Warning: Permanently added '10.128.0.19' (ED25519) to the list of known hosts.
2026/04/10 20:33:11 parsed 1 programs
[ 78.849764][ T5821] cgroup: Unknown subsys name 'net'
[ 78.981370][ T5821] cgroup: Unknown subsys name 'cpuset'
[ 78.989777][ T5821] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 80.380739][ T5821] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 82.840742][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 83.439395][ T5853] chnl_net:caif_netlink_parms(): no params data found
[ 83.525382][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[ 83.533203][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[ 83.540648][ T5853] bridge_slave_0: entered allmulticast mode
[ 83.548882][ T5853] bridge_slave_0: entered promiscuous mode
[ 83.558514][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[ 83.565764][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[ 83.573060][ T5853] bridge_slave_1: entered allmulticast mode
[ 83.580291][ T5853] bridge_slave_1: entered promiscuous mode
[ 83.605429][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 83.621499][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 83.651702][ T5853] team0: Port device team_slave_0 added
[ 83.660221][ T5853] team0: Port device team_slave_1 added
[ 83.681322][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 83.688309][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 83.714650][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 83.727495][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 83.734603][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 83.760794][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 83.800160][ T5853] hsr_slave_0: entered promiscuous mode
[ 83.806648][ T5853] hsr_slave_1: entered promiscuous mode
[ 83.929473][ T5853] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 83.942631][ T5853] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 83.953455][ T5853] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 83.963008][ T5853] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 83.992415][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[ 83.999735][ T5853] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 84.007515][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[ 84.014698][ T5853] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 84.063138][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[ 84.080251][ T37] bridge0: port 1(bridge_slave_0) entered disabled state
[ 84.088962][ T37] bridge0: port 2(bridge_slave_1) entered disabled state
[ 84.104801][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[ 84.117667][ T352] bridge0: port 1(bridge_slave_0) entered blocking state
[ 84.124924][ T352] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 84.137863][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 84.145145][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 84.294113][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 84.329560][ T5853] veth0_vlan: entered promiscuous mode
[ 84.342561][ T5853] veth1_vlan: entered promiscuous mode
[ 84.370508][ T5853] veth0_macvtap: entered promiscuous mode
[ 84.380283][ T5853] veth1_macvtap: entered promiscuous mode
[ 84.396071][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 84.412391][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 84.425646][ T352] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 84.435459][ T352] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 84.448564][ T352] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 84.457692][ T352] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 84.582324][ T37] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 84.662495][ T37] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 84.740162][ T37] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 84.825062][ T37] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 85.701750][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 85.717336][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 85.744101][ T352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 85.752372][ T352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 86.074150][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 86.082628][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 86.092712][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 86.101244][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 86.109722][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
2026/04/10 20:33:21 executed programs: 0
[ 87.268176][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 87.277027][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 87.286756][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 87.295391][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 87.303826][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 87.496256][ T37] bridge_slave_1: left allmulticast mode
[ 87.503322][ T37] bridge_slave_1: left promiscuous mode
[ 87.510783][ T37] bridge0: port 2(bridge_slave_1) entered disabled state
[ 87.521617][ T37] bridge_slave_0: left allmulticast mode
[ 87.527411][ T37] bridge_slave_0: left promiscuous mode
[ 87.534400][ T37] bridge0: port 1(bridge_slave_0) entered disabled state
[ 87.694446][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 87.706502][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 87.716661][ T37] bond0 (unregistering): Released all slaves
[ 87.736335][ T5933] chnl_net:caif_netlink_parms(): no params data found
[ 87.799653][ T37] hsr_slave_0: left promiscuous mode
[ 87.805561][ T37] hsr_slave_1: left promiscuous mode
[ 87.811682][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 87.819127][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 87.828558][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 87.836074][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 87.848468][ T37] veth1_macvtap: left promiscuous mode
[ 87.854173][ T37] veth0_macvtap: left promiscuous mode
[ 87.859852][ T37] veth1_vlan: left promiscuous mode
[ 87.865151][ T37] veth0_vlan: left promiscuous mode
[ 88.018575][ T37] team0 (unregistering): Port device team_slave_1 removed
[ 88.038500][ T37] team0 (unregistering): Port device team_slave_0 removed
[ 88.147824][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state
[ 88.155222][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state
[ 88.162882][ T5933] bridge_slave_0: entered allmulticast mode
[ 88.172116][ T5933] bridge_slave_0: entered promiscuous mode
[ 88.180750][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state
[ 88.188405][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state
[ 88.195703][ T5933] bridge_slave_1: entered allmulticast mode
[ 88.204349][ T5933] bridge_slave_1: entered promiscuous mode
[ 88.244866][ T5933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 88.257053][ T5933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 88.290370][ T5933] team0: Port device team_slave_0 added
[ 88.299126][ T5933] team0: Port device team_slave_1 added
[ 88.329134][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 88.336410][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 88.363483][ T5933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 88.377378][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 88.385460][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 88.417049][ T5933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 88.499030][ T5933] hsr_slave_0: entered promiscuous mode
[ 88.505703][ T5933] hsr_slave_1: entered promiscuous mode
[ 89.339104][ T5143] Bluetooth: hci0: command tx timeout
[ 89.618483][ T5933] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 89.643244][ T5933] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 89.664875][ T5933] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 89.678735][ T5933] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 89.885537][ T5933] 8021q: adding VLAN 0 to HW filter on device bond0
[ 89.915682][ T5933] 8021q: adding VLAN 0 to HW filter on device team0
[ 89.932027][ T352] bridge0: port 1(bridge_slave_0) entered blocking state
[ 89.939195][ T352] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 89.957935][ T352] bridge0: port 2(bridge_slave_1) entered blocking state
[ 89.965113][ T352] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 90.215015][ T5933] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 90.293264][ T5933] veth0_vlan: entered promiscuous mode
[ 90.310372][ T5933] veth1_vlan: entered promiscuous mode
[ 90.354734][ T5933] veth0_macvtap: entered promiscuous mode
[ 90.366567][ T5933] veth1_macvtap: entered promiscuous mode
[ 90.386943][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 90.403651][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 90.420894][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 90.431085][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 90.452674][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 90.461532][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 90.541614][ T352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 90.559431][ T352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 90.593230][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 90.602059][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 90.687622][ T6003] BUG: Bad page state in process syz.0.17 pfn:28a5d
[ 90.694525][ T6003] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888028a5d000 pfn:0x28a5d
[ 90.704680][ T6003] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 90.711859][ T6003] raw: 00fff00000000000 dead000000000040 ffff88801afb0000 0000000000000000
[ 90.720512][ T6003] raw: ffff888028a5d000 3fffffffffffffff 00000000ffffffff 0000000000000000
[ 90.729137][ T6003] page dumped because: page_pool leak
[ 90.734519][ T6003] page_owner tracks the page as allocated
[ 90.740666][ T6003] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6003, tgid 6003 (syz.0.17), ts 90687448058, free_ts 90658697752
[ 90.757583][ T6003] post_alloc_hook+0x231/0x280
[ 90.762437][ T6003] get_page_from_freelist+0x24dc/0x2580
[ 90.768142][ T6003] __alloc_frozen_pages_noprof+0x18d/0x380
[ 90.773979][ T6003] alloc_pages_bulk_noprof+0x558/0x700
[ 90.779697][ T6003] __page_pool_alloc_netmems_slow+0x14c/0x710
[ 90.785795][ T6003] page_pool_alloc_frag_netmem+0x421/0x9b0
[ 90.791698][ T6003] skb_pp_cow_data+0xd11/0x1bb0
[ 90.796571][ T6003] do_xdp_generic+0x76b/0x12e0
[ 90.801413][ T6003] __netif_receive_skb_core+0x10e5/0x31a0
[ 90.807157][ T6003] netif_receive_skb+0x1fe/0xc50
[ 90.812183][ T6003] tun_rx_batched+0x1de/0x790
[ 90.816878][ T6003] tun_get_user+0x2aeb/0x3ed0
[ 90.821992][ T6003] tun_chr_write_iter+0x113/0x200
[ 90.827101][ T6003] vfs_write+0x61d/0xb90
[ 90.831419][ T6003] ksys_write+0x150/0x270
[ 90.835776][ T6003] do_syscall_64+0x14d/0xf80
[ 90.840449][ T6003] page last free pid 15 tgid 15 stack trace:
[ 90.846441][ T6003] __free_frozen_pages+0xc2b/0xdb0
[ 90.851644][ T6003] tlb_remove_table_rcu+0x85/0x100
[ 90.856775][ T6003] rcu_core+0x7cd/0x1070
[ 90.861112][ T6003] handle_softirqs+0x22a/0x870
[ 90.865895][ T6003] run_ksoftirqd+0x36/0x60
[ 90.870390][ T6003] smpboot_thread_fn+0x541/0xa50
[ 90.875344][ T6003] kthread+0x388/0x470
[ 90.879478][ T6003] ret_from_fork+0x51e/0xb90
[ 90.884083][ T6003] ret_from_fork_asm+0x1a/0x30
[ 90.888925][ T6003] Modules linked in:
[ 90.892897][ T6003] CPU: 0 UID: 0 PID: 6003 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 90.892919][ T6003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 90.892935][ T6003] Call Trace:
[ 90.892941][ T6003]
[ 90.892948][ T6003] dump_stack_lvl+0xe8/0x150
[ 90.892976][ T6003] bad_page+0x17f/0x1c0
[ 90.893001][ T6003] __free_frozen_pages+0xd62/0xdb0
[ 90.893029][ T6003] bpf_xdp_frags_shrink_tail+0x4da/0x7d0
[ 90.893060][ T6003] bpf_xdp_adjust_tail+0x1d6/0x220
[ 90.893087][ T6003] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 90.893108][ T6003] bpf_prog_run_generic_xdp+0x603/0x1490
[ 90.893151][ T6003] do_xdp_generic+0xac5/0x12e0
[ 90.893180][ T6003] ? __pfx_do_xdp_generic+0x10/0x10
[ 90.893240][ T6003] __netif_receive_skb_core+0x10e5/0x31a0
[ 90.893267][ T6003] ? __pfx___up_read+0x10/0x10
[ 90.893285][ T6003] ? do_user_addr_fault+0xbad/0x1340
[ 90.893309][ T6003] ? __lock_acquire+0x6b5/0x2cf0
[ 90.893334][ T6003] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 90.893354][ T6003] ? lockdep_hardirqs_on+0x7a/0x110
[ 90.893370][ T6003] ? irqentry_exit+0x59e/0x620
[ 90.893384][ T6003] ? trace_irq_disable+0x3b/0x150
[ 90.893408][ T6003] ? lock_acquire+0xf0/0x2e0
[ 90.893431][ T6003] ? rep_movs_alternative+0x4a/0x90
[ 90.893450][ T6003] ? netif_receive_skb+0x102/0xc50
[ 90.893466][ T6003] ? netif_receive_skb+0x102/0xc50
[ 90.893485][ T6003] netif_receive_skb+0x1fe/0xc50
[ 90.893506][ T6003] ? __pfx_netif_receive_skb+0x10/0x10
[ 90.893521][ T6003] ? __lock_acquire+0x6b5/0x2cf0
[ 90.893546][ T6003] ? tun_rx_batched+0x185/0x790
[ 90.893568][ T6003] tun_rx_batched+0x1de/0x790
[ 90.893593][ T6003] ? __pfx_tun_rx_batched+0x10/0x10
[ 90.893624][ T6003] ? tun_get_user+0x23c7/0x3ed0
[ 90.893644][ T6003] ? __local_bh_enable_ip+0xd0/0x130
[ 90.893668][ T6003] ? tun_get_user+0x26dc/0x3ed0
[ 90.893687][ T6003] tun_get_user+0x2aeb/0x3ed0
[ 90.893724][ T6003] ? aa_file_perm+0x50e/0x15e0
[ 90.893743][ T6003] ? __pfx_tun_get_user+0x10/0x10
[ 90.893760][ T6003] ? aa_file_perm+0x192/0x15e0
[ 90.893782][ T6003] ? __lock_acquire+0x6b5/0x2cf0
[ 90.893813][ T6003] ? ref_tracker_alloc+0x35c/0x4c0
[ 90.893835][ T6003] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 90.893858][ T6003] ? tun_get+0x1c/0x2f0
[ 90.893884][ T6003] ? tun_get+0x1c/0x2f0
[ 90.893903][ T6003] ? tun_get+0x1c/0x2f0
[ 90.893926][ T6003] tun_chr_write_iter+0x113/0x200
[ 90.893948][ T6003] vfs_write+0x61d/0xb90
[ 90.893976][ T6003] ? __pfx_vfs_write+0x10/0x10
[ 90.893996][ T6003] ? __pfx_do_futex+0x10/0x10
[ 90.894032][ T6003] ksys_write+0x150/0x270
[ 90.894053][ T6003] ? __pfx_ksys_write+0x10/0x10
[ 90.894080][ T6003] do_syscall_64+0x14d/0xf80
[ 90.894095][ T6003] ? trace_irq_disable+0x3b/0x150
[ 90.894109][ T6003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 90.894126][ T6003] ? clear_bhb_loop+0x40/0x90
[ 90.894147][ T6003] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 90.894164][ T6003] RIP: 0033:0x7fdc4815d04e
[ 90.894181][ T6003] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 90.894194][ T6003] RSP: 002b:00007ffdc62272f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 90.894223][ T6003] RAX: ffffffffffffffda RBX: 0000555557107500 RCX: 00007fdc4815d04e
[ 90.894235][ T6003] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 00000000000000c8
[ 90.894246][ T6003] RBP: 00007fdc48232c91 R08: 0000000000000000 R09: 0000000000000000
[ 90.894256][ T6003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 90.894266][ T6003] R13: 00007fdc48415fac R14: 00007fdc48415fa0 R15: 00007fdc48415fa0
[ 90.894295][ T6003]
[ 90.894302][ T6003] Disabling lock debugging due to kernel taint
[ 91.258996][ T6003] BUG: Bad page state in process syz.0.17 pfn:22fef
[ 91.265681][ T6003] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x22fef
[ 91.275832][ T6003] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 91.283065][ T6003] raw: 00fff00000000000 dead000000000040 ffff88801afb0000 0000000000000000
[ 91.291675][ T6003] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000
[ 91.300276][ T6003] page dumped because: page_pool leak
[ 91.305635][ T6003] page_owner tracks the page as allocated
[ 91.311377][ T6003] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6003, tgid 6003 (syz.0.17), ts 90687430090, free_ts 90658719596
[ 91.328106][ T6003] post_alloc_hook+0x231/0x280
[ 91.332870][ T6003] get_page_from_freelist+0x24dc/0x2580
[ 91.338554][ T6003] __alloc_frozen_pages_noprof+0x18d/0x380
[ 91.344385][ T6003] alloc_pages_bulk_noprof+0x558/0x700
[ 91.349881][ T6003] __page_pool_alloc_netmems_slow+0x14c/0x710
[ 91.356042][ T6003] skb_pp_cow_data+0xcea/0x1bb0
[ 91.360916][ T6003] do_xdp_generic+0x76b/0x12e0
[ 91.365766][ T6003] __netif_receive_skb_core+0x10e5/0x31a0
[ 91.371523][ T6003] netif_receive_skb+0x1fe/0xc50
[ 91.376464][ T6003] tun_rx_batched+0x1de/0x790
[ 91.381188][ T6003] tun_get_user+0x2aeb/0x3ed0
[ 91.386004][ T6003] tun_chr_write_iter+0x113/0x200
[ 91.391145][ T6003] vfs_write+0x61d/0xb90
[ 91.395404][ T6003] ksys_write+0x150/0x270
[ 91.399756][ T6003] do_syscall_64+0x14d/0xf80
[ 91.404369][ T6003] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 91.410302][ T6003] page last free pid 15 tgid 15 stack trace:
[ 91.416316][ T6003] __free_frozen_pages+0xc2b/0xdb0
[ 91.421490][ T6003] tlb_remove_table_rcu+0x85/0x100
[ 91.426622][ T6003] rcu_core+0x7cd/0x1070
[ 91.430895][ T6003] handle_softirqs+0x22a/0x870
[ 91.435666][ T6003] run_ksoftirqd+0x36/0x60
[ 91.440286][ T6003] smpboot_thread_fn+0x541/0xa50
[ 91.445412][ T6003] kthread+0x388/0x470
[ 91.449515][ T6003] ret_from_fork+0x51e/0xb90
[ 91.454123][ T6003] ret_from_fork_asm+0x1a/0x30
[ 91.459042][ T6003] Modules linked in:
[ 91.462951][ T6003] CPU: 0 UID: 0 PID: 6003 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 91.462968][ T6003] Tainted: [B]=BAD_PAGE
[ 91.462971][ T6003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 91.462977][ T6003] Call Trace:
[ 91.462983][ T6003]
[ 91.462988][ T6003] dump_stack_lvl+0xe8/0x150
[ 91.463006][ T6003] bad_page+0x17f/0x1c0
[ 91.463021][ T6003] __free_frozen_pages+0xd62/0xdb0
[ 91.463033][ T6003] bpf_xdp_frags_shrink_tail+0x4da/0x7d0
[ 91.463048][ T6003] bpf_xdp_adjust_tail+0x1d6/0x220
[ 91.463062][ T6003] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 91.463071][ T6003] bpf_prog_run_generic_xdp+0x603/0x1490
[ 91.463087][ T6003] do_xdp_generic+0xac5/0x12e0
[ 91.463098][ T6003] ? __pfx_do_xdp_generic+0x10/0x10
[ 91.463113][ T6003] __netif_receive_skb_core+0x10e5/0x31a0
[ 91.463133][ T6003] ? __pfx___up_read+0x10/0x10
[ 91.463143][ T6003] ? do_user_addr_fault+0xbad/0x1340
[ 91.463157][ T6003] ? __lock_acquire+0x6b5/0x2cf0
[ 91.463169][ T6003] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 91.463180][ T6003] ? lockdep_hardirqs_on+0x7a/0x110
[ 91.463190][ T6003] ? irqentry_exit+0x59e/0x620
[ 91.463198][ T6003] ? trace_irq_disable+0x3b/0x150
[ 91.463209][ T6003] ? lock_acquire+0xf0/0x2e0
[ 91.463225][ T6003] ? rep_movs_alternative+0x4a/0x90
[ 91.463236][ T6003] ? netif_receive_skb+0x102/0xc50
[ 91.463246][ T6003] ? netif_receive_skb+0x102/0xc50
[ 91.463256][ T6003] netif_receive_skb+0x1fe/0xc50
[ 91.463266][ T6003] ? __pfx_netif_receive_skb+0x10/0x10
[ 91.463275][ T6003] ? __lock_acquire+0x6b5/0x2cf0
[ 91.463288][ T6003] ? tun_rx_batched+0x185/0x790
[ 91.463300][ T6003] tun_rx_batched+0x1de/0x790
[ 91.463312][ T6003] ? __pfx_tun_rx_batched+0x10/0x10
[ 91.463325][ T6003] ? tun_get_user+0x23c7/0x3ed0
[ 91.463336][ T6003] ? __local_bh_enable_ip+0xd0/0x130
[ 91.463349][ T6003] ? tun_get_user+0x26dc/0x3ed0
[ 91.463359][ T6003] tun_get_user+0x2aeb/0x3ed0
[ 91.463373][ T6003] ? aa_file_perm+0x50e/0x15e0
[ 91.463384][ T6003] ? __pfx_tun_get_user+0x10/0x10
[ 91.463394][ T6003] ? aa_file_perm+0x192/0x15e0
[ 91.463404][ T6003] ? __lock_acquire+0x6b5/0x2cf0
[ 91.463417][ T6003] ? ref_tracker_alloc+0x35c/0x4c0
[ 91.463427][ T6003] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 91.463437][ T6003] ? tun_get+0x1c/0x2f0
[ 91.463449][ T6003] ? tun_get+0x1c/0x2f0
[ 91.463459][ T6003] ? tun_get+0x1c/0x2f0
[ 91.463469][ T6003] tun_chr_write_iter+0x113/0x200
[ 91.463481][ T6003] vfs_write+0x61d/0xb90
[ 91.463493][ T6003] ? __pfx_vfs_write+0x10/0x10
[ 91.463503][ T6003] ? __pfx_do_futex+0x10/0x10
[ 91.463517][ T6003] ksys_write+0x150/0x270
[ 91.463528][ T6003] ? __pfx_ksys_write+0x10/0x10
[ 91.463540][ T6003] do_syscall_64+0x14d/0xf80
[ 91.463549][ T6003] ? trace_irq_disable+0x3b/0x150
[ 91.463557][ T6003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 91.463566][ T6003] ? clear_bhb_loop+0x40/0x90
[ 91.463576][ T6003] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 91.463585][ T6003] RIP: 0033:0x7fdc4815d04e
[ 91.463594][ T6003] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 91.463602][ T6003] RSP: 002b:00007ffdc62272f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 91.463613][ T6003] RAX: ffffffffffffffda RBX: 0000555557107500 RCX: 00007fdc4815d04e
[ 91.463620][ T6003] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 00000000000000c8
[ 91.463626][ T6003] RBP: 00007fdc48232c91 R08: 0000000000000000 R09: 0000000000000000
[ 91.463632][ T6003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 91.463637][ T6003] R13: 00007fdc48415fac R14: 00007fdc48415fa0 R15: 00007fdc48415fa0
[ 91.463647][ T6003]
[ 91.463654][ T6003] BUG: Bad page state in process syz.0.17 pfn:7f885
[ 91.833403][ T6003] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807f885bb0 pfn:0x7f885
[ 91.843493][ T6003] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 91.850636][ T6003] raw: 00fff00000000000 dead000000000040 ffff88801afb0000 0000000000000000
[ 91.859262][ T6003] raw: ffff88807f885bb0 0000000000000001 00000000ffffffff 0000000000000000
[ 91.867854][ T6003] page dumped because: page_pool leak
[ 91.873272][ T6003] page_owner tracks the page as allocated
[ 91.879008][ T6003] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6003, tgid 6003 (syz.0.17), ts 90687413051, free_ts 90658731424
[ 91.895899][ T6003] post_alloc_hook+0x231/0x280
[ 91.900697][ T6003] get_page_from_freelist+0x24dc/0x2580
[ 91.906326][ T6003] __alloc_frozen_pages_noprof+0x18d/0x380
[ 91.912162][ T6003] alloc_pages_bulk_noprof+0x558/0x700
[ 91.917668][ T6003] __page_pool_alloc_netmems_slow+0x14c/0x710
[ 91.924107][ T6003] skb_pp_cow_data+0xcea/0x1bb0
[ 91.929021][ T6003] do_xdp_generic+0x76b/0x12e0
[ 91.933788][ T6003] __netif_receive_skb_core+0x10e5/0x31a0
[ 91.939532][ T6003] netif_receive_skb+0x1fe/0xc50
[ 91.944475][ T6003] tun_rx_batched+0x1de/0x790
[ 91.949244][ T6003] tun_get_user+0x2aeb/0x3ed0
[ 91.953986][ T6003] tun_chr_write_iter+0x113/0x200
[ 91.959045][ T6003] vfs_write+0x61d/0xb90
[ 91.963305][ T6003] ksys_write+0x150/0x270
[ 91.967626][ T6003] do_syscall_64+0x14d/0xf80
[ 91.972256][ T6003] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 91.978191][ T6003] page last free pid 15 tgid 15 stack trace:
[ 91.984188][ T6003] __free_frozen_pages+0xc2b/0xdb0
[ 91.989397][ T6003] tlb_remove_table_rcu+0x85/0x100
[ 91.994526][ T6003] rcu_core+0x7cd/0x1070
[ 91.998978][ T6003] handle_softirqs+0x22a/0x870
[ 92.003761][ T6003] run_ksoftirqd+0x36/0x60
[ 92.008213][ T6003] smpboot_thread_fn+0x541/0xa50
[ 92.013155][ T6003] kthread+0x388/0x470
[ 92.017209][ T6003] ret_from_fork+0x51e/0xb90
[ 92.021822][ T6003] ret_from_fork_asm+0x1a/0x30
[ 92.026611][ T6003] Modules linked in:
[ 92.030696][ T6003] CPU: 0 UID: 0 PID: 6003 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 92.030721][ T6003] Tainted: [B]=BAD_PAGE
[ 92.030727][ T6003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 92.030737][ T6003] Call Trace:
[ 92.030746][ T6003]
[ 92.030754][ T6003] dump_stack_lvl+0xe8/0x150
[ 92.030779][ T6003] bad_page+0x17f/0x1c0
[ 92.030799][ T6003] __free_frozen_pages+0xd62/0xdb0
[ 92.030820][ T6003] bpf_xdp_frags_shrink_tail+0x4da/0x7d0
[ 92.030841][ T6003] bpf_xdp_adjust_tail+0x1d6/0x220
[ 92.030862][ T6003] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 92.030876][ T6003] bpf_prog_run_generic_xdp+0x603/0x1490
[ 92.030899][ T6003] do_xdp_generic+0xac5/0x12e0
[ 92.030918][ T6003] ? __pfx_do_xdp_generic+0x10/0x10
[ 92.030945][ T6003] __netif_receive_skb_core+0x10e5/0x31a0
[ 92.030966][ T6003] ? __pfx___up_read+0x10/0x10
[ 92.030984][ T6003] ? do_user_addr_fault+0xbad/0x1340
[ 92.031005][ T6003] ? __lock_acquire+0x6b5/0x2cf0
[ 92.031026][ T6003] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 92.031045][ T6003] ? lockdep_hardirqs_on+0x7a/0x110
[ 92.031060][ T6003] ? irqentry_exit+0x59e/0x620
[ 92.031075][ T6003] ? trace_irq_disable+0x3b/0x150
[ 92.031095][ T6003] ? lock_acquire+0xf0/0x2e0
[ 92.031125][ T6003] ? rep_movs_alternative+0x4a/0x90
[ 92.031145][ T6003] ? netif_receive_skb+0x102/0xc50
[ 92.031162][ T6003] ? netif_receive_skb+0x102/0xc50
[ 92.031180][ T6003] netif_receive_skb+0x1fe/0xc50
[ 92.031200][ T6003] ? __pfx_netif_receive_skb+0x10/0x10
[ 92.031217][ T6003] ? __lock_acquire+0x6b5/0x2cf0
[ 92.031239][ T6003] ? tun_rx_batched+0x185/0x790
[ 92.031259][ T6003] tun_rx_batched+0x1de/0x790
[ 92.031281][ T6003] ? __pfx_tun_rx_batched+0x10/0x10
[ 92.031304][ T6003] ? tun_get_user+0x23c7/0x3ed0
[ 92.031323][ T6003] ? __local_bh_enable_ip+0xd0/0x130
[ 92.031345][ T6003] ? tun_get_user+0x26dc/0x3ed0
[ 92.031362][ T6003] tun_get_user+0x2aeb/0x3ed0
[ 92.031386][ T6003] ? aa_file_perm+0x50e/0x15e0
[ 92.031404][ T6003] ? __pfx_tun_get_user+0x10/0x10
[ 92.031421][ T6003] ? aa_file_perm+0x192/0x15e0
[ 92.031440][ T6003] ? __lock_acquire+0x6b5/0x2cf0
[ 92.031463][ T6003] ? ref_tracker_alloc+0x35c/0x4c0
[ 92.031481][ T6003] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 92.031500][ T6003] ? tun_get+0x1c/0x2f0
[ 92.031519][ T6003] ? tun_get+0x1c/0x2f0
[ 92.031537][ T6003] ? tun_get+0x1c/0x2f0
[ 92.031556][ T6003] tun_chr_write_iter+0x113/0x200
[ 92.031576][ T6003] vfs_write+0x61d/0xb90
[ 92.031597][ T6003] ? __pfx_vfs_write+0x10/0x10
[ 92.031614][ T6003] ? __pfx_do_futex+0x10/0x10
[ 92.031639][ T6003] ksys_write+0x150/0x270
[ 92.031657][ T6003] ? __pfx_ksys_write+0x10/0x10
[ 92.031679][ T6003] do_syscall_64+0x14d/0xf80
[ 92.031694][ T6003] ? trace_irq_disable+0x3b/0x150
[ 92.031708][ T6003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 92.031725][ T6003] ? clear_bhb_loop+0x40/0x90
[ 92.031743][ T6003] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 92.031759][ T6003] RIP: 0033:0x7fdc4815d04e
[ 92.031774][ T6003] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 92.031788][ T6003] RSP: 002b:00007ffdc62272f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 92.031812][ T6003] RAX: ffffffffffffffda RBX: 0000555557107500 RCX: 00007fdc4815d04e
[ 92.031828][ T6003] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 00000000000000c8
[ 92.031838][ T6003] RBP: 00007fdc48232c91 R08: 0000000000000000 R09: 0000000000000000
[ 92.031848][ T6003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 92.031857][ T6003] R13: 00007fdc48415fac R14: 00007fdc48415fa0 R15: 00007fdc48415fa0
[ 92.031875][ T6003]
[ 92.031885][ T6003] BUG: Bad page state in process syz.0.17 pfn:33d4a
[ 92.400780][ T6003] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888033d4a330 pfn:0x33d4a
[ 92.410859][ T6003] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 92.418085][ T6003] raw: 00fff00000000000 dead000000000040 ffff88801afb0000 0000000000000000
[ 92.426868][ T6003] raw: ffff888033d4a330 0000000000000001 00000000ffffffff 0000000000000000
[ 92.435624][ T6003] page dumped because: page_pool leak
[ 92.441208][ T6003] page_owner tracks the page as allocated
[ 92.447430][ T6003] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6003, tgid 6003 (syz.0.17), ts 90687395870, free_ts 90658753356
[ 92.464133][ T6003] post_alloc_hook+0x231/0x280
[ 92.468940][ T6003] get_page_from_freelist+0x24dc/0x2580
[ 92.474570][ T6003] __alloc_frozen_pages_noprof+0x18d/0x380
[ 92.480573][ T6003] alloc_pages_bulk_noprof+0x558/0x700
[ 92.486495][ T6003] __page_pool_alloc_netmems_slow+0x14c/0x710
[ 92.492604][ T6003] skb_pp_cow_data+0xcea/0x1bb0
[ 92.497648][ T6003] do_xdp_generic+0x76b/0x12e0
[ 92.502471][ T6003] __netif_receive_skb_core+0x10e5/0x31a0
[ 92.508255][ T6003] netif_receive_skb+0x1fe/0xc50
[ 92.513191][ T6003] tun_rx_batched+0x1de/0x790
[ 92.517852][ T6003] tun_get_user+0x2aeb/0x3ed0
[ 92.522554][ T6003] tun_chr_write_iter+0x113/0x200
[ 92.527591][ T6003] vfs_write+0x61d/0xb90
[ 92.531863][ T6003] ksys_write+0x150/0x270
[ 92.536194][ T6003] do_syscall_64+0x14d/0xf80
[ 92.540801][ T6003] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 92.546698][ T6003] page last free pid 15 tgid 15 stack trace:
[ 92.552688][ T6003] __free_frozen_pages+0xc2b/0xdb0
[ 92.557802][ T6003] tlb_remove_table_rcu+0x85/0x100
[ 92.562956][ T6003] rcu_core+0x7cd/0x1070
[ 92.567204][ T6003] handle_softirqs+0x22a/0x870
[ 92.571998][ T6003] run_ksoftirqd+0x36/0x60
[ 92.576428][ T6003] smpboot_thread_fn+0x541/0xa50
[ 92.581438][ T6003] kthread+0x388/0x470
[ 92.585503][ T6003] ret_from_fork+0x51e/0xb90
[ 92.590122][ T6003] ret_from_fork_asm+0x1a/0x30
[ 92.594982][ T6003] Modules linked in:
[ 92.598912][ T6003] CPU: 0 UID: 0 PID: 6003 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 92.598935][ T6003] Tainted: [B]=BAD_PAGE
[ 92.598941][ T6003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 92.598950][ T6003] Call Trace:
[ 92.598955][ T6003]
[ 92.598960][ T6003] dump_stack_lvl+0xe8/0x150
[ 92.598983][ T6003] bad_page+0x17f/0x1c0
[ 92.599005][ T6003] __free_frozen_pages+0xd62/0xdb0
[ 92.599024][ T6003] bpf_xdp_frags_shrink_tail+0x4da/0x7d0
[ 92.599046][ T6003] bpf_xdp_adjust_tail+0x1d6/0x220
[ 92.599070][ T6003] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 92.599085][ T6003] bpf_prog_run_generic_xdp+0x603/0x1490
[ 92.599121][ T6003] do_xdp_generic+0xac5/0x12e0
[ 92.599143][ T6003] ? __pfx_do_xdp_generic+0x10/0x10
[ 92.599171][ T6003] __netif_receive_skb_core+0x10e5/0x31a0
[ 92.599192][ T6003] ? __pfx___up_read+0x10/0x10
[ 92.599208][ T6003] ? do_user_addr_fault+0xbad/0x1340
[ 92.599230][ T6003] ? __lock_acquire+0x6b5/0x2cf0
[ 92.599253][ T6003] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 92.599272][ T6003] ? lockdep_hardirqs_on+0x7a/0x110
[ 92.599288][ T6003] ? irqentry_exit+0x59e/0x620
[ 92.599303][ T6003] ? trace_irq_disable+0x3b/0x150
[ 92.599323][ T6003] ? lock_acquire+0xf0/0x2e0
[ 92.599344][ T6003] ? rep_movs_alternative+0x4a/0x90
[ 92.599362][ T6003] ? netif_receive_skb+0x102/0xc50
[ 92.599379][ T6003] ? netif_receive_skb+0x102/0xc50
[ 92.599396][ T6003] netif_receive_skb+0x1fe/0xc50
[ 92.599416][ T6003] ? __pfx_netif_receive_skb+0x10/0x10
[ 92.599431][ T6003] ? __lock_acquire+0x6b5/0x2cf0
[ 92.599450][ T6003] ? tun_rx_batched+0x185/0x790
[ 92.599468][ T6003] tun_rx_batched+0x1de/0x790
[ 92.599489][ T6003] ? __pfx_tun_rx_batched+0x10/0x10
[ 92.599511][ T6003] ? tun_get_user+0x23c7/0x3ed0
[ 92.599530][ T6003] ? __local_bh_enable_ip+0xd0/0x130
[ 92.599552][ T6003] ? tun_get_user+0x26dc/0x3ed0
[ 92.599570][ T6003] tun_get_user+0x2aeb/0x3ed0
[ 92.599593][ T6003] ? aa_file_perm+0x50e/0x15e0
[ 92.599610][ T6003] ? __pfx_tun_get_user+0x10/0x10
[ 92.599628][ T6003] ? aa_file_perm+0x192/0x15e0
[ 92.599647][ T6003] ? __lock_acquire+0x6b5/0x2cf0
[ 92.599670][ T6003] ? ref_tracker_alloc+0x35c/0x4c0
[ 92.599688][ T6003] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 92.599706][ T6003] ? tun_get+0x1c/0x2f0
[ 92.599725][ T6003] ? tun_get+0x1c/0x2f0
[ 92.599742][ T6003] ? tun_get+0x1c/0x2f0
[ 92.599761][ T6003] tun_chr_write_iter+0x113/0x200
[ 92.599781][ T6003] vfs_write+0x61d/0xb90
[ 92.599801][ T6003] ? __pfx_vfs_write+0x10/0x10
[ 92.599819][ T6003] ? __pfx_do_futex+0x10/0x10
[ 92.599844][ T6003] ksys_write+0x150/0x270
[ 92.599863][ T6003] ? __pfx_ksys_write+0x10/0x10
[ 92.599884][ T6003] do_syscall_64+0x14d/0xf80
[ 92.599898][ T6003] ? trace_irq_disable+0x3b/0x150
[ 92.599913][ T6003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 92.599929][ T6003] ? clear_bhb_loop+0x40/0x90
[ 92.599947][ T6003] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 92.599962][ T6003] RIP: 0033:0x7fdc4815d04e
[ 92.599977][ T6003] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 92.599991][ T6003] RSP: 002b:00007ffdc62272f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 92.600009][ T6003] RAX: ffffffffffffffda RBX: 0000555557107500 RCX: 00007fdc4815d04e
[ 92.600022][ T6003] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 00000000000000c8
[ 92.600033][ T6003] RBP: 00007fdc48232c91 R08: 0000000000000000 R09: 0000000000000000
[ 92.600044][ T6003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 92.600054][ T6003] R13: 00007fdc48415fac R14: 00007fdc48415fa0 R15: 00007fdc48415fa0
[ 92.600073][ T6003]
[ 92.600082][ T6003] BUG: Bad page state in process syz.0.17 pfn:7701e
[ 92.971330][ T6003] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807701e000 pfn:0x7701e
[ 92.981416][ T6003] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 92.989719][ T6003] raw: 00fff00000000000 dead000000000040 ffff88801afb0000 0000000000000000
[ 92.998423][ T6003] raw: ffff88807701e000 0000000000000001 00000000ffffffff 0000000000000000
[ 93.007011][ T6003] page dumped because: page_pool leak
[ 93.012426][ T6003] page_owner tracks the page as allocated
[ 93.018248][ T6003] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6003, tgid 6003 (syz.0.17), ts 90687379295, free_ts 90658773565
[ 93.035176][ T6003] post_alloc_hook+0x231/0x280
[ 93.039994][ T6003] get_page_from_freelist+0x24dc/0x2580
[ 93.045643][ T6003] __alloc_frozen_pages_noprof+0x18d/0x380
[ 93.051509][ T6003] alloc_pages_bulk_noprof+0x558/0x700
[ 93.057007][ T6003] __page_pool_alloc_netmems_slow+0x14c/0x710
[ 93.063165][ T6003] skb_pp_cow_data+0xcea/0x1bb0
[ 93.068066][ T6003] do_xdp_generic+0x76b/0x12e0
[ 93.073033][ T6003] __netif_receive_skb_core+0x10e5/0x31a0
[ 93.078786][ T6003] netif_receive_skb+0x1fe/0xc50
[ 93.084103][ T6003] tun_rx_batched+0x1de/0x790
[ 93.089287][ T6003] tun_get_user+0x2aeb/0x3ed0
[ 93.093980][ T6003] tun_chr_write_iter+0x113/0x200
[ 93.099068][ T6003] vfs_write+0x61d/0xb90
[ 93.103343][ T6003] ksys_write+0x150/0x270
[ 93.107667][ T6003] do_syscall_64+0x14d/0xf80
[ 93.112325][ T6003] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 93.118257][ T6003] page last free pid 15 tgid 15 stack trace:
[ 93.124241][ T6003] __free_frozen_pages+0xc2b/0xdb0
[ 93.129417][ T6003] tlb_remove_table_rcu+0x85/0x100
[ 93.134645][ T6003] rcu_core+0x7cd/0x1070
[ 93.138969][ T6003] handle_softirqs+0x22a/0x870
[ 93.143794][ T6003] run_ksoftirqd+0x36/0x60
[ 93.148256][ T6003] smpboot_thread_fn+0x541/0xa50
[ 93.153215][ T6003] kthread+0x388/0x470
[ 93.157300][ T6003] ret_from_fork+0x51e/0xb90
[ 93.161919][ T6003] ret_from_fork_asm+0x1a/0x30
[ 93.166730][ T6003] Modules linked in:
[ 93.170748][ T6003] CPU: 0 UID: 0 PID: 6003 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 93.170772][ T6003] Tainted: [B]=BAD_PAGE
[ 93.170777][ T6003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 93.170785][ T6003] Call Trace:
[ 93.170790][ T6003]
[ 93.170796][ T6003] dump_stack_lvl+0xe8/0x150
[ 93.170819][ T6003] bad_page+0x17f/0x1c0
[ 93.170841][ T6003] __free_frozen_pages+0xd62/0xdb0
[ 93.170861][ T6003] bpf_xdp_frags_shrink_tail+0x4da/0x7d0
[ 93.170882][ T6003] bpf_xdp_adjust_tail+0x1d6/0x220
[ 93.170906][ T6003] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 93.170922][ T6003] bpf_prog_run_generic_xdp+0x603/0x1490
[ 93.170951][ T6003] do_xdp_generic+0xac5/0x12e0
[ 93.170972][ T6003] ? __pfx_do_xdp_generic+0x10/0x10
[ 93.170999][ T6003] __netif_receive_skb_core+0x10e5/0x31a0
[ 93.171020][ T6003] ? __pfx___up_read+0x10/0x10
[ 93.171037][ T6003] ? do_user_addr_fault+0xbad/0x1340
[ 93.171060][ T6003] ? __lock_acquire+0x6b5/0x2cf0
[ 93.171090][ T6003] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 93.171109][ T6003] ? lockdep_hardirqs_on+0x7a/0x110
[ 93.171125][ T6003] ? irqentry_exit+0x59e/0x620
[ 93.171140][ T6003] ? trace_irq_disable+0x3b/0x150
[ 93.171160][ T6003] ? lock_acquire+0xf0/0x2e0
[ 93.171181][ T6003] ? rep_movs_alternative+0x4a/0x90
[ 93.171200][ T6003] ? netif_receive_skb+0x102/0xc50
[ 93.171217][ T6003] ? netif_receive_skb+0x102/0xc50
[ 93.171232][ T6003] netif_receive_skb+0x1fe/0xc50
[ 93.171249][ T6003] ? __pfx_netif_receive_skb+0x10/0x10
[ 93.171264][ T6003] ? __lock_acquire+0x6b5/0x2cf0
[ 93.171283][ T6003] ? tun_rx_batched+0x185/0x790
[ 93.171303][ T6003] tun_rx_batched+0x1de/0x790
[ 93.171324][ T6003] ? __pfx_tun_rx_batched+0x10/0x10
[ 93.171346][ T6003] ? tun_get_user+0x23c7/0x3ed0
[ 93.171365][ T6003] ? __local_bh_enable_ip+0xd0/0x130
[ 93.171387][ T6003] ? tun_get_user+0x26dc/0x3ed0
[ 93.171405][ T6003] tun_get_user+0x2aeb/0x3ed0
[ 93.171430][ T6003] ? aa_file_perm+0x50e/0x15e0
[ 93.171447][ T6003] ? __pfx_tun_get_user+0x10/0x10
[ 93.171465][ T6003] ? aa_file_perm+0x192/0x15e0
[ 93.171484][ T6003] ? __lock_acquire+0x6b5/0x2cf0
[ 93.171506][ T6003] ? ref_tracker_alloc+0x35c/0x4c0
[ 93.171525][ T6003] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 93.171543][ T6003] ? tun_get+0x1c/0x2f0
[ 93.171562][ T6003] ? tun_get+0x1c/0x2f0
[ 93.171579][ T6003] ? tun_get+0x1c/0x2f0
[ 93.171598][ T6003] tun_chr_write_iter+0x113/0x200
[ 93.171618][ T6003] vfs_write+0x61d/0xb90
[ 93.171639][ T6003] ? __pfx_vfs_write+0x10/0x10
[ 93.171657][ T6003] ? __pfx_do_futex+0x10/0x10
[ 93.171682][ T6003] ksys_write+0x150/0x270
[ 93.171701][ T6003] ? __pfx_ksys_write+0x10/0x10
[ 93.171722][ T6003] do_syscall_64+0x14d/0xf80
[ 93.171738][ T6003] ? trace_irq_disable+0x3b/0x150
[ 93.171753][ T6003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 93.171770][ T6003] ? clear_bhb_loop+0x40/0x90
[ 93.171789][ T6003] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 93.171806][ T6003] RIP: 0033:0x7fdc4815d04e
[ 93.171822][ T6003] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 93.171835][ T6003] RSP: 002b:00007ffdc62272f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 93.171853][ T6003] RAX: ffffffffffffffda RBX: 0000555557107500 RCX: 00007fdc4815d04e
[ 93.171865][ T6003] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 00000000000000c8
[ 93.171875][ T6003] RBP: 00007fdc48232c91 R08: 0000000000000000 R09: 0000000000000000
[ 93.171885][ T6003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 93.171895][ T6003] R13: 00007fdc48415fac R14: 00007fdc48415fa0 R15: 00007fdc48415fa0
[ 93.171913][ T6003]
[ 93.171922][ T6003] BUG: Bad page state in process syz.0.17 pfn:33fb2
[ 93.542295][ T6003] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888033fb23c0 pfn:0x33fb2
[ 93.552397][ T6003] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 93.559622][ T6003] raw: 00fff00000000000 dead000000000040 ffff88801afb0000 0000000000000000
[ 93.568421][ T6003] raw: ffff888033fb23c0 0000000000000001 00000000ffffffff 0000000000000000
[ 93.577013][ T6003] page dumped because: page_pool leak
[ 93.582509][ T6003] page_owner tracks the page as allocated
[ 93.588243][ T6003] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6003, tgid 6003 (syz.0.17), ts 90687362515, free_ts 90658794261
[ 93.605739][ T6003] post_alloc_hook+0x231/0x280
[ 93.610560][ T6003] get_page_from_freelist+0x24dc/0x2580
[ 93.616287][ T6003] __alloc_frozen_pages_noprof+0x18d/0x380
[ 93.622118][ T6003] alloc_pages_bulk_noprof+0x558/0x700
[ 93.627583][ T6003] __page_pool_alloc_netmems_slow+0x14c/0x710
[ 93.633747][ T6003] skb_pp_cow_data+0xcea/0x1bb0
[ 93.638661][ T6003] do_xdp_generic+0x76b/0x12e0
[ 93.643445][ T6003] __netif_receive_skb_core+0x10e5/0x31a0
[ 93.649379][ T6003] netif_receive_skb+0x1fe/0xc50
[ 93.654320][ T6003] tun_rx_batched+0x1de/0x790
[ 93.659035][ T6003] tun_get_user+0x2aeb/0x3ed0
[ 93.663725][ T6003] tun_chr_write_iter+0x113/0x200
[ 93.668791][ T6003] vfs_write+0x61d/0xb90
[ 93.673055][ T6003] ksys_write+0x150/0x270
[ 93.677374][ T6003] do_syscall_64+0x14d/0xf80
[ 93.682097][ T6003] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 93.688275][ T6003] page last free pid 15 tgid 15 stack trace:
[ 93.694260][ T6003] __free_frozen_pages+0xc2b/0xdb0
[ 93.699431][ T6003] tlb_remove_table_rcu+0x85/0x100
[ 93.704638][ T6003] rcu_core+0x7cd/0x1070
[ 93.708936][ T6003] handle_softirqs+0x22a/0x870
[ 93.713714][ T6003] run_ksoftirqd+0x36/0x60
[ 93.718195][ T6003] smpboot_thread_fn+0x541/0xa50
[ 93.723147][ T6003] kthread+0x388/0x470
[ 93.727202][ T6003] ret_from_fork+0x51e/0xb90
[ 93.731820][ T6003] ret_from_fork_asm+0x1a/0x30
[ 93.736618][ T6003] Modules linked in:
[ 93.740587][ T6003] CPU: 0 UID: 0 PID: 6003 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 93.740610][ T6003] Tainted: [B]=BAD_PAGE
[ 93.740614][ T6003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 93.740622][ T6003] Call Trace:
[ 93.740628][ T6003]
[ 93.740633][ T6003] dump_stack_lvl+0xe8/0x150
[ 93.740656][ T6003] bad_page+0x17f/0x1c0
[ 93.740678][ T6003] __free_frozen_pages+0xd62/0xdb0
[ 93.740698][ T6003] bpf_xdp_frags_shrink_tail+0x4da/0x7d0
[ 93.740719][ T6003] bpf_xdp_adjust_tail+0x1d6/0x220
[ 93.740743][ T6003] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 93.740759][ T6003] bpf_prog_run_generic_xdp+0x603/0x1490
[ 93.740787][ T6003] do_xdp_generic+0xac5/0x12e0
[ 93.740808][ T6003] ? __pfx_do_xdp_generic+0x10/0x10
[ 93.740837][ T6003] __netif_receive_skb_core+0x10e5/0x31a0
[ 93.740857][ T6003] ? __pfx___up_read+0x10/0x10
[ 93.740873][ T6003] ? do_user_addr_fault+0xbad/0x1340
[ 93.740897][ T6003] ? __lock_acquire+0x6b5/0x2cf0
[ 93.740919][ T6003] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 93.740937][ T6003] ? lockdep_hardirqs_on+0x7a/0x110
[ 93.740954][ T6003] ? irqentry_exit+0x59e/0x620
[ 93.740968][ T6003] ? trace_irq_disable+0x3b/0x150
[ 93.740997][ T6003] ? lock_acquire+0xf0/0x2e0
[ 93.741018][ T6003] ? rep_movs_alternative+0x4a/0x90
[ 93.741037][ T6003] ? netif_receive_skb+0x102/0xc50
[ 93.741054][ T6003] ? netif_receive_skb+0x102/0xc50
[ 93.741071][ T6003] netif_receive_skb+0x1fe/0xc50
[ 93.741090][ T6003] ? __pfx_netif_receive_skb+0x10/0x10
[ 93.741107][ T6003] ? __lock_acquire+0x6b5/0x2cf0
[ 93.741128][ T6003] ? tun_rx_batched+0x185/0x790
[ 93.741149][ T6003] tun_rx_batched+0x1de/0x790
[ 93.741170][ T6003] ? __pfx_tun_rx_batched+0x10/0x10
[ 93.741193][ T6003] ? tun_get_user+0x23c7/0x3ed0
[ 93.741211][ T6003] ? __local_bh_enable_ip+0xd0/0x130
[ 93.741232][ T6003] ? tun_get_user+0x26dc/0x3ed0
[ 93.741250][ T6003] tun_get_user+0x2aeb/0x3ed0
[ 93.741275][ T6003] ? aa_file_perm+0x50e/0x15e0
[ 93.741292][ T6003] ? __pfx_tun_get_user+0x10/0x10
[ 93.741310][ T6003] ? aa_file_perm+0x192/0x15e0
[ 93.741328][ T6003] ? __lock_acquire+0x6b5/0x2cf0
[ 93.741351][ T6003] ? ref_tracker_alloc+0x35c/0x4c0
[ 93.741377][ T6003] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 93.741396][ T6003] ? tun_get+0x1c/0x2f0
[ 93.741415][ T6003] ? tun_get+0x1c/0x2f0
[ 93.741433][ T6003] ? tun_get+0x1c/0x2f0
[ 93.741452][ T6003] tun_chr_write_iter+0x113/0x200
[ 93.741471][ T6003] vfs_write+0x61d/0xb90
[ 93.741492][ T6003] ? __pfx_vfs_write+0x10/0x10
[ 93.741510][ T6003] ? __pfx_do_futex+0x10/0x10
[ 93.741534][ T6003] ksys_write+0x150/0x270
[ 93.741552][ T6003] ? __pfx_ksys_write+0x10/0x10
[ 93.741573][ T6003] do_syscall_64+0x14d/0xf80
[ 93.741596][ T6003] ? trace_irq_disable+0x3b/0x150
[ 93.741610][ T6003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 93.741625][ T6003] ? clear_bhb_loop+0x40/0x90
[ 93.741643][ T6003] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 93.741659][ T6003] RIP: 0033:0x7fdc4815d04e
[ 93.741674][ T6003] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 93.741688][ T6003] RSP: 002b:00007ffdc62272f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 93.741706][ T6003] RAX: ffffffffffffffda RBX: 0000555557107500 RCX: 00007fdc4815d04e
[ 93.741718][ T6003] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 00000000000000c8
[ 93.741728][ T6003] RBP: 00007fdc48232c91 R08: 0000000000000000 R09: 0000000000000000
[ 93.741739][ T6003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 93.741748][ T6003] R13: 00007fdc48415fac R14: 00007fdc48415fa0 R15: 00007fdc48415fa0
[ 93.741766][ T6003]
[ 93.741775][ T6003] BUG: Bad page state in process syz.0.17 pfn:33ca7
[ 94.112113][ T6003] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x33ca7
[ 94.122249][ T6003] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 94.129491][ T6003] raw: 00fff00000000000 dead000000000040 ffff88801afb0000 0000000000000000
[ 94.138107][ T6003] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000
[ 94.146926][ T6003] page dumped because: page_pool leak
[ 94.152343][ T6003] page_owner tracks the page as allocated
[ 94.158078][ T6003] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6003, tgid 6003 (syz.0.17), ts 90687345540, free_ts 90658816033
[ 94.175241][ T6003] post_alloc_hook+0x231/0x280
[ 94.180053][ T6003] get_page_from_freelist+0x24dc/0x2580
[ 94.185623][ T6003] __alloc_frozen_pages_noprof+0x18d/0x380
[ 94.191585][ T6003] alloc_pages_bulk_noprof+0x558/0x700
[ 94.197061][ T6003] __page_pool_alloc_netmems_slow+0x14c/0x710
[ 94.203290][ T6003] skb_pp_cow_data+0xcea/0x1bb0
[ 94.208193][ T6003] do_xdp_generic+0x76b/0x12e0
[ 94.212961][ T6003] __netif_receive_skb_core+0x10e5/0x31a0
[ 94.218721][ T6003] netif_receive_skb+0x1fe/0xc50
[ 94.223672][ T6003] tun_rx_batched+0x1de/0x790
[ 94.228409][ T6003] tun_get_user+0x2aeb/0x3ed0
[ 94.233351][ T6003] tun_chr_write_iter+0x113/0x200
[ 94.238417][ T6003] vfs_write+0x61d/0xb90
[ 94.242673][ T6003] ksys_write+0x150/0x270
[ 94.246990][ T6003] do_syscall_64+0x14d/0xf80
[ 94.251612][ T6003] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.257531][ T6003] page last free pid 15 tgid 15 stack trace:
[ 94.263627][ T6003] __free_frozen_pages+0xc2b/0xdb0
[ 94.268832][ T6003] tlb_remove_table_rcu+0x85/0x100
[ 94.273976][ T6003] rcu_core+0x7cd/0x1070
[ 94.278357][ T6003] handle_softirqs+0x22a/0x870
[ 94.283125][ T6003] run_ksoftirqd+0x36/0x60
[ 94.287554][ T6003] smpboot_thread_fn+0x541/0xa50
[ 94.292576][ T6003] kthread+0x388/0x470
[ 94.296772][ T6003] ret_from_fork+0x51e/0xb90
[ 94.301508][ T6003] ret_from_fork_asm+0x1a/0x30
[ 94.306296][ T6003] Modules linked in:
[ 94.310229][ T6003] CPU: 0 UID: 0 PID: 6003 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 94.310254][ T6003] Tainted: [B]=BAD_PAGE
[ 94.310260][ T6003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 94.310270][ T6003] Call Trace:
[ 94.310279][ T6003]
[ 94.310288][ T6003] dump_stack_lvl+0xe8/0x150
[ 94.310313][ T6003] bad_page+0x17f/0x1c0
[ 94.310333][ T6003] __free_frozen_pages+0xd62/0xdb0
[ 94.310353][ T6003] bpf_xdp_frags_shrink_tail+0x4da/0x7d0
[ 94.310373][ T6003] bpf_xdp_adjust_tail+0x1d6/0x220
[ 94.310396][ T6003] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 94.310412][ T6003] bpf_prog_run_generic_xdp+0x603/0x1490
[ 94.310439][ T6003] do_xdp_generic+0xac5/0x12e0
[ 94.310460][ T6003] ? __pfx_do_xdp_generic+0x10/0x10
[ 94.310487][ T6003] __netif_receive_skb_core+0x10e5/0x31a0
[ 94.310507][ T6003] ? __pfx___up_read+0x10/0x10
[ 94.310524][ T6003] ? do_user_addr_fault+0xbad/0x1340
[ 94.310548][ T6003] ? __lock_acquire+0x6b5/0x2cf0
[ 94.310568][ T6003] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 94.310588][ T6003] ? lockdep_hardirqs_on+0x7a/0x110
[ 94.310604][ T6003] ? irqentry_exit+0x59e/0x620
[ 94.310620][ T6003] ? trace_irq_disable+0x3b/0x150
[ 94.310639][ T6003] ? lock_acquire+0xf0/0x2e0
[ 94.310660][ T6003] ? rep_movs_alternative+0x4a/0x90
[ 94.310686][ T6003] ? netif_receive_skb+0x102/0xc50
[ 94.310702][ T6003] ? netif_receive_skb+0x102/0xc50
[ 94.310720][ T6003] netif_receive_skb+0x1fe/0xc50
[ 94.310739][ T6003] ? __pfx_netif_receive_skb+0x10/0x10
[ 94.310756][ T6003] ? __lock_acquire+0x6b5/0x2cf0
[ 94.310776][ T6003] ? tun_rx_batched+0x185/0x790
[ 94.310794][ T6003] tun_rx_batched+0x1de/0x790
[ 94.310812][ T6003] ? __pfx_tun_rx_batched+0x10/0x10
[ 94.310833][ T6003] ? tun_get_user+0x23c7/0x3ed0
[ 94.310851][ T6003] ? __local_bh_enable_ip+0xd0/0x130
[ 94.310882][ T6003] ? tun_get_user+0x26dc/0x3ed0
[ 94.310900][ T6003] tun_get_user+0x2aeb/0x3ed0
[ 94.310925][ T6003] ? aa_file_perm+0x50e/0x15e0
[ 94.310943][ T6003] ? __pfx_tun_get_user+0x10/0x10
[ 94.310962][ T6003] ? aa_file_perm+0x192/0x15e0
[ 94.310980][ T6003] ? __lock_acquire+0x6b5/0x2cf0
[ 94.311003][ T6003] ? ref_tracker_alloc+0x35c/0x4c0
[ 94.311021][ T6003] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 94.311039][ T6003] ? tun_get+0x1c/0x2f0
[ 94.311058][ T6003] ? tun_get+0x1c/0x2f0
[ 94.311076][ T6003] ? tun_get+0x1c/0x2f0
[ 94.311094][ T6003] tun_chr_write_iter+0x113/0x200
[ 94.311114][ T6003] vfs_write+0x61d/0xb90
[ 94.311135][ T6003] ? __pfx_vfs_write+0x10/0x10
[ 94.311153][ T6003] ? __pfx_do_futex+0x10/0x10
[ 94.311178][ T6003] ksys_write+0x150/0x270
[ 94.311196][ T6003] ? __pfx_ksys_write+0x10/0x10
[ 94.311217][ T6003] do_syscall_64+0x14d/0xf80
[ 94.311233][ T6003] ? trace_irq_disable+0x3b/0x150
[ 94.311247][ T6003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.311263][ T6003] ? clear_bhb_loop+0x40/0x90
[ 94.311281][ T6003] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.311297][ T6003] RIP: 0033:0x7fdc4815d04e
[ 94.311312][ T6003] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 94.311326][ T6003] RSP: 002b:00007ffdc62272f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 94.311344][ T6003] RAX: ffffffffffffffda RBX: 0000555557107500 RCX: 00007fdc4815d04e
[ 94.311356][ T6003] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 00000000000000c8
[ 94.311367][ T6003] RBP: 00007fdc48232c91 R08: 0000000000000000 R09: 0000000000000000
[ 94.311377][ T6003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 94.311387][ T6003] R13: 00007fdc48415fac R14: 00007fdc48415fa0 R15: 00007fdc48415fa0
[ 94.311405][ T6003]
[ 94.311415][ T6003] BUG: Bad page state in process syz.0.17 pfn:767b7
[ 94.681667][ T6003] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880767b7000 pfn:0x767b7
[ 94.691869][ T6003] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 94.699046][ T6003] raw: 00fff00000000000 dead000000000040 ffff88801afb0000 0000000000000000
[ 94.707706][ T6003] raw: ffff8880767b7000 0000000000000001 00000000ffffffff 0000000000000000
[ 94.716429][ T6003] page dumped because: page_pool leak
[ 94.721843][ T6003] page_owner tracks the page as allocated
[ 94.727642][ T6003] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6003, tgid 6003 (syz.0.17), ts 90687327503, free_ts 90658827671
[ 94.744452][ T6003] post_alloc_hook+0x231/0x280
[ 94.749352][ T6003] get_page_from_freelist+0x24dc/0x2580
[ 94.754905][ T6003] __alloc_frozen_pages_noprof+0x18d/0x380
[ 94.760938][ T6003] alloc_pages_bulk_noprof+0x558/0x700
[ 94.766509][ T6003] __page_pool_alloc_netmems_slow+0x14c/0x710
[ 94.772713][ T6003] skb_pp_cow_data+0xcea/0x1bb0
[ 94.777569][ T6003] do_xdp_generic+0x76b/0x12e0
[ 94.782350][ T6003] __netif_receive_skb_core+0x10e5/0x31a0
[ 94.788107][ T6003] netif_receive_skb+0x1fe/0xc50
[ 94.793039][ T6003] tun_rx_batched+0x1de/0x790
[ 94.797711][ T6003] tun_get_user+0x2aeb/0x3ed0
[ 94.802430][ T6003] tun_chr_write_iter+0x113/0x200
[ 94.807480][ T6003] vfs_write+0x61d/0xb90
[ 94.811748][ T6003] ksys_write+0x150/0x270
[ 94.816169][ T6003] do_syscall_64+0x14d/0xf80
[ 94.820959][ T6003] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.826855][ T6003] page last free pid 15 tgid 15 stack trace:
[ 94.832850][ T6003] __free_frozen_pages+0xc2b/0xdb0
[ 94.837994][ T6003] tlb_remove_table_rcu+0x85/0x100
[ 94.843099][ T6003] rcu_core+0x7cd/0x1070
[ 94.847406][ T6003] handle_softirqs+0x22a/0x870
[ 94.852625][ T6003] run_ksoftirqd+0x36/0x60
[ 94.857049][ T6003] smpboot_thread_fn+0x541/0xa50
[ 94.862045][ T6003] kthread+0x388/0x470
[ 94.866126][ T6003] ret_from_fork+0x51e/0xb90
[ 94.870957][ T6003] ret_from_fork_asm+0x1a/0x30
[ 94.875862][ T6003] Modules linked in:
[ 94.879781][ T6003] CPU: 0 UID: 0 PID: 6003 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 94.879805][ T6003] Tainted: [B]=BAD_PAGE
[ 94.879810][ T6003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 94.879818][ T6003] Call Trace:
[ 94.879824][ T6003]
[ 94.879830][ T6003] dump_stack_lvl+0xe8/0x150
[ 94.879853][ T6003] bad_page+0x17f/0x1c0
[ 94.879875][ T6003] __free_frozen_pages+0xd62/0xdb0
[ 94.879897][ T6003] bpf_xdp_frags_shrink_tail+0x4da/0x7d0
[ 94.879923][ T6003] bpf_xdp_adjust_tail+0x1d6/0x220
[ 94.879948][ T6003] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 94.879963][ T6003] bpf_prog_run_generic_xdp+0x603/0x1490
[ 94.879990][ T6003] do_xdp_generic+0xac5/0x12e0
[ 94.880012][ T6003] ? __pfx_do_xdp_generic+0x10/0x10
[ 94.880039][ T6003] __netif_receive_skb_core+0x10e5/0x31a0
[ 94.880060][ T6003] ? __pfx___up_read+0x10/0x10
[ 94.880085][ T6003] ? do_user_addr_fault+0xbad/0x1340
[ 94.880108][ T6003] ? __lock_acquire+0x6b5/0x2cf0
[ 94.880131][ T6003] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 94.880150][ T6003] ? lockdep_hardirqs_on+0x7a/0x110
[ 94.880166][ T6003] ? irqentry_exit+0x59e/0x620
[ 94.880182][ T6003] ? trace_irq_disable+0x3b/0x150
[ 94.880201][ T6003] ? lock_acquire+0xf0/0x2e0
[ 94.880223][ T6003] ? rep_movs_alternative+0x4a/0x90
[ 94.880242][ T6003] ? netif_receive_skb+0x102/0xc50
[ 94.880260][ T6003] ? netif_receive_skb+0x102/0xc50
[ 94.880278][ T6003] netif_receive_skb+0x1fe/0xc50
[ 94.880299][ T6003] ? __pfx_netif_receive_skb+0x10/0x10
[ 94.880316][ T6003] ? __lock_acquire+0x6b5/0x2cf0
[ 94.880337][ T6003] ? tun_rx_batched+0x185/0x790
[ 94.880355][ T6003] tun_rx_batched+0x1de/0x790
[ 94.880375][ T6003] ? __pfx_tun_rx_batched+0x10/0x10
[ 94.880395][ T6003] ? tun_get_user+0x23c7/0x3ed0
[ 94.880414][ T6003] ? __local_bh_enable_ip+0xd0/0x130
[ 94.880436][ T6003] ? tun_get_user+0x26dc/0x3ed0
[ 94.880454][ T6003] tun_get_user+0x2aeb/0x3ed0
[ 94.880480][ T6003] ? aa_file_perm+0x50e/0x15e0
[ 94.880497][ T6003] ? __pfx_tun_get_user+0x10/0x10
[ 94.880514][ T6003] ? aa_file_perm+0x192/0x15e0
[ 94.880533][ T6003] ? __lock_acquire+0x6b5/0x2cf0
[ 94.880556][ T6003] ? ref_tracker_alloc+0x35c/0x4c0
[ 94.880574][ T6003] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 94.880592][ T6003] ? tun_get+0x1c/0x2f0
[ 94.880612][ T6003] ? tun_get+0x1c/0x2f0
[ 94.880629][ T6003] ? tun_get+0x1c/0x2f0
[ 94.880648][ T6003] tun_chr_write_iter+0x113/0x200
[ 94.880667][ T6003] vfs_write+0x61d/0xb90
[ 94.880688][ T6003] ? __pfx_vfs_write+0x10/0x10
[ 94.880706][ T6003] ? __pfx_do_futex+0x10/0x10
[ 94.880731][ T6003] ksys_write+0x150/0x270
[ 94.880749][ T6003] ? __pfx_ksys_write+0x10/0x10
[ 94.880770][ T6003] do_syscall_64+0x14d/0xf80
[ 94.880786][ T6003] ? trace_irq_disable+0x3b/0x150
[ 94.880800][ T6003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.880817][ T6003] ? clear_bhb_loop+0x40/0x90
[ 94.880834][ T6003] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.880851][ T6003] RIP: 0033:0x7fdc4815d04e
[ 94.880866][ T6003] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 94.880880][ T6003] RSP: 002b:00007ffdc62272f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 94.880897][ T6003] RAX: ffffffffffffffda RBX: 0000555557107500 RCX: 00007fdc4815d04e
[ 94.880910][ T6003] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 00000000000000c8
[ 94.880920][ T6003] RBP: 00007fdc48232c91 R08: 0000000000000000 R09: 0000000000000000
[ 94.880930][ T6003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 94.880940][ T6003] R13: 00007fdc48415fac R14: 00007fdc48415fa0 R15: 00007fdc48415fa0
[ 94.880958][ T6003]
[ 94.880968][ T6003] BUG: Bad page state in process syz.0.17 pfn:7d7e2
[ 95.252628][ T6003] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807d7e2640 pfn:0x7d7e2
[ 95.262952][ T6003] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 95.270212][ T6003] raw: 00fff00000000000 dead000000000040 ffff88801afb0000 0000000000000000
[ 95.278822][ T6003] raw: ffff88807d7e2640 0000000000000001 00000000ffffffff 0000000000000000
[ 95.287428][ T6003] page dumped because: page_pool leak
[ 95.292823][ T6003] page_owner tracks the page as allocated
[ 95.298736][ T6003] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6003, tgid 6003 (syz.0.17), ts 90687304751, free_ts 90658848911
[ 95.315730][ T6003] post_alloc_hook+0x231/0x280
[ 95.320600][ T6003] get_page_from_freelist+0x24dc/0x2580
[ 95.326148][ T6003] __alloc_frozen_pages_noprof+0x18d/0x380
[ 95.331992][ T6003] alloc_pages_bulk_noprof+0x558/0x700
[ 95.337474][ T6003] __page_pool_alloc_netmems_slow+0x14c/0x710
[ 95.343703][ T6003] skb_pp_cow_data+0xcea/0x1bb0
[ 95.348703][ T6003] do_xdp_generic+0x76b/0x12e0
[ 95.353486][ T6003] __netif_receive_skb_core+0x10e5/0x31a0
[ 95.359316][ T6003] netif_receive_skb+0x1fe/0xc50
[ 95.364366][ T6003] tun_rx_batched+0x1de/0x790
[ 95.369090][ T6003] tun_get_user+0x2aeb/0x3ed0
[ 95.373812][ T6003] tun_chr_write_iter+0x113/0x200
[ 95.378903][ T6003] vfs_write+0x61d/0xb90
[ 95.383233][ T6003] ksys_write+0x150/0x270
[ 95.387625][ T6003] do_syscall_64+0x14d/0xf80
[ 95.392271][ T6003] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.398221][ T6003] page last free pid 15 tgid 15 stack trace:
[ 95.404210][ T6003] __free_frozen_pages+0xc2b/0xdb0
[ 95.409355][ T6003] tlb_remove_table_rcu+0x85/0x100
[ 95.414513][ T6003] rcu_core+0x7cd/0x1070
[ 95.418887][ T6003] handle_softirqs+0x22a/0x870
[ 95.423694][ T6003] run_ksoftirqd+0x36/0x60
[ 95.428332][ T6003] smpboot_thread_fn+0x541/0xa50
[ 95.433285][ T6003] kthread+0x388/0x470
[ 95.437370][ T6003] ret_from_fork+0x51e/0xb90
[ 95.442267][ T6003] ret_from_fork_asm+0x1a/0x30
[ 95.447048][ T6003] Modules linked in:
[ 95.451095][ T6003] CPU: 0 UID: 0 PID: 6003 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 95.451120][ T6003] Tainted: [B]=BAD_PAGE
[ 95.451125][ T6003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 95.451134][ T6003] Call Trace:
[ 95.451140][ T6003]
[ 95.451145][ T6003] dump_stack_lvl+0xe8/0x150
[ 95.451169][ T6003] bad_page+0x17f/0x1c0
[ 95.451191][ T6003] __free_frozen_pages+0xd62/0xdb0
[ 95.451211][ T6003] bpf_xdp_frags_shrink_tail+0x4da/0x7d0
[ 95.451235][ T6003] bpf_xdp_adjust_tail+0x1d6/0x220
[ 95.451260][ T6003] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 95.451276][ T6003] bpf_prog_run_generic_xdp+0x603/0x1490
[ 95.451305][ T6003] do_xdp_generic+0xac5/0x12e0
[ 95.451325][ T6003] ? __pfx_do_xdp_generic+0x10/0x10
[ 95.451352][ T6003] __netif_receive_skb_core+0x10e5/0x31a0
[ 95.451372][ T6003] ? __pfx___up_read+0x10/0x10
[ 95.451387][ T6003] ? do_user_addr_fault+0xbad/0x1340
[ 95.451410][ T6003] ? __lock_acquire+0x6b5/0x2cf0
[ 95.451432][ T6003] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 95.451450][ T6003] ? lockdep_hardirqs_on+0x7a/0x110
[ 95.451466][ T6003] ? irqentry_exit+0x59e/0x620
[ 95.451480][ T6003] ? trace_irq_disable+0x3b/0x150
[ 95.451500][ T6003] ? lock_acquire+0xf0/0x2e0
[ 95.451521][ T6003] ? rep_movs_alternative+0x4a/0x90
[ 95.451540][ T6003] ? netif_receive_skb+0x102/0xc50
[ 95.451557][ T6003] ? netif_receive_skb+0x102/0xc50
[ 95.451574][ T6003] netif_receive_skb+0x1fe/0xc50
[ 95.451594][ T6003] ? __pfx_netif_receive_skb+0x10/0x10
[ 95.451610][ T6003] ? __lock_acquire+0x6b5/0x2cf0
[ 95.451629][ T6003] ? tun_rx_batched+0x185/0x790
[ 95.451648][ T6003] tun_rx_batched+0x1de/0x790
[ 95.451666][ T6003] ? __pfx_tun_rx_batched+0x10/0x10
[ 95.451687][ T6003] ? tun_get_user+0x23c7/0x3ed0
[ 95.451706][ T6003] ? __local_bh_enable_ip+0xd0/0x130
[ 95.451728][ T6003] ? tun_get_user+0x26dc/0x3ed0
[ 95.451746][ T6003] tun_get_user+0x2aeb/0x3ed0
[ 95.451772][ T6003] ? aa_file_perm+0x50e/0x15e0
[ 95.451790][ T6003] ? __pfx_tun_get_user+0x10/0x10
[ 95.451807][ T6003] ? aa_file_perm+0x192/0x15e0
[ 95.451825][ T6003] ? __lock_acquire+0x6b5/0x2cf0
[ 95.451848][ T6003] ? ref_tracker_alloc+0x35c/0x4c0
[ 95.451866][ T6003] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 95.451885][ T6003] ? tun_get+0x1c/0x2f0
[ 95.451904][ T6003] ? tun_get+0x1c/0x2f0
[ 95.451920][ T6003] ? tun_get+0x1c/0x2f0
[ 95.451939][ T6003] tun_chr_write_iter+0x113/0x200
[ 95.451959][ T6003] vfs_write+0x61d/0xb90
[ 95.451979][ T6003] ? __pfx_vfs_write+0x10/0x10
[ 95.451998][ T6003] ? __pfx_do_futex+0x10/0x10
[ 95.452023][ T6003] ksys_write+0x150/0x270
[ 95.452042][ T6003] ? __pfx_ksys_write+0x10/0x10
[ 95.452073][ T6003] do_syscall_64+0x14d/0xf80
[ 95.452089][ T6003] ? trace_irq_disable+0x3b/0x150
[ 95.452104][ T6003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.452122][ T6003] ? clear_bhb_loop+0x40/0x90
[ 95.452141][ T6003] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.452157][ T6003] RIP: 0033:0x7fdc4815d04e
[ 95.452173][ T6003] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 95.452186][ T6003] RSP: 002b:00007ffdc62272f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 95.452204][ T6003] RAX: ffffffffffffffda RBX: 0000555557107500 RCX: 00007fdc4815d04e
[ 95.452216][ T6003] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 00000000000000c8
[ 95.452226][ T6003] RBP: 00007fdc48232c91 R08: 0000000000000000 R09: 0000000000000000
[ 95.452237][ T6003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 95.452246][ T6003] R13: 00007fdc48415fac R14: 00007fdc48415fa0 R15: 00007fdc48415fa0
[ 95.452264][ T6003]
[ 95.452274][ T6003] BUG: Bad page state in process syz.0.17 pfn:7d56d
[ 95.822400][ T6003] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x7d56d
[ 95.832696][ T6003] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 95.839882][ T6003] raw: 00fff00000000000 dead000000000040 ffff88801afb0000 0000000000000000
[ 95.848812][ T6003] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000
[ 95.857495][ T6003] page dumped because: page_pool leak
[ 95.862919][ T6003] page_owner tracks the page as allocated
[ 95.868662][ T6003] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6003, tgid 6003 (syz.0.17), ts 90687288536, free_ts 90658870107
[ 95.885454][ T6003] post_alloc_hook+0x231/0x280
[ 95.890328][ T6003] get_page_from_freelist+0x24dc/0x2580
[ 95.895963][ T6003] __alloc_frozen_pages_noprof+0x18d/0x380
[ 95.901832][ T6003] alloc_pages_bulk_noprof+0x558/0x700
[ 95.907435][ T6003] __page_pool_alloc_netmems_slow+0x14c/0x710
[ 95.913638][ T6003] skb_pp_cow_data+0xcea/0x1bb0
[ 95.918527][ T6003] do_xdp_generic+0x76b/0x12e0
[ 95.923327][ T6003] __netif_receive_skb_core+0x10e5/0x31a0
[ 95.929053][ T6003] netif_receive_skb+0x1fe/0xc50
[ 95.934005][ T6003] tun_rx_batched+0x1de/0x790
[ 95.938714][ T6003] tun_get_user+0x2aeb/0x3ed0
[ 95.943399][ T6003] tun_chr_write_iter+0x113/0x200
[ 95.948533][ T6003] vfs_write+0x61d/0xb90
[ 95.952784][ T6003] ksys_write+0x150/0x270
[ 95.957117][ T6003] do_syscall_64+0x14d/0xf80
[ 95.961934][ T6003] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.968041][ T6003] page last free pid 15 tgid 15 stack trace:
[ 95.974096][ T6003] __free_frozen_pages+0xc2b/0xdb0
[ 95.979293][ T6003] tlb_remove_table_rcu+0x85/0x100
[ 95.984418][ T6003] rcu_core+0x7cd/0x1070
[ 95.988704][ T6003] handle_softirqs+0x22a/0x870
[ 95.993525][ T6003] run_ksoftirqd+0x36/0x60
[ 95.997971][ T6003] smpboot_thread_fn+0x541/0xa50
[ 96.002914][ T6003] kthread+0x388/0x470
[ 96.007400][ T6003] ret_from_fork+0x51e/0xb90
[ 96.012019][ T6003] ret_from_fork_asm+0x1a/0x30
[ 96.016796][ T6003] Modules linked in:
[ 96.020726][ T6003] CPU: 0 UID: 0 PID: 6003 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 96.020771][ T6003] Tainted: [B]=BAD_PAGE
[ 96.020776][ T6003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 96.020783][ T6003] Call Trace:
[ 96.020788][ T6003]
[ 96.020794][ T6003] dump_stack_lvl+0xe8/0x150
[ 96.020817][ T6003] bad_page+0x17f/0x1c0
[ 96.020839][ T6003] __free_frozen_pages+0xd62/0xdb0
[ 96.020857][ T6003] bpf_xdp_frags_shrink_tail+0x4da/0x7d0
[ 96.020880][ T6003] bpf_xdp_adjust_tail+0x1d6/0x220
[ 96.020901][ T6003] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 96.020914][ T6003] bpf_prog_run_generic_xdp+0x603/0x1490
[ 96.020942][ T6003] do_xdp_generic+0xac5/0x12e0
[ 96.020964][ T6003] ? __pfx_do_xdp_generic+0x10/0x10
[ 96.020992][ T6003] __netif_receive_skb_core+0x10e5/0x31a0
[ 96.021008][ T6003] ? __pfx___up_read+0x10/0x10
[ 96.021024][ T6003] ? do_user_addr_fault+0xbad/0x1340
[ 96.021049][ T6003] ? __lock_acquire+0x6b5/0x2cf0
[ 96.021072][ T6003] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 96.021090][ T6003] ? lockdep_hardirqs_on+0x7a/0x110
[ 96.021105][ T6003] ? irqentry_exit+0x59e/0x620
[ 96.021120][ T6003] ? trace_irq_disable+0x3b/0x150
[ 96.021138][ T6003] ? lock_acquire+0xf0/0x2e0
[ 96.021158][ T6003] ? rep_movs_alternative+0x4a/0x90
[ 96.021176][ T6003] ? netif_receive_skb+0x102/0xc50
[ 96.021190][ T6003] ? netif_receive_skb+0x102/0xc50
[ 96.021208][ T6003] netif_receive_skb+0x1fe/0xc50
[ 96.021227][ T6003] ? __pfx_netif_receive_skb+0x10/0x10
[ 96.021243][ T6003] ? __lock_acquire+0x6b5/0x2cf0
[ 96.021264][ T6003] ? tun_rx_batched+0x185/0x790
[ 96.021285][ T6003] tun_rx_batched+0x1de/0x790
[ 96.021307][ T6003] ? __pfx_tun_rx_batched+0x10/0x10
[ 96.021329][ T6003] ? tun_get_user+0x23c7/0x3ed0
[ 96.021348][ T6003] ? __local_bh_enable_ip+0xd0/0x130
[ 96.021370][ T6003] ? tun_get_user+0x26dc/0x3ed0
[ 96.021388][ T6003] tun_get_user+0x2aeb/0x3ed0
[ 96.021413][ T6003] ? aa_file_perm+0x50e/0x15e0
[ 96.021430][ T6003] ? __pfx_tun_get_user+0x10/0x10
[ 96.021447][ T6003] ? aa_file_perm+0x192/0x15e0
[ 96.021466][ T6003] ? __lock_acquire+0x6b5/0x2cf0
[ 96.021489][ T6003] ? ref_tracker_alloc+0x35c/0x4c0
[ 96.021507][ T6003] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 96.021525][ T6003] ? tun_get+0x1c/0x2f0
[ 96.021544][ T6003] ? tun_get+0x1c/0x2f0
[ 96.021562][ T6003] ? tun_get+0x1c/0x2f0
[ 96.021582][ T6003] tun_chr_write_iter+0x113/0x200
[ 96.021601][ T6003] vfs_write+0x61d/0xb90
[ 96.021622][ T6003] ? __pfx_vfs_write+0x10/0x10
[ 96.021640][ T6003] ? __pfx_do_futex+0x10/0x10
[ 96.021665][ T6003] ksys_write+0x150/0x270
[ 96.021684][ T6003] ? __pfx_ksys_write+0x10/0x10
[ 96.021705][ T6003] do_syscall_64+0x14d/0xf80
[ 96.021720][ T6003] ? trace_irq_disable+0x3b/0x150
[ 96.021735][ T6003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.021759][ T6003] ? clear_bhb_loop+0x40/0x90
[ 96.021778][ T6003] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.021794][ T6003] RIP: 0033:0x7fdc4815d04e
[ 96.021809][ T6003] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 96.021823][ T6003] RSP: 002b:00007ffdc62272f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 96.021840][ T6003] RAX: ffffffffffffffda RBX: 0000555557107500 RCX: 00007fdc4815d04e
[ 96.021853][ T6003] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 00000000000000c8
[ 96.021865][ T6003] RBP: 00007fdc48232c91 R08: 0000000000000000 R09: 0000000000000000
[ 96.021875][ T6003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 96.021886][ T6003] R13: 00007fdc48415fac R14: 00007fdc48415fa0 R15: 00007fdc48415fa0
[ 96.021905][ T6003]
[ 96.021915][ T6003] BUG: Bad page state in process syz.0.17 pfn:7bad5
[ 96.395037][ T6003] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807bad5a00 pfn:0x7bad5
[ 96.406590][ T6003] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 96.413851][ T6003] raw: 00fff00000000000 dead000000000040 ffff88801afb0000 0000000000000000
[ 96.422709][ T6003] raw: ffff88807bad5a00 0000000000000001 00000000ffffffff 0000000000000000
[ 96.431503][ T6003] page dumped because: page_pool leak
[ 96.437042][ T6003] page_owner tracks the page as allocated
[ 96.442823][ T6003] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6003, tgid 6003 (syz.0.17), ts 90687271636, free_ts 90658881764
[ 96.459856][ T6003] post_alloc_hook+0x231/0x280
[ 96.464999][ T6003] get_page_from_freelist+0x24dc/0x2580
[ 96.470749][ T6003] __alloc_frozen_pages_noprof+0x18d/0x380
[ 96.477435][ T6003] alloc_pages_bulk_noprof+0x558/0x700
[ 96.482945][ T6003] __page_pool_alloc_netmems_slow+0x14c/0x710
[ 96.489395][ T6003] skb_pp_cow_data+0xcea/0x1bb0
[ 96.494281][ T6003] do_xdp_generic+0x76b/0x12e0
[ 96.499245][ T6003] __netif_receive_skb_core+0x10e5/0x31a0
[ 96.505166][ T6003] netif_receive_skb+0x1fe/0xc50
[ 96.510258][ T6003] tun_rx_batched+0x1de/0x790
[ 96.515036][ T6003] tun_get_user+0x2aeb/0x3ed0
[ 96.519850][ T6003] tun_chr_write_iter+0x113/0x200
[ 96.525016][ T6003] vfs_write+0x61d/0xb90
[ 96.529309][ T6003] ksys_write+0x150/0x270
[ 96.533647][ T6003] do_syscall_64+0x14d/0xf80
[ 96.538258][ T6003] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.544291][ T6003] page last free pid 15 tgid 15 stack trace:
[ 96.550320][ T6003] __free_frozen_pages+0xc2b/0xdb0
[ 96.555530][ T6003] tlb_remove_table_rcu+0x85/0x100
[ 96.560694][ T6003] rcu_core+0x7cd/0x1070
[ 96.564947][ T6003] handle_softirqs+0x22a/0x870
[ 96.569731][ T6003] run_ksoftirqd+0x36/0x60
[ 96.574153][ T6003] smpboot_thread_fn+0x541/0xa50
[ 96.579110][ T6003] kthread+0x388/0x470
[ 96.583278][ T6003] ret_from_fork+0x51e/0xb90
[ 96.587849][ T6003] ret_from_fork_asm+0x1a/0x30
[ 96.592722][ T6003] Modules linked in:
[ 96.596892][ T6003] CPU: 0 UID: 0 PID: 6003 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 96.596909][ T6003] Tainted: [B]=BAD_PAGE
[ 96.596912][ T6003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 96.596918][ T6003] Call Trace:
[ 96.596922][ T6003]
[ 96.596927][ T6003] dump_stack_lvl+0xe8/0x150
[ 96.596944][ T6003] bad_page+0x17f/0x1c0
[ 96.596959][ T6003] __free_frozen_pages+0xd62/0xdb0
[ 96.596971][ T6003] bpf_xdp_frags_shrink_tail+0x4da/0x7d0
[ 96.596986][ T6003] bpf_xdp_adjust_tail+0x1d6/0x220
[ 96.597000][ T6003] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 96.597009][ T6003] bpf_prog_run_generic_xdp+0x603/0x1490
[ 96.597024][ T6003] do_xdp_generic+0xac5/0x12e0
[ 96.597035][ T6003] ? __pfx_do_xdp_generic+0x10/0x10
[ 96.597050][ T6003] __netif_receive_skb_core+0x10e5/0x31a0
[ 96.597062][ T6003] ? __pfx___up_read+0x10/0x10
[ 96.597071][ T6003] ? do_user_addr_fault+0xbad/0x1340
[ 96.597085][ T6003] ? __lock_acquire+0x6b5/0x2cf0
[ 96.597098][ T6003] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 96.597108][ T6003] ? lockdep_hardirqs_on+0x7a/0x110
[ 96.597117][ T6003] ? irqentry_exit+0x59e/0x620
[ 96.597125][ T6003] ? trace_irq_disable+0x3b/0x150
[ 96.597136][ T6003] ? lock_acquire+0xf0/0x2e0
[ 96.597148][ T6003] ? rep_movs_alternative+0x4a/0x90
[ 96.597159][ T6003] ? netif_receive_skb+0x102/0xc50
[ 96.597168][ T6003] ? netif_receive_skb+0x102/0xc50
[ 96.597178][ T6003] netif_receive_skb+0x1fe/0xc50
[ 96.597189][ T6003] ? __pfx_netif_receive_skb+0x10/0x10
[ 96.597198][ T6003] ? __lock_acquire+0x6b5/0x2cf0
[ 96.597210][ T6003] ? tun_rx_batched+0x185/0x790
[ 96.597222][ T6003] tun_rx_batched+0x1de/0x790
[ 96.597234][ T6003] ? __pfx_tun_rx_batched+0x10/0x10
[ 96.597247][ T6003] ? tun_get_user+0x23c7/0x3ed0
[ 96.597258][ T6003] ? __local_bh_enable_ip+0xd0/0x130
[ 96.597271][ T6003] ? tun_get_user+0x26dc/0x3ed0
[ 96.597281][ T6003] tun_get_user+0x2aeb/0x3ed0
[ 96.597295][ T6003] ? aa_file_perm+0x50e/0x15e0
[ 96.597305][ T6003] ? __pfx_tun_get_user+0x10/0x10
[ 96.597315][ T6003] ? aa_file_perm+0x192/0x15e0
[ 96.597325][ T6003] ? __lock_acquire+0x6b5/0x2cf0
[ 96.597338][ T6003] ? ref_tracker_alloc+0x35c/0x4c0
[ 96.597349][ T6003] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 96.597359][ T6003] ? tun_get+0x1c/0x2f0
[ 96.597371][ T6003] ? tun_get+0x1c/0x2f0
[ 96.597381][ T6003] ? tun_get+0x1c/0x2f0
[ 96.597391][ T6003] tun_chr_write_iter+0x113/0x200
[ 96.597403][ T6003] vfs_write+0x61d/0xb90
[ 96.597415][ T6003] ? __pfx_vfs_write+0x10/0x10
[ 96.597425][ T6003] ? __pfx_do_futex+0x10/0x10
[ 96.597439][ T6003] ksys_write+0x150/0x270
[ 96.597450][ T6003] ? __pfx_ksys_write+0x10/0x10
[ 96.597461][ T6003] do_syscall_64+0x14d/0xf80
[ 96.597471][ T6003] ? trace_irq_disable+0x3b/0x150
[ 96.597478][ T6003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.597488][ T6003] ? clear_bhb_loop+0x40/0x90
[ 96.597498][ T6003] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.597507][ T6003] RIP: 0033:0x7fdc4815d04e
[ 96.597517][ T6003] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 96.597524][ T6003] RSP: 002b:00007ffdc62272f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 96.597536][ T6003] RAX: ffffffffffffffda RBX: 0000555557107500 RCX: 00007fdc4815d04e
[ 96.597542][ T6003] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 00000000000000c8
[ 96.597548][ T6003] RBP: 00007fdc48232c91 R08: 0000000000000000 R09: 0000000000000000
[ 96.597554][ T6003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 96.597560][ T6003] R13: 00007fdc48415fac R14: 00007fdc48415fa0 R15: 00007fdc48415fa0
[ 96.597569][ T6003]
[ 96.597576][ T6003] BUG: Bad page state in process syz.0.17 pfn:203c8
[ 96.968656][ T6003] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880203c8000 pfn:0x203c8
[ 96.978732][ T6003] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 96.985847][ T6003] raw: 00fff00000000000 dead000000000040 ffff88801afb0000 0000000000000000
[ 96.995263][ T6003] raw: ffff8880203c8000 0000000000000001 00000000ffffffff 0000000000000000
[ 97.004156][ T6003] page dumped because: page_pool leak
[ 97.009738][ T6003] page_owner tracks the page as allocated
[ 97.015802][ T6003] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6003, tgid 6003 (syz.0.17), ts 90687254725, free_ts 90658893323
[ 97.032716][ T6003] post_alloc_hook+0x231/0x280
[ 97.037501][ T6003] get_page_from_freelist+0x24dc/0x2580
[ 97.043143][ T6003] __alloc_frozen_pages_noprof+0x18d/0x380
[ 97.048999][ T6003] alloc_pages_bulk_noprof+0x558/0x700
[ 97.054661][ T6003] __page_pool_alloc_netmems_slow+0x14c/0x710
[ 97.060784][ T6003] skb_pp_cow_data+0xcea/0x1bb0
[ 97.065650][ T6003] do_xdp_generic+0x76b/0x12e0
[ 97.070440][ T6003] __netif_receive_skb_core+0x10e5/0x31a0
[ 97.076255][ T6003] netif_receive_skb+0x1fe/0xc50
[ 97.081248][ T6003] tun_rx_batched+0x1de/0x790
[ 97.085979][ T6003] tun_get_user+0x2aeb/0x3ed0
[ 97.090767][ T6003] tun_chr_write_iter+0x113/0x200
[ 97.095985][ T6003] vfs_write+0x61d/0xb90
[ 97.100270][ T6003] ksys_write+0x150/0x270
[ 97.104817][ T6003] do_syscall_64+0x14d/0xf80
[ 97.109452][ T6003] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 97.115352][ T6003] page last free pid 15 tgid 15 stack trace:
[ 97.121378][ T6003] __free_frozen_pages+0xc2b/0xdb0
[ 97.126500][ T6003] rcu_core+0x7cd/0x1070
[ 97.130769][ T6003] handle_softirqs+0x22a/0x870
[ 97.135541][ T6003] run_ksoftirqd+0x36/0x60
[ 97.139997][ T6003] smpboot_thread_fn+0x541/0xa50
[ 97.145121][ T6003] kthread+0x388/0x470
[ 97.149226][ T6003] ret_from_fork+0x51e/0xb90
[ 97.153831][ T6003] ret_from_fork_asm+0x1a/0x30
[ 97.158633][ T6003] Modules linked in:
[ 97.162682][ T6003] CPU: 0 UID: 0 PID: 6003 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full)
[ 97.162699][ T6003] Tainted: [B]=BAD_PAGE
[ 97.162703][ T6003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 97.162709][ T6003] Call Trace:
[ 97.162713][ T6003]
[ 97.162717][ T6003] dump_stack_lvl+0xe8/0x150
[ 97.162734][ T6003] bad_page+0x17f/0x1c0
[ 97.162750][ T6003] __free_frozen_pages+0xd62/0xdb0
[ 97.162763][ T6003] bpf_xdp_frags_shrink_tail+0x4da/0x7d0
[ 97.162777][ T6003] bpf_xdp_adjust_tail+0x1d6/0x220
[ 97.162792][ T6003] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 97.162801][ T6003] bpf_prog_run_generic_xdp+0x603/0x1490
[ 97.162816][ T6003] do_xdp_generic+0xac5/0x12e0
[ 97.162828][ T6003] ? __pfx_do_xdp_generic+0x10/0x10
[ 97.162842][ T6003] __netif_receive_skb_core+0x10e5/0x31a0
[ 97.162854][ T6003] ? __pfx___up_read+0x10/0x10
[ 97.162864][ T6003] ? do_user_addr_fault+0xbad/0x1340
[ 97.162888][ T6003] ? __lock_acquire+0x6b5/0x2cf0
[ 97.162901][ T6003] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 97.162912][ T6003] ? lockdep_hardirqs_on+0x7a/0x110
[ 97.162921][ T6003] ? irqentry_exit+0x59e/0x620
[ 97.162929][ T6003] ? trace_irq_disable+0x3b/0x150
[ 97.162940][ T6003] ? lock_acquire+0xf0/0x2e0
[ 97.162952][ T6003] ? rep_movs_alternative+0x4a/0x90
[ 97.162963][ T6003] ? netif_receive_skb+0x102/0xc50
[ 97.162972][ T6003] ? netif_receive_skb+0x102/0xc50
[ 97.162981][ T6003] netif_receive_skb+0x1fe/0xc50
[ 97.162992][ T6003] ? __pfx_netif_receive_skb+0x10/0x10
[ 97.163001][ T6003] ? __lock_acquire+0x6b5/0x2cf0
[ 97.163013][ T6003] ? tun_rx_batched+0x185/0x790
[ 97.163026][ T6003] tun_rx_batched+0x1de/0x790
[ 97.163038][ T6003] ? __pfx_tun_rx_batched+0x10/0x10
[ 97.163051][ T6003] ? tun_get_user+0x23c7/0x3ed0
[ 97.163061][ T6003] ? __local_bh_enable_ip+0xd0/0x130
[ 97.163075][ T6003] ? tun_get_user+0x26dc/0x3ed0
[ 97.163085][ T6003] tun_get_user+0x2aeb/0x3ed0
[ 97.163099][ T6003] ? aa_file_perm+0x50e/0x15e0
[ 97.163109][ T6003] ? __pfx_tun_get_user+0x10/0x10
[ 97.163119][ T6003] ? aa_file_perm+0x192/0x15e0
[ 97.163129][ T6003] ? __lock_acquire+0x6b5/0x2cf0
[ 97.163142][ T6003] ? ref_tracker_alloc+0x35c/0x4c0
[ 97.163152][ T6003] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 97.163162][ T6003] ? tun_get+0x1c/0x2f0
[ 97.163173][ T6003] ? tun_get+0x1c/0x2f0
[ 97.163183][ T6003] ? tun_get+0x1c/0x2f0
[ 97.163194][ T6003] tun_chr_write_iter+0x113/0x200
[ 97.163205][ T6003] vfs_write+0x61d/0xb90
[ 97.163217][ T6003] ? __pfx_vfs_write+0x10/0x10
[ 97.163227][ T6003] ? __pfx_do_futex+0x10/0x10
[ 97.163242][ T6003] ksys_write+0x150/0x270
[ 97.163252][ T6003] ? __pfx_ksys_write+0x10/0x10
[ 97.163264][ T6003] do_syscall_64+0x14d/0xf80
[ 97.163272][ T6003] ? trace_irq_disable+0x3b/0x150
[ 97.163280][ T6003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 97.163289][ T6003] ? clear_bhb_loop+0x40/0x90
[ 97.163299][ T6003] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 97.163308][ T6003] RIP: 0033:0x7fdc4815d04e
[ 97.163318][ T6003] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 97.163326][ T6003] RSP: 002b:00007ffdc62272f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 97.163337][ T6003] RAX: ffffffffffffffda RBX: 0000555557107500 RCX: 00007fdc4815d04e
[ 97.163344][ T6003] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 00000000000000c8
[ 97.163350][ T6003] RBP: 00007fdc48232c91 R08: 0000000000000000 R09: 0000000000000000
[ 97.163356][ T6003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 97.163361][ T6003] R13: 00007fdc48415fac R14: 00007fdc48415fa0 R15: 00007fdc48415fa0
[ 97.163371][ T6003]
[ 97.533972][ T5143] Bluetooth: hci0: command tx timeout
[ 97.534731][ T10] cfg80211: failed to load regulatory.db
[ 97.607180][ T6023] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888028a5d000 pfn:0x28a5d
[ 97.617691][ T6023] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 97.624926][ T6023] raw: 00fff00000000000 dead000000000040 ffff88801afb0000 0000000000000000
[ 97.633618][ T6023] raw: ffff888028a5d000 3fffffffffffffff 00000000ffffffff 0000000000000000
[ 97.642360][ T6023] page dumped because: VM_BUG_ON_PAGE(page_ref_count(page) == 0)
[ 97.650315][ T6023] page_owner tracks the page as allocated
[ 97.656238][ T6023] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6003, tgid 6003 (syz.0.17), ts 90687448058, free_ts 90658697752
[ 97.673185][ T6023] post_alloc_hook+0x231/0x280
[ 97.678082][ T6023] get_page_from_freelist+0x24dc/0x2580
[ 97.683628][ T6023] __alloc_frozen_pages_noprof+0x18d/0x380
[ 97.689663][ T6023] alloc_pages_bulk_noprof+0x558/0x700
[ 97.695134][ T6023] __page_pool_alloc_netmems_slow+0x14c/0x710
[ 97.701264][ T6023] page_pool_alloc_frag_netmem+0x421/0x9b0
[ 97.707281][ T6023] skb_pp_cow_data+0xd11/0x1bb0
[ 97.712173][ T6023] do_xdp_generic+0x76b/0x12e0
[ 97.717034][ T6023] __netif_receive_skb_core+0x10e5/0x31a0
[ 97.723418][ T6023] netif_receive_skb+0x1fe/0xc50
[ 97.728513][ T6023] tun_rx_batched+0x1de/0x790
[ 97.733449][ T6023] tun_get_user+0x2aeb/0x3ed0
[ 97.738189][ T6023] tun_chr_write_iter+0x113/0x200
[ 97.743347][ T6023] vfs_write+0x61d/0xb90
[ 97.747603][ T6023] ksys_write+0x150/0x270
[ 97.752078][ T6023] do_syscall_64+0x14d/0xf80
[ 97.757033][ T6023] page last free pid 15 tgid 15 stack trace:
[ 97.763485][ T6023] __free_frozen_pages+0xc2b/0xdb0
[ 97.769199][ T6023] tlb_remove_table_rcu+0x85/0x100
[ 97.774328][ T6023] rcu_core+0x7cd/0x1070
[ 97.778716][ T6023] handle_softirqs+0x22a/0x870
[ 97.783729][ T6023] run_ksoftirqd+0x36/0x60
[ 97.788442][ T6023] smpboot_thread_fn+0x541/0xa50
[ 97.794017][ T6023] kthread+0x388/0x470
[ 97.798933][ T6023] ret_from_fork+0x51e/0xb90
[ 97.803548][ T6023] ret_from_fork_asm+0x1a/0x30
[ 97.808727][ T6023] ------------[ cut here ]------------
[ 97.814194][ T6023] kernel BUG at ./include/linux/mm.h:1493!
[ 97.820148][ T6023] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[ 97.826495][ T6023] CPU: 0 UID: 0 PID: 6023 Comm: syz.0.18 Tainted: G B syzkaller #0 PREEMPT(full)
[ 97.837165][ T6023] Tainted: [B]=BAD_PAGE
[ 97.841307][ T6023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 97.851640][ T6023] RIP: 0010:page_frag_free+0x182/0x240
[ 97.857114][ T6023] Code: 38 c1 0f 8c 64 ff ff ff 4c 89 f7 e8 28 39 0d 00 e9 57 ff ff ff e8 fe e6 a2 ff 48 89 df 48 c7 c6 c0 d5 da 8b e8 3f 52 05 ff 90 <0f> 0b 48 89 de 48 81 e6 ff 0f 00 00 31 ff e8 bb eb a2 ff 48 89 d8
[ 97.876800][ T6023] RSP: 0018:ffffc90003366fe8 EFLAGS: 00010246
[ 97.883053][ T6023] RAX: 7314bf60f667e300 RBX: ffffea0000a29740 RCX: 0000000000000201
[ 97.891022][ T6023] RDX: 0000000000000000 RSI: ffffffff8c27d4e0 RDI: ffff88802f589e80
[ 97.899106][ T6023] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
[ 97.907332][ T6023] R10: dffffc0000000000 R11: fffffbfff1cbd628 R12: dffffc0000000000
[ 97.915392][ T6023] R13: 000000000000bcdd R14: ffffea0000a29774 R15: dead000000000040
[ 97.923555][ T6023] FS: 0000555557107500(0000) GS:ffff88812544e000(0000) knlGS:0000000000000000
[ 97.932582][ T6023] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 97.939949][ T6023] CR2: 000020000000f000 CR3: 0000000076100000 CR4: 00000000003526f0
[ 97.948011][ T6023] Call Trace:
[ 97.951307][ T6023]
[ 97.954351][ T6023] bpf_xdp_frags_shrink_tail+0x4da/0x7d0
[ 97.960625][ T6023] bpf_xdp_adjust_tail+0x1d6/0x220
[ 97.965882][ T6023] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 97.971392][ T6023] bpf_prog_run_generic_xdp+0x603/0x1490
[ 97.977212][ T6023] ? lock_release+0x4b/0x3d0
[ 97.981830][ T6023] do_xdp_generic+0xac5/0x12e0
[ 97.986672][ T6023] ? __pfx_do_xdp_generic+0x10/0x10
[ 97.991880][ T6023] __netif_receive_skb_core+0x10e5/0x31a0
[ 97.998050][ T6023] ? __pfx___up_read+0x10/0x10
[ 98.002818][ T6023] ? lock_release+0x4b/0x3d0
[ 98.007432][ T6023] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 98.013858][ T6023] ? irqentry_exit+0x59e/0x620
[ 98.018672][ T6023] ? trace_irq_disable+0x3b/0x150
[ 98.023683][ T6023] ? netif_receive_skb+0x102/0xc50
[ 98.028781][ T6023] ? rcu_is_watching+0x15/0xb0
[ 98.033547][ T6023] ? netif_receive_skb+0x102/0xc50
[ 98.038667][ T6023] ? rep_movs_alternative+0x4a/0x90
[ 98.044098][ T6023] ? netif_receive_skb+0x102/0xc50
[ 98.049238][ T6023] ? netif_receive_skb+0x102/0xc50
[ 98.054377][ T6023] netif_receive_skb+0x1fe/0xc50
[ 98.059306][ T6023] ? __pfx_netif_receive_skb+0x10/0x10
[ 98.064759][ T6023] ? __pfx__copy_from_iter+0x10/0x10
[ 98.070126][ T6023] ? sock_alloc_send_pskb+0x896/0x990
[ 98.075585][ T6023] ? tun_rx_batched+0x185/0x790
[ 98.080440][ T6023] tun_rx_batched+0x1de/0x790
[ 98.085114][ T6023] ? __pfx_tun_rx_batched+0x10/0x10
[ 98.090305][ T6023] ? rcu_is_watching+0x15/0xb0
[ 98.095057][ T6023] ? lock_acquire+0x57/0x2e0
[ 98.099763][ T6023] ? rcu_is_watching+0x15/0xb0
[ 98.104540][ T6023] ? trace_irq_enable+0x3b/0x150
[ 98.109558][ T6023] ? tun_get_user+0x26dc/0x3ed0
[ 98.114399][ T6023] tun_get_user+0x2aeb/0x3ed0
[ 98.119333][ T6023] ? aa_file_perm+0x50e/0x15e0
[ 98.124181][ T6023] ? __pfx_tun_get_user+0x10/0x10
[ 98.129205][ T6023] ? aa_file_perm+0x192/0x15e0
[ 98.133988][ T6023] ? get_futex_key+0x8cd/0x1690
[ 98.138856][ T6023] ? ref_tracker_alloc+0x35c/0x4c0
[ 98.143981][ T6023] ? rcu_is_watching+0x15/0xb0
[ 98.148758][ T6023] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 98.154321][ T6023] ? __futex_hash+0x33b/0x760
[ 98.159013][ T6023] ? tun_get+0x1c/0x2f0
[ 98.163175][ T6023] ? rcu_is_watching+0x15/0xb0
[ 98.167987][ T6023] ? tun_get+0x1c/0x2f0
[ 98.172158][ T6023] ? lock_release+0x4b/0x3d0
[ 98.176842][ T6023] ? apparmor_file_permission+0x1f4/0x300
[ 98.182666][ T6023] ? tun_get+0x1c/0x2f0
[ 98.186820][ T6023] tun_chr_write_iter+0x113/0x200
[ 98.191881][ T6023] vfs_write+0x61d/0xb90
[ 98.196148][ T6023] ? __pfx_vfs_write+0x10/0x10
[ 98.201198][ T6023] ? __pfx_do_futex+0x10/0x10
[ 98.205975][ T6023] ksys_write+0x150/0x270
[ 98.210976][ T6023] ? __pfx_ksys_write+0x10/0x10
[ 98.215929][ T6023] ? rcu_is_watching+0x15/0xb0
[ 98.220800][ T6023] do_syscall_64+0x14d/0xf80
[ 98.225469][ T6023] ? trace_irq_disable+0x3b/0x150
[ 98.230481][ T6023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 98.236655][ T6023] ? clear_bhb_loop+0x40/0x90
[ 98.241322][ T6023] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 98.247214][ T6023] RIP: 0033:0x7fdc4815d04e
[ 98.251659][ T6023] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 98.271355][ T6023] RSP: 002b:00007ffdc62272f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 98.279769][ T6023] RAX: ffffffffffffffda RBX: 0000555557107500 RCX: 00007fdc4815d04e
[ 98.287908][ T6023] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 00000000000000c8
[ 98.295870][ T6023] RBP: 00007fdc48232c91 R08: 0000000000000000 R09: 0000000000000000
[ 98.303930][ T6023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 98.311911][ T6023] R13: 00007fdc48415fac R14: 00007fdc48415fa0 R15: 00007fdc48415fa0
[ 98.319897][ T6023]
[ 98.322913][ T6023] Modules linked in:
[ 98.327048][ T6023] ---[ end trace 0000000000000000 ]---
[ 98.332543][ T6023] RIP: 0010:page_frag_free+0x182/0x240
[ 98.338051][ T6023] Code: 38 c1 0f 8c 64 ff ff ff 4c 89 f7 e8 28 39 0d 00 e9 57 ff ff ff e8 fe e6 a2 ff 48 89 df 48 c7 c6 c0 d5 da 8b e8 3f 52 05 ff 90 <0f> 0b 48 89 de 48 81 e6 ff 0f 00 00 31 ff e8 bb eb a2 ff 48 89 d8
[ 98.358222][ T6023] RSP: 0018:ffffc90003366fe8 EFLAGS: 00010246
[ 98.364316][ T6023] RAX: 7314bf60f667e300 RBX: ffffea0000a29740 RCX: 0000000000000201
[ 98.372349][ T6023] RDX: 0000000000000000 RSI: ffffffff8c27d4e0 RDI: ffff88802f589e80
[ 98.380353][ T6023] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
[ 98.388469][ T6023] R10: dffffc0000000000 R11: fffffbfff1cbd628 R12: dffffc0000000000
[ 98.396792][ T6023] R13: 000000000000bcdd R14: ffffea0000a29774 R15: dead000000000040
[ 98.404806][ T6023] FS: 0000555557107500(0000) GS:ffff88812544e000(0000) knlGS:0000000000000000
[ 98.413866][ T6023] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 98.420564][ T6023] CR2: 000020000000f000 CR3: 0000000076100000 CR4: 00000000003526f0
[ 98.428589][ T6023] Kernel panic - not syncing: Fatal exception in interrupt
[ 98.436203][ T6023] Kernel Offset: disabled
[ 98.440518][ T6023] Rebooting in 86400 seconds..