[ 74.444082][ T42] audit: type=1400 audit(1785617119.414:207): avc: denied { transition } for pid=5966 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 74.453386][ T42] audit: type=1400 audit(1785617119.414:208): avc: denied { noatsecure } for pid=5966 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 74.461696][ T42] audit: type=1400 audit(1785617119.414:209): avc: denied { rlimitinh } for pid=5966 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 74.472215][ T42] audit: type=1400 audit(1785617119.414:210): avc: denied { siginh } for pid=5966 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
Warning: Permanently added '[localhost]:60994' (ED25519) to the list of known hosts.
[ 80.160719][ T42] audit: type=1400 audit(1785617125.124:211): avc: denied { write } for pid=5989 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 80.219997][ T42] audit: type=1400 audit(1785617125.184:212): avc: denied { write } for pid=5992 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 80.310531][ T42] audit: type=1400 audit(1785617125.274:213): avc: denied { write } for pid=5995 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 80.356374][ T42] audit: type=1400 audit(1785617125.324:214): avc: denied { write } for pid=5998 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 80.453314][ T42] audit: type=1400 audit(1785617125.414:215): avc: denied { write } for pid=6002 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 80.516544][ T42] audit: type=1400 audit(1785617125.484:216): avc: denied { write } for pid=6005 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 80.816573][ T42] audit: type=1400 audit(1785617125.784:217): avc: denied { write } for pid=6008 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 80.872318][ T42] audit: type=1400 audit(1785617125.834:218): avc: denied { write } for pid=6011 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
2026/08/01 20:45:26 parsed 1 programs
[ 81.609856][ T1352] cfg80211: failed to load regulatory.db
[ 84.039531][ T42] audit: type=1400 audit(1785617129.004:219): avc: denied { read write } for pid=6016 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 84.049444][ T42] audit: type=1400 audit(1785617129.004:220): avc: denied { open } for pid=6016 comm="syz-executor" path="/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
Setting up swapspace version 1, size = 127995904 bytes
[ 85.336398][ T6016] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 87.153468][ T42] kauditd_printk_skb: 2 callbacks suppressed
[ 87.153486][ T42] audit: type=1400 audit(1785617132.114:223): avc: denied { sys_module } for pid=6022 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[ 87.433233][ T6022] bridge0: port 1(bridge_slave_0) entered blocking state
[ 87.436421][ T6022] bridge0: port 1(bridge_slave_0) entered disabled state
[ 87.439515][ T6022] bridge_slave_0: entered allmulticast mode
[ 87.443408][ T6022] bridge_slave_0: entered promiscuous mode
[ 87.448467][ T6022] bridge0: port 2(bridge_slave_1) entered blocking state
[ 87.451606][ T6022] bridge0: port 2(bridge_slave_1) entered disabled state
[ 87.454825][ T6022] bridge_slave_1: entered allmulticast mode
[ 87.458629][ T6022] bridge_slave_1: entered promiscuous mode
[ 87.485531][ T6022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 87.491935][ T6022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 87.508167][ T6022] team0: Port device team_slave_0 added
[ 87.511354][ T6022] team0: Port device team_slave_1 added
[ 87.524838][ T6022] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 87.527073][ T6022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 87.535158][ T6022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 87.539762][ T6022] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 87.541977][ T6022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 87.550088][ T6022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 87.575771][ T6022] hsr_slave_0: entered promiscuous mode
[ 87.578582][ T6022] hsr_slave_1: entered promiscuous mode
[ 87.669846][ T42] audit: type=1400 audit(1785617132.634:224): avc: denied { write } for pid=6038 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 87.710050][ T42] audit: type=1400 audit(1785617132.674:225): avc: denied { write } for pid=6041 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 87.789757][ T42] audit: type=1400 audit(1785617132.754:226): avc: denied { write } for pid=6044 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 87.831918][ T42] audit: type=1400 audit(1785617132.794:227): avc: denied { write } for pid=6047 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 87.897452][ T42] audit: type=1400 audit(1785617132.864:228): avc: denied { write } for pid=6049 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 87.954662][ T42] audit: type=1400 audit(1785617132.924:229): avc: denied { write } for pid=6052 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 88.018594][ T42] audit: type=1400 audit(1785617132.984:230): avc: denied { write } for pid=6054 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 88.075910][ T42] audit: type=1400 audit(1785617133.044:231): avc: denied { write } for pid=6057 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 88.118943][ T6022] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 88.123111][ T6022] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 88.126535][ T6022] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 88.130453][ T6022] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 88.133160][ T6022] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 88.144009][ T6022] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 88.147469][ T6022] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 88.151390][ T6022] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 88.160994][ T42] audit: type=1400 audit(1785617133.124:232): avc: denied { write } for pid=6059 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 88.163289][ T6022] bridge0: port 2(bridge_slave_1) entered blocking state
[ 88.170279][ T6022] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 88.172634][ T6022] bridge0: port 1(bridge_slave_0) entered blocking state
[ 88.174898][ T6022] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 88.206595][ T6022] 8021q: adding VLAN 0 to HW filter on device bond0
[ 88.216135][ T71] bridge0: port 1(bridge_slave_0) entered disabled state
[ 88.219179][ T71] bridge0: port 2(bridge_slave_1) entered disabled state
[ 88.227380][ T6022] 8021q: adding VLAN 0 to HW filter on device team0
[ 88.234296][ T71] bridge0: port 1(bridge_slave_0) entered blocking state
[ 88.236603][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 88.241770][ T71] bridge0: port 2(bridge_slave_1) entered blocking state
[ 88.244087][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 88.500606][ T6022] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 88.528066][ T6022] veth0_vlan: entered promiscuous mode
[ 88.535650][ T6022] veth1_vlan: entered promiscuous mode
[ 88.551800][ T6022] veth0_macvtap: entered promiscuous mode
[ 88.556898][ T6022] veth1_macvtap: entered promiscuous mode
[ 88.569953][ T6022] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 88.581135][ T6022] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 88.604130][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 88.606980][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 88.623794][ T5759] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 88.627442][ T5759] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 88.755662][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 88.827030][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 88.912981][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 89.008715][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 89.268418][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 89.271560][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 89.291748][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 89.294403][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 90.020535][ T5099] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 90.025851][ T5099] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 90.028905][ T5099] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 90.031926][ T5099] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 90.036570][ T5099] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
2026/08/01 20:45:35 executed programs: 0
[ 91.038734][ T5099] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 91.042490][ T5099] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 91.045758][ T5099] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 91.048929][ T5099] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 91.052307][ T5099] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 91.446024][ T6196] bridge0: port 1(bridge_slave_0) entered blocking state
[ 91.448783][ T6196] bridge0: port 1(bridge_slave_0) entered disabled state
[ 91.451165][ T6196] bridge_slave_0: entered allmulticast mode
[ 91.453943][ T6196] bridge_slave_0: entered promiscuous mode
[ 91.459659][ T6196] bridge0: port 2(bridge_slave_1) entered blocking state
[ 91.462826][ T6196] bridge0: port 2(bridge_slave_1) entered disabled state
[ 91.466260][ T6196] bridge_slave_1: entered allmulticast mode
[ 91.470308][ T6196] bridge_slave_1: entered promiscuous mode
[ 91.493973][ T6196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 91.499501][ T6196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 91.523594][ T6196] team0: Port device team_slave_0 added
[ 91.527600][ T6196] team0: Port device team_slave_1 added
[ 91.543222][ T6196] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 91.545669][ T6196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 91.553550][ T6196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 91.558217][ T6196] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 91.560380][ T6196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 91.568424][ T6196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 91.597930][ T6196] hsr_slave_0: entered promiscuous mode
[ 91.600493][ T6196] hsr_slave_1: entered promiscuous mode
[ 91.602617][ T6196] debugfs: 'hsr0' already exists in 'hsr'
[ 91.604533][ T6196] Cannot create hsr debugfs directory
[ 92.145975][ T13] bridge_slave_1: left allmulticast mode
[ 92.148546][ T13] bridge_slave_1: left promiscuous mode
[ 92.151222][ T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 92.157503][ T13] bridge_slave_0: left allmulticast mode
[ 92.160022][ T13] bridge_slave_0: left promiscuous mode
[ 92.162610][ T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 92.167467][ T42] kauditd_printk_skb: 18 callbacks suppressed
[ 92.167481][ T42] audit: type=1400 audit(1785617137.134:251): avc: denied { write } for pid=6214 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 92.211888][ T42] audit: type=1400 audit(1785617137.174:252): avc: denied { write } for pid=6217 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 92.267502][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 92.271587][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 92.278764][ T13] bond0 (unregistering): Released all slaves
[ 92.286712][ T5451] 8021q: adding VLAN 0 to HW filter on device eth2
[ 92.355768][ T42] audit: type=1400 audit(1785617137.314:253): avc: denied { write } for pid=6220 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 92.398984][ T13] hsr_slave_0: left promiscuous mode
[ 92.401401][ T13] hsr_slave_1: left promiscuous mode
[ 92.403592][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 92.404168][ T42] audit: type=1400 audit(1785617137.374:254): avc: denied { write } for pid=6223 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 92.406022][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 92.421603][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 92.425168][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 92.430431][ T13] veth1_macvtap: left promiscuous mode
[ 92.432180][ T13] veth0_macvtap: left promiscuous mode
[ 92.434000][ T13] veth1_vlan: left promiscuous mode
[ 92.435657][ T13] veth0_vlan: left promiscuous mode
[ 92.568650][ T13] team0 (unregistering): Port device team_slave_1 removed
[ 92.584753][ T13] team0 (unregistering): Port device team_slave_0 removed
[ 92.642264][ T5451] 8021q: adding VLAN 0 to HW filter on device eth3
[ 92.728442][ T42] audit: type=1400 audit(1785617137.694:255): avc: denied { write } for pid=6226 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 92.767063][ T42] audit: type=1400 audit(1785617137.734:256): avc: denied { write } for pid=6229 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 92.832415][ T42] audit: type=1400 audit(1785617137.794:257): avc: denied { write } for pid=6231 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 92.892557][ T42] audit: type=1400 audit(1785617137.854:258): avc: denied { write } for pid=6234 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 92.968320][ T6196] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 92.972440][ T6196] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 92.976449][ T6196] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 92.980755][ T6196] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 92.983551][ T6196] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 92.987772][ T6196] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 92.990689][ T6196] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 92.995078][ T6196] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 93.046306][ T6196] 8021q: adding VLAN 0 to HW filter on device bond0
[ 93.058865][ T6196] 8021q: adding VLAN 0 to HW filter on device team0
[ 93.064431][ T71] bridge0: port 1(bridge_slave_0) entered blocking state
[ 93.067323][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 93.074198][ T71] bridge0: port 2(bridge_slave_1) entered blocking state
[ 93.076640][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 93.124093][ T63] Bluetooth: hci0: command tx timeout
[ 93.690380][ T6196] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 93.723002][ T6196] veth0_vlan: entered promiscuous mode
[ 93.733304][ T6196] veth1_vlan: entered promiscuous mode
[ 93.753378][ T6196] veth0_macvtap: entered promiscuous mode
[ 93.761860][ T6196] veth1_macvtap: entered promiscuous mode
[ 93.770952][ T6196] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 93.778709][ T6196] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 93.825245][ T5787] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 93.829083][ T5787] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 93.863951][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 93.866821][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 93.872295][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 93.875636][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 93.898555][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 93.901094][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 93.938684][ T42] audit: type=1400 audit(1785617138.904:259): avc: denied { prog_load } for pid=6254 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 93.945070][ T42] audit: type=1400 audit(1785617138.904:260): avc: denied { bpf } for pid=6254 comm="syz.0.17" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 93.952173][ T6255] BUG: Bad page state in process syz.0.17 pfn:225ba
[ 93.955219][ T6255] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x225ba
[ 93.959902][ T6255] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 93.962150][ T6255] raw: 00fff00000000000 dead000000000040 ffff888023177000 0000000000000000
[ 93.964899][ T6255] raw: ffff888000000000 3fffffffffffffff 00000000ffffffff 0000000000000000
[ 93.967610][ T6255] page dumped because: page_pool leak
[ 93.969291][ T6255] page_owner tracks the page as allocated
[ 93.971170][ T6255] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6255, tgid 6254 (syz.0.17), ts 93952101390, free_ts 89074271627
[ 93.977184][ T6255] post_alloc_hook+0xfd/0x120
[ 93.978739][ T6255] get_page_from_freelist+0xf48/0x3530
[ 93.980442][ T6255] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 93.982290][ T6255] alloc_pages_bulk_noprof+0x5de/0x13c0
[ 93.984127][ T6255] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 93.986032][ T6255] page_pool_alloc_netmems+0xc4/0x1a0
[ 93.987794][ T6255] page_pool_alloc_frag_netmem+0x21d/0xa10
[ 93.989656][ T6255] skb_pp_cow_data+0x507/0x1140
[ 93.991171][ T6255] skb_cow_data_for_xdp+0x88/0xb0
[ 93.992633][ T6255] do_xdp_generic+0x56b/0x12c0
[ 93.994212][ T6255] tun_get_user+0x1c1c/0x3c20
[ 93.995688][ T6255] tun_chr_write_iter+0xdc/0x200
[ 93.997275][ T6255] vfs_write+0x6ac/0x1050
[ 93.998756][ T6255] ksys_write+0x12a/0x250
[ 94.000128][ T6255] do_syscall_64+0x115/0x870
[ 94.001589][ T6255] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.003470][ T6255] page last free pid 6119 tgid 6119 stack trace:
[ 94.005502][ T6255] register_dummy_stack+0x74/0xb0
[ 94.007120][ T6255] init_page_owner+0x42/0xa10
[ 94.008644][ T6255] page_ext_init+0x71d/0x780
[ 94.010102][ T6255] mm_core_init+0x229/0x270
[ 94.011548][ T6255] Modules linked in:
[ 94.012826][ T6255] CPU: 3 UID: 0 PID: 6255 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 94.012840][ T6255] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 94.012846][ T6255] Call Trace:
[ 94.012857][ T6255]
[ 94.012862][ T6255] dump_stack_lvl+0x100/0x190
[ 94.012878][ T6255] bad_page.cold+0xbe/0xdf
[ 94.012894][ T6255] ? __pfx_bad_page+0x10/0x10
[ 94.012908][ T6255] ? page_bad_reason+0x98/0x200
[ 94.012920][ T6255] __free_frozen_pages+0x7d1/0x1090
[ 94.012936][ T6255] ? kasan_quarantine_put+0x104/0x240
[ 94.012949][ T6255] ? lockdep_hardirqs_on+0x78/0x100
[ 94.012963][ T6255] page_frag_free+0x199/0x1f0
[ 94.012976][ T6255] __xdp_return+0x3b6/0x990
[ 94.012989][ T6255] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 94.013004][ T6255] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 94.013014][ T6255] bpf_prog_run_generic_xdp+0x614/0x1610
[ 94.013031][ T6255] do_xdp_generic+0x92e/0x12c0
[ 94.013044][ T6255] ? __pfx_do_xdp_generic+0x10/0x10
[ 94.013065][ T6255] tun_get_user+0x1c1c/0x3c20
[ 94.013083][ T6255] ? __pfx_tun_get_user+0x10/0x10
[ 94.013095][ T6255] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 94.013116][ T6255] ? find_held_lock+0x2b/0x80
[ 94.013126][ T6255] ? tun_get+0x191/0x370
[ 94.013134][ T6255] ? tun_get+0x191/0x370
[ 94.013146][ T6255] tun_chr_write_iter+0xdc/0x200
[ 94.013158][ T6255] vfs_write+0x6ac/0x1050
[ 94.013175][ T6255] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 94.013187][ T6255] ? __pfx_vfs_write+0x10/0x10
[ 94.013202][ T6255] ? find_held_lock+0x2b/0x80
[ 94.013218][ T6255] ksys_write+0x12a/0x250
[ 94.013234][ T6255] ? __pfx_ksys_write+0x10/0x10
[ 94.013253][ T6255] do_syscall_64+0x115/0x870
[ 94.013266][ T6255] ? clear_bhb_loop+0x40/0x90
[ 94.013278][ T6255] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.013290][ T6255] RIP: 0033:0x7fd72935d68e
[ 94.013299][ T6255] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 94.013309][ T6255] RSP: 002b:00007fd72a172fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 94.013326][ T6255] RAX: ffffffffffffffda RBX: 00007fd72a1736c0 RCX: 00007fd72935d68e
[ 94.013332][ T6255] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8
[ 94.013338][ T6255] RBP: 00007fd729432d6f R08: 0000000000000000 R09: 0000000000000000
[ 94.013344][ T6255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 94.013350][ T6255] R13: 00007fd729616038 R14: 00007fd729615fa0 R15: 00007ffe06369658
[ 94.013362][ T6255]
[ 94.013367][ T6255] Disabling lock debugging due to kernel taint
[ 94.093784][ T6255] BUG: Bad page state in process syz.0.17 pfn:549eb
[ 94.095842][ T6255] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x549eb
[ 94.098998][ T6255] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 94.101192][ T6255] raw: 00fff00000000000 dead000000000040 ffff888023177000 0000000000000000
[ 94.103929][ T6255] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000
[ 94.106595][ T6255] page dumped because: page_pool leak
[ 94.108345][ T6255] page_owner tracks the page as allocated
[ 94.110119][ T6255] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6255, tgid 6254 (syz.0.17), ts 93952094066, free_ts 89074293353
[ 94.115540][ T6255] post_alloc_hook+0xfd/0x120
[ 94.117075][ T6255] get_page_from_freelist+0xf48/0x3530
[ 94.118894][ T6255] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 94.120749][ T6255] alloc_pages_bulk_noprof+0x5de/0x13c0
[ 94.122456][ T6255] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 94.124837][ T6255] page_pool_alloc_netmems+0xc4/0x1a0
[ 94.126553][ T6255] skb_pp_cow_data+0x975/0x1140
[ 94.128119][ T6255] skb_cow_data_for_xdp+0x88/0xb0
[ 94.129704][ T6255] do_xdp_generic+0x56b/0x12c0
[ 94.131208][ T6255] tun_get_user+0x1c1c/0x3c20
[ 94.132707][ T6255] tun_chr_write_iter+0xdc/0x200
[ 94.134387][ T6255] vfs_write+0x6ac/0x1050
[ 94.135951][ T6255] ksys_write+0x12a/0x250
[ 94.137699][ T6255] do_syscall_64+0x115/0x870
[ 94.139171][ T6255] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.141045][ T6255] page last free pid 6119 tgid 6119 stack trace:
[ 94.143053][ T6255] register_dummy_stack+0x74/0xb0
[ 94.144711][ T6255] init_page_owner+0x42/0xa10
[ 94.146196][ T6255] page_ext_init+0x71d/0x780
[ 94.147716][ T6255] mm_core_init+0x229/0x270
[ 94.149157][ T6255] Modules linked in:
[ 94.150397][ T6255] CPU: 3 UID: 0 PID: 6255 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 94.150412][ T6255] Tainted: [B]=BAD_PAGE
[ 94.150416][ T6255] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 94.150423][ T6255] Call Trace:
[ 94.150427][ T6255]
[ 94.150433][ T6255] dump_stack_lvl+0x100/0x190
[ 94.150447][ T6255] bad_page.cold+0xbe/0xdf
[ 94.150463][ T6255] ? __pfx_bad_page+0x10/0x10
[ 94.150476][ T6255] ? page_bad_reason+0x98/0x200
[ 94.150487][ T6255] __free_frozen_pages+0x7d1/0x1090
[ 94.150503][ T6255] ? kasan_quarantine_put+0x104/0x240
[ 94.150514][ T6255] ? lockdep_hardirqs_on+0x78/0x100
[ 94.150528][ T6255] page_frag_free+0x199/0x1f0
[ 94.150540][ T6255] __xdp_return+0x3b6/0x990
[ 94.150551][ T6255] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 94.150563][ T6255] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 94.150572][ T6255] bpf_prog_run_generic_xdp+0x614/0x1610
[ 94.150586][ T6255] do_xdp_generic+0x92e/0x12c0
[ 94.150597][ T6255] ? __pfx_do_xdp_generic+0x10/0x10
[ 94.150612][ T6255] tun_get_user+0x1c1c/0x3c20
[ 94.150626][ T6255] ? __pfx_tun_get_user+0x10/0x10
[ 94.150637][ T6255] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 94.150655][ T6255] ? find_held_lock+0x2b/0x80
[ 94.150664][ T6255] ? tun_get+0x191/0x370
[ 94.150673][ T6255] ? tun_get+0x191/0x370
[ 94.150682][ T6255] tun_chr_write_iter+0xdc/0x200
[ 94.150693][ T6255] vfs_write+0x6ac/0x1050
[ 94.150709][ T6255] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 94.150719][ T6255] ? __pfx_vfs_write+0x10/0x10
[ 94.150734][ T6255] ? find_held_lock+0x2b/0x80
[ 94.150746][ T6255] ksys_write+0x12a/0x250
[ 94.150761][ T6255] ? __pfx_ksys_write+0x10/0x10
[ 94.150781][ T6255] do_syscall_64+0x115/0x870
[ 94.150794][ T6255] ? clear_bhb_loop+0x40/0x90
[ 94.150805][ T6255] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.150816][ T6255] RIP: 0033:0x7fd72935d68e
[ 94.150824][ T6255] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 94.150834][ T6255] RSP: 002b:00007fd72a172fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 94.150844][ T6255] RAX: ffffffffffffffda RBX: 00007fd72a1736c0 RCX: 00007fd72935d68e
[ 94.150851][ T6255] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8
[ 94.150857][ T6255] RBP: 00007fd729432d6f R08: 0000000000000000 R09: 0000000000000000
[ 94.150863][ T6255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 94.150868][ T6255] R13: 00007fd729616038 R14: 00007fd729615fa0 R15: 00007ffe06369658
[ 94.150877][ T6255]
[ 94.150886][ T6255] BUG: Bad page state in process syz.0.17 pfn:3564c
[ 94.237786][ T6255] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x3564c
[ 94.241750][ T6255] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 94.244666][ T6255] raw: 00fff00000000000 dead000000000040 ffff888023177000 0000000000000000
[ 94.248169][ T6255] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000
[ 94.250898][ T6255] page dumped because: page_pool leak
[ 94.252561][ T6255] page_owner tracks the page as allocated
[ 94.254407][ T6255] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6255, tgid 6254 (syz.0.17), ts 93952087276, free_ts 89074316424
[ 94.259801][ T6255] post_alloc_hook+0xfd/0x120
[ 94.261307][ T6255] get_page_from_freelist+0xf48/0x3530
[ 94.263031][ T6255] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 94.264960][ T6255] alloc_pages_bulk_noprof+0x5de/0x13c0
[ 94.267255][ T6255] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 94.269742][ T6255] page_pool_alloc_netmems+0xc4/0x1a0
[ 94.271592][ T6255] skb_pp_cow_data+0x975/0x1140
[ 94.273131][ T6255] skb_cow_data_for_xdp+0x88/0xb0
[ 94.274805][ T6255] do_xdp_generic+0x56b/0x12c0
[ 94.276524][ T6255] tun_get_user+0x1c1c/0x3c20
[ 94.278148][ T6255] tun_chr_write_iter+0xdc/0x200
[ 94.279734][ T6255] vfs_write+0x6ac/0x1050
[ 94.281183][ T6255] ksys_write+0x12a/0x250
[ 94.282711][ T6255] do_syscall_64+0x115/0x870
[ 94.284412][ T6255] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.286428][ T6255] page last free pid 6119 tgid 6119 stack trace:
[ 94.288598][ T6255] register_dummy_stack+0x74/0xb0
[ 94.290494][ T6255] init_page_owner+0x42/0xa10
[ 94.292223][ T6255] page_ext_init+0x71d/0x780
[ 94.293760][ T6255] mm_core_init+0x229/0x270
[ 94.295191][ T6255] Modules linked in:
[ 94.296455][ T6255] CPU: 3 UID: 0 PID: 6255 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 94.296470][ T6255] Tainted: [B]=BAD_PAGE
[ 94.296474][ T6255] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 94.296480][ T6255] Call Trace:
[ 94.296484][ T6255]
[ 94.296488][ T6255] dump_stack_lvl+0x100/0x190
[ 94.296502][ T6255] bad_page.cold+0xbe/0xdf
[ 94.296518][ T6255] ? __pfx_bad_page+0x10/0x10
[ 94.296531][ T6255] ? page_bad_reason+0x98/0x200
[ 94.296542][ T6255] __free_frozen_pages+0x7d1/0x1090
[ 94.296558][ T6255] ? kasan_quarantine_put+0x104/0x240
[ 94.296570][ T6255] ? lockdep_hardirqs_on+0x78/0x100
[ 94.296600][ T6255] page_frag_free+0x199/0x1f0
[ 94.296613][ T6255] __xdp_return+0x3b6/0x990
[ 94.296624][ T6255] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 94.296636][ T6255] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 94.296644][ T6255] bpf_prog_run_generic_xdp+0x614/0x1610
[ 94.296659][ T6255] do_xdp_generic+0x92e/0x12c0
[ 94.296670][ T6255] ? __pfx_do_xdp_generic+0x10/0x10
[ 94.296684][ T6255] tun_get_user+0x1c1c/0x3c20
[ 94.296698][ T6255] ? __pfx_tun_get_user+0x10/0x10
[ 94.296708][ T6255] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 94.296727][ T6255] ? find_held_lock+0x2b/0x80
[ 94.296736][ T6255] ? tun_get+0x191/0x370
[ 94.296744][ T6255] ? tun_get+0x191/0x370
[ 94.296753][ T6255] tun_chr_write_iter+0xdc/0x200
[ 94.296764][ T6255] vfs_write+0x6ac/0x1050
[ 94.296784][ T6255] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 94.296795][ T6255] ? __pfx_vfs_write+0x10/0x10
[ 94.296810][ T6255] ? find_held_lock+0x2b/0x80
[ 94.296821][ T6255] ksys_write+0x12a/0x250
[ 94.296837][ T6255] ? __pfx_ksys_write+0x10/0x10
[ 94.296854][ T6255] do_syscall_64+0x115/0x870
[ 94.296866][ T6255] ? clear_bhb_loop+0x40/0x90
[ 94.296877][ T6255] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.296888][ T6255] RIP: 0033:0x7fd72935d68e
[ 94.296896][ T6255] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 94.296906][ T6255] RSP: 002b:00007fd72a172fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 94.296917][ T6255] RAX: ffffffffffffffda RBX: 00007fd72a1736c0 RCX: 00007fd72935d68e
[ 94.296923][ T6255] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8
[ 94.296929][ T6255] RBP: 00007fd729432d6f R08: 0000000000000000 R09: 0000000000000000
[ 94.296935][ T6255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 94.296940][ T6255] R13: 00007fd729616038 R14: 00007fd729615fa0 R15: 00007ffe06369658
[ 94.296949][ T6255]
[ 94.296958][ T6255] BUG: Bad page state in process syz.0.17 pfn:3521b
[ 94.379260][ T6255] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3521b
[ 94.382431][ T6255] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 94.384768][ T6255] raw: 00fff00000000000 dead000000000040 ffff888023177000 0000000000000000
[ 94.387491][ T6255] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000
[ 94.390128][ T6255] page dumped because: page_pool leak
[ 94.391697][ T6255] page_owner tracks the page as allocated
[ 94.393491][ T6255] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6255, tgid 6254 (syz.0.17), ts 93952080723, free_ts 89074365920
[ 94.398543][ T6255] post_alloc_hook+0xfd/0x120
[ 94.400027][ T6255] get_page_from_freelist+0xf48/0x3530
[ 94.401663][ T6255] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 94.403521][ T6255] alloc_pages_bulk_noprof+0x5de/0x13c0
[ 94.405305][ T6255] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 94.407217][ T6255] page_pool_alloc_netmems+0xc4/0x1a0
[ 94.408946][ T6255] skb_pp_cow_data+0x975/0x1140
[ 94.410480][ T6255] skb_cow_data_for_xdp+0x88/0xb0
[ 94.412057][ T6255] do_xdp_generic+0x56b/0x12c0
[ 94.413566][ T6255] tun_get_user+0x1c1c/0x3c20
[ 94.415027][ T6255] tun_chr_write_iter+0xdc/0x200
[ 94.416520][ T6255] vfs_write+0x6ac/0x1050
[ 94.417979][ T6255] ksys_write+0x12a/0x250
[ 94.419338][ T6255] do_syscall_64+0x115/0x870
[ 94.420828][ T6255] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.422676][ T6255] page last free pid 6119 tgid 6119 stack trace:
[ 94.424710][ T6255] register_dummy_stack+0x74/0xb0
[ 94.426308][ T6255] init_page_owner+0x42/0xa10
[ 94.427837][ T6255] page_ext_init+0x71d/0x780
[ 94.429296][ T6255] mm_core_init+0x229/0x270
[ 94.430727][ T6255] Modules linked in:
[ 94.431966][ T6255] CPU: 3 UID: 0 PID: 6255 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 94.431982][ T6255] Tainted: [B]=BAD_PAGE
[ 94.431986][ T6255] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 94.431992][ T6255] Call Trace:
[ 94.431997][ T6255]
[ 94.432002][ T6255] dump_stack_lvl+0x100/0x190
[ 94.432017][ T6255] bad_page.cold+0xbe/0xdf
[ 94.432032][ T6255] ? __pfx_bad_page+0x10/0x10
[ 94.432045][ T6255] ? page_bad_reason+0x98/0x200
[ 94.432056][ T6255] __free_frozen_pages+0x7d1/0x1090
[ 94.432072][ T6255] ? kasan_quarantine_put+0x104/0x240
[ 94.432084][ T6255] ? lockdep_hardirqs_on+0x78/0x100
[ 94.432098][ T6255] page_frag_free+0x199/0x1f0
[ 94.432110][ T6255] __xdp_return+0x3b6/0x990
[ 94.432121][ T6255] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 94.432134][ T6255] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 94.432142][ T6255] bpf_prog_run_generic_xdp+0x614/0x1610
[ 94.432156][ T6255] do_xdp_generic+0x92e/0x12c0
[ 94.432167][ T6255] ? __pfx_do_xdp_generic+0x10/0x10
[ 94.432182][ T6255] tun_get_user+0x1c1c/0x3c20
[ 94.432196][ T6255] ? __pfx_tun_get_user+0x10/0x10
[ 94.432206][ T6255] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 94.432224][ T6255] ? find_held_lock+0x2b/0x80
[ 94.432234][ T6255] ? tun_get+0x191/0x370
[ 94.432242][ T6255] ? tun_get+0x191/0x370
[ 94.432251][ T6255] tun_chr_write_iter+0xdc/0x200
[ 94.432262][ T6255] vfs_write+0x6ac/0x1050
[ 94.432278][ T6255] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 94.432289][ T6255] ? __pfx_vfs_write+0x10/0x10
[ 94.432304][ T6255] ? find_held_lock+0x2b/0x80
[ 94.432316][ T6255] ksys_write+0x12a/0x250
[ 94.432331][ T6255] ? __pfx_ksys_write+0x10/0x10
[ 94.432348][ T6255] do_syscall_64+0x115/0x870
[ 94.432360][ T6255] ? clear_bhb_loop+0x40/0x90
[ 94.432371][ T6255] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.432382][ T6255] RIP: 0033:0x7fd72935d68e
[ 94.432390][ T6255] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 94.432400][ T6255] RSP: 002b:00007fd72a172fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 94.432411][ T6255] RAX: ffffffffffffffda RBX: 00007fd72a1736c0 RCX: 00007fd72935d68e
[ 94.432417][ T6255] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8
[ 94.432423][ T6255] RBP: 00007fd729432d6f R08: 0000000000000000 R09: 0000000000000000
[ 94.432429][ T6255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 94.432435][ T6255] R13: 00007fd729616038 R14: 00007fd729615fa0 R15: 00007ffe06369658
[ 94.432444][ T6255]
[ 94.432453][ T6255] BUG: Bad page state in process syz.0.17 pfn:225da
[ 94.521902][ T6255] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x225da
[ 94.525551][ T6255] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 94.528452][ T6255] raw: 00fff00000000000 dead000000000040 ffff888023177000 0000000000000000
[ 94.531876][ T6255] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000
[ 94.535304][ T6255] page dumped because: page_pool leak
[ 94.537427][ T6255] page_owner tracks the page as allocated
[ 94.539631][ T6255] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6255, tgid 6254 (syz.0.17), ts 93952074858, free_ts 89074387813
[ 94.546037][ T6255] post_alloc_hook+0xfd/0x120
[ 94.548010][ T6255] get_page_from_freelist+0xf48/0x3530
[ 94.550201][ T6255] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 94.552482][ T6255] alloc_pages_bulk_noprof+0x5de/0x13c0
[ 94.554432][ T6255] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 94.556545][ T6255] page_pool_alloc_netmems+0xc4/0x1a0
[ 94.558476][ T6255] skb_pp_cow_data+0x975/0x1140
[ 94.560200][ T6255] skb_cow_data_for_xdp+0x88/0xb0
[ 94.562022][ T6255] do_xdp_generic+0x56b/0x12c0
[ 94.563856][ T6255] tun_get_user+0x1c1c/0x3c20
[ 94.565588][ T6255] tun_chr_write_iter+0xdc/0x200
[ 94.567418][ T6255] vfs_write+0x6ac/0x1050
[ 94.568803][ T6255] ksys_write+0x12a/0x250
[ 94.570121][ T6255] do_syscall_64+0x115/0x870
[ 94.571523][ T6255] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.573317][ T6255] page last free pid 6119 tgid 6119 stack trace:
[ 94.575284][ T6255] register_dummy_stack+0x74/0xb0
[ 94.576872][ T6255] init_page_owner+0x42/0xa10
[ 94.578354][ T6255] page_ext_init+0x71d/0x780
[ 94.579811][ T6255] mm_core_init+0x229/0x270
[ 94.581260][ T6255] Modules linked in:
[ 94.582516][ T6255] CPU: 3 UID: 0 PID: 6255 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 94.582533][ T6255] Tainted: [B]=BAD_PAGE
[ 94.582536][ T6255] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 94.582542][ T6255] Call Trace:
[ 94.582547][ T6255]
[ 94.582552][ T6255] dump_stack_lvl+0x100/0x190
[ 94.582567][ T6255] bad_page.cold+0xbe/0xdf
[ 94.582583][ T6255] ? __pfx_bad_page+0x10/0x10
[ 94.582596][ T6255] ? page_bad_reason+0x98/0x200
[ 94.582607][ T6255] __free_frozen_pages+0x7d1/0x1090
[ 94.582623][ T6255] ? kasan_quarantine_put+0x104/0x240
[ 94.582635][ T6255] ? lockdep_hardirqs_on+0x78/0x100
[ 94.582648][ T6255] page_frag_free+0x199/0x1f0
[ 94.582660][ T6255] __xdp_return+0x3b6/0x990
[ 94.582671][ T6255] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 94.582683][ T6255] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 94.582691][ T6255] bpf_prog_run_generic_xdp+0x614/0x1610
[ 94.582706][ T6255] do_xdp_generic+0x92e/0x12c0
[ 94.582718][ T6255] ? __pfx_do_xdp_generic+0x10/0x10
[ 94.582733][ T6255] tun_get_user+0x1c1c/0x3c20
[ 94.582746][ T6255] ? __pfx_tun_get_user+0x10/0x10
[ 94.582756][ T6255] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 94.582778][ T6255] ? find_held_lock+0x2b/0x80
[ 94.582788][ T6255] ? tun_get+0x191/0x370
[ 94.582796][ T6255] ? tun_get+0x191/0x370
[ 94.582806][ T6255] tun_chr_write_iter+0xdc/0x200
[ 94.582816][ T6255] vfs_write+0x6ac/0x1050
[ 94.582832][ T6255] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 94.582843][ T6255] ? __pfx_vfs_write+0x10/0x10
[ 94.582858][ T6255] ? find_held_lock+0x2b/0x80
[ 94.582870][ T6255] ksys_write+0x12a/0x250
[ 94.582885][ T6255] ? __pfx_ksys_write+0x10/0x10
[ 94.582901][ T6255] do_syscall_64+0x115/0x870
[ 94.582914][ T6255] ? clear_bhb_loop+0x40/0x90
[ 94.582925][ T6255] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.582936][ T6255] RIP: 0033:0x7fd72935d68e
[ 94.582944][ T6255] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 94.582954][ T6255] RSP: 002b:00007fd72a172fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 94.582964][ T6255] RAX: ffffffffffffffda RBX: 00007fd72a1736c0 RCX: 00007fd72935d68e
[ 94.582971][ T6255] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8
[ 94.582977][ T6255] RBP: 00007fd729432d6f R08: 0000000000000000 R09: 0000000000000000
[ 94.582982][ T6255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 94.582988][ T6255] R13: 00007fd729616038 R14: 00007fd729615fa0 R15: 00007ffe06369658
[ 94.582997][ T6255]
[ 94.583006][ T6255] BUG: Bad page state in process syz.0.17 pfn:225d4
[ 94.667018][ T6255] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x225d4
[ 94.669716][ T6255] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 94.671905][ T6255] raw: 00fff00000000000 dead000000000040 ffff888023177000 0000000000000000
[ 94.674790][ T6255] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000
[ 94.677783][ T6255] page dumped because: page_pool leak
[ 94.679424][ T6255] page_owner tracks the page as allocated
[ 94.681201][ T6255] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6255, tgid 6254 (syz.0.17), ts 93952068507, free_ts 89074410078
[ 94.686665][ T6255] post_alloc_hook+0xfd/0x120
[ 94.688126][ T6255] get_page_from_freelist+0xf48/0x3530
[ 94.689841][ T6255] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 94.691689][ T6255] alloc_pages_bulk_noprof+0x5de/0x13c0
[ 94.693463][ T6255] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 94.695657][ T6255] page_pool_alloc_netmems+0xc4/0x1a0
[ 94.697724][ T6255] skb_pp_cow_data+0x975/0x1140
[ 94.699333][ T6255] skb_cow_data_for_xdp+0x88/0xb0
[ 94.700891][ T6255] do_xdp_generic+0x56b/0x12c0
[ 94.702351][ T6255] tun_get_user+0x1c1c/0x3c20
[ 94.703917][ T6255] tun_chr_write_iter+0xdc/0x200
[ 94.705605][ T6255] vfs_write+0x6ac/0x1050
[ 94.707006][ T6255] ksys_write+0x12a/0x250
[ 94.708375][ T6255] do_syscall_64+0x115/0x870
[ 94.709843][ T6255] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.712034][ T6255] page last free pid 6119 tgid 6119 stack trace:
[ 94.714569][ T6255] register_dummy_stack+0x74/0xb0
[ 94.716152][ T6255] init_page_owner+0x42/0xa10
[ 94.717680][ T6255] page_ext_init+0x71d/0x780
[ 94.719137][ T6255] mm_core_init+0x229/0x270
[ 94.720562][ T6255] Modules linked in:
[ 94.721818][ T6255] CPU: 3 UID: 0 PID: 6255 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 94.721833][ T6255] Tainted: [B]=BAD_PAGE
[ 94.721837][ T6255] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 94.721843][ T6255] Call Trace:
[ 94.721849][ T6255]
[ 94.721854][ T6255] dump_stack_lvl+0x100/0x190
[ 94.721868][ T6255] bad_page.cold+0xbe/0xdf
[ 94.721883][ T6255] ? __pfx_bad_page+0x10/0x10
[ 94.721896][ T6255] ? page_bad_reason+0x98/0x200
[ 94.721908][ T6255] __free_frozen_pages+0x7d1/0x1090
[ 94.721923][ T6255] ? kasan_quarantine_put+0x104/0x240
[ 94.721935][ T6255] ? lockdep_hardirqs_on+0x78/0x100
[ 94.721948][ T6255] page_frag_free+0x199/0x1f0
[ 94.721960][ T6255] __xdp_return+0x3b6/0x990
[ 94.721971][ T6255] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 94.721984][ T6255] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 94.721992][ T6255] bpf_prog_run_generic_xdp+0x614/0x1610
[ 94.722006][ T6255] do_xdp_generic+0x92e/0x12c0
[ 94.722017][ T6255] ? __pfx_do_xdp_generic+0x10/0x10
[ 94.722033][ T6255] tun_get_user+0x1c1c/0x3c20
[ 94.722046][ T6255] ? __pfx_tun_get_user+0x10/0x10
[ 94.722057][ T6255] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 94.722074][ T6255] ? find_held_lock+0x2b/0x80
[ 94.722084][ T6255] ? tun_get+0x191/0x370
[ 94.722092][ T6255] ? tun_get+0x191/0x370
[ 94.722102][ T6255] tun_chr_write_iter+0xdc/0x200
[ 94.722112][ T6255] vfs_write+0x6ac/0x1050
[ 94.722128][ T6255] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 94.722139][ T6255] ? __pfx_vfs_write+0x10/0x10
[ 94.722154][ T6255] ? find_held_lock+0x2b/0x80
[ 94.722166][ T6255] ksys_write+0x12a/0x250
[ 94.722181][ T6255] ? __pfx_ksys_write+0x10/0x10
[ 94.722198][ T6255] do_syscall_64+0x115/0x870
[ 94.722210][ T6255] ? clear_bhb_loop+0x40/0x90
[ 94.722221][ T6255] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.722232][ T6255] RIP: 0033:0x7fd72935d68e
[ 94.722240][ T6255] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 94.722250][ T6255] RSP: 002b:00007fd72a172fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 94.722260][ T6255] RAX: ffffffffffffffda RBX: 00007fd72a1736c0 RCX: 00007fd72935d68e
[ 94.722267][ T6255] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8
[ 94.722273][ T6255] RBP: 00007fd729432d6f R08: 0000000000000000 R09: 0000000000000000
[ 94.722279][ T6255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 94.722287][ T6255] R13: 00007fd729616038 R14: 00007fd729615fa0 R15: 00007ffe06369658
[ 94.722300][ T6255]
[ 94.722311][ T6255] BUG: Bad page state in process syz.0.17 pfn:3cdce
[ 94.813410][ T6255] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803cdceb40 pfn:0x3cdce
[ 94.817206][ T6255] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 94.819964][ T6255] raw: 00fff00000000000 dead000000000040 ffff888023177000 0000000000000000
[ 94.823332][ T6255] raw: ffff88803cdceb40 0000000000000001 00000000ffffffff 0000000000000000
[ 94.826791][ T6255] page dumped because: page_pool leak
[ 94.828887][ T6255] page_owner tracks the page as allocated
[ 94.831109][ T6255] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6255, tgid 6254 (syz.0.17), ts 93952061794, free_ts 89074431685
[ 94.837581][ T6255] post_alloc_hook+0xfd/0x120
[ 94.839442][ T6255] get_page_from_freelist+0xf48/0x3530
[ 94.841588][ T6255] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 94.843930][ T6255] alloc_pages_bulk_noprof+0x5de/0x13c0
[ 94.846112][ T6255] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 94.848544][ T6255] page_pool_alloc_netmems+0xc4/0x1a0
[ 94.850675][ T6255] skb_pp_cow_data+0x975/0x1140
[ 94.852602][ T6255] skb_cow_data_for_xdp+0x88/0xb0
[ 94.854541][ T6255] do_xdp_generic+0x56b/0x12c0
[ 94.855995][ T6255] tun_get_user+0x1c1c/0x3c20
[ 94.857859][ T6255] tun_chr_write_iter+0xdc/0x200
[ 94.859816][ T6255] vfs_write+0x6ac/0x1050
[ 94.861530][ T6255] ksys_write+0x12a/0x250
[ 94.863072][ T6255] do_syscall_64+0x115/0x870
[ 94.864559][ T6255] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.866446][ T6255] page last free pid 6119 tgid 6119 stack trace:
[ 94.868395][ T6255] register_dummy_stack+0x74/0xb0
[ 94.869988][ T6255] init_page_owner+0x42/0xa10
[ 94.871467][ T6255] page_ext_init+0x71d/0x780
[ 94.872952][ T6255] mm_core_init+0x229/0x270
[ 94.874438][ T6255] Modules linked in:
[ 94.875672][ T6255] CPU: 3 UID: 0 PID: 6255 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 94.875687][ T6255] Tainted: [B]=BAD_PAGE
[ 94.875691][ T6255] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 94.875697][ T6255] Call Trace:
[ 94.875701][ T6255]
[ 94.875706][ T6255] dump_stack_lvl+0x100/0x190
[ 94.875720][ T6255] bad_page.cold+0xbe/0xdf
[ 94.875736][ T6255] ? __pfx_bad_page+0x10/0x10
[ 94.875749][ T6255] ? page_bad_reason+0x98/0x200
[ 94.875760][ T6255] __free_frozen_pages+0x7d1/0x1090
[ 94.875780][ T6255] ? kasan_quarantine_put+0x104/0x240
[ 94.875791][ T6255] ? lockdep_hardirqs_on+0x78/0x100
[ 94.875804][ T6255] page_frag_free+0x199/0x1f0
[ 94.875816][ T6255] __xdp_return+0x3b6/0x990
[ 94.875827][ T6255] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 94.875839][ T6255] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 94.875848][ T6255] bpf_prog_run_generic_xdp+0x614/0x1610
[ 94.875863][ T6255] do_xdp_generic+0x92e/0x12c0
[ 94.875873][ T6255] ? __pfx_do_xdp_generic+0x10/0x10
[ 94.875888][ T6255] tun_get_user+0x1c1c/0x3c20
[ 94.875902][ T6255] ? __pfx_tun_get_user+0x10/0x10
[ 94.875912][ T6255] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 94.875930][ T6255] ? find_held_lock+0x2b/0x80
[ 94.875941][ T6255] ? tun_get+0x191/0x370
[ 94.875949][ T6255] ? tun_get+0x191/0x370
[ 94.875959][ T6255] tun_chr_write_iter+0xdc/0x200
[ 94.875969][ T6255] vfs_write+0x6ac/0x1050
[ 94.875985][ T6255] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 94.875996][ T6255] ? __pfx_vfs_write+0x10/0x10
[ 94.876010][ T6255] ? find_held_lock+0x2b/0x80
[ 94.876022][ T6255] ksys_write+0x12a/0x250
[ 94.876038][ T6255] ? __pfx_ksys_write+0x10/0x10
[ 94.876054][ T6255] do_syscall_64+0x115/0x870
[ 94.876066][ T6255] ? clear_bhb_loop+0x40/0x90
[ 94.876077][ T6255] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.876088][ T6255] RIP: 0033:0x7fd72935d68e
[ 94.876096][ T6255] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 94.876106][ T6255] RSP: 002b:00007fd72a172fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 94.876117][ T6255] RAX: ffffffffffffffda RBX: 00007fd72a1736c0 RCX: 00007fd72935d68e
[ 94.876123][ T6255] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8
[ 94.876129][ T6255] RBP: 00007fd729432d6f R08: 0000000000000000 R09: 0000000000000000
[ 94.876135][ T6255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 94.876141][ T6255] R13: 00007fd729616038 R14: 00007fd729615fa0 R15: 00007ffe06369658
[ 94.876150][ T6255]
[ 94.876158][ T6255] BUG: Bad page state in process syz.0.17 pfn:3d0c3
[ 94.957439][ T6255] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x3d0c3
[ 94.960504][ T6255] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 94.962721][ T6255] raw: 00fff00000000000 dead000000000040 ffff888023177000 0000000000000000
[ 94.965422][ T6255] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000
[ 94.968087][ T6255] page dumped because: page_pool leak
[ 94.969755][ T6255] page_owner tracks the page as allocated
[ 94.971522][ T6255] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6255, tgid 6254 (syz.0.17), ts 93952054997, free_ts 89074453329
[ 94.976735][ T6255] post_alloc_hook+0xfd/0x120
[ 94.978242][ T6255] get_page_from_freelist+0xf48/0x3530
[ 94.979964][ T6255] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 94.981840][ T6255] alloc_pages_bulk_noprof+0x5de/0x13c0
[ 94.983683][ T6255] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 94.985605][ T6255] page_pool_alloc_netmems+0xc4/0x1a0
[ 94.987322][ T6255] skb_pp_cow_data+0x975/0x1140
[ 94.988868][ T6255] skb_cow_data_for_xdp+0x88/0xb0
[ 94.990446][ T6255] do_xdp_generic+0x56b/0x12c0
[ 94.991950][ T6255] tun_get_user+0x1c1c/0x3c20
[ 94.993455][ T6255] tun_chr_write_iter+0xdc/0x200
[ 94.995076][ T6255] vfs_write+0x6ac/0x1050
[ 94.996466][ T6255] ksys_write+0x12a/0x250
[ 94.997845][ T6255] do_syscall_64+0x115/0x870
[ 94.999310][ T6255] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.001180][ T6255] page last free pid 6119 tgid 6119 stack trace:
[ 95.003197][ T6255] register_dummy_stack+0x74/0xb0
[ 95.004867][ T6255] init_page_owner+0x42/0xa10
[ 95.006365][ T6255] page_ext_init+0x71d/0x780
[ 95.007820][ T6255] mm_core_init+0x229/0x270
[ 95.009265][ T6255] Modules linked in:
[ 95.010522][ T6255] CPU: 3 UID: 0 PID: 6255 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 95.010538][ T6255] Tainted: [B]=BAD_PAGE
[ 95.010542][ T6255] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 95.010548][ T6255] Call Trace:
[ 95.010552][ T6255]
[ 95.010558][ T6255] dump_stack_lvl+0x100/0x190
[ 95.010572][ T6255] bad_page.cold+0xbe/0xdf
[ 95.010588][ T6255] ? __pfx_bad_page+0x10/0x10
[ 95.010601][ T6255] ? page_bad_reason+0x98/0x200
[ 95.010612][ T6255] __free_frozen_pages+0x7d1/0x1090
[ 95.010628][ T6255] ? kasan_quarantine_put+0x104/0x240
[ 95.010639][ T6255] ? lockdep_hardirqs_on+0x78/0x100
[ 95.010653][ T6255] page_frag_free+0x199/0x1f0
[ 95.010665][ T6255] __xdp_return+0x3b6/0x990
[ 95.010676][ T6255] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 95.010688][ T6255] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 95.010697][ T6255] bpf_prog_run_generic_xdp+0x614/0x1610
[ 95.010711][ T6255] do_xdp_generic+0x92e/0x12c0
[ 95.010721][ T6255] ? __pfx_do_xdp_generic+0x10/0x10
[ 95.010736][ T6255] tun_get_user+0x1c1c/0x3c20
[ 95.010749][ T6255] ? __pfx_tun_get_user+0x10/0x10
[ 95.010760][ T6255] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 95.010781][ T6255] ? find_held_lock+0x2b/0x80
[ 95.010791][ T6255] ? tun_get+0x191/0x370
[ 95.010799][ T6255] ? tun_get+0x191/0x370
[ 95.010809][ T6255] tun_chr_write_iter+0xdc/0x200
[ 95.010819][ T6255] vfs_write+0x6ac/0x1050
[ 95.010836][ T6255] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 95.010847][ T6255] ? __pfx_vfs_write+0x10/0x10
[ 95.010861][ T6255] ? find_held_lock+0x2b/0x80
[ 95.010873][ T6255] ksys_write+0x12a/0x250
[ 95.010888][ T6255] ? __pfx_ksys_write+0x10/0x10
[ 95.010905][ T6255] do_syscall_64+0x115/0x870
[ 95.010917][ T6255] ? clear_bhb_loop+0x40/0x90
[ 95.010929][ T6255] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.010939][ T6255] RIP: 0033:0x7fd72935d68e
[ 95.010948][ T6255] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 95.010958][ T6255] RSP: 002b:00007fd72a172fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 95.010968][ T6255] RAX: ffffffffffffffda RBX: 00007fd72a1736c0 RCX: 00007fd72935d68e
[ 95.010974][ T6255] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8
[ 95.010980][ T6255] RBP: 00007fd729432d6f R08: 0000000000000000 R09: 0000000000000000
[ 95.010986][ T6255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 95.010992][ T6255] R13: 00007fd729616038 R14: 00007fd729615fa0 R15: 00007ffe06369658
[ 95.011001][ T6255]
[ 95.011009][ T6255] BUG: Bad page state in process syz.0.17 pfn:251a8
[ 95.092276][ T6255] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x251a8
[ 95.095461][ T6255] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 95.097709][ T6255] raw: 00fff00000000000 dead000000000040 ffff888023177000 0000000000000000
[ 95.100372][ T6255] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000
[ 95.103058][ T6255] page dumped because: page_pool leak
[ 95.104791][ T6255] page_owner tracks the page as allocated
[ 95.106570][ T6255] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6255, tgid 6254 (syz.0.17), ts 93952048647, free_ts 89074475860
[ 95.111613][ T6255] post_alloc_hook+0xfd/0x120
[ 95.113137][ T6255] get_page_from_freelist+0xf48/0x3530
[ 95.114907][ T6255] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 95.116795][ T6255] alloc_pages_bulk_noprof+0x5de/0x13c0
[ 95.118520][ T6255] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 95.120420][ T6255] page_pool_alloc_netmems+0xc4/0x1a0
[ 95.122102][ T6255] skb_pp_cow_data+0x975/0x1140
[ 95.123713][ T6255] skb_cow_data_for_xdp+0x88/0xb0
[ 95.125293][ T6255] do_xdp_generic+0x56b/0x12c0
[ 95.126815][ T6255] tun_get_user+0x1c1c/0x3c20
[ 95.128295][ T6255] tun_chr_write_iter+0xdc/0x200
[ 95.129859][ T6255] vfs_write+0x6ac/0x1050
[ 95.131218][ T6255] ksys_write+0x12a/0x250
[ 95.132596][ T6255] do_syscall_64+0x115/0x870
[ 95.134117][ T6255] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.135952][ T6255] page last free pid 6119 tgid 6119 stack trace:
[ 95.137925][ T6255] register_dummy_stack+0x74/0xb0
[ 95.139488][ T6255] init_page_owner+0x42/0xa10
[ 95.140972][ T6255] page_ext_init+0x71d/0x780
[ 95.142425][ T6255] mm_core_init+0x229/0x270
[ 95.143926][ T6255] Modules linked in:
[ 95.145172][ T6255] CPU: 3 UID: 0 PID: 6255 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 95.145188][ T6255] Tainted: [B]=BAD_PAGE
[ 95.145191][ T6255] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 95.145197][ T6255] Call Trace:
[ 95.145201][ T6255]
[ 95.145205][ T6255] dump_stack_lvl+0x100/0x190
[ 95.145219][ T6255] bad_page.cold+0xbe/0xdf
[ 95.145234][ T6255] ? __pfx_bad_page+0x10/0x10
[ 95.145246][ T6255] ? page_bad_reason+0x98/0x200
[ 95.145258][ T6255] __free_frozen_pages+0x7d1/0x1090
[ 95.145273][ T6255] ? kasan_quarantine_put+0x104/0x240
[ 95.145285][ T6255] ? lockdep_hardirqs_on+0x78/0x100
[ 95.145298][ T6255] page_frag_free+0x199/0x1f0
[ 95.145310][ T6255] __xdp_return+0x3b6/0x990
[ 95.145321][ T6255] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 95.145333][ T6255] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 95.145342][ T6255] bpf_prog_run_generic_xdp+0x614/0x1610
[ 95.145356][ T6255] do_xdp_generic+0x92e/0x12c0
[ 95.145367][ T6255] ? __pfx_do_xdp_generic+0x10/0x10
[ 95.145382][ T6255] tun_get_user+0x1c1c/0x3c20
[ 95.145394][ T6255] ? __pfx_tun_get_user+0x10/0x10
[ 95.145405][ T6255] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 95.145423][ T6255] ? find_held_lock+0x2b/0x80
[ 95.145432][ T6255] ? tun_get+0x191/0x370
[ 95.145440][ T6255] ? tun_get+0x191/0x370
[ 95.145450][ T6255] tun_chr_write_iter+0xdc/0x200
[ 95.145461][ T6255] vfs_write+0x6ac/0x1050
[ 95.145477][ T6255] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 95.145487][ T6255] ? __pfx_vfs_write+0x10/0x10
[ 95.145502][ T6255] ? find_held_lock+0x2b/0x80
[ 95.145514][ T6255] ksys_write+0x12a/0x250
[ 95.145529][ T6255] ? __pfx_ksys_write+0x10/0x10
[ 95.145546][ T6255] do_syscall_64+0x115/0x870
[ 95.145558][ T6255] ? clear_bhb_loop+0x40/0x90
[ 95.145569][ T6255] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.145580][ T6255] RIP: 0033:0x7fd72935d68e
[ 95.145588][ T6255] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 95.145598][ T6255] RSP: 002b:00007fd72a172fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 95.145608][ T6255] RAX: ffffffffffffffda RBX: 00007fd72a1736c0 RCX: 00007fd72935d68e
[ 95.145614][ T6255] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8
[ 95.145621][ T6255] RBP: 00007fd729432d6f R08: 0000000000000000 R09: 0000000000000000
[ 95.145626][ T6255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 95.145632][ T6255] R13: 00007fd729616038 R14: 00007fd729615fa0 R15: 00007ffe06369658
[ 95.145641][ T6255]
[ 95.145649][ T6255] BUG: Bad page state in process syz.0.17 pfn:54a05
[ 95.203812][ T63] Bluetooth: hci0: command tx timeout
[ 95.208332][ T6255] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x54a05
[ 95.208350][ T6255] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 95.233697][ T6255] raw: 00fff00000000000 dead000000000040 ffff888023177000 0000000000000000
[ 95.236365][ T6255] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000
[ 95.239016][ T6255] page dumped because: page_pool leak
[ 95.240689][ T6255] page_owner tracks the page as allocated
[ 95.242484][ T6255] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6255, tgid 6254 (syz.0.17), ts 93952041830, free_ts 89074497573
[ 95.247528][ T6255] post_alloc_hook+0xfd/0x120
[ 95.249027][ T6255] get_page_from_freelist+0xf48/0x3530
[ 95.250714][ T6255] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 95.252592][ T6255] alloc_pages_bulk_noprof+0x5de/0x13c0
[ 95.254387][ T6255] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 95.256311][ T6255] page_pool_alloc_netmems+0xc4/0x1a0
[ 95.258001][ T6255] skb_pp_cow_data+0x975/0x1140
[ 95.259536][ T6255] skb_cow_data_for_xdp+0x88/0xb0
[ 95.261126][ T6255] do_xdp_generic+0x56b/0x12c0
[ 95.262598][ T6255] tun_get_user+0x1c1c/0x3c20
[ 95.264102][ T6255] tun_chr_write_iter+0xdc/0x200
[ 95.265662][ T6255] vfs_write+0x6ac/0x1050
[ 95.267062][ T6255] ksys_write+0x12a/0x250
[ 95.268429][ T6255] do_syscall_64+0x115/0x870
[ 95.269843][ T6255] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.271623][ T6255] page last free pid 6119 tgid 6119 stack trace:
[ 95.273509][ T6255] register_dummy_stack+0x74/0xb0
[ 95.275146][ T6255] init_page_owner+0x42/0xa10
[ 95.276678][ T6255] page_ext_init+0x71d/0x780
[ 95.278124][ T6255] mm_core_init+0x229/0x270
[ 95.279560][ T6255] Modules linked in:
[ 95.280803][ T6255] CPU: 3 UID: 0 PID: 6255 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 95.280819][ T6255] Tainted: [B]=BAD_PAGE
[ 95.280822][ T6255] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 95.280829][ T6255] Call Trace:
[ 95.280833][ T6255]
[ 95.280838][ T6255] dump_stack_lvl+0x100/0x190
[ 95.280852][ T6255] bad_page.cold+0xbe/0xdf
[ 95.280869][ T6255] ? __pfx_bad_page+0x10/0x10
[ 95.280881][ T6255] ? page_bad_reason+0x98/0x200
[ 95.280892][ T6255] __free_frozen_pages+0x7d1/0x1090
[ 95.280908][ T6255] ? kasan_quarantine_put+0x104/0x240
[ 95.280920][ T6255] ? lockdep_hardirqs_on+0x78/0x100
[ 95.280933][ T6255] page_frag_free+0x199/0x1f0
[ 95.280945][ T6255] __xdp_return+0x3b6/0x990
[ 95.280957][ T6255] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 95.280969][ T6255] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 95.280978][ T6255] bpf_prog_run_generic_xdp+0x614/0x1610
[ 95.280992][ T6255] do_xdp_generic+0x92e/0x12c0
[ 95.281003][ T6255] ? __pfx_do_xdp_generic+0x10/0x10
[ 95.281018][ T6255] tun_get_user+0x1c1c/0x3c20
[ 95.281031][ T6255] ? __pfx_tun_get_user+0x10/0x10
[ 95.281041][ T6255] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 95.281060][ T6255] ? find_held_lock+0x2b/0x80
[ 95.281069][ T6255] ? tun_get+0x191/0x370
[ 95.281078][ T6255] ? tun_get+0x191/0x370
[ 95.281087][ T6255] tun_chr_write_iter+0xdc/0x200
[ 95.281098][ T6255] vfs_write+0x6ac/0x1050
[ 95.281114][ T6255] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 95.281124][ T6255] ? __pfx_vfs_write+0x10/0x10
[ 95.281139][ T6255] ? find_held_lock+0x2b/0x80
[ 95.281151][ T6255] ksys_write+0x12a/0x250
[ 95.281166][ T6255] ? __pfx_ksys_write+0x10/0x10
[ 95.281183][ T6255] do_syscall_64+0x115/0x870
[ 95.281196][ T6255] ? clear_bhb_loop+0x40/0x90
[ 95.281207][ T6255] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.281218][ T6255] RIP: 0033:0x7fd72935d68e
[ 95.281226][ T6255] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 95.281236][ T6255] RSP: 002b:00007fd72a172fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 95.281246][ T6255] RAX: ffffffffffffffda RBX: 00007fd72a1736c0 RCX: 00007fd72935d68e
[ 95.281252][ T6255] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8
[ 95.281258][ T6255] RBP: 00007fd729432d6f R08: 0000000000000000 R09: 0000000000000000
[ 95.281264][ T6255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 95.281269][ T6255] R13: 00007fd729616038 R14: 00007fd729615fa0 R15: 00007ffe06369658
[ 95.281278][ T6255]
[ 95.281287][ T6255] BUG: Bad page state in process syz.0.17 pfn:2d583
[ 95.361602][ T6255] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888038e1bfc0 pfn:0x2d583
[ 95.364779][ T6255] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 95.366982][ T6255] raw: 00fff00000000000 dead000000000040 ffff888023177000 0000000000000000
[ 95.369628][ T6255] raw: ffff888038e1bfc0 0000000000000001 00000000ffffffff 0000000000000000
[ 95.372260][ T6255] page dumped because: page_pool leak
[ 95.374017][ T6255] page_owner tracks the page as allocated
[ 95.375774][ T6255] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6255, tgid 6254 (syz.0.17), ts 93952034505, free_ts 89074522165
[ 95.380754][ T6255] post_alloc_hook+0xfd/0x120
[ 95.382249][ T6255] get_page_from_freelist+0xf48/0x3530
[ 95.384051][ T6255] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 95.385899][ T6255] alloc_pages_bulk_noprof+0x5de/0x13c0
[ 95.387552][ T6255] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 95.389460][ T6255] page_pool_alloc_netmems+0xc4/0x1a0
[ 95.391140][ T6255] skb_pp_cow_data+0x975/0x1140
[ 95.392597][ T6255] skb_cow_data_for_xdp+0x88/0xb0
[ 95.394208][ T6255] do_xdp_generic+0x56b/0x12c0
[ 95.395654][ T6255] tun_get_user+0x1c1c/0x3c20
[ 95.397116][ T6255] tun_chr_write_iter+0xdc/0x200
[ 95.398710][ T6255] vfs_write+0x6ac/0x1050
[ 95.400073][ T6255] ksys_write+0x12a/0x250
[ 95.401437][ T6255] do_syscall_64+0x115/0x870
[ 95.402891][ T6255] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.404769][ T6255] page last free pid 6119 tgid 6119 stack trace:
[ 95.406700][ T6255] register_dummy_stack+0x74/0xb0
[ 95.408247][ T6255] init_page_owner+0x42/0xa10
[ 95.409745][ T6255] page_ext_init+0x71d/0x780
[ 95.411198][ T6255] mm_core_init+0x229/0x270
[ 95.412653][ T6255] Modules linked in:
[ 95.413952][ T6255] CPU: 3 UID: 0 PID: 6255 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 95.413968][ T6255] Tainted: [B]=BAD_PAGE
[ 95.413972][ T6255] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 95.413979][ T6255] Call Trace:
[ 95.413983][ T6255]
[ 95.413988][ T6255] dump_stack_lvl+0x100/0x190
[ 95.414002][ T6255] bad_page.cold+0xbe/0xdf
[ 95.414018][ T6255] ? __pfx_bad_page+0x10/0x10
[ 95.414031][ T6255] ? page_bad_reason+0x98/0x200
[ 95.414042][ T6255] __free_frozen_pages+0x7d1/0x1090
[ 95.414058][ T6255] ? kasan_quarantine_put+0x104/0x240
[ 95.414069][ T6255] ? lockdep_hardirqs_on+0x78/0x100
[ 95.414083][ T6255] page_frag_free+0x199/0x1f0
[ 95.414094][ T6255] __xdp_return+0x3b6/0x990
[ 95.414105][ T6255] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 95.414117][ T6255] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 95.414126][ T6255] bpf_prog_run_generic_xdp+0x614/0x1610
[ 95.414140][ T6255] do_xdp_generic+0x92e/0x12c0
[ 95.414151][ T6255] ? __pfx_do_xdp_generic+0x10/0x10
[ 95.414166][ T6255] tun_get_user+0x1c1c/0x3c20
[ 95.414179][ T6255] ? __pfx_tun_get_user+0x10/0x10
[ 95.414190][ T6255] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 95.414208][ T6255] ? find_held_lock+0x2b/0x80
[ 95.414217][ T6255] ? tun_get+0x191/0x370
[ 95.414225][ T6255] ? tun_get+0x191/0x370
[ 95.414234][ T6255] tun_chr_write_iter+0xdc/0x200
[ 95.414245][ T6255] vfs_write+0x6ac/0x1050
[ 95.414262][ T6255] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 95.414272][ T6255] ? __pfx_vfs_write+0x10/0x10
[ 95.414287][ T6255] ? find_held_lock+0x2b/0x80
[ 95.414299][ T6255] ksys_write+0x12a/0x250
[ 95.414314][ T6255] ? __pfx_ksys_write+0x10/0x10
[ 95.414331][ T6255] do_syscall_64+0x115/0x870
[ 95.414343][ T6255] ? clear_bhb_loop+0x40/0x90
[ 95.414355][ T6255] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.414365][ T6255] RIP: 0033:0x7fd72935d68e
[ 95.414374][ T6255] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 95.414384][ T6255] RSP: 002b:00007fd72a172fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 95.414394][ T6255] RAX: ffffffffffffffda RBX: 00007fd72a1736c0 RCX: 00007fd72935d68e
[ 95.414401][ T6255] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8
[ 95.414407][ T6255] RBP: 00007fd729432d6f R08: 0000000000000000 R09: 0000000000000000
[ 95.414412][ T6255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 95.414418][ T6255] R13: 00007fd729616038 R14: 00007fd729615fa0 R15: 00007ffe06369658
[ 95.414427][ T6255]
[ 95.414436][ T6255] BUG: Bad page state in process syz.0.17 pfn:2a1d8
[ 95.495497][ T6255] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2a1d8
[ 95.498216][ T6255] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 95.500404][ T6255] raw: 00fff00000000000 dead000000000040 ffff888023177000 0000000000000000
[ 95.503089][ T6255] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000
[ 95.505804][ T6255] page dumped because: page_pool leak
[ 95.507503][ T6255] page_owner tracks the page as allocated
[ 95.509280][ T6255] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6255, tgid 6254 (syz.0.17), ts 93952027687, free_ts 89074543915
[ 95.514473][ T6255] post_alloc_hook+0xfd/0x120
[ 95.515948][ T6255] get_page_from_freelist+0xf48/0x3530
[ 95.517678][ T6255] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 95.519524][ T6255] alloc_pages_bulk_noprof+0x5de/0x13c0
[ 95.521251][ T6255] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 95.523175][ T6255] page_pool_alloc_netmems+0xc4/0x1a0
[ 95.524908][ T6255] skb_pp_cow_data+0x975/0x1140
[ 95.526460][ T6255] skb_cow_data_for_xdp+0x88/0xb0
[ 95.528038][ T6255] do_xdp_generic+0x56b/0x12c0
[ 95.529553][ T6255] tun_get_user+0x1c1c/0x3c20
[ 95.531038][ T6255] tun_chr_write_iter+0xdc/0x200
[ 95.532623][ T6255] vfs_write+0x6ac/0x1050
[ 95.534075][ T6255] ksys_write+0x12a/0x250
[ 95.535439][ T6255] do_syscall_64+0x115/0x870
[ 95.536929][ T6255] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.538773][ T6255] page last free pid 6119 tgid 6119 stack trace:
[ 95.540733][ T6255] register_dummy_stack+0x74/0xb0
[ 95.542370][ T6255] init_page_owner+0x42/0xa10
[ 95.543948][ T6255] page_ext_init+0x71d/0x780
[ 95.545411][ T6255] mm_core_init+0x229/0x270
[ 95.546871][ T6255] Modules linked in:
[ 95.548112][ T6255] CPU: 3 UID: 0 PID: 6255 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 95.548128][ T6255] Tainted: [B]=BAD_PAGE
[ 95.548131][ T6255] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 95.548138][ T6255] Call Trace:
[ 95.548142][ T6255]
[ 95.548146][ T6255] dump_stack_lvl+0x100/0x190
[ 95.548161][ T6255] bad_page.cold+0xbe/0xdf
[ 95.548177][ T6255] ? __pfx_bad_page+0x10/0x10
[ 95.548190][ T6255] ? page_bad_reason+0x98/0x200
[ 95.548201][ T6255] __free_frozen_pages+0x7d1/0x1090
[ 95.548218][ T6255] ? kasan_quarantine_put+0x104/0x240
[ 95.548229][ T6255] ? lockdep_hardirqs_on+0x78/0x100
[ 95.548242][ T6255] page_frag_free+0x199/0x1f0
[ 95.548254][ T6255] __xdp_return+0x3b6/0x990
[ 95.548265][ T6255] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 95.548277][ T6255] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 95.548285][ T6255] bpf_prog_run_generic_xdp+0x614/0x1610
[ 95.548299][ T6255] do_xdp_generic+0x92e/0x12c0
[ 95.548310][ T6255] ? __pfx_do_xdp_generic+0x10/0x10
[ 95.548325][ T6255] tun_get_user+0x1c1c/0x3c20
[ 95.548339][ T6255] ? __pfx_tun_get_user+0x10/0x10
[ 95.548350][ T6255] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 95.548369][ T6255] ? find_held_lock+0x2b/0x80
[ 95.548378][ T6255] ? tun_get+0x191/0x370
[ 95.548386][ T6255] ? tun_get+0x191/0x370
[ 95.548396][ T6255] tun_chr_write_iter+0xdc/0x200
[ 95.548406][ T6255] vfs_write+0x6ac/0x1050
[ 95.548422][ T6255] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 95.548433][ T6255] ? __pfx_vfs_write+0x10/0x10
[ 95.548447][ T6255] ? find_held_lock+0x2b/0x80
[ 95.548459][ T6255] ksys_write+0x12a/0x250
[ 95.548474][ T6255] ? __pfx_ksys_write+0x10/0x10
[ 95.548491][ T6255] do_syscall_64+0x115/0x870
[ 95.548503][ T6255] ? clear_bhb_loop+0x40/0x90
[ 95.548514][ T6255] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.548525][ T6255] RIP: 0033:0x7fd72935d68e
[ 95.548533][ T6255] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 95.548543][ T6255] RSP: 002b:00007fd72a172fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 95.548555][ T6255] RAX: ffffffffffffffda RBX: 00007fd72a1736c0 RCX: 00007fd72935d68e
[ 95.548561][ T6255] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8
[ 95.548567][ T6255] RBP: 00007fd729432d6f R08: 0000000000000000 R09: 0000000000000000
[ 95.548589][ T6255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 95.548597][ T6255] R13: 00007fd729616038 R14: 00007fd729615fa0 R15: 00007ffe06369658
[ 95.548606][ T6255]
[ 95.634366][ T6259] BUG: Bad page state in process syz.0.18 pfn:2700a
[ 95.636551][ T6259] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x2700a
[ 95.639658][ T6259] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 95.641916][ T6259] raw: 00fff00000000000 dead000000000040 ffff888023171000 0000000000000000
[ 95.644644][ T6259] raw: ffff888000000000 3fffffffffffffff 00000000ffffffff 0000000000000000
[ 95.647278][ T6259] page dumped because: page_pool leak
[ 95.648873][ T6259] page_owner tracks the page as allocated
[ 95.650623][ T6259] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6259, tgid 6258 (syz.0.18), ts 95634329300, free_ts 93194752529
[ 95.655749][ T6259] post_alloc_hook+0xfd/0x120
[ 95.657268][ T6259] get_page_from_freelist+0xf48/0x3530
[ 95.658969][ T6259] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 95.660817][ T6259] alloc_pages_bulk_noprof+0x5de/0x13c0
[ 95.662548][ T6259] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 95.664491][ T6259] page_pool_alloc_netmems+0xc4/0x1a0
[ 95.666166][ T6259] page_pool_alloc_frag_netmem+0x21d/0xa10
[ 95.668013][ T6259] skb_pp_cow_data+0x507/0x1140
[ 95.669547][ T6259] skb_cow_data_for_xdp+0x88/0xb0
[ 95.671124][ T6259] do_xdp_generic+0x56b/0x12c0
[ 95.672634][ T6259] tun_get_user+0x1c1c/0x3c20
[ 95.674154][ T6259] tun_chr_write_iter+0xdc/0x200
[ 95.675711][ T6259] vfs_write+0x6ac/0x1050
[ 95.677120][ T6259] ksys_write+0x12a/0x250
[ 95.678486][ T6259] do_syscall_64+0x115/0x870
[ 95.679943][ T6259] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.681799][ T6259] page last free pid 23 tgid 23 stack trace:
[ 95.683702][ T6259] __free_frozen_pages+0x79f/0x1090
[ 95.685306][ T6259] tlb_remove_table_rcu+0x2cf/0x380
[ 95.687011][ T6259] rcu_core+0x5a2/0x10d0
[ 95.688367][ T6259] handle_softirqs+0x1ea/0x9b0
[ 95.689891][ T6259] run_ksoftirqd+0x38/0x60
[ 95.691307][ T6259] smpboot_thread_fn+0x3d3/0xaa0
[ 95.692820][ T6259] kthread+0x370/0x450
[ 95.694154][ T6259] ret_from_fork+0x72b/0xd50
[ 95.695612][ T6259] ret_from_fork_asm+0x1a/0x30
[ 95.697137][ T6259] Modules linked in:
[ 95.698376][ T6259] CPU: 2 UID: 0 PID: 6259 Comm: syz.0.18 Tainted: G B syzkaller #0 PREEMPT(full)
[ 95.698392][ T6259] Tainted: [B]=BAD_PAGE
[ 95.698396][ T6259] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 95.698402][ T6259] Call Trace:
[ 95.698406][ T6259]
[ 95.698411][ T6259] dump_stack_lvl+0x100/0x190
[ 95.698424][ T6259] bad_page.cold+0xbe/0xdf
[ 95.698441][ T6259] ? __pfx_bad_page+0x10/0x10
[ 95.698453][ T6259] ? page_bad_reason+0x98/0x200
[ 95.698465][ T6259] __free_frozen_pages+0x7d1/0x1090
[ 95.698481][ T6259] ? trace_irq_enable.constprop.0+0x122/0x160
[ 95.698497][ T6259] page_frag_free+0x199/0x1f0
[ 95.698509][ T6259] __xdp_return+0x3b6/0x990
[ 95.698520][ T6259] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 95.698532][ T6259] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 95.698541][ T6259] bpf_prog_run_generic_xdp+0x614/0x1610
[ 95.698556][ T6259] do_xdp_generic+0x92e/0x12c0
[ 95.698567][ T6259] ? __pfx_do_xdp_generic+0x10/0x10
[ 95.698583][ T6259] tun_get_user+0x1c1c/0x3c20
[ 95.698595][ T6259] ? futex_hash+0x311/0x400
[ 95.698608][ T6259] ? lock_release+0x24d/0x310
[ 95.698620][ T6259] ? __pfx_tun_get_user+0x10/0x10
[ 95.698631][ T6259] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 95.698649][ T6259] ? tun_get+0x191/0x370
[ 95.698657][ T6259] ? rcu_is_watching+0x12/0xc0
[ 95.698672][ T6259] ? tun_get+0x191/0x370
[ 95.698680][ T6259] ? lock_release+0x24d/0x310
[ 95.698693][ T6259] tun_chr_write_iter+0xdc/0x200
[ 95.698704][ T6259] vfs_write+0x6ac/0x1050
[ 95.698719][ T6259] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 95.698730][ T6259] ? __pfx_vfs_write+0x10/0x10
[ 95.698746][ T6259] ? lock_release+0x24d/0x310
[ 95.698761][ T6259] ksys_write+0x12a/0x250
[ 95.698776][ T6259] ? __pfx_ksys_write+0x10/0x10
[ 95.698792][ T6259] ? rcu_is_watching+0x12/0xc0
[ 95.698807][ T6259] do_syscall_64+0x115/0x870
[ 95.698821][ T6259] ? clear_bhb_loop+0x40/0x90
[ 95.698832][ T6259] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.698843][ T6259] RIP: 0033:0x7fd72935d68e
[ 95.698852][ T6259] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 95.698863][ T6259] RSP: 002b:00007fd72a172fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 95.698873][ T6259] RAX: ffffffffffffffda RBX: 00007fd72a1736c0 RCX: 00007fd72935d68e
[ 95.698880][ T6259] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8
[ 95.698887][ T6259] RBP: 00007fd729432d6f R08: 0000000000000000 R09: 0000000000000000
[ 95.698893][ T6259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 95.698899][ T6259] R13: 00007fd729616038 R14: 00007fd729615fa0 R15: 00007ffe06369658
[ 95.698908][ T6259]
[ 95.698916][ T6259] BUG: Bad page state in process syz.0.18 pfn:35757
[ 95.783920][ T6259] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x35757
[ 95.786649][ T6259] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 95.788811][ T6259] raw: 00fff00000000000 dead000000000040 ffff888023171000 0000000000000000
[ 95.791608][ T6259] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000
[ 95.794998][ T6259] page dumped because: page_pool leak
[ 95.797228][ T6259] page_owner tracks the page as allocated
[ 95.799125][ T6259] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6259, tgid 6258 (syz.0.18), ts 95634323995, free_ts 93194757361
[ 95.804602][ T6259] post_alloc_hook+0xfd/0x120
[ 95.806480][ T6259] get_page_from_freelist+0xf48/0x3530
[ 95.808402][ T6259] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 95.810387][ T6259] alloc_pages_bulk_noprof+0x5de/0x13c0
[ 95.812064][ T6259] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 95.814017][ T6259] page_pool_alloc_netmems+0xc4/0x1a0
[ 95.815726][ T6259] skb_pp_cow_data+0x975/0x1140
[ 95.817513][ T6259] skb_cow_data_for_xdp+0x88/0xb0
[ 95.819120][ T6259] do_xdp_generic+0x56b/0x12c0
[ 95.820636][ T6259] tun_get_user+0x1c1c/0x3c20
[ 95.822085][ T6259] tun_chr_write_iter+0xdc/0x200
[ 95.823680][ T6259] vfs_write+0x6ac/0x1050
[ 95.825262][ T6259] ksys_write+0x12a/0x250
[ 95.826961][ T6259] do_syscall_64+0x115/0x870
[ 95.828619][ T6259] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.830682][ T6259] page last free pid 23 tgid 23 stack trace:
[ 95.832535][ T6259] __free_frozen_pages+0x79f/0x1090
[ 95.834236][ T6259] tlb_remove_table_rcu+0x2cf/0x380
[ 95.835856][ T6259] rcu_core+0x5a2/0x10d0
[ 95.837221][ T6259] handle_softirqs+0x1ea/0x9b0
[ 95.838743][ T6259] run_ksoftirqd+0x38/0x60
[ 95.840138][ T6259] smpboot_thread_fn+0x3d3/0xaa0
[ 95.841768][ T6259] kthread+0x370/0x450
[ 95.843360][ T6259] ret_from_fork+0x72b/0xd50
[ 95.845174][ T6259] ret_from_fork_asm+0x1a/0x30
[ 95.847029][ T6259] Modules linked in:
[ 95.848620][ T6259] CPU: 2 UID: 0 PID: 6259 Comm: syz.0.18 Tainted: G B syzkaller #0 PREEMPT(full)
[ 95.848655][ T6259] Tainted: [B]=BAD_PAGE
[ 95.848662][ T6259] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 95.848671][ T6259] Call Trace:
[ 95.848677][ T6259]
[ 95.848684][ T6259] dump_stack_lvl+0x100/0x190
[ 95.848704][ T6259] bad_page.cold+0xbe/0xdf
[ 95.848726][ T6259] ? __pfx_bad_page+0x10/0x10
[ 95.848744][ T6259] ? page_bad_reason+0x98/0x200
[ 95.848761][ T6259] __free_frozen_pages+0x7d1/0x1090
[ 95.848783][ T6259] ? trace_irq_enable.constprop.0+0x122/0x160
[ 95.848806][ T6259] page_frag_free+0x199/0x1f0
[ 95.848824][ T6259] __xdp_return+0x3b6/0x990
[ 95.848841][ T6259] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 95.848861][ T6259] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 95.848874][ T6259] bpf_prog_run_generic_xdp+0x614/0x1610
[ 95.848897][ T6259] do_xdp_generic+0x92e/0x12c0
[ 95.848913][ T6259] ? __pfx_do_xdp_generic+0x10/0x10
[ 95.848939][ T6259] tun_get_user+0x1c1c/0x3c20
[ 95.848960][ T6259] ? futex_hash+0x311/0x400
[ 95.848980][ T6259] ? lock_release+0x24d/0x310
[ 95.849000][ T6259] ? __pfx_tun_get_user+0x10/0x10
[ 95.849014][ T6259] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 95.849043][ T6259] ? tun_get+0x191/0x370
[ 95.849056][ T6259] ? rcu_is_watching+0x12/0xc0
[ 95.849081][ T6259] ? tun_get+0x191/0x370
[ 95.849093][ T6259] ? lock_release+0x24d/0x310
[ 95.849115][ T6259] tun_chr_write_iter+0xdc/0x200
[ 95.849132][ T6259] vfs_write+0x6ac/0x1050
[ 95.849158][ T6259] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 95.849175][ T6259] ? __pfx_vfs_write+0x10/0x10
[ 95.849200][ T6259] ? lock_release+0x24d/0x310
[ 95.849222][ T6259] ksys_write+0x12a/0x250
[ 95.849246][ T6259] ? __pfx_ksys_write+0x10/0x10
[ 95.849271][ T6259] ? rcu_is_watching+0x12/0xc0
[ 95.849295][ T6259] do_syscall_64+0x115/0x870
[ 95.849315][ T6259] ? clear_bhb_loop+0x40/0x90
[ 95.849339][ T6259] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.849356][ T6259] RIP: 0033:0x7fd72935d68e
[ 95.849368][ T6259] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 95.849384][ T6259] RSP: 002b:00007fd72a172fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 95.849400][ T6259] RAX: ffffffffffffffda RBX: 00007fd72a1736c0 RCX: 00007fd72935d68e
[ 95.849410][ T6259] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8
[ 95.849420][ T6259] RBP: 00007fd729432d6f R08: 0000000000000000 R09: 0000000000000000
[ 95.849430][ T6259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 95.849440][ T6259] R13: 00007fd729616038 R14: 00007fd729615fa0 R15: 00007ffe06369658
[ 95.849456][ T6259]
[ 95.849484][ T6259] BUG: Bad page state in process syz.0.18 pfn:509a7
[ 95.934919][ T6259] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880509a7000 pfn:0x509a7
[ 95.937993][ T6259] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 95.940079][ T6259] raw: 00fff00000000000 dead000000000040 ffff888023171000 0000000000000000
[ 95.942719][ T6259] raw: ffff8880509a7000 0000000000000001 00000000ffffffff 0000000000000000
[ 95.945830][ T6259] page dumped because: page_pool leak
[ 95.947570][ T6259] page_owner tracks the page as allocated
[ 95.949634][ T6259] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6259, tgid 6258 (syz.0.18), ts 95634313714, free_ts 93204301316
[ 95.954927][ T6259] post_alloc_hook+0xfd/0x120
[ 95.956387][ T6259] get_page_from_freelist+0xf48/0x3530
[ 95.958102][ T6259] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 95.959911][ T6259] alloc_pages_bulk_noprof+0x5de/0x13c0
[ 95.961578][ T6259] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 95.963450][ T6259] page_pool_alloc_netmems+0xc4/0x1a0
[ 95.965123][ T6259] skb_pp_cow_data+0x975/0x1140
[ 95.966611][ T6259] skb_cow_data_for_xdp+0x88/0xb0
[ 95.968162][ T6259] do_xdp_generic+0x56b/0x12c0
[ 95.969604][ T6259] tun_get_user+0x1c1c/0x3c20
[ 95.971028][ T6259] tun_chr_write_iter+0xdc/0x200
[ 95.972486][ T6259] vfs_write+0x6ac/0x1050
[ 95.973847][ T6259] ksys_write+0x12a/0x250
[ 95.975202][ T6259] do_syscall_64+0x115/0x870
[ 95.977054][ T6259] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.979207][ T6259] page last free pid 0 tgid 0 stack trace:
[ 95.980952][ T6259] __free_frozen_pages+0x79f/0x1090
[ 95.982550][ T6259] bio_free_pages+0x148/0x270
[ 95.984058][ T6259] bio_copy_kern_endio_read+0x6d/0x3b0
[ 95.985747][ T6259] bio_endio+0x778/0x8e0
[ 95.987184][ T6259] blk_update_request+0x741/0x1380
[ 95.988859][ T6259] scsi_end_request+0x7c/0x9b0
[ 95.990670][ T6259] scsi_io_completion+0x115/0x1540
[ 95.992197][ T6259] scsi_complete+0x406/0x5a0
[ 95.993731][ T6259] blk_complete_reqs+0xb1/0xf0
[ 95.995156][ T6259] handle_softirqs+0x1ea/0x9b0
[ 95.996620][ T6259] __irq_exit_rcu+0x162/0x210
[ 95.998077][ T6259] irq_exit_rcu+0x9/0x30
[ 95.999331][ T6259] common_interrupt+0xbe/0xe0
[ 96.000750][ T6259] asm_common_interrupt+0x26/0x40
[ 96.002320][ T6259] Modules linked in:
[ 96.003672][ T6259] CPU: 2 UID: 0 PID: 6259 Comm: syz.0.18 Tainted: G B syzkaller #0 PREEMPT(full)
[ 96.003689][ T6259] Tainted: [B]=BAD_PAGE
[ 96.003693][ T6259] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 96.003700][ T6259] Call Trace:
[ 96.003704][ T6259]
[ 96.003709][ T6259] dump_stack_lvl+0x100/0x190
[ 96.003726][ T6259] bad_page.cold+0xbe/0xdf
[ 96.003742][ T6259] ? __pfx_bad_page+0x10/0x10
[ 96.003755][ T6259] ? page_bad_reason+0x98/0x200
[ 96.003767][ T6259] __free_frozen_pages+0x7d1/0x1090
[ 96.003782][ T6259] ? trace_irq_enable.constprop.0+0x122/0x160
[ 96.003799][ T6259] page_frag_free+0x199/0x1f0
[ 96.003812][ T6259] __xdp_return+0x3b6/0x990
[ 96.003823][ T6259] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 96.003835][ T6259] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 96.003845][ T6259] bpf_prog_run_generic_xdp+0x614/0x1610
[ 96.003860][ T6259] do_xdp_generic+0x92e/0x12c0
[ 96.003871][ T6259] ? __pfx_do_xdp_generic+0x10/0x10
[ 96.003887][ T6259] tun_get_user+0x1c1c/0x3c20
[ 96.003906][ T6259] ? futex_hash+0x311/0x400
[ 96.003919][ T6259] ? lock_release+0x24d/0x310
[ 96.003932][ T6259] ? __pfx_tun_get_user+0x10/0x10
[ 96.003943][ T6259] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 96.003961][ T6259] ? tun_get+0x191/0x370
[ 96.003969][ T6259] ? rcu_is_watching+0x12/0xc0
[ 96.003984][ T6259] ? tun_get+0x191/0x370
[ 96.003992][ T6259] ? lock_release+0x24d/0x310
[ 96.004005][ T6259] tun_chr_write_iter+0xdc/0x200
[ 96.004016][ T6259] vfs_write+0x6ac/0x1050
[ 96.004033][ T6259] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 96.004043][ T6259] ? __pfx_vfs_write+0x10/0x10
[ 96.004059][ T6259] ? lock_release+0x24d/0x310
[ 96.004076][ T6259] ksys_write+0x12a/0x250
[ 96.004097][ T6259] ? __pfx_ksys_write+0x10/0x10
[ 96.004120][ T6259] ? rcu_is_watching+0x12/0xc0
[ 96.004140][ T6259] do_syscall_64+0x115/0x870
[ 96.004158][ T6259] ? clear_bhb_loop+0x40/0x90
[ 96.004175][ T6259] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.004191][ T6259] RIP: 0033:0x7fd72935d68e
[ 96.004203][ T6259] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 96.004217][ T6259] RSP: 002b:00007fd72a172fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 96.004231][ T6259] RAX: ffffffffffffffda RBX: 00007fd72a1736c0 RCX: 00007fd72935d68e
[ 96.004242][ T6259] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8
[ 96.004252][ T6259] RBP: 00007fd729432d6f R08: 0000000000000000 R09: 0000000000000000
[ 96.004262][ T6259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 96.004271][ T6259] R13: 00007fd729616038 R14: 00007fd729615fa0 R15: 00007ffe06369658
[ 96.004284][ T6259]
[ 96.004296][ T6259] BUG: Bad page state in process syz.0.18 pfn:56bff
[ 96.091317][ T6259] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x56bff
[ 96.094949][ T6259] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 96.097399][ T6259] raw: 00fff00000000000 dead000000000040 ffff888023171000 0000000000000000
[ 96.100371][ T6259] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000
[ 96.103426][ T6259] page dumped because: page_pool leak
[ 96.105440][ T6259] page_owner tracks the page as allocated
[ 96.107444][ T6259] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6259, tgid 6258 (syz.0.18), ts 95634309275, free_ts 93223859709
[ 96.112804][ T6259] post_alloc_hook+0xfd/0x120
[ 96.114360][ T6259] get_page_from_freelist+0xf48/0x3530
[ 96.116336][ T6259] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 96.118221][ T6259] alloc_pages_bulk_noprof+0x5de/0x13c0
[ 96.119858][ T6259] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 96.121656][ T6259] page_pool_alloc_netmems+0xc4/0x1a0
[ 96.123252][ T6259] skb_pp_cow_data+0x975/0x1140
[ 96.124747][ T6259] skb_cow_data_for_xdp+0x88/0xb0
[ 96.126306][ T6259] do_xdp_generic+0x56b/0x12c0
[ 96.127732][ T6259] tun_get_user+0x1c1c/0x3c20
[ 96.129120][ T6259] tun_chr_write_iter+0xdc/0x200
[ 96.130564][ T6259] vfs_write+0x6ac/0x1050
[ 96.131850][ T6259] ksys_write+0x12a/0x250
[ 96.133157][ T6259] do_syscall_64+0x115/0x870
[ 96.134573][ T6259] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.136311][ T6259] page last free pid 0 tgid 0 stack trace:
[ 96.138025][ T6259] __free_frozen_pages+0x79f/0x1090
[ 96.139543][ T6259] tlb_remove_table_rcu+0x2cf/0x380
[ 96.141087][ T6259] rcu_core+0x5a2/0x10d0
[ 96.142351][ T6259] handle_softirqs+0x1ea/0x9b0
[ 96.143864][ T6259] __irq_exit_rcu+0x162/0x210
[ 96.145298][ T6259] irq_exit_rcu+0x9/0x30
[ 96.146582][ T6259] sysvec_apic_timer_interrupt+0xa3/0xc0
[ 96.148235][ T6259] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 96.149990][ T6259] Modules linked in:
[ 96.151153][ T6259] CPU: 2 UID: 0 PID: 6259 Comm: syz.0.18 Tainted: G B syzkaller #0 PREEMPT(full)
[ 96.151170][ T6259] Tainted: [B]=BAD_PAGE
[ 96.151174][ T6259] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 96.151181][ T6259] Call Trace:
[ 96.151185][ T6259]
[ 96.151190][ T6259] dump_stack_lvl+0x100/0x190
[ 96.151205][ T6259] bad_page.cold+0xbe/0xdf
[ 96.151220][ T6259] ? __pfx_bad_page+0x10/0x10
[ 96.151233][ T6259] ? page_bad_reason+0x98/0x200
[ 96.151244][ T6259] __free_frozen_pages+0x7d1/0x1090
[ 96.151261][ T6259] ? trace_irq_enable.constprop.0+0x122/0x160
[ 96.151276][ T6259] page_frag_free+0x199/0x1f0
[ 96.151288][ T6259] __xdp_return+0x3b6/0x990
[ 96.151300][ T6259] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 96.151313][ T6259] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 96.151322][ T6259] bpf_prog_run_generic_xdp+0x614/0x1610
[ 96.151338][ T6259] do_xdp_generic+0x92e/0x12c0
[ 96.151349][ T6259] ? __pfx_do_xdp_generic+0x10/0x10
[ 96.151364][ T6259] tun_get_user+0x1c1c/0x3c20
[ 96.151377][ T6259] ? futex_hash+0x311/0x400
[ 96.151390][ T6259] ? lock_release+0x24d/0x310
[ 96.151403][ T6259] ? __pfx_tun_get_user+0x10/0x10
[ 96.151414][ T6259] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 96.151432][ T6259] ? tun_get+0x191/0x370
[ 96.151441][ T6259] ? rcu_is_watching+0x12/0xc0
[ 96.151456][ T6259] ? tun_get+0x191/0x370
[ 96.151463][ T6259] ? lock_release+0x24d/0x310
[ 96.151477][ T6259] tun_chr_write_iter+0xdc/0x200
[ 96.151487][ T6259] vfs_write+0x6ac/0x1050
[ 96.151503][ T6259] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 96.151514][ T6259] ? __pfx_vfs_write+0x10/0x10
[ 96.151530][ T6259] ? lock_release+0x24d/0x310
[ 96.151545][ T6259] ksys_write+0x12a/0x250
[ 96.151560][ T6259] ? __pfx_ksys_write+0x10/0x10
[ 96.151576][ T6259] ? rcu_is_watching+0x12/0xc0
[ 96.151591][ T6259] do_syscall_64+0x115/0x870
[ 96.151604][ T6259] ? clear_bhb_loop+0x40/0x90
[ 96.151615][ T6259] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.151626][ T6259] RIP: 0033:0x7fd72935d68e
[ 96.151635][ T6259] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 96.151645][ T6259] RSP: 002b:00007fd72a172fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 96.151655][ T6259] RAX: ffffffffffffffda RBX: 00007fd72a1736c0 RCX: 00007fd72935d68e
[ 96.151662][ T6259] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8
[ 96.151668][ T6259] RBP: 00007fd729432d6f R08: 0000000000000000 R09: 0000000000000000
[ 96.151674][ T6259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 96.151679][ T6259] R13: 00007fd729616038 R14: 00007fd729615fa0 R15: 00007ffe06369658
[ 96.151689][ T6259]
[ 96.151698][ T6259] BUG: Bad page state in process syz.0.18 pfn:277d4
[ 96.235023][ T6259] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x277d4
[ 96.237906][ T6259] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 96.239973][ T6259] raw: 00fff00000000000 dead000000000040 ffff888023171000 0000000000000000
[ 96.242492][ T6259] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000
[ 96.245077][ T6259] page dumped because: page_pool leak
[ 96.246687][ T6259] page_owner tracks the page as allocated
[ 96.248344][ T6259] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6259, tgid 6258 (syz.0.18), ts 95634305162, free_ts 93223880309
[ 96.253408][ T6259] post_alloc_hook+0xfd/0x120
[ 96.254857][ T6259] get_page_from_freelist+0xf48/0x3530
[ 96.256467][ T6259] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 96.258193][ T6259] alloc_pages_bulk_noprof+0x5de/0x13c0
[ 96.259872][ T6259] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 96.262181][ T6259] page_pool_alloc_netmems+0xc4/0x1a0
[ 96.263825][ T6259] skb_pp_cow_data+0x975/0x1140
[ 96.265286][ T6259] skb_cow_data_for_xdp+0x88/0xb0
[ 96.266794][ T6259] do_xdp_generic+0x56b/0x12c0
[ 96.268196][ T6259] tun_get_user+0x1c1c/0x3c20
[ 96.269561][ T6259] tun_chr_write_iter+0xdc/0x200
[ 96.270991][ T6259] vfs_write+0x6ac/0x1050
[ 96.272263][ T6259] ksys_write+0x12a/0x250
[ 96.273573][ T6259] do_syscall_64+0x115/0x870
[ 96.275027][ T6259] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.276822][ T6259] page last free pid 0 tgid 0 stack trace:
[ 96.278502][ T6259] __free_frozen_pages+0x79f/0x1090
[ 96.280025][ T6259] tlb_remove_table_rcu+0x2cf/0x380
[ 96.281584][ T6259] rcu_core+0x5a2/0x10d0
[ 96.282861][ T6259] handle_softirqs+0x1ea/0x9b0
[ 96.284336][ T6259] __irq_exit_rcu+0x162/0x210
[ 96.285732][ T6259] irq_exit_rcu+0x9/0x30
[ 96.287021][ T6259] sysvec_apic_timer_interrupt+0xa3/0xc0
[ 96.288645][ T6259] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 96.290322][ T6259] Modules linked in:
[ 96.291478][ T6259] CPU: 2 UID: 0 PID: 6259 Comm: syz.0.18 Tainted: G B syzkaller #0 PREEMPT(full)
[ 96.291495][ T6259] Tainted: [B]=BAD_PAGE
[ 96.291498][ T6259] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 96.291505][ T6259] Call Trace:
[ 96.291510][ T6259]
[ 96.291515][ T6259] dump_stack_lvl+0x100/0x190
[ 96.291530][ T6259] bad_page.cold+0xbe/0xdf
[ 96.291545][ T6259] ? __pfx_bad_page+0x10/0x10
[ 96.291558][ T6259] ? page_bad_reason+0x98/0x200
[ 96.291569][ T6259] __free_frozen_pages+0x7d1/0x1090
[ 96.291585][ T6259] ? trace_irq_enable.constprop.0+0x122/0x160
[ 96.291601][ T6259] page_frag_free+0x199/0x1f0
[ 96.291613][ T6259] __xdp_return+0x3b6/0x990
[ 96.291624][ T6259] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 96.291637][ T6259] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 96.291646][ T6259] bpf_prog_run_generic_xdp+0x614/0x1610
[ 96.291660][ T6259] do_xdp_generic+0x92e/0x12c0
[ 96.291672][ T6259] ? __pfx_do_xdp_generic+0x10/0x10
[ 96.291687][ T6259] tun_get_user+0x1c1c/0x3c20
[ 96.291700][ T6259] ? futex_hash+0x311/0x400
[ 96.291713][ T6259] ? lock_release+0x24d/0x310
[ 96.291725][ T6259] ? __pfx_tun_get_user+0x10/0x10
[ 96.291735][ T6259] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 96.291758][ T6259] ? tun_get+0x191/0x370
[ 96.291766][ T6259] ? rcu_is_watching+0x12/0xc0
[ 96.291781][ T6259] ? tun_get+0x191/0x370
[ 96.291789][ T6259] ? lock_release+0x24d/0x310
[ 96.291802][ T6259] tun_chr_write_iter+0xdc/0x200
[ 96.291813][ T6259] vfs_write+0x6ac/0x1050
[ 96.291829][ T6259] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 96.291840][ T6259] ? __pfx_vfs_write+0x10/0x10
[ 96.291855][ T6259] ? lock_release+0x24d/0x310
[ 96.291870][ T6259] ksys_write+0x12a/0x250
[ 96.291885][ T6259] ? __pfx_ksys_write+0x10/0x10
[ 96.291901][ T6259] ? rcu_is_watching+0x12/0xc0
[ 96.291917][ T6259] do_syscall_64+0x115/0x870
[ 96.291930][ T6259] ? clear_bhb_loop+0x40/0x90
[ 96.291941][ T6259] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.291952][ T6259] RIP: 0033:0x7fd72935d68e
[ 96.291960][ T6259] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 96.291971][ T6259] RSP: 002b:00007fd72a172fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 96.291981][ T6259] RAX: ffffffffffffffda RBX: 00007fd72a1736c0 RCX: 00007fd72935d68e
[ 96.291987][ T6259] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8
[ 96.291994][ T6259] RBP: 00007fd729432d6f R08: 0000000000000000 R09: 0000000000000000
[ 96.292000][ T6259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 96.292005][ T6259] R13: 00007fd729616038 R14: 00007fd729615fa0 R15: 00007ffe06369658
[ 96.292015][ T6259]
[ 96.292025][ T6259] BUG: Bad page state in process syz.0.18 pfn:2e64d
[ 96.376009][ T6259] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x2e64d
[ 96.378935][ T6259] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 96.380981][ T6259] raw: 00fff00000000000 dead000000000040 ffff888023171000 0000000000000000
[ 96.383468][ T6259] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000
[ 96.386023][ T6259] page dumped because: page_pool leak
[ 96.387587][ T6259] page_owner tracks the page as allocated
[ 96.389247][ T6259] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6259, tgid 6258 (syz.0.18), ts 95634300896, free_ts 95559284338
[ 96.393962][ T6259] post_alloc_hook+0xfd/0x120
[ 96.395365][ T6259] get_page_from_freelist+0xf48/0x3530
[ 96.396973][ T6259] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 96.398696][ T6259] alloc_pages_bulk_noprof+0x5de/0x13c0
[ 96.400299][ T6259] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 96.402055][ T6259] page_pool_alloc_netmems+0xc4/0x1a0
[ 96.403696][ T6259] skb_pp_cow_data+0x975/0x1140
[ 96.405135][ T6259] skb_cow_data_for_xdp+0x88/0xb0
[ 96.406662][ T6259] do_xdp_generic+0x56b/0x12c0
[ 96.408059][ T6259] tun_get_user+0x1c1c/0x3c20
[ 96.409447][ T6259] tun_chr_write_iter+0xdc/0x200
[ 96.410902][ T6259] vfs_write+0x6ac/0x1050
[ 96.412186][ T6259] ksys_write+0x12a/0x250
[ 96.413511][ T6259] do_syscall_64+0x115/0x870
[ 96.414942][ T6259] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.416685][ T6259] page last free pid 6259 tgid 6258 stack trace:
[ 96.418528][ T6259] __free_frozen_pages+0x79f/0x1090
[ 96.420046][ T6259] __kasan_populate_vmalloc+0x164/0x210
[ 96.421630][ T6259] alloc_vmap_area+0x95d/0x2bb0
[ 96.423093][ T6259] __get_vm_area_node+0x1ca/0x330
[ 96.424642][ T6259] __vmalloc_node_range_noprof+0x228/0x1630
[ 96.426392][ T6259] __vmalloc_node_noprof+0xad/0xf0
[ 96.427901][ T6259] bpf_prog_calc_tag+0x69/0x380
[ 96.429334][ T6259] bpf_check+0x536e/0xb7d0
[ 96.430648][ T6259] bpf_prog_load+0x244d/0x2fa0
[ 96.432069][ T6259] __sys_bpf+0x18dc/0x4e80
[ 96.433389][ T6259] __x64_sys_bpf+0xce/0x140
[ 96.434820][ T6259] do_syscall_64+0x115/0x870
[ 96.436210][ T6259] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.437978][ T6259] Modules linked in:
[ 96.439175][ T6259] CPU: 2 UID: 0 PID: 6259 Comm: syz.0.18 Tainted: G B syzkaller #0 PREEMPT(full)
[ 96.439191][ T6259] Tainted: [B]=BAD_PAGE
[ 96.439195][ T6259] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 96.439202][ T6259] Call Trace:
[ 96.439216][ T6259]
[ 96.439222][ T6259] dump_stack_lvl+0x100/0x190
[ 96.439237][ T6259] bad_page.cold+0xbe/0xdf
[ 96.439253][ T6259] ? __pfx_bad_page+0x10/0x10
[ 96.439265][ T6259] ? page_bad_reason+0x98/0x200
[ 96.439277][ T6259] __free_frozen_pages+0x7d1/0x1090
[ 96.439293][ T6259] ? trace_irq_enable.constprop.0+0x122/0x160
[ 96.439309][ T6259] page_frag_free+0x199/0x1f0
[ 96.439321][ T6259] __xdp_return+0x3b6/0x990
[ 96.439333][ T6259] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 96.439345][ T6259] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 96.439354][ T6259] bpf_prog_run_generic_xdp+0x614/0x1610
[ 96.439369][ T6259] do_xdp_generic+0x92e/0x12c0
[ 96.439380][ T6259] ? __pfx_do_xdp_generic+0x10/0x10
[ 96.439395][ T6259] tun_get_user+0x1c1c/0x3c20
[ 96.439409][ T6259] ? futex_hash+0x311/0x400
[ 96.439421][ T6259] ? lock_release+0x24d/0x310
[ 96.439434][ T6259] ? __pfx_tun_get_user+0x10/0x10
[ 96.439445][ T6259] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 96.439463][ T6259] ? tun_get+0x191/0x370
[ 96.439471][ T6259] ? rcu_is_watching+0x12/0xc0
[ 96.439487][ T6259] ? tun_get+0x191/0x370
[ 96.439495][ T6259] ? lock_release+0x24d/0x310
[ 96.439508][ T6259] tun_chr_write_iter+0xdc/0x200
[ 96.439518][ T6259] vfs_write+0x6ac/0x1050
[ 96.439535][ T6259] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 96.439546][ T6259] ? __pfx_vfs_write+0x10/0x10
[ 96.439561][ T6259] ? lock_release+0x24d/0x310
[ 96.439576][ T6259] ksys_write+0x12a/0x250
[ 96.439591][ T6259] ? __pfx_ksys_write+0x10/0x10
[ 96.439607][ T6259] ? rcu_is_watching+0x12/0xc0
[ 96.439623][ T6259] do_syscall_64+0x115/0x870
[ 96.439635][ T6259] ? clear_bhb_loop+0x40/0x90
[ 96.439646][ T6259] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.439657][ T6259] RIP: 0033:0x7fd72935d68e
[ 96.439667][ T6259] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 96.439678][ T6259] RSP: 002b:00007fd72a172fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 96.439689][ T6259] RAX: ffffffffffffffda RBX: 00007fd72a1736c0 RCX: 00007fd72935d68e
[ 96.439695][ T6259] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8
[ 96.439701][ T6259] RBP: 00007fd729432d6f R08: 0000000000000000 R09: 0000000000000000
[ 96.439707][ T6259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 96.439713][ T6259] R13: 00007fd729616038 R14: 00007fd729615fa0 R15: 00007ffe06369658
[ 96.439723][ T6259]
[ 96.439742][ T6259] BUG: Bad page state in process syz.0.18 pfn:2d797
[ 96.523539][ T6259] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802d797600 pfn:0x2d797
[ 96.526655][ T6259] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 96.528811][ T6259] raw: 00fff00000000000 dead000000000040 ffff888023171000 0000000000000000
[ 96.531380][ T6259] raw: ffff88802d797600 0000000000000001 00000000ffffffff 0000000000000000
[ 96.533997][ T6259] page dumped because: page_pool leak
[ 96.536006][ T6259] page_owner tracks the page as allocated
[ 96.537872][ T6259] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6259, tgid 6258 (syz.0.18), ts 95634296628, free_ts 95559306530
[ 96.542737][ T6259] post_alloc_hook+0xfd/0x120
[ 96.544229][ T6259] get_page_from_freelist+0xf48/0x3530
[ 96.545829][ T6259] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 96.547600][ T6259] alloc_pages_bulk_noprof+0x5de/0x13c0
[ 96.549250][ T6259] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 96.550999][ T6259] page_pool_alloc_netmems+0xc4/0x1a0
[ 96.552496][ T6259] skb_pp_cow_data+0x975/0x1140
[ 96.554075][ T6259] skb_cow_data_for_xdp+0x88/0xb0
[ 96.555572][ T6259] do_xdp_generic+0x56b/0x12c0
[ 96.557057][ T6259] tun_get_user+0x1c1c/0x3c20
[ 96.558455][ T6259] tun_chr_write_iter+0xdc/0x200
[ 96.559941][ T6259] vfs_write+0x6ac/0x1050
[ 96.561233][ T6259] ksys_write+0x12a/0x250
[ 96.562609][ T6259] do_syscall_64+0x115/0x870
[ 96.564083][ T6259] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.565847][ T6259] page last free pid 6259 tgid 6258 stack trace:
[ 96.567752][ T6259] free_pages_prepare+0x586/0xd80
[ 96.569247][ T6259] __free_contig_range_common+0x14f/0x250
[ 96.570988][ T6259] free_pages_bulk+0x12a/0x200
[ 96.572394][ T6259] vm_area_free_pages+0xad/0x2b0
[ 96.573915][ T6259] vfree+0x107/0x750
[ 96.575086][ T6259] bpf_prog_calc_tag+0x2ff/0x380
[ 96.576541][ T6259] bpf_check+0x536e/0xb7d0
[ 96.577901][ T6259] bpf_prog_load+0x244d/0x2fa0
[ 96.579320][ T6259] __sys_bpf+0x18dc/0x4e80
[ 96.580636][ T6259] __x64_sys_bpf+0xce/0x140
[ 96.582070][ T6259] do_syscall_64+0x115/0x870
[ 96.583525][ T6259] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.585391][ T6259] Modules linked in:
[ 96.586576][ T6259] CPU: 2 UID: 0 PID: 6259 Comm: syz.0.18 Tainted: G B syzkaller #0 PREEMPT(full)
[ 96.586592][ T6259] Tainted: [B]=BAD_PAGE
[ 96.586595][ T6259] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 96.586602][ T6259] Call Trace:
[ 96.586606][ T6259]
[ 96.586611][ T6259] dump_stack_lvl+0x100/0x190
[ 96.586628][ T6259] bad_page.cold+0xbe/0xdf
[ 96.586644][ T6259] ? __pfx_bad_page+0x10/0x10
[ 96.586657][ T6259] ? page_bad_reason+0x98/0x200
[ 96.586669][ T6259] __free_frozen_pages+0x7d1/0x1090
[ 96.586685][ T6259] ? trace_irq_enable.constprop.0+0x122/0x160
[ 96.586701][ T6259] page_frag_free+0x199/0x1f0
[ 96.586714][ T6259] __xdp_return+0x3b6/0x990
[ 96.586728][ T6259] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 96.586747][ T6259] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 96.586760][ T6259] bpf_prog_run_generic_xdp+0x614/0x1610
[ 96.586779][ T6259] do_xdp_generic+0x92e/0x12c0
[ 96.586795][ T6259] ? __pfx_do_xdp_generic+0x10/0x10
[ 96.586816][ T6259] tun_get_user+0x1c1c/0x3c20
[ 96.586830][ T6259] ? futex_hash+0x311/0x400
[ 96.586842][ T6259] ? lock_release+0x24d/0x310
[ 96.586856][ T6259] ? __pfx_tun_get_user+0x10/0x10
[ 96.586866][ T6259] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 96.586890][ T6259] ? tun_get+0x191/0x370
[ 96.586898][ T6259] ? rcu_is_watching+0x12/0xc0
[ 96.586914][ T6259] ? tun_get+0x191/0x370
[ 96.586921][ T6259] ? lock_release+0x24d/0x310
[ 96.586934][ T6259] tun_chr_write_iter+0xdc/0x200
[ 96.586946][ T6259] vfs_write+0x6ac/0x1050
[ 96.586962][ T6259] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 96.586973][ T6259] ? __pfx_vfs_write+0x10/0x10
[ 96.586989][ T6259] ? lock_release+0x24d/0x310
[ 96.587003][ T6259] ksys_write+0x12a/0x250
[ 96.587019][ T6259] ? __pfx_ksys_write+0x10/0x10
[ 96.587035][ T6259] ? rcu_is_watching+0x12/0xc0
[ 96.587050][ T6259] do_syscall_64+0x115/0x870
[ 96.587063][ T6259] ? clear_bhb_loop+0x40/0x90
[ 96.587074][ T6259] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.587085][ T6259] RIP: 0033:0x7fd72935d68e
[ 96.587094][ T6259] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 96.587104][ T6259] RSP: 002b:00007fd72a172fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 96.587115][ T6259] RAX: ffffffffffffffda RBX: 00007fd72a1736c0 RCX: 00007fd72935d68e
[ 96.587122][ T6259] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8
[ 96.587128][ T6259] RBP: 00007fd729432d6f R08: 0000000000000000 R09: 0000000000000000
[ 96.587134][ T6259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 96.587140][ T6259] R13: 00007fd729616038 R14: 00007fd729615fa0 R15: 00007ffe06369658
[ 96.587149][ T6259]
[ 96.587159][ T6259] BUG: Bad page state in process syz.0.18 pfn:2a09f
[ 96.677959][ T6259] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802a09f400 pfn:0x2a09f
[ 96.681620][ T6259] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 96.684278][ T6259] raw: 00fff00000000000 dead000000000040 ffff888023171000 0000000000000000
[ 96.687354][ T6259] raw: ffff88802a09f400 0000000000000001 00000000ffffffff 0000000000000000
[ 96.690373][ T6259] page dumped because: page_pool leak
[ 96.692420][ T6259] page_owner tracks the page as allocated
[ 96.694281][ T6259] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6259, tgid 6258 (syz.0.18), ts 95634291880, free_ts 95564574815
[ 96.699884][ T6259] post_alloc_hook+0xfd/0x120
[ 96.701646][ T6259] get_page_from_freelist+0xf48/0x3530
[ 96.703301][ T6259] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 96.705418][ T6259] alloc_pages_bulk_noprof+0x5de/0x13c0
[ 96.707405][ T6259] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 96.709640][ T6259] page_pool_alloc_netmems+0xc4/0x1a0
[ 96.711338][ T6259] skb_pp_cow_data+0x975/0x1140
[ 96.713137][ T6259] skb_cow_data_for_xdp+0x88/0xb0
[ 96.715028][ T6259] do_xdp_generic+0x56b/0x12c0
[ 96.716556][ T6259] tun_get_user+0x1c1c/0x3c20
[ 96.718332][ T6259] tun_chr_write_iter+0xdc/0x200
[ 96.719926][ T6259] vfs_write+0x6ac/0x1050
[ 96.721447][ T6259] ksys_write+0x12a/0x250
[ 96.723108][ T6259] do_syscall_64+0x115/0x870
[ 96.724785][ T6259] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.726728][ T6259] page last free pid 12 tgid 12 stack trace:
[ 96.728940][ T6259] __free_frozen_pages+0x79f/0x1090
[ 96.730633][ T6259] qlist_free_all+0x47/0xf0
[ 96.732332][ T6259] kasan_quarantine_reduce+0x1a0/0x1f0
[ 96.734319][ T6259] __kasan_slab_alloc+0x69/0x90
[ 96.735739][ T6259] kmem_cache_alloc_node_noprof+0x27d/0x6b0
[ 96.737513][ T6259] __alloc_skb+0x140/0x710
[ 96.738818][ T6259] mld_newpack.isra.0+0x18e/0xa20
[ 96.740290][ T6259] add_grhead+0x299/0x340
[ 96.741688][ T6259] add_grec+0x1389/0x1930
[ 96.743288][ T6259] mld_send_initial_cr+0x156/0x320
[ 96.745254][ T6259] ipv6_mc_dad_complete+0xa7/0x1d0
[ 96.747198][ T6259] addrconf_dad_completed+0xb55/0xff0
[ 96.749181][ T6259] addrconf_dad_work+0x83c/0x1360
[ 96.750922][ T6259] process_one_work+0xa23/0x1940
[ 96.752701][ T6259] worker_thread+0x5ef/0xe50
[ 96.754463][ T6259] kthread+0x370/0x450
[ 96.755997][ T6259] Modules linked in:
[ 96.757467][ T6259] CPU: 2 UID: 0 PID: 6259 Comm: syz.0.18 Tainted: G B syzkaller #0 PREEMPT(full)
[ 96.757484][ T6259] Tainted: [B]=BAD_PAGE
[ 96.757487][ T6259] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 96.757494][ T6259] Call Trace:
[ 96.757498][ T6259]
[ 96.757503][ T6259] dump_stack_lvl+0x100/0x190
[ 96.757520][ T6259] bad_page.cold+0xbe/0xdf
[ 96.757536][ T6259] ? __pfx_bad_page+0x10/0x10
[ 96.757549][ T6259] ? page_bad_reason+0x98/0x200
[ 96.757561][ T6259] __free_frozen_pages+0x7d1/0x1090
[ 96.757576][ T6259] ? trace_irq_enable.constprop.0+0x122/0x160
[ 96.757592][ T6259] page_frag_free+0x199/0x1f0
[ 96.757604][ T6259] __xdp_return+0x3b6/0x990
[ 96.757615][ T6259] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 96.757628][ T6259] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 96.757637][ T6259] bpf_prog_run_generic_xdp+0x614/0x1610
[ 96.757652][ T6259] do_xdp_generic+0x92e/0x12c0
[ 96.757663][ T6259] ? __pfx_do_xdp_generic+0x10/0x10
[ 96.757679][ T6259] tun_get_user+0x1c1c/0x3c20
[ 96.757692][ T6259] ? futex_hash+0x311/0x400
[ 96.757706][ T6259] ? lock_release+0x24d/0x310
[ 96.757718][ T6259] ? __pfx_tun_get_user+0x10/0x10
[ 96.757729][ T6259] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 96.757748][ T6259] ? tun_get+0x191/0x370
[ 96.757756][ T6259] ? rcu_is_watching+0x12/0xc0
[ 96.757772][ T6259] ? tun_get+0x191/0x370
[ 96.757780][ T6259] ? lock_release+0x24d/0x310
[ 96.757797][ T6259] tun_chr_write_iter+0xdc/0x200
[ 96.757808][ T6259] vfs_write+0x6ac/0x1050
[ 96.757825][ T6259] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 96.757836][ T6259] ? __pfx_vfs_write+0x10/0x10
[ 96.757851][ T6259] ? lock_release+0x24d/0x310
[ 96.757866][ T6259] ksys_write+0x12a/0x250
[ 96.757881][ T6259] ? __pfx_ksys_write+0x10/0x10
[ 96.757897][ T6259] ? rcu_is_watching+0x12/0xc0
[ 96.757913][ T6259] do_syscall_64+0x115/0x870
[ 96.757926][ T6259] ? clear_bhb_loop+0x40/0x90
[ 96.757937][ T6259] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.757948][ T6259] RIP: 0033:0x7fd72935d68e
[ 96.757957][ T6259] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 96.757968][ T6259] RSP: 002b:00007fd72a172fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 96.757978][ T6259] RAX: ffffffffffffffda RBX: 00007fd72a1736c0 RCX: 00007fd72935d68e
[ 96.757985][ T6259] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8
[ 96.757991][ T6259] RBP: 00007fd729432d6f R08: 0000000000000000 R09: 0000000000000000
[ 96.757998][ T6259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 96.758004][ T6259] R13: 00007fd729616038 R14: 00007fd729615fa0 R15: 00007ffe06369658
[ 96.758013][ T6259]
[ 96.758022][ T6259] BUG: Bad page state in process syz.0.18 pfn:2228a
[ 96.853157][ T6259] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802228af00 pfn:0x2228a
[ 96.857077][ T6259] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 96.859836][ T6259] raw: 00fff00000000000 dead000000000040 ffff888023171000 0000000000000000
[ 96.863126][ T6259] raw: ffff88802228af00 0000000000000001 00000000ffffffff 0000000000000000
[ 96.866529][ T6259] page dumped because: page_pool leak
[ 96.868612][ T6259] page_owner tracks the page as allocated
[ 96.870793][ T6259] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6259, tgid 6258 (syz.0.18), ts 95634287475, free_ts 95564612262
[ 96.877133][ T6259] post_alloc_hook+0xfd/0x120
[ 96.878970][ T6259] get_page_from_freelist+0xf48/0x3530
[ 96.881077][ T6259] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 96.883367][ T6259] alloc_pages_bulk_noprof+0x5de/0x13c0
[ 96.885627][ T6259] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 96.888049][ T6259] page_pool_alloc_netmems+0xc4/0x1a0
[ 96.890130][ T6259] skb_pp_cow_data+0x975/0x1140
[ 96.892025][ T6259] skb_cow_data_for_xdp+0x88/0xb0
[ 96.894085][ T6259] do_xdp_generic+0x56b/0x12c0
[ 96.896003][ T6259] tun_get_user+0x1c1c/0x3c20
[ 96.897871][ T6259] tun_chr_write_iter+0xdc/0x200
[ 96.899807][ T6259] vfs_write+0x6ac/0x1050
[ 96.901528][ T6259] ksys_write+0x12a/0x250
[ 96.903251][ T6259] do_syscall_64+0x115/0x870
[ 96.905127][ T6259] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.907443][ T6259] page last free pid 12 tgid 12 stack trace:
[ 96.909741][ T6259] __free_frozen_pages+0x79f/0x1090
[ 96.911811][ T6259] qlist_free_all+0x47/0xf0
[ 96.913714][ T6259] kasan_quarantine_reduce+0x1a0/0x1f0
[ 96.915859][ T6259] __kasan_slab_alloc+0x69/0x90
[ 96.917795][ T6259] kmem_cache_alloc_node_noprof+0x27d/0x6b0
[ 96.920086][ T6259] __alloc_skb+0x140/0x710
[ 96.921886][ T6259] mld_newpack.isra.0+0x18e/0xa20
[ 96.924000][ T6259] add_grhead+0x299/0x340
[ 96.925704][ T6259] add_grec+0x1389/0x1930
[ 96.927428][ T6259] mld_send_initial_cr+0x156/0x320
[ 96.929456][ T6259] ipv6_mc_dad_complete+0xa7/0x1d0
[ 96.931446][ T6259] addrconf_dad_completed+0xb55/0xff0
[ 96.933557][ T6259] addrconf_dad_work+0x83c/0x1360
[ 96.935602][ T6259] process_one_work+0xa23/0x1940
[ 96.937549][ T6259] worker_thread+0x5ef/0xe50
[ 96.939053][ T6259] kthread+0x370/0x450
[ 96.940544][ T6259] Modules linked in:
[ 96.941717][ T6259] CPU: 2 UID: 0 PID: 6259 Comm: syz.0.18 Tainted: G B syzkaller #0 PREEMPT(full)
[ 96.941734][ T6259] Tainted: [B]=BAD_PAGE
[ 96.941737][ T6259] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 96.941744][ T6259] Call Trace:
[ 96.941749][ T6259]
[ 96.941754][ T6259] dump_stack_lvl+0x100/0x190
[ 96.941769][ T6259] bad_page.cold+0xbe/0xdf
[ 96.941788][ T6259] ? __pfx_bad_page+0x10/0x10
[ 96.941801][ T6259] ? page_bad_reason+0x98/0x200
[ 96.941812][ T6259] __free_frozen_pages+0x7d1/0x1090
[ 96.941828][ T6259] ? trace_irq_enable.constprop.0+0x122/0x160
[ 96.941844][ T6259] page_frag_free+0x199/0x1f0
[ 96.941856][ T6259] __xdp_return+0x3b6/0x990
[ 96.941867][ T6259] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 96.941880][ T6259] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 96.941889][ T6259] bpf_prog_run_generic_xdp+0x614/0x1610
[ 96.941904][ T6259] do_xdp_generic+0x92e/0x12c0
[ 96.941915][ T6259] ? __pfx_do_xdp_generic+0x10/0x10
[ 96.941930][ T6259] tun_get_user+0x1c1c/0x3c20
[ 96.941943][ T6259] ? futex_hash+0x311/0x400
[ 96.941956][ T6259] ? lock_release+0x24d/0x310
[ 96.941969][ T6259] ? __pfx_tun_get_user+0x10/0x10
[ 96.941980][ T6259] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 96.941998][ T6259] ? tun_get+0x191/0x370
[ 96.942006][ T6259] ? rcu_is_watching+0x12/0xc0
[ 96.942021][ T6259] ? tun_get+0x191/0x370
[ 96.942029][ T6259] ? lock_release+0x24d/0x310
[ 96.942042][ T6259] tun_chr_write_iter+0xdc/0x200
[ 96.942053][ T6259] vfs_write+0x6ac/0x1050
[ 96.942069][ T6259] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 96.942080][ T6259] ? __pfx_vfs_write+0x10/0x10
[ 96.942096][ T6259] ? lock_release+0x24d/0x310
[ 96.942111][ T6259] ksys_write+0x12a/0x250
[ 96.942126][ T6259] ? __pfx_ksys_write+0x10/0x10
[ 96.942142][ T6259] ? rcu_is_watching+0x12/0xc0
[ 96.942158][ T6259] do_syscall_64+0x115/0x870
[ 96.942171][ T6259] ? clear_bhb_loop+0x40/0x90
[ 96.942183][ T6259] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.942194][ T6259] RIP: 0033:0x7fd72935d68e
[ 96.942203][ T6259] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 96.942213][ T6259] RSP: 002b:00007fd72a172fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 96.942224][ T6259] RAX: ffffffffffffffda RBX: 00007fd72a1736c0 RCX: 00007fd72935d68e
[ 96.942231][ T6259] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8
[ 96.942237][ T6259] RBP: 00007fd729432d6f R08: 0000000000000000 R09: 0000000000000000
[ 96.942243][ T6259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 96.942249][ T6259] R13: 00007fd729616038 R14: 00007fd729615fa0 R15: 00007ffe06369658
[ 96.942259][ T6259]
[ 96.942270][ T6259] BUG: Bad page state in process syz.0.18 pfn:3d382
[ 97.045927][ T6259] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803d382f00 pfn:0x3d382
[ 97.049740][ T6259] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 97.052418][ T6259] raw: 00fff00000000000 dead000000000040 ffff888023171000 0000000000000000
[ 97.055473][ T6259] raw: ffff88803d382f00 0000000000000001 00000000ffffffff 0000000000000000
[ 97.058235][ T6259] page dumped because: page_pool leak
[ 97.059931][ T6259] page_owner tracks the page as allocated
[ 97.062019][ T6259] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6259, tgid 6258 (syz.0.18), ts 95634283660, free_ts 95564619684
[ 97.067088][ T6259] post_alloc_hook+0xfd/0x120
[ 97.068540][ T6259] get_page_from_freelist+0xf48/0x3530
[ 97.070280][ T6259] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 97.072248][ T6259] alloc_pages_bulk_noprof+0x5de/0x13c0
[ 97.074072][ T6259] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 97.075931][ T6259] page_pool_alloc_netmems+0xc4/0x1a0
[ 97.077584][ T6259] skb_pp_cow_data+0x975/0x1140
[ 97.079193][ T6259] skb_cow_data_for_xdp+0x88/0xb0
[ 97.080764][ T6259] do_xdp_generic+0x56b/0x12c0
[ 97.082248][ T6259] tun_get_user+0x1c1c/0x3c20
[ 97.083789][ T6259] tun_chr_write_iter+0xdc/0x200
[ 97.085304][ T6259] vfs_write+0x6ac/0x1050
[ 97.086631][ T6259] ksys_write+0x12a/0x250
[ 97.088117][ T6259] do_syscall_64+0x115/0x870
[ 97.089566][ T6259] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 97.091619][ T6259] page last free pid 12 tgid 12 stack trace:
[ 97.093747][ T6259] __free_frozen_pages+0x79f/0x1090
[ 97.095657][ T6259] qlist_free_all+0x47/0xf0
[ 97.097456][ T6259] kasan_quarantine_reduce+0x1a0/0x1f0
[ 97.099413][ T6259] __kasan_slab_alloc+0x69/0x90
[ 97.101049][ T6259] kmem_cache_alloc_node_noprof+0x27d/0x6b0
[ 97.103007][ T6259] __alloc_skb+0x140/0x710
[ 97.104561][ T6259] mld_newpack.isra.0+0x18e/0xa20
[ 97.106218][ T6259] add_grhead+0x299/0x340
[ 97.107616][ T6259] add_grec+0x1389/0x1930
[ 97.109092][ T6259] mld_send_initial_cr+0x156/0x320
[ 97.110777][ T6259] ipv6_mc_dad_complete+0xa7/0x1d0
[ 97.112776][ T6259] addrconf_dad_completed+0xb55/0xff0
[ 97.114753][ T6259] addrconf_dad_work+0x83c/0x1360
[ 97.116363][ T6259] process_one_work+0xa23/0x1940
[ 97.117982][ T6259] worker_thread+0x5ef/0xe50
[ 97.119466][ T6259] kthread+0x370/0x450
[ 97.120809][ T6259] Modules linked in:
[ 97.122069][ T6259] CPU: 2 UID: 0 PID: 6259 Comm: syz.0.18 Tainted: G B syzkaller #0 PREEMPT(full)
[ 97.122086][ T6259] Tainted: [B]=BAD_PAGE
[ 97.122089][ T6259] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 97.122096][ T6259] Call Trace:
[ 97.122101][ T6259]
[ 97.122107][ T6259] dump_stack_lvl+0x100/0x190
[ 97.122122][ T6259] bad_page.cold+0xbe/0xdf
[ 97.122138][ T6259] ? __pfx_bad_page+0x10/0x10
[ 97.122152][ T6259] ? page_bad_reason+0x98/0x200
[ 97.122163][ T6259] __free_frozen_pages+0x7d1/0x1090
[ 97.122179][ T6259] ? trace_irq_enable.constprop.0+0x122/0x160
[ 97.122195][ T6259] page_frag_free+0x199/0x1f0
[ 97.122208][ T6259] __xdp_return+0x3b6/0x990
[ 97.122220][ T6259] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 97.122232][ T6259] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 97.122241][ T6259] bpf_prog_run_generic_xdp+0x614/0x1610
[ 97.122256][ T6259] do_xdp_generic+0x92e/0x12c0
[ 97.122267][ T6259] ? __pfx_do_xdp_generic+0x10/0x10
[ 97.122282][ T6259] tun_get_user+0x1c1c/0x3c20
[ 97.122298][ T6259] ? futex_hash+0x311/0x400
[ 97.122311][ T6259] ? lock_release+0x24d/0x310
[ 97.122324][ T6259] ? __pfx_tun_get_user+0x10/0x10
[ 97.122335][ T6259] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 97.122353][ T6259] ? tun_get+0x191/0x370
[ 97.122361][ T6259] ? rcu_is_watching+0x12/0xc0
[ 97.122377][ T6259] ? tun_get+0x191/0x370
[ 97.122385][ T6259] ? lock_release+0x24d/0x310
[ 97.122398][ T6259] tun_chr_write_iter+0xdc/0x200
[ 97.122408][ T6259] vfs_write+0x6ac/0x1050
[ 97.122425][ T6259] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 97.122436][ T6259] ? __pfx_vfs_write+0x10/0x10
[ 97.122451][ T6259] ? lock_release+0x24d/0x310
[ 97.122478][ T6259] ksys_write+0x12a/0x250
[ 97.122494][ T6259] ? __pfx_ksys_write+0x10/0x10
[ 97.122510][ T6259] ? rcu_is_watching+0x12/0xc0
[ 97.122525][ T6259] do_syscall_64+0x115/0x870
[ 97.122539][ T6259] ? clear_bhb_loop+0x40/0x90
[ 97.122551][ T6259] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 97.122562][ T6259] RIP: 0033:0x7fd72935d68e
[ 97.122570][ T6259] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 97.122581][ T6259] RSP: 002b:00007fd72a172fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 97.122591][ T6259] RAX: ffffffffffffffda RBX: 00007fd72a1736c0 RCX: 00007fd72935d68e
[ 97.122598][ T6259] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8
[ 97.122604][ T6259] RBP: 00007fd729432d6f R08: 0000000000000000 R09: 0000000000000000
[ 97.122610][ T6259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 97.122617][ T6259] R13: 00007fd729616038 R14: 00007fd729615fa0 R15: 00007ffe06369658
[ 97.122626][ T6259]
[ 97.122635][ T6259] BUG: Bad page state in process syz.0.18 pfn:5615a
[ 97.222278][ T6259] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805615a300 pfn:0x5615a
[ 97.226174][ T6259] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 97.228867][ T6259] raw: 00fff00000000000 dead000000000040 ffff888023171000 0000000000000000
[ 97.232136][ T6259] raw: ffff88805615a300 0000000000000001 00000000ffffffff 0000000000000000
[ 97.235482][ T6259] page dumped because: page_pool leak
[ 97.237562][ T6259] page_owner tracks the page as allocated
[ 97.239728][ T6259] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6259, tgid 6258 (syz.0.18), ts 95634279608, free_ts 95597156084
[ 97.246088][ T6259] post_alloc_hook+0xfd/0x120
[ 97.248003][ T6259] get_page_from_freelist+0xf48/0x3530
[ 97.250117][ T6259] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 97.252464][ T6259] alloc_pages_bulk_noprof+0x5de/0x13c0
[ 97.254653][ T6259] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 97.256992][ T6259] page_pool_alloc_netmems+0xc4/0x1a0
[ 97.259064][ T6259] skb_pp_cow_data+0x975/0x1140
[ 97.260976][ T6259] skb_cow_data_for_xdp+0x88/0xb0
[ 97.262955][ T6259] do_xdp_generic+0x56b/0x12c0
[ 97.264677][ T6259] tun_get_user+0x1c1c/0x3c20
[ 97.266114][ T6259] tun_chr_write_iter+0xdc/0x200
[ 97.267642][ T6259] vfs_write+0x6ac/0x1050
[ 97.269344][ T6259] ksys_write+0x12a/0x250
[ 97.271037][ T6259] do_syscall_64+0x115/0x870
[ 97.272834][ T6259] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 97.274885][ T6259] page last free pid 6260 tgid 6260 stack trace:
[ 97.276755][ T6259] __free_frozen_pages+0x79f/0x1090
[ 97.278281][ T6259] tlb_finish_mmu+0x27d/0x810
[ 97.279661][ T6259] unmap_region+0x2d9/0x3b0
[ 97.281103][ T6259] vms_complete_munmap_vmas+0xa4b/0xdd0
[ 97.282718][ T6259] do_vmi_align_munmap+0x44f/0x5f0
[ 97.283794][ T63] Bluetooth: hci0: command tx timeout
[ 97.284265][ T6259] do_vmi_munmap+0x1f8/0x3e0
[ 97.287925][ T6259] __vm_munmap+0x196/0x390
[ 97.289551][ T6259] __x64_sys_munmap+0x59/0x80
[ 97.291257][ T6259] do_syscall_64+0x115/0x870
[ 97.293083][ T6259] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 97.295422][ T6259] Modules linked in:
[ 97.296867][ T6259] CPU: 2 UID: 0 PID: 6259 Comm: syz.0.18 Tainted: G B syzkaller #0 PREEMPT(full)
[ 97.296889][ T6259] Tainted: [B]=BAD_PAGE
[ 97.296910][ T6259] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 97.296921][ T6259] Call Trace:
[ 97.296927][ T6259]
[ 97.296933][ T6259] dump_stack_lvl+0x100/0x190
[ 97.296957][ T6259] bad_page.cold+0xbe/0xdf
[ 97.296982][ T6259] ? __pfx_bad_page+0x10/0x10
[ 97.297003][ T6259] ? page_bad_reason+0x98/0x200
[ 97.297022][ T6259] __free_frozen_pages+0x7d1/0x1090
[ 97.297046][ T6259] ? trace_irq_enable.constprop.0+0x122/0x160
[ 97.297072][ T6259] page_frag_free+0x199/0x1f0
[ 97.297091][ T6259] __xdp_return+0x3b6/0x990
[ 97.297109][ T6259] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 97.297129][ T6259] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 97.297143][ T6259] bpf_prog_run_generic_xdp+0x614/0x1610
[ 97.297166][ T6259] do_xdp_generic+0x92e/0x12c0
[ 97.297186][ T6259] ? __pfx_do_xdp_generic+0x10/0x10
[ 97.297210][ T6259] tun_get_user+0x1c1c/0x3c20
[ 97.297231][ T6259] ? futex_hash+0x311/0x400
[ 97.297252][ T6259] ? lock_release+0x24d/0x310
[ 97.297273][ T6259] ? __pfx_tun_get_user+0x10/0x10
[ 97.297289][ T6259] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 97.297319][ T6259] ? tun_get+0x191/0x370
[ 97.297333][ T6259] ? rcu_is_watching+0x12/0xc0
[ 97.297358][ T6259] ? tun_get+0x191/0x370
[ 97.297371][ T6259] ? lock_release+0x24d/0x310
[ 97.297393][ T6259] tun_chr_write_iter+0xdc/0x200
[ 97.297412][ T6259] vfs_write+0x6ac/0x1050
[ 97.297436][ T6259] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 97.297452][ T6259] ? __pfx_vfs_write+0x10/0x10
[ 97.297468][ T6259] ? lock_release+0x24d/0x310
[ 97.297483][ T6259] ksys_write+0x12a/0x250
[ 97.297498][ T6259] ? __pfx_ksys_write+0x10/0x10
[ 97.297514][ T6259] ? rcu_is_watching+0x12/0xc0
[ 97.297529][ T6259] do_syscall_64+0x115/0x870
[ 97.297543][ T6259] ? clear_bhb_loop+0x40/0x90
[ 97.297554][ T6259] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 97.297565][ T6259] RIP: 0033:0x7fd72935d68e
[ 97.297575][ T6259] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 97.297585][ T6259] RSP: 002b:00007fd72a172fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 97.297597][ T6259] RAX: ffffffffffffffda RBX: 00007fd72a1736c0 RCX: 00007fd72935d68e
[ 97.297603][ T6259] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8
[ 97.297609][ T6259] RBP: 00007fd729432d6f R08: 0000000000000000 R09: 0000000000000000
[ 97.297615][ T6259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 97.297621][ T6259] R13: 00007fd729616038 R14: 00007fd729615fa0 R15: 00007ffe06369658
[ 97.297631][ T6259]
[ 97.297655][ T6259] BUG: Bad page state in process syz.0.18 pfn:3cc59
[ 97.395888][ T6259] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803cc59800 pfn:0x3cc59
[ 97.399225][ T6259] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 97.401598][ T6259] raw: 00fff00000000000 dead000000000040 ffff888023171000 0000000000000000
[ 97.404943][ T6259] raw: ffff88803cc59800 0000000000000001 00000000ffffffff 0000000000000000
[ 97.408171][ T6259] page dumped because: page_pool leak
[ 97.410072][ T6259] page_owner tracks the page as allocated
[ 97.411898][ T6259] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6259, tgid 6258 (syz.0.18), ts 95634275331, free_ts 95604483103
[ 97.417836][ T6259] post_alloc_hook+0xfd/0x120
[ 97.419546][ T6259] get_page_from_freelist+0xf48/0x3530
[ 97.421505][ T6259] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 97.423845][ T6259] alloc_pages_bulk_noprof+0x5de/0x13c0
[ 97.425982][ T6259] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 97.428200][ T6259] page_pool_alloc_netmems+0xc4/0x1a0
[ 97.430137][ T6259] skb_pp_cow_data+0x975/0x1140
[ 97.431888][ T6259] skb_cow_data_for_xdp+0x88/0xb0
[ 97.433810][ T6259] do_xdp_generic+0x56b/0x12c0
[ 97.435452][ T6259] tun_get_user+0x1c1c/0x3c20
[ 97.437154][ T6259] tun_chr_write_iter+0xdc/0x200
[ 97.438602][ T6259] vfs_write+0x6ac/0x1050
[ 97.439913][ T6259] ksys_write+0x12a/0x250
[ 97.441204][ T6259] do_syscall_64+0x115/0x870
[ 97.442575][ T6259] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 97.444500][ T6259] page last free pid 12 tgid 12 stack trace:
[ 97.446633][ T6259] __free_frozen_pages+0x79f/0x1090
[ 97.448176][ T6259] qlist_free_all+0x47/0xf0
[ 97.449528][ T6259] kasan_quarantine_reduce+0x1a0/0x1f0
[ 97.451122][ T6259] __kasan_slab_alloc+0x69/0x90
[ 97.452862][ T6259] kmem_cache_alloc_node_noprof+0x27d/0x6b0
[ 97.455071][ T6259] __alloc_skb+0x140/0x710
[ 97.456720][ T6259] mld_newpack.isra.0+0x18e/0xa20
[ 97.458601][ T6259] add_grhead+0x299/0x340
[ 97.459965][ T6259] add_grec+0x1389/0x1930
[ 97.461277][ T6259] mld_send_initial_cr+0x156/0x320
[ 97.462816][ T6259] ipv6_mc_dad_complete+0xa7/0x1d0
[ 97.464416][ T6259] addrconf_dad_completed+0xd91/0xff0
[ 97.466022][ T6259] addrconf_dad_work+0x83c/0x1360
[ 97.467527][ T6259] process_one_work+0xa23/0x1940
[ 97.469009][ T6259] worker_thread+0x5ef/0xe50
[ 97.470400][ T6259] kthread+0x370/0x450
[ 97.471625][ T6259] Modules linked in:
[ 97.472842][ T6259] CPU: 2 UID: 0 PID: 6259 Comm: syz.0.18 Tainted: G B syzkaller #0 PREEMPT(full)
[ 97.472859][ T6259] Tainted: [B]=BAD_PAGE
[ 97.472862][ T6259] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 97.472869][ T6259] Call Trace:
[ 97.472875][ T6259]
[ 97.472880][ T6259] dump_stack_lvl+0x100/0x190
[ 97.472895][ T6259] bad_page.cold+0xbe/0xdf
[ 97.472911][ T6259] ? __pfx_bad_page+0x10/0x10
[ 97.472924][ T6259] ? page_bad_reason+0x98/0x200
[ 97.472936][ T6259] __free_frozen_pages+0x7d1/0x1090
[ 97.472952][ T6259] ? trace_irq_enable.constprop.0+0x122/0x160
[ 97.472968][ T6259] page_frag_free+0x199/0x1f0
[ 97.472980][ T6259] __xdp_return+0x3b6/0x990
[ 97.472992][ T6259] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 97.473004][ T6259] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 97.473013][ T6259] bpf_prog_run_generic_xdp+0x614/0x1610
[ 97.473028][ T6259] do_xdp_generic+0x92e/0x12c0
[ 97.473039][ T6259] ? __pfx_do_xdp_generic+0x10/0x10
[ 97.473055][ T6259] tun_get_user+0x1c1c/0x3c20
[ 97.473069][ T6259] ? futex_hash+0x311/0x400
[ 97.473081][ T6259] ? lock_release+0x24d/0x310
[ 97.473094][ T6259] ? __pfx_tun_get_user+0x10/0x10
[ 97.473104][ T6259] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 97.473122][ T6259] ? tun_get+0x191/0x370
[ 97.473130][ T6259] ? rcu_is_watching+0x12/0xc0
[ 97.473146][ T6259] ? tun_get+0x191/0x370
[ 97.473154][ T6259] ? lock_release+0x24d/0x310
[ 97.473167][ T6259] tun_chr_write_iter+0xdc/0x200
[ 97.473178][ T6259] vfs_write+0x6ac/0x1050
[ 97.473195][ T6259] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 97.473206][ T6259] ? __pfx_vfs_write+0x10/0x10
[ 97.473221][ T6259] ? lock_release+0x24d/0x310
[ 97.473236][ T6259] ksys_write+0x12a/0x250
[ 97.473252][ T6259] ? __pfx_ksys_write+0x10/0x10
[ 97.473268][ T6259] ? rcu_is_watching+0x12/0xc0
[ 97.473285][ T6259] do_syscall_64+0x115/0x870
[ 97.473300][ T6259] ? clear_bhb_loop+0x40/0x90
[ 97.473311][ T6259] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 97.473322][ T6259] RIP: 0033:0x7fd72935d68e
[ 97.473332][ T6259] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 97.473343][ T6259] RSP: 002b:00007fd72a172fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 97.473354][ T6259] RAX: ffffffffffffffda RBX: 00007fd72a1736c0 RCX: 00007fd72935d68e
[ 97.473361][ T6259] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8
[ 97.473367][ T6259] RBP: 00007fd729432d6f R08: 0000000000000000 R09: 0000000000000000
[ 97.473373][ T6259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 97.473379][ T6259] R13: 00007fd729616038 R14: 00007fd729615fa0 R15: 00007ffe06369658
[ 97.473389][ T6259]
[ 97.589757][ T6264] BUG: Bad page state in process syz.0.19 pfn:27878
[ 97.591919][ T6264] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888027878000 pfn:0x27878
[ 97.595001][ T6264] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 97.597137][ T6264] raw: 00fff00000000000 dead000000000040 ffff888023173000 0000000000000000
[ 97.599712][ T6264] raw: ffff888027878000 3fffffffffffffff 00000000ffffffff 0000000000000000
[ 97.602483][ T6264] page dumped because: page_pool leak
[ 97.604348][ T6264] page_owner tracks the page as allocated
[ 97.606107][ T6264] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6264, tgid 6263 (syz.0.19), ts 97589686485, free_ts 93701163431
[ 97.611137][ T6264] post_alloc_hook+0xfd/0x120
[ 97.612548][ T6264] get_page_from_freelist+0xf48/0x3530
[ 97.614367][ T6264] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 97.616140][ T6264] alloc_pages_bulk_noprof+0x5de/0x13c0
[ 97.617783][ T6264] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 97.619716][ T6264] page_pool_alloc_netmems+0xc4/0x1a0
[ 97.621295][ T6264] page_pool_alloc_frag_netmem+0x21d/0xa10
[ 97.623260][ T6264] skb_pp_cow_data+0x507/0x1140
[ 97.625313][ T6264] skb_cow_data_for_xdp+0x88/0xb0
[ 97.627331][ T6264] do_xdp_generic+0x56b/0x12c0
[ 97.629125][ T6264] tun_get_user+0x1c1c/0x3c20
[ 97.630605][ T6264] tun_chr_write_iter+0xdc/0x200
[ 97.632054][ T6264] vfs_write+0x6ac/0x1050
2026/08/01 20:45:42 executed programs: 4
[ 97.633327][ T6264] ksys_write+0x12a/0x250
[ 97.635195][ T6264] do_syscall_64+0x115/0x870
[ 97.636957][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 97.639185][ T6264] page last free pid 6196 tgid 6196 stack trace:
[ 97.641508][ T6264] __free_frozen_pages+0x79f/0x1090
[ 97.643506][ T6264] qlist_free_all+0x47/0xf0
[ 97.645340][ T6264] kasan_quarantine_reduce+0x1a0/0x1f0
[ 97.647466][ T6264] __kasan_slab_alloc+0x69/0x90
[ 97.649385][ T6264] kmem_cache_alloc_node_noprof+0x27d/0x6b0
[ 97.651639][ T6264] __alloc_skb+0x140/0x710
[ 97.653342][ T6264] netlink_ack+0x117/0xb80
[ 97.655079][ T6264] netlink_rcv_skb+0x333/0x420
[ 97.656774][ T6264] netlink_unicast+0x585/0x850
[ 97.658584][ T6264] netlink_sendmsg+0x8b0/0xda0
[ 97.660312][ T6264] __sys_sendto+0x48b/0x4e0
[ 97.662062][ T6264] __x64_sys_sendto+0xe0/0x1c0
[ 97.664072][ T6264] do_syscall_64+0x115/0x870
[ 97.665919][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 97.668185][ T6264] Modules linked in:
[ 97.669773][ T6264] CPU: 1 UID: 0 PID: 6264 Comm: syz.0.19 Tainted: G B syzkaller #0 PREEMPT(full)
[ 97.669797][ T6264] Tainted: [B]=BAD_PAGE
[ 97.669818][ T6264] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 97.669831][ T6264] Call Trace:
[ 97.669838][ T6264]
[ 97.669846][ T6264] dump_stack_lvl+0x100/0x190
[ 97.669874][ T6264] bad_page.cold+0xbe/0xdf
[ 97.669899][ T6264] ? __pfx_bad_page+0x10/0x10
[ 97.669921][ T6264] ? page_bad_reason+0x98/0x200
[ 97.669941][ T6264] __free_frozen_pages+0x7d1/0x1090
[ 97.669968][ T6264] ? trace_irq_enable.constprop.0+0x122/0x160
[ 97.669994][ T6264] page_frag_free+0x199/0x1f0
[ 97.670012][ T6264] __xdp_return+0x3b6/0x990
[ 97.670028][ T6264] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 97.670047][ T6264] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 97.670062][ T6264] bpf_prog_run_generic_xdp+0x614/0x1610
[ 97.670086][ T6264] do_xdp_generic+0x92e/0x12c0
[ 97.670101][ T6264] ? __pfx_do_xdp_generic+0x10/0x10
[ 97.670128][ T6264] tun_get_user+0x1c1c/0x3c20
[ 97.670151][ T6264] ? futex_hash+0x311/0x400
[ 97.670174][ T6264] ? lock_release+0x24d/0x310
[ 97.670194][ T6264] ? __pfx_tun_get_user+0x10/0x10
[ 97.670213][ T6264] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 97.670243][ T6264] ? tun_get+0x191/0x370
[ 97.670259][ T6264] ? rcu_is_watching+0x12/0xc0
[ 97.670282][ T6264] ? tun_get+0x191/0x370
[ 97.670292][ T6264] ? lock_release+0x24d/0x310
[ 97.670313][ T6264] tun_chr_write_iter+0xdc/0x200
[ 97.670330][ T6264] vfs_write+0x6ac/0x1050
[ 97.670355][ T6264] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 97.670374][ T6264] ? __pfx_vfs_write+0x10/0x10
[ 97.670398][ T6264] ? lock_release+0x24d/0x310
[ 97.670419][ T6264] ksys_write+0x12a/0x250
[ 97.670444][ T6264] ? __pfx_ksys_write+0x10/0x10
[ 97.670468][ T6264] ? rcu_is_watching+0x12/0xc0
[ 97.670493][ T6264] do_syscall_64+0x115/0x870
[ 97.670513][ T6264] ? clear_bhb_loop+0x40/0x90
[ 97.670533][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 97.670548][ T6264] RIP: 0033:0x7fd72935d68e
[ 97.670563][ T6264] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 97.670581][ T6264] RSP: 002b:00007fd72a172fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 97.670598][ T6264] RAX: ffffffffffffffda RBX: 00007fd72a1736c0 RCX: 00007fd72935d68e
[ 97.670610][ T6264] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8
[ 97.670621][ T6264] RBP: 00007fd729432d6f R08: 0000000000000000 R09: 0000000000000000
[ 97.670632][ T6264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 97.670642][ T6264] R13: 00007fd729616038 R14: 00007fd729615fa0 R15: 00007ffe06369658
[ 97.670655][ T6264]
[ 97.670684][ T6264] BUG: Bad page state in process syz.0.19 pfn:3d389
[ 97.770655][ T6264] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803d389700 pfn:0x3d389
[ 97.773588][ T6264] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 97.776296][ T6264] raw: 00fff00000000000 dead000000000040 ffff888023173000 0000000000000000
[ 97.779086][ T6264] raw: ffff88803d389700 0000000000000001 00000000ffffffff 0000000000000000
[ 97.782086][ T6264] page dumped because: page_pool leak
[ 97.784101][ T6264] page_owner tracks the page as allocated
[ 97.786137][ T6264] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6264, tgid 6263 (syz.0.19), ts 97589679413, free_ts 93701202068
[ 97.791598][ T6264] post_alloc_hook+0xfd/0x120
[ 97.793093][ T6264] get_page_from_freelist+0xf48/0x3530
[ 97.794779][ T6264] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 97.796586][ T6264] alloc_pages_bulk_noprof+0x5de/0x13c0
[ 97.798533][ T6264] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 97.800631][ T6264] page_pool_alloc_netmems+0xc4/0x1a0
[ 97.802225][ T6264] skb_pp_cow_data+0x975/0x1140
[ 97.803892][ T6264] skb_cow_data_for_xdp+0x88/0xb0
[ 97.805884][ T6264] do_xdp_generic+0x56b/0x12c0
[ 97.807717][ T6264] tun_get_user+0x1c1c/0x3c20
[ 97.809528][ T6264] tun_chr_write_iter+0xdc/0x200
[ 97.811007][ T6264] vfs_write+0x6ac/0x1050
[ 97.812277][ T6264] ksys_write+0x12a/0x250
[ 97.813560][ T6264] do_syscall_64+0x115/0x870
[ 97.814984][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 97.816731][ T6264] page last free pid 6196 tgid 6196 stack trace:
[ 97.818545][ T6264] __free_frozen_pages+0x79f/0x1090
[ 97.820071][ T6264] qlist_free_all+0x47/0xf0
[ 97.821416][ T6264] kasan_quarantine_reduce+0x1a0/0x1f0
[ 97.823007][ T6264] __kasan_slab_alloc+0x69/0x90
[ 97.824482][ T6264] kmem_cache_alloc_node_noprof+0x27d/0x6b0
[ 97.826205][ T6264] __alloc_skb+0x140/0x710
[ 97.827525][ T6264] netlink_ack+0x117/0xb80
[ 97.828870][ T6264] netlink_rcv_skb+0x333/0x420
[ 97.830289][ T6264] netlink_unicast+0x585/0x850
[ 97.831692][ T6264] netlink_sendmsg+0x8b0/0xda0
[ 97.833104][ T6264] __sys_sendto+0x48b/0x4e0
[ 97.834511][ T6264] __x64_sys_sendto+0xe0/0x1c0
[ 97.835911][ T6264] do_syscall_64+0x115/0x870
[ 97.837316][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 97.839037][ T6264] Modules linked in:
[ 97.840216][ T6264] CPU: 1 UID: 0 PID: 6264 Comm: syz.0.19 Tainted: G B syzkaller #0 PREEMPT(full)
[ 97.840233][ T6264] Tainted: [B]=BAD_PAGE
[ 97.840236][ T6264] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 97.840243][ T6264] Call Trace:
[ 97.840248][ T6264]
[ 97.840254][ T6264] dump_stack_lvl+0x100/0x190
[ 97.840269][ T6264] bad_page.cold+0xbe/0xdf
[ 97.840285][ T6264] ? __pfx_bad_page+0x10/0x10
[ 97.840297][ T6264] ? page_bad_reason+0x98/0x200
[ 97.840309][ T6264] __free_frozen_pages+0x7d1/0x1090
[ 97.840325][ T6264] ? trace_irq_enable.constprop.0+0x122/0x160
[ 97.840342][ T6264] page_frag_free+0x199/0x1f0
[ 97.840354][ T6264] __xdp_return+0x3b6/0x990
[ 97.840366][ T6264] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 97.840378][ T6264] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 97.840387][ T6264] bpf_prog_run_generic_xdp+0x614/0x1610
[ 97.840401][ T6264] do_xdp_generic+0x92e/0x12c0
[ 97.840412][ T6264] ? __pfx_do_xdp_generic+0x10/0x10
[ 97.840428][ T6264] tun_get_user+0x1c1c/0x3c20
[ 97.840441][ T6264] ? futex_hash+0x311/0x400
[ 97.840453][ T6264] ? lock_release+0x24d/0x310
[ 97.840466][ T6264] ? __pfx_tun_get_user+0x10/0x10
[ 97.840477][ T6264] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 97.840496][ T6264] ? tun_get+0x191/0x370
[ 97.840504][ T6264] ? rcu_is_watching+0x12/0xc0
[ 97.840519][ T6264] ? tun_get+0x191/0x370
[ 97.840527][ T6264] ? lock_release+0x24d/0x310
[ 97.840540][ T6264] tun_chr_write_iter+0xdc/0x200
[ 97.840551][ T6264] vfs_write+0x6ac/0x1050
[ 97.840586][ T6264] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 97.840599][ T6264] ? __pfx_vfs_write+0x10/0x10
[ 97.840614][ T6264] ? lock_release+0x24d/0x310
[ 97.840629][ T6264] ksys_write+0x12a/0x250
[ 97.840644][ T6264] ? __pfx_ksys_write+0x10/0x10
[ 97.840660][ T6264] ? rcu_is_watching+0x12/0xc0
[ 97.840676][ T6264] do_syscall_64+0x115/0x870
[ 97.840689][ T6264] ? clear_bhb_loop+0x40/0x90
[ 97.840700][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 97.840711][ T6264] RIP: 0033:0x7fd72935d68e
[ 97.840720][ T6264] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 97.840731][ T6264] RSP: 002b:00007fd72a172fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 97.840742][ T6264] RAX: ffffffffffffffda RBX: 00007fd72a1736c0 RCX: 00007fd72935d68e
[ 97.840748][ T6264] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8
[ 97.840755][ T6264] RBP: 00007fd729432d6f R08: 0000000000000000 R09: 0000000000000000
[ 97.840761][ T6264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 97.840767][ T6264] R13: 00007fd729616038 R14: 00007fd729615fa0 R15: 00007ffe06369658
[ 97.840776][ T6264]
[ 97.840786][ T6264] BUG: Bad page state in process syz.0.19 pfn:2d15a
[ 97.920731][ T6264] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802d15ad00 pfn:0x2d15a
[ 97.923694][ T6264] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 97.925737][ T6264] raw: 00fff00000000000 dead000000000040 ffff888023173000 0000000000000000
[ 97.928235][ T6264] raw: ffff88802d15ad00 0000000000000001 00000000ffffffff 0000000000000000
[ 97.930719][ T6264] page dumped because: page_pool leak
[ 97.932287][ T6264] page_owner tracks the page as allocated
[ 97.934071][ T6264] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6264, tgid 6263 (syz.0.19), ts 97589672440, free_ts 93701281727
[ 97.938850][ T6264] post_alloc_hook+0xfd/0x120
[ 97.940255][ T6264] get_page_from_freelist+0xf48/0x3530
[ 97.941916][ T6264] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 97.943913][ T6264] alloc_pages_bulk_noprof+0x5de/0x13c0
[ 97.945795][ T6264] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 97.947970][ T6264] page_pool_alloc_netmems+0xc4/0x1a0
[ 97.949843][ T6264] skb_pp_cow_data+0x975/0x1140
[ 97.951644][ T6264] skb_cow_data_for_xdp+0x88/0xb0
[ 97.953469][ T6264] do_xdp_generic+0x56b/0x12c0
[ 97.955242][ T6264] tun_get_user+0x1c1c/0x3c20
[ 97.956989][ T6264] tun_chr_write_iter+0xdc/0x200
[ 97.958810][ T6264] vfs_write+0x6ac/0x1050
[ 97.960267][ T6264] ksys_write+0x12a/0x250
[ 97.961764][ T6264] do_syscall_64+0x115/0x870
[ 97.963389][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 97.965556][ T6264] page last free pid 6196 tgid 6196 stack trace:
[ 97.967814][ T6264] __free_frozen_pages+0x79f/0x1090
[ 97.969766][ T6264] qlist_free_all+0x47/0xf0
[ 97.971525][ T6264] kasan_quarantine_reduce+0x1a0/0x1f0
[ 97.973556][ T6264] __kasan_slab_alloc+0x69/0x90
[ 97.975402][ T6264] kmem_cache_alloc_node_noprof+0x27d/0x6b0
[ 97.977450][ T6264] __alloc_skb+0x140/0x710
[ 97.978800][ T6264] netlink_ack+0x117/0xb80
[ 97.980100][ T6264] netlink_rcv_skb+0x333/0x420
[ 97.981502][ T6264] netlink_unicast+0x585/0x850
[ 97.982920][ T6264] netlink_sendmsg+0x8b0/0xda0
[ 97.984707][ T6264] __sys_sendto+0x48b/0x4e0
[ 97.986299][ T6264] __x64_sys_sendto+0xe0/0x1c0
[ 97.988042][ T6264] do_syscall_64+0x115/0x870
[ 97.989628][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 97.991574][ T6264] Modules linked in:
[ 97.992962][ T6264] CPU: 1 UID: 0 PID: 6264 Comm: syz.0.19 Tainted: G B syzkaller #0 PREEMPT(full)
[ 97.992979][ T6264] Tainted: [B]=BAD_PAGE
[ 97.992983][ T6264] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 97.992990][ T6264] Call Trace:
[ 97.992995][ T6264]
[ 97.993001][ T6264] dump_stack_lvl+0x100/0x190
[ 97.993016][ T6264] bad_page.cold+0xbe/0xdf
[ 97.993032][ T6264] ? __pfx_bad_page+0x10/0x10
[ 97.993044][ T6264] ? page_bad_reason+0x98/0x200
[ 97.993056][ T6264] __free_frozen_pages+0x7d1/0x1090
[ 97.993072][ T6264] ? trace_irq_enable.constprop.0+0x122/0x160
[ 97.993088][ T6264] page_frag_free+0x199/0x1f0
[ 97.993100][ T6264] __xdp_return+0x3b6/0x990
[ 97.993112][ T6264] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 97.993125][ T6264] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 97.993134][ T6264] bpf_prog_run_generic_xdp+0x614/0x1610
[ 97.993148][ T6264] do_xdp_generic+0x92e/0x12c0
[ 97.993160][ T6264] ? __pfx_do_xdp_generic+0x10/0x10
[ 97.993175][ T6264] tun_get_user+0x1c1c/0x3c20
[ 97.993189][ T6264] ? futex_hash+0x311/0x400
[ 97.993202][ T6264] ? lock_release+0x24d/0x310
[ 97.993215][ T6264] ? __pfx_tun_get_user+0x10/0x10
[ 97.993226][ T6264] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 97.993244][ T6264] ? tun_get+0x191/0x370
[ 97.993255][ T6264] ? rcu_is_watching+0x12/0xc0
[ 97.993270][ T6264] ? tun_get+0x191/0x370
[ 97.993277][ T6264] ? lock_release+0x24d/0x310
[ 97.993291][ T6264] tun_chr_write_iter+0xdc/0x200
[ 97.993301][ T6264] vfs_write+0x6ac/0x1050
[ 97.993318][ T6264] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 97.993329][ T6264] ? __pfx_vfs_write+0x10/0x10
[ 97.993345][ T6264] ? lock_release+0x24d/0x310
[ 97.993359][ T6264] ksys_write+0x12a/0x250
[ 97.993374][ T6264] ? __pfx_ksys_write+0x10/0x10
[ 97.993390][ T6264] ? rcu_is_watching+0x12/0xc0
[ 97.993406][ T6264] do_syscall_64+0x115/0x870
[ 97.993418][ T6264] ? clear_bhb_loop+0x40/0x90
[ 97.993430][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 97.993441][ T6264] RIP: 0033:0x7fd72935d68e
[ 97.993449][ T6264] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 97.993460][ T6264] RSP: 002b:00007fd72a172fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 97.993471][ T6264] RAX: ffffffffffffffda RBX: 00007fd72a1736c0 RCX: 00007fd72935d68e
[ 97.993477][ T6264] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8
[ 97.993484][ T6264] RBP: 00007fd729432d6f R08: 0000000000000000 R09: 0000000000000000
[ 97.993490][ T6264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 97.993496][ T6264] R13: 00007fd729616038 R14: 00007fd729615fa0 R15: 00007ffe06369658
[ 97.993505][ T6264]
[ 97.993515][ T6264] BUG: Bad page state in process syz.0.19 pfn:33e35
[ 98.081959][ T6264] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888033e35000 pfn:0x33e35
[ 98.085393][ T6264] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 98.088075][ T6264] raw: 00fff00000000000 dead000000000040 ffff888023173000 0000000000000000
[ 98.090639][ T6264] raw: ffff888033e35000 0000000000000001 00000000ffffffff 0000000000000000
[ 98.093137][ T6264] page dumped because: page_pool leak
[ 98.095012][ T6264] page_owner tracks the page as allocated
[ 98.097235][ T6264] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6264, tgid 6263 (syz.0.19), ts 97589663370, free_ts 93701327462
[ 98.102224][ T6264] post_alloc_hook+0xfd/0x120
[ 98.103853][ T6264] get_page_from_freelist+0xf48/0x3530
[ 98.105622][ T6264] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 98.107477][ T6264] alloc_pages_bulk_noprof+0x5de/0x13c0
[ 98.109221][ T6264] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 98.111054][ T6264] page_pool_alloc_netmems+0xc4/0x1a0
[ 98.112706][ T6264] skb_pp_cow_data+0x975/0x1140
[ 98.114330][ T6264] skb_cow_data_for_xdp+0x88/0xb0
[ 98.115830][ T6264] do_xdp_generic+0x56b/0x12c0
[ 98.117313][ T6264] tun_get_user+0x1c1c/0x3c20
[ 98.118837][ T6264] tun_chr_write_iter+0xdc/0x200
[ 98.120403][ T6264] vfs_write+0x6ac/0x1050
[ 98.121880][ T6264] ksys_write+0x12a/0x250
[ 98.123278][ T6264] do_syscall_64+0x115/0x870
[ 98.124826][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 98.126723][ T6264] page last free pid 6196 tgid 6196 stack trace:
[ 98.128723][ T6264] __free_frozen_pages+0x79f/0x1090
[ 98.130313][ T6264] qlist_free_all+0x47/0xf0
[ 98.131720][ T6264] kasan_quarantine_reduce+0x1a0/0x1f0
[ 98.133342][ T6264] __kasan_slab_alloc+0x69/0x90
[ 98.134946][ T6264] kmem_cache_alloc_node_noprof+0x27d/0x6b0
[ 98.136815][ T6264] __alloc_skb+0x140/0x710
[ 98.138150][ T6264] netlink_ack+0x117/0xb80
[ 98.139463][ T6264] netlink_rcv_skb+0x333/0x420
[ 98.140843][ T6264] netlink_unicast+0x585/0x850
[ 98.142265][ T6264] netlink_sendmsg+0x8b0/0xda0
[ 98.143733][ T6264] __sys_sendto+0x48b/0x4e0
[ 98.145105][ T6264] __x64_sys_sendto+0xe0/0x1c0
[ 98.146525][ T6264] do_syscall_64+0x115/0x870
[ 98.147889][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 98.149619][ T6264] Modules linked in:
[ 98.150774][ T6264] CPU: 1 UID: 0 PID: 6264 Comm: syz.0.19 Tainted: G B syzkaller #0 PREEMPT(full)
[ 98.150791][ T6264] Tainted: [B]=BAD_PAGE
[ 98.150795][ T6264] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 98.150802][ T6264] Call Trace:
[ 98.150806][ T6264]
[ 98.150811][ T6264] dump_stack_lvl+0x100/0x190
[ 98.150825][ T6264] bad_page.cold+0xbe/0xdf
[ 98.150841][ T6264] ? __pfx_bad_page+0x10/0x10
[ 98.150853][ T6264] ? page_bad_reason+0x98/0x200
[ 98.150865][ T6264] __free_frozen_pages+0x7d1/0x1090
[ 98.150880][ T6264] ? trace_irq_enable.constprop.0+0x122/0x160
[ 98.150896][ T6264] page_frag_free+0x199/0x1f0
[ 98.150908][ T6264] __xdp_return+0x3b6/0x990
[ 98.150919][ T6264] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 98.150932][ T6264] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 98.150941][ T6264] bpf_prog_run_generic_xdp+0x614/0x1610
[ 98.150956][ T6264] do_xdp_generic+0x92e/0x12c0
[ 98.150967][ T6264] ? __pfx_do_xdp_generic+0x10/0x10
[ 98.150982][ T6264] tun_get_user+0x1c1c/0x3c20
[ 98.150995][ T6264] ? futex_hash+0x311/0x400
[ 98.151008][ T6264] ? lock_release+0x24d/0x310
[ 98.151022][ T6264] ? __pfx_tun_get_user+0x10/0x10
[ 98.151032][ T6264] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 98.151051][ T6264] ? tun_get+0x191/0x370
[ 98.151059][ T6264] ? rcu_is_watching+0x12/0xc0
[ 98.151074][ T6264] ? tun_get+0x191/0x370
[ 98.151082][ T6264] ? lock_release+0x24d/0x310
[ 98.151095][ T6264] tun_chr_write_iter+0xdc/0x200
[ 98.151106][ T6264] vfs_write+0x6ac/0x1050
[ 98.151122][ T6264] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 98.151133][ T6264] ? __pfx_vfs_write+0x10/0x10
[ 98.151149][ T6264] ? lock_release+0x24d/0x310
[ 98.151164][ T6264] ksys_write+0x12a/0x250
[ 98.151179][ T6264] ? __pfx_ksys_write+0x10/0x10
[ 98.151195][ T6264] ? rcu_is_watching+0x12/0xc0
[ 98.151211][ T6264] do_syscall_64+0x115/0x870
[ 98.151223][ T6264] ? clear_bhb_loop+0x40/0x90
[ 98.151234][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 98.151245][ T6264] RIP: 0033:0x7fd72935d68e
[ 98.151254][ T6264] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 98.151264][ T6264] RSP: 002b:00007fd72a172fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 98.151275][ T6264] RAX: ffffffffffffffda RBX: 00007fd72a1736c0 RCX: 00007fd72935d68e
[ 98.151281][ T6264] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8
[ 98.151288][ T6264] RBP: 00007fd729432d6f R08: 0000000000000000 R09: 0000000000000000
[ 98.151294][ T6264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 98.151299][ T6264] R13: 00007fd729616038 R14: 00007fd729615fa0 R15: 00007ffe06369658
[ 98.151308][ T6264]
[ 98.151317][ T6264] BUG: Bad page state in process syz.0.19 pfn:3d0cc
[ 98.231876][ T6264] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803d0cc000 pfn:0x3d0cc
[ 98.234840][ T6264] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 98.236881][ T6264] raw: 00fff00000000000 dead000000000040 ffff888023173000 0000000000000000
[ 98.239316][ T6264] raw: ffff88803d0cc000 0000000000000001 00000000ffffffff 0000000000000000
[ 98.241813][ T6264] page dumped because: page_pool leak
[ 98.243395][ T6264] page_owner tracks the page as allocated
[ 98.245129][ T6264] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6264, tgid 6263 (syz.0.19), ts 97589656100, free_ts 93701477849
[ 98.249809][ T6264] post_alloc_hook+0xfd/0x120
[ 98.251203][ T6264] get_page_from_freelist+0xf48/0x3530
[ 98.252810][ T6264] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 98.254583][ T6264] alloc_pages_bulk_noprof+0x5de/0x13c0
[ 98.256168][ T6264] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 98.257944][ T6264] page_pool_alloc_netmems+0xc4/0x1a0
[ 98.259507][ T6264] skb_pp_cow_data+0x975/0x1140
[ 98.260924][ T6264] skb_cow_data_for_xdp+0x88/0xb0
[ 98.262420][ T6264] do_xdp_generic+0x56b/0x12c0
[ 98.263898][ T6264] tun_get_user+0x1c1c/0x3c20
[ 98.265278][ T6264] tun_chr_write_iter+0xdc/0x200
[ 98.266768][ T6264] vfs_write+0x6ac/0x1050
[ 98.268044][ T6264] ksys_write+0x12a/0x250
[ 98.269323][ T6264] do_syscall_64+0x115/0x870
[ 98.270692][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 98.272411][ T6264] page last free pid 6196 tgid 6196 stack trace:
[ 98.274311][ T6264] __free_frozen_pages+0x79f/0x1090
[ 98.275829][ T6264] qlist_free_all+0x47/0xf0
[ 98.277217][ T6264] kasan_quarantine_reduce+0x1a0/0x1f0
[ 98.278794][ T6264] __kasan_slab_alloc+0x69/0x90
[ 98.280229][ T6264] kmem_cache_alloc_node_noprof+0x27d/0x6b0
[ 98.281951][ T6264] __alloc_skb+0x140/0x710
[ 98.283270][ T6264] netlink_ack+0x117/0xb80
[ 98.284663][ T6264] netlink_rcv_skb+0x333/0x420
[ 98.286113][ T6264] netlink_unicast+0x585/0x850
[ 98.287515][ T6264] netlink_sendmsg+0x8b0/0xda0
[ 98.288930][ T6264] __sys_sendto+0x48b/0x4e0
[ 98.290289][ T6264] __x64_sys_sendto+0xe0/0x1c0
[ 98.291700][ T6264] do_syscall_64+0x115/0x870
[ 98.293063][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 98.294859][ T6264] Modules linked in:
[ 98.296031][ T6264] CPU: 1 UID: 0 PID: 6264 Comm: syz.0.19 Tainted: G B syzkaller #0 PREEMPT(full)
[ 98.296048][ T6264] Tainted: [B]=BAD_PAGE
[ 98.296052][ T6264] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 98.296058][ T6264] Call Trace:
[ 98.296063][ T6264]
[ 98.296067][ T6264] dump_stack_lvl+0x100/0x190
[ 98.296082][ T6264] bad_page.cold+0xbe/0xdf
[ 98.296098][ T6264] ? __pfx_bad_page+0x10/0x10
[ 98.296111][ T6264] ? page_bad_reason+0x98/0x200
[ 98.296123][ T6264] __free_frozen_pages+0x7d1/0x1090
[ 98.296139][ T6264] ? trace_irq_enable.constprop.0+0x122/0x160
[ 98.296156][ T6264] page_frag_free+0x199/0x1f0
[ 98.296168][ T6264] __xdp_return+0x3b6/0x990
[ 98.296179][ T6264] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 98.296192][ T6264] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 98.296201][ T6264] bpf_prog_run_generic_xdp+0x614/0x1610
[ 98.296216][ T6264] do_xdp_generic+0x92e/0x12c0
[ 98.296227][ T6264] ? __pfx_do_xdp_generic+0x10/0x10
[ 98.296242][ T6264] tun_get_user+0x1c1c/0x3c20
[ 98.296255][ T6264] ? futex_hash+0x311/0x400
[ 98.296268][ T6264] ? lock_release+0x24d/0x310
[ 98.296281][ T6264] ? __pfx_tun_get_user+0x10/0x10
[ 98.296292][ T6264] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 98.296310][ T6264] ? tun_get+0x191/0x370
[ 98.296318][ T6264] ? rcu_is_watching+0x12/0xc0
[ 98.296334][ T6264] ? tun_get+0x191/0x370
[ 98.296342][ T6264] ? lock_release+0x24d/0x310
[ 98.296355][ T6264] tun_chr_write_iter+0xdc/0x200
[ 98.296366][ T6264] vfs_write+0x6ac/0x1050
[ 98.296382][ T6264] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 98.296394][ T6264] ? __pfx_vfs_write+0x10/0x10
[ 98.296409][ T6264] ? lock_release+0x24d/0x310
[ 98.296424][ T6264] ksys_write+0x12a/0x250
[ 98.296439][ T6264] ? __pfx_ksys_write+0x10/0x10
[ 98.296455][ T6264] ? rcu_is_watching+0x12/0xc0
[ 98.296471][ T6264] do_syscall_64+0x115/0x870
[ 98.296483][ T6264] ? clear_bhb_loop+0x40/0x90
[ 98.296494][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 98.296505][ T6264] RIP: 0033:0x7fd72935d68e
[ 98.296513][ T6264] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 98.296524][ T6264] RSP: 002b:00007fd72a172fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 98.296534][ T6264] RAX: ffffffffffffffda RBX: 00007fd72a1736c0 RCX: 00007fd72935d68e
[ 98.296541][ T6264] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8
[ 98.296547][ T6264] RBP: 00007fd729432d6f R08: 0000000000000000 R09: 0000000000000000
[ 98.296553][ T6264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 98.296559][ T6264] R13: 00007fd729616038 R14: 00007fd729615fa0 R15: 00007ffe06369658
[ 98.296585][ T6264]
[ 98.296594][ T6264] BUG: Bad page state in process syz.0.19 pfn:3dfe8
[ 98.377334][ T6264] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803dfe8e00 pfn:0x3dfe8
[ 98.380180][ T6264] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 98.382264][ T6264] raw: 00fff00000000000 dead000000000040 ffff888023173000 0000000000000000
[ 98.384872][ T6264] raw: ffff88803dfe8e00 0000000000000001 00000000ffffffff 0000000000000000
[ 98.387423][ T6264] page dumped because: page_pool leak
[ 98.389008][ T6264] page_owner tracks the page as allocated
[ 98.390653][ T6264] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6264, tgid 6263 (syz.0.19), ts 97589649829, free_ts 93701511306
[ 98.395589][ T6264] post_alloc_hook+0xfd/0x120
[ 98.397029][ T6264] get_page_from_freelist+0xf48/0x3530
[ 98.398649][ T6264] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 98.400379][ T6264] alloc_pages_bulk_noprof+0x5de/0x13c0
[ 98.402065][ T6264] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 98.403926][ T6264] page_pool_alloc_netmems+0xc4/0x1a0
[ 98.405535][ T6264] skb_pp_cow_data+0x975/0x1140
[ 98.407029][ T6264] skb_cow_data_for_xdp+0x88/0xb0
[ 98.408537][ T6264] do_xdp_generic+0x56b/0x12c0
[ 98.409977][ T6264] tun_get_user+0x1c1c/0x3c20
[ 98.411369][ T6264] tun_chr_write_iter+0xdc/0x200
[ 98.412822][ T6264] vfs_write+0x6ac/0x1050
[ 98.414183][ T6264] ksys_write+0x12a/0x250
[ 98.415459][ T6264] do_syscall_64+0x115/0x870
[ 98.416869][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 98.418621][ T6264] page last free pid 6196 tgid 6196 stack trace:
[ 98.420492][ T6264] __free_frozen_pages+0x79f/0x1090
[ 98.422080][ T6264] qlist_free_all+0x47/0xf0
[ 98.423510][ T6264] kasan_quarantine_reduce+0x1a0/0x1f0
[ 98.425237][ T6264] __kasan_slab_alloc+0x69/0x90
[ 98.426707][ T6264] kmem_cache_alloc_node_noprof+0x27d/0x6b0
[ 98.428436][ T6264] __alloc_skb+0x140/0x710
[ 98.429809][ T6264] netlink_ack+0x117/0xb80
[ 98.431167][ T6264] netlink_rcv_skb+0x333/0x420
[ 98.432620][ T6264] netlink_unicast+0x585/0x850
[ 98.434149][ T6264] netlink_sendmsg+0x8b0/0xda0
[ 98.435577][ T6264] __sys_sendto+0x48b/0x4e0
[ 98.436955][ T6264] __x64_sys_sendto+0xe0/0x1c0
[ 98.438362][ T6264] do_syscall_64+0x115/0x870
[ 98.439740][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 98.441517][ T6264] Modules linked in:
[ 98.442718][ T6264] CPU: 1 UID: 0 PID: 6264 Comm: syz.0.19 Tainted: G B syzkaller #0 PREEMPT(full)
[ 98.442738][ T6264] Tainted: [B]=BAD_PAGE
[ 98.442742][ T6264] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 98.442748][ T6264] Call Trace:
[ 98.442753][ T6264]
[ 98.442757][ T6264] dump_stack_lvl+0x100/0x190
[ 98.442772][ T6264] bad_page.cold+0xbe/0xdf
[ 98.442788][ T6264] ? __pfx_bad_page+0x10/0x10
[ 98.442800][ T6264] ? page_bad_reason+0x98/0x200
[ 98.442812][ T6264] __free_frozen_pages+0x7d1/0x1090
[ 98.442828][ T6264] ? trace_irq_enable.constprop.0+0x122/0x160
[ 98.442844][ T6264] page_frag_free+0x199/0x1f0
[ 98.442856][ T6264] __xdp_return+0x3b6/0x990
[ 98.442868][ T6264] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 98.442880][ T6264] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 98.442889][ T6264] bpf_prog_run_generic_xdp+0x614/0x1610
[ 98.442904][ T6264] do_xdp_generic+0x92e/0x12c0
[ 98.442915][ T6264] ? __pfx_do_xdp_generic+0x10/0x10
[ 98.442931][ T6264] tun_get_user+0x1c1c/0x3c20
[ 98.442943][ T6264] ? futex_hash+0x311/0x400
[ 98.442956][ T6264] ? lock_release+0x24d/0x310
[ 98.442968][ T6264] ? __pfx_tun_get_user+0x10/0x10
[ 98.442979][ T6264] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 98.442998][ T6264] ? tun_get+0x191/0x370
[ 98.443006][ T6264] ? rcu_is_watching+0x12/0xc0
[ 98.443021][ T6264] ? tun_get+0x191/0x370
[ 98.443029][ T6264] ? lock_release+0x24d/0x310
[ 98.443042][ T6264] tun_chr_write_iter+0xdc/0x200
[ 98.443053][ T6264] vfs_write+0x6ac/0x1050
[ 98.443069][ T6264] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 98.443080][ T6264] ? __pfx_vfs_write+0x10/0x10
[ 98.443096][ T6264] ? lock_release+0x24d/0x310
[ 98.443110][ T6264] ksys_write+0x12a/0x250
[ 98.443126][ T6264] ? __pfx_ksys_write+0x10/0x10
[ 98.443142][ T6264] ? rcu_is_watching+0x12/0xc0
[ 98.443157][ T6264] do_syscall_64+0x115/0x870
[ 98.443170][ T6264] ? clear_bhb_loop+0x40/0x90
[ 98.443181][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 98.443191][ T6264] RIP: 0033:0x7fd72935d68e
[ 98.443200][ T6264] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 98.443211][ T6264] RSP: 002b:00007fd72a172fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 98.443221][ T6264] RAX: ffffffffffffffda RBX: 00007fd72a1736c0 RCX: 00007fd72935d68e
[ 98.443228][ T6264] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8
[ 98.443234][ T6264] RBP: 00007fd729432d6f R08: 0000000000000000 R09: 0000000000000000
[ 98.443240][ T6264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 98.443246][ T6264] R13: 00007fd729616038 R14: 00007fd729615fa0 R15: 00007ffe06369658
[ 98.443256][ T6264]
[ 98.443265][ T6264] BUG: Bad page state in process syz.0.19 pfn:50b8f
[ 98.537114][ T6264] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888050b8f000 pfn:0x50b8f
[ 98.540784][ T6264] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 98.543396][ T6264] raw: 00fff00000000000 dead000000000040 ffff888023173000 0000000000000000
[ 98.546593][ T6264] raw: ffff888050b8f000 0000000000000001 00000000ffffffff 0000000000000000
[ 98.549747][ T6264] page dumped because: page_pool leak
[ 98.551742][ T6264] page_owner tracks the page as allocated
[ 98.553928][ T6264] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6264, tgid 6263 (syz.0.19), ts 97589643120, free_ts 93701602810
[ 98.559922][ T6264] post_alloc_hook+0xfd/0x120
[ 98.561709][ T6264] get_page_from_freelist+0xf48/0x3530
[ 98.563817][ T6264] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 98.565992][ T6264] alloc_pages_bulk_noprof+0x5de/0x13c0
[ 98.568061][ T6264] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 98.570346][ T6264] page_pool_alloc_netmems+0xc4/0x1a0
[ 98.572368][ T6264] skb_pp_cow_data+0x975/0x1140
[ 98.574275][ T6264] skb_cow_data_for_xdp+0x88/0xb0
[ 98.576166][ T6264] do_xdp_generic+0x56b/0x12c0
[ 98.577990][ T6264] tun_get_user+0x1c1c/0x3c20
[ 98.579743][ T6264] tun_chr_write_iter+0xdc/0x200
[ 98.581609][ T6264] vfs_write+0x6ac/0x1050
[ 98.583257][ T6264] ksys_write+0x12a/0x250
[ 98.584972][ T6264] do_syscall_64+0x115/0x870
[ 98.586754][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 98.588981][ T6264] page last free pid 6196 tgid 6196 stack trace:
[ 98.591356][ T6264] __free_frozen_pages+0x79f/0x1090
[ 98.593341][ T6264] qlist_free_all+0x47/0xf0
[ 98.595135][ T6264] kasan_quarantine_reduce+0x1a0/0x1f0
[ 98.597196][ T6264] __kasan_slab_alloc+0x69/0x90
[ 98.599001][ T6264] kmem_cache_alloc_node_noprof+0x27d/0x6b0
[ 98.600999][ T6264] __alloc_skb+0x140/0x710
[ 98.602661][ T6264] netlink_ack+0x117/0xb80
[ 98.604391][ T6264] netlink_rcv_skb+0x333/0x420
[ 98.606184][ T6264] netlink_unicast+0x585/0x850
[ 98.607968][ T6264] netlink_sendmsg+0x8b0/0xda0
[ 98.609742][ T6264] __sys_sendto+0x48b/0x4e0
[ 98.611422][ T6264] __x64_sys_sendto+0xe0/0x1c0
[ 98.613211][ T6264] do_syscall_64+0x115/0x870
[ 98.615025][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 98.617203][ T6264] Modules linked in:
[ 98.618673][ T6264] CPU: 1 UID: 0 PID: 6264 Comm: syz.0.19 Tainted: G B syzkaller #0 PREEMPT(full)
[ 98.618697][ T6264] Tainted: [B]=BAD_PAGE
[ 98.618703][ T6264] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 98.618710][ T6264] Call Trace:
[ 98.618715][ T6264]
[ 98.618721][ T6264] dump_stack_lvl+0x100/0x190
[ 98.618748][ T6264] bad_page.cold+0xbe/0xdf
[ 98.618772][ T6264] ? __pfx_bad_page+0x10/0x10
[ 98.618790][ T6264] ? page_bad_reason+0x98/0x200
[ 98.618804][ T6264] __free_frozen_pages+0x7d1/0x1090
[ 98.618826][ T6264] ? trace_irq_enable.constprop.0+0x122/0x160
[ 98.618850][ T6264] page_frag_free+0x199/0x1f0
[ 98.618868][ T6264] __xdp_return+0x3b6/0x990
[ 98.618886][ T6264] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 98.618902][ T6264] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 98.618913][ T6264] bpf_prog_run_generic_xdp+0x614/0x1610
[ 98.618935][ T6264] do_xdp_generic+0x92e/0x12c0
[ 98.618952][ T6264] ? __pfx_do_xdp_generic+0x10/0x10
[ 98.618977][ T6264] tun_get_user+0x1c1c/0x3c20
[ 98.618995][ T6264] ? futex_hash+0x311/0x400
[ 98.619012][ T6264] ? lock_release+0x24d/0x310
[ 98.619031][ T6264] ? __pfx_tun_get_user+0x10/0x10
[ 98.619048][ T6264] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 98.619076][ T6264] ? tun_get+0x191/0x370
[ 98.619089][ T6264] ? rcu_is_watching+0x12/0xc0
[ 98.619112][ T6264] ? tun_get+0x191/0x370
[ 98.619119][ T6264] ? lock_release+0x24d/0x310
[ 98.619138][ T6264] tun_chr_write_iter+0xdc/0x200
[ 98.619154][ T6264] vfs_write+0x6ac/0x1050
[ 98.619179][ T6264] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 98.619197][ T6264] ? __pfx_vfs_write+0x10/0x10
[ 98.619217][ T6264] ? lock_release+0x24d/0x310
[ 98.619237][ T6264] ksys_write+0x12a/0x250
[ 98.619260][ T6264] ? __pfx_ksys_write+0x10/0x10
[ 98.619284][ T6264] ? rcu_is_watching+0x12/0xc0
[ 98.619307][ T6264] do_syscall_64+0x115/0x870
[ 98.619321][ T6264] ? clear_bhb_loop+0x40/0x90
[ 98.619339][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 98.619354][ T6264] RIP: 0033:0x7fd72935d68e
[ 98.619368][ T6264] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 98.619384][ T6264] RSP: 002b:00007fd72a172fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 98.619399][ T6264] RAX: ffffffffffffffda RBX: 00007fd72a1736c0 RCX: 00007fd72935d68e
[ 98.619409][ T6264] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8
[ 98.619415][ T6264] RBP: 00007fd729432d6f R08: 0000000000000000 R09: 0000000000000000
[ 98.619423][ T6264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 98.619433][ T6264] R13: 00007fd729616038 R14: 00007fd729615fa0 R15: 00007ffe06369658
[ 98.619449][ T6264]
[ 98.619461][ T6264] BUG: Bad page state in process syz.0.19 pfn:2a6d0
[ 98.712997][ T6264] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x2a6d0
[ 98.715950][ T6264] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 98.718062][ T6264] raw: 00fff00000000000 dead000000000040 ffff888023173000 0000000000000000
[ 98.720613][ T6264] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000
[ 98.723164][ T6264] page dumped because: page_pool leak
[ 98.724810][ T6264] page_owner tracks the page as allocated
[ 98.726467][ T6264] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6264, tgid 6263 (syz.0.19), ts 97589636080, free_ts 93713777365
[ 98.731480][ T6264] post_alloc_hook+0xfd/0x120
[ 98.733126][ T6264] get_page_from_freelist+0xf48/0x3530
[ 98.735146][ T6264] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 98.737255][ T6264] alloc_pages_bulk_noprof+0x5de/0x13c0
[ 98.738953][ T6264] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 98.740799][ T6264] page_pool_alloc_netmems+0xc4/0x1a0
[ 98.742702][ T6264] skb_pp_cow_data+0x975/0x1140
[ 98.744529][ T6264] skb_cow_data_for_xdp+0x88/0xb0
[ 98.746312][ T6264] do_xdp_generic+0x56b/0x12c0
[ 98.748016][ T6264] tun_get_user+0x1c1c/0x3c20
[ 98.749486][ T6264] tun_chr_write_iter+0xdc/0x200
[ 98.750997][ T6264] vfs_write+0x6ac/0x1050
[ 98.752328][ T6264] ksys_write+0x12a/0x250
[ 98.753938][ T6264] do_syscall_64+0x115/0x870
[ 98.755538][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 98.757494][ T6264] page last free pid 0 tgid 0 stack trace:
[ 98.759485][ T6264] __free_frozen_pages+0x79f/0x1090
[ 98.761107][ T6264] tlb_remove_table_rcu+0x2cf/0x380
[ 98.762982][ T6264] rcu_core+0x5a2/0x10d0
[ 98.764620][ T6264] handle_softirqs+0x1ea/0x9b0
[ 98.766297][ T6264] __irq_exit_rcu+0x162/0x210
[ 98.767981][ T6264] irq_exit_rcu+0x9/0x30
[ 98.769525][ T6264] sysvec_apic_timer_interrupt+0xa3/0xc0
[ 98.771478][ T6264] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 98.773261][ T6264] Modules linked in:
[ 98.774532][ T6264] CPU: 1 UID: 0 PID: 6264 Comm: syz.0.19 Tainted: G B syzkaller #0 PREEMPT(full)
[ 98.774549][ T6264] Tainted: [B]=BAD_PAGE
[ 98.774553][ T6264] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 98.774559][ T6264] Call Trace:
[ 98.774564][ T6264]
[ 98.774569][ T6264] dump_stack_lvl+0x100/0x190
[ 98.774585][ T6264] bad_page.cold+0xbe/0xdf
[ 98.774601][ T6264] ? __pfx_bad_page+0x10/0x10
[ 98.774614][ T6264] ? page_bad_reason+0x98/0x200
[ 98.774625][ T6264] __free_frozen_pages+0x7d1/0x1090
[ 98.774641][ T6264] ? trace_irq_enable.constprop.0+0x122/0x160
[ 98.774658][ T6264] page_frag_free+0x199/0x1f0
[ 98.774670][ T6264] __xdp_return+0x3b6/0x990
[ 98.774681][ T6264] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 98.774694][ T6264] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 98.774703][ T6264] bpf_prog_run_generic_xdp+0x614/0x1610
[ 98.774717][ T6264] do_xdp_generic+0x92e/0x12c0
[ 98.774733][ T6264] ? __pfx_do_xdp_generic+0x10/0x10
[ 98.774748][ T6264] tun_get_user+0x1c1c/0x3c20
[ 98.774761][ T6264] ? futex_hash+0x311/0x400
[ 98.774775][ T6264] ? lock_release+0x24d/0x310
[ 98.774788][ T6264] ? __pfx_tun_get_user+0x10/0x10
[ 98.774798][ T6264] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 98.774816][ T6264] ? tun_get+0x191/0x370
[ 98.774824][ T6264] ? rcu_is_watching+0x12/0xc0
[ 98.774840][ T6264] ? tun_get+0x191/0x370
[ 98.774847][ T6264] ? lock_release+0x24d/0x310
[ 98.774860][ T6264] tun_chr_write_iter+0xdc/0x200
[ 98.774871][ T6264] vfs_write+0x6ac/0x1050
[ 98.774887][ T6264] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 98.774898][ T6264] ? __pfx_vfs_write+0x10/0x10
[ 98.774914][ T6264] ? lock_release+0x24d/0x310
[ 98.774928][ T6264] ksys_write+0x12a/0x250
[ 98.774944][ T6264] ? __pfx_ksys_write+0x10/0x10
[ 98.774960][ T6264] ? rcu_is_watching+0x12/0xc0
[ 98.774976][ T6264] do_syscall_64+0x115/0x870
[ 98.774989][ T6264] ? clear_bhb_loop+0x40/0x90
[ 98.775001][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 98.775011][ T6264] RIP: 0033:0x7fd72935d68e
[ 98.775020][ T6264] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 98.775031][ T6264] RSP: 002b:00007fd72a172fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 98.775041][ T6264] RAX: ffffffffffffffda RBX: 00007fd72a1736c0 RCX: 00007fd72935d68e
[ 98.775048][ T6264] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8
[ 98.775054][ T6264] RBP: 00007fd729432d6f R08: 0000000000000000 R09: 0000000000000000
[ 98.775060][ T6264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 98.775066][ T6264] R13: 00007fd729616038 R14: 00007fd729615fa0 R15: 00007ffe06369658
[ 98.775076][ T6264]
[ 98.775084][ T6264] BUG: Bad page state in process syz.0.19 pfn:2e3cc
[ 98.855851][ T6264] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x2e3cc
[ 98.858821][ T6264] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 98.860952][ T6264] raw: 00fff00000000000 dead000000000040 ffff888023173000 0000000000000000
[ 98.863518][ T6264] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000
[ 98.866086][ T6264] page dumped because: page_pool leak
[ 98.867725][ T6264] page_owner tracks the page as allocated
[ 98.869369][ T6264] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6264, tgid 6263 (syz.0.19), ts 97589628891, free_ts 93713802696
[ 98.874177][ T6264] post_alloc_hook+0xfd/0x120
[ 98.875597][ T6264] get_page_from_freelist+0xf48/0x3530
[ 98.877242][ T6264] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 98.879004][ T6264] alloc_pages_bulk_noprof+0x5de/0x13c0
[ 98.880664][ T6264] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 98.882487][ T6264] page_pool_alloc_netmems+0xc4/0x1a0
[ 98.884124][ T6264] skb_pp_cow_data+0x975/0x1140
[ 98.885571][ T6264] skb_cow_data_for_xdp+0x88/0xb0
[ 98.887069][ T6264] do_xdp_generic+0x56b/0x12c0
[ 98.888492][ T6264] tun_get_user+0x1c1c/0x3c20
[ 98.889900][ T6264] tun_chr_write_iter+0xdc/0x200
[ 98.891379][ T6264] vfs_write+0x6ac/0x1050
[ 98.892682][ T6264] ksys_write+0x12a/0x250
[ 98.894027][ T6264] do_syscall_64+0x115/0x870
[ 98.895401][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 98.897170][ T6264] page last free pid 0 tgid 0 stack trace:
[ 98.898885][ T6264] __free_frozen_pages+0x79f/0x1090
[ 98.900402][ T6264] tlb_remove_table_rcu+0x2cf/0x380
[ 98.902003][ T6264] rcu_core+0x5a2/0x10d0
[ 98.903292][ T6264] handle_softirqs+0x1ea/0x9b0
[ 98.904804][ T6264] __irq_exit_rcu+0x162/0x210
[ 98.906182][ T6264] irq_exit_rcu+0x9/0x30
[ 98.907464][ T6264] sysvec_apic_timer_interrupt+0xa3/0xc0
[ 98.909122][ T6264] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 98.910886][ T6264] Modules linked in:
[ 98.912067][ T6264] CPU: 1 UID: 0 PID: 6264 Comm: syz.0.19 Tainted: G B syzkaller #0 PREEMPT(full)
[ 98.912083][ T6264] Tainted: [B]=BAD_PAGE
[ 98.912087][ T6264] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 98.912093][ T6264] Call Trace:
[ 98.912098][ T6264]
[ 98.912102][ T6264] dump_stack_lvl+0x100/0x190
[ 98.912117][ T6264] bad_page.cold+0xbe/0xdf
[ 98.912133][ T6264] ? __pfx_bad_page+0x10/0x10
[ 98.912145][ T6264] ? page_bad_reason+0x98/0x200
[ 98.912157][ T6264] __free_frozen_pages+0x7d1/0x1090
[ 98.912173][ T6264] ? trace_irq_enable.constprop.0+0x122/0x160
[ 98.912188][ T6264] page_frag_free+0x199/0x1f0
[ 98.912200][ T6264] __xdp_return+0x3b6/0x990
[ 98.912212][ T6264] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 98.912225][ T6264] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 98.912234][ T6264] bpf_prog_run_generic_xdp+0x614/0x1610
[ 98.912249][ T6264] do_xdp_generic+0x92e/0x12c0
[ 98.912260][ T6264] ? __pfx_do_xdp_generic+0x10/0x10
[ 98.912275][ T6264] tun_get_user+0x1c1c/0x3c20
[ 98.912289][ T6264] ? futex_hash+0x311/0x400
[ 98.912301][ T6264] ? lock_release+0x24d/0x310
[ 98.912314][ T6264] ? __pfx_tun_get_user+0x10/0x10
[ 98.912325][ T6264] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 98.912343][ T6264] ? tun_get+0x191/0x370
[ 98.912351][ T6264] ? rcu_is_watching+0x12/0xc0
[ 98.912366][ T6264] ? tun_get+0x191/0x370
[ 98.912374][ T6264] ? lock_release+0x24d/0x310
[ 98.912387][ T6264] tun_chr_write_iter+0xdc/0x200
[ 98.912398][ T6264] vfs_write+0x6ac/0x1050
[ 98.912414][ T6264] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 98.912425][ T6264] ? __pfx_vfs_write+0x10/0x10
[ 98.912440][ T6264] ? lock_release+0x24d/0x310
[ 98.912455][ T6264] ksys_write+0x12a/0x250
[ 98.912470][ T6264] ? __pfx_ksys_write+0x10/0x10
[ 98.912487][ T6264] ? rcu_is_watching+0x12/0xc0
[ 98.912502][ T6264] do_syscall_64+0x115/0x870
[ 98.912515][ T6264] ? clear_bhb_loop+0x40/0x90
[ 98.912526][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 98.912537][ T6264] RIP: 0033:0x7fd72935d68e
[ 98.912545][ T6264] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 98.912556][ T6264] RSP: 002b:00007fd72a172fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 98.912582][ T6264] RAX: ffffffffffffffda RBX: 00007fd72a1736c0 RCX: 00007fd72935d68e
[ 98.912589][ T6264] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8
[ 98.912595][ T6264] RBP: 00007fd729432d6f R08: 0000000000000000 R09: 0000000000000000
[ 98.912601][ T6264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 98.912607][ T6264] R13: 00007fd729616038 R14: 00007fd729615fa0 R15: 00007ffe06369658
[ 98.912617][ T6264]
[ 98.912625][ T6264] BUG: Bad page state in process syz.0.19 pfn:2a328
[ 98.993073][ T6264] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802a328000 pfn:0x2a328
[ 98.996013][ T6264] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 98.998089][ T6264] raw: 00fff00000000000 dead000000000040 ffff888023173000 0000000000000000
[ 99.000612][ T6264] raw: ffff88802a328000 0000000000000001 00000000ffffffff 0000000000000000
[ 99.003147][ T6264] page dumped because: page_pool leak
[ 99.004820][ T6264] page_owner tracks the page as allocated
[ 99.006501][ T6264] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6264, tgid 6263 (syz.0.19), ts 97589619823, free_ts 93713813561
[ 99.011267][ T6264] post_alloc_hook+0xfd/0x120
[ 99.012750][ T6264] get_page_from_freelist+0xf48/0x3530
[ 99.014395][ T6264] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 99.016137][ T6264] alloc_pages_bulk_noprof+0x5de/0x13c0
[ 99.017809][ T6264] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 99.019566][ T6264] page_pool_alloc_netmems+0xc4/0x1a0
[ 99.021153][ T6264] skb_pp_cow_data+0x975/0x1140
[ 99.022603][ T6264] skb_cow_data_for_xdp+0x88/0xb0
[ 99.024151][ T6264] do_xdp_generic+0x56b/0x12c0
[ 99.025569][ T6264] tun_get_user+0x1c1c/0x3c20
[ 99.026965][ T6264] tun_chr_write_iter+0xdc/0x200
[ 99.028412][ T6264] vfs_write+0x6ac/0x1050
[ 99.029697][ T6264] ksys_write+0x12a/0x250
[ 99.030980][ T6264] do_syscall_64+0x115/0x870
[ 99.032351][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 99.034158][ T6264] page last free pid 0 tgid 0 stack trace:
[ 99.035846][ T6264] __free_frozen_pages+0x79f/0x1090
[ 99.037392][ T6264] rcu_core+0x5a2/0x10d0
[ 99.038655][ T6264] handle_softirqs+0x1ea/0x9b0
[ 99.040064][ T6264] __irq_exit_rcu+0x162/0x210
[ 99.041479][ T6264] irq_exit_rcu+0x9/0x30
[ 99.042751][ T6264] sysvec_apic_timer_interrupt+0xa3/0xc0
[ 99.044461][ T6264] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 99.046229][ T6264] Modules linked in:
[ 99.047407][ T6264] CPU: 1 UID: 0 PID: 6264 Comm: syz.0.19 Tainted: G B syzkaller #0 PREEMPT(full)
[ 99.047422][ T6264] Tainted: [B]=BAD_PAGE
[ 99.047426][ T6264] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 99.047432][ T6264] Call Trace:
[ 99.047436][ T6264]
[ 99.047440][ T6264] dump_stack_lvl+0x100/0x190
[ 99.047454][ T6264] bad_page.cold+0xbe/0xdf
[ 99.047470][ T6264] ? __pfx_bad_page+0x10/0x10
[ 99.047482][ T6264] ? page_bad_reason+0x98/0x200
[ 99.047494][ T6264] __free_frozen_pages+0x7d1/0x1090
[ 99.047510][ T6264] ? trace_irq_enable.constprop.0+0x122/0x160
[ 99.047525][ T6264] page_frag_free+0x199/0x1f0
[ 99.047537][ T6264] __xdp_return+0x3b6/0x990
[ 99.047549][ T6264] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 99.047561][ T6264] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 99.047570][ T6264] bpf_prog_run_generic_xdp+0x614/0x1610
[ 99.047585][ T6264] do_xdp_generic+0x92e/0x12c0
[ 99.047596][ T6264] ? __pfx_do_xdp_generic+0x10/0x10
[ 99.047611][ T6264] tun_get_user+0x1c1c/0x3c20
[ 99.047624][ T6264] ? futex_hash+0x311/0x400
[ 99.047637][ T6264] ? lock_release+0x24d/0x310
[ 99.047650][ T6264] ? __pfx_tun_get_user+0x10/0x10
[ 99.047660][ T6264] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 99.047678][ T6264] ? tun_get+0x191/0x370
[ 99.047687][ T6264] ? rcu_is_watching+0x12/0xc0
[ 99.047702][ T6264] ? tun_get+0x191/0x370
[ 99.047710][ T6264] ? lock_release+0x24d/0x310
[ 99.047723][ T6264] tun_chr_write_iter+0xdc/0x200
[ 99.047738][ T6264] vfs_write+0x6ac/0x1050
[ 99.047754][ T6264] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 99.047765][ T6264] ? __pfx_vfs_write+0x10/0x10
[ 99.047780][ T6264] ? lock_release+0x24d/0x310
[ 99.047795][ T6264] ksys_write+0x12a/0x250
[ 99.047810][ T6264] ? __pfx_ksys_write+0x10/0x10
[ 99.047826][ T6264] ? rcu_is_watching+0x12/0xc0
[ 99.047841][ T6264] do_syscall_64+0x115/0x870
[ 99.047854][ T6264] ? clear_bhb_loop+0x40/0x90
[ 99.047865][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 99.047876][ T6264] RIP: 0033:0x7fd72935d68e
[ 99.047884][ T6264] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 99.047895][ T6264] RSP: 002b:00007fd72a172fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 99.047905][ T6264] RAX: ffffffffffffffda RBX: 00007fd72a1736c0 RCX: 00007fd72935d68e
[ 99.047912][ T6264] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8
[ 99.047918][ T6264] RBP: 00007fd729432d6f R08: 0000000000000000 R09: 0000000000000000
[ 99.047924][ T6264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 99.047931][ T6264] R13: 00007fd729616038 R14: 00007fd729615fa0 R15: 00007ffe06369658
[ 99.047940][ T6264]
[ 99.047948][ T6264] BUG: Bad page state in process syz.0.19 pfn:26e61
[ 99.128870][ T6264] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888026e612a0 pfn:0x26e61
[ 99.131724][ T6264] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 99.133865][ T6264] raw: 00fff00000000000 dead000000000040 ffff888023173000 0000000000000000
[ 99.136378][ T6264] raw: ffff888026e612a0 0000000000000001 00000000ffffffff 0000000000000000
[ 99.138927][ T6264] page dumped because: page_pool leak
[ 99.140507][ T6264] page_owner tracks the page as allocated
[ 99.142086][ T6264] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6264, tgid 6263 (syz.0.19), ts 97589612685, free_ts 93715616810
[ 99.146939][ T6264] post_alloc_hook+0xfd/0x120
[ 99.148333][ T6264] get_page_from_freelist+0xf48/0x3530
[ 99.149938][ T6264] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 99.151651][ T6264] alloc_pages_bulk_noprof+0x5de/0x13c0
[ 99.153291][ T6264] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 99.155145][ T6264] page_pool_alloc_netmems+0xc4/0x1a0
[ 99.156759][ T6264] skb_pp_cow_data+0x975/0x1140
[ 99.158227][ T6264] skb_cow_data_for_xdp+0x88/0xb0
[ 99.159700][ T6264] do_xdp_generic+0x56b/0x12c0
[ 99.161123][ T6264] tun_get_user+0x1c1c/0x3c20
[ 99.162549][ T6264] tun_chr_write_iter+0xdc/0x200
[ 99.164066][ T6264] vfs_write+0x6ac/0x1050
[ 99.165371][ T6264] ksys_write+0x12a/0x250
[ 99.166690][ T6264] do_syscall_64+0x115/0x870
[ 99.168045][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 99.169767][ T6264] page last free pid 28 tgid 28 stack trace:
[ 99.171520][ T6264] __free_frozen_pages+0x79f/0x1090
[ 99.173072][ T6264] tlb_remove_table_rcu+0x2cf/0x380
[ 99.174663][ T6264] rcu_core+0x5a2/0x10d0
[ 99.175911][ T6264] handle_softirqs+0x1ea/0x9b0
[ 99.177302][ T6264] run_ksoftirqd+0x38/0x60
[ 99.178602][ T6264] smpboot_thread_fn+0x3d3/0xaa0
[ 99.180058][ T6264] kthread+0x370/0x450
[ 99.181244][ T6264] ret_from_fork+0x72b/0xd50
[ 99.182699][ T6264] ret_from_fork_asm+0x1a/0x30
[ 99.184176][ T6264] Modules linked in:
[ 99.185372][ T6264] CPU: 1 UID: 0 PID: 6264 Comm: syz.0.19 Tainted: G B syzkaller #0 PREEMPT(full)
[ 99.185387][ T6264] Tainted: [B]=BAD_PAGE
[ 99.185391][ T6264] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 99.185397][ T6264] Call Trace:
[ 99.185402][ T6264]
[ 99.185407][ T6264] dump_stack_lvl+0x100/0x190
[ 99.185421][ T6264] bad_page.cold+0xbe/0xdf
[ 99.185438][ T6264] ? __pfx_bad_page+0x10/0x10
[ 99.185451][ T6264] ? page_bad_reason+0x98/0x200
[ 99.185462][ T6264] __free_frozen_pages+0x7d1/0x1090
[ 99.185478][ T6264] ? trace_irq_enable.constprop.0+0x122/0x160
[ 99.185494][ T6264] page_frag_free+0x199/0x1f0
[ 99.185506][ T6264] __xdp_return+0x3b6/0x990
[ 99.185518][ T6264] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 99.185530][ T6264] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 99.185539][ T6264] bpf_prog_run_generic_xdp+0x614/0x1610
[ 99.185554][ T6264] do_xdp_generic+0x92e/0x12c0
[ 99.185565][ T6264] ? __pfx_do_xdp_generic+0x10/0x10
[ 99.185580][ T6264] tun_get_user+0x1c1c/0x3c20
[ 99.185593][ T6264] ? futex_hash+0x311/0x400
[ 99.185606][ T6264] ? lock_release+0x24d/0x310
[ 99.185619][ T6264] ? __pfx_tun_get_user+0x10/0x10
[ 99.185629][ T6264] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 99.185647][ T6264] ? tun_get+0x191/0x370
[ 99.185655][ T6264] ? rcu_is_watching+0x12/0xc0
[ 99.185671][ T6264] ? tun_get+0x191/0x370
[ 99.185679][ T6264] ? lock_release+0x24d/0x310
[ 99.185692][ T6264] tun_chr_write_iter+0xdc/0x200
[ 99.185702][ T6264] vfs_write+0x6ac/0x1050
[ 99.185719][ T6264] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 99.185734][ T6264] ? __pfx_vfs_write+0x10/0x10
[ 99.185749][ T6264] ? lock_release+0x24d/0x310
[ 99.185764][ T6264] ksys_write+0x12a/0x250
[ 99.185779][ T6264] ? __pfx_ksys_write+0x10/0x10
[ 99.185795][ T6264] ? rcu_is_watching+0x12/0xc0
[ 99.185811][ T6264] do_syscall_64+0x115/0x870
[ 99.185825][ T6264] ? clear_bhb_loop+0x40/0x90
[ 99.185836][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 99.185847][ T6264] RIP: 0033:0x7fd72935d68e
[ 99.185856][ T6264] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 99.185866][ T6264] RSP: 002b:00007fd72a172fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 99.185877][ T6264] RAX: ffffffffffffffda RBX: 00007fd72a1736c0 RCX: 00007fd72935d68e
[ 99.185883][ T6264] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8
[ 99.185889][ T6264] RBP: 00007fd729432d6f R08: 0000000000000000 R09: 0000000000000000
[ 99.185895][ T6264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 99.185902][ T6264] R13: 00007fd729616038 R14: 00007fd729615fa0 R15: 00007ffe06369658
[ 99.185911][ T6264]
[ 99.185920][ T6264] BUG: Bad page state in process syz.0.19 pfn:3d3b9
[ 99.266203][ T6264] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803d3b9200 pfn:0x3d3b9
[ 99.269158][ T6264] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 99.271223][ T6264] raw: 00fff00000000000 dead000000000040 ffff888023173000 0000000000000000
[ 99.273790][ T6264] raw: ffff88803d3b9200 0000000000000001 00000000ffffffff 0000000000000000
[ 99.276316][ T6264] page dumped because: page_pool leak
[ 99.277878][ T6264] page_owner tracks the page as allocated
[ 99.279516][ T6264] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6264, tgid 6263 (syz.0.19), ts 97589605257, free_ts 93715634690
[ 99.284357][ T6264] post_alloc_hook+0xfd/0x120
[ 99.285773][ T6264] get_page_from_freelist+0xf48/0x3530
[ 99.287385][ T6264] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 99.289136][ T6264] alloc_pages_bulk_noprof+0x5de/0x13c0
[ 99.290755][ T6264] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 99.292575][ T6264] page_pool_alloc_netmems+0xc4/0x1a0
[ 99.294233][ T6264] skb_pp_cow_data+0x975/0x1140
[ 99.295671][ T6264] skb_cow_data_for_xdp+0x88/0xb0
[ 99.297157][ T6264] do_xdp_generic+0x56b/0x12c0
[ 99.298545][ T6264] tun_get_user+0x1c1c/0x3c20
[ 99.299927][ T6264] tun_chr_write_iter+0xdc/0x200
[ 99.301414][ T6264] vfs_write+0x6ac/0x1050
[ 99.302729][ T6264] ksys_write+0x12a/0x250
[ 99.304105][ T6264] do_syscall_64+0x115/0x870
[ 99.305505][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 99.307270][ T6264] page last free pid 28 tgid 28 stack trace:
[ 99.309032][ T6264] __free_frozen_pages+0x79f/0x1090
[ 99.310591][ T6264] tlb_remove_table_rcu+0x2cf/0x380
[ 99.312140][ T6264] rcu_core+0x5a2/0x10d0
[ 99.313427][ T6264] handle_softirqs+0x1ea/0x9b0
[ 99.314916][ T6264] run_ksoftirqd+0x38/0x60
[ 99.316266][ T6264] smpboot_thread_fn+0x3d3/0xaa0
[ 99.317732][ T6264] kthread+0x370/0x450
[ 99.318918][ T6264] ret_from_fork+0x72b/0xd50
[ 99.320299][ T6264] ret_from_fork_asm+0x1a/0x30
[ 99.321748][ T6264] Modules linked in:
[ 99.322926][ T6264] CPU: 1 UID: 0 PID: 6264 Comm: syz.0.19 Tainted: G B syzkaller #0 PREEMPT(full)
[ 99.322942][ T6264] Tainted: [B]=BAD_PAGE
[ 99.322945][ T6264] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 99.322952][ T6264] Call Trace:
[ 99.322956][ T6264]
[ 99.322961][ T6264] dump_stack_lvl+0x100/0x190
[ 99.322974][ T6264] bad_page.cold+0xbe/0xdf
[ 99.322990][ T6264] ? __pfx_bad_page+0x10/0x10
[ 99.323002][ T6264] ? page_bad_reason+0x98/0x200
[ 99.323013][ T6264] __free_frozen_pages+0x7d1/0x1090
[ 99.323030][ T6264] ? trace_irq_enable.constprop.0+0x122/0x160
[ 99.323046][ T6264] page_frag_free+0x199/0x1f0
[ 99.323058][ T6264] __xdp_return+0x3b6/0x990
[ 99.323070][ T6264] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 99.323083][ T6264] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 99.323092][ T6264] bpf_prog_run_generic_xdp+0x614/0x1610
[ 99.323106][ T6264] do_xdp_generic+0x92e/0x12c0
[ 99.323117][ T6264] ? __pfx_do_xdp_generic+0x10/0x10
[ 99.323133][ T6264] tun_get_user+0x1c1c/0x3c20
[ 99.323146][ T6264] ? futex_hash+0x311/0x400
[ 99.323158][ T6264] ? lock_release+0x24d/0x310
[ 99.323171][ T6264] ? __pfx_tun_get_user+0x10/0x10
[ 99.323181][ T6264] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 99.323199][ T6264] ? tun_get+0x191/0x370
[ 99.323207][ T6264] ? rcu_is_watching+0x12/0xc0
[ 99.323222][ T6264] ? tun_get+0x191/0x370
[ 99.323230][ T6264] ? lock_release+0x24d/0x310
[ 99.323243][ T6264] tun_chr_write_iter+0xdc/0x200
[ 99.323254][ T6264] vfs_write+0x6ac/0x1050
[ 99.323270][ T6264] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 99.323281][ T6264] ? __pfx_vfs_write+0x10/0x10
[ 99.323297][ T6264] ? lock_release+0x24d/0x310
[ 99.323311][ T6264] ksys_write+0x12a/0x250
[ 99.323326][ T6264] ? __pfx_ksys_write+0x10/0x10
[ 99.323342][ T6264] ? rcu_is_watching+0x12/0xc0
[ 99.323358][ T6264] do_syscall_64+0x115/0x870
[ 99.323372][ T6264] ? clear_bhb_loop+0x40/0x90
[ 99.323383][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 99.323393][ T6264] RIP: 0033:0x7fd72935d68e
[ 99.323402][ T6264] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 99.323413][ T6264] RSP: 002b:00007fd72a172fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 99.323423][ T6264] RAX: ffffffffffffffda RBX: 00007fd72a1736c0 RCX: 00007fd72935d68e
[ 99.323430][ T6264] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8
[ 99.323436][ T6264] RBP: 00007fd729432d6f R08: 0000000000000000 R09: 0000000000000000
[ 99.323442][ T6264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 99.323448][ T6264] R13: 00007fd729616038 R14: 00007fd729615fa0 R15: 00007ffe06369658
[ 99.323458][ T6264]
[ 99.363740][ T63] Bluetooth: hci0: command tx timeout
[ 99.418072][ T6266] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x225ba
[ 99.421506][ T6266] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 99.423656][ T6266] raw: 00fff00000000000 dead000000000040 ffff888023177000 0000000000000000
[ 99.426246][ T6266] raw: ffff888000000000 3fffffffffffffff 00000000ffffffff 0000000000000000
[ 99.428781][ T6266] page dumped because: VM_BUG_ON_PAGE(page_ref_count(page) == 0)
[ 99.431051][ T6266] page_owner tracks the page as allocated
[ 99.432736][ T6266] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6255, tgid 6254 (syz.0.17), ts 93952101390, free_ts 89074271627
[ 99.437896][ T6266] post_alloc_hook+0xfd/0x120
[ 99.439348][ T6266] get_page_from_freelist+0xf48/0x3530
[ 99.441062][ T6266] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 99.443352][ T6266] alloc_pages_bulk_noprof+0x5de/0x13c0
[ 99.445531][ T6266] __page_pool_alloc_netmems_slow+0x1c6/0xa60
[ 99.447883][ T6266] page_pool_alloc_netmems+0xc4/0x1a0
[ 99.449975][ T6266] page_pool_alloc_frag_netmem+0x21d/0xa10
[ 99.452213][ T6266] skb_pp_cow_data+0x507/0x1140
[ 99.454106][ T6266] skb_cow_data_for_xdp+0x88/0xb0
[ 99.455856][ T6266] do_xdp_generic+0x56b/0x12c0
[ 99.457473][ T6266] tun_get_user+0x1c1c/0x3c20
[ 99.458953][ T6266] tun_chr_write_iter+0xdc/0x200
[ 99.460438][ T6266] vfs_write+0x6ac/0x1050
[ 99.461799][ T6266] ksys_write+0x12a/0x250
[ 99.463101][ T6266] do_syscall_64+0x115/0x870
[ 99.464743][ T6266] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 99.467029][ T6266] page last free pid 6119 tgid 6119 stack trace:
[ 99.468929][ T6266] register_dummy_stack+0x74/0xb0
[ 99.470685][ T6266] init_page_owner+0x42/0xa10
[ 99.472609][ T6266] page_ext_init+0x71d/0x780
[ 99.474524][ T6266] mm_core_init+0x229/0x270
[ 99.476583][ T6266] ------------[ cut here ]------------
[ 99.478696][ T6266] kernel BUG at ./include/linux/mm.h:1810!
[ 99.481001][ T6266] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI
[ 99.483525][ T6266] CPU: 3 UID: 0 PID: 6266 Comm: syz.0.20 Tainted: G B syzkaller #0 PREEMPT(full)
[ 99.487584][ T6266] Tainted: [B]=BAD_PAGE
[ 99.489194][ T6266] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 99.493078][ T6266] RIP: 0010:page_frag_free+0x11a/0x1f0
[ 99.495221][ T6266] Code: ed 75 29 e8 38 fe 9c ff 48 83 c4 08 5b 5d 41 5c c3 cc cc cc cc e8 26 fe 9c ff 48 c7 c6 c0 ab e1 8b 48 89 df e8 f7 a7 ee ff 90 <0f> 0b e8 0f fe 9c ff be 08 00 00 00 48 89 df e8 52 8d 0d 00 48 89
[ 99.501367][ T6266] RSP: 0018:ffffc90004577720 EFLAGS: 00010293
[ 99.503143][ T6266] RAX: 0000000000000000 RBX: ffffea0000896e80 RCX: ffffffff828705f7
[ 99.505683][ T6266] RDX: ffff88802b554a80 RSI: ffffffff825c0c48 RDI: ffff88802b554f44
[ 99.508265][ T6266] RBP: ffffea0000896eb4 R08: 0000000000000000 R09: 0000000000000000
[ 99.510552][ T6266] R10: 0000000000000000 R11: 65726f635f6d6d20 R12: 0000000000000000
[ 99.512851][ T6266] R13: 0000000000000000 R14: 0000000000000000 R15: 000000000000bcae
[ 99.515182][ T6266] FS: 00007fd72a1736c0(0000) GS:ffff8880d60d8000(0000) knlGS:0000000000000000
[ 99.517773][ T6266] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 99.519725][ T6266] CR2: 000020000000f000 CR3: 000000003cca7000 CR4: 0000000000352ef0
[ 99.522019][ T6266] Call Trace:
[ 99.523029][ T6266]
[ 99.523952][ T6266] __xdp_return+0x3b6/0x990
[ 99.525622][ T6266] bpf_xdp_adjust_tail+0x8a1/0xbb0
[ 99.527149][ T6266] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 99.528715][ T6266] bpf_prog_run_generic_xdp+0x614/0x1610
[ 99.530362][ T6266] do_xdp_generic+0x92e/0x12c0
[ 99.531753][ T6266] ? __pfx_do_xdp_generic+0x10/0x10
[ 99.533270][ T6266] tun_get_user+0x1c1c/0x3c20
[ 99.534749][ T6266] ? __pfx_tun_get_user+0x10/0x10
[ 99.536336][ T6266] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 99.537975][ T6266] ? tun_get+0x191/0x370
[ 99.539227][ T6266] ? rcu_is_watching+0x12/0xc0
[ 99.540634][ T6266] ? tun_get+0x191/0x370
[ 99.541900][ T6266] ? lock_release+0x24d/0x310
[ 99.543525][ T6266] tun_chr_write_iter+0xdc/0x200
[ 99.545103][ T6266] vfs_write+0x6ac/0x1050
[ 99.546411][ T6266] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 99.548024][ T6266] ? __pfx_vfs_write+0x10/0x10
[ 99.549479][ T6266] ? lock_release+0x24d/0x310
[ 99.550871][ T6266] ksys_write+0x12a/0x250
[ 99.552164][ T6266] ? __pfx_ksys_write+0x10/0x10
[ 99.553589][ T6266] ? rcu_is_watching+0x12/0xc0
[ 99.555341][ T6266] do_syscall_64+0x115/0x870
[ 99.557259][ T6266] ? clear_bhb_loop+0x40/0x90
[ 99.559168][ T6266] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 99.561553][ T6266] RIP: 0033:0x7fd72935d68e
[ 99.563376][ T6266] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 99.571027][ T6266] RSP: 002b:00007fd72a172fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 99.574306][ T6266] RAX: ffffffffffffffda RBX: 00007fd72a1736c0 RCX: 00007fd72935d68e
[ 99.577457][ T6266] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8
[ 99.580612][ T6266] RBP: 00007fd729432d6f R08: 0000000000000000 R09: 0000000000000000
[ 99.583762][ T6266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 99.586960][ T6266] R13: 00007fd729616038 R14: 00007fd729615fa0 R15: 00007ffe06369658
[ 99.590156][ T6266]
[ 99.591423][ T6266] Modules linked in:
[ 99.593169][ T6266] ---[ end trace 0000000000000000 ]---
[ 99.595584][ T6266] RIP: 0010:page_frag_free+0x11a/0x1f0
[ 99.597901][ T6266] Code: ed 75 29 e8 38 fe 9c ff 48 83 c4 08 5b 5d 41 5c c3 cc cc cc cc e8 26 fe 9c ff 48 c7 c6 c0 ab e1 8b 48 89 df e8 f7 a7 ee ff 90 <0f> 0b e8 0f fe 9c ff be 08 00 00 00 48 89 df e8 52 8d 0d 00 48 89
[ 99.605666][ T6266] RSP: 0018:ffffc90004577720 EFLAGS: 00010293
[ 99.608111][ T6266] RAX: 0000000000000000 RBX: ffffea0000896e80 RCX: ffffffff828705f7
[ 99.611295][ T6266] RDX: ffff88802b554a80 RSI: ffffffff825c0c48 RDI: ffff88802b554f44
[ 99.614534][ T6266] RBP: ffffea0000896eb4 R08: 0000000000000000 R09: 0000000000000000
[ 99.617717][ T6266] R10: 0000000000000000 R11: 65726f635f6d6d20 R12: 0000000000000000
[ 99.620897][ T6266] R13: 0000000000000000 R14: 0000000000000000 R15: 000000000000bcae
[ 99.624091][ T6266] FS: 00007fd72a1736c0(0000) GS:ffff8880d60d8000(0000) knlGS:0000000000000000
[ 99.627659][ T6266] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 99.630322][ T6266] CR2: 000020000000f000 CR3: 000000003cca7000 CR4: 0000000000352ef0
[ 99.633493][ T6266] Kernel panic - not syncing: Fatal exception in interrupt
[ 99.637091][ T6266] Kernel Offset: disabled
[ 99.638841][ T6266] Rebooting in 86400 seconds..