[ 85.084869][ T133] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 85.092612][ T133] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 85.100772][ T133] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 85.109674][ T133] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 85.121944][ T133] veth1_macvtap: left promiscuous mode
[ 85.129045][ T133] veth0_macvtap: left promiscuous mode
[ 85.134651][ T133] veth1_vlan: left promiscuous mode
[ 85.142059][ T133] veth0_vlan: left promiscuous mode
[ 85.359134][ T133] team0 (unregistering): Port device team_slave_1 removed
[ 85.379738][ T133] team0 (unregistering): Port device team_slave_0 removed
Warning: Permanently added '10.128.1.122' (ED25519) to the list of known hosts.
2026/03/23 13:11:20 parsed 1 programs
[ 108.100233][ T6140] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 110.707453][ T6161] chnl_net:caif_netlink_parms(): no params data found
[ 110.766277][ T6161] bridge0: port 1(bridge_slave_0) entered blocking state
[ 110.773845][ T6161] bridge0: port 1(bridge_slave_0) entered disabled state
[ 110.781529][ T6161] bridge_slave_0: entered allmulticast mode
[ 110.788713][ T6161] bridge_slave_0: entered promiscuous mode
[ 110.796807][ T6161] bridge0: port 2(bridge_slave_1) entered blocking state
[ 110.803990][ T6161] bridge0: port 2(bridge_slave_1) entered disabled state
[ 110.811399][ T6161] bridge_slave_1: entered allmulticast mode
[ 110.818263][ T6161] bridge_slave_1: entered promiscuous mode
[ 110.873641][ T6161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 110.890968][ T6161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 110.921130][ T6161] team0: Port device team_slave_0 added
[ 110.928471][ T6161] team0: Port device team_slave_1 added
[ 110.950043][ T6161] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 110.957397][ T6161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 110.983331][ T6161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 110.996359][ T6161] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 111.003327][ T6161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 111.030063][ T6161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 111.068290][ T6161] hsr_slave_0: entered promiscuous mode
[ 111.074418][ T6161] hsr_slave_1: entered promiscuous mode
[ 111.514541][ T6161] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 111.525783][ T6161] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 111.536382][ T6161] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 111.549571][ T6161] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 111.613566][ T6161] bridge0: port 2(bridge_slave_1) entered blocking state
[ 111.620878][ T6161] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 111.628975][ T6161] bridge0: port 1(bridge_slave_0) entered blocking state
[ 111.636130][ T6161] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 111.711007][ T6161] 8021q: adding VLAN 0 to HW filter on device bond0
[ 111.724758][ T133] bridge0: port 1(bridge_slave_0) entered disabled state
[ 111.733012][ T133] bridge0: port 2(bridge_slave_1) entered disabled state
[ 111.760201][ T6161] 8021q: adding VLAN 0 to HW filter on device team0
[ 111.777795][ T133] bridge0: port 1(bridge_slave_0) entered blocking state
[ 111.784957][ T133] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 111.808385][ T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 111.815537][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 112.049197][ T6161] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 112.092399][ T6161] veth0_vlan: entered promiscuous mode
[ 112.110394][ T6161] veth1_vlan: entered promiscuous mode
[ 112.146209][ T6161] veth0_macvtap: entered promiscuous mode
[ 112.157666][ T6161] veth1_macvtap: entered promiscuous mode
[ 112.181192][ T6161] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 112.197745][ T6161] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 112.213222][ T133] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 112.239930][ T133] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 112.263911][ T133] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 112.278570][ T133] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 112.432835][ T133] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 112.545499][ T133] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 112.681448][ T133] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 112.769223][ T133] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 112.867399][ T3560] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 112.875256][ T3560] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 112.928561][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 112.937075][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 114.197502][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 114.206887][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 114.214657][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 114.224492][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 114.232857][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 114.772159][ T133] bridge_slave_1: left allmulticast mode
[ 114.780493][ T133] bridge_slave_1: left promiscuous mode
[ 114.795859][ T133] bridge0: port 2(bridge_slave_1) entered disabled state
[ 114.859385][ T133] bridge_slave_0: left allmulticast mode
[ 114.865078][ T133] bridge_slave_0: left promiscuous mode
[ 114.902064][ T133] bridge0: port 1(bridge_slave_0) entered disabled state
[ 115.161608][ T133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 115.172465][ T133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 115.182902][ T133] bond0 (unregistering): Released all slaves
[ 115.320511][ T133] hsr_slave_0: left promiscuous mode
[ 115.332753][ T133] hsr_slave_1: left promiscuous mode
[ 115.343079][ T133] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 115.381588][ T133] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 115.391189][ T133] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 115.421082][ T133] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 115.463625][ T133] veth1_macvtap: left promiscuous mode
[ 115.469298][ T133] veth0_macvtap: left promiscuous mode
[ 115.474855][ T133] veth1_vlan: left promiscuous mode
[ 115.482139][ T133] veth0_vlan: left promiscuous mode
[ 115.731472][ T133] team0 (unregistering): Port device team_slave_1 removed
[ 115.747646][ T133] team0 (unregistering): Port device team_slave_0 removed
2026/03/23 13:11:34 executed programs: 0
[ 118.160868][ T5148] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 118.171466][ T5148] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 118.181762][ T5148] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 118.191724][ T5148] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 118.200462][ T5148] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 118.441809][ T6427] chnl_net:caif_netlink_parms(): no params data found
[ 118.682948][ T6427] bridge0: port 1(bridge_slave_0) entered blocking state
[ 118.690462][ T6427] bridge0: port 1(bridge_slave_0) entered disabled state
[ 118.698014][ T6427] bridge_slave_0: entered allmulticast mode
[ 118.705798][ T6427] bridge_slave_0: entered promiscuous mode
[ 118.717485][ T6427] bridge0: port 2(bridge_slave_1) entered blocking state
[ 118.726974][ T6427] bridge0: port 2(bridge_slave_1) entered disabled state
[ 118.735134][ T6427] bridge_slave_1: entered allmulticast mode
[ 118.744884][ T6427] bridge_slave_1: entered promiscuous mode
[ 118.796834][ T6427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 118.808949][ T6427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 118.854415][ T6427] team0: Port device team_slave_0 added
[ 118.863409][ T6427] team0: Port device team_slave_1 added
[ 118.895186][ T6427] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 118.902199][ T6427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 118.929871][ T6427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 118.942052][ T6427] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 118.949561][ T6427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 118.975463][ T6427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 119.035231][ T6427] hsr_slave_0: entered promiscuous mode
[ 119.042563][ T6427] hsr_slave_1: entered promiscuous mode
[ 119.486537][ T6427] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 119.499718][ T6427] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 119.511416][ T6427] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 119.522784][ T6427] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 119.627392][ T6427] 8021q: adding VLAN 0 to HW filter on device bond0
[ 119.652435][ T6427] 8021q: adding VLAN 0 to HW filter on device team0
[ 119.671590][ T3560] bridge0: port 1(bridge_slave_0) entered blocking state
[ 119.678742][ T3560] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 119.700362][ T3560] bridge0: port 2(bridge_slave_1) entered blocking state
[ 119.707550][ T3560] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 119.953464][ T6427] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 120.011522][ T6427] veth0_vlan: entered promiscuous mode
[ 120.026043][ T6427] veth1_vlan: entered promiscuous mode
[ 120.062103][ T6427] veth0_macvtap: entered promiscuous mode
[ 120.072427][ T6427] veth1_macvtap: entered promiscuous mode
[ 120.098895][ T6427] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 120.114370][ T6427] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 120.131759][ T3459] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 120.155446][ T3459] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 120.187837][ T3459] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 120.208238][ T3459] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 120.234884][ T3459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 120.249061][ T3459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 120.281346][ T51] Bluetooth: hci0: command tx timeout
[ 120.281836][ T3560] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 120.295666][ T3560] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 120.364499][ T6506] BUG: Bad page state in process syz.0.17 pfn:6fb47
[ 120.371626][ T6506] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88806fb47c80 pfn:0x6fb47
[ 120.381795][ T6506] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 120.388961][ T6506] raw: 00fff00000000000 dead000000000040 ffff88801ab40000 0000000000000000
[ 120.397596][ T6506] raw: ffff88806fb47c80 0000000000000001 00000000ffffffff 0000000000000000
[ 120.406222][ T6506] page dumped because: page_pool leak
[ 120.411719][ T6506] page_owner tracks the page as allocated
[ 120.417581][ T6506] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6506, tgid 6504 (syz.0.17), ts 120364335096, free_ts 118406319743
[ 120.434461][ T6506] post_alloc_hook+0x231/0x280
[ 120.439301][ T6506] get_page_from_freelist+0x24dc/0x2580
[ 120.444865][ T6506] __alloc_frozen_pages_noprof+0x18d/0x380
[ 120.450749][ T6506] alloc_pages_bulk_noprof+0x558/0x700
[ 120.456256][ T6506] __page_pool_alloc_netmems_slow+0x14c/0x710
[ 120.462343][ T6506] skb_pp_cow_data+0xc21/0x1680
[ 120.467363][ T6506] do_xdp_generic+0x76b/0x12e0
[ 120.472148][ T6506] __netif_receive_skb_core+0x10e5/0x31a0
[ 120.478416][ T6506] netif_receive_skb+0x1fe/0xc50
[ 120.483384][ T6506] tun_rx_batched+0x1de/0x790
[ 120.488127][ T6506] tun_get_user+0x2a78/0x3dd0
[ 120.492816][ T6506] tun_chr_write_iter+0x113/0x200
[ 120.497894][ T6506] vfs_write+0x61d/0xb90
[ 120.502142][ T6506] ksys_write+0x150/0x270
[ 120.506559][ T6506] do_syscall_64+0x14d/0xf80
[ 120.511174][ T6506] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 120.517149][ T6506] page last free pid 5197 tgid 5197 stack trace:
[ 120.523473][ T6506] __free_frozen_pages+0xc2b/0xdb0
[ 120.528664][ T6506] rcu_core+0x7cd/0x1070
[ 120.532919][ T6506] handle_softirqs+0x22a/0x870
[ 120.537758][ T6506] do_softirq+0x76/0xd0
[ 120.541926][ T6506] __local_bh_enable_ip+0xf8/0x130
[ 120.547124][ T6506] __alloc_skb+0x1aa/0x7d0
[ 120.551551][ T6506] netlink_sendmsg+0x5d4/0xb40
[ 120.556467][ T6506] ____sys_sendmsg+0x972/0x9f0
[ 120.561245][ T6506] ___sys_sendmsg+0x2a5/0x360
[ 120.565990][ T6506] __x64_sys_sendmsg+0x1bd/0x2a0
[ 120.570938][ T6506] do_syscall_64+0x14d/0xf80
[ 120.575603][ T6506] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 120.581510][ T6506] Modules linked in:
[ 120.585546][ T6506] CPU: 0 UID: 0 PID: 6506 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 120.585567][ T6506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 120.585583][ T6506] Call Trace:
[ 120.585591][ T6506]
[ 120.585598][ T6506] dump_stack_lvl+0xe8/0x150
[ 120.585627][ T6506] bad_page+0x17f/0x1c0
[ 120.585655][ T6506] __free_frozen_pages+0xd62/0xdb0
[ 120.585683][ T6506] bpf_xdp_frags_shrink_tail+0x4da/0x7d0
[ 120.585723][ T6506] bpf_xdp_adjust_tail+0x1d6/0x220
[ 120.585747][ T6506] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 120.585768][ T6506] bpf_prog_run_generic_xdp+0x603/0x1490
[ 120.585814][ T6506] do_xdp_generic+0xac5/0x12e0
[ 120.585835][ T6506] ? __skb_flow_dissect+0x423/0x6d20
[ 120.585863][ T6506] ? __pfx_do_xdp_generic+0x10/0x10
[ 120.585915][ T6506] __netif_receive_skb_core+0x10e5/0x31a0
[ 120.585943][ T6506] ? __pfx___up_read+0x10/0x10
[ 120.585963][ T6506] ? do_user_addr_fault+0xbad/0x1340
[ 120.585991][ T6506] ? __lock_acquire+0x6b5/0x2cf0
[ 120.586019][ T6506] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 120.586045][ T6506] ? lockdep_hardirqs_on+0x7a/0x110
[ 120.586065][ T6506] ? irqentry_exit+0x59e/0x620
[ 120.586083][ T6506] ? trace_irq_disable+0x3b/0x150
[ 120.586126][ T6506] ? lock_acquire+0xf0/0x2e0
[ 120.586152][ T6506] ? rep_movs_alternative+0x4a/0x90
[ 120.586175][ T6506] ? netif_receive_skb+0x102/0xc50
[ 120.586197][ T6506] ? netif_receive_skb+0x102/0xc50
[ 120.586222][ T6506] netif_receive_skb+0x1fe/0xc50
[ 120.586245][ T6506] ? rep_movs_alternative+0x4a/0x90
[ 120.586272][ T6506] ? __pfx_netif_receive_skb+0x10/0x10
[ 120.586293][ T6506] ? __lock_acquire+0x6b5/0x2cf0
[ 120.586320][ T6506] ? tun_rx_batched+0x185/0x790
[ 120.586340][ T6506] tun_rx_batched+0x1de/0x790
[ 120.586364][ T6506] ? __pfx_tun_rx_batched+0x10/0x10
[ 120.586392][ T6506] ? tun_get_user+0x2354/0x3dd0
[ 120.586409][ T6506] ? __local_bh_enable_ip+0xd0/0x130
[ 120.586435][ T6506] ? tun_get_user+0x2669/0x3dd0
[ 120.586451][ T6506] tun_get_user+0x2a78/0x3dd0
[ 120.586480][ T6506] ? aa_file_perm+0x192/0x15e0
[ 120.586501][ T6506] ? aa_file_perm+0x50e/0x15e0
[ 120.586517][ T6506] ? __pfx_tun_get_user+0x10/0x10
[ 120.586532][ T6506] ? aa_file_perm+0x192/0x15e0
[ 120.586554][ T6506] ? __lock_acquire+0x6b5/0x2cf0
[ 120.586586][ T6506] ? ref_tracker_alloc+0x35c/0x4c0
[ 120.586614][ T6506] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 120.586644][ T6506] ? tun_get+0x1c/0x2f0
[ 120.586666][ T6506] ? tun_get+0x1c/0x2f0
[ 120.586683][ T6506] ? tun_get+0x1c/0x2f0
[ 120.586705][ T6506] tun_chr_write_iter+0x113/0x200
[ 120.586725][ T6506] vfs_write+0x61d/0xb90
[ 120.586753][ T6506] ? __pfx_vfs_write+0x10/0x10
[ 120.586782][ T6506] ? __fget_files+0x2a/0x420
[ 120.586816][ T6506] ksys_write+0x150/0x270
[ 120.586838][ T6506] ? __pfx_ksys_write+0x10/0x10
[ 120.586867][ T6506] do_syscall_64+0x14d/0xf80
[ 120.586885][ T6506] ? trace_irq_disable+0x3b/0x150
[ 120.586908][ T6506] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 120.586925][ T6506] ? clear_bhb_loop+0x40/0x90
[ 120.586946][ T6506] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 120.586964][ T6506] RIP: 0033:0x7fe80935ac4e
[ 120.586979][ T6506] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 120.586993][ T6506] RSP: 002b:00007fe80a25bfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 120.587012][ T6506] RAX: ffffffffffffffda RBX: 00007fe80a25c6c0 RCX: 00007fe80935ac4e
[ 120.587025][ T6506] RDX: 0000000000011dc0 RSI: 00002000000004c0 RDI: 00000000000000c8
[ 120.587036][ T6506] RBP: 00007fe80942dd68 R08: 0000000000000000 R09: 0000000000000000
[ 120.587046][ T6506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 120.587056][ T6506] R13: 00007fe8095d6038 R14: 00007fe8095d5fa0 R15: 00007fffe50f2c98
[ 120.587091][ T6506]
[ 120.955565][ T6506] Disabling lock debugging due to kernel taint
[ 120.961712][ T6506] BUG: Bad page state in process syz.0.17 pfn:6fb51
[ 120.968399][ T6506] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88806fb51140 pfn:0x6fb51
[ 120.978479][ T6506] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 120.985622][ T6506] raw: 00fff00000000000 dead000000000040 ffff88801ab40000 0000000000000000
[ 120.994198][ T6506] raw: ffff88806fb51140 0000000000000001 00000000ffffffff 0000000000000000
[ 121.002799][ T6506] page dumped because: page_pool leak
[ 121.008180][ T6506] page_owner tracks the page as allocated
[ 121.013874][ T6506] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6506, tgid 6504 (syz.0.17), ts 120364318499, free_ts 118406334146
[ 121.030728][ T6506] post_alloc_hook+0x231/0x280
[ 121.035495][ T6506] get_page_from_freelist+0x24dc/0x2580
[ 121.041075][ T6506] __alloc_frozen_pages_noprof+0x18d/0x380
[ 121.046896][ T6506] alloc_pages_bulk_noprof+0x558/0x700
[ 121.052338][ T6506] __page_pool_alloc_netmems_slow+0x14c/0x710
[ 121.058418][ T6506] skb_pp_cow_data+0xc21/0x1680
[ 121.063266][ T6506] do_xdp_generic+0x76b/0x12e0
[ 121.068055][ T6506] __netif_receive_skb_core+0x10e5/0x31a0
[ 121.073772][ T6506] netif_receive_skb+0x1fe/0xc50
[ 121.078732][ T6506] tun_rx_batched+0x1de/0x790
[ 121.083407][ T6506] tun_get_user+0x2a78/0x3dd0
[ 121.088097][ T6506] tun_chr_write_iter+0x113/0x200
[ 121.093199][ T6506] vfs_write+0x61d/0xb90
[ 121.097460][ T6506] ksys_write+0x150/0x270
[ 121.101785][ T6506] do_syscall_64+0x14d/0xf80
[ 121.106389][ T6506] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 121.112275][ T6506] page last free pid 5197 tgid 5197 stack trace:
[ 121.118694][ T6506] __free_frozen_pages+0xc2b/0xdb0
[ 121.123803][ T6506] rcu_core+0x7cd/0x1070
[ 121.128065][ T6506] handle_softirqs+0x22a/0x870
[ 121.132827][ T6506] do_softirq+0x76/0xd0
[ 121.136996][ T6506] __local_bh_enable_ip+0xf8/0x130
[ 121.142104][ T6506] __alloc_skb+0x1aa/0x7d0
[ 121.146527][ T6506] netlink_sendmsg+0x5d4/0xb40
[ 121.151287][ T6506] ____sys_sendmsg+0x972/0x9f0
[ 121.156083][ T6506] ___sys_sendmsg+0x2a5/0x360
[ 121.160762][ T6506] __x64_sys_sendmsg+0x1bd/0x2a0
[ 121.165719][ T6506] do_syscall_64+0x14d/0xf80
[ 121.170317][ T6506] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 121.176231][ T6506] Modules linked in:
[ 121.180124][ T6506] CPU: 0 UID: 0 PID: 6506 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 121.180139][ T6506] Tainted: [B]=BAD_PAGE
[ 121.180142][ T6506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 121.180148][ T6506] Call Trace:
[ 121.180153][ T6506]
[ 121.180157][ T6506] dump_stack_lvl+0xe8/0x150
[ 121.180174][ T6506] bad_page+0x17f/0x1c0
[ 121.180189][ T6506] __free_frozen_pages+0xd62/0xdb0
[ 121.180201][ T6506] bpf_xdp_frags_shrink_tail+0x4da/0x7d0
[ 121.180218][ T6506] bpf_xdp_adjust_tail+0x1d6/0x220
[ 121.180229][ T6506] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 121.180238][ T6506] bpf_prog_run_generic_xdp+0x603/0x1490
[ 121.180256][ T6506] do_xdp_generic+0xac5/0x12e0
[ 121.180267][ T6506] ? __skb_flow_dissect+0x423/0x6d20
[ 121.180280][ T6506] ? __pfx_do_xdp_generic+0x10/0x10
[ 121.180297][ T6506] __netif_receive_skb_core+0x10e5/0x31a0
[ 121.180321][ T6506] ? __pfx___up_read+0x10/0x10
[ 121.180338][ T6506] ? do_user_addr_fault+0xbad/0x1340
[ 121.180360][ T6506] ? __lock_acquire+0x6b5/0x2cf0
[ 121.180376][ T6506] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 121.180389][ T6506] ? lockdep_hardirqs_on+0x7a/0x110
[ 121.180400][ T6506] ? irqentry_exit+0x59e/0x620
[ 121.180409][ T6506] ? trace_irq_disable+0x3b/0x150
[ 121.180426][ T6506] ? lock_acquire+0xf0/0x2e0
[ 121.180438][ T6506] ? rep_movs_alternative+0x4a/0x90
[ 121.180451][ T6506] ? netif_receive_skb+0x102/0xc50
[ 121.180464][ T6506] ? netif_receive_skb+0x102/0xc50
[ 121.180476][ T6506] netif_receive_skb+0x1fe/0xc50
[ 121.180488][ T6506] ? rep_movs_alternative+0x4a/0x90
[ 121.180501][ T6506] ? __pfx_netif_receive_skb+0x10/0x10
[ 121.180513][ T6506] ? __lock_acquire+0x6b5/0x2cf0
[ 121.180525][ T6506] ? tun_rx_batched+0x185/0x790
[ 121.180536][ T6506] tun_rx_batched+0x1de/0x790
[ 121.180546][ T6506] ? __pfx_tun_rx_batched+0x10/0x10
[ 121.180557][ T6506] ? tun_get_user+0x2354/0x3dd0
[ 121.180566][ T6506] ? __local_bh_enable_ip+0xd0/0x130
[ 121.180579][ T6506] ? tun_get_user+0x2669/0x3dd0
[ 121.180588][ T6506] tun_get_user+0x2a78/0x3dd0
[ 121.180599][ T6506] ? aa_file_perm+0x192/0x15e0
[ 121.180608][ T6506] ? aa_file_perm+0x50e/0x15e0
[ 121.180616][ T6506] ? __pfx_tun_get_user+0x10/0x10
[ 121.180624][ T6506] ? aa_file_perm+0x192/0x15e0
[ 121.180633][ T6506] ? __lock_acquire+0x6b5/0x2cf0
[ 121.180647][ T6506] ? ref_tracker_alloc+0x35c/0x4c0
[ 121.180662][ T6506] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 121.180676][ T6506] ? tun_get+0x1c/0x2f0
[ 121.180686][ T6506] ? tun_get+0x1c/0x2f0
[ 121.180694][ T6506] ? tun_get+0x1c/0x2f0
[ 121.180703][ T6506] tun_chr_write_iter+0x113/0x200
[ 121.180713][ T6506] vfs_write+0x61d/0xb90
[ 121.180724][ T6506] ? __pfx_vfs_write+0x10/0x10
[ 121.180735][ T6506] ? __fget_files+0x2a/0x420
[ 121.180751][ T6506] ksys_write+0x150/0x270
[ 121.180761][ T6506] ? __pfx_ksys_write+0x10/0x10
[ 121.180772][ T6506] do_syscall_64+0x14d/0xf80
[ 121.180782][ T6506] ? trace_irq_disable+0x3b/0x150
[ 121.180796][ T6506] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 121.180805][ T6506] ? clear_bhb_loop+0x40/0x90
[ 121.180815][ T6506] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 121.180824][ T6506] RIP: 0033:0x7fe80935ac4e
[ 121.180833][ T6506] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 121.180841][ T6506] RSP: 002b:00007fe80a25bfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 121.180852][ T6506] RAX: ffffffffffffffda RBX: 00007fe80a25c6c0 RCX: 00007fe80935ac4e
[ 121.180859][ T6506] RDX: 0000000000011dc0 RSI: 00002000000004c0 RDI: 00000000000000c8
[ 121.180865][ T6506] RBP: 00007fe80942dd68 R08: 0000000000000000 R09: 0000000000000000
[ 121.180871][ T6506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 121.180877][ T6506] R13: 00007fe8095d6038 R14: 00007fe8095d5fa0 R15: 00007fffe50f2c98
[ 121.180886][ T6506]
[ 121.180893][ T6506] BUG: Bad page state in process syz.0.17 pfn:5c31e
[ 121.561934][ T6506] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805c31e000 pfn:0x5c31e
[ 121.572007][ T6506] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 121.579139][ T6506] raw: 00fff00000000000 dead000000000040 ffff88801ab40000 0000000000000000
[ 121.587998][ T6506] raw: ffff88805c31e000 0000000000000001 00000000ffffffff 0000000000000000
[ 121.597094][ T6506] page dumped because: page_pool leak
[ 121.602451][ T6506] page_owner tracks the page as allocated
[ 121.608180][ T6506] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6506, tgid 6504 (syz.0.17), ts 120364301645, free_ts 118406347788
[ 121.625137][ T6506] post_alloc_hook+0x231/0x280
[ 121.629915][ T6506] get_page_from_freelist+0x24dc/0x2580
[ 121.635456][ T6506] __alloc_frozen_pages_noprof+0x18d/0x380
[ 121.641277][ T6506] alloc_pages_bulk_noprof+0x558/0x700
[ 121.646754][ T6506] __page_pool_alloc_netmems_slow+0x14c/0x710
[ 121.652806][ T6506] skb_pp_cow_data+0xc21/0x1680
[ 121.657689][ T6506] do_xdp_generic+0x76b/0x12e0
[ 121.662457][ T6506] __netif_receive_skb_core+0x10e5/0x31a0
[ 121.668205][ T6506] netif_receive_skb+0x1fe/0xc50
[ 121.673145][ T6506] tun_rx_batched+0x1de/0x790
[ 121.677842][ T6506] tun_get_user+0x2a78/0x3dd0
[ 121.682519][ T6506] tun_chr_write_iter+0x113/0x200
[ 121.687557][ T6506] vfs_write+0x61d/0xb90
[ 121.691795][ T6506] ksys_write+0x150/0x270
[ 121.696135][ T6506] do_syscall_64+0x14d/0xf80
[ 121.700718][ T6506] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 121.706708][ T6506] page last free pid 5197 tgid 5197 stack trace:
[ 121.713109][ T6506] __free_frozen_pages+0xc2b/0xdb0
[ 121.718242][ T6506] rcu_core+0x7cd/0x1070
[ 121.722488][ T6506] handle_softirqs+0x22a/0x870
[ 121.727288][ T6506] do_softirq+0x76/0xd0
[ 121.731442][ T6506] __local_bh_enable_ip+0xf8/0x130
[ 121.736570][ T6506] __alloc_skb+0x1aa/0x7d0
[ 121.740979][ T6506] netlink_sendmsg+0x5d4/0xb40
[ 121.745758][ T6506] ____sys_sendmsg+0x972/0x9f0
[ 121.750516][ T6506] ___sys_sendmsg+0x2a5/0x360
[ 121.755168][ T6506] __x64_sys_sendmsg+0x1bd/0x2a0
[ 121.760150][ T6506] do_syscall_64+0x14d/0xf80
[ 121.764733][ T6506] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 121.770640][ T6506] Modules linked in:
[ 121.774531][ T6506] CPU: 0 UID: 0 PID: 6506 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 121.774546][ T6506] Tainted: [B]=BAD_PAGE
[ 121.774550][ T6506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 121.774556][ T6506] Call Trace:
[ 121.774560][ T6506]
[ 121.774565][ T6506] dump_stack_lvl+0xe8/0x150
[ 121.774581][ T6506] bad_page+0x17f/0x1c0
[ 121.774596][ T6506] __free_frozen_pages+0xd62/0xdb0
[ 121.774609][ T6506] bpf_xdp_frags_shrink_tail+0x4da/0x7d0
[ 121.774626][ T6506] bpf_xdp_adjust_tail+0x1d6/0x220
[ 121.774637][ T6506] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 121.774646][ T6506] bpf_prog_run_generic_xdp+0x603/0x1490
[ 121.774663][ T6506] do_xdp_generic+0xac5/0x12e0
[ 121.774675][ T6506] ? __skb_flow_dissect+0x423/0x6d20
[ 121.774687][ T6506] ? __pfx_do_xdp_generic+0x10/0x10
[ 121.774704][ T6506] __netif_receive_skb_core+0x10e5/0x31a0
[ 121.774719][ T6506] ? __pfx___up_read+0x10/0x10
[ 121.774728][ T6506] ? do_user_addr_fault+0xbad/0x1340
[ 121.774742][ T6506] ? __lock_acquire+0x6b5/0x2cf0
[ 121.774754][ T6506] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 121.774767][ T6506] ? lockdep_hardirqs_on+0x7a/0x110
[ 121.774778][ T6506] ? irqentry_exit+0x59e/0x620
[ 121.774788][ T6506] ? trace_irq_disable+0x3b/0x150
[ 121.774804][ T6506] ? lock_acquire+0xf0/0x2e0
[ 121.774816][ T6506] ? rep_movs_alternative+0x4a/0x90
[ 121.774829][ T6506] ? netif_receive_skb+0x102/0xc50
[ 121.774841][ T6506] ? netif_receive_skb+0x102/0xc50
[ 121.774853][ T6506] netif_receive_skb+0x1fe/0xc50
[ 121.774865][ T6506] ? rep_movs_alternative+0x4a/0x90
[ 121.774878][ T6506] ? __pfx_netif_receive_skb+0x10/0x10
[ 121.774890][ T6506] ? __lock_acquire+0x6b5/0x2cf0
[ 121.774902][ T6506] ? tun_rx_batched+0x185/0x790
[ 121.774913][ T6506] tun_rx_batched+0x1de/0x790
[ 121.774923][ T6506] ? __pfx_tun_rx_batched+0x10/0x10
[ 121.774934][ T6506] ? tun_get_user+0x2354/0x3dd0
[ 121.774943][ T6506] ? __local_bh_enable_ip+0xd0/0x130
[ 121.774956][ T6506] ? tun_get_user+0x2669/0x3dd0
[ 121.774964][ T6506] tun_get_user+0x2a78/0x3dd0
[ 121.774975][ T6506] ? aa_file_perm+0x192/0x15e0
[ 121.774984][ T6506] ? aa_file_perm+0x50e/0x15e0
[ 121.774992][ T6506] ? __pfx_tun_get_user+0x10/0x10
[ 121.775001][ T6506] ? aa_file_perm+0x192/0x15e0
[ 121.775009][ T6506] ? __lock_acquire+0x6b5/0x2cf0
[ 121.775027][ T6506] ? ref_tracker_alloc+0x35c/0x4c0
[ 121.775042][ T6506] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 121.775057][ T6506] ? tun_get+0x1c/0x2f0
[ 121.775067][ T6506] ? tun_get+0x1c/0x2f0
[ 121.775075][ T6506] ? tun_get+0x1c/0x2f0
[ 121.775084][ T6506] tun_chr_write_iter+0x113/0x200
[ 121.775093][ T6506] vfs_write+0x61d/0xb90
[ 121.775105][ T6506] ? __pfx_vfs_write+0x10/0x10
[ 121.775116][ T6506] ? __fget_files+0x2a/0x420
[ 121.775132][ T6506] ksys_write+0x150/0x270
[ 121.775142][ T6506] ? __pfx_ksys_write+0x10/0x10
[ 121.775153][ T6506] do_syscall_64+0x14d/0xf80
[ 121.775163][ T6506] ? trace_irq_disable+0x3b/0x150
[ 121.775177][ T6506] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 121.775186][ T6506] ? clear_bhb_loop+0x40/0x90
[ 121.775196][ T6506] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 121.775205][ T6506] RIP: 0033:0x7fe80935ac4e
[ 121.775215][ T6506] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 121.775223][ T6506] RSP: 002b:00007fe80a25bfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 121.775234][ T6506] RAX: ffffffffffffffda RBX: 00007fe80a25c6c0 RCX: 00007fe80935ac4e
[ 121.775241][ T6506] RDX: 0000000000011dc0 RSI: 00002000000004c0 RDI: 00000000000000c8
[ 121.775247][ T6506] RBP: 00007fe80942dd68 R08: 0000000000000000 R09: 0000000000000000
[ 121.775253][ T6506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 121.775258][ T6506] R13: 00007fe8095d6038 R14: 00007fe8095d5fa0 R15: 00007fffe50f2c98
[ 121.775268][ T6506]
[ 121.775276][ T6506] BUG: Bad page state in process syz.0.17 pfn:6fb7d
[ 122.156289][ T6506] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88806fb7d000 pfn:0x6fb7d
[ 122.166367][ T6506] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 122.173478][ T6506] raw: 00fff00000000000 dead000000000040 ffff88801ab40000 0000000000000000
[ 122.182083][ T6506] raw: ffff88806fb7d000 0000000000000001 00000000ffffffff 0000000000000000
[ 122.190802][ T6506] page dumped because: page_pool leak
[ 122.196173][ T6506] page_owner tracks the page as allocated
[ 122.201879][ T6506] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6506, tgid 6504 (syz.0.17), ts 120364284831, free_ts 118406373855
[ 122.218738][ T6506] post_alloc_hook+0x231/0x280
[ 122.223501][ T6506] get_page_from_freelist+0x24dc/0x2580
[ 122.229066][ T6506] __alloc_frozen_pages_noprof+0x18d/0x380
[ 122.234868][ T6506] alloc_pages_bulk_noprof+0x558/0x700
[ 122.240343][ T6506] __page_pool_alloc_netmems_slow+0x14c/0x710
[ 122.246460][ T6506] skb_pp_cow_data+0xc21/0x1680
[ 122.251289][ T6506] do_xdp_generic+0x76b/0x12e0
[ 122.256063][ T6506] __netif_receive_skb_core+0x10e5/0x31a0
[ 122.261779][ T6506] netif_receive_skb+0x1fe/0xc50
[ 122.266735][ T6506] tun_rx_batched+0x1de/0x790
[ 122.271407][ T6506] tun_get_user+0x2a78/0x3dd0
[ 122.276103][ T6506] tun_chr_write_iter+0x113/0x200
[ 122.281121][ T6506] vfs_write+0x61d/0xb90
[ 122.285435][ T6506] ksys_write+0x150/0x270
[ 122.289814][ T6506] do_syscall_64+0x14d/0xf80
[ 122.294413][ T6506] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 122.300326][ T6506] page last free pid 5197 tgid 5197 stack trace:
[ 122.306662][ T6506] __free_frozen_pages+0xc2b/0xdb0
[ 122.311754][ T6506] rcu_core+0x7cd/0x1070
[ 122.316003][ T6506] handle_softirqs+0x22a/0x870
[ 122.320763][ T6506] do_softirq+0x76/0xd0
[ 122.324898][ T6506] __local_bh_enable_ip+0xf8/0x130
[ 122.330026][ T6506] __alloc_skb+0x1aa/0x7d0
[ 122.334437][ T6506] netlink_sendmsg+0x5d4/0xb40
[ 122.339216][ T6506] ____sys_sendmsg+0x972/0x9f0
[ 122.344021][ T6506] ___sys_sendmsg+0x2a5/0x360
[ 122.348722][ T6506] __x64_sys_sendmsg+0x1bd/0x2a0
[ 122.353654][ T6506] do_syscall_64+0x14d/0xf80
[ 122.358254][ T6506] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 122.364141][ T6506] Modules linked in:
[ 122.365648][ T51] Bluetooth: hci0: command tx timeout
[ 122.368067][ T6506] CPU: 0 UID: 0 PID: 6506 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 122.368091][ T6506] Tainted: [B]=BAD_PAGE
[ 122.368097][ T6506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 122.368107][ T6506] Call Trace:
[ 122.368114][ T6506]
[ 122.368122][ T6506] dump_stack_lvl+0xe8/0x150
[ 122.368148][ T6506] bad_page+0x17f/0x1c0
[ 122.368172][ T6506] __free_frozen_pages+0xd62/0xdb0
[ 122.368193][ T6506] bpf_xdp_frags_shrink_tail+0x4da/0x7d0
[ 122.368221][ T6506] bpf_xdp_adjust_tail+0x1d6/0x220
[ 122.368239][ T6506] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 122.368254][ T6506] bpf_prog_run_generic_xdp+0x603/0x1490
[ 122.368285][ T6506] do_xdp_generic+0xac5/0x12e0
[ 122.368304][ T6506] ? __skb_flow_dissect+0x423/0x6d20
[ 122.368325][ T6506] ? __pfx_do_xdp_generic+0x10/0x10
[ 122.368356][ T6506] __netif_receive_skb_core+0x10e5/0x31a0
[ 122.368380][ T6506] ? __pfx___up_read+0x10/0x10
[ 122.368396][ T6506] ? do_user_addr_fault+0xbad/0x1340
[ 122.368419][ T6506] ? __lock_acquire+0x6b5/0x2cf0
[ 122.368441][ T6506] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 122.368464][ T6506] ? lockdep_hardirqs_on+0x7a/0x110
[ 122.368481][ T6506] ? irqentry_exit+0x59e/0x620
[ 122.368498][ T6506] ? trace_irq_disable+0x3b/0x150
[ 122.368525][ T6506] ? lock_acquire+0xf0/0x2e0
[ 122.368552][ T6506] ? rep_movs_alternative+0x4a/0x90
[ 122.368574][ T6506] ? netif_receive_skb+0x102/0xc50
[ 122.368594][ T6506] ? netif_receive_skb+0x102/0xc50
[ 122.368615][ T6506] netif_receive_skb+0x1fe/0xc50
[ 122.368636][ T6506] ? rep_movs_alternative+0x4a/0x90
[ 122.368659][ T6506] ? __pfx_netif_receive_skb+0x10/0x10
[ 122.368679][ T6506] ? __lock_acquire+0x6b5/0x2cf0
[ 122.368700][ T6506] ? tun_rx_batched+0x185/0x790
[ 122.368717][ T6506] tun_rx_batched+0x1de/0x790
[ 122.368736][ T6506] ? __pfx_tun_rx_batched+0x10/0x10
[ 122.368755][ T6506] ? tun_get_user+0x2354/0x3dd0
[ 122.368770][ T6506] ? __local_bh_enable_ip+0xd0/0x130
[ 122.368792][ T6506] ? tun_get_user+0x2669/0x3dd0
[ 122.368807][ T6506] tun_get_user+0x2a78/0x3dd0
[ 122.368827][ T6506] ? aa_file_perm+0x192/0x15e0
[ 122.368843][ T6506] ? aa_file_perm+0x50e/0x15e0
[ 122.368857][ T6506] ? __pfx_tun_get_user+0x10/0x10
[ 122.368872][ T6506] ? aa_file_perm+0x192/0x15e0
[ 122.368888][ T6506] ? __lock_acquire+0x6b5/0x2cf0
[ 122.368911][ T6506] ? ref_tracker_alloc+0x35c/0x4c0
[ 122.368935][ T6506] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 122.368966][ T6506] ? tun_get+0x1c/0x2f0
[ 122.368983][ T6506] ? tun_get+0x1c/0x2f0
[ 122.368997][ T6506] ? tun_get+0x1c/0x2f0
[ 122.369013][ T6506] tun_chr_write_iter+0x113/0x200
[ 122.369030][ T6506] vfs_write+0x61d/0xb90
[ 122.369049][ T6506] ? __pfx_vfs_write+0x10/0x10
[ 122.369069][ T6506] ? __fget_files+0x2a/0x420
[ 122.369094][ T6506] ksys_write+0x150/0x270
[ 122.369112][ T6506] ? __pfx_ksys_write+0x10/0x10
[ 122.369133][ T6506] do_syscall_64+0x14d/0xf80
[ 122.369149][ T6506] ? trace_irq_disable+0x3b/0x150
[ 122.369172][ T6506] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 122.369188][ T6506] ? clear_bhb_loop+0x40/0x90
[ 122.369206][ T6506] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 122.369222][ T6506] RIP: 0033:0x7fe80935ac4e
[ 122.369237][ T6506] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 122.369250][ T6506] RSP: 002b:00007fe80a25bfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 122.369268][ T6506] RAX: ffffffffffffffda RBX: 00007fe80a25c6c0 RCX: 00007fe80935ac4e
[ 122.369280][ T6506] RDX: 0000000000011dc0 RSI: 00002000000004c0 RDI: 00000000000000c8
[ 122.369290][ T6506] RBP: 00007fe80942dd68 R08: 0000000000000000 R09: 0000000000000000
[ 122.369300][ T6506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 122.369310][ T6506] R13: 00007fe8095d6038 R14: 00007fe8095d5fa0 R15: 00007fffe50f2c98
[ 122.369328][ T6506]
[ 122.369338][ T6506] BUG: Bad page state in process syz.0.17 pfn:6fbe7
[ 122.753985][ T6506] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88806fbe7000 pfn:0x6fbe7
[ 122.764057][ T6506] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 122.771207][ T6506] raw: 00fff00000000000 dead000000000040 ffff88801ab40000 0000000000000000
[ 122.779829][ T6506] raw: ffff88806fbe7000 0000000000000001 00000000ffffffff 0000000000000000
[ 122.788512][ T6506] page dumped because: page_pool leak
[ 122.793872][ T6506] page_owner tracks the page as allocated
[ 122.799600][ T6506] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6506, tgid 6504 (syz.0.17), ts 120364267845, free_ts 118406397852
[ 122.816463][ T6506] post_alloc_hook+0x231/0x280
[ 122.821235][ T6506] get_page_from_freelist+0x24dc/0x2580
[ 122.826884][ T6506] __alloc_frozen_pages_noprof+0x18d/0x380
[ 122.832697][ T6506] alloc_pages_bulk_noprof+0x558/0x700
[ 122.838186][ T6506] __page_pool_alloc_netmems_slow+0x14c/0x710
[ 122.844251][ T6506] skb_pp_cow_data+0xc21/0x1680
[ 122.849120][ T6506] do_xdp_generic+0x76b/0x12e0
[ 122.853884][ T6506] __netif_receive_skb_core+0x10e5/0x31a0
[ 122.859628][ T6506] netif_receive_skb+0x1fe/0xc50
[ 122.864558][ T6506] tun_rx_batched+0x1de/0x790
[ 122.869249][ T6506] tun_get_user+0x2a78/0x3dd0
[ 122.873926][ T6506] tun_chr_write_iter+0x113/0x200
[ 122.878973][ T6506] vfs_write+0x61d/0xb90
[ 122.883212][ T6506] ksys_write+0x150/0x270
[ 122.887569][ T6506] do_syscall_64+0x14d/0xf80
[ 122.892162][ T6506] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 122.898085][ T6506] page last free pid 5197 tgid 5197 stack trace:
[ 122.904405][ T6506] __free_frozen_pages+0xc2b/0xdb0
[ 122.909539][ T6506] rcu_core+0x7cd/0x1070
[ 122.913779][ T6506] handle_softirqs+0x22a/0x870
[ 122.918553][ T6506] do_softirq+0x76/0xd0
[ 122.922703][ T6506] __local_bh_enable_ip+0xf8/0x130
[ 122.927831][ T6506] __alloc_skb+0x1aa/0x7d0
[ 122.932325][ T6506] netlink_sendmsg+0x5d4/0xb40
[ 122.937131][ T6506] ____sys_sendmsg+0x972/0x9f0
[ 122.941889][ T6506] ___sys_sendmsg+0x2a5/0x360
[ 122.946583][ T6506] __x64_sys_sendmsg+0x1bd/0x2a0
[ 122.951514][ T6506] do_syscall_64+0x14d/0xf80
[ 122.956116][ T6506] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 122.962001][ T6506] Modules linked in:
[ 122.965913][ T6506] CPU: 0 UID: 0 PID: 6506 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 122.965936][ T6506] Tainted: [B]=BAD_PAGE
[ 122.965941][ T6506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 122.965951][ T6506] Call Trace:
[ 122.965957][ T6506]
[ 122.965963][ T6506] dump_stack_lvl+0xe8/0x150
[ 122.965987][ T6506] bad_page+0x17f/0x1c0
[ 122.966010][ T6506] __free_frozen_pages+0xd62/0xdb0
[ 122.966032][ T6506] bpf_xdp_frags_shrink_tail+0x4da/0x7d0
[ 122.966062][ T6506] bpf_xdp_adjust_tail+0x1d6/0x220
[ 122.966082][ T6506] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 122.966098][ T6506] bpf_prog_run_generic_xdp+0x603/0x1490
[ 122.966129][ T6506] do_xdp_generic+0xac5/0x12e0
[ 122.966149][ T6506] ? __skb_flow_dissect+0x423/0x6d20
[ 122.966171][ T6506] ? __pfx_do_xdp_generic+0x10/0x10
[ 122.966201][ T6506] __netif_receive_skb_core+0x10e5/0x31a0
[ 122.966226][ T6506] ? __pfx___up_read+0x10/0x10
[ 122.966242][ T6506] ? do_user_addr_fault+0xbad/0x1340
[ 122.966266][ T6506] ? __lock_acquire+0x6b5/0x2cf0
[ 122.966289][ T6506] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 122.966311][ T6506] ? lockdep_hardirqs_on+0x7a/0x110
[ 122.966329][ T6506] ? irqentry_exit+0x59e/0x620
[ 122.966347][ T6506] ? trace_irq_disable+0x3b/0x150
[ 122.966374][ T6506] ? lock_acquire+0xf0/0x2e0
[ 122.966395][ T6506] ? rep_movs_alternative+0x4a/0x90
[ 122.966428][ T6506] ? netif_receive_skb+0x102/0xc50
[ 122.966449][ T6506] ? netif_receive_skb+0x102/0xc50
[ 122.966471][ T6506] netif_receive_skb+0x1fe/0xc50
[ 122.966492][ T6506] ? rep_movs_alternative+0x4a/0x90
[ 122.966512][ T6506] ? __pfx_netif_receive_skb+0x10/0x10
[ 122.966531][ T6506] ? __lock_acquire+0x6b5/0x2cf0
[ 122.966553][ T6506] ? tun_rx_batched+0x185/0x790
[ 122.966570][ T6506] tun_rx_batched+0x1de/0x790
[ 122.966589][ T6506] ? __pfx_tun_rx_batched+0x10/0x10
[ 122.966609][ T6506] ? tun_get_user+0x2354/0x3dd0
[ 122.966625][ T6506] ? __local_bh_enable_ip+0xd0/0x130
[ 122.966647][ T6506] ? tun_get_user+0x2669/0x3dd0
[ 122.966662][ T6506] tun_get_user+0x2a78/0x3dd0
[ 122.966683][ T6506] ? aa_file_perm+0x192/0x15e0
[ 122.966700][ T6506] ? aa_file_perm+0x50e/0x15e0
[ 122.966714][ T6506] ? __pfx_tun_get_user+0x10/0x10
[ 122.966729][ T6506] ? aa_file_perm+0x192/0x15e0
[ 122.966745][ T6506] ? __lock_acquire+0x6b5/0x2cf0
[ 122.966769][ T6506] ? ref_tracker_alloc+0x35c/0x4c0
[ 122.966795][ T6506] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 122.966820][ T6506] ? tun_get+0x1c/0x2f0
[ 122.966838][ T6506] ? tun_get+0x1c/0x2f0
[ 122.966853][ T6506] ? tun_get+0x1c/0x2f0
[ 122.966870][ T6506] tun_chr_write_iter+0x113/0x200
[ 122.966887][ T6506] vfs_write+0x61d/0xb90
[ 122.966915][ T6506] ? __pfx_vfs_write+0x10/0x10
[ 122.966937][ T6506] ? __fget_files+0x2a/0x420
[ 122.966964][ T6506] ksys_write+0x150/0x270
[ 122.966982][ T6506] ? __pfx_ksys_write+0x10/0x10
[ 122.967003][ T6506] do_syscall_64+0x14d/0xf80
[ 122.967020][ T6506] ? trace_irq_disable+0x3b/0x150
[ 122.967044][ T6506] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 122.967060][ T6506] ? clear_bhb_loop+0x40/0x90
[ 122.967078][ T6506] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 122.967095][ T6506] RIP: 0033:0x7fe80935ac4e
[ 122.967109][ T6506] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 122.967124][ T6506] RSP: 002b:00007fe80a25bfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 122.967141][ T6506] RAX: ffffffffffffffda RBX: 00007fe80a25c6c0 RCX: 00007fe80935ac4e
[ 122.967153][ T6506] RDX: 0000000000011dc0 RSI: 00002000000004c0 RDI: 00000000000000c8
[ 122.967164][ T6506] RBP: 00007fe80942dd68 R08: 0000000000000000 R09: 0000000000000000
[ 122.967174][ T6506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 122.967184][ T6506] R13: 00007fe8095d6038 R14: 00007fe8095d5fa0 R15: 00007fffe50f2c98
[ 122.967202][ T6506]
[ 122.967219][ T6506] BUG: Bad page state in process syz.0.17 pfn:6fb88
[ 123.348090][ T6506] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88806fb88000 pfn:0x6fb88
[ 123.358164][ T6506] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 123.365272][ T6506] raw: 00fff00000000000 dead000000000040 ffff88801ab40000 0000000000000000
[ 123.373904][ T6506] raw: ffff88806fb88000 0000000000000001 00000000ffffffff 0000000000000000
[ 123.382517][ T6506] page dumped because: page_pool leak
[ 123.387917][ T6506] page_owner tracks the page as allocated
[ 123.393641][ T6506] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6506, tgid 6504 (syz.0.17), ts 120364251803, free_ts 118406413960
[ 123.410535][ T6506] post_alloc_hook+0x231/0x280
[ 123.415316][ T6506] get_page_from_freelist+0x24dc/0x2580
[ 123.420882][ T6506] __alloc_frozen_pages_noprof+0x18d/0x380
[ 123.426723][ T6506] alloc_pages_bulk_noprof+0x558/0x700
[ 123.432190][ T6506] __page_pool_alloc_netmems_slow+0x14c/0x710
[ 123.438306][ T6506] skb_pp_cow_data+0xc21/0x1680
[ 123.443154][ T6506] do_xdp_generic+0x76b/0x12e0
[ 123.447942][ T6506] __netif_receive_skb_core+0x10e5/0x31a0
[ 123.453658][ T6506] netif_receive_skb+0x1fe/0xc50
[ 123.458620][ T6506] tun_rx_batched+0x1de/0x790
[ 123.463290][ T6506] tun_get_user+0x2a78/0x3dd0
[ 123.467981][ T6506] tun_chr_write_iter+0x113/0x200
[ 123.472997][ T6506] vfs_write+0x61d/0xb90
[ 123.477251][ T6506] ksys_write+0x150/0x270
[ 123.481602][ T6506] do_syscall_64+0x14d/0xf80
[ 123.486208][ T6506] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 123.492094][ T6506] page last free pid 5197 tgid 5197 stack trace:
[ 123.498431][ T6506] __free_frozen_pages+0xc2b/0xdb0
[ 123.503536][ T6506] rcu_core+0x7cd/0x1070
[ 123.507816][ T6506] handle_softirqs+0x22a/0x870
[ 123.512576][ T6506] do_softirq+0x76/0xd0
[ 123.516742][ T6506] __local_bh_enable_ip+0xf8/0x130
[ 123.521849][ T6506] __alloc_skb+0x1aa/0x7d0
[ 123.526281][ T6506] netlink_sendmsg+0x5d4/0xb40
[ 123.531042][ T6506] ____sys_sendmsg+0x972/0x9f0
[ 123.535813][ T6506] ___sys_sendmsg+0x2a5/0x360
[ 123.540480][ T6506] __x64_sys_sendmsg+0x1bd/0x2a0
[ 123.545396][ T6506] do_syscall_64+0x14d/0xf80
[ 123.549997][ T6506] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 123.555925][ T6506] Modules linked in:
[ 123.559806][ T6506] CPU: 0 UID: 0 PID: 6506 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 123.559820][ T6506] Tainted: [B]=BAD_PAGE
[ 123.559823][ T6506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 123.559829][ T6506] Call Trace:
[ 123.559835][ T6506]
[ 123.559840][ T6506] dump_stack_lvl+0xe8/0x150
[ 123.559858][ T6506] bad_page+0x17f/0x1c0
[ 123.559873][ T6506] __free_frozen_pages+0xd62/0xdb0
[ 123.559886][ T6506] bpf_xdp_frags_shrink_tail+0x4da/0x7d0
[ 123.559907][ T6506] bpf_xdp_adjust_tail+0x1d6/0x220
[ 123.559918][ T6506] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 123.559927][ T6506] bpf_prog_run_generic_xdp+0x603/0x1490
[ 123.559944][ T6506] do_xdp_generic+0xac5/0x12e0
[ 123.559956][ T6506] ? __skb_flow_dissect+0x423/0x6d20
[ 123.559968][ T6506] ? __pfx_do_xdp_generic+0x10/0x10
[ 123.559985][ T6506] __netif_receive_skb_core+0x10e5/0x31a0
[ 123.560001][ T6506] ? __pfx___up_read+0x10/0x10
[ 123.560010][ T6506] ? do_user_addr_fault+0xbad/0x1340
[ 123.560024][ T6506] ? __lock_acquire+0x6b5/0x2cf0
[ 123.560037][ T6506] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 123.560050][ T6506] ? lockdep_hardirqs_on+0x7a/0x110
[ 123.560063][ T6506] ? irqentry_exit+0x59e/0x620
[ 123.560073][ T6506] ? trace_irq_disable+0x3b/0x150
[ 123.560091][ T6506] ? lock_acquire+0xf0/0x2e0
[ 123.560103][ T6506] ? rep_movs_alternative+0x4a/0x90
[ 123.560115][ T6506] ? netif_receive_skb+0x102/0xc50
[ 123.560127][ T6506] ? netif_receive_skb+0x102/0xc50
[ 123.560140][ T6506] netif_receive_skb+0x1fe/0xc50
[ 123.560152][ T6506] ? rep_movs_alternative+0x4a/0x90
[ 123.560165][ T6506] ? __pfx_netif_receive_skb+0x10/0x10
[ 123.560177][ T6506] ? __lock_acquire+0x6b5/0x2cf0
[ 123.560189][ T6506] ? tun_rx_batched+0x185/0x790
[ 123.560199][ T6506] tun_rx_batched+0x1de/0x790
[ 123.560210][ T6506] ? __pfx_tun_rx_batched+0x10/0x10
[ 123.560221][ T6506] ? tun_get_user+0x2354/0x3dd0
[ 123.560230][ T6506] ? __local_bh_enable_ip+0xd0/0x130
[ 123.560242][ T6506] ? tun_get_user+0x2669/0x3dd0
[ 123.560251][ T6506] tun_get_user+0x2a78/0x3dd0
[ 123.560262][ T6506] ? aa_file_perm+0x192/0x15e0
[ 123.560271][ T6506] ? aa_file_perm+0x50e/0x15e0
[ 123.560279][ T6506] ? __pfx_tun_get_user+0x10/0x10
[ 123.560287][ T6506] ? aa_file_perm+0x192/0x15e0
[ 123.560296][ T6506] ? __lock_acquire+0x6b5/0x2cf0
[ 123.560309][ T6506] ? ref_tracker_alloc+0x35c/0x4c0
[ 123.560324][ T6506] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 123.560339][ T6506] ? tun_get+0x1c/0x2f0
[ 123.560349][ T6506] ? tun_get+0x1c/0x2f0
[ 123.560357][ T6506] ? tun_get+0x1c/0x2f0
[ 123.560366][ T6506] tun_chr_write_iter+0x113/0x200
[ 123.560375][ T6506] vfs_write+0x61d/0xb90
[ 123.560387][ T6506] ? __pfx_vfs_write+0x10/0x10
[ 123.560398][ T6506] ? __fget_files+0x2a/0x420
[ 123.560414][ T6506] ksys_write+0x150/0x270
[ 123.560423][ T6506] ? __pfx_ksys_write+0x10/0x10
[ 123.560435][ T6506] do_syscall_64+0x14d/0xf80
[ 123.560445][ T6506] ? trace_irq_disable+0x3b/0x150
[ 123.560459][ T6506] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 123.560468][ T6506] ? clear_bhb_loop+0x40/0x90
[ 123.560478][ T6506] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 123.560488][ T6506] RIP: 0033:0x7fe80935ac4e
[ 123.560498][ T6506] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 123.560506][ T6506] RSP: 002b:00007fe80a25bfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 123.560516][ T6506] RAX: ffffffffffffffda RBX: 00007fe80a25c6c0 RCX: 00007fe80935ac4e
[ 123.560523][ T6506] RDX: 0000000000011dc0 RSI: 00002000000004c0 RDI: 00000000000000c8
[ 123.560529][ T6506] RBP: 00007fe80942dd68 R08: 0000000000000000 R09: 0000000000000000
[ 123.560535][ T6506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 123.560541][ T6506] R13: 00007fe8095d6038 R14: 00007fe8095d5fa0 R15: 00007fffe50f2c98
[ 123.560550][ T6506]
[ 123.560558][ T6506] BUG: Bad page state in process syz.0.17 pfn:5ce50
[ 123.941328][ T6506] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805ce50000 pfn:0x5ce50
[ 123.951432][ T6506] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 123.958555][ T6506] raw: 00fff00000000000 dead000000000040 ffff88801ab40000 0000000000000000
[ 123.967145][ T6506] raw: ffff88805ce50000 0000000000000001 00000000ffffffff 0000000000000000
[ 123.975734][ T6506] page dumped because: page_pool leak
[ 123.981340][ T6506] page_owner tracks the page as allocated
[ 123.987059][ T6506] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6506, tgid 6504 (syz.0.17), ts 120364235592, free_ts 118406428766
[ 124.003955][ T6506] post_alloc_hook+0x231/0x280
[ 124.008731][ T6506] get_page_from_freelist+0x24dc/0x2580
[ 124.014282][ T6506] __alloc_frozen_pages_noprof+0x18d/0x380
[ 124.020113][ T6506] alloc_pages_bulk_noprof+0x558/0x700
[ 124.025597][ T6506] __page_pool_alloc_netmems_slow+0x14c/0x710
[ 124.031659][ T6506] skb_pp_cow_data+0xc21/0x1680
[ 124.036516][ T6506] do_xdp_generic+0x76b/0x12e0
[ 124.041276][ T6506] __netif_receive_skb_core+0x10e5/0x31a0
[ 124.047020][ T6506] netif_receive_skb+0x1fe/0xc50
[ 124.051958][ T6506] tun_rx_batched+0x1de/0x790
[ 124.056665][ T6506] tun_get_user+0x2a78/0x3dd0
[ 124.061421][ T6506] tun_chr_write_iter+0x113/0x200
[ 124.066454][ T6506] vfs_write+0x61d/0xb90
[ 124.070689][ T6506] ksys_write+0x150/0x270
[ 124.074993][ T6506] do_syscall_64+0x14d/0xf80
[ 124.079593][ T6506] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 124.086564][ T6506] page last free pid 5197 tgid 5197 stack trace:
[ 124.093401][ T6506] __free_frozen_pages+0xc2b/0xdb0
[ 124.098541][ T6506] rcu_core+0x7cd/0x1070
[ 124.102788][ T6506] handle_softirqs+0x22a/0x870
[ 124.107583][ T6506] do_softirq+0x76/0xd0
[ 124.111732][ T6506] __local_bh_enable_ip+0xf8/0x130
[ 124.116862][ T6506] __alloc_skb+0x1aa/0x7d0
[ 124.121266][ T6506] netlink_sendmsg+0x5d4/0xb40
[ 124.126081][ T6506] ____sys_sendmsg+0x972/0x9f0
[ 124.130844][ T6506] ___sys_sendmsg+0x2a5/0x360
[ 124.135497][ T6506] __x64_sys_sendmsg+0x1bd/0x2a0
[ 124.140442][ T6506] do_syscall_64+0x14d/0xf80
[ 124.145025][ T6506] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 124.150946][ T6506] Modules linked in:
[ 124.154834][ T6506] CPU: 0 UID: 0 PID: 6506 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 124.154849][ T6506] Tainted: [B]=BAD_PAGE
[ 124.154854][ T6506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 124.154860][ T6506] Call Trace:
[ 124.154864][ T6506]
[ 124.154868][ T6506] dump_stack_lvl+0xe8/0x150
[ 124.154885][ T6506] bad_page+0x17f/0x1c0
[ 124.154900][ T6506] __free_frozen_pages+0xd62/0xdb0
[ 124.154912][ T6506] bpf_xdp_frags_shrink_tail+0x4da/0x7d0
[ 124.154929][ T6506] bpf_xdp_adjust_tail+0x1d6/0x220
[ 124.154940][ T6506] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 124.154948][ T6506] bpf_prog_run_generic_xdp+0x603/0x1490
[ 124.154966][ T6506] do_xdp_generic+0xac5/0x12e0
[ 124.154977][ T6506] ? __skb_flow_dissect+0x423/0x6d20
[ 124.154989][ T6506] ? __pfx_do_xdp_generic+0x10/0x10
[ 124.155007][ T6506] __netif_receive_skb_core+0x10e5/0x31a0
[ 124.155021][ T6506] ? __pfx___up_read+0x10/0x10
[ 124.155030][ T6506] ? do_user_addr_fault+0xbad/0x1340
[ 124.155044][ T6506] ? __lock_acquire+0x6b5/0x2cf0
[ 124.155057][ T6506] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 124.155070][ T6506] ? lockdep_hardirqs_on+0x7a/0x110
[ 124.155081][ T6506] ? irqentry_exit+0x59e/0x620
[ 124.155090][ T6506] ? trace_irq_disable+0x3b/0x150
[ 124.155111][ T6506] ? lock_acquire+0xf0/0x2e0
[ 124.155123][ T6506] ? rep_movs_alternative+0x4a/0x90
[ 124.155136][ T6506] ? netif_receive_skb+0x102/0xc50
[ 124.155148][ T6506] ? netif_receive_skb+0x102/0xc50
[ 124.155160][ T6506] netif_receive_skb+0x1fe/0xc50
[ 124.155172][ T6506] ? rep_movs_alternative+0x4a/0x90
[ 124.155185][ T6506] ? __pfx_netif_receive_skb+0x10/0x10
[ 124.155197][ T6506] ? __lock_acquire+0x6b5/0x2cf0
[ 124.155209][ T6506] ? tun_rx_batched+0x185/0x790
[ 124.155220][ T6506] tun_rx_batched+0x1de/0x790
[ 124.155230][ T6506] ? __pfx_tun_rx_batched+0x10/0x10
[ 124.155241][ T6506] ? tun_get_user+0x2354/0x3dd0
[ 124.155250][ T6506] ? __local_bh_enable_ip+0xd0/0x130
[ 124.155262][ T6506] ? tun_get_user+0x2669/0x3dd0
[ 124.155271][ T6506] tun_get_user+0x2a78/0x3dd0
[ 124.155282][ T6506] ? aa_file_perm+0x192/0x15e0
[ 124.155291][ T6506] ? aa_file_perm+0x50e/0x15e0
[ 124.155299][ T6506] ? __pfx_tun_get_user+0x10/0x10
[ 124.155307][ T6506] ? aa_file_perm+0x192/0x15e0
[ 124.155316][ T6506] ? __lock_acquire+0x6b5/0x2cf0
[ 124.155329][ T6506] ? ref_tracker_alloc+0x35c/0x4c0
[ 124.155344][ T6506] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 124.155359][ T6506] ? tun_get+0x1c/0x2f0
[ 124.155368][ T6506] ? tun_get+0x1c/0x2f0
[ 124.155377][ T6506] ? tun_get+0x1c/0x2f0
[ 124.155385][ T6506] tun_chr_write_iter+0x113/0x200
[ 124.155395][ T6506] vfs_write+0x61d/0xb90
[ 124.155407][ T6506] ? __pfx_vfs_write+0x10/0x10
[ 124.155418][ T6506] ? __fget_files+0x2a/0x420
[ 124.155434][ T6506] ksys_write+0x150/0x270
[ 124.155444][ T6506] ? __pfx_ksys_write+0x10/0x10
[ 124.155456][ T6506] do_syscall_64+0x14d/0xf80
[ 124.155466][ T6506] ? trace_irq_disable+0x3b/0x150
[ 124.155479][ T6506] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 124.155489][ T6506] ? clear_bhb_loop+0x40/0x90
[ 124.155499][ T6506] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 124.155508][ T6506] RIP: 0033:0x7fe80935ac4e
[ 124.155518][ T6506] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 124.155526][ T6506] RSP: 002b:00007fe80a25bfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 124.155544][ T6506] RAX: ffffffffffffffda RBX: 00007fe80a25c6c0 RCX: 00007fe80935ac4e
[ 124.155554][ T6506] RDX: 0000000000011dc0 RSI: 00002000000004c0 RDI: 00000000000000c8
[ 124.155564][ T6506] RBP: 00007fe80942dd68 R08: 0000000000000000 R09: 0000000000000000
[ 124.155573][ T6506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 124.155582][ T6506] R13: 00007fe8095d6038 R14: 00007fe8095d5fa0 R15: 00007fffe50f2c98
[ 124.155597][ T6506]
[ 124.465686][ T51] Bluetooth: hci0: command tx timeout
[ 124.477617][ T6506] BUG: Bad page state in process syz.0.17 pfn:6fbad
[ 124.541678][ T6506] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88806fbad770 pfn:0x6fbad
[ 124.551745][ T6506] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 124.558879][ T6506] raw: 00fff00000000000 dead000000000040 ffff88801ab40000 0000000000000000
[ 124.567483][ T6506] raw: ffff88806fbad770 0000000000000001 00000000ffffffff 0000000000000000
[ 124.576073][ T6506] page dumped because: page_pool leak
[ 124.581419][ T6506] page_owner tracks the page as allocated
[ 124.587159][ T6506] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6506, tgid 6504 (syz.0.17), ts 120364220176, free_ts 118406454328
[ 124.604038][ T6506] post_alloc_hook+0x231/0x280
[ 124.608816][ T6506] get_page_from_freelist+0x24dc/0x2580
[ 124.614365][ T6506] __alloc_frozen_pages_noprof+0x18d/0x380
[ 124.620193][ T6506] alloc_pages_bulk_noprof+0x558/0x700
[ 124.625666][ T6506] __page_pool_alloc_netmems_slow+0x14c/0x710
[ 124.631717][ T6506] skb_pp_cow_data+0xc21/0x1680
[ 124.636582][ T6506] do_xdp_generic+0x76b/0x12e0
[ 124.641344][ T6506] __netif_receive_skb_core+0x10e5/0x31a0
[ 124.647085][ T6506] netif_receive_skb+0x1fe/0xc50
[ 124.652026][ T6506] tun_rx_batched+0x1de/0x790
[ 124.656720][ T6506] tun_get_user+0x2a78/0x3dd0
[ 124.661391][ T6506] tun_chr_write_iter+0x113/0x200
[ 124.666437][ T6506] vfs_write+0x61d/0xb90
[ 124.670688][ T6506] ksys_write+0x150/0x270
[ 124.675001][ T6506] do_syscall_64+0x14d/0xf80
[ 124.679604][ T6506] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 124.685493][ T6506] page last free pid 5197 tgid 5197 stack trace:
[ 124.691836][ T6506] __free_frozen_pages+0xc2b/0xdb0
[ 124.697030][ T6506] rcu_core+0x7cd/0x1070
[ 124.701254][ T6506] handle_softirqs+0x22a/0x870
[ 124.706032][ T6506] do_softirq+0x76/0xd0
[ 124.710179][ T6506] __local_bh_enable_ip+0xf8/0x130
[ 124.715265][ T6506] __alloc_skb+0x1aa/0x7d0
[ 124.719687][ T6506] netlink_sendmsg+0x5d4/0xb40
[ 124.724447][ T6506] ____sys_sendmsg+0x972/0x9f0
[ 124.729243][ T6506] ___sys_sendmsg+0x2a5/0x360
[ 124.733926][ T6506] __x64_sys_sendmsg+0x1bd/0x2a0
[ 124.738886][ T6506] do_syscall_64+0x14d/0xf80
[ 124.743474][ T6506] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 124.749386][ T6506] Modules linked in:
[ 124.753275][ T6506] CPU: 0 UID: 0 PID: 6506 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 124.753290][ T6506] Tainted: [B]=BAD_PAGE
[ 124.753293][ T6506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 124.753300][ T6506] Call Trace:
[ 124.753304][ T6506]
[ 124.753308][ T6506] dump_stack_lvl+0xe8/0x150
[ 124.753325][ T6506] bad_page+0x17f/0x1c0
[ 124.753340][ T6506] __free_frozen_pages+0xd62/0xdb0
[ 124.753352][ T6506] bpf_xdp_frags_shrink_tail+0x4da/0x7d0
[ 124.753368][ T6506] bpf_xdp_adjust_tail+0x1d6/0x220
[ 124.753379][ T6506] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 124.753388][ T6506] bpf_prog_run_generic_xdp+0x603/0x1490
[ 124.753406][ T6506] do_xdp_generic+0xac5/0x12e0
[ 124.753417][ T6506] ? __skb_flow_dissect+0x423/0x6d20
[ 124.753429][ T6506] ? __pfx_do_xdp_generic+0x10/0x10
[ 124.753446][ T6506] __netif_receive_skb_core+0x10e5/0x31a0
[ 124.753461][ T6506] ? __pfx___up_read+0x10/0x10
[ 124.753470][ T6506] ? do_user_addr_fault+0xbad/0x1340
[ 124.753483][ T6506] ? __lock_acquire+0x6b5/0x2cf0
[ 124.753496][ T6506] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 124.753509][ T6506] ? lockdep_hardirqs_on+0x7a/0x110
[ 124.753520][ T6506] ? irqentry_exit+0x59e/0x620
[ 124.753530][ T6506] ? trace_irq_disable+0x3b/0x150
[ 124.753546][ T6506] ? lock_acquire+0xf0/0x2e0
[ 124.753558][ T6506] ? rep_movs_alternative+0x4a/0x90
[ 124.753571][ T6506] ? netif_receive_skb+0x102/0xc50
[ 124.753583][ T6506] ? netif_receive_skb+0x102/0xc50
[ 124.753595][ T6506] netif_receive_skb+0x1fe/0xc50
[ 124.753607][ T6506] ? rep_movs_alternative+0x4a/0x90
[ 124.753621][ T6506] ? __pfx_netif_receive_skb+0x10/0x10
[ 124.753632][ T6506] ? __lock_acquire+0x6b5/0x2cf0
[ 124.753644][ T6506] ? tun_rx_batched+0x185/0x790
[ 124.753655][ T6506] tun_rx_batched+0x1de/0x790
[ 124.753665][ T6506] ? __pfx_tun_rx_batched+0x10/0x10
[ 124.753676][ T6506] ? tun_get_user+0x2354/0x3dd0
[ 124.753685][ T6506] ? __local_bh_enable_ip+0xd0/0x130
[ 124.753698][ T6506] ? tun_get_user+0x2669/0x3dd0
[ 124.753706][ T6506] tun_get_user+0x2a78/0x3dd0
[ 124.753717][ T6506] ? aa_file_perm+0x192/0x15e0
[ 124.753726][ T6506] ? aa_file_perm+0x50e/0x15e0
[ 124.753734][ T6506] ? __pfx_tun_get_user+0x10/0x10
[ 124.753743][ T6506] ? aa_file_perm+0x192/0x15e0
[ 124.753752][ T6506] ? __lock_acquire+0x6b5/0x2cf0
[ 124.753765][ T6506] ? ref_tracker_alloc+0x35c/0x4c0
[ 124.753780][ T6506] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 124.753795][ T6506] ? tun_get+0x1c/0x2f0
[ 124.753804][ T6506] ? tun_get+0x1c/0x2f0
[ 124.753812][ T6506] ? tun_get+0x1c/0x2f0
[ 124.753821][ T6506] tun_chr_write_iter+0x113/0x200
[ 124.753831][ T6506] vfs_write+0x61d/0xb90
[ 124.753842][ T6506] ? __pfx_vfs_write+0x10/0x10
[ 124.753854][ T6506] ? __fget_files+0x2a/0x420
[ 124.753869][ T6506] ksys_write+0x150/0x270
[ 124.753879][ T6506] ? __pfx_ksys_write+0x10/0x10
[ 124.753893][ T6506] do_syscall_64+0x14d/0xf80
[ 124.753931][ T6506] ? trace_irq_disable+0x3b/0x150
[ 124.753955][ T6506] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 124.753964][ T6506] ? clear_bhb_loop+0x40/0x90
[ 124.753975][ T6506] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 124.753984][ T6506] RIP: 0033:0x7fe80935ac4e
[ 124.753994][ T6506] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 124.754002][ T6506] RSP: 002b:00007fe80a25bfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 124.754013][ T6506] RAX: ffffffffffffffda RBX: 00007fe80a25c6c0 RCX: 00007fe80935ac4e
[ 124.754020][ T6506] RDX: 0000000000011dc0 RSI: 00002000000004c0 RDI: 00000000000000c8
[ 124.754026][ T6506] RBP: 00007fe80942dd68 R08: 0000000000000000 R09: 0000000000000000
[ 124.754032][ T6506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 124.754037][ T6506] R13: 00007fe8095d6038 R14: 00007fe8095d5fa0 R15: 00007fffe50f2c98
[ 124.754047][ T6506]
[ 124.754054][ T6506] BUG: Bad page state in process syz.0.17 pfn:5bb46
[ 125.134870][ T6506] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805bb46000 pfn:0x5bb46
[ 125.144978][ T6506] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 125.152154][ T6506] raw: 00fff00000000000 dead000000000040 ffff88801ab40000 0000000000000000
[ 125.160768][ T6506] raw: ffff88805bb46000 0000000000000001 00000000ffffffff 0000000000000000
[ 125.169393][ T6506] page dumped because: page_pool leak
[ 125.174751][ T6506] page_owner tracks the page as allocated
[ 125.180481][ T6506] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6506, tgid 6504 (syz.0.17), ts 120364205079, free_ts 118406468472
[ 125.197696][ T6506] post_alloc_hook+0x231/0x280
[ 125.202484][ T6506] get_page_from_freelist+0x24dc/0x2580
[ 125.208057][ T6506] __alloc_frozen_pages_noprof+0x18d/0x380
[ 125.213862][ T6506] alloc_pages_bulk_noprof+0x558/0x700
[ 125.219335][ T6506] __page_pool_alloc_netmems_slow+0x14c/0x710
[ 125.225400][ T6506] skb_pp_cow_data+0xc21/0x1680
[ 125.230288][ T6506] do_xdp_generic+0x76b/0x12e0
[ 125.235052][ T6506] __netif_receive_skb_core+0x10e5/0x31a0
[ 125.240804][ T6506] netif_receive_skb+0x1fe/0xc50
[ 125.245755][ T6506] tun_rx_batched+0x1de/0x790
[ 125.250414][ T6506] tun_get_user+0x2a78/0x3dd0
[ 125.255062][ T6506] tun_chr_write_iter+0x113/0x200
[ 125.260087][ T6506] vfs_write+0x61d/0xb90
[ 125.264321][ T6506] ksys_write+0x150/0x270
[ 125.268666][ T6506] do_syscall_64+0x14d/0xf80
[ 125.273274][ T6506] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 125.279203][ T6506] page last free pid 5197 tgid 5197 stack trace:
[ 125.285535][ T6506] __free_frozen_pages+0xc2b/0xdb0
[ 125.290689][ T6506] rcu_core+0x7cd/0x1070
[ 125.294916][ T6506] handle_softirqs+0x22a/0x870
[ 125.299709][ T6506] do_softirq+0x76/0xd0
[ 125.303866][ T6506] __local_bh_enable_ip+0xf8/0x130
[ 125.308991][ T6506] __alloc_skb+0x1aa/0x7d0
[ 125.313399][ T6506] netlink_sendmsg+0x5d4/0xb40
[ 125.318177][ T6506] ____sys_sendmsg+0x972/0x9f0
[ 125.322938][ T6506] ___sys_sendmsg+0x2a5/0x360
[ 125.327621][ T6506] __x64_sys_sendmsg+0x1bd/0x2a0
[ 125.332550][ T6506] do_syscall_64+0x14d/0xf80
[ 125.337148][ T6506] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 125.343033][ T6506] Modules linked in:
[ 125.346939][ T6506] CPU: 0 UID: 0 PID: 6506 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 125.346962][ T6506] Tainted: [B]=BAD_PAGE
[ 125.346967][ T6506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 125.346975][ T6506] Call Trace:
[ 125.346981][ T6506]
[ 125.346987][ T6506] dump_stack_lvl+0xe8/0x150
[ 125.347012][ T6506] bad_page+0x17f/0x1c0
[ 125.347036][ T6506] __free_frozen_pages+0xd62/0xdb0
[ 125.347057][ T6506] bpf_xdp_frags_shrink_tail+0x4da/0x7d0
[ 125.347085][ T6506] bpf_xdp_adjust_tail+0x1d6/0x220
[ 125.347102][ T6506] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 125.347117][ T6506] bpf_prog_run_generic_xdp+0x603/0x1490
[ 125.347150][ T6506] do_xdp_generic+0xac5/0x12e0
[ 125.347171][ T6506] ? __skb_flow_dissect+0x423/0x6d20
[ 125.347192][ T6506] ? __pfx_do_xdp_generic+0x10/0x10
[ 125.347224][ T6506] __netif_receive_skb_core+0x10e5/0x31a0
[ 125.347249][ T6506] ? __pfx___up_read+0x10/0x10
[ 125.347266][ T6506] ? do_user_addr_fault+0xbad/0x1340
[ 125.347289][ T6506] ? __lock_acquire+0x6b5/0x2cf0
[ 125.347312][ T6506] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 125.347336][ T6506] ? lockdep_hardirqs_on+0x7a/0x110
[ 125.347354][ T6506] ? irqentry_exit+0x59e/0x620
[ 125.347372][ T6506] ? trace_irq_disable+0x3b/0x150
[ 125.347399][ T6506] ? lock_acquire+0xf0/0x2e0
[ 125.347420][ T6506] ? rep_movs_alternative+0x4a/0x90
[ 125.347441][ T6506] ? netif_receive_skb+0x102/0xc50
[ 125.347461][ T6506] ? netif_receive_skb+0x102/0xc50
[ 125.347482][ T6506] netif_receive_skb+0x1fe/0xc50
[ 125.347504][ T6506] ? rep_movs_alternative+0x4a/0x90
[ 125.347527][ T6506] ? __pfx_netif_receive_skb+0x10/0x10
[ 125.347548][ T6506] ? __lock_acquire+0x6b5/0x2cf0
[ 125.347570][ T6506] ? tun_rx_batched+0x185/0x790
[ 125.347588][ T6506] tun_rx_batched+0x1de/0x790
[ 125.347606][ T6506] ? __pfx_tun_rx_batched+0x10/0x10
[ 125.347627][ T6506] ? tun_get_user+0x2354/0x3dd0
[ 125.347642][ T6506] ? __local_bh_enable_ip+0xd0/0x130
[ 125.347665][ T6506] ? tun_get_user+0x2669/0x3dd0
[ 125.347679][ T6506] tun_get_user+0x2a78/0x3dd0
[ 125.347700][ T6506] ? aa_file_perm+0x192/0x15e0
[ 125.347716][ T6506] ? aa_file_perm+0x50e/0x15e0
[ 125.347730][ T6506] ? __pfx_tun_get_user+0x10/0x10
[ 125.347745][ T6506] ? aa_file_perm+0x192/0x15e0
[ 125.347762][ T6506] ? __lock_acquire+0x6b5/0x2cf0
[ 125.347785][ T6506] ? ref_tracker_alloc+0x35c/0x4c0
[ 125.347811][ T6506] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 125.347847][ T6506] ? tun_get+0x1c/0x2f0
[ 125.347865][ T6506] ? tun_get+0x1c/0x2f0
[ 125.347880][ T6506] ? tun_get+0x1c/0x2f0
[ 125.347898][ T6506] tun_chr_write_iter+0x113/0x200
[ 125.347916][ T6506] vfs_write+0x61d/0xb90
[ 125.347936][ T6506] ? __pfx_vfs_write+0x10/0x10
[ 125.347957][ T6506] ? __fget_files+0x2a/0x420
[ 125.347983][ T6506] ksys_write+0x150/0x270
[ 125.348001][ T6506] ? __pfx_ksys_write+0x10/0x10
[ 125.348022][ T6506] do_syscall_64+0x14d/0xf80
[ 125.348039][ T6506] ? trace_irq_disable+0x3b/0x150
[ 125.348063][ T6506] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 125.348078][ T6506] ? clear_bhb_loop+0x40/0x90
[ 125.348097][ T6506] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 125.348113][ T6506] RIP: 0033:0x7fe80935ac4e
[ 125.348128][ T6506] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 125.348142][ T6506] RSP: 002b:00007fe80a25bfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 125.348159][ T6506] RAX: ffffffffffffffda RBX: 00007fe80a25c6c0 RCX: 00007fe80935ac4e
[ 125.348171][ T6506] RDX: 0000000000011dc0 RSI: 00002000000004c0 RDI: 00000000000000c8
[ 125.348182][ T6506] RBP: 00007fe80942dd68 R08: 0000000000000000 R09: 0000000000000000
[ 125.348198][ T6506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 125.348208][ T6506] R13: 00007fe8095d6038 R14: 00007fe8095d5fa0 R15: 00007fffe50f2c98
[ 125.348226][ T6506]
[ 125.348236][ T6506] BUG: Bad page state in process syz.0.17 pfn:5bb47
[ 125.729457][ T6506] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805bb47000 pfn:0x5bb47
[ 125.739552][ T6506] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 125.746682][ T6506] raw: 00fff00000000000 dead000000000040 ffff88801ab40000 0000000000000000
[ 125.755243][ T6506] raw: ffff88805bb47000 0000000000000001 00000000ffffffff 0000000000000000
[ 125.763842][ T6506] page dumped because: page_pool leak
[ 125.769220][ T6506] page_owner tracks the page as allocated
[ 125.774914][ T6506] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6506, tgid 6504 (syz.0.17), ts 120364189468, free_ts 118406482667
[ 125.791782][ T6506] post_alloc_hook+0x231/0x280
[ 125.796571][ T6506] get_page_from_freelist+0x24dc/0x2580
[ 125.802101][ T6506] __alloc_frozen_pages_noprof+0x18d/0x380
[ 125.807913][ T6506] alloc_pages_bulk_noprof+0x558/0x700
[ 125.813365][ T6506] __page_pool_alloc_netmems_slow+0x14c/0x710
[ 125.819449][ T6506] skb_pp_cow_data+0xc21/0x1680
[ 125.824293][ T6506] do_xdp_generic+0x76b/0x12e0
[ 125.829149][ T6506] __netif_receive_skb_core+0x10e5/0x31a0
[ 125.834868][ T6506] netif_receive_skb+0x1fe/0xc50
[ 125.839827][ T6506] tun_rx_batched+0x1de/0x790
[ 125.844495][ T6506] tun_get_user+0x2a78/0x3dd0
[ 125.849182][ T6506] tun_chr_write_iter+0x113/0x200
[ 125.854197][ T6506] vfs_write+0x61d/0xb90
[ 125.858453][ T6506] ksys_write+0x150/0x270
[ 125.862773][ T6506] do_syscall_64+0x14d/0xf80
[ 125.867372][ T6506] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 125.873259][ T6506] page last free pid 5197 tgid 5197 stack trace:
[ 125.879591][ T6506] __free_frozen_pages+0xc2b/0xdb0
[ 125.884695][ T6506] rcu_core+0x7cd/0x1070
[ 125.888951][ T6506] handle_softirqs+0x22a/0x870
[ 125.893768][ T6506] do_softirq+0x76/0xd0
[ 125.897938][ T6506] __local_bh_enable_ip+0xf8/0x130
[ 125.903052][ T6506] __alloc_skb+0x1aa/0x7d0
[ 125.907483][ T6506] netlink_sendmsg+0x5d4/0xb40
[ 125.912242][ T6506] ____sys_sendmsg+0x972/0x9f0
[ 125.917014][ T6506] ___sys_sendmsg+0x2a5/0x360
[ 125.921690][ T6506] __x64_sys_sendmsg+0x1bd/0x2a0
[ 125.926635][ T6506] do_syscall_64+0x14d/0xf80
[ 125.931217][ T6506] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 125.937119][ T6506] Modules linked in:
[ 125.941007][ T6506] CPU: 0 UID: 0 PID: 6506 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 125.941021][ T6506] Tainted: [B]=BAD_PAGE
[ 125.941025][ T6506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 125.941031][ T6506] Call Trace:
[ 125.941035][ T6506]
[ 125.941039][ T6506] dump_stack_lvl+0xe8/0x150
[ 125.941054][ T6506] bad_page+0x17f/0x1c0
[ 125.941070][ T6506] __free_frozen_pages+0xd62/0xdb0
[ 125.941082][ T6506] bpf_xdp_frags_shrink_tail+0x4da/0x7d0
[ 125.941099][ T6506] bpf_xdp_adjust_tail+0x1d6/0x220
[ 125.941110][ T6506] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 125.941119][ T6506] bpf_prog_run_generic_xdp+0x603/0x1490
[ 125.941136][ T6506] do_xdp_generic+0xac5/0x12e0
[ 125.941148][ T6506] ? __skb_flow_dissect+0x423/0x6d20
[ 125.941160][ T6506] ? __pfx_do_xdp_generic+0x10/0x10
[ 125.941177][ T6506] __netif_receive_skb_core+0x10e5/0x31a0
[ 125.941192][ T6506] ? __pfx___up_read+0x10/0x10
[ 125.941201][ T6506] ? do_user_addr_fault+0xbad/0x1340
[ 125.941215][ T6506] ? __lock_acquire+0x6b5/0x2cf0
[ 125.941228][ T6506] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 125.941241][ T6506] ? lockdep_hardirqs_on+0x7a/0x110
[ 125.941251][ T6506] ? irqentry_exit+0x59e/0x620
[ 125.941261][ T6506] ? trace_irq_disable+0x3b/0x150
[ 125.941277][ T6506] ? lock_acquire+0xf0/0x2e0
[ 125.941289][ T6506] ? rep_movs_alternative+0x4a/0x90
[ 125.941302][ T6506] ? netif_receive_skb+0x102/0xc50
[ 125.941314][ T6506] ? netif_receive_skb+0x102/0xc50
[ 125.941326][ T6506] netif_receive_skb+0x1fe/0xc50
[ 125.941339][ T6506] ? rep_movs_alternative+0x4a/0x90
[ 125.941352][ T6506] ? __pfx_netif_receive_skb+0x10/0x10
[ 125.941364][ T6506] ? __lock_acquire+0x6b5/0x2cf0
[ 125.941376][ T6506] ? tun_rx_batched+0x185/0x790
[ 125.941386][ T6506] tun_rx_batched+0x1de/0x790
[ 125.941397][ T6506] ? __pfx_tun_rx_batched+0x10/0x10
[ 125.941408][ T6506] ? tun_get_user+0x2354/0x3dd0
[ 125.941416][ T6506] ? __local_bh_enable_ip+0xd0/0x130
[ 125.941429][ T6506] ? tun_get_user+0x2669/0x3dd0
[ 125.941438][ T6506] tun_get_user+0x2a78/0x3dd0
[ 125.941449][ T6506] ? aa_file_perm+0x192/0x15e0
[ 125.941459][ T6506] ? aa_file_perm+0x50e/0x15e0
[ 125.941467][ T6506] ? __pfx_tun_get_user+0x10/0x10
[ 125.941475][ T6506] ? aa_file_perm+0x192/0x15e0
[ 125.941484][ T6506] ? __lock_acquire+0x6b5/0x2cf0
[ 125.941498][ T6506] ? ref_tracker_alloc+0x35c/0x4c0
[ 125.941513][ T6506] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 125.941527][ T6506] ? tun_get+0x1c/0x2f0
[ 125.941536][ T6506] ? tun_get+0x1c/0x2f0
[ 125.941545][ T6506] ? tun_get+0x1c/0x2f0
[ 125.941553][ T6506] tun_chr_write_iter+0x113/0x200
[ 125.941563][ T6506] vfs_write+0x61d/0xb90
[ 125.941574][ T6506] ? __pfx_vfs_write+0x10/0x10
[ 125.941585][ T6506] ? __fget_files+0x2a/0x420
[ 125.941602][ T6506] ksys_write+0x150/0x270
[ 125.941612][ T6506] ? __pfx_ksys_write+0x10/0x10
[ 125.941623][ T6506] do_syscall_64+0x14d/0xf80
[ 125.941633][ T6506] ? trace_irq_disable+0x3b/0x150
[ 125.941646][ T6506] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 125.941655][ T6506] ? clear_bhb_loop+0x40/0x90
[ 125.941666][ T6506] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 125.941675][ T6506] RIP: 0033:0x7fe80935ac4e
[ 125.941685][ T6506] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 125.941692][ T6506] RSP: 002b:00007fe80a25bfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 125.941703][ T6506] RAX: ffffffffffffffda RBX: 00007fe80a25c6c0 RCX: 00007fe80935ac4e
[ 125.941710][ T6506] RDX: 0000000000011dc0 RSI: 00002000000004c0 RDI: 00000000000000c8
[ 125.941716][ T6506] RBP: 00007fe80942dd68 R08: 0000000000000000 R09: 0000000000000000
[ 125.941722][ T6506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 125.941728][ T6506] R13: 00007fe8095d6038 R14: 00007fe8095d5fa0 R15: 00007fffe50f2c98
[ 125.941737][ T6506]
[ 125.941744][ T6506] BUG: Bad page state in process syz.0.17 pfn:5bf03
[ 126.323153][ T6506] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805bf033c0 pfn:0x5bf03
[ 126.333235][ T6506] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 126.340367][ T6506] raw: 00fff00000000000 dead000000000040 ffff88801ab40000 0000000000000000
[ 126.348955][ T6506] raw: ffff88805bf033c0 0000000000000001 00000000ffffffff 0000000000000000
[ 126.357544][ T6506] page dumped because: page_pool leak
[ 126.362977][ T6506] page_owner tracks the page as allocated
[ 126.368697][ T6506] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6506, tgid 6504 (syz.0.17), ts 120364172959, free_ts 118406496632
[ 126.385582][ T6506] post_alloc_hook+0x231/0x280
[ 126.390349][ T6506] get_page_from_freelist+0x24dc/0x2580
[ 126.395913][ T6506] __alloc_frozen_pages_noprof+0x18d/0x380
[ 126.401718][ T6506] alloc_pages_bulk_noprof+0x558/0x700
[ 126.407196][ T6506] __page_pool_alloc_netmems_slow+0x14c/0x710
[ 126.413261][ T6506] skb_pp_cow_data+0xc21/0x1680
[ 126.418121][ T6506] do_xdp_generic+0x76b/0x12e0
[ 126.422880][ T6506] __netif_receive_skb_core+0x10e5/0x31a0
[ 126.428620][ T6506] netif_receive_skb+0x1fe/0xc50
[ 126.433553][ T6506] tun_rx_batched+0x1de/0x790
[ 126.438242][ T6506] tun_get_user+0x2a78/0x3dd0
[ 126.442923][ T6506] tun_chr_write_iter+0x113/0x200
[ 126.448224][ T6506] vfs_write+0x61d/0xb90
[ 126.452464][ T6506] ksys_write+0x150/0x270
[ 126.456815][ T6506] do_syscall_64+0x14d/0xf80
[ 126.461413][ T6506] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 126.467401][ T6506] page last free pid 5197 tgid 5197 stack trace:
[ 126.473714][ T6506] __free_frozen_pages+0xc2b/0xdb0
[ 126.478845][ T6506] rcu_core+0x7cd/0x1070
[ 126.483084][ T6506] handle_softirqs+0x22a/0x870
[ 126.487862][ T6506] do_softirq+0x76/0xd0
[ 126.492092][ T6506] __local_bh_enable_ip+0xf8/0x130
[ 126.497251][ T6506] __alloc_skb+0x1aa/0x7d0
[ 126.501670][ T6506] netlink_sendmsg+0x5d4/0xb40
[ 126.506470][ T6506] ____sys_sendmsg+0x972/0x9f0
[ 126.511231][ T6506] ___sys_sendmsg+0x2a5/0x360
[ 126.515921][ T6506] __x64_sys_sendmsg+0x1bd/0x2a0
[ 126.520855][ T6506] do_syscall_64+0x14d/0xf80
[ 126.525422][ T6506] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 126.525648][ T51] Bluetooth: hci0: command tx timeout
[ 126.531336][ T6506] Modules linked in:
[ 126.540547][ T6506] CPU: 0 UID: 0 PID: 6506 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 126.540562][ T6506] Tainted: [B]=BAD_PAGE
[ 126.540565][ T6506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 126.540571][ T6506] Call Trace:
[ 126.540576][ T6506]
[ 126.540580][ T6506] dump_stack_lvl+0xe8/0x150
[ 126.540597][ T6506] bad_page+0x17f/0x1c0
[ 126.540612][ T6506] __free_frozen_pages+0xd62/0xdb0
[ 126.540624][ T6506] bpf_xdp_frags_shrink_tail+0x4da/0x7d0
[ 126.540642][ T6506] bpf_xdp_adjust_tail+0x1d6/0x220
[ 126.540653][ T6506] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 126.540662][ T6506] bpf_prog_run_generic_xdp+0x603/0x1490
[ 126.540679][ T6506] do_xdp_generic+0xac5/0x12e0
[ 126.540691][ T6506] ? __skb_flow_dissect+0x423/0x6d20
[ 126.540703][ T6506] ? __pfx_do_xdp_generic+0x10/0x10
[ 126.540725][ T6506] __netif_receive_skb_core+0x10e5/0x31a0
[ 126.540740][ T6506] ? __pfx___up_read+0x10/0x10
[ 126.540749][ T6506] ? do_user_addr_fault+0xbad/0x1340
[ 126.540763][ T6506] ? __lock_acquire+0x6b5/0x2cf0
[ 126.540776][ T6506] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 126.540789][ T6506] ? lockdep_hardirqs_on+0x7a/0x110
[ 126.540800][ T6506] ? irqentry_exit+0x59e/0x620
[ 126.540810][ T6506] ? trace_irq_disable+0x3b/0x150
[ 126.540826][ T6506] ? lock_acquire+0xf0/0x2e0
[ 126.540838][ T6506] ? rep_movs_alternative+0x4a/0x90
[ 126.540851][ T6506] ? netif_receive_skb+0x102/0xc50
[ 126.540863][ T6506] ? netif_receive_skb+0x102/0xc50
[ 126.540875][ T6506] netif_receive_skb+0x1fe/0xc50
[ 126.540888][ T6506] ? rep_movs_alternative+0x4a/0x90
[ 126.540901][ T6506] ? __pfx_netif_receive_skb+0x10/0x10
[ 126.540913][ T6506] ? __lock_acquire+0x6b5/0x2cf0
[ 126.540925][ T6506] ? tun_rx_batched+0x185/0x790
[ 126.540935][ T6506] tun_rx_batched+0x1de/0x790
[ 126.540946][ T6506] ? __pfx_tun_rx_batched+0x10/0x10
[ 126.540957][ T6506] ? tun_get_user+0x2354/0x3dd0
[ 126.540965][ T6506] ? __local_bh_enable_ip+0xd0/0x130
[ 126.540978][ T6506] ? tun_get_user+0x2669/0x3dd0
[ 126.540986][ T6506] tun_get_user+0x2a78/0x3dd0
[ 126.540998][ T6506] ? aa_file_perm+0x192/0x15e0
[ 126.541007][ T6506] ? aa_file_perm+0x50e/0x15e0
[ 126.541015][ T6506] ? __pfx_tun_get_user+0x10/0x10
[ 126.541023][ T6506] ? aa_file_perm+0x192/0x15e0
[ 126.541032][ T6506] ? __lock_acquire+0x6b5/0x2cf0
[ 126.541045][ T6506] ? ref_tracker_alloc+0x35c/0x4c0
[ 126.541060][ T6506] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 126.541075][ T6506] ? tun_get+0x1c/0x2f0
[ 126.541084][ T6506] ? tun_get+0x1c/0x2f0
[ 126.541092][ T6506] ? tun_get+0x1c/0x2f0
[ 126.541101][ T6506] tun_chr_write_iter+0x113/0x200
[ 126.541110][ T6506] vfs_write+0x61d/0xb90
[ 126.541122][ T6506] ? __pfx_vfs_write+0x10/0x10
[ 126.541133][ T6506] ? __fget_files+0x2a/0x420
[ 126.541149][ T6506] ksys_write+0x150/0x270
[ 126.541159][ T6506] ? __pfx_ksys_write+0x10/0x10
[ 126.541170][ T6506] do_syscall_64+0x14d/0xf80
[ 126.541180][ T6506] ? trace_irq_disable+0x3b/0x150
[ 126.541194][ T6506] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 126.541203][ T6506] ? clear_bhb_loop+0x40/0x90
[ 126.541213][ T6506] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 126.541222][ T6506] RIP: 0033:0x7fe80935ac4e
[ 126.541232][ T6506] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 126.541240][ T6506] RSP: 002b:00007fe80a25bfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 126.541251][ T6506] RAX: ffffffffffffffda RBX: 00007fe80a25c6c0 RCX: 00007fe80935ac4e
[ 126.541258][ T6506] RDX: 0000000000011dc0 RSI: 00002000000004c0 RDI: 00000000000000c8
[ 126.541264][ T6506] RBP: 00007fe80942dd68 R08: 0000000000000000 R09: 0000000000000000
[ 126.541270][ T6506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 126.541275][ T6506] R13: 00007fe8095d6038 R14: 00007fe8095d5fa0 R15: 00007fffe50f2c98
[ 126.541285][ T6506]
2026/03/23 13:11:43 executed programs: 3
[ 126.988008][ T6518] BUG: Bad page state in process syz.0.18 pfn:5bb73
[ 126.994741][ T6518] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805bb73000 pfn:0x5bb73
[ 127.004882][ T6518] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 127.012033][ T6518] raw: 00fff00000000000 dead000000000040 ffff88801ab40000 0000000000000000
[ 127.020657][ T6518] raw: ffff88805bb73000 0000000000000001 00000000ffffffff 0000000000000000
[ 127.029248][ T6518] page dumped because: page_pool leak
[ 127.034603][ T6518] page_owner tracks the page as allocated
[ 127.040348][ T6518] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6518, tgid 6517 (syz.0.18), ts 126987920934, free_ts 118405645851
[ 127.057231][ T6518] post_alloc_hook+0x231/0x280
[ 127.062013][ T6518] get_page_from_freelist+0x24dc/0x2580
[ 127.067614][ T6518] __alloc_frozen_pages_noprof+0x18d/0x380
[ 127.073429][ T6518] alloc_pages_bulk_noprof+0x558/0x700
[ 127.078923][ T6518] __page_pool_alloc_netmems_slow+0x14c/0x710
[ 127.084999][ T6518] skb_pp_cow_data+0xc21/0x1680
[ 127.089894][ T6518] do_xdp_generic+0x76b/0x12e0
[ 127.094673][ T6518] __netif_receive_skb_core+0x10e5/0x31a0
[ 127.100443][ T6518] netif_receive_skb+0x1fe/0xc50
[ 127.105476][ T6518] tun_rx_batched+0x1de/0x790
[ 127.110202][ T6518] tun_get_user+0x2a78/0x3dd0
[ 127.114967][ T6518] tun_chr_write_iter+0x113/0x200
[ 127.120054][ T6518] vfs_write+0x61d/0xb90
[ 127.124314][ T6518] ksys_write+0x150/0x270
[ 127.128708][ T6518] do_syscall_64+0x14d/0xf80
[ 127.133300][ T6518] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 127.139250][ T6518] page last free pid 6435 tgid 6435 stack trace:
[ 127.145605][ T6518] __free_frozen_pages+0xc2b/0xdb0
[ 127.150881][ T6518] rcu_core+0x7cd/0x1070
[ 127.155136][ T6518] handle_softirqs+0x22a/0x870
[ 127.159987][ T6518] __irq_exit_rcu+0x5f/0x150
[ 127.164589][ T6518] irq_exit_rcu+0x9/0x30
[ 127.168867][ T6518] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 127.174515][ T6518] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 127.180515][ T6518] Modules linked in:
[ 127.184418][ T6518] CPU: 0 UID: 0 PID: 6518 Comm: syz.0.18 Tainted: G B syzkaller #0 PREEMPT(full)
[ 127.184434][ T6518] Tainted: [B]=BAD_PAGE
[ 127.184437][ T6518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 127.184443][ T6518] Call Trace:
[ 127.184448][ T6518]
[ 127.184452][ T6518] dump_stack_lvl+0xe8/0x150
[ 127.184470][ T6518] bad_page+0x17f/0x1c0
[ 127.184485][ T6518] __free_frozen_pages+0xd62/0xdb0
[ 127.184498][ T6518] bpf_xdp_frags_shrink_tail+0x4da/0x7d0
[ 127.184515][ T6518] bpf_xdp_adjust_tail+0x1d6/0x220
[ 127.184526][ T6518] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 127.184535][ T6518] bpf_prog_run_generic_xdp+0x603/0x1490
[ 127.184551][ T6518] ? lock_release+0x4b/0x3d0
[ 127.184565][ T6518] do_xdp_generic+0xac5/0x12e0
[ 127.184579][ T6518] ? __pfx_do_xdp_generic+0x10/0x10
[ 127.184596][ T6518] __netif_receive_skb_core+0x10e5/0x31a0
[ 127.184611][ T6518] ? __pfx___up_read+0x10/0x10
[ 127.184620][ T6518] ? lock_release+0x4b/0x3d0
[ 127.184633][ T6518] ? do_user_addr_fault+0xc6f/0x1340
[ 127.184647][ T6518] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 127.184663][ T6518] ? irqentry_exit+0x59e/0x620
[ 127.184674][ T6518] ? trace_irq_disable+0x3b/0x150
[ 127.184690][ T6518] ? netif_receive_skb+0x102/0xc50
[ 127.184702][ T6518] ? rcu_is_watching+0x15/0xb0
[ 127.184716][ T6518] ? netif_receive_skb+0x102/0xc50
[ 127.184729][ T6518] ? rep_movs_alternative+0x4a/0x90
[ 127.184742][ T6518] ? netif_receive_skb+0x102/0xc50
[ 127.184753][ T6518] ? netif_receive_skb+0x102/0xc50
[ 127.184766][ T6518] netif_receive_skb+0x1fe/0xc50
[ 127.184778][ T6518] ? rep_movs_alternative+0x4a/0x90
[ 127.184791][ T6518] ? __pfx_netif_receive_skb+0x10/0x10
[ 127.184803][ T6518] ? __pfx__copy_from_iter+0x10/0x10
[ 127.184818][ T6518] ? sock_alloc_send_pskb+0x896/0x990
[ 127.184830][ T6518] ? tun_rx_batched+0x185/0x790
[ 127.184840][ T6518] tun_rx_batched+0x1de/0x790
[ 127.184851][ T6518] ? __pfx_tun_rx_batched+0x10/0x10
[ 127.184859][ T6518] ? skb_header_pointer+0x8e/0x120
[ 127.184870][ T6518] ? rcu_is_watching+0x15/0xb0
[ 127.184882][ T6518] ? lock_acquire+0x57/0x2e0
[ 127.184893][ T6518] ? rcu_is_watching+0x15/0xb0
[ 127.184911][ T6518] ? trace_irq_enable+0x3b/0x150
[ 127.184926][ T6518] ? tun_get_user+0x2669/0x3dd0
[ 127.184934][ T6518] tun_get_user+0x2a78/0x3dd0
[ 127.184946][ T6518] ? futex_unqueue+0x22/0x240
[ 127.184957][ T6518] ? aa_file_perm+0x50e/0x15e0
[ 127.184966][ T6518] ? __pfx_tun_get_user+0x10/0x10
[ 127.184974][ T6518] ? aa_file_perm+0x192/0x15e0
[ 127.184984][ T6518] ? __pfx___futex_wait+0x10/0x10
[ 127.184999][ T6518] ? ref_tracker_alloc+0x35c/0x4c0
[ 127.185014][ T6518] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 127.185029][ T6518] ? tun_get+0x1c/0x2f0
[ 127.185037][ T6518] ? rcu_is_watching+0x15/0xb0
[ 127.185049][ T6518] ? tun_get+0x1c/0x2f0
[ 127.185057][ T6518] ? lock_release+0x4b/0x3d0
[ 127.185068][ T6518] ? apparmor_file_permission+0x1f4/0x300
[ 127.185079][ T6518] ? tun_get+0x1c/0x2f0
[ 127.185088][ T6518] tun_chr_write_iter+0x113/0x200
[ 127.185102][ T6518] vfs_write+0x61d/0xb90
[ 127.185122][ T6518] ? __pfx_vfs_write+0x10/0x10
[ 127.185142][ T6518] ? __fget_files+0x2a/0x420
[ 127.185162][ T6518] ksys_write+0x150/0x270
[ 127.185173][ T6518] ? __pfx_ksys_write+0x10/0x10
[ 127.185184][ T6518] ? rcu_is_watching+0x15/0xb0
[ 127.185205][ T6518] do_syscall_64+0x14d/0xf80
[ 127.185220][ T6518] ? trace_irq_disable+0x3b/0x150
[ 127.185243][ T6518] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 127.185259][ T6518] ? clear_bhb_loop+0x40/0x90
[ 127.185278][ T6518] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 127.185295][ T6518] RIP: 0033:0x7fe80935ac4e
[ 127.185310][ T6518] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 127.185324][ T6518] RSP: 002b:00007fe80a25bfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 127.185343][ T6518] RAX: ffffffffffffffda RBX: 00007fe80a25c6c0 RCX: 00007fe80935ac4e
[ 127.185356][ T6518] RDX: 0000000000011dc0 RSI: 00002000000004c0 RDI: 00000000000000c8
[ 127.185367][ T6518] RBP: 00007fe80942dd68 R08: 0000000000000000 R09: 0000000000000000
[ 127.185377][ T6518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 127.185387][ T6518] R13: 00007fe8095d6038 R14: 00007fe8095d5fa0 R15: 00007fffe50f2c98
[ 127.185406][ T6518]
[ 127.185416][ T6518] BUG: Bad page state in process syz.0.18 pfn:6fb7f
[ 127.611334][ T6518] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88806fb7f110 pfn:0x6fb7f
[ 127.621420][ T6518] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 127.628572][ T6518] raw: 00fff00000000000 dead000000000040 ffff88801ab40000 0000000000000000
[ 127.637210][ T6518] raw: ffff88806fb7f110 0000000000000001 00000000ffffffff 0000000000000000
[ 127.645814][ T6518] page dumped because: page_pool leak
[ 127.651179][ T6518] page_owner tracks the page as allocated
[ 127.656921][ T6518] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6518, tgid 6517 (syz.0.18), ts 126987911822, free_ts 118405676648
[ 127.673788][ T6518] post_alloc_hook+0x231/0x280
[ 127.678567][ T6518] get_page_from_freelist+0x24dc/0x2580
[ 127.684114][ T6518] __alloc_frozen_pages_noprof+0x18d/0x380
[ 127.689939][ T6518] alloc_pages_bulk_noprof+0x558/0x700
[ 127.695392][ T6518] __page_pool_alloc_netmems_slow+0x14c/0x710
[ 127.701478][ T6518] skb_pp_cow_data+0xc21/0x1680
[ 127.706344][ T6518] do_xdp_generic+0x76b/0x12e0
[ 127.711139][ T6518] __netif_receive_skb_core+0x10e5/0x31a0
[ 127.716890][ T6518] netif_receive_skb+0x1fe/0xc50
[ 127.721849][ T6518] tun_rx_batched+0x1de/0x790
[ 127.726540][ T6518] tun_get_user+0x2a78/0x3dd0
[ 127.731218][ T6518] tun_chr_write_iter+0x113/0x200
[ 127.736261][ T6518] vfs_write+0x61d/0xb90
[ 127.740504][ T6518] ksys_write+0x150/0x270
[ 127.744844][ T6518] do_syscall_64+0x14d/0xf80
[ 127.749463][ T6518] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 127.755354][ T6518] page last free pid 6435 tgid 6435 stack trace:
[ 127.761713][ T6518] __free_frozen_pages+0xc2b/0xdb0
[ 127.766867][ T6518] rcu_core+0x7cd/0x1070
[ 127.771114][ T6518] handle_softirqs+0x22a/0x870
[ 127.775912][ T6518] __irq_exit_rcu+0x5f/0x150
[ 127.780516][ T6518] irq_exit_rcu+0x9/0x30
[ 127.784749][ T6518] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 127.790397][ T6518] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 127.796387][ T6518] Modules linked in:
[ 127.800266][ T6518] CPU: 0 UID: 0 PID: 6518 Comm: syz.0.18 Tainted: G B syzkaller #0 PREEMPT(full)
[ 127.800281][ T6518] Tainted: [B]=BAD_PAGE
[ 127.800284][ T6518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 127.800290][ T6518] Call Trace:
[ 127.800295][ T6518]
[ 127.800300][ T6518] dump_stack_lvl+0xe8/0x150
[ 127.800316][ T6518] bad_page+0x17f/0x1c0
[ 127.800331][ T6518] __free_frozen_pages+0xd62/0xdb0
[ 127.800343][ T6518] bpf_xdp_frags_shrink_tail+0x4da/0x7d0
[ 127.800361][ T6518] bpf_xdp_adjust_tail+0x1d6/0x220
[ 127.800372][ T6518] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 127.800381][ T6518] bpf_prog_run_generic_xdp+0x603/0x1490
[ 127.800397][ T6518] ? lock_release+0x4b/0x3d0
[ 127.800411][ T6518] do_xdp_generic+0xac5/0x12e0
[ 127.800425][ T6518] ? __pfx_do_xdp_generic+0x10/0x10
[ 127.800443][ T6518] __netif_receive_skb_core+0x10e5/0x31a0
[ 127.800458][ T6518] ? __pfx___up_read+0x10/0x10
[ 127.800466][ T6518] ? lock_release+0x4b/0x3d0
[ 127.800479][ T6518] ? do_user_addr_fault+0xc6f/0x1340
[ 127.800493][ T6518] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 127.800507][ T6518] ? irqentry_exit+0x59e/0x620
[ 127.800517][ T6518] ? trace_irq_disable+0x3b/0x150
[ 127.800533][ T6518] ? netif_receive_skb+0x102/0xc50
[ 127.800545][ T6518] ? rcu_is_watching+0x15/0xb0
[ 127.800558][ T6518] ? netif_receive_skb+0x102/0xc50
[ 127.800571][ T6518] ? rep_movs_alternative+0x4a/0x90
[ 127.800583][ T6518] ? netif_receive_skb+0x102/0xc50
[ 127.800595][ T6518] ? netif_receive_skb+0x102/0xc50
[ 127.800607][ T6518] netif_receive_skb+0x1fe/0xc50
[ 127.800619][ T6518] ? rep_movs_alternative+0x4a/0x90
[ 127.800632][ T6518] ? __pfx_netif_receive_skb+0x10/0x10
[ 127.800650][ T6518] ? __pfx__copy_from_iter+0x10/0x10
[ 127.800665][ T6518] ? sock_alloc_send_pskb+0x896/0x990
[ 127.800676][ T6518] ? tun_rx_batched+0x185/0x790
[ 127.800687][ T6518] tun_rx_batched+0x1de/0x790
[ 127.800698][ T6518] ? __pfx_tun_rx_batched+0x10/0x10
[ 127.800707][ T6518] ? skb_header_pointer+0x8e/0x120
[ 127.800717][ T6518] ? rcu_is_watching+0x15/0xb0
[ 127.800730][ T6518] ? lock_acquire+0x57/0x2e0
[ 127.800740][ T6518] ? rcu_is_watching+0x15/0xb0
[ 127.800753][ T6518] ? trace_irq_enable+0x3b/0x150
[ 127.800767][ T6518] ? tun_get_user+0x2669/0x3dd0
[ 127.800776][ T6518] tun_get_user+0x2a78/0x3dd0
[ 127.800787][ T6518] ? futex_unqueue+0x22/0x240
[ 127.800799][ T6518] ? aa_file_perm+0x50e/0x15e0
[ 127.800808][ T6518] ? __pfx_tun_get_user+0x10/0x10
[ 127.800816][ T6518] ? aa_file_perm+0x192/0x15e0
[ 127.800826][ T6518] ? __pfx___futex_wait+0x10/0x10
[ 127.800841][ T6518] ? ref_tracker_alloc+0x35c/0x4c0
[ 127.800856][ T6518] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 127.800871][ T6518] ? tun_get+0x1c/0x2f0
[ 127.800879][ T6518] ? rcu_is_watching+0x15/0xb0
[ 127.800893][ T6518] ? tun_get+0x1c/0x2f0
[ 127.800901][ T6518] ? lock_release+0x4b/0x3d0
[ 127.800912][ T6518] ? apparmor_file_permission+0x1f4/0x300
[ 127.800924][ T6518] ? tun_get+0x1c/0x2f0
[ 127.800933][ T6518] tun_chr_write_iter+0x113/0x200
[ 127.800943][ T6518] vfs_write+0x61d/0xb90
[ 127.800955][ T6518] ? __pfx_vfs_write+0x10/0x10
[ 127.800966][ T6518] ? __fget_files+0x2a/0x420
[ 127.800982][ T6518] ksys_write+0x150/0x270
[ 127.800992][ T6518] ? __pfx_ksys_write+0x10/0x10
[ 127.801002][ T6518] ? rcu_is_watching+0x15/0xb0
[ 127.801015][ T6518] do_syscall_64+0x14d/0xf80
[ 127.801026][ T6518] ? trace_irq_disable+0x3b/0x150
[ 127.801039][ T6518] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 127.801048][ T6518] ? clear_bhb_loop+0x40/0x90
[ 127.801059][ T6518] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 127.801068][ T6518] RIP: 0033:0x7fe80935ac4e
[ 127.801077][ T6518] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 127.801085][ T6518] RSP: 002b:00007fe80a25bfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 127.801095][ T6518] RAX: ffffffffffffffda RBX: 00007fe80a25c6c0 RCX: 00007fe80935ac4e
[ 127.801103][ T6518] RDX: 0000000000011dc0 RSI: 00002000000004c0 RDI: 00000000000000c8
[ 127.801113][ T6518] RBP: 00007fe80942dd68 R08: 0000000000000000 R09: 0000000000000000
[ 127.801123][ T6518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 127.801132][ T6518] R13: 00007fe8095d6038 R14: 00007fe8095d5fa0 R15: 00007fffe50f2c98
[ 127.801151][ T6518]
[ 127.801160][ T6518] BUG: Bad page state in process syz.0.18 pfn:5bb5d
[ 128.225783][ T6518] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805bb5d000 pfn:0x5bb5d
[ 128.235864][ T6518] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 128.243067][ T6518] raw: 00fff00000000000 dead000000000040 ffff88801ab40000 0000000000000000
[ 128.251698][ T6518] raw: ffff88805bb5d000 0000000000000001 00000000ffffffff 0000000000000000
[ 128.260288][ T6518] page dumped because: page_pool leak
[ 128.265658][ T6518] page_owner tracks the page as allocated
[ 128.271361][ T6518] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6518, tgid 6517 (syz.0.18), ts 126987901590, free_ts 118405707849
[ 128.288304][ T6518] post_alloc_hook+0x231/0x280
[ 128.293066][ T6518] get_page_from_freelist+0x24dc/0x2580
[ 128.298650][ T6518] __alloc_frozen_pages_noprof+0x18d/0x380
[ 128.304454][ T6518] alloc_pages_bulk_noprof+0x558/0x700
[ 128.309934][ T6518] __page_pool_alloc_netmems_slow+0x14c/0x710
[ 128.316011][ T6518] skb_pp_cow_data+0xc21/0x1680
[ 128.320843][ T6518] do_xdp_generic+0x76b/0x12e0
[ 128.325775][ T6518] __netif_receive_skb_core+0x10e5/0x31a0
[ 128.331506][ T6518] netif_receive_skb+0x1fe/0xc50
[ 128.336469][ T6518] tun_rx_batched+0x1de/0x790
[ 128.341142][ T6518] tun_get_user+0x2a78/0x3dd0
[ 128.345829][ T6518] tun_chr_write_iter+0x113/0x200
[ 128.350844][ T6518] vfs_write+0x61d/0xb90
[ 128.355066][ T6518] ksys_write+0x150/0x270
[ 128.359409][ T6518] do_syscall_64+0x14d/0xf80
[ 128.363996][ T6518] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 128.369929][ T6518] page last free pid 6435 tgid 6435 stack trace:
[ 128.376304][ T6518] __free_frozen_pages+0xc2b/0xdb0
[ 128.381417][ T6518] rcu_core+0x7cd/0x1070
[ 128.385736][ T6518] handle_softirqs+0x22a/0x870
[ 128.390493][ T6518] __irq_exit_rcu+0x5f/0x150
[ 128.395061][ T6518] irq_exit_rcu+0x9/0x30
[ 128.399313][ T6518] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 128.404937][ T6518] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 128.410933][ T6518] Modules linked in:
[ 128.414824][ T6518] CPU: 0 UID: 0 PID: 6518 Comm: syz.0.18 Tainted: G B syzkaller #0 PREEMPT(full)
[ 128.414839][ T6518] Tainted: [B]=BAD_PAGE
[ 128.414842][ T6518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 128.414848][ T6518] Call Trace:
[ 128.414852][ T6518]
[ 128.414856][ T6518] dump_stack_lvl+0xe8/0x150
[ 128.414872][ T6518] bad_page+0x17f/0x1c0
[ 128.414887][ T6518] __free_frozen_pages+0xd62/0xdb0
[ 128.414899][ T6518] bpf_xdp_frags_shrink_tail+0x4da/0x7d0
[ 128.414916][ T6518] bpf_xdp_adjust_tail+0x1d6/0x220
[ 128.414927][ T6518] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 128.414936][ T6518] bpf_prog_run_generic_xdp+0x603/0x1490
[ 128.414953][ T6518] ? lock_release+0x4b/0x3d0
[ 128.414966][ T6518] do_xdp_generic+0xac5/0x12e0
[ 128.414980][ T6518] ? __pfx_do_xdp_generic+0x10/0x10
[ 128.414997][ T6518] __netif_receive_skb_core+0x10e5/0x31a0
[ 128.415012][ T6518] ? __pfx___up_read+0x10/0x10
[ 128.415020][ T6518] ? lock_release+0x4b/0x3d0
[ 128.415033][ T6518] ? do_user_addr_fault+0xc6f/0x1340
[ 128.415047][ T6518] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 128.415061][ T6518] ? irqentry_exit+0x59e/0x620
[ 128.415071][ T6518] ? trace_irq_disable+0x3b/0x150
[ 128.415087][ T6518] ? netif_receive_skb+0x102/0xc50
[ 128.415099][ T6518] ? rcu_is_watching+0x15/0xb0
[ 128.415111][ T6518] ? netif_receive_skb+0x102/0xc50
[ 128.415124][ T6518] ? rep_movs_alternative+0x4a/0x90
[ 128.415137][ T6518] ? netif_receive_skb+0x102/0xc50
[ 128.415148][ T6518] ? netif_receive_skb+0x102/0xc50
[ 128.415161][ T6518] netif_receive_skb+0x1fe/0xc50
[ 128.415173][ T6518] ? rep_movs_alternative+0x4a/0x90
[ 128.415186][ T6518] ? __pfx_netif_receive_skb+0x10/0x10
[ 128.415198][ T6518] ? __pfx__copy_from_iter+0x10/0x10
[ 128.415212][ T6518] ? sock_alloc_send_pskb+0x896/0x990
[ 128.415224][ T6518] ? tun_rx_batched+0x185/0x790
[ 128.415234][ T6518] tun_rx_batched+0x1de/0x790
[ 128.415245][ T6518] ? __pfx_tun_rx_batched+0x10/0x10
[ 128.415253][ T6518] ? skb_header_pointer+0x8e/0x120
[ 128.415264][ T6518] ? rcu_is_watching+0x15/0xb0
[ 128.415277][ T6518] ? lock_acquire+0x57/0x2e0
[ 128.415287][ T6518] ? rcu_is_watching+0x15/0xb0
[ 128.415300][ T6518] ? trace_irq_enable+0x3b/0x150
[ 128.415314][ T6518] ? tun_get_user+0x2669/0x3dd0
[ 128.415322][ T6518] tun_get_user+0x2a78/0x3dd0
[ 128.415334][ T6518] ? futex_unqueue+0x22/0x240
[ 128.415345][ T6518] ? aa_file_perm+0x50e/0x15e0
[ 128.415354][ T6518] ? __pfx_tun_get_user+0x10/0x10
[ 128.415362][ T6518] ? aa_file_perm+0x192/0x15e0
[ 128.415372][ T6518] ? __pfx___futex_wait+0x10/0x10
[ 128.415387][ T6518] ? ref_tracker_alloc+0x35c/0x4c0
[ 128.415402][ T6518] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 128.415417][ T6518] ? tun_get+0x1c/0x2f0
[ 128.415425][ T6518] ? rcu_is_watching+0x15/0xb0
[ 128.415437][ T6518] ? tun_get+0x1c/0x2f0
[ 128.415445][ T6518] ? lock_release+0x4b/0x3d0
[ 128.415457][ T6518] ? apparmor_file_permission+0x1f4/0x300
[ 128.415468][ T6518] ? tun_get+0x1c/0x2f0
[ 128.415478][ T6518] tun_chr_write_iter+0x113/0x200
[ 128.415487][ T6518] vfs_write+0x61d/0xb90
[ 128.415499][ T6518] ? __pfx_vfs_write+0x10/0x10
[ 128.415511][ T6518] ? __fget_files+0x2a/0x420
[ 128.415527][ T6518] ksys_write+0x150/0x270
[ 128.415547][ T6518] ? __pfx_ksys_write+0x10/0x10
[ 128.415563][ T6518] ? rcu_is_watching+0x15/0xb0
[ 128.415599][ T6518] do_syscall_64+0x14d/0xf80
[ 128.415615][ T6518] ? trace_irq_disable+0x3b/0x150
[ 128.415629][ T6518] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 128.415639][ T6518] ? clear_bhb_loop+0x40/0x90
[ 128.415653][ T6518] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 128.415663][ T6518] RIP: 0033:0x7fe80935ac4e
[ 128.415673][ T6518] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 128.415681][ T6518] RSP: 002b:00007fe80a25bfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 128.415692][ T6518] RAX: ffffffffffffffda RBX: 00007fe80a25c6c0 RCX: 00007fe80935ac4e
[ 128.415699][ T6518] RDX: 0000000000011dc0 RSI: 00002000000004c0 RDI: 00000000000000c8
[ 128.415705][ T6518] RBP: 00007fe80942dd68 R08: 0000000000000000 R09: 0000000000000000
[ 128.415711][ T6518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 128.415717][ T6518] R13: 00007fe8095d6038 R14: 00007fe8095d5fa0 R15: 00007fffe50f2c98
[ 128.415727][ T6518]
[ 128.832664][ T6518] BUG: Bad page state in process syz.0.18 pfn:60bee
[ 128.839370][ T6518] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888060beebb0 pfn:0x60bee
[ 128.849467][ T6518] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 128.856606][ T6518] raw: 00fff00000000000 dead000000000040 ffff88801ab40000 0000000000000000
[ 128.865182][ T6518] raw: ffff888060beebb0 0000000000000001 00000000ffffffff 0000000000000000
[ 128.873792][ T6518] page dumped because: page_pool leak
[ 128.879170][ T6518] page_owner tracks the page as allocated
[ 128.884863][ T6518] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6518, tgid 6517 (syz.0.18), ts 126987891179, free_ts 118405738213
[ 128.901711][ T6518] post_alloc_hook+0x231/0x280
[ 128.906496][ T6518] get_page_from_freelist+0x24dc/0x2580
[ 128.912036][ T6518] __alloc_frozen_pages_noprof+0x18d/0x380
[ 128.917854][ T6518] alloc_pages_bulk_noprof+0x558/0x700
[ 128.923326][ T6518] __page_pool_alloc_netmems_slow+0x14c/0x710
[ 128.929410][ T6518] skb_pp_cow_data+0xc21/0x1680
[ 128.934257][ T6518] do_xdp_generic+0x76b/0x12e0
[ 128.939037][ T6518] __netif_receive_skb_core+0x10e5/0x31a0
[ 128.944792][ T6518] netif_receive_skb+0x1fe/0xc50
[ 128.949748][ T6518] tun_rx_batched+0x1de/0x790
[ 128.954419][ T6518] tun_get_user+0x2a78/0x3dd0
[ 128.959099][ T6518] tun_chr_write_iter+0x113/0x200
[ 128.964375][ T6518] vfs_write+0x61d/0xb90
[ 128.968634][ T6518] ksys_write+0x150/0x270
[ 128.972960][ T6518] do_syscall_64+0x14d/0xf80
[ 128.977592][ T6518] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 128.983478][ T6518] page last free pid 6435 tgid 6435 stack trace:
[ 128.989823][ T6518] __free_frozen_pages+0xc2b/0xdb0
[ 128.994935][ T6518] rcu_core+0x7cd/0x1070
[ 128.999199][ T6518] handle_softirqs+0x22a/0x870
[ 129.003957][ T6518] __irq_exit_rcu+0x5f/0x150
[ 129.008557][ T6518] irq_exit_rcu+0x9/0x30
[ 129.012795][ T6518] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 129.018433][ T6518] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 129.024404][ T6518] Modules linked in:
[ 129.028305][ T6518] CPU: 0 UID: 0 PID: 6518 Comm: syz.0.18 Tainted: G B syzkaller #0 PREEMPT(full)
[ 129.028328][ T6518] Tainted: [B]=BAD_PAGE
[ 129.028333][ T6518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 129.028341][ T6518] Call Trace:
[ 129.028348][ T6518]
[ 129.028354][ T6518] dump_stack_lvl+0xe8/0x150
[ 129.028377][ T6518] bad_page+0x17f/0x1c0
[ 129.028400][ T6518] __free_frozen_pages+0xd62/0xdb0
[ 129.028419][ T6518] bpf_xdp_frags_shrink_tail+0x4da/0x7d0
[ 129.028448][ T6518] bpf_xdp_adjust_tail+0x1d6/0x220
[ 129.028468][ T6518] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 129.028484][ T6518] bpf_prog_run_generic_xdp+0x603/0x1490
[ 129.028513][ T6518] ? lock_release+0x4b/0x3d0
[ 129.028537][ T6518] do_xdp_generic+0xac5/0x12e0
[ 129.028569][ T6518] ? __pfx_do_xdp_generic+0x10/0x10
[ 129.028601][ T6518] __netif_receive_skb_core+0x10e5/0x31a0
[ 129.028626][ T6518] ? __pfx___up_read+0x10/0x10
[ 129.028641][ T6518] ? lock_release+0x4b/0x3d0
[ 129.028665][ T6518] ? do_user_addr_fault+0xc6f/0x1340
[ 129.028688][ T6518] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 129.028712][ T6518] ? irqentry_exit+0x59e/0x620
[ 129.028730][ T6518] ? trace_irq_disable+0x3b/0x150
[ 129.028757][ T6518] ? netif_receive_skb+0x102/0xc50
[ 129.028779][ T6518] ? rcu_is_watching+0x15/0xb0
[ 129.028800][ T6518] ? netif_receive_skb+0x102/0xc50
[ 129.028820][ T6518] ? rep_movs_alternative+0x4a/0x90
[ 129.028842][ T6518] ? netif_receive_skb+0x102/0xc50
[ 129.028862][ T6518] ? netif_receive_skb+0x102/0xc50
[ 129.028883][ T6518] netif_receive_skb+0x1fe/0xc50
[ 129.028904][ T6518] ? rep_movs_alternative+0x4a/0x90
[ 129.028928][ T6518] ? __pfx_netif_receive_skb+0x10/0x10
[ 129.028949][ T6518] ? __pfx__copy_from_iter+0x10/0x10
[ 129.028972][ T6518] ? sock_alloc_send_pskb+0x896/0x990
[ 129.028992][ T6518] ? tun_rx_batched+0x185/0x790
[ 129.029010][ T6518] tun_rx_batched+0x1de/0x790
[ 129.029029][ T6518] ? __pfx_tun_rx_batched+0x10/0x10
[ 129.029045][ T6518] ? skb_header_pointer+0x8e/0x120
[ 129.029064][ T6518] ? rcu_is_watching+0x15/0xb0
[ 129.029085][ T6518] ? lock_acquire+0x57/0x2e0
[ 129.029104][ T6518] ? rcu_is_watching+0x15/0xb0
[ 129.029126][ T6518] ? trace_irq_enable+0x3b/0x150
[ 129.029150][ T6518] ? tun_get_user+0x2669/0x3dd0
[ 129.029166][ T6518] tun_get_user+0x2a78/0x3dd0
[ 129.029186][ T6518] ? futex_unqueue+0x22/0x240
[ 129.029207][ T6518] ? aa_file_perm+0x50e/0x15e0
[ 129.029222][ T6518] ? __pfx_tun_get_user+0x10/0x10
[ 129.029237][ T6518] ? aa_file_perm+0x192/0x15e0
[ 129.029255][ T6518] ? __pfx___futex_wait+0x10/0x10
[ 129.029281][ T6518] ? ref_tracker_alloc+0x35c/0x4c0
[ 129.029306][ T6518] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 129.029331][ T6518] ? tun_get+0x1c/0x2f0
[ 129.029347][ T6518] ? rcu_is_watching+0x15/0xb0
[ 129.029366][ T6518] ? tun_get+0x1c/0x2f0
[ 129.029381][ T6518] ? lock_release+0x4b/0x3d0
[ 129.029402][ T6518] ? apparmor_file_permission+0x1f4/0x300
[ 129.029423][ T6518] ? tun_get+0x1c/0x2f0
[ 129.029441][ T6518] tun_chr_write_iter+0x113/0x200
[ 129.029458][ T6518] vfs_write+0x61d/0xb90
[ 129.029481][ T6518] ? __pfx_vfs_write+0x10/0x10
[ 129.029503][ T6518] ? __fget_files+0x2a/0x420
[ 129.029530][ T6518] ksys_write+0x150/0x270
[ 129.029548][ T6518] ? __pfx_ksys_write+0x10/0x10
[ 129.029573][ T6518] ? rcu_is_watching+0x15/0xb0
[ 129.029598][ T6518] do_syscall_64+0x14d/0xf80
[ 129.029615][ T6518] ? trace_irq_disable+0x3b/0x150
[ 129.029637][ T6518] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 129.029654][ T6518] ? clear_bhb_loop+0x40/0x90
[ 129.029673][ T6518] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 129.029689][ T6518] RIP: 0033:0x7fe80935ac4e
[ 129.029704][ T6518] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 129.029718][ T6518] RSP: 002b:00007fe80a25bfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 129.029735][ T6518] RAX: ffffffffffffffda RBX: 00007fe80a25c6c0 RCX: 00007fe80935ac4e
[ 129.029747][ T6518] RDX: 0000000000011dc0 RSI: 00002000000004c0 RDI: 00000000000000c8
[ 129.029758][ T6518] RBP: 00007fe80942dd68 R08: 0000000000000000 R09: 0000000000000000
[ 129.029769][ T6518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 129.029778][ T6518] R13: 00007fe8095d6038 R14: 00007fe8095d5fa0 R15: 00007fffe50f2c98
[ 129.029797][ T6518]
[ 129.029807][ T6518] BUG: Bad page state in process syz.0.18 pfn:5bb72
[ 129.454015][ T6518] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805bb72000 pfn:0x5bb72
[ 129.464098][ T6518] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 129.471244][ T6518] raw: 00fff00000000000 dead000000000040 ffff88801ab40000 0000000000000000
[ 129.479869][ T6518] raw: ffff88805bb72000 0000000000000001 00000000ffffffff 0000000000000000
[ 129.488473][ T6518] page dumped because: page_pool leak
[ 129.493835][ T6518] page_owner tracks the page as allocated
[ 129.499571][ T6518] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6518, tgid 6517 (syz.0.18), ts 126987881418, free_ts 118405756299
[ 129.516520][ T6518] post_alloc_hook+0x231/0x280
[ 129.521278][ T6518] get_page_from_freelist+0x24dc/0x2580
[ 129.526841][ T6518] __alloc_frozen_pages_noprof+0x18d/0x380
[ 129.532644][ T6518] alloc_pages_bulk_noprof+0x558/0x700
[ 129.538118][ T6518] __page_pool_alloc_netmems_slow+0x14c/0x710
[ 129.544182][ T6518] skb_pp_cow_data+0xc21/0x1680
[ 129.549075][ T6518] do_xdp_generic+0x76b/0x12e0
[ 129.554015][ T6518] __netif_receive_skb_core+0x10e5/0x31a0
[ 129.559760][ T6518] netif_receive_skb+0x1fe/0xc50
[ 129.564723][ T6518] tun_rx_batched+0x1de/0x790
[ 129.569416][ T6518] tun_get_user+0x2a78/0x3dd0
[ 129.574094][ T6518] tun_chr_write_iter+0x113/0x200
[ 129.579140][ T6518] vfs_write+0x61d/0xb90
[ 129.583375][ T6518] ksys_write+0x150/0x270
[ 129.587717][ T6518] do_syscall_64+0x14d/0xf80
[ 129.592302][ T6518] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 129.598222][ T6518] page last free pid 6435 tgid 6435 stack trace:
[ 129.604544][ T6518] __free_frozen_pages+0xc2b/0xdb0
[ 129.609691][ T6518] rcu_core+0x7cd/0x1070
[ 129.613931][ T6518] handle_softirqs+0x22a/0x870
[ 129.618700][ T6518] __irq_exit_rcu+0x5f/0x150
[ 129.623288][ T6518] irq_exit_rcu+0x9/0x30
[ 129.627548][ T6518] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 129.633259][ T6518] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 129.639278][ T6518] Modules linked in:
[ 129.643171][ T6518] CPU: 0 UID: 0 PID: 6518 Comm: syz.0.18 Tainted: G B syzkaller #0 PREEMPT(full)
[ 129.643187][ T6518] Tainted: [B]=BAD_PAGE
[ 129.643190][ T6518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 129.643196][ T6518] Call Trace:
[ 129.643200][ T6518]
[ 129.643204][ T6518] dump_stack_lvl+0xe8/0x150
[ 129.643220][ T6518] bad_page+0x17f/0x1c0
[ 129.643235][ T6518] __free_frozen_pages+0xd62/0xdb0
[ 129.643248][ T6518] bpf_xdp_frags_shrink_tail+0x4da/0x7d0
[ 129.643265][ T6518] bpf_xdp_adjust_tail+0x1d6/0x220
[ 129.643276][ T6518] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 129.643285][ T6518] bpf_prog_run_generic_xdp+0x603/0x1490
[ 129.643301][ T6518] ? lock_release+0x4b/0x3d0
[ 129.643314][ T6518] do_xdp_generic+0xac5/0x12e0
[ 129.643328][ T6518] ? __pfx_do_xdp_generic+0x10/0x10
[ 129.643346][ T6518] __netif_receive_skb_core+0x10e5/0x31a0
[ 129.643361][ T6518] ? __pfx___up_read+0x10/0x10
[ 129.643370][ T6518] ? lock_release+0x4b/0x3d0
[ 129.643383][ T6518] ? do_user_addr_fault+0xc6f/0x1340
[ 129.643397][ T6518] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 129.643411][ T6518] ? irqentry_exit+0x59e/0x620
[ 129.643421][ T6518] ? trace_irq_disable+0x3b/0x150
[ 129.643437][ T6518] ? netif_receive_skb+0x102/0xc50
[ 129.643450][ T6518] ? rcu_is_watching+0x15/0xb0
[ 129.643462][ T6518] ? netif_receive_skb+0x102/0xc50
[ 129.643475][ T6518] ? rep_movs_alternative+0x4a/0x90
[ 129.643488][ T6518] ? netif_receive_skb+0x102/0xc50
[ 129.643499][ T6518] ? netif_receive_skb+0x102/0xc50
[ 129.643512][ T6518] netif_receive_skb+0x1fe/0xc50
[ 129.643524][ T6518] ? rep_movs_alternative+0x4a/0x90
[ 129.643563][ T6518] ? __pfx_netif_receive_skb+0x10/0x10
[ 129.643575][ T6518] ? __pfx__copy_from_iter+0x10/0x10
[ 129.643590][ T6518] ? sock_alloc_send_pskb+0x896/0x990
[ 129.643602][ T6518] ? tun_rx_batched+0x185/0x790
[ 129.643612][ T6518] tun_rx_batched+0x1de/0x790
[ 129.643623][ T6518] ? __pfx_tun_rx_batched+0x10/0x10
[ 129.643632][ T6518] ? skb_header_pointer+0x8e/0x120
[ 129.643642][ T6518] ? rcu_is_watching+0x15/0xb0
[ 129.643655][ T6518] ? lock_acquire+0x57/0x2e0
[ 129.643665][ T6518] ? rcu_is_watching+0x15/0xb0
[ 129.643678][ T6518] ? trace_irq_enable+0x3b/0x150
[ 129.643692][ T6518] ? tun_get_user+0x2669/0x3dd0
[ 129.643701][ T6518] tun_get_user+0x2a78/0x3dd0
[ 129.643712][ T6518] ? futex_unqueue+0x22/0x240
[ 129.643724][ T6518] ? aa_file_perm+0x50e/0x15e0
[ 129.643733][ T6518] ? __pfx_tun_get_user+0x10/0x10
[ 129.643741][ T6518] ? aa_file_perm+0x192/0x15e0
[ 129.643751][ T6518] ? __pfx___futex_wait+0x10/0x10
[ 129.643766][ T6518] ? ref_tracker_alloc+0x35c/0x4c0
[ 129.643780][ T6518] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 129.643795][ T6518] ? tun_get+0x1c/0x2f0
[ 129.643803][ T6518] ? rcu_is_watching+0x15/0xb0
[ 129.643816][ T6518] ? tun_get+0x1c/0x2f0
[ 129.643823][ T6518] ? lock_release+0x4b/0x3d0
[ 129.643835][ T6518] ? apparmor_file_permission+0x1f4/0x300
[ 129.643846][ T6518] ? tun_get+0x1c/0x2f0
[ 129.643855][ T6518] tun_chr_write_iter+0x113/0x200
[ 129.643865][ T6518] vfs_write+0x61d/0xb90
[ 129.643876][ T6518] ? __pfx_vfs_write+0x10/0x10
[ 129.643888][ T6518] ? __fget_files+0x2a/0x420
[ 129.643903][ T6518] ksys_write+0x150/0x270
[ 129.643914][ T6518] ? __pfx_ksys_write+0x10/0x10
[ 129.643924][ T6518] ? rcu_is_watching+0x15/0xb0
[ 129.643937][ T6518] do_syscall_64+0x14d/0xf80
[ 129.643947][ T6518] ? trace_irq_disable+0x3b/0x150
[ 129.643960][ T6518] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 129.643969][ T6518] ? clear_bhb_loop+0x40/0x90
[ 129.643980][ T6518] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 129.643989][ T6518] RIP: 0033:0x7fe80935ac4e
[ 129.643998][ T6518] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 129.644006][ T6518] RSP: 002b:00007fe80a25bfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 129.644018][ T6518] RAX: ffffffffffffffda RBX: 00007fe80a25c6c0 RCX: 00007fe80935ac4e
[ 129.644025][ T6518] RDX: 0000000000011dc0 RSI: 00002000000004c0 RDI: 00000000000000c8
[ 129.644031][ T6518] RBP: 00007fe80942dd68 R08: 0000000000000000 R09: 0000000000000000
[ 129.644036][ T6518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 129.644042][ T6518] R13: 00007fe8095d6038 R14: 00007fe8095d5fa0 R15: 00007fffe50f2c98
[ 129.644052][ T6518]
[ 129.644059][ T6518] BUG: Bad page state in process syz.0.18 pfn:5bb6e
[ 130.068533][ T6518] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805bb6e140 pfn:0x5bb6e
[ 130.078610][ T6518] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 130.085752][ T6518] raw: 00fff00000000000 dead000000000040 ffff88801ab40000 0000000000000000
[ 130.094334][ T6518] raw: ffff88805bb6e140 0000000000000001 00000000ffffffff 0000000000000000
[ 130.103037][ T6518] page dumped because: page_pool leak
[ 130.108421][ T6518] page_owner tracks the page as allocated
[ 130.114115][ T6518] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6518, tgid 6517 (syz.0.18), ts 126987871651, free_ts 118405772199
[ 130.131019][ T6518] post_alloc_hook+0x231/0x280
[ 130.135832][ T6518] get_page_from_freelist+0x24dc/0x2580
[ 130.141383][ T6518] __alloc_frozen_pages_noprof+0x18d/0x380
[ 130.147202][ T6518] alloc_pages_bulk_noprof+0x558/0x700
[ 130.152656][ T6518] __page_pool_alloc_netmems_slow+0x14c/0x710
[ 130.158740][ T6518] skb_pp_cow_data+0xc21/0x1680
[ 130.163587][ T6518] do_xdp_generic+0x76b/0x12e0
[ 130.168366][ T6518] __netif_receive_skb_core+0x10e5/0x31a0
[ 130.174086][ T6518] netif_receive_skb+0x1fe/0xc50
[ 130.179039][ T6518] tun_rx_batched+0x1de/0x790
[ 130.183712][ T6518] tun_get_user+0x2a78/0x3dd0
[ 130.188402][ T6518] tun_chr_write_iter+0x113/0x200
[ 130.193419][ T6518] vfs_write+0x61d/0xb90
[ 130.197672][ T6518] ksys_write+0x150/0x270
[ 130.201992][ T6518] do_syscall_64+0x14d/0xf80
[ 130.206590][ T6518] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 130.212476][ T6518] page last free pid 6435 tgid 6435 stack trace:
[ 130.218829][ T6518] __free_frozen_pages+0xc2b/0xdb0
[ 130.223939][ T6518] rcu_core+0x7cd/0x1070
[ 130.228214][ T6518] handle_softirqs+0x22a/0x870
[ 130.232984][ T6518] __irq_exit_rcu+0x5f/0x150
[ 130.237608][ T6518] irq_exit_rcu+0x9/0x30
[ 130.241864][ T6518] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 130.247554][ T6518] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 130.253532][ T6518] Modules linked in:
[ 130.257449][ T6518] CPU: 0 UID: 0 PID: 6518 Comm: syz.0.18 Tainted: G B syzkaller #0 PREEMPT(full)
[ 130.257472][ T6518] Tainted: [B]=BAD_PAGE
[ 130.257477][ T6518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 130.257485][ T6518] Call Trace:
[ 130.257491][ T6518]
[ 130.257497][ T6518] dump_stack_lvl+0xe8/0x150
[ 130.257520][ T6518] bad_page+0x17f/0x1c0
[ 130.257544][ T6518] __free_frozen_pages+0xd62/0xdb0
[ 130.257561][ T6518] bpf_xdp_frags_shrink_tail+0x4da/0x7d0
[ 130.257587][ T6518] bpf_xdp_adjust_tail+0x1d6/0x220
[ 130.257604][ T6518] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 130.257618][ T6518] bpf_prog_run_generic_xdp+0x603/0x1490
[ 130.257643][ T6518] ? lock_release+0x4b/0x3d0
[ 130.257665][ T6518] do_xdp_generic+0xac5/0x12e0
[ 130.257691][ T6518] ? __pfx_do_xdp_generic+0x10/0x10
[ 130.257724][ T6518] __netif_receive_skb_core+0x10e5/0x31a0
[ 130.257751][ T6518] ? __pfx___up_read+0x10/0x10
[ 130.257767][ T6518] ? lock_release+0x4b/0x3d0
[ 130.257798][ T6518] ? do_user_addr_fault+0xc6f/0x1340
[ 130.257820][ T6518] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 130.257845][ T6518] ? irqentry_exit+0x59e/0x620
[ 130.257862][ T6518] ? trace_irq_disable+0x3b/0x150
[ 130.257890][ T6518] ? netif_receive_skb+0x102/0xc50
[ 130.257911][ T6518] ? rcu_is_watching+0x15/0xb0
[ 130.257933][ T6518] ? netif_receive_skb+0x102/0xc50
[ 130.257955][ T6518] ? rep_movs_alternative+0x4a/0x90
[ 130.257978][ T6518] ? netif_receive_skb+0x102/0xc50