ 135.162137][ T6530] page_owner tracks the page as allocated
[ 135.167851][ T6530] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6530, tgid 6529 (syz.0.17), ts 131359805454, free_ts 129255788190
[ 135.184717][ T6530] post_alloc_hook+0x240/0x2a0
[ 135.189477][ T6530] get_page_from_freelist+0x21e4/0x22c0
[ 135.195029][ T6530] __alloc_frozen_pages_noprof+0x181/0x370
[ 135.200914][ T6530] alloc_pages_bulk_noprof+0x560/0x710
[ 135.206384][ T6530] __page_pool_alloc_netmems_slow+0x127/0x740
[ 135.212444][ T6530] skb_pp_cow_data+0xb47/0x13e0
[ 135.217296][ T6530] do_xdp_generic+0x699/0x11a0
[ 135.222054][ T6530] __netif_receive_skb_core+0x17f9/0x4020
[ 135.227791][ T6530] __netif_receive_skb+0x72/0x380
[ 135.232809][ T6530] netif_receive_skb+0x1cb/0x790
[ 135.237758][ T6530] tun_rx_batched+0x1b9/0x730
[ 135.242428][ T6530] tun_get_user+0x2aa2/0x3e20
[ 135.247129][ T6530] tun_chr_write_iter+0x113/0x200
[ 135.252147][ T6530] vfs_write+0x5c6/0xb30
[ 135.256458][ T6530] ksys_write+0x145/0x250
[ 135.260785][ T6530] do_syscall_64+0xfa/0x3b0
[ 135.265307][ T6530] page last free pid 6478 tgid 6478 stack trace:
[ 135.271618][ T6530] __free_frozen_pages+0xbc4/0xd30
[ 135.276739][ T6530] __tlb_remove_table+0x2d2/0x3b0
[ 135.281764][ T6530] tlb_remove_table_rcu+0x85/0x100
[ 135.286901][ T6530] rcu_core+0xcab/0x1770
[ 135.291141][ T6530] handle_softirqs+0x283/0x870
[ 135.295926][ T6530] __irq_exit_rcu+0xca/0x1f0
[ 135.300509][ T6530] irq_exit_rcu+0x9/0x30
[ 135.304760][ T6530] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 135.310388][ T6530] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 135.316383][ T6530] Modules linked in:
[ 135.320277][ T6530] CPU: 1 UID: 0 PID: 6530 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 135.320292][ T6530] Tainted: [B]=BAD_PAGE
[ 135.320295][ T6530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 135.320301][ T6530] Call Trace:
[ 135.320305][ T6530]
[ 135.320310][ T6530] dump_stack_lvl+0x189/0x250
[ 135.320324][ T6530] ? __pfx_dump_stack_lvl+0x10/0x10
[ 135.320334][ T6530] ? __pfx_print_modules+0x10/0x10
[ 135.320348][ T6530] ? ksys_write+0x145/0x250
[ 135.320368][ T6530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 135.320379][ T6530] bad_page+0x180/0x1c0
[ 135.320390][ T6530] __free_frozen_pages+0xce2/0xd30
[ 135.320406][ T6530] bpf_xdp_frags_shrink_tail+0x3a5/0x750
[ 135.320422][ T6530] bpf_xdp_adjust_tail+0x1d6/0x220
[ 135.320432][ T6530] bpf_prog_f476d5219b92964a+0x1e/0x24
[ 135.320440][ T6530] bpf_prog_run_generic_xdp+0x64b/0x14c0
[ 135.320459][ T6530] do_xdp_generic+0x9f7/0x11a0
[ 135.320473][ T6530] ? __pfx_do_xdp_generic+0x10/0x10
[ 135.320483][ T6530] ? __skb_flow_dissect+0x5ef8/0x68b0
[ 135.320499][ T6530] __netif_receive_skb_core+0x17f9/0x4020
[ 135.320513][ T6530] ? __pfx___skb_flow_dissect+0x10/0x10
[ 135.320523][ T6530] ? do_user_addr_fault+0xbc1/0x1390
[ 135.320539][ T6530] ? do_user_addr_fault+0xc8a/0x1390
[ 135.320553][ T6530] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 135.320566][ T6530] ? irqentry_exit+0x74/0x90
[ 135.320580][ T6530] ? lockdep_hardirqs_on+0x9c/0x150
[ 135.320594][ T6530] ? __lock_acquire+0xab9/0xd20
[ 135.320609][ T6530] ? netif_receive_skb+0x115/0x790
[ 135.320622][ T6530] ? netif_receive_skb+0x115/0x790
[ 135.320634][ T6530] __netif_receive_skb+0x72/0x380
[ 135.320646][ T6530] ? _copy_from_iter+0x24f/0x1790
[ 135.320656][ T6530] ? netif_receive_skb+0x115/0x790
[ 135.320667][ T6530] netif_receive_skb+0x1cb/0x790
[ 135.320679][ T6530] ? __pfx___local_bh_disable_ip+0x10/0x10
[ 135.320689][ T6530] ? __pfx_netif_receive_skb+0x10/0x10
[ 135.320700][ T6530] ? __pfx__copy_from_iter+0x10/0x10
[ 135.320708][ T6530] ? sock_alloc_send_pskb+0x875/0x990
[ 135.320720][ T6530] ? tun_rx_batched+0x160/0x730
[ 135.320729][ T6530] tun_rx_batched+0x1b9/0x730
[ 135.320738][ T6530] ? __lock_acquire+0xab9/0xd20
[ 135.320751][ T6530] ? __pfx_tun_rx_batched+0x10/0x10
[ 135.320761][ T6530] ? tun_get_user+0x266c/0x3e20
[ 135.320772][ T6530] tun_get_user+0x2aa2/0x3e20
[ 135.320782][ T6530] ? tun_get_user+0x266c/0x3e20
[ 135.320791][ T6530] ? aa_file_perm+0x44d/0x1550
[ 135.320801][ T6530] ? __pfx_tun_get_user+0x10/0x10
[ 135.320809][ T6530] ? __futex_wait+0x34f/0x3e0
[ 135.320825][ T6530] ? __pfx___futex_wait+0x10/0x10
[ 135.320840][ T6530] ? ref_tracker_alloc+0x318/0x460
[ 135.320853][ T6530] ? __lock_acquire+0xab9/0xd20
[ 135.320866][ T6530] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 135.320880][ T6530] ? tun_get+0x1c/0x2f0
[ 135.320889][ T6530] ? tun_get+0x1c/0x2f0
[ 135.320897][ T6530] ? tun_get+0x1c/0x2f0
[ 135.320906][ T6530] tun_chr_write_iter+0x113/0x200
[ 135.320915][ T6530] vfs_write+0x5c6/0xb30
[ 135.320927][ T6530] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 135.320936][ T6530] ? __pfx_vfs_write+0x10/0x10
[ 135.320949][ T6530] ? __fget_files+0x2a/0x420
[ 135.320958][ T6530] ksys_write+0x145/0x250
[ 135.320971][ T6530] ? __pfx_ksys_write+0x10/0x10
[ 135.320983][ T6530] ? do_syscall_64+0xbe/0x3b0
[ 135.320992][ T6530] do_syscall_64+0xfa/0x3b0
[ 135.321000][ T6530] ? lockdep_hardirqs_on+0x9c/0x150
[ 135.321013][ T6530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 135.321021][ T6530] ? clear_bhb_loop+0x60/0xb0
[ 135.321031][ T6530] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 135.321039][ T6530] RIP: 0033:0x7f8b6a38d69f
[ 135.321048][ T6530] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 135.321056][ T6530] RSP: 002b:00007f8b6b1b3000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 135.321066][ T6530] RAX: ffffffffffffffda RBX: 00007f8b6a5b5fa0 RCX: 00007f8b6a38d69f
[ 135.321073][ T6530] RDX: 0000000000011dc0 RSI: 00002000000004c0 RDI: 00000000000000c8
[ 135.321078][ T6530] RBP: 00007f8b6a411e19 R08: 0000000000000000 R09: 0000000000000000
[ 135.321084][ T6530] R10: 0000000000011dc0 R11: 0000000000000293 R12: 0000000000000000
[ 135.321089][ T6530] R13: 00007f8b6a5b6038 R14: 00007f8b6a5b5fa0 R15: 00007fff3db8b248
[ 135.321099][ T6530]
[ 135.321106][ T6530] BUG: Bad page state in process syz.0.17 pfn:31ce8
[ 135.745470][ T6530] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888031ce83c0 pfn:0x31ce8
[ 135.755547][ T6530] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 135.762665][ T6530] raw: 00fff00000000000 dead000000000040 ffff88802229b000 0000000000000000
[ 135.771270][ T6530] raw: ffff888031ce83c0 0000000000000001 00000000ffffffff 0000000000000000
[ 135.779878][ T6530] page dumped because: page_pool leak
[ 135.785260][ T6530] page_owner tracks the page as allocated
[ 135.790973][ T6530] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6530, tgid 6529 (syz.0.17), ts 131359795600, free_ts 129255823995
[ 135.808017][ T6530] post_alloc_hook+0x240/0x2a0
[ 135.812807][ T6530] get_page_from_freelist+0x21e4/0x22c0
[ 135.818375][ T6530] __alloc_frozen_pages_noprof+0x181/0x370
[ 135.824180][ T6530] alloc_pages_bulk_noprof+0x560/0x710
[ 135.829673][ T6530] __page_pool_alloc_netmems_slow+0x127/0x740
[ 135.835768][ T6530] skb_pp_cow_data+0xb47/0x13e0
[ 135.840607][ T6530] do_xdp_generic+0x699/0x11a0
[ 135.845379][ T6530] __netif_receive_skb_core+0x17f9/0x4020
[ 135.851123][ T6530] __netif_receive_skb+0x72/0x380
[ 135.856163][ T6530] netif_receive_skb+0x1cb/0x790
[ 135.861096][ T6530] tun_rx_batched+0x1b9/0x730
[ 135.865796][ T6530] tun_get_user+0x2aa2/0x3e20
[ 135.870474][ T6530] tun_chr_write_iter+0x113/0x200
[ 135.875523][ T6530] vfs_write+0x5c6/0xb30
[ 135.879773][ T6530] ksys_write+0x145/0x250
[ 135.884103][ T6530] do_syscall_64+0xfa/0x3b0
[ 135.888621][ T6530] page last free pid 6478 tgid 6478 stack trace:
[ 135.894950][ T6530] __free_frozen_pages+0xbc4/0xd30
[ 135.900054][ T6530] __tlb_remove_table+0x2d2/0x3b0
[ 135.905097][ T6530] tlb_remove_table_rcu+0x85/0x100
[ 135.910198][ T6530] rcu_core+0xcab/0x1770
[ 135.914465][ T6530] handle_softirqs+0x283/0x870
[ 135.919224][ T6530] __irq_exit_rcu+0xca/0x1f0
[ 135.923810][ T6530] irq_exit_rcu+0x9/0x30
[ 135.928103][ T6530] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 135.933742][ T6530] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 135.939741][ T6530] Modules linked in:
[ 135.943632][ T6530] CPU: 1 UID: 0 PID: 6530 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 135.943646][ T6530] Tainted: [B]=BAD_PAGE
[ 135.943650][ T6530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 135.943655][ T6530] Call Trace:
[ 135.943659][ T6530]
[ 135.943663][ T6530] dump_stack_lvl+0x189/0x250
[ 135.943678][ T6530] ? __pfx_dump_stack_lvl+0x10/0x10
[ 135.943689][ T6530] ? __pfx_print_modules+0x10/0x10
[ 135.943703][ T6530] ? ksys_write+0x145/0x250
[ 135.943715][ T6530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 135.943726][ T6530] bad_page+0x180/0x1c0
[ 135.943738][ T6530] __free_frozen_pages+0xce2/0xd30
[ 135.943753][ T6530] bpf_xdp_frags_shrink_tail+0x3a5/0x750
[ 135.943769][ T6530] bpf_xdp_adjust_tail+0x1d6/0x220
[ 135.943779][ T6530] bpf_prog_f476d5219b92964a+0x1e/0x24
[ 135.943788][ T6530] bpf_prog_run_generic_xdp+0x64b/0x14c0
[ 135.943806][ T6530] do_xdp_generic+0x9f7/0x11a0
[ 135.943820][ T6530] ? __pfx_do_xdp_generic+0x10/0x10
[ 135.943830][ T6530] ? __skb_flow_dissect+0x5ef8/0x68b0
[ 135.943846][ T6530] __netif_receive_skb_core+0x17f9/0x4020
[ 135.943860][ T6530] ? __pfx___skb_flow_dissect+0x10/0x10
[ 135.943871][ T6530] ? do_user_addr_fault+0xbc1/0x1390
[ 135.943887][ T6530] ? do_user_addr_fault+0xc8a/0x1390
[ 135.943902][ T6530] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 135.943915][ T6530] ? irqentry_exit+0x74/0x90
[ 135.943929][ T6530] ? lockdep_hardirqs_on+0x9c/0x150
[ 135.943943][ T6530] ? __lock_acquire+0xab9/0xd20
[ 135.943957][ T6530] ? netif_receive_skb+0x115/0x790
[ 135.943969][ T6530] ? netif_receive_skb+0x115/0x790
[ 135.943982][ T6530] __netif_receive_skb+0x72/0x380
[ 135.943994][ T6530] ? _copy_from_iter+0x24f/0x1790
[ 135.944004][ T6530] ? netif_receive_skb+0x115/0x790
[ 135.944016][ T6530] netif_receive_skb+0x1cb/0x790
[ 135.944027][ T6530] ? __pfx___local_bh_disable_ip+0x10/0x10
[ 135.944037][ T6530] ? __pfx_netif_receive_skb+0x10/0x10
[ 135.944049][ T6530] ? __pfx__copy_from_iter+0x10/0x10
[ 135.944057][ T6530] ? sock_alloc_send_pskb+0x875/0x990
[ 135.944069][ T6530] ? tun_rx_batched+0x160/0x730
[ 135.944078][ T6530] tun_rx_batched+0x1b9/0x730
[ 135.944087][ T6530] ? __lock_acquire+0xab9/0xd20
[ 135.944101][ T6530] ? __pfx_tun_rx_batched+0x10/0x10
[ 135.944110][ T6530] ? tun_get_user+0x266c/0x3e20
[ 135.944121][ T6530] tun_get_user+0x2aa2/0x3e20
[ 135.944132][ T6530] ? tun_get_user+0x266c/0x3e20
[ 135.944141][ T6530] ? aa_file_perm+0x44d/0x1550
[ 135.944151][ T6530] ? __pfx_tun_get_user+0x10/0x10
[ 135.944159][ T6530] ? __futex_wait+0x34f/0x3e0
[ 135.944174][ T6530] ? __pfx___futex_wait+0x10/0x10
[ 135.944188][ T6530] ? ref_tracker_alloc+0x318/0x460
[ 135.944201][ T6530] ? __lock_acquire+0xab9/0xd20
[ 135.944214][ T6530] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 135.944229][ T6530] ? tun_get+0x1c/0x2f0
[ 135.944238][ T6530] ? tun_get+0x1c/0x2f0
[ 135.944246][ T6530] ? tun_get+0x1c/0x2f0
[ 135.944254][ T6530] tun_chr_write_iter+0x113/0x200
[ 135.944264][ T6530] vfs_write+0x5c6/0xb30
[ 135.944276][ T6530] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 135.944290][ T6530] ? __pfx_vfs_write+0x10/0x10
[ 135.944303][ T6530] ? __fget_files+0x2a/0x420
[ 135.944313][ T6530] ksys_write+0x145/0x250
[ 135.944325][ T6530] ? __pfx_ksys_write+0x10/0x10
[ 135.944337][ T6530] ? do_syscall_64+0xbe/0x3b0
[ 135.944354][ T6530] do_syscall_64+0xfa/0x3b0
[ 135.944366][ T6530] ? lockdep_hardirqs_on+0x9c/0x150
[ 135.944383][ T6530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 135.944396][ T6530] ? clear_bhb_loop+0x60/0xb0
[ 135.944412][ T6530] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 135.944426][ T6530] RIP: 0033:0x7f8b6a38d69f
[ 135.944436][ T6530] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 135.944444][ T6530] RSP: 002b:00007f8b6b1b3000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 135.944455][ T6530] RAX: ffffffffffffffda RBX: 00007f8b6a5b5fa0 RCX: 00007f8b6a38d69f
[ 135.944461][ T6530] RDX: 0000000000011dc0 RSI: 00002000000004c0 RDI: 00000000000000c8
[ 135.944467][ T6530] RBP: 00007f8b6a411e19 R08: 0000000000000000 R09: 0000000000000000
[ 135.944473][ T6530] R10: 0000000000011dc0 R11: 0000000000000293 R12: 0000000000000000
[ 135.944478][ T6530] R13: 00007f8b6a5b6038 R14: 00007f8b6a5b5fa0 R15: 00007fff3db8b248
[ 135.944488][ T6530]
[ 136.361257][ T6530] BUG: Bad page state in process syz.0.17 pfn:31107
[ 136.367948][ T6530] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x31107
[ 136.378057][ T6530] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 136.385204][ T6530] raw: 00fff00000000000 dead000000000040 ffff88802229b000 0000000000000000
[ 136.393789][ T6530] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000
[ 136.402387][ T6530] page dumped because: page_pool leak
[ 136.407855][ T6530] page_owner tracks the page as allocated
[ 136.413551][ T6530] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6530, tgid 6529 (syz.0.17), ts 131359785937, free_ts 129255857151
[ 136.430396][ T6530] post_alloc_hook+0x240/0x2a0
[ 136.435185][ T6530] get_page_from_freelist+0x21e4/0x22c0
[ 136.440715][ T6530] __alloc_frozen_pages_noprof+0x181/0x370
[ 136.446532][ T6530] alloc_pages_bulk_noprof+0x560/0x710
[ 136.451990][ T6530] __page_pool_alloc_netmems_slow+0x127/0x740
[ 136.458071][ T6530] skb_pp_cow_data+0xb47/0x13e0
[ 136.462910][ T6530] do_xdp_generic+0x699/0x11a0
[ 136.467685][ T6530] __netif_receive_skb_core+0x17f9/0x4020
[ 136.473402][ T6530] __netif_receive_skb+0x72/0x380
[ 136.478438][ T6530] netif_receive_skb+0x1cb/0x790
[ 136.483375][ T6530] tun_rx_batched+0x1b9/0x730
[ 136.488095][ T6530] tun_get_user+0x2aa2/0x3e20
[ 136.492781][ T6530] tun_chr_write_iter+0x113/0x200
[ 136.497851][ T6530] vfs_write+0x5c6/0xb30
[ 136.502109][ T6530] ksys_write+0x145/0x250
[ 136.506509][ T6530] do_syscall_64+0xfa/0x3b0
[ 136.511008][ T6530] page last free pid 6478 tgid 6478 stack trace:
[ 136.517339][ T6530] __free_frozen_pages+0xbc4/0xd30
[ 136.522452][ T6530] __tlb_remove_table+0x2d2/0x3b0
[ 136.527537][ T6530] tlb_remove_table_rcu+0x85/0x100
[ 136.532650][ T6530] rcu_core+0xcab/0x1770
[ 136.536922][ T6530] handle_softirqs+0x283/0x870
[ 136.541690][ T6530] __irq_exit_rcu+0xca/0x1f0
[ 136.546310][ T6530] irq_exit_rcu+0x9/0x30
[ 136.550552][ T6530] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 136.556206][ T6530] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 136.562185][ T6530] Modules linked in:
[ 136.566093][ T6530] CPU: 1 UID: 0 PID: 6530 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 136.566115][ T6530] Tainted: [B]=BAD_PAGE
[ 136.566120][ T6530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 136.566128][ T6530] Call Trace:
[ 136.566134][ T6530]
[ 136.566140][ T6530] dump_stack_lvl+0x189/0x250
[ 136.566161][ T6530] ? __pfx_dump_stack_lvl+0x10/0x10
[ 136.566177][ T6530] ? __pfx_print_modules+0x10/0x10
[ 136.566197][ T6530] ? ksys_write+0x145/0x250
[ 136.566213][ T6530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 136.566231][ T6530] bad_page+0x180/0x1c0
[ 136.566255][ T6530] __free_frozen_pages+0xce2/0xd30
[ 136.566286][ T6530] bpf_xdp_frags_shrink_tail+0x3a5/0x750
[ 136.566314][ T6530] bpf_xdp_adjust_tail+0x1d6/0x220
[ 136.566332][ T6530] bpf_prog_f476d5219b92964a+0x1e/0x24
[ 136.566346][ T6530] bpf_prog_run_generic_xdp+0x64b/0x14c0
[ 136.566375][ T6530] do_xdp_generic+0x9f7/0x11a0
[ 136.566398][ T6530] ? __pfx_do_xdp_generic+0x10/0x10
[ 136.566414][ T6530] ? __skb_flow_dissect+0x5ef8/0x68b0
[ 136.566441][ T6530] __netif_receive_skb_core+0x17f9/0x4020
[ 136.566463][ T6530] ? __pfx___skb_flow_dissect+0x10/0x10
[ 136.566480][ T6530] ? do_user_addr_fault+0xbc1/0x1390
[ 136.566504][ T6530] ? do_user_addr_fault+0xc8a/0x1390
[ 136.566525][ T6530] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 136.566546][ T6530] ? irqentry_exit+0x74/0x90
[ 136.566566][ T6530] ? lockdep_hardirqs_on+0x9c/0x150
[ 136.566588][ T6530] ? __lock_acquire+0xab9/0xd20
[ 136.566611][ T6530] ? netif_receive_skb+0x115/0x790
[ 136.566629][ T6530] ? netif_receive_skb+0x115/0x790
[ 136.566649][ T6530] __netif_receive_skb+0x72/0x380
[ 136.566668][ T6530] ? _copy_from_iter+0x24f/0x1790
[ 136.566684][ T6530] ? netif_receive_skb+0x115/0x790
[ 136.566702][ T6530] netif_receive_skb+0x1cb/0x790
[ 136.566721][ T6530] ? __pfx___local_bh_disable_ip+0x10/0x10
[ 136.566736][ T6530] ? __pfx_netif_receive_skb+0x10/0x10
[ 136.566755][ T6530] ? __pfx__copy_from_iter+0x10/0x10
[ 136.566768][ T6530] ? sock_alloc_send_pskb+0x875/0x990
[ 136.566787][ T6530] ? tun_rx_batched+0x160/0x730
[ 136.566803][ T6530] tun_rx_batched+0x1b9/0x730
[ 136.566817][ T6530] ? __lock_acquire+0xab9/0xd20
[ 136.566836][ T6530] ? __pfx_tun_rx_batched+0x10/0x10
[ 136.566851][ T6530] ? tun_get_user+0x266c/0x3e20
[ 136.566871][ T6530] tun_get_user+0x2aa2/0x3e20
[ 136.566890][ T6530] ? tun_get_user+0x266c/0x3e20
[ 136.566906][ T6530] ? aa_file_perm+0x44d/0x1550
[ 136.566922][ T6530] ? __pfx_tun_get_user+0x10/0x10
[ 136.566936][ T6530] ? __futex_wait+0x34f/0x3e0
[ 136.566959][ T6530] ? __pfx___futex_wait+0x10/0x10
[ 136.566982][ T6530] ? ref_tracker_alloc+0x318/0x460
[ 136.567002][ T6530] ? __lock_acquire+0xab9/0xd20
[ 136.567021][ T6530] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 136.567043][ T6530] ? tun_get+0x1c/0x2f0
[ 136.567059][ T6530] ? tun_get+0x1c/0x2f0
[ 136.567072][ T6530] ? tun_get+0x1c/0x2f0
[ 136.567088][ T6530] tun_chr_write_iter+0x113/0x200
[ 136.567104][ T6530] vfs_write+0x5c6/0xb30
[ 136.567124][ T6530] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 136.567139][ T6530] ? __pfx_vfs_write+0x10/0x10
[ 136.567160][ T6530] ? __fget_files+0x2a/0x420
[ 136.567177][ T6530] ksys_write+0x145/0x250
[ 136.567196][ T6530] ? __pfx_ksys_write+0x10/0x10
[ 136.567216][ T6530] ? do_syscall_64+0xbe/0x3b0
[ 136.567231][ T6530] do_syscall_64+0xfa/0x3b0
[ 136.567245][ T6530] ? lockdep_hardirqs_on+0x9c/0x150
[ 136.567264][ T6530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 136.567286][ T6530] ? clear_bhb_loop+0x60/0xb0
[ 136.567302][ T6530] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 136.567317][ T6530] RIP: 0033:0x7f8b6a38d69f
[ 136.567332][ T6530] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 136.567345][ T6530] RSP: 002b:00007f8b6b1b3000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 136.567363][ T6530] RAX: ffffffffffffffda RBX: 00007f8b6a5b5fa0 RCX: 00007f8b6a38d69f
[ 136.567376][ T6530] RDX: 0000000000011dc0 RSI: 00002000000004c0 RDI: 00000000000000c8
[ 136.567387][ T6530] RBP: 00007f8b6a411e19 R08: 0000000000000000 R09: 0000000000000000
[ 136.567397][ T6530] R10: 0000000000011dc0 R11: 0000000000000293 R12: 0000000000000000
[ 136.567407][ T6530] R13: 00007f8b6a5b6038 R14: 00007f8b6a5b5fa0 R15: 00007fff3db8b248
[ 136.567425][ T6530]
[ 136.567435][ T6530] BUG: Bad page state in process syz.0.17 pfn:31106
[ 136.992387][ T6530] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888031106500 pfn:0x31106
[ 137.002492][ T6530] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 137.009639][ T6530] raw: 00fff00000000000 dead000000000040 ffff88802229b000 0000000000000000
[ 137.018249][ T6530] raw: ffff888031106500 0000000000000001 00000000ffffffff 0000000000000000
[ 137.026850][ T6530] page dumped because: page_pool leak
[ 137.032210][ T6530] page_owner tracks the page as allocated
[ 137.037970][ T6530] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6530, tgid 6529 (syz.0.17), ts 131359776055, free_ts 129255873509
[ 137.054835][ T6530] post_alloc_hook+0x240/0x2a0
[ 137.059587][ T6530] get_page_from_freelist+0x21e4/0x22c0
[ 137.065132][ T6530] __alloc_frozen_pages_noprof+0x181/0x370
[ 137.070928][ T6530] alloc_pages_bulk_noprof+0x560/0x710
[ 137.076398][ T6530] __page_pool_alloc_netmems_slow+0x127/0x740
[ 137.082461][ T6530] skb_pp_cow_data+0xb47/0x13e0
[ 137.087316][ T6530] do_xdp_generic+0x699/0x11a0
[ 137.092078][ T6530] __netif_receive_skb_core+0x17f9/0x4020
[ 137.097806][ T6530] __netif_receive_skb+0x72/0x380
[ 137.102918][ T6530] netif_receive_skb+0x1cb/0x790
[ 137.107902][ T6530] tun_rx_batched+0x1b9/0x730
[ 137.112576][ T6530] tun_get_user+0x2aa2/0x3e20
[ 137.117286][ T6530] tun_chr_write_iter+0x113/0x200
[ 137.122315][ T6530] vfs_write+0x5c6/0xb30
[ 137.126596][ T6530] ksys_write+0x145/0x250
[ 137.130926][ T6530] do_syscall_64+0xfa/0x3b0
[ 137.135454][ T6530] page last free pid 6478 tgid 6478 stack trace:
[ 137.141776][ T6530] __free_frozen_pages+0xbc4/0xd30
[ 137.146923][ T6530] __tlb_remove_table+0x2d2/0x3b0
[ 137.151943][ T6530] tlb_remove_table_rcu+0x85/0x100
[ 137.157164][ T6530] rcu_core+0xcab/0x1770
[ 137.161404][ T6530] handle_softirqs+0x283/0x870
[ 137.166193][ T6530] __irq_exit_rcu+0xca/0x1f0
[ 137.170775][ T6530] irq_exit_rcu+0x9/0x30
[ 137.175026][ T6530] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 137.180652][ T6530] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 137.186643][ T6530] Modules linked in:
[ 137.190534][ T6530] CPU: 1 UID: 0 PID: 6530 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 137.190548][ T6530] Tainted: [B]=BAD_PAGE
[ 137.190552][ T6530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 137.190557][ T6530] Call Trace:
[ 137.190561][ T6530]
[ 137.190566][ T6530] dump_stack_lvl+0x189/0x250
[ 137.190580][ T6530] ? __pfx_dump_stack_lvl+0x10/0x10
[ 137.190591][ T6530] ? __pfx_print_modules+0x10/0x10
[ 137.190604][ T6530] ? ksys_write+0x145/0x250
[ 137.190617][ T6530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 137.190627][ T6530] bad_page+0x180/0x1c0
[ 137.190639][ T6530] __free_frozen_pages+0xce2/0xd30
[ 137.190654][ T6530] bpf_xdp_frags_shrink_tail+0x3a5/0x750
[ 137.190670][ T6530] bpf_xdp_adjust_tail+0x1d6/0x220
[ 137.190680][ T6530] bpf_prog_f476d5219b92964a+0x1e/0x24
[ 137.190689][ T6530] bpf_prog_run_generic_xdp+0x64b/0x14c0
[ 137.190707][ T6530] do_xdp_generic+0x9f7/0x11a0
[ 137.190720][ T6530] ? __pfx_do_xdp_generic+0x10/0x10
[ 137.190731][ T6530] ? __skb_flow_dissect+0x5ef8/0x68b0
[ 137.190747][ T6530] __netif_receive_skb_core+0x17f9/0x4020
[ 137.190760][ T6530] ? __pfx___skb_flow_dissect+0x10/0x10
[ 137.190771][ T6530] ? do_user_addr_fault+0xbc1/0x1390
[ 137.190787][ T6530] ? do_user_addr_fault+0xc8a/0x1390
[ 137.190801][ T6530] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 137.190814][ T6530] ? irqentry_exit+0x74/0x90
[ 137.190828][ T6530] ? lockdep_hardirqs_on+0x9c/0x150
[ 137.190842][ T6530] ? __lock_acquire+0xab9/0xd20
[ 137.190857][ T6530] ? netif_receive_skb+0x115/0x790
[ 137.190869][ T6530] ? netif_receive_skb+0x115/0x790
[ 137.190881][ T6530] __netif_receive_skb+0x72/0x380
[ 137.190894][ T6530] ? _copy_from_iter+0x24f/0x1790
[ 137.190904][ T6530] ? netif_receive_skb+0x115/0x790
[ 137.190915][ T6530] netif_receive_skb+0x1cb/0x790
[ 137.190927][ T6530] ? __pfx___local_bh_disable_ip+0x10/0x10
[ 137.190936][ T6530] ? __pfx_netif_receive_skb+0x10/0x10
[ 137.190948][ T6530] ? __pfx__copy_from_iter+0x10/0x10
[ 137.190955][ T6530] ? sock_alloc_send_pskb+0x875/0x990
[ 137.190966][ T6530] ? tun_rx_batched+0x160/0x730
[ 137.190976][ T6530] tun_rx_batched+0x1b9/0x730
[ 137.190985][ T6530] ? __lock_acquire+0xab9/0xd20
[ 137.190998][ T6530] ? __pfx_tun_rx_batched+0x10/0x10
[ 137.191008][ T6530] ? tun_get_user+0x266c/0x3e20
[ 137.191019][ T6530] tun_get_user+0x2aa2/0x3e20
[ 137.191030][ T6530] ? tun_get_user+0x266c/0x3e20
[ 137.191039][ T6530] ? aa_file_perm+0x44d/0x1550
[ 137.191048][ T6530] ? __pfx_tun_get_user+0x10/0x10
[ 137.191056][ T6530] ? __futex_wait+0x34f/0x3e0
[ 137.191072][ T6530] ? __pfx___futex_wait+0x10/0x10
[ 137.191086][ T6530] ? ref_tracker_alloc+0x318/0x460
[ 137.191099][ T6530] ? __lock_acquire+0xab9/0xd20
[ 137.191112][ T6530] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 137.191126][ T6530] ? tun_get+0x1c/0x2f0
[ 137.191135][ T6530] ? tun_get+0x1c/0x2f0
[ 137.191143][ T6530] ? tun_get+0x1c/0x2f0
[ 137.191157][ T6530] tun_chr_write_iter+0x113/0x200
[ 137.191167][ T6530] vfs_write+0x5c6/0xb30
[ 137.191180][ T6530] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 137.191188][ T6530] ? __pfx_vfs_write+0x10/0x10
[ 137.191202][ T6530] ? __fget_files+0x2a/0x420
[ 137.191211][ T6530] ksys_write+0x145/0x250
[ 137.191223][ T6530] ? __pfx_ksys_write+0x10/0x10
[ 137.191236][ T6530] ? do_syscall_64+0xbe/0x3b0
[ 137.191244][ T6530] do_syscall_64+0xfa/0x3b0
[ 137.191252][ T6530] ? lockdep_hardirqs_on+0x9c/0x150
[ 137.191265][ T6530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 137.191273][ T6530] ? clear_bhb_loop+0x60/0xb0
[ 137.191283][ T6530] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 137.191292][ T6530] RIP: 0033:0x7f8b6a38d69f
[ 137.191301][ T6530] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 137.191308][ T6530] RSP: 002b:00007f8b6b1b3000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 137.191318][ T6530] RAX: ffffffffffffffda RBX: 00007f8b6a5b5fa0 RCX: 00007f8b6a38d69f
[ 137.191325][ T6530] RDX: 0000000000011dc0 RSI: 00002000000004c0 RDI: 00000000000000c8
[ 137.191331][ T6530] RBP: 00007f8b6a411e19 R08: 0000000000000000 R09: 0000000000000000
[ 137.191337][ T6530] R10: 0000000000011dc0 R11: 0000000000000293 R12: 0000000000000000
[ 137.191342][ T6530] R13: 00007f8b6a5b6038 R14: 00007f8b6a5b5fa0 R15: 00007fff3db8b248
[ 137.191351][ T6530]
[ 137.191358][ T6530] BUG: Bad page state in process syz.0.17 pfn:78759
[ 137.615746][ T6530] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888078759c80 pfn:0x78759
[ 137.625818][ T6530] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 137.632932][ T6530] raw: 00fff00000000000 dead000000000040 ffff88802229b000 0000000000000000
[ 137.641538][ T6530] raw: ffff888078759c80 0000000000000001 00000000ffffffff 0000000000000000
[ 137.650143][ T6530] page dumped because: page_pool leak
[ 137.655529][ T6530] page_owner tracks the page as allocated
[ 137.661238][ T6530] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6530, tgid 6529 (syz.0.17), ts 131359766532, free_ts 129255907552
[ 137.678098][ T6530] post_alloc_hook+0x240/0x2a0
[ 137.682866][ T6530] get_page_from_freelist+0x21e4/0x22c0
[ 137.688422][ T6530] __alloc_frozen_pages_noprof+0x181/0x370
[ 137.694219][ T6530] alloc_pages_bulk_noprof+0x560/0x710
[ 137.699678][ T6530] __page_pool_alloc_netmems_slow+0x127/0x740
[ 137.705775][ T6530] skb_pp_cow_data+0xb47/0x13e0
[ 137.710610][ T6530] do_xdp_generic+0x699/0x11a0
[ 137.715378][ T6530] __netif_receive_skb_core+0x17f9/0x4020
[ 137.721095][ T6530] __netif_receive_skb+0x72/0x380
[ 137.726140][ T6530] netif_receive_skb+0x1cb/0x790
[ 137.731069][ T6530] tun_rx_batched+0x1b9/0x730
[ 137.735822][ T6530] tun_get_user+0x2aa2/0x3e20
[ 137.740513][ T6530] tun_chr_write_iter+0x113/0x200
[ 137.745562][ T6530] vfs_write+0x5c6/0xb30
[ 137.749811][ T6530] ksys_write+0x145/0x250
[ 137.754141][ T6530] do_syscall_64+0xfa/0x3b0
[ 137.758656][ T6530] page last free pid 6478 tgid 6478 stack trace:
[ 137.764985][ T6530] __free_frozen_pages+0xbc4/0xd30
[ 137.770098][ T6530] __tlb_remove_table+0x2d2/0x3b0
[ 137.775124][ T6530] tlb_remove_table_rcu+0x85/0x100
[ 137.780223][ T6530] rcu_core+0xcab/0x1770
[ 137.784479][ T6530] handle_softirqs+0x283/0x870
[ 137.789232][ T6530] __irq_exit_rcu+0xca/0x1f0
[ 137.793797][ T6530] irq_exit_rcu+0x9/0x30
[ 137.798047][ T6530] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 137.803676][ T6530] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 137.809664][ T6530] Modules linked in:
[ 137.813559][ T6530] CPU: 1 UID: 0 PID: 6530 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 137.813574][ T6530] Tainted: [B]=BAD_PAGE
[ 137.813577][ T6530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 137.813583][ T6530] Call Trace:
[ 137.813586][ T6530]
[ 137.813591][ T6530] dump_stack_lvl+0x189/0x250
[ 137.813606][ T6530] ? __pfx_dump_stack_lvl+0x10/0x10
[ 137.813616][ T6530] ? __pfx_print_modules+0x10/0x10
[ 137.813630][ T6530] ? ksys_write+0x145/0x250
[ 137.813643][ T6530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 137.813654][ T6530] bad_page+0x180/0x1c0
[ 137.813666][ T6530] __free_frozen_pages+0xce2/0xd30
[ 137.813681][ T6530] bpf_xdp_frags_shrink_tail+0x3a5/0x750
[ 137.813697][ T6530] bpf_xdp_adjust_tail+0x1d6/0x220
[ 137.813707][ T6530] bpf_prog_f476d5219b92964a+0x1e/0x24
[ 137.813716][ T6530] bpf_prog_run_generic_xdp+0x64b/0x14c0
[ 137.813733][ T6530] do_xdp_generic+0x9f7/0x11a0
[ 137.813747][ T6530] ? __pfx_do_xdp_generic+0x10/0x10
[ 137.813757][ T6530] ? __skb_flow_dissect+0x5ef8/0x68b0
[ 137.813773][ T6530] __netif_receive_skb_core+0x17f9/0x4020
[ 137.813787][ T6530] ? __pfx___skb_flow_dissect+0x10/0x10
[ 137.813797][ T6530] ? do_user_addr_fault+0xbc1/0x1390
[ 137.813813][ T6530] ? do_user_addr_fault+0xc8a/0x1390
[ 137.813827][ T6530] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 137.813840][ T6530] ? irqentry_exit+0x74/0x90
[ 137.813855][ T6530] ? lockdep_hardirqs_on+0x9c/0x150
[ 137.813869][ T6530] ? __lock_acquire+0xab9/0xd20
[ 137.813883][ T6530] ? netif_receive_skb+0x115/0x790
[ 137.813895][ T6530] ? netif_receive_skb+0x115/0x790
[ 137.813908][ T6530] __netif_receive_skb+0x72/0x380
[ 137.813920][ T6530] ? _copy_from_iter+0x24f/0x1790
[ 137.813930][ T6530] ? netif_receive_skb+0x115/0x790
[ 137.813941][ T6530] netif_receive_skb+0x1cb/0x790
[ 137.813953][ T6530] ? __pfx___local_bh_disable_ip+0x10/0x10
[ 137.813963][ T6530] ? __pfx_netif_receive_skb+0x10/0x10
[ 137.813975][ T6530] ? __pfx__copy_from_iter+0x10/0x10
[ 137.813982][ T6530] ? sock_alloc_send_pskb+0x875/0x990
[ 137.813994][ T6530] ? tun_rx_batched+0x160/0x730
[ 137.814003][ T6530] tun_rx_batched+0x1b9/0x730
[ 137.814012][ T6530] ? __lock_acquire+0xab9/0xd20
[ 137.814026][ T6530] ? __pfx_tun_rx_batched+0x10/0x10
[ 137.814035][ T6530] ? tun_get_user+0x266c/0x3e20
[ 137.814046][ T6530] tun_get_user+0x2aa2/0x3e20
[ 137.814057][ T6530] ? tun_get_user+0x266c/0x3e20
[ 137.814066][ T6530] ? aa_file_perm+0x44d/0x1550
[ 137.814076][ T6530] ? __pfx_tun_get_user+0x10/0x10
[ 137.814084][ T6530] ? __futex_wait+0x34f/0x3e0
[ 137.814099][ T6530] ? __pfx___futex_wait+0x10/0x10
[ 137.814114][ T6530] ? ref_tracker_alloc+0x318/0x460
[ 137.814127][ T6530] ? __lock_acquire+0xab9/0xd20
[ 137.814140][ T6530] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 137.814154][ T6530] ? tun_get+0x1c/0x2f0
[ 137.814163][ T6530] ? tun_get+0x1c/0x2f0
[ 137.814170][ T6530] ? tun_get+0x1c/0x2f0
[ 137.814179][ T6530] tun_chr_write_iter+0x113/0x200
[ 137.814189][ T6530] vfs_write+0x5c6/0xb30
[ 137.814201][ T6530] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 137.814210][ T6530] ? __pfx_vfs_write+0x10/0x10
[ 137.814223][ T6530] ? __fget_files+0x2a/0x420
[ 137.814233][ T6530] ksys_write+0x145/0x250
[ 137.814245][ T6530] ? __pfx_ksys_write+0x10/0x10
[ 137.814257][ T6530] ? do_syscall_64+0xbe/0x3b0
[ 137.814266][ T6530] do_syscall_64+0xfa/0x3b0
[ 137.814274][ T6530] ? lockdep_hardirqs_on+0x9c/0x150
[ 137.814287][ T6530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 137.814296][ T6530] ? clear_bhb_loop+0x60/0xb0
[ 137.814305][ T6530] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 137.814314][ T6530] RIP: 0033:0x7f8b6a38d69f
[ 137.814323][ T6530] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 137.814331][ T6530] RSP: 002b:00007f8b6b1b3000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 137.814346][ T6530] RAX: ffffffffffffffda RBX: 00007f8b6a5b5fa0 RCX: 00007f8b6a38d69f
[ 137.814357][ T6530] RDX: 0000000000011dc0 RSI: 00002000000004c0 RDI: 00000000000000c8
[ 137.814366][ T6530] RBP: 00007f8b6a411e19 R08: 0000000000000000 R09: 0000000000000000
[ 137.814374][ T6530] R10: 0000000000011dc0 R11: 0000000000000293 R12: 0000000000000000
[ 137.814392][ T6530] R13: 00007f8b6a5b6038 R14: 00007f8b6a5b5fa0 R15: 00007fff3db8b248
[ 137.814409][ T6530]
[ 138.234398][ T5185] Bluetooth: hci0: command tx timeout
[ 138.263922][ T6532] BUG: Bad page state in process syz.0.18 pfn:317ab
[ 138.270683][ T6532] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880317ab140 pfn:0x317ab
[ 138.280814][ T6532] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 138.287968][ T6532] raw: 00fff00000000000 dead000000000040 ffff888022298000 0000000000000000
[ 138.296578][ T6532] raw: ffff8880317ab140 0000000000000001 00000000ffffffff 0000000000000000
[ 138.305174][ T6532] page dumped because: page_pool leak
2025/09/10 00:03:39 executed programs: 3
[ 138.310520][ T6532] page_owner tracks the page as allocated
[ 138.316260][ T6532] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6532, tgid 6531 (syz.0.18), ts 138263849397, free_ts 128365168676
[ 138.333142][ T6532] post_alloc_hook+0x240/0x2a0
[ 138.337938][ T6532] get_page_from_freelist+0x21e4/0x22c0
[ 138.343485][ T6532] __alloc_frozen_pages_noprof+0x181/0x370
[ 138.349308][ T6532] alloc_pages_bulk_noprof+0x560/0x710
[ 138.354805][ T6532] __page_pool_alloc_netmems_slow+0x127/0x740
[ 138.360856][ T6532] skb_pp_cow_data+0xb47/0x13e0
[ 138.365725][ T6532] do_xdp_generic+0x699/0x11a0
[ 138.370489][ T6532] __netif_receive_skb_core+0x17f9/0x4020
[ 138.376237][ T6532] __netif_receive_skb+0x72/0x380
[ 138.381252][ T6532] netif_receive_skb+0x1cb/0x790
[ 138.386205][ T6532] tun_rx_batched+0x1b9/0x730
[ 138.390871][ T6532] tun_get_user+0x2aa2/0x3e20
[ 138.395565][ T6532] tun_chr_write_iter+0x113/0x200
[ 138.400591][ T6532] vfs_write+0x5c6/0xb30
[ 138.404872][ T6532] ksys_write+0x145/0x250
[ 138.409201][ T6532] do_syscall_64+0xfa/0x3b0
[ 138.413689][ T6532] page last free pid 15 tgid 15 stack trace:
[ 138.419685][ T6532] __free_frozen_pages+0xbc4/0xd30
[ 138.424958][ T6532] rcu_core+0xcab/0x1770
[ 138.429197][ T6532] handle_softirqs+0x283/0x870
[ 138.433948][ T6532] run_ksoftirqd+0x9b/0x100
[ 138.438473][ T6532] smpboot_thread_fn+0x53f/0xa60
[ 138.443409][ T6532] kthread+0x70e/0x8a0
[ 138.447496][ T6532] ret_from_fork+0x3fc/0x770
[ 138.452078][ T6532] ret_from_fork_asm+0x1a/0x30
[ 138.456862][ T6532] Modules linked in:
[ 138.460752][ T6532] CPU: 0 UID: 0 PID: 6532 Comm: syz.0.18 Tainted: G B syzkaller #0 PREEMPT(full)
[ 138.460767][ T6532] Tainted: [B]=BAD_PAGE
[ 138.460770][ T6532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 138.460776][ T6532] Call Trace:
[ 138.460780][ T6532]
[ 138.460784][ T6532] dump_stack_lvl+0x189/0x250
[ 138.460799][ T6532] ? __pfx_dump_stack_lvl+0x10/0x10
[ 138.460809][ T6532] ? __pfx_print_modules+0x10/0x10
[ 138.460823][ T6532] ? ksys_write+0x145/0x250
[ 138.460836][ T6532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 138.460847][ T6532] bad_page+0x180/0x1c0
[ 138.460859][ T6532] __free_frozen_pages+0xce2/0xd30
[ 138.460875][ T6532] bpf_xdp_frags_shrink_tail+0x3a5/0x750
[ 138.460895][ T6532] bpf_xdp_adjust_tail+0x1d6/0x220
[ 138.460912][ T6532] bpf_prog_f476d5219b92964a+0x1e/0x24
[ 138.460926][ T6532] bpf_prog_run_generic_xdp+0x64b/0x14c0
[ 138.460952][ T6532] do_xdp_generic+0x9f7/0x11a0
[ 138.460966][ T6532] ? __pfx_do_xdp_generic+0x10/0x10
[ 138.460977][ T6532] ? __skb_flow_dissect+0x5ef8/0x68b0
[ 138.460993][ T6532] __netif_receive_skb_core+0x17f9/0x4020
[ 138.461006][ T6532] ? __pfx___skb_flow_dissect+0x10/0x10
[ 138.461016][ T6532] ? lock_release+0x4b/0x3e0
[ 138.461032][ T6532] ? do_user_addr_fault+0xc8a/0x1390
[ 138.461047][ T6532] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 138.461060][ T6532] ? rcu_is_watching+0x15/0xb0
[ 138.461071][ T6532] ? irqentry_exit+0x74/0x90
[ 138.461086][ T6532] ? exc_page_fault+0x9f/0xf0
[ 138.461100][ T6532] ? netif_receive_skb+0x115/0x790
[ 138.461112][ T6532] ? rcu_is_watching+0x15/0xb0
[ 138.461120][ T6532] ? lock_acquire+0x5f/0x360
[ 138.461133][ T6532] __netif_receive_skb+0x72/0x380
[ 138.461146][ T6532] ? _copy_from_iter+0x24f/0x1790
[ 138.461156][ T6532] ? netif_receive_skb+0x115/0x790
[ 138.461167][ T6532] netif_receive_skb+0x1cb/0x790
[ 138.461179][ T6532] ? __pfx___local_bh_disable_ip+0x10/0x10
[ 138.461189][ T6532] ? __pfx_netif_receive_skb+0x10/0x10
[ 138.461200][ T6532] ? __pfx__copy_from_iter+0x10/0x10
[ 138.461208][ T6532] ? sock_alloc_send_pskb+0x875/0x990
[ 138.461220][ T6532] ? tun_rx_batched+0x160/0x730
[ 138.461229][ T6532] tun_rx_batched+0x1b9/0x730
[ 138.461238][ T6532] ? skb_header_pointer+0x8e/0x120
[ 138.461249][ T6532] ? __pfx_tun_rx_batched+0x10/0x10
[ 138.461258][ T6532] ? tun_get_user+0x266c/0x3e20
[ 138.461266][ T6532] ? rcu_is_watching+0x15/0xb0
[ 138.461274][ T6532] ? lock_acquire+0x5f/0x360
[ 138.461287][ T6532] ? __pfx___local_bh_enable_ip+0x10/0x10
[ 138.461298][ T6532] tun_get_user+0x2aa2/0x3e20
[ 138.461325][ T6532] ? rcu_is_watching+0x15/0xb0
[ 138.461334][ T6532] ? lock_release+0x4b/0x3e0
[ 138.461346][ T6532] ? tun_get_user+0x266c/0x3e20
[ 138.461356][ T6532] ? aa_file_perm+0x44d/0x1550
[ 138.461365][ T6532] ? __pfx_tun_get_user+0x10/0x10
[ 138.461373][ T6532] ? __futex_wait+0x34f/0x3e0
[ 138.461389][ T6532] ? __pfx___futex_wait+0x10/0x10
[ 138.461402][ T6532] ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 138.461416][ T6532] ? ref_tracker_alloc+0x318/0x460
[ 138.461430][ T6532] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 138.461443][ T6532] ? lock_release+0x4b/0x3e0
[ 138.461456][ T6532] ? tun_get+0x1c/0x2f0
[ 138.461464][ T6532] ? tun_get+0x1c/0x2f0
[ 138.461472][ T6532] ? rcu_is_watching+0x15/0xb0
[ 138.461480][ T6532] ? tun_get+0x1c/0x2f0
[ 138.461487][ T6532] ? lock_release+0x4b/0x3e0
[ 138.461500][ T6532] ? common_file_perm+0x1b5/0x230
[ 138.461508][ T6532] ? tun_get+0x1c/0x2f0
[ 138.461517][ T6532] tun_chr_write_iter+0x113/0x200
[ 138.461526][ T6532] vfs_write+0x5c6/0xb30
[ 138.461539][ T6532] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 138.461548][ T6532] ? __pfx_vfs_write+0x10/0x10
[ 138.461561][ T6532] ? __fget_files+0x2a/0x420
[ 138.461571][ T6532] ksys_write+0x145/0x250
[ 138.461583][ T6532] ? __pfx_ksys_write+0x10/0x10
[ 138.461594][ T6532] ? rcu_is_watching+0x15/0xb0
[ 138.461603][ T6532] ? rcu_is_watching+0x15/0xb0
[ 138.461612][ T6532] do_syscall_64+0xfa/0x3b0
[ 138.461621][ T6532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 138.461629][ T6532] ? clear_bhb_loop+0x60/0xb0
[ 138.461639][ T6532] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 138.461648][ T6532] RIP: 0033:0x7f8b6a38d69f
[ 138.461657][ T6532] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 138.461665][ T6532] RSP: 002b:00007f8b6b1b3000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 138.461675][ T6532] RAX: ffffffffffffffda RBX: 00007f8b6a5b5fa0 RCX: 00007f8b6a38d69f
[ 138.461682][ T6532] RDX: 0000000000011dc0 RSI: 00002000000004c0 RDI: 00000000000000c8
[ 138.461688][ T6532] RBP: 00007f8b6a411e19 R08: 0000000000000000 R09: 0000000000000000
[ 138.461693][ T6532] R10: 0000000000011dc0 R11: 0000000000000293 R12: 0000000000000000
[ 138.461699][ T6532] R13: 00007f8b6a5b6038 R14: 00007f8b6a5b5fa0 R15: 00007fff3db8b248
[ 138.461708][ T6532]
[ 138.461716][ T6532] BUG: Bad page state in process syz.0.18 pfn:317aa
[ 138.937970][ T6532] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880317aa8c0 pfn:0x317aa
[ 138.948337][ T6532] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 138.955488][ T6532] raw: 00fff00000000000 dead000000000040 ffff888022298000 0000000000000000
[ 138.964253][ T6532] raw: ffff8880317aa8c0 0000000000000001 00000000ffffffff 0000000000000000
[ 138.972883][ T6532] page dumped because: page_pool leak
[ 138.978287][ T6532] page_owner tracks the page as allocated
[ 138.983982][ T6532] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6532, tgid 6531 (syz.0.18), ts 138263839160, free_ts 128365189168
[ 139.000859][ T6532] post_alloc_hook+0x240/0x2a0
[ 139.005678][ T6532] get_page_from_freelist+0x21e4/0x22c0
[ 139.011217][ T6532] __alloc_frozen_pages_noprof+0x181/0x370
[ 139.017074][ T6532] alloc_pages_bulk_noprof+0x560/0x710
[ 139.022532][ T6532] __page_pool_alloc_netmems_slow+0x127/0x740
[ 139.028629][ T6532] skb_pp_cow_data+0xb47/0x13e0
[ 139.033476][ T6532] do_xdp_generic+0x699/0x11a0
[ 139.038263][ T6532] __netif_receive_skb_core+0x17f9/0x4020
[ 139.043982][ T6532] __netif_receive_skb+0x72/0x380
[ 139.049026][ T6532] netif_receive_skb+0x1cb/0x790
[ 139.053972][ T6532] tun_rx_batched+0x1b9/0x730
[ 139.058689][ T6532] tun_get_user+0x2aa2/0x3e20
[ 139.063363][ T6532] tun_chr_write_iter+0x113/0x200
[ 139.068422][ T6532] vfs_write+0x5c6/0xb30
[ 139.072663][ T6532] ksys_write+0x145/0x250
[ 139.077011][ T6532] do_syscall_64+0xfa/0x3b0
[ 139.081517][ T6532] page last free pid 15 tgid 15 stack trace:
[ 139.087519][ T6532] __free_frozen_pages+0xbc4/0xd30
[ 139.092638][ T6532] rcu_core+0xcab/0x1770
[ 139.096913][ T6532] handle_softirqs+0x283/0x870
[ 139.101674][ T6532] run_ksoftirqd+0x9b/0x100
[ 139.106216][ T6532] smpboot_thread_fn+0x53f/0xa60
[ 139.111147][ T6532] kthread+0x70e/0x8a0
[ 139.115248][ T6532] ret_from_fork+0x3fc/0x770
[ 139.119832][ T6532] ret_from_fork_asm+0x1a/0x30
[ 139.124624][ T6532] Modules linked in:
[ 139.128517][ T6532] CPU: 0 UID: 0 PID: 6532 Comm: syz.0.18 Tainted: G B syzkaller #0 PREEMPT(full)
[ 139.128531][ T6532] Tainted: [B]=BAD_PAGE
[ 139.128534][ T6532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 139.128540][ T6532] Call Trace:
[ 139.128544][ T6532]
[ 139.128548][ T6532] dump_stack_lvl+0x189/0x250
[ 139.128563][ T6532] ? __pfx_dump_stack_lvl+0x10/0x10
[ 139.128574][ T6532] ? __pfx_print_modules+0x10/0x10
[ 139.128587][ T6532] ? ksys_write+0x145/0x250
[ 139.128600][ T6532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 139.128611][ T6532] bad_page+0x180/0x1c0
[ 139.128623][ T6532] __free_frozen_pages+0xce2/0xd30
[ 139.128639][ T6532] bpf_xdp_frags_shrink_tail+0x3a5/0x750
[ 139.128655][ T6532] bpf_xdp_adjust_tail+0x1d6/0x220
[ 139.128665][ T6532] bpf_prog_f476d5219b92964a+0x1e/0x24
[ 139.128674][ T6532] bpf_prog_run_generic_xdp+0x64b/0x14c0
[ 139.128692][ T6532] do_xdp_generic+0x9f7/0x11a0
[ 139.128706][ T6532] ? __pfx_do_xdp_generic+0x10/0x10
[ 139.128716][ T6532] ? __skb_flow_dissect+0x5ef8/0x68b0
[ 139.128732][ T6532] __netif_receive_skb_core+0x17f9/0x4020
[ 139.128746][ T6532] ? __pfx___skb_flow_dissect+0x10/0x10
[ 139.128756][ T6532] ? lock_release+0x4b/0x3e0
[ 139.128771][ T6532] ? do_user_addr_fault+0xc8a/0x1390
[ 139.128786][ T6532] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 139.128799][ T6532] ? rcu_is_watching+0x15/0xb0
[ 139.128810][ T6532] ? irqentry_exit+0x74/0x90
[ 139.128823][ T6532] ? exc_page_fault+0x9f/0xf0
[ 139.128838][ T6532] ? netif_receive_skb+0x115/0x790
[ 139.128849][ T6532] ? rcu_is_watching+0x15/0xb0
[ 139.128858][ T6532] ? lock_acquire+0x5f/0x360
[ 139.128871][ T6532] __netif_receive_skb+0x72/0x380
[ 139.128883][ T6532] ? _copy_from_iter+0x24f/0x1790
[ 139.128893][ T6532] ? netif_receive_skb+0x115/0x790
[ 139.128904][ T6532] netif_receive_skb+0x1cb/0x790
[ 139.128916][ T6532] ? __pfx___local_bh_disable_ip+0x10/0x10
[ 139.128926][ T6532] ? __pfx_netif_receive_skb+0x10/0x10
[ 139.128937][ T6532] ? __pfx__copy_from_iter+0x10/0x10
[ 139.128945][ T6532] ? sock_alloc_send_pskb+0x875/0x990
[ 139.128957][ T6532] ? tun_rx_batched+0x160/0x730
[ 139.128966][ T6532] tun_rx_batched+0x1b9/0x730
[ 139.128975][ T6532] ? skb_header_pointer+0x8e/0x120
[ 139.128985][ T6532] ? __pfx_tun_rx_batched+0x10/0x10
[ 139.128994][ T6532] ? tun_get_user+0x266c/0x3e20
[ 139.129002][ T6532] ? rcu_is_watching+0x15/0xb0
[ 139.129011][ T6532] ? lock_acquire+0x5f/0x360
[ 139.129023][ T6532] ? __pfx___local_bh_enable_ip+0x10/0x10
[ 139.129034][ T6532] tun_get_user+0x2aa2/0x3e20
[ 139.129049][ T6532] ? rcu_is_watching+0x15/0xb0
[ 139.129058][ T6532] ? lock_release+0x4b/0x3e0
[ 139.129071][ T6532] ? tun_get_user+0x266c/0x3e20
[ 139.129080][ T6532] ? aa_file_perm+0x44d/0x1550
[ 139.129090][ T6532] ? __pfx_tun_get_user+0x10/0x10
[ 139.129098][ T6532] ? __futex_wait+0x34f/0x3e0
[ 139.129114][ T6532] ? __pfx___futex_wait+0x10/0x10
[ 139.129126][ T6532] ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 139.129141][ T6532] ? ref_tracker_alloc+0x318/0x460
[ 139.129155][ T6532] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 139.129167][ T6532] ? lock_release+0x4b/0x3e0
[ 139.129180][ T6532] ? tun_get+0x1c/0x2f0
[ 139.129188][ T6532] ? tun_get+0x1c/0x2f0
[ 139.129196][ T6532] ? rcu_is_watching+0x15/0xb0
[ 139.129204][ T6532] ? tun_get+0x1c/0x2f0
[ 139.129212][ T6532] ? lock_release+0x4b/0x3e0
[ 139.129224][ T6532] ? common_file_perm+0x1b5/0x230
[ 139.129232][ T6532] ? tun_get+0x1c/0x2f0
[ 139.129241][ T6532] tun_chr_write_iter+0x113/0x200
[ 139.129251][ T6532] vfs_write+0x5c6/0xb30
[ 139.129263][ T6532] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 139.129272][ T6532] ? __pfx_vfs_write+0x10/0x10
[ 139.129285][ T6532] ? __fget_files+0x2a/0x420
[ 139.129297][ T6532] ksys_write+0x145/0x250
[ 139.129309][ T6532] ? __pfx_ksys_write+0x10/0x10
[ 139.129320][ T6532] ? rcu_is_watching+0x15/0xb0
[ 139.129329][ T6532] ? rcu_is_watching+0x15/0xb0
[ 139.129338][ T6532] do_syscall_64+0xfa/0x3b0
[ 139.129346][ T6532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 139.129355][ T6532] ? clear_bhb_loop+0x60/0xb0
[ 139.129365][ T6532] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 139.129373][ T6532] RIP: 0033:0x7f8b6a38d69f
[ 139.129382][ T6532] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 139.129390][ T6532] RSP: 002b:00007f8b6b1b3000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 139.129400][ T6532] RAX: ffffffffffffffda RBX: 00007f8b6a5b5fa0 RCX: 00007f8b6a38d69f
[ 139.129407][ T6532] RDX: 0000000000011dc0 RSI: 00002000000004c0 RDI: 00000000000000c8
[ 139.129413][ T6532] RBP: 00007f8b6a411e19 R08: 0000000000000000 R09: 0000000000000000
[ 139.129418][ T6532] R10: 0000000000011dc0 R11: 0000000000000293 R12: 0000000000000000
[ 139.129423][ T6532] R13: 00007f8b6a5b6038 R14: 00007f8b6a5b5fa0 R15: 00007fff3db8b248
[ 139.129433][ T6532]
[ 139.129439][ T6532] BUG: Bad page state in process syz.0.18 pfn:317a9
[ 139.605950][ T6532] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880317a9dc0 pfn:0x317a9
[ 139.616035][ T6532] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 139.623145][ T6532] raw: 00fff00000000000 dead000000000040 ffff888022298000 0000000000000000
[ 139.631748][ T6532] raw: ffff8880317a9dc0 0000000000000001 00000000ffffffff 0000000000000000
[ 139.640340][ T6532] page dumped because: page_pool leak
[ 139.645715][ T6532] page_owner tracks the page as allocated
[ 139.651433][ T6532] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6532, tgid 6531 (syz.0.18), ts 138263827837, free_ts 128365210960
[ 139.668297][ T6532] post_alloc_hook+0x240/0x2a0
[ 139.673064][ T6532] get_page_from_freelist+0x21e4/0x22c0
[ 139.678627][ T6532] __alloc_frozen_pages_noprof+0x181/0x370
[ 139.684470][ T6532] alloc_pages_bulk_noprof+0x560/0x710
[ 139.689906][ T6532] __page_pool_alloc_netmems_slow+0x127/0x740
[ 139.695988][ T6532] skb_pp_cow_data+0xb47/0x13e0
[ 139.700828][ T6532] do_xdp_generic+0x699/0x11a0
[ 139.705609][ T6532] __netif_receive_skb_core+0x17f9/0x4020
[ 139.711321][ T6532] __netif_receive_skb+0x72/0x380
[ 139.716369][ T6532] netif_receive_skb+0x1cb/0x790
[ 139.721299][ T6532] tun_rx_batched+0x1b9/0x730
[ 139.725997][ T6532] tun_get_user+0x2aa2/0x3e20
[ 139.730672][ T6532] tun_chr_write_iter+0x113/0x200
[ 139.735706][ T6532] vfs_write+0x5c6/0xb30
[ 139.739956][ T6532] ksys_write+0x145/0x250
[ 139.744261][ T6532] do_syscall_64+0xfa/0x3b0
[ 139.748788][ T6532] page last free pid 15 tgid 15 stack trace:
[ 139.754777][ T6532] __free_frozen_pages+0xbc4/0xd30
[ 139.759892][ T6532] rcu_core+0xcab/0x1770
[ 139.764137][ T6532] handle_softirqs+0x283/0x870
[ 139.768919][ T6532] run_ksoftirqd+0x9b/0x100
[ 139.773420][ T6532] smpboot_thread_fn+0x53f/0xa60
[ 139.778374][ T6532] kthread+0x70e/0x8a0
[ 139.782437][ T6532] ret_from_fork+0x3fc/0x770
[ 139.787035][ T6532] ret_from_fork_asm+0x1a/0x30
[ 139.791804][ T6532] Modules linked in:
[ 139.795733][ T6532] CPU: 0 UID: 0 PID: 6532 Comm: syz.0.18 Tainted: G B syzkaller #0 PREEMPT(full)
[ 139.795754][ T6532] Tainted: [B]=BAD_PAGE
[ 139.795759][ T6532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 139.795767][ T6532] Call Trace:
[ 139.795773][ T6532]
[ 139.795781][ T6532] dump_stack_lvl+0x189/0x250
[ 139.795801][ T6532] ? __pfx_dump_stack_lvl+0x10/0x10
[ 139.795817][ T6532] ? __pfx_print_modules+0x10/0x10
[ 139.795837][ T6532] ? ksys_write+0x145/0x250
[ 139.795855][ T6532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 139.795875][ T6532] bad_page+0x180/0x1c0
[ 139.795894][ T6532] __free_frozen_pages+0xce2/0xd30
[ 139.795920][ T6532] bpf_xdp_frags_shrink_tail+0x3a5/0x750
[ 139.795968][ T6532] bpf_xdp_adjust_tail+0x1d6/0x220
[ 139.795987][ T6532] bpf_prog_f476d5219b92964a+0x1e/0x24
[ 139.796001][ T6532] bpf_prog_run_generic_xdp+0x64b/0x14c0
[ 139.796030][ T6532] do_xdp_generic+0x9f7/0x11a0
[ 139.796053][ T6532] ? __pfx_do_xdp_generic+0x10/0x10
[ 139.796070][ T6532] ? __skb_flow_dissect+0x5ef8/0x68b0
[ 139.796099][ T6532] __netif_receive_skb_core+0x17f9/0x4020
[ 139.796121][ T6532] ? __pfx___skb_flow_dissect+0x10/0x10
[ 139.796137][ T6532] ? lock_release+0x4b/0x3e0
[ 139.796161][ T6532] ? do_user_addr_fault+0xc8a/0x1390
[ 139.796184][ T6532] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 139.796203][ T6532] ? rcu_is_watching+0x15/0xb0
[ 139.796220][ T6532] ? irqentry_exit+0x74/0x90
[ 139.796240][ T6532] ? exc_page_fault+0x9f/0xf0
[ 139.796263][ T6532] ? netif_receive_skb+0x115/0x790
[ 139.796280][ T6532] ? rcu_is_watching+0x15/0xb0
[ 139.796293][ T6532] ? lock_acquire+0x5f/0x360
[ 139.796313][ T6532] __netif_receive_skb+0x72/0x380
[ 139.796332][ T6532] ? _copy_from_iter+0x24f/0x1790
[ 139.796349][ T6532] ? netif_receive_skb+0x115/0x790
[ 139.796367][ T6532] netif_receive_skb+0x1cb/0x790
[ 139.796385][ T6532] ? __pfx___local_bh_disable_ip+0x10/0x10
[ 139.796401][ T6532] ? __pfx_netif_receive_skb+0x10/0x10
[ 139.796419][ T6532] ? __pfx__copy_from_iter+0x10/0x10
[ 139.796432][ T6532] ? sock_alloc_send_pskb+0x875/0x990
[ 139.796451][ T6532] ? tun_rx_batched+0x160/0x730
[ 139.796468][ T6532] tun_rx_batched+0x1b9/0x730
[ 139.796482][ T6532] ? skb_header_pointer+0x8e/0x120
[ 139.796500][ T6532] ? __pfx_tun_rx_batched+0x10/0x10
[ 139.796515][ T6532] ? tun_get_user+0x266c/0x3e20
[ 139.796530][ T6532] ? rcu_is_watching+0x15/0xb0
[ 139.796544][ T6532] ? lock_acquire+0x5f/0x360
[ 139.796563][ T6532] ? __pfx___local_bh_enable_ip+0x10/0x10
[ 139.796582][ T6532] tun_get_user+0x2aa2/0x3e20
[ 139.796599][ T6532] ? rcu_is_watching+0x15/0xb0
[ 139.796614][ T6532] ? lock_release+0x4b/0x3e0
[ 139.796633][ T6532] ? tun_get_user+0x266c/0x3e20
[ 139.796649][ T6532] ? aa_file_perm+0x44d/0x1550
[ 139.796664][ T6532] ? __pfx_tun_get_user+0x10/0x10
[ 139.796678][ T6532] ? __futex_wait+0x34f/0x3e0
[ 139.796701][ T6532] ? __pfx___futex_wait+0x10/0x10
[ 139.796720][ T6532] ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 139.796743][ T6532] ? ref_tracker_alloc+0x318/0x460
[ 139.796764][ T6532] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 139.796783][ T6532] ? lock_release+0x4b/0x3e0
[ 139.796804][ T6532] ? tun_get+0x1c/0x2f0
[ 139.796818][ T6532] ? tun_get+0x1c/0x2f0
[ 139.796832][ T6532] ? rcu_is_watching+0x15/0xb0
[ 139.796847][ T6532] ? tun_get+0x1c/0x2f0
[ 139.796861][ T6532] ? lock_release+0x4b/0x3e0
[ 139.796880][ T6532] ? common_file_perm+0x1b5/0x230
[ 139.796895][ T6532] ? tun_get+0x1c/0x2f0
[ 139.796911][ T6532] tun_chr_write_iter+0x113/0x200
[ 139.796927][ T6532] vfs_write+0x5c6/0xb30
[ 139.796955][ T6532] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 139.796970][ T6532] ? __pfx_vfs_write+0x10/0x10
[ 139.796992][ T6532] ? __fget_files+0x2a/0x420
[ 139.797009][ T6532] ksys_write+0x145/0x250
[ 139.797028][ T6532] ? __pfx_ksys_write+0x10/0x10
[ 139.797044][ T6532] ? rcu_is_watching+0x15/0xb0
[ 139.797061][ T6532] ? rcu_is_watching+0x15/0xb0
[ 139.797077][ T6532] do_syscall_64+0xfa/0x3b0
[ 139.797091][ T6532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 139.797106][ T6532] ? clear_bhb_loop+0x60/0xb0
[ 139.797123][ T6532] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 139.797138][ T6532] RIP: 0033:0x7f8b6a38d69f
[ 139.797152][ T6532] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 139.797164][ T6532] RSP: 002b:00007f8b6b1b3000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 139.797181][ T6532] RAX: ffffffffffffffda RBX: 00007f8b6a5b5fa0 RCX: 00007f8b6a38d69f
[ 139.797192][ T6532] RDX: 0000000000011dc0 RSI: 00002000000004c0 RDI: 00000000000000c8
[ 139.797203][ T6532] RBP: 00007f8b6a411e19 R08: 0000000000000000 R09: 0000000000000000
[ 139.797213][ T6532] R10: 0000000000011dc0 R11: 0000000000000293 R12: 0000000000000000
[ 139.797222][ T6532] R13: 00007f8b6a5b6038 R14: 00007f8b6a5b5fa0 R15: 00007fff3db8b248
[ 139.797239][ T6532]
[ 139.797250][ T6532] BUG: Bad page state in process syz.0.18 pfn:656b2
[ 140.272868][ T6532] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880656b2dc0 pfn:0x656b2
[ 140.282963][ T6532] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 140.284455][ T5185] Bluetooth: hci0: command tx timeout
[ 140.290096][ T6532] raw: 00fff00000000000 dead000000000040 ffff888022298000 0000000000000000
[ 140.304107][ T6532] raw: ffff8880656b2dc0 0000000000000001 00000000ffffffff 0000000000000000
[ 140.312704][ T6532] page dumped because: page_pool leak
[ 140.318098][ T6532] page_owner tracks the page as allocated
[ 140.323814][ T6532] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6532, tgid 6531 (syz.0.18), ts 138263816631, free_ts 128365233649
[ 140.340680][ T6532] post_alloc_hook+0x240/0x2a0
[ 140.345480][ T6532] get_page_from_freelist+0x21e4/0x22c0
[ 140.351058][ T6532] __alloc_frozen_pages_noprof+0x181/0x370
[ 140.356918][ T6532] alloc_pages_bulk_noprof+0x560/0x710
[ 140.362377][ T6532] __page_pool_alloc_netmems_slow+0x127/0x740
[ 140.368463][ T6532] skb_pp_cow_data+0xb47/0x13e0
[ 140.373324][ T6532] do_xdp_generic+0x699/0x11a0
[ 140.378098][ T6532] __netif_receive_skb_core+0x17f9/0x4020
[ 140.383822][ T6532] __netif_receive_skb+0x72/0x380
[ 140.388865][ T6532] netif_receive_skb+0x1cb/0x790
[ 140.393972][ T6532] tun_rx_batched+0x1b9/0x730
[ 140.398664][ T6532] tun_get_user+0x2aa2/0x3e20
[ 140.403335][ T6532] tun_chr_write_iter+0x113/0x200
[ 140.408371][ T6532] vfs_write+0x5c6/0xb30
[ 140.412623][ T6532] ksys_write+0x145/0x250
[ 140.416964][ T6532] do_syscall_64+0xfa/0x3b0
[ 140.421456][ T6532] page last free pid 15 tgid 15 stack trace:
[ 140.427441][ T6532] __free_frozen_pages+0xbc4/0xd30
[ 140.432546][ T6532] rcu_core+0xcab/0x1770
[ 140.436804][ T6532] handle_softirqs+0x283/0x870
[ 140.441557][ T6532] run_ksoftirqd+0x9b/0x100
[ 140.446070][ T6532] smpboot_thread_fn+0x53f/0xa60
[ 140.451008][ T6532] kthread+0x70e/0x8a0
[ 140.455132][ T6532] ret_from_fork+0x3fc/0x770
[ 140.459733][ T6532] ret_from_fork_asm+0x1a/0x30
[ 140.464512][ T6532] Modules linked in:
[ 140.468410][ T6532] CPU: 0 UID: 0 PID: 6532 Comm: syz.0.18 Tainted: G B syzkaller #0 PREEMPT(full)
[ 140.468424][ T6532] Tainted: [B]=BAD_PAGE
[ 140.468428][ T6532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 140.468434][ T6532] Call Trace:
[ 140.468438][ T6532]
[ 140.468442][ T6532] dump_stack_lvl+0x189/0x250
[ 140.468457][ T6532] ? __pfx_dump_stack_lvl+0x10/0x10
[ 140.468468][ T6532] ? __pfx_print_modules+0x10/0x10
[ 140.468482][ T6532] ? ksys_write+0x145/0x250
[ 140.468495][ T6532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 140.468506][ T6532] bad_page+0x180/0x1c0
[ 140.468517][ T6532] __free_frozen_pages+0xce2/0xd30
[ 140.468533][ T6532] bpf_xdp_frags_shrink_tail+0x3a5/0x750
[ 140.468550][ T6532] bpf_xdp_adjust_tail+0x1d6/0x220
[ 140.468559][ T6532] bpf_prog_f476d5219b92964a+0x1e/0x24
[ 140.468568][ T6532] bpf_prog_run_generic_xdp+0x64b/0x14c0
[ 140.468586][ T6532] do_xdp_generic+0x9f7/0x11a0
[ 140.468600][ T6532] ? __pfx_do_xdp_generic+0x10/0x10
[ 140.468611][ T6532] ? __skb_flow_dissect+0x5ef8/0x68b0
[ 140.468627][ T6532] __netif_receive_skb_core+0x17f9/0x4020
[ 140.468641][ T6532] ? __pfx___skb_flow_dissect+0x10/0x10
[ 140.468651][ T6532] ? lock_release+0x4b/0x3e0
[ 140.468666][ T6532] ? do_user_addr_fault+0xc8a/0x1390
[ 140.468682][ T6532] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 140.468695][ T6532] ? rcu_is_watching+0x15/0xb0
[ 140.468705][ T6532] ? irqentry_exit+0x74/0x90
[ 140.468719][ T6532] ? exc_page_fault+0x9f/0xf0
[ 140.468734][ T6532] ? netif_receive_skb+0x115/0x790
[ 140.468745][ T6532] ? rcu_is_watching+0x15/0xb0
[ 140.468754][ T6532] ? lock_acquire+0x5f/0x360
[ 140.468767][ T6532] __netif_receive_skb+0x72/0x380
[ 140.468779][ T6532] ? _copy_from_iter+0x24f/0x1790
[ 140.468789][ T6532] ? netif_receive_skb+0x115/0x790
[ 140.468801][ T6532] netif_receive_skb+0x1cb/0x790
[ 140.468813][ T6532] ? __pfx___local_bh_disable_ip+0x10/0x10
[ 140.468823][ T6532] ? __pfx_netif_receive_skb+0x10/0x10
[ 140.468834][ T6532] ? __pfx__copy_from_iter+0x10/0x10
[ 140.468848][ T6532] ? sock_alloc_send_pskb+0x875/0x990
[ 140.468860][ T6532] ? tun_rx_batched+0x160/0x730
[ 140.468870][ T6532] tun_rx_batched+0x1b9/0x730
[ 140.468878][ T6532] ? skb_header_pointer+0x8e/0x120
[ 140.468890][ T6532] ? __pfx_tun_rx_batched+0x10/0x10
[ 140.468899][ T6532] ? tun_get_user+0x266c/0x3e20
[ 140.468907][ T6532] ? rcu_is_watching+0x15/0xb0
[ 140.468915][ T6532] ? lock_acquire+0x5f/0x360
[ 140.468928][ T6532] ? __pfx___local_bh_enable_ip+0x10/0x10
[ 140.468939][ T6532] tun_get_user+0x2aa2/0x3e20
[ 140.468949][ T6532] ? rcu_is_watching+0x15/0xb0
[ 140.468958][ T6532] ? lock_release+0x4b/0x3e0
[ 140.468972][ T6532] ? tun_get_user+0x266c/0x3e20
[ 140.468981][ T6532] ? aa_file_perm+0x44d/0x1550
[ 140.468991][ T6532] ? __pfx_tun_get_user+0x10/0x10
[ 140.469000][ T6532] ? __futex_wait+0x34f/0x3e0
[ 140.469015][ T6532] ? __pfx___futex_wait+0x10/0x10
[ 140.469028][ T6532] ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 140.469043][ T6532] ? ref_tracker_alloc+0x318/0x460
[ 140.469057][ T6532] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 140.469069][ T6532] ? lock_release+0x4b/0x3e0
[ 140.469082][ T6532] ? tun_get+0x1c/0x2f0
[ 140.469090][ T6532] ? tun_get+0x1c/0x2f0
[ 140.469100][ T6532] ? rcu_is_watching+0x15/0xb0
[ 140.469108][ T6532] ? tun_get+0x1c/0x2f0
[ 140.469116][ T6532] ? lock_release+0x4b/0x3e0
[ 140.469128][ T6532] ? common_file_perm+0x1b5/0x230
[ 140.469136][ T6532] ? tun_get+0x1c/0x2f0
[ 140.469145][ T6532] tun_chr_write_iter+0x113/0x200
[ 140.469154][ T6532] vfs_write+0x5c6/0xb30
[ 140.469167][ T6532] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 140.469175][ T6532] ? __pfx_vfs_write+0x10/0x10
[ 140.469189][ T6532] ? __fget_files+0x2a/0x420
[ 140.469198][ T6532] ksys_write+0x145/0x250
[ 140.469211][ T6532] ? __pfx_ksys_write+0x10/0x10
[ 140.469222][ T6532] ? rcu_is_watching+0x15/0xb0
[ 140.469231][ T6532] ? rcu_is_watching+0x15/0xb0
[ 140.469240][ T6532] do_syscall_64+0xfa/0x3b0
[ 140.469249][ T6532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 140.469257][ T6532] ? clear_bhb_loop+0x60/0xb0
[ 140.469267][ T6532] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 140.469276][ T6532] RIP: 0033:0x7f8b6a38d69f
[ 140.469285][ T6532] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 140.469293][ T6532] RSP: 002b:00007f8b6b1b3000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 140.469303][ T6532] RAX: ffffffffffffffda RBX: 00007f8b6a5b5fa0 RCX: 00007f8b6a38d69f
[ 140.469310][ T6532] RDX: 0000000000011dc0 RSI: 00002000000004c0 RDI: 00000000000000c8
[ 140.469316][ T6532] RBP: 00007f8b6a411e19 R08: 0000000000000000 R09: 0000000000000000
[ 140.469321][ T6532] R10: 0000000000011dc0 R11: 0000000000000293 R12: 0000000000000000
[ 140.469326][ T6532] R13: 00007f8b6a5b6038 R14: 00007f8b6a5b5fa0 R15: 00007fff3db8b248
[ 140.469336][ T6532]
[ 140.469343][ T6532] BUG: Bad page state in process syz.0.18 pfn:656d5
[ 140.946005][ T6532] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880656d5dc0 pfn:0x656d5
[ 140.956165][ T6532] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 140.963271][ T6532] raw: 00fff00000000000 dead000000000040 ffff888022298000 0000000000000000
[ 140.971871][ T6532] raw: ffff8880656d5dc0 0000000000000001 00000000ffffffff 0000000000000000
[ 140.980463][ T6532] page dumped because: page_pool leak
[ 140.985839][ T6532] page_owner tracks the page as allocated
[ 140.991543][ T6532] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6532, tgid 6531 (syz.0.18), ts 138263805724, free_ts 128365255343
[ 141.008438][ T6532] post_alloc_hook+0x240/0x2a0
[ 141.013215][ T6532] get_page_from_freelist+0x21e4/0x22c0
[ 141.018787][ T6532] __alloc_frozen_pages_noprof+0x181/0x370
[ 141.024627][ T6532] alloc_pages_bulk_noprof+0x560/0x710
[ 141.030085][ T6532] __page_pool_alloc_netmems_slow+0x127/0x740
[ 141.036160][ T6532] skb_pp_cow_data+0xb47/0x13e0
[ 141.041010][ T6532] do_xdp_generic+0x699/0x11a0
[ 141.045798][ T6532] __netif_receive_skb_core+0x17f9/0x4020
[ 141.051512][ T6532] __netif_receive_skb+0x72/0x380
[ 141.056547][ T6532] netif_receive_skb+0x1cb/0x790
[ 141.061475][ T6532] tun_rx_batched+0x1b9/0x730
[ 141.066216][ T6532] tun_get_user+0x2aa2/0x3e20
[ 141.070884][ T6532] tun_chr_write_iter+0x113/0x200
[ 141.075917][ T6532] vfs_write+0x5c6/0xb30
[ 141.080177][ T6532] ksys_write+0x145/0x250
[ 141.084518][ T6532] do_syscall_64+0xfa/0x3b0
[ 141.089011][ T6532] page last free pid 15 tgid 15 stack trace:
[ 141.094997][ T6532] __free_frozen_pages+0xbc4/0xd30
[ 141.100107][ T6532] rcu_core+0xcab/0x1770
[ 141.104334][ T6532] handle_softirqs+0x283/0x870
[ 141.109133][ T6532] run_ksoftirqd+0x9b/0x100
[ 141.113632][ T6532] smpboot_thread_fn+0x53f/0xa60
[ 141.118587][ T6532] kthread+0x70e/0x8a0
[ 141.122648][ T6532] ret_from_fork+0x3fc/0x770
[ 141.127248][ T6532] ret_from_fork_asm+0x1a/0x30
[ 141.132011][ T6532] Modules linked in:
[ 141.135922][ T6532] CPU: 0 UID: 0 PID: 6532 Comm: syz.0.18 Tainted: G B syzkaller #0 PREEMPT(full)
[ 141.135944][ T6532] Tainted: [B]=BAD_PAGE
[ 141.135949][ T6532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 141.135958][ T6532] Call Trace:
[ 141.135964][ T6532]
[ 141.135970][ T6532] dump_stack_lvl+0x189/0x250
[ 141.135990][ T6532] ? __pfx_dump_stack_lvl+0x10/0x10
[ 141.136006][ T6532] ? __pfx_print_modules+0x10/0x10
[ 141.136025][ T6532] ? ksys_write+0x145/0x250
[ 141.136043][ T6532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 141.136070][ T6532] bad_page+0x180/0x1c0
[ 141.136089][ T6532] __free_frozen_pages+0xce2/0xd30
[ 141.136115][ T6532] bpf_xdp_frags_shrink_tail+0x3a5/0x750
[ 141.136141][ T6532] bpf_xdp_adjust_tail+0x1d6/0x220
[ 141.136158][ T6532] bpf_prog_f476d5219b92964a+0x1e/0x24
[ 141.136170][ T6532] bpf_prog_run_generic_xdp+0x64b/0x14c0
[ 141.136199][ T6532] do_xdp_generic+0x9f7/0x11a0
[ 141.136221][ T6532] ? __pfx_do_xdp_generic+0x10/0x10
[ 141.136237][ T6532] ? __skb_flow_dissect+0x5ef8/0x68b0
[ 141.136266][ T6532] __netif_receive_skb_core+0x17f9/0x4020
[ 141.136288][ T6532] ? __pfx___skb_flow_dissect+0x10/0x10
[ 141.136304][ T6532] ? lock_release+0x4b/0x3e0
[ 141.136326][ T6532] ? do_user_addr_fault+0xc8a/0x1390
[ 141.136349][ T6532] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 141.136369][ T6532] ? rcu_is_watching+0x15/0xb0
[ 141.136386][ T6532] ? irqentry_exit+0x74/0x90
[ 141.136405][ T6532] ? exc_page_fault+0x9f/0xf0
[ 141.136429][ T6532] ? netif_receive_skb+0x115/0x790
[ 141.136447][ T6532] ? rcu_is_watching+0x15/0xb0
[ 141.136462][ T6532] ? lock_acquire+0x5f/0x360
[ 141.136482][ T6532] __netif_receive_skb+0x72/0x380
[ 141.136501][ T6532] ? _copy_from_iter+0x24f/0x1790
[ 141.136518][ T6532] ? netif_receive_skb+0x115/0x790
[ 141.136536][ T6532] netif_receive_skb+0x1cb/0x790
[ 141.136555][ T6532] ? __pfx___local_bh_disable_ip+0x10/0x10
[ 141.136571][ T6532] ? __pfx_netif_receive_skb+0x10/0x10
[ 141.136589][ T6532] ? __pfx__copy_from_iter+0x10/0x10
[ 141.136603][ T6532] ? sock_alloc_send_pskb+0x875/0x990
[ 141.136622][ T6532] ? tun_rx_batched+0x160/0x730
[ 141.136639][ T6532] tun_rx_batched+0x1b9/0x730
[ 141.136653][ T6532] ? skb_header_pointer+0x8e/0x120
[ 141.136671][ T6532] ? __pfx_tun_rx_batched+0x10/0x10
[ 141.136686][ T6532] ? tun_get_user+0x266c/0x3e20
[ 141.136700][ T6532] ? rcu_is_watching+0x15/0xb0
[ 141.136715][ T6532] ? lock_acquire+0x5f/0x360
[ 141.136734][ T6532] ? __pfx___local_bh_enable_ip+0x10/0x10