Warning: Permanently added '10.128.0.249' (ED25519) to the list of known hosts. 2026/02/01 14:14:59 parsed 1 programs [ 71.710714][ T5822] cgroup: Unknown subsys name 'net' [ 71.878676][ T5822] cgroup: Unknown subsys name 'cpuset' [ 71.887640][ T5822] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.269976][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.878159][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.390645][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 76.460600][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.468443][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.475788][ T5842] bridge_slave_0: entered allmulticast mode [ 76.482852][ T5842] bridge_slave_0: entered promiscuous mode [ 76.492074][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.499363][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.506647][ T5842] bridge_slave_1: entered allmulticast mode [ 76.514336][ T5842] bridge_slave_1: entered promiscuous mode [ 76.541692][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.552915][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.582446][ T5842] team0: Port device team_slave_0 added [ 76.591286][ T5842] team0: Port device team_slave_1 added [ 76.618686][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.626600][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.652592][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.665743][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.672711][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.698804][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.734762][ T5842] hsr_slave_0: entered promiscuous mode [ 76.741174][ T5842] hsr_slave_1: entered promiscuous mode [ 76.861869][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.873891][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.884431][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.894992][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.923988][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.931212][ T5842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.939287][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.946431][ T5842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.997940][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.014887][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.024412][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.039873][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.052445][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.059578][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.072950][ T4921] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.080137][ T4921] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.237660][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.274674][ T5842] veth0_vlan: entered promiscuous mode [ 77.285458][ T5842] veth1_vlan: entered promiscuous mode [ 77.311337][ T5842] veth0_macvtap: entered promiscuous mode [ 77.321938][ T5842] veth1_macvtap: entered promiscuous mode [ 77.343873][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.357114][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.373006][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.383190][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.393163][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.402481][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.548590][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.624239][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.697815][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.790782][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.183858][ T5884] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.192190][ T5884] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.204247][ T5884] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.212259][ T5884] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.220516][ T5884] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.421159][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.436916][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.466258][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.474329][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/02/01 14:15:10 executed programs: 0 [ 80.127800][ T5884] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.136104][ T5884] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.143762][ T5884] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.152912][ T5884] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.161287][ T5884] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.280420][ T5934] chnl_net:caif_netlink_parms(): no params data found [ 80.344309][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.351767][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.359247][ T5934] bridge_slave_0: entered allmulticast mode [ 80.366783][ T5934] bridge_slave_0: entered promiscuous mode [ 80.374842][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.382239][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.390302][ T5934] bridge_slave_1: entered allmulticast mode [ 80.397555][ T5934] bridge_slave_1: entered promiscuous mode [ 80.423070][ T5934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.434644][ T5934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.466324][ T5934] team0: Port device team_slave_0 added [ 80.473920][ T5934] team0: Port device team_slave_1 added [ 80.497284][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.504269][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.530743][ T5934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.542565][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.549771][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.576170][ T5934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.626499][ T5934] hsr_slave_0: entered promiscuous mode [ 80.632763][ T5934] hsr_slave_1: entered promiscuous mode [ 80.639067][ T5934] debugfs: 'hsr0' already exists in 'hsr' [ 80.644864][ T5934] Cannot create hsr debugfs directory [ 80.748988][ T13] bridge_slave_1: left allmulticast mode [ 80.754766][ T13] bridge_slave_1: left promiscuous mode [ 80.762606][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.774308][ T13] bridge_slave_0: left allmulticast mode [ 80.781076][ T13] bridge_slave_0: left promiscuous mode [ 80.786863][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.986621][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.998218][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.008911][ T13] bond0 (unregistering): Released all slaves [ 81.122527][ T13] hsr_slave_0: left promiscuous mode [ 81.129566][ T13] hsr_slave_1: left promiscuous mode [ 81.136956][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.144721][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.153222][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.161694][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.178260][ T13] veth1_macvtap: left promiscuous mode [ 81.184086][ T13] veth0_macvtap: left promiscuous mode [ 81.190059][ T13] veth1_vlan: left promiscuous mode [ 81.195665][ T13] veth0_vlan: left promiscuous mode [ 81.504962][ T13] team0 (unregistering): Port device team_slave_1 removed [ 81.534596][ T13] team0 (unregistering): Port device team_slave_0 removed [ 82.139205][ T5934] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.153917][ T5934] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.173923][ T5934] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.185945][ T5934] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.196802][ T5143] Bluetooth: hci0: command tx timeout [ 82.323628][ T5934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.723451][ T5934] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.744930][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.752106][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.797444][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.804741][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.245502][ T5934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.356413][ T5934] veth0_vlan: entered promiscuous mode [ 83.373033][ T5934] veth1_vlan: entered promiscuous mode [ 83.462024][ T5934] veth0_macvtap: entered promiscuous mode [ 83.472779][ T5934] veth1_macvtap: entered promiscuous mode [ 83.488529][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.506614][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.520618][ T1161] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.531441][ T1161] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.542419][ T1161] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.552109][ T1161] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.626568][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.634413][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.689175][ T4921] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.698794][ T4921] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.779265][ T5981] BUG: Bad page state in process syz.0.17 pfn:7685a [ 83.786131][ T5981] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807685a000 pfn:0x7685a [ 83.796254][ T5981] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 83.803384][ T5981] raw: 00fff00000000000 dead000000000040 ffff8880206a3000 0000000000000000 [ 83.812072][ T5981] raw: ffff88807685a000 3fffffffffffffff 00000000ffffffff 0000000000000000 [ 83.820696][ T5981] page dumped because: page_pool leak [ 83.826109][ T5981] page_owner tracks the page as allocated [ 83.831961][ T5981] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5981, tgid 5981 (syz.0.17), ts 83779099667, free_ts 83756589044 [ 83.848680][ T5981] post_alloc_hook+0x228/0x280 [ 83.853471][ T5981] get_page_from_freelist+0x24dc/0x2580 [ 83.859073][ T5981] __alloc_frozen_pages_noprof+0x18d/0x380 [ 83.864893][ T5981] alloc_pages_bulk_noprof+0x558/0x700 [ 83.870454][ T5981] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 83.876594][ T5981] page_pool_alloc_frag_netmem+0x421/0x9b0 [ 83.882501][ T5981] skb_pp_cow_data+0xc43/0x1680 [ 83.887533][ T5981] do_xdp_generic+0x715/0x1280 [ 83.892410][ T5981] tun_get_user+0x247d/0x3dd0 [ 83.897162][ T5981] tun_chr_write_iter+0x113/0x200 [ 83.902199][ T5981] vfs_write+0x61d/0xb90 [ 83.906475][ T5981] ksys_write+0x150/0x270 [ 83.910821][ T5981] do_syscall_64+0xe2/0xf80 [ 83.915378][ T5981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.921274][ T5981] page last free pid 23 tgid 23 stack trace: [ 83.927293][ T5981] __free_frozen_pages+0xbf8/0xd70 [ 83.932412][ T5981] rcu_core+0xc9e/0x1750 [ 83.936688][ T5981] handle_softirqs+0x22a/0x7c0 [ 83.941452][ T5981] run_ksoftirqd+0x36/0x60 [ 83.945993][ T5981] smpboot_thread_fn+0x541/0xa50 [ 83.950930][ T5981] kthread+0x726/0x8b0 [ 83.954982][ T5981] ret_from_fork+0x51b/0xa40 [ 83.959621][ T5981] ret_from_fork_asm+0x1a/0x30 [ 83.964396][ T5981] Modules linked in: [ 83.968381][ T5981] CPU: 1 UID: 0 PID: 5981 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 83.968400][ T5981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 83.968415][ T5981] Call Trace: [ 83.968422][ T5981] [ 83.968428][ T5981] dump_stack_lvl+0xe8/0x150 [ 83.968452][ T5981] bad_page+0x17f/0x1c0 [ 83.968472][ T5981] __free_frozen_pages+0xd28/0xd70 [ 83.968495][ T5981] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 83.968533][ T5981] bpf_xdp_adjust_tail+0x1d6/0x220 [ 83.968557][ T5981] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 83.968579][ T5981] bpf_prog_run_generic_xdp+0x623/0x13f0 [ 83.968621][ T5981] do_xdp_generic+0xa6f/0x1280 [ 83.968637][ T5981] ? __lock_acquire+0x6b5/0x2cf0 [ 83.968669][ T5981] ? __pfx_do_xdp_generic+0x10/0x10 [ 83.968695][ T5981] ? tun_get_user+0x2354/0x3dd0 [ 83.968726][ T5981] ? tun_get_user+0x2354/0x3dd0 [ 83.968743][ T5981] tun_get_user+0x247d/0x3dd0 [ 83.968770][ T5981] ? aa_file_perm+0x12d/0x1630 [ 83.968795][ T5981] ? aa_file_perm+0x440/0x1630 [ 83.968813][ T5981] ? __pfx_tun_get_user+0x10/0x10 [ 83.968832][ T5981] ? __lock_acquire+0x6b5/0x2cf0 [ 83.968865][ T5981] ? ref_tracker_alloc+0x363/0x4d0 [ 83.968888][ T5981] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 83.968908][ T5981] ? tun_get+0x1c/0x2f0 [ 83.968925][ T5981] ? tun_get+0x1c/0x2f0 [ 83.968946][ T5981] ? tun_get+0x1c/0x2f0 [ 83.968962][ T5981] ? tun_get+0x1c/0x2f0 [ 83.968983][ T5981] tun_chr_write_iter+0x113/0x200 [ 83.969003][ T5981] vfs_write+0x61d/0xb90 [ 83.969033][ T5981] ? __pfx_vfs_write+0x10/0x10 [ 83.969056][ T5981] ? __pfx_do_futex+0x10/0x10 [ 83.969091][ T5981] ksys_write+0x150/0x270 [ 83.969116][ T5981] ? __pfx_ksys_write+0x10/0x10 [ 83.969147][ T5981] do_syscall_64+0xe2/0xf80 [ 83.969166][ T5981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.969181][ T5981] ? trace_irq_disable+0x37/0x100 [ 83.969197][ T5981] ? clear_bhb_loop+0x60/0xb0 [ 83.969216][ T5981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.969231][ T5981] RIP: 0033:0x7f982df5b78e [ 83.969246][ T5981] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 83.969259][ T5981] RSP: 002b:00007ffef5a5ec88 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 83.969276][ T5981] RAX: ffffffffffffffda RBX: 0000555574cf6500 RCX: 00007f982df5b78e [ 83.969288][ T5981] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8 [ 83.969299][ T5981] RBP: 00007f982e008c1f R08: 0000000000000000 R09: 0000000000000000 [ 83.969309][ T5981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.969318][ T5981] R13: 00007f982e215fac R14: 00007f982e215fa0 R15: 00007f982e215fa0 [ 83.969346][ T5981] [ 83.969360][ T5981] Disabling lock debugging due to kernel taint [ 84.242149][ T5981] BUG: Bad page state in process syz.0.17 pfn:7686e [ 84.248921][ T5981] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807686e000 pfn:0x7686e [ 84.259014][ T5981] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 84.266166][ T5981] raw: 00fff00000000000 dead000000000040 ffff8880206a3000 0000000000000000 [ 84.274749][ T5981] raw: ffff88807686e000 0000000000000001 00000000ffffffff 0000000000000000 [ 84.283432][ T5981] page dumped because: page_pool leak [ 84.285331][ T5143] Bluetooth: hci0: command tx timeout [ 84.288815][ T5981] page_owner tracks the page as allocated [ 84.299894][ T5981] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5981, tgid 5981 (syz.0.17), ts 83779078875, free_ts 83756602334 [ 84.316677][ T5981] post_alloc_hook+0x228/0x280 [ 84.321559][ T5981] get_page_from_freelist+0x24dc/0x2580 [ 84.327138][ T5981] __alloc_frozen_pages_noprof+0x18d/0x380 [ 84.332947][ T5981] alloc_pages_bulk_noprof+0x558/0x700 [ 84.338545][ T5981] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 84.344633][ T5981] skb_pp_cow_data+0xc21/0x1680 [ 84.349504][ T5981] do_xdp_generic+0x715/0x1280 [ 84.354276][ T5981] tun_get_user+0x247d/0x3dd0 [ 84.358982][ T5981] tun_chr_write_iter+0x113/0x200 [ 84.364011][ T5981] vfs_write+0x61d/0xb90 [ 84.368353][ T5981] ksys_write+0x150/0x270 [ 84.372703][ T5981] do_syscall_64+0xe2/0xf80 [ 84.377280][ T5981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.383181][ T5981] page last free pid 23 tgid 23 stack trace: [ 84.389184][ T5981] __free_frozen_pages+0xbf8/0xd70 [ 84.394298][ T5981] rcu_core+0xc9e/0x1750 [ 84.398562][ T5981] handle_softirqs+0x22a/0x7c0 [ 84.403413][ T5981] run_ksoftirqd+0x36/0x60 [ 84.407927][ T5981] smpboot_thread_fn+0x541/0xa50 [ 84.412863][ T5981] kthread+0x726/0x8b0 [ 84.416947][ T5981] ret_from_fork+0x51b/0xa40 [ 84.421536][ T5981] ret_from_fork_asm+0x1a/0x30 [ 84.426328][ T5981] Modules linked in: [ 84.430276][ T5981] CPU: 1 UID: 0 PID: 5981 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full) [ 84.430292][ T5981] Tainted: [B]=BAD_PAGE [ 84.430295][ T5981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 84.430301][ T5981] Call Trace: [ 84.430305][ T5981] [ 84.430310][ T5981] dump_stack_lvl+0xe8/0x150 [ 84.430324][ T5981] bad_page+0x17f/0x1c0 [ 84.430338][ T5981] __free_frozen_pages+0xd28/0xd70 [ 84.430349][ T5981] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 84.430368][ T5981] bpf_xdp_adjust_tail+0x1d6/0x220 [ 84.430382][ T5981] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 84.430391][ T5981] bpf_prog_run_generic_xdp+0x623/0x13f0 [ 84.430405][ T5981] do_xdp_generic+0xa6f/0x1280 [ 84.430413][ T5981] ? __lock_acquire+0x6b5/0x2cf0 [ 84.430428][ T5981] ? __pfx_do_xdp_generic+0x10/0x10 [ 84.430439][ T5981] ? tun_get_user+0x2354/0x3dd0 [ 84.430452][ T5981] ? tun_get_user+0x2354/0x3dd0 [ 84.430461][ T5981] tun_get_user+0x247d/0x3dd0 [ 84.430473][ T5981] ? aa_file_perm+0x12d/0x1630 [ 84.430486][ T5981] ? aa_file_perm+0x440/0x1630 [ 84.430498][ T5981] ? __pfx_tun_get_user+0x10/0x10 [ 84.430507][ T5981] ? __lock_acquire+0x6b5/0x2cf0 [ 84.430522][ T5981] ? ref_tracker_alloc+0x363/0x4d0 [ 84.430535][ T5981] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 84.430546][ T5981] ? tun_get+0x1c/0x2f0 [ 84.430555][ T5981] ? tun_get+0x1c/0x2f0 [ 84.430565][ T5981] ? tun_get+0x1c/0x2f0 [ 84.430573][ T5981] ? tun_get+0x1c/0x2f0 [ 84.430583][ T5981] tun_chr_write_iter+0x113/0x200 [ 84.430593][ T5981] vfs_write+0x61d/0xb90 [ 84.430608][ T5981] ? __pfx_vfs_write+0x10/0x10 [ 84.430622][ T5981] ? __pfx_do_futex+0x10/0x10 [ 84.430638][ T5981] ksys_write+0x150/0x270 [ 84.430652][ T5981] ? __pfx_ksys_write+0x10/0x10 [ 84.430667][ T5981] do_syscall_64+0xe2/0xf80 [ 84.430679][ T5981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.430688][ T5981] ? trace_irq_disable+0x37/0x100 [ 84.430697][ T5981] ? clear_bhb_loop+0x60/0xb0 [ 84.430708][ T5981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.430716][ T5981] RIP: 0033:0x7f982df5b78e [ 84.430725][ T5981] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 84.430733][ T5981] RSP: 002b:00007ffef5a5ec88 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 84.430744][ T5981] RAX: ffffffffffffffda RBX: 0000555574cf6500 RCX: 00007f982df5b78e [ 84.430750][ T5981] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8 [ 84.430756][ T5981] RBP: 00007f982e008c1f R08: 0000000000000000 R09: 0000000000000000 [ 84.430762][ T5981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.430767][ T5981] R13: 00007f982e215fac R14: 00007f982e215fa0 R15: 00007f982e215fa0 [ 84.430777][ T5981] [ 84.430785][ T5981] BUG: Bad page state in process syz.0.17 pfn:7686d [ 84.709711][ T5981] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807686d000 pfn:0x7686d [ 84.719795][ T5981] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 84.726932][ T5981] raw: 00fff00000000000 dead000000000040 ffff8880206a3000 0000000000000000 [ 84.735539][ T5981] raw: ffff88807686d000 0000000000000001 00000000ffffffff 0000000000000000 [ 84.744110][ T5981] page dumped because: page_pool leak [ 84.749515][ T5981] page_owner tracks the page as allocated [ 84.755339][ T5981] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5981, tgid 5981 (syz.0.17), ts 83779063371, free_ts 83756614695 [ 84.772038][ T5981] post_alloc_hook+0x228/0x280 [ 84.776845][ T5981] get_page_from_freelist+0x24dc/0x2580 [ 84.782473][ T5981] __alloc_frozen_pages_noprof+0x18d/0x380 [ 84.788299][ T5981] alloc_pages_bulk_noprof+0x558/0x700 [ 84.793753][ T5981] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 84.799845][ T5981] skb_pp_cow_data+0xc21/0x1680 [ 84.804698][ T5981] do_xdp_generic+0x715/0x1280 [ 84.809494][ T5981] tun_get_user+0x247d/0x3dd0 [ 84.814179][ T5981] tun_chr_write_iter+0x113/0x200 [ 84.819220][ T5981] vfs_write+0x61d/0xb90 [ 84.823467][ T5981] ksys_write+0x150/0x270 [ 84.827917][ T5981] do_syscall_64+0xe2/0xf80 [ 84.832413][ T5981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.838324][ T5981] page last free pid 23 tgid 23 stack trace: [ 84.844295][ T5981] __free_frozen_pages+0xbf8/0xd70 [ 84.849444][ T5981] rcu_core+0xc9e/0x1750 [ 84.853703][ T5981] handle_softirqs+0x22a/0x7c0 [ 84.858490][ T5981] run_ksoftirqd+0x36/0x60 [ 84.862912][ T5981] smpboot_thread_fn+0x541/0xa50 [ 84.867907][ T5981] kthread+0x726/0x8b0 [ 84.871984][ T5981] ret_from_fork+0x51b/0xa40 [ 84.876610][ T5981] ret_from_fork_asm+0x1a/0x30 [ 84.881387][ T5981] Modules linked in: [ 84.885324][ T5981] CPU: 1 UID: 0 PID: 5981 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full) [ 84.885349][ T5981] Tainted: [B]=BAD_PAGE [ 84.885353][ T5981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 84.885361][ T5981] Call Trace: [ 84.885366][ T5981] [ 84.885372][ T5981] dump_stack_lvl+0xe8/0x150 [ 84.885393][ T5981] bad_page+0x17f/0x1c0 [ 84.885411][ T5981] __free_frozen_pages+0xd28/0xd70 [ 84.885446][ T5981] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 84.885476][ T5981] bpf_xdp_adjust_tail+0x1d6/0x220 [ 84.885499][ T5981] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 84.885514][ T5981] bpf_prog_run_generic_xdp+0x623/0x13f0 [ 84.885542][ T5981] do_xdp_generic+0xa6f/0x1280 [ 84.885557][ T5981] ? __lock_acquire+0x6b5/0x2cf0 [ 84.885581][ T5981] ? __pfx_do_xdp_generic+0x10/0x10 [ 84.885600][ T5981] ? tun_get_user+0x2354/0x3dd0 [ 84.885622][ T5981] ? tun_get_user+0x2354/0x3dd0 [ 84.885638][ T5981] tun_get_user+0x247d/0x3dd0 [ 84.885658][ T5981] ? aa_file_perm+0x12d/0x1630 [ 84.885679][ T5981] ? aa_file_perm+0x440/0x1630 [ 84.885697][ T5981] ? __pfx_tun_get_user+0x10/0x10 [ 84.885712][ T5981] ? __lock_acquire+0x6b5/0x2cf0 [ 84.885736][ T5981] ? ref_tracker_alloc+0x363/0x4d0 [ 84.885756][ T5981] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 84.885774][ T5981] ? tun_get+0x1c/0x2f0 [ 84.885789][ T5981] ? tun_get+0x1c/0x2f0 [ 84.885807][ T5981] ? tun_get+0x1c/0x2f0 [ 84.885821][ T5981] ? tun_get+0x1c/0x2f0 [ 84.885836][ T5981] tun_chr_write_iter+0x113/0x200 [ 84.885851][ T5981] vfs_write+0x61d/0xb90 [ 84.885872][ T5981] ? __pfx_vfs_write+0x10/0x10 [ 84.885889][ T5981] ? __pfx_do_futex+0x10/0x10 [ 84.885915][ T5981] ksys_write+0x150/0x270 [ 84.885935][ T5981] ? __pfx_ksys_write+0x10/0x10 [ 84.885959][ T5981] do_syscall_64+0xe2/0xf80 [ 84.885978][ T5981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.885993][ T5981] ? trace_irq_disable+0x37/0x100 [ 84.886009][ T5981] ? clear_bhb_loop+0x60/0xb0 [ 84.886026][ T5981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.886041][ T5981] RIP: 0033:0x7f982df5b78e [ 84.886056][ T5981] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 84.886068][ T5981] RSP: 002b:00007ffef5a5ec88 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 84.886086][ T5981] RAX: ffffffffffffffda RBX: 0000555574cf6500 RCX: 00007f982df5b78e [ 84.886097][ T5981] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8 [ 84.886106][ T5981] RBP: 00007f982e008c1f R08: 0000000000000000 R09: 0000000000000000 [ 84.886116][ T5981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.886143][ T5981] R13: 00007f982e215fac R14: 00007f982e215fa0 R15: 00007f982e215fa0 [ 84.886160][ T5981] [ 84.886170][ T5981] BUG: Bad page state in process syz.0.17 pfn:797ea [ 85.166413][ T5981] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880797ea880 pfn:0x797ea [ 85.176520][ T5981] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 85.183646][ T5981] raw: 00fff00000000000 dead000000000040 ffff8880206a3000 0000000000000000 [ 85.192280][ T5981] raw: ffff8880797ea880 0000000000000001 00000000ffffffff 0000000000000000 [ 85.200886][ T5981] page dumped because: page_pool leak [ 85.206373][ T5981] page_owner tracks the page as allocated [ 85.212192][ T5981] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5981, tgid 5981 (syz.0.17), ts 83779046491, free_ts 83756625852 [ 85.228899][ T5981] post_alloc_hook+0x228/0x280 [ 85.233673][ T5981] get_page_from_freelist+0x24dc/0x2580 [ 85.239257][ T5981] __alloc_frozen_pages_noprof+0x18d/0x380 [ 85.245065][ T5981] alloc_pages_bulk_noprof+0x558/0x700 [ 85.250817][ T5981] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 85.256944][ T5981] skb_pp_cow_data+0xc21/0x1680 [ 85.261966][ T5981] do_xdp_generic+0x715/0x1280 [ 85.266787][ T5981] tun_get_user+0x247d/0x3dd0 [ 85.271566][ T5981] tun_chr_write_iter+0x113/0x200 [ 85.276621][ T5981] vfs_write+0x61d/0xb90 [ 85.280996][ T5981] ksys_write+0x150/0x270 [ 85.285418][ T5981] do_syscall_64+0xe2/0xf80 [ 85.289928][ T5981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.295846][ T5981] page last free pid 23 tgid 23 stack trace: [ 85.301820][ T5981] __free_frozen_pages+0xbf8/0xd70 [ 85.306961][ T5981] rcu_core+0xc9e/0x1750 [ 85.311260][ T5981] handle_softirqs+0x22a/0x7c0 [ 85.316050][ T5981] run_ksoftirqd+0x36/0x60 [ 85.320470][ T5981] smpboot_thread_fn+0x541/0xa50 [ 85.325463][ T5981] kthread+0x726/0x8b0 [ 85.329545][ T5981] ret_from_fork+0x51b/0xa40 [ 85.334155][ T5981] ret_from_fork_asm+0x1a/0x30 [ 85.339025][ T5981] Modules linked in: [ 85.342949][ T5981] CPU: 1 UID: 0 PID: 5981 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full) [ 85.342966][ T5981] Tainted: [B]=BAD_PAGE [ 85.342969][ T5981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 85.342975][ T5981] Call Trace: [ 85.342979][ T5981] [ 85.342983][ T5981] dump_stack_lvl+0xe8/0x150 [ 85.342999][ T5981] bad_page+0x17f/0x1c0 [ 85.343012][ T5981] __free_frozen_pages+0xd28/0xd70 [ 85.343023][ T5981] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 85.343042][ T5981] bpf_xdp_adjust_tail+0x1d6/0x220 [ 85.343056][ T5981] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 85.343065][ T5981] bpf_prog_run_generic_xdp+0x623/0x13f0 [ 85.343080][ T5981] do_xdp_generic+0xa6f/0x1280 [ 85.343088][ T5981] ? __lock_acquire+0x6b5/0x2cf0 [ 85.343103][ T5981] ? __pfx_do_xdp_generic+0x10/0x10 [ 85.343114][ T5981] ? tun_get_user+0x2354/0x3dd0 [ 85.343127][ T5981] ? tun_get_user+0x2354/0x3dd0 [ 85.343136][ T5981] tun_get_user+0x247d/0x3dd0 [ 85.343148][ T5981] ? aa_file_perm+0x12d/0x1630 [ 85.343161][ T5981] ? aa_file_perm+0x440/0x1630 [ 85.343233][ T5981] ? __pfx_tun_get_user+0x10/0x10 [ 85.343244][ T5981] ? __lock_acquire+0x6b5/0x2cf0 [ 85.343259][ T5981] ? ref_tracker_alloc+0x363/0x4d0 [ 85.343271][ T5981] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 85.343282][ T5981] ? tun_get+0x1c/0x2f0 [ 85.343291][ T5981] ? tun_get+0x1c/0x2f0 [ 85.343301][ T5981] ? tun_get+0x1c/0x2f0 [ 85.343309][ T5981] ? tun_get+0x1c/0x2f0 [ 85.343319][ T5981] tun_chr_write_iter+0x113/0x200 [ 85.343328][ T5981] vfs_write+0x61d/0xb90 [ 85.343344][ T5981] ? __pfx_vfs_write+0x10/0x10 [ 85.343356][ T5981] ? __pfx_do_futex+0x10/0x10 [ 85.343372][ T5981] ksys_write+0x150/0x270 [ 85.343386][ T5981] ? __pfx_ksys_write+0x10/0x10 [ 85.343401][ T5981] do_syscall_64+0xe2/0xf80 [ 85.343413][ T5981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.343424][ T5981] ? trace_irq_disable+0x37/0x100 [ 85.343433][ T5981] ? clear_bhb_loop+0x60/0xb0 [ 85.343443][ T5981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.343452][ T5981] RIP: 0033:0x7f982df5b78e [ 85.343462][ T5981] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 85.343469][ T5981] RSP: 002b:00007ffef5a5ec88 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 85.343480][ T5981] RAX: ffffffffffffffda RBX: 0000555574cf6500 RCX: 00007f982df5b78e [ 85.343487][ T5981] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8 [ 85.343493][ T5981] RBP: 00007f982e008c1f R08: 0000000000000000 R09: 0000000000000000 [ 85.343498][ T5981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.343504][ T5981] R13: 00007f982e215fac R14: 00007f982e215fa0 R15: 00007f982e215fa0 [ 85.343513][ T5981] [ 85.343521][ T5981] BUG: Bad page state in process syz.0.17 pfn:76849 [ 85.623724][ T5981] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888076849000 pfn:0x76849 [ 85.633818][ T5981] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 85.641169][ T5981] raw: 00fff00000000000 dead000000000040 ffff8880206a3000 0000000000000000 [ 85.649798][ T5981] raw: ffff888076849000 0000000000000001 00000000ffffffff 0000000000000000 [ 85.658625][ T5981] page dumped because: page_pool leak [ 85.664070][ T5981] page_owner tracks the page as allocated [ 85.669856][ T5981] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5981, tgid 5981 (syz.0.17), ts 83779030400, free_ts 83756638724 [ 85.687257][ T5981] post_alloc_hook+0x228/0x280 [ 85.692119][ T5981] get_page_from_freelist+0x24dc/0x2580 [ 85.697684][ T5981] __alloc_frozen_pages_noprof+0x18d/0x380 [ 85.703491][ T5981] alloc_pages_bulk_noprof+0x558/0x700 [ 85.708972][ T5981] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 85.715342][ T5981] skb_pp_cow_data+0xc21/0x1680 [ 85.720218][ T5981] do_xdp_generic+0x715/0x1280 [ 85.724980][ T5981] tun_get_user+0x247d/0x3dd0 [ 85.729715][ T5981] tun_chr_write_iter+0x113/0x200 [ 85.734746][ T5981] vfs_write+0x61d/0xb90 [ 85.739014][ T5981] ksys_write+0x150/0x270 [ 85.743347][ T5981] do_syscall_64+0xe2/0xf80 [ 85.747870][ T5981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.753767][ T5981] page last free pid 23 tgid 23 stack trace: [ 85.759766][ T5981] __free_frozen_pages+0xbf8/0xd70 [ 85.764902][ T5981] rcu_core+0xc9e/0x1750 [ 85.769180][ T5981] handle_softirqs+0x22a/0x7c0 [ 85.773943][ T5981] run_ksoftirqd+0x36/0x60 [ 85.778375][ T5981] smpboot_thread_fn+0x541/0xa50 [ 85.783504][ T5981] kthread+0x726/0x8b0 [ 85.787605][ T5981] ret_from_fork+0x51b/0xa40 [ 85.792211][ T5981] ret_from_fork_asm+0x1a/0x30 [ 85.797008][ T5981] Modules linked in: [ 85.800903][ T5981] CPU: 1 UID: 0 PID: 5981 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full) [ 85.800918][ T5981] Tainted: [B]=BAD_PAGE [ 85.800922][ T5981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 85.800927][ T5981] Call Trace: [ 85.800932][ T5981] [ 85.800936][ T5981] dump_stack_lvl+0xe8/0x150 [ 85.800951][ T5981] bad_page+0x17f/0x1c0 [ 85.800964][ T5981] __free_frozen_pages+0xd28/0xd70 [ 85.800975][ T5981] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 85.800995][ T5981] bpf_xdp_adjust_tail+0x1d6/0x220 [ 85.801009][ T5981] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 85.801018][ T5981] bpf_prog_run_generic_xdp+0x623/0x13f0 [ 85.801032][ T5981] do_xdp_generic+0xa6f/0x1280 [ 85.801040][ T5981] ? __lock_acquire+0x6b5/0x2cf0 [ 85.801056][ T5981] ? __pfx_do_xdp_generic+0x10/0x10 [ 85.801066][ T5981] ? tun_get_user+0x2354/0x3dd0 [ 85.801079][ T5981] ? tun_get_user+0x2354/0x3dd0 [ 85.801088][ T5981] tun_get_user+0x247d/0x3dd0 [ 85.801100][ T5981] ? aa_file_perm+0x12d/0x1630 [ 85.801114][ T5981] ? aa_file_perm+0x440/0x1630 [ 85.801125][ T5981] ? __pfx_tun_get_user+0x10/0x10 [ 85.801135][ T5981] ? __lock_acquire+0x6b5/0x2cf0 [ 85.801150][ T5981] ? ref_tracker_alloc+0x363/0x4d0 [ 85.801162][ T5981] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 85.801173][ T5981] ? tun_get+0x1c/0x2f0 [ 85.801182][ T5981] ? tun_get+0x1c/0x2f0 [ 85.801200][ T5981] ? tun_get+0x1c/0x2f0 [ 85.801209][ T5981] ? tun_get+0x1c/0x2f0 [ 85.801219][ T5981] tun_chr_write_iter+0x113/0x200 [ 85.801229][ T5981] vfs_write+0x61d/0xb90 [ 85.801245][ T5981] ? __pfx_vfs_write+0x10/0x10 [ 85.801258][ T5981] ? __pfx_do_futex+0x10/0x10 [ 85.801274][ T5981] ksys_write+0x150/0x270 [ 85.801288][ T5981] ? __pfx_ksys_write+0x10/0x10 [ 85.801303][ T5981] do_syscall_64+0xe2/0xf80 [ 85.801315][ T5981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.801324][ T5981] ? trace_irq_disable+0x37/0x100 [ 85.801333][ T5981] ? clear_bhb_loop+0x60/0xb0 [ 85.801343][ T5981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.801352][ T5981] RIP: 0033:0x7f982df5b78e [ 85.801361][ T5981] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 85.801369][ T5981] RSP: 002b:00007ffef5a5ec88 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 85.801379][ T5981] RAX: ffffffffffffffda RBX: 0000555574cf6500 RCX: 00007f982df5b78e [ 85.801386][ T5981] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8 [ 85.801392][ T5981] RBP: 00007f982e008c1f R08: 0000000000000000 R09: 0000000000000000 [ 85.801398][ T5981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.801404][ T5981] R13: 00007f982e215fac R14: 00007f982e215fa0 R15: 00007f982e215fa0 [ 85.801413][ T5981] [ 85.801420][ T5981] BUG: Bad page state in process syz.0.17 pfn:76fe9 [ 86.080438][ T5981] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888076fe9ee0 pfn:0x76fe9 [ 86.090710][ T5981] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 86.097866][ T5981] raw: 00fff00000000000 dead000000000040 ffff8880206a3000 0000000000000000 [ 86.106476][ T5981] raw: ffff888076fe9ee0 0000000000000001 00000000ffffffff 0000000000000000 [ 86.115053][ T5981] page dumped because: page_pool leak [ 86.120455][ T5981] page_owner tracks the page as allocated [ 86.126196][ T5981] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5981, tgid 5981 (syz.0.17), ts 83779014010, free_ts 83756651007 [ 86.143165][ T5981] post_alloc_hook+0x228/0x280 [ 86.147955][ T5981] get_page_from_freelist+0x24dc/0x2580 [ 86.153516][ T5981] __alloc_frozen_pages_noprof+0x18d/0x380 [ 86.159347][ T5981] alloc_pages_bulk_noprof+0x558/0x700 [ 86.164806][ T5981] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 86.170906][ T5981] skb_pp_cow_data+0xc21/0x1680 [ 86.175780][ T5981] do_xdp_generic+0x715/0x1280 [ 86.180550][ T5981] tun_get_user+0x247d/0x3dd0 [ 86.185332][ T5981] tun_chr_write_iter+0x113/0x200 [ 86.190358][ T5981] vfs_write+0x61d/0xb90 [ 86.194588][ T5981] ksys_write+0x150/0x270 [ 86.198987][ T5981] do_syscall_64+0xe2/0xf80 [ 86.203523][ T5981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.209464][ T5981] page last free pid 23 tgid 23 stack trace: [ 86.215458][ T5981] __free_frozen_pages+0xbf8/0xd70 [ 86.220643][ T5981] rcu_core+0xc9e/0x1750 [ 86.224868][ T5981] handle_softirqs+0x22a/0x7c0 [ 86.229648][ T5981] run_ksoftirqd+0x36/0x60 [ 86.234150][ T5981] smpboot_thread_fn+0x541/0xa50 [ 86.239202][ T5981] kthread+0x726/0x8b0 [ 86.243271][ T5981] ret_from_fork+0x51b/0xa40 [ 86.247893][ T5981] ret_from_fork_asm+0x1a/0x30 [ 86.252660][ T5981] Modules linked in: [ 86.256588][ T5981] CPU: 1 UID: 0 PID: 5981 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full) [ 86.256610][ T5981] Tainted: [B]=BAD_PAGE [ 86.256615][ T5981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 86.256622][ T5981] Call Trace: [ 86.256627][ T5981] [ 86.256633][ T5981] dump_stack_lvl+0xe8/0x150 [ 86.256653][ T5981] bad_page+0x17f/0x1c0 [ 86.256671][ T5981] __free_frozen_pages+0xd28/0xd70 [ 86.256689][ T5981] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 86.256721][ T5981] bpf_xdp_adjust_tail+0x1d6/0x220 [ 86.256743][ T5981] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 86.256758][ T5981] bpf_prog_run_generic_xdp+0x623/0x13f0 [ 86.256783][ T5981] do_xdp_generic+0xa6f/0x1280 [ 86.256798][ T5981] ? __lock_acquire+0x6b5/0x2cf0 [ 86.256819][ T5981] ? __pfx_do_xdp_generic+0x10/0x10 [ 86.256836][ T5981] ? tun_get_user+0x2354/0x3dd0 [ 86.256858][ T5981] ? tun_get_user+0x2354/0x3dd0 [ 86.256873][ T5981] tun_get_user+0x247d/0x3dd0 [ 86.256894][ T5981] ? aa_file_perm+0x12d/0x1630 [ 86.256931][ T5981] ? aa_file_perm+0x440/0x1630 [ 86.256950][ T5981] ? __pfx_tun_get_user+0x10/0x10 [ 86.256966][ T5981] ? __lock_acquire+0x6b5/0x2cf0 [ 86.256991][ T5981] ? ref_tracker_alloc+0x363/0x4d0 [ 86.257011][ T5981] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 86.257030][ T5981] ? tun_get+0x1c/0x2f0 [ 86.257045][ T5981] ? tun_get+0x1c/0x2f0 [ 86.257062][ T5981] ? tun_get+0x1c/0x2f0 [ 86.257075][ T5981] ? tun_get+0x1c/0x2f0 [ 86.257097][ T5981] tun_chr_write_iter+0x113/0x200 [ 86.257110][ T5981] vfs_write+0x61d/0xb90 [ 86.257144][ T5981] ? __pfx_vfs_write+0x10/0x10 [ 86.257165][ T5981] ? __pfx_do_futex+0x10/0x10 [ 86.257191][ T5981] ksys_write+0x150/0x270 [ 86.257212][ T5981] ? __pfx_ksys_write+0x10/0x10 [ 86.257236][ T5981] do_syscall_64+0xe2/0xf80 [ 86.257255][ T5981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.257270][ T5981] ? trace_irq_disable+0x37/0x100 [ 86.257285][ T5981] ? clear_bhb_loop+0x60/0xb0 [ 86.257302][ T5981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.257317][ T5981] RIP: 0033:0x7f982df5b78e [ 86.257330][ T5981] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 86.257343][ T5981] RSP: 002b:00007ffef5a5ec88 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 86.257360][ T5981] RAX: ffffffffffffffda RBX: 0000555574cf6500 RCX: 00007f982df5b78e [ 86.257371][ T5981] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8 [ 86.257381][ T5981] RBP: 00007f982e008c1f R08: 0000000000000000 R09: 0000000000000000 [ 86.257390][ T5981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.257400][ T5981] R13: 00007f982e215fac R14: 00007f982e215fa0 R15: 00007f982e215fa0 [ 86.257419][ T5981] [ 86.257429][ T5981] BUG: Bad page state in process syz.0.17 pfn:76852 [ 86.365510][ T5143] Bluetooth: hci0: command tx timeout [ 86.368557][ T5981] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888076852000 pfn:0x76852 [ 86.552418][ T5981] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 86.559554][ T5981] raw: 00fff00000000000 dead000000000040 ffff8880206a3000 0000000000000000 [ 86.568169][ T5981] raw: ffff888076852000 0000000000000001 00000000ffffffff 0000000000000000 [ 86.576790][ T5981] page dumped because: page_pool leak [ 86.582183][ T5981] page_owner tracks the page as allocated [ 86.588072][ T5981] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5981, tgid 5981 (syz.0.17), ts 83778997701, free_ts 83756663368 [ 86.604777][ T5981] post_alloc_hook+0x228/0x280 [ 86.609565][ T5981] get_page_from_freelist+0x24dc/0x2580 [ 86.615122][ T5981] __alloc_frozen_pages_noprof+0x18d/0x380 [ 86.621007][ T5981] alloc_pages_bulk_noprof+0x558/0x700 [ 86.626492][ T5981] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 86.633245][ T5981] skb_pp_cow_data+0xc21/0x1680 [ 86.638137][ T5981] do_xdp_generic+0x715/0x1280 [ 86.642905][ T5981] tun_get_user+0x247d/0x3dd0 [ 86.647618][ T5981] tun_chr_write_iter+0x113/0x200 [ 86.652638][ T5981] vfs_write+0x61d/0xb90 [ 86.656992][ T5981] ksys_write+0x150/0x270 [ 86.661324][ T5981] do_syscall_64+0xe2/0xf80 [ 86.665855][ T5981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.671746][ T5981] page last free pid 23 tgid 23 stack trace: [ 86.677765][ T5981] __free_frozen_pages+0xbf8/0xd70 [ 86.682885][ T5981] rcu_core+0xc9e/0x1750 [ 86.687180][ T5981] handle_softirqs+0x22a/0x7c0 [ 86.691959][ T5981] run_ksoftirqd+0x36/0x60 [ 86.696401][ T5981] smpboot_thread_fn+0x541/0xa50 [ 86.701337][ T5981] kthread+0x726/0x8b0 [ 86.705524][ T5981] ret_from_fork+0x51b/0xa40 [ 86.710119][ T5981] ret_from_fork_asm+0x1a/0x30 [ 86.714870][ T5981] Modules linked in: [ 86.718789][ T5981] CPU: 1 UID: 0 PID: 5981 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full) [ 86.718811][ T5981] Tainted: [B]=BAD_PAGE [ 86.718817][ T5981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 86.718827][ T5981] Call Trace: [ 86.718836][ T5981] [ 86.718844][ T5981] dump_stack_lvl+0xe8/0x150 [ 86.718864][ T5981] bad_page+0x17f/0x1c0 [ 86.718880][ T5981] __free_frozen_pages+0xd28/0xd70 [ 86.718895][ T5981] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 86.718922][ T5981] bpf_xdp_adjust_tail+0x1d6/0x220 [ 86.718941][ T5981] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 86.718954][ T5981] bpf_prog_run_generic_xdp+0x623/0x13f0 [ 86.718977][ T5981] do_xdp_generic+0xa6f/0x1280 [ 86.718990][ T5981] ? __lock_acquire+0x6b5/0x2cf0 [ 86.719014][ T5981] ? __pfx_do_xdp_generic+0x10/0x10 [ 86.719031][ T5981] ? tun_get_user+0x2354/0x3dd0 [ 86.719053][ T5981] ? tun_get_user+0x2354/0x3dd0 [ 86.719068][ T5981] tun_get_user+0x247d/0x3dd0 [ 86.719089][ T5981] ? aa_file_perm+0x12d/0x1630 [ 86.719110][ T5981] ? aa_file_perm+0x440/0x1630 [ 86.719126][ T5981] ? __pfx_tun_get_user+0x10/0x10 [ 86.719140][ T5981] ? __lock_acquire+0x6b5/0x2cf0 [ 86.719162][ T5981] ? ref_tracker_alloc+0x363/0x4d0 [ 86.719182][ T5981] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 86.719199][ T5981] ? tun_get+0x1c/0x2f0 [ 86.719214][ T5981] ? tun_get+0x1c/0x2f0 [ 86.719232][ T5981] ? tun_get+0x1c/0x2f0 [ 86.719248][ T5981] ? tun_get+0x1c/0x2f0 [ 86.719272][ T5981] tun_chr_write_iter+0x113/0x200 [ 86.719291][ T5981] vfs_write+0x61d/0xb90 [ 86.719315][ T5981] ? __pfx_vfs_write+0x10/0x10 [ 86.719336][ T5981] ? __pfx_do_futex+0x10/0x10 [ 86.719362][ T5981] ksys_write+0x150/0x270 [ 86.719383][ T5981] ? __pfx_ksys_write+0x10/0x10 [ 86.719406][ T5981] do_syscall_64+0xe2/0xf80 [ 86.719426][ T5981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.719441][ T5981] ? trace_irq_disable+0x37/0x100 [ 86.719456][ T5981] ? clear_bhb_loop+0x60/0xb0 [ 86.719473][ T5981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.719488][ T5981] RIP: 0033:0x7f982df5b78e [ 86.719502][ T5981] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 86.719514][ T5981] RSP: 002b:00007ffef5a5ec88 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 86.719532][ T5981] RAX: ffffffffffffffda RBX: 0000555574cf6500 RCX: 00007f982df5b78e [ 86.719544][ T5981] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8 [ 86.719555][ T5981] RBP: 00007f982e008c1f R08: 0000000000000000 R09: 0000000000000000 [ 86.719565][ T5981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.719574][ T5981] R13: 00007f982e215fac R14: 00007f982e215fa0 R15: 00007f982e215fa0 [ 86.719593][ T5981] [ 86.719603][ T5981] BUG: Bad page state in process syz.0.17 pfn:76870 [ 86.765751][ T10] cfg80211: failed to load regulatory.db [ 86.770124][ T5981] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888076870ee0 pfn:0x76870 [ 87.014072][ T5981] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 87.021202][ T5981] raw: 00fff00000000000 dead000000000040 ffff8880206a3000 0000000000000000 [ 87.029819][ T5981] raw: ffff888076870ee0 0000000000000001 00000000ffffffff 0000000000000000 [ 87.038531][ T5981] page dumped because: page_pool leak [ 87.043899][ T5981] page_owner tracks the page as allocated [ 87.049660][ T5981] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5981, tgid 5981 (syz.0.17), ts 83778981116, free_ts 83756675407 [ 87.066379][ T5981] post_alloc_hook+0x228/0x280 [ 87.071138][ T5981] get_page_from_freelist+0x24dc/0x2580 [ 87.076725][ T5981] __alloc_frozen_pages_noprof+0x18d/0x380 [ 87.082546][ T5981] alloc_pages_bulk_noprof+0x558/0x700 [ 87.088061][ T5981] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 87.094138][ T5981] skb_pp_cow_data+0xc21/0x1680 [ 87.099049][ T5981] do_xdp_generic+0x715/0x1280 [ 87.103814][ T5981] tun_get_user+0x247d/0x3dd0 [ 87.108525][ T5981] tun_chr_write_iter+0x113/0x200 [ 87.113629][ T5981] vfs_write+0x61d/0xb90 [ 87.117919][ T5981] ksys_write+0x150/0x270 [ 87.122254][ T5981] do_syscall_64+0xe2/0xf80 [ 87.126782][ T5981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.132759][ T5981] page last free pid 23 tgid 23 stack trace: [ 87.139014][ T5981] __free_frozen_pages+0xbf8/0xd70 [ 87.144140][ T5981] rcu_core+0xc9e/0x1750 [ 87.148846][ T5981] handle_softirqs+0x22a/0x7c0 [ 87.153602][ T5981] run_ksoftirqd+0x36/0x60 [ 87.158043][ T5981] smpboot_thread_fn+0x541/0xa50 [ 87.162986][ T5981] kthread+0x726/0x8b0 [ 87.167093][ T5981] ret_from_fork+0x51b/0xa40 [ 87.171683][ T5981] ret_from_fork_asm+0x1a/0x30 [ 87.176474][ T5981] Modules linked in: [ 87.180372][ T5981] CPU: 1 UID: 0 PID: 5981 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full) [ 87.180388][ T5981] Tainted: [B]=BAD_PAGE [ 87.180391][ T5981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 87.180397][ T5981] Call Trace: [ 87.180401][ T5981] [ 87.180405][ T5981] dump_stack_lvl+0xe8/0x150 [ 87.180420][ T5981] bad_page+0x17f/0x1c0 [ 87.180434][ T5981] __free_frozen_pages+0xd28/0xd70 [ 87.180445][ T5981] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 87.180464][ T5981] bpf_xdp_adjust_tail+0x1d6/0x220 [ 87.180478][ T5981] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 87.180487][ T5981] bpf_prog_run_generic_xdp+0x623/0x13f0 [ 87.180501][ T5981] do_xdp_generic+0xa6f/0x1280 [ 87.180510][ T5981] ? __lock_acquire+0x6b5/0x2cf0 [ 87.180525][ T5981] ? __pfx_do_xdp_generic+0x10/0x10 [ 87.180535][ T5981] ? tun_get_user+0x2354/0x3dd0 [ 87.180548][ T5981] ? tun_get_user+0x2354/0x3dd0 [ 87.180557][ T5981] tun_get_user+0x247d/0x3dd0 [ 87.180568][ T5981] ? aa_file_perm+0x12d/0x1630 [ 87.180582][ T5981] ? aa_file_perm+0x440/0x1630 [ 87.180594][ T5981] ? __pfx_tun_get_user+0x10/0x10 [ 87.180603][ T5981] ? __lock_acquire+0x6b5/0x2cf0 [ 87.180618][ T5981] ? ref_tracker_alloc+0x363/0x4d0 [ 87.180631][ T5981] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 87.180642][ T5981] ? tun_get+0x1c/0x2f0 [ 87.180651][ T5981] ? tun_get+0x1c/0x2f0 [ 87.180661][ T5981] ? tun_get+0x1c/0x2f0 [ 87.180669][ T5981] ? tun_get+0x1c/0x2f0 [ 87.180679][ T5981] tun_chr_write_iter+0x113/0x200 [ 87.180688][ T5981] vfs_write+0x61d/0xb90 [ 87.180704][ T5981] ? __pfx_vfs_write+0x10/0x10 [ 87.180717][ T5981] ? __pfx_do_futex+0x10/0x10 [ 87.180733][ T5981] ksys_write+0x150/0x270 [ 87.180746][ T5981] ? __pfx_ksys_write+0x10/0x10 [ 87.180761][ T5981] do_syscall_64+0xe2/0xf80 [ 87.180773][ T5981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.180781][ T5981] ? trace_irq_disable+0x37/0x100 [ 87.180790][ T5981] ? clear_bhb_loop+0x60/0xb0 [ 87.180800][ T5981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.180809][ T5981] RIP: 0033:0x7f982df5b78e [ 87.180818][ T5981] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 87.180825][ T5981] RSP: 002b:00007ffef5a5ec88 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 87.180836][ T5981] RAX: ffffffffffffffda RBX: 0000555574cf6500 RCX: 00007f982df5b78e [ 87.180843][ T5981] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8 [ 87.180848][ T5981] RBP: 00007f982e008c1f R08: 0000000000000000 R09: 0000000000000000 [ 87.180854][ T5981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.180859][ T5981] R13: 00007f982e215fac R14: 00007f982e215fa0 R15: 00007f982e215fa0 [ 87.180869][ T5981] [ 87.180877][ T5981] BUG: Bad page state in process syz.0.17 pfn:76846 [ 87.459535][ T5981] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888076846dc0 pfn:0x76846 [ 87.469729][ T5981] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 87.476955][ T5981] raw: 00fff00000000000 dead000000000040 ffff8880206a3000 0000000000000000 [ 87.485555][ T5981] raw: ffff888076846dc0 0000000000000001 00000000ffffffff 0000000000000000 [ 87.494213][ T5981] page dumped because: page_pool leak [ 87.499619][ T5981] page_owner tracks the page as allocated [ 87.505370][ T5981] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5981, tgid 5981 (syz.0.17), ts 83778964916, free_ts 83756687665 [ 87.522344][ T5981] post_alloc_hook+0x228/0x280 [ 87.527138][ T5981] get_page_from_freelist+0x24dc/0x2580 [ 87.532680][ T5981] __alloc_frozen_pages_noprof+0x18d/0x380 [ 87.538537][ T5981] alloc_pages_bulk_noprof+0x558/0x700 [ 87.544003][ T5981] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 87.550145][ T5981] skb_pp_cow_data+0xc21/0x1680 [ 87.555008][ T5981] do_xdp_generic+0x715/0x1280 [ 87.559793][ T5981] tun_get_user+0x247d/0x3dd0 [ 87.564467][ T5981] tun_chr_write_iter+0x113/0x200 [ 87.569554][ T5981] vfs_write+0x61d/0xb90 [ 87.573813][ T5981] ksys_write+0x150/0x270 [ 87.578245][ T5981] do_syscall_64+0xe2/0xf80 [ 87.582771][ T5981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.588860][ T5981] page last free pid 23 tgid 23 stack trace: [ 87.594938][ T5981] __free_frozen_pages+0xbf8/0xd70 [ 87.600089][ T5981] rcu_core+0xc9e/0x1750 [ 87.604339][ T5981] handle_softirqs+0x22a/0x7c0 [ 87.609301][ T5981] run_ksoftirqd+0x36/0x60 [ 87.613732][ T5981] smpboot_thread_fn+0x541/0xa50 [ 87.618707][ T5981] kthread+0x726/0x8b0 [ 87.622780][ T5981] ret_from_fork+0x51b/0xa40 [ 87.627399][ T5981] ret_from_fork_asm+0x1a/0x30 [ 87.632182][ T5981] Modules linked in: [ 87.636105][ T5981] CPU: 1 UID: 0 PID: 5981 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full) [ 87.636126][ T5981] Tainted: [B]=BAD_PAGE [ 87.636130][ T5981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 87.636138][ T5981] Call Trace: [ 87.636143][ T5981] [ 87.636149][ T5981] dump_stack_lvl+0xe8/0x150 [ 87.636169][ T5981] bad_page+0x17f/0x1c0 [ 87.636188][ T5981] __free_frozen_pages+0xd28/0xd70 [ 87.636205][ T5981] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 87.636234][ T5981] bpf_xdp_adjust_tail+0x1d6/0x220 [ 87.636255][ T5981] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 87.636270][ T5981] bpf_prog_run_generic_xdp+0x623/0x13f0 [ 87.636297][ T5981] do_xdp_generic+0xa6f/0x1280 [ 87.636312][ T5981] ? __lock_acquire+0x6b5/0x2cf0 [ 87.636337][ T5981] ? __pfx_do_xdp_generic+0x10/0x10 [ 87.636357][ T5981] ? tun_get_user+0x2354/0x3dd0 [ 87.636379][ T5981] ? tun_get_user+0x2354/0x3dd0 [ 87.636394][ T5981] tun_get_user+0x247d/0x3dd0 [ 87.636414][ T5981] ? aa_file_perm+0x12d/0x1630 [ 87.636435][ T5981] ? aa_file_perm+0x440/0x1630 [ 87.636453][ T5981] ? __pfx_tun_get_user+0x10/0x10 [ 87.636469][ T5981] ? __lock_acquire+0x6b5/0x2cf0 [ 87.636493][ T5981] ? ref_tracker_alloc+0x363/0x4d0 [ 87.636513][ T5981] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 87.636531][ T5981] ? tun_get+0x1c/0x2f0 [ 87.636546][ T5981] ? tun_get+0x1c/0x2f0 [ 87.636562][ T5981] ? tun_get+0x1c/0x2f0 [ 87.636577][ T5981] ? tun_get+0x1c/0x2f0 [ 87.636593][ T5981] tun_chr_write_iter+0x113/0x200 [ 87.636610][ T5981] vfs_write+0x61d/0xb90 [ 87.636634][ T5981] ? __pfx_vfs_write+0x10/0x10 [ 87.636654][ T5981] ? __pfx_do_futex+0x10/0x10 [ 87.636679][ T5981] ksys_write+0x150/0x270 [ 87.636699][ T5981] ? __pfx_ksys_write+0x10/0x10 [ 87.636723][ T5981] do_syscall_64+0xe2/0xf80 [ 87.636741][ T5981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.636754][ T5981] ? trace_irq_disable+0x37/0x100 [ 87.636767][ T5981] ? clear_bhb_loop+0x60/0xb0 [ 87.636783][ T5981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.636817][ T5981] RIP: 0033:0x7f982df5b78e [ 87.636831][ T5981] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 87.636844][ T5981] RSP: 002b:00007ffef5a5ec88 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 87.636861][ T5981] RAX: ffffffffffffffda RBX: 0000555574cf6500 RCX: 00007f982df5b78e [ 87.636872][ T5981] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8 [ 87.636883][ T5981] RBP: 00007f982e008c1f R08: 0000000000000000 R09: 0000000000000000 [ 87.636893][ T5981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.636902][ T5981] R13: 00007f982e215fac R14: 00007f982e215fa0 R15: 00007f982e215fa0 [ 87.636920][ T5981] [ 87.636937][ T5981] BUG: Bad page state in process syz.0.17 pfn:7684c [ 87.915809][ T5981] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807684c000 pfn:0x7684c [ 87.925890][ T5981] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 87.933056][ T5981] raw: 00fff00000000000 dead000000000040 ffff8880206a3000 0000000000000000 [ 87.942189][ T5981] raw: ffff88807684c000 0000000000000001 00000000ffffffff 0000000000000000 [ 87.950792][ T5981] page dumped because: page_pool leak [ 87.956192][ T5981] page_owner tracks the page as allocated [ 87.961910][ T5981] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5981, tgid 5981 (syz.0.17), ts 83778948466, free_ts 83756699763 [ 87.978609][ T5981] post_alloc_hook+0x228/0x280 [ 87.983381][ T5981] get_page_from_freelist+0x24dc/0x2580 [ 87.989056][ T5981] __alloc_frozen_pages_noprof+0x18d/0x380 [ 87.995049][ T5981] alloc_pages_bulk_noprof+0x558/0x700 [ 88.000555][ T5981] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 88.006660][ T5981] skb_pp_cow_data+0xc21/0x1680 [ 88.011516][ T5981] do_xdp_generic+0x715/0x1280 [ 88.016389][ T5981] tun_get_user+0x247d/0x3dd0 [ 88.021070][ T5981] tun_chr_write_iter+0x113/0x200 [ 88.026116][ T5981] vfs_write+0x61d/0xb90 [ 88.030368][ T5981] ksys_write+0x150/0x270 [ 88.034698][ T5981] do_syscall_64+0xe2/0xf80 [ 88.039253][ T5981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.045326][ T5981] page last free pid 23 tgid 23 stack trace: [ 88.051378][ T5981] __free_frozen_pages+0xbf8/0xd70 [ 88.056514][ T5981] rcu_core+0xc9e/0x1750 [ 88.060763][ T5981] handle_softirqs+0x22a/0x7c0 [ 88.065549][ T5981] run_ksoftirqd+0x36/0x60 [ 88.069961][ T5981] smpboot_thread_fn+0x541/0xa50 [ 88.074900][ T5981] kthread+0x726/0x8b0 [ 88.079119][ T5981] ret_from_fork+0x51b/0xa40 [ 88.083712][ T5981] ret_from_fork_asm+0x1a/0x30 [ 88.088504][ T5981] Modules linked in: [ 88.092400][ T5981] CPU: 1 UID: 0 PID: 5981 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full) [ 88.092416][ T5981] Tainted: [B]=BAD_PAGE [ 88.092420][ T5981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 88.092426][ T5981] Call Trace: [ 88.092430][ T5981] [ 88.092434][ T5981] dump_stack_lvl+0xe8/0x150 [ 88.092450][ T5981] bad_page+0x17f/0x1c0 [ 88.092463][ T5981] __free_frozen_pages+0xd28/0xd70 [ 88.092474][ T5981] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 88.092493][ T5981] bpf_xdp_adjust_tail+0x1d6/0x220 [ 88.092507][ T5981] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 88.092516][ T5981] bpf_prog_run_generic_xdp+0x623/0x13f0 [ 88.092530][ T5981] do_xdp_generic+0xa6f/0x1280 [ 88.092538][ T5981] ? __lock_acquire+0x6b5/0x2cf0 [ 88.092554][ T5981] ? __pfx_do_xdp_generic+0x10/0x10 [ 88.092564][ T5981] ? tun_get_user+0x2354/0x3dd0 [ 88.092577][ T5981] ? tun_get_user+0x2354/0x3dd0 [ 88.092586][ T5981] tun_get_user+0x247d/0x3dd0 [ 88.092598][ T5981] ? aa_file_perm+0x12d/0x1630 [ 88.092612][ T5981] ? aa_file_perm+0x440/0x1630 [ 88.092623][ T5981] ? __pfx_tun_get_user+0x10/0x10 [ 88.092633][ T5981] ? __lock_acquire+0x6b5/0x2cf0 [ 88.092648][ T5981] ? ref_tracker_alloc+0x363/0x4d0 [ 88.092660][ T5981] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 88.092672][ T5981] ? tun_get+0x1c/0x2f0 [ 88.092681][ T5981] ? tun_get+0x1c/0x2f0 [ 88.092690][ T5981] ? tun_get+0x1c/0x2f0 [ 88.092699][ T5981] ? tun_get+0x1c/0x2f0 [ 88.092709][ T5981] tun_chr_write_iter+0x113/0x200 [ 88.092719][ T5981] vfs_write+0x61d/0xb90 [ 88.092734][ T5981] ? __pfx_vfs_write+0x10/0x10 [ 88.092747][ T5981] ? __pfx_do_futex+0x10/0x10 [ 88.092764][ T5981] ksys_write+0x150/0x270 [ 88.092777][ T5981] ? __pfx_ksys_write+0x10/0x10 [ 88.092791][ T5981] do_syscall_64+0xe2/0xf80 [ 88.092803][ T5981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.092812][ T5981] ? trace_irq_disable+0x37/0x100 [ 88.092821][ T5981] ? clear_bhb_loop+0x60/0xb0 [ 88.092831][ T5981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.092840][ T5981] RIP: 0033:0x7f982df5b78e [ 88.092849][ T5981] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 88.092856][ T5981] RSP: 002b:00007ffef5a5ec88 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 88.092867][ T5981] RAX: ffffffffffffffda RBX: 0000555574cf6500 RCX: 00007f982df5b78e [ 88.092874][ T5981] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8 [ 88.092880][ T5981] RBP: 00007f982e008c1f R08: 0000000000000000 R09: 0000000000000000 [ 88.092886][ T5981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.092891][ T5981] R13: 00007f982e215fac R14: 00007f982e215fa0 R15: 00007f982e215fa0 [ 88.092901][ T5981] [ 88.092908][ T5981] BUG: Bad page state in process syz.0.17 pfn:76888 [ 88.371942][ T5981] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888076888640 pfn:0x76888 [ 88.382049][ T5981] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 88.389185][ T5981] raw: 00fff00000000000 dead000000000040 ffff8880206a3000 0000000000000000 [ 88.397820][ T5981] raw: ffff888076888640 0000000000000001 00000000ffffffff 0000000000000000 [ 88.406421][ T5981] page dumped because: page_pool leak [ 88.411777][ T5981] page_owner tracks the page as allocated [ 88.417862][ T5981] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5981, tgid 5981 (syz.0.17), ts 83778932197, free_ts 83756713120 [ 88.435006][ T5981] post_alloc_hook+0x228/0x280 [ 88.439791][ T5981] get_page_from_freelist+0x24dc/0x2580 [ 88.445281][ T5143] Bluetooth: hci0: command tx timeout [ 88.445374][ T5981] __alloc_frozen_pages_noprof+0x18d/0x380 [ 88.456518][ T5981] alloc_pages_bulk_noprof+0x558/0x700 [ 88.461976][ T5981] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 88.468093][ T5981] skb_pp_cow_data+0xc21/0x1680 [ 88.472966][ T5981] do_xdp_generic+0x715/0x1280 [ 88.477880][ T5981] tun_get_user+0x247d/0x3dd0 [ 88.482565][ T5981] tun_chr_write_iter+0x113/0x200 [ 88.487625][ T5981] vfs_write+0x61d/0xb90 [ 88.491970][ T5981] ksys_write+0x150/0x270 [ 88.496334][ T5981] do_syscall_64+0xe2/0xf80 [ 88.500837][ T5981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.506833][ T5981] page last free pid 23 tgid 23 stack trace: [ 88.512982][ T5981] __free_frozen_pages+0xbf8/0xd70 [ 88.518111][ T5981] rcu_core+0xc9e/0x1750 [ 88.522366][ T5981] handle_softirqs+0x22a/0x7c0 [ 88.527146][ T5981] run_ksoftirqd+0x36/0x60 [ 88.531556][ T5981] smpboot_thread_fn+0x541/0xa50 [ 88.536510][ T5981] kthread+0x726/0x8b0 [ 88.540574][ T5981] ret_from_fork+0x51b/0xa40 [ 88.545151][ T5981] ret_from_fork_asm+0x1a/0x30 [ 88.549970][ T5981] Modules linked in: [ 88.553847][ T5981] CPU: 1 UID: 0 PID: 5981 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full) [ 88.553861][ T5981] Tainted: [B]=BAD_PAGE [ 88.553865][ T5981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 88.553871][ T5981] Call Trace: [ 88.553876][ T5981] [ 88.553880][ T5981] dump_stack_lvl+0xe8/0x150 [ 88.553895][ T5981] bad_page+0x17f/0x1c0 [ 88.553908][ T5981] __free_frozen_pages+0xd28/0xd70 [ 88.553919][ T5981] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 88.553939][ T5981] bpf_xdp_adjust_tail+0x1d6/0x220 [ 88.553957][ T5981] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 88.553966][ T5981] bpf_prog_run_generic_xdp+0x623/0x13f0 [ 88.553980][ T5981] do_xdp_generic+0xa6f/0x1280 [ 88.553989][ T5981] ? __lock_acquire+0x6b5/0x2cf0 [ 88.554004][ T5981] ? __pfx_do_xdp_generic+0x10/0x10 [ 88.554015][ T5981] ? tun_get_user+0x2354/0x3dd0 [ 88.554028][ T5981] ? tun_get_user+0x2354/0x3dd0 [ 88.554037][ T5981] tun_get_user+0x247d/0x3dd0 [ 88.554049][ T5981] ? aa_file_perm+0x12d/0x1630 [ 88.554063][ T5981] ? aa_file_perm+0x440/0x1630 [ 88.554074][ T5981] ? __pfx_tun_get_user+0x10/0x10 [ 88.554084][ T5981] ? __lock_acquire+0x6b5/0x2cf0 [ 88.554099][ T5981] ? ref_tracker_alloc+0x363/0x4d0 [ 88.554112][ T5981] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 88.554124][ T5981] ? tun_get+0x1c/0x2f0 [ 88.554134][ T5981] ? tun_get+0x1c/0x2f0 [ 88.554148][ T5981] ? tun_get+0x1c/0x2f0 [ 88.554158][ T5981] ? tun_get+0x1c/0x2f0 [ 88.554168][ T5981] tun_chr_write_iter+0x113/0x200 [ 88.554178][ T5981] vfs_write+0x61d/0xb90 [ 88.554194][ T5981] ? __pfx_vfs_write+0x10/0x10 [ 88.554209][ T5981] ? __pfx_do_futex+0x10/0x10 [ 88.554225][ T5981] ksys_write+0x150/0x270 [ 88.554238][ T5981] ? __pfx_ksys_write+0x10/0x10 [ 88.554253][ T5981] do_syscall_64+0xe2/0xf80 [ 88.554265][ T5981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.554273][ T5981] ? trace_irq_disable+0x37/0x100 [ 88.554282][ T5981] ? clear_bhb_loop+0x60/0xb0 [ 88.554292][ T5981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.554301][ T5981] RIP: 0033:0x7f982df5b78e [ 88.554310][ T5981] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 88.554318][ T5981] RSP: 002b:00007ffef5a5ec88 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 88.554328][ T5981] RAX: ffffffffffffffda RBX: 0000555574cf6500 RCX: 00007f982df5b78e [ 88.554335][ T5981] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8 [ 88.554341][ T5981] RBP: 00007f982e008c1f R08: 0000000000000000 R09: 0000000000000000 [ 88.554346][ T5981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.554351][ T5981] R13: 00007f982e215fac R14: 00007f982e215fa0 R15: 00007f982e215fa0 [ 88.554361][ T5981] [ 88.554368][ T5981] BUG: Bad page state in process syz.0.17 pfn:76889 [ 88.833655][ T5981] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888076889b40 pfn:0x76889 [ 88.843746][ T5981] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 88.850899][ T5981] raw: 00fff00000000000 dead000000000040 ffff8880206a3000 0000000000000000 [ 88.859521][ T5981] raw: ffff888076889b40 0000000000000001 00000000ffffffff 0000000000000000 [ 88.868122][ T5981] page dumped because: page_pool leak [ 88.873472][ T5981] page_owner tracks the page as allocated [ 88.879225][ T5981] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5981, tgid 5981 (syz.0.17), ts 83778916084, free_ts 83756727045 [ 88.896016][ T5981] post_alloc_hook+0x228/0x280 [ 88.900773][ T5981] get_page_from_freelist+0x24dc/0x2580 [ 88.906347][ T5981] __alloc_frozen_pages_noprof+0x18d/0x380 [ 88.912156][ T5981] alloc_pages_bulk_noprof+0x558/0x700 [ 88.917654][ T5981] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 88.923730][ T5981] skb_pp_cow_data+0xc21/0x1680 [ 88.928653][ T5981] do_xdp_generic+0x715/0x1280 [ 88.933452][ T5981] tun_get_user+0x247d/0x3dd0 [ 88.938173][ T5981] tun_chr_write_iter+0x113/0x200 [ 88.943196][ T5981] vfs_write+0x61d/0xb90 [ 88.947458][ T5981] ksys_write+0x150/0x270 [ 88.951845][ T5981] do_syscall_64+0xe2/0xf80 [ 88.956464][ T5981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.962369][ T5981] page last free pid 23 tgid 23 stack trace: [ 88.968370][ T5981] __free_frozen_pages+0xbf8/0xd70 [ 88.973484][ T5981] rcu_core+0xc9e/0x1750 [ 88.977754][ T5981] handle_softirqs+0x22a/0x7c0 [ 88.982513][ T5981] run_ksoftirqd+0x36/0x60 [ 88.986949][ T5981] smpboot_thread_fn+0x541/0xa50 [ 88.991895][ T5981] kthread+0x726/0x8b0 [ 88.996002][ T5981] ret_from_fork+0x51b/0xa40 [ 89.000601][ T5981] ret_from_fork_asm+0x1a/0x30 [ 89.005410][ T5981] Modules linked in: [ 89.009308][ T5981] CPU: 1 UID: 0 PID: 5981 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full) [ 89.009323][ T5981] Tainted: [B]=BAD_PAGE [ 89.009327][ T5981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 89.009333][ T5981] Call Trace: [ 89.009337][ T5981] [ 89.009342][ T5981] dump_stack_lvl+0xe8/0x150 [ 89.009357][ T5981] bad_page+0x17f/0x1c0 [ 89.009370][ T5981] __free_frozen_pages+0xd28/0xd70 [ 89.009381][ T5981] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 89.009400][ T5981] bpf_xdp_adjust_tail+0x1d6/0x220 [ 89.009414][ T5981] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 89.009422][ T5981] bpf_prog_run_generic_xdp+0x623/0x13f0 [ 89.009436][ T5981] do_xdp_generic+0xa6f/0x1280 [ 89.009445][ T5981] ? __lock_acquire+0x6b5/0x2cf0 [ 89.009460][ T5981] ? __pfx_do_xdp_generic+0x10/0x10 [ 89.009470][ T5981] ? tun_get_user+0x2354/0x3dd0 [ 89.009484][ T5981] ? tun_get_user+0x2354/0x3dd0 [ 89.009493][ T5981] tun_get_user+0x247d/0x3dd0 [ 89.009505][ T5981] ? aa_file_perm+0x12d/0x1630 [ 89.009518][ T5981] ? aa_file_perm+0x440/0x1630 [ 89.009530][ T5981] ? __pfx_tun_get_user+0x10/0x10 [ 89.009539][ T5981] ? __lock_acquire+0x6b5/0x2cf0 [ 89.009554][ T5981] ? ref_tracker_alloc+0x363/0x4d0 [ 89.009567][ T5981] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 89.009578][ T5981] ? tun_get+0x1c/0x2f0 [ 89.009587][ T5981] ? tun_get+0x1c/0x2f0 [ 89.009597][ T5981] ? tun_get+0x1c/0x2f0 [ 89.009605][ T5981] ? tun_get+0x1c/0x2f0 [ 89.009615][ T5981] tun_chr_write_iter+0x113/0x200 [ 89.009625][ T5981] vfs_write+0x61d/0xb90 [ 89.009640][ T5981] ? __pfx_vfs_write+0x10/0x10 [ 89.009653][ T5981] ? __pfx_do_futex+0x10/0x10 [ 89.009670][ T5981] ksys_write+0x150/0x270 [ 89.009683][ T5981] ? __pfx_ksys_write+0x10/0x10 [ 89.009697][ T5981] do_syscall_64+0xe2/0xf80 [ 89.009710][ T5981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.009719][ T5981] ? trace_irq_disable+0x37/0x100 [ 89.009728][ T5981] ? clear_bhb_loop+0x60/0xb0 [ 89.009738][ T5981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.009747][ T5981] RIP: 0033:0x7f982df5b78e [ 89.009756][ T5981] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 89.009763][ T5981] RSP: 002b:00007ffef5a5ec88 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 89.009775][ T5981] RAX: ffffffffffffffda RBX: 0000555574cf6500 RCX: 00007f982df5b78e [ 89.009782][ T5981] RDX: 000000000000fdef RSI: 0000200000000a80 RDI: 00000000000000c8 [ 89.009788][ T5981] RBP: 00007f982e008c1f R08: 0000000000000000 R09: 0000000000000000 [ 89.009793][ T5981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.009799][ T5981] R13: 00007f982e215fac R14: 00007f982e215fa0 R15: 00007f982e215fa0 [ 89.009809][ T5981]