last executing test programs: 21.989160345s ago: executing program 3 (id=127): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, 0xffffffffffffffff) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3100000000080005400000000d080004"], 0x74}}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) (rerun: 64) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) (async) syz_usb_disconnect(r5) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r6, 0x70694000) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r1, @ANYBLOB="000000000000000054002b80080003000000000008000800", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030000000000080003000000000008000100", @ANYRES32, @ANYBLOB="080002000a0000006a000800", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="050027"], 0x7c}}, 0x0) (async) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000140)=@dstopts={0x6, 0x20, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @enc_lim={0x4, 0x1, 0x82}, @jumbo={0xc2, 0x4, 0x1}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @empty}, @generic={0x7, 0xdd, "2d1f76dca6a70743768da5edf6103f29b22e38a915d11806e6b7b2eccd82be8d418c1eb071d32d4a5eb718583bfa63516c832f9adcbf836042e91906e3b51e43b64478e43a0ffd32974d9f5ca38cae3d5e6b42f8cf56cbc2783a1a334bb1b42a3ec2ab8b61a13e74b050d3211e133970a296fe2ec788f7f9b11d558bfdf43e63f8c7e2b756807bc5a83ebf566eeff930c5e5da4670fa19444f03e262c6c6063453a9a15a32e525e8b8581cfeaf30ef80d1e8dbea3064358b015e5d7c7547ba6fd708a458a2d6735328c2493680393311023d66f2ecad1b3888e6e158ed"}]}, 0x110) 20.520161172s ago: executing program 3 (id=146): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x1) (async) mlock2(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0) mlock2(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c00018008000100400004"], 0x24}}, 0x0) 20.309526038s ago: executing program 3 (id=152): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x2, &(0x7f0000000040)={@broadcast, @dev={0xac, 0x14, 0x14, 0x32}, @multicast1}, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000002100390d2cbd700000000000fe8000000000000000000000000000aae0000002000000000000000000000000000000000000fffc0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000006bb70000"], 0x50}}, 0x0) 20.259518194s ago: executing program 3 (id=154): r0 = syz_create_resource$binfmt(&(0x7f0000001100)='./file0\x00') openat$binfmt(0xffffff9c, r0, 0x41, 0x1ff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001200)={r1, 0x0, 0x25, 0x0, @val=@iter={&(0x7f0000001140), 0x10}}, 0x20) ioprio_set$uid(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r2, 0x400, 0x1) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file1\x00') r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x5, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x0, 0x0, @mcast1, 0xfffffbff}, 0x1c) connect$inet6(r4, &(0x7f0000000480)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f0000000cc0)={0x10000004}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x10008081}, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000002940)={0xffffffffffffffff}) setsockopt$TIPC_MCAST_REPLICAST(r6, 0x10f, 0x86) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000040601020000000000000000000000000500010007000000f3b625b1a977b4d5ddcbd99ac6bee45b778f184ef28902608e6b1037a2366f3222c6f5014f00aad061706b0af45139e2c7c8a7e664640dde71fdcefc498adf699fed5c7763c3f6f9e8e244c8323b4ea36646d49bb25eb3e54acae52941996846cd111b2c87d342d9f6087a38f3ec3b0e3bde7813a80e3ad5685de0b41446"], 0x1c}}, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0/../file0/../file0\x00', 0x0, 0x2e, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c2000000bbbbbbbbbbbb88a80000810000000800ffff0014000000000000907800000000ac1414aaf58caac8e38d0edf556b972d16b13f070000001b04e1bf329b611a7d2a223b8a9826678e4faeca3ca29049c53d809ca0ca5fdaf9b8e3b8315ba1fc0b9489208f5bd1661c45ff31c5abea280bd9d30ce709cb89078d786c19b543c664132c7ed93e472ef16cfa34b167f6c6b2a334309fd6792111618800a540a82fc286131cd931cb4e22bdea69f70c20c83f25ab4eeb7c8a31cbb0eec7a72cd69ff4166214c46f2edbe8d8603d5dba88e57ec5f4bcee250e852c0c91ba637b373aeda99cdacc99dd6eded7afa7feae0efd6124a793ebe103f9f29caaba0b9100accd4af61984a576df904d00d792973293964600"], 0x0) socket$rds(0x15, 0x5, 0x0) write$binfmt_script(r2, &(0x7f0000001180)={'#! ', './file0', [{0x20, '\xb6vkeuO\xd9 g\xccK]J\xf0Ek\xe0\xf8S\xfav\xdfj\xc2zX\xe2%\x13r%I\xf6\xba\xe1\x83\x01:\xcd}&\x95A\x06^K\x87\xca\xaf\x9d\xe3W\x8f\xeb\xb9\v\xb3\xaf\xb7\x1d\xcd\xff\xda\xb7m\x19\xf3\x17\\#u1\xc6-2#\xb8\xa8\xc7'}, {}, {0x20, '\x00'}, {0x20, '/dev/cpu/#/isr\x00'}]}, 0x6e) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 20.189931684s ago: executing program 3 (id=155): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x3, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x2000000008, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x4, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00') socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp(0xa, 0x2, 0x3a) syz_usb_connect(0x0, 0x24, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f0000000040)={{@hyper, 0x8}, 0x1, 0x1, 0x1}) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x74, 0x141341) ioctl$USBDEVFS_DISCARDURB(r4, 0x550b, 0x0) mkdir(&(0x7f00000003c0)='./file1\x00', 0x16) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1607010, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) 19.570055602s ago: executing program 3 (id=164): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000080)=0x100000000}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r7 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x6, 0x0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipmr_newroute={0x58, 0x18, 0x300, 0x70bd27, 0x25dfdbfe, {0x80, 0x14, 0x14, 0xa0, 0xfd, 0x4, 0x0, 0xf, 0x1310b33b770df09}, [@RTA_PRIORITY={0x8, 0x6, 0x8}, @RTA_IIF={0x8, 0x3, r9}, @RTA_FLOW={0x8, 0xb, 0x48}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_OIF={0x8, 0x7, 0x60}}, @RTA_IP_PROTO={0x5, 0x1b, 0x3a}, @RTA_SPORT={0x6, 0x1c, 0x4e20}, @RTA_FLOW={0x8, 0xb, 0x6}]}, 0x58}}, 0x8080) r10 = fsmount(r7, 0x0, 0x82) r11 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r11, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1400000000000000100100000d"], 0x30}, 0x0) mknodat(r10, &(0x7f0000000080)='./file0\x00', 0xfff, 0x0) execveat(r10, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x10, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) 10.237373081s ago: executing program 1 (id=239): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{0x0, 0xfffffffffffffed1}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timerfd_create(0x0, 0x0) socket(0xa, 0x3, 0x3a) r2 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x4000000) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c", @ANYRES32, @ANYRES8=r1], 0xfe33) 10.156992352s ago: executing program 1 (id=240): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYBLOB="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", @ANYRES8=r0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000716f00000000000033"], 0xfc}}, 0x880) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c000000610144ada3b733185a2215e273b8f0135ae9", @ANYRES16=r2, @ANYBLOB="00082abd7000fedbdf250600000006001a004e23000006000200010000000c001000dd220000000000000c000f000700000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24044044}, 0x4040000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) (async) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$VIDIOC_G_INPUT(r4, 0x80045626, 0x0) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f00000003c0)=0x2, 0x4) (async) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r6 = socket(0x11, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x17, 0x800000000004, @thr={&(0x7f0000000640)="7fee1246f29aee490bba4b11252cf28c287f5ae633c1f04cea0811afe06de91f9b6ef231a4ad34ac29473e68b62cb7f1ef4825a7beea0a0e836604eeb852e14f5bc1227c376a0bab1580196c13647426b83cf47c7ceecb3dc5928ccfb31c7d460d4024ce442fb7e9a8fe3a09915006bb963b4a702b31fd663ff56bd8a1b7ff3aaf288ebddcf91ed88f69379fd20d3bd521c5774add34a241f81f89981c16171bd51c18cd218881048691f0c1adc0be9e727df2e0ac6938c84249f957a18b484a60cfd4348f3efa8c65df77", &(0x7f0000000740)="5b89fbe942da343580f541e7a52b3da6a2fd85e763070d94e2182267476a538219cd94703a76237bb844476a8e924542003a29fb1bcdda5284a8844e58aa21dcd1af4afc13a831ecc222107a291ecc6238b7dae1e09e6194ca765563bf6d51015dfd758974bebd58bd76e13d6d73999205197961a6d4caefd40ecf3b937fb7197963d257e1567f430ff2355f58d7bdc95582d48fcd21c589cc86ea83aaba9ec9290bb81e3d54d49c947cc2b714f4cf"}}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) getsockopt$nfc_llcp(r6, 0x107, 0x14, 0x0, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) r8 = dup(r5) getsockopt$sock_buf(r8, 0x1, 0x1c, &(0x7f0000000000)=""/58, &(0x7f0000000040)=0x3a) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x100, 0x8, 0x8, 0x4010, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0xd, &(0x7f00000002c0)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x90) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='efs\x00', 0x1020849, 0x0) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) chown(&(0x7f0000000080)='./file0\x00', r10, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) 10.150891702s ago: executing program 1 (id=241): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f0000000580)={@val={0x1c, 0xf5}, @val, @mpls={[{}], @ipv6=@icmpv6={0x0, 0x6, '\x00', 0x39, 0x3a, 0x0, @mcast2, @private1, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [{0x0, 0x2, "b0dcc4a3616748a199e53d96e28516"}]}}}}}, 0x73) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) open(0x0, 0x4008040, 0x0) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r2, 0x0, 0x0) (async) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) syz_open_procfs(0x0, 0x0) (async) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) (async) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@empty, 0x800, 0x0, 0x3, 0x3}, 0x20) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x8002) (async) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) r7 = fcntl$dupfd(r4, 0x0, r6) write$sndseq(r7, 0x0, 0x0) 10.019547652s ago: executing program 1 (id=242): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0xffffffff, [{0x0, 0x3}]}, @ptr={0x0, 0x0, 0x0, 0x2, 0x3}, @restrict={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000003900)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003880)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000400)={'ip6_vti0\x00', 0x0, 0x29, 0xa, 0x10, 0xa2, 0x21, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x8020, 0x544, 0xfffffffe}}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x40, 0x1400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x1}]}}}]}, 0x3c}}, 0x0) r11 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r11, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bind$xdp(r11, &(0x7f0000000080)={0x2c, 0xc, r10, 0x3b}, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000000840)={0x24, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x63}, @val={0x8, 0x3, r6}, @void}}}, 0x24}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) 9.176695488s ago: executing program 1 (id=253): openat$kvm(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0x9, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x3}], 0x8, 0x0, 0x8}}) socket$netlink(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ip6_flowlabel\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000140)) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0900000018000000080000004000000042000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000e00"/28], 0x48) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000280), 0xfff, r5}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001600)={r5, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) ioctl$SNDRV_PCM_IOCTL_PAUSE(0xffffffffffffffff, 0x40044145, &(0x7f0000000040)=0xffff7ea8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000000091002d7b261bd9bc7f5f54dcc43ef5ec4d32287a968039ce2f8c4d2924423b384391cd139fec1b22fe8018874d1822b13a4c9ca6e3f867551484573d904516c9840a9e7a9ee2e83a61e33516fd66d3fd9b7a567ec526dccc23e4cfd18b073688f850165e8bd2651f4ae1558769d8abb73327de1b3c6e9d48d0f7cf1b2464466dd7ab6e3433a1b7e2081580a87fabbb096ac79d1d19ce564b9ac4135387", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r6 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r6, 0x0, 0x0, 0x0, &(0x7f0000000100)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x2004cb, 0x0, 0x0, 0x0, 0xefb], 0x0, 0x200}) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000000100)=0x0) r9 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r9, 0x1, 0x2e, &(0x7f0000001140)=0xfff, 0x4) ppoll(&(0x7f00000014c0)=[{r9, 0x20c0}], 0x1, 0x0, 0x0, 0x0) timer_settime(r8, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 8.905652477s ago: executing program 1 (id=257): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) (async) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') (async) chdir(&(0x7f0000000140)='./bus\x00') mkdir(&(0x7f0000000400)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0) fsync(r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000003100)="0f20e0450f00906d4b000066f30f0966baa00066ed0f01d1440f07c4423af7a60648000066ba4200b86b000000efc4639168aa000000007cb9ca0a0000b8a6154811ba29988a2f0f30", 0x49}], 0x1, 0x40, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000003100)="0f20e0450f00906d4b000066f30f0966baa00066ed0f01d1440f07c4423af7a60648000066ba4200b86b000000efc4639168aa000000007cb9ca0a0000b8a6154811ba29988a2f0f30", 0x49}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8.903577886s ago: executing program 32 (id=257): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) (async) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') (async) chdir(&(0x7f0000000140)='./bus\x00') mkdir(&(0x7f0000000400)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0) fsync(r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000003100)="0f20e0450f00906d4b000066f30f0966baa00066ed0f01d1440f07c4423af7a60648000066ba4200b86b000000efc4639168aa000000007cb9ca0a0000b8a6154811ba29988a2f0f30", 0x49}], 0x1, 0x40, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000003100)="0f20e0450f00906d4b000066f30f0966baa00066ed0f01d1440f07c4423af7a60648000066ba4200b86b000000efc4639168aa000000007cb9ca0a0000b8a6154811ba29988a2f0f30", 0x49}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.069220579s ago: executing program 2 (id=271): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000086000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x70bd26}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtaction={0x60, 0x30, 0xcac229faa96ee7df, 0x70bd26, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0xf, 0x1, 0x1000, 0xd}, 0x1}}]}, {0x4}, {0xc, 0x4, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x0, 0x1c}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1df}}]}]}}]}, 0x50}}, 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0) r11 = accept4(r10, 0x0, 0x0, 0x800) recvmmsg(r11, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000c40)=""/25, 0x19}], 0x1}, 0x5}], 0x1, 0x60, 0x0) connect$inet(r9, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r9, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="00f0b10000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 5.072405896s ago: executing program 2 (id=278): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r0 = fsopen(&(0x7f0000000040)='nfsd\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r2 = dup2(r0, r1) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000000100)={0x5, 0x0, 0x1010, 0x200, 0xe39, 0xc, 0x7ff}) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000020c0)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2e, 0x4, 0xfff, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000000403"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003180), r3) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b0000000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.548907543s ago: executing program 33 (id=164): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000080)=0x100000000}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r7 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x6, 0x0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipmr_newroute={0x58, 0x18, 0x300, 0x70bd27, 0x25dfdbfe, {0x80, 0x14, 0x14, 0xa0, 0xfd, 0x4, 0x0, 0xf, 0x1310b33b770df09}, [@RTA_PRIORITY={0x8, 0x6, 0x8}, @RTA_IIF={0x8, 0x3, r9}, @RTA_FLOW={0x8, 0xb, 0x48}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_OIF={0x8, 0x7, 0x60}}, @RTA_IP_PROTO={0x5, 0x1b, 0x3a}, @RTA_SPORT={0x6, 0x1c, 0x4e20}, @RTA_FLOW={0x8, 0xb, 0x6}]}, 0x58}}, 0x8080) r10 = fsmount(r7, 0x0, 0x82) r11 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r11, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1400000000000000100100000d"], 0x30}, 0x0) mknodat(r10, &(0x7f0000000080)='./file0\x00', 0xfff, 0x0) execveat(r10, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x10, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) 3.580440486s ago: executing program 2 (id=283): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000080)) r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x129002) r2 = syz_io_uring_setup(0x4166, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(r1) 1.899100673s ago: executing program 4 (id=295): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r1, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'erspan0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x40081}, 0x20000000) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x400, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000804) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x1406, 0x20, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f0000000480)={'gre0\x00', 0x0, 0x8000, 0x700, 0x4, 0xff6e, {{0xf, 0x4, 0x1, 0x9, 0x3c, 0x66, 0x0, 0x1, 0x2f, 0x0, @private=0xa010101, @multicast2, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x24, 0xbf, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@loopback, 0xd9}, {@local, 0x1}, {@private=0xa010101, 0x2}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000540)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x54, r4, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xf5934038a9b0425a}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001680)={&(0x7f00000006c0)=@newchain={0xfb0, 0x64, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xb, 0xd}, {0xffe0, 0x6}, {0xd, 0xc}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_flow={{0x9}, {0xf68, 0x2, [@TCA_FLOW_EMATCHES={0x5e8, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x140, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x9, 0x0, 0x5}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x53a1, 0x3, 0x3}, {0xc, 0x6ec, 0x1, 0xe9}}}, @TCF_EM_META={0xd0, 0x2, 0x0, 0x0, {{0x4, 0x4, 0xe}, [@TCA_EM_META_LVALUE={0x13, 0x2, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="f5", @TCF_META_TYPE_VAR="dbe2f5144890", @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_LVALUE={0x22, 0x2, [@TCF_META_TYPE_VAR="48379a22a2e99ddd6e", @TCF_META_TYPE_VAR="7115ae7456cb977f", @TCF_META_TYPE_VAR="6c7727badb", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x4, 0x1}, {0x4a, 0x1, 0x1}}}, @TCA_EM_META_LVALUE={0x18, 0x2, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR='L0Nl']}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x5}, {0x0, 0x80}}}, @TCA_EM_META_LVALUE={0x21, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="4e3ffac1aea5", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="f95eb32639d3543b07f4", @TCF_META_TYPE_VAR='\r', @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_RVALUE={0x10, 0x3, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_RVALUE={0x1c, 0x3, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="f0be955f89bf3b", @TCF_META_TYPE_VAR="35a1cd4e9235", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="03fa58"]}, @TCA_EM_META_LVALUE={0x4}]}}, @TCF_EM_CONTAINER={0x28, 0x2, 0x0, 0x0, {{0x3, 0x0, 0xf0a1}, "35a0b1fb0349746ee2e28a3df8b88ae44ca9c023331f12cad88e"}}, @TCF_EM_NBYTE={0x1c, 0x2, 0x0, 0x0, {{0x7, 0x2, 0x5}, {0x2, 0xa, 0x0, "c8657b71d60c5059142e"}}}]}, @TCA_EMATCH_TREE_LIST={0x19c, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x8, 0x7, 0xff}, {{0x23f, 0x0, 0x1}, {0x4, 0x1, 0x0, 0x1}}}}, @TCF_EM_META={0x50, 0x2, 0x0, 0x0, {{0x1, 0x4, 0x800}, [@TCA_EM_META_LVALUE={0x20, 0x2, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="bd3e97743d1d79cd84", @TCF_META_TYPE_VAR="a3", @TCF_META_TYPE_VAR="3adea4", @TCF_META_TYPE_VAR]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1ff, 0xe6}, {0x7ff, 0x2, 0x2}}}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x10, 0x7, 0x6}, {{0x1, 0x1, 0x1}, {0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x9, 0x7, 0x426}, {{0x4, 0x1, 0x1}, {0x2, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x8, 0x3, 0x8}, {0x400, 0x6, 0x2, 0x4}}}, @TCF_EM_META={0xb8, 0x1, 0x0, 0x0, {{0x5, 0x4, 0x40}, [@TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_VAR="0b22a5c0"]}, @TCA_EM_META_RVALUE={0x34, 0x3, [@TCF_META_TYPE_VAR="56501a8b8129e990", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="56df141592eab41aab", @TCF_META_TYPE_VAR="f1611d3b25", @TCF_META_TYPE_VAR="fed33c8c59f8a190be46", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_VAR="0464594d", @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_RVALUE={0x29, 0x3, [@TCF_META_TYPE_VAR="9745ebffba2727963e", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="8a2c1d226649", @TCF_META_TYPE_VAR="d5218184", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="5299", @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_RVALUE={0x2c, 0x3, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="ebd1065bfca3", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="855e91a98eebc1fc6c", @TCF_META_TYPE_VAR="292ef48bf5cee921", @TCF_META_TYPE_VAR="0665c36411"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xfffc, 0xc0, 0x2}, {0x800, 0x5d, 0x1}}}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x9, 0x3, 0x1}, {0x2f, 0x0, 0x0, 0x3}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xfffe, 0x3, 0xab5}, {0xa, 0xb96, 0x7}}}]}, @TCA_EMATCH_TREE_LIST={0x2e8, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x78, 0x3, 0x0, 0x0, {{0xa, 0x0, 0x8}, "b9f96d4d1550c353549881493633a4c72dd9fff9ce8dcaf914dee4e13058b7abb7ad6c36e9344c357579f1843e55431aa49cd1ea6f630b03309e4174784851e448776959ef7a6b084339d9ac97639835a76ff895efb7981111bd6fba6f02e0d5c8e90f23248e663ea2eddc"}}, @TCF_EM_IPT={0x15c, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x7fff}, [@TCA_EM_IPT_MATCH_DATA={0xb7, 0x5, "d25bc69520a7fab1cae7371c846c8d4b7bbcb6c63a7772c75f06482300bf3686233ab7fe84be783e880ca0e826ba11a1b8860cad51a6cbac8de01722a2c5c8d3fd290831121367f3b2296fe2fdf797c897d23d85592eb08f1748c8ed1e6f867a7a8f7c4dac9019a5fc1069ed41a3b4f5e13080e42717474d2280deebd68d288ed167f869f4a0ae61426ce6b29108d50d8fd3779220b09960ffada4b66cde63521c4c0c78f145f4951581fcb467c928a22a90f5"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x81, 0x5, "2bed59df9dcbdfab2c705e5bf634605c40f6141b87ea7d90791a6d38835320ec286a0bc1fc69e03ba8e9f5de06fb46924ee3099714a8da8dc508f50167557ec9a0e2f1339b0357dc9ed439ce69d6c802b81fa37242fe870ad0460255421557e4065d895b72089d380d60b418c6adcd6ee0d3d11142a64de91e224a5498"}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x4, 0x3, 0x5}, {0xff, 0x5, 0x8000}}}, @TCF_EM_IPT={0xd0, 0x3, 0x0, 0x0, {{0x200, 0x9, 0xc1}, [@TCA_EM_IPT_MATCH_DATA={0x91, 0x5, "b85c7792875e2722bbb65cd1aee69445149e66b0bafa4335d008b20a2965594560fae954ae788ae488ffac8ee952970fa6f76c4a3be7eabdd86533899ee0c4fb6fe0f4dea46a7d8fb55a748ce959c49997382dc17d34b2af8eb5a992739adc4861e9775f07e5674d6137021d8121b679a9d61725dd352b5380edcad1a427233cb079c5fd2914f8310696f342e8"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x5}, @TCA_EM_IPT_MATCH_REVISION={0x5}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x1}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x6}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}]}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x1, 0x8, 0x9}, {0x0, 0x0, 0x1}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xfffd, 0x7, 0x2}, {{0x4, 0x0, 0x1, 0x1}, {0x3, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x6, 0x3, 0x7}, {0x3, 0x276, 0x4f7, 0x2}}}]}]}, @TCA_FLOW_POLICE={0x834, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xd, 0x3, 0xb31f, 0xb3, 0x6, 0x59ff, 0x5, 0x1, 0x9, 0x0, 0x3d, 0x400, 0x2, 0x8, 0x7, 0x200, 0x3, 0x0, 0x6, 0xe29, 0x7fff, 0x6, 0x7, 0x5, 0x10001, 0xfffff5c1, 0x100, 0x7, 0xffffffff, 0xffffffff, 0x1, 0x9, 0x7fffffff, 0x6, 0xf26, 0x0, 0x249, 0x7f, 0x10001, 0x4, 0x6, 0x5, 0xd, 0x6, 0x1, 0x10, 0x0, 0xa, 0x4, 0xfffffffa, 0xb, 0x100, 0x4, 0x1, 0x0, 0x6, 0xffffffff, 0x6, 0xc0000, 0x9, 0x40, 0x6, 0x2b5d, 0xfffff800, 0xfffffffe, 0x4, 0x0, 0x1, 0xfffffffe, 0x1, 0x4, 0x1000, 0x8000000, 0x8, 0xc, 0x80000000, 0x100, 0x1, 0xfac, 0x9, 0x7f, 0x3, 0x200, 0x8001, 0x7, 0x8, 0x5, 0x8, 0x8, 0x3, 0x0, 0x9, 0x80000001, 0x2, 0xff, 0xf, 0x3, 0x9, 0x5, 0xffff, 0xd, 0xfffffffd, 0x9, 0x3, 0x7, 0x9, 0x1, 0x6, 0x6, 0x94a, 0xb, 0x4, 0x80, 0x7fffffff, 0xffffff10, 0x6, 0x7, 0x2, 0x9, 0xb36, 0x6, 0x9, 0x7, 0x625, 0x80, 0x1, 0xd90, 0x2, 0x9, 0x7fcd, 0x8, 0x7ff, 0x5cd6, 0xf059, 0x750f, 0x9, 0x3ff, 0x200, 0x2, 0x4, 0x7ff, 0x8001, 0x3, 0x8, 0x1000, 0xa33, 0xd, 0xfff, 0x101, 0x0, 0x86db, 0x3, 0x8, 0x7ff, 0x6, 0x2, 0xe163, 0xfffffffc, 0x2, 0x3, 0x40, 0x6, 0x8, 0x5, 0x1f400000, 0x1, 0x2, 0x47, 0x81, 0x1000, 0xdf5, 0x99d3, 0x7, 0x5, 0xffffffff, 0x3ff, 0x40, 0x10000, 0x7, 0xa4e1, 0x200, 0x1, 0x28, 0x0, 0x81, 0x2, 0x0, 0x7, 0xca0, 0x7, 0xa, 0x3, 0xf, 0x8, 0xf9bf, 0x9, 0x6, 0xd, 0x8c, 0x77, 0x800, 0x1, 0x0, 0x0, 0x9, 0x9, 0x3, 0x6, 0x9, 0x7f, 0x6ee, 0x7, 0x100, 0xf7, 0xfff, 0x2, 0x7fff, 0x3, 0x539, 0x400, 0x2, 0x9, 0x2, 0x1, 0x0, 0x8, 0x7, 0x8, 0x80000000, 0x3215, 0x89, 0x0, 0x4, 0x96, 0x9, 0x7, 0xfffffffe, 0x72, 0x5, 0x7, 0x8, 0x9, 0x0, 0x7, 0x5, 0x3, 0x7, 0x246, 0xa, 0x5, 0xfffffffd, 0x2000000, 0x7, 0x3, 0xe65, 0x1]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x29b6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x4, 0x10001, 0x8, 0x8, 0x953, 0x40, 0x6e7, 0x2dd2, 0x6, 0x8001, 0x10001, 0xfffffff7, 0x0, 0xde0, 0x0, 0x8, 0x2, 0x9, 0xc, 0x1, 0x7, 0x9, 0x5b7, 0x5, 0x7, 0x80000001, 0x7bc7, 0x0, 0x8, 0x6, 0x40, 0x80000000, 0x5, 0x2, 0x9, 0x7, 0x8, 0x4d02, 0x5c, 0x2, 0x1, 0x8, 0xb75, 0x1, 0x1000, 0x84ca, 0x15cf1ec, 0x5, 0x4, 0x7ff, 0x8, 0x0, 0x5, 0x400, 0x10, 0x3, 0x7, 0x1, 0x8, 0x3, 0x270ed83f, 0x4, 0x413, 0x0, 0x6, 0x2, 0x4, 0x9, 0xffff, 0x4, 0x6, 0x0, 0xffffff40, 0x7f, 0xeff2, 0x7, 0xff, 0x6, 0x1, 0x1ff, 0xb, 0x7fff, 0x2, 0x80000001, 0x0, 0x8, 0x0, 0xffffff1b, 0x8, 0x10001, 0x7f, 0x9, 0x6, 0x5, 0x10000, 0xdd, 0x37, 0x1, 0x4, 0xf0, 0xc1, 0x8, 0x3, 0x9e50, 0xc8, 0x4, 0x400, 0x200, 0x2, 0x6, 0x5, 0x8d, 0xffffffff, 0x8, 0x6, 0x1, 0x9, 0xffff8001, 0xf, 0x3, 0x9, 0x0, 0x4, 0x20000000, 0x3ff, 0xdf, 0x6, 0x2368c599, 0x9e8c, 0x8001, 0x2cec, 0x1, 0x1, 0x6, 0x7, 0x5, 0x2, 0x200, 0x86a, 0x4, 0x0, 0x5, 0xf6, 0x7, 0x9, 0x1ab068a6, 0xfff, 0xd, 0x99, 0xdc7a, 0x2, 0x1, 0x8, 0xd4f2, 0x3, 0x9, 0x3, 0x1ff, 0x1, 0x1ff, 0x6, 0x2, 0x0, 0x7ff, 0x2e7, 0x9, 0xf68, 0xd288, 0x53, 0x2, 0x1ff, 0x6, 0x4, 0x10000, 0x3, 0x80000001, 0x7fff, 0x9, 0x100, 0xfffff444, 0x3ff, 0x6, 0x6, 0x8, 0xf04, 0x9, 0x7f, 0x7, 0x0, 0x3, 0x2d, 0xfffffffb, 0x1, 0xf8, 0x1, 0xe6b, 0xff, 0x1, 0xffffffff, 0x8, 0x7, 0x400, 0xe74, 0xffffffff, 0xb22a, 0x832, 0x400, 0xffffff31, 0x5, 0x1d7, 0x0, 0x0, 0x1, 0xfffffff9, 0x1, 0x8, 0x5, 0xa0, 0x9, 0x0, 0x7, 0x9, 0x58, 0x9, 0x1, 0x1, 0x10001, 0x4, 0xd2d, 0xe, 0x3b2e03a4, 0x80, 0x9, 0x8, 0x4, 0x800, 0x7, 0x6, 0x2, 0xee, 0x3, 0x6, 0x7, 0x6, 0x7, 0xff, 0x7, 0x0, 0x5, 0x0, 0x6, 0x4, 0x3, 0x1, 0x4ac4]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}]}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x8}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_EMATCHES={0x138, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x134, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x1ff, 0x1, 0x7}, {0x0, 0x9, 0x8000, 0x7, 0x2, 0x0, 0x2}}}, @TCF_EM_IPT={0x3c, 0x2, 0x0, 0x0, {{0x9, 0x9, 0x2}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x1}]}}, @TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0xb, 0x4, 0x3}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x3ff, 0x3, 0x2}, {0x7, 0x4, 0x2}}}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x5, 0x8, 0x6}, {0x2, 0x6, 0x4}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x8000, 0x7, 0xa}, {{0x4, 0x0, 0x1, 0x1}, {0x4, 0x1, 0x0, 0x1}}}}, @TCF_EM_META={0xa0, 0x3, 0x0, 0x0, {{0xec, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x0, 0x2}, {0x2, 0x8, 0x2}}}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_LVALUE={0x3e, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="c0d421f4ac765d27463b", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="a709eded56ad6a5c60a5", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="bca221722953033a2f4c", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x3, 0x1}, {0x1, 0x2, 0x1}}}, @TCA_EM_META_RVALUE={0x1a, 0x3, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="eb9cb88da6238d", @TCF_META_TYPE_VAR='\r9', @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR='s']}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x9}, {0x4, 0x6}}}]}}]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0xec7}, @TCA_RATE={0x6, 0x5, {0x4, 0x2}}]}, 0xfb0}, 0x1, 0x0, 0x0, 0x4000000}, 0x40010) bind(r0, &(0x7f0000001700)=@phonet={0x23, 0xd, 0xfb, 0x6}, 0x80) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000001780)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f00000017c0)='./file0\x00', 0xb2000, 0x2) time(&(0x7f0000001800)) time(&(0x7f0000001840)) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x18, 0x10, &(0x7f00000018c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe57}, [@map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, @alu={0x7, 0x1, 0x2, 0x5, 0x1, 0xfffffffffffffff0, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, @tail_call]}, &(0x7f0000001940)='syzkaller\x00', 0xfff, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001980)={0x5, 0xa, 0x8, 0x4}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000019c0)=[0xffffffffffffffff], &(0x7f0000001a00)=[{0x5, 0x3, 0x3, 0x5}, {0x0, 0x5, 0x5, 0xa}, {0x2, 0x5, 0xf, 0xb}], 0x10, 0x80000001, @void, @value}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b00)={&(0x7f0000001880)='rxrpc_rx_done\x00', r7, 0x0, 0x6}, 0x18) ioctl$AUTOFS_IOC_ASKUMOUNT(r8, 0x80049370, &(0x7f0000001b40)) r9 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000001b80), 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001bc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f0000001c00)=@file={0x1, './file0\x00'}, 0x6e) sendto$unix(r10, &(0x7f0000001c80)="598ce14fc8697ebe3da4e52afa08854062b67a4cad976f29e752ac91f7347f2f8e5c291293b015329c34483e275a5acc8ea71abf9ca3a0c350e1dbc1a70831d0feca81a9ceb5b9e81636a2565a52edd4e6cefdc77e96ebf2ec975aea857448d83fa2bc1913416ff11f36b315c43eaa17e0cbb4e2337d749a7321be73beb74f8da6e3e8cdc0de05527e465908361f4938e11b44001a3586698f716fc1d732a9ea0cb4f8b033999608d90de01747e0b88c4660cb3f80b3a9e73297891e5b07a0f1fc4168c58fdf24f30db4ca28ba37f4319199d50b8f6fd5382e644df57db89873605398fd81457e12842f49f89115c5f260c6b45ce08e5b", 0xf7, 0x4014, &(0x7f0000001d80)=@file={0x1, './file0\x00'}, 0x6e) openat$vnet(0xffffffffffffff9c, &(0x7f0000001e00), 0x2, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000001e40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001e80)=0x14) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000001f00)={0x0, @xdp={0x2c, 0x1, r6, 0x1e}, @xdp={0x2c, 0x0, r11, 0x39}, @can, 0x5, 0x0, 0x0, 0x0, 0x1000, &(0x7f0000001ec0)='tunl0\x00', 0x0, 0x0, 0xc82}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001f80)=0x0) fcntl$lock(r9, 0x24, &(0x7f0000001fc0)={0x1, 0x0, 0x85bd, 0x6, r12}) 1.849745096s ago: executing program 4 (id=296): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0x4) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000003240)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r6, r5], 0x2}) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000240)={0x2, 0x0, 0x0}) (async) syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x0) (async) r7 = syz_open_dev$evdev(&(0x7f0000000a00), 0x2, 0x2) r8 = syz_io_uring_setup(0x7279, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (async) io_uring_enter(r8, 0x2def, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c460006000000e0ff0000ffffff02000800d4"], 0x78) readv(r0, &(0x7f0000000500)=[{&(0x7f0000000400)=""/202, 0xca}], 0x1) (async) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000900)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r12 = accept4(r11, 0x0, 0x0, 0x0) recvmsg$kcm(r12, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000000)=""/248, 0xf8}], 0x1}, 0x0) (async) sendmsg$nl_route_sched_retired(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@delchain={0xb0, 0x65, 0x0, 0x0, 0x0, {}, [@f_rsvp6={{0xa}, {0x80, 0x2, [@TCA_RSVP_ACT={0x7c, 0x6, [@m_simple={0x3c, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0xd, 0x6, "5ac89f893aee85dc64"}, {0xc}, {0xc}}}, @m_mpls={0x3c, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0xd, 0x6, "4bdf6d8f73c44b11c7"}, {0xc}, {0xc}}}]}]}}]}, 0xb0}}, 0x0) 1.790162502s ago: executing program 4 (id=297): ptrace$ARCH_SET_GS(0x1e, 0x0, &(0x7f0000003d80), 0x1001) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000040)={0x80, {{0x2, 0x4e24, @private=0xa010102}}}, 0x88) pipe(&(0x7f0000000040)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = dup(r1) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) syz_fuse_handle_req(r3, &(0x7f00000003c0)="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", 0x2000, &(0x7f0000004b40)={&(0x7f00000044c0)={0x50, 0x0, 0x7, {0x7, 0x27, 0xffffffff, 0xc400d1, 0x8, 0x9, 0x7fff, 0x7}}, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x9}}, 0x0, &(0x7f0000004540)={0x18, 0xfffffffffffffffe, 0xe00, {0xffff}}, &(0x7f0000004580)={0x18, 0x0, 0x5, {0xc076}}, &(0x7f00000045c0)={0x28, 0x0, 0x4, {{0x7fff, 0x1}}}, &(0x7f0000004600)={0x60, 0x0, 0x200, {{0x6, 0xf2, 0x9, 0x1ff, 0x207, 0x7, 0x8001, 0x7fffffff}}}, &(0x7f0000004680)={0x18, 0x0, 0x7fffffffffffffff, {0x5}}, &(0x7f00000023c0)=ANY=[@ANYBLOB="1fe600000078ca4e3d0000070101000000001d00000021245b282a295b402c858804063f2e3a164a2cec2f73019d710a6f0bfd46265684cf010098b94f05a6875e0e3ee8f6859f07aa6ddf996fea2dbaf3e7b3c5b9219e9d69980fb7f3257147a98130ecc08d2549a7930bafd8c4f7fc75eaff72fc4d234dce1bbc7b3b78a00f203796acc22d4f37bab7e4"], &(0x7f0000004700)={0x20, 0xfffffffffffffff5, 0x0, {0x0, 0x4}}, 0x0, &(0x7f0000004900)={0x90, 0x0, 0xc2, {0x1, 0x3, 0x1ff, 0x4, 0x1, 0x9, {0x3, 0x5, 0x6b6a, 0x0, 0x8, 0x9, 0xaf, 0x7fff, 0x5, 0x2000, 0xb9f, r4, 0x0, 0x62a, 0x6}}}, &(0x7f00000049c0)={0x30, 0x0, 0x7ff, [{0x4, 0x1, 0x2, 0x800, '{#'}]}, &(0x7f0000004a00)=ANY=[@ANYBLOB="1004000000000000ff0f000000000000"], &(0x7f0000004a40)={0xa0, 0x0, 0x6, {{0x0, 0x3, 0x1ff, 0x401, 0x90, 0x6, {0x2, 0x0, 0x0, 0xffffffffffffffff, 0x15, 0x0, 0x2, 0x0, 0x1, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x17de17d3}}, {0x0, 0x10}}}, &(0x7f0000004b00)={0x20, 0x0, 0x800, {0x3, 0x4, 0x8}}}) sendfile(r3, 0xffffffffffffffff, &(0x7f0000004bc0)=0x10000, 0x9257) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlinkprop={0x48, 0x10, 0xf8b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @random="2cf9f54fbe58"}]}}}]}, 0x48}}, 0x0) bind$inet(r3, &(0x7f0000002580)={0x2, 0x4e24, @multicast2}, 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000440)={0x0, 0xfffffee0, &(0x7f00000001c0)={&(0x7f0000000480)=@newpolicy={0xb8, 0x13, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x0, 0x0, 0x0, 0xee00}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000003f00)=@getsadinfo={0x26c, 0x23, 0x8, 0x70bd26, 0x25dfdbfe, 0x0, [@sec_ctx={0xa1, 0x8, {0x9d, 0x8, 0x0, 0xff, 0x95, "977e9d776b935c97ee6f3163b8dda771d439a73664eae3687b61d8da3f06c8aa3d8d6d38a5456159ee2d15ae3e9e74f09e76c27d7c21a7f572283ed8da2c284076af43adf01ec5dfb7f0fea5fac1ffb5e05d1823d538e587489e0bd5a4d7c14c21435e7e9b816534ecbaa99a29f8942583ec9d239d92eb2ad62abdbda016976c314a956de35b0267b834ae6bd8f42e070f4aebc54e"}}, @algo_auth_trunc={0x96, 0x14, {{'sha256-generic\x00'}, 0x250, 0x80, "adb6f9bbc1f50b92fd9fa60f69dfa1b7b35a2b0c105697f5f7ffd8cb415cbcf2a82801f23e0bec7de4f73f2ffe09bd7c0398e265ddec33173648c4bbd6ee330dbd4c626df746bb774444"}}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}, @srcaddr={0x14, 0xd, @in6=@mcast2}, @coaddr={0x14, 0xe, @in=@multicast2}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e20, 0x4e23, @in=@remote}}, @coaddr={0x14, 0xe, @in=@dev={0xac, 0x14, 0x14, 0x43}}, @algo_crypt={0xb9, 0x2, {{'ecb(twofish)\x00'}, 0x388, "276862adf716b31617bc83b7599994b5c8f85562e7c36ba535a1d197b3e07f79ec2da879483aa526be381a5a28869b9ebf32b6b008aa3a79642d65125aa94b01c6d0f01f56b519feafaa6d088ac4cbe6ab142881f6038d46931451405872b05fe0412e55f8ef9aa4ec560d71ea1bdafe32"}}]}, 0x26c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40040) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/block/loop0', 0x422002, 0x120) r7 = socket$inet(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x2d}, {0x20, 0x0, 0x0, 0xfffff01c}, {0x6}]}, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000000801"], 0x14}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@newpolicy={0xb8, 0x13, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@local={0xfe, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x0, 0x0, 0x0, 0xee00}}}, 0xb8}}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x11, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) 918.056213ms ago: executing program 4 (id=300): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) (async) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000001c0)={'ip_vti0\x00'}) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000600)={'#! ', '', [{0x20, '\xd0\xa0cpuacct.usage_syM^_5A:\xd5\xbf\xa2\xed\x97\x9a\x8b\xcbf\xd5yk?\xbe\x1d\xfdS\xdd\xf5\xe9\x95*\x16\xf3\x0e6\xa5\x05\x18r|\xb7\x88\xee\x81\x12\x03\xaf\xff\xc0<$\xb2\xdc\x89\xa2pK\xb79\xc2\x95\x7fb\x81\r5\xb9#0\x1f\xfd\f\v4\xe3\xae\xc4\xf6\xecU\xfe\x8e\xff\xe5\xae\x90{\x1b\xb2z^\xf0\x14'}, {0x20, '\xc4}s'}, {}, {}, {0x20, '#! '}, {0x20, '#! \xfd;]\xf5a\x10\x00W\xe9{\xe9\\\xcbP\x85\x11\x17o4\xdd\xd0K\xec\xfb\xdb\x12\x86\x8d\xd1\xb9\xeb@/\x10[\xf7`|V\xf8\x1d\x8c\xa5\xd0\xbc\xfa6\xb7\x957\f\xff\xaeU\xc5\xcf\xc9\x03\x9b3[G\xa0h\x1b\xf7\x02\xce\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc7,\xa1L\xf8\xae\xfbL\xa97\xa2\x93\x931\vfN\xf7\xc8\xe7JXX\xb2\xaf\xf6QO\xedu\xee\xeb\\\xbb=\x90\xba\x88\xfd\x06\xe7\xecx\xa2\x19\xa8\xd2\xd7F\xf2>X&]\xe6'}, {0x20, '#! '}, {0x20, '^$'}, {0x20, '\xee/\x05\xceK\xe5c;\xa3\x8e\xc5\xc5dU9\x05-\x11\xf1\xa1\x7f\xd8\x11\x8e\xdb\xe7\x9c\xb4\x9d\x97\x14y\x96\x89\xf6J\xb1\xa7\x0e\x15\xe18\xe1 C\x05]\x18\xd9\xd6 c\xaf\xe0k\xf2B\x18\xf2^hF\xb0\xcc\x92K\xcb\xf3\x9d\xa2\x96\xa5)\xfe\xd9x\xeen\xfcW\xdeG\x91\xa7\x95\xd3\xb4\x91\xc0\xb4\xcf\xbcX\x12%\x88\x1f\x9aI\x01\xc4h\xcd\xc2A$t\xf3\x0fdw\x7f}O\xe5|\x06\xc4.$\x17\x15r\xe2\xee^\a\xdd\x9abt\xf7\x02\x1f\x9cr\x14\xf5`\xbbR\x00o\x95\xac\x17\xd3\x1f\x13C\xde\x9d_\xa3C\x0f\xbf\xa1*0\x8b`\xa2<\xc1o\bcf\x16y\xc8\x8d\xd9\xf6%\xf7d\x9d\x84m\xc9\xe9Y\x9eg\x10kP\xe86V\xec1\x13\xb2\x8e\"\t\xea\x8dt2-\x80\x9b \x03f\xb6u\xb0\xb4\xe4HI\n\xde\xc5\xa0\xbf2\xd4\xcb\x1a\xd2\xd5$\x13\"\bD\\\xc1\xbd&\xe4\x8f{\xd6\x8150\xce_h`\x9a\xd0\xf2\xd3\xef\xf3\xdeA\xfd\x13\x8f_[\x8fiP\xd6\x13Y7[g\xe6\xc5\xca\x0f/\x8b\xfb\xe6\xf4\x8e&\xeb\x14l\xb4\xd8EB\xaeE\x13\xa6\b\t\xae\x0f#\xa4\xfd\xb1\xf7\xbf\xea\xc0_\xe0\xd8\xc8\x9c\xac\xd9=\xb4\xbe\x9d\x12U\x8b]\xe0\x16\xd4/\xde-\x8d\x88\x05\xd3|Y2!s\xd1\xff}\xc8\xa4+8\xe0\a\xdc\xa3\xb9\xa9%;\xe7\xf8\xee\xc0NE%I\xca\xa0-\xda\x1aZ\xe4\xfc\x98\r\xea\xeb\xab\xe7\xbe\xad\xe0Q\xc6\xf7{k\x85'}, {0x20, 'cpuacct.usage_sys\x00'}], 0xa, "efbc"}, 0x2a1) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x2, @loopback, 0x79a4}, 0x1c) (async) sendfile(r0, r1, &(0x7f0000000000)=0x5, 0x20920c57) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) sendmsg$sock(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="dd", 0x1}], 0x1}, 0x1) (async) socket$inet(0x2, 0x4000000805, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) (async) r4 = syz_open_procfs(0x0, &(0x7f0000001d00)='net/unix\x00') r5 = fanotify_init(0x10, 0x2) readv(r5, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/183, 0x18}], 0x1) fanotify_mark(r5, 0x1, 0x40000011, r4, 0x0) preadv(r4, 0x0, 0x0, 0x0, 0x0) (async) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000080)) (async) r6 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r7 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r7, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) (async) ioctl$NBD_SET_SOCK(r6, 0xab00, r7) (async) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfd, 0x40000}, 0xc) r8 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DISCONNECT(r8, 0xab08) (async) r9 = socket$xdp(0x2c, 0x3, 0x0) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r9, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) 822.385399ms ago: executing program 0 (id=302): openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x141040, 0x24) (async) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000480)={0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x90) (async) mount(&(0x7f0000000000)=@sr0, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8007, 0x0) 708.732302ms ago: executing program 0 (id=303): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) (async) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000640)=0xb2, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0xaf2, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=""/136, 0x88}}], 0x1, 0x2000, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) (async) r3 = socket(0x10, 0x3, 0x0) (async) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}]}}]}, 0x3c}}, 0x0) (async) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x988, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x958, 0x8, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}]}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @empty}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "14e3f9e7b218f3479921c711b0cf10085571fd17dfbd98b8b91ae2935ae180d6"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x1, @remote, 0x48a}}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "abf59b10d5add68d1de185430db7b9cb66b89d0e1a87ef88e311b785d90082d3"}]}, {0x368, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x2c8, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3f}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "15b8add5c4d716adbad0e9ec4a89754a13fbe5394c45a0a33d80ba2a68aed41d"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x8001, @private2={0xfc, 0x2, '\x00', 0x1}}}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x500, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ALLOWEDIPS={0x3f8, 0x9, 0x0, 0x1, [{0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x4}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0xd4, 0x9, 0x0, 0x1, [{0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x2, @private1, 0x6}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x80000001}]}, 0x988}}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @val={@val={0x88a8, 0x1, 0x1, 0x1}, {0x8100, 0x7, 0x0, 0x4}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x4, @local, @local, @local, @mcast2}}}}, &(0x7f0000000080)={0x0, 0x1, [0x2d0, 0x1bb, 0xaad, 0x172]}) 649.291181ms ago: executing program 4 (id=304): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x106, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}]}}}]}, 0x48}}, 0x0) 648.226145ms ago: executing program 0 (id=305): r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@nfc_llcp, &(0x7f0000000080)=0x80) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000100)={0x3}) (async) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000100)={0x3}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="99c1dd2c846d"}]}, 0x28}, 0x1, 0x0, 0x0, 0x280041c4}, 0x0) (async) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="99c1dd2c846d"}]}, 0x28}, 0x1, 0x0, 0x0, 0x280041c4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200120}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x90, r2, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@key_params=[@NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "aa21c2600d"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "c663a87877ebc2af4d5c37c493"}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params, @key_params=[@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]]}, 0x90}, 0x1, 0x0, 0x0, 0x20008000}, 0x4080) (async) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200120}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x90, r2, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@key_params=[@NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "aa21c2600d"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "c663a87877ebc2af4d5c37c493"}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params, @key_params=[@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]]}, 0x90}, 0x1, 0x0, 0x0, 0x20008000}, 0x4080) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @local}, 0x10) (async) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000480), &(0x7f00000004c0)=0x4) pwrite64(r4, &(0x7f0000000500)="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", 0x1000, 0x400) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000001500)=0x4002, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001780)={0x9fdd3edb59c8eab5, 0x10, &(0x7f0000001580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000001600)='GPL\x00', 0x9, 0xa, &(0x7f0000001640)=""/10, 0x40f00, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001680)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000016c0)={0x0, 0xe, 0x1, 0x1}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001700)=[0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1], &(0x7f0000001740)=[{0x5, 0x3, 0x0, 0x5}, {0x5, 0x2, 0xe, 0x1}, {0x5, 0x1, 0x9, 0x7}], 0x10, 0xdfd8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001840)={&(0x7f0000001540)='rxrpc_rx_icmp\x00', r5, 0x0, 0x1}, 0x18) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001880), 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r6, 0x8002af76, &(0x7f00000018c0)) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001c00)={0x2c, &(0x7f0000001900)={0x20, 0xe, 0x1b, {0x1b, 0x9, "3d51b3205c6c401fc1baa3777772673bd5fd04c8ddda8c2a53"}}, &(0x7f0000001940)={0x0, 0x3, 0xfa, @string={0xfa, 0x3, "ab4535c46a84cd28383f7d5ef6503072838239a93863da2ab7a26b6afc7ed66b6de29bb489edb106424a535e000c941dca95235d1509c154991fa3076cbb5d190b369ea8dec27e6c1e1e32c8cb8c473864a8b30d351d3f828440967b2e1f2eeeb2de314e683e7a71d272493dee4c36082e271a22b1ec363899817068a3d3c4ad0c2228b26fb2ee49a7e1883315bfd5390fc08c364851fcf0f1322ec783465f128edcaae0c0b0d96ee1c635d9e5bd0b9e9fdd9d71a94246b1f7cb659411f8e533ee1264fc06253ac146aefde4ab41412cf10517ad388dd12babdb53c6f8970e7c5e1fdfd649afe7f38d6dade2428de963bbab23047df8f49b"}}, &(0x7f0000001a40)={0x0, 0xf, 0x115, {0x5, 0xf, 0x115, 0x5, [@generic={0x7d, 0x10, 0xa, "35c85c09b2ea8596fd3d32756fa1b83317f96cfb8c50b0e49aec3b50849944068057870f3b227054e6da91555dd7ab63a23ec6b3dff4319c00bc07bc25cc30bfb783491456de22620ca1b435baf460a1f64641e12feb42a37a741a3dc0e3500a072c10d6709c0a546c5f8e8b5f22c692c6096c957ddf7dfb971f"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4a, 0xe, 0xd, 0x8, 0x7}, @generic={0x7b, 0x10, 0x1, "eb2155f80619cf60a69d41cbe500dc9c16c56df26ac50419ed8a657453875345cdd8d9502a05991e5a6344571f588a41f294458df56a7ad8a59f5ed9c1c4f1b9c6b2b6735f9748cbc88c43903bd0c61e616bd6c6b836207f1cd7865412a762e5b0575acaff361b4ed48341fea88ad783c5032311b3356ffc"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x4, 0xf9, 0x8}]}}, &(0x7f0000001b80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x1, 0x7f, 0x2, "eee20876", "bb406639"}}, &(0x7f0000001bc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x8, 0x6, 0x4, 0x5, 0x7fff, 0x4}}}, &(0x7f0000002140)={0x84, &(0x7f0000001c40)={0x20, 0x14, 0xfe, "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"}, &(0x7f0000001d80)={0x0, 0xa, 0x1, 0x62}, &(0x7f0000001dc0)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000001e00)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000001e40)={0x20, 0x0, 0x8, {0x10, 0x8, [0x1e077]}}, &(0x7f0000001e80)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000001ec0)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000001f00)={0x40, 0xb, 0x2, "4599"}, &(0x7f0000001f40)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000001f80)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000001fc0)={0x40, 0x17, 0x6, @local}, &(0x7f0000002000)={0x40, 0x19, 0x2, "aa88"}, &(0x7f0000002040)={0x40, 0x1a, 0x2, 0x81}, &(0x7f0000002080)={0x40, 0x1c, 0x1, 0x9}, &(0x7f00000020c0)={0x40, 0x1e, 0x1, 0xa}, &(0x7f0000002100)={0x40, 0x21, 0x1, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000002280)={'ip6gre0\x00', &(0x7f0000002200)={'ip6tnl0\x00', 0x0, 0x2f, 0x6, 0x1, 0x8, 0x2d, @dev={0xfe, 0x80, '\x00', 0x3a}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x7800, 0x700, 0xffffffff, 0x5}}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000022c0)=@bloom_filter={0x1e, 0xe, 0x7a, 0x10000, 0x4000, r4, 0x5, '\x00', r7, 0xffffffffffffffff, 0x4, 0x4, 0x0, 0xb, @void, @value, @void, @value}, 0x50) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002400)=0xffffffffffffffff, 0x4) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002440)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0xd1a, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3, 0x0, @void, @value, @void, @value}, 0x50) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000024c0), 0x2, 0x0) (async) r11 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000024c0), 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002580)=@bpf_ext={0x1c, 0x2, &(0x7f0000002340)=@raw=[@map_fd={0x18, 0x8, 0x1, 0x0, r8}], &(0x7f0000002380)='GPL\x00', 0x80000000, 0x22, &(0x7f00000023c0)=""/34, 0x41000, 0x2, '\x00', r7, 0x0, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2ed40, r5, 0x1, &(0x7f0000002500)=[r8, r8, r8, r10, r11, r8, r8, r8, r6], &(0x7f0000002540)=[{0x4, 0x1, 0xf, 0x1}], 0x10, 0x5, @void, @value}, 0x94) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000002640)={0x0, 0xbc, "48d678c741192b08e5fe6f7194b9b395f643a3bbd5d796e6baaf8ae840fe702008ee7b92cf315f218def250cae880c5dca3c79a699485460efb7141d0f8d490b52c8176667e985cfc4d4816400a9817d66d75ced9eac4e0f751d323efdea8ef9a18c2604c644d2dfd53a1280da4e7db3579691cf8f1237ad18f34c86640563b4ea8d9b130dfdf5cbac6265c1c1c402e6ca824faece35cc71cf29c1dc5177a1370ef4b411cb85cbb47c24c022741dab4fc47d12056f2808b6bc96d084"}, &(0x7f0000002740)=0xc4) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000002640)={0x0, 0xbc, "48d678c741192b08e5fe6f7194b9b395f643a3bbd5d796e6baaf8ae840fe702008ee7b92cf315f218def250cae880c5dca3c79a699485460efb7141d0f8d490b52c8176667e985cfc4d4816400a9817d66d75ced9eac4e0f751d323efdea8ef9a18c2604c644d2dfd53a1280da4e7db3579691cf8f1237ad18f34c86640563b4ea8d9b130dfdf5cbac6265c1c1c402e6ca824faece35cc71cf29c1dc5177a1370ef4b411cb85cbb47c24c022741dab4fc47d12056f2808b6bc96d084"}, &(0x7f0000002740)=0xc4) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000002780)={r12, 0xffff, 0xe1}, 0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r11, 0x84, 0x71, &(0x7f00000027c0)={r12, 0x7}, 0x8) r13 = getpgid(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x4, r13, 0x0, &(0x7f0000002800)) (async) prctl$PR_SCHED_CORE(0x3e, 0x4, r13, 0x0, &(0x7f0000002800)) prlimit64(r13, 0x0, &(0x7f0000002840)={0x3}, &(0x7f0000002880)) (async) prlimit64(r13, 0x0, &(0x7f0000002840)={0x3}, &(0x7f0000002880)) 647.80062ms ago: executing program 4 (id=306): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff8500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() setrlimit(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000000)=0x80000001, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000240)=0x45d8, 0x4) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x2, 0x0, @multicast2}, 0x10) recvfrom$unix(r1, 0x0, 0x0, 0x12122, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000840)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x9cb5, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000007c0)={0xfffffffc, 0x20, 0x2, {0x1, @raw_data="4bbf622b20d2538e6e1f445b7795aa93c004bbb74ebdde873aa40cfdb8d06aefde8880cf4a22212c23b7c448cd514212f3419dcccde3ae9debb21b3ee10fdf63d3e7583e6702b0e9a49174a54c8fc2394f74d8c60dd96a7d41cebaaa10e0fe4fb36d1d8c9ff5984eea66eb54ff774e7af403c61eb7963e0bd5b1370d56b3a9efdaabcb8c2d20c39e64de366fce7e9c408b86db8a782f306a3e186d49e5f92e8a46d4ef2b353b7082844034eb36e4df5d2bf8b6635dd0f7a4d05bc0e9c33dffa2e74c75962dc70ea1"}}) preadv(r5, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/23, 0x17}], 0x1, 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1f00, 0x12) socket(0x2a, 0x2, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000380)={0x6, 0x5ac}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) 559.946014ms ago: executing program 2 (id=307): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1}, {0x67}, @device_a, @device_a, @from_mac=@device_b, {0x1}}, 0x15, @val={0x8c, 0x18, {0x1d6, "6a240ed1181e", @long="ed0e9ecdb0b084e2426dc35872ffaa2b"}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0x8, 0xffff, 0x1, 0x5, 0x4]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1}, @broadcast, @device_a, @from_mac, {0x8, 0xff4}}, @delba={0x3, 0x2, {{0x0, 0x1, 0x2}, 0x41, {0xbd, 0x6, @device_b}}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7b3}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000010}, 0xc044) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getpriority(0x2, r1) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(0xffffffffffffffff, 0xc06c4124, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) getsockopt$sock_buf(r0, 0x1, 0x3d, &(0x7f0000002240)=""/198, &(0x7f0000002340)=0xc6) ftruncate(r0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000002380), 0x2000, 0x0) ioctl$VIDIOC_S_TUNER(r2, 0x4054561e, &(0x7f00000023c0)={0x3ff, "be3234b0734443b8ec5b2aaa648461fe579e252773ef3a9fb7974ab3f7836a28", 0x4, 0x4, 0x10001, 0x0, 0x4, 0x2, 0x1ff, 0x10001}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002440), 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000002480)=""/239) ioctl$AUTOFS_IOC_EXPIRE(r3, 0x810c9365, &(0x7f0000002580)={{0xff, 0x4}, 0x100, './file0\x00'}) clock_gettime(0x0, &(0x7f00000026c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000002780)=@multiplanar_fd={0x1, 0x2, 0x4, 0x70000, 0x81, {r4, r5/1000+10000}, {0x3, 0xc, 0x10, 0x9, 0xf, 0x5, "f8055d42"}, 0xfffeffff, 0x4, {&(0x7f0000002700)=[{0x7, 0x8, {}, 0x9c8}, {0x5, 0x9, {r2}, 0x6}]}, 0xc59, 0x0, r2}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002840), r2) sendmsg$NL80211_CMD_ASSOCIATE(r6, &(0x7f0000002980)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002940)={&(0x7f0000002880)={0xb8, r7, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_KEK={0x33, 0xf2, "b7429b513257e72c7cd556c41d79439a7a689ea5de449177772ff5f83d894fa0e834ee51b7e987356f5fa74fe23c33"}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x9, 0x9, 0x9, 0xd, 0xffc0, 0x0, 0x101, 0xcfb, 0x0, 0x8, 0x13, 0x8000, 0x9, 0x8, 0x99, 0x4]}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0xc, 0x2, 0x1, 0x0, {0x2f7e, 0x1, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x1, 0x63}}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0xc46, 0x200, 0x100, 0x0, 0x1000, 0x3, 0x6, 0x3, 0x2, 0x401, 0x9, 0x100, 0x3, 0x2, 0xce, 0x70e]}]}, 0xb8}}, 0x40) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000029c0)={0x0, 0x7}, &(0x7f0000002a00)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000002a40)={r8, 0x3, 0x30}, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000002ac0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f0000002bc0)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002b80)={&(0x7f0000002b00)={0x78, r7, 0x300, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7, 0x2c}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xb54}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x400}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x4800}, 0x44) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002c40), r6) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002d40)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002d00)={&(0x7f0000002c80)={0x4c, r10, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x437}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48886}, 0x81) getsockopt$inet_int(r2, 0x0, 0x18, &(0x7f0000002d80), &(0x7f0000002dc0)=0x4) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r11, 0x84, 0x22, &(0x7f0000002e00)={0x7c8, 0x21f, 0x6, 0x8, r8}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002e40), 0x2, 0x0) accept4$nfc_llcp(r2, &(0x7f0000002e80), &(0x7f0000002f00)=0x60, 0x140800) r12 = socket$can_j1939(0x1d, 0x2, 0x7) fcntl$setown(r12, 0x8, r1) 558.359735ms ago: executing program 2 (id=308): r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x20, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x3000002, 0x6031, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x40}}, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000580000/0x4000)=nil) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x5, &(0x7f00000001c0)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x4, 0xa8, 0xf9, 0x4, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x8, 0x9, 0x200}}) r3 = socket(0x2a, 0x5, 0x1ffffff) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r4, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@deltclass={0x24, 0x29, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xfff3, 0xe}, {0xb, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004081}, 0xc041) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @private, @initdev}, &(0x7f0000000180)=0xc) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r5, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0088a8132788a87c643c4a1b7880610cc9", 0x26, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000240)={@multicast1, @multicast1}, &(0x7f0000000280)=0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x17, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r9, r8, 0x25, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x40) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x1, 0x80, 0x7, 0x7, {{0x16, 0x4, 0x1, 0x3f, 0x58, 0x66, 0x0, 0x81, 0x4, 0x0, @rand_addr=0x64010101, @multicast2, {[@timestamp_prespec={0x44, 0xc, 0xd3, 0x3, 0x2, [{@multicast1, 0xfffffff9}]}, @timestamp={0x44, 0x24, 0xfe, 0x0, 0x9, [0x8, 0xfffff801, 0x9, 0x4, 0xffffffff, 0x8, 0xfffffffd, 0x7ff]}, @generic={0x83, 0x3, '%'}, @generic={0x82, 0x10, "279b4212132ef5086d81475b8e26"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000400)={'gretap0\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x7, 0x1, 0x6, 0x3, {{0x1e, 0x4, 0x0, 0x1, 0x78, 0x67, 0x0, 0x8, 0x29, 0x0, @multicast1, @empty, {[@timestamp_prespec={0x44, 0x3c, 0xb5, 0x3, 0xa, [{@remote, 0xc3b0}, {@multicast2, 0x4}, {@broadcast, 0x7}, {@loopback, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x7fff}, {@multicast2, 0x9}, {@multicast1}]}, @timestamp_prespec={0x44, 0x24, 0xbd, 0x3, 0x2, [{@empty, 0x4}, {@multicast1, 0x800}, {@multicast2, 0xb}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x40}]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)={0x14, 0x0, 0x200, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x2404c800}, 0x40100) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r10, 0x100000000) 329.930876ms ago: executing program 2 (id=309): r0 = socket$inet6(0xa, 0x6, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) rt_sigaction(0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)="f2450f38f16aeb8f0858a66b000d46740c66430f38db322ef36d660f74ea3e40eb9ac4e1d1ef36f080a1bc960000ffc421e6525a77", 0x0, 0x0}, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) r4 = dup(r2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r5) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) r8 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000100)={'fscrypt:', @desc4}, &(0x7f0000000400)={0x0, "4e2a3e7bbd7531c93fe5272baac6d72003cab332535153719eb5311d4e19cd722eaea978c8e7333cbadcc198c00078b4bbc16d71c1759a09f9ffd8d673ac2bab", 0x39}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r8, r5, r6) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_RUN(r7, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) fcntl$addseals(0xffffffffffffffff, 0x409, 0xa) close_range(r0, 0xffffffffffffffff, 0x0) 250.413602ms ago: executing program 5 (id=280): r0 = syz_open_dev$sndpcmc(&(0x7f0000000400), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r0, 0x80984120, &(0x7f0000000080)) keyctl$search(0xa, 0x0, &(0x7f000000fc00)='encrypted\x00', 0x0, 0xfffffffffffffffa) 169.341251ms ago: executing program 5 (id=310): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b18, &(0x7f0000000000)={'tunl0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, &(0x7f0000000140), 0x5) sendmmsg(r6, 0x0, 0x0, 0x0) recvmmsg(r6, 0x0, 0x0, 0x20000000, 0x0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="02000000000a"}) 168.792927ms ago: executing program 5 (id=311): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0xffffffffffffffff, 0x3, 0x0, 0x0, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xc9c, 0x2000, 0x0, r2, 0x0, 0x900, 0x2}}}, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) 79.744989ms ago: executing program 0 (id=312): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x1c, r4, 0x1, 0x0, 0x0, {0x54}, [@DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x1c}}, 0x0) close(r3) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x4c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x4c}}, 0x0) 79.164361ms ago: executing program 0 (id=313): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000100)={'gretap0\x00', 0x0, 0x1, 0x700, 0x4, 0x0, {{0x1d, 0x4, 0x1, 0x9, 0x74, 0x67, 0x0, 0x5, 0x4, 0x0, @empty, @broadcast, {[@timestamp_prespec={0x44, 0x44, 0xf8, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x3f}, 0x4}, {@loopback, 0x5}, {@remote, 0x8814}, {@multicast1, 0x6}, {@rand_addr=0x64010102, 0x7}, {@broadcast, 0x9}, {@broadcast, 0xb}, {@rand_addr=0x64010101, 0x6}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x7, 0x68, [@local]}, @lsrr={0x83, 0xf, 0xce, [@dev={0xac, 0x14, 0x14, 0x3a}, @rand_addr=0x64010101, @private=0xa010102]}]}}}}}) (async, rerun: 32) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) (rerun: 32) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080), 0x8800, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x5, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x1000d, 0x0, 0x0, 0x0, 0x21, '\x00', r0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r2, 0x4b45, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r3, 0x8b2a, &(0x7f0000000040)) 0s ago: executing program 0 (id=314): r0 = syz_open_dev$I2C(&(0x7f0000002780), 0x9, 0x402140) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mincore(&(0x7f000056a000/0x4000)=nil, 0x4000, &(0x7f0000000100)=""/45) epoll_create(0x10001) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000002800)={0x0, 0xb, 0x5, &(0x7f00000027c0)={0x9, "77b90f914ef7fff553e9acaadad27e1d5fca98c9745c8ed2c8e378616b0c1dfffe"}}) kernel console output (not intermixed with test programs): [ 38.022940][ T40] audit: type=1400 audit(1730225481.384:80): avc: denied { write } for pid=5861 comm="sh" path="pipe:[7323]" dev="pipefs" ino=7323 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 38.032403][ T40] audit: type=1400 audit(1730225481.384:81): avc: denied { rlimitinh } for pid=5861 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.044760][ T40] audit: type=1400 audit(1730225481.384:82): avc: denied { siginh } for pid=5861 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.635418][ T40] audit: type=1400 audit(1730225482.014:83): avc: denied { read } for pid=5346 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 38.641857][ T40] audit: type=1400 audit(1730225482.014:84): avc: denied { append } for pid=5346 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.648428][ T40] audit: type=1400 audit(1730225482.014:85): avc: denied { open } for pid=5346 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.655683][ T40] audit: type=1400 audit(1730225482.014:86): avc: denied { getattr } for pid=5346 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:49458' (ED25519) to the list of known hosts. [ 39.923776][ T40] audit: type=1400 audit(1730225483.304:87): avc: denied { name_bind } for pid=5878 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 41.853745][ T5885] cgroup: Unknown subsys name 'net' [ 42.000882][ T5885] cgroup: Unknown subsys name 'cpuset' [ 42.005589][ T5885] cgroup: Unknown subsys name 'rlimit' [ 42.225953][ T5938] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.893452][ T5885] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.758976][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 45.758993][ T40] audit: type=1400 audit(1730225489.144:105): avc: denied { execmem } for pid=5949 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 45.967251][ T40] audit: type=1400 audit(1730225489.344:106): avc: denied { create } for pid=5953 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.977753][ T40] audit: type=1400 audit(1730225489.364:107): avc: denied { read write } for pid=5953 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.984883][ T40] audit: type=1400 audit(1730225489.364:108): avc: denied { open } for pid=5953 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.992051][ T40] audit: type=1400 audit(1730225489.364:109): avc: denied { ioctl } for pid=5954 comm="syz-executor" path="socket:[6617]" dev="sockfs" ino=6617 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.026610][ T5958] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.032706][ T5958] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.034882][ T5958] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.037799][ T5958] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.039672][ T5958] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.042358][ T5958] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.043577][ T5963] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.044492][ T5958] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.047578][ T5963] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.048601][ T5958] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 46.048721][ T5967] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.052584][ T5963] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.053605][ T5958] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.056385][ T5963] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.062426][ T5958] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.064449][ T40] audit: type=1400 audit(1730225489.444:110): avc: denied { read } for pid=5964 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.067782][ T5969] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.071884][ T40] audit: type=1400 audit(1730225489.444:111): avc: denied { open } for pid=5964 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.072925][ T5966] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.074613][ T5969] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.074709][ T5969] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 46.074924][ T5969] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.075097][ T5969] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 46.075384][ T5969] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.080222][ T40] audit: type=1400 audit(1730225489.444:112): avc: denied { mounton } for pid=5964 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 46.085917][ T5966] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 46.100356][ T5966] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.205343][ T40] audit: type=1400 audit(1730225489.584:113): avc: denied { module_request } for pid=5964 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 46.241719][ T5964] chnl_net:caif_netlink_parms(): no params data found [ 46.334350][ T5954] chnl_net:caif_netlink_parms(): no params data found [ 46.365774][ T5961] chnl_net:caif_netlink_parms(): no params data found [ 46.390627][ T5964] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.394264][ T5964] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.397515][ T5964] bridge_slave_0: entered allmulticast mode [ 46.400495][ T5964] bridge_slave_0: entered promiscuous mode [ 46.407776][ T5964] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.409598][ T5964] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.411371][ T5964] bridge_slave_1: entered allmulticast mode [ 46.413806][ T5964] bridge_slave_1: entered promiscuous mode [ 46.476122][ T5953] chnl_net:caif_netlink_parms(): no params data found [ 46.510485][ T5964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.565289][ T5964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.650213][ T5961] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.652138][ T5961] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.654099][ T5961] bridge_slave_0: entered allmulticast mode [ 46.656198][ T5961] bridge_slave_0: entered promiscuous mode [ 46.659274][ T5954] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.661030][ T5954] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.662993][ T5954] bridge_slave_0: entered allmulticast mode [ 46.665571][ T5954] bridge_slave_0: entered promiscuous mode [ 46.669775][ T5954] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.671667][ T5954] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.673751][ T5954] bridge_slave_1: entered allmulticast mode [ 46.676295][ T5954] bridge_slave_1: entered promiscuous mode [ 46.681914][ T5964] team0: Port device team_slave_0 added [ 46.695144][ T5961] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.698139][ T5961] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.700378][ T5961] bridge_slave_1: entered allmulticast mode [ 46.702682][ T5961] bridge_slave_1: entered promiscuous mode [ 46.723884][ T5964] team0: Port device team_slave_1 added [ 46.766620][ T5961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.797274][ T5954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.800104][ T5953] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.802088][ T5953] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.805461][ T5953] bridge_slave_0: entered allmulticast mode [ 46.808972][ T5953] bridge_slave_0: entered promiscuous mode [ 46.814892][ T5961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.836388][ T5964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.838864][ T5964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.846773][ T5964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.852798][ T5954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.856579][ T5953] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.859300][ T5953] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.861469][ T5953] bridge_slave_1: entered allmulticast mode [ 46.863874][ T5953] bridge_slave_1: entered promiscuous mode [ 46.885869][ T5964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.888227][ T5964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.895274][ T5964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.929833][ T5953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.935696][ T5961] team0: Port device team_slave_0 added [ 46.940323][ T5961] team0: Port device team_slave_1 added [ 46.953618][ T5953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.989282][ T5954] team0: Port device team_slave_0 added [ 47.031585][ T5961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.034037][ T5961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.043507][ T5961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.053980][ T5954] team0: Port device team_slave_1 added [ 47.083227][ T5964] hsr_slave_0: entered promiscuous mode [ 47.085478][ T5964] hsr_slave_1: entered promiscuous mode [ 47.088360][ T5961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.090144][ T5961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.096626][ T5961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.112866][ T5953] team0: Port device team_slave_0 added [ 47.118280][ T5953] team0: Port device team_slave_1 added [ 47.132760][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.134786][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.142305][ T5954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.146292][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.148515][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.156600][ T5954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.179419][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.182272][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.192048][ T5953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.234910][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.238711][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.247910][ T5953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.313532][ T5961] hsr_slave_0: entered promiscuous mode [ 47.316727][ T5961] hsr_slave_1: entered promiscuous mode [ 47.319468][ T5961] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.322451][ T5961] Cannot create hsr debugfs directory [ 47.385069][ T5954] hsr_slave_0: entered promiscuous mode [ 47.387900][ T5954] hsr_slave_1: entered promiscuous mode [ 47.391233][ T5954] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.394485][ T5954] Cannot create hsr debugfs directory [ 47.416551][ T5953] hsr_slave_0: entered promiscuous mode [ 47.419904][ T5953] hsr_slave_1: entered promiscuous mode [ 47.422394][ T5953] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.424928][ T5953] Cannot create hsr debugfs directory [ 47.668611][ T5964] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.677727][ T5964] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.682687][ T5964] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.688270][ T5964] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.726501][ T5954] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.733046][ T5954] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.737976][ T5954] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.742572][ T5954] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.773650][ T5961] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.777376][ T5961] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.782933][ T5961] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.788486][ T5961] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.852582][ T5953] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.867643][ T5953] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.871929][ T5953] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.877866][ T5953] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.886352][ T5964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.916917][ T5964] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.946074][ T1239] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.948371][ T1239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.952565][ T1239] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.954845][ T1239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.968659][ T5954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.999118][ T5954] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.021148][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.023624][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.029866][ T40] audit: type=1400 audit(1730225491.414:114): avc: denied { sys_module } for pid=5964 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 48.033619][ T5961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.045307][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.047268][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.062718][ T5961] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.076290][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.079645][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.089750][ T5966] Bluetooth: hci2: command tx timeout [ 48.097388][ T5966] Bluetooth: hci3: command tx timeout [ 48.099808][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.102376][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.116576][ T5953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.146900][ T5953] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.153940][ T5964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.167514][ T5966] Bluetooth: hci0: command tx timeout [ 48.168387][ T66] Bluetooth: hci1: command tx timeout [ 48.170711][ T5961] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.181843][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.184479][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.210949][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.213590][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.223976][ T5964] veth0_vlan: entered promiscuous mode [ 48.249734][ T5964] veth1_vlan: entered promiscuous mode [ 48.275009][ T5954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.285453][ T5964] veth0_macvtap: entered promiscuous mode [ 48.293428][ T5964] veth1_macvtap: entered promiscuous mode [ 48.309971][ T5964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.323023][ T5954] veth0_vlan: entered promiscuous mode [ 48.328540][ T5964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.332352][ T5961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.348640][ T5954] veth1_vlan: entered promiscuous mode [ 48.352165][ T5964] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.354728][ T5964] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.358037][ T5964] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.360594][ T5964] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.394006][ T5953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.433061][ T5954] veth0_macvtap: entered promiscuous mode [ 48.445333][ T1132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.445902][ T5954] veth1_macvtap: entered promiscuous mode [ 48.449242][ T1132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.481591][ T5961] veth0_vlan: entered promiscuous mode [ 48.488016][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.488938][ T5953] veth0_vlan: entered promiscuous mode [ 48.490716][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.498742][ T5954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.501567][ T5954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.504721][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.508125][ T5961] veth1_vlan: entered promiscuous mode [ 48.514603][ T5953] veth1_vlan: entered promiscuous mode [ 48.525052][ T5954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.528793][ T5954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.533859][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.550526][ T5961] veth0_macvtap: entered promiscuous mode [ 48.556326][ T5954] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.561695][ T5954] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.564438][ T5964] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.564923][ T5954] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.577986][ T5954] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.586911][ T5961] veth1_macvtap: entered promiscuous mode [ 48.594317][ T5953] veth0_macvtap: entered promiscuous mode [ 48.608309][ T5953] veth1_macvtap: entered promiscuous mode [ 48.618567][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.623261][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.626756][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.631612][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.637975][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.644226][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.651189][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.654781][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.658066][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.660619][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.663636][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.667966][ T5961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.672789][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.676090][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.679407][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.682337][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.687357][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.689544][ T6019] Driver unsupported XDP return value 0 on prog (id 2) dev N/A, expect packet loss! [ 48.758411][ T5953] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.761562][ T5953] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.764458][ T5953] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.768910][ T5953] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.773905][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.777894][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.781570][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.785211][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.790197][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.793712][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.798257][ T5961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.808876][ T5961] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.812204][ T5961] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.815245][ T5961] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.818665][ T5961] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.849828][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.852932][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.911850][ T1239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.914696][ T1239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.936260][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.943159][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.947317][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.949377][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.965668][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.968403][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.005782][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.010169][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.039981][ T6035] netlink: 'syz.3.7': attribute type 16 has an invalid length. [ 49.042418][ T6035] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.7'. [ 49.055739][ T6029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7'. [ 49.065515][ T6034] vlan2: entered allmulticast mode [ 49.066878][ T6034] vlan1: entered allmulticast mode [ 49.068399][ T6034] veth0_vlan: entered allmulticast mode [ 49.070615][ T6034] bridge0: port 3(vlan2) entered blocking state [ 49.072627][ T6034] bridge0: port 3(vlan2) entered disabled state [ 49.075306][ T6034] vlan2: entered promiscuous mode [ 49.076599][ T6034] vlan1: entered promiscuous mode [ 49.078727][ T6040] tmpfs: Bad value for 'mpol' [ 49.078786][ T6034] bridge0: port 3(vlan2) entered blocking state [ 49.081831][ T6034] bridge0: port 3(vlan2) entered forwarding state [ 49.085121][ T6040] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 49.088014][ T6029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7'. [ 49.090638][ T6029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7'. [ 49.256545][ T6034] bridge0: port 3(vlan2) entered disabled state [ 49.258487][ T6034] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.261449][ T6034] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.359371][ T6034] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.366837][ T6034] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.395611][ T6034] veth0_vlan: left allmulticast mode [ 49.400780][ T6034] vlan1: left allmulticast mode [ 49.402277][ T6034] vlan1: left promiscuous mode [ 49.425850][ T6034] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.428579][ T6034] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.431439][ T6034] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.434047][ T6034] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.465224][ T6029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7'. [ 49.477397][ T6043] bridge_slave_0: left allmulticast mode [ 49.479397][ T6043] bridge_slave_0: left promiscuous mode [ 49.481625][ T6043] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.487945][ T6043] bridge_slave_1: left allmulticast mode [ 49.489662][ T6043] bridge_slave_1: left promiscuous mode [ 49.491470][ T6043] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.498331][ T6043] bond0: (slave bond_slave_0): Releasing backup interface [ 49.508574][ T6043] bond0: (slave bond_slave_1): Releasing backup interface [ 49.516897][ T6043] team0: Port device team_slave_0 removed [ 49.528945][ T6043] team0: Port device team_slave_1 removed [ 49.531018][ T6043] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.536362][ T6043] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.540746][ T6043] vlan2: left promiscuous mode [ 49.542524][ T6043] bridge0: port 3(vlan2) entered disabled state [ 49.563320][ T6050] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 49.568558][ T6050] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 49.686497][ T6092] process 'syz.0.16' launched './file0' with NULL argv: empty string added [ 49.810255][ T6106] xt_TCPMSS: Only works on TCP SYN packets [ 49.983730][ T6123] kvm: emulating exchange as write [ 50.003708][ T6132] syz.0.18 uses obsolete (PF_INET,SOCK_PACKET) [ 50.052494][ T6134] vlan2: entered allmulticast mode [ 50.054420][ T6134] vlan1: entered allmulticast mode [ 50.056302][ T6134] veth0_vlan: entered allmulticast mode [ 50.059288][ T6134] bridge0: port 3(vlan2) entered blocking state [ 50.061763][ T6134] bridge0: port 3(vlan2) entered disabled state [ 50.064800][ T6134] vlan2: entered promiscuous mode [ 50.066615][ T6134] vlan1: entered promiscuous mode [ 50.069988][ T6134] bridge0: port 3(vlan2) entered blocking state [ 50.072378][ T6134] bridge0: port 3(vlan2) entered forwarding state [ 50.132594][ T6134] bridge0: port 3(vlan2) entered disabled state [ 50.134610][ T6134] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.137344][ T6134] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.177615][ T66] Bluetooth: hci3: command tx timeout [ 50.178425][ T5966] Bluetooth: hci2: command tx timeout [ 50.219417][ T6146] overlay: filesystem on ./bus not supported as upperdir [ 50.224839][ T6146] overlay: filesystem on ./bus not supported as upperdir [ 50.230118][ T6146] overlay: filesystem on ./bus not supported as upperdir [ 50.233271][ T6146] overlay: filesystem on ./bus not supported as upperdir [ 50.240314][ T6146] overlay: filesystem on ./bus not supported as upperdir [ 50.243591][ T6146] overlay: filesystem on ./bus not supported as upperdir [ 50.249567][ T5966] Bluetooth: hci0: command tx timeout [ 50.255698][ T6146] overlay: filesystem on ./bus not supported as upperdir [ 50.258549][ T5966] Bluetooth: hci1: command tx timeout [ 50.271880][ T6134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.285217][ T6134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.348462][ T6163] trusted_key: syz.0.28 sent an empty control message without MSG_MORE. [ 50.375807][ T6134] veth0_vlan: left allmulticast mode [ 50.384953][ T6134] vlan1: left allmulticast mode [ 50.386963][ T6134] vlan1: left promiscuous mode [ 50.424036][ T6134] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.427216][ T6134] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.429642][ T6134] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.432102][ T6134] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.471843][ T6141] bridge_slave_0: left allmulticast mode [ 50.473674][ T6141] bridge_slave_0: left promiscuous mode [ 50.475561][ T6141] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.496298][ T6141] bridge_slave_1: left allmulticast mode [ 50.503618][ T6141] bridge_slave_1: left promiscuous mode [ 50.506588][ T6141] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.547936][ T6141] bond0: (slave bond_slave_0): Releasing backup interface [ 50.553195][ T6141] bond0: (slave bond_slave_1): Releasing backup interface [ 50.570596][ T6141] team0: Port device team_slave_0 removed [ 50.576546][ T6141] team0: Port device team_slave_1 removed [ 50.580969][ T6141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.584754][ T6141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.588023][ T6141] vlan2: left promiscuous mode [ 50.590448][ T6141] bridge0: port 3(vlan2) entered disabled state [ 50.753779][ T6176] serio: Serial port ptm1 [ 50.770377][ T40] kauditd_printk_skb: 99 callbacks suppressed [ 50.770394][ T40] audit: type=1400 audit(1730225494.144:214): avc: denied { name_bind } for pid=6182 comm="syz.0.33" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 50.779357][ T40] audit: type=1400 audit(1730225494.144:215): avc: denied { node_bind } for pid=6182 comm="syz.0.33" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 50.882124][ T6193] xt_connbytes: Forcing CT accounting to be enabled [ 50.884482][ T6193] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 50.894781][ T6193] xt_bpf: check failed: parse error [ 51.025361][ T40] audit: type=1400 audit(1730225494.404:216): avc: denied { sys_module } for pid=6197 comm="syz.3.38" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 51.165370][ T40] audit: type=1400 audit(1730225494.544:217): avc: denied { name_bind } for pid=6205 comm="syz.3.40" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 51.172630][ T40] audit: type=1400 audit(1730225494.544:218): avc: denied { create } for pid=6205 comm="syz.3.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.179737][ T40] audit: type=1400 audit(1730225494.554:219): avc: denied { ioctl } for pid=6205 comm="syz.3.40" path="pid:[4026532878]" dev="nsfs" ino=4026532878 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 51.250785][ T6208] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 51.257687][ T6208] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 51.263395][ T6208] netlink: 'syz.3.41': attribute type 10 has an invalid length. [ 51.270090][ T6208] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 51.312360][ T40] audit: type=1400 audit(1730225494.694:220): avc: denied { create } for pid=6209 comm="syz.1.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 51.346335][ T40] audit: type=1400 audit(1730225494.724:221): avc: denied { create } for pid=6213 comm="syz.3.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 51.541914][ T40] audit: type=1400 audit(1730225494.924:222): avc: denied { append } for pid=6225 comm="syz.3.46" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 51.584955][ T40] audit: type=1400 audit(1730225494.964:223): avc: denied { setopt } for pid=6225 comm="syz.3.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.666134][ T6241] netlink: 60 bytes leftover after parsing attributes in process `syz.3.49'. [ 51.737038][ T6248] netlink: 36 bytes leftover after parsing attributes in process `syz.3.52'. [ 51.744316][ T6248] netlink: 24 bytes leftover after parsing attributes in process `syz.3.52'. [ 51.850498][ T6268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.57'. [ 52.248105][ T5966] Bluetooth: hci2: command tx timeout [ 52.248996][ T66] Bluetooth: hci3: command tx timeout [ 52.316524][ T6291] Zero length message leads to an empty skb [ 52.324446][ T6291] binder: 6289:6291 ioctl c0306201 20000100 returned -14 [ 52.337894][ T66] Bluetooth: hci1: command tx timeout [ 52.338224][ T5966] Bluetooth: hci0: command tx timeout [ 52.471892][ T6297] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 52.484819][ T11] Bluetooth: hci4: Frame reassembly failed (-84) [ 52.932005][ T6326] bridge_slave_0: entered allmulticast mode [ 52.982969][ T6341] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 52.991846][ T6341] CIFS mount error: No usable UNC path provided in device string! [ 52.991846][ T6341] [ 52.995238][ T6341] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 52.998502][ T6341] overlayfs: missing 'lowerdir' [ 53.239250][ T6358] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6358 comm=syz.3.82 [ 53.274939][ T6366] tmpfs: Bad value for 'mpol' [ 53.365856][ T6376] netlink: 'syz.0.88': attribute type 10 has an invalid length. [ 53.370021][ T6376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.372966][ T6376] team0: Port device bond0 added [ 53.517369][ T829] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 53.532238][ T6381] 9pnet_fd: Insufficient options for proto=fd [ 53.667461][ T829] usb 7-1: Using ep0 maxpacket: 8 [ 53.672763][ T829] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 53.675873][ T829] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 53.682838][ T829] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 53.686866][ T829] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 53.691041][ T829] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 53.695575][ T829] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 53.701604][ T829] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.923691][ T829] usb 7-1: usb_control_msg returned -71 [ 53.929204][ T829] usbtmc 7-1:16.0: can't read capabilities [ 53.962789][ T829] usb 7-1: USB disconnect, device number 2 [ 54.127603][ T6393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 54.327261][ T66] Bluetooth: hci2: command tx timeout [ 54.327502][ T5302] Bluetooth: hci3: command tx timeout [ 54.399499][ T6395] input: syz1 as /devices/virtual/input/input6 [ 54.417323][ T5302] Bluetooth: hci1: command tx timeout [ 54.473130][ T6398] netlink: 'syz.3.94': attribute type 1 has an invalid length. [ 54.476002][ T6398] __nla_validate_parse: 7 callbacks suppressed [ 54.476011][ T6398] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.94'. [ 54.488081][ T5966] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 54.489159][ T5302] Bluetooth: hci4: command 0x1003 tx timeout [ 54.507298][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 54.739572][ T6425] hfs: unable to parse mount options [ 54.766963][ T6419] input: syz0 as /devices/virtual/input/input7 [ 54.768274][ T6425] fuse: Unknown parameter '000000000000000000000030x0000000000000007' [ 54.806642][ T6433] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.99'. [ 54.814288][ T6433] openvswitch: netlink: Geneve opt len 13 is not a multiple of 4. [ 55.161334][ T6440] IPVS: persistence engine module ip_vs_pe_sjp not found [ 55.454959][ T6452] netlink: 240 bytes leftover after parsing attributes in process `syz.1.108'. [ 55.460306][ T6452] NCSI netlink: No device for ifindex 1025 [ 55.463433][ T6452] xt_policy: output policy not valid in PREROUTING and INPUT [ 55.619069][ T6468] CUSE: DEVNAME unspecified [ 55.741790][ T6478] sch_tbf: burst 3936 is lower than device lo mtu (65550) ! [ 55.826170][ T40] kauditd_printk_skb: 89 callbacks suppressed [ 55.826216][ T40] audit: type=1400 audit(1730225499.204:313): avc: denied { create } for pid=6480 comm="syz.1.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 55.839810][ T40] audit: type=1400 audit(1730225499.224:314): avc: denied { ioctl } for pid=6480 comm="syz.1.118" path="socket:[11217]" dev="sockfs" ino=11217 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 55.850500][ T40] audit: type=1400 audit(1730225499.234:315): avc: denied { write } for pid=6480 comm="syz.1.118" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 55.861887][ T40] audit: type=1400 audit(1730225499.244:316): avc: denied { block_suspend } for pid=6480 comm="syz.1.118" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 55.931534][ T40] audit: type=1400 audit(1730225499.314:317): avc: denied { read write } for pid=6485 comm="syz.3.120" name="btrfs-control" dev="devtmpfs" ino=1335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 55.953459][ T40] audit: type=1400 audit(1730225499.324:318): avc: denied { open } for pid=6485 comm="syz.3.120" path="/dev/btrfs-control" dev="devtmpfs" ino=1335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 55.973982][ T40] audit: type=1400 audit(1730225499.334:319): avc: denied { ioctl } for pid=6485 comm="syz.3.120" path="/dev/btrfs-control" dev="devtmpfs" ino=1335 ioctlcmd=0xf511 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 55.987579][ T40] audit: type=1326 audit(1730225499.374:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6486 comm="syz.2.119" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff03977e719 code=0x0 [ 56.007524][ T40] audit: type=1400 audit(1730225499.394:321): avc: denied { bind } for pid=6489 comm="syz.1.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 56.040455][ T40] audit: type=1400 audit(1730225499.424:322): avc: denied { bind } for pid=6486 comm="syz.2.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 56.357283][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 56.545734][ T5966] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 56.548614][ T5966] CPU: 1 UID: 0 PID: 5966 Comm: kworker/u33:5 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 56.551459][ T5966] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 56.554268][ T5966] Workqueue: hci0 hci_rx_work [ 56.555532][ T5966] Call Trace: [ 56.556462][ T5966] [ 56.557268][ T5966] dump_stack_lvl+0x16c/0x1f0 [ 56.558530][ T5966] sysfs_warn_dup+0x7f/0xa0 [ 56.559789][ T5966] sysfs_create_dir_ns+0x24d/0x2b0 [ 56.561050][ T5966] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 56.562555][ T5966] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 56.563916][ T5966] ? kobject_add_internal+0x12d/0x990 [ 56.565279][ T5966] ? do_raw_spin_unlock+0x172/0x230 [ 56.566617][ T5966] kobject_add_internal+0x2c8/0x990 [ 56.567941][ T5966] kobject_add+0x16f/0x240 [ 56.569118][ T5966] ? __pfx_kobject_add+0x10/0x10 [ 56.570375][ T5966] ? class_to_subsys+0x3e/0x160 [ 56.571621][ T5966] ? do_raw_spin_unlock+0x172/0x230 [ 56.572910][ T5966] ? kobject_put+0xab/0x5a0 [ 56.574098][ T5966] device_add+0x289/0x1a70 [ 56.575239][ T5966] ? __pfx_dev_set_name+0x10/0x10 [ 56.576625][ T5966] ? __pfx_device_add+0x10/0x10 [ 56.578053][ T5966] ? mgmt_send_event_skb+0x2f2/0x460 [ 56.579400][ T5966] hci_conn_add_sysfs+0x17e/0x230 [ 56.580668][ T5966] le_conn_complete_evt+0x1078/0x1d80 [ 56.582032][ T5966] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 56.583481][ T5966] ? trace_contention_end+0xea/0x140 [ 56.584823][ T5966] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 56.586384][ T5966] ? skb_pull_data+0x166/0x210 [ 56.587606][ T5966] hci_le_meta_evt+0x2e2/0x5d0 [ 56.588858][ T5966] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 56.590557][ T5966] hci_event_packet+0x666/0x1180 [ 56.591828][ T5966] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 56.593217][ T5966] ? __pfx_hci_event_packet+0x10/0x10 [ 56.594547][ T5966] ? mark_held_locks+0x9f/0xe0 [ 56.595755][ T5966] ? kcov_remote_start+0x3cf/0x6e0 [ 56.597292][ T5966] ? lockdep_hardirqs_on+0x7c/0x110 [ 56.598834][ T5966] hci_rx_work+0x2c6/0x16c0 [ 56.600323][ T5966] ? lock_acquire+0x2f/0xb0 [ 56.601769][ T5966] ? process_one_work+0x921/0x1ba0 [ 56.603283][ T5966] process_one_work+0x9c5/0x1ba0 [ 56.604580][ T5966] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 56.606017][ T5966] ? __pfx_process_one_work+0x10/0x10 [ 56.607641][ T5966] ? assign_work+0x1a0/0x250 [ 56.609017][ T5966] worker_thread+0x6c8/0xf00 [ 56.610261][ T5966] ? __pfx_worker_thread+0x10/0x10 [ 56.611560][ T5966] kthread+0x2c1/0x3a0 [ 56.612684][ T5966] ? _raw_spin_unlock_irq+0x23/0x50 [ 56.614010][ T5966] ? __pfx_kthread+0x10/0x10 [ 56.615222][ T5966] ret_from_fork+0x45/0x80 [ 56.616363][ T5966] ? __pfx_kthread+0x10/0x10 [ 56.617689][ T5966] ret_from_fork_asm+0x1a/0x30 [ 56.619055][ T5966] [ 56.620874][ T5966] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 56.624556][ T5966] Bluetooth: hci0: failed to register connection device [ 56.729557][ T5966] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 56.734669][ T5966] Bluetooth: hci0: Injecting HCI hardware error event [ 56.739333][ T5966] Bluetooth: hci0: hardware error 0x00 [ 56.883774][ T6508] 9pnet_virtio: no channels available for device syz [ 56.886626][ T6508] 9pnet_virtio: no channels available for device syz [ 56.889940][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 56.893915][ T6508] 9pnet_virtio: no channels available for device syz [ 56.897584][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.897934][ T6508] 9pnet_virtio: no channels available for device syz [ 56.902944][ T6508] 9pnet_virtio: no channels available for device syz [ 56.906386][ T6508] 9pnet_virtio: no channels available for device syz [ 56.910168][ T6508] 9pnet_virtio: no channels available for device syz [ 56.913057][ T6508] 9pnet_virtio: no channels available for device syz [ 56.921809][ T6508] 9pnet_virtio: no channels available for device syz [ 56.926887][ T6508] 9pnet_virtio: no channels available for device syz [ 56.986398][ T6513] Can't find a SQUASHFS superblock on nullb0 [ 57.034550][ T6518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.127'. [ 57.070758][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.123347][ T6531] fuse: Unknown parameter '00000000000000000000¡ÄvèëþYÕè[±'õwøÒ‚ðñk»–²‰ L]j—´¶6' [ 57.127045][ T6531] bpf: Bad value for 'uid' [ 57.135788][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.271814][ T6538] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 57.288337][ T6075] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 57.441125][ T6075] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 57.444971][ T6075] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.448029][ T6075] usb 8-1: Product: syz [ 57.449787][ T6075] usb 8-1: Manufacturer: syz [ 57.451259][ T6075] usb 8-1: SerialNumber: syz [ 57.473317][ T6075] usb 8-1: config 0 descriptor?? [ 57.542582][ T6558] kAFS: Can only specify source 'none' with -o dyn [ 57.699064][ T35] usb 8-1: USB disconnect, device number 2 [ 57.707683][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 57.787481][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.887259][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 57.908855][ T6518] netlink: 'syz.3.127': attribute type 2 has an invalid length. [ 57.912412][ T6518] netlink: 24 bytes leftover after parsing attributes in process `syz.3.127'. [ 57.919280][ T6518] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 58.116454][ T6570] netlink: 'syz.0.142': attribute type 2 has an invalid length. [ 58.152506][ T6572] netlink: 24 bytes leftover after parsing attributes in process `syz.0.143'. [ 58.156665][ T6572] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 58.357406][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 58.368148][ T6576] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6576 comm=syz.2.144 [ 58.373228][ T6576] netlink: 40 bytes leftover after parsing attributes in process `syz.2.144'. [ 58.376045][ T6576] tipc: Invalid UDP bearer configuration [ 58.376069][ T6576] tipc: Enabling of bearer rejected, failed to enable media [ 58.491649][ T6586] netlink: 'syz.1.147': attribute type 2 has an invalid length. [ 58.493908][ T6586] netlink: 'syz.1.147': attribute type 1 has an invalid length. [ 58.496713][ T6586] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 58.744050][ T6608] warning: `syz.1.153' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 58.807507][ T5966] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 58.866107][ T6615] program syz.1.156 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 58.927031][ T6617] binder: Unknown parameter 'func' [ 59.038060][ T6623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.159'. [ 59.195873][ T6632] afs: Unknown parameter 'äÿÿÿ˜ø¬ÙVò–@ [ 59.195873][ T6632] ä*{`ŒúÓ' [ 59.199357][ T6632] overlayfs: missing 'lowerdir' [ 59.441394][ T6641] netlink: 28 bytes leftover after parsing attributes in process `syz.2.163'. [ 59.444487][ T6641] netlink: 28 bytes leftover after parsing attributes in process `syz.2.163'. [ 59.777500][ T6655] netlink: 24 bytes leftover after parsing attributes in process `syz.2.167'. [ 60.181408][ T6678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.173'. [ 60.189235][ T6678] batman_adv: batadv1: Adding interface: netdevsim0 [ 60.191461][ T6678] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.198610][ T6678] batman_adv: batadv1: Not using interface netdevsim0 (retrying later): interface not active [ 60.728310][ T6704] xt_connbytes: Forcing CT accounting to be enabled [ 60.731860][ T6704] No such timeout policy "syz0" [ 60.760666][ T6704] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 60.808698][ T6708] openvswitch: netlink: Actions may not be safe on all matching packets [ 60.808855][ T6707] openvswitch: netlink: Actions may not be safe on all matching packets [ 60.837392][ T6075] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 60.975928][ T6714] syzkaller0: entered promiscuous mode [ 60.979676][ T6714] syzkaller0: entered allmulticast mode [ 60.988180][ T40] kauditd_printk_skb: 50 callbacks suppressed [ 60.988194][ T40] audit: type=1400 audit(1730225504.364:373): avc: denied { relabelfrom } for pid=6713 comm="syz.2.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 60.990062][ T6717] binder: BINDER_SET_CONTEXT_MGR already set [ 60.990493][ T40] audit: type=1400 audit(1730225504.374:374): avc: denied { set_context_mgr } for pid=6715 comm="syz.0.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 60.998781][ T6075] usb 6-1: Using ep0 maxpacket: 32 [ 60.998852][ T6717] binder: 6715:6717 ioctl 4018620d 200002c0 returned -16 [ 61.001558][ T40] audit: type=1400 audit(1730225504.374:375): avc: denied { relabelto } for pid=6713 comm="syz.2.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 61.017808][ T40] audit: type=1400 audit(1730225504.384:376): avc: denied { call } for pid=6715 comm="syz.0.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 61.025282][ T6075] usb 6-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=82.d5 [ 61.028557][ T6075] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.031269][ T6075] usb 6-1: Product: syz [ 61.032610][ T6075] usb 6-1: Manufacturer: syz [ 61.034461][ T6075] usb 6-1: SerialNumber: syz [ 61.039199][ T6075] usb 6-1: config 0 descriptor?? [ 61.043015][ T6075] hub 6-1:0.0: bad descriptor, ignoring hub [ 61.045121][ T6075] hub 6-1:0.0: probe with driver hub failed with error -5 [ 61.049215][ T6075] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 61.253205][ T5966] Bluetooth: hci2: Unknown advertising packet type: 0x19 [ 61.253238][ T5966] Bluetooth: hci2: Unknown advertising packet type: 0x1f [ 61.374045][ T40] audit: type=1400 audit(1730225504.754:377): avc: denied { unmount } for pid=5953 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 61.401214][ T40] audit: type=1400 audit(1730225504.784:378): avc: denied { read } for pid=6728 comm="syz.0.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 61.407082][ T40] audit: type=1400 audit(1730225504.784:379): avc: denied { getopt } for pid=6728 comm="syz.0.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 61.418420][ T40] audit: type=1400 audit(1730225504.784:380): avc: denied { write } for pid=6728 comm="syz.0.186" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 61.519318][ T40] audit: type=1400 audit(1730225504.904:381): avc: denied { map } for pid=6693 comm="syz.1.178" path="socket:[13622]" dev="sockfs" ino=13622 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 61.526786][ T40] audit: type=1400 audit(1730225504.904:382): avc: denied { accept } for pid=6693 comm="syz.1.178" path="socket:[13622]" dev="sockfs" ino=13622 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 61.574427][ T6075] gspca_vc032x: reg_w err -110 [ 61.576333][ T6075] gspca_vc032x: I2c Bus Busy Wait 00 [ 61.581654][ T6075] gspca_vc032x: I2c Bus Busy Wait 00 [ 61.583662][ T6075] gspca_vc032x: I2c Bus Busy Wait 00 [ 61.585549][ T6075] gspca_vc032x: I2c Bus Busy Wait 00 [ 61.587507][ T6075] gspca_vc032x: I2c Bus Busy Wait 00 [ 61.589436][ T6075] gspca_vc032x: I2c Bus Busy Wait 00 [ 61.591520][ T6075] gspca_vc032x: I2c Bus Busy Wait 00 [ 61.593505][ T6075] gspca_vc032x: I2c Bus Busy Wait 00 [ 61.595330][ T6075] gspca_vc032x: I2c Bus Busy Wait 00 [ 61.597317][ T6075] gspca_vc032x: I2c Bus Busy Wait 00 [ 61.599322][ T6075] gspca_vc032x: I2c Bus Busy Wait 00 [ 61.601276][ T6075] gspca_vc032x: I2c Bus Busy Wait 00 [ 61.603501][ T6075] gspca_vc032x: I2c Bus Busy Wait 00 [ 61.605692][ T6075] gspca_vc032x: I2c Bus Busy Wait 00 [ 61.608041][ T6075] gspca_vc032x: I2c Bus Busy Wait 00 [ 61.610044][ T6075] gspca_vc032x: I2c Bus Busy Wait 00 [ 61.612831][ T6075] gspca_vc032x: I2c Bus Busy Wait 00 [ 61.614688][ T6075] gspca_vc032x: I2c Bus Busy Wait 00 [ 61.616077][ T6075] gspca_vc032x: I2c Bus Busy Wait 00 [ 61.618596][ T6075] gspca_vc032x: Unknown sensor... [ 61.620349][ T6075] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 62.540490][ T6730] netlink: 12 bytes leftover after parsing attributes in process `syz.1.178'. [ 62.745882][ T6743] usb 2-1: USB disconnect, device number 2 [ 63.200592][ T6756] program syz.0.194 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 63.204196][ T6757] program syz.0.194 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 63.607264][ T5966] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 63.610968][ T5966] Bluetooth: hci1: Injecting HCI hardware error event [ 63.613606][ T5966] Bluetooth: hci1: hardware error 0x00 [ 63.747412][ T1470] usb 6-1: USB disconnect, device number 2 [ 63.863570][ T6765] netlink: 'syz.2.197': attribute type 1 has an invalid length. [ 63.866396][ T6765] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.197'. [ 63.870351][ T6765] nbd: couldn't find a device at index 63 [ 63.876321][ T6765] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 63.934654][ T6767] netlink: 36 bytes leftover after parsing attributes in process `syz.1.198'. [ 63.964424][ T6771] netlink: 36 bytes leftover after parsing attributes in process `syz.2.199'. [ 64.045800][ T6773] netlink: 168 bytes leftover after parsing attributes in process `syz.2.200'. [ 64.241607][ T6796] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 64.244450][ T6796] overlayfs: failed to set xattr on upper [ 64.246617][ T6796] overlayfs: ...falling back to redirect_dir=nofollow. [ 64.251962][ T6796] overlayfs: ...falling back to index=off. [ 64.255241][ T6796] overlayfs: ...falling back to uuid=null. [ 65.689489][ T5966] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 65.887210][ T63] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 66.037324][ T63] usb 5-1: Using ep0 maxpacket: 8 [ 66.041417][ T63] usb 5-1: config 6 has an invalid interface number: 238 but max is 2 [ 66.043872][ T63] usb 5-1: config 6 contains an unexpected descriptor of type 0x1, skipping [ 66.046306][ T63] usb 5-1: config 6 has an invalid interface number: 142 but max is 2 [ 66.050505][ T63] usb 5-1: config 6 contains an unexpected descriptor of type 0x1, skipping [ 66.052709][ T63] usb 5-1: config 6 has an invalid interface number: 144 but max is 2 [ 66.054798][ T63] usb 5-1: config 6 has an invalid descriptor of length 112, skipping remainder of the config [ 66.057991][ T63] usb 5-1: config 6 has no interface number 0 [ 66.059634][ T63] usb 5-1: config 6 has no interface number 1 [ 66.061942][ T63] usb 5-1: config 6 has no interface number 2 [ 66.063460][ T63] usb 5-1: config 6 interface 238 altsetting 64 has a duplicate endpoint with address 0x4, skipping [ 66.066158][ T63] usb 5-1: config 6 interface 238 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 66.071538][ T63] usb 5-1: config 6 interface 238 altsetting 64 has a duplicate endpoint with address 0xE, skipping [ 66.075780][ T63] usb 5-1: config 6 interface 142 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 66.080358][ T63] usb 5-1: config 6 interface 142 altsetting 15 has a duplicate endpoint with address 0xA, skipping [ 66.084133][ T63] usb 5-1: config 6 interface 142 altsetting 15 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 66.088164][ T63] usb 5-1: config 6 interface 142 altsetting 15 has a duplicate endpoint with address 0xE, skipping [ 66.091956][ T63] usb 5-1: config 6 interface 142 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 66.095342][ T63] usb 5-1: config 6 interface 142 altsetting 15 has a duplicate endpoint with address 0xF, skipping [ 66.098804][ T63] usb 5-1: config 6 interface 142 altsetting 15 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 66.101580][ T63] usb 5-1: config 6 interface 142 altsetting 15 has a duplicate endpoint with address 0x8, skipping [ 66.104226][ T63] usb 5-1: config 6 interface 142 altsetting 15 has a duplicate endpoint with address 0x8B, skipping [ 66.106963][ T63] usb 5-1: config 6 interface 144 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 66.110354][ T63] usb 5-1: config 6 interface 238 has no altsetting 0 [ 66.112157][ T63] usb 5-1: config 6 interface 142 has no altsetting 0 [ 66.114007][ T63] usb 5-1: config 6 interface 144 has no altsetting 0 [ 66.121066][ T63] usb 5-1: New USB device found, idVendor=0499, idProduct=1058, bcdDevice=14.c9 [ 66.123493][ T63] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.125714][ T63] usb 5-1: Product: ã°Š [ 66.126940][ T63] usb 5-1: Manufacturer: 译愤阡蜦◊◭⋅褄飱ꓥ툡ç‚⺩槆忸쵭㘇æ©åµŒë¬‡äƒžë‰»é©åƒµæŸæ“¸èž±ã½£é—ƒç‰Œë¶—먖㩌騧ﾉ╮埲껧죄嶧玷딑쟶抭ᯫY㫴鸨ꣳ⸻壚먈Å雺ꒋﶻ㰾✗㜸åˆêŠ¾ìƒë¹á¼ºë‹’ï¿æ˜°ë«¦ëˆ†ä’䡕꼑ꌇ깫렵伂由㜄ň馰傅퉨⡅ä’᧫àªè€‹ï¯å‡ã‚‘篠 [ 66.134319][ T63] usb 5-1: SerialNumber: syz [ 66.297267][ T35] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 66.346072][ T63] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 66.348610][ T63] snd-usb-audio 5-1:6.238: probe with driver snd-usb-audio failed with error -2 [ 66.355888][ T63] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 66.357854][ T63] snd-usb-audio 5-1:6.142: probe with driver snd-usb-audio failed with error -2 [ 66.363529][ T63] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 66.383196][ T63] snd-usb-audio 5-1:6.144: probe with driver snd-usb-audio failed with error -2 [ 66.386258][ T63] usb 5-1: USB disconnect, device number 2 [ 66.400043][ T6528] udevd[6528]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:6.144/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 66.447211][ T35] usb 7-1: Using ep0 maxpacket: 8 [ 66.450538][ T35] usb 7-1: config 0 has no interfaces? [ 66.452670][ T35] usb 7-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 66.456677][ T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.461718][ T35] usb 7-1: config 0 descriptor?? [ 66.770946][ T35] usb 7-1: USB disconnect, device number 3 [ 66.792680][ T40] kauditd_printk_skb: 33 callbacks suppressed [ 66.792693][ T40] audit: type=1400 audit(1730225510.174:416): avc: denied { ioctl } for pid=6856 comm="syz.1.222" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x940d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 66.830112][ T40] audit: type=1400 audit(1730225510.214:417): avc: denied { connect } for pid=6846 comm="syz.2.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 66.835754][ T40] audit: type=1400 audit(1730225510.214:418): avc: denied { setopt } for pid=6846 comm="syz.2.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 66.851152][ T40] audit: type=1400 audit(1730225510.234:419): avc: denied { append } for pid=6856 comm="syz.1.222" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 66.851286][ T6857] random: crng reseeded on system resumption [ 66.858416][ T40] audit: type=1400 audit(1730225510.234:420): avc: denied { open } for pid=6856 comm="syz.1.222" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 67.104767][ T40] audit: type=1400 audit(1730225510.484:421): avc: denied { write } for pid=6867 comm="syz.1.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 67.141992][ T6873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.226'. [ 67.337251][ T1330] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 67.375796][ T40] audit: type=1400 audit(1730225510.754:422): avc: denied { read } for pid=6887 comm="syz.1.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 67.384525][ T6888] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 67.428083][ T6888] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 67.487276][ T1330] usb 5-1: Using ep0 maxpacket: 8 [ 67.492619][ T1330] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 67.495487][ T1330] usb 5-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 67.498194][ T1330] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 67.500455][ T1330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.553737][ T40] audit: type=1400 audit(1730225510.934:423): avc: denied { getopt } for pid=6895 comm="syz.1.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 67.569007][ T35] libceph: connect (1)[c::]:6789 error -101 [ 67.571793][ T35] libceph: mon0 (1)[c::]:6789 connect error [ 67.764112][ T6903] netlink: 28 bytes leftover after parsing attributes in process `syz.0.224'. [ 67.766517][ T6903] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 67.805575][ T1330] usb 5-1: USB disconnect, device number 3 [ 67.829154][ T35] libceph: connect (1)[c::]:6789 error -101 [ 67.830695][ T35] libceph: mon0 (1)[c::]:6789 connect error [ 68.337578][ T35] libceph: connect (1)[c::]:6789 error -101 [ 68.339557][ T35] libceph: mon0 (1)[c::]:6789 connect error [ 68.384729][ T6896] ceph: No mds server is up or the cluster is laggy [ 68.612856][ T40] audit: type=1400 audit(1730225511.994:424): avc: denied { getopt } for pid=6917 comm="syz.1.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 68.653014][ T40] audit: type=1400 audit(1730225512.034:425): avc: denied { mount } for pid=6919 comm="syz.1.236" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 68.781349][ T6932] No control pipe specified [ 68.796782][ T6930] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.239'. [ 68.820234][ T6936] netlink: 68 bytes leftover after parsing attributes in process `syz.1.240'. [ 68.823235][ T6936] netlink: 68 bytes leftover after parsing attributes in process `syz.1.240'. [ 68.969119][ T6948] ======================================================= [ 68.969119][ T6948] WARNING: The mand mount option has been deprecated and [ 68.969119][ T6948] and is ignored by this kernel. Remove the mand [ 68.969119][ T6948] option from the mount to silence this warning. [ 68.969119][ T6948] ======================================================= [ 68.986551][ T64] bond0: (slave bond_slave_0): interface is now down [ 68.988598][ T64] bond0: (slave bond_slave_1): interface is now down [ 68.993066][ T64] bond0: now running without any active interface! [ 69.144650][ T6951] pimreg: entered allmulticast mode [ 69.744473][ T6971] capability: warning: `syz.0.249' uses 32-bit capabilities (legacy support in use) [ 69.805327][ T6970] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7491 sclass=netlink_route_socket pid=6970 comm=syz.0.249 [ 69.912967][ T6986] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 69.916814][ T6986] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.920086][ T6986] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.925401][ T6986] bridge0: entered allmulticast mode [ 70.161452][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.204377][ T5302] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.208354][ T5302] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.211091][ T5302] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.214391][ T5302] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.216778][ T5302] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 70.219017][ T5302] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.258258][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.332667][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.343533][ T7002] chnl_net:caif_netlink_parms(): no params data found [ 70.421134][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.426002][ T7002] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.428305][ T7002] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.430348][ T7002] bridge_slave_0: entered allmulticast mode [ 70.432306][ T7002] bridge_slave_0: entered promiscuous mode [ 70.435032][ T7002] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.436845][ T7002] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.439208][ T7002] bridge_slave_1: entered allmulticast mode [ 70.441746][ T7002] bridge_slave_1: entered promiscuous mode [ 70.467743][ T7002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.473356][ T7002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.508753][ T7002] team0: Port device team_slave_0 added [ 70.516768][ T7002] team0: Port device team_slave_1 added [ 70.546410][ T7002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.549053][ T7002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.555754][ T7002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.559320][ T7002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.561034][ T7002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.567411][ T7002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.606887][ T7013] netlink: 'syz.0.261': attribute type 1 has an invalid length. [ 70.612481][ T11] bridge_slave_1: left allmulticast mode [ 70.614093][ T11] bridge_slave_1: left promiscuous mode [ 70.616592][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.621228][ T11] bridge_slave_0: left allmulticast mode [ 70.622780][ T11] bridge_slave_0: left promiscuous mode [ 70.624316][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.946302][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.950705][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 70.954418][ T11] bond0 (unregistering): Released all slaves [ 70.962589][ T7002] hsr_slave_0: entered promiscuous mode [ 70.965404][ T7002] hsr_slave_1: entered promiscuous mode [ 70.968065][ T7002] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.970661][ T7002] Cannot create hsr debugfs directory [ 71.007254][ T828] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 71.102581][ T7002] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.109475][ T7002] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.118488][ T7002] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.124286][ T7002] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.168677][ T828] usb 5-1: Using ep0 maxpacket: 8 [ 71.172087][ T828] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 71.176135][ T828] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 71.181444][ T828] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 71.184611][ T828] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 71.189317][ T828] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 71.194216][ T828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.202487][ T7002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.214671][ T7002] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.223151][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.225103][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.231823][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.233764][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.323042][ T11] hsr_slave_0: left promiscuous mode [ 71.328384][ T11] hsr_slave_1: left promiscuous mode [ 71.340183][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.342183][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.344737][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.346555][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.382723][ T11] veth1_macvtap: left promiscuous mode [ 71.384544][ T11] veth0_macvtap: left promiscuous mode [ 71.386200][ T11] veth1_vlan: left promiscuous mode [ 71.388307][ T11] veth0_vlan: left promiscuous mode [ 71.418771][ T828] usb 5-1: usb_control_msg returned -71 [ 71.420646][ T828] usbtmc 5-1:16.0: can't read capabilities [ 71.424376][ T828] usb 5-1: USB disconnect, device number 4 [ 71.457243][ T1414] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.459490][ T1414] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.967723][ T40] kauditd_printk_skb: 41 callbacks suppressed [ 71.967769][ T40] audit: type=1400 audit(1730225515.344:467): avc: denied { read } for pid=7056 comm="syz.0.270" dev="sockfs" ino=14283 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 72.235267][ T11] team0 (unregistering): Port device team_slave_1 removed [ 72.247324][ T5302] Bluetooth: hci2: command tx timeout [ 72.323738][ T11] team0 (unregistering): Port device team_slave_0 removed [ 72.926867][ T7002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.936500][ T7063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.271'. [ 73.016510][ T7077] netlink: 20 bytes leftover after parsing attributes in process `syz.0.272'. [ 73.021917][ T40] audit: type=1400 audit(1730225516.404:468): avc: denied { ioctl } for pid=7065 comm="syz.0.272" path="socket:[13265]" dev="sockfs" ino=13265 ioctlcmd=0x9422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 73.079337][ T7002] veth0_vlan: entered promiscuous mode [ 73.094365][ T7002] veth1_vlan: entered promiscuous mode [ 73.115041][ T7002] veth0_macvtap: entered promiscuous mode [ 73.123781][ T7002] veth1_macvtap: entered promiscuous mode [ 73.139081][ T7002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.141876][ T7002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.147571][ T7002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.154959][ T7002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.160075][ T7002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.164508][ T7002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.170006][ T7002] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.173086][ T7002] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.175559][ T7002] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.178553][ T7002] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.212295][ T40] audit: type=1400 audit(1730225516.594:469): avc: denied { append } for pid=7091 comm="syz.0.273" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 73.252984][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.255363][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.279484][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.281901][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.291419][ T40] audit: type=1400 audit(1730225516.674:470): avc: denied { mounton } for pid=7002 comm="syz-executor" path="/syzkaller.Kv1hTY/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 73.359830][ T40] audit: type=1400 audit(1730225516.744:471): avc: denied { create } for pid=7100 comm="syz.4.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 73.379293][ T40] audit: type=1400 audit(1730225516.764:472): avc: denied { write } for pid=7100 comm="syz.4.258" name="psched" dev="proc" ino=4026533793 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 73.637544][ T40] audit: type=1400 audit(1730225517.014:473): avc: denied { ioctl } for pid=7100 comm="syz.4.258" path="socket:[14912]" dev="sockfs" ino=14912 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 73.728964][ T7128] overlayfs: failed to resolve './file1': -2 [ 73.744705][ T40] audit: type=1400 audit(1730225517.124:474): avc: denied { setopt } for pid=7126 comm="syz.0.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 73.962000][ T40] audit: type=1400 audit(1730225517.344:475): avc: denied { mount } for pid=7139 comm="syz.2.278" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 74.327371][ T5302] Bluetooth: hci2: command tx timeout [ 74.508585][ T7153] FAT-fs (sr0): bogus number of reserved sectors [ 74.510516][ T7153] FAT-fs (sr0): Can't find a valid FAT filesystem [ 74.572593][ T40] audit: type=1400 audit(1730225517.954:476): avc: denied { read } for pid=7139 comm="syz.2.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 74.652301][ T5966] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 74.655193][ T5966] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 74.659690][ T5966] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 74.679110][ T5966] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 74.687497][ T5966] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 74.690045][ T5966] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 74.926717][ T7161] chnl_net:caif_netlink_parms(): no params data found [ 75.024446][ T7161] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.026427][ T7161] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.030451][ T7161] bridge_slave_0: entered allmulticast mode [ 75.033837][ T7161] bridge_slave_0: entered promiscuous mode [ 75.042806][ T7161] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.045381][ T7161] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.049050][ T7161] bridge_slave_1: entered allmulticast mode [ 75.052512][ T7161] bridge_slave_1: entered promiscuous mode [ 75.109387][ T7161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.113844][ T7161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.160206][ T11] bond0: (slave netdevsim0): Releasing backup interface [ 75.175789][ T7161] team0: Port device team_slave_0 added [ 75.180417][ T7161] team0: Port device team_slave_1 added [ 75.219063][ T7161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.221085][ T7161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.228447][ T7161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.232796][ T7161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.234648][ T7161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.242863][ T7161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.289594][ T7161] hsr_slave_0: entered promiscuous mode [ 75.294146][ T7161] hsr_slave_1: entered promiscuous mode [ 75.298047][ T7161] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.299995][ T7161] Cannot create hsr debugfs directory [ 75.768684][ T35] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 75.777857][ T11] bond0 (unregistering): Released all slaves [ 75.920410][ T35] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 75.926473][ T35] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 75.938641][ T35] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 75.941148][ T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.944571][ T7188] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 75.951479][ T35] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 75.968442][ T7161] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 75.996645][ T7161] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 76.062337][ T7161] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 76.066820][ T7161] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 76.083222][ T7217] netlink: 'syz.4.289': attribute type 4 has an invalid length. [ 76.167405][ T829] usb 7-1: USB disconnect, device number 4 [ 76.178872][ T7227] Error parsing options; rc = [-22] [ 76.181571][ T7227] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 76.230322][ T11] hsr_slave_0: left promiscuous mode [ 76.235054][ T11] hsr_slave_1: left promiscuous mode [ 76.419052][ T5966] Bluetooth: hci2: command tx timeout [ 76.437473][ T7238] input: syz0 as /devices/virtual/input/input8 [ 76.727644][ T5966] Bluetooth: hci4: command tx timeout [ 77.099398][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 77.099414][ T40] audit: type=1400 audit(1730225520.474:489): avc: denied { ioctl } for pid=7245 comm="syz.4.295" path="socket:[15177]" dev="sockfs" ino=15177 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 77.111346][ T40] audit: type=1400 audit(1730225520.494:490): avc: denied { bind } for pid=7245 comm="syz.4.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 77.118622][ T40] audit: type=1400 audit(1730225520.494:491): avc: denied { lock } for pid=7245 comm="syz.4.295" path="/dev/qrtr-tun" dev="devtmpfs" ino=1333 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 77.163706][ T40] audit: type=1400 audit(1730225520.544:492): avc: denied { listen } for pid=7247 comm="syz.4.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 77.267313][ T40] audit: type=1400 audit(1730225520.644:493): avc: denied { nlmsg_read } for pid=7255 comm="syz.4.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 77.277682][ T7257] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=7257 comm=syz.4.297 [ 78.043155][ T7161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.075962][ T7161] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.090457][ T1239] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.093190][ T1239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.098801][ T1239] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.101667][ T1239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.183796][ T40] audit: type=1400 audit(1730225521.564:494): avc: denied { watch watch_reads } for pid=7265 comm="syz.4.300" path="/proc/47/net/unix" dev="proc" ino=4026533814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 78.263106][ T7267] block nbd4: NBD_DISCONNECT [ 78.279112][ T7267] block nbd4: Disconnected due to user request. [ 78.280873][ T7267] block nbd4: shutting down sockets [ 78.283216][ T7161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.445050][ T7161] veth0_vlan: entered promiscuous mode [ 78.450355][ T7161] veth1_vlan: entered promiscuous mode [ 78.472831][ T7161] veth0_macvtap: entered promiscuous mode [ 78.477555][ T7161] veth1_macvtap: entered promiscuous mode [ 78.490885][ T5966] Bluetooth: hci2: command tx timeout [ 78.496484][ T7161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.500041][ T7161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.502932][ T7161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.506578][ T7161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.511313][ T7161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.517890][ T7161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.521022][ T7161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.524447][ T7161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.528757][ T7161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.534030][ T7161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.541418][ T7313] IPVS: Unknown mcast interface: pim6reg0 [ 78.545001][ T7161] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.549223][ T7161] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.552538][ T7161] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.554933][ T7161] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.564079][ T40] audit: type=1400 audit(1730225521.944:495): avc: denied { map } for pid=7311 comm="syz.2.308" path="/dev/dri/card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 78.641945][ T1136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.644321][ T1136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.722082][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.727151][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.817414][ T5966] Bluetooth: hci4: command tx timeout [ 78.838221][ T7332] netlink: 4 bytes leftover after parsing attributes in process `syz.5.310'. [ 79.053353][ T7351] BUG: Bad page state in process syz.0.314 pfn:46cb3 [ 79.055778][ T7351] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x46cb3 [ 79.058733][ T7351] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 79.063101][ T7351] raw: 00fff00000000000 dead000000000040 ffff888040826000 0000000000000000 [ 79.065916][ T7351] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 79.068815][ T7351] page dumped because: page_pool leak [ 79.070472][ T7351] page_owner tracks the page as allocated [ 79.072509][ T7351] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7351, tgid 7350 (syz.0.314), ts 79037182451, free_ts 79008369683 [ 79.077659][ T7351] post_alloc_hook+0x2d1/0x350 [ 79.079339][ T7351] get_page_from_freelist+0x101e/0x3070 [ 79.081489][ T7351] __alloc_pages_noprof+0x223/0x25a0 [ 79.083170][ T7351] alloc_pages_bulk_noprof+0x77c/0x1110 [ 79.084687][ T7351] __page_pool_alloc_pages_slow+0x18f/0x770 [ 79.086690][ T7351] page_pool_alloc_netmem+0xc4/0x160 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 79.088444][ T7351] page_pool_alloc_pages+0x1a/0x60 [ 79.090722][ T7351] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 79.093177][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 79.094975][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 79.096644][ T7351] __sys_bpf+0xfc6/0x49a0 [ 79.098201][ T7351] __x64_sys_bpf+0x78/0xc0 [ 79.099425][ T7351] do_syscall_64+0xcd/0x250 [ 79.100569][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.102321][ T7351] page last free pid 5364 tgid 5364 stack trace: [ 79.103967][ T7351] free_unref_page+0x5f4/0xdc0 [ 79.105651][ T7351] __put_partials+0x14c/0x170 [ 79.106945][ T7351] qlist_free_all+0x4e/0x120 [ 79.108176][ T7351] kasan_quarantine_reduce+0x192/0x1e0 [ 79.109615][ T7351] __kasan_slab_alloc+0x69/0x90 [ 79.110875][ T7351] kmem_cache_alloc_noprof+0x121/0x2f0 [ 79.112672][ T7351] getname_flags.part.0+0x4c/0x550 [ 79.114451][ T7351] getname+0x8d/0xe0 [ 79.116270][ T7351] do_sys_openat2+0x104/0x1e0 [ 79.118803][ T7351] __x64_sys_openat+0x175/0x210 [ 79.120972][ T7351] do_syscall_64+0xcd/0x250 [ 79.122483][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.124265][ T7351] Modules linked in: [ 79.125532][ T7351] CPU: 2 UID: 0 PID: 7351 Comm: syz.0.314 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 79.128613][ T7351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 79.131473][ T7351] Call Trace: [ 79.132427][ T7351] [ 79.133426][ T7351] dump_stack_lvl+0x16c/0x1f0 [ 79.134774][ T7351] bad_page+0xb3/0x1f0 [ 79.136017][ T7351] ? __pfx_bad_page+0x10/0x10 [ 79.137339][ T7351] ? page_bad_reason+0x9d/0x1e0 [ 79.138820][ T7351] free_unref_page+0x657/0xdc0 [ 79.140242][ T7351] ? hlock_class+0x4e/0x130 [ 79.141881][ T7351] ? __phys_addr+0xc6/0x150 [ 79.143342][ T7351] skb_free_head+0xa0/0x1d0 [ 79.144605][ T7351] skb_release_data+0x560/0x730 [ 79.146100][ T7351] sk_skb_reason_drop+0x129/0x1a0 [ 79.147616][ T7351] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 79.149937][ T7351] ? kernel_text_address+0x8d/0x100 [ 79.152143][ T7351] ? hlock_class+0x4e/0x130 [ 79.154072][ T7351] ? __lock_acquire+0x163e/0x3ce0 [ 79.156182][ T7351] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 79.158711][ T7351] ? hlock_class+0x4e/0x130 [ 79.160157][ T7351] ? __lock_acquire+0xbdd/0x3ce0 [ 79.161691][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 79.163119][ T7351] __netif_receive_skb_list_core+0x357/0x950 [ 79.164742][ T7351] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 79.166628][ T7351] ? trace_lock_acquire+0x14a/0x1d0 [ 79.168452][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 79.170253][ T7351] ? lock_acquire+0x2f/0xb0 [ 79.171645][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 79.173526][ T7351] netif_receive_skb_list_internal+0x753/0xdb0 [ 79.175084][ T7351] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 79.176749][ T7351] ? __pfx_eth_type_trans+0x10/0x10 [ 79.178084][ T7351] ? __build_skb_around+0x278/0x3b0 [ 79.179561][ T7351] netif_receive_skb_list+0x4f/0x4a0 [ 79.181127][ T7351] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 79.183124][ T7351] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 79.185189][ T7351] ? bpf_test_timer_continue+0x150/0x3d0 [ 79.187148][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 79.189002][ T7351] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 79.190995][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 79.192980][ T7351] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 79.194623][ T7351] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 79.196361][ T7351] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 79.198255][ T7351] ? 0xffffffffa0004340 [ 79.199813][ T7351] ? 0xffffffffa0004340 [ 79.201078][ T7351] ? 0xffffffffa0004340 [ 79.202411][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 79.204554][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 79.206245][ T7351] ? lock_acquire+0x2f/0xb0 [ 79.207734][ T7351] ? __fget_files+0x40/0x3f0 [ 79.209164][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 79.210911][ T7351] ? fput+0x30/0x390 [ 79.212036][ T7351] ? __bpf_prog_get+0xa0/0x290 [ 79.213605][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 79.216046][ T7351] __sys_bpf+0xfc6/0x49a0 [ 79.217515][ T7351] ? __pfx_futex_wake+0x10/0x10 [ 79.219236][ T7351] ? __pfx___sys_bpf+0x10/0x10 [ 79.221334][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 79.223516][ T7351] ? do_futex+0x123/0x350 [ 79.224853][ T7351] ? __pfx_do_futex+0x10/0x10 [ 79.226064][ T7351] ? xfd_validate_state+0x5d/0x180 [ 79.227347][ T7351] ? rcu_is_watching+0x12/0xc0 [ 79.228629][ T7351] __x64_sys_bpf+0x78/0xc0 [ 79.230005][ T7351] ? lockdep_hardirqs_on+0x7c/0x110 [ 79.231440][ T7351] do_syscall_64+0xcd/0x250 [ 79.232817][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.234853][ T7351] RIP: 0033:0x7fc02f97e719 [ 79.236255][ T7351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.242078][ T7351] RSP: 002b:00007fc0306bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 79.244606][ T7351] RAX: ffffffffffffffda RBX: 00007fc02fb35f80 RCX: 00007fc02f97e719 [ 79.246937][ T7351] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 79.249378][ T7351] RBP: 00007fc02f9f132e R08: 0000000000000000 R09: 0000000000000000 [ 79.251784][ T7351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.254229][ T7351] R13: 0000000000000000 R14: 00007fc02fb35f80 R15: 00007ffe03613128 [ 79.257034][ T7351] [ 79.258412][ T7351] Disabling lock debugging due to kernel taint [ 79.260611][ T7351] BUG: Bad page state in process syz.0.314 pfn:46cb2 [ 79.263237][ T7351] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x46cb2 [ 79.266752][ T7351] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 79.269180][ T7351] raw: 00fff00000000000 dead000000000040 ffff888040826000 0000000000000000 [ 79.272119][ T7351] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 79.274976][ T7351] page dumped because: page_pool leak [ 79.276646][ T7351] page_owner tracks the page as allocated [ 79.278463][ T7351] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7351, tgid 7350 (syz.0.314), ts 79037177993, free_ts 79008369683 [ 79.283730][ T7351] post_alloc_hook+0x2d1/0x350 [ 79.285288][ T7351] get_page_from_freelist+0x101e/0x3070 [ 79.286994][ T7351] __alloc_pages_noprof+0x223/0x25a0 [ 79.288446][ T7351] alloc_pages_bulk_noprof+0x77c/0x1110 [ 79.289876][ T7351] __page_pool_alloc_pages_slow+0x18f/0x770 [ 79.291390][ T7351] page_pool_alloc_netmem+0xc4/0x160 [ 79.292750][ T7351] page_pool_alloc_pages+0x1a/0x60 [ 79.294107][ T7351] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 79.295933][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 79.297829][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 79.299758][ T7351] __sys_bpf+0xfc6/0x49a0 [ 79.301293][ T7351] __x64_sys_bpf+0x78/0xc0 [ 79.302748][ T7351] do_syscall_64+0xcd/0x250 [ 79.304292][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.306287][ T7351] page last free pid 5364 tgid 5364 stack trace: [ 79.308493][ T7351] free_unref_page+0x5f4/0xdc0 [ 79.310163][ T7351] __put_partials+0x14c/0x170 [ 79.312319][ T7351] qlist_free_all+0x4e/0x120 [ 79.313859][ T7351] kasan_quarantine_reduce+0x192/0x1e0 [ 79.315670][ T7351] __kasan_slab_alloc+0x69/0x90 [ 79.317548][ T7351] kmem_cache_alloc_noprof+0x121/0x2f0 [ 79.319233][ T7351] getname_flags.part.0+0x4c/0x550 [ 79.320991][ T7351] getname+0x8d/0xe0 [ 79.322277][ T7351] do_sys_openat2+0x104/0x1e0 [ 79.323854][ T7351] __x64_sys_openat+0x175/0x210 [ 79.325397][ T7351] do_syscall_64+0xcd/0x250 [ 79.326905][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.329085][ T7351] Modules linked in: [ 79.330504][ T7351] CPU: 2 UID: 0 PID: 7351 Comm: syz.0.314 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 79.334809][ T7351] Tainted: [B]=BAD_PAGE [ 79.336349][ T7351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 79.339708][ T7351] Call Trace: [ 79.340719][ T7351] [ 79.341745][ T7351] dump_stack_lvl+0x16c/0x1f0 [ 79.343163][ T7351] bad_page+0xb3/0x1f0 [ 79.344558][ T7351] ? __pfx_bad_page+0x10/0x10 [ 79.346262][ T7351] ? page_bad_reason+0x9d/0x1e0 [ 79.347922][ T7351] free_unref_page+0x657/0xdc0 [ 79.349593][ T7351] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 79.351406][ T7351] ? __phys_addr+0xc6/0x150 [ 79.352651][ T7351] skb_free_head+0xa0/0x1d0 [ 79.354087][ T7351] skb_release_data+0x560/0x730 [ 79.355788][ T7351] sk_skb_reason_drop+0x129/0x1a0 [ 79.357215][ T7351] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 79.359539][ T7351] ? kernel_text_address+0x8d/0x100 [ 79.361433][ T7351] ? hlock_class+0x4e/0x130 [ 79.363060][ T7351] ? __lock_acquire+0x163e/0x3ce0 [ 79.364576][ T7351] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 79.366466][ T7351] ? hlock_class+0x4e/0x130 [ 79.367704][ T7351] ? __lock_acquire+0xbdd/0x3ce0 [ 79.369047][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 79.370659][ T7351] __netif_receive_skb_list_core+0x357/0x950 [ 79.372630][ T7351] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 79.374657][ T7351] ? trace_lock_acquire+0x14a/0x1d0 [ 79.376553][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 79.378947][ T7351] ? lock_acquire+0x2f/0xb0 [ 79.380151][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 79.382387][ T7351] netif_receive_skb_list_internal+0x753/0xdb0 [ 79.384439][ T7351] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 79.386339][ T7351] ? __pfx_eth_type_trans+0x10/0x10 [ 79.387961][ T7351] ? __build_skb_around+0x278/0x3b0 [ 79.389540][ T7351] netif_receive_skb_list+0x4f/0x4a0 [ 79.391111][ T7351] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 79.392946][ T7351] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 79.394883][ T7351] ? bpf_test_timer_continue+0x150/0x3d0 [ 79.396340][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 79.397679][ T7351] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 79.399146][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 79.401010][ T7351] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 79.402644][ T7351] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 79.404375][ T7351] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 79.406044][ T7351] ? 0xffffffffa0004340 [ 79.407369][ T7351] ? 0xffffffffa0004340 [ 79.408709][ T7351] ? 0xffffffffa0004340 [ 79.410070][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 79.411781][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 79.413775][ T7351] ? lock_acquire+0x2f/0xb0 [ 79.415399][ T7351] ? __fget_files+0x40/0x3f0 [ 79.417127][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 79.419233][ T7351] ? fput+0x30/0x390 [ 79.420538][ T7351] ? __bpf_prog_get+0xa0/0x290 [ 79.422282][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 79.424116][ T7351] __sys_bpf+0xfc6/0x49a0 [ 79.425447][ T7351] ? __pfx_futex_wake+0x10/0x10 [ 79.427042][ T7351] ? __pfx___sys_bpf+0x10/0x10 [ 79.428536][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 79.430198][ T7351] ? do_futex+0x123/0x350 [ 79.431503][ T7351] ? __pfx_do_futex+0x10/0x10 [ 79.432896][ T7351] ? xfd_validate_state+0x5d/0x180 [ 79.434222][ T7351] ? rcu_is_watching+0x12/0xc0 [ 79.435695][ T7351] __x64_sys_bpf+0x78/0xc0 [ 79.437263][ T7351] ? lockdep_hardirqs_on+0x7c/0x110 [ 79.439005][ T7351] do_syscall_64+0xcd/0x250 [ 79.440553][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.442442][ T7351] RIP: 0033:0x7fc02f97e719 [ 79.443972][ T7351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.450290][ T7351] RSP: 002b:00007fc0306bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 79.453066][ T7351] RAX: ffffffffffffffda RBX: 00007fc02fb35f80 RCX: 00007fc02f97e719 [ 79.455981][ T7351] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 79.458643][ T7351] RBP: 00007fc02f9f132e R08: 0000000000000000 R09: 0000000000000000 [ 79.461482][ T7351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.464198][ T7351] R13: 0000000000000000 R14: 00007fc02fb35f80 R15: 00007ffe03613128 [ 79.466511][ T7351] [ 79.467673][ T7351] BUG: Bad page state in process syz.0.314 pfn:46cb1 [ 79.469917][ T7351] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x8 pfn:0x46cb1 [ 79.472315][ T7351] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 79.474410][ T7351] raw: 00fff00000000000 dead000000000040 ffff888040826000 0000000000000000 [ 79.476884][ T7351] raw: 0000000000000008 0000000000000001 00000000ffffffff 0000000000000000 [ 79.479664][ T7351] page dumped because: page_pool leak [ 79.481515][ T7351] page_owner tracks the page as allocated [ 79.483476][ T7351] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7351, tgid 7350 (syz.0.314), ts 79037172759, free_ts 79008369683 [ 79.488765][ T7351] post_alloc_hook+0x2d1/0x350 [ 79.490395][ T7351] get_page_from_freelist+0x101e/0x3070 [ 79.492739][ T7351] __alloc_pages_noprof+0x223/0x25a0 [ 79.494921][ T7351] alloc_pages_bulk_noprof+0x77c/0x1110 [ 79.496896][ T7351] __page_pool_alloc_pages_slow+0x18f/0x770 [ 79.498928][ T7351] page_pool_alloc_netmem+0xc4/0x160 [ 79.500609][ T7351] page_pool_alloc_pages+0x1a/0x60 [ 79.502339][ T7351] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 79.504222][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 79.505805][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 79.507515][ T7351] __sys_bpf+0xfc6/0x49a0 [ 79.508722][ T7351] __x64_sys_bpf+0x78/0xc0 [ 79.510087][ T7351] do_syscall_64+0xcd/0x250 [ 79.511281][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.513307][ T7351] page last free pid 5364 tgid 5364 stack trace: [ 79.515530][ T7351] free_unref_page+0x5f4/0xdc0 [ 79.517015][ T7351] __put_partials+0x14c/0x170 [ 79.518472][ T7351] qlist_free_all+0x4e/0x120 [ 79.519789][ T7351] kasan_quarantine_reduce+0x192/0x1e0 [ 79.521360][ T7351] __kasan_slab_alloc+0x69/0x90 [ 79.523021][ T7351] kmem_cache_alloc_noprof+0x121/0x2f0 [ 79.524752][ T7351] getname_flags.part.0+0x4c/0x550 [ 79.526627][ T7351] getname+0x8d/0xe0 [ 79.527992][ T7351] do_sys_openat2+0x104/0x1e0 [ 79.529440][ T7351] __x64_sys_openat+0x175/0x210 [ 79.531282][ T7351] do_syscall_64+0xcd/0x250 [ 79.532695][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.534542][ T7351] Modules linked in: [ 79.535621][ T7351] CPU: 2 UID: 0 PID: 7351 Comm: syz.0.314 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 79.538734][ T7351] Tainted: [B]=BAD_PAGE [ 79.539829][ T7351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 79.543056][ T7351] Call Trace: [ 79.544115][ T7351] [ 79.545054][ T7351] dump_stack_lvl+0x16c/0x1f0 [ 79.546532][ T7351] bad_page+0xb3/0x1f0 [ 79.547660][ T7351] ? __pfx_bad_page+0x10/0x10 [ 79.548914][ T7351] ? page_bad_reason+0x9d/0x1e0 [ 79.550152][ T7351] free_unref_page+0x657/0xdc0 [ 79.551715][ T7351] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 79.553476][ T7351] ? __phys_addr+0xc6/0x150 [ 79.554653][ T7351] skb_free_head+0xa0/0x1d0 [ 79.556229][ T7351] skb_release_data+0x560/0x730 [ 79.557853][ T7351] sk_skb_reason_drop+0x129/0x1a0 [ 79.559503][ T7351] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 79.561838][ T7351] ? kernel_text_address+0x8d/0x100 [ 79.563542][ T7351] ? hlock_class+0x4e/0x130 [ 79.565159][ T7351] ? __lock_acquire+0x163e/0x3ce0 [ 79.566962][ T7351] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 79.568983][ T7351] ? hlock_class+0x4e/0x130 [ 79.570201][ T7351] ? __lock_acquire+0xbdd/0x3ce0 [ 79.571535][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 79.573128][ T7351] __netif_receive_skb_list_core+0x357/0x950 [ 79.574705][ T7351] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 79.576613][ T7351] ? trace_lock_acquire+0x14a/0x1d0 [ 79.578316][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 79.580129][ T7351] ? lock_acquire+0x2f/0xb0 [ 79.581730][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 79.583815][ T7351] netif_receive_skb_list_internal+0x753/0xdb0 [ 79.585786][ T7351] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 79.587666][ T7351] ? __pfx_eth_type_trans+0x10/0x10 [ 79.589306][ T7351] ? __build_skb_around+0x278/0x3b0 [ 79.590956][ T7351] netif_receive_skb_list+0x4f/0x4a0 [ 79.592523][ T7351] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 79.594609][ T7351] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 79.596881][ T7351] ? bpf_test_timer_continue+0x150/0x3d0 [ 79.599026][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 79.600971][ T7351] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 79.602695][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 79.604636][ T7351] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 79.606534][ T7351] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 79.608407][ T7351] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 79.610245][ T7351] ? 0xffffffffa0004340 [ 79.611467][ T7351] ? 0xffffffffa0004340 [ 79.613060][ T7351] ? 0xffffffffa0004340 [ 79.614264][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 79.616267][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 79.617739][ T7351] ? lock_acquire+0x2f/0xb0 [ 79.618927][ T7351] ? __fget_files+0x40/0x3f0 [ 79.620109][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 79.621617][ T7351] ? fput+0x30/0x390 [ 79.622677][ T7351] ? __bpf_prog_get+0xa0/0x290 [ 79.623945][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 79.625508][ T7351] __sys_bpf+0xfc6/0x49a0 [ 79.626684][ T7351] ? __pfx_futex_wake+0x10/0x10 [ 79.627925][ T7351] ? __pfx___sys_bpf+0x10/0x10 [ 79.629203][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 79.630573][ T7351] ? do_futex+0x123/0x350 [ 79.631739][ T7351] ? __pfx_do_futex+0x10/0x10 [ 79.632987][ T7351] ? xfd_validate_state+0x5d/0x180 [ 79.634315][ T7351] ? rcu_is_watching+0x12/0xc0 [ 79.635530][ T7351] __x64_sys_bpf+0x78/0xc0 [ 79.636691][ T7351] ? lockdep_hardirqs_on+0x7c/0x110 [ 79.638040][ T7351] do_syscall_64+0xcd/0x250 [ 79.639192][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.640692][ T7351] RIP: 0033:0x7fc02f97e719 [ 79.642003][ T7351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.646943][ T7351] RSP: 002b:00007fc0306bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 79.649387][ T7351] RAX: ffffffffffffffda RBX: 00007fc02fb35f80 RCX: 00007fc02f97e719 [ 79.651777][ T7351] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 79.653944][ T7351] RBP: 00007fc02f9f132e R08: 0000000000000000 R09: 0000000000000000 [ 79.656234][ T7351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.658605][ T7351] R13: 0000000000000000 R14: 00007fc02fb35f80 R15: 00007ffe03613128 [ 79.660920][ T7351] [ 79.661826][ T7351] BUG: Bad page state in process syz.0.314 pfn:46cb0 [ 79.663727][ T7351] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888046cb6000 pfn:0x46cb0 [ 79.666373][ T7351] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 79.668226][ T7351] raw: 00fff00000000000 dead000000000040 ffff888040826000 0000000000000000 [ 79.670384][ T7351] raw: ffff888046cb6000 0000000000000001 00000000ffffffff 0000000000000000 [ 79.672763][ T7351] page dumped because: page_pool leak [ 79.674464][ T7351] page_owner tracks the page as allocated [ 79.676421][ T7351] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7351, tgid 7350 (syz.0.314), ts 79037167242, free_ts 79008369683 [ 79.681215][ T7351] post_alloc_hook+0x2d1/0x350 [ 79.682470][ T7351] get_page_from_freelist+0x101e/0x3070 [ 79.684279][ T7351] __alloc_pages_noprof+0x223/0x25a0 [ 79.685623][ T7351] alloc_pages_bulk_noprof+0x77c/0x1110 [ 79.687223][ T7351] __page_pool_alloc_pages_slow+0x18f/0x770 [ 79.688846][ T7351] page_pool_alloc_netmem+0xc4/0x160 [ 79.690626][ T7351] page_pool_alloc_pages+0x1a/0x60 [ 79.693157][ T7351] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 79.696185][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 79.698483][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 79.700046][ T7351] __sys_bpf+0xfc6/0x49a0 [ 79.701614][ T7351] __x64_sys_bpf+0x78/0xc0 [ 79.703025][ T7351] do_syscall_64+0xcd/0x250 [ 79.704400][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.706380][ T7351] page last free pid 5364 tgid 5364 stack trace: [ 79.708733][ T7351] free_unref_page+0x5f4/0xdc0 [ 79.710500][ T7351] __put_partials+0x14c/0x170 [ 79.712080][ T7351] qlist_free_all+0x4e/0x120 [ 79.713540][ T7351] kasan_quarantine_reduce+0x192/0x1e0 [ 79.715211][ T7351] __kasan_slab_alloc+0x69/0x90 [ 79.716671][ T7351] kmem_cache_alloc_noprof+0x121/0x2f0 [ 79.718519][ T7351] getname_flags.part.0+0x4c/0x550 [ 79.720141][ T7351] getname+0x8d/0xe0 [ 79.721587][ T7351] do_sys_openat2+0x104/0x1e0 [ 79.723339][ T7351] __x64_sys_openat+0x175/0x210 [ 79.725031][ T7351] do_syscall_64+0xcd/0x250 [ 79.726446][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.728376][ T7351] Modules linked in: [ 79.729618][ T7351] CPU: 2 UID: 0 PID: 7351 Comm: syz.0.314 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 79.734028][ T7351] Tainted: [B]=BAD_PAGE [ 79.735514][ T7351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 79.738911][ T7351] Call Trace: [ 79.740419][ T7351] [ 79.741530][ T7351] dump_stack_lvl+0x16c/0x1f0 [ 79.743241][ T7351] bad_page+0xb3/0x1f0 [ 79.744772][ T7351] ? __pfx_bad_page+0x10/0x10 [ 79.746100][ T7351] ? page_bad_reason+0x9d/0x1e0 [ 79.747395][ T7351] free_unref_page+0x657/0xdc0 [ 79.748632][ T7351] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 79.750151][ T7351] ? __phys_addr+0xc6/0x150 [ 79.751292][ T7351] skb_free_head+0xa0/0x1d0 [ 79.752823][ T7351] skb_release_data+0x560/0x730 [ 79.754768][ T7351] sk_skb_reason_drop+0x129/0x1a0 [ 79.756223][ T7351] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 79.758812][ T7351] ? kernel_text_address+0x8d/0x100 [ 79.760704][ T7351] ? hlock_class+0x4e/0x130 [ 79.762271][ T7351] ? __lock_acquire+0x163e/0x3ce0 [ 79.763965][ T7351] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 79.766089][ T7351] ? hlock_class+0x4e/0x130 [ 79.767475][ T7351] ? __lock_acquire+0xbdd/0x3ce0 [ 79.769047][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 79.770543][ T7351] __netif_receive_skb_list_core+0x357/0x950 [ 79.772701][ T7351] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 79.774693][ T7351] ? trace_lock_acquire+0x14a/0x1d0 [ 79.776346][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 79.778299][ T7351] ? lock_acquire+0x2f/0xb0 [ 79.779757][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 79.781973][ T7351] netif_receive_skb_list_internal+0x753/0xdb0 [ 79.784145][ T7351] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 79.785982][ T7351] ? __pfx_eth_type_trans+0x10/0x10 [ 79.787353][ T7351] ? __build_skb_around+0x278/0x3b0 [ 79.788895][ T7351] netif_receive_skb_list+0x4f/0x4a0 [ 79.790466][ T7351] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 79.792359][ T7351] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 79.794578][ T7351] ? bpf_test_timer_continue+0x150/0x3d0 [ 79.796766][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 79.798776][ T7351] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 79.800962][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 79.802993][ T7351] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 79.804833][ T7351] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 79.806710][ T7351] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 79.808591][ T7351] ? 0xffffffffa0004340 [ 79.810130][ T7351] ? 0xffffffffa0004340 [ 79.811682][ T7351] ? 0xffffffffa0004340 [ 79.813152][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 79.815180][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 79.816680][ T7351] ? lock_acquire+0x2f/0xb0 [ 79.818097][ T7351] ? __fget_files+0x40/0x3f0 [ 79.819589][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 79.821328][ T7351] ? fput+0x30/0x390 [ 79.822609][ T7351] ? __bpf_prog_get+0xa0/0x290 [ 79.824135][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 79.825694][ T7351] __sys_bpf+0xfc6/0x49a0 [ 79.827187][ T7351] ? __pfx_futex_wake+0x10/0x10 [ 79.828796][ T7351] ? __pfx___sys_bpf+0x10/0x10 [ 79.830404][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 79.832149][ T7351] ? do_futex+0x123/0x350 [ 79.833771][ T7351] ? __pfx_do_futex+0x10/0x10 [ 79.835528][ T7351] ? xfd_validate_state+0x5d/0x180 [ 79.837591][ T7351] ? rcu_is_watching+0x12/0xc0 [ 79.839236][ T7351] __x64_sys_bpf+0x78/0xc0 [ 79.840999][ T7351] ? lockdep_hardirqs_on+0x7c/0x110 [ 79.842727][ T7351] do_syscall_64+0xcd/0x250 [ 79.844163][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.846252][ T7351] RIP: 0033:0x7fc02f97e719 [ 79.847784][ T7351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.854846][ T7351] RSP: 002b:00007fc0306bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 79.857541][ T7351] RAX: ffffffffffffffda RBX: 00007fc02fb35f80 RCX: 00007fc02f97e719 [ 79.860149][ T7351] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 79.862447][ T7351] RBP: 00007fc02f9f132e R08: 0000000000000000 R09: 0000000000000000 [ 79.864901][ T7351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.867158][ T7351] R13: 0000000000000000 R14: 00007fc02fb35f80 R15: 00007ffe03613128 [ 79.869555][ T7351] [ 79.870654][ T7351] BUG: Bad page state in process syz.0.314 pfn:48597 [ 79.872809][ T7351] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x48597 [ 79.875198][ T7351] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 79.877307][ T7351] raw: 00fff00000000000 dead000000000040 ffff888040826000 0000000000000000 [ 79.880234][ T7351] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 79.882879][ T7351] page dumped because: page_pool leak [ 79.884508][ T7351] page_owner tracks the page as allocated [ 79.886029][ T7351] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7351, tgid 7350 (syz.0.314), ts 79037091989, free_ts 79012750246 [ 79.890452][ T7351] post_alloc_hook+0x2d1/0x350 [ 79.891912][ T7351] get_page_from_freelist+0x101e/0x3070 [ 79.893760][ T7351] __alloc_pages_noprof+0x223/0x25a0 [ 79.895215][ T7351] alloc_pages_bulk_noprof+0x77c/0x1110 [ 79.897201][ T7351] __page_pool_alloc_pages_slow+0x18f/0x770 [ 79.899037][ T7351] page_pool_alloc_netmem+0xc4/0x160 [ 79.900804][ T7351] page_pool_alloc_pages+0x1a/0x60 [ 79.902518][ T7351] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 79.904409][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 79.906007][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 79.907562][ T7351] __sys_bpf+0xfc6/0x49a0 [ 79.908929][ T7351] __x64_sys_bpf+0x78/0xc0 [ 79.910125][ T7351] do_syscall_64+0xcd/0x250 [ 79.911516][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.913204][ T7351] page last free pid 7120 tgid 7120 stack trace: [ 79.915449][ T7351] free_unref_page+0x5f4/0xdc0 [ 79.916747][ T7351] __put_partials+0x14c/0x170 [ 79.918243][ T7351] qlist_free_all+0x4e/0x120 [ 79.919747][ T7351] kasan_quarantine_reduce+0x192/0x1e0 [ 79.921315][ T7351] __kasan_slab_alloc+0x69/0x90 [ 79.922773][ T7351] kmem_cache_alloc_node_noprof+0x153/0x310 [ 79.924718][ T7351] __alloc_skb+0x2b1/0x380 [ 79.926034][ T7351] netlink_alloc_large_skb+0x69/0x130 [ 79.927466][ T7351] netlink_sendmsg+0x689/0xd70 [ 79.928712][ T7351] ____sys_sendmsg+0xaaf/0xc90 [ 79.929954][ T7351] ___sys_sendmsg+0x135/0x1e0 [ 79.931436][ T7351] __sys_sendmsg+0x117/0x1f0 [ 79.933229][ T7351] do_syscall_64+0xcd/0x250 [ 79.934982][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.936953][ T7351] Modules linked in: [ 79.938235][ T7351] CPU: 2 UID: 0 PID: 7351 Comm: syz.0.314 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 79.941575][ T7351] Tainted: [B]=BAD_PAGE [ 79.942580][ T7351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 79.945820][ T7351] Call Trace: [ 79.946921][ T7351] [ 79.947815][ T7351] dump_stack_lvl+0x16c/0x1f0 [ 79.949313][ T7351] bad_page+0xb3/0x1f0 [ 79.950676][ T7351] ? __pfx_bad_page+0x10/0x10 [ 79.952112][ T7351] ? page_bad_reason+0x9d/0x1e0 [ 79.953907][ T7351] free_unref_page+0x657/0xdc0 [ 79.955516][ T7351] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 79.957341][ T7351] ? __phys_addr+0xc6/0x150 [ 79.958865][ T7351] skb_free_head+0xa0/0x1d0 [ 79.960422][ T7351] skb_release_data+0x560/0x730 [ 79.962145][ T7351] sk_skb_reason_drop+0x129/0x1a0 [ 79.963635][ T7351] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 79.965665][ T7351] ? kernel_text_address+0x8d/0x100 [ 79.967276][ T7351] ? hlock_class+0x4e/0x130 [ 79.968703][ T7351] ? __lock_acquire+0x163e/0x3ce0 [ 79.970066][ T7351] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 79.972515][ T7351] ? hlock_class+0x4e/0x130 [ 79.974023][ T7351] ? __lock_acquire+0xbdd/0x3ce0 [ 79.976008][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 79.977740][ T7351] __netif_receive_skb_list_core+0x357/0x950 [ 79.980313][ T7351] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 79.982438][ T7351] ? trace_lock_acquire+0x14a/0x1d0 [ 79.984141][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 79.986113][ T7351] ? lock_acquire+0x2f/0xb0 [ 79.987567][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 79.989492][ T7351] netif_receive_skb_list_internal+0x753/0xdb0 [ 79.991428][ T7351] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 79.993691][ T7351] ? __pfx_eth_type_trans+0x10/0x10 [ 79.995163][ T7351] ? __build_skb_around+0x278/0x3b0 [ 79.996878][ T7351] netif_receive_skb_list+0x4f/0x4a0 [ 79.998807][ T7351] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 80.000969][ T7351] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 80.003255][ T7351] ? bpf_test_timer_continue+0x150/0x3d0 [ 80.004995][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 80.006572][ T7351] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 80.008368][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 80.010179][ T7351] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 80.012247][ T7351] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 80.014435][ T7351] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 80.016554][ T7351] ? 0xffffffffa0004340 [ 80.018138][ T7351] ? 0xffffffffa0004340 [ 80.019433][ T7351] ? 0xffffffffa0004340 [ 80.020861][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 80.022719][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 80.024403][ T7351] ? lock_acquire+0x2f/0xb0 [ 80.025789][ T7351] ? __fget_files+0x40/0x3f0 [ 80.027184][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 80.029109][ T7351] ? fput+0x30/0x390 [ 80.030307][ T7351] ? __bpf_prog_get+0xa0/0x290 [ 80.031852][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 80.033606][ T7351] __sys_bpf+0xfc6/0x49a0 [ 80.035154][ T7351] ? __pfx_futex_wake+0x10/0x10 [ 80.036901][ T7351] ? __pfx___sys_bpf+0x10/0x10 [ 80.038970][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 80.040391][ T7351] ? do_futex+0x123/0x350 [ 80.041935][ T7351] ? __pfx_do_futex+0x10/0x10 [ 80.043447][ T7351] ? xfd_validate_state+0x5d/0x180 [ 80.045181][ T7351] ? rcu_is_watching+0x12/0xc0 [ 80.046588][ T7351] __x64_sys_bpf+0x78/0xc0 [ 80.047892][ T7351] ? lockdep_hardirqs_on+0x7c/0x110 [ 80.049475][ T7351] do_syscall_64+0xcd/0x250 [ 80.050685][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.052377][ T7351] RIP: 0033:0x7fc02f97e719 [ 80.053793][ T7351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.059482][ T7351] RSP: 002b:00007fc0306bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 80.062201][ T7351] RAX: ffffffffffffffda RBX: 00007fc02fb35f80 RCX: 00007fc02f97e719 [ 80.064622][ T7351] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 80.067271][ T7351] RBP: 00007fc02f9f132e R08: 0000000000000000 R09: 0000000000000000 [ 80.069871][ T7351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.072913][ T7351] R13: 0000000000000000 R14: 00007fc02fb35f80 R15: 00007ffe03613128 [ 80.075617][ T7351] [ 80.076934][ T7351] BUG: Bad page state in process syz.0.314 pfn:48596 [ 80.079299][ T7351] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x48596 [ 80.082092][ T7351] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 80.084127][ T7351] raw: 00fff00000000000 dead000000000040 ffff888040826000 0000000000000000 [ 80.086753][ T7351] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 80.089411][ T7351] page dumped because: page_pool leak [ 80.091106][ T7351] page_owner tracks the page as allocated [ 80.093046][ T7351] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7351, tgid 7350 (syz.0.314), ts 79037084082, free_ts 79012750246 [ 80.099140][ T7351] post_alloc_hook+0x2d1/0x350 [ 80.100548][ T7351] get_page_from_freelist+0x101e/0x3070 [ 80.102145][ T7351] __alloc_pages_noprof+0x223/0x25a0 [ 80.103960][ T7351] alloc_pages_bulk_noprof+0x77c/0x1110 [ 80.105691][ T7351] __page_pool_alloc_pages_slow+0x18f/0x770 [ 80.107553][ T7351] page_pool_alloc_netmem+0xc4/0x160 [ 80.108980][ T7351] page_pool_alloc_pages+0x1a/0x60 [ 80.110270][ T7351] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 80.111827][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 80.113183][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 80.114762][ T7351] __sys_bpf+0xfc6/0x49a0 [ 80.116174][ T7351] __x64_sys_bpf+0x78/0xc0 [ 80.117339][ T7351] do_syscall_64+0xcd/0x250 [ 80.118544][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.120171][ T7351] page last free pid 7120 tgid 7120 stack trace: [ 80.122022][ T7351] free_unref_page+0x5f4/0xdc0 [ 80.123358][ T7351] __put_partials+0x14c/0x170 [ 80.124649][ T7351] qlist_free_all+0x4e/0x120 [ 80.125934][ T7351] kasan_quarantine_reduce+0x192/0x1e0 [ 80.127552][ T7351] __kasan_slab_alloc+0x69/0x90 [ 80.128864][ T7351] kmem_cache_alloc_node_noprof+0x153/0x310 [ 80.130365][ T7351] __alloc_skb+0x2b1/0x380 [ 80.131637][ T7351] netlink_alloc_large_skb+0x69/0x130 [ 80.133196][ T7351] netlink_sendmsg+0x689/0xd70 [ 80.134421][ T7351] ____sys_sendmsg+0xaaf/0xc90 [ 80.135846][ T7351] ___sys_sendmsg+0x135/0x1e0 [ 80.137490][ T7351] __sys_sendmsg+0x117/0x1f0 [ 80.138894][ T7351] do_syscall_64+0xcd/0x250 [ 80.140199][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.141818][ T7351] Modules linked in: [ 80.142909][ T7351] CPU: 2 UID: 0 PID: 7351 Comm: syz.0.314 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 80.146419][ T7351] Tainted: [B]=BAD_PAGE [ 80.147560][ T7351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.150546][ T7351] Call Trace: [ 80.151476][ T7351] [ 80.152411][ T7351] dump_stack_lvl+0x16c/0x1f0 [ 80.153753][ T7351] bad_page+0xb3/0x1f0 [ 80.154850][ T7351] ? __pfx_bad_page+0x10/0x10 [ 80.156181][ T7351] ? page_bad_reason+0x9d/0x1e0 [ 80.157523][ T7351] free_unref_page+0x657/0xdc0 [ 80.158778][ T7351] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 80.160301][ T7351] ? __phys_addr+0xc6/0x150 [ 80.161508][ T7351] skb_free_head+0xa0/0x1d0 [ 80.162839][ T7351] skb_release_data+0x560/0x730 [ 80.164133][ T7351] sk_skb_reason_drop+0x129/0x1a0 [ 80.165444][ T7351] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 80.167145][ T7351] ? kernel_text_address+0x8d/0x100 [ 80.168464][ T7351] ? hlock_class+0x4e/0x130 [ 80.169645][ T7351] ? __lock_acquire+0x163e/0x3ce0 [ 80.170917][ T7351] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 80.173171][ T7351] ? hlock_class+0x4e/0x130 [ 80.174621][ T7351] ? __lock_acquire+0xbdd/0x3ce0 [ 80.176019][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 80.177855][ T7351] __netif_receive_skb_list_core+0x357/0x950 [ 80.179705][ T7351] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 80.181369][ T7351] ? trace_lock_acquire+0x14a/0x1d0 [ 80.182697][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 80.184280][ T7351] ? lock_acquire+0x2f/0xb0 [ 80.185465][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 80.187105][ T7351] netif_receive_skb_list_internal+0x753/0xdb0 [ 80.188696][ T7351] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 80.190387][ T7351] ? __pfx_eth_type_trans+0x10/0x10 [ 80.191722][ T7351] ? __build_skb_around+0x278/0x3b0 [ 80.193039][ T7351] netif_receive_skb_list+0x4f/0x4a0 [ 80.194412][ T7351] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 80.196128][ T7351] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 80.198088][ T7351] ? bpf_test_timer_continue+0x150/0x3d0 [ 80.199779][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 80.201369][ T7351] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 80.202972][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 80.204620][ T7351] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 80.206131][ T7351] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 80.207590][ T7351] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 80.208944][ T7351] ? 0xffffffffa0004340 [ 80.210005][ T7351] ? 0xffffffffa0004340 [ 80.211069][ T7351] ? 0xffffffffa0004340 [ 80.212123][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 80.213582][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 80.214911][ T7351] ? lock_acquire+0x2f/0xb0 [ 80.216090][ T7351] ? __fget_files+0x40/0x3f0 [ 80.217282][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 80.219070][ T7351] ? fput+0x30/0x390 [ 80.220089][ T7351] ? __bpf_prog_get+0xa0/0x290 [ 80.221378][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 80.222994][ T7351] __sys_bpf+0xfc6/0x49a0 [ 80.224102][ T7351] ? __pfx_futex_wake+0x10/0x10 [ 80.225374][ T7351] ? __pfx___sys_bpf+0x10/0x10 [ 80.226996][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 80.228953][ T7351] ? do_futex+0x123/0x350 [ 80.230389][ T7351] ? __pfx_do_futex+0x10/0x10 [ 80.232073][ T7351] ? xfd_validate_state+0x5d/0x180 [ 80.233566][ T7351] ? rcu_is_watching+0x12/0xc0 [ 80.235864][ T7351] __x64_sys_bpf+0x78/0xc0 [ 80.237184][ T7351] ? lockdep_hardirqs_on+0x7c/0x110 [ 80.238553][ T7351] do_syscall_64+0xcd/0x250 [ 80.239716][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.241240][ T7351] RIP: 0033:0x7fc02f97e719 [ 80.242446][ T7351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.247333][ T7351] RSP: 002b:00007fc0306bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 80.249588][ T7351] RAX: ffffffffffffffda RBX: 00007fc02fb35f80 RCX: 00007fc02f97e719 [ 80.251702][ T7351] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 80.253754][ T7351] RBP: 00007fc02f9f132e R08: 0000000000000000 R09: 0000000000000000 [ 80.256191][ T7351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.258290][ T7351] R13: 0000000000000000 R14: 00007fc02fb35f80 R15: 00007ffe03613128 [ 80.260305][ T7351] [ 80.261206][ T7351] BUG: Bad page state in process syz.0.314 pfn:48595 [ 80.262955][ T7351] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x48595 [ 80.265212][ T7351] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 80.267162][ T7351] raw: 00fff00000000000 dead000000000040 ffff888040826000 0000000000000000 [ 80.269718][ T7351] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 80.272467][ T7351] page dumped because: page_pool leak [ 80.274110][ T7351] page_owner tracks the page as allocated [ 80.275846][ T7351] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7351, tgid 7350 (syz.0.314), ts 79037076077, free_ts 79012750246 [ 80.280733][ T7351] post_alloc_hook+0x2d1/0x350 [ 80.282129][ T7351] get_page_from_freelist+0x101e/0x3070 [ 80.283538][ T7351] __alloc_pages_noprof+0x223/0x25a0 [ 80.284912][ T7351] alloc_pages_bulk_noprof+0x77c/0x1110 [ 80.286386][ T7351] __page_pool_alloc_pages_slow+0x18f/0x770 [ 80.287951][ T7351] page_pool_alloc_netmem+0xc4/0x160 [ 80.289323][ T7351] page_pool_alloc_pages+0x1a/0x60 [ 80.290626][ T7351] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 80.292277][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 80.293801][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 80.295544][ T7351] __sys_bpf+0xfc6/0x49a0 [ 80.296925][ T7351] __x64_sys_bpf+0x78/0xc0 [ 80.298218][ T7351] do_syscall_64+0xcd/0x250 [ 80.299633][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.301292][ T7351] page last free pid 7120 tgid 7120 stack trace: [ 80.303045][ T7351] free_unref_page+0x5f4/0xdc0 [ 80.304397][ T7351] __put_partials+0x14c/0x170 [ 80.305804][ T7351] qlist_free_all+0x4e/0x120 [ 80.307194][ T7351] kasan_quarantine_reduce+0x192/0x1e0 [ 80.308761][ T7351] __kasan_slab_alloc+0x69/0x90 [ 80.310138][ T7351] kmem_cache_alloc_node_noprof+0x153/0x310 [ 80.311971][ T7351] __alloc_skb+0x2b1/0x380 [ 80.313248][ T7351] netlink_alloc_large_skb+0x69/0x130 [ 80.314713][ T7351] netlink_sendmsg+0x689/0xd70 [ 80.316189][ T7351] ____sys_sendmsg+0xaaf/0xc90 [ 80.317525][ T7351] ___sys_sendmsg+0x135/0x1e0 [ 80.318730][ T7351] __sys_sendmsg+0x117/0x1f0 [ 80.319927][ T7351] do_syscall_64+0xcd/0x250 [ 80.321131][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.322648][ T7351] Modules linked in: [ 80.323824][ T7351] CPU: 2 UID: 0 PID: 7351 Comm: syz.0.314 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 80.326957][ T7351] Tainted: [B]=BAD_PAGE [ 80.328102][ T7351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.330901][ T7351] Call Trace: [ 80.331791][ T7351] [ 80.332559][ T7351] dump_stack_lvl+0x16c/0x1f0 [ 80.333783][ T7351] bad_page+0xb3/0x1f0 [ 80.334838][ T7351] ? __pfx_bad_page+0x10/0x10 [ 80.336109][ T7351] ? page_bad_reason+0x9d/0x1e0 [ 80.337392][ T7351] free_unref_page+0x657/0xdc0 [ 80.338659][ T7351] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 80.340227][ T7351] ? __phys_addr+0xc6/0x150 [ 80.341415][ T7351] skb_free_head+0xa0/0x1d0 [ 80.342594][ T7351] skb_release_data+0x560/0x730 [ 80.343844][ T7351] sk_skb_reason_drop+0x129/0x1a0 [ 80.345148][ T7351] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 80.346907][ T7351] ? kernel_text_address+0x8d/0x100 [ 80.348293][ T7351] ? hlock_class+0x4e/0x130 [ 80.349492][ T7351] ? __lock_acquire+0x163e/0x3ce0 [ 80.350772][ T7351] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 80.352652][ T7351] ? hlock_class+0x4e/0x130 [ 80.353920][ T7351] ? __lock_acquire+0xbdd/0x3ce0 [ 80.355413][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 80.357108][ T7351] __netif_receive_skb_list_core+0x357/0x950 [ 80.358944][ T7351] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 80.360984][ T7351] ? trace_lock_acquire+0x14a/0x1d0 [ 80.362455][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 80.364207][ T7351] ? lock_acquire+0x2f/0xb0 [ 80.365367][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 80.366934][ T7351] netif_receive_skb_list_internal+0x753/0xdb0 [ 80.368447][ T7351] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 80.370104][ T7351] ? __pfx_eth_type_trans+0x10/0x10 [ 80.371359][ T7351] ? __build_skb_around+0x278/0x3b0 [ 80.372546][ T7351] netif_receive_skb_list+0x4f/0x4a0 [ 80.373882][ T7351] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 80.375464][ T7351] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 80.377178][ T7351] ? bpf_test_timer_continue+0x150/0x3d0 [ 80.378585][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 80.379901][ T7351] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 80.381376][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 80.382888][ T7351] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 80.384539][ T7351] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 80.386053][ T7351] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 80.387398][ T7351] ? 0xffffffffa0004340 [ 80.388460][ T7351] ? 0xffffffffa0004340 [ 80.389584][ T7351] ? 0xffffffffa0004340 [ 80.390678][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 80.392187][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 80.393569][ T7351] ? lock_acquire+0x2f/0xb0 [ 80.394897][ T7351] ? __fget_files+0x40/0x3f0 [ 80.396209][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 80.397978][ T7351] ? fput+0x30/0x390 [ 80.399164][ T7351] ? __bpf_prog_get+0xa0/0x290 [ 80.400573][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 80.402139][ T7351] __sys_bpf+0xfc6/0x49a0 [ 80.403411][ T7351] ? __pfx_futex_wake+0x10/0x10 [ 80.404755][ T7351] ? __pfx___sys_bpf+0x10/0x10 [ 80.406113][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 80.407571][ T7351] ? do_futex+0x123/0x350 [ 80.408789][ T7351] ? __pfx_do_futex+0x10/0x10 [ 80.410219][ T7351] ? xfd_validate_state+0x5d/0x180 [ 80.411716][ T7351] ? rcu_is_watching+0x12/0xc0 [ 80.413090][ T7351] __x64_sys_bpf+0x78/0xc0 [ 80.414593][ T7351] ? lockdep_hardirqs_on+0x7c/0x110 [ 80.416105][ T7351] do_syscall_64+0xcd/0x250 [ 80.417670][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.419337][ T7351] RIP: 0033:0x7fc02f97e719 [ 80.420500][ T7351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.425491][ T7351] RSP: 002b:00007fc0306bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 80.427548][ T7351] RAX: ffffffffffffffda RBX: 00007fc02fb35f80 RCX: 00007fc02f97e719 [ 80.429561][ T7351] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 80.431670][ T7351] RBP: 00007fc02f9f132e R08: 0000000000000000 R09: 0000000000000000 [ 80.433953][ T7351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.436205][ T7351] R13: 0000000000000000 R14: 00007fc02fb35f80 R15: 00007ffe03613128 [ 80.438444][ T7351] [ 80.439750][ T7351] BUG: Bad page state in process syz.0.314 pfn:48594 [ 80.441618][ T7351] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x48594 [ 80.444298][ T7351] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 80.446664][ T7351] raw: 00fff00000000000 dead000000000040 ffff888040826000 0000000000000000 [ 80.449040][ T7351] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 80.451193][ T7351] page dumped because: page_pool leak [ 80.452551][ T7351] page_owner tracks the page as allocated [ 80.453961][ T7351] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7351, tgid 7350 (syz.0.314), ts 79037069043, free_ts 79012750246 [ 80.458421][ T7351] post_alloc_hook+0x2d1/0x350 [ 80.459635][ T7351] get_page_from_freelist+0x101e/0x3070 [ 80.461129][ T7351] __alloc_pages_noprof+0x223/0x25a0 [ 80.462493][ T7351] alloc_pages_bulk_noprof+0x77c/0x1110 [ 80.464044][ T7351] __page_pool_alloc_pages_slow+0x18f/0x770 [ 80.465564][ T7351] page_pool_alloc_netmem+0xc4/0x160 [ 80.466878][ T7351] page_pool_alloc_pages+0x1a/0x60 [ 80.468239][ T7351] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 80.469840][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 80.471187][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 80.472676][ T7351] __sys_bpf+0xfc6/0x49a0 [ 80.473903][ T7351] __x64_sys_bpf+0x78/0xc0 [ 80.475206][ T7351] do_syscall_64+0xcd/0x250 [ 80.476656][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.478328][ T7351] page last free pid 7120 tgid 7120 stack trace: [ 80.479977][ T7351] free_unref_page+0x5f4/0xdc0 [ 80.481305][ T7351] __put_partials+0x14c/0x170 [ 80.482495][ T7351] qlist_free_all+0x4e/0x120 [ 80.483658][ T7351] kasan_quarantine_reduce+0x192/0x1e0 [ 80.485051][ T7351] __kasan_slab_alloc+0x69/0x90 [ 80.486257][ T7351] kmem_cache_alloc_node_noprof+0x153/0x310 [ 80.487771][ T7351] __alloc_skb+0x2b1/0x380 [ 80.488916][ T7351] netlink_alloc_large_skb+0x69/0x130 [ 80.490260][ T7351] netlink_sendmsg+0x689/0xd70 [ 80.491470][ T7351] ____sys_sendmsg+0xaaf/0xc90 [ 80.492686][ T7351] ___sys_sendmsg+0x135/0x1e0 [ 80.493873][ T7351] __sys_sendmsg+0x117/0x1f0 [ 80.495051][ T7351] do_syscall_64+0xcd/0x250 [ 80.496211][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.497761][ T7351] Modules linked in: [ 80.498757][ T7351] CPU: 2 UID: 0 PID: 7351 Comm: syz.0.314 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 80.501734][ T7351] Tainted: [B]=BAD_PAGE [ 80.502807][ T7351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.505482][ T7351] Call Trace: [ 80.506316][ T7351] [ 80.507075][ T7351] dump_stack_lvl+0x16c/0x1f0 [ 80.508290][ T7351] bad_page+0xb3/0x1f0 [ 80.509369][ T7351] ? __pfx_bad_page+0x10/0x10 [ 80.510581][ T7351] ? page_bad_reason+0x9d/0x1e0 [ 80.511816][ T7351] free_unref_page+0x657/0xdc0 [ 80.513052][ T7351] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 80.514639][ T7351] ? __phys_addr+0xc6/0x150 [ 80.515806][ T7351] skb_free_head+0xa0/0x1d0 [ 80.516978][ T7351] skb_release_data+0x560/0x730 [ 80.518311][ T7351] sk_skb_reason_drop+0x129/0x1a0 [ 80.519841][ T7351] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 80.521918][ T7351] ? kernel_text_address+0x8d/0x100 [ 80.523548][ T7351] ? hlock_class+0x4e/0x130 [ 80.524709][ T7351] ? __lock_acquire+0x163e/0x3ce0 [ 80.526204][ T7351] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 80.528256][ T7351] ? hlock_class+0x4e/0x130 [ 80.529663][ T7351] ? __lock_acquire+0xbdd/0x3ce0 [ 80.531367][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 80.533226][ T7351] __netif_receive_skb_list_core+0x357/0x950 [ 80.535346][ T7351] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 80.537487][ T7351] ? trace_lock_acquire+0x14a/0x1d0 [ 80.539153][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 80.541330][ T7351] ? lock_acquire+0x2f/0xb0 [ 80.542816][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 80.544740][ T7351] netif_receive_skb_list_internal+0x753/0xdb0 [ 80.546553][ T7351] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 80.548254][ T7351] ? __pfx_eth_type_trans+0x10/0x10 [ 80.549609][ T7351] ? __build_skb_around+0x278/0x3b0 [ 80.550946][ T7351] netif_receive_skb_list+0x4f/0x4a0 [ 80.552322][ T7351] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 80.553911][ T7351] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 80.555581][ T7351] ? bpf_test_timer_continue+0x150/0x3d0 [ 80.557687][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 80.559287][ T7351] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 80.561098][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 80.562603][ T7351] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 80.564090][ T7351] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 80.565823][ T7351] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 80.567174][ T7351] ? 0xffffffffa0004340 [ 80.568252][ T7351] ? 0xffffffffa0004340 [ 80.569392][ T7351] ? 0xffffffffa0004340 [ 80.570488][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 80.572354][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 80.574195][ T7351] ? lock_acquire+0x2f/0xb0 [ 80.575674][ T7351] ? __fget_files+0x40/0x3f0 [ 80.577077][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 80.578836][ T7351] ? fput+0x30/0x390 [ 80.580154][ T7351] ? __bpf_prog_get+0xa0/0x290 [ 80.581540][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 80.583692][ T7351] __sys_bpf+0xfc6/0x49a0 [ 80.585410][ T7351] ? __pfx_futex_wake+0x10/0x10 [ 80.587243][ T7351] ? __pfx___sys_bpf+0x10/0x10 [ 80.589031][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 80.590424][ T7351] ? do_futex+0x123/0x350 [ 80.591845][ T7351] ? __pfx_do_futex+0x10/0x10 [ 80.593460][ T7351] ? xfd_validate_state+0x5d/0x180 [ 80.595250][ T7351] ? rcu_is_watching+0x12/0xc0 [ 80.596819][ T7351] __x64_sys_bpf+0x78/0xc0 [ 80.598106][ T7351] ? lockdep_hardirqs_on+0x7c/0x110 [ 80.599870][ T7351] do_syscall_64+0xcd/0x250 [ 80.601221][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.602896][ T7351] RIP: 0033:0x7fc02f97e719 [ 80.604207][ T7351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.610327][ T7351] RSP: 002b:00007fc0306bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 80.613029][ T7351] RAX: ffffffffffffffda RBX: 00007fc02fb35f80 RCX: 00007fc02f97e719 [ 80.615487][ T7351] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 80.617776][ T7351] RBP: 00007fc02f9f132e R08: 0000000000000000 R09: 0000000000000000 [ 80.620647][ T7351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.623076][ T7351] R13: 0000000000000000 R14: 00007fc02fb35f80 R15: 00007ffe03613128 [ 80.625668][ T7351] [ 80.626775][ T7351] BUG: Bad page state in process syz.0.314 pfn:48593 [ 80.628891][ T7351] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x48593 [ 80.631541][ T7351] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 80.633779][ T7351] raw: 00fff00000000000 dead000000000040 ffff888040826000 0000000000000000 [ 80.636305][ T7351] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 80.639697][ T7351] page dumped because: page_pool leak [ 80.641651][ T7351] page_owner tracks the page as allocated [ 80.643304][ T7351] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7351, tgid 7350 (syz.0.314), ts 79037061425, free_ts 79012750246 [ 80.648974][ T7351] post_alloc_hook+0x2d1/0x350 [ 80.650534][ T7351] get_page_from_freelist+0x101e/0x3070 [ 80.652724][ T7351] __alloc_pages_noprof+0x223/0x25a0 [ 80.654475][ T7351] alloc_pages_bulk_noprof+0x77c/0x1110 [ 80.656241][ T7351] __page_pool_alloc_pages_slow+0x18f/0x770 [ 80.658076][ T7351] page_pool_alloc_netmem+0xc4/0x160 [ 80.660003][ T7351] page_pool_alloc_pages+0x1a/0x60 [ 80.661663][ T7351] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 80.663881][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 80.665668][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 80.667337][ T7351] __sys_bpf+0xfc6/0x49a0 [ 80.668762][ T7351] __x64_sys_bpf+0x78/0xc0 [ 80.669974][ T7351] do_syscall_64+0xcd/0x250 [ 80.671452][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.673382][ T7351] page last free pid 7120 tgid 7120 stack trace: [ 80.675550][ T7351] free_unref_page+0x5f4/0xdc0 [ 80.677392][ T7351] __put_partials+0x14c/0x170 [ 80.679020][ T7351] qlist_free_all+0x4e/0x120 [ 80.680851][ T7351] kasan_quarantine_reduce+0x192/0x1e0 [ 80.682760][ T7351] __kasan_slab_alloc+0x69/0x90 [ 80.684396][ T7351] kmem_cache_alloc_node_noprof+0x153/0x310 [ 80.686504][ T7351] __alloc_skb+0x2b1/0x380 [ 80.688357][ T7351] netlink_alloc_large_skb+0x69/0x130 [ 80.690066][ T7351] netlink_sendmsg+0x689/0xd70 [ 80.691771][ T7351] ____sys_sendmsg+0xaaf/0xc90 [ 80.693338][ T7351] ___sys_sendmsg+0x135/0x1e0 [ 80.694900][ T7351] __sys_sendmsg+0x117/0x1f0 [ 80.696276][ T7351] do_syscall_64+0xcd/0x250 [ 80.697697][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.699479][ T7351] Modules linked in: [ 80.700625][ T7351] CPU: 2 UID: 0 PID: 7351 Comm: syz.0.314 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 80.703814][ T7351] Tainted: [B]=BAD_PAGE [ 80.705019][ T7351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.708399][ T7351] Call Trace: [ 80.709327][ T7351] [ 80.710097][ T7351] dump_stack_lvl+0x16c/0x1f0 [ 80.711480][ T7351] bad_page+0xb3/0x1f0 [ 80.712617][ T7351] ? __pfx_bad_page+0x10/0x10 [ 80.714210][ T7351] ? page_bad_reason+0x9d/0x1e0 [ 80.715726][ T7351] free_unref_page+0x657/0xdc0 [ 80.717227][ T7351] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 80.719027][ T7351] ? __phys_addr+0xc6/0x150 [ 80.720519][ T7351] skb_free_head+0xa0/0x1d0 [ 80.721763][ T7351] skb_release_data+0x560/0x730 [ 80.723014][ T7351] sk_skb_reason_drop+0x129/0x1a0 [ 80.724400][ T7351] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 80.726273][ T7351] ? kernel_text_address+0x8d/0x100 [ 80.727792][ T7351] ? hlock_class+0x4e/0x130 [ 80.729181][ T7351] ? __lock_acquire+0x163e/0x3ce0 [ 80.730890][ T7351] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 80.733028][ T7351] ? hlock_class+0x4e/0x130 [ 80.734262][ T7351] ? __lock_acquire+0xbdd/0x3ce0 [ 80.735574][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 80.737078][ T7351] __netif_receive_skb_list_core+0x357/0x950 [ 80.738795][ T7351] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 80.740461][ T7351] ? trace_lock_acquire+0x14a/0x1d0 [ 80.741849][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 80.743535][ T7351] ? lock_acquire+0x2f/0xb0 [ 80.744868][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 80.746835][ T7351] netif_receive_skb_list_internal+0x753/0xdb0 [ 80.748976][ T7351] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 80.750700][ T7351] ? __pfx_eth_type_trans+0x10/0x10 [ 80.752553][ T7351] ? __build_skb_around+0x278/0x3b0 [ 80.754135][ T7351] netif_receive_skb_list+0x4f/0x4a0 [ 80.755758][ T7351] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 80.757655][ T7351] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 80.759629][ T7351] ? bpf_test_timer_continue+0x150/0x3d0 [ 80.761195][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 80.762659][ T7351] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 80.764335][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 80.766180][ T7351] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 80.768698][ T7351] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 80.770702][ T7351] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 80.772384][ T7351] ? 0xffffffffa0004340 [ 80.773558][ T7351] ? 0xffffffffa0004340 [ 80.774681][ T7351] ? 0xffffffffa0004340 [ 80.775797][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 80.777343][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 80.778761][ T7351] ? lock_acquire+0x2f/0xb0 [ 80.779941][ T7351] ? __fget_files+0x40/0x3f0 [ 80.781196][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 80.782724][ T7351] ? fput+0x30/0x390 [ 80.783768][ T7351] ? __bpf_prog_get+0xa0/0x290 [ 80.785039][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 80.786631][ T7351] __sys_bpf+0xfc6/0x49a0 [ 80.787876][ T7351] ? __pfx_futex_wake+0x10/0x10 [ 80.789396][ T7351] ? __pfx___sys_bpf+0x10/0x10 [ 80.790793][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 80.792784][ T7351] ? do_futex+0x123/0x350 [ 80.794075][ T7351] ? __pfx_do_futex+0x10/0x10 [ 80.795808][ T7351] ? xfd_validate_state+0x5d/0x180 [ 80.797306][ T7351] ? rcu_is_watching+0x12/0xc0 [ 80.798891][ T7351] __x64_sys_bpf+0x78/0xc0 [ 80.800145][ T7351] ? lockdep_hardirqs_on+0x7c/0x110 [ 80.801580][ T7351] do_syscall_64+0xcd/0x250 [ 80.802840][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.804478][ T7351] RIP: 0033:0x7fc02f97e719 [ 80.805707][ T7351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.811418][ T7351] RSP: 002b:00007fc0306bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 80.814366][ T7351] RAX: ffffffffffffffda RBX: 00007fc02fb35f80 RCX: 00007fc02f97e719 [ 80.817324][ T7351] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 80.820597][ T7351] RBP: 00007fc02f9f132e R08: 0000000000000000 R09: 0000000000000000 [ 80.824086][ T7351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.827056][ T7351] R13: 0000000000000000 R14: 00007fc02fb35f80 R15: 00007ffe03613128 [ 80.829602][ T7351] [ 80.830686][ T7351] BUG: Bad page state in process syz.0.314 pfn:48592 [ 80.833043][ T7351] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x48592 [ 80.835742][ T7351] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 80.838335][ T7351] raw: 00fff00000000000 dead000000000040 ffff888040826000 0000000000000000 [ 80.840638][ T7351] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 80.843182][ T7351] page dumped because: page_pool leak [ 80.844524][ T7351] page_owner tracks the page as allocated [ 80.846025][ T7351] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7351, tgid 7350 (syz.0.314), ts 79037053554, free_ts 79012750246 [ 80.850488][ T7351] post_alloc_hook+0x2d1/0x350 [ 80.852154][ T7351] get_page_from_freelist+0x101e/0x3070 [ 80.853953][ T7351] __alloc_pages_noprof+0x223/0x25a0 [ 80.855337][ T7351] alloc_pages_bulk_noprof+0x77c/0x1110 [ 80.856941][ T7351] __page_pool_alloc_pages_slow+0x18f/0x770 [ 80.858778][ T7351] page_pool_alloc_netmem+0xc4/0x160 [ 80.860109][ T7351] page_pool_alloc_pages+0x1a/0x60 [ 80.861554][ T7351] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 80.863168][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 80.864559][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 80.866202][ T7351] __sys_bpf+0xfc6/0x49a0 [ 80.867870][ T7351] __x64_sys_bpf+0x78/0xc0 [ 80.869465][ T7351] do_syscall_64+0xcd/0x250 [ 80.871062][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.873125][ T7351] page last free pid 7120 tgid 7120 stack trace: [ 80.875299][ T7351] free_unref_page+0x5f4/0xdc0 [ 80.876594][ T7351] __put_partials+0x14c/0x170 [ 80.877849][ T7351] qlist_free_all+0x4e/0x120 [ 80.879163][ T7351] kasan_quarantine_reduce+0x192/0x1e0 [ 80.880678][ T7351] __kasan_slab_alloc+0x69/0x90 [ 80.881957][ T7351] kmem_cache_alloc_node_noprof+0x153/0x310 [ 80.883548][ T7351] __alloc_skb+0x2b1/0x380 [ 80.884801][ T7351] netlink_alloc_large_skb+0x69/0x130 [ 80.886534][ T7351] netlink_sendmsg+0x689/0xd70 [ 80.888423][ T7351] ____sys_sendmsg+0xaaf/0xc90 [ 80.890225][ T7351] ___sys_sendmsg+0x135/0x1e0 [ 80.892161][ T7351] __sys_sendmsg+0x117/0x1f0 [ 80.893795][ T7351] do_syscall_64+0xcd/0x250 [ 80.895406][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.897660][ T7351] Modules linked in: [ 80.898963][ T7351] CPU: 2 UID: 0 PID: 7351 Comm: syz.0.314 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 80.902961][ T7351] Tainted: [B]=BAD_PAGE [ 80.904395][ T7351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.907807][ T7351] Call Trace: [ 80.908831][ T7351] [ 80.909715][ T7351] dump_stack_lvl+0x16c/0x1f0 [ 80.911085][ T7351] bad_page+0xb3/0x1f0 [ 80.912125][ T7351] ? __pfx_bad_page+0x10/0x10 [ 80.913599][ T7351] ? page_bad_reason+0x9d/0x1e0 [ 80.915448][ T7351] free_unref_page+0x657/0xdc0 [ 80.916918][ T7351] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 80.918543][ T7351] ? __phys_addr+0xc6/0x150 [ 80.919961][ T7351] skb_free_head+0xa0/0x1d0 [ 80.921279][ T7351] skb_release_data+0x560/0x730 [ 80.922684][ T7351] sk_skb_reason_drop+0x129/0x1a0 [ 80.924089][ T7351] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 80.926050][ T7351] ? kernel_text_address+0x8d/0x100 [ 80.927406][ T7351] ? hlock_class+0x4e/0x130 [ 80.928631][ T7351] ? __lock_acquire+0x163e/0x3ce0 [ 80.930110][ T7351] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 80.931914][ T7351] ? hlock_class+0x4e/0x130 [ 80.933094][ T7351] ? __lock_acquire+0xbdd/0x3ce0 [ 80.934665][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 80.936451][ T7351] __netif_receive_skb_list_core+0x357/0x950 [ 80.938679][ T7351] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 80.941189][ T7351] ? trace_lock_acquire+0x14a/0x1d0 [ 80.943209][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 80.945458][ T7351] ? lock_acquire+0x2f/0xb0 [ 80.947043][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 80.949177][ T7351] netif_receive_skb_list_internal+0x753/0xdb0 [ 80.951188][ T7351] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 80.953165][ T7351] ? __pfx_eth_type_trans+0x10/0x10 [ 80.954496][ T7351] ? __build_skb_around+0x278/0x3b0 [ 80.955877][ T7351] netif_receive_skb_list+0x4f/0x4a0 [ 80.957327][ T7351] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 80.959062][ T7351] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 80.961217][ T7351] ? bpf_test_timer_continue+0x150/0x3d0 [ 80.962679][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 80.964019][ T7351] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 80.965552][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 80.967566][ T7351] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 80.969958][ T7351] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 80.972344][ T7351] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 80.974465][ T7351] ? 0xffffffffa0004340 [ 80.975551][ T7351] ? 0xffffffffa0004340 [ 80.976789][ T7351] ? 0xffffffffa0004340 [ 80.978153][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 80.979716][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 80.981201][ T7351] ? lock_acquire+0x2f/0xb0 [ 80.982349][ T7351] ? __fget_files+0x40/0x3f0 [ 80.983521][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 80.985012][ T7351] ? fput+0x30/0x390 [ 80.986110][ T7351] ? __bpf_prog_get+0xa0/0x290 [ 80.987758][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 80.989716][ T7351] __sys_bpf+0xfc6/0x49a0 [ 80.991370][ T7351] ? __pfx_futex_wake+0x10/0x10 [ 80.993141][ T7351] ? __pfx___sys_bpf+0x10/0x10 [ 80.995075][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 80.997448][ T7351] ? do_futex+0x123/0x350 [ 80.999326][ T7351] ? __pfx_do_futex+0x10/0x10 [ 81.001029][ T7351] ? xfd_validate_state+0x5d/0x180 [ 81.002606][ T7351] ? rcu_is_watching+0x12/0xc0 [ 81.004408][ T7351] __x64_sys_bpf+0x78/0xc0 [ 81.005963][ T7351] ? lockdep_hardirqs_on+0x7c/0x110 [ 81.007785][ T7351] do_syscall_64+0xcd/0x250 [ 81.009193][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.010711][ T7351] RIP: 0033:0x7fc02f97e719 [ 81.011829][ T7351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.017078][ T7351] RSP: 002b:00007fc0306bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 81.019887][ T7351] RAX: ffffffffffffffda RBX: 00007fc02fb35f80 RCX: 00007fc02f97e719 [ 81.022610][ T7351] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 81.025509][ T7351] RBP: 00007fc02f9f132e R08: 0000000000000000 R09: 0000000000000000 [ 81.028329][ T7351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.031024][ T7351] R13: 0000000000000000 R14: 00007fc02fb35f80 R15: 00007ffe03613128 [ 81.033669][ T7351] [ 81.034883][ T7351] BUG: Bad page state in process syz.0.314 pfn:48591 [ 81.037285][ T7351] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x8 pfn:0x48591 [ 81.040530][ T7351] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 81.043327][ T7351] raw: 00fff00000000000 dead000000000040 ffff888040826000 0000000000000000 [ 81.046206][ T7351] raw: 0000000000000008 0000000000000001 00000000ffffffff 0000000000000000 [ 81.050006][ T7351] page dumped because: page_pool leak [ 81.051856][ T7351] page_owner tracks the page as allocated [ 81.053814][ T7351] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7351, tgid 7350 (syz.0.314), ts 79037046286, free_ts 79012750246 [ 81.059857][ T7351] post_alloc_hook+0x2d1/0x350 [ 81.061588][ T7351] get_page_from_freelist+0x101e/0x3070 [ 81.063627][ T7351] __alloc_pages_noprof+0x223/0x25a0 [ 81.065540][ T7351] alloc_pages_bulk_noprof+0x77c/0x1110 [ 81.067625][ T7351] __page_pool_alloc_pages_slow+0x18f/0x770 [ 81.069681][ T7351] page_pool_alloc_netmem+0xc4/0x160 [ 81.071470][ T7351] page_pool_alloc_pages+0x1a/0x60 [ 81.073199][ T7351] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 81.075288][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 81.077089][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 81.078969][ T7351] __sys_bpf+0xfc6/0x49a0 [ 81.080271][ T7351] __x64_sys_bpf+0x78/0xc0 [ 81.081422][ T7351] do_syscall_64+0xcd/0x250 [ 81.082527][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.083983][ T7351] page last free pid 7120 tgid 7120 stack trace: [ 81.085665][ T7351] free_unref_page+0x5f4/0xdc0 [ 81.087202][ T7351] __put_partials+0x14c/0x170 [ 81.088676][ T7351] qlist_free_all+0x4e/0x120 [ 81.090093][ T7351] kasan_quarantine_reduce+0x192/0x1e0 [ 81.091816][ T7351] __kasan_slab_alloc+0x69/0x90 [ 81.093360][ T7351] kmem_cache_alloc_node_noprof+0x153/0x310 [ 81.095938][ T7351] __alloc_skb+0x2b1/0x380 [ 81.097973][ T7351] netlink_alloc_large_skb+0x69/0x130 [ 81.100418][ T7351] netlink_sendmsg+0x689/0xd70 [ 81.102111][ T7351] ____sys_sendmsg+0xaaf/0xc90 [ 81.103781][ T7351] ___sys_sendmsg+0x135/0x1e0 [ 81.105363][ T7351] __sys_sendmsg+0x117/0x1f0 [ 81.107070][ T7351] do_syscall_64+0xcd/0x250 [ 81.108620][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.110911][ T7351] Modules linked in: [ 81.112247][ T7351] CPU: 2 UID: 0 PID: 7351 Comm: syz.0.314 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 81.116035][ T7351] Tainted: [B]=BAD_PAGE [ 81.117450][ T7351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 81.120409][ T7351] Call Trace: [ 81.121278][ T7351] [ 81.122059][ T7351] dump_stack_lvl+0x16c/0x1f0 [ 81.123556][ T7351] bad_page+0xb3/0x1f0 [ 81.124723][ T7351] ? __pfx_bad_page+0x10/0x10 [ 81.126043][ T7351] ? page_bad_reason+0x9d/0x1e0 [ 81.127832][ T7351] free_unref_page+0x657/0xdc0 [ 81.129495][ T7351] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 81.131510][ T7351] ? __phys_addr+0xc6/0x150 [ 81.133152][ T7351] skb_free_head+0xa0/0x1d0 [ 81.134769][ T7351] skb_release_data+0x560/0x730 [ 81.136842][ T7351] sk_skb_reason_drop+0x129/0x1a0 [ 81.138948][ T7351] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 81.141921][ T7351] ? kernel_text_address+0x8d/0x100 [ 81.144289][ T7351] ? hlock_class+0x4e/0x130 [ 81.146096][ T7351] ? __lock_acquire+0x163e/0x3ce0 [ 81.147877][ T7351] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 81.150192][ T7351] ? hlock_class+0x4e/0x130 [ 81.151378][ T7351] ? __lock_acquire+0xbdd/0x3ce0 [ 81.152676][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 81.154037][ T7351] __netif_receive_skb_list_core+0x357/0x950 [ 81.155579][ T7351] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 81.157308][ T7351] ? trace_lock_acquire+0x14a/0x1d0 [ 81.158645][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 81.160303][ T7351] ? lock_acquire+0x2f/0xb0 [ 81.161500][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 81.163201][ T7351] netif_receive_skb_list_internal+0x753/0xdb0 [ 81.164987][ T7351] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 81.167045][ T7351] ? __pfx_eth_type_trans+0x10/0x10 [ 81.168867][ T7351] ? __build_skb_around+0x278/0x3b0 [ 81.170696][ T7351] netif_receive_skb_list+0x4f/0x4a0 [ 81.172655][ T7351] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 81.175087][ T7351] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 81.177663][ T7351] ? bpf_test_timer_continue+0x150/0x3d0 [ 81.179663][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 81.181528][ T7351] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 81.183656][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 81.185725][ T7351] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 81.187697][ T7351] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 81.189727][ T7351] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 81.191616][ T7351] ? 0xffffffffa0004340 [ 81.193095][ T7351] ? 0xffffffffa0004340 [ 81.194628][ T7351] ? 0xffffffffa0004340 [ 81.196312][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 81.198598][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 81.200879][ T7351] ? lock_acquire+0x2f/0xb0 [ 81.202469][ T7351] ? __fget_files+0x40/0x3f0 [ 81.204210][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 81.206471][ T7351] ? fput+0x30/0x390 [ 81.207906][ T7351] ? __bpf_prog_get+0xa0/0x290 [ 81.209674][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 81.211644][ T7351] __sys_bpf+0xfc6/0x49a0 [ 81.213141][ T7351] ? __pfx_futex_wake+0x10/0x10 [ 81.214822][ T7351] ? __pfx___sys_bpf+0x10/0x10 [ 81.216433][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 81.218367][ T7351] ? do_futex+0x123/0x350 [ 81.220039][ T7351] ? __pfx_do_futex+0x10/0x10 [ 81.221776][ T7351] ? xfd_validate_state+0x5d/0x180 [ 81.223624][ T7351] ? rcu_is_watching+0x12/0xc0 [ 81.225335][ T7351] __x64_sys_bpf+0x78/0xc0 [ 81.226840][ T7351] ? lockdep_hardirqs_on+0x7c/0x110 [ 81.228626][ T7351] do_syscall_64+0xcd/0x250 [ 81.230241][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.232243][ T7351] RIP: 0033:0x7fc02f97e719 [ 81.233808][ T7351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.241085][ T7351] RSP: 002b:00007fc0306bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 81.244049][ T7351] RAX: ffffffffffffffda RBX: 00007fc02fb35f80 RCX: 00007fc02f97e719 [ 81.246773][ T7351] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 81.249762][ T7351] RBP: 00007fc02f9f132e R08: 0000000000000000 R09: 0000000000000000 [ 81.252863][ T7351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.255618][ T7351] R13: 0000000000000000 R14: 00007fc02fb35f80 R15: 00007ffe03613128 [ 81.258558][ T7351] [ 81.259491][ T7351] BUG: Bad page state in process syz.0.314 pfn:48590 [ 81.261537][ T7351] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888048596600 pfn:0x48590 [ 81.264340][ T7351] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 81.266910][ T7351] raw: 00fff00000000000 dead000000000040 ffff888040826000 0000000000000000 [ 81.269945][ T7351] raw: ffff888048596600 0000000000000001 00000000ffffffff 0000000000000000 [ 81.273322][ T7351] page dumped because: page_pool leak [ 81.275387][ T7351] page_owner tracks the page as allocated [ 81.277202][ T7351] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7351, tgid 7350 (syz.0.314), ts 79037038434, free_ts 79012750246 [ 81.282747][ T7351] post_alloc_hook+0x2d1/0x350 [ 81.284451][ T7351] get_page_from_freelist+0x101e/0x3070 [ 81.286354][ T7351] __alloc_pages_noprof+0x223/0x25a0 [ 81.288293][ T7351] alloc_pages_bulk_noprof+0x77c/0x1110 [ 81.290254][ T7351] __page_pool_alloc_pages_slow+0x18f/0x770 [ 81.292359][ T7351] page_pool_alloc_netmem+0xc4/0x160 [ 81.294173][ T7351] page_pool_alloc_pages+0x1a/0x60 [ 81.296112][ T7351] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 81.298313][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 81.299697][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 81.301113][ T7351] __sys_bpf+0xfc6/0x49a0 [ 81.302215][ T7351] __x64_sys_bpf+0x78/0xc0 [ 81.303356][ T7351] do_syscall_64+0xcd/0x250 [ 81.304528][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.306325][ T7351] page last free pid 7120 tgid 7120 stack trace: [ 81.308576][ T7351] free_unref_page+0x5f4/0xdc0 [ 81.310230][ T7351] __put_partials+0x14c/0x170 [ 81.311851][ T7351] qlist_free_all+0x4e/0x120 [ 81.313443][ T7351] kasan_quarantine_reduce+0x192/0x1e0 [ 81.315601][ T7351] __kasan_slab_alloc+0x69/0x90 [ 81.317530][ T7351] kmem_cache_alloc_node_noprof+0x153/0x310 [ 81.319743][ T7351] __alloc_skb+0x2b1/0x380 [ 81.321795][ T7351] netlink_alloc_large_skb+0x69/0x130 [ 81.323693][ T7351] netlink_sendmsg+0x689/0xd70 [ 81.325419][ T7351] ____sys_sendmsg+0xaaf/0xc90 [ 81.327030][ T7351] ___sys_sendmsg+0x135/0x1e0 [ 81.328328][ T7351] __sys_sendmsg+0x117/0x1f0 [ 81.329976][ T7351] do_syscall_64+0xcd/0x250 [ 81.331595][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.333988][ T7351] Modules linked in: [ 81.335507][ T7351] CPU: 2 UID: 0 PID: 7351 Comm: syz.0.314 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 81.340324][ T7351] Tainted: [B]=BAD_PAGE [ 81.342238][ T7351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 81.346539][ T7351] Call Trace: [ 81.347940][ T7351] [ 81.349228][ T7351] dump_stack_lvl+0x16c/0x1f0 [ 81.351083][ T7351] bad_page+0xb3/0x1f0 [ 81.352568][ T7351] ? __pfx_bad_page+0x10/0x10 [ 81.354087][ T7351] ? page_bad_reason+0x9d/0x1e0 [ 81.355893][ T7351] free_unref_page+0x657/0xdc0 [ 81.357550][ T7351] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 81.359760][ T7351] ? __phys_addr+0xc6/0x150 [ 81.361488][ T7351] skb_free_head+0xa0/0x1d0 [ 81.363081][ T7351] skb_release_data+0x560/0x730 [ 81.364737][ T7351] sk_skb_reason_drop+0x129/0x1a0 [ 81.366470][ T7351] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 81.368775][ T7351] ? kernel_text_address+0x8d/0x100 [ 81.370589][ T7351] ? hlock_class+0x4e/0x130 [ 81.372281][ T7351] ? __lock_acquire+0x163e/0x3ce0 [ 81.374084][ T7351] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 81.377255][ T7351] ? hlock_class+0x4e/0x130 [ 81.379360][ T7351] ? __lock_acquire+0xbdd/0x3ce0 [ 81.380888][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 81.382308][ T7351] __netif_receive_skb_list_core+0x357/0x950 [ 81.383949][ T7351] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 81.385689][ T7351] ? trace_lock_acquire+0x14a/0x1d0 [ 81.387483][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 81.389688][ T7351] ? lock_acquire+0x2f/0xb0 [ 81.391269][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 81.393481][ T7351] netif_receive_skb_list_internal+0x753/0xdb0 [ 81.395611][ T7351] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 81.397964][ T7351] ? __pfx_eth_type_trans+0x10/0x10 [ 81.399782][ T7351] ? __build_skb_around+0x278/0x3b0 [ 81.401615][ T7351] netif_receive_skb_list+0x4f/0x4a0 [ 81.403451][ T7351] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 81.405622][ T7351] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 81.407902][ T7351] ? bpf_test_timer_continue+0x150/0x3d0 [ 81.410112][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 81.411961][ T7351] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 81.414225][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 81.416241][ T7351] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 81.418329][ T7351] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 81.420412][ T7351] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 81.422298][ T7351] ? 0xffffffffa0004340 [ 81.424069][ T7351] ? 0xffffffffa0004340 [ 81.425541][ T7351] ? 0xffffffffa0004340 [ 81.426985][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 81.429228][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 81.431319][ T7351] ? lock_acquire+0x2f/0xb0 [ 81.433525][ T7351] ? __fget_files+0x40/0x3f0 [ 81.435159][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 81.437763][ T7351] ? fput+0x30/0x390 [ 81.439157][ T7351] ? __bpf_prog_get+0xa0/0x290 [ 81.441206][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 81.443604][ T7351] __sys_bpf+0xfc6/0x49a0 [ 81.445414][ T7351] ? __pfx_futex_wake+0x10/0x10 [ 81.447411][ T7351] ? __pfx___sys_bpf+0x10/0x10 [ 81.449408][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 81.451452][ T7351] ? do_futex+0x123/0x350 [ 81.453059][ T7351] ? __pfx_do_futex+0x10/0x10 [ 81.454826][ T7351] ? xfd_validate_state+0x5d/0x180 [ 81.456888][ T7351] ? rcu_is_watching+0x12/0xc0 [ 81.458590][ T7351] __x64_sys_bpf+0x78/0xc0 [ 81.460135][ T7351] ? lockdep_hardirqs_on+0x7c/0x110 [ 81.462261][ T7351] do_syscall_64+0xcd/0x250 [ 81.463955][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.466031][ T7351] RIP: 0033:0x7fc02f97e719 [ 81.467608][ T7351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.474898][ T7351] RSP: 002b:00007fc0306bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 81.478254][ T7351] RAX: ffffffffffffffda RBX: 00007fc02fb35f80 RCX: 00007fc02f97e719 [ 81.481112][ T7351] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 81.483983][ T7351] RBP: 00007fc02f9f132e R08: 0000000000000000 R09: 0000000000000000 [ 81.486724][ T7351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.489561][ T7351] R13: 0000000000000000 R14: 00007fc02fb35f80 R15: 00007ffe03613128 [ 81.492466][ T7351] [ 81.493682][ T7351] BUG: Bad page state in process syz.0.314 pfn:31457 [ 81.496467][ T7351] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x31457 [ 81.499657][ T7351] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 81.502111][ T7351] raw: 00fff00000000000 dead000000000040 ffff888040826000 0000000000000000 [ 81.505196][ T7351] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 81.508434][ T7351] page dumped because: page_pool leak [ 81.510432][ T7351] page_owner tracks the page as allocated [ 81.512687][ T7351] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7351, tgid 7350 (syz.0.314), ts 79037030899, free_ts 79012768531 [ 81.517439][ T7351] post_alloc_hook+0x2d1/0x350 [ 81.518894][ T7351] get_page_from_freelist+0x101e/0x3070 [ 81.520515][ T7351] __alloc_pages_noprof+0x223/0x25a0 [ 81.521920][ T7351] alloc_pages_bulk_noprof+0x77c/0x1110 [ 81.523401][ T7351] __page_pool_alloc_pages_slow+0x18f/0x770 [ 81.524910][ T7351] page_pool_alloc_netmem+0xc4/0x160 [ 81.526348][ T7351] page_pool_alloc_pages+0x1a/0x60 [ 81.527701][ T7351] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 81.529295][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 81.530905][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 81.532551][ T7351] __sys_bpf+0xfc6/0x49a0 [ 81.533742][ T7351] __x64_sys_bpf+0x78/0xc0 [ 81.534887][ T7351] do_syscall_64+0xcd/0x250 [ 81.536221][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.538141][ T7351] page last free pid 7120 tgid 7120 stack trace: [ 81.539819][ T7351] free_unref_page+0x5f4/0xdc0 [ 81.541062][ T7351] __put_partials+0x14c/0x170 [ 81.542258][ T7351] qlist_free_all+0x4e/0x120 [ 81.543550][ T7351] kasan_quarantine_reduce+0x192/0x1e0 [ 81.545119][ T7351] __kasan_slab_alloc+0x69/0x90 [ 81.546496][ T7351] kmem_cache_alloc_node_noprof+0x153/0x310 [ 81.548787][ T7351] __alloc_skb+0x2b1/0x380 [ 81.550669][ T7351] netlink_alloc_large_skb+0x69/0x130 [ 81.552682][ T7351] netlink_sendmsg+0x689/0xd70 [ 81.554256][ T7351] ____sys_sendmsg+0xaaf/0xc90 [ 81.555780][ T7351] ___sys_sendmsg+0x135/0x1e0 [ 81.557303][ T7351] __sys_sendmsg+0x117/0x1f0 [ 81.558540][ T7351] do_syscall_64+0xcd/0x250 [ 81.559795][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.561722][ T7351] Modules linked in: [ 81.562756][ T7351] CPU: 2 UID: 0 PID: 7351 Comm: syz.0.314 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 81.565990][ T7351] Tainted: [B]=BAD_PAGE [ 81.567173][ T7351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 81.569981][ T7351] Call Trace: [ 81.570847][ T7351] [ 81.571630][ T7351] dump_stack_lvl+0x16c/0x1f0 [ 81.572998][ T7351] bad_page+0xb3/0x1f0 [ 81.574083][ T7351] ? __pfx_bad_page+0x10/0x10 [ 81.575331][ T7351] ? page_bad_reason+0x9d/0x1e0 [ 81.576577][ T7351] free_unref_page+0x657/0xdc0 [ 81.577841][ T7351] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 81.579402][ T7351] ? __phys_addr+0xc6/0x150 [ 81.580596][ T7351] skb_free_head+0xa0/0x1d0 [ 81.581755][ T7351] skb_release_data+0x560/0x730 [ 81.582989][ T7351] sk_skb_reason_drop+0x129/0x1a0 [ 81.584255][ T7351] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 81.585947][ T7351] ? kernel_text_address+0x8d/0x100 [ 81.587279][ T7351] ? hlock_class+0x4e/0x130 [ 81.588454][ T7351] ? __lock_acquire+0x163e/0x3ce0 [ 81.590155][ T7351] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 81.592397][ T7351] ? hlock_class+0x4e/0x130 [ 81.594238][ T7351] ? __lock_acquire+0xbdd/0x3ce0 [ 81.595702][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 81.597260][ T7351] __netif_receive_skb_list_core+0x357/0x950 [ 81.599181][ T7351] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 81.601010][ T7351] ? trace_lock_acquire+0x14a/0x1d0 [ 81.602555][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 81.604155][ T7351] ? lock_acquire+0x2f/0xb0 [ 81.605319][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 81.606938][ T7351] netif_receive_skb_list_internal+0x753/0xdb0 [ 81.608526][ T7351] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 81.610242][ T7351] ? __pfx_eth_type_trans+0x10/0x10 [ 81.611560][ T7351] ? __build_skb_around+0x278/0x3b0 [ 81.612923][ T7351] netif_receive_skb_list+0x4f/0x4a0 [ 81.614249][ T7351] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 81.615837][ T7351] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 81.617555][ T7351] ? bpf_test_timer_continue+0x150/0x3d0 [ 81.618998][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 81.620482][ T7351] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 81.622328][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 81.624282][ T7351] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 81.626305][ T7351] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 81.628216][ T7351] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 81.629698][ T7351] ? 0xffffffffa0004340 [ 81.630765][ T7351] ? 0xffffffffa0004340 [ 81.631973][ T7351] ? 0xffffffffa0004340 [ 81.633365][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 81.634962][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 81.636499][ T7351] ? lock_acquire+0x2f/0xb0 [ 81.637817][ T7351] ? __fget_files+0x40/0x3f0 [ 81.639074][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 81.640593][ T7351] ? fput+0x30/0x390 [ 81.641661][ T7351] ? __bpf_prog_get+0xa0/0x290 [ 81.643081][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 81.644733][ T7351] __sys_bpf+0xfc6/0x49a0 [ 81.645858][ T7351] ? __pfx_futex_wake+0x10/0x10 [ 81.647106][ T7351] ? __pfx___sys_bpf+0x10/0x10 [ 81.648314][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 81.649632][ T7351] ? do_futex+0x123/0x350 [ 81.650741][ T7351] ? __pfx_do_futex+0x10/0x10 [ 81.652135][ T7351] ? xfd_validate_state+0x5d/0x180 [ 81.653480][ T7351] ? rcu_is_watching+0x12/0xc0 [ 81.654675][ T7351] __x64_sys_bpf+0x78/0xc0 [ 81.655835][ T7351] ? lockdep_hardirqs_on+0x7c/0x110 [ 81.657132][ T7351] do_syscall_64+0xcd/0x250 [ 81.658299][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.660570][ T7351] RIP: 0033:0x7fc02f97e719 [ 81.661708][ T7351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.666543][ T7351] RSP: 002b:00007fc0306bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 81.668627][ T7351] RAX: ffffffffffffffda RBX: 00007fc02fb35f80 RCX: 00007fc02f97e719 [ 81.670690][ T7351] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 81.672689][ T7351] RBP: 00007fc02f9f132e R08: 0000000000000000 R09: 0000000000000000 [ 81.675631][ T7351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.677910][ T7351] R13: 0000000000000000 R14: 00007fc02fb35f80 R15: 00007ffe03613128 [ 81.679980][ T7351] [ 81.680937][ T7351] BUG: Bad page state in process syz.0.314 pfn:31456 [ 81.682838][ T7351] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x31456 [ 81.685070][ T7351] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 81.686896][ T7351] raw: 00fff00000000000 dead000000000040 ffff888040826000 0000000000000000 [ 81.687502][ T30] cfg80211: failed to load regulatory.db [ 81.689351][ T7351] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 81.694556][ T7351] page dumped because: page_pool leak [ 81.696187][ T7351] page_owner tracks the page as allocated [ 81.697765][ T7351] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7351, tgid 7350 (syz.0.314), ts 79037023242, free_ts 79012768531 [ 81.702139][ T7351] post_alloc_hook+0x2d1/0x350 [ 81.703389][ T7351] get_page_from_freelist+0x101e/0x3070 [ 81.704790][ T7351] __alloc_pages_noprof+0x223/0x25a0 [ 81.706109][ T7351] alloc_pages_bulk_noprof+0x77c/0x1110 [ 81.707544][ T7351] __page_pool_alloc_pages_slow+0x18f/0x770 [ 81.709237][ T7351] page_pool_alloc_netmem+0xc4/0x160 [ 81.710647][ T7351] page_pool_alloc_pages+0x1a/0x60 [ 81.712264][ T7351] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 81.713949][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 81.716016][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 81.717484][ T7351] __sys_bpf+0xfc6/0x49a0 [ 81.718915][ T7351] __x64_sys_bpf+0x78/0xc0 [ 81.720149][ T7351] do_syscall_64+0xcd/0x250 [ 81.721373][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.722878][ T7351] page last free pid 7120 tgid 7120 stack trace: [ 81.724715][ T7351] free_unref_page+0x5f4/0xdc0 [ 81.725992][ T7351] __put_partials+0x14c/0x170 [ 81.727281][ T7351] qlist_free_all+0x4e/0x120 [ 81.728499][ T7351] kasan_quarantine_reduce+0x192/0x1e0 [ 81.729964][ T7351] __kasan_slab_alloc+0x69/0x90 [ 81.731479][ T7351] kmem_cache_alloc_node_noprof+0x153/0x310 [ 81.733235][ T7351] __alloc_skb+0x2b1/0x380 [ 81.734465][ T7351] netlink_alloc_large_skb+0x69/0x130 [ 81.735925][ T7351] netlink_sendmsg+0x689/0xd70 [ 81.737251][ T7351] ____sys_sendmsg+0xaaf/0xc90 [ 81.738685][ T7351] ___sys_sendmsg+0x135/0x1e0 [ 81.740304][ T7351] __sys_sendmsg+0x117/0x1f0 [ 81.741640][ T7351] do_syscall_64+0xcd/0x250 [ 81.742855][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.744400][ T7351] Modules linked in: [ 81.745456][ T7351] CPU: 2 UID: 0 PID: 7351 Comm: syz.0.314 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 81.748847][ T7351] Tainted: [B]=BAD_PAGE [ 81.750050][ T7351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 81.753575][ T7351] Call Trace: [ 81.754625][ T7351] [ 81.755462][ T7351] dump_stack_lvl+0x16c/0x1f0 [ 81.756938][ T7351] bad_page+0xb3/0x1f0 [ 81.758185][ T7351] ? __pfx_bad_page+0x10/0x10 [ 81.759597][ T7351] ? page_bad_reason+0x9d/0x1e0 [ 81.760950][ T7351] free_unref_page+0x657/0xdc0 [ 81.762242][ T7351] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 81.763844][ T7351] ? __phys_addr+0xc6/0x150 [ 81.765071][ T7351] skb_free_head+0xa0/0x1d0 [ 81.766274][ T7351] skb_release_data+0x560/0x730 [ 81.767561][ T7351] sk_skb_reason_drop+0x129/0x1a0 [ 81.769015][ T7351] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 81.770823][ T7351] ? kernel_text_address+0x8d/0x100 [ 81.772222][ T7351] ? hlock_class+0x4e/0x130 [ 81.773427][ T7351] ? __lock_acquire+0x163e/0x3ce0 [ 81.774982][ T7351] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 81.777211][ T7351] ? hlock_class+0x4e/0x130 [ 81.778428][ T7351] ? __lock_acquire+0xbdd/0x3ce0 [ 81.779830][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 81.781564][ T7351] __netif_receive_skb_list_core+0x357/0x950 [ 81.783477][ T7351] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 81.785481][ T7351] ? trace_lock_acquire+0x14a/0x1d0 [ 81.786880][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 81.788569][ T7351] ? lock_acquire+0x2f/0xb0 [ 81.789802][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 81.791467][ T7351] netif_receive_skb_list_internal+0x753/0xdb0 [ 81.793246][ T7351] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 81.794991][ T7351] ? __pfx_eth_type_trans+0x10/0x10 [ 81.796498][ T7351] ? __build_skb_around+0x278/0x3b0 [ 81.797892][ T7351] netif_receive_skb_list+0x4f/0x4a0 [ 81.799312][ T7351] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 81.801094][ T7351] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 81.802826][ T7351] ? bpf_test_timer_continue+0x150/0x3d0 [ 81.804293][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 81.805887][ T7351] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 81.807417][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 81.809000][ T7351] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 81.810797][ T7351] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 81.812653][ T7351] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 81.814491][ T7351] ? 0xffffffffa0004340 [ 81.815901][ T7351] ? 0xffffffffa0004340 [ 81.817093][ T7351] ? 0xffffffffa0004340 [ 81.818251][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 81.819826][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 81.821630][ T7351] ? lock_acquire+0x2f/0xb0 [ 81.822946][ T7351] ? __fget_files+0x40/0x3f0 [ 81.824188][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 81.825762][ T7351] ? fput+0x30/0x390 [ 81.826800][ T7351] ? __bpf_prog_get+0xa0/0x290 [ 81.828071][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 81.829655][ T7351] __sys_bpf+0xfc6/0x49a0 [ 81.830819][ T7351] ? __pfx_futex_wake+0x10/0x10 [ 81.832986][ T7351] ? __pfx___sys_bpf+0x10/0x10 [ 81.834485][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 81.836150][ T7351] ? do_futex+0x123/0x350 [ 81.837482][ T7351] ? __pfx_do_futex+0x10/0x10 [ 81.838915][ T7351] ? xfd_validate_state+0x5d/0x180 [ 81.840625][ T7351] ? rcu_is_watching+0x12/0xc0 [ 81.842505][ T7351] __x64_sys_bpf+0x78/0xc0 [ 81.844238][ T7351] ? lockdep_hardirqs_on+0x7c/0x110 [ 81.846190][ T7351] do_syscall_64+0xcd/0x250 [ 81.847632][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.849219][ T7351] RIP: 0033:0x7fc02f97e719 [ 81.850408][ T7351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.855885][ T7351] RSP: 002b:00007fc0306bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 81.858109][ T7351] RAX: ffffffffffffffda RBX: 00007fc02fb35f80 RCX: 00007fc02f97e719 [ 81.860488][ T7351] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 81.862801][ T7351] RBP: 00007fc02f9f132e R08: 0000000000000000 R09: 0000000000000000 [ 81.865351][ T7351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.867397][ T7351] R13: 0000000000000000 R14: 00007fc02fb35f80 R15: 00007ffe03613128 [ 81.869687][ T7351] [ 81.870669][ T7351] BUG: Bad page state in process syz.0.314 pfn:31455 [ 81.873126][ T7351] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x31455 [ 81.875758][ T7351] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 81.878001][ T7351] raw: 00fff00000000000 dead000000000040 ffff888040826000 0000000000000000 [ 81.880869][ T7351] raw: 0000000000000004 0000000000000001 00000000ffffffff 0000000000000000 [ 81.883869][ T7351] page dumped because: page_pool leak [ 81.885670][ T7351] page_owner tracks the page as allocated [ 81.887329][ T7351] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7351, tgid 7350 (syz.0.314), ts 79037016532, free_ts 79012768531 [ 81.891860][ T7351] post_alloc_hook+0x2d1/0x350 [ 81.893502][ T7351] get_page_from_freelist+0x101e/0x3070 [ 81.895434][ T7351] __alloc_pages_noprof+0x223/0x25a0 [ 81.896922][ T7351] alloc_pages_bulk_noprof+0x77c/0x1110 [ 81.898429][ T7351] __page_pool_alloc_pages_slow+0x18f/0x770 [ 81.900055][ T7351] page_pool_alloc_netmem+0xc4/0x160 [ 81.901647][ T7351] page_pool_alloc_pages+0x1a/0x60 [ 81.903109][ T7351] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 81.904808][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 81.906243][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 81.907765][ T7351] __sys_bpf+0xfc6/0x49a0 [ 81.908967][ T7351] __x64_sys_bpf+0x78/0xc0 [ 81.910253][ T7351] do_syscall_64+0xcd/0x250 [ 81.911815][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.913970][ T7351] page last free pid 7120 tgid 7120 stack trace: [ 81.915956][ T7351] free_unref_page+0x5f4/0xdc0 [ 81.917743][ T7351] __put_partials+0x14c/0x170 [ 81.919451][ T7351] qlist_free_all+0x4e/0x120 [ 81.920803][ T7351] kasan_quarantine_reduce+0x192/0x1e0 [ 81.922280][ T7351] __kasan_slab_alloc+0x69/0x90 [ 81.923663][ T7351] kmem_cache_alloc_node_noprof+0x153/0x310 [ 81.925271][ T7351] __alloc_skb+0x2b1/0x380 [ 81.926461][ T7351] netlink_alloc_large_skb+0x69/0x130 [ 81.927947][ T7351] netlink_sendmsg+0x689/0xd70 [ 81.929253][ T7351] ____sys_sendmsg+0xaaf/0xc90 [ 81.930528][ T7351] ___sys_sendmsg+0x135/0x1e0 [ 81.931946][ T7351] __sys_sendmsg+0x117/0x1f0 [ 81.933378][ T7351] do_syscall_64+0xcd/0x250 [ 81.934664][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.936381][ T7351] Modules linked in: [ 81.937563][ T7351] CPU: 2 UID: 0 PID: 7351 Comm: syz.0.314 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 81.940837][ T7351] Tainted: [B]=BAD_PAGE [ 81.941982][ T7351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 81.944833][ T7351] Call Trace: [ 81.945713][ T7351] [ 81.946499][ T7351] dump_stack_lvl+0x16c/0x1f0 [ 81.947786][ T7351] bad_page+0xb3/0x1f0 [ 81.949046][ T7351] ? __pfx_bad_page+0x10/0x10 [ 81.950430][ T7351] ? page_bad_reason+0x9d/0x1e0 [ 81.951984][ T7351] free_unref_page+0x657/0xdc0 [ 81.953348][ T7351] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 81.956317][ T7351] ? __phys_addr+0xc6/0x150 [ 81.957954][ T7351] skb_free_head+0xa0/0x1d0 [ 81.959384][ T7351] skb_release_data+0x560/0x730 [ 81.960967][ T7351] sk_skb_reason_drop+0x129/0x1a0 [ 81.962504][ T7351] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 81.964378][ T7351] ? kernel_text_address+0x8d/0x100 [ 81.965867][ T7351] ? hlock_class+0x4e/0x130 [ 81.967148][ T7351] ? __lock_acquire+0x163e/0x3ce0 [ 81.968515][ T7351] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 81.970420][ T7351] ? hlock_class+0x4e/0x130 [ 81.971642][ T7351] ? __lock_acquire+0xbdd/0x3ce0 [ 81.973261][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 81.975016][ T7351] __netif_receive_skb_list_core+0x357/0x950 [ 81.976672][ T7351] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 81.978614][ T7351] ? trace_lock_acquire+0x14a/0x1d0 [ 81.980067][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 81.981802][ T7351] ? lock_acquire+0x2f/0xb0 [ 81.983054][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 81.984883][ T7351] netif_receive_skb_list_internal+0x753/0xdb0 [ 81.986790][ T7351] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 81.988857][ T7351] ? __pfx_eth_type_trans+0x10/0x10 [ 81.990577][ T7351] ? __build_skb_around+0x278/0x3b0 [ 81.992245][ T7351] netif_receive_skb_list+0x4f/0x4a0 [ 81.993932][ T7351] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 81.996016][ T7351] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 81.998020][ T7351] ? bpf_test_timer_continue+0x150/0x3d0 [ 81.999704][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 82.001395][ T7351] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 82.003021][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 82.005154][ T7351] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 82.007329][ T7351] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 82.009550][ T7351] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 82.011775][ T7351] ? 0xffffffffa0004340 [ 82.013002][ T7351] ? 0xffffffffa0004340 [ 82.014289][ T7351] ? 0xffffffffa0004340 [ 82.015482][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 82.017173][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 82.018747][ T7351] ? lock_acquire+0x2f/0xb0 [ 82.019929][ T7351] ? __fget_files+0x40/0x3f0 [ 82.021168][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 82.023002][ T7351] ? fput+0x30/0x390 [ 82.024264][ T7351] ? __bpf_prog_get+0xa0/0x290 [ 82.026030][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 82.028624][ T7351] __sys_bpf+0xfc6/0x49a0 [ 82.030215][ T7351] ? __pfx_futex_wake+0x10/0x10 [ 82.031730][ T7351] ? __pfx___sys_bpf+0x10/0x10 [ 82.033062][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 82.034618][ T7351] ? do_futex+0x123/0x350 [ 82.035980][ T7351] ? __pfx_do_futex+0x10/0x10 [ 82.037305][ T7351] ? xfd_validate_state+0x5d/0x180 [ 82.038784][ T7351] ? rcu_is_watching+0x12/0xc0 [ 82.040185][ T7351] __x64_sys_bpf+0x78/0xc0 [ 82.041418][ T7351] ? lockdep_hardirqs_on+0x7c/0x110 [ 82.042821][ T7351] do_syscall_64+0xcd/0x250 [ 82.044082][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.045689][ T7351] RIP: 0033:0x7fc02f97e719 [ 82.046977][ T7351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.052204][ T7351] RSP: 002b:00007fc0306bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 82.054543][ T7351] RAX: ffffffffffffffda RBX: 00007fc02fb35f80 RCX: 00007fc02f97e719 [ 82.057001][ T7351] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 82.059185][ T7351] RBP: 00007fc02f9f132e R08: 0000000000000000 R09: 0000000000000000 [ 82.061308][ T7351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.063515][ T7351] R13: 0000000000000000 R14: 00007fc02fb35f80 R15: 00007ffe03613128 [ 82.065830][ T7351] [ 82.066892][ T7351] BUG: Bad page state in process syz.0.314 pfn:31454 [ 82.068884][ T7351] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888031456100 pfn:0x31454 [ 82.071645][ T7351] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 82.073436][ T7351] raw: 00fff00000000000 dead000000000040 ffff888040826000 0000000000000000 [ 82.075585][ T7351] raw: ffff888031456100 0000000000000001 00000000ffffffff 0000000000000000 [ 82.078313][ T7351] page dumped because: page_pool leak [ 82.079843][ T7351] page_owner tracks the page as allocated [ 82.081476][ T7351] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7351, tgid 7350 (syz.0.314), ts 79037009480, free_ts 79012768531 [ 82.085911][ T7351] post_alloc_hook+0x2d1/0x350 [ 82.087259][ T7351] get_page_from_freelist+0x101e/0x3070 [ 82.088816][ T7351] __alloc_pages_noprof+0x223/0x25a0 [ 82.090264][ T7351] alloc_pages_bulk_noprof+0x77c/0x1110 [ 82.092067][ T7351] __page_pool_alloc_pages_slow+0x18f/0x770 [ 82.093989][ T7351] page_pool_alloc_netmem+0xc4/0x160 [ 82.095565][ T7351] page_pool_alloc_pages+0x1a/0x60 [ 82.097202][ T7351] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 82.098959][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 82.100359][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 82.101736][ T7351] __sys_bpf+0xfc6/0x49a0 [ 82.102947][ T7351] __x64_sys_bpf+0x78/0xc0 [ 82.104106][ T7351] do_syscall_64+0xcd/0x250 [ 82.105306][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.106899][ T7351] page last free pid 7120 tgid 7120 stack trace: [ 82.108673][ T7351] free_unref_page+0x5f4/0xdc0 [ 82.109906][ T7351] __put_partials+0x14c/0x170 [ 82.111092][ T7351] qlist_free_all+0x4e/0x120 [ 82.112625][ T7351] kasan_quarantine_reduce+0x192/0x1e0 [ 82.114188][ T7351] __kasan_slab_alloc+0x69/0x90 [ 82.115711][ T7351] kmem_cache_alloc_node_noprof+0x153/0x310 [ 82.117489][ T7351] __alloc_skb+0x2b1/0x380 [ 82.118932][ T7351] netlink_alloc_large_skb+0x69/0x130 [ 82.120385][ T7351] netlink_sendmsg+0x689/0xd70 [ 82.121618][ T7351] ____sys_sendmsg+0xaaf/0xc90 [ 82.123159][ T7351] ___sys_sendmsg+0x135/0x1e0 [ 82.124409][ T7351] __sys_sendmsg+0x117/0x1f0 [ 82.125640][ T7351] do_syscall_64+0xcd/0x250 [ 82.126888][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.128486][ T7351] Modules linked in: [ 82.129432][ T7351] CPU: 2 UID: 0 PID: 7351 Comm: syz.0.314 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 82.133320][ T7351] Tainted: [B]=BAD_PAGE [ 82.134423][ T7351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 82.138209][ T7351] Call Trace: [ 82.139249][ T7351] [ 82.140259][ T7351] dump_stack_lvl+0x16c/0x1f0 [ 82.141688][ T7351] bad_page+0xb3/0x1f0 [ 82.142789][ T7351] ? __pfx_bad_page+0x10/0x10 [ 82.144071][ T7351] ? page_bad_reason+0x9d/0x1e0 [ 82.145397][ T7351] free_unref_page+0x657/0xdc0 [ 82.146679][ T7351] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 82.148286][ T7351] ? __phys_addr+0xc6/0x150 [ 82.149530][ T7351] skb_free_head+0xa0/0x1d0 [ 82.150756][ T7351] skb_release_data+0x560/0x730 [ 82.152319][ T7351] sk_skb_reason_drop+0x129/0x1a0 [ 82.153926][ T7351] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 82.155922][ T7351] ? kernel_text_address+0x8d/0x100 [ 82.157408][ T7351] ? hlock_class+0x4e/0x130 [ 82.158667][ T7351] ? __lock_acquire+0x163e/0x3ce0 [ 82.160054][ T7351] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 82.162031][ T7351] ? hlock_class+0x4e/0x130 [ 82.163482][ T7351] ? __lock_acquire+0xbdd/0x3ce0 [ 82.165179][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 82.166617][ T7351] __netif_receive_skb_list_core+0x357/0x950 [ 82.168246][ T7351] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 82.169986][ T7351] ? trace_lock_acquire+0x14a/0x1d0 [ 82.171437][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 82.173363][ T7351] ? lock_acquire+0x2f/0xb0 [ 82.174576][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 82.176332][ T7351] netif_receive_skb_list_internal+0x753/0xdb0 [ 82.178024][ T7351] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 82.179914][ T7351] ? __pfx_eth_type_trans+0x10/0x10 [ 82.181361][ T7351] ? __build_skb_around+0x278/0x3b0 [ 82.182802][ T7351] netif_receive_skb_list+0x4f/0x4a0 [ 82.184244][ T7351] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 82.185953][ T7351] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 82.187981][ T7351] ? bpf_test_timer_continue+0x150/0x3d0 [ 82.189564][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 82.191181][ T7351] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 82.192777][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 82.194335][ T7351] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 82.195860][ T7351] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 82.197741][ T7351] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 82.199483][ T7351] ? 0xffffffffa0004340 [ 82.200646][ T7351] ? 0xffffffffa0004340 [ 82.201960][ T7351] ? 0xffffffffa0004340 [ 82.203098][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 82.204665][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 82.206172][ T7351] ? lock_acquire+0x2f/0xb0 [ 82.207513][ T7351] ? __fget_files+0x40/0x3f0 [ 82.208869][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 82.210553][ T7351] ? fput+0x30/0x390 [ 82.211927][ T7351] ? __bpf_prog_get+0xa0/0x290 [ 82.213303][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 82.215070][ T7351] __sys_bpf+0xfc6/0x49a0 [ 82.216225][ T7351] ? __pfx_futex_wake+0x10/0x10 [ 82.217527][ T7351] ? __pfx___sys_bpf+0x10/0x10 [ 82.218808][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 82.220172][ T7351] ? do_futex+0x123/0x350 [ 82.221337][ T7351] ? __pfx_do_futex+0x10/0x10 [ 82.222559][ T7351] ? xfd_validate_state+0x5d/0x180 [ 82.223862][ T7351] ? rcu_is_watching+0x12/0xc0 [ 82.225143][ T7351] __x64_sys_bpf+0x78/0xc0 [ 82.226321][ T7351] ? lockdep_hardirqs_on+0x7c/0x110 [ 82.227798][ T7351] do_syscall_64+0xcd/0x250 [ 82.229079][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.230661][ T7351] RIP: 0033:0x7fc02f97e719 [ 82.231854][ T7351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.236900][ T7351] RSP: 002b:00007fc0306bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 82.239325][ T7351] RAX: ffffffffffffffda RBX: 00007fc02fb35f80 RCX: 00007fc02f97e719 [ 82.241594][ T7351] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 82.243681][ T7351] RBP: 00007fc02f9f132e R08: 0000000000000000 R09: 0000000000000000 [ 82.245905][ T7351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.248172][ T7351] R13: 0000000000000000 R14: 00007fc02fb35f80 R15: 00007ffe03613128 [ 82.250374][ T7351] [ 82.251469][ T7351] BUG: Bad page state in process syz.0.314 pfn:31453 [ 82.253328][ T7351] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x31453 [ 82.256193][ T7351] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 82.258419][ T7351] raw: 00fff00000000000 dead000000000040 ffff888040826000 0000000000000000 [ 82.260688][ T7351] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 82.263200][ T7351] page dumped because: page_pool leak [ 82.264616][ T7351] page_owner tracks the page as allocated [ 82.266132][ T7351] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7351, tgid 7350 (syz.0.314), ts 79037002920, free_ts 79012768531 [ 82.270677][ T7351] post_alloc_hook+0x2d1/0x350 [ 82.271953][ T7351] get_page_from_freelist+0x101e/0x3070 [ 82.273432][ T7351] __alloc_pages_noprof+0x223/0x25a0 [ 82.274933][ T7351] alloc_pages_bulk_noprof+0x77c/0x1110 [ 82.276819][ T7351] __page_pool_alloc_pages_slow+0x18f/0x770 [ 82.278865][ T7351] page_pool_alloc_netmem+0xc4/0x160 [ 82.280379][ T7351] page_pool_alloc_pages+0x1a/0x60 [ 82.281946][ T7351] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 82.283894][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 82.285418][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 82.286874][ T7351] __sys_bpf+0xfc6/0x49a0 [ 82.288109][ T7351] __x64_sys_bpf+0x78/0xc0 [ 82.289310][ T7351] do_syscall_64+0xcd/0x250 [ 82.290554][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.292189][ T7351] page last free pid 7120 tgid 7120 stack trace: [ 82.294130][ T7351] free_unref_page+0x5f4/0xdc0 [ 82.295475][ T7351] __put_partials+0x14c/0x170 [ 82.296731][ T7351] qlist_free_all+0x4e/0x120 [ 82.298194][ T7351] kasan_quarantine_reduce+0x192/0x1e0 [ 82.299659][ T7351] __kasan_slab_alloc+0x69/0x90 [ 82.300957][ T7351] kmem_cache_alloc_node_noprof+0x153/0x310 [ 82.302599][ T7351] __alloc_skb+0x2b1/0x380 [ 82.303781][ T7351] netlink_alloc_large_skb+0x69/0x130 [ 82.305215][ T7351] netlink_sendmsg+0x689/0xd70 [ 82.306493][ T7351] ____sys_sendmsg+0xaaf/0xc90 [ 82.307855][ T7351] ___sys_sendmsg+0x135/0x1e0 [ 82.309134][ T7351] __sys_sendmsg+0x117/0x1f0 [ 82.310423][ T7351] do_syscall_64+0xcd/0x250 [ 82.311814][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.313487][ T7351] Modules linked in: [ 82.314611][ T7351] CPU: 2 UID: 0 PID: 7351 Comm: syz.0.314 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 82.318403][ T7351] Tainted: [B]=BAD_PAGE [ 82.319594][ T7351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 82.322782][ T7351] Call Trace: [ 82.323921][ T7351] [ 82.324812][ T7351] dump_stack_lvl+0x16c/0x1f0 [ 82.326106][ T7351] bad_page+0xb3/0x1f0 [ 82.327209][ T7351] ? __pfx_bad_page+0x10/0x10 [ 82.328508][ T7351] ? page_bad_reason+0x9d/0x1e0 [ 82.329980][ T7351] free_unref_page+0x657/0xdc0 [ 82.331254][ T7351] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 82.333199][ T7351] ? __phys_addr+0xc6/0x150 [ 82.335213][ T7351] skb_free_head+0xa0/0x1d0 [ 82.336508][ T7351] skb_release_data+0x560/0x730 [ 82.337907][ T7351] sk_skb_reason_drop+0x129/0x1a0 [ 82.339230][ T7351] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 82.341144][ T7351] ? kernel_text_address+0x8d/0x100 [ 82.342613][ T7351] ? hlock_class+0x4e/0x130 [ 82.343907][ T7351] ? __lock_acquire+0x163e/0x3ce0 [ 82.345436][ T7351] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 82.347647][ T7351] ? hlock_class+0x4e/0x130 [ 82.349065][ T7351] ? __lock_acquire+0xbdd/0x3ce0 [ 82.350484][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 82.352071][ T7351] __netif_receive_skb_list_core+0x357/0x950 [ 82.354156][ T7351] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 82.356183][ T7351] ? trace_lock_acquire+0x14a/0x1d0 [ 82.357765][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 82.359529][ T7351] ? lock_acquire+0x2f/0xb0 [ 82.361109][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 82.363047][ T7351] netif_receive_skb_list_internal+0x753/0xdb0 [ 82.364675][ T7351] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 82.366441][ T7351] ? __pfx_eth_type_trans+0x10/0x10 [ 82.367826][ T7351] ? __build_skb_around+0x278/0x3b0 [ 82.369175][ T7351] netif_receive_skb_list+0x4f/0x4a0 [ 82.370575][ T7351] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 82.372968][ T7351] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 82.375149][ T7351] ? bpf_test_timer_continue+0x150/0x3d0 [ 82.376961][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 82.378528][ T7351] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 82.380216][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 82.382037][ T7351] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 82.383922][ T7351] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 82.385520][ T7351] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 82.386928][ T7351] ? 0xffffffffa0004340 [ 82.388013][ T7351] ? 0xffffffffa0004340 [ 82.389130][ T7351] ? 0xffffffffa0004340 [ 82.390220][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 82.391860][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 82.393250][ T7351] ? lock_acquire+0x2f/0xb0 [ 82.394679][ T7351] ? __fget_files+0x40/0x3f0 [ 82.395972][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 82.397564][ T7351] ? fput+0x30/0x390 [ 82.399056][ T7351] ? __bpf_prog_get+0xa0/0x290 [ 82.400373][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 82.402078][ T7351] __sys_bpf+0xfc6/0x49a0 [ 82.403448][ T7351] ? __pfx_futex_wake+0x10/0x10 [ 82.404821][ T7351] ? __pfx___sys_bpf+0x10/0x10 [ 82.406132][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 82.407657][ T7351] ? do_futex+0x123/0x350 [ 82.408822][ T7351] ? __pfx_do_futex+0x10/0x10 [ 82.410084][ T7351] ? xfd_validate_state+0x5d/0x180 [ 82.411435][ T7351] ? rcu_is_watching+0x12/0xc0 [ 82.412713][ T7351] __x64_sys_bpf+0x78/0xc0 [ 82.413924][ T7351] ? lockdep_hardirqs_on+0x7c/0x110 [ 82.415322][ T7351] do_syscall_64+0xcd/0x250 [ 82.416547][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.418111][ T7351] RIP: 0033:0x7fc02f97e719 [ 82.419289][ T7351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.424444][ T7351] RSP: 002b:00007fc0306bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 82.426675][ T7351] RAX: ffffffffffffffda RBX: 00007fc02fb35f80 RCX: 00007fc02f97e719 [ 82.428853][ T7351] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 82.430941][ T7351] RBP: 00007fc02f9f132e R08: 0000000000000000 R09: 0000000000000000 [ 82.433166][ T7351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.435668][ T7351] R13: 0000000000000000 R14: 00007fc02fb35f80 R15: 00007ffe03613128 [ 82.437890][ T7351] [ 82.439091][ T7351] BUG: Bad page state in process syz.0.314 pfn:31452 [ 82.441125][ T7351] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x31452 [ 82.443443][ T7351] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 82.445298][ T7351] raw: 00fff00000000000 dead000000000040 ffff888040826000 0000000000000000 [ 82.447604][ T7351] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 82.449971][ T7351] page dumped because: page_pool leak [ 82.451468][ T7351] page_owner tracks the page as allocated [ 82.453496][ T7351] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7351, tgid 7350 (syz.0.314), ts 79036996998, free_ts 79012768531 [ 82.458230][ T7351] post_alloc_hook+0x2d1/0x350 [ 82.459622][ T7351] get_page_from_freelist+0x101e/0x3070 [ 82.461551][ T7351] __alloc_pages_noprof+0x223/0x25a0 [ 82.463065][ T7351] alloc_pages_bulk_noprof+0x77c/0x1110 [ 82.464630][ T7351] __page_pool_alloc_pages_slow+0x18f/0x770 [ 82.466294][ T7351] page_pool_alloc_netmem+0xc4/0x160 [ 82.467783][ T7351] page_pool_alloc_pages+0x1a/0x60 [ 82.469163][ T7351] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 82.470798][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 82.472421][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 82.474087][ T7351] __sys_bpf+0xfc6/0x49a0 [ 82.475514][ T7351] __x64_sys_bpf+0x78/0xc0 [ 82.477208][ T7351] do_syscall_64+0xcd/0x250 [ 82.478699][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.480392][ T7351] page last free pid 7120 tgid 7120 stack trace: [ 82.482067][ T7351] free_unref_page+0x5f4/0xdc0 [ 82.483474][ T7351] __put_partials+0x14c/0x170 [ 82.484830][ T7351] qlist_free_all+0x4e/0x120 [ 82.486286][ T7351] kasan_quarantine_reduce+0x192/0x1e0 [ 82.488077][ T7351] __kasan_slab_alloc+0x69/0x90 [ 82.489615][ T7351] kmem_cache_alloc_node_noprof+0x153/0x310 [ 82.491430][ T7351] __alloc_skb+0x2b1/0x380 [ 82.492847][ T7351] netlink_alloc_large_skb+0x69/0x130 [ 82.494500][ T7351] netlink_sendmsg+0x689/0xd70 [ 82.496157][ T7351] ____sys_sendmsg+0xaaf/0xc90 [ 82.497529][ T7351] ___sys_sendmsg+0x135/0x1e0 [ 82.498775][ T7351] __sys_sendmsg+0x117/0x1f0 [ 82.500006][ T7351] do_syscall_64+0xcd/0x250 [ 82.501234][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.502795][ T7351] Modules linked in: [ 82.503832][ T7351] CPU: 2 UID: 0 PID: 7351 Comm: syz.0.314 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 82.507083][ T7351] Tainted: [B]=BAD_PAGE [ 82.508260][ T7351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 82.511048][ T7351] Call Trace: [ 82.511923][ T7351] [ 82.512715][ T7351] dump_stack_lvl+0x16c/0x1f0 [ 82.513981][ T7351] bad_page+0xb3/0x1f0 [ 82.515261][ T7351] ? __pfx_bad_page+0x10/0x10 [ 82.516771][ T7351] ? page_bad_reason+0x9d/0x1e0 [ 82.518177][ T7351] free_unref_page+0x657/0xdc0 [ 82.519589][ T7351] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 82.521234][ T7351] ? __phys_addr+0xc6/0x150 [ 82.522432][ T7351] skb_free_head+0xa0/0x1d0 [ 82.523639][ T7351] skb_release_data+0x560/0x730 [ 82.525072][ T7351] sk_skb_reason_drop+0x129/0x1a0 [ 82.526397][ T7351] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 82.528167][ T7351] ? kernel_text_address+0x8d/0x100 [ 82.529632][ T7351] ? hlock_class+0x4e/0x130 [ 82.530923][ T7351] ? __lock_acquire+0x163e/0x3ce0 [ 82.532368][ T7351] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 82.534421][ T7351] ? hlock_class+0x4e/0x130 [ 82.535650][ T7351] ? __lock_acquire+0xbdd/0x3ce0 [ 82.537190][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 82.538557][ T7351] __netif_receive_skb_list_core+0x357/0x950 [ 82.540131][ T7351] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 82.541828][ T7351] ? trace_lock_acquire+0x14a/0x1d0 [ 82.543189][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 82.544949][ T7351] ? lock_acquire+0x2f/0xb0 [ 82.546166][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 82.547894][ T7351] netif_receive_skb_list_internal+0x753/0xdb0 [ 82.549545][ T7351] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 82.551511][ T7351] ? __pfx_eth_type_trans+0x10/0x10 [ 82.553230][ T7351] ? __build_skb_around+0x278/0x3b0 [ 82.555249][ T7351] netif_receive_skb_list+0x4f/0x4a0 [ 82.556955][ T7351] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 82.558871][ T7351] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 82.560788][ T7351] ? bpf_test_timer_continue+0x150/0x3d0 [ 82.562471][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 82.563936][ T7351] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 82.565486][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 82.566964][ T7351] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 82.568446][ T7351] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 82.569963][ T7351] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 82.571487][ T7351] ? 0xffffffffa0004340 [ 82.572599][ T7351] ? 0xffffffffa0004340 [ 82.573975][ T7351] ? 0xffffffffa0004340 [ 82.575079][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 82.577031][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 82.578733][ T7351] ? lock_acquire+0x2f/0xb0 [ 82.580031][ T7351] ? __fget_files+0x40/0x3f0 [ 82.581676][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 82.583332][ T7351] ? fput+0x30/0x390 [ 82.584382][ T7351] ? __bpf_prog_get+0xa0/0x290 [ 82.585683][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 82.587241][ T7351] __sys_bpf+0xfc6/0x49a0 [ 82.588393][ T7351] ? __pfx_futex_wake+0x10/0x10 [ 82.589717][ T7351] ? __pfx___sys_bpf+0x10/0x10 [ 82.590991][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 82.592373][ T7351] ? do_futex+0x123/0x350 [ 82.593607][ T7351] ? __pfx_do_futex+0x10/0x10 [ 82.594856][ T7351] ? xfd_validate_state+0x5d/0x180 [ 82.596349][ T7351] ? rcu_is_watching+0x12/0xc0 [ 82.597706][ T7351] __x64_sys_bpf+0x78/0xc0 [ 82.599067][ T7351] ? lockdep_hardirqs_on+0x7c/0x110 [ 82.600462][ T7351] do_syscall_64+0xcd/0x250 [ 82.601674][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.603214][ T7351] RIP: 0033:0x7fc02f97e719 [ 82.604388][ T7351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.609376][ T7351] RSP: 002b:00007fc0306bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 82.611535][ T7351] RAX: ffffffffffffffda RBX: 00007fc02fb35f80 RCX: 00007fc02f97e719 [ 82.613655][ T7351] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 82.616243][ T7351] RBP: 00007fc02f9f132e R08: 0000000000000000 R09: 0000000000000000 [ 82.618655][ T7351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.621298][ T7351] R13: 0000000000000000 R14: 00007fc02fb35f80 R15: 00007ffe03613128 [ 82.623531][ T7351] [ 82.624462][ T7351] BUG: Bad page state in process syz.0.314 pfn:31451 [ 82.626204][ T7351] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x8 pfn:0x31451 [ 82.628513][ T7351] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 82.630672][ T7351] raw: 00fff00000000000 dead000000000040 ffff888040826000 0000000000000000 [ 82.633134][ T7351] raw: 0000000000000008 0000000000000001 00000000ffffffff 0000000000000000 [ 82.635893][ T7351] page dumped because: page_pool leak [ 82.637461][ T7351] page_owner tracks the page as allocated [ 82.639159][ T7351] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7351, tgid 7350 (syz.0.314), ts 79036990237, free_ts 79012768531 [ 82.643901][ T7351] post_alloc_hook+0x2d1/0x350 [ 82.645204][ T7351] get_page_from_freelist+0x101e/0x3070 [ 82.646686][ T7351] __alloc_pages_noprof+0x223/0x25a0 [ 82.648169][ T7351] alloc_pages_bulk_noprof+0x77c/0x1110 [ 82.649673][ T7351] __page_pool_alloc_pages_slow+0x18f/0x770 [ 82.651228][ T7351] page_pool_alloc_netmem+0xc4/0x160 [ 82.652621][ T7351] page_pool_alloc_pages+0x1a/0x60 [ 82.654380][ T7351] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 82.656257][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 82.658158][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 82.660173][ T7351] __sys_bpf+0xfc6/0x49a0 [ 82.661719][ T7351] __x64_sys_bpf+0x78/0xc0 [ 82.663276][ T7351] do_syscall_64+0xcd/0x250 [ 82.664817][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.666537][ T7351] page last free pid 7120 tgid 7120 stack trace: [ 82.668419][ T7351] free_unref_page+0x5f4/0xdc0 [ 82.669742][ T7351] __put_partials+0x14c/0x170 [ 82.671006][ T7351] qlist_free_all+0x4e/0x120 [ 82.672481][ T7351] kasan_quarantine_reduce+0x192/0x1e0 [ 82.674169][ T7351] __kasan_slab_alloc+0x69/0x90 [ 82.675826][ T7351] kmem_cache_alloc_node_noprof+0x153/0x310 [ 82.677619][ T7351] __alloc_skb+0x2b1/0x380 [ 82.678797][ T7351] netlink_alloc_large_skb+0x69/0x130 [ 82.680212][ T7351] netlink_sendmsg+0x689/0xd70 [ 82.681497][ T7351] ____sys_sendmsg+0xaaf/0xc90 [ 82.682749][ T7351] ___sys_sendmsg+0x135/0x1e0 [ 82.683990][ T7351] __sys_sendmsg+0x117/0x1f0 [ 82.685220][ T7351] do_syscall_64+0xcd/0x250 [ 82.686432][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.688073][ T7351] Modules linked in: [ 82.689155][ T7351] CPU: 2 UID: 0 PID: 7351 Comm: syz.0.314 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 82.692512][ T7351] Tainted: [B]=BAD_PAGE [ 82.693818][ T7351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 82.697099][ T7351] Call Trace: [ 82.698013][ T7351] [ 82.698778][ T7351] dump_stack_lvl+0x16c/0x1f0 [ 82.700027][ T7351] bad_page+0xb3/0x1f0 [ 82.701197][ T7351] ? __pfx_bad_page+0x10/0x10 [ 82.702466][ T7351] ? page_bad_reason+0x9d/0x1e0 [ 82.703746][ T7351] free_unref_page+0x657/0xdc0 [ 82.705007][ T7351] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 82.706565][ T7351] ? __phys_addr+0xc6/0x150 [ 82.707769][ T7351] skb_free_head+0xa0/0x1d0 [ 82.709044][ T7351] skb_release_data+0x560/0x730 [ 82.710374][ T7351] sk_skb_reason_drop+0x129/0x1a0 [ 82.711730][ T7351] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 82.713614][ T7351] ? kernel_text_address+0x8d/0x100 [ 82.715075][ T7351] ? hlock_class+0x4e/0x130 [ 82.716336][ T7351] ? __lock_acquire+0x163e/0x3ce0 [ 82.717675][ T7351] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 82.719533][ T7351] ? hlock_class+0x4e/0x130 [ 82.720706][ T7351] ? __lock_acquire+0xbdd/0x3ce0 [ 82.722259][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 82.723650][ T7351] __netif_receive_skb_list_core+0x357/0x950 [ 82.725324][ T7351] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 82.727186][ T7351] ? trace_lock_acquire+0x14a/0x1d0 [ 82.728795][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 82.730483][ T7351] ? lock_acquire+0x2f/0xb0 [ 82.732004][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 82.733698][ T7351] netif_receive_skb_list_internal+0x753/0xdb0 [ 82.735350][ T7351] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 82.737107][ T7351] ? __pfx_eth_type_trans+0x10/0x10 [ 82.738493][ T7351] ? __build_skb_around+0x278/0x3b0 [ 82.739870][ T7351] netif_receive_skb_list+0x4f/0x4a0 [ 82.741269][ T7351] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 82.742903][ T7351] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 82.744615][ T7351] ? bpf_test_timer_continue+0x150/0x3d0 [ 82.746082][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 82.747463][ T7351] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 82.749013][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 82.750558][ T7351] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 82.752098][ T7351] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 82.753656][ T7351] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 82.755045][ T7351] ? 0xffffffffa0004340 [ 82.756142][ T7351] ? 0xffffffffa0004340 [ 82.757285][ T7351] ? 0xffffffffa0004340 [ 82.758410][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 82.759934][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 82.761362][ T7351] ? lock_acquire+0x2f/0xb0 [ 82.762562][ T7351] ? __fget_files+0x40/0x3f0 [ 82.763824][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 82.765457][ T7351] ? fput+0x30/0x390 [ 82.766559][ T7351] ? __bpf_prog_get+0xa0/0x290 [ 82.767947][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 82.769636][ T7351] __sys_bpf+0xfc6/0x49a0 [ 82.770896][ T7351] ? __pfx_futex_wake+0x10/0x10 [ 82.772294][ T7351] ? __pfx___sys_bpf+0x10/0x10 [ 82.773743][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 82.775584][ T7351] ? do_futex+0x123/0x350 [ 82.777279][ T7351] ? __pfx_do_futex+0x10/0x10 [ 82.778999][ T7351] ? xfd_validate_state+0x5d/0x180 [ 82.781102][ T7351] ? rcu_is_watching+0x12/0xc0 [ 82.782514][ T7351] __x64_sys_bpf+0x78/0xc0 [ 82.783704][ T7351] ? lockdep_hardirqs_on+0x7c/0x110 [ 82.785102][ T7351] do_syscall_64+0xcd/0x250 [ 82.786371][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.788029][ T7351] RIP: 0033:0x7fc02f97e719 [ 82.789328][ T7351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.795065][ T7351] RSP: 002b:00007fc0306bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 82.797645][ T7351] RAX: ffffffffffffffda RBX: 00007fc02fb35f80 RCX: 00007fc02f97e719 [ 82.800653][ T7351] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 82.802858][ T7351] RBP: 00007fc02f9f132e R08: 0000000000000000 R09: 0000000000000000 [ 82.804980][ T7351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.807130][ T7351] R13: 0000000000000000 R14: 00007fc02fb35f80 R15: 00007ffe03613128 [ 82.809255][ T7351] [ 82.810165][ T7351] BUG: Bad page state in process syz.0.314 pfn:31450 [ 82.812109][ T7351] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888031456600 pfn:0x31450 [ 82.815143][ T7351] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 82.817239][ T7351] raw: 00fff00000000000 dead000000000040 ffff888040826000 0000000000000000 [ 82.819905][ T7351] raw: ffff888031456600 0000000000000001 00000000ffffffff 0000000000000000 [ 82.822632][ T7351] page dumped because: page_pool leak [ 82.824152][ T7351] page_owner tracks the page as allocated [ 82.826060][ T7351] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7351, tgid 7350 (syz.0.314), ts 79036983589, free_ts 79012768531 [ 82.830774][ T7351] post_alloc_hook+0x2d1/0x350 [ 82.832303][ T7351] get_page_from_freelist+0x101e/0x3070 [ 82.834060][ T7351] __alloc_pages_noprof+0x223/0x25a0 [ 82.835548][ T7351] alloc_pages_bulk_noprof+0x77c/0x1110 [ 82.837264][ T7351] __page_pool_alloc_pages_slow+0x18f/0x770 [ 82.838866][ T7351] page_pool_alloc_netmem+0xc4/0x160 [ 82.840594][ T7351] page_pool_alloc_pages+0x1a/0x60 [ 82.842314][ T7351] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 82.843951][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 82.845433][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 82.847311][ T7351] __sys_bpf+0xfc6/0x49a0 [ 82.848736][ T7351] __x64_sys_bpf+0x78/0xc0 [ 82.850095][ T7351] do_syscall_64+0xcd/0x250 [ 82.851796][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.853702][ T7351] page last free pid 7120 tgid 7120 stack trace: [ 82.855814][ T7351] free_unref_page+0x5f4/0xdc0 [ 82.857197][ T7351] __put_partials+0x14c/0x170 [ 82.858436][ T7351] qlist_free_all+0x4e/0x120 [ 82.859707][ T7351] kasan_quarantine_reduce+0x192/0x1e0 [ 82.861197][ T7351] __kasan_slab_alloc+0x69/0x90 [ 82.862482][ T7351] kmem_cache_alloc_node_noprof+0x153/0x310 [ 82.864030][ T7351] __alloc_skb+0x2b1/0x380 [ 82.865210][ T7351] netlink_alloc_large_skb+0x69/0x130 [ 82.866628][ T7351] netlink_sendmsg+0x689/0xd70 [ 82.867958][ T7351] ____sys_sendmsg+0xaaf/0xc90 [ 82.869258][ T7351] ___sys_sendmsg+0x135/0x1e0 [ 82.870510][ T7351] __sys_sendmsg+0x117/0x1f0 [ 82.871728][ T7351] do_syscall_64+0xcd/0x250 [ 82.872942][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.874485][ T7351] Modules linked in: [ 82.875501][ T7351] CPU: 2 UID: 0 PID: 7351 Comm: syz.0.314 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 82.878603][ T7351] Tainted: [B]=BAD_PAGE [ 82.879696][ T7351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 82.882474][ T7351] Call Trace: [ 82.883368][ T7351] [ 82.884175][ T7351] dump_stack_lvl+0x16c/0x1f0 [ 82.885444][ T7351] bad_page+0xb3/0x1f0 [ 82.886600][ T7351] ? __pfx_bad_page+0x10/0x10 [ 82.887899][ T7351] ? page_bad_reason+0x9d/0x1e0 [ 82.889198][ T7351] free_unref_page+0x657/0xdc0 [ 82.890448][ T7351] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 82.891994][ T7351] ? __phys_addr+0xc6/0x150 [ 82.893178][ T7351] skb_free_head+0xa0/0x1d0 [ 82.894371][ T7351] skb_release_data+0x560/0x730 [ 82.896091][ T7351] sk_skb_reason_drop+0x129/0x1a0 [ 82.897427][ T7351] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 82.899172][ T7351] ? kernel_text_address+0x8d/0x100 [ 82.900541][ T7351] ? hlock_class+0x4e/0x130 [ 82.901755][ T7351] ? __lock_acquire+0x163e/0x3ce0 [ 82.903193][ T7351] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 82.905090][ T7351] ? hlock_class+0x4e/0x130 [ 82.906306][ T7351] ? __lock_acquire+0xbdd/0x3ce0 [ 82.907614][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 82.909028][ T7351] __netif_receive_skb_list_core+0x357/0x950 [ 82.910660][ T7351] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 82.912565][ T7351] ? trace_lock_acquire+0x14a/0x1d0 [ 82.913995][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 82.915768][ T7351] ? lock_acquire+0x2f/0xb0 [ 82.917304][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 82.919287][ T7351] netif_receive_skb_list_internal+0x753/0xdb0 [ 82.921284][ T7351] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 82.923223][ T7351] ? __pfx_eth_type_trans+0x10/0x10 [ 82.924834][ T7351] ? __build_skb_around+0x278/0x3b0 [ 82.926344][ T7351] netif_receive_skb_list+0x4f/0x4a0 [ 82.927761][ T7351] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 82.929435][ T7351] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 82.931165][ T7351] ? bpf_test_timer_continue+0x150/0x3d0 [ 82.932657][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 82.934061][ T7351] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 82.935602][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 82.937443][ T7351] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 82.939011][ T7351] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 82.940655][ T7351] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 82.942149][ T7351] ? 0xffffffffa0004340 [ 82.943265][ T7351] ? 0xffffffffa0004340 [ 82.944377][ T7351] ? 0xffffffffa0004340 [ 82.945516][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 82.947090][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 82.948521][ T7351] ? lock_acquire+0x2f/0xb0 [ 82.949750][ T7351] ? __fget_files+0x40/0x3f0 [ 82.951175][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 82.953129][ T7351] ? fput+0x30/0x390 [ 82.954186][ T7351] ? __bpf_prog_get+0xa0/0x290 [ 82.955493][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 82.957244][ T7351] __sys_bpf+0xfc6/0x49a0 [ 82.958611][ T7351] ? __pfx_futex_wake+0x10/0x10 [ 82.960029][ T7351] ? __pfx___sys_bpf+0x10/0x10 [ 82.961552][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 82.963149][ T7351] ? do_futex+0x123/0x350 [ 82.964334][ T7351] ? __pfx_do_futex+0x10/0x10 [ 82.965595][ T7351] ? xfd_validate_state+0x5d/0x180 [ 82.966956][ T7351] ? rcu_is_watching+0x12/0xc0 [ 82.968227][ T7351] __x64_sys_bpf+0x78/0xc0 [ 82.969441][ T7351] ? lockdep_hardirqs_on+0x7c/0x110 [ 82.970823][ T7351] do_syscall_64+0xcd/0x250 [ 82.972047][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.973631][ T7351] RIP: 0033:0x7fc02f97e719 [ 82.975101][ T7351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.980517][ T7351] RSP: 002b:00007fc0306bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 82.982856][ T7351] RAX: ffffffffffffffda RBX: 00007fc02fb35f80 RCX: 00007fc02f97e719 [ 82.984908][ T7351] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 82.986976][ T7351] RBP: 00007fc02f9f132e R08: 0000000000000000 R09: 0000000000000000 [ 82.989066][ T7351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.991147][ T7351] R13: 0000000000000000 R14: 00007fc02fb35f80 R15: 00007ffe03613128 [ 82.993409][ T7351] [ 82.994551][ T7351] BUG: Bad page state in process syz.0.314 pfn:4c847 [ 82.996470][ T7351] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4c847 [ 82.998922][ T7351] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 83.000930][ T7351] raw: 00fff00000000000 dead000000000040 ffff888040826000 0000000000000000 [ 83.003166][ T7351] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 83.005320][ T7351] page dumped because: page_pool leak [ 83.006690][ T7351] page_owner tracks the page as allocated [ 83.008137][ T7351] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7351, tgid 7350 (syz.0.314), ts 79036977307, free_ts 79012829434 [ 83.012306][ T7351] post_alloc_hook+0x2d1/0x350 [ 83.013628][ T7351] get_page_from_freelist+0x101e/0x3070 [ 83.015490][ T7351] __alloc_pages_noprof+0x223/0x25a0 [ 83.017237][ T7351] alloc_pages_bulk_noprof+0x77c/0x1110 [ 83.018954][ T7351] __page_pool_alloc_pages_slow+0x18f/0x770 [ 83.020721][ T7351] page_pool_alloc_netmem+0xc4/0x160 [ 83.022189][ T7351] page_pool_alloc_pages+0x1a/0x60 [ 83.023642][ T7351] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 83.025373][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 83.026919][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 83.028726][ T7351] __sys_bpf+0xfc6/0x49a0 [ 83.030029][ T7351] __x64_sys_bpf+0x78/0xc0 [ 83.031401][ T7351] do_syscall_64+0xcd/0x250 [ 83.032786][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.034357][ T7351] page last free pid 7120 tgid 7120 stack trace: [ 83.036083][ T7351] free_unref_page+0x5f4/0xdc0 [ 83.037430][ T7351] __put_partials+0x14c/0x170 [ 83.038660][ T7351] qlist_free_all+0x4e/0x120 [ 83.039872][ T7351] kasan_quarantine_reduce+0x192/0x1e0 [ 83.041320][ T7351] __kasan_slab_alloc+0x69/0x90 [ 83.042760][ T7351] kmem_cache_alloc_node_noprof+0x153/0x310 [ 83.044336][ T7351] __alloc_skb+0x2b1/0x380 [ 83.045526][ T7351] netlink_alloc_large_skb+0x69/0x130 [ 83.047179][ T7351] netlink_sendmsg+0x689/0xd70 [ 83.048471][ T7351] ____sys_sendmsg+0xaaf/0xc90 [ 83.049826][ T7351] ___sys_sendmsg+0x135/0x1e0 [ 83.051125][ T7351] __sys_sendmsg+0x117/0x1f0 [ 83.052584][ T7351] do_syscall_64+0xcd/0x250 [ 83.053979][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.055809][ T7351] Modules linked in: [ 83.057034][ T7351] CPU: 2 UID: 0 PID: 7351 Comm: syz.0.314 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 83.060485][ T7351] Tainted: [B]=BAD_PAGE [ 83.061792][ T7351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 83.064769][ T7351] Call Trace: [ 83.065702][ T7351] [ 83.066519][ T7351] dump_stack_lvl+0x16c/0x1f0 [ 83.067774][ T7351] bad_page+0xb3/0x1f0 [ 83.068894][ T7351] ? __pfx_bad_page+0x10/0x10 [ 83.070126][ T7351] ? page_bad_reason+0x9d/0x1e0 [ 83.071586][ T7351] free_unref_page+0x657/0xdc0 [ 83.072999][ T7351] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 83.074565][ T7351] ? __phys_addr+0xc6/0x150 [ 83.075741][ T7351] skb_free_head+0xa0/0x1d0 [ 83.077263][ T7351] skb_release_data+0x560/0x730 [ 83.078833][ T7351] sk_skb_reason_drop+0x129/0x1a0 [ 83.080225][ T7351] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 83.082294][ T7351] ? kernel_text_address+0x8d/0x100 [ 83.083687][ T7351] ? hlock_class+0x4e/0x130 [ 83.084912][ T7351] ? __lock_acquire+0x163e/0x3ce0 [ 83.086249][ T7351] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 83.088150][ T7351] ? hlock_class+0x4e/0x130 [ 83.089394][ T7351] ? __lock_acquire+0xbdd/0x3ce0 [ 83.090737][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 83.092510][ T7351] __netif_receive_skb_list_core+0x357/0x950 [ 83.094263][ T7351] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 83.096198][ T7351] ? trace_lock_acquire+0x14a/0x1d0 [ 83.097785][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 83.099882][ T7351] ? lock_acquire+0x2f/0xb0 [ 83.101414][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 83.103315][ T7351] netif_receive_skb_list_internal+0x753/0xdb0 [ 83.105120][ T7351] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 83.106930][ T7351] ? __pfx_eth_type_trans+0x10/0x10 [ 83.108313][ T7351] ? __build_skb_around+0x278/0x3b0 [ 83.109719][ T7351] netif_receive_skb_list+0x4f/0x4a0 [ 83.111127][ T7351] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 83.112838][ T7351] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 83.115028][ T7351] ? bpf_test_timer_continue+0x150/0x3d0 [ 83.117015][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 83.118474][ T7351] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 83.120020][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 83.121676][ T7351] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 83.123243][ T7351] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 83.124803][ T7351] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 83.126219][ T7351] ? 0xffffffffa0004340 [ 83.127343][ T7351] ? 0xffffffffa0004340 [ 83.128464][ T7351] ? 0xffffffffa0004340 [ 83.129606][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 83.131190][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 83.132776][ T7351] ? lock_acquire+0x2f/0xb0 [ 83.134250][ T7351] ? __fget_files+0x40/0x3f0 [ 83.135788][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 83.137433][ T7351] ? fput+0x30/0x390 [ 83.138737][ T7351] ? __bpf_prog_get+0xa0/0x290 [ 83.140923][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 83.142553][ T7351] __sys_bpf+0xfc6/0x49a0 [ 83.143753][ T7351] ? __pfx_futex_wake+0x10/0x10 [ 83.145098][ T7351] ? __pfx___sys_bpf+0x10/0x10 [ 83.146393][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 83.147791][ T7351] ? do_futex+0x123/0x350 [ 83.148982][ T7351] ? __pfx_do_futex+0x10/0x10 [ 83.150241][ T7351] ? xfd_validate_state+0x5d/0x180 [ 83.151675][ T7351] ? rcu_is_watching+0x12/0xc0 [ 83.153114][ T7351] __x64_sys_bpf+0x78/0xc0 [ 83.154494][ T7351] ? lockdep_hardirqs_on+0x7c/0x110 [ 83.155865][ T7351] do_syscall_64+0xcd/0x250 [ 83.157074][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.158539][ T7351] RIP: 0033:0x7fc02f97e719 [ 83.159864][ T7351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.165197][ T7351] RSP: 002b:00007fc0306bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 83.167409][ T7351] RAX: ffffffffffffffda RBX: 00007fc02fb35f80 RCX: 00007fc02f97e719 [ 83.169536][ T7351] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 83.171756][ T7351] RBP: 00007fc02f9f132e R08: 0000000000000000 R09: 0000000000000000 [ 83.174098][ T7351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.176449][ T7351] R13: 0000000000000000 R14: 00007fc02fb35f80 R15: 00007ffe03613128 [ 83.178694][ T7351] [ 83.179740][ T7351] BUG: Bad page state in process syz.0.314 pfn:4c846 [ 83.181849][ T7351] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4c846 [ 83.184144][ T7351] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 83.186027][ T7351] raw: 00fff00000000000 dead000000000040 ffff888040826000 0000000000000000 [ 83.188352][ T7351] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 83.190619][ T7351] page dumped because: page_pool leak [ 83.192361][ T7351] page_owner tracks the page as allocated [ 83.194216][ T7351] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7351, tgid 7350 (syz.0.314), ts 79036969937, free_ts 79012829434 [ 83.200187][ T7351] post_alloc_hook+0x2d1/0x350 [ 83.201539][ T7351] get_page_from_freelist+0x101e/0x3070 [ 83.202999][ T7351] __alloc_pages_noprof+0x223/0x25a0 [ 83.204401][ T7351] alloc_pages_bulk_noprof+0x77c/0x1110 [ 83.205888][ T7351] __page_pool_alloc_pages_slow+0x18f/0x770 [ 83.207523][ T7351] page_pool_alloc_netmem+0xc4/0x160 [ 83.208961][ T7351] page_pool_alloc_pages+0x1a/0x60 [ 83.210314][ T7351] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 83.212056][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 83.213405][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 83.214834][ T7351] __sys_bpf+0xfc6/0x49a0 [ 83.215998][ T7351] __x64_sys_bpf+0x78/0xc0 [ 83.217289][ T7351] do_syscall_64+0xcd/0x250 [ 83.218515][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.220085][ T7351] page last free pid 7120 tgid 7120 stack trace: [ 83.221707][ T7351] free_unref_page+0x5f4/0xdc0 [ 83.222994][ T7351] __put_partials+0x14c/0x170 [ 83.224241][ T7351] qlist_free_all+0x4e/0x120 [ 83.225480][ T7351] kasan_quarantine_reduce+0x192/0x1e0 [ 83.226938][ T7351] __kasan_slab_alloc+0x69/0x90 [ 83.228288][ T7351] kmem_cache_alloc_node_noprof+0x153/0x310 [ 83.229901][ T7351] __alloc_skb+0x2b1/0x380 [ 83.231134][ T7351] netlink_alloc_large_skb+0x69/0x130 [ 83.232617][ T7351] netlink_sendmsg+0x689/0xd70 [ 83.233987][ T7351] ____sys_sendmsg+0xaaf/0xc90 [ 83.235378][ T7351] ___sys_sendmsg+0x135/0x1e0 [ 83.236761][ T7351] __sys_sendmsg+0x117/0x1f0 [ 83.238171][ T7351] do_syscall_64+0xcd/0x250 [ 83.239487][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.241071][ T7351] Modules linked in: [ 83.242121][ T7351] CPU: 2 UID: 0 PID: 7351 Comm: syz.0.314 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 83.245352][ T7351] Tainted: [B]=BAD_PAGE [ 83.246463][ T7351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 83.249276][ T7351] Call Trace: [ 83.250161][ T7351] [ 83.250952][ T7351] dump_stack_lvl+0x16c/0x1f0 [ 83.252278][ T7351] bad_page+0xb3/0x1f0 [ 83.253535][ T7351] ? __pfx_bad_page+0x10/0x10 [ 83.254803][ T7351] ? page_bad_reason+0x9d/0x1e0 [ 83.256190][ T7351] free_unref_page+0x657/0xdc0 [ 83.257531][ T7351] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 83.259177][ T7351] ? __phys_addr+0xc6/0x150 [ 83.260383][ T7351] skb_free_head+0xa0/0x1d0 [ 83.261726][ T7351] skb_release_data+0x560/0x730 [ 83.263052][ T7351] sk_skb_reason_drop+0x129/0x1a0 [ 83.264470][ T7351] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 83.266233][ T7351] ? kernel_text_address+0x8d/0x100 [ 83.267557][ T7351] ? hlock_class+0x4e/0x130 [ 83.268760][ T7351] ? __lock_acquire+0x163e/0x3ce0 [ 83.270056][ T7351] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 83.272078][ T7351] ? hlock_class+0x4e/0x130 [ 83.273470][ T7351] ? __lock_acquire+0xbdd/0x3ce0 [ 83.275060][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 83.276596][ T7351] __netif_receive_skb_list_core+0x357/0x950 [ 83.278173][ T7351] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 83.280304][ T7351] ? trace_lock_acquire+0x14a/0x1d0 [ 83.281713][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 83.283363][ T7351] ? lock_acquire+0x2f/0xb0 [ 83.284579][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 83.286440][ T7351] netif_receive_skb_list_internal+0x753/0xdb0 [ 83.288108][ T7351] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 83.289922][ T7351] ? __pfx_eth_type_trans+0x10/0x10 [ 83.291582][ T7351] ? __build_skb_around+0x278/0x3b0 [ 83.293036][ T7351] netif_receive_skb_list+0x4f/0x4a0 [ 83.294438][ T7351] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 83.296097][ T7351] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 83.298048][ T7351] ? bpf_test_timer_continue+0x150/0x3d0 [ 83.299726][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 83.301518][ T7351] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 83.303357][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 83.304969][ T7351] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 83.306535][ T7351] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 83.308124][ T7351] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 83.309578][ T7351] ? 0xffffffffa0004340 [ 83.311006][ T7351] ? 0xffffffffa0004340 [ 83.312182][ T7351] ? 0xffffffffa0004340 [ 83.313463][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 83.315001][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 83.316330][ T7351] ? lock_acquire+0x2f/0xb0 [ 83.317477][ T7351] ? __fget_files+0x40/0x3f0 [ 83.318636][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 83.320189][ T7351] ? fput+0x30/0x390 [ 83.321381][ T7351] ? __bpf_prog_get+0xa0/0x290 [ 83.322725][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 83.324197][ T7351] __sys_bpf+0xfc6/0x49a0 [ 83.325337][ T7351] ? __pfx_futex_wake+0x10/0x10 [ 83.326696][ T7351] ? __pfx___sys_bpf+0x10/0x10 [ 83.328042][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 83.329656][ T7351] ? do_futex+0x123/0x350 [ 83.331167][ T7351] ? __pfx_do_futex+0x10/0x10 [ 83.332565][ T7351] ? xfd_validate_state+0x5d/0x180 [ 83.334467][ T7351] ? rcu_is_watching+0x12/0xc0 [ 83.335783][ T7351] __x64_sys_bpf+0x78/0xc0 [ 83.337082][ T7351] ? lockdep_hardirqs_on+0x7c/0x110 [ 83.338649][ T7351] do_syscall_64+0xcd/0x250 [ 83.339915][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.341435][ T7351] RIP: 0033:0x7fc02f97e719 [ 83.342585][ T7351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.347473][ T7351] RSP: 002b:00007fc0306bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 83.349568][ T7351] RAX: ffffffffffffffda RBX: 00007fc02fb35f80 RCX: 00007fc02f97e719 [ 83.351544][ T7351] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 83.353676][ T7351] RBP: 00007fc02f9f132e R08: 0000000000000000 R09: 0000000000000000 [ 83.355725][ T7351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.357917][ T7351] R13: 0000000000000000 R14: 00007fc02fb35f80 R15: 00007ffe03613128 [ 83.360203][ T7351] [ 83.361368][ T7351] BUG: Bad page state in process syz.0.314 pfn:4c845 [ 83.363368][ T7351] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4c845 [ 83.365701][ T7351] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 83.367606][ T7351] raw: 00fff00000000000 dead000000000040 ffff888040826000 0000000000000000 [ 83.369763][ T7351] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 83.371860][ T7351] page dumped because: page_pool leak [ 83.373230][ T7351] page_owner tracks the page as allocated [ 83.374910][ T7351] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7351, tgid 7350 (syz.0.314), ts 79036964314, free_ts 79012829434 [ 83.379529][ T7351] post_alloc_hook+0x2d1/0x350 [ 83.381065][ T7351] get_page_from_freelist+0x101e/0x3070 [ 83.382533][ T7351] __alloc_pages_noprof+0x223/0x25a0 [ 83.383920][ T7351] alloc_pages_bulk_noprof+0x77c/0x1110 [ 83.385392][ T7351] __page_pool_alloc_pages_slow+0x18f/0x770 [ 83.386946][ T7351] page_pool_alloc_netmem+0xc4/0x160 [ 83.388394][ T7351] page_pool_alloc_pages+0x1a/0x60 [ 83.389816][ T7351] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 83.391616][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 83.393088][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 83.394704][ T7351] __sys_bpf+0xfc6/0x49a0 [ 83.395912][ T7351] __x64_sys_bpf+0x78/0xc0 [ 83.397233][ T7351] do_syscall_64+0xcd/0x250 [ 83.398474][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.400037][ T7351] page last free pid 7120 tgid 7120 stack trace: [ 83.401721][ T7351] free_unref_page+0x5f4/0xdc0 [ 83.402973][ T7351] __put_partials+0x14c/0x170 [ 83.404295][ T7351] qlist_free_all+0x4e/0x120 [ 83.405516][ T7351] kasan_quarantine_reduce+0x192/0x1e0 [ 83.406937][ T7351] __kasan_slab_alloc+0x69/0x90 [ 83.408253][ T7351] kmem_cache_alloc_node_noprof+0x153/0x310 [ 83.409862][ T7351] __alloc_skb+0x2b1/0x380 [ 83.411038][ T7351] netlink_alloc_large_skb+0x69/0x130 [ 83.412811][ T7351] netlink_sendmsg+0x689/0xd70 [ 83.414475][ T7351] ____sys_sendmsg+0xaaf/0xc90 [ 83.415983][ T7351] ___sys_sendmsg+0x135/0x1e0 [ 83.417494][ T7351] __sys_sendmsg+0x117/0x1f0 [ 83.418893][ T7351] do_syscall_64+0xcd/0x250 [ 83.420266][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.422182][ T7351] Modules linked in: [ 83.423400][ T7351] CPU: 2 UID: 0 PID: 7351 Comm: syz.0.314 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 83.427049][ T7351] Tainted: [B]=BAD_PAGE [ 83.428157][ T7351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 83.430946][ T7351] Call Trace: [ 83.432022][ T7351] [ 83.432901][ T7351] dump_stack_lvl+0x16c/0x1f0 [ 83.434418][ T7351] bad_page+0xb3/0x1f0 [ 83.435659][ T7351] ? __pfx_bad_page+0x10/0x10 [ 83.436953][ T7351] ? page_bad_reason+0x9d/0x1e0 [ 83.438246][ T7351] free_unref_page+0x657/0xdc0 [ 83.439465][ T7351] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 83.441058][ T7351] ? __phys_addr+0xc6/0x150 [ 83.442240][ T7351] skb_free_head+0xa0/0x1d0 [ 83.443436][ T7351] skb_release_data+0x560/0x730 [ 83.444916][ T7351] sk_skb_reason_drop+0x129/0x1a0 [ 83.446236][ T7351] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 83.447990][ T7351] ? kernel_text_address+0x8d/0x100 [ 83.449433][ T7351] ? hlock_class+0x4e/0x130 [ 83.450686][ T7351] ? __lock_acquire+0x163e/0x3ce0 [ 83.452049][ T7351] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 83.454736][ T7351] ? hlock_class+0x4e/0x130 [ 83.456048][ T7351] ? __lock_acquire+0xbdd/0x3ce0 [ 83.457598][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 83.459217][ T7351] __netif_receive_skb_list_core+0x357/0x950 [ 83.461188][ T7351] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 83.463275][ T7351] ? trace_lock_acquire+0x14a/0x1d0 [ 83.464867][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 83.466665][ T7351] ? lock_acquire+0x2f/0xb0 [ 83.467875][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 83.469593][ T7351] netif_receive_skb_list_internal+0x753/0xdb0 [ 83.471418][ T7351] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 83.473224][ T7351] ? __pfx_eth_type_trans+0x10/0x10 [ 83.474654][ T7351] ? __build_skb_around+0x278/0x3b0 [ 83.476997][ T7351] netif_receive_skb_list+0x4f/0x4a0 [ 83.478586][ T7351] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 83.480470][ T7351] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 83.482251][ T7351] ? bpf_test_timer_continue+0x150/0x3d0 [ 83.483742][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 83.485170][ T7351] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 83.486726][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 83.488286][ T7351] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 83.490067][ T7351] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 83.491680][ T7351] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 83.493354][ T7351] ? 0xffffffffa0004340 [ 83.494550][ T7351] ? 0xffffffffa0004340 [ 83.495654][ T7351] ? 0xffffffffa0004340 [ 83.496849][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 83.498447][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 83.499864][ T7351] ? lock_acquire+0x2f/0xb0 [ 83.501172][ T7351] ? __fget_files+0x40/0x3f0 [ 83.502454][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 83.503985][ T7351] ? fput+0x30/0x390 [ 83.505031][ T7351] ? __bpf_prog_get+0xa0/0x290 [ 83.506291][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 83.507816][ T7351] __sys_bpf+0xfc6/0x49a0 [ 83.509002][ T7351] ? __pfx_futex_wake+0x10/0x10 [ 83.510334][ T7351] ? __pfx___sys_bpf+0x10/0x10 [ 83.512020][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 83.513538][ T7351] ? do_futex+0x123/0x350 [ 83.514803][ T7351] ? __pfx_do_futex+0x10/0x10 [ 83.516191][ T7351] ? xfd_validate_state+0x5d/0x180 [ 83.517803][ T7351] ? rcu_is_watching+0x12/0xc0 [ 83.519102][ T7351] __x64_sys_bpf+0x78/0xc0 [ 83.520287][ T7351] ? lockdep_hardirqs_on+0x7c/0x110 [ 83.521681][ T7351] do_syscall_64+0xcd/0x250 [ 83.522866][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.524423][ T7351] RIP: 0033:0x7fc02f97e719 [ 83.525633][ T7351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.530728][ T7351] RSP: 002b:00007fc0306bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 83.532913][ T7351] RAX: ffffffffffffffda RBX: 00007fc02fb35f80 RCX: 00007fc02f97e719 [ 83.535253][ T7351] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 83.537580][ T7351] RBP: 00007fc02f9f132e R08: 0000000000000000 R09: 0000000000000000 [ 83.539989][ T7351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.542322][ T7351] R13: 0000000000000000 R14: 00007fc02fb35f80 R15: 00007ffe03613128 [ 83.544640][ T7351] [ 83.545807][ T7351] BUG: Bad page state in process syz.0.314 pfn:4c844 [ 83.547664][ T7351] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4c844 [ 83.549957][ T7351] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 83.551925][ T7351] raw: 00fff00000000000 dead000000000040 ffff888040826000 0000000000000000 [ 83.554144][ T7351] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 83.556485][ T7351] page dumped because: page_pool leak [ 83.558296][ T7351] page_owner tracks the page as allocated [ 83.559840][ T7351] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7351, tgid 7350 (syz.0.314), ts 79036959581, free_ts 79012829434 [ 83.564143][ T7351] post_alloc_hook+0x2d1/0x350 [ 83.565407][ T7351] get_page_from_freelist+0x101e/0x3070 [ 83.566849][ T7351] __alloc_pages_noprof+0x223/0x25a0 [ 83.568278][ T7351] alloc_pages_bulk_noprof+0x77c/0x1110 [ 83.569740][ T7351] __page_pool_alloc_pages_slow+0x18f/0x770 [ 83.571278][ T7351] page_pool_alloc_netmem+0xc4/0x160 [ 83.572650][ T7351] page_pool_alloc_pages+0x1a/0x60 [ 83.573985][ T7351] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 83.575577][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 83.576952][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 83.578392][ T7351] __sys_bpf+0xfc6/0x49a0 [ 83.579517][ T7351] __x64_sys_bpf+0x78/0xc0 [ 83.580841][ T7351] do_syscall_64+0xcd/0x250 [ 83.582034][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.583714][ T7351] page last free pid 7120 tgid 7120 stack trace: [ 83.585369][ T7351] free_unref_page+0x5f4/0xdc0 [ 83.586631][ T7351] __put_partials+0x14c/0x170 [ 83.587920][ T7351] qlist_free_all+0x4e/0x120 [ 83.589148][ T7351] kasan_quarantine_reduce+0x192/0x1e0 [ 83.590568][ T7351] __kasan_slab_alloc+0x69/0x90 [ 83.592024][ T7351] kmem_cache_alloc_node_noprof+0x153/0x310 [ 83.593765][ T7351] __alloc_skb+0x2b1/0x380 [ 83.595012][ T7351] netlink_alloc_large_skb+0x69/0x130 [ 83.596723][ T7351] netlink_sendmsg+0x689/0xd70 [ 83.598086][ T7351] ____sys_sendmsg+0xaaf/0xc90 [ 83.599517][ T7351] ___sys_sendmsg+0x135/0x1e0 [ 83.600847][ T7351] __sys_sendmsg+0x117/0x1f0 [ 83.602138][ T7351] do_syscall_64+0xcd/0x250 [ 83.603393][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.605062][ T7351] Modules linked in: [ 83.606236][ T7351] CPU: 2 UID: 0 PID: 7351 Comm: syz.0.314 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 83.609899][ T7351] Tainted: [B]=BAD_PAGE [ 83.611181][ T7351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 83.614967][ T7351] Call Trace: [ 83.615977][ T7351] [ 83.616800][ T7351] dump_stack_lvl+0x16c/0x1f0 [ 83.618113][ T7351] bad_page+0xb3/0x1f0 [ 83.619219][ T7351] ? __pfx_bad_page+0x10/0x10 [ 83.620466][ T7351] ? page_bad_reason+0x9d/0x1e0 [ 83.621885][ T7351] free_unref_page+0x657/0xdc0 [ 83.623262][ T7351] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 83.624863][ T7351] ? __phys_addr+0xc6/0x150 [ 83.626066][ T7351] skb_free_head+0xa0/0x1d0 [ 83.627270][ T7351] skb_release_data+0x560/0x730 [ 83.628572][ T7351] sk_skb_reason_drop+0x129/0x1a0 [ 83.629906][ T7351] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 83.631666][ T7351] ? kernel_text_address+0x8d/0x100 [ 83.633207][ T7351] ? hlock_class+0x4e/0x130 [ 83.634422][ T7351] ? __lock_acquire+0x163e/0x3ce0 [ 83.635738][ T7351] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 83.637670][ T7351] ? hlock_class+0x4e/0x130 [ 83.638982][ T7351] ? __lock_acquire+0xbdd/0x3ce0 [ 83.640366][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 83.641921][ T7351] __netif_receive_skb_list_core+0x357/0x950 [ 83.643616][ T7351] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 83.645399][ T7351] ? trace_lock_acquire+0x14a/0x1d0 [ 83.646774][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 83.648429][ T7351] ? lock_acquire+0x2f/0xb0 [ 83.649653][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 83.651605][ T7351] netif_receive_skb_list_internal+0x753/0xdb0 [ 83.653605][ T7351] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 83.655816][ T7351] ? __pfx_eth_type_trans+0x10/0x10 [ 83.657579][ T7351] ? __build_skb_around+0x278/0x3b0 [ 83.659126][ T7351] netif_receive_skb_list+0x4f/0x4a0 [ 83.660716][ T7351] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 83.662482][ T7351] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 83.664211][ T7351] ? bpf_test_timer_continue+0x150/0x3d0 [ 83.665693][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 83.667118][ T7351] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 83.668673][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 83.670274][ T7351] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 83.671838][ T7351] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 83.673408][ T7351] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 83.674889][ T7351] ? 0xffffffffa0004340 [ 83.676219][ T7351] ? 0xffffffffa0004340 [ 83.677517][ T7351] ? 0xffffffffa0004340 [ 83.678688][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 83.680356][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 83.682010][ T7351] ? lock_acquire+0x2f/0xb0 [ 83.683315][ T7351] ? __fget_files+0x40/0x3f0 [ 83.684844][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 83.686575][ T7351] ? fput+0x30/0x390 [ 83.687853][ T7351] ? __bpf_prog_get+0xa0/0x290 [ 83.689290][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 83.691158][ T7351] __sys_bpf+0xfc6/0x49a0 [ 83.692390][ T7351] ? __pfx_futex_wake+0x10/0x10 [ 83.693793][ T7351] ? __pfx___sys_bpf+0x10/0x10 [ 83.695267][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 83.696646][ T7351] ? do_futex+0x123/0x350 [ 83.697919][ T7351] ? __pfx_do_futex+0x10/0x10 [ 83.699232][ T7351] ? xfd_validate_state+0x5d/0x180 [ 83.700731][ T7351] ? rcu_is_watching+0x12/0xc0 [ 83.702180][ T7351] __x64_sys_bpf+0x78/0xc0 [ 83.703467][ T7351] ? lockdep_hardirqs_on+0x7c/0x110 [ 83.704969][ T7351] do_syscall_64+0xcd/0x250 [ 83.706276][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.708153][ T7351] RIP: 0033:0x7fc02f97e719 [ 83.709368][ T7351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.714815][ T7351] RSP: 002b:00007fc0306bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 83.717027][ T7351] RAX: ffffffffffffffda RBX: 00007fc02fb35f80 RCX: 00007fc02f97e719 [ 83.719152][ T7351] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 83.721564][ T7351] RBP: 00007fc02f9f132e R08: 0000000000000000 R09: 0000000000000000 [ 83.723898][ T7351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.726336][ T7351] R13: 0000000000000000 R14: 00007fc02fb35f80 R15: 00007ffe03613128 [ 83.728346][ T7351] [ 83.729249][ T7351] BUG: Bad page state in process syz.0.314 pfn:4c843 [ 83.730980][ T7351] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4c843 [ 83.733237][ T7351] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 83.735055][ T7351] raw: 00fff00000000000 dead000000000040 ffff888040826000 0000000000000000 [ 83.737266][ T7351] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 83.739589][ T7351] page dumped because: page_pool leak [ 83.741296][ T7351] page_owner tracks the page as allocated [ 83.742793][ T7351] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7351, tgid 7350 (syz.0.314), ts 79036955091, free_ts 79012829434 [ 83.747022][ T7351] post_alloc_hook+0x2d1/0x350 [ 83.748547][ T7351] get_page_from_freelist+0x101e/0x3070 [ 83.750039][ T7351] __alloc_pages_noprof+0x223/0x25a0 [ 83.751650][ T7351] alloc_pages_bulk_noprof+0x77c/0x1110 [ 83.753445][ T7351] __page_pool_alloc_pages_slow+0x18f/0x770 [ 83.755120][ T7351] page_pool_alloc_netmem+0xc4/0x160 [ 83.756721][ T7351] page_pool_alloc_pages+0x1a/0x60 [ 83.758227][ T7351] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 83.759805][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 83.761252][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 83.762648][ T7351] __sys_bpf+0xfc6/0x49a0 [ 83.763784][ T7351] __x64_sys_bpf+0x78/0xc0 [ 83.764973][ T7351] do_syscall_64+0xcd/0x250 [ 83.766228][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.767811][ T7351] page last free pid 7120 tgid 7120 stack trace: [ 83.769453][ T7351] free_unref_page+0x5f4/0xdc0 [ 83.770680][ T7351] __put_partials+0x14c/0x170 [ 83.771917][ T7351] qlist_free_all+0x4e/0x120 [ 83.773162][ T7351] kasan_quarantine_reduce+0x192/0x1e0 [ 83.774816][ T7351] __kasan_slab_alloc+0x69/0x90 [ 83.776409][ T7351] kmem_cache_alloc_node_noprof+0x153/0x310 [ 83.778521][ T7351] __alloc_skb+0x2b1/0x380 [ 83.780600][ T7351] netlink_alloc_large_skb+0x69/0x130 [ 83.782242][ T7351] netlink_sendmsg+0x689/0xd70 [ 83.783770][ T7351] ____sys_sendmsg+0xaaf/0xc90 [ 83.785011][ T7351] ___sys_sendmsg+0x135/0x1e0 [ 83.786209][ T7351] __sys_sendmsg+0x117/0x1f0 [ 83.787478][ T7351] do_syscall_64+0xcd/0x250 [ 83.788694][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.790226][ T7351] Modules linked in: [ 83.791236][ T7351] CPU: 2 UID: 0 PID: 7351 Comm: syz.0.314 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 83.794786][ T7351] Tainted: [B]=BAD_PAGE [ 83.795853][ T7351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 83.798703][ T7351] Call Trace: [ 83.799595][ T7351] [ 83.800375][ T7351] dump_stack_lvl+0x16c/0x1f0 [ 83.801714][ T7351] bad_page+0xb3/0x1f0 [ 83.802718][ T7351] ? __pfx_bad_page+0x10/0x10 [ 83.803940][ T7351] ? page_bad_reason+0x9d/0x1e0 [ 83.805191][ T7351] free_unref_page+0x657/0xdc0 [ 83.806403][ T7351] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 83.807952][ T7351] ? __phys_addr+0xc6/0x150 [ 83.809162][ T7351] skb_free_head+0xa0/0x1d0 [ 83.810358][ T7351] skb_release_data+0x560/0x730 [ 83.811610][ T7351] sk_skb_reason_drop+0x129/0x1a0 [ 83.813120][ T7351] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 83.814895][ T7351] ? kernel_text_address+0x8d/0x100 [ 83.816362][ T7351] ? hlock_class+0x4e/0x130 [ 83.817699][ T7351] ? __lock_acquire+0x163e/0x3ce0 [ 83.819042][ T7351] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 83.820988][ T7351] ? hlock_class+0x4e/0x130 [ 83.822193][ T7351] ? __lock_acquire+0xbdd/0x3ce0 [ 83.823489][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 83.825047][ T7351] __netif_receive_skb_list_core+0x357/0x950 [ 83.826674][ T7351] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 83.828412][ T7351] ? trace_lock_acquire+0x14a/0x1d0 [ 83.829864][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 83.831952][ T7351] ? lock_acquire+0x2f/0xb0 [ 83.833306][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 83.835069][ T7351] netif_receive_skb_list_internal+0x753/0xdb0 [ 83.836661][ T7351] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 83.838463][ T7351] ? __pfx_eth_type_trans+0x10/0x10 [ 83.839818][ T7351] ? __build_skb_around+0x278/0x3b0 [ 83.841159][ T7351] netif_receive_skb_list+0x4f/0x4a0 [ 83.842660][ T7351] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 83.844298][ T7351] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 83.846009][ T7351] ? bpf_test_timer_continue+0x150/0x3d0 [ 83.847470][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 83.848859][ T7351] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 83.850378][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 83.852140][ T7351] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 83.853748][ T7351] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 83.855287][ T7351] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 83.856715][ T7351] ? 0xffffffffa0004340 [ 83.857898][ T7351] ? 0xffffffffa0004340 [ 83.859059][ T7351] ? 0xffffffffa0004340 [ 83.860184][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 83.861852][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 83.863227][ T7351] ? lock_acquire+0x2f/0xb0 [ 83.864427][ T7351] ? __fget_files+0x40/0x3f0 [ 83.865660][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 83.867142][ T7351] ? fput+0x30/0x390 [ 83.868176][ T7351] ? __bpf_prog_get+0xa0/0x290 [ 83.869446][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 83.871137][ T7351] __sys_bpf+0xfc6/0x49a0 [ 83.872340][ T7351] ? __pfx_futex_wake+0x10/0x10 [ 83.873892][ T7351] ? __pfx___sys_bpf+0x10/0x10 [ 83.875112][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 83.876445][ T7351] ? do_futex+0x123/0x350 [ 83.877618][ T7351] ? __pfx_do_futex+0x10/0x10 [ 83.878866][ T7351] ? xfd_validate_state+0x5d/0x180 [ 83.880198][ T7351] ? rcu_is_watching+0x12/0xc0 [ 83.881594][ T7351] __x64_sys_bpf+0x78/0xc0 [ 83.882845][ T7351] ? lockdep_hardirqs_on+0x7c/0x110 [ 83.884466][ T7351] do_syscall_64+0xcd/0x250 [ 83.885686][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.887224][ T7351] RIP: 0033:0x7fc02f97e719 [ 83.888341][ T7351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.893428][ T7351] RSP: 002b:00007fc0306bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 83.895965][ T7351] RAX: ffffffffffffffda RBX: 00007fc02fb35f80 RCX: 00007fc02f97e719 [ 83.898145][ T7351] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 83.900216][ T7351] RBP: 00007fc02f9f132e R08: 0000000000000000 R09: 0000000000000000 [ 83.902293][ T7351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.904349][ T7351] R13: 0000000000000000 R14: 00007fc02fb35f80 R15: 00007ffe03613128 [ 83.906421][ T7351] [ 83.907373][ T7351] BUG: Bad page state in process syz.0.314 pfn:4c842 [ 83.909149][ T7351] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4c842 [ 83.911395][ T7351] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 83.913260][ T7351] raw: 00fff00000000000 dead000000000040 ffff888040826000 0000000000000000 [ 83.915541][ T7351] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 83.917938][ T7351] page dumped because: page_pool leak [ 83.919411][ T7351] page_owner tracks the page as allocated [ 83.920995][ T7351] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7351, tgid 7350 (syz.0.314), ts 79036950585, free_ts 79012829434 [ 83.925512][ T7351] post_alloc_hook+0x2d1/0x350 [ 83.926746][ T7351] get_page_from_freelist+0x101e/0x3070 [ 83.928305][ T7351] __alloc_pages_noprof+0x223/0x25a0 [ 83.929708][ T7351] alloc_pages_bulk_noprof+0x77c/0x1110 [ 83.931281][ T7351] __page_pool_alloc_pages_slow+0x18f/0x770 [ 83.933140][ T7351] page_pool_alloc_netmem+0xc4/0x160 [ 83.934554][ T7351] page_pool_alloc_pages+0x1a/0x60 [ 83.935864][ T7351] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 83.937706][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 83.939090][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 83.940449][ T7351] __sys_bpf+0xfc6/0x49a0 [ 83.941573][ T7351] __x64_sys_bpf+0x78/0xc0 [ 83.942982][ T7351] do_syscall_64+0xcd/0x250 [ 83.944182][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.945727][ T7351] page last free pid 7120 tgid 7120 stack trace: [ 83.947429][ T7351] free_unref_page+0x5f4/0xdc0 [ 83.948655][ T7351] __put_partials+0x14c/0x170 [ 83.949890][ T7351] qlist_free_all+0x4e/0x120 [ 83.951106][ T7351] kasan_quarantine_reduce+0x192/0x1e0 [ 83.952892][ T7351] __kasan_slab_alloc+0x69/0x90 [ 83.954300][ T7351] kmem_cache_alloc_node_noprof+0x153/0x310 [ 83.955963][ T7351] __alloc_skb+0x2b1/0x380 [ 83.957353][ T7351] netlink_alloc_large_skb+0x69/0x130 [ 83.958868][ T7351] netlink_sendmsg+0x689/0xd70 [ 83.960280][ T7351] ____sys_sendmsg+0xaaf/0xc90 [ 83.961595][ T7351] ___sys_sendmsg+0x135/0x1e0 [ 83.962968][ T7351] __sys_sendmsg+0x117/0x1f0 [ 83.964247][ T7351] do_syscall_64+0xcd/0x250 [ 83.965659][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.967362][ T7351] Modules linked in: [ 83.968444][ T7351] CPU: 2 UID: 0 PID: 7351 Comm: syz.0.314 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 83.971723][ T7351] Tainted: [B]=BAD_PAGE [ 83.973171][ T7351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 83.976313][ T7351] Call Trace: [ 83.977342][ T7351] [ 83.978307][ T7351] dump_stack_lvl+0x16c/0x1f0 [ 83.979739][ T7351] bad_page+0xb3/0x1f0 [ 83.980842][ T7351] ? __pfx_bad_page+0x10/0x10 [ 83.982147][ T7351] ? page_bad_reason+0x9d/0x1e0 [ 83.983402][ T7351] free_unref_page+0x657/0xdc0 [ 83.984640][ T7351] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 83.986203][ T7351] ? __phys_addr+0xc6/0x150 [ 83.987378][ T7351] skb_free_head+0xa0/0x1d0 [ 83.988588][ T7351] skb_release_data+0x560/0x730 [ 83.989865][ T7351] sk_skb_reason_drop+0x129/0x1a0 [ 83.991121][ T7351] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 83.992838][ T7351] ? kernel_text_address+0x8d/0x100 [ 83.994166][ T7351] ? hlock_class+0x4e/0x130 [ 83.995305][ T7351] ? __lock_acquire+0x163e/0x3ce0 [ 83.996548][ T7351] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 83.998351][ T7351] ? hlock_class+0x4e/0x130 [ 83.999515][ T7351] ? __lock_acquire+0xbdd/0x3ce0 [ 84.000781][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 84.002091][ T7351] __netif_receive_skb_list_core+0x357/0x950 [ 84.003633][ T7351] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 84.005298][ T7351] ? trace_lock_acquire+0x14a/0x1d0 [ 84.006653][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 84.008249][ T7351] ? lock_acquire+0x2f/0xb0 [ 84.009454][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 84.011100][ T7351] netif_receive_skb_list_internal+0x753/0xdb0 [ 84.012963][ T7351] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 84.014885][ T7351] ? __pfx_eth_type_trans+0x10/0x10 [ 84.016322][ T7351] ? __build_skb_around+0x278/0x3b0 [ 84.017717][ T7351] netif_receive_skb_list+0x4f/0x4a0 [ 84.019109][ T7351] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 84.020762][ T7351] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 84.022477][ T7351] ? bpf_test_timer_continue+0x150/0x3d0 [ 84.023931][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 84.025330][ T7351] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 84.026946][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 84.028526][ T7351] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 84.030081][ T7351] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 84.031606][ T7351] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 84.033008][ T7351] ? 0xffffffffa0004340 [ 84.034203][ T7351] ? 0xffffffffa0004340 [ 84.035492][ T7351] ? 0xffffffffa0004340 [ 84.036627][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 84.038169][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 84.039556][ T7351] ? lock_acquire+0x2f/0xb0 [ 84.040770][ T7351] ? __fget_files+0x40/0x3f0 [ 84.042186][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 84.043694][ T7351] ? fput+0x30/0x390 [ 84.044754][ T7351] ? __bpf_prog_get+0xa0/0x290 [ 84.046064][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 84.047624][ T7351] __sys_bpf+0xfc6/0x49a0 [ 84.048842][ T7351] ? __pfx_futex_wake+0x10/0x10 [ 84.050208][ T7351] ? __pfx___sys_bpf+0x10/0x10 [ 84.051630][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 84.053211][ T7351] ? do_futex+0x123/0x350 [ 84.054481][ T7351] ? __pfx_do_futex+0x10/0x10 [ 84.055755][ T7351] ? xfd_validate_state+0x5d/0x180 [ 84.057570][ T7351] ? rcu_is_watching+0x12/0xc0 [ 84.058954][ T7351] __x64_sys_bpf+0x78/0xc0 [ 84.060252][ T7351] ? lockdep_hardirqs_on+0x7c/0x110 [ 84.061694][ T7351] do_syscall_64+0xcd/0x250 [ 84.062870][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.064570][ T7351] RIP: 0033:0x7fc02f97e719 [ 84.065902][ T7351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.070957][ T7351] RSP: 002b:00007fc0306bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 84.074148][ T7351] RAX: ffffffffffffffda RBX: 00007fc02fb35f80 RCX: 00007fc02f97e719 [ 84.076814][ T7351] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 84.079129][ T7351] RBP: 00007fc02f9f132e R08: 0000000000000000 R09: 0000000000000000 [ 84.081302][ T7351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.083338][ T7351] R13: 0000000000000000 R14: 00007fc02fb35f80 R15: 00007ffe03613128 [ 84.085471][ T7351] [ 84.086421][ T7351] BUG: Bad page state in process syz.0.314 pfn:4c841 [ 84.088266][ T7351] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x8 pfn:0x4c841 [ 84.090592][ T7351] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 84.092398][ T7351] raw: 00fff00000000000 dead000000000040 ffff888040826000 0000000000000000 [ 84.094628][ T7351] raw: 0000000000000008 0000000000000001 00000000ffffffff 0000000000000000 [ 84.096830][ T7351] page dumped because: page_pool leak [ 84.098267][ T7351] page_owner tracks the page as allocated [ 84.100016][ T7351] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7351, tgid 7350 (syz.0.314), ts 79036945564, free_ts 79012829434 [ 84.104396][ T7351] post_alloc_hook+0x2d1/0x350 [ 84.105667][ T7351] get_page_from_freelist+0x101e/0x3070 [ 84.107160][ T7351] __alloc_pages_noprof+0x223/0x25a0 [ 84.108535][ T7351] alloc_pages_bulk_noprof+0x77c/0x1110 [ 84.110052][ T7351] __page_pool_alloc_pages_slow+0x18f/0x770 [ 84.111603][ T7351] page_pool_alloc_netmem+0xc4/0x160 [ 84.112955][ T7351] page_pool_alloc_pages+0x1a/0x60 [ 84.114368][ T7351] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 84.116108][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 84.117819][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 84.119370][ T7351] __sys_bpf+0xfc6/0x49a0 [ 84.120732][ T7351] __x64_sys_bpf+0x78/0xc0 [ 84.122096][ T7351] do_syscall_64+0xcd/0x250 [ 84.123336][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.124915][ T7351] page last free pid 7120 tgid 7120 stack trace: [ 84.126509][ T7351] free_unref_page+0x5f4/0xdc0 [ 84.127834][ T7351] __put_partials+0x14c/0x170 [ 84.129115][ T7351] qlist_free_all+0x4e/0x120 [ 84.130323][ T7351] kasan_quarantine_reduce+0x192/0x1e0 [ 84.131970][ T7351] __kasan_slab_alloc+0x69/0x90 [ 84.133370][ T7351] kmem_cache_alloc_node_noprof+0x153/0x310 [ 84.135100][ T7351] __alloc_skb+0x2b1/0x380 [ 84.136475][ T7351] netlink_alloc_large_skb+0x69/0x130 [ 84.138182][ T7351] netlink_sendmsg+0x689/0xd70 [ 84.139756][ T7351] ____sys_sendmsg+0xaaf/0xc90 [ 84.141305][ T7351] ___sys_sendmsg+0x135/0x1e0 [ 84.142581][ T7351] __sys_sendmsg+0x117/0x1f0 [ 84.144093][ T7351] do_syscall_64+0xcd/0x250 [ 84.145350][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.147005][ T7351] Modules linked in: [ 84.148093][ T7351] CPU: 2 UID: 0 PID: 7351 Comm: syz.0.314 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 84.151222][ T7351] Tainted: [B]=BAD_PAGE [ 84.152515][ T7351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.155467][ T7351] Call Trace: [ 84.156584][ T7351] [ 84.157499][ T7351] dump_stack_lvl+0x16c/0x1f0 [ 84.158843][ T7351] bad_page+0xb3/0x1f0 [ 84.159995][ T7351] ? __pfx_bad_page+0x10/0x10 [ 84.161447][ T7351] ? page_bad_reason+0x9d/0x1e0 [ 84.162877][ T7351] free_unref_page+0x657/0xdc0 [ 84.164242][ T7351] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 84.165938][ T7351] ? __phys_addr+0xc6/0x150 [ 84.167209][ T7351] skb_free_head+0xa0/0x1d0 [ 84.168476][ T7351] skb_release_data+0x560/0x730 [ 84.169791][ T7351] sk_skb_reason_drop+0x129/0x1a0 [ 84.171092][ T7351] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 84.172927][ T7351] ? kernel_text_address+0x8d/0x100 [ 84.174641][ T7351] ? hlock_class+0x4e/0x130 [ 84.176181][ T7351] ? __lock_acquire+0x163e/0x3ce0 [ 84.177731][ T7351] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 84.179824][ T7351] ? hlock_class+0x4e/0x130 [ 84.181175][ T7351] ? __lock_acquire+0xbdd/0x3ce0 [ 84.182540][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 84.183963][ T7351] __netif_receive_skb_list_core+0x357/0x950 [ 84.185630][ T7351] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 84.187391][ T7351] ? trace_lock_acquire+0x14a/0x1d0 [ 84.188824][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 84.190477][ T7351] ? lock_acquire+0x2f/0xb0 [ 84.191792][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 84.193661][ T7351] netif_receive_skb_list_internal+0x753/0xdb0 [ 84.195301][ T7351] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 84.197065][ T7351] ? __pfx_eth_type_trans+0x10/0x10 [ 84.198476][ T7351] ? __build_skb_around+0x278/0x3b0 [ 84.199961][ T7351] netif_receive_skb_list+0x4f/0x4a0 [ 84.201557][ T7351] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 84.203357][ T7351] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 84.205278][ T7351] ? bpf_test_timer_continue+0x150/0x3d0 [ 84.206855][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 84.208342][ T7351] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 84.209960][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 84.211543][ T7351] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 84.213522][ T7351] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 84.215193][ T7351] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 84.216709][ T7351] ? 0xffffffffa0004340 [ 84.218099][ T7351] ? 0xffffffffa0004340 [ 84.219153][ T7351] ? 0xffffffffa0004340 [ 84.220252][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 84.222016][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 84.223525][ T7351] ? lock_acquire+0x2f/0xb0 [ 84.224807][ T7351] ? __fget_files+0x40/0x3f0 [ 84.226114][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 84.227708][ T7351] ? fput+0x30/0x390 [ 84.228771][ T7351] ? __bpf_prog_get+0xa0/0x290 [ 84.230047][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 84.231570][ T7351] __sys_bpf+0xfc6/0x49a0 [ 84.232939][ T7351] ? __pfx_futex_wake+0x10/0x10 [ 84.234271][ T7351] ? __pfx___sys_bpf+0x10/0x10 [ 84.235571][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 84.237040][ T7351] ? do_futex+0x123/0x350 [ 84.238258][ T7351] ? __pfx_do_futex+0x10/0x10 [ 84.239583][ T7351] ? xfd_validate_state+0x5d/0x180 [ 84.241036][ T7351] ? rcu_is_watching+0x12/0xc0 [ 84.242379][ T7351] __x64_sys_bpf+0x78/0xc0 [ 84.243771][ T7351] ? lockdep_hardirqs_on+0x7c/0x110 [ 84.245207][ T7351] do_syscall_64+0xcd/0x250 [ 84.246425][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.248348][ T7351] RIP: 0033:0x7fc02f97e719 [ 84.249908][ T7351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.255238][ T7351] RSP: 002b:00007fc0306bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 84.257434][ T7351] RAX: ffffffffffffffda RBX: 00007fc02fb35f80 RCX: 00007fc02f97e719 [ 84.259504][ T7351] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 84.261729][ T7351] RBP: 00007fc02f9f132e R08: 0000000000000000 R09: 0000000000000000 [ 84.264071][ T7351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.266292][ T7351] R13: 0000000000000000 R14: 00007fc02fb35f80 R15: 00007ffe03613128 [ 84.268363][ T7351] [ 84.269455][ T7351] BUG: Bad page state in process syz.0.314 pfn:4c840 [ 84.271366][ T7351] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804c846000 pfn:0x4c840 [ 84.274617][ T7351] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 84.276977][ T7351] raw: 00fff00000000000 dead000000000040 ffff888040826000 0000000000000000 [ 84.280292][ T7351] raw: ffff88804c846000 0000000000000001 00000000ffffffff 0000000000000000 [ 84.282786][ T7351] page dumped because: page_pool leak [ 84.284283][ T7351] page_owner tracks the page as allocated [ 84.285813][ T7351] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7351, tgid 7350 (syz.0.314), ts 79036940712, free_ts 79012829434 [ 84.290468][ T7351] post_alloc_hook+0x2d1/0x350 [ 84.291891][ T7351] get_page_from_freelist+0x101e/0x3070 [ 84.293458][ T7351] __alloc_pages_noprof+0x223/0x25a0 [ 84.294936][ T7351] alloc_pages_bulk_noprof+0x77c/0x1110 [ 84.296601][ T7351] __page_pool_alloc_pages_slow+0x18f/0x770 [ 84.298816][ T7351] page_pool_alloc_netmem+0xc4/0x160 [ 84.300260][ T7351] page_pool_alloc_pages+0x1a/0x60 [ 84.301629][ T7351] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 84.303338][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 84.304813][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 84.306210][ T7351] __sys_bpf+0xfc6/0x49a0 [ 84.307399][ T7351] __x64_sys_bpf+0x78/0xc0 [ 84.308604][ T7351] do_syscall_64+0xcd/0x250 [ 84.309909][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.311496][ T7351] page last free pid 7120 tgid 7120 stack trace: [ 84.313172][ T7351] free_unref_page+0x5f4/0xdc0 [ 84.314449][ T7351] __put_partials+0x14c/0x170 [ 84.315701][ T7351] qlist_free_all+0x4e/0x120 [ 84.316947][ T7351] kasan_quarantine_reduce+0x192/0x1e0 [ 84.318606][ T7351] __kasan_slab_alloc+0x69/0x90 [ 84.320239][ T7351] kmem_cache_alloc_node_noprof+0x153/0x310 [ 84.321749][ T7351] __alloc_skb+0x2b1/0x380 [ 84.322916][ T7351] netlink_alloc_large_skb+0x69/0x130 [ 84.324323][ T7351] netlink_sendmsg+0x689/0xd70 [ 84.325572][ T7351] ____sys_sendmsg+0xaaf/0xc90 [ 84.326775][ T7351] ___sys_sendmsg+0x135/0x1e0 [ 84.328090][ T7351] __sys_sendmsg+0x117/0x1f0 [ 84.329333][ T7351] do_syscall_64+0xcd/0x250 [ 84.330520][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.332060][ T7351] Modules linked in: [ 84.333128][ T7351] CPU: 2 UID: 0 PID: 7351 Comm: syz.0.314 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 84.336220][ T7351] Tainted: [B]=BAD_PAGE [ 84.337328][ T7351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.340099][ T7351] Call Trace: [ 84.340990][ T7351] [ 84.341772][ T7351] dump_stack_lvl+0x16c/0x1f0 [ 84.343159][ T7351] bad_page+0xb3/0x1f0 [ 84.344235][ T7351] ? __pfx_bad_page+0x10/0x10 [ 84.345539][ T7351] ? page_bad_reason+0x9d/0x1e0 [ 84.346834][ T7351] free_unref_page+0x657/0xdc0 [ 84.348097][ T7351] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 84.349655][ T7351] ? __phys_addr+0xc6/0x150 [ 84.350837][ T7351] skb_free_head+0xa0/0x1d0 [ 84.352045][ T7351] skb_release_data+0x560/0x730 [ 84.353555][ T7351] sk_skb_reason_drop+0x129/0x1a0 [ 84.355174][ T7351] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 84.357586][ T7351] ? kernel_text_address+0x8d/0x100 [ 84.358938][ T7351] ? hlock_class+0x4e/0x130 [ 84.360363][ T7351] ? __lock_acquire+0x163e/0x3ce0 [ 84.361701][ T7351] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 84.363449][ T7351] ? hlock_class+0x4e/0x130 [ 84.364660][ T7351] ? __lock_acquire+0xbdd/0x3ce0 [ 84.365986][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 84.367360][ T7351] __netif_receive_skb_list_core+0x357/0x950 [ 84.369153][ T7351] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 84.370906][ T7351] ? trace_lock_acquire+0x14a/0x1d0 [ 84.372320][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 84.374482][ T7351] ? lock_acquire+0x2f/0xb0 [ 84.375702][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 84.377404][ T7351] netif_receive_skb_list_internal+0x753/0xdb0 [ 84.378990][ T7351] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 84.380703][ T7351] ? __pfx_eth_type_trans+0x10/0x10 [ 84.382166][ T7351] ? __build_skb_around+0x278/0x3b0 [ 84.383517][ T7351] netif_receive_skb_list+0x4f/0x4a0 [ 84.384873][ T7351] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 84.386455][ T7351] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 84.388146][ T7351] ? bpf_test_timer_continue+0x150/0x3d0 [ 84.389614][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 84.390976][ T7351] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 84.392478][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 84.394000][ T7351] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 84.395503][ T7351] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 84.397302][ T7351] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 84.398891][ T7351] ? 0xffffffffa0004340 [ 84.399955][ T7351] ? 0xffffffffa0004340 [ 84.401040][ T7351] ? 0xffffffffa0004340 [ 84.402106][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 84.403639][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 84.405044][ T7351] ? lock_acquire+0x2f/0xb0 [ 84.406230][ T7351] ? __fget_files+0x40/0x3f0 [ 84.407432][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 84.409064][ T7351] ? fput+0x30/0x390 [ 84.410116][ T7351] ? __bpf_prog_get+0xa0/0x290 [ 84.411440][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 84.413094][ T7351] __sys_bpf+0xfc6/0x49a0 [ 84.414245][ T7351] ? __pfx_futex_wake+0x10/0x10 [ 84.415576][ T7351] ? __pfx___sys_bpf+0x10/0x10 [ 84.416838][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 84.418198][ T7351] ? do_futex+0x123/0x350 [ 84.419341][ T7351] ? __pfx_do_futex+0x10/0x10 [ 84.420575][ T7351] ? xfd_validate_state+0x5d/0x180 [ 84.421894][ T7351] ? rcu_is_watching+0x12/0xc0 [ 84.423134][ T7351] __x64_sys_bpf+0x78/0xc0 [ 84.424288][ T7351] ? lockdep_hardirqs_on+0x7c/0x110 [ 84.425665][ T7351] do_syscall_64+0xcd/0x250 [ 84.426829][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.428351][ T7351] RIP: 0033:0x7fc02f97e719 [ 84.429540][ T7351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.434956][ T7351] RSP: 002b:00007fc0306bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 84.437564][ T7351] RAX: ffffffffffffffda RBX: 00007fc02fb35f80 RCX: 00007fc02f97e719 [ 84.440200][ T7351] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 84.442633][ T7351] RBP: 00007fc02f9f132e R08: 0000000000000000 R09: 0000000000000000 [ 84.445002][ T7351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.447166][ T7351] R13: 0000000000000000 R14: 00007fc02fb35f80 R15: 00007ffe03613128 [ 84.449206][ T7351] [ 84.450097][ T7351] BUG: Bad page state in process syz.0.314 pfn:4d0b7 [ 84.451859][ T7351] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4d0b7 [ 84.454131][ T7351] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 84.456129][ T7351] raw: 00fff00000000000 dead000000000040 ffff888040826000 0000000000000000 [ 84.458654][ T7351] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 84.460841][ T7351] page dumped because: page_pool leak [ 84.462183][ T7351] page_owner tracks the page as allocated [ 84.463625][ T7351] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7351, tgid 7350 (syz.0.314), ts 79036934627, free_ts 79013125143 [ 84.468232][ T7351] post_alloc_hook+0x2d1/0x350 [ 84.469530][ T7351] get_page_from_freelist+0x101e/0x3070 [ 84.470962][ T7351] __alloc_pages_noprof+0x223/0x25a0 [ 84.472324][ T7351] alloc_pages_bulk_noprof+0x77c/0x1110 [ 84.473763][ T7351] __page_pool_alloc_pages_slow+0x18f/0x770 [ 84.475503][ T7351] page_pool_alloc_netmem+0xc4/0x160 [ 84.477190][ T7351] page_pool_alloc_pages+0x1a/0x60 [ 84.478591][ T7351] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 84.480508][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 84.482297][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 84.483920][ T7351] __sys_bpf+0xfc6/0x49a0 [ 84.485157][ T7351] __x64_sys_bpf+0x78/0xc0 [ 84.486390][ T7351] do_syscall_64+0xcd/0x250 [ 84.487907][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.489603][ T7351] page last free pid 7120 tgid 7120 stack trace: [ 84.491357][ T7351] free_unref_page+0x5f4/0xdc0 [ 84.492640][ T7351] __put_partials+0x14c/0x170 [ 84.493991][ T7351] qlist_free_all+0x4e/0x120 [ 84.495213][ T7351] kasan_quarantine_reduce+0x192/0x1e0 [ 84.496952][ T7351] __kasan_slab_alloc+0x69/0x90 [ 84.498433][ T7351] kmem_cache_alloc_node_noprof+0x153/0x310 [ 84.499977][ T7351] __alloc_skb+0x2b1/0x380 [ 84.501190][ T7351] netlink_alloc_large_skb+0x69/0x130 [ 84.502818][ T7351] netlink_sendmsg+0x689/0xd70 [ 84.504143][ T7351] ____sys_sendmsg+0xaaf/0xc90 [ 84.505490][ T7351] ___sys_sendmsg+0x135/0x1e0 [ 84.506773][ T7351] __sys_sendmsg+0x117/0x1f0 [ 84.508110][ T7351] do_syscall_64+0xcd/0x250 [ 84.509385][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.511160][ T7351] Modules linked in: [ 84.512400][ T7351] CPU: 2 UID: 0 PID: 7351 Comm: syz.0.314 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 84.515822][ T7351] Tainted: [B]=BAD_PAGE [ 84.517429][ T7351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.520607][ T7351] Call Trace: [ 84.521538][ T7351] [ 84.522361][ T7351] dump_stack_lvl+0x16c/0x1f0 [ 84.523958][ T7351] bad_page+0xb3/0x1f0 [ 84.525202][ T7351] ? __pfx_bad_page+0x10/0x10 [ 84.526542][ T7351] ? page_bad_reason+0x9d/0x1e0 [ 84.527986][ T7351] free_unref_page+0x657/0xdc0 [ 84.529333][ T7351] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 84.531187][ T7351] ? __phys_addr+0xc6/0x150 [ 84.532980][ T7351] skb_free_head+0xa0/0x1d0 [ 84.534399][ T7351] skb_release_data+0x560/0x730 [ 84.535868][ T7351] sk_skb_reason_drop+0x129/0x1a0 [ 84.537462][ T7351] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 84.539545][ T7351] ? kernel_text_address+0x8d/0x100 [ 84.540981][ T7351] ? hlock_class+0x4e/0x130 [ 84.542174][ T7351] ? __lock_acquire+0x163e/0x3ce0 [ 84.543535][ T7351] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 84.545405][ T7351] ? hlock_class+0x4e/0x130 [ 84.546590][ T7351] ? __lock_acquire+0xbdd/0x3ce0 [ 84.547880][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 84.549285][ T7351] __netif_receive_skb_list_core+0x357/0x950 [ 84.550839][ T7351] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 84.552537][ T7351] ? trace_lock_acquire+0x14a/0x1d0 [ 84.554366][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 84.556314][ T7351] ? lock_acquire+0x2f/0xb0 [ 84.557582][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 84.559702][ T7351] netif_receive_skb_list_internal+0x753/0xdb0 [ 84.561333][ T7351] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 84.563260][ T7351] ? __pfx_eth_type_trans+0x10/0x10 [ 84.564683][ T7351] ? __build_skb_around+0x278/0x3b0 [ 84.566213][ T7351] netif_receive_skb_list+0x4f/0x4a0 [ 84.567756][ T7351] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 84.569516][ T7351] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 84.571234][ T7351] ? bpf_test_timer_continue+0x150/0x3d0 [ 84.572902][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 84.574599][ T7351] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 84.576414][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 84.577969][ T7351] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 84.579468][ T7351] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 84.581103][ T7351] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 84.582521][ T7351] ? 0xffffffffa0004340 [ 84.583668][ T7351] ? 0xffffffffa0004340 [ 84.584816][ T7351] ? 0xffffffffa0004340 [ 84.585980][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 84.587622][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 84.589358][ T7351] ? lock_acquire+0x2f/0xb0 [ 84.590671][ T7351] ? __fget_files+0x40/0x3f0 [ 84.591989][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 84.593861][ T7351] ? fput+0x30/0x390 [ 84.595038][ T7351] ? __bpf_prog_get+0xa0/0x290 [ 84.596699][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 84.598377][ T7351] __sys_bpf+0xfc6/0x49a0 [ 84.599498][ T7351] ? __pfx_futex_wake+0x10/0x10 [ 84.600771][ T7351] ? __pfx___sys_bpf+0x10/0x10 [ 84.602028][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 84.603400][ T7351] ? do_futex+0x123/0x350 [ 84.604553][ T7351] ? __pfx_do_futex+0x10/0x10 [ 84.605940][ T7351] ? xfd_validate_state+0x5d/0x180 [ 84.607273][ T7351] ? rcu_is_watching+0x12/0xc0 [ 84.608579][ T7351] __x64_sys_bpf+0x78/0xc0 [ 84.609824][ T7351] ? lockdep_hardirqs_on+0x7c/0x110 [ 84.611181][ T7351] do_syscall_64+0xcd/0x250 [ 84.612478][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.614012][ T7351] RIP: 0033:0x7fc02f97e719 [ 84.615173][ T7351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.621288][ T7351] RSP: 002b:00007fc0306bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 84.624037][ T7351] RAX: ffffffffffffffda RBX: 00007fc02fb35f80 RCX: 00007fc02f97e719 [ 84.626336][ T7351] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 84.628432][ T7351] RBP: 00007fc02f9f132e R08: 0000000000000000 R09: 0000000000000000 [ 84.630454][ T7351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.632527][ T7351] R13: 0000000000000000 R14: 00007fc02fb35f80 R15: 00007ffe03613128 [ 84.634583][ T7351] [ 84.635461][ T7351] BUG: Bad page state in process syz.0.314 pfn:4d0b6 [ 84.637238][ T7351] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4d0b6 [ 84.639613][ T7351] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 84.641524][ T7351] raw: 00fff00000000000 dead000000000040 ffff888040826000 0000000000000000 [ 84.644045][ T7351] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 84.646264][ T7351] page dumped because: page_pool leak [ 84.648003][ T7351] page_owner tracks the page as allocated [ 84.649562][ T7351] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7351, tgid 7350 (syz.0.314), ts 79036919969, free_ts 79013125143 [ 84.654199][ T7351] post_alloc_hook+0x2d1/0x350 [ 84.655952][ T7351] get_page_from_freelist+0x101e/0x3070 [ 84.657771][ T7351] __alloc_pages_noprof+0x223/0x25a0 [ 84.659914][ T7351] alloc_pages_bulk_noprof+0x77c/0x1110 [ 84.661966][ T7351] __page_pool_alloc_pages_slow+0x18f/0x770 [ 84.663870][ T7351] page_pool_alloc_netmem+0xc4/0x160 [ 84.665470][ T7351] page_pool_alloc_pages+0x1a/0x60 [ 84.666857][ T7351] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 84.668607][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 84.670038][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 84.671453][ T7351] __sys_bpf+0xfc6/0x49a0 [ 84.672610][ T7351] __x64_sys_bpf+0x78/0xc0 [ 84.674674][ T7351] do_syscall_64+0xcd/0x250 [ 84.676127][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.677920][ T7351] page last free pid 7120 tgid 7120 stack trace: [ 84.679584][ T7351] free_unref_page+0x5f4/0xdc0 [ 84.680944][ T7351] __put_partials+0x14c/0x170 [ 84.682195][ T7351] qlist_free_all+0x4e/0x120 [ 84.683517][ T7351] kasan_quarantine_reduce+0x192/0x1e0 [ 84.685087][ T7351] __kasan_slab_alloc+0x69/0x90 [ 84.686454][ T7351] kmem_cache_alloc_node_noprof+0x153/0x310 [ 84.688385][ T7351] __alloc_skb+0x2b1/0x380 [ 84.689703][ T7351] netlink_alloc_large_skb+0x69/0x130 [ 84.691285][ T7351] netlink_sendmsg+0x689/0xd70 [ 84.692914][ T7351] ____sys_sendmsg+0xaaf/0xc90 [ 84.694224][ T7351] ___sys_sendmsg+0x135/0x1e0 [ 84.695550][ T7351] __sys_sendmsg+0x117/0x1f0 [ 84.696952][ T7351] do_syscall_64+0xcd/0x250 [ 84.698391][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.700307][ T7351] Modules linked in: [ 84.701432][ T7351] CPU: 2 UID: 0 PID: 7351 Comm: syz.0.314 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 84.704857][ T7351] Tainted: [B]=BAD_PAGE [ 84.706007][ T7351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.709053][ T7351] Call Trace: [ 84.710018][ T7351] [ 84.711171][ T7351] dump_stack_lvl+0x16c/0x1f0 [ 84.712488][ T7351] bad_page+0xb3/0x1f0 [ 84.714016][ T7351] ? __pfx_bad_page+0x10/0x10 [ 84.715404][ T7351] ? page_bad_reason+0x9d/0x1e0 [ 84.716757][ T7351] free_unref_page+0x657/0xdc0 [ 84.718298][ T7351] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 84.720023][ T7351] ? __phys_addr+0xc6/0x150 [ 84.721357][ T7351] skb_free_head+0xa0/0x1d0 [ 84.722586][ T7351] skb_release_data+0x560/0x730 [ 84.723899][ T7351] sk_skb_reason_drop+0x129/0x1a0 [ 84.725254][ T7351] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 84.727019][ T7351] ? kernel_text_address+0x8d/0x100 [ 84.728396][ T7351] ? hlock_class+0x4e/0x130 [ 84.729631][ T7351] ? __lock_acquire+0x163e/0x3ce0 [ 84.730961][ T7351] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 84.732847][ T7351] ? hlock_class+0x4e/0x130 [ 84.734061][ T7351] ? __lock_acquire+0xbdd/0x3ce0 [ 84.735366][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 84.736899][ T7351] __netif_receive_skb_list_core+0x357/0x950 [ 84.738491][ T7351] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 84.740680][ T7351] ? trace_lock_acquire+0x14a/0x1d0 [ 84.742340][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 84.744166][ T7351] ? lock_acquire+0x2f/0xb0 [ 84.745543][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 84.747606][ T7351] netif_receive_skb_list_internal+0x753/0xdb0 [ 84.749415][ T7351] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 84.751334][ T7351] ? __pfx_eth_type_trans+0x10/0x10 [ 84.753104][ T7351] ? __build_skb_around+0x278/0x3b0 [ 84.754573][ T7351] netif_receive_skb_list+0x4f/0x4a0 [ 84.755969][ T7351] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 84.757753][ T7351] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 84.759646][ T7351] ? bpf_test_timer_continue+0x150/0x3d0 [ 84.761208][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 84.762604][ T7351] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 84.764156][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 84.765864][ T7351] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 84.767444][ T7351] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 84.769024][ T7351] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 84.770433][ T7351] ? 0xffffffffa0004340 [ 84.771769][ T7351] ? 0xffffffffa0004340 [ 84.773102][ T7351] ? 0xffffffffa0004340 [ 84.774342][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 84.776186][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 84.777663][ T7351] ? lock_acquire+0x2f/0xb0 [ 84.779054][ T7351] ? __fget_files+0x40/0x3f0 [ 84.780520][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 84.782183][ T7351] ? fput+0x30/0x390 [ 84.783237][ T7351] ? __bpf_prog_get+0xa0/0x290 [ 84.784503][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 84.786056][ T7351] __sys_bpf+0xfc6/0x49a0 [ 84.787202][ T7351] ? __pfx_futex_wake+0x10/0x10 [ 84.788497][ T7351] ? __pfx___sys_bpf+0x10/0x10 [ 84.789798][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 84.791157][ T7351] ? do_futex+0x123/0x350 [ 84.792472][ T7351] ? __pfx_do_futex+0x10/0x10 [ 84.793811][ T7351] ? xfd_validate_state+0x5d/0x180 [ 84.795270][ T7351] ? rcu_is_watching+0x12/0xc0 [ 84.796808][ T7351] __x64_sys_bpf+0x78/0xc0 [ 84.798104][ T7351] ? lockdep_hardirqs_on+0x7c/0x110 [ 84.799616][ T7351] do_syscall_64+0xcd/0x250 [ 84.800899][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.802648][ T7351] RIP: 0033:0x7fc02f97e719 [ 84.804152][ T7351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.810579][ T7351] RSP: 002b:00007fc0306bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 84.813793][ T7351] RAX: ffffffffffffffda RBX: 00007fc02fb35f80 RCX: 00007fc02f97e719 [ 84.816069][ T7351] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 84.818427][ T7351] RBP: 00007fc02f9f132e R08: 0000000000000000 R09: 0000000000000000 [ 84.820510][ T7351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.822613][ T7351] R13: 0000000000000000 R14: 00007fc02fb35f80 R15: 00007ffe03613128 [ 84.824908][ T7351] [ 84.825856][ T7351] BUG: Bad page state in process syz.0.314 pfn:5545a [ 84.827652][ T7351] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5545a [ 84.830082][ T7351] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 84.831960][ T7351] raw: 00fff00000000000 dead000000000040 ffff888040826000 0000000000000000 [ 84.834536][ T7351] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 84.837028][ T7351] page dumped because: page_pool leak [ 84.838862][ T7351] page_owner tracks the page as allocated [ 84.840839][ T7351] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7351, tgid 7350 (syz.0.314), ts 79036829541, free_ts 78916094224 [ 84.845187][ T7351] post_alloc_hook+0x2d1/0x350 [ 84.846539][ T7351] get_page_from_freelist+0x101e/0x3070 [ 84.848069][ T7351] __alloc_pages_noprof+0x223/0x25a0 [ 84.849478][ T7351] alloc_pages_bulk_noprof+0x77c/0x1110 [ 84.850998][ T7351] __page_pool_alloc_pages_slow+0x18f/0x770 [ 84.852651][ T7351] page_pool_alloc_netmem+0xc4/0x160 [ 84.854158][ T7351] page_pool_alloc_pages+0x1a/0x60 [ 84.855866][ T7351] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 84.857992][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 84.859908][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 84.861483][ T7351] __sys_bpf+0xfc6/0x49a0 [ 84.862827][ T7351] __x64_sys_bpf+0x78/0xc0 [ 84.864130][ T7351] do_syscall_64+0xcd/0x250 [ 84.865390][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.866972][ T7351] page last free pid 7337 tgid 7337 stack trace: [ 84.868723][ T7351] free_unref_page+0x5f4/0xdc0 [ 84.870014][ T7351] __put_partials+0x14c/0x170 [ 84.871426][ T7351] qlist_free_all+0x4e/0x120 [ 84.872668][ T7351] kasan_quarantine_reduce+0x192/0x1e0 [ 84.874150][ T7351] __kasan_slab_alloc+0x69/0x90 [ 84.875555][ T7351] __kmalloc_noprof+0x199/0x400 [ 84.877306][ T7351] tomoyo_realpath_from_path+0xb9/0x720 [ 84.878997][ T7351] tomoyo_realpath_nofollow+0xdd/0x100 [ 84.880444][ T7351] tomoyo_find_next_domain+0x2ad/0x2070 [ 84.882007][ T7351] tomoyo_bprm_check_security+0x12b/0x1d0 [ 84.883451][ T7351] security_bprm_check+0x1b9/0x1e0 [ 84.884820][ T7351] bprm_execve+0x642/0x1960 [ 84.886069][ T7351] do_execveat_common.isra.0+0x4f1/0x630 [ 84.887808][ T7351] __x64_sys_execve+0x8c/0xb0 [ 84.889234][ T7351] do_syscall_64+0xcd/0x250 [ 84.890562][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.892220][ T7351] Modules linked in: [ 84.893345][ T7351] CPU: 2 UID: 0 PID: 7351 Comm: syz.0.314 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 84.896423][ T7351] Tainted: [B]=BAD_PAGE [ 84.897780][ T7351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.900601][ T7351] Call Trace: [ 84.901821][ T7351] [ 84.902589][ T7351] dump_stack_lvl+0x16c/0x1f0 [ 84.903893][ T7351] bad_page+0xb3/0x1f0 [ 84.904979][ T7351] ? __pfx_bad_page+0x10/0x10 [ 84.906328][ T7351] ? page_bad_reason+0x9d/0x1e0 [ 84.907712][ T7351] free_unref_page+0x657/0xdc0 [ 84.909058][ T7351] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 84.910674][ T7351] ? __phys_addr+0xc6/0x150 [ 84.911888][ T7351] skb_free_head+0xa0/0x1d0 [ 84.913134][ T7351] skb_release_data+0x560/0x730 [ 84.914467][ T7351] sk_skb_reason_drop+0x129/0x1a0 [ 84.915840][ T7351] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 84.917639][ T7351] ? kernel_text_address+0x8d/0x100 [ 84.919010][ T7351] ? hlock_class+0x4e/0x130 [ 84.920202][ T7351] ? __lock_acquire+0x163e/0x3ce0 [ 84.921535][ T7351] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 84.923472][ T7351] ? hlock_class+0x4e/0x130 [ 84.924761][ T7351] ? __lock_acquire+0xbdd/0x3ce0 [ 84.926161][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 84.927626][ T7351] __netif_receive_skb_list_core+0x357/0x950 [ 84.929415][ T7351] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 84.931417][ T7351] ? trace_lock_acquire+0x14a/0x1d0 [ 84.933173][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 84.935251][ T7351] ? lock_acquire+0x2f/0xb0 [ 84.936805][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 84.938853][ T7351] netif_receive_skb_list_internal+0x753/0xdb0 [ 84.940476][ T7351] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 84.942425][ T7351] ? __pfx_eth_type_trans+0x10/0x10 [ 84.943813][ T7351] ? __build_skb_around+0x278/0x3b0 [ 84.945141][ T7351] netif_receive_skb_list+0x4f/0x4a0 [ 84.946531][ T7351] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 84.948182][ T7351] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 84.949954][ T7351] ? bpf_test_timer_continue+0x150/0x3d0 [ 84.951440][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 84.952998][ T7351] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 84.954922][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 84.956601][ T7351] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 84.958214][ T7351] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 84.959733][ T7351] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 84.961137][ T7351] ? 0xffffffffa0004340 [ 84.962230][ T7351] ? 0xffffffffa0004340 [ 84.963261][ T7351] ? 0xffffffffa0004340 [ 84.964387][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 84.966014][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 84.967429][ T7351] ? lock_acquire+0x2f/0xb0 [ 84.968650][ T7351] ? __fget_files+0x40/0x3f0 [ 84.969850][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 84.971388][ T7351] ? fput+0x30/0x390 [ 84.972445][ T7351] ? __bpf_prog_get+0xa0/0x290 [ 84.973755][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 84.975331][ T7351] __sys_bpf+0xfc6/0x49a0 [ 84.976515][ T7351] ? __pfx_futex_wake+0x10/0x10 [ 84.977854][ T7351] ? __pfx___sys_bpf+0x10/0x10 [ 84.979159][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 84.980568][ T7351] ? do_futex+0x123/0x350 [ 84.981755][ T7351] ? __pfx_do_futex+0x10/0x10 [ 84.982983][ T7351] ? xfd_validate_state+0x5d/0x180 [ 84.984276][ T7351] ? rcu_is_watching+0x12/0xc0 [ 84.985537][ T7351] __x64_sys_bpf+0x78/0xc0 [ 84.986703][ T7351] ? lockdep_hardirqs_on+0x7c/0x110 [ 84.988064][ T7351] do_syscall_64+0xcd/0x250 [ 84.989285][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.990839][ T7351] RIP: 0033:0x7fc02f97e719 [ 84.992001][ T7351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.997211][ T7351] RSP: 002b:00007fc0306bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 84.999386][ T7351] RAX: ffffffffffffffda RBX: 00007fc02fb35f80 RCX: 00007fc02f97e719 [ 85.001444][ T7351] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 85.003628][ T7351] RBP: 00007fc02f9f132e R08: 0000000000000000 R09: 0000000000000000 [ 85.005837][ T7351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.007931][ T7351] R13: 0000000000000000 R14: 00007fc02fb35f80 R15: 00007ffe03613128 [ 85.010088][ T7351] [ 85.011011][ T7351] BUG: Bad page state in process syz.0.314 pfn:55459 [ 85.013034][ T7351] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x8 pfn:0x55459 [ 85.015476][ T7351] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 85.017427][ T7351] raw: 00fff00000000000 dead000000000040 ffff888040826000 0000000000000000 [ 85.019884][ T7351] raw: 0000000000000008 0000000000000001 00000000ffffffff 0000000000000000 [ 85.022311][ T7351] page dumped because: page_pool leak [ 85.023845][ T7351] page_owner tracks the page as allocated [ 85.025393][ T7351] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7351, tgid 7350 (syz.0.314), ts 79036822491, free_ts 78916094224 [ 85.029807][ T7351] post_alloc_hook+0x2d1/0x350 [ 85.031222][ T7351] get_page_from_freelist+0x101e/0x3070 [ 85.032852][ T7351] __alloc_pages_noprof+0x223/0x25a0 [ 85.034319][ T7351] alloc_pages_bulk_noprof+0x77c/0x1110 [ 85.035768][ T7351] __page_pool_alloc_pages_slow+0x18f/0x770 [ 85.037385][ T7351] page_pool_alloc_netmem+0xc4/0x160 [ 85.038772][ T7351] page_pool_alloc_pages+0x1a/0x60 [ 85.040125][ T7351] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 85.041757][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 85.043150][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 85.044682][ T7351] __sys_bpf+0xfc6/0x49a0 [ 85.045868][ T7351] __x64_sys_bpf+0x78/0xc0 [ 85.047067][ T7351] do_syscall_64+0xcd/0x250 [ 85.048345][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.049900][ T7351] page last free pid 7337 tgid 7337 stack trace: [ 85.051557][ T7351] free_unref_page+0x5f4/0xdc0 [ 85.053065][ T7351] __put_partials+0x14c/0x170 [ 85.054524][ T7351] qlist_free_all+0x4e/0x120 [ 85.055790][ T7351] kasan_quarantine_reduce+0x192/0x1e0 [ 85.057312][ T7351] __kasan_slab_alloc+0x69/0x90 [ 85.058604][ T7351] __kmalloc_noprof+0x199/0x400 [ 85.059903][ T7351] tomoyo_realpath_from_path+0xb9/0x720 [ 85.061382][ T7351] tomoyo_realpath_nofollow+0xdd/0x100 [ 85.062945][ T7351] tomoyo_find_next_domain+0x2ad/0x2070 [ 85.064365][ T7351] tomoyo_bprm_check_security+0x12b/0x1d0 [ 85.065820][ T7351] security_bprm_check+0x1b9/0x1e0 [ 85.067220][ T7351] bprm_execve+0x642/0x1960 [ 85.068441][ T7351] do_execveat_common.isra.0+0x4f1/0x630 [ 85.069979][ T7351] __x64_sys_execve+0x8c/0xb0 [ 85.071367][ T7351] do_syscall_64+0xcd/0x250 [ 85.072718][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.074465][ T7351] Modules linked in: [ 85.075725][ T7351] CPU: 2 UID: 0 PID: 7351 Comm: syz.0.314 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 85.079382][ T7351] Tainted: [B]=BAD_PAGE [ 85.080554][ T7351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.083502][ T7351] Call Trace: [ 85.084401][ T7351] [ 85.085190][ T7351] dump_stack_lvl+0x16c/0x1f0 [ 85.086430][ T7351] bad_page+0xb3/0x1f0 [ 85.087500][ T7351] ? __pfx_bad_page+0x10/0x10 [ 85.088761][ T7351] ? page_bad_reason+0x9d/0x1e0 [ 85.090078][ T7351] free_unref_page+0x657/0xdc0 [ 85.091331][ T7351] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 85.092924][ T7351] ? __phys_addr+0xc6/0x150 [ 85.094122][ T7351] skb_free_head+0xa0/0x1d0 [ 85.095285][ T7351] skb_release_data+0x560/0x730 [ 85.096555][ T7351] sk_skb_reason_drop+0x129/0x1a0 [ 85.097873][ T7351] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 85.099625][ T7351] ? kernel_text_address+0x8d/0x100 [ 85.101295][ T7351] ? hlock_class+0x4e/0x130 [ 85.102483][ T7351] ? __lock_acquire+0x163e/0x3ce0 [ 85.103829][ T7351] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 85.105717][ T7351] ? hlock_class+0x4e/0x130 [ 85.106915][ T7351] ? __lock_acquire+0xbdd/0x3ce0 [ 85.108216][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 85.109600][ T7351] __netif_receive_skb_list_core+0x357/0x950 [ 85.111199][ T7351] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 85.112905][ T7351] ? trace_lock_acquire+0x14a/0x1d0 [ 85.114295][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 85.115953][ T7351] ? lock_acquire+0x2f/0xb0 [ 85.117557][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 85.119333][ T7351] netif_receive_skb_list_internal+0x753/0xdb0 [ 85.120978][ T7351] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 85.122752][ T7351] ? __pfx_eth_type_trans+0x10/0x10 [ 85.124073][ T7351] ? __build_skb_around+0x278/0x3b0 [ 85.125387][ T7351] netif_receive_skb_list+0x4f/0x4a0 [ 85.126720][ T7351] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 85.128288][ T7351] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 85.130005][ T7351] ? bpf_test_timer_continue+0x150/0x3d0 [ 85.131489][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 85.132870][ T7351] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 85.134403][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 85.135942][ T7351] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 85.137495][ T7351] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 85.139396][ T7351] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 85.140978][ T7351] ? 0xffffffffa0004340 [ 85.142049][ T7351] ? 0xffffffffa0004340 [ 85.143100][ T7351] ? 0xffffffffa0004340 [ 85.144238][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 85.145984][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 85.147695][ T7351] ? lock_acquire+0x2f/0xb0 [ 85.149189][ T7351] ? __fget_files+0x40/0x3f0 [ 85.150555][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 85.152184][ T7351] ? fput+0x30/0x390 [ 85.153276][ T7351] ? __bpf_prog_get+0xa0/0x290 [ 85.154493][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 85.156039][ T7351] __sys_bpf+0xfc6/0x49a0 [ 85.157142][ T7351] ? __pfx_futex_wake+0x10/0x10 [ 85.158442][ T7351] ? __pfx___sys_bpf+0x10/0x10 [ 85.159669][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 85.161285][ T7351] ? do_futex+0x123/0x350 [ 85.162531][ T7351] ? __pfx_do_futex+0x10/0x10 [ 85.163714][ T7351] ? xfd_validate_state+0x5d/0x180 [ 85.165018][ T7351] ? rcu_is_watching+0x12/0xc0 [ 85.166228][ T7351] __x64_sys_bpf+0x78/0xc0 [ 85.167347][ T7351] ? lockdep_hardirqs_on+0x7c/0x110 [ 85.168655][ T7351] do_syscall_64+0xcd/0x250 [ 85.169816][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.171310][ T7351] RIP: 0033:0x7fc02f97e719 [ 85.172439][ T7351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.177388][ T7351] RSP: 002b:00007fc0306bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 85.179612][ T7351] RAX: ffffffffffffffda RBX: 00007fc02fb35f80 RCX: 00007fc02f97e719 [ 85.181581][ T7351] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 85.183547][ T7351] RBP: 00007fc02f9f132e R08: 0000000000000000 R09: 0000000000000000 [ 85.185535][ T7351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.187589][ T7351] R13: 0000000000000000 R14: 00007fc02fb35f80 R15: 00007ffe03613128 [ 85.189612][ T7351] [ 85.190482][ T7351] BUG: Bad page state in process syz.0.314 pfn:55458 [ 85.192192][ T7351] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805545e000 pfn:0x55458 [ 85.195084][ T7351] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 85.196959][ T7351] raw: 00fff00000000000 dead000000000040 ffff888040826000 0000000000000000 [ 85.199319][ T7351] raw: ffff88805545e000 0000000000000001 00000000ffffffff 0000000000000000 [ 85.201828][ T7351] page dumped because: page_pool leak [ 85.203568][ T7351] page_owner tracks the page as allocated [ 85.205262][ T7351] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7351, tgid 7350 (syz.0.314), ts 79036815183, free_ts 78916094224 [ 85.209913][ T7351] post_alloc_hook+0x2d1/0x350 [ 85.211204][ T7351] get_page_from_freelist+0x101e/0x3070 [ 85.212671][ T7351] __alloc_pages_noprof+0x223/0x25a0 [ 85.214074][ T7351] alloc_pages_bulk_noprof+0x77c/0x1110 [ 85.215530][ T7351] __page_pool_alloc_pages_slow+0x18f/0x770 [ 85.217157][ T7351] page_pool_alloc_netmem+0xc4/0x160 [ 85.218545][ T7351] page_pool_alloc_pages+0x1a/0x60 [ 85.219892][ T7351] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 85.221531][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 85.222941][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 85.224398][ T7351] __sys_bpf+0xfc6/0x49a0 [ 85.225570][ T7351] __x64_sys_bpf+0x78/0xc0 [ 85.226763][ T7351] do_syscall_64+0xcd/0x250 [ 85.228044][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.229643][ T7351] page last free pid 7337 tgid 7337 stack trace: [ 85.231410][ T7351] free_unref_page+0x5f4/0xdc0 [ 85.232779][ T7351] __put_partials+0x14c/0x170 [ 85.234099][ T7351] qlist_free_all+0x4e/0x120 [ 85.235404][ T7351] kasan_quarantine_reduce+0x192/0x1e0 [ 85.236977][ T7351] __kasan_slab_alloc+0x69/0x90 [ 85.238439][ T7351] __kmalloc_noprof+0x199/0x400 [ 85.240109][ T7351] tomoyo_realpath_from_path+0xb9/0x720 [ 85.241986][ T7351] tomoyo_realpath_nofollow+0xdd/0x100 [ 85.243489][ T7351] tomoyo_find_next_domain+0x2ad/0x2070 [ 85.244880][ T7351] tomoyo_bprm_check_security+0x12b/0x1d0 [ 85.246475][ T7351] security_bprm_check+0x1b9/0x1e0 [ 85.247887][ T7351] bprm_execve+0x642/0x1960 [ 85.249062][ T7351] do_execveat_common.isra.0+0x4f1/0x630 [ 85.250477][ T7351] __x64_sys_execve+0x8c/0xb0 [ 85.251692][ T7351] do_syscall_64+0xcd/0x250 [ 85.252852][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.254347][ T7351] Modules linked in: [ 85.255342][ T7351] CPU: 2 UID: 0 PID: 7351 Comm: syz.0.314 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 85.258442][ T7351] Tainted: [B]=BAD_PAGE [ 85.259532][ T7351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.262327][ T7351] Call Trace: [ 85.263205][ T7351] [ 85.263991][ T7351] dump_stack_lvl+0x16c/0x1f0 [ 85.265249][ T7351] bad_page+0xb3/0x1f0 [ 85.266330][ T7351] ? __pfx_bad_page+0x10/0x10 [ 85.267575][ T7351] ? page_bad_reason+0x9d/0x1e0 [ 85.268880][ T7351] free_unref_page+0x657/0xdc0 [ 85.270142][ T7351] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 85.271727][ T7351] ? __phys_addr+0xc6/0x150 [ 85.272978][ T7351] skb_free_head+0xa0/0x1d0 [ 85.274233][ T7351] skb_release_data+0x560/0x730 [ 85.275569][ T7351] sk_skb_reason_drop+0x129/0x1a0 [ 85.276980][ T7351] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 85.278855][ T7351] ? kernel_text_address+0x8d/0x100 [ 85.280358][ T7351] ? hlock_class+0x4e/0x130 [ 85.281706][ T7351] ? __lock_acquire+0x163e/0x3ce0 [ 85.283142][ T7351] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 85.284907][ T7351] ? hlock_class+0x4e/0x130 [ 85.286047][ T7351] ? __lock_acquire+0xbdd/0x3ce0 [ 85.287291][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 85.288608][ T7351] __netif_receive_skb_list_core+0x357/0x950 [ 85.290123][ T7351] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 85.291803][ T7351] ? trace_lock_acquire+0x14a/0x1d0 [ 85.293133][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 85.294887][ T7351] ? lock_acquire+0x2f/0xb0 [ 85.296055][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 85.297662][ T7351] netif_receive_skb_list_internal+0x753/0xdb0 [ 85.299329][ T7351] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 85.301016][ T7351] ? __pfx_eth_type_trans+0x10/0x10 [ 85.302494][ T7351] ? __build_skb_around+0x278/0x3b0 [ 85.303808][ T7351] netif_receive_skb_list+0x4f/0x4a0 [ 85.305183][ T7351] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 85.306758][ T7351] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 85.308406][ T7351] ? bpf_test_timer_continue+0x150/0x3d0 [ 85.309836][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 85.311166][ T7351] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 85.312639][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 85.314136][ T7351] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 85.315636][ T7351] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 85.317116][ T7351] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 85.318447][ T7351] ? 0xffffffffa0004340 [ 85.319512][ T7351] ? 0xffffffffa0004340 [ 85.320590][ T7351] ? 0xffffffffa0004340 [ 85.321713][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 85.323298][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 85.324744][ T7351] ? lock_acquire+0x2f/0xb0 [ 85.325946][ T7351] ? __fget_files+0x40/0x3f0 [ 85.327151][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 85.328699][ T7351] ? fput+0x30/0x390 [ 85.329753][ T7351] ? __bpf_prog_get+0xa0/0x290 [ 85.331066][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 85.332643][ T7351] __sys_bpf+0xfc6/0x49a0 [ 85.333783][ T7351] ? __pfx_futex_wake+0x10/0x10 [ 85.335086][ T7351] ? __pfx___sys_bpf+0x10/0x10 [ 85.336329][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 85.337736][ T7351] ? do_futex+0x123/0x350 [ 85.338916][ T7351] ? __pfx_do_futex+0x10/0x10 [ 85.340175][ T7351] ? xfd_validate_state+0x5d/0x180 [ 85.341541][ T7351] ? rcu_is_watching+0x12/0xc0 [ 85.342743][ T7351] __x64_sys_bpf+0x78/0xc0 [ 85.343854][ T7351] ? lockdep_hardirqs_on+0x7c/0x110 [ 85.345149][ T7351] do_syscall_64+0xcd/0x250 [ 85.346292][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.347896][ T7351] RIP: 0033:0x7fc02f97e719 [ 85.349104][ T7351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.354030][ T7351] RSP: 002b:00007fc0306bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 85.356065][ T7351] RAX: ffffffffffffffda RBX: 00007fc02fb35f80 RCX: 00007fc02f97e719 [ 85.358087][ T7351] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 85.360153][ T7351] RBP: 00007fc02f9f132e R08: 0000000000000000 R09: 0000000000000000 [ 85.362207][ T7351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.364208][ T7351] R13: 0000000000000000 R14: 00007fc02fb35f80 R15: 00007ffe03613128 [ 85.366220][ T7351] [ 85.367136][ T7351] BUG: Bad page state in process syz.0.314 pfn:55457 [ 85.368805][ T7351] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x55457 [ 85.370946][ T7351] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 85.372714][ T7351] raw: 00fff00000000000 dead000000000040 ffff888040826000 0000000000000000 [ 85.376000][ T7351] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 85.378826][ T7351] page dumped because: page_pool leak [ 85.380362][ T7351] page_owner tracks the page as allocated [ 85.382126][ T7351] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7351, tgid 7350 (syz.0.314), ts 79036805554, free_ts 78878899723 [ 85.386471][ T7351] post_alloc_hook+0x2d1/0x350 [ 85.387795][ T7351] get_page_from_freelist+0x101e/0x3070 [ 85.389259][ T7351] __alloc_pages_noprof+0x223/0x25a0 [ 85.390641][ T7351] alloc_pages_bulk_noprof+0x77c/0x1110 [ 85.392020][ T7351] __page_pool_alloc_pages_slow+0x18f/0x770 [ 85.393543][ T7351] page_pool_alloc_netmem+0xc4/0x160 [ 85.394893][ T7351] page_pool_alloc_pages+0x1a/0x60 [ 85.396172][ T7351] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 85.397864][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 85.399232][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 85.400638][ T7351] __sys_bpf+0xfc6/0x49a0 [ 85.401794][ T7351] __x64_sys_bpf+0x78/0xc0 [ 85.402979][ T7351] do_syscall_64+0xcd/0x250 [ 85.404162][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.405796][ T7351] page last free pid 7297 tgid 7297 stack trace: [ 85.407439][ T7351] free_unref_page+0x5f4/0xdc0 [ 85.408679][ T7351] __put_partials+0x14c/0x170 [ 85.409917][ T7351] qlist_free_all+0x4e/0x120 [ 85.411073][ T7351] kasan_quarantine_reduce+0x192/0x1e0 [ 85.412419][ T7351] __kasan_slab_alloc+0x69/0x90 [ 85.413657][ T7351] kmem_cache_alloc_noprof+0x121/0x2f0 [ 85.415015][ T7351] taskstats_exit+0x656/0xbe0 [ 85.416171][ T7351] do_exit+0x84a/0x2d70 [ 85.417272][ T7351] do_group_exit+0xd3/0x2a0 [ 85.418410][ T7351] __x64_sys_exit_group+0x3e/0x50 [ 85.419680][ T7351] x64_sys_call+0x14a9/0x16a0 [ 85.420883][ T7351] do_syscall_64+0xcd/0x250 [ 85.422022][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.423516][ T7351] Modules linked in: [ 85.424520][ T7351] CPU: 2 UID: 0 PID: 7351 Comm: syz.0.314 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 85.427472][ T7351] Tainted: [B]=BAD_PAGE [ 85.428526][ T7351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.431145][ T7351] Call Trace: [ 85.431995][ T7351] [ 85.432751][ T7351] dump_stack_lvl+0x16c/0x1f0 [ 85.433912][ T7351] bad_page+0xb3/0x1f0 [ 85.434952][ T7351] ? __pfx_bad_page+0x10/0x10 [ 85.436138][ T7351] ? page_bad_reason+0x9d/0x1e0 [ 85.437334][ T7351] free_unref_page+0x657/0xdc0 [ 85.438509][ T7351] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 85.440005][ T7351] ? __phys_addr+0xc6/0x150 [ 85.441110][ T7351] skb_free_head+0xa0/0x1d0 [ 85.442247][ T7351] skb_release_data+0x560/0x730 [ 85.443466][ T7351] sk_skb_reason_drop+0x129/0x1a0 [ 85.444709][ T7351] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 85.446350][ T7351] ? kernel_text_address+0x8d/0x100 [ 85.447647][ T7351] ? hlock_class+0x4e/0x130 [ 85.448833][ T7351] ? __lock_acquire+0x163e/0x3ce0 [ 85.450105][ T7351] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 85.451882][ T7351] ? hlock_class+0x4e/0x130 [ 85.453037][ T7351] ? __lock_acquire+0xbdd/0x3ce0 [ 85.454239][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 85.455509][ T7351] __netif_receive_skb_list_core+0x357/0x950 [ 85.457015][ T7351] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 85.458607][ T7351] ? trace_lock_acquire+0x14a/0x1d0 [ 85.459909][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 85.461499][ T7351] ? lock_acquire+0x2f/0xb0 [ 85.462642][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 85.464204][ T7351] netif_receive_skb_list_internal+0x753/0xdb0 [ 85.465761][ T7351] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 85.467477][ T7351] ? __pfx_eth_type_trans+0x10/0x10 [ 85.468942][ T7351] ? __build_skb_around+0x278/0x3b0 [ 85.470465][ T7351] netif_receive_skb_list+0x4f/0x4a0 [ 85.471904][ T7351] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 85.473593][ T7351] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 85.475275][ T7351] ? bpf_test_timer_continue+0x150/0x3d0 [ 85.476678][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 85.478052][ T7351] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 85.479495][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 85.481020][ T7351] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 85.482550][ T7351] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 85.484068][ T7351] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 85.485468][ T7351] ? 0xffffffffa0004340 [ 85.486560][ T7351] ? 0xffffffffa0004340 [ 85.487647][ T7351] ? 0xffffffffa0004340 [ 85.488774][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 85.490421][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 85.492069][ T7351] ? lock_acquire+0x2f/0xb0 [ 85.493555][ T7351] ? __fget_files+0x40/0x3f0 [ 85.495047][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 85.496912][ T7351] ? fput+0x30/0x390 [ 85.498081][ T7351] ? __bpf_prog_get+0xa0/0x290 [ 85.499331][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 85.500904][ T7351] __sys_bpf+0xfc6/0x49a0 [ 85.502036][ T7351] ? __pfx_futex_wake+0x10/0x10 [ 85.503303][ T7351] ? __pfx___sys_bpf+0x10/0x10 [ 85.504571][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 85.505948][ T7351] ? do_futex+0x123/0x350 [ 85.507082][ T7351] ? __pfx_do_futex+0x10/0x10 [ 85.508325][ T7351] ? xfd_validate_state+0x5d/0x180 [ 85.509703][ T7351] ? rcu_is_watching+0x12/0xc0 [ 85.510969][ T7351] __x64_sys_bpf+0x78/0xc0 [ 85.512160][ T7351] ? lockdep_hardirqs_on+0x7c/0x110 [ 85.513544][ T7351] do_syscall_64+0xcd/0x250 [ 85.514747][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.516298][ T7351] RIP: 0033:0x7fc02f97e719 [ 85.517430][ T7351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.522709][ T7351] RSP: 002b:00007fc0306bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 85.524924][ T7351] RAX: ffffffffffffffda RBX: 00007fc02fb35f80 RCX: 00007fc02f97e719 [ 85.527208][ T7351] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 85.529636][ T7351] RBP: 00007fc02f9f132e R08: 0000000000000000 R09: 0000000000000000 [ 85.532161][ T7351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.534700][ T7351] R13: 0000000000000000 R14: 00007fc02fb35f80 R15: 00007ffe03613128 [ 85.536771][ T7351] [ 85.537665][ T7351] BUG: Bad page state in process syz.0.314 pfn:55456 [ 85.539385][ T7351] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x55456 [ 85.541713][ T7351] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 85.543600][ T7351] raw: 00fff00000000000 dead000000000040 ffff888040826000 0000000000000000 [ 85.546096][ T7351] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 85.548467][ T7351] page dumped because: page_pool leak [ 85.550167][ T7351] page_owner tracks the page as allocated [ 85.551864][ T7351] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7351, tgid 7350 (syz.0.314), ts 79036774721, free_ts 78878899723 [ 85.556611][ T7351] post_alloc_hook+0x2d1/0x350 [ 85.558160][ T7351] get_page_from_freelist+0x101e/0x3070 [ 85.560264][ T7351] __alloc_pages_noprof+0x223/0x25a0 [ 85.561857][ T7351] alloc_pages_bulk_noprof+0x77c/0x1110 [ 85.563303][ T7351] __page_pool_alloc_pages_slow+0x18f/0x770 [ 85.564873][ T7351] page_pool_alloc_netmem+0xc4/0x160 [ 85.566348][ T7351] page_pool_alloc_pages+0x1a/0x60 [ 85.567765][ T7351] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 85.569407][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 85.570803][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 85.572243][ T7351] __sys_bpf+0xfc6/0x49a0 [ 85.573417][ T7351] __x64_sys_bpf+0x78/0xc0 [ 85.574620][ T7351] do_syscall_64+0xcd/0x250 [ 85.575878][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.577578][ T7351] page last free pid 7297 tgid 7297 stack trace: [ 85.579672][ T7351] free_unref_page+0x5f4/0xdc0 [ 85.581128][ T7351] __put_partials+0x14c/0x170 [ 85.582462][ T7351] qlist_free_all+0x4e/0x120 [ 85.584054][ T7351] kasan_quarantine_reduce+0x192/0x1e0 [ 85.585916][ T7351] __kasan_slab_alloc+0x69/0x90 [ 85.587668][ T7351] kmem_cache_alloc_noprof+0x121/0x2f0 [ 85.589256][ T7351] taskstats_exit+0x656/0xbe0 [ 85.590493][ T7351] do_exit+0x84a/0x2d70 [ 85.591609][ T7351] do_group_exit+0xd3/0x2a0 [ 85.592800][ T7351] __x64_sys_exit_group+0x3e/0x50 [ 85.594124][ T7351] x64_sys_call+0x14a9/0x16a0 [ 85.595374][ T7351] do_syscall_64+0xcd/0x250 [ 85.596585][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.598222][ T7351] Modules linked in: [ 85.599275][ T7351] CPU: 2 UID: 0 PID: 7351 Comm: syz.0.314 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 85.602424][ T7351] Tainted: [B]=BAD_PAGE [ 85.603523][ T7351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.606330][ T7351] Call Trace: [ 85.607233][ T7351] [ 85.607937][ T7351] dump_stack_lvl+0x16c/0x1f0 [ 85.609202][ T7351] bad_page+0xb3/0x1f0 [ 85.610229][ T7351] ? __pfx_bad_page+0x10/0x10 [ 85.611443][ T7351] ? page_bad_reason+0x9d/0x1e0 [ 85.612698][ T7351] free_unref_page+0x657/0xdc0 [ 85.613916][ T7351] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 85.615426][ T7351] ? __phys_addr+0xc6/0x150 [ 85.616605][ T7351] skb_free_head+0xa0/0x1d0 [ 85.617804][ T7351] skb_release_data+0x560/0x730 [ 85.619069][ T7351] sk_skb_reason_drop+0x129/0x1a0 [ 85.620421][ T7351] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 85.622386][ T7351] ? kernel_text_address+0x8d/0x100 [ 85.623904][ T7351] ? hlock_class+0x4e/0x130 [ 85.625231][ T7351] ? __lock_acquire+0x163e/0x3ce0 [ 85.626772][ T7351] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 85.628695][ T7351] ? hlock_class+0x4e/0x130 [ 85.629887][ T7351] ? __lock_acquire+0xbdd/0x3ce0 [ 85.631166][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 85.632525][ T7351] __netif_receive_skb_list_core+0x357/0x950 [ 85.634319][ T7351] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 85.636271][ T7351] ? trace_lock_acquire+0x14a/0x1d0 [ 85.638037][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 85.640084][ T7351] ? lock_acquire+0x2f/0xb0 [ 85.641422][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 85.643182][ T7351] netif_receive_skb_list_internal+0x753/0xdb0 [ 85.644842][ T7351] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 85.646644][ T7351] ? __pfx_eth_type_trans+0x10/0x10 [ 85.648038][ T7351] ? __build_skb_around+0x278/0x3b0 [ 85.649467][ T7351] netif_receive_skb_list+0x4f/0x4a0 [ 85.651041][ T7351] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 85.652894][ T7351] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 85.654916][ T7351] ? bpf_test_timer_continue+0x150/0x3d0 [ 85.656619][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 85.658236][ T7351] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 85.659891][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 85.661809][ T7351] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 85.663569][ T7351] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 85.665159][ T7351] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 85.666539][ T7351] ? 0xffffffffa0004340 [ 85.667643][ T7351] ? 0xffffffffa0004340 [ 85.668767][ T7351] ? 0xffffffffa0004340 [ 85.669887][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 85.671499][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 85.673041][ T7351] ? lock_acquire+0x2f/0xb0 [ 85.674323][ T7351] ? __fget_files+0x40/0x3f0 [ 85.675597][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 85.677243][ T7351] ? fput+0x30/0x390 [ 85.678348][ T7351] ? __bpf_prog_get+0xa0/0x290 [ 85.679710][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 85.681546][ T7351] __sys_bpf+0xfc6/0x49a0 [ 85.682809][ T7351] ? __pfx_futex_wake+0x10/0x10 [ 85.684192][ T7351] ? __pfx___sys_bpf+0x10/0x10 [ 85.685479][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 85.686893][ T7351] ? do_futex+0x123/0x350 [ 85.688026][ T7351] ? __pfx_do_futex+0x10/0x10 [ 85.689304][ T7351] ? xfd_validate_state+0x5d/0x180 [ 85.690658][ T7351] ? rcu_is_watching+0x12/0xc0 [ 85.691921][ T7351] __x64_sys_bpf+0x78/0xc0 [ 85.693066][ T7351] ? lockdep_hardirqs_on+0x7c/0x110 [ 85.694386][ T7351] do_syscall_64+0xcd/0x250 [ 85.695550][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.697244][ T7351] RIP: 0033:0x7fc02f97e719 [ 85.698594][ T7351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.703877][ T7351] RSP: 002b:00007fc0306bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 85.706060][ T7351] RAX: ffffffffffffffda RBX: 00007fc02fb35f80 RCX: 00007fc02f97e719 [ 85.708011][ T7351] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 85.710049][ T7351] RBP: 00007fc02f9f132e R08: 0000000000000000 R09: 0000000000000000 [ 85.712067][ T7351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.714050][ T7351] R13: 0000000000000000 R14: 00007fc02fb35f80 R15: 00007ffe03613128 [ 85.716090][ T7351] [ 85.716972][ T7351] BUG: Bad page state in process syz.0.314 pfn:55455 [ 85.718695][ T7351] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x55455 [ 85.720963][ T7351] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 85.722871][ T7351] raw: 00fff00000000000 dead000000000040 ffff888040826000 0000000000000000 [ 85.725162][ T7351] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 85.727514][ T7351] page dumped because: page_pool leak [ 85.729023][ T7351] page_owner tracks the page as allocated [ 85.730520][ T7351] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7351, tgid 7350 (syz.0.314), ts 79036766534, free_ts 78878899723 [ 85.734846][ T7351] post_alloc_hook+0x2d1/0x350 [ 85.736047][ T7351] get_page_from_freelist+0x101e/0x3070 [ 85.737505][ T7351] __alloc_pages_noprof+0x223/0x25a0 [ 85.738823][ T7351] alloc_pages_bulk_noprof+0x77c/0x1110 [ 85.740266][ T7351] __page_pool_alloc_pages_slow+0x18f/0x770 [ 85.741976][ T7351] page_pool_alloc_netmem+0xc4/0x160 [ 85.743312][ T7351] page_pool_alloc_pages+0x1a/0x60 [ 85.744670][ T7351] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 85.746427][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 85.748022][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 85.749628][ T7351] __sys_bpf+0xfc6/0x49a0 [ 85.750897][ T7351] __x64_sys_bpf+0x78/0xc0 [ 85.752127][ T7351] do_syscall_64+0xcd/0x250 [ 85.753340][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.754906][ T7351] page last free pid 7297 tgid 7297 stack trace: [ 85.756687][ T7351] free_unref_page+0x5f4/0xdc0 [ 85.758050][ T7351] __put_partials+0x14c/0x170 [ 85.759325][ T7351] qlist_free_all+0x4e/0x120 [ 85.760545][ T7351] kasan_quarantine_reduce+0x192/0x1e0 [ 85.762002][ T7351] __kasan_slab_alloc+0x69/0x90 [ 85.763394][ T7351] kmem_cache_alloc_noprof+0x121/0x2f0 [ 85.764862][ T7351] taskstats_exit+0x656/0xbe0 [ 85.766175][ T7351] do_exit+0x84a/0x2d70 [ 85.767427][ T7351] do_group_exit+0xd3/0x2a0 [ 85.768760][ T7351] __x64_sys_exit_group+0x3e/0x50 [ 85.770178][ T7351] x64_sys_call+0x14a9/0x16a0 [ 85.771522][ T7351] do_syscall_64+0xcd/0x250 [ 85.772858][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.774488][ T7351] Modules linked in: [ 85.776128][ T7351] CPU: 2 UID: 0 PID: 7351 Comm: syz.0.314 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 85.779284][ T7351] Tainted: [B]=BAD_PAGE [ 85.780394][ T7351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.783694][ T7351] Call Trace: [ 85.784617][ T7351] [ 85.785477][ T7351] dump_stack_lvl+0x16c/0x1f0 [ 85.786941][ T7351] bad_page+0xb3/0x1f0 [ 85.788231][ T7351] ? __pfx_bad_page+0x10/0x10 [ 85.789647][ T7351] ? page_bad_reason+0x9d/0x1e0 [ 85.791105][ T7351] free_unref_page+0x657/0xdc0 [ 85.792601][ T7351] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 85.794428][ T7351] ? __phys_addr+0xc6/0x150 [ 85.795642][ T7351] skb_free_head+0xa0/0x1d0 [ 85.796846][ T7351] skb_release_data+0x560/0x730 [ 85.798116][ T7351] sk_skb_reason_drop+0x129/0x1a0 [ 85.799458][ T7351] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 85.801205][ T7351] ? kernel_text_address+0x8d/0x100 [ 85.802683][ T7351] ? hlock_class+0x4e/0x130 [ 85.803903][ T7351] ? __lock_acquire+0x163e/0x3ce0 [ 85.805269][ T7351] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 85.807141][ T7351] ? hlock_class+0x4e/0x130 [ 85.808355][ T7351] ? __lock_acquire+0xbdd/0x3ce0 [ 85.809697][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 85.811068][ T7351] __netif_receive_skb_list_core+0x357/0x950 [ 85.812762][ T7351] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 85.814763][ T7351] ? trace_lock_acquire+0x14a/0x1d0 [ 85.816373][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 85.818352][ T7351] ? lock_acquire+0x2f/0xb0 [ 85.819764][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 85.821806][ T7351] netif_receive_skb_list_internal+0x753/0xdb0 [ 85.823798][ T7351] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 85.825658][ T7351] ? __pfx_eth_type_trans+0x10/0x10 [ 85.827016][ T7351] ? __build_skb_around+0x278/0x3b0 [ 85.828294][ T7351] netif_receive_skb_list+0x4f/0x4a0 [ 85.829685][ T7351] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 85.831216][ T7351] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 85.832905][ T7351] ? bpf_test_timer_continue+0x150/0x3d0 [ 85.834390][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 85.835804][ T7351] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 85.837401][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 85.839391][ T7351] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 85.841486][ T7351] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 85.843158][ T7351] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 85.844562][ T7351] ? 0xffffffffa0004340 [ 85.845670][ T7351] ? 0xffffffffa0004340 [ 85.846782][ T7351] ? 0xffffffffa0004340 [ 85.847876][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 85.849464][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 85.850890][ T7351] ? lock_acquire+0x2f/0xb0 [ 85.852098][ T7351] ? __fget_files+0x40/0x3f0 [ 85.853407][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 85.855252][ T7351] ? fput+0x30/0x390 [ 85.856534][ T7351] ? __bpf_prog_get+0xa0/0x290 [ 85.858031][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 85.859588][ T7351] __sys_bpf+0xfc6/0x49a0 [ 85.860765][ T7351] ? __pfx_futex_wake+0x10/0x10 [ 85.862207][ T7351] ? __pfx___sys_bpf+0x10/0x10 [ 85.863535][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 85.864919][ T7351] ? do_futex+0x123/0x350 [ 85.866058][ T7351] ? __pfx_do_futex+0x10/0x10 [ 85.867286][ T7351] ? xfd_validate_state+0x5d/0x180 [ 85.868559][ T7351] ? rcu_is_watching+0x12/0xc0 [ 85.869959][ T7351] __x64_sys_bpf+0x78/0xc0 [ 85.871184][ T7351] ? lockdep_hardirqs_on+0x7c/0x110 [ 85.872556][ T7351] do_syscall_64+0xcd/0x250 [ 85.873733][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.875259][ T7351] RIP: 0033:0x7fc02f97e719 [ 85.876436][ T7351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.882146][ T7351] RSP: 002b:00007fc0306bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 85.884522][ T7351] RAX: ffffffffffffffda RBX: 00007fc02fb35f80 RCX: 00007fc02f97e719 [ 85.886585][ T7351] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 85.888675][ T7351] RBP: 00007fc02f9f132e R08: 0000000000000000 R09: 0000000000000000 [ 85.890596][ T7351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.892837][ T7351] R13: 0000000000000000 R14: 00007fc02fb35f80 R15: 00007ffe03613128 [ 85.894914][ T7351] [ 85.895804][ T7351] BUG: Bad page state in process syz.0.314 pfn:55454 [ 85.897621][ T7351] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x55454 [ 85.900350][ T7351] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 85.902357][ T7351] raw: 00fff00000000000 dead000000000040 ffff888040826000 0000000000000000 [ 85.905492][ T7351] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 85.908607][ T7351] page dumped because: page_pool leak [ 85.910205][ T7351] page_owner tracks the page as allocated [ 85.911695][ T7351] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7351, tgid 7350 (syz.0.314), ts 79036758960, free_ts 78878899723 [ 85.915919][ T7351] post_alloc_hook+0x2d1/0x350 [ 85.917243][ T7351] get_page_from_freelist+0x101e/0x3070 [ 85.918624][ T7351] __alloc_pages_noprof+0x223/0x25a0 [ 85.919945][ T7351] alloc_pages_bulk_noprof+0x77c/0x1110 [ 85.921299][ T7351] __page_pool_alloc_pages_slow+0x18f/0x770 [ 85.922640][ T7351] page_pool_alloc_netmem+0xc4/0x160 [ 85.923833][ T7351] page_pool_alloc_pages+0x1a/0x60 [ 85.925021][ T7351] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 85.926695][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 85.928058][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 85.929434][ T7351] __sys_bpf+0xfc6/0x49a0 [ 85.930515][ T7351] __x64_sys_bpf+0x78/0xc0 [ 85.931679][ T7351] do_syscall_64+0xcd/0x250 [ 85.932922][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.934773][ T7351] page last free pid 7297 tgid 7297 stack trace: [ 85.936592][ T7351] free_unref_page+0x5f4/0xdc0 [ 85.938144][ T7351] __put_partials+0x14c/0x170 [ 85.940032][ T7351] qlist_free_all+0x4e/0x120 [ 85.941488][ T7351] kasan_quarantine_reduce+0x192/0x1e0 [ 85.943017][ T7351] __kasan_slab_alloc+0x69/0x90 [ 85.944515][ T7351] kmem_cache_alloc_noprof+0x121/0x2f0 [ 85.946060][ T7351] taskstats_exit+0x656/0xbe0 [ 85.947482][ T7351] do_exit+0x84a/0x2d70 [ 85.948664][ T7351] do_group_exit+0xd3/0x2a0 [ 85.950125][ T7351] __x64_sys_exit_group+0x3e/0x50 [ 85.951480][ T7351] x64_sys_call+0x14a9/0x16a0 [ 85.952936][ T7351] do_syscall_64+0xcd/0x250 [ 85.954208][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.955789][ T7351] Modules linked in: [ 85.957079][ T7351] CPU: 2 UID: 0 PID: 7351 Comm: syz.0.314 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 85.960770][ T7351] Tainted: [B]=BAD_PAGE [ 85.961931][ T7351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.965003][ T7351] Call Trace: [ 85.965917][ T7351] [ 85.966711][ T7351] dump_stack_lvl+0x16c/0x1f0 [ 85.967972][ T7351] bad_page+0xb3/0x1f0 [ 85.969026][ T7351] ? __pfx_bad_page+0x10/0x10 [ 85.970277][ T7351] ? page_bad_reason+0x9d/0x1e0 [ 85.971618][ T7351] free_unref_page+0x657/0xdc0 [ 85.972945][ T7351] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 85.974758][ T7351] ? __phys_addr+0xc6/0x150 [ 85.976176][ T7351] skb_free_head+0xa0/0x1d0 [ 85.977738][ T7351] skb_release_data+0x560/0x730 [ 85.979320][ T7351] sk_skb_reason_drop+0x129/0x1a0 [ 85.980687][ T7351] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 85.982460][ T7351] ? kernel_text_address+0x8d/0x100 [ 85.983929][ T7351] ? hlock_class+0x4e/0x130 [ 85.985331][ T7351] ? __lock_acquire+0x163e/0x3ce0 [ 85.986777][ T7351] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 85.988621][ T7351] ? hlock_class+0x4e/0x130 [ 85.989849][ T7351] ? __lock_acquire+0xbdd/0x3ce0 [ 85.991166][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 85.992574][ T7351] __netif_receive_skb_list_core+0x357/0x950 [ 85.994572][ T7351] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 85.996535][ T7351] ? trace_lock_acquire+0x14a/0x1d0 [ 85.997940][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 85.999574][ T7351] ? lock_acquire+0x2f/0xb0 [ 86.000735][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 86.002369][ T7351] netif_receive_skb_list_internal+0x753/0xdb0 [ 86.004006][ T7351] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 86.005884][ T7351] ? __pfx_eth_type_trans+0x10/0x10 [ 86.007213][ T7351] ? __build_skb_around+0x278/0x3b0 [ 86.008544][ T7351] netif_receive_skb_list+0x4f/0x4a0 [ 86.009945][ T7351] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 86.011609][ T7351] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 86.013256][ T7351] ? bpf_test_timer_continue+0x150/0x3d0 [ 86.015550][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 86.017076][ T7351] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 86.019058][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 86.020669][ T7351] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 86.022277][ T7351] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 86.023871][ T7351] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 86.025286][ T7351] ? 0xffffffffa0004340 [ 86.026350][ T7351] ? 0xffffffffa0004340 [ 86.027375][ T7351] ? 0xffffffffa0004340 [ 86.028440][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 86.030022][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 86.031435][ T7351] ? lock_acquire+0x2f/0xb0 [ 86.032634][ T7351] ? __fget_files+0x40/0x3f0 [ 86.033825][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 86.035326][ T7351] ? fput+0x30/0x390 [ 86.036407][ T7351] ? __bpf_prog_get+0xa0/0x290 [ 86.037834][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 86.039600][ T7351] __sys_bpf+0xfc6/0x49a0 [ 86.040787][ T7351] ? __pfx_futex_wake+0x10/0x10 [ 86.042070][ T7351] ? __pfx___sys_bpf+0x10/0x10 [ 86.043306][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 86.044632][ T7351] ? do_futex+0x123/0x350 [ 86.045795][ T7351] ? __pfx_do_futex+0x10/0x10 [ 86.047126][ T7351] ? xfd_validate_state+0x5d/0x180 [ 86.048456][ T7351] ? rcu_is_watching+0x12/0xc0 [ 86.049743][ T7351] __x64_sys_bpf+0x78/0xc0 [ 86.050917][ T7351] ? lockdep_hardirqs_on+0x7c/0x110 [ 86.052333][ T7351] do_syscall_64+0xcd/0x250 [ 86.053611][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.055144][ T7351] RIP: 0033:0x7fc02f97e719 [ 86.056534][ T7351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.062166][ T7351] RSP: 002b:00007fc0306bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 86.064556][ T7351] RAX: ffffffffffffffda RBX: 00007fc02fb35f80 RCX: 00007fc02f97e719 [ 86.066641][ T7351] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 86.068738][ T7351] RBP: 00007fc02f9f132e R08: 0000000000000000 R09: 0000000000000000 [ 86.070812][ T7351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.073023][ T7351] R13: 0000000000000000 R14: 00007fc02fb35f80 R15: 00007ffe03613128 [ 86.075447][ T7351] [ 86.076533][ T7351] BUG: Bad page state in process syz.0.314 pfn:55453 [ 86.078630][ T7351] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x55453 [ 86.080942][ T7351] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 86.082773][ T7351] raw: 00fff00000000000 dead000000000040 ffff888040826000 0000000000000000 [ 86.085050][ T7351] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 86.087386][ T7351] page dumped because: page_pool leak [ 86.088860][ T7351] page_owner tracks the page as allocated [ 86.090377][ T7351] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7351, tgid 7350 (syz.0.314), ts 79036751165, free_ts 78878899723 [ 86.094838][ T7351] post_alloc_hook+0x2d1/0x350 [ 86.096112][ T7351] get_page_from_freelist+0x101e/0x3070 [ 86.097903][ T7351] __alloc_pages_noprof+0x223/0x25a0 [ 86.099529][ T7351] alloc_pages_bulk_noprof+0x77c/0x1110 [ 86.101090][ T7351] __page_pool_alloc_pages_slow+0x18f/0x770 [ 86.102755][ T7351] page_pool_alloc_netmem+0xc4/0x160 [ 86.104227][ T7351] page_pool_alloc_pages+0x1a/0x60 [ 86.105739][ T7351] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 86.107713][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 86.109306][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 86.110868][ T7351] __sys_bpf+0xfc6/0x49a0 [ 86.112132][ T7351] __x64_sys_bpf+0x78/0xc0 [ 86.113417][ T7351] do_syscall_64+0xcd/0x250 [ 86.114622][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.116168][ T7351] page last free pid 7297 tgid 7297 stack trace: [ 86.117831][ T7351] free_unref_page+0x5f4/0xdc0 [ 86.119042][ T7351] __put_partials+0x14c/0x170 [ 86.120353][ T7351] qlist_free_all+0x4e/0x120 [ 86.121535][ T7351] kasan_quarantine_reduce+0x192/0x1e0 [ 86.123021][ T7351] __kasan_slab_alloc+0x69/0x90 [ 86.124266][ T7351] kmem_cache_alloc_noprof+0x121/0x2f0 [ 86.125628][ T7351] taskstats_exit+0x656/0xbe0 [ 86.126820][ T7351] do_exit+0x84a/0x2d70 [ 86.127933][ T7351] do_group_exit+0xd3/0x2a0 [ 86.129124][ T7351] __x64_sys_exit_group+0x3e/0x50 [ 86.130462][ T7351] x64_sys_call+0x14a9/0x16a0 [ 86.131714][ T7351] do_syscall_64+0xcd/0x250 [ 86.132938][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.134447][ T7351] Modules linked in: [ 86.135445][ T7351] CPU: 2 UID: 0 PID: 7351 Comm: syz.0.314 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 86.138973][ T7351] Tainted: [B]=BAD_PAGE [ 86.140110][ T7351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.143316][ T7351] Call Trace: [ 86.144270][ T7351] [ 86.145119][ T7351] dump_stack_lvl+0x16c/0x1f0 [ 86.146381][ T7351] bad_page+0xb3/0x1f0 [ 86.147478][ T7351] ? __pfx_bad_page+0x10/0x10 [ 86.148764][ T7351] ? page_bad_reason+0x9d/0x1e0 [ 86.149994][ T7351] free_unref_page+0x657/0xdc0 [ 86.151196][ T7351] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 86.152798][ T7351] ? __phys_addr+0xc6/0x150 [ 86.154014][ T7351] skb_free_head+0xa0/0x1d0 [ 86.155233][ T7351] skb_release_data+0x560/0x730 [ 86.156538][ T7351] sk_skb_reason_drop+0x129/0x1a0 [ 86.157884][ T7351] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 86.159631][ T7351] ? kernel_text_address+0x8d/0x100 [ 86.160932][ T7351] ? hlock_class+0x4e/0x130 [ 86.162121][ T7351] ? __lock_acquire+0x163e/0x3ce0 [ 86.163374][ T7351] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 86.165147][ T7351] ? hlock_class+0x4e/0x130 [ 86.166356][ T7351] ? __lock_acquire+0xbdd/0x3ce0 [ 86.167679][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 86.169172][ T7351] __netif_receive_skb_list_core+0x357/0x950 [ 86.170945][ T7351] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 86.172847][ T7351] ? trace_lock_acquire+0x14a/0x1d0 [ 86.174329][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 86.176099][ T7351] ? lock_acquire+0x2f/0xb0 [ 86.177321][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 86.179001][ T7351] netif_receive_skb_list_internal+0x753/0xdb0 [ 86.180636][ T7351] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 86.182465][ T7351] ? __pfx_eth_type_trans+0x10/0x10 [ 86.183923][ T7351] ? __build_skb_around+0x278/0x3b0 [ 86.185352][ T7351] netif_receive_skb_list+0x4f/0x4a0 [ 86.186776][ T7351] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 86.188413][ T7351] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 86.190163][ T7351] ? bpf_test_timer_continue+0x150/0x3d0 [ 86.191694][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 86.193400][ T7351] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 86.195276][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 86.197310][ T7351] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 86.199336][ T7351] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 86.200873][ T7351] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 86.202212][ T7351] ? 0xffffffffa0004340 [ 86.203300][ T7351] ? 0xffffffffa0004340 [ 86.204390][ T7351] ? 0xffffffffa0004340 [ 86.205486][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 86.207026][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 86.208436][ T7351] ? lock_acquire+0x2f/0xb0 [ 86.209645][ T7351] ? __fget_files+0x40/0x3f0 [ 86.210861][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 86.212391][ T7351] ? fput+0x30/0x390 [ 86.213907][ T7351] ? __bpf_prog_get+0xa0/0x290 [ 86.215167][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 86.216678][ T7351] __sys_bpf+0xfc6/0x49a0 [ 86.217873][ T7351] ? __pfx_futex_wake+0x10/0x10 [ 86.219116][ T7351] ? __pfx___sys_bpf+0x10/0x10 [ 86.220633][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 86.222196][ T7351] ? do_futex+0x123/0x350 [ 86.223363][ T7351] ? __pfx_do_futex+0x10/0x10 [ 86.224610][ T7351] ? xfd_validate_state+0x5d/0x180 [ 86.225977][ T7351] ? rcu_is_watching+0x12/0xc0 [ 86.227241][ T7351] __x64_sys_bpf+0x78/0xc0 [ 86.228426][ T7351] ? lockdep_hardirqs_on+0x7c/0x110 [ 86.229821][ T7351] do_syscall_64+0xcd/0x250 [ 86.231031][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.232686][ T7351] RIP: 0033:0x7fc02f97e719 [ 86.234049][ T7351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.239546][ T7351] RSP: 002b:00007fc0306bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 86.241917][ T7351] RAX: ffffffffffffffda RBX: 00007fc02fb35f80 RCX: 00007fc02f97e719 [ 86.243913][ T7351] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 86.245868][ T7351] RBP: 00007fc02f9f132e R08: 0000000000000000 R09: 0000000000000000 [ 86.247949][ T7351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.249948][ T7351] R13: 0000000000000000 R14: 00007fc02fb35f80 R15: 00007ffe03613128 [ 86.251948][ T7351] [ 86.252846][ T7351] BUG: Bad page state in process syz.0.314 pfn:55452 [ 86.254544][ T7351] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x55452 [ 86.256820][ T7351] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 86.258681][ T7351] raw: 00fff00000000000 dead000000000040 ffff888040826000 0000000000000000 [ 86.260877][ T7351] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 86.263178][ T7351] page dumped because: page_pool leak [ 86.264580][ T7351] page_owner tracks the page as allocated [ 86.266078][ T7351] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7351, tgid 7350 (syz.0.314), ts 79036743100, free_ts 78878899723 [ 86.270488][ T7351] post_alloc_hook+0x2d1/0x350 [ 86.271766][ T7351] get_page_from_freelist+0x101e/0x3070 [ 86.273244][ T7351] __alloc_pages_noprof+0x223/0x25a0 [ 86.274684][ T7351] alloc_pages_bulk_noprof+0x77c/0x1110 [ 86.276196][ T7351] __page_pool_alloc_pages_slow+0x18f/0x770 [ 86.277916][ T7351] page_pool_alloc_netmem+0xc4/0x160 [ 86.279381][ T7351] page_pool_alloc_pages+0x1a/0x60 [ 86.280840][ T7351] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 86.282514][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 86.284092][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 86.285720][ T7351] __sys_bpf+0xfc6/0x49a0 [ 86.287022][ T7351] __x64_sys_bpf+0x78/0xc0 [ 86.288433][ T7351] do_syscall_64+0xcd/0x250 [ 86.289793][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.291533][ T7351] page last free pid 7297 tgid 7297 stack trace: [ 86.293541][ T7351] free_unref_page+0x5f4/0xdc0 [ 86.295098][ T7351] __put_partials+0x14c/0x170 [ 86.296426][ T7351] qlist_free_all+0x4e/0x120 [ 86.298023][ T7351] kasan_quarantine_reduce+0x192/0x1e0 [ 86.299544][ T7351] __kasan_slab_alloc+0x69/0x90 [ 86.300900][ T7351] kmem_cache_alloc_noprof+0x121/0x2f0 [ 86.302381][ T7351] taskstats_exit+0x656/0xbe0 [ 86.303630][ T7351] do_exit+0x84a/0x2d70 [ 86.304751][ T7351] do_group_exit+0xd3/0x2a0 [ 86.305970][ T7351] __x64_sys_exit_group+0x3e/0x50 [ 86.307378][ T7351] x64_sys_call+0x14a9/0x16a0 [ 86.308657][ T7351] do_syscall_64+0xcd/0x250 [ 86.309939][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.311496][ T7351] Modules linked in: [ 86.312538][ T7351] CPU: 2 UID: 0 PID: 7351 Comm: syz.0.314 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 86.315690][ T7351] Tainted: [B]=BAD_PAGE [ 86.317079][ T7351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.320062][ T7351] Call Trace: [ 86.321142][ T7351] [ 86.322043][ T7351] dump_stack_lvl+0x16c/0x1f0 [ 86.323312][ T7351] bad_page+0xb3/0x1f0 [ 86.324432][ T7351] ? __pfx_bad_page+0x10/0x10 [ 86.325720][ T7351] ? page_bad_reason+0x9d/0x1e0 [ 86.327024][ T7351] free_unref_page+0x657/0xdc0 [ 86.328302][ T7351] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 86.329864][ T7351] ? __phys_addr+0xc6/0x150 [ 86.331059][ T7351] skb_free_head+0xa0/0x1d0 [ 86.332266][ T7351] skb_release_data+0x560/0x730 [ 86.333643][ T7351] sk_skb_reason_drop+0x129/0x1a0 [ 86.335065][ T7351] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 86.337074][ T7351] ? kernel_text_address+0x8d/0x100 [ 86.338833][ T7351] ? hlock_class+0x4e/0x130 [ 86.340428][ T7351] ? __lock_acquire+0x163e/0x3ce0 [ 86.341983][ T7351] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 86.343926][ T7351] ? hlock_class+0x4e/0x130 [ 86.345241][ T7351] ? __lock_acquire+0xbdd/0x3ce0 [ 86.346701][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 86.348101][ T7351] __netif_receive_skb_list_core+0x357/0x950 [ 86.349655][ T7351] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 86.351289][ T7351] ? trace_lock_acquire+0x14a/0x1d0 [ 86.352582][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 86.354592][ T7351] ? lock_acquire+0x2f/0xb0 [ 86.355930][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 86.357810][ T7351] netif_receive_skb_list_internal+0x753/0xdb0 [ 86.359671][ T7351] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 86.361404][ T7351] ? __pfx_eth_type_trans+0x10/0x10 [ 86.363091][ T7351] ? __build_skb_around+0x278/0x3b0 [ 86.364743][ T7351] netif_receive_skb_list+0x4f/0x4a0 [ 86.366260][ T7351] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 86.368003][ T7351] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 86.369781][ T7351] ? bpf_test_timer_continue+0x150/0x3d0 [ 86.371316][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 86.373009][ T7351] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 86.374505][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 86.376002][ T7351] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 86.377579][ T7351] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 86.379153][ T7351] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 86.380877][ T7351] ? 0xffffffffa0004340 [ 86.381940][ T7351] ? 0xffffffffa0004340 [ 86.382994][ T7351] ? 0xffffffffa0004340 [ 86.384022][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 86.385486][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 86.386879][ T7351] ? lock_acquire+0x2f/0xb0 [ 86.388043][ T7351] ? __fget_files+0x40/0x3f0 [ 86.389246][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 86.390723][ T7351] ? fput+0x30/0x390 [ 86.391713][ T7351] ? __bpf_prog_get+0xa0/0x290 [ 86.392936][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 86.394366][ T7351] __sys_bpf+0xfc6/0x49a0 [ 86.395416][ T7351] ? __pfx_futex_wake+0x10/0x10 [ 86.396838][ T7351] ? __pfx___sys_bpf+0x10/0x10 [ 86.398031][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 86.399296][ T7351] ? do_futex+0x123/0x350 [ 86.400400][ T7351] ? __pfx_do_futex+0x10/0x10 [ 86.401571][ T7351] ? xfd_validate_state+0x5d/0x180 [ 86.402829][ T7351] ? rcu_is_watching+0x12/0xc0 [ 86.404022][ T7351] __x64_sys_bpf+0x78/0xc0 [ 86.405213][ T7351] ? lockdep_hardirqs_on+0x7c/0x110 [ 86.406639][ T7351] do_syscall_64+0xcd/0x250 [ 86.407891][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.409363][ T7351] RIP: 0033:0x7fc02f97e719 [ 86.410501][ T7351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.415628][ T7351] RSP: 002b:00007fc0306bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 86.417887][ T7351] RAX: ffffffffffffffda RBX: 00007fc02fb35f80 RCX: 00007fc02f97e719 [ 86.420374][ T7351] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 86.422535][ T7351] RBP: 00007fc02f9f132e R08: 0000000000000000 R09: 0000000000000000 [ 86.425014][ T7351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.426981][ T7351] R13: 0000000000000000 R14: 00007fc02fb35f80 R15: 00007ffe03613128 [ 86.429012][ T7351] [ 86.430011][ T7351] BUG: Bad page state in process syz.0.314 pfn:55451 [ 86.431791][ T7351] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x8 pfn:0x55451 [ 86.433993][ T7351] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 86.435820][ T7351] raw: 00fff00000000000 dead000000000040 ffff888040826000 0000000000000000 [ 86.438387][ T7351] raw: 0000000000000008 0000000000000001 00000000ffffffff 0000000000000000 [ 86.440750][ T7351] page dumped because: page_pool leak [ 86.442141][ T7351] page_owner tracks the page as allocated [ 86.443590][ T7351] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7351, tgid 7350 (syz.0.314), ts 79036736259, free_ts 78878899723 [ 86.447857][ T7351] post_alloc_hook+0x2d1/0x350 [ 86.449099][ T7351] get_page_from_freelist+0x101e/0x3070 [ 86.450634][ T7351] __alloc_pages_noprof+0x223/0x25a0 [ 86.452018][ T7351] alloc_pages_bulk_noprof+0x77c/0x1110 [ 86.453464][ T7351] __page_pool_alloc_pages_slow+0x18f/0x770 [ 86.455236][ T7351] page_pool_alloc_netmem+0xc4/0x160 [ 86.456777][ T7351] page_pool_alloc_pages+0x1a/0x60 [ 86.458438][ T7351] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 86.460208][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 86.461691][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 86.463082][ T7351] __sys_bpf+0xfc6/0x49a0 [ 86.464219][ T7351] __x64_sys_bpf+0x78/0xc0 [ 86.465423][ T7351] do_syscall_64+0xcd/0x250 [ 86.466689][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.468469][ T7351] page last free pid 7297 tgid 7297 stack trace: [ 86.470443][ T7351] free_unref_page+0x5f4/0xdc0 [ 86.471988][ T7351] __put_partials+0x14c/0x170 [ 86.473369][ T7351] qlist_free_all+0x4e/0x120 [ 86.474838][ T7351] kasan_quarantine_reduce+0x192/0x1e0 [ 86.476269][ T7351] __kasan_slab_alloc+0x69/0x90 [ 86.477622][ T7351] kmem_cache_alloc_noprof+0x121/0x2f0 [ 86.479030][ T7351] taskstats_exit+0x656/0xbe0 [ 86.480252][ T7351] do_exit+0x84a/0x2d70 [ 86.481316][ T7351] do_group_exit+0xd3/0x2a0 [ 86.482527][ T7351] __x64_sys_exit_group+0x3e/0x50 [ 86.483852][ T7351] x64_sys_call+0x14a9/0x16a0 [ 86.485078][ T7351] do_syscall_64+0xcd/0x250 [ 86.486254][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.488418][ T7351] Modules linked in: [ 86.489731][ T7351] CPU: 2 UID: 0 PID: 7351 Comm: syz.0.314 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 86.492848][ T7351] Tainted: [B]=BAD_PAGE [ 86.493934][ T7351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.496739][ T7351] Call Trace: [ 86.497640][ T7351] [ 86.498456][ T7351] dump_stack_lvl+0x16c/0x1f0 [ 86.499732][ T7351] bad_page+0xb3/0x1f0 [ 86.500804][ T7351] ? __pfx_bad_page+0x10/0x10 [ 86.502004][ T7351] ? page_bad_reason+0x9d/0x1e0 [ 86.503286][ T7351] free_unref_page+0x657/0xdc0 [ 86.504558][ T7351] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 86.506143][ T7351] ? __phys_addr+0xc6/0x150 [ 86.507344][ T7351] skb_free_head+0xa0/0x1d0 [ 86.508536][ T7351] skb_release_data+0x560/0x730 [ 86.509883][ T7351] sk_skb_reason_drop+0x129/0x1a0 [ 86.511144][ T7351] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 86.512892][ T7351] ? kernel_text_address+0x8d/0x100 [ 86.514286][ T7351] ? hlock_class+0x4e/0x130 [ 86.515529][ T7351] ? __lock_acquire+0x163e/0x3ce0 [ 86.517034][ T7351] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 86.519158][ T7351] ? hlock_class+0x4e/0x130 [ 86.520620][ T7351] ? __lock_acquire+0xbdd/0x3ce0 [ 86.521934][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 86.523280][ T7351] __netif_receive_skb_list_core+0x357/0x950 [ 86.525086][ T7351] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 86.526912][ T7351] ? trace_lock_acquire+0x14a/0x1d0 [ 86.528335][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 86.530065][ T7351] ? lock_acquire+0x2f/0xb0 [ 86.531276][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 86.533041][ T7351] netif_receive_skb_list_internal+0x753/0xdb0 [ 86.534640][ T7351] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 86.536347][ T7351] ? __pfx_eth_type_trans+0x10/0x10 [ 86.537951][ T7351] ? __build_skb_around+0x278/0x3b0 [ 86.539667][ T7351] netif_receive_skb_list+0x4f/0x4a0 [ 86.541210][ T7351] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 86.542823][ T7351] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 86.544584][ T7351] ? bpf_test_timer_continue+0x150/0x3d0 [ 86.546067][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 86.547466][ T7351] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 86.549045][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 86.550665][ T7351] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 86.552214][ T7351] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 86.553749][ T7351] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 86.555129][ T7351] ? 0xffffffffa0004340 [ 86.556433][ T7351] ? 0xffffffffa0004340 [ 86.557572][ T7351] ? 0xffffffffa0004340 [ 86.558766][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 86.560276][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 86.561672][ T7351] ? lock_acquire+0x2f/0xb0 [ 86.562874][ T7351] ? __fget_files+0x40/0x3f0 [ 86.564189][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 86.565677][ T7351] ? fput+0x30/0x390 [ 86.566698][ T7351] ? __bpf_prog_get+0xa0/0x290 [ 86.567936][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 86.569537][ T7351] __sys_bpf+0xfc6/0x49a0 [ 86.570677][ T7351] ? __pfx_futex_wake+0x10/0x10 [ 86.572089][ T7351] ? __pfx___sys_bpf+0x10/0x10 [ 86.573369][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 86.574698][ T7351] ? do_futex+0x123/0x350 [ 86.575765][ T7351] ? __pfx_do_futex+0x10/0x10 [ 86.576997][ T7351] ? xfd_validate_state+0x5d/0x180 [ 86.578331][ T7351] ? rcu_is_watching+0x12/0xc0 [ 86.579889][ T7351] __x64_sys_bpf+0x78/0xc0 [ 86.581113][ T7351] ? lockdep_hardirqs_on+0x7c/0x110 [ 86.582472][ T7351] do_syscall_64+0xcd/0x250 [ 86.583683][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.585213][ T7351] RIP: 0033:0x7fc02f97e719 [ 86.586365][ T7351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.591418][ T7351] RSP: 002b:00007fc0306bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 86.593563][ T7351] RAX: ffffffffffffffda RBX: 00007fc02fb35f80 RCX: 00007fc02f97e719 [ 86.595475][ T7351] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 86.597418][ T7351] RBP: 00007fc02f9f132e R08: 0000000000000000 R09: 0000000000000000 [ 86.599455][ T7351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.601457][ T7351] R13: 0000000000000000 R14: 00007fc02fb35f80 R15: 00007ffe03613128 [ 86.603520][ T7351] [ 86.604416][ T7351] BUG: Bad page state in process syz.0.314 pfn:55450 [ 86.606073][ T7351] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888055450000 pfn:0x55450 [ 86.608572][ T7351] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 86.610600][ T7351] raw: 00fff00000000000 dead000000000040 ffff888040826000 0000000000000000 [ 86.613018][ T7351] raw: ffff888055450000 0000000000000001 00000000ffffffff 0000000000000000 [ 86.615283][ T7351] page dumped because: page_pool leak [ 86.616609][ T7351] page_owner tracks the page as allocated [ 86.618155][ T7351] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7351, tgid 7350 (syz.0.314), ts 79036728340, free_ts 78878899723 [ 86.622445][ T7351] post_alloc_hook+0x2d1/0x350 [ 86.623696][ T7351] get_page_from_freelist+0x101e/0x3070 [ 86.625097][ T7351] __alloc_pages_noprof+0x223/0x25a0 [ 86.626404][ T7351] alloc_pages_bulk_noprof+0x77c/0x1110 [ 86.627894][ T7351] __page_pool_alloc_pages_slow+0x18f/0x770 [ 86.629461][ T7351] page_pool_alloc_netmem+0xc4/0x160 [ 86.630800][ T7351] page_pool_alloc_pages+0x1a/0x60 [ 86.632082][ T7351] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 86.633698][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 86.635379][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 86.636924][ T7351] __sys_bpf+0xfc6/0x49a0 [ 86.638248][ T7351] __x64_sys_bpf+0x78/0xc0 [ 86.639561][ T7351] do_syscall_64+0xcd/0x250 [ 86.641193][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.642772][ T7351] page last free pid 7297 tgid 7297 stack trace: [ 86.644393][ T7351] free_unref_page+0x5f4/0xdc0 [ 86.645639][ T7351] __put_partials+0x14c/0x170 [ 86.646850][ T7351] qlist_free_all+0x4e/0x120 [ 86.648121][ T7351] kasan_quarantine_reduce+0x192/0x1e0 [ 86.649574][ T7351] __kasan_slab_alloc+0x69/0x90 [ 86.650831][ T7351] kmem_cache_alloc_noprof+0x121/0x2f0 [ 86.652184][ T7351] taskstats_exit+0x656/0xbe0 [ 86.653431][ T7351] do_exit+0x84a/0x2d70 [ 86.654544][ T7351] do_group_exit+0xd3/0x2a0 [ 86.655744][ T7351] __x64_sys_exit_group+0x3e/0x50 [ 86.657046][ T7351] x64_sys_call+0x14a9/0x16a0 [ 86.658275][ T7351] do_syscall_64+0xcd/0x250 [ 86.659457][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.661031][ T7351] Modules linked in: [ 86.662058][ T7351] CPU: 2 UID: 0 PID: 7351 Comm: syz.0.314 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 86.665045][ T7351] Tainted: [B]=BAD_PAGE [ 86.666136][ T7351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.668965][ T7351] Call Trace: [ 86.669850][ T7351] [ 86.670606][ T7351] dump_stack_lvl+0x16c/0x1f0 [ 86.671807][ T7351] bad_page+0xb3/0x1f0 [ 86.672846][ T7351] ? __pfx_bad_page+0x10/0x10 [ 86.674097][ T7351] ? page_bad_reason+0x9d/0x1e0 [ 86.675334][ T7351] free_unref_page+0x657/0xdc0 [ 86.676547][ T7351] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 86.678126][ T7351] ? __phys_addr+0xc6/0x150 [ 86.679376][ T7351] skb_free_head+0xa0/0x1d0 [ 86.681291][ T7351] skb_release_data+0x560/0x730 [ 86.682568][ T7351] sk_skb_reason_drop+0x129/0x1a0 [ 86.683900][ T7351] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 86.685616][ T7351] ? kernel_text_address+0x8d/0x100 [ 86.686986][ T7351] ? hlock_class+0x4e/0x130 [ 86.688300][ T7351] ? __lock_acquire+0x163e/0x3ce0 [ 86.690142][ T7351] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 86.692141][ T7351] ? hlock_class+0x4e/0x130 [ 86.693351][ T7351] ? __lock_acquire+0xbdd/0x3ce0 [ 86.694617][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 86.696273][ T7351] __netif_receive_skb_list_core+0x357/0x950 [ 86.697805][ T7351] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 86.700318][ T7351] ? trace_lock_acquire+0x14a/0x1d0 [ 86.701712][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 86.703372][ T7351] ? lock_acquire+0x2f/0xb0 [ 86.704579][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 86.706393][ T7351] netif_receive_skb_list_internal+0x753/0xdb0 [ 86.708140][ T7351] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 86.710144][ T7351] ? __pfx_eth_type_trans+0x10/0x10 [ 86.711502][ T7351] ? __build_skb_around+0x278/0x3b0 [ 86.712896][ T7351] netif_receive_skb_list+0x4f/0x4a0 [ 86.714557][ T7351] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 86.716290][ T7351] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 86.718259][ T7351] ? bpf_test_timer_continue+0x150/0x3d0 [ 86.720057][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 86.721466][ T7351] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 86.723051][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 86.724554][ T7351] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 86.726090][ T7351] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 86.727636][ T7351] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 86.729124][ T7351] ? 0xffffffffa0004340 [ 86.730216][ T7351] ? 0xffffffffa0004340 [ 86.731289][ T7351] ? 0xffffffffa0004340 [ 86.732349][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 86.733978][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 86.735818][ T7351] ? lock_acquire+0x2f/0xb0 [ 86.737168][ T7351] ? __fget_files+0x40/0x3f0 [ 86.738964][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 86.740462][ T7351] ? fput+0x30/0x390 [ 86.741634][ T7351] ? __bpf_prog_get+0xa0/0x290 [ 86.742915][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 86.744606][ T7351] __sys_bpf+0xfc6/0x49a0 [ 86.745784][ T7351] ? __pfx_futex_wake+0x10/0x10 [ 86.747058][ T7351] ? __pfx___sys_bpf+0x10/0x10 [ 86.748320][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 86.749758][ T7351] ? do_futex+0x123/0x350 [ 86.750926][ T7351] ? __pfx_do_futex+0x10/0x10 [ 86.752142][ T7351] ? xfd_validate_state+0x5d/0x180 [ 86.753485][ T7351] ? rcu_is_watching+0x12/0xc0 [ 86.754772][ T7351] __x64_sys_bpf+0x78/0xc0 [ 86.755914][ T7351] ? lockdep_hardirqs_on+0x7c/0x110 [ 86.757254][ T7351] do_syscall_64+0xcd/0x250 [ 86.758462][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.760048][ T7351] RIP: 0033:0x7fc02f97e719 [ 86.761253][ T7351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.766595][ T7351] RSP: 002b:00007fc0306bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 86.769283][ T7351] RAX: ffffffffffffffda RBX: 00007fc02fb35f80 RCX: 00007fc02f97e719 [ 86.772060][ T7351] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 86.774432][ T7351] RBP: 00007fc02f9f132e R08: 0000000000000000 R09: 0000000000000000 [ 86.776697][ T7351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.779459][ T7351] R13: 0000000000000000 R14: 00007fc02fb35f80 R15: 00007ffe03613128 [ 86.782358][ T7351] [ 86.783305][ T7351] BUG: Bad page state in process syz.0.314 pfn:303af [ 86.785115][ T7351] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x303af [ 86.787452][ T7351] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 86.789289][ T7351] raw: 00fff00000000000 dead000000000040 ffff888040826000 0000000000000000 [ 86.791343][ T7351] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 86.793917][ T7351] page dumped because: page_pool leak [ 86.795599][ T7351] page_owner tracks the page as allocated [ 86.798251][ T7351] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7351, tgid 7350 (syz.0.314), ts 79036720543, free_ts 78916307047 [ 86.803678][ T7351] post_alloc_hook+0x2d1/0x350 [ 86.805003][ T7351] get_page_from_freelist+0x101e/0x3070 [ 86.806449][ T7351] __alloc_pages_noprof+0x223/0x25a0 [ 86.807910][ T7351] alloc_pages_bulk_noprof+0x77c/0x1110 [ 86.809437][ T7351] __page_pool_alloc_pages_slow+0x18f/0x770 [ 86.810935][ T7351] page_pool_alloc_netmem+0xc4/0x160 [ 86.812291][ T7351] page_pool_alloc_pages+0x1a/0x60 [ 86.813581][ T7351] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 86.815311][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 86.816700][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 86.818366][ T7351] __sys_bpf+0xfc6/0x49a0 [ 86.819673][ T7351] __x64_sys_bpf+0x78/0xc0 [ 86.820843][ T7351] do_syscall_64+0xcd/0x250 [ 86.822033][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.823821][ T7351] page last free pid 7337 tgid 7337 stack trace: [ 86.825590][ T7351] free_unref_page+0x5f4/0xdc0 [ 86.826859][ T7351] __put_partials+0x14c/0x170 [ 86.828159][ T7351] qlist_free_all+0x4e/0x120 [ 86.829442][ T7351] kasan_quarantine_reduce+0x192/0x1e0 [ 86.830850][ T7351] __kasan_slab_alloc+0x69/0x90 [ 86.832096][ T7351] __kmalloc_noprof+0x199/0x400 [ 86.833375][ T7351] tomoyo_realpath_from_path+0xb9/0x720 [ 86.834771][ T7351] tomoyo_realpath_nofollow+0xdd/0x100 [ 86.836130][ T7351] tomoyo_find_next_domain+0x2ad/0x2070 [ 86.837638][ T7351] tomoyo_bprm_check_security+0x12b/0x1d0 [ 86.839143][ T7351] security_bprm_check+0x1b9/0x1e0 [ 86.841328][ T7351] bprm_execve+0x642/0x1960 [ 86.842556][ T7351] do_execveat_common.isra.0+0x4f1/0x630 [ 86.844060][ T7351] __x64_sys_execve+0x8c/0xb0 [ 86.845365][ T7351] do_syscall_64+0xcd/0x250 [ 86.846662][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.848284][ T7351] Modules linked in: [ 86.849752][ T7351] CPU: 2 UID: 0 PID: 7351 Comm: syz.0.314 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 86.853071][ T7351] Tainted: [B]=BAD_PAGE [ 86.854152][ T7351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.856851][ T7351] Call Trace: [ 86.857724][ T7351] [ 86.858750][ T7351] dump_stack_lvl+0x16c/0x1f0 [ 86.860303][ T7351] bad_page+0xb3/0x1f0 [ 86.861534][ T7351] ? __pfx_bad_page+0x10/0x10 [ 86.862740][ T7351] ? page_bad_reason+0x9d/0x1e0 [ 86.863974][ T7351] free_unref_page+0x657/0xdc0 [ 86.865232][ T7351] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 86.866793][ T7351] ? __phys_addr+0xc6/0x150 [ 86.868029][ T7351] skb_free_head+0xa0/0x1d0 [ 86.869398][ T7351] skb_release_data+0x560/0x730 [ 86.870782][ T7351] sk_skb_reason_drop+0x129/0x1a0 [ 86.872367][ T7351] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 86.874482][ T7351] ? kernel_text_address+0x8d/0x100 [ 86.876028][ T7351] ? hlock_class+0x4e/0x130 [ 86.877207][ T7351] ? __lock_acquire+0x163e/0x3ce0 [ 86.878457][ T7351] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 86.881095][ T7351] ? hlock_class+0x4e/0x130 [ 86.882274][ T7351] ? __lock_acquire+0xbdd/0x3ce0 [ 86.883543][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 86.884883][ T7351] __netif_receive_skb_list_core+0x357/0x950 [ 86.886442][ T7351] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 86.888149][ T7351] ? trace_lock_acquire+0x14a/0x1d0 [ 86.889603][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 86.891265][ T7351] ? lock_acquire+0x2f/0xb0 [ 86.892687][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 86.894347][ T7351] netif_receive_skb_list_internal+0x753/0xdb0 [ 86.895942][ T7351] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 86.897632][ T7351] ? __pfx_eth_type_trans+0x10/0x10 [ 86.899049][ T7351] ? __build_skb_around+0x278/0x3b0 [ 86.900448][ T7351] netif_receive_skb_list+0x4f/0x4a0 [ 86.901928][ T7351] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 86.903502][ T7351] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 86.905219][ T7351] ? bpf_test_timer_continue+0x150/0x3d0 [ 86.906611][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 86.907974][ T7351] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 86.909630][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 86.911206][ T7351] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 86.913000][ T7351] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 86.914780][ T7351] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 86.916352][ T7351] ? 0xffffffffa0004340 [ 86.917666][ T7351] ? 0xffffffffa0004340 [ 86.918821][ T7351] ? 0xffffffffa0004340 [ 86.920052][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 86.921716][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 86.923088][ T7351] ? lock_acquire+0x2f/0xb0 [ 86.924255][ T7351] ? __fget_files+0x40/0x3f0 [ 86.925496][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 86.926942][ T7351] ? fput+0x30/0x390 [ 86.927953][ T7351] ? __bpf_prog_get+0xa0/0x290 [ 86.929456][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 86.931367][ T7351] __sys_bpf+0xfc6/0x49a0 [ 86.932494][ T7351] ? __pfx_futex_wake+0x10/0x10 [ 86.933763][ T7351] ? __pfx___sys_bpf+0x10/0x10 [ 86.935006][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 86.936356][ T7351] ? do_futex+0x123/0x350 [ 86.937531][ T7351] ? __pfx_do_futex+0x10/0x10 [ 86.938803][ T7351] ? xfd_validate_state+0x5d/0x180 [ 86.940189][ T7351] ? rcu_is_watching+0x12/0xc0 [ 86.941509][ T7351] __x64_sys_bpf+0x78/0xc0 [ 86.942725][ T7351] ? lockdep_hardirqs_on+0x7c/0x110 [ 86.944144][ T7351] do_syscall_64+0xcd/0x250 [ 86.945395][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.946999][ T7351] RIP: 0033:0x7fc02f97e719 [ 86.948276][ T7351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.953280][ T7351] RSP: 002b:00007fc0306bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 86.955431][ T7351] RAX: ffffffffffffffda RBX: 00007fc02fb35f80 RCX: 00007fc02f97e719 [ 86.957486][ T7351] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 86.959662][ T7351] RBP: 00007fc02f9f132e R08: 0000000000000000 R09: 0000000000000000 [ 86.961717][ T7351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.963805][ T7351] R13: 0000000000000000 R14: 00007fc02fb35f80 R15: 00007ffe03613128 [ 86.966072][ T7351] [ 86.967054][ T7351] BUG: Bad page state in process syz.0.314 pfn:303ae [ 86.968892][ T7351] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x303ae [ 86.971125][ T7351] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 86.972955][ T7351] raw: 00fff00000000000 dead000000000040 ffff888040826000 0000000000000000 [ 86.975163][ T7351] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 86.977393][ T7351] page dumped because: page_pool leak [ 86.978778][ T7351] page_owner tracks the page as allocated [ 86.980518][ T7351] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7351, tgid 7350 (syz.0.314), ts 79036712437, free_ts 78916307047 [ 86.985038][ T7351] post_alloc_hook+0x2d1/0x350 [ 86.986299][ T7351] get_page_from_freelist+0x101e/0x3070 [ 86.987821][ T7351] __alloc_pages_noprof+0x223/0x25a0 [ 86.989300][ T7351] alloc_pages_bulk_noprof+0x77c/0x1110 [ 86.990757][ T7351] __page_pool_alloc_pages_slow+0x18f/0x770 [ 86.992313][ T7351] page_pool_alloc_netmem+0xc4/0x160 [ 86.993727][ T7351] page_pool_alloc_pages+0x1a/0x60 [ 86.995107][ T7351] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 86.996852][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 86.998385][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 86.999934][ T7351] __sys_bpf+0xfc6/0x49a0 [ 87.001322][ T7351] __x64_sys_bpf+0x78/0xc0 [ 87.002752][ T7351] do_syscall_64+0xcd/0x250 [ 87.004174][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.005961][ T7351] page last free pid 7337 tgid 7337 stack trace: [ 87.007772][ T7351] free_unref_page+0x5f4/0xdc0 [ 87.009183][ T7351] __put_partials+0x14c/0x170 [ 87.010420][ T7351] qlist_free_all+0x4e/0x120 [ 87.011643][ T7351] kasan_quarantine_reduce+0x192/0x1e0 [ 87.013069][ T7351] __kasan_slab_alloc+0x69/0x90 [ 87.014349][ T7351] __kmalloc_noprof+0x199/0x400 [ 87.015659][ T7351] tomoyo_realpath_from_path+0xb9/0x720 [ 87.017370][ T7351] tomoyo_realpath_nofollow+0xdd/0x100 [ 87.018921][ T7351] tomoyo_find_next_domain+0x2ad/0x2070 [ 87.020800][ T7351] tomoyo_bprm_check_security+0x12b/0x1d0 [ 87.022296][ T7351] security_bprm_check+0x1b9/0x1e0 [ 87.023633][ T7351] bprm_execve+0x642/0x1960 [ 87.024857][ T7351] do_execveat_common.isra.0+0x4f1/0x630 [ 87.026339][ T7351] __x64_sys_execve+0x8c/0xb0 [ 87.027677][ T7351] do_syscall_64+0xcd/0x250 [ 87.028974][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.030500][ T7351] Modules linked in: [ 87.031478][ T7351] CPU: 2 UID: 0 PID: 7351 Comm: syz.0.314 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 87.035140][ T7351] Tainted: [B]=BAD_PAGE [ 87.036316][ T7351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.039925][ T7351] Call Trace: [ 87.040995][ T7351] [ 87.041838][ T7351] dump_stack_lvl+0x16c/0x1f0 [ 87.043174][ T7351] bad_page+0xb3/0x1f0 [ 87.044338][ T7351] ? __pfx_bad_page+0x10/0x10 [ 87.045689][ T7351] ? page_bad_reason+0x9d/0x1e0 [ 87.046978][ T7351] free_unref_page+0x657/0xdc0 [ 87.048253][ T7351] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 87.049896][ T7351] ? __phys_addr+0xc6/0x150 [ 87.051115][ T7351] skb_free_head+0xa0/0x1d0 [ 87.052382][ T7351] skb_release_data+0x560/0x730 [ 87.054146][ T7351] sk_skb_reason_drop+0x129/0x1a0 [ 87.055793][ T7351] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 87.057791][ T7351] ? kernel_text_address+0x8d/0x100 [ 87.059406][ T7351] ? hlock_class+0x4e/0x130 [ 87.060614][ T7351] ? __lock_acquire+0x163e/0x3ce0 [ 87.061956][ T7351] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 87.063930][ T7351] ? hlock_class+0x4e/0x130 [ 87.065154][ T7351] ? __lock_acquire+0xbdd/0x3ce0 [ 87.066483][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 87.067953][ T7351] __netif_receive_skb_list_core+0x357/0x950 [ 87.069734][ T7351] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 87.071547][ T7351] ? trace_lock_acquire+0x14a/0x1d0 [ 87.073047][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 87.075006][ T7351] ? lock_acquire+0x2f/0xb0 [ 87.076375][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 87.078279][ T7351] netif_receive_skb_list_internal+0x753/0xdb0 [ 87.080000][ T7351] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 87.082053][ T7351] ? __pfx_eth_type_trans+0x10/0x10 [ 87.083507][ T7351] ? __build_skb_around+0x278/0x3b0 [ 87.084932][ T7351] netif_receive_skb_list+0x4f/0x4a0 [ 87.086336][ T7351] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 87.087973][ T7351] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 87.089767][ T7351] ? bpf_test_timer_continue+0x150/0x3d0 [ 87.091239][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 87.092618][ T7351] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 87.094155][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 87.095686][ T7351] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 87.097218][ T7351] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 87.098737][ T7351] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 87.100093][ T7351] ? 0xffffffffa0004340 [ 87.101185][ T7351] ? 0xffffffffa0004340 [ 87.102269][ T7351] ? 0xffffffffa0004340 [ 87.103366][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 87.104925][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 87.106326][ T7351] ? lock_acquire+0x2f/0xb0 [ 87.107536][ T7351] ? __fget_files+0x40/0x3f0 [ 87.108837][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 87.110384][ T7351] ? fput+0x30/0x390 [ 87.111452][ T7351] ? __bpf_prog_get+0xa0/0x290 [ 87.112926][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 87.114709][ T7351] __sys_bpf+0xfc6/0x49a0 [ 87.116062][ T7351] ? __pfx_futex_wake+0x10/0x10 [ 87.117581][ T7351] ? __pfx___sys_bpf+0x10/0x10 [ 87.118825][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 87.120184][ T7351] ? do_futex+0x123/0x350 [ 87.121338][ T7351] ? __pfx_do_futex+0x10/0x10 [ 87.122568][ T7351] ? xfd_validate_state+0x5d/0x180 [ 87.123905][ T7351] ? rcu_is_watching+0x12/0xc0 [ 87.125170][ T7351] __x64_sys_bpf+0x78/0xc0 [ 87.126345][ T7351] ? lockdep_hardirqs_on+0x7c/0x110 [ 87.127715][ T7351] do_syscall_64+0xcd/0x250 [ 87.128994][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.130484][ T7351] RIP: 0033:0x7fc02f97e719 [ 87.131626][ T7351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.136972][ T7351] RSP: 002b:00007fc0306bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 87.139622][ T7351] RAX: ffffffffffffffda RBX: 00007fc02fb35f80 RCX: 00007fc02f97e719 [ 87.141870][ T7351] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 87.144248][ T7351] RBP: 00007fc02f9f132e R08: 0000000000000000 R09: 0000000000000000 [ 87.146426][ T7351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.148481][ T7351] R13: 0000000000000000 R14: 00007fc02fb35f80 R15: 00007ffe03613128 [ 87.150624][ T7351] [ 87.151527][ T7351] BUG: Bad page state in process syz.0.314 pfn:303ad [ 87.153301][ T7351] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x303ad [ 87.155559][ T7351] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 87.157452][ T7351] raw: 00fff00000000000 dead000000000040 ffff888040826000 0000000000000000 [ 87.159662][ T7351] raw: 0000000000000004 0000000000000001 00000000ffffffff 0000000000000000 [ 87.161886][ T7351] page dumped because: page_pool leak [ 87.163288][ T7351] page_owner tracks the page as allocated [ 87.164789][ T7351] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7351, tgid 7350 (syz.0.314), ts 79036704929, free_ts 78916307047 [ 87.169893][ T7351] post_alloc_hook+0x2d1/0x350 [ 87.171749][ T7351] get_page_from_freelist+0x101e/0x3070 [ 87.173871][ T7351] __alloc_pages_noprof+0x223/0x25a0 [ 87.175392][ T7351] alloc_pages_bulk_noprof+0x77c/0x1110 [ 87.176881][ T7351] __page_pool_alloc_pages_slow+0x18f/0x770 [ 87.178506][ T7351] page_pool_alloc_netmem+0xc4/0x160 [ 87.179936][ T7351] page_pool_alloc_pages+0x1a/0x60 [ 87.181302][ T7351] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 87.182923][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 87.184301][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 87.185730][ T7351] __sys_bpf+0xfc6/0x49a0 [ 87.186897][ T7351] __x64_sys_bpf+0x78/0xc0 [ 87.188133][ T7351] do_syscall_64+0xcd/0x250 [ 87.189421][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.190985][ T7351] page last free pid 7337 tgid 7337 stack trace: [ 87.192618][ T7351] free_unref_page+0x5f4/0xdc0 [ 87.193808][ T7351] __put_partials+0x14c/0x170 [ 87.194995][ T7351] qlist_free_all+0x4e/0x120 [ 87.196180][ T7351] kasan_quarantine_reduce+0x192/0x1e0 [ 87.197660][ T7351] __kasan_slab_alloc+0x69/0x90 [ 87.198972][ T7351] __kmalloc_noprof+0x199/0x400 [ 87.200257][ T7351] tomoyo_realpath_from_path+0xb9/0x720 [ 87.201803][ T7351] tomoyo_realpath_nofollow+0xdd/0x100 [ 87.203224][ T7351] tomoyo_find_next_domain+0x2ad/0x2070 [ 87.204673][ T7351] tomoyo_bprm_check_security+0x12b/0x1d0 [ 87.206160][ T7351] security_bprm_check+0x1b9/0x1e0 [ 87.207554][ T7351] bprm_execve+0x642/0x1960 [ 87.208850][ T7351] do_execveat_common.isra.0+0x4f1/0x630 [ 87.210363][ T7351] __x64_sys_execve+0x8c/0xb0 [ 87.211655][ T7351] do_syscall_64+0xcd/0x250 [ 87.212981][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.214622][ T7351] Modules linked in: [ 87.215681][ T7351] CPU: 2 UID: 0 PID: 7351 Comm: syz.0.314 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 87.218804][ T7351] Tainted: [B]=BAD_PAGE [ 87.219891][ T7351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.222652][ T7351] Call Trace: [ 87.223540][ T7351] [ 87.224322][ T7351] dump_stack_lvl+0x16c/0x1f0 [ 87.225585][ T7351] bad_page+0xb3/0x1f0 [ 87.226667][ T7351] ? __pfx_bad_page+0x10/0x10 [ 87.227900][ T7351] ? page_bad_reason+0x9d/0x1e0 [ 87.229229][ T7351] free_unref_page+0x657/0xdc0 [ 87.230491][ T7351] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 87.232043][ T7351] ? __phys_addr+0xc6/0x150 [ 87.233252][ T7351] skb_free_head+0xa0/0x1d0 [ 87.234507][ T7351] skb_release_data+0x560/0x730 [ 87.235861][ T7351] sk_skb_reason_drop+0x129/0x1a0 [ 87.237260][ T7351] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 87.239486][ T7351] ? kernel_text_address+0x8d/0x100 [ 87.241144][ T7351] ? hlock_class+0x4e/0x130 [ 87.242371][ T7351] ? __lock_acquire+0x163e/0x3ce0 [ 87.243726][ T7351] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 87.245654][ T7351] ? hlock_class+0x4e/0x130 [ 87.246779][ T7351] ? __lock_acquire+0xbdd/0x3ce0 [ 87.248019][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 87.249460][ T7351] __netif_receive_skb_list_core+0x357/0x950 [ 87.251092][ T7351] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 87.252937][ T7351] ? trace_lock_acquire+0x14a/0x1d0 [ 87.254441][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 87.256309][ T7351] ? lock_acquire+0x2f/0xb0 [ 87.257581][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 87.259612][ T7351] netif_receive_skb_list_internal+0x753/0xdb0 [ 87.261341][ T7351] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 87.263224][ T7351] ? __pfx_eth_type_trans+0x10/0x10 [ 87.264525][ T7351] ? __build_skb_around+0x278/0x3b0 [ 87.265931][ T7351] netif_receive_skb_list+0x4f/0x4a0 [ 87.267308][ T7351] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 87.268977][ T7351] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 87.270820][ T7351] ? bpf_test_timer_continue+0x150/0x3d0 [ 87.272472][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 87.274269][ T7351] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 87.275901][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 87.277583][ T7351] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 87.279605][ T7351] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 87.281443][ T7351] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 87.282845][ T7351] ? 0xffffffffa0004340 [ 87.283907][ T7351] ? 0xffffffffa0004340 [ 87.284980][ T7351] ? 0xffffffffa0004340 [ 87.286050][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 87.287504][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 87.288903][ T7351] ? lock_acquire+0x2f/0xb0 [ 87.290052][ T7351] ? __fget_files+0x40/0x3f0 [ 87.291277][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 87.292923][ T7351] ? fput+0x30/0x390 [ 87.293906][ T7351] ? __bpf_prog_get+0xa0/0x290 [ 87.295076][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 87.296509][ T7351] __sys_bpf+0xfc6/0x49a0 [ 87.297660][ T7351] ? __pfx_futex_wake+0x10/0x10 [ 87.298934][ T7351] ? __pfx___sys_bpf+0x10/0x10 [ 87.300193][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 87.301543][ T7351] ? do_futex+0x123/0x350 [ 87.302780][ T7351] ? __pfx_do_futex+0x10/0x10 [ 87.303978][ T7351] ? xfd_validate_state+0x5d/0x180 [ 87.305270][ T7351] ? rcu_is_watching+0x12/0xc0 [ 87.306539][ T7351] __x64_sys_bpf+0x78/0xc0 [ 87.307719][ T7351] ? lockdep_hardirqs_on+0x7c/0x110 [ 87.309116][ T7351] do_syscall_64+0xcd/0x250 [ 87.310332][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.311978][ T7351] RIP: 0033:0x7fc02f97e719 [ 87.313675][ T7351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.319536][ T7351] RSP: 002b:00007fc0306bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 87.321788][ T7351] RAX: ffffffffffffffda RBX: 00007fc02fb35f80 RCX: 00007fc02f97e719 [ 87.323893][ T7351] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 87.325997][ T7351] RBP: 00007fc02f9f132e R08: 0000000000000000 R09: 0000000000000000 [ 87.328109][ T7351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.330409][ T7351] R13: 0000000000000000 R14: 00007fc02fb35f80 R15: 00007ffe03613128 [ 87.333578][ T7351] [ 87.335014][ T7351] BUG: Bad page state in process syz.0.314 pfn:303ac [ 87.338066][ T7351] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880303ae400 pfn:0x303ac [ 87.342050][ T7351] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 87.343892][ T7351] raw: 00fff00000000000 dead000000000040 ffff888040826000 0000000000000000 [ 87.346270][ T7351] raw: ffff8880303ae400 0000000000000001 00000000ffffffff 0000000000000000 [ 87.348615][ T7351] page dumped because: page_pool leak [ 87.350054][ T7351] page_owner tracks the page as allocated [ 87.351557][ T7351] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7351, tgid 7350 (syz.0.314), ts 79036697091, free_ts 78916307047 [ 87.355828][ T7351] post_alloc_hook+0x2d1/0x350 [ 87.357047][ T7351] get_page_from_freelist+0x101e/0x3070 [ 87.358498][ T7351] __alloc_pages_noprof+0x223/0x25a0 [ 87.359885][ T7351] alloc_pages_bulk_noprof+0x77c/0x1110 [ 87.361299][ T7351] __page_pool_alloc_pages_slow+0x18f/0x770 [ 87.362919][ T7351] page_pool_alloc_netmem+0xc4/0x160 [ 87.364311][ T7351] page_pool_alloc_pages+0x1a/0x60 [ 87.365747][ T7351] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 87.367407][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 87.368810][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 87.370202][ T7351] __sys_bpf+0xfc6/0x49a0 [ 87.371336][ T7351] __x64_sys_bpf+0x78/0xc0 [ 87.372509][ T7351] do_syscall_64+0xcd/0x250 [ 87.373907][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.375671][ T7351] page last free pid 7337 tgid 7337 stack trace: [ 87.377762][ T7351] free_unref_page+0x5f4/0xdc0 [ 87.379198][ T7351] __put_partials+0x14c/0x170 [ 87.380491][ T7351] qlist_free_all+0x4e/0x120 [ 87.381746][ T7351] kasan_quarantine_reduce+0x192/0x1e0 [ 87.383216][ T7351] __kasan_slab_alloc+0x69/0x90 [ 87.384434][ T7351] __kmalloc_noprof+0x199/0x400 [ 87.385679][ T7351] tomoyo_realpath_from_path+0xb9/0x720 [ 87.387045][ T7351] tomoyo_realpath_nofollow+0xdd/0x100 [ 87.388857][ T7351] tomoyo_find_next_domain+0x2ad/0x2070 [ 87.390399][ T7351] tomoyo_bprm_check_security+0x12b/0x1d0 [ 87.392113][ T7351] security_bprm_check+0x1b9/0x1e0 [ 87.393442][ T7351] bprm_execve+0x642/0x1960 [ 87.394595][ T7351] do_execveat_common.isra.0+0x4f1/0x630 [ 87.396188][ T7351] __x64_sys_execve+0x8c/0xb0 [ 87.397525][ T7351] do_syscall_64+0xcd/0x250 [ 87.398721][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.400232][ T7351] Modules linked in: [ 87.401245][ T7351] CPU: 2 UID: 0 PID: 7351 Comm: syz.0.314 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 87.404294][ T7351] Tainted: [B]=BAD_PAGE [ 87.405343][ T7351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.408320][ T7351] Call Trace: [ 87.409356][ T7351] [ 87.410208][ T7351] dump_stack_lvl+0x16c/0x1f0 [ 87.411557][ T7351] bad_page+0xb3/0x1f0 [ 87.412807][ T7351] ? __pfx_bad_page+0x10/0x10 [ 87.414144][ T7351] ? page_bad_reason+0x9d/0x1e0 [ 87.415371][ T7351] free_unref_page+0x657/0xdc0 [ 87.416557][ T7351] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 87.418104][ T7351] ? __phys_addr+0xc6/0x150 [ 87.419237][ T7351] skb_free_head+0xa0/0x1d0 [ 87.420348][ T7351] skb_release_data+0x560/0x730 [ 87.421608][ T7351] sk_skb_reason_drop+0x129/0x1a0 [ 87.422920][ T7351] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 87.424649][ T7351] ? kernel_text_address+0x8d/0x100 [ 87.426047][ T7351] ? hlock_class+0x4e/0x130 [ 87.427226][ T7351] ? __lock_acquire+0x163e/0x3ce0 [ 87.428545][ T7351] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 87.430372][ T7351] ? hlock_class+0x4e/0x130 [ 87.431560][ T7351] ? __lock_acquire+0xbdd/0x3ce0 [ 87.432844][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 87.434198][ T7351] __netif_receive_skb_list_core+0x357/0x950 [ 87.435766][ T7351] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 87.437506][ T7351] ? trace_lock_acquire+0x14a/0x1d0 [ 87.438996][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 87.440776][ T7351] ? lock_acquire+0x2f/0xb0 [ 87.442007][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 87.443702][ T7351] netif_receive_skb_list_internal+0x753/0xdb0 [ 87.445204][ T7351] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 87.446833][ T7351] ? __pfx_eth_type_trans+0x10/0x10 [ 87.448093][ T7351] ? __build_skb_around+0x278/0x3b0 [ 87.449440][ T7351] netif_receive_skb_list+0x4f/0x4a0 [ 87.450785][ T7351] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 87.452326][ T7351] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 87.454031][ T7351] ? bpf_test_timer_continue+0x150/0x3d0 [ 87.455520][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 87.456967][ T7351] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 87.458555][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 87.460100][ T7351] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 87.461711][ T7351] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 87.463282][ T7351] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 87.464649][ T7351] ? 0xffffffffa0004340 [ 87.465656][ T7351] ? 0xffffffffa0004340 [ 87.466693][ T7351] ? 0xffffffffa0004340 [ 87.467735][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 87.469172][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 87.470474][ T7351] ? lock_acquire+0x2f/0xb0 [ 87.471673][ T7351] ? __fget_files+0x40/0x3f0 [ 87.472828][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 87.474295][ T7351] ? fput+0x30/0x390 [ 87.475355][ T7351] ? __bpf_prog_get+0xa0/0x290 [ 87.476587][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 87.478077][ T7351] __sys_bpf+0xfc6/0x49a0 [ 87.479204][ T7351] ? __pfx_futex_wake+0x10/0x10 [ 87.480453][ T7351] ? __pfx___sys_bpf+0x10/0x10 [ 87.481690][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 87.483055][ T7351] ? do_futex+0x123/0x350 [ 87.484149][ T7351] ? __pfx_do_futex+0x10/0x10 [ 87.485317][ T7351] ? xfd_validate_state+0x5d/0x180 [ 87.486621][ T7351] ? rcu_is_watching+0x12/0xc0 [ 87.487811][ T7351] __x64_sys_bpf+0x78/0xc0 [ 87.488938][ T7351] ? lockdep_hardirqs_on+0x7c/0x110 [ 87.490231][ T7351] do_syscall_64+0xcd/0x250 [ 87.491421][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.493074][ T7351] RIP: 0033:0x7fc02f97e719 [ 87.494286][ T7351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.499219][ T7351] RSP: 002b:00007fc0306bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 87.501455][ T7351] RAX: ffffffffffffffda RBX: 00007fc02fb35f80 RCX: 00007fc02f97e719 [ 87.503499][ T7351] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 87.505454][ T7351] RBP: 00007fc02f9f132e R08: 0000000000000000 R09: 0000000000000000 [ 87.507408][ T7351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.509389][ T7351] R13: 0000000000000000 R14: 00007fc02fb35f80 R15: 00007ffe03613128 [ 87.511280][ T7351] [ 87.512144][ T7351] BUG: Bad page state in process syz.0.314 pfn:303ab [ 87.513834][ T7351] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x303ab [ 87.516036][ T7351] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 87.518033][ T7351] raw: 00fff00000000000 dead000000000040 ffff888040826000 0000000000000000 [ 87.520227][ T7351] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 87.522388][ T7351] page dumped because: page_pool leak [ 87.523784][ T7351] page_owner tracks the page as allocated [ 87.525299][ T7351] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7351, tgid 7350 (syz.0.314), ts 79036689408, free_ts 78916307047 [ 87.529622][ T7351] post_alloc_hook+0x2d1/0x350 [ 87.531102][ T7351] get_page_from_freelist+0x101e/0x3070 [ 87.533439][ T7351] __alloc_pages_noprof+0x223/0x25a0 [ 87.537002][ T7351] alloc_pages_bulk_noprof+0x77c/0x1110 [ 87.539766][ T7351] __page_pool_alloc_pages_slow+0x18f/0x770 [ 87.542461][ T7351] page_pool_alloc_netmem+0xc4/0x160 [ 87.544351][ T7351] page_pool_alloc_pages+0x1a/0x60 [ 87.546221][ T7351] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 87.548586][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 87.550539][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 87.552505][ T7351] __sys_bpf+0xfc6/0x49a0 [ 87.554081][ T7351] __x64_sys_bpf+0x78/0xc0 [ 87.555925][ T7351] do_syscall_64+0xcd/0x250 [ 87.557865][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.559891][ T7351] page last free pid 7337 tgid 7337 stack trace: [ 87.561603][ T7351] free_unref_page+0x5f4/0xdc0 [ 87.562851][ T7351] __put_partials+0x14c/0x170 [ 87.564079][ T7351] qlist_free_all+0x4e/0x120 [ 87.565456][ T7351] kasan_quarantine_reduce+0x192/0x1e0 [ 87.567169][ T7351] __kasan_slab_alloc+0x69/0x90 [ 87.568690][ T7351] __kmalloc_noprof+0x199/0x400 [ 87.570384][ T7351] tomoyo_realpath_from_path+0xb9/0x720 [ 87.572537][ T7351] tomoyo_realpath_nofollow+0xdd/0x100 [ 87.574375][ T7351] tomoyo_find_next_domain+0x2ad/0x2070 [ 87.575890][ T7351] tomoyo_bprm_check_security+0x12b/0x1d0 [ 87.577573][ T7351] security_bprm_check+0x1b9/0x1e0 [ 87.579075][ T7351] bprm_execve+0x642/0x1960 [ 87.580459][ T7351] do_execveat_common.isra.0+0x4f1/0x630 [ 87.582104][ T7351] __x64_sys_execve+0x8c/0xb0 [ 87.583345][ T7351] do_syscall_64+0xcd/0x250 [ 87.584563][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.586068][ T7351] Modules linked in: [ 87.587062][ T7351] CPU: 2 UID: 0 PID: 7351 Comm: syz.0.314 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 87.590303][ T7351] Tainted: [B]=BAD_PAGE [ 87.591394][ T7351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.594394][ T7351] Call Trace: [ 87.595305][ T7351] [ 87.596103][ T7351] dump_stack_lvl+0x16c/0x1f0 [ 87.597468][ T7351] bad_page+0xb3/0x1f0 [ 87.598590][ T7351] ? __pfx_bad_page+0x10/0x10 [ 87.599903][ T7351] ? page_bad_reason+0x9d/0x1e0 [ 87.601299][ T7351] free_unref_page+0x657/0xdc0 [ 87.602647][ T7351] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 87.604239][ T7351] ? __phys_addr+0xc6/0x150 [ 87.605493][ T7351] skb_free_head+0xa0/0x1d0 [ 87.606752][ T7351] skb_release_data+0x560/0x730 [ 87.608156][ T7351] sk_skb_reason_drop+0x129/0x1a0 [ 87.610020][ T7351] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 87.612099][ T7351] ? kernel_text_address+0x8d/0x100 [ 87.613845][ T7351] ? hlock_class+0x4e/0x130 [ 87.615145][ T7351] ? __lock_acquire+0x163e/0x3ce0 [ 87.616583][ T7351] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 87.618772][ T7351] ? hlock_class+0x4e/0x130 [ 87.620211][ T7351] ? __lock_acquire+0xbdd/0x3ce0 [ 87.621520][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 87.622822][ T7351] __netif_receive_skb_list_core+0x357/0x950 [ 87.624438][ T7351] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 87.626131][ T7351] ? trace_lock_acquire+0x14a/0x1d0 [ 87.627581][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 87.629584][ T7351] ? lock_acquire+0x2f/0xb0 [ 87.630962][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 87.632916][ T7351] netif_receive_skb_list_internal+0x753/0xdb0 [ 87.634670][ T7351] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 87.636465][ T7351] ? __pfx_eth_type_trans+0x10/0x10 [ 87.637789][ T7351] ? __build_skb_around+0x278/0x3b0 [ 87.639290][ T7351] netif_receive_skb_list+0x4f/0x4a0 [ 87.640660][ T7351] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 87.642257][ T7351] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 87.643899][ T7351] ? bpf_test_timer_continue+0x150/0x3d0 [ 87.645285][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 87.646653][ T7351] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 87.648141][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 87.649624][ T7351] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 87.651091][ T7351] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 87.652658][ T7351] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 87.654029][ T7351] ? 0xffffffffa0004340 [ 87.655092][ T7351] ? 0xffffffffa0004340 [ 87.656127][ T7351] ? 0xffffffffa0004340 [ 87.657210][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 87.658741][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 87.660109][ T7351] ? lock_acquire+0x2f/0xb0 [ 87.661292][ T7351] ? __fget_files+0x40/0x3f0 [ 87.662481][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 87.664031][ T7351] ? fput+0x30/0x390 [ 87.665037][ T7351] ? __bpf_prog_get+0xa0/0x290 [ 87.666314][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 87.667874][ T7351] __sys_bpf+0xfc6/0x49a0 [ 87.669135][ T7351] ? __pfx_futex_wake+0x10/0x10 [ 87.670406][ T7351] ? __pfx___sys_bpf+0x10/0x10 [ 87.671639][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 87.672989][ T7351] ? do_futex+0x123/0x350 [ 87.674122][ T7351] ? __pfx_do_futex+0x10/0x10 [ 87.675326][ T7351] ? xfd_validate_state+0x5d/0x180 [ 87.676557][ T7351] ? rcu_is_watching+0x12/0xc0 [ 87.677767][ T7351] __x64_sys_bpf+0x78/0xc0 [ 87.678868][ T7351] ? lockdep_hardirqs_on+0x7c/0x110 [ 87.680197][ T7351] do_syscall_64+0xcd/0x250 [ 87.681391][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.682877][ T7351] RIP: 0033:0x7fc02f97e719 [ 87.684013][ T7351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.689223][ T7351] RSP: 002b:00007fc0306bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 87.691257][ T7351] RAX: ffffffffffffffda RBX: 00007fc02fb35f80 RCX: 00007fc02f97e719 [ 87.693602][ T7351] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 87.695692][ T7351] RBP: 00007fc02f9f132e R08: 0000000000000000 R09: 0000000000000000 [ 87.698575][ T7351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.701392][ T7351] R13: 0000000000000000 R14: 00007fc02fb35f80 R15: 00007ffe03613128 [ 87.703793][ T7351] [ 87.704934][ T7351] BUG: Bad page state in process syz.0.314 pfn:303aa [ 87.706912][ T7351] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x303aa [ 87.709237][ T7351] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 87.711017][ T7351] raw: 00fff00000000000 dead000000000040 ffff888040826000 0000000000000000 [ 87.713253][ T7351] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 87.715510][ T7351] page dumped because: page_pool leak [ 87.716927][ T7351] page_owner tracks the page as allocated [ 87.718484][ T7351] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7351, tgid 7350 (syz.0.314), ts 79036681781, free_ts 78916307047 [ 87.722736][ T7351] post_alloc_hook+0x2d1/0x350 [ 87.723947][ T7351] get_page_from_freelist+0x101e/0x3070 [ 87.725318][ T7351] __alloc_pages_noprof+0x223/0x25a0 [ 87.726698][ T7351] alloc_pages_bulk_noprof+0x77c/0x1110 [ 87.728145][ T7351] __page_pool_alloc_pages_slow+0x18f/0x770 [ 87.729633][ T7351] page_pool_alloc_netmem+0xc4/0x160 [ 87.730934][ T7351] page_pool_alloc_pages+0x1a/0x60 [ 87.732260][ T7351] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 87.733816][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 87.735276][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 87.736845][ T7351] __sys_bpf+0xfc6/0x49a0 [ 87.738162][ T7351] __x64_sys_bpf+0x78/0xc0 [ 87.739498][ T7351] do_syscall_64+0xcd/0x250 [ 87.740926][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.742580][ T7351] page last free pid 7337 tgid 7337 stack trace: [ 87.744250][ T7351] free_unref_page+0x5f4/0xdc0 [ 87.745445][ T7351] __put_partials+0x14c/0x170 [ 87.746686][ T7351] qlist_free_all+0x4e/0x120 [ 87.747983][ T7351] kasan_quarantine_reduce+0x192/0x1e0 [ 87.749436][ T7351] __kasan_slab_alloc+0x69/0x90 [ 87.750667][ T7351] __kmalloc_noprof+0x199/0x400 [ 87.751950][ T7351] tomoyo_realpath_from_path+0xb9/0x720 [ 87.753400][ T7351] tomoyo_realpath_nofollow+0xdd/0x100 [ 87.754828][ T7351] tomoyo_find_next_domain+0x2ad/0x2070 [ 87.756270][ T7351] tomoyo_bprm_check_security+0x12b/0x1d0 [ 87.757810][ T7351] security_bprm_check+0x1b9/0x1e0 [ 87.759153][ T7351] bprm_execve+0x642/0x1960 [ 87.760358][ T7351] do_execveat_common.isra.0+0x4f1/0x630 [ 87.761840][ T7351] __x64_sys_execve+0x8c/0xb0 [ 87.763075][ T7351] do_syscall_64+0xcd/0x250 [ 87.764278][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.765831][ T7351] Modules linked in: [ 87.766872][ T7351] CPU: 2 UID: 0 PID: 7351 Comm: syz.0.314 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 87.769979][ T7351] Tainted: [B]=BAD_PAGE [ 87.771056][ T7351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.773815][ T7351] Call Trace: [ 87.774686][ T7351] [ 87.775456][ T7351] dump_stack_lvl+0x16c/0x1f0 [ 87.776682][ T7351] bad_page+0xb3/0x1f0 [ 87.777773][ T7351] ? __pfx_bad_page+0x10/0x10 [ 87.779009][ T7351] ? page_bad_reason+0x9d/0x1e0 [ 87.780284][ T7351] free_unref_page+0x657/0xdc0 [ 87.781552][ T7351] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 87.783115][ T7351] ? __phys_addr+0xc6/0x150 [ 87.784304][ T7351] skb_free_head+0xa0/0x1d0 [ 87.785482][ T7351] skb_release_data+0x560/0x730 [ 87.786718][ T7351] sk_skb_reason_drop+0x129/0x1a0 [ 87.787981][ T7351] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 87.789862][ T7351] ? kernel_text_address+0x8d/0x100 [ 87.791168][ T7351] ? hlock_class+0x4e/0x130 [ 87.792368][ T7351] ? __lock_acquire+0x163e/0x3ce0 [ 87.793690][ T7351] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 87.795460][ T7351] ? hlock_class+0x4e/0x130 [ 87.796665][ T7351] ? __lock_acquire+0xbdd/0x3ce0 [ 87.797988][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 87.799358][ T7351] __netif_receive_skb_list_core+0x357/0x950 [ 87.800948][ T7351] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 87.802642][ T7351] ? trace_lock_acquire+0x14a/0x1d0 [ 87.803965][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 87.805626][ T7351] ? lock_acquire+0x2f/0xb0 [ 87.806807][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 87.808435][ T7351] netif_receive_skb_list_internal+0x753/0xdb0 [ 87.810062][ T7351] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 87.811786][ T7351] ? __pfx_eth_type_trans+0x10/0x10 [ 87.813160][ T7351] ? __build_skb_around+0x278/0x3b0 [ 87.814530][ T7351] netif_receive_skb_list+0x4f/0x4a0 [ 87.815928][ T7351] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 87.817626][ T7351] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 87.819514][ T7351] ? bpf_test_timer_continue+0x150/0x3d0 [ 87.821129][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 87.822619][ T7351] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 87.824205][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 87.825768][ T7351] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 87.827316][ T7351] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 87.828857][ T7351] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 87.830232][ T7351] ? 0xffffffffa0004340 [ 87.831324][ T7351] ? 0xffffffffa0004340 [ 87.832418][ T7351] ? 0xffffffffa0004340 [ 87.833519][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 87.835058][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 87.836471][ T7351] ? lock_acquire+0x2f/0xb0 [ 87.837666][ T7351] ? __fget_files+0x40/0x3f0 [ 87.838871][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 87.840415][ T7351] ? fput+0x30/0x390 [ 87.841476][ T7351] ? __bpf_prog_get+0xa0/0x290 [ 87.842952][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 87.844718][ T7351] __sys_bpf+0xfc6/0x49a0 [ 87.845895][ T7351] ? __pfx_futex_wake+0x10/0x10 [ 87.847192][ T7351] ? __pfx___sys_bpf+0x10/0x10 [ 87.848454][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 87.849842][ T7351] ? do_futex+0x123/0x350 [ 87.850992][ T7351] ? __pfx_do_futex+0x10/0x10 [ 87.852240][ T7351] ? xfd_validate_state+0x5d/0x180 [ 87.853773][ T7351] ? rcu_is_watching+0x12/0xc0 [ 87.855115][ T7351] __x64_sys_bpf+0x78/0xc0 [ 87.856634][ T7351] ? lockdep_hardirqs_on+0x7c/0x110 [ 87.858308][ T7351] do_syscall_64+0xcd/0x250 [ 87.859495][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.861251][ T7351] RIP: 0033:0x7fc02f97e719 [ 87.862500][ T7351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.868097][ T7351] RSP: 002b:00007fc0306bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 87.870511][ T7351] RAX: ffffffffffffffda RBX: 00007fc02fb35f80 RCX: 00007fc02f97e719 [ 87.872587][ T7351] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 87.874667][ T7351] RBP: 00007fc02f9f132e R08: 0000000000000000 R09: 0000000000000000 [ 87.877007][ T7351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.879465][ T7351] R13: 0000000000000000 R14: 00007fc02fb35f80 R15: 00007ffe03613128 [ 87.882524][ T7351] [ 87.883417][ T7351] BUG: Bad page state in process syz.0.314 pfn:303a9 [ 87.885204][ T7351] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x8 pfn:0x303a9 [ 87.887489][ T7351] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 87.889506][ T7351] raw: 00fff00000000000 dead000000000040 ffff888040826000 0000000000000000 [ 87.892002][ T7351] raw: 0000000000000008 0000000000000001 00000000ffffffff 0000000000000000 [ 87.894720][ T7351] page dumped because: page_pool leak [ 87.896391][ T7351] page_owner tracks the page as allocated [ 87.898314][ T7351] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7351, tgid 7350 (syz.0.314), ts 79036673766, free_ts 78916307047 [ 87.902724][ T7351] post_alloc_hook+0x2d1/0x350 [ 87.903998][ T7351] get_page_from_freelist+0x101e/0x3070 [ 87.905464][ T7351] __alloc_pages_noprof+0x223/0x25a0 [ 87.906837][ T7351] alloc_pages_bulk_noprof+0x77c/0x1110 [ 87.908339][ T7351] __page_pool_alloc_pages_slow+0x18f/0x770 [ 87.909973][ T7351] page_pool_alloc_netmem+0xc4/0x160 [ 87.911357][ T7351] page_pool_alloc_pages+0x1a/0x60 [ 87.912766][ T7351] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 87.914438][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 87.915818][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 87.917579][ T7351] __sys_bpf+0xfc6/0x49a0 [ 87.918739][ T7351] __x64_sys_bpf+0x78/0xc0 [ 87.920277][ T7351] do_syscall_64+0xcd/0x250 [ 87.921499][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.923172][ T7351] page last free pid 7337 tgid 7337 stack trace: [ 87.924894][ T7351] free_unref_page+0x5f4/0xdc0 [ 87.926188][ T7351] __put_partials+0x14c/0x170 [ 87.927493][ T7351] qlist_free_all+0x4e/0x120 [ 87.928781][ T7351] kasan_quarantine_reduce+0x192/0x1e0 [ 87.930218][ T7351] __kasan_slab_alloc+0x69/0x90 [ 87.931569][ T7351] __kmalloc_noprof+0x199/0x400 [ 87.932954][ T7351] tomoyo_realpath_from_path+0xb9/0x720 [ 87.934562][ T7351] tomoyo_realpath_nofollow+0xdd/0x100 [ 87.936452][ T7351] tomoyo_find_next_domain+0x2ad/0x2070 [ 87.938053][ T7351] tomoyo_bprm_check_security+0x12b/0x1d0 [ 87.939638][ T7351] security_bprm_check+0x1b9/0x1e0 [ 87.941029][ T7351] bprm_execve+0x642/0x1960 [ 87.942236][ T7351] do_execveat_common.isra.0+0x4f1/0x630 [ 87.943721][ T7351] __x64_sys_execve+0x8c/0xb0 [ 87.944972][ T7351] do_syscall_64+0xcd/0x250 [ 87.946161][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.947749][ T7351] Modules linked in: [ 87.948823][ T7351] CPU: 2 UID: 0 PID: 7351 Comm: syz.0.314 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 87.951954][ T7351] Tainted: [B]=BAD_PAGE [ 87.953077][ T7351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.955925][ T7351] Call Trace: [ 87.956951][ T7351] [ 87.957811][ T7351] dump_stack_lvl+0x16c/0x1f0 [ 87.959233][ T7351] bad_page+0xb3/0x1f0 [ 87.960293][ T7351] ? __pfx_bad_page+0x10/0x10 [ 87.961540][ T7351] ? page_bad_reason+0x9d/0x1e0 [ 87.962904][ T7351] free_unref_page+0x657/0xdc0 [ 87.964205][ T7351] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 87.965804][ T7351] ? __phys_addr+0xc6/0x150 [ 87.967000][ T7351] skb_free_head+0xa0/0x1d0 [ 87.968209][ T7351] skb_release_data+0x560/0x730 [ 87.969530][ T7351] sk_skb_reason_drop+0x129/0x1a0 [ 87.970851][ T7351] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 87.972783][ T7351] ? kernel_text_address+0x8d/0x100 [ 87.974161][ T7351] ? hlock_class+0x4e/0x130 [ 87.975367][ T7351] ? __lock_acquire+0x163e/0x3ce0 [ 87.976709][ T7351] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 87.978569][ T7351] ? hlock_class+0x4e/0x130 [ 87.979789][ T7351] ? __lock_acquire+0xbdd/0x3ce0 [ 87.981111][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 87.982475][ T7351] __netif_receive_skb_list_core+0x357/0x950 [ 87.984160][ T7351] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 87.985861][ T7351] ? trace_lock_acquire+0x14a/0x1d0 [ 87.987230][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 87.988950][ T7351] ? lock_acquire+0x2f/0xb0 [ 87.990146][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 87.991807][ T7351] netif_receive_skb_list_internal+0x753/0xdb0 [ 87.993437][ T7351] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 87.995189][ T7351] ? __pfx_eth_type_trans+0x10/0x10 [ 87.996555][ T7351] ? __build_skb_around+0x278/0x3b0 [ 87.997926][ T7351] netif_receive_skb_list+0x4f/0x4a0 [ 87.999310][ T7351] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 88.001016][ T7351] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 88.002710][ T7351] ? bpf_test_timer_continue+0x150/0x3d0 [ 88.004174][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 88.005565][ T7351] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 88.007087][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 88.008650][ T7351] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 88.010213][ T7351] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 88.011740][ T7351] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 88.013144][ T7351] ? 0xffffffffa0004340 [ 88.014228][ T7351] ? 0xffffffffa0004340 [ 88.015308][ T7351] ? 0xffffffffa0004340 [ 88.016656][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 88.018231][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 88.019660][ T7351] ? lock_acquire+0x2f/0xb0 [ 88.020878][ T7351] ? __fget_files+0x40/0x3f0 [ 88.022103][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 88.023726][ T7351] ? fput+0x30/0x390 [ 88.024983][ T7351] ? __bpf_prog_get+0xa0/0x290 [ 88.026312][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 88.027870][ T7351] __sys_bpf+0xfc6/0x49a0 [ 88.029069][ T7351] ? __pfx_futex_wake+0x10/0x10 [ 88.030368][ T7351] ? __pfx___sys_bpf+0x10/0x10 [ 88.031641][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 88.033039][ T7351] ? do_futex+0x123/0x350 [ 88.034126][ T7351] ? __pfx_do_futex+0x10/0x10 [ 88.035356][ T7351] ? xfd_validate_state+0x5d/0x180 [ 88.036720][ T7351] ? rcu_is_watching+0x12/0xc0 [ 88.038006][ T7351] __x64_sys_bpf+0x78/0xc0 [ 88.039200][ T7351] ? lockdep_hardirqs_on+0x7c/0x110 [ 88.040621][ T7351] do_syscall_64+0xcd/0x250 [ 88.041866][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.043471][ T7351] RIP: 0033:0x7fc02f97e719 [ 88.044690][ T7351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.050138][ T7351] RSP: 002b:00007fc0306bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 88.052399][ T7351] RAX: ffffffffffffffda RBX: 00007fc02fb35f80 RCX: 00007fc02f97e719 [ 88.054460][ T7351] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 88.056552][ T7351] RBP: 00007fc02f9f132e R08: 0000000000000000 R09: 0000000000000000 [ 88.058615][ T7351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.060672][ T7351] R13: 0000000000000000 R14: 00007fc02fb35f80 R15: 00007ffe03613128 [ 88.062750][ T7351] [ 88.063674][ T7351] BUG: Bad page state in process syz.0.314 pfn:303a8 [ 88.065451][ T7351] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880303ae000 pfn:0x303a8 [ 88.068102][ T7351] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 88.069973][ T7351] raw: 00fff00000000000 dead000000000040 ffff888040826000 0000000000000000 [ 88.072132][ T7351] raw: ffff8880303ae000 0000000000000001 00000000ffffffff 0000000000000000 [ 88.074343][ T7351] page dumped because: page_pool leak [ 88.075741][ T7351] page_owner tracks the page as allocated [ 88.077279][ T7351] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7351, tgid 7350 (syz.0.314), ts 79036666258, free_ts 78916307047 [ 88.081599][ T7351] post_alloc_hook+0x2d1/0x350 [ 88.082868][ T7351] get_page_from_freelist+0x101e/0x3070 [ 88.084356][ T7351] __alloc_pages_noprof+0x223/0x25a0 [ 88.085716][ T7351] alloc_pages_bulk_noprof+0x77c/0x1110 [ 88.087187][ T7351] __page_pool_alloc_pages_slow+0x18f/0x770 [ 88.088720][ T7351] page_pool_alloc_netmem+0xc4/0x160 [ 88.090125][ T7351] page_pool_alloc_pages+0x1a/0x60 [ 88.091486][ T7351] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 88.093124][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 88.094581][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 88.096084][ T7351] __sys_bpf+0xfc6/0x49a0 [ 88.097341][ T7351] __x64_sys_bpf+0x78/0xc0 [ 88.098630][ T7351] do_syscall_64+0xcd/0x250 [ 88.099952][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.101686][ T7351] page last free pid 7337 tgid 7337 stack trace: [ 88.103519][ T7351] free_unref_page+0x5f4/0xdc0 [ 88.104800][ T7351] __put_partials+0x14c/0x170 [ 88.106049][ T7351] qlist_free_all+0x4e/0x120 [ 88.107339][ T7351] kasan_quarantine_reduce+0x192/0x1e0 [ 88.108790][ T7351] __kasan_slab_alloc+0x69/0x90 [ 88.110163][ T7351] __kmalloc_noprof+0x199/0x400 [ 88.111539][ T7351] tomoyo_realpath_from_path+0xb9/0x720 [ 88.113067][ T7351] tomoyo_realpath_nofollow+0xdd/0x100 [ 88.114496][ T7351] tomoyo_find_next_domain+0x2ad/0x2070 [ 88.115944][ T7351] tomoyo_bprm_check_security+0x12b/0x1d0 [ 88.117493][ T7351] security_bprm_check+0x1b9/0x1e0 [ 88.118837][ T7351] bprm_execve+0x642/0x1960 [ 88.120028][ T7351] do_execveat_common.isra.0+0x4f1/0x630 [ 88.121509][ T7351] __x64_sys_execve+0x8c/0xb0 [ 88.122755][ T7351] do_syscall_64+0xcd/0x250 [ 88.123956][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.125520][ T7351] Modules linked in: [ 88.126542][ T7351] CPU: 2 UID: 0 PID: 7351 Comm: syz.0.314 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 88.129789][ T7351] Tainted: [B]=BAD_PAGE [ 88.130871][ T7351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.133650][ T7351] Call Trace: [ 88.134534][ T7351] [ 88.135313][ T7351] dump_stack_lvl+0x16c/0x1f0 [ 88.136566][ T7351] bad_page+0xb3/0x1f0 [ 88.137646][ T7351] ? __pfx_bad_page+0x10/0x10 [ 88.138877][ T7351] ? page_bad_reason+0x9d/0x1e0 [ 88.140193][ T7351] free_unref_page+0x657/0xdc0 [ 88.141498][ T7351] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 88.143130][ T7351] ? __phys_addr+0xc6/0x150 [ 88.144329][ T7351] skb_free_head+0xa0/0x1d0 [ 88.145543][ T7351] skb_release_data+0x560/0x730 [ 88.146810][ T7351] sk_skb_reason_drop+0x129/0x1a0 [ 88.148110][ T7351] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 88.149912][ T7351] ? kernel_text_address+0x8d/0x100 [ 88.151434][ T7351] ? hlock_class+0x4e/0x130 [ 88.152715][ T7351] ? __lock_acquire+0x163e/0x3ce0 [ 88.154262][ T7351] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 88.156275][ T7351] ? hlock_class+0x4e/0x130 [ 88.157562][ T7351] ? __lock_acquire+0xbdd/0x3ce0 [ 88.158870][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 88.160328][ T7351] __netif_receive_skb_list_core+0x357/0x950 [ 88.161934][ T7351] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 88.163632][ T7351] ? trace_lock_acquire+0x14a/0x1d0 [ 88.165009][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 88.166660][ T7351] ? lock_acquire+0x2f/0xb0 [ 88.167844][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 88.169815][ T7351] netif_receive_skb_list_internal+0x753/0xdb0 [ 88.171438][ T7351] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 88.173204][ T7351] ? __pfx_eth_type_trans+0x10/0x10 [ 88.174595][ T7351] ? __build_skb_around+0x278/0x3b0 [ 88.175973][ T7351] netif_receive_skb_list+0x4f/0x4a0 [ 88.177384][ T7351] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 88.179076][ T7351] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 88.180813][ T7351] ? bpf_test_timer_continue+0x150/0x3d0 [ 88.182281][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 88.183677][ T7351] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 88.185196][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 88.186762][ T7351] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 88.188435][ T7351] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 88.190385][ T7351] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 88.191963][ T7351] ? 0xffffffffa0004340 [ 88.193213][ T7351] ? 0xffffffffa0004340 [ 88.194336][ T7351] ? 0xffffffffa0004340 [ 88.195452][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 88.197069][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 88.198506][ T7351] ? lock_acquire+0x2f/0xb0 [ 88.199816][ T7351] ? __fget_files+0x40/0x3f0 [ 88.201079][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 88.202727][ T7351] ? fput+0x30/0x390 [ 88.203829][ T7351] ? __bpf_prog_get+0xa0/0x290 [ 88.205120][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 88.206672][ T7351] __sys_bpf+0xfc6/0x49a0 [ 88.207820][ T7351] ? __pfx_futex_wake+0x10/0x10 [ 88.209161][ T7351] ? __pfx___sys_bpf+0x10/0x10 [ 88.210539][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 88.211939][ T7351] ? do_futex+0x123/0x350 [ 88.213102][ T7351] ? __pfx_do_futex+0x10/0x10 [ 88.214407][ T7351] ? xfd_validate_state+0x5d/0x180 [ 88.215900][ T7351] ? rcu_is_watching+0x12/0xc0 [ 88.217297][ T7351] __x64_sys_bpf+0x78/0xc0 [ 88.219195][ T7351] ? lockdep_hardirqs_on+0x7c/0x110 [ 88.220924][ T7351] do_syscall_64+0xcd/0x250 [ 88.222320][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.224022][ T7351] RIP: 0033:0x7fc02f97e719 [ 88.225383][ T7351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.230683][ T7351] RSP: 002b:00007fc0306bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 88.232855][ T7351] RAX: ffffffffffffffda RBX: 00007fc02fb35f80 RCX: 00007fc02f97e719 [ 88.235032][ T7351] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 88.237280][ T7351] RBP: 00007fc02f9f132e R08: 0000000000000000 R09: 0000000000000000 [ 88.240037][ T7351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.242372][ T7351] R13: 0000000000000000 R14: 00007fc02fb35f80 R15: 00007ffe03613128 [ 88.244429][ T7351] [ 88.245437][ T7351] BUG: Bad page state in process syz.0.314 pfn:303a7 [ 88.247233][ T7351] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x303a7 [ 88.249514][ T7351] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 88.251341][ T7351] raw: 00fff00000000000 dead000000000040 ffff888040826000 0000000000000000 [ 88.253670][ T7351] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 88.256083][ T7351] page dumped because: page_pool leak [ 88.257700][ T7351] page_owner tracks the page as allocated [ 88.259350][ T7351] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7351, tgid 7350 (syz.0.314), ts 79036658565, free_ts 78916295460 [ 88.263916][ T7351] post_alloc_hook+0x2d1/0x350 [ 88.265157][ T7351] get_page_from_freelist+0x101e/0x3070 [ 88.266560][ T7351] __alloc_pages_noprof+0x223/0x25a0 [ 88.267950][ T7351] alloc_pages_bulk_noprof+0x77c/0x1110 [ 88.269383][ T7351] __page_pool_alloc_pages_slow+0x18f/0x770 [ 88.270887][ T7351] page_pool_alloc_netmem+0xc4/0x160 [ 88.272253][ T7351] page_pool_alloc_pages+0x1a/0x60 [ 88.273604][ T7351] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 88.275205][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 88.276566][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 88.278031][ T7351] __sys_bpf+0xfc6/0x49a0 [ 88.279158][ T7351] __x64_sys_bpf+0x78/0xc0 [ 88.280320][ T7351] do_syscall_64+0xcd/0x250 [ 88.281907][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.283484][ T7351] page last free pid 7337 tgid 7337 stack trace: [ 88.285234][ T7351] free_unref_page+0x5f4/0xdc0 [ 88.286598][ T7351] __put_partials+0x14c/0x170 [ 88.287995][ T7351] qlist_free_all+0x4e/0x120 [ 88.289348][ T7351] kasan_quarantine_reduce+0x192/0x1e0 [ 88.290891][ T7351] __kasan_slab_alloc+0x69/0x90 [ 88.292188][ T7351] __kmalloc_noprof+0x199/0x400 [ 88.293465][ T7351] tomoyo_realpath_from_path+0xb9/0x720 [ 88.294992][ T7351] tomoyo_realpath_nofollow+0xdd/0x100 [ 88.296427][ T7351] tomoyo_find_next_domain+0x2ad/0x2070 [ 88.297968][ T7351] tomoyo_bprm_check_security+0x12b/0x1d0 [ 88.299466][ T7351] security_bprm_check+0x1b9/0x1e0 [ 88.300836][ T7351] bprm_execve+0x642/0x1960 [ 88.302043][ T7351] do_execveat_common.isra.0+0x4f1/0x630 [ 88.303526][ T7351] __x64_sys_execve+0x8c/0xb0 [ 88.304776][ T7351] do_syscall_64+0xcd/0x250 [ 88.305973][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.307569][ T7351] Modules linked in: [ 88.308647][ T7351] CPU: 2 UID: 0 PID: 7351 Comm: syz.0.314 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 88.311805][ T7351] Tainted: [B]=BAD_PAGE [ 88.312904][ T7351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.315819][ T7351] Call Trace: [ 88.316713][ T7351] [ 88.317576][ T7351] dump_stack_lvl+0x16c/0x1f0 [ 88.318898][ T7351] bad_page+0xb3/0x1f0 [ 88.320121][ T7351] ? __pfx_bad_page+0x10/0x10 [ 88.321508][ T7351] ? page_bad_reason+0x9d/0x1e0 [ 88.322917][ T7351] free_unref_page+0x657/0xdc0 [ 88.324335][ T7351] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 88.326020][ T7351] ? __phys_addr+0xc6/0x150 [ 88.327234][ T7351] skb_free_head+0xa0/0x1d0 [ 88.328456][ T7351] skb_release_data+0x560/0x730 [ 88.329767][ T7351] sk_skb_reason_drop+0x129/0x1a0 [ 88.331104][ T7351] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 88.332867][ T7351] ? kernel_text_address+0x8d/0x100 [ 88.334242][ T7351] ? hlock_class+0x4e/0x130 [ 88.335440][ T7351] ? __lock_acquire+0x163e/0x3ce0 [ 88.336783][ T7351] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 88.338957][ T7351] ? hlock_class+0x4e/0x130 [ 88.340366][ T7351] ? __lock_acquire+0xbdd/0x3ce0 [ 88.341819][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 88.343185][ T7351] __netif_receive_skb_list_core+0x357/0x950 [ 88.344759][ T7351] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 88.346522][ T7351] ? trace_lock_acquire+0x14a/0x1d0 [ 88.347902][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 88.349669][ T7351] ? lock_acquire+0x2f/0xb0 [ 88.350905][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 88.352637][ T7351] netif_receive_skb_list_internal+0x753/0xdb0 [ 88.354412][ T7351] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 88.356233][ T7351] ? __pfx_eth_type_trans+0x10/0x10 [ 88.357678][ T7351] ? __build_skb_around+0x278/0x3b0 [ 88.359096][ T7351] netif_receive_skb_list+0x4f/0x4a0 [ 88.360497][ T7351] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 88.362139][ T7351] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 88.363867][ T7351] ? bpf_test_timer_continue+0x150/0x3d0 [ 88.365335][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 88.366731][ T7351] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 88.368238][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 88.369753][ T7351] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 88.371308][ T7351] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 88.372826][ T7351] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 88.374292][ T7351] ? 0xffffffffa0004340 [ 88.375390][ T7351] ? 0xffffffffa0004340 [ 88.376564][ T7351] ? 0xffffffffa0004340 [ 88.377736][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 88.379289][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 88.380826][ T7351] ? lock_acquire+0x2f/0xb0 [ 88.382165][ T7351] ? __fget_files+0x40/0x3f0 [ 88.383450][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 88.385011][ T7351] ? fput+0x30/0x390 [ 88.386057][ T7351] ? __bpf_prog_get+0xa0/0x290 [ 88.387356][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 88.388950][ T7351] __sys_bpf+0xfc6/0x49a0 [ 88.390099][ T7351] ? __pfx_futex_wake+0x10/0x10 [ 88.391351][ T7351] ? __pfx___sys_bpf+0x10/0x10 [ 88.392627][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 88.394007][ T7351] ? do_futex+0x123/0x350 [ 88.395150][ T7351] ? __pfx_do_futex+0x10/0x10 [ 88.396419][ T7351] ? xfd_validate_state+0x5d/0x180 [ 88.397765][ T7351] ? rcu_is_watching+0x12/0xc0 [ 88.399011][ T7351] __x64_sys_bpf+0x78/0xc0 [ 88.400254][ T7351] ? lockdep_hardirqs_on+0x7c/0x110 [ 88.401639][ T7351] do_syscall_64+0xcd/0x250 [ 88.402844][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.404387][ T7351] RIP: 0033:0x7fc02f97e719 [ 88.405578][ T7351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.410873][ T7351] RSP: 002b:00007fc0306bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 88.413287][ T7351] RAX: ffffffffffffffda RBX: 00007fc02fb35f80 RCX: 00007fc02f97e719 [ 88.415555][ T7351] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 88.417698][ T7351] RBP: 00007fc02f9f132e R08: 0000000000000000 R09: 0000000000000000 [ 88.419800][ T7351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.422006][ T7351] R13: 0000000000000000 R14: 00007fc02fb35f80 R15: 00007ffe03613128 [ 88.424116][ T7351] [ 88.425043][ T7351] BUG: Bad page state in process syz.0.314 pfn:303a6 [ 88.426834][ T7351] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x303a6 [ 88.429199][ T7351] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 88.431093][ T7351] raw: 00fff00000000000 dead000000000040 ffff888040826000 0000000000000000 [ 88.433478][ T7351] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 88.435724][ T7351] page dumped because: page_pool leak [ 88.437208][ T7351] page_owner tracks the page as allocated [ 88.438643][ T7351] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7351, tgid 7350 (syz.0.314), ts 79036650527, free_ts 78916295460 [ 88.442918][ T7351] post_alloc_hook+0x2d1/0x350 [ 88.444170][ T7351] get_page_from_freelist+0x101e/0x3070 [ 88.445610][ T7351] __alloc_pages_noprof+0x223/0x25a0 [ 88.446979][ T7351] alloc_pages_bulk_noprof+0x77c/0x1110 [ 88.448495][ T7351] __page_pool_alloc_pages_slow+0x18f/0x770 [ 88.450159][ T7351] page_pool_alloc_netmem+0xc4/0x160 [ 88.451618][ T7351] page_pool_alloc_pages+0x1a/0x60 [ 88.453105][ T7351] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 88.454887][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 88.456381][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 88.458087][ T7351] __sys_bpf+0xfc6/0x49a0 [ 88.459301][ T7351] __x64_sys_bpf+0x78/0xc0 [ 88.460558][ T7351] do_syscall_64+0xcd/0x250 [ 88.461898][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.463466][ T7351] page last free pid 7337 tgid 7337 stack trace: [ 88.465155][ T7351] free_unref_page+0x5f4/0xdc0 [ 88.466440][ T7351] __put_partials+0x14c/0x170 [ 88.467771][ T7351] qlist_free_all+0x4e/0x120 [ 88.469078][ T7351] kasan_quarantine_reduce+0x192/0x1e0 [ 88.470573][ T7351] __kasan_slab_alloc+0x69/0x90 [ 88.471864][ T7351] __kmalloc_noprof+0x199/0x400 [ 88.473125][ T7351] tomoyo_realpath_from_path+0xb9/0x720 [ 88.474752][ T7351] tomoyo_realpath_nofollow+0xdd/0x100 [ 88.476437][ T7351] tomoyo_find_next_domain+0x2ad/0x2070 [ 88.478271][ T7351] tomoyo_bprm_check_security+0x12b/0x1d0 [ 88.479985][ T7351] security_bprm_check+0x1b9/0x1e0 [ 88.481548][ T7351] bprm_execve+0x642/0x1960 [ 88.482914][ T7351] do_execveat_common.isra.0+0x4f1/0x630 [ 88.484454][ T7351] __x64_sys_execve+0x8c/0xb0 [ 88.485732][ T7351] do_syscall_64+0xcd/0x250 [ 88.486940][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.488633][ T7351] Modules linked in: [ 88.489689][ T7351] CPU: 2 UID: 0 PID: 7351 Comm: syz.0.314 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 88.492813][ T7351] Tainted: [B]=BAD_PAGE [ 88.493914][ T7351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.497212][ T7351] Call Trace: [ 88.498076][ T7351] [ 88.498845][ T7351] dump_stack_lvl+0x16c/0x1f0 [ 88.500070][ T7351] bad_page+0xb3/0x1f0 [ 88.501137][ T7351] ? __pfx_bad_page+0x10/0x10 [ 88.502389][ T7351] ? page_bad_reason+0x9d/0x1e0 [ 88.503679][ T7351] free_unref_page+0x657/0xdc0 [ 88.504929][ T7351] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 88.506534][ T7351] ? __phys_addr+0xc6/0x150 [ 88.507761][ T7351] skb_free_head+0xa0/0x1d0 [ 88.508999][ T7351] skb_release_data+0x560/0x730 [ 88.510290][ T7351] sk_skb_reason_drop+0x129/0x1a0 [ 88.511678][ T7351] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 88.513489][ T7351] ? kernel_text_address+0x8d/0x100 [ 88.514853][ T7351] ? hlock_class+0x4e/0x130 [ 88.516150][ T7351] ? __lock_acquire+0x163e/0x3ce0 [ 88.517624][ T7351] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 88.519799][ T7351] ? hlock_class+0x4e/0x130 [ 88.521091][ T7351] ? __lock_acquire+0xbdd/0x3ce0 [ 88.522411][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 88.523996][ T7351] __netif_receive_skb_list_core+0x357/0x950 [ 88.525580][ T7351] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 88.527264][ T7351] ? trace_lock_acquire+0x14a/0x1d0 [ 88.528654][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 88.530323][ T7351] ? lock_acquire+0x2f/0xb0 [ 88.531591][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 88.533253][ T7351] netif_receive_skb_list_internal+0x753/0xdb0 [ 88.534870][ T7351] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 88.536590][ T7351] ? __pfx_eth_type_trans+0x10/0x10 [ 88.537964][ T7351] ? __build_skb_around+0x278/0x3b0 [ 88.539332][ T7351] netif_receive_skb_list+0x4f/0x4a0 [ 88.540686][ T7351] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 88.542336][ T7351] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 88.544033][ T7351] ? bpf_test_timer_continue+0x150/0x3d0 [ 88.545500][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 88.546968][ T7351] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 88.548615][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 88.550282][ T7351] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 88.551893][ T7351] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 88.553467][ T7351] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 88.554947][ T7351] ? 0xffffffffa0004340 [ 88.556045][ T7351] ? 0xffffffffa0004340 [ 88.557226][ T7351] ? 0xffffffffa0004340 [ 88.558406][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 88.560068][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 88.561596][ T7351] ? lock_acquire+0x2f/0xb0 [ 88.562793][ T7351] ? __fget_files+0x40/0x3f0 [ 88.564021][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 88.565573][ T7351] ? fput+0x30/0x390 [ 88.566616][ T7351] ? __bpf_prog_get+0xa0/0x290 [ 88.567895][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 88.569647][ T7351] __sys_bpf+0xfc6/0x49a0 [ 88.570851][ T7351] ? __pfx_futex_wake+0x10/0x10 [ 88.572190][ T7351] ? __pfx___sys_bpf+0x10/0x10 [ 88.573543][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 88.575047][ T7351] ? do_futex+0x123/0x350 [ 88.576309][ T7351] ? __pfx_do_futex+0x10/0x10 [ 88.577736][ T7351] ? xfd_validate_state+0x5d/0x180 [ 88.579508][ T7351] ? rcu_is_watching+0x12/0xc0 [ 88.581060][ T7351] __x64_sys_bpf+0x78/0xc0 [ 88.582338][ T7351] ? lockdep_hardirqs_on+0x7c/0x110 [ 88.583794][ T7351] do_syscall_64+0xcd/0x250 [ 88.585010][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.586647][ T7351] RIP: 0033:0x7fc02f97e719 [ 88.587841][ T7351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.592892][ T7351] RSP: 002b:00007fc0306bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 88.595075][ T7351] RAX: ffffffffffffffda RBX: 00007fc02fb35f80 RCX: 00007fc02f97e719 [ 88.597153][ T7351] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 88.599649][ T7351] RBP: 00007fc02f9f132e R08: 0000000000000000 R09: 0000000000000000 [ 88.601752][ T7351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.604157][ T7351] R13: 0000000000000000 R14: 00007fc02fb35f80 R15: 00007ffe03613128 [ 88.606450][ T7351] [ 88.607490][ T7351] BUG: Bad page state in process syz.0.314 pfn:303a5 [ 88.609570][ T7351] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x303a5 [ 88.611928][ T7351] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 88.613869][ T7351] raw: 00fff00000000000 dead000000000040 ffff888040826000 0000000000000000 [ 88.616290][ T7351] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 88.618833][ T7351] page dumped because: page_pool leak [ 88.620421][ T7351] page_owner tracks the page as allocated [ 88.621971][ T7351] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7351, tgid 7350 (syz.0.314), ts 79036643050, free_ts 78916295460 [ 88.626288][ T7351] post_alloc_hook+0x2d1/0x350 [ 88.627651][ T7351] get_page_from_freelist+0x101e/0x3070 [ 88.629154][ T7351] __alloc_pages_noprof+0x223/0x25a0 [ 88.630654][ T7351] alloc_pages_bulk_noprof+0x77c/0x1110 [ 88.632114][ T7351] __page_pool_alloc_pages_slow+0x18f/0x770 [ 88.633757][ T7351] page_pool_alloc_netmem+0xc4/0x160 [ 88.635148][ T7351] page_pool_alloc_pages+0x1a/0x60 [ 88.636490][ T7351] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 88.638542][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 88.640563][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 88.642691][ T7351] __sys_bpf+0xfc6/0x49a0 [ 88.644360][ T7351] __x64_sys_bpf+0x78/0xc0 [ 88.646129][ T7351] do_syscall_64+0xcd/0x250 [ 88.648038][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.650212][ T7351] page last free pid 7337 tgid 7337 stack trace: [ 88.652470][ T7351] free_unref_page+0x5f4/0xdc0 [ 88.654234][ T7351] __put_partials+0x14c/0x170 [ 88.656011][ T7351] qlist_free_all+0x4e/0x120 [ 88.658004][ T7351] kasan_quarantine_reduce+0x192/0x1e0 [ 88.660104][ T7351] __kasan_slab_alloc+0x69/0x90 [ 88.661741][ T7351] __kmalloc_noprof+0x199/0x400 [ 88.663048][ T7351] tomoyo_realpath_from_path+0xb9/0x720 [ 88.664521][ T7351] tomoyo_realpath_nofollow+0xdd/0x100 [ 88.666224][ T7351] tomoyo_find_next_domain+0x2ad/0x2070 [ 88.668029][ T7351] tomoyo_bprm_check_security+0x12b/0x1d0 [ 88.669813][ T7351] security_bprm_check+0x1b9/0x1e0 [ 88.671186][ T7351] bprm_execve+0x642/0x1960 [ 88.672386][ T7351] do_execveat_common.isra.0+0x4f1/0x630 [ 88.673860][ T7351] __x64_sys_execve+0x8c/0xb0 [ 88.675108][ T7351] do_syscall_64+0xcd/0x250 [ 88.676334][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.677941][ T7351] Modules linked in: [ 88.679005][ T7351] CPU: 2 UID: 0 PID: 7351 Comm: syz.0.314 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 88.682228][ T7351] Tainted: [B]=BAD_PAGE [ 88.683717][ T7351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.687563][ T7351] Call Trace: [ 88.688834][ T7351] [ 88.689912][ T7351] dump_stack_lvl+0x16c/0x1f0 [ 88.691806][ T7351] bad_page+0xb3/0x1f0 [ 88.693494][ T7351] ? __pfx_bad_page+0x10/0x10 [ 88.695352][ T7351] ? page_bad_reason+0x9d/0x1e0 [ 88.697151][ T7351] free_unref_page+0x657/0xdc0 [ 88.698896][ T7351] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 88.701389][ T7351] ? __phys_addr+0xc6/0x150 [ 88.703051][ T7351] skb_free_head+0xa0/0x1d0 [ 88.704660][ T7351] skb_release_data+0x560/0x730 [ 88.705962][ T7351] sk_skb_reason_drop+0x129/0x1a0 [ 88.707272][ T7351] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 88.708998][ T7351] ? kernel_text_address+0x8d/0x100 [ 88.710461][ T7351] ? hlock_class+0x4e/0x130 [ 88.711653][ T7351] ? __lock_acquire+0x163e/0x3ce0 [ 88.713201][ T7351] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 88.715504][ T7351] ? hlock_class+0x4e/0x130 [ 88.716858][ T7351] ? __lock_acquire+0xbdd/0x3ce0 [ 88.718458][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 88.720440][ T7351] __netif_receive_skb_list_core+0x357/0x950 [ 88.722252][ T7351] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 88.724127][ T7351] ? trace_lock_acquire+0x14a/0x1d0 [ 88.725765][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 88.727448][ T7351] ? lock_acquire+0x2f/0xb0 [ 88.728744][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 88.730435][ T7351] netif_receive_skb_list_internal+0x753/0xdb0 [ 88.732060][ T7351] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 88.734115][ T7351] ? __pfx_eth_type_trans+0x10/0x10 [ 88.735519][ T7351] ? __build_skb_around+0x278/0x3b0 [ 88.736909][ T7351] netif_receive_skb_list+0x4f/0x4a0 [ 88.738296][ T7351] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 88.740508][ T7351] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 88.742272][ T7351] ? bpf_test_timer_continue+0x150/0x3d0 [ 88.743747][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 88.745152][ T7351] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 88.746679][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 88.748184][ T7351] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 88.749659][ T7351] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 88.751186][ T7351] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 88.753144][ T7351] ? 0xffffffffa0004340 [ 88.754448][ T7351] ? 0xffffffffa0004340 [ 88.755612][ T7351] ? 0xffffffffa0004340 [ 88.756730][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 88.758270][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 88.759759][ T7351] ? lock_acquire+0x2f/0xb0 [ 88.760963][ T7351] ? __fget_files+0x40/0x3f0 [ 88.762181][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 88.763704][ T7351] ? fput+0x30/0x390 [ 88.764744][ T7351] ? __bpf_prog_get+0xa0/0x290 [ 88.766003][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 88.767522][ T7351] __sys_bpf+0xfc6/0x49a0 [ 88.768652][ T7351] ? __pfx_futex_wake+0x10/0x10 [ 88.769935][ T7351] ? __pfx___sys_bpf+0x10/0x10 [ 88.771184][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 88.772530][ T7351] ? do_futex+0x123/0x350 [ 88.773695][ T7351] ? __pfx_do_futex+0x10/0x10 [ 88.774943][ T7351] ? xfd_validate_state+0x5d/0x180 [ 88.776287][ T7351] ? rcu_is_watching+0x12/0xc0 [ 88.777565][ T7351] __x64_sys_bpf+0x78/0xc0 [ 88.778746][ T7351] ? lockdep_hardirqs_on+0x7c/0x110 [ 88.780124][ T7351] do_syscall_64+0xcd/0x250 [ 88.781420][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.783101][ T7351] RIP: 0033:0x7fc02f97e719 [ 88.784401][ T7351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.789581][ T7351] RSP: 002b:00007fc0306bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 88.791756][ T7351] RAX: ffffffffffffffda RBX: 00007fc02fb35f80 RCX: 00007fc02f97e719 [ 88.794116][ T7351] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 88.796194][ T7351] RBP: 00007fc02f9f132e R08: 0000000000000000 R09: 0000000000000000 [ 88.798574][ T7351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.801045][ T7351] R13: 0000000000000000 R14: 00007fc02fb35f80 R15: 00007ffe03613128 [ 88.803091][ T7351] [ 88.804069][ T7351] BUG: Bad page state in process syz.0.314 pfn:303a4 [ 88.805945][ T7351] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x303a4 [ 88.808368][ T7351] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 88.810265][ T7351] raw: 00fff00000000000 dead000000000040 ffff888040826000 0000000000000000 [ 88.812491][ T7351] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 88.814761][ T7351] page dumped because: page_pool leak [ 88.816178][ T7351] page_owner tracks the page as allocated [ 88.817872][ T7351] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7351, tgid 7350 (syz.0.314), ts 79036635204, free_ts 78916295460 [ 88.822400][ T7351] post_alloc_hook+0x2d1/0x350 [ 88.823679][ T7351] get_page_from_freelist+0x101e/0x3070 [ 88.825131][ T7351] __alloc_pages_noprof+0x223/0x25a0 [ 88.826524][ T7351] alloc_pages_bulk_noprof+0x77c/0x1110 [ 88.828025][ T7351] __page_pool_alloc_pages_slow+0x18f/0x770 [ 88.829601][ T7351] page_pool_alloc_netmem+0xc4/0x160 [ 88.831004][ T7351] page_pool_alloc_pages+0x1a/0x60 [ 88.832359][ T7351] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 88.833999][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 88.835394][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 88.836814][ T7351] __sys_bpf+0xfc6/0x49a0 [ 88.838060][ T7351] __x64_sys_bpf+0x78/0xc0 [ 88.839394][ T7351] do_syscall_64+0xcd/0x250 [ 88.840927][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.842506][ T7351] page last free pid 7337 tgid 7337 stack trace: [ 88.844158][ T7351] free_unref_page+0x5f4/0xdc0 [ 88.845446][ T7351] __put_partials+0x14c/0x170 [ 88.846724][ T7351] qlist_free_all+0x4e/0x120 [ 88.848018][ T7351] kasan_quarantine_reduce+0x192/0x1e0 [ 88.849488][ T7351] __kasan_slab_alloc+0x69/0x90 [ 88.850775][ T7351] __kmalloc_noprof+0x199/0x400 [ 88.852062][ T7351] tomoyo_realpath_from_path+0xb9/0x720 [ 88.853519][ T7351] tomoyo_realpath_nofollow+0xdd/0x100 [ 88.854953][ T7351] tomoyo_find_next_domain+0x2ad/0x2070 [ 88.856409][ T7351] tomoyo_bprm_check_security+0x12b/0x1d0 [ 88.858000][ T7351] security_bprm_check+0x1b9/0x1e0 [ 88.859373][ T7351] bprm_execve+0x642/0x1960 [ 88.860591][ T7351] do_execveat_common.isra.0+0x4f1/0x630 [ 88.862194][ T7351] __x64_sys_execve+0x8c/0xb0 [ 88.863573][ T7351] do_syscall_64+0xcd/0x250 [ 88.864891][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.866665][ T7351] Modules linked in: [ 88.867870][ T7351] CPU: 2 UID: 0 PID: 7351 Comm: syz.0.314 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 88.871206][ T7351] Tainted: [B]=BAD_PAGE [ 88.872299][ T7351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.875172][ T7351] Call Trace: [ 88.876096][ T7351] [ 88.876949][ T7351] dump_stack_lvl+0x16c/0x1f0 [ 88.878704][ T7351] bad_page+0xb3/0x1f0 [ 88.880178][ T7351] ? __pfx_bad_page+0x10/0x10 [ 88.881732][ T7351] ? page_bad_reason+0x9d/0x1e0 [ 88.883111][ T7351] free_unref_page+0x657/0xdc0 [ 88.884388][ T7351] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 88.885994][ T7351] ? __phys_addr+0xc6/0x150 [ 88.887201][ T7351] skb_free_head+0xa0/0x1d0 [ 88.888412][ T7351] skb_release_data+0x560/0x730 [ 88.889727][ T7351] sk_skb_reason_drop+0x129/0x1a0 [ 88.891063][ T7351] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 88.892821][ T7351] ? kernel_text_address+0x8d/0x100 [ 88.894184][ T7351] ? hlock_class+0x4e/0x130 [ 88.895439][ T7351] ? __lock_acquire+0x163e/0x3ce0 [ 88.896767][ T7351] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 88.898614][ T7351] ? hlock_class+0x4e/0x130 [ 88.899801][ T7351] ? __lock_acquire+0xbdd/0x3ce0 [ 88.901119][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 88.902481][ T7351] __netif_receive_skb_list_core+0x357/0x950 [ 88.904065][ T7351] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 88.905767][ T7351] ? trace_lock_acquire+0x14a/0x1d0 [ 88.907138][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 88.908829][ T7351] ? lock_acquire+0x2f/0xb0 [ 88.910002][ T7351] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 88.911657][ T7351] netif_receive_skb_list_internal+0x753/0xdb0 [ 88.913270][ T7351] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 88.915007][ T7351] ? __pfx_eth_type_trans+0x10/0x10 [ 88.916370][ T7351] ? __build_skb_around+0x278/0x3b0 [ 88.917748][ T7351] netif_receive_skb_list+0x4f/0x4a0 [ 88.919146][ T7351] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 88.920797][ T7351] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 88.922488][ T7351] ? bpf_test_timer_continue+0x150/0x3d0 [ 88.923972][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 88.925388][ T7351] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 88.926922][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 88.928486][ T7351] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 88.930058][ T7351] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 88.931592][ T7351] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 88.932981][ T7351] ? 0xffffffffa0004340 [ 88.934077][ T7351] ? 0xffffffffa0004340 [ 88.935165][ T7351] ? 0xffffffffa0004340 [ 88.936258][ T7351] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 88.937816][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 88.939225][ T7351] ? lock_acquire+0x2f/0xb0 [ 88.940422][ T7351] ? __fget_files+0x40/0x3f0 [ 88.941659][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 88.943191][ T7351] ? fput+0x30/0x390 [ 88.944210][ T7351] ? __bpf_prog_get+0xa0/0x290 [ 88.945479][ T7351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 88.947012][ T7351] __sys_bpf+0xfc6/0x49a0 [ 88.948151][ T7351] ? __pfx_futex_wake+0x10/0x10 [ 88.949466][ T7351] ? __pfx___sys_bpf+0x10/0x10 [ 88.950739][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 88.952102][ T7351] ? do_futex+0x123/0x350 [ 88.953248][ T7351] ? __pfx_do_futex+0x10/0x10 [ 88.954490][ T7351] ? xfd_validate_state+0x5d/0x180 [ 88.955830][ T7351] ? rcu_is_watching+0x12/0xc0 [ 88.957096][ T7351] __x64_sys_bpf+0x78/0xc0 [ 88.958268][ T7351] ? lockdep_hardirqs_on+0x7c/0x110 [ 88.959634][ T7351] do_syscall_64+0xcd/0x250 [ 88.960850][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.962399][ T7351] RIP: 0033:0x7fc02f97e719 [ 88.963583][ T7351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.968570][ T7351] RSP: 002b:00007fc0306bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 88.970753][ T7351] RAX: ffffffffffffffda RBX: 00007fc02fb35f80 RCX: 00007fc02f97e719 [ 88.972810][ T7351] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 88.974873][ T7351] RBP: 00007fc02f9f132e R08: 0000000000000000 R09: 0000000000000000 [ 88.976964][ T7351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.979036][ T7351] R13: 0000000000000000 R14: 00007fc02fb35f80 R15: 00007ffe03613128 [ 88.981090][ T7351] [ 88.981997][ T7351] BUG: Bad page state in process syz.0.314 pfn:303a3 [ 88.983745][ T7351] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x303a3 [ 88.986017][ T7351] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 88.987935][ T7351] raw: 00fff00000000000 dead000000000040 ffff888040826000 0000000000000000 [ 88.990171][ T7351] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 88.992294][ T7351] page dumped because: page_pool leak [ 88.993711][ T7351] page_owner tracks the page as allocated [ 88.995199][ T7351] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7351, tgid 7350 (syz.0.314), ts 79036626980, free_ts 78916295460 [ 88.999519][ T7351] post_alloc_hook+0x2d1/0x350 [ 89.000785][ T7351] get_page_from_freelist+0x101e/0x3070 [ 89.002192][ T7351] __alloc_pages_noprof+0x223/0x25a0 [ 89.003591][ T7351] alloc_pages_bulk_noprof+0x77c/0x1110 [ 89.005053][ T7351] __page_pool_alloc_pages_slow+0x18f/0x770 [ 89.006592][ T7351] page_pool_alloc_netmem+0xc4/0x160 [ 89.008023][ T7351] page_pool_alloc_pages+0x1a/0x60 [ 89.009395][ T7351] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 89.011025][ T7351] bpf_test_run_xdp_live+0x365/0x500 [ 89.012407][ T7351] bpf_prog_test_run_xdp+0x827/0x1580 [ 89.013817][ T7351] __sys_bpf+0xfc6/0x49a0 [ 89.014957][ T7351] __x64_sys_bpf+0x78/0xc0 [ 89.016131][ T7351] do_syscall_64+0xcd/0x250 [ 89.017388][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.018936][ T7351] page last free pid 7337 tgid 7337 stack trace: [ 89.020580][ T7351] free_unref_page+0x5f4/0xdc0 [ 89.021828][ T7351] __put_partials+0x14c/0x170 [ 89.023067][ T7351] qlist_free_all+0x4e/0x120 [ 89.024274][ T7351] kasan_quarantine_reduce+0x192/0x1e0 [ 89.025704][ T7351] __kasan_slab_alloc+0x69/0x90 [ 89.026995][ T7351] __kmalloc_noprof+0x199/0x400 [ 89.028324][ T7351] tomoyo_realpath_from_path+0xb9/0x720 [ 89.029815][ T7351] tomoyo_realpath_nofollow+0xdd/0x100 [ 89.031264][ T7351] tomoyo_find_next_domain+0x2ad/0x2070 [ 89.033089][ T7351] tomoyo_bprm_check_security+0x12b/0x1d0 [ 89.034760][ T7351] security_bprm_check+0x1b9/0x1e0 [ 89.036103][ T7351] bprm_execve+0x642/0x1960 [ 89.037579][ T7351] do_execveat_common.isra.0+0x4f1/0x630 [ 89.039337][ T7351] __x64_sys_execve+0x8c/0xb0 [ 89.040814][ T7351] do_syscall_64+0xcd/0x250 [ 89.042024][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.043581][ T7351] Modules linked in: [ 89.044622][ T7351] CPU: 2 UID: 0 PID: 7351 Comm: syz.0.314 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 89.047754][ T7351] Tainted: [B]=BAD_PAGE [ 89.048872][ T7351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 89.051656][ T7351] Call Trace: [ 89.052533][ T7351] [ 89.053327][ T7351] dump_stack_lvl+0x16c/0x1f0 [ 89.054569][ T7351] bad_page+0xb3/0x1f0 [ 89.055648][ T7351] ? __pfx_bad_page+0x10/0x10 [ 89.056894][ T7351] ? page_bad_reason+0x9d/0x1e0 [ 89.058167][ T7351] free_unref_page+0x657/0xdc0 [ 89.059443][ T7351] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 89.061096][ T7351] ? __phys_addr+0xc6/0x150 VM DIAGNOSIS: 18:12:02 Registers: info registers vcpu 0 CPU#0 RAX=0000000000040000 RBX=ffffffff8bd15ca0 RCX=ffffc9002f002000 RDX=0000000000040000 RSI=00000000000000a1 RDI=ffffffff8bd15ca0 RBP=00000000000000a1 RSP=ffffc90004397a00 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=ffffc90004397a88 R14=ffffc90004397b70 R15=ffffc90004397a88 RIP=ffffffff815c2934 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007ff2a89de6c0 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3bb78a CR3=00000000491f0000 CR4=00352ef0 DR0=0000000000000400 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff2a8ff21cb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff2a8ff21d8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff2a8ff21d2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff2a8ff21e6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff2a8ff226c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff2a8ff234a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff2a910c488 00007ff2a910c480 00007ff2a910c478 00007ff2a910c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff2a9c6d100 00007ff2a910c440 00007ff2a910c458 00007ff2a910c4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff2a910c498 00007ff2a910c490 00007ff2a910c488 00007ff2a910c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000016e593 RBX=0000000000000001 RCX=ffffffff8b2305e9 RDX=0000000000000000 RSI=ffffffff8b6cd040 RDI=ffffffff8bd1ad40 RBP=ffffed1003b58910 RSP=ffffc90000187e08 R8 =0000000000000001 R9 =ffffed100d4e7025 R10=ffff88806a73812b R11=0000000000000000 R12=0000000000000001 R13=ffff88801dac4880 R14=ffffffff905f5088 R15=0000000000000000 RIP=ffffffff8b2319cf RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c2ebb25 CR3=00000000491f0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001030001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000003172 656c6c616b7a7973 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff2a8ff21cb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff2a8ff21d8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff2a8ff21d2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff2a8ff21e6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff2a8ff226c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff2a8ff234a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e776f6e6b6e7500 6f6c6c3332302500 657a697320740004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4b524a4b4e4b5000 4a49491617150000 405f4c560551464a 5751560541444700 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a10ec72d96754ce7 a2ff3dc3e9c05bd0 a4f7d05d63b6f82b 5ddfe436eb344084 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 82703b352befd446 8a2ef9e5496d183e 6a302f788adb868b 409c7ece6f36de64 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9ec3202d8ccbabda efa9b3560d37b1d5 0b3e96b71ec603f4 7a4e77ff54eb66ea ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e98f59f8c1d6db3 4ffee010aabace41 7d6ad90dc6d8744f 39c28f4ca57491a4 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff850b46e5 RDI=ffffffff9aae7bc0 RBP=ffffffff9aae7b80 RSP=ffffc900043c6990 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000030 R14=ffffffff850b4680 R15=0000000000000000 RIP=ffffffff850b470f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fc0306bb6c0 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000056031f43ec38 CR3=000000004e628000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004000000 Opmask01=0000000001100000 Opmask02=000000000fffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ff00ff00ff00ff00 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e2e2e2e2e2e2e2e 2e2e2e2e2e2e2e2e ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e2e2e2e2e2e2e2e 2e2e2e2e2e2e2e2e ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff00ffffffff 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ff00ff00ff00ff00 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff00ffffffff 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 25002f74656e2f73 73616c632f737973 2f002f74656e2f73 79732f636f72702f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3030303200000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0d0d0d0f0d45514a 0043000d004e5850 5c535b5413495853 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055ae8a69ccd0 000055ae8a69d590 0000000000000181 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000071 0000000000000000 00326e6170772f74 656e2f307968702f ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 000055aeef0e3233 73656d5f70636864 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 725f0fdc6d98e661 72610fe77bfff37f 656775ffff7f7fff 7f7f7d7f75777965 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 61762f0073253a73 252d73253a73252d 73250073252d7325 0074736575716572 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 0000000000000031 0000726565666965 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 0000000000000031 00006d5f65636864 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbf2b313423342c ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 3 CPU#3 RAX=dffffc0000000000 RBX=ffff888024bf0000 RCX=ffffffff81fb0a3d RDX=1ffff1100497e088 RSI=ffffffff81faec12 RDI=ffff888024bf0444 RBP=000000000000da55 RSP=ffffc90003a07780 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000080000001 R13=0000000000000001 R14=0000000000000001 R15=ffffea0000369540 RIP=ffffffff81736d46 RFL=00000a07 [-O---PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fbe60a67d60 CR3=000000000df7c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=00000000000000ff Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbe5ff0c6a3 00007fbe5ff0c6a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff42b75a90 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557475c490 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555747601b0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557475d340 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000036333935 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000316e616c7701 ffffffffffffffff df0801800302a810 000980040a100006 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0101800404acd408 0001000006080606 010afa0008000610 0020100006064ba4 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 02100002ad8a0800 0100000408060601 21f8021000081000 18100006044efc01 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 800404a4e6080001 08000601278c0002 0007000000000000 0000000000316e61 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c7701ffffffffff ffffffdf08018003 02a810000980040a 1000060102aa0008 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000