[ 31.554862][ T39] audit: type=1400 audit(1730204619.805:81): avc: denied { rlimitinh } for pid=5854 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 31.560165][ T39] audit: type=1400 audit(1730204619.805:82): avc: denied { siginh } for pid=5854 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 60.085362][ T39] audit: type=1400 audit(1730204648.345:83): avc: denied { read } for pid=5343 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 60.092120][ T39] audit: type=1400 audit(1730204648.345:84): avc: denied { append } for pid=5343 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 60.099497][ T39] audit: type=1400 audit(1730204648.345:85): avc: denied { open } for pid=5343 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 60.106407][ T39] audit: type=1400 audit(1730204648.345:86): avc: denied { getattr } for pid=5343 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:8124' (ED25519) to the list of known hosts. [ 62.063423][ T39] audit: type=1400 audit(1730204650.325:87): avc: denied { execute } for pid=5939 comm="sh" name="syz-execprog" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 62.069192][ T39] audit: type=1400 audit(1730204650.335:88): avc: denied { execute_no_trans } for pid=5939 comm="sh" path="/syz-execprog" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 62.490985][ T39] audit: type=1400 audit(1730204650.755:89): avc: denied { write } for pid=5939 comm="syz-execprog" path="pipe:[7318]" dev="pipefs" ino=7318 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 2024/10/29 12:24:10 ignoring optional flag "sandboxArg"="0" 2024/10/29 12:24:11 parsed 1 programs [ 62.857109][ T39] audit: type=1400 audit(1730204651.115:90): avc: denied { node_bind } for pid=5939 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 64.879720][ T39] audit: type=1400 audit(1730204653.145:91): avc: denied { mounton } for pid=5946 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1927 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 64.889238][ T39] audit: type=1400 audit(1730204653.155:92): avc: denied { mount } for pid=5946 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 64.890940][ T5946] cgroup: Unknown subsys name 'net' [ 65.020539][ T5946] cgroup: Unknown subsys name 'cpuset' [ 65.024227][ T5946] cgroup: Unknown subsys name 'rlimit' [ 65.167858][ T39] kauditd_printk_skb: 1 callbacks suppressed [ 65.167875][ T39] audit: type=1400 audit(1730204653.435:94): avc: denied { setattr } for pid=5946 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.177497][ T39] audit: type=1400 audit(1730204653.435:95): avc: denied { create } for pid=5946 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.183309][ T39] audit: type=1400 audit(1730204653.435:96): avc: denied { write } for pid=5946 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.189254][ T39] audit: type=1400 audit(1730204653.435:97): avc: denied { read } for pid=5946 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.194862][ T39] audit: type=1400 audit(1730204653.435:98): avc: denied { mounton } for pid=5946 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 65.202337][ T39] audit: type=1400 audit(1730204653.435:99): avc: denied { mount } for pid=5946 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 65.208987][ T39] audit: type=1400 audit(1730204653.445:100): avc: denied { read } for pid=5661 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 65.212768][ T5953] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 65.218684][ T39] audit: type=1400 audit(1730204653.485:101): avc: denied { relabelto } for pid=5953 comm="mkswap" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 65.227119][ T39] audit: type=1400 audit(1730204653.485:102): avc: denied { write } for pid=5953 comm="mkswap" path="/swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 65.233674][ T39] audit: type=1400 audit(1730204653.495:103): avc: denied { read } for pid=5946 comm="syz-executor" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 65.918072][ T5946] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.347446][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.350865][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.353621][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.356197][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.359796][ T64] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.362545][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.417495][ T5962] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 67.514847][ T5960] chnl_net:caif_netlink_parms(): no params data found [ 67.655265][ T5960] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.658304][ T5960] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.660273][ T5960] bridge_slave_0: entered allmulticast mode [ 67.662435][ T5960] bridge_slave_0: entered promiscuous mode [ 67.666976][ T5960] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.669020][ T5960] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.671142][ T5960] bridge_slave_1: entered allmulticast mode [ 67.673114][ T5960] bridge_slave_1: entered promiscuous mode [ 67.720990][ T5960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.730085][ T5960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.752740][ T5960] team0: Port device team_slave_0 added [ 67.756721][ T5960] team0: Port device team_slave_1 added [ 67.809322][ T5960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.811326][ T5960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.819934][ T5960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.837972][ T5960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.839870][ T5960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.848824][ T5960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.899422][ T5960] hsr_slave_0: entered promiscuous mode [ 67.902318][ T5960] hsr_slave_1: entered promiscuous mode [ 68.236075][ T5960] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.243242][ T5960] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.264029][ T5960] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.270716][ T5960] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.299749][ T5960] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.301891][ T5960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.305139][ T5960] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.308154][ T5960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.355623][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.358410][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.366492][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.370235][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.392782][ T5960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.396264][ T1187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.398860][ T1187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.404916][ T5960] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.412582][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.414715][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.426461][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.429022][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.571279][ T5960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.606382][ T5960] veth0_vlan: entered promiscuous mode [ 68.619975][ T5960] veth1_vlan: entered promiscuous mode [ 68.642329][ T5960] veth0_macvtap: entered promiscuous mode [ 68.647556][ T5960] veth1_macvtap: entered promiscuous mode [ 68.657929][ T5960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.663549][ T5960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.668196][ T5960] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.670693][ T5960] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.672971][ T5960] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.675358][ T5960] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2024/10/29 12:24:17 executed programs: 0 [ 68.751832][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.771748][ T5963] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.773473][ T6044] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.776468][ T6044] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.780117][ T6044] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.786641][ T6046] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.791554][ T6046] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.794751][ T6046] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.796888][ T6049] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.802946][ T6049] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.805766][ T6046] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.806399][ T6049] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.808851][ T6046] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.811864][ T6049] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.812284][ T6046] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.816650][ T6046] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.820423][ T6046] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 68.820632][ T6049] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.823029][ T6046] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.825135][ T6049] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.830735][ T6049] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 68.833165][ T6049] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.840649][ T6049] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 68.843909][ T6049] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.868044][ T1187] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.055757][ T6041] chnl_net:caif_netlink_parms(): no params data found [ 69.074274][ T6039] chnl_net:caif_netlink_parms(): no params data found [ 69.122391][ T6050] chnl_net:caif_netlink_parms(): no params data found [ 69.159177][ T6047] chnl_net:caif_netlink_parms(): no params data found [ 69.224773][ T6041] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.227607][ T6041] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.229939][ T6041] bridge_slave_0: entered allmulticast mode [ 69.232255][ T6041] bridge_slave_0: entered promiscuous mode [ 69.270281][ T6041] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.272158][ T6041] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.274410][ T6041] bridge_slave_1: entered allmulticast mode [ 69.276967][ T6041] bridge_slave_1: entered promiscuous mode [ 69.318356][ T6039] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.320228][ T6039] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.322096][ T6039] bridge_slave_0: entered allmulticast mode [ 69.324138][ T6039] bridge_slave_0: entered promiscuous mode [ 69.335461][ T6041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.349329][ T6050] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.351234][ T6050] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.353263][ T6050] bridge_slave_0: entered allmulticast mode [ 69.355374][ T6050] bridge_slave_0: entered promiscuous mode [ 69.382059][ T6039] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.383957][ T6039] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.385844][ T6039] bridge_slave_1: entered allmulticast mode [ 69.387941][ T6039] bridge_slave_1: entered promiscuous mode [ 69.390796][ T6041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.400050][ T6050] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.401815][ T6050] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.403663][ T6050] bridge_slave_1: entered allmulticast mode [ 69.405846][ T6050] bridge_slave_1: entered promiscuous mode [ 69.424578][ T6047] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.426470][ T6047] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.428503][ T6047] bridge_slave_0: entered allmulticast mode [ 69.430522][ T6047] bridge_slave_0: entered promiscuous mode [ 69.457646][ T6041] team0: Port device team_slave_0 added [ 69.471515][ T6050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.474061][ T6047] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.476023][ T6047] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.479117][ T6047] bridge_slave_1: entered allmulticast mode [ 69.481925][ T6047] bridge_slave_1: entered promiscuous mode [ 69.510507][ T6039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.514354][ T6039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.533627][ T6041] team0: Port device team_slave_1 added [ 69.545096][ T6050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.567972][ T6047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.572248][ T6039] team0: Port device team_slave_0 added [ 69.608622][ T6047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.613196][ T6039] team0: Port device team_slave_1 added [ 69.624139][ T6041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.626667][ T6041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.634994][ T6041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.640386][ T6050] team0: Port device team_slave_0 added [ 69.661229][ T6041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.663159][ T6041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.670396][ T6041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.676640][ T6050] team0: Port device team_slave_1 added [ 69.698900][ T6039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.701101][ T6039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.708529][ T6039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.713408][ T6039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.715307][ T6039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.722832][ T6039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.736729][ T6047] team0: Port device team_slave_0 added [ 69.763591][ T6041] hsr_slave_0: entered promiscuous mode [ 69.765852][ T6041] hsr_slave_1: entered promiscuous mode [ 69.768416][ T6041] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.770586][ T6041] Cannot create hsr debugfs directory [ 69.772618][ T6050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.774661][ T6050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.781355][ T6050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.785712][ T6047] team0: Port device team_slave_1 added [ 69.810742][ T6050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.812926][ T6050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.819725][ T6050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.846430][ T6039] hsr_slave_0: entered promiscuous mode [ 69.848639][ T6039] hsr_slave_1: entered promiscuous mode [ 69.851376][ T6039] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.853739][ T6039] Cannot create hsr debugfs directory [ 69.880641][ T6047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.883144][ T6047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.891639][ T6047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.895545][ T6047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.898879][ T6047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.906857][ T6047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.940740][ T6050] hsr_slave_0: entered promiscuous mode [ 69.943884][ T6050] hsr_slave_1: entered promiscuous mode [ 69.949297][ T6050] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.951754][ T6050] Cannot create hsr debugfs directory [ 70.034023][ T6047] hsr_slave_0: entered promiscuous mode [ 70.037286][ T6047] hsr_slave_1: entered promiscuous mode [ 70.039717][ T6047] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.042597][ T6047] Cannot create hsr debugfs directory [ 70.191292][ T6041] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.197598][ T6041] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.200921][ T6041] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.205784][ T6041] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.233289][ T6050] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.237974][ T6050] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.257257][ T6050] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.267282][ T6050] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.287512][ T6039] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.291007][ T6039] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.294494][ T6039] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.298672][ T6039] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.330490][ T6041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.363045][ T6041] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.378228][ T6050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.381494][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.383532][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.388312][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.390761][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.412276][ T6050] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.428540][ T6039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.432594][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.434821][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.441384][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.443227][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.455716][ T6039] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.467409][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.469355][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.484405][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.487281][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.562729][ T6041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.596631][ T6041] veth0_vlan: entered promiscuous mode [ 70.605737][ T6050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.609189][ T6041] veth1_vlan: entered promiscuous mode [ 70.629941][ T6041] veth0_macvtap: entered promiscuous mode [ 70.633527][ T6041] veth1_macvtap: entered promiscuous mode [ 70.638647][ T6039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.655711][ T6050] veth0_vlan: entered promiscuous mode [ 70.663709][ T6041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.669358][ T6041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.673550][ T6041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.679665][ T6041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.682723][ T6041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.686141][ T6041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.693379][ T6041] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.695588][ T6041] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.699328][ T6041] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.702271][ T6041] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.707152][ T6050] veth1_vlan: entered promiscuous mode [ 70.726069][ T6039] veth0_vlan: entered promiscuous mode [ 70.736168][ T6039] veth1_vlan: entered promiscuous mode [ 70.746468][ T6050] veth0_macvtap: entered promiscuous mode [ 70.755858][ T6050] veth1_macvtap: entered promiscuous mode [ 70.773016][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.775849][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.808657][ T1187] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.818411][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.820337][ T6039] veth0_macvtap: entered promiscuous mode [ 70.820768][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.824639][ T6050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.828335][ T6050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.831973][ T6050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.835697][ T6050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.840953][ T6050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.845366][ T6050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.848739][ T6050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.851533][ T6050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.854201][ T6050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.858310][ T6050] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.858626][ T6046] Bluetooth: hci3: command tx timeout [ 70.859662][ T6049] Bluetooth: hci1: command tx timeout [ 70.866978][ T6050] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.871141][ T6050] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.874660][ T6050] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.878762][ T6050] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.885301][ T6039] veth1_macvtap: entered promiscuous mode [ 70.901580][ T39] kauditd_printk_skb: 32 callbacks suppressed [ 70.901595][ T39] audit: type=1400 audit(1730204659.165:136): avc: denied { prog_load } for pid=6092 comm="syz.1.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 70.905605][ T6039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.910884][ T39] audit: type=1400 audit(1730204659.165:137): avc: denied { bpf } for pid=6092 comm="syz.1.16" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 70.913856][ T6039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.922935][ T6039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.925880][ T6039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.928137][ T39] audit: type=1400 audit(1730204659.165:138): avc: denied { perfmon } for pid=6092 comm="syz.1.16" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 70.930660][ T6039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.931404][ T6046] Bluetooth: hci2: command tx timeout [ 70.931596][ T6046] Bluetooth: hci0: command tx timeout [ 70.936094][ T39] audit: type=1400 audit(1730204659.175:139): avc: denied { create } for pid=6092 comm="syz.1.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.939205][ T6039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.941467][ T39] audit: type=1400 audit(1730204659.175:140): avc: denied { setopt } for pid=6092 comm="syz.1.16" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.943432][ T6039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.960034][ T39] audit: type=1400 audit(1730204659.225:141): avc: denied { prog_run } for pid=6092 comm="syz.1.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 70.970707][ T6039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.973867][ T6039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.976731][ T6039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.980063][ T6039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.983658][ T6039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.988482][ T6039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.992918][ T6039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.048987][ T6039] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.053212][ T6039] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.056561][ T6039] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.060429][ T6039] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.092208][ T1411] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.095051][ T1411] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.104083][ T1225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.106471][ T1225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.137382][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.140777][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.166298][ T99] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.174559][ T99] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.194366][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.202853][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.927150][ T6049] Bluetooth: hci3: command tx timeout [ 72.937509][ T6049] Bluetooth: hci1: command tx timeout [ 72.965239][ T1187] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.017285][ T6049] Bluetooth: hci0: command tx timeout [ 73.017387][ T6046] Bluetooth: hci2: command tx timeout [ 73.236240][ T1187] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.506840][ T1187] bridge_slave_1: left allmulticast mode [ 73.510766][ T1187] bridge_slave_1: left promiscuous mode [ 73.514134][ T1187] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.645616][ T1187] bridge_slave_0: left allmulticast mode [ 73.648673][ T1187] bridge_slave_0: left promiscuous mode [ 73.651106][ T1187] bridge0: port 1(bridge_slave_0) entered disabled state 2024/10/29 12:24:22 executed programs: 43 [ 75.018578][ T6046] Bluetooth: hci1: command tx timeout [ 75.019774][ T6049] Bluetooth: hci3: command tx timeout [ 75.087355][ T6046] Bluetooth: hci0: command tx timeout [ 75.088969][ T6049] Bluetooth: hci2: command tx timeout [ 75.171954][ T1187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.285140][ T1187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.332828][ T1187] bond0 (unregistering): Released all slaves [ 75.547400][ T39] audit: type=1400 audit(1730204663.795:142): avc: denied { search } for pid=5661 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.600248][ T39] audit: type=1400 audit(1730204663.845:143): avc: denied { read } for pid=6296 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.612363][ T39] audit: type=1400 audit(1730204663.855:144): avc: denied { open } for pid=6296 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.621824][ T39] audit: type=1400 audit(1730204663.855:145): avc: denied { getattr } for pid=6296 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.210543][ T828] cfg80211: failed to load regulatory.db [ 76.451070][ T1187] hsr_slave_0: left promiscuous mode [ 76.532929][ T1187] hsr_slave_1: left promiscuous mode [ 76.578033][ T1187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.580779][ T1187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.646421][ T1187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.648973][ T1187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.760296][ T1187] veth1_macvtap: left promiscuous mode [ 76.762795][ T1187] veth0_macvtap: left promiscuous mode [ 76.786193][ T1187] veth1_vlan: left promiscuous mode [ 76.788080][ T1187] veth0_vlan: left promiscuous mode [ 77.088099][ T6046] Bluetooth: hci3: command tx timeout [ 77.097346][ T6046] Bluetooth: hci1: command tx timeout [ 77.167441][ T6046] Bluetooth: hci2: command tx timeout [ 77.167607][ T6049] Bluetooth: hci0: command tx timeout 2024/10/29 12:24:27 executed programs: 114 [ 79.739992][ T1187] team0 (unregistering): Port device team_slave_1 removed [ 80.069002][ T1187] team0 (unregistering): Port device team_slave_0 removed [ 82.956483][ T6047] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.996272][ T6047] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.000235][ T6047] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.004495][ T6047] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.067961][ T6047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.074604][ T6047] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.085154][ T1133] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.088413][ T1133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.102840][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.104700][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.202688][ T6047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.225653][ T6047] veth0_vlan: entered promiscuous mode [ 83.230500][ T6047] veth1_vlan: entered promiscuous mode [ 83.244566][ T6047] veth0_macvtap: entered promiscuous mode [ 83.248232][ T6047] veth1_macvtap: entered promiscuous mode [ 83.258830][ T6047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.261945][ T6047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.264905][ T6047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.267843][ T6047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.270435][ T6047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.273058][ T6047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.276402][ T6047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.280557][ T6047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.283961][ T6047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.286643][ T6047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.290235][ T6047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.293527][ T6047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.296659][ T6047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.305238][ T6047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.312158][ T6047] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.314794][ T6047] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.318046][ T6047] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.322275][ T6047] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.449328][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.452518][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.515696][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.519434][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2024/10/29 12:24:32 executed programs: 182 2024/10/29 12:24:37 executed programs: 262 [ 92.333897][ T7108] BUG: Bad page state in process syz.0.327 pfn:30685 [ 92.335895][ T7108] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2 pfn:0x30685 [ 92.339767][ T7108] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 92.342609][ T7108] raw: 00fff00000000000 dead000000000040 ffff888036779000 0000000000000000 [ 92.345412][ T7108] raw: 0000000000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 92.348110][ T7108] page dumped because: page_pool leak [ 92.349751][ T7108] page_owner tracks the page as allocated [ 92.351580][ T7108] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7108, tgid 7096 (syz.0.327), ts 92314621776, free_ts 92287944962 [ 92.355919][ T7108] post_alloc_hook+0x2d1/0x350 [ 92.357254][ T7108] get_page_from_freelist+0x101e/0x3070 [ 92.358754][ T7108] __alloc_pages_noprof+0x223/0x25a0 [ 92.360147][ T7108] alloc_pages_bulk_noprof+0x77c/0x1110 [ 92.361587][ T7108] __page_pool_alloc_pages_slow+0x18f/0x770 [ 92.363184][ T7108] page_pool_alloc_netmem+0xc4/0x160 [ 92.364779][ T7108] page_pool_alloc_pages+0x1a/0x60 [ 92.366164][ T7108] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 92.367924][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 92.369470][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 92.370984][ T7108] __sys_bpf+0xfc6/0x49a0 [ 92.372180][ T7108] __x64_sys_bpf+0x78/0xc0 [ 92.373403][ T7108] do_syscall_64+0xcd/0x250 [ 92.374636][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.376260][ T7108] page last free pid 34 tgid 34 stack trace: [ 92.378050][ T7108] free_unref_page+0x5f4/0xdc0 [ 92.379430][ T7108] __folio_put+0x30d/0x3d0 [ 92.380798][ T7108] free_page_and_swap_cache+0x249/0x2c0 [ 92.382390][ T7108] tlb_remove_table_rcu+0x89/0xe0 [ 92.384169][ T7108] rcu_core+0x79d/0x14d0 [ 92.385761][ T7108] handle_softirqs+0x213/0x8f0 [ 92.387663][ T7108] run_ksoftirqd+0x3a/0x60 [ 92.389528][ T7108] smpboot_thread_fn+0x661/0xa30 [ 92.391043][ T7108] kthread+0x2c1/0x3a0 [ 92.392403][ T7108] ret_from_fork+0x45/0x80 [ 92.393905][ T7108] ret_from_fork_asm+0x1a/0x30 [ 92.395548][ T7108] Modules linked in: [ 92.396830][ T7108] CPU: 3 UID: 0 PID: 7108 Comm: syz.0.327 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 92.400046][ T7108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 92.403030][ T7108] Call Trace: [ 92.403936][ T7108] [ 92.404728][ T7108] dump_stack_lvl+0x16c/0x1f0 [ 92.406027][ T7108] bad_page+0xb3/0x1f0 [ 92.407161][ T7108] ? __pfx_bad_page+0x10/0x10 [ 92.408468][ T7108] ? page_bad_reason+0x9d/0x1e0 [ 92.409789][ T7108] free_unref_page+0x657/0xdc0 [ 92.411117][ T7108] ? rcu_is_watching+0x12/0xc0 [ 92.412415][ T7108] ? __phys_addr+0xc6/0x150 [ 92.413649][ T7108] skb_free_head+0xa0/0x1d0 [ 92.414900][ T7108] skb_release_data+0x560/0x730 [ 92.416243][ T7108] sk_skb_reason_drop+0x129/0x1a0 [ 92.417614][ T7108] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 92.419397][ T7108] ? kernel_text_address+0x8d/0x100 [ 92.420832][ T7108] ? hlock_class+0x4e/0x130 [ 92.422096][ T7108] ? __lock_acquire+0x163e/0x3ce0 [ 92.423446][ T7108] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 92.425338][ T7108] ? hlock_class+0x4e/0x130 [ 92.426617][ T7108] ? __lock_acquire+0xbdd/0x3ce0 [ 92.428085][ T7108] ? __pfx___lock_acquire+0x10/0x10 [ 92.429606][ T7108] __netif_receive_skb_list_core+0x357/0x950 [ 92.431402][ T7108] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 92.433601][ T7108] ? trace_lock_acquire+0x14a/0x1d0 [ 92.435432][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 92.437404][ T7108] ? lock_acquire+0x2f/0xb0 [ 92.438705][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 92.440723][ T7108] netif_receive_skb_list_internal+0x753/0xdb0 [ 92.442563][ T7108] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 92.444385][ T7108] ? __pfx_eth_type_trans+0x10/0x10 [ 92.445785][ T7108] ? __build_skb_around+0x278/0x3b0 [ 92.447269][ T7108] netif_receive_skb_list+0x4f/0x4a0 [ 92.448721][ T7108] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 92.450420][ T7108] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 92.452395][ T7108] ? bpf_test_timer_continue+0x150/0x3d0 [ 92.454121][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 92.455569][ T7108] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 92.457156][ T7108] ? try_to_wake_up+0x154/0x14f0 [ 92.458563][ T7108] ? __pfx_try_to_wake_up+0x10/0x10 [ 92.460220][ T7108] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 92.462199][ T7108] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 92.463762][ T7108] ? 0xffffffffa0004340 [ 92.464968][ T7108] ? 0xffffffffa0004340 [ 92.466127][ T7108] ? 0xffffffffa0004340 [ 92.467293][ T7108] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 92.468977][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 92.470455][ T7108] ? lock_acquire+0x2f/0xb0 [ 92.471702][ T7108] ? __fget_files+0x40/0x3f0 [ 92.472964][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 92.474578][ T7108] ? fput+0x30/0x390 [ 92.475653][ T7108] ? __bpf_prog_get+0xa0/0x290 [ 92.476938][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 92.478654][ T7108] __sys_bpf+0xfc6/0x49a0 [ 92.479708][ T7108] ? __pfx___sys_bpf+0x10/0x10 [ 92.480977][ T7108] ? __schedule+0xe5d/0x5730 [ 92.482389][ T7108] ? __fget_files+0x23a/0x3f0 [ 92.483710][ T7108] ? do_futex+0x123/0x350 [ 92.484947][ T7108] ? __pfx_do_futex+0x10/0x10 [ 92.486233][ T7108] ? xfd_validate_state+0x5d/0x180 [ 92.487494][ T7108] ? rcu_is_watching+0x12/0xc0 [ 92.488747][ T7108] __x64_sys_bpf+0x78/0xc0 [ 92.489926][ T7108] ? lockdep_hardirqs_on+0x7c/0x110 [ 92.491363][ T7108] do_syscall_64+0xcd/0x250 [ 92.492596][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.494195][ T7108] RIP: 0033:0x7efff3f7e719 [ 92.495391][ T7108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.500674][ T7108] RSP: 002b:00007efff4e28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 92.503204][ T7108] RAX: ffffffffffffffda RBX: 00007efff4136058 RCX: 00007efff3f7e719 [ 92.505477][ T7108] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 92.508407][ T7108] RBP: 00007efff3ff132e R08: 0000000000000000 R09: 0000000000000000 [ 92.510929][ T7108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.513329][ T7108] R13: 0000000000000000 R14: 00007efff4136058 R15: 00007fffd7704958 [ 92.515407][ T7108] [ 92.516307][ T7108] Disabling lock debugging due to kernel taint [ 92.518152][ T7108] BUG: Bad page state in process syz.0.327 pfn:25496 [ 92.520220][ T7108] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x25496 [ 92.522934][ T7108] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 92.525375][ T7108] raw: 00fff00000000000 dead000000000040 ffff888036779000 0000000000000000 [ 92.527697][ T7108] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 92.529960][ T7108] page dumped because: page_pool leak [ 92.531535][ T7108] page_owner tracks the page as allocated [ 92.533068][ T7108] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7108, tgid 7096 (syz.0.327), ts 92314616580, free_ts 92287970422 [ 92.537639][ T7108] post_alloc_hook+0x2d1/0x350 [ 92.538941][ T7108] get_page_from_freelist+0x101e/0x3070 [ 92.540418][ T7108] __alloc_pages_noprof+0x223/0x25a0 [ 92.541873][ T7108] alloc_pages_bulk_noprof+0x77c/0x1110 [ 92.543361][ T7108] __page_pool_alloc_pages_slow+0x18f/0x770 [ 92.544991][ T7108] page_pool_alloc_netmem+0xc4/0x160 [ 92.546430][ T7108] page_pool_alloc_pages+0x1a/0x60 [ 92.547907][ T7108] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 92.549545][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 92.550936][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 92.552309][ T7108] __sys_bpf+0xfc6/0x49a0 [ 92.553476][ T7108] __x64_sys_bpf+0x78/0xc0 [ 92.554651][ T7108] do_syscall_64+0xcd/0x250 [ 92.555853][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.557417][ T7108] page last free pid 34 tgid 34 stack trace: [ 92.559009][ T7108] free_unref_page+0x5f4/0xdc0 [ 92.560312][ T7108] __folio_put+0x30d/0x3d0 [ 92.561527][ T7108] free_page_and_swap_cache+0x249/0x2c0 [ 92.563226][ T7108] tlb_remove_table_rcu+0x89/0xe0 [ 92.564606][ T7108] rcu_core+0x79d/0x14d0 [ 92.565728][ T7108] handle_softirqs+0x213/0x8f0 [ 92.567008][ T7108] run_ksoftirqd+0x3a/0x60 [ 92.568245][ T7108] smpboot_thread_fn+0x661/0xa30 [ 92.569634][ T7108] kthread+0x2c1/0x3a0 [ 92.570719][ T7108] ret_from_fork+0x45/0x80 [ 92.571873][ T7108] ret_from_fork_asm+0x1a/0x30 [ 92.573148][ T7108] Modules linked in: [ 92.574191][ T7108] CPU: 3 UID: 0 PID: 7108 Comm: syz.0.327 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 92.577301][ T7108] Tainted: [B]=BAD_PAGE [ 92.578389][ T7108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 92.581168][ T7108] Call Trace: [ 92.582081][ T7108] [ 92.582863][ T7108] dump_stack_lvl+0x16c/0x1f0 [ 92.584300][ T7108] bad_page+0xb3/0x1f0 [ 92.585402][ T7108] ? __pfx_bad_page+0x10/0x10 [ 92.586667][ T7108] ? page_bad_reason+0x9d/0x1e0 [ 92.588088][ T7108] free_unref_page+0x657/0xdc0 [ 92.589380][ T7108] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 92.591091][ T7108] ? __phys_addr+0xc6/0x150 [ 92.592357][ T7108] skb_free_head+0xa0/0x1d0 [ 92.593569][ T7108] skb_release_data+0x560/0x730 [ 92.594873][ T7108] sk_skb_reason_drop+0x129/0x1a0 [ 92.596214][ T7108] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 92.598038][ T7108] ? kernel_text_address+0x8d/0x100 [ 92.599675][ T7108] ? hlock_class+0x4e/0x130 [ 92.600968][ T7108] ? __lock_acquire+0x163e/0x3ce0 [ 92.602516][ T7108] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 92.604730][ T7108] ? hlock_class+0x4e/0x130 [ 92.606014][ T7108] ? __lock_acquire+0xbdd/0x3ce0 [ 92.607610][ T7108] ? __pfx___lock_acquire+0x10/0x10 [ 92.609418][ T7108] __netif_receive_skb_list_core+0x357/0x950 [ 92.611081][ T7108] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 92.612987][ T7108] ? trace_lock_acquire+0x14a/0x1d0 [ 92.614455][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 92.616119][ T7108] ? lock_acquire+0x2f/0xb0 [ 92.617320][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 92.619055][ T7108] netif_receive_skb_list_internal+0x753/0xdb0 [ 92.620949][ T7108] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 92.623049][ T7108] ? __pfx_eth_type_trans+0x10/0x10 [ 92.624860][ T7108] ? __build_skb_around+0x278/0x3b0 [ 92.626337][ T7108] netif_receive_skb_list+0x4f/0x4a0 [ 92.627714][ T7108] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 92.629500][ T7108] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 92.631353][ T7108] ? bpf_test_timer_continue+0x150/0x3d0 [ 92.632848][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 92.634344][ T7108] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 92.635980][ T7108] ? try_to_wake_up+0x154/0x14f0 [ 92.637395][ T7108] ? __pfx_try_to_wake_up+0x10/0x10 [ 92.638780][ T7108] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 92.640286][ T7108] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 92.641666][ T7108] ? 0xffffffffa0004340 [ 92.642801][ T7108] ? 0xffffffffa0004340 [ 92.643891][ T7108] ? 0xffffffffa0004340 [ 92.644976][ T7108] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 92.646526][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 92.647924][ T7108] ? lock_acquire+0x2f/0xb0 [ 92.649329][ T7108] ? __fget_files+0x40/0x3f0 [ 92.650767][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 92.652258][ T7108] ? fput+0x30/0x390 [ 92.653290][ T7108] ? __bpf_prog_get+0xa0/0x290 [ 92.654575][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 92.656115][ T7108] __sys_bpf+0xfc6/0x49a0 [ 92.657242][ T7108] ? __pfx___sys_bpf+0x10/0x10 [ 92.658516][ T7108] ? __schedule+0xe5d/0x5730 [ 92.659765][ T7108] ? __fget_files+0x23a/0x3f0 [ 92.661197][ T7108] ? do_futex+0x123/0x350 [ 92.662383][ T7108] ? __pfx_do_futex+0x10/0x10 [ 92.663811][ T7108] ? xfd_validate_state+0x5d/0x180 [ 92.665211][ T7108] ? rcu_is_watching+0x12/0xc0 [ 92.666649][ T7108] __x64_sys_bpf+0x78/0xc0 [ 92.667871][ T7108] ? lockdep_hardirqs_on+0x7c/0x110 [ 92.669257][ T7108] do_syscall_64+0xcd/0x250 [ 92.670482][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.672055][ T7108] RIP: 0033:0x7efff3f7e719 [ 92.673240][ T7108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.678490][ T7108] RSP: 002b:00007efff4e28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 92.681327][ T7108] RAX: ffffffffffffffda RBX: 00007efff4136058 RCX: 00007efff3f7e719 [ 92.683510][ T7108] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 92.685746][ T7108] RBP: 00007efff3ff132e R08: 0000000000000000 R09: 0000000000000000 [ 92.688204][ T7108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.690910][ T7108] R13: 0000000000000000 R14: 00007efff4136058 R15: 00007fffd7704958 [ 92.693504][ T7108] [ 92.694459][ T7108] BUG: Bad page state in process syz.0.327 pfn:2be2b [ 92.696365][ T7108] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802be2b9b0 pfn:0x2be2b [ 92.699174][ T7108] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 92.701468][ T7108] raw: 00fff00000000000 dead000000000040 ffff888036779000 0000000000000000 [ 92.703808][ T7108] raw: ffff88802be2b9b0 0000000000000001 00000000ffffffff 0000000000000000 [ 92.706140][ T7108] page dumped because: page_pool leak [ 92.707664][ T7108] page_owner tracks the page as allocated [ 92.709292][ T7108] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7108, tgid 7096 (syz.0.327), ts 92314611340, free_ts 92287978322 [ 92.713728][ T7108] post_alloc_hook+0x2d1/0x350 [ 92.715061][ T7108] get_page_from_freelist+0x101e/0x3070 [ 92.716522][ T7108] __alloc_pages_noprof+0x223/0x25a0 [ 92.718058][ T7108] alloc_pages_bulk_noprof+0x77c/0x1110 [ 92.719657][ T7108] __page_pool_alloc_pages_slow+0x18f/0x770 [ 92.721138][ T7108] page_pool_alloc_netmem+0xc4/0x160 [ 92.722875][ T7108] page_pool_alloc_pages+0x1a/0x60 [ 92.724245][ T7108] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 92.725861][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 92.727346][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 92.728797][ T7108] __sys_bpf+0xfc6/0x49a0 [ 92.729952][ T7108] __x64_sys_bpf+0x78/0xc0 [ 92.731167][ T7108] do_syscall_64+0xcd/0x250 [ 92.732383][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.733996][ T7108] page last free pid 34 tgid 34 stack trace: [ 92.735587][ T7108] free_unref_page+0x5f4/0xdc0 [ 92.736873][ T7108] __folio_put+0x30d/0x3d0 [ 92.738181][ T7108] free_page_and_swap_cache+0x249/0x2c0 [ 92.739666][ T7108] tlb_remove_table_rcu+0x89/0xe0 [ 92.741269][ T7108] rcu_core+0x79d/0x14d0 [ 92.742457][ T7108] handle_softirqs+0x213/0x8f0 [ 92.743889][ T7108] run_ksoftirqd+0x3a/0x60 [ 92.745410][ T7108] smpboot_thread_fn+0x661/0xa30 [ 92.746773][ T7108] kthread+0x2c1/0x3a0 [ 92.748407][ T7108] ret_from_fork+0x45/0x80 [ 92.749819][ T7108] ret_from_fork_asm+0x1a/0x30 [ 92.751272][ T7108] Modules linked in: [ 92.752353][ T7108] CPU: 3 UID: 0 PID: 7108 Comm: syz.0.327 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 92.755605][ T7108] Tainted: [B]=BAD_PAGE [ 92.756714][ T7108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 92.757166][ T39] kauditd_printk_skb: 3 callbacks suppressed [ 92.757179][ T39] audit: type=1400 audit(1730204681.015:149): avc: denied { rename } for pid=5343 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 92.759657][ T7108] Call Trace: [ 92.759665][ T7108] [ 92.762208][ T39] audit: type=1400 audit(1730204681.015:150): avc: denied { unlink } for pid=5343 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 92.768495][ T7108] dump_stack_lvl+0x16c/0x1f0 [ 92.768521][ T7108] bad_page+0xb3/0x1f0 [ 92.768549][ T7108] ? __pfx_bad_page+0x10/0x10 [ 92.768572][ T7108] ? page_bad_reason+0x9d/0x1e0 [ 92.769768][ T39] audit: type=1400 audit(1730204681.015:151): avc: denied { create } for pid=5343 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 92.770665][ T7108] free_unref_page+0x657/0xdc0 [ 92.791025][ T7108] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 92.792549][ T7108] ? __phys_addr+0xc6/0x150 [ 92.793742][ T7108] skb_free_head+0xa0/0x1d0 [ 92.794932][ T7108] skb_release_data+0x560/0x730 [ 92.796348][ T7108] sk_skb_reason_drop+0x129/0x1a0 [ 92.797845][ T7108] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 92.800070][ T7108] ? kernel_text_address+0x8d/0x100 [ 92.801758][ T7108] ? hlock_class+0x4e/0x130 [ 92.803359][ T7108] ? __lock_acquire+0x163e/0x3ce0 [ 92.804716][ T7108] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 92.807227][ T7108] ? hlock_class+0x4e/0x130 [ 92.808680][ T7108] ? __lock_acquire+0xbdd/0x3ce0 [ 92.810107][ T7108] ? __pfx___lock_acquire+0x10/0x10 [ 92.811504][ T7108] __netif_receive_skb_list_core+0x357/0x950 [ 92.813118][ T7108] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 92.814895][ T7108] ? trace_lock_acquire+0x14a/0x1d0 [ 92.816292][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 92.818087][ T7108] ? lock_acquire+0x2f/0xb0 [ 92.819610][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 92.821302][ T7108] netif_receive_skb_list_internal+0x753/0xdb0 [ 92.823002][ T7108] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 92.824990][ T7108] ? __pfx_eth_type_trans+0x10/0x10 [ 92.826626][ T7108] ? __build_skb_around+0x278/0x3b0 [ 92.828396][ T7108] netif_receive_skb_list+0x4f/0x4a0 [ 92.829889][ T7108] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 92.831781][ T7108] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 92.833580][ T7108] ? bpf_test_timer_continue+0x150/0x3d0 [ 92.835182][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 92.836627][ T7108] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 92.838271][ T7108] ? try_to_wake_up+0x154/0x14f0 [ 92.839623][ T7108] ? __pfx_try_to_wake_up+0x10/0x10 [ 92.841040][ T7108] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 92.842710][ T7108] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 92.844213][ T7108] ? 0xffffffffa0004340 [ 92.845333][ T7108] ? 0xffffffffa0004340 [ 92.846457][ T7108] ? 0xffffffffa0004340 [ 92.847623][ T7108] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 92.849198][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 92.850672][ T7108] ? lock_acquire+0x2f/0xb0 [ 92.851904][ T7108] ? __fget_files+0x40/0x3f0 [ 92.853208][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 92.854907][ T7108] ? fput+0x30/0x390 [ 92.856125][ T7108] ? __bpf_prog_get+0xa0/0x290 [ 92.857655][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 92.859428][ T7108] __sys_bpf+0xfc6/0x49a0 [ 92.860812][ T7108] ? __pfx___sys_bpf+0x10/0x10 [ 92.862538][ T7108] ? __schedule+0xe5d/0x5730 [ 92.863968][ T7108] ? __fget_files+0x23a/0x3f0 [ 92.865527][ T7108] ? do_futex+0x123/0x350 [ 92.867076][ T7108] ? __pfx_do_futex+0x10/0x10 [ 92.868493][ T7108] ? xfd_validate_state+0x5d/0x180 [ 92.870112][ T7108] ? rcu_is_watching+0x12/0xc0 [ 92.871434][ T7108] __x64_sys_bpf+0x78/0xc0 [ 92.872730][ T7108] ? lockdep_hardirqs_on+0x7c/0x110 [ 92.874220][ T7108] do_syscall_64+0xcd/0x250 [ 92.875659][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.877316][ T7108] RIP: 0033:0x7efff3f7e719 [ 92.878614][ T7108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.884075][ T7108] RSP: 002b:00007efff4e28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 92.886636][ T7108] RAX: ffffffffffffffda RBX: 00007efff4136058 RCX: 00007efff3f7e719 [ 92.888887][ T7108] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 92.891299][ T7108] RBP: 00007efff3ff132e R08: 0000000000000000 R09: 0000000000000000 [ 92.893607][ T7108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.896208][ T7108] R13: 0000000000000000 R14: 00007efff4136058 R15: 00007fffd7704958 [ 92.898829][ T7108] [ 92.900089][ T7108] BUG: Bad page state in process syz.0.327 pfn:32245 [ 92.902610][ T7108] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2 pfn:0x32245 [ 92.905114][ T7108] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 92.907581][ T7108] raw: 00fff00000000000 dead000000000040 ffff888036779000 0000000000000000 [ 92.910247][ T7108] raw: 0000000000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 92.912788][ T7108] page dumped because: page_pool leak [ 92.914409][ T7108] page_owner tracks the page as allocated [ 92.916035][ T7108] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7108, tgid 7096 (syz.0.327), ts 92314606545, free_ts 92287986565 [ 92.921365][ T7108] post_alloc_hook+0x2d1/0x350 [ 92.922755][ T7108] get_page_from_freelist+0x101e/0x3070 [ 92.924455][ T7108] __alloc_pages_noprof+0x223/0x25a0 [ 92.925896][ T7108] alloc_pages_bulk_noprof+0x77c/0x1110 [ 92.927460][ T7108] __page_pool_alloc_pages_slow+0x18f/0x770 [ 92.929094][ T7108] page_pool_alloc_netmem+0xc4/0x160 [ 92.930529][ T7108] page_pool_alloc_pages+0x1a/0x60 [ 92.932086][ T7108] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 92.933789][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 92.935242][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 92.936717][ T7108] __sys_bpf+0xfc6/0x49a0 [ 92.938030][ T7108] __x64_sys_bpf+0x78/0xc0 [ 92.939352][ T7108] do_syscall_64+0xcd/0x250 [ 92.940654][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.942373][ T7108] page last free pid 34 tgid 34 stack trace: [ 92.944249][ T7108] free_unref_page+0x5f4/0xdc0 [ 92.945706][ T7108] __folio_put+0x30d/0x3d0 [ 92.946878][ T7108] free_page_and_swap_cache+0x249/0x2c0 [ 92.948438][ T7108] tlb_remove_table_rcu+0x89/0xe0 [ 92.949854][ T7108] rcu_core+0x79d/0x14d0 [ 92.951117][ T7108] handle_softirqs+0x213/0x8f0 [ 92.952415][ T7108] run_ksoftirqd+0x3a/0x60 [ 92.953580][ T7108] smpboot_thread_fn+0x661/0xa30 [ 92.954920][ T7108] kthread+0x2c1/0x3a0 [ 92.955974][ T7108] ret_from_fork+0x45/0x80 [ 92.957172][ T7108] ret_from_fork_asm+0x1a/0x30 [ 92.958430][ T7108] Modules linked in: [ 92.959486][ T7108] CPU: 3 UID: 0 PID: 7108 Comm: syz.0.327 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 92.963301][ T7108] Tainted: [B]=BAD_PAGE [ 92.964485][ T7108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 92.967956][ T7108] Call Trace: [ 92.968966][ T7108] [ 92.969854][ T7108] dump_stack_lvl+0x16c/0x1f0 [ 92.971452][ T7108] bad_page+0xb3/0x1f0 [ 92.972676][ T7108] ? __pfx_bad_page+0x10/0x10 [ 92.974166][ T7108] ? page_bad_reason+0x9d/0x1e0 [ 92.975691][ T7108] free_unref_page+0x657/0xdc0 [ 92.977363][ T7108] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 92.979275][ T7108] ? __phys_addr+0xc6/0x150 [ 92.980562][ T7108] skb_free_head+0xa0/0x1d0 [ 92.982169][ T7108] skb_release_data+0x560/0x730 [ 92.983537][ T7108] sk_skb_reason_drop+0x129/0x1a0 [ 92.985081][ T7108] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 92.987218][ T7108] ? kernel_text_address+0x8d/0x100 [ 92.988794][ T7108] ? hlock_class+0x4e/0x130 [ 92.990163][ T7108] ? __lock_acquire+0x163e/0x3ce0 [ 92.991706][ T7108] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 92.993945][ T7108] ? hlock_class+0x4e/0x130 [ 92.995356][ T7108] ? __lock_acquire+0xbdd/0x3ce0 [ 92.996705][ T7108] ? __pfx___lock_acquire+0x10/0x10 [ 92.998135][ T7108] __netif_receive_skb_list_core+0x357/0x950 [ 92.999772][ T7108] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 93.001476][ T7108] ? trace_lock_acquire+0x14a/0x1d0 [ 93.003301][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 93.005228][ T7108] ? lock_acquire+0x2f/0xb0 [ 93.006561][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 93.008535][ T7108] netif_receive_skb_list_internal+0x753/0xdb0 [ 93.010334][ T7108] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 93.012129][ T7108] ? __pfx_eth_type_trans+0x10/0x10 [ 93.013502][ T7108] ? __build_skb_around+0x278/0x3b0 [ 93.014892][ T7108] netif_receive_skb_list+0x4f/0x4a0 [ 93.016316][ T7108] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 93.018039][ T7108] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 93.020111][ T7108] ? bpf_test_timer_continue+0x150/0x3d0 [ 93.021759][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 93.023425][ T7108] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 93.025207][ T7108] ? try_to_wake_up+0x154/0x14f0 [ 93.026827][ T7108] ? __pfx_try_to_wake_up+0x10/0x10 [ 93.028649][ T7108] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 93.030410][ T7108] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 93.031929][ T7108] ? 0xffffffffa0004340 [ 93.033051][ T7108] ? 0xffffffffa0004340 [ 93.034370][ T7108] ? 0xffffffffa0004340 [ 93.035496][ T7108] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 93.037126][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 93.038568][ T7108] ? lock_acquire+0x2f/0xb0 [ 93.040081][ T7108] ? __fget_files+0x40/0x3f0 [ 93.041704][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 93.043292][ T7108] ? fput+0x30/0x390 [ 93.044488][ T7108] ? __bpf_prog_get+0xa0/0x290 [ 93.046200][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 93.048025][ T7108] __sys_bpf+0xfc6/0x49a0 [ 93.049219][ T7108] ? __pfx___sys_bpf+0x10/0x10 [ 93.050700][ T7108] ? __schedule+0xe5d/0x5730 [ 93.051926][ T7108] ? __fget_files+0x23a/0x3f0 [ 93.053186][ T7108] ? do_futex+0x123/0x350 [ 93.054340][ T7108] ? __pfx_do_futex+0x10/0x10 [ 93.055555][ T7108] ? xfd_validate_state+0x5d/0x180 [ 93.056929][ T7108] ? rcu_is_watching+0x12/0xc0 [ 93.058230][ T7108] __x64_sys_bpf+0x78/0xc0 [ 93.059410][ T7108] ? lockdep_hardirqs_on+0x7c/0x110 [ 93.061068][ T7108] do_syscall_64+0xcd/0x250 [ 93.062566][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.064190][ T7108] RIP: 0033:0x7efff3f7e719 [ 93.065565][ T7108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.071475][ T7108] RSP: 002b:00007efff4e28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 93.073684][ T7108] RAX: ffffffffffffffda RBX: 00007efff4136058 RCX: 00007efff3f7e719 [ 93.075746][ T7108] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 93.077777][ T7108] RBP: 00007efff3ff132e R08: 0000000000000000 R09: 0000000000000000 [ 93.079807][ T7108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.082184][ T7108] R13: 0000000000000000 R14: 00007efff4136058 R15: 00007fffd7704958 [ 93.084553][ T7108] [ 93.085489][ T7108] BUG: Bad page state in process syz.0.327 pfn:4e09e [ 93.087466][ T7108] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804e09ef00 pfn:0x4e09e [ 93.090170][ T7108] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 93.092131][ T7108] raw: 00fff00000000000 dead000000000040 ffff888036779000 0000000000000000 [ 93.094557][ T7108] raw: ffff88804e09ef00 0000000000000001 00000000ffffffff 0000000000000000 [ 93.096902][ T7108] page dumped because: page_pool leak [ 93.098452][ T7108] page_owner tracks the page as allocated [ 93.100192][ T7108] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7108, tgid 7096 (syz.0.327), ts 92314601601, free_ts 92287994815 [ 93.104925][ T7108] post_alloc_hook+0x2d1/0x350 [ 93.106476][ T7108] get_page_from_freelist+0x101e/0x3070 [ 93.108189][ T7108] __alloc_pages_noprof+0x223/0x25a0 [ 93.109548][ T7108] alloc_pages_bulk_noprof+0x77c/0x1110 [ 93.111244][ T7108] __page_pool_alloc_pages_slow+0x18f/0x770 [ 93.112789][ T7108] page_pool_alloc_netmem+0xc4/0x160 [ 93.114163][ T7108] page_pool_alloc_pages+0x1a/0x60 [ 93.115478][ T7108] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 93.117141][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 93.118535][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 93.120119][ T7108] __sys_bpf+0xfc6/0x49a0 [ 93.121284][ T7108] __x64_sys_bpf+0x78/0xc0 [ 93.122419][ T7108] do_syscall_64+0xcd/0x250 [ 93.123611][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.125148][ T7108] page last free pid 34 tgid 34 stack trace: [ 93.126747][ T7108] free_unref_page+0x5f4/0xdc0 [ 93.128174][ T7108] __folio_put+0x30d/0x3d0 [ 93.129498][ T7108] free_page_and_swap_cache+0x249/0x2c0 [ 93.131012][ T7108] tlb_remove_table_rcu+0x89/0xe0 [ 93.132447][ T7108] rcu_core+0x79d/0x14d0 [ 93.133611][ T7108] handle_softirqs+0x213/0x8f0 [ 93.134874][ T7108] run_ksoftirqd+0x3a/0x60 [ 93.136033][ T7108] smpboot_thread_fn+0x661/0xa30 [ 93.137397][ T7108] kthread+0x2c1/0x3a0 [ 93.138489][ T7108] ret_from_fork+0x45/0x80 [ 93.139852][ T7108] ret_from_fork_asm+0x1a/0x30 [ 93.141331][ T7108] Modules linked in: [ 93.142510][ T7108] CPU: 3 UID: 0 PID: 7108 Comm: syz.0.327 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 93.145936][ T7108] Tainted: [B]=BAD_PAGE [ 93.147197][ T7108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 93.150085][ T7108] Call Trace: [ 93.151066][ T7108] [ 93.151843][ T7108] dump_stack_lvl+0x16c/0x1f0 [ 93.153065][ T7108] bad_page+0xb3/0x1f0 [ 93.154207][ T7108] ? __pfx_bad_page+0x10/0x10 [ 93.155464][ T7108] ? page_bad_reason+0x9d/0x1e0 [ 93.156757][ T7108] free_unref_page+0x657/0xdc0 [ 93.158056][ T7108] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 93.159768][ T7108] ? __phys_addr+0xc6/0x150 [ 93.161579][ T7108] skb_free_head+0xa0/0x1d0 [ 93.163157][ T7108] skb_release_data+0x560/0x730 [ 93.164542][ T7108] sk_skb_reason_drop+0x129/0x1a0 [ 93.165859][ T7108] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 93.168160][ T7108] ? kernel_text_address+0x8d/0x100 [ 93.169605][ T7108] ? hlock_class+0x4e/0x130 [ 93.170824][ T7108] ? __lock_acquire+0x163e/0x3ce0 [ 93.172182][ T7108] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 93.174010][ T7108] ? hlock_class+0x4e/0x130 [ 93.175212][ T7108] ? __lock_acquire+0xbdd/0x3ce0 [ 93.176479][ T7108] ? __pfx___lock_acquire+0x10/0x10 [ 93.177815][ T7108] __netif_receive_skb_list_core+0x357/0x950 [ 93.179557][ T7108] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 93.181488][ T7108] ? trace_lock_acquire+0x14a/0x1d0 [ 93.183152][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 93.185058][ T7108] ? lock_acquire+0x2f/0xb0 [ 93.186430][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 93.188245][ T7108] netif_receive_skb_list_internal+0x753/0xdb0 [ 93.190186][ T7108] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 93.192249][ T7108] ? __pfx_eth_type_trans+0x10/0x10 [ 93.193883][ T7108] ? __build_skb_around+0x278/0x3b0 [ 93.195374][ T7108] netif_receive_skb_list+0x4f/0x4a0 [ 93.196753][ T7108] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 93.198584][ T7108] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 93.200460][ T7108] ? bpf_test_timer_continue+0x150/0x3d0 [ 93.202016][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 93.203458][ T7108] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 93.204926][ T7108] ? try_to_wake_up+0x154/0x14f0 [ 93.206231][ T7108] ? __pfx_try_to_wake_up+0x10/0x10 [ 93.207695][ T7108] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 93.209355][ T7108] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 93.210897][ T7108] ? 0xffffffffa0004340 [ 93.211969][ T7108] ? 0xffffffffa0004340 [ 93.213056][ T7108] ? 0xffffffffa0004340 [ 93.214174][ T7108] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 93.215743][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 93.217163][ T7108] ? lock_acquire+0x2f/0xb0 [ 93.218354][ T7108] ? __fget_files+0x40/0x3f0 [ 93.219652][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 93.221159][ T7108] ? fput+0x30/0x390 [ 93.222375][ T7108] ? __bpf_prog_get+0xa0/0x290 [ 93.223715][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 93.225442][ T7108] __sys_bpf+0xfc6/0x49a0 [ 93.226856][ T7108] ? __pfx___sys_bpf+0x10/0x10 [ 93.228343][ T7108] ? __schedule+0xe5d/0x5730 [ 93.229626][ T7108] ? __fget_files+0x23a/0x3f0 [ 93.230917][ T7108] ? do_futex+0x123/0x350 [ 93.232021][ T7108] ? __pfx_do_futex+0x10/0x10 [ 93.233228][ T7108] ? xfd_validate_state+0x5d/0x180 [ 93.234521][ T7108] ? rcu_is_watching+0x12/0xc0 [ 93.235722][ T7108] __x64_sys_bpf+0x78/0xc0 [ 93.236882][ T7108] ? lockdep_hardirqs_on+0x7c/0x110 [ 93.238269][ T7108] do_syscall_64+0xcd/0x250 [ 93.239651][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.241244][ T7108] RIP: 0033:0x7efff3f7e719 [ 93.242413][ T7108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.248125][ T7108] RSP: 002b:00007efff4e28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 93.250397][ T7108] RAX: ffffffffffffffda RBX: 00007efff4136058 RCX: 00007efff3f7e719 [ 93.252582][ T7108] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 93.254624][ T7108] RBP: 00007efff3ff132e R08: 0000000000000000 R09: 0000000000000000 [ 93.256596][ T7108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.258632][ T7108] R13: 0000000000000000 R14: 00007efff4136058 R15: 00007fffd7704958 [ 93.260932][ T7108] [ 93.261924][ T7108] BUG: Bad page state in process syz.0.327 pfn:22de4 [ 93.263906][ T7108] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888022de4690 pfn:0x22de4 [ 93.266695][ T7108] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 93.268709][ T7108] raw: 00fff00000000000 dead000000000040 ffff888036779000 0000000000000000 [ 93.270824][ T7108] raw: ffff888022de4690 0000000000000001 00000000ffffffff 0000000000000000 [ 93.273185][ T7108] page dumped because: page_pool leak [ 93.274792][ T7108] page_owner tracks the page as allocated [ 93.276302][ T7108] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7108, tgid 7096 (syz.0.327), ts 92314596464, free_ts 92288003802 [ 93.280487][ T7108] post_alloc_hook+0x2d1/0x350 [ 93.282375][ T7108] get_page_from_freelist+0x101e/0x3070 [ 93.283917][ T7108] __alloc_pages_noprof+0x223/0x25a0 [ 93.285316][ T7108] alloc_pages_bulk_noprof+0x77c/0x1110 [ 93.286817][ T7108] __page_pool_alloc_pages_slow+0x18f/0x770 [ 93.288391][ T7108] page_pool_alloc_netmem+0xc4/0x160 [ 93.289762][ T7108] page_pool_alloc_pages+0x1a/0x60 [ 93.291109][ T7108] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 93.292688][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 93.294194][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 93.295666][ T7108] __sys_bpf+0xfc6/0x49a0 [ 93.296867][ T7108] __x64_sys_bpf+0x78/0xc0 [ 93.298099][ T7108] do_syscall_64+0xcd/0x250 [ 93.299271][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.300794][ T7108] page last free pid 34 tgid 34 stack trace: [ 93.302362][ T7108] free_unref_page+0x5f4/0xdc0 [ 93.303592][ T7108] __folio_put+0x30d/0x3d0 [ 93.304788][ T7108] free_page_and_swap_cache+0x249/0x2c0 [ 93.306286][ T7108] tlb_remove_table_rcu+0x89/0xe0 [ 93.307644][ T7108] rcu_core+0x79d/0x14d0 [ 93.308754][ T7108] handle_softirqs+0x213/0x8f0 [ 93.309990][ T7108] run_ksoftirqd+0x3a/0x60 [ 93.311117][ T7108] smpboot_thread_fn+0x661/0xa30 [ 93.312390][ T7108] kthread+0x2c1/0x3a0 [ 93.313427][ T7108] ret_from_fork+0x45/0x80 [ 93.314606][ T7108] ret_from_fork_asm+0x1a/0x30 [ 93.315837][ T7108] Modules linked in: [ 93.316912][ T7108] CPU: 3 UID: 0 PID: 7108 Comm: syz.0.327 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 93.319993][ T7108] Tainted: [B]=BAD_PAGE [ 93.321044][ T7108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 93.323884][ T7108] Call Trace: [ 93.324840][ T7108] [ 93.325615][ T7108] dump_stack_lvl+0x16c/0x1f0 [ 93.326922][ T7108] bad_page+0xb3/0x1f0 [ 93.328012][ T7108] ? __pfx_bad_page+0x10/0x10 [ 93.329280][ T7108] ? page_bad_reason+0x9d/0x1e0 [ 93.330538][ T7108] free_unref_page+0x657/0xdc0 [ 93.331777][ T7108] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 93.333505][ T7108] ? __phys_addr+0xc6/0x150 [ 93.334843][ T7108] skb_free_head+0xa0/0x1d0 [ 93.336031][ T7108] skb_release_data+0x560/0x730 [ 93.337347][ T7108] sk_skb_reason_drop+0x129/0x1a0 [ 93.338637][ T7108] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 93.340383][ T7108] ? kernel_text_address+0x8d/0x100 [ 93.341710][ T7108] ? hlock_class+0x4e/0x130 [ 93.343290][ T7108] ? __lock_acquire+0x163e/0x3ce0 [ 93.344723][ T7108] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 93.346890][ T7108] ? hlock_class+0x4e/0x130 [ 93.348094][ T7108] ? __lock_acquire+0xbdd/0x3ce0 [ 93.349359][ T7108] ? __pfx___lock_acquire+0x10/0x10 [ 93.350708][ T7108] __netif_receive_skb_list_core+0x357/0x950 [ 93.352252][ T7108] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 93.353903][ T7108] ? trace_lock_acquire+0x14a/0x1d0 [ 93.355448][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 93.357308][ T7108] ? lock_acquire+0x2f/0xb0 [ 93.358573][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 93.360308][ T7108] netif_receive_skb_list_internal+0x753/0xdb0 [ 93.361984][ T7108] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 93.363943][ T7108] ? __pfx_eth_type_trans+0x10/0x10 [ 93.365523][ T7108] ? __build_skb_around+0x278/0x3b0 [ 93.367163][ T7108] netif_receive_skb_list+0x4f/0x4a0 [ 93.368736][ T7108] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 93.370368][ T7108] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 93.372131][ T7108] ? bpf_test_timer_continue+0x150/0x3d0 [ 93.373582][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 93.374946][ T7108] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 93.376522][ T7108] ? try_to_wake_up+0x154/0x14f0 [ 93.377856][ T7108] ? __pfx_try_to_wake_up+0x10/0x10 [ 93.379329][ T7108] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 93.381346][ T7108] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 93.382788][ T7108] ? 0xffffffffa0004340 [ 93.384106][ T7108] ? 0xffffffffa0004340 [ 93.385319][ T7108] ? 0xffffffffa0004340 [ 93.386748][ T7108] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 93.388618][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 93.390293][ T7108] ? lock_acquire+0x2f/0xb0 [ 93.391592][ T7108] ? __fget_files+0x40/0x3f0 [ 93.392935][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 93.394733][ T7108] ? fput+0x30/0x390 [ 93.396021][ T7108] ? __bpf_prog_get+0xa0/0x290 [ 93.397468][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 93.399184][ T7108] __sys_bpf+0xfc6/0x49a0 [ 93.400398][ T7108] ? __pfx___sys_bpf+0x10/0x10 [ 93.401865][ T7108] ? __schedule+0xe5d/0x5730 [ 93.403450][ T7108] ? __fget_files+0x23a/0x3f0 [ 93.404797][ T7108] ? do_futex+0x123/0x350 [ 93.406014][ T7108] ? __pfx_do_futex+0x10/0x10 [ 93.407285][ T7108] ? xfd_validate_state+0x5d/0x180 [ 93.408610][ T7108] ? rcu_is_watching+0x12/0xc0 [ 93.409875][ T7108] __x64_sys_bpf+0x78/0xc0 [ 93.411030][ T7108] ? lockdep_hardirqs_on+0x7c/0x110 [ 93.412601][ T7108] do_syscall_64+0xcd/0x250 [ 93.413916][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.415631][ T7108] RIP: 0033:0x7efff3f7e719 [ 93.416917][ T7108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.422508][ T7108] RSP: 002b:00007efff4e28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 93.424486][ T7108] RAX: ffffffffffffffda RBX: 00007efff4136058 RCX: 00007efff3f7e719 [ 93.426854][ T7108] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 93.429150][ T7108] RBP: 00007efff3ff132e R08: 0000000000000000 R09: 0000000000000000 [ 93.431417][ T7108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.433548][ T7108] R13: 0000000000000000 R14: 00007efff4136058 R15: 00007fffd7704958 [ 93.435819][ T7108] [ 93.436882][ T7108] BUG: Bad page state in process syz.0.327 pfn:4fa51 [ 93.438810][ T7108] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2 pfn:0x4fa51 [ 93.441650][ T7108] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 93.443546][ T7108] raw: 00fff00000000000 dead000000000040 ffff888036779000 0000000000000000 [ 93.445763][ T7108] raw: 0000000000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 93.448833][ T7108] page dumped because: page_pool leak [ 93.450338][ T7108] page_owner tracks the page as allocated [ 93.451787][ T7108] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7108, tgid 7096 (syz.0.327), ts 92314591649, free_ts 92288010082 [ 93.456007][ T7108] post_alloc_hook+0x2d1/0x350 [ 93.457500][ T7108] get_page_from_freelist+0x101e/0x3070 [ 93.458990][ T7108] __alloc_pages_noprof+0x223/0x25a0 [ 93.460444][ T7108] alloc_pages_bulk_noprof+0x77c/0x1110 [ 93.461907][ T7108] __page_pool_alloc_pages_slow+0x18f/0x770 [ 93.463600][ T7108] page_pool_alloc_netmem+0xc4/0x160 [ 93.464986][ T7108] page_pool_alloc_pages+0x1a/0x60 [ 93.466353][ T7108] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 93.468391][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 93.470074][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 93.471737][ T7108] __sys_bpf+0xfc6/0x49a0 [ 93.473094][ T7108] __x64_sys_bpf+0x78/0xc0 [ 93.474518][ T7108] do_syscall_64+0xcd/0x250 [ 93.475975][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.477720][ T7108] page last free pid 34 tgid 34 stack trace: [ 93.479387][ T7108] free_unref_page+0x5f4/0xdc0 [ 93.480653][ T7108] __folio_put+0x30d/0x3d0 [ 93.481833][ T7108] free_page_and_swap_cache+0x249/0x2c0 [ 93.483411][ T7108] tlb_remove_table_rcu+0x89/0xe0 [ 93.484923][ T7108] rcu_core+0x79d/0x14d0 [ 93.486717][ T7108] handle_softirqs+0x213/0x8f0 [ 93.488460][ T7108] run_ksoftirqd+0x3a/0x60 [ 93.489753][ T7108] smpboot_thread_fn+0x661/0xa30 [ 93.491301][ T7108] kthread+0x2c1/0x3a0 [ 93.492360][ T7108] ret_from_fork+0x45/0x80 [ 93.493578][ T7108] ret_from_fork_asm+0x1a/0x30 [ 93.494782][ T7108] Modules linked in: [ 93.495801][ T7108] CPU: 3 UID: 0 PID: 7108 Comm: syz.0.327 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 93.498942][ T7108] Tainted: [B]=BAD_PAGE [ 93.500035][ T7108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 93.502738][ T7108] Call Trace: [ 93.503607][ T7108] [ 93.504411][ T7108] dump_stack_lvl+0x16c/0x1f0 [ 93.505634][ T7108] bad_page+0xb3/0x1f0 [ 93.506852][ T7108] ? __pfx_bad_page+0x10/0x10 [ 93.508230][ T7108] ? page_bad_reason+0x9d/0x1e0 [ 93.509784][ T7108] free_unref_page+0x657/0xdc0 [ 93.511381][ T7108] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 93.513290][ T7108] ? __phys_addr+0xc6/0x150 [ 93.514758][ T7108] skb_free_head+0xa0/0x1d0 [ 93.516139][ T7108] skb_release_data+0x560/0x730 [ 93.517438][ T7108] sk_skb_reason_drop+0x129/0x1a0 [ 93.518807][ T7108] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 93.520546][ T7108] ? kernel_text_address+0x8d/0x100 [ 93.521937][ T7108] ? hlock_class+0x4e/0x130 [ 93.523541][ T7108] ? __lock_acquire+0x163e/0x3ce0 [ 93.525610][ T7108] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 93.527671][ T7108] ? hlock_class+0x4e/0x130 [ 93.528984][ T7108] ? __lock_acquire+0xbdd/0x3ce0 [ 93.530402][ T7108] ? __pfx___lock_acquire+0x10/0x10 [ 93.531803][ T7108] __netif_receive_skb_list_core+0x357/0x950 [ 93.533406][ T7108] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 93.535110][ T7108] ? trace_lock_acquire+0x14a/0x1d0 [ 93.536485][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 93.538175][ T7108] ? lock_acquire+0x2f/0xb0 [ 93.539399][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 93.541087][ T7108] netif_receive_skb_list_internal+0x753/0xdb0 [ 93.542662][ T7108] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 93.544390][ T7108] ? __pfx_eth_type_trans+0x10/0x10 [ 93.545744][ T7108] ? __build_skb_around+0x278/0x3b0 [ 93.547159][ T7108] netif_receive_skb_list+0x4f/0x4a0 [ 93.548730][ T7108] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 93.550696][ T7108] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 93.552707][ T7108] ? bpf_test_timer_continue+0x150/0x3d0 [ 93.554348][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 93.555868][ T7108] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 93.557489][ T7108] ? try_to_wake_up+0x154/0x14f0 [ 93.558933][ T7108] ? __pfx_try_to_wake_up+0x10/0x10 [ 93.560696][ T7108] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 93.562643][ T7108] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 93.564571][ T7108] ? 0xffffffffa0004340 [ 93.566062][ T7108] ? 0xffffffffa0004340 [ 93.567479][ T7108] ? 0xffffffffa0004340 [ 93.568892][ T7108] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 93.570762][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 93.572450][ T7108] ? lock_acquire+0x2f/0xb0 [ 93.573861][ T7108] ? __fget_files+0x40/0x3f0 [ 93.575324][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 93.577155][ T7108] ? fput+0x30/0x390 [ 93.578393][ T7108] ? __bpf_prog_get+0xa0/0x290 [ 93.579904][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 93.581721][ T7108] __sys_bpf+0xfc6/0x49a0 [ 93.583107][ T7108] ? __pfx___sys_bpf+0x10/0x10 [ 93.584610][ T7108] ? __schedule+0xe5d/0x5730 [ 93.586080][ T7108] ? __fget_files+0x23a/0x3f0 [ 93.587550][ T7108] ? do_futex+0x123/0x350 [ 93.588899][ T7108] ? __pfx_do_futex+0x10/0x10 [ 93.590372][ T7108] ? xfd_validate_state+0x5d/0x180 [ 93.592043][ T7108] ? rcu_is_watching+0x12/0xc0 [ 93.593739][ T7108] __x64_sys_bpf+0x78/0xc0 [ 93.595255][ T7108] ? lockdep_hardirqs_on+0x7c/0x110 [ 93.597039][ T7108] do_syscall_64+0xcd/0x250 [ 93.598801][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.600770][ T7108] RIP: 0033:0x7efff3f7e719 [ 93.602240][ T7108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.608240][ T7108] RSP: 002b:00007efff4e28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 93.610808][ T7108] RAX: ffffffffffffffda RBX: 00007efff4136058 RCX: 00007efff3f7e719 [ 93.613236][ T7108] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 93.615727][ T7108] RBP: 00007efff3ff132e R08: 0000000000000000 R09: 0000000000000000 [ 93.618272][ T7108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.620700][ T7108] R13: 0000000000000000 R14: 00007efff4136058 R15: 00007fffd7704958 [ 93.623177][ T7108] [ 93.624239][ T7108] BUG: Bad page state in process syz.0.327 pfn:254af [ 93.626345][ T7108] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x254af [ 93.629085][ T7108] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 93.631276][ T7108] raw: 00fff00000000000 dead000000000040 ffff888036779000 0000000000000000 [ 93.633530][ T7108] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 93.635762][ T7108] page dumped because: page_pool leak [ 93.637334][ T7108] page_owner tracks the page as allocated [ 93.638945][ T7108] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7108, tgid 7096 (syz.0.327), ts 92314586705, free_ts 92288015667 [ 93.643430][ T7108] post_alloc_hook+0x2d1/0x350 [ 93.644692][ T7108] get_page_from_freelist+0x101e/0x3070 [ 93.646204][ T7108] __alloc_pages_noprof+0x223/0x25a0 [ 93.647686][ T7108] alloc_pages_bulk_noprof+0x77c/0x1110 [ 93.649137][ T7108] __page_pool_alloc_pages_slow+0x18f/0x770 [ 93.650731][ T7108] page_pool_alloc_netmem+0xc4/0x160 [ 93.652118][ T7108] page_pool_alloc_pages+0x1a/0x60 [ 93.653463][ T7108] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 93.655089][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 93.656484][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 93.657993][ T7108] __sys_bpf+0xfc6/0x49a0 [ 93.659179][ T7108] __x64_sys_bpf+0x78/0xc0 [ 93.660346][ T7108] do_syscall_64+0xcd/0x250 [ 93.661545][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.663347][ T7108] page last free pid 34 tgid 34 stack trace: [ 93.665162][ T7108] free_unref_page+0x5f4/0xdc0 [ 93.666677][ T7108] __folio_put+0x30d/0x3d0 [ 93.668172][ T7108] free_page_and_swap_cache+0x249/0x2c0 [ 93.669897][ T7108] tlb_remove_table_rcu+0x89/0xe0 [ 93.671352][ T7108] rcu_core+0x79d/0x14d0 [ 93.672547][ T7108] handle_softirqs+0x213/0x8f0 [ 93.673899][ T7108] run_ksoftirqd+0x3a/0x60 [ 93.675128][ T7108] smpboot_thread_fn+0x661/0xa30 [ 93.676449][ T7108] kthread+0x2c1/0x3a0 [ 93.677616][ T7108] ret_from_fork+0x45/0x80 [ 93.678774][ T7108] ret_from_fork_asm+0x1a/0x30 [ 93.679986][ T7108] Modules linked in: [ 93.680980][ T7108] CPU: 3 UID: 0 PID: 7108 Comm: syz.0.327 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 93.684348][ T7108] Tainted: [B]=BAD_PAGE [ 93.685512][ T7108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 93.688541][ T7108] Call Trace: [ 93.689433][ T7108] [ 93.690229][ T7108] dump_stack_lvl+0x16c/0x1f0 [ 93.691448][ T7108] bad_page+0xb3/0x1f0 [ 93.692506][ T7108] ? __pfx_bad_page+0x10/0x10 [ 93.693757][ T7108] ? page_bad_reason+0x9d/0x1e0 [ 93.695036][ T7108] free_unref_page+0x657/0xdc0 [ 93.696273][ T7108] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 93.697839][ T7108] ? __phys_addr+0xc6/0x150 [ 93.699146][ T7108] skb_free_head+0xa0/0x1d0 [ 93.700420][ T7108] skb_release_data+0x560/0x730 [ 93.701753][ T7108] sk_skb_reason_drop+0x129/0x1a0 [ 93.703479][ T7108] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 93.705529][ T7108] ? kernel_text_address+0x8d/0x100 [ 93.707143][ T7108] ? hlock_class+0x4e/0x130 [ 93.708534][ T7108] ? __lock_acquire+0x163e/0x3ce0 [ 93.709883][ T7108] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 93.711685][ T7108] ? hlock_class+0x4e/0x130 [ 93.712871][ T7108] ? __lock_acquire+0xbdd/0x3ce0 [ 93.714203][ T7108] ? __pfx___lock_acquire+0x10/0x10 [ 93.715541][ T7108] __netif_receive_skb_list_core+0x357/0x950 [ 93.717141][ T7108] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 93.718815][ T7108] ? trace_lock_acquire+0x14a/0x1d0 [ 93.720144][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 93.721785][ T7108] ? lock_acquire+0x2f/0xb0 [ 93.722988][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 93.724666][ T7108] netif_receive_skb_list_internal+0x753/0xdb0 [ 93.726266][ T7108] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 93.727982][ T7108] ? __pfx_eth_type_trans+0x10/0x10 [ 93.729323][ T7108] ? __build_skb_around+0x278/0x3b0 [ 93.730665][ T7108] netif_receive_skb_list+0x4f/0x4a0 [ 93.732039][ T7108] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 93.733668][ T7108] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 93.735382][ T7108] ? bpf_test_timer_continue+0x150/0x3d0 [ 93.736826][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 93.738522][ T7108] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 93.739994][ T7108] ? try_to_wake_up+0x154/0x14f0 [ 93.741231][ T7108] ? __pfx_try_to_wake_up+0x10/0x10 [ 93.742556][ T7108] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 93.744144][ T7108] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 93.745555][ T7108] ? 0xffffffffa0004340 [ 93.746864][ T7108] ? 0xffffffffa0004340 [ 93.748166][ T7108] ? 0xffffffffa0004340 [ 93.749373][ T7108] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 93.751121][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 93.752599][ T7108] ? lock_acquire+0x2f/0xb0 [ 93.753850][ T7108] ? __fget_files+0x40/0x3f0 [ 93.755047][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 93.756526][ T7108] ? fput+0x30/0x390 [ 93.757558][ T7108] ? __bpf_prog_get+0xa0/0x290 [ 93.758814][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 93.760324][ T7108] __sys_bpf+0xfc6/0x49a0 [ 93.761459][ T7108] ? __pfx___sys_bpf+0x10/0x10 [ 93.762698][ T7108] ? __schedule+0xe5d/0x5730 [ 93.763920][ T7108] ? __fget_files+0x23a/0x3f0 [ 93.765301][ T7108] ? do_futex+0x123/0x350 [ 93.766408][ T7108] ? __pfx_do_futex+0x10/0x10 [ 93.767625][ T7108] ? xfd_validate_state+0x5d/0x180 [ 93.768934][ T7108] ? rcu_is_watching+0x12/0xc0 [ 93.770186][ T7108] __x64_sys_bpf+0x78/0xc0 [ 93.771335][ T7108] ? lockdep_hardirqs_on+0x7c/0x110 [ 93.772661][ T7108] do_syscall_64+0xcd/0x250 [ 93.773837][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.775386][ T7108] RIP: 0033:0x7efff3f7e719 [ 93.776522][ T7108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.781537][ T7108] RSP: 002b:00007efff4e28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 93.784126][ T7108] RAX: ffffffffffffffda RBX: 00007efff4136058 RCX: 00007efff3f7e719 [ 93.786334][ T7108] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 93.789181][ T7108] RBP: 00007efff3ff132e R08: 0000000000000000 R09: 0000000000000000 [ 93.791380][ T7108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.793436][ T7108] R13: 0000000000000000 R14: 00007efff4136058 R15: 00007fffd7704958 [ 93.795511][ T7108] [ 93.796461][ T7108] BUG: Bad page state in process syz.0.327 pfn:29a0c [ 93.798436][ T7108] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888029a0c3c0 pfn:0x29a0c [ 93.801144][ T7108] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 93.803011][ T7108] raw: 00fff00000000000 dead000000000040 ffff888036779000 0000000000000000 [ 93.805196][ T7108] raw: ffff888029a0c3c0 0000000000000001 00000000ffffffff 0000000000000000 [ 93.807910][ T7108] page dumped because: page_pool leak [ 93.809428][ T7108] page_owner tracks the page as allocated [ 93.810930][ T7108] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7108, tgid 7096 (syz.0.327), ts 92314581524, free_ts 92288021007 [ 93.815126][ T7108] post_alloc_hook+0x2d1/0x350 [ 93.816369][ T7108] get_page_from_freelist+0x101e/0x3070 [ 93.818189][ T7108] __alloc_pages_noprof+0x223/0x25a0 [ 93.819559][ T7108] alloc_pages_bulk_noprof+0x77c/0x1110 [ 93.821089][ T7108] __page_pool_alloc_pages_slow+0x18f/0x770 [ 93.822735][ T7108] page_pool_alloc_netmem+0xc4/0x160 [ 93.824330][ T7108] page_pool_alloc_pages+0x1a/0x60 [ 93.825839][ T7108] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 93.827519][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 93.828877][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 93.830366][ T7108] __sys_bpf+0xfc6/0x49a0 [ 93.831493][ T7108] __x64_sys_bpf+0x78/0xc0 [ 93.832676][ T7108] do_syscall_64+0xcd/0x250 [ 93.833891][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.835511][ T7108] page last free pid 34 tgid 34 stack trace: [ 93.837201][ T7108] free_unref_page+0x5f4/0xdc0 [ 93.838673][ T7108] __folio_put+0x30d/0x3d0 [ 93.839920][ T7108] free_page_and_swap_cache+0x249/0x2c0 [ 93.841464][ T7108] tlb_remove_table_rcu+0x89/0xe0 [ 93.842849][ T7108] rcu_core+0x79d/0x14d0 [ 93.844096][ T7108] handle_softirqs+0x213/0x8f0 [ 93.845715][ T7108] run_ksoftirqd+0x3a/0x60 [ 93.847197][ T7108] smpboot_thread_fn+0x661/0xa30 [ 93.848788][ T7108] kthread+0x2c1/0x3a0 [ 93.850019][ T7108] ret_from_fork+0x45/0x80 [ 93.851202][ T7108] ret_from_fork_asm+0x1a/0x30 [ 93.852459][ T7108] Modules linked in: [ 93.853490][ T7108] CPU: 3 UID: 0 PID: 7108 Comm: syz.0.327 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 93.856683][ T7108] Tainted: [B]=BAD_PAGE [ 93.857917][ T7108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 93.861087][ T7108] Call Trace: [ 93.862127][ T7108] [ 93.863494][ T7108] dump_stack_lvl+0x16c/0x1f0 [ 93.864843][ T7108] bad_page+0xb3/0x1f0 [ 93.866089][ T7108] ? __pfx_bad_page+0x10/0x10 [ 93.867823][ T7108] ? page_bad_reason+0x9d/0x1e0 [ 93.869316][ T7108] free_unref_page+0x657/0xdc0 [ 93.870586][ T7108] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 93.872204][ T7108] ? __phys_addr+0xc6/0x150 [ 93.873470][ T7108] skb_free_head+0xa0/0x1d0 [ 93.874920][ T7108] skb_release_data+0x560/0x730 [ 93.876552][ T7108] sk_skb_reason_drop+0x129/0x1a0 [ 93.878044][ T7108] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 93.879891][ T7108] ? kernel_text_address+0x8d/0x100 [ 93.881292][ T7108] ? hlock_class+0x4e/0x130 [ 93.882500][ T7108] ? __lock_acquire+0x163e/0x3ce0 [ 93.883842][ T7108] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 93.885712][ T7108] ? hlock_class+0x4e/0x130 [ 93.886927][ T7108] ? __lock_acquire+0xbdd/0x3ce0 [ 93.888220][ T7108] ? __pfx___lock_acquire+0x10/0x10 [ 93.889539][ T7108] __netif_receive_skb_list_core+0x357/0x950 [ 93.891122][ T7108] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 93.892782][ T7108] ? trace_lock_acquire+0x14a/0x1d0 [ 93.894073][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 93.895636][ T7108] ? lock_acquire+0x2f/0xb0 [ 93.896844][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 93.898615][ T7108] netif_receive_skb_list_internal+0x753/0xdb0 [ 93.900461][ T7108] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 93.902414][ T7108] ? __pfx_eth_type_trans+0x10/0x10 [ 93.903845][ T7108] ? __build_skb_around+0x278/0x3b0 [ 93.905244][ T7108] netif_receive_skb_list+0x4f/0x4a0 [ 93.906612][ T7108] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 93.908711][ T7108] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 93.910617][ T7108] ? bpf_test_timer_continue+0x150/0x3d0 [ 93.911999][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 93.913307][ T7108] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 93.914744][ T7108] ? try_to_wake_up+0x154/0x14f0 [ 93.915957][ T7108] ? __pfx_try_to_wake_up+0x10/0x10 [ 93.917295][ T7108] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 93.918733][ T7108] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 93.920056][ T7108] ? 0xffffffffa0004340 [ 93.921148][ T7108] ? 0xffffffffa0004340 [ 93.922254][ T7108] ? 0xffffffffa0004340 [ 93.923311][ T7108] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 93.924821][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 93.926197][ T7108] ? lock_acquire+0x2f/0xb0 [ 93.927439][ T7108] ? __fget_files+0x40/0x3f0 [ 93.928635][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 93.930147][ T7108] ? fput+0x30/0x390 [ 93.931159][ T7108] ? __bpf_prog_get+0xa0/0x290 [ 93.932387][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 93.933892][ T7108] __sys_bpf+0xfc6/0x49a0 [ 93.935026][ T7108] ? __pfx___sys_bpf+0x10/0x10 [ 93.936257][ T7108] ? __schedule+0xe5d/0x5730 [ 93.937448][ T7108] ? __fget_files+0x23a/0x3f0 [ 93.938641][ T7108] ? do_futex+0x123/0x350 [ 93.939782][ T7108] ? __pfx_do_futex+0x10/0x10 [ 93.940983][ T7108] ? xfd_validate_state+0x5d/0x180 [ 93.942447][ T7108] ? rcu_is_watching+0x12/0xc0 [ 93.943918][ T7108] __x64_sys_bpf+0x78/0xc0 [ 93.945469][ T7108] ? lockdep_hardirqs_on+0x7c/0x110 [ 93.946920][ T7108] do_syscall_64+0xcd/0x250 [ 93.948315][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.949871][ T7108] RIP: 0033:0x7efff3f7e719 [ 93.951245][ T7108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.956286][ T7108] RSP: 002b:00007efff4e28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 93.958892][ T7108] RAX: ffffffffffffffda RBX: 00007efff4136058 RCX: 00007efff3f7e719 [ 93.961056][ T7108] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 93.963221][ T7108] RBP: 00007efff3ff132e R08: 0000000000000000 R09: 0000000000000000 [ 93.965196][ T7108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.967253][ T7108] R13: 0000000000000000 R14: 00007efff4136058 R15: 00007fffd7704958 [ 93.969450][ T7108] [ 93.970447][ T7108] BUG: Bad page state in process syz.0.327 pfn:4ea2a [ 93.972215][ T7108] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4ea2a [ 93.974541][ T7108] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 93.976407][ T7108] raw: 00fff00000000000 dead000000000040 ffff888036779000 0000000000000000 [ 93.978731][ T7108] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 93.981943][ T7108] page dumped because: page_pool leak [ 93.983503][ T7108] page_owner tracks the page as allocated [ 93.985029][ T7108] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7108, tgid 7096 (syz.0.327), ts 92314576782, free_ts 92288027337 [ 93.990005][ T7108] post_alloc_hook+0x2d1/0x350 [ 93.991457][ T7108] get_page_from_freelist+0x101e/0x3070 [ 93.993035][ T7108] __alloc_pages_noprof+0x223/0x25a0 [ 93.994535][ T7108] alloc_pages_bulk_noprof+0x77c/0x1110 [ 93.996131][ T7108] __page_pool_alloc_pages_slow+0x18f/0x770 [ 93.997978][ T7108] page_pool_alloc_netmem+0xc4/0x160 [ 93.999439][ T7108] page_pool_alloc_pages+0x1a/0x60 [ 94.000774][ T7108] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 94.002426][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 94.003921][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 94.005474][ T7108] __sys_bpf+0xfc6/0x49a0 [ 94.006728][ T7108] __x64_sys_bpf+0x78/0xc0 [ 94.008388][ T7108] do_syscall_64+0xcd/0x250 [ 94.009684][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.011298][ T7108] page last free pid 34 tgid 34 stack trace: [ 94.012870][ T7108] free_unref_page+0x5f4/0xdc0 [ 94.014151][ T7108] __folio_put+0x30d/0x3d0 [ 94.015450][ T7108] free_page_and_swap_cache+0x249/0x2c0 [ 94.016959][ T7108] tlb_remove_table_rcu+0x89/0xe0 [ 94.018356][ T7108] rcu_core+0x79d/0x14d0 [ 94.019520][ T7108] handle_softirqs+0x213/0x8f0 [ 94.020824][ T7108] run_ksoftirqd+0x3a/0x60 [ 94.022045][ T7108] smpboot_thread_fn+0x661/0xa30 [ 94.023361][ T7108] kthread+0x2c1/0x3a0 [ 94.025387][ T7108] ret_from_fork+0x45/0x80 [ 94.026669][ T7108] ret_from_fork_asm+0x1a/0x30 [ 94.028635][ T7108] Modules linked in: [ 94.029973][ T7108] CPU: 3 UID: 0 PID: 7108 Comm: syz.0.327 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 94.033658][ T7108] Tainted: [B]=BAD_PAGE [ 94.034790][ T7108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 94.037695][ T7108] Call Trace: [ 94.038869][ T7108] [ 94.039781][ T7108] dump_stack_lvl+0x16c/0x1f0 [ 94.041266][ T7108] bad_page+0xb3/0x1f0 [ 94.042388][ T7108] ? __pfx_bad_page+0x10/0x10 [ 94.043642][ T7108] ? page_bad_reason+0x9d/0x1e0 [ 94.044934][ T7108] free_unref_page+0x657/0xdc0 [ 94.046216][ T7108] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 94.047917][ T7108] ? __phys_addr+0xc6/0x150 [ 94.049168][ T7108] skb_free_head+0xa0/0x1d0 [ 94.050367][ T7108] skb_release_data+0x560/0x730 [ 94.051556][ T7108] sk_skb_reason_drop+0x129/0x1a0 [ 94.052872][ T7108] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 94.054592][ T7108] ? kernel_text_address+0x8d/0x100 [ 94.055966][ T7108] ? hlock_class+0x4e/0x130 [ 94.057168][ T7108] ? __lock_acquire+0x163e/0x3ce0 [ 94.058518][ T7108] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 94.060416][ T7108] ? hlock_class+0x4e/0x130 [ 94.061609][ T7108] ? __lock_acquire+0xbdd/0x3ce0 [ 94.063212][ T7108] ? __pfx___lock_acquire+0x10/0x10 [ 94.064673][ T7108] __netif_receive_skb_list_core+0x357/0x950 [ 94.066405][ T7108] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 94.068153][ T7108] ? trace_lock_acquire+0x14a/0x1d0 [ 94.069521][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 94.071299][ T7108] ? lock_acquire+0x2f/0xb0 [ 94.072725][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 94.074381][ T7108] netif_receive_skb_list_internal+0x753/0xdb0 [ 94.075984][ T7108] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 94.077731][ T7108] ? __pfx_eth_type_trans+0x10/0x10 [ 94.079112][ T7108] ? __build_skb_around+0x278/0x3b0 [ 94.080512][ T7108] netif_receive_skb_list+0x4f/0x4a0 [ 94.081905][ T7108] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 94.083556][ T7108] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 94.085464][ T7108] ? bpf_test_timer_continue+0x150/0x3d0 [ 94.087013][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 94.088696][ T7108] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 94.090376][ T7108] ? try_to_wake_up+0x154/0x14f0 [ 94.091780][ T7108] ? __pfx_try_to_wake_up+0x10/0x10 [ 94.093155][ T7108] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 94.094736][ T7108] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 94.096137][ T7108] ? 0xffffffffa0004340 [ 94.097260][ T7108] ? 0xffffffffa0004340 [ 94.098366][ T7108] ? 0xffffffffa0004340 [ 94.099452][ T7108] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 94.101038][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 94.102525][ T7108] ? lock_acquire+0x2f/0xb0 [ 94.103740][ T7108] ? __fget_files+0x40/0x3f0 [ 94.105008][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 94.106515][ T7108] ? fput+0x30/0x390 [ 94.107559][ T7108] ? __bpf_prog_get+0xa0/0x290 [ 94.108811][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 94.110352][ T7108] __sys_bpf+0xfc6/0x49a0 [ 94.111523][ T7108] ? __pfx___sys_bpf+0x10/0x10 [ 94.112778][ T7108] ? __schedule+0xe5d/0x5730 [ 94.114011][ T7108] ? __fget_files+0x23a/0x3f0 [ 94.115251][ T7108] ? do_futex+0x123/0x350 [ 94.116397][ T7108] ? __pfx_do_futex+0x10/0x10 [ 94.117660][ T7108] ? xfd_validate_state+0x5d/0x180 [ 94.119029][ T7108] ? rcu_is_watching+0x12/0xc0 [ 94.120286][ T7108] __x64_sys_bpf+0x78/0xc0 [ 94.121515][ T7108] ? lockdep_hardirqs_on+0x7c/0x110 [ 94.122990][ T7108] do_syscall_64+0xcd/0x250 [ 94.124259][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.125844][ T7108] RIP: 0033:0x7efff3f7e719 [ 94.126981][ T7108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.132165][ T7108] RSP: 002b:00007efff4e28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 94.134451][ T7108] RAX: ffffffffffffffda RBX: 00007efff4136058 RCX: 00007efff3f7e719 [ 94.136533][ T7108] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 94.139139][ T7108] RBP: 00007efff3ff132e R08: 0000000000000000 R09: 0000000000000000 [ 94.141228][ T7108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.143397][ T7108] R13: 0000000000000000 R14: 00007efff4136058 R15: 00007fffd7704958 [ 94.145711][ T7108] [ 94.146806][ T7108] BUG: Bad page state in process syz.0.327 pfn:4849e [ 94.148659][ T7108] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804849fe00 pfn:0x4849e [ 94.151626][ T7108] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 94.154168][ T7108] raw: 00fff00000000000 dead000000000040 ffff888036779000 0000000000000000 [ 94.156401][ T7108] raw: ffff88804849fe00 0000000000000001 00000000ffffffff 0000000000000000 [ 94.158766][ T7108] page dumped because: page_pool leak [ 94.160222][ T7108] page_owner tracks the page as allocated [ 94.161725][ T7108] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7108, tgid 7096 (syz.0.327), ts 92314571893, free_ts 92288031840 [ 94.166016][ T7108] post_alloc_hook+0x2d1/0x350 [ 94.167376][ T7108] get_page_from_freelist+0x101e/0x3070 [ 94.168897][ T7108] __alloc_pages_noprof+0x223/0x25a0 [ 94.170286][ T7108] alloc_pages_bulk_noprof+0x77c/0x1110 [ 94.171761][ T7108] __page_pool_alloc_pages_slow+0x18f/0x770 [ 94.173311][ T7108] page_pool_alloc_netmem+0xc4/0x160 [ 94.174916][ T7108] page_pool_alloc_pages+0x1a/0x60 [ 94.176243][ T7108] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 94.177924][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 94.179440][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 94.180846][ T7108] __sys_bpf+0xfc6/0x49a0 [ 94.182068][ T7108] __x64_sys_bpf+0x78/0xc0 [ 94.183218][ T7108] do_syscall_64+0xcd/0x250 [ 94.184401][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.185967][ T7108] page last free pid 34 tgid 34 stack trace: [ 94.187629][ T7108] free_unref_page+0x5f4/0xdc0 [ 94.188988][ T7108] rcu_core+0x79d/0x14d0 [ 94.190118][ T7108] handle_softirqs+0x213/0x8f0 [ 94.191377][ T7108] run_ksoftirqd+0x3a/0x60 [ 94.192575][ T7108] smpboot_thread_fn+0x661/0xa30 [ 94.193862][ T7108] kthread+0x2c1/0x3a0 [ 94.194943][ T7108] ret_from_fork+0x45/0x80 [ 94.196101][ T7108] ret_from_fork_asm+0x1a/0x30 [ 94.197422][ T7108] Modules linked in: [ 94.198578][ T7108] CPU: 3 UID: 0 PID: 7108 Comm: syz.0.327 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 94.201659][ T7108] Tainted: [B]=BAD_PAGE [ 94.202814][ T7108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 94.205609][ T7108] Call Trace: [ 94.206498][ T7108] [ 94.207370][ T7108] dump_stack_lvl+0x16c/0x1f0 [ 94.208651][ T7108] bad_page+0xb3/0x1f0 [ 94.209717][ T7108] ? __pfx_bad_page+0x10/0x10 [ 94.210968][ T7108] ? page_bad_reason+0x9d/0x1e0 [ 94.212289][ T7108] free_unref_page+0x657/0xdc0 [ 94.213531][ T7108] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 94.215114][ T7108] ? __phys_addr+0xc6/0x150 [ 94.216309][ T7108] skb_free_head+0xa0/0x1d0 [ 94.217527][ T7108] skb_release_data+0x560/0x730 [ 94.218810][ T7108] sk_skb_reason_drop+0x129/0x1a0 [ 94.220128][ T7108] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 94.221880][ T7108] ? kernel_text_address+0x8d/0x100 [ 94.223511][ T7108] ? hlock_class+0x4e/0x130 [ 94.224796][ T7108] ? __lock_acquire+0x163e/0x3ce0 [ 94.226188][ T7108] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 94.228138][ T7108] ? hlock_class+0x4e/0x130 [ 94.229344][ T7108] ? __lock_acquire+0xbdd/0x3ce0 [ 94.230677][ T7108] ? __pfx___lock_acquire+0x10/0x10 [ 94.232054][ T7108] __netif_receive_skb_list_core+0x357/0x950 [ 94.233681][ T7108] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 94.235394][ T7108] ? trace_lock_acquire+0x14a/0x1d0 [ 94.236761][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 94.238451][ T7108] ? lock_acquire+0x2f/0xb0 [ 94.239647][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 94.241489][ T7108] netif_receive_skb_list_internal+0x753/0xdb0 [ 94.243214][ T7108] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 94.244974][ T7108] ? __pfx_eth_type_trans+0x10/0x10 [ 94.246532][ T7108] ? __build_skb_around+0x278/0x3b0 [ 94.248013][ T7108] netif_receive_skb_list+0x4f/0x4a0 [ 94.249407][ T7108] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 94.251090][ T7108] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 94.252859][ T7108] ? bpf_test_timer_continue+0x150/0x3d0 [ 94.254345][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 94.255723][ T7108] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 94.257337][ T7108] ? try_to_wake_up+0x154/0x14f0 [ 94.258961][ T7108] ? __pfx_try_to_wake_up+0x10/0x10 [ 94.260323][ T7108] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 94.261896][ T7108] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 94.263327][ T7108] ? 0xffffffffa0004340 [ 94.264419][ T7108] ? 0xffffffffa0004340 [ 94.265513][ T7108] ? 0xffffffffa0004340 [ 94.266610][ T7108] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 94.268161][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 94.269571][ T7108] ? lock_acquire+0x2f/0xb0 [ 94.270774][ T7108] ? __fget_files+0x40/0x3f0 [ 94.272012][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 94.273582][ T7108] ? fput+0x30/0x390 [ 94.274632][ T7108] ? __bpf_prog_get+0xa0/0x290 [ 94.275902][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 94.277661][ T7108] __sys_bpf+0xfc6/0x49a0 [ 94.278805][ T7108] ? __pfx___sys_bpf+0x10/0x10 [ 94.280062][ T7108] ? __schedule+0xe5d/0x5730 [ 94.281277][ T7108] ? __fget_files+0x23a/0x3f0 [ 94.282535][ T7108] ? do_futex+0x123/0x350 [ 94.283713][ T7108] ? __pfx_do_futex+0x10/0x10 [ 94.284957][ T7108] ? xfd_validate_state+0x5d/0x180 [ 94.286310][ T7108] ? rcu_is_watching+0x12/0xc0 [ 94.287589][ T7108] __x64_sys_bpf+0x78/0xc0 [ 94.288765][ T7108] ? lockdep_hardirqs_on+0x7c/0x110 [ 94.290151][ T7108] do_syscall_64+0xcd/0x250 [ 94.291352][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.292905][ T7108] RIP: 0033:0x7efff3f7e719 [ 94.294120][ T7108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.299123][ T7108] RSP: 002b:00007efff4e28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 94.301281][ T7108] RAX: ffffffffffffffda RBX: 00007efff4136058 RCX: 00007efff3f7e719 [ 94.303353][ T7108] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 94.305455][ T7108] RBP: 00007efff3ff132e R08: 0000000000000000 R09: 0000000000000000 [ 94.307886][ T7108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.310327][ T7108] R13: 0000000000000000 R14: 00007efff4136058 R15: 00007fffd7704958 [ 94.312390][ T7108] [ 94.313298][ T7108] BUG: Bad page state in process syz.0.327 pfn:4feab [ 94.315643][ T7108] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804feab4d8 pfn:0x4feab [ 94.318840][ T7108] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 94.320730][ T7108] raw: 00fff00000000000 dead000000000040 ffff888036779000 0000000000000000 [ 94.323001][ T7108] raw: ffff88804feab4d8 0000000000000001 00000000ffffffff 0000000000000000 [ 94.325259][ T7108] page dumped because: page_pool leak [ 94.326684][ T7108] page_owner tracks the page as allocated [ 94.328261][ T7108] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7108, tgid 7096 (syz.0.327), ts 92314566039, free_ts 92288300237 [ 94.332680][ T7108] post_alloc_hook+0x2d1/0x350 [ 94.333983][ T7108] get_page_from_freelist+0x101e/0x3070 [ 94.335441][ T7108] __alloc_pages_noprof+0x223/0x25a0 [ 94.336825][ T7108] alloc_pages_bulk_noprof+0x77c/0x1110 [ 94.338378][ T7108] __page_pool_alloc_pages_slow+0x18f/0x770 [ 94.340000][ T7108] page_pool_alloc_netmem+0xc4/0x160 [ 94.341401][ T7108] page_pool_alloc_pages+0x1a/0x60 [ 94.342778][ T7108] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 94.344434][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 94.345825][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 94.347332][ T7108] __sys_bpf+0xfc6/0x49a0 [ 94.348580][ T7108] __x64_sys_bpf+0x78/0xc0 [ 94.349762][ T7108] do_syscall_64+0xcd/0x250 [ 94.350970][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.352532][ T7108] page last free pid 6091 tgid 6091 stack trace: [ 94.354260][ T7108] free_unref_page+0x5f4/0xdc0 [ 94.355561][ T7108] vfree+0x17a/0x890 [ 94.356610][ T7108] bpf_prog_free_deferred+0x53f/0x6f0 [ 94.358121][ T7108] process_one_work+0x9c5/0x1ba0 [ 94.359545][ T7108] worker_thread+0x6c8/0xf00 [ 94.360761][ T7108] kthread+0x2c1/0x3a0 [ 94.361865][ T7108] ret_from_fork+0x45/0x80 [ 94.363061][ T7108] ret_from_fork_asm+0x1a/0x30 [ 94.364319][ T7108] Modules linked in: [ 94.365384][ T7108] CPU: 3 UID: 0 PID: 7108 Comm: syz.0.327 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 94.368497][ T7108] Tainted: [B]=BAD_PAGE [ 94.369552][ T7108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 94.372328][ T7108] Call Trace: [ 94.373191][ T7108] [ 94.373974][ T7108] dump_stack_lvl+0x16c/0x1f0 [ 94.375229][ T7108] bad_page+0xb3/0x1f0 [ 94.376281][ T7108] ? __pfx_bad_page+0x10/0x10 [ 94.377531][ T7108] ? page_bad_reason+0x9d/0x1e0 [ 94.378946][ T7108] free_unref_page+0x657/0xdc0 [ 94.380318][ T7108] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 94.381896][ T7108] ? __phys_addr+0xc6/0x150 [ 94.383097][ T7108] skb_free_head+0xa0/0x1d0 [ 94.384298][ T7108] skb_release_data+0x560/0x730 [ 94.385611][ T7108] sk_skb_reason_drop+0x129/0x1a0 [ 94.387079][ T7108] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 94.388943][ T7108] ? kernel_text_address+0x8d/0x100 [ 94.390427][ T7108] ? hlock_class+0x4e/0x130 [ 94.391649][ T7108] ? __lock_acquire+0x163e/0x3ce0 [ 94.392997][ T7108] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 94.394930][ T7108] ? hlock_class+0x4e/0x130 [ 94.396157][ T7108] ? __lock_acquire+0xbdd/0x3ce0 [ 94.397483][ T7108] ? __pfx___lock_acquire+0x10/0x10 [ 94.398869][ T7108] __netif_receive_skb_list_core+0x357/0x950 [ 94.400746][ T7108] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 94.402619][ T7108] ? trace_lock_acquire+0x14a/0x1d0 [ 94.404071][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 94.405821][ T7108] ? lock_acquire+0x2f/0xb0 [ 94.407643][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 94.409572][ T7108] netif_receive_skb_list_internal+0x753/0xdb0 [ 94.411190][ T7108] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 94.412960][ T7108] ? __pfx_eth_type_trans+0x10/0x10 [ 94.414347][ T7108] ? __build_skb_around+0x278/0x3b0 [ 94.415755][ T7108] netif_receive_skb_list+0x4f/0x4a0 [ 94.417175][ T7108] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 94.419623][ T7108] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 94.421613][ T7108] ? bpf_test_timer_continue+0x150/0x3d0 [ 94.423312][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 94.424721][ T7108] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 94.426583][ T7108] ? try_to_wake_up+0x154/0x14f0 [ 94.427918][ T7108] ? __pfx_try_to_wake_up+0x10/0x10 [ 94.429235][ T7108] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 94.430796][ T7108] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 94.432267][ T7108] ? 0xffffffffa0004340 [ 94.433339][ T7108] ? 0xffffffffa0004340 [ 94.434427][ T7108] ? 0xffffffffa0004340 [ 94.435520][ T7108] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 94.437132][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 94.438565][ T7108] ? lock_acquire+0x2f/0xb0 [ 94.439799][ T7108] ? __fget_files+0x40/0x3f0 [ 94.441393][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 94.443187][ T7108] ? fput+0x30/0x390 [ 94.444429][ T7108] ? __bpf_prog_get+0xa0/0x290 [ 94.445808][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 94.447531][ T7108] __sys_bpf+0xfc6/0x49a0 [ 94.448665][ T7108] ? __pfx___sys_bpf+0x10/0x10 [ 94.450018][ T7108] ? __schedule+0xe5d/0x5730 [ 94.451253][ T7108] ? __fget_files+0x23a/0x3f0 [ 94.452495][ T7108] ? do_futex+0x123/0x350 [ 94.453644][ T7108] ? __pfx_do_futex+0x10/0x10 [ 94.454914][ T7108] ? xfd_validate_state+0x5d/0x180 [ 94.456316][ T7108] ? rcu_is_watching+0x12/0xc0 [ 94.457573][ T7108] __x64_sys_bpf+0x78/0xc0 [ 94.458773][ T7108] ? lockdep_hardirqs_on+0x7c/0x110 [ 94.460194][ T7108] do_syscall_64+0xcd/0x250 [ 94.461308][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.462809][ T7108] RIP: 0033:0x7efff3f7e719 [ 94.464107][ T7108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.470517][ T7108] RSP: 002b:00007efff4e28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 94.473142][ T7108] RAX: ffffffffffffffda RBX: 00007efff4136058 RCX: 00007efff3f7e719 [ 94.475520][ T7108] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 94.477898][ T7108] RBP: 00007efff3ff132e R08: 0000000000000000 R09: 0000000000000000 [ 94.480294][ T7108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.483135][ T7108] R13: 0000000000000000 R14: 00007efff4136058 R15: 00007fffd7704958 [ 94.485719][ T7108] [ 94.486767][ T7108] BUG: Bad page state in process syz.0.327 pfn:3fced [ 94.489170][ T7108] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x700000002 pfn:0x3fced [ 94.492434][ T7108] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 94.494308][ T7108] raw: 00fff00000000000 dead000000000040 ffff888036779000 0000000000000000 [ 94.496483][ T7108] raw: 0000000700000002 0000000000000001 00000000ffffffff 0000000000000000 [ 94.498842][ T7108] page dumped because: page_pool leak [ 94.500374][ T7108] page_owner tracks the page as allocated [ 94.502104][ T7108] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7108, tgid 7096 (syz.0.327), ts 92314559615, free_ts 92288325335 [ 94.508071][ T7108] post_alloc_hook+0x2d1/0x350 [ 94.509548][ T7108] get_page_from_freelist+0x101e/0x3070 [ 94.510999][ T7108] __alloc_pages_noprof+0x223/0x25a0 [ 94.512381][ T7108] alloc_pages_bulk_noprof+0x77c/0x1110 [ 94.513843][ T7108] __page_pool_alloc_pages_slow+0x18f/0x770 [ 94.515423][ T7108] page_pool_alloc_netmem+0xc4/0x160 [ 94.516777][ T7108] page_pool_alloc_pages+0x1a/0x60 [ 94.518305][ T7108] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 94.520057][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 94.521763][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 94.523557][ T7108] __sys_bpf+0xfc6/0x49a0 [ 94.524808][ T7108] __x64_sys_bpf+0x78/0xc0 [ 94.526165][ T7108] do_syscall_64+0xcd/0x250 [ 94.527705][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.529449][ T7108] page last free pid 6091 tgid 6091 stack trace: [ 94.531221][ T7108] free_unref_page+0x5f4/0xdc0 [ 94.532488][ T7108] vfree+0x17a/0x890 [ 94.533525][ T7108] delayed_vfree_work+0x56/0x70 [ 94.534816][ T7108] process_one_work+0x9c5/0x1ba0 [ 94.536127][ T7108] worker_thread+0x6c8/0xf00 [ 94.537528][ T7108] kthread+0x2c1/0x3a0 [ 94.538838][ T7108] ret_from_fork+0x45/0x80 [ 94.539998][ T7108] ret_from_fork_asm+0x1a/0x30 [ 94.541244][ T7108] Modules linked in: [ 94.542375][ T7108] CPU: 3 UID: 0 PID: 7108 Comm: syz.0.327 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 94.545513][ T7108] Tainted: [B]=BAD_PAGE [ 94.546630][ T7108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 94.549448][ T7108] Call Trace: [ 94.550357][ T7108] [ 94.551120][ T7108] dump_stack_lvl+0x16c/0x1f0 [ 94.552360][ T7108] bad_page+0xb3/0x1f0 [ 94.553446][ T7108] ? __pfx_bad_page+0x10/0x10 [ 94.554849][ T7108] ? page_bad_reason+0x9d/0x1e0 [ 94.556158][ T7108] free_unref_page+0x657/0xdc0 [ 94.557453][ T7108] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 94.559100][ T7108] ? __phys_addr+0xc6/0x150 [ 94.560399][ T7108] skb_free_head+0xa0/0x1d0 [ 94.561645][ T7108] skb_release_data+0x560/0x730 [ 94.562969][ T7108] sk_skb_reason_drop+0x129/0x1a0 [ 94.564294][ T7108] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 94.566364][ T7108] ? kernel_text_address+0x8d/0x100 [ 94.567705][ T7108] ? hlock_class+0x4e/0x130 [ 94.569029][ T7108] ? __lock_acquire+0x163e/0x3ce0 [ 94.570431][ T7108] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 94.572250][ T7108] ? hlock_class+0x4e/0x130 [ 94.573441][ T7108] ? __lock_acquire+0xbdd/0x3ce0 [ 94.574723][ T7108] ? __pfx___lock_acquire+0x10/0x10 [ 94.576093][ T7108] __netif_receive_skb_list_core+0x357/0x950 [ 94.577706][ T7108] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 94.579479][ T7108] ? trace_lock_acquire+0x14a/0x1d0 [ 94.580846][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 94.582647][ T7108] ? lock_acquire+0x2f/0xb0 [ 94.583908][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 94.585385][ T7108] netif_receive_skb_list_internal+0x753/0xdb0 [ 94.586980][ T7108] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 94.588712][ T7108] ? __pfx_eth_type_trans+0x10/0x10 [ 94.590105][ T7108] ? __build_skb_around+0x278/0x3b0 [ 94.591470][ T7108] netif_receive_skb_list+0x4f/0x4a0 [ 94.592849][ T7108] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 94.594491][ T7108] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 94.596243][ T7108] ? bpf_test_timer_continue+0x150/0x3d0 [ 94.597860][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 94.599782][ T7108] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 94.601811][ T7108] ? try_to_wake_up+0x154/0x14f0 [ 94.603538][ T7108] ? __pfx_try_to_wake_up+0x10/0x10 [ 94.605299][ T7108] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 94.607332][ T7108] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 94.609100][ T7108] ? 0xffffffffa0004340 [ 94.610445][ T7108] ? 0xffffffffa0004340 [ 94.611728][ T7108] ? 0xffffffffa0004340 [ 94.613001][ T7108] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 94.614812][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 94.616429][ T7108] ? lock_acquire+0x2f/0xb0 [ 94.617813][ T7108] ? __fget_files+0x40/0x3f0 [ 94.619233][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 94.621219][ T7108] ? fput+0x30/0x390 [ 94.622879][ T7108] ? __bpf_prog_get+0xa0/0x290 [ 94.624468][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 94.626220][ T7108] __sys_bpf+0xfc6/0x49a0 [ 94.627396][ T7108] ? __pfx___sys_bpf+0x10/0x10 [ 94.628648][ T7108] ? __schedule+0xe5d/0x5730 [ 94.629858][ T7108] ? __fget_files+0x23a/0x3f0 [ 94.631192][ T7108] ? do_futex+0x123/0x350 [ 94.632326][ T7108] ? __pfx_do_futex+0x10/0x10 [ 94.633551][ T7108] ? xfd_validate_state+0x5d/0x180 [ 94.634829][ T7108] ? rcu_is_watching+0x12/0xc0 [ 94.636040][ T7108] __x64_sys_bpf+0x78/0xc0 [ 94.637161][ T7108] ? lockdep_hardirqs_on+0x7c/0x110 [ 94.638511][ T7108] do_syscall_64+0xcd/0x250 [ 94.639718][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.641285][ T7108] RIP: 0033:0x7efff3f7e719 [ 94.642631][ T7108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.648066][ T7108] RSP: 002b:00007efff4e28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 94.650450][ T7108] RAX: ffffffffffffffda RBX: 00007efff4136058 RCX: 00007efff3f7e719 [ 94.652688][ T7108] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 94.654735][ T7108] RBP: 00007efff3ff132e R08: 0000000000000000 R09: 0000000000000000 [ 94.656776][ T7108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.658849][ T7108] R13: 0000000000000000 R14: 00007efff4136058 R15: 00007fffd7704958 [ 94.660877][ T7108] [ 94.661808][ T7108] BUG: Bad page state in process syz.0.327 pfn:4d512 [ 94.663569][ T7108] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804d513e00 pfn:0x4d512 [ 94.666140][ T7108] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 94.668024][ T7108] raw: 00fff00000000000 dead000000000040 ffff888036779000 0000000000000000 [ 94.670226][ T7108] raw: ffff88804d513e00 0000000000000001 00000000ffffffff 0000000000000000 [ 94.672427][ T7108] page dumped because: page_pool leak [ 94.673807][ T7108] page_owner tracks the page as allocated [ 94.675268][ T7108] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7108, tgid 7096 (syz.0.327), ts 92314553279, free_ts 92288329662 [ 94.679553][ T7108] post_alloc_hook+0x2d1/0x350 [ 94.680964][ T7108] get_page_from_freelist+0x101e/0x3070 [ 94.682436][ T7108] __alloc_pages_noprof+0x223/0x25a0 [ 94.683838][ T7108] alloc_pages_bulk_noprof+0x77c/0x1110 [ 94.685254][ T7108] __page_pool_alloc_pages_slow+0x18f/0x770 [ 94.686807][ T7108] page_pool_alloc_netmem+0xc4/0x160 [ 94.688258][ T7108] page_pool_alloc_pages+0x1a/0x60 [ 94.689616][ T7108] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 94.691230][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 94.692583][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 94.694138][ T7108] __sys_bpf+0xfc6/0x49a0 [ 94.695454][ T7108] __x64_sys_bpf+0x78/0xc0 [ 94.696632][ T7108] do_syscall_64+0xcd/0x250 [ 94.697857][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.699432][ T7108] page last free pid 6091 tgid 6091 stack trace: [ 94.701056][ T7108] free_unref_page+0x5f4/0xdc0 [ 94.702337][ T7108] vfree+0x17a/0x890 [ 94.703365][ T7108] delayed_vfree_work+0x56/0x70 [ 94.704762][ T7108] process_one_work+0x9c5/0x1ba0 [ 94.706090][ T7108] worker_thread+0x6c8/0xf00 [ 94.707368][ T7108] kthread+0x2c1/0x3a0 [ 94.708452][ T7108] ret_from_fork+0x45/0x80 [ 94.709632][ T7108] ret_from_fork_asm+0x1a/0x30 [ 94.710923][ T7108] Modules linked in: [ 94.711960][ T7108] CPU: 3 UID: 0 PID: 7108 Comm: syz.0.327 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 94.715093][ T7108] Tainted: [B]=BAD_PAGE [ 94.716181][ T7108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 94.718993][ T7108] Call Trace: [ 94.719865][ T7108] [ 94.720624][ T7108] dump_stack_lvl+0x16c/0x1f0 [ 94.721869][ T7108] bad_page+0xb3/0x1f0 [ 94.723074][ T7108] ? __pfx_bad_page+0x10/0x10 [ 94.724333][ T7108] ? page_bad_reason+0x9d/0x1e0 [ 94.726152][ T7108] free_unref_page+0x657/0xdc0 [ 94.727385][ T7108] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 94.729132][ T7108] ? __phys_addr+0xc6/0x150 [ 94.730327][ T7108] skb_free_head+0xa0/0x1d0 [ 94.731537][ T7108] skb_release_data+0x560/0x730 [ 94.732882][ T7108] sk_skb_reason_drop+0x129/0x1a0 [ 94.734239][ T7108] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 94.735988][ T7108] ? kernel_text_address+0x8d/0x100 [ 94.737348][ T7108] ? hlock_class+0x4e/0x130 [ 94.738571][ T7108] ? __lock_acquire+0x163e/0x3ce0 [ 94.739887][ T7108] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 94.741742][ T7108] ? hlock_class+0x4e/0x130 [ 94.743046][ T7108] ? __lock_acquire+0xbdd/0x3ce0 [ 94.744347][ T7108] ? __pfx___lock_acquire+0x10/0x10 [ 94.745697][ T7108] __netif_receive_skb_list_core+0x357/0x950 [ 94.747256][ T7108] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 94.748995][ T7108] ? trace_lock_acquire+0x14a/0x1d0 [ 94.750358][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 94.751977][ T7108] ? lock_acquire+0x2f/0xb0 [ 94.753167][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 94.754836][ T7108] netif_receive_skb_list_internal+0x753/0xdb0 [ 94.756408][ T7108] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 94.758100][ T7108] ? __pfx_eth_type_trans+0x10/0x10 [ 94.759428][ T7108] ? __build_skb_around+0x278/0x3b0 [ 94.760771][ T7108] netif_receive_skb_list+0x4f/0x4a0 [ 94.762151][ T7108] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 94.763778][ T7108] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 94.765497][ T7108] ? bpf_test_timer_continue+0x150/0x3d0 [ 94.766979][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 94.768338][ T7108] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 94.769818][ T7108] ? try_to_wake_up+0x154/0x14f0 [ 94.771103][ T7108] ? __pfx_try_to_wake_up+0x10/0x10 [ 94.772417][ T7108] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 94.773937][ T7108] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 94.775266][ T7108] ? 0xffffffffa0004340 [ 94.776355][ T7108] ? 0xffffffffa0004340 [ 94.777385][ T7108] ? 0xffffffffa0004340 [ 94.778446][ T7108] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 94.779944][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 94.781296][ T7108] ? lock_acquire+0x2f/0xb0 [ 94.782493][ T7108] ? __fget_files+0x40/0x3f0 [ 94.783704][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 94.785171][ T7108] ? fput+0x30/0x390 [ 94.786171][ T7108] ? __bpf_prog_get+0xa0/0x290 [ 94.787385][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 94.788916][ T7108] __sys_bpf+0xfc6/0x49a0 [ 94.790029][ T7108] ? __pfx___sys_bpf+0x10/0x10 [ 94.791293][ T7108] ? __schedule+0xe5d/0x5730 [ 94.792520][ T7108] ? __fget_files+0x23a/0x3f0 [ 94.793762][ T7108] ? do_futex+0x123/0x350 [ 94.794875][ T7108] ? __pfx_do_futex+0x10/0x10 [ 94.796118][ T7108] ? xfd_validate_state+0x5d/0x180 [ 94.797449][ T7108] ? rcu_is_watching+0x12/0xc0 [ 94.798705][ T7108] __x64_sys_bpf+0x78/0xc0 [ 94.799888][ T7108] ? lockdep_hardirqs_on+0x7c/0x110 [ 94.801204][ T7108] do_syscall_64+0xcd/0x250 [ 94.802394][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.803930][ T7108] RIP: 0033:0x7efff3f7e719 [ 94.805073][ T7108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.809785][ T7108] RSP: 002b:00007efff4e28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 94.811844][ T7108] RAX: ffffffffffffffda RBX: 00007efff4136058 RCX: 00007efff3f7e719 [ 94.813762][ T7108] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 94.815697][ T7108] RBP: 00007efff3ff132e R08: 0000000000000000 R09: 0000000000000000 [ 94.817648][ T7108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.819741][ T7108] R13: 0000000000000000 R14: 00007efff4136058 R15: 00007fffd7704958 [ 94.822063][ T7108] [ 94.823152][ T7108] BUG: Bad page state in process syz.0.327 pfn:271ad [ 94.825105][ T7108] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2 pfn:0x271ad [ 94.827918][ T7108] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 94.830082][ T7108] raw: 00fff00000000000 dead000000000040 ffff888036779000 0000000000000000 [ 94.832367][ T7108] raw: 0000000000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 94.834587][ T7108] page dumped because: page_pool leak [ 94.835980][ T7108] page_owner tracks the page as allocated [ 94.837521][ T7108] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7108, tgid 7096 (syz.0.327), ts 92314529244, free_ts 92288333376 [ 94.841980][ T7108] post_alloc_hook+0x2d1/0x350 [ 94.843292][ T7108] get_page_from_freelist+0x101e/0x3070 [ 94.844938][ T7108] __alloc_pages_noprof+0x223/0x25a0 [ 94.846571][ T7108] alloc_pages_bulk_noprof+0x77c/0x1110 [ 94.848293][ T7108] __page_pool_alloc_pages_slow+0x18f/0x770 [ 94.849825][ T7108] page_pool_alloc_netmem+0xc4/0x160 [ 94.851265][ T7108] page_pool_alloc_pages+0x1a/0x60 [ 94.852693][ T7108] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 94.854423][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 94.855837][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 94.857343][ T7108] __sys_bpf+0xfc6/0x49a0 [ 94.858458][ T7108] __x64_sys_bpf+0x78/0xc0 [ 94.859634][ T7108] do_syscall_64+0xcd/0x250 [ 94.860857][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.862478][ T7108] page last free pid 6091 tgid 6091 stack trace: [ 94.864345][ T7108] free_unref_page+0x5f4/0xdc0 [ 94.865701][ T7108] vfree+0x17a/0x890 [ 94.866954][ T7108] delayed_vfree_work+0x56/0x70 [ 94.868474][ T7108] process_one_work+0x9c5/0x1ba0 [ 94.869885][ T7108] worker_thread+0x6c8/0xf00 [ 94.871347][ T7108] kthread+0x2c1/0x3a0 [ 94.872494][ T7108] ret_from_fork+0x45/0x80 [ 94.873926][ T7108] ret_from_fork_asm+0x1a/0x30 [ 94.875598][ T7108] Modules linked in: [ 94.876899][ T7108] CPU: 3 UID: 0 PID: 7108 Comm: syz.0.327 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 94.880539][ T7108] Tainted: [B]=BAD_PAGE [ 94.881660][ T7108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 94.884538][ T7108] Call Trace: [ 94.885441][ T7108] [ 94.886252][ T7108] dump_stack_lvl+0x16c/0x1f0 [ 94.887522][ T7108] bad_page+0xb3/0x1f0 [ 94.888638][ T7108] ? __pfx_bad_page+0x10/0x10 [ 94.889913][ T7108] ? page_bad_reason+0x9d/0x1e0 [ 94.891258][ T7108] free_unref_page+0x657/0xdc0 [ 94.892555][ T7108] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 94.894151][ T7108] ? __phys_addr+0xc6/0x150 [ 94.895396][ T7108] skb_free_head+0xa0/0x1d0 [ 94.896619][ T7108] skb_release_data+0x560/0x730 [ 94.897903][ T7108] sk_skb_reason_drop+0x129/0x1a0 [ 94.899246][ T7108] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 94.901451][ T7108] ? kernel_text_address+0x8d/0x100 [ 94.903044][ T7108] ? hlock_class+0x4e/0x130 [ 94.904708][ T7108] ? __lock_acquire+0x163e/0x3ce0 [ 94.906635][ T7108] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 94.909071][ T7108] ? hlock_class+0x4e/0x130 [ 94.910436][ T7108] ? __lock_acquire+0xbdd/0x3ce0 [ 94.911742][ T7108] ? __pfx___lock_acquire+0x10/0x10 [ 94.913114][ T7108] __netif_receive_skb_list_core+0x357/0x950 [ 94.914703][ T7108] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 94.916395][ T7108] ? trace_lock_acquire+0x14a/0x1d0 [ 94.917761][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 94.919659][ T7108] ? lock_acquire+0x2f/0xb0 [ 94.920895][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 94.922756][ T7108] netif_receive_skb_list_internal+0x753/0xdb0 [ 94.924580][ T7108] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 94.926319][ T7108] ? __pfx_eth_type_trans+0x10/0x10 [ 94.927845][ T7108] ? __build_skb_around+0x278/0x3b0 [ 94.929333][ T7108] netif_receive_skb_list+0x4f/0x4a0 [ 94.930741][ T7108] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 94.932704][ T7108] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 94.934699][ T7108] ? bpf_test_timer_continue+0x150/0x3d0 [ 94.936407][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 94.938084][ T7108] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 94.939893][ T7108] ? try_to_wake_up+0x154/0x14f0 [ 94.941415][ T7108] ? __pfx_try_to_wake_up+0x10/0x10 [ 94.942803][ T7108] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 94.944362][ T7108] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 94.945796][ T7108] ? 0xffffffffa0004340 [ 94.947285][ T7108] ? 0xffffffffa0004340 [ 94.948394][ T7108] ? 0xffffffffa0004340 [ 94.949493][ T7108] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 94.951152][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 94.952570][ T7108] ? lock_acquire+0x2f/0xb0 [ 94.953770][ T7108] ? __fget_files+0x40/0x3f0 [ 94.955013][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 94.956547][ T7108] ? fput+0x30/0x390 [ 94.957592][ T7108] ? __bpf_prog_get+0xa0/0x290 [ 94.958881][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 94.960773][ T7108] __sys_bpf+0xfc6/0x49a0 [ 94.962221][ T7108] ? __pfx___sys_bpf+0x10/0x10 [ 94.963588][ T7108] ? __schedule+0xe5d/0x5730 [ 94.965139][ T7108] ? __fget_files+0x23a/0x3f0 [ 94.966394][ T7108] ? do_futex+0x123/0x350 [ 94.967651][ T7108] ? __pfx_do_futex+0x10/0x10 [ 94.968892][ T7108] ? xfd_validate_state+0x5d/0x180 [ 94.970393][ T7108] ? rcu_is_watching+0x12/0xc0 [ 94.971674][ T7108] __x64_sys_bpf+0x78/0xc0 [ 94.972865][ T7108] ? lockdep_hardirqs_on+0x7c/0x110 [ 94.974259][ T7108] do_syscall_64+0xcd/0x250 [ 94.975473][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.977025][ T7108] RIP: 0033:0x7efff3f7e719 [ 94.978228][ T7108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.983839][ T7108] RSP: 002b:00007efff4e28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 94.986291][ T7108] RAX: ffffffffffffffda RBX: 00007efff4136058 RCX: 00007efff3f7e719 [ 94.988760][ T7108] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 94.990977][ T7108] RBP: 00007efff3ff132e R08: 0000000000000000 R09: 0000000000000000 [ 94.993244][ T7108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.995387][ T7108] R13: 0000000000000000 R14: 00007efff4136058 R15: 00007fffd7704958 [ 94.997460][ T7108] [ 94.998368][ T7108] BUG: Bad page state in process syz.0.327 pfn:4db77 [ 95.000124][ T7108] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4db77 [ 95.002777][ T7108] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 95.004649][ T7108] raw: 00fff00000000000 dead000000000040 ffff888036779000 0000000000000000 [ 95.007262][ T7108] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 95.009484][ T7108] page dumped because: page_pool leak [ 95.010897][ T7108] page_owner tracks the page as allocated [ 95.012365][ T7108] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7108, tgid 7096 (syz.0.327), ts 92314524141, free_ts 92288336747 [ 95.016656][ T7108] post_alloc_hook+0x2d1/0x350 [ 95.018111][ T7108] get_page_from_freelist+0x101e/0x3070 [ 95.019632][ T7108] __alloc_pages_noprof+0x223/0x25a0 [ 95.021297][ T7108] alloc_pages_bulk_noprof+0x77c/0x1110 [ 95.023083][ T7108] __page_pool_alloc_pages_slow+0x18f/0x770 [ 95.024822][ T7108] page_pool_alloc_netmem+0xc4/0x160 [ 95.026587][ T7108] page_pool_alloc_pages+0x1a/0x60 [ 95.028076][ T7108] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 95.029931][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 95.031368][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 95.032805][ T7108] __sys_bpf+0xfc6/0x49a0 [ 95.033919][ T7108] __x64_sys_bpf+0x78/0xc0 [ 95.035059][ T7108] do_syscall_64+0xcd/0x250 [ 95.036196][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.037793][ T7108] page last free pid 6091 tgid 6091 stack trace: [ 95.039599][ T7108] free_unref_page+0x5f4/0xdc0 [ 95.040850][ T7108] vfree+0x17a/0x890 [ 95.042002][ T7108] delayed_vfree_work+0x56/0x70 [ 95.043315][ T7108] process_one_work+0x9c5/0x1ba0 [ 95.044640][ T7108] worker_thread+0x6c8/0xf00 [ 95.046095][ T7108] kthread+0x2c1/0x3a0 [ 95.047274][ T7108] ret_from_fork+0x45/0x80 [ 95.048730][ T7108] ret_from_fork_asm+0x1a/0x30 [ 95.050196][ T7108] Modules linked in: [ 95.051342][ T7108] CPU: 3 UID: 0 PID: 7108 Comm: syz.0.327 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 95.054506][ T7108] Tainted: [B]=BAD_PAGE [ 95.055555][ T7108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 95.058370][ T7108] Call Trace: [ 95.059315][ T7108] [ 95.060321][ T7108] dump_stack_lvl+0x16c/0x1f0 [ 95.061664][ T7108] bad_page+0xb3/0x1f0 [ 95.062923][ T7108] ? __pfx_bad_page+0x10/0x10 [ 95.064158][ T7108] ? page_bad_reason+0x9d/0x1e0 [ 95.065441][ T7108] free_unref_page+0x657/0xdc0 [ 95.066677][ T7108] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 95.068380][ T7108] ? __phys_addr+0xc6/0x150 [ 95.069529][ T7108] skb_free_head+0xa0/0x1d0 [ 95.070792][ T7108] skb_release_data+0x560/0x730 [ 95.072036][ T7108] sk_skb_reason_drop+0x129/0x1a0 [ 95.073312][ T7108] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 95.075013][ T7108] ? kernel_text_address+0x8d/0x100 [ 95.076334][ T7108] ? hlock_class+0x4e/0x130 [ 95.077500][ T7108] ? __lock_acquire+0x163e/0x3ce0 [ 95.078853][ T7108] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 95.080704][ T7108] ? hlock_class+0x4e/0x130 [ 95.081848][ T7108] ? __lock_acquire+0xbdd/0x3ce0 [ 95.083571][ T7108] ? __pfx___lock_acquire+0x10/0x10 [ 95.084902][ T7108] __netif_receive_skb_list_core+0x357/0x950 [ 95.086696][ T7108] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 95.088410][ T7108] ? trace_lock_acquire+0x14a/0x1d0 [ 95.089935][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 95.091864][ T7108] ? lock_acquire+0x2f/0xb0 [ 95.093114][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 95.094817][ T7108] netif_receive_skb_list_internal+0x753/0xdb0 [ 95.096796][ T7108] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 95.098878][ T7108] ? __pfx_eth_type_trans+0x10/0x10 [ 95.100796][ T7108] ? __build_skb_around+0x278/0x3b0 [ 95.103154][ T7108] netif_receive_skb_list+0x4f/0x4a0 [ 95.105148][ T7108] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 95.106841][ T7108] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 95.108574][ T7108] ? bpf_test_timer_continue+0x150/0x3d0 [ 95.110061][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 95.111456][ T7108] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 95.112996][ T7108] ? try_to_wake_up+0x154/0x14f0 [ 95.114323][ T7108] ? __pfx_try_to_wake_up+0x10/0x10 [ 95.115707][ T7108] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 95.117387][ T7108] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 95.119080][ T7108] ? 0xffffffffa0004340 [ 95.120327][ T7108] ? 0xffffffffa0004340 [ 95.121663][ T7108] ? 0xffffffffa0004340 [ 95.123243][ T7108] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 95.124965][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 95.126426][ T7108] ? lock_acquire+0x2f/0xb0 [ 95.127629][ T7108] ? __fget_files+0x40/0x3f0 [ 95.128836][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 95.130384][ T7108] ? fput+0x30/0x390 [ 95.131432][ T7108] ? __bpf_prog_get+0xa0/0x290 [ 95.132692][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 95.134168][ T7108] __sys_bpf+0xfc6/0x49a0 [ 95.135312][ T7108] ? __pfx___sys_bpf+0x10/0x10 [ 95.136695][ T7108] ? __schedule+0xe5d/0x5730 [ 95.137913][ T7108] ? __fget_files+0x23a/0x3f0 [ 95.139241][ T7108] ? do_futex+0x123/0x350 [ 95.140489][ T7108] ? __pfx_do_futex+0x10/0x10 [ 95.141753][ T7108] ? xfd_validate_state+0x5d/0x180 [ 95.143109][ T7108] ? rcu_is_watching+0x12/0xc0 [ 95.144366][ T7108] __x64_sys_bpf+0x78/0xc0 [ 95.145536][ T7108] ? lockdep_hardirqs_on+0x7c/0x110 [ 95.146912][ T7108] do_syscall_64+0xcd/0x250 [ 95.148114][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.149643][ T7108] RIP: 0033:0x7efff3f7e719 [ 95.150825][ T7108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.155925][ T7108] RSP: 002b:00007efff4e28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 95.158104][ T7108] RAX: ffffffffffffffda RBX: 00007efff4136058 RCX: 00007efff3f7e719 [ 95.160143][ T7108] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 95.162235][ T7108] RBP: 00007efff3ff132e R08: 0000000000000000 R09: 0000000000000000 [ 95.164293][ T7108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.166359][ T7108] R13: 0000000000000000 R14: 00007efff4136058 R15: 00007fffd7704958 [ 95.168441][ T7108] [ 95.169376][ T7108] BUG: Bad page state in process syz.0.327 pfn:4db6e [ 95.171143][ T7108] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4db6e [ 95.173418][ T7108] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 95.175287][ T7108] raw: 00fff00000000000 dead000000000040 ffff888036779000 0000000000000000 [ 95.177554][ T7108] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 95.179883][ T7108] page dumped because: page_pool leak [ 95.181760][ T7108] page_owner tracks the page as allocated [ 95.183847][ T7108] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7108, tgid 7096 (syz.0.327), ts 92314518974, free_ts 92288340409 [ 95.188735][ T7108] post_alloc_hook+0x2d1/0x350 [ 95.190233][ T7108] get_page_from_freelist+0x101e/0x3070 [ 95.191689][ T7108] __alloc_pages_noprof+0x223/0x25a0 [ 95.193088][ T7108] alloc_pages_bulk_noprof+0x77c/0x1110 [ 95.194606][ T7108] __page_pool_alloc_pages_slow+0x18f/0x770 [ 95.196172][ T7108] page_pool_alloc_netmem+0xc4/0x160 [ 95.197627][ T7108] page_pool_alloc_pages+0x1a/0x60 [ 95.198925][ T7108] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 95.200521][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 95.201895][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 95.203202][ T7108] __sys_bpf+0xfc6/0x49a0 [ 95.204281][ T7108] __x64_sys_bpf+0x78/0xc0 [ 95.205426][ T7108] do_syscall_64+0xcd/0x250 [ 95.206583][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.208167][ T7108] page last free pid 6091 tgid 6091 stack trace: [ 95.209737][ T7108] free_unref_page+0x5f4/0xdc0 [ 95.210965][ T7108] vfree+0x17a/0x890 [ 95.211968][ T7108] delayed_vfree_work+0x56/0x70 [ 95.213200][ T7108] process_one_work+0x9c5/0x1ba0 [ 95.214491][ T7108] worker_thread+0x6c8/0xf00 [ 95.215665][ T7108] kthread+0x2c1/0x3a0 [ 95.216675][ T7108] ret_from_fork+0x45/0x80 [ 95.217885][ T7108] ret_from_fork_asm+0x1a/0x30 [ 95.219411][ T7108] Modules linked in: [ 95.220488][ T7108] CPU: 3 UID: 0 PID: 7108 Comm: syz.0.327 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 95.223779][ T7108] Tainted: [B]=BAD_PAGE [ 95.224880][ T7108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 95.227696][ T7108] Call Trace: [ 95.228668][ T7108] [ 95.229417][ T7108] dump_stack_lvl+0x16c/0x1f0 [ 95.230617][ T7108] bad_page+0xb3/0x1f0 [ 95.231712][ T7108] ? __pfx_bad_page+0x10/0x10 [ 95.233143][ T7108] ? page_bad_reason+0x9d/0x1e0 [ 95.234391][ T7108] free_unref_page+0x657/0xdc0 [ 95.235652][ T7108] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 95.237190][ T7108] ? __phys_addr+0xc6/0x150 [ 95.238363][ T7108] skb_free_head+0xa0/0x1d0 [ 95.239570][ T7108] skb_release_data+0x560/0x730 [ 95.240869][ T7108] sk_skb_reason_drop+0x129/0x1a0 [ 95.242170][ T7108] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 95.243909][ T7108] ? kernel_text_address+0x8d/0x100 [ 95.245242][ T7108] ? hlock_class+0x4e/0x130 [ 95.246658][ T7108] ? __lock_acquire+0x163e/0x3ce0 [ 95.248185][ T7108] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 95.250179][ T7108] ? hlock_class+0x4e/0x130 [ 95.251689][ T7108] ? __lock_acquire+0xbdd/0x3ce0 [ 95.253369][ T7108] ? __pfx___lock_acquire+0x10/0x10 [ 95.254893][ T7108] __netif_receive_skb_list_core+0x357/0x950 [ 95.256560][ T7108] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 95.258392][ T7108] ? trace_lock_acquire+0x14a/0x1d0 [ 95.259766][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 95.261307][ T7108] ? lock_acquire+0x2f/0xb0 [ 95.262514][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 95.264245][ T7108] netif_receive_skb_list_internal+0x753/0xdb0 [ 95.265788][ T7108] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 95.267487][ T7108] ? __pfx_eth_type_trans+0x10/0x10 [ 95.268826][ T7108] ? __build_skb_around+0x278/0x3b0 [ 95.270213][ T7108] netif_receive_skb_list+0x4f/0x4a0 [ 95.271783][ T7108] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 95.273553][ T7108] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 95.275269][ T7108] ? bpf_test_timer_continue+0x150/0x3d0 [ 95.276742][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 95.278117][ T7108] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 95.279872][ T7108] ? try_to_wake_up+0x154/0x14f0 [ 95.281303][ T7108] ? __pfx_try_to_wake_up+0x10/0x10 [ 95.282950][ T7108] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 95.284624][ T7108] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 95.286174][ T7108] ? 0xffffffffa0004340 [ 95.287518][ T7108] ? 0xffffffffa0004340 [ 95.288592][ T7108] ? 0xffffffffa0004340 [ 95.289675][ T7108] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 95.291423][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 95.293020][ T7108] ? lock_acquire+0x2f/0xb0 [ 95.294262][ T7108] ? __fget_files+0x40/0x3f0 [ 95.295497][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 95.297053][ T7108] ? fput+0x30/0x390 [ 95.298110][ T7108] ? __bpf_prog_get+0xa0/0x290 [ 95.299380][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 95.300927][ T7108] __sys_bpf+0xfc6/0x49a0 [ 95.302256][ T7108] ? __pfx___sys_bpf+0x10/0x10 [ 95.303874][ T7108] ? __schedule+0xe5d/0x5730 [ 95.306427][ T7108] ? __fget_files+0x23a/0x3f0 [ 95.307731][ T7108] ? do_futex+0x123/0x350 [ 95.308878][ T7108] ? __pfx_do_futex+0x10/0x10 [ 95.310223][ T7108] ? xfd_validate_state+0x5d/0x180 [ 95.311624][ T7108] ? rcu_is_watching+0x12/0xc0 [ 95.312983][ T7108] __x64_sys_bpf+0x78/0xc0 [ 95.314251][ T7108] ? lockdep_hardirqs_on+0x7c/0x110 [ 95.315609][ T7108] do_syscall_64+0xcd/0x250 [ 95.316787][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.318350][ T7108] RIP: 0033:0x7efff3f7e719 [ 95.319518][ T7108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.325363][ T7108] RSP: 002b:00007efff4e28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 95.327512][ T7108] RAX: ffffffffffffffda RBX: 00007efff4136058 RCX: 00007efff3f7e719 [ 95.329596][ T7108] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 95.331845][ T7108] RBP: 00007efff3ff132e R08: 0000000000000000 R09: 0000000000000000 [ 95.333965][ T7108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.336107][ T7108] R13: 0000000000000000 R14: 00007efff4136058 R15: 00007fffd7704958 [ 95.338216][ T7108] [ 95.339360][ T7108] BUG: Bad page state in process syz.0.327 pfn:48132 [ 95.341282][ T7108] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x7fe7536be pfn:0x48132 [ 95.343824][ T7108] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 95.345667][ T7108] raw: 00fff00000000000 dead000000000040 ffff888036779000 0000000000000000 [ 95.348628][ T7108] raw: 00000007fe7536be 0000000000000001 00000000ffffffff 0000000000000000 [ 95.350959][ T7108] page dumped because: page_pool leak [ 95.352354][ T7108] page_owner tracks the page as allocated [ 95.353852][ T7108] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7108, tgid 7096 (syz.0.327), ts 92314514171, free_ts 92288344530 [ 95.358256][ T7108] post_alloc_hook+0x2d1/0x350 [ 95.359611][ T7108] get_page_from_freelist+0x101e/0x3070 [ 95.361117][ T7108] __alloc_pages_noprof+0x223/0x25a0 [ 95.362828][ T7108] alloc_pages_bulk_noprof+0x77c/0x1110 [ 95.364405][ T7108] __page_pool_alloc_pages_slow+0x18f/0x770 [ 95.365982][ T7108] page_pool_alloc_netmem+0xc4/0x160 [ 95.367376][ T7108] page_pool_alloc_pages+0x1a/0x60 [ 95.368711][ T7108] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 95.370280][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 95.371714][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 95.373126][ T7108] __sys_bpf+0xfc6/0x49a0 [ 95.374261][ T7108] __x64_sys_bpf+0x78/0xc0 [ 95.375372][ T7108] do_syscall_64+0xcd/0x250 [ 95.376553][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.378150][ T7108] page last free pid 6091 tgid 6091 stack trace: [ 95.379803][ T7108] free_unref_page+0x5f4/0xdc0 [ 95.381033][ T7108] vfree+0x17a/0x890 [ 95.382074][ T7108] delayed_vfree_work+0x56/0x70 [ 95.383547][ T7108] process_one_work+0x9c5/0x1ba0 [ 95.384880][ T7108] worker_thread+0x6c8/0xf00 [ 95.386194][ T7108] kthread+0x2c1/0x3a0 [ 95.387333][ T7108] ret_from_fork+0x45/0x80 [ 95.388720][ T7108] ret_from_fork_asm+0x1a/0x30 [ 95.390162][ T7108] Modules linked in: [ 95.391385][ T7108] CPU: 3 UID: 0 PID: 7108 Comm: syz.0.327 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 95.394610][ T7108] Tainted: [B]=BAD_PAGE [ 95.395703][ T7108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 95.398486][ T7108] Call Trace: [ 95.399853][ T7108] [ 95.400673][ T7108] dump_stack_lvl+0x16c/0x1f0 [ 95.401905][ T7108] bad_page+0xb3/0x1f0 [ 95.402969][ T7108] ? __pfx_bad_page+0x10/0x10 [ 95.404552][ T7108] ? page_bad_reason+0x9d/0x1e0 [ 95.405839][ T7108] free_unref_page+0x657/0xdc0 [ 95.407068][ T7108] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 95.408651][ T7108] ? __phys_addr+0xc6/0x150 [ 95.409917][ T7108] skb_free_head+0xa0/0x1d0 [ 95.411148][ T7108] skb_release_data+0x560/0x730 [ 95.412450][ T7108] sk_skb_reason_drop+0x129/0x1a0 [ 95.413787][ T7108] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 95.415568][ T7108] ? kernel_text_address+0x8d/0x100 [ 95.416920][ T7108] ? hlock_class+0x4e/0x130 [ 95.418141][ T7108] ? __lock_acquire+0x163e/0x3ce0 [ 95.419480][ T7108] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 95.421346][ T7108] ? hlock_class+0x4e/0x130 [ 95.422577][ T7108] ? __lock_acquire+0xbdd/0x3ce0 [ 95.423882][ T7108] ? __pfx___lock_acquire+0x10/0x10 [ 95.425214][ T7108] __netif_receive_skb_list_core+0x357/0x950 [ 95.426823][ T7108] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 95.428527][ T7108] ? trace_lock_acquire+0x14a/0x1d0 [ 95.429911][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 95.431588][ T7108] ? lock_acquire+0x2f/0xb0 [ 95.432874][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 95.434644][ T7108] netif_receive_skb_list_internal+0x753/0xdb0 [ 95.436459][ T7108] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 95.438446][ T7108] ? __pfx_eth_type_trans+0x10/0x10 [ 95.439928][ T7108] ? __build_skb_around+0x278/0x3b0 [ 95.441342][ T7108] netif_receive_skb_list+0x4f/0x4a0 [ 95.442754][ T7108] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 95.444405][ T7108] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 95.446163][ T7108] ? bpf_test_timer_continue+0x150/0x3d0 [ 95.447838][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 95.449417][ T7108] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 95.451002][ T7108] ? try_to_wake_up+0x154/0x14f0 [ 95.452302][ T7108] ? __pfx_try_to_wake_up+0x10/0x10 [ 95.453658][ T7108] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 95.455222][ T7108] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 95.456686][ T7108] ? 0xffffffffa0004340 [ 95.457806][ T7108] ? 0xffffffffa0004340 [ 95.458923][ T7108] ? 0xffffffffa0004340 [ 95.459999][ T7108] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 95.461554][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 95.462987][ T7108] ? lock_acquire+0x2f/0xb0 [ 95.464192][ T7108] ? __fget_files+0x40/0x3f0 [ 95.465418][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 95.466961][ T7108] ? fput+0x30/0x390 [ 95.467997][ T7108] ? __bpf_prog_get+0xa0/0x290 [ 95.469193][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 95.470730][ T7108] __sys_bpf+0xfc6/0x49a0 [ 95.471866][ T7108] ? __pfx___sys_bpf+0x10/0x10 [ 95.473127][ T7108] ? __schedule+0xe5d/0x5730 [ 95.474415][ T7108] ? __fget_files+0x23a/0x3f0 [ 95.475699][ T7108] ? do_futex+0x123/0x350 [ 95.476855][ T7108] ? __pfx_do_futex+0x10/0x10 [ 95.478084][ T7108] ? xfd_validate_state+0x5d/0x180 [ 95.479489][ T7108] ? rcu_is_watching+0x12/0xc0 [ 95.480748][ T7108] __x64_sys_bpf+0x78/0xc0 [ 95.481965][ T7108] ? lockdep_hardirqs_on+0x7c/0x110 [ 95.483358][ T7108] do_syscall_64+0xcd/0x250 [ 95.484559][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.486237][ T7108] RIP: 0033:0x7efff3f7e719 [ 95.487417][ T7108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.492509][ T7108] RSP: 002b:00007efff4e28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 95.494665][ T7108] RAX: ffffffffffffffda RBX: 00007efff4136058 RCX: 00007efff3f7e719 [ 95.496695][ T7108] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 95.498919][ T7108] RBP: 00007efff3ff132e R08: 0000000000000000 R09: 0000000000000000 [ 95.501702][ T7108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.504638][ T7108] R13: 0000000000000000 R14: 00007efff4136058 R15: 00007fffd7704958 [ 95.506922][ T7108] [ 95.507836][ T7108] BUG: Bad page state in process syz.0.327 pfn:4ee58 [ 95.509579][ T7108] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804ee59e00 pfn:0x4ee58 [ 95.512189][ T7108] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 95.514230][ T7108] raw: 00fff00000000000 dead000000000040 ffff888036779000 0000000000000000 [ 95.516606][ T7108] raw: ffff88804ee59e00 0000000000000001 00000000ffffffff 0000000000000000 [ 95.519290][ T7108] page dumped because: page_pool leak [ 95.520823][ T7108] page_owner tracks the page as allocated [ 95.522727][ T7108] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7108, tgid 7096 (syz.0.327), ts 92314509471, free_ts 92288347974 [ 95.527568][ T7108] post_alloc_hook+0x2d1/0x350 [ 95.528784][ T7108] get_page_from_freelist+0x101e/0x3070 [ 95.530240][ T7108] __alloc_pages_noprof+0x223/0x25a0 [ 95.531592][ T7108] alloc_pages_bulk_noprof+0x77c/0x1110 [ 95.533031][ T7108] __page_pool_alloc_pages_slow+0x18f/0x770 [ 95.534579][ T7108] page_pool_alloc_netmem+0xc4/0x160 [ 95.535930][ T7108] page_pool_alloc_pages+0x1a/0x60 [ 95.537323][ T7108] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 95.538894][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 95.540359][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 95.542013][ T7108] __sys_bpf+0xfc6/0x49a0 [ 95.543187][ T7108] __x64_sys_bpf+0x78/0xc0 [ 95.544340][ T7108] do_syscall_64+0xcd/0x250 [ 95.545608][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.547325][ T7108] page last free pid 6091 tgid 6091 stack trace: [ 95.548937][ T7108] free_unref_page+0x5f4/0xdc0 [ 95.550352][ T7108] vfree+0x17a/0x890 [ 95.551486][ T7108] delayed_vfree_work+0x56/0x70 [ 95.552829][ T7108] process_one_work+0x9c5/0x1ba0 [ 95.554149][ T7108] worker_thread+0x6c8/0xf00 [ 95.555373][ T7108] kthread+0x2c1/0x3a0 [ 95.556465][ T7108] ret_from_fork+0x45/0x80 [ 95.557720][ T7108] ret_from_fork_asm+0x1a/0x30 [ 95.559352][ T7108] Modules linked in: [ 95.560687][ T7108] CPU: 3 UID: 0 PID: 7108 Comm: syz.0.327 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 95.564401][ T7108] Tainted: [B]=BAD_PAGE [ 95.565643][ T7108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 95.569166][ T7108] Call Trace: [ 95.570247][ T7108] [ 95.571186][ T7108] dump_stack_lvl+0x16c/0x1f0 [ 95.572615][ T7108] bad_page+0xb3/0x1f0 [ 95.573782][ T7108] ? __pfx_bad_page+0x10/0x10 [ 95.575131][ T7108] ? page_bad_reason+0x9d/0x1e0 [ 95.576433][ T7108] free_unref_page+0x657/0xdc0 [ 95.577703][ T7108] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 95.579528][ T7108] ? __phys_addr+0xc6/0x150 [ 95.580809][ T7108] skb_free_head+0xa0/0x1d0 [ 95.582106][ T7108] skb_release_data+0x560/0x730 [ 95.583853][ T7108] sk_skb_reason_drop+0x129/0x1a0 [ 95.585213][ T7108] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 95.587365][ T7108] ? kernel_text_address+0x8d/0x100 [ 95.588736][ T7108] ? hlock_class+0x4e/0x130 [ 95.589962][ T7108] ? __lock_acquire+0x163e/0x3ce0 [ 95.591290][ T7108] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 95.593117][ T7108] ? hlock_class+0x4e/0x130 [ 95.594295][ T7108] ? __lock_acquire+0xbdd/0x3ce0 [ 95.595560][ T7108] ? __pfx___lock_acquire+0x10/0x10 [ 95.596943][ T7108] __netif_receive_skb_list_core+0x357/0x950 [ 95.598539][ T7108] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 95.600244][ T7108] ? trace_lock_acquire+0x14a/0x1d0 [ 95.601608][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 95.603290][ T7108] ? lock_acquire+0x2f/0xb0 [ 95.604479][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 95.606126][ T7108] netif_receive_skb_list_internal+0x753/0xdb0 [ 95.607750][ T7108] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 95.609653][ T7108] ? __pfx_eth_type_trans+0x10/0x10 [ 95.611074][ T7108] ? __build_skb_around+0x278/0x3b0 [ 95.612471][ T7108] netif_receive_skb_list+0x4f/0x4a0 [ 95.613979][ T7108] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 95.615658][ T7108] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 95.617443][ T7108] ? bpf_test_timer_continue+0x150/0x3d0 [ 95.619064][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 95.620455][ T7108] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 95.622006][ T7108] ? try_to_wake_up+0x154/0x14f0 [ 95.623283][ T7108] ? __pfx_try_to_wake_up+0x10/0x10 [ 95.624590][ T7108] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 95.626104][ T7108] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 95.627444][ T7108] ? 0xffffffffa0004340 [ 95.628531][ T7108] ? 0xffffffffa0004340 [ 95.629615][ T7108] ? 0xffffffffa0004340 [ 95.630691][ T7108] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 95.632223][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 95.633642][ T7108] ? lock_acquire+0x2f/0xb0 [ 95.634821][ T7108] ? __fget_files+0x40/0x3f0 [ 95.636017][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 95.637544][ T7108] ? fput+0x30/0x390 [ 95.638587][ T7108] ? __bpf_prog_get+0xa0/0x290 [ 95.639863][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 95.641421][ T7108] __sys_bpf+0xfc6/0x49a0 [ 95.642718][ T7108] ? __pfx___sys_bpf+0x10/0x10 [ 95.644017][ T7108] ? __schedule+0xe5d/0x5730 [ 95.645574][ T7108] ? __fget_files+0x23a/0x3f0 [ 95.646910][ T7108] ? do_futex+0x123/0x350 [ 95.648123][ T7108] ? __pfx_do_futex+0x10/0x10 [ 95.649460][ T7108] ? xfd_validate_state+0x5d/0x180 [ 95.650836][ T7108] ? rcu_is_watching+0x12/0xc0 [ 95.652147][ T7108] __x64_sys_bpf+0x78/0xc0 [ 95.653335][ T7108] ? lockdep_hardirqs_on+0x7c/0x110 [ 95.654737][ T7108] do_syscall_64+0xcd/0x250 [ 95.655958][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.657553][ T7108] RIP: 0033:0x7efff3f7e719 [ 95.658758][ T7108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.664149][ T7108] RSP: 002b:00007efff4e28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 95.666750][ T7108] RAX: ffffffffffffffda RBX: 00007efff4136058 RCX: 00007efff3f7e719 [ 95.669135][ T7108] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 95.671549][ T7108] RBP: 00007efff3ff132e R08: 0000000000000000 R09: 0000000000000000 [ 95.673609][ T7108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.675674][ T7108] R13: 0000000000000000 R14: 00007efff4136058 R15: 00007fffd7704958 [ 95.677714][ T7108] [ 95.678649][ T7108] BUG: Bad page state in process syz.0.327 pfn:4e0bc [ 95.680463][ T7108] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804e0bca50 pfn:0x4e0bc [ 95.683238][ T7108] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 95.685134][ T7108] raw: 00fff00000000000 dead000000000040 ffff888036779000 0000000000000000 [ 95.687613][ T7108] raw: ffff88804e0bca50 0000000000000001 00000000ffffffff 0000000000000000 [ 95.689978][ T7108] page dumped because: page_pool leak [ 95.691395][ T7108] page_owner tracks the page as allocated [ 95.692827][ T7108] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7108, tgid 7096 (syz.0.327), ts 92314504519, free_ts 92288351461 [ 95.697003][ T7108] post_alloc_hook+0x2d1/0x350 [ 95.698445][ T7108] get_page_from_freelist+0x101e/0x3070 [ 95.699950][ T7108] __alloc_pages_noprof+0x223/0x25a0 [ 95.701381][ T7108] alloc_pages_bulk_noprof+0x77c/0x1110 [ 95.702908][ T7108] __page_pool_alloc_pages_slow+0x18f/0x770 [ 95.704412][ T7108] page_pool_alloc_netmem+0xc4/0x160 [ 95.705717][ T7108] page_pool_alloc_pages+0x1a/0x60 [ 95.707105][ T7108] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 95.709007][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 95.710357][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 95.711787][ T7108] __sys_bpf+0xfc6/0x49a0 [ 95.712940][ T7108] __x64_sys_bpf+0x78/0xc0 [ 95.714142][ T7108] do_syscall_64+0xcd/0x250 [ 95.715354][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.716909][ T7108] page last free pid 6091 tgid 6091 stack trace: [ 95.718648][ T7108] free_unref_page+0x5f4/0xdc0 [ 95.719939][ T7108] vfree+0x17a/0x890 [ 95.721263][ T7108] delayed_vfree_work+0x56/0x70 [ 95.722581][ T7108] process_one_work+0x9c5/0x1ba0 [ 95.723886][ T7108] worker_thread+0x6c8/0xf00 [ 95.725101][ T7108] kthread+0x2c1/0x3a0 [ 95.726264][ T7108] ret_from_fork+0x45/0x80 [ 95.727598][ T7108] ret_from_fork_asm+0x1a/0x30 [ 95.729009][ T7108] Modules linked in: [ 95.730281][ T7108] CPU: 3 UID: 0 PID: 7108 Comm: syz.0.327 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 95.734022][ T7108] Tainted: [B]=BAD_PAGE [ 95.735278][ T7108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 95.738089][ T7108] Call Trace: [ 95.739116][ T7108] [ 95.739962][ T7108] dump_stack_lvl+0x16c/0x1f0 [ 95.741608][ T7108] bad_page+0xb3/0x1f0 [ 95.742701][ T7108] ? __pfx_bad_page+0x10/0x10 [ 95.743890][ T7108] ? page_bad_reason+0x9d/0x1e0 [ 95.745321][ T7108] free_unref_page+0x657/0xdc0 [ 95.746786][ T7108] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 95.748519][ T7108] ? __phys_addr+0xc6/0x150 [ 95.749737][ T7108] skb_free_head+0xa0/0x1d0 [ 95.751132][ T7108] skb_release_data+0x560/0x730 [ 95.752420][ T7108] sk_skb_reason_drop+0x129/0x1a0 [ 95.753686][ T7108] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 95.755396][ T7108] ? kernel_text_address+0x8d/0x100 [ 95.756700][ T7108] ? hlock_class+0x4e/0x130 [ 95.757898][ T7108] ? __lock_acquire+0x163e/0x3ce0 [ 95.759427][ T7108] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 95.761222][ T7108] ? hlock_class+0x4e/0x130 [ 95.762555][ T7108] ? __lock_acquire+0xbdd/0x3ce0 [ 95.763854][ T7108] ? __pfx___lock_acquire+0x10/0x10 [ 95.765408][ T7108] __netif_receive_skb_list_core+0x357/0x950 [ 95.767070][ T7108] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 95.769188][ T7108] ? trace_lock_acquire+0x14a/0x1d0 [ 95.770603][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 95.772249][ T7108] ? lock_acquire+0x2f/0xb0 [ 95.773457][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 95.775078][ T7108] netif_receive_skb_list_internal+0x753/0xdb0 [ 95.776643][ T7108] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 95.778457][ T7108] ? __pfx_eth_type_trans+0x10/0x10 [ 95.779915][ T7108] ? __build_skb_around+0x278/0x3b0 [ 95.781448][ T7108] netif_receive_skb_list+0x4f/0x4a0 [ 95.783086][ T7108] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 95.785047][ T7108] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 95.787027][ T7108] ? bpf_test_timer_continue+0x150/0x3d0 [ 95.788762][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 95.790206][ T7108] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 95.791663][ T7108] ? try_to_wake_up+0x154/0x14f0 [ 95.792946][ T7108] ? __pfx_try_to_wake_up+0x10/0x10 [ 95.794224][ T7108] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 95.795722][ T7108] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 95.797050][ T7108] ? 0xffffffffa0004340 [ 95.798140][ T7108] ? 0xffffffffa0004340 [ 95.799221][ T7108] ? 0xffffffffa0004340 [ 95.800430][ T7108] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 95.801967][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 95.803448][ T7108] ? lock_acquire+0x2f/0xb0 [ 95.804707][ T7108] ? __fget_files+0x40/0x3f0 [ 95.805933][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 95.807480][ T7108] ? fput+0x30/0x390 [ 95.808507][ T7108] ? __bpf_prog_get+0xa0/0x290 [ 95.809779][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 95.811312][ T7108] __sys_bpf+0xfc6/0x49a0 [ 95.812374][ T7108] ? __pfx___sys_bpf+0x10/0x10 [ 95.813597][ T7108] ? __schedule+0xe5d/0x5730 [ 95.814872][ T7108] ? __fget_files+0x23a/0x3f0 [ 95.816171][ T7108] ? do_futex+0x123/0x350 [ 95.817494][ T7108] ? __pfx_do_futex+0x10/0x10 [ 95.819006][ T7108] ? xfd_validate_state+0x5d/0x180 [ 95.821122][ T7108] ? rcu_is_watching+0x12/0xc0 [ 95.822732][ T7108] __x64_sys_bpf+0x78/0xc0 [ 95.824017][ T7108] ? lockdep_hardirqs_on+0x7c/0x110 [ 95.825564][ T7108] do_syscall_64+0xcd/0x250 [ 95.826887][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.828568][ T7108] RIP: 0033:0x7efff3f7e719 [ 95.829882][ T7108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.835134][ T7108] RSP: 002b:00007efff4e28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 95.837285][ T7108] RAX: ffffffffffffffda RBX: 00007efff4136058 RCX: 00007efff3f7e719 [ 95.839368][ T7108] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 95.841685][ T7108] RBP: 00007efff3ff132e R08: 0000000000000000 R09: 0000000000000000 [ 95.844001][ T7108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.846652][ T7108] R13: 0000000000000000 R14: 00007efff4136058 R15: 00007fffd7704958 [ 95.848921][ T7108] [ 95.849932][ T7108] BUG: Bad page state in process syz.0.327 pfn:490cd [ 95.852026][ T7108] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x700000002 pfn:0x490cd [ 95.854523][ T7108] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 95.856543][ T7108] raw: 00fff00000000000 dead000000000040 ffff888036779000 0000000000000000 [ 95.859348][ T7108] raw: 0000000700000002 0000000000000001 00000000ffffffff 0000000000000000 [ 95.861864][ T7108] page dumped because: page_pool leak [ 95.863612][ T7108] page_owner tracks the page as allocated [ 95.865233][ T7108] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7108, tgid 7096 (syz.0.327), ts 92314499618, free_ts 92288369990 [ 95.869758][ T7108] post_alloc_hook+0x2d1/0x350 [ 95.871020][ T7108] get_page_from_freelist+0x101e/0x3070 [ 95.872488][ T7108] __alloc_pages_noprof+0x223/0x25a0 [ 95.873803][ T7108] alloc_pages_bulk_noprof+0x77c/0x1110 [ 95.875186][ T7108] __page_pool_alloc_pages_slow+0x18f/0x770 [ 95.876764][ T7108] page_pool_alloc_netmem+0xc4/0x160 [ 95.878196][ T7108] page_pool_alloc_pages+0x1a/0x60 [ 95.879481][ T7108] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 95.881147][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 95.882892][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 95.884398][ T7108] __sys_bpf+0xfc6/0x49a0 [ 95.885549][ T7108] __x64_sys_bpf+0x78/0xc0 [ 95.886679][ T7108] do_syscall_64+0xcd/0x250 [ 95.888074][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.889809][ T7108] page last free pid 6091 tgid 6091 stack trace: [ 95.891604][ T7108] free_unref_page+0x5f4/0xdc0 [ 95.892865][ T7108] vfree+0x17a/0x890 [ 95.893881][ T7108] delayed_vfree_work+0x56/0x70 [ 95.895151][ T7108] process_one_work+0x9c5/0x1ba0 [ 95.896400][ T7108] worker_thread+0x6c8/0xf00 [ 95.897702][ T7108] kthread+0x2c1/0x3a0 [ 95.898790][ T7108] ret_from_fork+0x45/0x80 [ 95.900177][ T7108] ret_from_fork_asm+0x1a/0x30 [ 95.901654][ T7108] Modules linked in: [ 95.902915][ T7108] CPU: 3 UID: 0 PID: 7108 Comm: syz.0.327 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 95.906141][ T7108] Tainted: [B]=BAD_PAGE [ 95.907243][ T7108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 95.910514][ T7108] Call Trace: [ 95.911514][ T7108] [ 95.912389][ T7108] dump_stack_lvl+0x16c/0x1f0 [ 95.913760][ T7108] bad_page+0xb3/0x1f0 [ 95.915014][ T7108] ? __pfx_bad_page+0x10/0x10 [ 95.916281][ T7108] ? page_bad_reason+0x9d/0x1e0 [ 95.917566][ T7108] free_unref_page+0x657/0xdc0 [ 95.918987][ T7108] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 95.921149][ T7108] ? __phys_addr+0xc6/0x150 [ 95.922362][ T7108] skb_free_head+0xa0/0x1d0 [ 95.924177][ T7108] skb_release_data+0x560/0x730 [ 95.926136][ T7108] sk_skb_reason_drop+0x129/0x1a0 [ 95.927506][ T7108] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 95.929481][ T7108] ? kernel_text_address+0x8d/0x100 [ 95.930847][ T7108] ? hlock_class+0x4e/0x130 [ 95.932048][ T7108] ? __lock_acquire+0x163e/0x3ce0 [ 95.933371][ T7108] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 95.935211][ T7108] ? hlock_class+0x4e/0x130 [ 95.936431][ T7108] ? __lock_acquire+0xbdd/0x3ce0 [ 95.937710][ T7108] ? __pfx___lock_acquire+0x10/0x10 [ 95.939097][ T7108] __netif_receive_skb_list_core+0x357/0x950 [ 95.941003][ T7108] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 95.942852][ T7108] ? trace_lock_acquire+0x14a/0x1d0 [ 95.944382][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 95.946309][ T7108] ? lock_acquire+0x2f/0xb0 [ 95.947524][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 95.949211][ T7108] netif_receive_skb_list_internal+0x753/0xdb0 [ 95.950845][ T7108] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 95.952591][ T7108] ? __pfx_eth_type_trans+0x10/0x10 [ 95.953975][ T7108] ? __build_skb_around+0x278/0x3b0 [ 95.955348][ T7108] netif_receive_skb_list+0x4f/0x4a0 [ 95.956820][ T7108] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 95.958452][ T7108] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 95.960333][ T7108] ? bpf_test_timer_continue+0x150/0x3d0 [ 95.962200][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 95.963687][ T7108] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 95.965305][ T7108] ? try_to_wake_up+0x154/0x14f0 [ 95.966846][ T7108] ? __pfx_try_to_wake_up+0x10/0x10 [ 95.968548][ T7108] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 95.970117][ T7108] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 95.971631][ T7108] ? 0xffffffffa0004340 [ 95.972856][ T7108] ? 0xffffffffa0004340 [ 95.974111][ T7108] ? 0xffffffffa0004340 [ 95.975381][ T7108] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 95.977343][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 95.978765][ T7108] ? lock_acquire+0x2f/0xb0 [ 95.980167][ T7108] ? __fget_files+0x40/0x3f0 [ 95.981851][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 95.983997][ T7108] ? fput+0x30/0x390 [ 95.985039][ T7108] ? __bpf_prog_get+0xa0/0x290 [ 95.986306][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 95.987796][ T7108] __sys_bpf+0xfc6/0x49a0 [ 95.988903][ T7108] ? __pfx___sys_bpf+0x10/0x10 [ 95.990382][ T7108] ? __schedule+0xe5d/0x5730 [ 95.991869][ T7108] ? __fget_files+0x23a/0x3f0 [ 95.993507][ T7108] ? do_futex+0x123/0x350 [ 95.994969][ T7108] ? __pfx_do_futex+0x10/0x10 [ 95.996420][ T7108] ? xfd_validate_state+0x5d/0x180 [ 95.998160][ T7108] ? rcu_is_watching+0x12/0xc0 [ 95.999607][ T7108] __x64_sys_bpf+0x78/0xc0 [ 96.000936][ T7108] ? lockdep_hardirqs_on+0x7c/0x110 [ 96.002417][ T7108] do_syscall_64+0xcd/0x250 [ 96.004135][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.006520][ T7108] RIP: 0033:0x7efff3f7e719 [ 96.008072][ T7108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.014390][ T7108] RSP: 002b:00007efff4e28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 96.017199][ T7108] RAX: ffffffffffffffda RBX: 00007efff4136058 RCX: 00007efff3f7e719 [ 96.020715][ T7108] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 96.023738][ T7108] RBP: 00007efff3ff132e R08: 0000000000000000 R09: 0000000000000000 [ 96.026534][ T7108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.029430][ T7108] R13: 0000000000000000 R14: 00007efff4136058 R15: 00007fffd7704958 [ 96.031989][ T7108] [ 96.033185][ T7108] BUG: Bad page state in process syz.0.327 pfn:23390 [ 96.035511][ T7108] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888023391e00 pfn:0x23390 [ 96.038614][ T7108] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 96.040513][ T7108] raw: 00fff00000000000 dead000000000040 ffff888036779000 0000000000000000 [ 96.042847][ T7108] raw: ffff888023391e00 0000000000000001 00000000ffffffff 0000000000000000 [ 96.045259][ T7108] page dumped because: page_pool leak [ 96.046875][ T7108] page_owner tracks the page as allocated [ 96.048550][ T7108] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7108, tgid 7096 (syz.0.327), ts 92314494945, free_ts 92288374510 [ 96.053262][ T7108] post_alloc_hook+0x2d1/0x350 [ 96.054606][ T7108] get_page_from_freelist+0x101e/0x3070 [ 96.056158][ T7108] __alloc_pages_noprof+0x223/0x25a0 [ 96.057971][ T7108] alloc_pages_bulk_noprof+0x77c/0x1110 [ 96.059819][ T7108] __page_pool_alloc_pages_slow+0x18f/0x770 [ 96.062030][ T7108] page_pool_alloc_netmem+0xc4/0x160 [ 96.063906][ T7108] page_pool_alloc_pages+0x1a/0x60 [ 96.065323][ T7108] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 96.067184][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 96.068803][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 96.070615][ T7108] __sys_bpf+0xfc6/0x49a0 [ 96.072007][ T7108] __x64_sys_bpf+0x78/0xc0 [ 96.073401][ T7108] do_syscall_64+0xcd/0x250 [ 96.074656][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.076184][ T7108] page last free pid 6091 tgid 6091 stack trace: [ 96.077875][ T7108] free_unref_page+0x5f4/0xdc0 [ 96.079136][ T7108] vfree+0x17a/0x890 [ 96.080176][ T7108] delayed_vfree_work+0x56/0x70 [ 96.082017][ T7108] process_one_work+0x9c5/0x1ba0 [ 96.083501][ T7108] worker_thread+0x6c8/0xf00 [ 96.084924][ T7108] kthread+0x2c1/0x3a0 [ 96.086283][ T7108] ret_from_fork+0x45/0x80 [ 96.087649][ T7108] ret_from_fork_asm+0x1a/0x30 [ 96.089018][ T7108] Modules linked in: [ 96.090273][ T7108] CPU: 3 UID: 0 PID: 7108 Comm: syz.0.327 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 96.093548][ T7108] Tainted: [B]=BAD_PAGE [ 96.094672][ T7108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 96.097745][ T7108] Call Trace: [ 96.098980][ T7108] [ 96.099846][ T7108] dump_stack_lvl+0x16c/0x1f0 [ 96.101268][ T7108] bad_page+0xb3/0x1f0 [ 96.102602][ T7108] ? __pfx_bad_page+0x10/0x10 [ 96.104105][ T7108] ? page_bad_reason+0x9d/0x1e0 [ 96.105669][ T7108] free_unref_page+0x657/0xdc0 [ 96.106988][ T7108] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 96.108562][ T7108] ? __phys_addr+0xc6/0x150 [ 96.109730][ T7108] skb_free_head+0xa0/0x1d0 [ 96.110924][ T7108] skb_release_data+0x560/0x730 [ 96.112187][ T7108] sk_skb_reason_drop+0x129/0x1a0 [ 96.113524][ T7108] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 96.115222][ T7108] ? kernel_text_address+0x8d/0x100 [ 96.116531][ T7108] ? hlock_class+0x4e/0x130 [ 96.117925][ T7108] ? __lock_acquire+0x163e/0x3ce0 [ 96.119254][ T7108] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 96.121343][ T7108] ? hlock_class+0x4e/0x130 [ 96.122813][ T7108] ? __lock_acquire+0xbdd/0x3ce0 [ 96.124206][ T7108] ? __pfx___lock_acquire+0x10/0x10 [ 96.125818][ T7108] __netif_receive_skb_list_core+0x357/0x950 [ 96.127490][ T7108] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 96.129321][ T7108] ? trace_lock_acquire+0x14a/0x1d0 [ 96.130811][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 96.132528][ T7108] ? lock_acquire+0x2f/0xb0 [ 96.133716][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 96.135358][ T7108] netif_receive_skb_list_internal+0x753/0xdb0 [ 96.137131][ T7108] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 96.138995][ T7108] ? __pfx_eth_type_trans+0x10/0x10 [ 96.140503][ T7108] ? __build_skb_around+0x278/0x3b0 [ 96.141908][ T7108] netif_receive_skb_list+0x4f/0x4a0 [ 96.143333][ T7108] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 96.145046][ T7108] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 96.146948][ T7108] ? bpf_test_timer_continue+0x150/0x3d0 [ 96.148432][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 96.149905][ T7108] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 96.151428][ T7108] ? try_to_wake_up+0x154/0x14f0 [ 96.152704][ T7108] ? __pfx_try_to_wake_up+0x10/0x10 [ 96.154047][ T7108] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 96.155636][ T7108] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 96.157018][ T7108] ? 0xffffffffa0004340 [ 96.158118][ T7108] ? 0xffffffffa0004340 [ 96.159185][ T7108] ? 0xffffffffa0004340 [ 96.160504][ T7108] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 96.162280][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 96.163740][ T7108] ? lock_acquire+0x2f/0xb0 [ 96.165002][ T7108] ? __fget_files+0x40/0x3f0 [ 96.166339][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 96.167835][ T7108] ? fput+0x30/0x390 [ 96.168988][ T7108] ? __bpf_prog_get+0xa0/0x290 [ 96.170550][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 96.172352][ T7108] __sys_bpf+0xfc6/0x49a0 [ 96.173727][ T7108] ? __pfx___sys_bpf+0x10/0x10 [ 96.175000][ T7108] ? __schedule+0xe5d/0x5730 [ 96.176176][ T7108] ? __fget_files+0x23a/0x3f0 [ 96.177411][ T7108] ? do_futex+0x123/0x350 [ 96.178574][ T7108] ? __pfx_do_futex+0x10/0x10 [ 96.179951][ T7108] ? xfd_validate_state+0x5d/0x180 [ 96.181519][ T7108] ? rcu_is_watching+0x12/0xc0 [ 96.183176][ T7108] __x64_sys_bpf+0x78/0xc0 [ 96.184357][ T7108] ? lockdep_hardirqs_on+0x7c/0x110 [ 96.186057][ T7108] do_syscall_64+0xcd/0x250 [ 96.187462][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.189186][ T7108] RIP: 0033:0x7efff3f7e719 [ 96.190445][ T7108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.195519][ T7108] RSP: 002b:00007efff4e28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 96.197720][ T7108] RAX: ffffffffffffffda RBX: 00007efff4136058 RCX: 00007efff3f7e719 [ 96.199896][ T7108] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 96.202093][ T7108] RBP: 00007efff3ff132e R08: 0000000000000000 R09: 0000000000000000 [ 96.204220][ T7108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.206497][ T7108] R13: 0000000000000000 R14: 00007efff4136058 R15: 00007fffd7704958 [ 96.208613][ T7108] [ 96.209753][ T7108] BUG: Bad page state in process syz.0.327 pfn:23391 [ 96.211840][ T7108] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2 pfn:0x23391 [ 96.214114][ T7108] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 96.215989][ T7108] raw: 00fff00000000000 dead000000000040 ffff888036779000 0000000000000000 [ 96.218208][ T7108] raw: 0000000000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 96.220690][ T7108] page dumped because: page_pool leak [ 96.222092][ T7108] page_owner tracks the page as allocated [ 96.223532][ T7108] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7108, tgid 7096 (syz.0.327), ts 92314490200, free_ts 92288378362 [ 96.227959][ T7108] post_alloc_hook+0x2d1/0x350 [ 96.229428][ T7108] get_page_from_freelist+0x101e/0x3070 [ 96.230891][ T7108] __alloc_pages_noprof+0x223/0x25a0 [ 96.232235][ T7108] alloc_pages_bulk_noprof+0x77c/0x1110 [ 96.233579][ T7108] __page_pool_alloc_pages_slow+0x18f/0x770 [ 96.235196][ T7108] page_pool_alloc_netmem+0xc4/0x160 [ 96.236703][ T7108] page_pool_alloc_pages+0x1a/0x60 [ 96.238213][ T7108] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 96.240101][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 96.241548][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 96.243055][ T7108] __sys_bpf+0xfc6/0x49a0 [ 96.244147][ T7108] __x64_sys_bpf+0x78/0xc0 [ 96.245306][ T7108] do_syscall_64+0xcd/0x250 [ 96.246508][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.248106][ T7108] page last free pid 6091 tgid 6091 stack trace: [ 96.249728][ T7108] free_unref_page+0x5f4/0xdc0 [ 96.251172][ T7108] vfree+0x17a/0x890 [ 96.252198][ T7108] delayed_vfree_work+0x56/0x70 [ 96.253453][ T7108] process_one_work+0x9c5/0x1ba0 [ 96.254738][ T7108] worker_thread+0x6c8/0xf00 [ 96.255951][ T7108] kthread+0x2c1/0x3a0 [ 96.257113][ T7108] ret_from_fork+0x45/0x80 [ 96.258314][ T7108] ret_from_fork_asm+0x1a/0x30 [ 96.259665][ T7108] Modules linked in: [ 96.260882][ T7108] CPU: 3 UID: 0 PID: 7108 Comm: syz.0.327 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 96.264199][ T7108] Tainted: [B]=BAD_PAGE [ 96.265461][ T7108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 96.268985][ T7108] Call Trace: [ 96.270004][ T7108] [ 96.270809][ T7108] dump_stack_lvl+0x16c/0x1f0 [ 96.272055][ T7108] bad_page+0xb3/0x1f0 [ 96.273073][ T7108] ? __pfx_bad_page+0x10/0x10 [ 96.274233][ T7108] ? page_bad_reason+0x9d/0x1e0 [ 96.275445][ T7108] free_unref_page+0x657/0xdc0 [ 96.276612][ T7108] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 96.278172][ T7108] ? __phys_addr+0xc6/0x150 [ 96.279483][ T7108] skb_free_head+0xa0/0x1d0 [ 96.280879][ T7108] skb_release_data+0x560/0x730 [ 96.282361][ T7108] sk_skb_reason_drop+0x129/0x1a0 [ 96.283812][ T7108] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 96.285627][ T7108] ? kernel_text_address+0x8d/0x100 [ 96.287553][ T7108] ? hlock_class+0x4e/0x130 [ 96.289095][ T7108] ? __lock_acquire+0x163e/0x3ce0 [ 96.290461][ T7108] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 96.292376][ T7108] ? hlock_class+0x4e/0x130 [ 96.293724][ T7108] ? __lock_acquire+0xbdd/0x3ce0 [ 96.295118][ T7108] ? __pfx___lock_acquire+0x10/0x10 [ 96.296554][ T7108] __netif_receive_skb_list_core+0x357/0x950 [ 96.298151][ T7108] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 96.300296][ T7108] ? trace_lock_acquire+0x14a/0x1d0 [ 96.301769][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 96.303820][ T7108] ? lock_acquire+0x2f/0xb0 [ 96.305018][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 96.306646][ T7108] netif_receive_skb_list_internal+0x753/0xdb0 [ 96.308231][ T7108] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 96.309959][ T7108] ? __pfx_eth_type_trans+0x10/0x10 [ 96.311324][ T7108] ? __build_skb_around+0x278/0x3b0 [ 96.312843][ T7108] netif_receive_skb_list+0x4f/0x4a0 [ 96.314321][ T7108] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 96.315987][ T7108] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 96.317692][ T7108] ? bpf_test_timer_continue+0x150/0x3d0 [ 96.319232][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 96.320605][ T7108] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 96.322186][ T7108] ? try_to_wake_up+0x154/0x14f0 [ 96.323490][ T7108] ? __pfx_try_to_wake_up+0x10/0x10 [ 96.324784][ T7108] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 96.326314][ T7108] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 96.327696][ T7108] ? 0xffffffffa0004340 [ 96.328730][ T7108] ? 0xffffffffa0004340 [ 96.329753][ T7108] ? 0xffffffffa0004340 [ 96.330765][ T7108] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 96.332304][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 96.333640][ T7108] ? lock_acquire+0x2f/0xb0 [ 96.334796][ T7108] ? __fget_files+0x40/0x3f0 [ 96.335953][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 96.337361][ T7108] ? fput+0x30/0x390 [ 96.338345][ T7108] ? __bpf_prog_get+0xa0/0x290 [ 96.339577][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 96.341094][ T7108] __sys_bpf+0xfc6/0x49a0 [ 96.342209][ T7108] ? __pfx___sys_bpf+0x10/0x10 [ 96.343437][ T7108] ? __schedule+0xe5d/0x5730 [ 96.344589][ T7108] ? __fget_files+0x23a/0x3f0 [ 96.345757][ T7108] ? do_futex+0x123/0x350 [ 96.346868][ T7108] ? __pfx_do_futex+0x10/0x10 [ 96.348077][ T7108] ? xfd_validate_state+0x5d/0x180 [ 96.349400][ T7108] ? rcu_is_watching+0x12/0xc0 [ 96.350640][ T7108] __x64_sys_bpf+0x78/0xc0 [ 96.351797][ T7108] ? lockdep_hardirqs_on+0x7c/0x110 [ 96.353328][ T7108] do_syscall_64+0xcd/0x250 [ 96.354672][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.356527][ T7108] RIP: 0033:0x7efff3f7e719 [ 96.357815][ T7108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.363067][ T7108] RSP: 002b:00007efff4e28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 96.365211][ T7108] RAX: ffffffffffffffda RBX: 00007efff4136058 RCX: 00007efff3f7e719 [ 96.367367][ T7108] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 96.369445][ T7108] RBP: 00007efff3ff132e R08: 0000000000000000 R09: 0000000000000000 [ 96.371548][ T7108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.373700][ T7108] R13: 0000000000000000 R14: 00007efff4136058 R15: 00007fffd7704958 [ 96.375667][ T7108] [ 96.376558][ T7108] BUG: Bad page state in process syz.0.327 pfn:4c9e4 [ 96.378274][ T7108] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804c9e4000 pfn:0x4c9e4 [ 96.380938][ T7108] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 96.382740][ T7108] raw: 00fff00000000000 dead000000000040 ffff888036779000 0000000000000000 [ 96.384876][ T7108] raw: ffff88804c9e4000 0000000000000001 00000000ffffffff 0000000000000000 [ 96.386985][ T7108] page dumped because: page_pool leak [ 96.388373][ T7108] page_owner tracks the page as allocated [ 96.389897][ T7108] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7108, tgid 7096 (syz.0.327), ts 92314484952, free_ts 92288382244 [ 96.394155][ T7108] post_alloc_hook+0x2d1/0x350 [ 96.395377][ T7108] get_page_from_freelist+0x101e/0x3070 [ 96.396800][ T7108] __alloc_pages_noprof+0x223/0x25a0 [ 96.398213][ T7108] alloc_pages_bulk_noprof+0x77c/0x1110 [ 96.399626][ T7108] __page_pool_alloc_pages_slow+0x18f/0x770 [ 96.401179][ T7108] page_pool_alloc_netmem+0xc4/0x160 [ 96.402907][ T7108] page_pool_alloc_pages+0x1a/0x60 [ 96.404308][ T7108] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 96.405914][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 96.407375][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 96.408891][ T7108] __sys_bpf+0xfc6/0x49a0 [ 96.410152][ T7108] __x64_sys_bpf+0x78/0xc0 [ 96.411410][ T7108] do_syscall_64+0xcd/0x250 [ 96.412610][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.414183][ T7108] page last free pid 6091 tgid 6091 stack trace: [ 96.415903][ T7108] free_unref_page+0x5f4/0xdc0 [ 96.417251][ T7108] vfree+0x17a/0x890 [ 96.418292][ T7108] delayed_vfree_work+0x56/0x70 [ 96.419554][ T7108] process_one_work+0x9c5/0x1ba0 [ 96.420841][ T7108] worker_thread+0x6c8/0xf00 [ 96.422081][ T7108] kthread+0x2c1/0x3a0 [ 96.423167][ T7108] ret_from_fork+0x45/0x80 [ 96.424343][ T7108] ret_from_fork_asm+0x1a/0x30 [ 96.425689][ T7108] Modules linked in: [ 96.426695][ T7108] CPU: 3 UID: 0 PID: 7108 Comm: syz.0.327 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 96.429809][ T7108] Tainted: [B]=BAD_PAGE [ 96.430961][ T7108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 96.433858][ T7108] Call Trace: [ 96.434747][ T7108] [ 96.435528][ T7108] dump_stack_lvl+0x16c/0x1f0 [ 96.436770][ T7108] bad_page+0xb3/0x1f0 [ 96.437844][ T7108] ? __pfx_bad_page+0x10/0x10 [ 96.439289][ T7108] ? page_bad_reason+0x9d/0x1e0 [ 96.440687][ T7108] free_unref_page+0x657/0xdc0 [ 96.441983][ T7108] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 96.443688][ T7108] ? __phys_addr+0xc6/0x150 [ 96.445211][ T7108] skb_free_head+0xa0/0x1d0 [ 96.446498][ T7108] skb_release_data+0x560/0x730 [ 96.447836][ T7108] sk_skb_reason_drop+0x129/0x1a0 [ 96.449217][ T7108] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 96.451031][ T7108] ? kernel_text_address+0x8d/0x100 [ 96.452422][ T7108] ? hlock_class+0x4e/0x130 [ 96.453629][ T7108] ? __lock_acquire+0x163e/0x3ce0 [ 96.454959][ T7108] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 96.456815][ T7108] ? hlock_class+0x4e/0x130 [ 96.458031][ T7108] ? __lock_acquire+0xbdd/0x3ce0 [ 96.459651][ T7108] ? __pfx___lock_acquire+0x10/0x10 [ 96.461140][ T7108] __netif_receive_skb_list_core+0x357/0x950 [ 96.462742][ T7108] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 96.464449][ T7108] ? trace_lock_acquire+0x14a/0x1d0 [ 96.465819][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 96.467508][ T7108] ? lock_acquire+0x2f/0xb0 [ 96.468706][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 96.470374][ T7108] netif_receive_skb_list_internal+0x753/0xdb0 [ 96.472000][ T7108] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 96.473744][ T7108] ? __pfx_eth_type_trans+0x10/0x10 [ 96.475119][ T7108] ? __build_skb_around+0x278/0x3b0 [ 96.476509][ T7108] netif_receive_skb_list+0x4f/0x4a0 [ 96.477900][ T7108] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 96.479539][ T7108] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 96.481209][ T7108] ? bpf_test_timer_continue+0x150/0x3d0 [ 96.482693][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 96.484082][ T7108] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 96.485609][ T7108] ? try_to_wake_up+0x154/0x14f0 [ 96.486919][ T7108] ? __pfx_try_to_wake_up+0x10/0x10 [ 96.488281][ T7108] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 96.489826][ T7108] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 96.491225][ T7108] ? 0xffffffffa0004340 [ 96.492321][ T7108] ? 0xffffffffa0004340 [ 96.493417][ T7108] ? 0xffffffffa0004340 [ 96.494509][ T7108] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 96.496050][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 96.497411][ T7108] ? lock_acquire+0x2f/0xb0 [ 96.498597][ T7108] ? __fget_files+0x40/0x3f0 [ 96.499823][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 96.501330][ T7108] ? fput+0x30/0x390 [ 96.502386][ T7108] ? __bpf_prog_get+0xa0/0x290 [ 96.503640][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 96.505169][ T7108] __sys_bpf+0xfc6/0x49a0 [ 96.506316][ T7108] ? __pfx___sys_bpf+0x10/0x10 [ 96.507571][ T7108] ? __schedule+0xe5d/0x5730 [ 96.508786][ T7108] ? __fget_files+0x23a/0x3f0 [ 96.510098][ T7108] ? do_futex+0x123/0x350 [ 96.511309][ T7108] ? __pfx_do_futex+0x10/0x10 [ 96.512570][ T7108] ? xfd_validate_state+0x5d/0x180 [ 96.513927][ T7108] ? rcu_is_watching+0x12/0xc0 [ 96.515241][ T7108] __x64_sys_bpf+0x78/0xc0 [ 96.516426][ T7108] ? lockdep_hardirqs_on+0x7c/0x110 [ 96.517787][ T7108] do_syscall_64+0xcd/0x250 [ 96.519044][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.520603][ T7108] RIP: 0033:0x7efff3f7e719 [ 96.522045][ T7108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.527176][ T7108] RSP: 002b:00007efff4e28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 96.529460][ T7108] RAX: ffffffffffffffda RBX: 00007efff4136058 RCX: 00007efff3f7e719 [ 96.531514][ T7108] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 96.533579][ T7108] RBP: 00007efff3ff132e R08: 0000000000000000 R09: 0000000000000000 [ 96.535661][ T7108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.537715][ T7108] R13: 0000000000000000 R14: 00007efff4136058 R15: 00007fffd7704958 [ 96.539799][ T7108] [ 96.540708][ T7108] BUG: Bad page state in process syz.0.327 pfn:4c9e5 [ 96.542430][ T7108] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2 pfn:0x4c9e5 [ 96.544689][ T7108] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 96.546565][ T7108] raw: 00fff00000000000 dead000000000040 ffff888036779000 0000000000000000 [ 96.548855][ T7108] raw: 0000000000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 96.551071][ T7108] page dumped because: page_pool leak [ 96.552464][ T7108] page_owner tracks the page as allocated [ 96.553908][ T7108] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7108, tgid 7096 (syz.0.327), ts 92314480175, free_ts 92288386121 [ 96.558289][ T7108] post_alloc_hook+0x2d1/0x350 [ 96.559564][ T7108] get_page_from_freelist+0x101e/0x3070 [ 96.561019][ T7108] __alloc_pages_noprof+0x223/0x25a0 [ 96.562691][ T7108] alloc_pages_bulk_noprof+0x77c/0x1110 [ 96.564408][ T7108] __page_pool_alloc_pages_slow+0x18f/0x770 [ 96.566166][ T7108] page_pool_alloc_netmem+0xc4/0x160 [ 96.567635][ T7108] page_pool_alloc_pages+0x1a/0x60 [ 96.569224][ T7108] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 96.570896][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 96.572395][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 96.573851][ T7108] __sys_bpf+0xfc6/0x49a0 [ 96.574994][ T7108] __x64_sys_bpf+0x78/0xc0 [ 96.576193][ T7108] do_syscall_64+0xcd/0x250 [ 96.577479][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.579047][ T7108] page last free pid 6091 tgid 6091 stack trace: [ 96.580702][ T7108] free_unref_page+0x5f4/0xdc0 [ 96.581993][ T7108] vfree+0x17a/0x890 [ 96.583023][ T7108] delayed_vfree_work+0x56/0x70 [ 96.584305][ T7108] process_one_work+0x9c5/0x1ba0 [ 96.585614][ T7108] worker_thread+0x6c8/0xf00 [ 96.586973][ T7108] kthread+0x2c1/0x3a0 [ 96.588127][ T7108] ret_from_fork+0x45/0x80 [ 96.589307][ T7108] ret_from_fork_asm+0x1a/0x30 [ 96.590694][ T7108] Modules linked in: [ 96.591742][ T7108] CPU: 3 UID: 0 PID: 7108 Comm: syz.0.327 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 96.594849][ T7108] Tainted: [B]=BAD_PAGE [ 96.595954][ T7108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 96.598753][ T7108] Call Trace: [ 96.599626][ T7108] [ 96.600731][ T7108] dump_stack_lvl+0x16c/0x1f0 [ 96.602123][ T7108] bad_page+0xb3/0x1f0 [ 96.603212][ T7108] ? __pfx_bad_page+0x10/0x10 [ 96.604606][ T7108] ? page_bad_reason+0x9d/0x1e0 [ 96.605901][ T7108] free_unref_page+0x657/0xdc0 [ 96.607182][ T7108] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 96.608752][ T7108] ? __phys_addr+0xc6/0x150 [ 96.609957][ T7108] skb_free_head+0xa0/0x1d0 [ 96.611176][ T7108] skb_release_data+0x560/0x730 [ 96.612468][ T7108] sk_skb_reason_drop+0x129/0x1a0 [ 96.613796][ T7108] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 96.615563][ T7108] ? kernel_text_address+0x8d/0x100 [ 96.616958][ T7108] ? hlock_class+0x4e/0x130 [ 96.618170][ T7108] ? __lock_acquire+0x163e/0x3ce0 [ 96.619502][ T7108] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 96.621462][ T7108] ? hlock_class+0x4e/0x130 [ 96.622858][ T7108] ? __lock_acquire+0xbdd/0x3ce0 [ 96.624227][ T7108] ? __pfx___lock_acquire+0x10/0x10 [ 96.625643][ T7108] __netif_receive_skb_list_core+0x357/0x950 [ 96.627377][ T7108] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 96.629101][ T7108] ? trace_lock_acquire+0x14a/0x1d0 [ 96.630493][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 96.632285][ T7108] ? lock_acquire+0x2f/0xb0 [ 96.633541][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 96.635382][ T7108] netif_receive_skb_list_internal+0x753/0xdb0 [ 96.637164][ T7108] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 96.639086][ T7108] ? __pfx_eth_type_trans+0x10/0x10 [ 96.640479][ T7108] ? __build_skb_around+0x278/0x3b0 [ 96.642054][ T7108] netif_receive_skb_list+0x4f/0x4a0 [ 96.643530][ T7108] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 96.645207][ T7108] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 96.647818][ T7108] ? bpf_test_timer_continue+0x150/0x3d0 [ 96.649296][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 96.650716][ T7108] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 96.652340][ T7108] ? try_to_wake_up+0x154/0x14f0 [ 96.653659][ T7108] ? __pfx_try_to_wake_up+0x10/0x10 [ 96.655043][ T7108] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 96.656616][ T7108] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 96.658032][ T7108] ? 0xffffffffa0004340 [ 96.659328][ T7108] ? 0xffffffffa0004340 [ 96.660447][ T7108] ? 0xffffffffa0004340 [ 96.661590][ T7108] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 96.663412][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 96.665091][ T7108] ? lock_acquire+0x2f/0xb0 [ 96.666485][ T7108] ? __fget_files+0x40/0x3f0 [ 96.667813][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 96.669471][ T7108] ? fput+0x30/0x390 [ 96.670848][ T7108] ? __bpf_prog_get+0xa0/0x290 [ 96.672239][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 96.673983][ T7108] __sys_bpf+0xfc6/0x49a0 [ 96.675135][ T7108] ? __pfx___sys_bpf+0x10/0x10 [ 96.676358][ T7108] ? __schedule+0xe5d/0x5730 [ 96.677602][ T7108] ? __fget_files+0x23a/0x3f0 [ 96.678872][ T7108] ? do_futex+0x123/0x350 [ 96.680209][ T7108] ? __pfx_do_futex+0x10/0x10 [ 96.681483][ T7108] ? xfd_validate_state+0x5d/0x180 [ 96.682853][ T7108] ? rcu_is_watching+0x12/0xc0 [ 96.684107][ T7108] __x64_sys_bpf+0x78/0xc0 [ 96.685290][ T7108] ? lockdep_hardirqs_on+0x7c/0x110 [ 96.686711][ T7108] do_syscall_64+0xcd/0x250 [ 96.687834][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.689365][ T7108] RIP: 0033:0x7efff3f7e719 [ 96.690698][ T7108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.695817][ T7108] RSP: 002b:00007efff4e28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 96.698021][ T7108] RAX: ffffffffffffffda RBX: 00007efff4136058 RCX: 00007efff3f7e719 [ 96.700837][ T7108] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 96.703025][ T7108] RBP: 00007efff3ff132e R08: 0000000000000000 R09: 0000000000000000 [ 96.705141][ T7108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.707210][ T7108] R13: 0000000000000000 R14: 00007efff4136058 R15: 00007fffd7704958 [ 96.709273][ T7108] [ 96.710217][ T7108] BUG: Bad page state in process syz.0.327 pfn:505ce [ 96.712121][ T7108] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880505ce000 pfn:0x505ce [ 96.714815][ T7108] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 96.716668][ T7108] raw: 00fff00000000000 dead000000000040 ffff888036779000 0000000000000000 [ 96.719170][ T7108] raw: ffff8880505ce000 0000000000000001 00000000ffffffff 0000000000000000 [ 96.721630][ T7108] page dumped because: page_pool leak [ 96.723228][ T7108] page_owner tracks the page as allocated [ 96.724880][ T7108] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7108, tgid 7096 (syz.0.327), ts 92314475143, free_ts 92288390041 [ 96.729376][ T7108] post_alloc_hook+0x2d1/0x350 [ 96.730846][ T7108] get_page_from_freelist+0x101e/0x3070 [ 96.732452][ T7108] __alloc_pages_noprof+0x223/0x25a0 [ 96.733814][ T7108] alloc_pages_bulk_noprof+0x77c/0x1110 [ 96.735207][ T7108] __page_pool_alloc_pages_slow+0x18f/0x770 [ 96.736704][ T7108] page_pool_alloc_netmem+0xc4/0x160 [ 96.738214][ T7108] page_pool_alloc_pages+0x1a/0x60 [ 96.739823][ T7108] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 96.741512][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 96.742911][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 96.744359][ T7108] __sys_bpf+0xfc6/0x49a0 [ 96.745490][ T7108] __x64_sys_bpf+0x78/0xc0 [ 96.746648][ T7108] do_syscall_64+0xcd/0x250 [ 96.747914][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.749478][ T7108] page last free pid 6091 tgid 6091 stack trace: [ 96.751134][ T7108] free_unref_page+0x5f4/0xdc0 [ 96.752383][ T7108] vfree+0x17a/0x890 [ 96.753950][ T7108] delayed_vfree_work+0x56/0x70 [ 96.755244][ T7108] process_one_work+0x9c5/0x1ba0 [ 96.756497][ T7108] worker_thread+0x6c8/0xf00 [ 96.758072][ T7108] kthread+0x2c1/0x3a0 [ 96.759144][ T7108] ret_from_fork+0x45/0x80 [ 96.760306][ T7108] ret_from_fork_asm+0x1a/0x30 [ 96.761557][ T7108] Modules linked in: [ 96.762610][ T7108] CPU: 3 UID: 0 PID: 7108 Comm: syz.0.327 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 96.765695][ T7108] Tainted: [B]=BAD_PAGE [ 96.766779][ T7108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 96.769521][ T7108] Call Trace: [ 96.770400][ T7108] [ 96.771163][ T7108] dump_stack_lvl+0x16c/0x1f0 [ 96.772488][ T7108] bad_page+0xb3/0x1f0 [ 96.773635][ T7108] ? __pfx_bad_page+0x10/0x10 [ 96.774914][ T7108] ? page_bad_reason+0x9d/0x1e0 [ 96.776238][ T7108] free_unref_page+0x657/0xdc0 [ 96.777541][ T7108] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 96.779214][ T7108] ? __phys_addr+0xc6/0x150 [ 96.780462][ T7108] skb_free_head+0xa0/0x1d0 [ 96.781744][ T7108] skb_release_data+0x560/0x730 [ 96.783063][ T7108] sk_skb_reason_drop+0x129/0x1a0 [ 96.784430][ T7108] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 96.786178][ T7108] ? kernel_text_address+0x8d/0x100 [ 96.787575][ T7108] ? hlock_class+0x4e/0x130 [ 96.788847][ T7108] ? __lock_acquire+0x163e/0x3ce0 [ 96.790391][ T7108] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 96.792334][ T7108] ? hlock_class+0x4e/0x130 [ 96.793854][ T7108] ? __lock_acquire+0xbdd/0x3ce0 [ 96.795385][ T7108] ? __pfx___lock_acquire+0x10/0x10 [ 96.796832][ T7108] __netif_receive_skb_list_core+0x357/0x950 [ 96.798594][ T7108] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 96.800345][ T7108] ? trace_lock_acquire+0x14a/0x1d0 [ 96.801801][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 96.803483][ T7108] ? lock_acquire+0x2f/0xb0 [ 96.804729][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 96.806544][ T7108] netif_receive_skb_list_internal+0x753/0xdb0 [ 96.808260][ T7108] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 96.810047][ T7108] ? __pfx_eth_type_trans+0x10/0x10 [ 96.811463][ T7108] ? __build_skb_around+0x278/0x3b0 [ 96.813106][ T7108] netif_receive_skb_list+0x4f/0x4a0 [ 96.814605][ T7108] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 96.816317][ T7108] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 96.818283][ T7108] ? bpf_test_timer_continue+0x150/0x3d0 [ 96.819992][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 96.821406][ T7108] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 96.822945][ T7108] ? try_to_wake_up+0x154/0x14f0 [ 96.824271][ T7108] ? __pfx_try_to_wake_up+0x10/0x10 [ 96.825643][ T7108] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 96.827293][ T7108] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 96.828785][ T7108] ? 0xffffffffa0004340 [ 96.830215][ T7108] ? 0xffffffffa0004340 [ 96.832418][ T7108] ? 0xffffffffa0004340 [ 96.833698][ T7108] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 96.835485][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 96.836973][ T7108] ? lock_acquire+0x2f/0xb0 [ 96.838250][ T7108] ? __fget_files+0x40/0x3f0 [ 96.839673][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 96.841257][ T7108] ? fput+0x30/0x390 [ 96.842393][ T7108] ? __bpf_prog_get+0xa0/0x290 [ 96.843650][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 96.845173][ T7108] __sys_bpf+0xfc6/0x49a0 [ 96.846304][ T7108] ? __pfx___sys_bpf+0x10/0x10 [ 96.847428][ T7108] ? __schedule+0xe5d/0x5730 [ 96.848650][ T7108] ? __fget_files+0x23a/0x3f0 [ 96.849885][ T7108] ? do_futex+0x123/0x350 [ 96.851126][ T7108] ? __pfx_do_futex+0x10/0x10 [ 96.852402][ T7108] ? xfd_validate_state+0x5d/0x180 [ 96.853792][ T7108] ? rcu_is_watching+0x12/0xc0 [ 96.855072][ T7108] __x64_sys_bpf+0x78/0xc0 [ 96.856270][ T7108] ? lockdep_hardirqs_on+0x7c/0x110 [ 96.858203][ T7108] do_syscall_64+0xcd/0x250 [ 96.859554][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.861090][ T7108] RIP: 0033:0x7efff3f7e719 [ 96.862251][ T7108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.867154][ T7108] RSP: 002b:00007efff4e28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 96.869451][ T7108] RAX: ffffffffffffffda RBX: 00007efff4136058 RCX: 00007efff3f7e719 [ 96.872450][ T7108] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 96.874996][ T7108] RBP: 00007efff3ff132e R08: 0000000000000000 R09: 0000000000000000 [ 96.877357][ T7108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.880015][ T7108] R13: 0000000000000000 R14: 00007efff4136058 R15: 00007fffd7704958 [ 96.882315][ T7108] [ 96.883611][ T7108] BUG: Bad page state in process syz.0.327 pfn:505cf [ 96.885667][ T7108] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2 pfn:0x505cf [ 96.888398][ T7108] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 96.890461][ T7108] raw: 00fff00000000000 dead000000000040 ffff888036779000 0000000000000000 [ 96.892690][ T7108] raw: 0000000000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 96.895237][ T7108] page dumped because: page_pool leak [ 96.896758][ T7108] page_owner tracks the page as allocated [ 96.898426][ T7108] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7108, tgid 7096 (syz.0.327), ts 92314470446, free_ts 92288393509 [ 96.902750][ T7108] post_alloc_hook+0x2d1/0x350 [ 96.903960][ T7108] get_page_from_freelist+0x101e/0x3070 [ 96.905332][ T7108] __alloc_pages_noprof+0x223/0x25a0 [ 96.906637][ T7108] alloc_pages_bulk_noprof+0x77c/0x1110 [ 96.908104][ T7108] __page_pool_alloc_pages_slow+0x18f/0x770 [ 96.909764][ T7108] page_pool_alloc_netmem+0xc4/0x160 [ 96.911122][ T7108] page_pool_alloc_pages+0x1a/0x60 [ 96.912443][ T7108] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 96.914289][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 96.915708][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 96.917211][ T7108] __sys_bpf+0xfc6/0x49a0 [ 96.918554][ T7108] __x64_sys_bpf+0x78/0xc0 [ 96.919708][ T7108] do_syscall_64+0xcd/0x250 [ 96.920919][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.922623][ T7108] page last free pid 6091 tgid 6091 stack trace: [ 96.924303][ T7108] free_unref_page+0x5f4/0xdc0 [ 96.925549][ T7108] vfree+0x17a/0x890 [ 96.926602][ T7108] delayed_vfree_work+0x56/0x70 [ 96.928005][ T7108] process_one_work+0x9c5/0x1ba0 [ 96.929368][ T7108] worker_thread+0x6c8/0xf00 [ 96.930587][ T7108] kthread+0x2c1/0x3a0 [ 96.931769][ T7108] ret_from_fork+0x45/0x80 [ 96.933322][ T7108] ret_from_fork_asm+0x1a/0x30 [ 96.934779][ T7108] Modules linked in: [ 96.936011][ T7108] CPU: 3 UID: 0 PID: 7108 Comm: syz.0.327 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 96.939767][ T7108] Tainted: [B]=BAD_PAGE [ 96.940889][ T7108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 96.943717][ T7108] Call Trace: [ 96.944587][ T7108] [ 96.945394][ T7108] dump_stack_lvl+0x16c/0x1f0 [ 96.946638][ T7108] bad_page+0xb3/0x1f0 [ 96.947662][ T7108] ? __pfx_bad_page+0x10/0x10 [ 96.948981][ T7108] ? page_bad_reason+0x9d/0x1e0 [ 96.950559][ T7108] free_unref_page+0x657/0xdc0 [ 96.952161][ T7108] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 96.954020][ T7108] ? __phys_addr+0xc6/0x150 [ 96.955286][ T7108] skb_free_head+0xa0/0x1d0 [ 96.956955][ T7108] skb_release_data+0x560/0x730 [ 96.958573][ T7108] sk_skb_reason_drop+0x129/0x1a0 [ 96.960158][ T7108] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 96.962066][ T7108] ? kernel_text_address+0x8d/0x100 [ 96.963657][ T7108] ? hlock_class+0x4e/0x130 [ 96.965021][ T7108] ? __lock_acquire+0x163e/0x3ce0 [ 96.966481][ T7108] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 96.968472][ T7108] ? hlock_class+0x4e/0x130 [ 96.969912][ T7108] ? __lock_acquire+0xbdd/0x3ce0 [ 96.971289][ T7108] ? __pfx___lock_acquire+0x10/0x10 [ 96.973145][ T7108] __netif_receive_skb_list_core+0x357/0x950 [ 96.974814][ T7108] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 96.976786][ T7108] ? trace_lock_acquire+0x14a/0x1d0 [ 96.978386][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 96.980117][ T7108] ? lock_acquire+0x2f/0xb0 [ 96.981539][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 96.983438][ T7108] netif_receive_skb_list_internal+0x753/0xdb0 [ 96.985215][ T7108] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 96.987263][ T7108] ? __pfx_eth_type_trans+0x10/0x10 [ 96.988743][ T7108] ? __build_skb_around+0x278/0x3b0 [ 96.990321][ T7108] netif_receive_skb_list+0x4f/0x4a0 [ 96.991793][ T7108] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 96.993497][ T7108] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 96.995280][ T7108] ? bpf_test_timer_continue+0x150/0x3d0 [ 96.997133][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 96.998658][ T7108] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 97.000460][ T7108] ? try_to_wake_up+0x154/0x14f0 [ 97.002081][ T7108] ? __pfx_try_to_wake_up+0x10/0x10 [ 97.003611][ T7108] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 97.005251][ T7108] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 97.006634][ T7108] ? 0xffffffffa0004340 [ 97.007684][ T7108] ? 0xffffffffa0004340 [ 97.008879][ T7108] ? 0xffffffffa0004340 [ 97.010117][ T7108] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 97.011699][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 97.013330][ T7108] ? lock_acquire+0x2f/0xb0 [ 97.014669][ T7108] ? __fget_files+0x40/0x3f0 [ 97.016088][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 97.017779][ T7108] ? fput+0x30/0x390 [ 97.019033][ T7108] ? __bpf_prog_get+0xa0/0x290 [ 97.020320][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 97.021800][ T7108] __sys_bpf+0xfc6/0x49a0 [ 97.022934][ T7108] ? __pfx___sys_bpf+0x10/0x10 [ 97.024253][ T7108] ? __schedule+0xe5d/0x5730 [ 97.025510][ T7108] ? __fget_files+0x23a/0x3f0 [ 97.026834][ T7108] ? do_futex+0x123/0x350 [ 97.027992][ T7108] ? __pfx_do_futex+0x10/0x10 [ 97.029369][ T7108] ? xfd_validate_state+0x5d/0x180 [ 97.030795][ T7108] ? rcu_is_watching+0x12/0xc0 [ 97.032215][ T7108] __x64_sys_bpf+0x78/0xc0 [ 97.033503][ T7108] ? lockdep_hardirqs_on+0x7c/0x110 [ 97.035088][ T7108] do_syscall_64+0xcd/0x250 [ 97.036370][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.038112][ T7108] RIP: 0033:0x7efff3f7e719 [ 97.039654][ T7108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.045471][ T7108] RSP: 002b:00007efff4e28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 97.047775][ T7108] RAX: ffffffffffffffda RBX: 00007efff4136058 RCX: 00007efff3f7e719 [ 97.049921][ T7108] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 97.052597][ T7108] RBP: 00007efff3ff132e R08: 0000000000000000 R09: 0000000000000000 [ 97.054893][ T7108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.057282][ T7108] R13: 0000000000000000 R14: 00007efff4136058 R15: 00007fffd7704958 [ 97.059442][ T7108] [ 97.060432][ T7108] BUG: Bad page state in process syz.0.327 pfn:27648 [ 97.062307][ T7108] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888027649e00 pfn:0x27648 [ 97.064875][ T7108] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 97.066691][ T7108] raw: 00fff00000000000 dead000000000040 ffff888036779000 0000000000000000 [ 97.068928][ T7108] raw: ffff888027649e00 0000000000000001 00000000ffffffff 0000000000000000 [ 97.071078][ T7108] page dumped because: page_pool leak [ 97.072545][ T7108] page_owner tracks the page as allocated [ 97.074030][ T7108] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7108, tgid 7096 (syz.0.327), ts 92314465575, free_ts 92288397249 [ 97.079055][ T7108] post_alloc_hook+0x2d1/0x350 [ 97.080276][ T7108] get_page_from_freelist+0x101e/0x3070 [ 97.081690][ T7108] __alloc_pages_noprof+0x223/0x25a0 [ 97.083077][ T7108] alloc_pages_bulk_noprof+0x77c/0x1110 [ 97.084483][ T7108] __page_pool_alloc_pages_slow+0x18f/0x770 [ 97.086029][ T7108] page_pool_alloc_netmem+0xc4/0x160 [ 97.087458][ T7108] page_pool_alloc_pages+0x1a/0x60 [ 97.088822][ T7108] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 97.090451][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 97.092266][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 97.093703][ T7108] __sys_bpf+0xfc6/0x49a0 [ 97.094899][ T7108] __x64_sys_bpf+0x78/0xc0 [ 97.096084][ T7108] do_syscall_64+0xcd/0x250 [ 97.097425][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.099115][ T7108] page last free pid 6091 tgid 6091 stack trace: [ 97.101096][ T7108] free_unref_page+0x5f4/0xdc0 [ 97.102664][ T7108] vfree+0x17a/0x890 [ 97.103901][ T7108] delayed_vfree_work+0x56/0x70 [ 97.105402][ T7108] process_one_work+0x9c5/0x1ba0 [ 97.106923][ T7108] worker_thread+0x6c8/0xf00 [ 97.108413][ T7108] kthread+0x2c1/0x3a0 [ 97.109662][ T7108] ret_from_fork+0x45/0x80 [ 97.111065][ T7108] ret_from_fork_asm+0x1a/0x30 [ 97.112680][ T7108] Modules linked in: [ 97.113710][ T7108] CPU: 3 UID: 0 PID: 7108 Comm: syz.0.327 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 97.117242][ T7108] Tainted: [B]=BAD_PAGE [ 97.118304][ T7108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 97.121100][ T7108] Call Trace: [ 97.122015][ T7108] [ 97.122791][ T7108] dump_stack_lvl+0x16c/0x1f0 [ 97.124014][ T7108] bad_page+0xb3/0x1f0 [ 97.125059][ T7108] ? __pfx_bad_page+0x10/0x10 [ 97.126304][ T7108] ? page_bad_reason+0x9d/0x1e0 [ 97.127584][ T7108] free_unref_page+0x657/0xdc0 [ 97.128940][ T7108] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 97.130873][ T7108] ? __phys_addr+0xc6/0x150 [ 97.132084][ T7108] skb_free_head+0xa0/0x1d0 [ 97.133444][ T7108] skb_release_data+0x560/0x730 [ 97.134952][ T7108] sk_skb_reason_drop+0x129/0x1a0 [ 97.136326][ T7108] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 97.138079][ T7108] ? kernel_text_address+0x8d/0x100 [ 97.139606][ T7108] ? hlock_class+0x4e/0x130 [ 97.140790][ T7108] ? __lock_acquire+0x163e/0x3ce0 [ 97.142064][ T7108] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 97.143802][ T7108] ? hlock_class+0x4e/0x130 [ 97.145066][ T7108] ? __lock_acquire+0xbdd/0x3ce0 [ 97.146442][ T7108] ? __pfx___lock_acquire+0x10/0x10 [ 97.147756][ T7108] __netif_receive_skb_list_core+0x357/0x950 [ 97.149284][ T7108] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 97.151009][ T7108] ? trace_lock_acquire+0x14a/0x1d0 [ 97.152477][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 97.154408][ T7108] ? lock_acquire+0x2f/0xb0 [ 97.155765][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 97.157792][ T7108] netif_receive_skb_list_internal+0x753/0xdb0 [ 97.160045][ T7108] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 97.162259][ T7108] ? __pfx_eth_type_trans+0x10/0x10 [ 97.163626][ T7108] ? __build_skb_around+0x278/0x3b0 [ 97.164970][ T7108] netif_receive_skb_list+0x4f/0x4a0 [ 97.166304][ T7108] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 97.167874][ T7108] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 97.169580][ T7108] ? bpf_test_timer_continue+0x150/0x3d0 [ 97.171040][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 97.172730][ T7108] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 97.174679][ T7108] ? try_to_wake_up+0x154/0x14f0 [ 97.176080][ T7108] ? __pfx_try_to_wake_up+0x10/0x10 [ 97.177558][ T7108] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 97.179473][ T7108] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 97.181147][ T7108] ? 0xffffffffa0004340 [ 97.182300][ T7108] ? 0xffffffffa0004340 [ 97.183382][ T7108] ? 0xffffffffa0004340 [ 97.184467][ T7108] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 97.186026][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 97.187385][ T7108] ? lock_acquire+0x2f/0xb0 [ 97.188573][ T7108] ? __fget_files+0x40/0x3f0 [ 97.189862][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 97.191474][ T7108] ? fput+0x30/0x390 [ 97.192524][ T7108] ? __bpf_prog_get+0xa0/0x290 [ 97.193829][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 97.195376][ T7108] __sys_bpf+0xfc6/0x49a0 [ 97.196534][ T7108] ? __pfx___sys_bpf+0x10/0x10 [ 97.197959][ T7108] ? __schedule+0xe5d/0x5730 [ 97.199238][ T7108] ? __fget_files+0x23a/0x3f0 [ 97.200573][ T7108] ? do_futex+0x123/0x350 [ 97.201761][ T7108] ? __pfx_do_futex+0x10/0x10 [ 97.202962][ T7108] ? xfd_validate_state+0x5d/0x180 [ 97.204232][ T7108] ? rcu_is_watching+0x12/0xc0 [ 97.205535][ T7108] __x64_sys_bpf+0x78/0xc0 [ 97.206665][ T7108] ? lockdep_hardirqs_on+0x7c/0x110 [ 97.207988][ T7108] do_syscall_64+0xcd/0x250 [ 97.209155][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.210660][ T7108] RIP: 0033:0x7efff3f7e719 [ 97.211930][ T7108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.218036][ T7108] RSP: 002b:00007efff4e28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 97.220412][ T7108] RAX: ffffffffffffffda RBX: 00007efff4136058 RCX: 00007efff3f7e719 [ 97.222457][ T7108] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 97.224642][ T7108] RBP: 00007efff3ff132e R08: 0000000000000000 R09: 0000000000000000 [ 97.226910][ T7108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.229108][ T7108] R13: 0000000000000000 R14: 00007efff4136058 R15: 00007fffd7704958 [ 97.231382][ T7108] [ 97.232629][ T7108] BUG: Bad page state in process syz.0.327 pfn:34d65 [ 97.234551][ T7108] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888034d653f0 pfn:0x34d65 [ 97.237540][ T7108] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 97.239350][ T7108] raw: 00fff00000000000 dead000000000040 ffff888036779000 0000000000000000 [ 97.241611][ T7108] raw: ffff888034d653f0 0000000000000001 00000000ffffffff 0000000000000000 [ 97.243727][ T7108] page dumped because: page_pool leak [ 97.245094][ T7108] page_owner tracks the page as allocated [ 97.246606][ T7108] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7108, tgid 7096 (syz.0.327), ts 92314460700, free_ts 92307247070 [ 97.251018][ T7108] post_alloc_hook+0x2d1/0x350 [ 97.252456][ T7108] get_page_from_freelist+0x101e/0x3070 [ 97.254453][ T7108] __alloc_pages_noprof+0x223/0x25a0 [ 97.256020][ T7108] alloc_pages_bulk_noprof+0x77c/0x1110 [ 97.257735][ T7108] __page_pool_alloc_pages_slow+0x18f/0x770 [ 97.259433][ T7108] page_pool_alloc_netmem+0xc4/0x160 [ 97.260816][ T7108] page_pool_alloc_pages+0x1a/0x60 [ 97.262169][ T7108] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 97.263773][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 97.265138][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 97.266552][ T7108] __sys_bpf+0xfc6/0x49a0 [ 97.267861][ T7108] __x64_sys_bpf+0x78/0xc0 [ 97.269159][ T7108] do_syscall_64+0xcd/0x250 [ 97.270485][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.272250][ T7108] page last free pid 7104 tgid 7101 stack trace: [ 97.274475][ T7108] free_unref_page+0x5f4/0xdc0 [ 97.276133][ T7108] __folio_put+0x30d/0x3d0 [ 97.277458][ T7108] free_page_and_swap_cache+0x249/0x2c0 [ 97.279164][ T7108] tlb_remove_table_rcu+0x89/0xe0 [ 97.280481][ T7108] rcu_core+0x79d/0x14d0 [ 97.281530][ T7108] handle_softirqs+0x213/0x8f0 [ 97.282745][ T7108] irq_exit_rcu+0xbb/0x120 [ 97.283876][ T7108] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 97.285361][ T7108] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 97.286919][ T7108] Modules linked in: [ 97.288022][ T7108] CPU: 3 UID: 0 PID: 7108 Comm: syz.0.327 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 97.291458][ T7108] Tainted: [B]=BAD_PAGE [ 97.292677][ T7108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 97.295700][ T7108] Call Trace: [ 97.296577][ T7108] [ 97.297483][ T7108] dump_stack_lvl+0x16c/0x1f0 [ 97.298843][ T7108] bad_page+0xb3/0x1f0 [ 97.300106][ T7108] ? __pfx_bad_page+0x10/0x10 [ 97.301303][ T7108] ? page_bad_reason+0x9d/0x1e0 [ 97.302546][ T7108] free_unref_page+0x657/0xdc0 [ 97.303773][ T7108] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 97.305393][ T7108] ? __phys_addr+0xc6/0x150 [ 97.306592][ T7108] skb_free_head+0xa0/0x1d0 [ 97.307810][ T7108] skb_release_data+0x560/0x730 [ 97.309139][ T7108] sk_skb_reason_drop+0x129/0x1a0 [ 97.310789][ T7108] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 97.312656][ T7108] ? kernel_text_address+0x8d/0x100 [ 97.314128][ T7108] ? hlock_class+0x4e/0x130 [ 97.315746][ T7108] ? __lock_acquire+0x163e/0x3ce0 [ 97.317427][ T7108] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 97.319777][ T7108] ? hlock_class+0x4e/0x130 [ 97.321236][ T7108] ? __lock_acquire+0xbdd/0x3ce0 [ 97.322722][ T7108] ? __pfx___lock_acquire+0x10/0x10 [ 97.324247][ T7108] __netif_receive_skb_list_core+0x357/0x950 [ 97.325897][ T7108] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 97.327602][ T7108] ? trace_lock_acquire+0x14a/0x1d0 [ 97.329041][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 97.331012][ T7108] ? lock_acquire+0x2f/0xb0 [ 97.332356][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 97.334189][ T7108] netif_receive_skb_list_internal+0x753/0xdb0 [ 97.336154][ T7108] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 97.337980][ T7108] ? __pfx_eth_type_trans+0x10/0x10 [ 97.339369][ T7108] ? __build_skb_around+0x278/0x3b0 [ 97.340760][ T7108] netif_receive_skb_list+0x4f/0x4a0 [ 97.342181][ T7108] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 97.343955][ T7108] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 97.345806][ T7108] ? bpf_test_timer_continue+0x150/0x3d0 [ 97.347317][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 97.348794][ T7108] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 97.350398][ T7108] ? try_to_wake_up+0x154/0x14f0 [ 97.351952][ T7108] ? __pfx_try_to_wake_up+0x10/0x10 [ 97.353605][ T7108] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 97.355258][ T7108] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 97.356597][ T7108] ? 0xffffffffa0004340 [ 97.357635][ T7108] ? 0xffffffffa0004340 [ 97.358697][ T7108] ? 0xffffffffa0004340 [ 97.359772][ T7108] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 97.361291][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 97.362675][ T7108] ? lock_acquire+0x2f/0xb0 [ 97.364155][ T7108] ? __fget_files+0x40/0x3f0 [ 97.365359][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 97.366911][ T7108] ? fput+0x30/0x390 [ 97.367961][ T7108] ? __bpf_prog_get+0xa0/0x290 [ 97.369262][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 97.371041][ T7108] __sys_bpf+0xfc6/0x49a0 [ 97.372211][ T7108] ? __pfx___sys_bpf+0x10/0x10 [ 97.373487][ T7108] ? __schedule+0xe5d/0x5730 [ 97.374949][ T7108] ? __fget_files+0x23a/0x3f0 [ 97.376512][ T7108] ? do_futex+0x123/0x350 [ 97.378348][ T7108] ? __pfx_do_futex+0x10/0x10 [ 97.379916][ T7108] ? xfd_validate_state+0x5d/0x180 [ 97.381689][ T7108] ? rcu_is_watching+0x12/0xc0 [ 97.383440][ T7108] __x64_sys_bpf+0x78/0xc0 [ 97.384896][ T7108] ? lockdep_hardirqs_on+0x7c/0x110 [ 97.386276][ T7108] do_syscall_64+0xcd/0x250 [ 97.387449][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.389113][ T7108] RIP: 0033:0x7efff3f7e719 [ 97.390504][ T7108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.395435][ T7108] RSP: 002b:00007efff4e28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 97.397582][ T7108] RAX: ffffffffffffffda RBX: 00007efff4136058 RCX: 00007efff3f7e719 [ 97.399655][ T7108] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 97.401671][ T7108] RBP: 00007efff3ff132e R08: 0000000000000000 R09: 0000000000000000 [ 97.403728][ T7108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.405853][ T7108] R13: 0000000000000000 R14: 00007efff4136058 R15: 00007fffd7704958 [ 97.407927][ T7108] [ 97.408864][ T7108] BUG: Bad page state in process syz.0.327 pfn:21173 [ 97.410660][ T7108] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x21173 [ 97.413026][ T7108] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 97.415216][ T7108] raw: 00fff00000000000 dead000000000040 ffff888036779000 0000000000000000 [ 97.418082][ T7108] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 97.420938][ T7108] page dumped because: page_pool leak [ 97.422428][ T7108] page_owner tracks the page as allocated [ 97.423963][ T7108] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7108, tgid 7096 (syz.0.327), ts 92314456021, free_ts 92307255527 [ 97.428452][ T7108] post_alloc_hook+0x2d1/0x350 [ 97.429703][ T7108] get_page_from_freelist+0x101e/0x3070 [ 97.431073][ T7108] __alloc_pages_noprof+0x223/0x25a0 [ 97.432457][ T7108] alloc_pages_bulk_noprof+0x77c/0x1110 [ 97.433903][ T7108] __page_pool_alloc_pages_slow+0x18f/0x770 [ 97.435459][ T7108] page_pool_alloc_netmem+0xc4/0x160 [ 97.436846][ T7108] page_pool_alloc_pages+0x1a/0x60 [ 97.438256][ T7108] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 97.439870][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 97.441270][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 97.442749][ T7108] __sys_bpf+0xfc6/0x49a0 [ 97.443907][ T7108] __x64_sys_bpf+0x78/0xc0 [ 97.445073][ T7108] do_syscall_64+0xcd/0x250 [ 97.446446][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.448159][ T7108] page last free pid 7104 tgid 7101 stack trace: [ 97.449954][ T7108] free_unref_page+0x5f4/0xdc0 [ 97.451438][ T7108] __folio_put+0x30d/0x3d0 [ 97.452833][ T7108] free_page_and_swap_cache+0x249/0x2c0 [ 97.454577][ T7108] tlb_remove_table_rcu+0x89/0xe0 [ 97.456254][ T7108] rcu_core+0x79d/0x14d0 [ 97.457763][ T7108] handle_softirqs+0x213/0x8f0 [ 97.459362][ T7108] irq_exit_rcu+0xbb/0x120 [ 97.460851][ T7108] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 97.462838][ T7108] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 97.464546][ T7108] Modules linked in: [ 97.465582][ T7108] CPU: 3 UID: 0 PID: 7108 Comm: syz.0.327 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 97.468683][ T7108] Tainted: [B]=BAD_PAGE [ 97.470334][ T7108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 97.473563][ T7108] Call Trace: [ 97.474648][ T7108] [ 97.475603][ T7108] dump_stack_lvl+0x16c/0x1f0 [ 97.477035][ T7108] bad_page+0xb3/0x1f0 [ 97.478602][ T7108] ? __pfx_bad_page+0x10/0x10 [ 97.479894][ T7108] ? page_bad_reason+0x9d/0x1e0 [ 97.481255][ T7108] free_unref_page+0x657/0xdc0 [ 97.482697][ T7108] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 97.484353][ T7108] ? __phys_addr+0xc6/0x150 [ 97.485642][ T7108] skb_free_head+0xa0/0x1d0 [ 97.486916][ T7108] skb_release_data+0x560/0x730 [ 97.488347][ T7108] sk_skb_reason_drop+0x129/0x1a0 [ 97.489667][ T7108] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 97.491915][ T7108] ? kernel_text_address+0x8d/0x100 [ 97.493612][ T7108] ? hlock_class+0x4e/0x130 [ 97.495359][ T7108] ? __lock_acquire+0x163e/0x3ce0 [ 97.496774][ T7108] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 97.498935][ T7108] ? hlock_class+0x4e/0x130 [ 97.500610][ T7108] ? __lock_acquire+0xbdd/0x3ce0 [ 97.502388][ T7108] ? __pfx___lock_acquire+0x10/0x10 [ 97.504064][ T7108] __netif_receive_skb_list_core+0x357/0x950 [ 97.505531][ T7108] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 97.507107][ T7108] ? trace_lock_acquire+0x14a/0x1d0 [ 97.508453][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 97.510116][ T7108] ? lock_acquire+0x2f/0xb0 [ 97.511532][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 97.513345][ T7108] netif_receive_skb_list_internal+0x753/0xdb0 [ 97.515226][ T7108] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 97.517058][ T7108] ? __pfx_eth_type_trans+0x10/0x10 [ 97.518575][ T7108] ? __build_skb_around+0x278/0x3b0 [ 97.520032][ T7108] netif_receive_skb_list+0x4f/0x4a0 [ 97.521457][ T7108] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 97.523299][ T7108] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 97.525071][ T7108] ? bpf_test_timer_continue+0x150/0x3d0 [ 97.526576][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 97.528299][ T7108] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 97.530069][ T7108] ? try_to_wake_up+0x154/0x14f0 [ 97.531330][ T7108] ? __pfx_try_to_wake_up+0x10/0x10 [ 97.532630][ T7108] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 97.534100][ T7108] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 97.535422][ T7108] ? 0xffffffffa0004340 [ 97.536460][ T7108] ? 0xffffffffa0004340 [ 97.537513][ T7108] ? 0xffffffffa0004340 [ 97.538581][ T7108] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 97.540303][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 97.541822][ T7108] ? lock_acquire+0x2f/0xb0 [ 97.543135][ T7108] ? __fget_files+0x40/0x3f0 [ 97.544286][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 97.545770][ T7108] ? fput+0x30/0x390 [ 97.546793][ T7108] ? __bpf_prog_get+0xa0/0x290 [ 97.548057][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 97.549713][ T7108] __sys_bpf+0xfc6/0x49a0 [ 97.550911][ T7108] ? __pfx___sys_bpf+0x10/0x10 [ 97.552224][ T7108] ? __schedule+0xe5d/0x5730 [ 97.553656][ T7108] ? __fget_files+0x23a/0x3f0 [ 97.555102][ T7108] ? do_futex+0x123/0x350 [ 97.556283][ T7108] ? __pfx_do_futex+0x10/0x10 [ 97.557577][ T7108] ? xfd_validate_state+0x5d/0x180 [ 97.559035][ T7108] ? rcu_is_watching+0x12/0xc0 [ 97.560358][ T7108] __x64_sys_bpf+0x78/0xc0 [ 97.561541][ T7108] ? lockdep_hardirqs_on+0x7c/0x110 [ 97.562952][ T7108] do_syscall_64+0xcd/0x250 [ 97.564243][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.565796][ T7108] RIP: 0033:0x7efff3f7e719 [ 97.567008][ T7108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.572264][ T7108] RSP: 002b:00007efff4e28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 97.574602][ T7108] RAX: ffffffffffffffda RBX: 00007efff4136058 RCX: 00007efff3f7e719 [ 97.576956][ T7108] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 97.579534][ T7108] RBP: 00007efff3ff132e R08: 0000000000000000 R09: 0000000000000000 [ 97.581830][ T7108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.584014][ T7108] R13: 0000000000000000 R14: 00007efff4136058 R15: 00007fffd7704958 [ 97.586362][ T7108] [ 97.587408][ T7108] BUG: Bad page state in process syz.0.327 pfn:24c47 [ 97.589260][ T7108] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888024c47b40 pfn:0x24c47 [ 97.591874][ T7108] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 97.593825][ T7108] raw: 00fff00000000000 dead000000000040 ffff888036779000 0000000000000000 [ 97.596090][ T7108] raw: ffff888024c47b40 0000000000000001 00000000ffffffff 0000000000000000 [ 97.598419][ T7108] page dumped because: page_pool leak [ 97.599842][ T7108] page_owner tracks the page as allocated [ 97.601447][ T7108] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7108, tgid 7096 (syz.0.327), ts 92314451205, free_ts 92307259990 [ 97.605853][ T7108] post_alloc_hook+0x2d1/0x350 [ 97.607239][ T7108] get_page_from_freelist+0x101e/0x3070 [ 97.608759][ T7108] __alloc_pages_noprof+0x223/0x25a0 [ 97.610303][ T7108] alloc_pages_bulk_noprof+0x77c/0x1110 [ 97.611864][ T7108] __page_pool_alloc_pages_slow+0x18f/0x770 [ 97.613570][ T7108] page_pool_alloc_netmem+0xc4/0x160 [ 97.614956][ T7108] page_pool_alloc_pages+0x1a/0x60 [ 97.616289][ T7108] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 97.617902][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 97.619308][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 97.620707][ T7108] __sys_bpf+0xfc6/0x49a0 [ 97.621874][ T7108] __x64_sys_bpf+0x78/0xc0 [ 97.623079][ T7108] do_syscall_64+0xcd/0x250 [ 97.624237][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.625868][ T7108] page last free pid 7104 tgid 7101 stack trace: [ 97.628132][ T7108] free_unref_page+0x5f4/0xdc0 [ 97.629413][ T7108] rcu_core+0x79d/0x14d0 [ 97.630606][ T7108] handle_softirqs+0x213/0x8f0 [ 97.631831][ T7108] irq_exit_rcu+0xbb/0x120 [ 97.632968][ T7108] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 97.634439][ T7108] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 97.635931][ T7108] Modules linked in: [ 97.636942][ T7108] CPU: 3 UID: 0 PID: 7108 Comm: syz.0.327 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 97.640046][ T7108] Tainted: [B]=BAD_PAGE [ 97.641161][ T7108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 97.644090][ T7108] Call Trace: [ 97.644957][ T7108] [ 97.645736][ T7108] dump_stack_lvl+0x16c/0x1f0 [ 97.646988][ T7108] bad_page+0xb3/0x1f0 [ 97.648144][ T7108] ? __pfx_bad_page+0x10/0x10 [ 97.649604][ T7108] ? page_bad_reason+0x9d/0x1e0 [ 97.651006][ T7108] free_unref_page+0x657/0xdc0 [ 97.652285][ T7108] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 97.653893][ T7108] ? __phys_addr+0xc6/0x150 [ 97.655129][ T7108] skb_free_head+0xa0/0x1d0 [ 97.656342][ T7108] skb_release_data+0x560/0x730 [ 97.657607][ T7108] sk_skb_reason_drop+0x129/0x1a0 [ 97.658890][ T7108] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 97.660629][ T7108] ? kernel_text_address+0x8d/0x100 [ 97.662019][ T7108] ? hlock_class+0x4e/0x130 [ 97.663213][ T7108] ? __lock_acquire+0x163e/0x3ce0 [ 97.664539][ T7108] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 97.666420][ T7108] ? hlock_class+0x4e/0x130 [ 97.667671][ T7108] ? __lock_acquire+0xbdd/0x3ce0 [ 97.669119][ T7108] ? __pfx___lock_acquire+0x10/0x10 [ 97.670546][ T7108] __netif_receive_skb_list_core+0x357/0x950 [ 97.672293][ T7108] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 97.674282][ T7108] ? trace_lock_acquire+0x14a/0x1d0 [ 97.675743][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 97.677466][ T7108] ? lock_acquire+0x2f/0xb0 [ 97.678672][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 97.680337][ T7108] netif_receive_skb_list_internal+0x753/0xdb0 [ 97.682388][ T7108] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 97.684136][ T7108] ? __pfx_eth_type_trans+0x10/0x10 [ 97.685504][ T7108] ? __build_skb_around+0x278/0x3b0 [ 97.686874][ T7108] netif_receive_skb_list+0x4f/0x4a0 [ 97.688341][ T7108] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 97.690013][ T7108] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 97.691675][ T7108] ? bpf_test_timer_continue+0x150/0x3d0 [ 97.693069][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 97.694425][ T7108] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 97.696059][ T7108] ? try_to_wake_up+0x154/0x14f0 [ 97.697435][ T7108] ? __pfx_try_to_wake_up+0x10/0x10 [ 97.698875][ T7108] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 97.700731][ T7108] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 97.702234][ T7108] ? 0xffffffffa0004340 [ 97.703579][ T7108] ? 0xffffffffa0004340 [ 97.704713][ T7108] ? 0xffffffffa0004340 [ 97.705812][ T7108] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 97.707481][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 97.709093][ T7108] ? lock_acquire+0x2f/0xb0 [ 97.710481][ T7108] ? __fget_files+0x40/0x3f0 [ 97.711824][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 97.713711][ T7108] ? fput+0x30/0x390 [ 97.714985][ T7108] ? __bpf_prog_get+0xa0/0x290 [ 97.716433][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 97.718197][ T7108] __sys_bpf+0xfc6/0x49a0 [ 97.719504][ T7108] ? __pfx___sys_bpf+0x10/0x10 [ 97.720882][ T7108] ? __schedule+0xe5d/0x5730 [ 97.722202][ T7108] ? __fget_files+0x23a/0x3f0 [ 97.723447][ T7108] ? do_futex+0x123/0x350 [ 97.724587][ T7108] ? __pfx_do_futex+0x10/0x10 [ 97.725821][ T7108] ? xfd_validate_state+0x5d/0x180 [ 97.727170][ T7108] ? rcu_is_watching+0x12/0xc0 [ 97.728440][ T7108] __x64_sys_bpf+0x78/0xc0 [ 97.729619][ T7108] ? lockdep_hardirqs_on+0x7c/0x110 [ 97.731047][ T7108] do_syscall_64+0xcd/0x250 [ 97.732479][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.734163][ T7108] RIP: 0033:0x7efff3f7e719 [ 97.735421][ T7108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.740759][ T7108] RSP: 002b:00007efff4e28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 97.742933][ T7108] RAX: ffffffffffffffda RBX: 00007efff4136058 RCX: 00007efff3f7e719 [ 97.744979][ T7108] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 97.746992][ T7108] RBP: 00007efff3ff132e R08: 0000000000000000 R09: 0000000000000000 [ 97.749422][ T7108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.751479][ T7108] R13: 0000000000000000 R14: 00007efff4136058 R15: 00007fffd7704958 [ 97.753539][ T7108] [ 97.754463][ T7108] BUG: Bad page state in process syz.0.327 pfn:2999e [ 97.756195][ T7108] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802999fe00 pfn:0x2999e [ 97.758878][ T7108] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 97.761411][ T7108] raw: 00fff00000000000 dead000000000040 ffff888036779000 0000000000000000 [ 97.763877][ T7108] raw: ffff88802999fe00 0000000000000001 00000000ffffffff 0000000000000000 [ 97.766124][ T7108] page dumped because: page_pool leak [ 97.767723][ T7108] page_owner tracks the page as allocated [ 97.769393][ T7108] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7108, tgid 7096 (syz.0.327), ts 92314446244, free_ts 92308895192 [ 97.774356][ T7108] post_alloc_hook+0x2d1/0x350 [ 97.775768][ T7108] get_page_from_freelist+0x101e/0x3070 [ 97.777442][ T7108] __alloc_pages_noprof+0x223/0x25a0 [ 97.779199][ T7108] alloc_pages_bulk_noprof+0x77c/0x1110 [ 97.781357][ T7108] __page_pool_alloc_pages_slow+0x18f/0x770 [ 97.783580][ T7108] page_pool_alloc_netmem+0xc4/0x160 [ 97.785299][ T7108] page_pool_alloc_pages+0x1a/0x60 [ 97.786833][ T7108] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 97.788589][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 97.790189][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 97.791606][ T7108] __sys_bpf+0xfc6/0x49a0 [ 97.792729][ T7108] __x64_sys_bpf+0x78/0xc0 [ 97.793958][ T7108] do_syscall_64+0xcd/0x250 [ 97.795191][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.796747][ T7108] page last free pid 7104 tgid 7101 stack trace: [ 97.798396][ T7108] free_unref_page+0x5f4/0xdc0 [ 97.799713][ T7108] vfree+0x17a/0x890 [ 97.800813][ T7108] hashlimit_mt_destroy_v1+0x78/0x90 [ 97.802240][ T7108] cleanup_entry+0x19f/0x3a0 [ 97.803451][ T7108] translate_table+0xddd/0x17b0 [ 97.804970][ T7108] do_ip6t_set_ctl+0x605/0xc40 [ 97.806275][ T7108] nf_setsockopt+0x8a/0xf0 [ 97.807535][ T7108] ipv6_setsockopt+0x135/0x170 [ 97.808910][ T7108] rawv6_setsockopt+0xd7/0x680 [ 97.810278][ T7108] do_sock_setsockopt+0x222/0x480 [ 97.811609][ T7108] __sys_setsockopt+0x1a4/0x270 [ 97.812884][ T7108] __x64_sys_setsockopt+0xbd/0x160 [ 97.814252][ T7108] do_syscall_64+0xcd/0x250 [ 97.815457][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.817098][ T7108] Modules linked in: [ 97.818145][ T7108] CPU: 3 UID: 0 PID: 7108 Comm: syz.0.327 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 97.821814][ T7108] Tainted: [B]=BAD_PAGE [ 97.823275][ T7108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 97.826101][ T7108] Call Trace: [ 97.826996][ T7108] [ 97.827786][ T7108] dump_stack_lvl+0x16c/0x1f0 [ 97.829042][ T7108] bad_page+0xb3/0x1f0 [ 97.830153][ T7108] ? __pfx_bad_page+0x10/0x10 [ 97.831451][ T7108] ? page_bad_reason+0x9d/0x1e0 [ 97.832746][ T7108] free_unref_page+0x657/0xdc0 [ 97.834025][ T7108] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 97.835596][ T7108] ? __phys_addr+0xc6/0x150 [ 97.836942][ T7108] skb_free_head+0xa0/0x1d0 [ 97.838165][ T7108] skb_release_data+0x560/0x730 [ 97.839581][ T7108] sk_skb_reason_drop+0x129/0x1a0 [ 97.841179][ T7108] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 97.842932][ T7108] ? kernel_text_address+0x8d/0x100 [ 97.844299][ T7108] ? hlock_class+0x4e/0x130 [ 97.845489][ T7108] ? __lock_acquire+0x163e/0x3ce0 [ 97.847284][ T7108] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 97.849157][ T7108] ? hlock_class+0x4e/0x130 [ 97.850447][ T7108] ? __lock_acquire+0xbdd/0x3ce0 [ 97.851791][ T7108] ? __pfx___lock_acquire+0x10/0x10 [ 97.853157][ T7108] __netif_receive_skb_list_core+0x357/0x950 [ 97.854744][ T7108] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 97.856446][ T7108] ? trace_lock_acquire+0x14a/0x1d0 [ 97.857812][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 97.859482][ T7108] ? lock_acquire+0x2f/0xb0 [ 97.860642][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 97.862633][ T7108] netif_receive_skb_list_internal+0x753/0xdb0 [ 97.864280][ T7108] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 97.866271][ T7108] ? __pfx_eth_type_trans+0x10/0x10 [ 97.867779][ T7108] ? __build_skb_around+0x278/0x3b0 [ 97.869284][ T7108] netif_receive_skb_list+0x4f/0x4a0 [ 97.870847][ T7108] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 97.872524][ T7108] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 97.874329][ T7108] ? bpf_test_timer_continue+0x150/0x3d0 [ 97.875779][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 97.877253][ T7108] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 97.878934][ T7108] ? try_to_wake_up+0x154/0x14f0 [ 97.880717][ T7108] ? __pfx_try_to_wake_up+0x10/0x10 [ 97.882464][ T7108] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 97.884340][ T7108] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 97.885834][ T7108] ? 0xffffffffa0004340 [ 97.886936][ T7108] ? 0xffffffffa0004340 [ 97.888249][ T7108] ? 0xffffffffa0004340 [ 97.889475][ T7108] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 97.891048][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 97.892475][ T7108] ? lock_acquire+0x2f/0xb0 [ 97.893690][ T7108] ? __fget_files+0x40/0x3f0 [ 97.895008][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 97.896551][ T7108] ? fput+0x30/0x390 [ 97.897594][ T7108] ? __bpf_prog_get+0xa0/0x290 [ 97.898877][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 97.900394][ T7108] __sys_bpf+0xfc6/0x49a0 [ 97.901534][ T7108] ? __pfx___sys_bpf+0x10/0x10 [ 97.902769][ T7108] ? __schedule+0xe5d/0x5730 [ 97.904069][ T7108] ? __fget_files+0x23a/0x3f0 [ 97.905437][ T7108] ? do_futex+0x123/0x350 [ 97.906669][ T7108] ? __pfx_do_futex+0x10/0x10 [ 97.907926][ T7108] ? xfd_validate_state+0x5d/0x180 [ 97.909261][ T7108] ? rcu_is_watching+0x12/0xc0 [ 97.910635][ T7108] __x64_sys_bpf+0x78/0xc0 [ 97.911843][ T7108] ? lockdep_hardirqs_on+0x7c/0x110 [ 97.913216][ T7108] do_syscall_64+0xcd/0x250 [ 97.914437][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.915984][ T7108] RIP: 0033:0x7efff3f7e719 [ 97.917164][ T7108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.922201][ T7108] RSP: 002b:00007efff4e28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 97.924373][ T7108] RAX: ffffffffffffffda RBX: 00007efff4136058 RCX: 00007efff3f7e719 [ 97.926439][ T7108] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 97.928449][ T7108] RBP: 00007efff3ff132e R08: 0000000000000000 R09: 0000000000000000 [ 97.930507][ T7108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.932554][ T7108] R13: 0000000000000000 R14: 00007efff4136058 R15: 00007fffd7704958 [ 97.934630][ T7108] [ 97.935564][ T7108] BUG: Bad page state in process syz.0.327 pfn:2f74a [ 97.937342][ T7108] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802f74a780 pfn:0x2f74a [ 97.940128][ T7108] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 97.942016][ T7108] raw: 00fff00000000000 dead000000000040 ffff888036779000 0000000000000000 [ 97.944245][ T7108] raw: ffff88802f74a780 0000000000000001 00000000ffffffff 0000000000000000 [ 97.946448][ T7108] page dumped because: page_pool leak [ 97.947900][ T7108] page_owner tracks the page as allocated [ 97.949455][ T7108] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7108, tgid 7096 (syz.0.327), ts 92314441397, free_ts 92308902582 [ 97.953751][ T7108] post_alloc_hook+0x2d1/0x350 [ 97.955016][ T7108] get_page_from_freelist+0x101e/0x3070 [ 97.956472][ T7108] __alloc_pages_noprof+0x223/0x25a0 [ 97.957906][ T7108] alloc_pages_bulk_noprof+0x77c/0x1110 [ 97.959372][ T7108] __page_pool_alloc_pages_slow+0x18f/0x770 [ 97.961019][ T7108] page_pool_alloc_netmem+0xc4/0x160 [ 97.962595][ T7108] page_pool_alloc_pages+0x1a/0x60 [ 97.964418][ T7108] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 97.966083][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 97.967554][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 97.969022][ T7108] __sys_bpf+0xfc6/0x49a0 [ 97.970258][ T7108] __x64_sys_bpf+0x78/0xc0 [ 97.971510][ T7108] do_syscall_64+0xcd/0x250 [ 97.972769][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.974514][ T7108] page last free pid 7104 tgid 7101 stack trace: [ 97.976241][ T7108] free_unref_page+0x5f4/0xdc0 [ 97.977581][ T7108] vfree+0x17a/0x890 [ 97.978653][ T7108] hashlimit_mt_destroy_v1+0x78/0x90 [ 97.980204][ T7108] cleanup_entry+0x19f/0x3a0 [ 97.981378][ T7108] translate_table+0xddd/0x17b0 [ 97.982699][ T7108] do_ip6t_set_ctl+0x605/0xc40 [ 97.983983][ T7108] nf_setsockopt+0x8a/0xf0 [ 97.985179][ T7108] ipv6_setsockopt+0x135/0x170 [ 97.986472][ T7108] rawv6_setsockopt+0xd7/0x680 [ 97.987771][ T7108] do_sock_setsockopt+0x222/0x480 [ 97.989096][ T7108] __sys_setsockopt+0x1a4/0x270 [ 97.990411][ T7108] __x64_sys_setsockopt+0xbd/0x160 [ 97.991776][ T7108] do_syscall_64+0xcd/0x250 [ 97.992980][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.994652][ T7108] Modules linked in: [ 97.995793][ T7108] CPU: 3 UID: 0 PID: 7108 Comm: syz.0.327 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 97.999371][ T7108] Tainted: [B]=BAD_PAGE [ 98.000665][ T7108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 98.003959][ T7108] Call Trace: [ 98.004838][ T7108] [ 98.005625][ T7108] dump_stack_lvl+0x16c/0x1f0 [ 98.006871][ T7108] bad_page+0xb3/0x1f0 [ 98.007962][ T7108] ? __pfx_bad_page+0x10/0x10 [ 98.009308][ T7108] ? page_bad_reason+0x9d/0x1e0 [ 98.010578][ T7108] free_unref_page+0x657/0xdc0 [ 98.011848][ T7108] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 98.013433][ T7108] ? __phys_addr+0xc6/0x150 [ 98.014665][ T7108] skb_free_head+0xa0/0x1d0 [ 98.015932][ T7108] skb_release_data+0x560/0x730 [ 98.017225][ T7108] sk_skb_reason_drop+0x129/0x1a0 [ 98.018555][ T7108] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 98.020275][ T7108] ? kernel_text_address+0x8d/0x100 [ 98.021647][ T7108] ? hlock_class+0x4e/0x130 [ 98.023275][ T7108] ? __lock_acquire+0x163e/0x3ce0 [ 98.024770][ T7108] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 98.026663][ T7108] ? hlock_class+0x4e/0x130 [ 98.027811][ T7108] ? __lock_acquire+0xbdd/0x3ce0 [ 98.029096][ T7108] ? __pfx___lock_acquire+0x10/0x10 [ 98.030589][ T7108] __netif_receive_skb_list_core+0x357/0x950 [ 98.032164][ T7108] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 98.033857][ T7108] ? trace_lock_acquire+0x14a/0x1d0 [ 98.035226][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 98.036884][ T7108] ? lock_acquire+0x2f/0xb0 [ 98.038092][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 98.039737][ T7108] netif_receive_skb_list_internal+0x753/0xdb0 [ 98.042026][ T7108] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 98.043884][ T7108] ? __pfx_eth_type_trans+0x10/0x10 [ 98.045251][ T7108] ? __build_skb_around+0x278/0x3b0 [ 98.046636][ T7108] netif_receive_skb_list+0x4f/0x4a0 [ 98.048017][ T7108] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 98.049644][ T7108] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 98.051488][ T7108] ? bpf_test_timer_continue+0x150/0x3d0 [ 98.052961][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 98.054410][ T7108] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 98.055989][ T7108] ? try_to_wake_up+0x154/0x14f0 [ 98.057290][ T7108] ? __pfx_try_to_wake_up+0x10/0x10 [ 98.058664][ T7108] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 98.060335][ T7108] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 98.061741][ T7108] ? 0xffffffffa0004340 [ 98.062887][ T7108] ? 0xffffffffa0004340 [ 98.063951][ T7108] ? 0xffffffffa0004340 [ 98.064995][ T7108] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 98.066689][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 98.068023][ T7108] ? lock_acquire+0x2f/0xb0 [ 98.069211][ T7108] ? __fget_files+0x40/0x3f0 [ 98.070488][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 98.072016][ T7108] ? fput+0x30/0x390 [ 98.073035][ T7108] ? __bpf_prog_get+0xa0/0x290 [ 98.074392][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 98.075862][ T7108] __sys_bpf+0xfc6/0x49a0 [ 98.076887][ T7108] ? __pfx___sys_bpf+0x10/0x10 [ 98.078134][ T7108] ? __schedule+0xe5d/0x5730 [ 98.079699][ T7108] ? __fget_files+0x23a/0x3f0 [ 98.081244][ T7108] ? do_futex+0x123/0x350 [ 98.082414][ T7108] ? __pfx_do_futex+0x10/0x10 [ 98.083655][ T7108] ? xfd_validate_state+0x5d/0x180 [ 98.085002][ T7108] ? rcu_is_watching+0x12/0xc0 [ 98.086271][ T7108] __x64_sys_bpf+0x78/0xc0 [ 98.087516][ T7108] ? lockdep_hardirqs_on+0x7c/0x110 [ 98.088918][ T7108] do_syscall_64+0xcd/0x250 [ 98.090279][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.091839][ T7108] RIP: 0033:0x7efff3f7e719 [ 98.093005][ T7108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.097990][ T7108] RSP: 002b:00007efff4e28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 98.100269][ T7108] RAX: ffffffffffffffda RBX: 00007efff4136058 RCX: 00007efff3f7e719 [ 98.102738][ T7108] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 98.105202][ T7108] RBP: 00007efff3ff132e R08: 0000000000000000 R09: 0000000000000000 [ 98.107502][ T7108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.109710][ T7108] R13: 0000000000000000 R14: 00007efff4136058 R15: 00007fffd7704958 [ 98.111881][ T7108] [ 98.112830][ T7108] BUG: Bad page state in process syz.0.327 pfn:272ed [ 98.114605][ T7108] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880272edf00 pfn:0x272ed [ 98.117332][ T7108] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 98.119501][ T7108] raw: 00fff00000000000 dead000000000040 ffff888036779000 0000000000000000 [ 98.122107][ T7108] raw: ffff8880272edf00 0000000000000001 00000000ffffffff 0000000000000000 [ 98.125164][ T7108] page dumped because: page_pool leak [ 98.126812][ T7108] page_owner tracks the page as allocated [ 98.128378][ T7108] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7108, tgid 7096 (syz.0.327), ts 92314436553, free_ts 92308906912 [ 98.132659][ T7108] post_alloc_hook+0x2d1/0x350 [ 98.134066][ T7108] get_page_from_freelist+0x101e/0x3070 [ 98.135528][ T7108] __alloc_pages_noprof+0x223/0x25a0 [ 98.136939][ T7108] alloc_pages_bulk_noprof+0x77c/0x1110 [ 98.138527][ T7108] __page_pool_alloc_pages_slow+0x18f/0x770 [ 98.140263][ T7108] page_pool_alloc_netmem+0xc4/0x160 [ 98.141710][ T7108] page_pool_alloc_pages+0x1a/0x60 [ 98.143150][ T7108] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 98.145357][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 98.146870][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 98.148367][ T7108] __sys_bpf+0xfc6/0x49a0 [ 98.149643][ T7108] __x64_sys_bpf+0x78/0xc0 [ 98.150828][ T7108] do_syscall_64+0xcd/0x250 [ 98.152036][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.153596][ T7108] page last free pid 7104 tgid 7101 stack trace: [ 98.155255][ T7108] free_unref_page+0x5f4/0xdc0 [ 98.156507][ T7108] vfree+0x17a/0x890 [ 98.157559][ T7108] hashlimit_mt_destroy_v1+0x78/0x90 [ 98.159143][ T7108] cleanup_entry+0x19f/0x3a0 [ 98.160418][ T7108] translate_table+0xddd/0x17b0 [ 98.161774][ T7108] do_ip6t_set_ctl+0x605/0xc40 [ 98.163357][ T7108] nf_setsockopt+0x8a/0xf0 [ 98.164557][ T7108] ipv6_setsockopt+0x135/0x170 [ 98.165826][ T7108] rawv6_setsockopt+0xd7/0x680 [ 98.167286][ T7108] do_sock_setsockopt+0x222/0x480 [ 98.168721][ T7108] __sys_setsockopt+0x1a4/0x270 [ 98.170347][ T7108] __x64_sys_setsockopt+0xbd/0x160 [ 98.171987][ T7108] do_syscall_64+0xcd/0x250 [ 98.173356][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.175073][ T7108] Modules linked in: [ 98.176115][ T7108] CPU: 3 UID: 0 PID: 7108 Comm: syz.0.327 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 98.179322][ T7108] Tainted: [B]=BAD_PAGE [ 98.180619][ T7108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 98.183758][ T7108] Call Trace: [ 98.185020][ T7108] [ 98.185825][ T7108] dump_stack_lvl+0x16c/0x1f0 [ 98.187286][ T7108] bad_page+0xb3/0x1f0 [ 98.188409][ T7108] ? __pfx_bad_page+0x10/0x10 [ 98.189793][ T7108] ? page_bad_reason+0x9d/0x1e0 [ 98.191086][ T7108] free_unref_page+0x657/0xdc0 [ 98.192345][ T7108] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 98.194094][ T7108] ? __phys_addr+0xc6/0x150 [ 98.195399][ T7108] skb_free_head+0xa0/0x1d0 [ 98.196962][ T7108] skb_release_data+0x560/0x730 [ 98.198560][ T7108] sk_skb_reason_drop+0x129/0x1a0 [ 98.200185][ T7108] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 98.202627][ T7108] ? kernel_text_address+0x8d/0x100 [ 98.204169][ T7108] ? hlock_class+0x4e/0x130 [ 98.205513][ T7108] ? __lock_acquire+0x163e/0x3ce0 [ 98.206955][ T7108] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 98.208818][ T7108] ? hlock_class+0x4e/0x130 [ 98.210239][ T7108] ? __lock_acquire+0xbdd/0x3ce0 [ 98.211557][ T7108] ? __pfx___lock_acquire+0x10/0x10 [ 98.212928][ T7108] __netif_receive_skb_list_core+0x357/0x950 [ 98.214524][ T7108] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 98.216229][ T7108] ? trace_lock_acquire+0x14a/0x1d0 [ 98.217627][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 98.219473][ T7108] ? lock_acquire+0x2f/0xb0 [ 98.220746][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 98.222573][ T7108] netif_receive_skb_list_internal+0x753/0xdb0 [ 98.224204][ T7108] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 98.226815][ T7108] ? __pfx_eth_type_trans+0x10/0x10 [ 98.228286][ T7108] ? __build_skb_around+0x278/0x3b0 [ 98.229672][ T7108] netif_receive_skb_list+0x4f/0x4a0 [ 98.231099][ T7108] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 98.232763][ T7108] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 98.234506][ T7108] ? bpf_test_timer_continue+0x150/0x3d0 [ 98.235995][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 98.237567][ T7108] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 98.239237][ T7108] ? try_to_wake_up+0x154/0x14f0 [ 98.240576][ T7108] ? __pfx_try_to_wake_up+0x10/0x10 [ 98.241995][ T7108] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 98.243565][ T7108] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 98.245213][ T7108] ? 0xffffffffa0004340 [ 98.246402][ T7108] ? 0xffffffffa0004340 [ 98.247628][ T7108] ? 0xffffffffa0004340 [ 98.248736][ T7108] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 98.250498][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 98.251970][ T7108] ? lock_acquire+0x2f/0xb0 [ 98.253164][ T7108] ? __fget_files+0x40/0x3f0 [ 98.254414][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 98.256015][ T7108] ? fput+0x30/0x390 [ 98.257098][ T7108] ? __bpf_prog_get+0xa0/0x290 [ 98.258434][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 98.260348][ T7108] __sys_bpf+0xfc6/0x49a0 [ 98.261562][ T7108] ? __pfx___sys_bpf+0x10/0x10 [ 98.262908][ T7108] ? __schedule+0xe5d/0x5730 [ 98.264173][ T7108] ? __fget_files+0x23a/0x3f0 [ 98.265457][ T7108] ? do_futex+0x123/0x350 [ 98.266614][ T7108] ? __pfx_do_futex+0x10/0x10 [ 98.267861][ T7108] ? xfd_validate_state+0x5d/0x180 [ 98.269197][ T7108] ? rcu_is_watching+0x12/0xc0 [ 98.270459][ T7108] __x64_sys_bpf+0x78/0xc0 [ 98.271631][ T7108] ? lockdep_hardirqs_on+0x7c/0x110 [ 98.272995][ T7108] do_syscall_64+0xcd/0x250 [ 98.274210][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.275784][ T7108] RIP: 0033:0x7efff3f7e719 [ 98.276972][ T7108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.282013][ T7108] RSP: 002b:00007efff4e28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 98.284196][ T7108] RAX: ffffffffffffffda RBX: 00007efff4136058 RCX: 00007efff3f7e719 [ 98.286394][ T7108] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 98.288559][ T7108] RBP: 00007efff3ff132e R08: 0000000000000000 R09: 0000000000000000 [ 98.290671][ T7108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.292854][ T7108] R13: 0000000000000000 R14: 00007efff4136058 R15: 00007fffd7704958 [ 98.295146][ T7108] [ 98.296106][ T7108] BUG: Bad page state in process syz.0.327 pfn:2feba [ 98.297962][ T7108] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802febbe00 pfn:0x2feba [ 98.300629][ T7108] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 98.302727][ T7108] raw: 00fff00000000000 dead000000000040 ffff888036779000 0000000000000000 [ 98.305619][ T7108] raw: ffff88802febbe00 0000000000000001 00000000ffffffff 0000000000000000 [ 98.308564][ T7108] page dumped because: page_pool leak [ 98.310015][ T7108] page_owner tracks the page as allocated [ 98.311600][ T7108] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7108, tgid 7096 (syz.0.327), ts 92314431752, free_ts 92308911022 [ 98.316410][ T7108] post_alloc_hook+0x2d1/0x350 [ 98.317852][ T7108] get_page_from_freelist+0x101e/0x3070 [ 98.319574][ T7108] __alloc_pages_noprof+0x223/0x25a0 [ 98.321020][ T7108] alloc_pages_bulk_noprof+0x77c/0x1110 [ 98.322570][ T7108] __page_pool_alloc_pages_slow+0x18f/0x770 [ 98.324212][ T7108] page_pool_alloc_netmem+0xc4/0x160 [ 98.325757][ T7108] page_pool_alloc_pages+0x1a/0x60 [ 98.327299][ T7108] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 98.328966][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 98.330590][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 98.332000][ T7108] __sys_bpf+0xfc6/0x49a0 [ 98.333102][ T7108] __x64_sys_bpf+0x78/0xc0 [ 98.334256][ T7108] do_syscall_64+0xcd/0x250 [ 98.335431][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.337003][ T7108] page last free pid 7104 tgid 7101 stack trace: [ 98.338737][ T7108] free_unref_page+0x5f4/0xdc0 [ 98.340311][ T7108] vfree+0x17a/0x890 [ 98.341462][ T7108] hashlimit_mt_destroy_v1+0x78/0x90 [ 98.343122][ T7108] cleanup_entry+0x19f/0x3a0 [ 98.344438][ T7108] translate_table+0xddd/0x17b0 [ 98.345805][ T7108] do_ip6t_set_ctl+0x605/0xc40 [ 98.347246][ T7108] nf_setsockopt+0x8a/0xf0 [ 98.348598][ T7108] ipv6_setsockopt+0x135/0x170 [ 98.350262][ T7108] rawv6_setsockopt+0xd7/0x680 [ 98.351823][ T7108] do_sock_setsockopt+0x222/0x480 [ 98.353438][ T7108] __sys_setsockopt+0x1a4/0x270 [ 98.354866][ T7108] __x64_sys_setsockopt+0xbd/0x160 [ 98.356315][ T7108] do_syscall_64+0xcd/0x250 [ 98.357615][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.359267][ T7108] Modules linked in: [ 98.360482][ T7108] CPU: 3 UID: 0 PID: 7108 Comm: syz.0.327 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 98.363925][ T7108] Tainted: [B]=BAD_PAGE [ 98.365018][ T7108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 98.367824][ T7108] Call Trace: [ 98.368694][ T7108] [ 98.369577][ T7108] dump_stack_lvl+0x16c/0x1f0 [ 98.370848][ T7108] bad_page+0xb3/0x1f0 [ 98.371965][ T7108] ? __pfx_bad_page+0x10/0x10 [ 98.373206][ T7108] ? page_bad_reason+0x9d/0x1e0 [ 98.374497][ T7108] free_unref_page+0x657/0xdc0 [ 98.375754][ T7108] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 98.377320][ T7108] ? __phys_addr+0xc6/0x150 [ 98.378529][ T7108] skb_free_head+0xa0/0x1d0 [ 98.379732][ T7108] skb_release_data+0x560/0x730 [ 98.381011][ T7108] sk_skb_reason_drop+0x129/0x1a0 [ 98.382360][ T7108] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 98.384243][ T7108] ? kernel_text_address+0x8d/0x100 [ 98.385614][ T7108] ? hlock_class+0x4e/0x130 [ 98.387037][ T7108] ? __lock_acquire+0x163e/0x3ce0 [ 98.388519][ T7108] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 98.390606][ T7108] ? hlock_class+0x4e/0x130 [ 98.391965][ T7108] ? __lock_acquire+0xbdd/0x3ce0 [ 98.393267][ T7108] ? __pfx___lock_acquire+0x10/0x10 [ 98.394633][ T7108] __netif_receive_skb_list_core+0x357/0x950 [ 98.396205][ T7108] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 98.397892][ T7108] ? trace_lock_acquire+0x14a/0x1d0 [ 98.399270][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 98.401149][ T7108] ? lock_acquire+0x2f/0xb0 [ 98.402389][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 98.404198][ T7108] netif_receive_skb_list_internal+0x753/0xdb0 [ 98.406137][ T7108] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 98.407888][ T7108] ? __pfx_eth_type_trans+0x10/0x10 [ 98.409247][ T7108] ? __build_skb_around+0x278/0x3b0 [ 98.410672][ T7108] netif_receive_skb_list+0x4f/0x4a0 [ 98.412113][ T7108] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 98.413792][ T7108] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 98.415614][ T7108] ? bpf_test_timer_continue+0x150/0x3d0 [ 98.417115][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 98.418519][ T7108] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 98.420050][ T7108] ? try_to_wake_up+0x154/0x14f0 [ 98.421347][ T7108] ? __pfx_try_to_wake_up+0x10/0x10 [ 98.422730][ T7108] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 98.424282][ T7108] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 98.425652][ T7108] ? 0xffffffffa0004340 [ 98.426769][ T7108] ? 0xffffffffa0004340 [ 98.427862][ T7108] ? 0xffffffffa0004340 [ 98.429182][ T7108] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 98.430725][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 98.432146][ T7108] ? lock_acquire+0x2f/0xb0 [ 98.433348][ T7108] ? __fget_files+0x40/0x3f0 [ 98.434579][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 98.436119][ T7108] ? fput+0x30/0x390 [ 98.437150][ T7108] ? __bpf_prog_get+0xa0/0x290 [ 98.438447][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 98.440225][ T7108] __sys_bpf+0xfc6/0x49a0 [ 98.441482][ T7108] ? __pfx___sys_bpf+0x10/0x10 [ 98.442903][ T7108] ? __schedule+0xe5d/0x5730 [ 98.444401][ T7108] ? __fget_files+0x23a/0x3f0 [ 98.445884][ T7108] ? do_futex+0x123/0x350 [ 98.447436][ T7108] ? __pfx_do_futex+0x10/0x10 [ 98.448862][ T7108] ? xfd_validate_state+0x5d/0x180 [ 98.450468][ T7108] ? rcu_is_watching+0x12/0xc0 [ 98.451794][ T7108] __x64_sys_bpf+0x78/0xc0 [ 98.452963][ T7108] ? lockdep_hardirqs_on+0x7c/0x110 [ 98.454336][ T7108] do_syscall_64+0xcd/0x250 [ 98.455540][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.457145][ T7108] RIP: 0033:0x7efff3f7e719 [ 98.458345][ T7108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.463544][ T7108] RSP: 002b:00007efff4e28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 98.465824][ T7108] RAX: ffffffffffffffda RBX: 00007efff4136058 RCX: 00007efff3f7e719 [ 98.467883][ T7108] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 98.469997][ T7108] RBP: 00007efff3ff132e R08: 0000000000000000 R09: 0000000000000000 [ 98.472095][ T7108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.474129][ T7108] R13: 0000000000000000 R14: 00007efff4136058 R15: 00007fffd7704958 [ 98.476161][ T7108] [ 98.477085][ T7108] BUG: Bad page state in process syz.0.327 pfn:482a1 [ 98.479016][ T7108] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x700000002 pfn:0x482a1 [ 98.481780][ T7108] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 98.483915][ T7108] raw: 00fff00000000000 dead000000000040 ffff888036779000 0000000000000000 [ 98.486336][ T7108] raw: 0000000700000002 0000000000000001 00000000ffffffff 0000000000000000 [ 98.488877][ T7108] page dumped because: page_pool leak [ 98.490445][ T7108] page_owner tracks the page as allocated [ 98.491970][ T7108] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7108, tgid 7096 (syz.0.327), ts 92314426766, free_ts 92308915366 [ 98.496304][ T7108] post_alloc_hook+0x2d1/0x350 [ 98.497601][ T7108] get_page_from_freelist+0x101e/0x3070 [ 98.499115][ T7108] __alloc_pages_noprof+0x223/0x25a0 [ 98.500525][ T7108] alloc_pages_bulk_noprof+0x77c/0x1110 [ 98.501987][ T7108] __page_pool_alloc_pages_slow+0x18f/0x770 [ 98.503527][ T7108] page_pool_alloc_netmem+0xc4/0x160 [ 98.505057][ T7108] page_pool_alloc_pages+0x1a/0x60 [ 98.506498][ T7108] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 98.508363][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 98.509877][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 98.511286][ T7108] __sys_bpf+0xfc6/0x49a0 [ 98.512441][ T7108] __x64_sys_bpf+0x78/0xc0 [ 98.513683][ T7108] do_syscall_64+0xcd/0x250 [ 98.514906][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.516472][ T7108] page last free pid 7104 tgid 7101 stack trace: [ 98.518223][ T7108] free_unref_page+0x5f4/0xdc0 [ 98.519499][ T7108] vfree+0x17a/0x890 [ 98.520542][ T7108] hashlimit_mt_destroy_v1+0x78/0x90 [ 98.522190][ T7108] cleanup_entry+0x19f/0x3a0 [ 98.523418][ T7108] translate_table+0xddd/0x17b0 [ 98.524697][ T7108] do_ip6t_set_ctl+0x605/0xc40 [ 98.525956][ T7108] nf_setsockopt+0x8a/0xf0 [ 98.527175][ T7108] ipv6_setsockopt+0x135/0x170 [ 98.528421][ T7108] rawv6_setsockopt+0xd7/0x680 [ 98.529761][ T7108] do_sock_setsockopt+0x222/0x480 [ 98.531096][ T7108] __sys_setsockopt+0x1a4/0x270 [ 98.532327][ T7108] __x64_sys_setsockopt+0xbd/0x160 [ 98.533607][ T7108] do_syscall_64+0xcd/0x250 [ 98.534789][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.536338][ T7108] Modules linked in: [ 98.537361][ T7108] CPU: 3 UID: 0 PID: 7108 Comm: syz.0.327 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 98.540417][ T7108] Tainted: [B]=BAD_PAGE [ 98.541498][ T7108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 98.544199][ T7108] Call Trace: [ 98.545068][ T7108] [ 98.545835][ T7108] dump_stack_lvl+0x16c/0x1f0 [ 98.547084][ T7108] bad_page+0xb3/0x1f0 [ 98.548097][ T7108] ? __pfx_bad_page+0x10/0x10 [ 98.549272][ T7108] ? page_bad_reason+0x9d/0x1e0 [ 98.550505][ T7108] free_unref_page+0x657/0xdc0 [ 98.551757][ T7108] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 98.553340][ T7108] ? __phys_addr+0xc6/0x150 [ 98.554533][ T7108] skb_free_head+0xa0/0x1d0 [ 98.555835][ T7108] skb_release_data+0x560/0x730 [ 98.557132][ T7108] sk_skb_reason_drop+0x129/0x1a0 [ 98.558443][ T7108] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 98.560197][ T7108] ? kernel_text_address+0x8d/0x100 [ 98.561836][ T7108] ? hlock_class+0x4e/0x130 [ 98.563080][ T7108] ? __lock_acquire+0x163e/0x3ce0 [ 98.564391][ T7108] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 98.566265][ T7108] ? hlock_class+0x4e/0x130 [ 98.567456][ T7108] ? __lock_acquire+0xbdd/0x3ce0 [ 98.568746][ T7108] ? __pfx___lock_acquire+0x10/0x10 [ 98.570096][ T7108] __netif_receive_skb_list_core+0x357/0x950 [ 98.571661][ T7108] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 98.573357][ T7108] ? trace_lock_acquire+0x14a/0x1d0 [ 98.574722][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 98.576392][ T7108] ? lock_acquire+0x2f/0xb0 [ 98.577575][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 98.579219][ T7108] netif_receive_skb_list_internal+0x753/0xdb0 [ 98.580824][ T7108] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 98.582579][ T7108] ? __pfx_eth_type_trans+0x10/0x10 [ 98.583953][ T7108] ? __build_skb_around+0x278/0x3b0 [ 98.585313][ T7108] netif_receive_skb_list+0x4f/0x4a0 [ 98.586693][ T7108] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 98.588424][ T7108] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 98.590159][ T7108] ? bpf_test_timer_continue+0x150/0x3d0 [ 98.591802][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 98.593179][ T7108] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 98.594756][ T7108] ? try_to_wake_up+0x154/0x14f0 [ 98.596054][ T7108] ? __pfx_try_to_wake_up+0x10/0x10 [ 98.597432][ T7108] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 98.599110][ T7108] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 98.600488][ T7108] ? 0xffffffffa0004340 [ 98.601615][ T7108] ? 0xffffffffa0004340 [ 98.602733][ T7108] ? 0xffffffffa0004340 [ 98.603816][ T7108] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 98.605347][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 98.606756][ T7108] ? lock_acquire+0x2f/0xb0 [ 98.608038][ T7108] ? __fget_files+0x40/0x3f0 [ 98.609582][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 98.611627][ T7108] ? fput+0x30/0x390 [ 98.612849][ T7108] ? __bpf_prog_get+0xa0/0x290 [ 98.614151][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 98.615706][ T7108] __sys_bpf+0xfc6/0x49a0 [ 98.616871][ T7108] ? __pfx___sys_bpf+0x10/0x10 [ 98.618168][ T7108] ? __schedule+0xe5d/0x5730 [ 98.619376][ T7108] ? __fget_files+0x23a/0x3f0 [ 98.620616][ T7108] ? do_futex+0x123/0x350 [ 98.621847][ T7108] ? __pfx_do_futex+0x10/0x10 [ 98.623191][ T7108] ? xfd_validate_state+0x5d/0x180 [ 98.624625][ T7108] ? rcu_is_watching+0x12/0xc0 [ 98.625952][ T7108] __x64_sys_bpf+0x78/0xc0 [ 98.627132][ T7108] ? lockdep_hardirqs_on+0x7c/0x110 [ 98.628969][ T7108] do_syscall_64+0xcd/0x250 [ 98.630277][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.631922][ T7108] RIP: 0033:0x7efff3f7e719 [ 98.633106][ T7108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.638175][ T7108] RSP: 002b:00007efff4e28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 98.640321][ T7108] RAX: ffffffffffffffda RBX: 00007efff4136058 RCX: 00007efff3f7e719 [ 98.642451][ T7108] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 98.644536][ T7108] RBP: 00007efff3ff132e R08: 0000000000000000 R09: 0000000000000000 [ 98.646678][ T7108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.648812][ T7108] R13: 0000000000000000 R14: 00007efff4136058 R15: 00007fffd7704958 [ 98.650954][ T7108] [ 98.651884][ T7108] BUG: Bad page state in process syz.0.327 pfn:28ef0 [ 98.653655][ T7108] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888028ef1e00 pfn:0x28ef0 [ 98.656258][ T7108] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 98.658187][ T7108] raw: 00fff00000000000 dead000000000040 ffff888036779000 0000000000000000 [ 98.660423][ T7108] raw: ffff888028ef1e00 0000000000000001 00000000ffffffff 0000000000000000 [ 98.662749][ T7108] page dumped because: page_pool leak [ 98.664146][ T7108] page_owner tracks the page as allocated [ 98.665613][ T7108] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7108, tgid 7096 (syz.0.327), ts 92314421753, free_ts 92308920149 [ 98.671096][ T7108] post_alloc_hook+0x2d1/0x350 [ 98.672372][ T7108] get_page_from_freelist+0x101e/0x3070 [ 98.673960][ T7108] __alloc_pages_noprof+0x223/0x25a0 [ 98.675359][ T7108] alloc_pages_bulk_noprof+0x77c/0x1110 [ 98.676910][ T7108] __page_pool_alloc_pages_slow+0x18f/0x770 [ 98.678592][ T7108] page_pool_alloc_netmem+0xc4/0x160 [ 98.680055][ T7108] page_pool_alloc_pages+0x1a/0x60 [ 98.681476][ T7108] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 98.683635][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 98.685544][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 98.687151][ T7108] __sys_bpf+0xfc6/0x49a0 [ 98.688500][ T7108] __x64_sys_bpf+0x78/0xc0 [ 98.689689][ T7108] do_syscall_64+0xcd/0x250 [ 98.690910][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.692470][ T7108] page last free pid 7104 tgid 7101 stack trace: [ 98.694124][ T7108] free_unref_page+0x5f4/0xdc0 [ 98.695394][ T7108] vfree+0x17a/0x890 [ 98.696426][ T7108] hashlimit_mt_destroy_v1+0x78/0x90 [ 98.697762][ T7108] cleanup_entry+0x19f/0x3a0 [ 98.698983][ T7108] translate_table+0xddd/0x17b0 [ 98.700262][ T7108] do_ip6t_set_ctl+0x605/0xc40 [ 98.701516][ T7108] nf_setsockopt+0x8a/0xf0 [ 98.702701][ T7108] ipv6_setsockopt+0x135/0x170 [ 98.703961][ T7108] rawv6_setsockopt+0xd7/0x680 [ 98.705229][ T7108] do_sock_setsockopt+0x222/0x480 [ 98.706625][ T7108] __sys_setsockopt+0x1a4/0x270 [ 98.708001][ T7108] __x64_sys_setsockopt+0xbd/0x160 [ 98.709376][ T7108] do_syscall_64+0xcd/0x250 [ 98.710670][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.712419][ T7108] Modules linked in: [ 98.713605][ T7108] CPU: 3 UID: 0 PID: 7108 Comm: syz.0.327 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 98.716732][ T7108] Tainted: [B]=BAD_PAGE [ 98.717818][ T7108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 98.720916][ T7108] Call Trace: [ 98.722542][ T7108] [ 98.723693][ T7108] dump_stack_lvl+0x16c/0x1f0 [ 98.725122][ T7108] bad_page+0xb3/0x1f0 [ 98.726409][ T7108] ? __pfx_bad_page+0x10/0x10 [ 98.727799][ T7108] ? page_bad_reason+0x9d/0x1e0 [ 98.729221][ T7108] free_unref_page+0x657/0xdc0 [ 98.730487][ T7108] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 98.732126][ T7108] ? __phys_addr+0xc6/0x150 [ 98.733335][ T7108] skb_free_head+0xa0/0x1d0 [ 98.734547][ T7108] skb_release_data+0x560/0x730 [ 98.735836][ T7108] sk_skb_reason_drop+0x129/0x1a0 [ 98.737172][ T7108] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 98.738975][ T7108] ? kernel_text_address+0x8d/0x100 [ 98.740339][ T7108] ? hlock_class+0x4e/0x130 [ 98.741531][ T7108] ? __lock_acquire+0x163e/0x3ce0 [ 98.742872][ T7108] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 98.744695][ T7108] ? hlock_class+0x4e/0x130 [ 98.745906][ T7108] ? __lock_acquire+0xbdd/0x3ce0 [ 98.747389][ T7108] ? __pfx___lock_acquire+0x10/0x10 [ 98.748768][ T7108] __netif_receive_skb_list_core+0x357/0x950 [ 98.750555][ T7108] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 98.752260][ T7108] ? trace_lock_acquire+0x14a/0x1d0 [ 98.753654][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 98.755382][ T7108] ? lock_acquire+0x2f/0xb0 [ 98.756699][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 98.758495][ T7108] netif_receive_skb_list_internal+0x753/0xdb0 [ 98.760195][ T7108] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 98.762421][ T7108] ? __pfx_eth_type_trans+0x10/0x10 [ 98.763937][ T7108] ? __build_skb_around+0x278/0x3b0 [ 98.765864][ T7108] netif_receive_skb_list+0x4f/0x4a0 [ 98.767551][ T7108] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 98.769329][ T7108] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 98.771075][ T7108] ? bpf_test_timer_continue+0x150/0x3d0 [ 98.772544][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 98.773937][ T7108] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 98.775472][ T7108] ? try_to_wake_up+0x154/0x14f0 [ 98.777051][ T7108] ? __pfx_try_to_wake_up+0x10/0x10 [ 98.778682][ T7108] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 98.780230][ T7108] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 98.781598][ T7108] ? 0xffffffffa0004340 [ 98.782712][ T7108] ? 0xffffffffa0004340 [ 98.783894][ T7108] ? 0xffffffffa0004340 [ 98.785002][ T7108] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 98.787309][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 98.788807][ T7108] ? lock_acquire+0x2f/0xb0 [ 98.790185][ T7108] ? __fget_files+0x40/0x3f0 [ 98.791401][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 98.792929][ T7108] ? fput+0x30/0x390 [ 98.793975][ T7108] ? __bpf_prog_get+0xa0/0x290 [ 98.795231][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 98.796811][ T7108] __sys_bpf+0xfc6/0x49a0 [ 98.797960][ T7108] ? __pfx___sys_bpf+0x10/0x10 [ 98.799216][ T7108] ? __schedule+0xe5d/0x5730 [ 98.800435][ T7108] ? __fget_files+0x23a/0x3f0 [ 98.801679][ T7108] ? do_futex+0x123/0x350 [ 98.802877][ T7108] ? __pfx_do_futex+0x10/0x10 [ 98.804181][ T7108] ? xfd_validate_state+0x5d/0x180 [ 98.805640][ T7108] ? rcu_is_watching+0x12/0xc0 [ 98.807062][ T7108] __x64_sys_bpf+0x78/0xc0 [ 98.808515][ T7108] ? lockdep_hardirqs_on+0x7c/0x110 [ 98.810192][ T7108] do_syscall_64+0xcd/0x250 [ 98.811618][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.813498][ T7108] RIP: 0033:0x7efff3f7e719 [ 98.814819][ T7108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.820351][ T7108] RSP: 002b:00007efff4e28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 98.822772][ T7108] RAX: ffffffffffffffda RBX: 00007efff4136058 RCX: 00007efff3f7e719 [ 98.824967][ T7108] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 98.827191][ T7108] RBP: 00007efff3ff132e R08: 0000000000000000 R09: 0000000000000000 [ 98.829297][ T7108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.831350][ T7108] R13: 0000000000000000 R14: 00007efff4136058 R15: 00007fffd7704958 [ 98.833405][ T7108] [ 98.834334][ T7108] BUG: Bad page state in process syz.0.327 pfn:4c685 [ 98.836085][ T7108] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2 pfn:0x4c685 [ 98.838385][ T7108] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 98.840345][ T7108] raw: 00fff00000000000 dead000000000040 ffff888036779000 0000000000000000 [ 98.842607][ T7108] raw: 0000000000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 98.844827][ T7108] page dumped because: page_pool leak [ 98.846258][ T7108] page_owner tracks the page as allocated [ 98.847810][ T7108] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7108, tgid 7096 (syz.0.327), ts 92314417025, free_ts 92308924466 [ 98.852505][ T7108] post_alloc_hook+0x2d1/0x350 [ 98.853804][ T7108] get_page_from_freelist+0x101e/0x3070 [ 98.855237][ T7108] __alloc_pages_noprof+0x223/0x25a0 [ 98.856624][ T7108] alloc_pages_bulk_noprof+0x77c/0x1110 [ 98.858278][ T7108] __page_pool_alloc_pages_slow+0x18f/0x770 [ 98.859823][ T7108] page_pool_alloc_netmem+0xc4/0x160 [ 98.861187][ T7108] page_pool_alloc_pages+0x1a/0x60 [ 98.862539][ T7108] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 98.864224][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 98.866113][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 98.867775][ T7108] __sys_bpf+0xfc6/0x49a0 [ 98.869080][ T7108] __x64_sys_bpf+0x78/0xc0 [ 98.870345][ T7108] do_syscall_64+0xcd/0x250 [ 98.871579][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.873146][ T7108] page last free pid 7104 tgid 7101 stack trace: [ 98.874800][ T7108] free_unref_page+0x5f4/0xdc0 [ 98.876074][ T7108] vfree+0x17a/0x890 [ 98.877184][ T7108] hashlimit_mt_destroy_v1+0x78/0x90 [ 98.878592][ T7108] cleanup_entry+0x19f/0x3a0 [ 98.879796][ T7108] translate_table+0xddd/0x17b0 [ 98.881084][ T7108] do_ip6t_set_ctl+0x605/0xc40 [ 98.882366][ T7108] nf_setsockopt+0x8a/0xf0 [ 98.883523][ T7108] ipv6_setsockopt+0x135/0x170 [ 98.884772][ T7108] rawv6_setsockopt+0xd7/0x680 [ 98.886108][ T7108] do_sock_setsockopt+0x222/0x480 [ 98.887684][ T7108] __sys_setsockopt+0x1a4/0x270 [ 98.889059][ T7108] __x64_sys_setsockopt+0xbd/0x160 [ 98.890500][ T7108] do_syscall_64+0xcd/0x250 [ 98.891800][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.893447][ T7108] Modules linked in: [ 98.894655][ T7108] CPU: 3 UID: 0 PID: 7108 Comm: syz.0.327 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 98.897806][ T7108] Tainted: [B]=BAD_PAGE [ 98.898903][ T7108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 98.901682][ T7108] Call Trace: [ 98.902593][ T7108] [ 98.903381][ T7108] dump_stack_lvl+0x16c/0x1f0 [ 98.904622][ T7108] bad_page+0xb3/0x1f0 [ 98.905682][ T7108] ? __pfx_bad_page+0x10/0x10 [ 98.906923][ T7108] ? page_bad_reason+0x9d/0x1e0 [ 98.908197][ T7108] free_unref_page+0x657/0xdc0 [ 98.909413][ T7108] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 98.910946][ T7108] ? __phys_addr+0xc6/0x150 [ 98.912134][ T7108] skb_free_head+0xa0/0x1d0 [ 98.913315][ T7108] skb_release_data+0x560/0x730 [ 98.914584][ T7108] sk_skb_reason_drop+0x129/0x1a0 [ 98.915893][ T7108] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 98.917609][ T7108] ? kernel_text_address+0x8d/0x100 [ 98.918959][ T7108] ? hlock_class+0x4e/0x130 [ 98.920132][ T7108] ? __lock_acquire+0x163e/0x3ce0 [ 98.921431][ T7108] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 98.923259][ T7108] ? hlock_class+0x4e/0x130 [ 98.924416][ T7108] ? __lock_acquire+0xbdd/0x3ce0 [ 98.925742][ T7108] ? __pfx___lock_acquire+0x10/0x10 [ 98.927100][ T7108] __netif_receive_skb_list_core+0x357/0x950 [ 98.928632][ T7108] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 98.930346][ T7108] ? trace_lock_acquire+0x14a/0x1d0 [ 98.931653][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 98.933263][ T7108] ? lock_acquire+0x2f/0xb0 [ 98.934432][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 98.936026][ T7108] netif_receive_skb_list_internal+0x753/0xdb0 [ 98.937609][ T7108] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 98.939323][ T7108] ? __pfx_eth_type_trans+0x10/0x10 [ 98.940674][ T7108] ? __build_skb_around+0x278/0x3b0 [ 98.942055][ T7108] netif_receive_skb_list+0x4f/0x4a0 [ 98.943562][ T7108] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 98.945370][ T7108] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 98.947050][ T7108] ? bpf_test_timer_continue+0x150/0x3d0 [ 98.948508][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 98.949886][ T7108] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 98.951449][ T7108] ? try_to_wake_up+0x154/0x14f0 [ 98.952744][ T7108] ? __pfx_try_to_wake_up+0x10/0x10 [ 98.954107][ T7108] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 98.955653][ T7108] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 98.957069][ T7108] ? 0xffffffffa0004340 [ 98.958170][ T7108] ? 0xffffffffa0004340 [ 98.959268][ T7108] ? 0xffffffffa0004340 [ 98.960361][ T7108] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 98.961933][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 98.963307][ T7108] ? lock_acquire+0x2f/0xb0 [ 98.964502][ T7108] ? __fget_files+0x40/0x3f0 [ 98.965668][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 98.967330][ T7108] ? fput+0x30/0x390 [ 98.968366][ T7108] ? __bpf_prog_get+0xa0/0x290 [ 98.969590][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 98.971222][ T7108] __sys_bpf+0xfc6/0x49a0 [ 98.972349][ T7108] ? __pfx___sys_bpf+0x10/0x10 [ 98.973547][ T7108] ? __schedule+0xe5d/0x5730 [ 98.974821][ T7108] ? __fget_files+0x23a/0x3f0 [ 98.976138][ T7108] ? do_futex+0x123/0x350 [ 98.977322][ T7108] ? __pfx_do_futex+0x10/0x10 [ 98.978674][ T7108] ? xfd_validate_state+0x5d/0x180 [ 98.980401][ T7108] ? rcu_is_watching+0x12/0xc0 [ 98.982035][ T7108] __x64_sys_bpf+0x78/0xc0 [ 98.983470][ T7108] ? lockdep_hardirqs_on+0x7c/0x110 [ 98.985065][ T7108] do_syscall_64+0xcd/0x250 [ 98.986417][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.988253][ T7108] RIP: 0033:0x7efff3f7e719 [ 98.989528][ T7108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.994775][ T7108] RSP: 002b:00007efff4e28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 98.996946][ T7108] RAX: ffffffffffffffda RBX: 00007efff4136058 RCX: 00007efff3f7e719 [ 98.999026][ T7108] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 99.001494][ T7108] RBP: 00007efff3ff132e R08: 0000000000000000 R09: 0000000000000000 [ 99.003693][ T7108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.006027][ T7108] R13: 0000000000000000 R14: 00007efff4136058 R15: 00007fffd7704958 [ 99.008123][ T7108] [ 99.009057][ T7108] BUG: Bad page state in process syz.0.327 pfn:4c19b [ 99.010964][ T7108] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000002 pfn:0x4c19b [ 99.013560][ T7108] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 99.015413][ T7108] raw: 00fff00000000000 dead000000000040 ffff888036779000 0000000000000000 [ 99.017676][ T7108] raw: ffff888000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 99.019932][ T7108] page dumped because: page_pool leak [ 99.021332][ T7108] page_owner tracks the page as allocated [ 99.022815][ T7108] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7108, tgid 7096 (syz.0.327), ts 92314412320, free_ts 92308928597 [ 99.027356][ T7108] post_alloc_hook+0x2d1/0x350 [ 99.028704][ T7108] get_page_from_freelist+0x101e/0x3070 [ 99.030209][ T7108] __alloc_pages_noprof+0x223/0x25a0 [ 99.031593][ T7108] alloc_pages_bulk_noprof+0x77c/0x1110 [ 99.033036][ T7108] __page_pool_alloc_pages_slow+0x18f/0x770 [ 99.034582][ T7108] page_pool_alloc_netmem+0xc4/0x160 [ 99.035950][ T7108] page_pool_alloc_pages+0x1a/0x60 [ 99.037329][ T7108] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 99.038915][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 99.040339][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 99.042400][ T7108] __sys_bpf+0xfc6/0x49a0 [ 99.044535][ T7108] __x64_sys_bpf+0x78/0xc0 [ 99.045763][ T7108] do_syscall_64+0xcd/0x250 [ 99.046964][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.048639][ T7108] page last free pid 7104 tgid 7101 stack trace: [ 99.050306][ T7108] free_unref_page+0x5f4/0xdc0 [ 99.051632][ T7108] vfree+0x17a/0x890 [ 99.052831][ T7108] hashlimit_mt_destroy_v1+0x78/0x90 [ 99.054379][ T7108] cleanup_entry+0x19f/0x3a0 [ 99.055793][ T7108] translate_table+0xddd/0x17b0 [ 99.057314][ T7108] do_ip6t_set_ctl+0x605/0xc40 [ 99.058819][ T7108] nf_setsockopt+0x8a/0xf0 [ 99.060483][ T7108] ipv6_setsockopt+0x135/0x170 [ 99.062229][ T7108] rawv6_setsockopt+0xd7/0x680 [ 99.063833][ T7108] do_sock_setsockopt+0x222/0x480 [ 99.065351][ T7108] __sys_setsockopt+0x1a4/0x270 [ 99.066838][ T7108] __x64_sys_setsockopt+0xbd/0x160 [ 99.068533][ T7108] do_syscall_64+0xcd/0x250 [ 99.069874][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.071395][ T7108] Modules linked in: [ 99.072351][ T7108] CPU: 3 UID: 0 PID: 7108 Comm: syz.0.327 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 99.075301][ T7108] Tainted: [B]=BAD_PAGE [ 99.076372][ T7108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 99.079043][ T7108] Call Trace: [ 99.079910][ T7108] [ 99.080672][ T7108] dump_stack_lvl+0x16c/0x1f0 [ 99.082542][ T7108] bad_page+0xb3/0x1f0 [ 99.083777][ T7108] ? __pfx_bad_page+0x10/0x10 [ 99.085005][ T7108] ? page_bad_reason+0x9d/0x1e0 [ 99.086445][ T7108] free_unref_page+0x657/0xdc0 [ 99.087673][ T7108] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 99.089342][ T7108] ? __phys_addr+0xc6/0x150 [ 99.090566][ T7108] skb_free_head+0xa0/0x1d0 [ 99.091776][ T7108] skb_release_data+0x560/0x730 [ 99.093053][ T7108] sk_skb_reason_drop+0x129/0x1a0 [ 99.094422][ T7108] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 99.096283][ T7108] ? kernel_text_address+0x8d/0x100 [ 99.097651][ T7108] ? hlock_class+0x4e/0x130 [ 99.098876][ T7108] ? __lock_acquire+0x163e/0x3ce0 [ 99.100135][ T7108] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 99.102010][ T7108] ? hlock_class+0x4e/0x130 [ 99.103276][ T7108] ? __lock_acquire+0xbdd/0x3ce0 [ 99.104654][ T7108] ? __pfx___lock_acquire+0x10/0x10 [ 99.106035][ T7108] __netif_receive_skb_list_core+0x357/0x950 [ 99.107681][ T7108] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 99.109740][ T7108] ? trace_lock_acquire+0x14a/0x1d0 [ 99.111343][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 99.113004][ T7108] ? lock_acquire+0x2f/0xb0 [ 99.114238][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 99.115976][ T7108] netif_receive_skb_list_internal+0x753/0xdb0 [ 99.117701][ T7108] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 99.119601][ T7108] ? __pfx_eth_type_trans+0x10/0x10 [ 99.121024][ T7108] ? __build_skb_around+0x278/0x3b0 [ 99.122443][ T7108] netif_receive_skb_list+0x4f/0x4a0 [ 99.123832][ T7108] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 99.125491][ T7108] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 99.127229][ T7108] ? bpf_test_timer_continue+0x150/0x3d0 [ 99.128694][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 99.130070][ T7108] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 99.131580][ T7108] ? try_to_wake_up+0x154/0x14f0 [ 99.132881][ T7108] ? __pfx_try_to_wake_up+0x10/0x10 [ 99.134240][ T7108] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 99.135783][ T7108] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 99.137152][ T7108] ? 0xffffffffa0004340 [ 99.138235][ T7108] ? 0xffffffffa0004340 [ 99.139343][ T7108] ? 0xffffffffa0004340 [ 99.140712][ T7108] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 99.142371][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 99.144380][ T7108] ? lock_acquire+0x2f/0xb0 [ 99.145593][ T7108] ? __fget_files+0x40/0x3f0 [ 99.146844][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 99.148386][ T7108] ? fput+0x30/0x390 [ 99.149435][ T7108] ? __bpf_prog_get+0xa0/0x290 [ 99.150815][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 99.152295][ T7108] __sys_bpf+0xfc6/0x49a0 [ 99.153423][ T7108] ? __pfx___sys_bpf+0x10/0x10 [ 99.154688][ T7108] ? __schedule+0xe5d/0x5730 [ 99.155910][ T7108] ? __fget_files+0x23a/0x3f0 [ 99.157132][ T7108] ? do_futex+0x123/0x350 [ 99.158254][ T7108] ? __pfx_do_futex+0x10/0x10 [ 99.159491][ T7108] ? xfd_validate_state+0x5d/0x180 [ 99.160905][ T7108] ? rcu_is_watching+0x12/0xc0 [ 99.162255][ T7108] __x64_sys_bpf+0x78/0xc0 [ 99.163436][ T7108] ? lockdep_hardirqs_on+0x7c/0x110 [ 99.165276][ T7108] do_syscall_64+0xcd/0x250 [ 99.166835][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.168512][ T7108] RIP: 0033:0x7efff3f7e719 [ 99.169712][ T7108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.174644][ T7108] RSP: 002b:00007efff4e28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 99.176838][ T7108] RAX: ffffffffffffffda RBX: 00007efff4136058 RCX: 00007efff3f7e719 [ 99.178929][ T7108] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 99.180985][ T7108] RBP: 00007efff3ff132e R08: 0000000000000000 R09: 0000000000000000 [ 99.183198][ T7108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.185530][ T7108] R13: 0000000000000000 R14: 00007efff4136058 R15: 00007fffd7704958 [ 99.187924][ T7108] [ 99.188898][ T7108] BUG: Bad page state in process syz.0.327 pfn:3309b [ 99.190800][ T7108] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803309b000 pfn:0x3309b [ 99.193422][ T7108] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 99.195216][ T7108] raw: 00fff00000000000 dead000000000040 ffff888036779000 0000000000000000 [ 99.197837][ T7108] raw: ffff88803309b000 0000000000000001 00000000ffffffff 0000000000000000 [ 99.200334][ T7108] page dumped because: page_pool leak [ 99.201884][ T7108] page_owner tracks the page as allocated [ 99.203489][ T7108] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7108, tgid 7096 (syz.0.327), ts 92314407567, free_ts 92308932868 [ 99.208270][ T7108] post_alloc_hook+0x2d1/0x350 [ 99.209643][ T7108] get_page_from_freelist+0x101e/0x3070 [ 99.211173][ T7108] __alloc_pages_noprof+0x223/0x25a0 [ 99.212582][ T7108] alloc_pages_bulk_noprof+0x77c/0x1110 [ 99.214368][ T7108] __page_pool_alloc_pages_slow+0x18f/0x770 [ 99.216180][ T7108] page_pool_alloc_netmem+0xc4/0x160 [ 99.217718][ T7108] page_pool_alloc_pages+0x1a/0x60 [ 99.219148][ T7108] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 99.220703][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 99.222048][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 99.223444][ T7108] __sys_bpf+0xfc6/0x49a0 [ 99.224588][ T7108] __x64_sys_bpf+0x78/0xc0 [ 99.225721][ T7108] do_syscall_64+0xcd/0x250 [ 99.226913][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.229120][ T7108] page last free pid 7104 tgid 7101 stack trace: [ 99.230950][ T7108] free_unref_page+0x5f4/0xdc0 [ 99.232171][ T7108] vfree+0x17a/0x890 [ 99.233205][ T7108] hashlimit_mt_destroy_v1+0x78/0x90 [ 99.234743][ T7108] cleanup_entry+0x19f/0x3a0 [ 99.235966][ T7108] translate_table+0xddd/0x17b0 [ 99.237472][ T7108] do_ip6t_set_ctl+0x605/0xc40 [ 99.238842][ T7108] nf_setsockopt+0x8a/0xf0 [ 99.240130][ T7108] ipv6_setsockopt+0x135/0x170 [ 99.241430][ T7108] rawv6_setsockopt+0xd7/0x680 [ 99.242670][ T7108] do_sock_setsockopt+0x222/0x480 [ 99.243938][ T7108] __sys_setsockopt+0x1a4/0x270 [ 99.245213][ T7108] __x64_sys_setsockopt+0xbd/0x160 [ 99.246780][ T7108] do_syscall_64+0xcd/0x250 [ 99.248439][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.250150][ T7108] Modules linked in: [ 99.251154][ T7108] CPU: 3 UID: 0 PID: 7108 Comm: syz.0.327 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 99.254230][ T7108] Tainted: [B]=BAD_PAGE [ 99.255323][ T7108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 99.258096][ T7108] Call Trace: [ 99.258938][ T7108] [ 99.259706][ T7108] dump_stack_lvl+0x16c/0x1f0 [ 99.260959][ T7108] bad_page+0xb3/0x1f0 [ 99.262057][ T7108] ? __pfx_bad_page+0x10/0x10 [ 99.263280][ T7108] ? page_bad_reason+0x9d/0x1e0 [ 99.264789][ T7108] free_unref_page+0x657/0xdc0 [ 99.266171][ T7108] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 99.267978][ T7108] ? __phys_addr+0xc6/0x150 [ 99.269320][ T7108] skb_free_head+0xa0/0x1d0 [ 99.270612][ T7108] skb_release_data+0x560/0x730 [ 99.271898][ T7108] sk_skb_reason_drop+0x129/0x1a0 [ 99.273223][ T7108] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 99.274965][ T7108] ? kernel_text_address+0x8d/0x100 [ 99.276343][ T7108] ? hlock_class+0x4e/0x130 [ 99.277554][ T7108] ? __lock_acquire+0x163e/0x3ce0 [ 99.278867][ T7108] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 99.280708][ T7108] ? hlock_class+0x4e/0x130 [ 99.281922][ T7108] ? __lock_acquire+0xbdd/0x3ce0 [ 99.283166][ T7108] ? __pfx___lock_acquire+0x10/0x10 [ 99.284471][ T7108] __netif_receive_skb_list_core+0x357/0x950 [ 99.286016][ T7108] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 99.288218][ T7108] ? trace_lock_acquire+0x14a/0x1d0 [ 99.289595][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 99.291289][ T7108] ? lock_acquire+0x2f/0xb0 [ 99.292430][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 99.294015][ T7108] netif_receive_skb_list_internal+0x753/0xdb0 [ 99.295578][ T7108] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 99.297276][ T7108] ? __pfx_eth_type_trans+0x10/0x10 [ 99.298611][ T7108] ? __build_skb_around+0x278/0x3b0 [ 99.299908][ T7108] netif_receive_skb_list+0x4f/0x4a0 [ 99.301236][ T7108] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 99.302824][ T7108] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 99.304447][ T7108] ? bpf_test_timer_continue+0x150/0x3d0 [ 99.305879][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 99.307193][ T7108] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 99.308643][ T7108] ? try_to_wake_up+0x154/0x14f0 [ 99.309917][ T7108] ? __pfx_try_to_wake_up+0x10/0x10 [ 99.311241][ T7108] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 99.312760][ T7108] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 99.314162][ T7108] ? 0xffffffffa0004340 [ 99.315278][ T7108] ? 0xffffffffa0004340 [ 99.316398][ T7108] ? 0xffffffffa0004340 [ 99.317476][ T7108] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 99.319044][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 99.320461][ T7108] ? lock_acquire+0x2f/0xb0 [ 99.321667][ T7108] ? __fget_files+0x40/0x3f0 [ 99.322919][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 99.324453][ T7108] ? fput+0x30/0x390 [ 99.325491][ T7108] ? __bpf_prog_get+0xa0/0x290 [ 99.326825][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 99.328676][ T7108] __sys_bpf+0xfc6/0x49a0 [ 99.330032][ T7108] ? __pfx___sys_bpf+0x10/0x10 [ 99.331543][ T7108] ? __schedule+0xe5d/0x5730 [ 99.332838][ T7108] ? __fget_files+0x23a/0x3f0 [ 99.334054][ T7108] ? do_futex+0x123/0x350 [ 99.335153][ T7108] ? __pfx_do_futex+0x10/0x10 [ 99.336348][ T7108] ? xfd_validate_state+0x5d/0x180 [ 99.337679][ T7108] ? rcu_is_watching+0x12/0xc0 [ 99.338942][ T7108] __x64_sys_bpf+0x78/0xc0 [ 99.340109][ T7108] ? lockdep_hardirqs_on+0x7c/0x110 [ 99.341459][ T7108] do_syscall_64+0xcd/0x250 [ 99.342650][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.344154][ T7108] RIP: 0033:0x7efff3f7e719 [ 99.345282][ T7108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.350205][ T7108] RSP: 002b:00007efff4e28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 99.352508][ T7108] RAX: ffffffffffffffda RBX: 00007efff4136058 RCX: 00007efff3f7e719 [ 99.354647][ T7108] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 99.356704][ T7108] RBP: 00007efff3ff132e R08: 0000000000000000 R09: 0000000000000000 [ 99.358847][ T7108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.361032][ T7108] R13: 0000000000000000 R14: 00007efff4136058 R15: 00007fffd7704958 [ 99.363188][ T7108] [ 99.364131][ T7108] BUG: Bad page state in process syz.0.327 pfn:30b20 [ 99.365964][ T7108] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888030b20500 pfn:0x30b20 [ 99.368644][ T7108] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 99.370563][ T7108] raw: 00fff00000000000 dead000000000040 ffff888036779000 0000000000000000 [ 99.372815][ T7108] raw: ffff888030b20500 0000000000000001 00000000ffffffff 0000000000000000 [ 99.375207][ T7108] page dumped because: page_pool leak [ 99.376680][ T7108] page_owner tracks the page as allocated [ 99.378249][ T7108] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7108, tgid 7096 (syz.0.327), ts 92314402589, free_ts 92308937511 [ 99.382523][ T7108] post_alloc_hook+0x2d1/0x350 [ 99.383806][ T7108] get_page_from_freelist+0x101e/0x3070 [ 99.385281][ T7108] __alloc_pages_noprof+0x223/0x25a0 [ 99.386691][ T7108] alloc_pages_bulk_noprof+0x77c/0x1110 [ 99.388228][ T7108] __page_pool_alloc_pages_slow+0x18f/0x770 [ 99.389803][ T7108] page_pool_alloc_netmem+0xc4/0x160 [ 99.391299][ T7108] page_pool_alloc_pages+0x1a/0x60 [ 99.392733][ T7108] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 99.394378][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 99.395799][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 99.397230][ T7108] __sys_bpf+0xfc6/0x49a0 [ 99.398399][ T7108] __x64_sys_bpf+0x78/0xc0 [ 99.399604][ T7108] do_syscall_64+0xcd/0x250 [ 99.400839][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.402476][ T7108] page last free pid 7104 tgid 7101 stack trace: [ 99.404196][ T7108] free_unref_page+0x5f4/0xdc0 [ 99.405495][ T7108] vfree+0x17a/0x890 [ 99.406764][ T7108] hashlimit_mt_destroy_v1+0x78/0x90 [ 99.408424][ T7108] cleanup_entry+0x19f/0x3a0 [ 99.409777][ T7108] translate_table+0xddd/0x17b0 [ 99.411171][ T7108] do_ip6t_set_ctl+0x605/0xc40 [ 99.412494][ T7108] nf_setsockopt+0x8a/0xf0 [ 99.413819][ T7108] ipv6_setsockopt+0x135/0x170 [ 99.415204][ T7108] rawv6_setsockopt+0xd7/0x680 [ 99.416510][ T7108] do_sock_setsockopt+0x222/0x480 [ 99.417965][ T7108] __sys_setsockopt+0x1a4/0x270 [ 99.419265][ T7108] __x64_sys_setsockopt+0xbd/0x160 [ 99.420629][ T7108] do_syscall_64+0xcd/0x250 [ 99.421846][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.423436][ T7108] Modules linked in: [ 99.424569][ T7108] CPU: 3 UID: 0 PID: 7108 Comm: syz.0.327 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 99.427864][ T7108] Tainted: [B]=BAD_PAGE [ 99.428996][ T7108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 99.431850][ T7108] Call Trace: [ 99.432759][ T7108] [ 99.433561][ T7108] dump_stack_lvl+0x16c/0x1f0 [ 99.434863][ T7108] bad_page+0xb3/0x1f0 [ 99.435994][ T7108] ? __pfx_bad_page+0x10/0x10 [ 99.437256][ T7108] ? page_bad_reason+0x9d/0x1e0 [ 99.438584][ T7108] free_unref_page+0x657/0xdc0 [ 99.439958][ T7108] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 99.441857][ T7108] ? __phys_addr+0xc6/0x150 [ 99.443295][ T7108] skb_free_head+0xa0/0x1d0 [ 99.444883][ T7108] skb_release_data+0x560/0x730 [ 99.446550][ T7108] sk_skb_reason_drop+0x129/0x1a0 [ 99.448216][ T7108] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 99.450326][ T7108] ? kernel_text_address+0x8d/0x100 [ 99.452219][ T7108] ? hlock_class+0x4e/0x130 [ 99.453552][ T7108] ? __lock_acquire+0x163e/0x3ce0 [ 99.454926][ T7108] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 99.456797][ T7108] ? hlock_class+0x4e/0x130 [ 99.458022][ T7108] ? __lock_acquire+0xbdd/0x3ce0 [ 99.459327][ T7108] ? __pfx___lock_acquire+0x10/0x10 [ 99.460698][ T7108] __netif_receive_skb_list_core+0x357/0x950 [ 99.462324][ T7108] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 99.464030][ T7108] ? trace_lock_acquire+0x14a/0x1d0 [ 99.465464][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 99.466984][ T7108] ? lock_acquire+0x2f/0xb0 [ 99.468205][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 99.469890][ T7108] netif_receive_skb_list_internal+0x753/0xdb0 [ 99.471554][ T7108] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 99.473322][ T7108] ? __pfx_eth_type_trans+0x10/0x10 [ 99.474754][ T7108] ? __build_skb_around+0x278/0x3b0 [ 99.476138][ T7108] netif_receive_skb_list+0x4f/0x4a0 [ 99.477544][ T7108] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 99.479204][ T7108] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 99.480949][ T7108] ? bpf_test_timer_continue+0x150/0x3d0 [ 99.482367][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 99.483816][ T7108] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 99.485432][ T7108] ? try_to_wake_up+0x154/0x14f0 [ 99.487233][ T7108] ? __pfx_try_to_wake_up+0x10/0x10 [ 99.488896][ T7108] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 99.490679][ T7108] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 99.492191][ T7108] ? 0xffffffffa0004340 [ 99.493332][ T7108] ? 0xffffffffa0004340 [ 99.494443][ T7108] ? 0xffffffffa0004340 [ 99.495574][ T7108] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 99.497178][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 99.498646][ T7108] ? lock_acquire+0x2f/0xb0 [ 99.499898][ T7108] ? __fget_files+0x40/0x3f0 [ 99.501140][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 99.502723][ T7108] ? fput+0x30/0x390 [ 99.503782][ T7108] ? __bpf_prog_get+0xa0/0x290 [ 99.505139][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 99.506851][ T7108] __sys_bpf+0xfc6/0x49a0 [ 99.508019][ T7108] ? __pfx___sys_bpf+0x10/0x10 [ 99.509284][ T7108] ? __schedule+0xe5d/0x5730 [ 99.510611][ T7108] ? __fget_files+0x23a/0x3f0 [ 99.511975][ T7108] ? do_futex+0x123/0x350 [ 99.513217][ T7108] ? __pfx_do_futex+0x10/0x10 [ 99.514473][ T7108] ? xfd_validate_state+0x5d/0x180 [ 99.515812][ T7108] ? rcu_is_watching+0x12/0xc0 [ 99.517016][ T7108] __x64_sys_bpf+0x78/0xc0 [ 99.518063][ T7108] ? lockdep_hardirqs_on+0x7c/0x110 [ 99.519421][ T7108] do_syscall_64+0xcd/0x250 [ 99.520695][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.522392][ T7108] RIP: 0033:0x7efff3f7e719 [ 99.523665][ T7108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.529733][ T7108] RSP: 002b:00007efff4e28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 99.532131][ T7108] RAX: ffffffffffffffda RBX: 00007efff4136058 RCX: 00007efff3f7e719 [ 99.534374][ T7108] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 99.536512][ T7108] RBP: 00007efff3ff132e R08: 0000000000000000 R09: 0000000000000000 [ 99.538615][ T7108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.541161][ T7108] R13: 0000000000000000 R14: 00007efff4136058 R15: 00007fffd7704958 [ 99.543263][ T7108] [ 99.544213][ T7108] BUG: Bad page state in process syz.0.327 pfn:4816e [ 99.546022][ T7108] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804816fe00 pfn:0x4816e [ 99.548728][ T7108] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 99.550593][ T7108] raw: 00fff00000000000 dead000000000040 ffff888036779000 0000000000000000 [ 99.552963][ T7108] raw: ffff88804816fe00 0000000000000001 00000000ffffffff 0000000000000000 [ 99.555285][ T7108] page dumped because: page_pool leak [ 99.556789][ T7108] page_owner tracks the page as allocated [ 99.558477][ T7108] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7108, tgid 7096 (syz.0.327), ts 92314397528, free_ts 92308941481 [ 99.562956][ T7108] post_alloc_hook+0x2d1/0x350 [ 99.564393][ T7108] get_page_from_freelist+0x101e/0x3070 [ 99.566042][ T7108] __alloc_pages_noprof+0x223/0x25a0 [ 99.567668][ T7108] alloc_pages_bulk_noprof+0x77c/0x1110 [ 99.569343][ T7108] __page_pool_alloc_pages_slow+0x18f/0x770 [ 99.571114][ T7108] page_pool_alloc_netmem+0xc4/0x160 [ 99.572620][ T7108] page_pool_alloc_pages+0x1a/0x60 [ 99.573995][ T7108] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 99.575636][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 99.577120][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 99.578566][ T7108] __sys_bpf+0xfc6/0x49a0 [ 99.579903][ T7108] __x64_sys_bpf+0x78/0xc0 [ 99.581174][ T7108] do_syscall_64+0xcd/0x250 [ 99.582654][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.584385][ T7108] page last free pid 7104 tgid 7101 stack trace: [ 99.586082][ T7108] free_unref_page+0x5f4/0xdc0 [ 99.587695][ T7108] vfree+0x17a/0x890 [ 99.588750][ T7108] hashlimit_mt_destroy_v1+0x78/0x90 [ 99.590216][ T7108] cleanup_entry+0x19f/0x3a0 [ 99.591453][ T7108] translate_table+0xddd/0x17b0 [ 99.592853][ T7108] do_ip6t_set_ctl+0x605/0xc40 [ 99.594139][ T7108] nf_setsockopt+0x8a/0xf0 [ 99.595319][ T7108] ipv6_setsockopt+0x135/0x170 [ 99.596654][ T7108] rawv6_setsockopt+0xd7/0x680 [ 99.598106][ T7108] do_sock_setsockopt+0x222/0x480 [ 99.599471][ T7108] __sys_setsockopt+0x1a4/0x270 [ 99.600879][ T7108] __x64_sys_setsockopt+0xbd/0x160 [ 99.602331][ T7108] do_syscall_64+0xcd/0x250 [ 99.603641][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.605594][ T7108] Modules linked in: [ 99.606852][ T7108] CPU: 3 UID: 0 PID: 7108 Comm: syz.0.327 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 99.610312][ T7108] Tainted: [B]=BAD_PAGE [ 99.611447][ T7108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 99.614274][ T7108] Call Trace: [ 99.615186][ T7108] [ 99.615993][ T7108] dump_stack_lvl+0x16c/0x1f0 [ 99.617300][ T7108] bad_page+0xb3/0x1f0 [ 99.618452][ T7108] ? __pfx_bad_page+0x10/0x10 [ 99.619723][ T7108] ? page_bad_reason+0x9d/0x1e0 [ 99.620971][ T7108] free_unref_page+0x657/0xdc0 [ 99.622199][ T7108] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 99.623798][ T7108] ? __phys_addr+0xc6/0x150 [ 99.625170][ T7108] skb_free_head+0xa0/0x1d0 [ 99.626612][ T7108] skb_release_data+0x560/0x730 [ 99.628042][ T7108] sk_skb_reason_drop+0x129/0x1a0 [ 99.629401][ T7108] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 99.631209][ T7108] ? kernel_text_address+0x8d/0x100 [ 99.632696][ T7108] ? hlock_class+0x4e/0x130 [ 99.633937][ T7108] ? __lock_acquire+0x163e/0x3ce0 [ 99.635270][ T7108] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 99.637150][ T7108] ? hlock_class+0x4e/0x130 [ 99.638419][ T7108] ? __lock_acquire+0xbdd/0x3ce0 [ 99.639764][ T7108] ? __pfx___lock_acquire+0x10/0x10 [ 99.641174][ T7108] __netif_receive_skb_list_core+0x357/0x950 [ 99.642828][ T7108] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 99.644568][ T7108] ? trace_lock_acquire+0x14a/0x1d0 [ 99.645992][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 99.647819][ T7108] ? lock_acquire+0x2f/0xb0 [ 99.649301][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 99.651057][ T7108] netif_receive_skb_list_internal+0x753/0xdb0 [ 99.652724][ T7108] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 99.654534][ T7108] ? __pfx_eth_type_trans+0x10/0x10 [ 99.655970][ T7108] ? __build_skb_around+0x278/0x3b0 [ 99.657477][ T7108] netif_receive_skb_list+0x4f/0x4a0 [ 99.659038][ T7108] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 99.661215][ T7108] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 99.663167][ T7108] ? bpf_test_timer_continue+0x150/0x3d0 [ 99.664985][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 99.666723][ T7108] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 99.668513][ T7108] ? try_to_wake_up+0x154/0x14f0 [ 99.669884][ T7108] ? __pfx_try_to_wake_up+0x10/0x10 [ 99.671450][ T7108] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 99.673114][ T7108] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 99.674573][ T7108] ? 0xffffffffa0004340 [ 99.675720][ T7108] ? 0xffffffffa0004340 [ 99.676855][ T7108] ? 0xffffffffa0004340 [ 99.678019][ T7108] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 99.679729][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 99.681763][ T7108] ? lock_acquire+0x2f/0xb0 [ 99.683036][ T7108] ? __fget_files+0x40/0x3f0 [ 99.684293][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 99.685855][ T7108] ? fput+0x30/0x390 [ 99.686925][ T7108] ? __bpf_prog_get+0xa0/0x290 [ 99.688181][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 99.689776][ T7108] __sys_bpf+0xfc6/0x49a0 [ 99.690974][ T7108] ? __pfx___sys_bpf+0x10/0x10 [ 99.692286][ T7108] ? __schedule+0xe5d/0x5730 [ 99.693604][ T7108] ? __fget_files+0x23a/0x3f0 [ 99.694979][ T7108] ? do_futex+0x123/0x350 [ 99.696254][ T7108] ? __pfx_do_futex+0x10/0x10 [ 99.697690][ T7108] ? xfd_validate_state+0x5d/0x180 [ 99.699462][ T7108] ? rcu_is_watching+0x12/0xc0 [ 99.700779][ T7108] __x64_sys_bpf+0x78/0xc0 [ 99.702344][ T7108] ? lockdep_hardirqs_on+0x7c/0x110 [ 99.704157][ T7108] do_syscall_64+0xcd/0x250 [ 99.705475][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.707035][ T7108] RIP: 0033:0x7efff3f7e719 [ 99.708200][ T7108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.713419][ T7108] RSP: 002b:00007efff4e28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 99.715830][ T7108] RAX: ffffffffffffffda RBX: 00007efff4136058 RCX: 00007efff3f7e719 [ 99.718149][ T7108] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 99.720843][ T7108] RBP: 00007efff3ff132e R08: 0000000000000000 R09: 0000000000000000 [ 99.723491][ T7108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.725960][ T7108] R13: 0000000000000000 R14: 00007efff4136058 R15: 00007fffd7704958 [ 99.728318][ T7108] [ 99.729335][ T7108] BUG: Bad page state in process syz.0.327 pfn:4fae1 [ 99.731243][ T7108] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4fae1 [ 99.733826][ T7108] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 99.735786][ T7108] raw: 00fff00000000000 dead000000000040 ffff888036779000 0000000000000000 [ 99.738203][ T7108] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 99.740407][ T7108] page dumped because: page_pool leak [ 99.741846][ T7108] page_owner tracks the page as allocated [ 99.743423][ T7108] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7108, tgid 7096 (syz.0.327), ts 92314392779, free_ts 92308946210 [ 99.748046][ T7108] post_alloc_hook+0x2d1/0x350 [ 99.749586][ T7108] get_page_from_freelist+0x101e/0x3070 [ 99.751586][ T7108] __alloc_pages_noprof+0x223/0x25a0 [ 99.753411][ T7108] alloc_pages_bulk_noprof+0x77c/0x1110 [ 99.755328][ T7108] __page_pool_alloc_pages_slow+0x18f/0x770 [ 99.757423][ T7108] page_pool_alloc_netmem+0xc4/0x160 [ 99.759225][ T7108] page_pool_alloc_pages+0x1a/0x60 [ 99.760679][ T7108] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 99.762612][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 99.764184][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 99.765961][ T7108] __sys_bpf+0xfc6/0x49a0 [ 99.767212][ T7108] __x64_sys_bpf+0x78/0xc0 [ 99.768444][ T7108] do_syscall_64+0xcd/0x250 [ 99.769798][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.771440][ T7108] page last free pid 7104 tgid 7101 stack trace: [ 99.773143][ T7108] free_unref_page+0x5f4/0xdc0 [ 99.774487][ T7108] vfree+0x17a/0x890 [ 99.775578][ T7108] hashlimit_mt_destroy_v1+0x78/0x90 [ 99.777113][ T7108] cleanup_entry+0x19f/0x3a0 [ 99.778391][ T7108] translate_table+0xddd/0x17b0 [ 99.779664][ T7108] do_ip6t_set_ctl+0x605/0xc40 [ 99.780862][ T7108] nf_setsockopt+0x8a/0xf0 [ 99.782051][ T7108] ipv6_setsockopt+0x135/0x170 [ 99.784165][ T7108] rawv6_setsockopt+0xd7/0x680 [ 99.785494][ T7108] do_sock_setsockopt+0x222/0x480 [ 99.787309][ T7108] __sys_setsockopt+0x1a4/0x270 [ 99.788873][ T7108] __x64_sys_setsockopt+0xbd/0x160 [ 99.790305][ T7108] do_syscall_64+0xcd/0x250 [ 99.791835][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.793702][ T7108] Modules linked in: [ 99.795027][ T7108] CPU: 3 UID: 0 PID: 7108 Comm: syz.0.327 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 99.798993][ T7108] Tainted: [B]=BAD_PAGE [ 99.800419][ T7108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 99.803619][ T7108] Call Trace: [ 99.804538][ T7108] [ 99.805349][ T7108] dump_stack_lvl+0x16c/0x1f0 [ 99.806677][ T7108] bad_page+0xb3/0x1f0 [ 99.807755][ T7108] ? __pfx_bad_page+0x10/0x10 [ 99.808902][ T7108] ? page_bad_reason+0x9d/0x1e0 [ 99.810239][ T7108] free_unref_page+0x657/0xdc0 [ 99.811579][ T7108] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 99.813189][ T7108] ? __phys_addr+0xc6/0x150 [ 99.814424][ T7108] skb_free_head+0xa0/0x1d0 [ 99.815636][ T7108] skb_release_data+0x560/0x730 [ 99.816911][ T7108] sk_skb_reason_drop+0x129/0x1a0 [ 99.818246][ T7108] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 99.820005][ T7108] ? kernel_text_address+0x8d/0x100 [ 99.821377][ T7108] ? hlock_class+0x4e/0x130 [ 99.822861][ T7108] ? __lock_acquire+0x163e/0x3ce0 [ 99.824410][ T7108] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 99.826641][ T7108] ? hlock_class+0x4e/0x130 [ 99.828103][ T7108] ? __lock_acquire+0xbdd/0x3ce0 [ 99.829476][ T7108] ? __pfx___lock_acquire+0x10/0x10 [ 99.830927][ T7108] __netif_receive_skb_list_core+0x357/0x950 [ 99.832406][ T7108] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 99.834259][ T7108] ? trace_lock_acquire+0x14a/0x1d0 [ 99.835781][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 99.837691][ T7108] ? lock_acquire+0x2f/0xb0 [ 99.839105][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 99.840978][ T7108] netif_receive_skb_list_internal+0x753/0xdb0 [ 99.842766][ T7108] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 99.845022][ T7108] ? __pfx_eth_type_trans+0x10/0x10 [ 99.846796][ T7108] ? __build_skb_around+0x278/0x3b0 [ 99.848323][ T7108] netif_receive_skb_list+0x4f/0x4a0 [ 99.849814][ T7108] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 99.851648][ T7108] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 99.853646][ T7108] ? bpf_test_timer_continue+0x150/0x3d0 [ 99.855182][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 99.856611][ T7108] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 99.858237][ T7108] ? try_to_wake_up+0x154/0x14f0 [ 99.859728][ T7108] ? __pfx_try_to_wake_up+0x10/0x10 [ 99.861397][ T7108] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 99.863558][ T7108] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 99.865243][ T7108] ? 0xffffffffa0004340 [ 99.866527][ T7108] ? 0xffffffffa0004340 [ 99.867723][ T7108] ? 0xffffffffa0004340 [ 99.868918][ T7108] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 99.870641][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 99.872157][ T7108] ? lock_acquire+0x2f/0xb0 [ 99.873405][ T7108] ? __fget_files+0x40/0x3f0 [ 99.874675][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 99.876286][ T7108] ? fput+0x30/0x390 [ 99.877381][ T7108] ? __bpf_prog_get+0xa0/0x290 [ 99.878689][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 99.880213][ T7108] __sys_bpf+0xfc6/0x49a0 [ 99.881656][ T7108] ? __pfx___sys_bpf+0x10/0x10 [ 99.883106][ T7108] ? __schedule+0xe5d/0x5730 [ 99.884706][ T7108] ? __fget_files+0x23a/0x3f0 [ 99.886337][ T7108] ? do_futex+0x123/0x350 [ 99.887702][ T7108] ? __pfx_do_futex+0x10/0x10 [ 99.889126][ T7108] ? xfd_validate_state+0x5d/0x180 [ 99.890615][ T7108] ? rcu_is_watching+0x12/0xc0 [ 99.892024][ T7108] __x64_sys_bpf+0x78/0xc0 [ 99.893341][ T7108] ? lockdep_hardirqs_on+0x7c/0x110 [ 99.895286][ T7108] do_syscall_64+0xcd/0x250 [ 99.896848][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.898708][ T7108] RIP: 0033:0x7efff3f7e719 [ 99.900167][ T7108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.905793][ T7108] RSP: 002b:00007efff4e28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 99.908466][ T7108] RAX: ffffffffffffffda RBX: 00007efff4136058 RCX: 00007efff3f7e719 [ 99.910630][ T7108] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 99.912723][ T7108] RBP: 00007efff3ff132e R08: 0000000000000000 R09: 0000000000000000 [ 99.914792][ T7108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.916866][ T7108] R13: 0000000000000000 R14: 00007efff4136058 R15: 00007fffd7704958 [ 99.919173][ T7108] [ 99.920170][ T7108] BUG: Bad page state in process syz.0.327 pfn:28087 [ 99.922021][ T7108] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28087 [ 99.924415][ T7108] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 99.926484][ T7108] raw: 00fff00000000000 dead000000000040 ffff888036779000 0000000000000000 [ 99.929059][ T7108] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 99.931345][ T7108] page dumped because: page_pool leak [ 99.932802][ T7108] page_owner tracks the page as allocated [ 99.934349][ T7108] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7108, tgid 7096 (syz.0.327), ts 92314387359, free_ts 92308950600 [ 99.939105][ T7108] post_alloc_hook+0x2d1/0x350 [ 99.940683][ T7108] get_page_from_freelist+0x101e/0x3070 [ 99.942329][ T7108] __alloc_pages_noprof+0x223/0x25a0 [ 99.943804][ T7108] alloc_pages_bulk_noprof+0x77c/0x1110 [ 99.945363][ T7108] __page_pool_alloc_pages_slow+0x18f/0x770 [ 99.947214][ T7108] page_pool_alloc_netmem+0xc4/0x160 [ 99.948718][ T7108] page_pool_alloc_pages+0x1a/0x60 [ 99.950116][ T7108] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 99.951919][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 99.953382][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 99.955023][ T7108] __sys_bpf+0xfc6/0x49a0 [ 99.956354][ T7108] __x64_sys_bpf+0x78/0xc0 [ 99.957661][ T7108] do_syscall_64+0xcd/0x250 [ 99.958827][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.960710][ T7108] page last free pid 7104 tgid 7101 stack trace: [ 99.962568][ T7108] free_unref_page+0x5f4/0xdc0 [ 99.964026][ T7108] vfree+0x17a/0x890 [ 99.965130][ T7108] hashlimit_mt_destroy_v1+0x78/0x90 [ 99.966612][ T7108] cleanup_entry+0x19f/0x3a0 [ 99.967981][ T7108] translate_table+0xddd/0x17b0 [ 99.969388][ T7108] do_ip6t_set_ctl+0x605/0xc40 [ 99.970865][ T7108] nf_setsockopt+0x8a/0xf0 [ 99.972232][ T7108] ipv6_setsockopt+0x135/0x170 [ 99.973561][ T7108] rawv6_setsockopt+0xd7/0x680 [ 99.974877][ T7108] do_sock_setsockopt+0x222/0x480 [ 99.976255][ T7108] __sys_setsockopt+0x1a4/0x270 [ 99.977663][ T7108] __x64_sys_setsockopt+0xbd/0x160 [ 99.979291][ T7108] do_syscall_64+0xcd/0x250 [ 99.980637][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.982375][ T7108] Modules linked in: [ 99.983709][ T7108] CPU: 3 UID: 0 PID: 7108 Comm: syz.0.327 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 99.987235][ T7108] Tainted: [B]=BAD_PAGE [ 99.988420][ T7108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 99.991445][ T7108] Call Trace: [ 99.992540][ T7108] [ 99.993440][ T7108] dump_stack_lvl+0x16c/0x1f0 [ 99.995013][ T7108] bad_page+0xb3/0x1f0 [ 99.996154][ T7108] ? __pfx_bad_page+0x10/0x10 [ 99.997447][ T7108] ? page_bad_reason+0x9d/0x1e0 [ 99.998797][ T7108] free_unref_page+0x657/0xdc0 [ 100.000707][ T7108] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 100.003493][ T7108] ? __phys_addr+0xc6/0x150 [ 100.005030][ T7108] skb_free_head+0xa0/0x1d0 [ 100.006810][ T7108] skb_release_data+0x560/0x730 [ 100.008365][ T7108] sk_skb_reason_drop+0x129/0x1a0 [ 100.009866][ T7108] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 100.011971][ T7108] ? kernel_text_address+0x8d/0x100 [ 100.013407][ T7108] ? hlock_class+0x4e/0x130 [ 100.014594][ T7108] ? __lock_acquire+0x163e/0x3ce0 [ 100.015868][ T7108] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 100.017641][ T7108] ? hlock_class+0x4e/0x130 [ 100.018989][ T7108] ? __lock_acquire+0xbdd/0x3ce0 [ 100.020469][ T7108] ? __pfx___lock_acquire+0x10/0x10 [ 100.022215][ T7108] __netif_receive_skb_list_core+0x357/0x950 [ 100.024259][ T7108] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 100.027120][ T7108] ? trace_lock_acquire+0x14a/0x1d0 [ 100.028709][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 100.030403][ T7108] ? lock_acquire+0x2f/0xb0 [ 100.031541][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 100.033093][ T7108] netif_receive_skb_list_internal+0x753/0xdb0 [ 100.034615][ T7108] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 100.036359][ T7108] ? __pfx_eth_type_trans+0x10/0x10 [ 100.037641][ T7108] ? __build_skb_around+0x278/0x3b0 [ 100.039042][ T7108] netif_receive_skb_list+0x4f/0x4a0 [ 100.040424][ T7108] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 100.042108][ T7108] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 100.043952][ T7108] ? bpf_test_timer_continue+0x150/0x3d0 [ 100.045497][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 100.047059][ T7108] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 100.048813][ T7108] ? try_to_wake_up+0x154/0x14f0 [ 100.050330][ T7108] ? __pfx_try_to_wake_up+0x10/0x10 [ 100.051805][ T7108] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 100.053447][ T7108] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 100.054910][ T7108] ? 0xffffffffa0004340 [ 100.056057][ T7108] ? 0xffffffffa0004340 [ 100.057214][ T7108] ? 0xffffffffa0004340 [ 100.058372][ T7108] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 100.059997][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 100.061456][ T7108] ? lock_acquire+0x2f/0xb0 [ 100.062726][ T7108] ? __fget_files+0x40/0x3f0 [ 100.064261][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 100.066003][ T7108] ? fput+0x30/0x390 [ 100.067395][ T7108] ? __bpf_prog_get+0xa0/0x290 [ 100.068813][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 100.070454][ T7108] __sys_bpf+0xfc6/0x49a0 [ 100.071646][ T7108] ? __pfx___sys_bpf+0x10/0x10 [ 100.073018][ T7108] ? __schedule+0xe5d/0x5730 [ 100.074330][ T7108] ? __fget_files+0x23a/0x3f0 [ 100.075670][ T7108] ? do_futex+0x123/0x350 [ 100.076893][ T7108] ? __pfx_do_futex+0x10/0x10 [ 100.078263][ T7108] ? xfd_validate_state+0x5d/0x180 [ 100.079669][ T7108] ? rcu_is_watching+0x12/0xc0 [ 100.080994][ T7108] __x64_sys_bpf+0x78/0xc0 [ 100.082384][ T7108] ? lockdep_hardirqs_on+0x7c/0x110 [ 100.083976][ T7108] do_syscall_64+0xcd/0x250 [ 100.085236][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.086894][ T7108] RIP: 0033:0x7efff3f7e719 [ 100.088149][ T7108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.093323][ T7108] RSP: 002b:00007efff4e28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 100.095488][ T7108] RAX: ffffffffffffffda RBX: 00007efff4136058 RCX: 00007efff3f7e719 [ 100.097669][ T7108] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 100.099971][ T7108] RBP: 00007efff3ff132e R08: 0000000000000000 R09: 0000000000000000 [ 100.102252][ T7108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.104327][ T7108] R13: 0000000000000000 R14: 00007efff4136058 R15: 00007fffd7704958 [ 100.106782][ T7108] [ 100.107798][ T7108] BUG: Bad page state in process syz.0.327 pfn:2b8d2 [ 100.109677][ T7108] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b8d2 [ 100.112227][ T7108] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 100.114329][ T7108] raw: 00fff00000000000 dead000000000040 ffff888036779000 0000000000000000 [ 100.116839][ T7108] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 100.119709][ T7108] page dumped because: page_pool leak [ 100.121380][ T7108] page_owner tracks the page as allocated [ 100.123017][ T7108] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7108, tgid 7096 (syz.0.327), ts 92314382587, free_ts 92308954530 [ 100.127810][ T7108] post_alloc_hook+0x2d1/0x350 [ 100.129064][ T7108] get_page_from_freelist+0x101e/0x3070 [ 100.130608][ T7108] __alloc_pages_noprof+0x223/0x25a0 [ 100.132007][ T7108] alloc_pages_bulk_noprof+0x77c/0x1110 [ 100.133448][ T7108] __page_pool_alloc_pages_slow+0x18f/0x770 [ 100.134988][ T7108] page_pool_alloc_netmem+0xc4/0x160 [ 100.136369][ T7108] page_pool_alloc_pages+0x1a/0x60 [ 100.137765][ T7108] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 100.139416][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 100.140789][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 100.142348][ T7108] __sys_bpf+0xfc6/0x49a0 [ 100.143581][ T7108] __x64_sys_bpf+0x78/0xc0 [ 100.144864][ T7108] do_syscall_64+0xcd/0x250 [ 100.146159][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.147803][ T7108] page last free pid 7104 tgid 7101 stack trace: [ 100.149570][ T7108] free_unref_page+0x5f4/0xdc0 [ 100.150874][ T7108] vfree+0x17a/0x890 [ 100.152071][ T7108] hashlimit_mt_destroy_v1+0x78/0x90 [ 100.153477][ T7108] cleanup_entry+0x19f/0x3a0 [ 100.154720][ T7108] translate_table+0xddd/0x17b0 [ 100.156032][ T7108] do_ip6t_set_ctl+0x605/0xc40 [ 100.157371][ T7108] nf_setsockopt+0x8a/0xf0 [ 100.158575][ T7108] ipv6_setsockopt+0x135/0x170 [ 100.160384][ T7108] rawv6_setsockopt+0xd7/0x680 [ 100.161733][ T7108] do_sock_setsockopt+0x222/0x480 [ 100.163134][ T7108] __sys_setsockopt+0x1a4/0x270 [ 100.164513][ T7108] __x64_sys_setsockopt+0xbd/0x160 [ 100.166221][ T7108] do_syscall_64+0xcd/0x250 [ 100.167547][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.169101][ T7108] Modules linked in: [ 100.170263][ T7108] CPU: 3 UID: 0 PID: 7108 Comm: syz.0.327 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 100.173391][ T7108] Tainted: [B]=BAD_PAGE [ 100.174512][ T7108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 100.177348][ T7108] Call Trace: [ 100.178262][ T7108] [ 100.179047][ T7108] dump_stack_lvl+0x16c/0x1f0 [ 100.180295][ T7108] bad_page+0xb3/0x1f0 [ 100.181391][ T7108] ? __pfx_bad_page+0x10/0x10 [ 100.182801][ T7108] ? page_bad_reason+0x9d/0x1e0 [ 100.184158][ T7108] free_unref_page+0x657/0xdc0 [ 100.185572][ T7108] ? __phys_addr+0xc6/0x150 [ 100.187169][ T7108] skb_free_head+0xa0/0x1d0 [ 100.188530][ T7108] skb_release_data+0x560/0x730 [ 100.190025][ T7108] sk_skb_reason_drop+0x129/0x1a0 [ 100.191398][ T7108] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 100.193212][ T7108] ? kernel_text_address+0x8d/0x100 [ 100.194667][ T7108] ? hlock_class+0x4e/0x130 [ 100.195920][ T7108] ? __lock_acquire+0x163e/0x3ce0 [ 100.197296][ T7108] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 100.199261][ T7108] ? hlock_class+0x4e/0x130 [ 100.200507][ T7108] ? __lock_acquire+0xbdd/0x3ce0 [ 100.201869][ T7108] ? __pfx___lock_acquire+0x10/0x10 [ 100.203287][ T7108] __netif_receive_skb_list_core+0x357/0x950 [ 100.205003][ T7108] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 100.206691][ T7108] ? trace_lock_acquire+0x14a/0x1d0 [ 100.208284][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 100.210146][ T7108] ? lock_acquire+0x2f/0xb0 [ 100.211475][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 100.213465][ T7108] netif_receive_skb_list_internal+0x753/0xdb0 [ 100.215200][ T7108] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 100.216993][ T7108] ? __pfx_eth_type_trans+0x10/0x10 [ 100.218368][ T7108] ? __build_skb_around+0x278/0x3b0 [ 100.219731][ T7108] netif_receive_skb_list+0x4f/0x4a0 [ 100.221110][ T7108] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 100.222798][ T7108] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 100.224883][ T7108] ? bpf_test_timer_continue+0x150/0x3d0 [ 100.226748][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 100.228644][ T7108] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 100.230669][ T7108] ? try_to_wake_up+0x154/0x14f0 [ 100.232239][ T7108] ? __pfx_try_to_wake_up+0x10/0x10 [ 100.233850][ T7108] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 100.235640][ T7108] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 100.237098][ T7108] ? 0xffffffffa0004340 [ 100.238201][ T7108] ? 0xffffffffa0004340 [ 100.239336][ T7108] ? 0xffffffffa0004340 [ 100.240596][ T7108] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 100.242439][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 100.244249][ T7108] ? lock_acquire+0x2f/0xb0 [ 100.245700][ T7108] ? __fget_files+0x40/0x3f0 [ 100.246964][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 100.248523][ T7108] ? fput+0x30/0x390 [ 100.249570][ T7108] ? __bpf_prog_get+0xa0/0x290 [ 100.250848][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 100.252473][ T7108] __sys_bpf+0xfc6/0x49a0 [ 100.253617][ T7108] ? __pfx___sys_bpf+0x10/0x10 [ 100.254910][ T7108] ? __schedule+0xe5d/0x5730 [ 100.256132][ T7108] ? __fget_files+0x23a/0x3f0 [ 100.257373][ T7108] ? do_futex+0x123/0x350 [ 100.258573][ T7108] ? __pfx_do_futex+0x10/0x10 [ 100.259838][ T7108] ? xfd_validate_state+0x5d/0x180 [ 100.261179][ T7108] ? rcu_is_watching+0x12/0xc0 [ 100.262454][ T7108] __x64_sys_bpf+0x78/0xc0 [ 100.263772][ T7108] ? lockdep_hardirqs_on+0x7c/0x110 [ 100.265253][ T7108] do_syscall_64+0xcd/0x250 [ 100.266770][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.268327][ T7108] RIP: 0033:0x7efff3f7e719 [ 100.269499][ T7108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.274555][ T7108] RSP: 002b:00007efff4e28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 100.276819][ T7108] RAX: ffffffffffffffda RBX: 00007efff4136058 RCX: 00007efff3f7e719 [ 100.279056][ T7108] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 100.281330][ T7108] RBP: 00007efff3ff132e R08: 0000000000000000 R09: 0000000000000000 [ 100.283708][ T7108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.285837][ T7108] R13: 0000000000000000 R14: 00007efff4136058 R15: 00007fffd7704958 [ 100.288155][ T7108] [ 100.289143][ T7108] BUG: Bad page state in process syz.0.327 pfn:2b2f0 [ 100.290973][ T7108] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b2f0 [ 100.293386][ T7108] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 100.295264][ T7108] raw: 00fff00000000000 dead000000000040 ffff888036779000 0000000000000000 [ 100.297517][ T7108] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 100.300469][ T7108] page dumped because: page_pool leak [ 100.301912][ T7108] page_owner tracks the page as allocated [ 100.303409][ T7108] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7108, tgid 7096 (syz.0.327), ts 92314377950, free_ts 92308958820 [ 100.308083][ T7108] post_alloc_hook+0x2d1/0x350 [ 100.309484][ T7108] get_page_from_freelist+0x101e/0x3070 [ 100.310967][ T7108] __alloc_pages_noprof+0x223/0x25a0 [ 100.312376][ T7108] alloc_pages_bulk_noprof+0x77c/0x1110 [ 100.313848][ T7108] __page_pool_alloc_pages_slow+0x18f/0x770 [ 100.315417][ T7108] page_pool_alloc_netmem+0xc4/0x160 [ 100.316814][ T7108] page_pool_alloc_pages+0x1a/0x60 [ 100.318228][ T7108] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 100.319829][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 100.321508][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 100.323121][ T7108] __sys_bpf+0xfc6/0x49a0 [ 100.324477][ T7108] __x64_sys_bpf+0x78/0xc0 [ 100.325747][ T7108] do_syscall_64+0xcd/0x250 [ 100.327298][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.329196][ T7108] page last free pid 7104 tgid 7101 stack trace: [ 100.331024][ T7108] free_unref_page+0x5f4/0xdc0 [ 100.332511][ T7108] vfree+0x17a/0x890 [ 100.333663][ T7108] hashlimit_mt_destroy_v1+0x78/0x90 [ 100.335156][ T7108] cleanup_entry+0x19f/0x3a0 [ 100.336249][ T7108] translate_table+0xddd/0x17b0 [ 100.337585][ T7108] do_ip6t_set_ctl+0x605/0xc40 [ 100.339030][ T7108] nf_setsockopt+0x8a/0xf0 [ 100.340328][ T7108] ipv6_setsockopt+0x135/0x170 [ 100.341644][ T7108] rawv6_setsockopt+0xd7/0x680 [ 100.342914][ T7108] do_sock_setsockopt+0x222/0x480 [ 100.344321][ T7108] __sys_setsockopt+0x1a4/0x270 [ 100.345692][ T7108] __x64_sys_setsockopt+0xbd/0x160 [ 100.347473][ T7108] do_syscall_64+0xcd/0x250 [ 100.348826][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.350479][ T7108] Modules linked in: [ 100.351592][ T7108] CPU: 3 UID: 0 PID: 7108 Comm: syz.0.327 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 100.355021][ T7108] Tainted: [B]=BAD_PAGE [ 100.356154][ T7108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 100.359008][ T7108] Call Trace: [ 100.359925][ T7108] [ 100.361026][ T7108] dump_stack_lvl+0x16c/0x1f0 [ 100.362414][ T7108] bad_page+0xb3/0x1f0 [ 100.363597][ T7108] ? __pfx_bad_page+0x10/0x10 [ 100.364899][ T7108] ? page_bad_reason+0x9d/0x1e0 [ 100.366348][ T7108] free_unref_page+0x657/0xdc0 [ 100.367749][ T7108] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 100.369408][ T7108] ? __phys_addr+0xc6/0x150 [ 100.370773][ T7108] skb_free_head+0xa0/0x1d0 [ 100.372001][ T7108] skb_release_data+0x560/0x730 [ 100.373357][ T7108] sk_skb_reason_drop+0x129/0x1a0 [ 100.374898][ T7108] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 100.376926][ T7108] ? kernel_text_address+0x8d/0x100 [ 100.378753][ T7108] ? hlock_class+0x4e/0x130 [ 100.380335][ T7108] ? __lock_acquire+0x163e/0x3ce0 [ 100.381612][ T7108] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 100.383430][ T7108] ? hlock_class+0x4e/0x130 [ 100.384617][ T7108] ? __lock_acquire+0xbdd/0x3ce0 [ 100.385937][ T7108] ? __pfx___lock_acquire+0x10/0x10 [ 100.387289][ T7108] __netif_receive_skb_list_core+0x357/0x950 [ 100.388841][ T7108] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 100.390534][ T7108] ? trace_lock_acquire+0x14a/0x1d0 [ 100.391893][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 100.393539][ T7108] ? lock_acquire+0x2f/0xb0 [ 100.394742][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 100.396402][ T7108] netif_receive_skb_list_internal+0x753/0xdb0 [ 100.398035][ T7108] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 100.399785][ T7108] ? __pfx_eth_type_trans+0x10/0x10 [ 100.401252][ T7108] ? __build_skb_around+0x278/0x3b0 [ 100.402818][ T7108] netif_receive_skb_list+0x4f/0x4a0 [ 100.404232][ T7108] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 100.406059][ T7108] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 100.407898][ T7108] ? bpf_test_timer_continue+0x150/0x3d0 [ 100.409553][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 100.410972][ T7108] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 100.412490][ T7108] ? try_to_wake_up+0x154/0x14f0 [ 100.413795][ T7108] ? __pfx_try_to_wake_up+0x10/0x10 [ 100.415163][ T7108] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 100.416750][ T7108] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 100.418149][ T7108] ? 0xffffffffa0004340 [ 100.419419][ T7108] ? 0xffffffffa0004340 [ 100.420698][ T7108] ? 0xffffffffa0004340 [ 100.421841][ T7108] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 100.423417][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 100.424832][ T7108] ? lock_acquire+0x2f/0xb0 [ 100.426117][ T7108] ? __fget_files+0x40/0x3f0 [ 100.427311][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 100.428874][ T7108] ? fput+0x30/0x390 [ 100.430038][ T7108] ? __bpf_prog_get+0xa0/0x290 [ 100.431288][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 100.432819][ T7108] __sys_bpf+0xfc6/0x49a0 [ 100.433973][ T7108] ? __pfx___sys_bpf+0x10/0x10 [ 100.435212][ T7108] ? __schedule+0xe5d/0x5730 [ 100.436404][ T7108] ? __fget_files+0x23a/0x3f0 [ 100.437583][ T7108] ? do_futex+0x123/0x350 [ 100.438698][ T7108] ? __pfx_do_futex+0x10/0x10 [ 100.440029][ T7108] ? xfd_validate_state+0x5d/0x180 [ 100.441315][ T7108] ? rcu_is_watching+0x12/0xc0 [ 100.442591][ T7108] __x64_sys_bpf+0x78/0xc0 [ 100.443753][ T7108] ? lockdep_hardirqs_on+0x7c/0x110 [ 100.445081][ T7108] do_syscall_64+0xcd/0x250 [ 100.446259][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.447858][ T7108] RIP: 0033:0x7efff3f7e719 [ 100.449158][ T7108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.454367][ T7108] RSP: 002b:00007efff4e28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 100.456538][ T7108] RAX: ffffffffffffffda RBX: 00007efff4136058 RCX: 00007efff3f7e719 [ 100.458595][ T7108] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 100.461018][ T7108] RBP: 00007efff3ff132e R08: 0000000000000000 R09: 0000000000000000 [ 100.463100][ T7108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.465160][ T7108] R13: 0000000000000000 R14: 00007efff4136058 R15: 00007fffd7704958 [ 100.467647][ T7108] [ 100.468734][ T7108] BUG: Bad page state in process syz.0.327 pfn:50683 [ 100.470719][ T7108] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2 pfn:0x50683 [ 100.473003][ T7108] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 100.474858][ T7108] raw: 00fff00000000000 dead000000000040 ffff888036779000 0000000000000000 [ 100.477198][ T7108] raw: 0000000000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 100.479579][ T7108] page dumped because: page_pool leak [ 100.481166][ T7108] page_owner tracks the page as allocated [ 100.483152][ T7108] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7108, tgid 7096 (syz.0.327), ts 92314373095, free_ts 92308963354 [ 100.487603][ T7108] post_alloc_hook+0x2d1/0x350 [ 100.488883][ T7108] get_page_from_freelist+0x101e/0x3070 [ 100.490851][ T7108] __alloc_pages_noprof+0x223/0x25a0 [ 100.492628][ T7108] alloc_pages_bulk_noprof+0x77c/0x1110 [ 100.494399][ T7108] __page_pool_alloc_pages_slow+0x18f/0x770 [ 100.495986][ T7108] page_pool_alloc_netmem+0xc4/0x160 [ 100.497432][ T7108] page_pool_alloc_pages+0x1a/0x60 [ 100.498727][ T7108] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 100.501168][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 100.502554][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 100.504056][ T7108] __sys_bpf+0xfc6/0x49a0 [ 100.505209][ T7108] __x64_sys_bpf+0x78/0xc0 [ 100.506511][ T7108] do_syscall_64+0xcd/0x250 [ 100.507837][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.509476][ T7108] page last free pid 7104 tgid 7101 stack trace: [ 100.511311][ T7108] free_unref_page+0x5f4/0xdc0 [ 100.512702][ T7108] vfree+0x17a/0x890 [ 100.513993][ T7108] hashlimit_mt_destroy_v1+0x78/0x90 [ 100.515734][ T7108] cleanup_entry+0x19f/0x3a0 [ 100.517230][ T7108] translate_table+0xddd/0x17b0 [ 100.518854][ T7108] do_ip6t_set_ctl+0x605/0xc40 [ 100.520601][ T7108] nf_setsockopt+0x8a/0xf0 [ 100.522011][ T7108] ipv6_setsockopt+0x135/0x170 [ 100.523534][ T7108] rawv6_setsockopt+0xd7/0x680 [ 100.524837][ T7108] do_sock_setsockopt+0x222/0x480 [ 100.526189][ T7108] __sys_setsockopt+0x1a4/0x270 [ 100.527541][ T7108] __x64_sys_setsockopt+0xbd/0x160 [ 100.528924][ T7108] do_syscall_64+0xcd/0x250 [ 100.530306][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.532086][ T7108] Modules linked in: [ 100.533236][ T7108] CPU: 3 UID: 0 PID: 7108 Comm: syz.0.327 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 100.536516][ T7108] Tainted: [B]=BAD_PAGE [ 100.537718][ T7108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 100.540659][ T7108] Call Trace: [ 100.541535][ T7108] [ 100.542306][ T7108] dump_stack_lvl+0x16c/0x1f0 [ 100.543553][ T7108] bad_page+0xb3/0x1f0 [ 100.544771][ T7108] ? __pfx_bad_page+0x10/0x10 [ 100.546370][ T7108] ? page_bad_reason+0x9d/0x1e0 [ 100.548682][ T7108] free_unref_page+0x657/0xdc0 [ 100.549991][ T7108] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 100.551617][ T7108] ? __phys_addr+0xc6/0x150 [ 100.552927][ T7108] skb_free_head+0xa0/0x1d0 [ 100.554318][ T7108] skb_release_data+0x560/0x730 [ 100.555742][ T7108] sk_skb_reason_drop+0x129/0x1a0 [ 100.557239][ T7108] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 100.559202][ T7108] ? kernel_text_address+0x8d/0x100 [ 100.560779][ T7108] ? hlock_class+0x4e/0x130 [ 100.562049][ T7108] ? __lock_acquire+0x163e/0x3ce0 [ 100.563499][ T7108] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 100.565595][ T7108] ? hlock_class+0x4e/0x130 [ 100.567117][ T7108] ? __lock_acquire+0xbdd/0x3ce0 [ 100.568611][ T7108] ? __pfx___lock_acquire+0x10/0x10 [ 100.570121][ T7108] __netif_receive_skb_list_core+0x357/0x950 [ 100.571714][ T7108] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 100.573478][ T7108] ? trace_lock_acquire+0x14a/0x1d0 [ 100.574900][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 100.576563][ T7108] ? lock_acquire+0x2f/0xb0 [ 100.577767][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 100.579436][ T7108] netif_receive_skb_list_internal+0x753/0xdb0 [ 100.581042][ T7108] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 100.582818][ T7108] ? __pfx_eth_type_trans+0x10/0x10 [ 100.584204][ T7108] ? __build_skb_around+0x278/0x3b0 [ 100.585793][ T7108] netif_receive_skb_list+0x4f/0x4a0 [ 100.587391][ T7108] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 100.589560][ T7108] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 100.591581][ T7108] ? bpf_test_timer_continue+0x150/0x3d0 [ 100.593256][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 100.594672][ T7108] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 100.596250][ T7108] ? try_to_wake_up+0x154/0x14f0 [ 100.597557][ T7108] ? __pfx_try_to_wake_up+0x10/0x10 [ 100.598939][ T7108] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 100.600477][ T7108] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 100.601868][ T7108] ? 0xffffffffa0004340 [ 100.603007][ T7108] ? 0xffffffffa0004340 [ 100.604097][ T7108] ? 0xffffffffa0004340 [ 100.605195][ T7108] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 100.607073][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 100.608661][ T7108] ? lock_acquire+0x2f/0xb0 [ 100.609950][ T7108] ? __fget_files+0x40/0x3f0 [ 100.611238][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 100.612871][ T7108] ? fput+0x30/0x390 [ 100.613982][ T7108] ? __bpf_prog_get+0xa0/0x290 [ 100.615450][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 100.617072][ T7108] __sys_bpf+0xfc6/0x49a0 [ 100.618215][ T7108] ? __pfx___sys_bpf+0x10/0x10 [ 100.619483][ T7108] ? __schedule+0xe5d/0x5730 [ 100.620716][ T7108] ? __fget_files+0x23a/0x3f0 [ 100.622048][ T7108] ? do_futex+0x123/0x350 [ 100.623370][ T7108] ? __pfx_do_futex+0x10/0x10 [ 100.624809][ T7108] ? xfd_validate_state+0x5d/0x180 [ 100.626391][ T7108] ? rcu_is_watching+0x12/0xc0 [ 100.627773][ T7108] __x64_sys_bpf+0x78/0xc0 [ 100.629132][ T7108] ? lockdep_hardirqs_on+0x7c/0x110 [ 100.630616][ T7108] do_syscall_64+0xcd/0x250 [ 100.631845][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.633464][ T7108] RIP: 0033:0x7efff3f7e719 [ 100.634772][ T7108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.640269][ T7108] RSP: 002b:00007efff4e28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 100.642446][ T7108] RAX: ffffffffffffffda RBX: 00007efff4136058 RCX: 00007efff3f7e719 [ 100.644511][ T7108] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 100.646726][ T7108] RBP: 00007efff3ff132e R08: 0000000000000000 R09: 0000000000000000 [ 100.649053][ T7108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.651086][ T7108] R13: 0000000000000000 R14: 00007efff4136058 R15: 00007fffd7704958 [ 100.653361][ T7108] [ 100.654299][ T7108] BUG: Bad page state in process syz.0.327 pfn:4e0a8 [ 100.656074][ T7108] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804e0a9e00 pfn:0x4e0a8 [ 100.658720][ T7108] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 100.660607][ T7108] raw: 00fff00000000000 dead000000000040 ffff888036779000 0000000000000000 [ 100.662909][ T7108] raw: ffff88804e0a9e00 0000000000000001 00000000ffffffff 0000000000000000 [ 100.665242][ T7108] page dumped because: page_pool leak [ 100.666804][ T7108] page_owner tracks the page as allocated [ 100.668450][ T7108] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7108, tgid 7096 (syz.0.327), ts 92314367531, free_ts 92308967655 [ 100.673256][ T7108] post_alloc_hook+0x2d1/0x350 [ 100.674635][ T7108] get_page_from_freelist+0x101e/0x3070 [ 100.676200][ T7108] __alloc_pages_noprof+0x223/0x25a0 [ 100.677746][ T7108] alloc_pages_bulk_noprof+0x77c/0x1110 [ 100.679527][ T7108] __page_pool_alloc_pages_slow+0x18f/0x770 [ 100.681333][ T7108] page_pool_alloc_netmem+0xc4/0x160 [ 100.682735][ T7108] page_pool_alloc_pages+0x1a/0x60 [ 100.684181][ T7108] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 100.685787][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 100.687244][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 100.688657][ T7108] __sys_bpf+0xfc6/0x49a0 [ 100.689943][ T7108] __x64_sys_bpf+0x78/0xc0 [ 100.691187][ T7108] do_syscall_64+0xcd/0x250 [ 100.692399][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.694008][ T7108] page last free pid 7104 tgid 7101 stack trace: [ 100.695730][ T7108] free_unref_page+0x5f4/0xdc0 [ 100.697336][ T7108] vfree+0x17a/0x890 [ 100.698488][ T7108] hashlimit_mt_destroy_v1+0x78/0x90 [ 100.700397][ T7108] cleanup_entry+0x19f/0x3a0 [ 100.701970][ T7108] translate_table+0xddd/0x17b0 [ 100.703600][ T7108] do_ip6t_set_ctl+0x605/0xc40 [ 100.705145][ T7108] nf_setsockopt+0x8a/0xf0 [ 100.706344][ T7108] ipv6_setsockopt+0x135/0x170 [ 100.707674][ T7108] rawv6_setsockopt+0xd7/0x680 [ 100.709005][ T7108] do_sock_setsockopt+0x222/0x480 [ 100.710361][ T7108] __sys_setsockopt+0x1a4/0x270 [ 100.711648][ T7108] __x64_sys_setsockopt+0xbd/0x160 [ 100.712999][ T7108] do_syscall_64+0xcd/0x250 [ 100.714193][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.715748][ T7108] Modules linked in: [ 100.716784][ T7108] CPU: 3 UID: 0 PID: 7108 Comm: syz.0.327 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 100.720067][ T7108] Tainted: [B]=BAD_PAGE [ 100.721251][ T7108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 100.724154][ T7108] Call Trace: [ 100.725154][ T7108] [ 100.726001][ T7108] dump_stack_lvl+0x16c/0x1f0 [ 100.727241][ T7108] bad_page+0xb3/0x1f0 [ 100.728321][ T7108] ? __pfx_bad_page+0x10/0x10 [ 100.729561][ T7108] ? page_bad_reason+0x9d/0x1e0 [ 100.730850][ T7108] free_unref_page+0x657/0xdc0 [ 100.732107][ T7108] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 100.733673][ T7108] ? __phys_addr+0xc6/0x150 [ 100.734899][ T7108] skb_free_head+0xa0/0x1d0 [ 100.736104][ T7108] skb_release_data+0x560/0x730 [ 100.737499][ T7108] sk_skb_reason_drop+0x129/0x1a0 [ 100.739048][ T7108] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 100.740965][ T7108] ? kernel_text_address+0x8d/0x100 [ 100.742435][ T7108] ? hlock_class+0x4e/0x130 [ 100.743636][ T7108] ? __lock_acquire+0x163e/0x3ce0 [ 100.745301][ T7108] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 100.747183][ T7108] ? hlock_class+0x4e/0x130 [ 100.748343][ T7108] ? __lock_acquire+0xbdd/0x3ce0 [ 100.749628][ T7108] ? __pfx___lock_acquire+0x10/0x10 [ 100.751121][ T7108] __netif_receive_skb_list_core+0x357/0x950 [ 100.752710][ T7108] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 100.754418][ T7108] ? trace_lock_acquire+0x14a/0x1d0 [ 100.755889][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 100.757708][ T7108] ? lock_acquire+0x2f/0xb0 [ 100.759012][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 100.761147][ T7108] netif_receive_skb_list_internal+0x753/0xdb0 [ 100.763061][ T7108] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 100.765048][ T7108] ? __pfx_eth_type_trans+0x10/0x10 [ 100.766423][ T7108] ? __build_skb_around+0x278/0x3b0 [ 100.768153][ T7108] netif_receive_skb_list+0x4f/0x4a0 [ 100.769579][ T7108] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 100.771218][ T7108] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 100.772932][ T7108] ? bpf_test_timer_continue+0x150/0x3d0 [ 100.774412][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 100.775904][ T7108] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 100.777771][ T7108] ? try_to_wake_up+0x154/0x14f0 [ 100.779093][ T7108] ? __pfx_try_to_wake_up+0x10/0x10 [ 100.780460][ T7108] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 100.782354][ T7108] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 100.783798][ T7108] ? 0xffffffffa0004340 [ 100.784967][ T7108] ? 0xffffffffa0004340 [ 100.786103][ T7108] ? 0xffffffffa0004340 [ 100.787192][ T7108] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 100.788755][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 100.790193][ T7108] ? lock_acquire+0x2f/0xb0 [ 100.791378][ T7108] ? __fget_files+0x40/0x3f0 [ 100.792579][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 100.794091][ T7108] ? fput+0x30/0x390 [ 100.795103][ T7108] ? __bpf_prog_get+0xa0/0x290 [ 100.796339][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 100.797849][ T7108] __sys_bpf+0xfc6/0x49a0 [ 100.798960][ T7108] ? __pfx___sys_bpf+0x10/0x10 [ 100.800165][ T7108] ? __schedule+0xe5d/0x5730 [ 100.801393][ T7108] ? __fget_files+0x23a/0x3f0 [ 100.802669][ T7108] ? do_futex+0x123/0x350 [ 100.803836][ T7108] ? __pfx_do_futex+0x10/0x10 [ 100.805061][ T7108] ? xfd_validate_state+0x5d/0x180 [ 100.806430][ T7108] ? rcu_is_watching+0x12/0xc0 [ 100.807656][ T7108] __x64_sys_bpf+0x78/0xc0 [ 100.808805][ T7108] ? lockdep_hardirqs_on+0x7c/0x110 [ 100.810170][ T7108] do_syscall_64+0xcd/0x250 [ 100.811363][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.812929][ T7108] RIP: 0033:0x7efff3f7e719 [ 100.814578][ T7108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.820501][ T7108] RSP: 002b:00007efff4e28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 100.822806][ T7108] RAX: ffffffffffffffda RBX: 00007efff4136058 RCX: 00007efff3f7e719 [ 100.824877][ T7108] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 100.826952][ T7108] RBP: 00007efff3ff132e R08: 0000000000000000 R09: 0000000000000000 [ 100.829001][ T7108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.831142][ T7108] R13: 0000000000000000 R14: 00007efff4136058 R15: 00007fffd7704958 [ 100.833200][ T7108] [ 100.834131][ T7108] BUG: Bad page state in process syz.0.327 pfn:324e5 [ 100.835991][ T7108] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880324e51b0 pfn:0x324e5 [ 100.838817][ T7108] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 100.841011][ T7108] raw: 00fff00000000000 dead000000000040 ffff888036779000 0000000000000000 [ 100.843544][ T7108] raw: ffff8880324e51b0 0000000000000001 00000000ffffffff 0000000000000000 [ 100.846009][ T7108] page dumped because: page_pool leak [ 100.847521][ T7108] page_owner tracks the page as allocated [ 100.849068][ T7108] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7108, tgid 7096 (syz.0.327), ts 92314343376, free_ts 92312579121 [ 100.853536][ T7108] post_alloc_hook+0x2d1/0x350 [ 100.854897][ T7108] get_page_from_freelist+0x101e/0x3070 [ 100.856431][ T7108] __alloc_pages_noprof+0x223/0x25a0 [ 100.857972][ T7108] alloc_pages_bulk_noprof+0x77c/0x1110 [ 100.859687][ T7108] __page_pool_alloc_pages_slow+0x18f/0x770 [ 100.861248][ T7108] page_pool_alloc_netmem+0xc4/0x160 [ 100.862888][ T7108] page_pool_alloc_pages+0x1a/0x60 [ 100.864578][ T7108] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 100.866352][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 100.868042][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 100.869442][ T7108] __sys_bpf+0xfc6/0x49a0 [ 100.870730][ T7108] __x64_sys_bpf+0x78/0xc0 [ 100.871908][ T7108] do_syscall_64+0xcd/0x250 [ 100.873100][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.875020][ T7108] page last free pid 7104 tgid 7101 stack trace: [ 100.877654][ T7108] free_unref_page+0x5f4/0xdc0 [ 100.879270][ T7108] vfree+0x17a/0x890 [ 100.880461][ T7108] hashlimit_mt_destroy+0x7e/0xa0 [ 100.882026][ T7108] cleanup_entry+0x19f/0x3a0 [ 100.883303][ T7108] translate_table+0xddd/0x17b0 [ 100.884621][ T7108] do_ip6t_set_ctl+0x605/0xc40 [ 100.885926][ T7108] nf_setsockopt+0x8a/0xf0 [ 100.887261][ T7108] ipv6_setsockopt+0x135/0x170 [ 100.888590][ T7108] rawv6_setsockopt+0xd7/0x680 [ 100.890208][ T7108] do_sock_setsockopt+0x222/0x480 [ 100.891768][ T7108] __sys_setsockopt+0x1a4/0x270 [ 100.893031][ T7108] __x64_sys_setsockopt+0xbd/0x160 [ 100.894385][ T7108] do_syscall_64+0xcd/0x250 [ 100.895594][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.897213][ T7108] Modules linked in: [ 100.898257][ T7108] CPU: 3 UID: 0 PID: 7108 Comm: syz.0.327 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 100.901702][ T7108] Tainted: [B]=BAD_PAGE [ 100.903028][ T7108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 100.905909][ T7108] Call Trace: [ 100.906928][ T7108] [ 100.907858][ T7108] dump_stack_lvl+0x16c/0x1f0 [ 100.909499][ T7108] bad_page+0xb3/0x1f0 [ 100.910661][ T7108] ? __pfx_bad_page+0x10/0x10 [ 100.912060][ T7108] ? page_bad_reason+0x9d/0x1e0 [ 100.913437][ T7108] free_unref_page+0x657/0xdc0 [ 100.914979][ T7108] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 100.916601][ T7108] ? __phys_addr+0xc6/0x150 [ 100.917821][ T7108] skb_free_head+0xa0/0x1d0 [ 100.919050][ T7108] skb_release_data+0x560/0x730 [ 100.920337][ T7108] sk_skb_reason_drop+0x129/0x1a0 [ 100.921694][ T7108] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 100.923452][ T7108] ? kernel_text_address+0x8d/0x100 [ 100.924808][ T7108] ? hlock_class+0x4e/0x130 [ 100.926003][ T7108] ? __lock_acquire+0x163e/0x3ce0 [ 100.927355][ T7108] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 100.929201][ T7108] ? hlock_class+0x4e/0x130 [ 100.930396][ T7108] ? __lock_acquire+0xbdd/0x3ce0 [ 100.931630][ T7108] ? __pfx___lock_acquire+0x10/0x10 [ 100.933039][ T7108] __netif_receive_skb_list_core+0x357/0x950 [ 100.934692][ T7108] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 100.936412][ T7108] ? trace_lock_acquire+0x14a/0x1d0 [ 100.937790][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 100.939746][ T7108] ? lock_acquire+0x2f/0xb0 [ 100.941101][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 100.943017][ T7108] netif_receive_skb_list_internal+0x753/0xdb0 [ 100.944923][ T7108] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 100.947009][ T7108] ? __pfx_eth_type_trans+0x10/0x10 [ 100.948518][ T7108] ? __build_skb_around+0x278/0x3b0 [ 100.949874][ T7108] netif_receive_skb_list+0x4f/0x4a0 [ 100.951276][ T7108] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 100.952923][ T7108] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 100.954650][ T7108] ? bpf_test_timer_continue+0x150/0x3d0 [ 100.956118][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 100.957503][ T7108] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 100.959069][ T7108] ? try_to_wake_up+0x154/0x14f0 [ 100.960451][ T7108] ? __pfx_try_to_wake_up+0x10/0x10 [ 100.961944][ T7108] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 100.963565][ T7108] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 100.964980][ T7108] ? 0xffffffffa0004340 [ 100.966114][ T7108] ? 0xffffffffa0004340 [ 100.967194][ T7108] ? 0xffffffffa0004340 [ 100.968430][ T7108] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 100.970190][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 100.971924][ T7108] ? lock_acquire+0x2f/0xb0 [ 100.973412][ T7108] ? __fget_files+0x40/0x3f0 [ 100.974933][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 100.976634][ T7108] ? fput+0x30/0x390 [ 100.977710][ T7108] ? __bpf_prog_get+0xa0/0x290 [ 100.979009][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 100.980526][ T7108] __sys_bpf+0xfc6/0x49a0 [ 100.981704][ T7108] ? __pfx___sys_bpf+0x10/0x10 [ 100.983032][ T7108] ? __schedule+0xe5d/0x5730 [ 100.984484][ T7108] ? __fget_files+0x23a/0x3f0 [ 100.985743][ T7108] ? do_futex+0x123/0x350 [ 100.987187][ T7108] ? __pfx_do_futex+0x10/0x10 [ 100.988736][ T7108] ? xfd_validate_state+0x5d/0x180 [ 100.990111][ T7108] ? rcu_is_watching+0x12/0xc0 [ 100.991396][ T7108] __x64_sys_bpf+0x78/0xc0 [ 100.992581][ T7108] ? lockdep_hardirqs_on+0x7c/0x110 [ 100.993992][ T7108] do_syscall_64+0xcd/0x250 [ 100.995195][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.996799][ T7108] RIP: 0033:0x7efff3f7e719 [ 100.998156][ T7108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.004633][ T7108] RSP: 002b:00007efff4e28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 101.007380][ T7108] RAX: ffffffffffffffda RBX: 00007efff4136058 RCX: 00007efff3f7e719 [ 101.009473][ T7108] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 101.011573][ T7108] RBP: 00007efff3ff132e R08: 0000000000000000 R09: 0000000000000000 [ 101.013660][ T7108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.015751][ T7108] R13: 0000000000000000 R14: 00007efff4136058 R15: 00007fffd7704958 [ 101.017858][ T7108] [ 101.018825][ T7108] BUG: Bad page state in process syz.0.327 pfn:2ab1f [ 101.021256][ T7108] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2ab1f [ 101.023892][ T7108] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 101.025773][ T7108] raw: 00fff00000000000 dead000000000040 ffff888036779000 0000000000000000 [ 101.028213][ T7108] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 101.030609][ T7108] page dumped because: page_pool leak [ 101.032273][ T7108] page_owner tracks the page as allocated [ 101.034053][ T7108] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7108, tgid 7096 (syz.0.327), ts 92314338305, free_ts 92312584665 [ 101.039004][ T7108] post_alloc_hook+0x2d1/0x350 [ 101.040343][ T7108] get_page_from_freelist+0x101e/0x3070 [ 101.041931][ T7108] __alloc_pages_noprof+0x223/0x25a0 [ 101.043366][ T7108] alloc_pages_bulk_noprof+0x77c/0x1110 [ 101.045130][ T7108] __page_pool_alloc_pages_slow+0x18f/0x770 [ 101.046945][ T7108] page_pool_alloc_netmem+0xc4/0x160 [ 101.048511][ T7108] page_pool_alloc_pages+0x1a/0x60 [ 101.050022][ T7108] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 101.051660][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 101.053058][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 101.054627][ T7108] __sys_bpf+0xfc6/0x49a0 [ 101.055786][ T7108] __x64_sys_bpf+0x78/0xc0 [ 101.056972][ T7108] do_syscall_64+0xcd/0x250 [ 101.058253][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.060298][ T7108] page last free pid 7104 tgid 7101 stack trace: [ 101.062030][ T7108] free_unref_page+0x5f4/0xdc0 [ 101.063501][ T7108] vfree+0x17a/0x890 [ 101.064866][ T7108] hashlimit_mt_destroy+0x7e/0xa0 [ 101.067443][ T7108] cleanup_entry+0x19f/0x3a0 [ 101.069108][ T7108] translate_table+0xddd/0x17b0 [ 101.070418][ T7108] do_ip6t_set_ctl+0x605/0xc40 [ 101.071678][ T7108] nf_setsockopt+0x8a/0xf0 [ 101.072848][ T7108] ipv6_setsockopt+0x135/0x170 [ 101.074109][ T7108] rawv6_setsockopt+0xd7/0x680 [ 101.075365][ T7108] do_sock_setsockopt+0x222/0x480 [ 101.076711][ T7108] __sys_setsockopt+0x1a4/0x270 [ 101.078054][ T7108] __x64_sys_setsockopt+0xbd/0x160 [ 101.079403][ T7108] do_syscall_64+0xcd/0x250 [ 101.080627][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.082235][ T7108] Modules linked in: [ 101.083549][ T7108] CPU: 3 UID: 0 PID: 7108 Comm: syz.0.327 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 101.086943][ T7108] Tainted: [B]=BAD_PAGE [ 101.088319][ T7108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 101.092118][ T7108] Call Trace: [ 101.093251][ T7108] [ 101.094296][ T7108] dump_stack_lvl+0x16c/0x1f0 [ 101.095727][ T7108] bad_page+0xb3/0x1f0 [ 101.096810][ T7108] ? __pfx_bad_page+0x10/0x10 [ 101.098095][ T7108] ? page_bad_reason+0x9d/0x1e0 [ 101.099723][ T7108] free_unref_page+0x657/0xdc0 [ 101.101256][ T7108] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 101.102892][ T7108] ? __phys_addr+0xc6/0x150 [ 101.104412][ T7108] skb_free_head+0xa0/0x1d0 [ 101.106054][ T7108] skb_release_data+0x560/0x730 [ 101.107536][ T7108] sk_skb_reason_drop+0x129/0x1a0 [ 101.108925][ T7108] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 101.110745][ T7108] ? kernel_text_address+0x8d/0x100 [ 101.112123][ T7108] ? hlock_class+0x4e/0x130 [ 101.113328][ T7108] ? __lock_acquire+0x163e/0x3ce0 [ 101.114801][ T7108] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 101.116652][ T7108] ? hlock_class+0x4e/0x130 [ 101.117839][ T7108] ? __lock_acquire+0xbdd/0x3ce0 [ 101.119291][ T7108] ? __pfx___lock_acquire+0x10/0x10 [ 101.120949][ T7108] __netif_receive_skb_list_core+0x357/0x950 [ 101.122631][ T7108] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 101.124722][ T7108] ? trace_lock_acquire+0x14a/0x1d0 [ 101.126450][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 101.128237][ T7108] ? lock_acquire+0x2f/0xb0 [ 101.129537][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 101.131429][ T7108] netif_receive_skb_list_internal+0x753/0xdb0 [ 101.133311][ T7108] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 101.135396][ T7108] ? __pfx_eth_type_trans+0x10/0x10 [ 101.137134][ T7108] ? __build_skb_around+0x278/0x3b0 [ 101.139101][ T7108] netif_receive_skb_list+0x4f/0x4a0 [ 101.141012][ T7108] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 101.143225][ T7108] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 101.145215][ T7108] ? bpf_test_timer_continue+0x150/0x3d0 [ 101.147103][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 101.148608][ T7108] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 101.150384][ T7108] ? try_to_wake_up+0x154/0x14f0 [ 101.151732][ T7108] ? __pfx_try_to_wake_up+0x10/0x10 [ 101.153108][ T7108] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 101.154676][ T7108] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 101.156055][ T7108] ? 0xffffffffa0004340 [ 101.157170][ T7108] ? 0xffffffffa0004340 [ 101.158300][ T7108] ? 0xffffffffa0004340 [ 101.159645][ T7108] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 101.161499][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 101.163279][ T7108] ? lock_acquire+0x2f/0xb0 [ 101.164500][ T7108] ? __fget_files+0x40/0x3f0 [ 101.165705][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 101.167339][ T7108] ? fput+0x30/0x390 [ 101.168411][ T7108] ? __bpf_prog_get+0xa0/0x290 [ 101.169666][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 101.171202][ T7108] __sys_bpf+0xfc6/0x49a0 [ 101.172341][ T7108] ? __pfx___sys_bpf+0x10/0x10 [ 101.173636][ T7108] ? __schedule+0xe5d/0x5730 [ 101.174936][ T7108] ? __fget_files+0x23a/0x3f0 [ 101.176342][ T7108] ? do_futex+0x123/0x350 [ 101.177493][ T7108] ? __pfx_do_futex+0x10/0x10 [ 101.179142][ T7108] ? xfd_validate_state+0x5d/0x180 [ 101.180507][ T7108] ? rcu_is_watching+0x12/0xc0 [ 101.181859][ T7108] __x64_sys_bpf+0x78/0xc0 [ 101.183255][ T7108] ? lockdep_hardirqs_on+0x7c/0x110 [ 101.185089][ T7108] do_syscall_64+0xcd/0x250 [ 101.186576][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.188205][ T7108] RIP: 0033:0x7efff3f7e719 [ 101.189385][ T7108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.194456][ T7108] RSP: 002b:00007efff4e28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 101.196646][ T7108] RAX: ffffffffffffffda RBX: 00007efff4136058 RCX: 00007efff3f7e719 [ 101.198730][ T7108] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 101.200982][ T7108] RBP: 00007efff3ff132e R08: 0000000000000000 R09: 0000000000000000 [ 101.203226][ T7108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.205385][ T7108] R13: 0000000000000000 R14: 00007efff4136058 R15: 00007fffd7704958 [ 101.207637][ T7108] [ 101.208867][ T7108] BUG: Bad page state in process syz.0.327 pfn:2b2e6 [ 101.210749][ T7108] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b2e6 [ 101.213121][ T7108] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 101.215015][ T7108] raw: 00fff00000000000 dead000000000040 ffff888036779000 0000000000000000 [ 101.217514][ T7108] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 101.220077][ T7108] page dumped because: page_pool leak [ 101.221473][ T7108] page_owner tracks the page as allocated [ 101.223288][ T7108] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7108, tgid 7096 (syz.0.327), ts 92314320252, free_ts 92312589918 [ 101.228566][ T7108] post_alloc_hook+0x2d1/0x350 [ 101.230001][ T7108] get_page_from_freelist+0x101e/0x3070 [ 101.231462][ T7108] __alloc_pages_noprof+0x223/0x25a0 [ 101.232844][ T7108] alloc_pages_bulk_noprof+0x77c/0x1110 [ 101.234294][ T7108] __page_pool_alloc_pages_slow+0x18f/0x770 [ 101.235908][ T7108] page_pool_alloc_netmem+0xc4/0x160 [ 101.237448][ T7108] page_pool_alloc_pages+0x1a/0x60 [ 101.238858][ T7108] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 101.240623][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 101.242149][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 101.243543][ T7108] __sys_bpf+0xfc6/0x49a0 [ 101.244662][ T7108] __x64_sys_bpf+0x78/0xc0 [ 101.246036][ T7108] do_syscall_64+0xcd/0x250 [ 101.247530][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.249185][ T7108] page last free pid 7104 tgid 7101 stack trace: [ 101.250832][ T7108] free_unref_page+0x5f4/0xdc0 [ 101.252069][ T7108] vfree+0x17a/0x890 [ 101.253109][ T7108] hashlimit_mt_destroy+0x7e/0xa0 [ 101.254421][ T7108] cleanup_entry+0x19f/0x3a0 [ 101.255654][ T7108] translate_table+0xddd/0x17b0 [ 101.256956][ T7108] do_ip6t_set_ctl+0x605/0xc40 [ 101.258521][ T7108] nf_setsockopt+0x8a/0xf0 [ 101.259782][ T7108] ipv6_setsockopt+0x135/0x170 [ 101.261198][ T7108] rawv6_setsockopt+0xd7/0x680 [ 101.262677][ T7108] do_sock_setsockopt+0x222/0x480 [ 101.264156][ T7108] __sys_setsockopt+0x1a4/0x270 [ 101.265434][ T7108] __x64_sys_setsockopt+0xbd/0x160 [ 101.266803][ T7108] do_syscall_64+0xcd/0x250 [ 101.268256][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.269806][ T7108] Modules linked in: [ 101.270870][ T7108] CPU: 3 UID: 0 PID: 7108 Comm: syz.0.327 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 101.273994][ T7108] Tainted: [B]=BAD_PAGE [ 101.275106][ T7108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 101.277880][ T7108] Call Trace: [ 101.278897][ T7108] [ 101.279738][ T7108] dump_stack_lvl+0x16c/0x1f0 [ 101.280985][ T7108] bad_page+0xb3/0x1f0 [ 101.282074][ T7108] ? __pfx_bad_page+0x10/0x10 [ 101.283504][ T7108] ? page_bad_reason+0x9d/0x1e0 [ 101.285207][ T7108] free_unref_page+0x657/0xdc0 [ 101.286948][ T7108] ? __phys_addr+0xc6/0x150 [ 101.288668][ T7108] skb_free_head+0xa0/0x1d0 [ 101.290271][ T7108] skb_release_data+0x560/0x730 [ 101.291568][ T7108] sk_skb_reason_drop+0x129/0x1a0 [ 101.292905][ T7108] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 101.294659][ T7108] ? kernel_text_address+0x8d/0x100 [ 101.296085][ T7108] ? hlock_class+0x4e/0x130 [ 101.297309][ T7108] ? __lock_acquire+0x163e/0x3ce0 [ 101.298672][ T7108] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 101.301467][ T7108] ? hlock_class+0x4e/0x130 [ 101.302902][ T7108] ? __lock_acquire+0xbdd/0x3ce0 [ 101.304131][ T7108] ? __pfx___lock_acquire+0x10/0x10 [ 101.305552][ T7108] __netif_receive_skb_list_core+0x357/0x950 [ 101.307206][ T7108] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 101.309077][ T7108] ? trace_lock_acquire+0x14a/0x1d0 [ 101.310564][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 101.312245][ T7108] ? lock_acquire+0x2f/0xb0 [ 101.313469][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 101.315190][ T7108] netif_receive_skb_list_internal+0x753/0xdb0 [ 101.317013][ T7108] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 101.318994][ T7108] ? __pfx_eth_type_trans+0x10/0x10 [ 101.320479][ T7108] ? __build_skb_around+0x278/0x3b0 [ 101.322011][ T7108] netif_receive_skb_list+0x4f/0x4a0 [ 101.323473][ T7108] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 101.325107][ T7108] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 101.326852][ T7108] ? bpf_test_timer_continue+0x150/0x3d0 [ 101.328329][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 101.329665][ T7108] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 101.331173][ T7108] ? try_to_wake_up+0x154/0x14f0 [ 101.332475][ T7108] ? __pfx_try_to_wake_up+0x10/0x10 [ 101.333937][ T7108] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 101.335614][ T7108] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 101.337024][ T7108] ? 0xffffffffa0004340 [ 101.338126][ T7108] ? 0xffffffffa0004340 [ 101.339324][ T7108] ? 0xffffffffa0004340 [ 101.340783][ T7108] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 101.342643][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 101.344358][ T7108] ? lock_acquire+0x2f/0xb0 [ 101.345638][ T7108] ? __fget_files+0x40/0x3f0 [ 101.347076][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 101.348805][ T7108] ? fput+0x30/0x390 [ 101.349852][ T7108] ? __bpf_prog_get+0xa0/0x290 [ 101.351139][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 101.352732][ T7108] __sys_bpf+0xfc6/0x49a0 [ 101.354047][ T7108] ? __pfx___sys_bpf+0x10/0x10 [ 101.355480][ T7108] ? __schedule+0xe5d/0x5730 [ 101.356902][ T7108] ? __fget_files+0x23a/0x3f0 [ 101.358406][ T7108] ? do_futex+0x123/0x350 [ 101.359716][ T7108] ? __pfx_do_futex+0x10/0x10 [ 101.361301][ T7108] ? xfd_validate_state+0x5d/0x180 [ 101.362885][ T7108] ? rcu_is_watching+0x12/0xc0 [ 101.364089][ T7108] __x64_sys_bpf+0x78/0xc0 [ 101.365262][ T7108] ? lockdep_hardirqs_on+0x7c/0x110 [ 101.366644][ T7108] do_syscall_64+0xcd/0x250 [ 101.367821][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.369339][ T7108] RIP: 0033:0x7efff3f7e719 [ 101.370497][ T7108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.375626][ T7108] RSP: 002b:00007efff4e28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 101.377762][ T7108] RAX: ffffffffffffffda RBX: 00007efff4136058 RCX: 00007efff3f7e719 [ 101.379950][ T7108] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 101.382019][ T7108] RBP: 00007efff3ff132e R08: 0000000000000000 R09: 0000000000000000 [ 101.384313][ T7108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.386684][ T7108] R13: 0000000000000000 R14: 00007efff4136058 R15: 00007fffd7704958 [ 101.389026][ T7108] [ 101.389985][ T7108] BUG: Bad page state in process syz.0.327 pfn:2ab3f [ 101.391840][ T7108] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2ab3f [ 101.394239][ T7108] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 101.396185][ T7108] raw: 00fff00000000000 dead000000000040 ffff888036779000 0000000000000000 [ 101.398587][ T7108] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 101.400926][ T7108] page dumped because: page_pool leak [ 101.402451][ T7108] page_owner tracks the page as allocated [ 101.404009][ T7108] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7108, tgid 7096 (syz.0.327), ts 92314315418, free_ts 92312595112 [ 101.408719][ T7108] post_alloc_hook+0x2d1/0x350 [ 101.409982][ T7108] get_page_from_freelist+0x101e/0x3070 [ 101.411420][ T7108] __alloc_pages_noprof+0x223/0x25a0 [ 101.412813][ T7108] alloc_pages_bulk_noprof+0x77c/0x1110 [ 101.414370][ T7108] __page_pool_alloc_pages_slow+0x18f/0x770 [ 101.415898][ T7108] page_pool_alloc_netmem+0xc4/0x160 [ 101.417345][ T7108] page_pool_alloc_pages+0x1a/0x60 [ 101.418702][ T7108] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 101.420308][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 101.421696][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 101.423134][ T7108] __sys_bpf+0xfc6/0x49a0 [ 101.424272][ T7108] __x64_sys_bpf+0x78/0xc0 [ 101.425436][ T7108] do_syscall_64+0xcd/0x250 [ 101.426606][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.428140][ T7108] page last free pid 7104 tgid 7101 stack trace: [ 101.429652][ T7108] free_unref_page+0x5f4/0xdc0 [ 101.430860][ T7108] vfree+0x17a/0x890 [ 101.431895][ T7108] hashlimit_mt_destroy+0x7e/0xa0 [ 101.433206][ T7108] cleanup_entry+0x19f/0x3a0 [ 101.434371][ T7108] translate_table+0xddd/0x17b0 [ 101.435625][ T7108] do_ip6t_set_ctl+0x605/0xc40 [ 101.436887][ T7108] nf_setsockopt+0x8a/0xf0 [ 101.438116][ T7108] ipv6_setsockopt+0x135/0x170 [ 101.439403][ T7108] rawv6_setsockopt+0xd7/0x680 [ 101.440643][ T7108] do_sock_setsockopt+0x222/0x480 [ 101.442208][ T7108] __sys_setsockopt+0x1a4/0x270 [ 101.443481][ T7108] __x64_sys_setsockopt+0xbd/0x160 [ 101.444808][ T7108] do_syscall_64+0xcd/0x250 [ 101.445998][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.447577][ T7108] Modules linked in: [ 101.448590][ T7108] CPU: 3 UID: 0 PID: 7108 Comm: syz.0.327 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 101.451522][ T7108] Tainted: [B]=BAD_PAGE [ 101.452594][ T7108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 101.455388][ T7108] Call Trace: [ 101.456360][ T7108] [ 101.457257][ T7108] dump_stack_lvl+0x16c/0x1f0 [ 101.458501][ T7108] bad_page+0xb3/0x1f0 [ 101.459565][ T7108] ? __pfx_bad_page+0x10/0x10 [ 101.460796][ T7108] ? page_bad_reason+0x9d/0x1e0 [ 101.462174][ T7108] free_unref_page+0x657/0xdc0 [ 101.463447][ T7108] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 101.465283][ T7108] ? __phys_addr+0xc6/0x150 [ 101.466780][ T7108] skb_free_head+0xa0/0x1d0 [ 101.468114][ T7108] skb_release_data+0x560/0x730 [ 101.469480][ T7108] sk_skb_reason_drop+0x129/0x1a0 [ 101.470837][ T7108] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 101.472579][ T7108] ? kernel_text_address+0x8d/0x100 [ 101.473953][ T7108] ? hlock_class+0x4e/0x130 [ 101.475145][ T7108] ? __lock_acquire+0x163e/0x3ce0 [ 101.476454][ T7108] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 101.478289][ T7108] ? hlock_class+0x4e/0x130 [ 101.479484][ T7108] ? __lock_acquire+0xbdd/0x3ce0 [ 101.480706][ T7108] ? __pfx___lock_acquire+0x10/0x10 [ 101.482001][ T7108] __netif_receive_skb_list_core+0x357/0x950 [ 101.483531][ T7108] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 101.485196][ T7108] ? trace_lock_acquire+0x14a/0x1d0 [ 101.486559][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 101.488149][ T7108] ? lock_acquire+0x2f/0xb0 [ 101.489323][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 101.490984][ T7108] netif_receive_skb_list_internal+0x753/0xdb0 [ 101.492590][ T7108] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 101.494271][ T7108] ? __pfx_eth_type_trans+0x10/0x10 [ 101.495619][ T7108] ? __build_skb_around+0x278/0x3b0 [ 101.496988][ T7108] netif_receive_skb_list+0x4f/0x4a0 [ 101.498384][ T7108] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 101.500028][ T7108] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 101.501763][ T7108] ? bpf_test_timer_continue+0x150/0x3d0 [ 101.503236][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 101.504620][ T7108] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 101.506125][ T7108] ? try_to_wake_up+0x154/0x14f0 [ 101.507437][ T7108] ? __pfx_try_to_wake_up+0x10/0x10 [ 101.508807][ T7108] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 101.510352][ T7108] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 101.511735][ T7108] ? 0xffffffffa0004340 [ 101.512823][ T7108] ? 0xffffffffa0004340 [ 101.513927][ T7108] ? 0xffffffffa0004340 [ 101.515029][ T7108] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 101.516778][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 101.518316][ T7108] ? lock_acquire+0x2f/0xb0 [ 101.519537][ T7108] ? __fget_files+0x40/0x3f0 [ 101.520765][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 101.522403][ T7108] ? fput+0x30/0x390 [ 101.523433][ T7108] ? __bpf_prog_get+0xa0/0x290 [ 101.524638][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 101.526208][ T7108] __sys_bpf+0xfc6/0x49a0 [ 101.527329][ T7108] ? __pfx___sys_bpf+0x10/0x10 [ 101.528552][ T7108] ? __schedule+0xe5d/0x5730 [ 101.529735][ T7108] ? __fget_files+0x23a/0x3f0 [ 101.530954][ T7108] ? do_futex+0x123/0x350 [ 101.532065][ T7108] ? __pfx_do_futex+0x10/0x10 [ 101.533292][ T7108] ? xfd_validate_state+0x5d/0x180 [ 101.534632][ T7108] ? rcu_is_watching+0x12/0xc0 [ 101.535883][ T7108] __x64_sys_bpf+0x78/0xc0 [ 101.537050][ T7108] ? lockdep_hardirqs_on+0x7c/0x110 [ 101.538400][ T7108] do_syscall_64+0xcd/0x250 [ 101.539578][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.541638][ T7108] RIP: 0033:0x7efff3f7e719 [ 101.542778][ T7108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.548207][ T7108] RSP: 002b:00007efff4e28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 101.550397][ T7108] RAX: ffffffffffffffda RBX: 00007efff4136058 RCX: 00007efff3f7e719 [ 101.552455][ T7108] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 101.554705][ T7108] RBP: 00007efff3ff132e R08: 0000000000000000 R09: 0000000000000000 [ 101.556853][ T7108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.558924][ T7108] R13: 0000000000000000 R14: 00007efff4136058 R15: 00007fffd7704958 [ 101.561081][ T7108] [ 101.562210][ T7108] BUG: Bad page state in process syz.0.327 pfn:30e8a [ 101.564520][ T7108] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888030e8be00 pfn:0x30e8a [ 101.567682][ T7108] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 101.569534][ T7108] raw: 00fff00000000000 dead000000000040 ffff888036779000 0000000000000000 [ 101.572294][ T7108] raw: ffff888030e8be00 0000000000000001 00000000ffffffff 0000000000000000 [ 101.574506][ T7108] page dumped because: page_pool leak [ 101.575897][ T7108] page_owner tracks the page as allocated [ 101.577871][ T7108] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7108, tgid 7096 (syz.0.327), ts 92314310249, free_ts 92312599626 [ 101.583749][ T7108] post_alloc_hook+0x2d1/0x350 [ 101.585024][ T7108] get_page_from_freelist+0x101e/0x3070 [ 101.586488][ T7108] __alloc_pages_noprof+0x223/0x25a0 [ 101.587950][ T7108] alloc_pages_bulk_noprof+0x77c/0x1110 [ 101.589741][ T7108] __page_pool_alloc_pages_slow+0x18f/0x770 [ 101.591605][ T7108] page_pool_alloc_netmem+0xc4/0x160 [ 101.593128][ T7108] page_pool_alloc_pages+0x1a/0x60 [ 101.594497][ T7108] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 101.596091][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 101.597515][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 101.598895][ T7108] __sys_bpf+0xfc6/0x49a0 [ 101.599998][ T7108] __x64_sys_bpf+0x78/0xc0 [ 101.601134][ T7108] do_syscall_64+0xcd/0x250 [ 101.602354][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.603988][ T7108] page last free pid 7104 tgid 7101 stack trace: [ 101.606190][ T7108] free_unref_page+0x5f4/0xdc0 [ 101.607847][ T7108] vfree+0x17a/0x890 [ 101.609173][ T7108] hashlimit_mt_destroy+0x7e/0xa0 [ 101.611019][ T7108] cleanup_entry+0x19f/0x3a0 [ 101.612508][ T7108] translate_table+0xddd/0x17b0 [ 101.614029][ T7108] do_ip6t_set_ctl+0x605/0xc40 [ 101.615594][ T7108] nf_setsockopt+0x8a/0xf0 [ 101.617195][ T7108] ipv6_setsockopt+0x135/0x170 [ 101.618846][ T7108] rawv6_setsockopt+0xd7/0x680 [ 101.620799][ T7108] do_sock_setsockopt+0x222/0x480 [ 101.622561][ T7108] __sys_setsockopt+0x1a4/0x270 [ 101.624239][ T7108] __x64_sys_setsockopt+0xbd/0x160 [ 101.626144][ T7108] do_syscall_64+0xcd/0x250 [ 101.627871][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.630064][ T7108] Modules linked in: [ 101.631408][ T7108] CPU: 3 UID: 0 PID: 7108 Comm: syz.0.327 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 101.634871][ T7108] Tainted: [B]=BAD_PAGE [ 101.636470][ T7108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 101.639943][ T7108] Call Trace: [ 101.640901][ T7108] [ 101.641719][ T7108] dump_stack_lvl+0x16c/0x1f0 [ 101.642993][ T7108] bad_page+0xb3/0x1f0 [ 101.644189][ T7108] ? __pfx_bad_page+0x10/0x10 [ 101.645698][ T7108] ? page_bad_reason+0x9d/0x1e0 [ 101.647183][ T7108] free_unref_page+0x657/0xdc0 [ 101.648630][ T7108] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 101.650255][ T7108] ? __phys_addr+0xc6/0x150 [ 101.651468][ T7108] skb_free_head+0xa0/0x1d0 [ 101.652912][ T7108] skb_release_data+0x560/0x730 [ 101.654236][ T7108] sk_skb_reason_drop+0x129/0x1a0 [ 101.655584][ T7108] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 101.657605][ T7108] ? kernel_text_address+0x8d/0x100 [ 101.659586][ T7108] ? hlock_class+0x4e/0x130 [ 101.661145][ T7108] ? __lock_acquire+0x163e/0x3ce0 [ 101.662910][ T7108] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 101.665724][ T7108] ? hlock_class+0x4e/0x130 [ 101.667508][ T7108] ? __lock_acquire+0xbdd/0x3ce0 [ 101.669368][ T7108] ? __pfx___lock_acquire+0x10/0x10 [ 101.671541][ T7108] __netif_receive_skb_list_core+0x357/0x950 [ 101.674295][ T7108] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 101.676604][ T7108] ? trace_lock_acquire+0x14a/0x1d0 [ 101.678389][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 101.680902][ T7108] ? lock_acquire+0x2f/0xb0 [ 101.682568][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 101.684740][ T7108] netif_receive_skb_list_internal+0x753/0xdb0 [ 101.686849][ T7108] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 101.689118][ T7108] ? __pfx_eth_type_trans+0x10/0x10 [ 101.691101][ T7108] ? __build_skb_around+0x278/0x3b0 [ 101.692973][ T7108] netif_receive_skb_list+0x4f/0x4a0 [ 101.694772][ T7108] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 101.696877][ T7108] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 101.699203][ T7108] ? bpf_test_timer_continue+0x150/0x3d0 [ 101.701768][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 101.704316][ T7108] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 101.706938][ T7108] ? try_to_wake_up+0x154/0x14f0 [ 101.708321][ T7108] ? __pfx_try_to_wake_up+0x10/0x10 [ 101.709774][ T7108] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 101.711472][ T7108] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 101.713040][ T7108] ? 0xffffffffa0004340 [ 101.714166][ T7108] ? 0xffffffffa0004340 [ 101.715273][ T7108] ? 0xffffffffa0004340 [ 101.716385][ T7108] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 101.717969][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 101.719418][ T7108] ? lock_acquire+0x2f/0xb0 [ 101.720625][ T7108] ? __fget_files+0x40/0x3f0 [ 101.721875][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 101.723735][ T7108] ? fput+0x30/0x390 [ 101.724911][ T7108] ? __bpf_prog_get+0xa0/0x290 [ 101.726217][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 101.728154][ T7108] __sys_bpf+0xfc6/0x49a0 [ 101.729577][ T7108] ? __pfx___sys_bpf+0x10/0x10 [ 101.731127][ T7108] ? __schedule+0xe5d/0x5730 [ 101.732370][ T7108] ? __fget_files+0x23a/0x3f0 [ 101.733801][ T7108] ? do_futex+0x123/0x350 [ 101.735245][ T7108] ? __pfx_do_futex+0x10/0x10 [ 101.736627][ T7108] ? xfd_validate_state+0x5d/0x180 [ 101.737997][ T7108] ? rcu_is_watching+0x12/0xc0 [ 101.739366][ T7108] __x64_sys_bpf+0x78/0xc0 [ 101.740668][ T7108] ? lockdep_hardirqs_on+0x7c/0x110 [ 101.742248][ T7108] do_syscall_64+0xcd/0x250 [ 101.743652][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.745637][ T7108] RIP: 0033:0x7efff3f7e719 [ 101.746998][ T7108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.752807][ T7108] RSP: 002b:00007efff4e28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 101.755315][ T7108] RAX: ffffffffffffffda RBX: 00007efff4136058 RCX: 00007efff3f7e719 [ 101.758014][ T7108] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 101.760894][ T7108] RBP: 00007efff3ff132e R08: 0000000000000000 R09: 0000000000000000 [ 101.763592][ T7108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.766262][ T7108] R13: 0000000000000000 R14: 00007efff4136058 R15: 00007fffd7704958 [ 101.768925][ T7108] [ 101.770222][ T7108] BUG: Bad page state in process syz.0.327 pfn:240da [ 101.772456][ T7108] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880240da000 pfn:0x240da [ 101.775840][ T7108] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 101.778310][ T7108] raw: 00fff00000000000 dead000000000040 ffff888036779000 0000000000000000 [ 101.781279][ T7108] raw: ffff8880240da000 0000000000000001 00000000ffffffff 0000000000000000 [ 101.784151][ T7108] page dumped because: page_pool leak [ 101.785979][ T7108] page_owner tracks the page as allocated [ 101.787980][ T7108] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7108, tgid 7096 (syz.0.327), ts 92314304205, free_ts 92312604368 [ 101.793995][ T7108] post_alloc_hook+0x2d1/0x350 [ 101.795738][ T7108] get_page_from_freelist+0x101e/0x3070 [ 101.797727][ T7108] __alloc_pages_noprof+0x223/0x25a0 [ 101.799532][ T7108] alloc_pages_bulk_noprof+0x77c/0x1110 [ 101.801817][ T7108] __page_pool_alloc_pages_slow+0x18f/0x770 [ 101.804072][ T7108] page_pool_alloc_netmem+0xc4/0x160 [ 101.805810][ T7108] page_pool_alloc_pages+0x1a/0x60 [ 101.807721][ T7108] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 101.809712][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 101.811794][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 101.813902][ T7108] __sys_bpf+0xfc6/0x49a0 [ 101.815608][ T7108] __x64_sys_bpf+0x78/0xc0 [ 101.817504][ T7108] do_syscall_64+0xcd/0x250 [ 101.819462][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.821770][ T7108] page last free pid 7104 tgid 7101 stack trace: [ 101.824111][ T7108] free_unref_page+0x5f4/0xdc0 [ 101.825722][ T7108] vfree+0x17a/0x890 [ 101.827141][ T7108] hashlimit_mt_destroy+0x7e/0xa0 [ 101.828829][ T7108] cleanup_entry+0x19f/0x3a0 [ 101.830386][ T7108] translate_table+0xddd/0x17b0 [ 101.831850][ T7108] do_ip6t_set_ctl+0x605/0xc40 [ 101.833288][ T7108] nf_setsockopt+0x8a/0xf0 [ 101.834679][ T7108] ipv6_setsockopt+0x135/0x170 [ 101.836301][ T7108] rawv6_setsockopt+0xd7/0x680 [ 101.837973][ T7108] do_sock_setsockopt+0x222/0x480 [ 101.840129][ T7108] __sys_setsockopt+0x1a4/0x270 [ 101.842093][ T7108] __x64_sys_setsockopt+0xbd/0x160 [ 101.843539][ T7108] do_syscall_64+0xcd/0x250 [ 101.844831][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.846808][ T7108] Modules linked in: [ 101.848084][ T7108] CPU: 3 UID: 0 PID: 7108 Comm: syz.0.327 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 101.851498][ T7108] Tainted: [B]=BAD_PAGE [ 101.852866][ T7108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 101.856259][ T7108] Call Trace: [ 101.857264][ T7108] [ 101.858207][ T7108] dump_stack_lvl+0x16c/0x1f0 [ 101.859913][ T7108] bad_page+0xb3/0x1f0 [ 101.861325][ T7108] ? __pfx_bad_page+0x10/0x10 [ 101.862774][ T7108] ? page_bad_reason+0x9d/0x1e0 [ 101.864331][ T7108] free_unref_page+0x657/0xdc0 [ 101.866033][ T7108] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 101.868092][ T7108] ? __phys_addr+0xc6/0x150 [ 101.869642][ T7108] skb_free_head+0xa0/0x1d0 [ 101.871117][ T7108] skb_release_data+0x560/0x730 [ 101.872704][ T7108] sk_skb_reason_drop+0x129/0x1a0 [ 101.874162][ T7108] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 101.875897][ T7108] ? kernel_text_address+0x8d/0x100 [ 101.877278][ T7108] ? hlock_class+0x4e/0x130 [ 101.878507][ T7108] ? __lock_acquire+0x163e/0x3ce0 [ 101.880249][ T7108] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 101.882354][ T7108] ? hlock_class+0x4e/0x130 [ 101.884027][ T7108] ? __lock_acquire+0xbdd/0x3ce0 [ 101.885514][ T7108] ? __pfx___lock_acquire+0x10/0x10 [ 101.887368][ T7108] __netif_receive_skb_list_core+0x357/0x950 [ 101.889248][ T7108] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 101.891185][ T7108] ? trace_lock_acquire+0x14a/0x1d0 [ 101.892657][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 101.894381][ T7108] ? lock_acquire+0x2f/0xb0 [ 101.895589][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 101.897275][ T7108] netif_receive_skb_list_internal+0x753/0xdb0 [ 101.898936][ T7108] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 101.900983][ T7108] ? __pfx_eth_type_trans+0x10/0x10 [ 101.902416][ T7108] ? __build_skb_around+0x278/0x3b0 [ 101.903960][ T7108] netif_receive_skb_list+0x4f/0x4a0 [ 101.905631][ T7108] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 101.907429][ T7108] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 101.909578][ T7108] ? bpf_test_timer_continue+0x150/0x3d0 [ 101.911019][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 101.912351][ T7108] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 101.913903][ T7108] ? try_to_wake_up+0x154/0x14f0 [ 101.915219][ T7108] ? __pfx_try_to_wake_up+0x10/0x10 [ 101.916635][ T7108] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 101.918322][ T7108] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 101.919937][ T7108] ? 0xffffffffa0004340 [ 101.921128][ T7108] ? 0xffffffffa0004340 [ 101.922332][ T7108] ? 0xffffffffa0004340 [ 101.923499][ T7108] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 101.925209][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 101.926766][ T7108] ? lock_acquire+0x2f/0xb0 [ 101.927980][ T7108] ? __fget_files+0x40/0x3f0 [ 101.929319][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 101.930882][ T7108] ? fput+0x30/0x390 [ 101.931918][ T7108] ? __bpf_prog_get+0xa0/0x290 [ 101.933217][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 101.934766][ T7108] __sys_bpf+0xfc6/0x49a0 [ 101.935921][ T7108] ? __pfx___sys_bpf+0x10/0x10 [ 101.937220][ T7108] ? __schedule+0xe5d/0x5730 [ 101.938581][ T7108] ? __fget_files+0x23a/0x3f0 [ 101.940222][ T7108] ? do_futex+0x123/0x350 [ 101.941721][ T7108] ? __pfx_do_futex+0x10/0x10 [ 101.943150][ T7108] ? xfd_validate_state+0x5d/0x180 [ 101.944575][ T7108] ? rcu_is_watching+0x12/0xc0 [ 101.945980][ T7108] __x64_sys_bpf+0x78/0xc0 [ 101.947272][ T7108] ? lockdep_hardirqs_on+0x7c/0x110 [ 101.948719][ T7108] do_syscall_64+0xcd/0x250 [ 101.949974][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.951491][ T7108] RIP: 0033:0x7efff3f7e719 [ 101.952678][ T7108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.958185][ T7108] RSP: 002b:00007efff4e28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 101.960721][ T7108] RAX: ffffffffffffffda RBX: 00007efff4136058 RCX: 00007efff3f7e719 [ 101.963019][ T7108] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 101.965341][ T7108] RBP: 00007efff3ff132e R08: 0000000000000000 R09: 0000000000000000 [ 101.968579][ T7108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.970774][ T7108] R13: 0000000000000000 R14: 00007efff4136058 R15: 00007fffd7704958 [ 101.972847][ T7108] [ 101.973760][ T7108] BUG: Bad page state in process syz.0.327 pfn:50564 [ 101.976105][ T7108] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888050565e00 pfn:0x50564 [ 101.979335][ T7108] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 101.982728][ T7108] raw: 00fff00000000000 dead000000000040 ffff888036779000 0000000000000000 [ 101.986496][ T7108] raw: ffff888050565e00 0000000000000001 00000000ffffffff 0000000000000000 [ 101.989698][ T7108] page dumped because: page_pool leak [ 101.991292][ T7108] page_owner tracks the page as allocated [ 101.992932][ T7108] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7108, tgid 7096 (syz.0.327), ts 92314286926, free_ts 92312608627 [ 101.998147][ T7108] post_alloc_hook+0x2d1/0x350 [ 101.999477][ T7108] get_page_from_freelist+0x101e/0x3070 [ 102.001184][ T7108] __alloc_pages_noprof+0x223/0x25a0 [ 102.002824][ T7108] alloc_pages_bulk_noprof+0x77c/0x1110 [ 102.004933][ T7108] __page_pool_alloc_pages_slow+0x18f/0x770 [ 102.006924][ T7108] page_pool_alloc_netmem+0xc4/0x160 [ 102.008450][ T7108] page_pool_alloc_pages+0x1a/0x60 [ 102.010041][ T7108] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 102.011721][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 102.013137][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 102.014737][ T7108] __sys_bpf+0xfc6/0x49a0 [ 102.016268][ T7108] __x64_sys_bpf+0x78/0xc0 [ 102.017928][ T7108] do_syscall_64+0xcd/0x250 [ 102.019188][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.020874][ T7108] page last free pid 7104 tgid 7101 stack trace: [ 102.022853][ T7108] free_unref_page+0x5f4/0xdc0 [ 102.024871][ T7108] vfree+0x17a/0x890 [ 102.026042][ T7108] hashlimit_mt_destroy+0x7e/0xa0 [ 102.027619][ T7108] cleanup_entry+0x19f/0x3a0 [ 102.028920][ T7108] translate_table+0xddd/0x17b0 [ 102.030357][ T7108] do_ip6t_set_ctl+0x605/0xc40 [ 102.031623][ T7108] nf_setsockopt+0x8a/0xf0 [ 102.032807][ T7108] ipv6_setsockopt+0x135/0x170 [ 102.034140][ T7108] rawv6_setsockopt+0xd7/0x680 [ 102.035401][ T7108] do_sock_setsockopt+0x222/0x480 [ 102.036758][ T7108] __sys_setsockopt+0x1a4/0x270 [ 102.038161][ T7108] __x64_sys_setsockopt+0xbd/0x160 [ 102.039902][ T7108] do_syscall_64+0xcd/0x250 [ 102.041508][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.043255][ T7108] Modules linked in: [ 102.044448][ T7108] CPU: 3 UID: 0 PID: 7108 Comm: syz.0.327 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 102.048429][ T7108] Tainted: [B]=BAD_PAGE [ 102.049591][ T7108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 102.052956][ T7108] Call Trace: [ 102.054087][ T7108] [ 102.055099][ T7108] dump_stack_lvl+0x16c/0x1f0 [ 102.056490][ T7108] bad_page+0xb3/0x1f0 [ 102.057574][ T7108] ? __pfx_bad_page+0x10/0x10 [ 102.059022][ T7108] ? page_bad_reason+0x9d/0x1e0 [ 102.060748][ T7108] free_unref_page+0x657/0xdc0 [ 102.062329][ T7108] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 102.064250][ T7108] ? __phys_addr+0xc6/0x150 [ 102.065599][ T7108] skb_free_head+0xa0/0x1d0 [ 102.067043][ T7108] skb_release_data+0x560/0x730 [ 102.068360][ T7108] sk_skb_reason_drop+0x129/0x1a0 [ 102.069968][ T7108] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 102.071822][ T7108] ? kernel_text_address+0x8d/0x100 [ 102.073198][ T7108] ? hlock_class+0x4e/0x130 [ 102.074483][ T7108] ? __lock_acquire+0x163e/0x3ce0 [ 102.075860][ T7108] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 102.077742][ T7108] ? hlock_class+0x4e/0x130 [ 102.079354][ T7108] ? __lock_acquire+0xbdd/0x3ce0 [ 102.080757][ T7108] ? __pfx___lock_acquire+0x10/0x10 [ 102.082980][ T7108] __netif_receive_skb_list_core+0x357/0x950 [ 102.085578][ T7108] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 102.087777][ T7108] ? trace_lock_acquire+0x14a/0x1d0 [ 102.089278][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 102.091223][ T7108] ? lock_acquire+0x2f/0xb0 [ 102.092846][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 102.095012][ T7108] netif_receive_skb_list_internal+0x753/0xdb0 [ 102.096738][ T7108] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 102.098627][ T7108] ? __pfx_eth_type_trans+0x10/0x10 [ 102.100334][ T7108] ? __build_skb_around+0x278/0x3b0 [ 102.101956][ T7108] netif_receive_skb_list+0x4f/0x4a0 [ 102.103420][ T7108] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 102.105545][ T7108] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 102.107691][ T7108] ? bpf_test_timer_continue+0x150/0x3d0 [ 102.109456][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 102.111181][ T7108] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 102.112843][ T7108] ? try_to_wake_up+0x154/0x14f0 [ 102.114290][ T7108] ? __pfx_try_to_wake_up+0x10/0x10 [ 102.115680][ T7108] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 102.117365][ T7108] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 102.118789][ T7108] ? 0xffffffffa0004340 [ 102.120025][ T7108] ? 0xffffffffa0004340 [ 102.121349][ T7108] ? 0xffffffffa0004340 [ 102.122862][ T7108] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 102.124810][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 102.126412][ T7108] ? lock_acquire+0x2f/0xb0 [ 102.127995][ T7108] ? __fget_files+0x40/0x3f0 [ 102.129341][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 102.131032][ T7108] ? fput+0x30/0x390 [ 102.132070][ T7108] ? __bpf_prog_get+0xa0/0x290 [ 102.133315][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 102.134932][ T7108] __sys_bpf+0xfc6/0x49a0 [ 102.136078][ T7108] ? __pfx___sys_bpf+0x10/0x10 [ 102.137349][ T7108] ? __schedule+0xe5d/0x5730 [ 102.138666][ T7108] ? __fget_files+0x23a/0x3f0 [ 102.140189][ T7108] ? do_futex+0x123/0x350 [ 102.141459][ T7108] ? __pfx_do_futex+0x10/0x10 [ 102.142764][ T7108] ? xfd_validate_state+0x5d/0x180 [ 102.144483][ T7108] ? rcu_is_watching+0x12/0xc0 [ 102.145943][ T7108] __x64_sys_bpf+0x78/0xc0 [ 102.147251][ T7108] ? lockdep_hardirqs_on+0x7c/0x110 [ 102.148826][ T7108] do_syscall_64+0xcd/0x250 [ 102.150284][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.151931][ T7108] RIP: 0033:0x7efff3f7e719 [ 102.153165][ T7108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.158466][ T7108] RSP: 002b:00007efff4e28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 102.161096][ T7108] RAX: ffffffffffffffda RBX: 00007efff4136058 RCX: 00007efff3f7e719 [ 102.163444][ T7108] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 102.166039][ T7108] RBP: 00007efff3ff132e R08: 0000000000000000 R09: 0000000000000000 [ 102.168215][ T7108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.170524][ T7108] R13: 0000000000000000 R14: 00007efff4136058 R15: 00007fffd7704958 [ 102.172551][ T7108] [ 102.173580][ T7108] BUG: Bad page state in process syz.0.327 pfn:5078b [ 102.175437][ T7108] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2 pfn:0x5078b [ 102.177824][ T7108] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 102.180070][ T7108] raw: 00fff00000000000 dead000000000040 ffff888036779000 0000000000000000 [ 102.182326][ T7108] raw: 0000000000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 102.184568][ T7108] page dumped because: page_pool leak [ 102.186029][ T7108] page_owner tracks the page as allocated [ 102.187606][ T7108] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7108, tgid 7096 (syz.0.327), ts 92314280674, free_ts 92312612687 [ 102.192270][ T7108] post_alloc_hook+0x2d1/0x350 [ 102.193623][ T7108] get_page_from_freelist+0x101e/0x3070 [ 102.195171][ T7108] __alloc_pages_noprof+0x223/0x25a0 [ 102.196647][ T7108] alloc_pages_bulk_noprof+0x77c/0x1110 [ 102.198184][ T7108] __page_pool_alloc_pages_slow+0x18f/0x770 [ 102.199762][ T7108] page_pool_alloc_netmem+0xc4/0x160 [ 102.201179][ T7108] page_pool_alloc_pages+0x1a/0x60 [ 102.202569][ T7108] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 102.204231][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 102.205609][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 102.207097][ T7108] __sys_bpf+0xfc6/0x49a0 [ 102.208277][ T7108] __x64_sys_bpf+0x78/0xc0 [ 102.209477][ T7108] do_syscall_64+0xcd/0x250 [ 102.210737][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.212497][ T7108] page last free pid 7104 tgid 7101 stack trace: [ 102.214236][ T7108] free_unref_page+0x5f4/0xdc0 [ 102.215498][ T7108] vfree+0x17a/0x890 [ 102.216530][ T7108] hashlimit_mt_destroy+0x7e/0xa0 [ 102.218021][ T7108] cleanup_entry+0x19f/0x3a0 [ 102.219248][ T7108] translate_table+0xddd/0x17b0 [ 102.220522][ T7108] do_ip6t_set_ctl+0x605/0xc40 [ 102.221903][ T7108] nf_setsockopt+0x8a/0xf0 [ 102.223395][ T7108] ipv6_setsockopt+0x135/0x170 [ 102.224809][ T7108] rawv6_setsockopt+0xd7/0x680 [ 102.226559][ T7108] do_sock_setsockopt+0x222/0x480 [ 102.228633][ T7108] __sys_setsockopt+0x1a4/0x270 [ 102.230093][ T7108] __x64_sys_setsockopt+0xbd/0x160 [ 102.231685][ T7108] do_syscall_64+0xcd/0x250 [ 102.232999][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.234720][ T7108] Modules linked in: [ 102.235774][ T7108] CPU: 3 UID: 0 PID: 7108 Comm: syz.0.327 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 102.239717][ T7108] Tainted: [B]=BAD_PAGE [ 102.241057][ T7108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 102.244051][ T7108] Call Trace: [ 102.245013][ T7108] [ 102.245830][ T7108] dump_stack_lvl+0x16c/0x1f0 [ 102.247074][ T7108] bad_page+0xb3/0x1f0 [ 102.248160][ T7108] ? __pfx_bad_page+0x10/0x10 [ 102.249374][ T7108] ? page_bad_reason+0x9d/0x1e0 [ 102.251040][ T7108] free_unref_page+0x657/0xdc0 [ 102.252472][ T7108] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 102.254196][ T7108] ? __phys_addr+0xc6/0x150 [ 102.255406][ T7108] skb_free_head+0xa0/0x1d0 [ 102.256582][ T7108] skb_release_data+0x560/0x730 [ 102.257975][ T7108] sk_skb_reason_drop+0x129/0x1a0 [ 102.259991][ T7108] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 102.262308][ T7108] ? kernel_text_address+0x8d/0x100 [ 102.263805][ T7108] ? hlock_class+0x4e/0x130 [ 102.265318][ T7108] ? __lock_acquire+0x163e/0x3ce0 [ 102.267198][ T7108] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 102.269142][ T7108] ? hlock_class+0x4e/0x130 [ 102.270533][ T7108] ? __lock_acquire+0xbdd/0x3ce0 [ 102.271862][ T7108] ? __pfx___lock_acquire+0x10/0x10 [ 102.273299][ T7108] __netif_receive_skb_list_core+0x357/0x950 [ 102.274891][ T7108] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 102.276589][ T7108] ? trace_lock_acquire+0x14a/0x1d0 [ 102.278111][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 102.280069][ T7108] ? lock_acquire+0x2f/0xb0 [ 102.281440][ T7108] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 102.283183][ T7108] netif_receive_skb_list_internal+0x753/0xdb0 [ 102.284842][ T7108] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 102.286744][ T7108] ? __pfx_eth_type_trans+0x10/0x10 [ 102.288417][ T7108] ? __build_skb_around+0x278/0x3b0 [ 102.290187][ T7108] netif_receive_skb_list+0x4f/0x4a0 [ 102.291684][ T7108] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 102.293642][ T7108] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 102.295501][ T7108] ? bpf_test_timer_continue+0x150/0x3d0 [ 102.297096][ T7108] bpf_test_run_xdp_live+0x365/0x500 [ 102.298638][ T7108] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 102.300507][ T7108] ? try_to_wake_up+0x154/0x14f0 [ 102.302167][ T7108] ? __pfx_try_to_wake_up+0x10/0x10 [ 102.303551][ T7108] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 102.305168][ T7108] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 102.306598][ T7108] ? 0xffffffffa0004340 [ 102.308212][ T7108] ? 0xffffffffa0004340 [ 102.309319][ T7108] ? 0xffffffffa0004340 [ 102.310503][ T7108] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 102.312063][ T7108] bpf_prog_test_run_xdp+0x827/0x1580 [ 102.313800][ T7108] ? lock_acquire+0x2f/0xb0 [ 102.315214][ T7108] ? __fget_files+0x40/0x3f0 [ 102.316490][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 102.318599][ T7108] ? fput+0x30/0x390 [ 102.320498][ T7108] ? __bpf_prog_get+0xa0/0x290 [ 102.322238][ T7108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 102.324256][ T7108] __sys_bpf+0xfc6/0x49a0 [ 102.325697][ T7108] ? __pfx___sys_bpf+0x10/0x10 [ 102.327297][ T7108] ? __schedule+0xe5d/0x5730 [ 102.328651][ T7108] ? __fget_files+0x23a/0x3f0 [ 102.330149][ T7108] ? do_futex+0x123/0x350 [ 102.331318][ T7108] ? __pfx_do_futex+0x10/0x10 [ 102.332885][ T7108] ? xfd_validate_state+0x5d/0x180 [ 102.334415][ T7108] ? rcu_is_watching+0x12/0xc0 [ 102.335614][ T7108] __x64_sys_bpf+0x78/0xc0 [ 102.336887][ T7108] ? lockdep_hardirqs_on+0x7c/0x110 [ 102.338367][ T7108] do_syscall_64+0xcd/0x250 VM DIAGNOSIS: 12:24:40 Registers: info registers vcpu 0 CPU#0 RAX=00000000000bde03 RBX=0000000000000000 RCX=ffffffff8b2305e9 RDX=0000000000000000 RSI=ffffffff8b6cd040 RDI=ffffffff8bd1ad40 RBP=fffffbfff1bd2af8 RSP=ffffffff8de07e20 R8 =0000000000000001 R9 =ffffed100d4c7025 R10=ffff88806a63812b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8de957c0 R14=ffffffff905f5088 R15=0000000000000000 RIP=ffffffff8b2319cf RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000000000000 CR3=00000000293e2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000014 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0edc5f21cb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0edc5f21d8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0edc5f21d2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0edc5f21e6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0edc5f226c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0edc5f234a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0edc70c488 00007f0edc70c480 00007f0edc70c478 00007f0edc70c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0edd26d100 00007f0edc70c440 00007f0edc70c458 00007f0edc70c4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0edc70c498 00007f0edc70c490 00007f0edc70c488 00007f0edc70c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000009781f RBX=0000000000000001 RCX=ffffffff8b2305e9 RDX=0000000000000000 RSI=ffffffff8b6cd040 RDI=ffffffff8bd1ad40 RBP=ffffed1003b59910 RSP=ffffc90000187e08 R8 =0000000000000001 R9 =ffffed100d4e7025 R10=ffff88806a73812b R11=0000000000000000 R12=0000000000000001 R13=ffff88801dacc880 R14=ffffffff905f5088 R15=0000000000000000 RIP=ffffffff8b2319cf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f0edd2f0d58 CR3=0000000027b5e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000003000000 Opmask01=0000000003000007 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffd7704cf0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efff3ff21cb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efff3ff21d8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efff3ff21d2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efff3ff21e6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efff3ff226c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efff3ff234a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000d01 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000032e5ea ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000d01 0000000000000000 0000000000000000 000000000032e5ea ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000070177 RBX=0000000000000002 RCX=ffffffff8b2305e9 RDX=0000000000000000 RSI=ffffffff8b6cd040 RDI=ffffffff8bd1ad40 RBP=ffffed1003b5c000 RSP=ffffc90000197e08 R8 =0000000000000001 R9 =ffffed100d507025 R10=ffff88806a83812b R11=0000000000000000 R12=0000000000000002 R13=ffff88801dae0000 R14=ffffffff905f5088 R15=0000000000000000 RIP=ffffffff8b2319cf RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f216fc92d58 CR3=00000000312a4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000003000000 Opmask01=0000000003000007 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd030af3d0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3c981f21cb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3c981f21d8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3c981f21d2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3c981f21e6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3c981f226c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3c981f234a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000d01 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000032e5ea ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000d01 0000000000000000 0000000000000000 000000000032e5ea ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000054 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff850b46e5 RDI=ffffffff9aae7bc0 RBP=ffffffff9aae7b80 RSP=ffffc9000620e990 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000054 R14=ffffffff850b4680 R15=0000000000000000 RIP=ffffffff850b470f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007efff4e286c0 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000000000000 CR3=00000000331c4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000003000007 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0edc5f21cb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0edc5f21d8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0edc5f21d2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0edc5f21e6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0edc5f226c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0edc5f234a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0edc70c488 00007f0edc70c480 00007f0edc70c478 00007f0edc70c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0edd26d100 00007f0edc70c440 00007f0edc70c458 00007f0edc70c4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0edc70c498 00007f0edc70c490 00007f0edc70c488 00007f0edc70c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000d01 0000000000000000 0000000000000000 000000000032e5ea ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000