Warning: Permanently added '10.128.1.220' (ED25519) to the list of known hosts.
2026/03/23 13:35:47 parsed 1 programs
Setting up swapspace version 1, size = 127995904 bytes
[ 110.739495][ T6145] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 113.948193][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 113.956563][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 113.982765][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 113.991172][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 114.870790][ T6189] chnl_net:caif_netlink_parms(): no params data found
[ 114.967205][ T6189] bridge0: port 1(bridge_slave_0) entered blocking state
[ 114.974699][ T6189] bridge0: port 1(bridge_slave_0) entered disabled state
[ 114.981956][ T6189] bridge_slave_0: entered allmulticast mode
[ 114.988845][ T6189] bridge_slave_0: entered promiscuous mode
[ 115.004662][ T6189] bridge0: port 2(bridge_slave_1) entered blocking state
[ 115.012457][ T6189] bridge0: port 2(bridge_slave_1) entered disabled state
[ 115.019617][ T6189] bridge_slave_1: entered allmulticast mode
[ 115.027103][ T6189] bridge_slave_1: entered promiscuous mode
[ 115.055489][ T6189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 115.067380][ T6189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 115.099056][ T6189] team0: Port device team_slave_0 added
[ 115.108722][ T6189] team0: Port device team_slave_1 added
[ 115.133630][ T6189] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 115.140631][ T6189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 115.167881][ T6189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 115.180538][ T6189] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 115.187585][ T6189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 115.214068][ T6189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 115.263673][ T6189] hsr_slave_0: entered promiscuous mode
[ 115.270419][ T6189] hsr_slave_1: entered promiscuous mode
[ 115.807181][ T6189] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 115.819290][ T6189] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 115.835821][ T6189] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 115.848611][ T6189] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 115.886944][ T6189] bridge0: port 2(bridge_slave_1) entered blocking state
[ 115.894168][ T6189] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 115.901909][ T6189] bridge0: port 1(bridge_slave_0) entered blocking state
[ 115.909254][ T6189] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 115.943637][ T3562] bridge0: port 1(bridge_slave_0) entered disabled state
[ 115.953293][ T3562] bridge0: port 2(bridge_slave_1) entered disabled state
[ 116.000963][ T6189] 8021q: adding VLAN 0 to HW filter on device bond0
[ 116.024966][ T6189] 8021q: adding VLAN 0 to HW filter on device team0
[ 116.038111][ T3562] bridge0: port 1(bridge_slave_0) entered blocking state
[ 116.045323][ T3562] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 116.069673][ T3562] bridge0: port 2(bridge_slave_1) entered blocking state
[ 116.076887][ T3562] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 116.308294][ T6189] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 116.359136][ T6189] veth0_vlan: entered promiscuous mode
[ 116.372851][ T6189] veth1_vlan: entered promiscuous mode
[ 116.403404][ T6189] veth0_macvtap: entered promiscuous mode
[ 116.415633][ T6189] veth1_macvtap: entered promiscuous mode
[ 116.442697][ T6189] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 116.459162][ T6189] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 116.477004][ T3562] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 116.502343][ T3562] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 116.526817][ T3562] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 116.542629][ T3562] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 116.705630][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 116.763676][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 116.806356][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 116.893930][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 118.437370][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 118.446914][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 118.457400][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 118.483686][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 118.495779][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
2026/03/23 13:36:00 executed programs: 0
[ 119.365393][ T5146] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 119.374079][ T5146] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 119.384427][ T5146] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 119.392405][ T5146] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 119.402356][ T5146] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 119.491135][ T49] bridge_slave_1: left allmulticast mode
[ 119.496820][ T49] bridge_slave_1: left promiscuous mode
[ 119.510428][ T49] bridge0: port 2(bridge_slave_1) entered disabled state
[ 119.523802][ T49] bridge_slave_0: left allmulticast mode
[ 119.529677][ T49] bridge_slave_0: left promiscuous mode
[ 119.539493][ T49] bridge0: port 1(bridge_slave_0) entered disabled state
[ 119.710691][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 119.723409][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 119.733731][ T49] bond0 (unregistering): Released all slaves
[ 119.845292][ T49] hsr_slave_0: left promiscuous mode
[ 119.851500][ T49] hsr_slave_1: left promiscuous mode
[ 119.857587][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 119.868402][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 119.876776][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 119.884322][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 119.901356][ T49] veth1_macvtap: left promiscuous mode
[ 119.906881][ T49] veth0_macvtap: left promiscuous mode
[ 119.912551][ T49] veth1_vlan: left promiscuous mode
[ 119.917826][ T49] veth0_vlan: left promiscuous mode
[ 120.167956][ T49] team0 (unregistering): Port device team_slave_1 removed
[ 120.196799][ T49] team0 (unregistering): Port device team_slave_0 removed
[ 120.572820][ T6347] chnl_net:caif_netlink_parms(): no params data found
[ 120.786164][ T6347] bridge0: port 1(bridge_slave_0) entered blocking state
[ 120.793477][ T6347] bridge0: port 1(bridge_slave_0) entered disabled state
[ 120.801129][ T6347] bridge_slave_0: entered allmulticast mode
[ 120.808774][ T6347] bridge_slave_0: entered promiscuous mode
[ 120.825737][ T6347] bridge0: port 2(bridge_slave_1) entered blocking state
[ 120.834471][ T6347] bridge0: port 2(bridge_slave_1) entered disabled state
[ 120.842956][ T6347] bridge_slave_1: entered allmulticast mode
[ 120.852456][ T6347] bridge_slave_1: entered promiscuous mode
[ 120.898379][ T6347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 120.911639][ T6347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 121.352058][ T6347] team0: Port device team_slave_0 added
[ 121.360900][ T6347] team0: Port device team_slave_1 added
[ 121.439026][ T6347] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 121.452549][ T6347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 121.488273][ T51] Bluetooth: hci0: command tx timeout
[ 121.501633][ T6347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 121.514074][ T6347] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 121.523580][ T6347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 121.549828][ T6347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 121.647014][ T6347] hsr_slave_0: entered promiscuous mode
[ 121.657465][ T6347] hsr_slave_1: entered promiscuous mode
[ 122.336357][ T6347] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 122.351989][ T6347] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 122.365783][ T6347] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 122.387361][ T6347] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 122.483770][ T6347] 8021q: adding VLAN 0 to HW filter on device bond0
[ 122.505082][ T6347] 8021q: adding VLAN 0 to HW filter on device team0
[ 122.520495][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state
[ 122.527660][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 122.544483][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state
[ 122.551756][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 122.774950][ T6347] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 122.832630][ T6347] veth0_vlan: entered promiscuous mode
[ 122.845983][ T6347] veth1_vlan: entered promiscuous mode
[ 122.884718][ T6347] veth0_macvtap: entered promiscuous mode
[ 122.896495][ T6347] veth1_macvtap: entered promiscuous mode
[ 122.922705][ T6347] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 122.937811][ T6347] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 122.955124][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 122.982473][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 123.006991][ T1146] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 123.019420][ T1146] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 123.058886][ T3562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 123.075193][ T3562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 123.108295][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 123.116356][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 123.180894][ T6466] BUG: Bad page state in process syz.0.17 pfn:79c1f
[ 123.187722][ T6466] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888079c1f2c0 pfn:0x79c1f
[ 123.198049][ T6466] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 123.205270][ T6466] raw: 00fff00000000000 dead000000000040 ffff888022a97000 0000000000000000
[ 123.213940][ T6466] raw: ffff888079c1f2c0 3fffffffffffffff 00000000ffffffff 0000000000000000
[ 123.222567][ T6466] page dumped because: page_pool leak
[ 123.227941][ T6466] page_owner tracks the page as allocated
[ 123.233785][ T6466] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6466, tgid 6465 (syz.0.17), ts 123180733481, free_ts 121901665783
[ 123.250667][ T6466] post_alloc_hook+0x231/0x280
[ 123.255533][ T6466] get_page_from_freelist+0x24dc/0x2580
[ 123.261122][ T6466] __alloc_frozen_pages_noprof+0x18d/0x380
[ 123.266942][ T6466] alloc_pages_bulk_noprof+0x558/0x700
[ 123.272449][ T6466] __page_pool_alloc_netmems_slow+0x14c/0x710
[ 123.278626][ T6466] page_pool_alloc_frag_netmem+0x421/0x9b0
[ 123.284569][ T6466] skb_pp_cow_data+0xc43/0x1680
[ 123.289427][ T6466] do_xdp_generic+0x76b/0x12e0
[ 123.294274][ T6466] tun_get_user+0x247d/0x3dd0
[ 123.298973][ T6466] tun_chr_write_iter+0x113/0x200
[ 123.304041][ T6466] vfs_write+0x61d/0xb90
[ 123.308294][ T6466] ksys_write+0x150/0x270
[ 123.312675][ T6466] do_syscall_64+0x14d/0xf80
[ 123.317284][ T6466] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 123.323235][ T6466] page last free pid 15 tgid 15 stack trace:
[ 123.329246][ T6466] __free_frozen_pages+0xc2b/0xdb0
[ 123.334406][ T6466] tlb_remove_table_rcu+0x85/0x100
[ 123.339692][ T6466] rcu_core+0x7cd/0x1070
[ 123.344072][ T6466] handle_softirqs+0x22a/0x870
[ 123.348853][ T6466] run_ksoftirqd+0x36/0x60
[ 123.353342][ T6466] smpboot_thread_fn+0x541/0xa50
[ 123.358392][ T6466] kthread+0x388/0x470
[ 123.362515][ T6466] ret_from_fork+0x51e/0xb90
[ 123.367150][ T6466] ret_from_fork_asm+0x1a/0x30
[ 123.371955][ T6466] Modules linked in:
[ 123.375901][ T6466] CPU: 0 UID: 0 PID: 6466 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 123.375916][ T6466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 123.375927][ T6466] Call Trace:
[ 123.375932][ T6466]
[ 123.375936][ T6466] dump_stack_lvl+0xe8/0x150
[ 123.375955][ T6466] bad_page+0x17f/0x1c0
[ 123.375972][ T6466] __free_frozen_pages+0xd62/0xdb0
[ 123.375987][ T6466] bpf_xdp_frags_shrink_tail+0x4da/0x7d0
[ 123.376010][ T6466] bpf_xdp_adjust_tail+0x1d6/0x220
[ 123.376023][ T6466] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 123.376036][ T6466] bpf_prog_run_generic_xdp+0x603/0x1490
[ 123.376062][ T6466] do_xdp_generic+0xac5/0x12e0
[ 123.376080][ T6466] ? __pfx_do_xdp_generic+0x10/0x10
[ 123.376106][ T6466] ? tun_get_user+0x2354/0x3dd0
[ 123.376117][ T6466] tun_get_user+0x247d/0x3dd0
[ 123.376132][ T6466] ? aa_file_perm+0x192/0x15e0
[ 123.376144][ T6466] ? aa_file_perm+0x50e/0x15e0
[ 123.376153][ T6466] ? __pfx_tun_get_user+0x10/0x10
[ 123.376162][ T6466] ? aa_file_perm+0x192/0x15e0
[ 123.376173][ T6466] ? __lock_acquire+0x6b5/0x2cf0
[ 123.376189][ T6466] ? preempt_schedule_common+0x82/0xd0
[ 123.376202][ T6466] ? ref_tracker_alloc+0x35c/0x4c0
[ 123.376219][ T6466] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 123.376236][ T6466] ? tun_get+0x1c/0x2f0
[ 123.376249][ T6466] ? tun_get+0x1c/0x2f0
[ 123.376258][ T6466] ? tun_get+0x1c/0x2f0
[ 123.376274][ T6466] tun_chr_write_iter+0x113/0x200
[ 123.376286][ T6466] vfs_write+0x61d/0xb90
[ 123.376301][ T6466] ? __pfx_vfs_write+0x10/0x10
[ 123.376321][ T6466] ? __fget_files+0x2a/0x420
[ 123.376352][ T6466] ksys_write+0x150/0x270
[ 123.376372][ T6466] ? __pfx_ksys_write+0x10/0x10
[ 123.376399][ T6466] do_syscall_64+0x14d/0xf80
[ 123.376412][ T6466] ? trace_irq_disable+0x3b/0x150
[ 123.376427][ T6466] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 123.376437][ T6466] ? clear_bhb_loop+0x40/0x90
[ 123.376449][ T6466] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 123.376459][ T6466] RIP: 0033:0x7f868bb5b7ce
[ 123.376470][ T6466] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 123.376478][ T6466] RSP: 002b:00007f868ca2afb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 123.376489][ T6466] RAX: ffffffffffffffda RBX: 00007f868ca2b6c0 RCX: 00007f868bb5b7ce
[ 123.376496][ T6466] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8
[ 123.376503][ T6466] RBP: 00007f868bc2fee0 R08: 0000000000000000 R09: 0000000000000000
[ 123.376509][ T6466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 123.376515][ T6466] R13: 00007f868be06038 R14: 00007f868be05fa0 R15: 00007ffc6fe08e48
[ 123.376531][ T6466]
[ 123.376535][ T6466] Disabling lock debugging due to kernel taint
[ 123.646745][ T6466] BUG: Bad page state in process syz.0.17 pfn:79fc8
[ 123.653529][ T6466] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x79fc8
[ 123.663701][ T6466] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 123.670864][ T6466] raw: 00fff00000000000 dead000000000040 ffff888022a97000 0000000000000000
[ 123.679457][ T6466] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000
[ 123.688156][ T6466] page dumped because: page_pool leak
[ 123.693548][ T6466] page_owner tracks the page as allocated
[ 123.699262][ T6466] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6466, tgid 6465 (syz.0.17), ts 123180704821, free_ts 121901687045
[ 123.716259][ T6466] post_alloc_hook+0x231/0x280
[ 123.721065][ T6466] get_page_from_freelist+0x24dc/0x2580
[ 123.726600][ T6466] __alloc_frozen_pages_noprof+0x18d/0x380
[ 123.732503][ T6466] alloc_pages_bulk_noprof+0x558/0x700
[ 123.737971][ T6466] __page_pool_alloc_netmems_slow+0x14c/0x710
[ 123.744080][ T6466] skb_pp_cow_data+0xc21/0x1680
[ 123.749025][ T6466] do_xdp_generic+0x76b/0x12e0
[ 123.753843][ T6466] tun_get_user+0x247d/0x3dd0
[ 123.758533][ T6466] tun_chr_write_iter+0x113/0x200
[ 123.763602][ T6466] vfs_write+0x61d/0xb90
[ 123.767846][ T6466] ksys_write+0x150/0x270
[ 123.772224][ T6466] do_syscall_64+0x14d/0xf80
[ 123.776833][ T6466] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 123.782789][ T6466] page last free pid 15 tgid 15 stack trace:
[ 123.788878][ T6466] __free_frozen_pages+0xc2b/0xdb0
[ 123.794016][ T6466] tlb_remove_table_rcu+0x85/0x100
[ 123.799129][ T6466] rcu_core+0x7cd/0x1070
[ 123.803393][ T6466] handle_softirqs+0x22a/0x870
[ 123.808161][ T6466] run_ksoftirqd+0x36/0x60
[ 123.812603][ T6466] smpboot_thread_fn+0x541/0xa50
[ 123.817545][ T6466] kthread+0x388/0x470
[ 123.821623][ T6466] ret_from_fork+0x51e/0xb90
[ 123.826217][ T6466] ret_from_fork_asm+0x1a/0x30
[ 123.831002][ T6466] Modules linked in:
[ 123.834894][ T6466] CPU: 0 UID: 0 PID: 6466 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 123.834909][ T6466] Tainted: [B]=BAD_PAGE
[ 123.834913][ T6466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 123.834919][ T6466] Call Trace:
[ 123.834923][ T6466]
[ 123.834928][ T6466] dump_stack_lvl+0xe8/0x150
[ 123.834945][ T6466] bad_page+0x17f/0x1c0
[ 123.834960][ T6466] __free_frozen_pages+0xd62/0xdb0
[ 123.834973][ T6466] bpf_xdp_frags_shrink_tail+0x4da/0x7d0
[ 123.834990][ T6466] bpf_xdp_adjust_tail+0x1d6/0x220
[ 123.835001][ T6466] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 123.835010][ T6466] bpf_prog_run_generic_xdp+0x603/0x1490
[ 123.835028][ T6466] do_xdp_generic+0xac5/0x12e0
[ 123.835042][ T6466] ? __pfx_do_xdp_generic+0x10/0x10
[ 123.835059][ T6466] ? tun_get_user+0x2354/0x3dd0
[ 123.835070][ T6466] tun_get_user+0x247d/0x3dd0
[ 123.835081][ T6466] ? aa_file_perm+0x192/0x15e0
[ 123.835092][ T6466] ? aa_file_perm+0x50e/0x15e0
[ 123.835100][ T6466] ? __pfx_tun_get_user+0x10/0x10
[ 123.835108][ T6466] ? aa_file_perm+0x192/0x15e0
[ 123.835117][ T6466] ? __lock_acquire+0x6b5/0x2cf0
[ 123.835131][ T6466] ? preempt_schedule_common+0x82/0xd0
[ 123.835145][ T6466] ? ref_tracker_alloc+0x35c/0x4c0
[ 123.835171][ T6466] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 123.835196][ T6466] ? tun_get+0x1c/0x2f0
[ 123.835214][ T6466] ? tun_get+0x1c/0x2f0
[ 123.835222][ T6466] ? tun_get+0x1c/0x2f0
[ 123.835231][ T6466] tun_chr_write_iter+0x113/0x200
[ 123.835242][ T6466] vfs_write+0x61d/0xb90
[ 123.835254][ T6466] ? __pfx_vfs_write+0x10/0x10
[ 123.835266][ T6466] ? __fget_files+0x2a/0x420
[ 123.835282][ T6466] ksys_write+0x150/0x270
[ 123.835292][ T6466] ? __pfx_ksys_write+0x10/0x10
[ 123.835304][ T6466] do_syscall_64+0x14d/0xf80
[ 123.835315][ T6466] ? trace_irq_disable+0x3b/0x150
[ 123.835330][ T6466] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 123.835340][ T6466] ? clear_bhb_loop+0x40/0x90
[ 123.835350][ T6466] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 123.835360][ T6466] RIP: 0033:0x7f868bb5b7ce
[ 123.835369][ T6466] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 123.835377][ T6466] RSP: 002b:00007f868ca2afb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 123.835388][ T6466] RAX: ffffffffffffffda RBX: 00007f868ca2b6c0 RCX: 00007f868bb5b7ce
[ 123.835396][ T6466] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8
[ 123.835402][ T6466] RBP: 00007f868bc2fee0 R08: 0000000000000000 R09: 0000000000000000
[ 123.835408][ T6466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 123.835414][ T6466] R13: 00007f868be06038 R14: 00007f868be05fa0 R15: 00007ffc6fe08e48
[ 123.835424][ T6466]
[ 123.835431][ T6466] BUG: Bad page state in process syz.0.17 pfn:3471d
[ 124.111948][ T6466] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803471d8c0 pfn:0x3471d
[ 124.122132][ T6466] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 124.129253][ T6466] raw: 00fff00000000000 dead000000000040 ffff888022a97000 0000000000000000
[ 124.137944][ T6466] raw: ffff88803471d8c0 0000000000000001 00000000ffffffff 0000000000000000
[ 124.146550][ T6466] page dumped because: page_pool leak
[ 124.151952][ T6466] page_owner tracks the page as allocated
[ 124.157673][ T6466] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6466, tgid 6465 (syz.0.17), ts 123180689023, free_ts 121970094523
[ 124.174640][ T6466] post_alloc_hook+0x231/0x280
[ 124.179423][ T6466] get_page_from_freelist+0x24dc/0x2580
[ 124.185010][ T6466] __alloc_frozen_pages_noprof+0x18d/0x380
[ 124.190851][ T6466] alloc_pages_bulk_noprof+0x558/0x700
[ 124.196433][ T6466] __page_pool_alloc_netmems_slow+0x14c/0x710
[ 124.202719][ T6466] skb_pp_cow_data+0xc21/0x1680
[ 124.207600][ T6466] do_xdp_generic+0x76b/0x12e0
[ 124.212391][ T6466] tun_get_user+0x247d/0x3dd0
[ 124.217071][ T6466] tun_chr_write_iter+0x113/0x200
[ 124.222115][ T6466] vfs_write+0x61d/0xb90
[ 124.226360][ T6466] ksys_write+0x150/0x270
[ 124.230709][ T6466] do_syscall_64+0x14d/0xf80
[ 124.235296][ T6466] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 124.241290][ T6466] page last free pid 0 tgid 0 stack trace:
[ 124.247086][ T6466] __free_frozen_pages+0xc2b/0xdb0
[ 124.252210][ T6466] rcu_core+0x7cd/0x1070
[ 124.257154][ T6466] handle_softirqs+0x22a/0x870
[ 124.261938][ T6466] __irq_exit_rcu+0x5f/0x150
[ 124.266540][ T6466] irq_exit_rcu+0x9/0x30
[ 124.270841][ T6466] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 124.276566][ T6466] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 124.282577][ T6466] Modules linked in:
[ 124.286472][ T6466] CPU: 0 UID: 0 PID: 6466 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 124.286488][ T6466] Tainted: [B]=BAD_PAGE
[ 124.286491][ T6466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 124.286498][ T6466] Call Trace:
[ 124.286502][ T6466]
[ 124.286506][ T6466] dump_stack_lvl+0xe8/0x150
[ 124.286523][ T6466] bad_page+0x17f/0x1c0
[ 124.286538][ T6466] __free_frozen_pages+0xd62/0xdb0
[ 124.286550][ T6466] bpf_xdp_frags_shrink_tail+0x4da/0x7d0
[ 124.286568][ T6466] bpf_xdp_adjust_tail+0x1d6/0x220
[ 124.286580][ T6466] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 124.286589][ T6466] bpf_prog_run_generic_xdp+0x603/0x1490
[ 124.286607][ T6466] do_xdp_generic+0xac5/0x12e0
[ 124.286621][ T6466] ? __pfx_do_xdp_generic+0x10/0x10
[ 124.286639][ T6466] ? tun_get_user+0x2354/0x3dd0
[ 124.286650][ T6466] tun_get_user+0x247d/0x3dd0
[ 124.286662][ T6466] ? aa_file_perm+0x192/0x15e0
[ 124.286672][ T6466] ? aa_file_perm+0x50e/0x15e0
[ 124.286680][ T6466] ? __pfx_tun_get_user+0x10/0x10
[ 124.286689][ T6466] ? aa_file_perm+0x192/0x15e0
[ 124.286698][ T6466] ? __lock_acquire+0x6b5/0x2cf0
[ 124.286712][ T6466] ? preempt_schedule_common+0x82/0xd0
[ 124.286723][ T6466] ? ref_tracker_alloc+0x35c/0x4c0
[ 124.286739][ T6466] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 124.286754][ T6466] ? tun_get+0x1c/0x2f0
[ 124.286764][ T6466] ? tun_get+0x1c/0x2f0
[ 124.286772][ T6466] ? tun_get+0x1c/0x2f0
[ 124.286781][ T6466] tun_chr_write_iter+0x113/0x200
[ 124.286791][ T6466] vfs_write+0x61d/0xb90
[ 124.286803][ T6466] ? __pfx_vfs_write+0x10/0x10
[ 124.286815][ T6466] ? __fget_files+0x2a/0x420
[ 124.286831][ T6466] ksys_write+0x150/0x270
[ 124.286841][ T6466] ? __pfx_ksys_write+0x10/0x10
[ 124.286853][ T6466] do_syscall_64+0x14d/0xf80
[ 124.286864][ T6466] ? trace_irq_disable+0x3b/0x150
[ 124.286879][ T6466] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 124.286889][ T6466] ? clear_bhb_loop+0x40/0x90
[ 124.286899][ T6466] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 124.286909][ T6466] RIP: 0033:0x7f868bb5b7ce
[ 124.286919][ T6466] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 124.286927][ T6466] RSP: 002b:00007f868ca2afb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 124.286938][ T6466] RAX: ffffffffffffffda RBX: 00007f868ca2b6c0 RCX: 00007f868bb5b7ce
[ 124.286946][ T6466] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8
[ 124.286952][ T6466] RBP: 00007f868bc2fee0 R08: 0000000000000000 R09: 0000000000000000
[ 124.286958][ T6466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 124.286964][ T6466] R13: 00007f868be06038 R14: 00007f868be05fa0 R15: 00007ffc6fe08e48
[ 124.286974][ T6466]
[ 124.286981][ T6466] BUG: Bad page state in process syz.0.17 pfn:7c73d
[ 124.562700][ T6466] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807c73db40 pfn:0x7c73d
[ 124.572776][ T6466] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 124.579896][ T6466] raw: 00fff00000000000 dead000000000040 ffff888022a97000 0000000000000000
[ 124.588658][ T6466] raw: ffff88807c73db40 0000000000000001 00000000ffffffff 0000000000000000
[ 124.597258][ T6466] page dumped because: page_pool leak
[ 124.602745][ T6466] page_owner tracks the page as allocated
[ 124.608463][ T6466] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6466, tgid 6465 (syz.0.17), ts 123180672571, free_ts 121970121116
[ 124.625862][ T6466] post_alloc_hook+0x231/0x280
[ 124.630789][ T6466] get_page_from_freelist+0x24dc/0x2580
[ 124.636420][ T6466] __alloc_frozen_pages_noprof+0x18d/0x380
[ 124.642340][ T6466] alloc_pages_bulk_noprof+0x558/0x700
[ 124.647897][ T6466] __page_pool_alloc_netmems_slow+0x14c/0x710
[ 124.653989][ T6466] skb_pp_cow_data+0xc21/0x1680
[ 124.658839][ T6466] do_xdp_generic+0x76b/0x12e0
[ 124.663643][ T6466] tun_get_user+0x247d/0x3dd0
[ 124.668352][ T6466] tun_chr_write_iter+0x113/0x200
[ 124.673391][ T6466] vfs_write+0x61d/0xb90
[ 124.677636][ T6466] ksys_write+0x150/0x270
[ 124.681999][ T6466] do_syscall_64+0x14d/0xf80
[ 124.686684][ T6466] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 124.692589][ T6466] page last free pid 0 tgid 0 stack trace:
[ 124.698472][ T6466] __free_frozen_pages+0xc2b/0xdb0
[ 124.703609][ T6466] rcu_core+0x7cd/0x1070
[ 124.707849][ T6466] handle_softirqs+0x22a/0x870
[ 124.712718][ T6466] __irq_exit_rcu+0x5f/0x150
[ 124.717481][ T6466] irq_exit_rcu+0x9/0x30
[ 124.722025][ T6466] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 124.727748][ T6466] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 124.733910][ T6466] Modules linked in:
[ 124.738018][ T6466] CPU: 0 UID: 0 PID: 6466 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 124.738036][ T6466] Tainted: [B]=BAD_PAGE
[ 124.738040][ T6466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 124.738046][ T6466] Call Trace:
[ 124.738053][ T6466]
[ 124.738059][ T6466] dump_stack_lvl+0xe8/0x150
[ 124.738078][ T6466] bad_page+0x17f/0x1c0
[ 124.738107][ T6466] __free_frozen_pages+0xd62/0xdb0
[ 124.738120][ T6466] bpf_xdp_frags_shrink_tail+0x4da/0x7d0
[ 124.738138][ T6466] bpf_xdp_adjust_tail+0x1d6/0x220
[ 124.738149][ T6466] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 124.738158][ T6466] bpf_prog_run_generic_xdp+0x603/0x1490
[ 124.738176][ T6466] do_xdp_generic+0xac5/0x12e0
[ 124.738191][ T6466] ? __pfx_do_xdp_generic+0x10/0x10
[ 124.738209][ T6466] ? tun_get_user+0x2354/0x3dd0
[ 124.738219][ T6466] tun_get_user+0x247d/0x3dd0
[ 124.738231][ T6466] ? aa_file_perm+0x192/0x15e0
[ 124.738241][ T6466] ? aa_file_perm+0x50e/0x15e0
[ 124.738249][ T6466] ? __pfx_tun_get_user+0x10/0x10
[ 124.738258][ T6466] ? aa_file_perm+0x192/0x15e0
[ 124.738267][ T6466] ? __lock_acquire+0x6b5/0x2cf0
[ 124.738281][ T6466] ? preempt_schedule_common+0x82/0xd0
[ 124.738292][ T6466] ? ref_tracker_alloc+0x35c/0x4c0
[ 124.738308][ T6466] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 124.738323][ T6466] ? tun_get+0x1c/0x2f0
[ 124.738333][ T6466] ? tun_get+0x1c/0x2f0
[ 124.738345][ T6466] ? tun_get+0x1c/0x2f0
[ 124.738354][ T6466] tun_chr_write_iter+0x113/0x200
[ 124.738364][ T6466] vfs_write+0x61d/0xb90
[ 124.738376][ T6466] ? __pfx_vfs_write+0x10/0x10
[ 124.738388][ T6466] ? __fget_files+0x2a/0x420
[ 124.738404][ T6466] ksys_write+0x150/0x270
[ 124.738414][ T6466] ? __pfx_ksys_write+0x10/0x10
[ 124.738426][ T6466] do_syscall_64+0x14d/0xf80
[ 124.738437][ T6466] ? trace_irq_disable+0x3b/0x150
[ 124.738452][ T6466] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 124.738462][ T6466] ? clear_bhb_loop+0x40/0x90
[ 124.738473][ T6466] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 124.738483][ T6466] RIP: 0033:0x7f868bb5b7ce
[ 124.738493][ T6466] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 124.738501][ T6466] RSP: 002b:00007f868ca2afb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 124.738513][ T6466] RAX: ffffffffffffffda RBX: 00007f868ca2b6c0 RCX: 00007f868bb5b7ce
[ 124.738520][ T6466] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8
[ 124.738526][ T6466] RBP: 00007f868bc2fee0 R08: 0000000000000000 R09: 0000000000000000
[ 124.738532][ T6466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 124.738538][ T6466] R13: 00007f868be06038 R14: 00007f868be05fa0 R15: 00007ffc6fe08e48
[ 124.738549][ T6466]
[ 124.738557][ T6466] BUG: Bad page state in process syz.0.17 pfn:2bc59
[ 125.015242][ T6466] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802bc59780 pfn:0x2bc59
[ 125.025533][ T6466] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 125.032759][ T6466] raw: 00fff00000000000 dead000000000040 ffff888022a97000 0000000000000000
[ 125.041547][ T6466] raw: ffff88802bc59780 0000000000000001 00000000ffffffff 0000000000000000
[ 125.050143][ T6466] page dumped because: page_pool leak
[ 125.055494][ T6466] page_owner tracks the page as allocated
[ 125.061303][ T6466] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6466, tgid 6465 (syz.0.17), ts 123180656273, free_ts 121970139209
[ 125.078177][ T6466] post_alloc_hook+0x231/0x280
[ 125.082983][ T6466] get_page_from_freelist+0x24dc/0x2580
[ 125.088539][ T6466] __alloc_frozen_pages_noprof+0x18d/0x380
[ 125.094508][ T6466] alloc_pages_bulk_noprof+0x558/0x700
[ 125.100404][ T6466] __page_pool_alloc_netmems_slow+0x14c/0x710
[ 125.106463][ T6466] skb_pp_cow_data+0xc21/0x1680
[ 125.111430][ T6466] do_xdp_generic+0x76b/0x12e0
[ 125.116213][ T6466] tun_get_user+0x247d/0x3dd0
[ 125.120924][ T6466] tun_chr_write_iter+0x113/0x200
[ 125.126164][ T6466] vfs_write+0x61d/0xb90
[ 125.130428][ T6466] ksys_write+0x150/0x270
[ 125.134763][ T6466] do_syscall_64+0x14d/0xf80
[ 125.139338][ T6466] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 125.145244][ T6466] page last free pid 0 tgid 0 stack trace:
[ 125.151057][ T6466] __free_frozen_pages+0xc2b/0xdb0
[ 125.156332][ T6466] rcu_core+0x7cd/0x1070
[ 125.160594][ T6466] handle_softirqs+0x22a/0x870
[ 125.165370][ T6466] __irq_exit_rcu+0x5f/0x150
[ 125.170093][ T6466] irq_exit_rcu+0x9/0x30
[ 125.174772][ T6466] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 125.180431][ T6466] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 125.186515][ T6466] Modules linked in:
[ 125.190456][ T6466] CPU: 0 UID: 0 PID: 6466 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 125.190479][ T6466] Tainted: [B]=BAD_PAGE
[ 125.190484][ T6466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 125.190493][ T6466] Call Trace:
[ 125.190498][ T6466]
[ 125.190504][ T6466] dump_stack_lvl+0xe8/0x150
[ 125.190528][ T6466] bad_page+0x17f/0x1c0
[ 125.190552][ T6466] __free_frozen_pages+0xd62/0xdb0
[ 125.190572][ T6466] bpf_xdp_frags_shrink_tail+0x4da/0x7d0
[ 125.190599][ T6466] bpf_xdp_adjust_tail+0x1d6/0x220
[ 125.190619][ T6466] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 125.190636][ T6466] bpf_prog_run_generic_xdp+0x603/0x1490
[ 125.190670][ T6466] do_xdp_generic+0xac5/0x12e0
[ 125.190697][ T6466] ? __pfx_do_xdp_generic+0x10/0x10
[ 125.190730][ T6466] ? tun_get_user+0x2354/0x3dd0
[ 125.190747][ T6466] tun_get_user+0x247d/0x3dd0
[ 125.190767][ T6466] ? aa_file_perm+0x192/0x15e0
[ 125.190784][ T6466] ? aa_file_perm+0x50e/0x15e0
[ 125.190799][ T6466] ? __pfx_tun_get_user+0x10/0x10
[ 125.190813][ T6466] ? aa_file_perm+0x192/0x15e0
[ 125.190827][ T6466] ? __lock_acquire+0x6b5/0x2cf0
[ 125.190850][ T6466] ? preempt_schedule_common+0x82/0xd0
[ 125.190867][ T6466] ? ref_tracker_alloc+0x35c/0x4c0
[ 125.190891][ T6466] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 125.190915][ T6466] ? tun_get+0x1c/0x2f0
[ 125.190932][ T6466] ? tun_get+0x1c/0x2f0
[ 125.190945][ T6466] ? tun_get+0x1c/0x2f0
[ 125.190962][ T6466] tun_chr_write_iter+0x113/0x200
[ 125.190979][ T6466] vfs_write+0x61d/0xb90
[ 125.191001][ T6466] ? __pfx_vfs_write+0x10/0x10
[ 125.191021][ T6466] ? __fget_files+0x2a/0x420
[ 125.191049][ T6466] ksys_write+0x150/0x270
[ 125.191068][ T6466] ? __pfx_ksys_write+0x10/0x10
[ 125.191090][ T6466] do_syscall_64+0x14d/0xf80
[ 125.191109][ T6466] ? trace_irq_disable+0x3b/0x150
[ 125.191130][ T6466] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 125.191146][ T6466] ? clear_bhb_loop+0x40/0x90
[ 125.191165][ T6466] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 125.191180][ T6466] RIP: 0033:0x7f868bb5b7ce
[ 125.191195][ T6466] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 125.191208][ T6466] RSP: 002b:00007f868ca2afb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 125.191225][ T6466] RAX: ffffffffffffffda RBX: 00007f868ca2b6c0 RCX: 00007f868bb5b7ce
[ 125.191237][ T6466] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8
[ 125.191248][ T6466] RBP: 00007f868bc2fee0 R08: 0000000000000000 R09: 0000000000000000
[ 125.191259][ T6466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 125.191269][ T6466] R13: 00007f868be06038 R14: 00007f868be05fa0 R15: 00007ffc6fe08e48
[ 125.191289][ T6466]
[ 125.191298][ T6466] BUG: Bad page state in process syz.0.17 pfn:7a390
[ 125.468941][ T6466] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807a390a00 pfn:0x7a390
[ 125.479018][ T6466] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 125.486236][ T6466] raw: 00fff00000000000 dead000000000040 ffff888022a97000 0000000000000000
[ 125.494832][ T6466] raw: ffff88807a390a00 0000000000000001 00000000ffffffff 0000000000000000
[ 125.503790][ T6466] page dumped because: page_pool leak
[ 125.509149][ T6466] page_owner tracks the page as allocated
[ 125.514903][ T6466] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6466, tgid 6465 (syz.0.17), ts 123180641653, free_ts 121970157193
[ 125.531951][ T6466] post_alloc_hook+0x231/0x280
[ 125.536708][ T6466] get_page_from_freelist+0x24dc/0x2580
[ 125.542467][ T6466] __alloc_frozen_pages_noprof+0x18d/0x380
[ 125.548283][ T6466] alloc_pages_bulk_noprof+0x558/0x700
[ 125.553770][ T6466] __page_pool_alloc_netmems_slow+0x14c/0x710
[ 125.559938][ T6466] skb_pp_cow_data+0xc21/0x1680
[ 125.564939][ T6466] do_xdp_generic+0x76b/0x12e0
[ 125.569720][ T6466] tun_get_user+0x247d/0x3dd0
[ 125.574543][ T6466] tun_chr_write_iter+0x113/0x200
[ 125.579851][ T6466] vfs_write+0x61d/0xb90
[ 125.584317][ T6466] ksys_write+0x150/0x270
[ 125.588665][ T6466] do_syscall_64+0x14d/0xf80
[ 125.593444][ T6466] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 125.599460][ T6466] page last free pid 0 tgid 0 stack trace:
[ 125.605305][ T6466] __free_frozen_pages+0xc2b/0xdb0
[ 125.610440][ T6466] rcu_core+0x7cd/0x1070
[ 125.614686][ T6466] handle_softirqs+0x22a/0x870
[ 125.619449][ T6466] __irq_exit_rcu+0x5f/0x150
[ 125.624180][ T6466] irq_exit_rcu+0x9/0x30
[ 125.628430][ T6466] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 125.634160][ T6466] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 125.640172][ T6466] Modules linked in:
[ 125.644069][ T6466] CPU: 0 UID: 0 PID: 6466 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 125.644090][ T6466] Tainted: [B]=BAD_PAGE
[ 125.644093][ T6466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 125.644100][ T6466] Call Trace:
[ 125.644104][ T6466]
[ 125.644109][ T6466] dump_stack_lvl+0xe8/0x150
[ 125.644127][ T6466] bad_page+0x17f/0x1c0
[ 125.644142][ T6466] __free_frozen_pages+0xd62/0xdb0
[ 125.644154][ T6466] bpf_xdp_frags_shrink_tail+0x4da/0x7d0
[ 125.644172][ T6466] bpf_xdp_adjust_tail+0x1d6/0x220
[ 125.644183][ T6466] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 125.644192][ T6466] bpf_prog_run_generic_xdp+0x603/0x1490
[ 125.644210][ T6466] do_xdp_generic+0xac5/0x12e0
[ 125.644224][ T6466] ? __pfx_do_xdp_generic+0x10/0x10
[ 125.644242][ T6466] ? tun_get_user+0x2354/0x3dd0
[ 125.644252][ T6466] tun_get_user+0x247d/0x3dd0
[ 125.644264][ T6466] ? aa_file_perm+0x192/0x15e0
[ 125.644274][ T6466] ? aa_file_perm+0x50e/0x15e0
[ 125.644282][ T6466] ? __pfx_tun_get_user+0x10/0x10
[ 125.644290][ T6466] ? aa_file_perm+0x192/0x15e0
[ 125.644300][ T6466] ? __lock_acquire+0x6b5/0x2cf0
[ 125.644314][ T6466] ? preempt_schedule_common+0x82/0xd0
[ 125.644325][ T6466] ? ref_tracker_alloc+0x35c/0x4c0
[ 125.644340][ T6466] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 125.644356][ T6466] ? tun_get+0x1c/0x2f0
[ 125.644366][ T6466] ? tun_get+0x1c/0x2f0
[ 125.644374][ T6466] ? tun_get+0x1c/0x2f0
[ 125.644384][ T6466] tun_chr_write_iter+0x113/0x200
[ 125.644394][ T6466] vfs_write+0x61d/0xb90
[ 125.644406][ T6466] ? __pfx_vfs_write+0x10/0x10
[ 125.644418][ T6466] ? __fget_files+0x2a/0x420
[ 125.644434][ T6466] ksys_write+0x150/0x270
[ 125.644444][ T6466] ? __pfx_ksys_write+0x10/0x10
[ 125.644456][ T6466] do_syscall_64+0x14d/0xf80
[ 125.644467][ T6466] ? trace_irq_disable+0x3b/0x150
[ 125.644481][ T6466] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 125.644491][ T6466] ? clear_bhb_loop+0x40/0x90
[ 125.644502][ T6466] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 125.644512][ T6466] RIP: 0033:0x7f868bb5b7ce
[ 125.644522][ T6466] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 125.644530][ T6466] RSP: 002b:00007f868ca2afb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 125.644541][ T6466] RAX: ffffffffffffffda RBX: 00007f868ca2b6c0 RCX: 00007f868bb5b7ce
[ 125.644549][ T6466] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8
[ 125.644555][ T6466] RBP: 00007f868bc2fee0 R08: 0000000000000000 R09: 0000000000000000
[ 125.644561][ T6466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 125.644567][ T6466] R13: 00007f868be06038 R14: 00007f868be05fa0 R15: 00007ffc6fe08e48
[ 125.644577][ T6466]
[ 125.644584][ T6466] BUG: Bad page state in process syz.0.17 pfn:31763
[ 125.921427][ T6466] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880317633c0 pfn:0x31763
[ 125.931504][ T6466] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 125.938614][ T6466] raw: 00fff00000000000 dead000000000040 ffff888022a97000 0000000000000000
[ 125.947225][ T6466] raw: ffff8880317633c0 0000000000000001 00000000ffffffff 0000000000000000
[ 125.955820][ T6466] page dumped because: page_pool leak
[ 125.961200][ T6466] page_owner tracks the page as allocated
[ 125.966943][ T6466] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6466, tgid 6465 (syz.0.17), ts 123180625806, free_ts 121970176181
[ 125.983897][ T6466] post_alloc_hook+0x231/0x280
[ 125.988666][ T6466] get_page_from_freelist+0x24dc/0x2580
[ 125.994228][ T6466] __alloc_frozen_pages_noprof+0x18d/0x380
[ 126.000159][ T6466] alloc_pages_bulk_noprof+0x558/0x700
[ 126.005628][ T6466] __page_pool_alloc_netmems_slow+0x14c/0x710
[ 126.011738][ T6466] skb_pp_cow_data+0xc21/0x1680
[ 126.016684][ T6466] do_xdp_generic+0x76b/0x12e0
[ 126.021480][ T6466] tun_get_user+0x247d/0x3dd0
[ 126.026161][ T6466] tun_chr_write_iter+0x113/0x200
[ 126.031466][ T6466] vfs_write+0x61d/0xb90
[ 126.035707][ T6466] ksys_write+0x150/0x270
[ 126.040114][ T6466] do_syscall_64+0x14d/0xf80
[ 126.044720][ T6466] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 126.050647][ T6466] page last free pid 0 tgid 0 stack trace:
[ 126.056454][ T6466] __free_frozen_pages+0xc2b/0xdb0
[ 126.061583][ T6466] rcu_core+0x7cd/0x1070
[ 126.065823][ T6466] handle_softirqs+0x22a/0x870
[ 126.070692][ T6466] __irq_exit_rcu+0x5f/0x150
[ 126.075283][ T6466] irq_exit_rcu+0x9/0x30
[ 126.079533][ T6466] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 126.085279][ T6466] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 126.091294][ T6466] Modules linked in:
[ 126.095210][ T6466] CPU: 0 UID: 0 PID: 6466 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 126.095226][ T6466] Tainted: [B]=BAD_PAGE
[ 126.095230][ T6466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 126.095236][ T6466] Call Trace:
[ 126.095241][ T6466]
[ 126.095246][ T6466] dump_stack_lvl+0xe8/0x150
[ 126.095268][ T6466] bad_page+0x17f/0x1c0
[ 126.095284][ T6466] __free_frozen_pages+0xd62/0xdb0
[ 126.095296][ T6466] bpf_xdp_frags_shrink_tail+0x4da/0x7d0
[ 126.095313][ T6466] bpf_xdp_adjust_tail+0x1d6/0x220
[ 126.095324][ T6466] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 126.095333][ T6466] bpf_prog_run_generic_xdp+0x603/0x1490
[ 126.095351][ T6466] do_xdp_generic+0xac5/0x12e0
[ 126.095365][ T6466] ? __pfx_do_xdp_generic+0x10/0x10
[ 126.095383][ T6466] ? tun_get_user+0x2354/0x3dd0
[ 126.095393][ T6466] tun_get_user+0x247d/0x3dd0
[ 126.095405][ T6466] ? aa_file_perm+0x192/0x15e0
[ 126.095415][ T6466] ? aa_file_perm+0x50e/0x15e0
[ 126.095423][ T6466] ? __pfx_tun_get_user+0x10/0x10
[ 126.095432][ T6466] ? aa_file_perm+0x192/0x15e0
[ 126.095441][ T6466] ? __lock_acquire+0x6b5/0x2cf0
[ 126.095455][ T6466] ? preempt_schedule_common+0x82/0xd0
[ 126.095467][ T6466] ? ref_tracker_alloc+0x35c/0x4c0
[ 126.095482][ T6466] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 126.095498][ T6466] ? tun_get+0x1c/0x2f0
[ 126.095508][ T6466] ? tun_get+0x1c/0x2f0
[ 126.095516][ T6466] ? tun_get+0x1c/0x2f0
[ 126.095525][ T6466] tun_chr_write_iter+0x113/0x200
[ 126.095535][ T6466] vfs_write+0x61d/0xb90
[ 126.095547][ T6466] ? __pfx_vfs_write+0x10/0x10
[ 126.095559][ T6466] ? __fget_files+0x2a/0x420
[ 126.095575][ T6466] ksys_write+0x150/0x270
[ 126.095586][ T6466] ? __pfx_ksys_write+0x10/0x10
[ 126.095597][ T6466] do_syscall_64+0x14d/0xf80
[ 126.095608][ T6466] ? trace_irq_disable+0x3b/0x150
[ 126.095623][ T6466] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 126.095633][ T6466] ? clear_bhb_loop+0x40/0x90
[ 126.095644][ T6466] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 126.095654][ T6466] RIP: 0033:0x7f868bb5b7ce
[ 126.095663][ T6466] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 126.095672][ T6466] RSP: 002b:00007f868ca2afb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 126.095683][ T6466] RAX: ffffffffffffffda RBX: 00007f868ca2b6c0 RCX: 00007f868bb5b7ce
[ 126.095690][ T6466] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8
[ 126.095697][ T6466] RBP: 00007f868bc2fee0 R08: 0000000000000000 R09: 0000000000000000
[ 126.095703][ T6466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 126.095708][ T6466] R13: 00007f868be06038 R14: 00007f868be05fa0 R15: 00007ffc6fe08e48
[ 126.095719][ T6466]
[ 126.095726][ T6466] BUG: Bad page state in process syz.0.17 pfn:6ee1f
[ 126.371563][ T6466] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88806ee1fa00 pfn:0x6ee1f
[ 126.381635][ T6466] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 126.388830][ T6466] raw: 00fff00000000000 dead000000000040 ffff888022a97000 0000000000000000
[ 126.397438][ T6466] raw: ffff88806ee1fa00 0000000000000001 00000000ffffffff 0000000000000000
[ 126.406046][ T6466] page dumped because: page_pool leak
[ 126.411428][ T6466] page_owner tracks the page as allocated
[ 126.417226][ T6466] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6466, tgid 6465 (syz.0.17), ts 123180609734, free_ts 121970194012
[ 126.434096][ T6466] post_alloc_hook+0x231/0x280
[ 126.438863][ T6466] get_page_from_freelist+0x24dc/0x2580
[ 126.444600][ T6466] __alloc_frozen_pages_noprof+0x18d/0x380
[ 126.450434][ T6466] alloc_pages_bulk_noprof+0x558/0x700
[ 126.455878][ T6466] __page_pool_alloc_netmems_slow+0x14c/0x710
[ 126.462140][ T6466] skb_pp_cow_data+0xc21/0x1680
[ 126.467054][ T6466] do_xdp_generic+0x76b/0x12e0
[ 126.471836][ T6466] tun_get_user+0x247d/0x3dd0
[ 126.476523][ T6466] tun_chr_write_iter+0x113/0x200
[ 126.481556][ T6466] vfs_write+0x61d/0xb90
[ 126.485806][ T6466] ksys_write+0x150/0x270
[ 126.490191][ T6466] do_syscall_64+0x14d/0xf80
[ 126.494787][ T6466] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 126.500786][ T6466] page last free pid 0 tgid 0 stack trace:
[ 126.506588][ T6466] __free_frozen_pages+0xc2b/0xdb0
[ 126.511709][ T6466] rcu_core+0x7cd/0x1070
[ 126.515965][ T6466] handle_softirqs+0x22a/0x870
[ 126.520747][ T6466] __irq_exit_rcu+0x5f/0x150
[ 126.525338][ T6466] irq_exit_rcu+0x9/0x30
[ 126.529649][ T6466] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 126.535405][ T6466] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 126.541421][ T6466] Modules linked in:
[ 126.545306][ T6466] CPU: 0 UID: 0 PID: 6466 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 126.545321][ T6466] Tainted: [B]=BAD_PAGE
[ 126.545324][ T6466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 126.545330][ T6466] Call Trace:
[ 126.545336][ T6466]
[ 126.545341][ T6466] dump_stack_lvl+0xe8/0x150
[ 126.545359][ T6466] bad_page+0x17f/0x1c0
[ 126.545375][ T6466] __free_frozen_pages+0xd62/0xdb0
[ 126.545387][ T6466] bpf_xdp_frags_shrink_tail+0x4da/0x7d0
[ 126.545404][ T6466] bpf_xdp_adjust_tail+0x1d6/0x220
[ 126.545416][ T6466] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 126.545425][ T6466] bpf_prog_run_generic_xdp+0x603/0x1490
[ 126.545443][ T6466] do_xdp_generic+0xac5/0x12e0
[ 126.545458][ T6466] ? __pfx_do_xdp_generic+0x10/0x10
[ 126.545475][ T6466] ? tun_get_user+0x2354/0x3dd0
[ 126.545485][ T6466] tun_get_user+0x247d/0x3dd0
[ 126.545497][ T6466] ? aa_file_perm+0x192/0x15e0
[ 126.545507][ T6466] ? aa_file_perm+0x50e/0x15e0
[ 126.545515][ T6466] ? __pfx_tun_get_user+0x10/0x10
[ 126.545524][ T6466] ? aa_file_perm+0x192/0x15e0
[ 126.545533][ T6466] ? __lock_acquire+0x6b5/0x2cf0
[ 126.545547][ T6466] ? preempt_schedule_common+0x82/0xd0
[ 126.545558][ T6466] ? ref_tracker_alloc+0x35c/0x4c0
[ 126.545574][ T6466] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 126.545589][ T6466] ? tun_get+0x1c/0x2f0
[ 126.545599][ T6466] ? tun_get+0x1c/0x2f0
[ 126.545607][ T6466] ? tun_get+0x1c/0x2f0
[ 126.545617][ T6466] tun_chr_write_iter+0x113/0x200
[ 126.545626][ T6466] vfs_write+0x61d/0xb90
[ 126.545639][ T6466] ? __pfx_vfs_write+0x10/0x10
[ 126.545650][ T6466] ? __fget_files+0x2a/0x420
[ 126.545667][ T6466] ksys_write+0x150/0x270
[ 126.545678][ T6466] ? __pfx_ksys_write+0x10/0x10
[ 126.545690][ T6466] do_syscall_64+0x14d/0xf80
[ 126.545700][ T6466] ? trace_irq_disable+0x3b/0x150
[ 126.545715][ T6466] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 126.545725][ T6466] ? clear_bhb_loop+0x40/0x90
[ 126.545735][ T6466] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 126.545746][ T6466] RIP: 0033:0x7f868bb5b7ce
[ 126.545756][ T6466] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 126.545764][ T6466] RSP: 002b:00007f868ca2afb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 126.545775][ T6466] RAX: ffffffffffffffda RBX: 00007f868ca2b6c0 RCX: 00007f868bb5b7ce
[ 126.545782][ T6466] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8
[ 126.545788][ T6466] RBP: 00007f868bc2fee0 R08: 0000000000000000 R09: 0000000000000000
[ 126.545794][ T6466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 126.545800][ T6466] R13: 00007f868be06038 R14: 00007f868be05fa0 R15: 00007ffc6fe08e48
[ 126.545810][ T6466]
[ 126.545818][ T6466] BUG: Bad page state in process syz.0.17 pfn:64d27
[ 126.822848][ T6466] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888064d27000 pfn:0x64d27
[ 126.832975][ T6466] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 126.840134][ T6466] raw: 00fff00000000000 dead000000000040 ffff888022a97000 0000000000000000
[ 126.848817][ T6466] raw: ffff888064d27000 0000000000000001 00000000ffffffff 0000000000000000
[ 126.857453][ T6466] page dumped because: page_pool leak
[ 126.862884][ T6466] page_owner tracks the page as allocated
[ 126.868589][ T6466] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6466, tgid 6465 (syz.0.17), ts 123180594415, free_ts 121970212002
[ 126.885593][ T6466] post_alloc_hook+0x231/0x280
[ 126.890656][ T6466] get_page_from_freelist+0x24dc/0x2580
[ 126.896195][ T6466] __alloc_frozen_pages_noprof+0x18d/0x380
[ 126.902072][ T6466] alloc_pages_bulk_noprof+0x558/0x700
[ 126.907565][ T6466] __page_pool_alloc_netmems_slow+0x14c/0x710
[ 126.913743][ T6466] skb_pp_cow_data+0xc21/0x1680
[ 126.918703][ T6466] do_xdp_generic+0x76b/0x12e0
[ 126.923489][ T6466] tun_get_user+0x247d/0x3dd0
[ 126.928167][ T6466] tun_chr_write_iter+0x113/0x200
[ 126.933300][ T6466] vfs_write+0x61d/0xb90
[ 126.937542][ T6466] ksys_write+0x150/0x270
[ 126.941892][ T6466] do_syscall_64+0x14d/0xf80
[ 126.946490][ T6466] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 126.952393][ T6466] page last free pid 0 tgid 0 stack trace:
[ 126.958190][ T6466] __free_frozen_pages+0xc2b/0xdb0
[ 126.963320][ T6466] rcu_core+0x7cd/0x1070
[ 126.967562][ T6466] handle_softirqs+0x22a/0x870
[ 126.972368][ T6466] __irq_exit_rcu+0x5f/0x150
[ 126.976969][ T6466] irq_exit_rcu+0x9/0x30
[ 126.981247][ T6466] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 126.986882][ T6466] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 126.992895][ T6466] Modules linked in:
[ 126.996801][ T6466] CPU: 0 UID: 0 PID: 6466 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 126.996819][ T6466] Tainted: [B]=BAD_PAGE
[ 126.996822][ T6466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 126.996828][ T6466] Call Trace:
[ 126.996834][ T6466]
[ 126.996839][ T6466] dump_stack_lvl+0xe8/0x150
[ 126.996858][ T6466] bad_page+0x17f/0x1c0
[ 126.996873][ T6466] __free_frozen_pages+0xd62/0xdb0
[ 126.996886][ T6466] bpf_xdp_frags_shrink_tail+0x4da/0x7d0
[ 126.996961][ T6466] bpf_xdp_adjust_tail+0x1d6/0x220
[ 126.996973][ T6466] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 126.996982][ T6466] bpf_prog_run_generic_xdp+0x603/0x1490
[ 126.997001][ T6466] do_xdp_generic+0xac5/0x12e0
[ 126.997016][ T6466] ? __pfx_do_xdp_generic+0x10/0x10
[ 126.997033][ T6466] ? tun_get_user+0x2354/0x3dd0
[ 126.997043][ T6466] tun_get_user+0x247d/0x3dd0
[ 126.997056][ T6466] ? aa_file_perm+0x192/0x15e0
[ 126.997066][ T6466] ? aa_file_perm+0x50e/0x15e0
[ 126.997074][ T6466] ? __pfx_tun_get_user+0x10/0x10
[ 126.997083][ T6466] ? aa_file_perm+0x192/0x15e0
[ 126.997092][ T6466] ? __lock_acquire+0x6b5/0x2cf0
[ 126.997106][ T6466] ? preempt_schedule_common+0x82/0xd0
[ 126.997118][ T6466] ? ref_tracker_alloc+0x35c/0x4c0
[ 126.997133][ T6466] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 126.997149][ T6466] ? tun_get+0x1c/0x2f0
[ 126.997164][ T6466] ? tun_get+0x1c/0x2f0
[ 126.997177][ T6466] ? tun_get+0x1c/0x2f0
[ 126.997187][ T6466] tun_chr_write_iter+0x113/0x200
[ 126.997197][ T6466] vfs_write+0x61d/0xb90
[ 126.997209][ T6466] ? __pfx_vfs_write+0x10/0x10
[ 126.997221][ T6466] ? __fget_files+0x2a/0x420
[ 126.997238][ T6466] ksys_write+0x150/0x270
[ 126.997249][ T6466] ? __pfx_ksys_write+0x10/0x10
[ 126.997261][ T6466] do_syscall_64+0x14d/0xf80
[ 126.997272][ T6466] ? trace_irq_disable+0x3b/0x150
[ 126.997287][ T6466] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 126.997297][ T6466] ? clear_bhb_loop+0x40/0x90
[ 126.997308][ T6466] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 126.997317][ T6466] RIP: 0033:0x7f868bb5b7ce
[ 126.997328][ T6466] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 126.997336][ T6466] RSP: 002b:00007f868ca2afb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 126.997348][ T6466] RAX: ffffffffffffffda RBX: 00007f868ca2b6c0 RCX: 00007f868bb5b7ce
[ 126.997355][ T6466] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8
[ 126.997362][ T6466] RBP: 00007f868bc2fee0 R08: 0000000000000000 R09: 0000000000000000
[ 126.997368][ T6466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 126.997374][ T6466] R13: 00007f868be06038 R14: 00007f868be05fa0 R15: 00007ffc6fe08e48
[ 126.997384][ T6466]
[ 126.997392][ T6466] BUG: Bad page state in process syz.0.17 pfn:64d28
[ 127.274400][ T6466] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888064d28000 pfn:0x64d28
[ 127.284520][ T6466] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 127.291679][ T6466] raw: 00fff00000000000 dead000000000040 ffff888022a97000 0000000000000000
[ 127.300369][ T6466] raw: ffff888064d28000 0000000000000001 00000000ffffffff 0000000000000000
[ 127.309128][ T6466] page dumped because: page_pool leak
[ 127.314953][ T6466] page_owner tracks the page as allocated
[ 127.320697][ T6466] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6466, tgid 6465 (syz.0.17), ts 123180578571, free_ts 121970229707
[ 127.338040][ T6466] post_alloc_hook+0x231/0x280
[ 127.342941][ T6466] get_page_from_freelist+0x24dc/0x2580
[ 127.348491][ T6466] __alloc_frozen_pages_noprof+0x18d/0x380
[ 127.354709][ T6466] alloc_pages_bulk_noprof+0x558/0x700
[ 127.360203][ T6466] __page_pool_alloc_netmems_slow+0x14c/0x710
[ 127.366362][ T6466] skb_pp_cow_data+0xc21/0x1680
[ 127.371234][ T6466] do_xdp_generic+0x76b/0x12e0
[ 127.376002][ T6466] tun_get_user+0x247d/0x3dd0
[ 127.380702][ T6466] tun_chr_write_iter+0x113/0x200
[ 127.385747][ T6466] vfs_write+0x61d/0xb90
[ 127.389991][ T6466] ksys_write+0x150/0x270
[ 127.394370][ T6466] do_syscall_64+0x14d/0xf80
[ 127.398957][ T6466] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 127.404998][ T6466] page last free pid 0 tgid 0 stack trace:
[ 127.410914][ T6466] __free_frozen_pages+0xc2b/0xdb0
[ 127.416013][ T6466] rcu_core+0x7cd/0x1070
[ 127.420349][ T6466] handle_softirqs+0x22a/0x870
[ 127.425114][ T6466] __irq_exit_rcu+0x5f/0x150
[ 127.429687][ T6466] irq_exit_rcu+0x9/0x30
[ 127.434035][ T6466] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 127.439666][ T6466] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 127.445679][ T6466] Modules linked in:
[ 127.449577][ T6466] CPU: 0 UID: 0 PID: 6466 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 127.449593][ T6466] Tainted: [B]=BAD_PAGE
[ 127.449597][ T6466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 127.449603][ T6466] Call Trace:
[ 127.449607][ T6466]
[ 127.449612][ T6466] dump_stack_lvl+0xe8/0x150
[ 127.449629][ T6466] bad_page+0x17f/0x1c0
[ 127.449645][ T6466] __free_frozen_pages+0xd62/0xdb0
[ 127.449658][ T6466] bpf_xdp_frags_shrink_tail+0x4da/0x7d0
[ 127.449675][ T6466] bpf_xdp_adjust_tail+0x1d6/0x220
[ 127.449686][ T6466] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 127.449695][ T6466] bpf_prog_run_generic_xdp+0x603/0x1490
[ 127.449713][ T6466] do_xdp_generic+0xac5/0x12e0
[ 127.449727][ T6466] ? __pfx_do_xdp_generic+0x10/0x10
[ 127.449745][ T6466] ? tun_get_user+0x2354/0x3dd0
[ 127.449755][ T6466] tun_get_user+0x247d/0x3dd0
[ 127.449767][ T6466] ? aa_file_perm+0x192/0x15e0
[ 127.449777][ T6466] ? aa_file_perm+0x50e/0x15e0
[ 127.449786][ T6466] ? __pfx_tun_get_user+0x10/0x10
[ 127.449794][ T6466] ? aa_file_perm+0x192/0x15e0
[ 127.449803][ T6466] ? __lock_acquire+0x6b5/0x2cf0
[ 127.449817][ T6466] ? preempt_schedule_common+0x82/0xd0
[ 127.449828][ T6466] ? ref_tracker_alloc+0x35c/0x4c0
[ 127.449843][ T6466] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 127.449859][ T6466] ? tun_get+0x1c/0x2f0
[ 127.449869][ T6466] ? tun_get+0x1c/0x2f0
[ 127.449883][ T6466] ? tun_get+0x1c/0x2f0
[ 127.449892][ T6466] tun_chr_write_iter+0x113/0x200
[ 127.449902][ T6466] vfs_write+0x61d/0xb90
[ 127.449914][ T6466] ? __pfx_vfs_write+0x10/0x10
[ 127.449926][ T6466] ? __fget_files+0x2a/0x420
[ 127.449942][ T6466] ksys_write+0x150/0x270
[ 127.449953][ T6466] ? __pfx_ksys_write+0x10/0x10
[ 127.449965][ T6466] do_syscall_64+0x14d/0xf80
[ 127.449976][ T6466] ? trace_irq_disable+0x3b/0x150
[ 127.449990][ T6466] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 127.450005][ T6466] ? clear_bhb_loop+0x40/0x90
[ 127.450021][ T6466] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 127.450036][ T6466] RIP: 0033:0x7f868bb5b7ce
[ 127.450050][ T6466] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 127.450064][ T6466] RSP: 002b:00007f868ca2afb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 127.450081][ T6466] RAX: ffffffffffffffda RBX: 00007f868ca2b6c0 RCX: 00007f868bb5b7ce
[ 127.450092][ T6466] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8
[ 127.450102][ T6466] RBP: 00007f868bc2fee0 R08: 0000000000000000 R09: 0000000000000000
[ 127.450108][ T6466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 127.450114][ T6466] R13: 00007f868be06038 R14: 00007f868be05fa0 R15: 00007ffc6fe08e48
[ 127.450125][ T6466]
[ 127.718501][ T6466] BUG: Bad page state in process syz.0.17 pfn:76650
[ 127.725193][ T6466] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888076650c80 pfn:0x76650
[ 127.735277][ T6466] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 127.742432][ T6466] raw: 00fff00000000000 dead000000000040 ffff888022a97000 0000000000000000
[ 127.751041][ T6466] raw: ffff888076650c80 0000000000000001 00000000ffffffff 0000000000000000
[ 127.759631][ T6466] page dumped because: page_pool leak
[ 127.765053][ T6466] page_owner tracks the page as allocated
[ 127.770791][ T6466] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6466, tgid 6465 (syz.0.17), ts 123180563323, free_ts 121970247560
[ 127.787863][ T6466] post_alloc_hook+0x231/0x280
[ 127.792750][ T6466] get_page_from_freelist+0x24dc/0x2580
[ 127.798286][ T6466] __alloc_frozen_pages_noprof+0x18d/0x380
[ 127.804101][ T6466] alloc_pages_bulk_noprof+0x558/0x700
[ 127.809562][ T6466] __page_pool_alloc_netmems_slow+0x14c/0x710
[ 127.815660][ T6466] skb_pp_cow_data+0xc21/0x1680
[ 127.820541][ T6466] do_xdp_generic+0x76b/0x12e0
[ 127.825295][ T6466] tun_get_user+0x247d/0x3dd0
[ 127.829951][ T6466] tun_chr_write_iter+0x113/0x200
[ 127.834994][ T6466] vfs_write+0x61d/0xb90
[ 127.839240][ T6466] ksys_write+0x150/0x270
[ 127.843761][ T6466] do_syscall_64+0x14d/0xf80
[ 127.848361][ T6466] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 127.854373][ T6466] page last free pid 0 tgid 0 stack trace:
[ 127.860211][ T6466] __free_frozen_pages+0xc2b/0xdb0
[ 127.865332][ T6466] rcu_core+0x7cd/0x1070
[ 127.869560][ T6466] handle_softirqs+0x22a/0x870
[ 127.874336][ T6466] __irq_exit_rcu+0x5f/0x150
[ 127.878930][ T6466] irq_exit_rcu+0x9/0x30
[ 127.883200][ T6466] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 127.888845][ T6466] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 127.894859][ T6466] Modules linked in:
[ 127.898760][ T6466] CPU: 0 UID: 0 PID: 6466 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 127.898776][ T6466] Tainted: [B]=BAD_PAGE
[ 127.898779][ T6466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 127.898785][ T6466] Call Trace:
[ 127.898789][ T6466]
[ 127.898794][ T6466] dump_stack_lvl+0xe8/0x150
[ 127.898811][ T6466] bad_page+0x17f/0x1c0
[ 127.898831][ T6466] __free_frozen_pages+0xd62/0xdb0
[ 127.898844][ T6466] bpf_xdp_frags_shrink_tail+0x4da/0x7d0
[ 127.898861][ T6466] bpf_xdp_adjust_tail+0x1d6/0x220
[ 127.898872][ T6466] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 127.898881][ T6466] bpf_prog_run_generic_xdp+0x603/0x1490
[ 127.898900][ T6466] do_xdp_generic+0xac5/0x12e0
[ 127.898914][ T6466] ? __pfx_do_xdp_generic+0x10/0x10
[ 127.898932][ T6466] ? tun_get_user+0x2354/0x3dd0
[ 127.898942][ T6466] tun_get_user+0x247d/0x3dd0
[ 127.898954][ T6466] ? aa_file_perm+0x192/0x15e0
[ 127.898964][ T6466] ? aa_file_perm+0x50e/0x15e0
[ 127.898972][ T6466] ? __pfx_tun_get_user+0x10/0x10
[ 127.898981][ T6466] ? aa_file_perm+0x192/0x15e0
[ 127.898990][ T6466] ? __lock_acquire+0x6b5/0x2cf0
[ 127.899004][ T6466] ? preempt_schedule_common+0x82/0xd0
[ 127.899016][ T6466] ? ref_tracker_alloc+0x35c/0x4c0
[ 127.899031][ T6466] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 127.899047][ T6466] ? tun_get+0x1c/0x2f0
[ 127.899056][ T6466] ? tun_get+0x1c/0x2f0
[ 127.899065][ T6466] ? tun_get+0x1c/0x2f0
[ 127.899074][ T6466] tun_chr_write_iter+0x113/0x200
[ 127.899084][ T6466] vfs_write+0x61d/0xb90
[ 127.899096][ T6466] ? __pfx_vfs_write+0x10/0x10
[ 127.899107][ T6466] ? __fget_files+0x2a/0x420
[ 127.899124][ T6466] ksys_write+0x150/0x270
[ 127.899134][ T6466] ? __pfx_ksys_write+0x10/0x10
[ 127.899146][ T6466] do_syscall_64+0x14d/0xf80
[ 127.899156][ T6466] ? trace_irq_disable+0x3b/0x150
[ 127.899172][ T6466] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 127.899181][ T6466] ? clear_bhb_loop+0x40/0x90
[ 127.899192][ T6466] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 127.899201][ T6466] RIP: 0033:0x7f868bb5b7ce
[ 127.899211][ T6466] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 127.899219][ T6466] RSP: 002b:00007f868ca2afb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 127.899230][ T6466] RAX: ffffffffffffffda RBX: 00007f868ca2b6c0 RCX: 00007f868bb5b7ce
[ 127.899238][ T6466] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8
[ 127.899244][ T6466] RBP: 00007f868bc2fee0 R08: 0000000000000000 R09: 0000000000000000
[ 127.899250][ T6466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 127.899256][ T6466] R13: 00007f868be06038 R14: 00007f868be05fa0 R15: 00007ffc6fe08e48
[ 127.899266][ T6466]
[ 127.899273][ T6466] BUG: Bad page state in process syz.0.17 pfn:360cf
[ 128.175397][ T6466] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880360cf000 pfn:0x360cf
[ 128.185567][ T6466] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 128.192706][ T6466] raw: 00fff00000000000 dead000000000040 ffff888022a97000 0000000000000000
[ 128.201305][ T6466] raw: ffff8880360cf000 0000000000000001 00000000ffffffff 0000000000000000
[ 128.209888][ T6466] page dumped because: page_pool leak
[ 128.215491][ T6466] page_owner tracks the page as allocated
[ 128.221224][ T6466] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6466, tgid 6465 (syz.0.17), ts 123180549142, free_ts 121970266304
[ 128.238189][ T6466] post_alloc_hook+0x231/0x280
[ 128.242991][ T6466] get_page_from_freelist+0x24dc/0x2580
[ 128.248525][ T6466] __alloc_frozen_pages_noprof+0x18d/0x380
[ 128.254338][ T6466] alloc_pages_bulk_noprof+0x558/0x700
[ 128.259800][ T6466] __page_pool_alloc_netmems_slow+0x14c/0x710
[ 128.265980][ T6466] skb_pp_cow_data+0xc21/0x1680
[ 128.271045][ T6466] do_xdp_generic+0x76b/0x12e0
[ 128.275800][ T6466] tun_get_user+0x247d/0x3dd0
[ 128.280589][ T6466] tun_chr_write_iter+0x113/0x200
[ 128.285620][ T6466] vfs_write+0x61d/0xb90
[ 128.289938][ T6466] ksys_write+0x150/0x270
[ 128.294327][ T6466] do_syscall_64+0x14d/0xf80
[ 128.299099][ T6466] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 128.305051][ T6466] page last free pid 0 tgid 0 stack trace:
[ 128.310899][ T6466] __free_frozen_pages+0xc2b/0xdb0
[ 128.316012][ T6466] rcu_core+0x7cd/0x1070
[ 128.320704][ T6466] handle_softirqs+0x22a/0x870
[ 128.325471][ T6466] __irq_exit_rcu+0x5f/0x150
[ 128.330081][ T6466] irq_exit_rcu+0x9/0x30
[ 128.334417][ T6466] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 128.340075][ T6466] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 128.346053][ T6466] Modules linked in:
[ 128.350100][ T6466] CPU: 0 UID: 0 PID: 6466 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 128.350123][ T6466] Tainted: [B]=BAD_PAGE
[ 128.350129][ T6466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 128.350140][ T6466] Call Trace:
[ 128.350148][ T6466]
[ 128.350155][ T6466] dump_stack_lvl+0xe8/0x150
[ 128.350180][ T6466] bad_page+0x17f/0x1c0
[ 128.350204][ T6466] __free_frozen_pages+0xd62/0xdb0
2026/03/23 13:36:09 executed programs: 3
[ 128.350224][ T6466] bpf_xdp_frags_shrink_tail+0x4da/0x7d0
[ 128.350252][ T6466] bpf_xdp_adjust_tail+0x1d6/0x220
[ 128.350271][ T6466] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 128.350286][ T6466] bpf_prog_run_generic_xdp+0x603/0x1490
[ 128.350319][ T6466] do_xdp_generic+0xac5/0x12e0
[ 128.350344][ T6466] ? __pfx_do_xdp_generic+0x10/0x10
[ 128.350375][ T6466] ? tun_get_user+0x2354/0x3dd0
[ 128.350394][ T6466] tun_get_user+0x247d/0x3dd0
[ 128.350415][ T6466] ? aa_file_perm+0x192/0x15e0
[ 128.350433][ T6466] ? aa_file_perm+0x50e/0x15e0
[ 128.350448][ T6466] ? __pfx_tun_get_user+0x10/0x10
[ 128.350463][ T6466] ? aa_file_perm+0x192/0x15e0
[ 128.350480][ T6466] ? __lock_acquire+0x6b5/0x2cf0
[ 128.350504][ T6466] ? preempt_schedule_common+0x82/0xd0
[ 128.350523][ T6466] ? ref_tracker_alloc+0x35c/0x4c0
[ 128.350546][ T6466] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 128.350570][ T6466] ? tun_get+0x1c/0x2f0
[ 128.350587][ T6466] ? tun_get+0x1c/0x2f0
[ 128.350603][ T6466] ? tun_get+0x1c/0x2f0
[ 128.350619][ T6466] tun_chr_write_iter+0x113/0x200
[ 128.350637][ T6466] vfs_write+0x61d/0xb90
[ 128.350658][ T6466] ? __pfx_vfs_write+0x10/0x10
[ 128.350680][ T6466] ? __fget_files+0x2a/0x420
[ 128.350710][ T6466] ksys_write+0x150/0x270
[ 128.350729][ T6466] ? __pfx_ksys_write+0x10/0x10
[ 128.350752][ T6466] do_syscall_64+0x14d/0xf80
[ 128.350770][ T6466] ? trace_irq_disable+0x3b/0x150
[ 128.350794][ T6466] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 128.350811][ T6466] ? clear_bhb_loop+0x40/0x90
[ 128.350830][ T6466] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 128.350847][ T6466] RIP: 0033:0x7f868bb5b7ce
[ 128.350863][ T6466] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 128.350936][ T6466] RSP: 002b:00007f868ca2afb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 128.350955][ T6466] RAX: ffffffffffffffda RBX: 00007f868ca2b6c0 RCX: 00007f868bb5b7ce
[ 128.350968][ T6466] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8
[ 128.350979][ T6466] RBP: 00007f868bc2fee0 R08: 0000000000000000 R09: 0000000000000000
[ 128.350990][ T6466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 128.351000][ T6466] R13: 00007f868be06038 R14: 00007f868be05fa0 R15: 00007ffc6fe08e48
[ 128.351019][ T6466]
[ 128.359051][ T51] Bluetooth: hci0: command tx timeout
[ 128.489127][ T6470] BUG: Bad page state in process syz.0.18 pfn:60bd0
[ 128.641769][ T6470] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888060bd0000 pfn:0x60bd0
[ 128.652133][ T6470] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 128.659252][ T6470] raw: 00fff00000000000 dead000000000040 ffff888022a94000 0000000000000000
[ 128.667953][ T6470] raw: ffff888060bd0000 3fffffffffffffff 00000000ffffffff 0000000000000000
[ 128.676656][ T6470] page dumped because: page_pool leak
[ 128.682105][ T6470] page_owner tracks the page as allocated
[ 128.687819][ T6470] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6470, tgid 6467 (syz.0.18), ts 128489040165, free_ts 123172808777
[ 128.704786][ T6470] post_alloc_hook+0x231/0x280
[ 128.709641][ T6470] get_page_from_freelist+0x24dc/0x2580
[ 128.715239][ T6470] __alloc_frozen_pages_noprof+0x18d/0x380
[ 128.721184][ T6470] alloc_pages_bulk_noprof+0x558/0x700
[ 128.726640][ T6470] __page_pool_alloc_netmems_slow+0x14c/0x710
[ 128.732733][ T6470] page_pool_alloc_frag_netmem+0x421/0x9b0
[ 128.738550][ T6470] skb_pp_cow_data+0xc43/0x1680
[ 128.743434][ T6470] do_xdp_generic+0x76b/0x12e0
[ 128.748199][ T6470] tun_get_user+0x247d/0x3dd0
[ 128.752893][ T6470] tun_chr_write_iter+0x113/0x200
[ 128.757997][ T6470] vfs_write+0x61d/0xb90
[ 128.762281][ T6470] ksys_write+0x150/0x270
[ 128.766617][ T6470] do_syscall_64+0x14d/0xf80
[ 128.771326][ T6470] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 128.777237][ T6470] page last free pid 6155 tgid 6155 stack trace:
[ 128.783584][ T6470] __free_frozen_pages+0xc2b/0xdb0
[ 128.788704][ T6470] __slab_free+0x263/0x2b0
[ 128.793141][ T6470] qlist_free_all+0x97/0x100
[ 128.797733][ T6470] kasan_quarantine_reduce+0x148/0x160
[ 128.803326][ T6470] __kasan_slab_alloc+0x22/0x80
[ 128.808278][ T6470] __kmalloc_noprof+0x316/0x760
[ 128.813235][ T6470] tomoyo_realpath_from_path+0xe3/0x5d0
[ 128.818831][ T6470] tomoyo_path_number_perm+0x246/0x630
[ 128.824334][ T6470] security_file_ioctl+0xc3/0x2a0
[ 128.829448][ T6470] __se_sys_ioctl+0x47/0x170
[ 128.834070][ T6470] do_syscall_64+0x14d/0xf80
[ 128.838747][ T6470] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 128.844668][ T6470] Modules linked in:
[ 128.848569][ T6470] CPU: 1 UID: 0 PID: 6470 Comm: syz.0.18 Tainted: G B syzkaller #0 PREEMPT(full)
[ 128.848585][ T6470] Tainted: [B]=BAD_PAGE
[ 128.848589][ T6470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 128.848595][ T6470] Call Trace:
[ 128.848599][ T6470]
[ 128.848604][ T6470] dump_stack_lvl+0xe8/0x150
[ 128.848622][ T6470] bad_page+0x17f/0x1c0
[ 128.848637][ T6470] __free_frozen_pages+0xd62/0xdb0
[ 128.848650][ T6470] bpf_xdp_frags_shrink_tail+0x4da/0x7d0
[ 128.848668][ T6470] bpf_xdp_adjust_tail+0x1d6/0x220
[ 128.848679][ T6470] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 128.848689][ T6470] bpf_prog_run_generic_xdp+0x603/0x1490
[ 128.848706][ T6470] ? lock_release+0x4b/0x3d0
[ 128.848720][ T6470] do_xdp_generic+0xac5/0x12e0
[ 128.848734][ T6470] ? __pfx_do_xdp_generic+0x10/0x10
[ 128.848749][ T6470] ? skb_header_pointer+0x8e/0x120
[ 128.848760][ T6470] ? lock_acquire+0x57/0x2e0
[ 128.848773][ T6470] ? tun_get_user+0x2354/0x3dd0
[ 128.848783][ T6470] tun_get_user+0x247d/0x3dd0
[ 128.848795][ T6470] ? pfn_valid+0xba/0x480
[ 128.848807][ T6470] ? aa_file_perm+0x50e/0x15e0
[ 128.848815][ T6470] ? __pfx_tun_get_user+0x10/0x10
[ 128.848824][ T6470] ? aa_file_perm+0x192/0x15e0
[ 128.848833][ T6470] ? css_rstat_updated+0x23a/0x530
[ 128.848849][ T6470] ? __pfx_css_rstat_updated+0x10/0x10
[ 128.848858][ T6470] ? rcu_is_watching+0x15/0xb0
[ 128.848873][ T6470] ? ref_tracker_alloc+0x35c/0x4c0
[ 128.848889][ T6470] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 128.848903][ T6470] ? count_memcg_event_mm+0x21/0x260
[ 128.848918][ T6470] ? rcu_is_watching+0x15/0xb0
[ 128.848931][ T6470] ? tun_get+0x1c/0x2f0
[ 128.848939][ T6470] ? rcu_is_watching+0x15/0xb0
[ 128.848952][ T6470] ? tun_get+0x1c/0x2f0
[ 128.848960][ T6470] ? lock_release+0x4b/0x3d0
[ 128.848971][ T6470] ? apparmor_file_permission+0x1f4/0x300
[ 128.848983][ T6470] ? tun_get+0x1c/0x2f0
[ 128.848993][ T6470] tun_chr_write_iter+0x113/0x200
[ 128.849002][ T6470] vfs_write+0x61d/0xb90
[ 128.849014][ T6470] ? __pfx_vfs_write+0x10/0x10
[ 128.849025][ T6470] ? __fget_files+0x2a/0x420
[ 128.849041][ T6470] ksys_write+0x150/0x270
[ 128.849052][ T6470] ? __pfx_ksys_write+0x10/0x10
[ 128.849062][ T6470] ? rcu_is_watching+0x15/0xb0
[ 128.849076][ T6470] do_syscall_64+0x14d/0xf80
[ 128.849087][ T6470] ? trace_irq_disable+0x3b/0x150
[ 128.849108][ T6470] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 128.849125][ T6470] ? clear_bhb_loop+0x40/0x90
[ 128.849141][ T6470] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 128.849157][ T6470] RIP: 0033:0x7f868bb5b7ce
[ 128.849170][ T6470] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 128.849178][ T6470] RSP: 002b:00007f868ca09fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 128.849190][ T6470] RAX: ffffffffffffffda RBX: 00007f868ca0a6c0 RCX: 00007f868bb5b7ce
[ 128.849197][ T6470] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8
[ 128.849203][ T6470] RBP: 00007f868bc2fee0 R08: 0000000000000000 R09: 0000000000000000
[ 128.849209][ T6470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 128.849215][ T6470] R13: 00007f868be06128 R14: 00007f868be06090 R15: 00007ffc6fe08e48
[ 128.849226][ T6470]
[ 128.849233][ T6470] BUG: Bad page state in process syz.0.18 pfn:60bd1
[ 129.175456][ T6470] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888060bd1540 pfn:0x60bd1
[ 129.185637][ T6470] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 129.192797][ T6470] raw: 00fff00000000000 dead000000000040 ffff888022a94000 0000000000000000
[ 129.201491][ T6470] raw: ffff888060bd1540 0000000000000001 00000000ffffffff 0000000000000000
[ 129.210457][ T6470] page dumped because: page_pool leak
[ 129.215831][ T6470] page_owner tracks the page as allocated
[ 129.221574][ T6470] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6470, tgid 6467 (syz.0.18), ts 128489029289, free_ts 123172835657
[ 129.238461][ T6470] post_alloc_hook+0x231/0x280
[ 129.243265][ T6470] get_page_from_freelist+0x24dc/0x2580
[ 129.248823][ T6470] __alloc_frozen_pages_noprof+0x18d/0x380
[ 129.254708][ T6470] alloc_pages_bulk_noprof+0x558/0x700
[ 129.260221][ T6470] __page_pool_alloc_netmems_slow+0x14c/0x710
[ 129.266663][ T6470] skb_pp_cow_data+0xc21/0x1680
[ 129.271685][ T6470] do_xdp_generic+0x76b/0x12e0
[ 129.276478][ T6470] tun_get_user+0x247d/0x3dd0
[ 129.281219][ T6470] tun_chr_write_iter+0x113/0x200
[ 129.286268][ T6470] vfs_write+0x61d/0xb90
[ 129.290720][ T6470] ksys_write+0x150/0x270
[ 129.295048][ T6470] do_syscall_64+0x14d/0xf80
[ 129.299730][ T6470] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 129.305654][ T6470] page last free pid 6155 tgid 6155 stack trace:
[ 129.312013][ T6470] __free_frozen_pages+0xc2b/0xdb0
[ 129.317115][ T6470] __slab_free+0x263/0x2b0
[ 129.321567][ T6470] qlist_free_all+0x97/0x100
[ 129.326199][ T6470] kasan_quarantine_reduce+0x148/0x160
[ 129.331703][ T6470] __kasan_slab_alloc+0x22/0x80
[ 129.336557][ T6470] __kmalloc_noprof+0x316/0x760
[ 129.341429][ T6470] tomoyo_realpath_from_path+0xe3/0x5d0
[ 129.347064][ T6470] tomoyo_path_number_perm+0x246/0x630
[ 129.352543][ T6470] security_file_ioctl+0xc3/0x2a0
[ 129.357565][ T6470] __se_sys_ioctl+0x47/0x170
[ 129.362175][ T6470] do_syscall_64+0x14d/0xf80
[ 129.366815][ T6470] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 129.372914][ T6470] Modules linked in:
[ 129.376826][ T6470] CPU: 1 UID: 0 PID: 6470 Comm: syz.0.18 Tainted: G B syzkaller #0 PREEMPT(full)
[ 129.376844][ T6470] Tainted: [B]=BAD_PAGE
[ 129.376848][ T6470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 129.376854][ T6470] Call Trace:
[ 129.376861][ T6470]
[ 129.376866][ T6470] dump_stack_lvl+0xe8/0x150
[ 129.376884][ T6470] bad_page+0x17f/0x1c0
[ 129.376901][ T6470] __free_frozen_pages+0xd62/0xdb0
[ 129.376913][ T6470] bpf_xdp_frags_shrink_tail+0x4da/0x7d0
[ 129.376931][ T6470] bpf_xdp_adjust_tail+0x1d6/0x220
[ 129.376942][ T6470] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 129.376951][ T6470] bpf_prog_run_generic_xdp+0x603/0x1490
[ 129.376969][ T6470] ? lock_release+0x4b/0x3d0
[ 129.376983][ T6470] do_xdp_generic+0xac5/0x12e0
[ 129.376998][ T6470] ? __pfx_do_xdp_generic+0x10/0x10
[ 129.377014][ T6470] ? skb_header_pointer+0x8e/0x120
[ 129.377026][ T6470] ? lock_acquire+0x57/0x2e0
[ 129.377039][ T6470] ? tun_get_user+0x2354/0x3dd0
[ 129.377049][ T6470] tun_get_user+0x247d/0x3dd0
[ 129.377061][ T6470] ? pfn_valid+0xba/0x480
[ 129.377072][ T6470] ? aa_file_perm+0x50e/0x15e0
[ 129.377081][ T6470] ? __pfx_tun_get_user+0x10/0x10
[ 129.377090][ T6470] ? aa_file_perm+0x192/0x15e0
[ 129.377100][ T6470] ? css_rstat_updated+0x23a/0x530
[ 129.377111][ T6470] ? __pfx_css_rstat_updated+0x10/0x10
[ 129.377120][ T6470] ? rcu_is_watching+0x15/0xb0
[ 129.377135][ T6470] ? ref_tracker_alloc+0x35c/0x4c0
[ 129.377151][ T6470] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 129.377165][ T6470] ? count_memcg_event_mm+0x21/0x260
[ 129.377179][ T6470] ? rcu_is_watching+0x15/0xb0
[ 129.377192][ T6470] ? tun_get+0x1c/0x2f0
[ 129.377201][ T6470] ? rcu_is_watching+0x15/0xb0
[ 129.377213][ T6470] ? tun_get+0x1c/0x2f0
[ 129.377222][ T6470] ? lock_release+0x4b/0x3d0
[ 129.377233][ T6470] ? apparmor_file_permission+0x1f4/0x300
[ 129.377245][ T6470] ? tun_get+0x1c/0x2f0
[ 129.377255][ T6470] tun_chr_write_iter+0x113/0x200
[ 129.377265][ T6470] vfs_write+0x61d/0xb90
[ 129.377277][ T6470] ? __pfx_vfs_write+0x10/0x10
[ 129.377289][ T6470] ? __fget_files+0x2a/0x420
[ 129.377305][ T6470] ksys_write+0x150/0x270
[ 129.377316][ T6470] ? __pfx_ksys_write+0x10/0x10
[ 129.377326][ T6470] ? rcu_is_watching+0x15/0xb0
[ 129.377340][ T6470] do_syscall_64+0x14d/0xf80
[ 129.377351][ T6470] ? trace_irq_disable+0x3b/0x150
[ 129.377366][ T6470] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 129.377376][ T6470] ? clear_bhb_loop+0x40/0x90
[ 129.377387][ T6470] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 129.377397][ T6470] RIP: 0033:0x7f868bb5b7ce
[ 129.377407][ T6470] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 129.377416][ T6470] RSP: 002b:00007f868ca09fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 129.377427][ T6470] RAX: ffffffffffffffda RBX: 00007f868ca0a6c0 RCX: 00007f868bb5b7ce
[ 129.377435][ T6470] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8
[ 129.377441][ T6470] RBP: 00007f868bc2fee0 R08: 0000000000000000 R09: 0000000000000000
[ 129.377447][ T6470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 129.377453][ T6470] R13: 00007f868be06128 R14: 00007f868be06090 R15: 00007ffc6fe08e48
[ 129.377463][ T6470]
[ 129.377471][ T6470] BUG: Bad page state in process syz.0.18 pfn:60bcf
[ 129.704897][ T6470] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888060bcf000 pfn:0x60bcf
[ 129.714980][ T6470] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 129.722200][ T6470] raw: 00fff00000000000 dead000000000040 ffff888022a94000 0000000000000000
[ 129.730796][ T6470] raw: ffff888060bcf000 0000000000000001 00000000ffffffff 0000000000000000
[ 129.739399][ T6470] page dumped because: page_pool leak
[ 129.744895][ T6470] page_owner tracks the page as allocated
[ 129.750639][ T6470] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6470, tgid 6467 (syz.0.18), ts 128489019265, free_ts 123172867950
[ 129.767506][ T6470] post_alloc_hook+0x231/0x280
[ 129.772312][ T6470] get_page_from_freelist+0x24dc/0x2580
[ 129.777848][ T6470] __alloc_frozen_pages_noprof+0x18d/0x380
[ 129.783757][ T6470] alloc_pages_bulk_noprof+0x558/0x700
[ 129.789220][ T6470] __page_pool_alloc_netmems_slow+0x14c/0x710
[ 129.795337][ T6470] skb_pp_cow_data+0xc21/0x1680
[ 129.800213][ T6470] do_xdp_generic+0x76b/0x12e0
[ 129.804968][ T6470] tun_get_user+0x247d/0x3dd0
[ 129.809622][ T6470] tun_chr_write_iter+0x113/0x200
[ 129.814747][ T6470] vfs_write+0x61d/0xb90
[ 129.818985][ T6470] ksys_write+0x150/0x270
[ 129.823339][ T6470] do_syscall_64+0x14d/0xf80
[ 129.827926][ T6470] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 129.833836][ T6470] page last free pid 6155 tgid 6155 stack trace:
[ 129.840278][ T6470] __free_frozen_pages+0xc2b/0xdb0
[ 129.845479][ T6470] __slab_free+0x263/0x2b0
[ 129.849942][ T6470] qlist_free_all+0x97/0x100
[ 129.854585][ T6470] kasan_quarantine_reduce+0x148/0x160
[ 129.860092][ T6470] __kasan_slab_alloc+0x22/0x80
[ 129.864941][ T6470] __kmalloc_noprof+0x316/0x760
[ 129.869858][ T6470] tomoyo_realpath_from_path+0xe3/0x5d0
[ 129.875523][ T6470] tomoyo_path_number_perm+0x246/0x630
[ 129.881011][ T6470] security_file_ioctl+0xc3/0x2a0
[ 129.886031][ T6470] __se_sys_ioctl+0x47/0x170
[ 129.890638][ T6470] do_syscall_64+0x14d/0xf80
[ 129.895431][ T6470] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 129.901363][ T6470] Modules linked in:
[ 129.905366][ T6470] CPU: 1 UID: 0 PID: 6470 Comm: syz.0.18 Tainted: G B syzkaller #0 PREEMPT(full)
[ 129.905389][ T6470] Tainted: [B]=BAD_PAGE
[ 129.905392][ T6470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 129.905399][ T6470] Call Trace:
[ 129.905404][ T6470]
[ 129.905409][ T6470] dump_stack_lvl+0xe8/0x150
[ 129.905427][ T6470] bad_page+0x17f/0x1c0
[ 129.905443][ T6470] __free_frozen_pages+0xd62/0xdb0
[ 129.905456][ T6470] bpf_xdp_frags_shrink_tail+0x4da/0x7d0
[ 129.905474][ T6470] bpf_xdp_adjust_tail+0x1d6/0x220
[ 129.905485][ T6470] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 129.905494][ T6470] bpf_prog_run_generic_xdp+0x603/0x1490
[ 129.905512][ T6470] ? lock_release+0x4b/0x3d0
[ 129.905526][ T6470] do_xdp_generic+0xac5/0x12e0
[ 129.905540][ T6470] ? __pfx_do_xdp_generic+0x10/0x10
[ 129.905555][ T6470] ? skb_header_pointer+0x8e/0x120
[ 129.905567][ T6470] ? lock_acquire+0x57/0x2e0
[ 129.905579][ T6470] ? tun_get_user+0x2354/0x3dd0
[ 129.905589][ T6470] tun_get_user+0x247d/0x3dd0
[ 129.905602][ T6470] ? pfn_valid+0xba/0x480
[ 129.905614][ T6470] ? aa_file_perm+0x50e/0x15e0
[ 129.905623][ T6470] ? __pfx_tun_get_user+0x10/0x10
[ 129.905631][ T6470] ? aa_file_perm+0x192/0x15e0
[ 129.905641][ T6470] ? css_rstat_updated+0x23a/0x530
[ 129.905653][ T6470] ? __pfx_css_rstat_updated+0x10/0x10
[ 129.905662][ T6470] ? rcu_is_watching+0x15/0xb0
[ 129.905708][ T6470] ? ref_tracker_alloc+0x35c/0x4c0
[ 129.905723][ T6470] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 129.905737][ T6470] ? count_memcg_event_mm+0x21/0x260
[ 129.905752][ T6470] ? rcu_is_watching+0x15/0xb0
[ 129.905765][ T6470] ? tun_get+0x1c/0x2f0
[ 129.905774][ T6470] ? rcu_is_watching+0x15/0xb0
[ 129.905786][ T6470] ? tun_get+0x1c/0x2f0
[ 129.905794][ T6470] ? lock_release+0x4b/0x3d0
[ 129.905806][ T6470] ? apparmor_file_permission+0x1f4/0x300
[ 129.905818][ T6470] ? tun_get+0x1c/0x2f0
[ 129.905827][ T6470] tun_chr_write_iter+0x113/0x200
[ 129.905837][ T6470] vfs_write+0x61d/0xb90
[ 129.905849][ T6470] ? __pfx_vfs_write+0x10/0x10
[ 129.905861][ T6470] ? __fget_files+0x2a/0x420
[ 129.905878][ T6470] ksys_write+0x150/0x270
[ 129.905888][ T6470] ? __pfx_ksys_write+0x10/0x10
[ 129.905899][ T6470] ? rcu_is_watching+0x15/0xb0
[ 129.905912][ T6470] do_syscall_64+0x14d/0xf80
[ 129.905924][ T6470] ? trace_irq_disable+0x3b/0x150
[ 129.905939][ T6470] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 129.905949][ T6470] ? clear_bhb_loop+0x40/0x90
[ 129.905959][ T6470] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 129.905970][ T6470] RIP: 0033:0x7f868bb5b7ce
[ 129.905980][ T6470] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 129.905988][ T6470] RSP: 002b:00007f868ca09fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 129.906000][ T6470] RAX: ffffffffffffffda RBX: 00007f868ca0a6c0 RCX: 00007f868bb5b7ce
[ 129.906007][ T6470] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8
[ 129.906013][ T6470] RBP: 00007f868bc2fee0 R08: 0000000000000000 R09: 0000000000000000
[ 129.906019][ T6470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 129.906025][ T6470] R13: 00007f868be06128 R14: 00007f868be06090 R15: 00007ffc6fe08e48
[ 129.906036][ T6470]
[ 129.906043][ T6470] BUG: Bad page state in process syz.0.18 pfn:60bcd
[ 130.231892][ T6470] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888060bcd000 pfn:0x60bcd
[ 130.241973][ T6470] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 130.249089][ T6470] raw: 00fff00000000000 dead000000000040 ffff888022a94000 0000000000000000
[ 130.258051][ T6470] raw: ffff888060bcd000 0000000000000001 00000000ffffffff 0000000000000000
[ 130.266913][ T6470] page dumped because: page_pool leak
[ 130.272301][ T6470] page_owner tracks the page as allocated
[ 130.278010][ T6470] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6470, tgid 6467 (syz.0.18), ts 128489009010, free_ts 123172901522
[ 130.294982][ T6470] post_alloc_hook+0x231/0x280
[ 130.300068][ T6470] get_page_from_freelist+0x24dc/0x2580
[ 130.305615][ T6470] __alloc_frozen_pages_noprof+0x18d/0x380
[ 130.311549][ T6470] alloc_pages_bulk_noprof+0x558/0x700
[ 130.317013][ T6470] __page_pool_alloc_netmems_slow+0x14c/0x710
[ 130.323193][ T6470] skb_pp_cow_data+0xc21/0x1680
[ 130.328045][ T6470] do_xdp_generic+0x76b/0x12e0
[ 130.332838][ T6470] tun_get_user+0x247d/0x3dd0
[ 130.337788][ T6470] tun_chr_write_iter+0x113/0x200
[ 130.342902][ T6470] vfs_write+0x61d/0xb90
[ 130.347157][ T6470] ksys_write+0x150/0x270
[ 130.351526][ T6470] do_syscall_64+0x14d/0xf80
[ 130.356118][ T6470] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 130.362087][ T6470] page last free pid 6155 tgid 6155 stack trace:
[ 130.368446][ T6470] __free_frozen_pages+0xc2b/0xdb0
[ 130.373631][ T6470] __slab_free+0x263/0x2b0
[ 130.378056][ T6470] qlist_free_all+0x97/0x100
[ 130.382678][ T6470] kasan_quarantine_reduce+0x148/0x160
[ 130.388133][ T6470] __kasan_slab_alloc+0x22/0x80
[ 130.393005][ T6470] __kmalloc_noprof+0x316/0x760
[ 130.397925][ T6470] tomoyo_realpath_from_path+0xe3/0x5d0
[ 130.403520][ T6470] tomoyo_path_number_perm+0x246/0x630
[ 130.408986][ T6470] security_file_ioctl+0xc3/0x2a0
[ 130.414042][ T6470] __se_sys_ioctl+0x47/0x170
[ 130.418635][ T6470] do_syscall_64+0x14d/0xf80
[ 130.423265][ T6470] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 130.429157][ T6470] Modules linked in:
[ 130.433176][ T6470] CPU: 1 UID: 0 PID: 6470 Comm: syz.0.18 Tainted: G B syzkaller #0 PREEMPT(full)
[ 130.433201][ T6470] Tainted: [B]=BAD_PAGE
[ 130.433206][ T6470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 130.433214][ T6470] Call Trace:
[ 130.433219][ T6470]
[ 130.433225][ T6470] dump_stack_lvl+0xe8/0x150
[ 130.433249][ T6470] bad_page+0x17f/0x1c0
[ 130.433272][ T6470] __free_frozen_pages+0xd62/0xdb0
[ 130.433296][ T6470] bpf_xdp_frags_shrink_tail+0x4da/0x7d0
[ 130.433329][ T6470] bpf_xdp_adjust_tail+0x1d6/0x220
[ 130.433349][ T6470] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 130.433365][ T6470] bpf_prog_run_generic_xdp+0x603/0x1490
[ 130.433394][ T6470] ? lock_release+0x4b/0x3d0
[ 130.433418][ T6470] do_xdp_generic+0xac5/0x12e0
[ 130.433445][ T6470] ? __pfx_do_xdp_generic+0x10/0x10
[ 130.433467][ T6470] ? skb_header_pointer+0x8e/0x120
[ 130.433487][ T6470] ? lock_acquire+0x57/0x2e0
[ 130.433510][ T6470] ? tun_get_user+0x2354/0x3dd0
[ 130.433527][ T6470] tun_get_user+0x247d/0x3dd0
[ 130.433549][ T6470] ? pfn_valid+0xba/0x480
[ 130.433569][ T6470] ? aa_file_perm+0x50e/0x15e0
[ 130.433585][ T6470] ? __pfx_tun_get_user+0x10/0x10
[ 130.433602][ T6470] ? aa_file_perm+0x192/0x15e0
[ 130.433644][ T6470] ? css_rstat_updated+0x23a/0x530
[ 130.433664][ T6470] ? __pfx_css_rstat_updated+0x10/0x10
[ 130.433681][ T6470] ? rcu_is_watching+0x15/0xb0
[ 130.433706][ T6470] ? ref_tracker_alloc+0x35c/0x4c0
[ 130.433733][ T6470] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 130.433758][ T6470] ? count_memcg_event_mm+0x21/0x260
[ 130.433781][ T6470] ? rcu_is_watching+0x15/0xb0
[ 130.433801][ T6470] ? tun_get+0x1c/0x2f0
[ 130.433814][ T6470] ? rcu_is_watching+0x15/0xb0
[ 130.433835][ T6470] ? tun_get+0x1c/0x2f0
[ 130.433850][ T6470] ? lock_release+0x4b/0x3d0
[ 130.433871][ T6470] ? apparmor_file_permission+0x1f4/0x300
[ 130.433891][ T6470] ? tun_get+0x1c/0x2f0
[ 130.433908][ T6470] tun_chr_write_iter+0x113/0x200
[ 130.433927][ T6470] vfs_write+0x61d/0xb90
[ 130.433948][ T6470] ? __pfx_vfs_write+0x10/0x10
[ 130.433970][ T6470] ? __fget_files+0x2a/0x420
[ 130.433998][ T6470] ksys_write+0x150/0x270
[ 130.434016][ T6470] ? __pfx_ksys_write+0x10/0x10
[ 130.434036][ T6470] ? rcu_is_watching+0x15/0xb0
[ 130.434060][ T6470] do_syscall_64+0x14d/0xf80
[ 130.434078][ T6470] ? trace_irq_disable+0x3b/0x150
[ 130.434101][ T6470] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 130.434119][ T6470] ? clear_bhb_loop+0x40/0x90
[ 130.434138][ T6470] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 130.434154][ T6470] RIP: 0033:0x7f868bb5b7ce
[ 130.434170][ T6470] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 130.434184][ T6470] RSP: 002b:00007f868ca09fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 130.434203][ T6470] RAX: ffffffffffffffda RBX: 00007f868ca0a6c0 RCX: 00007f868bb5b7ce
[ 130.434215][ T6470] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8
[ 130.434227][ T6470] RBP: 00007f868bc2fee0 R08: 0000000000000000 R09: 0000000000000000
[ 130.434238][ T6470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 130.434248][ T6470] R13: 00007f868be06128 R14: 00007f868be06090 R15: 00007ffc6fe08e48
[ 130.434267][ T6470]
[ 130.434278][ T6470] BUG: Bad page state in process syz.0.18 pfn:60bce
[ 130.510106][ T51] Bluetooth: hci0: command tx timeout
[ 130.511133][ T6470] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888060bcea80 pfn:0x60bce
[ 130.776149][ T6470] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 130.783365][ T6470] raw: 00fff00000000000 dead000000000040 ffff888022a94000 0000000000000000
[ 130.792062][ T6470] raw: ffff888060bcea80 0000000000000001 00000000ffffffff 0000000000000000
[ 130.800779][ T6470] page dumped because: page_pool leak
[ 130.806236][ T6470] page_owner tracks the page as allocated
[ 130.812171][ T6470] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6470, tgid 6467 (syz.0.18), ts 128488998997, free_ts 123172929349
[ 130.829411][ T6470] post_alloc_hook+0x231/0x280
[ 130.834228][ T6470] get_page_from_freelist+0x24dc/0x2580
[ 130.839819][ T6470] __alloc_frozen_pages_noprof+0x18d/0x380
[ 130.845662][ T6470] alloc_pages_bulk_noprof+0x558/0x700
[ 130.851251][ T6470] __page_pool_alloc_netmems_slow+0x14c/0x710
[ 130.857314][ T6470] skb_pp_cow_data+0xc21/0x1680
[ 130.862187][ T6470] do_xdp_generic+0x76b/0x12e0
[ 130.866954][ T6470] tun_get_user+0x247d/0x3dd0
[ 130.871662][ T6470] tun_chr_write_iter+0x113/0x200
[ 130.876681][ T6470] vfs_write+0x61d/0xb90
[ 130.880944][ T6470] ksys_write+0x150/0x270
[ 130.885270][ T6470] do_syscall_64+0x14d/0xf80
[ 130.889950][ T6470] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 130.895952][ T6470] page last free pid 6155 tgid 6155 stack trace:
[ 130.902293][ T6470] __free_frozen_pages+0xc2b/0xdb0
[ 130.907389][ T6470] __slab_free+0x263/0x2b0
[ 130.911905][ T6470] qlist_free_all+0x97/0x100
[ 130.916493][ T6470] kasan_quarantine_reduce+0x148/0x160
[ 130.921985][ T6470] __kasan_slab_alloc+0x22/0x80
[ 130.926850][ T6470] __kmalloc_noprof+0x316/0x760
[ 130.931725][ T6470] tomoyo_realpath_from_path+0xe3/0x5d0
[ 130.937329][ T6470] tomoyo_path_number_perm+0x246/0x630
[ 130.942931][ T6470] security_file_ioctl+0xc3/0x2a0
[ 130.948044][ T6470] __se_sys_ioctl+0x47/0x170
[ 130.952760][ T6470] do_syscall_64+0x14d/0xf80
[ 130.957358][ T6470] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 130.963296][ T6470] Modules linked in:
[ 130.967197][ T6470] CPU: 1 UID: 0 PID: 6470 Comm: syz.0.18 Tainted: G B syzkaller #0 PREEMPT(full)
[ 130.967214][ T6470] Tainted: [B]=BAD_PAGE
[ 130.967217][ T6470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 130.967223][ T6470] Call Trace:
[ 130.967228][ T6470]
[ 130.967233][ T6470] dump_stack_lvl+0xe8/0x150
[ 130.967252][ T6470] bad_page+0x17f/0x1c0
[ 130.967268][ T6470] __free_frozen_pages+0xd62/0xdb0
[ 130.967281][ T6470] bpf_xdp_frags_shrink_tail+0x4da/0x7d0
[ 130.967299][ T6470] bpf_xdp_adjust_tail+0x1d6/0x220
[ 130.967321][ T6470] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 130.967331][ T6470] bpf_prog_run_generic_xdp+0x603/0x1490
[ 130.967348][ T6470] ? lock_release+0x4b/0x3d0
[ 130.967363][ T6470] do_xdp_generic+0xac5/0x12e0
[ 130.967377][ T6470] ? __pfx_do_xdp_generic+0x10/0x10
[ 130.967392][ T6470] ? skb_header_pointer+0x8e/0x120
[ 130.967404][ T6470] ? lock_acquire+0x57/0x2e0
[ 130.967417][ T6470] ? tun_get_user+0x2354/0x3dd0
[ 130.967427][ T6470] tun_get_user+0x247d/0x3dd0
[ 130.967439][ T6470] ? pfn_valid+0xba/0x480
[ 130.967451][ T6470] ? aa_file_perm+0x50e/0x15e0
[ 130.967459][ T6470] ? __pfx_tun_get_user+0x10/0x10
[ 130.967468][ T6470] ? aa_file_perm+0x192/0x15e0
[ 130.967478][ T6470] ? css_rstat_updated+0x23a/0x530
[ 130.967489][ T6470] ? __pfx_css_rstat_updated+0x10/0x10
[ 130.967498][ T6470] ? rcu_is_watching+0x15/0xb0
[ 130.967513][ T6470] ? ref_tracker_alloc+0x35c/0x4c0
[ 130.967528][ T6470] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 130.967543][ T6470] ? count_memcg_event_mm+0x21/0x260
[ 130.967557][ T6470] ? rcu_is_watching+0x15/0xb0
[ 130.967570][ T6470] ? tun_get+0x1c/0x2f0
[ 130.967579][ T6470] ? rcu_is_watching+0x15/0xb0
[ 130.967591][ T6470] ? tun_get+0x1c/0x2f0
[ 130.967599][ T6470] ? lock_release+0x4b/0x3d0
[ 130.967611][ T6470] ? apparmor_file_permission+0x1f4/0x300
[ 130.967637][ T6470] ? tun_get+0x1c/0x2f0
[ 130.967651][ T6470] tun_chr_write_iter+0x113/0x200
[ 130.967661][ T6470] vfs_write+0x61d/0xb90
[ 130.967673][ T6470] ? __pfx_vfs_write+0x10/0x10
[ 130.967685][ T6470] ? __fget_files+0x2a/0x420
[ 130.967701][ T6470] ksys_write+0x150/0x270
[ 130.967712][ T6470] ? __pfx_ksys_write+0x10/0x10
[ 130.967723][ T6470] ? rcu_is_watching+0x15/0xb0
[ 130.967737][ T6470] do_syscall_64+0x14d/0xf80
[ 130.967749][ T6470] ? trace_irq_disable+0x3b/0x150
[ 130.967763][ T6470] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 130.967773][ T6470] ? clear_bhb_loop+0x40/0x90
[ 130.967784][ T6470] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 130.967794][ T6470] RIP: 0033:0x7f868bb5b7ce
[ 130.967804][ T6470] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 130.967812][ T6470] RSP: 002b:00007f868ca09fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 130.967824][ T6470] RAX: ffffffffffffffda RBX: 00007f868ca0a6c0 RCX: 00007f868bb5b7ce
[ 130.967831][ T6470] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8
[ 130.967838][ T6470] RBP: 00007f868bc2fee0 R08: 0000000000000000 R09: 0000000000000000
[ 130.967844][ T6470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 130.967849][ T6470] R13: 00007f868be06128 R14: 00007f868be06090 R15: 00007ffc6fe08e48
[ 130.967860][ T6470]
[ 130.967867][ T6470] BUG: Bad page state in process syz.0.18 pfn:60bcb
[ 131.293661][ T6470] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888060bcb000 pfn:0x60bcb
[ 131.304029][ T6470] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 131.311181][ T6470] raw: 00fff00000000000 dead000000000040 ffff888022a94000 0000000000000000
[ 131.319906][ T6470] raw: ffff888060bcb000 0000000000000001 00000000ffffffff 0000000000000000
[ 131.328681][ T6470] page dumped because: page_pool leak
[ 131.334226][ T6470] page_owner tracks the page as allocated
[ 131.339947][ T6470] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6470, tgid 6467 (syz.0.18), ts 128488989358, free_ts 123172961123
[ 131.357309][ T6470] post_alloc_hook+0x231/0x280
[ 131.362117][ T6470] get_page_from_freelist+0x24dc/0x2580
[ 131.367664][ T6470] __alloc_frozen_pages_noprof+0x18d/0x380
[ 131.373509][ T6470] alloc_pages_bulk_noprof+0x558/0x700
[ 131.379010][ T6470] __page_pool_alloc_netmems_slow+0x14c/0x710
[ 131.385123][ T6470] skb_pp_cow_data+0xc21/0x1680
[ 131.390174][ T6470] do_xdp_generic+0x76b/0x12e0
[ 131.394975][ T6470] tun_get_user+0x247d/0x3dd0
[ 131.399651][ T6470] tun_chr_write_iter+0x113/0x200
[ 131.404703][ T6470] vfs_write+0x61d/0xb90
[ 131.408982][ T6470] ksys_write+0x150/0x270
[ 131.413439][ T6470] do_syscall_64+0x14d/0xf80
[ 131.418150][ T6470] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 131.424081][ T6470] page last free pid 6155 tgid 6155 stack trace:
[ 131.430536][ T6470] __free_frozen_pages+0xc2b/0xdb0
[ 131.435650][ T6470] __slab_free+0x263/0x2b0
[ 131.440108][ T6470] qlist_free_all+0x97/0x100
[ 131.444723][ T6470] kasan_quarantine_reduce+0x148/0x160
[ 131.450235][ T6470] __kasan_slab_alloc+0x22/0x80
[ 131.455097][ T6470] __kmalloc_noprof+0x316/0x760
[ 131.459958][ T6470] tomoyo_realpath_from_path+0xe3/0x5d0
[ 131.465563][ T6470] tomoyo_path_number_perm+0x246/0x630
[ 131.471167][ T6470] security_file_ioctl+0xc3/0x2a0
[ 131.476299][ T6470] __se_sys_ioctl+0x47/0x170
[ 131.480928][ T6470] do_syscall_64+0x14d/0xf80
[ 131.485541][ T6470] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 131.491489][ T6470] Modules linked in:
[ 131.495397][ T6470] CPU: 1 UID: 0 PID: 6470 Comm: syz.0.18 Tainted: G B syzkaller #0 PREEMPT(full)
[ 131.495414][ T6470] Tainted: [B]=BAD_PAGE
[ 131.495418][ T6470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 131.495424][ T6470] Call Trace:
[ 131.495429][ T6470]
[ 131.495433][ T6470] dump_stack_lvl+0xe8/0x150
[ 131.495452][ T6470] bad_page+0x17f/0x1c0
[ 131.495468][ T6470] __free_frozen_pages+0xd62/0xdb0
[ 131.495480][ T6470] bpf_xdp_frags_shrink_tail+0x4da/0x7d0
[ 131.495498][ T6470] bpf_xdp_adjust_tail+0x1d6/0x220
[ 131.495510][ T6470] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 131.495519][ T6470] bpf_prog_run_generic_xdp+0x603/0x1490
[ 131.495541][ T6470] ? lock_release+0x4b/0x3d0
[ 131.495555][ T6470] do_xdp_generic+0xac5/0x12e0
[ 131.495570][ T6470] ? __pfx_do_xdp_generic+0x10/0x10
[ 131.495584][ T6470] ? skb_header_pointer+0x8e/0x120
[ 131.495596][ T6470] ? lock_acquire+0x57/0x2e0
[ 131.495609][ T6470] ? tun_get_user+0x2354/0x3dd0
[ 131.495620][ T6470] tun_get_user+0x247d/0x3dd0
[ 131.495632][ T6470] ? pfn_valid+0xba/0x480
[ 131.495643][ T6470] ? aa_file_perm+0x50e/0x15e0
[ 131.495652][ T6470] ? __pfx_tun_get_user+0x10/0x10
[ 131.495661][ T6470] ? aa_file_perm+0x192/0x15e0
[ 131.495671][ T6470] ? css_rstat_updated+0x23a/0x530
[ 131.495682][ T6470] ? __pfx_css_rstat_updated+0x10/0x10
[ 131.495691][ T6470] ? rcu_is_watching+0x15/0xb0
[ 131.495706][ T6470] ? ref_tracker_alloc+0x35c/0x4c0
[ 131.495721][ T6470] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 131.495735][ T6470] ? count_memcg_event_mm+0x21/0x260
[ 131.495750][ T6470] ? rcu_is_watching+0x15/0xb0
[ 131.495770][ T6470] ? tun_get+0x1c/0x2f0
[ 131.495784][ T6470] ? rcu_is_watching+0x15/0xb0
[ 131.495805][ T6470] ? tun_get+0x1c/0x2f0
[ 131.495820][ T6470] ? lock_release+0x4b/0x3d0
[ 131.495834][ T6470] ? apparmor_file_permission+0x1f4/0x300
[ 131.495846][ T6470] ? tun_get+0x1c/0x2f0
[ 131.495855][ T6470] tun_chr_write_iter+0x113/0x200
[ 131.495865][ T6470] vfs_write+0x61d/0xb90
[ 131.495877][ T6470] ? __pfx_vfs_write+0x10/0x10
[ 131.495889][ T6470] ? __fget_files+0x2a/0x420
[ 131.495905][ T6470] ksys_write+0x150/0x270
[ 131.495915][ T6470] ? __pfx_ksys_write+0x10/0x10
[ 131.495926][ T6470] ? rcu_is_watching+0x15/0xb0
[ 131.495940][ T6470] do_syscall_64+0x14d/0xf80
[ 131.495951][ T6470] ? trace_irq_disable+0x3b/0x150
[ 131.495966][ T6470] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 131.495975][ T6470] ? clear_bhb_loop+0x40/0x90
[ 131.495986][ T6470] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 131.495995][ T6470] RIP: 0033:0x7f868bb5b7ce
[ 131.496006][ T6470] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 131.496014][ T6470] RSP: 002b:00007f868ca09fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 131.496025][ T6470] RAX: ffffffffffffffda RBX: 00007f868ca0a6c0 RCX: 00007f868bb5b7ce
[ 131.496033][ T6470] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8
[ 131.496039][ T6470] RBP: 00007f868bc2fee0 R08: 0000000000000000 R09: 0000000000000000
[ 131.496045][ T6470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 131.496050][ T6470] R13: 00007f868be06128 R14: 00007f868be06090 R15: 00007ffc6fe08e48
[ 131.496061][ T6470]
[ 131.496068][ T6470] BUG: Bad page state in process syz.0.18 pfn:60bcc
[ 131.821342][ T6470] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888060bcc540 pfn:0x60bcc
[ 131.831417][ T6470] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 131.838525][ T6470] raw: 00fff00000000000 dead000000000040 ffff888022a94000 0000000000000000
[ 131.847134][ T6470] raw: ffff888060bcc540 0000000000000001 00000000ffffffff 0000000000000000
[ 131.855915][ T6470] page dumped because: page_pool leak
[ 131.861315][ T6470] page_owner tracks the page as allocated
[ 131.867110][ T6470] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6470, tgid 6467 (syz.0.18), ts 128488979306, free_ts 123172995097
[ 131.884151][ T6470] post_alloc_hook+0x231/0x280
[ 131.889015][ T6470] get_page_from_freelist+0x24dc/0x2580
[ 131.894645][ T6470] __alloc_frozen_pages_noprof+0x18d/0x380
[ 131.900503][ T6470] alloc_pages_bulk_noprof+0x558/0x700
[ 131.906245][ T6470] __page_pool_alloc_netmems_slow+0x14c/0x710
[ 131.912447][ T6470] skb_pp_cow_data+0xc21/0x1680
[ 131.917298][ T6470] do_xdp_generic+0x76b/0x12e0
[ 131.922296][ T6470] tun_get_user+0x247d/0x3dd0
[ 131.926992][ T6470] tun_chr_write_iter+0x113/0x200
[ 131.932068][ T6470] vfs_write+0x61d/0xb90
[ 131.936314][ T6470] ksys_write+0x150/0x270
[ 131.940842][ T6470] do_syscall_64+0x14d/0xf80
[ 131.945447][ T6470] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 131.951468][ T6470] page last free pid 6155 tgid 6155 stack trace:
[ 131.957790][ T6470] __free_frozen_pages+0xc2b/0xdb0
[ 131.962928][ T6470] __slab_free+0x263/0x2b0
[ 131.967354][ T6470] qlist_free_all+0x97/0x100
[ 131.971970][ T6470] kasan_quarantine_reduce+0x148/0x160
[ 131.977703][ T6470] __kasan_slab_alloc+0x22/0x80
[ 131.982671][ T6470] __kmalloc_noprof+0x316/0x760
[ 131.987521][ T6470] tomoyo_realpath_from_path+0xe3/0x5d0
[ 131.993181][ T6470] tomoyo_path_number_perm+0x246/0x630
[ 131.998638][ T6470] security_file_ioctl+0xc3/0x2a0
[ 132.003697][ T6470] __se_sys_ioctl+0x47/0x170
[ 132.008283][ T6470] do_syscall_64+0x14d/0xf80
[ 132.012918][ T6470] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 132.018898][ T6470] Modules linked in:
[ 132.022818][ T6470] CPU: 1 UID: 0 PID: 6470 Comm: syz.0.18 Tainted: G B syzkaller #0 PREEMPT(full)
[ 132.022842][ T6470] Tainted: [B]=BAD_PAGE
[ 132.022848][ T6470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 132.022857][ T6470] Call Trace:
[ 132.022863][ T6470]
[ 132.022869][ T6470] dump_stack_lvl+0xe8/0x150
[ 132.022893][ T6470] bad_page+0x17f/0x1c0
[ 132.022915][ T6470] __free_frozen_pages+0xd62/0xdb0
[ 132.022937][ T6470] bpf_xdp_frags_shrink_tail+0x4da/0x7d0
[ 132.022968][ T6470] bpf_xdp_adjust_tail+0x1d6/0x220
[ 132.022989][ T6470] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 132.023006][ T6470] bpf_prog_run_generic_xdp+0x603/0x1490
[ 132.023036][ T6470] ? lock_release+0x4b/0x3d0
[ 132.023061][ T6470] do_xdp_generic+0xac5/0x12e0
[ 132.023087][ T6470] ? __pfx_do_xdp_generic+0x10/0x10
[ 132.023114][ T6470] ? skb_header_pointer+0x8e/0x120
[ 132.023135][ T6470] ? lock_acquire+0x57/0x2e0
[ 132.023158][ T6470] ? tun_get_user+0x2354/0x3dd0
[ 132.023176][ T6470] tun_get_user+0x247d/0x3dd0
[ 132.023198][ T6470] ? pfn_valid+0xba/0x480
[ 132.023218][ T6470] ? aa_file_perm+0x50e/0x15e0
[ 132.023232][ T6470] ? __pfx_tun_get_user+0x10/0x10
[ 132.023246][ T6470] ? aa_file_perm+0x192/0x15e0
[ 132.023264][ T6470] ? css_rstat_updated+0x23a/0x530
[ 132.023282][ T6470] ? __pfx_css_rstat_updated+0x10/0x10
[ 132.023296][ T6470] ? rcu_is_watching+0x15/0xb0
[ 132.023318][ T6470] ? ref_tracker_alloc+0x35c/0x4c0
[ 132.023344][ T6470] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 132.023368][ T6470] ? count_memcg_event_mm+0x21/0x260
[ 132.023393][ T6470] ? rcu_is_watching+0x15/0xb0
[ 132.023415][ T6470] ? tun_get+0x1c/0x2f0
[ 132.023431][ T6470] ? rcu_is_watching+0x15/0xb0
[ 132.023452][ T6470] ? tun_get+0x1c/0x2f0
[ 132.023468][ T6470] ? lock_release+0x4b/0x3d0
[ 132.023503][ T6470] ? apparmor_file_permission+0x1f4/0x300
[ 132.023523][ T6470] ? tun_get+0x1c/0x2f0
[ 132.023540][ T6470] tun_chr_write_iter+0x113/0x200
[ 132.023558][ T6470] vfs_write+0x61d/0xb90
[ 132.023578][ T6470] ? __pfx_vfs_write+0x10/0x10
[ 132.023597][ T6470] ? __fget_files+0x2a/0x420
[ 132.023626][ T6470] ksys_write+0x150/0x270
[ 132.023646][ T6470] ? __pfx_ksys_write+0x10/0x10
[ 132.023666][ T6470] ? rcu_is_watching+0x15/0xb0
[ 132.023692][ T6470] do_syscall_64+0x14d/0xf80
[ 132.023712][ T6470] ? trace_irq_disable+0x3b/0x150
[ 132.023736][ T6470] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 132.023750][ T6470] ? clear_bhb_loop+0x40/0x90
[ 132.023769][ T6470] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 132.023787][ T6470] RIP: 0033:0x7f868bb5b7ce
[ 132.023802][ T6470] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 132.023816][ T6470] RSP: 002b:00007f868ca09fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 132.023835][ T6470] RAX: ffffffffffffffda RBX: 00007f868ca0a6c0 RCX: 00007f868bb5b7ce
[ 132.023847][ T6470] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8
[ 132.023858][ T6470] RBP: 00007f868bc2fee0 R08: 0000000000000000 R09: 0000000000000000
[ 132.023869][ T6470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 132.023879][ T6470] R13: 00007f868be06128 R14: 00007f868be06090 R15: 00007ffc6fe08e48
[ 132.023897][ T6470]
[ 132.023907][ T6470] BUG: Bad page state in process syz.0.18 pfn:60bca
[ 132.349970][ T6470] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888060bca000 pfn:0x60bca
[ 132.360098][ T6470] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 132.367298][ T6470] raw: 00fff00000000000 dead000000000040 ffff888022a94000 0000000000000000
[ 132.375913][ T6470] raw: ffff888060bca000 0000000000000001 00000000ffffffff 0000000000000000
[ 132.384632][ T6470] page dumped because: page_pool leak
[ 132.390209][ T6470] page_owner tracks the page as allocated
[ 132.396030][ T6470] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6470, tgid 6467 (syz.0.18), ts 128488969474, free_ts 123173030281
[ 132.412919][ T6470] post_alloc_hook+0x231/0x280
[ 132.417684][ T6470] get_page_from_freelist+0x24dc/0x2580
[ 132.423257][ T6470] __alloc_frozen_pages_noprof+0x18d/0x380
[ 132.429061][ T6470] alloc_pages_bulk_noprof+0x558/0x700
[ 132.434598][ T6470] __page_pool_alloc_netmems_slow+0x14c/0x710
[ 132.440734][ T6470] skb_pp_cow_data+0xc21/0x1680
[ 132.445945][ T6470] do_xdp_generic+0x76b/0x12e0
[ 132.450814][ T6470] tun_get_user+0x247d/0x3dd0
[ 132.455498][ T6470] tun_chr_write_iter+0x113/0x200
[ 132.460636][ T6470] vfs_write+0x61d/0xb90
[ 132.464879][ T6470] ksys_write+0x150/0x270
[ 132.469190][ T6470] do_syscall_64+0x14d/0xf80
[ 132.473818][ T6470] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 132.479708][ T6470] page last free pid 6155 tgid 6155 stack trace:
[ 132.486138][ T6470] __free_frozen_pages+0xc2b/0xdb0
[ 132.491310][ T6470] __slab_free+0x263/0x2b0
[ 132.495744][ T6470] qlist_free_all+0x97/0x100
[ 132.500375][ T6470] kasan_quarantine_reduce+0x148/0x160
[ 132.505846][ T6470] __kasan_slab_alloc+0x22/0x80
[ 132.510761][ T6470] __kmalloc_noprof+0x316/0x760
[ 132.515717][ T6470] tomoyo_realpath_from_path+0xe3/0x5d0
[ 132.521388][ T6470] tomoyo_path_number_perm+0x246/0x630
[ 132.526850][ T6470] security_file_ioctl+0xc3/0x2a0
[ 132.531905][ T6470] __se_sys_ioctl+0x47/0x170
[ 132.536503][ T6470] do_syscall_64+0x14d/0xf80
[ 132.541118][ T6470] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 132.547007][ T6470] Modules linked in:
[ 132.550921][ T6470] CPU: 1 UID: 0 PID: 6470 Comm: syz.0.18 Tainted: G B syzkaller #0 PREEMPT(full)
[ 132.550944][ T6470] Tainted: [B]=BAD_PAGE
[ 132.550950][ T6470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 132.550959][ T6470] Call Trace:
[ 132.550965][ T6470]
[ 132.550972][ T6470] dump_stack_lvl+0xe8/0x150
[ 132.550996][ T6470] bad_page+0x17f/0x1c0
[ 132.551021][ T6470] __free_frozen_pages+0xd62/0xdb0
[ 132.551043][ T6470] bpf_xdp_frags_shrink_tail+0x4da/0x7d0
[ 132.551074][ T6470] bpf_xdp_adjust_tail+0x1d6/0x220
[ 132.551095][ T6470] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 132.551111][ T6470] bpf_prog_run_generic_xdp+0x603/0x1490
[ 132.551142][ T6470] ? lock_release+0x4b/0x3d0
[ 132.551166][ T6470] do_xdp_generic+0xac5/0x12e0
[ 132.551192][ T6470] ? __pfx_do_xdp_generic+0x10/0x10
[ 132.551217][ T6470] ? skb_header_pointer+0x8e/0x120
[ 132.551238][ T6470] ? lock_acquire+0x57/0x2e0
[ 132.551261][ T6470] ? tun_get_user+0x2354/0x3dd0
[ 132.551279][ T6470] tun_get_user+0x247d/0x3dd0
[ 132.551301][ T6470] ? pfn_valid+0xba/0x480
[ 132.551321][ T6470] ? aa_file_perm+0x50e/0x15e0
[ 132.551337][ T6470] ? __pfx_tun_get_user+0x10/0x10
[ 132.551351][ T6470] ? aa_file_perm+0x192/0x15e0
[ 132.551367][ T6470] ? css_rstat_updated+0x23a/0x530
[ 132.551386][ T6470] ? __pfx_css_rstat_updated+0x10/0x10
[ 132.551402][ T6470] ? rcu_is_watching+0x15/0xb0
[ 132.551426][ T6470] ? ref_tracker_alloc+0x35c/0x4c0
[ 132.551462][ T6470] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 132.551487][ T6470] ? count_memcg_event_mm+0x21/0x260
[ 132.551511][ T6470] ? rcu_is_watching+0x15/0xb0
[ 132.551534][ T6470] ? tun_get+0x1c/0x2f0
[ 132.551549][ T6470] ? rcu_is_watching+0x15/0xb0
[ 132.551570][ T6470] ? tun_get+0x1c/0x2f0
[ 132.551584][ T6470] ? lock_release+0x4b/0x3d0
[ 132.551604][ T6470] ? apparmor_file_permission+0x1f4/0x300
[ 132.551625][ T6470] ? tun_get+0x1c/0x2f0
[ 132.551642][ T6470] tun_chr_write_iter+0x113/0x200
[ 132.551661][ T6470] vfs_write+0x61d/0xb90
[ 132.551681][ T6470] ? __pfx_vfs_write+0x10/0x10
[ 132.551700][ T6470] ? __fget_files+0x2a/0x420
[ 132.551723][ T6470] ksys_write+0x150/0x270
[ 132.551742][ T6470] ? __pfx_ksys_write+0x10/0x10
[ 132.551761][ T6470] ? rcu_is_watching+0x15/0xb0
[ 132.551785][ T6470] do_syscall_64+0x14d/0xf80
[ 132.551804][ T6470] ? trace_irq_disable+0x3b/0x150
[ 132.551829][ T6470] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 132.551846][ T6470] ? clear_bhb_loop+0x40/0x90
[ 132.551866][ T6470] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 132.551883][ T6470] RIP: 0033:0x7f868bb5b7ce
[ 132.551899][ T6470] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 132.551914][ T6470] RSP: 002b:00007f868ca09fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 132.551932][ T6470] RAX: ffffffffffffffda RBX: 00007f868ca0a6c0 RCX: 00007f868bb5b7ce
[ 132.551945][ T6470] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8
[ 132.551955][ T6470] RBP: 00007f868bc2fee0 R08: 0000000000000000 R09: 0000000000000000
[ 132.551966][ T6470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 132.551977][ T6470] R13: 00007f868be06128 R14: 00007f868be06090 R15: 00007ffc6fe08e48
[ 132.551998][ T6470]
[ 132.552009][ T6470] BUG: Bad page state in process syz.0.18 pfn:60bc8
[ 132.590159][ T51] Bluetooth: hci0: command tx timeout
[ 132.591960][ T6470] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888060bc8000 pfn:0x60bc8
[ 132.892707][ T6470] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 132.900125][ T6470] raw: 00fff00000000000 dead000000000040 ffff888022a94000 0000000000000000
[ 132.908717][ T6470] raw: ffff888060bc8000 0000000000000001 00000000ffffffff 0000000000000000
[ 132.917423][ T6470] page dumped because: page_pool leak
[ 132.922883][ T6470] page_owner tracks the page as allocated
[ 132.928575][ T6470] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6470, tgid 6467 (syz.0.18), ts 128488959358, free_ts 123173063604
[ 132.945436][ T6470] post_alloc_hook+0x231/0x280
[ 132.950235][ T6470] get_page_from_freelist+0x24dc/0x2580
[ 132.955768][ T6470] __alloc_frozen_pages_noprof+0x18d/0x380
[ 132.961773][ T6470] alloc_pages_bulk_noprof+0x558/0x700
[ 132.967243][ T6470] __page_pool_alloc_netmems_slow+0x14c/0x710
[ 132.973367][ T6470] skb_pp_cow_data+0xc21/0x1680
[ 132.978245][ T6470] do_xdp_generic+0x76b/0x12e0
[ 132.983134][ T6470] tun_get_user+0x247d/0x3dd0
[ 132.987836][ T6470] tun_chr_write_iter+0x113/0x200
[ 132.992890][ T6470] vfs_write+0x61d/0xb90
[ 132.997219][ T6470] ksys_write+0x150/0x270
[ 133.001579][ T6470] do_syscall_64+0x14d/0xf80
[ 133.006170][ T6470] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 133.012175][ T6470] page last free pid 6155 tgid 6155 stack trace:
[ 133.018598][ T6470] __free_frozen_pages+0xc2b/0xdb0
[ 133.023749][ T6470] __slab_free+0x263/0x2b0
[ 133.028254][ T6470] qlist_free_all+0x97/0x100
[ 133.032918][ T6470] kasan_quarantine_reduce+0x148/0x160
[ 133.038401][ T6470] __kasan_slab_alloc+0x22/0x80
[ 133.043305][ T6470] __kmalloc_noprof+0x316/0x760
[ 133.048161][ T6470] tomoyo_realpath_from_path+0xe3/0x5d0
[ 133.053781][ T6470] tomoyo_path_number_perm+0x246/0x630
[ 133.059350][ T6470] security_file_ioctl+0xc3/0x2a0
[ 133.064412][ T6470] __se_sys_ioctl+0x47/0x170
[ 133.069178][ T6470] do_syscall_64+0x14d/0xf80
[ 133.073834][ T6470] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 133.079749][ T6470] Modules linked in:
[ 133.083701][ T6470] CPU: 1 UID: 0 PID: 6470 Comm: syz.0.18 Tainted: G B syzkaller #0 PREEMPT(full)
[ 133.083726][ T6470] Tainted: [B]=BAD_PAGE
[ 133.083732][ T6470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 133.083740][ T6470] Call Trace:
[ 133.083747][ T6470]
[ 133.083753][ T6470] dump_stack_lvl+0xe8/0x150
[ 133.083775][ T6470] bad_page+0x17f/0x1c0
[ 133.083798][ T6470] __free_frozen_pages+0xd62/0xdb0
[ 133.083818][ T6470] bpf_xdp_frags_shrink_tail+0x4da/0x7d0
[ 133.083848][ T6470] bpf_xdp_adjust_tail+0x1d6/0x220
[ 133.083868][ T6470] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 133.083884][ T6470] bpf_prog_run_generic_xdp+0x603/0x1490
[ 133.083915][ T6470] ? lock_release+0x4b/0x3d0
[ 133.083945][ T6470] do_xdp_generic+0xac5/0x12e0
[ 133.083971][ T6470] ? __pfx_do_xdp_generic+0x10/0x10
[ 133.083996][ T6470] ? skb_header_pointer+0x8e/0x120
[ 133.084017][ T6470] ? lock_acquire+0x57/0x2e0
[ 133.084041][ T6470] ? tun_get_user+0x2354/0x3dd0
[ 133.084058][ T6470] tun_get_user+0x247d/0x3dd0
[ 133.084080][ T6470] ? pfn_valid+0xba/0x480
[ 133.084099][ T6470] ? aa_file_perm+0x50e/0x15e0
[ 133.084115][ T6470] ? __pfx_tun_get_user+0x10/0x10
[ 133.084131][ T6470] ? aa_file_perm+0x192/0x15e0
[ 133.084148][ T6470] ? css_rstat_updated+0x23a/0x530
[ 133.084166][ T6470] ? __pfx_css_rstat_updated+0x10/0x10
[ 133.084180][ T6470] ? rcu_is_watching+0x15/0xb0
[ 133.084202][ T6470] ? ref_tracker_alloc+0x35c/0x4c0