[ 38.031803][ T39] audit: type=1400 audit(1730232354.821:81): avc: denied { rlimitinh } for pid=5846 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.037722][ T39] audit: type=1400 audit(1730232354.821:82): avc: denied { siginh } for pid=5846 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 40.256573][ T39] audit: type=1400 audit(1730232357.071:83): avc: denied { read } for pid=5337 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 40.262687][ T39] audit: type=1400 audit(1730232357.071:84): avc: denied { append } for pid=5337 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 40.269185][ T39] audit: type=1400 audit(1730232357.071:85): avc: denied { open } for pid=5337 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 40.276420][ T39] audit: type=1400 audit(1730232357.071:86): avc: denied { getattr } for pid=5337 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:32148' (ED25519) to the list of known hosts. [ 44.649297][ T39] audit: type=1400 audit(1730232361.461:87): avc: denied { execute } for pid=5935 comm="sh" name="syz-execprog" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 44.656134][ T39] audit: type=1400 audit(1730232361.461:88): avc: denied { execute_no_trans } for pid=5935 comm="sh" path="/syz-execprog" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2024/10/29 20:06:01 ignoring optional flag "sandboxArg"="0" [ 45.170576][ T39] audit: type=1400 audit(1730232361.981:89): avc: denied { write } for pid=5935 comm="syz-execprog" path="pipe:[6520]" dev="pipefs" ino=6520 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 2024/10/29 20:06:02 parsed 1 programs [ 45.568949][ T39] audit: type=1400 audit(1730232362.381:90): avc: denied { node_bind } for pid=5935 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 47.476826][ T39] audit: type=1400 audit(1730232364.291:91): avc: denied { mounton } for pid=5942 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1927 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 47.479380][ T5942] cgroup: Unknown subsys name 'net' [ 47.484510][ T39] audit: type=1400 audit(1730232364.291:92): avc: denied { mount } for pid=5942 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 47.495327][ T39] audit: type=1400 audit(1730232364.301:93): avc: denied { unmount } for pid=5942 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 47.594015][ T5942] cgroup: Unknown subsys name 'cpuset' [ 47.599259][ T5942] cgroup: Unknown subsys name 'rlimit' [ 47.744902][ T39] audit: type=1400 audit(1730232364.551:94): avc: denied { setattr } for pid=5942 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.751526][ T39] audit: type=1400 audit(1730232364.561:95): avc: denied { create } for pid=5942 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 47.758245][ T39] audit: type=1400 audit(1730232364.561:96): avc: denied { write } for pid=5942 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 47.794702][ T5948] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 48.445718][ T5942] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 49.999355][ T39] kauditd_printk_skb: 8 callbacks suppressed [ 49.999366][ T39] audit: type=1400 audit(1730232366.811:105): avc: denied { execmem } for pid=5951 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 50.008625][ T39] audit: type=1400 audit(1730232366.821:106): avc: denied { read } for pid=5955 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 50.026080][ T39] audit: type=1400 audit(1730232366.821:107): avc: denied { open } for pid=5956 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 50.032420][ T39] audit: type=1400 audit(1730232366.821:108): avc: denied { mounton } for pid=5956 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 50.094774][ T39] audit: type=1400 audit(1730232366.901:109): avc: denied { mounton } for pid=5955 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2773 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 50.101106][ T39] audit: type=1400 audit(1730232366.901:110): avc: denied { mount } for pid=5955 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 50.109964][ T39] audit: type=1400 audit(1730232366.901:111): avc: denied { mounton } for pid=5955 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 50.117952][ T39] audit: type=1400 audit(1730232366.901:112): avc: denied { mount } for pid=5955 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 50.125886][ T39] audit: type=1400 audit(1730232366.911:113): avc: denied { mount } for pid=5956 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 50.132207][ T39] audit: type=1400 audit(1730232366.911:114): avc: denied { mounton } for pid=5956 comm="syz-executor" path="/syzkaller.EVjNz7/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 50.156521][ T5956] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.298082][ T5984] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 50.301120][ T5984] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 50.304856][ T5984] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 50.314564][ T5984] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 50.317471][ T5984] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 50.319345][ T5984] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 50.402339][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.404850][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.425604][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.428073][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.798744][ T6005] chnl_net:caif_netlink_parms(): no params data found [ 50.889125][ T6005] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.891480][ T6005] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.894012][ T6005] bridge_slave_0: entered allmulticast mode [ 50.898480][ T6005] bridge_slave_0: entered promiscuous mode [ 50.904313][ T6005] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.909052][ T6005] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.911291][ T6005] bridge_slave_1: entered allmulticast mode [ 50.913414][ T6005] bridge_slave_1: entered promiscuous mode [ 50.939659][ T6005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.954724][ T6005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.973790][ T6005] team0: Port device team_slave_0 added [ 50.978127][ T6005] team0: Port device team_slave_1 added [ 51.001849][ T6005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.003694][ T6005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.010652][ T6005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.016054][ T6005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.018404][ T6005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.027656][ T6005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.077700][ T6005] hsr_slave_0: entered promiscuous mode [ 51.079556][ T6005] hsr_slave_1: entered promiscuous mode [ 51.190748][ T6005] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 51.198848][ T6005] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 51.204945][ T6005] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 51.209535][ T6005] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 51.222094][ T6005] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.224749][ T6005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.228068][ T6005] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.229924][ T6005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.260592][ T6005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.273609][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.277565][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.292812][ T6005] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.338114][ T98] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.340957][ T98] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.345885][ T98] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.348203][ T98] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.473682][ T6005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.506873][ T6005] veth0_vlan: entered promiscuous mode [ 51.515970][ T6005] veth1_vlan: entered promiscuous mode [ 51.537811][ T6005] veth0_macvtap: entered promiscuous mode [ 51.543317][ T6005] veth1_macvtap: entered promiscuous mode [ 51.550649][ T6005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.557704][ T6005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.562625][ T6005] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.565398][ T6005] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.568004][ T6005] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.571036][ T6005] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2024/10/29 20:06:08 executed programs: 0 [ 51.661373][ T5305] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 51.664677][ T5305] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 51.667712][ T5305] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 51.670727][ T5305] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 51.701033][ T6045] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 51.705898][ T6045] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 51.708964][ T6045] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 51.711312][ T6045] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 51.712048][ T6046] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 51.714432][ T6045] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 51.717283][ T6046] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 51.719573][ T67] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 51.720257][ T6046] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 51.723370][ T67] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 51.724612][ T6046] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 51.730445][ T6046] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 51.730547][ T67] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 51.735710][ T6047] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 51.739989][ T6047] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 51.742215][ T6047] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 51.744486][ T67] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 51.765397][ T5984] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 51.769128][ T5984] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 51.773554][ T5984] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 51.934298][ T6034] chnl_net:caif_netlink_parms(): no params data found [ 51.966968][ T6040] chnl_net:caif_netlink_parms(): no params data found [ 52.000893][ T6038] chnl_net:caif_netlink_parms(): no params data found [ 52.068082][ T6041] chnl_net:caif_netlink_parms(): no params data found [ 52.170720][ T6040] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.172927][ T6040] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.174935][ T6040] bridge_slave_0: entered allmulticast mode [ 52.177392][ T6040] bridge_slave_0: entered promiscuous mode [ 52.180152][ T6040] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.182047][ T6040] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.183913][ T6040] bridge_slave_1: entered allmulticast mode [ 52.188316][ T6040] bridge_slave_1: entered promiscuous mode [ 52.194717][ T6034] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.196767][ T6034] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.198632][ T6034] bridge_slave_0: entered allmulticast mode [ 52.200560][ T6034] bridge_slave_0: entered promiscuous mode [ 52.213129][ T98] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.219077][ T6038] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.221410][ T6038] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.223909][ T6038] bridge_slave_0: entered allmulticast mode [ 52.227082][ T6038] bridge_slave_0: entered promiscuous mode [ 52.261204][ T6034] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.263084][ T6034] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.265474][ T6034] bridge_slave_1: entered allmulticast mode [ 52.267535][ T6034] bridge_slave_1: entered promiscuous mode [ 52.287047][ T6038] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.289201][ T6038] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.291128][ T6038] bridge_slave_1: entered allmulticast mode [ 52.293372][ T6038] bridge_slave_1: entered promiscuous mode [ 52.306029][ T6040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.314875][ T98] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.329930][ T6034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.342789][ T6038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.346800][ T6040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.351840][ T6038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.370208][ T6041] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.372078][ T6041] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.374059][ T6041] bridge_slave_0: entered allmulticast mode [ 52.376936][ T6041] bridge_slave_0: entered promiscuous mode [ 52.380738][ T6034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.410761][ T6038] team0: Port device team_slave_0 added [ 52.413128][ T6041] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.415700][ T6041] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.417710][ T6041] bridge_slave_1: entered allmulticast mode [ 52.419691][ T6041] bridge_slave_1: entered promiscuous mode [ 52.457421][ T98] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.463918][ T6038] team0: Port device team_slave_1 added [ 52.494830][ T6040] team0: Port device team_slave_0 added [ 52.500302][ T6040] team0: Port device team_slave_1 added [ 52.522558][ T6041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.528176][ T6041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.534717][ T6034] team0: Port device team_slave_0 added [ 52.558010][ T6038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.560105][ T6038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.568209][ T6038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.602788][ T6034] team0: Port device team_slave_1 added [ 52.620185][ T6040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.622186][ T6040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.629637][ T6040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.634062][ T6038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.636417][ T6038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.644611][ T6038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.653487][ T6041] team0: Port device team_slave_0 added [ 52.668664][ T6034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.670675][ T6034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.679918][ T6034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.683865][ T6040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.686368][ T6040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.694620][ T6040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.706041][ T6041] team0: Port device team_slave_1 added [ 52.716361][ T6034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.718348][ T6034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.726249][ T6034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.747139][ T6038] hsr_slave_0: entered promiscuous mode [ 52.749031][ T6038] hsr_slave_1: entered promiscuous mode [ 52.750777][ T6038] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.752869][ T6038] Cannot create hsr debugfs directory [ 52.779926][ T6041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.782062][ T6041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.790112][ T6041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.807871][ T6040] hsr_slave_0: entered promiscuous mode [ 52.810382][ T6040] hsr_slave_1: entered promiscuous mode [ 52.812717][ T6040] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.817211][ T6040] Cannot create hsr debugfs directory [ 52.819893][ T6041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.822464][ T6041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.829896][ T6041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.887430][ T6034] hsr_slave_0: entered promiscuous mode [ 52.890000][ T6034] hsr_slave_1: entered promiscuous mode [ 52.892989][ T6034] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.895940][ T6034] Cannot create hsr debugfs directory [ 52.983195][ T6041] hsr_slave_0: entered promiscuous mode [ 52.986059][ T6041] hsr_slave_1: entered promiscuous mode [ 52.988429][ T6041] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.990806][ T6041] Cannot create hsr debugfs directory [ 53.767316][ T98] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.797967][ T6044] Bluetooth: hci2: command tx timeout [ 53.797992][ T5984] Bluetooth: hci1: command tx timeout [ 53.798194][ T6047] Bluetooth: hci3: command tx timeout [ 53.798336][ T5984] Bluetooth: hci0: command tx timeout [ 55.115853][ T98] bridge_slave_1: left allmulticast mode [ 55.117775][ T98] bridge_slave_1: left promiscuous mode [ 55.119786][ T98] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.127311][ T98] bridge_slave_0: left allmulticast mode [ 55.129068][ T98] bridge_slave_0: left promiscuous mode [ 55.130792][ T98] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.430354][ T98] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 55.436895][ T98] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 55.442526][ T98] bond0 (unregistering): Released all slaves [ 55.467061][ T39] kauditd_printk_skb: 22 callbacks suppressed [ 55.467072][ T39] audit: type=1400 audit(1730232372.281:137): avc: denied { search } for pid=5655 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.521656][ T39] audit: type=1400 audit(1730232372.331:138): avc: denied { read } for pid=6079 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.529217][ T39] audit: type=1400 audit(1730232372.331:139): avc: denied { open } for pid=6079 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.539425][ T39] audit: type=1400 audit(1730232372.331:140): avc: denied { getattr } for pid=6079 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.547831][ T39] audit: type=1400 audit(1730232372.341:141): avc: denied { write } for pid=6078 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1767 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.554956][ T39] audit: type=1400 audit(1730232372.341:142): avc: denied { add_name } for pid=6078 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.562273][ T39] audit: type=1400 audit(1730232372.371:143): avc: denied { remove_name } for pid=6081 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=1931 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.589837][ T98] hsr_slave_0: left promiscuous mode [ 55.592827][ T98] hsr_slave_1: left promiscuous mode [ 55.596168][ T98] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.598941][ T98] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.602580][ T98] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.604550][ T98] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.617957][ T98] veth1_macvtap: left promiscuous mode [ 55.620172][ T98] veth0_macvtap: left promiscuous mode [ 55.621831][ T98] veth1_vlan: left promiscuous mode [ 55.624145][ T98] veth0_vlan: left promiscuous mode [ 55.885662][ T6047] Bluetooth: hci2: command tx timeout [ 55.885847][ T6044] Bluetooth: hci3: command tx timeout [ 55.888288][ T6047] Bluetooth: hci0: command tx timeout [ 55.889102][ T6044] Bluetooth: hci1: command tx timeout [ 56.029460][ T98] team0 (unregistering): Port device team_slave_1 removed [ 56.087987][ T98] team0 (unregistering): Port device team_slave_0 removed [ 56.737295][ T6038] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.743650][ T6038] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.747454][ T6038] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.751016][ T6038] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.788711][ T6040] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.795696][ T6040] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.808705][ T6040] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.818787][ T6040] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.839089][ T6034] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.842211][ T6034] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.853560][ T6038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.857493][ T6034] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.862851][ T6034] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.879036][ T6041] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.884621][ T6041] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.888887][ T6041] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.891819][ T6041] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.896758][ T6038] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.901619][ T159] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.903426][ T159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.921259][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.923464][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.950582][ T6038] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.990254][ T6040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.009244][ T6034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.016728][ T6041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.019731][ T6040] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.024915][ T6034] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.034229][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.036170][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.039946][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.041761][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.047274][ T6041] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.056672][ T1135] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.058494][ T1135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.060976][ T1135] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.063055][ T1135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.066679][ T1135] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.068622][ T1135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.078007][ T1135] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.079915][ T1135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.114426][ T6038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.127626][ T6034] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.139313][ T6041] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.162068][ T6038] veth0_vlan: entered promiscuous mode [ 57.167301][ T6038] veth1_vlan: entered promiscuous mode [ 57.180349][ T6038] veth0_macvtap: entered promiscuous mode [ 57.183332][ T6038] veth1_macvtap: entered promiscuous mode [ 57.190958][ T6038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.197277][ T6038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.200453][ T6038] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.202647][ T6038] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.206301][ T6038] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.208522][ T6038] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.220583][ T6040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.249577][ T6041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.255924][ T6034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.274380][ T98] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.277732][ T98] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.291839][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.293920][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.300707][ T6040] veth0_vlan: entered promiscuous mode [ 57.314879][ T6040] veth1_vlan: entered promiscuous mode [ 57.318562][ T6034] veth0_vlan: entered promiscuous mode 2024/10/29 20:06:14 executed programs: 8 [ 57.325245][ T6034] veth1_vlan: entered promiscuous mode [ 57.334908][ T39] audit: type=1400 audit(1730232374.141:144): avc: denied { create } for pid=6125 comm="syz.1.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 57.338672][ T6041] veth0_vlan: entered promiscuous mode [ 57.340834][ T39] audit: type=1400 audit(1730232374.141:145): avc: denied { setopt } for pid=6125 comm="syz.1.16" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 57.347287][ T6040] veth0_macvtap: entered promiscuous mode [ 57.352516][ T6040] veth1_macvtap: entered promiscuous mode [ 57.356468][ T6041] veth1_vlan: entered promiscuous mode [ 57.365371][ T39] audit: type=1400 audit(1730232374.171:146): avc: denied { prog_load } for pid=6125 comm="syz.1.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 57.366527][ T6040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.374356][ T6040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.378552][ T6040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.382890][ T6040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.386764][ T6040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.390212][ T6040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.402052][ T6040] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.404649][ T6040] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.406970][ T6040] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.409146][ T6040] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.424328][ T6034] veth0_macvtap: entered promiscuous mode [ 57.428309][ T6041] veth0_macvtap: entered promiscuous mode [ 57.444675][ T6034] veth1_macvtap: entered promiscuous mode [ 57.458138][ T6041] veth1_macvtap: entered promiscuous mode [ 57.479149][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.481204][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.481595][ T6034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.488592][ T6034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.491084][ T6034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.494256][ T6034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.498752][ T6034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.503314][ T6041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.507782][ T6041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.510323][ T6041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.513162][ T6041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.516918][ T6041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.520249][ T6041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.526350][ T6041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.537197][ T6041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.539903][ T6041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.542422][ T6041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.545860][ T6041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.549217][ T6041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.553712][ T6041] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.557630][ T6041] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.560514][ T6041] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.562991][ T6041] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.569562][ T6034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.572145][ T6034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.574599][ T6034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.577675][ T6034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.580533][ T6034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.583520][ T6034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.589775][ T6034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.599092][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.599871][ T6034] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.601411][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.604317][ T6034] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.608592][ T6034] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.610826][ T6034] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.704073][ T98] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.707396][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.707466][ T98] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.709355][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.722730][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.724921][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.735830][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.738079][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.956056][ T6044] Bluetooth: hci2: command tx timeout [ 57.956132][ T6047] Bluetooth: hci0: command tx timeout [ 57.956843][ T5305] Bluetooth: hci3: command tx timeout [ 57.956880][ T5305] Bluetooth: hci1: command tx timeout [ 60.035184][ T6047] Bluetooth: hci0: command tx timeout [ 60.035332][ T6044] Bluetooth: hci2: command tx timeout [ 60.036656][ T6047] Bluetooth: hci1: command tx timeout [ 60.036676][ T6047] Bluetooth: hci3: command tx timeout 2024/10/29 20:06:19 executed programs: 94 2024/10/29 20:06:24 executed programs: 187 [ 67.596757][ T6683] BUG: Bad page state in process syz.2.194 pfn:4b77b [ 67.598612][ T6683] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000002 pfn:0x4b77b [ 67.603687][ T6683] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 67.605917][ T6683] raw: 00fff00000000000 dead000000000040 ffff88802a52e000 0000000000000000 [ 67.608711][ T6683] raw: ffff888000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 67.611677][ T6683] page dumped because: page_pool leak [ 67.613469][ T6683] page_owner tracks the page as allocated [ 67.615669][ T6683] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6683, tgid 6674 (syz.2.194), ts 67591173682, free_ts 67588911262 [ 67.620002][ T6683] post_alloc_hook+0x2d1/0x350 [ 67.621335][ T6683] get_page_from_freelist+0x101e/0x3070 [ 67.622922][ T6683] __alloc_pages_noprof+0x223/0x25a0 [ 67.624357][ T6683] alloc_pages_bulk_noprof+0x77c/0x1110 [ 67.625928][ T6683] __page_pool_alloc_pages_slow+0x18f/0x770 [ 67.627463][ T6683] page_pool_alloc_netmem+0xc4/0x160 [ 67.628849][ T6683] page_pool_alloc_pages+0x1a/0x60 [ 67.630323][ T6683] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 67.632141][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 67.633831][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 67.635768][ T6683] __sys_bpf+0xfc6/0x49a0 [ 67.637173][ T6683] __x64_sys_bpf+0x78/0xc0 [ 67.638538][ T6683] do_syscall_64+0xcd/0x250 [ 67.639973][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.641606][ T6683] page last free pid 6671 tgid 6669 stack trace: [ 67.643459][ T6683] free_unref_page+0x5f4/0xdc0 [ 67.644918][ T6683] __folio_put+0x30d/0x3d0 [ 67.646211][ T6683] put_page+0x21e/0x280 [ 67.647409][ T6683] page_pool_return_page+0x400/0x520 [ 67.648950][ T6683] page_pool_release+0xf4/0x7d0 [ 67.650257][ T6683] page_pool_destroy+0x10a/0x4c0 [ 67.651915][ T6683] bpf_test_run_xdp_live+0x3a1/0x500 [ 67.653694][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 67.655222][ T6683] __sys_bpf+0xfc6/0x49a0 [ 67.656476][ T6683] __x64_sys_bpf+0x78/0xc0 [ 67.658210][ T6683] do_syscall_64+0xcd/0x250 [ 67.659467][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.660959][ T6683] Modules linked in: [ 67.662082][ T6683] CPU: 1 UID: 0 PID: 6683 Comm: syz.2.194 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 67.664884][ T6683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 67.667736][ T6683] Call Trace: [ 67.668686][ T6683] [ 67.669557][ T6683] dump_stack_lvl+0x16c/0x1f0 [ 67.671247][ T6683] bad_page+0xb3/0x1f0 [ 67.672710][ T6683] ? __pfx_bad_page+0x10/0x10 [ 67.674413][ T6683] ? page_bad_reason+0x9d/0x1e0 [ 67.676508][ T6683] free_unref_page+0x657/0xdc0 [ 67.678659][ T6683] ? rcu_is_watching+0x12/0xc0 [ 67.680435][ T6683] ? __phys_addr+0xc6/0x150 [ 67.682082][ T6683] skb_free_head+0xa0/0x1d0 [ 67.683429][ T6683] skb_release_data+0x560/0x730 [ 67.685225][ T6683] sk_skb_reason_drop+0x129/0x1a0 [ 67.686647][ T6683] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 67.688345][ T6683] ? kernel_text_address+0x8d/0x100 [ 67.689688][ T6683] ? hlock_class+0x4e/0x130 [ 67.690973][ T6683] ? __lock_acquire+0x163e/0x3ce0 [ 67.692545][ T6683] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 67.694822][ T6683] ? hlock_class+0x4e/0x130 [ 67.696504][ T6683] ? __lock_acquire+0xbdd/0x3ce0 [ 67.698180][ T6683] ? __pfx___lock_acquire+0x10/0x10 [ 67.700106][ T6683] __netif_receive_skb_list_core+0x357/0x950 [ 67.701871][ T6683] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 67.703605][ T6683] ? trace_lock_acquire+0x14a/0x1d0 [ 67.705454][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 67.708118][ T6683] ? lock_acquire+0x2f/0xb0 [ 67.709593][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 67.712031][ T6683] netif_receive_skb_list_internal+0x753/0xdb0 [ 67.714866][ T6683] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 67.717470][ T6683] ? __pfx_eth_type_trans+0x10/0x10 [ 67.719227][ T6683] ? __build_skb_around+0x278/0x3b0 [ 67.720989][ T6683] netif_receive_skb_list+0x4f/0x4a0 [ 67.722890][ T6683] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 67.725015][ T6683] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 67.727247][ T6683] ? bpf_test_timer_continue+0x150/0x3d0 [ 67.729121][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 67.731569][ T6683] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 67.733568][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 67.735768][ T6683] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 67.737775][ T6683] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 67.739772][ T6683] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 67.741370][ T6683] ? 0xffffffffa00045c0 [ 67.742803][ T6683] ? 0xffffffffa00045c0 [ 67.744226][ T6683] ? 0xffffffffa00045c0 [ 67.745617][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 67.747628][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 67.749448][ T6683] ? lock_acquire+0x2f/0xb0 [ 67.751126][ T6683] ? __fget_files+0x40/0x3f0 [ 67.753317][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 67.755840][ T6683] ? fput+0x30/0x390 [ 67.757253][ T6683] ? __bpf_prog_get+0xa0/0x290 [ 67.759140][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 67.761417][ T6683] __sys_bpf+0xfc6/0x49a0 [ 67.763113][ T6683] ? __pfx___sys_bpf+0x10/0x10 [ 67.764761][ T6683] ? __schedule+0xe5d/0x5730 [ 67.766313][ T6683] ? __fget_files+0x23a/0x3f0 [ 67.767934][ T6683] ? do_futex+0x123/0x350 [ 67.769359][ T6683] ? __pfx_do_futex+0x10/0x10 [ 67.771151][ T6683] ? xfd_validate_state+0x5d/0x180 [ 67.773063][ T6683] ? rcu_is_watching+0x12/0xc0 [ 67.774814][ T6683] __x64_sys_bpf+0x78/0xc0 [ 67.776485][ T6683] ? lockdep_hardirqs_on+0x7c/0x110 [ 67.778373][ T6683] do_syscall_64+0xcd/0x250 [ 67.780126][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.782398][ T6683] RIP: 0033:0x7f574217e719 [ 67.783937][ T6683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.790440][ T6683] RSP: 002b:00007f5742e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 67.793366][ T6683] RAX: ffffffffffffffda RBX: 00007f5742336058 RCX: 00007f574217e719 [ 67.796102][ T6683] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 67.799124][ T6683] RBP: 00007f57421f132e R08: 0000000000000000 R09: 0000000000000000 [ 67.801790][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.804508][ T6683] R13: 0000000000000000 R14: 00007f5742336058 R15: 00007ffe5115f908 [ 67.807442][ T6683] [ 67.808768][ T6683] Disabling lock debugging due to kernel taint [ 67.811213][ T6683] BUG: Bad page state in process syz.2.194 pfn:24c42 [ 67.812976][ T6683] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888024c43e00 pfn:0x24c42 [ 67.817210][ T6683] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 67.819632][ T6683] raw: 00fff00000000000 dead000000000040 ffff88802a52e000 0000000000000000 [ 67.822843][ T6683] raw: ffff888024c43e00 0000000000000001 00000000ffffffff 0000000000000000 [ 67.825789][ T6683] page dumped because: page_pool leak [ 67.827593][ T6683] page_owner tracks the page as allocated [ 67.829693][ T6683] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6683, tgid 6674 (syz.2.194), ts 67591169105, free_ts 67588918940 [ 67.835902][ T6683] post_alloc_hook+0x2d1/0x350 [ 67.837514][ T6683] get_page_from_freelist+0x101e/0x3070 [ 67.839417][ T6683] __alloc_pages_noprof+0x223/0x25a0 [ 67.841191][ T6683] alloc_pages_bulk_noprof+0x77c/0x1110 [ 67.843185][ T6683] __page_pool_alloc_pages_slow+0x18f/0x770 [ 67.845214][ T6683] page_pool_alloc_netmem+0xc4/0x160 [ 67.846986][ T6683] page_pool_alloc_pages+0x1a/0x60 [ 67.848685][ T6683] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 67.850745][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 67.852508][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 67.854309][ T6683] __sys_bpf+0xfc6/0x49a0 [ 67.855964][ T6683] __x64_sys_bpf+0x78/0xc0 [ 67.857620][ T6683] do_syscall_64+0xcd/0x250 [ 67.859238][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.861237][ T6683] page last free pid 6671 tgid 6669 stack trace: [ 67.863576][ T6683] free_unref_page+0x5f4/0xdc0 [ 67.865361][ T6683] __folio_put+0x30d/0x3d0 [ 67.866883][ T6683] put_page+0x21e/0x280 [ 67.868305][ T6683] page_pool_return_page+0x400/0x520 [ 67.870074][ T6683] page_pool_release+0xf4/0x7d0 [ 67.871750][ T6683] page_pool_destroy+0x10a/0x4c0 [ 67.873400][ T6683] bpf_test_run_xdp_live+0x3a1/0x500 [ 67.875542][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 67.877346][ T6683] __sys_bpf+0xfc6/0x49a0 [ 67.878893][ T6683] __x64_sys_bpf+0x78/0xc0 [ 67.880890][ T6683] do_syscall_64+0xcd/0x250 [ 67.882635][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.884595][ T6683] Modules linked in: [ 67.885985][ T6683] CPU: 1 UID: 0 PID: 6683 Comm: syz.2.194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 67.890110][ T6683] Tainted: [B]=BAD_PAGE [ 67.891591][ T6683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 67.895923][ T6683] Call Trace: [ 67.897180][ T6683] [ 67.898203][ T6683] dump_stack_lvl+0x16c/0x1f0 [ 67.900339][ T6683] bad_page+0xb3/0x1f0 [ 67.901812][ T6683] ? __pfx_bad_page+0x10/0x10 [ 67.903408][ T6683] ? page_bad_reason+0x9d/0x1e0 [ 67.905041][ T6683] free_unref_page+0x657/0xdc0 [ 67.906688][ T6683] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 67.908732][ T6683] ? __phys_addr+0xc6/0x150 [ 67.910237][ T6683] skb_free_head+0xa0/0x1d0 [ 67.912022][ T6683] skb_release_data+0x560/0x730 [ 67.913696][ T6683] sk_skb_reason_drop+0x129/0x1a0 [ 67.915448][ T6683] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 67.917849][ T6683] ? kernel_text_address+0x8d/0x100 [ 67.919838][ T6683] ? hlock_class+0x4e/0x130 [ 67.921511][ T6683] ? __lock_acquire+0x163e/0x3ce0 [ 67.923407][ T6683] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 67.926157][ T6683] ? hlock_class+0x4e/0x130 [ 67.927715][ T6683] ? __lock_acquire+0xbdd/0x3ce0 [ 67.929394][ T6683] ? __pfx___lock_acquire+0x10/0x10 [ 67.931155][ T6683] __netif_receive_skb_list_core+0x357/0x950 [ 67.933155][ T6683] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 67.935356][ T6683] ? trace_lock_acquire+0x14a/0x1d0 [ 67.937097][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 67.939616][ T6683] ? lock_acquire+0x2f/0xb0 [ 67.941154][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 67.943304][ T6683] netif_receive_skb_list_internal+0x753/0xdb0 [ 67.945591][ T6683] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 67.947947][ T6683] ? __pfx_eth_type_trans+0x10/0x10 [ 67.949760][ T6683] ? __build_skb_around+0x278/0x3b0 [ 67.951794][ T6683] netif_receive_skb_list+0x4f/0x4a0 [ 67.953845][ T6683] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 67.956273][ T6683] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 67.958373][ T6683] ? bpf_test_timer_continue+0x150/0x3d0 [ 67.960240][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 67.962011][ T6683] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 67.963993][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 67.965962][ T6683] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 67.968094][ T6683] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 67.970067][ T6683] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 67.971975][ T6683] ? 0xffffffffa00045c0 [ 67.973525][ T6683] ? 0xffffffffa00045c0 [ 67.974873][ T6683] ? 0xffffffffa00045c0 [ 67.976247][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 67.978233][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 67.980130][ T6683] ? lock_acquire+0x2f/0xb0 [ 67.981699][ T6683] ? __fget_files+0x40/0x3f0 [ 67.983280][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 67.985346][ T6683] ? fput+0x30/0x390 [ 67.986690][ T6683] ? __bpf_prog_get+0xa0/0x290 [ 67.988309][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 67.990258][ T6683] __sys_bpf+0xfc6/0x49a0 [ 67.992008][ T6683] ? __pfx___sys_bpf+0x10/0x10 [ 67.993603][ T6683] ? __schedule+0xe5d/0x5730 [ 67.995458][ T6683] ? __fget_files+0x23a/0x3f0 [ 67.997091][ T6683] ? do_futex+0x123/0x350 [ 67.998670][ T6683] ? __pfx_do_futex+0x10/0x10 [ 68.000491][ T6683] ? xfd_validate_state+0x5d/0x180 [ 68.002319][ T6683] ? rcu_is_watching+0x12/0xc0 [ 68.003951][ T6683] __x64_sys_bpf+0x78/0xc0 [ 68.005482][ T6683] ? lockdep_hardirqs_on+0x7c/0x110 [ 68.007246][ T6683] do_syscall_64+0xcd/0x250 [ 68.008778][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.010777][ T6683] RIP: 0033:0x7f574217e719 [ 68.012279][ T6683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.019226][ T6683] RSP: 002b:00007f5742e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 68.022096][ T6683] RAX: ffffffffffffffda RBX: 00007f5742336058 RCX: 00007f574217e719 [ 68.024955][ T6683] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 68.027668][ T6683] RBP: 00007f57421f132e R08: 0000000000000000 R09: 0000000000000000 [ 68.030358][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.032999][ T6683] R13: 0000000000000000 R14: 00007f5742336058 R15: 00007ffe5115f908 [ 68.036117][ T6683] [ 68.038144][ T6683] BUG: Bad page state in process syz.2.194 pfn:26ca8 [ 68.041235][ T6683] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888026ca9e00 pfn:0x26ca8 [ 68.045570][ T6683] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 68.047943][ T6683] raw: 00fff00000000000 dead000000000040 ffff88802a52e000 0000000000000000 [ 68.050681][ T6683] raw: ffff888026ca9e00 0000000000000001 00000000ffffffff 0000000000000000 [ 68.053696][ T6683] page dumped because: page_pool leak [ 68.055921][ T6683] page_owner tracks the page as allocated [ 68.057824][ T6683] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6683, tgid 6674 (syz.2.194), ts 67591164649, free_ts 67588923105 [ 68.063920][ T6683] post_alloc_hook+0x2d1/0x350 [ 68.065650][ T6683] get_page_from_freelist+0x101e/0x3070 [ 68.067514][ T6683] __alloc_pages_noprof+0x223/0x25a0 [ 68.069269][ T6683] alloc_pages_bulk_noprof+0x77c/0x1110 [ 68.071136][ T6683] __page_pool_alloc_pages_slow+0x18f/0x770 [ 68.073087][ T6683] page_pool_alloc_netmem+0xc4/0x160 [ 68.074901][ T6683] page_pool_alloc_pages+0x1a/0x60 [ 68.076984][ T6683] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 68.079481][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 68.081563][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 68.083599][ T6683] __sys_bpf+0xfc6/0x49a0 [ 68.085141][ T6683] __x64_sys_bpf+0x78/0xc0 [ 68.086669][ T6683] do_syscall_64+0xcd/0x250 [ 68.088178][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.090266][ T6683] page last free pid 6671 tgid 6669 stack trace: [ 68.092403][ T6683] free_unref_page+0x5f4/0xdc0 [ 68.094028][ T6683] __folio_put+0x30d/0x3d0 [ 68.095639][ T6683] put_page+0x21e/0x280 [ 68.097036][ T6683] page_pool_return_page+0x400/0x520 [ 68.098900][ T6683] page_pool_release+0xf4/0x7d0 [ 68.100701][ T6683] page_pool_destroy+0x10a/0x4c0 [ 68.102468][ T6683] bpf_test_run_xdp_live+0x3a1/0x500 [ 68.104267][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 68.106149][ T6683] __sys_bpf+0xfc6/0x49a0 [ 68.107637][ T6683] __x64_sys_bpf+0x78/0xc0 [ 68.109142][ T6683] do_syscall_64+0xcd/0x250 [ 68.110687][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.112666][ T6683] Modules linked in: [ 68.113993][ T6683] CPU: 1 UID: 0 PID: 6683 Comm: syz.2.194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 68.118257][ T6683] Tainted: [B]=BAD_PAGE [ 68.119717][ T6683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.123385][ T6683] Call Trace: [ 68.124503][ T6683] [ 68.125511][ T6683] dump_stack_lvl+0x16c/0x1f0 [ 68.127093][ T6683] bad_page+0xb3/0x1f0 [ 68.128489][ T6683] ? __pfx_bad_page+0x10/0x10 [ 68.130055][ T6683] ? page_bad_reason+0x9d/0x1e0 [ 68.131690][ T6683] free_unref_page+0x657/0xdc0 [ 68.133288][ T6683] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 68.135461][ T6683] ? __phys_addr+0xc6/0x150 [ 68.137001][ T6683] skb_free_head+0xa0/0x1d0 [ 68.138562][ T6683] skb_release_data+0x560/0x730 [ 68.140203][ T6683] sk_skb_reason_drop+0x129/0x1a0 [ 68.141908][ T6683] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 68.144159][ T6683] ? kernel_text_address+0x8d/0x100 [ 68.145915][ T6683] ? hlock_class+0x4e/0x130 [ 68.147369][ T6683] ? __lock_acquire+0x163e/0x3ce0 [ 68.148694][ T6683] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 68.150549][ T6683] ? hlock_class+0x4e/0x130 [ 68.151747][ T6683] ? __lock_acquire+0xbdd/0x3ce0 [ 68.153039][ T6683] ? __pfx___lock_acquire+0x10/0x10 [ 68.154562][ T6683] __netif_receive_skb_list_core+0x357/0x950 [ 68.156136][ T6683] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 68.157830][ T6683] ? trace_lock_acquire+0x14a/0x1d0 [ 68.159202][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 68.160856][ T6683] ? lock_acquire+0x2f/0xb0 [ 68.162050][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 68.163803][ T6683] netif_receive_skb_list_internal+0x753/0xdb0 [ 68.165534][ T6683] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 68.167297][ T6683] ? __pfx_eth_type_trans+0x10/0x10 [ 68.168668][ T6683] ? __build_skb_around+0x278/0x3b0 [ 68.170029][ T6683] netif_receive_skb_list+0x4f/0x4a0 [ 68.171534][ T6683] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 68.173296][ T6683] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 68.175213][ T6683] ? bpf_test_timer_continue+0x150/0x3d0 [ 68.176679][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 68.178098][ T6683] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 68.179621][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 68.181232][ T6683] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 68.182788][ T6683] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 68.184671][ T6683] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 68.186342][ T6683] ? 0xffffffffa00045c0 [ 68.187466][ T6683] ? 0xffffffffa00045c0 [ 68.188547][ T6683] ? 0xffffffffa00045c0 [ 68.189627][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 68.191180][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 68.192567][ T6683] ? lock_acquire+0x2f/0xb0 [ 68.193766][ T6683] ? __fget_files+0x40/0x3f0 [ 68.195033][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 68.196544][ T6683] ? fput+0x30/0x390 [ 68.197562][ T6683] ? __bpf_prog_get+0xa0/0x290 [ 68.198811][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 68.200308][ T6683] __sys_bpf+0xfc6/0x49a0 [ 68.201602][ T6683] ? __pfx___sys_bpf+0x10/0x10 [ 68.203049][ T6683] ? __schedule+0xe5d/0x5730 [ 68.204663][ T6683] ? __fget_files+0x23a/0x3f0 [ 68.205924][ T6683] ? do_futex+0x123/0x350 [ 68.207340][ T6683] ? __pfx_do_futex+0x10/0x10 [ 68.208681][ T6683] ? xfd_validate_state+0x5d/0x180 [ 68.210100][ T6683] ? rcu_is_watching+0x12/0xc0 [ 68.211428][ T6683] __x64_sys_bpf+0x78/0xc0 [ 68.212677][ T6683] ? lockdep_hardirqs_on+0x7c/0x110 [ 68.214174][ T6683] do_syscall_64+0xcd/0x250 [ 68.215629][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.217173][ T6683] RIP: 0033:0x7f574217e719 [ 68.218343][ T6683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.223323][ T6683] RSP: 002b:00007f5742e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 68.225480][ T6683] RAX: ffffffffffffffda RBX: 00007f5742336058 RCX: 00007f574217e719 [ 68.227507][ T6683] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 68.229502][ T6683] RBP: 00007f57421f132e R08: 0000000000000000 R09: 0000000000000000 [ 68.231529][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.233547][ T6683] R13: 0000000000000000 R14: 00007f5742336058 R15: 00007ffe5115f908 [ 68.235635][ T6683] [ 68.236665][ T6683] BUG: Bad page state in process syz.2.194 pfn:26ca9 [ 68.238461][ T6683] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000002 pfn:0x26ca9 [ 68.240099][ T39] kauditd_printk_skb: 3 callbacks suppressed [ 68.240111][ T39] audit: type=1400 audit(1730232385.051:150): avc: denied { rename } for pid=5337 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 68.241047][ T6683] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 68.244225][ T39] audit: type=1400 audit(1730232385.051:151): avc: denied { unlink } for pid=5337 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 68.251179][ T6683] raw: 00fff00000000000 dead000000000040 ffff88802a52e000 0000000000000000 [ 68.251215][ T6683] raw: ffff888000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 68.253067][ T39] audit: type=1400 audit(1730232385.051:152): avc: denied { create } for pid=5337 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 68.258844][ T6683] page dumped because: page_pool leak [ 68.258854][ T6683] page_owner tracks the page as allocated [ 68.258858][ T6683] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6683, tgid 6674 (syz.2.194), ts 67591160099, free_ts 67588926944 [ 68.276804][ T6683] post_alloc_hook+0x2d1/0x350 [ 68.278095][ T6683] get_page_from_freelist+0x101e/0x3070 [ 68.279592][ T6683] __alloc_pages_noprof+0x223/0x25a0 [ 68.281017][ T6683] alloc_pages_bulk_noprof+0x77c/0x1110 [ 68.282711][ T6683] __page_pool_alloc_pages_slow+0x18f/0x770 [ 68.284252][ T6683] page_pool_alloc_netmem+0xc4/0x160 [ 68.285703][ T6683] page_pool_alloc_pages+0x1a/0x60 [ 68.287163][ T6683] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 68.288776][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 68.290580][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 68.291999][ T6683] __sys_bpf+0xfc6/0x49a0 [ 68.293117][ T6683] __x64_sys_bpf+0x78/0xc0 [ 68.294426][ T6683] do_syscall_64+0xcd/0x250 [ 68.295769][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.297428][ T6683] page last free pid 6671 tgid 6669 stack trace: [ 68.299195][ T6683] free_unref_page+0x5f4/0xdc0 [ 68.300566][ T6683] __folio_put+0x30d/0x3d0 [ 68.302145][ T6683] put_page+0x21e/0x280 [ 68.303453][ T6683] page_pool_return_page+0x400/0x520 [ 68.305142][ T6683] page_pool_release+0xf4/0x7d0 [ 68.306470][ T6683] page_pool_destroy+0x10a/0x4c0 [ 68.307767][ T6683] bpf_test_run_xdp_live+0x3a1/0x500 [ 68.308989][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 68.310269][ T6683] __sys_bpf+0xfc6/0x49a0 [ 68.311424][ T6683] __x64_sys_bpf+0x78/0xc0 [ 68.312585][ T6683] do_syscall_64+0xcd/0x250 [ 68.313882][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.315511][ T6683] Modules linked in: [ 68.316541][ T6683] CPU: 1 UID: 0 PID: 6683 Comm: syz.2.194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 68.319621][ T6683] Tainted: [B]=BAD_PAGE [ 68.320703][ T6683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.323590][ T6683] Call Trace: [ 68.324718][ T6683] [ 68.325616][ T6683] dump_stack_lvl+0x16c/0x1f0 [ 68.327418][ T6683] bad_page+0xb3/0x1f0 [ 68.328502][ T6683] ? __pfx_bad_page+0x10/0x10 [ 68.329738][ T6683] ? page_bad_reason+0x9d/0x1e0 [ 68.331034][ T6683] free_unref_page+0x657/0xdc0 [ 68.332315][ T6683] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 68.334286][ T6683] ? __phys_addr+0xc6/0x150 [ 68.335490][ T6683] skb_free_head+0xa0/0x1d0 [ 68.336672][ T6683] skb_release_data+0x560/0x730 [ 68.337938][ T6683] sk_skb_reason_drop+0x129/0x1a0 [ 68.339262][ T6683] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 68.341602][ T6683] ? kernel_text_address+0x8d/0x100 [ 68.343670][ T6683] ? hlock_class+0x4e/0x130 [ 68.344963][ T6683] ? __lock_acquire+0x163e/0x3ce0 [ 68.346265][ T6683] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 68.348383][ T6683] ? hlock_class+0x4e/0x130 [ 68.349781][ T6683] ? __lock_acquire+0xbdd/0x3ce0 [ 68.351351][ T6683] ? __pfx___lock_acquire+0x10/0x10 [ 68.352755][ T6683] __netif_receive_skb_list_core+0x357/0x950 [ 68.354388][ T6683] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 68.356184][ T6683] ? trace_lock_acquire+0x14a/0x1d0 [ 68.357646][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 68.359592][ T6683] ? lock_acquire+0x2f/0xb0 [ 68.360987][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 68.362860][ T6683] netif_receive_skb_list_internal+0x753/0xdb0 [ 68.364775][ T6683] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 68.366626][ T6683] ? __pfx_eth_type_trans+0x10/0x10 [ 68.368062][ T6683] ? __build_skb_around+0x278/0x3b0 [ 68.369766][ T6683] netif_receive_skb_list+0x4f/0x4a0 [ 68.371251][ T6683] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 68.372951][ T6683] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 68.374695][ T6683] ? bpf_test_timer_continue+0x150/0x3d0 [ 68.376264][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 68.377676][ T6683] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 68.379234][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 68.380819][ T6683] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 68.382671][ T6683] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 68.384653][ T6683] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 68.386059][ T6683] ? 0xffffffffa00045c0 [ 68.387214][ T6683] ? 0xffffffffa00045c0 [ 68.388495][ T6683] ? 0xffffffffa00045c0 [ 68.389653][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 68.391236][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 68.392674][ T6683] ? lock_acquire+0x2f/0xb0 [ 68.393879][ T6683] ? __fget_files+0x40/0x3f0 [ 68.395688][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 68.398144][ T6683] ? fput+0x30/0x390 [ 68.399745][ T6683] ? __bpf_prog_get+0xa0/0x290 [ 68.401461][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 68.403571][ T6683] __sys_bpf+0xfc6/0x49a0 [ 68.405117][ T6683] ? __pfx___sys_bpf+0x10/0x10 [ 68.407087][ T6683] ? __schedule+0xe5d/0x5730 [ 68.409016][ T6683] ? __fget_files+0x23a/0x3f0 [ 68.410910][ T6683] ? do_futex+0x123/0x350 [ 68.412459][ T6683] ? __pfx_do_futex+0x10/0x10 [ 68.414182][ T6683] ? xfd_validate_state+0x5d/0x180 [ 68.416032][ T6683] ? rcu_is_watching+0x12/0xc0 [ 68.417731][ T6683] __x64_sys_bpf+0x78/0xc0 [ 68.419268][ T6683] ? lockdep_hardirqs_on+0x7c/0x110 [ 68.421034][ T6683] do_syscall_64+0xcd/0x250 [ 68.422593][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.425248][ T6683] RIP: 0033:0x7f574217e719 [ 68.426771][ T6683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.433681][ T6683] RSP: 002b:00007f5742e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 68.436614][ T6683] RAX: ffffffffffffffda RBX: 00007f5742336058 RCX: 00007f574217e719 [ 68.439591][ T6683] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 68.442666][ T6683] RBP: 00007f57421f132e R08: 0000000000000000 R09: 0000000000000000 [ 68.445725][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.448730][ T6683] R13: 0000000000000000 R14: 00007f5742336058 R15: 00007ffe5115f908 [ 68.451599][ T6683] [ 68.452790][ T6683] BUG: Bad page state in process syz.2.194 pfn:35660 [ 68.455452][ T6683] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888035661e00 pfn:0x35660 [ 68.458885][ T6683] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 68.461376][ T6683] raw: 00fff00000000000 dead000000000040 ffff88802a52e000 0000000000000000 [ 68.464909][ T6683] raw: ffff888035661e00 0000000000000001 00000000ffffffff 0000000000000000 [ 68.468486][ T6683] page dumped because: page_pool leak [ 68.470581][ T6683] page_owner tracks the page as allocated [ 68.472583][ T6683] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6683, tgid 6674 (syz.2.194), ts 67591155559, free_ts 67588930563 [ 68.478307][ T6683] post_alloc_hook+0x2d1/0x350 [ 68.480081][ T6683] get_page_from_freelist+0x101e/0x3070 [ 68.482196][ T6683] __alloc_pages_noprof+0x223/0x25a0 [ 68.484336][ T6683] alloc_pages_bulk_noprof+0x77c/0x1110 [ 68.486597][ T6683] __page_pool_alloc_pages_slow+0x18f/0x770 [ 68.489595][ T6683] page_pool_alloc_netmem+0xc4/0x160 [ 68.491540][ T6683] page_pool_alloc_pages+0x1a/0x60 [ 68.493476][ T6683] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 68.495774][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 68.497669][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 68.499567][ T6683] __sys_bpf+0xfc6/0x49a0 [ 68.501210][ T6683] __x64_sys_bpf+0x78/0xc0 [ 68.502901][ T6683] do_syscall_64+0xcd/0x250 [ 68.504508][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.506857][ T6683] page last free pid 6671 tgid 6669 stack trace: [ 68.509065][ T6683] free_unref_page+0x5f4/0xdc0 [ 68.510709][ T6683] __folio_put+0x30d/0x3d0 [ 68.512223][ T6683] put_page+0x21e/0x280 [ 68.513646][ T6683] page_pool_return_page+0x400/0x520 [ 68.515513][ T6683] page_pool_release+0xf4/0x7d0 [ 68.517159][ T6683] page_pool_destroy+0x10a/0x4c0 [ 68.518960][ T6683] bpf_test_run_xdp_live+0x3a1/0x500 [ 68.520867][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 68.523090][ T6683] __sys_bpf+0xfc6/0x49a0 [ 68.524575][ T6683] __x64_sys_bpf+0x78/0xc0 [ 68.526172][ T6683] do_syscall_64+0xcd/0x250 [ 68.527990][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.530711][ T6683] Modules linked in: [ 68.532229][ T6683] CPU: 1 UID: 0 PID: 6683 Comm: syz.2.194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 68.536499][ T6683] Tainted: [B]=BAD_PAGE [ 68.537853][ T6683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.540651][ T6683] Call Trace: [ 68.541661][ T6683] [ 68.542761][ T6683] dump_stack_lvl+0x16c/0x1f0 [ 68.544482][ T6683] bad_page+0xb3/0x1f0 [ 68.545665][ T6683] ? __pfx_bad_page+0x10/0x10 [ 68.547088][ T6683] ? page_bad_reason+0x9d/0x1e0 [ 68.548760][ T6683] free_unref_page+0x657/0xdc0 [ 68.550219][ T6683] ? __phys_addr+0xc6/0x150 [ 68.551618][ T6683] ? page_frag_free+0x3c/0x1e0 [ 68.552898][ T6683] skb_free_head+0xa0/0x1d0 [ 68.554126][ T6683] skb_release_data+0x560/0x730 [ 68.555452][ T6683] sk_skb_reason_drop+0x129/0x1a0 [ 68.556790][ T6683] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 68.558585][ T6683] ? kernel_text_address+0x8d/0x100 [ 68.559975][ T6683] ? hlock_class+0x4e/0x130 [ 68.561208][ T6683] ? __lock_acquire+0x163e/0x3ce0 [ 68.563032][ T6683] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 68.565642][ T6683] ? hlock_class+0x4e/0x130 [ 68.567245][ T6683] ? __lock_acquire+0xbdd/0x3ce0 [ 68.568549][ T6683] ? __pfx___lock_acquire+0x10/0x10 [ 68.570018][ T6683] __netif_receive_skb_list_core+0x357/0x950 [ 68.571864][ T6683] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 68.573676][ T6683] ? trace_lock_acquire+0x14a/0x1d0 [ 68.575082][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 68.576913][ T6683] ? lock_acquire+0x2f/0xb0 [ 68.578116][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 68.579880][ T6683] netif_receive_skb_list_internal+0x753/0xdb0 [ 68.581597][ T6683] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 68.583495][ T6683] ? __pfx_eth_type_trans+0x10/0x10 [ 68.585096][ T6683] ? __build_skb_around+0x278/0x3b0 [ 68.587096][ T6683] netif_receive_skb_list+0x4f/0x4a0 [ 68.589049][ T6683] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 68.590890][ T6683] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 68.592867][ T6683] ? bpf_test_timer_continue+0x150/0x3d0 [ 68.594456][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 68.595846][ T6683] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 68.597602][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 68.599197][ T6683] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 68.600843][ T6683] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 68.602500][ T6683] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 68.604188][ T6683] ? 0xffffffffa00045c0 [ 68.605214][ T6683] ? 0xffffffffa00045c0 [ 68.606218][ T6683] ? 0xffffffffa00045c0 [ 68.607406][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 68.609216][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 68.610960][ T6683] ? lock_acquire+0x2f/0xb0 [ 68.612228][ T6683] ? __fget_files+0x40/0x3f0 [ 68.613465][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 68.615027][ T6683] ? fput+0x30/0x390 [ 68.616063][ T6683] ? __bpf_prog_get+0xa0/0x290 [ 68.617407][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 68.619108][ T6683] __sys_bpf+0xfc6/0x49a0 [ 68.620404][ T6683] ? __pfx___sys_bpf+0x10/0x10 [ 68.622038][ T6683] ? __schedule+0xe5d/0x5730 [ 68.623725][ T6683] ? __fget_files+0x23a/0x3f0 [ 68.625356][ T6683] ? do_futex+0x123/0x350 [ 68.627238][ T6683] ? __pfx_do_futex+0x10/0x10 [ 68.628686][ T6683] ? xfd_validate_state+0x5d/0x180 [ 68.630246][ T6683] ? rcu_is_watching+0x12/0xc0 [ 68.631775][ T6683] __x64_sys_bpf+0x78/0xc0 [ 68.633129][ T6683] ? lockdep_hardirqs_on+0x7c/0x110 [ 68.634635][ T6683] do_syscall_64+0xcd/0x250 [ 68.635833][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.637380][ T6683] RIP: 0033:0x7f574217e719 [ 68.638573][ T6683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.643548][ T6683] RSP: 002b:00007f5742e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 68.645695][ T6683] RAX: ffffffffffffffda RBX: 00007f5742336058 RCX: 00007f574217e719 [ 68.647776][ T6683] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 68.649943][ T6683] RBP: 00007f57421f132e R08: 0000000000000000 R09: 0000000000000000 [ 68.652164][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.654241][ T6683] R13: 0000000000000000 R14: 00007f5742336058 R15: 00007ffe5115f908 [ 68.656321][ T6683] [ 68.657262][ T6683] BUG: Bad page state in process syz.2.194 pfn:35661 [ 68.659058][ T6683] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2 pfn:0x35661 [ 68.661336][ T6683] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 68.663593][ T6683] raw: 00fff00000000000 dead000000000040 ffff88802a52e000 0000000000000000 [ 68.665895][ T6683] raw: 0000000000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 68.668401][ T6683] page dumped because: page_pool leak [ 68.669881][ T6683] page_owner tracks the page as allocated [ 68.671692][ T6683] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6683, tgid 6674 (syz.2.194), ts 67591150963, free_ts 67588935111 [ 68.676496][ T6683] post_alloc_hook+0x2d1/0x350 [ 68.677807][ T6683] get_page_from_freelist+0x101e/0x3070 [ 68.679318][ T6683] __alloc_pages_noprof+0x223/0x25a0 [ 68.680766][ T6683] alloc_pages_bulk_noprof+0x77c/0x1110 [ 68.682275][ T6683] __page_pool_alloc_pages_slow+0x18f/0x770 [ 68.683847][ T6683] page_pool_alloc_netmem+0xc4/0x160 [ 68.685284][ T6683] page_pool_alloc_pages+0x1a/0x60 [ 68.686642][ T6683] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 68.688260][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 68.689654][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 68.691067][ T6683] __sys_bpf+0xfc6/0x49a0 [ 68.692205][ T6683] __x64_sys_bpf+0x78/0xc0 [ 68.693391][ T6683] do_syscall_64+0xcd/0x250 [ 68.694623][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.696231][ T6683] page last free pid 6671 tgid 6669 stack trace: [ 68.697983][ T6683] free_unref_page+0x5f4/0xdc0 [ 68.699304][ T6683] __folio_put+0x30d/0x3d0 [ 68.701291][ T6683] put_page+0x21e/0x280 [ 68.702746][ T6683] page_pool_return_page+0x400/0x520 [ 68.704296][ T6683] page_pool_release+0xf4/0x7d0 [ 68.706208][ T6683] page_pool_destroy+0x10a/0x4c0 [ 68.707581][ T6683] bpf_test_run_xdp_live+0x3a1/0x500 [ 68.709013][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 68.710550][ T6683] __sys_bpf+0xfc6/0x49a0 [ 68.711922][ T6683] __x64_sys_bpf+0x78/0xc0 [ 68.713228][ T6683] do_syscall_64+0xcd/0x250 [ 68.714693][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.716564][ T6683] Modules linked in: [ 68.717745][ T6683] CPU: 1 UID: 0 PID: 6683 Comm: syz.2.194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 68.721113][ T6683] Tainted: [B]=BAD_PAGE [ 68.722355][ T6683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.725699][ T6683] Call Trace: [ 68.726697][ T6683] [ 68.727649][ T6683] dump_stack_lvl+0x16c/0x1f0 [ 68.729273][ T6683] bad_page+0xb3/0x1f0 [ 68.730684][ T6683] ? __pfx_bad_page+0x10/0x10 [ 68.731925][ T6683] ? page_bad_reason+0x9d/0x1e0 [ 68.733216][ T6683] free_unref_page+0x657/0xdc0 [ 68.734511][ T6683] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 68.736098][ T6683] ? __phys_addr+0xc6/0x150 [ 68.737323][ T6683] skb_free_head+0xa0/0x1d0 [ 68.738563][ T6683] skb_release_data+0x560/0x730 [ 68.739849][ T6683] sk_skb_reason_drop+0x129/0x1a0 [ 68.741170][ T6683] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 68.742911][ T6683] ? kernel_text_address+0x8d/0x100 [ 68.744276][ T6683] ? hlock_class+0x4e/0x130 [ 68.745465][ T6683] ? __lock_acquire+0x163e/0x3ce0 [ 68.747698][ T6683] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 68.750499][ T6683] ? hlock_class+0x4e/0x130 [ 68.751813][ T6683] ? __lock_acquire+0xbdd/0x3ce0 [ 68.753144][ T6683] ? __pfx___lock_acquire+0x10/0x10 [ 68.754566][ T6683] __netif_receive_skb_list_core+0x357/0x950 [ 68.756193][ T6683] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 68.757988][ T6683] ? trace_lock_acquire+0x14a/0x1d0 [ 68.759856][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 68.761926][ T6683] ? lock_acquire+0x2f/0xb0 [ 68.763558][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 68.765802][ T6683] netif_receive_skb_list_internal+0x753/0xdb0 [ 68.767676][ T6683] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 68.769405][ T6683] ? __pfx_eth_type_trans+0x10/0x10 [ 68.770783][ T6683] ? __build_skb_around+0x278/0x3b0 [ 68.772150][ T6683] netif_receive_skb_list+0x4f/0x4a0 [ 68.773541][ T6683] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 68.775360][ T6683] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 68.777213][ T6683] ? bpf_test_timer_continue+0x150/0x3d0 [ 68.778729][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 68.780113][ T6683] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 68.781642][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 68.783442][ T6683] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 68.785280][ T6683] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 68.787630][ T6683] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 68.789016][ T6683] ? 0xffffffffa00045c0 [ 68.790216][ T6683] ? 0xffffffffa00045c0 [ 68.791507][ T6683] ? 0xffffffffa00045c0 [ 68.792611][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 68.794274][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 68.795755][ T6683] ? lock_acquire+0x2f/0xb0 [ 68.796971][ T6683] ? __fget_files+0x40/0x3f0 [ 68.798181][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 68.799678][ T6683] ? fput+0x30/0x390 [ 68.800791][ T6683] ? __bpf_prog_get+0xa0/0x290 [ 68.802159][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 68.804078][ T6683] __sys_bpf+0xfc6/0x49a0 [ 68.805268][ T6683] ? __pfx___sys_bpf+0x10/0x10 [ 68.806804][ T6683] ? __schedule+0xe5d/0x5730 [ 68.808249][ T6683] ? __fget_files+0x23a/0x3f0 [ 68.809656][ T6683] ? do_futex+0x123/0x350 [ 68.810919][ T6683] ? __pfx_do_futex+0x10/0x10 [ 68.812260][ T6683] ? xfd_validate_state+0x5d/0x180 [ 68.813662][ T6683] ? rcu_is_watching+0x12/0xc0 [ 68.815004][ T6683] __x64_sys_bpf+0x78/0xc0 [ 68.816219][ T6683] ? lockdep_hardirqs_on+0x7c/0x110 [ 68.817590][ T6683] do_syscall_64+0xcd/0x250 [ 68.818804][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.820366][ T6683] RIP: 0033:0x7f574217e719 [ 68.821599][ T6683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.827018][ T6683] RSP: 002b:00007f5742e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 68.829345][ T6683] RAX: ffffffffffffffda RBX: 00007f5742336058 RCX: 00007f574217e719 [ 68.831495][ T6683] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 68.833568][ T6683] RBP: 00007f57421f132e R08: 0000000000000000 R09: 0000000000000000 [ 68.835659][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.837727][ T6683] R13: 0000000000000000 R14: 00007f5742336058 R15: 00007ffe5115f908 [ 68.839910][ T6683] [ 68.840840][ T6683] BUG: Bad page state in process syz.2.194 pfn:26cba [ 68.842936][ T6683] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888026cbbe00 pfn:0x26cba [ 68.845708][ T6683] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 68.848005][ T6683] raw: 00fff00000000000 dead000000000040 ffff88802a52e000 0000000000000000 [ 68.850702][ T6683] raw: ffff888026cbbe00 0000000000000001 00000000ffffffff 0000000000000000 [ 68.853131][ T6683] page dumped because: page_pool leak [ 68.854561][ T6683] page_owner tracks the page as allocated [ 68.856239][ T6683] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6683, tgid 6674 (syz.2.194), ts 67591146408, free_ts 67588938860 [ 68.860496][ T6683] post_alloc_hook+0x2d1/0x350 [ 68.861805][ T6683] get_page_from_freelist+0x101e/0x3070 [ 68.863355][ T6683] __alloc_pages_noprof+0x223/0x25a0 [ 68.864819][ T6683] alloc_pages_bulk_noprof+0x77c/0x1110 [ 68.866548][ T6683] __page_pool_alloc_pages_slow+0x18f/0x770 [ 68.868367][ T6683] page_pool_alloc_netmem+0xc4/0x160 [ 68.870051][ T6683] page_pool_alloc_pages+0x1a/0x60 [ 68.871531][ T6683] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 68.873276][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 68.874745][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 68.876244][ T6683] __sys_bpf+0xfc6/0x49a0 [ 68.877421][ T6683] __x64_sys_bpf+0x78/0xc0 [ 68.878619][ T6683] do_syscall_64+0xcd/0x250 [ 68.879815][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.881529][ T6683] page last free pid 6671 tgid 6669 stack trace: [ 68.883223][ T6683] free_unref_page+0x5f4/0xdc0 [ 68.885073][ T6683] __folio_put+0x30d/0x3d0 [ 68.887175][ T6683] put_page+0x21e/0x280 [ 68.888833][ T6683] page_pool_return_page+0x400/0x520 [ 68.890270][ T6683] page_pool_release+0xf4/0x7d0 [ 68.891555][ T6683] page_pool_destroy+0x10a/0x4c0 [ 68.893106][ T6683] bpf_test_run_xdp_live+0x3a1/0x500 [ 68.894620][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 68.896255][ T6683] __sys_bpf+0xfc6/0x49a0 [ 68.897408][ T6683] __x64_sys_bpf+0x78/0xc0 [ 68.898623][ T6683] do_syscall_64+0xcd/0x250 [ 68.899856][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.901484][ T6683] Modules linked in: [ 68.902568][ T6683] CPU: 1 UID: 0 PID: 6683 Comm: syz.2.194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 68.905985][ T6683] Tainted: [B]=BAD_PAGE [ 68.907367][ T6683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.910510][ T6683] Call Trace: [ 68.911387][ T6683] [ 68.912178][ T6683] dump_stack_lvl+0x16c/0x1f0 [ 68.913431][ T6683] bad_page+0xb3/0x1f0 [ 68.914535][ T6683] ? __pfx_bad_page+0x10/0x10 [ 68.915787][ T6683] ? page_bad_reason+0x9d/0x1e0 [ 68.917072][ T6683] free_unref_page+0x657/0xdc0 [ 68.918355][ T6683] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 68.919946][ T6683] ? __phys_addr+0xc6/0x150 [ 68.921288][ T6683] skb_free_head+0xa0/0x1d0 [ 68.922858][ T6683] skb_release_data+0x560/0x730 [ 68.924200][ T6683] sk_skb_reason_drop+0x129/0x1a0 [ 68.925704][ T6683] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 68.927503][ T6683] ? kernel_text_address+0x8d/0x100 [ 68.928917][ T6683] ? hlock_class+0x4e/0x130 [ 68.930158][ T6683] ? __lock_acquire+0x163e/0x3ce0 [ 68.931589][ T6683] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 68.933441][ T6683] ? hlock_class+0x4e/0x130 [ 68.934647][ T6683] ? __lock_acquire+0xbdd/0x3ce0 [ 68.936039][ T6683] ? __pfx___lock_acquire+0x10/0x10 [ 68.937415][ T6683] __netif_receive_skb_list_core+0x357/0x950 [ 68.939001][ T6683] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 68.940696][ T6683] ? trace_lock_acquire+0x14a/0x1d0 [ 68.942062][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 68.943954][ T6683] ? lock_acquire+0x2f/0xb0 [ 68.945350][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 68.947062][ T6683] netif_receive_skb_list_internal+0x753/0xdb0 [ 68.948702][ T6683] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 68.950760][ T6683] ? __pfx_eth_type_trans+0x10/0x10 [ 68.952172][ T6683] ? __build_skb_around+0x278/0x3b0 [ 68.953538][ T6683] netif_receive_skb_list+0x4f/0x4a0 [ 68.954966][ T6683] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 68.956602][ T6683] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 68.958331][ T6683] ? bpf_test_timer_continue+0x150/0x3d0 [ 68.959787][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 68.961176][ T6683] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 68.962719][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 68.964615][ T6683] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 68.966287][ T6683] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 68.967917][ T6683] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 68.969585][ T6683] ? 0xffffffffa00045c0 [ 68.970888][ T6683] ? 0xffffffffa00045c0 [ 68.972050][ T6683] ? 0xffffffffa00045c0 [ 68.973214][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 68.974872][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 68.976316][ T6683] ? lock_acquire+0x2f/0xb0 [ 68.977520][ T6683] ? __fget_files+0x40/0x3f0 [ 68.978754][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 68.980284][ T6683] ? fput+0x30/0x390 [ 68.981314][ T6683] ? __bpf_prog_get+0xa0/0x290 [ 68.982581][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 68.984239][ T6683] __sys_bpf+0xfc6/0x49a0 [ 68.985526][ T6683] ? __pfx___sys_bpf+0x10/0x10 [ 68.986983][ T6683] ? __schedule+0xe5d/0x5730 [ 68.988446][ T6683] ? __fget_files+0x23a/0x3f0 [ 68.989906][ T6683] ? do_futex+0x123/0x350 [ 68.991072][ T6683] ? __pfx_do_futex+0x10/0x10 [ 68.992308][ T6683] ? xfd_validate_state+0x5d/0x180 [ 68.993693][ T6683] ? rcu_is_watching+0x12/0xc0 [ 68.995009][ T6683] __x64_sys_bpf+0x78/0xc0 [ 68.996192][ T6683] ? lockdep_hardirqs_on+0x7c/0x110 [ 68.997728][ T6683] do_syscall_64+0xcd/0x250 [ 68.998960][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.000539][ T6683] RIP: 0033:0x7f574217e719 [ 69.001962][ T6683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.007155][ T6683] RSP: 002b:00007f5742e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 69.009532][ T6683] RAX: ffffffffffffffda RBX: 00007f5742336058 RCX: 00007f574217e719 [ 69.011830][ T6683] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 69.014267][ T6683] RBP: 00007f57421f132e R08: 0000000000000000 R09: 0000000000000000 [ 69.016632][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.018678][ T6683] R13: 0000000000000000 R14: 00007f5742336058 R15: 00007ffe5115f908 [ 69.020722][ T6683] [ 69.021652][ T6683] BUG: Bad page state in process syz.2.194 pfn:26cbb [ 69.023439][ T6683] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2 pfn:0x26cbb [ 69.025764][ T6683] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 69.027620][ T6683] raw: 00fff00000000000 dead000000000040 ffff88802a52e000 0000000000000000 [ 69.029848][ T6683] raw: 0000000000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 69.032190][ T6683] page dumped because: page_pool leak [ 69.033680][ T6683] page_owner tracks the page as allocated [ 69.035232][ T6683] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6683, tgid 6674 (syz.2.194), ts 67591141499, free_ts 67588942818 [ 69.039507][ T6683] post_alloc_hook+0x2d1/0x350 [ 69.040761][ T6683] get_page_from_freelist+0x101e/0x3070 [ 69.042216][ T6683] __alloc_pages_noprof+0x223/0x25a0 [ 69.043610][ T6683] alloc_pages_bulk_noprof+0x77c/0x1110 [ 69.045097][ T6683] __page_pool_alloc_pages_slow+0x18f/0x770 [ 69.046634][ T6683] page_pool_alloc_netmem+0xc4/0x160 [ 69.048025][ T6683] page_pool_alloc_pages+0x1a/0x60 [ 69.049356][ T6683] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 69.050960][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 69.052451][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 69.053876][ T6683] __sys_bpf+0xfc6/0x49a0 [ 69.055090][ T6683] __x64_sys_bpf+0x78/0xc0 [ 69.056324][ T6683] do_syscall_64+0xcd/0x250 [ 69.057563][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.059223][ T6683] page last free pid 6671 tgid 6669 stack trace: [ 69.060992][ T6683] free_unref_page+0x5f4/0xdc0 [ 69.062663][ T6683] __folio_put+0x30d/0x3d0 [ 69.064142][ T6683] put_page+0x21e/0x280 [ 69.065583][ T6683] page_pool_return_page+0x400/0x520 [ 69.067278][ T6683] page_pool_release+0xf4/0x7d0 [ 69.068937][ T6683] page_pool_destroy+0x10a/0x4c0 [ 69.070250][ T6683] bpf_test_run_xdp_live+0x3a1/0x500 [ 69.071644][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 69.073056][ T6683] __sys_bpf+0xfc6/0x49a0 [ 69.074192][ T6683] __x64_sys_bpf+0x78/0xc0 [ 69.075616][ T6683] do_syscall_64+0xcd/0x250 [ 69.076853][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.078418][ T6683] Modules linked in: [ 69.079444][ T6683] CPU: 1 UID: 0 PID: 6683 Comm: syz.2.194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 69.082519][ T6683] Tainted: [B]=BAD_PAGE [ 69.083599][ T6683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.086480][ T6683] Call Trace: [ 69.087357][ T6683] [ 69.088130][ T6683] dump_stack_lvl+0x16c/0x1f0 [ 69.089372][ T6683] bad_page+0xb3/0x1f0 [ 69.090465][ T6683] ? __pfx_bad_page+0x10/0x10 [ 69.091813][ T6683] ? page_bad_reason+0x9d/0x1e0 [ 69.093110][ T6683] free_unref_page+0x657/0xdc0 [ 69.094412][ T6683] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 69.095990][ T6683] ? __phys_addr+0xc6/0x150 [ 69.097200][ T6683] skb_free_head+0xa0/0x1d0 [ 69.098408][ T6683] skb_release_data+0x560/0x730 [ 69.099688][ T6683] sk_skb_reason_drop+0x129/0x1a0 [ 69.101013][ T6683] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 69.103172][ T6683] ? kernel_text_address+0x8d/0x100 [ 69.104639][ T6683] ? hlock_class+0x4e/0x130 [ 69.105887][ T6683] ? __lock_acquire+0x163e/0x3ce0 [ 69.107395][ T6683] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 69.109334][ T6683] ? hlock_class+0x4e/0x130 [ 69.110604][ T6683] ? __lock_acquire+0xbdd/0x3ce0 [ 69.112029][ T6683] ? __pfx___lock_acquire+0x10/0x10 [ 69.113547][ T6683] __netif_receive_skb_list_core+0x357/0x950 [ 69.115212][ T6683] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 69.116935][ T6683] ? trace_lock_acquire+0x14a/0x1d0 [ 69.118308][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 69.119983][ T6683] ? lock_acquire+0x2f/0xb0 [ 69.121331][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 69.123258][ T6683] netif_receive_skb_list_internal+0x753/0xdb0 [ 69.125294][ T6683] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 69.127231][ T6683] ? __pfx_eth_type_trans+0x10/0x10 [ 69.128939][ T6683] ? __build_skb_around+0x278/0x3b0 [ 69.130639][ T6683] netif_receive_skb_list+0x4f/0x4a0 [ 69.132330][ T6683] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 69.134349][ T6683] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 69.136305][ T6683] ? bpf_test_timer_continue+0x150/0x3d0 [ 69.137783][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 69.139184][ T6683] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 69.140711][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 69.142267][ T6683] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 69.143827][ T6683] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 69.145885][ T6683] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 69.147519][ T6683] ? 0xffffffffa00045c0 [ 69.148677][ T6683] ? 0xffffffffa00045c0 [ 69.149796][ T6683] ? 0xffffffffa00045c0 [ 69.150909][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 69.152464][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 69.153876][ T6683] ? lock_acquire+0x2f/0xb0 [ 69.155101][ T6683] ? __fget_files+0x40/0x3f0 [ 69.156440][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 69.157974][ T6683] ? fput+0x30/0x390 [ 69.159023][ T6683] ? __bpf_prog_get+0xa0/0x290 [ 69.160293][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 69.161826][ T6683] __sys_bpf+0xfc6/0x49a0 [ 69.163075][ T6683] ? __pfx___sys_bpf+0x10/0x10 [ 69.164350][ T6683] ? __schedule+0xe5d/0x5730 [ 69.165581][ T6683] ? __fget_files+0x23a/0x3f0 [ 69.166828][ T6683] ? do_futex+0x123/0x350 [ 69.167969][ T6683] ? __pfx_do_futex+0x10/0x10 [ 69.169209][ T6683] ? xfd_validate_state+0x5d/0x180 [ 69.170564][ T6683] ? rcu_is_watching+0x12/0xc0 [ 69.171822][ T6683] __x64_sys_bpf+0x78/0xc0 [ 69.172992][ T6683] ? lockdep_hardirqs_on+0x7c/0x110 [ 69.174386][ T6683] do_syscall_64+0xcd/0x250 [ 69.175686][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.177261][ T6683] RIP: 0033:0x7f574217e719 [ 69.178419][ T6683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.183503][ T6683] RSP: 002b:00007f5742e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 69.185756][ T6683] RAX: ffffffffffffffda RBX: 00007f5742336058 RCX: 00007f574217e719 [ 69.187967][ T6683] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 69.190217][ T6683] RBP: 00007f57421f132e R08: 0000000000000000 R09: 0000000000000000 [ 69.192397][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.194465][ T6683] R13: 0000000000000000 R14: 00007f5742336058 R15: 00007ffe5115f908 [ 69.196504][ T6683] [ 69.197403][ T6683] BUG: Bad page state in process syz.2.194 pfn:4b6ac [ 69.199155][ T6683] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804b6ade00 pfn:0x4b6ac [ 69.201738][ T6683] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 69.203600][ T6683] raw: 00fff00000000000 dead000000000040 ffff88802a52e000 0000000000000000 [ 69.205879][ T6683] raw: ffff88804b6ade00 0000000000000001 00000000ffffffff 0000000000000000 [ 69.208077][ T6683] page dumped because: page_pool leak [ 69.209466][ T6683] page_owner tracks the page as allocated [ 69.210936][ T6683] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6683, tgid 6674 (syz.2.194), ts 67591137012, free_ts 67588946384 [ 69.215656][ T6683] post_alloc_hook+0x2d1/0x350 [ 69.217254][ T6683] get_page_from_freelist+0x101e/0x3070 [ 69.218809][ T6683] __alloc_pages_noprof+0x223/0x25a0 [ 69.220198][ T6683] alloc_pages_bulk_noprof+0x77c/0x1110 [ 69.221657][ T6683] __page_pool_alloc_pages_slow+0x18f/0x770 [ 69.223459][ T6683] page_pool_alloc_netmem+0xc4/0x160 [ 69.224849][ T6683] page_pool_alloc_pages+0x1a/0x60 [ 69.226292][ T6683] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 69.228028][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 69.229418][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 69.230838][ T6683] __sys_bpf+0xfc6/0x49a0 [ 69.231978][ T6683] __x64_sys_bpf+0x78/0xc0 [ 69.233150][ T6683] do_syscall_64+0xcd/0x250 [ 69.234393][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.236001][ T6683] page last free pid 6671 tgid 6669 stack trace: [ 69.237653][ T6683] free_unref_page+0x5f4/0xdc0 [ 69.239041][ T6683] __folio_put+0x30d/0x3d0 [ 69.240318][ T6683] put_page+0x21e/0x280 [ 69.241366][ T6683] page_pool_return_page+0x400/0x520 [ 69.242766][ T6683] page_pool_release+0xf4/0x7d0 [ 69.244045][ T6683] page_pool_destroy+0x10a/0x4c0 [ 69.245416][ T6683] bpf_test_run_xdp_live+0x3a1/0x500 [ 69.246807][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 69.248213][ T6683] __sys_bpf+0xfc6/0x49a0 [ 69.249352][ T6683] __x64_sys_bpf+0x78/0xc0 [ 69.250538][ T6683] do_syscall_64+0xcd/0x250 [ 69.251807][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.253395][ T6683] Modules linked in: [ 69.254466][ T6683] CPU: 1 UID: 0 PID: 6683 Comm: syz.2.194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 69.257520][ T6683] Tainted: [B]=BAD_PAGE [ 69.258604][ T6683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.261583][ T6683] Call Trace: [ 69.262518][ T6683] [ 69.263409][ T6683] dump_stack_lvl+0x16c/0x1f0 [ 69.264823][ T6683] bad_page+0xb3/0x1f0 [ 69.266053][ T6683] ? __pfx_bad_page+0x10/0x10 [ 69.267477][ T6683] ? page_bad_reason+0x9d/0x1e0 [ 69.268802][ T6683] free_unref_page+0x657/0xdc0 [ 69.270056][ T6683] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 69.271618][ T6683] ? __phys_addr+0xc6/0x150 [ 69.272817][ T6683] skb_free_head+0xa0/0x1d0 [ 69.274001][ T6683] skb_release_data+0x560/0x730 [ 69.275335][ T6683] sk_skb_reason_drop+0x129/0x1a0 [ 69.276649][ T6683] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 69.278459][ T6683] ? kernel_text_address+0x8d/0x100 [ 69.279817][ T6683] ? hlock_class+0x4e/0x130 [ 69.281023][ T6683] ? __lock_acquire+0x163e/0x3ce0 [ 69.282373][ T6683] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 69.284263][ T6683] ? hlock_class+0x4e/0x130 [ 69.285458][ T6683] ? __lock_acquire+0xbdd/0x3ce0 [ 69.286778][ T6683] ? __pfx___lock_acquire+0x10/0x10 [ 69.288153][ T6683] __netif_receive_skb_list_core+0x357/0x950 [ 69.289855][ T6683] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 69.291748][ T6683] ? trace_lock_acquire+0x14a/0x1d0 [ 69.293392][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 69.295657][ T6683] ? lock_acquire+0x2f/0xb0 [ 69.297260][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 69.299156][ T6683] netif_receive_skb_list_internal+0x753/0xdb0 [ 69.300838][ T6683] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 69.302596][ T6683] ? __pfx_eth_type_trans+0x10/0x10 [ 69.303982][ T6683] ? __build_skb_around+0x278/0x3b0 [ 69.305355][ T6683] netif_receive_skb_list+0x4f/0x4a0 [ 69.306755][ T6683] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 69.308392][ T6683] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 69.310092][ T6683] ? bpf_test_timer_continue+0x150/0x3d0 [ 69.311573][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 69.312959][ T6683] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 69.314538][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 69.316522][ T6683] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 69.318445][ T6683] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 69.320178][ T6683] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 69.321571][ T6683] ? 0xffffffffa00045c0 [ 69.322706][ T6683] ? 0xffffffffa00045c0 [ 69.323801][ T6683] ? 0xffffffffa00045c0 [ 69.324869][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 69.326445][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 69.327853][ T6683] ? lock_acquire+0x2f/0xb0 [ 69.329063][ T6683] ? __fget_files+0x40/0x3f0 [ 69.330277][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 69.332074][ T6683] ? fput+0x30/0x390 [ 69.333163][ T6683] ? __bpf_prog_get+0xa0/0x290 [ 69.334424][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 69.336141][ T6683] __sys_bpf+0xfc6/0x49a0 [ 69.337470][ T6683] ? __pfx___sys_bpf+0x10/0x10 [ 69.338936][ T6683] ? __schedule+0xe5d/0x5730 [ 69.340270][ T6683] ? __fget_files+0x23a/0x3f0 [ 69.341495][ T6683] ? do_futex+0x123/0x350 [ 69.342601][ T6683] ? __pfx_do_futex+0x10/0x10 [ 69.343811][ T6683] ? xfd_validate_state+0x5d/0x180 [ 69.345118][ T6683] ? rcu_is_watching+0x12/0xc0 [ 69.346343][ T6683] __x64_sys_bpf+0x78/0xc0 [ 69.347509][ T6683] ? lockdep_hardirqs_on+0x7c/0x110 [ 69.348839][ T6683] do_syscall_64+0xcd/0x250 [ 69.350020][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.351517][ T6683] RIP: 0033:0x7f574217e719 [ 69.352633][ T6683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.357849][ T6683] RSP: 002b:00007f5742e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 69.360795][ T6683] RAX: ffffffffffffffda RBX: 00007f5742336058 RCX: 00007f574217e719 [ 69.362862][ T6683] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 69.364945][ T6683] RBP: 00007f57421f132e R08: 0000000000000000 R09: 0000000000000000 [ 69.366955][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.368955][ T6683] R13: 0000000000000000 R14: 00007f5742336058 R15: 00007ffe5115f908 [ 69.371010][ T6683] [ 69.371926][ T6683] BUG: Bad page state in process syz.2.194 pfn:4b6ad [ 69.373684][ T6683] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2 pfn:0x4b6ad [ 69.376085][ T6683] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 69.377933][ T6683] raw: 00fff00000000000 dead000000000040 ffff88802a52e000 0000000000000000 [ 69.380090][ T6683] raw: 0000000000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 69.382231][ T6683] page dumped because: page_pool leak [ 69.383612][ T6683] page_owner tracks the page as allocated [ 69.385062][ T6683] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6683, tgid 6674 (syz.2.194), ts 67591132174, free_ts 67588950582 [ 69.389168][ T6683] post_alloc_hook+0x2d1/0x350 [ 69.390519][ T6683] get_page_from_freelist+0x101e/0x3070 [ 69.392042][ T6683] __alloc_pages_noprof+0x223/0x25a0 [ 69.393507][ T6683] alloc_pages_bulk_noprof+0x77c/0x1110 [ 69.395134][ T6683] __page_pool_alloc_pages_slow+0x18f/0x770 [ 69.396999][ T6683] page_pool_alloc_netmem+0xc4/0x160 [ 69.398718][ T6683] page_pool_alloc_pages+0x1a/0x60 [ 69.400213][ T6683] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 69.401750][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 69.403064][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 69.404390][ T6683] __sys_bpf+0xfc6/0x49a0 [ 69.405541][ T6683] __x64_sys_bpf+0x78/0xc0 [ 69.406664][ T6683] do_syscall_64+0xcd/0x250 [ 69.407803][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.409317][ T6683] page last free pid 6671 tgid 6669 stack trace: [ 69.410886][ T6683] free_unref_page+0x5f4/0xdc0 [ 69.412077][ T6683] __folio_put+0x30d/0x3d0 [ 69.413208][ T6683] put_page+0x21e/0x280 [ 69.414253][ T6683] page_pool_return_page+0x400/0x520 [ 69.415662][ T6683] page_pool_release+0xf4/0x7d0 [ 69.416951][ T6683] page_pool_destroy+0x10a/0x4c0 [ 69.418244][ T6683] bpf_test_run_xdp_live+0x3a1/0x500 [ 69.419592][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 69.420991][ T6683] __sys_bpf+0xfc6/0x49a0 [ 69.422112][ T6683] __x64_sys_bpf+0x78/0xc0 [ 69.423269][ T6683] do_syscall_64+0xcd/0x250 [ 69.424449][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.426012][ T6683] Modules linked in: [ 69.427018][ T6683] CPU: 1 UID: 0 PID: 6683 Comm: syz.2.194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 69.430025][ T6683] Tainted: [B]=BAD_PAGE [ 69.431080][ T6683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.433755][ T6683] Call Trace: [ 69.434634][ T6683] [ 69.435390][ T6683] dump_stack_lvl+0x16c/0x1f0 [ 69.436575][ T6683] bad_page+0xb3/0x1f0 [ 69.437611][ T6683] ? __pfx_bad_page+0x10/0x10 [ 69.438768][ T6683] ? page_bad_reason+0x9d/0x1e0 [ 69.440001][ T6683] free_unref_page+0x657/0xdc0 [ 69.441226][ T6683] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 69.442960][ T6683] ? __phys_addr+0xc6/0x150 [ 69.444336][ T6683] skb_free_head+0xa0/0x1d0 [ 69.445756][ T6683] skb_release_data+0x560/0x730 [ 69.447216][ T6683] sk_skb_reason_drop+0x129/0x1a0 [ 69.448650][ T6683] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 69.450424][ T6683] ? kernel_text_address+0x8d/0x100 [ 69.451832][ T6683] ? hlock_class+0x4e/0x130 [ 69.453046][ T6683] ? __lock_acquire+0x163e/0x3ce0 [ 69.454368][ T6683] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 69.456735][ T6683] ? hlock_class+0x4e/0x130 [ 69.457953][ T6683] ? __lock_acquire+0xbdd/0x3ce0 [ 69.459612][ T6683] ? __pfx___lock_acquire+0x10/0x10 [ 69.461189][ T6683] __netif_receive_skb_list_core+0x357/0x950 [ 69.462800][ T6683] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 69.464516][ T6683] ? trace_lock_acquire+0x14a/0x1d0 [ 69.465883][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 69.467747][ T6683] ? lock_acquire+0x2f/0xb0 [ 69.469018][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 69.470719][ T6683] netif_receive_skb_list_internal+0x753/0xdb0 [ 69.472325][ T6683] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 69.474063][ T6683] ? __pfx_eth_type_trans+0x10/0x10 [ 69.475651][ T6683] ? __build_skb_around+0x278/0x3b0 [ 69.477600][ T6683] netif_receive_skb_list+0x4f/0x4a0 [ 69.479191][ T6683] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 69.481035][ T6683] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 69.482853][ T6683] ? bpf_test_timer_continue+0x150/0x3d0 [ 69.484358][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 69.485805][ T6683] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 69.487500][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 69.489385][ T6683] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 69.491344][ T6683] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 69.493278][ T6683] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 69.494820][ T6683] ? 0xffffffffa00045c0 [ 69.495932][ T6683] ? 0xffffffffa00045c0 [ 69.497022][ T6683] ? 0xffffffffa00045c0 [ 69.498125][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 69.499705][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 69.501246][ T6683] ? lock_acquire+0x2f/0xb0 [ 69.502642][ T6683] ? __fget_files+0x40/0x3f0 [ 69.503876][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 69.505446][ T6683] ? fput+0x30/0x390 [ 69.506507][ T6683] ? __bpf_prog_get+0xa0/0x290 [ 69.507774][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 69.509316][ T6683] __sys_bpf+0xfc6/0x49a0 [ 69.510507][ T6683] ? __pfx___sys_bpf+0x10/0x10 [ 69.511889][ T6683] ? __schedule+0xe5d/0x5730 [ 69.513247][ T6683] ? __fget_files+0x23a/0x3f0 [ 69.514710][ T6683] ? do_futex+0x123/0x350 [ 69.516042][ T6683] ? __pfx_do_futex+0x10/0x10 [ 69.517654][ T6683] ? xfd_validate_state+0x5d/0x180 [ 69.519039][ T6683] ? rcu_is_watching+0x12/0xc0 [ 69.520290][ T6683] __x64_sys_bpf+0x78/0xc0 [ 69.521471][ T6683] ? lockdep_hardirqs_on+0x7c/0x110 [ 69.523059][ T6683] do_syscall_64+0xcd/0x250 [ 69.524272][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.525822][ T6683] RIP: 0033:0x7f574217e719 [ 69.527010][ T6683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.532109][ T6683] RSP: 002b:00007f5742e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 69.534724][ T6683] RAX: ffffffffffffffda RBX: 00007f5742336058 RCX: 00007f574217e719 [ 69.537123][ T6683] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 69.539658][ T6683] RBP: 00007f57421f132e R08: 0000000000000000 R09: 0000000000000000 [ 69.542149][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.544397][ T6683] R13: 0000000000000000 R14: 00007f5742336058 R15: 00007ffe5115f908 [ 69.546586][ T6683] [ 69.547545][ T6683] BUG: Bad page state in process syz.2.194 pfn:489a2 [ 69.549313][ T6683] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880489a3e00 pfn:0x489a2 [ 69.551942][ T6683] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 69.553799][ T6683] raw: 00fff00000000000 dead000000000040 ffff88802a52e000 0000000000000000 [ 69.556184][ T6683] raw: ffff8880489a3e00 0000000000000001 00000000ffffffff 0000000000000000 [ 69.558506][ T6683] page dumped because: page_pool leak [ 69.559962][ T6683] page_owner tracks the page as allocated [ 69.561423][ T6683] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6683, tgid 6674 (syz.2.194), ts 67591127666, free_ts 67588954674 [ 69.565589][ T6683] post_alloc_hook+0x2d1/0x350 [ 69.567066][ T6683] get_page_from_freelist+0x101e/0x3070 [ 69.568681][ T6683] __alloc_pages_noprof+0x223/0x25a0 [ 69.570127][ T6683] alloc_pages_bulk_noprof+0x77c/0x1110 [ 69.571623][ T6683] __page_pool_alloc_pages_slow+0x18f/0x770 [ 69.573239][ T6683] page_pool_alloc_netmem+0xc4/0x160 [ 69.574857][ T6683] page_pool_alloc_pages+0x1a/0x60 [ 69.576474][ T6683] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 69.578125][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 69.579526][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 69.580930][ T6683] __sys_bpf+0xfc6/0x49a0 [ 69.582060][ T6683] __x64_sys_bpf+0x78/0xc0 [ 69.583419][ T6683] do_syscall_64+0xcd/0x250 [ 69.584657][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.586287][ T6683] page last free pid 6671 tgid 6669 stack trace: [ 69.587956][ T6683] free_unref_page+0x5f4/0xdc0 [ 69.589224][ T6683] __folio_put+0x30d/0x3d0 [ 69.590415][ T6683] put_page+0x21e/0x280 [ 69.591516][ T6683] page_pool_return_page+0x400/0x520 [ 69.592915][ T6683] page_pool_release+0xf4/0x7d0 [ 69.594213][ T6683] page_pool_destroy+0x10a/0x4c0 [ 69.595594][ T6683] bpf_test_run_xdp_live+0x3a1/0x500 [ 69.596955][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 69.598384][ T6683] __sys_bpf+0xfc6/0x49a0 [ 69.599569][ T6683] __x64_sys_bpf+0x78/0xc0 [ 69.600794][ T6683] do_syscall_64+0xcd/0x250 [ 69.602036][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.603626][ T6683] Modules linked in: [ 69.604681][ T6683] CPU: 1 UID: 0 PID: 6683 Comm: syz.2.194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 69.607808][ T6683] Tainted: [B]=BAD_PAGE [ 69.608913][ T6683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.611702][ T6683] Call Trace: [ 69.612600][ T6683] [ 69.613630][ T6683] dump_stack_lvl+0x16c/0x1f0 [ 69.615188][ T6683] bad_page+0xb3/0x1f0 [ 69.616548][ T6683] ? __pfx_bad_page+0x10/0x10 [ 69.618236][ T6683] ? page_bad_reason+0x9d/0x1e0 [ 69.619891][ T6683] free_unref_page+0x657/0xdc0 [ 69.621501][ T6683] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 69.623246][ T6683] ? __phys_addr+0xc6/0x150 [ 69.624592][ T6683] skb_free_head+0xa0/0x1d0 [ 69.625822][ T6683] skb_release_data+0x560/0x730 [ 69.627112][ T6683] sk_skb_reason_drop+0x129/0x1a0 [ 69.628446][ T6683] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 69.630131][ T6683] ? kernel_text_address+0x8d/0x100 [ 69.631454][ T6683] ? hlock_class+0x4e/0x130 [ 69.632641][ T6683] ? __lock_acquire+0x163e/0x3ce0 [ 69.633945][ T6683] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 69.635773][ T6683] ? hlock_class+0x4e/0x130 [ 69.637306][ T6683] ? __lock_acquire+0xbdd/0x3ce0 [ 69.639014][ T6683] ? __pfx___lock_acquire+0x10/0x10 [ 69.640516][ T6683] __netif_receive_skb_list_core+0x357/0x950 [ 69.642116][ T6683] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 69.643860][ T6683] ? trace_lock_acquire+0x14a/0x1d0 [ 69.645242][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 69.646921][ T6683] ? lock_acquire+0x2f/0xb0 [ 69.648117][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 69.649777][ T6683] netif_receive_skb_list_internal+0x753/0xdb0 [ 69.651420][ T6683] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 69.653193][ T6683] ? __pfx_eth_type_trans+0x10/0x10 [ 69.654625][ T6683] ? __build_skb_around+0x278/0x3b0 [ 69.656050][ T6683] netif_receive_skb_list+0x4f/0x4a0 [ 69.657517][ T6683] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 69.659224][ T6683] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 69.660939][ T6683] ? bpf_test_timer_continue+0x150/0x3d0 [ 69.662432][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 69.663831][ T6683] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 69.665359][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 69.666909][ T6683] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 69.668444][ T6683] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 69.669982][ T6683] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 69.671716][ T6683] ? 0xffffffffa00045c0 [ 69.673031][ T6683] ? 0xffffffffa00045c0 [ 69.674343][ T6683] ? 0xffffffffa00045c0 [ 69.675797][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 69.677569][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 69.679108][ T6683] ? lock_acquire+0x2f/0xb0 [ 69.680491][ T6683] ? __fget_files+0x40/0x3f0 [ 69.681904][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 69.683614][ T6683] ? fput+0x30/0x390 [ 69.684731][ T6683] ? __bpf_prog_get+0xa0/0x290 [ 69.686047][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 69.687658][ T6683] __sys_bpf+0xfc6/0x49a0 [ 69.688846][ T6683] ? __pfx___sys_bpf+0x10/0x10 [ 69.690125][ T6683] ? __schedule+0xe5d/0x5730 [ 69.691341][ T6683] ? __fget_files+0x23a/0x3f0 [ 69.692720][ T6683] ? do_futex+0x123/0x350 [ 69.693930][ T6683] ? __pfx_do_futex+0x10/0x10 [ 69.695487][ T6683] ? xfd_validate_state+0x5d/0x180 [ 69.696994][ T6683] ? rcu_is_watching+0x12/0xc0 [ 69.698333][ T6683] __x64_sys_bpf+0x78/0xc0 [ 69.699513][ T6683] ? lockdep_hardirqs_on+0x7c/0x110 [ 69.700853][ T6683] do_syscall_64+0xcd/0x250 [ 69.702158][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.703719][ T6683] RIP: 0033:0x7f574217e719 [ 69.704895][ T6683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.709846][ T6683] RSP: 002b:00007f5742e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 69.712446][ T6683] RAX: ffffffffffffffda RBX: 00007f5742336058 RCX: 00007f574217e719 [ 69.714746][ T6683] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 69.717458][ T6683] RBP: 00007f57421f132e R08: 0000000000000000 R09: 0000000000000000 [ 69.719921][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.722035][ T6683] R13: 0000000000000000 R14: 00007f5742336058 R15: 00007ffe5115f908 [ 69.724228][ T6683] [ 69.725182][ T6683] BUG: Bad page state in process syz.2.194 pfn:489a3 [ 69.726955][ T6683] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x700000002 pfn:0x489a3 [ 69.729276][ T6683] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 69.731144][ T6683] raw: 00fff00000000000 dead000000000040 ffff88802a52e000 0000000000000000 [ 69.733460][ T6683] raw: 0000000700000002 0000000000000001 00000000ffffffff 0000000000000000 [ 69.735642][ T6683] page dumped because: page_pool leak [ 69.736965][ T6683] page_owner tracks the page as allocated [ 69.738431][ T6683] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6683, tgid 6674 (syz.2.194), ts 67591123220, free_ts 67588958497 [ 69.742804][ T6683] post_alloc_hook+0x2d1/0x350 [ 69.744117][ T6683] get_page_from_freelist+0x101e/0x3070 [ 69.745697][ T6683] __alloc_pages_noprof+0x223/0x25a0 [ 69.747123][ T6683] alloc_pages_bulk_noprof+0x77c/0x1110 [ 69.748582][ T6683] __page_pool_alloc_pages_slow+0x18f/0x770 [ 69.750133][ T6683] page_pool_alloc_netmem+0xc4/0x160 [ 69.751527][ T6683] page_pool_alloc_pages+0x1a/0x60 [ 69.752864][ T6683] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 69.754644][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 69.756105][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 69.757503][ T6683] __sys_bpf+0xfc6/0x49a0 [ 69.758806][ T6683] __x64_sys_bpf+0x78/0xc0 [ 69.760126][ T6683] do_syscall_64+0xcd/0x250 [ 69.761341][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.762902][ T6683] page last free pid 6671 tgid 6669 stack trace: [ 69.764539][ T6683] free_unref_page+0x5f4/0xdc0 [ 69.765865][ T6683] __folio_put+0x30d/0x3d0 [ 69.767051][ T6683] put_page+0x21e/0x280 [ 69.768157][ T6683] page_pool_return_page+0x400/0x520 [ 69.769544][ T6683] page_pool_release+0xf4/0x7d0 [ 69.770835][ T6683] page_pool_destroy+0x10a/0x4c0 [ 69.772144][ T6683] bpf_test_run_xdp_live+0x3a1/0x500 [ 69.773525][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 69.775003][ T6683] __sys_bpf+0xfc6/0x49a0 [ 69.776150][ T6683] __x64_sys_bpf+0x78/0xc0 [ 69.777322][ T6683] do_syscall_64+0xcd/0x250 [ 69.778527][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.780072][ T6683] Modules linked in: [ 69.781105][ T6683] CPU: 1 UID: 0 PID: 6683 Comm: syz.2.194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 69.784191][ T6683] Tainted: [B]=BAD_PAGE [ 69.785281][ T6683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.788036][ T6683] Call Trace: [ 69.788918][ T6683] [ 69.789696][ T6683] dump_stack_lvl+0x16c/0x1f0 [ 69.790949][ T6683] bad_page+0xb3/0x1f0 [ 69.792024][ T6683] ? __pfx_bad_page+0x10/0x10 [ 69.793261][ T6683] ? page_bad_reason+0x9d/0x1e0 [ 69.794547][ T6683] free_unref_page+0x657/0xdc0 [ 69.795795][ T6683] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 69.797319][ T6683] ? __phys_addr+0xc6/0x150 [ 69.798499][ T6683] skb_free_head+0xa0/0x1d0 [ 69.799688][ T6683] skb_release_data+0x560/0x730 [ 69.800959][ T6683] sk_skb_reason_drop+0x129/0x1a0 [ 69.802269][ T6683] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 69.804000][ T6683] ? kernel_text_address+0x8d/0x100 [ 69.805346][ T6683] ? hlock_class+0x4e/0x130 [ 69.806549][ T6683] ? __lock_acquire+0x163e/0x3ce0 [ 69.807867][ T6683] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 69.809695][ T6683] ? hlock_class+0x4e/0x130 [ 69.810898][ T6683] ? __lock_acquire+0xbdd/0x3ce0 [ 69.812192][ T6683] ? __pfx___lock_acquire+0x10/0x10 [ 69.813539][ T6683] __netif_receive_skb_list_core+0x357/0x950 [ 69.815107][ T6683] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 69.816784][ T6683] ? trace_lock_acquire+0x14a/0x1d0 [ 69.818145][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 69.819788][ T6683] ? lock_acquire+0x2f/0xb0 [ 69.820974][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 69.822637][ T6683] netif_receive_skb_list_internal+0x753/0xdb0 [ 69.824243][ T6683] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 69.826014][ T6683] ? __pfx_eth_type_trans+0x10/0x10 [ 69.827427][ T6683] ? __build_skb_around+0x278/0x3b0 [ 69.828923][ T6683] netif_receive_skb_list+0x4f/0x4a0 [ 69.830363][ T6683] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 69.831993][ T6683] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 69.833676][ T6683] ? bpf_test_timer_continue+0x150/0x3d0 [ 69.835112][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 69.836604][ T6683] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 69.838081][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 69.839846][ T6683] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 69.841467][ T6683] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 69.843036][ T6683] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 69.844491][ T6683] ? 0xffffffffa00045c0 [ 69.845666][ T6683] ? 0xffffffffa00045c0 [ 69.846847][ T6683] ? 0xffffffffa00045c0 [ 69.848021][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 69.849676][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 69.851166][ T6683] ? lock_acquire+0x2f/0xb0 [ 69.852500][ T6683] ? __fget_files+0x40/0x3f0 [ 69.853842][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 69.855499][ T6683] ? fput+0x30/0x390 [ 69.856819][ T6683] ? __bpf_prog_get+0xa0/0x290 [ 69.858219][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 69.860163][ T6683] __sys_bpf+0xfc6/0x49a0 [ 69.861340][ T6683] ? __pfx___sys_bpf+0x10/0x10 [ 69.862609][ T6683] ? __schedule+0xe5d/0x5730 [ 69.863842][ T6683] ? __fget_files+0x23a/0x3f0 [ 69.865109][ T6683] ? do_futex+0x123/0x350 [ 69.866272][ T6683] ? __pfx_do_futex+0x10/0x10 [ 69.867570][ T6683] ? xfd_validate_state+0x5d/0x180 [ 69.868917][ T6683] ? rcu_is_watching+0x12/0xc0 [ 69.870286][ T6683] __x64_sys_bpf+0x78/0xc0 [ 69.871573][ T6683] ? lockdep_hardirqs_on+0x7c/0x110 [ 69.872958][ T6683] do_syscall_64+0xcd/0x250 [ 69.874228][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.875902][ T6683] RIP: 0033:0x7f574217e719 [ 69.877172][ T6683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.882934][ T6683] RSP: 002b:00007f5742e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 69.885097][ T6683] RAX: ffffffffffffffda RBX: 00007f5742336058 RCX: 00007f574217e719 [ 69.887163][ T6683] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 69.889265][ T6683] RBP: 00007f57421f132e R08: 0000000000000000 R09: 0000000000000000 [ 69.891350][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.893399][ T6683] R13: 0000000000000000 R14: 00007f5742336058 R15: 00007ffe5115f908 [ 69.895747][ T6683] [ 69.896655][ T6683] BUG: Bad page state in process syz.2.194 pfn:4ac94 [ 69.898536][ T6683] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804ac95e00 pfn:0x4ac94 [ 69.901149][ T6683] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 69.902969][ T6683] raw: 00fff00000000000 dead000000000040 ffff88802a52e000 0000000000000000 [ 69.905347][ T6683] raw: ffff88804ac95e00 0000000000000001 00000000ffffffff 0000000000000000 [ 69.907536][ T6683] page dumped because: page_pool leak [ 69.908843][ T6683] page_owner tracks the page as allocated [ 69.910321][ T6683] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6683, tgid 6674 (syz.2.194), ts 67591118450, free_ts 67588962219 [ 69.914599][ T6683] post_alloc_hook+0x2d1/0x350 [ 69.915910][ T6683] get_page_from_freelist+0x101e/0x3070 [ 69.917364][ T6683] __alloc_pages_noprof+0x223/0x25a0 [ 69.918760][ T6683] alloc_pages_bulk_noprof+0x77c/0x1110 [ 69.920225][ T6683] __page_pool_alloc_pages_slow+0x18f/0x770 [ 69.921773][ T6683] page_pool_alloc_netmem+0xc4/0x160 [ 69.923155][ T6683] page_pool_alloc_pages+0x1a/0x60 [ 69.924509][ T6683] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 69.926158][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 69.927516][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 69.928823][ T6683] __sys_bpf+0xfc6/0x49a0 [ 69.929931][ T6683] __x64_sys_bpf+0x78/0xc0 [ 69.931179][ T6683] do_syscall_64+0xcd/0x250 [ 69.932650][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.934206][ T6683] page last free pid 6671 tgid 6669 stack trace: [ 69.935997][ T6683] free_unref_page+0x5f4/0xdc0 [ 69.937314][ T6683] __folio_put+0x30d/0x3d0 [ 69.938699][ T6683] put_page+0x21e/0x280 [ 69.939928][ T6683] page_pool_return_page+0x400/0x520 [ 69.941486][ T6683] page_pool_release+0xf4/0x7d0 [ 69.943006][ T6683] page_pool_destroy+0x10a/0x4c0 [ 69.944437][ T6683] bpf_test_run_xdp_live+0x3a1/0x500 [ 69.946332][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 69.947842][ T6683] __sys_bpf+0xfc6/0x49a0 [ 69.949069][ T6683] __x64_sys_bpf+0x78/0xc0 [ 69.950342][ T6683] do_syscall_64+0xcd/0x250 [ 69.951611][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.953156][ T6683] Modules linked in: [ 69.954210][ T6683] CPU: 1 UID: 0 PID: 6683 Comm: syz.2.194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 69.957316][ T6683] Tainted: [B]=BAD_PAGE [ 69.958377][ T6683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.961133][ T6683] Call Trace: [ 69.962012][ T6683] [ 69.962808][ T6683] dump_stack_lvl+0x16c/0x1f0 [ 69.964057][ T6683] bad_page+0xb3/0x1f0 [ 69.965138][ T6683] ? __pfx_bad_page+0x10/0x10 [ 69.966383][ T6683] ? page_bad_reason+0x9d/0x1e0 [ 69.967662][ T6683] free_unref_page+0x657/0xdc0 [ 69.968910][ T6683] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 69.970471][ T6683] ? __phys_addr+0xc6/0x150 [ 69.971751][ T6683] skb_free_head+0xa0/0x1d0 [ 69.972932][ T6683] skb_release_data+0x560/0x730 [ 69.974233][ T6683] sk_skb_reason_drop+0x129/0x1a0 [ 69.975507][ T6683] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 69.977157][ T6683] ? kernel_text_address+0x8d/0x100 [ 69.978501][ T6683] ? hlock_class+0x4e/0x130 [ 69.980113][ T6683] ? __lock_acquire+0x163e/0x3ce0 [ 69.981594][ T6683] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 69.983425][ T6683] ? hlock_class+0x4e/0x130 [ 69.984627][ T6683] ? __lock_acquire+0xbdd/0x3ce0 [ 69.985927][ T6683] ? __pfx___lock_acquire+0x10/0x10 [ 69.987401][ T6683] __netif_receive_skb_list_core+0x357/0x950 [ 69.989130][ T6683] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 69.990994][ T6683] ? trace_lock_acquire+0x14a/0x1d0 [ 69.992539][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 69.994679][ T6683] ? lock_acquire+0x2f/0xb0 [ 69.995966][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 69.997873][ T6683] netif_receive_skb_list_internal+0x753/0xdb0 [ 69.999555][ T6683] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 70.001285][ T6683] ? __pfx_eth_type_trans+0x10/0x10 [ 70.002631][ T6683] ? __build_skb_around+0x278/0x3b0 [ 70.004002][ T6683] netif_receive_skb_list+0x4f/0x4a0 [ 70.005402][ T6683] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 70.007047][ T6683] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 70.008897][ T6683] ? bpf_test_timer_continue+0x150/0x3d0 [ 70.010389][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 70.011820][ T6683] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 70.013647][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 70.015476][ T6683] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 70.017129][ T6683] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 70.018690][ T6683] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 70.020085][ T6683] ? 0xffffffffa00045c0 [ 70.021285][ T6683] ? 0xffffffffa00045c0 [ 70.022414][ T6683] ? 0xffffffffa00045c0 [ 70.023533][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 70.025019][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 70.026453][ T6683] ? lock_acquire+0x2f/0xb0 [ 70.027672][ T6683] ? __fget_files+0x40/0x3f0 [ 70.028939][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 70.030497][ T6683] ? fput+0x30/0x390 [ 70.031529][ T6683] ? __bpf_prog_get+0xa0/0x290 [ 70.032787][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 70.034333][ T6683] __sys_bpf+0xfc6/0x49a0 [ 70.035483][ T6683] ? __pfx___sys_bpf+0x10/0x10 [ 70.036803][ T6683] ? __schedule+0xe5d/0x5730 [ 70.038042][ T6683] ? __fget_files+0x23a/0x3f0 [ 70.039303][ T6683] ? do_futex+0x123/0x350 [ 70.040459][ T6683] ? __pfx_do_futex+0x10/0x10 [ 70.041703][ T6683] ? xfd_validate_state+0x5d/0x180 [ 70.043127][ T6683] ? rcu_is_watching+0x12/0xc0 [ 70.044439][ T6683] __x64_sys_bpf+0x78/0xc0 [ 70.045655][ T6683] ? lockdep_hardirqs_on+0x7c/0x110 [ 70.047049][ T6683] do_syscall_64+0xcd/0x250 [ 70.048258][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.049825][ T6683] RIP: 0033:0x7f574217e719 [ 70.051001][ T6683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.056493][ T6683] RSP: 002b:00007f5742e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 70.058879][ T6683] RAX: ffffffffffffffda RBX: 00007f5742336058 RCX: 00007f574217e719 [ 70.061128][ T6683] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 70.063415][ T6683] RBP: 00007f57421f132e R08: 0000000000000000 R09: 0000000000000000 [ 70.065418][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.067636][ T6683] R13: 0000000000000000 R14: 00007f5742336058 R15: 00007ffe5115f908 [ 70.070025][ T6683] [ 70.071102][ T6683] BUG: Bad page state in process syz.2.194 pfn:4ac95 [ 70.073110][ T6683] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2 pfn:0x4ac95 [ 70.076231][ T6683] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 70.078073][ T6683] raw: 00fff00000000000 dead000000000040 ffff88802a52e000 0000000000000000 [ 70.080507][ T6683] raw: 0000000000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 70.082844][ T6683] page dumped because: page_pool leak [ 70.084157][ T6683] page_owner tracks the page as allocated [ 70.085628][ T6683] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6683, tgid 6674 (syz.2.194), ts 67591113622, free_ts 67588966082 [ 70.089889][ T6683] post_alloc_hook+0x2d1/0x350 [ 70.091164][ T6683] get_page_from_freelist+0x101e/0x3070 [ 70.092590][ T6683] __alloc_pages_noprof+0x223/0x25a0 [ 70.093902][ T6683] alloc_pages_bulk_noprof+0x77c/0x1110 [ 70.095438][ T6683] __page_pool_alloc_pages_slow+0x18f/0x770 [ 70.096969][ T6683] page_pool_alloc_netmem+0xc4/0x160 [ 70.098351][ T6683] page_pool_alloc_pages+0x1a/0x60 [ 70.099681][ T6683] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 70.101283][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 70.102661][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 70.104051][ T6683] __sys_bpf+0xfc6/0x49a0 [ 70.105240][ T6683] __x64_sys_bpf+0x78/0xc0 [ 70.106411][ T6683] do_syscall_64+0xcd/0x250 [ 70.107597][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.109137][ T6683] page last free pid 6671 tgid 6669 stack trace: [ 70.110787][ T6683] free_unref_page+0x5f4/0xdc0 [ 70.112013][ T6683] __folio_put+0x30d/0x3d0 [ 70.113135][ T6683] put_page+0x21e/0x280 [ 70.114183][ T6683] page_pool_return_page+0x400/0x520 [ 70.115555][ T6683] page_pool_release+0xf4/0x7d0 [ 70.116830][ T6683] page_pool_destroy+0x10a/0x4c0 [ 70.118127][ T6683] bpf_test_run_xdp_live+0x3a1/0x500 [ 70.119468][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 70.120897][ T6683] __sys_bpf+0xfc6/0x49a0 [ 70.121985][ T6683] __x64_sys_bpf+0x78/0xc0 [ 70.123129][ T6683] do_syscall_64+0xcd/0x250 [ 70.124350][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.125957][ T6683] Modules linked in: [ 70.126991][ T6683] CPU: 1 UID: 0 PID: 6683 Comm: syz.2.194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 70.129985][ T6683] Tainted: [B]=BAD_PAGE [ 70.131060][ T6683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.133923][ T6683] Call Trace: [ 70.134871][ T6683] [ 70.135711][ T6683] dump_stack_lvl+0x16c/0x1f0 [ 70.137010][ T6683] bad_page+0xb3/0x1f0 [ 70.138089][ T6683] ? __pfx_bad_page+0x10/0x10 [ 70.139673][ T6683] ? page_bad_reason+0x9d/0x1e0 [ 70.141049][ T6683] free_unref_page+0x657/0xdc0 [ 70.142342][ T6683] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 70.143918][ T6683] ? __phys_addr+0xc6/0x150 [ 70.145131][ T6683] skb_free_head+0xa0/0x1d0 [ 70.146416][ T6683] skb_release_data+0x560/0x730 [ 70.147694][ T6683] sk_skb_reason_drop+0x129/0x1a0 [ 70.149014][ T6683] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 70.150746][ T6683] ? kernel_text_address+0x8d/0x100 [ 70.152051][ T6683] ? hlock_class+0x4e/0x130 [ 70.153226][ T6683] ? __lock_acquire+0x163e/0x3ce0 [ 70.154633][ T6683] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 70.156400][ T6683] ? hlock_class+0x4e/0x130 [ 70.157572][ T6683] ? __lock_acquire+0xbdd/0x3ce0 [ 70.158871][ T6683] ? __pfx___lock_acquire+0x10/0x10 [ 70.160235][ T6683] __netif_receive_skb_list_core+0x357/0x950 [ 70.161785][ T6683] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 70.163486][ T6683] ? trace_lock_acquire+0x14a/0x1d0 [ 70.164834][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 70.166495][ T6683] ? lock_acquire+0x2f/0xb0 [ 70.167679][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 70.169334][ T6683] netif_receive_skb_list_internal+0x753/0xdb0 [ 70.170970][ T6683] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 70.172738][ T6683] ? __pfx_eth_type_trans+0x10/0x10 [ 70.174121][ T6683] ? __build_skb_around+0x278/0x3b0 [ 70.175653][ T6683] netif_receive_skb_list+0x4f/0x4a0 [ 70.177039][ T6683] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 70.178983][ T6683] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 70.181008][ T6683] ? bpf_test_timer_continue+0x150/0x3d0 [ 70.182537][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 70.183959][ T6683] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 70.185535][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 70.187088][ T6683] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 70.188654][ T6683] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 70.190205][ T6683] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 70.191635][ T6683] ? 0xffffffffa00045c0 [ 70.192719][ T6683] ? 0xffffffffa00045c0 [ 70.193811][ T6683] ? 0xffffffffa00045c0 [ 70.194939][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 70.196531][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 70.197978][ T6683] ? lock_acquire+0x2f/0xb0 [ 70.200185][ T6683] ? __fget_files+0x40/0x3f0 [ 70.203207][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 70.206096][ T6683] ? fput+0x30/0x390 [ 70.207272][ T6683] ? __bpf_prog_get+0xa0/0x290 [ 70.208995][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 70.211701][ T6683] __sys_bpf+0xfc6/0x49a0 [ 70.213231][ T6683] ? __pfx___sys_bpf+0x10/0x10 [ 70.215453][ T6683] ? __schedule+0xe5d/0x5730 [ 70.217263][ T6683] ? __fget_files+0x23a/0x3f0 [ 70.219682][ T6683] ? do_futex+0x123/0x350 [ 70.222390][ T6683] ? __pfx_do_futex+0x10/0x10 [ 70.224893][ T6683] ? xfd_validate_state+0x5d/0x180 [ 70.226611][ T6683] ? rcu_is_watching+0x12/0xc0 [ 70.228027][ T6683] __x64_sys_bpf+0x78/0xc0 [ 70.229357][ T6683] ? lockdep_hardirqs_on+0x7c/0x110 [ 70.231956][ T6683] do_syscall_64+0xcd/0x250 [ 70.233431][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.236565][ T6683] RIP: 0033:0x7f574217e719 [ 70.238372][ T6683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.249114][ T6683] RSP: 002b:00007f5742e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 70.255034][ T6683] RAX: ffffffffffffffda RBX: 00007f5742336058 RCX: 00007f574217e719 [ 70.260533][ T6683] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 70.263857][ T6683] RBP: 00007f57421f132e R08: 0000000000000000 R09: 0000000000000000 [ 70.267629][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.270700][ T6683] R13: 0000000000000000 R14: 00007f5742336058 R15: 00007ffe5115f908 [ 70.273200][ T6683] [ 70.274625][ T6683] BUG: Bad page state in process syz.2.194 pfn:2966e [ 70.277485][ T6683] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802966fe00 pfn:0x2966e [ 70.283376][ T6683] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 70.287158][ T6683] raw: 00fff00000000000 dead000000000040 ffff88802a52e000 0000000000000000 [ 70.294376][ T6683] raw: ffff88802966fe00 0000000000000001 00000000ffffffff 0000000000000000 [ 70.297631][ T6683] page dumped because: page_pool leak [ 70.299659][ T6683] page_owner tracks the page as allocated [ 70.303058][ T6683] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6683, tgid 6674 (syz.2.194), ts 67591109150, free_ts 67588969985 [ 70.311833][ T6683] post_alloc_hook+0x2d1/0x350 [ 70.315318][ T6683] get_page_from_freelist+0x101e/0x3070 [ 70.319492][ T6683] __alloc_pages_noprof+0x223/0x25a0 [ 70.322043][ T6683] alloc_pages_bulk_noprof+0x77c/0x1110 [ 70.325373][ T6683] __page_pool_alloc_pages_slow+0x18f/0x770 [ 70.328670][ T6683] page_pool_alloc_netmem+0xc4/0x160 [ 70.330650][ T6683] page_pool_alloc_pages+0x1a/0x60 [ 70.332518][ T6683] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 70.335534][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 70.337731][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 70.340730][ T6683] __sys_bpf+0xfc6/0x49a0 [ 70.342229][ T6683] __x64_sys_bpf+0x78/0xc0 [ 70.345076][ T6683] do_syscall_64+0xcd/0x250 [ 70.346499][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.348046][ T6683] page last free pid 6671 tgid 6669 stack trace: [ 70.349688][ T6683] free_unref_page+0x5f4/0xdc0 [ 70.350959][ T6683] __folio_put+0x30d/0x3d0 [ 70.352181][ T6683] put_page+0x21e/0x280 [ 70.354338][ T6683] page_pool_return_page+0x400/0x520 [ 70.358400][ T6683] page_pool_release+0xf4/0x7d0 [ 70.361671][ T6683] page_pool_destroy+0x10a/0x4c0 [ 70.364573][ T6683] bpf_test_run_xdp_live+0x3a1/0x500 [ 70.367051][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 70.369344][ T6683] __sys_bpf+0xfc6/0x49a0 [ 70.370545][ T6683] __x64_sys_bpf+0x78/0xc0 [ 70.371721][ T6683] do_syscall_64+0xcd/0x250 [ 70.373589][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.376989][ T6683] Modules linked in: [ 70.378881][ T6683] CPU: 1 UID: 0 PID: 6683 Comm: syz.2.194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 70.382279][ T6683] Tainted: [B]=BAD_PAGE [ 70.383397][ T6683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.388365][ T6683] Call Trace: [ 70.390341][ T6683] [ 70.391995][ T6683] dump_stack_lvl+0x16c/0x1f0 [ 70.394055][ T6683] bad_page+0xb3/0x1f0 [ 70.395881][ T6683] ? __pfx_bad_page+0x10/0x10 [ 70.397369][ T6683] ? page_bad_reason+0x9d/0x1e0 [ 70.402121][ T6683] free_unref_page+0x657/0xdc0 [ 70.405802][ T6683] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 70.408292][ T6683] ? __phys_addr+0xc6/0x150 [ 70.409930][ T6683] skb_free_head+0xa0/0x1d0 [ 70.411583][ T6683] skb_release_data+0x560/0x730 [ 70.413196][ T6683] sk_skb_reason_drop+0x129/0x1a0 [ 70.414992][ T6683] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 70.417570][ T6683] ? kernel_text_address+0x8d/0x100 [ 70.419505][ T6683] ? hlock_class+0x4e/0x130 [ 70.420925][ T6683] ? __lock_acquire+0x163e/0x3ce0 [ 70.422563][ T6683] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 70.424744][ T6683] ? hlock_class+0x4e/0x130 [ 70.426425][ T6683] ? __lock_acquire+0xbdd/0x3ce0 [ 70.428180][ T6683] ? __pfx___lock_acquire+0x10/0x10 [ 70.430001][ T6683] __netif_receive_skb_list_core+0x357/0x950 [ 70.432133][ T6683] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 70.433798][ T6683] ? trace_lock_acquire+0x14a/0x1d0 [ 70.435300][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 70.436913][ T6683] ? lock_acquire+0x2f/0xb0 [ 70.438134][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 70.440042][ T6683] netif_receive_skb_list_internal+0x753/0xdb0 [ 70.441876][ T6683] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 70.444039][ T6683] ? __pfx_eth_type_trans+0x10/0x10 [ 70.445916][ T6683] ? __build_skb_around+0x278/0x3b0 [ 70.447749][ T6683] netif_receive_skb_list+0x4f/0x4a0 [ 70.449690][ T6683] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 70.452442][ T6683] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 70.455580][ T6683] ? bpf_test_timer_continue+0x150/0x3d0 [ 70.458668][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 70.461021][ T6683] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 70.463147][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 70.465272][ T6683] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 70.467333][ T6683] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 70.469292][ T6683] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 70.471217][ T6683] ? 0xffffffffa00045c0 [ 70.472589][ T6683] ? 0xffffffffa00045c0 [ 70.473683][ T6683] ? 0xffffffffa00045c0 [ 70.474986][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 70.476993][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 70.478498][ T6683] ? lock_acquire+0x2f/0xb0 [ 70.480276][ T6683] ? __fget_files+0x40/0x3f0 [ 70.481891][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 70.484161][ T6683] ? fput+0x30/0x390 [ 70.485630][ T6683] ? __bpf_prog_get+0xa0/0x290 [ 70.487376][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 70.489406][ T6683] __sys_bpf+0xfc6/0x49a0 [ 70.491258][ T6683] ? __pfx___sys_bpf+0x10/0x10 [ 70.493220][ T6683] ? __schedule+0xe5d/0x5730 [ 70.495445][ T6683] ? __fget_files+0x23a/0x3f0 [ 70.497502][ T6683] ? do_futex+0x123/0x350 [ 70.499490][ T6683] ? __pfx_do_futex+0x10/0x10 [ 70.501536][ T6683] ? xfd_validate_state+0x5d/0x180 [ 70.503357][ T6683] ? rcu_is_watching+0x12/0xc0 [ 70.505073][ T6683] __x64_sys_bpf+0x78/0xc0 [ 70.506654][ T6683] ? lockdep_hardirqs_on+0x7c/0x110 [ 70.508516][ T6683] do_syscall_64+0xcd/0x250 [ 70.510150][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.512538][ T6683] RIP: 0033:0x7f574217e719 [ 70.514223][ T6683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.520980][ T6683] RSP: 002b:00007f5742e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 70.523323][ T6683] RAX: ffffffffffffffda RBX: 00007f5742336058 RCX: 00007f574217e719 [ 70.525336][ T6683] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 70.527450][ T6683] RBP: 00007f57421f132e R08: 0000000000000000 R09: 0000000000000000 [ 70.529454][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.531618][ T6683] R13: 0000000000000000 R14: 00007f5742336058 R15: 00007ffe5115f908 [ 70.533854][ T6683] [ 70.534889][ T6683] BUG: Bad page state in process syz.2.194 pfn:2966f [ 70.537127][ T6683] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2 pfn:0x2966f [ 70.541225][ T6683] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 70.543412][ T6683] raw: 00fff00000000000 dead000000000040 ffff88802a52e000 0000000000000000 [ 70.545884][ T6683] raw: 0000000000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 70.548286][ T6683] page dumped because: page_pool leak [ 70.549870][ T6683] page_owner tracks the page as allocated [ 70.551761][ T6683] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6683, tgid 6674 (syz.2.194), ts 67591104497, free_ts 67588973743 [ 70.556840][ T6683] post_alloc_hook+0x2d1/0x350 [ 70.558571][ T6683] get_page_from_freelist+0x101e/0x3070 [ 70.560027][ T6683] __alloc_pages_noprof+0x223/0x25a0 [ 70.561536][ T6683] alloc_pages_bulk_noprof+0x77c/0x1110 [ 70.563077][ T6683] __page_pool_alloc_pages_slow+0x18f/0x770 [ 70.564635][ T6683] page_pool_alloc_netmem+0xc4/0x160 [ 70.566116][ T6683] page_pool_alloc_pages+0x1a/0x60 [ 70.567481][ T6683] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 70.569125][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 70.570814][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 70.572692][ T6683] __sys_bpf+0xfc6/0x49a0 [ 70.574226][ T6683] __x64_sys_bpf+0x78/0xc0 [ 70.576154][ T6683] do_syscall_64+0xcd/0x250 [ 70.577757][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.579972][ T6683] page last free pid 6671 tgid 6669 stack trace: [ 70.582410][ T6683] free_unref_page+0x5f4/0xdc0 [ 70.584272][ T6683] __folio_put+0x30d/0x3d0 [ 70.586030][ T6683] put_page+0x21e/0x280 [ 70.587728][ T6683] page_pool_return_page+0x400/0x520 [ 70.589988][ T6683] page_pool_release+0xf4/0x7d0 [ 70.592130][ T6683] page_pool_destroy+0x10a/0x4c0 [ 70.594299][ T6683] bpf_test_run_xdp_live+0x3a1/0x500 [ 70.596171][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 70.597641][ T6683] __sys_bpf+0xfc6/0x49a0 [ 70.598810][ T6683] __x64_sys_bpf+0x78/0xc0 [ 70.600005][ T6683] do_syscall_64+0xcd/0x250 [ 70.601222][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.602793][ T6683] Modules linked in: [ 70.603797][ T6683] CPU: 1 UID: 0 PID: 6683 Comm: syz.2.194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 70.607666][ T6683] Tainted: [B]=BAD_PAGE [ 70.608903][ T6683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.612308][ T6683] Call Trace: [ 70.613660][ T6683] [ 70.614765][ T6683] dump_stack_lvl+0x16c/0x1f0 [ 70.616349][ T6683] bad_page+0xb3/0x1f0 [ 70.617583][ T6683] ? __pfx_bad_page+0x10/0x10 [ 70.619063][ T6683] ? page_bad_reason+0x9d/0x1e0 [ 70.620444][ T6683] free_unref_page+0x657/0xdc0 [ 70.621880][ T6683] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 70.623805][ T6683] ? __phys_addr+0xc6/0x150 [ 70.625233][ T6683] skb_free_head+0xa0/0x1d0 [ 70.626800][ T6683] skb_release_data+0x560/0x730 [ 70.628350][ T6683] sk_skb_reason_drop+0x129/0x1a0 [ 70.629705][ T6683] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 70.631442][ T6683] ? kernel_text_address+0x8d/0x100 [ 70.632812][ T6683] ? hlock_class+0x4e/0x130 [ 70.634012][ T6683] ? __lock_acquire+0x163e/0x3ce0 [ 70.635394][ T6683] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 70.637234][ T6683] ? hlock_class+0x4e/0x130 [ 70.638497][ T6683] ? __lock_acquire+0xbdd/0x3ce0 [ 70.639803][ T6683] ? __pfx___lock_acquire+0x10/0x10 [ 70.641166][ T6683] __netif_receive_skb_list_core+0x357/0x950 [ 70.642738][ T6683] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 70.644451][ T6683] ? trace_lock_acquire+0x14a/0x1d0 [ 70.645827][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 70.647543][ T6683] ? lock_acquire+0x2f/0xb0 [ 70.648767][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 70.650428][ T6683] netif_receive_skb_list_internal+0x753/0xdb0 [ 70.652031][ T6683] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 70.653766][ T6683] ? __pfx_eth_type_trans+0x10/0x10 [ 70.655192][ T6683] ? __build_skb_around+0x278/0x3b0 [ 70.656903][ T6683] netif_receive_skb_list+0x4f/0x4a0 [ 70.658550][ T6683] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 70.660250][ T6683] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 70.661942][ T6683] ? bpf_test_timer_continue+0x150/0x3d0 [ 70.663415][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 70.664805][ T6683] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 70.666365][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 70.667901][ T6683] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 70.669440][ T6683] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 70.670992][ T6683] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 70.672363][ T6683] ? 0xffffffffa00045c0 [ 70.673849][ T6683] ? 0xffffffffa00045c0 [ 70.675110][ T6683] ? 0xffffffffa00045c0 [ 70.676472][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 70.678086][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 70.679607][ T6683] ? lock_acquire+0x2f/0xb0 [ 70.680872][ T6683] ? __fget_files+0x40/0x3f0 [ 70.682299][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 70.683934][ T6683] ? fput+0x30/0x390 [ 70.684991][ T6683] ? __bpf_prog_get+0xa0/0x290 [ 70.686334][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 70.687887][ T6683] __sys_bpf+0xfc6/0x49a0 [ 70.689061][ T6683] ? __pfx___sys_bpf+0x10/0x10 [ 70.690395][ T6683] ? __schedule+0xe5d/0x5730 [ 70.691621][ T6683] ? __fget_files+0x23a/0x3f0 [ 70.692859][ T6683] ? do_futex+0x123/0x350 [ 70.694017][ T6683] ? __pfx_do_futex+0x10/0x10 [ 70.695438][ T6683] ? xfd_validate_state+0x5d/0x180 [ 70.696883][ T6683] ? rcu_is_watching+0x12/0xc0 [ 70.698450][ T6683] __x64_sys_bpf+0x78/0xc0 [ 70.699829][ T6683] ? lockdep_hardirqs_on+0x7c/0x110 [ 70.701404][ T6683] do_syscall_64+0xcd/0x250 [ 70.702643][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.704214][ T6683] RIP: 0033:0x7f574217e719 [ 70.705489][ T6683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.710741][ T6683] RSP: 002b:00007f5742e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 70.713038][ T6683] RAX: ffffffffffffffda RBX: 00007f5742336058 RCX: 00007f574217e719 [ 70.715552][ T6683] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 70.717707][ T6683] RBP: 00007f57421f132e R08: 0000000000000000 R09: 0000000000000000 [ 70.719848][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.721918][ T6683] R13: 0000000000000000 R14: 00007f5742336058 R15: 00007ffe5115f908 [ 70.723994][ T6683] [ 70.725062][ T6683] BUG: Bad page state in process syz.2.194 pfn:26c2c [ 70.726949][ T6683] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888026c2de00 pfn:0x26c2c [ 70.729683][ T6683] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 70.731637][ T6683] raw: 00fff00000000000 dead000000000040 ffff88802a52e000 0000000000000000 [ 70.733979][ T6683] raw: ffff888026c2de00 0000000000000001 00000000ffffffff 0000000000000000 [ 70.736516][ T6683] page dumped because: page_pool leak [ 70.738064][ T6683] page_owner tracks the page as allocated [ 70.739748][ T6683] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6683, tgid 6674 (syz.2.194), ts 67591099915, free_ts 67588977496 [ 70.744157][ T6683] post_alloc_hook+0x2d1/0x350 [ 70.745579][ T6683] get_page_from_freelist+0x101e/0x3070 [ 70.747157][ T6683] __alloc_pages_noprof+0x223/0x25a0 [ 70.748638][ T6683] alloc_pages_bulk_noprof+0x77c/0x1110 [ 70.750185][ T6683] __page_pool_alloc_pages_slow+0x18f/0x770 [ 70.752005][ T6683] page_pool_alloc_netmem+0xc4/0x160 [ 70.753431][ T6683] page_pool_alloc_pages+0x1a/0x60 [ 70.754890][ T6683] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 70.756872][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 70.758418][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 70.759862][ T6683] __sys_bpf+0xfc6/0x49a0 [ 70.761114][ T6683] __x64_sys_bpf+0x78/0xc0 [ 70.762357][ T6683] do_syscall_64+0xcd/0x250 [ 70.763734][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.765489][ T6683] page last free pid 6671 tgid 6669 stack trace: [ 70.767463][ T6683] free_unref_page+0x5f4/0xdc0 [ 70.769008][ T6683] __folio_put+0x30d/0x3d0 [ 70.770473][ T6683] put_page+0x21e/0x280 [ 70.771852][ T6683] page_pool_return_page+0x400/0x520 [ 70.773672][ T6683] page_pool_release+0xf4/0x7d0 [ 70.775485][ T6683] page_pool_destroy+0x10a/0x4c0 [ 70.776740][ T6683] bpf_test_run_xdp_live+0x3a1/0x500 [ 70.778123][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 70.779587][ T6683] __sys_bpf+0xfc6/0x49a0 [ 70.780696][ T6683] __x64_sys_bpf+0x78/0xc0 [ 70.781927][ T6683] do_syscall_64+0xcd/0x250 [ 70.783130][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.784617][ T6683] Modules linked in: [ 70.785710][ T6683] CPU: 1 UID: 0 PID: 6683 Comm: syz.2.194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 70.788869][ T6683] Tainted: [B]=BAD_PAGE [ 70.789913][ T6683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.792698][ T6683] Call Trace: [ 70.793595][ T6683] [ 70.794453][ T6683] dump_stack_lvl+0x16c/0x1f0 [ 70.795778][ T6683] bad_page+0xb3/0x1f0 [ 70.796901][ T6683] ? __pfx_bad_page+0x10/0x10 [ 70.798156][ T6683] ? page_bad_reason+0x9d/0x1e0 [ 70.799492][ T6683] free_unref_page+0x657/0xdc0 [ 70.800741][ T6683] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 70.802360][ T6683] ? __phys_addr+0xc6/0x150 [ 70.803585][ T6683] skb_free_head+0xa0/0x1d0 [ 70.804793][ T6683] skb_release_data+0x560/0x730 [ 70.806092][ T6683] sk_skb_reason_drop+0x129/0x1a0 [ 70.807437][ T6683] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 70.809179][ T6683] ? kernel_text_address+0x8d/0x100 [ 70.810551][ T6683] ? hlock_class+0x4e/0x130 [ 70.811821][ T6683] ? __lock_acquire+0x163e/0x3ce0 [ 70.813203][ T6683] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 70.815073][ T6683] ? hlock_class+0x4e/0x130 [ 70.816324][ T6683] ? __lock_acquire+0xbdd/0x3ce0 [ 70.817630][ T6683] ? __pfx___lock_acquire+0x10/0x10 [ 70.818963][ T6683] __netif_receive_skb_list_core+0x357/0x950 [ 70.820538][ T6683] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 70.822343][ T6683] ? trace_lock_acquire+0x14a/0x1d0 [ 70.823676][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 70.825328][ T6683] ? lock_acquire+0x2f/0xb0 [ 70.826569][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 70.828321][ T6683] netif_receive_skb_list_internal+0x753/0xdb0 [ 70.829993][ T6683] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 70.831831][ T6683] ? __pfx_eth_type_trans+0x10/0x10 [ 70.833272][ T6683] ? __build_skb_around+0x278/0x3b0 [ 70.834763][ T6683] netif_receive_skb_list+0x4f/0x4a0 [ 70.836255][ T6683] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 70.838046][ T6683] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 70.839881][ T6683] ? bpf_test_timer_continue+0x150/0x3d0 [ 70.841404][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 70.842916][ T6683] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 70.844513][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 70.846238][ T6683] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 70.847852][ T6683] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 70.849406][ T6683] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 70.850932][ T6683] ? 0xffffffffa00045c0 [ 70.852050][ T6683] ? 0xffffffffa00045c0 [ 70.853149][ T6683] ? 0xffffffffa00045c0 [ 70.854268][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 70.855791][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 70.857307][ T6683] ? lock_acquire+0x2f/0xb0 [ 70.858529][ T6683] ? __fget_files+0x40/0x3f0 [ 70.859731][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 70.861273][ T6683] ? fput+0x30/0x390 [ 70.862323][ T6683] ? __bpf_prog_get+0xa0/0x290 [ 70.863598][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 70.865080][ T6683] __sys_bpf+0xfc6/0x49a0 [ 70.866186][ T6683] ? __pfx___sys_bpf+0x10/0x10 [ 70.867523][ T6683] ? __schedule+0xe5d/0x5730 [ 70.868760][ T6683] ? __fget_files+0x23a/0x3f0 [ 70.869926][ T6683] ? do_futex+0x123/0x350 [ 70.871146][ T6683] ? __pfx_do_futex+0x10/0x10 [ 70.872394][ T6683] ? xfd_validate_state+0x5d/0x180 [ 70.873676][ T6683] ? rcu_is_watching+0x12/0xc0 [ 70.875061][ T6683] __x64_sys_bpf+0x78/0xc0 [ 70.876288][ T6683] ? lockdep_hardirqs_on+0x7c/0x110 [ 70.877656][ T6683] do_syscall_64+0xcd/0x250 [ 70.878866][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.880422][ T6683] RIP: 0033:0x7f574217e719 [ 70.881648][ T6683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.886819][ T6683] RSP: 002b:00007f5742e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 70.888993][ T6683] RAX: ffffffffffffffda RBX: 00007f5742336058 RCX: 00007f574217e719 [ 70.891114][ T6683] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 70.893254][ T6683] RBP: 00007f57421f132e R08: 0000000000000000 R09: 0000000000000000 [ 70.895346][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.897420][ T6683] R13: 0000000000000000 R14: 00007f5742336058 R15: 00007ffe5115f908 [ 70.899665][ T6683] [ 70.900652][ T6683] BUG: Bad page state in process syz.2.194 pfn:26c2d [ 70.902425][ T6683] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2 pfn:0x26c2d [ 70.904731][ T6683] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 70.906671][ T6683] raw: 00fff00000000000 dead000000000040 ffff88802a52e000 0000000000000000 [ 70.909021][ T6683] raw: 0000000000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 70.911751][ T6683] page dumped because: page_pool leak [ 70.913337][ T6683] page_owner tracks the page as allocated [ 70.914931][ T6683] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6683, tgid 6674 (syz.2.194), ts 67591095120, free_ts 67588981940 [ 70.919799][ T6683] post_alloc_hook+0x2d1/0x350 [ 70.921080][ T6683] get_page_from_freelist+0x101e/0x3070 [ 70.922563][ T6683] __alloc_pages_noprof+0x223/0x25a0 [ 70.924063][ T6683] alloc_pages_bulk_noprof+0x77c/0x1110 [ 70.925684][ T6683] __page_pool_alloc_pages_slow+0x18f/0x770 [ 70.927357][ T6683] page_pool_alloc_netmem+0xc4/0x160 [ 70.928822][ T6683] page_pool_alloc_pages+0x1a/0x60 [ 70.930232][ T6683] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 70.932178][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 70.933592][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 70.935485][ T6683] __sys_bpf+0xfc6/0x49a0 [ 70.936852][ T6683] __x64_sys_bpf+0x78/0xc0 [ 70.938129][ T6683] do_syscall_64+0xcd/0x250 [ 70.939450][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.941016][ T6683] page last free pid 6671 tgid 6669 stack trace: [ 70.942826][ T6683] free_unref_page+0x5f4/0xdc0 [ 70.944119][ T6683] __folio_put+0x30d/0x3d0 [ 70.945425][ T6683] put_page+0x21e/0x280 [ 70.946657][ T6683] page_pool_return_page+0x400/0x520 [ 70.948083][ T6683] page_pool_release+0xf4/0x7d0 [ 70.949452][ T6683] page_pool_destroy+0x10a/0x4c0 [ 70.950995][ T6683] bpf_test_run_xdp_live+0x3a1/0x500 [ 70.952415][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 70.953922][ T6683] __sys_bpf+0xfc6/0x49a0 [ 70.955287][ T6683] __x64_sys_bpf+0x78/0xc0 [ 70.956708][ T6683] do_syscall_64+0xcd/0x250 [ 70.958019][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.959831][ T6683] Modules linked in: [ 70.961148][ T6683] CPU: 1 UID: 0 PID: 6683 Comm: syz.2.194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 70.964752][ T6683] Tainted: [B]=BAD_PAGE [ 70.965881][ T6683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.968679][ T6683] Call Trace: [ 70.969568][ T6683] [ 70.970555][ T6683] dump_stack_lvl+0x16c/0x1f0 [ 70.971917][ T6683] bad_page+0xb3/0x1f0 [ 70.973072][ T6683] ? __pfx_bad_page+0x10/0x10 [ 70.974362][ T6683] ? page_bad_reason+0x9d/0x1e0 [ 70.975615][ T6683] free_unref_page+0x657/0xdc0 [ 70.976854][ T6683] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 70.978502][ T6683] ? __phys_addr+0xc6/0x150 [ 70.979790][ T6683] skb_free_head+0xa0/0x1d0 [ 70.981170][ T6683] skb_release_data+0x560/0x730 [ 70.982667][ T6683] sk_skb_reason_drop+0x129/0x1a0 [ 70.984181][ T6683] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 70.986335][ T6683] ? kernel_text_address+0x8d/0x100 [ 70.987814][ T6683] ? hlock_class+0x4e/0x130 [ 70.989129][ T6683] ? __lock_acquire+0x163e/0x3ce0 [ 70.990589][ T6683] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 70.992883][ T6683] ? hlock_class+0x4e/0x130 [ 70.994193][ T6683] ? __lock_acquire+0xbdd/0x3ce0 [ 70.995536][ T6683] ? __pfx___lock_acquire+0x10/0x10 [ 70.996905][ T6683] __netif_receive_skb_list_core+0x357/0x950 [ 70.998564][ T6683] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 71.000196][ T6683] ? trace_lock_acquire+0x14a/0x1d0 [ 71.001501][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 71.003232][ T6683] ? lock_acquire+0x2f/0xb0 [ 71.004484][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 71.006146][ T6683] netif_receive_skb_list_internal+0x753/0xdb0 [ 71.008008][ T6683] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 71.009878][ T6683] ? __pfx_eth_type_trans+0x10/0x10 [ 71.011709][ T6683] ? __build_skb_around+0x278/0x3b0 [ 71.013260][ T6683] netif_receive_skb_list+0x4f/0x4a0 [ 71.014917][ T6683] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 71.016656][ T6683] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 71.018791][ T6683] ? bpf_test_timer_continue+0x150/0x3d0 [ 71.020715][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 71.022061][ T6683] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 71.023593][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 71.025238][ T6683] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 71.026810][ T6683] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 71.028308][ T6683] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 71.029695][ T6683] ? 0xffffffffa00045c0 [ 71.031064][ T6683] ? 0xffffffffa00045c0 [ 71.032336][ T6683] ? 0xffffffffa00045c0 [ 71.033517][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 71.035172][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 71.036708][ T6683] ? lock_acquire+0x2f/0xb0 [ 71.038046][ T6683] ? __fget_files+0x40/0x3f0 [ 71.039483][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 71.041234][ T6683] ? fput+0x30/0x390 [ 71.042549][ T6683] ? __bpf_prog_get+0xa0/0x290 [ 71.043993][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 71.045529][ T6683] __sys_bpf+0xfc6/0x49a0 [ 71.046695][ T6683] ? __pfx___sys_bpf+0x10/0x10 [ 71.047964][ T6683] ? __schedule+0xe5d/0x5730 [ 71.049197][ T6683] ? __fget_files+0x23a/0x3f0 [ 71.050452][ T6683] ? do_futex+0x123/0x350 [ 71.051885][ T6683] ? __pfx_do_futex+0x10/0x10 [ 71.053647][ T6683] ? xfd_validate_state+0x5d/0x180 [ 71.055290][ T6683] ? rcu_is_watching+0x12/0xc0 [ 71.056701][ T6683] __x64_sys_bpf+0x78/0xc0 [ 71.057978][ T6683] ? lockdep_hardirqs_on+0x7c/0x110 [ 71.059458][ T6683] do_syscall_64+0xcd/0x250 [ 71.060719][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.062372][ T6683] RIP: 0033:0x7f574217e719 [ 71.063567][ T6683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.068574][ T6683] RSP: 002b:00007f5742e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 71.070780][ T6683] RAX: ffffffffffffffda RBX: 00007f5742336058 RCX: 00007f574217e719 [ 71.073063][ T6683] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 71.075693][ T6683] RBP: 00007f57421f132e R08: 0000000000000000 R09: 0000000000000000 [ 71.078098][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.080472][ T6683] R13: 0000000000000000 R14: 00007f5742336058 R15: 00007ffe5115f908 [ 71.082573][ T6683] [ 71.083643][ T6683] BUG: Bad page state in process syz.2.194 pfn:285a6 [ 71.086202][ T6683] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880285a7e00 pfn:0x285a6 [ 71.089528][ T6683] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 71.091704][ T6683] raw: 00fff00000000000 dead000000000040 ffff88802a52e000 0000000000000000 [ 71.094355][ T6683] raw: ffff8880285a7e00 0000000000000001 00000000ffffffff 0000000000000000 [ 71.096700][ T6683] page dumped because: page_pool leak [ 71.098816][ T6683] page_owner tracks the page as allocated [ 71.100465][ T6683] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6683, tgid 6674 (syz.2.194), ts 67591090383, free_ts 67588985526 [ 71.104790][ T6683] post_alloc_hook+0x2d1/0x350 [ 71.106145][ T6683] get_page_from_freelist+0x101e/0x3070 [ 71.107681][ T6683] __alloc_pages_noprof+0x223/0x25a0 [ 71.109084][ T6683] alloc_pages_bulk_noprof+0x77c/0x1110 [ 71.110563][ T6683] __page_pool_alloc_pages_slow+0x18f/0x770 [ 71.112259][ T6683] page_pool_alloc_netmem+0xc4/0x160 [ 71.113727][ T6683] page_pool_alloc_pages+0x1a/0x60 [ 71.115140][ T6683] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 71.116847][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 71.118286][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 71.119788][ T6683] __sys_bpf+0xfc6/0x49a0 [ 71.120955][ T6683] __x64_sys_bpf+0x78/0xc0 [ 71.122194][ T6683] do_syscall_64+0xcd/0x250 [ 71.123468][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.125066][ T6683] page last free pid 6671 tgid 6669 stack trace: [ 71.126747][ T6683] free_unref_page+0x5f4/0xdc0 [ 71.128144][ T6683] __folio_put+0x30d/0x3d0 [ 71.129482][ T6683] put_page+0x21e/0x280 [ 71.130741][ T6683] page_pool_return_page+0x400/0x520 [ 71.132326][ T6683] page_pool_release+0xf4/0x7d0 [ 71.133899][ T6683] page_pool_destroy+0x10a/0x4c0 [ 71.135600][ T6683] bpf_test_run_xdp_live+0x3a1/0x500 [ 71.137377][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 71.139106][ T6683] __sys_bpf+0xfc6/0x49a0 [ 71.140272][ T6683] __x64_sys_bpf+0x78/0xc0 [ 71.141456][ T6683] do_syscall_64+0xcd/0x250 [ 71.142684][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.144257][ T6683] Modules linked in: [ 71.145367][ T6683] CPU: 1 UID: 0 PID: 6683 Comm: syz.2.194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 71.148497][ T6683] Tainted: [B]=BAD_PAGE [ 71.149656][ T6683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 71.152552][ T6683] Call Trace: [ 71.153486][ T6683] [ 71.154320][ T6683] dump_stack_lvl+0x16c/0x1f0 [ 71.155590][ T6683] bad_page+0xb3/0x1f0 [ 71.156663][ T6683] ? __pfx_bad_page+0x10/0x10 [ 71.157948][ T6683] ? page_bad_reason+0x9d/0x1e0 [ 71.159216][ T6683] free_unref_page+0x657/0xdc0 [ 71.160446][ T6683] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 71.162057][ T6683] ? __phys_addr+0xc6/0x150 [ 71.163297][ T6683] skb_free_head+0xa0/0x1d0 [ 71.164794][ T6683] skb_release_data+0x560/0x730 [ 71.166061][ T6683] sk_skb_reason_drop+0x129/0x1a0 [ 71.167409][ T6683] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 71.169120][ T6683] ? kernel_text_address+0x8d/0x100 [ 71.170595][ T6683] ? hlock_class+0x4e/0x130 [ 71.171844][ T6683] ? __lock_acquire+0x163e/0x3ce0 [ 71.173186][ T6683] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 71.175049][ T6683] ? hlock_class+0x4e/0x130 [ 71.176194][ T6683] ? __lock_acquire+0xbdd/0x3ce0 [ 71.177666][ T6683] ? __pfx___lock_acquire+0x10/0x10 [ 71.179404][ T6683] __netif_receive_skb_list_core+0x357/0x950 [ 71.181067][ T6683] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 71.182883][ T6683] ? trace_lock_acquire+0x14a/0x1d0 [ 71.184274][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 71.185943][ T6683] ? lock_acquire+0x2f/0xb0 [ 71.187164][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 71.188824][ T6683] netif_receive_skb_list_internal+0x753/0xdb0 [ 71.190771][ T6683] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 71.192860][ T6683] ? __pfx_eth_type_trans+0x10/0x10 [ 71.194552][ T6683] ? __build_skb_around+0x278/0x3b0 [ 71.196245][ T6683] netif_receive_skb_list+0x4f/0x4a0 [ 71.197767][ T6683] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 71.199770][ T6683] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 71.201547][ T6683] ? bpf_test_timer_continue+0x150/0x3d0 [ 71.203160][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 71.204755][ T6683] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 71.206372][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 71.208053][ T6683] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 71.209708][ T6683] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 71.211598][ T6683] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 71.213294][ T6683] ? 0xffffffffa00045c0 [ 71.215046][ T6683] ? 0xffffffffa00045c0 [ 71.216164][ T6683] ? 0xffffffffa00045c0 [ 71.217494][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 71.219222][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 71.220951][ T6683] ? lock_acquire+0x2f/0xb0 [ 71.222255][ T6683] ? __fget_files+0x40/0x3f0 [ 71.223469][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 71.225031][ T6683] ? fput+0x30/0x390 [ 71.226078][ T6683] ? __bpf_prog_get+0xa0/0x290 [ 71.227390][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 71.229084][ T6683] __sys_bpf+0xfc6/0x49a0 [ 71.230396][ T6683] ? __pfx___sys_bpf+0x10/0x10 [ 71.232090][ T6683] ? __schedule+0xe5d/0x5730 [ 71.233529][ T6683] ? __fget_files+0x23a/0x3f0 [ 71.234931][ T6683] ? do_futex+0x123/0x350 [ 71.236256][ T6683] ? __pfx_do_futex+0x10/0x10 [ 71.237619][ T6683] ? xfd_validate_state+0x5d/0x180 [ 71.239050][ T6683] ? rcu_is_watching+0x12/0xc0 [ 71.240498][ T6683] __x64_sys_bpf+0x78/0xc0 [ 71.242002][ T6683] ? lockdep_hardirqs_on+0x7c/0x110 [ 71.243526][ T6683] do_syscall_64+0xcd/0x250 [ 71.244810][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.246384][ T6683] RIP: 0033:0x7f574217e719 [ 71.247619][ T6683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.252675][ T6683] RSP: 002b:00007f5742e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 71.255253][ T6683] RAX: ffffffffffffffda RBX: 00007f5742336058 RCX: 00007f574217e719 [ 71.257313][ T6683] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 71.259567][ T6683] RBP: 00007f57421f132e R08: 0000000000000000 R09: 0000000000000000 [ 71.261841][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.263992][ T6683] R13: 0000000000000000 R14: 00007f5742336058 R15: 00007ffe5115f908 [ 71.266027][ T6683] [ 71.266990][ T6683] BUG: Bad page state in process syz.2.194 pfn:285a7 [ 71.268844][ T6683] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2 pfn:0x285a7 [ 71.271165][ T6683] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 71.273049][ T6683] raw: 00fff00000000000 dead000000000040 ffff88802a52e000 0000000000000000 [ 71.275649][ T6683] raw: 0000000000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 71.278135][ T6683] page dumped because: page_pool leak [ 71.279700][ T6683] page_owner tracks the page as allocated [ 71.281372][ T6683] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6683, tgid 6674 (syz.2.194), ts 67591085764, free_ts 67588989265 [ 71.286959][ T6683] post_alloc_hook+0x2d1/0x350 [ 71.288621][ T6683] get_page_from_freelist+0x101e/0x3070 [ 71.290267][ T6683] __alloc_pages_noprof+0x223/0x25a0 [ 71.291746][ T6683] alloc_pages_bulk_noprof+0x77c/0x1110 [ 71.293369][ T6683] __page_pool_alloc_pages_slow+0x18f/0x770 [ 71.295108][ T6683] page_pool_alloc_netmem+0xc4/0x160 [ 71.296507][ T6683] page_pool_alloc_pages+0x1a/0x60 [ 71.297857][ T6683] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 71.299735][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 71.301156][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 71.302600][ T6683] __sys_bpf+0xfc6/0x49a0 [ 71.303967][ T6683] __x64_sys_bpf+0x78/0xc0 [ 71.305164][ T6683] do_syscall_64+0xcd/0x250 [ 71.306359][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.307868][ T6683] page last free pid 6671 tgid 6669 stack trace: [ 71.309628][ T6683] free_unref_page+0x5f4/0xdc0 [ 71.311031][ T6683] __folio_put+0x30d/0x3d0 [ 71.312284][ T6683] put_page+0x21e/0x280 [ 71.313541][ T6683] page_pool_return_page+0x400/0x520 [ 71.315144][ T6683] page_pool_release+0xf4/0x7d0 [ 71.316465][ T6683] page_pool_destroy+0x10a/0x4c0 [ 71.316820][ T1410] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.317992][ T6683] bpf_test_run_xdp_live+0x3a1/0x500 [ 71.318012][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 71.318025][ T6683] __sys_bpf+0xfc6/0x49a0 [ 71.318036][ T6683] __x64_sys_bpf+0x78/0xc0 [ 71.318047][ T6683] do_syscall_64+0xcd/0x250 [ 71.319835][ T1410] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.321312][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.330076][ T6683] Modules linked in: [ 71.331339][ T6683] CPU: 1 UID: 0 PID: 6683 Comm: syz.2.194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 71.334599][ T6683] Tainted: [B]=BAD_PAGE [ 71.335693][ T6683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 71.338641][ T6683] Call Trace: [ 71.339675][ T6683] [ 71.340608][ T6683] dump_stack_lvl+0x16c/0x1f0 [ 71.341911][ T6683] bad_page+0xb3/0x1f0 [ 71.343136][ T6683] ? __pfx_bad_page+0x10/0x10 [ 71.344383][ T6683] ? page_bad_reason+0x9d/0x1e0 [ 71.345679][ T6683] free_unref_page+0x657/0xdc0 [ 71.347035][ T6683] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 71.348665][ T6683] ? __phys_addr+0xc6/0x150 [ 71.349940][ T6683] skb_free_head+0xa0/0x1d0 [ 71.351236][ T6683] skb_release_data+0x560/0x730 [ 71.352733][ T6683] sk_skb_reason_drop+0x129/0x1a0 [ 71.354029][ T6683] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 71.355810][ T6683] ? kernel_text_address+0x8d/0x100 [ 71.357282][ T6683] ? hlock_class+0x4e/0x130 [ 71.358499][ T6683] ? __lock_acquire+0x163e/0x3ce0 [ 71.359829][ T6683] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 71.361720][ T6683] ? hlock_class+0x4e/0x130 [ 71.363026][ T6683] ? __lock_acquire+0xbdd/0x3ce0 [ 71.364396][ T6683] ? __pfx___lock_acquire+0x10/0x10 [ 71.365807][ T6683] __netif_receive_skb_list_core+0x357/0x950 [ 71.367508][ T6683] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 71.369231][ T6683] ? trace_lock_acquire+0x14a/0x1d0 [ 71.370585][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 71.372710][ T6683] ? lock_acquire+0x2f/0xb0 [ 71.373967][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 71.376029][ T6683] netif_receive_skb_list_internal+0x753/0xdb0 [ 71.377977][ T6683] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 71.379857][ T6683] ? __pfx_eth_type_trans+0x10/0x10 [ 71.381229][ T6683] ? __build_skb_around+0x278/0x3b0 [ 71.382756][ T6683] netif_receive_skb_list+0x4f/0x4a0 [ 71.384107][ T6683] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 71.385684][ T6683] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 71.387382][ T6683] ? bpf_test_timer_continue+0x150/0x3d0 [ 71.388776][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 71.390151][ T6683] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 71.391972][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 71.393771][ T6683] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 71.395657][ T6683] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 71.397298][ T6683] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 71.398808][ T6683] ? 0xffffffffa00045c0 [ 71.400009][ T6683] ? 0xffffffffa00045c0 [ 71.401205][ T6683] ? 0xffffffffa00045c0 [ 71.402605][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 71.404353][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 71.405938][ T6683] ? lock_acquire+0x2f/0xb0 [ 71.407335][ T6683] ? __fget_files+0x40/0x3f0 [ 71.408748][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 71.410321][ T6683] ? fput+0x30/0x390 [ 71.411361][ T6683] ? __bpf_prog_get+0xa0/0x290 [ 71.412619][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 71.414194][ T6683] __sys_bpf+0xfc6/0x49a0 [ 71.415391][ T6683] ? __pfx___sys_bpf+0x10/0x10 [ 71.416619][ T6683] ? __schedule+0xe5d/0x5730 [ 71.417833][ T6683] ? __fget_files+0x23a/0x3f0 [ 71.419108][ T6683] ? do_futex+0x123/0x350 [ 71.420344][ T6683] ? __pfx_do_futex+0x10/0x10 [ 71.421670][ T6683] ? xfd_validate_state+0x5d/0x180 [ 71.423087][ T6683] ? rcu_is_watching+0x12/0xc0 [ 71.424356][ T6683] __x64_sys_bpf+0x78/0xc0 [ 71.425577][ T6683] ? lockdep_hardirqs_on+0x7c/0x110 [ 71.426967][ T6683] do_syscall_64+0xcd/0x250 [ 71.428172][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.429751][ T6683] RIP: 0033:0x7f574217e719 [ 71.430935][ T6683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.436034][ T6683] RSP: 002b:00007f5742e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 71.438219][ T6683] RAX: ffffffffffffffda RBX: 00007f5742336058 RCX: 00007f574217e719 [ 71.440956][ T6683] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 71.443146][ T6683] RBP: 00007f57421f132e R08: 0000000000000000 R09: 0000000000000000 [ 71.445311][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.447423][ T6683] R13: 0000000000000000 R14: 00007f5742336058 R15: 00007ffe5115f908 [ 71.449519][ T6683] [ 71.450462][ T6683] BUG: Bad page state in process syz.2.194 pfn:3f548 [ 71.452297][ T6683] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803f549e00 pfn:0x3f548 [ 71.455310][ T6683] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 71.457178][ T6683] raw: 00fff00000000000 dead000000000040 ffff88802a52e000 0000000000000000 [ 71.459614][ T6683] raw: ffff88803f549e00 0000000000000001 00000000ffffffff 0000000000000000 [ 71.462093][ T6683] page dumped because: page_pool leak [ 71.463576][ T6683] page_owner tracks the page as allocated [ 71.465228][ T6683] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6683, tgid 6674 (syz.2.194), ts 67591081382, free_ts 67588993079 [ 71.469963][ T6683] post_alloc_hook+0x2d1/0x350 [ 71.472056][ T6683] get_page_from_freelist+0x101e/0x3070 [ 71.473909][ T6683] __alloc_pages_noprof+0x223/0x25a0 [ 71.475453][ T6683] alloc_pages_bulk_noprof+0x77c/0x1110 [ 71.476991][ T6683] __page_pool_alloc_pages_slow+0x18f/0x770 [ 71.478600][ T6683] page_pool_alloc_netmem+0xc4/0x160 [ 71.479940][ T6683] page_pool_alloc_pages+0x1a/0x60 [ 71.481276][ T6683] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 71.483028][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 71.484521][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 71.486044][ T6683] __sys_bpf+0xfc6/0x49a0 [ 71.487201][ T6683] __x64_sys_bpf+0x78/0xc0 [ 71.488368][ T6683] do_syscall_64+0xcd/0x250 [ 71.489657][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.491190][ T6683] page last free pid 6671 tgid 6669 stack trace: [ 71.493093][ T6683] free_unref_page+0x5f4/0xdc0 [ 71.494488][ T6683] __folio_put+0x30d/0x3d0 [ 71.495876][ T6683] put_page+0x21e/0x280 [ 71.497147][ T6683] page_pool_return_page+0x400/0x520 [ 71.498647][ T6683] page_pool_release+0xf4/0x7d0 [ 71.499950][ T6683] page_pool_destroy+0x10a/0x4c0 [ 71.501264][ T6683] bpf_test_run_xdp_live+0x3a1/0x500 [ 71.502675][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 71.504073][ T6683] __sys_bpf+0xfc6/0x49a0 [ 71.505185][ T6683] __x64_sys_bpf+0x78/0xc0 [ 71.506359][ T6683] do_syscall_64+0xcd/0x250 [ 71.507621][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.509228][ T6683] Modules linked in: [ 71.510395][ T6683] CPU: 1 UID: 0 PID: 6683 Comm: syz.2.194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 71.514115][ T6683] Tainted: [B]=BAD_PAGE [ 71.515589][ T6683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 71.518559][ T6683] Call Trace: [ 71.519454][ T6683] [ 71.520246][ T6683] dump_stack_lvl+0x16c/0x1f0 [ 71.521545][ T6683] bad_page+0xb3/0x1f0 [ 71.522605][ T6683] ? __pfx_bad_page+0x10/0x10 [ 71.523850][ T6683] ? page_bad_reason+0x9d/0x1e0 [ 71.525109][ T6683] free_unref_page+0x657/0xdc0 [ 71.526504][ T6683] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 71.528151][ T6683] ? __phys_addr+0xc6/0x150 [ 71.529269][ T6683] skb_free_head+0xa0/0x1d0 [ 71.530470][ T6683] skb_release_data+0x560/0x730 [ 71.531708][ T6683] sk_skb_reason_drop+0x129/0x1a0 [ 71.532979][ T6683] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 71.534689][ T6683] ? kernel_text_address+0x8d/0x100 [ 71.536040][ T6683] ? hlock_class+0x4e/0x130 [ 71.537301][ T6683] ? __lock_acquire+0x163e/0x3ce0 [ 71.538797][ T6683] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 71.540673][ T6683] ? hlock_class+0x4e/0x130 [ 71.542044][ T6683] ? __lock_acquire+0xbdd/0x3ce0 [ 71.543446][ T6683] ? __pfx___lock_acquire+0x10/0x10 [ 71.544839][ T6683] __netif_receive_skb_list_core+0x357/0x950 [ 71.546343][ T6683] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 71.547999][ T6683] ? trace_lock_acquire+0x14a/0x1d0 [ 71.549304][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 71.551151][ T6683] ? lock_acquire+0x2f/0xb0 [ 71.552358][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 71.554825][ T6683] netif_receive_skb_list_internal+0x753/0xdb0 [ 71.556533][ T6683] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 71.558509][ T6683] ? __pfx_eth_type_trans+0x10/0x10 [ 71.559894][ T6683] ? __build_skb_around+0x278/0x3b0 [ 71.561329][ T6683] netif_receive_skb_list+0x4f/0x4a0 [ 71.562815][ T6683] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 71.564475][ T6683] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 71.566290][ T6683] ? bpf_test_timer_continue+0x150/0x3d0 [ 71.567798][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 71.569164][ T6683] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 71.570664][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 71.572237][ T6683] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 71.573814][ T6683] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 71.575330][ T6683] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 71.576663][ T6683] ? 0xffffffffa00045c0 [ 71.577737][ T6683] ? 0xffffffffa00045c0 [ 71.578814][ T6683] ? 0xffffffffa00045c0 [ 71.579926][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 71.581452][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 71.582919][ T6683] ? lock_acquire+0x2f/0xb0 [ 71.584200][ T6683] ? __fget_files+0x40/0x3f0 [ 71.585479][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 71.587082][ T6683] ? fput+0x30/0x390 [ 71.588028][ T6683] ? __bpf_prog_get+0xa0/0x290 [ 71.589253][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 71.590764][ T6683] __sys_bpf+0xfc6/0x49a0 [ 71.592046][ T6683] ? __pfx___sys_bpf+0x10/0x10 [ 71.593416][ T6683] ? __schedule+0xe5d/0x5730 [ 71.594975][ T6683] ? __fget_files+0x23a/0x3f0 [ 71.596220][ T6683] ? do_futex+0x123/0x350 [ 71.597321][ T6683] ? __pfx_do_futex+0x10/0x10 [ 71.598785][ T6683] ? xfd_validate_state+0x5d/0x180 [ 71.600506][ T6683] ? rcu_is_watching+0x12/0xc0 [ 71.601841][ T6683] __x64_sys_bpf+0x78/0xc0 [ 71.603107][ T6683] ? lockdep_hardirqs_on+0x7c/0x110 [ 71.604567][ T6683] do_syscall_64+0xcd/0x250 [ 71.605901][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.607585][ T6683] RIP: 0033:0x7f574217e719 [ 71.608801][ T6683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.614028][ T6683] RSP: 002b:00007f5742e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 71.616726][ T6683] RAX: ffffffffffffffda RBX: 00007f5742336058 RCX: 00007f574217e719 [ 71.619056][ T6683] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 71.621213][ T6683] RBP: 00007f57421f132e R08: 0000000000000000 R09: 0000000000000000 [ 71.623491][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.625633][ T6683] R13: 0000000000000000 R14: 00007f5742336058 R15: 00007ffe5115f908 [ 71.627986][ T6683] [ 71.628941][ T6683] BUG: Bad page state in process syz.2.194 pfn:3f549 [ 71.631127][ T6683] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x700000002 pfn:0x3f549 [ 71.633836][ T6683] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 71.636132][ T6683] raw: 00fff00000000000 dead000000000040 ffff88802a52e000 0000000000000000 [ 71.638810][ T6683] raw: 0000000700000002 0000000000000001 00000000ffffffff 0000000000000000 [ 71.640985][ T6683] page dumped because: page_pool leak [ 71.642380][ T6683] page_owner tracks the page as allocated [ 71.643798][ T6683] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6683, tgid 6674 (syz.2.194), ts 67591076623, free_ts 67588997986 [ 71.648101][ T6683] post_alloc_hook+0x2d1/0x350 [ 71.649340][ T6683] get_page_from_freelist+0x101e/0x3070 [ 71.650752][ T6683] __alloc_pages_noprof+0x223/0x25a0 [ 71.652048][ T6683] alloc_pages_bulk_noprof+0x77c/0x1110 [ 71.653462][ T6683] __page_pool_alloc_pages_slow+0x18f/0x770 [ 71.655071][ T6683] page_pool_alloc_netmem+0xc4/0x160 [ 71.656534][ T6683] page_pool_alloc_pages+0x1a/0x60 [ 71.657828][ T6683] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 71.659509][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 71.660994][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 71.662596][ T6683] __sys_bpf+0xfc6/0x49a0 [ 71.663871][ T6683] __x64_sys_bpf+0x78/0xc0 [ 71.665220][ T6683] do_syscall_64+0xcd/0x250 [ 71.666577][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.668177][ T6683] page last free pid 6671 tgid 6669 stack trace: [ 71.669902][ T6683] free_unref_page+0x5f4/0xdc0 [ 71.671343][ T6683] __folio_put+0x30d/0x3d0 [ 71.672612][ T6683] put_page+0x21e/0x280 [ 71.673689][ T6683] page_pool_return_page+0x400/0x520 [ 71.675637][ T6683] page_pool_release+0xf4/0x7d0 [ 71.677224][ T6683] page_pool_destroy+0x10a/0x4c0 [ 71.678524][ T6683] bpf_test_run_xdp_live+0x3a1/0x500 [ 71.679819][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 71.681352][ T6683] __sys_bpf+0xfc6/0x49a0 [ 71.682542][ T6683] __x64_sys_bpf+0x78/0xc0 [ 71.683725][ T6683] do_syscall_64+0xcd/0x250 [ 71.684873][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.686618][ T6683] Modules linked in: [ 71.687651][ T6683] CPU: 1 UID: 0 PID: 6683 Comm: syz.2.194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 71.690697][ T6683] Tainted: [B]=BAD_PAGE [ 71.692034][ T6683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 71.695101][ T6683] Call Trace: [ 71.696164][ T6683] [ 71.697624][ T6683] dump_stack_lvl+0x16c/0x1f0 [ 71.698870][ T6683] bad_page+0xb3/0x1f0 [ 71.699983][ T6683] ? __pfx_bad_page+0x10/0x10 [ 71.701177][ T6683] ? page_bad_reason+0x9d/0x1e0 [ 71.702445][ T6683] free_unref_page+0x657/0xdc0 [ 71.703670][ T6683] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 71.705210][ T6683] ? __phys_addr+0xc6/0x150 [ 71.706341][ T6683] skb_free_head+0xa0/0x1d0 [ 71.707494][ T6683] skb_release_data+0x560/0x730 [ 71.708731][ T6683] sk_skb_reason_drop+0x129/0x1a0 [ 71.709985][ T6683] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 71.711937][ T6683] ? kernel_text_address+0x8d/0x100 [ 71.713927][ T6683] ? hlock_class+0x4e/0x130 [ 71.715143][ T6683] ? __lock_acquire+0x163e/0x3ce0 [ 71.716738][ T6683] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 71.719022][ T6683] ? hlock_class+0x4e/0x130 [ 71.720385][ T6683] ? __lock_acquire+0xbdd/0x3ce0 [ 71.721721][ T6683] ? __pfx___lock_acquire+0x10/0x10 [ 71.723356][ T6683] __netif_receive_skb_list_core+0x357/0x950 [ 71.725042][ T6683] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 71.726782][ T6683] ? trace_lock_acquire+0x14a/0x1d0 [ 71.728381][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 71.730415][ T6683] ? lock_acquire+0x2f/0xb0 [ 71.731851][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 71.733974][ T6683] netif_receive_skb_list_internal+0x753/0xdb0 [ 71.736127][ T6683] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 71.738799][ T6683] ? __pfx_eth_type_trans+0x10/0x10 [ 71.740217][ T6683] ? __build_skb_around+0x278/0x3b0 [ 71.741613][ T6683] netif_receive_skb_list+0x4f/0x4a0 [ 71.743116][ T6683] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 71.744805][ T6683] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 71.746547][ T6683] ? bpf_test_timer_continue+0x150/0x3d0 [ 71.748028][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 71.749335][ T6683] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 71.750883][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 71.752713][ T6683] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 71.754583][ T6683] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 71.756378][ T6683] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 71.758651][ T6683] ? 0xffffffffa00045c0 [ 71.759821][ T6683] ? 0xffffffffa00045c0 [ 71.760947][ T6683] ? 0xffffffffa00045c0 [ 71.762060][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 71.763682][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 71.765070][ T6683] ? lock_acquire+0x2f/0xb0 [ 71.766353][ T6683] ? __fget_files+0x40/0x3f0 [ 71.767656][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 71.769266][ T6683] ? fput+0x30/0x390 [ 71.770317][ T6683] ? __bpf_prog_get+0xa0/0x290 [ 71.771589][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 71.773167][ T6683] __sys_bpf+0xfc6/0x49a0 [ 71.774473][ T6683] ? __pfx___sys_bpf+0x10/0x10 [ 71.775930][ T6683] ? __schedule+0xe5d/0x5730 [ 71.777155][ T6683] ? __fget_files+0x23a/0x3f0 [ 71.778429][ T6683] ? do_futex+0x123/0x350 [ 71.779560][ T6683] ? __pfx_do_futex+0x10/0x10 [ 71.780893][ T6683] ? xfd_validate_state+0x5d/0x180 [ 71.782220][ T6683] ? rcu_is_watching+0x12/0xc0 [ 71.783465][ T6683] __x64_sys_bpf+0x78/0xc0 [ 71.784609][ T6683] ? lockdep_hardirqs_on+0x7c/0x110 [ 71.786031][ T6683] do_syscall_64+0xcd/0x250 [ 71.787328][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.788853][ T6683] RIP: 0033:0x7f574217e719 [ 71.790245][ T6683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.796006][ T6683] RSP: 002b:00007f5742e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 71.798659][ T6683] RAX: ffffffffffffffda RBX: 00007f5742336058 RCX: 00007f574217e719 [ 71.800729][ T6683] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 71.802839][ T6683] RBP: 00007f57421f132e R08: 0000000000000000 R09: 0000000000000000 [ 71.805157][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.807265][ T6683] R13: 0000000000000000 R14: 00007f5742336058 R15: 00007ffe5115f908 [ 71.809477][ T6683] [ 71.810435][ T6683] BUG: Bad page state in process syz.2.194 pfn:4afae [ 71.812358][ T6683] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804afafe00 pfn:0x4afae [ 71.815549][ T6683] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 71.817442][ T6683] raw: 00fff00000000000 dead000000000040 ffff88802a52e000 0000000000000000 [ 71.819768][ T6683] raw: ffff88804afafe00 0000000000000001 00000000ffffffff 0000000000000000 [ 71.821886][ T6683] page dumped because: page_pool leak [ 71.823270][ T6683] page_owner tracks the page as allocated [ 71.824809][ T6683] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6683, tgid 6674 (syz.2.194), ts 67591072395, free_ts 67589003546 [ 71.829248][ T6683] post_alloc_hook+0x2d1/0x350 [ 71.830664][ T6683] get_page_from_freelist+0x101e/0x3070 [ 71.832184][ T6683] __alloc_pages_noprof+0x223/0x25a0 [ 71.833665][ T6683] alloc_pages_bulk_noprof+0x77c/0x1110 [ 71.835433][ T6683] __page_pool_alloc_pages_slow+0x18f/0x770 [ 71.837263][ T6683] page_pool_alloc_netmem+0xc4/0x160 [ 71.838902][ T6683] page_pool_alloc_pages+0x1a/0x60 [ 71.840331][ T6683] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 71.842114][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 71.843623][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 71.845215][ T6683] __sys_bpf+0xfc6/0x49a0 [ 71.846418][ T6683] __x64_sys_bpf+0x78/0xc0 [ 71.847676][ T6683] do_syscall_64+0xcd/0x250 [ 71.848920][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.850485][ T6683] page last free pid 6671 tgid 6669 stack trace: [ 71.852220][ T6683] free_unref_page+0x5f4/0xdc0 [ 71.853565][ T6683] __folio_put+0x30d/0x3d0 [ 71.855039][ T6683] put_page+0x21e/0x280 [ 71.856236][ T6683] page_pool_return_page+0x400/0x520 [ 71.857677][ T6683] page_pool_release+0xf4/0x7d0 [ 71.860266][ T6683] page_pool_destroy+0x10a/0x4c0 [ 71.861698][ T6683] bpf_test_run_xdp_live+0x3a1/0x500 [ 71.863211][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 71.864810][ T6683] __sys_bpf+0xfc6/0x49a0 [ 71.866209][ T6683] __x64_sys_bpf+0x78/0xc0 [ 71.867563][ T6683] do_syscall_64+0xcd/0x250 [ 71.868922][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.870715][ T6683] Modules linked in: [ 71.872136][ T6683] CPU: 1 UID: 0 PID: 6683 Comm: syz.2.194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 71.875889][ T6683] Tainted: [B]=BAD_PAGE [ 71.877000][ T6683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 71.879963][ T6683] Call Trace: [ 71.881039][ T6683] [ 71.881904][ T6683] dump_stack_lvl+0x16c/0x1f0 [ 71.883168][ T6683] bad_page+0xb3/0x1f0 [ 71.884319][ T6683] ? __pfx_bad_page+0x10/0x10 [ 71.885596][ T6683] ? page_bad_reason+0x9d/0x1e0 [ 71.886906][ T6683] free_unref_page+0x657/0xdc0 [ 71.888246][ T6683] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 71.889935][ T6683] ? __phys_addr+0xc6/0x150 [ 71.891295][ T6683] skb_free_head+0xa0/0x1d0 [ 71.892657][ T6683] skb_release_data+0x560/0x730 [ 71.894107][ T6683] sk_skb_reason_drop+0x129/0x1a0 [ 71.895613][ T6683] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 71.897415][ T6683] ? kernel_text_address+0x8d/0x100 [ 71.898768][ T6683] ? hlock_class+0x4e/0x130 [ 71.899981][ T6683] ? __lock_acquire+0x163e/0x3ce0 [ 71.901500][ T6683] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 71.903377][ T6683] ? hlock_class+0x4e/0x130 [ 71.904704][ T6683] ? __lock_acquire+0xbdd/0x3ce0 [ 71.906148][ T6683] ? __pfx___lock_acquire+0x10/0x10 [ 71.907713][ T6683] __netif_receive_skb_list_core+0x357/0x950 [ 71.909333][ T6683] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 71.911204][ T6683] ? trace_lock_acquire+0x14a/0x1d0 [ 71.912666][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 71.914485][ T6683] ? lock_acquire+0x2f/0xb0 [ 71.915766][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 71.917505][ T6683] netif_receive_skb_list_internal+0x753/0xdb0 [ 71.919145][ T6683] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 71.920934][ T6683] ? __pfx_eth_type_trans+0x10/0x10 [ 71.922440][ T6683] ? __build_skb_around+0x278/0x3b0 [ 71.923834][ T6683] netif_receive_skb_list+0x4f/0x4a0 [ 71.925224][ T6683] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 71.926978][ T6683] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 71.928791][ T6683] ? bpf_test_timer_continue+0x150/0x3d0 [ 71.930285][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 71.931844][ T6683] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 71.933732][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 71.935498][ T6683] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 71.937089][ T6683] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 71.938682][ T6683] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 71.940298][ T6683] ? 0xffffffffa00045c0 [ 71.941421][ T6683] ? 0xffffffffa00045c0 [ 71.942664][ T6683] ? 0xffffffffa00045c0 [ 71.943818][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 71.945462][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 71.946962][ T6683] ? lock_acquire+0x2f/0xb0 [ 71.948190][ T6683] ? __fget_files+0x40/0x3f0 [ 71.949490][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 71.951375][ T6683] ? fput+0x30/0x390 [ 71.952694][ T6683] ? __bpf_prog_get+0xa0/0x290 [ 71.954415][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 71.956481][ T6683] __sys_bpf+0xfc6/0x49a0 [ 71.957768][ T6683] ? __pfx___sys_bpf+0x10/0x10 [ 71.959127][ T6683] ? __schedule+0xe5d/0x5730 [ 71.960679][ T6683] ? __fget_files+0x23a/0x3f0 [ 71.962164][ T6683] ? do_futex+0x123/0x350 [ 71.963490][ T6683] ? __pfx_do_futex+0x10/0x10 [ 71.964828][ T6683] ? xfd_validate_state+0x5d/0x180 [ 71.966143][ T6683] ? rcu_is_watching+0x12/0xc0 [ 71.967451][ T6683] __x64_sys_bpf+0x78/0xc0 [ 71.968641][ T6683] ? lockdep_hardirqs_on+0x7c/0x110 [ 71.970001][ T6683] do_syscall_64+0xcd/0x250 [ 71.971217][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.972744][ T6683] RIP: 0033:0x7f574217e719 [ 71.973850][ T6683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.979315][ T6683] RSP: 002b:00007f5742e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 71.981575][ T6683] RAX: ffffffffffffffda RBX: 00007f5742336058 RCX: 00007f574217e719 [ 71.983708][ T6683] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 71.985791][ T6683] RBP: 00007f57421f132e R08: 0000000000000000 R09: 0000000000000000 [ 71.987901][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.990118][ T6683] R13: 0000000000000000 R14: 00007f5742336058 R15: 00007ffe5115f908 [ 71.992336][ T6683] [ 71.993281][ T6683] BUG: Bad page state in process syz.2.194 pfn:4afaf [ 71.995412][ T6683] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000002 pfn:0x4afaf [ 71.998384][ T6683] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 72.000595][ T6683] raw: 00fff00000000000 dead000000000040 ffff88802a52e000 0000000000000000 [ 72.003332][ T6683] raw: ffff888000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 72.005939][ T6683] page dumped because: page_pool leak [ 72.007349][ T6683] page_owner tracks the page as allocated [ 72.008826][ T6683] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6683, tgid 6674 (syz.2.194), ts 67591067706, free_ts 67589008013 [ 72.013187][ T6683] post_alloc_hook+0x2d1/0x350 [ 72.014493][ T6683] get_page_from_freelist+0x101e/0x3070 [ 72.016173][ T6683] __alloc_pages_noprof+0x223/0x25a0 [ 72.017582][ T6683] alloc_pages_bulk_noprof+0x77c/0x1110 [ 72.019050][ T6683] __page_pool_alloc_pages_slow+0x18f/0x770 [ 72.020592][ T6683] page_pool_alloc_netmem+0xc4/0x160 [ 72.021927][ T6683] page_pool_alloc_pages+0x1a/0x60 [ 72.023381][ T6683] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 72.025056][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 72.026530][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 72.027914][ T6683] __sys_bpf+0xfc6/0x49a0 [ 72.029044][ T6683] __x64_sys_bpf+0x78/0xc0 [ 72.030209][ T6683] do_syscall_64+0xcd/0x250 [ 72.031411][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.033114][ T6683] page last free pid 6671 tgid 6669 stack trace: [ 72.034783][ T6683] free_unref_page+0x5f4/0xdc0 [ 72.036120][ T6683] __folio_put+0x30d/0x3d0 [ 72.037423][ T6683] put_page+0x21e/0x280 [ 72.038509][ T6683] page_pool_return_page+0x400/0x520 [ 72.039959][ T6683] page_pool_release+0xf4/0x7d0 [ 72.041345][ T6683] page_pool_destroy+0x10a/0x4c0 [ 72.042679][ T6683] bpf_test_run_xdp_live+0x3a1/0x500 [ 72.044174][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 72.045728][ T6683] __sys_bpf+0xfc6/0x49a0 [ 72.046928][ T6683] __x64_sys_bpf+0x78/0xc0 [ 72.048065][ T6683] do_syscall_64+0xcd/0x250 [ 72.049267][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.050812][ T6683] Modules linked in: [ 72.051952][ T6683] CPU: 1 UID: 0 PID: 6683 Comm: syz.2.194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 72.055279][ T6683] Tainted: [B]=BAD_PAGE [ 72.056357][ T6683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 72.059410][ T6683] Call Trace: [ 72.060294][ T6683] [ 72.061078][ T6683] dump_stack_lvl+0x16c/0x1f0 [ 72.062461][ T6683] bad_page+0xb3/0x1f0 [ 72.063553][ T6683] ? __pfx_bad_page+0x10/0x10 [ 72.064798][ T6683] ? page_bad_reason+0x9d/0x1e0 [ 72.066111][ T6683] free_unref_page+0x657/0xdc0 [ 72.067377][ T6683] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 72.068968][ T6683] ? __phys_addr+0xc6/0x150 [ 72.070175][ T6683] skb_free_head+0xa0/0x1d0 [ 72.071696][ T6683] skb_release_data+0x560/0x730 [ 72.072977][ T6683] sk_skb_reason_drop+0x129/0x1a0 [ 72.074334][ T6683] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 72.076207][ T6683] ? kernel_text_address+0x8d/0x100 [ 72.077539][ T6683] ? hlock_class+0x4e/0x130 [ 72.078757][ T6683] ? __lock_acquire+0x163e/0x3ce0 [ 72.080074][ T6683] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 72.082069][ T6683] ? hlock_class+0x4e/0x130 [ 72.083310][ T6683] ? __lock_acquire+0xbdd/0x3ce0 [ 72.084631][ T6683] ? __pfx___lock_acquire+0x10/0x10 [ 72.086044][ T6683] __netif_receive_skb_list_core+0x357/0x950 [ 72.087656][ T6683] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 72.089366][ T6683] ? trace_lock_acquire+0x14a/0x1d0 [ 72.090835][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 72.092637][ T6683] ? lock_acquire+0x2f/0xb0 [ 72.093805][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 72.095699][ T6683] netif_receive_skb_list_internal+0x753/0xdb0 [ 72.097510][ T6683] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 72.099760][ T6683] ? __pfx_eth_type_trans+0x10/0x10 [ 72.101472][ T6683] ? __build_skb_around+0x278/0x3b0 [ 72.103080][ T6683] netif_receive_skb_list+0x4f/0x4a0 [ 72.104836][ T6683] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 72.107166][ T6683] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 72.109587][ T6683] ? bpf_test_timer_continue+0x150/0x3d0 [ 72.111646][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 72.113316][ T6683] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 72.115234][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 72.117147][ T6683] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 72.118983][ T6683] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 72.120992][ T6683] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 72.122693][ T6683] ? 0xffffffffa00045c0 [ 72.123982][ T6683] ? 0xffffffffa00045c0 [ 72.125278][ T6683] ? 0xffffffffa00045c0 [ 72.126579][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 72.128403][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 72.130053][ T6683] ? lock_acquire+0x2f/0xb0 [ 72.131773][ T6683] ? __fget_files+0x40/0x3f0 [ 72.133228][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 72.135081][ T6683] ? fput+0x30/0x390 [ 72.136316][ T6683] ? __bpf_prog_get+0xa0/0x290 [ 72.137979][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 72.139819][ T6683] __sys_bpf+0xfc6/0x49a0 [ 72.141183][ T6683] ? __pfx___sys_bpf+0x10/0x10 [ 72.142694][ T6683] ? __schedule+0xe5d/0x5730 [ 72.144137][ T6683] ? __fget_files+0x23a/0x3f0 [ 72.145609][ T6683] ? do_futex+0x123/0x350 [ 72.146954][ T6683] ? __pfx_do_futex+0x10/0x10 [ 72.148420][ T6683] ? xfd_validate_state+0x5d/0x180 [ 72.149995][ T6683] ? rcu_is_watching+0x12/0xc0 [ 72.151501][ T6683] __x64_sys_bpf+0x78/0xc0 [ 72.152884][ T6683] ? lockdep_hardirqs_on+0x7c/0x110 [ 72.154617][ T6683] do_syscall_64+0xcd/0x250 [ 72.156175][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.158308][ T6683] RIP: 0033:0x7f574217e719 [ 72.160111][ T6683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.166301][ T6683] RSP: 002b:00007f5742e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 72.168884][ T6683] RAX: ffffffffffffffda RBX: 00007f5742336058 RCX: 00007f574217e719 [ 72.171338][ T6683] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 72.173778][ T6683] RBP: 00007f57421f132e R08: 0000000000000000 R09: 0000000000000000 [ 72.176235][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.178344][ T6683] R13: 0000000000000000 R14: 00007f5742336058 R15: 00007ffe5115f908 [ 72.181086][ T6683] [ 72.182157][ T6683] BUG: Bad page state in process syz.2.194 pfn:4c372 [ 72.184547][ T6683] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804c373e00 pfn:0x4c372 [ 72.187691][ T6683] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 72.189927][ T6683] raw: 00fff00000000000 dead000000000040 ffff88802a52e000 0000000000000000 [ 72.192553][ T6683] raw: ffff88804c373e00 0000000000000001 00000000ffffffff 0000000000000000 [ 72.194937][ T6683] page dumped because: page_pool leak [ 72.196718][ T6683] page_owner tracks the page as allocated [ 72.198415][ T6683] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6683, tgid 6674 (syz.2.194), ts 67591062896, free_ts 67589012837 [ 72.203147][ T6683] post_alloc_hook+0x2d1/0x350 [ 72.204394][ T6683] get_page_from_freelist+0x101e/0x3070 [ 72.205866][ T6683] __alloc_pages_noprof+0x223/0x25a0 [ 72.207237][ T6683] alloc_pages_bulk_noprof+0x77c/0x1110 [ 72.208670][ T6683] __page_pool_alloc_pages_slow+0x18f/0x770 [ 72.210211][ T6683] page_pool_alloc_netmem+0xc4/0x160 [ 72.211596][ T6683] page_pool_alloc_pages+0x1a/0x60 [ 72.212930][ T6683] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 72.214559][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 72.216317][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 72.217724][ T6683] __sys_bpf+0xfc6/0x49a0 [ 72.218877][ T6683] __x64_sys_bpf+0x78/0xc0 [ 72.220058][ T6683] do_syscall_64+0xcd/0x250 [ 72.221268][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.222814][ T6683] page last free pid 6671 tgid 6669 stack trace: [ 72.224422][ T6683] free_unref_page+0x5f4/0xdc0 [ 72.226120][ T6683] __folio_put+0x30d/0x3d0 [ 72.227395][ T6683] put_page+0x21e/0x280 [ 72.228552][ T6683] page_pool_return_page+0x400/0x520 [ 72.229942][ T6683] page_pool_release+0xf4/0x7d0 [ 72.231329][ T6683] page_pool_destroy+0x10a/0x4c0 [ 72.232985][ T6683] bpf_test_run_xdp_live+0x3a1/0x500 [ 72.234859][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 72.236518][ T6683] __sys_bpf+0xfc6/0x49a0 [ 72.237927][ T6683] __x64_sys_bpf+0x78/0xc0 [ 72.239183][ T6683] do_syscall_64+0xcd/0x250 [ 72.240531][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.242106][ T6683] Modules linked in: [ 72.243180][ T6683] CPU: 1 UID: 0 PID: 6683 Comm: syz.2.194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 72.246624][ T6683] Tainted: [B]=BAD_PAGE [ 72.247739][ T6683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 72.250759][ T6683] Call Trace: [ 72.251703][ T6683] [ 72.252563][ T6683] dump_stack_lvl+0x16c/0x1f0 [ 72.253946][ T6683] bad_page+0xb3/0x1f0 [ 72.255282][ T6683] ? __pfx_bad_page+0x10/0x10 [ 72.256616][ T6683] ? page_bad_reason+0x9d/0x1e0 [ 72.257977][ T6683] free_unref_page+0x657/0xdc0 [ 72.259310][ T6683] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 72.260949][ T6683] ? __phys_addr+0xc6/0x150 [ 72.262178][ T6683] skb_free_head+0xa0/0x1d0 [ 72.263428][ T6683] skb_release_data+0x560/0x730 [ 72.264724][ T6683] sk_skb_reason_drop+0x129/0x1a0 [ 72.266153][ T6683] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 72.267936][ T6683] ? kernel_text_address+0x8d/0x100 [ 72.269292][ T6683] ? hlock_class+0x4e/0x130 [ 72.270505][ T6683] ? __lock_acquire+0x163e/0x3ce0 [ 72.271806][ T6683] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 72.273647][ T6683] ? hlock_class+0x4e/0x130 [ 72.274860][ T6683] ? __lock_acquire+0xbdd/0x3ce0 [ 72.276498][ T6683] ? __pfx___lock_acquire+0x10/0x10 [ 72.277863][ T6683] __netif_receive_skb_list_core+0x357/0x950 [ 72.279450][ T6683] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 72.281144][ T6683] ? trace_lock_acquire+0x14a/0x1d0 [ 72.282559][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 72.284262][ T6683] ? lock_acquire+0x2f/0xb0 [ 72.285459][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 72.287110][ T6683] netif_receive_skb_list_internal+0x753/0xdb0 [ 72.288653][ T6683] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 72.290395][ T6683] ? __pfx_eth_type_trans+0x10/0x10 [ 72.291759][ T6683] ? __build_skb_around+0x278/0x3b0 [ 72.293272][ T6683] netif_receive_skb_list+0x4f/0x4a0 [ 72.294681][ T6683] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 72.296362][ T6683] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 72.298102][ T6683] ? bpf_test_timer_continue+0x150/0x3d0 [ 72.299681][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 72.301123][ T6683] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 72.302972][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 72.304617][ T6683] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 72.306182][ T6683] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 72.307724][ T6683] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 72.309104][ T6683] ? 0xffffffffa00045c0 [ 72.310175][ T6683] ? 0xffffffffa00045c0 [ 72.311492][ T6683] ? 0xffffffffa00045c0 [ 72.312740][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 72.315038][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 72.316530][ T6683] ? lock_acquire+0x2f/0xb0 [ 72.318089][ T6683] ? __fget_files+0x40/0x3f0 [ 72.319623][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 72.321499][ T6683] ? fput+0x30/0x390 [ 72.322746][ T6683] ? __bpf_prog_get+0xa0/0x290 [ 72.324290][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 72.326127][ T6683] __sys_bpf+0xfc6/0x49a0 [ 72.327320][ T6683] ? __pfx___sys_bpf+0x10/0x10 [ 72.328641][ T6683] ? __schedule+0xe5d/0x5730 [ 72.329927][ T6683] ? __fget_files+0x23a/0x3f0 [ 72.331228][ T6683] ? do_futex+0x123/0x350 [ 72.332426][ T6683] ? __pfx_do_futex+0x10/0x10 [ 72.333708][ T6683] ? xfd_validate_state+0x5d/0x180 [ 72.335082][ T6683] ? rcu_is_watching+0x12/0xc0 [ 72.336328][ T6683] __x64_sys_bpf+0x78/0xc0 [ 72.337505][ T6683] ? lockdep_hardirqs_on+0x7c/0x110 [ 72.338870][ T6683] do_syscall_64+0xcd/0x250 [ 72.340080][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.341621][ T6683] RIP: 0033:0x7f574217e719 [ 72.342844][ T6683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.347863][ T6683] RSP: 002b:00007f5742e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 72.350057][ T6683] RAX: ffffffffffffffda RBX: 00007f5742336058 RCX: 00007f574217e719 [ 72.352207][ T6683] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 72.354942][ T6683] RBP: 00007f57421f132e R08: 0000000000000000 R09: 0000000000000000 [ 72.357111][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.359806][ T6683] R13: 0000000000000000 R14: 00007f5742336058 R15: 00007ffe5115f908 [ 72.362195][ T6683] [ 72.363141][ T6683] BUG: Bad page state in process syz.2.194 pfn:4c373 [ 72.364924][ T6683] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2 pfn:0x4c373 [ 72.367180][ T6683] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 72.369116][ T6683] raw: 00fff00000000000 dead000000000040 ffff88802a52e000 0000000000000000 [ 72.371804][ T6683] raw: 0000000000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 72.374029][ T6683] page dumped because: page_pool leak [ 72.375798][ T6683] page_owner tracks the page as allocated [ 72.377566][ T6683] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6683, tgid 6674 (syz.2.194), ts 67591058335, free_ts 67589016595 [ 72.382707][ T6683] post_alloc_hook+0x2d1/0x350 [ 72.384212][ T6683] get_page_from_freelist+0x101e/0x3070 [ 72.385752][ T6683] __alloc_pages_noprof+0x223/0x25a0 [ 72.387193][ T6683] alloc_pages_bulk_noprof+0x77c/0x1110 [ 72.388746][ T6683] __page_pool_alloc_pages_slow+0x18f/0x770 [ 72.390346][ T6683] page_pool_alloc_netmem+0xc4/0x160 [ 72.391739][ T6683] page_pool_alloc_pages+0x1a/0x60 [ 72.393095][ T6683] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 72.394767][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 72.396255][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 72.397659][ T6683] __sys_bpf+0xfc6/0x49a0 [ 72.399064][ T6683] __x64_sys_bpf+0x78/0xc0 [ 72.400564][ T6683] do_syscall_64+0xcd/0x250 [ 72.401774][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.403518][ T6683] page last free pid 6671 tgid 6669 stack trace: [ 72.405318][ T6683] free_unref_page+0x5f4/0xdc0 [ 72.406641][ T6683] __folio_put+0x30d/0x3d0 [ 72.407877][ T6683] put_page+0x21e/0x280 [ 72.409032][ T6683] page_pool_return_page+0x400/0x520 [ 72.410594][ T6683] page_pool_release+0xf4/0x7d0 [ 72.412023][ T6683] page_pool_destroy+0x10a/0x4c0 [ 72.413460][ T6683] bpf_test_run_xdp_live+0x3a1/0x500 [ 72.415088][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 72.416603][ T6683] __sys_bpf+0xfc6/0x49a0 [ 72.417789][ T6683] __x64_sys_bpf+0x78/0xc0 [ 72.419009][ T6683] do_syscall_64+0xcd/0x250 [ 72.420265][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.421836][ T6683] Modules linked in: [ 72.422954][ T6683] CPU: 1 UID: 0 PID: 6683 Comm: syz.2.194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 72.426060][ T6683] Tainted: [B]=BAD_PAGE [ 72.427162][ T6683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 72.429945][ T6683] Call Trace: [ 72.430858][ T6683] [ 72.431647][ T6683] dump_stack_lvl+0x16c/0x1f0 [ 72.433059][ T6683] bad_page+0xb3/0x1f0 [ 72.434147][ T6683] ? __pfx_bad_page+0x10/0x10 [ 72.435452][ T6683] ? page_bad_reason+0x9d/0x1e0 [ 72.436744][ T6683] free_unref_page+0x657/0xdc0 [ 72.438225][ T6683] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 72.440259][ T6683] ? __phys_addr+0xc6/0x150 [ 72.441626][ T6683] skb_free_head+0xa0/0x1d0 [ 72.443092][ T6683] skb_release_data+0x560/0x730 [ 72.444538][ T6683] sk_skb_reason_drop+0x129/0x1a0 [ 72.446086][ T6683] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 72.448143][ T6683] ? kernel_text_address+0x8d/0x100 [ 72.449750][ T6683] ? hlock_class+0x4e/0x130 [ 72.450963][ T6683] ? __lock_acquire+0x163e/0x3ce0 [ 72.452304][ T6683] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 72.454129][ T6683] ? hlock_class+0x4e/0x130 [ 72.455369][ T6683] ? __lock_acquire+0xbdd/0x3ce0 [ 72.456692][ T6683] ? __pfx___lock_acquire+0x10/0x10 [ 72.458032][ T6683] __netif_receive_skb_list_core+0x357/0x950 [ 72.459532][ T6683] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 72.461194][ T6683] ? trace_lock_acquire+0x14a/0x1d0 [ 72.462536][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 72.464184][ T6683] ? lock_acquire+0x2f/0xb0 [ 72.465329][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 72.466952][ T6683] netif_receive_skb_list_internal+0x753/0xdb0 [ 72.468578][ T6683] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 72.470308][ T6683] ? __pfx_eth_type_trans+0x10/0x10 [ 72.471647][ T6683] ? __build_skb_around+0x278/0x3b0 [ 72.472982][ T6683] netif_receive_skb_list+0x4f/0x4a0 [ 72.474649][ T6683] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 72.476506][ T6683] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 72.478679][ T6683] ? bpf_test_timer_continue+0x150/0x3d0 [ 72.480582][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 72.482355][ T6683] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 72.483885][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 72.485435][ T6683] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 72.487051][ T6683] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 72.488578][ T6683] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 72.489939][ T6683] ? 0xffffffffa00045c0 [ 72.491024][ T6683] ? 0xffffffffa00045c0 [ 72.492097][ T6683] ? 0xffffffffa00045c0 [ 72.493171][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 72.495569][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 72.497042][ T6683] ? lock_acquire+0x2f/0xb0 [ 72.498402][ T6683] ? __fget_files+0x40/0x3f0 [ 72.499639][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 72.501189][ T6683] ? fput+0x30/0x390 [ 72.502248][ T6683] ? __bpf_prog_get+0xa0/0x290 [ 72.503652][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 72.505419][ T6683] __sys_bpf+0xfc6/0x49a0 [ 72.506744][ T6683] ? __pfx___sys_bpf+0x10/0x10 [ 72.508175][ T6683] ? __schedule+0xe5d/0x5730 [ 72.509595][ T6683] ? __fget_files+0x23a/0x3f0 [ 72.511146][ T6683] ? do_futex+0x123/0x350 [ 72.512625][ T6683] ? __pfx_do_futex+0x10/0x10 [ 72.514130][ T6683] ? xfd_validate_state+0x5d/0x180 [ 72.515618][ T6683] ? rcu_is_watching+0x12/0xc0 [ 72.517090][ T6683] __x64_sys_bpf+0x78/0xc0 [ 72.518403][ T6683] ? lockdep_hardirqs_on+0x7c/0x110 [ 72.519790][ T6683] do_syscall_64+0xcd/0x250 [ 72.521015][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.522966][ T6683] RIP: 0033:0x7f574217e719 [ 72.524137][ T6683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.529342][ T6683] RSP: 002b:00007f5742e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 72.531577][ T6683] RAX: ffffffffffffffda RBX: 00007f5742336058 RCX: 00007f574217e719 [ 72.533726][ T6683] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 72.536302][ T6683] RBP: 00007f57421f132e R08: 0000000000000000 R09: 0000000000000000 [ 72.538982][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.541396][ T6683] R13: 0000000000000000 R14: 00007f5742336058 R15: 00007ffe5115f908 [ 72.543601][ T6683] [ 72.544537][ T6683] BUG: Bad page state in process syz.2.194 pfn:3f4b2 [ 72.546155][ T6683] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803f4b3e00 pfn:0x3f4b2 [ 72.548444][ T6683] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 72.550051][ T6683] raw: 00fff00000000000 dead000000000040 ffff88802a52e000 0000000000000000 [ 72.552020][ T6683] raw: ffff88803f4b3e00 0000000000000001 00000000ffffffff 0000000000000000 [ 72.554133][ T6683] page dumped because: page_pool leak [ 72.555481][ T6683] page_owner tracks the page as allocated [ 72.557038][ T6683] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6683, tgid 6674 (syz.2.194), ts 67591053953, free_ts 67589020398 [ 72.561267][ T6683] post_alloc_hook+0x2d1/0x350 [ 72.562813][ T6683] get_page_from_freelist+0x101e/0x3070 [ 72.564732][ T6683] __alloc_pages_noprof+0x223/0x25a0 [ 72.566480][ T6683] alloc_pages_bulk_noprof+0x77c/0x1110 [ 72.567934][ T6683] __page_pool_alloc_pages_slow+0x18f/0x770 [ 72.569490][ T6683] page_pool_alloc_netmem+0xc4/0x160 [ 72.570885][ T6683] page_pool_alloc_pages+0x1a/0x60 [ 72.572223][ T6683] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 72.573826][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 72.575284][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 72.576703][ T6683] __sys_bpf+0xfc6/0x49a0 [ 72.577845][ T6683] __x64_sys_bpf+0x78/0xc0 [ 72.579049][ T6683] do_syscall_64+0xcd/0x250 [ 72.580253][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.581811][ T6683] page last free pid 6671 tgid 6669 stack trace: [ 72.583531][ T6683] free_unref_page+0x5f4/0xdc0 [ 72.584792][ T6683] __folio_put+0x30d/0x3d0 [ 72.585995][ T6683] put_page+0x21e/0x280 [ 72.587106][ T6683] page_pool_return_page+0x400/0x520 [ 72.588545][ T6683] page_pool_release+0xf4/0x7d0 [ 72.589837][ T6683] page_pool_destroy+0x10a/0x4c0 [ 72.591198][ T6683] bpf_test_run_xdp_live+0x3a1/0x500 [ 72.592771][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 72.594583][ T6683] __sys_bpf+0xfc6/0x49a0 [ 72.596033][ T6683] __x64_sys_bpf+0x78/0xc0 [ 72.597410][ T6683] do_syscall_64+0xcd/0x250 [ 72.598785][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.601031][ T6683] Modules linked in: [ 72.602069][ T6683] CPU: 1 UID: 0 PID: 6683 Comm: syz.2.194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 72.605233][ T6683] Tainted: [B]=BAD_PAGE [ 72.606405][ T6683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 72.609326][ T6683] Call Trace: [ 72.610221][ T6683] [ 72.611025][ T6683] dump_stack_lvl+0x16c/0x1f0 [ 72.612278][ T6683] bad_page+0xb3/0x1f0 [ 72.613382][ T6683] ? __pfx_bad_page+0x10/0x10 [ 72.614645][ T6683] ? page_bad_reason+0x9d/0x1e0 [ 72.615923][ T6683] free_unref_page+0x657/0xdc0 [ 72.617239][ T6683] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 72.618935][ T6683] ? __phys_addr+0xc6/0x150 [ 72.620216][ T6683] skb_free_head+0xa0/0x1d0 [ 72.621509][ T6683] skb_release_data+0x560/0x730 [ 72.622924][ T6683] sk_skb_reason_drop+0x129/0x1a0 [ 72.624340][ T6683] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 72.626161][ T6683] ? kernel_text_address+0x8d/0x100 [ 72.627539][ T6683] ? hlock_class+0x4e/0x130 [ 72.628744][ T6683] ? __lock_acquire+0x163e/0x3ce0 [ 72.630066][ T6683] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 72.632016][ T6683] ? hlock_class+0x4e/0x130 [ 72.633232][ T6683] ? __lock_acquire+0xbdd/0x3ce0 [ 72.634591][ T6683] ? __pfx___lock_acquire+0x10/0x10 [ 72.636030][ T6683] __netif_receive_skb_list_core+0x357/0x950 [ 72.637706][ T6683] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 72.639532][ T6683] ? trace_lock_acquire+0x14a/0x1d0 [ 72.640996][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 72.642788][ T6683] ? lock_acquire+0x2f/0xb0 [ 72.644073][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 72.645753][ T6683] netif_receive_skb_list_internal+0x753/0xdb0 [ 72.647396][ T6683] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 72.649135][ T6683] ? __pfx_eth_type_trans+0x10/0x10 [ 72.650632][ T6683] ? __build_skb_around+0x278/0x3b0 [ 72.652006][ T6683] netif_receive_skb_list+0x4f/0x4a0 [ 72.653445][ T6683] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 72.655067][ T6683] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 72.656804][ T6683] ? bpf_test_timer_continue+0x150/0x3d0 [ 72.658296][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 72.659684][ T6683] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 72.661483][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 72.663056][ T6683] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 72.664701][ T6683] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 72.666303][ T6683] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 72.667696][ T6683] ? 0xffffffffa00045c0 [ 72.668800][ T6683] ? 0xffffffffa00045c0 [ 72.669905][ T6683] ? 0xffffffffa00045c0 [ 72.671012][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 72.672536][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 72.674091][ T6683] ? lock_acquire+0x2f/0xb0 [ 72.675350][ T6683] ? __fget_files+0x40/0x3f0 [ 72.676662][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 72.678273][ T6683] ? fput+0x30/0x390 [ 72.679639][ T6683] ? __bpf_prog_get+0xa0/0x290 [ 72.681236][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 72.683045][ T6683] __sys_bpf+0xfc6/0x49a0 [ 72.684227][ T6683] ? __pfx___sys_bpf+0x10/0x10 [ 72.685502][ T6683] ? __schedule+0xe5d/0x5730 [ 72.686769][ T6683] ? __fget_files+0x23a/0x3f0 [ 72.688048][ T6683] ? do_futex+0x123/0x350 [ 72.689332][ T6683] ? __pfx_do_futex+0x10/0x10 [ 72.690588][ T6683] ? xfd_validate_state+0x5d/0x180 [ 72.691950][ T6683] ? rcu_is_watching+0x12/0xc0 [ 72.693240][ T6683] __x64_sys_bpf+0x78/0xc0 [ 72.694437][ T6683] ? lockdep_hardirqs_on+0x7c/0x110 [ 72.695811][ T6683] do_syscall_64+0xcd/0x250 [ 72.697020][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.698576][ T6683] RIP: 0033:0x7f574217e719 [ 72.699725][ T6683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.705054][ T6683] RSP: 002b:00007f5742e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 72.707209][ T6683] RAX: ffffffffffffffda RBX: 00007f5742336058 RCX: 00007f574217e719 [ 72.709299][ T6683] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 72.711378][ T6683] RBP: 00007f57421f132e R08: 0000000000000000 R09: 0000000000000000 [ 72.713391][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.715500][ T6683] R13: 0000000000000000 R14: 00007f5742336058 R15: 00007ffe5115f908 [ 72.717572][ T6683] [ 72.718487][ T6683] BUG: Bad page state in process syz.2.194 pfn:3f4b3 [ 72.720237][ T6683] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x700000002 pfn:0x3f4b3 [ 72.722703][ T6683] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 72.724598][ T6683] raw: 00fff00000000000 dead000000000040 ffff88802a52e000 0000000000000000 [ 72.726920][ T6683] raw: 0000000700000002 0000000000000001 00000000ffffffff 0000000000000000 [ 72.729147][ T6683] page dumped because: page_pool leak [ 72.730555][ T6683] page_owner tracks the page as allocated [ 72.732191][ T6683] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6683, tgid 6674 (syz.2.194), ts 67591049192, free_ts 67589024545 [ 72.737603][ T6683] post_alloc_hook+0x2d1/0x350 [ 72.738953][ T6683] get_page_from_freelist+0x101e/0x3070 [ 72.740596][ T6683] __alloc_pages_noprof+0x223/0x25a0 [ 72.742122][ T6683] alloc_pages_bulk_noprof+0x77c/0x1110 [ 72.743733][ T6683] __page_pool_alloc_pages_slow+0x18f/0x770 [ 72.745543][ T6683] page_pool_alloc_netmem+0xc4/0x160 [ 72.746954][ T6683] page_pool_alloc_pages+0x1a/0x60 [ 72.748298][ T6683] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 72.750061][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 72.751481][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 72.752904][ T6683] __sys_bpf+0xfc6/0x49a0 [ 72.754093][ T6683] __x64_sys_bpf+0x78/0xc0 [ 72.755363][ T6683] do_syscall_64+0xcd/0x250 [ 72.756576][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.758131][ T6683] page last free pid 6671 tgid 6669 stack trace: [ 72.759798][ T6683] free_unref_page+0x5f4/0xdc0 [ 72.761070][ T6683] __folio_put+0x30d/0x3d0 [ 72.762268][ T6683] put_page+0x21e/0x280 [ 72.763437][ T6683] page_pool_return_page+0x400/0x520 [ 72.764825][ T6683] page_pool_release+0xf4/0x7d0 [ 72.766161][ T6683] page_pool_destroy+0x10a/0x4c0 [ 72.767484][ T6683] bpf_test_run_xdp_live+0x3a1/0x500 [ 72.768874][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 72.770279][ T6683] __sys_bpf+0xfc6/0x49a0 [ 72.771436][ T6683] __x64_sys_bpf+0x78/0xc0 [ 72.772613][ T6683] do_syscall_64+0xcd/0x250 [ 72.773818][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.775498][ T6683] Modules linked in: [ 72.776581][ T6683] CPU: 1 UID: 0 PID: 6683 Comm: syz.2.194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 72.779736][ T6683] Tainted: [B]=BAD_PAGE [ 72.780794][ T6683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 72.783607][ T6683] Call Trace: [ 72.784493][ T6683] [ 72.785302][ T6683] dump_stack_lvl+0x16c/0x1f0 [ 72.787039][ T6683] bad_page+0xb3/0x1f0 [ 72.788500][ T6683] ? __pfx_bad_page+0x10/0x10 [ 72.790222][ T6683] ? page_bad_reason+0x9d/0x1e0 [ 72.792024][ T6683] free_unref_page+0x657/0xdc0 [ 72.793494][ T6683] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 72.795087][ T6683] ? __phys_addr+0xc6/0x150 [ 72.796285][ T6683] skb_free_head+0xa0/0x1d0 [ 72.797485][ T6683] skb_release_data+0x560/0x730 [ 72.798767][ T6683] sk_skb_reason_drop+0x129/0x1a0 [ 72.800083][ T6683] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 72.801831][ T6683] ? kernel_text_address+0x8d/0x100 [ 72.803227][ T6683] ? hlock_class+0x4e/0x130 [ 72.804424][ T6683] ? __lock_acquire+0x163e/0x3ce0 [ 72.805788][ T6683] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 72.807649][ T6683] ? hlock_class+0x4e/0x130 [ 72.808836][ T6683] ? __lock_acquire+0xbdd/0x3ce0 [ 72.810124][ T6683] ? __pfx___lock_acquire+0x10/0x10 [ 72.811621][ T6683] __netif_receive_skb_list_core+0x357/0x950 [ 72.813395][ T6683] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 72.815113][ T6683] ? trace_lock_acquire+0x14a/0x1d0 [ 72.816470][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 72.818127][ T6683] ? lock_acquire+0x2f/0xb0 [ 72.819442][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 72.821107][ T6683] netif_receive_skb_list_internal+0x753/0xdb0 [ 72.823064][ T6683] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 72.824833][ T6683] ? __pfx_eth_type_trans+0x10/0x10 [ 72.826211][ T6683] ? __build_skb_around+0x278/0x3b0 [ 72.827619][ T6683] netif_receive_skb_list+0x4f/0x4a0 [ 72.829060][ T6683] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 72.830769][ T6683] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 72.832570][ T6683] ? bpf_test_timer_continue+0x150/0x3d0 [ 72.834783][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 72.836518][ T6683] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 72.838053][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 72.839846][ T6683] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 72.841599][ T6683] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 72.843418][ T6683] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 72.844801][ T6683] ? 0xffffffffa00045c0 [ 72.845903][ T6683] ? 0xffffffffa00045c0 [ 72.846972][ T6683] ? 0xffffffffa00045c0 [ 72.848084][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 72.849646][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 72.851063][ T6683] ? lock_acquire+0x2f/0xb0 [ 72.852290][ T6683] ? __fget_files+0x40/0x3f0 [ 72.853511][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 72.855375][ T6683] ? fput+0x30/0x390 [ 72.856595][ T6683] ? __bpf_prog_get+0xa0/0x290 [ 72.857899][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 72.859677][ T6683] __sys_bpf+0xfc6/0x49a0 [ 72.860931][ T6683] ? __pfx___sys_bpf+0x10/0x10 [ 72.862191][ T6683] ? __schedule+0xe5d/0x5730 [ 72.863418][ T6683] ? __fget_files+0x23a/0x3f0 [ 72.864651][ T6683] ? do_futex+0x123/0x350 [ 72.865818][ T6683] ? __pfx_do_futex+0x10/0x10 [ 72.867129][ T6683] ? xfd_validate_state+0x5d/0x180 [ 72.868489][ T6683] ? rcu_is_watching+0x12/0xc0 [ 72.869769][ T6683] __x64_sys_bpf+0x78/0xc0 [ 72.870989][ T6683] ? lockdep_hardirqs_on+0x7c/0x110 [ 72.872362][ T6683] do_syscall_64+0xcd/0x250 [ 72.873556][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.875493][ T6683] RIP: 0033:0x7f574217e719 [ 72.876729][ T6683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.882621][ T6683] RSP: 002b:00007f5742e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 72.885093][ T6683] RAX: ffffffffffffffda RBX: 00007f5742336058 RCX: 00007f574217e719 [ 72.887334][ T6683] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 72.889420][ T6683] RBP: 00007f57421f132e R08: 0000000000000000 R09: 0000000000000000 [ 72.891478][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.893597][ T6683] R13: 0000000000000000 R14: 00007f5742336058 R15: 00007ffe5115f908 [ 72.896129][ T6683] [ 72.897115][ T6683] BUG: Bad page state in process syz.2.194 pfn:4b984 [ 72.899741][ T6683] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804b985e00 pfn:0x4b984 [ 72.903090][ T6683] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 72.905505][ T6683] raw: 00fff00000000000 dead000000000040 ffff88802a52e000 0000000000000000 [ 72.907761][ T6683] raw: ffff88804b985e00 0000000000000001 00000000ffffffff 0000000000000000 [ 72.910085][ T6683] page dumped because: page_pool leak [ 72.911661][ T6683] page_owner tracks the page as allocated [ 72.913379][ T6683] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6683, tgid 6674 (syz.2.194), ts 67591044805, free_ts 67589028574 [ 72.918298][ T6683] post_alloc_hook+0x2d1/0x350 [ 72.919674][ T6683] get_page_from_freelist+0x101e/0x3070 [ 72.921260][ T6683] __alloc_pages_noprof+0x223/0x25a0 [ 72.922697][ T6683] alloc_pages_bulk_noprof+0x77c/0x1110 [ 72.924183][ T6683] __page_pool_alloc_pages_slow+0x18f/0x770 [ 72.925854][ T6683] page_pool_alloc_netmem+0xc4/0x160 [ 72.927258][ T6683] page_pool_alloc_pages+0x1a/0x60 [ 72.928660][ T6683] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 72.930561][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 72.932482][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 72.934242][ T6683] __sys_bpf+0xfc6/0x49a0 [ 72.935871][ T6683] __x64_sys_bpf+0x78/0xc0 [ 72.937231][ T6683] do_syscall_64+0xcd/0x250 [ 72.938624][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.940364][ T6683] page last free pid 6671 tgid 6669 stack trace: [ 72.942013][ T6683] free_unref_page+0x5f4/0xdc0 [ 72.943336][ T6683] __folio_put+0x30d/0x3d0 [ 72.944524][ T6683] put_page+0x21e/0x280 [ 72.945694][ T6683] page_pool_return_page+0x400/0x520 [ 72.947088][ T6683] page_pool_release+0xf4/0x7d0 [ 72.948438][ T6683] page_pool_destroy+0x10a/0x4c0 [ 72.949743][ T6683] bpf_test_run_xdp_live+0x3a1/0x500 [ 72.951127][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 72.952611][ T6683] __sys_bpf+0xfc6/0x49a0 [ 72.953751][ T6683] __x64_sys_bpf+0x78/0xc0 [ 72.954950][ T6683] do_syscall_64+0xcd/0x250 [ 72.956351][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.958627][ T6683] Modules linked in: [ 72.959690][ T6683] CPU: 1 UID: 0 PID: 6683 Comm: syz.2.194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 72.962962][ T6683] Tainted: [B]=BAD_PAGE [ 72.964060][ T6683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 72.967000][ T6683] Call Trace: [ 72.967890][ T6683] [ 72.968668][ T6683] dump_stack_lvl+0x16c/0x1f0 [ 72.969926][ T6683] bad_page+0xb3/0x1f0 [ 72.971028][ T6683] ? __pfx_bad_page+0x10/0x10 [ 72.972263][ T6683] ? page_bad_reason+0x9d/0x1e0 [ 72.973574][ T6683] free_unref_page+0x657/0xdc0 [ 72.974830][ T6683] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 72.976455][ T6683] ? __phys_addr+0xc6/0x150 [ 72.977716][ T6683] skb_free_head+0xa0/0x1d0 [ 72.978989][ T6683] skb_release_data+0x560/0x730 [ 72.980343][ T6683] sk_skb_reason_drop+0x129/0x1a0 [ 72.981893][ T6683] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 72.984040][ T6683] ? kernel_text_address+0x8d/0x100 [ 72.985743][ T6683] ? hlock_class+0x4e/0x130 [ 72.987183][ T6683] ? __lock_acquire+0x163e/0x3ce0 [ 72.988518][ T6683] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 72.990381][ T6683] ? hlock_class+0x4e/0x130 [ 72.991581][ T6683] ? __lock_acquire+0xbdd/0x3ce0 [ 72.992887][ T6683] ? __pfx___lock_acquire+0x10/0x10 [ 72.994321][ T6683] __netif_receive_skb_list_core+0x357/0x950 [ 72.995938][ T6683] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 72.998025][ T6683] ? trace_lock_acquire+0x14a/0x1d0 [ 72.999616][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 73.001292][ T6683] ? lock_acquire+0x2f/0xb0 [ 73.002616][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 73.004316][ T6683] netif_receive_skb_list_internal+0x753/0xdb0 [ 73.005971][ T6683] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 73.007737][ T6683] ? __pfx_eth_type_trans+0x10/0x10 [ 73.009128][ T6683] ? __build_skb_around+0x278/0x3b0 [ 73.010514][ T6683] netif_receive_skb_list+0x4f/0x4a0 [ 73.011917][ T6683] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 73.013764][ T6683] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 73.015806][ T6683] ? bpf_test_timer_continue+0x150/0x3d0 [ 73.017591][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 73.019811][ T6683] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 73.021933][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 73.023580][ T6683] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 73.025183][ T6683] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 73.026739][ T6683] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 73.028130][ T6683] ? 0xffffffffa00045c0 [ 73.029233][ T6683] ? 0xffffffffa00045c0 [ 73.030345][ T6683] ? 0xffffffffa00045c0 [ 73.031438][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 73.032981][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 73.034419][ T6683] ? lock_acquire+0x2f/0xb0 [ 73.035635][ T6683] ? __fget_files+0x40/0x3f0 [ 73.036856][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 73.038401][ T6683] ? fput+0x30/0x390 [ 73.039687][ T6683] ? __bpf_prog_get+0xa0/0x290 [ 73.041059][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 73.042699][ T6683] __sys_bpf+0xfc6/0x49a0 [ 73.043871][ T6683] ? __pfx___sys_bpf+0x10/0x10 [ 73.045169][ T6683] ? __schedule+0xe5d/0x5730 [ 73.046421][ T6683] ? __fget_files+0x23a/0x3f0 [ 73.047789][ T6683] ? do_futex+0x123/0x350 [ 73.048988][ T6683] ? __pfx_do_futex+0x10/0x10 [ 73.050349][ T6683] ? xfd_validate_state+0x5d/0x180 [ 73.051852][ T6683] ? rcu_is_watching+0x12/0xc0 [ 73.053254][ T6683] __x64_sys_bpf+0x78/0xc0 [ 73.054746][ T6683] ? lockdep_hardirqs_on+0x7c/0x110 [ 73.056723][ T6683] do_syscall_64+0xcd/0x250 [ 73.058237][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.060075][ T6683] RIP: 0033:0x7f574217e719 [ 73.061362][ T6683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.066545][ T6683] RSP: 002b:00007f5742e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 73.068724][ T6683] RAX: ffffffffffffffda RBX: 00007f5742336058 RCX: 00007f574217e719 [ 73.070789][ T6683] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 73.072826][ T6683] RBP: 00007f57421f132e R08: 0000000000000000 R09: 0000000000000000 [ 73.074927][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.077734][ T6683] R13: 0000000000000000 R14: 00007f5742336058 R15: 00007ffe5115f908 [ 73.080678][ T6683] [ 73.081683][ T6683] BUG: Bad page state in process syz.2.194 pfn:4b985 [ 73.084177][ T6683] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2 pfn:0x4b985 [ 73.086589][ T6683] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 73.088499][ T6683] raw: 00fff00000000000 dead000000000040 ffff88802a52e000 0000000000000000 [ 73.090744][ T6683] raw: 0000000000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 73.093051][ T6683] page dumped because: page_pool leak [ 73.094542][ T6683] page_owner tracks the page as allocated [ 73.096259][ T6683] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6683, tgid 6674 (syz.2.194), ts 67591040159, free_ts 67589032805 [ 73.100715][ T6683] post_alloc_hook+0x2d1/0x350 [ 73.101992][ T6683] get_page_from_freelist+0x101e/0x3070 [ 73.103495][ T6683] __alloc_pages_noprof+0x223/0x25a0 [ 73.104895][ T6683] alloc_pages_bulk_noprof+0x77c/0x1110 [ 73.106442][ T6683] __page_pool_alloc_pages_slow+0x18f/0x770 [ 73.107989][ T6683] page_pool_alloc_netmem+0xc4/0x160 [ 73.109385][ T6683] page_pool_alloc_pages+0x1a/0x60 [ 73.110740][ T6683] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 73.112353][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 73.113742][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 73.115259][ T6683] __sys_bpf+0xfc6/0x49a0 [ 73.116411][ T6683] __x64_sys_bpf+0x78/0xc0 [ 73.117659][ T6683] do_syscall_64+0xcd/0x250 [ 73.118878][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.120455][ T6683] page last free pid 6671 tgid 6669 stack trace: [ 73.122141][ T6683] free_unref_page+0x5f4/0xdc0 [ 73.123428][ T6683] __folio_put+0x30d/0x3d0 [ 73.124604][ T6683] put_page+0x21e/0x280 [ 73.125767][ T6683] page_pool_return_page+0x400/0x520 [ 73.127166][ T6683] page_pool_release+0xf4/0x7d0 [ 73.128474][ T6683] page_pool_destroy+0x10a/0x4c0 [ 73.129778][ T6683] bpf_test_run_xdp_live+0x3a1/0x500 [ 73.131229][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 73.132650][ T6683] __sys_bpf+0xfc6/0x49a0 [ 73.133803][ T6683] __x64_sys_bpf+0x78/0xc0 [ 73.135083][ T6683] do_syscall_64+0xcd/0x250 [ 73.136506][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.138072][ T6683] Modules linked in: [ 73.139134][ T6683] CPU: 1 UID: 0 PID: 6683 Comm: syz.2.194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 73.142464][ T6683] Tainted: [B]=BAD_PAGE [ 73.143566][ T6683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 73.146439][ T6683] Call Trace: [ 73.147320][ T6683] [ 73.148101][ T6683] dump_stack_lvl+0x16c/0x1f0 [ 73.149345][ T6683] bad_page+0xb3/0x1f0 [ 73.150445][ T6683] ? __pfx_bad_page+0x10/0x10 [ 73.151738][ T6683] ? page_bad_reason+0x9d/0x1e0 [ 73.153033][ T6683] free_unref_page+0x657/0xdc0 [ 73.154563][ T6683] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 73.156777][ T6683] ? __phys_addr+0xc6/0x150 [ 73.158294][ T6683] skb_free_head+0xa0/0x1d0 [ 73.159771][ T6683] skb_release_data+0x560/0x730 [ 73.161579][ T6683] sk_skb_reason_drop+0x129/0x1a0 [ 73.163369][ T6683] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 73.165681][ T6683] ? kernel_text_address+0x8d/0x100 [ 73.167843][ T6683] ? hlock_class+0x4e/0x130 [ 73.169521][ T6683] ? __lock_acquire+0x163e/0x3ce0 [ 73.171014][ T6683] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 73.173025][ T6683] ? hlock_class+0x4e/0x130 [ 73.174246][ T6683] ? __lock_acquire+0xbdd/0x3ce0 [ 73.175595][ T6683] ? __pfx___lock_acquire+0x10/0x10 [ 73.176951][ T6683] __netif_receive_skb_list_core+0x357/0x950 [ 73.178564][ T6683] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 73.180274][ T6683] ? trace_lock_acquire+0x14a/0x1d0 [ 73.181765][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 73.183506][ T6683] ? lock_acquire+0x2f/0xb0 [ 73.184715][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 73.186421][ T6683] netif_receive_skb_list_internal+0x753/0xdb0 [ 73.188049][ T6683] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 73.189813][ T6683] ? __pfx_eth_type_trans+0x10/0x10 [ 73.191213][ T6683] ? __build_skb_around+0x278/0x3b0 [ 73.192638][ T6683] netif_receive_skb_list+0x4f/0x4a0 [ 73.194071][ T6683] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 73.196396][ T6683] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 73.198472][ T6683] ? bpf_test_timer_continue+0x150/0x3d0 [ 73.200095][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 73.201501][ T6683] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 73.203084][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 73.204624][ T6683] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 73.206196][ T6683] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 73.207731][ T6683] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 73.209123][ T6683] ? 0xffffffffa00045c0 [ 73.210487][ T6683] ? 0xffffffffa00045c0 [ 73.211796][ T6683] ? 0xffffffffa00045c0 [ 73.213273][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 73.214904][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 73.216544][ T6683] ? lock_acquire+0x2f/0xb0 [ 73.217727][ T6683] ? __fget_files+0x40/0x3f0 [ 73.218952][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 73.220536][ T6683] ? fput+0x30/0x390 [ 73.221706][ T6683] ? __bpf_prog_get+0xa0/0x290 [ 73.223439][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 73.225384][ T6683] __sys_bpf+0xfc6/0x49a0 [ 73.226755][ T6683] ? __pfx___sys_bpf+0x10/0x10 [ 73.228211][ T6683] ? __schedule+0xe5d/0x5730 [ 73.229437][ T6683] ? __fget_files+0x23a/0x3f0 [ 73.230680][ T6683] ? do_futex+0x123/0x350 [ 73.231819][ T6683] ? __pfx_do_futex+0x10/0x10 [ 73.233099][ T6683] ? xfd_validate_state+0x5d/0x180 [ 73.234559][ T6683] ? rcu_is_watching+0x12/0xc0 [ 73.236312][ T6683] __x64_sys_bpf+0x78/0xc0 [ 73.238382][ T6683] ? lockdep_hardirqs_on+0x7c/0x110 [ 73.240303][ T6683] do_syscall_64+0xcd/0x250 [ 73.241471][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.243169][ T6683] RIP: 0033:0x7f574217e719 [ 73.244345][ T6683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.249591][ T6683] RSP: 002b:00007f5742e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 73.252036][ T6683] RAX: ffffffffffffffda RBX: 00007f5742336058 RCX: 00007f574217e719 [ 73.254474][ T6683] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 73.256795][ T6683] RBP: 00007f57421f132e R08: 0000000000000000 R09: 0000000000000000 [ 73.258877][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.261025][ T6683] R13: 0000000000000000 R14: 00007f5742336058 R15: 00007ffe5115f908 [ 73.263179][ T6683] [ 73.264111][ T6683] BUG: Bad page state in process syz.2.194 pfn:25e4a [ 73.266917][ T6683] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888025e4be00 pfn:0x25e4a [ 73.270547][ T6683] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 73.272623][ T6683] raw: 00fff00000000000 dead000000000040 ffff88802a52e000 0000000000000000 [ 73.274935][ T6683] raw: ffff888025e4be00 0000000000000001 00000000ffffffff 0000000000000000 [ 73.277285][ T6683] page dumped because: page_pool leak [ 73.278808][ T6683] page_owner tracks the page as allocated [ 73.280291][ T6683] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6683, tgid 6674 (syz.2.194), ts 67591035277, free_ts 67589036298 [ 73.284607][ T6683] post_alloc_hook+0x2d1/0x350 [ 73.285965][ T6683] get_page_from_freelist+0x101e/0x3070 [ 73.287520][ T6683] __alloc_pages_noprof+0x223/0x25a0 [ 73.288939][ T6683] alloc_pages_bulk_noprof+0x77c/0x1110 [ 73.290411][ T6683] __page_pool_alloc_pages_slow+0x18f/0x770 [ 73.291975][ T6683] page_pool_alloc_netmem+0xc4/0x160 [ 73.293624][ T6683] page_pool_alloc_pages+0x1a/0x60 [ 73.295171][ T6683] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 73.296977][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 73.298468][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 73.299954][ T6683] __sys_bpf+0xfc6/0x49a0 [ 73.301169][ T6683] __x64_sys_bpf+0x78/0xc0 [ 73.302494][ T6683] do_syscall_64+0xcd/0x250 [ 73.303726][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.305392][ T6683] page last free pid 6671 tgid 6669 stack trace: [ 73.307138][ T6683] free_unref_page+0x5f4/0xdc0 [ 73.308399][ T6683] __folio_put+0x30d/0x3d0 [ 73.309570][ T6683] put_page+0x21e/0x280 [ 73.310944][ T6683] page_pool_return_page+0x400/0x520 [ 73.312369][ T6683] page_pool_release+0xf4/0x7d0 [ 73.313646][ T6683] page_pool_destroy+0x10a/0x4c0 [ 73.315215][ T6683] bpf_test_run_xdp_live+0x3a1/0x500 [ 73.316733][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 73.318123][ T6683] __sys_bpf+0xfc6/0x49a0 [ 73.319554][ T6683] __x64_sys_bpf+0x78/0xc0 [ 73.320734][ T6683] do_syscall_64+0xcd/0x250 [ 73.321960][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.323566][ T6683] Modules linked in: [ 73.324611][ T6683] CPU: 1 UID: 0 PID: 6683 Comm: syz.2.194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 73.328060][ T6683] Tainted: [B]=BAD_PAGE [ 73.329304][ T6683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 73.332538][ T6683] Call Trace: [ 73.333547][ T6683] [ 73.334460][ T6683] dump_stack_lvl+0x16c/0x1f0 [ 73.335914][ T6683] bad_page+0xb3/0x1f0 [ 73.337238][ T6683] ? __pfx_bad_page+0x10/0x10 [ 73.338557][ T6683] ? page_bad_reason+0x9d/0x1e0 [ 73.339947][ T6683] free_unref_page+0x657/0xdc0 [ 73.341326][ T6683] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 73.342939][ T6683] ? __phys_addr+0xc6/0x150 [ 73.344166][ T6683] skb_free_head+0xa0/0x1d0 [ 73.345444][ T6683] skb_release_data+0x560/0x730 [ 73.346764][ T6683] sk_skb_reason_drop+0x129/0x1a0 [ 73.348106][ T6683] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 73.349866][ T6683] ? kernel_text_address+0x8d/0x100 [ 73.351246][ T6683] ? hlock_class+0x4e/0x130 [ 73.352493][ T6683] ? __lock_acquire+0x163e/0x3ce0 [ 73.353820][ T6683] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 73.355763][ T6683] ? hlock_class+0x4e/0x130 [ 73.356984][ T6683] ? __lock_acquire+0xbdd/0x3ce0 [ 73.358316][ T6683] ? __pfx___lock_acquire+0x10/0x10 [ 73.359806][ T6683] __netif_receive_skb_list_core+0x357/0x950 [ 73.361502][ T6683] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 73.363319][ T6683] ? trace_lock_acquire+0x14a/0x1d0 [ 73.364864][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 73.366793][ T6683] ? lock_acquire+0x2f/0xb0 [ 73.368162][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 73.369871][ T6683] netif_receive_skb_list_internal+0x753/0xdb0 [ 73.371511][ T6683] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 73.373317][ T6683] ? __pfx_eth_type_trans+0x10/0x10 [ 73.374694][ T6683] ? __build_skb_around+0x278/0x3b0 [ 73.376423][ T6683] netif_receive_skb_list+0x4f/0x4a0 [ 73.377870][ T6683] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 73.379549][ T6683] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 73.381466][ T6683] ? bpf_test_timer_continue+0x150/0x3d0 [ 73.382976][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 73.384399][ T6683] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 73.386138][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 73.387723][ T6683] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 73.389371][ T6683] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 73.391172][ T6683] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 73.393051][ T6683] ? 0xffffffffa00045c0 [ 73.394659][ T6683] ? 0xffffffffa00045c0 [ 73.396162][ T6683] ? 0xffffffffa00045c0 [ 73.397765][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 73.399679][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 73.401163][ T6683] ? lock_acquire+0x2f/0xb0 [ 73.402709][ T6683] ? __fget_files+0x40/0x3f0 [ 73.404010][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 73.405779][ T6683] ? fput+0x30/0x390 [ 73.406916][ T6683] ? __bpf_prog_get+0xa0/0x290 [ 73.408282][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 73.409917][ T6683] __sys_bpf+0xfc6/0x49a0 [ 73.411129][ T6683] ? __pfx___sys_bpf+0x10/0x10 [ 73.412505][ T6683] ? __schedule+0xe5d/0x5730 [ 73.413784][ T6683] ? __fget_files+0x23a/0x3f0 [ 73.415109][ T6683] ? do_futex+0x123/0x350 [ 73.416244][ T6683] ? __pfx_do_futex+0x10/0x10 [ 73.417489][ T6683] ? xfd_validate_state+0x5d/0x180 [ 73.418831][ T6683] ? rcu_is_watching+0x12/0xc0 [ 73.420099][ T6683] __x64_sys_bpf+0x78/0xc0 [ 73.421388][ T6683] ? lockdep_hardirqs_on+0x7c/0x110 [ 73.422946][ T6683] do_syscall_64+0xcd/0x250 [ 73.424182][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.425963][ T6683] RIP: 0033:0x7f574217e719 [ 73.427200][ T6683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.432589][ T6683] RSP: 002b:00007f5742e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 73.435337][ T6683] RAX: ffffffffffffffda RBX: 00007f5742336058 RCX: 00007f574217e719 [ 73.437712][ T6683] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 73.439862][ T6683] RBP: 00007f57421f132e R08: 0000000000000000 R09: 0000000000000000 [ 73.441937][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.444072][ T6683] R13: 0000000000000000 R14: 00007f5742336058 R15: 00007ffe5115f908 [ 73.446337][ T6683] [ 73.447244][ T6683] BUG: Bad page state in process syz.2.194 pfn:25e4b [ 73.449672][ T6683] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000002 pfn:0x25e4b [ 73.452802][ T6683] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 73.454710][ T6683] raw: 00fff00000000000 dead000000000040 ffff88802a52e000 0000000000000000 [ 73.457518][ T6683] raw: ffff888000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 73.460561][ T6683] page dumped because: page_pool leak [ 73.462661][ T6683] page_owner tracks the page as allocated [ 73.464667][ T6683] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6683, tgid 6674 (syz.2.194), ts 67591030571, free_ts 67589039877 [ 73.469427][ T6683] post_alloc_hook+0x2d1/0x350 [ 73.470740][ T6683] get_page_from_freelist+0x101e/0x3070 [ 73.472190][ T6683] __alloc_pages_noprof+0x223/0x25a0 [ 73.473605][ T6683] alloc_pages_bulk_noprof+0x77c/0x1110 [ 73.475184][ T6683] __page_pool_alloc_pages_slow+0x18f/0x770 [ 73.476803][ T6683] page_pool_alloc_netmem+0xc4/0x160 [ 73.478114][ T6683] page_pool_alloc_pages+0x1a/0x60 [ 73.479436][ T6683] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 73.481034][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 73.482419][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 73.483812][ T6683] __sys_bpf+0xfc6/0x49a0 [ 73.484953][ T6683] __x64_sys_bpf+0x78/0xc0 [ 73.486313][ T6683] do_syscall_64+0xcd/0x250 [ 73.487503][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.489041][ T6683] page last free pid 6671 tgid 6669 stack trace: [ 73.490666][ T6683] free_unref_page+0x5f4/0xdc0 [ 73.491914][ T6683] __folio_put+0x30d/0x3d0 [ 73.493178][ T6683] put_page+0x21e/0x280 [ 73.494351][ T6683] page_pool_return_page+0x400/0x520 [ 73.495787][ T6683] page_pool_release+0xf4/0x7d0 [ 73.497185][ T6683] page_pool_destroy+0x10a/0x4c0 [ 73.498583][ T6683] bpf_test_run_xdp_live+0x3a1/0x500 [ 73.500549][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 73.501983][ T6683] __sys_bpf+0xfc6/0x49a0 [ 73.503121][ T6683] __x64_sys_bpf+0x78/0xc0 [ 73.504429][ T6683] do_syscall_64+0xcd/0x250 [ 73.505750][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.507456][ T6683] Modules linked in: [ 73.508493][ T6683] CPU: 1 UID: 0 PID: 6683 Comm: syz.2.194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 73.511813][ T6683] Tainted: [B]=BAD_PAGE [ 73.513111][ T6683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 73.516810][ T6683] Call Trace: [ 73.517854][ T6683] [ 73.518794][ T6683] dump_stack_lvl+0x16c/0x1f0 [ 73.520167][ T6683] bad_page+0xb3/0x1f0 [ 73.521296][ T6683] ? __pfx_bad_page+0x10/0x10 [ 73.522601][ T6683] ? page_bad_reason+0x9d/0x1e0 [ 73.523921][ T6683] free_unref_page+0x657/0xdc0 [ 73.525339][ T6683] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 73.526951][ T6683] ? __phys_addr+0xc6/0x150 [ 73.528170][ T6683] skb_free_head+0xa0/0x1d0 [ 73.529425][ T6683] skb_release_data+0x560/0x730 [ 73.530719][ T6683] sk_skb_reason_drop+0x129/0x1a0 [ 73.532083][ T6683] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 73.533819][ T6683] ? kernel_text_address+0x8d/0x100 [ 73.535226][ T6683] ? hlock_class+0x4e/0x130 [ 73.536429][ T6683] ? __lock_acquire+0x163e/0x3ce0 [ 73.537747][ T6683] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 73.539602][ T6683] ? hlock_class+0x4e/0x130 [ 73.540794][ T6683] ? __lock_acquire+0xbdd/0x3ce0 [ 73.542095][ T6683] ? __pfx___lock_acquire+0x10/0x10 [ 73.543458][ T6683] __netif_receive_skb_list_core+0x357/0x950 [ 73.545074][ T6683] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 73.546766][ T6683] ? trace_lock_acquire+0x14a/0x1d0 [ 73.548102][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 73.549761][ T6683] ? lock_acquire+0x2f/0xb0 [ 73.550933][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 73.552592][ T6683] netif_receive_skb_list_internal+0x753/0xdb0 [ 73.554230][ T6683] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 73.556049][ T6683] ? __pfx_eth_type_trans+0x10/0x10 [ 73.557424][ T6683] ? __build_skb_around+0x278/0x3b0 [ 73.558751][ T6683] netif_receive_skb_list+0x4f/0x4a0 [ 73.560116][ T6683] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 73.561748][ T6683] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 73.563453][ T6683] ? bpf_test_timer_continue+0x150/0x3d0 [ 73.565007][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 73.566538][ T6683] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 73.568269][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 73.570012][ T6683] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 73.571554][ T6683] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 73.573015][ T6683] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 73.574403][ T6683] ? 0xffffffffa00045c0 [ 73.575553][ T6683] ? 0xffffffffa00045c0 [ 73.576655][ T6683] ? 0xffffffffa00045c0 [ 73.577750][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 73.579336][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 73.580739][ T6683] ? lock_acquire+0x2f/0xb0 [ 73.581928][ T6683] ? __fget_files+0x40/0x3f0 [ 73.583149][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 73.584660][ T6683] ? fput+0x30/0x390 [ 73.585709][ T6683] ? __bpf_prog_get+0xa0/0x290 [ 73.586902][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 73.588417][ T6683] __sys_bpf+0xfc6/0x49a0 [ 73.589565][ T6683] ? __pfx___sys_bpf+0x10/0x10 [ 73.590867][ T6683] ? __schedule+0xe5d/0x5730 [ 73.592042][ T6683] ? __fget_files+0x23a/0x3f0 [ 73.593426][ T6683] ? do_futex+0x123/0x350 [ 73.594753][ T6683] ? __pfx_do_futex+0x10/0x10 [ 73.596253][ T6683] ? xfd_validate_state+0x5d/0x180 [ 73.598525][ T6683] ? rcu_is_watching+0x12/0xc0 [ 73.600037][ T6683] __x64_sys_bpf+0x78/0xc0 [ 73.601291][ T6683] ? lockdep_hardirqs_on+0x7c/0x110 [ 73.602630][ T6683] do_syscall_64+0xcd/0x250 [ 73.603787][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.605377][ T6683] RIP: 0033:0x7f574217e719 [ 73.606712][ T6683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.613172][ T6683] RSP: 002b:00007f5742e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 73.615522][ T6683] RAX: ffffffffffffffda RBX: 00007f5742336058 RCX: 00007f574217e719 [ 73.617580][ T6683] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 73.619685][ T6683] RBP: 00007f57421f132e R08: 0000000000000000 R09: 0000000000000000 [ 73.621867][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.623976][ T6683] R13: 0000000000000000 R14: 00007f5742336058 R15: 00007ffe5115f908 [ 73.626053][ T6683] [ 73.626967][ T6683] BUG: Bad page state in process syz.2.194 pfn:28b12 [ 73.629558][ T6683] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888028b13e00 pfn:0x28b12 [ 73.633029][ T6683] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 73.635057][ T6683] raw: 00fff00000000000 dead000000000040 ffff88802a52e000 0000000000000000 [ 73.637389][ T6683] raw: ffff888028b13e00 0000000000000001 00000000ffffffff 0000000000000000 [ 73.639588][ T6683] page dumped because: page_pool leak [ 73.641119][ T6683] page_owner tracks the page as allocated [ 73.642756][ T6683] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6683, tgid 6674 (syz.2.194), ts 67591026062, free_ts 67589043652 [ 73.647584][ T6683] post_alloc_hook+0x2d1/0x350 [ 73.649261][ T6683] get_page_from_freelist+0x101e/0x3070 [ 73.651015][ T6683] __alloc_pages_noprof+0x223/0x25a0 [ 73.652475][ T6683] alloc_pages_bulk_noprof+0x77c/0x1110 [ 73.653918][ T6683] __page_pool_alloc_pages_slow+0x18f/0x770 [ 73.655660][ T6683] page_pool_alloc_netmem+0xc4/0x160 [ 73.657070][ T6683] page_pool_alloc_pages+0x1a/0x60 [ 73.658449][ T6683] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 73.660074][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 73.661462][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 73.662919][ T6683] __sys_bpf+0xfc6/0x49a0 [ 73.664070][ T6683] __x64_sys_bpf+0x78/0xc0 [ 73.665347][ T6683] do_syscall_64+0xcd/0x250 [ 73.666630][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.668188][ T6683] page last free pid 6671 tgid 6669 stack trace: [ 73.669849][ T6683] free_unref_page+0x5f4/0xdc0 [ 73.671126][ T6683] __folio_put+0x30d/0x3d0 [ 73.672321][ T6683] put_page+0x21e/0x280 [ 73.673416][ T6683] page_pool_return_page+0x400/0x520 [ 73.674842][ T6683] page_pool_release+0xf4/0x7d0 [ 73.676208][ T6683] page_pool_destroy+0x10a/0x4c0 [ 73.677560][ T6683] bpf_test_run_xdp_live+0x3a1/0x500 [ 73.678967][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 73.680358][ T6683] __sys_bpf+0xfc6/0x49a0 [ 73.681492][ T6683] __x64_sys_bpf+0x78/0xc0 [ 73.682630][ T6683] do_syscall_64+0xcd/0x250 [ 73.683782][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.685371][ T6683] Modules linked in: [ 73.686391][ T6683] CPU: 1 UID: 0 PID: 6683 Comm: syz.2.194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 73.689464][ T6683] Tainted: [B]=BAD_PAGE [ 73.690523][ T6683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 73.693219][ T6683] Call Trace: [ 73.694081][ T6683] [ 73.694850][ T6683] dump_stack_lvl+0x16c/0x1f0 [ 73.696097][ T6683] bad_page+0xb3/0x1f0 [ 73.697166][ T6683] ? __pfx_bad_page+0x10/0x10 [ 73.698384][ T6683] ? page_bad_reason+0x9d/0x1e0 [ 73.699638][ T6683] free_unref_page+0x657/0xdc0 [ 73.700805][ T6683] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 73.702253][ T6683] ? __phys_addr+0xc6/0x150 [ 73.703390][ T6683] skb_free_head+0xa0/0x1d0 [ 73.704571][ T6683] skb_release_data+0x560/0x730 [ 73.705832][ T6683] sk_skb_reason_drop+0x129/0x1a0 [ 73.707129][ T6683] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 73.708794][ T6683] ? kernel_text_address+0x8d/0x100 [ 73.710105][ T6683] ? hlock_class+0x4e/0x130 [ 73.711268][ T6683] ? __lock_acquire+0x163e/0x3ce0 [ 73.712562][ T6683] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 73.714423][ T6683] ? hlock_class+0x4e/0x130 [ 73.715655][ T6683] ? __lock_acquire+0xbdd/0x3ce0 [ 73.717046][ T6683] ? __pfx___lock_acquire+0x10/0x10 [ 73.718463][ T6683] __netif_receive_skb_list_core+0x357/0x950 [ 73.720070][ T6683] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 73.721787][ T6683] ? trace_lock_acquire+0x14a/0x1d0 [ 73.723180][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 73.724837][ T6683] ? lock_acquire+0x2f/0xb0 [ 73.726071][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 73.727724][ T6683] netif_receive_skb_list_internal+0x753/0xdb0 [ 73.729323][ T6683] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 73.731064][ T6683] ? __pfx_eth_type_trans+0x10/0x10 [ 73.732421][ T6683] ? __build_skb_around+0x278/0x3b0 [ 73.733787][ T6683] netif_receive_skb_list+0x4f/0x4a0 [ 73.735269][ T6683] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 73.737083][ T6683] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 73.738772][ T6683] ? bpf_test_timer_continue+0x150/0x3d0 [ 73.740206][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 73.741538][ T6683] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 73.743042][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 73.744486][ T6683] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 73.746009][ T6683] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 73.747450][ T6683] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 73.748789][ T6683] ? 0xffffffffa00045c0 [ 73.749839][ T6683] ? 0xffffffffa00045c0 [ 73.750873][ T6683] ? 0xffffffffa00045c0 [ 73.751896][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 73.753362][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 73.754736][ T6683] ? lock_acquire+0x2f/0xb0 [ 73.755912][ T6683] ? __fget_files+0x40/0x3f0 [ 73.757104][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 73.758590][ T6683] ? fput+0x30/0x390 [ 73.759563][ T6683] ? __bpf_prog_get+0xa0/0x290 [ 73.760761][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 73.762219][ T6683] __sys_bpf+0xfc6/0x49a0 [ 73.763328][ T6683] ? __pfx___sys_bpf+0x10/0x10 [ 73.764555][ T6683] ? __schedule+0xe5d/0x5730 [ 73.765725][ T6683] ? __fget_files+0x23a/0x3f0 [ 73.766880][ T6683] ? do_futex+0x123/0x350 [ 73.767978][ T6683] ? __pfx_do_futex+0x10/0x10 [ 73.769172][ T6683] ? xfd_validate_state+0x5d/0x180 [ 73.770446][ T6683] ? rcu_is_watching+0x12/0xc0 [ 73.771620][ T6683] __x64_sys_bpf+0x78/0xc0 [ 73.772708][ T6683] ? lockdep_hardirqs_on+0x7c/0x110 [ 73.773989][ T6683] do_syscall_64+0xcd/0x250 [ 73.775203][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.776688][ T6683] RIP: 0033:0x7f574217e719 [ 73.777807][ T6683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.782881][ T6683] RSP: 002b:00007f5742e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 73.784969][ T6683] RAX: ffffffffffffffda RBX: 00007f5742336058 RCX: 00007f574217e719 [ 73.786962][ T6683] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 73.788927][ T6683] RBP: 00007f57421f132e R08: 0000000000000000 R09: 0000000000000000 [ 73.790950][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.792962][ T6683] R13: 0000000000000000 R14: 00007f5742336058 R15: 00007ffe5115f908 [ 73.795033][ T6683] [ 73.796168][ T6683] BUG: Bad page state in process syz.2.194 pfn:28b13 [ 73.797893][ T6683] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2 pfn:0x28b13 [ 73.800021][ T6683] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 73.801810][ T6683] raw: 00fff00000000000 dead000000000040 ffff88802a52e000 0000000000000000 [ 73.803961][ T6683] raw: 0000000000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 73.806066][ T6683] page dumped because: page_pool leak [ 73.807396][ T6683] page_owner tracks the page as allocated [ 73.808877][ T6683] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6683, tgid 6674 (syz.2.194), ts 67591021071, free_ts 67589047891 [ 73.813164][ T6683] post_alloc_hook+0x2d1/0x350 [ 73.814449][ T6683] get_page_from_freelist+0x101e/0x3070 [ 73.815987][ T6683] __alloc_pages_noprof+0x223/0x25a0 [ 73.817373][ T6683] alloc_pages_bulk_noprof+0x77c/0x1110 [ 73.818821][ T6683] __page_pool_alloc_pages_slow+0x18f/0x770 [ 73.820357][ T6683] page_pool_alloc_netmem+0xc4/0x160 [ 73.821726][ T6683] page_pool_alloc_pages+0x1a/0x60 [ 73.823062][ T6683] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 73.824664][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 73.826104][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 73.827508][ T6683] __sys_bpf+0xfc6/0x49a0 [ 73.828643][ T6683] __x64_sys_bpf+0x78/0xc0 [ 73.829811][ T6683] do_syscall_64+0xcd/0x250 [ 73.831026][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.832566][ T6683] page last free pid 6671 tgid 6669 stack trace: [ 73.834222][ T6683] free_unref_page+0x5f4/0xdc0 [ 73.835569][ T6683] __folio_put+0x30d/0x3d0 [ 73.836683][ T6683] put_page+0x21e/0x280 [ 73.837771][ T6683] page_pool_return_page+0x400/0x520 [ 73.839287][ T6683] page_pool_release+0xf4/0x7d0 [ 73.840559][ T6683] page_pool_destroy+0x10a/0x4c0 [ 73.841853][ T6683] bpf_test_run_xdp_live+0x3a1/0x500 [ 73.843236][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 73.844639][ T6683] __sys_bpf+0xfc6/0x49a0 [ 73.845838][ T6683] __x64_sys_bpf+0x78/0xc0 [ 73.847015][ T6683] do_syscall_64+0xcd/0x250 [ 73.848215][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.849754][ T6683] Modules linked in: [ 73.850788][ T6683] CPU: 1 UID: 0 PID: 6683 Comm: syz.2.194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 73.853852][ T6683] Tainted: [B]=BAD_PAGE [ 73.854979][ T6683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 73.857834][ T6683] Call Trace: [ 73.858717][ T6683] [ 73.859498][ T6683] dump_stack_lvl+0x16c/0x1f0 [ 73.860742][ T6683] bad_page+0xb3/0x1f0 [ 73.861816][ T6683] ? __pfx_bad_page+0x10/0x10 [ 73.863069][ T6683] ? page_bad_reason+0x9d/0x1e0 [ 73.864349][ T6683] free_unref_page+0x657/0xdc0 [ 73.865630][ T6683] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 73.867212][ T6683] ? __phys_addr+0xc6/0x150 [ 73.868421][ T6683] skb_free_head+0xa0/0x1d0 [ 73.869622][ T6683] skb_release_data+0x560/0x730 [ 73.870911][ T6683] sk_skb_reason_drop+0x129/0x1a0 [ 73.872236][ T6683] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 73.873887][ T6683] ? kernel_text_address+0x8d/0x100 [ 73.875408][ T6683] ? hlock_class+0x4e/0x130 [ 73.876726][ T6683] ? __lock_acquire+0x163e/0x3ce0 [ 73.878042][ T6683] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 73.879881][ T6683] ? hlock_class+0x4e/0x130 [ 73.881082][ T6683] ? __lock_acquire+0xbdd/0x3ce0 [ 73.882392][ T6683] ? __pfx___lock_acquire+0x10/0x10 [ 73.883745][ T6683] __netif_receive_skb_list_core+0x357/0x950 [ 73.885339][ T6683] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 73.887035][ T6683] ? trace_lock_acquire+0x14a/0x1d0 [ 73.888391][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 73.890024][ T6683] ? lock_acquire+0x2f/0xb0 [ 73.891219][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 73.892867][ T6683] netif_receive_skb_list_internal+0x753/0xdb0 [ 73.894487][ T6683] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 73.896518][ T6683] ? __pfx_eth_type_trans+0x10/0x10 [ 73.897890][ T6683] ? __build_skb_around+0x278/0x3b0 [ 73.899267][ T6683] netif_receive_skb_list+0x4f/0x4a0 [ 73.900653][ T6683] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 73.902298][ T6683] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 73.904007][ T6683] ? bpf_test_timer_continue+0x150/0x3d0 [ 73.905586][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 73.907229][ T6683] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 73.909015][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 73.910831][ T6683] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 73.912652][ T6683] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 73.914523][ T6683] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 73.916157][ T6683] ? 0xffffffffa00045c0 [ 73.917440][ T6683] ? 0xffffffffa00045c0 [ 73.918728][ T6683] ? 0xffffffffa00045c0 [ 73.919970][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 73.921728][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 73.923258][ T6683] ? lock_acquire+0x2f/0xb0 [ 73.924545][ T6683] ? __fget_files+0x40/0x3f0 [ 73.925908][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 73.927658][ T6683] ? fput+0x30/0x390 [ 73.928872][ T6683] ? __bpf_prog_get+0xa0/0x290 [ 73.930363][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 73.932281][ T6683] __sys_bpf+0xfc6/0x49a0 [ 73.933635][ T6683] ? __pfx___sys_bpf+0x10/0x10 [ 73.935278][ T6683] ? __schedule+0xe5d/0x5730 [ 73.936779][ T6683] ? __fget_files+0x23a/0x3f0 [ 73.938247][ T6683] ? do_futex+0x123/0x350 [ 73.939622][ T6683] ? __pfx_do_futex+0x10/0x10 [ 73.941110][ T6683] ? xfd_validate_state+0x5d/0x180 [ 73.942716][ T6683] ? rcu_is_watching+0x12/0xc0 [ 73.944200][ T6683] __x64_sys_bpf+0x78/0xc0 [ 73.945595][ T6683] ? lockdep_hardirqs_on+0x7c/0x110 [ 73.947214][ T6683] do_syscall_64+0xcd/0x250 [ 73.948632][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.950665][ T6683] RIP: 0033:0x7f574217e719 [ 73.952168][ T6683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.958017][ T6683] RSP: 002b:00007f5742e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 73.960649][ T6683] RAX: ffffffffffffffda RBX: 00007f5742336058 RCX: 00007f574217e719 [ 73.963099][ T6683] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 73.965545][ T6683] RBP: 00007f57421f132e R08: 0000000000000000 R09: 0000000000000000 [ 73.968013][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.970470][ T6683] R13: 0000000000000000 R14: 00007f5742336058 R15: 00007ffe5115f908 [ 73.972910][ T6683] [ 73.973989][ T6683] BUG: Bad page state in process syz.2.194 pfn:3f54e [ 73.976108][ T6683] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803f54fe00 pfn:0x3f54e [ 73.979244][ T6683] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 73.981130][ T6683] raw: 00fff00000000000 dead000000000040 ffff88802a52e000 0000000000000000 [ 73.983354][ T6683] raw: ffff88803f54fe00 0000000000000001 00000000ffffffff 0000000000000000 [ 73.985660][ T6683] page dumped because: page_pool leak [ 73.987078][ T6683] page_owner tracks the page as allocated [ 73.988561][ T6683] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6683, tgid 6674 (syz.2.194), ts 67591016465, free_ts 67589052487 [ 73.992845][ T6683] post_alloc_hook+0x2d1/0x350 [ 73.994123][ T6683] get_page_from_freelist+0x101e/0x3070 [ 73.995650][ T6683] __alloc_pages_noprof+0x223/0x25a0 [ 73.997032][ T6683] alloc_pages_bulk_noprof+0x77c/0x1110 [ 73.998492][ T6683] __page_pool_alloc_pages_slow+0x18f/0x770 [ 74.000046][ T6683] page_pool_alloc_netmem+0xc4/0x160 [ 74.001440][ T6683] page_pool_alloc_pages+0x1a/0x60 [ 74.002805][ T6683] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 74.004424][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 74.005878][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 74.007289][ T6683] __sys_bpf+0xfc6/0x49a0 [ 74.008437][ T6683] __x64_sys_bpf+0x78/0xc0 [ 74.009616][ T6683] do_syscall_64+0xcd/0x250 [ 74.010829][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.012379][ T6683] page last free pid 6671 tgid 6669 stack trace: [ 74.014020][ T6683] free_unref_page+0x5f4/0xdc0 [ 74.015377][ T6683] __folio_put+0x30d/0x3d0 [ 74.016531][ T6683] put_page+0x21e/0x280 [ 74.017585][ T6683] page_pool_return_page+0x400/0x520 [ 74.018967][ T6683] page_pool_release+0xf4/0x7d0 [ 74.020250][ T6683] page_pool_destroy+0x10a/0x4c0 [ 74.021550][ T6683] bpf_test_run_xdp_live+0x3a1/0x500 [ 74.022939][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 74.024347][ T6683] __sys_bpf+0xfc6/0x49a0 [ 74.025558][ T6683] __x64_sys_bpf+0x78/0xc0 [ 74.026730][ T6683] do_syscall_64+0xcd/0x250 [ 74.027924][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.029462][ T6683] Modules linked in: [ 74.030502][ T6683] CPU: 1 UID: 0 PID: 6683 Comm: syz.2.194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 74.033591][ T6683] Tainted: [B]=BAD_PAGE [ 74.034729][ T6683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 74.037527][ T6683] Call Trace: [ 74.038414][ T6683] [ 74.039194][ T6683] dump_stack_lvl+0x16c/0x1f0 [ 74.040439][ T6683] bad_page+0xb3/0x1f0 [ 74.041516][ T6683] ? __pfx_bad_page+0x10/0x10 [ 74.042795][ T6683] ? page_bad_reason+0x9d/0x1e0 [ 74.044113][ T6683] free_unref_page+0x657/0xdc0 [ 74.045399][ T6683] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 74.046982][ T6683] ? __phys_addr+0xc6/0x150 [ 74.048179][ T6683] skb_free_head+0xa0/0x1d0 [ 74.049384][ T6683] skb_release_data+0x560/0x730 [ 74.050678][ T6683] sk_skb_reason_drop+0x129/0x1a0 [ 74.052006][ T6683] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 74.053753][ T6683] ? kernel_text_address+0x8d/0x100 [ 74.055171][ T6683] ? hlock_class+0x4e/0x130 [ 74.056379][ T6683] ? __lock_acquire+0x163e/0x3ce0 [ 74.057708][ T6683] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 74.059571][ T6683] ? hlock_class+0x4e/0x130 [ 74.060770][ T6683] ? __lock_acquire+0xbdd/0x3ce0 [ 74.062065][ T6683] ? __pfx___lock_acquire+0x10/0x10 [ 74.063434][ T6683] __netif_receive_skb_list_core+0x357/0x950 [ 74.065034][ T6683] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 74.066743][ T6683] ? trace_lock_acquire+0x14a/0x1d0 [ 74.068114][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 74.069771][ T6683] ? lock_acquire+0x2f/0xb0 [ 74.070974][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 74.072631][ T6683] netif_receive_skb_list_internal+0x753/0xdb0 [ 74.074261][ T6683] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 74.076034][ T6683] ? __pfx_eth_type_trans+0x10/0x10 [ 74.077398][ T6683] ? __build_skb_around+0x278/0x3b0 [ 74.078776][ T6683] netif_receive_skb_list+0x4f/0x4a0 [ 74.080167][ T6683] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 74.081803][ T6683] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 74.083526][ T6683] ? bpf_test_timer_continue+0x150/0x3d0 [ 74.085006][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 74.086435][ T6683] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 74.087953][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 74.089502][ T6683] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 74.091050][ T6683] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 74.092578][ T6683] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 74.093973][ T6683] ? 0xffffffffa00045c0 [ 74.095098][ T6683] ? 0xffffffffa00045c0 [ 74.096192][ T6683] ? 0xffffffffa00045c0 [ 74.097278][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 74.098835][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 74.100240][ T6683] ? lock_acquire+0x2f/0xb0 [ 74.101432][ T6683] ? __fget_files+0x40/0x3f0 [ 74.102655][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 74.104186][ T6683] ? fput+0x30/0x390 [ 74.105185][ T6683] ? __bpf_prog_get+0xa0/0x290 [ 74.106491][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 74.108051][ T6683] __sys_bpf+0xfc6/0x49a0 [ 74.109203][ T6683] ? __pfx___sys_bpf+0x10/0x10 [ 74.110499][ T6683] ? __schedule+0xe5d/0x5730 [ 74.111726][ T6683] ? __fget_files+0x23a/0x3f0 [ 74.112969][ T6683] ? do_futex+0x123/0x350 [ 74.114220][ T6683] ? __pfx_do_futex+0x10/0x10 [ 74.115657][ T6683] ? xfd_validate_state+0x5d/0x180 [ 74.117115][ T6683] ? rcu_is_watching+0x12/0xc0 [ 74.118387][ T6683] __x64_sys_bpf+0x78/0xc0 [ 74.119570][ T6683] ? lockdep_hardirqs_on+0x7c/0x110 [ 74.120937][ T6683] do_syscall_64+0xcd/0x250 [ 74.122131][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.123656][ T6683] RIP: 0033:0x7f574217e719 [ 74.124765][ T6683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.129463][ T6683] RSP: 002b:00007f5742e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 74.131574][ T6683] RAX: ffffffffffffffda RBX: 00007f5742336058 RCX: 00007f574217e719 [ 74.133581][ T6683] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 74.135613][ T6683] RBP: 00007f57421f132e R08: 0000000000000000 R09: 0000000000000000 [ 74.137595][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.139529][ T6683] R13: 0000000000000000 R14: 00007f5742336058 R15: 00007ffe5115f908 [ 74.141517][ T6683] [ 74.142382][ T6683] BUG: Bad page state in process syz.2.194 pfn:3f54f [ 74.144104][ T6683] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x700000002 pfn:0x3f54f [ 74.147059][ T6683] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 74.148999][ T6683] raw: 00fff00000000000 dead000000000040 ffff88802a52e000 0000000000000000 [ 74.151167][ T6683] raw: 0000000700000002 0000000000000001 00000000ffffffff 0000000000000000 [ 74.153378][ T6683] page dumped because: page_pool leak [ 74.154808][ T6683] page_owner tracks the page as allocated [ 74.156346][ T6683] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6683, tgid 6674 (syz.2.194), ts 67591011467, free_ts 67589056473 [ 74.160670][ T6683] post_alloc_hook+0x2d1/0x350 [ 74.161914][ T6683] get_page_from_freelist+0x101e/0x3070 [ 74.163361][ T6683] __alloc_pages_noprof+0x223/0x25a0 [ 74.164732][ T6683] alloc_pages_bulk_noprof+0x77c/0x1110 [ 74.166246][ T6683] __page_pool_alloc_pages_slow+0x18f/0x770 [ 74.167871][ T6683] page_pool_alloc_netmem+0xc4/0x160 [ 74.169243][ T6683] page_pool_alloc_pages+0x1a/0x60 [ 74.170587][ T6683] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 74.172185][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 74.173560][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 74.175040][ T6683] __sys_bpf+0xfc6/0x49a0 [ 74.176263][ T6683] __x64_sys_bpf+0x78/0xc0 [ 74.177351][ T6683] do_syscall_64+0xcd/0x250 [ 74.178480][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.179896][ T6683] page last free pid 6671 tgid 6669 stack trace: [ 74.181468][ T6683] free_unref_page+0x5f4/0xdc0 [ 74.182677][ T6683] __folio_put+0x30d/0x3d0 [ 74.183848][ T6683] put_page+0x21e/0x280 [ 74.184951][ T6683] page_pool_return_page+0x400/0x520 [ 74.186559][ T6683] page_pool_release+0xf4/0x7d0 [ 74.187823][ T6683] page_pool_destroy+0x10a/0x4c0 [ 74.189107][ T6683] bpf_test_run_xdp_live+0x3a1/0x500 [ 74.190489][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 74.191883][ T6683] __sys_bpf+0xfc6/0x49a0 [ 74.193009][ T6683] __x64_sys_bpf+0x78/0xc0 [ 74.194184][ T6683] do_syscall_64+0xcd/0x250 [ 74.195974][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.197559][ T6683] Modules linked in: [ 74.198608][ T6683] CPU: 1 UID: 0 PID: 6683 Comm: syz.2.194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 74.201703][ T6683] Tainted: [B]=BAD_PAGE [ 74.202801][ T6683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 74.205627][ T6683] Call Trace: [ 74.206512][ T6683] [ 74.207289][ T6683] dump_stack_lvl+0x16c/0x1f0 [ 74.208529][ T6683] bad_page+0xb3/0x1f0 [ 74.209597][ T6683] ? __pfx_bad_page+0x10/0x10 [ 74.210841][ T6683] ? page_bad_reason+0x9d/0x1e0 [ 74.212118][ T6683] free_unref_page+0x657/0xdc0 [ 74.213334][ T6683] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 74.214890][ T6683] ? __phys_addr+0xc6/0x150 [ 74.216072][ T6683] skb_free_head+0xa0/0x1d0 [ 74.217279][ T6683] skb_release_data+0x560/0x730 [ 74.218521][ T6683] sk_skb_reason_drop+0x129/0x1a0 [ 74.219810][ T6683] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 74.221472][ T6683] ? kernel_text_address+0x8d/0x100 [ 74.222841][ T6683] ? hlock_class+0x4e/0x130 [ 74.224033][ T6683] ? __lock_acquire+0x163e/0x3ce0 [ 74.225412][ T6683] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 74.227277][ T6683] ? hlock_class+0x4e/0x130 [ 74.228476][ T6683] ? __lock_acquire+0xbdd/0x3ce0 [ 74.229781][ T6683] ? __pfx___lock_acquire+0x10/0x10 [ 74.231144][ T6683] __netif_receive_skb_list_core+0x357/0x950 [ 74.232714][ T6683] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 74.234429][ T6683] ? trace_lock_acquire+0x14a/0x1d0 [ 74.235806][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 74.237353][ T6683] ? lock_acquire+0x2f/0xb0 [ 74.238515][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 74.240167][ T6683] netif_receive_skb_list_internal+0x753/0xdb0 [ 74.241778][ T6683] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 74.243444][ T6683] ? __pfx_eth_type_trans+0x10/0x10 [ 74.244766][ T6683] ? __build_skb_around+0x278/0x3b0 [ 74.246138][ T6683] netif_receive_skb_list+0x4f/0x4a0 [ 74.247503][ T6683] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 74.249169][ T6683] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 74.250844][ T6683] ? bpf_test_timer_continue+0x150/0x3d0 [ 74.252319][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 74.253701][ T6683] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 74.255268][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 74.256773][ T6683] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 74.258331][ T6683] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 74.259785][ T6683] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 74.261127][ T6683] ? 0xffffffffa00045c0 [ 74.262218][ T6683] ? 0xffffffffa00045c0 [ 74.263315][ T6683] ? 0xffffffffa00045c0 [ 74.264406][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 74.265969][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 74.267388][ T6683] ? lock_acquire+0x2f/0xb0 [ 74.268580][ T6683] ? __fget_files+0x40/0x3f0 [ 74.269799][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 74.271348][ T6683] ? fput+0x30/0x390 [ 74.272378][ T6683] ? __bpf_prog_get+0xa0/0x290 [ 74.273636][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 74.275233][ T6683] __sys_bpf+0xfc6/0x49a0 [ 74.276271][ T6683] ? __pfx___sys_bpf+0x10/0x10 [ 74.277485][ T6683] ? __schedule+0xe5d/0x5730 [ 74.278682][ T6683] ? __fget_files+0x23a/0x3f0 [ 74.279923][ T6683] ? do_futex+0x123/0x350 [ 74.281017][ T6683] ? __pfx_do_futex+0x10/0x10 [ 74.282200][ T6683] ? xfd_validate_state+0x5d/0x180 [ 74.283545][ T6683] ? rcu_is_watching+0x12/0xc0 [ 74.284803][ T6683] __x64_sys_bpf+0x78/0xc0 [ 74.285995][ T6683] ? lockdep_hardirqs_on+0x7c/0x110 [ 74.287366][ T6683] do_syscall_64+0xcd/0x250 [ 74.288566][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.290121][ T6683] RIP: 0033:0x7f574217e719 [ 74.291318][ T6683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.296355][ T6683] RSP: 002b:00007f5742e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 74.298538][ T6683] RAX: ffffffffffffffda RBX: 00007f5742336058 RCX: 00007f574217e719 [ 74.300600][ T6683] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 74.302668][ T6683] RBP: 00007f57421f132e R08: 0000000000000000 R09: 0000000000000000 [ 74.304727][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.306826][ T6683] R13: 0000000000000000 R14: 00007f5742336058 R15: 00007ffe5115f908 [ 74.308886][ T6683] [ 74.309761][ T6683] BUG: Bad page state in process syz.2.194 pfn:4ca86 [ 74.311503][ T6683] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804ca87e00 pfn:0x4ca86 [ 74.314169][ T6683] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 74.316161][ T6683] raw: 00fff00000000000 dead000000000040 ffff88802a52e000 0000000000000000 [ 74.318444][ T6683] raw: ffff88804ca87e00 0000000000000001 00000000ffffffff 0000000000000000 [ 74.320676][ T6683] page dumped because: page_pool leak [ 74.322083][ T6683] page_owner tracks the page as allocated [ 74.323589][ T6683] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6683, tgid 6674 (syz.2.194), ts 67591006555, free_ts 67589060213 [ 74.327969][ T6683] post_alloc_hook+0x2d1/0x350 [ 74.329238][ T6683] get_page_from_freelist+0x101e/0x3070 [ 74.330699][ T6683] __alloc_pages_noprof+0x223/0x25a0 [ 74.332009][ T6683] alloc_pages_bulk_noprof+0x77c/0x1110 [ 74.333386][ T6683] __page_pool_alloc_pages_slow+0x18f/0x770 [ 74.334896][ T6683] page_pool_alloc_netmem+0xc4/0x160 [ 74.336315][ T6683] page_pool_alloc_pages+0x1a/0x60 [ 74.337648][ T6683] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 74.339229][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 74.340621][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 74.341984][ T6683] __sys_bpf+0xfc6/0x49a0 [ 74.343044][ T6683] __x64_sys_bpf+0x78/0xc0 [ 74.344207][ T6683] do_syscall_64+0xcd/0x250 [ 74.345496][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.347069][ T6683] page last free pid 6671 tgid 6669 stack trace: [ 74.348711][ T6683] free_unref_page+0x5f4/0xdc0 [ 74.350003][ T6683] __folio_put+0x30d/0x3d0 [ 74.351230][ T6683] put_page+0x21e/0x280 [ 74.352332][ T6683] page_pool_return_page+0x400/0x520 [ 74.353714][ T6683] page_pool_release+0xf4/0x7d0 [ 74.355110][ T6683] page_pool_destroy+0x10a/0x4c0 [ 74.356432][ T6683] bpf_test_run_xdp_live+0x3a1/0x500 [ 74.357824][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 74.359241][ T6683] __sys_bpf+0xfc6/0x49a0 [ 74.360387][ T6683] __x64_sys_bpf+0x78/0xc0 [ 74.361539][ T6683] do_syscall_64+0xcd/0x250 [ 74.362729][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.364257][ T6683] Modules linked in: [ 74.365313][ T6683] CPU: 1 UID: 0 PID: 6683 Comm: syz.2.194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 74.368326][ T6683] Tainted: [B]=BAD_PAGE [ 74.369404][ T6683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 74.372124][ T6683] Call Trace: [ 74.373004][ T6683] [ 74.373787][ T6683] dump_stack_lvl+0x16c/0x1f0 [ 74.375097][ T6683] bad_page+0xb3/0x1f0 [ 74.376177][ T6683] ? __pfx_bad_page+0x10/0x10 [ 74.377412][ T6683] ? page_bad_reason+0x9d/0x1e0 [ 74.378697][ T6683] free_unref_page+0x657/0xdc0 [ 74.379955][ T6683] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 74.381524][ T6683] ? __phys_addr+0xc6/0x150 [ 74.382727][ T6683] skb_free_head+0xa0/0x1d0 [ 74.383933][ T6683] skb_release_data+0x560/0x730 [ 74.385188][ T6683] sk_skb_reason_drop+0x129/0x1a0 [ 74.386451][ T6683] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 74.388155][ T6683] ? kernel_text_address+0x8d/0x100 [ 74.389517][ T6683] ? hlock_class+0x4e/0x130 [ 74.390703][ T6683] ? __lock_acquire+0x163e/0x3ce0 [ 74.391997][ T6683] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 74.393795][ T6683] ? hlock_class+0x4e/0x130 [ 74.395023][ T6683] ? __lock_acquire+0xbdd/0x3ce0 [ 74.396341][ T6683] ? __pfx___lock_acquire+0x10/0x10 [ 74.397701][ T6683] __netif_receive_skb_list_core+0x357/0x950 [ 74.399278][ T6683] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 74.400980][ T6683] ? trace_lock_acquire+0x14a/0x1d0 [ 74.402361][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 74.404015][ T6683] ? lock_acquire+0x2f/0xb0 [ 74.405237][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 74.406898][ T6683] netif_receive_skb_list_internal+0x753/0xdb0 [ 74.408517][ T6683] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 74.410262][ T6683] ? __pfx_eth_type_trans+0x10/0x10 [ 74.411650][ T6683] ? __build_skb_around+0x278/0x3b0 [ 74.413023][ T6683] netif_receive_skb_list+0x4f/0x4a0 [ 74.414436][ T6683] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 74.416089][ T6683] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 74.417800][ T6683] ? bpf_test_timer_continue+0x150/0x3d0 [ 74.419242][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 74.420627][ T6683] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 74.422163][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 74.423716][ T6683] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 74.425299][ T6683] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 74.426848][ T6683] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 74.428237][ T6683] ? 0xffffffffa00045c0 [ 74.429311][ T6683] ? 0xffffffffa00045c0 [ 74.430359][ T6683] ? 0xffffffffa00045c0 [ 74.431421][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 74.432971][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 74.434406][ T6683] ? lock_acquire+0x2f/0xb0 [ 74.435622][ T6683] ? __fget_files+0x40/0x3f0 [ 74.436835][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 74.438373][ T6683] ? fput+0x30/0x390 [ 74.439407][ T6683] ? __bpf_prog_get+0xa0/0x290 [ 74.440673][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 74.442199][ T6683] __sys_bpf+0xfc6/0x49a0 [ 74.443352][ T6683] ? __pfx___sys_bpf+0x10/0x10 [ 74.444616][ T6683] ? __schedule+0xe5d/0x5730 [ 74.445859][ T6683] ? __fget_files+0x23a/0x3f0 [ 74.447072][ T6683] ? do_futex+0x123/0x350 [ 74.448177][ T6683] ? __pfx_do_futex+0x10/0x10 [ 74.449370][ T6683] ? xfd_validate_state+0x5d/0x180 [ 74.450637][ T6683] ? rcu_is_watching+0x12/0xc0 [ 74.451855][ T6683] __x64_sys_bpf+0x78/0xc0 [ 74.453025][ T6683] ? lockdep_hardirqs_on+0x7c/0x110 [ 74.454351][ T6683] do_syscall_64+0xcd/0x250 [ 74.455554][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.457049][ T6683] RIP: 0033:0x7f574217e719 [ 74.458202][ T6683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.463108][ T6683] RSP: 002b:00007f5742e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 74.465245][ T6683] RAX: ffffffffffffffda RBX: 00007f5742336058 RCX: 00007f574217e719 [ 74.467328][ T6683] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 74.469390][ T6683] RBP: 00007f57421f132e R08: 0000000000000000 R09: 0000000000000000 [ 74.471459][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.473468][ T6683] R13: 0000000000000000 R14: 00007f5742336058 R15: 00007ffe5115f908 [ 74.475545][ T6683] [ 74.476434][ T6683] BUG: Bad page state in process syz.2.194 pfn:4ca87 [ 74.478250][ T6683] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2 pfn:0x4ca87 [ 74.480489][ T6683] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 74.482315][ T6683] raw: 00fff00000000000 dead000000000040 ffff88802a52e000 0000000000000000 [ 74.484441][ T6683] raw: 0000000000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 74.486931][ T6683] page dumped because: page_pool leak [ 74.488325][ T6683] page_owner tracks the page as allocated [ 74.489801][ T6683] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6683, tgid 6674 (syz.2.194), ts 67591001421, free_ts 67589063933 [ 74.494091][ T6683] post_alloc_hook+0x2d1/0x350 [ 74.495475][ T6683] get_page_from_freelist+0x101e/0x3070 [ 74.496873][ T6683] __alloc_pages_noprof+0x223/0x25a0 [ 74.498215][ T6683] alloc_pages_bulk_noprof+0x77c/0x1110 [ 74.499636][ T6683] __page_pool_alloc_pages_slow+0x18f/0x770 [ 74.501127][ T6683] page_pool_alloc_netmem+0xc4/0x160 [ 74.502469][ T6683] page_pool_alloc_pages+0x1a/0x60 [ 74.503753][ T6683] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 74.505359][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 74.506729][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 74.508038][ T6683] __sys_bpf+0xfc6/0x49a0 [ 74.509116][ T6683] __x64_sys_bpf+0x78/0xc0 [ 74.510295][ T6683] do_syscall_64+0xcd/0x250 [ 74.511508][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.512984][ T6683] page last free pid 6671 tgid 6669 stack trace: [ 74.514602][ T6683] free_unref_page+0x5f4/0xdc0 [ 74.515859][ T6683] __folio_put+0x30d/0x3d0 [ 74.516991][ T6683] put_page+0x21e/0x280 [ 74.518045][ T6683] page_pool_return_page+0x400/0x520 [ 74.519378][ T6683] page_pool_release+0xf4/0x7d0 [ 74.520598][ T6683] page_pool_destroy+0x10a/0x4c0 [ 74.521812][ T6683] bpf_test_run_xdp_live+0x3a1/0x500 [ 74.523182][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 74.524588][ T6683] __sys_bpf+0xfc6/0x49a0 [ 74.525810][ T6683] __x64_sys_bpf+0x78/0xc0 [ 74.527004][ T6683] do_syscall_64+0xcd/0x250 [ 74.528198][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.529749][ T6683] Modules linked in: [ 74.530798][ T6683] CPU: 1 UID: 0 PID: 6683 Comm: syz.2.194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 74.533883][ T6683] Tainted: [B]=BAD_PAGE [ 74.535020][ T6683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 74.537783][ T6683] Call Trace: [ 74.538671][ T6683] [ 74.539450][ T6683] dump_stack_lvl+0x16c/0x1f0 [ 74.540687][ T6683] bad_page+0xb3/0x1f0 [ 74.541761][ T6683] ? __pfx_bad_page+0x10/0x10 [ 74.543002][ T6683] ? page_bad_reason+0x9d/0x1e0 [ 74.544274][ T6683] free_unref_page+0x657/0xdc0 [ 74.545550][ T6683] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 74.547109][ T6683] ? __phys_addr+0xc6/0x150 [ 74.548272][ T6683] skb_free_head+0xa0/0x1d0 [ 74.549419][ T6683] skb_release_data+0x560/0x730 [ 74.550659][ T6683] sk_skb_reason_drop+0x129/0x1a0 [ 74.551891][ T6683] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 74.553480][ T6683] ? kernel_text_address+0x8d/0x100 [ 74.554810][ T6683] ? hlock_class+0x4e/0x130 [ 74.555966][ T6683] ? __lock_acquire+0x163e/0x3ce0 [ 74.557208][ T6683] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 74.558903][ T6683] ? hlock_class+0x4e/0x130 [ 74.560013][ T6683] ? __lock_acquire+0xbdd/0x3ce0 [ 74.561226][ T6683] ? __pfx___lock_acquire+0x10/0x10 [ 74.562507][ T6683] __netif_receive_skb_list_core+0x357/0x950 [ 74.564046][ T6683] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 74.565744][ T6683] ? trace_lock_acquire+0x14a/0x1d0 [ 74.567015][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 74.568555][ T6683] ? lock_acquire+0x2f/0xb0 [ 74.569639][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 74.571196][ T6683] netif_receive_skb_list_internal+0x753/0xdb0 [ 74.572668][ T6683] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 74.574324][ T6683] ? __pfx_eth_type_trans+0x10/0x10 [ 74.575608][ T6683] ? __build_skb_around+0x278/0x3b0 [ 74.576967][ T6683] netif_receive_skb_list+0x4f/0x4a0 [ 74.578345][ T6683] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 74.579931][ T6683] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 74.581600][ T6683] ? bpf_test_timer_continue+0x150/0x3d0 [ 74.583042][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 74.584393][ T6683] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 74.585903][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 74.587416][ T6683] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 74.588879][ T6683] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 74.590334][ T6683] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 74.591649][ T6683] ? 0xffffffffa00045c0 [ 74.592683][ T6683] ? 0xffffffffa00045c0 [ 74.593706][ T6683] ? 0xffffffffa00045c0 [ 74.594740][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 74.596556][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 74.598503][ T6683] ? lock_acquire+0x2f/0xb0 [ 74.599729][ T6683] ? __fget_files+0x40/0x3f0 [ 74.600862][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 74.602280][ T6683] ? fput+0x30/0x390 [ 74.603273][ T6683] ? __bpf_prog_get+0xa0/0x290 [ 74.604471][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 74.606075][ T6683] __sys_bpf+0xfc6/0x49a0 [ 74.607226][ T6683] ? __pfx___sys_bpf+0x10/0x10 [ 74.608483][ T6683] ? __schedule+0xe5d/0x5730 [ 74.609703][ T6683] ? __fget_files+0x23a/0x3f0 [ 74.610957][ T6683] ? do_futex+0x123/0x350 [ 74.612098][ T6683] ? __pfx_do_futex+0x10/0x10 [ 74.613338][ T6683] ? xfd_validate_state+0x5d/0x180 [ 74.614706][ T6683] ? rcu_is_watching+0x12/0xc0 [ 74.616139][ T6683] __x64_sys_bpf+0x78/0xc0 [ 74.617314][ T6683] ? lockdep_hardirqs_on+0x7c/0x110 [ 74.618683][ T6683] do_syscall_64+0xcd/0x250 [ 74.619875][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.621411][ T6683] RIP: 0033:0x7f574217e719 [ 74.622506][ T6683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.627411][ T6683] RSP: 002b:00007f5742e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 74.629580][ T6683] RAX: ffffffffffffffda RBX: 00007f5742336058 RCX: 00007f574217e719 [ 74.631622][ T6683] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 74.633663][ T6683] RBP: 00007f57421f132e R08: 0000000000000000 R09: 0000000000000000 [ 74.635910][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.637945][ T6683] R13: 0000000000000000 R14: 00007f5742336058 R15: 00007ffe5115f908 [ 74.639998][ T6683] [ 74.640924][ T6683] BUG: Bad page state in process syz.2.194 pfn:4c9b8 [ 74.642702][ T6683] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804c9b9e00 pfn:0x4c9b8 [ 74.645483][ T6683] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 74.647671][ T6683] raw: 00fff00000000000 dead000000000040 ffff88802a52e000 0000000000000000 [ 74.649911][ T6683] raw: ffff88804c9b9e00 0000000000000001 00000000ffffffff 0000000000000000 [ 74.652109][ T6683] page dumped because: page_pool leak [ 74.653484][ T6683] page_owner tracks the page as allocated [ 74.655047][ T6683] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6683, tgid 6674 (syz.2.194), ts 67590996158, free_ts 67589067452 [ 74.659538][ T6683] post_alloc_hook+0x2d1/0x350 [ 74.660742][ T6683] get_page_from_freelist+0x101e/0x3070 [ 74.662136][ T6683] __alloc_pages_noprof+0x223/0x25a0 [ 74.663474][ T6683] alloc_pages_bulk_noprof+0x77c/0x1110 [ 74.664881][ T6683] __page_pool_alloc_pages_slow+0x18f/0x770 [ 74.666478][ T6683] page_pool_alloc_netmem+0xc4/0x160 [ 74.667772][ T6683] page_pool_alloc_pages+0x1a/0x60 [ 74.669073][ T6683] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 74.670684][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 74.672005][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 74.673353][ T6683] __sys_bpf+0xfc6/0x49a0 [ 74.674486][ T6683] __x64_sys_bpf+0x78/0xc0 [ 74.675882][ T6683] do_syscall_64+0xcd/0x250 [ 74.677036][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.678520][ T6683] page last free pid 6671 tgid 6669 stack trace: [ 74.680085][ T6683] free_unref_page+0x5f4/0xdc0 [ 74.681242][ T6683] __folio_put+0x30d/0x3d0 [ 74.682356][ T6683] put_page+0x21e/0x280 [ 74.683367][ T6683] page_pool_return_page+0x400/0x520 [ 74.684692][ T6683] page_pool_release+0xf4/0x7d0 [ 74.686045][ T6683] page_pool_destroy+0x10a/0x4c0 [ 74.687300][ T6683] bpf_test_run_xdp_live+0x3a1/0x500 [ 74.688649][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 74.690055][ T6683] __sys_bpf+0xfc6/0x49a0 [ 74.691165][ T6683] __x64_sys_bpf+0x78/0xc0 [ 74.692299][ T6683] do_syscall_64+0xcd/0x250 [ 74.693432][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.695064][ T6683] Modules linked in: [ 74.696192][ T6683] CPU: 1 UID: 0 PID: 6683 Comm: syz.2.194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 74.699096][ T6683] Tainted: [B]=BAD_PAGE [ 74.700173][ T6683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 74.702828][ T6683] Call Trace: [ 74.703677][ T6683] [ 74.704416][ T6683] dump_stack_lvl+0x16c/0x1f0 [ 74.705742][ T6683] bad_page+0xb3/0x1f0 [ 74.706769][ T6683] ? __pfx_bad_page+0x10/0x10 [ 74.707966][ T6683] ? page_bad_reason+0x9d/0x1e0 [ 74.709200][ T6683] free_unref_page+0x657/0xdc0 [ 74.710456][ T6683] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 74.712020][ T6683] ? __phys_addr+0xc6/0x150 [ 74.713215][ T6683] skb_free_head+0xa0/0x1d0 [ 74.714419][ T6683] skb_release_data+0x560/0x730 [ 74.715854][ T6683] sk_skb_reason_drop+0x129/0x1a0 [ 74.717363][ T6683] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 74.719115][ T6683] ? kernel_text_address+0x8d/0x100 [ 74.720475][ T6683] ? hlock_class+0x4e/0x130 [ 74.721669][ T6683] ? __lock_acquire+0x163e/0x3ce0 [ 74.723005][ T6683] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 74.724863][ T6683] ? hlock_class+0x4e/0x130 [ 74.726162][ T6683] ? __lock_acquire+0xbdd/0x3ce0 [ 74.727478][ T6683] ? __pfx___lock_acquire+0x10/0x10 [ 74.728841][ T6683] __netif_receive_skb_list_core+0x357/0x950 [ 74.730423][ T6683] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 74.732104][ T6683] ? trace_lock_acquire+0x14a/0x1d0 [ 74.733464][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 74.735193][ T6683] ? lock_acquire+0x2f/0xb0 [ 74.736502][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 74.738152][ T6683] netif_receive_skb_list_internal+0x753/0xdb0 [ 74.739773][ T6683] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 74.741500][ T6683] ? __pfx_eth_type_trans+0x10/0x10 [ 74.742871][ T6683] ? __build_skb_around+0x278/0x3b0 [ 74.744234][ T6683] netif_receive_skb_list+0x4f/0x4a0 [ 74.745694][ T6683] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 74.747365][ T6683] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 74.749073][ T6683] ? bpf_test_timer_continue+0x150/0x3d0 [ 74.750552][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 74.751930][ T6683] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 74.753457][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 74.755036][ T6683] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 74.756729][ T6683] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 74.758278][ T6683] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 74.759737][ T6683] ? 0xffffffffa00045c0 [ 74.760943][ T6683] ? 0xffffffffa00045c0 [ 74.762048][ T6683] ? 0xffffffffa00045c0 [ 74.763155][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 74.764642][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 74.766123][ T6683] ? lock_acquire+0x2f/0xb0 [ 74.767424][ T6683] ? __fget_files+0x40/0x3f0 [ 74.768666][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 74.770208][ T6683] ? fput+0x30/0x390 [ 74.771271][ T6683] ? __bpf_prog_get+0xa0/0x290 [ 74.772547][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 74.774099][ T6683] __sys_bpf+0xfc6/0x49a0 [ 74.775345][ T6683] ? __pfx___sys_bpf+0x10/0x10 [ 74.776697][ T6683] ? __schedule+0xe5d/0x5730 [ 74.777910][ T6683] ? __fget_files+0x23a/0x3f0 [ 74.779153][ T6683] ? do_futex+0x123/0x350 [ 74.780289][ T6683] ? __pfx_do_futex+0x10/0x10 [ 74.781531][ T6683] ? xfd_validate_state+0x5d/0x180 [ 74.782880][ T6683] ? rcu_is_watching+0x12/0xc0 [ 74.784149][ T6683] __x64_sys_bpf+0x78/0xc0 [ 74.785412][ T6683] ? lockdep_hardirqs_on+0x7c/0x110 [ 74.786799][ T6683] do_syscall_64+0xcd/0x250 [ 74.787998][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.789546][ T6683] RIP: 0033:0x7f574217e719 [ 74.790731][ T6683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.795837][ T6683] RSP: 002b:00007f5742e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 74.797936][ T6683] RAX: ffffffffffffffda RBX: 00007f5742336058 RCX: 00007f574217e719 [ 74.799858][ T6683] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 74.801882][ T6683] RBP: 00007f57421f132e R08: 0000000000000000 R09: 0000000000000000 [ 74.803936][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.806056][ T6683] R13: 0000000000000000 R14: 00007f5742336058 R15: 00007ffe5115f908 [ 74.808117][ T6683] [ 74.809018][ T6683] BUG: Bad page state in process syz.2.194 pfn:4c9b9 [ 74.810849][ T6683] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2 pfn:0x4c9b9 [ 74.813111][ T6683] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 74.815200][ T6683] raw: 00fff00000000000 dead000000000040 ffff88802a52e000 0000000000000000 [ 74.817376][ T6683] raw: 0000000000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 74.819581][ T6683] page dumped because: page_pool leak [ 74.820961][ T6683] page_owner tracks the page as allocated [ 74.822435][ T6683] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6683, tgid 6674 (syz.2.194), ts 67590991178, free_ts 67589071174 [ 74.826820][ T6683] post_alloc_hook+0x2d1/0x350 [ 74.828083][ T6683] get_page_from_freelist+0x101e/0x3070 [ 74.829532][ T6683] __alloc_pages_noprof+0x223/0x25a0 [ 74.830925][ T6683] alloc_pages_bulk_noprof+0x77c/0x1110 [ 74.832366][ T6683] __page_pool_alloc_pages_slow+0x18f/0x770 [ 74.833899][ T6683] page_pool_alloc_netmem+0xc4/0x160 [ 74.835474][ T6683] page_pool_alloc_pages+0x1a/0x60 [ 74.837157][ T6683] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 74.838773][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 74.840148][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 74.841542][ T6683] __sys_bpf+0xfc6/0x49a0 [ 74.842677][ T6683] __x64_sys_bpf+0x78/0xc0 [ 74.843842][ T6683] do_syscall_64+0xcd/0x250 [ 74.845118][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.846829][ T6683] page last free pid 6671 tgid 6669 stack trace: [ 74.848468][ T6683] free_unref_page+0x5f4/0xdc0 [ 74.849712][ T6683] __folio_put+0x30d/0x3d0 [ 74.850888][ T6683] put_page+0x21e/0x280 [ 74.851980][ T6683] page_pool_return_page+0x400/0x520 [ 74.853356][ T6683] page_pool_release+0xf4/0x7d0 [ 74.854658][ T6683] page_pool_destroy+0x10a/0x4c0 [ 74.856178][ T6683] bpf_test_run_xdp_live+0x3a1/0x500 [ 74.857692][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 74.859107][ T6683] __sys_bpf+0xfc6/0x49a0 [ 74.860242][ T6683] __x64_sys_bpf+0x78/0xc0 [ 74.861413][ T6683] do_syscall_64+0xcd/0x250 [ 74.862709][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.864241][ T6683] Modules linked in: [ 74.865404][ T6683] CPU: 1 UID: 0 PID: 6683 Comm: syz.2.194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 74.868597][ T6683] Tainted: [B]=BAD_PAGE [ 74.869674][ T6683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 74.872431][ T6683] Call Trace: [ 74.873311][ T6683] [ 74.874104][ T6683] dump_stack_lvl+0x16c/0x1f0 [ 74.875509][ T6683] bad_page+0xb3/0x1f0 [ 74.876620][ T6683] ? __pfx_bad_page+0x10/0x10 [ 74.877851][ T6683] ? page_bad_reason+0x9d/0x1e0 [ 74.879140][ T6683] free_unref_page+0x657/0xdc0 [ 74.880397][ T6683] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 74.881909][ T6683] ? __phys_addr+0xc6/0x150 [ 74.883050][ T6683] skb_free_head+0xa0/0x1d0 [ 74.884154][ T6683] skb_release_data+0x560/0x730 [ 74.885449][ T6683] sk_skb_reason_drop+0x129/0x1a0 [ 74.886772][ T6683] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 74.888502][ T6683] ? kernel_text_address+0x8d/0x100 [ 74.889856][ T6683] ? hlock_class+0x4e/0x130 [ 74.891052][ T6683] ? __lock_acquire+0x163e/0x3ce0 [ 74.892367][ T6683] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 74.894218][ T6683] ? hlock_class+0x4e/0x130 [ 74.895585][ T6683] ? __lock_acquire+0xbdd/0x3ce0 [ 74.896894][ T6683] ? __pfx___lock_acquire+0x10/0x10 [ 74.898252][ T6683] __netif_receive_skb_list_core+0x357/0x950 [ 74.899832][ T6683] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 74.901534][ T6683] ? trace_lock_acquire+0x14a/0x1d0 [ 74.902900][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 74.904551][ T6683] ? lock_acquire+0x2f/0xb0 [ 74.905854][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 74.907502][ T6683] netif_receive_skb_list_internal+0x753/0xdb0 [ 74.909087][ T6683] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 74.910819][ T6683] ? __pfx_eth_type_trans+0x10/0x10 [ 74.912168][ T6683] ? __build_skb_around+0x278/0x3b0 [ 74.913528][ T6683] netif_receive_skb_list+0x4f/0x4a0 [ 74.914930][ T6683] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 74.916733][ T6683] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 74.918453][ T6683] ? bpf_test_timer_continue+0x150/0x3d0 [ 74.919914][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 74.921290][ T6683] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 74.922811][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 74.924342][ T6683] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 74.925957][ T6683] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 74.927486][ T6683] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 74.928854][ T6683] ? 0xffffffffa00045c0 [ 74.929939][ T6683] ? 0xffffffffa00045c0 [ 74.931072][ T6683] ? 0xffffffffa00045c0 [ 74.932181][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 74.933725][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 74.935221][ T6683] ? lock_acquire+0x2f/0xb0 [ 74.936524][ T6683] ? __fget_files+0x40/0x3f0 [ 74.937737][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 74.939258][ T6683] ? fput+0x30/0x390 [ 74.940285][ T6683] ? __bpf_prog_get+0xa0/0x290 [ 74.941533][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 74.943054][ T6683] __sys_bpf+0xfc6/0x49a0 [ 74.944186][ T6683] ? __pfx___sys_bpf+0x10/0x10 [ 74.945530][ T6683] ? __schedule+0xe5d/0x5730 [ 74.946750][ T6683] ? __fget_files+0x23a/0x3f0 [ 74.947983][ T6683] ? do_futex+0x123/0x350 [ 74.949111][ T6683] ? __pfx_do_futex+0x10/0x10 [ 74.950360][ T6683] ? xfd_validate_state+0x5d/0x180 [ 74.951699][ T6683] ? rcu_is_watching+0x12/0xc0 [ 74.952944][ T6683] __x64_sys_bpf+0x78/0xc0 [ 74.954131][ T6683] ? lockdep_hardirqs_on+0x7c/0x110 [ 74.955667][ T6683] do_syscall_64+0xcd/0x250 [ 74.956857][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.958323][ T6683] RIP: 0033:0x7f574217e719 [ 74.959464][ T6683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.964438][ T6683] RSP: 002b:00007f5742e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 74.966722][ T6683] RAX: ffffffffffffffda RBX: 00007f5742336058 RCX: 00007f574217e719 [ 74.968688][ T6683] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 74.970618][ T6683] RBP: 00007f57421f132e R08: 0000000000000000 R09: 0000000000000000 [ 74.972605][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.974560][ T6683] R13: 0000000000000000 R14: 00007f5742336058 R15: 00007ffe5115f908 [ 74.976713][ T6683] [ 74.977596][ T6683] BUG: Bad page state in process syz.2.194 pfn:2386a [ 74.979985][ T6683] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802386be00 pfn:0x2386a [ 74.982880][ T6683] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 74.984616][ T6683] raw: 00fff00000000000 dead000000000040 ffff88802a52e000 0000000000000000 [ 74.986943][ T6683] raw: ffff88802386be00 0000000000000001 00000000ffffffff 0000000000000000 [ 74.989175][ T6683] page dumped because: page_pool leak [ 74.990560][ T6683] page_owner tracks the page as allocated [ 74.992022][ T6683] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6683, tgid 6674 (syz.2.194), ts 67590986729, free_ts 67589074803 [ 74.996349][ T6683] post_alloc_hook+0x2d1/0x350 [ 74.997638][ T6683] get_page_from_freelist+0x101e/0x3070 [ 74.999054][ T6683] __alloc_pages_noprof+0x223/0x25a0 [ 75.000406][ T6683] alloc_pages_bulk_noprof+0x77c/0x1110 [ 75.001796][ T6683] __page_pool_alloc_pages_slow+0x18f/0x770 [ 75.003213][ T6683] page_pool_alloc_netmem+0xc4/0x160 [ 75.004563][ T6683] page_pool_alloc_pages+0x1a/0x60 [ 75.005971][ T6683] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 75.007671][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 75.009050][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 75.010432][ T6683] __sys_bpf+0xfc6/0x49a0 [ 75.011535][ T6683] __x64_sys_bpf+0x78/0xc0 [ 75.012701][ T6683] do_syscall_64+0xcd/0x250 [ 75.013893][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.015527][ T6683] page last free pid 6671 tgid 6669 stack trace: [ 75.017284][ T6683] free_unref_page+0x5f4/0xdc0 [ 75.018542][ T6683] __folio_put+0x30d/0x3d0 [ 75.019707][ T6683] put_page+0x21e/0x280 [ 75.020791][ T6683] page_pool_return_page+0x400/0x520 [ 75.022156][ T6683] page_pool_release+0xf4/0x7d0 [ 75.023445][ T6683] page_pool_destroy+0x10a/0x4c0 [ 75.024740][ T6683] bpf_test_run_xdp_live+0x3a1/0x500 [ 75.026188][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 75.027727][ T6683] __sys_bpf+0xfc6/0x49a0 [ 75.028861][ T6683] __x64_sys_bpf+0x78/0xc0 [ 75.030031][ T6683] do_syscall_64+0xcd/0x250 [ 75.031233][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.032774][ T6683] Modules linked in: [ 75.033801][ T6683] CPU: 1 UID: 0 PID: 6683 Comm: syz.2.194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 75.036915][ T6683] Tainted: [B]=BAD_PAGE [ 75.037965][ T6683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.040597][ T6683] Call Trace: [ 75.041471][ T6683] [ 75.042242][ T6683] dump_stack_lvl+0x16c/0x1f0 [ 75.043493][ T6683] bad_page+0xb3/0x1f0 [ 75.044563][ T6683] ? __pfx_bad_page+0x10/0x10 [ 75.045811][ T6683] ? page_bad_reason+0x9d/0x1e0 [ 75.047083][ T6683] free_unref_page+0x657/0xdc0 [ 75.048326][ T6683] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 75.049849][ T6683] ? __phys_addr+0xc6/0x150 [ 75.051034][ T6683] skb_free_head+0xa0/0x1d0 [ 75.052232][ T6683] skb_release_data+0x560/0x730 [ 75.053497][ T6683] sk_skb_reason_drop+0x129/0x1a0 [ 75.054788][ T6683] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 75.056524][ T6683] ? kernel_text_address+0x8d/0x100 [ 75.057846][ T6683] ? hlock_class+0x4e/0x130 [ 75.059023][ T6683] ? __lock_acquire+0x163e/0x3ce0 [ 75.060340][ T6683] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 75.062174][ T6683] ? hlock_class+0x4e/0x130 [ 75.063379][ T6683] ? __lock_acquire+0xbdd/0x3ce0 [ 75.064667][ T6683] ? __pfx___lock_acquire+0x10/0x10 [ 75.066044][ T6683] __netif_receive_skb_list_core+0x357/0x950 [ 75.067656][ T6683] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 75.069306][ T6683] ? trace_lock_acquire+0x14a/0x1d0 [ 75.070615][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 75.072224][ T6683] ? lock_acquire+0x2f/0xb0 [ 75.073387][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 75.075030][ T6683] netif_receive_skb_list_internal+0x753/0xdb0 [ 75.076661][ T6683] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 75.078420][ T6683] ? __pfx_eth_type_trans+0x10/0x10 [ 75.079793][ T6683] ? __build_skb_around+0x278/0x3b0 [ 75.081161][ T6683] netif_receive_skb_list+0x4f/0x4a0 [ 75.082534][ T6683] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 75.084103][ T6683] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 75.085761][ T6683] ? bpf_test_timer_continue+0x150/0x3d0 [ 75.087222][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 75.088538][ T6683] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 75.089986][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 75.091514][ T6683] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 75.092995][ T6683] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 75.094437][ T6683] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 75.095790][ T6683] ? 0xffffffffa00045c0 [ 75.096863][ T6683] ? 0xffffffffa00045c0 [ 75.097946][ T6683] ? 0xffffffffa00045c0 [ 75.099034][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 75.100642][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 75.102063][ T6683] ? lock_acquire+0x2f/0xb0 [ 75.103287][ T6683] ? __fget_files+0x40/0x3f0 [ 75.104508][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 75.106248][ T6683] ? fput+0x30/0x390 [ 75.107301][ T6683] ? __bpf_prog_get+0xa0/0x290 [ 75.108566][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 75.110089][ T6683] __sys_bpf+0xfc6/0x49a0 [ 75.111240][ T6683] ? __pfx___sys_bpf+0x10/0x10 [ 75.112496][ T6683] ? __schedule+0xe5d/0x5730 [ 75.113711][ T6683] ? __fget_files+0x23a/0x3f0 [ 75.114972][ T6683] ? do_futex+0x123/0x350 [ 75.116153][ T6683] ? __pfx_do_futex+0x10/0x10 [ 75.117570][ T6683] ? xfd_validate_state+0x5d/0x180 [ 75.118920][ T6683] ? rcu_is_watching+0x12/0xc0 [ 75.120154][ T6683] __x64_sys_bpf+0x78/0xc0 [ 75.121300][ T6683] ? lockdep_hardirqs_on+0x7c/0x110 [ 75.122675][ T6683] do_syscall_64+0xcd/0x250 [ 75.123871][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.125568][ T6683] RIP: 0033:0x7f574217e719 [ 75.126821][ T6683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.131918][ T6683] RSP: 002b:00007f5742e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 75.134006][ T6683] RAX: ffffffffffffffda RBX: 00007f5742336058 RCX: 00007f574217e719 [ 75.136118][ T6683] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 75.138181][ T6683] RBP: 00007f57421f132e R08: 0000000000000000 R09: 0000000000000000 [ 75.140240][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.142298][ T6683] R13: 0000000000000000 R14: 00007f5742336058 R15: 00007ffe5115f908 [ 75.144350][ T6683] [ 75.145351][ T6683] BUG: Bad page state in process syz.2.194 pfn:2386b [ 75.147648][ T6683] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2 pfn:0x2386b [ 75.150463][ T6683] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 75.152291][ T6683] raw: 00fff00000000000 dead000000000040 ffff88802a52e000 0000000000000000 [ 75.154499][ T6683] raw: 0000000000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 75.156818][ T6683] page dumped because: page_pool leak [ 75.158291][ T6683] page_owner tracks the page as allocated [ 75.159672][ T6683] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6683, tgid 6674 (syz.2.194), ts 67590981996, free_ts 67589078394 [ 75.163885][ T6683] post_alloc_hook+0x2d1/0x350 [ 75.165253][ T6683] get_page_from_freelist+0x101e/0x3070 [ 75.166872][ T6683] __alloc_pages_noprof+0x223/0x25a0 [ 75.168256][ T6683] alloc_pages_bulk_noprof+0x77c/0x1110 [ 75.169833][ T6683] __page_pool_alloc_pages_slow+0x18f/0x770 [ 75.171379][ T6683] page_pool_alloc_netmem+0xc4/0x160 [ 75.172730][ T6683] page_pool_alloc_pages+0x1a/0x60 [ 75.173959][ T6683] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 75.175659][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 75.177166][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 75.178519][ T6683] __sys_bpf+0xfc6/0x49a0 [ 75.179601][ T6683] __x64_sys_bpf+0x78/0xc0 [ 75.180754][ T6683] do_syscall_64+0xcd/0x250 [ 75.181883][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.183407][ T6683] page last free pid 6671 tgid 6669 stack trace: [ 75.184937][ T6683] free_unref_page+0x5f4/0xdc0 [ 75.186441][ T6683] __folio_put+0x30d/0x3d0 [ 75.187765][ T6683] put_page+0x21e/0x280 [ 75.188849][ T6683] page_pool_return_page+0x400/0x520 [ 75.190214][ T6683] page_pool_release+0xf4/0x7d0 [ 75.191492][ T6683] page_pool_destroy+0x10a/0x4c0 [ 75.192758][ T6683] bpf_test_run_xdp_live+0x3a1/0x500 [ 75.194141][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 75.195636][ T6683] __sys_bpf+0xfc6/0x49a0 [ 75.196876][ T6683] __x64_sys_bpf+0x78/0xc0 [ 75.197969][ T6683] do_syscall_64+0xcd/0x250 [ 75.199066][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.200541][ T6683] Modules linked in: [ 75.201507][ T6683] CPU: 1 UID: 0 PID: 6683 Comm: syz.2.194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 75.204544][ T6683] Tainted: [B]=BAD_PAGE [ 75.205676][ T6683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.208441][ T6683] Call Trace: [ 75.209315][ T6683] [ 75.210085][ T6683] dump_stack_lvl+0x16c/0x1f0 [ 75.211311][ T6683] bad_page+0xb3/0x1f0 [ 75.212310][ T6683] ? __pfx_bad_page+0x10/0x10 [ 75.213548][ T6683] ? page_bad_reason+0x9d/0x1e0 [ 75.214850][ T6683] free_unref_page+0x657/0xdc0 [ 75.216121][ T6683] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 75.217683][ T6683] ? __phys_addr+0xc6/0x150 [ 75.219002][ T6683] skb_free_head+0xa0/0x1d0 [ 75.220235][ T6683] skb_release_data+0x560/0x730 [ 75.221552][ T6683] sk_skb_reason_drop+0x129/0x1a0 [ 75.223034][ T6683] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 75.224819][ T6683] ? kernel_text_address+0x8d/0x100 [ 75.226224][ T6683] ? hlock_class+0x4e/0x130 [ 75.227411][ T6683] ? __lock_acquire+0x163e/0x3ce0 [ 75.228676][ T6683] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 75.230534][ T6683] ? hlock_class+0x4e/0x130 [ 75.231740][ T6683] ? __lock_acquire+0xbdd/0x3ce0 [ 75.232893][ T6683] ? __pfx___lock_acquire+0x10/0x10 [ 75.234274][ T6683] __netif_receive_skb_list_core+0x357/0x950 [ 75.235931][ T6683] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 75.237618][ T6683] ? trace_lock_acquire+0x14a/0x1d0 [ 75.238936][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 75.240557][ T6683] ? lock_acquire+0x2f/0xb0 [ 75.241657][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 75.243319][ T6683] netif_receive_skb_list_internal+0x753/0xdb0 [ 75.244936][ T6683] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 75.246696][ T6683] ? __pfx_eth_type_trans+0x10/0x10 [ 75.248064][ T6683] ? __build_skb_around+0x278/0x3b0 [ 75.249441][ T6683] netif_receive_skb_list+0x4f/0x4a0 [ 75.250849][ T6683] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 75.252460][ T6683] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 75.254117][ T6683] ? bpf_test_timer_continue+0x150/0x3d0 [ 75.255640][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 75.257024][ T6683] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 75.258561][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 75.260106][ T6683] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 75.261645][ T6683] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 75.263187][ T6683] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 75.264572][ T6683] ? 0xffffffffa00045c0 [ 75.265648][ T6683] ? 0xffffffffa00045c0 [ 75.266666][ T6683] ? 0xffffffffa00045c0 [ 75.267675][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 75.269098][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 75.270408][ T6683] ? lock_acquire+0x2f/0xb0 [ 75.271567][ T6683] ? __fget_files+0x40/0x3f0 [ 75.272825][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 75.274385][ T6683] ? fput+0x30/0x390 [ 75.275466][ T6683] ? __bpf_prog_get+0xa0/0x290 [ 75.276719][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 75.278243][ T6683] __sys_bpf+0xfc6/0x49a0 [ 75.279551][ T6683] ? __pfx___sys_bpf+0x10/0x10 [ 75.280814][ T6683] ? __schedule+0xe5d/0x5730 [ 75.282144][ T6683] ? __fget_files+0x23a/0x3f0 [ 75.283417][ T6683] ? do_futex+0x123/0x350 [ 75.284564][ T6683] ? __pfx_do_futex+0x10/0x10 [ 75.285857][ T6683] ? xfd_validate_state+0x5d/0x180 [ 75.287135][ T6683] ? rcu_is_watching+0x12/0xc0 [ 75.288350][ T6683] __x64_sys_bpf+0x78/0xc0 [ 75.289478][ T6683] ? lockdep_hardirqs_on+0x7c/0x110 [ 75.290838][ T6683] do_syscall_64+0xcd/0x250 [ 75.292004][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.293493][ T6683] RIP: 0033:0x7f574217e719 [ 75.294669][ T6683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.299518][ T6683] RSP: 002b:00007f5742e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 75.301710][ T6683] RAX: ffffffffffffffda RBX: 00007f5742336058 RCX: 00007f574217e719 [ 75.303774][ T6683] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 75.305864][ T6683] RBP: 00007f57421f132e R08: 0000000000000000 R09: 0000000000000000 [ 75.307929][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.309986][ T6683] R13: 0000000000000000 R14: 00007f5742336058 R15: 00007ffe5115f908 [ 75.312068][ T6683] [ 75.313012][ T6683] BUG: Bad page state in process syz.2.194 pfn:314c4 [ 75.315574][ T6683] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880314c5e00 pfn:0x314c4 [ 75.318387][ T6683] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 75.320232][ T6683] raw: 00fff00000000000 dead000000000040 ffff88802a52e000 0000000000000000 [ 75.322570][ T6683] raw: ffff8880314c5e00 0000000000000001 00000000ffffffff 0000000000000000 [ 75.324815][ T6683] page dumped because: page_pool leak [ 75.326304][ T6683] page_owner tracks the page as allocated [ 75.327776][ T6683] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6683, tgid 6674 (syz.2.194), ts 67590977530, free_ts 67589082932 [ 75.332006][ T6683] post_alloc_hook+0x2d1/0x350 [ 75.333211][ T6683] get_page_from_freelist+0x101e/0x3070 [ 75.334668][ T6683] __alloc_pages_noprof+0x223/0x25a0 [ 75.336139][ T6683] alloc_pages_bulk_noprof+0x77c/0x1110 [ 75.337564][ T6683] __page_pool_alloc_pages_slow+0x18f/0x770 [ 75.339098][ T6683] page_pool_alloc_netmem+0xc4/0x160 [ 75.340467][ T6683] page_pool_alloc_pages+0x1a/0x60 [ 75.341797][ T6683] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 75.343373][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 75.344746][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 75.346211][ T6683] __sys_bpf+0xfc6/0x49a0 [ 75.347340][ T6683] __x64_sys_bpf+0x78/0xc0 [ 75.348496][ T6683] do_syscall_64+0xcd/0x250 [ 75.349677][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.351210][ T6683] page last free pid 6671 tgid 6669 stack trace: [ 75.352824][ T6683] free_unref_page+0x5f4/0xdc0 [ 75.354089][ T6683] __folio_put+0x30d/0x3d0 [ 75.355336][ T6683] put_page+0x21e/0x280 [ 75.356339][ T6683] page_pool_return_page+0x400/0x520 [ 75.357659][ T6683] page_pool_release+0xf4/0x7d0 [ 75.358931][ T6683] page_pool_destroy+0x10a/0x4c0 [ 75.360180][ T6683] bpf_test_run_xdp_live+0x3a1/0x500 [ 75.361507][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 75.362912][ T6683] __sys_bpf+0xfc6/0x49a0 [ 75.364042][ T6683] __x64_sys_bpf+0x78/0xc0 [ 75.365291][ T6683] do_syscall_64+0xcd/0x250 [ 75.366478][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.367984][ T6683] Modules linked in: [ 75.369004][ T6683] CPU: 1 UID: 0 PID: 6683 Comm: syz.2.194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 75.372061][ T6683] Tainted: [B]=BAD_PAGE [ 75.373132][ T6683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.375913][ T6683] Call Trace: [ 75.376780][ T6683] [ 75.377551][ T6683] dump_stack_lvl+0x16c/0x1f0 [ 75.378785][ T6683] bad_page+0xb3/0x1f0 [ 75.379848][ T6683] ? __pfx_bad_page+0x10/0x10 [ 75.381077][ T6683] ? page_bad_reason+0x9d/0x1e0 [ 75.382350][ T6683] free_unref_page+0x657/0xdc0 [ 75.383593][ T6683] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 75.385186][ T6683] ? __phys_addr+0xc6/0x150 [ 75.386389][ T6683] skb_free_head+0xa0/0x1d0 [ 75.387576][ T6683] skb_release_data+0x560/0x730 [ 75.388846][ T6683] sk_skb_reason_drop+0x129/0x1a0 [ 75.390159][ T6683] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 75.391879][ T6683] ? kernel_text_address+0x8d/0x100 [ 75.393223][ T6683] ? hlock_class+0x4e/0x130 [ 75.394428][ T6683] ? __lock_acquire+0x163e/0x3ce0 [ 75.395757][ T6683] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 75.397573][ T6683] ? hlock_class+0x4e/0x130 [ 75.398770][ T6683] ? __lock_acquire+0xbdd/0x3ce0 [ 75.400053][ T6683] ? __pfx___lock_acquire+0x10/0x10 [ 75.401403][ T6683] __netif_receive_skb_list_core+0x357/0x950 [ 75.402913][ T6683] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 75.404585][ T6683] ? trace_lock_acquire+0x14a/0x1d0 [ 75.405970][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 75.407607][ T6683] ? lock_acquire+0x2f/0xb0 [ 75.408745][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 75.410365][ T6683] netif_receive_skb_list_internal+0x753/0xdb0 [ 75.411978][ T6683] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 75.413667][ T6683] ? __pfx_eth_type_trans+0x10/0x10 [ 75.415000][ T6683] ? __build_skb_around+0x278/0x3b0 [ 75.416363][ T6683] netif_receive_skb_list+0x4f/0x4a0 [ 75.417731][ T6683] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 75.419291][ T6683] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 75.420986][ T6683] ? bpf_test_timer_continue+0x150/0x3d0 [ 75.422353][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 75.423724][ T6683] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 75.425261][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 75.426793][ T6683] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 75.428317][ T6683] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 75.429819][ T6683] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 75.431191][ T6683] ? 0xffffffffa00045c0 [ 75.432265][ T6683] ? 0xffffffffa00045c0 [ 75.433339][ T6683] ? 0xffffffffa00045c0 [ 75.434441][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 75.435947][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 75.437331][ T6683] ? lock_acquire+0x2f/0xb0 [ 75.438515][ T6683] ? __fget_files+0x40/0x3f0 [ 75.439701][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 75.441225][ T6683] ? fput+0x30/0x390 [ 75.442247][ T6683] ? __bpf_prog_get+0xa0/0x290 [ 75.443668][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 75.445265][ T6683] __sys_bpf+0xfc6/0x49a0 [ 75.446430][ T6683] ? __pfx___sys_bpf+0x10/0x10 [ 75.447700][ T6683] ? __schedule+0xe5d/0x5730 [ 75.448929][ T6683] ? __fget_files+0x23a/0x3f0 [ 75.450163][ T6683] ? do_futex+0x123/0x350 [ 75.451317][ T6683] ? __pfx_do_futex+0x10/0x10 [ 75.452567][ T6683] ? xfd_validate_state+0x5d/0x180 [ 75.453853][ T6683] ? rcu_is_watching+0x12/0xc0 [ 75.455172][ T6683] __x64_sys_bpf+0x78/0xc0 [ 75.456348][ T6683] ? lockdep_hardirqs_on+0x7c/0x110 [ 75.457722][ T6683] do_syscall_64+0xcd/0x250 [ 75.458937][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.460485][ T6683] RIP: 0033:0x7f574217e719 [ 75.461598][ T6683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.466532][ T6683] RSP: 002b:00007f5742e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 75.468669][ T6683] RAX: ffffffffffffffda RBX: 00007f5742336058 RCX: 00007f574217e719 [ 75.470730][ T6683] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 75.472733][ T6683] RBP: 00007f57421f132e R08: 0000000000000000 R09: 0000000000000000 [ 75.474816][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.476881][ T6683] R13: 0000000000000000 R14: 00007f5742336058 R15: 00007ffe5115f908 [ 75.479802][ T6683] [ 75.481895][ T6683] BUG: Bad page state in process syz.2.194 pfn:314c5 [ 75.484433][ T6683] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2 pfn:0x314c5 [ 75.487144][ T6683] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 75.489012][ T6683] raw: 00fff00000000000 dead000000000040 ffff88802a52e000 0000000000000000 [ 75.491355][ T6683] raw: 0000000000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 75.493622][ T6683] page dumped because: page_pool leak [ 75.495258][ T6683] page_owner tracks the page as allocated [ 75.496769][ T6683] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6683, tgid 6674 (syz.2.194), ts 67590972096, free_ts 67589086495 [ 75.501098][ T6683] post_alloc_hook+0x2d1/0x350 [ 75.502480][ T6683] get_page_from_freelist+0x101e/0x3070 [ 75.503941][ T6683] __alloc_pages_noprof+0x223/0x25a0 [ 75.505404][ T6683] alloc_pages_bulk_noprof+0x77c/0x1110 [ 75.506898][ T6683] __page_pool_alloc_pages_slow+0x18f/0x770 [ 75.508562][ T6683] page_pool_alloc_netmem+0xc4/0x160 [ 75.510454][ T6683] page_pool_alloc_pages+0x1a/0x60 [ 75.512279][ T6683] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 75.514464][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 75.516455][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 75.518488][ T6683] __sys_bpf+0xfc6/0x49a0 [ 75.520046][ T6683] __x64_sys_bpf+0x78/0xc0 [ 75.521455][ T6683] do_syscall_64+0xcd/0x250 [ 75.522638][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.524139][ T6683] page last free pid 6671 tgid 6669 stack trace: [ 75.525811][ T6683] free_unref_page+0x5f4/0xdc0 [ 75.527153][ T6683] __folio_put+0x30d/0x3d0 [ 75.528490][ T6683] put_page+0x21e/0x280 [ 75.529572][ T6683] page_pool_return_page+0x400/0x520 [ 75.530951][ T6683] page_pool_release+0xf4/0x7d0 [ 75.532212][ T6683] page_pool_destroy+0x10a/0x4c0 [ 75.533502][ T6683] bpf_test_run_xdp_live+0x3a1/0x500 [ 75.534917][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 75.536370][ T6683] __sys_bpf+0xfc6/0x49a0 [ 75.537548][ T6683] __x64_sys_bpf+0x78/0xc0 [ 75.538629][ T6683] do_syscall_64+0xcd/0x250 [ 75.539804][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.541335][ T6683] Modules linked in: [ 75.542370][ T6683] CPU: 1 UID: 0 PID: 6683 Comm: syz.2.194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 75.545423][ T6683] Tainted: [B]=BAD_PAGE [ 75.546657][ T6683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.550283][ T6683] Call Trace: [ 75.551124][ T6683] [ 75.551917][ T6683] dump_stack_lvl+0x16c/0x1f0 [ 75.553094][ T6683] bad_page+0xb3/0x1f0 [ 75.554146][ T6683] ? __pfx_bad_page+0x10/0x10 [ 75.555444][ T6683] ? page_bad_reason+0x9d/0x1e0 [ 75.556907][ T6683] free_unref_page+0x657/0xdc0 [ 75.558119][ T6683] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 75.559696][ T6683] ? __phys_addr+0xc6/0x150 [ 75.560878][ T6683] skb_free_head+0xa0/0x1d0 [ 75.562071][ T6683] skb_release_data+0x560/0x730 [ 75.563315][ T6683] sk_skb_reason_drop+0x129/0x1a0 [ 75.564614][ T6683] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 75.566669][ T6683] ? kernel_text_address+0x8d/0x100 [ 75.568312][ T6683] ? hlock_class+0x4e/0x130 [ 75.569513][ T6683] ? __lock_acquire+0x163e/0x3ce0 [ 75.570827][ T6683] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 75.572619][ T6683] ? hlock_class+0x4e/0x130 [ 75.573781][ T6683] ? __lock_acquire+0xbdd/0x3ce0 [ 75.575264][ T6683] ? __pfx___lock_acquire+0x10/0x10 [ 75.577116][ T6683] __netif_receive_skb_list_core+0x357/0x950 [ 75.579255][ T6683] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 75.581451][ T6683] ? trace_lock_acquire+0x14a/0x1d0 [ 75.583240][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 75.585511][ T6683] ? lock_acquire+0x2f/0xb0 [ 75.587249][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 75.589543][ T6683] netif_receive_skb_list_internal+0x753/0xdb0 [ 75.591910][ T6683] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 75.594311][ T6683] ? __pfx_eth_type_trans+0x10/0x10 [ 75.596078][ T6683] ? __build_skb_around+0x278/0x3b0 [ 75.597829][ T6683] netif_receive_skb_list+0x4f/0x4a0 [ 75.599573][ T6683] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 75.601687][ T6683] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 75.604003][ T6683] ? bpf_test_timer_continue+0x150/0x3d0 [ 75.606012][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 75.607852][ T6683] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 75.609876][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 75.611876][ T6683] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 75.613995][ T6683] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 75.616128][ T6683] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 75.618033][ T6683] ? 0xffffffffa00045c0 [ 75.619544][ T6683] ? 0xffffffffa00045c0 [ 75.620975][ T6683] ? 0xffffffffa00045c0 [ 75.622484][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 75.624597][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 75.626474][ T6683] ? lock_acquire+0x2f/0xb0 [ 75.628078][ T6683] ? __fget_files+0x40/0x3f0 [ 75.629717][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 75.631456][ T6683] ? fput+0x30/0x390 [ 75.632413][ T6683] ? __bpf_prog_get+0xa0/0x290 [ 75.633677][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 75.635809][ T6683] __sys_bpf+0xfc6/0x49a0 [ 75.637354][ T6683] ? __pfx___sys_bpf+0x10/0x10 [ 75.638851][ T6683] ? __schedule+0xe5d/0x5730 [ 75.640174][ T6683] ? __fget_files+0x23a/0x3f0 [ 75.641800][ T6683] ? do_futex+0x123/0x350 [ 75.643179][ T6683] ? __pfx_do_futex+0x10/0x10 [ 75.644418][ T6683] ? xfd_validate_state+0x5d/0x180 [ 75.645717][ T6683] ? rcu_is_watching+0x12/0xc0 [ 75.646904][ T6683] __x64_sys_bpf+0x78/0xc0 [ 75.648008][ T6683] ? lockdep_hardirqs_on+0x7c/0x110 [ 75.649262][ T6683] do_syscall_64+0xcd/0x250 [ 75.650397][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.651960][ T6683] RIP: 0033:0x7f574217e719 [ 75.653319][ T6683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.659638][ T6683] RSP: 002b:00007f5742e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 75.661789][ T6683] RAX: ffffffffffffffda RBX: 00007f5742336058 RCX: 00007f574217e719 [ 75.663799][ T6683] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 75.665892][ T6683] RBP: 00007f57421f132e R08: 0000000000000000 R09: 0000000000000000 [ 75.668049][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.670008][ T6683] R13: 0000000000000000 R14: 00007f5742336058 R15: 00007ffe5115f908 [ 75.671931][ T6683] [ 75.672822][ T6683] BUG: Bad page state in process syz.2.194 pfn:2407a [ 75.674482][ T6683] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802407be00 pfn:0x2407a [ 75.677028][ T6683] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 75.678743][ T6683] raw: 00fff00000000000 dead000000000040 ffff88802a52e000 0000000000000000 [ 75.680853][ T6683] raw: ffff88802407be00 0000000000000001 00000000ffffffff 0000000000000000 [ 75.683061][ T6683] page dumped because: page_pool leak [ 75.684527][ T6683] page_owner tracks the page as allocated [ 75.686066][ T6683] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6683, tgid 6674 (syz.2.194), ts 67590967647, free_ts 67589090148 [ 75.690348][ T6683] post_alloc_hook+0x2d1/0x350 [ 75.691579][ T6683] get_page_from_freelist+0x101e/0x3070 [ 75.692971][ T6683] __alloc_pages_noprof+0x223/0x25a0 [ 75.694352][ T6683] alloc_pages_bulk_noprof+0x77c/0x1110 [ 75.695815][ T6683] __page_pool_alloc_pages_slow+0x18f/0x770 [ 75.697351][ T6683] page_pool_alloc_netmem+0xc4/0x160 [ 75.698729][ T6683] page_pool_alloc_pages+0x1a/0x60 [ 75.700047][ T6683] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 75.701651][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 75.703048][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 75.704456][ T6683] __sys_bpf+0xfc6/0x49a0 [ 75.705639][ T6683] __x64_sys_bpf+0x78/0xc0 [ 75.706817][ T6683] do_syscall_64+0xcd/0x250 [ 75.708013][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.709566][ T6683] page last free pid 6671 tgid 6669 stack trace: [ 75.711215][ T6683] free_unref_page+0x5f4/0xdc0 [ 75.712478][ T6683] __folio_put+0x30d/0x3d0 [ 75.713657][ T6683] put_page+0x21e/0x280 [ 75.714787][ T6683] page_pool_return_page+0x400/0x520 [ 75.716217][ T6683] page_pool_release+0xf4/0x7d0 [ 75.717495][ T6683] page_pool_destroy+0x10a/0x4c0 [ 75.718772][ T6683] bpf_test_run_xdp_live+0x3a1/0x500 [ 75.720096][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 75.721482][ T6683] __sys_bpf+0xfc6/0x49a0 [ 75.722591][ T6683] __x64_sys_bpf+0x78/0xc0 [ 75.723744][ T6683] do_syscall_64+0xcd/0x250 [ 75.724940][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.726566][ T6683] Modules linked in: [ 75.727596][ T6683] CPU: 1 UID: 0 PID: 6683 Comm: syz.2.194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 75.730679][ T6683] Tainted: [B]=BAD_PAGE [ 75.731761][ T6683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.734544][ T6683] Call Trace: [ 75.735429][ T6683] [ 75.736205][ T6683] dump_stack_lvl+0x16c/0x1f0 [ 75.737398][ T6683] bad_page+0xb3/0x1f0 [ 75.738476][ T6683] ? __pfx_bad_page+0x10/0x10 [ 75.739713][ T6683] ? page_bad_reason+0x9d/0x1e0 [ 75.740996][ T6683] free_unref_page+0x657/0xdc0 [ 75.742251][ T6683] ? __phys_addr+0xc6/0x150 [ 75.743461][ T6683] skb_free_head+0xa0/0x1d0 [ 75.744658][ T6683] skb_release_data+0x560/0x730 [ 75.745936][ T6683] sk_skb_reason_drop+0x129/0x1a0 [ 75.747271][ T6683] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 75.748996][ T6683] ? kernel_text_address+0x8d/0x100 [ 75.750323][ T6683] ? hlock_class+0x4e/0x130 [ 75.751491][ T6683] ? __lock_acquire+0x163e/0x3ce0 [ 75.752770][ T6683] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 75.754614][ T6683] ? hlock_class+0x4e/0x130 [ 75.755819][ T6683] ? __lock_acquire+0xbdd/0x3ce0 [ 75.757122][ T6683] ? __pfx___lock_acquire+0x10/0x10 [ 75.758468][ T6683] __netif_receive_skb_list_core+0x357/0x950 [ 75.759985][ T6683] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 75.761612][ T6683] ? trace_lock_acquire+0x14a/0x1d0 [ 75.762950][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 75.764609][ T6683] ? lock_acquire+0x2f/0xb0 [ 75.765796][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 75.767463][ T6683] netif_receive_skb_list_internal+0x753/0xdb0 [ 75.769069][ T6683] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 75.770818][ T6683] ? __pfx_eth_type_trans+0x10/0x10 [ 75.772176][ T6683] ? __build_skb_around+0x278/0x3b0 [ 75.773536][ T6683] netif_receive_skb_list+0x4f/0x4a0 [ 75.774945][ T6683] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 75.776579][ T6683] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 75.778314][ T6683] ? bpf_test_timer_continue+0x150/0x3d0 [ 75.779788][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 75.781179][ T6683] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 75.782702][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 75.784186][ T6683] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 75.785697][ T6683] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 75.787103][ T6683] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 75.788394][ T6683] ? 0xffffffffa00045c0 [ 75.789427][ T6683] ? 0xffffffffa00045c0 [ 75.790487][ T6683] ? 0xffffffffa00045c0 [ 75.791550][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 75.793093][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 75.794521][ T6683] ? lock_acquire+0x2f/0xb0 [ 75.795713][ T6683] ? __fget_files+0x40/0x3f0 [ 75.796931][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 75.798405][ T6683] ? fput+0x30/0x390 [ 75.799408][ T6683] ? __bpf_prog_get+0xa0/0x290 [ 75.800607][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 75.802128][ T6683] __sys_bpf+0xfc6/0x49a0 [ 75.803271][ T6683] ? __pfx___sys_bpf+0x10/0x10 [ 75.804522][ T6683] ? __schedule+0xe5d/0x5730 [ 75.805769][ T6683] ? __fget_files+0x23a/0x3f0 [ 75.807011][ T6683] ? do_futex+0x123/0x350 [ 75.808131][ T6683] ? __pfx_do_futex+0x10/0x10 [ 75.809329][ T6683] ? xfd_validate_state+0x5d/0x180 [ 75.810633][ T6683] ? rcu_is_watching+0x12/0xc0 [ 75.811857][ T6683] __x64_sys_bpf+0x78/0xc0 [ 75.813013][ T6683] ? lockdep_hardirqs_on+0x7c/0x110 [ 75.814393][ T6683] do_syscall_64+0xcd/0x250 [ 75.815542][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.817066][ T6683] RIP: 0033:0x7f574217e719 [ 75.818198][ T6683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.822984][ T6683] RSP: 002b:00007f5742e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 75.825090][ T6683] RAX: ffffffffffffffda RBX: 00007f5742336058 RCX: 00007f574217e719 [ 75.827025][ T6683] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 75.828933][ T6683] RBP: 00007f57421f132e R08: 0000000000000000 R09: 0000000000000000 [ 75.830885][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.832806][ T6683] R13: 0000000000000000 R14: 00007f5742336058 R15: 00007ffe5115f908 [ 75.834754][ T6683] [ 75.835640][ T6683] BUG: Bad page state in process syz.2.194 pfn:2407b [ 75.837358][ T6683] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000002 pfn:0x2407b [ 75.839837][ T6683] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 75.841544][ T6683] raw: 00fff00000000000 dead000000000040 ffff88802a52e000 0000000000000000 [ 75.843687][ T6683] raw: ffff888000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 75.845975][ T6683] page dumped because: page_pool leak [ 75.847381][ T6683] page_owner tracks the page as allocated [ 75.848827][ T6683] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6683, tgid 6674 (syz.2.194), ts 67590962980, free_ts 67589094101 [ 75.853083][ T6683] post_alloc_hook+0x2d1/0x350 [ 75.854359][ T6683] get_page_from_freelist+0x101e/0x3070 [ 75.855855][ T6683] __alloc_pages_noprof+0x223/0x25a0 [ 75.857233][ T6683] alloc_pages_bulk_noprof+0x77c/0x1110 [ 75.858678][ T6683] __page_pool_alloc_pages_slow+0x18f/0x770 [ 75.860220][ T6683] page_pool_alloc_netmem+0xc4/0x160 [ 75.861597][ T6683] page_pool_alloc_pages+0x1a/0x60 [ 75.862943][ T6683] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 75.864565][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 75.866011][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 75.867432][ T6683] __sys_bpf+0xfc6/0x49a0 [ 75.868569][ T6683] __x64_sys_bpf+0x78/0xc0 [ 75.869738][ T6683] do_syscall_64+0xcd/0x250 [ 75.870944][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.872487][ T6683] page last free pid 6671 tgid 6669 stack trace: [ 75.874130][ T6683] free_unref_page+0x5f4/0xdc0 [ 75.875432][ T6683] __folio_put+0x30d/0x3d0 [ 75.876596][ T6683] put_page+0x21e/0x280 [ 75.877681][ T6683] page_pool_return_page+0x400/0x520 [ 75.879065][ T6683] page_pool_release+0xf4/0x7d0 [ 75.880342][ T6683] page_pool_destroy+0x10a/0x4c0 [ 75.881635][ T6683] bpf_test_run_xdp_live+0x3a1/0x500 [ 75.883026][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 75.884429][ T6683] __sys_bpf+0xfc6/0x49a0 [ 75.885611][ T6683] __x64_sys_bpf+0x78/0xc0 [ 75.886791][ T6683] do_syscall_64+0xcd/0x250 [ 75.887992][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.889564][ T6683] Modules linked in: [ 75.890605][ T6683] CPU: 1 UID: 0 PID: 6683 Comm: syz.2.194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 75.893599][ T6683] Tainted: [B]=BAD_PAGE [ 75.894701][ T6683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.897474][ T6683] Call Trace: [ 75.898361][ T6683] [ 75.899232][ T6683] dump_stack_lvl+0x16c/0x1f0 [ 75.900483][ T6683] bad_page+0xb3/0x1f0 [ 75.901572][ T6683] ? __pfx_bad_page+0x10/0x10 [ 75.902832][ T6683] ? page_bad_reason+0x9d/0x1e0 [ 75.904139][ T6683] free_unref_page+0x657/0xdc0 [ 75.905418][ T6683] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 75.906988][ T6683] ? __phys_addr+0xc6/0x150 [ 75.908185][ T6683] skb_free_head+0xa0/0x1d0 [ 75.909387][ T6683] skb_release_data+0x560/0x730 [ 75.910679][ T6683] sk_skb_reason_drop+0x129/0x1a0 [ 75.911999][ T6683] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 75.913744][ T6683] ? kernel_text_address+0x8d/0x100 [ 75.915122][ T6683] ? hlock_class+0x4e/0x130 [ 75.916321][ T6683] ? __lock_acquire+0x163e/0x3ce0 [ 75.917635][ T6683] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 75.919482][ T6683] ? hlock_class+0x4e/0x130 [ 75.920680][ T6683] ? __lock_acquire+0xbdd/0x3ce0 [ 75.921976][ T6683] ? __pfx___lock_acquire+0x10/0x10 [ 75.923351][ T6683] __netif_receive_skb_list_core+0x357/0x950 [ 75.924921][ T6683] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 75.926608][ T6683] ? trace_lock_acquire+0x14a/0x1d0 [ 75.927980][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 75.929632][ T6683] ? lock_acquire+0x2f/0xb0 [ 75.930834][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 75.932483][ T6683] netif_receive_skb_list_internal+0x753/0xdb0 [ 75.934106][ T6683] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 75.935795][ T6683] ? __pfx_eth_type_trans+0x10/0x10 [ 75.937153][ T6683] ? __build_skb_around+0x278/0x3b0 [ 75.938528][ T6683] netif_receive_skb_list+0x4f/0x4a0 [ 75.939914][ T6683] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 75.941553][ T6683] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 75.943321][ T6683] ? bpf_test_timer_continue+0x150/0x3d0 [ 75.944814][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 75.946203][ T6683] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 75.947739][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 75.949279][ T6683] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 75.950827][ T6683] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 75.952355][ T6683] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 75.953735][ T6683] ? 0xffffffffa00045c0 [ 75.954849][ T6683] ? 0xffffffffa00045c0 [ 75.955936][ T6683] ? 0xffffffffa00045c0 [ 75.957028][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 75.958580][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 75.959980][ T6683] ? lock_acquire+0x2f/0xb0 [ 75.961176][ T6683] ? __fget_files+0x40/0x3f0 [ 75.962403][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 75.963921][ T6683] ? fput+0x30/0x390 [ 75.964951][ T6683] ? __bpf_prog_get+0xa0/0x290 [ 75.966204][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 75.967731][ T6683] __sys_bpf+0xfc6/0x49a0 [ 75.968862][ T6683] ? __pfx___sys_bpf+0x10/0x10 [ 75.970115][ T6683] ? __schedule+0xe5d/0x5730 [ 75.971336][ T6683] ? __fget_files+0x23a/0x3f0 [ 75.972572][ T6683] ? do_futex+0x123/0x350 [ 75.973704][ T6683] ? __pfx_do_futex+0x10/0x10 [ 75.974927][ T6683] ? xfd_validate_state+0x5d/0x180 [ 75.976272][ T6683] ? rcu_is_watching+0x12/0xc0 [ 75.977527][ T6683] __x64_sys_bpf+0x78/0xc0 [ 75.978712][ T6683] ? lockdep_hardirqs_on+0x7c/0x110 [ 75.980074][ T6683] do_syscall_64+0xcd/0x250 [ 75.981272][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.982825][ T6683] RIP: 0033:0x7f574217e719 [ 75.983999][ T6683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.988845][ T6683] RSP: 002b:00007f5742e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 75.990995][ T6683] RAX: ffffffffffffffda RBX: 00007f5742336058 RCX: 00007f574217e719 [ 75.993028][ T6683] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 75.995075][ T6683] RBP: 00007f57421f132e R08: 0000000000000000 R09: 0000000000000000 [ 75.997111][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.999086][ T6683] R13: 0000000000000000 R14: 00007f5742336058 R15: 00007ffe5115f908 [ 76.001102][ T6683] [ 76.001995][ T6683] BUG: Bad page state in process syz.2.194 pfn:26f6c [ 76.003678][ T6683] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888026f6de00 pfn:0x26f6c [ 76.006155][ T6683] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 76.007955][ T6683] raw: 00fff00000000000 dead000000000040 ffff88802a52e000 0000000000000000 [ 76.010170][ T6683] raw: ffff888026f6de00 0000000000000001 00000000ffffffff 0000000000000000 [ 76.012358][ T6683] page dumped because: page_pool leak [ 76.013700][ T6683] page_owner tracks the page as allocated [ 76.015167][ T6683] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6683, tgid 6674 (syz.2.194), ts 67590958263, free_ts 67589097667 [ 76.019309][ T6683] post_alloc_hook+0x2d1/0x350 [ 76.020545][ T6683] get_page_from_freelist+0x101e/0x3070 [ 76.021921][ T6683] __alloc_pages_noprof+0x223/0x25a0 [ 76.023302][ T6683] alloc_pages_bulk_noprof+0x77c/0x1110 [ 76.024753][ T6683] __page_pool_alloc_pages_slow+0x18f/0x770 [ 76.026350][ T6683] page_pool_alloc_netmem+0xc4/0x160 [ 76.027716][ T6683] page_pool_alloc_pages+0x1a/0x60 [ 76.029042][ T6683] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 76.030651][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 76.032021][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 76.033418][ T6683] __sys_bpf+0xfc6/0x49a0 [ 76.034575][ T6683] __x64_sys_bpf+0x78/0xc0 [ 76.035787][ T6683] do_syscall_64+0xcd/0x250 [ 76.036978][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.038515][ T6683] page last free pid 6671 tgid 6669 stack trace: [ 76.040140][ T6683] free_unref_page+0x5f4/0xdc0 [ 76.041385][ T6683] __folio_put+0x30d/0x3d0 [ 76.042556][ T6683] put_page+0x21e/0x280 [ 76.043638][ T6683] page_pool_return_page+0x400/0x520 [ 76.045060][ T6683] page_pool_release+0xf4/0x7d0 [ 76.046269][ T6683] page_pool_destroy+0x10a/0x4c0 [ 76.047553][ T6683] bpf_test_run_xdp_live+0x3a1/0x500 [ 76.048923][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 76.050328][ T6683] __sys_bpf+0xfc6/0x49a0 [ 76.051454][ T6683] __x64_sys_bpf+0x78/0xc0 [ 76.052614][ T6683] do_syscall_64+0xcd/0x250 [ 76.053800][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.055367][ T6683] Modules linked in: [ 76.056337][ T6683] CPU: 1 UID: 0 PID: 6683 Comm: syz.2.194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 76.059287][ T6683] Tainted: [B]=BAD_PAGE [ 76.060362][ T6683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.063095][ T6683] Call Trace: [ 76.063961][ T6683] [ 76.064739][ T6683] dump_stack_lvl+0x16c/0x1f0 [ 76.065966][ T6683] bad_page+0xb3/0x1f0 [ 76.067005][ T6683] ? __pfx_bad_page+0x10/0x10 [ 76.068239][ T6683] ? page_bad_reason+0x9d/0x1e0 [ 76.069517][ T6683] free_unref_page+0x657/0xdc0 [ 76.070727][ T6683] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 76.072292][ T6683] ? __phys_addr+0xc6/0x150 [ 76.073484][ T6683] skb_free_head+0xa0/0x1d0 [ 76.074700][ T6683] skb_release_data+0x560/0x730 [ 76.075970][ T6683] sk_skb_reason_drop+0x129/0x1a0 [ 76.077285][ T6683] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 76.079033][ T6683] ? kernel_text_address+0x8d/0x100 [ 76.080399][ T6683] ? hlock_class+0x4e/0x130 [ 76.081573][ T6683] ? __lock_acquire+0x163e/0x3ce0 [ 76.082880][ T6683] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 76.084695][ T6683] ? hlock_class+0x4e/0x130 [ 76.085875][ T6683] ? __lock_acquire+0xbdd/0x3ce0 [ 76.087166][ T6683] ? __pfx___lock_acquire+0x10/0x10 [ 76.088503][ T6683] __netif_receive_skb_list_core+0x357/0x950 [ 76.090033][ T6683] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 76.091717][ T6683] ? trace_lock_acquire+0x14a/0x1d0 [ 76.093063][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 76.094681][ T6683] ? lock_acquire+0x2f/0xb0 [ 76.095817][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 76.097451][ T6683] netif_receive_skb_list_internal+0x753/0xdb0 [ 76.099049][ T6683] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 76.100759][ T6683] ? __pfx_eth_type_trans+0x10/0x10 [ 76.102109][ T6683] ? __build_skb_around+0x278/0x3b0 [ 76.103475][ T6683] netif_receive_skb_list+0x4f/0x4a0 [ 76.104851][ T6683] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 76.106432][ T6683] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 76.108121][ T6683] ? bpf_test_timer_continue+0x150/0x3d0 [ 76.109584][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 76.110970][ T6683] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 76.112490][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 76.114033][ T6683] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 76.115593][ T6683] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 76.117115][ T6683] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 76.118487][ T6683] ? 0xffffffffa00045c0 [ 76.119563][ T6683] ? 0xffffffffa00045c0 [ 76.120638][ T6683] ? 0xffffffffa00045c0 [ 76.121711][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 76.123245][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 76.124635][ T6683] ? lock_acquire+0x2f/0xb0 [ 76.125791][ T6683] ? __fget_files+0x40/0x3f0 [ 76.126998][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 76.128505][ T6683] ? fput+0x30/0x390 [ 76.129530][ T6683] ? __bpf_prog_get+0xa0/0x290 [ 76.130792][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 76.132307][ T6683] __sys_bpf+0xfc6/0x49a0 [ 76.133433][ T6683] ? __pfx___sys_bpf+0x10/0x10 [ 76.134694][ T6683] ? __schedule+0xe5d/0x5730 [ 76.135896][ T6683] ? __fget_files+0x23a/0x3f0 [ 76.137126][ T6683] ? do_futex+0x123/0x350 [ 76.138269][ T6683] ? __pfx_do_futex+0x10/0x10 [ 76.139498][ T6683] ? xfd_validate_state+0x5d/0x180 [ 76.140826][ T6683] ? rcu_is_watching+0x12/0xc0 [ 76.142077][ T6683] __x64_sys_bpf+0x78/0xc0 [ 76.143249][ T6683] ? lockdep_hardirqs_on+0x7c/0x110 [ 76.144601][ T6683] do_syscall_64+0xcd/0x250 [ 76.145621][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.147180][ T6683] RIP: 0033:0x7f574217e719 [ 76.148378][ T6683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.153416][ T6683] RSP: 002b:00007f5742e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 76.155747][ T6683] RAX: ffffffffffffffda RBX: 00007f5742336058 RCX: 00007f574217e719 [ 76.157797][ T6683] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 76.159856][ T6683] RBP: 00007f57421f132e R08: 0000000000000000 R09: 0000000000000000 [ 76.161908][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.163953][ T6683] R13: 0000000000000000 R14: 00007f5742336058 R15: 00007ffe5115f908 [ 76.165956][ T6683] [ 76.166869][ T6683] BUG: Bad page state in process syz.2.194 pfn:26f6d [ 76.168627][ T6683] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2 pfn:0x26f6d [ 76.170901][ T6683] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 76.172718][ T6683] raw: 00fff00000000000 dead000000000040 ffff88802a52e000 0000000000000000 [ 76.174943][ T6683] raw: 0000000000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 76.177195][ T6683] page dumped because: page_pool leak [ 76.178591][ T6683] page_owner tracks the page as allocated [ 76.180058][ T6683] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6683, tgid 6674 (syz.2.194), ts 67590953211, free_ts 67589101594 [ 76.184317][ T6683] post_alloc_hook+0x2d1/0x350 [ 76.185929][ T6683] get_page_from_freelist+0x101e/0x3070 [ 76.187625][ T6683] __alloc_pages_noprof+0x223/0x25a0 [ 76.189028][ T6683] alloc_pages_bulk_noprof+0x77c/0x1110 [ 76.190499][ T6683] __page_pool_alloc_pages_slow+0x18f/0x770 [ 76.192098][ T6683] page_pool_alloc_netmem+0xc4/0x160 [ 76.193506][ T6683] page_pool_alloc_pages+0x1a/0x60 [ 76.195062][ T6683] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 76.196821][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 76.198209][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 76.199640][ T6683] __sys_bpf+0xfc6/0x49a0 [ 76.200875][ T6683] __x64_sys_bpf+0x78/0xc0 [ 76.202043][ T6683] do_syscall_64+0xcd/0x250 [ 76.203268][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.204817][ T6683] page last free pid 6671 tgid 6669 stack trace: [ 76.206533][ T6683] free_unref_page+0x5f4/0xdc0 [ 76.207789][ T6683] __folio_put+0x30d/0x3d0 [ 76.208969][ T6683] put_page+0x21e/0x280 [ 76.210059][ T6683] page_pool_return_page+0x400/0x520 [ 76.211463][ T6683] page_pool_release+0xf4/0x7d0 [ 76.212739][ T6683] page_pool_destroy+0x10a/0x4c0 [ 76.214061][ T6683] bpf_test_run_xdp_live+0x3a1/0x500 [ 76.215517][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 76.216930][ T6683] __sys_bpf+0xfc6/0x49a0 [ 76.218060][ T6683] __x64_sys_bpf+0x78/0xc0 [ 76.219246][ T6683] do_syscall_64+0xcd/0x250 [ 76.220441][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.222000][ T6683] Modules linked in: [ 76.223220][ T6683] CPU: 1 UID: 0 PID: 6683 Comm: syz.2.194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 76.226543][ T6683] Tainted: [B]=BAD_PAGE [ 76.227627][ T6683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.230405][ T6683] Call Trace: [ 76.231282][ T6683] [ 76.232065][ T6683] dump_stack_lvl+0x16c/0x1f0 [ 76.233310][ T6683] bad_page+0xb3/0x1f0 [ 76.234413][ T6683] ? __pfx_bad_page+0x10/0x10 [ 76.235586][ T6683] ? page_bad_reason+0x9d/0x1e0 [ 76.236810][ T6683] free_unref_page+0x657/0xdc0 [ 76.238080][ T6683] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 76.239677][ T6683] ? __phys_addr+0xc6/0x150 [ 76.240865][ T6683] skb_free_head+0xa0/0x1d0 [ 76.241984][ T6683] skb_release_data+0x560/0x730 [ 76.243248][ T6683] sk_skb_reason_drop+0x129/0x1a0 [ 76.244577][ T6683] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 76.246330][ T6683] ? kernel_text_address+0x8d/0x100 [ 76.247701][ T6683] ? hlock_class+0x4e/0x130 [ 76.248902][ T6683] ? __lock_acquire+0x163e/0x3ce0 [ 76.250226][ T6683] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 76.252076][ T6683] ? hlock_class+0x4e/0x130 [ 76.253279][ T6683] ? __lock_acquire+0xbdd/0x3ce0 [ 76.254601][ T6683] ? __pfx___lock_acquire+0x10/0x10 [ 76.255899][ T6683] __netif_receive_skb_list_core+0x357/0x950 [ 76.257472][ T6683] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 76.259141][ T6683] ? trace_lock_acquire+0x14a/0x1d0 [ 76.260467][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 76.261967][ T6683] ? lock_acquire+0x2f/0xb0 [ 76.263106][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 76.264720][ T6683] netif_receive_skb_list_internal+0x753/0xdb0 [ 76.266342][ T6683] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 76.268012][ T6683] ? __pfx_eth_type_trans+0x10/0x10 [ 76.269313][ T6683] ? __build_skb_around+0x278/0x3b0 [ 76.270618][ T6683] netif_receive_skb_list+0x4f/0x4a0 [ 76.271922][ T6683] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 76.273424][ T6683] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 76.275155][ T6683] ? bpf_test_timer_continue+0x150/0x3d0 [ 76.276684][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 76.278061][ T6683] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 76.279599][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 76.281126][ T6683] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 76.282750][ T6683] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 76.284289][ T6683] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 76.285651][ T6683] ? 0xffffffffa00045c0 [ 76.286762][ T6683] ? 0xffffffffa00045c0 [ 76.287842][ T6683] ? 0xffffffffa00045c0 [ 76.288910][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 76.290467][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 76.291825][ T6683] ? lock_acquire+0x2f/0xb0 [ 76.292992][ T6683] ? __fget_files+0x40/0x3f0 [ 76.294204][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 76.295755][ T6683] ? fput+0x30/0x390 [ 76.296795][ T6683] ? __bpf_prog_get+0xa0/0x290 [ 76.298062][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 76.299602][ T6683] __sys_bpf+0xfc6/0x49a0 [ 76.300739][ T6683] ? __pfx___sys_bpf+0x10/0x10 [ 76.302010][ T6683] ? __schedule+0xe5d/0x5730 [ 76.303381][ T6683] ? __fget_files+0x23a/0x3f0 [ 76.304649][ T6683] ? do_futex+0x123/0x350 [ 76.305801][ T6683] ? __pfx_do_futex+0x10/0x10 [ 76.307037][ T6683] ? xfd_validate_state+0x5d/0x180 [ 76.308380][ T6683] ? rcu_is_watching+0x12/0xc0 [ 76.309647][ T6683] __x64_sys_bpf+0x78/0xc0 [ 76.310831][ T6683] ? lockdep_hardirqs_on+0x7c/0x110 [ 76.312188][ T6683] do_syscall_64+0xcd/0x250 [ 76.313394][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.314959][ T6683] RIP: 0033:0x7f574217e719 [ 76.316127][ T6683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.321078][ T6683] RSP: 002b:00007f5742e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 76.323231][ T6683] RAX: ffffffffffffffda RBX: 00007f5742336058 RCX: 00007f574217e719 [ 76.325271][ T6683] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 76.327323][ T6683] RBP: 00007f57421f132e R08: 0000000000000000 R09: 0000000000000000 [ 76.329376][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.332194][ T6683] R13: 0000000000000000 R14: 00007f5742336058 R15: 00007ffe5115f908 [ 76.334276][ T6683] [ 76.335175][ T6683] BUG: Bad page state in process syz.2.194 pfn:316ec [ 76.336913][ T6683] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880316ede00 pfn:0x316ec [ 76.339525][ T6683] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 76.341388][ T6683] raw: 00fff00000000000 dead000000000040 ffff88802a52e000 0000000000000000 [ 76.343671][ T6683] raw: ffff8880316ede00 0000000000000001 00000000ffffffff 0000000000000000 [ 76.345974][ T6683] page dumped because: page_pool leak [ 76.347501][ T6683] page_owner tracks the page as allocated [ 76.348999][ T6683] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6683, tgid 6674 (syz.2.194), ts 67590948281, free_ts 67589105352 [ 76.353303][ T6683] post_alloc_hook+0x2d1/0x350 [ 76.354601][ T6683] get_page_from_freelist+0x101e/0x3070 [ 76.356115][ T6683] __alloc_pages_noprof+0x223/0x25a0 [ 76.357505][ T6683] alloc_pages_bulk_noprof+0x77c/0x1110 [ 76.358957][ T6683] __page_pool_alloc_pages_slow+0x18f/0x770 [ 76.360509][ T6683] page_pool_alloc_netmem+0xc4/0x160 [ 76.361889][ T6683] page_pool_alloc_pages+0x1a/0x60 [ 76.363272][ T6683] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 76.364900][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 76.366348][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 76.367749][ T6683] __sys_bpf+0xfc6/0x49a0 [ 76.368885][ T6683] __x64_sys_bpf+0x78/0xc0 [ 76.370066][ T6683] do_syscall_64+0xcd/0x250 [ 76.371269][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.372816][ T6683] page last free pid 6671 tgid 6669 stack trace: [ 76.374482][ T6683] free_unref_page+0x5f4/0xdc0 [ 76.375785][ T6683] __folio_put+0x30d/0x3d0 [ 76.376956][ T6683] put_page+0x21e/0x280 [ 76.378048][ T6683] page_pool_return_page+0x400/0x520 [ 76.379443][ T6683] page_pool_release+0xf4/0x7d0 [ 76.380718][ T6683] page_pool_destroy+0x10a/0x4c0 [ 76.382005][ T6683] bpf_test_run_xdp_live+0x3a1/0x500 [ 76.383389][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 76.384794][ T6683] __sys_bpf+0xfc6/0x49a0 [ 76.385933][ T6683] __x64_sys_bpf+0x78/0xc0 [ 76.387118][ T6683] do_syscall_64+0xcd/0x250 [ 76.388323][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.389878][ T6683] Modules linked in: [ 76.390916][ T6683] CPU: 1 UID: 0 PID: 6683 Comm: syz.2.194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 76.393988][ T6683] Tainted: [B]=BAD_PAGE [ 76.395073][ T6683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.397724][ T6683] Call Trace: [ 76.398574][ T6683] [ 76.399351][ T6683] dump_stack_lvl+0x16c/0x1f0 [ 76.400591][ T6683] bad_page+0xb3/0x1f0 [ 76.401639][ T6683] ? __pfx_bad_page+0x10/0x10 [ 76.402885][ T6683] ? page_bad_reason+0x9d/0x1e0 [ 76.404169][ T6683] free_unref_page+0x657/0xdc0 [ 76.405423][ T6683] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 76.406997][ T6683] ? __phys_addr+0xc6/0x150 [ 76.408190][ T6683] skb_free_head+0xa0/0x1d0 [ 76.409349][ T6683] skb_release_data+0x560/0x730 [ 76.410595][ T6683] sk_skb_reason_drop+0x129/0x1a0 [ 76.411915][ T6683] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 76.413650][ T6683] ? kernel_text_address+0x8d/0x100 [ 76.415016][ T6683] ? hlock_class+0x4e/0x130 [ 76.416199][ T6683] ? __lock_acquire+0x163e/0x3ce0 [ 76.417504][ T6683] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 76.419326][ T6683] ? hlock_class+0x4e/0x130 [ 76.420509][ T6683] ? __lock_acquire+0xbdd/0x3ce0 [ 76.421804][ T6683] ? __pfx___lock_acquire+0x10/0x10 [ 76.423236][ T6683] __netif_receive_skb_list_core+0x357/0x950 [ 76.424805][ T6683] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 76.426492][ T6683] ? trace_lock_acquire+0x14a/0x1d0 [ 76.427840][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 76.429466][ T6683] ? lock_acquire+0x2f/0xb0 [ 76.430649][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 76.432282][ T6683] netif_receive_skb_list_internal+0x753/0xdb0 [ 76.433872][ T6683] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 76.435598][ T6683] ? __pfx_eth_type_trans+0x10/0x10 [ 76.436953][ T6683] ? __build_skb_around+0x278/0x3b0 [ 76.438325][ T6683] netif_receive_skb_list+0x4f/0x4a0 [ 76.439703][ T6683] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 76.441345][ T6683] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 76.443061][ T6683] ? bpf_test_timer_continue+0x150/0x3d0 [ 76.444511][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 76.445889][ T6683] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 76.447420][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 76.448982][ T6683] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 76.450543][ T6683] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 76.452075][ T6683] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 76.453464][ T6683] ? 0xffffffffa00045c0 [ 76.454580][ T6683] ? 0xffffffffa00045c0 [ 76.455669][ T6683] ? 0xffffffffa00045c0 [ 76.456786][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 76.458360][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 76.459767][ T6683] ? lock_acquire+0x2f/0xb0 [ 76.460954][ T6683] ? __fget_files+0x40/0x3f0 [ 76.462170][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 76.463700][ T6683] ? fput+0x30/0x390 [ 76.464737][ T6683] ? __bpf_prog_get+0xa0/0x290 [ 76.465999][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 76.467528][ T6683] __sys_bpf+0xfc6/0x49a0 [ 76.468660][ T6683] ? __pfx___sys_bpf+0x10/0x10 [ 76.469923][ T6683] ? __schedule+0xe5d/0x5730 [ 76.471150][ T6683] ? __fget_files+0x23a/0x3f0 [ 76.472380][ T6683] ? do_futex+0x123/0x350 [ 76.473511][ T6683] ? __pfx_do_futex+0x10/0x10 [ 76.474760][ T6683] ? xfd_validate_state+0x5d/0x180 [ 76.476090][ T6683] ? rcu_is_watching+0x12/0xc0 [ 76.477339][ T6683] __x64_sys_bpf+0x78/0xc0 [ 76.478513][ T6683] ? lockdep_hardirqs_on+0x7c/0x110 [ 76.479867][ T6683] do_syscall_64+0xcd/0x250 [ 76.481065][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.482712][ T6683] RIP: 0033:0x7f574217e719 [ 76.483897][ T6683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.488898][ T6683] RSP: 002b:00007f5742e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 76.491079][ T6683] RAX: ffffffffffffffda RBX: 00007f5742336058 RCX: 00007f574217e719 [ 76.493139][ T6683] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 76.495202][ T6683] RBP: 00007f57421f132e R08: 0000000000000000 R09: 0000000000000000 [ 76.497207][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.499259][ T6683] R13: 0000000000000000 R14: 00007f5742336058 R15: 00007ffe5115f908 [ 76.501361][ T6683] [ 76.502297][ T6683] BUG: Bad page state in process syz.2.194 pfn:316ed [ 76.504080][ T6683] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2 pfn:0x316ed [ 76.506390][ T6683] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 76.508225][ T6683] raw: 00fff00000000000 dead000000000040 ffff88802a52e000 0000000000000000 [ 76.510473][ T6683] raw: 0000000000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 76.512680][ T6683] page dumped because: page_pool leak [ 76.514161][ T6683] page_owner tracks the page as allocated [ 76.515679][ T6683] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6683, tgid 6674 (syz.2.194), ts 67590943571, free_ts 67589117365 [ 76.519891][ T6683] post_alloc_hook+0x2d1/0x350 [ 76.521150][ T6683] get_page_from_freelist+0x101e/0x3070 [ 76.522627][ T6683] __alloc_pages_noprof+0x223/0x25a0 [ 76.523994][ T6683] alloc_pages_bulk_noprof+0x77c/0x1110 [ 76.525471][ T6683] __page_pool_alloc_pages_slow+0x18f/0x770 [ 76.526945][ T6683] page_pool_alloc_netmem+0xc4/0x160 [ 76.528226][ T6683] page_pool_alloc_pages+0x1a/0x60 [ 76.529508][ T6683] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 76.531068][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 76.532359][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 76.533674][ T6683] __sys_bpf+0xfc6/0x49a0 [ 76.534775][ T6683] __x64_sys_bpf+0x78/0xc0 [ 76.535909][ T6683] do_syscall_64+0xcd/0x250 [ 76.537013][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.538497][ T6683] page last free pid 6671 tgid 6669 stack trace: [ 76.540142][ T6683] free_unref_page+0x5f4/0xdc0 [ 76.541403][ T6683] __folio_put+0x30d/0x3d0 [ 76.542621][ T6683] put_page+0x21e/0x280 [ 76.543700][ T6683] page_pool_return_page+0x400/0x520 [ 76.545114][ T6683] page_pool_release+0xf4/0x7d0 [ 76.546384][ T6683] page_pool_destroy+0x10a/0x4c0 [ 76.547668][ T6683] bpf_test_run_xdp_live+0x3a1/0x500 [ 76.549035][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 76.550435][ T6683] __sys_bpf+0xfc6/0x49a0 [ 76.551554][ T6683] __x64_sys_bpf+0x78/0xc0 [ 76.552713][ T6683] do_syscall_64+0xcd/0x250 [ 76.553892][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.555487][ T6683] Modules linked in: [ 76.556509][ T6683] CPU: 1 UID: 0 PID: 6683 Comm: syz.2.194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 76.559594][ T6683] Tainted: [B]=BAD_PAGE [ 76.560682][ T6683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.563503][ T6683] Call Trace: [ 76.564373][ T6683] [ 76.565153][ T6683] dump_stack_lvl+0x16c/0x1f0 [ 76.566393][ T6683] bad_page+0xb3/0x1f0 [ 76.567458][ T6683] ? __pfx_bad_page+0x10/0x10 [ 76.568680][ T6683] ? page_bad_reason+0x9d/0x1e0 [ 76.569941][ T6683] free_unref_page+0x657/0xdc0 [ 76.571194][ T6683] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 76.572747][ T6683] ? __phys_addr+0xc6/0x150 [ 76.573933][ T6683] skb_free_head+0xa0/0x1d0 [ 76.575142][ T6683] skb_release_data+0x560/0x730 [ 76.576420][ T6683] sk_skb_reason_drop+0x129/0x1a0 [ 76.577729][ T6683] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 76.579467][ T6683] ? kernel_text_address+0x8d/0x100 [ 76.580826][ T6683] ? hlock_class+0x4e/0x130 [ 76.582075][ T6683] ? __lock_acquire+0x163e/0x3ce0 [ 76.583421][ T6683] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 76.585261][ T6683] ? hlock_class+0x4e/0x130 [ 76.586467][ T6683] ? __lock_acquire+0xbdd/0x3ce0 [ 76.587763][ T6683] ? __pfx___lock_acquire+0x10/0x10 [ 76.589120][ T6683] __netif_receive_skb_list_core+0x357/0x950 [ 76.590638][ T6683] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 76.592315][ T6683] ? trace_lock_acquire+0x14a/0x1d0 [ 76.593681][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 76.595348][ T6683] ? lock_acquire+0x2f/0xb0 [ 76.596536][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 76.598164][ T6683] netif_receive_skb_list_internal+0x753/0xdb0 [ 76.599774][ T6683] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 76.601500][ T6683] ? __pfx_eth_type_trans+0x10/0x10 [ 76.602903][ T6683] ? __build_skb_around+0x278/0x3b0 [ 76.604255][ T6683] netif_receive_skb_list+0x4f/0x4a0 [ 76.605626][ T6683] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 76.607248][ T6683] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 76.608947][ T6683] ? bpf_test_timer_continue+0x150/0x3d0 [ 76.610415][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 76.611789][ T6683] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 76.613313][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 76.614872][ T6683] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 76.616420][ T6683] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 76.617947][ T6683] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 76.619316][ T6683] ? 0xffffffffa00045c0 [ 76.620406][ T6683] ? 0xffffffffa00045c0 [ 76.621493][ T6683] ? 0xffffffffa00045c0 [ 76.622685][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 76.624221][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 76.625656][ T6683] ? lock_acquire+0x2f/0xb0 [ 76.626849][ T6683] ? __fget_files+0x40/0x3f0 [ 76.628064][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 76.629595][ T6683] ? fput+0x30/0x390 [ 76.630642][ T6683] ? __bpf_prog_get+0xa0/0x290 [ 76.631901][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 76.633420][ T6683] __sys_bpf+0xfc6/0x49a0 [ 76.634571][ T6683] ? __pfx___sys_bpf+0x10/0x10 [ 76.635821][ T6683] ? __schedule+0xe5d/0x5730 [ 76.637021][ T6683] ? __fget_files+0x23a/0x3f0 [ 76.638229][ T6683] ? do_futex+0x123/0x350 [ 76.639375][ T6683] ? __pfx_do_futex+0x10/0x10 [ 76.640612][ T6683] ? xfd_validate_state+0x5d/0x180 [ 76.641956][ T6683] ? rcu_is_watching+0x12/0xc0 [ 76.643244][ T6683] __x64_sys_bpf+0x78/0xc0 [ 76.644414][ T6683] ? lockdep_hardirqs_on+0x7c/0x110 [ 76.645763][ T6683] do_syscall_64+0xcd/0x250 [ 76.646954][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.648481][ T6683] RIP: 0033:0x7f574217e719 [ 76.649649][ T6683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.654562][ T6683] RSP: 002b:00007f5742e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 76.656718][ T6683] RAX: ffffffffffffffda RBX: 00007f5742336058 RCX: 00007f574217e719 [ 76.658765][ T6683] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 76.660805][ T6683] RBP: 00007f57421f132e R08: 0000000000000000 R09: 0000000000000000 [ 76.662886][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.664928][ T6683] R13: 0000000000000000 R14: 00007f5742336058 R15: 00007ffe5115f908 [ 76.666948][ T6683] [ 76.667840][ T6683] BUG: Bad page state in process syz.2.194 pfn:4cd8e [ 76.669620][ T6683] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804cd8fe00 pfn:0x4cd8e [ 76.672217][ T6683] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 76.674079][ T6683] raw: 00fff00000000000 dead000000000040 ffff88802a52e000 0000000000000000 [ 76.676335][ T6683] raw: ffff88804cd8fe00 0000000000000001 00000000ffffffff 0000000000000000 [ 76.678614][ T6683] page dumped because: page_pool leak [ 76.680003][ T6683] page_owner tracks the page as allocated [ 76.681476][ T6683] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6683, tgid 6674 (syz.2.194), ts 67590938902, free_ts 67589122061 [ 76.685783][ T6683] post_alloc_hook+0x2d1/0x350 [ 76.687037][ T6683] get_page_from_freelist+0x101e/0x3070 [ 76.688473][ T6683] __alloc_pages_noprof+0x223/0x25a0 [ 76.689836][ T6683] alloc_pages_bulk_noprof+0x77c/0x1110 [ 76.691280][ T6683] __page_pool_alloc_pages_slow+0x18f/0x770 [ 76.692811][ T6683] page_pool_alloc_netmem+0xc4/0x160 [ 76.694190][ T6683] page_pool_alloc_pages+0x1a/0x60 [ 76.695555][ T6683] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 76.697132][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 76.698515][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 76.699908][ T6683] __sys_bpf+0xfc6/0x49a0 [ 76.701036][ T6683] __x64_sys_bpf+0x78/0xc0 [ 76.702199][ T6683] do_syscall_64+0xcd/0x250 [ 76.703398][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.704940][ T6683] page last free pid 6671 tgid 6669 stack trace: [ 76.706606][ T6683] free_unref_page+0x5f4/0xdc0 [ 76.707848][ T6683] __folio_put+0x30d/0x3d0 [ 76.709011][ T6683] put_page+0x21e/0x280 [ 76.710090][ T6683] page_pool_return_page+0x400/0x520 [ 76.711466][ T6683] page_pool_release+0xf4/0x7d0 [ 76.712730][ T6683] page_pool_destroy+0x10a/0x4c0 [ 76.714030][ T6683] bpf_test_run_xdp_live+0x3a1/0x500 [ 76.715458][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 76.716846][ T6683] __sys_bpf+0xfc6/0x49a0 [ 76.717967][ T6683] __x64_sys_bpf+0x78/0xc0 [ 76.719135][ T6683] do_syscall_64+0xcd/0x250 [ 76.720323][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.721852][ T6683] Modules linked in: [ 76.722885][ T6683] CPU: 1 UID: 0 PID: 6683 Comm: syz.2.194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 76.725958][ T6683] Tainted: [B]=BAD_PAGE [ 76.727062][ T6683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.729799][ T6683] Call Trace: [ 76.730681][ T6683] [ 76.731457][ T6683] dump_stack_lvl+0x16c/0x1f0 [ 76.732693][ T6683] bad_page+0xb3/0x1f0 [ 76.733763][ T6683] ? __pfx_bad_page+0x10/0x10 [ 76.735013][ T6683] ? page_bad_reason+0x9d/0x1e0 [ 76.736282][ T6683] free_unref_page+0x657/0xdc0 [ 76.737528][ T6683] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 76.739058][ T6683] ? __phys_addr+0xc6/0x150 [ 76.740265][ T6683] skb_free_head+0xa0/0x1d0 [ 76.741460][ T6683] skb_release_data+0x560/0x730 [ 76.742771][ T6683] sk_skb_reason_drop+0x129/0x1a0 [ 76.744091][ T6683] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 76.745813][ T6683] ? kernel_text_address+0x8d/0x100 [ 76.747167][ T6683] ? hlock_class+0x4e/0x130 [ 76.748362][ T6683] ? __lock_acquire+0x163e/0x3ce0 [ 76.749670][ T6683] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 76.751510][ T6683] ? hlock_class+0x4e/0x130 [ 76.752720][ T6683] ? __lock_acquire+0xbdd/0x3ce0 [ 76.754026][ T6683] ? __pfx___lock_acquire+0x10/0x10 [ 76.755399][ T6683] __netif_receive_skb_list_core+0x357/0x950 [ 76.756958][ T6683] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 76.758646][ T6683] ? trace_lock_acquire+0x14a/0x1d0 [ 76.760003][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 76.761630][ T6683] ? lock_acquire+0x2f/0xb0 [ 76.762822][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 76.764464][ T6683] netif_receive_skb_list_internal+0x753/0xdb0 [ 76.766063][ T6683] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 76.767806][ T6683] ? __pfx_eth_type_trans+0x10/0x10 [ 76.769161][ T6683] ? __build_skb_around+0x278/0x3b0 [ 76.770531][ T6683] netif_receive_skb_list+0x4f/0x4a0 [ 76.771909][ T6683] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 76.773533][ T6683] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 76.775245][ T6683] ? bpf_test_timer_continue+0x150/0x3d0 [ 76.776700][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 76.778069][ T6683] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 76.779590][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 76.781113][ T6683] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 76.782712][ T6683] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 76.784223][ T6683] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 76.785590][ T6683] ? 0xffffffffa00045c0 [ 76.786679][ T6683] ? 0xffffffffa00045c0 [ 76.787763][ T6683] ? 0xffffffffa00045c0 [ 76.788847][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 76.790391][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 76.791790][ T6683] ? lock_acquire+0x2f/0xb0 [ 76.792977][ T6683] ? __fget_files+0x40/0x3f0 [ 76.794205][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 76.795734][ T6683] ? fput+0x30/0x390 [ 76.796768][ T6683] ? __bpf_prog_get+0xa0/0x290 [ 76.798021][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 76.799545][ T6683] __sys_bpf+0xfc6/0x49a0 [ 76.800686][ T6683] ? __pfx___sys_bpf+0x10/0x10 [ 76.801938][ T6683] ? __schedule+0xe5d/0x5730 [ 76.803164][ T6683] ? __fget_files+0x23a/0x3f0 [ 76.804391][ T6683] ? do_futex+0x123/0x350 [ 76.805528][ T6683] ? __pfx_do_futex+0x10/0x10 [ 76.806766][ T6683] ? xfd_validate_state+0x5d/0x180 [ 76.808100][ T6683] ? rcu_is_watching+0x12/0xc0 [ 76.809369][ T6683] __x64_sys_bpf+0x78/0xc0 [ 76.810544][ T6683] ? lockdep_hardirqs_on+0x7c/0x110 [ 76.811900][ T6683] do_syscall_64+0xcd/0x250 [ 76.813089][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.814647][ T6683] RIP: 0033:0x7f574217e719 [ 76.815815][ T6683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.820774][ T6683] RSP: 002b:00007f5742e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 76.822931][ T6683] RAX: ffffffffffffffda RBX: 00007f5742336058 RCX: 00007f574217e719 [ 76.824958][ T6683] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 76.826990][ T6683] RBP: 00007f57421f132e R08: 0000000000000000 R09: 0000000000000000 [ 76.829023][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.831058][ T6683] R13: 0000000000000000 R14: 00007f5742336058 R15: 00007ffe5115f908 [ 76.833083][ T6683] [ 76.833994][ T6683] BUG: Bad page state in process syz.2.194 pfn:4cd8f [ 76.835834][ T6683] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2 pfn:0x4cd8f [ 76.838096][ T6683] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 76.839938][ T6683] raw: 00fff00000000000 dead000000000040 ffff88802a52e000 0000000000000000 [ 76.842129][ T6683] raw: 0000000000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 76.844338][ T6683] page dumped because: page_pool leak [ 76.845844][ T6683] page_owner tracks the page as allocated [ 76.847343][ T6683] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6683, tgid 6674 (syz.2.194), ts 67590933941, free_ts 67589125820 [ 76.851485][ T6683] post_alloc_hook+0x2d1/0x350 [ 76.852734][ T6683] get_page_from_freelist+0x101e/0x3070 [ 76.854189][ T6683] __alloc_pages_noprof+0x223/0x25a0 [ 76.855613][ T6683] alloc_pages_bulk_noprof+0x77c/0x1110 [ 76.857058][ T6683] __page_pool_alloc_pages_slow+0x18f/0x770 [ 76.858642][ T6683] page_pool_alloc_netmem+0xc4/0x160 [ 76.860026][ T6683] page_pool_alloc_pages+0x1a/0x60 [ 76.861403][ T6683] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 76.863041][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 76.864457][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 76.865920][ T6683] __sys_bpf+0xfc6/0x49a0 [ 76.867061][ T6683] __x64_sys_bpf+0x78/0xc0 [ 76.868241][ T6683] do_syscall_64+0xcd/0x250 [ 76.869447][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.871009][ T6683] page last free pid 6671 tgid 6669 stack trace: [ 76.872679][ T6683] free_unref_page+0x5f4/0xdc0 [ 76.873959][ T6683] __folio_put+0x30d/0x3d0 [ 76.875196][ T6683] put_page+0x21e/0x280 [ 76.876286][ T6683] page_pool_return_page+0x400/0x520 [ 76.877646][ T6683] page_pool_release+0xf4/0x7d0 [ 76.878955][ T6683] page_pool_destroy+0x10a/0x4c0 [ 76.880280][ T6683] bpf_test_run_xdp_live+0x3a1/0x500 [ 76.881660][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 76.883061][ T6683] __sys_bpf+0xfc6/0x49a0 [ 76.884182][ T6683] __x64_sys_bpf+0x78/0xc0 [ 76.885413][ T6683] do_syscall_64+0xcd/0x250 [ 76.886635][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.888200][ T6683] Modules linked in: [ 76.889219][ T6683] CPU: 1 UID: 0 PID: 6683 Comm: syz.2.194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 76.892307][ T6683] Tainted: [B]=BAD_PAGE [ 76.893408][ T6683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.896208][ T6683] Call Trace: [ 76.897077][ T6683] [ 76.897850][ T6683] dump_stack_lvl+0x16c/0x1f0 [ 76.899100][ T6683] bad_page+0xb3/0x1f0 [ 76.900167][ T6683] ? __pfx_bad_page+0x10/0x10 [ 76.901406][ T6683] ? page_bad_reason+0x9d/0x1e0 [ 76.902708][ T6683] free_unref_page+0x657/0xdc0 [ 76.903951][ T6683] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 76.905504][ T6683] ? __phys_addr+0xc6/0x150 [ 76.906704][ T6683] skb_free_head+0xa0/0x1d0 [ 76.907928][ T6683] skb_release_data+0x560/0x730 [ 76.909206][ T6683] sk_skb_reason_drop+0x129/0x1a0 [ 76.910531][ T6683] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 76.912277][ T6683] ? kernel_text_address+0x8d/0x100 [ 76.913626][ T6683] ? hlock_class+0x4e/0x130 [ 76.914837][ T6683] ? __lock_acquire+0x163e/0x3ce0 [ 76.916191][ T6683] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 76.918222][ T6683] ? hlock_class+0x4e/0x130 [ 76.919439][ T6683] ? __lock_acquire+0xbdd/0x3ce0 [ 76.920743][ T6683] ? __pfx___lock_acquire+0x10/0x10 [ 76.922111][ T6683] __netif_receive_skb_list_core+0x357/0x950 [ 76.923671][ T6683] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 76.925380][ T6683] ? trace_lock_acquire+0x14a/0x1d0 [ 76.926745][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 76.928390][ T6683] ? lock_acquire+0x2f/0xb0 [ 76.929572][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 76.931242][ T6683] netif_receive_skb_list_internal+0x753/0xdb0 [ 76.932857][ T6683] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 76.934637][ T6683] ? __pfx_eth_type_trans+0x10/0x10 [ 76.936007][ T6683] ? __build_skb_around+0x278/0x3b0 [ 76.937371][ T6683] netif_receive_skb_list+0x4f/0x4a0 [ 76.938774][ T6683] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 76.940402][ T6683] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 76.942075][ T6683] ? bpf_test_timer_continue+0x150/0x3d0 [ 76.943533][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 76.944914][ T6683] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 76.946462][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 76.948010][ T6683] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 76.949552][ T6683] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 76.951099][ T6683] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 76.952489][ T6683] ? 0xffffffffa00045c0 [ 76.953594][ T6683] ? 0xffffffffa00045c0 [ 76.954706][ T6683] ? 0xffffffffa00045c0 [ 76.955812][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 76.957394][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 76.958876][ T6683] ? lock_acquire+0x2f/0xb0 [ 76.960312][ T6683] ? __fget_files+0x40/0x3f0 [ 76.961714][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 76.963363][ T6683] ? fput+0x30/0x390 [ 76.964426][ T6683] ? __bpf_prog_get+0xa0/0x290 [ 76.966125][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 76.968214][ T6683] __sys_bpf+0xfc6/0x49a0 [ 76.969477][ T6683] ? __pfx___sys_bpf+0x10/0x10 [ 76.971236][ T6683] ? __schedule+0xe5d/0x5730 [ 76.972906][ T6683] ? __fget_files+0x23a/0x3f0 [ 76.974634][ T6683] ? do_futex+0x123/0x350 [ 76.976218][ T6683] ? __pfx_do_futex+0x10/0x10 [ 76.977946][ T6683] ? xfd_validate_state+0x5d/0x180 [ 76.979792][ T6683] ? rcu_is_watching+0x12/0xc0 [ 76.981318][ T6683] __x64_sys_bpf+0x78/0xc0 [ 76.982672][ T6683] ? lockdep_hardirqs_on+0x7c/0x110 [ 76.984266][ T6683] do_syscall_64+0xcd/0x250 [ 76.985931][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.988118][ T6683] RIP: 0033:0x7f574217e719 [ 76.989737][ T6683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.996403][ T6683] RSP: 002b:00007f5742e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 76.999300][ T6683] RAX: ffffffffffffffda RBX: 00007f5742336058 RCX: 00007f574217e719 [ 77.001815][ T6683] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 77.004402][ T6683] RBP: 00007f57421f132e R08: 0000000000000000 R09: 0000000000000000 [ 77.006942][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.008978][ T6683] R13: 0000000000000000 R14: 00007f5742336058 R15: 00007ffe5115f908 [ 77.011098][ T6683] [ 77.012003][ T6683] BUG: Bad page state in process syz.2.194 pfn:285d6 [ 77.013763][ T6683] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880285d7e00 pfn:0x285d6 [ 77.016540][ T6683] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 77.018730][ T6683] raw: 00fff00000000000 dead000000000040 ffff88802a52e000 0000000000000000 [ 77.021828][ T6683] raw: ffff8880285d7e00 0000000000000001 00000000ffffffff 0000000000000000 [ 77.024925][ T6683] page dumped because: page_pool leak [ 77.026894][ T6683] page_owner tracks the page as allocated [ 77.028942][ T6683] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6683, tgid 6674 (syz.2.194), ts 67590929318, free_ts 67589130667 [ 77.034691][ T6683] post_alloc_hook+0x2d1/0x350 [ 77.036358][ T6683] get_page_from_freelist+0x101e/0x3070 [ 77.038337][ T6683] __alloc_pages_noprof+0x223/0x25a0 [ 77.040260][ T6683] alloc_pages_bulk_noprof+0x77c/0x1110 [ 77.042281][ T6683] __page_pool_alloc_pages_slow+0x18f/0x770 [ 77.044430][ T6683] page_pool_alloc_netmem+0xc4/0x160 [ 77.046440][ T6683] page_pool_alloc_pages+0x1a/0x60 [ 77.048125][ T6683] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 77.050314][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 77.051744][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 77.053546][ T6683] __sys_bpf+0xfc6/0x49a0 [ 77.055083][ T6683] __x64_sys_bpf+0x78/0xc0 [ 77.056337][ T6683] do_syscall_64+0xcd/0x250 [ 77.057660][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.059294][ T6683] page last free pid 6671 tgid 6669 stack trace: [ 77.060935][ T6683] free_unref_page+0x5f4/0xdc0 [ 77.062227][ T6683] __folio_put+0x30d/0x3d0 [ 77.063424][ T6683] put_page+0x21e/0x280 [ 77.064529][ T6683] page_pool_return_page+0x400/0x520 [ 77.066505][ T6683] page_pool_release+0xf4/0x7d0 [ 77.068291][ T6683] page_pool_destroy+0x10a/0x4c0 [ 77.069638][ T6683] bpf_test_run_xdp_live+0x3a1/0x500 [ 77.071046][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 77.072567][ T6683] __sys_bpf+0xfc6/0x49a0 [ 77.073723][ T6683] __x64_sys_bpf+0x78/0xc0 [ 77.075136][ T6683] do_syscall_64+0xcd/0x250 [ 77.076460][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.078005][ T6683] Modules linked in: [ 77.079065][ T6683] CPU: 1 UID: 0 PID: 6683 Comm: syz.2.194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 77.082140][ T6683] Tainted: [B]=BAD_PAGE [ 77.083232][ T6683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.086333][ T6683] Call Trace: [ 77.087544][ T6683] [ 77.088635][ T6683] dump_stack_lvl+0x16c/0x1f0 [ 77.090026][ T6683] bad_page+0xb3/0x1f0 [ 77.091128][ T6683] ? __pfx_bad_page+0x10/0x10 [ 77.092362][ T6683] ? page_bad_reason+0x9d/0x1e0 [ 77.093638][ T6683] free_unref_page+0x657/0xdc0 [ 77.094937][ T6683] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 77.096494][ T6683] ? __phys_addr+0xc6/0x150 [ 77.097720][ T6683] skb_free_head+0xa0/0x1d0 [ 77.098924][ T6683] skb_release_data+0x560/0x730 [ 77.100200][ T6683] sk_skb_reason_drop+0x129/0x1a0 [ 77.101512][ T6683] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 77.103251][ T6683] ? kernel_text_address+0x8d/0x100 [ 77.104631][ T6683] ? hlock_class+0x4e/0x130 [ 77.106055][ T6683] ? __lock_acquire+0x163e/0x3ce0 [ 77.107425][ T6683] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 77.109259][ T6683] ? hlock_class+0x4e/0x130 [ 77.110460][ T6683] ? __lock_acquire+0xbdd/0x3ce0 [ 77.111744][ T6683] ? __pfx___lock_acquire+0x10/0x10 [ 77.113094][ T6683] __netif_receive_skb_list_core+0x357/0x950 [ 77.114828][ T6683] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 77.117100][ T6683] ? trace_lock_acquire+0x14a/0x1d0 [ 77.118540][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 77.120183][ T6683] ? lock_acquire+0x2f/0xb0 [ 77.121367][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 77.123184][ T6683] netif_receive_skb_list_internal+0x753/0xdb0 [ 77.124848][ T6683] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 77.126609][ T6683] ? __pfx_eth_type_trans+0x10/0x10 [ 77.127963][ T6683] ? __build_skb_around+0x278/0x3b0 [ 77.129319][ T6683] netif_receive_skb_list+0x4f/0x4a0 [ 77.130702][ T6683] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 77.132328][ T6683] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 77.134052][ T6683] ? bpf_test_timer_continue+0x150/0x3d0 [ 77.135533][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 77.136912][ T6683] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 77.138449][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 77.139981][ T6683] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 77.141520][ T6683] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 77.143051][ T6683] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 77.144424][ T6683] ? 0xffffffffa00045c0 [ 77.145599][ T6683] ? 0xffffffffa00045c0 [ 77.147117][ T6683] ? 0xffffffffa00045c0 [ 77.148230][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 77.149780][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 77.151203][ T6683] ? lock_acquire+0x2f/0xb0 [ 77.152392][ T6683] ? __fget_files+0x40/0x3f0 [ 77.153606][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 77.155224][ T6683] ? fput+0x30/0x390 [ 77.156295][ T6683] ? __bpf_prog_get+0xa0/0x290 [ 77.157547][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 77.159075][ T6683] __sys_bpf+0xfc6/0x49a0 [ 77.160207][ T6683] ? __pfx___sys_bpf+0x10/0x10 [ 77.161458][ T6683] ? __schedule+0xe5d/0x5730 [ 77.162683][ T6683] ? __fget_files+0x23a/0x3f0 [ 77.163926][ T6683] ? do_futex+0x123/0x350 [ 77.165320][ T6683] ? __pfx_do_futex+0x10/0x10 [ 77.167007][ T6683] ? xfd_validate_state+0x5d/0x180 [ 77.168337][ T6683] ? rcu_is_watching+0x12/0xc0 [ 77.169581][ T6683] __x64_sys_bpf+0x78/0xc0 [ 77.170751][ T6683] ? lockdep_hardirqs_on+0x7c/0x110 [ 77.172100][ T6683] do_syscall_64+0xcd/0x250 [ 77.173285][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.174946][ T6683] RIP: 0033:0x7f574217e719 [ 77.176599][ T6683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.182961][ T6683] RSP: 002b:00007f5742e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 77.185771][ T6683] RAX: ffffffffffffffda RBX: 00007f5742336058 RCX: 00007f574217e719 [ 77.188318][ T6683] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 77.190292][ T6683] RBP: 00007f57421f132e R08: 0000000000000000 R09: 0000000000000000 [ 77.192334][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.194407][ T6683] R13: 0000000000000000 R14: 00007f5742336058 R15: 00007ffe5115f908 [ 77.197198][ T6683] [ 77.198237][ T6683] BUG: Bad page state in process syz.2.194 pfn:285d7 [ 77.200031][ T6683] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2 pfn:0x285d7 [ 77.202320][ T6683] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 77.204173][ T6683] raw: 00fff00000000000 dead000000000040 ffff88802a52e000 0000000000000000 [ 77.206489][ T6683] raw: 0000000000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 77.208728][ T6683] page dumped because: page_pool leak [ 77.210117][ T6683] page_owner tracks the page as allocated [ 77.211597][ T6683] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6683, tgid 6674 (syz.2.194), ts 67590924533, free_ts 67589135310 [ 77.216441][ T6683] post_alloc_hook+0x2d1/0x350 [ 77.217974][ T6683] get_page_from_freelist+0x101e/0x3070 [ 77.219470][ T6683] __alloc_pages_noprof+0x223/0x25a0 [ 77.220844][ T6683] alloc_pages_bulk_noprof+0x77c/0x1110 [ 77.222279][ T6683] __page_pool_alloc_pages_slow+0x18f/0x770 [ 77.223812][ T6683] page_pool_alloc_netmem+0xc4/0x160 [ 77.225484][ T6683] page_pool_alloc_pages+0x1a/0x60 [ 77.226830][ T6683] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 77.228437][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 77.229853][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 77.231263][ T6683] __sys_bpf+0xfc6/0x49a0 [ 77.232403][ T6683] __x64_sys_bpf+0x78/0xc0 [ 77.233577][ T6683] do_syscall_64+0xcd/0x250 [ 77.234898][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.237096][ T6683] page last free pid 6671 tgid 6669 stack trace: [ 77.239106][ T6683] free_unref_page+0x5f4/0xdc0 [ 77.240403][ T6683] __folio_put+0x30d/0x3d0 [ 77.241600][ T6683] put_page+0x21e/0x280 [ 77.242735][ T6683] page_pool_return_page+0x400/0x520 [ 77.244170][ T6683] page_pool_release+0xf4/0x7d0 [ 77.245570][ T6683] page_pool_destroy+0x10a/0x4c0 [ 77.246910][ T6683] bpf_test_run_xdp_live+0x3a1/0x500 [ 77.248331][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 77.249820][ T6683] __sys_bpf+0xfc6/0x49a0 [ 77.251004][ T6683] __x64_sys_bpf+0x78/0xc0 [ 77.252200][ T6683] do_syscall_64+0xcd/0x250 [ 77.253432][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.255148][ T6683] Modules linked in: [ 77.256243][ T6683] CPU: 1 UID: 0 PID: 6683 Comm: syz.2.194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 77.259439][ T6683] Tainted: [B]=BAD_PAGE [ 77.260553][ T6683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.263548][ T6683] Call Trace: [ 77.264481][ T6683] [ 77.265357][ T6683] dump_stack_lvl+0x16c/0x1f0 [ 77.266695][ T6683] bad_page+0xb3/0x1f0 [ 77.267815][ T6683] ? __pfx_bad_page+0x10/0x10 [ 77.269130][ T6683] ? page_bad_reason+0x9d/0x1e0 [ 77.270487][ T6683] free_unref_page+0x657/0xdc0 [ 77.271840][ T6683] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 77.273481][ T6683] ? __phys_addr+0xc6/0x150 [ 77.274915][ T6683] skb_free_head+0xa0/0x1d0 [ 77.276155][ T6683] skb_release_data+0x560/0x730 [ 77.277452][ T6683] sk_skb_reason_drop+0x129/0x1a0 [ 77.278890][ T6683] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 77.280630][ T6683] ? kernel_text_address+0x8d/0x100 [ 77.281996][ T6683] ? hlock_class+0x4e/0x130 [ 77.283200][ T6683] ? __lock_acquire+0x163e/0x3ce0 [ 77.284517][ T6683] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 77.286391][ T6683] ? hlock_class+0x4e/0x130 [ 77.287644][ T6683] ? __lock_acquire+0xbdd/0x3ce0 [ 77.288952][ T6683] ? __pfx___lock_acquire+0x10/0x10 [ 77.290332][ T6683] __netif_receive_skb_list_core+0x357/0x950 [ 77.291917][ T6683] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 77.293656][ T6683] ? trace_lock_acquire+0x14a/0x1d0 [ 77.295182][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 77.296781][ T6683] ? lock_acquire+0x2f/0xb0 [ 77.297987][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 77.299697][ T6683] netif_receive_skb_list_internal+0x753/0xdb0 [ 77.301319][ T6683] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 77.303066][ T6683] ? __pfx_eth_type_trans+0x10/0x10 [ 77.304464][ T6683] ? __build_skb_around+0x278/0x3b0 [ 77.305776][ T6683] netif_receive_skb_list+0x4f/0x4a0 [ 77.307184][ T6683] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 77.308834][ T6683] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 77.310619][ T6683] ? bpf_test_timer_continue+0x150/0x3d0 [ 77.312064][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 77.313416][ T6683] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 77.314957][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 77.316531][ T6683] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 77.318024][ T6683] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 77.319585][ T6683] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 77.320939][ T6683] ? 0xffffffffa00045c0 [ 77.322000][ T6683] ? 0xffffffffa00045c0 [ 77.323112][ T6683] ? 0xffffffffa00045c0 [ 77.324237][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 77.325742][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 77.327083][ T6683] ? lock_acquire+0x2f/0xb0 [ 77.328231][ T6683] ? __fget_files+0x40/0x3f0 [ 77.329453][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 77.331013][ T6683] ? fput+0x30/0x390 [ 77.332037][ T6683] ? __bpf_prog_get+0xa0/0x290 [ 77.333322][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 77.334868][ T6683] __sys_bpf+0xfc6/0x49a0 [ 77.336001][ T6683] ? __pfx___sys_bpf+0x10/0x10 [ 77.337265][ T6683] ? __schedule+0xe5d/0x5730 [ 77.338508][ T6683] ? __fget_files+0x23a/0x3f0 [ 77.339781][ T6683] ? do_futex+0x123/0x350 [ 77.340915][ T6683] ? __pfx_do_futex+0x10/0x10 [ 77.342158][ T6683] ? xfd_validate_state+0x5d/0x180 [ 77.343509][ T6683] ? rcu_is_watching+0x12/0xc0 [ 77.344750][ T6683] __x64_sys_bpf+0x78/0xc0 [ 77.345974][ T6683] ? lockdep_hardirqs_on+0x7c/0x110 [ 77.347508][ T6683] do_syscall_64+0xcd/0x250 [ 77.348723][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.350332][ T6683] RIP: 0033:0x7f574217e719 [ 77.351568][ T6683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.356654][ T6683] RSP: 002b:00007f5742e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 77.358875][ T6683] RAX: ffffffffffffffda RBX: 00007f5742336058 RCX: 00007f574217e719 [ 77.360956][ T6683] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 77.363042][ T6683] RBP: 00007f57421f132e R08: 0000000000000000 R09: 0000000000000000 [ 77.365390][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.367879][ T6683] R13: 0000000000000000 R14: 00007f5742336058 R15: 00007ffe5115f908 [ 77.370481][ T6683] [ 77.371702][ T6683] BUG: Bad page state in process syz.2.194 pfn:241b0 [ 77.373648][ T6683] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880241b1e00 pfn:0x241b0 [ 77.376421][ T6683] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 77.378306][ T6683] raw: 00fff00000000000 dead000000000040 ffff88802a52e000 0000000000000000 [ 77.380527][ T6683] raw: ffff8880241b1e00 0000000000000001 00000000ffffffff 0000000000000000 [ 77.382868][ T6683] page dumped because: page_pool leak [ 77.384351][ T6683] page_owner tracks the page as allocated [ 77.385983][ T6683] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6683, tgid 6674 (syz.2.194), ts 67590919614, free_ts 67589139973 [ 77.390409][ T6683] post_alloc_hook+0x2d1/0x350 [ 77.391726][ T6683] get_page_from_freelist+0x101e/0x3070 [ 77.393177][ T6683] __alloc_pages_noprof+0x223/0x25a0 [ 77.394710][ T6683] alloc_pages_bulk_noprof+0x77c/0x1110 [ 77.396410][ T6683] __page_pool_alloc_pages_slow+0x18f/0x770 [ 77.398188][ T6683] page_pool_alloc_netmem+0xc4/0x160 [ 77.399833][ T6683] page_pool_alloc_pages+0x1a/0x60 [ 77.401356][ T6683] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 77.403008][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 77.404406][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 77.405908][ T6683] __sys_bpf+0xfc6/0x49a0 [ 77.407057][ T6683] __x64_sys_bpf+0x78/0xc0 [ 77.408266][ T6683] do_syscall_64+0xcd/0x250 [ 77.409615][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.411239][ T6683] page last free pid 6671 tgid 6669 stack trace: [ 77.412939][ T6683] free_unref_page+0x5f4/0xdc0 [ 77.414226][ T6683] __folio_put+0x30d/0x3d0 [ 77.415471][ T6683] put_page+0x21e/0x280 [ 77.416580][ T6683] page_pool_return_page+0x400/0x520 [ 77.418025][ T6683] page_pool_release+0xf4/0x7d0 [ 77.419449][ T6683] page_pool_destroy+0x10a/0x4c0 [ 77.420905][ T6683] bpf_test_run_xdp_live+0x3a1/0x500 [ 77.422474][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 77.424020][ T6683] __sys_bpf+0xfc6/0x49a0 [ 77.425317][ T6683] __x64_sys_bpf+0x78/0xc0 [ 77.426486][ T6683] do_syscall_64+0xcd/0x250 [ 77.427715][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.429264][ T6683] Modules linked in: [ 77.430377][ T6683] CPU: 1 UID: 0 PID: 6683 Comm: syz.2.194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 77.433443][ T6683] Tainted: [B]=BAD_PAGE [ 77.434557][ T6683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.437545][ T6683] Call Trace: [ 77.438457][ T6683] [ 77.439250][ T6683] dump_stack_lvl+0x16c/0x1f0 [ 77.440542][ T6683] bad_page+0xb3/0x1f0 [ 77.441627][ T6683] ? __pfx_bad_page+0x10/0x10 [ 77.442904][ T6683] ? page_bad_reason+0x9d/0x1e0 [ 77.444194][ T6683] free_unref_page+0x657/0xdc0 [ 77.445458][ T6683] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 77.447108][ T6683] ? __phys_addr+0xc6/0x150 [ 77.448327][ T6683] skb_free_head+0xa0/0x1d0 [ 77.449647][ T6683] skb_release_data+0x560/0x730 [ 77.451001][ T6683] sk_skb_reason_drop+0x129/0x1a0 [ 77.452456][ T6683] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 77.454355][ T6683] ? kernel_text_address+0x8d/0x100 [ 77.455805][ T6683] ? hlock_class+0x4e/0x130 [ 77.457109][ T6683] ? __lock_acquire+0x163e/0x3ce0 [ 77.458552][ T6683] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 77.460500][ T6683] ? hlock_class+0x4e/0x130 [ 77.461713][ T6683] ? __lock_acquire+0xbdd/0x3ce0 [ 77.463025][ T6683] ? __pfx___lock_acquire+0x10/0x10 [ 77.464431][ T6683] __netif_receive_skb_list_core+0x357/0x950 [ 77.466288][ T6683] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 77.467965][ T6683] ? trace_lock_acquire+0x14a/0x1d0 [ 77.469301][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 77.470967][ T6683] ? lock_acquire+0x2f/0xb0 [ 77.472162][ T6683] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 77.473807][ T6683] netif_receive_skb_list_internal+0x753/0xdb0 [ 77.475430][ T6683] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 77.477168][ T6683] ? __pfx_eth_type_trans+0x10/0x10 [ 77.478814][ T6683] ? __build_skb_around+0x278/0x3b0 [ 77.480193][ T6683] netif_receive_skb_list+0x4f/0x4a0 [ 77.481590][ T6683] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 77.483384][ T6683] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 77.485340][ T6683] ? bpf_test_timer_continue+0x150/0x3d0 [ 77.486941][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 77.488440][ T6683] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 77.489965][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 77.491522][ T6683] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 77.492940][ T6683] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 77.494414][ T6683] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 77.495710][ T6683] ? 0xffffffffa00045c0 [ 77.496779][ T6683] ? 0xffffffffa00045c0 [ 77.497829][ T6683] ? 0xffffffffa00045c0 [ 77.498884][ T6683] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 77.500392][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 77.501735][ T6683] ? lock_acquire+0x2f/0xb0 [ 77.502901][ T6683] ? __fget_files+0x40/0x3f0 [ 77.504076][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 77.505652][ T6683] ? fput+0x30/0x390 [ 77.506716][ T6683] ? __bpf_prog_get+0xa0/0x290 [ 77.507980][ T6683] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 77.509511][ T6683] __sys_bpf+0xfc6/0x49a0 [ 77.510651][ T6683] ? __pfx___sys_bpf+0x10/0x10 [ 77.511910][ T6683] ? __schedule+0xe5d/0x5730 [ 77.513124][ T6683] ? __fget_files+0x23a/0x3f0 [ 77.514382][ T6683] ? do_futex+0x123/0x350 [ 77.515517][ T6683] ? __pfx_do_futex+0x10/0x10 [ 77.516794][ T6683] ? xfd_validate_state+0x5d/0x180 [ 77.518136][ T6683] ? rcu_is_watching+0x12/0xc0 [ 77.519407][ T6683] __x64_sys_bpf+0x78/0xc0 [ 77.520587][ T6683] ? lockdep_hardirqs_on+0x7c/0x110 [ 77.521971][ T6683] do_syscall_64+0xcd/0x250 [ 77.523180][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.524735][ T6683] RIP: 0033:0x7f574217e719 [ 77.525904][ T6683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.530905][ T6683] RSP: 002b:00007f5742e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 77.533084][ T6683] RAX: ffffffffffffffda RBX: 00007f5742336058 RCX: 00007f574217e719 [ 77.535201][ T6683] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 77.537237][ T6683] RBP: 00007f57421f132e R08: 0000000000000000 R09: 0000000000000000 [ 77.539325][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.541372][ T6683] R13: 0000000000000000 R14: 00007f5742336058 R15: 00007ffe5115f908 [ 77.543458][ T6683] [ 77.544372][ T6683] BUG: Bad page state in process syz.2.194 pfn:241b1 [ 77.546150][ T6683] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2 pfn:0x241b1 [ 77.548409][ T6683] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 77.550272][ T6683] raw: 00fff00000000000 dead000000000040 ffff88802a52e000 0000000000000000 [ 77.552543][ T6683] raw: 0000000000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 77.554772][ T6683] page dumped because: page_pool leak [ 77.556236][ T6683] page_owner tracks the page as allocated [ 77.557731][ T6683] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6683, tgid 6674 (syz.2.194), ts 67590914264, free_ts 67589143850 [ 77.561978][ T6683] post_alloc_hook+0x2d1/0x350 [ 77.563243][ T6683] get_page_from_freelist+0x101e/0x3070 [ 77.564689][ T6683] __alloc_pages_noprof+0x223/0x25a0 [ 77.566406][ T6683] alloc_pages_bulk_noprof+0x77c/0x1110 [ 77.567887][ T6683] __page_pool_alloc_pages_slow+0x18f/0x770 [ 77.569446][ T6683] page_pool_alloc_netmem+0xc4/0x160 [ 77.570844][ T6683] page_pool_alloc_pages+0x1a/0x60 [ 77.572199][ T6683] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 77.574051][ T6683] bpf_test_run_xdp_live+0x365/0x500 [ 77.575775][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 77.577257][ T6683] __sys_bpf+0xfc6/0x49a0 [ 77.578405][ T6683] __x64_sys_bpf+0x78/0xc0 [ 77.579586][ T6683] do_syscall_64+0xcd/0x250 [ 77.580957][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.582810][ T6683] page last free pid 6671 tgid 6669 stack trace: [ 77.584741][ T6683] free_unref_page+0x5f4/0xdc0 [ 77.586342][ T6683] __folio_put+0x30d/0x3d0 [ 77.587611][ T6683] put_page+0x21e/0x280 [ 77.588696][ T6683] page_pool_return_page+0x400/0x520 [ 77.590254][ T6683] page_pool_release+0xf4/0x7d0 [ 77.591538][ T6683] page_pool_destroy+0x10a/0x4c0 [ 77.592826][ T6683] bpf_test_run_xdp_live+0x3a1/0x500 [ 77.594389][ T6683] bpf_prog_test_run_xdp+0x827/0x1580 [ 77.595866][ T6683] __sys_bpf+0xfc6/0x49a0 [ 77.596982][ T6683] __x64_sys_bpf+0x78/0xc0 [ 77.598160][ T6683] do_syscall_64+0xcd/0x250 [ 77.599378][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.600918][ T6683] Modules linked in: VM DIAGNOSIS: 20:06:24 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=0000000000000000 RCX=1ffff110055eba7a RDX=1ffff110055eba7e RSI=0000000000000028 RDI=ffff88802af5d3e0 RBP=0000000000000001 RSP=ffffc90005717728 R8 =0000000000000001 R9 =0000000000000001 R10=000000000000000f R11=0000000000000002 R12=ffff88807ffd7d50 R13=ffff88802af5d3d8 R14=0000000000000028 R15=ffff88802af5c880 RIP=ffffffff816a5e99 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fe481f75280 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f592bacf440 CR3=0000000030a68000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000004080 Opmask01=00000000000001ff Opmask02=00000000efffffff Opmask03=0000000000000000 Opmask04=00000000ffffffdf Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe69260480 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe692608c0 0000003000000010 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000ff00000000 00ff000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 102b470033706f6f 6c2f6b636f6c622f 6c6175747269762f 736563697665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f7379732f002f73 75622f7379732f00 2f6d657473797362 75732f7379732f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 31706f6f6c2f6b63 6f6c622f6c00333a 37006b636f6c6200 7665642f7379732f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f5138c6bfe63d633 0000564eb689cd47 00000000000001e1 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f5138c6bfe63d633 0000000564bd2355 0000000000000141 0000000039316c6c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 59647a305f474f5b 647c79303a243a78 68303e3b3a38253b 3a253e3a6e68303b ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a2433273f397b27 697a787c69303b7e 69305f474f5b647c 69303a2433273f39 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 1 CPU#1 RAX=0000000000000065 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff850b46e5 RDI=ffffffff9aae7bc0 RBP=ffffffff9aae7b80 RSP=ffffc9000418e990 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000065 R14=ffffffff850b4680 R15=0000000000000000 RIP=ffffffff850b470f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f5742e986c0 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000000000000 CR3=000000004b51a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000003000007 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb3199f21cb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb3199f21d8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb3199f21d2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb3199f21e6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb3199f226c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb3199f234a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb319b0c488 00007fb319b0c480 00007fb319b0c478 00007fb319b0c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb31a66d100 00007fb319b0c440 00007fb319b0c458 00007fb319b0c4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb319b0c498 00007fb319b0c490 00007fb319b0c488 00007fb319b0c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000d01 0000000000000000 0000000000000000 000000000032e5ea ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff888033722040 RCX=ffffffff89e08aa4 RDX=0000000000000000 RSI=000000000000030d RDI=ffffffff8cade100 RBP=ffffc90007ca5000 RSP=ffffc900033cf9c0 R8 =0000000000000004 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffffed100d547a80 R13=ffffe8fefca8f000 R14=ffff88806aa3d400 R15=dffffc0000000000 RIP=ffffffff815c2340 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555572cdd500 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb319b07d38 CR3=000000003361e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004000008 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeeeb45890 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb3199f21cb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb3199f21d8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb3199f21d2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb3199f21e6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb3199f226c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb3199f234a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000042800000005 00000270000001a0 ffffffff000000d0 0000000000000270 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6568745f69706361 2474616e65706f00 656c62616e655f6e 6170776f6c362474 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 616e65706f006c6f 72746e6f635f6e61 70776f6c36247461 6e65706f0074616e ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000d01 0000000000000000 0000000000000000 000000000032e5ea ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000202 RBX=0000000000000201 RCX=1ffffffff20bf073 RDX=0000000000000000 RSI=0000000000000201 RDI=ffffffff895fe41f RBP=ffffffff895fe41f RSP=ffffc9000411f6b0 R8 =0000000000000000 R9 =fffff52000f8d209 R10=ffffc90007c6904b R11=0000000000000000 R12=0000000000001acd R13=1ffff92000823ee3 R14=0000000000000001 R15=ffffc90007c69000 RIP=ffffffff81952ae0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f0e6a3ff6c0 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7284db6440 CR3=000000003f4a8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000003000000 Opmask01=0000000003000007 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe39012f20 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0e6a9f21cb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0e6a9f21d8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0e6a9f21d2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0e6a9f21e6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0e6a9f226c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0e6a9f234a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000d03 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000032e68a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000d03 0000000000000000 0000000000000000 000000000032e68a ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000