last executing test programs: 2.244173378s ago: executing program 2 (id=1884): r0 = socket$inet6(0xa, 0x800, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0xff, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = syz_socket_connect_nvme_tcp() close(r2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) write$P9_RWRITE(0xffffffffffffffff, 0x0, 0x0) getpriority(0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="880665dc2208a1ce", 0x8, 0x20000080, 0x0, 0x0) 2.068268099s ago: executing program 2 (id=1888): pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000000100000000000000000000000000000000000000000000004bd9f3"]) r5 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000400), 0x4) sendto(r5, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x600}]}) close(r1) r6 = socket(0x2, 0x3, 0x21) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r8, 0x4048aec9, &(0x7f0000000740)={0x3, 0x0, @ioapic={0x0, 0x4, 0x0, 0x0, 0x0, [{0xc9}, {0x0, 0x0, 0x0, '\x00', 0x2d}, {}, {0x0, 0x8}, {0x0, 0xd5}, {}, {}, {}, {0x3, 0x10}, {0xc}, {}, {0x0, 0x0, 0xfc}, {}, {}, {}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, '\x00', 0x4}, {}, {0x0, 0x40, 0x8}, {0x0, 0x0, 0x0, '\x00', 0x2}, {0x0, 0x0, 0xff, '\x00', 0x6}, {0x9, 0x6, 0x81}, {0x0, 0x0, 0x1, '\x00', 0x2}, {0x0, 0x2, 0xe6}]}}) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x8004, 0x0) 1.956181026s ago: executing program 1 (id=1891): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) rename(&(0x7f0000000280)='./file0/../file0/file0/file0\x00', 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0/file0\x00', 0x0, 0x0) (async) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1}, 0x50) (async) syz_fuse_handle_req(r0, &(0x7f000000c280)="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", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0xb5}}, 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_CLASS={0x6}}}}]}, 0x38}}, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002580)=ANY=[@ANYBLOB="1c0000004a00ffef0000000000000c000a"], 0x1c}}, 0x0) (async) r5 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x541b, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@deltaction={0x28, 0x30, 0xec1ba69ffcd4df1, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = dup(0xffffffffffffffff) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) writev(r7, &(0x7f00000002c0)=[{&(0x7f0000000040)="01000000", 0xfd98}, {&(0x7f0000000100)='\b', 0x1}], 0x2) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0), 0x48) r8 = openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r6, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x164, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x6, 0x23}}}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x164}, 0x1, 0x0, 0x0, 0x2004c010}, 0x800) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r8, 0x4004510d, &(0x7f0000000000)) (async) sendmsg$inet(r6, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0x2}], 0x1, &(0x7f0000000c80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x18}, 0x0) (async) fstat64(r6, &(0x7f00000002c0)) (async) write$UHID_INPUT(r6, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) 1.909663426s ago: executing program 1 (id=1893): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004300)="f6c5cdd50b89338e6f0228b937225c21a87072407fe83d5fecd7bcca9b3fb6c714baa7d905bd76d4f38eba0ffafc067da9e5b2a863dbea1f11e32b455862ad205d1de267dbf9edb296fda48092e372fd3166c91d636b627f4ce223d2fff7db30abd245c174812a8ebfce720483d74f6658daaba3ea9e453d789d9d1d8b63c91f02b1282f122d5847241f305a5d791a7188c946ed5d5e5343c04968e62b064aeadeafd55ddb6a1b724a9adf29b15c4c55c9afd709d19cf29df117c69d1f855b647f2d6dc3ad9cc2e413cda65ca8d3fd777fdf88827428723d37b89a7330dddd234f39187db8e54905b8eb0dc851f51ff37b5deb69b64bbd27b72881267f94a88974a56b1d3178d49c209d6f4e974c00f25a87255c3804b1150f98d46437f5333b200651dfd1ae939125483cec1690ecb4d449ae4f2bdf88d50382440dbe1699017f21c0f1e0c85cd339a9f87046af063b54b923d4eaa04fc8dabb3bb3e3bc83f0657b5a3c4cdfce3c325abe45a39b794d13057e3a036ec20c4eb1c18a7501a8bf3899626fe01b2b9c18ab08eaa972ab9f8a786888162c7f77db751c1ab88db854ad8a99c7307a52571fd4d0a8ca5a6f4f5e46396bab29e4a5bb6f7c40404be7357b47028a1cd2b780abbba9e37d182866a9171ddea543a5684ff6445d4c3ba61b4300a1556e85518301862b398e43f61d461054469f693c42f995a000dc9b950b277bbc5a9bec872462a0938ef0e0ba4f4d2bff4d81804996a9f97893c02b2deff1abf1a6cb7987f446132f55a10aaf537d93422ed22fa659ceda5939cf18398f8632a257abbf68d4854e452ceb5acc02c7b65d67b582e159fb5039ecfe636dfd00218f2e5d1e2ebeca027472d63fdd2b61d7bbd9258a3fbb14ee2559845a638e07bbde84f87a42b59a09c1bc877b7e51a4ea42c64bcb3b3c8043f1604c569308bd6ddf438204df167580f5aefe2a8beabb77a8fd3392f99e3a43a7cfa0a68b1b21a307aeecd5b7a3742d74ff1790b13f1026ebec296210301d48d9354646382a18d247300bfd8aca878051a2d667ad2ee489edfeb3c1c912cc6a6c573fd92dd4cd1b6d2fb1bbdc86ddd8bf515c28f15ebafe858df78e8a783b293db3144c44397cbaeeadea44655c6350562166bda3accf7a2e65cf3eb7beace08760337e2dff8c9611fb131b345f44dba2aa2eee0bb4ec719c59a269e71ffc0775c5c193e341a833d38edf8a1f01f66b9fd039ff55c884257ec7330f333e579e66ac67097bfe31b2b78d88b81b640351da3bea710e38d8b50b0a63814f4638df1680d2217dfe7364dc228ea79f74e678b338105391e8c1e041cae3d2ccb9d1b034d96b811bf06515b3f4dd02cf2cf9f9884a6a1af39f219fde0b1caee2065536b8e900bf4fe9d87396cb0854ff28db253382a8f1e6c2a2805b5d5c8b756640a49a092f8fbc5ab87e511d790519e9e79c1336b2af288b1b07871858966197f65919009c435e6ca5bc89a15fae0e3534e50cbacb3cb2ee519a9894f08facb453a7ada35c0cd8e6ac71cf9ceb21c1b944d81a16a3299c730fe1ddb164505e2df5e4dc7f46c3fa3230a9cc3845298d4abf909565a67be3316ca881540f2920c8fb6ffe5ffc66ef477476cc4941ba03795287f408b6175df89274e189bc2e12e93f5d8aaa532400946a7a0cb6cacb55d4947d0c02da9e2345b4d0cc92a570019ac51f64b29b7e509109500f9fe8129196bc46230a1848ad7dc721efd97f1cbee41a1e520da4cda9fa5a0024d7865e637d0f17f240647f11f4d41a39e29643917f6ccd8680d83cfaa33081c3dd613ba2ebe736539834ba7977d2617b85b073a4532c8e6cb3dc3ecb492f23b573ee103ad6c56a5930904e836e9390a8b20470de2c7e0d1b52000366cbc198caa4917b593334a449840a093bbd709a6f835eb4338e23b12f59efd0fe6a8f7d108e6c40d63b06b43639a73822b431b636c3c6cfa2c973fd43aab1ebb560eb5b556b98758583195190651d9f12bec2a2db9c87f879af59d9e72786e416ea8fa36ff4a4f08d56c5e208b9995fd9ed0607d3af20b1eb51dc0943cd96bee0cc78875fac1dc471f80664ef9eb1f146d5b6871842ae1c51e83523f28a149346df307eae77929a81c235f5593d7eb30581b0650a8759d5a59b5c2697c461e17d8458b13dc88935b878f71f0597d46924bc84714ca7af2df5749b1b0fbe1950aade8d85555887809f9d4cb5d8d6cdd0ddede90e2fd122d1168f0c7e535aefe0385ce12a5cb1060498ba51b28fc344e6c6094b1cf6263007e299d7ceae7814c664f43bc2b8e989779e1a2a36e7e209175c197117966925ced8cd941fb4d37d05a5c771ba579671d505d6af7fb70fe764d906fa84f046fb4429d82bc7f4ed72f686bf2f923ec7bd48b1be8773ef8a51235825cb6c54d444021e823ba2614e7d93920a96d23f19d9adfcabe1716fea4979ef4d74fadc6fd53e8d6c6704c4eb04a039ba4c83d15afdb195a36f292ba9a2728cd85311076aa6a484c01fbf9fad617f4870fcbd1cd453aeaa391968287263852732552443e3388bd07d975cd2a11624fa2d0d931034b940c4b2babe262706c6cd72007c5fd5744564babc9fc37da476cb38ed0de6b530864e26a6febeb8d901d40c771a0cf2f498830487d83368ff3f8af68a0ffa5762d3f2c9cf2a66e2338d3e3655b647685c2dcacba997eac420d5618c3d268b85795fa49e37ee504521017439581a6c5c064f0184e4cad2b8134e2f9b9ec42981c155775d7d744bfff7adb3f7599f159c7cf1d7d56fb7cddf5b4f8ee8a3dcfbc1151b3d253771db09879f48c3c0cc9506e97c776fa8251c21d5fed9dba8ca6674e45ac2a6bef86ae18b175ffb5d281f58527661ef7d5651b28db85c1b7cc305ab5b34fb49a32778390d3b6d4e78d06d3d863eff86435d36be3043529fb9b4d061a7a983d6e287fa83925dfab1b526d6bf510a29f9d6ad493bbb4da5fdf0aef4f16ff50799b016dc4230aaf87b9ef8953f8ad522ab4c3ec3209a57852cbdb5e39628ad107b248d6f07d123fb0e68d7b7aa8558478de5dee88032de6ccbbcab0ecfe8fccb1681816db894fdc24a9b6cf8ad5690efb01c8b4840255a5d5563b4cb73609f0a5337738e179fd9577bb795eb5a89a4ee4e2b2bed5fc65ba1efb911889e131a0b010c5699d7f6b869ffff3945208feee8d245eb45590f2c67b97d186307dbee5327ef60340386ae04d45f981061b80d33ed6db2e5dcd711d68f8d9befdca10334e9636de1a2d6e6de2888d0984aae79b636eb0576f6cc9f450320b7e946eb82e9e1f8b3477f382090c79a9524a69f3416eadba673ff24cb1846358680d370e6ae98230256ebad4826f90ef8189b95f3b6275950c33ec2781bf438bbcce8ee350f3c1475b026a6c189db5101981b21f82ba8d8f62e852ccc5109a2780c70eb4a0b014c0c06ef46ff506c481b8082154db687b644ff122e5f35af5882212834a5b696afda432241f966d5706fa7c00be4a4912b6adb8e5629d0e18bb2ed4e2d7b6dbe79920d21ed0491f7a5017ae5ccdee5b498f61bb9ad5845a6268abebf80338c20c09530675a8366bfd4ea746957dd7337f1c1184751b649a399891ad2b6306bb062b9b2dc8a8b09302ea3386ccd78d9a3a0314c3df264ce81048391ae66ec9eeda8c70efe95146205d0b6bed2c362f2920615d41c7d12fc3991000a080061dad4e34587ff1684c6756f55dfd249d2d62bef74b5e4a40a63a2bc14a473cf913d5a4fd289d1792fc693c4a5f85326eebc52994a34e16af861438f22633fc5a4ce0d30d37ac0e2277e072f78375d7b1443e1af9647c23decfc411a3d0def781ce6679d92872fbc27dbd4a7edc2acfe565103d472fbde7ac626248a5305cf6e1c5fc81e9b71adb2523839b9425c72a67409539d611240ff5ad04ea2b3d063e197f5663606aeb0b76fa2e1121e3815506fe4a9ac09d555c1b8d8c9749f5dd5096130aaab80d9b721a831013885e3a376a57f97db4f1878372c7ac241b7424b86d97ae5fa3a0943f55c64cdbb4aa3209c4fbee3d9ed201e2bfccee01d33bd99c01689e1f23b185acb82e75cd2a161c316334f4887c8225f11ec1354105e3180d67ebb3a98d1178cca8332eb73555f53ed86c7285fc6c85570be32e74baeece3d610cfb505e1ca6c02fabffbd9b4c80274db8faab4a4d29f8bfa6db38daf4ca8442aad66e40581f40a63e50b3a33d9a3e32f4440b761d149a8d71c138f74d5b0e10d9266788499a19f03a17726226e27c899c538bf4c219d7a035bdab2c5b347bcb176555fa451594050c6196a2236e5b0981eabab3519dd10ed1ffb6334476cbb06059384f02c164f278d49391c6069b9adf25c14870e2fe1f28abdb325d3101fe464f829e971067dc9231fc3bc9d0e2a6c8e13db15f4b69b3b028a587a092453296f7f790a547ba191bca2ca929d1477344d7ba30b826a10152580e5ed7418f481e4b10139a4acea1a1c42f748cafff8b0215c6be50e0af09905366f0403c53f8c746ff06ec45d69d3c4039d0980af45c8a2d6cadafe477ffe3451fce3bdc9644faf73ef3ca3e823526fdc086d82967b1a569cdb99ea26fe6d06a21fdfa7a8342089931240324b786f6be1b987c8fc9e9e602cb0ad66039a0147319a896134cc97a7f50b3a0c04c4f80b8a53ea222f5c009325eca6668e453d92e1577712af0297ffbc3e3365d504ebc1c7e825e045c30c0ad9067fcea6dd754c179c3febce85187611f78634c081192b430010987a852837015a3c2a70604e18c5d394207fa61fd3c51a8ac5ab263d1c15a9918f599338d21b894e6016337a5a31422867a775a7def8fb7cc3a41342175e05c891ebbd7318bf011ab2dcd865dc5efa3a9451d973951c96752803665567c08013259f14fd704d5d108cef5a38b4e2375aa241c5cfa99511e334cac9665a06f25da7d3fdb497363b119bb4d536a6803b3aed59143655ef6df225b5a9305979f77e32942ffb48e859da96a309ab57b68fa56a9e0d6e53650e7b1968fe5afc21e5638cd50f5c415c9addd998fe32ac983a9f9266590967782b6d9b70f22a48cc14301af5de46d7b71d0f7c0ead21ff503cbed5c2535672835ea0216eaa7fed72390b66b4684b51365d1923aec4dcf4dd08b357552cfb7e96a5ab956ac1276882e80a79d018c5ca7ffb3367d59846387f4af1fd4b6098cb560bb565af3ec0c3934da29120546804f3800aaba4969e00cb83d9d9b0cf216c42a8722030a6fc85a01b9748bebe688671318a2cc33f69e0bf3a8a3779c8847de958b28b2e8017da7f74d56f1a75134a4da0944e45dfefe63ff367759b55e1659870e0be86cef2789ec9063ae6093693c1d47cfc164eae67c97efa447120a36b39561d380077ceaff4bf0f55b066af441e400cc3996633abf905a32cf025becf31983dc6fceb6e0fb506bd350d81afa6421115939adef8cd68abbbd94f1567d9e9f7505af57e1802b8d704bb7460b3822330c4a4bb6ff2b187fb9a3f324b0f415c706a1de8a7cf6747c72be3b356c0206a3c0c39daa85309bff9faba7b68178108b261086cc15a0e21a52a37c1576a72d2d5da5c43248ad760d239711739cb79fc79b4ca2dbec2e100db1c535ed90623c67ed2e3817ebec259343b17efdd912ea0fbf73653015b7f8a51cae3cab19ba00638b8c8bfa8db481ca7dc7ce5c2540c46c963386188f74dec088552330e6ea067b222bd97ecab5073d95d5814599f522a36fc80636bb66ee8dca399586f90f1c849e30d92382bb0e64f62511a7f1044560175d68dffc03a9e56ac7629a4bcf50a4334f29b3391ef4bf0f3174a44d69e143437cb3dcb3871c4e7de50084b5e5033c48df364a1d5cf925d42a3c8e2b419909e4a2ca2156c1397eb87704e8f8d6cdb3a4a031c1b5468a1e75a923cbdbd384cd8d87c2c05f11f1df014ef98c13fcf9f182f6fb68dc0aa4adf7bec8a17caedd172f64806c311fc106b39edd9628a01d7159d638e09b39feab432718059589dc971143da4a8e640aa63ae0c2fb4a71129d362cdcf993adbc97b4f1543637cf1acbc9e67067f6c6f95be39fdd14dc6478c507507ceff88c2d1c5e13522547ab149dad2526393714c6c0a221c167ddf1084b563c0bfcc4c75a972131c62ddec7a497bd5118eaa12ab25bbbf7cc62eca5de5ea50bab67ce6ff2e05cc47cc0b0a5465eb01bbc08dac30b8522bd92180d8987390314e19eb3201f0be2b4f71abb697a751fd8d6a3251ca8ea1b2f20a7827d2599d62e392d6c065183a1778950d5ebe04180047ee8a2a096e5f1d6813ec63ff4a626c725b24d259cbd9ca6305009b29c6ef7225eecf9078824f9aef4d3e9aee1e9616b2b7f87499f8abab6c38e9a3e7714132850b5e71fa671697e6c8407ac3dad5abeee5f7b2a63aa51d29744736b0c38adccf8e29a85b81f3b3106daed64fc78618e18c9056cc41ce2f50379cc6c2c1411ba2c690e1899dee193f0f2877412f1cbd54d12255ca81a72211f9a8ab7f0b7bebb6c11b4bd6c77455decdfd7df2b2014395ba69f22e520138a43e1b3a11264822b143adcad307b35800563bab720687a898a76cde1f0a15aa3f32c0d302ce6f1094bacf5a1add935884be029c7fe18a5e90c696e3371af0f3cd721abd7dd4ce74efe353105ebcc4b1411d52026901380a9c7a807a76fa617667adea8b7734822da93d93969641a92ad2af6350ceee54e3d7c7c39e22d6c5f363d201572b8d68c2b9c7230b0b85801cfafbc5557f21bc444ea05fc612e2c2a8d4a38578c69bb252d8f4d617d0974f95b6ebb416d5c8f3fa925d4ed4f23bfce03e28389ca8c1bece1fa49e8d66387bbb09b3c29d9ed75ea5a9ac7930cb3ed05f999867c640b3435962fdb763002e2fb451c5a1b9d4536e49ba50fcf61451168a994249ef29af51694a1426d987ed8cfe09f10462c7629c4ff1b1cc709b99e9e87a54d1ecf54cd9da0c2c19b84b2a2c32c0bd12d158b73230cf610645048cf1afbb62aa7ce6fab79bec3ad84108f3d96cb9fb3d78a26724892a6bca533e64880c7d4c28a6685502f4cb2a27b132c8253b97e88583fe0766d04795709486556df99b7e65fbf71febe24e0a188e2dc489b8fddbf9d4b1c9ef4b558f888824469df9b2085a845998220332d9cb693472ff2abcc10784c2280825adfcc630e3a961b39ab786deddc53b18e862edc75742d6eb2d7cc227ba3ed770851718388612e4e7f4f257a90fdf09e3b0081d7498e2d5b628d9132aa0165f323f59af5e9ea54c582999fb527d5f2f3dd7e4f85877080526f8481899b6afc732f5da6af31b561ddc36a6b8c723087d3f168292550d89b228f7a3cc131c110a2dab2f81e339f24d3d2b696892dcd4a3e8f2eaaddc0d78e2d07cb9df9d2fe73e4c55562c0794092c7dabd4364f9fea89d6cdd8369d5bf1bc8863b8f89aacf0fd9b9b380947bb4872656e58bc87526e18fa8b17ef8a7219adf1b79d1be5dd827e7ba8e4ed50a81eb7562b179876a8803dde2ea99fe744e8f7df17040ac38592a3be7eb353416496e867d8a74c7eb94556b16241935d718dd43462fe0855cc31a812e0ac01109d1d3539bd2fd4eeb422009138a92324bd072edee2ba47d6cacc24588410ce30565a8aaa5aad52d9c55368372715717ff5ed3a0243ddafd11a7059c29a26b9ea9374e8434f31e4c15a747ee6d69368d12b96122690f843569e82ad27eb8fb25e94dde94cc15e690dc65f6a6c2a6393821168a79e03cd223ce54a1d5e38eee1c12e23027b12c6a8094c805088617c2fb4f52008366faf37fdb13b3a7a879949d13644da36dd35a4ede785ca0ac7b4f15472e77a33228129143f849ee75c915df31764c96954621a01e0941d6bb58125f544818b7152698f3addcd0a684af8fcdd4bcdf5752b3faa731988866ee8a664850989d280505d2a4b861f159d47d2d61ab3de866fb2c8f90075b713f61cf83a2ed426d53214b70385b7a46e5620c032486a5a00e0e73d3ea16eeccf5731507903a25685466b61311502ce781634ee46542957a0d5bacabb8d965689422588ee102d6a6016bf11589fff32e503feefccefe4107d0619e7a15336a8655e2f09034b4069941126d48909232592aac6d9c231285dc1d038ff1fa09c1588f543304659ca334afbc42b5f5fb813b34663cc6f4b0a12fc3edc28765b062e7a50fd19ef575be96cd1d9aa48c1fef1b2763949982a47bf25a69c8b1306e8e36c91d2096e6a6cf934452233ff49e91ee173c1e288b9ff70ff364689b82e2467a3d741809657ce0856582d24da5663162422a6f1ed1fce7cef40d90ce57cb99e19a0b4365d483361d03d0cceadd682f333bcdb0a49e24d8c7d004aad2dac06f4839cffc0a77730623917e5f101c33411ab4e0a8491de9a8bbd5dedb8dfeb5a5880da57c74bb8e1fd8b02d3c22087be3f686aee26988b2d62a41d4593ff0dc100c31dad221489f612ef60c160bd6c1f5a00ea6efd3a5aa5ca14efbf78ae4e5d8c5db9c03758b81e636005ade8d03a11f5d8231cfc1bdacdb276992ca8ecbad337fa89dacc9e9be11d398d37207e15ddb45566e0af78833545352d3043b70e20695ddddaccccaa93ee5e2874bfc7f9510541a57fb3cb9c8d6e75460cca3c4cca39a642eff1967dda07a66fe67d87696a5fe22a718a52cd9ba83e348ed211c1dc2e21ebd797455f0648af12c10321240058857632112a75adfdca249f26cf8d6ba05ee83d00ff8d64d8fed069dae70b79105ccd95fc9df34426d765578f651a4cba8094f46e0a9b676c0c0ebb1803660a70f5c7ad2de1ff96676c3ecacdc2953fd235856228556db20395b8d54819b7b12f56e4dddf6a7fe4f7f3d69dff022c59efb2313ae801dcb02b117f50f18eb11dd5a291a7068c820fbe381bd0697566909a38fdab0a0c48442dc935ab8447ebecb93af879a6bb82ab5f245274d873b5be4312856fe4fab8edc9575c02ba4cdb34b31323b69cfef40755bf96279460640ed9fb84d5c60d95cfd76a39726c29f5607d80090e5e3da18fd74682975dd98d98e4afdf4460e1aeb7087a18ded69310b28fa45b356fc28d1f2bef4c9dd50909076de9587fa07b966ee143ec589f70b8ac4d1320cac5bafefe640e445922090c721ce79e4e2c546cfb9b7f058932e6c83170dd2785e28ed81757ade61aa094bd042411aafe0b75156067a5790c78a44589728f1190ac0ba2f93004e06602f51fab34cc56a485569be11e0fd8c89ec3363e053dbdb6cbc69b686e89ff3730dce9099daff958f3be6e7f9ac00bddf0f133a6f904262443963aabe84b0ec9ab9209ebb0d6e81b8d30b2959bbfe5b332459310be2d8183a93ea08301b816d5b009a967916dd45b0f541c57685a6c7ef8cf715ae7fd1780f0a0da48467196e25e26fd2d5a075ad5acfa1ebec9647da21672b642ee4a908fbce416f4ed36ab5b96e5b47a0f6c7f280119567b7d54640c65ce5a0f4912690c4a3d0805e4284fb695eb3af2528f031261439506a4d3f4c2e18b736c55475828a0faf0153acf0dd89bf3c2f6525cb4bfcb419421c7696ee93bc595158a9a43bb288022122a8c45a0db060fe5e85bcc128f396f7af7006eba4e0d6e2f0802625342799bc1b98366682db90ff1be99322bc0672e07757c44173b96e659ff645d263af255d6ecd88bd9a0863006db7f674e79b0493d41a12057e36243394294b4c7850d14a988715de4b55e9f83c2f0676a8486efcc948109076361267f092315dae79164da8f832ad6f35f600b92e4a8228d39e507117c1c1b2a4a12b667538000912ea67de21bd85616cb30f95573ba748a75d2e04b493865a8711a688e33221b26f621ab3a137cf86cc9dd340bcee72f19e00de06f1e9abbe08b4cb8725c9e624f02d36c4c276a529b6e23581c348bb90a4fb1f89053aee36caca5529bad9124825860c011140744f245cd02ffe219e436bfef045517e4e41094b25cf9082692cd8e37d3893c5a90c35b808a17a6508fa7ae743740be0d984ef5ea80cee51e14b9997f86b45b97e5acf89a0a6aa962689c4f53bc7b65e5037de60fa395ed1013591caa79412108224c020d77069939391e20ee32b86139fca7eb9ca5c07fa733311fef5d5594b83ae34c6bc32f037b09995511ff9b9b611bc727055a10b808ebb8c8e5ce532046c7ad3336c38d506e0e3043c4413dc8ce0a9caadbef27d6f663b22bf8d399621ee86e52d9abd5628e3270424d8a06a79174c7de23c431224fd8d0f42853510600f9e2deb8a7bfcd324a5c6ec19cd0c9ca81c552b111a2acc4479e20439e2e3caf44c92026b5be1ad6933ed8d4de1575216c134d55171568ee64213fc4d32ca5cd7ad04b8705ecfd1b88d56294dca67efe3b1b37c7d5d170cef18997c4af074e97a98c11ec3cdc83a4ea564ebb47f02344d3ab410e25a4ad658be9bf627d49c106c1098dccf7ff62ff9f4dc997a279afdc5630ba32167a68ed7bb3bae2a8b61fca67b5b7dc5b3ef3ab679b602764da9aabf3d0caa56b278c2ab6fbee2cfdd7277402a1f82de1d97807829c0105277073772929f16d79584118f31b45ec4db29aad83693b2d9de08f417beaa2f78d55a36a824a94d1e3cfeb3d75c3d41ddd0e317e85d327e9b5a9da44dc12b6fc3acf6d222a44f59520fa3fcdc37903eca4b7a91fe14cf54b06855d204ebd71018fe767a158b5e389b5e8e136fc8960840ef1916d8e36f08260e5fc9808442e2034f2c761ae051d03fa618a5f6b8ba8cee00411d09aaa3f8fe30a5d29d9403a905403b5310355326387ea6ea72643b70fcc5bf767371878440d07be919c4ad8c4b8952ea61655bbeac50025f4cc2e859c20dfd440a0b1b14549bccaf7952a27f12266c3b7185d9f37ab405d0765011ae6dbc0717f58ec6bd4101589f5c6054faba863bd2af1e8b19cc2cee98c619e477a47497896c42c37697313917b37140a77a5afec97556f06e0ee1d87c3739bd9ff4c210ddd4eceb65701e64bf4d6cbd5d4b9786f4d45acd881fa6eb1c6fda5f8844f5a1635d05e7bb82270694efe063d44296d86b4bb8b28e573dd7cc0d379b5449af1064f10ab8e8f5f177713a63fd7ea8bb68305356c59b5b48334d568fc6d81713bf2c1438dbec4c2c793d5bcd94c459eaace9295ec5b51328fcea5c8f984d8bf90b2f9fb247ce722a1c001e6ff179524417d647b856d905976f623b2db0facf05d62a87662ddc0d6c31cadca2ec262439fdd0f5cd7788617b98bbb802ceed7f971fe6d432a49dc132fe5475db3bc61d6ff04442a9afa9078be7a15de8668cdf469697e337eb4a99b24cd89da2a36eaf4f725cfc77f5e4de3dc010c2ef1f6b22dc479544c0c4c611fe1c8ef5ed3c23ddae7cd01ae1874217f8d1001f0c5f8d2ace0ec72ef3ed9b95b72753462feaa1ff5c2d23f5ec1ccf41064895d6944f38bf7c41a091df7b8c5c5021ff7ab7571439a3d5c889aa57c715e4a55ecd77b5cb4f8bc3408d95d560f5e8ec711e81ef8a751df5d1d053822debf0295574ebfc5f1fc47caafdf8b3862d68fb01d6239fa13c026320aafdead31d003d8bd8b46842687b6", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006300)="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", 0x2000, &(0x7f0000000b00)={&(0x7f00000009c0)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000e00)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x23072d, 0x0, 0x0, 0x0, 0x2}}, 0x50) unlink(&(0x7f0000000100)='./file0/file0\x00') r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.860151578s ago: executing program 3 (id=1894): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000100c7a9f400000000000000100005002f00f500003d60382f83e1de544a1edf4c574bd662eb40c02c845ddf3afb1ddd37843511009887d2b0d8ade9e7b6", @ANYRES32=r3, @ANYBLOB], 0x24}}, 0x0) (async) r4 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x0, 0x8, 0x9}, 0x48) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 64) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1fffffffffffffcc, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], 0x0, 0xfffffffc, 0x0, 0x0, 0x41100}, 0x90) (async, rerun: 32) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) (rerun: 32) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x31, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0xfffffffffffffccd, 0x0, 0x100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='ext4_begin_ordered_truncate\x00', r7}, 0x10) (async) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000006a00011e9500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 64) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) dup3(r6, 0xffffffffffffffff, 0x0) r8 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='mand\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fsmount(r8, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) 1.799672979s ago: executing program 3 (id=1895): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000640)={'#! ', '', [], 0xa, "3aaaa392a840db247499871a92c415c6a9bc9885cf42bd67dd502243144a40b260e4652360fb67d0810bfdb0efd064ffba09ce9b48350ebee97bbe779d6dea7525874c0c66b78fe127269dd102e602ff468ebacdfc3a8d4e2f42cbea12df"}, 0x62) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020000000900010073797a300000"], 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) 1.750355404s ago: executing program 3 (id=1896): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/2646], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7f7e, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f0000000240)=""/139, &(0x7f0000000000)=0x8b) ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast1, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'syz_tun\x00'}) syz_emit_ethernet(0x2e, &(0x7f0000002540)={@local, @remote, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @broadcast}, {0x0, 0x0, 0x8}}}}}, 0x0) 1.689127071s ago: executing program 3 (id=1897): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006300)="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", 0x2000, &(0x7f0000000b00)={&(0x7f00000009c0)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000e00)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x23072d, 0x0, 0x0, 0x0, 0x2}}, 0x50) unlink(&(0x7f0000000100)='./file0/file0\x00') (fail_nth: 1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.668676662s ago: executing program 1 (id=1898): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000002440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) rmdir(&(0x7f0000000040)='./control\x00') (async) rmdir(&(0x7f0000000040)='./control\x00') r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) (async) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x141a42, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x141a42, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0, 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x0, 0x0) symlinkat(&(0x7f0000000280)='./file2\x00', r2, &(0x7f0000000100)='./file2\x00') lsm_set_self_attr(0x65, &(0x7f0000000240)=ANY=[@ANYRESDEC=r2], 0x20, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2f22}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x78) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2f22}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x78) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000180)=0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RELDISP(r4, 0x5605) socket$inet(0x2, 0x0, 0x2) (async) r5 = socket$inet(0x2, 0x0, 0x2) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e0000002ea0000000000000000"], 0x10) (async) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e0000002ea0000000000000000"], 0x10) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00'}, 0x10) r6 = syz_open_dev$radio(&(0x7f0000019300), 0x2, 0x2) r7 = openat$cgroup_ro(r0, &(0x7f0000019380)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000193c0)={{0x1, 0x1, 0x18, r3}, './file2\x00'}) ioctl$VIDIOC_LOG_STATUS(r6, 0x5646, 0x0) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000180)}, {&(0x7f0000000200)="2e85d88a3798dda0d406865d77e485cd159af87eb38e93ca663691b776e060", 0x1f}], 0x2) pwritev(r4, &(0x7f0000001780)=[{0x0}, {0x0}, {&(0x7f0000001440)}, {0x0}, {0x0}, {0x0}], 0x6, 0x6, 0xfc000004) syz_open_dev$video4linux(&(0x7f0000019340), 0x8, 0x52000) 967.581071ms ago: executing program 2 (id=1903): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mount(&(0x7f0000000240)=@nullb, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='v7\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008000000850000002a00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='io_uring_create\x00', r1}, 0x10) io_uring_setup(0x7072, &(0x7f0000000400)={0x0, 0x0, 0x10}) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x0, &(0x7f00000000c0)=0xc, 0x4) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) write$FUSE_ENTRY(r4, &(0x7f0000002680)={0x90, 0x0, 0x0, {0x1, 0x0, 0x7f, 0x2, 0x2, 0x6, {0x1000000000000004, 0xd, 0x6, 0x4, 0x800002, 0xffffffffffff7ffe, 0xffffffff, 0xbf3, 0x51958c87, 0xc000, 0x6, 0x0, 0x0, 0x101, 0x3}}}, 0x90) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r6, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_trace', 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="02000000fd43f11c2e4ad54fbc92010001040000000000000200000000004be89cf149b40f4c5fddbd0e80f3fdd6b75486", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000700000000000500060000000000"], 0x44}}, 0x0) write$FUSE_NOTIFY_STORE(r8, &(0x7f0000000340)=ANY=[@ANYBLOB='-'], 0x28) connect$vsock_stream(r7, &(0x7f0000000200)={0x28, 0x0, 0x0, @local}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020662500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000005100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 820.445398ms ago: executing program 3 (id=1906): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc044560f, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000180)=0x2) (fail_nth: 1) 740.172435ms ago: executing program 2 (id=1907): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x50, &(0x7f0000000080)=0x7fff, 0x4) socket(0x1e, 0x1, 0x0) (async) r1 = socket(0x1e, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2084) writev(r3, &(0x7f0000002280)=[{&(0x7f0000002080)='T01\n', 0x4}, {&(0x7f0000002180)='K', 0x2f}], 0x1000000000000293) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan1\x00'}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) syz_pidfd_open(r4, 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r5, 0x1, &(0x7f0000000040)=[&(0x7f00000003c0)={0xf0, 0x300, 0x0, 0x5, 0x0, r6, 0x0}]) (async) io_submit(r5, 0x1, &(0x7f0000000040)=[&(0x7f00000003c0)={0xf0, 0x300, 0x0, 0x5, 0x0, r6, 0x0}]) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x19, 0x4, 0x8, 0x101}, 0x48) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000022c0)=ANY=[@ANYBLOB="4400000070000100000000000000000007000000", @ANYBLOB="fa1e1134b3930722dcfc4e42bca68344b492043cacb655fdcd73e7fc579dd11847e6a4edec2f162b8cd5aace092db127ff3013e7f405fe9f5adb48a20001e4a55a6d2601c0804be19a0440d08111c3dbdd28a39b9073d3cdd5ee58752ea92ba294f339f4edbcd963c8aa9b006fde0d8058756a33fc956bc1e2dede65dcdeb007880687853054e31bd00dc4aa561565b20841ae2bf45c46107b8f73188a435b6df9121e98a1a29a2b6f148522bfb672f60aaa2d6598bafe5509d2edd074c1", @ANYBLOB="0c000180080001000300010010000180d40004800800020000000000100001"], 0x44}}, 0x4048084) 629.749506ms ago: executing program 1 (id=1908): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000001c0)='cpuset.cpus\x00', 0x2, 0x0) ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400060000000000000006f965e161105c6a880200000000000000000300000710000580"], 0x24}, 0x1, 0x0, 0x0, 0x20044041}, 0x10) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000001e40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001e00)={&(0x7f0000000f00)={0x87c, 0xd, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc0, 0x3, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x731f}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xff}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x74, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_KEY={0x68, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x9}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x43, 0x1, "5b0a6a0e396811d6d239482b25b51d8ac29234465b83948659572214bf2b69d03b9fe72dd6dfd31b8e0e0c4cc3075837d13b4db6a2f1dbf4cbdc51761fc4a9"}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x770, 0x3, 0x0, 0x1, [{0x118, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_DATA={0x10c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x22, 0x1, "42213ee787a4e6cba06634dbfdbb9e2363c85e2a6f313da35f9bd6b080db"}, @NFTA_DATA_VALUE={0xd3, 0x1, "fe9958bde1f92f199aa39168f866f0303fcd586bcb5510711c6fd80df3da812090d5bc10bbf38ec95c7891988a334e77fdbc6b50ebb6f25b91b217018877558720e1e5aa42c083aa13612227fcb14e56a3a4d4e0ff020ed562c0a528cda179c0dcc0a2698c0d553218967a59a660dcd8e952ee6be80e1204cbf9839e53a66e2c1e30fbe85dd29d892229e3dee36a0d06d1af10e91832c1d1d880614fe04a55f68671348bbbbbbafdeca3e477e9ee49aca0b1a1ee36ea9cffeef709d9451853592c018bc557cf9bfa461223a9cb3336"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}, {0xa4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x90, 0xb, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x400}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_CONSUMED={0xc}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xffff}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x7fffffff}]}}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPR={0x4}]}, {0x1e8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xc0, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x9}]}}}, {0x4c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0xd}, @NFTA_EXTHDR_FLAGS={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x82}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x53}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x40, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x7}]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_SET_ELEM_DATA={0x124, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xdf, 0x1, "565dcffc65454846ec18a07848246e335e0d902500c9240bc73eb065b0d75966b05b743a92bc00a9eac9e7c35e9ff9d13dc147dc2e40f3ec9ee75d38be1ef549dca9b7dbeaa9235950b4dd78bdde12778ae66c743ce9a0413d259e9008a80c4dfff57056d4d937fbe7269cf5ed0714e29e7eb92072d1c2799446e46bf29526630613080e2b5e85e984fc29910216871f1a3df0998cea88bc3e08c89efc7fa1741bf1c080f883da9852e7a3a904b2b6c86d295d7ff91a89c08f4d8e5ac97f9c3d4d073d7d6cdbc69a38b3219d6b441cbef7a546aa56c18cb1e53fff"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}, {0xa4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x17, 0x6, 0x1, 0x0, "59444d3edaaeba4c177f9a7637feaa6ad5e0c6"}, @NFTA_SET_ELEM_USERDATA={0x85, 0x6, 0x1, 0x0, "41deed44692d7d0473b28a5ec3c1a20f5712cdf852171ba29e8f81d518275feb33e2fc2c3811ed5fb66d3de092bef3d11ddc518669d2905112b1b5b9953949d8b12f6a747f612b5b924881b9f616fc690e2c3cc004296177d0881cec1c18b5afe0364aca0874ae9aa98191d3cc56bcb3c064263c92a514332b325b55af358bc7e2"}]}, {0x324, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x58, 0xb, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x90d1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9e}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}, @NFTA_SET_ELEM_KEY_END={0xcc, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8000}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xff}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x101}]}, @NFTA_DATA_VALUE={0x1b, 0x1, "1567db23d8b2bc7e027807e972091c4f14096109136e68"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x6}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x200}, @NFTA_SET_ELEM_KEY={0x198, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x8e, 0x1, "d2e08b793803aa07a5f1e14932ed0b4fcade77f51cb05bcf66e1ac331b7214529722f82d0f5bc074b28ab213e4896cc35469995b621cb8be99c7a35efcfa6afc71a3034430e7535af260af18b8f8cd6791fba73bbdcc20e1242bf9ac7ffc0ba5fbad9aacbf007ff1c5c457641c9dde6c912fda66d0b654e04f20a70e8ebb80e6d60911cd2285b3b68838"}, @NFTA_DATA_VALUE={0xf5, 0x1, "d25eca2b7c2cff1f5d49f467bf689ae59bf60c43c9cdae30d8bb142283f631ed923f2ba93f0ab5a0554b066f4415c4fbe36404a416327717be58df3959f3b0892606ba3d17ef633fa55b406789fa5b7c1b52e4e98d561ac2827785e2386adfd96aa456f17178f53d21b0075162e72caab28ce4facd9fcf41cf65859fad6336055d55276d1115c9f41aa272b1b88324031e953b92a6fb46f11b38497d27144eb8cc092fdbdfd72aeb5e0d7be6ef575749d221a3f7f270b20d97514f1c667c4f3c739e961c8292a7bb1e061fd4bcf4e119eaae42b90a0a26f88b7d6f31d9164048c9b5c7a47c4406e04ca4b9995640fef1ee"}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_KEY_END={0x4c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, 0x87c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001ec0)={0x0, 0x0}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000002680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000026c0)) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000002700)=0x0) getpgid(0x0) r7 = geteuid() sendmsg$netlink(r1, &(0x7f0000007140)={&(0x7f0000001e80)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000007100)=[{&(0x7f0000001f40)=ANY=[@ANYBLOB="200000003d0000040000000000000000080000007f00000008009200", @ANYRES32=r3, @ANYBLOB], 0x20}, {&(0x7f0000000200)={0x4f4, 0x3d, 0x400, 0x70bd25, 0x25dfdbfc, "", [@typed={0xc, 0x107, 0x0, 0x0, @u64=0x3c}, @typed={0x8, 0xc9, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x20}}, @nested={0x255, 0xc4, 0x0, 0x1, [@generic="39387ab6f7543813d97c6d1bce63f609e82b0caa95192db3c65b4e0af6ad408fab560524ea4031d37e314db4bffd7b4cfa3d408f1051838653379fbeb2e9a3bb0a0822314fd2eb74c277eb5615e14975d1b844057d5e9671fb858c1b0d5a8c737e48498807e7b68d1dafd967a431a4f71acb5ac9b270669da6aa1b95beffecd7d2d81432908b86fb3ba16e921ebf0aef", @generic="ded382fc140c47b4bfa91be1dd352a8859721077f66401d294db5258fc0257a98359d46668c5ccef730d58d1b85d89a52c3d2ca1f244bd94a7046604599963cd46e0f5d401eaf9024fd3fb4f78b35cb1549a07278e301efc9b0578ac1c872dac6c1dc0564b36829c2c1e5adbfdef80914891a09a520970364501c5691b22a49ee0fb408b1689a41ace0afa6adf52becb2813c663e6ada1191307fdb856edeb61ee09ebb1f00e57375decb5a730b0b457555269b048d4b5b6c68e8c6e33d201c63fafbf216cfcdf46966d788787aee6eef45e482a7917480d3f0dadf8bfdf1079370f1eb0ca8ab103d574bc9cb17479bf53e29842f419eefc57", @generic="4d75b59f9cf9ee9e4b58dc60f8bbfe9b33debd64de24785653e5e70c68a52aecec97b8abb5172c5d14ef47d6b726b24860c8caf17bb22c53683c7d5ef7aa232fe2f3dfebb22fc31ac4bdccdda52bf9955941626d5a27528f6afc267e1b131bf6e65a1089d0b15922ab39b0ab9727f84b28e5335b9574780a3c4b5238ab2bb5146db0ac0caf5332963a80342660d6bdc8af66d6dcd895f60bb15ce597fc32d46b0d869c33", @generic="874f09326648f66ebd4087150241f8b0679a36fa77a04b96e4980eea15a652bc7953a9e3", @generic]}, @typed={0x8, 0x63, 0x0, 0x0, @pid=r3}, @nested={0x26f, 0x0, 0x0, 0x1, [@typed={0x23, 0x14, 0x0, 0x0, @binary="7fcad99167dcb35916a2655622e8e196f6094714d5a30f1959ed19cef8c9c7"}, @typed={0x8, 0xb0, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0x18, 0x0, 0x0, @fd}, @generic="8fe5bb9880283d3d3ece83c46b3933e0be19710a69e0bd421d4d6732706933de6151e208090df6b9e1a7d5ba07245c3458c47f8d430f5dd5f51d297b4885ee67a72ff308a2270597ec69199df4640ccc6f78c9caf5990d8c46ef567e514c0f944480255086d9dd278fb7e93fffac68b1f9ac52ddda84838a2e1adcdb482360cfb7eec0e918ef9c10b4b52bd1f75bb204be34bb639cf100a44567534f0f0953a76c9d700e56c11c0dcba51e995271aab3f2572e54ea4a1609c04af0400df626587c857bffdb368851f77e99168aaa0b5f2791eb066dc0c3da994f67", @typed={0x14, 0x12f, 0x0, 0x0, @ipv6=@local}, @generic="ce603bb92071590dc16a4f60", @generic="339e898c40eab2334fc5c16e77013dd8866ed05e630f3b8f68c83ac524f2966d9096fe926a83dc04301fcb5e53ff0a0bbc853f165f0975146749509306c06a6877f988a60352b13d7d1a788a98efe9cb768c44f8aea088735a5b4cfe2f7d34d07adc9581b59c82", @generic="c3cac42cc80fab457c7a358e4f47d3ca707f3aefdf8ecb03a2557eba8296929be6f772f2b5db65ebec9ec1188eea4a369e27c00cd1165543cf9fd1abce0d3954048028f79cbccbc21c4b4f9f603e35cf2679e68bd946149ce00b167f7e860b4de12a1749352d9f77ce30b64813dabe6d94fd154e55c6f71ee9c979bf762c19208fec84563712a54986121891dc48bcbb5f37f5b4292e9d49fdc551a80b0bc4449a2b781b84196793fb6f5067546c574f650cd8541f110c6565595eb75d135d2be6", @typed={0x14, 0x131, 0x0, 0x0, @ipv6=@loopback}]}]}, 0x4f4}, {&(0x7f0000002640)={0x18, 0x42, 0x300, 0x70bd26, 0x25dfdbfc, "", [@typed={0x8, 0x83, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x1d}}]}, 0x18}, {&(0x7f0000002740)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="e4010780bdf91a3c474eeef8a1e124924d4e2cdcf5b4286ebcd451e595eeab3ffa023ee332adcd43bf6c430e8fafe884a9542f74c38ebd58c0f6bbdff748d1547c850b32406c81e3a7ddfe9f17ff345198ff32ca5512dd20e084cd31d90d48b3d4cdf1204e735506fa9990e464beab80c372e9864156a97ede14767fb5ec3db985781672c337ea16745059dda464ca036366e452b94c39825d5a4510a59633a1c86fbbf824afc3aa9ebe3633148c1c9f691c786cc61a2813a52f55a9cd2a0eccf7b03b3d30fb3a10e24c5479ac7f8c89a912bafa9359875e08e1cbf0077ace0279ca489d7abf9ac061ba3560081c5a07f56494ccd6934057f20400d20008000500", @ANYRES32=0x0, @ANYBLOB="0400000009004800736e6d7000000000715bfa93d578394bbd020000002b599addf40f5a144168be7a6e9b5e4255c864a0233da88ad319757a7b32340bbacd1d7a4cb92198f5521f1a3b3cf51337ce82cbb9269881b69eb09aa9ced287c0437240395c61233bb240e202ae4c24eacba859495150266082defb7607901a801287fec1755b6b4ca8ae013f5a7fa55c89c0bee851774afa6eb9df5800ced4b24796e0447767b5c0e9bea2711f3dccd2223558745b8d461aad74c14f06daa02050edd7b8d8c021fcc42bb8854cb09b63c850a33abbc453db310cedbd9183db148e1800008008000100", @ANYRES32=r2, @ANYBLOB="0400d70008004600", @ANYRES32=r6, @ANYBLOB="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"], 0xfb0}, {0x0}, {&(0x7f00000070c0)={0x18, 0x33, 0x300, 0x70bd2d, 0x25dfdbfb, "", [@typed={0x8, 0xfa, 0x0, 0x0, @uid=r7}]}, 0x18}], 0x6, 0x0, 0x0, 0x4000000}, 0x80) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000002, 0x10, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x118, 0x0, 0x0, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000007300)={&(0x7f00000071c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000072c0)={&(0x7f0000007200)={0xa4, 0x0, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_PROTOINFO={0x38, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x34, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xd0, 0xc2}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x34, 0x7f}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x7c}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x40}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0xff}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x7}]}}, @CTA_TUPLE_ORIG={0x58, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_ZONE={0x6}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4040080}, 0x10014) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000007340)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BINDER_GET_FROZEN_INFO(r9, 0xc00c620f, &(0x7f0000007380)={0xffffffffffffffff}) openat$fuse(0xffffff9c, &(0x7f00000073c0), 0x2, 0x0) r10 = openat$dlm_plock(0xffffff9c, &(0x7f0000007400), 0x10801, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r10, &(0x7f00000085c0)={&(0x7f0000007440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000008580)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0xd8}}, 0x4000) syz_memcpy_off$IO_URING_METADATA_FLAGS(r8, 0x114, &(0x7f0000008600)=0x1, 0x0, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000008680)={0x6, &(0x7f0000008640)=[{0x1, 0x7, 0x9, 0xe9d}, {0x0, 0xb7, 0x7f, 0x4}, {0x7f, 0x81, 0x9, 0x8}, {0x4, 0x0, 0x20, 0x80000000}, {0x7, 0x2, 0xa3, 0x5}, {0x3, 0x0, 0x40, 0x7ff}]}) r11 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000008800)={0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000008900)={0x2, 0xb, &(0x7f00000086c0)=ANY=[@ANYBLOB="18000000030000000000000008000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000500000085000000060000009500000002000000"], &(0x7f0000008740)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x3b, '\x00', 0x0, 0x1a, r9, 0x8, &(0x7f0000008780)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000087c0)={0x0, 0x1, 0x4, 0x4}, 0x10, 0xffffffffffffffff, r11, 0x8, &(0x7f0000008840)=[r10, r9, r9], &(0x7f0000008880)=[{0x0, 0x5, 0x6, 0xf}, {0x2, 0x3, 0xb}, {0x5, 0x1, 0x8, 0x4}, {0x0, 0x0, 0x8, 0xb}, {0x3, 0x1, 0x10, 0xb}, {0x5, 0x2, 0x8}, {0x2, 0x1, 0x7, 0x2}, {0x5, 0x5, 0x9, 0x3}]}, 0x90) mlockall(0x4) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f00000089c0)={0x41, 0x3}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000008a40)={'wlan1\x00'}) 569.472199ms ago: executing program 3 (id=1909): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000ec0), 0x2002, 0x0) splice(r3, 0x0, r4, &(0x7f0000000140), 0x4, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close_range(r2, r5, 0x0) write$binfmt_elf32(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b300000000002a002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03000000110000000d60390170f74f9ef4"], 0xd8) write$binfmt_elf64(r1, &(0x7f0000001900)=ANY=[], 0x6ce) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bind$alg(r7, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000100)="890c2e2f", 0x4) r8 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r8, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r10 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r10, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x14a, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x4000010) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000040)={'bridge_slave_0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) 568.992376ms ago: executing program 1 (id=1910): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r5) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r1, 0x0, 0x0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r5, 0x0, 0x0}, 0x10) 509.840183ms ago: executing program 1 (id=1911): r0 = userfaultfd(0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter, 0x48) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0x0, @local}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0x34000}], 0x8, 0x0, 0x0, 0x2044}, 0x60) r3 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x6a, 0x2, 0x20000000, 0x3) sendmsg$kcm(r2, &(0x7f0000000400)={&(0x7f00000000c0)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000002740)=[{&(0x7f0000002780)='\f', 0x1}], 0x1}, 0x0) timer_create(0x0, &(0x7f0000002dc0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000c00000/0x400000)=nil, &(0x7f0000ef8000/0x1000)=nil, 0x400000, 0x2}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000062010000060000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x90) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'erspan0\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0x10, 0x80, 0x0, 0x5, {{0x1b, 0x4, 0x3, 0x1, 0x6c, 0x66, 0x0, 0xe, 0x2f, 0x0, @empty, @rand_addr=0x64010101, {[@generic={0xf, 0x7, "befab48883"}, @timestamp_prespec={0x44, 0x1c, 0x7e, 0x3, 0x5, [{@rand_addr=0x64010101, 0x7}, {@multicast1, 0xde}, {@private=0xa010101, 0x80000000}]}, @noop, @ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0xa6, 0x0, 0x0, [0x7f, 0x4, 0x8000]}, @generic={0x44, 0xd, "0e66a15af2dca40e189aad"}, @cipso={0x86, 0x12, 0x0, [{0x6, 0xc, "19aa1868fea5d780034f"}]}]}}}}}) r5 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r6 = open(&(0x7f000001f580)='./file1\x00', 0x145142, 0x0) sendfile(r5, r6, 0x0, 0x1000000201005) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x2, '\x00', r4, r6, 0x3, 0x1, 0x4}, 0x48) 337.228553ms ago: executing program 0 (id=1914): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x20000400) pselect6(0x40, &(0x7f0000000080), &(0x7f00000000c0)={0x7a}, 0x0, 0x0, 0x0) 306.517425ms ago: executing program 2 (id=1915): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e6c1d0000007ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4100002000800a6d0bdd7000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x6, r0, 0x0, &(0x7f0000000000)) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) socket$kcm(0x10, 0x2, 0x10) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0x0, 0x1}, 0x6) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x400448ca, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4}) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYRESHEX], 0x21) socket(0x0, 0x5, 0x3) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000340)={&(0x7f0000000040), 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r7, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r7, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280), 0x3}) ioctl$DRM_IOCTL_MODE_ATOMIC(r7, 0xc03864bc, &(0x7f00000008c0)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000200), &(0x7f0000000380)=[r8], &(0x7f0000000340)}) 293.764522ms ago: executing program 0 (id=1916): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000b80)={@broadcast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0200", 0x28, 0x0, 0x0, @rand_addr=' \x01\x00', @local, {[@hopopts={0x3c}, @dstopts={0x0, 0x3, '\x00', [@hao={0xc9, 0x10, @mcast1}, @jumbo]}]}}}}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x20000400) pselect6(0x40, &(0x7f0000000080), &(0x7f00000000c0)={0x7a}, 0x0, 0x0, 0x0) 241.049726ms ago: executing program 0 (id=1917): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="6c0000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01"], 0x6c}}, 0x0) (fail_nth: 1) 109.684719ms ago: executing program 0 (id=1918): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="6c0000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01"], 0x6c}}, 0x0) 92.508947ms ago: executing program 0 (id=1919): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/2646], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7f7e, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f0000000240)=""/139, &(0x7f0000000000)=0x8b) ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast1, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r2, 0xc0044dff, &(0x7f0000000100)=0x8) socket(0x200000000000011, 0x2, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x9) setresuid(0x0, r5, 0x0) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000700, r5, &(0x7f0000000c80)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000003c0)=[@increfs], 0x0, 0x0, 0x0}) 504.337µs ago: executing program 0 (id=1920): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000005fc0)={'syz_tun\x00', 0x0}) r3 = socket$inet6(0xa, 0x80001, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) recvmmsg(r4, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000404c05d50310000200000109022400010000000009041200010300000009210000000122010009058103"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a40000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r8}, 0x10) syz_usb_control_io$hid(r7, &(0x7f0000000b80)={0x14, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRESOCT=r8], 0x0}, 0x0) r9 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCSKEYCODE_V2(r9, 0x40284504, &(0x7f0000000080)={0x5f, 0x0, 0x4, 0x8f, "8000000000000034b1f12f2bf89d4bcd91582addee00"}) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r2], 0x20}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=1921): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000003340)="a5d3b26367b9576854ff7bdc3f6fea67", 0x10) sendmmsg$alg(r1, &(0x7f0000000900)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)='-', 0x1}], 0x1}], 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000540)={0x20, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x20}}, 0x0) fsetxattr$security_evm(r2, &(0x7f0000000400), &(0x7f0000000440)=@v1={0x2, "224f46b673a7e195d7d8444c"}, 0xd, 0x1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r4, 0x4, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0xb}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x8}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x44090}, 0x804) recvmmsg(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000700), 0x1}}, {{&(0x7f0000000080)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000280), 0x1, &(0x7f00000002c0)=""/162, 0xa2}}], 0x3fffffffffffe9b, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000005c0)=0x0) syz_open_procfs$namespace(r5, &(0x7f00000006c0)='ns/uts\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x24, r7, 0x3, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PAGE={0x5}]}, 0x24}}, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000700)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) kernel console output (not intermixed with test programs): x10 [ 274.650294][T10391] ? __pfx___lock_acquire+0x10/0x10 [ 274.652231][T10391] ___sys_sendmsg+0x1b0/0x1e0 [ 274.653928][T10391] ? __pfx____sys_sendmsg+0x10/0x10 [ 274.656128][T10391] ? ksys_write+0x21c/0x260 [ 274.658121][T10391] ? __fget_light+0x173/0x210 [ 274.660258][T10391] __sys_sendmsg+0x117/0x1f0 [ 274.662226][T10391] ? __pfx___sys_sendmsg+0x10/0x10 [ 274.664081][T10391] __do_fast_syscall_32+0x73/0x120 [ 274.665841][T10391] do_fast_syscall_32+0x32/0x80 [ 274.668004][T10391] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 274.670393][T10391] RIP: 0023:0xf7fe7579 [ 274.672044][T10391] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 274.678847][T10391] RSP: 002b:00000000f578656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 274.681923][T10391] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000040 [ 274.684908][T10391] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 274.688314][T10391] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 274.691148][T10391] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 274.693871][T10391] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 274.696764][T10391] [ 274.775555][T10394] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 274.963447][T10374] rtc_cmos 00:05: Alarms can be up to one day in the future [ 275.151893][ T5409] rtc_cmos 00:05: Alarms can be up to one day in the future [ 275.155840][ T5409] rtc_cmos 00:05: Alarms can be up to one day in the future [ 275.159929][ T5409] rtc_cmos 00:05: Alarms can be up to one day in the future [ 275.164294][ T5409] rtc_cmos 00:05: Alarms can be up to one day in the future [ 275.167261][ T5409] rtc rtc0: __rtc_set_alarm: err=-22 [ 275.230198][T10404] syz.1.1458: attempt to access beyond end of device [ 275.230198][T10404] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 275.237098][T10404] SQUASHFS error: Failed to read block 0x0: -5 [ 275.239900][T10404] unable to read squashfs_super_block [ 275.421165][T10406] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1459'. [ 275.567210][ T5354] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 275.573932][ T5354] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 275.577980][ T5354] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 275.582918][ T5354] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 275.587102][ T5354] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 275.591032][ T5354] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 275.748400][ T62] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.901514][T10412] chnl_net:caif_netlink_parms(): no params data found [ 275.978003][ T62] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.107874][ T62] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.183228][T10412] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.186782][T10412] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.192521][T10412] bridge_slave_0: entered allmulticast mode [ 276.195643][T10412] bridge_slave_0: entered promiscuous mode [ 276.215823][ T62] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.223252][T10412] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.226153][T10412] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.229046][T10412] bridge_slave_1: entered allmulticast mode [ 276.234413][T10412] bridge_slave_1: entered promiscuous mode [ 276.291803][T10412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.298485][T10412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.351564][T10412] team0: Port device team_slave_0 added [ 276.356751][T10412] team0: Port device team_slave_1 added [ 276.413019][T10412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.415374][T10412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.427132][T10412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.448910][T10412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.452259][T10412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.461744][T10412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.552173][T10412] hsr_slave_0: entered promiscuous mode [ 276.555179][T10412] hsr_slave_1: entered promiscuous mode [ 276.557894][T10412] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.561233][T10412] Cannot create hsr debugfs directory [ 276.573798][ T62] bridge_slave_1: left allmulticast mode [ 276.576295][ T62] bridge_slave_1: left promiscuous mode [ 276.580032][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.587873][ T62] bridge_slave_0: left allmulticast mode [ 276.589911][ T62] bridge_slave_0: left promiscuous mode [ 276.593051][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.869200][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.889557][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.902898][ T62] bond0 (unregistering): Released all slaves [ 276.994281][T10442] bridge0: port 3(syz_tun) entered blocking state [ 276.996945][T10442] bridge0: port 3(syz_tun) entered disabled state [ 276.999627][T10442] syz_tun: entered allmulticast mode [ 277.008794][T10442] syz_tun: entered promiscuous mode [ 277.012126][T10442] bridge0: port 3(syz_tun) entered blocking state [ 277.014912][T10442] bridge0: port 3(syz_tun) entered forwarding state [ 277.296351][ T62] hsr_slave_0: left promiscuous mode [ 277.299104][ T62] hsr_slave_1: left promiscuous mode [ 277.303227][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.306387][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.309682][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.312531][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.354581][ T62] veth1_macvtap: left promiscuous mode [ 277.357169][ T62] veth0_macvtap: left promiscuous mode [ 277.359467][ T62] veth1_vlan: left promiscuous mode [ 277.367189][ T62] veth0_vlan: left promiscuous mode [ 277.373390][T10459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1472'. [ 277.663916][ T5357] Bluetooth: hci0: command tx timeout [ 278.124057][ T62] team0 (unregistering): Port device team_slave_1 removed [ 278.181624][ T62] team0 (unregistering): Port device team_slave_0 removed [ 278.521700][T10476] overlay: ./file0 is not a directory [ 279.235571][T10412] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 279.242062][T10412] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 279.249100][T10412] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 279.255044][T10412] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 279.357532][T10412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.378720][T10412] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.392311][ T1212] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.395442][ T1212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.407519][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.410512][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.441114][ T30] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 279.644584][ T30] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 279.648660][ T30] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 279.653242][ T30] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 279.656509][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.670927][T10479] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 279.675377][ T30] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 279.715800][T10502] FAULT_INJECTION: forcing a failure. [ 279.715800][T10502] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 279.719984][T10502] CPU: 0 UID: 0 PID: 10502 Comm: syz.3.1478 Not tainted 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 279.723136][T10502] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 279.726344][T10502] Call Trace: [ 279.727345][T10502] [ 279.728250][T10502] dump_stack_lvl+0x16c/0x1f0 [ 279.729673][T10502] should_fail_ex+0x497/0x5b0 [ 279.731083][T10502] _copy_from_user+0x30/0xf0 [ 279.732145][T10412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.732468][T10502] get_timespec64+0x8c/0x240 [ 279.736170][T10502] ? __pfx_get_timespec64+0x10/0x10 [ 279.737746][T10502] ? vfs_write+0x14d/0x1140 [ 279.739143][T10502] futex2_setup_timeout+0xe7/0x2c0 [ 279.740813][T10502] ? __pfx_futex2_setup_timeout+0x10/0x10 [ 279.743269][T10502] ? __mutex_unlock_slowpath+0x164/0x650 [ 279.745583][T10502] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 279.746533][ T5357] Bluetooth: hci0: command tx timeout [ 279.747957][T10502] __do_sys_futex_waitv+0xfa/0x2c0 [ 279.751709][T10502] ? __pfx___do_sys_futex_waitv+0x10/0x10 [ 279.753875][T10502] __do_fast_syscall_32+0x73/0x120 [ 279.755872][T10502] do_fast_syscall_32+0x32/0x80 [ 279.757704][T10502] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 279.760181][T10502] RIP: 0023:0xf73be579 [ 279.761752][T10502] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 279.766294][T10412] veth0_vlan: entered promiscuous mode [ 279.769002][T10502] RSP: 002b:00000000f56c656c EFLAGS: 00000296 ORIG_RAX: 00000000000001c1 [ 279.774125][T10502] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 0000000000000001 [ 279.775161][T10412] veth1_vlan: entered promiscuous mode [ 279.777177][T10502] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000000 [ 279.782465][T10502] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 279.785486][T10502] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 279.788498][T10502] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 279.791491][T10502] [ 279.803373][T10412] veth0_macvtap: entered promiscuous mode [ 279.809149][T10412] veth1_macvtap: entered promiscuous mode [ 279.826805][T10412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.831892][T10412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.835683][T10412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.839812][T10412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.847661][T10412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.851875][T10412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.858234][T10412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.869936][T10412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.875002][T10412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.879220][T10412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.883816][T10412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.887953][T10412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.892216][T10412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.898484][T10412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.906613][T10412] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.910005][T10412] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.913737][T10412] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.917137][T10412] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.993081][ T1187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.995637][ T1187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.022707][ T1187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.025348][ T1187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.194307][ T30] usb 6-1: USB disconnect, device number 3 [ 280.293310][ T5357] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 280.297466][ T5357] Bluetooth: hci3: Injecting HCI hardware error event [ 280.302237][ T5357] Bluetooth: hci3: hardware error 0x00 [ 280.353271][T10523] input input5: cannot allocate more than FF_MAX_EFFECTS effects [ 280.362207][T10524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1483'. [ 280.892537][T10548] FAULT_INJECTION: forcing a failure. [ 280.892537][T10548] name failslab, interval 1, probability 0, space 0, times 0 [ 280.897778][T10548] CPU: 3 UID: 0 PID: 10548 Comm: syz.1.1493 Not tainted 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 280.901890][T10548] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 280.906420][T10548] Call Trace: [ 280.907844][T10548] [ 280.908851][T10548] dump_stack_lvl+0x16c/0x1f0 [ 280.910729][T10548] should_fail_ex+0x497/0x5b0 [ 280.912773][T10548] ? fs_reclaim_acquire+0xae/0x160 [ 280.914990][T10548] should_failslab+0xc2/0x120 [ 280.917074][T10548] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 280.919371][T10548] ? getname_flags.part.0+0x4c/0x550 [ 280.921674][T10548] getname_flags.part.0+0x4c/0x550 [ 280.923884][T10548] getname+0x8d/0xe0 [ 280.925304][T10548] do_sys_openat2+0x104/0x1e0 [ 280.927216][T10548] ? __pfx_do_sys_openat2+0x10/0x10 [ 280.929183][T10548] __ia32_compat_sys_open+0x147/0x1e0 [ 280.930960][T10548] ? __pfx___ia32_compat_sys_open+0x10/0x10 [ 280.932931][T10548] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 280.935105][T10548] __do_fast_syscall_32+0x73/0x120 [ 280.936805][T10548] do_fast_syscall_32+0x32/0x80 [ 280.938456][T10548] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 280.940617][T10548] RIP: 0023:0xf747e579 [ 280.941986][T10548] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 280.948418][T10548] RSP: 002b:00000000f578656c EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 280.951424][T10548] RAX: ffffffffffffffda RBX: 0000000020000000 RCX: 0000000000026082 [ 280.954539][T10548] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 280.957778][T10548] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 280.960853][T10548] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 280.963660][T10548] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 280.966199][T10548] [ 281.671008][ T57] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 281.680777][ T5404] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 281.810767][ T5354] Bluetooth: hci0: command tx timeout [ 281.869241][ T5404] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 281.874123][ T5404] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 281.876231][ T57] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 281.879896][ T5404] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 281.884162][ T57] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 281.886272][ T5404] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.889708][ T57] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 281.889729][ T57] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.898130][T10569] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 281.909168][T10573] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 281.911567][ T57] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 281.941344][ T5404] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 282.179729][ T5404] usb 8-1: USB disconnect, device number 5 [ 282.347057][ T57] usb 7-1: USB disconnect, device number 3 [ 282.381601][ T5357] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 282.659216][T10583] FAULT_INJECTION: forcing a failure. [ 282.659216][T10583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.665991][T10583] CPU: 1 UID: 0 PID: 10583 Comm: syz.1.1504 Not tainted 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 282.670446][T10583] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 282.674980][T10583] Call Trace: [ 282.676459][T10583] [ 282.677797][T10583] dump_stack_lvl+0x16c/0x1f0 [ 282.679954][T10583] should_fail_ex+0x497/0x5b0 [ 282.682049][T10583] _copy_from_user+0x30/0xf0 [ 282.684081][T10583] ptrace_peek_siginfo+0xa9/0x5c0 [ 282.686297][T10583] ? __lock_acquire+0xbdd/0x3cb0 [ 282.688502][T10583] ? __pfx_ptrace_peek_siginfo+0x10/0x10 [ 282.690953][T10583] ? __might_fault+0x13b/0x190 [ 282.693091][T10583] ? hlock_class+0x4e/0x130 [ 282.695109][T10583] ? __lock_acquire+0x1620/0x3cb0 [ 282.697380][T10583] ptrace_request+0x6fa/0x11f0 [ 282.699566][T10583] ? __pfx_ptrace_request+0x10/0x10 [ 282.701902][T10583] ? __pfx___lock_acquire+0x10/0x10 [ 282.704263][T10583] ? __pfx___lock_acquire+0x10/0x10 [ 282.706620][T10583] ? __pfx_lock_release+0x10/0x10 [ 282.708754][T10583] ? lock_acquire+0x1b1/0x560 [ 282.710686][T10583] ? do_raw_spin_lock+0x12d/0x2c0 [ 282.712886][T10583] ? find_held_lock+0x2d/0x110 [ 282.714926][T10583] compat_ptrace_request+0x1e9/0x590 [ 282.717085][T10583] ? __pfx_compat_ptrace_request+0x10/0x10 [ 282.719359][T10583] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 282.721683][T10583] ? wait_task_inactive+0x3c2/0x6a0 [ 282.723768][T10583] compat_arch_ptrace+0x49f/0x910 [ 282.725869][T10583] ? __pfx_compat_arch_ptrace+0x10/0x10 [ 282.728217][T10583] __do_compat_sys_ptrace+0x1c8/0x220 [ 282.730526][T10583] __do_fast_syscall_32+0x73/0x120 [ 282.732792][T10583] do_fast_syscall_32+0x32/0x80 [ 282.734976][T10583] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 282.737622][T10583] RIP: 0023:0xf747e579 [ 282.739435][T10583] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 282.747810][T10583] RSP: 002b:00000000f578656c EFLAGS: 00000296 ORIG_RAX: 000000000000001a [ 282.751435][T10583] RAX: ffffffffffffffda RBX: 0000000000004209 RCX: 00000000000004c6 [ 282.754703][T10583] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 282.758069][T10583] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 282.761543][T10583] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 282.765024][T10583] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 282.768364][T10583] [ 282.935332][T10593] FAULT_INJECTION: forcing a failure. [ 282.935332][T10593] name failslab, interval 1, probability 0, space 0, times 0 [ 282.941188][T10593] CPU: 2 UID: 0 PID: 10593 Comm: syz.3.1509 Not tainted 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 282.945756][T10593] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 282.950455][T10593] Call Trace: [ 282.952062][T10593] [ 282.953474][T10593] dump_stack_lvl+0x16c/0x1f0 [ 282.955782][T10593] should_fail_ex+0x497/0x5b0 [ 282.957969][T10593] ? fs_reclaim_acquire+0xae/0x160 [ 282.960396][T10593] should_failslab+0xc2/0x120 [ 282.962671][T10593] __kmalloc_noprof+0xcb/0x410 [ 282.964743][T10593] ? __pfx_lock_acquire+0x10/0x10 [ 282.967155][T10593] tomoyo_realpath_from_path+0xbf/0x710 [ 282.969304][T10593] ? tomoyo_profile+0x47/0x60 [ 282.971053][T10593] tomoyo_path_number_perm+0x245/0x5b0 [ 282.973426][T10593] ? tomoyo_path_number_perm+0x232/0x5b0 [ 282.975877][T10593] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 282.978554][T10593] ? __pfx_lock_release+0x10/0x10 [ 282.980809][T10593] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 282.983641][T10593] ? __fget_files+0x256/0x400 [ 282.985881][T10593] security_file_ioctl_compat+0x75/0xc0 [ 282.988444][T10593] __do_compat_sys_ioctl+0x5d/0x330 [ 282.990845][T10593] __do_fast_syscall_32+0x73/0x120 [ 282.993304][T10593] do_fast_syscall_32+0x32/0x80 [ 282.995595][T10593] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 282.998567][T10593] RIP: 0023:0xf73be579 [ 283.000479][T10593] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 283.008676][T10593] RSP: 002b:00000000f56c656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 283.012731][T10593] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000000007b2 [ 283.016512][T10593] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 283.020184][T10593] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 283.023919][T10593] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 283.027597][T10593] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 283.030859][T10593] [ 283.033528][T10593] ERROR: Out of memory at tomoyo_realpath_from_path. [ 283.141497][ T30] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 283.159086][T10599] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1510'. [ 283.321178][ T30] usb 6-1: Using ep0 maxpacket: 16 [ 283.325704][ T30] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.329874][ T30] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.334235][ T30] usb 6-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 283.337918][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.344479][ T30] usb 6-1: config 0 descriptor?? [ 283.565375][T10590] trusted_key: encrypted_key: insufficient parameters specified [ 283.681965][ T30] usbhid 6-1:0.0: can't add hid device: -71 [ 283.685404][ T30] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 283.693620][ T30] usb 6-1: USB disconnect, device number 4 [ 283.806648][T10608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1512'. [ 283.890673][ T5357] Bluetooth: hci0: command tx timeout [ 284.332856][ T5357] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 284.337470][ T5357] CPU: 0 UID: 0 PID: 5357 Comm: kworker/u33:6 Not tainted 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 284.342069][ T5357] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 284.346899][ T5357] Workqueue: hci0 hci_rx_work [ 284.348959][ T5357] Call Trace: [ 284.351089][ T5357] [ 284.351129][T10620] rose0: tun_chr_ioctl cmd 1074812117 [ 284.352410][ T5357] dump_stack_lvl+0x16c/0x1f0 [ 284.356879][ T5357] sysfs_warn_dup+0x7f/0xa0 [ 284.358939][ T5357] sysfs_create_dir_ns+0x24d/0x2b0 [ 284.362859][ T5357] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 284.364759][ T5357] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 284.366795][ T5357] ? do_raw_spin_unlock+0x172/0x230 [ 284.368949][ T5357] kobject_add_internal+0x2c8/0x990 [ 284.370380][T10623] FAULT_INJECTION: forcing a failure. [ 284.370380][T10623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 284.371055][ T5357] kobject_add+0x16f/0x240 [ 284.371080][ T5357] ? __pfx_kobject_add+0x10/0x10 [ 284.371105][ T5357] ? do_raw_spin_unlock+0x172/0x230 [ 284.371136][ T5357] ? kobject_put+0xab/0x5a0 [ 284.384972][ T5357] device_add+0x289/0x1a70 [ 284.386883][ T5357] ? __pfx_dev_set_name+0x10/0x10 [ 284.389011][ T5357] ? __pfx_device_add+0x10/0x10 [ 284.391042][ T5357] ? mgmt_send_event_skb+0x2f2/0x460 [ 284.393229][ T5357] hci_conn_add_sysfs+0x17e/0x230 [ 284.395271][ T5357] le_conn_complete_evt+0xfc7/0x1cf0 [ 284.397430][ T5357] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 284.399964][ T5357] ? trace_contention_end+0xea/0x140 [ 284.402067][ T5357] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 284.404298][ T5357] ? skb_pull_data+0x166/0x210 [ 284.405954][ T5357] hci_le_meta_evt+0x2e2/0x5d0 [ 284.407708][ T5357] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 284.410344][ T5357] hci_event_packet+0x666/0x1190 [ 284.412050][ T5357] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 284.413873][ T5357] ? __pfx_hci_event_packet+0x10/0x10 [ 284.415985][ T5357] ? mark_held_locks+0x9f/0xe0 [ 284.417821][ T5357] ? kcov_remote_start+0x3cf/0x6e0 [ 284.419573][ T5357] ? lockdep_hardirqs_on+0x7c/0x110 [ 284.421347][ T5357] hci_rx_work+0x2c6/0x1610 [ 284.422903][ T5357] process_one_work+0x958/0x1ad0 [ 284.424609][ T5357] ? __pfx_lock_acquire+0x10/0x10 [ 284.426335][ T5357] ? __pfx_process_one_work+0x10/0x10 [ 284.428111][ T5357] ? assign_work+0x1a0/0x250 [ 284.429642][ T5357] worker_thread+0x6c8/0xf20 [ 284.431217][ T5357] ? __pfx_worker_thread+0x10/0x10 [ 284.433345][ T5357] kthread+0x2c1/0x3a0 [ 284.434971][ T5357] ? _raw_spin_unlock_irq+0x23/0x50 [ 284.437061][ T5357] ? __pfx_kthread+0x10/0x10 [ 284.439012][ T5357] ret_from_fork+0x45/0x80 [ 284.440898][ T5357] ? __pfx_kthread+0x10/0x10 [ 284.442852][ T5357] ret_from_fork_asm+0x1a/0x30 [ 284.444935][ T5357] [ 284.446636][ C0] vkms_vblank_simulate: vblank timer overrun [ 284.446885][T10623] CPU: 2 UID: 0 PID: 10623 Comm: syz.1.1518 Not tainted 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 284.452575][ T5357] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 284.453930][T10623] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 284.460068][ T5357] Bluetooth: hci0: failed to register connection device [ 284.463235][T10623] Call Trace: [ 284.463243][T10623] [ 284.463248][T10623] dump_stack_lvl+0x16c/0x1f0 [ 284.463267][T10623] should_fail_ex+0x497/0x5b0 [ 284.463282][T10623] _copy_to_user+0x30/0xc0 [ 284.463295][T10623] simple_read_from_buffer+0xd0/0x160 [ 284.463308][T10623] proc_fail_nth_read+0x19e/0x280 [ 284.463324][T10623] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 284.479907][T10623] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 284.481834][T10623] vfs_read+0x1d4/0xbd0 [ 284.483260][T10623] ? __fdget_pos+0xeb/0x180 [ 284.484878][T10623] ? __pfx_vfs_read+0x10/0x10 [ 284.486483][T10623] ? __pfx___mutex_lock+0x10/0x10 [ 284.488532][T10623] ? __fget_files+0x256/0x400 [ 284.490220][T10623] ksys_read+0x12f/0x260 [ 284.491647][T10623] ? __pfx_ksys_read+0x10/0x10 [ 284.493314][T10623] __do_fast_syscall_32+0x73/0x120 [ 284.495060][T10623] do_fast_syscall_32+0x32/0x80 [ 284.496724][T10623] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 284.499280][T10623] RIP: 0023:0xf747e579 [ 284.501016][T10623] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 284.508864][T10623] RSP: 002b:00000000f57865a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 284.512334][T10623] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5786620 [ 284.515619][T10623] RDX: 000000000000000f RSI: 00000000f7470ff4 RDI: 0000000000000000 [ 284.518948][T10623] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 284.521692][T10623] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 284.524422][T10623] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 284.527726][T10623] [ 284.675448][T10626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1513'. [ 285.035402][T10643] FAULT_INJECTION: forcing a failure. [ 285.035402][T10643] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.045076][T10643] CPU: 1 UID: 0 PID: 10643 Comm: syz.1.1523 Not tainted 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 285.049509][T10643] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 285.053780][T10643] Call Trace: [ 285.054575][T10644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1520'. [ 285.055079][T10643] [ 285.059423][T10643] dump_stack_lvl+0x16c/0x1f0 [ 285.061376][T10643] should_fail_ex+0x497/0x5b0 [ 285.063380][T10643] _copy_from_user+0x30/0xf0 [ 285.065339][T10643] do_seccomp+0xd33/0x2650 [ 285.067205][T10643] ? __pfx_do_seccomp+0x10/0x10 [ 285.069020][T10643] ? fput+0x32/0x390 [ 285.070646][T10643] ? ksys_write+0x1ab/0x260 [ 285.072198][T10643] ? __pfx_ksys_write+0x10/0x10 [ 285.074237][T10643] __do_fast_syscall_32+0x73/0x120 [ 285.076532][T10643] do_fast_syscall_32+0x32/0x80 [ 285.078579][T10643] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 285.081205][T10643] RIP: 0023:0xf747e579 [ 285.082906][T10643] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 285.090302][T10643] RSP: 002b:00000000f578656c EFLAGS: 00000296 ORIG_RAX: 0000000000000162 [ 285.093760][T10643] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 000000000000000c [ 285.097037][T10643] RDX: 0000000020000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 285.100445][T10643] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 285.103476][T10643] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 285.106646][T10643] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 285.109480][T10645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1521'. [ 285.110114][T10643] [ 285.269571][T10647] syz.0.1522 (10647): drop_caches: 2 [ 285.276226][T10647] syz.0.1522 (10647): drop_caches: 2 [ 285.783372][ T39] audit: type=1326 audit(1723826158.220:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10654 comm="syz.3.1525" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73be579 code=0x0 [ 285.823307][T10670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1529'. [ 285.828612][T10671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1529'. [ 285.874871][T10674] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1531'. [ 285.930137][ T39] audit: type=1326 audit(1723826158.360:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10678 comm="syz.0.1532" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 285.940057][T10676] autofs: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x000000000000000000000000000000000006' [ 285.944526][ T39] audit: type=1326 audit(1723826158.370:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10678 comm="syz.0.1532" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 285.954250][ T39] audit: type=1326 audit(1723826158.380:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10678 comm="syz.0.1532" exe="/syz-executor" sig=0 arch=40000003 syscall=144 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 285.965101][ T39] audit: type=1326 audit(1723826158.380:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10678 comm="syz.0.1532" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 285.974420][ T39] audit: type=1326 audit(1723826158.380:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10678 comm="syz.0.1532" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 285.986103][ T39] audit: type=1326 audit(1723826158.380:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10678 comm="syz.0.1532" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 286.000697][ T39] audit: type=1326 audit(1723826158.380:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10678 comm="syz.0.1532" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 286.012030][ T39] audit: type=1326 audit(1723826158.380:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10678 comm="syz.0.1532" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 286.025251][ T39] audit: type=1326 audit(1723826158.380:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10678 comm="syz.0.1532" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 286.139465][T10689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1534'. [ 286.152030][T10689] batman_adv: batadv0: Adding interface: wlan1 [ 286.155881][T10689] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.168170][T10689] batman_adv: batadv0: Interface activated: wlan1 [ 286.177828][T10689] mmap: syz.3.1534 (10689) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 286.347632][T10700] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1539'. [ 286.442980][T10707] 9pnet_fd: Insufficient options for proto=fd [ 286.906007][T10740] FAULT_INJECTION: forcing a failure. [ 286.906007][T10740] name failslab, interval 1, probability 0, space 0, times 0 [ 286.910736][T10740] CPU: 2 UID: 0 PID: 10740 Comm: syz.3.1552 Not tainted 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 286.914552][T10740] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 286.918097][T10740] Call Trace: [ 286.919416][T10740] [ 286.920579][T10740] dump_stack_lvl+0x16c/0x1f0 [ 286.922412][T10740] should_fail_ex+0x497/0x5b0 [ 286.924126][T10740] ? fs_reclaim_acquire+0xae/0x160 [ 286.926127][T10740] should_failslab+0xc2/0x120 [ 286.927816][T10740] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 286.929796][T10740] ? getname_flags.part.0+0x4c/0x550 [ 286.931674][T10740] getname_flags.part.0+0x4c/0x550 [ 286.933524][T10740] __ia32_sys_unlink+0xaf/0x110 [ 286.935296][T10740] __do_fast_syscall_32+0x73/0x120 [ 286.936880][T10740] do_fast_syscall_32+0x32/0x80 [ 286.938536][T10740] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 286.940367][T10740] RIP: 0023:0xf73be579 [ 286.941560][T10740] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 286.946956][T10740] RSP: 002b:00000000f56a556c EFLAGS: 00000296 ORIG_RAX: 000000000000000a [ 286.949326][T10740] RAX: ffffffffffffffda RBX: 0000000020000100 RCX: 0000000000000000 [ 286.951593][T10740] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 286.953848][T10740] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 286.956128][T10740] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 286.958821][T10740] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 286.959348][T10741] autofs: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x000000000000000000000000000000000006' [ 286.961184][T10740] [ 287.565816][T10762] netdevsim netdevsim2 ÿÿÿÿ: renamed from netdevsim0 (while UP) [ 287.745554][T10767] FAULT_INJECTION: forcing a failure. [ 287.745554][T10767] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.753212][T10767] CPU: 2 UID: 0 PID: 10767 Comm: syz.3.1560 Not tainted 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 287.757762][T10767] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 287.762299][T10767] Call Trace: [ 287.763743][T10767] [ 287.764997][T10767] dump_stack_lvl+0x16c/0x1f0 [ 287.767027][T10767] should_fail_ex+0x497/0x5b0 [ 287.769086][T10767] _copy_from_user+0x30/0xf0 [ 287.771098][T10767] get_compat_msghdr+0xa8/0x170 [ 287.772827][T10767] ? __pfx_get_compat_msghdr+0x10/0x10 [ 287.774656][T10767] ? __pfx___lock_acquire+0x10/0x10 [ 287.776868][T10767] ___sys_sendmsg+0x1b0/0x1e0 [ 287.778927][T10767] ? __pfx____sys_sendmsg+0x10/0x10 [ 287.781173][T10767] ? ksys_write+0x21c/0x260 [ 287.783235][T10767] ? __fget_light+0x173/0x210 [ 287.784949][T10767] __sys_sendmsg+0x117/0x1f0 [ 287.787509][T10767] ? __pfx___sys_sendmsg+0x10/0x10 [ 287.789634][T10767] __do_fast_syscall_32+0x73/0x120 [ 287.791444][T10767] do_fast_syscall_32+0x32/0x80 [ 287.793555][T10767] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 287.796230][T10767] RIP: 0023:0xf73be579 [ 287.797969][T10767] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 287.806087][T10767] RSP: 002b:00000000f56c656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 287.808917][T10767] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000000 [ 287.811254][T10767] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 287.814222][T10767] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 287.816875][T10767] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 287.819574][T10767] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 287.822515][T10767] [ 287.873253][T10770] ptrace attach of "/syz-executor exec"[5352] was attempted by "/syz-executor exec"[10770] [ 288.194564][T10781] __nla_validate_parse: 2 callbacks suppressed [ 288.194578][T10781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1564'. [ 289.454154][T10803] FAULT_INJECTION: forcing a failure. [ 289.454154][T10803] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.460803][T10803] CPU: 1 UID: 0 PID: 10803 Comm: syz.3.1570 Not tainted 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 289.465491][T10803] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 289.469826][T10803] Call Trace: [ 289.470976][T10803] [ 289.472152][T10803] dump_stack_lvl+0x16c/0x1f0 [ 289.474208][T10803] should_fail_ex+0x497/0x5b0 [ 289.476284][T10803] _copy_from_user+0x30/0xf0 [ 289.478276][T10803] get_compat_msghdr+0xa8/0x170 [ 289.480406][T10803] ? __pfx_get_compat_msghdr+0x10/0x10 [ 289.482741][T10803] ? find_held_lock+0x2d/0x110 [ 289.484834][T10803] ___sys_recvmsg+0x193/0x1a0 [ 289.486865][T10803] ? __pfx____sys_recvmsg+0x10/0x10 [ 289.489166][T10803] ? __fget_light+0x173/0x210 [ 289.491338][T10803] __sys_recvmsg+0x114/0x1e0 [ 289.493345][T10803] ? __pfx___sys_recvmsg+0x10/0x10 [ 289.495584][T10803] __do_fast_syscall_32+0x73/0x120 [ 289.497843][T10803] do_fast_syscall_32+0x32/0x80 [ 289.500001][T10803] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 289.502664][T10803] RIP: 0023:0xf73be579 [ 289.504423][T10803] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 289.512681][T10803] RSP: 002b:00000000f56a556c EFLAGS: 00000296 ORIG_RAX: 0000000000000174 [ 289.516295][T10803] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000400 [ 289.522168][T10803] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 289.525518][T10803] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 289.528959][T10803] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 289.532347][T10803] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 289.536027][T10803] [ 289.536974][T10805] FAULT_INJECTION: forcing a failure. [ 289.536974][T10805] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.543800][T10805] CPU: 2 UID: 0 PID: 10805 Comm: syz.0.1572 Not tainted 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 289.548442][T10805] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 289.553104][T10805] Call Trace: [ 289.554666][T10805] [ 289.556009][T10805] dump_stack_lvl+0x16c/0x1f0 [ 289.558145][T10805] should_fail_ex+0x497/0x5b0 [ 289.560304][T10805] _copy_from_user+0x30/0xf0 [ 289.562429][T10805] get_compat_msghdr+0xa8/0x170 [ 289.564691][T10805] ? __pfx_get_compat_msghdr+0x10/0x10 [ 289.567180][T10805] ? __pfx___lock_acquire+0x10/0x10 [ 289.569615][T10805] ___sys_sendmsg+0x1b0/0x1e0 [ 289.571705][T10805] ? __pfx____sys_sendmsg+0x10/0x10 [ 289.573907][T10805] ? ksys_write+0x21c/0x260 [ 289.575841][T10805] ? __fget_light+0x173/0x210 [ 289.577949][T10805] __sys_sendmsg+0x117/0x1f0 [ 289.579930][T10805] ? __pfx___sys_sendmsg+0x10/0x10 [ 289.581901][T10805] __do_fast_syscall_32+0x73/0x120 [ 289.583874][T10805] do_fast_syscall_32+0x32/0x80 [ 289.585936][T10805] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 289.588681][T10805] RIP: 0023:0xf742e579 [ 289.590270][T10805] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 289.598399][T10805] RSP: 002b:00000000f573656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 289.601952][T10805] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000280 [ 289.605349][T10805] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 289.608763][T10805] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 289.612145][T10805] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 289.615523][T10805] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 289.618827][T10805] [ 289.620173][ C2] vkms_vblank_simulate: vblank timer overrun [ 289.713443][T10807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1573'. [ 289.779622][T10809] ptrace attach of "/syz-executor exec"[5344] was attempted by "/syz-executor exec"[10809] [ 290.076247][T10820] netlink: 'syz.1.1578': attribute type 4 has an invalid length. [ 290.110700][ T57] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 290.304795][ T57] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.309614][ T57] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.313857][ T57] usb 7-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 290.317668][ T57] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.331281][ T57] usb 7-1: config 0 descriptor?? [ 291.570725][ T5404] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 291.750807][ T5404] usb 8-1: Using ep0 maxpacket: 8 [ 291.758745][ T5404] usb 8-1: unable to get BOS descriptor or descriptor too short [ 291.761353][ T5404] usb 8-1: too many configurations: 131, using maximum allowed: 8 [ 291.765444][ T5404] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 291.768392][ T5404] usb 8-1: can't read configurations, error -61 [ 291.940662][ T5404] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 291.974862][T10856] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1588'. [ 292.120774][ T5404] usb 8-1: Using ep0 maxpacket: 8 [ 292.127180][ T5404] usb 8-1: unable to get BOS descriptor or descriptor too short [ 292.130473][ T5404] usb 8-1: too many configurations: 131, using maximum allowed: 8 [ 292.136222][ T5404] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 292.139420][ T5404] usb 8-1: can't read configurations, error -61 [ 292.145368][ T5404] usb usb8-port1: attempt power cycle [ 292.457182][T10863] random: crng reseeded on system resumption [ 292.550669][ T5404] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 292.591376][ T5404] usb 8-1: Using ep0 maxpacket: 8 [ 292.595463][ T5404] usb 8-1: unable to get BOS descriptor or descriptor too short [ 292.598469][ T5404] usb 8-1: too many configurations: 131, using maximum allowed: 8 [ 292.603979][ T5404] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 292.606845][ T5404] usb 8-1: can't read configurations, error -61 [ 292.750670][ T5404] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 292.781499][ T5404] usb 8-1: Using ep0 maxpacket: 8 [ 292.784941][ T5404] usb 8-1: unable to get BOS descriptor or descriptor too short [ 292.787669][ T5404] usb 8-1: too many configurations: 131, using maximum allowed: 8 [ 292.793351][ T5404] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 292.795976][ T5404] usb 8-1: can't read configurations, error -61 [ 292.798243][ T5404] usb usb8-port1: unable to enumerate USB device [ 292.864450][ T57] usbhid 7-1:0.0: can't add hid device: -71 [ 292.866526][ T57] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 292.871116][ T57] usb 7-1: USB disconnect, device number 4 [ 292.944079][T10867] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1591'. [ 292.947828][T10867] netlink: 'syz.2.1591': attribute type 15 has an invalid length. [ 293.166564][T10871] ptrace attach of "/syz-executor exec"[5352] was attempted by "/syz-executor exec"[10871] [ 293.454035][T10886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1597'. [ 293.864975][T10902] FAULT_INJECTION: forcing a failure. [ 293.864975][T10902] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 293.868973][T10900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1599'. [ 293.870540][T10902] CPU: 2 UID: 0 PID: 10902 Comm: syz.2.1603 Not tainted 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 293.878575][T10902] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 293.882987][T10902] Call Trace: [ 293.884514][T10902] [ 293.885843][T10902] dump_stack_lvl+0x16c/0x1f0 [ 293.887975][T10902] should_fail_ex+0x497/0x5b0 [ 293.890074][T10902] _copy_from_user+0x30/0xf0 [ 293.892113][T10902] do_ip_setsockopt+0x384/0x38c0 [ 293.893796][T10902] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 293.895623][T10902] ? __pfx___might_resched+0x10/0x10 [ 293.897434][T10902] ? __pfx___lock_acquire+0x10/0x10 [ 293.899195][T10902] ? __pfx_lock_release+0x10/0x10 [ 293.900873][T10902] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 293.902773][T10902] ip_setsockopt+0x59/0xf0 [ 293.904436][T10902] udp_setsockopt+0x7d/0xd0 [ 293.906177][T10902] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 293.908228][T10902] do_sock_setsockopt+0x222/0x480 [ 293.909960][T10902] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 293.911855][T10902] ? __fget_light+0x173/0x210 [ 293.913539][T10902] __sys_setsockopt+0x1a4/0x270 [ 293.915376][T10902] ? __pfx___sys_setsockopt+0x10/0x10 [ 293.917593][T10902] ? fput+0x32/0x390 [ 293.919134][T10902] ? ksys_write+0x1ab/0x260 [ 293.920874][T10902] ? __pfx_ksys_write+0x10/0x10 [ 293.922706][T10902] __ia32_sys_setsockopt+0xbc/0x160 [ 293.924508][T10902] ? lockdep_hardirqs_on+0x7c/0x110 [ 293.926331][T10902] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 293.928848][T10902] __do_fast_syscall_32+0x73/0x120 [ 293.930577][T10902] do_fast_syscall_32+0x32/0x80 [ 293.932224][T10902] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 293.934341][T10902] RIP: 0023:0xf7f56579 [ 293.935768][T10902] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 293.942743][T10902] RSP: 002b:00000000f56f656c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 293.945641][T10902] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 293.948767][T10902] RDX: 000000000000000a RSI: 0000000020000000 RDI: 0000000000000004 [ 293.951727][T10902] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 293.954458][T10902] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 293.957424][T10902] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 293.960186][T10902] [ 293.961632][ C2] vkms_vblank_simulate: vblank timer overrun [ 294.506978][T10923] ptrace attach of "/syz-executor exec"[5344] was attempted by "/syz-executor exec"[10923] [ 294.574643][T10925] netlink: 'syz.0.1612': attribute type 4 has an invalid length. [ 294.579118][T10925] netlink: 'syz.0.1612': attribute type 4 has an invalid length. [ 294.601169][T10925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1612'. [ 294.610174][T10925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1612'. [ 294.766207][T10934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1616'. [ 294.881548][T10935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1614'. [ 294.911542][T10936] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 294.929389][T10938] ptrace attach of "/syz-executor exec"[10412] was attempted by "/syz-executor exec"[10938] [ 294.934675][T10936] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1616'. [ 295.088355][T10949] ptrace attach of "/syz-executor exec"[5344] was attempted by "/syz-executor exec"[10949] [ 295.141951][T10951] FAULT_INJECTION: forcing a failure. [ 295.141951][T10951] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.146395][T10951] CPU: 0 UID: 0 PID: 10951 Comm: syz.0.1621 Not tainted 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 295.149954][T10951] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 295.153538][T10951] Call Trace: [ 295.154668][T10951] [ 295.155901][T10951] dump_stack_lvl+0x16c/0x1f0 [ 295.157942][T10951] should_fail_ex+0x497/0x5b0 [ 295.159970][T10951] _copy_from_user+0x30/0xf0 [ 295.161960][T10951] do_ip_getsockopt+0x314/0x2bf0 [ 295.163686][T10951] ? __pfx_do_ip_getsockopt+0x10/0x10 [ 295.165633][T10951] ? hlock_class+0x4e/0x130 [ 295.167655][T10951] ? mark_lock+0xb5/0xc60 [ 295.169148][T10951] ? __pfx_mark_lock+0x10/0x10 [ 295.170752][T10951] ? aa_label_sk_perm+0x165/0x560 [ 295.172455][T10951] ? __lock_acquire+0xbdd/0x3cb0 [ 295.174226][T10951] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 295.176053][T10951] ? __might_fault+0x13b/0x190 [ 295.177663][T10951] ? __pfx___lock_acquire+0x10/0x10 [ 295.179422][T10951] ? hlock_class+0x4e/0x130 [ 295.180951][T10951] ? __pfx___might_resched+0x10/0x10 [ 295.182750][T10951] ip_getsockopt+0x9c/0x1e0 [ 295.184308][T10951] ? __pfx_ip_getsockopt+0x10/0x10 [ 295.186034][T10951] ? __pfx_aa_sk_perm+0x10/0x10 [ 295.187670][T10951] ? find_held_lock+0x2d/0x110 [ 295.189167][T10951] tcp_getsockopt+0x9e/0x100 [ 295.190958][T10951] ? bpf_lsm_socket_getsockopt+0x9/0x10 [ 295.193372][T10951] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 295.195718][T10951] do_sock_getsockopt+0x2e5/0x7c0 [ 295.197398][T10951] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 295.199234][T10951] ? __fget_files+0x256/0x400 [ 295.200823][T10951] ? __fget_light+0x173/0x210 [ 295.202399][T10951] __sys_getsockopt+0x1a1/0x270 [ 295.204067][T10951] ? __pfx___sys_getsockopt+0x10/0x10 [ 295.205875][T10951] ? fput+0x32/0x390 [ 295.207127][T10951] ? ksys_write+0x1ab/0x260 [ 295.208646][T10951] ? __pfx_ksys_write+0x10/0x10 [ 295.210213][T10951] __ia32_sys_getsockopt+0xbc/0x160 [ 295.211860][T10951] ? lockdep_hardirqs_on+0x7c/0x110 [ 295.213846][T10951] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 295.216155][T10951] __do_fast_syscall_32+0x73/0x120 [ 295.217860][T10951] do_fast_syscall_32+0x32/0x80 [ 295.219477][T10951] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 295.221581][T10951] RIP: 0023:0xf742e579 [ 295.222970][T10951] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 295.229457][T10951] RSP: 002b:00000000f573656c EFLAGS: 00000296 ORIG_RAX: 000000000000016d [ 295.232403][T10951] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 295.235367][T10951] RDX: 0000000000000029 RSI: 0000000020000000 RDI: 0000000020695ffc [ 295.238059][T10951] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 295.240720][T10951] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 295.244051][T10951] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 295.246848][T10951] [ 295.256498][ T39] kauditd_printk_skb: 90 callbacks suppressed [ 295.256511][ T39] audit: type=1326 audit(1723826167.690:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10946 comm="syz.2.1619" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56579 code=0x7ffc0000 [ 295.273379][ T39] audit: type=1326 audit(1723826167.690:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10946 comm="syz.2.1619" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56579 code=0x7ffc0000 [ 295.282948][ T39] audit: type=1326 audit(1723826167.690:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10946 comm="syz.2.1619" exe="/syz-executor" sig=0 arch=40000003 syscall=284 compat=1 ip=0xf7f56579 code=0x7ffc0000 [ 295.295604][ T39] audit: type=1326 audit(1723826167.690:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10946 comm="syz.2.1619" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56579 code=0x7ffc0000 [ 295.304792][ T39] audit: type=1326 audit(1723826167.700:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10946 comm="syz.2.1619" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56579 code=0x7ffc0000 [ 295.442484][T10959] FAULT_INJECTION: forcing a failure. [ 295.442484][T10959] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.447271][T10959] CPU: 2 UID: 0 PID: 10959 Comm: syz.2.1624 Not tainted 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 295.451960][T10959] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 295.456536][T10959] Call Trace: [ 295.457872][T10959] [ 295.459186][T10959] dump_stack_lvl+0x16c/0x1f0 [ 295.460819][T10959] should_fail_ex+0x497/0x5b0 [ 295.462537][T10959] _copy_from_user+0x30/0xf0 [ 295.464118][T10959] do_ipv6_setsockopt+0x99f/0x4800 [ 295.465832][T10959] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 295.468156][T10959] ? mark_lock+0xb5/0xc60 [ 295.469910][T10959] ? aa_label_sk_perm+0x165/0x560 [ 295.471596][T10959] ? __lock_acquire+0xbdd/0x3cb0 [ 295.473560][T10959] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 295.475834][T10959] ? __might_fault+0x13b/0x190 [ 295.477811][T10959] ? __pfx___lock_acquire+0x10/0x10 [ 295.479843][T10959] ? hlock_class+0x4e/0x130 [ 295.481348][T10959] ? __lock_acquire+0xbdd/0x3cb0 [ 295.482984][T10959] ? ipv6_setsockopt+0xe3/0x1a0 [ 295.484757][T10959] ipv6_setsockopt+0xe3/0x1a0 [ 295.486743][T10959] rawv6_setsockopt+0xdc/0x700 [ 295.488600][T10959] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 295.490366][T10959] ? sock_common_setsockopt+0x2e/0xf0 [ 295.492268][T10959] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 295.494209][T10959] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 295.496278][T10959] do_sock_setsockopt+0x222/0x480 [ 295.498375][T10959] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 295.500749][T10959] ? __fget_light+0x173/0x210 [ 295.502809][T10959] __sys_setsockopt+0x1a4/0x270 [ 295.504955][T10959] ? __pfx___sys_setsockopt+0x10/0x10 [ 295.507298][T10959] ? fput+0x32/0x390 [ 295.508600][T10959] ? ksys_write+0x1ab/0x260 [ 295.510111][T10959] ? __pfx_ksys_write+0x10/0x10 [ 295.512086][T10959] __ia32_sys_setsockopt+0xbc/0x160 [ 295.514350][T10959] ? lockdep_hardirqs_on+0x7c/0x110 [ 295.516194][T10959] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 295.518388][T10959] __do_fast_syscall_32+0x73/0x120 [ 295.520664][T10959] do_fast_syscall_32+0x32/0x80 [ 295.522639][T10959] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 295.524913][T10959] RIP: 0023:0xf7f56579 [ 295.526299][T10959] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 295.534366][T10959] RSP: 002b:00000000f56f656c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 295.537570][T10959] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 295.540184][T10959] RDX: 0000000000000040 RSI: 0000000020000680 RDI: 00000000000002c8 [ 295.543234][T10959] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 295.545901][T10959] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 295.548507][T10959] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 295.551099][T10959] [ 295.552271][ C2] vkms_vblank_simulate: vblank timer overrun [ 295.607823][T10963] netlink: 'syz.2.1625': attribute type 7 has an invalid length. [ 295.613526][T10963] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1625'. [ 295.619027][T10963] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 295.621715][T10963] IPv6: NLM_F_CREATE should be set when creating new route [ 295.624638][T10963] IPv6: NLM_F_CREATE should be set when creating new route [ 295.641495][T10963] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 295.648758][T10965] ptrace attach of "/syz-executor exec"[5349] was attempted by "/syz-executor exec"[10965] [ 295.671421][T10963] Cannot find del_set index 0 as target [ 295.710279][T10967] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1627'. [ 295.739280][T10973] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1630'. [ 295.759751][T10976] FAULT_INJECTION: forcing a failure. [ 295.759751][T10976] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.766649][T10976] CPU: 0 UID: 0 PID: 10976 Comm: syz.0.1631 Not tainted 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 295.771103][T10976] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 295.774762][T10976] Call Trace: [ 295.775911][T10976] [ 295.776907][T10976] dump_stack_lvl+0x16c/0x1f0 [ 295.778498][T10976] should_fail_ex+0x497/0x5b0 [ 295.780103][T10976] _copy_from_user+0x30/0xf0 [ 295.781659][T10976] get_compat_msghdr+0xa8/0x170 [ 295.783481][T10976] ? __pfx_get_compat_msghdr+0x10/0x10 [ 295.785317][T10976] ? __pfx___lock_acquire+0x10/0x10 [ 295.787480][T10976] ___sys_sendmsg+0x1b0/0x1e0 [ 295.789443][T10976] ? __pfx____sys_sendmsg+0x10/0x10 [ 295.791614][T10976] ? ksys_write+0x21c/0x260 [ 295.793571][T10976] ? __fget_light+0x173/0x210 [ 295.795540][T10976] __sys_sendmsg+0x117/0x1f0 [ 295.797446][T10976] ? __pfx___sys_sendmsg+0x10/0x10 [ 295.799593][T10976] __do_fast_syscall_32+0x73/0x120 [ 295.801770][T10976] do_fast_syscall_32+0x32/0x80 [ 295.803797][T10976] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 295.806400][T10976] RIP: 0023:0xf742e579 [ 295.808104][T10976] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 295.815908][T10976] RSP: 002b:00000000f573656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 295.819297][T10976] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200003c0 [ 295.822552][T10976] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 295.825717][T10976] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 295.828937][T10976] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 295.832218][T10976] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 295.835393][T10976] [ 295.935652][ T39] audit: type=1326 audit(1723826168.370:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10975 comm="syz.2.1632" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56579 code=0x7ffc0000 [ 295.948246][ T39] audit: type=1326 audit(1723826168.380:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10975 comm="syz.2.1632" exe="/syz-executor" sig=0 arch=40000003 syscall=284 compat=1 ip=0xf7f56579 code=0x7ffc0000 [ 295.959170][ T39] audit: type=1326 audit(1723826168.380:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10975 comm="syz.2.1632" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56579 code=0x7ffc0000 [ 295.969816][ T39] audit: type=1326 audit(1723826168.380:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10975 comm="syz.2.1632" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56579 code=0x7ffc0000 [ 295.987310][T10979] openvswitch: netlink: VXLAN extension 1 has unexpected len 6 expected 4 [ 296.062814][T10979] netlink: 'syz.3.1633': attribute type 3 has an invalid length. [ 296.074136][T10985] input: syz0 as /devices/virtual/input/input6 [ 296.303463][T10994] ptrace attach of "/syz-executor exec"[10412] was attempted by "/syz-executor exec"[10994] [ 296.381861][T11000] FAULT_INJECTION: forcing a failure. [ 296.381861][T11000] name failslab, interval 1, probability 0, space 0, times 0 [ 296.386177][T11000] CPU: 2 UID: 0 PID: 11000 Comm: syz.2.1640 Not tainted 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 296.389848][T11000] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 296.394354][T11000] Call Trace: [ 296.395766][T11000] [ 296.396782][T11000] dump_stack_lvl+0x16c/0x1f0 [ 296.398396][T11000] should_fail_ex+0x497/0x5b0 [ 296.400031][T11000] ? fs_reclaim_acquire+0xae/0x160 [ 296.401878][T11000] should_failslab+0xc2/0x120 [ 296.403509][T11000] __kmalloc_noprof+0xcb/0x410 [ 296.405286][T11000] ? __pfx_lock_acquire+0x10/0x10 [ 296.407072][T11000] tomoyo_realpath_from_path+0xbf/0x710 [ 296.409136][T11000] ? tomoyo_profile+0x47/0x60 [ 296.410880][T11000] tomoyo_path_number_perm+0x245/0x5b0 [ 296.413116][T11000] ? tomoyo_path_number_perm+0x232/0x5b0 [ 296.415265][T11000] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 296.417447][T11000] ? __pfx_lock_release+0x10/0x10 [ 296.419249][T11000] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 296.421409][T11000] ? __fget_files+0x256/0x400 [ 296.423029][T11000] security_file_ioctl_compat+0x75/0xc0 [ 296.424963][T11000] __do_compat_sys_ioctl+0x5d/0x330 [ 296.426882][T11000] __do_fast_syscall_32+0x73/0x120 [ 296.429082][T11000] do_fast_syscall_32+0x32/0x80 [ 296.431144][T11000] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 296.433770][T11000] RIP: 0023:0xf7f56579 [ 296.435494][T11000] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 296.443412][T11000] RSP: 002b:00000000f56f656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 296.446885][T11000] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000541b [ 296.450095][T11000] RDX: 00000000200002c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 296.452864][T11000] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 296.455448][T11000] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 296.458278][T11000] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 296.461713][T11000] [ 296.463619][T11000] ERROR: Out of memory at tomoyo_realpath_from_path. [ 296.678046][ T39] audit: type=1326 audit(1723826169.110:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11007 comm="syz.3.1643" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73be579 code=0x7ffc0000 [ 297.062538][T11016] ptrace attach of "/syz-executor exec"[5344] was attempted by "/syz-executor exec"[11016] [ 297.227662][T10999] syz.1.1641 (10999) used greatest stack depth: 20896 bytes left [ 297.467076][T11046] input: syz0 as /devices/virtual/input/input7 [ 297.554620][T11047] random: crng reseeded on system resumption [ 298.435010][T11073] FAULT_INJECTION: forcing a failure. [ 298.435010][T11073] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.441268][T11073] CPU: 3 UID: 0 PID: 11073 Comm: syz.1.1663 Not tainted 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 298.445807][T11073] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 298.450229][T11073] Call Trace: [ 298.451888][T11073] [ 298.453192][T11073] dump_stack_lvl+0x16c/0x1f0 [ 298.455533][T11073] should_fail_ex+0x497/0x5b0 [ 298.457625][T11073] _copy_from_user+0x30/0xf0 [ 298.459666][T11073] move_addr_to_kernel+0x68/0x160 [ 298.461789][T11073] __sys_sendto+0x169/0x4e0 [ 298.463740][T11073] ? __pfx___sys_sendto+0x10/0x10 [ 298.465859][T11073] ? ksys_write+0x1ab/0x260 [ 298.467880][T11073] ? __pfx_ksys_write+0x10/0x10 [ 298.469985][T11073] __ia32_sys_sendto+0xdd/0x1b0 [ 298.470711][T11075] ptrace attach of "/syz-executor exec"[10412] was attempted by "/syz-executor exec"[11075] [ 298.472127][T11073] ? lockdep_hardirqs_on+0x7c/0x110 [ 298.472151][T11073] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 298.481053][T11073] __do_fast_syscall_32+0x73/0x120 [ 298.483270][T11073] do_fast_syscall_32+0x32/0x80 [ 298.485451][T11073] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 298.488246][T11073] RIP: 0023:0xf747e579 [ 298.490052][T11073] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 298.498317][T11073] RSP: 002b:00000000f578656c EFLAGS: 00000296 ORIG_RAX: 0000000000000171 [ 298.501997][T11073] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000080 [ 298.505564][T11073] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000020001140 [ 298.509069][T11073] RBP: 0000000000000020 R08: 0000000000000000 R09: 0000000000000000 [ 298.512532][T11073] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 298.516041][T11073] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 298.519468][T11073] [ 298.560269][T11078] FAULT_INJECTION: forcing a failure. [ 298.560269][T11078] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.565977][T11078] CPU: 0 UID: 0 PID: 11078 Comm: syz.1.1666 Not tainted 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 298.570600][T11078] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 298.575185][T11078] Call Trace: [ 298.576667][T11078] [ 298.577998][T11078] dump_stack_lvl+0x16c/0x1f0 [ 298.580133][T11078] should_fail_ex+0x497/0x5b0 [ 298.582236][T11078] _copy_from_user+0x30/0xf0 [ 298.584318][T11078] get_compat_msghdr+0xa8/0x170 [ 298.586496][T11078] ? __pfx_get_compat_msghdr+0x10/0x10 [ 298.588942][T11078] ? __pfx___lock_acquire+0x10/0x10 [ 298.591263][T11078] ___sys_sendmsg+0x1b0/0x1e0 [ 298.593362][T11078] ? __pfx____sys_sendmsg+0x10/0x10 [ 298.595701][T11078] ? ksys_write+0x21c/0x260 [ 298.597746][T11078] ? __fget_light+0x173/0x210 [ 298.599879][T11078] __sys_sendmsg+0x117/0x1f0 [ 298.601927][T11078] ? __pfx___sys_sendmsg+0x10/0x10 [ 298.604875][T11078] __do_fast_syscall_32+0x73/0x120 [ 298.607234][T11078] do_fast_syscall_32+0x32/0x80 [ 298.609378][T11078] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 298.611849][T11078] RIP: 0023:0xf747e579 [ 298.613226][T11078] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 298.620604][T11078] RSP: 002b:00000000f578656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 298.624156][T11078] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000340 [ 298.627667][T11078] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 298.631123][T11078] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 298.634639][T11078] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 298.638039][T11078] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 298.641545][T11078] [ 298.695902][T11087] FAULT_INJECTION: forcing a failure. [ 298.695902][T11087] name failslab, interval 1, probability 0, space 0, times 0 [ 298.700125][T11087] CPU: 2 UID: 0 PID: 11087 Comm: syz.2.1669 Not tainted 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 298.703765][T11087] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 298.707455][T11087] Call Trace: [ 298.708603][T11087] [ 298.709612][T11087] dump_stack_lvl+0x16c/0x1f0 [ 298.711227][T11087] should_fail_ex+0x497/0x5b0 [ 298.712833][T11087] ? fs_reclaim_acquire+0xae/0x160 [ 298.714599][T11087] should_failslab+0xc2/0x120 [ 298.716226][T11087] __kmalloc_noprof+0xcb/0x410 [ 298.717858][T11087] ? __pfx_lock_acquire+0x10/0x10 [ 298.719587][T11087] tomoyo_realpath_from_path+0xbf/0x710 [ 298.721462][T11087] ? tomoyo_profile+0x47/0x60 [ 298.723080][T11087] tomoyo_path_number_perm+0x245/0x5b0 [ 298.724950][T11087] ? tomoyo_path_number_perm+0x232/0x5b0 [ 298.726854][T11087] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 298.728903][T11087] ? __pfx_lock_release+0x10/0x10 [ 298.730615][T11087] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 298.732648][T11087] ? __fget_files+0x256/0x400 [ 298.734275][T11087] security_file_ioctl_compat+0x75/0xc0 [ 298.736164][T11087] __do_compat_sys_ioctl+0x5d/0x330 [ 298.737977][T11087] __do_fast_syscall_32+0x73/0x120 [ 298.739721][T11087] do_fast_syscall_32+0x32/0x80 [ 298.741373][T11087] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 298.743551][T11087] RIP: 0023:0xf7f56579 [ 298.744954][T11087] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 298.752467][T11087] RSP: 002b:00000000f56f656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 298.755316][T11087] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c0684113 [ 298.758621][T11087] RDX: 0000000020000380 RSI: 0000000000000000 RDI: 0000000000000000 [ 298.761919][T11087] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 298.765022][T11087] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 298.767855][T11087] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 298.771182][T11087] [ 298.774802][T11087] ERROR: Out of memory at tomoyo_realpath_from_path. [ 298.962106][T11094] __nla_validate_parse: 4 callbacks suppressed [ 298.962121][T11094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1668'. [ 299.093151][T11098] random: crng reseeded on system resumption [ 300.150727][T11109] ptrace attach of "/syz-executor exec"[5349] was attempted by "/syz-executor exec"[11109] [ 300.616650][T11117] FAULT_INJECTION: forcing a failure. [ 300.616650][T11117] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.622633][T11117] CPU: 2 UID: 0 PID: 11117 Comm: syz.0.1676 Not tainted 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 300.627168][T11117] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 300.631729][T11117] Call Trace: [ 300.633116][T11117] [ 300.634363][T11117] dump_stack_lvl+0x16c/0x1f0 [ 300.636351][T11117] should_fail_ex+0x497/0x5b0 [ 300.638281][T11117] _copy_from_user+0x30/0xf0 [ 300.640188][T11117] get_compat_sigset+0x21/0x50 [ 300.642176][T11117] __ia32_compat_sys_signalfd4+0x121/0x1e0 [ 300.644623][T11117] ? ksys_write+0x1ab/0x260 [ 300.646521][T11117] ? __pfx___ia32_compat_sys_signalfd4+0x10/0x10 [ 300.649134][T11117] __do_fast_syscall_32+0x73/0x120 [ 300.651299][T11117] do_fast_syscall_32+0x32/0x80 [ 300.653391][T11117] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 300.656056][T11117] RIP: 0023:0xf742e579 [ 300.657739][T11117] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 300.664963][T11117] RSP: 002b:00000000f571556c EFLAGS: 00000296 ORIG_RAX: 0000000000000147 [ 300.667804][T11117] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 0000000020000140 [ 300.670418][T11117] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000000 [ 300.673019][T11117] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 300.675645][T11117] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 300.678684][T11117] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 300.681949][T11117] [ 301.727037][T11164] FAULT_INJECTION: forcing a failure. [ 301.727037][T11164] name failslab, interval 1, probability 0, space 0, times 0 [ 301.731517][T11164] CPU: 3 UID: 0 PID: 11164 Comm: syz.3.1693 Not tainted 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 301.734878][T11164] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 301.738511][T11164] Call Trace: [ 301.739840][T11164] [ 301.741015][T11164] dump_stack_lvl+0x16c/0x1f0 [ 301.742813][T11164] should_fail_ex+0x497/0x5b0 [ 301.744651][T11164] ? fs_reclaim_acquire+0xae/0x160 [ 301.746633][T11164] should_failslab+0xc2/0x120 [ 301.748470][T11164] __kmalloc_cache_noprof+0x6b/0x310 [ 301.750471][T11164] ? snd_pcm_oss_change_params_locked+0x1d6/0x3a50 [ 301.752444][T11164] snd_pcm_oss_change_params_locked+0x1d6/0x3a50 [ 301.754507][T11164] ? __pfx___mutex_trylock_common+0x10/0x10 [ 301.756640][T11164] ? rcu_is_watching+0x12/0xc0 [ 301.758237][T11164] ? trace_contention_end+0xea/0x140 [ 301.759866][T11164] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 301.761890][T11164] ? __mutex_lock+0x1a6/0x9c0 [ 301.763345][T11164] ? __pfx_aa_file_perm+0x10/0x10 [ 301.764828][T11164] ? snd_pcm_oss_read+0x380/0x760 [ 301.766303][T11164] ? __pfx___mutex_lock+0x10/0x10 [ 301.767790][T11164] ? copy_compat_iovec_from_user+0x138/0x180 [ 301.769523][T11164] ? import_ubuf+0x1a4/0x200 [ 301.770875][T11164] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 301.772609][T11164] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 301.774203][T11164] snd_pcm_oss_read+0x3a2/0x760 [ 301.775649][T11164] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 301.777219][T11164] vfs_readv+0x6cb/0x8a0 [ 301.778488][T11164] ? __pfx_vfs_readv+0x10/0x10 [ 301.779927][T11164] ? __fget_files+0x24c/0x400 [ 301.781322][T11164] ? do_readv+0x137/0x370 [ 301.782610][T11164] do_readv+0x137/0x370 [ 301.783827][T11164] ? __pfx_do_readv+0x10/0x10 [ 301.785213][T11164] ? rcu_is_watching+0x12/0xc0 [ 301.786621][T11164] __do_fast_syscall_32+0x73/0x120 [ 301.788148][T11164] do_fast_syscall_32+0x32/0x80 [ 301.789922][T11164] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 301.791806][T11164] RIP: 0023:0xf73be579 [ 301.793048][T11164] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 301.799533][T11164] RSP: 002b:00000000f56c656c EFLAGS: 00000296 ORIG_RAX: 0000000000000091 [ 301.802358][T11164] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000540 [ 301.804726][T11164] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 301.807049][T11164] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 301.809399][T11164] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 301.811888][T11164] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 301.814257][T11164] [ 302.301555][T11185] FAULT_INJECTION: forcing a failure. [ 302.301555][T11185] name failslab, interval 1, probability 0, space 0, times 0 [ 302.306355][T11185] CPU: 3 UID: 0 PID: 11185 Comm: syz.2.1698 Not tainted 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 302.310418][T11185] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 302.314829][T11185] Call Trace: [ 302.316074][T11185] [ 302.317231][T11185] dump_stack_lvl+0x16c/0x1f0 [ 302.319037][T11185] should_fail_ex+0x497/0x5b0 [ 302.320768][T11185] ? fs_reclaim_acquire+0xae/0x160 [ 302.322860][T11185] should_failslab+0xc2/0x120 [ 302.324642][T11185] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 302.326576][T11185] ? getname_flags.part.0+0x4c/0x550 [ 302.328460][T11185] getname_flags.part.0+0x4c/0x550 [ 302.330334][T11185] getname_flags+0x93/0xf0 [ 302.331927][T11185] user_path_at+0x24/0x60 [ 302.333398][T11185] __ia32_sys_umount+0x10a/0x1a0 [ 302.335060][T11185] ? __pfx___ia32_sys_umount+0x10/0x10 [ 302.336978][T11185] ? rcu_is_watching+0x12/0xc0 [ 302.338626][T11185] __do_fast_syscall_32+0x73/0x120 [ 302.340283][T11185] do_fast_syscall_32+0x32/0x80 [ 302.341942][T11185] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 302.344152][T11185] RIP: 0023:0xf7f56579 [ 302.345592][T11185] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 302.351934][T11185] RSP: 002b:00000000f56d556c EFLAGS: 00000296 ORIG_RAX: 0000000000000034 [ 302.354640][T11185] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 0000000000000000 [ 302.357370][T11185] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 302.359993][T11185] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 302.362678][T11185] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 302.365308][T11185] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 302.368037][T11185] [ 302.643194][ T39] kauditd_printk_skb: 4 callbacks suppressed [ 302.643205][ T39] audit: type=1326 audit(1723826175.080:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11199 comm="syz.1.1703" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 302.653738][ T39] audit: type=1326 audit(1723826175.080:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11199 comm="syz.1.1703" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 302.661733][ T39] audit: type=1326 audit(1723826175.100:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11199 comm="syz.1.1703" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 302.668880][ T39] audit: type=1326 audit(1723826175.100:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11199 comm="syz.1.1703" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 302.676216][ T39] audit: type=1326 audit(1723826175.100:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11202 comm="syz.1.1703" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 302.684872][ T39] audit: type=1326 audit(1723826175.100:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11199 comm="syz.1.1703" exe="/syz-executor" sig=0 arch=40000003 syscall=284 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 302.812950][ T39] audit: type=1326 audit(1723826175.250:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11202 comm="syz.1.1703" exe="/syz-executor" sig=0 arch=40000003 syscall=1 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 302.828119][ T39] audit: type=1326 audit(1723826175.260:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11199 comm="syz.1.1703" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf747e598 code=0x7ffc0000 [ 302.836830][ T39] audit: type=1326 audit(1723826175.270:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11199 comm="syz.1.1703" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 302.860735][ T39] audit: type=1326 audit(1723826175.270:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11199 comm="syz.1.1703" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 303.241508][T11189] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 303.345849][T11214] ptrace attach of "/syz-executor exec"[10412] was attempted by "/syz-executor exec"[11214] [ 303.588632][T11221] ptrace attach of "/syz-executor exec"[5352] was attempted by "/syz-executor exec"[11221] [ 304.113452][T11231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1714'. [ 304.117323][T11231] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1714'. [ 304.293474][T11244] input: syz1 as /devices/virtual/input/input8 [ 305.245999][T11257] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 305.249273][T11257] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 305.254616][T11257] vhci_hcd vhci_hcd.0: Device attached [ 305.283609][T11261] syzkaller0: entered allmulticast mode [ 305.470743][ T5387] vhci_hcd: vhci_device speed not set [ 305.540700][ T5387] usb 19-1: new full-speed USB device number 2 using vhci_hcd [ 305.982587][T11258] vhci_hcd: connection reset by peer [ 305.989857][ T1104] vhci_hcd: stop threads [ 305.996929][ T1104] vhci_hcd: release socket [ 305.999993][ T1104] vhci_hcd: disconnect device [ 306.243278][T11273] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 306.264381][T11275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1728'. [ 306.274934][T11273] devpts: called with bogus options [ 306.344362][T11279] ptrace attach of "/syz-executor exec"[5344] was attempted by "/syz-executor exec"[11279] [ 306.657177][T11291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1732'. [ 307.095616][T11299] ptrace attach of "/syz-executor exec"[5352] was attempted by "/syz-executor exec"[11299] [ 307.304030][T11309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1738'. [ 307.304148][T11308] input: syz1 as /devices/virtual/input/input9 [ 307.451381][T11315] fuse: Unknown parameter 'f±' [ 307.558194][T11319] input: syz0 as /devices/virtual/input/input10 [ 308.160177][T11323] ptrace attach of "/syz-executor exec"[10412] was attempted by "/syz-executor exec"[11323] [ 308.941095][T11338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1748'. [ 309.057562][T11346] FAULT_INJECTION: forcing a failure. [ 309.057562][T11346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 309.060276][T11345] ptrace attach of "/syz-executor exec"[5349] was attempted by "/syz-executor exec"[11345] [ 309.064072][T11346] CPU: 1 UID: 0 PID: 11346 Comm: syz.1.1752 Not tainted 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 309.071728][T11346] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 309.076542][T11346] Call Trace: [ 309.078031][T11346] [ 309.079366][T11346] dump_stack_lvl+0x16c/0x1f0 [ 309.081597][T11346] should_fail_ex+0x497/0x5b0 [ 309.083773][T11346] _copy_from_user+0x30/0xf0 [ 309.085862][T11346] get_compat_msghdr+0xa8/0x170 [ 309.088035][T11346] ? __pfx_get_compat_msghdr+0x10/0x10 [ 309.090419][T11346] ? __pfx___lock_acquire+0x10/0x10 [ 309.092813][T11346] ___sys_sendmsg+0x1b0/0x1e0 [ 309.094909][T11346] ? __pfx____sys_sendmsg+0x10/0x10 [ 309.097252][T11346] ? ksys_write+0x21c/0x260 [ 309.099299][T11346] ? __fget_light+0x173/0x210 [ 309.101404][T11346] __sys_sendmsg+0x117/0x1f0 [ 309.103476][T11346] ? __pfx___sys_sendmsg+0x10/0x10 [ 309.105799][T11346] __do_fast_syscall_32+0x73/0x120 [ 309.108062][T11346] do_fast_syscall_32+0x32/0x80 [ 309.110233][T11346] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 309.113012][T11346] RIP: 0023:0xf747e579 [ 309.114845][T11346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 309.122840][T11346] RSP: 002b:00000000f578656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 309.126518][T11346] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000000 [ 309.130014][T11346] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 309.133478][T11346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 309.136983][T11346] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 309.140488][T11346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 309.143995][T11346] [ 309.242865][T11351] netlink: 'syz.3.1753': attribute type 2 has an invalid length. [ 309.246391][T11351] netlink: 'syz.3.1753': attribute type 1 has an invalid length. [ 309.249624][T11351] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.1753'. [ 309.547046][ T39] kauditd_printk_skb: 20 callbacks suppressed [ 309.547057][ T39] audit: type=1326 audit(1723826181.980:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11359 comm="syz.1.1758" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 309.554136][T11365] FAULT_INJECTION: forcing a failure. [ 309.554136][T11365] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 309.562954][T11365] CPU: 3 UID: 0 PID: 11365 Comm: syz.2.1760 Not tainted 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 309.566645][T11365] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 309.570286][T11365] Call Trace: [ 309.571139][ T39] audit: type=1326 audit(1723826181.980:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11359 comm="syz.1.1758" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 309.571564][T11365] [ 309.580510][ T39] audit: type=1326 audit(1723826181.990:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11359 comm="syz.1.1758" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 309.581776][T11365] dump_stack_lvl+0x16c/0x1f0 [ 309.581815][T11365] should_fail_ex+0x497/0x5b0 [ 309.581839][T11365] _copy_from_user+0x30/0xf0 [ 309.581862][T11365] __sys_bpf+0x239/0x55e0 [ 309.581888][T11365] ? __pfx___sys_bpf+0x10/0x10 [ 309.581910][T11365] ? ksys_write+0x12f/0x260 [ 309.581936][T11365] ? find_held_lock+0x2d/0x110 [ 309.604114][T11365] ? ksys_write+0x21c/0x260 [ 309.606053][T11365] ? __pfx_lock_release+0x10/0x10 [ 309.608193][T11365] ? vfs_write+0x14d/0x1140 [ 309.610117][T11365] ? __mutex_unlock_slowpath+0x164/0x650 [ 309.610652][ T39] audit: type=1326 audit(1723826182.000:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11366 comm="syz.1.1758" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 309.612484][T11365] ? fput+0x32/0x390 [ 309.623414][T11365] ? ksys_write+0x1ab/0x260 [ 309.625356][T11365] ? __pfx_ksys_write+0x10/0x10 [ 309.627403][T11365] __ia32_sys_bpf+0x76/0xe0 [ 309.629089][T11365] __do_fast_syscall_32+0x73/0x120 [ 309.629897][ T39] audit: type=1326 audit(1723826182.000:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11359 comm="syz.1.1758" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 309.631030][T11365] do_fast_syscall_32+0x32/0x80 [ 309.631055][T11365] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 309.639202][ T39] audit: type=1326 audit(1723826182.000:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11359 comm="syz.1.1758" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 309.640798][T11365] RIP: 0023:0xf7f56579 [ 309.640812][T11365] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 309.640821][T11365] RSP: 002b:00000000f56f656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 309.640832][T11365] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000202a0fb8 [ 309.664593][T11365] RDX: 000000000000002d RSI: 0000000000000000 RDI: 0000000000000000 [ 309.667368][T11365] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 309.670690][T11365] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 309.673763][T11365] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 309.676745][T11365] [ 309.700692][ T39] audit: type=1326 audit(1723826182.130:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11359 comm="syz.1.1758" exe="/syz-executor" sig=0 arch=40000003 syscall=284 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 309.740643][ T39] audit: type=1326 audit(1723826182.170:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11366 comm="syz.1.1758" exe="/syz-executor" sig=0 arch=40000003 syscall=1 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 309.757877][ T39] audit: type=1326 audit(1723826182.190:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11359 comm="syz.1.1758" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf747e598 code=0x7ffc0000 [ 309.767330][ T39] audit: type=1326 audit(1723826182.190:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11359 comm="syz.1.1758" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 310.300095][T11394] ptrace attach of "/syz-executor exec"[5352] was attempted by "/syz-executor exec"[11394] [ 310.457824][T11403] ptrace attach of "/syz-executor exec"[10412] was attempted by "/syz-executor exec"[11403] [ 310.700770][ T5387] vhci_hcd: vhci_device speed not set [ 311.114761][T11425] ptrace attach of "/syz-executor exec"[5349] was attempted by "/syz-executor exec"[11425] [ 311.252873][T11429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1774'. [ 311.588586][T11442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1786'. [ 311.594960][T11442] gtp0: entered promiscuous mode [ 311.596699][T11442] gtp0: entered allmulticast mode [ 311.683367][T11447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1788'. [ 311.844253][T11457] ptrace attach of "/syz-executor exec"[10412] was attempted by "/syz-executor exec"[11457] [ 311.944928][T11459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1790'. [ 312.234550][T11463] ptrace attach of "/syz-executor exec"[5344] was attempted by "/syz-executor exec"[11463] [ 312.417010][T11465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1794'. [ 312.717090][T11474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1797'. [ 313.269333][T11489] FAULT_INJECTION: forcing a failure. [ 313.269333][T11489] name failslab, interval 1, probability 0, space 0, times 0 [ 313.274820][T11489] CPU: 2 UID: 0 PID: 11489 Comm: syz.0.1803 Not tainted 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 313.279527][T11489] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 313.284260][T11489] Call Trace: [ 313.285777][T11489] [ 313.287125][T11489] dump_stack_lvl+0x16c/0x1f0 [ 313.289232][T11489] should_fail_ex+0x497/0x5b0 [ 313.291344][T11489] ? fs_reclaim_acquire+0xae/0x160 [ 313.293634][T11489] should_failslab+0xc2/0x120 [ 313.295740][T11489] __kmalloc_noprof+0xcb/0x410 [ 313.297862][T11489] ? __pfx_lock_acquire+0x10/0x10 [ 313.300114][T11489] tomoyo_realpath_from_path+0xbf/0x710 [ 313.302553][T11489] ? tomoyo_profile+0x47/0x60 [ 313.304658][T11489] tomoyo_path_number_perm+0x245/0x5b0 [ 313.307081][T11489] ? tomoyo_path_number_perm+0x232/0x5b0 [ 313.309580][T11489] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 313.312298][T11489] ? __pfx___cant_migrate+0x10/0x10 [ 313.314623][T11489] ? dev_map_lookup_elem+0x1a8/0x1f0 [ 313.316973][T11489] ? __fget_files+0x256/0x400 [ 313.319093][T11489] security_file_ioctl_compat+0x75/0xc0 [ 313.321546][T11489] __do_compat_sys_ioctl+0x5d/0x330 [ 313.323875][T11489] __do_fast_syscall_32+0x73/0x120 [ 313.326173][T11489] do_fast_syscall_32+0x32/0x80 [ 313.328352][T11489] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 313.331143][T11489] RIP: 0023:0xf742e579 [ 313.332950][T11489] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 313.341334][T11489] RSP: 002b:00000000f573656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 313.345028][T11489] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 000000004038ae7a [ 313.348518][T11489] RDX: 00000000200000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 313.351948][T11489] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 313.355450][T11489] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 313.358613][T11489] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 313.362061][T11489] [ 313.367524][T11489] ERROR: Out of memory at tomoyo_realpath_from_path. [ 313.544386][T11498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1806'. [ 313.617253][T11501] ptrace attach of "/syz-executor exec"[5344] was attempted by "/syz-executor exec"[11501] [ 314.029468][T11513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1811'. [ 314.044713][T11511] evm: overlay not supported [ 314.075858][T11511] Invalid ELF header magic: != ELF [ 314.535884][T11521] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1813'. [ 314.640122][T11523] FAULT_INJECTION: forcing a failure. [ 314.640122][T11523] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 314.653278][T11525] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1815'. [ 314.653564][T11523] CPU: 0 UID: 0 PID: 11523 Comm: syz.3.1814 Not tainted 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 314.662151][T11523] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 314.667494][T11523] Call Trace: [ 314.668935][T11523] [ 314.670475][T11523] dump_stack_lvl+0x16c/0x1f0 [ 314.672598][T11523] should_fail_ex+0x497/0x5b0 [ 314.674693][T11523] _copy_from_user+0x30/0xf0 [ 314.676760][T11523] get_compat_msghdr+0xa8/0x170 [ 314.679081][T11523] ? __pfx_get_compat_msghdr+0x10/0x10 [ 314.681499][T11523] ? __pfx___lock_acquire+0x10/0x10 [ 314.683603][T11523] ___sys_sendmsg+0x1b0/0x1e0 [ 314.685668][T11523] ? __pfx____sys_sendmsg+0x10/0x10 [ 314.687922][T11523] ? ksys_write+0x21c/0x260 [ 314.689924][T11523] ? __fget_light+0x173/0x210 [ 314.692032][T11523] __sys_sendmsg+0x117/0x1f0 [ 314.694077][T11523] ? __pfx___sys_sendmsg+0x10/0x10 [ 314.696390][T11523] __do_fast_syscall_32+0x73/0x120 [ 314.698660][T11523] do_fast_syscall_32+0x32/0x80 [ 314.700738][T11523] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 314.703535][T11523] RIP: 0023:0xf73be579 [ 314.705368][T11523] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 314.713626][T11523] RSP: 002b:00000000f56c656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 314.717335][T11523] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200005c0 [ 314.719700][T11527] ptrace attach of "/syz-executor exec"[10412] was attempted by "/syz-executor exec"[11527] [ 314.720821][T11523] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 314.720836][T11523] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 314.720848][T11523] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 314.720860][T11523] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 314.720886][T11523] [ 314.788498][T11531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1818'. [ 314.792363][T11532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1818'. [ 314.806737][T11531] Driver unsupported XDP return value 0 on prog (id 564) dev N/A, expect packet loss! [ 314.855935][T11538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1820'. [ 314.883064][ T39] kauditd_printk_skb: 12 callbacks suppressed [ 314.883078][ T39] audit: type=1326 audit(1723826187.320:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11528 comm="syz.3.1817" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73be579 code=0x7ffc0000 [ 314.900771][ T39] audit: type=1326 audit(1723826187.330:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11528 comm="syz.3.1817" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73be579 code=0x7ffc0000 [ 314.908432][ T39] audit: type=1326 audit(1723826187.330:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11528 comm="syz.3.1817" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf73be579 code=0x7ffc0000 [ 314.943142][ T39] audit: type=1326 audit(1723826187.380:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11528 comm="syz.3.1817" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73be579 code=0x7ffc0000 [ 314.955502][ T39] audit: type=1326 audit(1723826187.380:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11528 comm="syz.3.1817" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73be579 code=0x7ffc0000 [ 314.965131][ T39] audit: type=1326 audit(1723826187.400:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11542 comm="syz.3.1817" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf73be579 code=0x7ffc0000 [ 314.991007][ T39] audit: type=1326 audit(1723826187.430:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11528 comm="syz.3.1817" exe="/syz-executor" sig=0 arch=40000003 syscall=284 compat=1 ip=0xf73be579 code=0x7ffc0000 [ 315.002865][T11544] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 315.005617][T11544] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 315.010875][T11544] vhci_hcd vhci_hcd.0: Device attached [ 315.135122][ T39] audit: type=1326 audit(1723826187.550:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11542 comm="syz.3.1817" exe="/syz-executor" sig=0 arch=40000003 syscall=1 compat=1 ip=0xf73be579 code=0x7ffc0000 [ 315.164218][ T39] audit: type=1326 audit(1723826187.570:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11528 comm="syz.3.1817" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf73be598 code=0x7ffc0000 [ 315.200866][ T39] audit: type=1326 audit(1723826187.570:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11528 comm="syz.3.1817" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73be579 code=0x7ffc0000 [ 315.230769][ T5387] vhci_hcd: vhci_device speed not set [ 315.304358][ T5387] usb 17-1: new full-speed USB device number 2 using vhci_hcd [ 315.614049][T11561] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1823'. [ 315.786251][T11565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1825'. [ 315.825508][T11567] ptrace attach of "/syz-executor exec"[5352] was attempted by "/syz-executor exec"[11567] [ 315.845894][T11545] vhci_hcd: connection reset by peer [ 315.851401][ T1104] vhci_hcd: stop threads [ 315.853348][ T1104] vhci_hcd: release socket [ 315.856338][ T1104] vhci_hcd: disconnect device [ 316.019843][T11570] FAULT_INJECTION: forcing a failure. [ 316.019843][T11570] name failslab, interval 1, probability 0, space 0, times 0 [ 316.025502][T11570] CPU: 0 UID: 0 PID: 11570 Comm: syz.1.1828 Not tainted 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 316.030072][T11570] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 316.034950][T11570] Call Trace: [ 316.036416][T11570] [ 316.037728][T11570] dump_stack_lvl+0x16c/0x1f0 [ 316.039777][T11570] should_fail_ex+0x497/0x5b0 [ 316.041757][T11570] ? fs_reclaim_acquire+0xae/0x160 [ 316.044134][T11570] should_failslab+0xc2/0x120 [ 316.046372][T11570] __kmalloc_noprof+0xcb/0x410 [ 316.048373][T11570] ? __pfx_lock_acquire+0x10/0x10 [ 316.050724][T11570] tomoyo_realpath_from_path+0xbf/0x710 [ 316.053299][T11570] ? tomoyo_profile+0x47/0x60 [ 316.055467][T11570] tomoyo_path_number_perm+0x245/0x5b0 [ 316.057986][T11570] ? tomoyo_path_number_perm+0x232/0x5b0 [ 316.060584][T11570] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 316.063350][T11570] ? __pfx_lock_release+0x10/0x10 [ 316.065720][T11570] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 316.068491][T11570] ? __fget_files+0x256/0x400 [ 316.070539][T11570] security_file_ioctl_compat+0x75/0xc0 [ 316.073019][T11570] __do_compat_sys_ioctl+0x5d/0x330 [ 316.075454][T11570] __do_fast_syscall_32+0x73/0x120 [ 316.077762][T11570] do_fast_syscall_32+0x32/0x80 [ 316.080019][T11570] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 316.082903][T11570] RIP: 0023:0xf747e579 [ 316.084769][T11570] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 316.093466][T11570] RSP: 002b:00000000f578656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 316.096963][T11570] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c028aa03 [ 316.100611][T11570] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 316.104174][T11570] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 316.107749][T11570] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 316.111432][T11570] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 316.114974][T11570] [ 316.116570][ C0] vkms_vblank_simulate: vblank timer overrun [ 316.123875][T11570] ERROR: Out of memory at tomoyo_realpath_from_path. [ 316.332422][T11574] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1829'. [ 316.621112][ T1996] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 316.853547][ T1996] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 316.858427][ T1996] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 316.866497][ T1996] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 316.880628][ T1996] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 316.886016][ T1996] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 316.889794][ T1996] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.910178][ T1996] usb 6-1: config 0 descriptor?? [ 316.949238][T11589] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1832'. [ 317.085868][T11591] ptrace attach of "/syz-executor exec"[5344] was attempted by "/syz-executor exec"[11591] [ 317.146861][T11576] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1830'. [ 317.784786][ T1996] usbhid 6-1:0.0: can't add hid device: -71 [ 317.787071][ T1996] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 317.802183][ T1996] usb 6-1: USB disconnect, device number 5 [ 318.676093][T11630] Invalid ELF header magic: != ELF [ 319.084327][T11642] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 319.086903][T11642] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 319.090293][T11642] vhci_hcd vhci_hcd.0: Device attached [ 319.330797][ T5404] vhci_hcd: vhci_device speed not set [ 319.400776][ T5404] usb 15-1: new full-speed USB device number 2 using vhci_hcd [ 319.517013][T11657] FAULT_INJECTION: forcing a failure. [ 319.517013][T11657] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.522599][T11657] CPU: 2 UID: 0 PID: 11657 Comm: syz.0.1856 Not tainted 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 319.527154][T11657] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 319.531560][T11657] Call Trace: [ 319.532961][T11657] [ 319.534196][T11657] dump_stack_lvl+0x16c/0x1f0 [ 319.536180][T11657] should_fail_ex+0x497/0x5b0 [ 319.538145][T11657] _copy_to_user+0x30/0xc0 [ 319.540046][T11657] simple_read_from_buffer+0xd0/0x160 [ 319.542302][T11657] proc_fail_nth_read+0x19e/0x280 [ 319.544461][T11657] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 319.546760][T11657] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 319.549056][T11657] vfs_read+0x1d4/0xbd0 [ 319.550781][T11657] ? __fdget_pos+0xeb/0x180 [ 319.552679][T11657] ? __pfx_vfs_read+0x10/0x10 [ 319.554646][T11657] ? __pfx___mutex_lock+0x10/0x10 [ 319.556755][T11657] ? __fget_files+0x256/0x400 [ 319.558848][T11657] ksys_read+0x12f/0x260 [ 319.560361][T11657] ? __pfx_ksys_read+0x10/0x10 [ 319.561960][T11657] __do_fast_syscall_32+0x73/0x120 [ 319.564136][T11657] do_fast_syscall_32+0x32/0x80 [ 319.566295][T11657] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 319.569092][T11657] RIP: 0023:0xf742e579 [ 319.570895][T11657] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 319.578947][T11657] RSP: 002b:00000000f57365a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 319.582595][T11657] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5736620 [ 319.586035][T11657] RDX: 000000000000000f RSI: 00000000f7420ff4 RDI: 0000000000000000 [ 319.589485][T11657] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 319.592906][T11657] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 319.595718][T11657] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 319.598925][T11657] [ 319.824895][T11660] ptrace attach of "/syz-executor exec"[5344] was attempted by "/syz-executor exec"[11660] [ 319.972334][T11663] __nla_validate_parse: 4 callbacks suppressed [ 319.972346][T11663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1858'. [ 320.100066][T11668] ptrace attach of "/syz-executor exec"[5344] was attempted by "/syz-executor exec"[11668] [ 320.160788][T11643] vhci_hcd: connection reset by peer [ 320.181702][ T1104] vhci_hcd: stop threads [ 320.183880][ T1104] vhci_hcd: release socket [ 320.185840][ T1104] vhci_hcd: disconnect device [ 320.326594][T11670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1859'. [ 320.456935][ T39] kauditd_printk_skb: 2 callbacks suppressed [ 320.456951][ T39] audit: type=1804 audit(1723826192.890:204): pid=11676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1861" name="/newroot/113/bus/bus" dev="overlay" ino=640 res=1 errno=0 [ 320.465518][ T5387] vhci_hcd: vhci_device speed not set [ 320.502337][T11676] Invalid ELF header magic: != ELF [ 321.206212][ T39] audit: type=1326 audit(1723826193.640:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11685 comm="syz.0.1865" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 321.229779][ T39] audit: type=1326 audit(1723826193.640:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11685 comm="syz.0.1865" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 321.246923][ T39] audit: type=1326 audit(1723826193.660:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11690 comm="syz.0.1865" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 321.257087][ T39] audit: type=1326 audit(1723826193.660:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11685 comm="syz.0.1865" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 321.268725][ T39] audit: type=1326 audit(1723826193.670:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11685 comm="syz.0.1865" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 321.278386][ T39] audit: type=1326 audit(1723826193.700:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11685 comm="syz.0.1865" exe="/syz-executor" sig=0 arch=40000003 syscall=284 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 321.372449][T11692] tipc: Started in network mode [ 321.375164][T11692] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 321.380233][T11692] tipc: Enabling of bearer rejected, failed to enable media [ 321.383155][ T39] audit: type=1326 audit(1723826193.820:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11690 comm="syz.0.1865" exe="/syz-executor" sig=0 arch=40000003 syscall=1 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 321.401416][ T39] audit: type=1326 audit(1723826193.830:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11685 comm="syz.0.1865" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf742e598 code=0x7ffc0000 [ 321.411455][ T39] audit: type=1326 audit(1723826193.840:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11685 comm="syz.0.1865" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 321.759547][T11709] FAULT_INJECTION: forcing a failure. [ 321.759547][T11709] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.770678][T11709] CPU: 3 UID: 0 PID: 11709 Comm: syz.0.1872 Not tainted 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 321.774407][T11709] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 321.778746][T11709] Call Trace: [ 321.780082][T11709] [ 321.781088][T11709] dump_stack_lvl+0x16c/0x1f0 [ 321.782843][T11709] should_fail_ex+0x497/0x5b0 [ 321.784882][T11709] _copy_to_user+0x30/0xc0 [ 321.786849][T11709] simple_read_from_buffer+0xd0/0x160 [ 321.789279][T11709] proc_fail_nth_read+0x19e/0x280 [ 321.791566][T11709] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 321.794028][T11709] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 321.796512][T11709] vfs_read+0x1d4/0xbd0 [ 321.798344][T11709] ? __fdget_pos+0xeb/0x180 [ 321.800397][T11709] ? __pfx_vfs_read+0x10/0x10 [ 321.802500][T11709] ? __pfx___mutex_lock+0x10/0x10 [ 321.804765][T11709] ? __fget_files+0x256/0x400 [ 321.806894][T11709] ksys_read+0x12f/0x260 [ 321.808821][T11709] ? __pfx_ksys_read+0x10/0x10 [ 321.811044][T11709] __do_fast_syscall_32+0x73/0x120 [ 321.813208][T11709] do_fast_syscall_32+0x32/0x80 [ 321.814877][T11709] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 321.817381][T11709] RIP: 0023:0xf742e579 [ 321.819178][T11709] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 321.826901][T11709] RSP: 002b:00000000f57155a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 321.830581][T11709] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5715620 [ 321.833836][T11709] RDX: 000000000000000f RSI: 00000000f7420ff4 RDI: 0000000000000000 [ 321.837330][T11709] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 321.840887][T11709] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 321.844431][T11709] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 321.847842][T11709] [ 321.895011][T11712] ptrace attach of "/syz-executor exec"[5344] was attempted by "/syz-executor exec"[11712] [ 322.006002][T11721] FAULT_INJECTION: forcing a failure. [ 322.006002][T11721] name failslab, interval 1, probability 0, space 0, times 0 [ 322.010774][T11721] CPU: 2 UID: 0 PID: 11721 Comm: syz.2.1877 Not tainted 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 322.014757][T11721] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 322.019076][T11721] Call Trace: [ 322.020252][T11721] [ 322.021493][T11721] dump_stack_lvl+0x16c/0x1f0 [ 322.023524][T11721] should_fail_ex+0x497/0x5b0 [ 322.025239][T11721] ? fs_reclaim_acquire+0xae/0x160 [ 322.027137][T11721] should_failslab+0xc2/0x120 [ 322.028918][T11721] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 322.031213][T11721] ? find_held_lock+0x2d/0x110 [ 322.033207][T11721] ? mpol_new+0x11d/0x2d0 [ 322.034990][T11721] mpol_new+0x11d/0x2d0 [ 322.036794][T11721] do_mbind+0x20b/0xe70 [ 322.038462][T11721] ? vfs_write+0xc34/0x1140 [ 322.040037][T11721] ? __pfx_lock_release+0x10/0x10 [ 322.042161][T11721] ? __pfx_do_mbind+0x10/0x10 [ 322.044204][T11721] ? __mutex_unlock_slowpath+0x164/0x650 [ 322.046647][T11721] ? __pfx_get_nodes+0x10/0x10 [ 322.048620][T11721] kernel_mbind+0x1ef/0x200 [ 322.050551][T11721] ? __pfx_kernel_mbind+0x10/0x10 [ 322.052772][T11721] __do_fast_syscall_32+0x73/0x120 [ 322.055013][T11721] do_fast_syscall_32+0x32/0x80 [ 322.057154][T11721] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 322.059909][T11721] RIP: 0023:0xf7f56579 [ 322.061704][T11721] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 322.070781][T11721] RSP: 002b:00000000f56f656c EFLAGS: 00000296 ORIG_RAX: 0000000000000112 [ 322.074463][T11721] RAX: ffffffffffffffda RBX: 0000000020001000 RCX: 0000000000800000 [ 322.077933][T11721] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 322.081264][T11721] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 322.084732][T11721] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 322.088171][T11721] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 322.091654][T11721] [ 322.149428][T11731] FAULT_INJECTION: forcing a failure. [ 322.149428][T11731] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 322.155320][T11731] CPU: 0 UID: 0 PID: 11731 Comm: syz.2.1880 Not tainted 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 322.159986][T11731] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 322.164706][T11731] Call Trace: [ 322.166023][T11731] [ 322.167082][T11731] dump_stack_lvl+0x16c/0x1f0 [ 322.168668][T11731] should_fail_ex+0x497/0x5b0 [ 322.170597][T11731] _copy_from_user+0x30/0xf0 [ 322.172440][T11731] get_compat_msghdr+0xa8/0x170 [ 322.173999][T11731] ? __pfx_get_compat_msghdr+0x10/0x10 [ 322.175963][T11731] ? __pfx___lock_acquire+0x10/0x10 [ 322.177621][T11731] ___sys_sendmsg+0x1b0/0x1e0 [ 322.179157][T11731] ? __pfx____sys_sendmsg+0x10/0x10 [ 322.181104][T11731] ? ksys_write+0x21c/0x260 [ 322.182769][T11731] ? __fget_light+0x173/0x210 [ 322.184661][T11731] __sys_sendmsg+0x117/0x1f0 [ 322.186535][T11731] ? __pfx___sys_sendmsg+0x10/0x10 [ 322.188717][T11731] __do_fast_syscall_32+0x73/0x120 [ 322.190818][T11731] do_fast_syscall_32+0x32/0x80 [ 322.192959][T11731] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 322.195580][T11731] RIP: 0023:0xf7f56579 [ 322.197214][T11731] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 322.203552][T11731] RSP: 002b:00000000f56f656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 322.206704][T11731] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000380 [ 322.210036][T11731] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000000 [ 322.213047][T11731] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 322.215853][T11731] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 322.217815][ T1377] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.218645][T11731] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 322.221490][ T1377] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.224044][T11731] [ 322.458921][T11752] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1886'. [ 322.676860][T11772] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1892'. [ 322.717506][T11773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1889'. [ 322.786129][T11782] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1895'. [ 322.844020][T11785] ptrace attach of "/syz-executor exec"[5349] was attempted by "/syz-executor exec"[11785] [ 323.004619][T11793] FAULT_INJECTION: forcing a failure. [ 323.004619][T11793] name failslab, interval 1, probability 0, space 0, times 0 [ 323.010999][T11793] CPU: 3 UID: 0 PID: 11793 Comm: syz.3.1897 Not tainted 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 323.015838][T11793] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 323.020887][T11793] Call Trace: [ 323.022606][T11793] [ 323.023967][T11793] dump_stack_lvl+0x16c/0x1f0 [ 323.026281][T11793] should_fail_ex+0x497/0x5b0 [ 323.028329][T11793] ? fs_reclaim_acquire+0xae/0x160 [ 323.030968][T11793] should_failslab+0xc2/0x120 [ 323.033112][T11793] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 323.035635][T11793] ? getname_flags.part.0+0x4c/0x550 [ 323.037935][T11793] getname_flags.part.0+0x4c/0x550 [ 323.040128][T11793] __ia32_sys_unlink+0xaf/0x110 [ 323.042249][T11793] __do_fast_syscall_32+0x73/0x120 [ 323.044494][T11793] do_fast_syscall_32+0x32/0x80 [ 323.046615][T11793] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 323.049363][T11793] RIP: 0023:0xf73be579 [ 323.051133][T11793] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 323.059394][T11793] RSP: 002b:00000000f568456c EFLAGS: 00000296 ORIG_RAX: 000000000000000a [ 323.063043][T11793] RAX: ffffffffffffffda RBX: 0000000020000100 RCX: 0000000000000000 [ 323.066315][T11793] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 323.069848][T11793] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 323.073313][T11793] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 323.076419][T11793] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 323.080093][T11793] [ 323.568501][T11806] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1902'. [ 323.629015][T11808] VFS: could not find a valid V7 on nullb0. [ 323.648457][T11810] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1904'. [ 323.871665][T11816] FAULT_INJECTION: forcing a failure. [ 323.871665][T11816] name failslab, interval 1, probability 0, space 0, times 0 [ 323.877228][T11816] CPU: 2 UID: 0 PID: 11816 Comm: syz.3.1906 Not tainted 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 323.881902][T11816] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 323.886426][T11816] Call Trace: [ 323.887871][T11816] [ 323.889147][T11816] dump_stack_lvl+0x16c/0x1f0 [ 323.891163][T11816] should_fail_ex+0x497/0x5b0 [ 323.893183][T11816] ? fs_reclaim_acquire+0xae/0x160 [ 323.895377][T11816] should_failslab+0xc2/0x120 [ 323.897384][T11816] __kmalloc_noprof+0xcb/0x410 [ 323.899445][T11816] ? __pfx_lock_acquire+0x10/0x10 [ 323.901595][T11816] tomoyo_realpath_from_path+0xbf/0x710 [ 323.903962][T11816] ? tomoyo_profile+0x47/0x60 [ 323.905986][T11816] tomoyo_path_number_perm+0x245/0x5b0 [ 323.908286][T11816] ? tomoyo_path_number_perm+0x232/0x5b0 [ 323.910661][T11816] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 323.913215][T11816] ? __pfx_lock_release+0x10/0x10 [ 323.915366][T11816] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 323.917918][T11816] ? __fget_files+0x256/0x400 [ 323.919960][T11816] security_file_ioctl_compat+0x75/0xc0 [ 323.922368][T11816] __do_compat_sys_ioctl+0x5d/0x330 [ 323.924748][T11816] __do_fast_syscall_32+0x73/0x120 [ 323.926985][T11816] do_fast_syscall_32+0x32/0x80 [ 323.929103][T11816] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 323.931890][T11816] RIP: 0023:0xf73be579 [ 323.933706][T11816] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 323.942326][T11816] RSP: 002b:00000000f56c656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 323.946079][T11816] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040045612 [ 323.949581][T11816] RDX: 0000000020000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 323.953048][T11816] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 323.956557][T11816] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 323.960003][T11816] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 323.963369][T11816] [ 323.965852][T11816] ERROR: Out of memory at tomoyo_realpath_from_path. [ 324.002241][T11819] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1907'. [ 324.098494][T11832] €Â: renamed from bridge_slave_0 (while UP) [ 324.113727][T11834] FAULT_INJECTION: forcing a failure. [ 324.113727][T11834] name failslab, interval 1, probability 0, space 0, times 0 [ 324.118806][T11834] CPU: 3 UID: 0 PID: 11834 Comm: syz.0.1912 Not tainted 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 324.123092][T11834] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 324.127147][T11834] Call Trace: [ 324.128491][T11834] [ 324.129737][T11834] dump_stack_lvl+0x16c/0x1f0 [ 324.131502][T11834] should_fail_ex+0x497/0x5b0 [ 324.133081][T11834] ? fs_reclaim_acquire+0xae/0x160 [ 324.134816][T11834] should_failslab+0xc2/0x120 [ 324.136392][T11834] __kmalloc_noprof+0xcb/0x410 [ 324.137984][T11834] ? __pfx_lock_acquire+0x10/0x10 [ 324.139951][T11834] tomoyo_realpath_from_path+0xbf/0x710 [ 324.142284][T11834] ? tomoyo_profile+0x47/0x60 [ 324.144246][T11834] tomoyo_path_number_perm+0x245/0x5b0 [ 324.146527][T11834] ? tomoyo_path_number_perm+0x232/0x5b0 [ 324.148803][T11834] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 324.151125][T11834] ? __pfx_lock_release+0x10/0x10 [ 324.153169][T11834] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 324.155687][T11834] ? __fget_files+0x256/0x400 [ 324.157704][T11834] security_file_ioctl_compat+0x75/0xc0 [ 324.159573][T11834] __do_compat_sys_ioctl+0x5d/0x330 [ 324.161255][T11834] __do_fast_syscall_32+0x73/0x120 [ 324.162920][T11834] do_fast_syscall_32+0x32/0x80 [ 324.164578][T11834] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 324.166649][T11834] RIP: 0023:0xf742e579 [ 324.168001][T11834] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 324.175598][T11834] RSP: 002b:00000000f573656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 324.179245][T11834] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000008923 [ 324.182667][T11834] RDX: 0000000020000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 324.185324][T11834] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 324.187955][T11834] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 324.190986][T11834] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 324.194214][T11834] [ 324.196815][T11834] ERROR: Out of memory at tomoyo_realpath_from_path. [ 324.199696][T11834] €Â: renamed from bridge_slave_0 (while UP) [ 324.245722][T11837] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1913'. [ 324.361760][T11845] FAULT_INJECTION: forcing a failure. [ 324.361760][T11845] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 324.367458][T11845] CPU: 3 UID: 0 PID: 11845 Comm: syz.0.1917 Not tainted 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 324.371972][T11845] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 324.376565][T11845] Call Trace: [ 324.378066][T11845] [ 324.379331][T11845] dump_stack_lvl+0x16c/0x1f0 [ 324.381099][T11845] should_fail_ex+0x497/0x5b0 [ 324.382855][T11845] _copy_from_user+0x30/0xf0 [ 324.384477][T11845] get_compat_msghdr+0xa8/0x170 [ 324.386194][T11845] ? __pfx_get_compat_msghdr+0x10/0x10 [ 324.388339][T11845] ? __pfx___lock_acquire+0x10/0x10 [ 324.390549][T11845] ___sys_sendmsg+0x1b0/0x1e0 [ 324.392592][T11845] ? __pfx____sys_sendmsg+0x10/0x10 [ 324.394400][T11845] ? ksys_write+0x21c/0x260 [ 324.396078][T11845] ? __fget_light+0x173/0x210 [ 324.397732][T11845] __sys_sendmsg+0x117/0x1f0 [ 324.399341][T11845] ? __pfx___sys_sendmsg+0x10/0x10 [ 324.401065][T11845] __do_fast_syscall_32+0x73/0x120 [ 324.402822][T11845] do_fast_syscall_32+0x32/0x80 [ 324.404548][T11845] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 324.407154][T11845] RIP: 0023:0xf742e579 [ 324.408706][T11845] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 324.416887][T11845] RSP: 002b:00000000f573656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 324.420151][T11845] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000080 [ 324.423242][T11845] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 324.426157][T11845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 324.429498][T11845] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 324.432514][T11845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 324.435726][T11845] [ 324.523981][T11851] ptrace attach of "/syz-executor exec"[5344] was attempted by "/syz-executor exec"[11851] [ 324.532973][ T5404] vhci_hcd: vhci_device speed not set [ 324.630862][T11855] BUG: Bad page state in process syz.2.1921 pfn:2142c [ 324.633197][T11855] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2142c SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 324.638941][T11855] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 324.641761][T11855] raw: 00fff00000000000 dead000000000040 ffff88805326a000 0000000000000000 [ 324.645226][T11855] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 324.648438][T11855] page dumped because: page_pool leak [ 324.650218][T11855] page_owner tracks the page as allocated [ 324.652337][T11855] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 11855, tgid 11854 (syz.2.1921), ts 324622587167, free_ts 323975001321 [ 324.659501][T11855] post_alloc_hook+0x2d1/0x350 [ 324.661937][T11855] get_page_from_freelist+0x1351/0x2e50 [ 324.663939][T11855] __alloc_pages_noprof+0x22b/0x2460 [ 324.665856][T11855] alloc_pages_bulk_noprof+0x742/0x14f0 [ 324.667708][T11855] __page_pool_alloc_pages_slow+0x19b/0xb30 [ 324.669991][T11855] page_pool_alloc_pages+0xb5/0x110 [ 324.671895][T11855] xdp_test_run_batch.constprop.0+0x30f/0x1880 [ 324.674258][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 324.676109][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 324.677833][T11855] __sys_bpf+0x1af6/0x55e0 [ 324.679291][T11855] __ia32_sys_bpf+0x76/0xe0 [ 324.680765][T11855] __do_fast_syscall_32+0x73/0x120 [ 324.682452][T11855] do_fast_syscall_32+0x32/0x80 [ 324.684107][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 324.686207][T11855] page last free pid 11815 tgid 11815 stack trace: [ 324.688680][T11855] free_unref_page+0x64a/0xe40 [ 324.690781][T11855] vfree+0x181/0x7a0 [ 324.692441][T11855] vb2_vmalloc_put+0x7b/0xc0 [ 324.694090][T11855] __vb2_buf_mem_free+0x154/0x2c0 [ 324.695870][T11855] __vb2_queue_free+0x861/0xac0 [ 324.697837][T11855] vb2_core_queue_release+0x70/0x190 [ 324.699968][T11855] v4l2_m2m_ctx_release+0x2a/0x40 [ 324.702147][T11855] vim2m_release+0xe8/0x170 [ 324.704009][T11855] v4l2_release+0x238/0x460 [ 324.705952][T11855] __fput+0x408/0xbb0 [ 324.707552][T11855] task_work_run+0x14e/0x250 [ 324.709087][T11855] syscall_exit_to_user_mode+0x27b/0x2a0 [ 324.711559][T11855] __do_fast_syscall_32+0x80/0x120 [ 324.713744][T11855] do_fast_syscall_32+0x32/0x80 [ 324.715475][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 324.717906][T11855] Modules linked in: [ 324.719582][T11855] CPU: 3 UID: 0 PID: 11855 Comm: syz.2.1921 Not tainted 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 324.723614][T11855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 324.728108][T11855] Call Trace: [ 324.729524][T11855] [ 324.730782][T11855] dump_stack_lvl+0x16c/0x1f0 [ 324.732825][T11855] bad_page+0xb3/0x220 [ 324.734582][T11855] ? __pfx_bad_page+0x10/0x10 [ 324.736635][T11855] ? page_bad_reason+0x9d/0x1e0 [ 324.738738][T11855] free_unref_page+0x69e/0xe40 [ 324.740814][T11855] ? __phys_addr+0xc6/0x150 [ 324.742775][T11855] skb_free_head+0xa0/0x1d0 [ 324.744757][T11855] skb_release_data+0x75c/0x980 [ 324.746851][T11855] ? __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 324.749423][T11855] ? rcu_is_watching+0x12/0xc0 [ 324.751173][T11855] sk_skb_reason_drop+0x133/0x200 [ 324.753298][T11855] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 324.755585][T11855] ? kernel_text_address+0x8d/0x100 [ 324.757818][T11855] ? __lock_acquire+0x1620/0x3cb0 [ 324.759744][T11855] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 324.762352][T11855] ? hlock_class+0x4e/0x130 [ 324.764324][T11855] ? __lock_acquire+0xbdd/0x3cb0 [ 324.766106][T11855] ? lock_acquire+0x1b1/0x560 [ 324.767943][T11855] ? find_held_lock+0x2d/0x110 [ 324.769880][T11855] ? __pfx___lock_acquire+0x10/0x10 [ 324.772016][T11855] __netif_receive_skb_list_core+0x357/0x950 [ 324.774584][T11855] ? lock_acquire+0x1b1/0x560 [ 324.776600][T11855] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 324.779367][T11855] ? timekeeping_debug_get_ns+0x334/0x5b0 [ 324.781631][T11855] netif_receive_skb_list_internal+0x753/0xda0 [ 324.784039][T11855] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 324.786446][T11855] ? __pfx_eth_type_trans+0x10/0x10 [ 324.788543][T11855] ? __build_skb_around+0x278/0x3b0 [ 324.790702][T11855] netif_receive_skb_list+0x4f/0x4a0 [ 324.792580][T11855] xdp_test_run_batch.constprop.0+0x1296/0x1880 [ 324.795259][T11855] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 324.797828][T11855] ? bpf_test_timer_continue+0x150/0x3d0 [ 324.800098][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 324.802249][T11855] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 324.804750][T11855] ? find_held_lock+0x2d/0x110 [ 324.806845][T11855] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 324.809352][T11855] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 324.811615][T11855] ? 0xffffffffa0004340 [ 324.813352][T11855] ? 0xffffffffa0004340 [ 324.815052][T11855] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 324.817501][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 324.819515][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 324.821770][T11855] ? fput+0x32/0x390 [ 324.823463][T11855] ? __bpf_prog_get+0xa0/0x2f0 [ 324.825555][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 324.828046][T11855] __sys_bpf+0x1af6/0x55e0 [ 324.829954][T11855] ? __pfx___sys_bpf+0x10/0x10 [ 324.832007][T11855] ? futex_wait+0x121/0x380 [ 324.833889][T11855] ? __pfx_futex_wait+0x10/0x10 [ 324.835885][T11855] ? fd_install+0x223/0x750 [ 324.837531][T11855] ? __pfx_lock_release+0x10/0x10 [ 324.839629][T11855] ? do_futex+0x123/0x350 [ 324.841367][T11855] ? __pfx_do_futex+0x10/0x10 [ 324.843320][T11855] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 324.845799][T11855] __ia32_sys_bpf+0x76/0xe0 [ 324.847773][T11855] __do_fast_syscall_32+0x73/0x120 [ 324.849876][T11855] do_fast_syscall_32+0x32/0x80 [ 324.851965][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 324.854574][T11855] RIP: 0023:0xf7f56579 [ 324.856265][T11855] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 324.863760][T11855] RSP: 002b:00000000f56f656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 324.867243][T11855] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000600 [ 324.870171][T11855] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 324.873482][T11855] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 324.876786][T11855] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 324.879642][T11855] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 324.882837][T11855] [ 324.883996][T11855] Disabling lock debugging due to kernel taint [ 324.886180][T11855] BUG: Bad page state in process syz.2.1921 pfn:21443 [ 324.888795][T11855] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x21443 [ 324.892100][T11855] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 324.894874][T11855] raw: 00fff00000000000 dead000000000040 ffff88805326a000 0000000000000000 [ 324.898023][T11855] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 324.901334][T11855] page dumped because: page_pool leak [ 324.903283][T11855] page_owner tracks the page as allocated [ 324.905448][T11855] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 11855, tgid 11854 (syz.2.1921), ts 324622578448, free_ts 323975016404 [ 324.912128][T11855] post_alloc_hook+0x2d1/0x350 [ 324.914100][T11855] get_page_from_freelist+0x1351/0x2e50 [ 324.916456][T11855] __alloc_pages_noprof+0x22b/0x2460 [ 324.918711][T11855] alloc_pages_bulk_noprof+0x742/0x14f0 [ 324.920729][T11855] __page_pool_alloc_pages_slow+0x19b/0xb30 [ 324.922991][T11855] page_pool_alloc_pages+0xb5/0x110 [ 324.925193][T11855] xdp_test_run_batch.constprop.0+0x30f/0x1880 [ 324.927315][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 324.929361][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 324.931567][T11855] __sys_bpf+0x1af6/0x55e0 [ 324.933048][T11855] __ia32_sys_bpf+0x76/0xe0 [ 324.934830][T11855] __do_fast_syscall_32+0x73/0x120 [ 324.937023][T11855] do_fast_syscall_32+0x32/0x80 [ 324.938698][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 324.940707][T11737] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 324.941080][T11855] page last free pid 11815 tgid 11815 stack trace: [ 324.946528][T11855] free_unref_page+0x64a/0xe40 [ 324.948152][T11855] vfree+0x181/0x7a0 [ 324.949553][T11855] vb2_vmalloc_put+0x7b/0xc0 [ 324.951442][T11855] __vb2_buf_mem_free+0x154/0x2c0 [ 324.953217][T11855] __vb2_queue_free+0x861/0xac0 [ 324.954905][T11855] vb2_core_queue_release+0x70/0x190 [ 324.956694][T11855] v4l2_m2m_ctx_release+0x2a/0x40 [ 324.958385][T11855] vim2m_release+0xe8/0x170 [ 324.959944][T11855] v4l2_release+0x238/0x460 [ 324.961525][T11855] __fput+0x408/0xbb0 [ 324.962894][T11855] task_work_run+0x14e/0x250 [ 324.964482][T11855] syscall_exit_to_user_mode+0x27b/0x2a0 [ 324.966377][T11855] __do_fast_syscall_32+0x80/0x120 [ 324.968123][T11855] do_fast_syscall_32+0x32/0x80 [ 324.969771][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 324.971933][T11855] Modules linked in: [ 324.973246][T11855] CPU: 3 UID: 0 PID: 11855 Comm: syz.2.1921 Tainted: G B 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 324.977273][T11855] Tainted: [B]=BAD_PAGE [ 324.978651][T11855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 324.982208][T11855] Call Trace: [ 324.983587][T11855] [ 324.984827][T11855] dump_stack_lvl+0x16c/0x1f0 [ 324.986428][T11855] bad_page+0xb3/0x220 [ 324.987819][T11855] ? __pfx_bad_page+0x10/0x10 [ 324.989427][T11855] ? page_bad_reason+0x9d/0x1e0 [ 324.991225][T11855] free_unref_page+0x69e/0xe40 [ 324.993076][T11855] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 324.995300][T11855] ? __phys_addr+0xc6/0x150 [ 324.997249][T11855] skb_free_head+0xa0/0x1d0 [ 324.999272][T11855] skb_release_data+0x75c/0x980 [ 325.001267][T11855] ? __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 325.004291][T11855] ? rcu_is_watching+0x12/0xc0 [ 325.006424][T11855] sk_skb_reason_drop+0x133/0x200 [ 325.008673][T11855] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 325.011474][T11855] ? kernel_text_address+0x8d/0x100 [ 325.013617][T11855] ? __lock_acquire+0x1620/0x3cb0 [ 325.015852][T11855] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 325.018714][T11855] ? hlock_class+0x4e/0x130 [ 325.020576][T11855] ? __lock_acquire+0xbdd/0x3cb0 [ 325.022249][T11855] ? lock_acquire+0x1b1/0x560 [ 325.023909][T11855] ? find_held_lock+0x2d/0x110 [ 325.025568][T11855] ? __pfx___lock_acquire+0x10/0x10 [ 325.027645][T11855] __netif_receive_skb_list_core+0x357/0x950 [ 325.029922][T11855] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 325.032378][T11855] ? timekeeping_debug_get_ns+0x334/0x5b0 [ 325.034529][T11855] netif_receive_skb_list_internal+0x753/0xda0 [ 325.036924][T11855] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 325.039238][T11855] ? __pfx_eth_type_trans+0x10/0x10 [ 325.041069][T11855] ? __build_skb_around+0x278/0x3b0 [ 325.043283][T11855] netif_receive_skb_list+0x4f/0x4a0 [ 325.045231][T11855] xdp_test_run_batch.constprop.0+0x1296/0x1880 [ 325.047302][T11855] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 325.049524][T11855] ? bpf_test_timer_continue+0x150/0x3d0 [ 325.051453][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 325.053445][T11855] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 325.055446][T11855] ? find_held_lock+0x2d/0x110 [ 325.057414][T11855] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 325.059919][T11855] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 325.062145][T11855] ? 0xffffffffa0004340 [ 325.063872][T11855] ? 0xffffffffa0004340 [ 325.065551][T11855] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 325.067581][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 325.069409][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 325.071445][T11855] ? fput+0x32/0x390 [ 325.073085][T11855] ? __bpf_prog_get+0xa0/0x2f0 [ 325.074733][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 325.076811][T11855] __sys_bpf+0x1af6/0x55e0 [ 325.078331][T11855] ? __pfx___sys_bpf+0x10/0x10 [ 325.080284][T11855] ? futex_wait+0x121/0x380 [ 325.082071][T11855] ? __pfx_futex_wait+0x10/0x10 [ 325.083770][T11855] ? fd_install+0x223/0x750 [ 325.085226][T11855] ? __pfx_lock_release+0x10/0x10 [ 325.086825][T11855] ? do_futex+0x123/0x350 [ 325.088129][T11855] ? __pfx_do_futex+0x10/0x10 [ 325.089697][T11855] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 325.091912][T11855] __ia32_sys_bpf+0x76/0xe0 [ 325.093690][T11855] __do_fast_syscall_32+0x73/0x120 [ 325.095868][T11855] do_fast_syscall_32+0x32/0x80 [ 325.097425][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 325.099336][T11855] RIP: 0023:0xf7f56579 [ 325.100733][T11855] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 325.107992][T11855] RSP: 002b:00000000f56f656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 325.111361][T11855] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000600 [ 325.114392][T11855] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 325.117380][T11855] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 325.120919][T11855] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 325.124246][T11855] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 325.127090][T11855] [ 325.128609][T11855] BUG: Bad page state in process syz.2.1921 pfn:1b5f3 [ 325.131351][T11855] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88801b5f3c60 pfn:0x1b5f3 [ 325.135190][T11855] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 325.138266][T11855] raw: 00fff00000000000 dead000000000040 ffff88805326a000 0000000000000000 [ 325.142018][T11855] raw: ffff88801b5f3c60 0000000000000001 00000000ffffffff 0000000000000000 [ 325.145391][T11855] page dumped because: page_pool leak [ 325.147733][T11855] page_owner tracks the page as allocated [ 325.150208][T11855] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 11855, tgid 11854 (syz.2.1921), ts 324622570242, free_ts 323975030666 [ 325.158343][T11855] post_alloc_hook+0x2d1/0x350 [ 325.160517][T11855] get_page_from_freelist+0x1351/0x2e50 [ 325.163036][T11855] __alloc_pages_noprof+0x22b/0x2460 [ 325.165402][T11855] alloc_pages_bulk_noprof+0x742/0x14f0 [ 325.167868][T11855] __page_pool_alloc_pages_slow+0x19b/0xb30 [ 325.170497][T11855] page_pool_alloc_pages+0xb5/0x110 [ 325.172576][T11855] xdp_test_run_batch.constprop.0+0x30f/0x1880 [ 325.174638][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 325.176702][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 325.178960][T11855] __sys_bpf+0x1af6/0x55e0 [ 325.180704][T11855] __ia32_sys_bpf+0x76/0xe0 [ 325.182327][T11855] __do_fast_syscall_32+0x73/0x120 [ 325.184237][T11855] do_fast_syscall_32+0x32/0x80 [ 325.186036][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 325.188591][T11855] page last free pid 11815 tgid 11815 stack trace: [ 325.191296][T11855] free_unref_page+0x64a/0xe40 [ 325.193293][T11855] vfree+0x181/0x7a0 [ 325.194758][T11855] vb2_vmalloc_put+0x7b/0xc0 [ 325.196493][T11855] __vb2_buf_mem_free+0x154/0x2c0 [ 325.198272][T11855] __vb2_queue_free+0x861/0xac0 [ 325.200237][T11855] vb2_core_queue_release+0x70/0x190 [ 325.202191][T11855] v4l2_m2m_ctx_release+0x2a/0x40 [ 325.204008][T11855] vim2m_release+0xe8/0x170 [ 325.205562][T11855] v4l2_release+0x238/0x460 [ 325.207288][T11855] __fput+0x408/0xbb0 [ 325.208677][T11855] task_work_run+0x14e/0x250 [ 325.210306][T11855] syscall_exit_to_user_mode+0x27b/0x2a0 [ 325.212720][T11855] __do_fast_syscall_32+0x80/0x120 [ 325.214780][T11855] do_fast_syscall_32+0x32/0x80 [ 325.216697][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 325.219226][T11855] Modules linked in: [ 325.220854][T11855] CPU: 3 UID: 0 PID: 11855 Comm: syz.2.1921 Tainted: G B 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 325.225711][T11855] Tainted: [B]=BAD_PAGE [ 325.227274][T11855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 325.231598][T11855] Call Trace: [ 325.232900][T11855] [ 325.234154][T11855] dump_stack_lvl+0x16c/0x1f0 [ 325.235800][T11855] bad_page+0xb3/0x220 [ 325.237191][T11855] ? __pfx_bad_page+0x10/0x10 [ 325.239001][T11855] ? page_bad_reason+0x9d/0x1e0 [ 325.241063][T11855] free_unref_page+0x69e/0xe40 [ 325.242712][T11855] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 325.245153][T11855] ? __phys_addr+0xc6/0x150 [ 325.246718][T11855] skb_free_head+0xa0/0x1d0 [ 325.248692][T11855] skb_release_data+0x75c/0x980 [ 325.250804][T11855] ? __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 325.253604][T11855] ? rcu_is_watching+0x12/0xc0 [ 325.255473][T11855] sk_skb_reason_drop+0x133/0x200 [ 325.257459][T11855] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 325.259703][T11855] ? kernel_text_address+0x8d/0x100 [ 325.261550][T11855] ? __lock_acquire+0x1620/0x3cb0 [ 325.263782][T11855] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 325.266834][T11855] ? hlock_class+0x4e/0x130 [ 325.268909][T11855] ? __lock_acquire+0xbdd/0x3cb0 [ 325.271184][T11855] ? lock_acquire+0x1b1/0x560 [ 325.273313][T11855] ? find_held_lock+0x2d/0x110 [ 325.275485][T11855] ? __pfx___lock_acquire+0x10/0x10 [ 325.277832][T11855] __netif_receive_skb_list_core+0x357/0x950 [ 325.280565][T11855] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 325.283483][T11855] ? timekeeping_debug_get_ns+0x334/0x5b0 [ 325.286033][T11855] netif_receive_skb_list_internal+0x753/0xda0 [ 325.288828][T11855] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 325.291843][T11855] ? __pfx_eth_type_trans+0x10/0x10 [ 325.293988][T11855] ? __build_skb_around+0x278/0x3b0 [ 325.296255][T11855] netif_receive_skb_list+0x4f/0x4a0 [ 325.298642][T11855] xdp_test_run_batch.constprop.0+0x1296/0x1880 [ 325.301457][T11855] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 325.304447][T11855] ? bpf_test_timer_continue+0x150/0x3d0 [ 325.306974][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 325.309375][T11855] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 325.312012][T11855] ? find_held_lock+0x2d/0x110 [ 325.314160][T11855] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 325.316806][T11855] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 325.319186][T11855] ? 0xffffffffa0004340 [ 325.321057][T11855] ? 0xffffffffa0004340 [ 325.322949][T11855] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 325.325662][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 325.328109][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 325.330814][T11855] ? fput+0x32/0x390 [ 325.332597][T11855] ? __bpf_prog_get+0xa0/0x2f0 [ 325.334787][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 325.337371][T11855] __sys_bpf+0x1af6/0x55e0 [ 325.339396][T11855] ? __pfx___sys_bpf+0x10/0x10 [ 325.341563][T11855] ? futex_wait+0x121/0x380 [ 325.343626][T11855] ? __pfx_futex_wait+0x10/0x10 [ 325.345837][T11855] ? fd_install+0x223/0x750 [ 325.347895][T11855] ? __pfx_lock_release+0x10/0x10 [ 325.350146][T11855] ? do_futex+0x123/0x350 [ 325.351881][T11855] ? __pfx_do_futex+0x10/0x10 [ 325.353760][T11855] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 325.356394][T11855] __ia32_sys_bpf+0x76/0xe0 [ 325.358463][T11855] __do_fast_syscall_32+0x73/0x120 [ 325.360770][T11855] do_fast_syscall_32+0x32/0x80 [ 325.362935][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 325.365823][T11855] RIP: 0023:0xf7f56579 [ 325.367874][T11855] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 325.376559][T11855] RSP: 002b:00000000f56f656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 325.380203][T11855] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000600 [ 325.383762][T11855] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 325.387072][T11855] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 325.390509][T11855] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 325.394077][T11855] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 325.397637][T11855] [ 325.399163][T11855] BUG: Bad page state in process syz.2.1921 pfn:21549 [ 325.402211][T11855] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x21549 [ 325.406149][T11855] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 325.409330][T11855] raw: 00fff00000000000 dead000000000040 ffff88805326a000 0000000000000000 [ 325.413250][T11855] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 325.416735][T11855] page dumped because: page_pool leak [ 325.418854][T11855] page_owner tracks the page as allocated [ 325.421184][T11855] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 11855, tgid 11854 (syz.2.1921), ts 324622561965, free_ts 323975044333 [ 325.429107][T11855] post_alloc_hook+0x2d1/0x350 [ 325.431283][T11855] get_page_from_freelist+0x1351/0x2e50 [ 325.433702][T11855] __alloc_pages_noprof+0x22b/0x2460 [ 325.436042][T11855] alloc_pages_bulk_noprof+0x742/0x14f0 [ 325.438353][T11855] __page_pool_alloc_pages_slow+0x19b/0xb30 [ 325.440940][T11855] page_pool_alloc_pages+0xb5/0x110 [ 325.443170][T11855] xdp_test_run_batch.constprop.0+0x30f/0x1880 [ 325.445897][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 325.448188][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 325.450494][T11855] __sys_bpf+0x1af6/0x55e0 [ 325.452455][T11855] __ia32_sys_bpf+0x76/0xe0 [ 325.454394][T11855] __do_fast_syscall_32+0x73/0x120 [ 325.456597][T11855] do_fast_syscall_32+0x32/0x80 [ 325.458697][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 325.461500][T11855] page last free pid 11815 tgid 11815 stack trace: [ 325.464285][T11855] free_unref_page+0x64a/0xe40 [ 325.466405][T11855] vfree+0x181/0x7a0 [ 325.468113][T11855] vb2_vmalloc_put+0x7b/0xc0 [ 325.470103][T11855] __vb2_buf_mem_free+0x154/0x2c0 [ 325.472357][T11855] __vb2_queue_free+0x861/0xac0 [ 325.474472][T11855] vb2_core_queue_release+0x70/0x190 [ 325.476789][T11855] v4l2_m2m_ctx_release+0x2a/0x40 [ 325.479017][T11855] vim2m_release+0xe8/0x170 [ 325.481111][T11855] v4l2_release+0x238/0x460 [ 325.483106][T11855] __fput+0x408/0xbb0 [ 325.484865][T11855] task_work_run+0x14e/0x250 [ 325.486942][T11855] syscall_exit_to_user_mode+0x27b/0x2a0 [ 325.489375][T11855] __do_fast_syscall_32+0x80/0x120 [ 325.491677][T11855] do_fast_syscall_32+0x32/0x80 [ 325.493810][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 325.496585][T11855] Modules linked in: [ 325.498338][T11855] CPU: 3 UID: 0 PID: 11855 Comm: syz.2.1921 Tainted: G B 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 325.503775][T11855] Tainted: [B]=BAD_PAGE [ 325.505673][T11855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 325.510251][T11855] Call Trace: [ 325.511754][T11855] [ 325.513101][T11855] dump_stack_lvl+0x16c/0x1f0 [ 325.515245][T11855] bad_page+0xb3/0x220 [ 325.517106][T11855] ? __pfx_bad_page+0x10/0x10 [ 325.519246][T11855] ? page_bad_reason+0x9d/0x1e0 [ 325.521450][T11855] free_unref_page+0x69e/0xe40 [ 325.523621][T11855] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 325.526340][T11855] ? __phys_addr+0xc6/0x150 [ 325.528407][T11855] skb_free_head+0xa0/0x1d0 [ 325.530476][T11855] skb_release_data+0x75c/0x980 [ 325.532697][T11855] ? __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 325.535777][T11855] ? rcu_is_watching+0x12/0xc0 [ 325.537952][T11855] sk_skb_reason_drop+0x133/0x200 [ 325.540246][T11855] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 325.543222][T11855] ? kernel_text_address+0x8d/0x100 [ 325.545596][T11855] ? __lock_acquire+0x1620/0x3cb0 [ 325.547873][T11855] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 325.551039][T11855] ? hlock_class+0x4e/0x130 [ 325.553064][T11855] ? __lock_acquire+0xbdd/0x3cb0 [ 325.555297][T11855] ? lock_acquire+0x1b1/0x560 [ 325.557430][T11855] ? find_held_lock+0x2d/0x110 [ 325.559597][T11855] ? __pfx___lock_acquire+0x10/0x10 [ 325.561938][T11855] __netif_receive_skb_list_core+0x357/0x950 [ 325.564549][T11855] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 325.567453][T11855] ? timekeeping_debug_get_ns+0x334/0x5b0 [ 325.570008][T11855] netif_receive_skb_list_internal+0x753/0xda0 [ 325.572779][T11855] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 325.575750][T11855] ? __pfx_eth_type_trans+0x10/0x10 [ 325.578053][T11855] ? __build_skb_around+0x278/0x3b0 [ 325.580397][T11855] netif_receive_skb_list+0x4f/0x4a0 [ 325.582786][T11855] xdp_test_run_batch.constprop.0+0x1296/0x1880 [ 325.585626][T11855] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 325.588588][T11855] ? bpf_test_timer_continue+0x150/0x3d0 [ 325.591094][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 325.593421][T11855] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 325.596060][T11855] ? find_held_lock+0x2d/0x110 [ 325.598224][T11855] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 325.600911][T11855] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 325.603320][T11855] ? 0xffffffffa0004340 [ 325.605214][T11855] ? 0xffffffffa0004340 [ 325.607114][T11855] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 325.609775][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 325.612204][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 325.614811][T11855] ? fput+0x32/0x390 [ 325.616599][T11855] ? __bpf_prog_get+0xa0/0x2f0 [ 325.618754][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 325.621389][T11855] __sys_bpf+0x1af6/0x55e0 [ 325.623399][T11855] ? __pfx___sys_bpf+0x10/0x10 [ 325.625542][T11855] ? futex_wait+0x121/0x380 [ 325.627601][T11855] ? __pfx_futex_wait+0x10/0x10 [ 325.629806][T11855] ? fd_install+0x223/0x750 [ 325.631881][T11855] ? __pfx_lock_release+0x10/0x10 [ 325.634151][T11855] ? do_futex+0x123/0x350 [ 325.636118][T11855] ? __pfx_do_futex+0x10/0x10 [ 325.638257][T11855] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 325.640968][T11855] __ia32_sys_bpf+0x76/0xe0 [ 325.643035][T11855] __do_fast_syscall_32+0x73/0x120 [ 325.645372][T11855] do_fast_syscall_32+0x32/0x80 [ 325.647604][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 325.650451][T11855] RIP: 0023:0xf7f56579 [ 325.652314][T11855] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 325.660876][T11855] RSP: 002b:00000000f56f656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 325.664631][T11855] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000600 [ 325.668132][T11855] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 325.671591][T11855] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 325.675122][T11855] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 325.678490][T11855] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 325.681885][T11855] [ 325.683396][T11855] BUG: Bad page state in process syz.2.1921 pfn:2153f [ 325.686370][T11855] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2153f [ 325.690169][T11855] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 325.693308][T11855] raw: 00fff00000000000 dead000000000040 ffff88805326a000 0000000000000000 [ 325.697089][T11855] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 325.700908][T11855] page dumped because: page_pool leak [ 325.703289][T11855] page_owner tracks the page as allocated [ 325.705765][T11855] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 11855, tgid 11854 (syz.2.1921), ts 324622553911, free_ts 323975059389 [ 325.713884][T11855] post_alloc_hook+0x2d1/0x350 [ 325.715960][T11855] get_page_from_freelist+0x1351/0x2e50 [ 325.718404][T11855] __alloc_pages_noprof+0x22b/0x2460 [ 325.720821][T11855] alloc_pages_bulk_noprof+0x742/0x14f0 [ 325.723276][T11855] __page_pool_alloc_pages_slow+0x19b/0xb30 [ 325.725883][T11855] page_pool_alloc_pages+0xb5/0x110 [ 325.728171][T11855] xdp_test_run_batch.constprop.0+0x30f/0x1880 [ 325.730991][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 325.733291][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 325.735661][T11855] __sys_bpf+0x1af6/0x55e0 [ 325.737641][T11855] __ia32_sys_bpf+0x76/0xe0 [ 325.739663][T11855] __do_fast_syscall_32+0x73/0x120 [ 325.742006][T11855] do_fast_syscall_32+0x32/0x80 [ 325.744162][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 325.746975][T11855] page last free pid 11815 tgid 11815 stack trace: [ 325.749760][T11855] free_unref_page+0x64a/0xe40 [ 325.751949][T11855] vfree+0x181/0x7a0 [ 325.753686][T11855] vb2_vmalloc_put+0x7b/0xc0 [ 325.755574][T11855] __vb2_buf_mem_free+0x154/0x2c0 [ 325.757261][T11855] __vb2_queue_free+0x861/0xac0 [ 325.758892][T11855] vb2_core_queue_release+0x70/0x190 [ 325.760772][T11855] v4l2_m2m_ctx_release+0x2a/0x40 [ 325.762677][T11855] vim2m_release+0xe8/0x170 [ 325.764252][T11855] v4l2_release+0x238/0x460 [ 325.765793][T11855] __fput+0x408/0xbb0 [ 325.767118][T11855] task_work_run+0x14e/0x250 [ 325.768694][T11855] syscall_exit_to_user_mode+0x27b/0x2a0 [ 325.770653][T11855] __do_fast_syscall_32+0x80/0x120 [ 325.772582][T11855] do_fast_syscall_32+0x32/0x80 [ 325.774232][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 325.776838][T11855] Modules linked in: [ 325.778589][T11855] CPU: 3 UID: 0 PID: 11855 Comm: syz.2.1921 Tainted: G B 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 325.783247][T11855] Tainted: [B]=BAD_PAGE [ 325.784664][T11855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 325.788318][T11855] Call Trace: [ 325.789446][T11855] [ 325.790449][T11855] dump_stack_lvl+0x16c/0x1f0 [ 325.792045][T11855] bad_page+0xb3/0x220 [ 325.793436][T11855] ? __pfx_bad_page+0x10/0x10 [ 325.794995][T11855] ? page_bad_reason+0x9d/0x1e0 [ 325.796658][T11855] free_unref_page+0x69e/0xe40 [ 325.798282][T11855] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 325.800380][T11855] ? __phys_addr+0xc6/0x150 [ 325.801916][T11855] skb_free_head+0xa0/0x1d0 [ 325.803591][T11855] skb_release_data+0x75c/0x980 [ 325.805271][T11855] ? __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 325.807591][T11855] ? rcu_is_watching+0x12/0xc0 [ 325.809418][T11855] sk_skb_reason_drop+0x133/0x200 [ 325.811166][T11855] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 325.813419][T11855] ? kernel_text_address+0x8d/0x100 [ 325.815553][T11855] ? __lock_acquire+0x1620/0x3cb0 [ 325.817319][T11855] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 325.820008][T11855] ? hlock_class+0x4e/0x130 [ 325.821657][T11855] ? __lock_acquire+0xbdd/0x3cb0 [ 325.823681][T11855] ? lock_acquire+0x1b1/0x560 [ 325.825648][T11855] ? find_held_lock+0x2d/0x110 [ 325.827515][T11855] ? __pfx___lock_acquire+0x10/0x10 [ 325.829242][T11855] __netif_receive_skb_list_core+0x357/0x950 [ 325.831308][T11855] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 325.833369][T11855] ? timekeeping_debug_get_ns+0x334/0x5b0 [ 325.835282][T11855] netif_receive_skb_list_internal+0x753/0xda0 [ 325.837608][T11855] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 325.840540][T11855] ? __pfx_eth_type_trans+0x10/0x10 [ 325.842819][T11855] ? __build_skb_around+0x278/0x3b0 [ 325.845292][T11855] netif_receive_skb_list+0x4f/0x4a0 [ 325.847639][T11855] xdp_test_run_batch.constprop.0+0x1296/0x1880 [ 325.850200][T11855] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 325.852553][T11855] ? bpf_test_timer_continue+0x150/0x3d0 [ 325.854418][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 325.856229][T11855] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 325.858538][T11855] ? find_held_lock+0x2d/0x110 [ 325.860730][T11855] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 325.863306][T11855] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 325.865596][T11855] ? 0xffffffffa0004340 [ 325.867381][T11855] ? 0xffffffffa0004340 [ 325.869251][T11855] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 325.871925][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 325.874340][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 325.876892][T11855] ? fput+0x32/0x390 [ 325.878576][T11855] ? __bpf_prog_get+0xa0/0x2f0 [ 325.880673][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 325.883276][T11855] __sys_bpf+0x1af6/0x55e0 [ 325.885266][T11855] ? __pfx___sys_bpf+0x10/0x10 [ 325.887363][T11855] ? futex_wait+0x121/0x380 [ 325.889315][T11855] ? __pfx_futex_wait+0x10/0x10 [ 325.891396][T11855] ? fd_install+0x223/0x750 [ 325.893404][T11855] ? __pfx_lock_release+0x10/0x10 [ 325.895528][T11855] ? do_futex+0x123/0x350 [ 325.896967][T11855] ? __pfx_do_futex+0x10/0x10 [ 325.898531][T11855] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 325.900505][T11855] __ia32_sys_bpf+0x76/0xe0 [ 325.902244][T11855] __do_fast_syscall_32+0x73/0x120 [ 325.904158][T11855] do_fast_syscall_32+0x32/0x80 [ 325.906233][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 325.909025][T11855] RIP: 0023:0xf7f56579 [ 325.910537][T11855] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 325.918779][T11855] RSP: 002b:00000000f56f656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 325.921849][T11855] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000600 [ 325.924786][T11855] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 325.928165][T11855] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 325.931105][T11855] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 325.934539][T11855] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 325.937933][T11855] [ 325.939392][T11855] BUG: Bad page state in process syz.2.1921 pfn:1fc7e [ 325.941613][T11855] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88801fc7e0f8 pfn:0x1fc7e [ 325.945542][T11855] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 325.948615][T11855] raw: 00fff00000000000 dead000000000040 ffff88805326a000 0000000000000000 [ 325.952291][T11855] raw: ffff88801fc7e0f8 0000000000000001 00000000ffffffff 0000000000000000 [ 325.955962][T11855] page dumped because: page_pool leak [ 325.958299][T11855] page_owner tracks the page as allocated [ 325.960437][T11855] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 11855, tgid 11854 (syz.2.1921), ts 324622545096, free_ts 323975072677 [ 325.968058][T11855] post_alloc_hook+0x2d1/0x350 [ 325.970050][T11855] get_page_from_freelist+0x1351/0x2e50 [ 325.972520][T11855] __alloc_pages_noprof+0x22b/0x2460 [ 325.974857][T11855] alloc_pages_bulk_noprof+0x742/0x14f0 [ 325.977287][T11855] __page_pool_alloc_pages_slow+0x19b/0xb30 [ 325.979743][T11855] page_pool_alloc_pages+0xb5/0x110 [ 325.981734][T11855] xdp_test_run_batch.constprop.0+0x30f/0x1880 [ 325.984351][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 325.986586][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 325.988905][T11855] __sys_bpf+0x1af6/0x55e0 [ 325.990950][T11855] __ia32_sys_bpf+0x76/0xe0 [ 325.992972][T11855] __do_fast_syscall_32+0x73/0x120 [ 325.995175][T11855] do_fast_syscall_32+0x32/0x80 [ 325.997331][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 326.000128][T11855] page last free pid 11815 tgid 11815 stack trace: [ 326.003031][T11855] free_unref_page+0x64a/0xe40 [ 326.004919][T11855] vfree+0x181/0x7a0 [ 326.006334][T11855] vb2_vmalloc_put+0x7b/0xc0 [ 326.007902][T11855] __vb2_buf_mem_free+0x154/0x2c0 [ 326.010017][T11855] __vb2_queue_free+0x861/0xac0 [ 326.012255][T11855] vb2_core_queue_release+0x70/0x190 [ 326.014566][T11855] v4l2_m2m_ctx_release+0x2a/0x40 [ 326.016794][T11855] vim2m_release+0xe8/0x170 [ 326.018777][T11855] v4l2_release+0x238/0x460 [ 326.020881][T11855] __fput+0x408/0xbb0 [ 326.022671][T11855] task_work_run+0x14e/0x250 [ 326.024762][T11855] syscall_exit_to_user_mode+0x27b/0x2a0 [ 326.027223][T11855] __do_fast_syscall_32+0x80/0x120 [ 326.028922][T11855] do_fast_syscall_32+0x32/0x80 [ 326.031036][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 326.033396][T11855] Modules linked in: [ 326.035099][T11855] CPU: 3 UID: 0 PID: 11855 Comm: syz.2.1921 Tainted: G B 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 326.039947][T11855] Tainted: [B]=BAD_PAGE [ 326.041725][T11855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 326.045828][T11855] Call Trace: [ 326.046960][T11855] [ 326.048214][T11855] dump_stack_lvl+0x16c/0x1f0 [ 326.050329][T11855] bad_page+0xb3/0x220 [ 326.052213][T11855] ? __pfx_bad_page+0x10/0x10 [ 326.054353][T11855] ? page_bad_reason+0x9d/0x1e0 [ 326.056551][T11855] free_unref_page+0x69e/0xe40 [ 326.058669][T11855] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 326.061347][T11855] ? __phys_addr+0xc6/0x150 [ 326.063383][T11855] skb_free_head+0xa0/0x1d0 [ 326.065392][T11855] skb_release_data+0x75c/0x980 [ 326.067454][T11855] ? __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 326.070242][T11855] ? rcu_is_watching+0x12/0xc0 [ 326.072317][T11855] sk_skb_reason_drop+0x133/0x200 [ 326.074530][T11855] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 326.077415][T11855] ? kernel_text_address+0x8d/0x100 [ 326.079165][T11855] ? __lock_acquire+0x1620/0x3cb0 [ 326.080794][T11855] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 326.083179][T11855] ? hlock_class+0x4e/0x130 [ 326.085007][T11855] ? __lock_acquire+0xbdd/0x3cb0 [ 326.086862][T11855] ? lock_acquire+0x1b1/0x560 [ 326.088680][T11855] ? find_held_lock+0x2d/0x110 [ 326.090672][T11855] ? __pfx___lock_acquire+0x10/0x10 [ 326.092981][T11855] __netif_receive_skb_list_core+0x357/0x950 [ 326.095631][T11855] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 326.098154][T11855] ? timekeeping_debug_get_ns+0x334/0x5b0 [ 326.100286][T11855] netif_receive_skb_list_internal+0x753/0xda0 [ 326.102686][T11855] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 326.105353][T11855] ? __pfx_eth_type_trans+0x10/0x10 [ 326.107137][T11855] ? __build_skb_around+0x278/0x3b0 [ 326.109213][T11855] netif_receive_skb_list+0x4f/0x4a0 [ 326.111193][T11855] xdp_test_run_batch.constprop.0+0x1296/0x1880 [ 326.113273][T11855] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 326.115634][T11855] ? bpf_test_timer_continue+0x150/0x3d0 [ 326.118073][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 326.120387][T11855] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 326.122869][T11855] ? find_held_lock+0x2d/0x110 [ 326.124915][T11855] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 326.127424][T11855] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 326.129602][T11855] ? 0xffffffffa0004340 [ 326.131271][T11855] ? 0xffffffffa0004340 [ 326.132908][T11855] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 326.134957][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 326.136808][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 326.138778][T11855] ? fput+0x32/0x390 [ 326.140188][T11855] ? __bpf_prog_get+0xa0/0x2f0 [ 326.142047][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 326.144616][T11855] __sys_bpf+0x1af6/0x55e0 [ 326.146356][T11855] ? __pfx___sys_bpf+0x10/0x10 [ 326.148446][T11855] ? futex_wait+0x121/0x380 [ 326.150413][T11855] ? __pfx_futex_wait+0x10/0x10 [ 326.152539][T11855] ? fd_install+0x223/0x750 [ 326.154333][T11855] ? __pfx_lock_release+0x10/0x10 [ 326.156219][T11855] ? do_futex+0x123/0x350 [ 326.157990][T11855] ? __pfx_do_futex+0x10/0x10 [ 326.159912][T11855] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 326.161781][T11855] __ia32_sys_bpf+0x76/0xe0 [ 326.163721][T11855] __do_fast_syscall_32+0x73/0x120 [ 326.166005][T11855] do_fast_syscall_32+0x32/0x80 [ 326.167932][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 326.170580][T11855] RIP: 0023:0xf7f56579 [ 326.172210][T11855] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 326.179168][T11855] RSP: 002b:00000000f56f656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 326.182650][T11855] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000600 [ 326.186000][T11855] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 326.189279][T11855] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 326.192174][T11855] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 326.195094][T11855] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 326.197730][T11855] [ 326.198843][T11855] BUG: Bad page state in process syz.2.1921 pfn:21534 [ 326.201349][T11855] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x21534 [ 326.205016][T11855] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 326.207821][T11855] raw: 00fff00000000000 dead000000000040 ffff88805326a000 0000000000000000 [ 326.211126][T11855] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 326.214015][T11855] page dumped because: page_pool leak [ 326.215792][T11855] page_owner tracks the page as allocated [ 326.217691][T11855] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 11855, tgid 11854 (syz.2.1921), ts 324622531267, free_ts 323975086831 [ 326.223936][T11855] post_alloc_hook+0x2d1/0x350 [ 326.225559][T11855] get_page_from_freelist+0x1351/0x2e50 [ 326.227405][T11855] __alloc_pages_noprof+0x22b/0x2460 [ 326.229168][T11855] alloc_pages_bulk_noprof+0x742/0x14f0 [ 326.231026][T11855] __page_pool_alloc_pages_slow+0x19b/0xb30 [ 326.233023][T11855] page_pool_alloc_pages+0xb5/0x110 [ 326.234745][T11855] xdp_test_run_batch.constprop.0+0x30f/0x1880 [ 326.236811][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 326.238568][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 326.240364][T11855] __sys_bpf+0x1af6/0x55e0 [ 326.241928][T11855] __ia32_sys_bpf+0x76/0xe0 [ 326.243456][T11855] __do_fast_syscall_32+0x73/0x120 [ 326.245174][T11855] do_fast_syscall_32+0x32/0x80 [ 326.246796][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 326.248918][T11855] page last free pid 11815 tgid 11815 stack trace: [ 326.251115][T11855] free_unref_page+0x64a/0xe40 [ 326.252752][T11855] vfree+0x181/0x7a0 [ 326.254058][T11855] vb2_vmalloc_put+0x7b/0xc0 [ 326.255609][T11855] __vb2_buf_mem_free+0x154/0x2c0 [ 326.257273][T11855] __vb2_queue_free+0x861/0xac0 [ 326.258889][T11855] vb2_core_queue_release+0x70/0x190 [ 326.260934][T11855] v4l2_m2m_ctx_release+0x2a/0x40 [ 326.263021][T11855] vim2m_release+0xe8/0x170 [ 326.264919][T11855] v4l2_release+0x238/0x460 [ 326.266803][T11855] __fput+0x408/0xbb0 [ 326.268429][T11855] task_work_run+0x14e/0x250 [ 326.269982][T11855] syscall_exit_to_user_mode+0x27b/0x2a0 [ 326.271909][T11855] __do_fast_syscall_32+0x80/0x120 [ 326.273626][T11855] do_fast_syscall_32+0x32/0x80 [ 326.275275][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 326.277190][T11855] Modules linked in: [ 326.278809][T11855] CPU: 3 UID: 0 PID: 11855 Comm: syz.2.1921 Tainted: G B 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 326.283190][T11855] Tainted: [B]=BAD_PAGE [ 326.284593][T11855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 326.288118][T11855] Call Trace: [ 326.289238][T11855] [ 326.290234][T11855] dump_stack_lvl+0x16c/0x1f0 [ 326.291830][T11855] bad_page+0xb3/0x220 [ 326.293201][T11855] ? __pfx_bad_page+0x10/0x10 [ 326.294780][T11855] ? page_bad_reason+0x9d/0x1e0 [ 326.296418][T11855] free_unref_page+0x69e/0xe40 [ 326.298031][T11855] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 326.300374][T11855] ? __phys_addr+0xc6/0x150 [ 326.302317][T11855] skb_free_head+0xa0/0x1d0 [ 326.304162][T11855] skb_release_data+0x75c/0x980 [ 326.305819][T11855] ? __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 326.308100][T11855] ? rcu_is_watching+0x12/0xc0 [ 326.309712][T11855] sk_skb_reason_drop+0x133/0x200 [ 326.311420][T11855] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 326.313638][T11855] ? kernel_text_address+0x8d/0x100 [ 326.315619][T11855] ? __lock_acquire+0x1620/0x3cb0 [ 326.317395][T11855] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 326.319724][T11855] ? hlock_class+0x4e/0x130 [ 326.321236][T11855] ? __lock_acquire+0xbdd/0x3cb0 [ 326.322880][T11855] ? lock_acquire+0x1b1/0x560 [ 326.324476][T11855] ? find_held_lock+0x2d/0x110 [ 326.326064][T11855] ? __pfx___lock_acquire+0x10/0x10 [ 326.328189][T11855] __netif_receive_skb_list_core+0x357/0x950 [ 326.330665][T11855] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 326.333039][T11855] ? timekeeping_debug_get_ns+0x334/0x5b0 [ 326.335430][T11855] netif_receive_skb_list_internal+0x753/0xda0 [ 326.338042][T11855] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 326.340503][T11855] ? __pfx_eth_type_trans+0x10/0x10 [ 326.342407][T11855] ? __build_skb_around+0x278/0x3b0 [ 326.344635][T11855] netif_receive_skb_list+0x4f/0x4a0 [ 326.346558][T11855] xdp_test_run_batch.constprop.0+0x1296/0x1880 [ 326.348881][T11855] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 326.351662][T11855] ? bpf_test_timer_continue+0x150/0x3d0 [ 326.353524][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 326.355416][T11855] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 326.357394][T11855] ? find_held_lock+0x2d/0x110 [ 326.359099][T11855] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 326.361310][T11855] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 326.363077][T11855] ? 0xffffffffa0004340 [ 326.364494][T11855] ? 0xffffffffa0004340 [ 326.365908][T11855] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 326.367969][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 326.370062][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 326.372471][T11855] ? fput+0x32/0x390 [ 326.374103][T11855] ? __bpf_prog_get+0xa0/0x2f0 [ 326.375995][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 326.377997][T11855] __sys_bpf+0x1af6/0x55e0 [ 326.379526][T11855] ? __pfx___sys_bpf+0x10/0x10 [ 326.381159][T11855] ? futex_wait+0x121/0x380 [ 326.382722][T11855] ? __pfx_futex_wait+0x10/0x10 [ 326.384368][T11855] ? fd_install+0x223/0x750 [ 326.386088][T11855] ? __pfx_lock_release+0x10/0x10 [ 326.388196][T11855] ? do_futex+0x123/0x350 [ 326.389791][T11855] ? __pfx_do_futex+0x10/0x10 [ 326.391425][T11855] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 326.393904][T11855] __ia32_sys_bpf+0x76/0xe0 [ 326.395841][T11855] __do_fast_syscall_32+0x73/0x120 [ 326.397999][T11855] do_fast_syscall_32+0x32/0x80 [ 326.400057][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 326.402393][T11855] RIP: 0023:0xf7f56579 [ 326.404157][T11855] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 326.411985][T11855] RSP: 002b:00000000f56f656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 326.415425][T11855] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000600 [ 326.418371][T11855] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 326.421314][T11855] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 326.423966][T11855] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 326.426667][T11855] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 326.429490][T11855] [ 326.431242][T11855] BUG: Bad page state in process syz.2.1921 pfn:20da5 [ 326.433919][T11855] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20da5 [ 326.437295][T11855] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 326.439926][T11855] raw: 00fff00000000000 dead000000000040 ffff88805326a000 0000000000000000 [ 326.442948][T11855] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 326.446359][T11855] page dumped because: page_pool leak [ 326.448437][T11855] page_owner tracks the page as allocated [ 326.450794][T11855] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 11855, tgid 11854 (syz.2.1921), ts 324622523382, free_ts 323975100097 [ 326.457660][T11855] post_alloc_hook+0x2d1/0x350 [ 326.459519][T11855] get_page_from_freelist+0x1351/0x2e50 [ 326.461696][T11855] __alloc_pages_noprof+0x22b/0x2460 [ 326.463767][T11855] alloc_pages_bulk_noprof+0x742/0x14f0 [ 326.465907][T11855] __page_pool_alloc_pages_slow+0x19b/0xb30 [ 326.468081][T11855] page_pool_alloc_pages+0xb5/0x110 [ 326.470152][T11855] xdp_test_run_batch.constprop.0+0x30f/0x1880 [ 326.472596][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 326.474602][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 326.476783][T11855] __sys_bpf+0x1af6/0x55e0 [ 326.478447][T11855] __ia32_sys_bpf+0x76/0xe0 [ 326.480456][T11855] __do_fast_syscall_32+0x73/0x120 [ 326.482446][T11855] do_fast_syscall_32+0x32/0x80 [ 326.484715][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 326.487018][T11855] page last free pid 11815 tgid 11815 stack trace: [ 326.489133][T11855] free_unref_page+0x64a/0xe40 [ 326.490779][T11855] vfree+0x181/0x7a0 [ 326.492114][T11855] vb2_vmalloc_put+0x7b/0xc0 [ 326.493660][T11855] __vb2_buf_mem_free+0x154/0x2c0 [ 326.495354][T11855] __vb2_queue_free+0x861/0xac0 [ 326.496978][T11855] vb2_core_queue_release+0x70/0x190 [ 326.499165][T11855] v4l2_m2m_ctx_release+0x2a/0x40 [ 326.501311][T11855] vim2m_release+0xe8/0x170 [ 326.503219][T11855] v4l2_release+0x238/0x460 [ 326.505143][T11855] __fput+0x408/0xbb0 [ 326.506820][T11855] task_work_run+0x14e/0x250 [ 326.508323][T11855] syscall_exit_to_user_mode+0x27b/0x2a0 [ 326.509979][T11855] __do_fast_syscall_32+0x80/0x120 [ 326.511550][T11855] do_fast_syscall_32+0x32/0x80 [ 326.512985][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 326.514852][T11855] Modules linked in: [ 326.516028][T11855] CPU: 3 UID: 0 PID: 11855 Comm: syz.2.1921 Tainted: G B 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 326.519773][T11855] Tainted: [B]=BAD_PAGE [ 326.521584][T11855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 326.525962][T11855] Call Trace: [ 326.527387][T11855] [ 326.528712][T11855] dump_stack_lvl+0x16c/0x1f0 [ 326.530770][T11855] bad_page+0xb3/0x220 [ 326.532274][T11855] ? __pfx_bad_page+0x10/0x10 [ 326.533850][T11855] ? page_bad_reason+0x9d/0x1e0 [ 326.535935][T11855] free_unref_page+0x69e/0xe40 [ 326.538068][T11855] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 326.540541][T11855] ? __phys_addr+0xc6/0x150 [ 326.542246][T11855] skb_free_head+0xa0/0x1d0 [ 326.544240][T11855] skb_release_data+0x75c/0x980 [ 326.546377][T11855] ? __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 326.549345][T11855] ? rcu_is_watching+0x12/0xc0 [ 326.551457][T11855] sk_skb_reason_drop+0x133/0x200 [ 326.553666][T11855] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 326.556579][T11855] ? kernel_text_address+0x8d/0x100 [ 326.558825][T11855] ? __lock_acquire+0x1620/0x3cb0 [ 326.560820][T11855] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 326.563854][T11855] ? hlock_class+0x4e/0x130 [ 326.565820][T11855] ? __lock_acquire+0xbdd/0x3cb0 [ 326.567935][T11855] ? lock_acquire+0x1b1/0x560 [ 326.569784][T11855] ? find_held_lock+0x2d/0x110 [ 326.571753][T11855] ? __pfx___lock_acquire+0x10/0x10 [ 326.574008][T11855] __netif_receive_skb_list_core+0x357/0x950 [ 326.576588][T11855] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 326.579368][T11855] ? timekeeping_debug_get_ns+0x334/0x5b0 [ 326.581878][T11855] netif_receive_skb_list_internal+0x753/0xda0 [ 326.584640][T11855] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 326.587590][T11855] ? __pfx_eth_type_trans+0x10/0x10 [ 326.589905][T11855] ? __build_skb_around+0x278/0x3b0 [ 326.592219][T11855] netif_receive_skb_list+0x4f/0x4a0 [ 326.594497][T11855] xdp_test_run_batch.constprop.0+0x1296/0x1880 [ 326.597261][T11855] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 326.600202][T11855] ? bpf_test_timer_continue+0x150/0x3d0 [ 326.602699][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 326.605075][T11855] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 326.607654][T11855] ? find_held_lock+0x2d/0x110 [ 326.609751][T11855] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 326.612305][T11855] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 326.614636][T11855] ? 0xffffffffa0004340 [ 326.616423][T11855] ? 0xffffffffa0004340 [ 326.618221][T11855] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 326.620604][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 326.622830][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 326.625413][T11855] ? fput+0x32/0x390 [ 326.627061][T11855] ? __bpf_prog_get+0xa0/0x2f0 [ 326.628946][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 326.631112][T11855] __sys_bpf+0x1af6/0x55e0 [ 326.632906][T11855] ? __pfx___sys_bpf+0x10/0x10 [ 326.635031][T11855] ? futex_wait+0x121/0x380 [ 326.637052][T11855] ? __pfx_futex_wait+0x10/0x10 [ 326.639228][T11855] ? fd_install+0x223/0x750 [ 326.641132][T11855] ? __pfx_lock_release+0x10/0x10 [ 326.643063][T11855] ? do_futex+0x123/0x350 [ 326.644742][T11855] ? __pfx_do_futex+0x10/0x10 [ 326.646785][T11855] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 326.649440][T11855] __ia32_sys_bpf+0x76/0xe0 [ 326.651430][T11855] __do_fast_syscall_32+0x73/0x120 [ 326.653659][T11855] do_fast_syscall_32+0x32/0x80 [ 326.655824][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 326.658622][T11855] RIP: 0023:0xf7f56579 [ 326.660397][T11855] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 326.668456][T11855] RSP: 002b:00000000f56f656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 326.672103][T11855] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000600 [ 326.675272][T11855] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 326.678294][T11855] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 326.681685][T11855] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 326.685094][T11855] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 326.688510][T11855] [ 326.689999][T11855] BUG: Bad page state in process syz.2.1921 pfn:26286 [ 326.693230][T11855] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x26286 [ 326.697343][T11855] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 326.700619][T11855] raw: 00fff00000000000 dead000000000040 ffff88805326a000 0000000000000000 [ 326.704352][T11855] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 326.707515][T11855] page dumped because: page_pool leak [ 326.709578][T11855] page_owner tracks the page as allocated [ 326.711998][T11855] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 11855, tgid 11854 (syz.2.1921), ts 324622515284, free_ts 323975114110 [ 326.718763][T11855] post_alloc_hook+0x2d1/0x350 [ 326.720804][T11855] get_page_from_freelist+0x1351/0x2e50 [ 326.723067][T11855] __alloc_pages_noprof+0x22b/0x2460 [ 326.725195][T11855] alloc_pages_bulk_noprof+0x742/0x14f0 [ 326.727322][T11855] __page_pool_alloc_pages_slow+0x19b/0xb30 [ 326.729578][T11855] page_pool_alloc_pages+0xb5/0x110 [ 326.731591][T11855] xdp_test_run_batch.constprop.0+0x30f/0x1880 [ 326.733927][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 326.735891][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 326.737694][T11855] __sys_bpf+0x1af6/0x55e0 [ 326.739375][T11855] __ia32_sys_bpf+0x76/0xe0 [ 326.741150][T11855] __do_fast_syscall_32+0x73/0x120 [ 326.743103][T11855] do_fast_syscall_32+0x32/0x80 [ 326.744943][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 326.747332][T11855] page last free pid 11815 tgid 11815 stack trace: [ 326.749772][T11855] free_unref_page+0x64a/0xe40 [ 326.751818][T11855] vfree+0x181/0x7a0 [ 326.753402][T11855] vb2_vmalloc_put+0x7b/0xc0 [ 326.755041][T11855] __vb2_buf_mem_free+0x154/0x2c0 [ 326.756992][T11855] __vb2_queue_free+0x861/0xac0 [ 326.758871][T11855] vb2_core_queue_release+0x70/0x190 [ 326.761209][T11855] v4l2_m2m_ctx_release+0x2a/0x40 [ 326.763415][T11855] vim2m_release+0xe8/0x170 [ 326.765454][T11855] v4l2_release+0x238/0x460 [ 326.767495][T11855] __fput+0x408/0xbb0 [ 326.769275][T11855] task_work_run+0x14e/0x250 [ 326.771349][T11855] syscall_exit_to_user_mode+0x27b/0x2a0 [ 326.773821][T11855] __do_fast_syscall_32+0x80/0x120 [ 326.776011][T11855] do_fast_syscall_32+0x32/0x80 [ 326.778064][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 326.780840][T11855] Modules linked in: [ 326.782497][T11855] CPU: 3 UID: 0 PID: 11855 Comm: syz.2.1921 Tainted: G B 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 326.787366][T11855] Tainted: [B]=BAD_PAGE [ 326.789125][T11855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 326.793627][T11855] Call Trace: [ 326.795063][T11855] [ 326.796311][T11855] dump_stack_lvl+0x16c/0x1f0 [ 326.798324][T11855] bad_page+0xb3/0x220 [ 326.800079][T11855] ? __pfx_bad_page+0x10/0x10 [ 326.802101][T11855] ? page_bad_reason+0x9d/0x1e0 [ 326.804224][T11855] free_unref_page+0x69e/0xe40 [ 326.806237][T11855] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 326.808822][T11855] ? __phys_addr+0xc6/0x150 [ 326.810793][T11855] skb_free_head+0xa0/0x1d0 [ 326.812668][T11855] skb_release_data+0x75c/0x980 [ 326.814664][T11855] ? __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 326.817560][T11855] ? rcu_is_watching+0x12/0xc0 [ 326.819627][T11855] sk_skb_reason_drop+0x133/0x200 [ 326.821798][T11855] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 326.824664][T11855] ? kernel_text_address+0x8d/0x100 [ 326.826883][T11855] ? __lock_acquire+0x1620/0x3cb0 [ 326.828978][T11855] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 326.831838][T11855] ? hlock_class+0x4e/0x130 [ 326.833784][T11855] ? __lock_acquire+0xbdd/0x3cb0 [ 326.835461][T11855] ? lock_acquire+0x1b1/0x560 [ 326.837054][T11855] ? find_held_lock+0x2d/0x110 [ 326.838985][T11855] ? __pfx___lock_acquire+0x10/0x10 [ 326.841148][T11855] __netif_receive_skb_list_core+0x357/0x950 [ 326.843679][T11855] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 326.846381][T11855] ? timekeeping_debug_get_ns+0x334/0x5b0 [ 326.848769][T11855] netif_receive_skb_list_internal+0x753/0xda0 [ 326.851374][T11855] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 326.853794][T11855] ? __pfx_eth_type_trans+0x10/0x10 [ 326.855948][T11855] ? __build_skb_around+0x278/0x3b0 [ 326.858029][T11855] netif_receive_skb_list+0x4f/0x4a0 [ 326.860261][T11855] xdp_test_run_batch.constprop.0+0x1296/0x1880 [ 326.862926][T11855] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 326.865696][T11855] ? bpf_test_timer_continue+0x150/0x3d0 [ 326.868073][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 326.870284][T11855] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 326.872291][T11855] ? find_held_lock+0x2d/0x110 [ 326.873918][T11855] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 326.875963][T11855] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 326.877748][T11855] ? 0xffffffffa0004340 [ 326.879172][T11855] ? 0xffffffffa0004340 [ 326.880873][T11855] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 326.883100][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 326.884983][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 326.887219][T11855] ? fput+0x32/0x390 [ 326.888842][T11855] ? __bpf_prog_get+0xa0/0x2f0 [ 326.890820][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 326.893061][T11855] __sys_bpf+0x1af6/0x55e0 [ 326.894821][T11855] ? __pfx___sys_bpf+0x10/0x10 [ 326.896978][T11855] ? futex_wait+0x121/0x380 [ 326.898890][T11855] ? __pfx_futex_wait+0x10/0x10 [ 326.900996][T11855] ? fd_install+0x223/0x750 [ 326.902916][T11855] ? __pfx_lock_release+0x10/0x10 [ 326.905093][T11855] ? do_futex+0x123/0x350 [ 326.906958][T11855] ? __pfx_do_futex+0x10/0x10 [ 326.909131][T11855] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 326.911632][T11855] __ia32_sys_bpf+0x76/0xe0 [ 326.913552][T11855] __do_fast_syscall_32+0x73/0x120 [ 326.915596][T11855] do_fast_syscall_32+0x32/0x80 [ 326.917644][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 326.920307][T11855] RIP: 0023:0xf7f56579 [ 326.921776][T11855] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 326.928764][T11855] RSP: 002b:00000000f56f656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 326.932170][T11855] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000600 [ 326.934815][T11855] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 326.937964][T11855] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 326.941191][T11855] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 326.944541][T11855] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 326.947599][T11855] [ 326.948730][T11855] BUG: Bad page state in process syz.2.1921 pfn:20d71 [ 326.951326][T11855] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x8 pfn:0x20d71 [ 326.954786][T11855] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 326.957842][T11855] raw: 00fff00000000000 dead000000000040 ffff88805326a000 0000000000000000 [ 326.961255][T11855] raw: 0000000000000008 0000000000000001 00000000ffffffff 0000000000000000 [ 326.964382][T11855] page dumped because: page_pool leak [ 326.966260][T11855] page_owner tracks the page as allocated [ 326.968783][T11855] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 11855, tgid 11854 (syz.2.1921), ts 324622506524, free_ts 323975128218 [ 326.975758][T11855] post_alloc_hook+0x2d1/0x350 [ 326.977748][T11855] get_page_from_freelist+0x1351/0x2e50 [ 326.980004][T11855] __alloc_pages_noprof+0x22b/0x2460 [ 326.982073][T11855] alloc_pages_bulk_noprof+0x742/0x14f0 [ 326.984065][T11855] __page_pool_alloc_pages_slow+0x19b/0xb30 [ 326.986551][T11855] page_pool_alloc_pages+0xb5/0x110 [ 326.988838][T11855] xdp_test_run_batch.constprop.0+0x30f/0x1880 [ 326.991519][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 326.993776][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 326.996057][T11855] __sys_bpf+0x1af6/0x55e0 [ 326.997980][T11855] __ia32_sys_bpf+0x76/0xe0 [ 326.999942][T11855] __do_fast_syscall_32+0x73/0x120 [ 327.001789][T11855] do_fast_syscall_32+0x32/0x80 [ 327.003434][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 327.005588][T11855] page last free pid 11815 tgid 11815 stack trace: [ 327.008258][T11855] free_unref_page+0x64a/0xe40 [ 327.010280][T11855] vfree+0x181/0x7a0 [ 327.011539][T11855] vb2_vmalloc_put+0x7b/0xc0 [ 327.013116][T11855] __vb2_buf_mem_free+0x154/0x2c0 [ 327.015118][T11855] __vb2_queue_free+0x861/0xac0 [ 327.016894][T11855] vb2_core_queue_release+0x70/0x190 [ 327.018913][T11855] v4l2_m2m_ctx_release+0x2a/0x40 [ 327.021106][T11855] vim2m_release+0xe8/0x170 [ 327.023050][T11855] v4l2_release+0x238/0x460 [ 327.024994][T11855] __fput+0x408/0xbb0 [ 327.026346][T11855] task_work_run+0x14e/0x250 [ 327.028289][T11855] syscall_exit_to_user_mode+0x27b/0x2a0 [ 327.030670][T11855] __do_fast_syscall_32+0x80/0x120 [ 327.032851][T11855] do_fast_syscall_32+0x32/0x80 [ 327.034923][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 327.037582][T11855] Modules linked in: [ 327.039258][T11855] CPU: 3 UID: 0 PID: 11855 Comm: syz.2.1921 Tainted: G B 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 327.044321][T11855] Tainted: [B]=BAD_PAGE [ 327.046069][T11855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 327.050534][T11855] Call Trace: [ 327.051985][T11855] [ 327.053241][T11855] dump_stack_lvl+0x16c/0x1f0 [ 327.055039][T11855] bad_page+0xb3/0x220 [ 327.056450][T11855] ? __pfx_bad_page+0x10/0x10 [ 327.058453][T11855] ? page_bad_reason+0x9d/0x1e0 [ 327.060435][T11855] free_unref_page+0x69e/0xe40 [ 327.062078][T11855] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 327.064508][T11855] ? __phys_addr+0xc6/0x150 [ 327.066349][T11855] skb_free_head+0xa0/0x1d0 [ 327.067885][T11855] skb_release_data+0x75c/0x980 [ 327.069796][T11855] ? __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 327.072400][T11855] ? rcu_is_watching+0x12/0xc0 [ 327.074059][T11855] sk_skb_reason_drop+0x133/0x200 [ 327.075772][T11855] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 327.078641][T11855] ? kernel_text_address+0x8d/0x100 [ 327.080928][T11855] ? __lock_acquire+0x1620/0x3cb0 [ 327.083156][T11855] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 327.086172][T11855] ? hlock_class+0x4e/0x130 [ 327.088066][T11855] ? __lock_acquire+0xbdd/0x3cb0 [ 327.090093][T11855] ? lock_acquire+0x1b1/0x560 [ 327.091834][T11855] ? find_held_lock+0x2d/0x110 [ 327.093498][T11855] ? __pfx___lock_acquire+0x10/0x10 [ 327.095303][T11855] __netif_receive_skb_list_core+0x357/0x950 [ 327.097750][T11855] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 327.100598][T11855] ? timekeeping_debug_get_ns+0x334/0x5b0 [ 327.103104][T11855] netif_receive_skb_list_internal+0x753/0xda0 [ 327.105827][T11855] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 327.108356][T11855] ? __pfx_eth_type_trans+0x10/0x10 [ 327.110568][T11855] ? __build_skb_around+0x278/0x3b0 [ 327.112778][T11855] netif_receive_skb_list+0x4f/0x4a0 [ 327.115026][T11855] xdp_test_run_batch.constprop.0+0x1296/0x1880 [ 327.117593][T11855] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 327.120459][T11855] ? bpf_test_timer_continue+0x150/0x3d0 [ 327.122924][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 327.125203][T11855] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 327.127623][T11855] ? find_held_lock+0x2d/0x110 [ 327.129653][T11855] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 327.132225][T11855] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 327.134014][T11855] ? 0xffffffffa0004340 [ 327.135422][T11855] ? 0xffffffffa0004340 [ 327.136866][T11855] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 327.139097][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 327.141391][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 327.143831][T11855] ? fput+0x32/0x390 [ 327.145300][T11855] ? __bpf_prog_get+0xa0/0x2f0 [ 327.147183][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 327.149687][T11855] __sys_bpf+0x1af6/0x55e0 [ 327.151618][T11855] ? __pfx___sys_bpf+0x10/0x10 [ 327.153624][T11855] ? futex_wait+0x121/0x380 [ 327.155560][T11855] ? __pfx_futex_wait+0x10/0x10 [ 327.157411][T11855] ? fd_install+0x223/0x750 [ 327.159248][T11855] ? __pfx_lock_release+0x10/0x10 [ 327.161262][T11855] ? do_futex+0x123/0x350 [ 327.162871][T11855] ? __pfx_do_futex+0x10/0x10 [ 327.164490][T11855] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 327.166957][T11855] __ia32_sys_bpf+0x76/0xe0 [ 327.168903][T11855] __do_fast_syscall_32+0x73/0x120 [ 327.171090][T11855] do_fast_syscall_32+0x32/0x80 [ 327.172725][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 327.174869][T11855] RIP: 0023:0xf7f56579 [ 327.176321][T11855] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 327.183386][T11855] RSP: 002b:00000000f56f656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 327.186093][T11855] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000600 [ 327.189503][T11855] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 327.192321][T11855] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 327.195272][T11855] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 327.198383][T11855] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 327.201661][T11855] [ 327.203104][T11855] BUG: Bad page state in process syz.2.1921 pfn:20254 [ 327.205998][T11855] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20254 [ 327.209623][T11855] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 327.212681][T11855] raw: 00fff00000000000 dead000000000040 ffff88805326a000 0000000000000000 [ 327.216446][T11855] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 327.219997][T11855] page dumped because: page_pool leak [ 327.222265][T11855] page_owner tracks the page as allocated [ 327.224774][T11855] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 11855, tgid 11854 (syz.2.1921), ts 324622498369, free_ts 323975142982 [ 327.232563][T11855] post_alloc_hook+0x2d1/0x350 [ 327.234618][T11855] get_page_from_freelist+0x1351/0x2e50 [ 327.236857][T11855] __alloc_pages_noprof+0x22b/0x2460 [ 327.238634][T11855] alloc_pages_bulk_noprof+0x742/0x14f0 [ 327.241015][T11855] __page_pool_alloc_pages_slow+0x19b/0xb30 [ 327.243546][T11855] page_pool_alloc_pages+0xb5/0x110 [ 327.245857][T11855] xdp_test_run_batch.constprop.0+0x30f/0x1880 [ 327.248584][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 327.250959][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 327.253252][T11855] __sys_bpf+0x1af6/0x55e0 [ 327.255190][T11855] __ia32_sys_bpf+0x76/0xe0 [ 327.257148][T11855] __do_fast_syscall_32+0x73/0x120 [ 327.259349][T11855] do_fast_syscall_32+0x32/0x80 [ 327.261466][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 327.264134][T11855] page last free pid 11815 tgid 11815 stack trace: [ 327.266885][T11855] free_unref_page+0x64a/0xe40 [ 327.268925][T11855] vfree+0x181/0x7a0 [ 327.270661][T11855] vb2_vmalloc_put+0x7b/0xc0 [ 327.272463][T11855] __vb2_buf_mem_free+0x154/0x2c0 [ 327.274471][T11855] __vb2_queue_free+0x861/0xac0 [ 327.276554][T11855] vb2_core_queue_release+0x70/0x190 [ 327.278775][T11855] v4l2_m2m_ctx_release+0x2a/0x40 [ 327.280962][T11855] vim2m_release+0xe8/0x170 [ 327.282873][T11855] v4l2_release+0x238/0x460 [ 327.284815][T11855] __fput+0x408/0xbb0 [ 327.286499][T11855] task_work_run+0x14e/0x250 [ 327.288523][T11855] syscall_exit_to_user_mode+0x27b/0x2a0 [ 327.290973][T11855] __do_fast_syscall_32+0x80/0x120 [ 327.293149][T11855] do_fast_syscall_32+0x32/0x80 [ 327.295209][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 327.297825][T11855] Modules linked in: [ 327.299485][T11855] CPU: 3 UID: 0 PID: 11855 Comm: syz.2.1921 Tainted: G B 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 327.304506][T11855] Tainted: [B]=BAD_PAGE [ 327.306204][T11855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 327.310782][T11855] Call Trace: [ 327.312193][T11855] [ 327.313410][T11855] dump_stack_lvl+0x16c/0x1f0 [ 327.315365][T11855] bad_page+0xb3/0x220 [ 327.317106][T11855] ? __pfx_bad_page+0x10/0x10 [ 327.318884][T11855] ? page_bad_reason+0x9d/0x1e0 [ 327.320737][T11855] free_unref_page+0x69e/0xe40 [ 327.322585][T11855] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 327.324972][T11855] ? __phys_addr+0xc6/0x150 [ 327.326926][T11855] skb_free_head+0xa0/0x1d0 [ 327.328517][T11855] skb_release_data+0x75c/0x980 [ 327.330547][T11855] ? __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 327.333515][T11855] ? rcu_is_watching+0x12/0xc0 [ 327.335935][T11855] sk_skb_reason_drop+0x133/0x200 [ 327.338138][T11855] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 327.341094][T11855] ? kernel_text_address+0x8d/0x100 [ 327.343431][T11855] ? __lock_acquire+0x1620/0x3cb0 [ 327.345637][T11855] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 327.348758][T11855] ? hlock_class+0x4e/0x130 [ 327.350813][T11855] ? __lock_acquire+0xbdd/0x3cb0 [ 327.353003][T11855] ? lock_acquire+0x1b1/0x560 [ 327.355026][T11855] ? find_held_lock+0x2d/0x110 [ 327.357096][T11855] ? __pfx___lock_acquire+0x10/0x10 [ 327.359398][T11855] __netif_receive_skb_list_core+0x357/0x950 [ 327.362011][T11855] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 327.364886][T11855] ? timekeeping_debug_get_ns+0x334/0x5b0 [ 327.367422][T11855] netif_receive_skb_list_internal+0x753/0xda0 [ 327.370080][T11855] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 327.372880][T11855] ? __pfx_eth_type_trans+0x10/0x10 [ 327.375218][T11855] ? __build_skb_around+0x278/0x3b0 [ 327.377465][T11855] netif_receive_skb_list+0x4f/0x4a0 [ 327.379787][T11855] xdp_test_run_batch.constprop.0+0x1296/0x1880 [ 327.382461][T11855] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 327.385257][T11855] ? bpf_test_timer_continue+0x150/0x3d0 [ 327.387711][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 327.389971][T11855] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 327.392457][T11855] ? find_held_lock+0x2d/0x110 [ 327.394515][T11855] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 327.397085][T11855] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 327.399341][T11855] ? 0xffffffffa0004340 [ 327.401114][T11855] ? 0xffffffffa0004340 [ 327.402933][T11855] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 327.405503][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 327.407818][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 327.410320][T11855] ? fput+0x32/0x390 [ 327.412050][T11855] ? __bpf_prog_get+0xa0/0x2f0 [ 327.414142][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 327.416679][T11855] __sys_bpf+0x1af6/0x55e0 [ 327.418559][T11855] ? __pfx___sys_bpf+0x10/0x10 [ 327.420701][T11855] ? futex_wait+0x121/0x380 [ 327.422705][T11855] ? __pfx_futex_wait+0x10/0x10 [ 327.424823][T11855] ? fd_install+0x223/0x750 [ 327.426846][T11855] ? __pfx_lock_release+0x10/0x10 [ 327.429013][T11855] ? do_futex+0x123/0x350 [ 327.430867][T11855] ? __pfx_do_futex+0x10/0x10 [ 327.432955][T11855] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 327.435510][T11855] __ia32_sys_bpf+0x76/0xe0 [ 327.437454][T11855] __do_fast_syscall_32+0x73/0x120 [ 327.439706][T11855] do_fast_syscall_32+0x32/0x80 [ 327.441881][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 327.444297][T11855] RIP: 0023:0xf7f56579 [ 327.445871][T11855] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 327.454113][T11855] RSP: 002b:00000000f56f656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 327.457686][T11855] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000600 [ 327.461067][T11855] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 327.464535][T11855] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 327.468000][T11855] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 327.471376][T11855] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 327.474734][T11855] [ 327.476480][T11855] BUG: Bad page state in process syz.2.1921 pfn:22263 [ 327.479340][T11855] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x22263 [ 327.482878][T11855] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 327.485933][T11855] raw: 00fff00000000000 dead000000000040 ffff88805326a000 0000000000000000 [ 327.489632][T11855] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 327.493326][T11855] page dumped because: page_pool leak [ 327.495677][T11855] page_owner tracks the page as allocated [ 327.498190][T11855] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 11855, tgid 11854 (syz.2.1921), ts 324622489392, free_ts 323975156710 [ 327.506115][T11855] post_alloc_hook+0x2d1/0x350 [ 327.507983][T11855] get_page_from_freelist+0x1351/0x2e50 [ 327.510399][T11855] __alloc_pages_noprof+0x22b/0x2460 [ 327.512779][T11855] alloc_pages_bulk_noprof+0x742/0x14f0 [ 327.515222][T11855] __page_pool_alloc_pages_slow+0x19b/0xb30 [ 327.517837][T11855] page_pool_alloc_pages+0xb5/0x110 [ 327.520122][T11855] xdp_test_run_batch.constprop.0+0x30f/0x1880 [ 327.522805][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 327.525041][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 327.527115][T11855] __sys_bpf+0x1af6/0x55e0 [ 327.528628][T11855] __ia32_sys_bpf+0x76/0xe0 [ 327.530300][T11855] __do_fast_syscall_32+0x73/0x120 [ 327.532288][T11855] do_fast_syscall_32+0x32/0x80 [ 327.534276][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 327.536514][T11855] page last free pid 11815 tgid 11815 stack trace: [ 327.538394][T11855] free_unref_page+0x64a/0xe40 [ 327.540285][T11855] vfree+0x181/0x7a0 [ 327.542053][T11855] vb2_vmalloc_put+0x7b/0xc0 [ 327.544104][T11855] __vb2_buf_mem_free+0x154/0x2c0 [ 327.546337][T11855] __vb2_queue_free+0x861/0xac0 [ 327.548514][T11855] vb2_core_queue_release+0x70/0x190 [ 327.550920][T11855] v4l2_m2m_ctx_release+0x2a/0x40 [ 327.553143][T11855] vim2m_release+0xe8/0x170 [ 327.555147][T11855] v4l2_release+0x238/0x460 [ 327.557148][T11855] __fput+0x408/0xbb0 [ 327.558917][T11855] task_work_run+0x14e/0x250 [ 327.560784][T11855] syscall_exit_to_user_mode+0x27b/0x2a0 [ 327.563276][T11855] __do_fast_syscall_32+0x80/0x120 [ 327.565542][T11855] do_fast_syscall_32+0x32/0x80 [ 327.567597][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 327.570339][T11855] Modules linked in: [ 327.572181][T11855] CPU: 3 UID: 0 PID: 11855 Comm: syz.2.1921 Tainted: G B 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 327.577386][T11855] Tainted: [B]=BAD_PAGE [ 327.579198][T11855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 327.583854][T11855] Call Trace: [ 327.585346][T11855] [ 327.586561][T11855] dump_stack_lvl+0x16c/0x1f0 [ 327.588578][T11855] bad_page+0xb3/0x220 [ 327.590373][T11855] ? __pfx_bad_page+0x10/0x10 [ 327.592493][T11855] ? page_bad_reason+0x9d/0x1e0 [ 327.594619][T11855] free_unref_page+0x69e/0xe40 [ 327.596673][T11855] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 327.599319][T11855] ? __phys_addr+0xc6/0x150 [ 327.601295][T11855] skb_free_head+0xa0/0x1d0 [ 327.603296][T11855] skb_release_data+0x75c/0x980 [ 327.605507][T11855] ? __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 327.608262][T11855] ? rcu_is_watching+0x12/0xc0 [ 327.610061][T11855] sk_skb_reason_drop+0x133/0x200 [ 327.612247][T11855] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 327.615207][T11855] ? kernel_text_address+0x8d/0x100 [ 327.617463][T11855] ? __lock_acquire+0x1620/0x3cb0 [ 327.619613][T11855] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 327.622667][T11855] ? hlock_class+0x4e/0x130 [ 327.624687][T11855] ? __lock_acquire+0xbdd/0x3cb0 [ 327.626846][T11855] ? lock_acquire+0x1b1/0x560 [ 327.628907][T11855] ? find_held_lock+0x2d/0x110 [ 327.631001][T11855] ? __pfx___lock_acquire+0x10/0x10 [ 327.633235][T11855] __netif_receive_skb_list_core+0x357/0x950 [ 327.635626][T11855] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 327.638156][T11855] ? timekeeping_debug_get_ns+0x334/0x5b0 [ 327.640564][T11855] netif_receive_skb_list_internal+0x753/0xda0 [ 327.643285][T11855] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 327.646248][T11855] ? __pfx_eth_type_trans+0x10/0x10 [ 327.648559][T11855] ? __build_skb_around+0x278/0x3b0 [ 327.650371][T11855] netif_receive_skb_list+0x4f/0x4a0 [ 327.652626][T11855] xdp_test_run_batch.constprop.0+0x1296/0x1880 [ 327.655368][T11855] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 327.658251][T11855] ? bpf_test_timer_continue+0x150/0x3d0 [ 327.660641][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 327.662737][T11855] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 327.665341][T11855] ? find_held_lock+0x2d/0x110 [ 327.667135][T11855] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 327.669208][T11855] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 327.671013][T11855] ? 0xffffffffa0004340 [ 327.672855][T11855] ? 0xffffffffa0004340 [ 327.674648][T11855] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 327.677189][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 327.679340][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 327.681602][T11855] ? fput+0x32/0x390 [ 327.683335][T11855] ? __bpf_prog_get+0xa0/0x2f0 [ 327.685500][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 327.688085][T11855] __sys_bpf+0x1af6/0x55e0 [ 327.690120][T11855] ? __pfx___sys_bpf+0x10/0x10 [ 327.692028][T11855] ? futex_wait+0x121/0x380 [ 327.693862][T11855] ? __pfx_futex_wait+0x10/0x10 [ 327.696065][T11855] ? fd_install+0x223/0x750 [ 327.698105][T11855] ? __pfx_lock_release+0x10/0x10 [ 327.700352][T11855] ? do_futex+0x123/0x350 [ 327.702237][T11855] ? __pfx_do_futex+0x10/0x10 [ 327.704003][T11855] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 327.706108][T11855] __ia32_sys_bpf+0x76/0xe0 [ 327.708120][T11855] __do_fast_syscall_32+0x73/0x120 [ 327.710394][T11855] do_fast_syscall_32+0x32/0x80 [ 327.712353][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 327.715011][T11855] RIP: 0023:0xf7f56579 [ 327.716631][T11855] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 327.723291][T11855] RSP: 002b:00000000f56f656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 327.726365][T11855] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000600 [ 327.729698][T11855] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 327.733042][T11855] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 327.736487][T11855] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 327.739872][T11855] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 327.743250][T11855] [ 327.744686][T11855] BUG: Bad page state in process syz.2.1921 pfn:2a60b [ 327.747535][T11855] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2055b pfn:0x2a60b [ 327.751365][T11855] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 327.754269][T11855] raw: 00fff00000000000 dead000000000040 ffff88805326a000 0000000000000000 [ 327.757868][T11855] raw: 000000000002055b 0000000000000001 00000000ffffffff 0000000000000000 [ 327.761507][T11855] page dumped because: page_pool leak [ 327.763753][T11855] page_owner tracks the page as allocated [ 327.766111][T11855] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 11855, tgid 11854 (syz.2.1921), ts 324622480856, free_ts 323975171219 [ 327.773839][T11855] post_alloc_hook+0x2d1/0x350 [ 327.775878][T11855] get_page_from_freelist+0x1351/0x2e50 [ 327.778181][T11855] __alloc_pages_noprof+0x22b/0x2460 [ 327.780371][T11855] alloc_pages_bulk_noprof+0x742/0x14f0 [ 327.782727][T11855] __page_pool_alloc_pages_slow+0x19b/0xb30 [ 327.785211][T11855] page_pool_alloc_pages+0xb5/0x110 [ 327.787412][T11855] xdp_test_run_batch.constprop.0+0x30f/0x1880 [ 327.790010][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 327.792287][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 327.794527][T11855] __sys_bpf+0x1af6/0x55e0 [ 327.796424][T11855] __ia32_sys_bpf+0x76/0xe0 [ 327.798339][T11855] __do_fast_syscall_32+0x73/0x120 [ 327.800521][T11855] do_fast_syscall_32+0x32/0x80 [ 327.802620][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 327.805307][T11855] page last free pid 11815 tgid 11815 stack trace: [ 327.808012][T11855] free_unref_page+0x64a/0xe40 [ 327.810028][T11855] vfree+0x181/0x7a0 [ 327.811722][T11855] vb2_vmalloc_put+0x7b/0xc0 [ 327.813798][T11855] __vb2_buf_mem_free+0x154/0x2c0 [ 327.815935][T11855] __vb2_queue_free+0x861/0xac0 [ 327.817990][T11855] vb2_core_queue_release+0x70/0x190 [ 327.820223][T11855] v4l2_m2m_ctx_release+0x2a/0x40 [ 327.822398][T11855] vim2m_release+0xe8/0x170 [ 327.824341][T11855] v4l2_release+0x238/0x460 [ 327.825911][T11855] __fput+0x408/0xbb0 [ 327.827534][T11855] task_work_run+0x14e/0x250 [ 327.829189][T11855] syscall_exit_to_user_mode+0x27b/0x2a0 [ 327.831137][T11855] __do_fast_syscall_32+0x80/0x120 [ 327.832863][T11855] do_fast_syscall_32+0x32/0x80 [ 327.834498][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 327.836915][T11855] Modules linked in: [ 327.838343][T11855] CPU: 3 UID: 0 PID: 11855 Comm: syz.2.1921 Tainted: G B 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 327.842649][T11855] Tainted: [B]=BAD_PAGE [ 327.844277][T11855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 327.848748][T11855] Call Trace: [ 327.850224][T11855] [ 327.851565][T11855] dump_stack_lvl+0x16c/0x1f0 [ 327.853655][T11855] bad_page+0xb3/0x220 [ 327.855333][T11855] ? __pfx_bad_page+0x10/0x10 [ 327.857417][T11855] ? page_bad_reason+0x9d/0x1e0 [ 327.859571][T11855] free_unref_page+0x69e/0xe40 [ 327.861484][T11855] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 327.863740][T11855] ? __phys_addr+0xc6/0x150 [ 327.865634][T11855] skb_free_head+0xa0/0x1d0 [ 327.867305][T11855] skb_release_data+0x75c/0x980 [ 327.868963][T11855] ? __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 327.871244][T11855] ? rcu_is_watching+0x12/0xc0 [ 327.872860][T11855] sk_skb_reason_drop+0x133/0x200 [ 327.874563][T11855] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 327.876892][T11855] ? kernel_text_address+0x8d/0x100 [ 327.878683][T11855] ? __lock_acquire+0x1620/0x3cb0 [ 327.880386][T11855] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 327.882732][T11855] ? hlock_class+0x4e/0x130 [ 327.884160][T11855] ? __lock_acquire+0xbdd/0x3cb0 [ 327.886009][T11855] ? lock_acquire+0x1b1/0x560 [ 327.887554][T11855] ? find_held_lock+0x2d/0x110 [ 327.889152][T11855] ? __pfx___lock_acquire+0x10/0x10 [ 327.890951][T11855] __netif_receive_skb_list_core+0x357/0x950 [ 327.893064][T11855] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 327.895295][T11855] ? timekeeping_debug_get_ns+0x334/0x5b0 [ 327.897165][T11855] netif_receive_skb_list_internal+0x753/0xda0 [ 327.899265][T11855] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 327.901486][T11855] ? __pfx_eth_type_trans+0x10/0x10 [ 327.903241][T11855] ? __build_skb_around+0x278/0x3b0 [ 327.905022][T11855] netif_receive_skb_list+0x4f/0x4a0 [ 327.906776][T11855] xdp_test_run_batch.constprop.0+0x1296/0x1880 [ 327.908981][T11855] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 327.911694][T11855] ? bpf_test_timer_continue+0x150/0x3d0 [ 327.914005][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 327.916078][T11855] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 327.918058][T11855] ? find_held_lock+0x2d/0x110 [ 327.919807][T11855] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 327.922251][T11855] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 327.924477][T11855] ? 0xffffffffa0004340 [ 327.926198][T11855] ? 0xffffffffa0004340 [ 327.927943][T11855] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 327.930186][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 327.932019][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 327.933957][T11855] ? fput+0x32/0x390 [ 327.935314][T11855] ? __bpf_prog_get+0xa0/0x2f0 [ 327.937016][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 327.938973][T11855] __sys_bpf+0x1af6/0x55e0 [ 327.940480][T11855] ? __pfx___sys_bpf+0x10/0x10 [ 327.942093][T11855] ? futex_wait+0x121/0x380 [ 327.943944][T11855] ? __pfx_futex_wait+0x10/0x10 [ 327.945849][T11855] ? fd_install+0x223/0x750 [ 327.947388][T11855] ? __pfx_lock_release+0x10/0x10 [ 327.949095][T11855] ? do_futex+0x123/0x350 [ 327.950546][T11855] ? __pfx_do_futex+0x10/0x10 [ 327.952135][T11855] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 327.954233][T11855] __ia32_sys_bpf+0x76/0xe0 [ 327.956219][T11855] __do_fast_syscall_32+0x73/0x120 [ 327.958474][T11855] do_fast_syscall_32+0x32/0x80 [ 327.960479][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 327.962547][T11855] RIP: 0023:0xf7f56579 [ 327.964083][T11855] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 327.972227][T11855] RSP: 002b:00000000f56f656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 327.975346][T11855] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000600 [ 327.977989][T11855] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 327.980629][T11855] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 327.983406][T11855] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 327.986429][T11855] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 327.989092][T11855] [ 327.990232][T11855] BUG: Bad page state in process syz.2.1921 pfn:2152a [ 327.992545][T11855] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2152a [ 327.995826][T11855] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 327.998880][T11855] raw: 00fff00000000000 dead000000000040 ffff88805326a000 0000000000000000 [ 328.002648][T11855] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 328.006305][T11855] page dumped because: page_pool leak [ 328.008571][T11855] page_owner tracks the page as allocated [ 328.011061][T11855] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 11855, tgid 11854 (syz.2.1921), ts 324622472282, free_ts 323975185205 [ 328.018768][T11855] post_alloc_hook+0x2d1/0x350 [ 328.020854][T11855] get_page_from_freelist+0x1351/0x2e50 [ 328.023128][T11855] __alloc_pages_noprof+0x22b/0x2460 [ 328.025156][T11855] alloc_pages_bulk_noprof+0x742/0x14f0 [ 328.027493][T11855] __page_pool_alloc_pages_slow+0x19b/0xb30 [ 328.029984][T11855] page_pool_alloc_pages+0xb5/0x110 [ 328.032262][T11855] xdp_test_run_batch.constprop.0+0x30f/0x1880 [ 328.034915][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 328.036901][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 328.038693][T11855] __sys_bpf+0x1af6/0x55e0 [ 328.040253][T11855] __ia32_sys_bpf+0x76/0xe0 [ 328.042027][T11855] __do_fast_syscall_32+0x73/0x120 [ 328.044215][T11855] do_fast_syscall_32+0x32/0x80 [ 328.046270][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 328.048946][T11855] page last free pid 11815 tgid 11815 stack trace: [ 328.051785][T11855] free_unref_page+0x64a/0xe40 [ 328.053835][T11855] vfree+0x181/0x7a0 [ 328.055535][T11855] vb2_vmalloc_put+0x7b/0xc0 [ 328.057523][T11855] __vb2_buf_mem_free+0x154/0x2c0 [ 328.059694][T11855] __vb2_queue_free+0x861/0xac0 [ 328.061823][T11855] vb2_core_queue_release+0x70/0x190 [ 328.064138][T11855] v4l2_m2m_ctx_release+0x2a/0x40 [ 328.066327][T11855] vim2m_release+0xe8/0x170 [ 328.068278][T11855] v4l2_release+0x238/0x460 [ 328.070226][T11855] __fput+0x408/0xbb0 [ 328.072002][T11855] task_work_run+0x14e/0x250 [ 328.073985][T11855] syscall_exit_to_user_mode+0x27b/0x2a0 [ 328.076391][T11855] __do_fast_syscall_32+0x80/0x120 [ 328.078621][T11855] do_fast_syscall_32+0x32/0x80 [ 328.080837][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 328.083538][T11855] Modules linked in: [ 328.085345][T11855] CPU: 3 UID: 0 PID: 11855 Comm: syz.2.1921 Tainted: G B 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 328.090403][T11855] Tainted: [B]=BAD_PAGE [ 328.092179][T11855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 328.096782][T11855] Call Trace: [ 328.098209][T11855] [ 328.099485][T11855] dump_stack_lvl+0x16c/0x1f0 [ 328.101500][T11855] bad_page+0xb3/0x220 [ 328.103261][T11855] ? __pfx_bad_page+0x10/0x10 [ 328.105278][T11855] ? page_bad_reason+0x9d/0x1e0 [ 328.107368][T11855] free_unref_page+0x69e/0xe40 [ 328.109394][T11855] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 328.111907][T11855] ? __phys_addr+0xc6/0x150 [ 328.113879][T11855] skb_free_head+0xa0/0x1d0 [ 328.115807][T11855] skb_release_data+0x75c/0x980 [ 328.117437][T11855] ? __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 328.119683][T11855] ? rcu_is_watching+0x12/0xc0 [ 328.121136][T11855] sk_skb_reason_drop+0x133/0x200 [ 328.122611][T11855] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 328.124712][T11855] ? kernel_text_address+0x8d/0x100 [ 328.126639][T11855] ? __lock_acquire+0x1620/0x3cb0 [ 328.128550][T11855] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 328.131151][T11855] ? hlock_class+0x4e/0x130 [ 328.132891][T11855] ? __lock_acquire+0xbdd/0x3cb0 [ 328.134571][T11855] ? lock_acquire+0x1b1/0x560 [ 328.136474][T11855] ? find_held_lock+0x2d/0x110 [ 328.138350][T11855] ? __pfx___lock_acquire+0x10/0x10 [ 328.140451][T11855] __netif_receive_skb_list_core+0x357/0x950 [ 328.142543][T11855] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 328.145018][T11855] ? timekeeping_debug_get_ns+0x334/0x5b0 [ 328.146917][T11855] netif_receive_skb_list_internal+0x753/0xda0 [ 328.149467][T11855] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 328.152260][T11855] ? __pfx_eth_type_trans+0x10/0x10 [ 328.154133][T11855] ? __build_skb_around+0x278/0x3b0 [ 328.156000][T11855] netif_receive_skb_list+0x4f/0x4a0 [ 328.158252][T11855] xdp_test_run_batch.constprop.0+0x1296/0x1880 [ 328.160592][T11855] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 328.163146][T11855] ? bpf_test_timer_continue+0x150/0x3d0 [ 328.165048][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 328.166819][T11855] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 328.168810][T11855] ? find_held_lock+0x2d/0x110 [ 328.170448][T11855] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 328.172442][T11855] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 328.174264][T11855] ? 0xffffffffa0004340 [ 328.175670][T11855] ? 0xffffffffa0004340 [ 328.177055][T11855] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 328.179048][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 328.180971][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 328.182943][T11855] ? fput+0x32/0x390 [ 328.184599][T11855] ? __bpf_prog_get+0xa0/0x2f0 [ 328.186597][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 328.189046][T11855] __sys_bpf+0x1af6/0x55e0 [ 328.190970][T11855] ? __pfx___sys_bpf+0x10/0x10 [ 328.192929][T11855] ? futex_wait+0x121/0x380 [ 328.194614][T11855] ? __pfx_futex_wait+0x10/0x10 [ 328.196261][T11855] ? fd_install+0x223/0x750 [ 328.197782][T11855] ? __pfx_lock_release+0x10/0x10 [ 328.199563][T11855] ? do_futex+0x123/0x350 [ 328.201001][T11855] ? __pfx_do_futex+0x10/0x10 [ 328.202599][T11855] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 328.204618][T11855] __ia32_sys_bpf+0x76/0xe0 [ 328.206135][T11855] __do_fast_syscall_32+0x73/0x120 [ 328.207859][T11855] do_fast_syscall_32+0x32/0x80 [ 328.209503][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 328.211810][T11855] RIP: 0023:0xf7f56579 [ 328.213243][T11855] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 328.220345][T11855] RSP: 002b:00000000f56f656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 328.223199][T11855] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000600 [ 328.225843][T11855] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 328.228480][T11855] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 328.231131][T11855] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 328.234057][T11855] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 328.236805][T11855] [ 328.237985][T11855] BUG: Bad page state in process syz.2.1921 pfn:21585 [ 328.240762][T11855] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x21585 [ 328.244628][T11855] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 328.247732][T11855] raw: 00fff00000000000 dead000000000040 ffff88805326a000 0000000000000000 [ 328.251546][T11855] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 328.255236][T11855] page dumped because: page_pool leak [ 328.257581][T11855] page_owner tracks the page as allocated [ 328.260089][T11855] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 11855, tgid 11854 (syz.2.1921), ts 324622463726, free_ts 323975198727 [ 328.268197][T11855] post_alloc_hook+0x2d1/0x350 [ 328.270313][T11855] get_page_from_freelist+0x1351/0x2e50 [ 328.272826][T11855] __alloc_pages_noprof+0x22b/0x2460 [ 328.274610][T11855] alloc_pages_bulk_noprof+0x742/0x14f0 [ 328.276559][T11855] __page_pool_alloc_pages_slow+0x19b/0xb30 [ 328.278741][T11855] page_pool_alloc_pages+0xb5/0x110 [ 328.280739][T11855] xdp_test_run_batch.constprop.0+0x30f/0x1880 [ 328.283447][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 328.285806][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 328.288194][T11855] __sys_bpf+0x1af6/0x55e0 [ 328.290134][T11855] __ia32_sys_bpf+0x76/0xe0 [ 328.292197][T11855] __do_fast_syscall_32+0x73/0x120 [ 328.294408][T11855] do_fast_syscall_32+0x32/0x80 [ 328.296516][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 328.299340][T11855] page last free pid 11815 tgid 11815 stack trace: [ 328.301984][T11855] free_unref_page+0x64a/0xe40 [ 328.303891][T11855] vfree+0x181/0x7a0 [ 328.305640][T11855] vb2_vmalloc_put+0x7b/0xc0 [ 328.307545][T11855] __vb2_buf_mem_free+0x154/0x2c0 [ 328.309773][T11855] __vb2_queue_free+0x861/0xac0 [ 328.312005][T11855] vb2_core_queue_release+0x70/0x190 [ 328.314330][T11855] v4l2_m2m_ctx_release+0x2a/0x40 [ 328.316527][T11855] vim2m_release+0xe8/0x170 [ 328.318528][T11855] v4l2_release+0x238/0x460 [ 328.320556][T11855] __fput+0x408/0xbb0 [ 328.322401][T11855] task_work_run+0x14e/0x250 [ 328.324482][T11855] syscall_exit_to_user_mode+0x27b/0x2a0 [ 328.326839][T11855] __do_fast_syscall_32+0x80/0x120 [ 328.329099][T11855] do_fast_syscall_32+0x32/0x80 [ 328.331296][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 328.333947][T11855] Modules linked in: [ 328.335687][T11855] CPU: 3 UID: 0 PID: 11855 Comm: syz.2.1921 Tainted: G B 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 328.340800][T11855] Tainted: [B]=BAD_PAGE [ 328.342624][T11855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 328.347246][T11855] Call Trace: [ 328.348713][T11855] [ 328.350016][T11855] dump_stack_lvl+0x16c/0x1f0 [ 328.352115][T11855] bad_page+0xb3/0x220 [ 328.353943][T11855] ? __pfx_bad_page+0x10/0x10 [ 328.356064][T11855] ? page_bad_reason+0x9d/0x1e0 [ 328.358228][T11855] free_unref_page+0x69e/0xe40 [ 328.360370][T11855] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 328.363008][T11855] ? __phys_addr+0xc6/0x150 [ 328.364949][T11855] skb_free_head+0xa0/0x1d0 [ 328.366996][T11855] skb_release_data+0x75c/0x980 [ 328.369158][T11855] ? __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 328.372143][T11855] ? rcu_is_watching+0x12/0xc0 [ 328.374177][T11855] sk_skb_reason_drop+0x133/0x200 [ 328.376370][T11855] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 328.379313][T11855] ? kernel_text_address+0x8d/0x100 [ 328.381614][T11855] ? __lock_acquire+0x1620/0x3cb0 [ 328.383854][T11855] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 328.386982][T11855] ? hlock_class+0x4e/0x130 [ 328.388982][T11855] ? __lock_acquire+0xbdd/0x3cb0 [ 328.391197][T11855] ? lock_acquire+0x1b1/0x560 [ 328.393291][T11855] ? find_held_lock+0x2d/0x110 [ 328.395460][T11855] ? __pfx___lock_acquire+0x10/0x10 [ 328.397700][T11855] __netif_receive_skb_list_core+0x357/0x950 [ 328.399846][T11855] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 328.402634][T11855] ? timekeeping_debug_get_ns+0x334/0x5b0 [ 328.405146][T11855] netif_receive_skb_list_internal+0x753/0xda0 [ 328.407806][T11855] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 328.410656][T11855] ? __pfx_eth_type_trans+0x10/0x10 [ 328.412640][T11855] ? __build_skb_around+0x278/0x3b0 [ 328.414676][T11855] netif_receive_skb_list+0x4f/0x4a0 [ 328.416868][T11855] xdp_test_run_batch.constprop.0+0x1296/0x1880 [ 328.418969][T11855] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 328.421249][T11855] ? bpf_test_timer_continue+0x150/0x3d0 [ 328.423715][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 328.426042][T11855] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 328.428558][T11855] ? find_held_lock+0x2d/0x110 [ 328.430749][T11855] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 328.433403][T11855] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 328.435772][T11855] ? 0xffffffffa0004340 [ 328.437622][T11855] ? 0xffffffffa0004340 [ 328.439489][T11855] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 328.442109][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 328.444110][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 328.446065][T11855] ? fput+0x32/0x390 [ 328.447394][T11855] ? __bpf_prog_get+0xa0/0x2f0 [ 328.449098][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 328.451034][T11855] __sys_bpf+0x1af6/0x55e0 [ 328.452543][T11855] ? __pfx___sys_bpf+0x10/0x10 [ 328.454210][T11855] ? futex_wait+0x121/0x380 [ 328.455866][T11855] ? __pfx_futex_wait+0x10/0x10 [ 328.458038][T11855] ? fd_install+0x223/0x750 [ 328.460077][T11855] ? __pfx_lock_release+0x10/0x10 [ 328.462312][T11855] ? do_futex+0x123/0x350 [ 328.463962][T11855] ? __pfx_do_futex+0x10/0x10 [ 328.465557][T11855] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 328.467672][T11855] __ia32_sys_bpf+0x76/0xe0 [ 328.469494][T11855] __do_fast_syscall_32+0x73/0x120 [ 328.471311][T11855] do_fast_syscall_32+0x32/0x80 [ 328.473278][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 328.476044][T11855] RIP: 0023:0xf7f56579 [ 328.477743][T11855] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 328.485718][T11855] RSP: 002b:00000000f56f656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 328.489253][T11855] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000600 [ 328.492560][T11855] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 328.495386][T11855] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 328.498480][T11855] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 328.501121][T11855] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 328.503887][T11855] [ 328.505045][T11855] BUG: Bad page state in process syz.2.1921 pfn:124df [ 328.507338][T11855] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880124df1b0 pfn:0x124df [ 328.510648][T11855] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 328.513582][T11855] raw: 00fff00000000000 dead000000000040 ffff88805326a000 0000000000000000 [ 328.517355][T11855] raw: ffff8880124df1b0 0000000000000001 00000000ffffffff 0000000000000000 [ 328.521197][T11855] page dumped because: page_pool leak [ 328.523567][T11855] page_owner tracks the page as allocated [ 328.525640][T11855] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 11855, tgid 11854 (syz.2.1921), ts 324622455353, free_ts 323975213951 [ 328.532566][T11855] post_alloc_hook+0x2d1/0x350 [ 328.534676][T11855] get_page_from_freelist+0x1351/0x2e50 [ 328.537089][T11855] __alloc_pages_noprof+0x22b/0x2460 [ 328.539423][T11855] alloc_pages_bulk_noprof+0x742/0x14f0 [ 328.541932][T11855] __page_pool_alloc_pages_slow+0x19b/0xb30 [ 328.544551][T11855] page_pool_alloc_pages+0xb5/0x110 [ 328.546822][T11855] xdp_test_run_batch.constprop.0+0x30f/0x1880 [ 328.549380][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 328.551608][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 328.553892][T11855] __sys_bpf+0x1af6/0x55e0 [ 328.555887][T11855] __ia32_sys_bpf+0x76/0xe0 [ 328.557913][T11855] __do_fast_syscall_32+0x73/0x120 [ 328.560106][T11855] do_fast_syscall_32+0x32/0x80 [ 328.561975][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 328.564520][T11855] page last free pid 11815 tgid 11815 stack trace: [ 328.567030][T11855] free_unref_page+0x64a/0xe40 [ 328.569069][T11855] vfree+0x181/0x7a0 [ 328.570901][T11855] vb2_vmalloc_put+0x7b/0xc0 [ 328.572693][T11855] __vb2_buf_mem_free+0x154/0x2c0 [ 328.574575][T11855] __vb2_queue_free+0x861/0xac0 [ 328.576222][T11855] vb2_core_queue_release+0x70/0x190 [ 328.577972][T11855] v4l2_m2m_ctx_release+0x2a/0x40 [ 328.579665][T11855] vim2m_release+0xe8/0x170 [ 328.581326][T11855] v4l2_release+0x238/0x460 [ 328.582935][T11855] __fput+0x408/0xbb0 [ 328.584445][T11855] task_work_run+0x14e/0x250 [ 328.586142][T11855] syscall_exit_to_user_mode+0x27b/0x2a0 [ 328.588476][T11855] __do_fast_syscall_32+0x80/0x120 [ 328.590631][T11855] do_fast_syscall_32+0x32/0x80 [ 328.592409][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 328.594819][T11855] Modules linked in: [ 328.596497][T11855] CPU: 3 UID: 0 PID: 11855 Comm: syz.2.1921 Tainted: G B 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 328.601383][T11855] Tainted: [B]=BAD_PAGE [ 328.603172][T11855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 328.607798][T11855] Call Trace: [ 328.609229][T11855] [ 328.610492][T11855] dump_stack_lvl+0x16c/0x1f0 [ 328.612604][T11855] bad_page+0xb3/0x220 [ 328.614430][T11855] ? __pfx_bad_page+0x10/0x10 [ 328.616543][T11855] ? page_bad_reason+0x9d/0x1e0 [ 328.618709][T11855] free_unref_page+0x69e/0xe40 [ 328.620843][T11855] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 328.623498][T11855] ? __phys_addr+0xc6/0x150 [ 328.625446][T11855] skb_free_head+0xa0/0x1d0 [ 328.627239][T11855] skb_release_data+0x75c/0x980 [ 328.629264][T11855] ? __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 328.632267][T11855] ? rcu_is_watching+0x12/0xc0 [ 328.634179][T11855] sk_skb_reason_drop+0x133/0x200 [ 328.636164][T11855] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 328.638958][T11855] ? kernel_text_address+0x8d/0x100 [ 328.641259][T11855] ? __lock_acquire+0x1620/0x3cb0 [ 328.643495][T11855] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 328.646610][T11855] ? hlock_class+0x4e/0x130 [ 328.648640][T11855] ? __lock_acquire+0xbdd/0x3cb0 [ 328.650683][T11855] ? lock_acquire+0x1b1/0x560 [ 328.652614][T11855] ? find_held_lock+0x2d/0x110 [ 328.654738][T11855] ? __pfx___lock_acquire+0x10/0x10 [ 328.657030][T11855] __netif_receive_skb_list_core+0x357/0x950 [ 328.659614][T11855] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 328.662385][T11855] ? timekeeping_debug_get_ns+0x334/0x5b0 [ 328.664859][T11855] netif_receive_skb_list_internal+0x753/0xda0 [ 328.667333][T11855] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 328.670137][T11855] ? __pfx_eth_type_trans+0x10/0x10 [ 328.672371][T11855] ? __build_skb_around+0x278/0x3b0 [ 328.674646][T11855] netif_receive_skb_list+0x4f/0x4a0 [ 328.676978][T11855] xdp_test_run_batch.constprop.0+0x1296/0x1880 [ 328.679695][T11855] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 328.682512][T11855] ? bpf_test_timer_continue+0x150/0x3d0 [ 328.684967][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 328.687292][T11855] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 328.689860][T11855] ? find_held_lock+0x2d/0x110 [ 328.691988][T11855] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 328.694582][T11855] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 328.696753][T11855] ? 0xffffffffa0004340 [ 328.698453][T11855] ? 0xffffffffa0004340 [ 328.700254][T11855] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 328.702762][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 328.705148][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 328.707748][T11855] ? fput+0x32/0x390 [ 328.709442][T11855] ? __bpf_prog_get+0xa0/0x2f0 [ 328.711452][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 328.714034][T11855] __sys_bpf+0x1af6/0x55e0 [ 328.716043][T11855] ? __pfx___sys_bpf+0x10/0x10 [ 328.718173][T11855] ? futex_wait+0x121/0x380 [ 328.720110][T11855] ? __pfx_futex_wait+0x10/0x10 [ 328.722174][T11855] ? fd_install+0x223/0x750 [ 328.724219][T11855] ? __pfx_lock_release+0x10/0x10 [ 328.726448][T11855] ? do_futex+0x123/0x350 [ 328.728379][T11855] ? __pfx_do_futex+0x10/0x10 [ 328.730411][T11855] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 328.732833][T11855] __ia32_sys_bpf+0x76/0xe0 [ 328.734511][T11855] __do_fast_syscall_32+0x73/0x120 [ 328.736241][T11855] do_fast_syscall_32+0x32/0x80 [ 328.737864][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 328.740448][T11855] RIP: 0023:0xf7f56579 [ 328.742206][T11855] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 328.750570][T11855] RSP: 002b:00000000f56f656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 328.753746][T11855] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000600 [ 328.757102][T11855] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 328.760492][T11855] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 328.763930][T11855] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 328.767422][T11855] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 328.770861][T11855] [ 328.772347][T11855] BUG: Bad page state in process syz.2.1921 pfn:26bde [ 328.774739][T11855] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888026bde690 pfn:0x26bde [ 328.778624][T11855] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 328.781668][T11855] raw: 00fff00000000000 dead000000000040 ffff88805326a000 0000000000000000 [ 328.784598][T11855] raw: ffff888026bde690 0000000000000001 00000000ffffffff 0000000000000000 [ 328.787475][T11855] page dumped because: page_pool leak [ 328.789258][T11855] page_owner tracks the page as allocated [ 328.791214][T11855] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 11855, tgid 11854 (syz.2.1921), ts 324622446156, free_ts 323975228585 [ 328.798695][T11855] post_alloc_hook+0x2d1/0x350 [ 328.800374][T11855] get_page_from_freelist+0x1351/0x2e50 [ 328.802276][T11855] __alloc_pages_noprof+0x22b/0x2460 [ 328.804062][T11855] alloc_pages_bulk_noprof+0x742/0x14f0 [ 328.805973][T11855] __page_pool_alloc_pages_slow+0x19b/0xb30 [ 328.808209][T11855] page_pool_alloc_pages+0xb5/0x110 [ 328.809936][T11855] xdp_test_run_batch.constprop.0+0x30f/0x1880 [ 328.812060][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 328.813829][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 328.815680][T11855] __sys_bpf+0x1af6/0x55e0 [ 328.817199][T11855] __ia32_sys_bpf+0x76/0xe0 [ 328.818729][T11855] __do_fast_syscall_32+0x73/0x120 [ 328.820466][T11855] do_fast_syscall_32+0x32/0x80 [ 328.822419][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 328.825111][T11855] page last free pid 11815 tgid 11815 stack trace: [ 328.827804][T11855] free_unref_page+0x64a/0xe40 [ 328.829845][T11855] vfree+0x181/0x7a0 [ 328.831578][T11855] vb2_vmalloc_put+0x7b/0xc0 [ 328.833505][T11855] __vb2_buf_mem_free+0x154/0x2c0 [ 328.835680][T11855] __vb2_queue_free+0x861/0xac0 [ 328.837748][T11855] vb2_core_queue_release+0x70/0x190 [ 328.839822][T11855] v4l2_m2m_ctx_release+0x2a/0x40 [ 328.841532][T11855] vim2m_release+0xe8/0x170 [ 328.843405][T11855] v4l2_release+0x238/0x460 [ 328.845339][T11855] __fput+0x408/0xbb0 [ 328.847040][T11855] task_work_run+0x14e/0x250 [ 328.849082][T11855] syscall_exit_to_user_mode+0x27b/0x2a0 [ 328.851621][T11855] __do_fast_syscall_32+0x80/0x120 [ 328.853976][T11855] do_fast_syscall_32+0x32/0x80 [ 328.856177][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 328.859014][T11855] Modules linked in: [ 328.860531][T11855] CPU: 3 UID: 0 PID: 11855 Comm: syz.2.1921 Tainted: G B 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 328.865642][T11855] Tainted: [B]=BAD_PAGE [ 328.867442][T11855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 328.871875][T11855] Call Trace: [ 328.873280][T11855] [ 328.874528][T11855] dump_stack_lvl+0x16c/0x1f0 [ 328.876564][T11855] bad_page+0xb3/0x220 [ 328.878329][T11855] ? __pfx_bad_page+0x10/0x10 [ 328.880372][T11855] ? page_bad_reason+0x9d/0x1e0 [ 328.882065][T11855] free_unref_page+0x69e/0xe40 [ 328.883714][T11855] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 328.885714][T11855] ? __phys_addr+0xc6/0x150 [ 328.887244][T11855] skb_free_head+0xa0/0x1d0 [ 328.888809][T11855] skb_release_data+0x75c/0x980 [ 328.890466][T11855] ? __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 328.892776][T11855] ? rcu_is_watching+0x12/0xc0 [ 328.894403][T11855] sk_skb_reason_drop+0x133/0x200 [ 328.896131][T11855] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 328.898364][T11855] ? kernel_text_address+0x8d/0x100 [ 328.900142][T11855] ? __lock_acquire+0x1620/0x3cb0 [ 328.901893][T11855] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 328.904274][T11855] ? hlock_class+0x4e/0x130 [ 328.905809][T11855] ? __lock_acquire+0xbdd/0x3cb0 [ 328.907549][T11855] ? lock_acquire+0x1b1/0x560 [ 328.909143][T11855] ? find_held_lock+0x2d/0x110 [ 328.910786][T11855] ? __pfx___lock_acquire+0x10/0x10 [ 328.912545][T11855] __netif_receive_skb_list_core+0x357/0x950 [ 328.914570][T11855] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 328.916761][T11855] ? timekeeping_debug_get_ns+0x334/0x5b0 [ 328.918671][T11855] netif_receive_skb_list_internal+0x753/0xda0 [ 328.920761][T11855] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 328.923000][T11855] ? __pfx_eth_type_trans+0x10/0x10 [ 328.924757][T11855] ? __build_skb_around+0x278/0x3b0 [ 328.926496][T11855] netif_receive_skb_list+0x4f/0x4a0 [ 328.928274][T11855] xdp_test_run_batch.constprop.0+0x1296/0x1880 [ 328.930372][T11855] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 328.932976][T11855] ? bpf_test_timer_continue+0x150/0x3d0 [ 328.935297][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 328.937135][T11855] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 328.939120][T11855] ? find_held_lock+0x2d/0x110 [ 328.940760][T11855] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 328.942729][T11855] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 328.944525][T11855] ? 0xffffffffa0004340 [ 328.945926][T11855] ? 0xffffffffa0004340 [ 328.947458][T11855] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 328.949917][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 328.951871][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 328.953841][T11855] ? fput+0x32/0x390 [ 328.955182][T11855] ? __bpf_prog_get+0xa0/0x2f0 [ 328.956801][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 328.958811][T11855] __sys_bpf+0x1af6/0x55e0 [ 328.960739][T11855] ? __pfx___sys_bpf+0x10/0x10 [ 328.962376][T11855] ? futex_wait+0x121/0x380 [ 328.963980][T11855] ? __pfx_futex_wait+0x10/0x10 [ 328.965810][T11855] ? fd_install+0x223/0x750 [ 328.967720][T11855] ? __pfx_lock_release+0x10/0x10 [ 328.969825][T11855] ? do_futex+0x123/0x350 [ 328.971625][T11855] ? __pfx_do_futex+0x10/0x10 [ 328.973601][T11855] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 328.975872][T11855] __ia32_sys_bpf+0x76/0xe0 [ 328.977406][T11855] __do_fast_syscall_32+0x73/0x120 [ 328.979145][T11855] do_fast_syscall_32+0x32/0x80 [ 328.980810][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 328.982931][T11855] RIP: 0023:0xf7f56579 [ 328.984323][T11855] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 328.991976][T11855] RSP: 002b:00000000f56f656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 328.995624][T11855] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000600 [ 328.998939][T11855] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 329.002043][T11855] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 329.004746][T11855] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 329.007451][T11855] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 329.010099][T11855] [ 329.011282][T11855] BUG: Bad page state in process syz.2.1921 pfn:26d90 [ 329.013788][T11855] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888026d90288 pfn:0x26d90 [ 329.017184][T11855] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 329.019573][T11855] raw: 00fff00000000000 dead000000000040 ffff88805326a000 0000000000000000 [ 329.022517][T11855] raw: ffff888026d90288 0000000000000001 00000000ffffffff 0000000000000000 [ 329.025392][T11855] page dumped because: page_pool leak [ 329.027203][T11855] page_owner tracks the page as allocated [ 329.029100][T11855] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 11855, tgid 11854 (syz.2.1921), ts 324622434529, free_ts 323975244508 [ 329.035554][T11855] post_alloc_hook+0x2d1/0x350 [ 329.037213][T11855] get_page_from_freelist+0x1351/0x2e50 [ 329.039073][T11855] __alloc_pages_noprof+0x22b/0x2460 [ 329.040892][T11855] alloc_pages_bulk_noprof+0x742/0x14f0 [ 329.042743][T11855] __page_pool_alloc_pages_slow+0x19b/0xb30 [ 329.044755][T11855] page_pool_alloc_pages+0xb5/0x110 [ 329.046493][T11855] xdp_test_run_batch.constprop.0+0x30f/0x1880 [ 329.048559][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 329.050485][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 329.052373][T11855] __sys_bpf+0x1af6/0x55e0 [ 329.053908][T11855] __ia32_sys_bpf+0x76/0xe0 [ 329.055460][T11855] __do_fast_syscall_32+0x73/0x120 [ 329.057186][T11855] do_fast_syscall_32+0x32/0x80 [ 329.058829][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 329.061013][T11855] page last free pid 11815 tgid 11815 stack trace: [ 329.063200][T11855] free_unref_page+0x64a/0xe40 [ 329.064827][T11855] vfree+0x181/0x7a0 [ 329.066155][T11855] vb2_vmalloc_put+0x7b/0xc0 [ 329.067741][T11855] __vb2_buf_mem_free+0x154/0x2c0 [ 329.069440][T11855] __vb2_queue_free+0x861/0xac0 [ 329.071134][T11855] vb2_core_queue_release+0x70/0x190 [ 329.072917][T11855] v4l2_m2m_ctx_release+0x2a/0x40 [ 329.074615][T11855] vim2m_release+0xe8/0x170 [ 329.076167][T11855] v4l2_release+0x238/0x460 [ 329.077709][T11855] __fput+0x408/0xbb0 [ 329.079079][T11855] task_work_run+0x14e/0x250 [ 329.080695][T11855] syscall_exit_to_user_mode+0x27b/0x2a0 [ 329.082574][T11855] __do_fast_syscall_32+0x80/0x120 [ 329.084330][T11855] do_fast_syscall_32+0x32/0x80 [ 329.085975][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 329.088078][T11855] Modules linked in: [ 329.089417][T11855] CPU: 3 UID: 0 PID: 11855 Comm: syz.2.1921 Tainted: G B 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 329.093527][T11855] Tainted: [B]=BAD_PAGE [ 329.094927][T11855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 329.098625][T11855] Call Trace: [ 329.099805][T11855] [ 329.100804][T11855] dump_stack_lvl+0x16c/0x1f0 [ 329.102395][T11855] bad_page+0xb3/0x220 [ 329.103706][T11855] ? __pfx_bad_page+0x10/0x10 [ 329.105303][T11855] ? page_bad_reason+0x9d/0x1e0 [ 329.107333][T11855] free_unref_page+0x69e/0xe40 [ 329.109329][T11855] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 329.111825][T11855] ? __phys_addr+0xc6/0x150 [ 329.113718][T11855] skb_free_head+0xa0/0x1d0 [ 329.115441][T11855] skb_release_data+0x75c/0x980 [ 329.117087][T11855] ? __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 329.119383][T11855] ? rcu_is_watching+0x12/0xc0 [ 329.121070][T11855] sk_skb_reason_drop+0x133/0x200 [ 329.122825][T11855] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 329.125486][T11855] ? kernel_text_address+0x8d/0x100 [ 329.127627][T11855] ? __lock_acquire+0x1620/0x3cb0 [ 329.129746][T11855] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 329.132750][T11855] ? hlock_class+0x4e/0x130 [ 329.134695][T11855] ? __lock_acquire+0xbdd/0x3cb0 [ 329.136849][T11855] ? lock_acquire+0x1b1/0x560 [ 329.138849][T11855] ? find_held_lock+0x2d/0x110 [ 329.140572][T11855] ? __pfx___lock_acquire+0x10/0x10 [ 329.142701][T11855] __netif_receive_skb_list_core+0x357/0x950 [ 329.145304][T11855] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 329.148090][T11855] ? timekeeping_debug_get_ns+0x334/0x5b0 [ 329.150525][T11855] netif_receive_skb_list_internal+0x753/0xda0 [ 329.153137][T11855] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 329.155979][T11855] ? __pfx_eth_type_trans+0x10/0x10 [ 329.158221][T11855] ? __build_skb_around+0x278/0x3b0 [ 329.160462][T11855] netif_receive_skb_list+0x4f/0x4a0 [ 329.162721][T11855] xdp_test_run_batch.constprop.0+0x1296/0x1880 [ 329.165404][T11855] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 329.168203][T11855] ? bpf_test_timer_continue+0x150/0x3d0 [ 329.170416][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 329.172390][T11855] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 329.174900][T11855] ? find_held_lock+0x2d/0x110 [ 329.176960][T11855] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 329.179267][T11855] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 329.181121][T11855] ? 0xffffffffa0004340 [ 329.182919][T11855] ? 0xffffffffa0004340 [ 329.184549][T11855] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 329.186498][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 329.188820][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 329.190833][T11855] ? fput+0x32/0x390 [ 329.192300][T11855] ? __bpf_prog_get+0xa0/0x2f0 [ 329.194350][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 329.196833][T11855] __sys_bpf+0x1af6/0x55e0 [ 329.198757][T11855] ? __pfx___sys_bpf+0x10/0x10 [ 329.200827][T11855] ? futex_wait+0x121/0x380 [ 329.202783][T11855] ? __pfx_futex_wait+0x10/0x10 [ 329.204537][T11855] ? fd_install+0x223/0x750 [ 329.206211][T11855] ? __pfx_lock_release+0x10/0x10 [ 329.208160][T11855] ? do_futex+0x123/0x350 [ 329.209624][T11855] ? __pfx_do_futex+0x10/0x10 [ 329.211501][T11855] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 329.213719][T11855] __ia32_sys_bpf+0x76/0xe0 [ 329.215380][T11855] __do_fast_syscall_32+0x73/0x120 [ 329.217565][T11855] do_fast_syscall_32+0x32/0x80 [ 329.219462][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 329.221734][T11855] RIP: 0023:0xf7f56579 [ 329.223490][T11855] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 329.231058][T11855] RSP: 002b:00000000f56f656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 329.233956][T11855] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000600 [ 329.237319][T11855] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 329.240678][T11855] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 329.244021][T11855] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 329.246762][T11855] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 329.250116][T11855] [ 329.251612][T11855] BUG: Bad page state in process syz.2.1921 pfn:2a486 [ 329.254449][T11855] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802a486000 pfn:0x2a486 [ 329.258032][T11855] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 329.261103][T11855] raw: 00fff00000000000 dead000000000040 ffff88805326a000 0000000000000000 [ 329.264641][T11855] raw: ffff88802a486000 0000000000000001 00000000ffffffff 0000000000000000 [ 329.267826][T11855] page dumped because: page_pool leak [ 329.270109][T11855] page_owner tracks the page as allocated [ 329.272613][T11855] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 11855, tgid 11854 (syz.2.1921), ts 324622373594, free_ts 323975260724 [ 329.279873][T11855] post_alloc_hook+0x2d1/0x350 [ 329.282015][T11855] get_page_from_freelist+0x1351/0x2e50 [ 329.284094][T11855] __alloc_pages_noprof+0x22b/0x2460 [ 329.286080][T11855] alloc_pages_bulk_noprof+0x742/0x14f0 [ 329.288439][T11855] __page_pool_alloc_pages_slow+0x19b/0xb30 [ 329.290544][T11855] page_pool_alloc_pages+0xb5/0x110 [ 329.292838][T11855] xdp_test_run_batch.constprop.0+0x30f/0x1880 [ 329.295471][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 329.297531][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 329.299431][T11855] __sys_bpf+0x1af6/0x55e0 [ 329.300984][T11855] __ia32_sys_bpf+0x76/0xe0 [ 329.302518][T11855] __do_fast_syscall_32+0x73/0x120 [ 329.304266][T11855] do_fast_syscall_32+0x32/0x80 [ 329.305902][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 329.308031][T11855] page last free pid 11815 tgid 11815 stack trace: [ 329.310187][T11855] free_unref_page+0x64a/0xe40 [ 329.311763][T11855] vfree+0x181/0x7a0 [ 329.312950][T11855] vb2_vmalloc_put+0x7b/0xc0 [ 329.314706][T11855] __vb2_buf_mem_free+0x154/0x2c0 [ 329.316817][T11855] __vb2_queue_free+0x861/0xac0 [ 329.318850][T11855] vb2_core_queue_release+0x70/0x190 [ 329.321117][T11855] v4l2_m2m_ctx_release+0x2a/0x40 [ 329.323210][T11855] vim2m_release+0xe8/0x170 [ 329.325113][T11855] v4l2_release+0x238/0x460 [ 329.326966][T11855] __fput+0x408/0xbb0 [ 329.328334][T11855] task_work_run+0x14e/0x250 [ 329.329913][T11855] syscall_exit_to_user_mode+0x27b/0x2a0 [ 329.331875][T11855] __do_fast_syscall_32+0x80/0x120 [ 329.333612][T11855] do_fast_syscall_32+0x32/0x80 [ 329.335268][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 329.337397][T11855] Modules linked in: [ 329.338723][T11855] CPU: 3 UID: 0 PID: 11855 Comm: syz.2.1921 Tainted: G B 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 329.342777][T11855] Tainted: [B]=BAD_PAGE [ 329.344207][T11855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 329.347792][T11855] Call Trace: [ 329.348931][T11855] [ 329.349944][T11855] dump_stack_lvl+0x16c/0x1f0 [ 329.351557][T11855] bad_page+0xb3/0x220 [ 329.352948][T11855] ? __pfx_bad_page+0x10/0x10 [ 329.354552][T11855] ? page_bad_reason+0x9d/0x1e0 [ 329.356212][T11855] free_unref_page+0x69e/0xe40 [ 329.357828][T11855] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 329.359862][T11855] ? __phys_addr+0xc6/0x150 [ 329.361418][T11855] skb_free_head+0xa0/0x1d0 [ 329.363012][T11855] skb_release_data+0x75c/0x980 [ 329.364678][T11855] ? __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 329.366961][T11855] ? rcu_is_watching+0x12/0xc0 [ 329.368575][T11855] sk_skb_reason_drop+0x133/0x200 [ 329.370266][T11855] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 329.372522][T11855] ? kernel_text_address+0x8d/0x100 [ 329.374281][T11855] ? __lock_acquire+0x1620/0x3cb0 [ 329.376119][T11855] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 329.379042][T11855] ? hlock_class+0x4e/0x130 [ 329.380936][T11855] ? __lock_acquire+0xbdd/0x3cb0 [ 329.383004][T11855] ? lock_acquire+0x1b1/0x560 [ 329.384984][T11855] ? find_held_lock+0x2d/0x110 [ 329.386978][T11855] ? __pfx___lock_acquire+0x10/0x10 [ 329.389149][T11855] __netif_receive_skb_list_core+0x357/0x950 [ 329.391644][T11855] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 329.394320][T11855] ? timekeeping_debug_get_ns+0x334/0x5b0 [ 329.396711][T11855] netif_receive_skb_list_internal+0x753/0xda0 [ 329.399282][T11855] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 329.402028][T11855] ? __pfx_eth_type_trans+0x10/0x10 [ 329.404228][T11855] ? __build_skb_around+0x278/0x3b0 [ 329.406385][T11855] netif_receive_skb_list+0x4f/0x4a0 [ 329.408589][T11855] xdp_test_run_batch.constprop.0+0x1296/0x1880 [ 329.411199][T11855] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 329.413817][T11855] ? bpf_test_timer_continue+0x150/0x3d0 [ 329.415929][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 329.417928][T11855] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 329.420264][T11855] ? find_held_lock+0x2d/0x110 [ 329.421996][T11855] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 329.424301][T11855] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 329.426514][T11855] ? 0xffffffffa0004340 [ 329.428268][T11855] ? 0xffffffffa0004340 [ 329.430017][T11855] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 329.432495][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 329.434733][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 329.436770][T11855] ? fput+0x32/0x390 [ 329.438092][T11855] ? __bpf_prog_get+0xa0/0x2f0 [ 329.439958][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 329.442395][T11855] __sys_bpf+0x1af6/0x55e0 [ 329.444018][T11855] ? __pfx___sys_bpf+0x10/0x10 [ 329.445691][T11855] ? futex_wait+0x121/0x380 [ 329.447615][T11855] ? __pfx_futex_wait+0x10/0x10 [ 329.449655][T11855] ? fd_install+0x223/0x750 [ 329.451586][T11855] ? __pfx_lock_release+0x10/0x10 [ 329.453711][T11855] ? do_futex+0x123/0x350 [ 329.455553][T11855] ? __pfx_do_futex+0x10/0x10 [ 329.457398][T11855] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 329.459443][T11855] __ia32_sys_bpf+0x76/0xe0 [ 329.461327][T11855] __do_fast_syscall_32+0x73/0x120 [ 329.463289][T11855] do_fast_syscall_32+0x32/0x80 [ 329.465278][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 329.467791][T11855] RIP: 0023:0xf7f56579 [ 329.469507][T11855] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 329.476393][T11855] RSP: 002b:00000000f56f656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 329.479676][T11855] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000600 [ 329.482496][T11855] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 329.485371][T11855] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 329.488325][T11855] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 329.491344][T11855] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 329.494268][T11855] [ 329.495509][T11855] BUG: Bad page state in process syz.2.1921 pfn:2b805 [ 329.497822][T11855] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802b8053c0 pfn:0x2b805 [ 329.501339][T11855] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 329.503939][T11855] raw: 00fff00000000000 dead000000000040 ffff88805326a000 0000000000000000 [ 329.507291][T11855] raw: ffff88802b8053c0 0000000000000001 00000000ffffffff 0000000000000000 [ 329.511032][T11855] page dumped because: page_pool leak [ 329.513212][T11855] page_owner tracks the page as allocated [ 329.515656][T11855] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 11855, tgid 11854 (syz.2.1921), ts 324622365458, free_ts 323975276059 [ 329.523034][T11855] post_alloc_hook+0x2d1/0x350 [ 329.525123][T11855] get_page_from_freelist+0x1351/0x2e50 [ 329.527504][T11855] __alloc_pages_noprof+0x22b/0x2460 [ 329.529756][T11855] alloc_pages_bulk_noprof+0x742/0x14f0 [ 329.532140][T11855] __page_pool_alloc_pages_slow+0x19b/0xb30 [ 329.534673][T11855] page_pool_alloc_pages+0xb5/0x110 [ 329.536931][T11855] xdp_test_run_batch.constprop.0+0x30f/0x1880 [ 329.539539][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 329.541940][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 329.544265][T11855] __sys_bpf+0x1af6/0x55e0 [ 329.546175][T11855] __ia32_sys_bpf+0x76/0xe0 [ 329.548123][T11855] __do_fast_syscall_32+0x73/0x120 [ 329.550369][T11855] do_fast_syscall_32+0x32/0x80 [ 329.552577][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 329.555287][T11855] page last free pid 11815 tgid 11815 stack trace: [ 329.558003][T11855] free_unref_page+0x64a/0xe40 [ 329.560051][T11855] vfree+0x181/0x7a0 [ 329.561761][T11855] vb2_vmalloc_put+0x7b/0xc0 [ 329.563701][T11855] __vb2_buf_mem_free+0x154/0x2c0 [ 329.565895][T11855] __vb2_queue_free+0x861/0xac0 [ 329.567613][T11855] vb2_core_queue_release+0x70/0x190 [ 329.569457][T11855] v4l2_m2m_ctx_release+0x2a/0x40 [ 329.571202][T11855] vim2m_release+0xe8/0x170 [ 329.573019][T11855] v4l2_release+0x238/0x460 [ 329.575007][T11855] __fput+0x408/0xbb0 [ 329.576737][T11855] task_work_run+0x14e/0x250 [ 329.578747][T11855] syscall_exit_to_user_mode+0x27b/0x2a0 [ 329.581232][T11855] __do_fast_syscall_32+0x80/0x120 [ 329.583371][T11855] do_fast_syscall_32+0x32/0x80 [ 329.585484][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 329.588199][T11855] Modules linked in: [ 329.589880][T11855] CPU: 3 UID: 0 PID: 11855 Comm: syz.2.1921 Tainted: G B 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 329.594622][T11855] Tainted: [B]=BAD_PAGE [ 329.596410][T11855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 329.600341][T11855] Call Trace: [ 329.601732][T11855] [ 329.602969][T11855] dump_stack_lvl+0x16c/0x1f0 [ 329.604951][T11855] bad_page+0xb3/0x220 [ 329.606748][T11855] ? __pfx_bad_page+0x10/0x10 [ 329.608851][T11855] ? page_bad_reason+0x9d/0x1e0 [ 329.611023][T11855] free_unref_page+0x69e/0xe40 [ 329.613103][T11855] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 329.615752][T11855] ? __phys_addr+0xc6/0x150 [ 329.617708][T11855] skb_free_head+0xa0/0x1d0 [ 329.619261][T11855] skb_release_data+0x75c/0x980 [ 329.620898][T11855] ? __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 329.623205][T11855] ? rcu_is_watching+0x12/0xc0 [ 329.624834][T11855] sk_skb_reason_drop+0x133/0x200 [ 329.626518][T11855] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 329.628914][T11855] ? kernel_text_address+0x8d/0x100 [ 329.630688][T11855] ? __lock_acquire+0x1620/0x3cb0 [ 329.632431][T11855] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 329.634782][T11855] ? hlock_class+0x4e/0x130 [ 329.636337][T11855] ? __lock_acquire+0xbdd/0x3cb0 [ 329.638306][T11855] ? lock_acquire+0x1b1/0x560 [ 329.639954][T11855] ? find_held_lock+0x2d/0x110 [ 329.641598][T11855] ? __pfx___lock_acquire+0x10/0x10 [ 329.643341][T11855] __netif_receive_skb_list_core+0x357/0x950 [ 329.645503][T11855] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 329.648059][T11855] ? timekeeping_debug_get_ns+0x334/0x5b0 [ 329.650138][T11855] netif_receive_skb_list_internal+0x753/0xda0 [ 329.652681][T11855] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 329.655552][T11855] ? __pfx_eth_type_trans+0x10/0x10 [ 329.657681][T11855] ? __build_skb_around+0x278/0x3b0 [ 329.659876][T11855] netif_receive_skb_list+0x4f/0x4a0 [ 329.662201][T11855] xdp_test_run_batch.constprop.0+0x1296/0x1880 [ 329.664815][T11855] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 329.667668][T11855] ? bpf_test_timer_continue+0x150/0x3d0 [ 329.670112][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 329.672438][T11855] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 329.675002][T11855] ? find_held_lock+0x2d/0x110 [ 329.677093][T11855] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 329.679686][T11855] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 329.681981][T11855] ? 0xffffffffa0004340 [ 329.683774][T11855] ? 0xffffffffa0004340 [ 329.685564][T11855] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 329.688149][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 329.690461][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 329.692993][T11855] ? fput+0x32/0x390 [ 329.694744][T11855] ? __bpf_prog_get+0xa0/0x2f0 [ 329.696820][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 329.699343][T11855] __sys_bpf+0x1af6/0x55e0 [ 329.701267][T11855] ? __pfx___sys_bpf+0x10/0x10 [ 329.703276][T11855] ? futex_wait+0x121/0x380 [ 329.705241][T11855] ? __pfx_futex_wait+0x10/0x10 [ 329.707335][T11855] ? fd_install+0x223/0x750 [ 329.709295][T11855] ? __pfx_lock_release+0x10/0x10 [ 329.711466][T11855] ? do_futex+0x123/0x350 [ 329.713328][T11855] ? __pfx_do_futex+0x10/0x10 [ 329.715350][T11855] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 329.717971][T11855] __ia32_sys_bpf+0x76/0xe0 [ 329.719967][T11855] __do_fast_syscall_32+0x73/0x120 [ 329.722065][T11855] do_fast_syscall_32+0x32/0x80 [ 329.724171][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 329.726858][T11855] RIP: 0023:0xf7f56579 [ 329.728655][T11855] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 329.736841][T11855] RSP: 002b:00000000f56f656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 329.740417][T11855] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000600 [ 329.743623][T11855] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 329.746358][T11855] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 329.749298][T11855] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 329.752769][T11855] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 329.755816][T11855] [ 329.757339][T11855] BUG: Bad page state in process syz.2.1921 pfn:21559 [ 329.760419][T11855] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880215593c0 pfn:0x21559 [ 329.764991][T11855] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 329.768175][T11855] raw: 00fff00000000000 dead000000000040 ffff88805326a000 0000000000000000 [ 329.772069][T11855] raw: ffff8880215593c0 0000000000000001 00000000ffffffff 0000000000000000 [ 329.775657][T11855] page dumped because: page_pool leak [ 329.777441][T11855] page_owner tracks the page as allocated [ 329.779380][T11855] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 11855, tgid 11854 (syz.2.1921), ts 324622357632, free_ts 323975290686 [ 329.787230][T11855] post_alloc_hook+0x2d1/0x350 [ 329.789387][T11855] get_page_from_freelist+0x1351/0x2e50 [ 329.791930][T11855] __alloc_pages_noprof+0x22b/0x2460 [ 329.794309][T11855] alloc_pages_bulk_noprof+0x742/0x14f0 [ 329.796779][T11855] __page_pool_alloc_pages_slow+0x19b/0xb30 [ 329.799428][T11855] page_pool_alloc_pages+0xb5/0x110 [ 329.801824][T11855] xdp_test_run_batch.constprop.0+0x30f/0x1880 [ 329.804610][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 329.806894][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 329.809259][T11855] __sys_bpf+0x1af6/0x55e0 [ 329.811335][T11855] __ia32_sys_bpf+0x76/0xe0 [ 329.813392][T11855] __do_fast_syscall_32+0x73/0x120 [ 329.815694][T11855] do_fast_syscall_32+0x32/0x80 [ 329.817887][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 329.820778][T11855] page last free pid 11815 tgid 11815 stack trace: [ 329.823813][T11855] free_unref_page+0x64a/0xe40 [ 329.825988][T11855] vfree+0x181/0x7a0 [ 329.827773][T11855] vb2_vmalloc_put+0x7b/0xc0 [ 329.829862][T11855] __vb2_buf_mem_free+0x154/0x2c0 [ 329.832212][T11855] __vb2_queue_free+0x861/0xac0 [ 329.834430][T11855] vb2_core_queue_release+0x70/0x190 [ 329.836816][T11855] v4l2_m2m_ctx_release+0x2a/0x40 [ 329.839094][T11855] vim2m_release+0xe8/0x170 [ 329.841201][T11855] v4l2_release+0x238/0x460 [ 329.843283][T11855] __fput+0x408/0xbb0 [ 329.845097][T11855] task_work_run+0x14e/0x250 [ 329.847201][T11855] syscall_exit_to_user_mode+0x27b/0x2a0 [ 329.849725][T11855] __do_fast_syscall_32+0x80/0x120 [ 329.852107][T11855] do_fast_syscall_32+0x32/0x80 [ 329.854320][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 329.857188][T11855] Modules linked in: [ 329.858967][T11855] CPU: 3 UID: 0 PID: 11855 Comm: syz.2.1921 Tainted: G B 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 329.864365][T11855] Tainted: [B]=BAD_PAGE [ 329.866222][T11855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 329.870897][T11855] Call Trace: [ 329.872404][T11855] [ 329.873728][T11855] dump_stack_lvl+0x16c/0x1f0 [ 329.875873][T11855] bad_page+0xb3/0x220 [ 329.877935][T11855] ? __pfx_bad_page+0x10/0x10 [ 329.880112][T11855] ? page_bad_reason+0x9d/0x1e0 [ 329.882324][T11855] free_unref_page+0x69e/0xe40 [ 329.884517][T11855] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 329.887211][T11855] ? __phys_addr+0xc6/0x150 [ 329.889265][T11855] skb_free_head+0xa0/0x1d0 [ 329.891316][T11855] skb_release_data+0x75c/0x980 [ 329.893526][T11855] ? __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 329.896609][T11855] ? rcu_is_watching+0x12/0xc0 [ 329.898711][T11855] sk_skb_reason_drop+0x133/0x200 [ 329.900900][T11855] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 329.903897][T11855] ? kernel_text_address+0x8d/0x100 [ 329.906267][T11855] ? __lock_acquire+0x1620/0x3cb0 [ 329.908531][T11855] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 329.911694][T11855] ? hlock_class+0x4e/0x130 [ 329.913756][T11855] ? __lock_acquire+0xbdd/0x3cb0 [ 329.916018][T11855] ? lock_acquire+0x1b1/0x560 [ 329.918144][T11855] ? find_held_lock+0x2d/0x110 [ 329.920306][T11855] ? __pfx___lock_acquire+0x10/0x10 [ 329.922662][T11855] __netif_receive_skb_list_core+0x357/0x950 [ 329.925366][T11855] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 329.928280][T11855] ? timekeeping_debug_get_ns+0x334/0x5b0 [ 329.930828][T11855] netif_receive_skb_list_internal+0x753/0xda0 [ 329.933626][T11855] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 329.936628][T11855] ? __pfx_eth_type_trans+0x10/0x10 [ 329.938944][T11855] ? __build_skb_around+0x278/0x3b0 [ 329.941296][T11855] netif_receive_skb_list+0x4f/0x4a0 [ 329.943691][T11855] xdp_test_run_batch.constprop.0+0x1296/0x1880 [ 329.946518][T11855] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 329.949483][T11855] ? bpf_test_timer_continue+0x150/0x3d0 [ 329.952027][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 329.954433][T11855] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 329.957063][T11855] ? find_held_lock+0x2d/0x110 [ 329.959257][T11855] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 329.961297][T11855] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 329.963163][T11855] ? 0xffffffffa0004340 [ 329.964899][T11855] ? 0xffffffffa0004340 [ 329.966767][T11855] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 329.969417][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 329.971850][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 329.974460][T11855] ? fput+0x32/0x390 [ 329.976251][T11855] ? __bpf_prog_get+0xa0/0x2f0 [ 329.978417][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 329.981070][T11855] __sys_bpf+0x1af6/0x55e0 [ 329.983128][T11855] ? __pfx___sys_bpf+0x10/0x10 [ 329.985329][T11855] ? futex_wait+0x121/0x380 [ 329.987425][T11855] ? __pfx_futex_wait+0x10/0x10 [ 329.989656][T11855] ? fd_install+0x223/0x750 [ 329.991736][T11855] ? __pfx_lock_release+0x10/0x10 [ 329.994014][T11855] ? do_futex+0x123/0x350 [ 329.995919][T11855] ? __pfx_do_futex+0x10/0x10 [ 329.998060][T11855] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 330.000797][T11855] __ia32_sys_bpf+0x76/0xe0 [ 330.002899][T11855] __do_fast_syscall_32+0x73/0x120 [ 330.005225][T11855] do_fast_syscall_32+0x32/0x80 [ 330.007469][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 330.010295][T11855] RIP: 0023:0xf7f56579 [ 330.012152][T11855] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 330.020551][T11855] RSP: 002b:00000000f56f656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 330.024008][T11855] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000600 [ 330.027586][T11855] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 330.031099][T11855] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 330.034507][T11855] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 330.038036][T11855] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 330.041626][T11855] [ 330.043183][T11855] BUG: Bad page state in process syz.2.1921 pfn:1cea8 [ 330.046281][T11855] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1cea8 [ 330.050170][T11855] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 330.053430][T11855] raw: 00fff00000000000 dead000000000040 ffff88805326a000 0000000000000000 [ 330.057236][T11855] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 330.061124][T11855] page dumped because: page_pool leak [ 330.063559][T11855] page_owner tracks the page as allocated [ 330.066099][T11855] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 11855, tgid 11854 (syz.2.1921), ts 324622349824, free_ts 323975304665 [ 330.074489][T11855] post_alloc_hook+0x2d1/0x350 [ 330.076682][T11855] get_page_from_freelist+0x1351/0x2e50 [ 330.079183][T11855] __alloc_pages_noprof+0x22b/0x2460 [ 330.081631][T11855] alloc_pages_bulk_noprof+0x742/0x14f0 [ 330.084125][T11855] __page_pool_alloc_pages_slow+0x19b/0xb30 [ 330.086806][T11855] page_pool_alloc_pages+0xb5/0x110 [ 330.089143][T11855] xdp_test_run_batch.constprop.0+0x30f/0x1880 [ 330.091972][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 330.094342][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 330.096800][T11855] __sys_bpf+0x1af6/0x55e0 [ 330.098835][T11855] __ia32_sys_bpf+0x76/0xe0 [ 330.100974][T11855] __do_fast_syscall_32+0x73/0x120 [ 330.103312][T11855] do_fast_syscall_32+0x32/0x80 [ 330.105527][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 330.108378][T11855] page last free pid 11815 tgid 11815 stack trace: [ 330.111349][T11855] free_unref_page+0x64a/0xe40 [ 330.113519][T11855] vfree+0x181/0x7a0 [ 330.115308][T11855] vb2_vmalloc_put+0x7b/0xc0 [ 330.117410][T11855] __vb2_buf_mem_free+0x154/0x2c0 [ 330.119703][T11855] __vb2_queue_free+0x861/0xac0 [ 330.121963][T11855] vb2_core_queue_release+0x70/0x190 [ 330.124356][T11855] v4l2_m2m_ctx_release+0x2a/0x40 [ 330.126607][T11855] vim2m_release+0xe8/0x170 [ 330.128650][T11855] v4l2_release+0x238/0x460 [ 330.130503][T11855] __fput+0x408/0xbb0 [ 330.132335][T11855] task_work_run+0x14e/0x250 [ 330.134409][T11855] syscall_exit_to_user_mode+0x27b/0x2a0 [ 330.136944][T11855] __do_fast_syscall_32+0x80/0x120 [ 330.139257][T11855] do_fast_syscall_32+0x32/0x80 [ 330.141538][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 330.144388][T11855] Modules linked in: [ 330.146167][T11855] CPU: 3 UID: 0 PID: 11855 Comm: syz.2.1921 Tainted: G B 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 330.150786][T11737] usb 5-1: device descriptor read/64, error -110 [ 330.151597][T11855] Tainted: [B]=BAD_PAGE [ 330.155407][T11855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 330.160116][T11855] Call Trace: [ 330.161513][T11855] [ 330.162710][T11855] dump_stack_lvl+0x16c/0x1f0 [ 330.164822][T11855] bad_page+0xb3/0x220 [ 330.166680][T11855] ? __pfx_bad_page+0x10/0x10 [ 330.168842][T11855] ? page_bad_reason+0x9d/0x1e0 [ 330.171063][T11855] free_unref_page+0x69e/0xe40 [ 330.173230][T11855] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 330.175920][T11855] ? __phys_addr+0xc6/0x150 [ 330.177989][T11855] skb_free_head+0xa0/0x1d0 [ 330.180064][T11855] skb_release_data+0x75c/0x980 [ 330.182267][T11855] ? __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 330.185335][T11855] ? rcu_is_watching+0x12/0xc0 [ 330.187530][T11855] sk_skb_reason_drop+0x133/0x200 [ 330.189780][T11855] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 330.192741][T11855] ? kernel_text_address+0x8d/0x100 [ 330.195053][T11855] ? __lock_acquire+0x1620/0x3cb0 [ 330.197343][T11855] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 330.199927][T11855] ? hlock_class+0x4e/0x130 [ 330.201648][T11855] ? __lock_acquire+0xbdd/0x3cb0 [ 330.203909][T11855] ? lock_acquire+0x1b1/0x560 [ 330.206053][T11855] ? find_held_lock+0x2d/0x110 [ 330.208205][T11855] ? __pfx___lock_acquire+0x10/0x10 [ 330.210523][T11855] __netif_receive_skb_list_core+0x357/0x950 [ 330.213050][T11855] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 330.215945][T11855] ? timekeeping_debug_get_ns+0x334/0x5b0 [ 330.218507][T11855] netif_receive_skb_list_internal+0x753/0xda0 [ 330.221253][T11855] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 330.224246][T11855] ? __pfx_eth_type_trans+0x10/0x10 [ 330.226590][T11855] ? __build_skb_around+0x278/0x3b0 [ 330.228947][T11855] netif_receive_skb_list+0x4f/0x4a0 [ 330.231312][T11855] xdp_test_run_batch.constprop.0+0x1296/0x1880 [ 330.234097][T11855] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 330.237059][T11855] ? bpf_test_timer_continue+0x150/0x3d0 [ 330.239600][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 330.241994][T11855] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 330.244652][T11855] ? find_held_lock+0x2d/0x110 [ 330.246795][T11855] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 330.249480][T11855] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 330.251849][T11855] ? 0xffffffffa0004340 [ 330.253714][T11855] ? 0xffffffffa0004340 [ 330.255601][T11855] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 330.258261][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 330.260700][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 330.263290][T11855] ? fput+0x32/0x390 [ 330.265087][T11855] ? __bpf_prog_get+0xa0/0x2f0 [ 330.267270][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 330.269882][T11855] __sys_bpf+0x1af6/0x55e0 [ 330.271908][T11855] ? __pfx___sys_bpf+0x10/0x10 [ 330.274080][T11855] ? futex_wait+0x121/0x380 [ 330.276133][T11855] ? __pfx_futex_wait+0x10/0x10 [ 330.278317][T11855] ? fd_install+0x223/0x750 [ 330.280384][T11855] ? __pfx_lock_release+0x10/0x10 [ 330.282615][T11855] ? do_futex+0x123/0x350 [ 330.284583][T11855] ? __pfx_do_futex+0x10/0x10 [ 330.286696][T11855] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 330.289373][T11855] __ia32_sys_bpf+0x76/0xe0 [ 330.291419][T11855] __do_fast_syscall_32+0x73/0x120 [ 330.293726][T11855] do_fast_syscall_32+0x32/0x80 [ 330.295884][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 330.298714][T11855] RIP: 0023:0xf7f56579 [ 330.300574][T11855] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 330.309167][T11855] RSP: 002b:00000000f56f656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 330.312890][T11855] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000600 [ 330.316444][T11855] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 330.319988][T11855] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 330.323376][T11855] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 330.326942][T11855] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 330.330367][T11855] [ 330.331931][T11855] BUG: Bad page state in process syz.2.1921 pfn:1242a [ 330.334978][T11855] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x847 pfn:0x1242a [ 330.338924][T11855] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 330.342146][T11855] raw: 00fff00000000000 dead000000000040 ffff88805326a000 0000000000000000 [ 330.345968][T11855] raw: 0000000000000847 0000000000000001 00000000ffffffff 0000000000000000 [ 330.349800][T11855] page dumped because: page_pool leak [ 330.352285][T11855] page_owner tracks the page as allocated [ 330.354805][T11855] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 11855, tgid 11854 (syz.2.1921), ts 324622341968, free_ts 323975318422 [ 330.363091][T11855] post_alloc_hook+0x2d1/0x350 [ 330.365087][T11855] get_page_from_freelist+0x1351/0x2e50 [ 330.367575][T11855] __alloc_pages_noprof+0x22b/0x2460 [ 330.369957][T11855] alloc_pages_bulk_noprof+0x742/0x14f0 [ 330.372361][T11855] __page_pool_alloc_pages_slow+0x19b/0xb30 [ 330.374991][T11855] page_pool_alloc_pages+0xb5/0x110 [ 330.377330][T11855] xdp_test_run_batch.constprop.0+0x30f/0x1880 [ 330.380098][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 330.382516][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 330.384970][T11855] __sys_bpf+0x1af6/0x55e0 [ 330.386479][T11855] __ia32_sys_bpf+0x76/0xe0 [ 330.388435][T11855] __do_fast_syscall_32+0x73/0x120 [ 330.390801][T11855] do_fast_syscall_32+0x32/0x80 [ 330.393005][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 330.395851][T11855] page last free pid 11815 tgid 11815 stack trace: [ 330.398727][T11855] free_unref_page+0x64a/0xe40 [ 330.400949][T11855] vfree+0x181/0x7a0 [ 330.402707][T11855] vb2_vmalloc_put+0x7b/0xc0 [ 330.404825][T11855] __vb2_buf_mem_free+0x154/0x2c0 [ 330.407077][T11855] __vb2_queue_free+0x861/0xac0 [ 330.409200][T11855] vb2_core_queue_release+0x70/0x190 [ 330.411582][T11855] v4l2_m2m_ctx_release+0x2a/0x40 [ 330.413850][T11855] vim2m_release+0xe8/0x170 [ 330.415899][T11855] v4l2_release+0x238/0x460 [ 330.417930][T11855] __fput+0x408/0xbb0 [ 330.419733][T11855] task_work_run+0x14e/0x250 [ 330.420689][T11737] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 330.421882][T11855] syscall_exit_to_user_mode+0x27b/0x2a0 [ 330.427323][T11855] __do_fast_syscall_32+0x80/0x120 [ 330.429601][T11855] do_fast_syscall_32+0x32/0x80 [ 330.431849][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 330.434655][T11855] Modules linked in: [ 330.436250][T11855] CPU: 3 UID: 0 PID: 11855 Comm: syz.2.1921 Tainted: G B 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 330.441010][T11855] Tainted: [B]=BAD_PAGE [ 330.442659][T11855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 330.447408][T11855] Call Trace: [ 330.448828][T11855] [ 330.449818][T11855] dump_stack_lvl+0x16c/0x1f0 [ 330.451608][T11855] bad_page+0xb3/0x220 [ 330.453220][T11855] ? __pfx_bad_page+0x10/0x10 [ 330.454797][T11855] ? page_bad_reason+0x9d/0x1e0 [ 330.456442][T11855] free_unref_page+0x69e/0xe40 [ 330.458356][T11855] ? __phys_addr+0xc6/0x150 [ 330.460207][T11855] skb_free_head+0xa0/0x1d0 [ 330.462224][T11855] skb_release_data+0x75c/0x980 [ 330.464417][T11855] ? __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 330.467420][T11855] ? rcu_is_watching+0x12/0xc0 [ 330.469560][T11855] sk_skb_reason_drop+0x133/0x200 [ 330.471453][T11855] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 330.474130][T11855] ? kernel_text_address+0x8d/0x100 [ 330.476354][T11855] ? __lock_acquire+0x1620/0x3cb0 [ 330.478570][T11855] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 330.481584][T11855] ? hlock_class+0x4e/0x130 [ 330.483569][T11855] ? __lock_acquire+0xbdd/0x3cb0 [ 330.485779][T11855] ? lock_acquire+0x1b1/0x560 [ 330.487784][T11855] ? find_held_lock+0x2d/0x110 [ 330.489624][T11855] ? __pfx___lock_acquire+0x10/0x10 [ 330.491780][T11855] __netif_receive_skb_list_core+0x357/0x950 [ 330.494241][T11855] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 330.496934][T11855] ? timekeeping_debug_get_ns+0x334/0x5b0 [ 330.498812][T11855] netif_receive_skb_list_internal+0x753/0xda0 [ 330.500896][T11855] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 330.503428][T11855] ? __pfx_eth_type_trans+0x10/0x10 [ 330.505471][T11855] ? __build_skb_around+0x278/0x3b0 [ 330.507684][T11855] netif_receive_skb_list+0x4f/0x4a0 [ 330.509932][T11855] xdp_test_run_batch.constprop.0+0x1296/0x1880 [ 330.512545][T11855] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 330.515252][T11855] ? bpf_test_timer_continue+0x150/0x3d0 [ 330.517491][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 330.519200][T11855] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 330.521158][T11855] ? find_held_lock+0x2d/0x110 [ 330.523025][T11855] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 330.525595][T11855] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 330.527883][T11855] ? 0xffffffffa0004340 [ 330.529653][T11855] ? 0xffffffffa0004340 [ 330.531134][T11855] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 330.533291][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 330.535327][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 330.537698][T11855] ? fput+0x32/0x390 [ 330.539015][T11855] ? __bpf_prog_get+0xa0/0x2f0 [ 330.540638][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 330.543079][T11855] __sys_bpf+0x1af6/0x55e0 [ 330.544945][T11855] ? __pfx___sys_bpf+0x10/0x10 [ 330.546933][T11855] ? futex_wait+0x121/0x380 [ 330.548794][T11855] ? __pfx_futex_wait+0x10/0x10 [ 330.550800][T11855] ? fd_install+0x223/0x750 [ 330.552790][T11855] ? __pfx_lock_release+0x10/0x10 [ 330.554971][T11855] ? do_futex+0x123/0x350 [ 330.556823][T11855] ? __pfx_do_futex+0x10/0x10 [ 330.558818][T11855] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 330.561356][T11855] __ia32_sys_bpf+0x76/0xe0 [ 330.563291][T11855] __do_fast_syscall_32+0x73/0x120 [ 330.565432][T11855] do_fast_syscall_32+0x32/0x80 [ 330.567524][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 330.570202][T11855] RIP: 0023:0xf7f56579 [ 330.570660][T11737] usb 5-1: device descriptor read/64, error -32 [ 330.571805][T11855] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 330.582233][T11855] RSP: 002b:00000000f56f656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 330.585824][T11855] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000600 [ 330.589198][T11855] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 330.592548][T11855] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 330.596042][T11855] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 330.599497][T11855] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 330.602833][T11855] [ 330.604291][T11855] BUG: Bad page state in process syz.2.1921 pfn:211ff [ 330.607225][T11855] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x211ff [ 330.610938][T11855] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 330.613917][T11855] raw: 00fff00000000000 dead000000000040 ffff88805326a000 0000000000000000 [ 330.617398][T11855] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 330.620257][T11855] page dumped because: page_pool leak [ 330.622371][T11855] page_owner tracks the page as allocated [ 330.624740][T11855] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 11855, tgid 11854 (syz.2.1921), ts 324622333722, free_ts 323975332447 [ 330.631297][T11855] post_alloc_hook+0x2d1/0x350 [ 330.633125][T11855] get_page_from_freelist+0x1351/0x2e50 [ 330.634977][T11855] __alloc_pages_noprof+0x22b/0x2460 [ 330.636749][T11855] alloc_pages_bulk_noprof+0x742/0x14f0 [ 330.639141][T11855] __page_pool_alloc_pages_slow+0x19b/0xb30 [ 330.641744][T11855] page_pool_alloc_pages+0xb5/0x110 [ 330.643675][T11855] xdp_test_run_batch.constprop.0+0x30f/0x1880 [ 330.645733][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 330.647576][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 330.649616][T11855] __sys_bpf+0x1af6/0x55e0 [ 330.651468][T11855] __ia32_sys_bpf+0x76/0xe0 [ 330.653135][T11855] __do_fast_syscall_32+0x73/0x120 [ 330.654830][T11855] do_fast_syscall_32+0x32/0x80 [ 330.656491][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 330.658974][T11855] page last free pid 11815 tgid 11815 stack trace: [ 330.661227][T11855] free_unref_page+0x64a/0xe40 [ 330.663107][T11855] vfree+0x181/0x7a0 [ 330.664433][T11855] vb2_vmalloc_put+0x7b/0xc0 [ 330.665970][T11855] __vb2_buf_mem_free+0x154/0x2c0 [ 330.668024][T11855] __vb2_queue_free+0x861/0xac0 [ 330.670066][T11855] vb2_core_queue_release+0x70/0x190 [ 330.672329][T11855] v4l2_m2m_ctx_release+0x2a/0x40 [ 330.674400][T11855] vim2m_release+0xe8/0x170 [ 330.676302][T11855] v4l2_release+0x238/0x460 [ 330.678085][T11855] __fput+0x408/0xbb0 [ 330.679776][T11855] task_work_run+0x14e/0x250 [ 330.681604][T11855] syscall_exit_to_user_mode+0x27b/0x2a0 [ 330.683683][T11855] __do_fast_syscall_32+0x80/0x120 [ 330.685393][T11855] do_fast_syscall_32+0x32/0x80 [ 330.687121][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 330.689505][T11855] Modules linked in: [ 330.691074][T11855] CPU: 3 UID: 0 PID: 11855 Comm: syz.2.1921 Tainted: G B 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 330.695940][T11855] Tainted: [B]=BAD_PAGE [ 330.697455][T11855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 330.700877][T11737] usb usb5-port1: attempt power cycle [ 330.700986][T11855] Call Trace: [ 330.700993][T11855] [ 330.705186][T11855] dump_stack_lvl+0x16c/0x1f0 [ 330.706765][T11855] bad_page+0xb3/0x220 [ 330.708514][T11855] ? __pfx_bad_page+0x10/0x10 [ 330.710572][T11855] ? page_bad_reason+0x9d/0x1e0 [ 330.712702][T11855] free_unref_page+0x69e/0xe40 [ 330.714518][T11855] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 330.716537][T11855] ? __phys_addr+0xc6/0x150 [ 330.718077][T11855] skb_free_head+0xa0/0x1d0 [ 330.719623][T11855] skb_release_data+0x75c/0x980 [ 330.721357][T11855] ? __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 330.723689][T11855] ? rcu_is_watching+0x12/0xc0 [ 330.725365][T11855] sk_skb_reason_drop+0x133/0x200 [ 330.727097][T11855] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 330.729292][T11855] ? kernel_text_address+0x8d/0x100 [ 330.731229][T11855] ? __lock_acquire+0x1620/0x3cb0 [ 330.733039][T11855] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 330.735483][T11855] ? hlock_class+0x4e/0x130 [ 330.737000][T11855] ? __lock_acquire+0xbdd/0x3cb0 [ 330.738651][T11855] ? lock_acquire+0x1b1/0x560 [ 330.740240][T11855] ? find_held_lock+0x2d/0x110 [ 330.742235][T11855] ? __pfx___lock_acquire+0x10/0x10 [ 330.744481][T11855] __netif_receive_skb_list_core+0x357/0x950 [ 330.747016][T11855] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 330.749772][T11855] ? timekeeping_debug_get_ns+0x334/0x5b0 [ 330.752200][T11855] netif_receive_skb_list_internal+0x753/0xda0 [ 330.754825][T11855] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 330.757735][T11855] ? __pfx_eth_type_trans+0x10/0x10 [ 330.760026][T11855] ? __build_skb_around+0x278/0x3b0 [ 330.762326][T11855] netif_receive_skb_list+0x4f/0x4a0 [ 330.764682][T11855] xdp_test_run_batch.constprop.0+0x1296/0x1880 [ 330.767461][T11855] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 330.770361][T11855] ? bpf_test_timer_continue+0x150/0x3d0 [ 330.772849][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 330.775147][T11855] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 330.777711][T11855] ? find_held_lock+0x2d/0x110 [ 330.779854][T11855] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 330.782475][T11855] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 330.784746][T11855] ? 0xffffffffa0004340 [ 330.786579][T11855] ? 0xffffffffa0004340 [ 330.788446][T11855] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 330.791036][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 330.793150][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 330.795439][T11855] ? fput+0x32/0x390 [ 330.796991][T11855] ? __bpf_prog_get+0xa0/0x2f0 [ 330.798851][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 330.801136][T11855] __sys_bpf+0x1af6/0x55e0 [ 330.802981][T11855] ? __pfx___sys_bpf+0x10/0x10 [ 330.805049][T11855] ? futex_wait+0x121/0x380 [ 330.806887][T11855] ? __pfx_futex_wait+0x10/0x10 [ 330.809003][T11855] ? fd_install+0x223/0x750 [ 330.810961][T11855] ? __pfx_lock_release+0x10/0x10 [ 330.813112][T11855] ? do_futex+0x123/0x350 [ 330.814978][T11855] ? __pfx_do_futex+0x10/0x10 [ 330.817052][T11855] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 330.819591][T11855] __ia32_sys_bpf+0x76/0xe0 [ 330.821525][T11855] __do_fast_syscall_32+0x73/0x120 [ 330.823804][T11855] do_fast_syscall_32+0x32/0x80 [ 330.825881][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 330.828587][T11855] RIP: 0023:0xf7f56579 [ 330.830321][T11855] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 330.838576][T11855] RSP: 002b:00000000f56f656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 330.842103][T11855] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000600 [ 330.845268][T11855] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 330.848359][T11855] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 330.851558][T11855] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 330.854841][T11855] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 330.858041][T11855] [ 330.859423][T11855] BUG: Bad page state in process syz.2.1921 pfn:20c14 [ 330.862117][T11855] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20c14 [ 330.865791][T11855] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 330.868834][T11855] raw: 00fff00000000000 dead000000000040 ffff88805326a000 0000000000000000 [ 330.872528][T11855] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 330.876139][T11855] page dumped because: page_pool leak [ 330.878413][T11855] page_owner tracks the page as allocated [ 330.880889][T11855] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 11855, tgid 11854 (syz.2.1921), ts 324622325552, free_ts 323975345902 [ 330.888625][T11855] post_alloc_hook+0x2d1/0x350 [ 330.890757][T11855] get_page_from_freelist+0x1351/0x2e50 [ 330.892936][T11855] __alloc_pages_noprof+0x22b/0x2460 [ 330.895096][T11855] alloc_pages_bulk_noprof+0x742/0x14f0 [ 330.897419][T11855] __page_pool_alloc_pages_slow+0x19b/0xb30 [ 330.899932][T11855] page_pool_alloc_pages+0xb5/0x110 [ 330.902264][T11855] xdp_test_run_batch.constprop.0+0x30f/0x1880 [ 330.905017][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 330.907262][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 330.909247][T11855] __sys_bpf+0x1af6/0x55e0 [ 330.911065][T11855] __ia32_sys_bpf+0x76/0xe0 [ 330.912861][T11855] __do_fast_syscall_32+0x73/0x120 [ 330.914643][T11855] do_fast_syscall_32+0x32/0x80 [ 330.916297][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 330.918405][T11855] page last free pid 11815 tgid 11815 stack trace: [ 330.920620][T11855] free_unref_page+0x64a/0xe40 [ 330.922219][T11855] vfree+0x181/0x7a0 [ 330.923757][T11855] vb2_vmalloc_put+0x7b/0xc0 [ 330.925590][T11855] __vb2_buf_mem_free+0x154/0x2c0 [ 330.927719][T11855] __vb2_queue_free+0x861/0xac0 [ 330.929804][T11855] vb2_core_queue_release+0x70/0x190 [ 330.932072][T11855] v4l2_m2m_ctx_release+0x2a/0x40 [ 330.934066][T11855] vim2m_release+0xe8/0x170 [ 330.936012][T11855] v4l2_release+0x238/0x460 [ 330.937936][T11855] __fput+0x408/0xbb0 [ 330.939587][T11855] task_work_run+0x14e/0x250 [ 330.941574][T11855] syscall_exit_to_user_mode+0x27b/0x2a0 [ 330.943945][T11855] __do_fast_syscall_32+0x80/0x120 [ 330.946101][T11855] do_fast_syscall_32+0x32/0x80 [ 330.948172][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 330.950897][T11855] Modules linked in: [ 330.952569][T11855] CPU: 3 UID: 0 PID: 11855 Comm: syz.2.1921 Tainted: G B 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 330.957593][T11855] Tainted: [B]=BAD_PAGE [ 330.959353][T11855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 330.963843][T11855] Call Trace: [ 330.965077][T11855] [ 330.966026][T11855] dump_stack_lvl+0x16c/0x1f0 [ 330.967609][T11855] bad_page+0xb3/0x220 [ 330.968995][T11855] ? __pfx_bad_page+0x10/0x10 [ 330.970561][T11855] ? page_bad_reason+0x9d/0x1e0 [ 330.972227][T11855] free_unref_page+0x69e/0xe40 [ 330.973843][T11855] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 330.975942][T11855] ? __phys_addr+0xc6/0x150 [ 330.977630][T11855] skb_free_head+0xa0/0x1d0 [ 330.979255][T11855] skb_release_data+0x75c/0x980 [ 330.981040][T11855] ? __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 330.983714][T11855] ? rcu_is_watching+0x12/0xc0 [ 330.985714][T11855] sk_skb_reason_drop+0x133/0x200 [ 330.987664][T11855] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 330.990326][T11855] ? kernel_text_address+0x8d/0x100 [ 330.992572][T11855] ? __lock_acquire+0x1620/0x3cb0 [ 330.994411][T11855] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 330.996988][T11855] ? hlock_class+0x4e/0x130 [ 330.998941][T11855] ? __lock_acquire+0xbdd/0x3cb0 [ 331.000763][T11855] ? lock_acquire+0x1b1/0x560 [ 331.002205][T11855] ? find_held_lock+0x2d/0x110 [ 331.003635][T11855] ? __pfx___lock_acquire+0x10/0x10 [ 331.005180][T11855] __netif_receive_skb_list_core+0x357/0x950 [ 331.007045][T11855] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 331.009074][T11855] ? timekeeping_debug_get_ns+0x334/0x5b0 [ 331.011163][T11855] netif_receive_skb_list_internal+0x753/0xda0 [ 331.013783][T11855] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 331.016527][T11855] ? __pfx_eth_type_trans+0x10/0x10 [ 331.018258][T11855] ? __build_skb_around+0x278/0x3b0 [ 331.020012][T11855] netif_receive_skb_list+0x4f/0x4a0 [ 331.021776][T11855] xdp_test_run_batch.constprop.0+0x1296/0x1880 [ 331.024444][T11855] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 331.027306][T11855] ? bpf_test_timer_continue+0x150/0x3d0 [ 331.029819][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 331.032119][T11855] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 331.034600][T11855] ? find_held_lock+0x2d/0x110 [ 331.036669][T11855] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 331.039190][T11855] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 331.041434][T11855] ? 0xffffffffa0004340 [ 331.043228][T11855] ? 0xffffffffa0004340 [ 331.045007][T11855] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 331.047279][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 331.049090][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 331.051071][T11855] ? fput+0x32/0x390 [ 331.052398][T11855] ? __bpf_prog_get+0xa0/0x2f0 [ 331.054006][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 331.056309][T11855] __sys_bpf+0x1af6/0x55e0 [ 331.058243][T11855] ? __pfx___sys_bpf+0x10/0x10 [ 331.060335][T11855] ? futex_wait+0x121/0x380 [ 331.062289][T11855] ? __pfx_futex_wait+0x10/0x10 [ 331.064369][T11855] ? fd_install+0x223/0x750 [ 331.066266][T11855] ? __pfx_lock_release+0x10/0x10 [ 331.068102][T11855] ? do_futex+0x123/0x350 [ 331.069641][T11855] ? __pfx_do_futex+0x10/0x10 [ 331.071183][T11855] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 331.073196][T11855] __ia32_sys_bpf+0x76/0xe0 [ 331.074878][T11855] __do_fast_syscall_32+0x73/0x120 [ 331.076680][T11855] do_fast_syscall_32+0x32/0x80 [ 331.078162][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 331.080287][T11855] RIP: 0023:0xf7f56579 [ 331.081678][T11855] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 331.088175][T11855] RSP: 002b:00000000f56f656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 331.091502][T11855] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000600 [ 331.094910][T11855] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 331.098221][T11855] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 331.101539][T11855] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 331.104880][T11855] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 331.108098][T11855] [ 331.109539][T11855] BUG: Bad page state in process syz.2.1921 pfn:262de [ 331.112469][T11855] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x262de [ 331.116161][T11855] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 331.118847][T11855] raw: 00fff00000000000 dead000000000040 ffff88805326a000 0000000000000000 [ 331.122545][T11855] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 331.126161][T11855] page dumped because: page_pool leak [ 331.128536][T11855] page_owner tracks the page as allocated [ 331.130896][T11855] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 11855, tgid 11854 (syz.2.1921), ts 324622317607, free_ts 323975359878 [ 331.138616][T11855] post_alloc_hook+0x2d1/0x350 [ 331.140724][T11855] get_page_from_freelist+0x1351/0x2e50 [ 331.143076][T11855] __alloc_pages_noprof+0x22b/0x2460 [ 331.145321][T11855] alloc_pages_bulk_noprof+0x742/0x14f0 [ 331.147677][T11855] __page_pool_alloc_pages_slow+0x19b/0xb30 [ 331.150168][T11855] page_pool_alloc_pages+0xb5/0x110 [ 331.150803][T11737] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 331.152448][T11855] xdp_test_run_batch.constprop.0+0x30f/0x1880 [ 331.157831][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 331.160182][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 331.162528][T11855] __sys_bpf+0x1af6/0x55e0 [ 331.164454][T11855] __ia32_sys_bpf+0x76/0xe0 [ 331.166384][T11855] __do_fast_syscall_32+0x73/0x120 [ 331.168580][T11855] do_fast_syscall_32+0x32/0x80 [ 331.170703][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 331.173322][T11855] page last free pid 11815 tgid 11815 stack trace: [ 331.176030][T11855] free_unref_page+0x64a/0xe40 [ 331.178153][T11855] vfree+0x181/0x7a0 [ 331.179842][T11855] vb2_vmalloc_put+0x7b/0xc0 [ 331.181876][T11855] __vb2_buf_mem_free+0x154/0x2c0 [ 331.184003][T11855] __vb2_queue_free+0x861/0xac0 [ 331.186068][T11855] vb2_core_queue_release+0x70/0x190 [ 331.188448][T11855] v4l2_m2m_ctx_release+0x2a/0x40 [ 331.190245][T11855] vim2m_release+0xe8/0x170 [ 331.190929][T11737] usb 5-1: device descriptor read/8, error -32 [ 331.192208][T11855] v4l2_release+0x238/0x460 [ 331.196224][T11855] __fput+0x408/0xbb0 [ 331.197934][T11855] task_work_run+0x14e/0x250 [ 331.199914][T11855] syscall_exit_to_user_mode+0x27b/0x2a0 [ 331.202283][T11855] __do_fast_syscall_32+0x80/0x120 [ 331.204427][T11855] do_fast_syscall_32+0x32/0x80 [ 331.206574][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 331.209386][T11855] Modules linked in: [ 331.211195][T11855] CPU: 3 UID: 0 PID: 11855 Comm: syz.2.1921 Tainted: G B 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 331.216432][T11855] Tainted: [B]=BAD_PAGE [ 331.218084][T11855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 331.221671][T11855] Call Trace: [ 331.222792][T11855] [ 331.223808][T11855] dump_stack_lvl+0x16c/0x1f0 [ 331.225411][T11855] bad_page+0xb3/0x220 [ 331.227093][T11855] ? __pfx_bad_page+0x10/0x10 [ 331.229031][T11855] ? page_bad_reason+0x9d/0x1e0 [ 331.231066][T11855] free_unref_page+0x69e/0xe40 [ 331.233114][T11855] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 331.235680][T11855] ? __phys_addr+0xc6/0x150 [ 331.237635][T11855] skb_free_head+0xa0/0x1d0 [ 331.239571][T11855] skb_release_data+0x75c/0x980 [ 331.241667][T11855] ? __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 331.244579][T11855] ? rcu_is_watching+0x12/0xc0 [ 331.246613][T11855] sk_skb_reason_drop+0x133/0x200 [ 331.248761][T11855] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 331.251597][T11855] ? kernel_text_address+0x8d/0x100 [ 331.253795][T11855] ? __lock_acquire+0x1620/0x3cb0 [ 331.255893][T11855] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 331.258824][T11855] ? hlock_class+0x4e/0x130 [ 331.260717][T11855] ? __lock_acquire+0xbdd/0x3cb0 [ 331.262575][T11855] ? lock_acquire+0x1b1/0x560 [ 331.264531][T11855] ? find_held_lock+0x2d/0x110 [ 331.266477][T11855] ? __pfx___lock_acquire+0x10/0x10 [ 331.268594][T11855] __netif_receive_skb_list_core+0x357/0x950 [ 331.271008][T11855] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 331.273621][T11855] ? timekeeping_debug_get_ns+0x334/0x5b0 [ 331.275970][T11855] netif_receive_skb_list_internal+0x753/0xda0 [ 331.278449][T11855] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 331.281100][T11855] ? __pfx_eth_type_trans+0x10/0x10 [ 331.283174][T11855] ? __build_skb_around+0x278/0x3b0 [ 331.285299][T11855] netif_receive_skb_list+0x4f/0x4a0 [ 331.287449][T11855] xdp_test_run_batch.constprop.0+0x1296/0x1880 [ 331.289956][T11855] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 331.292622][T11855] ? bpf_test_timer_continue+0x150/0x3d0 [ 331.294895][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 331.297046][T11855] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 331.299413][T11855] ? find_held_lock+0x2d/0x110 [ 331.301341][T11855] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 331.303755][T11855] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 331.305907][T11855] ? 0xffffffffa0004340 [ 331.307576][T11855] ? 0xffffffffa0004340 [ 331.309251][T11855] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 331.310740][T11737] raw-gadget.0 gadget.0: failed to queue suspend event [ 331.311672][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 331.314436][T11737] raw-gadget.0 gadget.0: failed to queue reset event [ 331.316536][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 331.321535][T11855] ? fput+0x32/0x390 [ 331.323232][T11855] ? __bpf_prog_get+0xa0/0x2f0 [ 331.325304][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 331.327810][T11855] __sys_bpf+0x1af6/0x55e0 [ 331.329739][T11855] ? __pfx___sys_bpf+0x10/0x10 [ 331.331816][T11855] ? futex_wait+0x121/0x380 [ 331.333592][T11855] ? __pfx_futex_wait+0x10/0x10 [ 331.335624][T11855] ? fd_install+0x223/0x750 [ 331.337581][T11855] ? __pfx_lock_release+0x10/0x10 [ 331.339757][T11855] ? do_futex+0x123/0x350 [ 331.341607][T11855] ? __pfx_do_futex+0x10/0x10 [ 331.343651][T11855] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 331.346237][T11855] __ia32_sys_bpf+0x76/0xe0 [ 331.348198][T11855] __do_fast_syscall_32+0x73/0x120 [ 331.350474][T11855] do_fast_syscall_32+0x32/0x80 [ 331.352592][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 331.355144][T11855] RIP: 0023:0xf7f56579 [ 331.356836][T11855] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 331.365009][T11855] RSP: 002b:00000000f56f656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 331.368602][T11855] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000600 [ 331.372061][T11855] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 331.375541][T11855] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 331.379007][T11855] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 331.382486][T11855] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 331.385918][T11855] [ 331.387411][T11855] BUG: Bad page state in process syz.2.1921 pfn:263e5 [ 331.390338][T11855] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880263e5f00 pfn:0x263e5 [ 331.390685][T11737] raw-gadget.0 gadget.0: failed to queue resume event [ 331.394767][T11855] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 331.400521][T11855] raw: 00fff00000000000 dead000000000040 ffff88805326a000 0000000000000000 [ 331.404341][T11855] raw: ffff8880263e5f00 0000000000000001 00000000ffffffff 0000000000000000 [ 331.407895][T11855] page dumped because: page_pool leak [ 331.409893][T11855] page_owner tracks the page as allocated [ 331.412399][T11855] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 11855, tgid 11854 (syz.2.1921), ts 324622309754, free_ts 323975373434 [ 331.420213][T11855] post_alloc_hook+0x2d1/0x350 [ 331.422380][T11855] get_page_from_freelist+0x1351/0x2e50 [ 331.424810][T11855] __alloc_pages_noprof+0x22b/0x2460 [ 331.427155][T11855] alloc_pages_bulk_noprof+0x742/0x14f0 [ 331.429539][T11855] __page_pool_alloc_pages_slow+0x19b/0xb30 [ 331.432219][T11855] page_pool_alloc_pages+0xb5/0x110 [ 331.434482][T11855] xdp_test_run_batch.constprop.0+0x30f/0x1880 [ 331.437223][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 331.439568][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 331.442006][T11855] __sys_bpf+0x1af6/0x55e0 [ 331.443946][T11855] __ia32_sys_bpf+0x76/0xe0 [ 331.445912][T11855] __do_fast_syscall_32+0x73/0x120 [ 331.447848][T11855] do_fast_syscall_32+0x32/0x80 [ 331.449459][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 331.451379][T11855] page last free pid 11815 tgid 11815 stack trace: [ 331.454021][T11855] free_unref_page+0x64a/0xe40 [ 331.455883][T11855] vfree+0x181/0x7a0 [ 331.457283][T11855] vb2_vmalloc_put+0x7b/0xc0 [ 331.459060][T11855] __vb2_buf_mem_free+0x154/0x2c0 [ 331.460660][T11737] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 331.460796][T11855] __vb2_queue_free+0x861/0xac0 [ 331.465690][T11855] vb2_core_queue_release+0x70/0x190 [ 331.467937][T11855] v4l2_m2m_ctx_release+0x2a/0x40 [ 331.470068][T11855] vim2m_release+0xe8/0x170 [ 331.472084][T11855] v4l2_release+0x238/0x460 [ 331.474085][T11855] __fput+0x408/0xbb0 [ 331.475858][T11855] task_work_run+0x14e/0x250 [ 331.477850][T11855] syscall_exit_to_user_mode+0x27b/0x2a0 [ 331.480310][T11855] __do_fast_syscall_32+0x80/0x120 [ 331.482655][T11855] do_fast_syscall_32+0x32/0x80 [ 331.484833][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 331.487451][T11855] Modules linked in: [ 331.489119][T11855] CPU: 3 UID: 0 PID: 11855 Comm: syz.2.1921 Tainted: G B 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 331.494367][T11855] Tainted: [B]=BAD_PAGE [ 331.495887][T11855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 331.499711][T11855] Call Trace: [ 331.501119][T11855] [ 331.502356][T11855] dump_stack_lvl+0x16c/0x1f0 [ 331.503117][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 331.503956][T11855] bad_page+0xb3/0x220 [ 331.506350][T11737] usb 5-1: device descriptor read/8, error -32 [ 331.508041][T11855] ? __pfx_bad_page+0x10/0x10 [ 331.512628][T11855] ? page_bad_reason+0x9d/0x1e0 [ 331.514805][T11855] free_unref_page+0x69e/0xe40 [ 331.516923][T11855] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 331.519479][T11855] ? __phys_addr+0xc6/0x150 [ 331.521453][T11855] skb_free_head+0xa0/0x1d0 [ 331.523399][T11855] skb_release_data+0x75c/0x980 [ 331.525508][T11855] ? __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 331.528448][T11855] ? rcu_is_watching+0x12/0xc0 [ 331.530521][T11855] sk_skb_reason_drop+0x133/0x200 [ 331.532696][T11855] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 331.535522][T11855] ? kernel_text_address+0x8d/0x100 [ 331.537821][T11855] ? __lock_acquire+0x1620/0x3cb0 [ 331.539980][T11855] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 331.543033][T11855] ? hlock_class+0x4e/0x130 [ 331.544863][T11855] ? __lock_acquire+0xbdd/0x3cb0 [ 331.546974][T11855] ? lock_acquire+0x1b1/0x560 [ 331.548944][T11855] ? find_held_lock+0x2d/0x110 [ 331.551065][T11855] ? __pfx___lock_acquire+0x10/0x10 [ 331.553233][T11855] __netif_receive_skb_list_core+0x357/0x950 [ 331.555806][T11855] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 331.558294][T11855] ? timekeeping_debug_get_ns+0x334/0x5b0 [ 331.560689][T11855] netif_receive_skb_list_internal+0x753/0xda0 [ 331.563286][T11855] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 331.566080][T11855] ? __pfx_eth_type_trans+0x10/0x10 [ 331.568259][T11855] ? __build_skb_around+0x278/0x3b0 [ 331.570429][T11855] netif_receive_skb_list+0x4f/0x4a0 [ 331.572546][T11855] xdp_test_run_batch.constprop.0+0x1296/0x1880 [ 331.574643][T11855] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 331.577448][T11855] ? bpf_test_timer_continue+0x150/0x3d0 [ 331.579888][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 331.582081][T11855] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 331.584058][T11855] ? find_held_lock+0x2d/0x110 [ 331.585846][T11855] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 331.588098][T11855] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 331.589865][T11855] ? 0xffffffffa0004340 [ 331.591275][T11855] ? 0xffffffffa0004340 [ 331.592675][T11855] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 331.594658][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 331.596694][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 331.599068][T11855] ? fput+0x32/0x390 [ 331.600383][T11855] ? __bpf_prog_get+0xa0/0x2f0 [ 331.601980][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 331.603925][T11855] __sys_bpf+0x1af6/0x55e0 [ 331.605446][T11855] ? __pfx___sys_bpf+0x10/0x10 [ 331.607420][T11855] ? futex_wait+0x121/0x380 [ 331.609428][T11855] ? __pfx_futex_wait+0x10/0x10 [ 331.611592][T11855] ? fd_install+0x223/0x750 [ 331.613620][T11855] ? __pfx_lock_release+0x10/0x10 [ 331.615770][T11855] ? do_futex+0x123/0x350 [ 331.617616][T11855] ? __pfx_do_futex+0x10/0x10 [ 331.619696][T11855] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 331.622347][T11855] __ia32_sys_bpf+0x76/0xe0 [ 331.624372][T11855] __do_fast_syscall_32+0x73/0x120 [ 331.626564][T11855] do_fast_syscall_32+0x32/0x80 [ 331.628612][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 331.631028][T11737] raw-gadget.0 gadget.0: failed to queue suspend event [ 331.631399][T11855] RIP: 0023:0xf7f56579 [ 331.634123][T11737] usb usb5-port1: unable to enumerate USB device [ 331.635733][T11855] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 331.645996][T11855] RSP: 002b:00000000f56f656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 331.649266][T11855] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000600 [ 331.652620][T11855] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 331.655958][T11855] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 331.659198][T11855] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 331.662513][T11855] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 331.665844][T11855] [ 331.667302][T11855] BUG: Bad page state in process syz.2.1921 pfn:26290 [ 331.670180][T11855] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x26290 [ 331.673936][T11855] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 331.676938][T11855] raw: 00fff00000000000 dead000000000040 ffff88805326a000 0000000000000000 [ 331.680547][T11855] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 331.684202][T11855] page dumped because: page_pool leak [ 331.686460][T11855] page_owner tracks the page as allocated [ 331.688841][T11855] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 11855, tgid 11854 (syz.2.1921), ts 324622301654, free_ts 323975387200 [ 331.696037][T11855] post_alloc_hook+0x2d1/0x350 [ 331.698101][T11855] get_page_from_freelist+0x1351/0x2e50 [ 331.700476][T11855] __alloc_pages_noprof+0x22b/0x2460 [ 331.702825][T11855] alloc_pages_bulk_noprof+0x742/0x14f0 [ 331.705267][T11855] __page_pool_alloc_pages_slow+0x19b/0xb30 [ 331.707515][T11855] page_pool_alloc_pages+0xb5/0x110 [ 331.709211][T11855] xdp_test_run_batch.constprop.0+0x30f/0x1880 [ 331.711403][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 331.713143][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 331.714919][T11855] __sys_bpf+0x1af6/0x55e0 [ 331.716509][T11855] __ia32_sys_bpf+0x76/0xe0 [ 331.718123][T11855] __do_fast_syscall_32+0x73/0x120 [ 331.720313][T11855] do_fast_syscall_32+0x32/0x80 [ 331.722332][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 331.724483][T11855] page last free pid 11815 tgid 11815 stack trace: [ 331.726874][T11855] free_unref_page+0x64a/0xe40 [ 331.728864][T11855] vfree+0x181/0x7a0 [ 331.730660][T11855] vb2_vmalloc_put+0x7b/0xc0 [ 331.732698][T11855] __vb2_buf_mem_free+0x154/0x2c0 [ 331.734776][T11855] __vb2_queue_free+0x861/0xac0 [ 331.736763][T11855] vb2_core_queue_release+0x70/0x190 [ 331.738906][T11855] v4l2_m2m_ctx_release+0x2a/0x40 [ 331.741002][T11855] vim2m_release+0xe8/0x170 [ 331.742844][T11855] v4l2_release+0x238/0x460 [ 331.744725][T11855] __fput+0x408/0xbb0 [ 331.746407][T11855] task_work_run+0x14e/0x250 [ 331.748413][T11855] syscall_exit_to_user_mode+0x27b/0x2a0 [ 331.750463][T11855] __do_fast_syscall_32+0x80/0x120 [ 331.752310][T11855] do_fast_syscall_32+0x32/0x80 [ 331.753950][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 331.756146][T11855] Modules linked in: [ 331.757481][T11855] CPU: 3 UID: 0 PID: 11855 Comm: syz.2.1921 Tainted: G B 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 331.762172][T11855] Tainted: [B]=BAD_PAGE [ 331.764006][T11855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 331.768480][T11855] Call Trace: [ 331.769948][T11855] [ 331.771285][T11855] dump_stack_lvl+0x16c/0x1f0 [ 331.773407][T11855] bad_page+0xb3/0x220 [ 331.775229][T11855] ? __pfx_bad_page+0x10/0x10 [ 331.776866][T11855] ? page_bad_reason+0x9d/0x1e0 [ 331.778496][T11855] free_unref_page+0x69e/0xe40 [ 331.780508][T11855] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 331.783092][T11855] ? __phys_addr+0xc6/0x150 [ 331.785011][T11855] skb_free_head+0xa0/0x1d0 [ 331.786991][T11855] skb_release_data+0x75c/0x980 [ 331.789187][T11855] ? __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 331.792055][T11855] ? rcu_is_watching+0x12/0xc0 [ 331.794131][T11855] sk_skb_reason_drop+0x133/0x200 [ 331.796362][T11855] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 331.799123][T11855] ? kernel_text_address+0x8d/0x100 [ 331.801249][T11855] ? __lock_acquire+0x1620/0x3cb0 [ 331.803512][T11855] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 331.806597][T11855] ? hlock_class+0x4e/0x130 [ 331.808606][T11855] ? __lock_acquire+0xbdd/0x3cb0 [ 331.810272][T11855] ? lock_acquire+0x1b1/0x560 [ 331.812178][T11855] ? find_held_lock+0x2d/0x110 [ 331.814294][T11855] ? __pfx___lock_acquire+0x10/0x10 [ 331.816481][T11855] __netif_receive_skb_list_core+0x357/0x950 [ 331.818898][T11855] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 331.821597][T11855] ? timekeeping_debug_get_ns+0x334/0x5b0 [ 331.823997][T11855] netif_receive_skb_list_internal+0x753/0xda0 [ 331.826593][T11855] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 331.829544][T11855] ? __pfx_eth_type_trans+0x10/0x10 [ 331.831840][T11855] ? __build_skb_around+0x278/0x3b0 [ 331.834113][T11855] netif_receive_skb_list+0x4f/0x4a0 [ 331.836454][T11855] xdp_test_run_batch.constprop.0+0x1296/0x1880 [ 331.839192][T11855] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 331.841883][T11855] ? bpf_test_timer_continue+0x150/0x3d0 [ 331.844338][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 331.846635][T11855] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 331.849184][T11855] ? find_held_lock+0x2d/0x110 [ 331.851319][T11855] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 331.853903][T11855] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 331.856211][T11855] ? 0xffffffffa0004340 [ 331.858047][T11855] ? 0xffffffffa0004340 [ 331.859882][T11855] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 331.862544][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 331.864929][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 331.867587][T11855] ? fput+0x32/0x390 [ 331.869351][T11855] ? __bpf_prog_get+0xa0/0x2f0 [ 331.871501][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 331.874098][T11855] __sys_bpf+0x1af6/0x55e0 [ 331.876099][T11855] ? __pfx___sys_bpf+0x10/0x10 [ 331.878243][T11855] ? futex_wait+0x121/0x380 [ 331.880300][T11855] ? __pfx_futex_wait+0x10/0x10 [ 331.882510][T11855] ? fd_install+0x223/0x750 [ 331.884575][T11855] ? __pfx_lock_release+0x10/0x10 [ 331.886817][T11855] ? do_futex+0x123/0x350 [ 331.888685][T11855] ? __pfx_do_futex+0x10/0x10 [ 331.890777][T11855] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 331.893480][T11855] __ia32_sys_bpf+0x76/0xe0 [ 331.895549][T11855] __do_fast_syscall_32+0x73/0x120 [ 331.897843][T11855] do_fast_syscall_32+0x32/0x80 [ 331.899898][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 331.902580][T11855] RIP: 0023:0xf7f56579 [ 331.904394][T11855] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 331.912700][T11855] RSP: 002b:00000000f56f656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 331.916393][T11855] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000600 [ 331.919885][T11855] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 331.923424][T11855] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 331.926919][T11855] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 331.930427][T11855] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 331.933959][T11855] [ 331.935491][T11855] BUG: Bad page state in process syz.2.1921 pfn:261cb [ 331.938533][T11855] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x261cb [ 331.942475][T11855] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 331.945651][T11855] raw: 00fff00000000000 dead000000000040 ffff88805326a000 0000000000000000 [ 331.949398][T11855] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 331.953137][T11855] page dumped because: page_pool leak [ 331.955509][T11855] page_owner tracks the page as allocated [ 331.958066][T11855] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 11855, tgid 11854 (syz.2.1921), ts 324622291429, free_ts 323975401193 [ 331.966053][T11855] post_alloc_hook+0x2d1/0x350 [ 331.968183][T11855] get_page_from_freelist+0x1351/0x2e50 [ 331.970675][T11855] __alloc_pages_noprof+0x22b/0x2460 [ 331.972973][T11855] alloc_pages_bulk_noprof+0x742/0x14f0 [ 331.975412][T11855] __page_pool_alloc_pages_slow+0x19b/0xb30 [ 331.977899][T11855] page_pool_alloc_pages+0xb5/0x110 [ 331.980076][T11855] xdp_test_run_batch.constprop.0+0x30f/0x1880 [ 331.982809][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 331.985112][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 331.987456][T11855] __sys_bpf+0x1af6/0x55e0 [ 331.989405][T11855] __ia32_sys_bpf+0x76/0xe0 [ 331.991467][T11855] __do_fast_syscall_32+0x73/0x120 [ 331.993670][T11855] do_fast_syscall_32+0x32/0x80 [ 331.995795][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 331.998394][T11855] page last free pid 11815 tgid 11815 stack trace: [ 332.001198][T11855] free_unref_page+0x64a/0xe40 [ 332.003296][T11855] vfree+0x181/0x7a0 [ 332.005009][T11855] vb2_vmalloc_put+0x7b/0xc0 [ 332.007012][T11855] __vb2_buf_mem_free+0x154/0x2c0 [ 332.009197][T11855] __vb2_queue_free+0x861/0xac0 [ 332.011386][T11855] vb2_core_queue_release+0x70/0x190 [ 332.013703][T11855] v4l2_m2m_ctx_release+0x2a/0x40 [ 332.015880][T11855] vim2m_release+0xe8/0x170 [ 332.017858][T11855] v4l2_release+0x238/0x460 [ 332.019850][T11855] __fput+0x408/0xbb0 [ 332.021686][T11855] task_work_run+0x14e/0x250 [ 332.023675][T11855] syscall_exit_to_user_mode+0x27b/0x2a0 [ 332.026068][T11855] __do_fast_syscall_32+0x80/0x120 [ 332.028281][T11855] do_fast_syscall_32+0x32/0x80 [ 332.030404][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 332.033216][T11855] Modules linked in: [ 332.034959][T11855] CPU: 3 UID: 0 PID: 11855 Comm: syz.2.1921 Tainted: G B 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 332.040108][T11855] Tainted: [B]=BAD_PAGE [ 332.041885][T11855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 332.046503][T11855] Call Trace: [ 332.047968][T11855] [ 332.049302][T11855] dump_stack_lvl+0x16c/0x1f0 [ 332.051449][T11855] bad_page+0xb3/0x220 [ 332.053267][T11855] ? __pfx_bad_page+0x10/0x10 [ 332.055419][T11855] ? page_bad_reason+0x9d/0x1e0 [ 332.057572][T11855] free_unref_page+0x69e/0xe40 [ 332.059755][T11855] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 332.062403][T11855] ? __phys_addr+0xc6/0x150 [ 332.064486][T11855] skb_free_head+0xa0/0x1d0 [ 332.066491][T11855] skb_release_data+0x75c/0x980 [ 332.068720][T11855] ? __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 332.071742][T11855] ? rcu_is_watching+0x12/0xc0 [ 332.073847][T11855] sk_skb_reason_drop+0x133/0x200 [ 332.076149][T11855] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 332.079084][T11855] ? kernel_text_address+0x8d/0x100 [ 332.081418][T11855] ? __lock_acquire+0x1620/0x3cb0 [ 332.083662][T11855] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 332.086788][T11855] ? hlock_class+0x4e/0x130 [ 332.088839][T11855] ? __lock_acquire+0xbdd/0x3cb0 [ 332.091033][T11855] ? lock_acquire+0x1b1/0x560 [ 332.093067][T11855] ? find_held_lock+0x2d/0x110 [ 332.095138][T11855] ? __pfx___lock_acquire+0x10/0x10 [ 332.097422][T11855] __netif_receive_skb_list_core+0x357/0x950 [ 332.100093][T11855] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 332.102816][T11855] ? timekeeping_debug_get_ns+0x334/0x5b0 [ 332.105364][T11855] netif_receive_skb_list_internal+0x753/0xda0 [ 332.108076][T11855] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 332.111018][T11855] ? __pfx_eth_type_trans+0x10/0x10 [ 332.113303][T11855] ? __build_skb_around+0x278/0x3b0 [ 332.115593][T11855] netif_receive_skb_list+0x4f/0x4a0 [ 332.117946][T11855] xdp_test_run_batch.constprop.0+0x1296/0x1880 [ 332.120717][T11855] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 332.123678][T11855] ? bpf_test_timer_continue+0x150/0x3d0 [ 332.126171][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 332.128500][T11855] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 332.131103][T11855] ? find_held_lock+0x2d/0x110 [ 332.133256][T11855] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 332.135931][T11855] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 332.138168][T11855] ? 0xffffffffa0004340 [ 332.140048][T11855] ? 0xffffffffa0004340 [ 332.141916][T11855] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 332.144571][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 332.146982][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 332.149534][T11855] ? fput+0x32/0x390 [ 332.151273][T11855] ? __bpf_prog_get+0xa0/0x2f0 [ 332.153374][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 332.155879][T11855] __sys_bpf+0x1af6/0x55e0 [ 332.157853][T11855] ? __pfx___sys_bpf+0x10/0x10 [ 332.159956][T11855] ? futex_wait+0x121/0x380 [ 332.161965][T11855] ? __pfx_futex_wait+0x10/0x10 [ 332.164142][T11855] ? fd_install+0x223/0x750 [ 332.166187][T11855] ? __pfx_lock_release+0x10/0x10 [ 332.168290][T11855] ? do_futex+0x123/0x350 [ 332.170221][T11855] ? __pfx_do_futex+0x10/0x10 [ 332.172347][T11855] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 332.175043][T11855] __ia32_sys_bpf+0x76/0xe0 [ 332.177061][T11855] __do_fast_syscall_32+0x73/0x120 [ 332.179364][T11855] do_fast_syscall_32+0x32/0x80 [ 332.181530][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 332.184366][T11855] RIP: 0023:0xf7f56579 [ 332.186174][T11855] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 332.193123][T11855] RSP: 002b:00000000f56f656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 332.195962][T11855] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000600 [ 332.198815][T11855] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 332.201481][T11855] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 332.204592][T11855] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 332.207992][T11855] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 332.211363][T11855] [ 332.212746][T11855] BUG: Bad page state in process syz.2.1921 pfn:295b2 [ 332.215656][T11855] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x20d pfn:0x295b2 [ 332.218881][T11855] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 332.221894][T11855] raw: 00fff00000000000 dead000000000040 ffff88805326a000 0000000000000000 [ 332.225045][T11855] raw: 000000000000020d 0000000000000001 00000000ffffffff 0000000000000000 [ 332.228616][T11855] page dumped because: page_pool leak [ 332.231021][T11855] page_owner tracks the page as allocated [ 332.233474][T11855] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 11855, tgid 11854 (syz.2.1921), ts 324622282689, free_ts 323975414763 [ 332.241203][T11855] post_alloc_hook+0x2d1/0x350 [ 332.243199][T11855] get_page_from_freelist+0x1351/0x2e50 [ 332.245092][T11855] __alloc_pages_noprof+0x22b/0x2460 [ 332.247381][T11855] alloc_pages_bulk_noprof+0x742/0x14f0 [ 332.249466][T11855] __page_pool_alloc_pages_slow+0x19b/0xb30 [ 332.251763][T11855] page_pool_alloc_pages+0xb5/0x110 [ 332.253998][T11855] xdp_test_run_batch.constprop.0+0x30f/0x1880 [ 332.256115][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 332.258184][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 332.260379][T11855] __sys_bpf+0x1af6/0x55e0 [ 332.261963][T11855] __ia32_sys_bpf+0x76/0xe0 [ 332.263761][T11855] __do_fast_syscall_32+0x73/0x120 [ 332.265865][T11855] do_fast_syscall_32+0x32/0x80 [ 332.267547][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 332.270214][T11855] page last free pid 11815 tgid 11815 stack trace: [ 332.272757][T11855] free_unref_page+0x64a/0xe40 [ 332.274356][T11855] vfree+0x181/0x7a0 [ 332.275904][T11855] vb2_vmalloc_put+0x7b/0xc0 [ 332.277849][T11855] __vb2_buf_mem_free+0x154/0x2c0 [ 332.279991][T11855] __vb2_queue_free+0x861/0xac0 [ 332.282126][T11855] vb2_core_queue_release+0x70/0x190 [ 332.284407][T11855] v4l2_m2m_ctx_release+0x2a/0x40 [ 332.286529][T11855] vim2m_release+0xe8/0x170 [ 332.288460][T11855] v4l2_release+0x238/0x460 [ 332.290397][T11855] __fput+0x408/0xbb0 [ 332.292174][T11855] task_work_run+0x14e/0x250 [ 332.294210][T11855] syscall_exit_to_user_mode+0x27b/0x2a0 [ 332.296666][T11855] __do_fast_syscall_32+0x80/0x120 [ 332.298409][T11855] do_fast_syscall_32+0x32/0x80 [ 332.300080][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 332.302284][T11855] Modules linked in: [ 332.303643][T11855] CPU: 3 UID: 0 PID: 11855 Comm: syz.2.1921 Tainted: G B 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 332.307862][T11855] Tainted: [B]=BAD_PAGE [ 332.309266][T11855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 332.313277][T11855] Call Trace: [ 332.314731][T11855] [ 332.316060][T11855] dump_stack_lvl+0x16c/0x1f0 [ 332.318188][T11855] bad_page+0xb3/0x220 [ 332.320034][T11855] ? __pfx_bad_page+0x10/0x10 [ 332.322158][T11855] ? page_bad_reason+0x9d/0x1e0 [ 332.324333][T11855] free_unref_page+0x69e/0xe40 [ 332.326435][T11855] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 332.329071][T11855] ? __phys_addr+0xc6/0x150 [ 332.331131][T11855] skb_free_head+0xa0/0x1d0 [ 332.333141][T11855] skb_release_data+0x75c/0x980 [ 332.335307][T11855] ? __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 332.337677][T11855] ? rcu_is_watching+0x12/0xc0 [ 332.339311][T11855] sk_skb_reason_drop+0x133/0x200 [ 332.341403][T11855] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 332.343764][T11855] ? kernel_text_address+0x8d/0x100 [ 332.345541][T11855] ? __lock_acquire+0x1620/0x3cb0 [ 332.347240][T11855] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 332.349551][T11855] ? hlock_class+0x4e/0x130 [ 332.351244][T11855] ? __lock_acquire+0xbdd/0x3cb0 [ 332.353054][T11855] ? lock_acquire+0x1b1/0x560 [ 332.355129][T11855] ? find_held_lock+0x2d/0x110 [ 332.357211][T11855] ? __pfx___lock_acquire+0x10/0x10 [ 332.359412][T11855] __netif_receive_skb_list_core+0x357/0x950 [ 332.362017][T11855] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 332.364863][T11855] ? timekeeping_debug_get_ns+0x334/0x5b0 [ 332.367384][T11855] netif_receive_skb_list_internal+0x753/0xda0 [ 332.370067][T11855] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 332.372962][T11855] ? __pfx_eth_type_trans+0x10/0x10 [ 332.375265][T11855] ? __build_skb_around+0x278/0x3b0 [ 332.377515][T11855] netif_receive_skb_list+0x4f/0x4a0 [ 332.379365][T11855] xdp_test_run_batch.constprop.0+0x1296/0x1880 [ 332.381736][T11855] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 332.384274][T11855] ? bpf_test_timer_continue+0x150/0x3d0 [ 332.386283][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 332.388281][T11855] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 332.390598][T11855] ? find_held_lock+0x2d/0x110 [ 332.392558][T11855] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 332.394590][T11855] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 332.396406][T11855] ? 0xffffffffa0004340 [ 332.397829][T11855] ? 0xffffffffa0004340 [ 332.399271][T11855] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 332.401597][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 332.403394][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 332.405425][T11855] ? fput+0x32/0x390 [ 332.406809][T11855] ? __bpf_prog_get+0xa0/0x2f0 [ 332.408422][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 332.410615][T11855] __sys_bpf+0x1af6/0x55e0 [ 332.412544][T11855] ? __pfx___sys_bpf+0x10/0x10 [ 332.414632][T11855] ? futex_wait+0x121/0x380 [ 332.416648][T11855] ? __pfx_futex_wait+0x10/0x10 [ 332.418796][T11855] ? fd_install+0x223/0x750 [ 332.420775][T11855] ? __pfx_lock_release+0x10/0x10 [ 332.423015][T11855] ? do_futex+0x123/0x350 [ 332.424954][T11855] ? __pfx_do_futex+0x10/0x10 [ 332.426992][T11855] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 332.429658][T11855] __ia32_sys_bpf+0x76/0xe0 [ 332.431710][T11855] __do_fast_syscall_32+0x73/0x120 [ 332.434002][T11855] do_fast_syscall_32+0x32/0x80 [ 332.436198][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 332.438646][T11855] RIP: 0023:0xf7f56579 [ 332.440051][T11855] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 332.446954][T11855] RSP: 002b:00000000f56f656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 332.450190][T11855] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000600 [ 332.453293][T11855] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 332.456639][T11855] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 332.459702][T11855] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 332.462712][T11855] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 332.465771][T11855] [ 332.467049][T11855] BUG: Bad page state in process syz.2.1921 pfn:2a5b4 [ 332.469643][T11855] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x11b pfn:0x2a5b4 [ 332.473227][T11855] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 332.476017][T11855] raw: 00fff00000000000 dead000000000040 ffff88805326a000 0000000000000000 [ 332.478905][T11855] raw: 000000000000011b 0000000000000001 00000000ffffffff 0000000000000000 [ 332.482349][T11855] page dumped because: page_pool leak [ 332.484626][T11855] page_owner tracks the page as allocated [ 332.486699][T11855] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 11855, tgid 11854 (syz.2.1921), ts 324622274644, free_ts 323975429206 [ 332.494135][T11855] post_alloc_hook+0x2d1/0x350 [ 332.496058][T11855] get_page_from_freelist+0x1351/0x2e50 [ 332.497921][T11855] __alloc_pages_noprof+0x22b/0x2460 [ 332.499729][T11855] alloc_pages_bulk_noprof+0x742/0x14f0 [ 332.501655][T11855] __page_pool_alloc_pages_slow+0x19b/0xb30 [ 332.503764][T11855] page_pool_alloc_pages+0xb5/0x110 [ 332.505776][T11855] xdp_test_run_batch.constprop.0+0x30f/0x1880 [ 332.507915][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 332.509945][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 332.512022][T11855] __sys_bpf+0x1af6/0x55e0 [ 332.513975][T11855] __ia32_sys_bpf+0x76/0xe0 [ 332.516000][T11855] __do_fast_syscall_32+0x73/0x120 [ 332.518255][T11855] do_fast_syscall_32+0x32/0x80 [ 332.520397][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 332.523203][T11855] page last free pid 11815 tgid 11815 stack trace: [ 332.526018][T11855] free_unref_page+0x64a/0xe40 [ 332.527994][T11855] vfree+0x181/0x7a0 [ 332.529522][T11855] vb2_vmalloc_put+0x7b/0xc0 [ 332.531250][T11855] __vb2_buf_mem_free+0x154/0x2c0 [ 332.533234][T11855] __vb2_queue_free+0x861/0xac0 [ 332.535212][T11855] vb2_core_queue_release+0x70/0x190 [ 332.537406][T11855] v4l2_m2m_ctx_release+0x2a/0x40 [ 332.539501][T11855] vim2m_release+0xe8/0x170 [ 332.541501][T11855] v4l2_release+0x238/0x460 [ 332.543443][T11855] __fput+0x408/0xbb0 [ 332.545166][T11855] task_work_run+0x14e/0x250 [ 332.547078][T11855] syscall_exit_to_user_mode+0x27b/0x2a0 [ 332.549535][T11855] __do_fast_syscall_32+0x80/0x120 [ 332.551593][T11855] do_fast_syscall_32+0x32/0x80 [ 332.553733][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 332.556277][T11855] Modules linked in: [ 332.558010][T11855] CPU: 3 UID: 0 PID: 11855 Comm: syz.2.1921 Tainted: G B 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 332.563194][T11855] Tainted: [B]=BAD_PAGE [ 332.565060][T11855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 332.569767][T11855] Call Trace: [ 332.571275][T11855] [ 332.572549][T11855] dump_stack_lvl+0x16c/0x1f0 [ 332.574457][T11855] bad_page+0xb3/0x220 [ 332.576191][T11855] ? __pfx_bad_page+0x10/0x10 [ 332.578128][T11855] ? page_bad_reason+0x9d/0x1e0 [ 332.580233][T11855] free_unref_page+0x69e/0xe40 [ 332.582347][T11855] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 332.585035][T11855] ? __phys_addr+0xc6/0x150 [ 332.587079][T11855] skb_free_head+0xa0/0x1d0 [ 332.589068][T11855] skb_release_data+0x75c/0x980 [ 332.591208][T11855] ? __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 332.594198][T11855] ? rcu_is_watching+0x12/0xc0 [ 332.596108][T11855] sk_skb_reason_drop+0x133/0x200 [ 332.598368][T11855] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 332.601090][T11855] ? kernel_text_address+0x8d/0x100 [ 332.603404][T11855] ? __lock_acquire+0x1620/0x3cb0 [ 332.605380][T11855] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 332.607760][T11855] ? hlock_class+0x4e/0x130 [ 332.609501][T11855] ? __lock_acquire+0xbdd/0x3cb0 [ 332.611651][T11855] ? lock_acquire+0x1b1/0x560 [ 332.613750][T11855] ? find_held_lock+0x2d/0x110 [ 332.615904][T11855] ? __pfx___lock_acquire+0x10/0x10 [ 332.618231][T11855] __netif_receive_skb_list_core+0x357/0x950 [ 332.620850][T11855] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 332.623647][T11855] ? timekeeping_debug_get_ns+0x334/0x5b0 [ 332.626162][T11855] netif_receive_skb_list_internal+0x753/0xda0 [ 332.628892][T11855] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 332.631698][T11855] ? __pfx_eth_type_trans+0x10/0x10 [ 332.633876][T11855] ? __build_skb_around+0x278/0x3b0 [ 332.636169][T11855] netif_receive_skb_list+0x4f/0x4a0 [ 332.638477][T11855] xdp_test_run_batch.constprop.0+0x1296/0x1880 [ 332.641182][T11855] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 332.644031][T11855] ? bpf_test_timer_continue+0x150/0x3d0 [ 332.646498][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 332.648757][T11855] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 332.651316][T11855] ? find_held_lock+0x2d/0x110 [ 332.653424][T11855] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 332.656044][T11855] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 332.658366][T11855] ? 0xffffffffa0004340 [ 332.660169][T11855] ? 0xffffffffa0004340 [ 332.661991][T11855] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 332.664604][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 332.666981][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 332.669459][T11855] ? fput+0x32/0x390 [ 332.671192][T11855] ? __bpf_prog_get+0xa0/0x2f0 [ 332.673323][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 332.675859][T11855] __sys_bpf+0x1af6/0x55e0 [ 332.677856][T11855] ? __pfx___sys_bpf+0x10/0x10 [ 332.679777][T11855] ? futex_wait+0x121/0x380 [ 332.681786][T11855] ? __pfx_futex_wait+0x10/0x10 [ 332.683946][T11855] ? fd_install+0x223/0x750 [ 332.685960][T11855] ? __pfx_lock_release+0x10/0x10 [ 332.688211][T11855] ? do_futex+0x123/0x350 [ 332.690169][T11855] ? __pfx_do_futex+0x10/0x10 [ 332.692290][T11855] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 332.694921][T11855] __ia32_sys_bpf+0x76/0xe0 [ 332.696941][T11855] __do_fast_syscall_32+0x73/0x120 [ 332.699266][T11855] do_fast_syscall_32+0x32/0x80 [ 332.701456][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 332.704168][T11855] RIP: 0023:0xf7f56579 [ 332.705969][T11855] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 332.714452][T11855] RSP: 002b:00000000f56f656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 332.718178][T11855] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000600 [ 332.721717][T11855] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 332.725231][T11855] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 332.728664][T11855] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 332.732034][T11855] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 332.735279][T11855] [ 332.736769][T11855] BUG: Bad page state in process syz.2.1921 pfn:2b616 [ 332.739695][T11855] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802b616f78 pfn:0x2b616 [ 332.743728][T11855] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 332.746417][T11855] raw: 00fff00000000000 dead000000000040 ffff88805326a000 0000000000000000 [ 332.750009][T11855] raw: ffff88802b616f78 0000000000000001 00000000ffffffff 0000000000000000 [ 332.753798][T11855] page dumped because: page_pool leak [ 332.756026][T11855] page_owner tracks the page as allocated [ 332.758465][T11855] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 11855, tgid 11854 (syz.2.1921), ts 324622266645, free_ts 323975442795 [ 332.766628][T11855] post_alloc_hook+0x2d1/0x350 [ 332.768796][T11855] get_page_from_freelist+0x1351/0x2e50 [ 332.771353][T11855] __alloc_pages_noprof+0x22b/0x2460 [ 332.773708][T11855] alloc_pages_bulk_noprof+0x742/0x14f0 [ 332.776192][T11855] __page_pool_alloc_pages_slow+0x19b/0xb30 [ 332.778864][T11855] page_pool_alloc_pages+0xb5/0x110 [ 332.781196][T11855] xdp_test_run_batch.constprop.0+0x30f/0x1880 [ 332.783869][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 332.786225][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 332.788606][T11855] __sys_bpf+0x1af6/0x55e0 [ 332.790660][T11855] __ia32_sys_bpf+0x76/0xe0 [ 332.792398][T11855] __do_fast_syscall_32+0x73/0x120 [ 332.794424][T11855] do_fast_syscall_32+0x32/0x80 [ 332.796378][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 332.798828][T11855] page last free pid 11815 tgid 11815 stack trace: [ 332.801233][T11855] free_unref_page+0x64a/0xe40 [ 332.802943][T11855] vfree+0x181/0x7a0 [ 332.804141][T11855] vb2_vmalloc_put+0x7b/0xc0 [ 332.805741][T11855] __vb2_buf_mem_free+0x154/0x2c0 [ 332.807468][T11855] __vb2_queue_free+0x861/0xac0 [ 332.809127][T11855] vb2_core_queue_release+0x70/0x190 [ 332.811052][T11855] v4l2_m2m_ctx_release+0x2a/0x40 [ 332.812808][T11855] vim2m_release+0xe8/0x170 [ 332.814407][T11855] v4l2_release+0x238/0x460 [ 332.815980][T11855] __fput+0x408/0xbb0 [ 332.817357][T11855] task_work_run+0x14e/0x250 [ 332.819342][T11855] syscall_exit_to_user_mode+0x27b/0x2a0 [ 332.821447][T11855] __do_fast_syscall_32+0x80/0x120 [ 332.823205][T11855] do_fast_syscall_32+0x32/0x80 [ 332.824871][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 332.827379][T11855] Modules linked in: [ 332.829062][T11855] CPU: 3 UID: 0 PID: 11855 Comm: syz.2.1921 Tainted: G B 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 332.833793][T11855] Tainted: [B]=BAD_PAGE [ 332.835576][T11855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 332.840100][T11855] Call Trace: [ 332.841309][T11855] [ 332.842317][T11855] dump_stack_lvl+0x16c/0x1f0 [ 332.844247][T11855] bad_page+0xb3/0x220 [ 332.846006][T11855] ? __pfx_bad_page+0x10/0x10 [ 332.848026][T11855] ? page_bad_reason+0x9d/0x1e0 [ 332.850122][T11855] free_unref_page+0x69e/0xe40 [ 332.852199][T11855] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 332.854691][T11855] ? __phys_addr+0xc6/0x150 [ 332.856272][T11855] skb_free_head+0xa0/0x1d0 [ 332.858131][T11855] skb_release_data+0x75c/0x980 [ 332.860235][T11855] ? __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 332.863055][T11855] ? rcu_is_watching+0x12/0xc0 [ 332.864963][T11855] sk_skb_reason_drop+0x133/0x200 [ 332.867038][T11855] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 332.869916][T11855] ? kernel_text_address+0x8d/0x100 [ 332.872167][T11855] ? __lock_acquire+0x1620/0x3cb0 [ 332.874251][T11855] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 332.876883][T11855] ? hlock_class+0x4e/0x130 [ 332.878829][T11855] ? __lock_acquire+0xbdd/0x3cb0 [ 332.880835][T11855] ? lock_acquire+0x1b1/0x560 [ 332.882634][T11855] ? find_held_lock+0x2d/0x110 [ 332.884403][T11855] ? __pfx___lock_acquire+0x10/0x10 [ 332.886579][T11855] __netif_receive_skb_list_core+0x357/0x950 [ 332.888715][T11855] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 332.890921][T11855] ? timekeeping_debug_get_ns+0x334/0x5b0 [ 332.893352][T11855] netif_receive_skb_list_internal+0x753/0xda0 [ 332.896095][T11855] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 332.899046][T11855] ? __pfx_eth_type_trans+0x10/0x10 [ 332.901364][T11855] ? __build_skb_around+0x278/0x3b0 [ 332.903698][T11855] netif_receive_skb_list+0x4f/0x4a0 [ 332.906043][T11855] xdp_test_run_batch.constprop.0+0x1296/0x1880 [ 332.908780][T11855] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 332.911661][T11855] ? bpf_test_timer_continue+0x150/0x3d0 [ 332.914072][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 332.916384][T11855] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 332.918913][T11855] ? find_held_lock+0x2d/0x110 [ 332.920971][T11855] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 332.923524][T11855] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 332.925862][T11855] ? 0xffffffffa0004340 [ 332.927584][T11855] ? 0xffffffffa0004340 [ 332.929318][T11855] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 332.931929][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 332.934284][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 332.936842][T11855] ? fput+0x32/0x390 [ 332.938534][T11855] ? __bpf_prog_get+0xa0/0x2f0 [ 332.940612][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 332.943104][T11855] __sys_bpf+0x1af6/0x55e0 [ 332.944992][T11855] ? __pfx___sys_bpf+0x10/0x10 [ 332.947059][T11855] ? futex_wait+0x121/0x380 [ 332.949007][T11855] ? __pfx_futex_wait+0x10/0x10 [ 332.951110][T11855] ? fd_install+0x223/0x750 [ 332.953066][T11855] ? __pfx_lock_release+0x10/0x10 [ 332.955235][T11855] ? do_futex+0x123/0x350 [ 332.957070][T11855] ? __pfx_do_futex+0x10/0x10 [ 332.959078][T11855] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 332.961629][T11855] __ia32_sys_bpf+0x76/0xe0 [ 332.963578][T11855] __do_fast_syscall_32+0x73/0x120 [ 332.965823][T11855] do_fast_syscall_32+0x32/0x80 [ 332.967976][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 332.970613][T11855] RIP: 0023:0xf7f56579 [ 332.972389][T11855] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 332.979949][T11855] RSP: 002b:00000000f56f656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 332.983498][T11855] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000600 [ 332.986947][T11855] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 332.990425][T11855] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 332.993584][T11855] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 332.996713][T11855] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 333.000249][T11855] [ 333.001776][T11855] BUG: Bad page state in process syz.2.1921 pfn:1264a [ 333.004847][T11855] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x8f3 pfn:0x1264a [ 333.008789][T11855] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 333.012138][T11855] raw: 00fff00000000000 dead000000000040 ffff88805326a000 0000000000000000 [ 333.015931][T11855] raw: 00000000000008f3 0000000000000001 00000000ffffffff 0000000000000000 [ 333.019702][T11855] page dumped because: page_pool leak [ 333.021996][T11855] page_owner tracks the page as allocated [ 333.024496][T11855] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 11855, tgid 11854 (syz.2.1921), ts 324622258693, free_ts 323975456659 [ 333.032533][T11855] post_alloc_hook+0x2d1/0x350 [ 333.034403][T11855] get_page_from_freelist+0x1351/0x2e50 [ 333.036762][T11855] __alloc_pages_noprof+0x22b/0x2460 [ 333.039054][T11855] alloc_pages_bulk_noprof+0x742/0x14f0 [ 333.041469][T11855] __page_pool_alloc_pages_slow+0x19b/0xb30 [ 333.043833][T11855] page_pool_alloc_pages+0xb5/0x110 [ 333.045777][T11855] xdp_test_run_batch.constprop.0+0x30f/0x1880 [ 333.047801][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 333.049597][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 333.051934][T11855] __sys_bpf+0x1af6/0x55e0 [ 333.053704][T11855] __ia32_sys_bpf+0x76/0xe0 [ 333.055461][T11855] __do_fast_syscall_32+0x73/0x120 [ 333.057492][T11855] do_fast_syscall_32+0x32/0x80 [ 333.059267][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 333.061880][T11855] page last free pid 11815 tgid 11815 stack trace: [ 333.064619][T11855] free_unref_page+0x64a/0xe40 [ 333.066583][T11855] vfree+0x181/0x7a0 [ 333.068309][T11855] vb2_vmalloc_put+0x7b/0xc0 [ 333.070347][T11855] __vb2_buf_mem_free+0x154/0x2c0 [ 333.072483][T11855] __vb2_queue_free+0x861/0xac0 [ 333.074576][T11855] vb2_core_queue_release+0x70/0x190 [ 333.076559][T11855] v4l2_m2m_ctx_release+0x2a/0x40 [ 333.078674][T11855] vim2m_release+0xe8/0x170 [ 333.080682][T11855] v4l2_release+0x238/0x460 [ 333.082506][T11855] __fput+0x408/0xbb0 [ 333.084215][T11855] task_work_run+0x14e/0x250 [ 333.086173][T11855] syscall_exit_to_user_mode+0x27b/0x2a0 [ 333.088464][T11855] __do_fast_syscall_32+0x80/0x120 [ 333.090523][T11855] do_fast_syscall_32+0x32/0x80 [ 333.092644][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 333.095326][T11855] Modules linked in: [ 333.096968][T11855] CPU: 3 UID: 0 PID: 11855 Comm: syz.2.1921 Tainted: G B 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 333.102010][T11855] Tainted: [B]=BAD_PAGE [ 333.103769][T11855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 333.108272][T11855] Call Trace: [ 333.109687][T11855] [ 333.110951][T11855] dump_stack_lvl+0x16c/0x1f0 [ 333.112982][T11855] bad_page+0xb3/0x220 [ 333.114735][T11855] ? __pfx_bad_page+0x10/0x10 [ 333.116729][T11855] ? page_bad_reason+0x9d/0x1e0 [ 333.118442][T11855] free_unref_page+0x69e/0xe40 [ 333.120242][T11855] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 333.122767][T11855] ? __phys_addr+0xc6/0x150 [ 333.124730][T11855] skb_free_head+0xa0/0x1d0 [ 333.126643][T11855] skb_release_data+0x75c/0x980 [ 333.128699][T11855] ? __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 333.131555][T11855] ? rcu_is_watching+0x12/0xc0 [ 333.133574][T11855] sk_skb_reason_drop+0x133/0x200 [ 333.135719][T11855] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 333.138535][T11855] ? kernel_text_address+0x8d/0x100 [ 333.140548][T11855] ? __lock_acquire+0x1620/0x3cb0 [ 333.142601][T11855] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 333.145586][T11855] ? hlock_class+0x4e/0x130 [ 333.147557][T11855] ? __lock_acquire+0xbdd/0x3cb0 [ 333.149682][T11855] ? lock_acquire+0x1b1/0x560 [ 333.151743][T11855] ? find_held_lock+0x2d/0x110 [ 333.153786][T11855] ? __pfx___lock_acquire+0x10/0x10 [ 333.156060][T11855] __netif_receive_skb_list_core+0x357/0x950 [ 333.158680][T11855] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 333.161477][T11855] ? timekeeping_debug_get_ns+0x334/0x5b0 [ 333.163962][T11855] netif_receive_skb_list_internal+0x753/0xda0 [ 333.166643][T11855] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 333.169453][T11855] ? __pfx_eth_type_trans+0x10/0x10 [ 333.171693][T11855] ? __build_skb_around+0x278/0x3b0 [ 333.173935][T11855] netif_receive_skb_list+0x4f/0x4a0 [ 333.176235][T11855] xdp_test_run_batch.constprop.0+0x1296/0x1880 [ 333.178974][T11855] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 333.181841][T11855] ? bpf_test_timer_continue+0x150/0x3d0 [ 333.184334][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 333.186654][T11855] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 333.189212][T11855] ? find_held_lock+0x2d/0x110 [ 333.191338][T11855] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 333.193838][T11855] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 333.196189][T11855] ? 0xffffffffa0004340 [ 333.197874][T11855] ? 0xffffffffa0004340 [ 333.199756][T11855] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 333.202408][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 333.204808][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 333.207402][T11855] ? fput+0x32/0x390 [ 333.209151][T11855] ? __bpf_prog_get+0xa0/0x2f0 [ 333.211315][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 333.213579][T11855] __sys_bpf+0x1af6/0x55e0 [ 333.215132][T11855] ? __pfx___sys_bpf+0x10/0x10 [ 333.216788][T11855] ? futex_wait+0x121/0x380 [ 333.218340][T11855] ? __pfx_futex_wait+0x10/0x10 [ 333.220031][T11855] ? fd_install+0x223/0x750 [ 333.221587][T11855] ? __pfx_lock_release+0x10/0x10 [ 333.223610][T11855] ? do_futex+0x123/0x350 [ 333.225504][T11855] ? __pfx_do_futex+0x10/0x10 [ 333.227555][T11855] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 333.230097][T11855] __ia32_sys_bpf+0x76/0xe0 [ 333.231771][T11855] __do_fast_syscall_32+0x73/0x120 [ 333.233853][T11855] do_fast_syscall_32+0x32/0x80 [ 333.235934][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 333.238619][T11855] RIP: 0023:0xf7f56579 [ 333.240362][T11855] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 333.248207][T11855] RSP: 002b:00000000f56f656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 333.251637][T11855] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000600 [ 333.254952][T11855] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 333.257872][T11855] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 333.261188][T11855] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 333.264316][T11855] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 333.267304][T11855] [ 333.268603][T11855] BUG: Bad page state in process syz.2.1921 pfn:25940 [ 333.271435][T11855] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x25940 [ 333.274888][T11855] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 333.277729][T11855] raw: 00fff00000000000 dead000000000040 ffff88805326a000 0000000000000000 [ 333.281404][T11855] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 333.285233][T11855] page dumped because: page_pool leak [ 333.287494][T11855] page_owner tracks the page as allocated [ 333.289993][T11855] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 11855, tgid 11854 (syz.2.1921), ts 324622249914, free_ts 323975472334 [ 333.298121][T11855] post_alloc_hook+0x2d1/0x350 [ 333.300287][T11855] get_page_from_freelist+0x1351/0x2e50 [ 333.302807][T11855] __alloc_pages_noprof+0x22b/0x2460 [ 333.305215][T11855] alloc_pages_bulk_noprof+0x742/0x14f0 [ 333.307706][T11855] __page_pool_alloc_pages_slow+0x19b/0xb30 [ 333.310356][T11855] page_pool_alloc_pages+0xb5/0x110 [ 333.312515][T11855] xdp_test_run_batch.constprop.0+0x30f/0x1880 [ 333.314727][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 333.316893][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 333.318869][T11855] __sys_bpf+0x1af6/0x55e0 [ 333.320671][T11855] __ia32_sys_bpf+0x76/0xe0 [ 333.322514][T11855] __do_fast_syscall_32+0x73/0x120 [ 333.324565][T11855] do_fast_syscall_32+0x32/0x80 [ 333.326567][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 333.328907][T11855] page last free pid 11815 tgid 11815 stack trace: [ 333.331313][T11855] free_unref_page+0x64a/0xe40 [ 333.333031][T11855] vfree+0x181/0x7a0 [ 333.334390][T11855] vb2_vmalloc_put+0x7b/0xc0 [ 333.336039][T11855] __vb2_buf_mem_free+0x154/0x2c0 [ 333.337819][T11855] __vb2_queue_free+0x861/0xac0 [ 333.339581][T11855] vb2_core_queue_release+0x70/0x190 [ 333.341876][T11855] v4l2_m2m_ctx_release+0x2a/0x40 [ 333.343684][T11855] vim2m_release+0xe8/0x170 [ 333.345335][T11855] v4l2_release+0x238/0x460 [ 333.347108][T11855] __fput+0x408/0xbb0 [ 333.348808][T11855] task_work_run+0x14e/0x250 [ 333.350867][T11855] syscall_exit_to_user_mode+0x27b/0x2a0 [ 333.352924][T11855] __do_fast_syscall_32+0x80/0x120 [ 333.354715][T11855] do_fast_syscall_32+0x32/0x80 [ 333.356583][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 333.359281][T11855] Modules linked in: [ 333.360994][T11855] CPU: 3 UID: 0 PID: 11855 Comm: syz.2.1921 Tainted: G B 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 333.365470][T11855] Tainted: [B]=BAD_PAGE [ 333.367199][T11855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 333.371700][T11855] Call Trace: [ 333.372959][T11855] [ 333.374010][T11855] dump_stack_lvl+0x16c/0x1f0 [ 333.375686][T11855] bad_page+0xb3/0x220 [ 333.377375][T11855] ? __pfx_bad_page+0x10/0x10 [ 333.379392][T11855] ? page_bad_reason+0x9d/0x1e0 [ 333.381421][T11855] free_unref_page+0x69e/0xe40 [ 333.383141][T11855] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 333.385283][T11855] ? __phys_addr+0xc6/0x150 [ 333.387117][T11855] skb_free_head+0xa0/0x1d0 [ 333.389069][T11855] skb_release_data+0x75c/0x980 [ 333.391155][T11855] ? __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 333.393761][T11855] ? rcu_is_watching+0x12/0xc0 [ 333.395538][T11855] sk_skb_reason_drop+0x133/0x200 [ 333.397573][T11855] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 333.400516][T11855] ? kernel_text_address+0x8d/0x100 [ 333.402766][T11855] ? __lock_acquire+0x1620/0x3cb0 [ 333.404947][T11855] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 333.407820][T11855] ? hlock_class+0x4e/0x130 [ 333.409717][T11855] ? __lock_acquire+0xbdd/0x3cb0 [ 333.411655][T11855] ? lock_acquire+0x1b1/0x560 [ 333.413671][T11855] ? find_held_lock+0x2d/0x110 [ 333.415688][T11855] ? __pfx___lock_acquire+0x10/0x10 [ 333.417661][T11855] __netif_receive_skb_list_core+0x357/0x950 [ 333.420227][T11855] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 333.423034][T11855] ? timekeeping_debug_get_ns+0x334/0x5b0 [ 333.425371][T11855] netif_receive_skb_list_internal+0x753/0xda0 [ 333.427710][T11855] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 333.430663][T11855] ? __pfx_eth_type_trans+0x10/0x10 [ 333.433013][T11855] ? __build_skb_around+0x278/0x3b0 [ 333.435347][T11855] netif_receive_skb_list+0x4f/0x4a0 [ 333.437687][T11855] xdp_test_run_batch.constprop.0+0x1296/0x1880 [ 333.440473][T11855] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 333.443034][T11855] ? bpf_test_timer_continue+0x150/0x3d0 [ 333.445509][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 333.447904][T11855] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 333.450428][T11855] ? find_held_lock+0x2d/0x110 [ 333.452340][T11855] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 333.454987][T11855] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 333.457280][T11855] ? 0xffffffffa0004340 [ 333.458764][T11855] ? 0xffffffffa0004340 [ 333.460325][T11855] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 333.462322][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 333.464194][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 333.466195][T11855] ? fput+0x32/0x390 [ 333.467682][T11855] ? __bpf_prog_get+0xa0/0x2f0 [ 333.469793][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 333.472380][T11855] __sys_bpf+0x1af6/0x55e0 [ 333.474383][T11855] ? __pfx___sys_bpf+0x10/0x10 [ 333.476521][T11855] ? futex_wait+0x121/0x380 [ 333.478574][T11855] ? __pfx_futex_wait+0x10/0x10 [ 333.480777][T11855] ? fd_install+0x223/0x750 [ 333.482851][T11855] ? __pfx_lock_release+0x10/0x10 [ 333.485141][T11855] ? do_futex+0x123/0x350 [ 333.487077][T11855] ? __pfx_do_futex+0x10/0x10 [ 333.489206][T11855] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 333.491915][T11855] __ia32_sys_bpf+0x76/0xe0 [ 333.493969][T11855] __do_fast_syscall_32+0x73/0x120 [ 333.496315][T11855] do_fast_syscall_32+0x32/0x80 [ 333.498337][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 333.500850][T11855] RIP: 0023:0xf7f56579 [ 333.502480][T11855] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 333.510794][T11855] RSP: 002b:00000000f56f656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 333.514445][T11855] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000600 [ 333.517980][T11855] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 333.521199][T11855] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 333.524326][T11855] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 333.527432][T11855] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 333.530100][T11855] [ 333.531363][T11855] BUG: Bad page state in process syz.2.1921 pfn:262ea [ 333.533920][T11855] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x262ea [ 333.537344][T11855] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 333.540353][T11855] raw: 00fff00000000000 dead000000000040 ffff88805326a000 0000000000000000 [ 333.543921][T11855] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 333.547405][T11855] page dumped because: page_pool leak [ 333.549662][T11855] page_owner tracks the page as allocated [ 333.552116][T11855] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 11855, tgid 11854 (syz.2.1921), ts 324622242123, free_ts 323975486999 [ 333.559515][T11855] post_alloc_hook+0x2d1/0x350 [ 333.561612][T11855] get_page_from_freelist+0x1351/0x2e50 [ 333.563948][T11855] __alloc_pages_noprof+0x22b/0x2460 [ 333.565867][T11855] alloc_pages_bulk_noprof+0x742/0x14f0 [ 333.567982][T11855] __page_pool_alloc_pages_slow+0x19b/0xb30 [ 333.570138][T11855] page_pool_alloc_pages+0xb5/0x110 [ 333.572416][T11855] xdp_test_run_batch.constprop.0+0x30f/0x1880 [ 333.575014][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 333.577276][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 333.579687][T11855] __sys_bpf+0x1af6/0x55e0 [ 333.581759][T11855] __ia32_sys_bpf+0x76/0xe0 [ 333.583785][T11855] __do_fast_syscall_32+0x73/0x120 [ 333.585793][T11855] do_fast_syscall_32+0x32/0x80 [ 333.587718][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 333.589971][T11855] page last free pid 11815 tgid 11815 stack trace: [ 333.592239][T11855] free_unref_page+0x64a/0xe40 [ 333.594096][T11855] vfree+0x181/0x7a0 [ 333.595870][T11855] vb2_vmalloc_put+0x7b/0xc0 [ 333.597947][T11855] __vb2_buf_mem_free+0x154/0x2c0 [ 333.599919][T11855] __vb2_queue_free+0x861/0xac0 [ 333.601547][T11855] vb2_core_queue_release+0x70/0x190 [ 333.603139][T11855] v4l2_m2m_ctx_release+0x2a/0x40 [ 333.604878][T11855] vim2m_release+0xe8/0x170 [ 333.606436][T11855] v4l2_release+0x238/0x460 [ 333.608108][T11855] __fput+0x408/0xbb0 [ 333.609573][T11855] task_work_run+0x14e/0x250 [ 333.611601][T11855] syscall_exit_to_user_mode+0x27b/0x2a0 [ 333.613622][T11855] __do_fast_syscall_32+0x80/0x120 [ 333.615381][T11855] do_fast_syscall_32+0x32/0x80 [ 333.617063][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 333.619344][T11855] Modules linked in: [ 333.620729][T11855] CPU: 3 UID: 0 PID: 11855 Comm: syz.2.1921 Tainted: G B 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 333.625334][T11855] Tainted: [B]=BAD_PAGE [ 333.627136][T11855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 333.631104][T11855] Call Trace: [ 333.632548][T11855] [ 333.633816][T11855] dump_stack_lvl+0x16c/0x1f0 [ 333.635853][T11855] bad_page+0xb3/0x220 [ 333.637484][T11855] ? __pfx_bad_page+0x10/0x10 [ 333.639120][T11855] ? page_bad_reason+0x9d/0x1e0 [ 333.641137][T11855] free_unref_page+0x69e/0xe40 [ 333.642934][T11855] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 333.645118][T11855] ? __phys_addr+0xc6/0x150 [ 333.646748][T11855] skb_free_head+0xa0/0x1d0 [ 333.648263][T11855] skb_release_data+0x75c/0x980 [ 333.650305][T11855] ? __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 333.652876][T11855] ? rcu_is_watching+0x12/0xc0 [ 333.654862][T11855] sk_skb_reason_drop+0x133/0x200 [ 333.657012][T11855] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 333.659688][T11855] ? kernel_text_address+0x8d/0x100 [ 333.661724][T11855] ? __lock_acquire+0x1620/0x3cb0 [ 333.663858][T11855] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 333.666860][T11855] ? hlock_class+0x4e/0x130 [ 333.668651][T11855] ? __lock_acquire+0xbdd/0x3cb0 [ 333.670365][T11855] ? lock_acquire+0x1b1/0x560 [ 333.672371][T11855] ? find_held_lock+0x2d/0x110 [ 333.674418][T11855] ? __pfx___lock_acquire+0x10/0x10 [ 333.676205][T11855] __netif_receive_skb_list_core+0x357/0x950 [ 333.678712][T11855] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 333.681002][T11855] ? timekeeping_debug_get_ns+0x334/0x5b0 [ 333.683393][T11855] netif_receive_skb_list_internal+0x753/0xda0 [ 333.685552][T11855] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 333.688307][T11855] ? __pfx_eth_type_trans+0x10/0x10 [ 333.690532][T11855] ? __build_skb_around+0x278/0x3b0 [ 333.692371][T11855] netif_receive_skb_list+0x4f/0x4a0 [ 333.694499][T11855] xdp_test_run_batch.constprop.0+0x1296/0x1880 [ 333.697150][T11855] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 333.699942][T11855] ? bpf_test_timer_continue+0x150/0x3d0 [ 333.701943][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 333.703949][T11855] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 333.706431][T11855] ? find_held_lock+0x2d/0x110 [ 333.708154][T11855] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 333.710313][T11855] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 333.712585][T11855] ? 0xffffffffa0004340 [ 333.714388][T11855] ? 0xffffffffa0004340 [ 333.716174][T11855] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 333.718585][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 333.720584][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 333.723090][T11855] ? fput+0x32/0x390 [ 333.724617][T11855] ? __bpf_prog_get+0xa0/0x2f0 [ 333.726589][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 333.729125][T11855] __sys_bpf+0x1af6/0x55e0 [ 333.731068][T11855] ? __pfx___sys_bpf+0x10/0x10 [ 333.733141][T11855] ? futex_wait+0x121/0x380 [ 333.735096][T11855] ? __pfx_futex_wait+0x10/0x10 [ 333.737168][T11855] ? fd_install+0x223/0x750 [ 333.738984][T11855] ? __pfx_lock_release+0x10/0x10 [ 333.741128][T11855] ? do_futex+0x123/0x350 [ 333.742975][T11855] ? __pfx_do_futex+0x10/0x10 [ 333.744980][T11855] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 333.747553][T11855] __ia32_sys_bpf+0x76/0xe0 [ 333.749452][T11855] __do_fast_syscall_32+0x73/0x120 [ 333.751344][T11855] do_fast_syscall_32+0x32/0x80 [ 333.753427][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 333.756075][T11855] RIP: 0023:0xf7f56579 [ 333.757813][T11855] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 333.765666][T11855] RSP: 002b:00000000f56f656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 333.769154][T11855] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000600 [ 333.772482][T11855] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 333.775858][T11855] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 333.779237][T11855] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 333.782755][T11855] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 333.785753][T11855] [ 333.787116][T11855] BUG: Bad page state in process syz.2.1921 pfn:26a8b [ 333.789959][T11855] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x26a8b [ 333.793346][T11855] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 333.796097][T11855] raw: 00fff00000000000 dead000000000040 ffff88805326a000 0000000000000000 [ 333.799483][T11855] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 333.802802][T11855] page dumped because: page_pool leak [ 333.805029][T11855] page_owner tracks the page as allocated [ 333.807285][T11855] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 11855, tgid 11854 (syz.2.1921), ts 324622234286, free_ts 323975501923 [ 333.814622][T11855] post_alloc_hook+0x2d1/0x350 [ 333.816541][T11855] get_page_from_freelist+0x1351/0x2e50 [ 333.818707][T11855] __alloc_pages_noprof+0x22b/0x2460 [ 333.820906][T11855] alloc_pages_bulk_noprof+0x742/0x14f0 [ 333.823150][T11855] __page_pool_alloc_pages_slow+0x19b/0xb30 [ 333.825575][T11855] page_pool_alloc_pages+0xb5/0x110 [ 333.827655][T11855] xdp_test_run_batch.constprop.0+0x30f/0x1880 [ 333.830109][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 333.832328][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 333.834526][T11855] __sys_bpf+0x1af6/0x55e0 [ 333.836406][T11855] __ia32_sys_bpf+0x76/0xe0 [ 333.838324][T11855] __do_fast_syscall_32+0x73/0x120 [ 333.840446][T11855] do_fast_syscall_32+0x32/0x80 [ 333.842510][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 333.844551][T11855] page last free pid 11815 tgid 11815 stack trace: [ 333.846801][T11855] free_unref_page+0x64a/0xe40 [ 333.848858][T11855] vfree+0x181/0x7a0 [ 333.850512][T11855] vb2_vmalloc_put+0x7b/0xc0 [ 333.852188][T11855] __vb2_buf_mem_free+0x154/0x2c0 [ 333.853906][T11855] __vb2_queue_free+0x861/0xac0 [ 333.855519][T11855] vb2_core_queue_release+0x70/0x190 [ 333.857312][T11855] v4l2_m2m_ctx_release+0x2a/0x40 [ 333.858976][T11855] vim2m_release+0xe8/0x170 [ 333.860931][T11855] v4l2_release+0x238/0x460 [ 333.862816][T11855] __fput+0x408/0xbb0 [ 333.864489][T11855] task_work_run+0x14e/0x250 [ 333.866352][T11855] syscall_exit_to_user_mode+0x27b/0x2a0 [ 333.868629][T11855] __do_fast_syscall_32+0x80/0x120 [ 333.870719][T11855] do_fast_syscall_32+0x32/0x80 [ 333.872712][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 333.875343][T11855] Modules linked in: [ 333.876962][T11855] CPU: 3 UID: 0 PID: 11855 Comm: syz.2.1921 Tainted: G B 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 333.881962][T11855] Tainted: [B]=BAD_PAGE [ 333.883697][T11855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 333.888022][T11855] Call Trace: [ 333.889448][T11855] [ 333.890697][T11855] dump_stack_lvl+0x16c/0x1f0 [ 333.892673][T11855] bad_page+0xb3/0x220 [ 333.894382][T11855] ? __pfx_bad_page+0x10/0x10 [ 333.896382][T11855] ? page_bad_reason+0x9d/0x1e0 [ 333.898415][T11855] free_unref_page+0x69e/0xe40 [ 333.900429][T11855] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 333.902908][T11855] ? __phys_addr+0xc6/0x150 [ 333.904832][T11855] skb_free_head+0xa0/0x1d0 [ 333.906736][T11855] skb_release_data+0x75c/0x980 [ 333.908653][T11855] ? __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 333.910985][T11855] ? rcu_is_watching+0x12/0xc0 [ 333.912779][T11855] sk_skb_reason_drop+0x133/0x200 [ 333.914981][T11855] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 333.917844][T11855] ? kernel_text_address+0x8d/0x100 [ 333.920137][T11855] ? __lock_acquire+0x1620/0x3cb0 [ 333.921983][T11855] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 333.924471][T11855] ? hlock_class+0x4e/0x130 [ 333.926037][T11855] ? __lock_acquire+0xbdd/0x3cb0 [ 333.927905][T11855] ? lock_acquire+0x1b1/0x560 [ 333.929575][T11855] ? find_held_lock+0x2d/0x110 [ 333.931384][T11855] ? __pfx___lock_acquire+0x10/0x10 [ 333.933664][T11855] __netif_receive_skb_list_core+0x357/0x950 [ 333.936304][T11855] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 333.938911][T11855] ? timekeeping_debug_get_ns+0x334/0x5b0 [ 333.940820][T11855] netif_receive_skb_list_internal+0x753/0xda0 [ 333.943252][T11855] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 333.946187][T11855] ? __pfx_eth_type_trans+0x10/0x10 [ 333.948467][T11855] ? __build_skb_around+0x278/0x3b0 [ 333.950432][T11855] netif_receive_skb_list+0x4f/0x4a0 [ 333.952622][T11855] xdp_test_run_batch.constprop.0+0x1296/0x1880 [ 333.955047][T11855] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 333.957698][T11855] ? bpf_test_timer_continue+0x150/0x3d0 [ 333.960031][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 333.962240][T11855] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 333.964688][T11855] ? find_held_lock+0x2d/0x110 [ 333.966691][T11855] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 333.969179][T11855] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 333.971184][T11855] ? 0xffffffffa0004340 [ 333.972800][T11855] ? 0xffffffffa0004340 [ 333.974358][T11855] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 333.976601][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 333.978675][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 333.981240][T11855] ? fput+0x32/0x390 [ 333.982754][T11855] ? __bpf_prog_get+0xa0/0x2f0 [ 333.984461][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 333.986432][T11855] __sys_bpf+0x1af6/0x55e0 [ 333.987949][T11855] ? __pfx___sys_bpf+0x10/0x10 [ 333.989913][T11855] ? futex_wait+0x121/0x380 [ 333.991812][T11855] ? __pfx_futex_wait+0x10/0x10 [ 333.993765][T11855] ? fd_install+0x223/0x750 [ 333.995711][T11855] ? __pfx_lock_release+0x10/0x10 [ 333.997854][T11855] ? do_futex+0x123/0x350 [ 333.999540][T11855] ? __pfx_do_futex+0x10/0x10 [ 334.001443][T11855] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 334.004022][T11855] __ia32_sys_bpf+0x76/0xe0 [ 334.005974][T11855] __do_fast_syscall_32+0x73/0x120 [ 334.008107][T11855] do_fast_syscall_32+0x32/0x80 [ 334.010188][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 334.012865][T11855] RIP: 0023:0xf7f56579 [ 334.014233][T11855] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 334.021730][T11855] RSP: 002b:00000000f56f656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 334.024853][T11855] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000600 [ 334.028045][T11855] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 334.031261][T11855] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 334.033918][T11855] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 334.037147][T11855] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 334.040348][T11855] [ 334.041424][T11855] BUG: Bad page state in process syz.2.1921 pfn:290ea [ 334.044067][T11855] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2a5 pfn:0x290ea [ 334.047736][T11855] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 334.050666][T11855] raw: 00fff00000000000 dead000000000040 ffff88805326a000 0000000000000000 [ 334.054206][T11855] raw: 00000000000002a5 0000000000000001 00000000ffffffff 0000000000000000 [ 334.057283][T11855] page dumped because: page_pool leak [ 334.059491][T11855] page_owner tracks the page as allocated [ 334.061855][T11855] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 11855, tgid 11854 (syz.2.1921), ts 324622226408, free_ts 323975520651 [ 334.069143][T11855] post_alloc_hook+0x2d1/0x350 [ 334.071190][T11855] get_page_from_freelist+0x1351/0x2e50 [ 334.073402][T11855] __alloc_pages_noprof+0x22b/0x2460 [ 334.075569][T11855] alloc_pages_bulk_noprof+0x742/0x14f0 [ 334.077389][T11855] __page_pool_alloc_pages_slow+0x19b/0xb30 [ 334.079130][T11855] page_pool_alloc_pages+0xb5/0x110 [ 334.080698][T11855] xdp_test_run_batch.constprop.0+0x30f/0x1880 [ 334.082490][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 334.084051][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 334.086237][T11855] __sys_bpf+0x1af6/0x55e0 [ 334.088123][T11855] __ia32_sys_bpf+0x76/0xe0 [ 334.090001][T11855] __do_fast_syscall_32+0x73/0x120 [ 334.091944][T11855] do_fast_syscall_32+0x32/0x80 [ 334.093916][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 334.096544][T11855] page last free pid 11815 tgid 11815 stack trace: [ 334.099400][T11855] free_unref_page+0x64a/0xe40 [ 334.101511][T11855] vfree+0x181/0x7a0 [ 334.103065][T11855] vb2_vmalloc_put+0x7b/0xc0 [ 334.104906][T11855] __vb2_buf_mem_free+0x154/0x2c0 [ 334.107132][T11855] __vb2_queue_free+0x861/0xac0 [ 334.109172][T11855] vb2_core_queue_release+0x70/0x190 [ 334.111534][T11855] v4l2_m2m_ctx_release+0x2a/0x40 [ 334.113743][T11855] vim2m_release+0xe8/0x170 [ 334.115495][T11855] v4l2_release+0x238/0x460 [ 334.117378][T11855] __fput+0x408/0xbb0 [ 334.119147][T11855] task_work_run+0x14e/0x250 [ 334.121193][T11855] syscall_exit_to_user_mode+0x27b/0x2a0 [ 334.123602][T11855] __do_fast_syscall_32+0x80/0x120 [ 334.125808][T11855] do_fast_syscall_32+0x32/0x80 [ 334.127616][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 334.130369][T11855] Modules linked in: [ 334.132159][T11855] CPU: 3 UID: 0 PID: 11855 Comm: syz.2.1921 Tainted: G B 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 334.137030][T11855] Tainted: [B]=BAD_PAGE [ 334.138649][T11855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 334.143049][T11855] Call Trace: [ 334.144476][T11855] [ 334.145711][T11855] dump_stack_lvl+0x16c/0x1f0 [ 334.147737][T11855] bad_page+0xb3/0x220 [ 334.149460][T11855] ? __pfx_bad_page+0x10/0x10 [ 334.151181][T11855] ? page_bad_reason+0x9d/0x1e0 [ 334.152868][T11855] free_unref_page+0x69e/0xe40 [ 334.154526][T11855] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 334.156593][T11855] ? __phys_addr+0xc6/0x150 [ 334.158170][T11855] skb_free_head+0xa0/0x1d0 [ 334.159763][T11855] skb_release_data+0x75c/0x980 [ 334.161802][T11855] ? __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 334.164689][T11855] ? rcu_is_watching+0x12/0xc0 [ 334.166752][T11855] sk_skb_reason_drop+0x133/0x200 [ 334.168950][T11855] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 334.171848][T11855] ? kernel_text_address+0x8d/0x100 [ 334.174119][T11855] ? __lock_acquire+0x1620/0x3cb0 [ 334.176345][T11855] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 334.179433][T11855] ? hlock_class+0x4e/0x130 [ 334.181428][T11855] ? __lock_acquire+0xbdd/0x3cb0 [ 334.183207][T11855] ? lock_acquire+0x1b1/0x560 [ 334.185291][T11855] ? find_held_lock+0x2d/0x110 [ 334.187394][T11855] ? __pfx___lock_acquire+0x10/0x10 [ 334.189258][T11855] __netif_receive_skb_list_core+0x357/0x950 [ 334.191850][T11855] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 334.194671][T11855] ? timekeeping_debug_get_ns+0x334/0x5b0 [ 334.196516][T11855] netif_receive_skb_list_internal+0x753/0xda0 [ 334.198909][T11855] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 334.201691][T11855] ? __pfx_eth_type_trans+0x10/0x10 [ 334.203486][T11855] ? __build_skb_around+0x278/0x3b0 [ 334.205715][T11855] netif_receive_skb_list+0x4f/0x4a0 [ 334.207992][T11855] xdp_test_run_batch.constprop.0+0x1296/0x1880 [ 334.210347][T11855] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 334.212974][T11855] ? bpf_test_timer_continue+0x150/0x3d0 [ 334.215392][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 334.217484][T11855] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 334.219494][T11855] ? find_held_lock+0x2d/0x110 [ 334.221434][T11855] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 334.223996][T11855] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 334.226332][T11855] ? 0xffffffffa0004340 [ 334.228267][T11855] ? 0xffffffffa0004340 [ 334.229779][T11855] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 334.231842][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 334.233661][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 334.235723][T11855] ? fput+0x32/0x390 [ 334.237104][T11855] ? __bpf_prog_get+0xa0/0x2f0 [ 334.238769][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 334.240857][T11855] __sys_bpf+0x1af6/0x55e0 [ 334.242464][T11855] ? __pfx___sys_bpf+0x10/0x10 [ 334.244152][T11855] ? futex_wait+0x121/0x380 [ 334.245788][T11855] ? __pfx_futex_wait+0x10/0x10 [ 334.247513][T11855] ? fd_install+0x223/0x750 [ 334.249466][T11855] ? __pfx_lock_release+0x10/0x10 [ 334.251661][T11855] ? do_futex+0x123/0x350 [ 334.253515][T11855] ? __pfx_do_futex+0x10/0x10 [ 334.255552][T11855] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 334.258077][T11855] __ia32_sys_bpf+0x76/0xe0 [ 334.260028][T11855] __do_fast_syscall_32+0x73/0x120 [ 334.262306][T11855] do_fast_syscall_32+0x32/0x80 [ 334.264152][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 334.266331][T11855] RIP: 0023:0xf7f56579 [ 334.267781][T11855] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 334.275769][T11855] RSP: 002b:00000000f56f656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 334.279200][T11855] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000600 [ 334.281967][T11855] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 334.284671][T11855] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 334.288009][T11855] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 334.291348][T11855] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 334.294700][T11855] [ 334.295907][T11855] BUG: Bad page state in process syz.2.1921 pfn:262fa [ 334.298521][T11855] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x262fa [ 334.301664][T11855] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 334.304198][T11855] raw: 00fff00000000000 dead000000000040 ffff88805326a000 0000000000000000 [ 334.307292][T11855] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 334.311217][T11855] page dumped because: page_pool leak [ 334.313597][T11855] page_owner tracks the page as allocated [ 334.315568][T11855] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 11855, tgid 11854 (syz.2.1921), ts 324622218346, free_ts 323975534682 [ 334.322193][T11855] post_alloc_hook+0x2d1/0x350 [ 334.323851][T11855] get_page_from_freelist+0x1351/0x2e50 [ 334.325782][T11855] __alloc_pages_noprof+0x22b/0x2460 [ 334.327568][T11855] alloc_pages_bulk_noprof+0x742/0x14f0 [ 334.329866][T11855] __page_pool_alloc_pages_slow+0x19b/0xb30 [ 334.332455][T11855] page_pool_alloc_pages+0xb5/0x110 [ 334.334675][T11855] xdp_test_run_batch.constprop.0+0x30f/0x1880 [ 334.336882][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 334.339144][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 334.341474][T11855] __sys_bpf+0x1af6/0x55e0 [ 334.343021][T11855] __ia32_sys_bpf+0x76/0xe0 [ 334.344941][T11855] __do_fast_syscall_32+0x73/0x120 [ 334.346844][T11855] do_fast_syscall_32+0x32/0x80 [ 334.348778][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 334.351049][T11855] page last free pid 11815 tgid 11815 stack trace: [ 334.353737][T11855] free_unref_page+0x64a/0xe40 [ 334.355425][T11855] vfree+0x181/0x7a0 [ 334.356798][T11855] vb2_vmalloc_put+0x7b/0xc0 [ 334.358396][T11855] __vb2_buf_mem_free+0x154/0x2c0 [ 334.360511][T11855] __vb2_queue_free+0x861/0xac0 [ 334.362352][T11855] vb2_core_queue_release+0x70/0x190 [ 334.364302][T11855] v4l2_m2m_ctx_release+0x2a/0x40 [ 334.366350][T11855] vim2m_release+0xe8/0x170 [ 334.368007][T11855] v4l2_release+0x238/0x460 [ 334.369670][T11855] __fput+0x408/0xbb0 [ 334.371462][T11855] task_work_run+0x14e/0x250 [ 334.373447][T11855] syscall_exit_to_user_mode+0x27b/0x2a0 [ 334.375811][T11855] __do_fast_syscall_32+0x80/0x120 [ 334.377962][T11855] do_fast_syscall_32+0x32/0x80 [ 334.380045][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 334.382752][T11855] Modules linked in: [ 334.384438][T11855] CPU: 3 UID: 0 PID: 11855 Comm: syz.2.1921 Tainted: G B 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 334.389295][T11855] Tainted: [B]=BAD_PAGE [ 334.390928][T11855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 334.395057][T11855] Call Trace: [ 334.396493][T11855] [ 334.397754][T11855] dump_stack_lvl+0x16c/0x1f0 [ 334.399774][T11855] bad_page+0xb3/0x220 [ 334.401491][T11855] ? __pfx_bad_page+0x10/0x10 [ 334.403429][T11855] ? page_bad_reason+0x9d/0x1e0 [ 334.405513][T11855] free_unref_page+0x69e/0xe40 [ 334.407609][T11855] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 334.409724][T11855] ? __phys_addr+0xc6/0x150 [ 334.411349][T11855] skb_free_head+0xa0/0x1d0 [ 334.412936][T11855] skb_release_data+0x75c/0x980 [ 334.414605][T11855] ? __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 334.416926][T11855] ? rcu_is_watching+0x12/0xc0 [ 334.418625][T11855] sk_skb_reason_drop+0x133/0x200 [ 334.420374][T11855] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 334.422673][T11855] ? kernel_text_address+0x8d/0x100 [ 334.424482][T11855] ? __lock_acquire+0x1620/0x3cb0 [ 334.426244][T11855] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 334.428913][T11855] ? hlock_class+0x4e/0x130 [ 334.430838][T11855] ? __lock_acquire+0xbdd/0x3cb0 [ 334.432693][T11855] ? lock_acquire+0x1b1/0x560 [ 334.434304][T11855] ? find_held_lock+0x2d/0x110 [ 334.435947][T11855] ? __pfx___lock_acquire+0x10/0x10 [ 334.437712][T11855] __netif_receive_skb_list_core+0x357/0x950 [ 334.439778][T11855] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 334.442050][T11855] ? timekeeping_debug_get_ns+0x334/0x5b0 [ 334.444036][T11855] netif_receive_skb_list_internal+0x753/0xda0 [ 334.446201][T11855] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 334.448671][T11855] ? __pfx_eth_type_trans+0x10/0x10 [ 334.450458][T11855] ? __build_skb_around+0x278/0x3b0 [ 334.452355][T11855] netif_receive_skb_list+0x4f/0x4a0 [ 334.454366][T11855] xdp_test_run_batch.constprop.0+0x1296/0x1880 [ 334.456773][T11855] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 334.459392][T11855] ? bpf_test_timer_continue+0x150/0x3d0 [ 334.461898][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 334.464261][T11855] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 334.466843][T11855] ? find_held_lock+0x2d/0x110 [ 334.468970][T11855] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 334.471582][T11855] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 334.473920][T11855] ? 0xffffffffa0004340 [ 334.475768][T11855] ? 0xffffffffa0004340 [ 334.477606][T11855] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 334.480223][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 334.482586][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 334.485133][T11855] ? fput+0x32/0x390 [ 334.486854][T11855] ? __bpf_prog_get+0xa0/0x2f0 [ 334.488976][T11855] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 334.491554][T11855] __sys_bpf+0x1af6/0x55e0 [ 334.493503][T11855] ? __pfx___sys_bpf+0x10/0x10 [ 334.495584][T11855] ? futex_wait+0x121/0x380 [ 334.497555][T11855] ? __pfx_futex_wait+0x10/0x10 [ 334.499702][T11855] ? fd_install+0x223/0x750 [ 334.501726][T11855] ? __pfx_lock_release+0x10/0x10 [ 334.503932][T11855] ? do_futex+0x123/0x350 [ 334.505833][T11855] ? __pfx_do_futex+0x10/0x10 [ 334.507950][T11855] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 334.510602][T11855] __ia32_sys_bpf+0x76/0xe0 [ 334.512471][T11855] __do_fast_syscall_32+0x73/0x120 [ 334.514435][T11855] do_fast_syscall_32+0x32/0x80 [ 334.516573][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 334.519304][T11855] RIP: 0023:0xf7f56579 [ 334.521087][T11855] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 334.529498][T11855] RSP: 002b:00000000f56f656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 334.532941][T11855] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000600 [ 334.536427][T11855] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 334.539903][T11855] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 334.543330][T11855] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 334.546743][T11855] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 334.550241][T11855] [ 334.551744][T11855] BUG: Bad page state in process syz.2.1921 pfn:2bbb6 [ 334.554661][T11855] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802bbb6000 pfn:0x2bbb6 [ 334.558949][T11855] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 334.562072][T11855] raw: 00fff00000000000 dead000000000040 ffff88805326a000 0000000000000000 [ 334.565731][T11855] raw: ffff88802bbb6000 0000000000000001 00000000ffffffff 0000000000000000 [ 334.569327][T11855] page dumped because: page_pool leak [ 334.571778][T11855] page_owner tracks the page as allocated [ 334.574284][T11855] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 11855, tgid 11854 (syz.2.1921), ts 324622210128, free_ts 323975549147 [ 334.582391][T11855] post_alloc_hook+0x2d1/0x350 [ 334.584534][T11855] get_page_from_freelist+0x1351/0x2e50 [ 334.586983][T11855] __alloc_pages_noprof+0x22b/0x2460 [ 334.589273][T11855] alloc_pages_bulk_noprof+0x742/0x14f0 [ 334.591751][T11855] __page_pool_alloc_pages_slow+0x19b/0xb30 [ 334.594309][T11855] page_pool_alloc_pages+0xb5/0x110 [ 334.596623][T11855] xdp_test_run_batch.constprop.0+0x30f/0x1880 [ 334.599352][T11855] bpf_test_run_xdp_live+0x365/0x500 [ 334.601752][T11855] bpf_prog_test_run_xdp+0x82d/0x1530 [ 334.604176][T11855] __sys_bpf+0x1af6/0x55e0 [ 334.606129][T11855] __ia32_sys_bpf+0x76/0xe0 [ 334.607880][T11855] __do_fast_syscall_32+0x73/0x120 [ 334.609636][T11855] do_fast_syscall_32+0x32/0x80 [ 334.611389][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 334.613563][T11855] page last free pid 11815 tgid 11815 stack trace: [ 334.615784][T11855] free_unref_page+0x64a/0xe40 [ 334.617432][T11855] vfree+0x181/0x7a0 [ 334.618790][T11855] vb2_vmalloc_put+0x7b/0xc0 [ 334.620410][T11855] __vb2_buf_mem_free+0x154/0x2c0 [ 334.622438][T11855] __vb2_queue_free+0x861/0xac0 [ 334.624516][T11855] vb2_core_queue_release+0x70/0x190 [ 334.626742][T11855] v4l2_m2m_ctx_release+0x2a/0x40 [ 334.628902][T11855] vim2m_release+0xe8/0x170 [ 334.630637][T11855] v4l2_release+0x238/0x460 [ 334.632228][T11855] __fput+0x408/0xbb0 [ 334.633610][T11855] task_work_run+0x14e/0x250 [ 334.635223][T11855] syscall_exit_to_user_mode+0x27b/0x2a0 VM DIAGNOSIS: 16:36:37 Registers: info registers vcpu 0 CPU#0 RAX=00000000006f3f15 RBX=0000000000000000 RCX=ffffffff8b053b79 RDX=0000000000000000 RSI=ffffffff8b4cd020 RDI=ffffffff8bb050e0 RBP=fffffbfff1b52af8 RSP=ffffffff8da07e20 R8 =0000000000000001 R9 =ffffed1005806fd9 R10=ffff88802c037ecb R11=0000000000000000 R12=0000000000000000 R13=ffffffff8da957c0 R14=ffffffff90113018 R15=0000000000000000 RIP=ffffffff8b054f6f RFL=00000242 [---Z---] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7378c6c CR3=0000000024a94000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000085b2d7 RBX=0000000000000001 RCX=ffffffff8b053b79 RDX=0000000000000000 RSI=ffffffff8b4cd020 RDI=ffffffff8bb050e0 RBP=ffffed1002cf8910 RSP=ffffc90000477e08 R8 =0000000000000001 R9 =ffffed1005826fd9 R10=ffff88802c137ecb R11=0000000000000000 R12=0000000000000001 R13=ffff8880167c4880 R14=ffffffff90113018 R15=0000000000000000 RIP=ffffffff8b054f6f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c100000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f73cf474 CR3=000000005499a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff8af891ae RDX=ffff88801dad0000 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000030 RSP=ffffc900041bf5e0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000001 R13=dffffc0000000000 R14=ffff88804e152820 R15=ffff88804e152680 RIP=ffffffff818b1b6c RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802c200000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000ffde52ec CR3=0000000026ed2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f7400ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000070 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84fa4c55 RDI=ffffffff95119340 RBP=ffffffff95119300 RSP=ffffc90002b5e910 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000070 R14=ffffffff84fa4bf0 R15=0000000000000000 RIP=ffffffff84fa4c7f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802c300000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=00000000293ca000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000006000000000 0000000100000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000e400000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000