[ 38.150070][ T40] audit: type=1400 audit(1730226244.827:82): avc: denied { siginh } for pid=5920 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 42.138452][ T40] audit: type=1400 audit(1730226248.837:83): avc: denied { read } for pid=5340 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 42.144434][ T40] audit: type=1400 audit(1730226248.837:84): avc: denied { append } for pid=5340 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 42.151265][ T40] audit: type=1400 audit(1730226248.837:85): avc: denied { open } for pid=5340 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 42.157287][ T40] audit: type=1400 audit(1730226248.837:86): avc: denied { getattr } for pid=5340 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:43968' (ED25519) to the list of known hosts. [ 44.413789][ T40] audit: type=1400 audit(1730226251.107:87): avc: denied { execute } for pid=5936 comm="sh" name="syz-executor1339006128" dev="sda1" ino=1926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 44.421445][ T40] audit: type=1400 audit(1730226251.107:88): avc: denied { execute_no_trans } for pid=5936 comm="sh" path="/syz-executor1339006128" dev="sda1" ino=1926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 executing program executing program executing program executing program [ 44.427507][ T40] audit: type=1400 audit(1730226251.117:89): avc: denied { execmem } for pid=5936 comm="syz-executor133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 44.435346][ T40] audit: type=1400 audit(1730226251.127:90): avc: denied { write } for pid=5939 comm="syz-executor133" path="pipe:[3885]" dev="pipefs" ino=3885 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 44.443455][ T40] audit: type=1400 audit(1730226251.127:91): avc: denied { create } for pid=5941 comm="syz-executor133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.451209][ T40] audit: type=1400 audit(1730226251.127:92): avc: denied { setopt } for pid=5941 comm="syz-executor133" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.459047][ T40] audit: type=1400 audit(1730226251.127:94): avc: denied { module_request } for pid=5939 comm="syz-executor133" kmod="ip6t_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 44.464911][ T40] audit: type=1400 audit(1730226251.127:93): avc: denied { module_request } for pid=5941 comm="syz-executor133" kmod="ip6t_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 44.471776][ T40] audit: type=1400 audit(1730226251.127:95): avc: denied { module_request } for pid=5942 comm="syz-executor133" kmod="ip6t_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 44.474759][ T5946] BUG: Bad page state in process syz-executor133 pfn:2b552 [ 44.478126][ T40] audit: type=1400 audit(1730226251.147:96): avc: denied { prog_load } for pid=5941 comm="syz-executor133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 44.479796][ T5946] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802b552070 pfn:0x2b552 [ 44.491159][ T5946] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 44.493617][ T5946] raw: 00fff00000000000 dead000000000040 ffff8880202ae000 0000000000000000 [ 44.495922][ T5946] raw: ffff88802b552070 0000000000000001 00000000ffffffff 0000000000000000 [ 44.498268][ T5946] page dumped because: page_pool leak [ 44.499707][ T5946] page_owner tracks the page as allocated [ 44.502233][ T5946] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5946, tgid 5942 (syz-executor133), ts 44468123609, free_ts 44138879272 [ 44.506870][ T5946] post_alloc_hook+0x2d1/0x350 [ 44.508193][ T5946] get_page_from_freelist+0x101e/0x3070 [ 44.509733][ T5946] __alloc_pages_noprof+0x223/0x25a0 [ 44.511196][ T5946] alloc_pages_bulk_noprof+0x77c/0x1110 [ 44.512738][ T5946] __page_pool_alloc_pages_slow+0x18f/0x770 [ 44.514349][ T5946] page_pool_alloc_netmem+0xc4/0x160 [ 44.515891][ T5946] page_pool_alloc_pages+0x1a/0x60 [ 44.517350][ T5946] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 44.519107][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 44.520773][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 44.522357][ T5946] __sys_bpf+0xfc6/0x49a0 [ 44.523833][ T5946] __x64_sys_bpf+0x78/0xc0 [ 44.525037][ T5946] do_syscall_64+0xcd/0x250 [ 44.526238][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.527890][ T5946] page last free pid 29 tgid 29 stack trace: [ 44.529628][ T5946] free_unref_page+0x5f4/0xdc0 [ 44.531497][ T5946] __folio_put+0x30d/0x3d0 [ 44.533047][ T5946] put_page+0x21e/0x280 [ 44.534524][ T5946] skb_release_data+0x4d7/0x730 [ 44.536707][ T5946] napi_consume_skb+0x15a/0x220 [ 44.538590][ T5946] net_rx_action+0x47c/0x1010 [ 44.540304][ T5946] handle_softirqs+0x213/0x8f0 [ 44.542031][ T5946] run_ksoftirqd+0x3a/0x60 [ 44.543631][ T5946] smpboot_thread_fn+0x661/0xa30 [ 44.545511][ T5946] kthread+0x2c1/0x3a0 [ 44.547087][ T5946] ret_from_fork+0x45/0x80 [ 44.548930][ T5946] ret_from_fork_asm+0x1a/0x30 [ 44.550892][ T5946] Modules linked in: [ 44.552645][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: syz-executor133 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 44.555956][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 44.559640][ T5946] Call Trace: [ 44.560800][ T5946] [ 44.561878][ T5946] dump_stack_lvl+0x16c/0x1f0 [ 44.563629][ T5946] bad_page+0xb3/0x1f0 [ 44.565111][ T5946] ? __pfx_bad_page+0x10/0x10 [ 44.566918][ T5946] ? page_bad_reason+0x9d/0x1e0 [ 44.568636][ T5946] free_unref_page+0x657/0xdc0 [ 44.570375][ T5946] ? __phys_addr+0xc6/0x150 [ 44.571934][ T5946] skb_free_head+0xa0/0x1d0 [ 44.573526][ T5946] skb_release_data+0x560/0x730 [ 44.575068][ T5946] sk_skb_reason_drop+0x129/0x1a0 [ 44.576418][ T5946] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 44.578166][ T5946] ? kernel_text_address+0x8d/0x100 [ 44.579684][ T5946] ? hlock_class+0x4e/0x130 [ 44.580895][ T5946] ? __lock_acquire+0x163e/0x3ce0 [ 44.582298][ T5946] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 44.584776][ T5946] ? hlock_class+0x4e/0x130 [ 44.585970][ T5946] ? __lock_acquire+0xbdd/0x3ce0 [ 44.587377][ T5946] ? __pfx___lock_acquire+0x10/0x10 [ 44.588974][ T5946] __netif_receive_skb_list_core+0x357/0x950 [ 44.590600][ T5946] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 44.592705][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 44.595315][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 44.597872][ T5946] ? lock_acquire+0x2f/0xb0 [ 44.599652][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 44.601967][ T5946] netif_receive_skb_list_internal+0x753/0xdb0 [ 44.604118][ T5946] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 44.606532][ T5946] ? __pfx_eth_type_trans+0x10/0x10 [ 44.608585][ T5946] ? __build_skb_around+0x278/0x3b0 [ 44.610156][ T5946] netif_receive_skb_list+0x4f/0x4a0 [ 44.611620][ T5946] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 44.614240][ T5946] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 44.616801][ T5946] ? bpf_test_timer_continue+0x150/0x3d0 [ 44.619012][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 44.621254][ T5946] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 44.623803][ T5946] ? try_to_wake_up+0x154/0x14f0 [ 44.625786][ T5946] ? __pfx_try_to_wake_up+0x10/0x10 [ 44.627947][ T5946] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 44.630308][ T5946] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 44.632152][ T5946] ? 0xffffffffa0004340 [ 44.633649][ T5946] ? 0xffffffffa0004340 [ 44.635141][ T5946] ? 0xffffffffa0004340 [ 44.636649][ T5946] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 44.638979][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 44.640955][ T5946] ? lock_acquire+0x2f/0xb0 [ 44.642555][ T5946] ? __fget_files+0x40/0x3f0 [ 44.644266][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 44.646372][ T5946] ? fput+0x30/0x390 [ 44.647886][ T5946] ? __bpf_prog_get+0xa0/0x290 [ 44.649648][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 44.651536][ T5946] __sys_bpf+0xfc6/0x49a0 [ 44.653243][ T5946] ? find_held_lock+0x2d/0x110 [ 44.654746][ T5946] ? __pfx___sys_bpf+0x10/0x10 [ 44.656110][ T5946] ? __might_fault+0x13b/0x190 [ 44.657416][ T5946] ? __pfx_lock_release+0x10/0x10 [ 44.658759][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 44.660325][ T5946] ? lock_acquire+0x2f/0xb0 [ 44.661758][ T5946] ? __might_fault+0xe3/0x190 [ 44.663431][ T5946] ? xfd_validate_state+0x5d/0x180 [ 44.665195][ T5946] ? rcu_is_watching+0x12/0xc0 [ 44.666974][ T5946] __x64_sys_bpf+0x78/0xc0 [ 44.668752][ T5946] ? lockdep_hardirqs_on+0x7c/0x110 [ 44.670469][ T5946] do_syscall_64+0xcd/0x250 [ 44.671774][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.673491][ T5946] RIP: 0033:0x7f5102b5de99 [ 44.674708][ T5946] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 44.679752][ T5946] RSP: 002b:00007f5102b18228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 44.681946][ T5946] RAX: ffffffffffffffda RBX: 00007f5102be8328 RCX: 00007f5102b5de99 [ 44.684052][ T5946] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 44.686133][ T5946] RBP: 00007f5102be8320 R08: 00007f5102b186c0 R09: 00007f5102b186c0 [ 44.688258][ T5946] R10: 00007f5102b186c0 R11: 0000000000000246 R12: 00007f5102bb5074 [ 44.690199][ T5946] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffc619b1828 [ 44.692201][ T5946] [ 44.693136][ T5946] Disabling lock debugging due to kernel taint [ 44.695308][ T5946] BUG: Bad page state in process syz-executor133 pfn:2b551 [ 44.697362][ T5946] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x8 pfn:0x2b551 [ 44.699791][ T5946] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 44.701585][ T5946] raw: 00fff00000000000 dead000000000040 ffff8880202ae000 0000000000000000 [ 44.703710][ T5946] raw: 0000000000000008 0000000000000001 00000000ffffffff 0000000000000000 [ 44.705963][ T5946] page dumped because: page_pool leak [ 44.707504][ T5946] page_owner tracks the page as allocated [ 44.709188][ T5946] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5946, tgid 5942 (syz-executor133), ts 44468115730, free_ts 44138879272 [ 44.713619][ T5946] post_alloc_hook+0x2d1/0x350 [ 44.714912][ T5946] get_page_from_freelist+0x101e/0x3070 [ 44.716347][ T5946] __alloc_pages_noprof+0x223/0x25a0 [ 44.717730][ T5946] alloc_pages_bulk_noprof+0x77c/0x1110 [ 44.719239][ T5946] __page_pool_alloc_pages_slow+0x18f/0x770 [ 44.720789][ T5946] page_pool_alloc_netmem+0xc4/0x160 [ 44.722170][ T5946] page_pool_alloc_pages+0x1a/0x60 [ 44.723506][ T5946] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 44.725109][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 44.726457][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 44.728087][ T5946] __sys_bpf+0xfc6/0x49a0 [ 44.729359][ T5946] __x64_sys_bpf+0x78/0xc0 [ 44.730755][ T5946] do_syscall_64+0xcd/0x250 [ 44.732164][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.733676][ T5946] page last free pid 29 tgid 29 stack trace: [ 44.735343][ T5946] free_unref_page+0x5f4/0xdc0 [ 44.736804][ T5946] __folio_put+0x30d/0x3d0 [ 44.738112][ T5946] put_page+0x21e/0x280 [ 44.739226][ T5946] skb_release_data+0x4d7/0x730 [ 44.740511][ T5946] napi_consume_skb+0x15a/0x220 [ 44.741829][ T5946] net_rx_action+0x47c/0x1010 [ 44.743289][ T5946] handle_softirqs+0x213/0x8f0 [ 44.744638][ T5946] run_ksoftirqd+0x3a/0x60 [ 44.745833][ T5946] smpboot_thread_fn+0x661/0xa30 [ 44.747198][ T5946] kthread+0x2c1/0x3a0 [ 44.748606][ T5946] ret_from_fork+0x45/0x80 [ 44.749843][ T5946] ret_from_fork_asm+0x1a/0x30 [ 44.751121][ T5946] Modules linked in: [ 44.752155][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: syz-executor133 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 44.755432][ T5946] Tainted: [B]=BAD_PAGE [ 44.756527][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 44.759335][ T5946] Call Trace: [ 44.760223][ T5946] [ 44.761016][ T5946] dump_stack_lvl+0x16c/0x1f0 [ 44.762282][ T5946] bad_page+0xb3/0x1f0 [ 44.763390][ T5946] ? __pfx_bad_page+0x10/0x10 [ 44.764646][ T5946] ? page_bad_reason+0x9d/0x1e0 [ 44.765942][ T5946] free_unref_page+0x657/0xdc0 [ 44.767218][ T5946] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 44.768806][ T5946] ? __phys_addr+0xc6/0x150 [ 44.770013][ T5946] skb_free_head+0xa0/0x1d0 [ 44.771238][ T5946] skb_release_data+0x560/0x730 [ 44.772799][ T5946] sk_skb_reason_drop+0x129/0x1a0 [ 44.774234][ T5946] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 44.776051][ T5946] ? kernel_text_address+0x8d/0x100 [ 44.777417][ T5946] ? hlock_class+0x4e/0x130 [ 44.778633][ T5946] ? __lock_acquire+0x163e/0x3ce0 [ 44.779969][ T5946] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 44.781831][ T5946] ? hlock_class+0x4e/0x130 [ 44.783040][ T5946] ? __lock_acquire+0xbdd/0x3ce0 [ 44.784338][ T5946] ? __pfx___lock_acquire+0x10/0x10 [ 44.785710][ T5946] __netif_receive_skb_list_core+0x357/0x950 [ 44.787296][ T5946] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 44.789354][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 44.790741][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 44.792449][ T5946] ? lock_acquire+0x2f/0xb0 [ 44.793672][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 44.795404][ T5946] netif_receive_skb_list_internal+0x753/0xdb0 [ 44.797161][ T5946] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 44.798963][ T5946] ? __pfx_eth_type_trans+0x10/0x10 [ 44.800415][ T5946] ? __build_skb_around+0x278/0x3b0 [ 44.801815][ T5946] netif_receive_skb_list+0x4f/0x4a0 [ 44.803241][ T5946] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 44.805076][ T5946] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 44.806851][ T5946] ? bpf_test_timer_continue+0x150/0x3d0 [ 44.808447][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 44.809858][ T5946] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 44.811681][ T5946] ? try_to_wake_up+0x154/0x14f0 [ 44.813074][ T5946] ? __pfx_try_to_wake_up+0x10/0x10 [ 44.814447][ T5946] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 44.816031][ T5946] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 44.817571][ T5946] ? 0xffffffffa0004340 [ 44.818715][ T5946] ? 0xffffffffa0004340 [ 44.819835][ T5946] ? 0xffffffffa0004340 [ 44.820947][ T5946] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 44.822521][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 44.823964][ T5946] ? lock_acquire+0x2f/0xb0 [ 44.825175][ T5946] ? __fget_files+0x40/0x3f0 [ 44.826420][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 44.827970][ T5946] ? fput+0x30/0x390 [ 44.829004][ T5946] ? __bpf_prog_get+0xa0/0x290 [ 44.830411][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 44.832047][ T5946] __sys_bpf+0xfc6/0x49a0 [ 44.833311][ T5946] ? find_held_lock+0x2d/0x110 [ 44.834890][ T5946] ? __pfx___sys_bpf+0x10/0x10 [ 44.836167][ T5946] ? __might_fault+0x13b/0x190 [ 44.837443][ T5946] ? __pfx_lock_release+0x10/0x10 [ 44.838772][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 44.840267][ T5946] ? lock_acquire+0x2f/0xb0 [ 44.841484][ T5946] ? __might_fault+0xe3/0x190 [ 44.842726][ T5946] ? xfd_validate_state+0x5d/0x180 [ 44.844088][ T5946] ? rcu_is_watching+0x12/0xc0 [ 44.845380][ T5946] __x64_sys_bpf+0x78/0xc0 [ 44.846575][ T5946] ? lockdep_hardirqs_on+0x7c/0x110 [ 44.848001][ T5946] do_syscall_64+0xcd/0x250 [ 44.849440][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.851275][ T5946] RIP: 0033:0x7f5102b5de99 [ 44.852715][ T5946] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 44.858479][ T5946] RSP: 002b:00007f5102b18228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 44.860719][ T5946] RAX: ffffffffffffffda RBX: 00007f5102be8328 RCX: 00007f5102b5de99 [ 44.862838][ T5946] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 44.864902][ T5946] RBP: 00007f5102be8320 R08: 00007f5102b186c0 R09: 00007f5102b186c0 [ 44.867004][ T5946] R10: 00007f5102b186c0 R11: 0000000000000246 R12: 00007f5102bb5074 [ 44.868999][ T5946] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffc619b1828 [ 44.871004][ T5946] [ 44.871902][ T5946] BUG: Bad page state in process syz-executor133 pfn:2b550 [ 44.874004][ T5946] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802b554000 pfn:0x2b550 [ 44.876561][ T5946] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 44.878590][ T5946] raw: 00fff00000000000 dead000000000040 ffff8880202ae000 0000000000000000 [ 44.880822][ T5946] raw: ffff88802b554000 0000000000000001 00000000ffffffff 0000000000000000 [ 44.883072][ T5946] page dumped because: page_pool leak [ 44.884484][ T5946] page_owner tracks the page as allocated [ 44.885975][ T5946] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5946, tgid 5942 (syz-executor133), ts 44468107301, free_ts 44138879272 [ 44.890638][ T5946] post_alloc_hook+0x2d1/0x350 [ 44.891876][ T5946] get_page_from_freelist+0x101e/0x3070 [ 44.893312][ T5946] __alloc_pages_noprof+0x223/0x25a0 [ 44.894697][ T5946] alloc_pages_bulk_noprof+0x77c/0x1110 [ 44.896198][ T5946] __page_pool_alloc_pages_slow+0x18f/0x770 [ 44.897891][ T5946] page_pool_alloc_netmem+0xc4/0x160 [ 44.899308][ T5946] page_pool_alloc_pages+0x1a/0x60 [ 44.900670][ T5946] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 44.902310][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 44.903717][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 44.905140][ T5946] __sys_bpf+0xfc6/0x49a0 [ 44.906296][ T5946] __x64_sys_bpf+0x78/0xc0 [ 44.907486][ T5946] do_syscall_64+0xcd/0x250 [ 44.908751][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.910314][ T5946] page last free pid 29 tgid 29 stack trace: [ 44.911929][ T5946] free_unref_page+0x5f4/0xdc0 [ 44.913198][ T5946] __folio_put+0x30d/0x3d0 [ 44.914368][ T5946] put_page+0x21e/0x280 [ 44.915507][ T5946] skb_release_data+0x4d7/0x730 [ 44.916802][ T5946] napi_consume_skb+0x15a/0x220 [ 44.918145][ T5946] net_rx_action+0x47c/0x1010 [ 44.919410][ T5946] handle_softirqs+0x213/0x8f0 [ 44.920690][ T5946] run_ksoftirqd+0x3a/0x60 [ 44.921896][ T5946] smpboot_thread_fn+0x661/0xa30 [ 44.923176][ T5946] kthread+0x2c1/0x3a0 [ 44.924342][ T5946] ret_from_fork+0x45/0x80 [ 44.925543][ T5946] ret_from_fork_asm+0x1a/0x30 [ 44.926840][ T5946] Modules linked in: [ 44.927929][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: syz-executor133 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 44.931182][ T5946] Tainted: [B]=BAD_PAGE [ 44.932292][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 44.935709][ T5946] Call Trace: [ 44.936669][ T5946] [ 44.937565][ T5946] dump_stack_lvl+0x16c/0x1f0 [ 44.938850][ T5946] bad_page+0xb3/0x1f0 [ 44.940010][ T5946] ? __pfx_bad_page+0x10/0x10 [ 44.941282][ T5946] ? page_bad_reason+0x9d/0x1e0 [ 44.942602][ T5946] free_unref_page+0x657/0xdc0 [ 44.943888][ T5946] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 44.945493][ T5946] ? __phys_addr+0xc6/0x150 [ 44.946715][ T5946] skb_free_head+0xa0/0x1d0 [ 44.948045][ T5946] skb_release_data+0x560/0x730 [ 44.949583][ T5946] sk_skb_reason_drop+0x129/0x1a0 [ 44.950971][ T5946] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 44.952665][ T5946] ? kernel_text_address+0x8d/0x100 [ 44.953999][ T5946] ? hlock_class+0x4e/0x130 [ 44.955311][ T5946] ? __lock_acquire+0x163e/0x3ce0 [ 44.956642][ T5946] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 44.958510][ T5946] ? hlock_class+0x4e/0x130 [ 44.959739][ T5946] ? __lock_acquire+0xbdd/0x3ce0 [ 44.961242][ T5946] ? __pfx___lock_acquire+0x10/0x10 [ 44.962648][ T5946] __netif_receive_skb_list_core+0x357/0x950 [ 44.964262][ T5946] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 44.965991][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 44.967693][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 44.969697][ T5946] ? lock_acquire+0x2f/0xb0 [ 44.971075][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 44.972719][ T5946] netif_receive_skb_list_internal+0x753/0xdb0 [ 44.974502][ T5946] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 44.976315][ T5946] ? __pfx_eth_type_trans+0x10/0x10 [ 44.977734][ T5946] ? __build_skb_around+0x278/0x3b0 [ 44.979255][ T5946] netif_receive_skb_list+0x4f/0x4a0 [ 44.980674][ T5946] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 44.982323][ T5946] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 44.984060][ T5946] ? bpf_test_timer_continue+0x150/0x3d0 [ 44.985465][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 44.986972][ T5946] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 44.988728][ T5946] ? try_to_wake_up+0x154/0x14f0 [ 44.990034][ T5946] ? __pfx_try_to_wake_up+0x10/0x10 [ 44.991619][ T5946] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 44.993312][ T5946] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 44.995178][ T5946] ? 0xffffffffa0004340 [ 44.996517][ T5946] ? 0xffffffffa0004340 [ 44.997748][ T5946] ? 0xffffffffa0004340 [ 44.998869][ T5946] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 45.000463][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 45.002009][ T5946] ? lock_acquire+0x2f/0xb0 [ 45.003321][ T5946] ? __fget_files+0x40/0x3f0 [ 45.004653][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 45.006328][ T5946] ? fput+0x30/0x390 [ 45.007407][ T5946] ? __bpf_prog_get+0xa0/0x290 [ 45.008969][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 45.011063][ T5946] __sys_bpf+0xfc6/0x49a0 [ 45.012281][ T5946] ? find_held_lock+0x2d/0x110 [ 45.013724][ T5946] ? __pfx___sys_bpf+0x10/0x10 [ 45.015196][ T5946] ? __might_fault+0x13b/0x190 [ 45.016491][ T5946] ? __pfx_lock_release+0x10/0x10 [ 45.017913][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 45.019312][ T5946] ? lock_acquire+0x2f/0xb0 [ 45.020598][ T5946] ? __might_fault+0xe3/0x190 [ 45.021961][ T5946] ? xfd_validate_state+0x5d/0x180 [ 45.023424][ T5946] ? rcu_is_watching+0x12/0xc0 [ 45.024788][ T5946] __x64_sys_bpf+0x78/0xc0 [ 45.026020][ T5946] ? lockdep_hardirqs_on+0x7c/0x110 [ 45.027532][ T5946] do_syscall_64+0xcd/0x250 [ 45.028894][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.030437][ T5946] RIP: 0033:0x7f5102b5de99 [ 45.031807][ T5946] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 45.037646][ T5946] RSP: 002b:00007f5102b18228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 45.039808][ T5946] RAX: ffffffffffffffda RBX: 00007f5102be8328 RCX: 00007f5102b5de99 [ 45.041875][ T5946] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 45.043935][ T5946] RBP: 00007f5102be8320 R08: 00007f5102b186c0 R09: 00007f5102b186c0 [ 45.045992][ T5946] R10: 00007f5102b186c0 R11: 0000000000000246 R12: 00007f5102bb5074 [ 45.048053][ T5946] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffc619b1828 [ 45.050192][ T5946] [ 45.051175][ T5946] BUG: Bad page state in process syz-executor133 pfn:27cc1 [ 45.053775][ T5946] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x8 pfn:0x27cc1 [ 45.056945][ T5946] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 45.059071][ T5946] raw: 00fff00000000000 dead000000000040 ffff8880202ae000 0000000000000000 [ 45.061503][ T5946] raw: 0000000000000008 0000000000000001 00000000ffffffff 0000000000000000 [ 45.063759][ T5946] page dumped because: page_pool leak [ 45.065177][ T5946] page_owner tracks the page as allocated [ 45.066667][ T5946] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5946, tgid 5942 (syz-executor133), ts 44468064016, free_ts 41221103219 [ 45.071860][ T5946] post_alloc_hook+0x2d1/0x350 [ 45.073485][ T5946] get_page_from_freelist+0x101e/0x3070 [ 45.075346][ T5946] __alloc_pages_noprof+0x223/0x25a0 [ 45.077256][ T5946] alloc_pages_bulk_noprof+0x77c/0x1110 [ 45.079133][ T5946] __page_pool_alloc_pages_slow+0x18f/0x770 [ 45.081032][ T5946] page_pool_alloc_netmem+0xc4/0x160 [ 45.082543][ T5946] page_pool_alloc_pages+0x1a/0x60 [ 45.083914][ T5946] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 45.085536][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 45.087031][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 45.088516][ T5946] __sys_bpf+0xfc6/0x49a0 [ 45.089767][ T5946] __x64_sys_bpf+0x78/0xc0 [ 45.090954][ T5946] do_syscall_64+0xcd/0x250 [ 45.092237][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.093805][ T5946] page last free pid 5924 tgid 5924 stack trace: [ 45.095443][ T5946] free_unref_page+0x5f4/0xdc0 [ 45.096728][ T5946] __folio_put+0x30d/0x3d0 [ 45.097978][ T5946] put_page+0x21e/0x280 [ 45.099219][ T5946] anon_pipe_buf_release+0x11a/0x240 [ 45.100598][ T5946] pipe_read+0x641/0x13f0 [ 45.101727][ T5946] vfs_read+0xa4c/0xbe0 [ 45.102863][ T5946] ksys_read+0x1fa/0x260 [ 45.103974][ T5946] do_syscall_64+0xcd/0x250 [ 45.105176][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.106720][ T5946] Modules linked in: [ 45.107831][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: syz-executor133 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 45.111284][ T5946] Tainted: [B]=BAD_PAGE [ 45.112421][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 45.115322][ T5946] Call Trace: [ 45.116206][ T5946] [ 45.117002][ T5946] dump_stack_lvl+0x16c/0x1f0 [ 45.118301][ T5946] bad_page+0xb3/0x1f0 [ 45.119410][ T5946] ? __pfx_bad_page+0x10/0x10 [ 45.120663][ T5946] ? page_bad_reason+0x9d/0x1e0 [ 45.121970][ T5946] free_unref_page+0x657/0xdc0 [ 45.123277][ T5946] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 45.124831][ T5946] ? __phys_addr+0xc6/0x150 [ 45.126039][ T5946] skb_free_head+0xa0/0x1d0 [ 45.127267][ T5946] skb_release_data+0x560/0x730 [ 45.128576][ T5946] sk_skb_reason_drop+0x129/0x1a0 [ 45.129909][ T5946] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 45.131700][ T5946] ? kernel_text_address+0x8d/0x100 [ 45.133104][ T5946] ? hlock_class+0x4e/0x130 [ 45.134299][ T5946] ? __lock_acquire+0x163e/0x3ce0 [ 45.135620][ T5946] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 45.137447][ T5946] ? hlock_class+0x4e/0x130 [ 45.138673][ T5946] ? __lock_acquire+0xbdd/0x3ce0 [ 45.140128][ T5946] ? __pfx___lock_acquire+0x10/0x10 [ 45.141510][ T5946] __netif_receive_skb_list_core+0x357/0x950 [ 45.143181][ T5946] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 45.144879][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 45.146262][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 45.147971][ T5946] ? lock_acquire+0x2f/0xb0 [ 45.149163][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 45.150835][ T5946] netif_receive_skb_list_internal+0x753/0xdb0 [ 45.152467][ T5946] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 45.154271][ T5946] ? __pfx_eth_type_trans+0x10/0x10 [ 45.155671][ T5946] ? __build_skb_around+0x278/0x3b0 [ 45.157041][ T5946] netif_receive_skb_list+0x4f/0x4a0 [ 45.158441][ T5946] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 45.160067][ T5946] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 45.161757][ T5946] ? bpf_test_timer_continue+0x150/0x3d0 [ 45.163250][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 45.164619][ T5946] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 45.166128][ T5946] ? try_to_wake_up+0x154/0x14f0 [ 45.167415][ T5946] ? __pfx_try_to_wake_up+0x10/0x10 [ 45.168773][ T5946] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 45.170295][ T5946] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 45.171664][ T5946] ? 0xffffffffa0004340 [ 45.172742][ T5946] ? 0xffffffffa0004340 [ 45.173854][ T5946] ? 0xffffffffa0004340 [ 45.175088][ T5946] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 45.176791][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 45.178317][ T5946] ? lock_acquire+0x2f/0xb0 [ 45.179624][ T5946] ? __fget_files+0x40/0x3f0 [ 45.180821][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 45.182318][ T5946] ? fput+0x30/0x390 [ 45.183391][ T5946] ? __bpf_prog_get+0xa0/0x290 [ 45.184620][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 45.186113][ T5946] __sys_bpf+0xfc6/0x49a0 [ 45.187222][ T5946] ? find_held_lock+0x2d/0x110 [ 45.188624][ T5946] ? __pfx___sys_bpf+0x10/0x10 [ 45.189957][ T5946] ? __might_fault+0x13b/0x190 [ 45.191174][ T5946] ? __pfx_lock_release+0x10/0x10 [ 45.192469][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 45.193986][ T5946] ? lock_acquire+0x2f/0xb0 [ 45.195210][ T5946] ? __might_fault+0xe3/0x190 [ 45.196423][ T5946] ? xfd_validate_state+0x5d/0x180 [ 45.197774][ T5946] ? rcu_is_watching+0x12/0xc0 [ 45.199152][ T5946] __x64_sys_bpf+0x78/0xc0 [ 45.200339][ T5946] ? lockdep_hardirqs_on+0x7c/0x110 [ 45.201751][ T5946] do_syscall_64+0xcd/0x250 [ 45.202971][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.204523][ T5946] RIP: 0033:0x7f5102b5de99 [ 45.205679][ T5946] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 45.211200][ T5946] RSP: 002b:00007f5102b18228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 45.213371][ T5946] RAX: ffffffffffffffda RBX: 00007f5102be8328 RCX: 00007f5102b5de99 [ 45.215588][ T5946] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 45.217747][ T5946] RBP: 00007f5102be8320 R08: 00007f5102b186c0 R09: 00007f5102b186c0 [ 45.219893][ T5946] R10: 00007f5102b186c0 R11: 0000000000000246 R12: 00007f5102bb5074 [ 45.221992][ T5946] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffc619b1828 [ 45.224144][ T5946] [ 45.225119][ T5946] BUG: Bad page state in process syz-executor133 pfn:27cc0 [ 45.228115][ T5946] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888027cc4000 pfn:0x27cc0 [ 45.230916][ T5946] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 45.232766][ T5946] raw: 00fff00000000000 dead000000000040 ffff8880202ae000 0000000000000000 [ 45.235019][ T5946] raw: ffff888027cc4000 0000000000000001 00000000ffffffff 0000000000000000 [ 45.237817][ T5946] page dumped because: page_pool leak [ 45.239389][ T5946] page_owner tracks the page as allocated [ 45.240853][ T5946] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5946, tgid 5942 (syz-executor133), ts 44468055933, free_ts 41930978742 [ 45.245138][ T5946] post_alloc_hook+0x2d1/0x350 [ 45.246315][ T5946] get_page_from_freelist+0x101e/0x3070 [ 45.247700][ T5946] __alloc_pages_noprof+0x223/0x25a0 [ 45.249318][ T5946] alloc_pages_bulk_noprof+0x77c/0x1110 [ 45.250977][ T5946] __page_pool_alloc_pages_slow+0x18f/0x770 [ 45.252859][ T5946] page_pool_alloc_netmem+0xc4/0x160 [ 45.254447][ T5946] page_pool_alloc_pages+0x1a/0x60 [ 45.255927][ T5946] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 45.257482][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 45.258921][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 45.260388][ T5946] __sys_bpf+0xfc6/0x49a0 [ 45.261464][ T5946] __x64_sys_bpf+0x78/0xc0 [ 45.262574][ T5946] do_syscall_64+0xcd/0x250 [ 45.263757][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.265290][ T5946] page last free pid 5924 tgid 5924 stack trace: [ 45.266895][ T5946] free_unref_page+0x5f4/0xdc0 [ 45.268198][ T5946] __folio_put+0x30d/0x3d0 [ 45.269458][ T5946] put_page+0x21e/0x280 [ 45.270508][ T5946] anon_pipe_buf_release+0x11a/0x240 [ 45.271876][ T5946] pipe_read+0x641/0x13f0 [ 45.272952][ T5946] vfs_read+0xa4c/0xbe0 [ 45.273999][ T5946] ksys_read+0x1fa/0x260 [ 45.275134][ T5946] do_syscall_64+0xcd/0x250 [ 45.276286][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.277840][ T5946] Modules linked in: [ 45.279118][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: syz-executor133 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 45.282191][ T5946] Tainted: [B]=BAD_PAGE [ 45.283242][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 45.285973][ T5946] Call Trace: [ 45.286827][ T5946] [ 45.287611][ T5946] dump_stack_lvl+0x16c/0x1f0 [ 45.289131][ T5946] bad_page+0xb3/0x1f0 [ 45.290199][ T5946] ? __pfx_bad_page+0x10/0x10 [ 45.291474][ T5946] ? page_bad_reason+0x9d/0x1e0 [ 45.292773][ T5946] free_unref_page+0x657/0xdc0 [ 45.294151][ T5946] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 45.295826][ T5946] ? __phys_addr+0xc6/0x150 [ 45.297033][ T5946] skb_free_head+0xa0/0x1d0 [ 45.298251][ T5946] skb_release_data+0x560/0x730 [ 45.299537][ T5946] sk_skb_reason_drop+0x129/0x1a0 [ 45.300862][ T5946] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 45.302605][ T5946] ? kernel_text_address+0x8d/0x100 [ 45.303958][ T5946] ? hlock_class+0x4e/0x130 [ 45.305162][ T5946] ? __lock_acquire+0x163e/0x3ce0 [ 45.306456][ T5946] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 45.308475][ T5946] ? hlock_class+0x4e/0x130 [ 45.309700][ T5946] ? __lock_acquire+0xbdd/0x3ce0 [ 45.311027][ T5946] ? __pfx___lock_acquire+0x10/0x10 [ 45.312369][ T5946] __netif_receive_skb_list_core+0x357/0x950 [ 45.313933][ T5946] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 45.315742][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 45.317113][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 45.318814][ T5946] ? lock_acquire+0x2f/0xb0 [ 45.320030][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 45.321688][ T5946] netif_receive_skb_list_internal+0x753/0xdb0 [ 45.323317][ T5946] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 45.325075][ T5946] ? __pfx_eth_type_trans+0x10/0x10 [ 45.326484][ T5946] ? __build_skb_around+0x278/0x3b0 [ 45.327905][ T5946] netif_receive_skb_list+0x4f/0x4a0 [ 45.329291][ T5946] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 45.330924][ T5946] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 45.332636][ T5946] ? bpf_test_timer_continue+0x150/0x3d0 [ 45.334117][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 45.335757][ T5946] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 45.337226][ T5946] ? try_to_wake_up+0x154/0x14f0 [ 45.338716][ T5946] ? __pfx_try_to_wake_up+0x10/0x10 [ 45.340132][ T5946] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 45.341713][ T5946] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 45.343140][ T5946] ? 0xffffffffa0004340 [ 45.344260][ T5946] ? 0xffffffffa0004340 [ 45.345376][ T5946] ? 0xffffffffa0004340 [ 45.346556][ T5946] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 45.348298][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 45.349673][ T5946] ? lock_acquire+0x2f/0xb0 [ 45.350883][ T5946] ? __fget_files+0x40/0x3f0 [ 45.352183][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 45.353713][ T5946] ? fput+0x30/0x390 [ 45.354758][ T5946] ? __bpf_prog_get+0xa0/0x290 [ 45.356071][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 45.357577][ T5946] __sys_bpf+0xfc6/0x49a0 [ 45.358719][ T5946] ? find_held_lock+0x2d/0x110 [ 45.359964][ T5946] ? __pfx___sys_bpf+0x10/0x10 [ 45.361203][ T5946] ? __might_fault+0x13b/0x190 [ 45.362425][ T5946] ? __pfx_lock_release+0x10/0x10 [ 45.363857][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 45.365226][ T5946] ? lock_acquire+0x2f/0xb0 [ 45.366477][ T5946] ? __might_fault+0xe3/0x190 [ 45.367734][ T5946] ? xfd_validate_state+0x5d/0x180 [ 45.369174][ T5946] ? rcu_is_watching+0x12/0xc0 [ 45.370455][ T5946] __x64_sys_bpf+0x78/0xc0 [ 45.371667][ T5946] ? lockdep_hardirqs_on+0x7c/0x110 [ 45.373005][ T5946] do_syscall_64+0xcd/0x250 [ 45.374199][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.375754][ T5946] RIP: 0033:0x7f5102b5de99 [ 45.376930][ T5946] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 45.382046][ T5946] RSP: 002b:00007f5102b18228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 45.384160][ T5946] RAX: ffffffffffffffda RBX: 00007f5102be8328 RCX: 00007f5102b5de99 [ 45.386188][ T5946] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 45.388317][ T5946] RBP: 00007f5102be8320 R08: 00007f5102b186c0 R09: 00007f5102b186c0 [ 45.390375][ T5946] R10: 00007f5102b186c0 R11: 0000000000000246 R12: 00007f5102bb5074 [ 45.392536][ T5946] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffc619b1828 [ 45.395261][ T5946] [ 45.396474][ T5946] BUG: Bad page state in process syz-executor133 pfn:2b273 [ 45.399254][ T5946] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b273 [ 45.401880][ T5946] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 45.403725][ T5946] raw: 00fff00000000000 dead000000000040 ffff8880202ae000 0000000000000000 [ 45.405949][ T5946] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 45.409464][ T5946] page dumped because: page_pool leak [ 45.410970][ T5946] page_owner tracks the page as allocated [ 45.412465][ T5946] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5946, tgid 5942 (syz-executor133), ts 44468047909, free_ts 43968266155 [ 45.416786][ T5946] post_alloc_hook+0x2d1/0x350 [ 45.418116][ T5946] get_page_from_freelist+0x101e/0x3070 [ 45.419607][ T5946] __alloc_pages_noprof+0x223/0x25a0 [ 45.420974][ T5946] alloc_pages_bulk_noprof+0x77c/0x1110 [ 45.422383][ T5946] __page_pool_alloc_pages_slow+0x18f/0x770 [ 45.423925][ T5946] page_pool_alloc_netmem+0xc4/0x160 [ 45.425301][ T5946] page_pool_alloc_pages+0x1a/0x60 [ 45.426620][ T5946] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 45.428241][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 45.429694][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 45.431103][ T5946] __sys_bpf+0xfc6/0x49a0 [ 45.432247][ T5946] __x64_sys_bpf+0x78/0xc0 [ 45.433419][ T5946] do_syscall_64+0xcd/0x250 [ 45.434635][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.436182][ T5946] page last free pid 5932 tgid 5932 stack trace: [ 45.437890][ T5946] free_unref_page+0x5f4/0xdc0 [ 45.439276][ T5946] __folio_put+0x30d/0x3d0 [ 45.440472][ T5946] free_page_and_swap_cache+0x249/0x2c0 [ 45.442028][ T5946] tlb_remove_table_rcu+0x89/0xe0 [ 45.443357][ T5946] rcu_core+0x79d/0x14d0 [ 45.444451][ T5946] handle_softirqs+0x213/0x8f0 [ 45.445695][ T5946] irq_exit_rcu+0xbb/0x120 [ 45.446883][ T5946] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 45.448910][ T5946] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 45.450903][ T5946] Modules linked in: [ 45.451900][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: syz-executor133 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 45.455265][ T5946] Tainted: [B]=BAD_PAGE [ 45.456404][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 45.459224][ T5946] Call Trace: [ 45.460098][ T5946] [ 45.460861][ T5946] dump_stack_lvl+0x16c/0x1f0 [ 45.462106][ T5946] bad_page+0xb3/0x1f0 [ 45.463224][ T5946] ? __pfx_bad_page+0x10/0x10 [ 45.464480][ T5946] ? page_bad_reason+0x9d/0x1e0 [ 45.465781][ T5946] free_unref_page+0x657/0xdc0 [ 45.467083][ T5946] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 45.468986][ T5946] ? __phys_addr+0xc6/0x150 [ 45.470198][ T5946] skb_free_head+0xa0/0x1d0 [ 45.471416][ T5946] skb_release_data+0x560/0x730 [ 45.472699][ T5946] sk_skb_reason_drop+0x129/0x1a0 [ 45.474008][ T5946] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 45.475923][ T5946] ? kernel_text_address+0x8d/0x100 [ 45.477383][ T5946] ? hlock_class+0x4e/0x130 [ 45.478639][ T5946] ? __lock_acquire+0x163e/0x3ce0 [ 45.479978][ T5946] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 45.481808][ T5946] ? hlock_class+0x4e/0x130 [ 45.482987][ T5946] ? __lock_acquire+0xbdd/0x3ce0 [ 45.484233][ T5946] ? __pfx___lock_acquire+0x10/0x10 [ 45.485596][ T5946] __netif_receive_skb_list_core+0x357/0x950 [ 45.487173][ T5946] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 45.488878][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 45.490228][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 45.491876][ T5946] ? lock_acquire+0x2f/0xb0 [ 45.493063][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 45.494720][ T5946] netif_receive_skb_list_internal+0x753/0xdb0 [ 45.496335][ T5946] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 45.498365][ T5946] ? __pfx_eth_type_trans+0x10/0x10 [ 45.499763][ T5946] ? __build_skb_around+0x278/0x3b0 [ 45.501135][ T5946] netif_receive_skb_list+0x4f/0x4a0 [ 45.502539][ T5946] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 45.504208][ T5946] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 45.505918][ T5946] ? bpf_test_timer_continue+0x150/0x3d0 [ 45.507368][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 45.508814][ T5946] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 45.510322][ T5946] ? try_to_wake_up+0x154/0x14f0 [ 45.511648][ T5946] ? __pfx_try_to_wake_up+0x10/0x10 [ 45.513028][ T5946] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 45.514559][ T5946] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 45.515918][ T5946] ? 0xffffffffa0004340 [ 45.517013][ T5946] ? 0xffffffffa0004340 [ 45.518125][ T5946] ? 0xffffffffa0004340 [ 45.519193][ T5946] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 45.520674][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 45.522019][ T5946] ? lock_acquire+0x2f/0xb0 [ 45.523187][ T5946] ? __fget_files+0x40/0x3f0 [ 45.524402][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 45.525911][ T5946] ? fput+0x30/0x390 [ 45.526938][ T5946] ? __bpf_prog_get+0xa0/0x290 [ 45.528248][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 45.529720][ T5946] __sys_bpf+0xfc6/0x49a0 [ 45.531482][ T5946] ? find_held_lock+0x2d/0x110 [ 45.532997][ T5946] ? __pfx___sys_bpf+0x10/0x10 [ 45.534363][ T5946] ? __might_fault+0x13b/0x190 [ 45.535758][ T5946] ? __pfx_lock_release+0x10/0x10 [ 45.537176][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 45.538690][ T5946] ? lock_acquire+0x2f/0xb0 [ 45.539853][ T5946] ? __might_fault+0xe3/0x190 [ 45.541062][ T5946] ? xfd_validate_state+0x5d/0x180 [ 45.542342][ T5946] ? rcu_is_watching+0x12/0xc0 [ 45.543541][ T5946] __x64_sys_bpf+0x78/0xc0 [ 45.544675][ T5946] ? lockdep_hardirqs_on+0x7c/0x110 [ 45.545960][ T5946] do_syscall_64+0xcd/0x250 [ 45.547128][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.548722][ T5946] RIP: 0033:0x7f5102b5de99 [ 45.549845][ T5946] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 45.554907][ T5946] RSP: 002b:00007f5102b18228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 45.557088][ T5946] RAX: ffffffffffffffda RBX: 00007f5102be8328 RCX: 00007f5102b5de99 [ 45.559335][ T5946] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 45.561397][ T5946] RBP: 00007f5102be8320 R08: 00007f5102b186c0 R09: 00007f5102b186c0 [ 45.563487][ T5946] R10: 00007f5102b186c0 R11: 0000000000000246 R12: 00007f5102bb5074 [ 45.565553][ T5946] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffc619b1828 [ 45.567594][ T5946] [ 45.568554][ T5946] BUG: Bad page state in process syz-executor133 pfn:2b272 [ 45.570556][ T5946] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b272 [ 45.572795][ T5946] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 45.574627][ T5946] raw: 00fff00000000000 dead000000000040 ffff8880202ae000 0000000000000000 [ 45.576885][ T5946] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 45.579215][ T5946] page dumped because: page_pool leak [ 45.580545][ T5946] page_owner tracks the page as allocated [ 45.582007][ T5946] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5946, tgid 5942 (syz-executor133), ts 44468039689, free_ts 43968250819 [ 45.586379][ T5946] post_alloc_hook+0x2d1/0x350 [ 45.587635][ T5946] get_page_from_freelist+0x101e/0x3070 [ 45.589140][ T5946] __alloc_pages_noprof+0x223/0x25a0 [ 45.590521][ T5946] alloc_pages_bulk_noprof+0x77c/0x1110 [ 45.591957][ T5946] __page_pool_alloc_pages_slow+0x18f/0x770 [ 45.593452][ T5946] page_pool_alloc_netmem+0xc4/0x160 [ 45.594845][ T5946] page_pool_alloc_pages+0x1a/0x60 [ 45.596160][ T5946] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 45.597833][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 45.599156][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 45.600585][ T5946] __sys_bpf+0xfc6/0x49a0 [ 45.601709][ T5946] __x64_sys_bpf+0x78/0xc0 [ 45.602893][ T5946] do_syscall_64+0xcd/0x250 [ 45.604075][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.605631][ T5946] page last free pid 5932 tgid 5932 stack trace: [ 45.607247][ T5946] free_unref_page+0x5f4/0xdc0 [ 45.608564][ T5946] __folio_put+0x30d/0x3d0 [ 45.609694][ T5946] free_page_and_swap_cache+0x249/0x2c0 [ 45.611126][ T5946] tlb_remove_table_rcu+0x89/0xe0 [ 45.612449][ T5946] rcu_core+0x79d/0x14d0 [ 45.613563][ T5946] handle_softirqs+0x213/0x8f0 [ 45.614771][ T5946] irq_exit_rcu+0xbb/0x120 [ 45.615925][ T5946] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 45.617371][ T5946] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 45.618968][ T5946] Modules linked in: [ 45.619964][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: syz-executor133 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 45.623046][ T5946] Tainted: [B]=BAD_PAGE [ 45.624099][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 45.626869][ T5946] Call Trace: [ 45.627758][ T5946] [ 45.628548][ T5946] dump_stack_lvl+0x16c/0x1f0 [ 45.629775][ T5946] bad_page+0xb3/0x1f0 [ 45.630852][ T5946] ? __pfx_bad_page+0x10/0x10 [ 45.632083][ T5946] ? page_bad_reason+0x9d/0x1e0 [ 45.633346][ T5946] free_unref_page+0x657/0xdc0 [ 45.634601][ T5946] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 45.636119][ T5946] ? __phys_addr+0xc6/0x150 [ 45.637273][ T5946] skb_free_head+0xa0/0x1d0 [ 45.638433][ T5946] skb_release_data+0x560/0x730 [ 45.639646][ T5946] sk_skb_reason_drop+0x129/0x1a0 [ 45.640907][ T5946] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 45.642532][ T5946] ? kernel_text_address+0x8d/0x100 [ 45.643890][ T5946] ? hlock_class+0x4e/0x130 [ 45.645081][ T5946] ? __lock_acquire+0x163e/0x3ce0 [ 45.646373][ T5946] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 45.648213][ T5946] ? hlock_class+0x4e/0x130 [ 45.649396][ T5946] ? __lock_acquire+0xbdd/0x3ce0 [ 45.650686][ T5946] ? __pfx___lock_acquire+0x10/0x10 [ 45.652032][ T5946] __netif_receive_skb_list_core+0x357/0x950 [ 45.653550][ T5946] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 45.655171][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 45.656466][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 45.658047][ T5946] ? lock_acquire+0x2f/0xb0 [ 45.659186][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 45.660762][ T5946] netif_receive_skb_list_internal+0x753/0xdb0 [ 45.662345][ T5946] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 45.664066][ T5946] ? __pfx_eth_type_trans+0x10/0x10 [ 45.665416][ T5946] ? __build_skb_around+0x278/0x3b0 [ 45.666773][ T5946] netif_receive_skb_list+0x4f/0x4a0 [ 45.668084][ T5946] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 45.669701][ T5946] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 45.671317][ T5946] ? bpf_test_timer_continue+0x150/0x3d0 [ 45.672748][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 45.674108][ T5946] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 45.675619][ T5946] ? try_to_wake_up+0x154/0x14f0 [ 45.677026][ T5946] ? __pfx_try_to_wake_up+0x10/0x10 [ 45.678582][ T5946] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 45.680229][ T5946] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 45.681610][ T5946] ? 0xffffffffa0004340 [ 45.682698][ T5946] ? 0xffffffffa0004340 [ 45.683752][ T5946] ? 0xffffffffa0004340 [ 45.684816][ T5946] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 45.686342][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 45.687738][ T5946] ? lock_acquire+0x2f/0xb0 [ 45.688906][ T5946] ? __fget_files+0x40/0x3f0 [ 45.690119][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 45.691660][ T5946] ? fput+0x30/0x390 [ 45.692685][ T5946] ? __bpf_prog_get+0xa0/0x290 [ 45.693925][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 45.695482][ T5946] __sys_bpf+0xfc6/0x49a0 [ 45.696612][ T5946] ? find_held_lock+0x2d/0x110 [ 45.697916][ T5946] ? __pfx___sys_bpf+0x10/0x10 [ 45.699164][ T5946] ? __might_fault+0x13b/0x190 [ 45.700416][ T5946] ? __pfx_lock_release+0x10/0x10 [ 45.701713][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 45.703078][ T5946] ? lock_acquire+0x2f/0xb0 [ 45.704243][ T5946] ? __might_fault+0xe3/0x190 [ 45.705454][ T5946] ? xfd_validate_state+0x5d/0x180 [ 45.706756][ T5946] ? rcu_is_watching+0x12/0xc0 [ 45.708016][ T5946] __x64_sys_bpf+0x78/0xc0 [ 45.709169][ T5946] ? lockdep_hardirqs_on+0x7c/0x110 [ 45.710482][ T5946] do_syscall_64+0xcd/0x250 [ 45.711680][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.713210][ T5946] RIP: 0033:0x7f5102b5de99 [ 45.714368][ T5946] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 45.719338][ T5946] RSP: 002b:00007f5102b18228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 45.721482][ T5946] RAX: ffffffffffffffda RBX: 00007f5102be8328 RCX: 00007f5102b5de99 [ 45.723446][ T5946] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 45.725383][ T5946] RBP: 00007f5102be8320 R08: 00007f5102b186c0 R09: 00007f5102b186c0 [ 45.727331][ T5946] R10: 00007f5102b186c0 R11: 0000000000000246 R12: 00007f5102bb5074 [ 45.729299][ T5946] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffc619b1828 [ 45.731281][ T5946] [ 45.732194][ T5946] BUG: Bad page state in process syz-executor133 pfn:2b271 [ 45.734132][ T5946] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x8 pfn:0x2b271 [ 45.736467][ T5946] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 45.738441][ T5946] raw: 00fff00000000000 dead000000000040 ffff8880202ae000 0000000000000000 [ 45.740641][ T5946] raw: 0000000000000008 0000000000000001 00000000ffffffff 0000000000000000 [ 45.742787][ T5946] page dumped because: page_pool leak [ 45.744177][ T5946] page_owner tracks the page as allocated [ 45.745606][ T5946] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5946, tgid 5942 (syz-executor133), ts 44468031766, free_ts 43968259824 [ 45.749935][ T5946] post_alloc_hook+0x2d1/0x350 [ 45.751285][ T5946] get_page_from_freelist+0x101e/0x3070 [ 45.752663][ T5946] __alloc_pages_noprof+0x223/0x25a0 [ 45.753983][ T5946] alloc_pages_bulk_noprof+0x77c/0x1110 [ 45.755428][ T5946] __page_pool_alloc_pages_slow+0x18f/0x770 [ 45.756952][ T5946] page_pool_alloc_netmem+0xc4/0x160 [ 45.758403][ T5946] page_pool_alloc_pages+0x1a/0x60 [ 45.759851][ T5946] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 45.761448][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 45.762791][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 45.764196][ T5946] __sys_bpf+0xfc6/0x49a0 [ 45.765305][ T5946] __x64_sys_bpf+0x78/0xc0 [ 45.766453][ T5946] do_syscall_64+0xcd/0x250 [ 45.767637][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.769240][ T5946] page last free pid 5932 tgid 5932 stack trace: [ 45.770977][ T5946] free_unref_page+0x5f4/0xdc0 [ 45.772210][ T5946] __folio_put+0x30d/0x3d0 [ 45.773364][ T5946] free_page_and_swap_cache+0x249/0x2c0 [ 45.774750][ T5946] tlb_remove_table_rcu+0x89/0xe0 [ 45.775977][ T5946] rcu_core+0x79d/0x14d0 [ 45.777066][ T5946] handle_softirqs+0x213/0x8f0 [ 45.778330][ T5946] irq_exit_rcu+0xbb/0x120 [ 45.779579][ T5946] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 45.780980][ T5946] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 45.782462][ T5946] Modules linked in: [ 45.783479][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: syz-executor133 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 45.786634][ T5946] Tainted: [B]=BAD_PAGE [ 45.787742][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 45.790457][ T5946] Call Trace: [ 45.791342][ T5946] [ 45.792104][ T5946] dump_stack_lvl+0x16c/0x1f0 [ 45.793423][ T5946] bad_page+0xb3/0x1f0 [ 45.794624][ T5946] ? __pfx_bad_page+0x10/0x10 [ 45.796028][ T5946] ? page_bad_reason+0x9d/0x1e0 [ 45.797299][ T5946] free_unref_page+0x657/0xdc0 [ 45.798569][ T5946] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 45.800127][ T5946] ? __phys_addr+0xc6/0x150 [ 45.801307][ T5946] skb_free_head+0xa0/0x1d0 [ 45.802497][ T5946] skb_release_data+0x560/0x730 [ 45.803742][ T5946] sk_skb_reason_drop+0x129/0x1a0 [ 45.804990][ T5946] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 45.806676][ T5946] ? kernel_text_address+0x8d/0x100 [ 45.808062][ T5946] ? hlock_class+0x4e/0x130 [ 45.809235][ T5946] ? __lock_acquire+0x163e/0x3ce0 [ 45.810523][ T5946] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 45.812309][ T5946] ? hlock_class+0x4e/0x130 [ 45.813487][ T5946] ? __lock_acquire+0xbdd/0x3ce0 [ 45.814771][ T5946] ? __pfx___lock_acquire+0x10/0x10 [ 45.816130][ T5946] __netif_receive_skb_list_core+0x357/0x950 [ 45.817624][ T5946] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 45.819232][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 45.820554][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 45.822122][ T5946] ? lock_acquire+0x2f/0xb0 [ 45.823295][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 45.824897][ T5946] netif_receive_skb_list_internal+0x753/0xdb0 [ 45.826466][ T5946] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 45.828184][ T5946] ? __pfx_eth_type_trans+0x10/0x10 [ 45.829524][ T5946] ? __build_skb_around+0x278/0x3b0 [ 45.830840][ T5946] netif_receive_skb_list+0x4f/0x4a0 [ 45.832170][ T5946] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 45.833774][ T5946] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 45.835483][ T5946] ? bpf_test_timer_continue+0x150/0x3d0 [ 45.836895][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 45.838276][ T5946] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 45.839894][ T5946] ? try_to_wake_up+0x154/0x14f0 [ 45.841191][ T5946] ? __pfx_try_to_wake_up+0x10/0x10 [ 45.842551][ T5946] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 45.844180][ T5946] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 45.845561][ T5946] ? 0xffffffffa0004340 [ 45.846642][ T5946] ? 0xffffffffa0004340 [ 45.847731][ T5946] ? 0xffffffffa0004340 [ 45.848860][ T5946] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 45.850380][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 45.851795][ T5946] ? lock_acquire+0x2f/0xb0 [ 45.852972][ T5946] ? __fget_files+0x40/0x3f0 [ 45.854175][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 45.855737][ T5946] ? fput+0x30/0x390 [ 45.856888][ T5946] ? __bpf_prog_get+0xa0/0x290 [ 45.858226][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 45.859753][ T5946] __sys_bpf+0xfc6/0x49a0 [ 45.860857][ T5946] ? find_held_lock+0x2d/0x110 [ 45.862125][ T5946] ? __pfx___sys_bpf+0x10/0x10 [ 45.863361][ T5946] ? __might_fault+0x13b/0x190 [ 45.864627][ T5946] ? __pfx_lock_release+0x10/0x10 [ 45.865966][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 45.867353][ T5946] ? lock_acquire+0x2f/0xb0 [ 45.868548][ T5946] ? __might_fault+0xe3/0x190 [ 45.869772][ T5946] ? xfd_validate_state+0x5d/0x180 [ 45.871101][ T5946] ? rcu_is_watching+0x12/0xc0 [ 45.872377][ T5946] __x64_sys_bpf+0x78/0xc0 [ 45.873560][ T5946] ? lockdep_hardirqs_on+0x7c/0x110 [ 45.874891][ T5946] do_syscall_64+0xcd/0x250 [ 45.876085][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.877637][ T5946] RIP: 0033:0x7f5102b5de99 [ 45.878836][ T5946] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 45.883772][ T5946] RSP: 002b:00007f5102b18228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 45.885914][ T5946] RAX: ffffffffffffffda RBX: 00007f5102be8328 RCX: 00007f5102b5de99 [ 45.888541][ T5946] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 45.890868][ T5946] RBP: 00007f5102be8320 R08: 00007f5102b186c0 R09: 00007f5102b186c0 [ 45.892916][ T5946] R10: 00007f5102b186c0 R11: 0000000000000246 R12: 00007f5102bb5074 [ 45.894985][ T5946] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffc619b1828 [ 45.897056][ T5946] [ 45.898037][ T5946] BUG: Bad page state in process syz-executor133 pfn:2b270 [ 45.900137][ T5946] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802b276600 pfn:0x2b270 [ 45.902655][ T5946] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 45.904486][ T5946] raw: 00fff00000000000 dead000000000040 ffff8880202ae000 0000000000000000 [ 45.906721][ T5946] raw: ffff88802b276600 0000000000000001 00000000ffffffff 0000000000000000 [ 45.909153][ T5946] page dumped because: page_pool leak [ 45.911150][ T5946] page_owner tracks the page as allocated [ 45.912827][ T5946] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5946, tgid 5942 (syz-executor133), ts 44468023791, free_ts 43968304053 [ 45.917215][ T5946] post_alloc_hook+0x2d1/0x350 [ 45.918520][ T5946] get_page_from_freelist+0x101e/0x3070 [ 45.919984][ T5946] __alloc_pages_noprof+0x223/0x25a0 [ 45.921358][ T5946] alloc_pages_bulk_noprof+0x77c/0x1110 [ 45.922809][ T5946] __page_pool_alloc_pages_slow+0x18f/0x770 [ 45.924348][ T5946] page_pool_alloc_netmem+0xc4/0x160 [ 45.925712][ T5946] page_pool_alloc_pages+0x1a/0x60 [ 45.927051][ T5946] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 45.928675][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 45.929980][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 45.931360][ T5946] __sys_bpf+0xfc6/0x49a0 [ 45.932467][ T5946] __x64_sys_bpf+0x78/0xc0 [ 45.933612][ T5946] do_syscall_64+0xcd/0x250 [ 45.934804][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.936666][ T5946] page last free pid 5932 tgid 5932 stack trace: [ 45.938506][ T5946] free_unref_page+0x5f4/0xdc0 [ 45.939714][ T5946] __folio_put+0x30d/0x3d0 [ 45.940841][ T5946] free_page_and_swap_cache+0x249/0x2c0 [ 45.942194][ T5946] tlb_remove_table_rcu+0x89/0xe0 [ 45.943500][ T5946] rcu_core+0x79d/0x14d0 [ 45.944617][ T5946] handle_softirqs+0x213/0x8f0 [ 45.945840][ T5946] irq_exit_rcu+0xbb/0x120 [ 45.946941][ T5946] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 45.948412][ T5946] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 45.949976][ T5946] Modules linked in: [ 45.950997][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: syz-executor133 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 45.954125][ T5946] Tainted: [B]=BAD_PAGE [ 45.955214][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 45.957957][ T5946] Call Trace: [ 45.958832][ T5946] [ 45.959592][ T5946] dump_stack_lvl+0x16c/0x1f0 [ 45.960802][ T5946] bad_page+0xb3/0x1f0 [ 45.961855][ T5946] ? __pfx_bad_page+0x10/0x10 [ 45.963086][ T5946] ? page_bad_reason+0x9d/0x1e0 [ 45.964357][ T5946] free_unref_page+0x657/0xdc0 [ 45.965604][ T5946] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 45.967177][ T5946] ? __phys_addr+0xc6/0x150 [ 45.968365][ T5946] skb_free_head+0xa0/0x1d0 [ 45.969552][ T5946] skb_release_data+0x560/0x730 [ 45.970821][ T5946] sk_skb_reason_drop+0x129/0x1a0 [ 45.972120][ T5946] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 45.973799][ T5946] ? kernel_text_address+0x8d/0x100 [ 45.975159][ T5946] ? hlock_class+0x4e/0x130 [ 45.976334][ T5946] ? __lock_acquire+0x163e/0x3ce0 [ 45.977636][ T5946] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 45.979468][ T5946] ? hlock_class+0x4e/0x130 [ 45.980639][ T5946] ? __lock_acquire+0xbdd/0x3ce0 [ 45.981912][ T5946] ? __pfx___lock_acquire+0x10/0x10 [ 45.983246][ T5946] __netif_receive_skb_list_core+0x357/0x950 [ 45.984810][ T5946] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 45.986481][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 45.987832][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 45.989465][ T5946] ? lock_acquire+0x2f/0xb0 [ 45.991152][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 45.992934][ T5946] netif_receive_skb_list_internal+0x753/0xdb0 [ 45.994543][ T5946] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 45.996361][ T5946] ? __pfx_eth_type_trans+0x10/0x10 [ 45.997724][ T5946] ? __build_skb_around+0x278/0x3b0 [ 45.999090][ T5946] netif_receive_skb_list+0x4f/0x4a0 [ 46.000451][ T5946] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 46.002069][ T5946] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 46.003790][ T5946] ? bpf_test_timer_continue+0x150/0x3d0 [ 46.005267][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 46.006685][ T5946] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 46.008172][ T5946] ? try_to_wake_up+0x154/0x14f0 [ 46.009449][ T5946] ? __pfx_try_to_wake_up+0x10/0x10 [ 46.010810][ T5946] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 46.012358][ T5946] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 46.013743][ T5946] ? 0xffffffffa0004340 [ 46.014834][ T5946] ? 0xffffffffa0004340 [ 46.015883][ T5946] ? 0xffffffffa0004340 [ 46.016947][ T5946] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 46.018455][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 46.019830][ T5946] ? lock_acquire+0x2f/0xb0 [ 46.020982][ T5946] ? __fget_files+0x40/0x3f0 [ 46.022171][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 46.023688][ T5946] ? fput+0x30/0x390 [ 46.024691][ T5946] ? __bpf_prog_get+0xa0/0x290 [ 46.025945][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 46.027453][ T5946] __sys_bpf+0xfc6/0x49a0 [ 46.028573][ T5946] ? find_held_lock+0x2d/0x110 [ 46.029798][ T5946] ? __pfx___sys_bpf+0x10/0x10 [ 46.031044][ T5946] ? __might_fault+0x13b/0x190 [ 46.032255][ T5946] ? __pfx_lock_release+0x10/0x10 [ 46.033471][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 46.034789][ T5946] ? lock_acquire+0x2f/0xb0 [ 46.035959][ T5946] ? __might_fault+0xe3/0x190 [ 46.037111][ T5946] ? xfd_validate_state+0x5d/0x180 [ 46.038384][ T5946] ? rcu_is_watching+0x12/0xc0 [ 46.039586][ T5946] __x64_sys_bpf+0x78/0xc0 [ 46.040701][ T5946] ? lockdep_hardirqs_on+0x7c/0x110 [ 46.041975][ T5946] do_syscall_64+0xcd/0x250 [ 46.043113][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.044597][ T5946] RIP: 0033:0x7f5102b5de99 [ 46.045692][ T5946] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 46.050416][ T5946] RSP: 002b:00007f5102b18228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 46.052437][ T5946] RAX: ffffffffffffffda RBX: 00007f5102be8328 RCX: 00007f5102b5de99 [ 46.054351][ T5946] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 46.056321][ T5946] RBP: 00007f5102be8320 R08: 00007f5102b186c0 R09: 00007f5102b186c0 [ 46.058261][ T5946] R10: 00007f5102b186c0 R11: 0000000000000246 R12: 00007f5102bb5074 [ 46.060317][ T5946] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffc619b1828 [ 46.062305][ T5946] [ 46.063253][ T5946] BUG: Bad page state in process syz-executor133 pfn:309d7 [ 46.065866][ T5946] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x309d7 [ 46.068488][ T5946] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 46.070284][ T5946] raw: 00fff00000000000 dead000000000040 ffff8880202ae000 0000000000000000 [ 46.072367][ T5946] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 46.074453][ T5946] page dumped because: page_pool leak [ 46.075828][ T5946] page_owner tracks the page as allocated [ 46.077323][ T5946] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5946, tgid 5942 (syz-executor133), ts 44468014991, free_ts 28536726972 [ 46.081620][ T5946] post_alloc_hook+0x2d1/0x350 [ 46.083008][ T5946] get_page_from_freelist+0x101e/0x3070 [ 46.084423][ T5946] __alloc_pages_noprof+0x223/0x25a0 [ 46.085760][ T5946] alloc_pages_bulk_noprof+0x77c/0x1110 [ 46.087160][ T5946] __page_pool_alloc_pages_slow+0x18f/0x770 [ 46.088678][ T5946] page_pool_alloc_netmem+0xc4/0x160 [ 46.090106][ T5946] page_pool_alloc_pages+0x1a/0x60 [ 46.091420][ T5946] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 46.092948][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 46.094233][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 46.095584][ T5946] __sys_bpf+0xfc6/0x49a0 [ 46.096657][ T5946] __x64_sys_bpf+0x78/0xc0 [ 46.097799][ T5946] do_syscall_64+0xcd/0x250 [ 46.099134][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.100628][ T5946] page last free pid 5829 tgid 5829 stack trace: [ 46.102173][ T5946] free_unref_page+0x5f4/0xdc0 [ 46.103369][ T5946] __put_partials+0x14c/0x170 [ 46.104558][ T5946] qlist_free_all+0x4e/0x120 [ 46.105723][ T5946] kasan_quarantine_reduce+0x192/0x1e0 [ 46.107126][ T5946] __kasan_slab_alloc+0x69/0x90 [ 46.108471][ T5946] kmem_cache_alloc_noprof+0x121/0x2f0 [ 46.109998][ T5946] getname_flags.part.0+0x4c/0x550 [ 46.111291][ T5946] getname_flags+0x93/0xf0 [ 46.112434][ T5946] vfs_fstatat+0x86/0x160 [ 46.113534][ T5946] __do_sys_newfstatat+0xa2/0x130 [ 46.114813][ T5946] do_syscall_64+0xcd/0x250 [ 46.115972][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.117441][ T5946] Modules linked in: [ 46.118519][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: syz-executor133 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 46.121679][ T5946] Tainted: [B]=BAD_PAGE [ 46.122741][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 46.125366][ T5946] Call Trace: [ 46.126236][ T5946] [ 46.127017][ T5946] dump_stack_lvl+0x16c/0x1f0 [ 46.128249][ T5946] bad_page+0xb3/0x1f0 [ 46.129332][ T5946] ? __pfx_bad_page+0x10/0x10 [ 46.131184][ T5946] ? page_bad_reason+0x9d/0x1e0 [ 46.132698][ T5946] free_unref_page+0x657/0xdc0 [ 46.134359][ T5946] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 46.136193][ T5946] ? __phys_addr+0xc6/0x150 [ 46.137380][ T5946] skb_free_head+0xa0/0x1d0 [ 46.138730][ T5946] skb_release_data+0x560/0x730 [ 46.140042][ T5946] sk_skb_reason_drop+0x129/0x1a0 [ 46.141336][ T5946] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 46.143069][ T5946] ? kernel_text_address+0x8d/0x100 [ 46.144424][ T5946] ? hlock_class+0x4e/0x130 [ 46.145598][ T5946] ? __lock_acquire+0x163e/0x3ce0 [ 46.146879][ T5946] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 46.148730][ T5946] ? hlock_class+0x4e/0x130 [ 46.149887][ T5946] ? __lock_acquire+0xbdd/0x3ce0 [ 46.151139][ T5946] ? __pfx___lock_acquire+0x10/0x10 [ 46.152457][ T5946] __netif_receive_skb_list_core+0x357/0x950 [ 46.154016][ T5946] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 46.155676][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 46.156988][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 46.158585][ T5946] ? lock_acquire+0x2f/0xb0 [ 46.159795][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 46.161387][ T5946] netif_receive_skb_list_internal+0x753/0xdb0 [ 46.162958][ T5946] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 46.164670][ T5946] ? __pfx_eth_type_trans+0x10/0x10 [ 46.165976][ T5946] ? __build_skb_around+0x278/0x3b0 [ 46.167264][ T5946] netif_receive_skb_list+0x4f/0x4a0 [ 46.168606][ T5946] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 46.170199][ T5946] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 46.171881][ T5946] ? bpf_test_timer_continue+0x150/0x3d0 [ 46.173301][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 46.174679][ T5946] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 46.176151][ T5946] ? try_to_wake_up+0x154/0x14f0 [ 46.177408][ T5946] ? __pfx_try_to_wake_up+0x10/0x10 [ 46.178868][ T5946] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 46.180572][ T5946] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 46.181882][ T5946] ? 0xffffffffa0004340 [ 46.182927][ T5946] ? 0xffffffffa0004340 [ 46.184001][ T5946] ? 0xffffffffa0004340 [ 46.185024][ T5946] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 46.186447][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 46.187795][ T5946] ? lock_acquire+0x2f/0xb0 [ 46.188951][ T5946] ? __fget_files+0x40/0x3f0 [ 46.190165][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 46.191802][ T5946] ? fput+0x30/0x390 [ 46.192772][ T5946] ? __bpf_prog_get+0xa0/0x290 [ 46.194001][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 46.195494][ T5946] __sys_bpf+0xfc6/0x49a0 [ 46.196568][ T5946] ? find_held_lock+0x2d/0x110 [ 46.197776][ T5946] ? __pfx___sys_bpf+0x10/0x10 [ 46.199013][ T5946] ? __might_fault+0x13b/0x190 [ 46.200268][ T5946] ? __pfx_lock_release+0x10/0x10 [ 46.201547][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 46.202837][ T5946] ? lock_acquire+0x2f/0xb0 [ 46.203989][ T5946] ? __might_fault+0xe3/0x190 [ 46.205195][ T5946] ? xfd_validate_state+0x5d/0x180 [ 46.206476][ T5946] ? rcu_is_watching+0x12/0xc0 [ 46.207666][ T5946] __x64_sys_bpf+0x78/0xc0 [ 46.208782][ T5946] ? lockdep_hardirqs_on+0x7c/0x110 [ 46.210045][ T5946] do_syscall_64+0xcd/0x250 [ 46.211224][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.212697][ T5946] RIP: 0033:0x7f5102b5de99 [ 46.213806][ T5946] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 46.218572][ T5946] RSP: 002b:00007f5102b18228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 46.220644][ T5946] RAX: ffffffffffffffda RBX: 00007f5102be8328 RCX: 00007f5102b5de99 [ 46.222598][ T5946] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 46.224662][ T5946] RBP: 00007f5102be8320 R08: 00007f5102b186c0 R09: 00007f5102b186c0 [ 46.226617][ T5946] R10: 00007f5102b186c0 R11: 0000000000000246 R12: 00007f5102bb5074 [ 46.228659][ T5946] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffc619b1828 [ 46.230629][ T5946] [ 46.231514][ T5946] BUG: Bad page state in process syz-executor133 pfn:309d6 [ 46.234076][ T5946] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x309d6 [ 46.236561][ T5946] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 46.238413][ T5946] raw: 00fff00000000000 dead000000000040 ffff8880202ae000 0000000000000000 [ 46.240657][ T5946] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 46.242737][ T5946] page dumped because: page_pool leak [ 46.244070][ T5946] page_owner tracks the page as allocated [ 46.245427][ T5946] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5946, tgid 5942 (syz-executor133), ts 44468006977, free_ts 28536726972 [ 46.249674][ T5946] post_alloc_hook+0x2d1/0x350 [ 46.251010][ T5946] get_page_from_freelist+0x101e/0x3070 [ 46.252341][ T5946] __alloc_pages_noprof+0x223/0x25a0 [ 46.253661][ T5946] alloc_pages_bulk_noprof+0x77c/0x1110 [ 46.255032][ T5946] __page_pool_alloc_pages_slow+0x18f/0x770 [ 46.256495][ T5946] page_pool_alloc_netmem+0xc4/0x160 [ 46.257921][ T5946] page_pool_alloc_pages+0x1a/0x60 [ 46.259321][ T5946] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 46.260803][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 46.262092][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 46.263469][ T5946] __sys_bpf+0xfc6/0x49a0 [ 46.264542][ T5946] __x64_sys_bpf+0x78/0xc0 [ 46.265645][ T5946] do_syscall_64+0xcd/0x250 [ 46.266766][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.268296][ T5946] page last free pid 5829 tgid 5829 stack trace: [ 46.269983][ T5946] free_unref_page+0x5f4/0xdc0 [ 46.271257][ T5946] __put_partials+0x14c/0x170 [ 46.272486][ T5946] qlist_free_all+0x4e/0x120 [ 46.273655][ T5946] kasan_quarantine_reduce+0x192/0x1e0 [ 46.275071][ T5946] __kasan_slab_alloc+0x69/0x90 [ 46.276292][ T5946] kmem_cache_alloc_noprof+0x121/0x2f0 [ 46.277651][ T5946] getname_flags.part.0+0x4c/0x550 [ 46.279023][ T5946] getname_flags+0x93/0xf0 [ 46.280293][ T5946] vfs_fstatat+0x86/0x160 [ 46.281427][ T5946] __do_sys_newfstatat+0xa2/0x130 [ 46.282718][ T5946] do_syscall_64+0xcd/0x250 [ 46.283901][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.285400][ T5946] Modules linked in: [ 46.286410][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: syz-executor133 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 46.289585][ T5946] Tainted: [B]=BAD_PAGE [ 46.290626][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 46.293312][ T5946] Call Trace: [ 46.294158][ T5946] [ 46.294945][ T5946] dump_stack_lvl+0x16c/0x1f0 [ 46.296147][ T5946] bad_page+0xb3/0x1f0 [ 46.297188][ T5946] ? __pfx_bad_page+0x10/0x10 [ 46.298414][ T5946] ? page_bad_reason+0x9d/0x1e0 [ 46.299638][ T5946] free_unref_page+0x657/0xdc0 [ 46.300830][ T5946] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 46.302380][ T5946] ? __phys_addr+0xc6/0x150 [ 46.303532][ T5946] skb_free_head+0xa0/0x1d0 [ 46.304680][ T5946] skb_release_data+0x560/0x730 [ 46.305898][ T5946] sk_skb_reason_drop+0x129/0x1a0 [ 46.307193][ T5946] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 46.308859][ T5946] ? kernel_text_address+0x8d/0x100 [ 46.310158][ T5946] ? hlock_class+0x4e/0x130 [ 46.311342][ T5946] ? __lock_acquire+0x163e/0x3ce0 [ 46.312633][ T5946] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 46.314442][ T5946] ? hlock_class+0x4e/0x130 [ 46.315646][ T5946] ? __lock_acquire+0xbdd/0x3ce0 [ 46.316894][ T5946] ? __pfx___lock_acquire+0x10/0x10 [ 46.318251][ T5946] __netif_receive_skb_list_core+0x357/0x950 [ 46.319786][ T5946] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 46.321427][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 46.322817][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 46.324411][ T5946] ? lock_acquire+0x2f/0xb0 [ 46.325536][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 46.327158][ T5946] netif_receive_skb_list_internal+0x753/0xdb0 [ 46.328810][ T5946] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 46.330478][ T5946] ? __pfx_eth_type_trans+0x10/0x10 [ 46.331866][ T5946] ? __build_skb_around+0x278/0x3b0 [ 46.333229][ T5946] netif_receive_skb_list+0x4f/0x4a0 [ 46.334590][ T5946] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 46.336179][ T5946] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 46.337859][ T5946] ? bpf_test_timer_continue+0x150/0x3d0 [ 46.339273][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 46.340581][ T5946] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 46.342108][ T5946] ? try_to_wake_up+0x154/0x14f0 [ 46.343462][ T5946] ? __pfx_try_to_wake_up+0x10/0x10 [ 46.344816][ T5946] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 46.346333][ T5946] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 46.347682][ T5946] ? 0xffffffffa0004340 [ 46.348783][ T5946] ? 0xffffffffa0004340 [ 46.349838][ T5946] ? 0xffffffffa0004340 [ 46.350909][ T5946] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 46.352552][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 46.353923][ T5946] ? lock_acquire+0x2f/0xb0 [ 46.355114][ T5946] ? __fget_files+0x40/0x3f0 [ 46.356344][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 46.357852][ T5946] ? fput+0x30/0x390 [ 46.358868][ T5946] ? __bpf_prog_get+0xa0/0x290 [ 46.360084][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 46.361573][ T5946] __sys_bpf+0xfc6/0x49a0 [ 46.362688][ T5946] ? find_held_lock+0x2d/0x110 [ 46.363850][ T5946] ? __pfx___sys_bpf+0x10/0x10 [ 46.365033][ T5946] ? __might_fault+0x13b/0x190 [ 46.366240][ T5946] ? __pfx_lock_release+0x10/0x10 [ 46.367508][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 46.368923][ T5946] ? lock_acquire+0x2f/0xb0 [ 46.370167][ T5946] ? __might_fault+0xe3/0x190 [ 46.371638][ T5946] ? xfd_validate_state+0x5d/0x180 [ 46.373176][ T5946] ? rcu_is_watching+0x12/0xc0 [ 46.374439][ T5946] __x64_sys_bpf+0x78/0xc0 [ 46.375651][ T5946] ? lockdep_hardirqs_on+0x7c/0x110 [ 46.377030][ T5946] do_syscall_64+0xcd/0x250 [ 46.378208][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.379896][ T5946] RIP: 0033:0x7f5102b5de99 [ 46.381037][ T5946] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 46.386047][ T5946] RSP: 002b:00007f5102b18228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 46.388202][ T5946] RAX: ffffffffffffffda RBX: 00007f5102be8328 RCX: 00007f5102b5de99 [ 46.390171][ T5946] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 46.392292][ T5946] RBP: 00007f5102be8320 R08: 00007f5102b186c0 R09: 00007f5102b186c0 [ 46.394335][ T5946] R10: 00007f5102b186c0 R11: 0000000000000246 R12: 00007f5102bb5074 [ 46.396919][ T5946] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffc619b1828 [ 46.399069][ T5946] [ 46.399983][ T5946] BUG: Bad page state in process syz-executor133 pfn:309d5 [ 46.402525][ T5946] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x309d5 [ 46.405216][ T5946] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 46.407135][ T5946] raw: 00fff00000000000 dead000000000040 ffff8880202ae000 0000000000000000 [ 46.409464][ T5946] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 46.411738][ T5946] page dumped because: page_pool leak [ 46.413316][ T5946] page_owner tracks the page as allocated [ 46.414981][ T5946] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5946, tgid 5942 (syz-executor133), ts 44467998745, free_ts 28536726972 [ 46.419602][ T5946] post_alloc_hook+0x2d1/0x350 [ 46.420909][ T5946] get_page_from_freelist+0x101e/0x3070 [ 46.422308][ T5946] __alloc_pages_noprof+0x223/0x25a0 [ 46.423696][ T5946] alloc_pages_bulk_noprof+0x77c/0x1110 [ 46.425117][ T5946] __page_pool_alloc_pages_slow+0x18f/0x770 [ 46.426645][ T5946] page_pool_alloc_netmem+0xc4/0x160 [ 46.428136][ T5946] page_pool_alloc_pages+0x1a/0x60 [ 46.429534][ T5946] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 46.431093][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 46.432381][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 46.434088][ T5946] __sys_bpf+0xfc6/0x49a0 [ 46.435322][ T5946] __x64_sys_bpf+0x78/0xc0 [ 46.436528][ T5946] do_syscall_64+0xcd/0x250 [ 46.437700][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.439272][ T5946] page last free pid 5829 tgid 5829 stack trace: [ 46.440997][ T5946] free_unref_page+0x5f4/0xdc0 [ 46.442199][ T5946] __put_partials+0x14c/0x170 [ 46.443583][ T5946] qlist_free_all+0x4e/0x120 [ 46.444753][ T5946] kasan_quarantine_reduce+0x192/0x1e0 [ 46.446078][ T5946] __kasan_slab_alloc+0x69/0x90 [ 46.447353][ T5946] kmem_cache_alloc_noprof+0x121/0x2f0 [ 46.448889][ T5946] getname_flags.part.0+0x4c/0x550 [ 46.450320][ T5946] getname_flags+0x93/0xf0 [ 46.451562][ T5946] vfs_fstatat+0x86/0x160 [ 46.452676][ T5946] __do_sys_newfstatat+0xa2/0x130 [ 46.453957][ T5946] do_syscall_64+0xcd/0x250 [ 46.455255][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.456956][ T5946] Modules linked in: [ 46.458070][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: syz-executor133 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 46.461419][ T5946] Tainted: [B]=BAD_PAGE [ 46.462597][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 46.465651][ T5946] Call Trace: [ 46.466598][ T5946] [ 46.467381][ T5946] dump_stack_lvl+0x16c/0x1f0 [ 46.468623][ T5946] bad_page+0xb3/0x1f0 [ 46.469799][ T5946] ? __pfx_bad_page+0x10/0x10 [ 46.471090][ T5946] ? page_bad_reason+0x9d/0x1e0 [ 46.472409][ T5946] free_unref_page+0x657/0xdc0 [ 46.473646][ T5946] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 46.475263][ T5946] ? __phys_addr+0xc6/0x150 [ 46.476404][ T5946] skb_free_head+0xa0/0x1d0 [ 46.477597][ T5946] skb_release_data+0x560/0x730 [ 46.478852][ T5946] sk_skb_reason_drop+0x129/0x1a0 [ 46.480098][ T5946] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 46.481762][ T5946] ? kernel_text_address+0x8d/0x100 [ 46.483044][ T5946] ? hlock_class+0x4e/0x130 [ 46.484218][ T5946] ? __lock_acquire+0x163e/0x3ce0 [ 46.485563][ T5946] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 46.487346][ T5946] ? hlock_class+0x4e/0x130 [ 46.488490][ T5946] ? __lock_acquire+0xbdd/0x3ce0 [ 46.489758][ T5946] ? __pfx___lock_acquire+0x10/0x10 [ 46.491090][ T5946] __netif_receive_skb_list_core+0x357/0x950 [ 46.492559][ T5946] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 46.494183][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 46.495534][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 46.497085][ T5946] ? lock_acquire+0x2f/0xb0 [ 46.498265][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 46.499997][ T5946] netif_receive_skb_list_internal+0x753/0xdb0 [ 46.501562][ T5946] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 46.503339][ T5946] ? __pfx_eth_type_trans+0x10/0x10 [ 46.504601][ T5946] ? __build_skb_around+0x278/0x3b0 [ 46.505932][ T5946] netif_receive_skb_list+0x4f/0x4a0 [ 46.507272][ T5946] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 46.508914][ T5946] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 46.510564][ T5946] ? bpf_test_timer_continue+0x150/0x3d0 [ 46.511973][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 46.513299][ T5946] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 46.514780][ T5946] ? try_to_wake_up+0x154/0x14f0 [ 46.516106][ T5946] ? __pfx_try_to_wake_up+0x10/0x10 [ 46.517441][ T5946] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 46.519004][ T5946] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 46.520382][ T5946] ? 0xffffffffa0004340 [ 46.521412][ T5946] ? 0xffffffffa0004340 [ 46.522469][ T5946] ? 0xffffffffa0004340 [ 46.523547][ T5946] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 46.525054][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 46.526498][ T5946] ? lock_acquire+0x2f/0xb0 [ 46.527671][ T5946] ? __fget_files+0x40/0x3f0 [ 46.528864][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 46.530332][ T5946] ? fput+0x30/0x390 [ 46.531335][ T5946] ? __bpf_prog_get+0xa0/0x290 [ 46.532564][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 46.534061][ T5946] __sys_bpf+0xfc6/0x49a0 [ 46.535185][ T5946] ? find_held_lock+0x2d/0x110 [ 46.536427][ T5946] ? __pfx___sys_bpf+0x10/0x10 [ 46.537658][ T5946] ? __might_fault+0x13b/0x190 [ 46.538919][ T5946] ? __pfx_lock_release+0x10/0x10 [ 46.540146][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 46.541456][ T5946] ? lock_acquire+0x2f/0xb0 [ 46.542585][ T5946] ? __might_fault+0xe3/0x190 [ 46.543798][ T5946] ? xfd_validate_state+0x5d/0x180 [ 46.545083][ T5946] ? rcu_is_watching+0x12/0xc0 [ 46.546347][ T5946] __x64_sys_bpf+0x78/0xc0 [ 46.547495][ T5946] ? lockdep_hardirqs_on+0x7c/0x110 [ 46.548802][ T5946] do_syscall_64+0xcd/0x250 [ 46.549936][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.551440][ T5946] RIP: 0033:0x7f5102b5de99 [ 46.552577][ T5946] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 46.557094][ T5946] RSP: 002b:00007f5102b18228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 46.559028][ T5946] RAX: ffffffffffffffda RBX: 00007f5102be8328 RCX: 00007f5102b5de99 [ 46.561073][ T5946] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 46.563115][ T5946] RBP: 00007f5102be8320 R08: 00007f5102b186c0 R09: 00007f5102b186c0 [ 46.565153][ T5946] R10: 00007f5102b186c0 R11: 0000000000000246 R12: 00007f5102bb5074 [ 46.567305][ T5946] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffc619b1828 [ 46.569399][ T5946] [ 46.570457][ T5946] BUG: Bad page state in process syz-executor133 pfn:309d4 [ 46.573021][ T5946] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x309d4 [ 46.575887][ T5946] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 46.577855][ T5946] raw: 00fff00000000000 dead000000000040 ffff8880202ae000 0000000000000000 [ 46.580229][ T5946] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 46.582385][ T5946] page dumped because: page_pool leak [ 46.583753][ T5946] page_owner tracks the page as allocated [ 46.585179][ T5946] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5946, tgid 5942 (syz-executor133), ts 44467990549, free_ts 28536726972 [ 46.589547][ T5946] post_alloc_hook+0x2d1/0x350 [ 46.591011][ T5946] get_page_from_freelist+0x101e/0x3070 [ 46.592585][ T5946] __alloc_pages_noprof+0x223/0x25a0 [ 46.593937][ T5946] alloc_pages_bulk_noprof+0x77c/0x1110 [ 46.595437][ T5946] __page_pool_alloc_pages_slow+0x18f/0x770 [ 46.597022][ T5946] page_pool_alloc_netmem+0xc4/0x160 [ 46.598559][ T5946] page_pool_alloc_pages+0x1a/0x60 [ 46.599889][ T5946] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 46.601540][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 46.602894][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 46.604245][ T5946] __sys_bpf+0xfc6/0x49a0 [ 46.605366][ T5946] __x64_sys_bpf+0x78/0xc0 [ 46.606532][ T5946] do_syscall_64+0xcd/0x250 [ 46.607821][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.609352][ T5946] page last free pid 5829 tgid 5829 stack trace: [ 46.610974][ T5946] free_unref_page+0x5f4/0xdc0 [ 46.612177][ T5946] __put_partials+0x14c/0x170 [ 46.613345][ T5946] qlist_free_all+0x4e/0x120 [ 46.614551][ T5946] kasan_quarantine_reduce+0x192/0x1e0 [ 46.615959][ T5946] __kasan_slab_alloc+0x69/0x90 [ 46.617193][ T5946] kmem_cache_alloc_noprof+0x121/0x2f0 [ 46.618666][ T5946] getname_flags.part.0+0x4c/0x550 [ 46.619963][ T5946] getname_flags+0x93/0xf0 [ 46.621099][ T5946] vfs_fstatat+0x86/0x160 [ 46.622204][ T5946] __do_sys_newfstatat+0xa2/0x130 [ 46.623522][ T5946] do_syscall_64+0xcd/0x250 [ 46.624692][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.626213][ T5946] Modules linked in: [ 46.627225][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: syz-executor133 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 46.630405][ T5946] Tainted: [B]=BAD_PAGE [ 46.631442][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 46.634159][ T5946] Call Trace: [ 46.635021][ T5946] [ 46.635744][ T5946] dump_stack_lvl+0x16c/0x1f0 [ 46.636901][ T5946] bad_page+0xb3/0x1f0 [ 46.637994][ T5946] ? __pfx_bad_page+0x10/0x10 [ 46.639223][ T5946] ? page_bad_reason+0x9d/0x1e0 [ 46.640500][ T5946] free_unref_page+0x657/0xdc0 [ 46.641712][ T5946] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 46.643240][ T5946] ? __phys_addr+0xc6/0x150 [ 46.644399][ T5946] skb_free_head+0xa0/0x1d0 [ 46.645558][ T5946] skb_release_data+0x560/0x730 [ 46.646829][ T5946] sk_skb_reason_drop+0x129/0x1a0 [ 46.648159][ T5946] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 46.649867][ T5946] ? kernel_text_address+0x8d/0x100 [ 46.651205][ T5946] ? hlock_class+0x4e/0x130 [ 46.652334][ T5946] ? __lock_acquire+0x163e/0x3ce0 [ 46.653580][ T5946] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 46.655343][ T5946] ? hlock_class+0x4e/0x130 [ 46.656491][ T5946] ? __lock_acquire+0xbdd/0x3ce0 [ 46.657714][ T5946] ? __pfx___lock_acquire+0x10/0x10 [ 46.659120][ T5946] __netif_receive_skb_list_core+0x357/0x950 [ 46.660568][ T5946] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 46.662163][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 46.663476][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 46.665069][ T5946] ? lock_acquire+0x2f/0xb0 [ 46.666227][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 46.667794][ T5946] netif_receive_skb_list_internal+0x753/0xdb0 [ 46.669451][ T5946] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 46.671114][ T5946] ? __pfx_eth_type_trans+0x10/0x10 [ 46.672444][ T5946] ? __build_skb_around+0x278/0x3b0 [ 46.673749][ T5946] netif_receive_skb_list+0x4f/0x4a0 [ 46.675165][ T5946] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 46.676713][ T5946] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 46.678405][ T5946] ? bpf_test_timer_continue+0x150/0x3d0 [ 46.679867][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 46.681192][ T5946] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 46.682716][ T5946] ? try_to_wake_up+0x154/0x14f0 [ 46.683994][ T5946] ? __pfx_try_to_wake_up+0x10/0x10 [ 46.685324][ T5946] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 46.686849][ T5946] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 46.688207][ T5946] ? 0xffffffffa0004340 [ 46.689307][ T5946] ? 0xffffffffa0004340 [ 46.690475][ T5946] ? 0xffffffffa0004340 [ 46.691710][ T5946] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 46.693235][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 46.694622][ T5946] ? lock_acquire+0x2f/0xb0 [ 46.695806][ T5946] ? __fget_files+0x40/0x3f0 [ 46.697132][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 46.698737][ T5946] ? fput+0x30/0x390 [ 46.699828][ T5946] ? __bpf_prog_get+0xa0/0x290 [ 46.701079][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 46.702576][ T5946] __sys_bpf+0xfc6/0x49a0 [ 46.703656][ T5946] ? find_held_lock+0x2d/0x110 [ 46.704865][ T5946] ? __pfx___sys_bpf+0x10/0x10 [ 46.706118][ T5946] ? __might_fault+0x13b/0x190 [ 46.707382][ T5946] ? __pfx_lock_release+0x10/0x10 [ 46.708681][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 46.710072][ T5946] ? lock_acquire+0x2f/0xb0 [ 46.711239][ T5946] ? __might_fault+0xe3/0x190 [ 46.712486][ T5946] ? xfd_validate_state+0x5d/0x180 [ 46.713803][ T5946] ? rcu_is_watching+0x12/0xc0 [ 46.715049][ T5946] __x64_sys_bpf+0x78/0xc0 [ 46.716181][ T5946] ? lockdep_hardirqs_on+0x7c/0x110 [ 46.717504][ T5946] do_syscall_64+0xcd/0x250 [ 46.718697][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.720266][ T5946] RIP: 0033:0x7f5102b5de99 [ 46.721392][ T5946] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 46.726202][ T5946] RSP: 002b:00007f5102b18228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 46.728334][ T5946] RAX: ffffffffffffffda RBX: 00007f5102be8328 RCX: 00007f5102b5de99 [ 46.730877][ T5946] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 46.732881][ T5946] RBP: 00007f5102be8320 R08: 00007f5102b186c0 R09: 00007f5102b186c0 [ 46.734886][ T5946] R10: 00007f5102b186c0 R11: 0000000000000246 R12: 00007f5102bb5074 [ 46.736874][ T5946] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffc619b1828 [ 46.739023][ T5946] [ 46.739984][ T5946] BUG: Bad page state in process syz-executor133 pfn:2fc07 [ 46.741888][ T5946] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2fc07 [ 46.744168][ T5946] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 46.745957][ T5946] raw: 00fff00000000000 dead000000000040 ffff8880202ae000 0000000000000000 [ 46.748203][ T5946] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 46.750403][ T5946] page dumped because: page_pool leak [ 46.751765][ T5946] page_owner tracks the page as allocated [ 46.753225][ T5946] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5946, tgid 5942 (syz-executor133), ts 44467982476, free_ts 35470365449 [ 46.757532][ T5946] post_alloc_hook+0x2d1/0x350 [ 46.758855][ T5946] get_page_from_freelist+0x101e/0x3070 [ 46.760291][ T5946] __alloc_pages_noprof+0x223/0x25a0 [ 46.761597][ T5946] alloc_pages_bulk_noprof+0x77c/0x1110 [ 46.762983][ T5946] __page_pool_alloc_pages_slow+0x18f/0x770 [ 46.764467][ T5946] page_pool_alloc_netmem+0xc4/0x160 [ 46.765780][ T5946] page_pool_alloc_pages+0x1a/0x60 [ 46.767077][ T5946] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 46.768668][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 46.770024][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 46.771840][ T5946] __sys_bpf+0xfc6/0x49a0 [ 46.773054][ T5946] __x64_sys_bpf+0x78/0xc0 [ 46.774200][ T5946] do_syscall_64+0xcd/0x250 [ 46.775475][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.776959][ T5946] page last free pid 5658 tgid 5658 stack trace: [ 46.778705][ T5946] free_unref_page+0x5f4/0xdc0 [ 46.780099][ T5946] stack_depot_save_flags+0x2da/0x8f0 [ 46.781524][ T5946] kasan_save_stack+0x42/0x60 [ 46.782709][ T5946] kasan_save_track+0x14/0x30 [ 46.783945][ T5946] __kasan_kmalloc+0xaa/0xb0 [ 46.785165][ T5946] __kmalloc_node_noprof+0x211/0x430 [ 46.786500][ T5946] __kvmalloc_node_noprof+0xad/0x1a0 [ 46.787899][ T5946] fib_create_info+0x4ab/0x4d10 [ 46.789120][ T5946] fib_table_insert+0x1d7/0x1d70 [ 46.790411][ T5946] fib_magic+0x4d6/0x5c0 [ 46.791515][ T5946] fib_add_ifaddr+0x422/0x560 [ 46.792704][ T5946] fib_inetaddr_event+0x174/0x2c0 [ 46.793966][ T5946] notifier_call_chain+0xb9/0x410 [ 46.795260][ T5946] blocking_notifier_call_chain+0x69/0xa0 [ 46.796728][ T5946] __inet_insert_ifa+0x93f/0xc30 [ 46.798029][ T5946] inet_rtm_newaddr+0x565/0xae0 [ 46.799280][ T5946] Modules linked in: [ 46.800322][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: syz-executor133 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 46.803438][ T5946] Tainted: [B]=BAD_PAGE [ 46.804495][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 46.807142][ T5946] Call Trace: [ 46.808023][ T5946] [ 46.808777][ T5946] dump_stack_lvl+0x16c/0x1f0 [ 46.809992][ T5946] bad_page+0xb3/0x1f0 [ 46.811321][ T5946] ? __pfx_bad_page+0x10/0x10 [ 46.812734][ T5946] ? page_bad_reason+0x9d/0x1e0 [ 46.814020][ T5946] free_unref_page+0x657/0xdc0 [ 46.815241][ T5946] ? __phys_addr+0xc6/0x150 [ 46.816410][ T5946] skb_free_head+0xa0/0x1d0 [ 46.817568][ T5946] skb_release_data+0x560/0x730 [ 46.818966][ T5946] sk_skb_reason_drop+0x129/0x1a0 [ 46.820375][ T5946] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 46.822063][ T5946] ? kernel_text_address+0x8d/0x100 [ 46.823376][ T5946] ? hlock_class+0x4e/0x130 [ 46.824532][ T5946] ? __lock_acquire+0x163e/0x3ce0 [ 46.825786][ T5946] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 46.827591][ T5946] ? hlock_class+0x4e/0x130 [ 46.828751][ T5946] ? __lock_acquire+0xbdd/0x3ce0 [ 46.829979][ T5946] ? __pfx___lock_acquire+0x10/0x10 [ 46.831378][ T5946] __netif_receive_skb_list_core+0x357/0x950 [ 46.832869][ T5946] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 46.834486][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 46.835796][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 46.837400][ T5946] ? lock_acquire+0x2f/0xb0 [ 46.838581][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 46.840192][ T5946] netif_receive_skb_list_internal+0x753/0xdb0 [ 46.841758][ T5946] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 46.843441][ T5946] ? __pfx_eth_type_trans+0x10/0x10 [ 46.844730][ T5946] ? __build_skb_around+0x278/0x3b0 [ 46.846043][ T5946] netif_receive_skb_list+0x4f/0x4a0 [ 46.847404][ T5946] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 46.849056][ T5946] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 46.850742][ T5946] ? bpf_test_timer_continue+0x150/0x3d0 [ 46.852190][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 46.853527][ T5946] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 46.855039][ T5946] ? try_to_wake_up+0x154/0x14f0 [ 46.856301][ T5946] ? __pfx_try_to_wake_up+0x10/0x10 [ 46.857602][ T5946] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 46.859147][ T5946] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 46.860475][ T5946] ? 0xffffffffa0004340 [ 46.861555][ T5946] ? 0xffffffffa0004340 [ 46.862638][ T5946] ? 0xffffffffa0004340 [ 46.863708][ T5946] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 46.865181][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 46.866496][ T5946] ? lock_acquire+0x2f/0xb0 [ 46.867628][ T5946] ? __fget_files+0x40/0x3f0 [ 46.868821][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 46.870306][ T5946] ? fput+0x30/0x390 [ 46.871349][ T5946] ? __bpf_prog_get+0xa0/0x290 [ 46.872551][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 46.874084][ T5946] __sys_bpf+0xfc6/0x49a0 [ 46.875349][ T5946] ? find_held_lock+0x2d/0x110 [ 46.876627][ T5946] ? __pfx___sys_bpf+0x10/0x10 [ 46.877890][ T5946] ? __might_fault+0x13b/0x190 [ 46.879224][ T5946] ? __pfx_lock_release+0x10/0x10 [ 46.880537][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 46.881942][ T5946] ? lock_acquire+0x2f/0xb0 [ 46.883116][ T5946] ? __might_fault+0xe3/0x190 [ 46.884382][ T5946] ? xfd_validate_state+0x5d/0x180 [ 46.885710][ T5946] ? rcu_is_watching+0x12/0xc0 [ 46.886953][ T5946] __x64_sys_bpf+0x78/0xc0 [ 46.888121][ T5946] ? lockdep_hardirqs_on+0x7c/0x110 [ 46.889426][ T5946] do_syscall_64+0xcd/0x250 [ 46.890631][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.892183][ T5946] RIP: 0033:0x7f5102b5de99 [ 46.893281][ T5946] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 46.898168][ T5946] RSP: 002b:00007f5102b18228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 46.900249][ T5946] RAX: ffffffffffffffda RBX: 00007f5102be8328 RCX: 00007f5102b5de99 [ 46.902279][ T5946] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 46.904217][ T5946] RBP: 00007f5102be8320 R08: 00007f5102b186c0 R09: 00007f5102b186c0 [ 46.906216][ T5946] R10: 00007f5102b186c0 R11: 0000000000000246 R12: 00007f5102bb5074 [ 46.908199][ T5946] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffc619b1828 [ 46.910156][ T5946] [ 46.911060][ T5946] BUG: Bad page state in process syz-executor133 pfn:2fc06 [ 46.912933][ T5946] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2fc06 [ 46.915166][ T5946] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 46.917010][ T5946] raw: 00fff00000000000 dead000000000040 ffff8880202ae000 0000000000000000 [ 46.919323][ T5946] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 46.921506][ T5946] page dumped because: page_pool leak [ 46.922919][ T5946] page_owner tracks the page as allocated [ 46.924321][ T5946] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5946, tgid 5942 (syz-executor133), ts 44467974433, free_ts 35470365449 [ 46.928676][ T5946] post_alloc_hook+0x2d1/0x350 [ 46.929914][ T5946] get_page_from_freelist+0x101e/0x3070 [ 46.931344][ T5946] __alloc_pages_noprof+0x223/0x25a0 [ 46.932773][ T5946] alloc_pages_bulk_noprof+0x77c/0x1110 [ 46.934177][ T5946] __page_pool_alloc_pages_slow+0x18f/0x770 [ 46.935706][ T5946] page_pool_alloc_netmem+0xc4/0x160 [ 46.937061][ T5946] page_pool_alloc_pages+0x1a/0x60 [ 46.938427][ T5946] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 46.939994][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 46.941339][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 46.942741][ T5946] __sys_bpf+0xfc6/0x49a0 [ 46.943886][ T5946] __x64_sys_bpf+0x78/0xc0 [ 46.945007][ T5946] do_syscall_64+0xcd/0x250 [ 46.946181][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.947716][ T5946] page last free pid 5658 tgid 5658 stack trace: [ 46.949387][ T5946] free_unref_page+0x5f4/0xdc0 [ 46.950591][ T5946] stack_depot_save_flags+0x2da/0x8f0 [ 46.951999][ T5946] kasan_save_stack+0x42/0x60 [ 46.953226][ T5946] kasan_save_track+0x14/0x30 [ 46.954485][ T5946] __kasan_kmalloc+0xaa/0xb0 [ 46.955728][ T5946] __kmalloc_node_noprof+0x211/0x430 [ 46.957057][ T5946] __kvmalloc_node_noprof+0xad/0x1a0 [ 46.958473][ T5946] fib_create_info+0x4ab/0x4d10 [ 46.959740][ T5946] fib_table_insert+0x1d7/0x1d70 [ 46.961038][ T5946] fib_magic+0x4d6/0x5c0 [ 46.962121][ T5946] fib_add_ifaddr+0x422/0x560 [ 46.963352][ T5946] fib_inetaddr_event+0x174/0x2c0 [ 46.964631][ T5946] notifier_call_chain+0xb9/0x410 [ 46.965900][ T5946] blocking_notifier_call_chain+0x69/0xa0 [ 46.967360][ T5946] __inet_insert_ifa+0x93f/0xc30 [ 46.968704][ T5946] inet_rtm_newaddr+0x565/0xae0 [ 46.969970][ T5946] Modules linked in: [ 46.970970][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: syz-executor133 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 46.974740][ T5946] Tainted: [B]=BAD_PAGE [ 46.975831][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 46.978512][ T5946] Call Trace: [ 46.979370][ T5946] [ 46.980122][ T5946] dump_stack_lvl+0x16c/0x1f0 [ 46.981302][ T5946] bad_page+0xb3/0x1f0 [ 46.982345][ T5946] ? __pfx_bad_page+0x10/0x10 [ 46.983740][ T5946] ? page_bad_reason+0x9d/0x1e0 [ 46.984992][ T5946] free_unref_page+0x657/0xdc0 [ 46.986215][ T5946] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 46.987738][ T5946] ? __phys_addr+0xc6/0x150 [ 46.988937][ T5946] skb_free_head+0xa0/0x1d0 [ 46.990095][ T5946] skb_release_data+0x560/0x730 [ 46.991510][ T5946] sk_skb_reason_drop+0x129/0x1a0 [ 46.992856][ T5946] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 46.994595][ T5946] ? kernel_text_address+0x8d/0x100 [ 46.996074][ T5946] ? hlock_class+0x4e/0x130 [ 46.997300][ T5946] ? __lock_acquire+0x163e/0x3ce0 [ 46.998776][ T5946] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 47.000536][ T5946] ? hlock_class+0x4e/0x130 [ 47.001703][ T5946] ? __lock_acquire+0xbdd/0x3ce0 [ 47.002984][ T5946] ? __pfx___lock_acquire+0x10/0x10 [ 47.004338][ T5946] __netif_receive_skb_list_core+0x357/0x950 [ 47.005870][ T5946] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 47.007527][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 47.008897][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 47.010491][ T5946] ? lock_acquire+0x2f/0xb0 [ 47.011620][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 47.013227][ T5946] netif_receive_skb_list_internal+0x753/0xdb0 [ 47.014820][ T5946] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 47.016506][ T5946] ? __pfx_eth_type_trans+0x10/0x10 [ 47.017855][ T5946] ? __build_skb_around+0x278/0x3b0 [ 47.019166][ T5946] netif_receive_skb_list+0x4f/0x4a0 [ 47.020503][ T5946] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 47.022071][ T5946] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 47.023733][ T5946] ? bpf_test_timer_continue+0x150/0x3d0 [ 47.025156][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 47.026537][ T5946] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 47.028093][ T5946] ? try_to_wake_up+0x154/0x14f0 [ 47.029382][ T5946] ? __pfx_try_to_wake_up+0x10/0x10 [ 47.030693][ T5946] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 47.032265][ T5946] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 47.033736][ T5946] ? 0xffffffffa0004340 [ 47.034850][ T5946] ? 0xffffffffa0004340 [ 47.035906][ T5946] ? 0xffffffffa0004340 [ 47.036956][ T5946] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 47.038470][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 47.039869][ T5946] ? lock_acquire+0x2f/0xb0 [ 47.041010][ T5946] ? __fget_files+0x40/0x3f0 [ 47.042185][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 47.043729][ T5946] ? fput+0x30/0x390 [ 47.044776][ T5946] ? __bpf_prog_get+0xa0/0x290 [ 47.045996][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 47.047493][ T5946] __sys_bpf+0xfc6/0x49a0 [ 47.048583][ T5946] ? find_held_lock+0x2d/0x110 [ 47.049775][ T5946] ? __pfx___sys_bpf+0x10/0x10 [ 47.050938][ T5946] ? __might_fault+0x13b/0x190 [ 47.052161][ T5946] ? __pfx_lock_release+0x10/0x10 [ 47.053430][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 47.054844][ T5946] ? lock_acquire+0x2f/0xb0 [ 47.055988][ T5946] ? __might_fault+0xe3/0x190 [ 47.057180][ T5946] ? xfd_validate_state+0x5d/0x180 [ 47.058481][ T5946] ? rcu_is_watching+0x12/0xc0 [ 47.059747][ T5946] __x64_sys_bpf+0x78/0xc0 [ 47.060890][ T5946] ? lockdep_hardirqs_on+0x7c/0x110 [ 47.062270][ T5946] do_syscall_64+0xcd/0x250 [ 47.063453][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.065020][ T5946] RIP: 0033:0x7f5102b5de99 [ 47.066136][ T5946] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 47.071033][ T5946] RSP: 002b:00007f5102b18228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 47.073107][ T5946] RAX: ffffffffffffffda RBX: 00007f5102be8328 RCX: 00007f5102b5de99 [ 47.075193][ T5946] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 47.077161][ T5946] RBP: 00007f5102be8320 R08: 00007f5102b186c0 R09: 00007f5102b186c0 [ 47.079182][ T5946] R10: 00007f5102b186c0 R11: 0000000000000246 R12: 00007f5102bb5074 [ 47.081248][ T5946] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffc619b1828 [ 47.083245][ T5946] [ 47.084162][ T5946] BUG: Bad page state in process syz-executor133 pfn:2fc05 [ 47.086015][ T5946] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2fc05 [ 47.088258][ T5946] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 47.090091][ T5946] raw: 00fff00000000000 dead000000000040 ffff8880202ae000 0000000000000000 [ 47.092205][ T5946] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 47.094351][ T5946] page dumped because: page_pool leak [ 47.095681][ T5946] page_owner tracks the page as allocated [ 47.097145][ T5946] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5946, tgid 5942 (syz-executor133), ts 44467966403, free_ts 35470365449 [ 47.101427][ T5946] post_alloc_hook+0x2d1/0x350 [ 47.102698][ T5946] get_page_from_freelist+0x101e/0x3070 [ 47.104152][ T5946] __alloc_pages_noprof+0x223/0x25a0 [ 47.105540][ T5946] alloc_pages_bulk_noprof+0x77c/0x1110 [ 47.107000][ T5946] __page_pool_alloc_pages_slow+0x18f/0x770 [ 47.108572][ T5946] page_pool_alloc_netmem+0xc4/0x160 [ 47.110023][ T5946] page_pool_alloc_pages+0x1a/0x60 [ 47.111325][ T5946] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 47.112881][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 47.114231][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 47.115723][ T5946] __sys_bpf+0xfc6/0x49a0 [ 47.116829][ T5946] __x64_sys_bpf+0x78/0xc0 [ 47.118051][ T5946] do_syscall_64+0xcd/0x250 [ 47.119357][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.120825][ T5946] page last free pid 5658 tgid 5658 stack trace: [ 47.122374][ T5946] free_unref_page+0x5f4/0xdc0 [ 47.123593][ T5946] stack_depot_save_flags+0x2da/0x8f0 [ 47.124986][ T5946] kasan_save_stack+0x42/0x60 [ 47.126199][ T5946] kasan_save_track+0x14/0x30 [ 47.127414][ T5946] __kasan_kmalloc+0xaa/0xb0 [ 47.128664][ T5946] __kmalloc_node_noprof+0x211/0x430 [ 47.129968][ T5946] __kvmalloc_node_noprof+0xad/0x1a0 [ 47.131351][ T5946] fib_create_info+0x4ab/0x4d10 [ 47.132636][ T5946] fib_table_insert+0x1d7/0x1d70 [ 47.133888][ T5946] fib_magic+0x4d6/0x5c0 [ 47.135036][ T5946] fib_add_ifaddr+0x422/0x560 [ 47.136257][ T5946] fib_inetaddr_event+0x174/0x2c0 [ 47.137565][ T5946] notifier_call_chain+0xb9/0x410 [ 47.138991][ T5946] blocking_notifier_call_chain+0x69/0xa0 [ 47.140421][ T5946] __inet_insert_ifa+0x93f/0xc30 [ 47.141680][ T5946] inet_rtm_newaddr+0x565/0xae0 [ 47.142936][ T5946] Modules linked in: [ 47.143934][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: syz-executor133 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 47.147124][ T5946] Tainted: [B]=BAD_PAGE [ 47.148180][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 47.150836][ T5946] Call Trace: [ 47.151674][ T5946] [ 47.152407][ T5946] dump_stack_lvl+0x16c/0x1f0 [ 47.153584][ T5946] bad_page+0xb3/0x1f0 [ 47.154641][ T5946] ? __pfx_bad_page+0x10/0x10 [ 47.155884][ T5946] ? page_bad_reason+0x9d/0x1e0 [ 47.157115][ T5946] free_unref_page+0x657/0xdc0 [ 47.158342][ T5946] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 47.159864][ T5946] ? __phys_addr+0xc6/0x150 [ 47.161022][ T5946] skb_free_head+0xa0/0x1d0 [ 47.162171][ T5946] skb_release_data+0x560/0x730 [ 47.163372][ T5946] sk_skb_reason_drop+0x129/0x1a0 [ 47.164641][ T5946] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 47.166393][ T5946] ? kernel_text_address+0x8d/0x100 [ 47.167792][ T5946] ? hlock_class+0x4e/0x130 [ 47.168965][ T5946] ? __lock_acquire+0x163e/0x3ce0 [ 47.170217][ T5946] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 47.172010][ T5946] ? hlock_class+0x4e/0x130 [ 47.173214][ T5946] ? __lock_acquire+0xbdd/0x3ce0 [ 47.174415][ T5946] ? __pfx___lock_acquire+0x10/0x10 [ 47.175775][ T5946] __netif_receive_skb_list_core+0x357/0x950 [ 47.177322][ T5946] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 47.179009][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 47.180354][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 47.181955][ T5946] ? lock_acquire+0x2f/0xb0 [ 47.183118][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 47.184739][ T5946] netif_receive_skb_list_internal+0x753/0xdb0 [ 47.186380][ T5946] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 47.188101][ T5946] ? __pfx_eth_type_trans+0x10/0x10 [ 47.189406][ T5946] ? __build_skb_around+0x278/0x3b0 [ 47.190688][ T5946] netif_receive_skb_list+0x4f/0x4a0 [ 47.192033][ T5946] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 47.193625][ T5946] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 47.195289][ T5946] ? bpf_test_timer_continue+0x150/0x3d0 [ 47.196740][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 47.198064][ T5946] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 47.199613][ T5946] ? try_to_wake_up+0x154/0x14f0 [ 47.200895][ T5946] ? __pfx_try_to_wake_up+0x10/0x10 [ 47.202275][ T5946] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 47.203798][ T5946] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 47.205147][ T5946] ? 0xffffffffa0004340 [ 47.206391][ T5946] ? 0xffffffffa0004340 [ 47.207529][ T5946] ? 0xffffffffa0004340 [ 47.208673][ T5946] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 47.210170][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 47.211501][ T5946] ? lock_acquire+0x2f/0xb0 [ 47.212615][ T5946] ? __fget_files+0x40/0x3f0 [ 47.213776][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 47.215302][ T5946] ? fput+0x30/0x390 [ 47.216333][ T5946] ? __bpf_prog_get+0xa0/0x290 [ 47.217578][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 47.219058][ T5946] __sys_bpf+0xfc6/0x49a0 [ 47.220166][ T5946] ? find_held_lock+0x2d/0x110 [ 47.221379][ T5946] ? __pfx___sys_bpf+0x10/0x10 [ 47.222674][ T5946] ? __might_fault+0x13b/0x190 [ 47.224079][ T5946] ? __pfx_lock_release+0x10/0x10 [ 47.225478][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 47.226934][ T5946] ? lock_acquire+0x2f/0xb0 [ 47.228137][ T5946] ? __might_fault+0xe3/0x190 [ 47.229308][ T5946] ? xfd_validate_state+0x5d/0x180 [ 47.230627][ T5946] ? rcu_is_watching+0x12/0xc0 [ 47.231835][ T5946] __x64_sys_bpf+0x78/0xc0 [ 47.232971][ T5946] ? lockdep_hardirqs_on+0x7c/0x110 [ 47.234293][ T5946] do_syscall_64+0xcd/0x250 [ 47.235504][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.237118][ T5946] RIP: 0033:0x7f5102b5de99 [ 47.238305][ T5946] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 47.243230][ T5946] RSP: 002b:00007f5102b18228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 47.245328][ T5946] RAX: ffffffffffffffda RBX: 00007f5102be8328 RCX: 00007f5102b5de99 [ 47.247379][ T5946] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 47.249387][ T5946] RBP: 00007f5102be8320 R08: 00007f5102b186c0 R09: 00007f5102b186c0 [ 47.251394][ T5946] R10: 00007f5102b186c0 R11: 0000000000000246 R12: 00007f5102bb5074 [ 47.253355][ T5946] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffc619b1828 [ 47.255394][ T5946] [ 47.256304][ T5946] BUG: Bad page state in process syz-executor133 pfn:2fc04 [ 47.258326][ T5946] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2fc04 [ 47.260531][ T5946] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 47.262288][ T5946] raw: 00fff00000000000 dead000000000040 ffff8880202ae000 0000000000000000 [ 47.264450][ T5946] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 47.266603][ T5946] page dumped because: page_pool leak [ 47.268102][ T5946] page_owner tracks the page as allocated [ 47.269548][ T5946] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5946, tgid 5942 (syz-executor133), ts 44467955330, free_ts 35470365449 [ 47.273833][ T5946] post_alloc_hook+0x2d1/0x350 [ 47.275082][ T5946] get_page_from_freelist+0x101e/0x3070 [ 47.276495][ T5946] __alloc_pages_noprof+0x223/0x25a0 [ 47.277997][ T5946] alloc_pages_bulk_noprof+0x77c/0x1110 [ 47.279446][ T5946] __page_pool_alloc_pages_slow+0x18f/0x770 [ 47.280929][ T5946] page_pool_alloc_netmem+0xc4/0x160 [ 47.282261][ T5946] page_pool_alloc_pages+0x1a/0x60 [ 47.283562][ T5946] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 47.285125][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 47.286487][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 47.287972][ T5946] __sys_bpf+0xfc6/0x49a0 [ 47.289067][ T5946] __x64_sys_bpf+0x78/0xc0 [ 47.290236][ T5946] do_syscall_64+0xcd/0x250 [ 47.291402][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.292897][ T5946] page last free pid 5658 tgid 5658 stack trace: [ 47.294506][ T5946] free_unref_page+0x5f4/0xdc0 [ 47.295749][ T5946] stack_depot_save_flags+0x2da/0x8f0 [ 47.297099][ T5946] kasan_save_stack+0x42/0x60 [ 47.298412][ T5946] kasan_save_track+0x14/0x30 [ 47.299592][ T5946] __kasan_kmalloc+0xaa/0xb0 [ 47.300772][ T5946] __kmalloc_node_noprof+0x211/0x430 [ 47.302110][ T5946] __kvmalloc_node_noprof+0xad/0x1a0 [ 47.303487][ T5946] fib_create_info+0x4ab/0x4d10 [ 47.304731][ T5946] fib_table_insert+0x1d7/0x1d70 [ 47.305983][ T5946] fib_magic+0x4d6/0x5c0 [ 47.307088][ T5946] fib_add_ifaddr+0x422/0x560 [ 47.308452][ T5946] fib_inetaddr_event+0x174/0x2c0 [ 47.309755][ T5946] notifier_call_chain+0xb9/0x410 [ 47.311036][ T5946] blocking_notifier_call_chain+0x69/0xa0 [ 47.312476][ T5946] __inet_insert_ifa+0x93f/0xc30 [ 47.313760][ T5946] inet_rtm_newaddr+0x565/0xae0 [ 47.315052][ T5946] Modules linked in: [ 47.316052][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: syz-executor133 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 47.319184][ T5946] Tainted: [B]=BAD_PAGE [ 47.320211][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 47.322862][ T5946] Call Trace: [ 47.323684][ T5946] [ 47.324416][ T5946] dump_stack_lvl+0x16c/0x1f0 [ 47.325629][ T5946] bad_page+0xb3/0x1f0 [ 47.326642][ T5946] ? __pfx_bad_page+0x10/0x10 [ 47.327907][ T5946] ? page_bad_reason+0x9d/0x1e0 [ 47.329154][ T5946] free_unref_page+0x657/0xdc0 [ 47.330589][ T5946] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 47.332206][ T5946] ? __phys_addr+0xc6/0x150 [ 47.333385][ T5946] skb_free_head+0xa0/0x1d0 [ 47.334523][ T5946] skb_release_data+0x560/0x730 [ 47.335769][ T5946] sk_skb_reason_drop+0x129/0x1a0 [ 47.337053][ T5946] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 47.338968][ T5946] ? kernel_text_address+0x8d/0x100 [ 47.340327][ T5946] ? hlock_class+0x4e/0x130 [ 47.341483][ T5946] ? __lock_acquire+0x163e/0x3ce0 [ 47.342774][ T5946] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 47.344651][ T5946] ? hlock_class+0x4e/0x130 [ 47.345829][ T5946] ? __lock_acquire+0xbdd/0x3ce0 [ 47.347115][ T5946] ? __pfx___lock_acquire+0x10/0x10 [ 47.348501][ T5946] __netif_receive_skb_list_core+0x357/0x950 [ 47.350079][ T5946] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 47.351704][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 47.353035][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 47.354619][ T5946] ? lock_acquire+0x2f/0xb0 [ 47.355752][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 47.357369][ T5946] netif_receive_skb_list_internal+0x753/0xdb0 [ 47.358995][ T5946] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 47.360645][ T5946] ? __pfx_eth_type_trans+0x10/0x10 [ 47.362075][ T5946] ? __build_skb_around+0x278/0x3b0 [ 47.363405][ T5946] netif_receive_skb_list+0x4f/0x4a0 [ 47.364781][ T5946] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 47.366368][ T5946] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 47.368101][ T5946] ? bpf_test_timer_continue+0x150/0x3d0 [ 47.369589][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 47.370945][ T5946] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 47.372380][ T5946] ? try_to_wake_up+0x154/0x14f0 [ 47.373630][ T5946] ? __pfx_try_to_wake_up+0x10/0x10 [ 47.374981][ T5946] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 47.376461][ T5946] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 47.377796][ T5946] ? 0xffffffffa0004340 [ 47.378948][ T5946] ? 0xffffffffa0004340 [ 47.380040][ T5946] ? 0xffffffffa0004340 [ 47.381078][ T5946] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 47.382571][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 47.383942][ T5946] ? lock_acquire+0x2f/0xb0 [ 47.385148][ T5946] ? __fget_files+0x40/0x3f0 [ 47.386347][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 47.387845][ T5946] ? fput+0x30/0x390 [ 47.388909][ T5946] ? __bpf_prog_get+0xa0/0x290 [ 47.390142][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 47.391594][ T5946] __sys_bpf+0xfc6/0x49a0 [ 47.392693][ T5946] ? find_held_lock+0x2d/0x110 [ 47.393906][ T5946] ? __pfx___sys_bpf+0x10/0x10 [ 47.395282][ T5946] ? __might_fault+0x13b/0x190 [ 47.396515][ T5946] ? __pfx_lock_release+0x10/0x10 [ 47.397851][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 47.399234][ T5946] ? lock_acquire+0x2f/0xb0 [ 47.400388][ T5946] ? __might_fault+0xe3/0x190 [ 47.401580][ T5946] ? xfd_validate_state+0x5d/0x180 [ 47.402898][ T5946] ? rcu_is_watching+0x12/0xc0 [ 47.404133][ T5946] __x64_sys_bpf+0x78/0xc0 [ 47.405272][ T5946] ? lockdep_hardirqs_on+0x7c/0x110 [ 47.406582][ T5946] do_syscall_64+0xcd/0x250 [ 47.407724][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.409275][ T5946] RIP: 0033:0x7f5102b5de99 [ 47.410408][ T5946] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 47.415461][ T5946] RSP: 002b:00007f5102b18228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 47.417707][ T5946] RAX: ffffffffffffffda RBX: 00007f5102be8328 RCX: 00007f5102b5de99 [ 47.419881][ T5946] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 47.421889][ T5946] RBP: 00007f5102be8320 R08: 00007f5102b186c0 R09: 00007f5102b186c0 [ 47.423815][ T5946] R10: 00007f5102b186c0 R11: 0000000000000246 R12: 00007f5102bb5074 [ 47.425814][ T5946] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffc619b1828 [ 47.427858][ T5946] [ 47.428759][ T5946] BUG: Bad page state in process syz-executor133 pfn:34223 [ 47.430675][ T5946] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34223 [ 47.432932][ T5946] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 47.434713][ T5946] raw: 00fff00000000000 dead000000000040 ffff8880202ae000 0000000000000000 [ 47.437228][ T5946] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 47.439557][ T5946] page dumped because: page_pool leak [ 47.440938][ T5946] page_owner tracks the page as allocated [ 47.442374][ T5946] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5946, tgid 5942 (syz-executor133), ts 44467947287, free_ts 35628127148 [ 47.446604][ T5946] post_alloc_hook+0x2d1/0x350 [ 47.447877][ T5946] get_page_from_freelist+0x101e/0x3070 [ 47.449319][ T5946] __alloc_pages_noprof+0x223/0x25a0 [ 47.450697][ T5946] alloc_pages_bulk_noprof+0x77c/0x1110 [ 47.452094][ T5946] __page_pool_alloc_pages_slow+0x18f/0x770 [ 47.453565][ T5946] page_pool_alloc_netmem+0xc4/0x160 [ 47.454948][ T5946] page_pool_alloc_pages+0x1a/0x60 [ 47.456290][ T5946] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 47.457871][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 47.459225][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 47.460630][ T5946] __sys_bpf+0xfc6/0x49a0 [ 47.461786][ T5946] __x64_sys_bpf+0x78/0xc0 [ 47.462967][ T5946] do_syscall_64+0xcd/0x250 [ 47.464186][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.465666][ T5946] page last free pid 0 tgid 0 stack trace: [ 47.467182][ T5946] free_unref_page+0x5f4/0xdc0 [ 47.468495][ T5946] __folio_put+0x30d/0x3d0 [ 47.469774][ T5946] free_page_and_swap_cache+0x249/0x2c0 [ 47.471401][ T5946] tlb_remove_table_rcu+0x89/0xe0 [ 47.472814][ T5946] rcu_core+0x79d/0x14d0 [ 47.473872][ T5946] handle_softirqs+0x213/0x8f0 [ 47.475130][ T5946] irq_exit_rcu+0xbb/0x120 [ 47.476256][ T5946] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 47.477684][ T5946] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 47.479356][ T5946] Modules linked in: [ 47.480399][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: syz-executor133 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 47.483715][ T5946] Tainted: [B]=BAD_PAGE [ 47.484764][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 47.487408][ T5946] Call Trace: [ 47.488284][ T5946] [ 47.489032][ T5946] dump_stack_lvl+0x16c/0x1f0 [ 47.490265][ T5946] bad_page+0xb3/0x1f0 [ 47.491337][ T5946] ? __pfx_bad_page+0x10/0x10 [ 47.492594][ T5946] ? page_bad_reason+0x9d/0x1e0 [ 47.493880][ T5946] free_unref_page+0x657/0xdc0 [ 47.495172][ T5946] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 47.496741][ T5946] ? __phys_addr+0xc6/0x150 [ 47.497896][ T5946] skb_free_head+0xa0/0x1d0 [ 47.499020][ T5946] skb_release_data+0x560/0x730 [ 47.500224][ T5946] sk_skb_reason_drop+0x129/0x1a0 [ 47.501588][ T5946] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 47.503396][ T5946] ? kernel_text_address+0x8d/0x100 [ 47.504761][ T5946] ? hlock_class+0x4e/0x130 [ 47.505964][ T5946] ? __lock_acquire+0x163e/0x3ce0 [ 47.507289][ T5946] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 47.509164][ T5946] ? hlock_class+0x4e/0x130 [ 47.510362][ T5946] ? __lock_acquire+0xbdd/0x3ce0 [ 47.511710][ T5946] ? __pfx___lock_acquire+0x10/0x10 [ 47.513084][ T5946] __netif_receive_skb_list_core+0x357/0x950 [ 47.514588][ T5946] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 47.516222][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 47.517719][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 47.519468][ T5946] ? lock_acquire+0x2f/0xb0 [ 47.520743][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 47.522380][ T5946] netif_receive_skb_list_internal+0x753/0xdb0 [ 47.524055][ T5946] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 47.525803][ T5946] ? __pfx_eth_type_trans+0x10/0x10 [ 47.527179][ T5946] ? __build_skb_around+0x278/0x3b0 [ 47.528578][ T5946] netif_receive_skb_list+0x4f/0x4a0 [ 47.530199][ T5946] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 47.532015][ T5946] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 47.533700][ T5946] ? bpf_test_timer_continue+0x150/0x3d0 [ 47.535162][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 47.536489][ T5946] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 47.538022][ T5946] ? try_to_wake_up+0x154/0x14f0 [ 47.539314][ T5946] ? __pfx_try_to_wake_up+0x10/0x10 [ 47.540574][ T5946] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 47.542150][ T5946] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 47.543633][ T5946] ? 0xffffffffa0004340 [ 47.544708][ T5946] ? 0xffffffffa0004340 [ 47.545774][ T5946] ? 0xffffffffa0004340 [ 47.546874][ T5946] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 47.548408][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 47.549798][ T5946] ? lock_acquire+0x2f/0xb0 [ 47.550990][ T5946] ? __fget_files+0x40/0x3f0 [ 47.552223][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 47.553738][ T5946] ? fput+0x30/0x390 [ 47.554801][ T5946] ? __bpf_prog_get+0xa0/0x290 [ 47.556031][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 47.557506][ T5946] __sys_bpf+0xfc6/0x49a0 [ 47.558621][ T5946] ? find_held_lock+0x2d/0x110 [ 47.559866][ T5946] ? __pfx___sys_bpf+0x10/0x10 [ 47.561085][ T5946] ? __might_fault+0x13b/0x190 [ 47.562341][ T5946] ? __pfx_lock_release+0x10/0x10 [ 47.563621][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 47.564931][ T5946] ? lock_acquire+0x2f/0xb0 [ 47.566103][ T5946] ? __might_fault+0xe3/0x190 [ 47.567333][ T5946] ? xfd_validate_state+0x5d/0x180 [ 47.568677][ T5946] ? rcu_is_watching+0x12/0xc0 [ 47.570296][ T5946] __x64_sys_bpf+0x78/0xc0 [ 47.571554][ T5946] ? lockdep_hardirqs_on+0x7c/0x110 [ 47.572986][ T5946] do_syscall_64+0xcd/0x250 [ 47.574240][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.576200][ T5946] RIP: 0033:0x7f5102b5de99 [ 47.577511][ T5946] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 47.583690][ T5946] RSP: 002b:00007f5102b18228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 47.585847][ T5946] RAX: ffffffffffffffda RBX: 00007f5102be8328 RCX: 00007f5102b5de99 [ 47.587879][ T5946] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 47.589871][ T5946] RBP: 00007f5102be8320 R08: 00007f5102b186c0 R09: 00007f5102b186c0 [ 47.592708][ T5946] R10: 00007f5102b186c0 R11: 0000000000000246 R12: 00007f5102bb5074 [ 47.594899][ T5946] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffc619b1828 [ 47.597001][ T5946] [ 47.597938][ T5946] BUG: Bad page state in process syz-executor133 pfn:34222 [ 47.600056][ T5946] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888034222d80 pfn:0x34222 [ 47.602704][ T5946] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 47.604499][ T5946] raw: 00fff00000000000 dead000000000040 ffff8880202ae000 0000000000000000 [ 47.606794][ T5946] raw: ffff888034222d80 0000000000000001 00000000ffffffff 0000000000000000 [ 47.609574][ T5946] page dumped because: page_pool leak [ 47.611085][ T5946] page_owner tracks the page as allocated [ 47.613167][ T5946] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5946, tgid 5942 (syz-executor133), ts 44467938967, free_ts 35628116372 [ 47.617427][ T5946] post_alloc_hook+0x2d1/0x350 [ 47.618795][ T5946] get_page_from_freelist+0x101e/0x3070 [ 47.620359][ T5946] __alloc_pages_noprof+0x223/0x25a0 [ 47.621703][ T5946] alloc_pages_bulk_noprof+0x77c/0x1110 [ 47.623146][ T5946] __page_pool_alloc_pages_slow+0x18f/0x770 [ 47.624660][ T5946] page_pool_alloc_netmem+0xc4/0x160 [ 47.626021][ T5946] page_pool_alloc_pages+0x1a/0x60 [ 47.627339][ T5946] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 47.629070][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 47.630588][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 47.632198][ T5946] __sys_bpf+0xfc6/0x49a0 [ 47.633504][ T5946] __x64_sys_bpf+0x78/0xc0 [ 47.635170][ T5946] do_syscall_64+0xcd/0x250 [ 47.636400][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.638191][ T5946] page last free pid 0 tgid 0 stack trace: [ 47.639883][ T5946] free_unref_page+0x5f4/0xdc0 [ 47.641082][ T5946] __folio_put+0x30d/0x3d0 [ 47.642211][ T5946] free_page_and_swap_cache+0x249/0x2c0 [ 47.643690][ T5946] tlb_remove_table_rcu+0x89/0xe0 [ 47.644966][ T5946] rcu_core+0x79d/0x14d0 [ 47.646036][ T5946] handle_softirqs+0x213/0x8f0 [ 47.647277][ T5946] irq_exit_rcu+0xbb/0x120 [ 47.648517][ T5946] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 47.649992][ T5946] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 47.651526][ T5946] Modules linked in: [ 47.652600][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: syz-executor133 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 47.655874][ T5946] Tainted: [B]=BAD_PAGE [ 47.656937][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 47.659724][ T5946] Call Trace: [ 47.660607][ T5946] [ 47.661394][ T5946] dump_stack_lvl+0x16c/0x1f0 [ 47.662584][ T5946] bad_page+0xb3/0x1f0 [ 47.663714][ T5946] ? __pfx_bad_page+0x10/0x10 [ 47.664958][ T5946] ? page_bad_reason+0x9d/0x1e0 [ 47.666275][ T5946] free_unref_page+0x657/0xdc0 [ 47.667498][ T5946] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 47.669045][ T5946] ? __phys_addr+0xc6/0x150 [ 47.670223][ T5946] skb_free_head+0xa0/0x1d0 [ 47.671395][ T5946] skb_release_data+0x560/0x730 [ 47.672663][ T5946] sk_skb_reason_drop+0x129/0x1a0 [ 47.674209][ T5946] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 47.676280][ T5946] ? kernel_text_address+0x8d/0x100 [ 47.678069][ T5946] ? hlock_class+0x4e/0x130 [ 47.679656][ T5946] ? __lock_acquire+0x163e/0x3ce0 [ 47.681067][ T5946] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 47.683019][ T5946] ? hlock_class+0x4e/0x130 [ 47.684238][ T5946] ? __lock_acquire+0xbdd/0x3ce0 [ 47.685480][ T5946] ? __pfx___lock_acquire+0x10/0x10 [ 47.686822][ T5946] __netif_receive_skb_list_core+0x357/0x950 [ 47.688601][ T5946] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 47.690430][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 47.691959][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 47.693700][ T5946] ? lock_acquire+0x2f/0xb0 [ 47.695024][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 47.696610][ T5946] netif_receive_skb_list_internal+0x753/0xdb0 [ 47.698198][ T5946] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 47.699944][ T5946] ? __pfx_eth_type_trans+0x10/0x10 [ 47.701330][ T5946] ? __build_skb_around+0x278/0x3b0 [ 47.702706][ T5946] netif_receive_skb_list+0x4f/0x4a0 [ 47.704147][ T5946] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 47.705806][ T5946] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 47.707533][ T5946] ? bpf_test_timer_continue+0x150/0x3d0 [ 47.709063][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 47.710385][ T5946] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 47.711903][ T5946] ? try_to_wake_up+0x154/0x14f0 [ 47.713170][ T5946] ? __pfx_try_to_wake_up+0x10/0x10 [ 47.714537][ T5946] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 47.716396][ T5946] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 47.717820][ T5946] ? 0xffffffffa0004340 [ 47.718962][ T5946] ? 0xffffffffa0004340 [ 47.720057][ T5946] ? 0xffffffffa0004340 [ 47.721120][ T5946] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 47.722948][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 47.724625][ T5946] ? lock_acquire+0x2f/0xb0 [ 47.726012][ T5946] ? __fget_files+0x40/0x3f0 [ 47.727413][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 47.728972][ T5946] ? fput+0x30/0x390 [ 47.729989][ T5946] ? __bpf_prog_get+0xa0/0x290 [ 47.731307][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 47.732862][ T5946] __sys_bpf+0xfc6/0x49a0 [ 47.734090][ T5946] ? find_held_lock+0x2d/0x110 [ 47.735418][ T5946] ? __pfx___sys_bpf+0x10/0x10 [ 47.736954][ T5946] ? __might_fault+0x13b/0x190 [ 47.738287][ T5946] ? __pfx_lock_release+0x10/0x10 [ 47.739642][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 47.741014][ T5946] ? lock_acquire+0x2f/0xb0 [ 47.742214][ T5946] ? __might_fault+0xe3/0x190 [ 47.743762][ T5946] ? xfd_validate_state+0x5d/0x180 [ 47.745355][ T5946] ? rcu_is_watching+0x12/0xc0 [ 47.746635][ T5946] __x64_sys_bpf+0x78/0xc0 [ 47.747924][ T5946] ? lockdep_hardirqs_on+0x7c/0x110 [ 47.749407][ T5946] do_syscall_64+0xcd/0x250 [ 47.750573][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.752202][ T5946] RIP: 0033:0x7f5102b5de99 [ 47.753486][ T5946] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 47.759135][ T5946] RSP: 002b:00007f5102b18228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 47.761189][ T5946] RAX: ffffffffffffffda RBX: 00007f5102be8328 RCX: 00007f5102b5de99 [ 47.763196][ T5946] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 47.765210][ T5946] RBP: 00007f5102be8320 R08: 00007f5102b186c0 R09: 00007f5102b186c0 [ 47.767280][ T5946] R10: 00007f5102b186c0 R11: 0000000000000246 R12: 00007f5102bb5074 [ 47.769265][ T5946] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffc619b1828 [ 47.771213][ T5946] [ 47.772104][ T5946] BUG: Bad page state in process syz-executor133 pfn:34221 [ 47.774067][ T5946] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000004 pfn:0x34221 [ 47.776668][ T5946] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 47.778561][ T5946] raw: 00fff00000000000 dead000000000040 ffff8880202ae000 0000000000000000 [ 47.780812][ T5946] raw: ffff888000000004 0000000000000001 00000000ffffffff 0000000000000000 [ 47.783064][ T5946] page dumped because: page_pool leak [ 47.784462][ T5946] page_owner tracks the page as allocated [ 47.785975][ T5946] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5946, tgid 5942 (syz-executor133), ts 44467931268, free_ts 35628109601 [ 47.791109][ T5946] post_alloc_hook+0x2d1/0x350 [ 47.792362][ T5946] get_page_from_freelist+0x101e/0x3070 [ 47.793790][ T5946] __alloc_pages_noprof+0x223/0x25a0 [ 47.795198][ T5946] alloc_pages_bulk_noprof+0x77c/0x1110 [ 47.796722][ T5946] __page_pool_alloc_pages_slow+0x18f/0x770 [ 47.798393][ T5946] page_pool_alloc_netmem+0xc4/0x160 [ 47.799836][ T5946] page_pool_alloc_pages+0x1a/0x60 [ 47.801350][ T5946] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 47.803062][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 47.804447][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 47.805825][ T5946] __sys_bpf+0xfc6/0x49a0 [ 47.807022][ T5946] __x64_sys_bpf+0x78/0xc0 [ 47.808232][ T5946] do_syscall_64+0xcd/0x250 [ 47.809408][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.810946][ T5946] page last free pid 0 tgid 0 stack trace: [ 47.812412][ T5946] free_unref_page+0x5f4/0xdc0 [ 47.813657][ T5946] __folio_put+0x30d/0x3d0 [ 47.814817][ T5946] free_page_and_swap_cache+0x249/0x2c0 [ 47.816250][ T5946] tlb_remove_table_rcu+0x89/0xe0 [ 47.817621][ T5946] rcu_core+0x79d/0x14d0 [ 47.818764][ T5946] handle_softirqs+0x213/0x8f0 [ 47.819994][ T5946] irq_exit_rcu+0xbb/0x120 [ 47.821141][ T5946] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 47.822589][ T5946] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 47.824178][ T5946] Modules linked in: [ 47.825221][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: syz-executor133 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 47.828426][ T5946] Tainted: [B]=BAD_PAGE [ 47.829493][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 47.832188][ T5946] Call Trace: [ 47.833060][ T5946] [ 47.833810][ T5946] dump_stack_lvl+0x16c/0x1f0 [ 47.835023][ T5946] bad_page+0xb3/0x1f0 [ 47.836067][ T5946] ? __pfx_bad_page+0x10/0x10 [ 47.837344][ T5946] ? page_bad_reason+0x9d/0x1e0 [ 47.838597][ T5946] free_unref_page+0x657/0xdc0 [ 47.839858][ T5946] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 47.841355][ T5946] ? __phys_addr+0xc6/0x150 [ 47.842504][ T5946] skb_free_head+0xa0/0x1d0 [ 47.843669][ T5946] skb_release_data+0x560/0x730 [ 47.844897][ T5946] sk_skb_reason_drop+0x129/0x1a0 [ 47.846162][ T5946] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 47.847930][ T5946] ? kernel_text_address+0x8d/0x100 [ 47.849254][ T5946] ? hlock_class+0x4e/0x130 [ 47.850421][ T5946] ? __lock_acquire+0x163e/0x3ce0 [ 47.851705][ T5946] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 47.853495][ T5946] ? hlock_class+0x4e/0x130 [ 47.854731][ T5946] ? __lock_acquire+0xbdd/0x3ce0 [ 47.856051][ T5946] ? __pfx___lock_acquire+0x10/0x10 [ 47.857420][ T5946] __netif_receive_skb_list_core+0x357/0x950 [ 47.859000][ T5946] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 47.860615][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 47.861989][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 47.863644][ T5946] ? lock_acquire+0x2f/0xb0 [ 47.864848][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 47.866455][ T5946] netif_receive_skb_list_internal+0x753/0xdb0 [ 47.868493][ T5946] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 47.870363][ T5946] ? __pfx_eth_type_trans+0x10/0x10 [ 47.871693][ T5946] ? __build_skb_around+0x278/0x3b0 [ 47.873023][ T5946] netif_receive_skb_list+0x4f/0x4a0 [ 47.874371][ T5946] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 47.875943][ T5946] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 47.877648][ T5946] ? bpf_test_timer_continue+0x150/0x3d0 [ 47.879207][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 47.880560][ T5946] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 47.882050][ T5946] ? try_to_wake_up+0x154/0x14f0 [ 47.883309][ T5946] ? __pfx_try_to_wake_up+0x10/0x10 [ 47.884606][ T5946] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 47.886138][ T5946] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 47.887552][ T5946] ? 0xffffffffa0004340 [ 47.888709][ T5946] ? 0xffffffffa0004340 [ 47.889783][ T5946] ? 0xffffffffa0004340 [ 47.890850][ T5946] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 47.892791][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 47.894758][ T5946] ? lock_acquire+0x2f/0xb0 [ 47.896019][ T5946] ? __fget_files+0x40/0x3f0 [ 47.897222][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 47.898827][ T5946] ? fput+0x30/0x390 [ 47.899882][ T5946] ? __bpf_prog_get+0xa0/0x290 [ 47.901339][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 47.902917][ T5946] __sys_bpf+0xfc6/0x49a0 [ 47.904038][ T5946] ? find_held_lock+0x2d/0x110 [ 47.905298][ T5946] ? __pfx___sys_bpf+0x10/0x10 [ 47.906542][ T5946] ? __might_fault+0x13b/0x190 [ 47.907843][ T5946] ? __pfx_lock_release+0x10/0x10 [ 47.909199][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 47.910555][ T5946] ? lock_acquire+0x2f/0xb0 [ 47.911746][ T5946] ? __might_fault+0xe3/0x190 [ 47.913017][ T5946] ? xfd_validate_state+0x5d/0x180 [ 47.914361][ T5946] ? rcu_is_watching+0x12/0xc0 [ 47.915639][ T5946] __x64_sys_bpf+0x78/0xc0 [ 47.916805][ T5946] ? lockdep_hardirqs_on+0x7c/0x110 [ 47.918243][ T5946] do_syscall_64+0xcd/0x250 [ 47.919420][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.920928][ T5946] RIP: 0033:0x7f5102b5de99 [ 47.922105][ T5946] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 47.927144][ T5946] RSP: 002b:00007f5102b18228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 47.929448][ T5946] RAX: ffffffffffffffda RBX: 00007f5102be8328 RCX: 00007f5102b5de99 [ 47.931496][ T5946] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 47.933571][ T5946] RBP: 00007f5102be8320 R08: 00007f5102b186c0 R09: 00007f5102b186c0 [ 47.935619][ T5946] R10: 00007f5102b186c0 R11: 0000000000000246 R12: 00007f5102bb5074 [ 47.937675][ T5946] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffc619b1828 [ 47.939787][ T5946] [ 47.940733][ T5946] BUG: Bad page state in process syz-executor133 pfn:34220 [ 47.942565][ T5946] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888034223c00 pfn:0x34220 [ 47.945168][ T5946] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 47.947041][ T5946] raw: 00fff00000000000 dead000000000040 ffff8880202ae000 0000000000000000 [ 47.949402][ T5946] raw: ffff888034223c00 0000000000000001 00000000ffffffff 0000000000000000 [ 47.951579][ T5946] page dumped because: page_pool leak [ 47.952925][ T5946] page_owner tracks the page as allocated [ 47.954383][ T5946] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5946, tgid 5942 (syz-executor133), ts 44467923661, free_ts 35628123592 [ 47.958804][ T5946] post_alloc_hook+0x2d1/0x350 [ 47.960012][ T5946] get_page_from_freelist+0x101e/0x3070 [ 47.961410][ T5946] __alloc_pages_noprof+0x223/0x25a0 [ 47.962767][ T5946] alloc_pages_bulk_noprof+0x77c/0x1110 [ 47.964157][ T5946] __page_pool_alloc_pages_slow+0x18f/0x770 [ 47.965653][ T5946] page_pool_alloc_netmem+0xc4/0x160 [ 47.966994][ T5946] page_pool_alloc_pages+0x1a/0x60 [ 47.968353][ T5946] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 47.969932][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 47.971256][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 47.972593][ T5946] __sys_bpf+0xfc6/0x49a0 [ 47.973690][ T5946] __x64_sys_bpf+0x78/0xc0 [ 47.974866][ T5946] do_syscall_64+0xcd/0x250 [ 47.976085][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.977626][ T5946] page last free pid 0 tgid 0 stack trace: [ 47.979215][ T5946] free_unref_page+0x5f4/0xdc0 [ 47.980406][ T5946] __folio_put+0x30d/0x3d0 [ 47.981541][ T5946] free_page_and_swap_cache+0x249/0x2c0 [ 47.983006][ T5946] tlb_remove_table_rcu+0x89/0xe0 [ 47.984347][ T5946] rcu_core+0x79d/0x14d0 [ 47.985408][ T5946] handle_softirqs+0x213/0x8f0 [ 47.986597][ T5946] irq_exit_rcu+0xbb/0x120 [ 47.987847][ T5946] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 47.989342][ T5946] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 47.990876][ T5946] Modules linked in: [ 47.991878][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: syz-executor133 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 47.995034][ T5946] Tainted: [B]=BAD_PAGE [ 47.996114][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 47.999030][ T5946] Call Trace: [ 47.999959][ T5946] [ 48.000721][ T5946] dump_stack_lvl+0x16c/0x1f0 [ 48.001960][ T5946] bad_page+0xb3/0x1f0 [ 48.003046][ T5946] ? __pfx_bad_page+0x10/0x10 [ 48.004233][ T5946] ? page_bad_reason+0x9d/0x1e0 [ 48.005458][ T5946] free_unref_page+0x657/0xdc0 [ 48.006691][ T5946] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 48.008259][ T5946] ? __phys_addr+0xc6/0x150 [ 48.009469][ T5946] skb_free_head+0xa0/0x1d0 [ 48.010640][ T5946] skb_release_data+0x560/0x730 [ 48.011970][ T5946] sk_skb_reason_drop+0x129/0x1a0 [ 48.013350][ T5946] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 48.015157][ T5946] ? kernel_text_address+0x8d/0x100 [ 48.016555][ T5946] ? hlock_class+0x4e/0x130 [ 48.017740][ T5946] ? __lock_acquire+0x163e/0x3ce0 [ 48.019080][ T5946] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 48.020920][ T5946] ? hlock_class+0x4e/0x130 [ 48.022115][ T5946] ? __lock_acquire+0xbdd/0x3ce0 [ 48.023425][ T5946] ? __pfx___lock_acquire+0x10/0x10 [ 48.024795][ T5946] __netif_receive_skb_list_core+0x357/0x950 [ 48.026285][ T5946] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 48.027924][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 48.029285][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 48.030905][ T5946] ? lock_acquire+0x2f/0xb0 [ 48.032085][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 48.033727][ T5946] netif_receive_skb_list_internal+0x753/0xdb0 [ 48.035312][ T5946] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 48.036972][ T5946] ? __pfx_eth_type_trans+0x10/0x10 [ 48.038337][ T5946] ? __build_skb_around+0x278/0x3b0 [ 48.039769][ T5946] netif_receive_skb_list+0x4f/0x4a0 [ 48.041138][ T5946] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 48.042690][ T5946] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 48.044310][ T5946] ? bpf_test_timer_continue+0x150/0x3d0 [ 48.045701][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 48.047077][ T5946] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 48.048677][ T5946] ? try_to_wake_up+0x154/0x14f0 [ 48.050013][ T5946] ? __pfx_try_to_wake_up+0x10/0x10 [ 48.051408][ T5946] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 48.052950][ T5946] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 48.054331][ T5946] ? 0xffffffffa0004340 [ 48.055441][ T5946] ? 0xffffffffa0004340 [ 48.056520][ T5946] ? 0xffffffffa0004340 [ 48.057597][ T5946] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 48.059158][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 48.060561][ T5946] ? lock_acquire+0x2f/0xb0 [ 48.061728][ T5946] ? __fget_files+0x40/0x3f0 [ 48.062888][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 48.064344][ T5946] ? fput+0x30/0x390 [ 48.065359][ T5946] ? __bpf_prog_get+0xa0/0x290 [ 48.066561][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 48.068071][ T5946] __sys_bpf+0xfc6/0x49a0 [ 48.069154][ T5946] ? find_held_lock+0x2d/0x110 [ 48.070392][ T5946] ? __pfx___sys_bpf+0x10/0x10 [ 48.071649][ T5946] ? __might_fault+0x13b/0x190 [ 48.073488][ T5946] ? __pfx_lock_release+0x10/0x10 [ 48.075351][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 48.077007][ T5946] ? lock_acquire+0x2f/0xb0 [ 48.078340][ T5946] ? __might_fault+0xe3/0x190 [ 48.079652][ T5946] ? xfd_validate_state+0x5d/0x180 [ 48.081170][ T5946] ? rcu_is_watching+0x12/0xc0 [ 48.082465][ T5946] __x64_sys_bpf+0x78/0xc0 [ 48.083708][ T5946] ? lockdep_hardirqs_on+0x7c/0x110 [ 48.085164][ T5946] do_syscall_64+0xcd/0x250 [ 48.086498][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.088211][ T5946] RIP: 0033:0x7f5102b5de99 [ 48.089492][ T5946] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 48.094317][ T5946] RSP: 002b:00007f5102b18228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 48.096451][ T5946] RAX: ffffffffffffffda RBX: 00007f5102be8328 RCX: 00007f5102b5de99 [ 48.098528][ T5946] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 48.100650][ T5946] RBP: 00007f5102be8320 R08: 00007f5102b186c0 R09: 00007f5102b186c0 [ 48.102703][ T5946] R10: 00007f5102b186c0 R11: 0000000000000246 R12: 00007f5102bb5074 [ 48.104778][ T5946] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffc619b1828 [ 48.106862][ T5946] [ 48.107813][ T5946] BUG: Bad page state in process syz-executor133 pfn:28ba7 [ 48.109749][ T5946] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2 pfn:0x28ba7 [ 48.112002][ T5946] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 48.113893][ T5946] raw: 00fff00000000000 dead000000000040 ffff8880202ae000 0000000000000000 [ 48.116074][ T5946] raw: 0000000000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 48.118328][ T5946] page dumped because: page_pool leak [ 48.119705][ T5946] page_owner tracks the page as allocated [ 48.121186][ T5946] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5946, tgid 5942 (syz-executor133), ts 44467915630, free_ts 35584189006 [ 48.125509][ T5946] post_alloc_hook+0x2d1/0x350 [ 48.126740][ T5946] get_page_from_freelist+0x101e/0x3070 [ 48.128215][ T5946] __alloc_pages_noprof+0x223/0x25a0 [ 48.129553][ T5946] alloc_pages_bulk_noprof+0x77c/0x1110 [ 48.131029][ T5946] __page_pool_alloc_pages_slow+0x18f/0x770 [ 48.132503][ T5946] page_pool_alloc_netmem+0xc4/0x160 [ 48.133848][ T5946] page_pool_alloc_pages+0x1a/0x60 [ 48.135218][ T5946] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 48.136807][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 48.138222][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 48.139608][ T5946] __sys_bpf+0xfc6/0x49a0 [ 48.140754][ T5946] __x64_sys_bpf+0x78/0xc0 [ 48.142006][ T5946] do_syscall_64+0xcd/0x250 [ 48.143225][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.144731][ T5946] page last free pid 5873 tgid 5873 stack trace: [ 48.146319][ T5946] free_unref_page+0x5f4/0xdc0 [ 48.147576][ T5946] __put_partials+0x14c/0x170 [ 48.148810][ T5946] qlist_free_all+0x4e/0x120 [ 48.149990][ T5946] kasan_quarantine_reduce+0x192/0x1e0 [ 48.151421][ T5946] __kasan_slab_alloc+0x69/0x90 [ 48.152680][ T5946] kmem_cache_alloc_noprof+0x121/0x2f0 [ 48.154034][ T5946] getname_flags.part.0+0x4c/0x550 [ 48.155393][ T5946] getname+0x8d/0xe0 [ 48.156383][ T5946] do_sys_openat2+0x104/0x1e0 [ 48.157568][ T5946] __x64_sys_openat+0x175/0x210 [ 48.158943][ T5946] do_syscall_64+0xcd/0x250 [ 48.160117][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.161668][ T5946] Modules linked in: [ 48.162669][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: syz-executor133 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 48.165788][ T5946] Tainted: [B]=BAD_PAGE [ 48.166830][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 48.169417][ T5946] Call Trace: [ 48.170267][ T5946] [ 48.171164][ T5946] dump_stack_lvl+0x16c/0x1f0 [ 48.172509][ T5946] bad_page+0xb3/0x1f0 [ 48.173580][ T5946] ? __pfx_bad_page+0x10/0x10 [ 48.175187][ T5946] ? page_bad_reason+0x9d/0x1e0 [ 48.176465][ T5946] free_unref_page+0x657/0xdc0 [ 48.177679][ T5946] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 48.179338][ T5946] ? __phys_addr+0xc6/0x150 [ 48.180554][ T5946] skb_free_head+0xa0/0x1d0 [ 48.181816][ T5946] skb_release_data+0x560/0x730 [ 48.183123][ T5946] sk_skb_reason_drop+0x129/0x1a0 [ 48.184400][ T5946] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 48.186162][ T5946] ? kernel_text_address+0x8d/0x100 [ 48.187547][ T5946] ? hlock_class+0x4e/0x130 [ 48.188739][ T5946] ? __lock_acquire+0x163e/0x3ce0 [ 48.190051][ T5946] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 48.191956][ T5946] ? hlock_class+0x4e/0x130 [ 48.193134][ T5946] ? __lock_acquire+0xbdd/0x3ce0 [ 48.194423][ T5946] ? __pfx___lock_acquire+0x10/0x10 [ 48.195796][ T5946] __netif_receive_skb_list_core+0x357/0x950 [ 48.197355][ T5946] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 48.199120][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 48.200483][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 48.202180][ T5946] ? lock_acquire+0x2f/0xb0 [ 48.203423][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 48.205063][ T5946] netif_receive_skb_list_internal+0x753/0xdb0 [ 48.206682][ T5946] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 48.208428][ T5946] ? __pfx_eth_type_trans+0x10/0x10 [ 48.209784][ T5946] ? __build_skb_around+0x278/0x3b0 [ 48.211160][ T5946] netif_receive_skb_list+0x4f/0x4a0 [ 48.212589][ T5946] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 48.214241][ T5946] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 48.215983][ T5946] ? bpf_test_timer_continue+0x150/0x3d0 [ 48.217394][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 48.218756][ T5946] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 48.220306][ T5946] ? try_to_wake_up+0x154/0x14f0 [ 48.221613][ T5946] ? __pfx_try_to_wake_up+0x10/0x10 [ 48.222995][ T5946] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 48.224507][ T5946] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 48.225890][ T5946] ? 0xffffffffa0004340 [ 48.226972][ T5946] ? 0xffffffffa0004340 [ 48.228070][ T5946] ? 0xffffffffa0004340 [ 48.229154][ T5946] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 48.230671][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 48.232355][ T5946] ? lock_acquire+0x2f/0xb0 [ 48.233615][ T5946] ? __fget_files+0x40/0x3f0 [ 48.235032][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 48.236590][ T5946] ? fput+0x30/0x390 [ 48.237603][ T5946] ? __bpf_prog_get+0xa0/0x290 [ 48.238889][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 48.240370][ T5946] __sys_bpf+0xfc6/0x49a0 [ 48.241482][ T5946] ? find_held_lock+0x2d/0x110 [ 48.242785][ T5946] ? __pfx___sys_bpf+0x10/0x10 [ 48.244192][ T5946] ? __might_fault+0x13b/0x190 [ 48.245497][ T5946] ? __pfx_lock_release+0x10/0x10 [ 48.246801][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 48.248142][ T5946] ? lock_acquire+0x2f/0xb0 [ 48.249288][ T5946] ? __might_fault+0xe3/0x190 [ 48.250519][ T5946] ? xfd_validate_state+0x5d/0x180 [ 48.251857][ T5946] ? rcu_is_watching+0x12/0xc0 [ 48.253132][ T5946] __x64_sys_bpf+0x78/0xc0 [ 48.254334][ T5946] ? lockdep_hardirqs_on+0x7c/0x110 [ 48.255729][ T5946] do_syscall_64+0xcd/0x250 [ 48.256902][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.258416][ T5946] RIP: 0033:0x7f5102b5de99 [ 48.259564][ T5946] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 48.264682][ T5946] RSP: 002b:00007f5102b18228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 48.266830][ T5946] RAX: ffffffffffffffda RBX: 00007f5102be8328 RCX: 00007f5102b5de99 [ 48.268824][ T5946] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 48.270805][ T5946] RBP: 00007f5102be8320 R08: 00007f5102b186c0 R09: 00007f5102b186c0 [ 48.272794][ T5946] R10: 00007f5102b186c0 R11: 0000000000000246 R12: 00007f5102bb5074 [ 48.274863][ T5946] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffc619b1828 [ 48.277080][ T5946] [ 48.278039][ T5946] BUG: Bad page state in process syz-executor133 pfn:28ba6 [ 48.280010][ T5946] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888028ba7180 pfn:0x28ba6 [ 48.282876][ T5946] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 48.284692][ T5946] raw: 00fff00000000000 dead000000000040 ffff8880202ae000 0000000000000000 [ 48.286838][ T5946] raw: ffff888028ba7180 0000000000000001 00000000ffffffff 0000000000000000 [ 48.289047][ T5946] page dumped because: page_pool leak [ 48.290480][ T5946] page_owner tracks the page as allocated [ 48.291998][ T5946] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5946, tgid 5942 (syz-executor133), ts 44467907743, free_ts 35584189006 [ 48.296340][ T5946] post_alloc_hook+0x2d1/0x350 [ 48.297619][ T5946] get_page_from_freelist+0x101e/0x3070 [ 48.299226][ T5946] __alloc_pages_noprof+0x223/0x25a0 [ 48.300705][ T5946] alloc_pages_bulk_noprof+0x77c/0x1110 [ 48.302084][ T5946] __page_pool_alloc_pages_slow+0x18f/0x770 [ 48.303686][ T5946] page_pool_alloc_netmem+0xc4/0x160 [ 48.305044][ T5946] page_pool_alloc_pages+0x1a/0x60 [ 48.306329][ T5946] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 48.307996][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 48.309467][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 48.310851][ T5946] __sys_bpf+0xfc6/0x49a0 [ 48.311969][ T5946] __x64_sys_bpf+0x78/0xc0 [ 48.313129][ T5946] do_syscall_64+0xcd/0x250 [ 48.314348][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.315889][ T5946] page last free pid 5873 tgid 5873 stack trace: [ 48.317504][ T5946] free_unref_page+0x5f4/0xdc0 [ 48.318836][ T5946] __put_partials+0x14c/0x170 [ 48.320172][ T5946] qlist_free_all+0x4e/0x120 [ 48.321359][ T5946] kasan_quarantine_reduce+0x192/0x1e0 [ 48.322728][ T5946] __kasan_slab_alloc+0x69/0x90 [ 48.324027][ T5946] kmem_cache_alloc_noprof+0x121/0x2f0 [ 48.325407][ T5946] getname_flags.part.0+0x4c/0x550 [ 48.326707][ T5946] getname+0x8d/0xe0 [ 48.327802][ T5946] do_sys_openat2+0x104/0x1e0 [ 48.329090][ T5946] __x64_sys_openat+0x175/0x210 [ 48.330357][ T5946] do_syscall_64+0xcd/0x250 [ 48.331577][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.333088][ T5946] Modules linked in: [ 48.334139][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: syz-executor133 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 48.337347][ T5946] Tainted: [B]=BAD_PAGE [ 48.338456][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 48.341148][ T5946] Call Trace: [ 48.342015][ T5946] [ 48.342833][ T5946] dump_stack_lvl+0x16c/0x1f0 [ 48.344064][ T5946] bad_page+0xb3/0x1f0 [ 48.345147][ T5946] ? __pfx_bad_page+0x10/0x10 [ 48.346341][ T5946] ? page_bad_reason+0x9d/0x1e0 [ 48.347617][ T5946] free_unref_page+0x657/0xdc0 [ 48.348854][ T5946] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 48.350352][ T5946] ? __phys_addr+0xc6/0x150 [ 48.351517][ T5946] skb_free_head+0xa0/0x1d0 [ 48.352694][ T5946] skb_release_data+0x560/0x730 [ 48.353937][ T5946] sk_skb_reason_drop+0x129/0x1a0 [ 48.355324][ T5946] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 48.357010][ T5946] ? kernel_text_address+0x8d/0x100 [ 48.358357][ T5946] ? hlock_class+0x4e/0x130 [ 48.359522][ T5946] ? __lock_acquire+0x163e/0x3ce0 [ 48.360767][ T5946] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 48.362531][ T5946] ? hlock_class+0x4e/0x130 [ 48.363673][ T5946] ? __lock_acquire+0xbdd/0x3ce0 [ 48.364971][ T5946] ? __pfx___lock_acquire+0x10/0x10 [ 48.366335][ T5946] __netif_receive_skb_list_core+0x357/0x950 [ 48.368413][ T5946] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 48.370091][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 48.371426][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 48.373083][ T5946] ? lock_acquire+0x2f/0xb0 [ 48.374358][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 48.376165][ T5946] netif_receive_skb_list_internal+0x753/0xdb0 [ 48.377945][ T5946] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 48.379674][ T5946] ? __pfx_eth_type_trans+0x10/0x10 [ 48.381031][ T5946] ? __build_skb_around+0x278/0x3b0 [ 48.382404][ T5946] netif_receive_skb_list+0x4f/0x4a0 [ 48.383789][ T5946] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 48.385443][ T5946] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 48.387152][ T5946] ? bpf_test_timer_continue+0x150/0x3d0 [ 48.388855][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 48.390265][ T5946] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 48.392106][ T5946] ? try_to_wake_up+0x154/0x14f0 [ 48.393397][ T5946] ? __pfx_try_to_wake_up+0x10/0x10 [ 48.394792][ T5946] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 48.396371][ T5946] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 48.397750][ T5946] ? 0xffffffffa0004340 [ 48.398858][ T5946] ? 0xffffffffa0004340 [ 48.399928][ T5946] ? 0xffffffffa0004340 [ 48.401192][ T5946] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 48.402825][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 48.404241][ T5946] ? lock_acquire+0x2f/0xb0 [ 48.405482][ T5946] ? __fget_files+0x40/0x3f0 [ 48.406712][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 48.408267][ T5946] ? fput+0x30/0x390 [ 48.409296][ T5946] ? __bpf_prog_get+0xa0/0x290 [ 48.410586][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 48.412133][ T5946] __sys_bpf+0xfc6/0x49a0 [ 48.413283][ T5946] ? find_held_lock+0x2d/0x110 [ 48.414503][ T5946] ? __pfx___sys_bpf+0x10/0x10 [ 48.415815][ T5946] ? __might_fault+0x13b/0x190 [ 48.417047][ T5946] ? __pfx_lock_release+0x10/0x10 [ 48.418366][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 48.419807][ T5946] ? lock_acquire+0x2f/0xb0 [ 48.421086][ T5946] ? __might_fault+0xe3/0x190 [ 48.422339][ T5946] ? xfd_validate_state+0x5d/0x180 [ 48.423639][ T5946] ? rcu_is_watching+0x12/0xc0 [ 48.424856][ T5946] __x64_sys_bpf+0x78/0xc0 [ 48.426062][ T5946] ? lockdep_hardirqs_on+0x7c/0x110 [ 48.427438][ T5946] do_syscall_64+0xcd/0x250 [ 48.428588][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.430084][ T5946] RIP: 0033:0x7f5102b5de99 [ 48.431375][ T5946] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 48.436416][ T5946] RSP: 002b:00007f5102b18228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 48.438676][ T5946] RAX: ffffffffffffffda RBX: 00007f5102be8328 RCX: 00007f5102b5de99 [ 48.440732][ T5946] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 48.442783][ T5946] RBP: 00007f5102be8320 R08: 00007f5102b186c0 R09: 00007f5102b186c0 [ 48.444829][ T5946] R10: 00007f5102b186c0 R11: 0000000000000246 R12: 00007f5102bb5074 [ 48.446962][ T5946] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffc619b1828 [ 48.449069][ T5946] [ 48.449956][ T5946] BUG: Bad page state in process syz-executor133 pfn:28ba5 [ 48.452561][ T5946] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888028ba5f00 pfn:0x28ba5 [ 48.455628][ T5946] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 48.457543][ T5946] raw: 00fff00000000000 dead000000000040 ffff8880202ae000 0000000000000000 [ 48.459821][ T5946] raw: ffff888028ba5f00 0000000000000001 00000000ffffffff 0000000000000000 [ 48.462100][ T5946] page dumped because: page_pool leak [ 48.463524][ T5946] page_owner tracks the page as allocated [ 48.465014][ T5946] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5946, tgid 5942 (syz-executor133), ts 44467899242, free_ts 35584189006 [ 48.469427][ T5946] post_alloc_hook+0x2d1/0x350 [ 48.470754][ T5946] get_page_from_freelist+0x101e/0x3070 [ 48.472636][ T5946] __alloc_pages_noprof+0x223/0x25a0 [ 48.474061][ T5946] alloc_pages_bulk_noprof+0x77c/0x1110 [ 48.475499][ T5946] __page_pool_alloc_pages_slow+0x18f/0x770 [ 48.477025][ T5946] page_pool_alloc_netmem+0xc4/0x160 [ 48.478456][ T5946] page_pool_alloc_pages+0x1a/0x60 [ 48.479893][ T5946] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 48.481389][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 48.482740][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 48.484457][ T5946] __sys_bpf+0xfc6/0x49a0 [ 48.485546][ T5946] __x64_sys_bpf+0x78/0xc0 [ 48.486686][ T5946] do_syscall_64+0xcd/0x250 [ 48.487950][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.489556][ T5946] page last free pid 5873 tgid 5873 stack trace: [ 48.491145][ T5946] free_unref_page+0x5f4/0xdc0 [ 48.492357][ T5946] __put_partials+0x14c/0x170 [ 48.493542][ T5946] qlist_free_all+0x4e/0x120 [ 48.494745][ T5946] kasan_quarantine_reduce+0x192/0x1e0 [ 48.496137][ T5946] __kasan_slab_alloc+0x69/0x90 [ 48.497477][ T5946] kmem_cache_alloc_noprof+0x121/0x2f0 [ 48.498983][ T5946] getname_flags.part.0+0x4c/0x550 [ 48.500432][ T5946] getname+0x8d/0xe0 [ 48.501458][ T5946] do_sys_openat2+0x104/0x1e0 [ 48.502695][ T5946] __x64_sys_openat+0x175/0x210 [ 48.504007][ T5946] do_syscall_64+0xcd/0x250 [ 48.505214][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.506785][ T5946] Modules linked in: [ 48.507950][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: syz-executor133 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 48.511679][ T5946] Tainted: [B]=BAD_PAGE [ 48.512773][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 48.515576][ T5946] Call Trace: [ 48.516449][ T5946] [ 48.517513][ T5946] dump_stack_lvl+0x16c/0x1f0 [ 48.518800][ T5946] bad_page+0xb3/0x1f0 [ 48.519874][ T5946] ? __pfx_bad_page+0x10/0x10 [ 48.521103][ T5946] ? page_bad_reason+0x9d/0x1e0 [ 48.522411][ T5946] free_unref_page+0x657/0xdc0 [ 48.523677][ T5946] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 48.525237][ T5946] ? __phys_addr+0xc6/0x150 [ 48.526421][ T5946] skb_free_head+0xa0/0x1d0 [ 48.527677][ T5946] skb_release_data+0x560/0x730 [ 48.529055][ T5946] sk_skb_reason_drop+0x129/0x1a0 [ 48.530458][ T5946] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 48.532450][ T5946] ? kernel_text_address+0x8d/0x100 [ 48.533774][ T5946] ? hlock_class+0x4e/0x130 [ 48.535127][ T5946] ? __lock_acquire+0x163e/0x3ce0 [ 48.536769][ T5946] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 48.538700][ T5946] ? hlock_class+0x4e/0x130 [ 48.540007][ T5946] ? __lock_acquire+0xbdd/0x3ce0 [ 48.541386][ T5946] ? __pfx___lock_acquire+0x10/0x10 [ 48.542761][ T5946] __netif_receive_skb_list_core+0x357/0x950 [ 48.544387][ T5946] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 48.546136][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 48.547502][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 48.549219][ T5946] ? lock_acquire+0x2f/0xb0 [ 48.550417][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 48.552093][ T5946] netif_receive_skb_list_internal+0x753/0xdb0 [ 48.553737][ T5946] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 48.555538][ T5946] ? __pfx_eth_type_trans+0x10/0x10 [ 48.557024][ T5946] ? __build_skb_around+0x278/0x3b0 [ 48.558450][ T5946] netif_receive_skb_list+0x4f/0x4a0 [ 48.559807][ T5946] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 48.561472][ T5946] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 48.563154][ T5946] ? bpf_test_timer_continue+0x150/0x3d0 [ 48.564530][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 48.565885][ T5946] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 48.567407][ T5946] ? try_to_wake_up+0x154/0x14f0 [ 48.568770][ T5946] ? __pfx_try_to_wake_up+0x10/0x10 [ 48.570127][ T5946] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 48.571683][ T5946] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 48.573106][ T5946] ? 0xffffffffa0004340 [ 48.574186][ T5946] ? 0xffffffffa0004340 [ 48.575259][ T5946] ? 0xffffffffa0004340 [ 48.576298][ T5946] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 48.577849][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 48.579278][ T5946] ? lock_acquire+0x2f/0xb0 [ 48.580457][ T5946] ? __fget_files+0x40/0x3f0 [ 48.581702][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 48.583214][ T5946] ? fput+0x30/0x390 [ 48.584239][ T5946] ? __bpf_prog_get+0xa0/0x290 [ 48.585468][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 48.587023][ T5946] __sys_bpf+0xfc6/0x49a0 [ 48.588173][ T5946] ? find_held_lock+0x2d/0x110 [ 48.589494][ T5946] ? __pfx___sys_bpf+0x10/0x10 [ 48.590700][ T5946] ? __might_fault+0x13b/0x190 [ 48.591931][ T5946] ? __pfx_lock_release+0x10/0x10 [ 48.593161][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 48.594527][ T5946] ? lock_acquire+0x2f/0xb0 [ 48.595752][ T5946] ? __might_fault+0xe3/0x190 [ 48.596992][ T5946] ? xfd_validate_state+0x5d/0x180 [ 48.598367][ T5946] ? rcu_is_watching+0x12/0xc0 [ 48.599663][ T5946] __x64_sys_bpf+0x78/0xc0 [ 48.600807][ T5946] ? lockdep_hardirqs_on+0x7c/0x110 [ 48.602161][ T5946] do_syscall_64+0xcd/0x250 [ 48.603339][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.604833][ T5946] RIP: 0033:0x7f5102b5de99 [ 48.606007][ T5946] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 48.610964][ T5946] RSP: 002b:00007f5102b18228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 48.613211][ T5946] RAX: ffffffffffffffda RBX: 00007f5102be8328 RCX: 00007f5102b5de99 [ 48.615464][ T5946] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 48.617530][ T5946] RBP: 00007f5102be8320 R08: 00007f5102b186c0 R09: 00007f5102b186c0 [ 48.619631][ T5946] R10: 00007f5102b186c0 R11: 0000000000000246 R12: 00007f5102bb5074 [ 48.621646][ T5946] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffc619b1828 [ 48.623825][ T5946] [ 48.624756][ T5946] BUG: Bad page state in process syz-executor133 pfn:28ba4 [ 48.626715][ T5946] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888028ba43e0 pfn:0x28ba4 [ 48.629410][ T5946] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 48.631203][ T5946] raw: 00fff00000000000 dead000000000040 ffff8880202ae000 0000000000000000 [ 48.633382][ T5946] raw: ffff888028ba43e0 0000000000000001 00000000ffffffff 0000000000000000 [ 48.635579][ T5946] page dumped because: page_pool leak [ 48.637247][ T5946] page_owner tracks the page as allocated [ 48.638835][ T5946] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5946, tgid 5942 (syz-executor133), ts 44467866054, free_ts 35584189006 [ 48.643286][ T5946] post_alloc_hook+0x2d1/0x350 [ 48.644540][ T5946] get_page_from_freelist+0x101e/0x3070 [ 48.645956][ T5946] __alloc_pages_noprof+0x223/0x25a0 [ 48.647330][ T5946] alloc_pages_bulk_noprof+0x77c/0x1110 [ 48.648955][ T5946] __page_pool_alloc_pages_slow+0x18f/0x770 [ 48.650674][ T5946] page_pool_alloc_netmem+0xc4/0x160 [ 48.652381][ T5946] page_pool_alloc_pages+0x1a/0x60 [ 48.653758][ T5946] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 48.655433][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 48.656880][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 48.658597][ T5946] __sys_bpf+0xfc6/0x49a0 [ 48.659905][ T5946] __x64_sys_bpf+0x78/0xc0 [ 48.661208][ T5946] do_syscall_64+0xcd/0x250 [ 48.662543][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.664091][ T5946] page last free pid 5873 tgid 5873 stack trace: [ 48.665669][ T5946] free_unref_page+0x5f4/0xdc0 [ 48.666889][ T5946] __put_partials+0x14c/0x170 [ 48.668165][ T5946] qlist_free_all+0x4e/0x120 [ 48.669337][ T5946] kasan_quarantine_reduce+0x192/0x1e0 [ 48.670698][ T5946] __kasan_slab_alloc+0x69/0x90 [ 48.671957][ T5946] kmem_cache_alloc_noprof+0x121/0x2f0 [ 48.673318][ T5946] getname_flags.part.0+0x4c/0x550 [ 48.674634][ T5946] getname+0x8d/0xe0 [ 48.675656][ T5946] do_sys_openat2+0x104/0x1e0 [ 48.676861][ T5946] __x64_sys_openat+0x175/0x210 [ 48.678158][ T5946] do_syscall_64+0xcd/0x250 [ 48.679338][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.680952][ T5946] Modules linked in: [ 48.681961][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: syz-executor133 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 48.685082][ T5946] Tainted: [B]=BAD_PAGE [ 48.686134][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 48.688846][ T5946] Call Trace: [ 48.689685][ T5946] [ 48.690445][ T5946] dump_stack_lvl+0x16c/0x1f0 [ 48.691666][ T5946] bad_page+0xb3/0x1f0 [ 48.692679][ T5946] ? __pfx_bad_page+0x10/0x10 [ 48.693905][ T5946] ? page_bad_reason+0x9d/0x1e0 [ 48.695188][ T5946] free_unref_page+0x657/0xdc0 [ 48.696397][ T5946] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 48.697960][ T5946] ? __phys_addr+0xc6/0x150 [ 48.699156][ T5946] skb_free_head+0xa0/0x1d0 [ 48.700335][ T5946] skb_release_data+0x560/0x730 [ 48.701583][ T5946] sk_skb_reason_drop+0x129/0x1a0 [ 48.702848][ T5946] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 48.704525][ T5946] ? kernel_text_address+0x8d/0x100 [ 48.705864][ T5946] ? hlock_class+0x4e/0x130 [ 48.707022][ T5946] ? __lock_acquire+0x163e/0x3ce0 [ 48.708345][ T5946] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 48.710202][ T5946] ? hlock_class+0x4e/0x130 [ 48.711366][ T5946] ? __lock_acquire+0xbdd/0x3ce0 [ 48.712644][ T5946] ? __pfx___lock_acquire+0x10/0x10 [ 48.713973][ T5946] __netif_receive_skb_list_core+0x357/0x950 [ 48.715535][ T5946] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 48.717195][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 48.718549][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 48.720157][ T5946] ? lock_acquire+0x2f/0xb0 [ 48.721310][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 48.722938][ T5946] netif_receive_skb_list_internal+0x753/0xdb0 [ 48.724500][ T5946] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 48.726163][ T5946] ? __pfx_eth_type_trans+0x10/0x10 [ 48.727498][ T5946] ? __build_skb_around+0x278/0x3b0 [ 48.728828][ T5946] netif_receive_skb_list+0x4f/0x4a0 [ 48.730172][ T5946] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 48.731802][ T5946] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 48.733475][ T5946] ? bpf_test_timer_continue+0x150/0x3d0 [ 48.734914][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 48.736246][ T5946] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 48.737742][ T5946] ? try_to_wake_up+0x154/0x14f0 [ 48.739032][ T5946] ? __pfx_try_to_wake_up+0x10/0x10 [ 48.740407][ T5946] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 48.741910][ T5946] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 48.743276][ T5946] ? 0xffffffffa0004340 [ 48.744328][ T5946] ? 0xffffffffa0004340 [ 48.745429][ T5946] ? 0xffffffffa0004340 [ 48.746531][ T5946] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 48.748108][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 48.749470][ T5946] ? lock_acquire+0x2f/0xb0 [ 48.750622][ T5946] ? __fget_files+0x40/0x3f0 [ 48.751840][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 48.753330][ T5946] ? fput+0x30/0x390 [ 48.754351][ T5946] ? __bpf_prog_get+0xa0/0x290 [ 48.755617][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 48.757100][ T5946] __sys_bpf+0xfc6/0x49a0 [ 48.758228][ T5946] ? find_held_lock+0x2d/0x110 [ 48.759474][ T5946] ? __pfx___sys_bpf+0x10/0x10 [ 48.760698][ T5946] ? __might_fault+0x13b/0x190 [ 48.761967][ T5946] ? __pfx_lock_release+0x10/0x10 [ 48.763295][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 48.764664][ T5946] ? lock_acquire+0x2f/0xb0 [ 48.765860][ T5946] ? __might_fault+0xe3/0x190 [ 48.767074][ T5946] ? xfd_validate_state+0x5d/0x180 [ 48.768377][ T5946] ? rcu_is_watching+0x12/0xc0 [ 48.769612][ T5946] __x64_sys_bpf+0x78/0xc0 [ 48.770784][ T5946] ? lockdep_hardirqs_on+0x7c/0x110 [ 48.772150][ T5946] do_syscall_64+0xcd/0x250 [ 48.773316][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.774873][ T5946] RIP: 0033:0x7f5102b5de99 [ 48.776056][ T5946] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 48.781156][ T5946] RSP: 002b:00007f5102b18228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 48.783338][ T5946] RAX: ffffffffffffffda RBX: 00007f5102be8328 RCX: 00007f5102b5de99 [ 48.785395][ T5946] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 48.787477][ T5946] RBP: 00007f5102be8320 R08: 00007f5102b186c0 R09: 00007f5102b186c0 [ 48.789536][ T5946] R10: 00007f5102b186c0 R11: 0000000000000246 R12: 00007f5102bb5074 [ 48.791567][ T5946] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffc619b1828 [ 48.793598][ T5946] [ 48.794513][ T5946] BUG: Bad page state in process syz-executor133 pfn:2464f [ 48.796425][ T5946] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2464f [ 48.798693][ T5946] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 48.800510][ T5946] raw: 00fff00000000000 dead000000000040 ffff8880202ae000 0000000000000000 [ 48.802698][ T5946] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 48.804905][ T5946] page dumped because: page_pool leak [ 48.806287][ T5946] page_owner tracks the page as allocated [ 48.807821][ T5946] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5946, tgid 5942 (syz-executor133), ts 44467857620, free_ts 40827981238 [ 48.812151][ T5946] post_alloc_hook+0x2d1/0x350 [ 48.813373][ T5946] get_page_from_freelist+0x101e/0x3070 [ 48.814796][ T5946] __alloc_pages_noprof+0x223/0x25a0 [ 48.816147][ T5946] alloc_pages_bulk_noprof+0x77c/0x1110 [ 48.817563][ T5946] __page_pool_alloc_pages_slow+0x18f/0x770 [ 48.819139][ T5946] page_pool_alloc_netmem+0xc4/0x160 [ 48.820506][ T5946] page_pool_alloc_pages+0x1a/0x60 [ 48.821847][ T5946] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 48.823411][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 48.824767][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 48.826151][ T5946] __sys_bpf+0xfc6/0x49a0 [ 48.827275][ T5946] __x64_sys_bpf+0x78/0xc0 [ 48.828470][ T5946] do_syscall_64+0xcd/0x250 [ 48.829661][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.831142][ T5946] page last free pid 5924 tgid 5924 stack trace: [ 48.832719][ T5946] free_unref_page+0x5f4/0xdc0 [ 48.833895][ T5946] __folio_put+0x30d/0x3d0 [ 48.835054][ T5946] put_page+0x21e/0x280 [ 48.836126][ T5946] anon_pipe_buf_release+0x11a/0x240 [ 48.837414][ T5946] pipe_read+0x641/0x13f0 [ 48.838550][ T5946] vfs_read+0xa4c/0xbe0 [ 48.839623][ T5946] ksys_read+0x1fa/0x260 [ 48.840720][ T5946] do_syscall_64+0xcd/0x250 [ 48.841901][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.843447][ T5946] Modules linked in: [ 48.844448][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: syz-executor133 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 48.847605][ T5946] Tainted: [B]=BAD_PAGE [ 48.848692][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 48.851384][ T5946] Call Trace: [ 48.852242][ T5946] [ 48.853012][ T5946] dump_stack_lvl+0x16c/0x1f0 [ 48.854249][ T5946] bad_page+0xb3/0x1f0 [ 48.855356][ T5946] ? __pfx_bad_page+0x10/0x10 [ 48.856557][ T5946] ? page_bad_reason+0x9d/0x1e0 [ 48.857807][ T5946] free_unref_page+0x657/0xdc0 [ 48.858997][ T5946] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 48.860537][ T5946] ? __phys_addr+0xc6/0x150 [ 48.861753][ T5946] skb_free_head+0xa0/0x1d0 [ 48.862981][ T5946] skb_release_data+0x560/0x730 [ 48.864227][ T5946] sk_skb_reason_drop+0x129/0x1a0 [ 48.865493][ T5946] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 48.867194][ T5946] ? kernel_text_address+0x8d/0x100 [ 48.868510][ T5946] ? hlock_class+0x4e/0x130 [ 48.869658][ T5946] ? __lock_acquire+0x163e/0x3ce0 [ 48.870947][ T5946] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 48.872700][ T5946] ? hlock_class+0x4e/0x130 [ 48.873860][ T5946] ? __lock_acquire+0xbdd/0x3ce0 [ 48.875146][ T5946] ? __pfx___lock_acquire+0x10/0x10 [ 48.876479][ T5946] __netif_receive_skb_list_core+0x357/0x950 [ 48.878067][ T5946] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 48.879779][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 48.881105][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 48.882715][ T5946] ? lock_acquire+0x2f/0xb0 [ 48.883880][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 48.885491][ T5946] netif_receive_skb_list_internal+0x753/0xdb0 [ 48.887086][ T5946] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 48.888788][ T5946] ? __pfx_eth_type_trans+0x10/0x10 [ 48.890128][ T5946] ? __build_skb_around+0x278/0x3b0 [ 48.891445][ T5946] netif_receive_skb_list+0x4f/0x4a0 [ 48.892807][ T5946] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 48.894404][ T5946] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 48.896039][ T5946] ? bpf_test_timer_continue+0x150/0x3d0 [ 48.897501][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 48.898901][ T5946] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 48.900393][ T5946] ? try_to_wake_up+0x154/0x14f0 [ 48.901665][ T5946] ? __pfx_try_to_wake_up+0x10/0x10 [ 48.903000][ T5946] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 48.904503][ T5946] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 48.905847][ T5946] ? 0xffffffffa0004340 [ 48.906930][ T5946] ? 0xffffffffa0004340 [ 48.907994][ T5946] ? 0xffffffffa0004340 [ 48.909051][ T5946] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 48.910582][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 48.911986][ T5946] ? lock_acquire+0x2f/0xb0 [ 48.913182][ T5946] ? __fget_files+0x40/0x3f0 [ 48.914395][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 48.915903][ T5946] ? fput+0x30/0x390 [ 48.916919][ T5946] ? __bpf_prog_get+0xa0/0x290 [ 48.918151][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 48.919621][ T5946] __sys_bpf+0xfc6/0x49a0 [ 48.920736][ T5946] ? find_held_lock+0x2d/0x110 [ 48.921982][ T5946] ? __pfx___sys_bpf+0x10/0x10 [ 48.923221][ T5946] ? __might_fault+0x13b/0x190 [ 48.924468][ T5946] ? __pfx_lock_release+0x10/0x10 [ 48.925710][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 48.927037][ T5946] ? lock_acquire+0x2f/0xb0 [ 48.928215][ T5946] ? __might_fault+0xe3/0x190 [ 48.929441][ T5946] ? xfd_validate_state+0x5d/0x180 [ 48.930785][ T5946] ? rcu_is_watching+0x12/0xc0 [ 48.932060][ T5946] __x64_sys_bpf+0x78/0xc0 [ 48.933219][ T5946] ? lockdep_hardirqs_on+0x7c/0x110 [ 48.934602][ T5946] do_syscall_64+0xcd/0x250 [ 48.935801][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.937334][ T5946] RIP: 0033:0x7f5102b5de99 [ 48.938482][ T5946] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 48.943383][ T5946] RSP: 002b:00007f5102b18228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 48.945559][ T5946] RAX: ffffffffffffffda RBX: 00007f5102be8328 RCX: 00007f5102b5de99 [ 48.947646][ T5946] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 48.949733][ T5946] RBP: 00007f5102be8320 R08: 00007f5102b186c0 R09: 00007f5102b186c0 [ 48.951812][ T5946] R10: 00007f5102b186c0 R11: 0000000000000246 R12: 00007f5102bb5074 [ 48.953867][ T5946] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffc619b1828 [ 48.955942][ T5946] [ 48.956865][ T5946] BUG: Bad page state in process syz-executor133 pfn:2464e [ 48.958788][ T5946] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2464e [ 48.961013][ T5946] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 48.962792][ T5946] raw: 00fff00000000000 dead000000000040 ffff8880202ae000 0000000000000000 [ 48.964980][ T5946] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 48.967223][ T5946] page dumped because: page_pool leak [ 48.968686][ T5946] page_owner tracks the page as allocated [ 48.970137][ T5946] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5946, tgid 5942 (syz-executor133), ts 44467849449, free_ts 40827996290 [ 48.974516][ T5946] post_alloc_hook+0x2d1/0x350 [ 48.975791][ T5946] get_page_from_freelist+0x101e/0x3070 [ 48.977198][ T5946] __alloc_pages_noprof+0x223/0x25a0 [ 48.978598][ T5946] alloc_pages_bulk_noprof+0x77c/0x1110 [ 48.980013][ T5946] __page_pool_alloc_pages_slow+0x18f/0x770 [ 48.981453][ T5946] page_pool_alloc_netmem+0xc4/0x160 [ 48.982793][ T5946] page_pool_alloc_pages+0x1a/0x60 [ 48.984079][ T5946] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 48.985676][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 48.987065][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 48.988658][ T5946] __sys_bpf+0xfc6/0x49a0 [ 48.989846][ T5946] __x64_sys_bpf+0x78/0xc0 [ 48.991014][ T5946] do_syscall_64+0xcd/0x250 [ 48.992185][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.993694][ T5946] page last free pid 5924 tgid 5924 stack trace: [ 48.995366][ T5946] free_unref_page+0x5f4/0xdc0 [ 48.996636][ T5946] __folio_put+0x30d/0x3d0 [ 48.997947][ T5946] put_page+0x21e/0x280 [ 48.999072][ T5946] anon_pipe_buf_release+0x11a/0x240 [ 49.000472][ T5946] pipe_read+0x641/0x13f0 [ 49.001620][ T5946] vfs_read+0xa4c/0xbe0 [ 49.002749][ T5946] ksys_read+0x1fa/0x260 [ 49.003881][ T5946] do_syscall_64+0xcd/0x250 [ 49.005040][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.006534][ T5946] Modules linked in: [ 49.007580][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: syz-executor133 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 49.010697][ T5946] Tainted: [B]=BAD_PAGE [ 49.011742][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 49.014701][ T5946] Call Trace: [ 49.015772][ T5946] [ 49.016680][ T5946] dump_stack_lvl+0x16c/0x1f0 [ 49.017898][ T5946] bad_page+0xb3/0x1f0 [ 49.019046][ T5946] ? __pfx_bad_page+0x10/0x10 [ 49.020320][ T5946] ? page_bad_reason+0x9d/0x1e0 [ 49.021582][ T5946] free_unref_page+0x657/0xdc0 [ 49.022837][ T5946] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 49.024390][ T5946] ? __phys_addr+0xc6/0x150 [ 49.025575][ T5946] skb_free_head+0xa0/0x1d0 [ 49.026760][ T5946] skb_release_data+0x560/0x730 [ 49.028000][ T5946] sk_skb_reason_drop+0x129/0x1a0 [ 49.029285][ T5946] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 49.030982][ T5946] ? kernel_text_address+0x8d/0x100 [ 49.032301][ T5946] ? hlock_class+0x4e/0x130 [ 49.033479][ T5946] ? __lock_acquire+0x163e/0x3ce0 [ 49.034760][ T5946] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 49.036564][ T5946] ? hlock_class+0x4e/0x130 [ 49.037737][ T5946] ? __lock_acquire+0xbdd/0x3ce0 [ 49.039022][ T5946] ? __pfx___lock_acquire+0x10/0x10 [ 49.040359][ T5946] __netif_receive_skb_list_core+0x357/0x950 [ 49.041924][ T5946] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 49.043580][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 49.044909][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 49.046540][ T5946] ? lock_acquire+0x2f/0xb0 [ 49.047717][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 49.049369][ T5946] netif_receive_skb_list_internal+0x753/0xdb0 [ 49.050987][ T5946] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 49.052705][ T5946] ? __pfx_eth_type_trans+0x10/0x10 [ 49.054023][ T5946] ? __build_skb_around+0x278/0x3b0 [ 49.055382][ T5946] netif_receive_skb_list+0x4f/0x4a0 [ 49.056784][ T5946] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 49.058427][ T5946] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 49.060110][ T5946] ? bpf_test_timer_continue+0x150/0x3d0 [ 49.061529][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 49.062904][ T5946] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 49.064373][ T5946] ? try_to_wake_up+0x154/0x14f0 [ 49.065662][ T5946] ? __pfx_try_to_wake_up+0x10/0x10 [ 49.067005][ T5946] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 49.068531][ T5946] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 49.069863][ T5946] ? 0xffffffffa0004340 [ 49.070946][ T5946] ? 0xffffffffa0004340 [ 49.072036][ T5946] ? 0xffffffffa0004340 [ 49.073095][ T5946] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 49.074593][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 49.075992][ T5946] ? lock_acquire+0x2f/0xb0 [ 49.077149][ T5946] ? __fget_files+0x40/0x3f0 [ 49.078303][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 49.079722][ T5946] ? fput+0x30/0x390 [ 49.080678][ T5946] ? __bpf_prog_get+0xa0/0x290 [ 49.081918][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 49.083423][ T5946] __sys_bpf+0xfc6/0x49a0 [ 49.084511][ T5946] ? find_held_lock+0x2d/0x110 [ 49.085743][ T5946] ? __pfx___sys_bpf+0x10/0x10 [ 49.087005][ T5946] ? __might_fault+0x13b/0x190 [ 49.088225][ T5946] ? __pfx_lock_release+0x10/0x10 [ 49.089514][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 49.090851][ T5946] ? lock_acquire+0x2f/0xb0 [ 49.091986][ T5946] ? __might_fault+0xe3/0x190 [ 49.093160][ T5946] ? xfd_validate_state+0x5d/0x180 [ 49.094472][ T5946] ? rcu_is_watching+0x12/0xc0 [ 49.095864][ T5946] __x64_sys_bpf+0x78/0xc0 [ 49.097030][ T5946] ? lockdep_hardirqs_on+0x7c/0x110 [ 49.098374][ T5946] do_syscall_64+0xcd/0x250 [ 49.099562][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.101208][ T5946] RIP: 0033:0x7f5102b5de99 [ 49.102347][ T5946] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 49.107145][ T5946] RSP: 002b:00007f5102b18228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 49.109240][ T5946] RAX: ffffffffffffffda RBX: 00007f5102be8328 RCX: 00007f5102b5de99 [ 49.111227][ T5946] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 49.113183][ T5946] RBP: 00007f5102be8320 R08: 00007f5102b186c0 R09: 00007f5102b186c0 [ 49.115229][ T5946] R10: 00007f5102b186c0 R11: 0000000000000246 R12: 00007f5102bb5074 [ 49.117124][ T5946] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffc619b1828 [ 49.119089][ T5946] [ 49.119951][ T5946] BUG: Bad page state in process syz-executor133 pfn:2464d [ 49.121728][ T5946] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2464d [ 49.123950][ T5946] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 49.125768][ T5946] raw: 00fff00000000000 dead000000000040 ffff8880202ae000 0000000000000000 [ 49.128014][ T5946] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 49.130179][ T5946] page dumped because: page_pool leak [ 49.131539][ T5946] page_owner tracks the page as allocated [ 49.132991][ T5946] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5946, tgid 5942 (syz-executor133), ts 44467841265, free_ts 40828014567 [ 49.137273][ T5946] post_alloc_hook+0x2d1/0x350 [ 49.138572][ T5946] get_page_from_freelist+0x101e/0x3070 [ 49.139993][ T5946] __alloc_pages_noprof+0x223/0x25a0 [ 49.141338][ T5946] alloc_pages_bulk_noprof+0x77c/0x1110 [ 49.142779][ T5946] __page_pool_alloc_pages_slow+0x18f/0x770 [ 49.144285][ T5946] page_pool_alloc_netmem+0xc4/0x160 [ 49.145639][ T5946] page_pool_alloc_pages+0x1a/0x60 [ 49.146946][ T5946] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 49.148553][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 49.149884][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 49.151267][ T5946] __sys_bpf+0xfc6/0x49a0 [ 49.152379][ T5946] __x64_sys_bpf+0x78/0xc0 [ 49.153522][ T5946] do_syscall_64+0xcd/0x250 [ 49.154719][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.156247][ T5946] page last free pid 5924 tgid 5924 stack trace: [ 49.157943][ T5946] free_unref_page+0x5f4/0xdc0 [ 49.159190][ T5946] __folio_put+0x30d/0x3d0 [ 49.160335][ T5946] put_page+0x21e/0x280 [ 49.161417][ T5946] anon_pipe_buf_release+0x11a/0x240 [ 49.162758][ T5946] pipe_read+0x641/0x13f0 [ 49.163880][ T5946] vfs_read+0xa4c/0xbe0 [ 49.164989][ T5946] ksys_read+0x1fa/0x260 [ 49.166068][ T5946] do_syscall_64+0xcd/0x250 [ 49.167233][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.168797][ T5946] Modules linked in: [ 49.169808][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: syz-executor133 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 49.172970][ T5946] Tainted: [B]=BAD_PAGE [ 49.174019][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 49.177158][ T5946] Call Trace: [ 49.178046][ T5946] [ 49.178823][ T5946] dump_stack_lvl+0x16c/0x1f0 [ 49.180044][ T5946] bad_page+0xb3/0x1f0 [ 49.181085][ T5946] ? __pfx_bad_page+0x10/0x10 [ 49.182278][ T5946] ? page_bad_reason+0x9d/0x1e0 [ 49.183493][ T5946] free_unref_page+0x657/0xdc0 [ 49.184727][ T5946] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 49.186268][ T5946] ? __phys_addr+0xc6/0x150 [ 49.187475][ T5946] skb_free_head+0xa0/0x1d0 [ 49.188694][ T5946] skb_release_data+0x560/0x730 [ 49.190021][ T5946] sk_skb_reason_drop+0x129/0x1a0 [ 49.191329][ T5946] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 49.193010][ T5946] ? kernel_text_address+0x8d/0x100 [ 49.194337][ T5946] ? hlock_class+0x4e/0x130 [ 49.195518][ T5946] ? __lock_acquire+0x163e/0x3ce0 [ 49.196829][ T5946] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 49.198618][ T5946] ? hlock_class+0x4e/0x130 [ 49.199813][ T5946] ? __lock_acquire+0xbdd/0x3ce0 [ 49.201073][ T5946] ? __pfx___lock_acquire+0x10/0x10 [ 49.202371][ T5946] __netif_receive_skb_list_core+0x357/0x950 [ 49.203944][ T5946] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 49.205584][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 49.206907][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 49.208529][ T5946] ? lock_acquire+0x2f/0xb0 [ 49.209685][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 49.211292][ T5946] netif_receive_skb_list_internal+0x753/0xdb0 [ 49.212846][ T5946] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 49.214556][ T5946] ? __pfx_eth_type_trans+0x10/0x10 [ 49.215887][ T5946] ? __build_skb_around+0x278/0x3b0 [ 49.217227][ T5946] netif_receive_skb_list+0x4f/0x4a0 [ 49.218560][ T5946] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 49.220152][ T5946] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 49.221755][ T5946] ? bpf_test_timer_continue+0x150/0x3d0 [ 49.223209][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 49.224555][ T5946] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 49.226031][ T5946] ? try_to_wake_up+0x154/0x14f0 [ 49.227321][ T5946] ? __pfx_try_to_wake_up+0x10/0x10 [ 49.228646][ T5946] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 49.230141][ T5946] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 49.231482][ T5946] ? 0xffffffffa0004340 [ 49.232535][ T5946] ? 0xffffffffa0004340 [ 49.233594][ T5946] ? 0xffffffffa0004340 [ 49.234654][ T5946] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 49.236147][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 49.237647][ T5946] ? lock_acquire+0x2f/0xb0 [ 49.238827][ T5946] ? __fget_files+0x40/0x3f0 [ 49.239980][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 49.241401][ T5946] ? fput+0x30/0x390 [ 49.242381][ T5946] ? __bpf_prog_get+0xa0/0x290 [ 49.243669][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 49.245160][ T5946] __sys_bpf+0xfc6/0x49a0 [ 49.246296][ T5946] ? find_held_lock+0x2d/0x110 [ 49.247537][ T5946] ? __pfx___sys_bpf+0x10/0x10 [ 49.248744][ T5946] ? __might_fault+0x13b/0x190 [ 49.249972][ T5946] ? __pfx_lock_release+0x10/0x10 [ 49.251233][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 49.252684][ T5946] ? lock_acquire+0x2f/0xb0 [ 49.253855][ T5946] ? __might_fault+0xe3/0x190 [ 49.255049][ T5946] ? xfd_validate_state+0x5d/0x180 [ 49.256336][ T5946] ? rcu_is_watching+0x12/0xc0 [ 49.257531][ T5946] __x64_sys_bpf+0x78/0xc0 [ 49.258667][ T5946] ? lockdep_hardirqs_on+0x7c/0x110 [ 49.259990][ T5946] do_syscall_64+0xcd/0x250 [ 49.261132][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.262615][ T5946] RIP: 0033:0x7f5102b5de99 [ 49.263754][ T5946] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 49.268541][ T5946] RSP: 002b:00007f5102b18228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 49.270595][ T5946] RAX: ffffffffffffffda RBX: 00007f5102be8328 RCX: 00007f5102b5de99 [ 49.272617][ T5946] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 49.274608][ T5946] RBP: 00007f5102be8320 R08: 00007f5102b186c0 R09: 00007f5102b186c0 [ 49.276559][ T5946] R10: 00007f5102b186c0 R11: 0000000000000246 R12: 00007f5102bb5074 [ 49.278634][ T5946] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffc619b1828 [ 49.280697][ T5946] [ 49.281614][ T5946] BUG: Bad page state in process syz-executor133 pfn:2464c [ 49.283495][ T5946] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2464c [ 49.285678][ T5946] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 49.287514][ T5946] raw: 00fff00000000000 dead000000000040 ffff8880202ae000 0000000000000000 [ 49.289760][ T5946] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 49.291936][ T5946] page dumped because: page_pool leak [ 49.293303][ T5946] page_owner tracks the page as allocated [ 49.294729][ T5946] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5946, tgid 5942 (syz-executor133), ts 44467832836, free_ts 40809395025 [ 49.298970][ T5946] post_alloc_hook+0x2d1/0x350 [ 49.300182][ T5946] get_page_from_freelist+0x101e/0x3070 [ 49.301582][ T5946] __alloc_pages_noprof+0x223/0x25a0 [ 49.302913][ T5946] alloc_pages_bulk_noprof+0x77c/0x1110 [ 49.304331][ T5946] __page_pool_alloc_pages_slow+0x18f/0x770 [ 49.305853][ T5946] page_pool_alloc_netmem+0xc4/0x160 [ 49.307205][ T5946] page_pool_alloc_pages+0x1a/0x60 [ 49.308570][ T5946] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 49.310171][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 49.311556][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 49.312911][ T5946] __sys_bpf+0xfc6/0x49a0 [ 49.314029][ T5946] __x64_sys_bpf+0x78/0xc0 [ 49.315188][ T5946] do_syscall_64+0xcd/0x250 [ 49.316318][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.317879][ T5946] page last free pid 5924 tgid 5924 stack trace: [ 49.319484][ T5946] free_unref_page+0x5f4/0xdc0 [ 49.320694][ T5946] __folio_put+0x30d/0x3d0 [ 49.321842][ T5946] put_page+0x21e/0x280 [ 49.322913][ T5946] anon_pipe_buf_release+0x11a/0x240 [ 49.324282][ T5946] pipe_read+0x641/0x13f0 [ 49.325391][ T5946] vfs_read+0xa4c/0xbe0 [ 49.326475][ T5946] ksys_read+0x1fa/0x260 [ 49.327584][ T5946] do_syscall_64+0xcd/0x250 [ 49.328787][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.330311][ T5946] Modules linked in: [ 49.331312][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: syz-executor133 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 49.334437][ T5946] Tainted: [B]=BAD_PAGE [ 49.335499][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 49.338161][ T5946] Call Trace: [ 49.339030][ T5946] [ 49.339807][ T5946] dump_stack_lvl+0x16c/0x1f0 [ 49.341009][ T5946] bad_page+0xb3/0x1f0 [ 49.342029][ T5946] ? __pfx_bad_page+0x10/0x10 [ 49.343280][ T5946] ? page_bad_reason+0x9d/0x1e0 [ 49.344527][ T5946] free_unref_page+0x657/0xdc0 [ 49.345731][ T5946] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 49.347299][ T5946] ? __phys_addr+0xc6/0x150 [ 49.348529][ T5946] skb_free_head+0xa0/0x1d0 [ 49.349692][ T5946] skb_release_data+0x560/0x730 [ 49.350954][ T5946] sk_skb_reason_drop+0x129/0x1a0 [ 49.352260][ T5946] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 49.354265][ T5946] ? kernel_text_address+0x8d/0x100 [ 49.355943][ T5946] ? hlock_class+0x4e/0x130 [ 49.357491][ T5946] ? __lock_acquire+0x163e/0x3ce0 [ 49.358833][ T5946] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 49.360570][ T5946] ? hlock_class+0x4e/0x130 [ 49.361719][ T5946] ? __lock_acquire+0xbdd/0x3ce0 [ 49.362980][ T5946] ? __pfx___lock_acquire+0x10/0x10 [ 49.364323][ T5946] __netif_receive_skb_list_core+0x357/0x950 [ 49.365887][ T5946] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 49.367578][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 49.368927][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 49.370677][ T5946] ? lock_acquire+0x2f/0xb0 [ 49.371978][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 49.373594][ T5946] netif_receive_skb_list_internal+0x753/0xdb0 [ 49.375391][ T5946] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 49.377103][ T5946] ? __pfx_eth_type_trans+0x10/0x10 [ 49.378402][ T5946] ? __build_skb_around+0x278/0x3b0 [ 49.379691][ T5946] netif_receive_skb_list+0x4f/0x4a0 [ 49.381027][ T5946] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 49.382690][ T5946] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 49.384316][ T5946] ? bpf_test_timer_continue+0x150/0x3d0 [ 49.385685][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 49.387018][ T5946] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 49.388474][ T5946] ? try_to_wake_up+0x154/0x14f0 [ 49.389783][ T5946] ? __pfx_try_to_wake_up+0x10/0x10 [ 49.391129][ T5946] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 49.392639][ T5946] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 49.393979][ T5946] ? 0xffffffffa0004340 [ 49.395055][ T5946] ? 0xffffffffa0004340 [ 49.396130][ T5946] ? 0xffffffffa0004340 [ 49.397197][ T5946] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 49.398719][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 49.400089][ T5946] ? lock_acquire+0x2f/0xb0 [ 49.401236][ T5946] ? __fget_files+0x40/0x3f0 [ 49.402429][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 49.403932][ T5946] ? fput+0x30/0x390 [ 49.404944][ T5946] ? __bpf_prog_get+0xa0/0x290 [ 49.406150][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 49.407583][ T5946] __sys_bpf+0xfc6/0x49a0 [ 49.408630][ T5946] ? find_held_lock+0x2d/0x110 [ 49.409828][ T5946] ? __pfx___sys_bpf+0x10/0x10 [ 49.411042][ T5946] ? __might_fault+0x13b/0x190 [ 49.412266][ T5946] ? __pfx_lock_release+0x10/0x10 [ 49.413498][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 49.414859][ T5946] ? lock_acquire+0x2f/0xb0 [ 49.416020][ T5946] ? __might_fault+0xe3/0x190 [ 49.417239][ T5946] ? xfd_validate_state+0x5d/0x180 [ 49.418559][ T5946] ? rcu_is_watching+0x12/0xc0 [ 49.419801][ T5946] __x64_sys_bpf+0x78/0xc0 [ 49.420940][ T5946] ? lockdep_hardirqs_on+0x7c/0x110 [ 49.422274][ T5946] do_syscall_64+0xcd/0x250 [ 49.423460][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.424972][ T5946] RIP: 0033:0x7f5102b5de99 [ 49.426107][ T5946] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 49.430926][ T5946] RSP: 002b:00007f5102b18228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 49.433048][ T5946] RAX: ffffffffffffffda RBX: 00007f5102be8328 RCX: 00007f5102b5de99 [ 49.435024][ T5946] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 49.437045][ T5946] RBP: 00007f5102be8320 R08: 00007f5102b186c0 R09: 00007f5102b186c0 [ 49.438995][ T5946] R10: 00007f5102b186c0 R11: 0000000000000246 R12: 00007f5102bb5074 [ 49.440893][ T5946] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffc619b1828 [ 49.443127][ T5946] [ 49.444136][ T5946] BUG: Bad page state in process syz-executor133 pfn:23297 [ 49.445977][ T5946] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x23297 [ 49.448194][ T5946] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 49.450034][ T5946] raw: 00fff00000000000 dead000000000040 ffff8880202ae000 0000000000000000 [ 49.452176][ T5946] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 49.454286][ T5946] page dumped because: page_pool leak [ 49.455682][ T5946] page_owner tracks the page as allocated [ 49.457112][ T5946] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5946, tgid 5942 (syz-executor133), ts 44467824539, free_ts 41423253861 [ 49.461355][ T5946] post_alloc_hook+0x2d1/0x350 [ 49.462599][ T5946] get_page_from_freelist+0x101e/0x3070 [ 49.464026][ T5946] __alloc_pages_noprof+0x223/0x25a0 [ 49.465387][ T5946] alloc_pages_bulk_noprof+0x77c/0x1110 [ 49.466955][ T5946] __page_pool_alloc_pages_slow+0x18f/0x770 [ 49.468646][ T5946] page_pool_alloc_netmem+0xc4/0x160 [ 49.470132][ T5946] page_pool_alloc_pages+0x1a/0x60 [ 49.471588][ T5946] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 49.473256][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 49.474606][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 49.475993][ T5946] __sys_bpf+0xfc6/0x49a0 [ 49.477095][ T5946] __x64_sys_bpf+0x78/0xc0 [ 49.478278][ T5946] do_syscall_64+0xcd/0x250 [ 49.479461][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.480937][ T5946] page last free pid 5924 tgid 5924 stack trace: [ 49.482519][ T5946] free_unref_page+0x5f4/0xdc0 [ 49.483698][ T5946] __folio_put+0x30d/0x3d0 [ 49.484824][ T5946] put_page+0x21e/0x280 [ 49.485861][ T5946] anon_pipe_buf_release+0x11a/0x240 [ 49.487194][ T5946] pipe_read+0x641/0x13f0 [ 49.488331][ T5946] vfs_read+0xa4c/0xbe0 [ 49.489394][ T5946] ksys_read+0x1fa/0x260 [ 49.490479][ T5946] do_syscall_64+0xcd/0x250 [ 49.491649][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.493172][ T5946] Modules linked in: [ 49.494177][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: syz-executor133 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 49.497300][ T5946] Tainted: [B]=BAD_PAGE [ 49.498335][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 49.500964][ T5946] Call Trace: [ 49.501802][ T5946] [ 49.502558][ T5946] dump_stack_lvl+0x16c/0x1f0 [ 49.503797][ T5946] bad_page+0xb3/0x1f0 [ 49.504863][ T5946] ? __pfx_bad_page+0x10/0x10 [ 49.506067][ T5946] ? page_bad_reason+0x9d/0x1e0 [ 49.507334][ T5946] free_unref_page+0x657/0xdc0 [ 49.508565][ T5946] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 49.510152][ T5946] ? __phys_addr+0xc6/0x150 [ 49.511309][ T5946] skb_free_head+0xa0/0x1d0 [ 49.512436][ T5946] skb_release_data+0x560/0x730 [ 49.513704][ T5946] sk_skb_reason_drop+0x129/0x1a0 [ 49.515038][ T5946] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 49.516801][ T5946] ? kernel_text_address+0x8d/0x100 [ 49.518179][ T5946] ? hlock_class+0x4e/0x130 [ 49.519400][ T5946] ? __lock_acquire+0x163e/0x3ce0 [ 49.520711][ T5946] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 49.522527][ T5946] ? hlock_class+0x4e/0x130 [ 49.523733][ T5946] ? __lock_acquire+0xbdd/0x3ce0 [ 49.525047][ T5946] ? __pfx___lock_acquire+0x10/0x10 [ 49.526401][ T5946] __netif_receive_skb_list_core+0x357/0x950 [ 49.527967][ T5946] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 49.529630][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 49.531002][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 49.532570][ T5946] ? lock_acquire+0x2f/0xb0 [ 49.533684][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 49.535246][ T5946] netif_receive_skb_list_internal+0x753/0xdb0 [ 49.536824][ T5946] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 49.538501][ T5946] ? __pfx_eth_type_trans+0x10/0x10 [ 49.539834][ T5946] ? __build_skb_around+0x278/0x3b0 [ 49.541131][ T5946] netif_receive_skb_list+0x4f/0x4a0 [ 49.542458][ T5946] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 49.544085][ T5946] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 49.545806][ T5946] ? bpf_test_timer_continue+0x150/0x3d0 [ 49.547306][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 49.548712][ T5946] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 49.550189][ T5946] ? try_to_wake_up+0x154/0x14f0 [ 49.551407][ T5946] ? __pfx_try_to_wake_up+0x10/0x10 [ 49.552669][ T5946] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 49.554171][ T5946] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 49.555462][ T5946] ? 0xffffffffa0004340 [ 49.556541][ T5946] ? 0xffffffffa0004340 [ 49.557618][ T5946] ? 0xffffffffa0004340 [ 49.558712][ T5946] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 49.560233][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 49.561641][ T5946] ? lock_acquire+0x2f/0xb0 [ 49.562855][ T5946] ? __fget_files+0x40/0x3f0 [ 49.564084][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 49.565623][ T5946] ? fput+0x30/0x390 [ 49.566652][ T5946] ? __bpf_prog_get+0xa0/0x290 [ 49.567869][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 49.569351][ T5946] __sys_bpf+0xfc6/0x49a0 [ 49.570490][ T5946] ? find_held_lock+0x2d/0x110 [ 49.571744][ T5946] ? __pfx___sys_bpf+0x10/0x10 [ 49.572961][ T5946] ? __might_fault+0x13b/0x190 [ 49.574425][ T5946] ? __pfx_lock_release+0x10/0x10 [ 49.575914][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 49.577358][ T5946] ? lock_acquire+0x2f/0xb0 [ 49.578479][ T5946] ? __might_fault+0xe3/0x190 [ 49.579663][ T5946] ? xfd_validate_state+0x5d/0x180 [ 49.580943][ T5946] ? rcu_is_watching+0x12/0xc0 [ 49.582188][ T5946] __x64_sys_bpf+0x78/0xc0 [ 49.583392][ T5946] ? lockdep_hardirqs_on+0x7c/0x110 [ 49.584723][ T5946] do_syscall_64+0xcd/0x250 [ 49.585876][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.587374][ T5946] RIP: 0033:0x7f5102b5de99 [ 49.588518][ T5946] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 49.593429][ T5946] RSP: 002b:00007f5102b18228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 49.595622][ T5946] RAX: ffffffffffffffda RBX: 00007f5102be8328 RCX: 00007f5102b5de99 [ 49.597653][ T5946] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 49.599729][ T5946] RBP: 00007f5102be8320 R08: 00007f5102b186c0 R09: 00007f5102b186c0 [ 49.601744][ T5946] R10: 00007f5102b186c0 R11: 0000000000000246 R12: 00007f5102bb5074 [ 49.603833][ T5946] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffc619b1828 [ 49.605929][ T5946] [ 49.606894][ T5946] BUG: Bad page state in process syz-executor133 pfn:23296 [ 49.608878][ T5946] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x23296 [ 49.611181][ T5946] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 49.613055][ T5946] raw: 00fff00000000000 dead000000000040 ffff8880202ae000 0000000000000000 [ 49.615281][ T5946] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 49.617524][ T5946] page dumped because: page_pool leak [ 49.618971][ T5946] page_owner tracks the page as allocated [ 49.620458][ T5946] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5946, tgid 5942 (syz-executor133), ts 44467815962, free_ts 41892304988 [ 49.624873][ T5946] post_alloc_hook+0x2d1/0x350 [ 49.626154][ T5946] get_page_from_freelist+0x101e/0x3070 [ 49.627623][ T5946] __alloc_pages_noprof+0x223/0x25a0 [ 49.629055][ T5946] alloc_pages_bulk_noprof+0x77c/0x1110 [ 49.630523][ T5946] __page_pool_alloc_pages_slow+0x18f/0x770 [ 49.632085][ T5946] page_pool_alloc_netmem+0xc4/0x160 [ 49.633429][ T5946] page_pool_alloc_pages+0x1a/0x60 [ 49.634740][ T5946] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 49.636366][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 49.637696][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 49.639123][ T5946] __sys_bpf+0xfc6/0x49a0 [ 49.640221][ T5946] __x64_sys_bpf+0x78/0xc0 [ 49.641404][ T5946] do_syscall_64+0xcd/0x250 [ 49.642565][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.644092][ T5946] page last free pid 5924 tgid 5924 stack trace: [ 49.645655][ T5946] free_unref_page+0x5f4/0xdc0 [ 49.646893][ T5946] __folio_put+0x30d/0x3d0 [ 49.648073][ T5946] put_page+0x21e/0x280 [ 49.649121][ T5946] anon_pipe_buf_release+0x11a/0x240 [ 49.650463][ T5946] pipe_read+0x641/0x13f0 [ 49.651591][ T5946] vfs_read+0xa4c/0xbe0 [ 49.652652][ T5946] ksys_read+0x1fa/0x260 [ 49.653719][ T5946] do_syscall_64+0xcd/0x250 [ 49.654902][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.656424][ T5946] Modules linked in: [ 49.657432][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: syz-executor133 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 49.660716][ T5946] Tainted: [B]=BAD_PAGE [ 49.661786][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 49.664408][ T5946] Call Trace: [ 49.665266][ T5946] [ 49.666010][ T5946] dump_stack_lvl+0x16c/0x1f0 [ 49.667251][ T5946] bad_page+0xb3/0x1f0 [ 49.668272][ T5946] ? __pfx_bad_page+0x10/0x10 [ 49.669451][ T5946] ? page_bad_reason+0x9d/0x1e0 [ 49.670704][ T5946] free_unref_page+0x657/0xdc0 [ 49.671925][ T5946] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 49.673444][ T5946] ? __phys_addr+0xc6/0x150 [ 49.674642][ T5946] skb_free_head+0xa0/0x1d0 [ 49.675799][ T5946] skb_release_data+0x560/0x730 [ 49.677041][ T5946] sk_skb_reason_drop+0x129/0x1a0 [ 49.678351][ T5946] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 49.680102][ T5946] ? kernel_text_address+0x8d/0x100 [ 49.681451][ T5946] ? hlock_class+0x4e/0x130 [ 49.682646][ T5946] ? __lock_acquire+0x163e/0x3ce0 [ 49.684045][ T5946] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 49.685884][ T5946] ? hlock_class+0x4e/0x130 [ 49.687086][ T5946] ? __lock_acquire+0xbdd/0x3ce0 [ 49.688416][ T5946] ? __pfx___lock_acquire+0x10/0x10 [ 49.689779][ T5946] __netif_receive_skb_list_core+0x357/0x950 [ 49.691361][ T5946] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 49.693059][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 49.694419][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 49.696105][ T5946] ? lock_acquire+0x2f/0xb0 [ 49.697308][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 49.698938][ T5946] netif_receive_skb_list_internal+0x753/0xdb0 [ 49.700557][ T5946] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 49.702236][ T5946] ? __pfx_eth_type_trans+0x10/0x10 [ 49.703552][ T5946] ? __build_skb_around+0x278/0x3b0 [ 49.704886][ T5946] netif_receive_skb_list+0x4f/0x4a0 [ 49.706271][ T5946] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 49.707893][ T5946] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 49.709594][ T5946] ? bpf_test_timer_continue+0x150/0x3d0 [ 49.711076][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 49.712439][ T5946] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 49.713953][ T5946] ? try_to_wake_up+0x154/0x14f0 [ 49.715293][ T5946] ? __pfx_try_to_wake_up+0x10/0x10 [ 49.716662][ T5946] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 49.718201][ T5946] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 49.719578][ T5946] ? 0xffffffffa0004340 [ 49.720658][ T5946] ? 0xffffffffa0004340 [ 49.721752][ T5946] ? 0xffffffffa0004340 [ 49.722817][ T5946] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 49.724351][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 49.725737][ T5946] ? lock_acquire+0x2f/0xb0 [ 49.726926][ T5946] ? __fget_files+0x40/0x3f0 [ 49.728161][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 49.729685][ T5946] ? fput+0x30/0x390 [ 49.730709][ T5946] ? __bpf_prog_get+0xa0/0x290 [ 49.731979][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 49.733503][ T5946] __sys_bpf+0xfc6/0x49a0 [ 49.734628][ T5946] ? find_held_lock+0x2d/0x110 [ 49.735889][ T5946] ? __pfx___sys_bpf+0x10/0x10 [ 49.737134][ T5946] ? __might_fault+0x13b/0x190 [ 49.738384][ T5946] ? __pfx_lock_release+0x10/0x10 [ 49.739679][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 49.741033][ T5946] ? lock_acquire+0x2f/0xb0 [ 49.742230][ T5946] ? __might_fault+0xe3/0x190 [ 49.743474][ T5946] ? xfd_validate_state+0x5d/0x180 [ 49.744787][ T5946] ? rcu_is_watching+0x12/0xc0 [ 49.746037][ T5946] __x64_sys_bpf+0x78/0xc0 [ 49.747221][ T5946] ? lockdep_hardirqs_on+0x7c/0x110 [ 49.748684][ T5946] do_syscall_64+0xcd/0x250 [ 49.749860][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.751378][ T5946] RIP: 0033:0x7f5102b5de99 [ 49.752534][ T5946] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 49.757463][ T5946] RSP: 002b:00007f5102b18228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 49.759622][ T5946] RAX: ffffffffffffffda RBX: 00007f5102be8328 RCX: 00007f5102b5de99 [ 49.761603][ T5946] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 49.763734][ T5946] RBP: 00007f5102be8320 R08: 00007f5102b186c0 R09: 00007f5102b186c0 [ 49.765988][ T5946] R10: 00007f5102b186c0 R11: 0000000000000246 R12: 00007f5102bb5074 [ 49.768132][ T5946] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffc619b1828 [ 49.770198][ T5946] [ 49.771108][ T5946] BUG: Bad page state in process syz-executor133 pfn:2eefe [ 49.773460][ T5946] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802eefe000 pfn:0x2eefe [ 49.776171][ T5946] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 49.778096][ T5946] raw: 00fff00000000000 dead000000000040 ffff8880202ae000 0000000000000000 [ 49.780288][ T5946] raw: ffff88802eefe000 0000000000000001 00000000ffffffff 0000000000000000 [ 49.782463][ T5946] page dumped because: page_pool leak [ 49.783846][ T5946] page_owner tracks the page as allocated [ 49.785285][ T5946] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5946, tgid 5942 (syz-executor133), ts 44467807775, free_ts 40198022367 [ 49.789718][ T5946] post_alloc_hook+0x2d1/0x350 [ 49.790958][ T5946] get_page_from_freelist+0x101e/0x3070 [ 49.792341][ T5946] __alloc_pages_noprof+0x223/0x25a0 [ 49.793703][ T5946] alloc_pages_bulk_noprof+0x77c/0x1110 [ 49.795136][ T5946] __page_pool_alloc_pages_slow+0x18f/0x770 [ 49.796629][ T5946] page_pool_alloc_netmem+0xc4/0x160 [ 49.798053][ T5946] page_pool_alloc_pages+0x1a/0x60 [ 49.799333][ T5946] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 49.800872][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 49.802243][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 49.803588][ T5946] __sys_bpf+0xfc6/0x49a0 [ 49.804720][ T5946] __x64_sys_bpf+0x78/0xc0 [ 49.805874][ T5946] do_syscall_64+0xcd/0x250 [ 49.807050][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.808631][ T5946] page last free pid 5924 tgid 5924 stack trace: [ 49.810267][ T5946] free_unref_page+0x5f4/0xdc0 [ 49.811748][ T5946] __folio_put+0x30d/0x3d0 [ 49.813026][ T5946] put_page+0x21e/0x280 [ 49.814143][ T5946] anon_pipe_buf_release+0x11a/0x240 [ 49.815715][ T5946] pipe_read+0x641/0x13f0 [ 49.816815][ T5946] vfs_read+0xa4c/0xbe0 [ 49.817969][ T5946] ksys_read+0x1fa/0x260 [ 49.819075][ T5946] do_syscall_64+0xcd/0x250 [ 49.820233][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.821751][ T5946] Modules linked in: [ 49.822785][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: syz-executor133 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 49.826095][ T5946] Tainted: [B]=BAD_PAGE [ 49.827213][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 49.830032][ T5946] Call Trace: [ 49.830936][ T5946] [ 49.831734][ T5946] dump_stack_lvl+0x16c/0x1f0 [ 49.833002][ T5946] bad_page+0xb3/0x1f0 [ 49.834220][ T5946] ? __pfx_bad_page+0x10/0x10 [ 49.835514][ T5946] ? page_bad_reason+0x9d/0x1e0 [ 49.836769][ T5946] free_unref_page+0x657/0xdc0 [ 49.837988][ T5946] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 49.839556][ T5946] ? __phys_addr+0xc6/0x150 [ 49.840821][ T5946] skb_free_head+0xa0/0x1d0 [ 49.841971][ T5946] skb_release_data+0x560/0x730 [ 49.843226][ T5946] sk_skb_reason_drop+0x129/0x1a0 [ 49.844493][ T5946] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 49.846238][ T5946] ? kernel_text_address+0x8d/0x100 [ 49.847586][ T5946] ? hlock_class+0x4e/0x130 [ 49.848751][ T5946] ? __lock_acquire+0x163e/0x3ce0 [ 49.850036][ T5946] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 49.851848][ T5946] ? hlock_class+0x4e/0x130 [ 49.853011][ T5946] ? __lock_acquire+0xbdd/0x3ce0 [ 49.854287][ T5946] ? __pfx___lock_acquire+0x10/0x10 [ 49.855613][ T5946] __netif_receive_skb_list_core+0x357/0x950 [ 49.857167][ T5946] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 49.858844][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 49.860159][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 49.861761][ T5946] ? lock_acquire+0x2f/0xb0 [ 49.862912][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 49.864516][ T5946] netif_receive_skb_list_internal+0x753/0xdb0 [ 49.866094][ T5946] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 49.867787][ T5946] ? __pfx_eth_type_trans+0x10/0x10 [ 49.869131][ T5946] ? __build_skb_around+0x278/0x3b0 [ 49.870452][ T5946] netif_receive_skb_list+0x4f/0x4a0 [ 49.871794][ T5946] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 49.873405][ T5946] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 49.875109][ T5946] ? bpf_test_timer_continue+0x150/0x3d0 [ 49.876553][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 49.877903][ T5946] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 49.879385][ T5946] ? try_to_wake_up+0x154/0x14f0 [ 49.880656][ T5946] ? __pfx_try_to_wake_up+0x10/0x10 [ 49.881975][ T5946] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 49.883523][ T5946] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 49.884923][ T5946] ? 0xffffffffa0004340 [ 49.886025][ T5946] ? 0xffffffffa0004340 [ 49.887129][ T5946] ? 0xffffffffa0004340 [ 49.888226][ T5946] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 49.889786][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 49.891450][ T5946] ? lock_acquire+0x2f/0xb0 [ 49.892666][ T5946] ? __fget_files+0x40/0x3f0 [ 49.893918][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 49.895439][ T5946] ? fput+0x30/0x390 [ 49.896598][ T5946] ? __bpf_prog_get+0xa0/0x290 [ 49.898042][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 49.899542][ T5946] __sys_bpf+0xfc6/0x49a0 [ 49.900655][ T5946] ? find_held_lock+0x2d/0x110 [ 49.901941][ T5946] ? __pfx___sys_bpf+0x10/0x10 [ 49.903157][ T5946] ? __might_fault+0x13b/0x190 [ 49.904397][ T5946] ? __pfx_lock_release+0x10/0x10 [ 49.905710][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 49.907197][ T5946] ? lock_acquire+0x2f/0xb0 [ 49.908374][ T5946] ? __might_fault+0xe3/0x190 [ 49.909909][ T5946] ? xfd_validate_state+0x5d/0x180 [ 49.911353][ T5946] ? rcu_is_watching+0x12/0xc0 [ 49.912703][ T5946] __x64_sys_bpf+0x78/0xc0 [ 49.914119][ T5946] ? lockdep_hardirqs_on+0x7c/0x110 [ 49.915763][ T5946] do_syscall_64+0xcd/0x250 [ 49.916998][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.918703][ T5946] RIP: 0033:0x7f5102b5de99 [ 49.919856][ T5946] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 49.924698][ T5946] RSP: 002b:00007f5102b18228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 49.926856][ T5946] RAX: ffffffffffffffda RBX: 00007f5102be8328 RCX: 00007f5102b5de99 [ 49.928868][ T5946] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 49.930877][ T5946] RBP: 00007f5102be8320 R08: 00007f5102b186c0 R09: 00007f5102b186c0 [ 49.932996][ T5946] R10: 00007f5102b186c0 R11: 0000000000000246 R12: 00007f5102bb5074 [ 49.935168][ T5946] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffc619b1828 [ 49.937202][ T5946] [ 49.938108][ T5946] BUG: Bad page state in process syz-executor133 pfn:229fa [ 49.939990][ T5946] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880229fbe00 pfn:0x229fa [ 49.942535][ T5946] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 49.944393][ T5946] raw: 00fff00000000000 dead000000000040 ffff8880202ae000 0000000000000000 [ 49.946598][ T5946] raw: ffff8880229fbe00 0000000000000001 00000000ffffffff 0000000000000000 [ 49.948922][ T5946] page dumped because: page_pool leak [ 49.950346][ T5946] page_owner tracks the page as allocated [ 49.952508][ T5946] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5946, tgid 5942 (syz-executor133), ts 44467798364, free_ts 40198026417 [ 49.957095][ T5946] post_alloc_hook+0x2d1/0x350 [ 49.958394][ T5946] get_page_from_freelist+0x101e/0x3070 [ 49.959855][ T5946] __alloc_pages_noprof+0x223/0x25a0 [ 49.961222][ T5946] alloc_pages_bulk_noprof+0x77c/0x1110 [ 49.962826][ T5946] __page_pool_alloc_pages_slow+0x18f/0x770 [ 49.964391][ T5946] page_pool_alloc_netmem+0xc4/0x160 [ 49.965804][ T5946] page_pool_alloc_pages+0x1a/0x60 [ 49.967183][ T5946] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 49.968881][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 49.970235][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 49.971625][ T5946] __sys_bpf+0xfc6/0x49a0 [ 49.972784][ T5946] __x64_sys_bpf+0x78/0xc0 [ 49.973917][ T5946] do_syscall_64+0xcd/0x250 [ 49.975119][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.976662][ T5946] page last free pid 5924 tgid 5924 stack trace: [ 49.978347][ T5946] free_unref_page+0x5f4/0xdc0 [ 49.979589][ T5946] __folio_put+0x30d/0x3d0 [ 49.980723][ T5946] put_page+0x21e/0x280 [ 49.981766][ T5946] anon_pipe_buf_release+0x11a/0x240 [ 49.983143][ T5946] pipe_read+0x641/0x13f0 [ 49.984221][ T5946] vfs_read+0xa4c/0xbe0 [ 49.985278][ T5946] ksys_read+0x1fa/0x260 [ 49.986355][ T5946] do_syscall_64+0xcd/0x250 [ 49.987531][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.989074][ T5946] Modules linked in: [ 49.990067][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: syz-executor133 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 49.993114][ T5946] Tainted: [B]=BAD_PAGE [ 49.994155][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 49.996833][ T5946] Call Trace: [ 49.997668][ T5946] [ 49.998415][ T5946] dump_stack_lvl+0x16c/0x1f0 [ 49.999587][ T5946] bad_page+0xb3/0x1f0 [ 50.000639][ T5946] ? __pfx_bad_page+0x10/0x10 [ 50.001842][ T5946] ? page_bad_reason+0x9d/0x1e0 [ 50.003085][ T5946] free_unref_page+0x657/0xdc0 [ 50.004333][ T5946] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 50.005907][ T5946] ? __phys_addr+0xc6/0x150 [ 50.007103][ T5946] skb_free_head+0xa0/0x1d0 [ 50.008277][ T5946] skb_release_data+0x560/0x730 [ 50.009542][ T5946] sk_skb_reason_drop+0x129/0x1a0 [ 50.010879][ T5946] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 50.012587][ T5946] ? kernel_text_address+0x8d/0x100 [ 50.013930][ T5946] ? hlock_class+0x4e/0x130 [ 50.015075][ T5946] ? __lock_acquire+0x163e/0x3ce0 [ 50.016326][ T5946] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 50.018070][ T5946] ? hlock_class+0x4e/0x130 [ 50.019277][ T5946] ? __lock_acquire+0xbdd/0x3ce0 [ 50.020556][ T5946] ? __pfx___lock_acquire+0x10/0x10 [ 50.021918][ T5946] __netif_receive_skb_list_core+0x357/0x950 [ 50.023508][ T5946] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 50.025263][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 50.026601][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 50.028275][ T5946] ? lock_acquire+0x2f/0xb0 [ 50.029456][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 50.031208][ T5946] netif_receive_skb_list_internal+0x753/0xdb0 [ 50.032794][ T5946] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 50.034509][ T5946] ? __pfx_eth_type_trans+0x10/0x10 [ 50.035899][ T5946] ? __build_skb_around+0x278/0x3b0 [ 50.037221][ T5946] netif_receive_skb_list+0x4f/0x4a0 [ 50.038565][ T5946] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 50.040180][ T5946] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 50.041824][ T5946] ? bpf_test_timer_continue+0x150/0x3d0 [ 50.043258][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 50.044588][ T5946] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 50.046044][ T5946] ? try_to_wake_up+0x154/0x14f0 [ 50.047338][ T5946] ? __pfx_try_to_wake_up+0x10/0x10 [ 50.048661][ T5946] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 50.050253][ T5946] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 50.051623][ T5946] ? 0xffffffffa0004340 [ 50.052935][ T5946] ? 0xffffffffa0004340 [ 50.054152][ T5946] ? 0xffffffffa0004340 [ 50.055280][ T5946] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 50.056825][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 50.058212][ T5946] ? lock_acquire+0x2f/0xb0 [ 50.059410][ T5946] ? __fget_files+0x40/0x3f0 [ 50.060646][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 50.062188][ T5946] ? fput+0x30/0x390 [ 50.063260][ T5946] ? __bpf_prog_get+0xa0/0x290 [ 50.064548][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 50.066051][ T5946] __sys_bpf+0xfc6/0x49a0 [ 50.067129][ T5946] ? find_held_lock+0x2d/0x110 [ 50.068334][ T5946] ? __pfx___sys_bpf+0x10/0x10 [ 50.069919][ T5946] ? __might_fault+0x13b/0x190 [ 50.071453][ T5946] ? __pfx_lock_release+0x10/0x10 [ 50.072845][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 50.074351][ T5946] ? lock_acquire+0x2f/0xb0 [ 50.075750][ T5946] ? __might_fault+0xe3/0x190 [ 50.077050][ T5946] ? xfd_validate_state+0x5d/0x180 [ 50.078559][ T5946] ? rcu_is_watching+0x12/0xc0 [ 50.079863][ T5946] __x64_sys_bpf+0x78/0xc0 [ 50.081052][ T5946] ? lockdep_hardirqs_on+0x7c/0x110 [ 50.082486][ T5946] do_syscall_64+0xcd/0x250 [ 50.083730][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.085273][ T5946] RIP: 0033:0x7f5102b5de99 [ 50.086414][ T5946] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 50.091362][ T5946] RSP: 002b:00007f5102b18228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 50.093691][ T5946] RAX: ffffffffffffffda RBX: 00007f5102be8328 RCX: 00007f5102b5de99 [ 50.095858][ T5946] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 50.097857][ T5946] RBP: 00007f5102be8320 R08: 00007f5102b186c0 R09: 00007f5102b186c0 [ 50.099866][ T5946] R10: 00007f5102b186c0 R11: 0000000000000246 R12: 00007f5102bb5074 [ 50.102006][ T5946] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffc619b1828 [ 50.104066][ T5946] [ 50.104980][ T5946] BUG: Bad page state in process syz-executor133 pfn:27558 [ 50.106884][ T5946] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880275589a0 pfn:0x27558 [ 50.109485][ T5946] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 50.111262][ T5946] raw: 00fff00000000000 dead000000000040 ffff8880202ae000 0000000000000000 [ 50.113381][ T5946] raw: ffff8880275589a0 0000000000000001 00000000ffffffff 0000000000000000 [ 50.115558][ T5946] page dumped because: page_pool leak [ 50.116892][ T5946] page_owner tracks the page as allocated [ 50.118349][ T5946] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5946, tgid 5942 (syz-executor133), ts 44467730035, free_ts 40198030818 [ 50.122693][ T5946] post_alloc_hook+0x2d1/0x350 [ 50.123972][ T5946] get_page_from_freelist+0x101e/0x3070 [ 50.125430][ T5946] __alloc_pages_noprof+0x223/0x25a0 [ 50.126820][ T5946] alloc_pages_bulk_noprof+0x77c/0x1110 [ 50.128320][ T5946] __page_pool_alloc_pages_slow+0x18f/0x770 [ 50.129865][ T5946] page_pool_alloc_netmem+0xc4/0x160 [ 50.131255][ T5946] page_pool_alloc_pages+0x1a/0x60 [ 50.132604][ T5946] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 50.134205][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 50.135610][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 50.137004][ T5946] __sys_bpf+0xfc6/0x49a0 [ 50.138175][ T5946] __x64_sys_bpf+0x78/0xc0 [ 50.139340][ T5946] do_syscall_64+0xcd/0x250 [ 50.140555][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.142047][ T5946] page last free pid 5924 tgid 5924 stack trace: [ 50.143687][ T5946] free_unref_page+0x5f4/0xdc0 [ 50.144951][ T5946] __folio_put+0x30d/0x3d0 [ 50.146106][ T5946] put_page+0x21e/0x280 [ 50.147283][ T5946] anon_pipe_buf_release+0x11a/0x240 [ 50.148988][ T5946] pipe_read+0x641/0x13f0 [ 50.150307][ T5946] vfs_read+0xa4c/0xbe0 [ 50.151396][ T5946] ksys_read+0x1fa/0x260 [ 50.152819][ T5946] do_syscall_64+0xcd/0x250 [ 50.154075][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.155673][ T5946] Modules linked in: [ 50.156687][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: syz-executor133 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 50.159831][ T5946] Tainted: [B]=BAD_PAGE [ 50.160905][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 50.163587][ T5946] Call Trace: [ 50.164458][ T5946] [ 50.165214][ T5946] dump_stack_lvl+0x16c/0x1f0 [ 50.166408][ T5946] bad_page+0xb3/0x1f0 [ 50.167476][ T5946] ? __pfx_bad_page+0x10/0x10 [ 50.168734][ T5946] ? page_bad_reason+0x9d/0x1e0 [ 50.170027][ T5946] free_unref_page+0x657/0xdc0 [ 50.171313][ T5946] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 50.172893][ T5946] ? __phys_addr+0xc6/0x150 [ 50.174069][ T5946] skb_free_head+0xa0/0x1d0 [ 50.175285][ T5946] skb_release_data+0x560/0x730 [ 50.176557][ T5946] sk_skb_reason_drop+0x129/0x1a0 [ 50.177830][ T5946] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 50.179663][ T5946] ? kernel_text_address+0x8d/0x100 [ 50.181050][ T5946] ? hlock_class+0x4e/0x130 [ 50.182239][ T5946] ? __lock_acquire+0x163e/0x3ce0 [ 50.183560][ T5946] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 50.185407][ T5946] ? hlock_class+0x4e/0x130 [ 50.186606][ T5946] ? __lock_acquire+0xbdd/0x3ce0 [ 50.187918][ T5946] ? __pfx___lock_acquire+0x10/0x10 [ 50.189286][ T5946] __netif_receive_skb_list_core+0x357/0x950 [ 50.190888][ T5946] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 50.192589][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 50.193955][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 50.195642][ T5946] ? lock_acquire+0x2f/0xb0 [ 50.196825][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 50.198466][ T5946] netif_receive_skb_list_internal+0x753/0xdb0 [ 50.200012][ T5946] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 50.201732][ T5946] ? __pfx_eth_type_trans+0x10/0x10 [ 50.203076][ T5946] ? __build_skb_around+0x278/0x3b0 [ 50.204383][ T5946] netif_receive_skb_list+0x4f/0x4a0 [ 50.205750][ T5946] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 50.207372][ T5946] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 50.209046][ T5946] ? bpf_test_timer_continue+0x150/0x3d0 [ 50.210498][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 50.211854][ T5946] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 50.213345][ T5946] ? try_to_wake_up+0x154/0x14f0 [ 50.214662][ T5946] ? __pfx_try_to_wake_up+0x10/0x10 [ 50.216022][ T5946] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 50.217565][ T5946] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 50.218954][ T5946] ? 0xffffffffa0004340 [ 50.220041][ T5946] ? 0xffffffffa0004340 [ 50.221128][ T5946] ? 0xffffffffa0004340 [ 50.222212][ T5946] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 50.223758][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 50.225170][ T5946] ? lock_acquire+0x2f/0xb0 [ 50.226342][ T5946] ? __fget_files+0x40/0x3f0 [ 50.227549][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 50.229056][ T5946] ? fput+0x30/0x390 [ 50.230056][ T5946] ? __bpf_prog_get+0xa0/0x290 [ 50.231281][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 50.232791][ T5946] __sys_bpf+0xfc6/0x49a0 [ 50.233900][ T5946] ? find_held_lock+0x2d/0x110 [ 50.235167][ T5946] ? __pfx___sys_bpf+0x10/0x10 [ 50.236420][ T5946] ? __might_fault+0x13b/0x190 [ 50.237696][ T5946] ? __pfx_lock_release+0x10/0x10 [ 50.239023][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 50.240387][ T5946] ? lock_acquire+0x2f/0xb0 [ 50.241581][ T5946] ? __might_fault+0xe3/0x190 [ 50.242845][ T5946] ? xfd_validate_state+0x5d/0x180 [ 50.244201][ T5946] ? rcu_is_watching+0x12/0xc0 [ 50.245470][ T5946] __x64_sys_bpf+0x78/0xc0 [ 50.246646][ T5946] ? lockdep_hardirqs_on+0x7c/0x110 [ 50.248055][ T5946] do_syscall_64+0xcd/0x250 [ 50.249259][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.250806][ T5946] RIP: 0033:0x7f5102b5de99 [ 50.251980][ T5946] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 50.256805][ T5946] RSP: 002b:00007f5102b18228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 50.258885][ T5946] RAX: ffffffffffffffda RBX: 00007f5102be8328 RCX: 00007f5102b5de99 [ 50.260848][ T5946] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 50.262781][ T5946] RBP: 00007f5102be8320 R08: 00007f5102b186c0 R09: 00007f5102b186c0 [ 50.264717][ T5946] R10: 00007f5102b186c0 R11: 0000000000000246 R12: 00007f5102bb5074 [ 50.266644][ T5946] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffc619b1828 [ 50.268637][ T5946] [ 50.269499][ T5946] BUG: Bad page state in process syz-executor133 pfn:31c13 [ 50.271340][ T5946] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888031c13d80 pfn:0x31c13 [ 50.273857][ T5946] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 50.275681][ T5946] raw: 00fff00000000000 dead000000000040 ffff8880202ae000 0000000000000000 [ 50.277812][ T5946] raw: ffff888031c13d80 0000000000000001 00000000ffffffff 0000000000000000 [ 50.279907][ T5946] page dumped because: page_pool leak [ 50.281223][ T5946] page_owner tracks the page as allocated [ 50.282654][ T5946] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5946, tgid 5942 (syz-executor133), ts 44467721548, free_ts 40198040120 [ 50.286957][ T5946] post_alloc_hook+0x2d1/0x350 [ 50.288195][ T5946] get_page_from_freelist+0x101e/0x3070 [ 50.289617][ T5946] __alloc_pages_noprof+0x223/0x25a0 [ 50.290931][ T5946] alloc_pages_bulk_noprof+0x77c/0x1110 [ 50.292328][ T5946] __page_pool_alloc_pages_slow+0x18f/0x770 [ 50.293827][ T5946] page_pool_alloc_netmem+0xc4/0x160 [ 50.295162][ T5946] page_pool_alloc_pages+0x1a/0x60 [ 50.296418][ T5946] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 50.298066][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 50.299434][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 50.300846][ T5946] __sys_bpf+0xfc6/0x49a0 [ 50.301997][ T5946] __x64_sys_bpf+0x78/0xc0 [ 50.303187][ T5946] do_syscall_64+0xcd/0x250 [ 50.304384][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.306177][ T5946] page last free pid 5924 tgid 5924 stack trace: [ 50.307918][ T5946] free_unref_page+0x5f4/0xdc0 [ 50.309134][ T5946] __folio_put+0x30d/0x3d0 [ 50.310279][ T5946] put_page+0x21e/0x280 [ 50.311369][ T5946] anon_pipe_buf_release+0x11a/0x240 [ 50.312716][ T5946] pipe_read+0x641/0x13f0 [ 50.313803][ T5946] vfs_read+0xa4c/0xbe0 [ 50.315056][ T5946] ksys_read+0x1fa/0x260 [ 50.316291][ T5946] do_syscall_64+0xcd/0x250 [ 50.317620][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.319201][ T5946] Modules linked in: [ 50.320211][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: syz-executor133 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 50.323315][ T5946] Tainted: [B]=BAD_PAGE [ 50.324374][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 50.327048][ T5946] Call Trace: [ 50.328006][ T5946] [ 50.328821][ T5946] dump_stack_lvl+0x16c/0x1f0 [ 50.330059][ T5946] bad_page+0xb3/0x1f0 [ 50.331120][ T5946] ? __pfx_bad_page+0x10/0x10 [ 50.332349][ T5946] ? page_bad_reason+0x9d/0x1e0 [ 50.333838][ T5946] free_unref_page+0x657/0xdc0 [ 50.335084][ T5946] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 50.336610][ T5946] ? __phys_addr+0xc6/0x150 [ 50.337979][ T5946] skb_free_head+0xa0/0x1d0 [ 50.339189][ T5946] skb_release_data+0x560/0x730 [ 50.340453][ T5946] sk_skb_reason_drop+0x129/0x1a0 [ 50.341778][ T5946] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 50.343487][ T5946] ? kernel_text_address+0x8d/0x100 [ 50.344826][ T5946] ? hlock_class+0x4e/0x130 [ 50.346030][ T5946] ? __lock_acquire+0x163e/0x3ce0 [ 50.347322][ T5946] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 50.349142][ T5946] ? hlock_class+0x4e/0x130 [ 50.350350][ T5946] ? __lock_acquire+0xbdd/0x3ce0 [ 50.351636][ T5946] ? __pfx___lock_acquire+0x10/0x10 [ 50.353130][ T5946] __netif_receive_skb_list_core+0x357/0x950 [ 50.354715][ T5946] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 50.356422][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 50.357897][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 50.359591][ T5946] ? lock_acquire+0x2f/0xb0 [ 50.360802][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 50.362483][ T5946] netif_receive_skb_list_internal+0x753/0xdb0 [ 50.364127][ T5946] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 50.365882][ T5946] ? __pfx_eth_type_trans+0x10/0x10 [ 50.367263][ T5946] ? __build_skb_around+0x278/0x3b0 [ 50.368750][ T5946] netif_receive_skb_list+0x4f/0x4a0 [ 50.370106][ T5946] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 50.371729][ T5946] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 50.373997][ T5946] ? bpf_test_timer_continue+0x150/0x3d0 [ 50.375756][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 50.377262][ T5946] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 50.379100][ T5946] ? try_to_wake_up+0x154/0x14f0 [ 50.380475][ T5946] ? __pfx_try_to_wake_up+0x10/0x10 [ 50.381930][ T5946] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 50.383609][ T5946] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 50.385005][ T5946] ? 0xffffffffa0004340 [ 50.386114][ T5946] ? 0xffffffffa0004340 [ 50.387235][ T5946] ? 0xffffffffa0004340 [ 50.388329][ T5946] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 50.389869][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 50.391285][ T5946] ? lock_acquire+0x2f/0xb0 [ 50.392474][ T5946] ? __fget_files+0x40/0x3f0 [ 50.393709][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 50.395266][ T5946] ? fput+0x30/0x390 [ 50.396298][ T5946] ? __bpf_prog_get+0xa0/0x290 [ 50.397551][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 50.399099][ T5946] __sys_bpf+0xfc6/0x49a0 [ 50.400210][ T5946] ? find_held_lock+0x2d/0x110 [ 50.401442][ T5946] ? __pfx___sys_bpf+0x10/0x10 [ 50.402681][ T5946] ? __might_fault+0x13b/0x190 [ 50.403955][ T5946] ? __pfx_lock_release+0x10/0x10 [ 50.405233][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 50.406559][ T5946] ? lock_acquire+0x2f/0xb0 [ 50.407721][ T5946] ? __might_fault+0xe3/0x190 [ 50.409094][ T5946] ? xfd_validate_state+0x5d/0x180 [ 50.410818][ T5946] ? rcu_is_watching+0x12/0xc0 [ 50.412050][ T5946] __x64_sys_bpf+0x78/0xc0 [ 50.413202][ T5946] ? lockdep_hardirqs_on+0x7c/0x110 [ 50.414603][ T5946] do_syscall_64+0xcd/0x250 [ 50.415829][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.417346][ T5946] RIP: 0033:0x7f5102b5de99 [ 50.418492][ T5946] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 50.423370][ T5946] RSP: 002b:00007f5102b18228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 50.425479][ T5946] RAX: ffffffffffffffda RBX: 00007f5102be8328 RCX: 00007f5102b5de99 [ 50.427513][ T5946] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 50.429576][ T5946] RBP: 00007f5102be8320 R08: 00007f5102b186c0 R09: 00007f5102b186c0 [ 50.431836][ T5946] R10: 00007f5102b186c0 R11: 0000000000000246 R12: 00007f5102bb5074 [ 50.434005][ T5946] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffc619b1828 [ 50.436087][ T5946] [ 50.437061][ T5946] BUG: Bad page state in process syz-executor133 pfn:30ef7 [ 50.439163][ T5946] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x30ef7 [ 50.441437][ T5946] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 50.443327][ T5946] raw: 00fff00000000000 dead000000000040 ffff8880202ae000 0000000000000000 [ 50.445535][ T5946] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 50.447838][ T5946] page dumped because: page_pool leak [ 50.449244][ T5946] page_owner tracks the page as allocated [ 50.450955][ T5946] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5946, tgid 5942 (syz-executor133), ts 44467713391, free_ts 40198044337 [ 50.455587][ T5946] post_alloc_hook+0x2d1/0x350 [ 50.456879][ T5946] get_page_from_freelist+0x101e/0x3070 [ 50.458399][ T5946] __alloc_pages_noprof+0x223/0x25a0 [ 50.459783][ T5946] alloc_pages_bulk_noprof+0x77c/0x1110 [ 50.461204][ T5946] __page_pool_alloc_pages_slow+0x18f/0x770 [ 50.462709][ T5946] page_pool_alloc_netmem+0xc4/0x160 [ 50.464083][ T5946] page_pool_alloc_pages+0x1a/0x60 [ 50.465412][ T5946] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 50.466969][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 50.468369][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 50.469721][ T5946] __sys_bpf+0xfc6/0x49a0 [ 50.470852][ T5946] __x64_sys_bpf+0x78/0xc0 [ 50.472014][ T5946] do_syscall_64+0xcd/0x250 [ 50.473174][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.474702][ T5946] page last free pid 5924 tgid 5924 stack trace: [ 50.476278][ T5946] free_unref_page+0x5f4/0xdc0 [ 50.477496][ T5946] __folio_put+0x30d/0x3d0 [ 50.478708][ T5946] put_page+0x21e/0x280 [ 50.479759][ T5946] anon_pipe_buf_release+0x11a/0x240 [ 50.481104][ T5946] pipe_read+0x641/0x13f0 [ 50.482235][ T5946] vfs_read+0xa4c/0xbe0 [ 50.483268][ T5946] ksys_read+0x1fa/0x260 [ 50.484316][ T5946] do_syscall_64+0xcd/0x250 [ 50.485485][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.487003][ T5946] Modules linked in: [ 50.488042][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: syz-executor133 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 50.491172][ T5946] Tainted: [B]=BAD_PAGE [ 50.492237][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 50.495065][ T5946] Call Trace: [ 50.495954][ T5946] [ 50.496741][ T5946] dump_stack_lvl+0x16c/0x1f0 [ 50.498002][ T5946] bad_page+0xb3/0x1f0 [ 50.499096][ T5946] ? __pfx_bad_page+0x10/0x10 [ 50.500342][ T5946] ? page_bad_reason+0x9d/0x1e0 [ 50.501633][ T5946] free_unref_page+0x657/0xdc0 [ 50.502913][ T5946] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 50.504462][ T5946] ? __phys_addr+0xc6/0x150 [ 50.505631][ T5946] skb_free_head+0xa0/0x1d0 [ 50.506809][ T5946] skb_release_data+0x560/0x730 [ 50.508057][ T5946] sk_skb_reason_drop+0x129/0x1a0 [ 50.509320][ T5946] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 50.511197][ T5946] ? kernel_text_address+0x8d/0x100 [ 50.512505][ T5946] ? hlock_class+0x4e/0x130 [ 50.513645][ T5946] ? __lock_acquire+0x163e/0x3ce0 [ 50.515099][ T5946] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 50.516965][ T5946] ? hlock_class+0x4e/0x130 [ 50.518149][ T5946] ? __lock_acquire+0xbdd/0x3ce0 [ 50.519518][ T5946] ? __pfx___lock_acquire+0x10/0x10 [ 50.520841][ T5946] __netif_receive_skb_list_core+0x357/0x950 [ 50.522390][ T5946] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 50.524092][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 50.525433][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 50.527114][ T5946] ? lock_acquire+0x2f/0xb0 [ 50.528284][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 50.530162][ T5946] netif_receive_skb_list_internal+0x753/0xdb0 [ 50.531985][ T5946] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 50.533665][ T5946] ? __pfx_eth_type_trans+0x10/0x10 [ 50.535035][ T5946] ? __build_skb_around+0x278/0x3b0 [ 50.536569][ T5946] netif_receive_skb_list+0x4f/0x4a0 [ 50.538043][ T5946] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 50.539657][ T5946] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 50.541330][ T5946] ? bpf_test_timer_continue+0x150/0x3d0 [ 50.542745][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 50.544099][ T5946] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 50.545613][ T5946] ? try_to_wake_up+0x154/0x14f0 [ 50.546900][ T5946] ? __pfx_try_to_wake_up+0x10/0x10 [ 50.548234][ T5946] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 50.549754][ T5946] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 50.551117][ T5946] ? 0xffffffffa0004340 [ 50.552632][ T5946] ? 0xffffffffa0004340 [ 50.553875][ T5946] ? 0xffffffffa0004340 [ 50.555059][ T5946] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 50.556666][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 50.558092][ T5946] ? lock_acquire+0x2f/0xb0 [ 50.559397][ T5946] ? __fget_files+0x40/0x3f0 [ 50.560639][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 50.562197][ T5946] ? fput+0x30/0x390 [ 50.563274][ T5946] ? __bpf_prog_get+0xa0/0x290 [ 50.564553][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 50.566112][ T5946] __sys_bpf+0xfc6/0x49a0 [ 50.567278][ T5946] ? find_held_lock+0x2d/0x110 [ 50.568546][ T5946] ? __pfx___sys_bpf+0x10/0x10 [ 50.569822][ T5946] ? __might_fault+0x13b/0x190 [ 50.571086][ T5946] ? __pfx_lock_release+0x10/0x10 [ 50.572392][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 50.573757][ T5946] ? lock_acquire+0x2f/0xb0 [ 50.574979][ T5946] ? __might_fault+0xe3/0x190 [ 50.576235][ T5946] ? xfd_validate_state+0x5d/0x180 [ 50.577591][ T5946] ? rcu_is_watching+0x12/0xc0 [ 50.578834][ T5946] __x64_sys_bpf+0x78/0xc0 [ 50.580000][ T5946] ? lockdep_hardirqs_on+0x7c/0x110 [ 50.581377][ T5946] do_syscall_64+0xcd/0x250 [ 50.582576][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.584278][ T5946] RIP: 0033:0x7f5102b5de99 [ 50.585551][ T5946] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 50.590940][ T5946] RSP: 002b:00007f5102b18228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 50.593447][ T5946] RAX: ffffffffffffffda RBX: 00007f5102be8328 RCX: 00007f5102b5de99 [ 50.595680][ T5946] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 50.597717][ T5946] RBP: 00007f5102be8320 R08: 00007f5102b186c0 R09: 00007f5102b186c0 [ 50.599820][ T5946] R10: 00007f5102b186c0 R11: 0000000000000246 R12: 00007f5102bb5074 [ 50.601932][ T5946] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffc619b1828 [ 50.604135][ T5946] [ 50.605045][ T5946] BUG: Bad page state in process syz-executor133 pfn:1f810 [ 50.606885][ T5946] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88801f810e58 pfn:0x1f810 [ 50.609446][ T5946] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 50.611246][ T5946] raw: 00fff00000000000 dead000000000040 ffff8880202ae000 0000000000000000 [ 50.613377][ T5946] raw: ffff88801f810e58 0000000000000001 00000000ffffffff 0000000000000000 [ 50.615691][ T5946] page dumped because: page_pool leak [ 50.617052][ T5946] page_owner tracks the page as allocated [ 50.618609][ T5946] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5946, tgid 5942 (syz-executor133), ts 44467705064, free_ts 40198048755 [ 50.623350][ T5946] post_alloc_hook+0x2d1/0x350 [ 50.624605][ T5946] get_page_from_freelist+0x101e/0x3070 [ 50.626009][ T5946] __alloc_pages_noprof+0x223/0x25a0 [ 50.627395][ T5946] alloc_pages_bulk_noprof+0x77c/0x1110 [ 50.628943][ T5946] __page_pool_alloc_pages_slow+0x18f/0x770 [ 50.630495][ T5946] page_pool_alloc_netmem+0xc4/0x160 [ 50.631955][ T5946] page_pool_alloc_pages+0x1a/0x60 [ 50.633446][ T5946] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 50.635095][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 50.636490][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 50.637957][ T5946] __sys_bpf+0xfc6/0x49a0 [ 50.639103][ T5946] __x64_sys_bpf+0x78/0xc0 [ 50.640269][ T5946] do_syscall_64+0xcd/0x250 [ 50.641530][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.643133][ T5946] page last free pid 5924 tgid 5924 stack trace: [ 50.644851][ T5946] free_unref_page+0x5f4/0xdc0 [ 50.646182][ T5946] __folio_put+0x30d/0x3d0 [ 50.647416][ T5946] put_page+0x21e/0x280 [ 50.648550][ T5946] anon_pipe_buf_release+0x11a/0x240 [ 50.649919][ T5946] pipe_read+0x641/0x13f0 [ 50.651025][ T5946] vfs_read+0xa4c/0xbe0 [ 50.652079][ T5946] ksys_read+0x1fa/0x260 [ 50.653196][ T5946] do_syscall_64+0xcd/0x250 [ 50.654363][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.655889][ T5946] Modules linked in: [ 50.656892][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: syz-executor133 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 50.660036][ T5946] Tainted: [B]=BAD_PAGE [ 50.661082][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 50.663795][ T5946] Call Trace: [ 50.664638][ T5946] [ 50.665408][ T5946] dump_stack_lvl+0x16c/0x1f0 [ 50.666634][ T5946] bad_page+0xb3/0x1f0 [ 50.667692][ T5946] ? __pfx_bad_page+0x10/0x10 [ 50.668928][ T5946] ? page_bad_reason+0x9d/0x1e0 [ 50.670170][ T5946] free_unref_page+0x657/0xdc0 [ 50.671374][ T5946] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 50.672889][ T5946] ? __phys_addr+0xc6/0x150 [ 50.674083][ T5946] skb_free_head+0xa0/0x1d0 [ 50.675258][ T5946] skb_release_data+0x560/0x730 [ 50.676482][ T5946] sk_skb_reason_drop+0x129/0x1a0 [ 50.677823][ T5946] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 50.679509][ T5946] ? kernel_text_address+0x8d/0x100 [ 50.680825][ T5946] ? hlock_class+0x4e/0x130 [ 50.682012][ T5946] ? __lock_acquire+0x163e/0x3ce0 [ 50.683304][ T5946] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 50.685086][ T5946] ? hlock_class+0x4e/0x130 [ 50.686273][ T5946] ? __lock_acquire+0xbdd/0x3ce0 [ 50.687532][ T5946] ? __pfx___lock_acquire+0x10/0x10 [ 50.688845][ T5946] __netif_receive_skb_list_core+0x357/0x950 [ 50.690432][ T5946] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 50.692145][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 50.693524][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 50.695210][ T5946] ? lock_acquire+0x2f/0xb0 [ 50.696404][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 50.698072][ T5946] netif_receive_skb_list_internal+0x753/0xdb0 [ 50.699726][ T5946] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 50.701435][ T5946] ? __pfx_eth_type_trans+0x10/0x10 [ 50.702799][ T5946] ? __build_skb_around+0x278/0x3b0 [ 50.704147][ T5946] netif_receive_skb_list+0x4f/0x4a0 [ 50.705547][ T5946] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 50.707184][ T5946] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 50.708857][ T5946] ? bpf_test_timer_continue+0x150/0x3d0 [ 50.710316][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 50.711716][ T5946] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 50.713321][ T5946] ? try_to_wake_up+0x154/0x14f0 [ 50.714806][ T5946] ? __pfx_try_to_wake_up+0x10/0x10 [ 50.716267][ T5946] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 50.718101][ T5946] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 50.719542][ T5946] ? 0xffffffffa0004340 [ 50.720710][ T5946] ? 0xffffffffa0004340 [ 50.722098][ T5946] ? 0xffffffffa0004340 [ 50.723164][ T5946] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 50.724677][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 50.726033][ T5946] ? lock_acquire+0x2f/0xb0 [ 50.727310][ T5946] ? __fget_files+0x40/0x3f0 [ 50.728506][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 50.730033][ T5946] ? fput+0x30/0x390 [ 50.731325][ T5946] ? __bpf_prog_get+0xa0/0x290 [ 50.732543][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 50.734097][ T5946] __sys_bpf+0xfc6/0x49a0 [ 50.735239][ T5946] ? find_held_lock+0x2d/0x110 [ 50.736464][ T5946] ? __pfx___sys_bpf+0x10/0x10 [ 50.737739][ T5946] ? __might_fault+0x13b/0x190 [ 50.739104][ T5946] ? __pfx_lock_release+0x10/0x10 [ 50.740468][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 50.741813][ T5946] ? lock_acquire+0x2f/0xb0 [ 50.743037][ T5946] ? __might_fault+0xe3/0x190 [ 50.744333][ T5946] ? xfd_validate_state+0x5d/0x180 [ 50.745776][ T5946] ? rcu_is_watching+0x12/0xc0 [ 50.747134][ T5946] __x64_sys_bpf+0x78/0xc0 [ 50.748431][ T5946] ? lockdep_hardirqs_on+0x7c/0x110 [ 50.749885][ T5946] do_syscall_64+0xcd/0x250 [ 50.751433][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.753385][ T5946] RIP: 0033:0x7f5102b5de99 [ 50.754538][ T5946] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 50.759648][ T5946] RSP: 002b:00007f5102b18228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 50.761820][ T5946] RAX: ffffffffffffffda RBX: 00007f5102be8328 RCX: 00007f5102b5de99 [ 50.763882][ T5946] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 50.765947][ T5946] RBP: 00007f5102be8320 R08: 00007f5102b186c0 R09: 00007f5102b186c0 [ 50.767995][ T5946] R10: 00007f5102b186c0 R11: 0000000000000246 R12: 00007f5102bb5074 [ 50.769993][ T5946] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffc619b1828 [ 50.772247][ T5946] [ 50.773158][ T5946] BUG: Bad page state in process syz-executor133 pfn:31805 [ 50.775046][ T5946] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x31805 [ 50.777293][ T5946] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 50.779190][ T5946] raw: 00fff00000000000 dead000000000040 ffff8880202ae000 0000000000000000 [ 50.781378][ T5946] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 50.783571][ T5946] page dumped because: page_pool leak [ 50.784975][ T5946] page_owner tracks the page as allocated [ 50.786438][ T5946] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5946, tgid 5942 (syz-executor133), ts 44467695863, free_ts 40198053598 [ 50.790805][ T5946] post_alloc_hook+0x2d1/0x350 [ 50.792065][ T5946] get_page_from_freelist+0x101e/0x3070 [ 50.793457][ T5946] __alloc_pages_noprof+0x223/0x25a0 [ 50.794832][ T5946] alloc_pages_bulk_noprof+0x77c/0x1110 [ 50.796242][ T5946] __page_pool_alloc_pages_slow+0x18f/0x770 [ 50.797802][ T5946] page_pool_alloc_netmem+0xc4/0x160 [ 50.799289][ T5946] page_pool_alloc_pages+0x1a/0x60 [ 50.800603][ T5946] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 50.802203][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 50.803581][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 50.804964][ T5946] __sys_bpf+0xfc6/0x49a0 [ 50.806093][ T5946] __x64_sys_bpf+0x78/0xc0 [ 50.807267][ T5946] do_syscall_64+0xcd/0x250 [ 50.808489][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.810016][ T5946] page last free pid 5924 tgid 5924 stack trace: [ 50.811656][ T5946] free_unref_page+0x5f4/0xdc0 [ 50.812926][ T5946] __folio_put+0x30d/0x3d0 [ 50.814107][ T5946] put_page+0x21e/0x280 [ 50.815238][ T5946] anon_pipe_buf_release+0x11a/0x240 [ 50.816628][ T5946] pipe_read+0x641/0x13f0 [ 50.817854][ T5946] vfs_read+0xa4c/0xbe0 [ 50.818997][ T5946] ksys_read+0x1fa/0x260 [ 50.820109][ T5946] do_syscall_64+0xcd/0x250 [ 50.821305][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.822881][ T5946] Modules linked in: [ 50.823880][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: syz-executor133 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 50.827047][ T5946] Tainted: [B]=BAD_PAGE [ 50.828111][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 50.830846][ T5946] Call Trace: [ 50.831716][ T5946] [ 50.832495][ T5946] dump_stack_lvl+0x16c/0x1f0 [ 50.833718][ T5946] bad_page+0xb3/0x1f0 [ 50.834798][ T5946] ? __pfx_bad_page+0x10/0x10 [ 50.836037][ T5946] ? page_bad_reason+0x9d/0x1e0 [ 50.837288][ T5946] free_unref_page+0x657/0xdc0 [ 50.838503][ T5946] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 50.840078][ T5946] ? __phys_addr+0xc6/0x150 [ 50.841246][ T5946] skb_free_head+0xa0/0x1d0 [ 50.842414][ T5946] skb_release_data+0x560/0x730 [ 50.843684][ T5946] sk_skb_reason_drop+0x129/0x1a0 [ 50.844992][ T5946] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 50.846681][ T5946] ? kernel_text_address+0x8d/0x100 [ 50.848044][ T5946] ? hlock_class+0x4e/0x130 [ 50.849233][ T5946] ? __lock_acquire+0x163e/0x3ce0 [ 50.850538][ T5946] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 50.852353][ T5946] ? hlock_class+0x4e/0x130 [ 50.853544][ T5946] ? __lock_acquire+0xbdd/0x3ce0 [ 50.854847][ T5946] ? __pfx___lock_acquire+0x10/0x10 [ 50.856168][ T5946] __netif_receive_skb_list_core+0x357/0x950 [ 50.857712][ T5946] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 50.859419][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 50.861021][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 50.862715][ T5946] ? lock_acquire+0x2f/0xb0 [ 50.863994][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 50.865643][ T5946] netif_receive_skb_list_internal+0x753/0xdb0 [ 50.867251][ T5946] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 50.868987][ T5946] ? __pfx_eth_type_trans+0x10/0x10 [ 50.870368][ T5946] ? __build_skb_around+0x278/0x3b0 [ 50.871754][ T5946] netif_receive_skb_list+0x4f/0x4a0 [ 50.873152][ T5946] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 50.874825][ T5946] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 50.876551][ T5946] ? bpf_test_timer_continue+0x150/0x3d0 [ 50.878017][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 50.879492][ T5946] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 50.881122][ T5946] ? try_to_wake_up+0x154/0x14f0 [ 50.882410][ T5946] ? __pfx_try_to_wake_up+0x10/0x10 [ 50.883785][ T5946] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 50.885325][ T5946] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 50.886671][ T5946] ? 0xffffffffa0004340 [ 50.887767][ T5946] ? 0xffffffffa0004340 [ 50.888836][ T5946] ? 0xffffffffa0004340 [ 50.889917][ T5946] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 50.891473][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 50.892856][ T5946] ? lock_acquire+0x2f/0xb0 [ 50.894010][ T5946] ? __fget_files+0x40/0x3f0 [ 50.895270][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 50.896835][ T5946] ? fput+0x30/0x390 [ 50.897858][ T5946] ? __bpf_prog_get+0xa0/0x290 [ 50.899110][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 50.900609][ T5946] __sys_bpf+0xfc6/0x49a0 [ 50.901705][ T5946] ? find_held_lock+0x2d/0x110 [ 50.902965][ T5946] ? __pfx___sys_bpf+0x10/0x10 [ 50.904182][ T5946] ? __might_fault+0x13b/0x190 [ 50.905395][ T5946] ? __pfx_lock_release+0x10/0x10 [ 50.906703][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 50.908040][ T5946] ? lock_acquire+0x2f/0xb0 [ 50.909215][ T5946] ? __might_fault+0xe3/0x190 [ 50.910426][ T5946] ? xfd_validate_state+0x5d/0x180 [ 50.911734][ T5946] ? rcu_is_watching+0x12/0xc0 [ 50.912972][ T5946] __x64_sys_bpf+0x78/0xc0 [ 50.914119][ T5946] ? lockdep_hardirqs_on+0x7c/0x110 [ 50.915479][ T5946] do_syscall_64+0xcd/0x250 [ 50.916669][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.918168][ T5946] RIP: 0033:0x7f5102b5de99 [ 50.919343][ T5946] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 50.924296][ T5946] RSP: 002b:00007f5102b18228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 50.926470][ T5946] RAX: ffffffffffffffda RBX: 00007f5102be8328 RCX: 00007f5102b5de99 [ 50.928578][ T5946] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 50.930645][ T5946] RBP: 00007f5102be8320 R08: 00007f5102b186c0 R09: 00007f5102b186c0 [ 50.932732][ T5946] R10: 00007f5102b186c0 R11: 0000000000000246 R12: 00007f5102bb5074 [ 50.934774][ T5946] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffc619b1828 [ 50.936777][ T5946] [ 50.937692][ T5946] BUG: Bad page state in process syz-executor133 pfn:121dd [ 50.939687][ T5946] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x121dd [ 50.941903][ T5946] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 50.943719][ T5946] raw: 00fff00000000000 dead000000000040 ffff8880202ae000 0000000000000000 [ 50.945886][ T5946] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 50.948157][ T5946] page dumped because: page_pool leak [ 50.949523][ T5946] page_owner tracks the page as allocated [ 50.950980][ T5946] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5946, tgid 5942 (syz-executor133), ts 44467679035, free_ts 40579523494 [ 50.955318][ T5946] post_alloc_hook+0x2d1/0x350 [ 50.956546][ T5946] get_page_from_freelist+0x101e/0x3070 [ 50.958027][ T5946] __alloc_pages_noprof+0x223/0x25a0 [ 50.959434][ T5946] alloc_pages_bulk_noprof+0x77c/0x1110 [ 50.960852][ T5946] __page_pool_alloc_pages_slow+0x18f/0x770 [ 50.962383][ T5946] page_pool_alloc_netmem+0xc4/0x160 [ 50.963712][ T5946] page_pool_alloc_pages+0x1a/0x60 [ 50.965035][ T5946] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 50.966602][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 50.968046][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 50.969521][ T5946] __sys_bpf+0xfc6/0x49a0 [ 50.970850][ T5946] __x64_sys_bpf+0x78/0xc0 [ 50.972097][ T5946] do_syscall_64+0xcd/0x250 [ 50.973277][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.974928][ T5946] page last free pid 5924 tgid 5924 stack trace: [ 50.976554][ T5946] free_unref_page+0x5f4/0xdc0 [ 50.977895][ T5946] __folio_put+0x30d/0x3d0 [ 50.979098][ T5946] put_page+0x21e/0x280 [ 50.980196][ T5946] anon_pipe_buf_release+0x11a/0x240 [ 50.981584][ T5946] pipe_read+0x641/0x13f0 [ 50.982723][ T5946] vfs_read+0xa4c/0xbe0 [ 50.983941][ T5946] ksys_read+0x1fa/0x260 [ 50.985076][ T5946] do_syscall_64+0xcd/0x250 [ 50.986297][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.987949][ T5946] Modules linked in: [ 50.988996][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: syz-executor133 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 50.992131][ T5946] Tainted: [B]=BAD_PAGE [ 50.993217][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 50.995960][ T5946] Call Trace: [ 50.996848][ T5946] [ 50.997605][ T5946] dump_stack_lvl+0x16c/0x1f0 [ 50.998830][ T5946] bad_page+0xb3/0x1f0 [ 50.999881][ T5946] ? __pfx_bad_page+0x10/0x10 [ 51.001094][ T5946] ? page_bad_reason+0x9d/0x1e0 [ 51.002352][ T5946] free_unref_page+0x657/0xdc0 [ 51.003579][ T5946] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 51.005098][ T5946] ? __phys_addr+0xc6/0x150 [ 51.006265][ T5946] skb_free_head+0xa0/0x1d0 [ 51.007437][ T5946] skb_release_data+0x560/0x730 [ 51.008701][ T5946] sk_skb_reason_drop+0x129/0x1a0 [ 51.009992][ T5946] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 51.011691][ T5946] ? kernel_text_address+0x8d/0x100 [ 51.013045][ T5946] ? hlock_class+0x4e/0x130 [ 51.014233][ T5946] ? __lock_acquire+0x163e/0x3ce0 [ 51.015537][ T5946] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 51.017363][ T5946] ? hlock_class+0x4e/0x130 [ 51.018527][ T5946] ? __lock_acquire+0xbdd/0x3ce0 [ 51.019810][ T5946] ? __pfx___lock_acquire+0x10/0x10 [ 51.021154][ T5946] __netif_receive_skb_list_core+0x357/0x950 [ 51.022699][ T5946] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 51.024363][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 51.025698][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 51.027315][ T5946] ? lock_acquire+0x2f/0xb0 [ 51.028467][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 51.030028][ T5946] netif_receive_skb_list_internal+0x753/0xdb0 [ 51.031591][ T5946] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 51.033256][ T5946] ? __pfx_eth_type_trans+0x10/0x10 [ 51.034556][ T5946] ? __build_skb_around+0x278/0x3b0 [ 51.035879][ T5946] netif_receive_skb_list+0x4f/0x4a0 [ 51.037181][ T5946] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 51.038811][ T5946] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 51.040542][ T5946] ? bpf_test_timer_continue+0x150/0x3d0 [ 51.042021][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 51.043426][ T5946] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 51.044963][ T5946] ? try_to_wake_up+0x154/0x14f0 [ 51.046270][ T5946] ? __pfx_try_to_wake_up+0x10/0x10 [ 51.047661][ T5946] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 51.049398][ T5946] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 51.050706][ T5946] ? 0xffffffffa0004340 [ 51.051780][ T5946] ? 0xffffffffa0004340 [ 51.053069][ T5946] ? 0xffffffffa0004340 [ 51.054135][ T5946] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 51.055657][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 51.057046][ T5946] ? lock_acquire+0x2f/0xb0 [ 51.058214][ T5946] ? __fget_files+0x40/0x3f0 [ 51.059382][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 51.061048][ T5946] ? fput+0x30/0x390 [ 51.062064][ T5946] ? __bpf_prog_get+0xa0/0x290 [ 51.063335][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 51.064838][ T5946] __sys_bpf+0xfc6/0x49a0 [ 51.065965][ T5946] ? find_held_lock+0x2d/0x110 [ 51.067215][ T5946] ? __pfx___sys_bpf+0x10/0x10 [ 51.068466][ T5946] ? __might_fault+0x13b/0x190 [ 51.069697][ T5946] ? __pfx_lock_release+0x10/0x10 [ 51.071000][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 51.072338][ T5946] ? lock_acquire+0x2f/0xb0 [ 51.073526][ T5946] ? __might_fault+0xe3/0x190 [ 51.074760][ T5946] ? xfd_validate_state+0x5d/0x180 [ 51.076045][ T5946] ? rcu_is_watching+0x12/0xc0 [ 51.077274][ T5946] __x64_sys_bpf+0x78/0xc0 [ 51.078427][ T5946] ? lockdep_hardirqs_on+0x7c/0x110 [ 51.079773][ T5946] do_syscall_64+0xcd/0x250 [ 51.080965][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.082478][ T5946] RIP: 0033:0x7f5102b5de99 [ 51.083644][ T5946] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 51.088523][ T5946] RSP: 002b:00007f5102b18228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 51.090611][ T5946] RAX: ffffffffffffffda RBX: 00007f5102be8328 RCX: 00007f5102b5de99 [ 51.092594][ T5946] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 51.094535][ T5946] RBP: 00007f5102be8320 R08: 00007f5102b186c0 R09: 00007f5102b186c0 [ 51.096524][ T5946] R10: 00007f5102b186c0 R11: 0000000000000246 R12: 00007f5102bb5074 [ 51.098550][ T5946] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffc619b1828 [ 51.100647][ T5946] [ 51.101594][ T5946] BUG: Bad page state in process syz-executor133 pfn:30c5d [ 51.103544][ T5946] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x3fe2 pfn:0x30c5d [ 51.105935][ T5946] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 51.107859][ T5946] raw: 00fff00000000000 dead000000000040 ffff8880202ae000 0000000000000000 [ 51.110090][ T5946] raw: 0000000000003fe2 0000000000000001 00000000ffffffff 0000000000000000 [ 51.112505][ T5946] page dumped because: page_pool leak [ 51.113909][ T5946] page_owner tracks the page as allocated [ 51.115380][ T5946] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5946, tgid 5942 (syz-executor133), ts 44467670394, free_ts 40579534854 [ 51.119780][ T5946] post_alloc_hook+0x2d1/0x350 [ 51.120989][ T5946] get_page_from_freelist+0x101e/0x3070 [ 51.122424][ T5946] __alloc_pages_noprof+0x223/0x25a0 [ 51.123771][ T5946] alloc_pages_bulk_noprof+0x77c/0x1110 [ 51.125209][ T5946] __page_pool_alloc_pages_slow+0x18f/0x770 [ 51.126714][ T5946] page_pool_alloc_netmem+0xc4/0x160 [ 51.128121][ T5946] page_pool_alloc_pages+0x1a/0x60 [ 51.129447][ T5946] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 51.131027][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 51.132352][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 51.133742][ T5946] __sys_bpf+0xfc6/0x49a0 [ 51.134871][ T5946] __x64_sys_bpf+0x78/0xc0 [ 51.135992][ T5946] do_syscall_64+0xcd/0x250 [ 51.137145][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.138693][ T5946] page last free pid 5924 tgid 5924 stack trace: [ 51.140294][ T5946] free_unref_page+0x5f4/0xdc0 [ 51.141543][ T5946] __folio_put+0x30d/0x3d0 [ 51.142685][ T5946] put_page+0x21e/0x280 [ 51.143769][ T5946] anon_pipe_buf_release+0x11a/0x240 [ 51.145131][ T5946] pipe_read+0x641/0x13f0 [ 51.146225][ T5946] vfs_read+0xa4c/0xbe0 [ 51.147288][ T5946] ksys_read+0x1fa/0x260 [ 51.148427][ T5946] do_syscall_64+0xcd/0x250 [ 51.149585][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.151099][ T5946] Modules linked in: [ 51.152123][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: syz-executor133 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 51.155253][ T5946] Tainted: [B]=BAD_PAGE [ 51.156311][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 51.159010][ T5946] Call Trace: [ 51.159898][ T5946] [ 51.160659][ T5946] dump_stack_lvl+0x16c/0x1f0 [ 51.161871][ T5946] bad_page+0xb3/0x1f0 [ 51.162946][ T5946] ? __pfx_bad_page+0x10/0x10 [ 51.164226][ T5946] ? page_bad_reason+0x9d/0x1e0 [ 51.165520][ T5946] free_unref_page+0x657/0xdc0 [ 51.166815][ T5946] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 51.168398][ T5946] ? __phys_addr+0xc6/0x150 [ 51.169596][ T5946] skb_free_head+0xa0/0x1d0 [ 51.170819][ T5946] skb_release_data+0x560/0x730 [ 51.172107][ T5946] sk_skb_reason_drop+0x129/0x1a0 [ 51.173421][ T5946] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 51.175099][ T5946] ? kernel_text_address+0x8d/0x100 [ 51.176448][ T5946] ? hlock_class+0x4e/0x130 [ 51.177593][ T5946] ? __lock_acquire+0x163e/0x3ce0 [ 51.178880][ T5946] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 51.180643][ T5946] ? hlock_class+0x4e/0x130 [ 51.181793][ T5946] ? __lock_acquire+0xbdd/0x3ce0 [ 51.183010][ T5946] ? __pfx___lock_acquire+0x10/0x10 [ 51.184330][ T5946] __netif_receive_skb_list_core+0x357/0x950 [ 51.185882][ T5946] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 51.187591][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 51.188977][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 51.190625][ T5946] ? lock_acquire+0x2f/0xb0 [ 51.191833][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 51.193479][ T5946] netif_receive_skb_list_internal+0x753/0xdb0 [ 51.195118][ T5946] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 51.196862][ T5946] ? __pfx_eth_type_trans+0x10/0x10 [ 51.198235][ T5946] ? __build_skb_around+0x278/0x3b0 [ 51.199660][ T5946] netif_receive_skb_list+0x4f/0x4a0 [ 51.201058][ T5946] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 51.202717][ T5946] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 51.204477][ T5946] ? bpf_test_timer_continue+0x150/0x3d0 [ 51.205968][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 51.207368][ T5946] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 51.208908][ T5946] ? try_to_wake_up+0x154/0x14f0 [ 51.210221][ T5946] ? __pfx_try_to_wake_up+0x10/0x10 [ 51.211572][ T5946] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 51.213140][ T5946] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 51.214548][ T5946] ? 0xffffffffa0004340 [ 51.215680][ T5946] ? 0xffffffffa0004340 [ 51.216770][ T5946] ? 0xffffffffa0004340 [ 51.217835][ T5946] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 51.219352][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 51.220745][ T5946] ? lock_acquire+0x2f/0xb0 [ 51.221940][ T5946] ? __fget_files+0x40/0x3f0 [ 51.223131][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 51.224606][ T5946] ? fput+0x30/0x390 [ 51.225573][ T5946] ? __bpf_prog_get+0xa0/0x290 [ 51.226782][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 51.228277][ T5946] __sys_bpf+0xfc6/0x49a0 [ 51.229364][ T5946] ? find_held_lock+0x2d/0x110 [ 51.230559][ T5946] ? __pfx___sys_bpf+0x10/0x10 [ 51.231797][ T5946] ? __might_fault+0x13b/0x190 [ 51.233025][ T5946] ? __pfx_lock_release+0x10/0x10 [ 51.234308][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 51.235693][ T5946] ? lock_acquire+0x2f/0xb0 [ 51.236831][ T5946] ? __might_fault+0xe3/0x190 [ 51.237998][ T5946] ? xfd_validate_state+0x5d/0x180 [ 51.239291][ T5946] ? rcu_is_watching+0x12/0xc0 [ 51.240443][ T5946] __x64_sys_bpf+0x78/0xc0 [ 51.241562][ T5946] ? lockdep_hardirqs_on+0x7c/0x110 [ 51.242934][ T5946] do_syscall_64+0xcd/0x250 [ 51.244117][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.245646][ T5946] RIP: 0033:0x7f5102b5de99 [ 51.246838][ T5946] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 51.251648][ T5946] RSP: 002b:00007f5102b18228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 51.253743][ T5946] RAX: ffffffffffffffda RBX: 00007f5102be8328 RCX: 00007f5102b5de99 [ 51.255783][ T5946] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 51.257844][ T5946] RBP: 00007f5102be8320 R08: 00007f5102b186c0 R09: 00007f5102b186c0 [ 51.259875][ T5946] R10: 00007f5102b186c0 R11: 0000000000000246 R12: 00007f5102bb5074 [ 51.261931][ T5946] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffc619b1828 [ 51.263938][ T5946] [ 51.264822][ T5946] BUG: Bad page state in process syz-executor133 pfn:30e59 [ 51.266675][ T5946] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x3fec pfn:0x30e59 [ 51.269047][ T5946] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 51.271137][ T5946] raw: 00fff00000000000 dead000000000040 ffff8880202ae000 0000000000000000 [ 51.273369][ T5946] raw: 0000000000003fec 0000000000000001 00000000ffffffff 0000000000000000 [ 51.275560][ T5946] page dumped because: page_pool leak [ 51.276944][ T5946] page_owner tracks the page as allocated [ 51.278514][ T5946] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5946, tgid 5942 (syz-executor133), ts 44467661725, free_ts 40579540165 [ 51.283010][ T5946] post_alloc_hook+0x2d1/0x350 [ 51.284290][ T5946] get_page_from_freelist+0x101e/0x3070 [ 51.285948][ T5946] __alloc_pages_noprof+0x223/0x25a0 [ 51.287382][ T5946] alloc_pages_bulk_noprof+0x77c/0x1110 [ 51.288905][ T5946] __page_pool_alloc_pages_slow+0x18f/0x770 [ 51.290464][ T5946] page_pool_alloc_netmem+0xc4/0x160 [ 51.291862][ T5946] page_pool_alloc_pages+0x1a/0x60 [ 51.293215][ T5946] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 51.294885][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 51.296285][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 51.297719][ T5946] __sys_bpf+0xfc6/0x49a0 [ 51.298950][ T5946] __x64_sys_bpf+0x78/0xc0 [ 51.300140][ T5946] do_syscall_64+0xcd/0x250 [ 51.301353][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.302941][ T5946] page last free pid 5924 tgid 5924 stack trace: [ 51.304604][ T5946] free_unref_page+0x5f4/0xdc0 [ 51.305877][ T5946] __folio_put+0x30d/0x3d0 [ 51.307160][ T5946] put_page+0x21e/0x280 [ 51.308327][ T5946] anon_pipe_buf_release+0x11a/0x240 [ 51.309699][ T5946] pipe_read+0x641/0x13f0 [ 51.310800][ T5946] vfs_read+0xa4c/0xbe0 [ 51.311868][ T5946] ksys_read+0x1fa/0x260 [ 51.312955][ T5946] do_syscall_64+0xcd/0x250 [ 51.314110][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.315619][ T5946] Modules linked in: [ 51.316618][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: syz-executor133 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 51.319723][ T5946] Tainted: [B]=BAD_PAGE [ 51.320774][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 51.323454][ T5946] Call Trace: [ 51.324309][ T5946] [ 51.325069][ T5946] dump_stack_lvl+0x16c/0x1f0 [ 51.326267][ T5946] bad_page+0xb3/0x1f0 [ 51.327328][ T5946] ? __pfx_bad_page+0x10/0x10 [ 51.328522][ T5946] ? page_bad_reason+0x9d/0x1e0 [ 51.329753][ T5946] free_unref_page+0x657/0xdc0 [ 51.330970][ T5946] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 51.332446][ T5946] ? __phys_addr+0xc6/0x150 [ 51.333608][ T5946] skb_free_head+0xa0/0x1d0 [ 51.334795][ T5946] skb_release_data+0x560/0x730 [ 51.336032][ T5946] sk_skb_reason_drop+0x129/0x1a0 [ 51.337298][ T5946] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 51.338955][ T5946] ? kernel_text_address+0x8d/0x100 [ 51.340277][ T5946] ? hlock_class+0x4e/0x130 [ 51.341436][ T5946] ? __lock_acquire+0x163e/0x3ce0 [ 51.342738][ T5946] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 51.344576][ T5946] ? hlock_class+0x4e/0x130 [ 51.345765][ T5946] ? __lock_acquire+0xbdd/0x3ce0 [ 51.347074][ T5946] ? __pfx___lock_acquire+0x10/0x10 [ 51.348930][ T5946] __netif_receive_skb_list_core+0x357/0x950 [ 51.350521][ T5946] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 51.352321][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 51.353859][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 51.355540][ T5946] ? lock_acquire+0x2f/0xb0 [ 51.357043][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 51.358669][ T5946] netif_receive_skb_list_internal+0x753/0xdb0 [ 51.360520][ T5946] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 51.362250][ T5946] ? __pfx_eth_type_trans+0x10/0x10 [ 51.363629][ T5946] ? __build_skb_around+0x278/0x3b0 [ 51.364974][ T5946] netif_receive_skb_list+0x4f/0x4a0 [ 51.366349][ T5946] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 51.367979][ T5946] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 51.369728][ T5946] ? bpf_test_timer_continue+0x150/0x3d0 [ 51.371219][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 51.372622][ T5946] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 51.374168][ T5946] ? try_to_wake_up+0x154/0x14f0 [ 51.375494][ T5946] ? __pfx_try_to_wake_up+0x10/0x10 [ 51.376843][ T5946] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 51.378370][ T5946] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 51.379756][ T5946] ? 0xffffffffa0004340 [ 51.380826][ T5946] ? 0xffffffffa0004340 [ 51.381902][ T5946] ? 0xffffffffa0004340 [ 51.382968][ T5946] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 51.384521][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 51.385972][ T5946] ? lock_acquire+0x2f/0xb0 [ 51.387196][ T5946] ? __fget_files+0x40/0x3f0 [ 51.388441][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 51.389982][ T5946] ? fput+0x30/0x390 [ 51.391025][ T5946] ? __bpf_prog_get+0xa0/0x290 [ 51.392454][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 51.394039][ T5946] __sys_bpf+0xfc6/0x49a0 [ 51.395210][ T5946] ? find_held_lock+0x2d/0x110 [ 51.396491][ T5946] ? __pfx___sys_bpf+0x10/0x10 [ 51.397826][ T5946] ? __might_fault+0x13b/0x190 [ 51.399166][ T5946] ? __pfx_lock_release+0x10/0x10 [ 51.400556][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 51.401991][ T5946] ? lock_acquire+0x2f/0xb0 [ 51.403425][ T5946] ? __might_fault+0xe3/0x190 [ 51.404863][ T5946] ? xfd_validate_state+0x5d/0x180 [ 51.406315][ T5946] ? rcu_is_watching+0x12/0xc0 [ 51.407579][ T5946] __x64_sys_bpf+0x78/0xc0 [ 51.408760][ T5946] ? lockdep_hardirqs_on+0x7c/0x110 [ 51.410109][ T5946] do_syscall_64+0xcd/0x250 [ 51.411286][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.412806][ T5946] RIP: 0033:0x7f5102b5de99 [ 51.414044][ T5946] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 51.418947][ T5946] RSP: 002b:00007f5102b18228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 51.421152][ T5946] RAX: ffffffffffffffda RBX: 00007f5102be8328 RCX: 00007f5102b5de99 [ 51.423229][ T5946] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 51.425292][ T5946] RBP: 00007f5102be8320 R08: 00007f5102b186c0 R09: 00007f5102b186c0 [ 51.427571][ T5946] R10: 00007f5102b186c0 R11: 0000000000000246 R12: 00007f5102bb5074 [ 51.429698][ T5946] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffc619b1828 [ 51.431809][ T5946] [ 51.432746][ T5946] BUG: Bad page state in process syz-executor133 pfn:29302 [ 51.434692][ T5946] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x3feb pfn:0x29302 [ 51.437058][ T5946] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 51.438984][ T5946] raw: 00fff00000000000 dead000000000040 ffff8880202ae000 0000000000000000 [ 51.441215][ T5946] raw: 0000000000003feb 0000000000000001 00000000ffffffff 0000000000000000 [ 51.443446][ T5946] page dumped because: page_pool leak [ 51.444845][ T5946] page_owner tracks the page as allocated [ 51.446316][ T5946] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5946, tgid 5942 (syz-executor133), ts 44467653111, free_ts 40579562449 [ 51.450816][ T5946] post_alloc_hook+0x2d1/0x350 [ 51.452100][ T5946] get_page_from_freelist+0x101e/0x3070 [ 51.453552][ T5946] __alloc_pages_noprof+0x223/0x25a0 [ 51.454938][ T5946] alloc_pages_bulk_noprof+0x77c/0x1110 [ 51.456408][ T5946] __page_pool_alloc_pages_slow+0x18f/0x770 [ 51.458028][ T5946] page_pool_alloc_netmem+0xc4/0x160 [ 51.459565][ T5946] page_pool_alloc_pages+0x1a/0x60 [ 51.460949][ T5946] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 51.462593][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 51.464022][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 51.465462][ T5946] __sys_bpf+0xfc6/0x49a0 [ 51.466622][ T5946] __x64_sys_bpf+0x78/0xc0 [ 51.467866][ T5946] do_syscall_64+0xcd/0x250 [ 51.469080][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.470649][ T5946] page last free pid 5924 tgid 5924 stack trace: [ 51.472314][ T5946] free_unref_page+0x5f4/0xdc0 [ 51.473581][ T5946] __folio_put+0x30d/0x3d0 [ 51.474785][ T5946] put_page+0x21e/0x280 [ 51.475884][ T5946] anon_pipe_buf_release+0x11a/0x240 [ 51.477269][ T5946] pipe_read+0x641/0x13f0 [ 51.478463][ T5946] vfs_read+0xa4c/0xbe0 [ 51.479574][ T5946] ksys_read+0x1fa/0x260 [ 51.480712][ T5946] do_syscall_64+0xcd/0x250 [ 51.481918][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.483486][ T5946] Modules linked in: [ 51.484498][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: syz-executor133 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 51.487655][ T5946] Tainted: [B]=BAD_PAGE [ 51.488712][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 51.491744][ T5946] Call Trace: [ 51.492636][ T5946] [ 51.493441][ T5946] dump_stack_lvl+0x16c/0x1f0 [ 51.494902][ T5946] bad_page+0xb3/0x1f0 [ 51.496074][ T5946] ? __pfx_bad_page+0x10/0x10 [ 51.497341][ T5946] ? page_bad_reason+0x9d/0x1e0 [ 51.498606][ T5946] free_unref_page+0x657/0xdc0 [ 51.499847][ T5946] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 51.501417][ T5946] ? __phys_addr+0xc6/0x150 [ 51.502645][ T5946] skb_free_head+0xa0/0x1d0 [ 51.503879][ T5946] skb_release_data+0x560/0x730 [ 51.505189][ T5946] sk_skb_reason_drop+0x129/0x1a0 [ 51.506534][ T5946] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 51.508297][ T5946] ? kernel_text_address+0x8d/0x100 [ 51.510295][ T5946] ? hlock_class+0x4e/0x130 [ 51.511508][ T5946] ? __lock_acquire+0x163e/0x3ce0 [ 51.512847][ T5946] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 51.514734][ T5946] ? hlock_class+0x4e/0x130 [ 51.516213][ T5946] ? __lock_acquire+0xbdd/0x3ce0 [ 51.517597][ T5946] ? __pfx___lock_acquire+0x10/0x10 [ 51.518995][ T5946] __netif_receive_skb_list_core+0x357/0x950 [ 51.520593][ T5946] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 51.522304][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 51.523716][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 51.525390][ T5946] ? lock_acquire+0x2f/0xb0 [ 51.526616][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 51.528390][ T5946] netif_receive_skb_list_internal+0x753/0xdb0 [ 51.530038][ T5946] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 51.532052][ T5946] ? __pfx_eth_type_trans+0x10/0x10 [ 51.533426][ T5946] ? __build_skb_around+0x278/0x3b0 [ 51.534892][ T5946] netif_receive_skb_list+0x4f/0x4a0 [ 51.536398][ T5946] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 51.538016][ T5946] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 51.539818][ T5946] ? bpf_test_timer_continue+0x150/0x3d0 [ 51.541305][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 51.542765][ T5946] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 51.544332][ T5946] ? try_to_wake_up+0x154/0x14f0 [ 51.545666][ T5946] ? __pfx_try_to_wake_up+0x10/0x10 [ 51.547046][ T5946] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 51.548571][ T5946] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 51.549910][ T5946] ? 0xffffffffa0004340 [ 51.550959][ T5946] ? 0xffffffffa0004340 [ 51.552042][ T5946] ? 0xffffffffa0004340 [ 51.553208][ T5946] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 51.554757][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 51.556292][ T5946] ? lock_acquire+0x2f/0xb0 [ 51.557589][ T5946] ? __fget_files+0x40/0x3f0 [ 51.558832][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 51.560399][ T5946] ? fput+0x30/0x390 [ 51.561420][ T5946] ? __bpf_prog_get+0xa0/0x290 [ 51.562773][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 51.564396][ T5946] __sys_bpf+0xfc6/0x49a0 [ 51.565690][ T5946] ? find_held_lock+0x2d/0x110 [ 51.567095][ T5946] ? __pfx___sys_bpf+0x10/0x10 [ 51.568392][ T5946] ? __might_fault+0x13b/0x190 [ 51.569737][ T5946] ? __pfx_lock_release+0x10/0x10 [ 51.571359][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 51.573036][ T5946] ? lock_acquire+0x2f/0xb0 [ 51.574452][ T5946] ? __might_fault+0xe3/0x190 [ 51.575984][ T5946] ? xfd_validate_state+0x5d/0x180 [ 51.577491][ T5946] ? rcu_is_watching+0x12/0xc0 [ 51.578809][ T5946] __x64_sys_bpf+0x78/0xc0 [ 51.579950][ T5946] ? lockdep_hardirqs_on+0x7c/0x110 [ 51.581295][ T5946] do_syscall_64+0xcd/0x250 [ 51.582477][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.584029][ T5946] RIP: 0033:0x7f5102b5de99 [ 51.585241][ T5946] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 51.590046][ T5946] RSP: 002b:00007f5102b18228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 51.592168][ T5946] RAX: ffffffffffffffda RBX: 00007f5102be8328 RCX: 00007f5102b5de99 [ 51.594169][ T5946] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 51.596190][ T5946] RBP: 00007f5102be8320 R08: 00007f5102b186c0 R09: 00007f5102b186c0 [ 51.598342][ T5946] R10: 00007f5102b186c0 R11: 0000000000000246 R12: 00007f5102bb5074 [ 51.600354][ T5946] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffc619b1828 [ 51.602378][ T5946] [ 51.603302][ T5946] BUG: Bad page state in process syz-executor133 pfn:23430 [ 51.605192][ T5946] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x3fe9 pfn:0x23430 [ 51.607540][ T5946] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 51.609420][ T5946] raw: 00fff00000000000 dead000000000040 ffff8880202ae000 0000000000000000 [ 51.611740][ T5946] raw: 0000000000003fe9 0000000000000001 00000000ffffffff 0000000000000000 [ 51.614049][ T5946] page dumped because: page_pool leak [ 51.615479][ T5946] page_owner tracks the page as allocated [ 51.616915][ T5946] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5946, tgid 5942 (syz-executor133), ts 44467645396, free_ts 40579568608 [ 51.621367][ T5946] post_alloc_hook+0x2d1/0x350 [ 51.622650][ T5946] get_page_from_freelist+0x101e/0x3070 [ 51.624129][ T5946] __alloc_pages_noprof+0x223/0x25a0 [ 51.625534][ T5946] alloc_pages_bulk_noprof+0x77c/0x1110 [ 51.626990][ T5946] __page_pool_alloc_pages_slow+0x18f/0x770 [ 51.628585][ T5946] page_pool_alloc_netmem+0xc4/0x160 [ 51.629970][ T5946] page_pool_alloc_pages+0x1a/0x60 [ 51.631320][ T5946] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 51.632945][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 51.634333][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 51.635777][ T5946] __sys_bpf+0xfc6/0x49a0 [ 51.636919][ T5946] __x64_sys_bpf+0x78/0xc0 [ 51.638150][ T5946] do_syscall_64+0xcd/0x250 [ 51.639359][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.640927][ T5946] page last free pid 5924 tgid 5924 stack trace: [ 51.642584][ T5946] free_unref_page+0x5f4/0xdc0 [ 51.643885][ T5946] __folio_put+0x30d/0x3d0 [ 51.645092][ T5946] put_page+0x21e/0x280 [ 51.646190][ T5946] anon_pipe_buf_release+0x11a/0x240 [ 51.647583][ T5946] pipe_read+0x641/0x13f0 [ 51.648770][ T5946] vfs_read+0xa4c/0xbe0 [ 51.649871][ T5946] ksys_read+0x1fa/0x260 [ 51.650997][ T5946] do_syscall_64+0xcd/0x250 [ 51.652199][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.653736][ T5946] Modules linked in: [ 51.654863][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: syz-executor133 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 51.658228][ T5946] Tainted: [B]=BAD_PAGE [ 51.659301][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 51.662023][ T5946] Call Trace: [ 51.662899][ T5946] [ 51.663632][ T5946] dump_stack_lvl+0x16c/0x1f0 [ 51.664894][ T5946] bad_page+0xb3/0x1f0 [ 51.665943][ T5946] ? __pfx_bad_page+0x10/0x10 [ 51.667176][ T5946] ? page_bad_reason+0x9d/0x1e0 [ 51.668434][ T5946] free_unref_page+0x657/0xdc0 [ 51.669684][ T5946] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 51.671243][ T5946] ? __phys_addr+0xc6/0x150 [ 51.672407][ T5946] skb_free_head+0xa0/0x1d0 [ 51.673575][ T5946] skb_release_data+0x560/0x730 [ 51.674905][ T5946] sk_skb_reason_drop+0x129/0x1a0 [ 51.676198][ T5946] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 51.677897][ T5946] ? kernel_text_address+0x8d/0x100 [ 51.679251][ T5946] ? hlock_class+0x4e/0x130 [ 51.680465][ T5946] ? __lock_acquire+0x163e/0x3ce0 [ 51.681773][ T5946] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 51.683587][ T5946] ? hlock_class+0x4e/0x130 [ 51.684746][ T5946] ? __lock_acquire+0xbdd/0x3ce0 [ 51.686041][ T5946] ? __pfx___lock_acquire+0x10/0x10 [ 51.687353][ T5946] __netif_receive_skb_list_core+0x357/0x950 [ 51.688886][ T5946] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 51.690512][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 51.691960][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 51.693603][ T5946] ? lock_acquire+0x2f/0xb0 [ 51.694808][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 51.696430][ T5946] netif_receive_skb_list_internal+0x753/0xdb0 [ 51.698129][ T5946] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 51.699894][ T5946] ? __pfx_eth_type_trans+0x10/0x10 [ 51.701258][ T5946] ? __build_skb_around+0x278/0x3b0 [ 51.702608][ T5946] netif_receive_skb_list+0x4f/0x4a0 [ 51.703968][ T5946] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 51.705586][ T5946] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 51.707282][ T5946] ? bpf_test_timer_continue+0x150/0x3d0 [ 51.708727][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 51.710081][ T5946] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 51.711595][ T5946] ? try_to_wake_up+0x154/0x14f0 [ 51.712906][ T5946] ? __pfx_try_to_wake_up+0x10/0x10 [ 51.714240][ T5946] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 51.715776][ T5946] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 51.717127][ T5946] ? 0xffffffffa0004340 [ 51.718203][ T5946] ? 0xffffffffa0004340 [ 51.719286][ T5946] ? 0xffffffffa0004340 [ 51.720340][ T5946] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 51.721891][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 51.723270][ T5946] ? lock_acquire+0x2f/0xb0 [ 51.724460][ T5946] ? __fget_files+0x40/0x3f0 [ 51.725654][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 51.727152][ T5946] ? fput+0x30/0x390 [ 51.728155][ T5946] ? __bpf_prog_get+0xa0/0x290 [ 51.729372][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 51.731144][ T5946] __sys_bpf+0xfc6/0x49a0 [ 51.732297][ T5946] ? find_held_lock+0x2d/0x110 [ 51.733567][ T5946] ? __pfx___sys_bpf+0x10/0x10 [ 51.734859][ T5946] ? __might_fault+0x13b/0x190 [ 51.736274][ T5946] ? __pfx_lock_release+0x10/0x10 [ 51.737676][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 51.739056][ T5946] ? lock_acquire+0x2f/0xb0 [ 51.740273][ T5946] ? __might_fault+0xe3/0x190 [ 51.741512][ T5946] ? xfd_validate_state+0x5d/0x180 [ 51.742988][ T5946] ? rcu_is_watching+0x12/0xc0 [ 51.744283][ T5946] __x64_sys_bpf+0x78/0xc0 [ 51.745484][ T5946] ? lockdep_hardirqs_on+0x7c/0x110 [ 51.746897][ T5946] do_syscall_64+0xcd/0x250 [ 51.748119][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.749686][ T5946] RIP: 0033:0x7f5102b5de99 [ 51.750884][ T5946] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 51.755970][ T5946] RSP: 002b:00007f5102b18228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 51.758162][ T5946] RAX: ffffffffffffffda RBX: 00007f5102be8328 RCX: 00007f5102b5de99 [ 51.760248][ T5946] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 51.762334][ T5946] RBP: 00007f5102be8320 R08: 00007f5102b186c0 R09: 00007f5102b186c0 [ 51.764339][ T5946] R10: 00007f5102b186c0 R11: 0000000000000246 R12: 00007f5102bb5074 [ 51.766410][ T5946] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffc619b1828 [ 51.768518][ T5946] [ 51.769436][ T5946] BUG: Bad page state in process syz-executor133 pfn:3317a [ 51.771353][ T5946] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3317a [ 51.773645][ T5946] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 51.775558][ T5946] raw: 00fff00000000000 dead000000000040 ffff8880202ae000 0000000000000000 [ 51.777860][ T5946] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 51.780129][ T5946] page dumped because: page_pool leak [ 51.781538][ T5946] page_owner tracks the page as allocated [ 51.783070][ T5946] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5946, tgid 5942 (syz-executor133), ts 44467637230, free_ts 40579573334 [ 51.787535][ T5946] post_alloc_hook+0x2d1/0x350 [ 51.788855][ T5946] get_page_from_freelist+0x101e/0x3070 [ 51.790310][ T5946] __alloc_pages_noprof+0x223/0x25a0 [ 51.791721][ T5946] alloc_pages_bulk_noprof+0x77c/0x1110 [ 51.793178][ T5946] __page_pool_alloc_pages_slow+0x18f/0x770 [ 51.794720][ T5946] page_pool_alloc_netmem+0xc4/0x160 [ 51.796130][ T5946] page_pool_alloc_pages+0x1a/0x60 [ 51.797502][ T5946] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 51.799193][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 51.800589][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 51.802000][ T5946] __sys_bpf+0xfc6/0x49a0 [ 51.803163][ T5946] __x64_sys_bpf+0x78/0xc0 [ 51.804332][ T5946] do_syscall_64+0xcd/0x250 [ 51.805535][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.807211][ T5946] page last free pid 5924 tgid 5924 stack trace: [ 51.808944][ T5946] free_unref_page+0x5f4/0xdc0 [ 51.810224][ T5946] __folio_put+0x30d/0x3d0 [ 51.811436][ T5946] put_page+0x21e/0x280 [ 51.812534][ T5946] anon_pipe_buf_release+0x11a/0x240 [ 51.813928][ T5946] pipe_read+0x641/0x13f0 [ 51.815091][ T5946] vfs_read+0xa4c/0xbe0 [ 51.816203][ T5946] ksys_read+0x1fa/0x260 [ 51.817328][ T5946] do_syscall_64+0xcd/0x250 [ 51.818584][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.820169][ T5946] Modules linked in: [ 51.821198][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: syz-executor133 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 51.824441][ T5946] Tainted: [B]=BAD_PAGE [ 51.825531][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 51.828588][ T5946] Call Trace: [ 51.829489][ T5946] [ 51.830283][ T5946] dump_stack_lvl+0x16c/0x1f0 [ 51.831543][ T5946] bad_page+0xb3/0x1f0 [ 51.832625][ T5946] ? __pfx_bad_page+0x10/0x10 [ 51.833858][ T5946] ? page_bad_reason+0x9d/0x1e0 [ 51.835267][ T5946] free_unref_page+0x657/0xdc0 [ 51.836621][ T5946] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 51.838332][ T5946] ? __phys_addr+0xc6/0x150 [ 51.839566][ T5946] skb_free_head+0xa0/0x1d0 [ 51.840738][ T5946] skb_release_data+0x560/0x730 [ 51.841965][ T5946] sk_skb_reason_drop+0x129/0x1a0 [ 51.843286][ T5946] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 51.844989][ T5946] ? kernel_text_address+0x8d/0x100 [ 51.846318][ T5946] ? hlock_class+0x4e/0x130 [ 51.847502][ T5946] ? __lock_acquire+0x163e/0x3ce0 [ 51.848849][ T5946] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 51.850657][ T5946] ? hlock_class+0x4e/0x130 [ 51.851837][ T5946] ? __lock_acquire+0xbdd/0x3ce0 [ 51.853101][ T5946] ? __pfx___lock_acquire+0x10/0x10 [ 51.854419][ T5946] __netif_receive_skb_list_core+0x357/0x950 [ 51.856003][ T5946] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 51.857678][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 51.859072][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 51.860696][ T5946] ? lock_acquire+0x2f/0xb0 [ 51.861852][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 51.863469][ T5946] netif_receive_skb_list_internal+0x753/0xdb0 [ 51.865052][ T5946] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 51.866700][ T5946] ? __pfx_eth_type_trans+0x10/0x10 [ 51.868072][ T5946] ? __build_skb_around+0x278/0x3b0 [ 51.869505][ T5946] netif_receive_skb_list+0x4f/0x4a0 [ 51.871289][ T5946] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 51.872865][ T5946] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 51.874541][ T5946] ? bpf_test_timer_continue+0x150/0x3d0 [ 51.875973][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 51.877361][ T5946] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 51.878850][ T5946] ? try_to_wake_up+0x154/0x14f0 [ 51.880117][ T5946] ? __pfx_try_to_wake_up+0x10/0x10 [ 51.881431][ T5946] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 51.882949][ T5946] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 51.884310][ T5946] ? 0xffffffffa0004340 [ 51.885407][ T5946] ? 0xffffffffa0004340 [ 51.886486][ T5946] ? 0xffffffffa0004340 [ 51.887534][ T5946] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 51.889027][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 51.890398][ T5946] ? lock_acquire+0x2f/0xb0 [ 51.891605][ T5946] ? __fget_files+0x40/0x3f0 [ 51.892834][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 51.894359][ T5946] ? fput+0x30/0x390 [ 51.895409][ T5946] ? __bpf_prog_get+0xa0/0x290 [ 51.896646][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 51.898161][ T5946] __sys_bpf+0xfc6/0x49a0 [ 51.899311][ T5946] ? find_held_lock+0x2d/0x110 [ 51.900696][ T5946] ? __pfx___sys_bpf+0x10/0x10 [ 51.901985][ T5946] ? __might_fault+0x13b/0x190 [ 51.903273][ T5946] ? __pfx_lock_release+0x10/0x10 [ 51.904616][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 51.906003][ T5946] ? lock_acquire+0x2f/0xb0 [ 51.907164][ T5946] ? __might_fault+0xe3/0x190 [ 51.908443][ T5946] ? xfd_validate_state+0x5d/0x180 [ 51.909706][ T5946] ? rcu_is_watching+0x12/0xc0 [ 51.910933][ T5946] __x64_sys_bpf+0x78/0xc0 [ 51.912106][ T5946] ? lockdep_hardirqs_on+0x7c/0x110 [ 51.913469][ T5946] do_syscall_64+0xcd/0x250 [ 51.914625][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.916110][ T5946] RIP: 0033:0x7f5102b5de99 [ 51.917272][ T5946] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 51.921922][ T5946] RSP: 002b:00007f5102b18228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 51.924059][ T5946] RAX: ffffffffffffffda RBX: 00007f5102be8328 RCX: 00007f5102b5de99 [ 51.926125][ T5946] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 51.928239][ T5946] RBP: 00007f5102be8320 R08: 00007f5102b186c0 R09: 00007f5102b186c0 [ 51.930387][ T5946] R10: 00007f5102b186c0 R11: 0000000000000246 R12: 00007f5102bb5074 [ 51.932437][ T5946] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffc619b1828 [ 51.934619][ T5946] [ 51.935582][ T5946] BUG: Bad page state in process syz-executor133 pfn:36025 [ 51.937467][ T5946] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x36025 [ 51.940063][ T5946] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 51.941870][ T5946] raw: 00fff00000000000 dead000000000040 ffff8880202ae000 0000000000000000 [ 51.944047][ T5946] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 51.946247][ T5946] page dumped because: page_pool leak [ 51.947652][ T5946] page_owner tracks the page as allocated [ 51.949188][ T5946] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5946, tgid 5942 (syz-executor133), ts 44467628811, free_ts 40579577652 [ 51.953559][ T5946] post_alloc_hook+0x2d1/0x350 [ 51.954911][ T5946] get_page_from_freelist+0x101e/0x3070 [ 51.956434][ T5946] __alloc_pages_noprof+0x223/0x25a0 [ 51.957990][ T5946] alloc_pages_bulk_noprof+0x77c/0x1110 [ 51.959436][ T5946] __page_pool_alloc_pages_slow+0x18f/0x770 [ 51.960972][ T5946] page_pool_alloc_netmem+0xc4/0x160 [ 51.962356][ T5946] page_pool_alloc_pages+0x1a/0x60 [ 51.963661][ T5946] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 51.965234][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 51.966570][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 51.968004][ T5946] __sys_bpf+0xfc6/0x49a0 [ 51.969107][ T5946] __x64_sys_bpf+0x78/0xc0 [ 51.970277][ T5946] do_syscall_64+0xcd/0x250 [ 51.971455][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.972971][ T5946] page last free pid 5924 tgid 5924 stack trace: [ 51.974602][ T5946] free_unref_page+0x5f4/0xdc0 [ 51.975884][ T5946] __folio_put+0x30d/0x3d0 [ 51.977080][ T5946] put_page+0x21e/0x280 [ 51.978238][ T5946] anon_pipe_buf_release+0x11a/0x240 [ 51.979636][ T5946] pipe_read+0x641/0x13f0 [ 51.980784][ T5946] vfs_read+0xa4c/0xbe0 [ 51.981897][ T5946] ksys_read+0x1fa/0x260 [ 51.983028][ T5946] do_syscall_64+0xcd/0x250 [ 51.984231][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.985794][ T5946] Modules linked in: [ 51.986838][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: syz-executor133 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 51.990364][ T5946] Tainted: [B]=BAD_PAGE [ 51.991437][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 51.994133][ T5946] Call Trace: [ 51.995010][ T5946] [ 51.995790][ T5946] dump_stack_lvl+0x16c/0x1f0 [ 51.997031][ T5946] bad_page+0xb3/0x1f0 [ 51.998128][ T5946] ? __pfx_bad_page+0x10/0x10 [ 51.999391][ T5946] ? page_bad_reason+0x9d/0x1e0 [ 52.000687][ T5946] free_unref_page+0x657/0xdc0 [ 52.001954][ T5946] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 52.003542][ T5946] ? __phys_addr+0xc6/0x150 [ 52.004746][ T5946] skb_free_head+0xa0/0x1d0 [ 52.005950][ T5946] skb_release_data+0x560/0x730 [ 52.007250][ T5946] sk_skb_reason_drop+0x129/0x1a0 [ 52.008565][ T5946] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 52.010271][ T5946] ? kernel_text_address+0x8d/0x100 [ 52.011601][ T5946] ? hlock_class+0x4e/0x130 [ 52.012795][ T5946] ? __lock_acquire+0x163e/0x3ce0 [ 52.014111][ T5946] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 52.015974][ T5946] ? hlock_class+0x4e/0x130 [ 52.017169][ T5946] ? __lock_acquire+0xbdd/0x3ce0 [ 52.018468][ T5946] ? __pfx___lock_acquire+0x10/0x10 [ 52.019835][ T5946] __netif_receive_skb_list_core+0x357/0x950 [ 52.021408][ T5946] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 52.023299][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 52.024699][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 52.026382][ T5946] ? lock_acquire+0x2f/0xb0 [ 52.027608][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 52.029304][ T5946] netif_receive_skb_list_internal+0x753/0xdb0 [ 52.030950][ T5946] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 52.032709][ T5946] ? __pfx_eth_type_trans+0x10/0x10 [ 52.034093][ T5946] ? __build_skb_around+0x278/0x3b0 [ 52.035502][ T5946] netif_receive_skb_list+0x4f/0x4a0 [ 52.036903][ T5946] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 52.038553][ T5946] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 52.040449][ T5946] ? bpf_test_timer_continue+0x150/0x3d0 [ 52.041954][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 52.043386][ T5946] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 52.044934][ T5946] ? try_to_wake_up+0x154/0x14f0 [ 52.046255][ T5946] ? __pfx_try_to_wake_up+0x10/0x10 [ 52.047632][ T5946] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 52.049141][ T5946] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 52.050490][ T5946] ? 0xffffffffa0004340 [ 52.051562][ T5946] ? 0xffffffffa0004340 [ 52.052624][ T5946] ? 0xffffffffa0004340 [ 52.053660][ T5946] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 52.055168][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 52.056534][ T5946] ? lock_acquire+0x2f/0xb0 [ 52.057706][ T5946] ? __fget_files+0x40/0x3f0 [ 52.058934][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 52.060453][ T5946] ? fput+0x30/0x390 [ 52.061494][ T5946] ? __bpf_prog_get+0xa0/0x290 [ 52.062765][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 52.064245][ T5946] __sys_bpf+0xfc6/0x49a0 [ 52.065352][ T5946] ? find_held_lock+0x2d/0x110 [ 52.066567][ T5946] ? __pfx___sys_bpf+0x10/0x10 [ 52.067794][ T5946] ? __might_fault+0x13b/0x190 [ 52.069063][ T5946] ? __pfx_lock_release+0x10/0x10 [ 52.070325][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 52.071645][ T5946] ? lock_acquire+0x2f/0xb0 [ 52.072799][ T5946] ? __might_fault+0xe3/0x190 [ 52.073989][ T5946] ? xfd_validate_state+0x5d/0x180 [ 52.075324][ T5946] ? rcu_is_watching+0x12/0xc0 [ 52.076574][ T5946] __x64_sys_bpf+0x78/0xc0 [ 52.077699][ T5946] ? lockdep_hardirqs_on+0x7c/0x110 [ 52.079095][ T5946] do_syscall_64+0xcd/0x250 [ 52.080300][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.081822][ T5946] RIP: 0033:0x7f5102b5de99 [ 52.083011][ T5946] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 52.087934][ T5946] RSP: 002b:00007f5102b18228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 52.090098][ T5946] RAX: ffffffffffffffda RBX: 00007f5102be8328 RCX: 00007f5102b5de99 [ 52.092403][ T5946] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 52.095008][ T5946] RBP: 00007f5102be8320 R08: 00007f5102b186c0 R09: 00007f5102b186c0 [ 52.097154][ T5946] R10: 00007f5102b186c0 R11: 0000000000000246 R12: 00007f5102bb5074 [ 52.099276][ T5946] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffc619b1828 [ 52.101300][ T5946] [ 52.102202][ T5946] BUG: Bad page state in process syz-executor133 pfn:238a3 [ 52.104069][ T5946] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880238a3500 pfn:0x238a3 [ 52.106610][ T5946] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 52.108479][ T5946] raw: 00fff00000000000 dead000000000040 ffff8880202ae000 0000000000000000 [ 52.110631][ T5946] raw: ffff8880238a3500 0000000000000001 00000000ffffffff 0000000000000000 [ 52.112815][ T5946] page dumped because: page_pool leak [ 52.114217][ T5946] page_owner tracks the page as allocated [ 52.115679][ T5946] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5946, tgid 5942 (syz-executor133), ts 44467620340, free_ts 40579588313 [ 52.120000][ T5946] post_alloc_hook+0x2d1/0x350 [ 52.121225][ T5946] get_page_from_freelist+0x101e/0x3070 [ 52.122664][ T5946] __alloc_pages_noprof+0x223/0x25a0 [ 52.124010][ T5946] alloc_pages_bulk_noprof+0x77c/0x1110 [ 52.125427][ T5946] __page_pool_alloc_pages_slow+0x18f/0x770 [ 52.126948][ T5946] page_pool_alloc_netmem+0xc4/0x160 [ 52.128350][ T5946] page_pool_alloc_pages+0x1a/0x60 [ 52.129649][ T5946] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 52.131234][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 52.132582][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 52.133982][ T5946] __sys_bpf+0xfc6/0x49a0 [ 52.135151][ T5946] __x64_sys_bpf+0x78/0xc0 [ 52.136333][ T5946] do_syscall_64+0xcd/0x250 [ 52.137545][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.139166][ T5946] page last free pid 5924 tgid 5924 stack trace: [ 52.140834][ T5946] free_unref_page+0x5f4/0xdc0 [ 52.142111][ T5946] __folio_put+0x30d/0x3d0 [ 52.143305][ T5946] put_page+0x21e/0x280 [ 52.144613][ T5946] anon_pipe_buf_release+0x11a/0x240 [ 52.146006][ T5946] pipe_read+0x641/0x13f0 [ 52.147151][ T5946] vfs_read+0xa4c/0xbe0 [ 52.148308][ T5946] ksys_read+0x1fa/0x260 [ 52.149394][ T5946] do_syscall_64+0xcd/0x250 [ 52.150587][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.152152][ T5946] Modules linked in: [ 52.153155][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: syz-executor133 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 52.156302][ T5946] Tainted: [B]=BAD_PAGE [ 52.157382][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 52.160146][ T5946] Call Trace: [ 52.160990][ T5946] [ 52.161757][ T5946] dump_stack_lvl+0x16c/0x1f0 [ 52.162981][ T5946] bad_page+0xb3/0x1f0 [ 52.164018][ T5946] ? __pfx_bad_page+0x10/0x10 [ 52.165251][ T5946] ? page_bad_reason+0x9d/0x1e0 [ 52.166475][ T5946] free_unref_page+0x657/0xdc0 [ 52.167703][ T5946] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 52.169178][ T5946] ? __phys_addr+0xc6/0x150 [ 52.170358][ T5946] skb_free_head+0xa0/0x1d0 [ 52.171535][ T5946] skb_release_data+0x560/0x730 [ 52.172778][ T5946] sk_skb_reason_drop+0x129/0x1a0 [ 52.174064][ T5946] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 52.175733][ T5946] ? kernel_text_address+0x8d/0x100 [ 52.177068][ T5946] ? hlock_class+0x4e/0x130 [ 52.178246][ T5946] ? __lock_acquire+0x163e/0x3ce0 [ 52.179634][ T5946] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 52.181440][ T5946] ? hlock_class+0x4e/0x130 [ 52.182686][ T5946] ? __lock_acquire+0xbdd/0x3ce0 [ 52.184016][ T5946] ? __pfx___lock_acquire+0x10/0x10 [ 52.185372][ T5946] __netif_receive_skb_list_core+0x357/0x950 [ 52.186918][ T5946] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 52.188599][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 52.189964][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 52.191616][ T5946] ? lock_acquire+0x2f/0xb0 [ 52.192797][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 52.194455][ T5946] netif_receive_skb_list_internal+0x753/0xdb0 [ 52.196108][ T5946] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 52.197797][ T5946] ? __pfx_eth_type_trans+0x10/0x10 [ 52.199164][ T5946] ? __build_skb_around+0x278/0x3b0 [ 52.200513][ T5946] netif_receive_skb_list+0x4f/0x4a0 [ 52.201901][ T5946] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 52.203519][ T5946] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 52.205210][ T5946] ? bpf_test_timer_continue+0x150/0x3d0 [ 52.206642][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 52.208030][ T5946] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 52.209550][ T5946] ? try_to_wake_up+0x154/0x14f0 [ 52.210838][ T5946] ? __pfx_try_to_wake_up+0x10/0x10 [ 52.212209][ T5946] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 52.213772][ T5946] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 52.215192][ T5946] ? 0xffffffffa0004340 [ 52.216293][ T5946] ? 0xffffffffa0004340 [ 52.217395][ T5946] ? 0xffffffffa0004340 [ 52.218488][ T5946] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 52.220058][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 52.221480][ T5946] ? lock_acquire+0x2f/0xb0 [ 52.222687][ T5946] ? __fget_files+0x40/0x3f0 [ 52.223927][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 52.225465][ T5946] ? fput+0x30/0x390 [ 52.226511][ T5946] ? __bpf_prog_get+0xa0/0x290 [ 52.227798][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 52.229332][ T5946] __sys_bpf+0xfc6/0x49a0 [ 52.230451][ T5946] ? find_held_lock+0x2d/0x110 [ 52.231691][ T5946] ? __pfx___sys_bpf+0x10/0x10 [ 52.232930][ T5946] ? __might_fault+0x13b/0x190 [ 52.234148][ T5946] ? __pfx_lock_release+0x10/0x10 [ 52.235370][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 52.236738][ T5946] ? lock_acquire+0x2f/0xb0 [ 52.237951][ T5946] ? __might_fault+0xe3/0x190 [ 52.239210][ T5946] ? xfd_validate_state+0x5d/0x180 [ 52.240546][ T5946] ? rcu_is_watching+0x12/0xc0 [ 52.241816][ T5946] __x64_sys_bpf+0x78/0xc0 [ 52.242963][ T5946] ? lockdep_hardirqs_on+0x7c/0x110 [ 52.244331][ T5946] do_syscall_64+0xcd/0x250 [ 52.245552][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.247146][ T5946] RIP: 0033:0x7f5102b5de99 [ 52.248339][ T5946] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 52.253265][ T5946] RSP: 002b:00007f5102b18228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 52.255444][ T5946] RAX: ffffffffffffffda RBX: 00007f5102be8328 RCX: 00007f5102b5de99 [ 52.257465][ T5946] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 52.259565][ T5946] RBP: 00007f5102be8320 R08: 00007f5102b186c0 R09: 00007f5102b186c0 [ 52.261642][ T5946] R10: 00007f5102b186c0 R11: 0000000000000246 R12: 00007f5102bb5074 [ 52.263762][ T5946] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffc619b1828 [ 52.265823][ T5946] [ 52.266773][ T5946] BUG: Bad page state in process syz-executor133 pfn:23611 [ 52.268716][ T5946] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x8 pfn:0x23611 [ 52.271015][ T5946] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 52.272980][ T5946] raw: 00fff00000000000 dead000000000040 ffff8880202ae000 0000000000000000 [ 52.275391][ T5946] raw: 0000000000000008 0000000000000001 00000000ffffffff 0000000000000000 [ 52.277643][ T5946] page dumped because: page_pool leak [ 52.279116][ T5946] page_owner tracks the page as allocated [ 52.280602][ T5946] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5946, tgid 5942 (syz-executor133), ts 44467613234, free_ts 40579593387 [ 52.285035][ T5946] post_alloc_hook+0x2d1/0x350 [ 52.286303][ T5946] get_page_from_freelist+0x101e/0x3070 [ 52.287826][ T5946] __alloc_pages_noprof+0x223/0x25a0 [ 52.289217][ T5946] alloc_pages_bulk_noprof+0x77c/0x1110 [ 52.290667][ T5946] __page_pool_alloc_pages_slow+0x18f/0x770 [ 52.292234][ T5946] page_pool_alloc_netmem+0xc4/0x160 [ 52.293584][ T5946] page_pool_alloc_pages+0x1a/0x60 [ 52.294953][ T5946] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 52.296562][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 52.298004][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 52.299426][ T5946] __sys_bpf+0xfc6/0x49a0 [ 52.300593][ T5946] __x64_sys_bpf+0x78/0xc0 [ 52.301768][ T5946] do_syscall_64+0xcd/0x250 [ 52.302980][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.304531][ T5946] page last free pid 5924 tgid 5924 stack trace: [ 52.306182][ T5946] free_unref_page+0x5f4/0xdc0 [ 52.307469][ T5946] __folio_put+0x30d/0x3d0 [ 52.308704][ T5946] put_page+0x21e/0x280 [ 52.309802][ T5946] anon_pipe_buf_release+0x11a/0x240 [ 52.311193][ T5946] pipe_read+0x641/0x13f0 [ 52.312334][ T5946] vfs_read+0xa4c/0xbe0 [ 52.313674][ T5946] ksys_read+0x1fa/0x260 [ 52.314897][ T5946] do_syscall_64+0xcd/0x250 [ 52.316115][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.317689][ T5946] Modules linked in: [ 52.318892][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: syz-executor133 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 52.322198][ T5946] Tainted: [B]=BAD_PAGE [ 52.323329][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 52.326139][ T5946] Call Trace: [ 52.327026][ T5946] [ 52.327791][ T5946] dump_stack_lvl+0x16c/0x1f0 [ 52.329051][ T5946] bad_page+0xb3/0x1f0 [ 52.330141][ T5946] ? __pfx_bad_page+0x10/0x10 [ 52.331391][ T5946] ? page_bad_reason+0x9d/0x1e0 [ 52.332683][ T5946] free_unref_page+0x657/0xdc0 [ 52.333948][ T5946] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 52.335546][ T5946] ? __phys_addr+0xc6/0x150 [ 52.336740][ T5946] skb_free_head+0xa0/0x1d0 [ 52.337960][ T5946] skb_release_data+0x560/0x730 [ 52.339289][ T5946] sk_skb_reason_drop+0x129/0x1a0 [ 52.340576][ T5946] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 52.342316][ T5946] ? kernel_text_address+0x8d/0x100 [ 52.343712][ T5946] ? hlock_class+0x4e/0x130 [ 52.344868][ T5946] ? __lock_acquire+0x163e/0x3ce0 [ 52.346178][ T5946] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 52.348011][ T5946] ? hlock_class+0x4e/0x130 [ 52.349209][ T5946] ? __lock_acquire+0xbdd/0x3ce0 [ 52.350510][ T5946] ? __pfx___lock_acquire+0x10/0x10 [ 52.351871][ T5946] __netif_receive_skb_list_core+0x357/0x950 [ 52.353452][ T5946] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 52.355178][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 52.356492][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 52.358140][ T5946] ? lock_acquire+0x2f/0xb0 [ 52.359366][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 52.361029][ T5946] netif_receive_skb_list_internal+0x753/0xdb0 [ 52.362617][ T5946] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 52.364367][ T5946] ? __pfx_eth_type_trans+0x10/0x10 [ 52.365703][ T5946] ? __build_skb_around+0x278/0x3b0 [ 52.367025][ T5946] netif_receive_skb_list+0x4f/0x4a0 [ 52.368420][ T5946] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 52.370066][ T5946] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 52.371795][ T5946] ? bpf_test_timer_continue+0x150/0x3d0 [ 52.373348][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 52.374791][ T5946] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 52.376656][ T5946] ? try_to_wake_up+0x154/0x14f0 [ 52.377997][ T5946] ? __pfx_try_to_wake_up+0x10/0x10 [ 52.379427][ T5946] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 52.380998][ T5946] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 52.382407][ T5946] ? 0xffffffffa0004340 [ 52.383540][ T5946] ? 0xffffffffa0004340 [ 52.384647][ T5946] ? 0xffffffffa0004340 [ 52.385772][ T5946] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 52.387378][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 52.388810][ T5946] ? lock_acquire+0x2f/0xb0 [ 52.390016][ T5946] ? __fget_files+0x40/0x3f0 [ 52.391370][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 52.392932][ T5946] ? fput+0x30/0x390 [ 52.393975][ T5946] ? __bpf_prog_get+0xa0/0x290 [ 52.395277][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 52.396814][ T5946] __sys_bpf+0xfc6/0x49a0 [ 52.397960][ T5946] ? find_held_lock+0x2d/0x110 [ 52.399228][ T5946] ? __pfx___sys_bpf+0x10/0x10 [ 52.400496][ T5946] ? __might_fault+0x13b/0x190 [ 52.401767][ T5946] ? __pfx_lock_release+0x10/0x10 [ 52.403102][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 52.404443][ T5946] ? lock_acquire+0x2f/0xb0 [ 52.405635][ T5946] ? __might_fault+0xe3/0x190 [ 52.406892][ T5946] ? xfd_validate_state+0x5d/0x180 [ 52.408217][ T5946] ? rcu_is_watching+0x12/0xc0 [ 52.409502][ T5946] __x64_sys_bpf+0x78/0xc0 [ 52.410693][ T5946] ? lockdep_hardirqs_on+0x7c/0x110 [ 52.412106][ T5946] do_syscall_64+0xcd/0x250 [ 52.413327][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.414902][ T5946] RIP: 0033:0x7f5102b5de99 [ 52.416077][ T5946] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 52.421121][ T5946] RSP: 002b:00007f5102b18228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 52.423561][ T5946] RAX: ffffffffffffffda RBX: 00007f5102be8328 RCX: 00007f5102b5de99 [ 52.425714][ T5946] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 52.428053][ T5946] RBP: 00007f5102be8320 R08: 00007f5102b186c0 R09: 00007f5102b186c0 [ 52.430465][ T5946] R10: 00007f5102b186c0 R11: 0000000000000246 R12: 00007f5102bb5074 [ 52.432608][ T5946] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffc619b1828 [ 52.434882][ T5946] [ 52.435801][ T5946] BUG: Bad page state in process syz-executor133 pfn:258b9 [ 52.437903][ T5946] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x8 pfn:0x258b9 [ 52.440275][ T5946] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 52.442129][ T5946] raw: 00fff00000000000 dead000000000040 ffff8880202ae000 0000000000000000 [ 52.444392][ T5946] raw: 0000000000000008 0000000000000001 00000000ffffffff 0000000000000000 [ 52.446646][ T5946] page dumped because: page_pool leak [ 52.448145][ T5946] page_owner tracks the page as allocated [ 52.449650][ T5946] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5946, tgid 5942 (syz-executor133), ts 44467605317, free_ts 40579597638 [ 52.454216][ T5946] post_alloc_hook+0x2d1/0x350 [ 52.455674][ T5946] get_page_from_freelist+0x101e/0x3070 [ 52.457268][ T5946] __alloc_pages_noprof+0x223/0x25a0 [ 52.459003][ T5946] alloc_pages_bulk_noprof+0x77c/0x1110 [ 52.460665][ T5946] __page_pool_alloc_pages_slow+0x18f/0x770 [ 52.462623][ T5946] page_pool_alloc_netmem+0xc4/0x160 [ 52.464358][ T5946] page_pool_alloc_pages+0x1a/0x60 [ 52.465820][ T5946] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 52.467456][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 52.468893][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 52.470342][ T5946] __sys_bpf+0xfc6/0x49a0 [ 52.471525][ T5946] __x64_sys_bpf+0x78/0xc0 [ 52.472715][ T5946] do_syscall_64+0xcd/0x250 [ 52.473934][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.475529][ T5946] page last free pid 5924 tgid 5924 stack trace: [ 52.477202][ T5946] free_unref_page+0x5f4/0xdc0 [ 52.478532][ T5946] __folio_put+0x30d/0x3d0 [ 52.479743][ T5946] put_page+0x21e/0x280 [ 52.480843][ T5946] anon_pipe_buf_release+0x11a/0x240 [ 52.482270][ T5946] pipe_read+0x641/0x13f0 [ 52.483434][ T5946] vfs_read+0xa4c/0xbe0 [ 52.484518][ T5946] ksys_read+0x1fa/0x260 [ 52.485647][ T5946] do_syscall_64+0xcd/0x250 [ 52.486867][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.488495][ T5946] Modules linked in: [ 52.489546][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: syz-executor133 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 52.492808][ T5946] Tainted: [B]=BAD_PAGE [ 52.493913][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 52.496755][ T5946] Call Trace: [ 52.497670][ T5946] [ 52.498490][ T5946] dump_stack_lvl+0x16c/0x1f0 [ 52.499722][ T5946] bad_page+0xb3/0x1f0 [ 52.500871][ T5946] ? __pfx_bad_page+0x10/0x10 [ 52.502230][ T5946] ? page_bad_reason+0x9d/0x1e0 [ 52.503587][ T5946] free_unref_page+0x657/0xdc0 [ 52.504917][ T5946] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 52.506872][ T5946] ? __phys_addr+0xc6/0x150 [ 52.508439][ T5946] skb_free_head+0xa0/0x1d0 [ 52.510019][ T5946] skb_release_data+0x560/0x730 [ 52.511602][ T5946] sk_skb_reason_drop+0x129/0x1a0 [ 52.513175][ T5946] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 52.515296][ T5946] ? kernel_text_address+0x8d/0x100 [ 52.516913][ T5946] ? hlock_class+0x4e/0x130 [ 52.518129][ T5946] ? __lock_acquire+0x163e/0x3ce0 [ 52.519487][ T5946] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 52.521357][ T5946] ? hlock_class+0x4e/0x130 [ 52.522559][ T5946] ? __lock_acquire+0xbdd/0x3ce0 [ 52.523886][ T5946] ? __pfx___lock_acquire+0x10/0x10 [ 52.525264][ T5946] __netif_receive_skb_list_core+0x357/0x950 [ 52.526877][ T5946] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 52.528578][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 52.529954][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 52.531618][ T5946] ? lock_acquire+0x2f/0xb0 [ 52.532820][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 52.534390][ T5946] netif_receive_skb_list_internal+0x753/0xdb0 [ 52.536292][ T5946] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 52.538205][ T5946] ? __pfx_eth_type_trans+0x10/0x10 [ 52.539598][ T5946] ? __build_skb_around+0x278/0x3b0 [ 52.541004][ T5946] netif_receive_skb_list+0x4f/0x4a0 [ 52.542502][ T5946] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 52.544306][ T5946] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 52.546172][ T5946] ? bpf_test_timer_continue+0x150/0x3d0 [ 52.547664][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 52.549123][ T5946] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 52.550727][ T5946] ? try_to_wake_up+0x154/0x14f0 [ 52.552073][ T5946] ? __pfx_try_to_wake_up+0x10/0x10 [ 52.553422][ T5946] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 52.554974][ T5946] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 52.556352][ T5946] ? 0xffffffffa0004340 [ 52.557541][ T5946] ? 0xffffffffa0004340 [ 52.558697][ T5946] ? 0xffffffffa0004340 [ 52.559849][ T5946] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 52.561513][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 52.563054][ T5946] ? lock_acquire+0x2f/0xb0 [ 52.564317][ T5946] ? __fget_files+0x40/0x3f0 [ 52.565583][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 52.567201][ T5946] ? fput+0x30/0x390 [ 52.568235][ T5946] ? __bpf_prog_get+0xa0/0x290 [ 52.569449][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 52.570933][ T5946] __sys_bpf+0xfc6/0x49a0 [ 52.572004][ T5946] ? find_held_lock+0x2d/0x110 [ 52.573257][ T5946] ? __pfx___sys_bpf+0x10/0x10 [ 52.574592][ T5946] ? __might_fault+0x13b/0x190 [ 52.575906][ T5946] ? __pfx_lock_release+0x10/0x10 [ 52.577284][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 52.578595][ T5946] ? lock_acquire+0x2f/0xb0 [ 52.579854][ T5946] ? __might_fault+0xe3/0x190 [ 52.581107][ T5946] ? xfd_validate_state+0x5d/0x180 [ 52.582516][ T5946] ? rcu_is_watching+0x12/0xc0 [ 52.583867][ T5946] __x64_sys_bpf+0x78/0xc0 [ 52.585096][ T5946] ? lockdep_hardirqs_on+0x7c/0x110 [ 52.586511][ T5946] do_syscall_64+0xcd/0x250 [ 52.587783][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.589339][ T5946] RIP: 0033:0x7f5102b5de99 [ 52.590520][ T5946] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 52.595562][ T5946] RSP: 002b:00007f5102b18228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 52.597756][ T5946] RAX: ffffffffffffffda RBX: 00007f5102be8328 RCX: 00007f5102b5de99 [ 52.599825][ T5946] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 52.601895][ T5946] RBP: 00007f5102be8320 R08: 00007f5102b186c0 R09: 00007f5102b186c0 [ 52.603935][ T5946] R10: 00007f5102b186c0 R11: 0000000000000246 R12: 00007f5102bb5074 [ 52.606033][ T5946] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffc619b1828 [ 52.608194][ T5946] [ 52.609167][ T5946] BUG: Bad page state in process syz-executor133 pfn:20400 [ 52.611211][ T5946] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888020400d90 pfn:0x20400 [ 52.614056][ T5946] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 52.616072][ T5946] raw: 00fff00000000000 dead000000000040 ffff8880202ae000 0000000000000000 [ 52.618417][ T5946] raw: ffff888020400d90 0000000000000001 00000000ffffffff 0000000000000000 [ 52.620684][ T5946] page dumped because: page_pool leak [ 52.622076][ T5946] page_owner tracks the page as allocated [ 52.623590][ T5946] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5946, tgid 5942 (syz-executor133), ts 44467596800, free_ts 40579602376 [ 52.628097][ T5946] post_alloc_hook+0x2d1/0x350 [ 52.629388][ T5946] get_page_from_freelist+0x101e/0x3070 [ 52.630860][ T5946] __alloc_pages_noprof+0x223/0x25a0 [ 52.632240][ T5946] alloc_pages_bulk_noprof+0x77c/0x1110 [ 52.633703][ T5946] __page_pool_alloc_pages_slow+0x18f/0x770 [ 52.635337][ T5946] page_pool_alloc_netmem+0xc4/0x160 [ 52.637106][ T5946] page_pool_alloc_pages+0x1a/0x60 [ 52.638757][ T5946] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 52.640565][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 52.641992][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 52.643468][ T5946] __sys_bpf+0xfc6/0x49a0 [ 52.644712][ T5946] __x64_sys_bpf+0x78/0xc0 [ 52.645992][ T5946] do_syscall_64+0xcd/0x250 [ 52.647349][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.649056][ T5946] page last free pid 5924 tgid 5924 stack trace: [ 52.650823][ T5946] free_unref_page+0x5f4/0xdc0 [ 52.652112][ T5946] __folio_put+0x30d/0x3d0 [ 52.653300][ T5946] put_page+0x21e/0x280 [ 52.654405][ T5946] anon_pipe_buf_release+0x11a/0x240 [ 52.655833][ T5946] pipe_read+0x641/0x13f0 [ 52.656982][ T5946] vfs_read+0xa4c/0xbe0 [ 52.658140][ T5946] ksys_read+0x1fa/0x260 [ 52.659277][ T5946] do_syscall_64+0xcd/0x250 [ 52.660483][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.662014][ T5946] Modules linked in: [ 52.663083][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: syz-executor133 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 52.666349][ T5946] Tainted: [B]=BAD_PAGE [ 52.667483][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 52.670473][ T5946] Call Trace: [ 52.671428][ T5946] [ 52.672273][ T5946] dump_stack_lvl+0x16c/0x1f0 [ 52.673723][ T5946] bad_page+0xb3/0x1f0 [ 52.675021][ T5946] ? __pfx_bad_page+0x10/0x10 [ 52.676444][ T5946] ? page_bad_reason+0x9d/0x1e0 [ 52.677742][ T5946] free_unref_page+0x657/0xdc0 [ 52.679047][ T5946] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 52.680630][ T5946] ? __phys_addr+0xc6/0x150 [ 52.681831][ T5946] skb_free_head+0xa0/0x1d0 [ 52.683046][ T5946] skb_release_data+0x560/0x730 [ 52.684321][ T5946] sk_skb_reason_drop+0x129/0x1a0 [ 52.685662][ T5946] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 52.687406][ T5946] ? kernel_text_address+0x8d/0x100 [ 52.688775][ T5946] ? hlock_class+0x4e/0x130 [ 52.689982][ T5946] ? __lock_acquire+0x163e/0x3ce0 [ 52.691319][ T5946] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 52.693169][ T5946] ? hlock_class+0x4e/0x130 [ 52.694368][ T5946] ? __lock_acquire+0xbdd/0x3ce0 [ 52.695691][ T5946] ? __pfx___lock_acquire+0x10/0x10 [ 52.697045][ T5946] __netif_receive_skb_list_core+0x357/0x950 [ 52.698623][ T5946] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 52.700312][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 52.701666][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 52.703265][ T5946] ? lock_acquire+0x2f/0xb0 [ 52.704446][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 52.706106][ T5946] netif_receive_skb_list_internal+0x753/0xdb0 [ 52.707721][ T5946] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 52.709520][ T5946] ? __pfx_eth_type_trans+0x10/0x10 [ 52.711027][ T5946] ? __build_skb_around+0x278/0x3b0 [ 52.712705][ T5946] netif_receive_skb_list+0x4f/0x4a0 [ 52.714159][ T5946] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 52.715835][ T5946] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 52.717567][ T5946] ? bpf_test_timer_continue+0x150/0x3d0 [ 52.719049][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 52.720434][ T5946] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 52.721961][ T5946] ? try_to_wake_up+0x154/0x14f0 [ 52.723277][ T5946] ? __pfx_try_to_wake_up+0x10/0x10 [ 52.724639][ T5946] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 52.726177][ T5946] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 52.727574][ T5946] ? 0xffffffffa0004340 [ 52.728667][ T5946] ? 0xffffffffa0004340 [ 52.729763][ T5946] ? 0xffffffffa0004340 [ 52.730866][ T5946] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 52.732409][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 52.733822][ T5946] ? lock_acquire+0x2f/0xb0 [ 52.735043][ T5946] ? __fget_files+0x40/0x3f0 [ 52.736270][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 52.738064][ T5946] ? fput+0x30/0x390 [ 52.739172][ T5946] ? __bpf_prog_get+0xa0/0x290 [ 52.740490][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 52.742055][ T5946] __sys_bpf+0xfc6/0x49a0 [ 52.743224][ T5946] ? find_held_lock+0x2d/0x110 [ 52.744502][ T5946] ? __pfx___sys_bpf+0x10/0x10 [ 52.745768][ T5946] ? __might_fault+0x13b/0x190 [ 52.747052][ T5946] ? __pfx_lock_release+0x10/0x10 [ 52.748374][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 52.749758][ T5946] ? lock_acquire+0x2f/0xb0 [ 52.750972][ T5946] ? __might_fault+0xe3/0x190 [ 52.752250][ T5946] ? xfd_validate_state+0x5d/0x180 [ 52.753612][ T5946] ? rcu_is_watching+0x12/0xc0 [ 52.754908][ T5946] __x64_sys_bpf+0x78/0xc0 [ 52.756095][ T5946] ? lockdep_hardirqs_on+0x7c/0x110 [ 52.757449][ T5946] do_syscall_64+0xcd/0x250 [ 52.758646][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.760220][ T5946] RIP: 0033:0x7f5102b5de99 [ 52.761433][ T5946] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 52.766346][ T5946] RSP: 002b:00007f5102b18228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 52.768508][ T5946] RAX: ffffffffffffffda RBX: 00007f5102be8328 RCX: 00007f5102b5de99 [ 52.770493][ T5946] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 52.772542][ T5946] RBP: 00007f5102be8320 R08: 00007f5102b186c0 R09: 00007f5102b186c0 [ 52.774752][ T5946] R10: 00007f5102b186c0 R11: 0000000000000246 R12: 00007f5102bb5074 [ 52.777211][ T5946] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffc619b1828 [ 52.779652][ T5946] [ 52.780757][ T5946] BUG: Bad page state in process syz-executor133 pfn:2be6d [ 52.783071][ T5946] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802be6de88 pfn:0x2be6d [ 52.785700][ T5946] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 52.787585][ T5946] raw: 00fff00000000000 dead000000000040 ffff8880202ae000 0000000000000000 [ 52.790104][ T5946] raw: ffff88802be6de88 0000000000000001 00000000ffffffff 0000000000000000 [ 52.793022][ T5946] page dumped because: page_pool leak [ 52.794483][ T5946] page_owner tracks the page as allocated [ 52.796108][ T5946] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5946, tgid 5942 (syz-executor133), ts 44467588685, free_ts 40579612536 [ 52.800676][ T5946] post_alloc_hook+0x2d1/0x350 [ 52.801956][ T5946] get_page_from_freelist+0x101e/0x3070 [ 52.803403][ T5946] __alloc_pages_noprof+0x223/0x25a0 [ 52.804775][ T5946] alloc_pages_bulk_noprof+0x77c/0x1110 [ 52.806235][ T5946] __page_pool_alloc_pages_slow+0x18f/0x770 [ 52.807878][ T5946] page_pool_alloc_netmem+0xc4/0x160 [ 52.809275][ T5946] page_pool_alloc_pages+0x1a/0x60 [ 52.810627][ T5946] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 52.812253][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 52.813664][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 52.815106][ T5946] __sys_bpf+0xfc6/0x49a0 [ 52.816248][ T5946] __x64_sys_bpf+0x78/0xc0 [ 52.817427][ T5946] do_syscall_64+0xcd/0x250 [ 52.818698][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.820259][ T5946] page last free pid 5924 tgid 5924 stack trace: [ 52.821919][ T5946] free_unref_page+0x5f4/0xdc0 [ 52.823200][ T5946] __folio_put+0x30d/0x3d0 [ 52.824390][ T5946] put_page+0x21e/0x280 [ 52.825496][ T5946] anon_pipe_buf_release+0x11a/0x240 [ 52.826905][ T5946] pipe_read+0x641/0x13f0 [ 52.828127][ T5946] vfs_read+0xa4c/0xbe0 [ 52.829241][ T5946] ksys_read+0x1fa/0x260 [ 52.830390][ T5946] do_syscall_64+0xcd/0x250 [ 52.831617][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.833276][ T5946] Modules linked in: [ 52.834600][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: syz-executor133 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 52.838497][ T5946] Tainted: [B]=BAD_PAGE [ 52.839589][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 52.842338][ T5946] Call Trace: [ 52.843222][ T5946] [ 52.843988][ T5946] dump_stack_lvl+0x16c/0x1f0 [ 52.845234][ T5946] bad_page+0xb3/0x1f0 [ 52.846318][ T5946] ? __pfx_bad_page+0x10/0x10 [ 52.847582][ T5946] ? page_bad_reason+0x9d/0x1e0 [ 52.848856][ T5946] free_unref_page+0x657/0xdc0 [ 52.850131][ T5946] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 52.851685][ T5946] ? __phys_addr+0xc6/0x150 [ 52.852847][ T5946] skb_free_head+0xa0/0x1d0 [ 52.854576][ T5946] skb_release_data+0x560/0x730 [ 52.855926][ T5946] sk_skb_reason_drop+0x129/0x1a0 [ 52.857414][ T5946] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 52.859263][ T5946] ? kernel_text_address+0x8d/0x100 [ 52.860671][ T5946] ? hlock_class+0x4e/0x130 [ 52.862019][ T5946] ? __lock_acquire+0x163e/0x3ce0 [ 52.863399][ T5946] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 52.865282][ T5946] ? hlock_class+0x4e/0x130 [ 52.866506][ T5946] ? __lock_acquire+0xbdd/0x3ce0 [ 52.867867][ T5946] ? __pfx___lock_acquire+0x10/0x10 [ 52.869258][ T5946] __netif_receive_skb_list_core+0x357/0x950 [ 52.870869][ T5946] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 52.872588][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 52.874363][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 52.876295][ T5946] ? lock_acquire+0x2f/0xb0 [ 52.877512][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 52.879198][ T5946] netif_receive_skb_list_internal+0x753/0xdb0 [ 52.880831][ T5946] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 52.882584][ T5946] ? __pfx_eth_type_trans+0x10/0x10 [ 52.883999][ T5946] ? __build_skb_around+0x278/0x3b0 [ 52.885397][ T5946] netif_receive_skb_list+0x4f/0x4a0 [ 52.886796][ T5946] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 52.888395][ T5946] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 52.890073][ T5946] ? bpf_test_timer_continue+0x150/0x3d0 [ 52.891524][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 52.892853][ T5946] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 52.894355][ T5946] ? try_to_wake_up+0x154/0x14f0 [ 52.895668][ T5946] ? __pfx_try_to_wake_up+0x10/0x10 [ 52.897000][ T5946] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 52.898507][ T5946] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 52.899876][ T5946] ? 0xffffffffa0004340 [ 52.900924][ T5946] ? 0xffffffffa0004340 [ 52.901963][ T5946] ? 0xffffffffa0004340 [ 52.902997][ T5946] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 52.904480][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 52.905837][ T5946] ? lock_acquire+0x2f/0xb0 [ 52.907001][ T5946] ? __fget_files+0x40/0x3f0 [ 52.908182][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 52.909675][ T5946] ? fput+0x30/0x390 [ 52.910674][ T5946] ? __bpf_prog_get+0xa0/0x290 [ 52.911914][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 52.913410][ T5946] __sys_bpf+0xfc6/0x49a0 [ 52.914531][ T5946] ? find_held_lock+0x2d/0x110 [ 52.915776][ T5946] ? __pfx___sys_bpf+0x10/0x10 [ 52.916998][ T5946] ? __might_fault+0x13b/0x190 [ 52.918239][ T5946] ? __pfx_lock_release+0x10/0x10 [ 52.919586][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 52.920909][ T5946] ? lock_acquire+0x2f/0xb0 [ 52.922060][ T5946] ? __might_fault+0xe3/0x190 [ 52.923277][ T5946] ? xfd_validate_state+0x5d/0x180 [ 52.924593][ T5946] ? rcu_is_watching+0x12/0xc0 [ 52.925830][ T5946] __x64_sys_bpf+0x78/0xc0 [ 52.926970][ T5946] ? lockdep_hardirqs_on+0x7c/0x110 [ 52.928305][ T5946] do_syscall_64+0xcd/0x250 [ 52.929475][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.930998][ T5946] RIP: 0033:0x7f5102b5de99 [ 52.932140][ T5946] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 52.937087][ T5946] RSP: 002b:00007f5102b18228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 52.939208][ T5946] RAX: ffffffffffffffda RBX: 00007f5102be8328 RCX: 00007f5102b5de99 [ 52.941412][ T5946] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 52.943486][ T5946] RBP: 00007f5102be8320 R08: 00007f5102b186c0 R09: 00007f5102b186c0 [ 52.945461][ T5946] R10: 00007f5102b186c0 R11: 0000000000000246 R12: 00007f5102bb5074 [ 52.947494][ T5946] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffc619b1828 [ 52.949475][ T5946] [ 52.950363][ T5946] BUG: Bad page state in process syz-executor133 pfn:29006 [ 52.952222][ T5946] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888029007680 pfn:0x29006 [ 52.954803][ T5946] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 52.956497][ T5946] raw: 00fff00000000000 dead000000000040 ffff8880202ae000 0000000000000000 [ 52.958586][ T5946] raw: ffff888029007680 0000000000000001 00000000ffffffff 0000000000000000 [ 52.960801][ T5946] page dumped because: page_pool leak [ 52.962177][ T5946] page_owner tracks the page as allocated [ 52.963647][ T5946] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5946, tgid 5942 (syz-executor133), ts 44467581360, free_ts 44458687275 [ 52.967981][ T5946] post_alloc_hook+0x2d1/0x350 [ 52.969212][ T5946] get_page_from_freelist+0x101e/0x3070 [ 52.970625][ T5946] __alloc_pages_noprof+0x223/0x25a0 [ 52.972054][ T5946] alloc_pages_bulk_noprof+0x77c/0x1110 [ 52.973477][ T5946] __page_pool_alloc_pages_slow+0x18f/0x770 [ 52.975013][ T5946] page_pool_alloc_netmem+0xc4/0x160 [ 52.976492][ T5946] page_pool_alloc_pages+0x1a/0x60 [ 52.977908][ T5946] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 52.979543][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 52.980888][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 52.982296][ T5946] __sys_bpf+0xfc6/0x49a0 [ 52.983439][ T5946] __x64_sys_bpf+0x78/0xc0 [ 52.984616][ T5946] do_syscall_64+0xcd/0x250 [ 52.985813][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.987377][ T5946] page last free pid 40 tgid 40 stack trace: [ 52.988989][ T5946] free_unref_page+0x5f4/0xdc0 [ 52.990375][ T5946] __folio_put+0x30d/0x3d0 [ 52.991568][ T5946] free_page_and_swap_cache+0x249/0x2c0 [ 52.993041][ T5946] tlb_remove_table_rcu+0x89/0xe0 [ 52.994482][ T5946] rcu_core+0x79d/0x14d0 [ 52.995659][ T5946] handle_softirqs+0x213/0x8f0 [ 52.997023][ T5946] irq_exit_rcu+0xbb/0x120 [ 52.998291][ T5946] sysvec_call_function_single+0xa4/0xc0 [ 52.999799][ T5946] asm_sysvec_call_function_single+0x1a/0x20 [ 53.001374][ T5946] Modules linked in: [ 53.002376][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: syz-executor133 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 53.005423][ T5946] Tainted: [B]=BAD_PAGE [ 53.006467][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 53.009255][ T5946] Call Trace: [ 53.010150][ T5946] [ 53.010952][ T5946] dump_stack_lvl+0x16c/0x1f0 [ 53.012214][ T5946] bad_page+0xb3/0x1f0 [ 53.013311][ T5946] ? __pfx_bad_page+0x10/0x10 [ 53.014572][ T5946] ? page_bad_reason+0x9d/0x1e0 [ 53.015898][ T5946] free_unref_page+0x657/0xdc0 [ 53.017179][ T5946] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 53.018796][ T5946] ? __phys_addr+0xc6/0x150 [ 53.020010][ T5946] skb_free_head+0xa0/0x1d0 [ 53.021346][ T5946] skb_release_data+0x560/0x730 [ 53.022660][ T5946] sk_skb_reason_drop+0x129/0x1a0 [ 53.024023][ T5946] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 53.025779][ T5946] ? kernel_text_address+0x8d/0x100 [ 53.027203][ T5946] ? hlock_class+0x4e/0x130 [ 53.028426][ T5946] ? __lock_acquire+0x163e/0x3ce0 [ 53.029772][ T5946] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 53.031659][ T5946] ? hlock_class+0x4e/0x130 [ 53.032860][ T5946] ? __lock_acquire+0xbdd/0x3ce0 [ 53.034179][ T5946] ? __pfx___lock_acquire+0x10/0x10 [ 53.035590][ T5946] __netif_receive_skb_list_core+0x357/0x950 [ 53.037331][ T5946] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 53.039049][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 53.040411][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 53.042013][ T5946] ? lock_acquire+0x2f/0xb0 [ 53.043208][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 53.044805][ T5946] netif_receive_skb_list_internal+0x753/0xdb0 [ 53.046410][ T5946] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 53.048118][ T5946] ? __pfx_eth_type_trans+0x10/0x10 [ 53.049457][ T5946] ? __build_skb_around+0x278/0x3b0 [ 53.050854][ T5946] netif_receive_skb_list+0x4f/0x4a0 [ 53.052274][ T5946] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 53.053931][ T5946] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 53.055697][ T5946] ? bpf_test_timer_continue+0x150/0x3d0 [ 53.057178][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 53.058560][ T5946] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 53.060234][ T5946] ? try_to_wake_up+0x154/0x14f0 [ 53.061557][ T5946] ? __pfx_try_to_wake_up+0x10/0x10 [ 53.062937][ T5946] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 53.064504][ T5946] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 53.065901][ T5946] ? 0xffffffffa0004340 [ 53.067019][ T5946] ? 0xffffffffa0004340 [ 53.068072][ T5946] ? 0xffffffffa0004340 [ 53.069142][ T5946] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 53.070638][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 53.072236][ T5946] ? lock_acquire+0x2f/0xb0 [ 53.073383][ T5946] ? __fget_files+0x40/0x3f0 [ 53.074581][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 53.076143][ T5946] ? fput+0x30/0x390 [ 53.077170][ T5946] ? __bpf_prog_get+0xa0/0x290 [ 53.078425][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 53.080085][ T5946] __sys_bpf+0xfc6/0x49a0 [ 53.081253][ T5946] ? find_held_lock+0x2d/0x110 [ 53.082542][ T5946] ? __pfx___sys_bpf+0x10/0x10 [ 53.083843][ T5946] ? __might_fault+0x13b/0x190 [ 53.085101][ T5946] ? __pfx_lock_release+0x10/0x10 [ 53.086474][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 53.087865][ T5946] ? lock_acquire+0x2f/0xb0 [ 53.089058][ T5946] ? __might_fault+0xe3/0x190 [ 53.090329][ T5946] ? xfd_validate_state+0x5d/0x180 [ 53.091704][ T5946] ? rcu_is_watching+0x12/0xc0 [ 53.092975][ T5946] __x64_sys_bpf+0x78/0xc0 [ 53.094140][ T5946] ? lockdep_hardirqs_on+0x7c/0x110 [ 53.095452][ T5946] do_syscall_64+0xcd/0x250 [ 53.096620][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.098171][ T5946] RIP: 0033:0x7f5102b5de99 [ 53.099334][ T5946] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 53.104279][ T5946] RSP: 002b:00007f5102b18228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 53.106451][ T5946] RAX: ffffffffffffffda RBX: 00007f5102be8328 RCX: 00007f5102b5de99 [ 53.108541][ T5946] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 53.110610][ T5946] RBP: 00007f5102be8320 R08: 00007f5102b186c0 R09: 00007f5102b186c0 [ 53.112692][ T5946] R10: 00007f5102b186c0 R11: 0000000000000246 R12: 00007f5102bb5074 [ 53.114703][ T5946] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffc619b1828 [ 53.116806][ T5946] [ 53.117761][ T5946] BUG: Bad page state in process syz-executor133 pfn:2d5bf [ 53.119703][ T5946] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2d5bf [ 53.121988][ T5946] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 53.123876][ T5946] raw: 00fff00000000000 dead000000000040 ffff8880202ae000 0000000000000000 [ 53.126116][ T5946] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 53.128400][ T5946] page dumped because: page_pool leak [ 53.129805][ T5946] page_owner tracks the page as allocated [ 53.131476][ T5946] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5946, tgid 5942 (syz-executor133), ts 44467573941, free_ts 44458699436 [ 53.136044][ T5946] post_alloc_hook+0x2d1/0x350 [ 53.137312][ T5946] get_page_from_freelist+0x101e/0x3070 [ 53.138855][ T5946] __alloc_pages_noprof+0x223/0x25a0 [ 53.140249][ T5946] alloc_pages_bulk_noprof+0x77c/0x1110 [ 53.141716][ T5946] __page_pool_alloc_pages_slow+0x18f/0x770 [ 53.143425][ T5946] page_pool_alloc_netmem+0xc4/0x160 [ 53.144835][ T5946] page_pool_alloc_pages+0x1a/0x60 [ 53.146203][ T5946] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 53.147935][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 53.149350][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 53.150799][ T5946] __sys_bpf+0xfc6/0x49a0 [ 53.151956][ T5946] __x64_sys_bpf+0x78/0xc0 [ 53.153153][ T5946] do_syscall_64+0xcd/0x250 [ 53.154378][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.155984][ T5946] page last free pid 40 tgid 40 stack trace: [ 53.157584][ T5946] free_unref_page+0x5f4/0xdc0 [ 53.158945][ T5946] __folio_put+0x30d/0x3d0 [ 53.160105][ T5946] free_page_and_swap_cache+0x249/0x2c0 [ 53.161562][ T5946] tlb_remove_table_rcu+0x89/0xe0 [ 53.162969][ T5946] rcu_core+0x79d/0x14d0 [ 53.164099][ T5946] handle_softirqs+0x213/0x8f0 [ 53.165378][ T5946] irq_exit_rcu+0xbb/0x120 [ 53.166569][ T5946] sysvec_call_function_single+0xa4/0xc0 [ 53.168143][ T5946] asm_sysvec_call_function_single+0x1a/0x20 [ 53.169749][ T5946] Modules linked in: [ 53.170852][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: syz-executor133 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 53.174217][ T5946] Tainted: [B]=BAD_PAGE [ 53.175346][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 53.178156][ T5946] Call Trace: [ 53.179090][ T5946] [ 53.179880][ T5946] dump_stack_lvl+0x16c/0x1f0 [ 53.181159][ T5946] bad_page+0xb3/0x1f0 [ 53.182248][ T5946] ? __pfx_bad_page+0x10/0x10 [ 53.183469][ T5946] ? page_bad_reason+0x9d/0x1e0 [ 53.184756][ T5946] free_unref_page+0x657/0xdc0 [ 53.186022][ T5946] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 53.187618][ T5946] ? __phys_addr+0xc6/0x150 [ 53.188817][ T5946] skb_free_head+0xa0/0x1d0 [ 53.190024][ T5946] skb_release_data+0x560/0x730 [ 53.191332][ T5946] sk_skb_reason_drop+0x129/0x1a0 [ 53.192654][ T5946] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 53.194357][ T5946] ? kernel_text_address+0x8d/0x100 [ 53.195778][ T5946] ? hlock_class+0x4e/0x130 [ 53.196994][ T5946] ? __lock_acquire+0x163e/0x3ce0 [ 53.198254][ T5946] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 53.199990][ T5946] ? hlock_class+0x4e/0x130 [ 53.201125][ T5946] ? __lock_acquire+0xbdd/0x3ce0 [ 53.202394][ T5946] ? __pfx___lock_acquire+0x10/0x10 [ 53.203779][ T5946] __netif_receive_skb_list_core+0x357/0x950 [ 53.205371][ T5946] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 53.207126][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 53.208503][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 53.210176][ T5946] ? lock_acquire+0x2f/0xb0 [ 53.211391][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 53.213064][ T5946] netif_receive_skb_list_internal+0x753/0xdb0 [ 53.214736][ T5946] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 53.216490][ T5946] ? __pfx_eth_type_trans+0x10/0x10 [ 53.217870][ T5946] ? __build_skb_around+0x278/0x3b0 [ 53.219378][ T5946] netif_receive_skb_list+0x4f/0x4a0 [ 53.220787][ T5946] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 53.222488][ T5946] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 53.224311][ T5946] ? bpf_test_timer_continue+0x150/0x3d0 [ 53.225826][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 53.227273][ T5946] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 53.228805][ T5946] ? try_to_wake_up+0x154/0x14f0 [ 53.230108][ T5946] ? __pfx_try_to_wake_up+0x10/0x10 [ 53.231490][ T5946] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 53.233073][ T5946] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 53.234545][ T5946] ? 0xffffffffa0004340 [ 53.235889][ T5946] ? 0xffffffffa0004340 [ 53.236996][ T5946] ? 0xffffffffa0004340 [ 53.238086][ T5946] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 53.239648][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 53.241065][ T5946] ? lock_acquire+0x2f/0xb0 [ 53.242278][ T5946] ? __fget_files+0x40/0x3f0 [ 53.243530][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 53.245069][ T5946] ? fput+0x30/0x390 [ 53.246106][ T5946] ? __bpf_prog_get+0xa0/0x290 [ 53.247533][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 53.249075][ T5946] __sys_bpf+0xfc6/0x49a0 [ 53.250218][ T5946] ? find_held_lock+0x2d/0x110 [ 53.251515][ T5946] ? __pfx___sys_bpf+0x10/0x10 [ 53.252776][ T5946] ? __might_fault+0x13b/0x190 [ 53.253994][ T5946] ? __pfx_lock_release+0x10/0x10 [ 53.255338][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 53.256705][ T5946] ? lock_acquire+0x2f/0xb0 [ 53.257902][ T5946] ? __might_fault+0xe3/0x190 [ 53.259170][ T5946] ? xfd_validate_state+0x5d/0x180 [ 53.260510][ T5946] ? rcu_is_watching+0x12/0xc0 [ 53.261769][ T5946] __x64_sys_bpf+0x78/0xc0 [ 53.263079][ T5946] ? lockdep_hardirqs_on+0x7c/0x110 [ 53.264536][ T5946] do_syscall_64+0xcd/0x250 [ 53.265810][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.267408][ T5946] RIP: 0033:0x7f5102b5de99 [ 53.268594][ T5946] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 53.273644][ T5946] RSP: 002b:00007f5102b18228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 53.275887][ T5946] RAX: ffffffffffffffda RBX: 00007f5102be8328 RCX: 00007f5102b5de99 [ 53.277974][ T5946] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 53.280041][ T5946] RBP: 00007f5102be8320 R08: 00007f5102b186c0 R09: 00007f5102b186c0 [ 53.282042][ T5946] R10: 00007f5102b186c0 R11: 0000000000000246 R12: 00007f5102bb5074 [ 53.284120][ T5946] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffc619b1828 [ 53.286148][ T5946] [ 53.287100][ T5946] BUG: Bad page state in process syz-executor133 pfn:2505c [ 53.289068][ T5946] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802505c000 pfn:0x2505c [ 53.291693][ T5946] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 53.293552][ T5946] raw: 00fff00000000000 dead000000000040 ffff8880202ae000 0000000000000000 [ 53.295804][ T5946] raw: ffff88802505c000 0000000000000001 00000000ffffffff 0000000000000000 [ 53.298107][ T5946] page dumped because: page_pool leak [ 53.299512][ T5946] page_owner tracks the page as allocated [ 53.301001][ T5946] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5946, tgid 5942 (syz-executor133), ts 44467565267, free_ts 44458706336 [ 53.305383][ T5946] post_alloc_hook+0x2d1/0x350 [ 53.306639][ T5946] get_page_from_freelist+0x101e/0x3070 [ 53.308299][ T5946] __alloc_pages_noprof+0x223/0x25a0 [ 53.309709][ T5946] alloc_pages_bulk_noprof+0x77c/0x1110 [ 53.311245][ T5946] __page_pool_alloc_pages_slow+0x18f/0x770 [ 53.312806][ T5946] page_pool_alloc_netmem+0xc4/0x160 [ 53.314152][ T5946] page_pool_alloc_pages+0x1a/0x60 [ 53.315432][ T5946] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 53.317114][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 53.318505][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 53.319859][ T5946] __sys_bpf+0xfc6/0x49a0 [ 53.320969][ T5946] __x64_sys_bpf+0x78/0xc0 [ 53.322095][ T5946] do_syscall_64+0xcd/0x250 [ 53.323294][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.324853][ T5946] page last free pid 40 tgid 40 stack trace: [ 53.326422][ T5946] free_unref_page+0x5f4/0xdc0 [ 53.327707][ T5946] __folio_put+0x30d/0x3d0 [ 53.328938][ T5946] free_page_and_swap_cache+0x249/0x2c0 [ 53.330390][ T5946] tlb_remove_table_rcu+0x89/0xe0 [ 53.331719][ T5946] rcu_core+0x79d/0x14d0 [ 53.332838][ T5946] handle_softirqs+0x213/0x8f0 [ 53.334097][ T5946] irq_exit_rcu+0xbb/0x120 [ 53.335295][ T5946] sysvec_call_function_single+0xa4/0xc0 [ 53.337079][ T5946] asm_sysvec_call_function_single+0x1a/0x20 [ 53.338768][ T5946] Modules linked in: [ 53.339830][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: syz-executor133 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 53.343264][ T5946] Tainted: [B]=BAD_PAGE [ 53.344455][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 53.347507][ T5946] Call Trace: [ 53.348506][ T5946] [ 53.349367][ T5946] dump_stack_lvl+0x16c/0x1f0 [ 53.350765][ T5946] bad_page+0xb3/0x1f0 [ 53.351955][ T5946] ? __pfx_bad_page+0x10/0x10 [ 53.353305][ T5946] ? page_bad_reason+0x9d/0x1e0 [ 53.354621][ T5946] free_unref_page+0x657/0xdc0 [ 53.355908][ T5946] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 53.357495][ T5946] ? __phys_addr+0xc6/0x150 [ 53.358693][ T5946] skb_free_head+0xa0/0x1d0 [ 53.359856][ T5946] skb_release_data+0x560/0x730 [ 53.361073][ T5946] sk_skb_reason_drop+0x129/0x1a0 [ 53.362318][ T5946] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 53.363987][ T5946] ? kernel_text_address+0x8d/0x100 [ 53.365266][ T5946] ? hlock_class+0x4e/0x130 [ 53.366387][ T5946] ? __lock_acquire+0x163e/0x3ce0 [ 53.367656][ T5946] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 53.369406][ T5946] ? hlock_class+0x4e/0x130 [ 53.370532][ T5946] ? __lock_acquire+0xbdd/0x3ce0 [ 53.371726][ T5946] ? __pfx___lock_acquire+0x10/0x10 [ 53.372980][ T5946] __netif_receive_skb_list_core+0x357/0x950 [ 53.374663][ T5946] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 53.376403][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 53.377789][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 53.379465][ T5946] ? lock_acquire+0x2f/0xb0 [ 53.380673][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 53.382377][ T5946] netif_receive_skb_list_internal+0x753/0xdb0 [ 53.384018][ T5946] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 53.385766][ T5946] ? __pfx_eth_type_trans+0x10/0x10 [ 53.387174][ T5946] ? __build_skb_around+0x278/0x3b0 [ 53.388559][ T5946] netif_receive_skb_list+0x4f/0x4a0 [ 53.389974][ T5946] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 53.392054][ T5946] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 53.393845][ T5946] ? bpf_test_timer_continue+0x150/0x3d0 [ 53.395337][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 53.396744][ T5946] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 53.398299][ T5946] ? try_to_wake_up+0x154/0x14f0 [ 53.399821][ T5946] ? __pfx_try_to_wake_up+0x10/0x10 [ 53.401269][ T5946] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 53.403036][ T5946] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 53.404434][ T5946] ? 0xffffffffa0004340 [ 53.405539][ T5946] ? 0xffffffffa0004340 [ 53.406642][ T5946] ? 0xffffffffa0004340 [ 53.407760][ T5946] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 53.409382][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 53.410813][ T5946] ? lock_acquire+0x2f/0xb0 [ 53.412083][ T5946] ? __fget_files+0x40/0x3f0 [ 53.413308][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 53.414875][ T5946] ? fput+0x30/0x390 [ 53.415910][ T5946] ? __bpf_prog_get+0xa0/0x290 [ 53.417187][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 53.418734][ T5946] __sys_bpf+0xfc6/0x49a0 [ 53.419957][ T5946] ? find_held_lock+0x2d/0x110 [ 53.421227][ T5946] ? __pfx___sys_bpf+0x10/0x10 [ 53.422478][ T5946] ? __might_fault+0x13b/0x190 [ 53.423862][ T5946] ? __pfx_lock_release+0x10/0x10 [ 53.425242][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 53.426631][ T5946] ? lock_acquire+0x2f/0xb0 [ 53.427869][ T5946] ? __might_fault+0xe3/0x190 [ 53.429122][ T5946] ? xfd_validate_state+0x5d/0x180 [ 53.430474][ T5946] ? rcu_is_watching+0x12/0xc0 [ 53.431828][ T5946] __x64_sys_bpf+0x78/0xc0 [ 53.433017][ T5946] ? lockdep_hardirqs_on+0x7c/0x110 [ 53.434387][ T5946] do_syscall_64+0xcd/0x250 [ 53.435794][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.437372][ T5946] RIP: 0033:0x7f5102b5de99 [ 53.438640][ T5946] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 53.443778][ T5946] RSP: 002b:00007f5102b18228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 53.446019][ T5946] RAX: ffffffffffffffda RBX: 00007f5102be8328 RCX: 00007f5102b5de99 [ 53.448107][ T5946] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 53.450160][ T5946] RBP: 00007f5102be8320 R08: 00007f5102b186c0 R09: 00007f5102b186c0 [ 53.452184][ T5946] R10: 00007f5102b186c0 R11: 0000000000000246 R12: 00007f5102bb5074 [ 53.454296][ T5946] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffc619b1828 [ 53.456403][ T5946] [ 53.457458][ T5946] BUG: Bad page state in process syz-executor133 pfn:2a14e [ 53.459484][ T5946] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2a14e [ 53.461792][ T5946] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 53.463728][ T5946] raw: 00fff00000000000 dead000000000040 ffff8880202ae000 0000000000000000 [ 53.466049][ T5946] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 53.468355][ T5946] page dumped because: page_pool leak [ 53.469786][ T5946] page_owner tracks the page as allocated [ 53.471305][ T5946] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5946, tgid 5942 (syz-executor133), ts 44467556986, free_ts 44458713193 [ 53.475816][ T5946] post_alloc_hook+0x2d1/0x350 [ 53.477111][ T5946] get_page_from_freelist+0x101e/0x3070 [ 53.478635][ T5946] __alloc_pages_noprof+0x223/0x25a0 [ 53.480044][ T5946] alloc_pages_bulk_noprof+0x77c/0x1110 [ 53.481508][ T5946] __page_pool_alloc_pages_slow+0x18f/0x770 [ 53.483082][ T5946] page_pool_alloc_netmem+0xc4/0x160 [ 53.484484][ T5946] page_pool_alloc_pages+0x1a/0x60 [ 53.485855][ T5946] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 53.487497][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 53.488937][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 53.490354][ T5946] __sys_bpf+0xfc6/0x49a0 [ 53.491510][ T5946] __x64_sys_bpf+0x78/0xc0 [ 53.492678][ T5946] do_syscall_64+0xcd/0x250 [ 53.493830][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.495413][ T5946] page last free pid 40 tgid 40 stack trace: [ 53.496985][ T5946] free_unref_page+0x5f4/0xdc0 [ 53.498298][ T5946] __folio_put+0x30d/0x3d0 [ 53.499516][ T5946] free_page_and_swap_cache+0x249/0x2c0 [ 53.500979][ T5946] tlb_remove_table_rcu+0x89/0xe0 [ 53.502314][ T5946] rcu_core+0x79d/0x14d0 [ 53.503457][ T5946] handle_softirqs+0x213/0x8f0 [ 53.504728][ T5946] irq_exit_rcu+0xbb/0x120 [ 53.505911][ T5946] sysvec_call_function_single+0xa4/0xc0 [ 53.507398][ T5946] asm_sysvec_call_function_single+0x1a/0x20 [ 53.509028][ T5946] Modules linked in: [ 53.510064][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: syz-executor133 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 53.513237][ T5946] Tainted: [B]=BAD_PAGE [ 53.514241][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 53.517028][ T5946] Call Trace: [ 53.517923][ T5946] [ 53.518712][ T5946] dump_stack_lvl+0x16c/0x1f0 [ 53.519999][ T5946] bad_page+0xb3/0x1f0 [ 53.521085][ T5946] ? __pfx_bad_page+0x10/0x10 [ 53.522335][ T5946] ? page_bad_reason+0x9d/0x1e0 [ 53.523637][ T5946] free_unref_page+0x657/0xdc0 [ 53.524901][ T5946] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 53.526481][ T5946] ? __phys_addr+0xc6/0x150 [ 53.527720][ T5946] skb_free_head+0xa0/0x1d0 [ 53.528937][ T5946] skb_release_data+0x560/0x730 [ 53.530216][ T5946] sk_skb_reason_drop+0x129/0x1a0 [ 53.531555][ T5946] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 53.533251][ T5946] ? kernel_text_address+0x8d/0x100 [ 53.534637][ T5946] ? hlock_class+0x4e/0x130 [ 53.535861][ T5946] ? __lock_acquire+0x163e/0x3ce0 [ 53.537188][ T5946] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 53.539064][ T5946] ? hlock_class+0x4e/0x130 [ 53.540258][ T5946] ? __lock_acquire+0xbdd/0x3ce0 [ 53.541568][ T5946] ? __pfx___lock_acquire+0x10/0x10 [ 53.542945][ T5946] __netif_receive_skb_list_core+0x357/0x950 [ 53.544518][ T5946] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 53.546219][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 53.547635][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 53.549286][ T5946] ? lock_acquire+0x2f/0xb0 [ 53.550486][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 53.552160][ T5946] netif_receive_skb_list_internal+0x753/0xdb0 [ 53.553781][ T5946] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 53.555568][ T5946] ? __pfx_eth_type_trans+0x10/0x10 [ 53.557154][ T5946] ? __build_skb_around+0x278/0x3b0 [ 53.558542][ T5946] netif_receive_skb_list+0x4f/0x4a0 [ 53.559959][ T5946] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 53.561610][ T5946] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 53.563349][ T5946] ? bpf_test_timer_continue+0x150/0x3d0 [ 53.564833][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 53.566219][ T5946] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 53.567760][ T5946] ? try_to_wake_up+0x154/0x14f0 [ 53.569060][ T5946] ? __pfx_try_to_wake_up+0x10/0x10 [ 53.570415][ T5946] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 53.571971][ T5946] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 53.573359][ T5946] ? 0xffffffffa0004340 [ 53.574448][ T5946] ? 0xffffffffa0004340 [ 53.575909][ T5946] ? 0xffffffffa0004340 [ 53.577013][ T5946] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 53.578816][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 53.580257][ T5946] ? lock_acquire+0x2f/0xb0 [ 53.581498][ T5946] ? __fget_files+0x40/0x3f0 [ 53.582862][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 53.584658][ T5946] ? fput+0x30/0x390 [ 53.585713][ T5946] ? __bpf_prog_get+0xa0/0x290 [ 53.587022][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 53.588592][ T5946] __sys_bpf+0xfc6/0x49a0 [ 53.589750][ T5946] ? find_held_lock+0x2d/0x110 [ 53.591046][ T5946] ? __pfx___sys_bpf+0x10/0x10 [ 53.592319][ T5946] ? __might_fault+0x13b/0x190 [ 53.593530][ T5946] ? __pfx_lock_release+0x10/0x10 [ 53.594868][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 53.596249][ T5946] ? lock_acquire+0x2f/0xb0 [ 53.597531][ T5946] ? __might_fault+0xe3/0x190 [ 53.598841][ T5946] ? xfd_validate_state+0x5d/0x180 [ 53.600268][ T5946] ? rcu_is_watching+0x12/0xc0 [ 53.601624][ T5946] __x64_sys_bpf+0x78/0xc0 [ 53.602858][ T5946] ? lockdep_hardirqs_on+0x7c/0x110 [ 53.604280][ T5946] do_syscall_64+0xcd/0x250 [ 53.605543][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.607116][ T5946] RIP: 0033:0x7f5102b5de99 [ 53.608299][ T5946] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 53.613271][ T5946] RSP: 002b:00007f5102b18228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 53.615469][ T5946] RAX: ffffffffffffffda RBX: 00007f5102be8328 RCX: 00007f5102b5de99 [ 53.617544][ T5946] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 53.619549][ T5946] RBP: 00007f5102be8320 R08: 00007f5102b186c0 R09: 00007f5102b186c0 [ 53.621523][ T5946] R10: 00007f5102b186c0 R11: 0000000000000246 R12: 00007f5102bb5074 [ 53.623589][ T5946] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffc619b1828 [ 53.625778][ T5946] [ 53.626738][ T5946] BUG: Bad page state in process syz-executor133 pfn:27f55 [ 53.628750][ T5946] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x27f55 [ 53.631159][ T5946] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 53.633302][ T5946] raw: 00fff00000000000 dead000000000040 ffff8880202ae000 0000000000000000 [ 53.635680][ T5946] raw: 0000000000000004 0000000000000001 00000000ffffffff 0000000000000000 [ 53.638124][ T5946] page dumped because: page_pool leak [ 53.639562][ T5946] page_owner tracks the page as allocated [ 53.641065][ T5946] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5946, tgid 5942 (syz-executor133), ts 44467548425, free_ts 44458719755 [ 53.645701][ T5946] post_alloc_hook+0x2d1/0x350 [ 53.647282][ T5946] get_page_from_freelist+0x101e/0x3070 [ 53.649177][ T5946] __alloc_pages_noprof+0x223/0x25a0 [ 53.650976][ T5946] alloc_pages_bulk_noprof+0x77c/0x1110 [ 53.652703][ T5946] __page_pool_alloc_pages_slow+0x18f/0x770 [ 53.654258][ T5946] page_pool_alloc_netmem+0xc4/0x160 [ 53.655682][ T5946] page_pool_alloc_pages+0x1a/0x60 [ 53.657027][ T5946] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 53.658707][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 53.660139][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 53.661562][ T5946] __sys_bpf+0xfc6/0x49a0 [ 53.662708][ T5946] __x64_sys_bpf+0x78/0xc0 [ 53.663913][ T5946] do_syscall_64+0xcd/0x250 [ 53.665103][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.666657][ T5946] page last free pid 40 tgid 40 stack trace: [ 53.668423][ T5946] free_unref_page+0x5f4/0xdc0 [ 53.669692][ T5946] __folio_put+0x30d/0x3d0 [ 53.671131][ T5946] free_page_and_swap_cache+0x249/0x2c0 [ 53.672685][ T5946] tlb_remove_table_rcu+0x89/0xe0 [ 53.674167][ T5946] rcu_core+0x79d/0x14d0 [ 53.675643][ T5946] handle_softirqs+0x213/0x8f0 [ 53.677050][ T5946] irq_exit_rcu+0xbb/0x120 [ 53.678380][ T5946] sysvec_call_function_single+0xa4/0xc0 [ 53.679914][ T5946] asm_sysvec_call_function_single+0x1a/0x20 [ 53.681603][ T5946] Modules linked in: [ 53.682666][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: syz-executor133 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 53.685971][ T5946] Tainted: [B]=BAD_PAGE [ 53.687075][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 53.689870][ T5946] Call Trace: [ 53.690773][ T5946] [ 53.691560][ T5946] dump_stack_lvl+0x16c/0x1f0 [ 53.692754][ T5946] bad_page+0xb3/0x1f0 [ 53.693836][ T5946] ? __pfx_bad_page+0x10/0x10 [ 53.695111][ T5946] ? page_bad_reason+0x9d/0x1e0 [ 53.696347][ T5946] free_unref_page+0x657/0xdc0 [ 53.697619][ T5946] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 53.699207][ T5946] ? __phys_addr+0xc6/0x150 [ 53.700424][ T5946] skb_free_head+0xa0/0x1d0 [ 53.701583][ T5946] skb_release_data+0x560/0x730 [ 53.702892][ T5946] sk_skb_reason_drop+0x129/0x1a0 [ 53.704232][ T5946] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 53.705982][ T5946] ? kernel_text_address+0x8d/0x100 [ 53.707368][ T5946] ? hlock_class+0x4e/0x130 [ 53.708576][ T5946] ? __lock_acquire+0x163e/0x3ce0 [ 53.709899][ T5946] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 53.711769][ T5946] ? hlock_class+0x4e/0x130 [ 53.712972][ T5946] ? __lock_acquire+0xbdd/0x3ce0 [ 53.714280][ T5946] ? __pfx___lock_acquire+0x10/0x10 [ 53.715677][ T5946] __netif_receive_skb_list_core+0x357/0x950 [ 53.717250][ T5946] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 53.719027][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 53.720449][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 53.722182][ T5946] ? lock_acquire+0x2f/0xb0 [ 53.723423][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 53.725163][ T5946] netif_receive_skb_list_internal+0x753/0xdb0 [ 53.726865][ T5946] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 53.728904][ T5946] ? __pfx_eth_type_trans+0x10/0x10 [ 53.730328][ T5946] ? __build_skb_around+0x278/0x3b0 [ 53.731743][ T5946] netif_receive_skb_list+0x4f/0x4a0 [ 53.733161][ T5946] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 53.734844][ T5946] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 53.736584][ T5946] ? bpf_test_timer_continue+0x150/0x3d0 [ 53.738071][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 53.739485][ T5946] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 53.741058][ T5946] ? try_to_wake_up+0x154/0x14f0 [ 53.742334][ T5946] ? __pfx_try_to_wake_up+0x10/0x10 [ 53.743733][ T5946] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 53.745315][ T5946] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 53.746738][ T5946] ? 0xffffffffa0004340 [ 53.747865][ T5946] ? 0xffffffffa0004340 [ 53.748979][ T5946] ? 0xffffffffa0004340 [ 53.750076][ T5946] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 53.751665][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 53.753158][ T5946] ? lock_acquire+0x2f/0xb0 [ 53.754402][ T5946] ? __fget_files+0x40/0x3f0 [ 53.755677][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 53.757297][ T5946] ? fput+0x30/0x390 [ 53.758403][ T5946] ? __bpf_prog_get+0xa0/0x290 [ 53.759815][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 53.761434][ T5946] __sys_bpf+0xfc6/0x49a0 [ 53.762625][ T5946] ? find_held_lock+0x2d/0x110 [ 53.763911][ T5946] ? __pfx___sys_bpf+0x10/0x10 [ 53.765184][ T5946] ? __might_fault+0x13b/0x190 [ 53.766465][ T5946] ? __pfx_lock_release+0x10/0x10 [ 53.767791][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 53.769162][ T5946] ? lock_acquire+0x2f/0xb0 [ 53.770361][ T5946] ? __might_fault+0xe3/0x190 [ 53.771637][ T5946] ? xfd_validate_state+0x5d/0x180 [ 53.773013][ T5946] ? rcu_is_watching+0x12/0xc0 [ 53.774266][ T5946] __x64_sys_bpf+0x78/0xc0 [ 53.775477][ T5946] ? lockdep_hardirqs_on+0x7c/0x110 [ 53.776860][ T5946] do_syscall_64+0xcd/0x250 [ 53.778092][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.779668][ T5946] RIP: 0033:0x7f5102b5de99 [ 53.780840][ T5946] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 53.786337][ T5946] RSP: 002b:00007f5102b18228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 53.788624][ T5946] RAX: ffffffffffffffda RBX: 00007f5102be8328 RCX: 00007f5102b5de99 [ 53.791052][ T5946] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 53.793266][ T5946] RBP: 00007f5102be8320 R08: 00007f5102b186c0 R09: 00007f5102b186c0 [ 53.795313][ T5946] R10: 00007f5102b186c0 R11: 0000000000000246 R12: 00007f5102bb5074 [ 53.797369][ T5946] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffc619b1828 [ 53.799436][ T5946] [ 53.800351][ T5946] BUG: Bad page state in process syz-executor133 pfn:341af [ 53.802223][ T5946] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x341af [ 53.804395][ T5946] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 53.806166][ T5946] raw: 00fff00000000000 dead000000000040 ffff8880202ae000 0000000000000000 [ 53.808408][ T5946] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 53.811092][ T5946] page dumped because: page_pool leak [ 53.812654][ T5946] page_owner tracks the page as allocated [ 53.814112][ T5946] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5946, tgid 5942 (syz-executor133), ts 44467541533, free_ts 44458725924 [ 53.818540][ T5946] post_alloc_hook+0x2d1/0x350 [ 53.819793][ T5946] get_page_from_freelist+0x101e/0x3070 [ 53.821198][ T5946] __alloc_pages_noprof+0x223/0x25a0 [ 53.822551][ T5946] alloc_pages_bulk_noprof+0x77c/0x1110 [ 53.823974][ T5946] __page_pool_alloc_pages_slow+0x18f/0x770 [ 53.825475][ T5946] page_pool_alloc_netmem+0xc4/0x160 [ 53.826846][ T5946] page_pool_alloc_pages+0x1a/0x60 [ 53.828200][ T5946] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 53.829785][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 53.831156][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 53.832528][ T5946] __sys_bpf+0xfc6/0x49a0 [ 53.833640][ T5946] __x64_sys_bpf+0x78/0xc0 [ 53.834813][ T5946] do_syscall_64+0xcd/0x250 [ 53.835970][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.837477][ T5946] page last free pid 40 tgid 40 stack trace: [ 53.839062][ T5946] free_unref_page+0x5f4/0xdc0 [ 53.840367][ T5946] __folio_put+0x30d/0x3d0 [ 53.841530][ T5946] free_page_and_swap_cache+0x249/0x2c0 [ 53.842972][ T5946] tlb_remove_table_rcu+0x89/0xe0 [ 53.844282][ T5946] rcu_core+0x79d/0x14d0 [ 53.845401][ T5946] handle_softirqs+0x213/0x8f0 [ 53.846628][ T5946] irq_exit_rcu+0xbb/0x120 [ 53.847850][ T5946] sysvec_call_function_single+0xa4/0xc0 [ 53.849282][ T5946] asm_sysvec_call_function_single+0x1a/0x20 [ 53.850824][ T5946] Modules linked in: [ 53.851826][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: syz-executor133 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 53.855073][ T5946] Tainted: [B]=BAD_PAGE [ 53.856165][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 53.858849][ T5946] Call Trace: [ 53.859740][ T5946] [ 53.860489][ T5946] dump_stack_lvl+0x16c/0x1f0 [ 53.861801][ T5946] bad_page+0xb3/0x1f0 [ 53.862854][ T5946] ? __pfx_bad_page+0x10/0x10 [ 53.864044][ T5946] ? page_bad_reason+0x9d/0x1e0 [ 53.865297][ T5946] free_unref_page+0x657/0xdc0 [ 53.866510][ T5946] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 53.867969][ T5946] ? __phys_addr+0xc6/0x150 [ 53.869097][ T5946] skb_free_head+0xa0/0x1d0 [ 53.870229][ T5946] skb_release_data+0x560/0x730 [ 53.871431][ T5946] sk_skb_reason_drop+0x129/0x1a0 [ 53.872713][ T5946] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 53.874354][ T5946] ? kernel_text_address+0x8d/0x100 [ 53.875698][ T5946] ? hlock_class+0x4e/0x130 [ 53.876825][ T5946] ? __lock_acquire+0x163e/0x3ce0 [ 53.878107][ T5946] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 53.879867][ T5946] ? hlock_class+0x4e/0x130 [ 53.880991][ T5946] ? __lock_acquire+0xbdd/0x3ce0 [ 53.882248][ T5946] ? __pfx___lock_acquire+0x10/0x10 [ 53.883566][ T5946] __netif_receive_skb_list_core+0x357/0x950 [ 53.885096][ T5946] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 53.886744][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 53.888033][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 53.889624][ T5946] ? lock_acquire+0x2f/0xb0 [ 53.890762][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 53.892362][ T5946] netif_receive_skb_list_internal+0x753/0xdb0 [ 53.893933][ T5946] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 53.895608][ T5946] ? __pfx_eth_type_trans+0x10/0x10 [ 53.896920][ T5946] ? __build_skb_around+0x278/0x3b0 [ 53.898247][ T5946] netif_receive_skb_list+0x4f/0x4a0 [ 53.899584][ T5946] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 53.901122][ T5946] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 53.902756][ T5946] ? bpf_test_timer_continue+0x150/0x3d0 [ 53.904153][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 53.905521][ T5946] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 53.907025][ T5946] ? try_to_wake_up+0x154/0x14f0 [ 53.908302][ T5946] ? __pfx_try_to_wake_up+0x10/0x10 [ 53.909612][ T5946] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 53.911099][ T5946] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 53.912437][ T5946] ? 0xffffffffa0004340 [ 53.913777][ T5946] ? 0xffffffffa0004340 [ 53.914860][ T5946] ? 0xffffffffa0004340 [ 53.915896][ T5946] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 53.917531][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 53.919026][ T5946] ? lock_acquire+0x2f/0xb0 [ 53.920188][ T5946] ? __fget_files+0x40/0x3f0 [ 53.921407][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 53.922911][ T5946] ? fput+0x30/0x390 [ 53.923943][ T5946] ? __bpf_prog_get+0xa0/0x290 [ 53.925179][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 53.926667][ T5946] __sys_bpf+0xfc6/0x49a0 [ 53.927976][ T5946] ? find_held_lock+0x2d/0x110 [ 53.929431][ T5946] ? __pfx___sys_bpf+0x10/0x10 [ 53.930741][ T5946] ? __might_fault+0x13b/0x190 [ 53.932346][ T5946] ? __pfx_lock_release+0x10/0x10 [ 53.934023][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 53.935507][ T5946] ? lock_acquire+0x2f/0xb0 [ 53.936729][ T5946] ? __might_fault+0xe3/0x190 [ 53.937939][ T5946] ? xfd_validate_state+0x5d/0x180 [ 53.939293][ T5946] ? rcu_is_watching+0x12/0xc0 [ 53.940490][ T5946] __x64_sys_bpf+0x78/0xc0 [ 53.941640][ T5946] ? lockdep_hardirqs_on+0x7c/0x110 [ 53.942999][ T5946] do_syscall_64+0xcd/0x250 [ 53.944169][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.945686][ T5946] RIP: 0033:0x7f5102b5de99 [ 53.946820][ T5946] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 53.951553][ T5946] RSP: 002b:00007f5102b18228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 53.953661][ T5946] RAX: ffffffffffffffda RBX: 00007f5102be8328 RCX: 00007f5102b5de99 [ 53.955783][ T5946] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 53.957849][ T5946] RBP: 00007f5102be8320 R08: 00007f5102b186c0 R09: 00007f5102b186c0 [ 53.959906][ T5946] R10: 00007f5102b186c0 R11: 0000000000000246 R12: 00007f5102bb5074 [ 53.962126][ T5946] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffc619b1828 [ 53.964228][ T5946] [ 53.965151][ T5946] BUG: Bad page state in process syz-executor133 pfn:2a5b5 [ 53.967098][ T5946] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2a5b5 [ 53.969432][ T5946] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 53.971316][ T5946] raw: 00fff00000000000 dead000000000040 ffff8880202ae000 0000000000000000 [ 53.973531][ T5946] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 53.975777][ T5946] page dumped because: page_pool leak [ 53.977176][ T5946] page_owner tracks the page as allocated [ 53.978704][ T5946] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5946, tgid 5942 (syz-executor133), ts 44467534783, free_ts 44458731847 [ 53.983148][ T5946] post_alloc_hook+0x2d1/0x350 [ 53.984417][ T5946] get_page_from_freelist+0x101e/0x3070 [ 53.985858][ T5946] __alloc_pages_noprof+0x223/0x25a0 [ 53.987163][ T5946] alloc_pages_bulk_noprof+0x77c/0x1110 [ 53.988670][ T5946] __page_pool_alloc_pages_slow+0x18f/0x770 [ 53.990258][ T5946] page_pool_alloc_netmem+0xc4/0x160 [ 53.991694][ T5946] page_pool_alloc_pages+0x1a/0x60 [ 53.993058][ T5946] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 53.994702][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 53.996137][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 53.997572][ T5946] __sys_bpf+0xfc6/0x49a0 [ 53.998818][ T5946] __x64_sys_bpf+0x78/0xc0 [ 53.999994][ T5946] do_syscall_64+0xcd/0x250 [ 54.001225][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.002822][ T5946] page last free pid 40 tgid 40 stack trace: [ 54.004411][ T5946] free_unref_page+0x5f4/0xdc0 [ 54.005685][ T5946] __folio_put+0x30d/0x3d0 [ 54.006889][ T5946] free_page_and_swap_cache+0x249/0x2c0 [ 54.008421][ T5946] tlb_remove_table_rcu+0x89/0xe0 [ 54.009780][ T5946] rcu_core+0x79d/0x14d0 [ 54.010970][ T5946] handle_softirqs+0x213/0x8f0 [ 54.012404][ T5946] irq_exit_rcu+0xbb/0x120 [ 54.013753][ T5946] sysvec_call_function_single+0xa4/0xc0 [ 54.015450][ T5946] asm_sysvec_call_function_single+0x1a/0x20 [ 54.017224][ T5946] Modules linked in: [ 54.018399][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: syz-executor133 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 54.021912][ T5946] Tainted: [B]=BAD_PAGE [ 54.022983][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 54.025733][ T5946] Call Trace: [ 54.026613][ T5946] [ 54.027403][ T5946] dump_stack_lvl+0x16c/0x1f0 [ 54.028654][ T5946] bad_page+0xb3/0x1f0 [ 54.029729][ T5946] ? __pfx_bad_page+0x10/0x10 [ 54.030963][ T5946] ? page_bad_reason+0x9d/0x1e0 [ 54.032244][ T5946] free_unref_page+0x657/0xdc0 [ 54.033503][ T5946] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 54.035252][ T5946] ? __phys_addr+0xc6/0x150 [ 54.036462][ T5946] skb_free_head+0xa0/0x1d0 [ 54.037669][ T5946] skb_release_data+0x560/0x730 [ 54.038982][ T5946] sk_skb_reason_drop+0x129/0x1a0 [ 54.040306][ T5946] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 54.042190][ T5946] ? kernel_text_address+0x8d/0x100 [ 54.043585][ T5946] ? hlock_class+0x4e/0x130 [ 54.044793][ T5946] ? __lock_acquire+0x163e/0x3ce0 [ 54.046127][ T5946] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 54.047999][ T5946] ? hlock_class+0x4e/0x130 [ 54.049204][ T5946] ? __lock_acquire+0xbdd/0x3ce0 [ 54.050510][ T5946] ? __pfx___lock_acquire+0x10/0x10 [ 54.051908][ T5946] __netif_receive_skb_list_core+0x357/0x950 [ 54.053486][ T5946] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 54.055213][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 54.056721][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 54.058483][ T5946] ? lock_acquire+0x2f/0xb0 [ 54.059705][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 54.061376][ T5946] netif_receive_skb_list_internal+0x753/0xdb0 [ 54.063032][ T5946] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 54.064800][ T5946] ? __pfx_eth_type_trans+0x10/0x10 [ 54.066182][ T5946] ? __build_skb_around+0x278/0x3b0 [ 54.067570][ T5946] netif_receive_skb_list+0x4f/0x4a0 [ 54.068971][ T5946] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 54.070642][ T5946] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 54.072381][ T5946] ? bpf_test_timer_continue+0x150/0x3d0 [ 54.074001][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 54.075793][ T5946] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 54.077398][ T5946] ? try_to_wake_up+0x154/0x14f0 [ 54.078708][ T5946] ? __pfx_try_to_wake_up+0x10/0x10 [ 54.080177][ T5946] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 54.081746][ T5946] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 54.083138][ T5946] ? 0xffffffffa0004340 [ 54.084241][ T5946] ? 0xffffffffa0004340 [ 54.085347][ T5946] ? 0xffffffffa0004340 [ 54.086450][ T5946] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 54.088039][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 54.089470][ T5946] ? lock_acquire+0x2f/0xb0 [ 54.090679][ T5946] ? __fget_files+0x40/0x3f0 [ 54.091924][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 54.093491][ T5946] ? fput+0x30/0x390 [ 54.094562][ T5946] ? __bpf_prog_get+0xa0/0x290 [ 54.095906][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 54.097472][ T5946] __sys_bpf+0xfc6/0x49a0 [ 54.098637][ T5946] ? find_held_lock+0x2d/0x110 [ 54.099923][ T5946] ? __pfx___sys_bpf+0x10/0x10 [ 54.101189][ T5946] ? __might_fault+0x13b/0x190 [ 54.102463][ T5946] ? __pfx_lock_release+0x10/0x10 [ 54.103873][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 54.105358][ T5946] ? lock_acquire+0x2f/0xb0 [ 54.106576][ T5946] ? __might_fault+0xe3/0x190 [ 54.107864][ T5946] ? xfd_validate_state+0x5d/0x180 [ 54.109245][ T5946] ? rcu_is_watching+0x12/0xc0 [ 54.110537][ T5946] __x64_sys_bpf+0x78/0xc0 [ 54.111757][ T5946] ? lockdep_hardirqs_on+0x7c/0x110 [ 54.113153][ T5946] do_syscall_64+0xcd/0x250 [ 54.114377][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.115978][ T5946] RIP: 0033:0x7f5102b5de99 [ 54.117181][ T5946] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 54.122234][ T5946] RSP: 002b:00007f5102b18228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 54.124406][ T5946] RAX: ffffffffffffffda RBX: 00007f5102be8328 RCX: 00007f5102b5de99 [ 54.126483][ T5946] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 54.128576][ T5946] RBP: 00007f5102be8320 R08: 00007f5102b186c0 R09: 00007f5102b186c0 [ 54.130651][ T5946] R10: 00007f5102b186c0 R11: 0000000000000246 R12: 00007f5102bb5074 [ 54.132761][ T5946] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffc619b1828 [ 54.134869][ T5946] [ 54.135796][ T5946] BUG: Bad page state in process syz-executor133 pfn:300b0 [ 54.137680][ T5946] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880300b6600 pfn:0x300b0 [ 54.140350][ T5946] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 54.142220][ T5946] raw: 00fff00000000000 dead000000000040 ffff8880202ae000 0000000000000000 [ 54.144423][ T5946] raw: ffff8880300b6600 0000000000000001 00000000ffffffff 0000000000000000 [ 54.146618][ T5946] page dumped because: page_pool leak [ 54.148085][ T5946] page_owner tracks the page as allocated [ 54.149587][ T5946] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5946, tgid 5942 (syz-executor133), ts 44467528326, free_ts 44458737521 [ 54.154586][ T5946] post_alloc_hook+0x2d1/0x350 [ 54.155887][ T5946] get_page_from_freelist+0x101e/0x3070 [ 54.157425][ T5946] __alloc_pages_noprof+0x223/0x25a0 [ 54.158894][ T5946] alloc_pages_bulk_noprof+0x77c/0x1110 [ 54.160360][ T5946] __page_pool_alloc_pages_slow+0x18f/0x770 [ 54.161968][ T5946] page_pool_alloc_netmem+0xc4/0x160 [ 54.163434][ T5946] page_pool_alloc_pages+0x1a/0x60 [ 54.164854][ T5946] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 54.166650][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 54.168135][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 54.169550][ T5946] __sys_bpf+0xfc6/0x49a0 [ 54.170700][ T5946] __x64_sys_bpf+0x78/0xc0 [ 54.171910][ T5946] do_syscall_64+0xcd/0x250 [ 54.173134][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.174650][ T5946] page last free pid 40 tgid 40 stack trace: [ 54.176171][ T5946] free_unref_page+0x5f4/0xdc0 [ 54.177440][ T5946] __folio_put+0x30d/0x3d0 [ 54.178678][ T5946] free_page_and_swap_cache+0x249/0x2c0 [ 54.180162][ T5946] tlb_remove_table_rcu+0x89/0xe0 [ 54.181498][ T5946] rcu_core+0x79d/0x14d0 [ 54.182641][ T5946] handle_softirqs+0x213/0x8f0 [ 54.183909][ T5946] irq_exit_rcu+0xbb/0x120 [ 54.185090][ T5946] sysvec_call_function_single+0xa4/0xc0 [ 54.186580][ T5946] asm_sysvec_call_function_single+0x1a/0x20 [ 54.188227][ T5946] Modules linked in: [ 54.189263][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: syz-executor133 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 54.192518][ T5946] Tainted: [B]=BAD_PAGE [ 54.193617][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 54.196441][ T5946] Call Trace: [ 54.197336][ T5946] [ 54.198139][ T5946] dump_stack_lvl+0x16c/0x1f0 [ 54.199383][ T5946] bad_page+0xb3/0x1f0 [ 54.200493][ T5946] ? __pfx_bad_page+0x10/0x10 [ 54.201731][ T5946] ? page_bad_reason+0x9d/0x1e0 [ 54.203031][ T5946] free_unref_page+0x657/0xdc0 [ 54.204255][ T5946] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 54.205841][ T5946] ? __phys_addr+0xc6/0x150 [ 54.207054][ T5946] skb_free_head+0xa0/0x1d0 [ 54.208256][ T5946] skb_release_data+0x560/0x730 [ 54.209538][ T5946] sk_skb_reason_drop+0x129/0x1a0 [ 54.211158][ T5946] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 54.213456][ T5946] ? kernel_text_address+0x8d/0x100 [ 54.214940][ T5946] ? hlock_class+0x4e/0x130 [ 54.216167][ T5946] ? __lock_acquire+0x163e/0x3ce0 [ 54.217574][ T5946] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 54.219453][ T5946] ? hlock_class+0x4e/0x130 [ 54.220675][ T5946] ? __lock_acquire+0xbdd/0x3ce0 [ 54.221989][ T5946] ? __pfx___lock_acquire+0x10/0x10 [ 54.223381][ T5946] __netif_receive_skb_list_core+0x357/0x950 [ 54.224966][ T5946] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 54.226677][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 54.228072][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 54.229735][ T5946] ? lock_acquire+0x2f/0xb0 [ 54.230947][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 54.232617][ T5946] netif_receive_skb_list_internal+0x753/0xdb0 [ 54.234238][ T5946] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 54.236015][ T5946] ? __pfx_eth_type_trans+0x10/0x10 [ 54.237390][ T5946] ? __build_skb_around+0x278/0x3b0 [ 54.238774][ T5946] netif_receive_skb_list+0x4f/0x4a0 [ 54.240167][ T5946] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 54.241812][ T5946] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 54.243547][ T5946] ? bpf_test_timer_continue+0x150/0x3d0 [ 54.245029][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 54.246427][ T5946] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 54.247990][ T5946] ? try_to_wake_up+0x154/0x14f0 [ 54.249299][ T5946] ? __pfx_try_to_wake_up+0x10/0x10 [ 54.250674][ T5946] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 54.252249][ T5946] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 54.253646][ T5946] ? 0xffffffffa0004340 [ 54.254761][ T5946] ? 0xffffffffa0004340 [ 54.255865][ T5946] ? 0xffffffffa0004340 [ 54.256966][ T5946] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 54.258502][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 54.259956][ T5946] ? lock_acquire+0x2f/0xb0 [ 54.261161][ T5946] ? __fget_files+0x40/0x3f0 [ 54.262390][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 54.263944][ T5946] ? fput+0x30/0x390 [ 54.264983][ T5946] ? __bpf_prog_get+0xa0/0x290 [ 54.266258][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 54.267811][ T5946] __sys_bpf+0xfc6/0x49a0 [ 54.268958][ T5946] ? find_held_lock+0x2d/0x110 [ 54.270231][ T5946] ? __pfx___sys_bpf+0x10/0x10 [ 54.271505][ T5946] ? __might_fault+0x13b/0x190 [ 54.272832][ T5946] ? __pfx_lock_release+0x10/0x10 [ 54.274166][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 54.275579][ T5946] ? lock_acquire+0x2f/0xb0 [ 54.276794][ T5946] ? __might_fault+0xe3/0x190 [ 54.278049][ T5946] ? xfd_validate_state+0x5d/0x180 [ 54.279390][ T5946] ? rcu_is_watching+0x12/0xc0 [ 54.280667][ T5946] __x64_sys_bpf+0x78/0xc0 [ 54.281856][ T5946] ? lockdep_hardirqs_on+0x7c/0x110 [ 54.283236][ T5946] do_syscall_64+0xcd/0x250 [ 54.284450][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.286015][ T5946] RIP: 0033:0x7f5102b5de99 [ 54.287223][ T5946] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 54.292273][ T5946] RSP: 002b:00007f5102b18228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 54.294461][ T5946] RAX: ffffffffffffffda RBX: 00007f5102be8328 RCX: 00007f5102b5de99 [ 54.296560][ T5946] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 54.298639][ T5946] RBP: 00007f5102be8320 R08: 00007f5102b186c0 R09: 00007f5102b186c0 [ 54.300711][ T5946] R10: 00007f5102b186c0 R11: 0000000000000246 R12: 00007f5102bb5074 [ 54.302793][ T5946] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffc619b1828 [ 54.304861][ T5946] [ 54.305789][ T5946] BUG: Bad page state in process syz-executor133 pfn:300b4 [ 54.307705][ T5946] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x300b4 [ 54.310023][ T5946] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 54.311881][ T5946] raw: 00fff00000000000 dead000000000040 ffff8880202ae000 0000000000000000 [ 54.314130][ T5946] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 54.316371][ T5946] page dumped because: page_pool leak [ 54.317835][ T5946] page_owner tracks the page as allocated [ 54.319323][ T5946] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5946, tgid 5942 (syz-executor133), ts 44467521114, free_ts 44458744053 [ 54.323754][ T5946] post_alloc_hook+0x2d1/0x350 [ 54.325022][ T5946] get_page_from_freelist+0x101e/0x3070 [ 54.326472][ T5946] __alloc_pages_noprof+0x223/0x25a0 [ 54.327919][ T5946] alloc_pages_bulk_noprof+0x77c/0x1110 [ 54.329369][ T5946] __page_pool_alloc_pages_slow+0x18f/0x770 [ 54.330932][ T5946] page_pool_alloc_netmem+0xc4/0x160 [ 54.332524][ T5946] page_pool_alloc_pages+0x1a/0x60 [ 54.333856][ T5946] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 54.335517][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 54.336933][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 54.338532][ T5946] __sys_bpf+0xfc6/0x49a0 [ 54.339702][ T5946] __x64_sys_bpf+0x78/0xc0 [ 54.340896][ T5946] do_syscall_64+0xcd/0x250 [ 54.342118][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.343697][ T5946] page last free pid 40 tgid 40 stack trace: [ 54.345279][ T5946] free_unref_page+0x5f4/0xdc0 [ 54.346551][ T5946] __folio_put+0x30d/0x3d0 [ 54.347816][ T5946] free_page_and_swap_cache+0x249/0x2c0 [ 54.349306][ T5946] tlb_remove_table_rcu+0x89/0xe0 [ 54.350639][ T5946] rcu_core+0x79d/0x14d0 [ 54.351782][ T5946] handle_softirqs+0x213/0x8f0 [ 54.353054][ T5946] irq_exit_rcu+0xbb/0x120 [ 54.354250][ T5946] sysvec_call_function_single+0xa4/0xc0 [ 54.355779][ T5946] asm_sysvec_call_function_single+0x1a/0x20 [ 54.357385][ T5946] Modules linked in: [ 54.358481][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: syz-executor133 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 54.361737][ T5946] Tainted: [B]=BAD_PAGE [ 54.362848][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 54.365638][ T5946] Call Trace: [ 54.366525][ T5946] [ 54.367329][ T5946] dump_stack_lvl+0x16c/0x1f0 [ 54.368590][ T5946] bad_page+0xb3/0x1f0 [ 54.369677][ T5946] ? __pfx_bad_page+0x10/0x10 [ 54.370932][ T5946] ? page_bad_reason+0x9d/0x1e0 [ 54.372226][ T5946] free_unref_page+0x657/0xdc0 [ 54.373500][ T5946] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 54.375109][ T5946] ? __phys_addr+0xc6/0x150 [ 54.376315][ T5946] skb_free_head+0xa0/0x1d0 [ 54.377531][ T5946] skb_release_data+0x560/0x730 [ 54.378816][ T5946] sk_skb_reason_drop+0x129/0x1a0 [ 54.380128][ T5946] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 54.381868][ T5946] ? kernel_text_address+0x8d/0x100 [ 54.383254][ T5946] ? hlock_class+0x4e/0x130 [ 54.384458][ T5946] ? __lock_acquire+0x163e/0x3ce0 [ 54.385791][ T5946] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 54.387670][ T5946] ? hlock_class+0x4e/0x130 [ 54.388878][ T5946] ? __lock_acquire+0xbdd/0x3ce0 [ 54.390184][ T5946] ? __pfx___lock_acquire+0x10/0x10 [ 54.391565][ T5946] __netif_receive_skb_list_core+0x357/0x950 [ 54.393158][ T5946] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 54.394895][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 54.396279][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 54.397952][ T5946] ? lock_acquire+0x2f/0xb0 [ 54.399171][ T5946] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 54.400844][ T5946] netif_receive_skb_list_internal+0x753/0xdb0 [ 54.402476][ T5946] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 54.404190][ T5946] ? __pfx_eth_type_trans+0x10/0x10 [ 54.405568][ T5946] ? __build_skb_around+0x278/0x3b0 [ 54.406963][ T5946] netif_receive_skb_list+0x4f/0x4a0 [ 54.408358][ T5946] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 54.410007][ T5946] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 54.411751][ T5946] ? bpf_test_timer_continue+0x150/0x3d0 [ 54.413272][ T5946] bpf_test_run_xdp_live+0x365/0x500 [ 54.414687][ T5946] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 54.416242][ T5946] ? try_to_wake_up+0x154/0x14f0 [ 54.417554][ T5946] ? __pfx_try_to_wake_up+0x10/0x10 [ 54.418940][ T5946] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 54.420512][ T5946] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 54.421891][ T5946] ? 0xffffffffa0004340 [ 54.422945][ T5946] ? 0xffffffffa0004340 [ 54.424051][ T5946] ? 0xffffffffa0004340 [ 54.425140][ T5946] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 54.426690][ T5946] bpf_prog_test_run_xdp+0x827/0x1580 [ 54.428244][ T5946] ? lock_acquire+0x2f/0xb0 [ 54.429475][ T5946] ? __fget_files+0x40/0x3f0 [ 54.430760][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 54.432322][ T5946] ? fput+0x30/0x390 [ 54.433376][ T5946] ? __bpf_prog_get+0xa0/0x290 [ 54.434656][ T5946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 54.436210][ T5946] __sys_bpf+0xfc6/0x49a0 [ 54.437713][ T5946] ? find_held_lock+0x2d/0x110 [ 54.439122][ T5946] ? __pfx___sys_bpf+0x10/0x10 [ 54.440358][ T5946] ? __might_fault+0x13b/0x190 [ 54.441665][ T5946] ? __pfx_lock_release+0x10/0x10 [ 54.443021][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 54.444410][ T5946] ? lock_acquire+0x2f/0xb0 [ 54.445623][ T5946] ? __might_fault+0xe3/0x190 [ 54.446949][ T5946] ? xfd_validate_state+0x5d/0x180 [ 54.448306][ T5946] ? rcu_is_watching+0x12/0xc0 [ 54.449582][ T5946] __x64_sys_bpf+0x78/0xc0 [ 54.450779][ T5946] ? lockdep_hardirqs_on+0x7c/0x110 [ 54.452165][ T5946] do_syscall_64+0xcd/0x250 [ 54.453378][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.454981][ T5946] RIP: 0033:0x7f5102b5de99 [ 54.456167][ T5946] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 54.461094][ T5946] RSP: 002b:00007f5102b18228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 54.463247][ T5946] RAX: ffffffffffffffda RBX: 00007f5102be8328 RCX: 00007f5102b5de99 [ 54.465314][ T5946] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 54.467428][ T5946] RBP: 00007f5102be8320 R08: 00007f5102b186c0 R09: 00007f5102b186c0 [ 54.469507][ T5946] R10: 00007f5102b186c0 R11: 0000000000000246 R12: 00007f5102bb5074 [ 54.471598][ T5946] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffc619b1828 [ 54.473978][ T5946] [ 54.475146][ T5946] BUG: Bad page state in process syz-executor133 pfn:3417d [ 54.477069][ T5946] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803417d330 pfn:0x3417d [ 54.479796][ T5946] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 54.481677][ T5946] raw: 00fff00000000000 dead000000000040 ffff8880202ae000 0000000000000000 VM DIAGNOSIS: 18:24:11 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000059 RCX=ffffffff816da43a RDX=ffff888026a34880 RSI=0000000000000000 RDI=0000000000000001 RBP=1ffff9200079dd97 RSP=ffffc90003ceeca0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000001 R13=0000000000000200 R14=ffff88801eec4880 R15=ffffc90003ceed90 RIP=ffffffff818d7d4b RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f5102b186c0 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff334bf2440 CR3=0000000030f26000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000084000 Opmask01=0000000000000001 Opmask02=00000000ffff3f01 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe36c13850 0000003000000008 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe36c13850 0000003000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c5f5f0045544156 4952505f4342494c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000042494c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6362696c5f5f0045 5441564952505f43 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3261396131623234 65672d3530303030 2d72656c6c616b7a 79732d3563722d30 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 20726f20656c6966 2068637573206f4e ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0079726f74636572 696420726f20656c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffffc90004203048 RCX=ffffffff816b1ab3 RDX=0000000000000000 RSI=0000000000000004 RDI=ffffc90004203048 RBP=dffffc0000000000 RSP=ffffc90003cdf6a0 R8 =0000000000000000 R9 =fffff52000840609 R10=ffffc9000420304b R11=0000000000000000 R12=00000000000003bc R13=1ffff9200079bee3 R14=0000000000000001 R15=ffffc90004203000 RIP=ffffffff816b1ace RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f5102b186c0 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000000000000 CR3=0000000027a4e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000040000000 Opmask01=00000000ffffffff Opmask02=00000000fff80000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd0a06e7a0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c5f5f0045544156 4952505f4342494c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000042494c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6362696c5f5f0045 5441564952505f43 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f6e3a6d5e007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4b1f485e005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=0000000000038128 RCX=ffffffff8b0ead9d RDX=1ffffffff1b4c772 RSI=ffffffff8bd1acc0 RDI=ffffffff8da63b90 RBP=0000000000000002 RSP=ffffc9000421fc68 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000004 R13=0000000000000001 R14=0000000000000300 R15=00007fe34cff2fff RIP=ffffffff81738303 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fe34cdedd00 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe34ce99d2b CR3=0000000034de2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000040 Opmask01=0000000000000000 Opmask02=00000000fffdfeff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=00000000e200001f Opmask06=0000000000710000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65736e750073250a 7325732573253a73 2520737365726464 616e657473696c00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 616369746e656874 75612065726f6665 622074756f656d69 5400632e64687373 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000a0b000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 35322d6169726100 6d63672d3635322d 61697261006d6367 2d3239312d616972 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 050048090d140700 0000000000000000 0000000000000000 00040c0300000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0551595b0f1e6754 5130055c585e070f 645e523a0b525857 030e6c0b05671502 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3434313665686466 6600363930346568 6466660032373033 6568646666003834 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3800312d412d3239 002d41492d360032 2d612d3832002d43 432d3600322d412d ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 34002d2d412d0000 002d332d2d35002d 00382d3000002d43 2d2d00002d2d2d2d ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0007122733281622 202c27ec2328bff5 f4f1242a202732bf f5f4f1040a000712 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 202c27bff3f1f1ec f200071227332816 22202c27ec2328bf f5f4f1242a202732 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 3 CPU#3 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff850b46e5 RDI=ffffffff9aae7bc0 RBP=ffffffff9aae7b80 RSP=ffffc900009878d0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000020 R14=ffffffff850b4680 R15=0000000000000000 RIP=ffffffff850b470f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe34d2c8ba8 CR3=00000000318cc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000001 Opmask01=0000000000000000 Opmask02=0000000000400000 Opmask03=0000000000000000 Opmask04=00000000fffffbff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc65ecf7b0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c5f5f0045544156 4952505f4342494c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000042494c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6362696c5f5f0045 5441564952505f43 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20313439353d6469 702020726f66207d 2074736575716572 5f656c75646f6d00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2031343335376463 7020207265662077 2074736575716572 5565667564656700 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2033332072207473 636571652d5f656c 20646f65000a3235 2062322065666120 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202031 3600203727554220 2036343900002035 2039322034373420 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3e3e2a2a2a51343b 36003b376f7c6379 796367786f7a2a67 6f7e797379377979 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a39393b78657e7f 696f726f27707379 2a79796f6965787a 2a64632a6f7e6b7e ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000