[ 38.032294][ T40] audit: type=1400 audit(1730217199.222:82): avc: denied { siginh } for pid=5901 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.959680][ T40] audit: type=1400 audit(1730217200.162:83): avc: denied { read } for pid=5343 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 38.967322][ T40] audit: type=1400 audit(1730217200.162:84): avc: denied { append } for pid=5343 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.973244][ T40] audit: type=1400 audit(1730217200.162:85): avc: denied { open } for pid=5343 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.980734][ T40] audit: type=1400 audit(1730217200.162:86): avc: denied { getattr } for pid=5343 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:38134' (ED25519) to the list of known hosts. [ 44.007387][ T40] audit: type=1400 audit(1730217205.212:87): avc: denied { execute } for pid=5941 comm="sh" name="syz-executor3923552088" dev="sda1" ino=1926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 44.014124][ T40] audit: type=1400 audit(1730217205.212:88): avc: denied { execute_no_trans } for pid=5941 comm="sh" path="/syz-executor3923552088" dev="sda1" ino=1926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 executing program executing program executing program executing program [ 44.020154][ T40] audit: type=1400 audit(1730217205.222:89): avc: denied { execmem } for pid=5941 comm="syz-executor392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 44.027042][ T40] audit: type=1400 audit(1730217205.222:90): avc: denied { write } for pid=5945 comm="syz-executor392" path="pipe:[2842]" dev="pipefs" ino=2842 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 44.042894][ T40] audit: type=1400 audit(1730217205.222:91): avc: denied { write } for pid=5946 comm="syz-executor392" path="pipe:[2842]" dev="pipefs" ino=2842 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 44.049181][ T40] audit: type=1400 audit(1730217205.222:92): avc: denied { create } for pid=5945 comm="syz-executor392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 44.055573][ T40] audit: type=1400 audit(1730217205.222:93): avc: denied { create } for pid=5945 comm="syz-executor392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.060762][ T40] audit: type=1400 audit(1730217205.222:94): avc: denied { setopt } for pid=5945 comm="syz-executor392" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.065983][ T40] audit: type=1400 audit(1730217205.232:95): avc: denied { module_request } for pid=5946 comm="syz-executor392" kmod="ip6t_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 44.071751][ T40] audit: type=1400 audit(1730217205.232:97): avc: denied { module_request } for pid=5947 comm="syz-executor392" kmod="ip6t_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 executing program executing program executing program executing program [ 44.244745][ T5962] BUG: Bad page state in process syz-executor392 pfn:12191 [ 44.247491][ T5962] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x8 pfn:0x12191 [ 44.253463][ T5962] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 44.255791][ T5962] raw: 00fff00000000000 dead000000000040 ffff888106115000 0000000000000000 [ 44.259053][ T5962] raw: 0000000000000008 0000000000000001 00000000ffffffff 0000000000000000 [ 44.261761][ T5962] page dumped because: page_pool leak [ 44.263717][ T5962] page_owner tracks the page as allocated [ 44.265841][ T5962] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5962, tgid 5958 (syz-executor392), ts 44239127096, free_ts 44208271836 [ 44.272058][ T5962] post_alloc_hook+0x2d1/0x350 [ 44.273916][ T5962] get_page_from_freelist+0x101e/0x3070 [ 44.275670][ T5962] __alloc_pages_noprof+0x223/0x25a0 [ 44.277497][ T5962] alloc_pages_bulk_noprof+0x77c/0x1110 [ 44.279587][ T5962] __page_pool_alloc_pages_slow+0x18f/0x770 [ 44.281743][ T5962] page_pool_alloc_netmem+0xc4/0x160 [ 44.283301][ T5962] page_pool_alloc_pages+0x1a/0x60 [ 44.284672][ T5962] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 44.286304][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 44.287728][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 44.289299][ T5962] __sys_bpf+0xfc6/0x49a0 [ 44.290508][ T5962] __x64_sys_bpf+0x78/0xc0 [ 44.292225][ T5962] do_syscall_64+0xcd/0x250 [ 44.293996][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.296036][ T5962] page last free pid 5946 tgid 5946 stack trace: [ 44.298624][ T5962] free_unref_page+0x5f4/0xdc0 [ 44.300363][ T5962] __put_partials+0x14c/0x170 [ 44.302153][ T5962] qlist_free_all+0x4e/0x120 [ 44.303806][ T5962] kasan_quarantine_reduce+0x192/0x1e0 [ 44.305859][ T5962] __kasan_slab_alloc+0x69/0x90 [ 44.307695][ T5962] kmem_cache_alloc_noprof+0x121/0x2f0 [ 44.310012][ T5962] taskstats_exit+0x656/0xbe0 [ 44.312377][ T5962] do_exit+0x84a/0x2d70 [ 44.314116][ T5962] do_group_exit+0xd3/0x2a0 [ 44.315930][ T5962] __x64_sys_exit_group+0x3e/0x50 [ 44.317683][ T5962] x64_sys_call+0x14a9/0x16a0 [ 44.319523][ T5962] do_syscall_64+0xcd/0x250 [ 44.321360][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.323601][ T5962] Modules linked in: [ 44.324941][ T5962] CPU: 2 UID: 0 PID: 5962 Comm: syz-executor392 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 44.327965][ T5962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 44.331123][ T5962] Call Trace: [ 44.332169][ T5962] [ 44.332971][ T5962] dump_stack_lvl+0x16c/0x1f0 [ 44.334276][ T5962] bad_page+0xb3/0x1f0 [ 44.335412][ T5962] ? __pfx_bad_page+0x10/0x10 [ 44.336747][ T5962] ? page_bad_reason+0x9d/0x1e0 [ 44.338443][ T5962] free_unref_page+0x657/0xdc0 [ 44.339806][ T5962] ? __phys_addr+0xc6/0x150 [ 44.341179][ T5962] skb_free_head+0xa0/0x1d0 [ 44.342416][ T5962] skb_release_data+0x560/0x730 [ 44.343695][ T5962] sk_skb_reason_drop+0x129/0x1a0 [ 44.345018][ T5962] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 44.346997][ T5962] ? kernel_text_address+0x8d/0x100 [ 44.348453][ T5962] ? hlock_class+0x4e/0x130 [ 44.349699][ T5962] ? __lock_acquire+0x163e/0x3ce0 [ 44.351277][ T5962] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 44.353416][ T5962] ? hlock_class+0x4e/0x130 [ 44.354613][ T5962] ? __lock_acquire+0xbdd/0x3ce0 [ 44.355898][ T5962] ? __pfx___lock_acquire+0x10/0x10 [ 44.357186][ T5962] __netif_receive_skb_list_core+0x357/0x950 [ 44.358716][ T5962] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 44.360406][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 44.361717][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 44.363304][ T5962] ? lock_acquire+0x2f/0xb0 [ 44.364488][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 44.366106][ T5962] netif_receive_skb_list_internal+0x753/0xdb0 [ 44.367714][ T5962] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 44.369395][ T5962] ? __pfx_eth_type_trans+0x10/0x10 [ 44.370730][ T5962] ? __build_skb_around+0x278/0x3b0 [ 44.372073][ T5962] netif_receive_skb_list+0x4f/0x4a0 [ 44.373415][ T5962] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 44.375247][ T5962] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 44.377069][ T5962] ? bpf_test_timer_continue+0x150/0x3d0 [ 44.378649][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 44.380171][ T5962] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 44.381817][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 44.383551][ T5962] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 44.385263][ T5962] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 44.387006][ T5962] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 44.388630][ T5962] ? 0xffffffffa00045c0 [ 44.389730][ T5962] ? 0xffffffffa00045c0 [ 44.390832][ T5962] ? 0xffffffffa00045c0 [ 44.391917][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 44.393468][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 44.395040][ T5962] ? lock_acquire+0x2f/0xb0 [ 44.396339][ T5962] ? __fget_files+0x40/0x3f0 [ 44.397602][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 44.399170][ T5962] ? fput+0x30/0x390 [ 44.400257][ T5962] ? __bpf_prog_get+0xa0/0x290 [ 44.401514][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 44.403097][ T5962] __sys_bpf+0xfc6/0x49a0 [ 44.404321][ T5962] ? find_held_lock+0x2d/0x110 [ 44.405598][ T5962] ? __pfx___sys_bpf+0x10/0x10 [ 44.407039][ T5962] ? __might_fault+0x13b/0x190 [ 44.408331][ T5962] ? __pfx_lock_release+0x10/0x10 [ 44.409645][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 44.411254][ T5962] ? lock_acquire+0x2f/0xb0 [ 44.412660][ T5962] ? __might_fault+0xe3/0x190 [ 44.414396][ T5962] ? xfd_validate_state+0x5d/0x180 [ 44.415905][ T5962] ? rcu_is_watching+0x12/0xc0 [ 44.417408][ T5962] __x64_sys_bpf+0x78/0xc0 [ 44.418754][ T5962] ? lockdep_hardirqs_on+0x7c/0x110 [ 44.420151][ T5962] do_syscall_64+0xcd/0x250 [ 44.421331][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.422868][ T5962] RIP: 0033:0x7f1b5711ee99 [ 44.424108][ T5962] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 44.429095][ T5962] RSP: 002b:00007f1b570d9228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 44.431416][ T5962] RAX: ffffffffffffffda RBX: 00007f1b571a9328 RCX: 00007f1b5711ee99 [ 44.433520][ T5962] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 44.435716][ T5962] RBP: 00007f1b571a9320 R08: 00007f1b570d96c0 R09: 00007f1b570d96c0 [ 44.437963][ T5962] R10: 00007f1b570d96c0 R11: 0000000000000246 R12: 00007f1b57176074 [ 44.440079][ T5962] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffed9b8fc98 [ 44.442260][ T5962] [ 44.443165][ T5962] Disabling lock debugging due to kernel taint [ 44.444788][ T5962] BUG: Bad page state in process syz-executor392 pfn:12190 [ 44.446650][ T5962] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888012196600 pfn:0x12190 [ 44.449719][ T5962] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 44.452102][ T5962] raw: 00fff00000000000 dead000000000040 ffff888106115000 0000000000000000 [ 44.454651][ T5962] raw: ffff888012196600 0000000000000001 00000000ffffffff 0000000000000000 [ 44.457157][ T5962] page dumped because: page_pool leak [ 44.458773][ T5962] page_owner tracks the page as allocated [ 44.460341][ T5962] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5962, tgid 5958 (syz-executor392), ts 44239119986, free_ts 44208271836 [ 44.464560][ T5962] post_alloc_hook+0x2d1/0x350 [ 44.465783][ T5962] get_page_from_freelist+0x101e/0x3070 [ 44.467169][ T5962] __alloc_pages_noprof+0x223/0x25a0 [ 44.468537][ T5962] alloc_pages_bulk_noprof+0x77c/0x1110 [ 44.469992][ T5962] __page_pool_alloc_pages_slow+0x18f/0x770 [ 44.472008][ T5962] page_pool_alloc_netmem+0xc4/0x160 [ 44.473702][ T5962] page_pool_alloc_pages+0x1a/0x60 [ 44.475189][ T5962] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 44.477065][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 44.478642][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 44.480321][ T5962] __sys_bpf+0xfc6/0x49a0 [ 44.481458][ T5962] __x64_sys_bpf+0x78/0xc0 [ 44.482762][ T5962] do_syscall_64+0xcd/0x250 [ 44.484042][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.485687][ T5962] page last free pid 5946 tgid 5946 stack trace: [ 44.487340][ T5962] free_unref_page+0x5f4/0xdc0 [ 44.488616][ T5962] __put_partials+0x14c/0x170 [ 44.489851][ T5962] qlist_free_all+0x4e/0x120 [ 44.491242][ T5962] kasan_quarantine_reduce+0x192/0x1e0 [ 44.493009][ T5962] __kasan_slab_alloc+0x69/0x90 [ 44.494489][ T5962] kmem_cache_alloc_noprof+0x121/0x2f0 [ 44.495904][ T5962] taskstats_exit+0x656/0xbe0 [ 44.497135][ T5962] do_exit+0x84a/0x2d70 [ 44.498322][ T5962] do_group_exit+0xd3/0x2a0 [ 44.499451][ T5962] __x64_sys_exit_group+0x3e/0x50 [ 44.500734][ T5962] x64_sys_call+0x14a9/0x16a0 [ 44.502003][ T5962] do_syscall_64+0xcd/0x250 [ 44.503289][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.504800][ T5962] Modules linked in: [ 44.505783][ T5962] CPU: 2 UID: 0 PID: 5962 Comm: syz-executor392 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 44.508800][ T5962] Tainted: [B]=BAD_PAGE [ 44.510084][ T5962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 44.513055][ T5962] Call Trace: [ 44.514351][ T5962] [ 44.515183][ T5962] dump_stack_lvl+0x16c/0x1f0 [ 44.516472][ T5962] bad_page+0xb3/0x1f0 [ 44.517714][ T5962] ? __pfx_bad_page+0x10/0x10 [ 44.519034][ T5962] ? page_bad_reason+0x9d/0x1e0 [ 44.520393][ T5962] free_unref_page+0x657/0xdc0 [ 44.521651][ T5962] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 44.523244][ T5962] ? __phys_addr+0xc6/0x150 [ 44.524506][ T5962] skb_free_head+0xa0/0x1d0 [ 44.525777][ T5962] skb_release_data+0x560/0x730 [ 44.527040][ T5962] sk_skb_reason_drop+0x129/0x1a0 [ 44.528612][ T5962] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 44.530731][ T5962] ? kernel_text_address+0x8d/0x100 [ 44.532314][ T5962] ? hlock_class+0x4e/0x130 [ 44.533893][ T5962] ? __lock_acquire+0x163e/0x3ce0 [ 44.535322][ T5962] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 44.537466][ T5962] ? hlock_class+0x4e/0x130 [ 44.538812][ T5962] ? __lock_acquire+0xbdd/0x3ce0 [ 44.540285][ T5962] ? __pfx___lock_acquire+0x10/0x10 [ 44.541867][ T5962] __netif_receive_skb_list_core+0x357/0x950 [ 44.543818][ T5962] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 44.545772][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 44.547297][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 44.549038][ T5962] ? lock_acquire+0x2f/0xb0 [ 44.550354][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 44.552037][ T5962] netif_receive_skb_list_internal+0x753/0xdb0 [ 44.553548][ T5962] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 44.555135][ T5962] ? __pfx_eth_type_trans+0x10/0x10 [ 44.556441][ T5962] ? __build_skb_around+0x278/0x3b0 [ 44.557763][ T5962] netif_receive_skb_list+0x4f/0x4a0 [ 44.559440][ T5962] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 44.561214][ T5962] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 44.562935][ T5962] ? bpf_test_timer_continue+0x150/0x3d0 [ 44.564425][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 44.565805][ T5962] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 44.567337][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 44.568886][ T5962] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 44.570804][ T5962] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 44.572443][ T5962] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 44.574086][ T5962] ? 0xffffffffa00045c0 [ 44.575313][ T5962] ? 0xffffffffa00045c0 [ 44.576562][ T5962] ? 0xffffffffa00045c0 [ 44.577696][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 44.579292][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 44.580652][ T5962] ? lock_acquire+0x2f/0xb0 [ 44.581773][ T5962] ? __fget_files+0x40/0x3f0 [ 44.582936][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 44.584410][ T5962] ? fput+0x30/0x390 [ 44.585429][ T5962] ? __bpf_prog_get+0xa0/0x290 [ 44.586623][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 44.588113][ T5962] __sys_bpf+0xfc6/0x49a0 [ 44.589372][ T5962] ? find_held_lock+0x2d/0x110 [ 44.590808][ T5962] ? __pfx___sys_bpf+0x10/0x10 [ 44.592130][ T5962] ? __might_fault+0x13b/0x190 [ 44.593546][ T5962] ? __pfx_lock_release+0x10/0x10 [ 44.594826][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 44.596171][ T5962] ? lock_acquire+0x2f/0xb0 [ 44.597348][ T5962] ? __might_fault+0xe3/0x190 [ 44.598554][ T5962] ? xfd_validate_state+0x5d/0x180 [ 44.599868][ T5962] ? rcu_is_watching+0x12/0xc0 [ 44.601086][ T5962] __x64_sys_bpf+0x78/0xc0 [ 44.602212][ T5962] ? lockdep_hardirqs_on+0x7c/0x110 [ 44.603557][ T5962] do_syscall_64+0xcd/0x250 [ 44.604731][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.606214][ T5962] RIP: 0033:0x7f1b5711ee99 [ 44.607359][ T5962] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 44.612790][ T5962] RSP: 002b:00007f1b570d9228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 44.615213][ T5962] RAX: ffffffffffffffda RBX: 00007f1b571a9328 RCX: 00007f1b5711ee99 [ 44.617442][ T5962] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 44.619637][ T5962] RBP: 00007f1b571a9320 R08: 00007f1b570d96c0 R09: 00007f1b570d96c0 [ 44.621624][ T5962] R10: 00007f1b570d96c0 R11: 0000000000000246 R12: 00007f1b57176074 [ 44.623574][ T5962] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffed9b8fc98 [ 44.625560][ T5962] [ 44.626457][ T5962] BUG: Bad page state in process syz-executor392 pfn:2f7f7 [ 44.628338][ T5962] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2f7f7 [ 44.630464][ T5962] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 44.632722][ T5962] raw: 00fff00000000000 dead000000000040 ffff888106115000 0000000000000000 [ 44.634946][ T5962] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 44.637135][ T5962] page dumped because: page_pool leak [ 44.638538][ T5962] page_owner tracks the page as allocated [ 44.640070][ T5962] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5962, tgid 5958 (syz-executor392), ts 44239112864, free_ts 44208514534 [ 44.644795][ T5962] post_alloc_hook+0x2d1/0x350 [ 44.646068][ T5962] get_page_from_freelist+0x101e/0x3070 [ 44.647516][ T5962] __alloc_pages_noprof+0x223/0x25a0 [ 44.648840][ T5962] alloc_pages_bulk_noprof+0x77c/0x1110 [ 44.650243][ T5962] __page_pool_alloc_pages_slow+0x18f/0x770 [ 44.651736][ T5962] page_pool_alloc_netmem+0xc4/0x160 [ 44.653248][ T5962] page_pool_alloc_pages+0x1a/0x60 [ 44.654619][ T5962] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 44.656196][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 44.657554][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 44.658946][ T5962] __sys_bpf+0xfc6/0x49a0 [ 44.660074][ T5962] __x64_sys_bpf+0x78/0xc0 [ 44.661215][ T5962] do_syscall_64+0xcd/0x250 [ 44.662479][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.664061][ T5962] page last free pid 5946 tgid 5946 stack trace: [ 44.665620][ T5962] free_unref_page+0x5f4/0xdc0 [ 44.666825][ T5962] __put_partials+0x14c/0x170 [ 44.668008][ T5962] qlist_free_all+0x4e/0x120 [ 44.669170][ T5962] kasan_quarantine_reduce+0x192/0x1e0 [ 44.670549][ T5962] __kasan_slab_alloc+0x69/0x90 [ 44.671782][ T5962] kmem_cache_alloc_noprof+0x121/0x2f0 [ 44.673227][ T5962] taskstats_exit+0x656/0xbe0 [ 44.674441][ T5962] do_exit+0x84a/0x2d70 [ 44.675497][ T5962] do_group_exit+0xd3/0x2a0 [ 44.676637][ T5962] __x64_sys_exit_group+0x3e/0x50 [ 44.677918][ T5962] x64_sys_call+0x14a9/0x16a0 [ 44.679122][ T5962] do_syscall_64+0xcd/0x250 [ 44.680292][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.681847][ T5962] Modules linked in: [ 44.682840][ T5962] CPU: 2 UID: 0 PID: 5962 Comm: syz-executor392 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 44.685960][ T5962] Tainted: [B]=BAD_PAGE [ 44.687053][ T5962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 44.689753][ T5962] Call Trace: [ 44.690684][ T5962] [ 44.691504][ T5962] dump_stack_lvl+0x16c/0x1f0 [ 44.692816][ T5962] bad_page+0xb3/0x1f0 [ 44.693914][ T5962] ? __pfx_bad_page+0x10/0x10 [ 44.695196][ T5962] ? page_bad_reason+0x9d/0x1e0 [ 44.696513][ T5962] free_unref_page+0x657/0xdc0 [ 44.697753][ T5962] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 44.699324][ T5962] ? __phys_addr+0xc6/0x150 [ 44.700506][ T5962] skb_free_head+0xa0/0x1d0 [ 44.701877][ T5962] skb_release_data+0x560/0x730 [ 44.703366][ T5962] sk_skb_reason_drop+0x129/0x1a0 [ 44.704958][ T5962] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 44.706979][ T5962] ? kernel_text_address+0x8d/0x100 [ 44.708337][ T5962] ? hlock_class+0x4e/0x130 [ 44.709795][ T5962] ? __lock_acquire+0x163e/0x3ce0 [ 44.711190][ T5962] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 44.713129][ T5962] ? hlock_class+0x4e/0x130 [ 44.714428][ T5962] ? __lock_acquire+0xbdd/0x3ce0 [ 44.715859][ T5962] ? __pfx___lock_acquire+0x10/0x10 [ 44.717413][ T5962] __netif_receive_skb_list_core+0x357/0x950 [ 44.719185][ T5962] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 44.721168][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 44.722685][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 44.724254][ T5962] ? lock_acquire+0x2f/0xb0 [ 44.725427][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 44.727004][ T5962] netif_receive_skb_list_internal+0x753/0xdb0 [ 44.728569][ T5962] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 44.730202][ T5962] ? __pfx_eth_type_trans+0x10/0x10 [ 44.731545][ T5962] ? __build_skb_around+0x278/0x3b0 [ 44.732870][ T5962] netif_receive_skb_list+0x4f/0x4a0 [ 44.734231][ T5962] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 44.735856][ T5962] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 44.737565][ T5962] ? bpf_test_timer_continue+0x150/0x3d0 [ 44.739114][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 44.740618][ T5962] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 44.742215][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 44.743826][ T5962] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 44.745384][ T5962] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 44.746905][ T5962] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 44.748528][ T5962] ? 0xffffffffa00045c0 [ 44.749927][ T5962] ? 0xffffffffa00045c0 [ 44.751130][ T5962] ? 0xffffffffa00045c0 [ 44.752405][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 44.754242][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 44.755759][ T5962] ? lock_acquire+0x2f/0xb0 [ 44.756998][ T5962] ? __fget_files+0x40/0x3f0 [ 44.758257][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 44.759871][ T5962] ? fput+0x30/0x390 [ 44.760952][ T5962] ? __bpf_prog_get+0xa0/0x290 [ 44.762305][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 44.764129][ T5962] __sys_bpf+0xfc6/0x49a0 [ 44.765481][ T5962] ? find_held_lock+0x2d/0x110 [ 44.766814][ T5962] ? __pfx___sys_bpf+0x10/0x10 [ 44.768091][ T5962] ? __might_fault+0x13b/0x190 [ 44.769443][ T5962] ? __pfx_lock_release+0x10/0x10 [ 44.771116][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 44.772844][ T5962] ? lock_acquire+0x2f/0xb0 [ 44.774098][ T5962] ? __might_fault+0xe3/0x190 [ 44.775395][ T5962] ? xfd_validate_state+0x5d/0x180 [ 44.777139][ T5962] ? rcu_is_watching+0x12/0xc0 [ 44.778597][ T5962] __x64_sys_bpf+0x78/0xc0 [ 44.779893][ T5962] ? lockdep_hardirqs_on+0x7c/0x110 [ 44.781250][ T5962] do_syscall_64+0xcd/0x250 [ 44.782426][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.783985][ T5962] RIP: 0033:0x7f1b5711ee99 [ 44.785173][ T5962] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 44.790233][ T5962] RSP: 002b:00007f1b570d9228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 44.792477][ T5962] RAX: ffffffffffffffda RBX: 00007f1b571a9328 RCX: 00007f1b5711ee99 [ 44.795024][ T5962] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 44.797110][ T5962] RBP: 00007f1b571a9320 R08: 00007f1b570d96c0 R09: 00007f1b570d96c0 [ 44.799176][ T5962] R10: 00007f1b570d96c0 R11: 0000000000000246 R12: 00007f1b57176074 [ 44.801407][ T5962] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffed9b8fc98 [ 44.803778][ T5962] [ 44.804677][ T5962] BUG: Bad page state in process syz-executor392 pfn:2f7f6 [ 44.806527][ T5962] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2f7f6 [ 44.808822][ T5962] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 44.810700][ T5962] raw: 00fff00000000000 dead000000000040 ffff888106115000 0000000000000000 [ 44.812943][ T5962] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 44.815128][ T5962] page dumped because: page_pool leak [ 44.816910][ T5962] page_owner tracks the page as allocated [ 44.818328][ T5962] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5962, tgid 5958 (syz-executor392), ts 44239100844, free_ts 44208514534 [ 44.823128][ T5962] post_alloc_hook+0x2d1/0x350 [ 44.824452][ T5962] get_page_from_freelist+0x101e/0x3070 [ 44.825897][ T5962] __alloc_pages_noprof+0x223/0x25a0 [ 44.827292][ T5962] alloc_pages_bulk_noprof+0x77c/0x1110 [ 44.828932][ T5962] __page_pool_alloc_pages_slow+0x18f/0x770 [ 44.830800][ T5962] page_pool_alloc_netmem+0xc4/0x160 [ 44.832421][ T5962] page_pool_alloc_pages+0x1a/0x60 [ 44.833915][ T5962] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 44.835695][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 44.837663][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 44.839285][ T5962] __sys_bpf+0xfc6/0x49a0 [ 44.840700][ T5962] __x64_sys_bpf+0x78/0xc0 [ 44.841905][ T5962] do_syscall_64+0xcd/0x250 [ 44.843117][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.844686][ T5962] page last free pid 5946 tgid 5946 stack trace: [ 44.846348][ T5962] free_unref_page+0x5f4/0xdc0 [ 44.847656][ T5962] __put_partials+0x14c/0x170 [ 44.849039][ T5962] qlist_free_all+0x4e/0x120 [ 44.850305][ T5962] kasan_quarantine_reduce+0x192/0x1e0 [ 44.852135][ T5962] __kasan_slab_alloc+0x69/0x90 [ 44.853562][ T5962] kmem_cache_alloc_noprof+0x121/0x2f0 [ 44.855139][ T5962] taskstats_exit+0x656/0xbe0 [ 44.856612][ T5962] do_exit+0x84a/0x2d70 [ 44.857905][ T5962] do_group_exit+0xd3/0x2a0 [ 44.859163][ T5962] __x64_sys_exit_group+0x3e/0x50 [ 44.860554][ T5962] x64_sys_call+0x14a9/0x16a0 [ 44.861945][ T5962] do_syscall_64+0xcd/0x250 [ 44.863155][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.864683][ T5962] Modules linked in: [ 44.865698][ T5962] CPU: 2 UID: 0 PID: 5962 Comm: syz-executor392 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 44.868985][ T5962] Tainted: [B]=BAD_PAGE [ 44.870126][ T5962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 44.872987][ T5962] Call Trace: [ 44.873852][ T5962] [ 44.874609][ T5962] dump_stack_lvl+0x16c/0x1f0 [ 44.875841][ T5962] bad_page+0xb3/0x1f0 [ 44.876888][ T5962] ? __pfx_bad_page+0x10/0x10 [ 44.878127][ T5962] ? page_bad_reason+0x9d/0x1e0 [ 44.879476][ T5962] free_unref_page+0x657/0xdc0 [ 44.880851][ T5962] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 44.882447][ T5962] ? __phys_addr+0xc6/0x150 [ 44.883655][ T5962] skb_free_head+0xa0/0x1d0 [ 44.884833][ T5962] skb_release_data+0x560/0x730 [ 44.886109][ T5962] sk_skb_reason_drop+0x129/0x1a0 [ 44.887407][ T5962] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 44.889296][ T5962] ? kernel_text_address+0x8d/0x100 [ 44.890973][ T5962] ? hlock_class+0x4e/0x130 [ 44.892200][ T5962] ? __lock_acquire+0x163e/0x3ce0 [ 44.893662][ T5962] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 44.895526][ T5962] ? hlock_class+0x4e/0x130 [ 44.896904][ T5962] ? __lock_acquire+0xbdd/0x3ce0 [ 44.898336][ T5962] ? __pfx___lock_acquire+0x10/0x10 [ 44.899769][ T5962] __netif_receive_skb_list_core+0x357/0x950 [ 44.901347][ T5962] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 44.903048][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 44.904527][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 44.906104][ T5962] ? lock_acquire+0x2f/0xb0 [ 44.907280][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 44.909258][ T5962] netif_receive_skb_list_internal+0x753/0xdb0 [ 44.910878][ T5962] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 44.912559][ T5962] ? __pfx_eth_type_trans+0x10/0x10 [ 44.914312][ T5962] ? __build_skb_around+0x278/0x3b0 [ 44.915799][ T5962] netif_receive_skb_list+0x4f/0x4a0 [ 44.917275][ T5962] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 44.919847][ T5962] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 44.922498][ T5962] ? bpf_test_timer_continue+0x150/0x3d0 [ 44.924529][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 44.926672][ T5962] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 44.929465][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 44.931794][ T5962] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 44.933482][ T5962] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 44.935013][ T5962] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 44.936391][ T5962] ? 0xffffffffa00045c0 [ 44.937552][ T5962] ? 0xffffffffa00045c0 [ 44.938600][ T5962] ? 0xffffffffa00045c0 [ 44.939673][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 44.941582][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 44.943359][ T5962] ? lock_acquire+0x2f/0xb0 [ 44.944511][ T5962] ? __fget_files+0x40/0x3f0 [ 44.945886][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 44.947617][ T5962] ? fput+0x30/0x390 [ 44.948970][ T5962] ? __bpf_prog_get+0xa0/0x290 [ 44.950624][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 44.952445][ T5962] __sys_bpf+0xfc6/0x49a0 [ 44.953824][ T5962] ? find_held_lock+0x2d/0x110 [ 44.955475][ T5962] ? __pfx___sys_bpf+0x10/0x10 [ 44.956701][ T5962] ? __might_fault+0x13b/0x190 [ 44.957911][ T5962] ? __pfx_lock_release+0x10/0x10 [ 44.959151][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 44.960519][ T5962] ? lock_acquire+0x2f/0xb0 [ 44.961669][ T5962] ? __might_fault+0xe3/0x190 [ 44.962866][ T5962] ? xfd_validate_state+0x5d/0x180 [ 44.964206][ T5962] ? rcu_is_watching+0x12/0xc0 [ 44.965421][ T5962] __x64_sys_bpf+0x78/0xc0 [ 44.966559][ T5962] ? lockdep_hardirqs_on+0x7c/0x110 [ 44.968002][ T5962] do_syscall_64+0xcd/0x250 [ 44.969246][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.971022][ T5962] RIP: 0033:0x7f1b5711ee99 [ 44.972564][ T5962] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 44.977511][ T5962] RSP: 002b:00007f1b570d9228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 44.979760][ T5962] RAX: ffffffffffffffda RBX: 00007f1b571a9328 RCX: 00007f1b5711ee99 [ 44.982357][ T5962] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 44.984870][ T5962] RBP: 00007f1b571a9320 R08: 00007f1b570d96c0 R09: 00007f1b570d96c0 [ 44.987031][ T5962] R10: 00007f1b570d96c0 R11: 0000000000000246 R12: 00007f1b57176074 [ 44.989686][ T5962] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffed9b8fc98 [ 44.992346][ T5962] [ 44.993541][ T5962] BUG: Bad page state in process syz-executor392 pfn:2f7f5 [ 44.995589][ T5962] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2f7f5 [ 44.998443][ T5962] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 45.000591][ T5962] raw: 00fff00000000000 dead000000000040 ffff888106115000 0000000000000000 [ 45.003042][ T5962] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 45.005237][ T5962] page dumped because: page_pool leak [ 45.006615][ T5962] page_owner tracks the page as allocated [ 45.008165][ T5962] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5962, tgid 5958 (syz-executor392), ts 44239094414, free_ts 44208514534 [ 45.013349][ T5962] post_alloc_hook+0x2d1/0x350 [ 45.015246][ T5962] get_page_from_freelist+0x101e/0x3070 [ 45.016916][ T5962] __alloc_pages_noprof+0x223/0x25a0 [ 45.018278][ T5962] alloc_pages_bulk_noprof+0x77c/0x1110 [ 45.019698][ T5962] __page_pool_alloc_pages_slow+0x18f/0x770 [ 45.021562][ T5962] page_pool_alloc_netmem+0xc4/0x160 [ 45.023302][ T5962] page_pool_alloc_pages+0x1a/0x60 [ 45.024662][ T5962] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 45.026521][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 45.028324][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 45.029968][ T5962] __sys_bpf+0xfc6/0x49a0 [ 45.031586][ T5962] __x64_sys_bpf+0x78/0xc0 [ 45.032949][ T5962] do_syscall_64+0xcd/0x250 [ 45.034591][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.036340][ T5962] page last free pid 5946 tgid 5946 stack trace: [ 45.038792][ T5962] free_unref_page+0x5f4/0xdc0 [ 45.040539][ T5962] __put_partials+0x14c/0x170 [ 45.042064][ T5962] qlist_free_all+0x4e/0x120 [ 45.043555][ T5962] kasan_quarantine_reduce+0x192/0x1e0 [ 45.045201][ T5962] __kasan_slab_alloc+0x69/0x90 [ 45.046712][ T5962] kmem_cache_alloc_noprof+0x121/0x2f0 [ 45.048235][ T5962] taskstats_exit+0x656/0xbe0 [ 45.049874][ T5962] do_exit+0x84a/0x2d70 [ 45.051184][ T5962] do_group_exit+0xd3/0x2a0 [ 45.052777][ T5962] __x64_sys_exit_group+0x3e/0x50 [ 45.054350][ T5962] x64_sys_call+0x14a9/0x16a0 [ 45.056118][ T5962] do_syscall_64+0xcd/0x250 [ 45.057737][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.059683][ T5962] Modules linked in: [ 45.060962][ T5962] CPU: 2 UID: 0 PID: 5962 Comm: syz-executor392 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 45.064458][ T5962] Tainted: [B]=BAD_PAGE [ 45.065496][ T5962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 45.068280][ T5962] Call Trace: [ 45.069325][ T5962] [ 45.070133][ T5962] dump_stack_lvl+0x16c/0x1f0 [ 45.071323][ T5962] bad_page+0xb3/0x1f0 [ 45.072382][ T5962] ? __pfx_bad_page+0x10/0x10 [ 45.073692][ T5962] ? page_bad_reason+0x9d/0x1e0 [ 45.074985][ T5962] free_unref_page+0x657/0xdc0 [ 45.076230][ T5962] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 45.078314][ T5962] ? __phys_addr+0xc6/0x150 [ 45.079768][ T5962] skb_free_head+0xa0/0x1d0 [ 45.081037][ T5962] skb_release_data+0x560/0x730 [ 45.082301][ T5962] sk_skb_reason_drop+0x129/0x1a0 [ 45.083717][ T5962] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 45.085446][ T5962] ? kernel_text_address+0x8d/0x100 [ 45.086956][ T5962] ? hlock_class+0x4e/0x130 [ 45.088525][ T5962] ? __lock_acquire+0x163e/0x3ce0 [ 45.090112][ T5962] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 45.092294][ T5962] ? hlock_class+0x4e/0x130 [ 45.093846][ T5962] ? __lock_acquire+0xbdd/0x3ce0 [ 45.095227][ T5962] ? __pfx___lock_acquire+0x10/0x10 [ 45.096736][ T5962] __netif_receive_skb_list_core+0x357/0x950 [ 45.098362][ T5962] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 45.100389][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 45.102126][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 45.104090][ T5962] ? lock_acquire+0x2f/0xb0 [ 45.105247][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 45.106833][ T5962] netif_receive_skb_list_internal+0x753/0xdb0 [ 45.108446][ T5962] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 45.110143][ T5962] ? __pfx_eth_type_trans+0x10/0x10 [ 45.111563][ T5962] ? __build_skb_around+0x278/0x3b0 [ 45.112927][ T5962] netif_receive_skb_list+0x4f/0x4a0 [ 45.114394][ T5962] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 45.116315][ T5962] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 45.118636][ T5962] ? bpf_test_timer_continue+0x150/0x3d0 [ 45.120341][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 45.121697][ T5962] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 45.123150][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 45.124677][ T5962] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 45.126160][ T5962] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 45.127657][ T5962] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 45.129281][ T5962] ? 0xffffffffa00045c0 [ 45.130387][ T5962] ? 0xffffffffa00045c0 [ 45.131726][ T5962] ? 0xffffffffa00045c0 [ 45.132814][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 45.134746][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 45.136167][ T5962] ? lock_acquire+0x2f/0xb0 [ 45.137329][ T5962] ? __fget_files+0x40/0x3f0 [ 45.138584][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 45.140308][ T5962] ? fput+0x30/0x390 [ 45.141341][ T5962] ? __bpf_prog_get+0xa0/0x290 [ 45.143049][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 45.145261][ T5962] __sys_bpf+0xfc6/0x49a0 [ 45.146528][ T5962] ? find_held_lock+0x2d/0x110 [ 45.148064][ T5962] ? __pfx___sys_bpf+0x10/0x10 [ 45.149544][ T5962] ? __might_fault+0x13b/0x190 [ 45.152249][ T5962] ? __pfx_lock_release+0x10/0x10 [ 45.153718][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 45.155436][ T5962] ? lock_acquire+0x2f/0xb0 [ 45.156824][ T5962] ? __might_fault+0xe3/0x190 [ 45.158114][ T5962] ? xfd_validate_state+0x5d/0x180 [ 45.159421][ T5962] ? rcu_is_watching+0x12/0xc0 [ 45.160708][ T5962] __x64_sys_bpf+0x78/0xc0 [ 45.161902][ T5962] ? lockdep_hardirqs_on+0x7c/0x110 [ 45.163891][ T5962] do_syscall_64+0xcd/0x250 [ 45.165518][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.167502][ T5962] RIP: 0033:0x7f1b5711ee99 [ 45.169150][ T5962] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 45.176292][ T5962] RSP: 002b:00007f1b570d9228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 45.178841][ T5962] RAX: ffffffffffffffda RBX: 00007f1b571a9328 RCX: 00007f1b5711ee99 [ 45.181461][ T5962] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 45.183762][ T5962] RBP: 00007f1b571a9320 R08: 00007f1b570d96c0 R09: 00007f1b570d96c0 [ 45.185835][ T5962] R10: 00007f1b570d96c0 R11: 0000000000000246 R12: 00007f1b57176074 [ 45.188351][ T5962] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffed9b8fc98 [ 45.191119][ T5962] [ 45.192331][ T5962] BUG: Bad page state in process syz-executor392 pfn:2f7f4 [ 45.194941][ T5962] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2f7f4 [ 45.197938][ T5962] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 45.200018][ T5962] raw: 00fff00000000000 dead000000000040 ffff888106115000 0000000000000000 [ 45.203212][ T5962] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 45.206223][ T5962] page dumped because: page_pool leak [ 45.208303][ T5962] page_owner tracks the page as allocated [ 45.210453][ T5962] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5962, tgid 5958 (syz-executor392), ts 44239086979, free_ts 44208514534 [ 45.216595][ T5962] post_alloc_hook+0x2d1/0x350 [ 45.218313][ T5962] get_page_from_freelist+0x101e/0x3070 [ 45.220112][ T5962] __alloc_pages_noprof+0x223/0x25a0 [ 45.222020][ T5962] alloc_pages_bulk_noprof+0x77c/0x1110 [ 45.223468][ T5962] __page_pool_alloc_pages_slow+0x18f/0x770 [ 45.225040][ T5962] page_pool_alloc_netmem+0xc4/0x160 [ 45.226686][ T5962] page_pool_alloc_pages+0x1a/0x60 [ 45.228370][ T5962] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 45.230615][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 45.232496][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 45.234514][ T5962] __sys_bpf+0xfc6/0x49a0 [ 45.236095][ T5962] __x64_sys_bpf+0x78/0xc0 [ 45.237734][ T5962] do_syscall_64+0xcd/0x250 [ 45.239188][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.241210][ T5962] page last free pid 5946 tgid 5946 stack trace: [ 45.243506][ T5962] free_unref_page+0x5f4/0xdc0 [ 45.245127][ T5962] __put_partials+0x14c/0x170 [ 45.246810][ T5962] qlist_free_all+0x4e/0x120 [ 45.248427][ T5962] kasan_quarantine_reduce+0x192/0x1e0 [ 45.250337][ T5962] __kasan_slab_alloc+0x69/0x90 [ 45.252194][ T5962] kmem_cache_alloc_noprof+0x121/0x2f0 [ 45.254105][ T5962] taskstats_exit+0x656/0xbe0 [ 45.255681][ T5962] do_exit+0x84a/0x2d70 [ 45.257104][ T5962] do_group_exit+0xd3/0x2a0 [ 45.258483][ T5962] __x64_sys_exit_group+0x3e/0x50 [ 45.259837][ T5962] x64_sys_call+0x14a9/0x16a0 [ 45.261381][ T5962] do_syscall_64+0xcd/0x250 [ 45.263066][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.265051][ T5962] Modules linked in: [ 45.266183][ T5962] CPU: 2 UID: 0 PID: 5962 Comm: syz-executor392 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 45.269583][ T5962] Tainted: [B]=BAD_PAGE [ 45.271078][ T5962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 45.274246][ T5962] Call Trace: [ 45.275251][ T5962] [ 45.276295][ T5962] dump_stack_lvl+0x16c/0x1f0 [ 45.278240][ T5962] bad_page+0xb3/0x1f0 [ 45.279729][ T5962] ? __pfx_bad_page+0x10/0x10 [ 45.281423][ T5962] ? page_bad_reason+0x9d/0x1e0 [ 45.283137][ T5962] free_unref_page+0x657/0xdc0 [ 45.285024][ T5962] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 45.287170][ T5962] ? __phys_addr+0xc6/0x150 [ 45.288486][ T5962] skb_free_head+0xa0/0x1d0 [ 45.290023][ T5962] skb_release_data+0x560/0x730 [ 45.291482][ T5962] sk_skb_reason_drop+0x129/0x1a0 [ 45.293014][ T5962] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 45.294963][ T5962] ? kernel_text_address+0x8d/0x100 [ 45.296431][ T5962] ? hlock_class+0x4e/0x130 [ 45.297737][ T5962] ? __lock_acquire+0x163e/0x3ce0 [ 45.299138][ T5962] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 45.301409][ T5962] ? hlock_class+0x4e/0x130 [ 45.302949][ T5962] ? __lock_acquire+0xbdd/0x3ce0 [ 45.304650][ T5962] ? __pfx___lock_acquire+0x10/0x10 [ 45.306599][ T5962] __netif_receive_skb_list_core+0x357/0x950 [ 45.308644][ T5962] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 45.310755][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 45.312606][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 45.314758][ T5962] ? lock_acquire+0x2f/0xb0 [ 45.316533][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 45.318657][ T5962] netif_receive_skb_list_internal+0x753/0xdb0 [ 45.320320][ T5962] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 45.322224][ T5962] ? __pfx_eth_type_trans+0x10/0x10 [ 45.323603][ T5962] ? __build_skb_around+0x278/0x3b0 [ 45.325036][ T5962] netif_receive_skb_list+0x4f/0x4a0 [ 45.326382][ T5962] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 45.327962][ T5962] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 45.329954][ T5962] ? bpf_test_timer_continue+0x150/0x3d0 [ 45.331867][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 45.333563][ T5962] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 45.335208][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 45.336670][ T5962] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 45.338114][ T5962] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 45.339647][ T5962] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 45.340960][ T5962] ? 0xffffffffa00045c0 [ 45.341997][ T5962] ? 0xffffffffa00045c0 [ 45.343062][ T5962] ? 0xffffffffa00045c0 [ 45.344124][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 45.345593][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 45.346953][ T5962] ? lock_acquire+0x2f/0xb0 [ 45.348080][ T5962] ? __fget_files+0x40/0x3f0 [ 45.349247][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 45.350750][ T5962] ? fput+0x30/0x390 [ 45.351756][ T5962] ? __bpf_prog_get+0xa0/0x290 [ 45.352945][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 45.354377][ T5962] __sys_bpf+0xfc6/0x49a0 [ 45.355882][ T5962] ? find_held_lock+0x2d/0x110 [ 45.357193][ T5962] ? __pfx___sys_bpf+0x10/0x10 [ 45.358737][ T5962] ? __might_fault+0x13b/0x190 [ 45.359972][ T5962] ? __pfx_lock_release+0x10/0x10 [ 45.361211][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 45.362547][ T5962] ? lock_acquire+0x2f/0xb0 [ 45.363689][ T5962] ? __might_fault+0xe3/0x190 [ 45.364877][ T5962] ? xfd_validate_state+0x5d/0x180 [ 45.366178][ T5962] ? rcu_is_watching+0x12/0xc0 [ 45.367460][ T5962] __x64_sys_bpf+0x78/0xc0 [ 45.368652][ T5962] ? lockdep_hardirqs_on+0x7c/0x110 [ 45.370144][ T5962] do_syscall_64+0xcd/0x250 [ 45.371436][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.373190][ T5962] RIP: 0033:0x7f1b5711ee99 [ 45.374454][ T5962] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 45.379561][ T5962] RSP: 002b:00007f1b570d9228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 45.381698][ T5962] RAX: ffffffffffffffda RBX: 00007f1b571a9328 RCX: 00007f1b5711ee99 [ 45.383804][ T5962] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 45.385818][ T5962] RBP: 00007f1b571a9320 R08: 00007f1b570d96c0 R09: 00007f1b570d96c0 [ 45.387782][ T5962] R10: 00007f1b570d96c0 R11: 0000000000000246 R12: 00007f1b57176074 [ 45.389785][ T5962] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffed9b8fc98 [ 45.391802][ T5962] [ 45.392699][ T5962] BUG: Bad page state in process syz-executor392 pfn:2f7f3 [ 45.394538][ T5962] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2f7f3 [ 45.396736][ T5962] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 45.398803][ T5962] raw: 00fff00000000000 dead000000000040 ffff888106115000 0000000000000000 [ 45.401050][ T5962] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 45.403416][ T5962] page dumped because: page_pool leak [ 45.404803][ T5962] page_owner tracks the page as allocated [ 45.406352][ T5962] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5962, tgid 5958 (syz-executor392), ts 44239079487, free_ts 44208514534 [ 45.412114][ T5962] post_alloc_hook+0x2d1/0x350 [ 45.413576][ T5962] get_page_from_freelist+0x101e/0x3070 [ 45.415832][ T5962] __alloc_pages_noprof+0x223/0x25a0 [ 45.417217][ T5962] alloc_pages_bulk_noprof+0x77c/0x1110 [ 45.418968][ T5962] __page_pool_alloc_pages_slow+0x18f/0x770 [ 45.420580][ T5962] page_pool_alloc_netmem+0xc4/0x160 [ 45.422262][ T5962] page_pool_alloc_pages+0x1a/0x60 [ 45.423948][ T5962] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 45.425534][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 45.426848][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 45.428483][ T5962] __sys_bpf+0xfc6/0x49a0 [ 45.429707][ T5962] __x64_sys_bpf+0x78/0xc0 [ 45.431148][ T5962] do_syscall_64+0xcd/0x250 [ 45.432715][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.434464][ T5962] page last free pid 5946 tgid 5946 stack trace: [ 45.436562][ T5962] free_unref_page+0x5f4/0xdc0 [ 45.437819][ T5962] __put_partials+0x14c/0x170 [ 45.439060][ T5962] qlist_free_all+0x4e/0x120 [ 45.440254][ T5962] kasan_quarantine_reduce+0x192/0x1e0 [ 45.441662][ T5962] __kasan_slab_alloc+0x69/0x90 [ 45.443272][ T5962] kmem_cache_alloc_noprof+0x121/0x2f0 [ 45.445004][ T5962] taskstats_exit+0x656/0xbe0 [ 45.446826][ T5962] do_exit+0x84a/0x2d70 [ 45.448064][ T5962] do_group_exit+0xd3/0x2a0 [ 45.449401][ T5962] __x64_sys_exit_group+0x3e/0x50 [ 45.451057][ T5962] x64_sys_call+0x14a9/0x16a0 [ 45.452498][ T5962] do_syscall_64+0xcd/0x250 [ 45.453851][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.455536][ T5962] Modules linked in: [ 45.456623][ T5962] CPU: 2 UID: 0 PID: 5962 Comm: syz-executor392 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 45.460364][ T5962] Tainted: [B]=BAD_PAGE [ 45.461515][ T5962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 45.464250][ T5962] Call Trace: [ 45.465087][ T5962] [ 45.465821][ T5962] dump_stack_lvl+0x16c/0x1f0 [ 45.467012][ T5962] bad_page+0xb3/0x1f0 [ 45.468066][ T5962] ? __pfx_bad_page+0x10/0x10 [ 45.469265][ T5962] ? page_bad_reason+0x9d/0x1e0 [ 45.470989][ T5962] free_unref_page+0x657/0xdc0 [ 45.472322][ T5962] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 45.473851][ T5962] ? __phys_addr+0xc6/0x150 [ 45.475183][ T5962] skb_free_head+0xa0/0x1d0 [ 45.476392][ T5962] skb_release_data+0x560/0x730 [ 45.477876][ T5962] sk_skb_reason_drop+0x129/0x1a0 [ 45.479153][ T5962] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 45.480825][ T5962] ? kernel_text_address+0x8d/0x100 [ 45.482191][ T5962] ? hlock_class+0x4e/0x130 [ 45.483400][ T5962] ? __lock_acquire+0x163e/0x3ce0 [ 45.484738][ T5962] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 45.486495][ T5962] ? hlock_class+0x4e/0x130 [ 45.487761][ T5962] ? __lock_acquire+0xbdd/0x3ce0 [ 45.489438][ T5962] ? __pfx___lock_acquire+0x10/0x10 [ 45.490895][ T5962] __netif_receive_skb_list_core+0x357/0x950 [ 45.492692][ T5962] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 45.494536][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 45.495984][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 45.497630][ T5962] ? lock_acquire+0x2f/0xb0 [ 45.498793][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 45.500639][ T5962] netif_receive_skb_list_internal+0x753/0xdb0 [ 45.502469][ T5962] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 45.504233][ T5962] ? __pfx_eth_type_trans+0x10/0x10 [ 45.505535][ T5962] ? __build_skb_around+0x278/0x3b0 [ 45.506898][ T5962] netif_receive_skb_list+0x4f/0x4a0 [ 45.508296][ T5962] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 45.509940][ T5962] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 45.512042][ T5962] ? bpf_test_timer_continue+0x150/0x3d0 [ 45.513753][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 45.515342][ T5962] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 45.517104][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 45.518658][ T5962] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 45.520219][ T5962] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 45.521835][ T5962] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 45.523223][ T5962] ? 0xffffffffa00045c0 [ 45.524347][ T5962] ? 0xffffffffa00045c0 [ 45.525445][ T5962] ? 0xffffffffa00045c0 [ 45.526535][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 45.528205][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 45.529621][ T5962] ? lock_acquire+0x2f/0xb0 [ 45.530828][ T5962] ? __fget_files+0x40/0x3f0 [ 45.532050][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 45.533820][ T5962] ? fput+0x30/0x390 [ 45.535040][ T5962] ? __bpf_prog_get+0xa0/0x290 [ 45.537087][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 45.538739][ T5962] __sys_bpf+0xfc6/0x49a0 [ 45.539915][ T5962] ? find_held_lock+0x2d/0x110 [ 45.541259][ T5962] ? __pfx___sys_bpf+0x10/0x10 [ 45.542690][ T5962] ? __might_fault+0x13b/0x190 [ 45.544037][ T5962] ? __pfx_lock_release+0x10/0x10 [ 45.545521][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 45.547096][ T5962] ? lock_acquire+0x2f/0xb0 [ 45.548466][ T5962] ? __might_fault+0xe3/0x190 [ 45.550012][ T5962] ? xfd_validate_state+0x5d/0x180 [ 45.551511][ T5962] ? rcu_is_watching+0x12/0xc0 [ 45.552878][ T5962] __x64_sys_bpf+0x78/0xc0 [ 45.554051][ T5962] ? lockdep_hardirqs_on+0x7c/0x110 [ 45.555414][ T5962] do_syscall_64+0xcd/0x250 [ 45.556627][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.558161][ T5962] RIP: 0033:0x7f1b5711ee99 [ 45.559335][ T5962] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 45.564441][ T5962] RSP: 002b:00007f1b570d9228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 45.566682][ T5962] RAX: ffffffffffffffda RBX: 00007f1b571a9328 RCX: 00007f1b5711ee99 [ 45.568912][ T5962] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 45.571138][ T5962] RBP: 00007f1b571a9320 R08: 00007f1b570d96c0 R09: 00007f1b570d96c0 [ 45.573347][ T5962] R10: 00007f1b570d96c0 R11: 0000000000000246 R12: 00007f1b57176074 [ 45.575617][ T5962] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffed9b8fc98 [ 45.577612][ T5962] [ 45.578490][ T5962] BUG: Bad page state in process syz-executor392 pfn:2f7f2 [ 45.580426][ T5962] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2f7f2 [ 45.582905][ T5962] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 45.584839][ T5962] raw: 00fff00000000000 dead000000000040 ffff888106115000 0000000000000000 [ 45.587370][ T5962] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 45.589790][ T5962] page dumped because: page_pool leak [ 45.591340][ T5962] page_owner tracks the page as allocated [ 45.593022][ T5962] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5962, tgid 5958 (syz-executor392), ts 44239071661, free_ts 44208514534 [ 45.597408][ T5962] post_alloc_hook+0x2d1/0x350 [ 45.598873][ T5962] get_page_from_freelist+0x101e/0x3070 [ 45.600287][ T5962] __alloc_pages_noprof+0x223/0x25a0 [ 45.601601][ T5962] alloc_pages_bulk_noprof+0x77c/0x1110 [ 45.603032][ T5962] __page_pool_alloc_pages_slow+0x18f/0x770 [ 45.604537][ T5962] page_pool_alloc_netmem+0xc4/0x160 [ 45.605883][ T5962] page_pool_alloc_pages+0x1a/0x60 [ 45.607148][ T5962] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 45.608832][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 45.610177][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 45.611557][ T5962] __sys_bpf+0xfc6/0x49a0 [ 45.612861][ T5962] __x64_sys_bpf+0x78/0xc0 [ 45.614261][ T5962] do_syscall_64+0xcd/0x250 [ 45.615470][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.617069][ T5962] page last free pid 5946 tgid 5946 stack trace: [ 45.618698][ T5962] free_unref_page+0x5f4/0xdc0 [ 45.620077][ T5962] __put_partials+0x14c/0x170 [ 45.621289][ T5962] qlist_free_all+0x4e/0x120 [ 45.622569][ T5962] kasan_quarantine_reduce+0x192/0x1e0 [ 45.624019][ T5962] __kasan_slab_alloc+0x69/0x90 [ 45.625317][ T5962] kmem_cache_alloc_noprof+0x121/0x2f0 [ 45.626754][ T5962] taskstats_exit+0x656/0xbe0 [ 45.628147][ T5962] do_exit+0x84a/0x2d70 [ 45.629397][ T5962] do_group_exit+0xd3/0x2a0 [ 45.630945][ T5962] __x64_sys_exit_group+0x3e/0x50 [ 45.632510][ T5962] x64_sys_call+0x14a9/0x16a0 [ 45.633855][ T5962] do_syscall_64+0xcd/0x250 [ 45.635208][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.636864][ T5962] Modules linked in: [ 45.637866][ T5962] CPU: 2 UID: 0 PID: 5962 Comm: syz-executor392 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 45.641155][ T5962] Tainted: [B]=BAD_PAGE [ 45.642401][ T5962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 45.645243][ T5962] Call Trace: [ 45.646144][ T5962] [ 45.646929][ T5962] dump_stack_lvl+0x16c/0x1f0 [ 45.648196][ T5962] bad_page+0xb3/0x1f0 [ 45.649230][ T5962] ? __pfx_bad_page+0x10/0x10 [ 45.650458][ T5962] ? page_bad_reason+0x9d/0x1e0 [ 45.651824][ T5962] free_unref_page+0x657/0xdc0 [ 45.653032][ T5962] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 45.654617][ T5962] ? __phys_addr+0xc6/0x150 [ 45.655799][ T5962] skb_free_head+0xa0/0x1d0 [ 45.657162][ T5962] skb_release_data+0x560/0x730 [ 45.658446][ T5962] sk_skb_reason_drop+0x129/0x1a0 [ 45.659823][ T5962] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 45.661759][ T5962] ? kernel_text_address+0x8d/0x100 [ 45.663277][ T5962] ? hlock_class+0x4e/0x130 [ 45.664854][ T5962] ? __lock_acquire+0x163e/0x3ce0 [ 45.666276][ T5962] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 45.668179][ T5962] ? hlock_class+0x4e/0x130 [ 45.669710][ T5962] ? __lock_acquire+0xbdd/0x3ce0 [ 45.671054][ T5962] ? __pfx___lock_acquire+0x10/0x10 [ 45.672436][ T5962] __netif_receive_skb_list_core+0x357/0x950 [ 45.673982][ T5962] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 45.675680][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 45.677004][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 45.678625][ T5962] ? lock_acquire+0x2f/0xb0 [ 45.679824][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 45.681439][ T5962] netif_receive_skb_list_internal+0x753/0xdb0 [ 45.683018][ T5962] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 45.684742][ T5962] ? __pfx_eth_type_trans+0x10/0x10 [ 45.686209][ T5962] ? __build_skb_around+0x278/0x3b0 [ 45.687605][ T5962] netif_receive_skb_list+0x4f/0x4a0 [ 45.689004][ T5962] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 45.690626][ T5962] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 45.692360][ T5962] ? bpf_test_timer_continue+0x150/0x3d0 [ 45.693773][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 45.695135][ T5962] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 45.696644][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 45.698174][ T5962] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 45.699748][ T5962] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 45.701231][ T5962] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 45.702678][ T5962] ? 0xffffffffa00045c0 [ 45.703810][ T5962] ? 0xffffffffa00045c0 [ 45.704935][ T5962] ? 0xffffffffa00045c0 [ 45.706084][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 45.707787][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 45.709437][ T5962] ? lock_acquire+0x2f/0xb0 [ 45.710874][ T5962] ? __fget_files+0x40/0x3f0 [ 45.712164][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 45.714193][ T5962] ? fput+0x30/0x390 [ 45.715591][ T5962] ? __bpf_prog_get+0xa0/0x290 [ 45.717052][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 45.718618][ T5962] __sys_bpf+0xfc6/0x49a0 [ 45.719818][ T5962] ? find_held_lock+0x2d/0x110 [ 45.721034][ T5962] ? __pfx___sys_bpf+0x10/0x10 [ 45.722260][ T5962] ? __might_fault+0x13b/0x190 [ 45.723504][ T5962] ? __pfx_lock_release+0x10/0x10 [ 45.724891][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 45.726307][ T5962] ? lock_acquire+0x2f/0xb0 [ 45.727552][ T5962] ? __might_fault+0xe3/0x190 [ 45.728938][ T5962] ? xfd_validate_state+0x5d/0x180 [ 45.731164][ T5962] ? rcu_is_watching+0x12/0xc0 [ 45.732456][ T5962] __x64_sys_bpf+0x78/0xc0 [ 45.734640][ T5962] ? lockdep_hardirqs_on+0x7c/0x110 [ 45.736178][ T5962] do_syscall_64+0xcd/0x250 [ 45.737403][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.739033][ T5962] RIP: 0033:0x7f1b5711ee99 [ 45.740249][ T5962] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 45.745347][ T5962] RSP: 002b:00007f1b570d9228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 45.747565][ T5962] RAX: ffffffffffffffda RBX: 00007f1b571a9328 RCX: 00007f1b5711ee99 [ 45.749507][ T5962] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 45.751578][ T5962] RBP: 00007f1b571a9320 R08: 00007f1b570d96c0 R09: 00007f1b570d96c0 [ 45.753728][ T5962] R10: 00007f1b570d96c0 R11: 0000000000000246 R12: 00007f1b57176074 [ 45.755855][ T5962] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffed9b8fc98 [ 45.758027][ T5962] [ 45.758982][ T5962] BUG: Bad page state in process syz-executor392 pfn:24e75 [ 45.761114][ T5962] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x24e75 [ 45.763647][ T5962] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 45.765629][ T5962] raw: 00fff00000000000 dead000000000040 ffff888106115000 0000000000000000 [ 45.767882][ T5962] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 45.769999][ T5962] page dumped because: page_pool leak [ 45.771342][ T5962] page_owner tracks the page as allocated [ 45.773111][ T5962] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5962, tgid 5958 (syz-executor392), ts 44239030055, free_ts 43994828258 [ 45.777916][ T5962] post_alloc_hook+0x2d1/0x350 [ 45.779380][ T5962] get_page_from_freelist+0x101e/0x3070 [ 45.781126][ T5962] __alloc_pages_noprof+0x223/0x25a0 [ 45.782614][ T5962] alloc_pages_bulk_noprof+0x77c/0x1110 [ 45.784123][ T5962] __page_pool_alloc_pages_slow+0x18f/0x770 [ 45.785978][ T5962] page_pool_alloc_netmem+0xc4/0x160 [ 45.787727][ T5962] page_pool_alloc_pages+0x1a/0x60 [ 45.789462][ T5962] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 45.791210][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 45.792941][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 45.794655][ T5962] __sys_bpf+0xfc6/0x49a0 [ 45.796216][ T5962] __x64_sys_bpf+0x78/0xc0 [ 45.797409][ T5962] do_syscall_64+0xcd/0x250 [ 45.798854][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.800390][ T5962] page last free pid 5941 tgid 5941 stack trace: [ 45.802049][ T5962] free_unref_page+0x5f4/0xdc0 [ 45.803342][ T5962] __put_partials+0x14c/0x170 [ 45.804927][ T5962] qlist_free_all+0x4e/0x120 [ 45.806447][ T5962] kasan_quarantine_reduce+0x192/0x1e0 [ 45.808294][ T5962] __kasan_slab_alloc+0x69/0x90 [ 45.809951][ T5962] kmem_cache_alloc_noprof+0x121/0x2f0 [ 45.811779][ T5962] getname_flags.part.0+0x4c/0x550 [ 45.813180][ T5962] getname+0x8d/0xe0 [ 45.814159][ T5962] do_sys_openat2+0x104/0x1e0 [ 45.815358][ T5962] __x64_sys_openat+0x175/0x210 [ 45.817109][ T5962] do_syscall_64+0xcd/0x250 [ 45.818572][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.820213][ T5962] Modules linked in: [ 45.821324][ T5962] CPU: 2 UID: 0 PID: 5962 Comm: syz-executor392 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 45.825166][ T5962] Tainted: [B]=BAD_PAGE [ 45.826488][ T5962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 45.830103][ T5962] Call Trace: [ 45.831442][ T5962] [ 45.832793][ T5962] dump_stack_lvl+0x16c/0x1f0 [ 45.834406][ T5962] bad_page+0xb3/0x1f0 [ 45.836076][ T5962] ? __pfx_bad_page+0x10/0x10 [ 45.837476][ T5962] ? page_bad_reason+0x9d/0x1e0 [ 45.839026][ T5962] free_unref_page+0x657/0xdc0 [ 45.840425][ T5962] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 45.841989][ T5962] ? __phys_addr+0xc6/0x150 [ 45.843166][ T5962] skb_free_head+0xa0/0x1d0 [ 45.844394][ T5962] skb_release_data+0x560/0x730 [ 45.845695][ T5962] sk_skb_reason_drop+0x129/0x1a0 [ 45.847039][ T5962] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 45.848898][ T5962] ? kernel_text_address+0x8d/0x100 [ 45.850523][ T5962] ? hlock_class+0x4e/0x130 [ 45.851855][ T5962] ? __lock_acquire+0x163e/0x3ce0 [ 45.853266][ T5962] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 45.855332][ T5962] ? hlock_class+0x4e/0x130 [ 45.857014][ T5962] ? __lock_acquire+0xbdd/0x3ce0 [ 45.858840][ T5962] ? __pfx___lock_acquire+0x10/0x10 [ 45.861131][ T5962] __netif_receive_skb_list_core+0x357/0x950 [ 45.863357][ T5962] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 45.865900][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 45.867899][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 45.870284][ T5962] ? lock_acquire+0x2f/0xb0 [ 45.872150][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 45.874361][ T5962] netif_receive_skb_list_internal+0x753/0xdb0 [ 45.876442][ T5962] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 45.878789][ T5962] ? __pfx_eth_type_trans+0x10/0x10 [ 45.880525][ T5962] ? __build_skb_around+0x278/0x3b0 [ 45.881968][ T5962] netif_receive_skb_list+0x4f/0x4a0 [ 45.883391][ T5962] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 45.885149][ T5962] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 45.886989][ T5962] ? bpf_test_timer_continue+0x150/0x3d0 [ 45.888811][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 45.890469][ T5962] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 45.892361][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 45.894024][ T5962] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 45.895643][ T5962] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 45.897279][ T5962] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 45.898672][ T5962] ? 0xffffffffa00045c0 [ 45.899959][ T5962] ? 0xffffffffa00045c0 [ 45.901154][ T5962] ? 0xffffffffa00045c0 [ 45.902295][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 45.903884][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 45.905247][ T5962] ? lock_acquire+0x2f/0xb0 [ 45.906428][ T5962] ? __fget_files+0x40/0x3f0 [ 45.907730][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 45.909698][ T5962] ? fput+0x30/0x390 [ 45.910759][ T5962] ? __bpf_prog_get+0xa0/0x290 [ 45.911984][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 45.913435][ T5962] __sys_bpf+0xfc6/0x49a0 [ 45.914740][ T5962] ? find_held_lock+0x2d/0x110 [ 45.916228][ T5962] ? __pfx___sys_bpf+0x10/0x10 [ 45.918052][ T5962] ? __might_fault+0x13b/0x190 [ 45.919646][ T5962] ? __pfx_lock_release+0x10/0x10 [ 45.921609][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 45.923482][ T5962] ? lock_acquire+0x2f/0xb0 [ 45.925167][ T5962] ? __might_fault+0xe3/0x190 [ 45.926605][ T5962] ? xfd_validate_state+0x5d/0x180 [ 45.928540][ T5962] ? rcu_is_watching+0x12/0xc0 [ 45.929751][ T5962] __x64_sys_bpf+0x78/0xc0 [ 45.930994][ T5962] ? lockdep_hardirqs_on+0x7c/0x110 [ 45.932379][ T5962] do_syscall_64+0xcd/0x250 [ 45.933584][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.935127][ T5962] RIP: 0033:0x7f1b5711ee99 [ 45.936327][ T5962] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 45.941298][ T5962] RSP: 002b:00007f1b570d9228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 45.944331][ T5962] RAX: ffffffffffffffda RBX: 00007f1b571a9328 RCX: 00007f1b5711ee99 [ 45.946344][ T5962] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 45.948961][ T5962] RBP: 00007f1b571a9320 R08: 00007f1b570d96c0 R09: 00007f1b570d96c0 [ 45.952135][ T5962] R10: 00007f1b570d96c0 R11: 0000000000000246 R12: 00007f1b57176074 [ 45.954946][ T5962] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffed9b8fc98 [ 45.957967][ T5962] [ 45.959096][ T5962] BUG: Bad page state in process syz-executor392 pfn:24e74 [ 45.961742][ T5962] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x24e74 [ 45.964890][ T5962] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 45.966950][ T5962] raw: 00fff00000000000 dead000000000040 ffff888106115000 0000000000000000 [ 45.970072][ T5962] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 45.972937][ T5962] page dumped because: page_pool leak [ 45.974331][ T5962] page_owner tracks the page as allocated [ 45.975778][ T5962] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5962, tgid 5958 (syz-executor392), ts 44239022840, free_ts 43994828258 [ 45.980697][ T5962] post_alloc_hook+0x2d1/0x350 [ 45.982361][ T5962] get_page_from_freelist+0x101e/0x3070 [ 45.984166][ T5962] __alloc_pages_noprof+0x223/0x25a0 [ 45.985671][ T5962] alloc_pages_bulk_noprof+0x77c/0x1110 [ 45.987088][ T5962] __page_pool_alloc_pages_slow+0x18f/0x770 [ 45.988909][ T5962] page_pool_alloc_netmem+0xc4/0x160 [ 45.990228][ T5962] page_pool_alloc_pages+0x1a/0x60 [ 45.991901][ T5962] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 45.993695][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 45.995044][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 45.996416][ T5962] __sys_bpf+0xfc6/0x49a0 [ 45.997814][ T5962] __x64_sys_bpf+0x78/0xc0 [ 45.999716][ T5962] do_syscall_64+0xcd/0x250 [ 46.001537][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.003870][ T5962] page last free pid 5941 tgid 5941 stack trace: [ 46.005966][ T5962] free_unref_page+0x5f4/0xdc0 [ 46.007591][ T5962] __put_partials+0x14c/0x170 [ 46.009160][ T5962] qlist_free_all+0x4e/0x120 [ 46.010680][ T5962] kasan_quarantine_reduce+0x192/0x1e0 [ 46.012484][ T5962] __kasan_slab_alloc+0x69/0x90 [ 46.013899][ T5962] kmem_cache_alloc_noprof+0x121/0x2f0 [ 46.015484][ T5962] getname_flags.part.0+0x4c/0x550 [ 46.017078][ T5962] getname+0x8d/0xe0 [ 46.018484][ T5962] do_sys_openat2+0x104/0x1e0 [ 46.020035][ T5962] __x64_sys_openat+0x175/0x210 [ 46.021653][ T5962] do_syscall_64+0xcd/0x250 [ 46.023239][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.024833][ T5962] Modules linked in: [ 46.025868][ T5962] CPU: 2 UID: 0 PID: 5962 Comm: syz-executor392 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 46.029748][ T5962] Tainted: [B]=BAD_PAGE [ 46.030959][ T5962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 46.034904][ T5962] Call Trace: [ 46.036005][ T5962] [ 46.036813][ T5962] dump_stack_lvl+0x16c/0x1f0 [ 46.038167][ T5962] bad_page+0xb3/0x1f0 [ 46.039262][ T5962] ? __pfx_bad_page+0x10/0x10 [ 46.040526][ T5962] ? page_bad_reason+0x9d/0x1e0 [ 46.041740][ T5962] free_unref_page+0x657/0xdc0 [ 46.042968][ T5962] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 46.044789][ T5962] ? __phys_addr+0xc6/0x150 [ 46.046295][ T5962] skb_free_head+0xa0/0x1d0 [ 46.047862][ T5962] skb_release_data+0x560/0x730 [ 46.049742][ T5962] sk_skb_reason_drop+0x129/0x1a0 [ 46.052029][ T5962] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 46.054568][ T5962] ? kernel_text_address+0x8d/0x100 [ 46.055995][ T5962] ? hlock_class+0x4e/0x130 [ 46.057181][ T5962] ? __lock_acquire+0x163e/0x3ce0 [ 46.058485][ T5962] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 46.060313][ T5962] ? hlock_class+0x4e/0x130 [ 46.061451][ T5962] ? __lock_acquire+0xbdd/0x3ce0 [ 46.062694][ T5962] ? __pfx___lock_acquire+0x10/0x10 [ 46.064196][ T5962] __netif_receive_skb_list_core+0x357/0x950 [ 46.065973][ T5962] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 46.068453][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 46.070330][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 46.073088][ T5962] ? lock_acquire+0x2f/0xb0 [ 46.074608][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 46.077252][ T5962] netif_receive_skb_list_internal+0x753/0xdb0 [ 46.079138][ T5962] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 46.081044][ T5962] ? __pfx_eth_type_trans+0x10/0x10 [ 46.082932][ T5962] ? __build_skb_around+0x278/0x3b0 [ 46.084451][ T5962] netif_receive_skb_list+0x4f/0x4a0 [ 46.085795][ T5962] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 46.087386][ T5962] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 46.089118][ T5962] ? bpf_test_timer_continue+0x150/0x3d0 [ 46.090947][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 46.093126][ T5962] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 46.094616][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 46.096130][ T5962] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 46.097628][ T5962] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 46.099183][ T5962] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 46.100602][ T5962] ? 0xffffffffa00045c0 [ 46.101887][ T5962] ? 0xffffffffa00045c0 [ 46.103124][ T5962] ? 0xffffffffa00045c0 [ 46.104266][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 46.105772][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 46.107171][ T5962] ? lock_acquire+0x2f/0xb0 [ 46.108378][ T5962] ? __fget_files+0x40/0x3f0 [ 46.109655][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 46.111670][ T5962] ? fput+0x30/0x390 [ 46.112848][ T5962] ? __bpf_prog_get+0xa0/0x290 [ 46.114088][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 46.115630][ T5962] __sys_bpf+0xfc6/0x49a0 [ 46.116744][ T5962] ? find_held_lock+0x2d/0x110 [ 46.118006][ T5962] ? __pfx___sys_bpf+0x10/0x10 [ 46.119550][ T5962] ? __might_fault+0x13b/0x190 [ 46.121249][ T5962] ? __pfx_lock_release+0x10/0x10 [ 46.122912][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 46.124695][ T5962] ? lock_acquire+0x2f/0xb0 [ 46.126022][ T5962] ? __might_fault+0xe3/0x190 [ 46.127563][ T5962] ? xfd_validate_state+0x5d/0x180 [ 46.129340][ T5962] ? rcu_is_watching+0x12/0xc0 [ 46.130686][ T5962] __x64_sys_bpf+0x78/0xc0 [ 46.132194][ T5962] ? lockdep_hardirqs_on+0x7c/0x110 [ 46.134421][ T5962] do_syscall_64+0xcd/0x250 [ 46.135878][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.137993][ T5962] RIP: 0033:0x7f1b5711ee99 [ 46.139642][ T5962] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 46.146320][ T5962] RSP: 002b:00007f1b570d9228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 46.148704][ T5962] RAX: ffffffffffffffda RBX: 00007f1b571a9328 RCX: 00007f1b5711ee99 [ 46.151446][ T5962] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 46.153555][ T5962] RBP: 00007f1b571a9320 R08: 00007f1b570d96c0 R09: 00007f1b570d96c0 [ 46.155699][ T5962] R10: 00007f1b570d96c0 R11: 0000000000000246 R12: 00007f1b57176074 [ 46.157783][ T5962] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffed9b8fc98 [ 46.159888][ T5962] [ 46.160987][ T5962] BUG: Bad page state in process syz-executor392 pfn:2cd6d [ 46.163361][ T5962] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2cd6d [ 46.166282][ T5962] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 46.168812][ T5962] raw: 00fff00000000000 dead000000000040 ffff888106115000 0000000000000000 [ 46.171882][ T5962] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 46.175015][ T5962] page dumped because: page_pool leak [ 46.176992][ T5962] page_owner tracks the page as allocated [ 46.178807][ T5962] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5962, tgid 5958 (syz-executor392), ts 44239015315, free_ts 44032491521 [ 46.183533][ T5962] post_alloc_hook+0x2d1/0x350 [ 46.184819][ T5962] get_page_from_freelist+0x101e/0x3070 [ 46.186243][ T5962] __alloc_pages_noprof+0x223/0x25a0 [ 46.187708][ T5962] alloc_pages_bulk_noprof+0x77c/0x1110 [ 46.189418][ T5962] __page_pool_alloc_pages_slow+0x18f/0x770 [ 46.191359][ T5962] page_pool_alloc_netmem+0xc4/0x160 [ 46.193110][ T5962] page_pool_alloc_pages+0x1a/0x60 [ 46.194516][ T5962] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 46.196652][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 46.198787][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 46.200701][ T5962] __sys_bpf+0xfc6/0x49a0 [ 46.202127][ T5962] __x64_sys_bpf+0x78/0xc0 [ 46.203302][ T5962] do_syscall_64+0xcd/0x250 [ 46.204674][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.206236][ T5962] page last free pid 24 tgid 24 stack trace: [ 46.207846][ T5962] free_unref_page+0x5f4/0xdc0 [ 46.209133][ T5962] __folio_put+0x30d/0x3d0 [ 46.210322][ T5962] free_page_and_swap_cache+0x249/0x2c0 [ 46.212254][ T5962] tlb_remove_table_rcu+0x89/0xe0 [ 46.213629][ T5962] rcu_core+0x79d/0x14d0 [ 46.214801][ T5962] handle_softirqs+0x213/0x8f0 [ 46.216109][ T5962] run_ksoftirqd+0x3a/0x60 [ 46.217278][ T5962] smpboot_thread_fn+0x661/0xa30 [ 46.218666][ T5962] kthread+0x2c1/0x3a0 [ 46.219768][ T5962] ret_from_fork+0x45/0x80 [ 46.220946][ T5962] ret_from_fork_asm+0x1a/0x30 [ 46.222233][ T5962] Modules linked in: [ 46.223224][ T5962] CPU: 2 UID: 0 PID: 5962 Comm: syz-executor392 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 46.226341][ T5962] Tainted: [B]=BAD_PAGE [ 46.227506][ T5962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 46.230814][ T5962] Call Trace: [ 46.231702][ T5962] [ 46.232589][ T5962] dump_stack_lvl+0x16c/0x1f0 [ 46.234217][ T5962] bad_page+0xb3/0x1f0 [ 46.235415][ T5962] ? __pfx_bad_page+0x10/0x10 [ 46.236845][ T5962] ? page_bad_reason+0x9d/0x1e0 [ 46.238440][ T5962] free_unref_page+0x657/0xdc0 [ 46.239868][ T5962] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 46.241433][ T5962] ? __phys_addr+0xc6/0x150 [ 46.242645][ T5962] skb_free_head+0xa0/0x1d0 [ 46.244007][ T5962] skb_release_data+0x560/0x730 [ 46.245364][ T5962] sk_skb_reason_drop+0x129/0x1a0 [ 46.246708][ T5962] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 46.249024][ T5962] ? kernel_text_address+0x8d/0x100 [ 46.250540][ T5962] ? hlock_class+0x4e/0x130 [ 46.251768][ T5962] ? __lock_acquire+0x163e/0x3ce0 [ 46.253553][ T5962] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 46.255763][ T5962] ? hlock_class+0x4e/0x130 [ 46.256968][ T5962] ? __lock_acquire+0xbdd/0x3ce0 [ 46.258259][ T5962] ? __pfx___lock_acquire+0x10/0x10 [ 46.259675][ T5962] __netif_receive_skb_list_core+0x357/0x950 [ 46.261353][ T5962] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 46.262968][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 46.264327][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 46.265954][ T5962] ? lock_acquire+0x2f/0xb0 [ 46.267119][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 46.268803][ T5962] netif_receive_skb_list_internal+0x753/0xdb0 [ 46.270769][ T5962] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 46.272880][ T5962] ? __pfx_eth_type_trans+0x10/0x10 [ 46.275082][ T5962] ? __build_skb_around+0x278/0x3b0 [ 46.277334][ T5962] netif_receive_skb_list+0x4f/0x4a0 [ 46.279350][ T5962] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 46.281054][ T5962] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 46.282734][ T5962] ? bpf_test_timer_continue+0x150/0x3d0 [ 46.284169][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 46.285544][ T5962] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 46.287005][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 46.288551][ T5962] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 46.290221][ T5962] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 46.291795][ T5962] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 46.293179][ T5962] ? 0xffffffffa00045c0 [ 46.294242][ T5962] ? 0xffffffffa00045c0 [ 46.295313][ T5962] ? 0xffffffffa00045c0 [ 46.296426][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 46.297962][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 46.299348][ T5962] ? lock_acquire+0x2f/0xb0 [ 46.300600][ T5962] ? __fget_files+0x40/0x3f0 [ 46.301739][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 46.303283][ T5962] ? fput+0x30/0x390 [ 46.304321][ T5962] ? __bpf_prog_get+0xa0/0x290 [ 46.305614][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 46.307238][ T5962] __sys_bpf+0xfc6/0x49a0 [ 46.308442][ T5962] ? find_held_lock+0x2d/0x110 [ 46.309842][ T5962] ? __pfx___sys_bpf+0x10/0x10 [ 46.311350][ T5962] ? __might_fault+0x13b/0x190 [ 46.313022][ T5962] ? __pfx_lock_release+0x10/0x10 [ 46.314422][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 46.315949][ T5962] ? lock_acquire+0x2f/0xb0 [ 46.317264][ T5962] ? __might_fault+0xe3/0x190 [ 46.318585][ T5962] ? xfd_validate_state+0x5d/0x180 [ 46.320044][ T5962] ? rcu_is_watching+0x12/0xc0 [ 46.321367][ T5962] __x64_sys_bpf+0x78/0xc0 [ 46.322707][ T5962] ? lockdep_hardirqs_on+0x7c/0x110 [ 46.324097][ T5962] do_syscall_64+0xcd/0x250 [ 46.325273][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.326800][ T5962] RIP: 0033:0x7f1b5711ee99 [ 46.328053][ T5962] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 46.334122][ T5962] RSP: 002b:00007f1b570d9228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 46.336256][ T5962] RAX: ffffffffffffffda RBX: 00007f1b571a9328 RCX: 00007f1b5711ee99 [ 46.338255][ T5962] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 46.340258][ T5962] RBP: 00007f1b571a9320 R08: 00007f1b570d96c0 R09: 00007f1b570d96c0 [ 46.342201][ T5962] R10: 00007f1b570d96c0 R11: 0000000000000246 R12: 00007f1b57176074 [ 46.344171][ T5962] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffed9b8fc98 [ 46.346373][ T5962] [ 46.347436][ T5962] BUG: Bad page state in process syz-executor392 pfn:2482c [ 46.349398][ T5962] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2482c [ 46.351683][ T5962] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 46.353635][ T5962] raw: 00fff00000000000 dead000000000040 ffff888106115000 0000000000000000 [ 46.355865][ T5962] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 46.358507][ T5962] page dumped because: page_pool leak [ 46.359927][ T5962] page_owner tracks the page as allocated [ 46.361348][ T5962] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5962, tgid 5958 (syz-executor392), ts 44239008067, free_ts 44032497278 [ 46.366085][ T5962] post_alloc_hook+0x2d1/0x350 [ 46.367786][ T5962] get_page_from_freelist+0x101e/0x3070 [ 46.369416][ T5962] __alloc_pages_noprof+0x223/0x25a0 [ 46.370819][ T5962] alloc_pages_bulk_noprof+0x77c/0x1110 [ 46.372326][ T5962] __page_pool_alloc_pages_slow+0x18f/0x770 [ 46.373900][ T5962] page_pool_alloc_netmem+0xc4/0x160 [ 46.376756][ T5962] page_pool_alloc_pages+0x1a/0x60 [ 46.378777][ T5962] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 46.381010][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 46.383074][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 46.385110][ T5962] __sys_bpf+0xfc6/0x49a0 [ 46.386434][ T5962] __x64_sys_bpf+0x78/0xc0 [ 46.388091][ T5962] do_syscall_64+0xcd/0x250 [ 46.389774][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.391418][ T5962] page last free pid 24 tgid 24 stack trace: [ 46.393006][ T5962] free_unref_page+0x5f4/0xdc0 [ 46.394556][ T5962] __folio_put+0x30d/0x3d0 [ 46.396015][ T5962] free_page_and_swap_cache+0x249/0x2c0 [ 46.397834][ T5962] tlb_remove_table_rcu+0x89/0xe0 [ 46.399307][ T5962] rcu_core+0x79d/0x14d0 [ 46.400660][ T5962] handle_softirqs+0x213/0x8f0 [ 46.402079][ T5962] run_ksoftirqd+0x3a/0x60 [ 46.403337][ T5962] smpboot_thread_fn+0x661/0xa30 [ 46.405024][ T5962] kthread+0x2c1/0x3a0 [ 46.406320][ T5962] ret_from_fork+0x45/0x80 [ 46.407575][ T5962] ret_from_fork_asm+0x1a/0x30 [ 46.409144][ T5962] Modules linked in: [ 46.410180][ T5962] CPU: 2 UID: 0 PID: 5962 Comm: syz-executor392 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 46.413340][ T5962] Tainted: [B]=BAD_PAGE [ 46.414424][ T5962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 46.417105][ T5962] Call Trace: [ 46.417966][ T5962] [ 46.418746][ T5962] dump_stack_lvl+0x16c/0x1f0 [ 46.419993][ T5962] bad_page+0xb3/0x1f0 [ 46.421057][ T5962] ? __pfx_bad_page+0x10/0x10 [ 46.422279][ T5962] ? page_bad_reason+0x9d/0x1e0 [ 46.423578][ T5962] free_unref_page+0x657/0xdc0 [ 46.424879][ T5962] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 46.426456][ T5962] ? __phys_addr+0xc6/0x150 [ 46.427651][ T5962] skb_free_head+0xa0/0x1d0 [ 46.428817][ T5962] skb_release_data+0x560/0x730 [ 46.430036][ T5962] sk_skb_reason_drop+0x129/0x1a0 [ 46.431394][ T5962] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 46.433101][ T5962] ? kernel_text_address+0x8d/0x100 [ 46.434408][ T5962] ? hlock_class+0x4e/0x130 [ 46.435568][ T5962] ? __lock_acquire+0x163e/0x3ce0 [ 46.436846][ T5962] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 46.438616][ T5962] ? hlock_class+0x4e/0x130 [ 46.439844][ T5962] ? __lock_acquire+0xbdd/0x3ce0 [ 46.441192][ T5962] ? __pfx___lock_acquire+0x10/0x10 [ 46.442558][ T5962] __netif_receive_skb_list_core+0x357/0x950 [ 46.444107][ T5962] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 46.445755][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 46.447065][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 46.448703][ T5962] ? lock_acquire+0x2f/0xb0 [ 46.449985][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 46.451987][ T5962] netif_receive_skb_list_internal+0x753/0xdb0 [ 46.453541][ T5962] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 46.455169][ T5962] ? __pfx_eth_type_trans+0x10/0x10 [ 46.456551][ T5962] ? __build_skb_around+0x278/0x3b0 [ 46.457913][ T5962] netif_receive_skb_list+0x4f/0x4a0 [ 46.459373][ T5962] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 46.460970][ T5962] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 46.462707][ T5962] ? bpf_test_timer_continue+0x150/0x3d0 [ 46.464145][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 46.465499][ T5962] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 46.466990][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 46.468665][ T5962] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 46.470226][ T5962] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 46.471801][ T5962] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 46.473190][ T5962] ? 0xffffffffa00045c0 [ 46.474232][ T5962] ? 0xffffffffa00045c0 [ 46.475369][ T5962] ? 0xffffffffa00045c0 [ 46.476542][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 46.478461][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 46.480332][ T5962] ? lock_acquire+0x2f/0xb0 [ 46.481676][ T5962] ? __fget_files+0x40/0x3f0 [ 46.482880][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 46.484434][ T5962] ? fput+0x30/0x390 [ 46.485484][ T5962] ? __bpf_prog_get+0xa0/0x290 [ 46.486762][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 46.488235][ T5962] __sys_bpf+0xfc6/0x49a0 [ 46.489501][ T5962] ? find_held_lock+0x2d/0x110 [ 46.490789][ T5962] ? __pfx___sys_bpf+0x10/0x10 [ 46.492253][ T5962] ? __might_fault+0x13b/0x190 [ 46.493517][ T5962] ? __pfx_lock_release+0x10/0x10 [ 46.494823][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 46.496191][ T5962] ? lock_acquire+0x2f/0xb0 [ 46.497441][ T5962] ? __might_fault+0xe3/0x190 [ 46.498781][ T5962] ? xfd_validate_state+0x5d/0x180 [ 46.500195][ T5962] ? rcu_is_watching+0x12/0xc0 [ 46.501689][ T5962] __x64_sys_bpf+0x78/0xc0 [ 46.503074][ T5962] ? lockdep_hardirqs_on+0x7c/0x110 [ 46.504631][ T5962] do_syscall_64+0xcd/0x250 [ 46.505992][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.507785][ T5962] RIP: 0033:0x7f1b5711ee99 [ 46.508974][ T5962] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 46.513983][ T5962] RSP: 002b:00007f1b570d9228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 46.516196][ T5962] RAX: ffffffffffffffda RBX: 00007f1b571a9328 RCX: 00007f1b5711ee99 [ 46.518229][ T5962] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 46.520321][ T5962] RBP: 00007f1b571a9320 R08: 00007f1b570d96c0 R09: 00007f1b570d96c0 [ 46.522379][ T5962] R10: 00007f1b570d96c0 R11: 0000000000000246 R12: 00007f1b57176074 [ 46.524475][ T5962] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffed9b8fc98 [ 46.526590][ T5962] [ 46.527482][ T5962] BUG: Bad page state in process syz-executor392 pfn:2a912 [ 46.529430][ T5962] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802a912e88 pfn:0x2a912 [ 46.532207][ T5962] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 46.534292][ T5962] raw: 00fff00000000000 dead000000000040 ffff888106115000 0000000000000000 [ 46.536957][ T5962] raw: ffff88802a912e88 0000000000000001 00000000ffffffff 0000000000000000 [ 46.539496][ T5962] page dumped because: page_pool leak [ 46.541036][ T5962] page_owner tracks the page as allocated [ 46.542681][ T5962] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5962, tgid 5958 (syz-executor392), ts 44239000437, free_ts 44032501314 [ 46.546946][ T5962] post_alloc_hook+0x2d1/0x350 [ 46.548131][ T5962] get_page_from_freelist+0x101e/0x3070 [ 46.549530][ T5962] __alloc_pages_noprof+0x223/0x25a0 [ 46.550879][ T5962] alloc_pages_bulk_noprof+0x77c/0x1110 [ 46.552305][ T5962] __page_pool_alloc_pages_slow+0x18f/0x770 [ 46.553978][ T5962] page_pool_alloc_netmem+0xc4/0x160 [ 46.555693][ T5962] page_pool_alloc_pages+0x1a/0x60 [ 46.557034][ T5962] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 46.558721][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 46.560187][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 46.561575][ T5962] __sys_bpf+0xfc6/0x49a0 [ 46.562750][ T5962] __x64_sys_bpf+0x78/0xc0 [ 46.564002][ T5962] do_syscall_64+0xcd/0x250 [ 46.565331][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.566830][ T5962] page last free pid 24 tgid 24 stack trace: [ 46.568695][ T5962] free_unref_page+0x5f4/0xdc0 [ 46.569966][ T5962] __folio_put+0x30d/0x3d0 [ 46.571439][ T5962] free_page_and_swap_cache+0x249/0x2c0 [ 46.573651][ T5962] tlb_remove_table_rcu+0x89/0xe0 [ 46.575246][ T5962] rcu_core+0x79d/0x14d0 [ 46.576662][ T5962] handle_softirqs+0x213/0x8f0 [ 46.578415][ T5962] run_ksoftirqd+0x3a/0x60 [ 46.579729][ T5962] smpboot_thread_fn+0x661/0xa30 [ 46.581213][ T5962] kthread+0x2c1/0x3a0 [ 46.582509][ T5962] ret_from_fork+0x45/0x80 [ 46.583876][ T5962] ret_from_fork_asm+0x1a/0x30 [ 46.585107][ T5962] Modules linked in: [ 46.586131][ T5962] CPU: 2 UID: 0 PID: 5962 Comm: syz-executor392 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 46.589313][ T5962] Tainted: [B]=BAD_PAGE [ 46.590390][ T5962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 46.593338][ T5962] Call Trace: [ 46.594209][ T5962] [ 46.594979][ T5962] dump_stack_lvl+0x16c/0x1f0 [ 46.596243][ T5962] bad_page+0xb3/0x1f0 [ 46.597317][ T5962] ? __pfx_bad_page+0x10/0x10 [ 46.598661][ T5962] ? page_bad_reason+0x9d/0x1e0 [ 46.599992][ T5962] free_unref_page+0x657/0xdc0 [ 46.601268][ T5962] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 46.602836][ T5962] ? __phys_addr+0xc6/0x150 [ 46.604048][ T5962] skb_free_head+0xa0/0x1d0 [ 46.605254][ T5962] skb_release_data+0x560/0x730 [ 46.606543][ T5962] sk_skb_reason_drop+0x129/0x1a0 [ 46.607892][ T5962] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 46.609652][ T5962] ? kernel_text_address+0x8d/0x100 [ 46.611010][ T5962] ? hlock_class+0x4e/0x130 [ 46.612243][ T5962] ? __lock_acquire+0x163e/0x3ce0 [ 46.613719][ T5962] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 46.616055][ T5962] ? hlock_class+0x4e/0x130 [ 46.617329][ T5962] ? __lock_acquire+0xbdd/0x3ce0 [ 46.618978][ T5962] ? __pfx___lock_acquire+0x10/0x10 [ 46.620466][ T5962] __netif_receive_skb_list_core+0x357/0x950 [ 46.622148][ T5962] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 46.623851][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 46.625229][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 46.626885][ T5962] ? lock_acquire+0x2f/0xb0 [ 46.628029][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 46.629702][ T5962] netif_receive_skb_list_internal+0x753/0xdb0 [ 46.631319][ T5962] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 46.633054][ T5962] ? __pfx_eth_type_trans+0x10/0x10 [ 46.634435][ T5962] ? __build_skb_around+0x278/0x3b0 [ 46.635837][ T5962] netif_receive_skb_list+0x4f/0x4a0 [ 46.637225][ T5962] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 46.638861][ T5962] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 46.640675][ T5962] ? bpf_test_timer_continue+0x150/0x3d0 [ 46.642274][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 46.643752][ T5962] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 46.645273][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 46.646733][ T5962] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 46.648267][ T5962] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 46.649965][ T5962] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 46.651360][ T5962] ? 0xffffffffa00045c0 [ 46.652485][ T5962] ? 0xffffffffa00045c0 [ 46.653590][ T5962] ? 0xffffffffa00045c0 [ 46.654816][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 46.656427][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 46.657847][ T5962] ? lock_acquire+0x2f/0xb0 [ 46.659059][ T5962] ? __fget_files+0x40/0x3f0 [ 46.660332][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 46.661927][ T5962] ? fput+0x30/0x390 [ 46.662966][ T5962] ? __bpf_prog_get+0xa0/0x290 [ 46.664226][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 46.665750][ T5962] __sys_bpf+0xfc6/0x49a0 [ 46.667038][ T5962] ? find_held_lock+0x2d/0x110 [ 46.668320][ T5962] ? __pfx___sys_bpf+0x10/0x10 [ 46.669563][ T5962] ? __might_fault+0x13b/0x190 [ 46.670818][ T5962] ? __pfx_lock_release+0x10/0x10 [ 46.672157][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 46.673535][ T5962] ? lock_acquire+0x2f/0xb0 [ 46.674738][ T5962] ? __might_fault+0xe3/0x190 [ 46.676000][ T5962] ? xfd_validate_state+0x5d/0x180 [ 46.677452][ T5962] ? rcu_is_watching+0x12/0xc0 [ 46.678725][ T5962] __x64_sys_bpf+0x78/0xc0 [ 46.679934][ T5962] ? lockdep_hardirqs_on+0x7c/0x110 [ 46.681318][ T5962] do_syscall_64+0xcd/0x250 [ 46.682531][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.684090][ T5962] RIP: 0033:0x7f1b5711ee99 [ 46.685255][ T5962] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 46.690219][ T5962] RSP: 002b:00007f1b570d9228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 46.692370][ T5962] RAX: ffffffffffffffda RBX: 00007f1b571a9328 RCX: 00007f1b5711ee99 [ 46.694404][ T5962] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 46.696742][ T5962] RBP: 00007f1b571a9320 R08: 00007f1b570d96c0 R09: 00007f1b570d96c0 [ 46.698848][ T5962] R10: 00007f1b570d96c0 R11: 0000000000000246 R12: 00007f1b57176074 [ 46.700916][ T5962] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffed9b8fc98 [ 46.702930][ T5962] [ 46.703844][ T5962] BUG: Bad page state in process syz-executor392 pfn:2f94c [ 46.705734][ T5962] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880286cc280 pfn:0x2f94c [ 46.708496][ T5962] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 46.710359][ T5962] raw: 00fff00000000000 dead000000000040 ffff888106115000 0000000000000000 [ 46.712932][ T5962] raw: ffff8880286cc280 0000000000000001 00000000ffffffff 0000000000000000 [ 46.715184][ T5962] page dumped because: page_pool leak [ 46.716581][ T5962] page_owner tracks the page as allocated [ 46.718044][ T5962] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5962, tgid 5958 (syz-executor392), ts 44238992638, free_ts 44032505270 [ 46.722535][ T5962] post_alloc_hook+0x2d1/0x350 [ 46.723779][ T5962] get_page_from_freelist+0x101e/0x3070 [ 46.725182][ T5962] __alloc_pages_noprof+0x223/0x25a0 [ 46.726577][ T5962] alloc_pages_bulk_noprof+0x77c/0x1110 [ 46.728042][ T5962] __page_pool_alloc_pages_slow+0x18f/0x770 [ 46.729711][ T5962] page_pool_alloc_netmem+0xc4/0x160 [ 46.731223][ T5962] page_pool_alloc_pages+0x1a/0x60 [ 46.732720][ T5962] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 46.734817][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 46.736249][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 46.738613][ T5962] __sys_bpf+0xfc6/0x49a0 [ 46.739839][ T5962] __x64_sys_bpf+0x78/0xc0 [ 46.740991][ T5962] do_syscall_64+0xcd/0x250 [ 46.742258][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.743854][ T5962] page last free pid 24 tgid 24 stack trace: [ 46.745452][ T5962] free_unref_page+0x5f4/0xdc0 [ 46.746807][ T5962] __folio_put+0x30d/0x3d0 [ 46.748093][ T5962] free_page_and_swap_cache+0x249/0x2c0 [ 46.750028][ T5962] tlb_remove_table_rcu+0x89/0xe0 [ 46.751556][ T5962] rcu_core+0x79d/0x14d0 [ 46.752991][ T5962] handle_softirqs+0x213/0x8f0 [ 46.754616][ T5962] run_ksoftirqd+0x3a/0x60 [ 46.755993][ T5962] smpboot_thread_fn+0x661/0xa30 [ 46.757384][ T5962] kthread+0x2c1/0x3a0 [ 46.758480][ T5962] ret_from_fork+0x45/0x80 [ 46.759643][ T5962] ret_from_fork_asm+0x1a/0x30 [ 46.761002][ T5962] Modules linked in: [ 46.762162][ T5962] CPU: 2 UID: 0 PID: 5962 Comm: syz-executor392 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 46.765407][ T5962] Tainted: [B]=BAD_PAGE [ 46.766479][ T5962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 46.769472][ T5962] Call Trace: [ 46.770342][ T5962] [ 46.771127][ T5962] dump_stack_lvl+0x16c/0x1f0 [ 46.772357][ T5962] bad_page+0xb3/0x1f0 [ 46.773465][ T5962] ? __pfx_bad_page+0x10/0x10 [ 46.774768][ T5962] ? page_bad_reason+0x9d/0x1e0 [ 46.776041][ T5962] free_unref_page+0x657/0xdc0 [ 46.777298][ T5962] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 46.779081][ T5962] ? __phys_addr+0xc6/0x150 [ 46.780335][ T5962] skb_free_head+0xa0/0x1d0 [ 46.781552][ T5962] skb_release_data+0x560/0x730 [ 46.782856][ T5962] sk_skb_reason_drop+0x129/0x1a0 [ 46.784207][ T5962] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 46.786040][ T5962] ? kernel_text_address+0x8d/0x100 [ 46.787571][ T5962] ? hlock_class+0x4e/0x130 [ 46.788872][ T5962] ? __lock_acquire+0x163e/0x3ce0 [ 46.790514][ T5962] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 46.792593][ T5962] ? hlock_class+0x4e/0x130 [ 46.794262][ T5962] ? __lock_acquire+0xbdd/0x3ce0 [ 46.795778][ T5962] ? __pfx___lock_acquire+0x10/0x10 [ 46.797402][ T5962] __netif_receive_skb_list_core+0x357/0x950 [ 46.799219][ T5962] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 46.801088][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 46.802379][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 46.803999][ T5962] ? lock_acquire+0x2f/0xb0 [ 46.805214][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 46.806880][ T5962] netif_receive_skb_list_internal+0x753/0xdb0 [ 46.808862][ T5962] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 46.810937][ T5962] ? __pfx_eth_type_trans+0x10/0x10 [ 46.812340][ T5962] ? __build_skb_around+0x278/0x3b0 [ 46.813814][ T5962] netif_receive_skb_list+0x4f/0x4a0 [ 46.815951][ T5962] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 46.817856][ T5962] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 46.819684][ T5962] ? bpf_test_timer_continue+0x150/0x3d0 [ 46.821161][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 46.822593][ T5962] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 46.824081][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 46.825602][ T5962] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 46.827095][ T5962] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 46.828612][ T5962] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 46.830163][ T5962] ? 0xffffffffa00045c0 [ 46.831487][ T5962] ? 0xffffffffa00045c0 [ 46.832618][ T5962] ? 0xffffffffa00045c0 [ 46.833697][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 46.835145][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 46.836629][ T5962] ? lock_acquire+0x2f/0xb0 [ 46.837995][ T5962] ? __fget_files+0x40/0x3f0 [ 46.839313][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 46.840911][ T5962] ? fput+0x30/0x390 [ 46.842118][ T5962] ? __bpf_prog_get+0xa0/0x290 [ 46.843708][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 46.845380][ T5962] __sys_bpf+0xfc6/0x49a0 [ 46.846628][ T5962] ? find_held_lock+0x2d/0x110 [ 46.848024][ T5962] ? __pfx___sys_bpf+0x10/0x10 [ 46.849356][ T5962] ? __might_fault+0x13b/0x190 [ 46.850678][ T5962] ? __pfx_lock_release+0x10/0x10 [ 46.852285][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 46.853842][ T5962] ? lock_acquire+0x2f/0xb0 [ 46.854986][ T5962] ? __might_fault+0xe3/0x190 [ 46.856238][ T5962] ? xfd_validate_state+0x5d/0x180 [ 46.857592][ T5962] ? rcu_is_watching+0x12/0xc0 [ 46.858788][ T5962] __x64_sys_bpf+0x78/0xc0 [ 46.860068][ T5962] ? lockdep_hardirqs_on+0x7c/0x110 [ 46.861433][ T5962] do_syscall_64+0xcd/0x250 [ 46.862561][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.864025][ T5962] RIP: 0033:0x7f1b5711ee99 [ 46.865191][ T5962] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 46.869969][ T5962] RSP: 002b:00007f1b570d9228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 46.872041][ T5962] RAX: ffffffffffffffda RBX: 00007f1b571a9328 RCX: 00007f1b5711ee99 [ 46.874300][ T5962] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 46.876517][ T5962] RBP: 00007f1b571a9320 R08: 00007f1b570d96c0 R09: 00007f1b570d96c0 [ 46.878670][ T5962] R10: 00007f1b570d96c0 R11: 0000000000000246 R12: 00007f1b57176074 [ 46.880808][ T5962] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffed9b8fc98 [ 46.883028][ T5962] [ 46.884028][ T5962] BUG: Bad page state in process syz-executor392 pfn:30432 [ 46.886140][ T5962] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x30432 [ 46.889143][ T5962] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 46.890920][ T5962] raw: 00fff00000000000 dead000000000040 ffff888106115000 0000000000000000 [ 46.893240][ T5962] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 46.895522][ T5962] page dumped because: page_pool leak [ 46.896946][ T5962] page_owner tracks the page as allocated [ 46.898682][ T5962] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5962, tgid 5958 (syz-executor392), ts 44238984970, free_ts 44032509510 [ 46.903999][ T5962] post_alloc_hook+0x2d1/0x350 [ 46.905241][ T5962] get_page_from_freelist+0x101e/0x3070 [ 46.906961][ T5962] __alloc_pages_noprof+0x223/0x25a0 [ 46.908752][ T5962] alloc_pages_bulk_noprof+0x77c/0x1110 [ 46.910840][ T5962] __page_pool_alloc_pages_slow+0x18f/0x770 [ 46.913180][ T5962] page_pool_alloc_netmem+0xc4/0x160 [ 46.915104][ T5962] page_pool_alloc_pages+0x1a/0x60 [ 46.916901][ T5962] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 46.918912][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 46.920407][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 46.922029][ T5962] __sys_bpf+0xfc6/0x49a0 [ 46.923542][ T5962] __x64_sys_bpf+0x78/0xc0 [ 46.925070][ T5962] do_syscall_64+0xcd/0x250 [ 46.926576][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.928794][ T5962] page last free pid 24 tgid 24 stack trace: [ 46.930919][ T5962] free_unref_page+0x5f4/0xdc0 [ 46.932850][ T5962] __folio_put+0x30d/0x3d0 [ 46.934259][ T5962] free_page_and_swap_cache+0x249/0x2c0 [ 46.936157][ T5962] tlb_remove_table_rcu+0x89/0xe0 [ 46.938238][ T5962] rcu_core+0x79d/0x14d0 [ 46.939738][ T5962] handle_softirqs+0x213/0x8f0 [ 46.941659][ T5962] run_ksoftirqd+0x3a/0x60 [ 46.943824][ T5962] smpboot_thread_fn+0x661/0xa30 [ 46.945469][ T5962] kthread+0x2c1/0x3a0 [ 46.946832][ T5962] ret_from_fork+0x45/0x80 [ 46.948264][ T5962] ret_from_fork_asm+0x1a/0x30 [ 46.949661][ T5962] Modules linked in: [ 46.950670][ T5962] CPU: 2 UID: 0 PID: 5962 Comm: syz-executor392 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 46.954484][ T5962] Tainted: [B]=BAD_PAGE [ 46.955925][ T5962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 46.959427][ T5962] Call Trace: [ 46.960654][ T5962] [ 46.961580][ T5962] dump_stack_lvl+0x16c/0x1f0 [ 46.963262][ T5962] bad_page+0xb3/0x1f0 [ 46.964566][ T5962] ? __pfx_bad_page+0x10/0x10 [ 46.965984][ T5962] ? page_bad_reason+0x9d/0x1e0 [ 46.967623][ T5962] free_unref_page+0x657/0xdc0 [ 46.969346][ T5962] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 46.971493][ T5962] ? __phys_addr+0xc6/0x150 [ 46.973075][ T5962] skb_free_head+0xa0/0x1d0 [ 46.974403][ T5962] skb_release_data+0x560/0x730 [ 46.976216][ T5962] sk_skb_reason_drop+0x129/0x1a0 [ 46.978011][ T5962] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 46.980352][ T5962] ? kernel_text_address+0x8d/0x100 [ 46.982055][ T5962] ? hlock_class+0x4e/0x130 [ 46.983486][ T5962] ? __lock_acquire+0x163e/0x3ce0 [ 46.984907][ T5962] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 46.986749][ T5962] ? hlock_class+0x4e/0x130 [ 46.987976][ T5962] ? __lock_acquire+0xbdd/0x3ce0 [ 46.989424][ T5962] ? __pfx___lock_acquire+0x10/0x10 [ 46.990838][ T5962] __netif_receive_skb_list_core+0x357/0x950 [ 46.992413][ T5962] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 46.994065][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 46.995435][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 46.997106][ T5962] ? lock_acquire+0x2f/0xb0 [ 46.998283][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 46.999998][ T5962] netif_receive_skb_list_internal+0x753/0xdb0 [ 47.001645][ T5962] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 47.003461][ T5962] ? __pfx_eth_type_trans+0x10/0x10 [ 47.004966][ T5962] ? __build_skb_around+0x278/0x3b0 [ 47.006714][ T5962] netif_receive_skb_list+0x4f/0x4a0 [ 47.008632][ T5962] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 47.011157][ T5962] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 47.014145][ T5962] ? bpf_test_timer_continue+0x150/0x3d0 [ 47.016378][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 47.018209][ T5962] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 47.020152][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 47.022078][ T5962] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 47.023868][ T5962] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 47.025821][ T5962] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 47.027324][ T5962] ? 0xffffffffa00045c0 [ 47.028489][ T5962] ? 0xffffffffa00045c0 [ 47.029939][ T5962] ? 0xffffffffa00045c0 [ 47.031263][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 47.033188][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 47.034695][ T5962] ? lock_acquire+0x2f/0xb0 [ 47.035929][ T5962] ? __fget_files+0x40/0x3f0 [ 47.037788][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 47.040083][ T5962] ? fput+0x30/0x390 [ 47.041397][ T5962] ? __bpf_prog_get+0xa0/0x290 [ 47.043086][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 47.044689][ T5962] __sys_bpf+0xfc6/0x49a0 [ 47.045846][ T5962] ? find_held_lock+0x2d/0x110 [ 47.047157][ T5962] ? __pfx___sys_bpf+0x10/0x10 [ 47.048462][ T5962] ? __might_fault+0x13b/0x190 [ 47.050070][ T5962] ? __pfx_lock_release+0x10/0x10 [ 47.051419][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 47.052843][ T5962] ? lock_acquire+0x2f/0xb0 [ 47.054105][ T5962] ? __might_fault+0xe3/0x190 [ 47.055452][ T5962] ? xfd_validate_state+0x5d/0x180 [ 47.056799][ T5962] ? rcu_is_watching+0x12/0xc0 [ 47.058127][ T5962] __x64_sys_bpf+0x78/0xc0 [ 47.059455][ T5962] ? lockdep_hardirqs_on+0x7c/0x110 [ 47.061282][ T5962] do_syscall_64+0xcd/0x250 [ 47.062953][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.064787][ T5962] RIP: 0033:0x7f1b5711ee99 [ 47.066067][ T5962] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 47.071578][ T5962] RSP: 002b:00007f1b570d9228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 47.074217][ T5962] RAX: ffffffffffffffda RBX: 00007f1b571a9328 RCX: 00007f1b5711ee99 [ 47.076425][ T5962] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 47.078582][ T5962] RBP: 00007f1b571a9320 R08: 00007f1b570d96c0 R09: 00007f1b570d96c0 [ 47.080778][ T5962] R10: 00007f1b570d96c0 R11: 0000000000000246 R12: 00007f1b57176074 [ 47.082795][ T5962] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffed9b8fc98 [ 47.085049][ T5962] [ 47.086059][ T5962] BUG: Bad page state in process syz-executor392 pfn:28e6c [ 47.088206][ T5962] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888028e6cd80 pfn:0x28e6c [ 47.090845][ T5962] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 47.092741][ T5962] raw: 00fff00000000000 dead000000000040 ffff888106115000 0000000000000000 [ 47.095086][ T5962] raw: ffff888028e6cd80 0000000000000001 00000000ffffffff 0000000000000000 [ 47.097287][ T5962] page dumped because: page_pool leak [ 47.098847][ T5962] page_owner tracks the page as allocated [ 47.100406][ T5962] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5962, tgid 5958 (syz-executor392), ts 44238977122, free_ts 44032512940 [ 47.104948][ T5962] post_alloc_hook+0x2d1/0x350 [ 47.106216][ T5962] get_page_from_freelist+0x101e/0x3070 [ 47.107674][ T5962] __alloc_pages_noprof+0x223/0x25a0 [ 47.109053][ T5962] alloc_pages_bulk_noprof+0x77c/0x1110 [ 47.110639][ T5962] __page_pool_alloc_pages_slow+0x18f/0x770 [ 47.112149][ T5962] page_pool_alloc_netmem+0xc4/0x160 [ 47.113514][ T5962] page_pool_alloc_pages+0x1a/0x60 [ 47.114810][ T5962] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 47.116399][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 47.117816][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 47.119351][ T5962] __sys_bpf+0xfc6/0x49a0 [ 47.120612][ T5962] __x64_sys_bpf+0x78/0xc0 [ 47.121916][ T5962] do_syscall_64+0xcd/0x250 [ 47.123271][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.124945][ T5962] page last free pid 24 tgid 24 stack trace: [ 47.126552][ T5962] free_unref_page+0x5f4/0xdc0 [ 47.127828][ T5962] __folio_put+0x30d/0x3d0 [ 47.129214][ T5962] free_page_and_swap_cache+0x249/0x2c0 [ 47.130922][ T5962] tlb_remove_table_rcu+0x89/0xe0 [ 47.132378][ T5962] rcu_core+0x79d/0x14d0 [ 47.133464][ T5962] handle_softirqs+0x213/0x8f0 [ 47.134706][ T5962] run_ksoftirqd+0x3a/0x60 [ 47.135885][ T5962] smpboot_thread_fn+0x661/0xa30 [ 47.137238][ T5962] kthread+0x2c1/0x3a0 [ 47.138584][ T5962] ret_from_fork+0x45/0x80 [ 47.139833][ T5962] ret_from_fork_asm+0x1a/0x30 [ 47.141076][ T5962] Modules linked in: [ 47.142307][ T5962] CPU: 2 UID: 0 PID: 5962 Comm: syz-executor392 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 47.145487][ T5962] Tainted: [B]=BAD_PAGE [ 47.146629][ T5962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 47.150210][ T5962] Call Trace: [ 47.151274][ T5962] [ 47.152246][ T5962] dump_stack_lvl+0x16c/0x1f0 [ 47.153793][ T5962] bad_page+0xb3/0x1f0 [ 47.155048][ T5962] ? __pfx_bad_page+0x10/0x10 [ 47.156503][ T5962] ? page_bad_reason+0x9d/0x1e0 [ 47.157763][ T5962] free_unref_page+0x657/0xdc0 [ 47.159131][ T5962] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 47.160743][ T5962] ? __phys_addr+0xc6/0x150 [ 47.161924][ T5962] skb_free_head+0xa0/0x1d0 [ 47.163263][ T5962] skb_release_data+0x560/0x730 [ 47.164600][ T5962] sk_skb_reason_drop+0x129/0x1a0 [ 47.165946][ T5962] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 47.167908][ T5962] ? kernel_text_address+0x8d/0x100 [ 47.169463][ T5962] ? hlock_class+0x4e/0x130 [ 47.170870][ T5962] ? __lock_acquire+0x163e/0x3ce0 [ 47.172659][ T5962] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 47.174675][ T5962] ? hlock_class+0x4e/0x130 [ 47.175954][ T5962] ? __lock_acquire+0xbdd/0x3ce0 [ 47.177353][ T5962] ? __pfx___lock_acquire+0x10/0x10 [ 47.178698][ T5962] __netif_receive_skb_list_core+0x357/0x950 [ 47.180404][ T5962] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 47.182141][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 47.183786][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 47.185525][ T5962] ? lock_acquire+0x2f/0xb0 [ 47.186878][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 47.188685][ T5962] netif_receive_skb_list_internal+0x753/0xdb0 [ 47.190414][ T5962] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 47.192146][ T5962] ? __pfx_eth_type_trans+0x10/0x10 [ 47.193532][ T5962] ? __build_skb_around+0x278/0x3b0 [ 47.194899][ T5962] netif_receive_skb_list+0x4f/0x4a0 [ 47.196383][ T5962] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 47.198301][ T5962] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 47.200525][ T5962] ? bpf_test_timer_continue+0x150/0x3d0 [ 47.202278][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 47.203675][ T5962] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 47.205178][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 47.206717][ T5962] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 47.208284][ T5962] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 47.209947][ T5962] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 47.211327][ T5962] ? 0xffffffffa00045c0 [ 47.212431][ T5962] ? 0xffffffffa00045c0 [ 47.213617][ T5962] ? 0xffffffffa00045c0 [ 47.214713][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 47.216286][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 47.217838][ T5962] ? lock_acquire+0x2f/0xb0 [ 47.219133][ T5962] ? __fget_files+0x40/0x3f0 [ 47.220414][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 47.221961][ T5962] ? fput+0x30/0x390 [ 47.223016][ T5962] ? __bpf_prog_get+0xa0/0x290 [ 47.224292][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 47.225800][ T5962] __sys_bpf+0xfc6/0x49a0 [ 47.226910][ T5962] ? find_held_lock+0x2d/0x110 [ 47.228186][ T5962] ? __pfx___sys_bpf+0x10/0x10 [ 47.229421][ T5962] ? __might_fault+0x13b/0x190 [ 47.230648][ T5962] ? __pfx_lock_release+0x10/0x10 [ 47.232044][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 47.233464][ T5962] ? lock_acquire+0x2f/0xb0 [ 47.234629][ T5962] ? __might_fault+0xe3/0x190 [ 47.235856][ T5962] ? xfd_validate_state+0x5d/0x180 [ 47.237341][ T5962] ? rcu_is_watching+0x12/0xc0 [ 47.238615][ T5962] __x64_sys_bpf+0x78/0xc0 [ 47.239805][ T5962] ? lockdep_hardirqs_on+0x7c/0x110 [ 47.241187][ T5962] do_syscall_64+0xcd/0x250 [ 47.242354][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.243874][ T5962] RIP: 0033:0x7f1b5711ee99 [ 47.245074][ T5962] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 47.250329][ T5962] RSP: 002b:00007f1b570d9228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 47.252495][ T5962] RAX: ffffffffffffffda RBX: 00007f1b571a9328 RCX: 00007f1b5711ee99 [ 47.254558][ T5962] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 47.256634][ T5962] RBP: 00007f1b571a9320 R08: 00007f1b570d96c0 R09: 00007f1b570d96c0 [ 47.258707][ T5962] R10: 00007f1b570d96c0 R11: 0000000000000246 R12: 00007f1b57176074 [ 47.260796][ T5962] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffed9b8fc98 [ 47.262769][ T5962] [ 47.263666][ T5962] BUG: Bad page state in process syz-executor392 pfn:2a7a1 [ 47.265597][ T5962] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2a7a1 [ 47.267880][ T5962] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 47.269805][ T5962] raw: 00fff00000000000 dead000000000040 ffff888106115000 0000000000000000 [ 47.272050][ T5962] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 47.274445][ T5962] page dumped because: page_pool leak [ 47.276321][ T5962] page_owner tracks the page as allocated [ 47.277907][ T5962] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5962, tgid 5958 (syz-executor392), ts 44238969618, free_ts 44054456446 [ 47.282224][ T5962] post_alloc_hook+0x2d1/0x350 [ 47.283500][ T5962] get_page_from_freelist+0x101e/0x3070 [ 47.284968][ T5962] __alloc_pages_noprof+0x223/0x25a0 [ 47.286360][ T5962] alloc_pages_bulk_noprof+0x77c/0x1110 [ 47.287832][ T5962] __page_pool_alloc_pages_slow+0x18f/0x770 [ 47.289586][ T5962] page_pool_alloc_netmem+0xc4/0x160 [ 47.291205][ T5962] page_pool_alloc_pages+0x1a/0x60 [ 47.292858][ T5962] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 47.294669][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 47.296131][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 47.297690][ T5962] __sys_bpf+0xfc6/0x49a0 [ 47.298911][ T5962] __x64_sys_bpf+0x78/0xc0 [ 47.300325][ T5962] do_syscall_64+0xcd/0x250 [ 47.301608][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.303217][ T5962] page last free pid 24 tgid 24 stack trace: [ 47.304761][ T5962] free_unref_page+0x5f4/0xdc0 [ 47.306052][ T5962] __folio_put+0x30d/0x3d0 [ 47.307231][ T5962] free_page_and_swap_cache+0x249/0x2c0 [ 47.308967][ T5962] tlb_remove_table_rcu+0x89/0xe0 [ 47.310376][ T5962] rcu_core+0x79d/0x14d0 [ 47.311917][ T5962] handle_softirqs+0x213/0x8f0 [ 47.313465][ T5962] run_ksoftirqd+0x3a/0x60 [ 47.314642][ T5962] smpboot_thread_fn+0x661/0xa30 [ 47.315947][ T5962] kthread+0x2c1/0x3a0 [ 47.317009][ T5962] ret_from_fork+0x45/0x80 [ 47.318536][ T5962] ret_from_fork_asm+0x1a/0x30 [ 47.319884][ T5962] Modules linked in: [ 47.320869][ T5962] CPU: 2 UID: 0 PID: 5962 Comm: syz-executor392 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 47.324028][ T5962] Tainted: [B]=BAD_PAGE [ 47.325113][ T5962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 47.327938][ T5962] Call Trace: [ 47.329277][ T5962] [ 47.330086][ T5962] dump_stack_lvl+0x16c/0x1f0 [ 47.331352][ T5962] bad_page+0xb3/0x1f0 [ 47.332837][ T5962] ? __pfx_bad_page+0x10/0x10 [ 47.334195][ T5962] ? page_bad_reason+0x9d/0x1e0 [ 47.335627][ T5962] free_unref_page+0x657/0xdc0 [ 47.337088][ T5962] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 47.339039][ T5962] ? __phys_addr+0xc6/0x150 [ 47.340359][ T5962] skb_free_head+0xa0/0x1d0 [ 47.341834][ T5962] skb_release_data+0x560/0x730 [ 47.343215][ T5962] sk_skb_reason_drop+0x129/0x1a0 [ 47.344564][ T5962] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 47.346348][ T5962] ? kernel_text_address+0x8d/0x100 [ 47.347718][ T5962] ? hlock_class+0x4e/0x130 [ 47.348905][ T5962] ? __lock_acquire+0x163e/0x3ce0 [ 47.350224][ T5962] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 47.352649][ T5962] ? hlock_class+0x4e/0x130 [ 47.353855][ T5962] ? __lock_acquire+0xbdd/0x3ce0 [ 47.355143][ T5962] ? __pfx___lock_acquire+0x10/0x10 [ 47.356494][ T5962] __netif_receive_skb_list_core+0x357/0x950 [ 47.358056][ T5962] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 47.359817][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 47.361174][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 47.362850][ T5962] ? lock_acquire+0x2f/0xb0 [ 47.364355][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 47.366463][ T5962] netif_receive_skb_list_internal+0x753/0xdb0 [ 47.368533][ T5962] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 47.370302][ T5962] ? __pfx_eth_type_trans+0x10/0x10 [ 47.372371][ T5962] ? __build_skb_around+0x278/0x3b0 [ 47.374165][ T5962] netif_receive_skb_list+0x4f/0x4a0 [ 47.375659][ T5962] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 47.377586][ T5962] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 47.379468][ T5962] ? bpf_test_timer_continue+0x150/0x3d0 [ 47.380944][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 47.382321][ T5962] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 47.383822][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 47.385380][ T5962] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 47.386882][ T5962] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 47.388423][ T5962] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 47.389816][ T5962] ? 0xffffffffa00045c0 [ 47.390863][ T5962] ? 0xffffffffa00045c0 [ 47.392050][ T5962] ? 0xffffffffa00045c0 [ 47.393157][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 47.394679][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 47.396700][ T5962] ? lock_acquire+0x2f/0xb0 [ 47.398063][ T5962] ? __fget_files+0x40/0x3f0 [ 47.399475][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 47.400959][ T5962] ? fput+0x30/0x390 [ 47.401944][ T5962] ? __bpf_prog_get+0xa0/0x290 [ 47.403186][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 47.404714][ T5962] __sys_bpf+0xfc6/0x49a0 [ 47.405836][ T5962] ? find_held_lock+0x2d/0x110 [ 47.407015][ T5962] ? __pfx___sys_bpf+0x10/0x10 [ 47.408296][ T5962] ? __might_fault+0x13b/0x190 [ 47.409850][ T5962] ? __pfx_lock_release+0x10/0x10 [ 47.411221][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 47.412645][ T5962] ? lock_acquire+0x2f/0xb0 [ 47.413877][ T5962] ? __might_fault+0xe3/0x190 [ 47.415134][ T5962] ? xfd_validate_state+0x5d/0x180 [ 47.416498][ T5962] ? rcu_is_watching+0x12/0xc0 [ 47.417764][ T5962] __x64_sys_bpf+0x78/0xc0 [ 47.418997][ T5962] ? lockdep_hardirqs_on+0x7c/0x110 [ 47.420426][ T5962] do_syscall_64+0xcd/0x250 [ 47.421673][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.423307][ T5962] RIP: 0033:0x7f1b5711ee99 [ 47.424642][ T5962] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 47.430715][ T5962] RSP: 002b:00007f1b570d9228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 47.433028][ T5962] RAX: ffffffffffffffda RBX: 00007f1b571a9328 RCX: 00007f1b5711ee99 [ 47.435471][ T5962] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 47.437958][ T5962] RBP: 00007f1b571a9320 R08: 00007f1b570d96c0 R09: 00007f1b570d96c0 [ 47.440066][ T5962] R10: 00007f1b570d96c0 R11: 0000000000000246 R12: 00007f1b57176074 [ 47.442115][ T5962] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffed9b8fc98 [ 47.444180][ T5962] [ 47.445110][ T5962] BUG: Bad page state in process syz-executor392 pfn:35309 [ 47.446978][ T5962] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x8 pfn:0x35309 [ 47.449241][ T5962] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 47.451719][ T5962] raw: 00fff00000000000 dead000000000040 ffff888106115000 0000000000000000 [ 47.454422][ T5962] raw: 0000000000000008 0000000000000001 00000000ffffffff 0000000000000000 [ 47.457505][ T5962] page dumped because: page_pool leak [ 47.459148][ T5962] page_owner tracks the page as allocated [ 47.460767][ T5962] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5962, tgid 5958 (syz-executor392), ts 44238961633, free_ts 44054462860 [ 47.466434][ T5962] post_alloc_hook+0x2d1/0x350 [ 47.467675][ T5962] get_page_from_freelist+0x101e/0x3070 [ 47.469275][ T5962] __alloc_pages_noprof+0x223/0x25a0 [ 47.470936][ T5962] alloc_pages_bulk_noprof+0x77c/0x1110 [ 47.472461][ T5962] __page_pool_alloc_pages_slow+0x18f/0x770 [ 47.473949][ T5962] page_pool_alloc_netmem+0xc4/0x160 [ 47.475308][ T5962] page_pool_alloc_pages+0x1a/0x60 [ 47.476652][ T5962] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 47.478235][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 47.479650][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 47.481044][ T5962] __sys_bpf+0xfc6/0x49a0 [ 47.482365][ T5962] __x64_sys_bpf+0x78/0xc0 [ 47.483526][ T5962] do_syscall_64+0xcd/0x250 [ 47.484710][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.486261][ T5962] page last free pid 24 tgid 24 stack trace: [ 47.487760][ T5962] free_unref_page+0x5f4/0xdc0 [ 47.489047][ T5962] __folio_put+0x30d/0x3d0 [ 47.490544][ T5962] free_page_and_swap_cache+0x249/0x2c0 [ 47.492256][ T5962] tlb_remove_table_rcu+0x89/0xe0 [ 47.494003][ T5962] rcu_core+0x79d/0x14d0 [ 47.495231][ T5962] handle_softirqs+0x213/0x8f0 [ 47.496515][ T5962] run_ksoftirqd+0x3a/0x60 [ 47.497874][ T5962] smpboot_thread_fn+0x661/0xa30 [ 47.499346][ T5962] kthread+0x2c1/0x3a0 [ 47.500468][ T5962] ret_from_fork+0x45/0x80 [ 47.501645][ T5962] ret_from_fork_asm+0x1a/0x30 [ 47.502966][ T5962] Modules linked in: [ 47.504014][ T5962] CPU: 2 UID: 0 PID: 5962 Comm: syz-executor392 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 47.507289][ T5962] Tainted: [B]=BAD_PAGE [ 47.508369][ T5962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 47.511156][ T5962] Call Trace: [ 47.512015][ T5962] [ 47.512774][ T5962] dump_stack_lvl+0x16c/0x1f0 [ 47.514310][ T5962] bad_page+0xb3/0x1f0 [ 47.515674][ T5962] ? __pfx_bad_page+0x10/0x10 [ 47.516857][ T5962] ? page_bad_reason+0x9d/0x1e0 [ 47.518129][ T5962] free_unref_page+0x657/0xdc0 [ 47.519392][ T5962] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 47.521318][ T5962] ? __phys_addr+0xc6/0x150 [ 47.522720][ T5962] skb_free_head+0xa0/0x1d0 [ 47.523961][ T5962] skb_release_data+0x560/0x730 [ 47.525398][ T5962] sk_skb_reason_drop+0x129/0x1a0 [ 47.526993][ T5962] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 47.528800][ T5962] ? kernel_text_address+0x8d/0x100 [ 47.530247][ T5962] ? hlock_class+0x4e/0x130 [ 47.531452][ T5962] ? __lock_acquire+0x163e/0x3ce0 [ 47.532916][ T5962] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 47.535078][ T5962] ? hlock_class+0x4e/0x130 [ 47.536587][ T5962] ? __lock_acquire+0xbdd/0x3ce0 [ 47.538215][ T5962] ? __pfx___lock_acquire+0x10/0x10 [ 47.539541][ T5962] __netif_receive_skb_list_core+0x357/0x950 [ 47.541067][ T5962] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 47.542741][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 47.544128][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 47.545785][ T5962] ? lock_acquire+0x2f/0xb0 [ 47.546970][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 47.548872][ T5962] netif_receive_skb_list_internal+0x753/0xdb0 [ 47.551008][ T5962] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 47.553128][ T5962] ? __pfx_eth_type_trans+0x10/0x10 [ 47.554929][ T5962] ? __build_skb_around+0x278/0x3b0 [ 47.556688][ T5962] netif_receive_skb_list+0x4f/0x4a0 [ 47.558304][ T5962] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 47.560243][ T5962] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 47.562087][ T5962] ? bpf_test_timer_continue+0x150/0x3d0 [ 47.563706][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 47.565106][ T5962] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 47.566655][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 47.568326][ T5962] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 47.570131][ T5962] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 47.571857][ T5962] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 47.573363][ T5962] ? 0xffffffffa00045c0 [ 47.574673][ T5962] ? 0xffffffffa00045c0 [ 47.575959][ T5962] ? 0xffffffffa00045c0 [ 47.577142][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 47.578853][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 47.580293][ T5962] ? lock_acquire+0x2f/0xb0 [ 47.581645][ T5962] ? __fget_files+0x40/0x3f0 [ 47.582852][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 47.584376][ T5962] ? fput+0x30/0x390 [ 47.585379][ T5962] ? __bpf_prog_get+0xa0/0x290 [ 47.586620][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 47.588150][ T5962] __sys_bpf+0xfc6/0x49a0 [ 47.589415][ T5962] ? find_held_lock+0x2d/0x110 [ 47.590979][ T5962] ? __pfx___sys_bpf+0x10/0x10 [ 47.592337][ T5962] ? __might_fault+0x13b/0x190 [ 47.593683][ T5962] ? __pfx_lock_release+0x10/0x10 [ 47.595118][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 47.596591][ T5962] ? lock_acquire+0x2f/0xb0 [ 47.597972][ T5962] ? __might_fault+0xe3/0x190 [ 47.599448][ T5962] ? xfd_validate_state+0x5d/0x180 [ 47.600972][ T5962] ? rcu_is_watching+0x12/0xc0 [ 47.602198][ T5962] __x64_sys_bpf+0x78/0xc0 [ 47.603387][ T5962] ? lockdep_hardirqs_on+0x7c/0x110 [ 47.604695][ T5962] do_syscall_64+0xcd/0x250 [ 47.605823][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.607353][ T5962] RIP: 0033:0x7f1b5711ee99 [ 47.608505][ T5962] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 47.613382][ T5962] RSP: 002b:00007f1b570d9228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 47.615512][ T5962] RAX: ffffffffffffffda RBX: 00007f1b571a9328 RCX: 00007f1b5711ee99 [ 47.617569][ T5962] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 47.619609][ T5962] RBP: 00007f1b571a9320 R08: 00007f1b570d96c0 R09: 00007f1b570d96c0 [ 47.621613][ T5962] R10: 00007f1b570d96c0 R11: 0000000000000246 R12: 00007f1b57176074 [ 47.623584][ T5962] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffed9b8fc98 [ 47.625753][ T5962] [ 47.626782][ T5962] BUG: Bad page state in process syz-executor392 pfn:20bf2 [ 47.628804][ T5962] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888020bf2000 pfn:0x20bf2 [ 47.631611][ T5962] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 47.634046][ T5962] raw: 00fff00000000000 dead000000000040 ffff888106115000 0000000000000000 [ 47.636294][ T5962] raw: ffff888020bf2000 0000000000000001 00000000ffffffff 0000000000000000 [ 47.638583][ T5962] page dumped because: page_pool leak [ 47.640032][ T5962] page_owner tracks the page as allocated [ 47.641564][ T5962] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5962, tgid 5958 (syz-executor392), ts 44238954570, free_ts 44054466216 [ 47.646231][ T5962] post_alloc_hook+0x2d1/0x350 [ 47.647642][ T5962] get_page_from_freelist+0x101e/0x3070 [ 47.649375][ T5962] __alloc_pages_noprof+0x223/0x25a0 [ 47.650933][ T5962] alloc_pages_bulk_noprof+0x77c/0x1110 [ 47.652410][ T5962] __page_pool_alloc_pages_slow+0x18f/0x770 [ 47.654268][ T5962] page_pool_alloc_netmem+0xc4/0x160 [ 47.655779][ T5962] page_pool_alloc_pages+0x1a/0x60 [ 47.657258][ T5962] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 47.658911][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 47.660267][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 47.661607][ T5962] __sys_bpf+0xfc6/0x49a0 [ 47.662724][ T5962] __x64_sys_bpf+0x78/0xc0 [ 47.663839][ T5962] do_syscall_64+0xcd/0x250 [ 47.664979][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.666453][ T5962] page last free pid 24 tgid 24 stack trace: [ 47.668347][ T5962] free_unref_page+0x5f4/0xdc0 [ 47.669745][ T5962] __folio_put+0x30d/0x3d0 [ 47.671266][ T5962] free_page_and_swap_cache+0x249/0x2c0 [ 47.673142][ T5962] tlb_remove_table_rcu+0x89/0xe0 [ 47.674774][ T5962] rcu_core+0x79d/0x14d0 [ 47.676176][ T5962] handle_softirqs+0x213/0x8f0 [ 47.677381][ T5962] run_ksoftirqd+0x3a/0x60 [ 47.678559][ T5962] smpboot_thread_fn+0x661/0xa30 [ 47.679901][ T5962] kthread+0x2c1/0x3a0 [ 47.680922][ T5962] ret_from_fork+0x45/0x80 [ 47.682069][ T5962] ret_from_fork_asm+0x1a/0x30 [ 47.683275][ T5962] Modules linked in: [ 47.684310][ T5962] CPU: 2 UID: 0 PID: 5962 Comm: syz-executor392 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 47.687377][ T5962] Tainted: [B]=BAD_PAGE [ 47.688721][ T5962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 47.691984][ T5962] Call Trace: [ 47.693174][ T5962] [ 47.694227][ T5962] dump_stack_lvl+0x16c/0x1f0 [ 47.695854][ T5962] bad_page+0xb3/0x1f0 [ 47.697066][ T5962] ? __pfx_bad_page+0x10/0x10 [ 47.698682][ T5962] ? page_bad_reason+0x9d/0x1e0 [ 47.700357][ T5962] free_unref_page+0x657/0xdc0 [ 47.701867][ T5962] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 47.703854][ T5962] ? __phys_addr+0xc6/0x150 [ 47.705281][ T5962] skb_free_head+0xa0/0x1d0 [ 47.706673][ T5962] skb_release_data+0x560/0x730 [ 47.707975][ T5962] sk_skb_reason_drop+0x129/0x1a0 [ 47.709311][ T5962] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 47.711072][ T5962] ? kernel_text_address+0x8d/0x100 [ 47.712870][ T5962] ? hlock_class+0x4e/0x130 [ 47.714521][ T5962] ? __lock_acquire+0x163e/0x3ce0 [ 47.716355][ T5962] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 47.718342][ T5962] ? hlock_class+0x4e/0x130 [ 47.719609][ T5962] ? __lock_acquire+0xbdd/0x3ce0 [ 47.720967][ T5962] ? __pfx___lock_acquire+0x10/0x10 [ 47.722534][ T5962] __netif_receive_skb_list_core+0x357/0x950 [ 47.724359][ T5962] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 47.726092][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 47.727449][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 47.729124][ T5962] ? lock_acquire+0x2f/0xb0 [ 47.730615][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 47.732742][ T5962] netif_receive_skb_list_internal+0x753/0xdb0 [ 47.734550][ T5962] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 47.736662][ T5962] ? __pfx_eth_type_trans+0x10/0x10 [ 47.738299][ T5962] ? __build_skb_around+0x278/0x3b0 [ 47.740116][ T5962] netif_receive_skb_list+0x4f/0x4a0 [ 47.741801][ T5962] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 47.743825][ T5962] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 47.746163][ T5962] ? bpf_test_timer_continue+0x150/0x3d0 [ 47.748079][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 47.749880][ T5962] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 47.752188][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 47.754024][ T5962] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 47.756157][ T5962] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 47.757634][ T5962] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 47.759132][ T5962] ? 0xffffffffa00045c0 [ 47.760266][ T5962] ? 0xffffffffa00045c0 [ 47.761590][ T5962] ? 0xffffffffa00045c0 [ 47.762873][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 47.764579][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 47.766043][ T5962] ? lock_acquire+0x2f/0xb0 [ 47.767203][ T5962] ? __fget_files+0x40/0x3f0 [ 47.768688][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 47.770397][ T5962] ? fput+0x30/0x390 [ 47.771496][ T5962] ? __bpf_prog_get+0xa0/0x290 [ 47.772884][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 47.774508][ T5962] __sys_bpf+0xfc6/0x49a0 [ 47.775764][ T5962] ? find_held_lock+0x2d/0x110 [ 47.777091][ T5962] ? __pfx___sys_bpf+0x10/0x10 [ 47.778459][ T5962] ? __might_fault+0x13b/0x190 [ 47.779857][ T5962] ? __pfx_lock_release+0x10/0x10 [ 47.781181][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 47.782646][ T5962] ? lock_acquire+0x2f/0xb0 [ 47.783929][ T5962] ? __might_fault+0xe3/0x190 [ 47.785376][ T5962] ? xfd_validate_state+0x5d/0x180 [ 47.786754][ T5962] ? rcu_is_watching+0x12/0xc0 [ 47.788153][ T5962] __x64_sys_bpf+0x78/0xc0 [ 47.789495][ T5962] ? lockdep_hardirqs_on+0x7c/0x110 [ 47.791166][ T5962] do_syscall_64+0xcd/0x250 [ 47.792910][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.794579][ T5962] RIP: 0033:0x7f1b5711ee99 [ 47.795773][ T5962] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 47.800751][ T5962] RSP: 002b:00007f1b570d9228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 47.802854][ T5962] RAX: ffffffffffffffda RBX: 00007f1b571a9328 RCX: 00007f1b5711ee99 [ 47.804872][ T5962] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 47.806839][ T5962] RBP: 00007f1b571a9320 R08: 00007f1b570d96c0 R09: 00007f1b570d96c0 [ 47.808865][ T5962] R10: 00007f1b570d96c0 R11: 0000000000000246 R12: 00007f1b57176074 [ 47.811026][ T5962] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffed9b8fc98 [ 47.813408][ T5962] [ 47.814436][ T5962] BUG: Bad page state in process syz-executor392 pfn:26bb2 [ 47.816518][ T5962] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888026bb2f00 pfn:0x26bb2 [ 47.819284][ T5962] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 47.821127][ T5962] raw: 00fff00000000000 dead000000000040 ffff888106115000 0000000000000000 [ 47.823377][ T5962] raw: ffff888026bb2f00 0000000000000001 00000000ffffffff 0000000000000000 [ 47.825508][ T5962] page dumped because: page_pool leak [ 47.826872][ T5962] page_owner tracks the page as allocated [ 47.828269][ T5962] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5962, tgid 5958 (syz-executor392), ts 44238947412, free_ts 44054469543 [ 47.833316][ T5962] post_alloc_hook+0x2d1/0x350 [ 47.834613][ T5962] get_page_from_freelist+0x101e/0x3070 [ 47.836266][ T5962] __alloc_pages_noprof+0x223/0x25a0 [ 47.838043][ T5962] alloc_pages_bulk_noprof+0x77c/0x1110 [ 47.840025][ T5962] __page_pool_alloc_pages_slow+0x18f/0x770 [ 47.841755][ T5962] page_pool_alloc_netmem+0xc4/0x160 [ 47.843391][ T5962] page_pool_alloc_pages+0x1a/0x60 [ 47.844902][ T5962] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 47.846470][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 47.847890][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 47.849557][ T5962] __sys_bpf+0xfc6/0x49a0 [ 47.850782][ T5962] __x64_sys_bpf+0x78/0xc0 [ 47.852206][ T5962] do_syscall_64+0xcd/0x250 [ 47.853745][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.855536][ T5962] page last free pid 24 tgid 24 stack trace: [ 47.857216][ T5962] free_unref_page+0x5f4/0xdc0 [ 47.858538][ T5962] __folio_put+0x30d/0x3d0 [ 47.859777][ T5962] free_page_and_swap_cache+0x249/0x2c0 [ 47.861256][ T5962] tlb_remove_table_rcu+0x89/0xe0 [ 47.862682][ T5962] rcu_core+0x79d/0x14d0 [ 47.864003][ T5962] handle_softirqs+0x213/0x8f0 [ 47.865388][ T5962] run_ksoftirqd+0x3a/0x60 [ 47.867108][ T5962] smpboot_thread_fn+0x661/0xa30 [ 47.868599][ T5962] kthread+0x2c1/0x3a0 [ 47.869786][ T5962] ret_from_fork+0x45/0x80 [ 47.871090][ T5962] ret_from_fork_asm+0x1a/0x30 [ 47.872645][ T5962] Modules linked in: [ 47.873796][ T5962] CPU: 2 UID: 0 PID: 5962 Comm: syz-executor392 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 47.877253][ T5962] Tainted: [B]=BAD_PAGE [ 47.878342][ T5962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 47.881050][ T5962] Call Trace: [ 47.881928][ T5962] [ 47.882696][ T5962] dump_stack_lvl+0x16c/0x1f0 [ 47.883916][ T5962] bad_page+0xb3/0x1f0 [ 47.884946][ T5962] ? __pfx_bad_page+0x10/0x10 [ 47.886143][ T5962] ? page_bad_reason+0x9d/0x1e0 [ 47.887415][ T5962] free_unref_page+0x657/0xdc0 [ 47.888660][ T5962] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 47.890518][ T5962] ? __phys_addr+0xc6/0x150 [ 47.891823][ T5962] skb_free_head+0xa0/0x1d0 [ 47.893057][ T5962] skb_release_data+0x560/0x730 [ 47.894512][ T5962] sk_skb_reason_drop+0x129/0x1a0 [ 47.895930][ T5962] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 47.897637][ T5962] ? kernel_text_address+0x8d/0x100 [ 47.899044][ T5962] ? hlock_class+0x4e/0x130 [ 47.900360][ T5962] ? __lock_acquire+0x163e/0x3ce0 [ 47.901760][ T5962] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 47.903731][ T5962] ? hlock_class+0x4e/0x130 [ 47.904999][ T5962] ? __lock_acquire+0xbdd/0x3ce0 [ 47.906354][ T5962] ? __pfx___lock_acquire+0x10/0x10 [ 47.907750][ T5962] __netif_receive_skb_list_core+0x357/0x950 [ 47.909335][ T5962] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 47.911418][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 47.912894][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 47.914696][ T5962] ? lock_acquire+0x2f/0xb0 [ 47.915937][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 47.917622][ T5962] netif_receive_skb_list_internal+0x753/0xdb0 [ 47.919295][ T5962] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 47.921066][ T5962] ? __pfx_eth_type_trans+0x10/0x10 [ 47.922568][ T5962] ? __build_skb_around+0x278/0x3b0 [ 47.923974][ T5962] netif_receive_skb_list+0x4f/0x4a0 [ 47.925339][ T5962] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 47.926940][ T5962] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 47.928629][ T5962] ? bpf_test_timer_continue+0x150/0x3d0 [ 47.930264][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 47.931972][ T5962] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 47.934002][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 47.935782][ T5962] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 47.937409][ T5962] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 47.939104][ T5962] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 47.940692][ T5962] ? 0xffffffffa00045c0 [ 47.941938][ T5962] ? 0xffffffffa00045c0 [ 47.943143][ T5962] ? 0xffffffffa00045c0 [ 47.944333][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 47.946029][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 47.947530][ T5962] ? lock_acquire+0x2f/0xb0 [ 47.948703][ T5962] ? __fget_files+0x40/0x3f0 [ 47.949889][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 47.951393][ T5962] ? fput+0x30/0x390 [ 47.952398][ T5962] ? __bpf_prog_get+0xa0/0x290 [ 47.953613][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 47.955403][ T5962] __sys_bpf+0xfc6/0x49a0 [ 47.956908][ T5962] ? find_held_lock+0x2d/0x110 [ 47.958326][ T5962] ? __pfx___sys_bpf+0x10/0x10 [ 47.959713][ T5962] ? __might_fault+0x13b/0x190 [ 47.960894][ T5962] ? __pfx_lock_release+0x10/0x10 [ 47.962179][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 47.963519][ T5962] ? lock_acquire+0x2f/0xb0 [ 47.964658][ T5962] ? __might_fault+0xe3/0x190 [ 47.965900][ T5962] ? xfd_validate_state+0x5d/0x180 [ 47.967273][ T5962] ? rcu_is_watching+0x12/0xc0 [ 47.968574][ T5962] __x64_sys_bpf+0x78/0xc0 [ 47.969743][ T5962] ? lockdep_hardirqs_on+0x7c/0x110 [ 47.971167][ T5962] do_syscall_64+0xcd/0x250 [ 47.972812][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.974688][ T5962] RIP: 0033:0x7f1b5711ee99 [ 47.975997][ T5962] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 47.981201][ T5962] RSP: 002b:00007f1b570d9228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 47.983395][ T5962] RAX: ffffffffffffffda RBX: 00007f1b571a9328 RCX: 00007f1b5711ee99 [ 47.985534][ T5962] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 47.987755][ T5962] RBP: 00007f1b571a9320 R08: 00007f1b570d96c0 R09: 00007f1b570d96c0 [ 47.990279][ T5962] R10: 00007f1b570d96c0 R11: 0000000000000246 R12: 00007f1b57176074 [ 47.992461][ T5962] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffed9b8fc98 [ 47.994827][ T5962] [ 47.995785][ T5962] BUG: Bad page state in process syz-executor392 pfn:2fea6 [ 47.997860][ T5962] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2fea6 [ 48.000124][ T5962] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 48.002089][ T5962] raw: 00fff00000000000 dead000000000040 ffff888106115000 0000000000000000 [ 48.004367][ T5962] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 48.006845][ T5962] page dumped because: page_pool leak [ 48.008201][ T5962] page_owner tracks the page as allocated [ 48.009793][ T5962] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5962, tgid 5958 (syz-executor392), ts 44238940082, free_ts 44054473136 [ 48.014811][ T5962] post_alloc_hook+0x2d1/0x350 [ 48.016635][ T5962] get_page_from_freelist+0x101e/0x3070 [ 48.018119][ T5962] __alloc_pages_noprof+0x223/0x25a0 [ 48.019514][ T5962] alloc_pages_bulk_noprof+0x77c/0x1110 [ 48.020940][ T5962] __page_pool_alloc_pages_slow+0x18f/0x770 [ 48.022633][ T5962] page_pool_alloc_netmem+0xc4/0x160 [ 48.024114][ T5962] page_pool_alloc_pages+0x1a/0x60 [ 48.025441][ T5962] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 48.027073][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 48.028619][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 48.030117][ T5962] __sys_bpf+0xfc6/0x49a0 [ 48.031386][ T5962] __x64_sys_bpf+0x78/0xc0 [ 48.032718][ T5962] do_syscall_64+0xcd/0x250 [ 48.033971][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.035729][ T5962] page last free pid 24 tgid 24 stack trace: [ 48.037431][ T5962] free_unref_page+0x5f4/0xdc0 [ 48.038662][ T5962] __folio_put+0x30d/0x3d0 [ 48.039905][ T5962] free_page_and_swap_cache+0x249/0x2c0 [ 48.041373][ T5962] tlb_remove_table_rcu+0x89/0xe0 [ 48.042813][ T5962] rcu_core+0x79d/0x14d0 [ 48.044008][ T5962] handle_softirqs+0x213/0x8f0 [ 48.045240][ T5962] run_ksoftirqd+0x3a/0x60 [ 48.046399][ T5962] smpboot_thread_fn+0x661/0xa30 [ 48.047741][ T5962] kthread+0x2c1/0x3a0 [ 48.048947][ T5962] ret_from_fork+0x45/0x80 [ 48.050186][ T5962] ret_from_fork_asm+0x1a/0x30 [ 48.051453][ T5962] Modules linked in: [ 48.052795][ T5962] CPU: 2 UID: 0 PID: 5962 Comm: syz-executor392 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 48.056038][ T5962] Tainted: [B]=BAD_PAGE [ 48.057178][ T5962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 48.060182][ T5962] Call Trace: [ 48.061118][ T5962] [ 48.061992][ T5962] dump_stack_lvl+0x16c/0x1f0 [ 48.063451][ T5962] bad_page+0xb3/0x1f0 [ 48.064583][ T5962] ? __pfx_bad_page+0x10/0x10 [ 48.065858][ T5962] ? page_bad_reason+0x9d/0x1e0 [ 48.067138][ T5962] free_unref_page+0x657/0xdc0 [ 48.068390][ T5962] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 48.069938][ T5962] ? __phys_addr+0xc6/0x150 [ 48.071119][ T5962] skb_free_head+0xa0/0x1d0 [ 48.072402][ T5962] skb_release_data+0x560/0x730 [ 48.073683][ T5962] sk_skb_reason_drop+0x129/0x1a0 [ 48.075186][ T5962] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 48.077061][ T5962] ? kernel_text_address+0x8d/0x100 [ 48.078576][ T5962] ? hlock_class+0x4e/0x130 [ 48.079925][ T5962] ? __lock_acquire+0x163e/0x3ce0 [ 48.081537][ T5962] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 48.083971][ T5962] ? hlock_class+0x4e/0x130 [ 48.085468][ T5962] ? __lock_acquire+0xbdd/0x3ce0 [ 48.087091][ T5962] ? __pfx___lock_acquire+0x10/0x10 [ 48.088580][ T5962] __netif_receive_skb_list_core+0x357/0x950 [ 48.090347][ T5962] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 48.092524][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 48.094119][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 48.095959][ T5962] ? lock_acquire+0x2f/0xb0 [ 48.097152][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 48.098746][ T5962] netif_receive_skb_list_internal+0x753/0xdb0 [ 48.100346][ T5962] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 48.102060][ T5962] ? __pfx_eth_type_trans+0x10/0x10 [ 48.103426][ T5962] ? __build_skb_around+0x278/0x3b0 [ 48.104796][ T5962] netif_receive_skb_list+0x4f/0x4a0 [ 48.106194][ T5962] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 48.107986][ T5962] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 48.109702][ T5962] ? bpf_test_timer_continue+0x150/0x3d0 [ 48.111161][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 48.112600][ T5962] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 48.114149][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 48.115730][ T5962] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 48.117280][ T5962] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 48.119063][ T5962] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 48.120530][ T5962] ? 0xffffffffa00045c0 [ 48.121636][ T5962] ? 0xffffffffa00045c0 [ 48.122733][ T5962] ? 0xffffffffa00045c0 [ 48.123837][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 48.125415][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 48.126865][ T5962] ? lock_acquire+0x2f/0xb0 [ 48.128089][ T5962] ? __fget_files+0x40/0x3f0 [ 48.129449][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 48.131097][ T5962] ? fput+0x30/0x390 [ 48.132288][ T5962] ? __bpf_prog_get+0xa0/0x290 [ 48.133766][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 48.135618][ T5962] __sys_bpf+0xfc6/0x49a0 [ 48.136992][ T5962] ? find_held_lock+0x2d/0x110 [ 48.138621][ T5962] ? __pfx___sys_bpf+0x10/0x10 [ 48.140115][ T5962] ? __might_fault+0x13b/0x190 [ 48.141509][ T5962] ? __pfx_lock_release+0x10/0x10 [ 48.142845][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 48.144205][ T5962] ? lock_acquire+0x2f/0xb0 [ 48.145394][ T5962] ? __might_fault+0xe3/0x190 [ 48.146645][ T5962] ? xfd_validate_state+0x5d/0x180 [ 48.147988][ T5962] ? rcu_is_watching+0x12/0xc0 [ 48.149357][ T5962] __x64_sys_bpf+0x78/0xc0 [ 48.150535][ T5962] ? lockdep_hardirqs_on+0x7c/0x110 [ 48.152149][ T5962] do_syscall_64+0xcd/0x250 [ 48.153405][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.154933][ T5962] RIP: 0033:0x7f1b5711ee99 [ 48.156109][ T5962] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 48.161143][ T5962] RSP: 002b:00007f1b570d9228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 48.163452][ T5962] RAX: ffffffffffffffda RBX: 00007f1b571a9328 RCX: 00007f1b5711ee99 [ 48.165545][ T5962] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 48.167626][ T5962] RBP: 00007f1b571a9320 R08: 00007f1b570d96c0 R09: 00007f1b570d96c0 [ 48.169700][ T5962] R10: 00007f1b570d96c0 R11: 0000000000000246 R12: 00007f1b57176074 [ 48.171831][ T5962] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffed9b8fc98 [ 48.173994][ T5962] [ 48.175094][ T5962] BUG: Bad page state in process syz-executor392 pfn:20ecb [ 48.177317][ T5962] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20ecb [ 48.179880][ T5962] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 48.181944][ T5962] raw: 00fff00000000000 dead000000000040 ffff888106115000 0000000000000000 [ 48.184149][ T5962] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 48.186322][ T5962] page dumped because: page_pool leak [ 48.187736][ T5962] page_owner tracks the page as allocated [ 48.189572][ T5962] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5962, tgid 5958 (syz-executor392), ts 44238932683, free_ts 44054476655 [ 48.194254][ T5962] post_alloc_hook+0x2d1/0x350 [ 48.195538][ T5962] get_page_from_freelist+0x101e/0x3070 [ 48.196996][ T5962] __alloc_pages_noprof+0x223/0x25a0 [ 48.198403][ T5962] alloc_pages_bulk_noprof+0x77c/0x1110 [ 48.199890][ T5962] __page_pool_alloc_pages_slow+0x18f/0x770 [ 48.201493][ T5962] page_pool_alloc_netmem+0xc4/0x160 [ 48.202969][ T5962] page_pool_alloc_pages+0x1a/0x60 [ 48.204469][ T5962] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 48.206067][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 48.207418][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 48.208820][ T5962] __sys_bpf+0xfc6/0x49a0 [ 48.210038][ T5962] __x64_sys_bpf+0x78/0xc0 [ 48.211322][ T5962] do_syscall_64+0xcd/0x250 [ 48.212562][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.214095][ T5962] page last free pid 24 tgid 24 stack trace: [ 48.215749][ T5962] free_unref_page+0x5f4/0xdc0 [ 48.217113][ T5962] __folio_put+0x30d/0x3d0 [ 48.218451][ T5962] free_page_and_swap_cache+0x249/0x2c0 [ 48.219958][ T5962] tlb_remove_table_rcu+0x89/0xe0 [ 48.221358][ T5962] rcu_core+0x79d/0x14d0 [ 48.222627][ T5962] handle_softirqs+0x213/0x8f0 [ 48.223902][ T5962] run_ksoftirqd+0x3a/0x60 [ 48.225073][ T5962] smpboot_thread_fn+0x661/0xa30 [ 48.226432][ T5962] kthread+0x2c1/0x3a0 [ 48.227536][ T5962] ret_from_fork+0x45/0x80 [ 48.229217][ T5962] ret_from_fork_asm+0x1a/0x30 [ 48.230475][ T5962] Modules linked in: [ 48.231586][ T5962] CPU: 2 UID: 0 PID: 5962 Comm: syz-executor392 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 48.235082][ T5962] Tainted: [B]=BAD_PAGE [ 48.236164][ T5962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 48.239069][ T5962] Call Trace: [ 48.240038][ T5962] [ 48.240859][ T5962] dump_stack_lvl+0x16c/0x1f0 [ 48.242084][ T5962] bad_page+0xb3/0x1f0 [ 48.243151][ T5962] ? __pfx_bad_page+0x10/0x10 [ 48.244382][ T5962] ? page_bad_reason+0x9d/0x1e0 [ 48.245630][ T5962] free_unref_page+0x657/0xdc0 [ 48.246891][ T5962] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 48.248468][ T5962] ? __phys_addr+0xc6/0x150 [ 48.249723][ T5962] skb_free_head+0xa0/0x1d0 [ 48.250928][ T5962] skb_release_data+0x560/0x730 [ 48.252217][ T5962] sk_skb_reason_drop+0x129/0x1a0 [ 48.253851][ T5962] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 48.255707][ T5962] ? kernel_text_address+0x8d/0x100 [ 48.257103][ T5962] ? hlock_class+0x4e/0x130 [ 48.258348][ T5962] ? __lock_acquire+0x163e/0x3ce0 [ 48.259856][ T5962] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 48.261765][ T5962] ? hlock_class+0x4e/0x130 [ 48.262992][ T5962] ? __lock_acquire+0xbdd/0x3ce0 [ 48.264336][ T5962] ? __pfx___lock_acquire+0x10/0x10 [ 48.265726][ T5962] __netif_receive_skb_list_core+0x357/0x950 [ 48.267323][ T5962] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 48.269236][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 48.270811][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 48.272670][ T5962] ? lock_acquire+0x2f/0xb0 [ 48.273993][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 48.276086][ T5962] netif_receive_skb_list_internal+0x753/0xdb0 [ 48.277706][ T5962] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 48.279595][ T5962] ? __pfx_eth_type_trans+0x10/0x10 [ 48.280963][ T5962] ? __build_skb_around+0x278/0x3b0 [ 48.282323][ T5962] netif_receive_skb_list+0x4f/0x4a0 [ 48.283704][ T5962] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 48.285405][ T5962] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 48.287253][ T5962] ? bpf_test_timer_continue+0x150/0x3d0 [ 48.289008][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 48.290625][ T5962] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 48.292560][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 48.294576][ T5962] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 48.297213][ T5962] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 48.299110][ T5962] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 48.301358][ T5962] ? 0xffffffffa00045c0 [ 48.303024][ T5962] ? 0xffffffffa00045c0 [ 48.304356][ T5962] ? 0xffffffffa00045c0 [ 48.305600][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 48.307375][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 48.309087][ T5962] ? lock_acquire+0x2f/0xb0 [ 48.310536][ T5962] ? __fget_files+0x40/0x3f0 [ 48.313285][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 48.315090][ T5962] ? fput+0x30/0x390 [ 48.316894][ T5962] ? __bpf_prog_get+0xa0/0x290 [ 48.318260][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 48.319904][ T5962] __sys_bpf+0xfc6/0x49a0 [ 48.321446][ T5962] ? find_held_lock+0x2d/0x110 [ 48.322886][ T5962] ? __pfx___sys_bpf+0x10/0x10 [ 48.324146][ T5962] ? __might_fault+0x13b/0x190 [ 48.325365][ T5962] ? __pfx_lock_release+0x10/0x10 [ 48.326654][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 48.328123][ T5962] ? lock_acquire+0x2f/0xb0 [ 48.329377][ T5962] ? __might_fault+0xe3/0x190 [ 48.330742][ T5962] ? xfd_validate_state+0x5d/0x180 [ 48.332347][ T5962] ? rcu_is_watching+0x12/0xc0 [ 48.333740][ T5962] __x64_sys_bpf+0x78/0xc0 [ 48.335153][ T5962] ? lockdep_hardirqs_on+0x7c/0x110 [ 48.336787][ T5962] do_syscall_64+0xcd/0x250 [ 48.338176][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.340022][ T5962] RIP: 0033:0x7f1b5711ee99 [ 48.341466][ T5962] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 48.346577][ T5962] RSP: 002b:00007f1b570d9228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 48.348705][ T5962] RAX: ffffffffffffffda RBX: 00007f1b571a9328 RCX: 00007f1b5711ee99 [ 48.351175][ T5962] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 48.353579][ T5962] RBP: 00007f1b571a9320 R08: 00007f1b570d96c0 R09: 00007f1b570d96c0 [ 48.355930][ T5962] R10: 00007f1b570d96c0 R11: 0000000000000246 R12: 00007f1b57176074 [ 48.357987][ T5962] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffed9b8fc98 [ 48.360127][ T5962] [ 48.361047][ T5962] BUG: Bad page state in process syz-executor392 pfn:231ca [ 48.363000][ T5962] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x231ca [ 48.365323][ T5962] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 48.367177][ T5962] raw: 00fff00000000000 dead000000000040 ffff888106115000 0000000000000000 [ 48.369458][ T5962] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 48.371704][ T5962] page dumped because: page_pool leak [ 48.373150][ T5962] page_owner tracks the page as allocated [ 48.374646][ T5962] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5962, tgid 5958 (syz-executor392), ts 44238925303, free_ts 44054480126 [ 48.379087][ T5962] post_alloc_hook+0x2d1/0x350 [ 48.380385][ T5962] get_page_from_freelist+0x101e/0x3070 [ 48.381878][ T5962] __alloc_pages_noprof+0x223/0x25a0 [ 48.383275][ T5962] alloc_pages_bulk_noprof+0x77c/0x1110 [ 48.384752][ T5962] __page_pool_alloc_pages_slow+0x18f/0x770 [ 48.386316][ T5962] page_pool_alloc_netmem+0xc4/0x160 [ 48.387728][ T5962] page_pool_alloc_pages+0x1a/0x60 [ 48.389072][ T5962] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 48.390700][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 48.392468][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 48.393862][ T5962] __sys_bpf+0xfc6/0x49a0 [ 48.395107][ T5962] __x64_sys_bpf+0x78/0xc0 [ 48.396570][ T5962] do_syscall_64+0xcd/0x250 [ 48.398105][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.399713][ T5962] page last free pid 24 tgid 24 stack trace: [ 48.401233][ T5962] free_unref_page+0x5f4/0xdc0 [ 48.402556][ T5962] __folio_put+0x30d/0x3d0 [ 48.403728][ T5962] free_page_and_swap_cache+0x249/0x2c0 [ 48.405197][ T5962] tlb_remove_table_rcu+0x89/0xe0 [ 48.406475][ T5962] rcu_core+0x79d/0x14d0 [ 48.407595][ T5962] handle_softirqs+0x213/0x8f0 [ 48.409007][ T5962] run_ksoftirqd+0x3a/0x60 [ 48.410317][ T5962] smpboot_thread_fn+0x661/0xa30 [ 48.411943][ T5962] kthread+0x2c1/0x3a0 [ 48.413129][ T5962] ret_from_fork+0x45/0x80 [ 48.414491][ T5962] ret_from_fork_asm+0x1a/0x30 [ 48.415990][ T5962] Modules linked in: [ 48.417236][ T5962] CPU: 2 UID: 0 PID: 5962 Comm: syz-executor392 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 48.420582][ T5962] Tainted: [B]=BAD_PAGE [ 48.421693][ T5962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 48.424500][ T5962] Call Trace: [ 48.425345][ T5962] [ 48.426120][ T5962] dump_stack_lvl+0x16c/0x1f0 [ 48.427372][ T5962] bad_page+0xb3/0x1f0 [ 48.428430][ T5962] ? __pfx_bad_page+0x10/0x10 [ 48.429930][ T5962] ? page_bad_reason+0x9d/0x1e0 [ 48.431203][ T5962] free_unref_page+0x657/0xdc0 [ 48.432443][ T5962] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 48.433980][ T5962] ? __phys_addr+0xc6/0x150 [ 48.435173][ T5962] skb_free_head+0xa0/0x1d0 [ 48.436589][ T5962] skb_release_data+0x560/0x730 [ 48.437811][ T5962] sk_skb_reason_drop+0x129/0x1a0 [ 48.439040][ T5962] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 48.440746][ T5962] ? kernel_text_address+0x8d/0x100 [ 48.442070][ T5962] ? hlock_class+0x4e/0x130 [ 48.443241][ T5962] ? __lock_acquire+0x163e/0x3ce0 [ 48.444555][ T5962] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 48.446389][ T5962] ? hlock_class+0x4e/0x130 [ 48.447665][ T5962] ? __lock_acquire+0xbdd/0x3ce0 [ 48.449131][ T5962] ? __pfx___lock_acquire+0x10/0x10 [ 48.450709][ T5962] __netif_receive_skb_list_core+0x357/0x950 [ 48.452886][ T5962] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 48.454803][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 48.456157][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 48.457794][ T5962] ? lock_acquire+0x2f/0xb0 [ 48.459159][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 48.460862][ T5962] netif_receive_skb_list_internal+0x753/0xdb0 [ 48.462437][ T5962] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 48.464133][ T5962] ? __pfx_eth_type_trans+0x10/0x10 [ 48.465459][ T5962] ? __build_skb_around+0x278/0x3b0 [ 48.466794][ T5962] netif_receive_skb_list+0x4f/0x4a0 [ 48.468194][ T5962] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 48.469812][ T5962] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 48.471668][ T5962] ? bpf_test_timer_continue+0x150/0x3d0 [ 48.473152][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 48.474642][ T5962] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 48.476313][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 48.478187][ T5962] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 48.480167][ T5962] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 48.482105][ T5962] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 48.483457][ T5962] ? 0xffffffffa00045c0 [ 48.484538][ T5962] ? 0xffffffffa00045c0 [ 48.485602][ T5962] ? 0xffffffffa00045c0 [ 48.486627][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 48.488200][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 48.489679][ T5962] ? lock_acquire+0x2f/0xb0 [ 48.491133][ T5962] ? __fget_files+0x40/0x3f0 [ 48.492722][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 48.494544][ T5962] ? fput+0x30/0x390 [ 48.495771][ T5962] ? __bpf_prog_get+0xa0/0x290 [ 48.497079][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 48.498906][ T5962] __sys_bpf+0xfc6/0x49a0 [ 48.500061][ T5962] ? find_held_lock+0x2d/0x110 [ 48.501351][ T5962] ? __pfx___sys_bpf+0x10/0x10 [ 48.502604][ T5962] ? __might_fault+0x13b/0x190 [ 48.503895][ T5962] ? __pfx_lock_release+0x10/0x10 [ 48.505181][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 48.506545][ T5962] ? lock_acquire+0x2f/0xb0 [ 48.507775][ T5962] ? __might_fault+0xe3/0x190 [ 48.509044][ T5962] ? xfd_validate_state+0x5d/0x180 [ 48.510591][ T5962] ? rcu_is_watching+0x12/0xc0 [ 48.512287][ T5962] __x64_sys_bpf+0x78/0xc0 [ 48.513532][ T5962] ? lockdep_hardirqs_on+0x7c/0x110 [ 48.515199][ T5962] do_syscall_64+0xcd/0x250 [ 48.516526][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.518238][ T5962] RIP: 0033:0x7f1b5711ee99 [ 48.519434][ T5962] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 48.524802][ T5962] RSP: 002b:00007f1b570d9228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 48.527019][ T5962] RAX: ffffffffffffffda RBX: 00007f1b571a9328 RCX: 00007f1b5711ee99 [ 48.529122][ T5962] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 48.531197][ T5962] RBP: 00007f1b571a9320 R08: 00007f1b570d96c0 R09: 00007f1b570d96c0 [ 48.533254][ T5962] R10: 00007f1b570d96c0 R11: 0000000000000246 R12: 00007f1b57176074 [ 48.535335][ T5962] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffed9b8fc98 [ 48.537436][ T5962] [ 48.538639][ T5962] BUG: Bad page state in process syz-executor392 pfn:231cb [ 48.540591][ T5962] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x231cb [ 48.542930][ T5962] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 48.544805][ T5962] raw: 00fff00000000000 dead000000000040 ffff888106115000 0000000000000000 [ 48.547064][ T5962] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 48.549365][ T5962] page dumped because: page_pool leak [ 48.551604][ T5962] page_owner tracks the page as allocated [ 48.553315][ T5962] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5962, tgid 5958 (syz-executor392), ts 44238917944, free_ts 44054483128 [ 48.558315][ T5962] post_alloc_hook+0x2d1/0x350 [ 48.559659][ T5962] get_page_from_freelist+0x101e/0x3070 [ 48.561070][ T5962] __alloc_pages_noprof+0x223/0x25a0 [ 48.562645][ T5962] alloc_pages_bulk_noprof+0x77c/0x1110 [ 48.564367][ T5962] __page_pool_alloc_pages_slow+0x18f/0x770 [ 48.565928][ T5962] page_pool_alloc_netmem+0xc4/0x160 [ 48.567327][ T5962] page_pool_alloc_pages+0x1a/0x60 [ 48.569431][ T5962] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 48.571132][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 48.573208][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 48.575007][ T5962] __sys_bpf+0xfc6/0x49a0 [ 48.576220][ T5962] __x64_sys_bpf+0x78/0xc0 [ 48.577388][ T5962] do_syscall_64+0xcd/0x250 [ 48.578600][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.580172][ T5962] page last free pid 24 tgid 24 stack trace: [ 48.581787][ T5962] free_unref_page+0x5f4/0xdc0 [ 48.583140][ T5962] __folio_put+0x30d/0x3d0 [ 48.584355][ T5962] free_page_and_swap_cache+0x249/0x2c0 [ 48.585807][ T5962] tlb_remove_table_rcu+0x89/0xe0 [ 48.587139][ T5962] rcu_core+0x79d/0x14d0 [ 48.588270][ T5962] handle_softirqs+0x213/0x8f0 [ 48.589563][ T5962] run_ksoftirqd+0x3a/0x60 [ 48.590791][ T5962] smpboot_thread_fn+0x661/0xa30 [ 48.592200][ T5962] kthread+0x2c1/0x3a0 [ 48.593292][ T5962] ret_from_fork+0x45/0x80 [ 48.594480][ T5962] ret_from_fork_asm+0x1a/0x30 [ 48.595776][ T5962] Modules linked in: [ 48.596827][ T5962] CPU: 2 UID: 0 PID: 5962 Comm: syz-executor392 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 48.600153][ T5962] Tainted: [B]=BAD_PAGE [ 48.601250][ T5962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 48.604096][ T5962] Call Trace: [ 48.605007][ T5962] [ 48.605800][ T5962] dump_stack_lvl+0x16c/0x1f0 [ 48.607081][ T5962] bad_page+0xb3/0x1f0 [ 48.608181][ T5962] ? __pfx_bad_page+0x10/0x10 [ 48.609457][ T5962] ? page_bad_reason+0x9d/0x1e0 [ 48.610740][ T5962] free_unref_page+0x657/0xdc0 [ 48.611995][ T5962] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 48.613573][ T5962] ? __phys_addr+0xc6/0x150 [ 48.614791][ T5962] skb_free_head+0xa0/0x1d0 [ 48.616013][ T5962] skb_release_data+0x560/0x730 [ 48.617313][ T5962] sk_skb_reason_drop+0x129/0x1a0 [ 48.618590][ T5962] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 48.620363][ T5962] ? kernel_text_address+0x8d/0x100 [ 48.621733][ T5962] ? hlock_class+0x4e/0x130 [ 48.622938][ T5962] ? __lock_acquire+0x163e/0x3ce0 [ 48.624269][ T5962] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 48.626082][ T5962] ? hlock_class+0x4e/0x130 [ 48.627281][ T5962] ? __lock_acquire+0xbdd/0x3ce0 [ 48.628590][ T5962] ? __pfx___lock_acquire+0x10/0x10 [ 48.629968][ T5962] __netif_receive_skb_list_core+0x357/0x950 [ 48.631555][ T5962] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 48.633291][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 48.634672][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 48.636361][ T5962] ? lock_acquire+0x2f/0xb0 [ 48.637558][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 48.639215][ T5962] netif_receive_skb_list_internal+0x753/0xdb0 [ 48.640857][ T5962] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 48.642611][ T5962] ? __pfx_eth_type_trans+0x10/0x10 [ 48.644002][ T5962] ? __build_skb_around+0x278/0x3b0 [ 48.645378][ T5962] netif_receive_skb_list+0x4f/0x4a0 [ 48.646773][ T5962] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 48.648442][ T5962] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 48.650176][ T5962] ? bpf_test_timer_continue+0x150/0x3d0 [ 48.651660][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 48.653062][ T5962] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 48.655969][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 48.657734][ T5962] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 48.659531][ T5962] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 48.661142][ T5962] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 48.662558][ T5962] ? 0xffffffffa00045c0 [ 48.663736][ T5962] ? 0xffffffffa00045c0 [ 48.664839][ T5962] ? 0xffffffffa00045c0 [ 48.665953][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 48.667534][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 48.669084][ T5962] ? lock_acquire+0x2f/0xb0 [ 48.670341][ T5962] ? __fget_files+0x40/0x3f0 [ 48.672148][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 48.673817][ T5962] ? fput+0x30/0x390 [ 48.674927][ T5962] ? __bpf_prog_get+0xa0/0x290 [ 48.676277][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 48.677820][ T5962] __sys_bpf+0xfc6/0x49a0 [ 48.678960][ T5962] ? find_held_lock+0x2d/0x110 [ 48.680279][ T5962] ? __pfx___sys_bpf+0x10/0x10 [ 48.681768][ T5962] ? __might_fault+0x13b/0x190 [ 48.683255][ T5962] ? __pfx_lock_release+0x10/0x10 [ 48.684631][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 48.686340][ T5962] ? lock_acquire+0x2f/0xb0 [ 48.687885][ T5962] ? __might_fault+0xe3/0x190 [ 48.689391][ T5962] ? xfd_validate_state+0x5d/0x180 [ 48.691060][ T5962] ? rcu_is_watching+0x12/0xc0 [ 48.693165][ T5962] __x64_sys_bpf+0x78/0xc0 [ 48.694551][ T5962] ? lockdep_hardirqs_on+0x7c/0x110 [ 48.695973][ T5962] do_syscall_64+0xcd/0x250 [ 48.697383][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.699901][ T5962] RIP: 0033:0x7f1b5711ee99 [ 48.701439][ T5962] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 48.708016][ T5962] RSP: 002b:00007f1b570d9228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 48.711417][ T5962] RAX: ffffffffffffffda RBX: 00007f1b571a9328 RCX: 00007f1b5711ee99 [ 48.714069][ T5962] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 48.717308][ T5962] RBP: 00007f1b571a9320 R08: 00007f1b570d96c0 R09: 00007f1b570d96c0 [ 48.719900][ T5962] R10: 00007f1b570d96c0 R11: 0000000000000246 R12: 00007f1b57176074 [ 48.722401][ T5962] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffed9b8fc98 [ 48.724959][ T5962] [ 48.726169][ T5962] BUG: Bad page state in process syz-executor392 pfn:2805e [ 48.728894][ T5962] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2805e [ 48.732188][ T5962] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 48.734394][ T5962] raw: 00fff00000000000 dead000000000040 ffff888106115000 0000000000000000 [ 48.737104][ T5962] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 48.740276][ T5962] page dumped because: page_pool leak [ 48.742642][ T5962] page_owner tracks the page as allocated [ 48.744923][ T5962] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5962, tgid 5958 (syz-executor392), ts 44238911156, free_ts 44054486205 [ 48.750112][ T5962] post_alloc_hook+0x2d1/0x350 [ 48.752060][ T5962] get_page_from_freelist+0x101e/0x3070 [ 48.753929][ T5962] __alloc_pages_noprof+0x223/0x25a0 [ 48.755316][ T5962] alloc_pages_bulk_noprof+0x77c/0x1110 [ 48.756771][ T5962] __page_pool_alloc_pages_slow+0x18f/0x770 [ 48.758320][ T5962] page_pool_alloc_netmem+0xc4/0x160 [ 48.759880][ T5962] page_pool_alloc_pages+0x1a/0x60 [ 48.761646][ T5962] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 48.764150][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 48.766222][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 48.768068][ T5962] __sys_bpf+0xfc6/0x49a0 [ 48.769422][ T5962] __x64_sys_bpf+0x78/0xc0 [ 48.770664][ T5962] do_syscall_64+0xcd/0x250 [ 48.772248][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.774088][ T5962] page last free pid 24 tgid 24 stack trace: [ 48.775817][ T5962] free_unref_page+0x5f4/0xdc0 [ 48.777183][ T5962] __folio_put+0x30d/0x3d0 [ 48.778443][ T5962] free_page_and_swap_cache+0x249/0x2c0 [ 48.780121][ T5962] tlb_remove_table_rcu+0x89/0xe0 [ 48.781488][ T5962] rcu_core+0x79d/0x14d0 [ 48.782749][ T5962] handle_softirqs+0x213/0x8f0 [ 48.784048][ T5962] run_ksoftirqd+0x3a/0x60 [ 48.785240][ T5962] smpboot_thread_fn+0x661/0xa30 [ 48.786564][ T5962] kthread+0x2c1/0x3a0 [ 48.787669][ T5962] ret_from_fork+0x45/0x80 [ 48.788867][ T5962] ret_from_fork_asm+0x1a/0x30 [ 48.790311][ T5962] Modules linked in: [ 48.791456][ T5962] CPU: 2 UID: 0 PID: 5962 Comm: syz-executor392 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 48.795093][ T5962] Tainted: [B]=BAD_PAGE [ 48.796444][ T5962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 48.799437][ T5962] Call Trace: [ 48.800537][ T5962] [ 48.801520][ T5962] dump_stack_lvl+0x16c/0x1f0 [ 48.802991][ T5962] bad_page+0xb3/0x1f0 [ 48.804114][ T5962] ? __pfx_bad_page+0x10/0x10 [ 48.805393][ T5962] ? page_bad_reason+0x9d/0x1e0 [ 48.806701][ T5962] free_unref_page+0x657/0xdc0 [ 48.808170][ T5962] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 48.810042][ T5962] ? __phys_addr+0xc6/0x150 [ 48.811318][ T5962] skb_free_head+0xa0/0x1d0 [ 48.813173][ T5962] skb_release_data+0x560/0x730 [ 48.815853][ T5962] sk_skb_reason_drop+0x129/0x1a0 [ 48.817399][ T5962] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 48.819381][ T5962] ? kernel_text_address+0x8d/0x100 [ 48.820918][ T5962] ? hlock_class+0x4e/0x130 [ 48.822146][ T5962] ? __lock_acquire+0x163e/0x3ce0 [ 48.823488][ T5962] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 48.825457][ T5962] ? hlock_class+0x4e/0x130 [ 48.826684][ T5962] ? __lock_acquire+0xbdd/0x3ce0 [ 48.828007][ T5962] ? __pfx___lock_acquire+0x10/0x10 [ 48.829515][ T5962] __netif_receive_skb_list_core+0x357/0x950 [ 48.831340][ T5962] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 48.833480][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 48.835077][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 48.836818][ T5962] ? lock_acquire+0x2f/0xb0 [ 48.838046][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 48.840029][ T5962] netif_receive_skb_list_internal+0x753/0xdb0 [ 48.841830][ T5962] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 48.843807][ T5962] ? __pfx_eth_type_trans+0x10/0x10 [ 48.845301][ T5962] ? __build_skb_around+0x278/0x3b0 [ 48.846841][ T5962] netif_receive_skb_list+0x4f/0x4a0 [ 48.848366][ T5962] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 48.850184][ T5962] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 48.851956][ T5962] ? bpf_test_timer_continue+0x150/0x3d0 [ 48.853457][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 48.854906][ T5962] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 48.856451][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 48.858023][ T5962] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 48.859712][ T5962] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 48.861238][ T5962] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 48.862691][ T5962] ? 0xffffffffa00045c0 [ 48.863853][ T5962] ? 0xffffffffa00045c0 [ 48.864900][ T5962] ? 0xffffffffa00045c0 [ 48.866035][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 48.867711][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 48.869654][ T5962] ? lock_acquire+0x2f/0xb0 [ 48.871999][ T5962] ? __fget_files+0x40/0x3f0 [ 48.873710][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 48.875716][ T5962] ? fput+0x30/0x390 [ 48.877473][ T5962] ? __bpf_prog_get+0xa0/0x290 [ 48.879057][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 48.880769][ T5962] __sys_bpf+0xfc6/0x49a0 [ 48.881964][ T5962] ? find_held_lock+0x2d/0x110 [ 48.883241][ T5962] ? __pfx___sys_bpf+0x10/0x10 [ 48.884493][ T5962] ? __might_fault+0x13b/0x190 [ 48.885734][ T5962] ? __pfx_lock_release+0x10/0x10 [ 48.887028][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 48.888416][ T5962] ? lock_acquire+0x2f/0xb0 [ 48.889766][ T5962] ? __might_fault+0xe3/0x190 [ 48.891028][ T5962] ? xfd_validate_state+0x5d/0x180 [ 48.892379][ T5962] ? rcu_is_watching+0x12/0xc0 [ 48.893602][ T5962] __x64_sys_bpf+0x78/0xc0 [ 48.894778][ T5962] ? lockdep_hardirqs_on+0x7c/0x110 [ 48.896067][ T5962] do_syscall_64+0xcd/0x250 [ 48.897243][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.898889][ T5962] RIP: 0033:0x7f1b5711ee99 [ 48.900203][ T5962] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 48.905818][ T5962] RSP: 002b:00007f1b570d9228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 48.908069][ T5962] RAX: ffffffffffffffda RBX: 00007f1b571a9328 RCX: 00007f1b5711ee99 [ 48.911530][ T5962] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 48.914175][ T5962] RBP: 00007f1b571a9320 R08: 00007f1b570d96c0 R09: 00007f1b570d96c0 [ 48.917533][ T5962] R10: 00007f1b570d96c0 R11: 0000000000000246 R12: 00007f1b57176074 [ 48.920002][ T5962] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffed9b8fc98 [ 48.922084][ T5962] [ 48.923010][ T5962] BUG: Bad page state in process syz-executor392 pfn:2eb83 [ 48.924873][ T5962] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000002 pfn:0x2eb83 [ 48.927524][ T5962] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 48.929314][ T5962] raw: 00fff00000000000 dead000000000040 ffff888106115000 0000000000000000 [ 48.932602][ T5962] raw: ffff888000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 48.934994][ T5962] page dumped because: page_pool leak [ 48.936632][ T5962] page_owner tracks the page as allocated [ 48.938341][ T5962] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5962, tgid 5958 (syz-executor392), ts 44238904609, free_ts 44054489248 [ 48.943033][ T5962] post_alloc_hook+0x2d1/0x350 [ 48.944290][ T5962] get_page_from_freelist+0x101e/0x3070 [ 48.945735][ T5962] __alloc_pages_noprof+0x223/0x25a0 [ 48.947157][ T5962] alloc_pages_bulk_noprof+0x77c/0x1110 [ 48.949170][ T5962] __page_pool_alloc_pages_slow+0x18f/0x770 [ 48.950895][ T5962] page_pool_alloc_netmem+0xc4/0x160 [ 48.952673][ T5962] page_pool_alloc_pages+0x1a/0x60 [ 48.954206][ T5962] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 48.956246][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 48.957773][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 48.959218][ T5962] __sys_bpf+0xfc6/0x49a0 [ 48.960407][ T5962] __x64_sys_bpf+0x78/0xc0 [ 48.961705][ T5962] do_syscall_64+0xcd/0x250 [ 48.962978][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.964584][ T5962] page last free pid 24 tgid 24 stack trace: [ 48.966158][ T5962] free_unref_page+0x5f4/0xdc0 [ 48.967433][ T5962] __folio_put+0x30d/0x3d0 [ 48.968646][ T5962] free_page_and_swap_cache+0x249/0x2c0 [ 48.970104][ T5962] tlb_remove_table_rcu+0x89/0xe0 [ 48.971449][ T5962] rcu_core+0x79d/0x14d0 [ 48.972643][ T5962] handle_softirqs+0x213/0x8f0 [ 48.973937][ T5962] run_ksoftirqd+0x3a/0x60 [ 48.975148][ T5962] smpboot_thread_fn+0x661/0xa30 [ 48.976820][ T5962] kthread+0x2c1/0x3a0 [ 48.977979][ T5962] ret_from_fork+0x45/0x80 [ 48.979399][ T5962] ret_from_fork_asm+0x1a/0x30 [ 48.980651][ T5962] Modules linked in: [ 48.981765][ T5962] CPU: 2 UID: 0 PID: 5962 Comm: syz-executor392 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 48.985279][ T5962] Tainted: [B]=BAD_PAGE [ 48.986463][ T5962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 48.989326][ T5962] Call Trace: [ 48.990224][ T5962] [ 48.991031][ T5962] dump_stack_lvl+0x16c/0x1f0 [ 48.992780][ T5962] bad_page+0xb3/0x1f0 [ 48.993873][ T5962] ? __pfx_bad_page+0x10/0x10 [ 48.995133][ T5962] ? page_bad_reason+0x9d/0x1e0 [ 48.996561][ T5962] free_unref_page+0x657/0xdc0 [ 48.997980][ T5962] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 48.999751][ T5962] ? __phys_addr+0xc6/0x150 [ 49.001140][ T5962] skb_free_head+0xa0/0x1d0 [ 49.002536][ T5962] skb_release_data+0x560/0x730 [ 49.004031][ T5962] sk_skb_reason_drop+0x129/0x1a0 [ 49.005515][ T5962] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 49.007293][ T5962] ? kernel_text_address+0x8d/0x100 [ 49.008692][ T5962] ? hlock_class+0x4e/0x130 [ 49.009898][ T5962] ? __lock_acquire+0x163e/0x3ce0 [ 49.011325][ T5962] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 49.013256][ T5962] ? hlock_class+0x4e/0x130 [ 49.014471][ T5962] ? __lock_acquire+0xbdd/0x3ce0 [ 49.015834][ T5962] ? __pfx___lock_acquire+0x10/0x10 [ 49.017212][ T5962] __netif_receive_skb_list_core+0x357/0x950 [ 49.018809][ T5962] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 49.020581][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 49.022154][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 49.023807][ T5962] ? lock_acquire+0x2f/0xb0 [ 49.025017][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 49.026697][ T5962] netif_receive_skb_list_internal+0x753/0xdb0 [ 49.028383][ T5962] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 49.030424][ T5962] ? __pfx_eth_type_trans+0x10/0x10 [ 49.031965][ T5962] ? __build_skb_around+0x278/0x3b0 [ 49.033499][ T5962] netif_receive_skb_list+0x4f/0x4a0 [ 49.035714][ T5962] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 49.038233][ T5962] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 49.040115][ T5962] ? bpf_test_timer_continue+0x150/0x3d0 [ 49.041677][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 49.043183][ T5962] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 49.044774][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 49.046335][ T5962] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 49.048034][ T5962] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 49.049631][ T5962] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 49.051139][ T5962] ? 0xffffffffa00045c0 [ 49.052283][ T5962] ? 0xffffffffa00045c0 [ 49.053659][ T5962] ? 0xffffffffa00045c0 [ 49.054751][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 49.056370][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 49.057879][ T5962] ? lock_acquire+0x2f/0xb0 [ 49.059133][ T5962] ? __fget_files+0x40/0x3f0 [ 49.060516][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 49.062061][ T5962] ? fput+0x30/0x390 [ 49.063108][ T5962] ? __bpf_prog_get+0xa0/0x290 [ 49.064444][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 49.065977][ T5962] __sys_bpf+0xfc6/0x49a0 [ 49.067212][ T5962] ? find_held_lock+0x2d/0x110 [ 49.068606][ T5962] ? __pfx___sys_bpf+0x10/0x10 [ 49.069965][ T5962] ? __might_fault+0x13b/0x190 [ 49.071326][ T5962] ? __pfx_lock_release+0x10/0x10 [ 49.072766][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 49.074202][ T5962] ? lock_acquire+0x2f/0xb0 [ 49.075422][ T5962] ? __might_fault+0xe3/0x190 [ 49.076622][ T5962] ? xfd_validate_state+0x5d/0x180 [ 49.077926][ T5962] ? rcu_is_watching+0x12/0xc0 [ 49.079159][ T5962] __x64_sys_bpf+0x78/0xc0 [ 49.080312][ T5962] ? lockdep_hardirqs_on+0x7c/0x110 [ 49.081646][ T5962] do_syscall_64+0xcd/0x250 [ 49.082976][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.084543][ T5962] RIP: 0033:0x7f1b5711ee99 [ 49.085680][ T5962] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 49.090571][ T5962] RSP: 002b:00007f1b570d9228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 49.092918][ T5962] RAX: ffffffffffffffda RBX: 00007f1b571a9328 RCX: 00007f1b5711ee99 [ 49.095460][ T5962] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 49.097787][ T5962] RBP: 00007f1b571a9320 R08: 00007f1b570d96c0 R09: 00007f1b570d96c0 [ 49.100222][ T5962] R10: 00007f1b570d96c0 R11: 0000000000000246 R12: 00007f1b57176074 [ 49.102224][ T5962] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffed9b8fc98 [ 49.104343][ T5962] [ 49.105244][ T5962] BUG: Bad page state in process syz-executor392 pfn:20bf0 [ 49.107067][ T5962] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888020bf6600 pfn:0x20bf0 [ 49.109785][ T5962] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 49.111687][ T5962] raw: 00fff00000000000 dead000000000040 ffff888106115000 0000000000000000 [ 49.113998][ T5962] raw: ffff888020bf6600 0000000000000001 00000000ffffffff 0000000000000000 [ 49.116266][ T5962] page dumped because: page_pool leak [ 49.117667][ T5962] page_owner tracks the page as allocated [ 49.119171][ T5962] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5962, tgid 5958 (syz-executor392), ts 44238897562, free_ts 44054492361 [ 49.123930][ T5962] post_alloc_hook+0x2d1/0x350 [ 49.125375][ T5962] get_page_from_freelist+0x101e/0x3070 [ 49.127162][ T5962] __alloc_pages_noprof+0x223/0x25a0 [ 49.128807][ T5962] alloc_pages_bulk_noprof+0x77c/0x1110 [ 49.130383][ T5962] __page_pool_alloc_pages_slow+0x18f/0x770 [ 49.132148][ T5962] page_pool_alloc_netmem+0xc4/0x160 [ 49.133613][ T5962] page_pool_alloc_pages+0x1a/0x60 [ 49.134982][ T5962] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 49.136591][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 49.137990][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 49.139361][ T5962] __sys_bpf+0xfc6/0x49a0 [ 49.140477][ T5962] __x64_sys_bpf+0x78/0xc0 [ 49.141665][ T5962] do_syscall_64+0xcd/0x250 [ 49.142923][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.144500][ T5962] page last free pid 24 tgid 24 stack trace: [ 49.146098][ T5962] free_unref_page+0x5f4/0xdc0 [ 49.147392][ T5962] __folio_put+0x30d/0x3d0 [ 49.148595][ T5962] free_page_and_swap_cache+0x249/0x2c0 [ 49.150206][ T5962] tlb_remove_table_rcu+0x89/0xe0 [ 49.151752][ T5962] rcu_core+0x79d/0x14d0 [ 49.152951][ T5962] handle_softirqs+0x213/0x8f0 [ 49.154208][ T5962] run_ksoftirqd+0x3a/0x60 [ 49.155397][ T5962] smpboot_thread_fn+0x661/0xa30 [ 49.156724][ T5962] kthread+0x2c1/0x3a0 [ 49.157818][ T5962] ret_from_fork+0x45/0x80 [ 49.158992][ T5962] ret_from_fork_asm+0x1a/0x30 [ 49.160283][ T5962] Modules linked in: [ 49.161316][ T5962] CPU: 2 UID: 0 PID: 5962 Comm: syz-executor392 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 49.164372][ T5962] Tainted: [B]=BAD_PAGE [ 49.165668][ T5962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 49.168649][ T5962] Call Trace: [ 49.169641][ T5962] [ 49.170546][ T5962] dump_stack_lvl+0x16c/0x1f0 [ 49.171862][ T5962] bad_page+0xb3/0x1f0 [ 49.173122][ T5962] ? __pfx_bad_page+0x10/0x10 [ 49.174436][ T5962] ? page_bad_reason+0x9d/0x1e0 [ 49.176009][ T5962] free_unref_page+0x657/0xdc0 [ 49.177711][ T5962] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 49.179412][ T5962] ? __phys_addr+0xc6/0x150 [ 49.180673][ T5962] skb_free_head+0xa0/0x1d0 [ 49.181968][ T5962] skb_release_data+0x560/0x730 [ 49.183215][ T5962] sk_skb_reason_drop+0x129/0x1a0 [ 49.184535][ T5962] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 49.186236][ T5962] ? kernel_text_address+0x8d/0x100 [ 49.187573][ T5962] ? hlock_class+0x4e/0x130 [ 49.188872][ T5962] ? __lock_acquire+0x163e/0x3ce0 [ 49.190226][ T5962] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 49.192162][ T5962] ? hlock_class+0x4e/0x130 [ 49.193611][ T5962] ? __lock_acquire+0xbdd/0x3ce0 [ 49.195012][ T5962] ? __pfx___lock_acquire+0x10/0x10 [ 49.196618][ T5962] __netif_receive_skb_list_core+0x357/0x950 [ 49.198587][ T5962] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 49.200614][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 49.202194][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 49.204093][ T5962] ? lock_acquire+0x2f/0xb0 [ 49.205429][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 49.207364][ T5962] netif_receive_skb_list_internal+0x753/0xdb0 [ 49.209175][ T5962] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 49.211678][ T5962] ? __pfx_eth_type_trans+0x10/0x10 [ 49.213709][ T5962] ? __build_skb_around+0x278/0x3b0 [ 49.215976][ T5962] netif_receive_skb_list+0x4f/0x4a0 [ 49.217819][ T5962] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 49.220062][ T5962] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 49.222120][ T5962] ? bpf_test_timer_continue+0x150/0x3d0 [ 49.224022][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 49.225586][ T5962] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 49.227648][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 49.229833][ T5962] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 49.232332][ T5962] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 49.234773][ T5962] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 49.237070][ T5962] ? 0xffffffffa00045c0 [ 49.238283][ T5962] ? 0xffffffffa00045c0 [ 49.239936][ T5962] ? 0xffffffffa00045c0 [ 49.241396][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 49.243248][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 49.244995][ T5962] ? lock_acquire+0x2f/0xb0 [ 49.246583][ T5962] ? __fget_files+0x40/0x3f0 [ 49.248149][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 49.250077][ T5962] ? fput+0x30/0x390 [ 49.251083][ T5962] ? __bpf_prog_get+0xa0/0x290 [ 49.252656][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 49.254635][ T5962] __sys_bpf+0xfc6/0x49a0 [ 49.255858][ T5962] ? find_held_lock+0x2d/0x110 [ 49.257219][ T5962] ? __pfx___sys_bpf+0x10/0x10 [ 49.258515][ T5962] ? __might_fault+0x13b/0x190 [ 49.260228][ T5962] ? __pfx_lock_release+0x10/0x10 [ 49.261787][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 49.263472][ T5962] ? lock_acquire+0x2f/0xb0 [ 49.264919][ T5962] ? __might_fault+0xe3/0x190 [ 49.266428][ T5962] ? xfd_validate_state+0x5d/0x180 [ 49.267733][ T5962] ? rcu_is_watching+0x12/0xc0 [ 49.269195][ T5962] __x64_sys_bpf+0x78/0xc0 [ 49.270496][ T5962] ? lockdep_hardirqs_on+0x7c/0x110 [ 49.271817][ T5962] do_syscall_64+0xcd/0x250 [ 49.272954][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.274386][ T5962] RIP: 0033:0x7f1b5711ee99 [ 49.275526][ T5962] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 49.280603][ T5962] RSP: 002b:00007f1b570d9228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 49.282994][ T5962] RAX: ffffffffffffffda RBX: 00007f1b571a9328 RCX: 00007f1b5711ee99 [ 49.285259][ T5962] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 49.287364][ T5962] RBP: 00007f1b571a9320 R08: 00007f1b570d96c0 R09: 00007f1b570d96c0 [ 49.289419][ T5962] R10: 00007f1b570d96c0 R11: 0000000000000246 R12: 00007f1b57176074 [ 49.291553][ T5962] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffed9b8fc98 [ 49.294016][ T5962] [ 49.295018][ T5962] BUG: Bad page state in process syz-executor392 pfn:31868 [ 49.297309][ T5962] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888031868d80 pfn:0x31868 [ 49.300420][ T5962] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 49.302307][ T5962] raw: 00fff00000000000 dead000000000040 ffff888106115000 0000000000000000 [ 49.304533][ T5962] raw: ffff888031868d80 0000000000000001 00000000ffffffff 0000000000000000 [ 49.306689][ T5962] page dumped because: page_pool leak [ 49.308309][ T5962] page_owner tracks the page as allocated [ 49.310053][ T5962] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5962, tgid 5958 (syz-executor392), ts 44238890714, free_ts 44054495726 [ 49.314586][ T5962] post_alloc_hook+0x2d1/0x350 [ 49.315891][ T5962] get_page_from_freelist+0x101e/0x3070 [ 49.317380][ T5962] __alloc_pages_noprof+0x223/0x25a0 [ 49.318887][ T5962] alloc_pages_bulk_noprof+0x77c/0x1110 [ 49.320467][ T5962] __page_pool_alloc_pages_slow+0x18f/0x770 [ 49.322164][ T5962] page_pool_alloc_netmem+0xc4/0x160 [ 49.323583][ T5962] page_pool_alloc_pages+0x1a/0x60 [ 49.324977][ T5962] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 49.326600][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 49.328012][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 49.329423][ T5962] __sys_bpf+0xfc6/0x49a0 [ 49.330539][ T5962] __x64_sys_bpf+0x78/0xc0 [ 49.331965][ T5962] do_syscall_64+0xcd/0x250 [ 49.333175][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.334921][ T5962] page last free pid 24 tgid 24 stack trace: [ 49.336972][ T5962] free_unref_page+0x5f4/0xdc0 [ 49.338349][ T5962] __folio_put+0x30d/0x3d0 [ 49.339616][ T5962] free_page_and_swap_cache+0x249/0x2c0 [ 49.341165][ T5962] tlb_remove_table_rcu+0x89/0xe0 [ 49.342554][ T5962] rcu_core+0x79d/0x14d0 [ 49.343687][ T5962] handle_softirqs+0x213/0x8f0 [ 49.344941][ T5962] run_ksoftirqd+0x3a/0x60 [ 49.346095][ T5962] smpboot_thread_fn+0x661/0xa30 [ 49.347436][ T5962] kthread+0x2c1/0x3a0 [ 49.348524][ T5962] ret_from_fork+0x45/0x80 [ 49.349814][ T5962] ret_from_fork_asm+0x1a/0x30 [ 49.351076][ T5962] Modules linked in: [ 49.352163][ T5962] CPU: 2 UID: 0 PID: 5962 Comm: syz-executor392 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 49.355340][ T5962] Tainted: [B]=BAD_PAGE [ 49.356399][ T5962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 49.359113][ T5962] Call Trace: [ 49.359998][ T5962] [ 49.360764][ T5962] dump_stack_lvl+0x16c/0x1f0 [ 49.362075][ T5962] bad_page+0xb3/0x1f0 [ 49.363083][ T5962] ? __pfx_bad_page+0x10/0x10 [ 49.364330][ T5962] ? page_bad_reason+0x9d/0x1e0 [ 49.365608][ T5962] free_unref_page+0x657/0xdc0 [ 49.366842][ T5962] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 49.368399][ T5962] ? __phys_addr+0xc6/0x150 [ 49.369669][ T5962] skb_free_head+0xa0/0x1d0 [ 49.370899][ T5962] skb_release_data+0x560/0x730 [ 49.372201][ T5962] sk_skb_reason_drop+0x129/0x1a0 [ 49.373522][ T5962] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 49.375744][ T5962] ? kernel_text_address+0x8d/0x100 [ 49.377230][ T5962] ? hlock_class+0x4e/0x130 [ 49.378705][ T5962] ? __lock_acquire+0x163e/0x3ce0 [ 49.380508][ T5962] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 49.383116][ T5962] ? hlock_class+0x4e/0x130 [ 49.384302][ T5962] ? __lock_acquire+0xbdd/0x3ce0 [ 49.385572][ T5962] ? __pfx___lock_acquire+0x10/0x10 [ 49.386915][ T5962] __netif_receive_skb_list_core+0x357/0x950 [ 49.388556][ T5962] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 49.390522][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 49.391956][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 49.393813][ T5962] ? lock_acquire+0x2f/0xb0 [ 49.395236][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 49.397326][ T5962] netif_receive_skb_list_internal+0x753/0xdb0 [ 49.399031][ T5962] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 49.400757][ T5962] ? __pfx_eth_type_trans+0x10/0x10 [ 49.402048][ T5962] ? __build_skb_around+0x278/0x3b0 [ 49.403391][ T5962] netif_receive_skb_list+0x4f/0x4a0 [ 49.404695][ T5962] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 49.406491][ T5962] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 49.408288][ T5962] ? bpf_test_timer_continue+0x150/0x3d0 [ 49.409810][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 49.411137][ T5962] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 49.412634][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 49.414186][ T5962] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 49.415827][ T5962] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 49.417420][ T5962] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 49.419011][ T5962] ? 0xffffffffa00045c0 [ 49.420217][ T5962] ? 0xffffffffa00045c0 [ 49.421346][ T5962] ? 0xffffffffa00045c0 [ 49.422406][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 49.423927][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 49.425309][ T5962] ? lock_acquire+0x2f/0xb0 [ 49.426457][ T5962] ? __fget_files+0x40/0x3f0 [ 49.427652][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 49.429349][ T5962] ? fput+0x30/0x390 [ 49.430408][ T5962] ? __bpf_prog_get+0xa0/0x290 [ 49.431768][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 49.433500][ T5962] __sys_bpf+0xfc6/0x49a0 [ 49.434554][ T5962] ? find_held_lock+0x2d/0x110 [ 49.435749][ T5962] ? __pfx___sys_bpf+0x10/0x10 [ 49.436996][ T5962] ? __might_fault+0x13b/0x190 [ 49.438336][ T5962] ? __pfx_lock_release+0x10/0x10 [ 49.439724][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 49.441101][ T5962] ? lock_acquire+0x2f/0xb0 [ 49.442462][ T5962] ? __might_fault+0xe3/0x190 [ 49.443687][ T5962] ? xfd_validate_state+0x5d/0x180 [ 49.445057][ T5962] ? rcu_is_watching+0x12/0xc0 [ 49.446321][ T5962] __x64_sys_bpf+0x78/0xc0 [ 49.447447][ T5962] ? lockdep_hardirqs_on+0x7c/0x110 [ 49.448773][ T5962] do_syscall_64+0xcd/0x250 [ 49.450162][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.451909][ T5962] RIP: 0033:0x7f1b5711ee99 [ 49.453209][ T5962] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 49.458623][ T5962] RSP: 002b:00007f1b570d9228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 49.460809][ T5962] RAX: ffffffffffffffda RBX: 00007f1b571a9328 RCX: 00007f1b5711ee99 [ 49.462840][ T5962] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 49.464843][ T5962] RBP: 00007f1b571a9320 R08: 00007f1b570d96c0 R09: 00007f1b570d96c0 [ 49.467084][ T5962] R10: 00007f1b570d96c0 R11: 0000000000000246 R12: 00007f1b57176074 [ 49.469517][ T5962] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffed9b8fc98 [ 49.471765][ T5962] [ 49.472765][ T5962] BUG: Bad page state in process syz-executor392 pfn:255af [ 49.474933][ T5962] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000002 pfn:0x255af [ 49.477831][ T5962] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 49.480039][ T5962] raw: 00fff00000000000 dead000000000040 ffff888106115000 0000000000000000 [ 49.482554][ T5962] raw: ffff888000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 49.484835][ T5962] page dumped because: page_pool leak [ 49.486124][ T5962] page_owner tracks the page as allocated [ 49.487641][ T5962] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5962, tgid 5958 (syz-executor392), ts 44238884725, free_ts 44054499362 [ 49.492444][ T5962] post_alloc_hook+0x2d1/0x350 [ 49.493736][ T5962] get_page_from_freelist+0x101e/0x3070 [ 49.495192][ T5962] __alloc_pages_noprof+0x223/0x25a0 [ 49.496729][ T5962] alloc_pages_bulk_noprof+0x77c/0x1110 [ 49.498339][ T5962] __page_pool_alloc_pages_slow+0x18f/0x770 [ 49.500029][ T5962] page_pool_alloc_netmem+0xc4/0x160 [ 49.501543][ T5962] page_pool_alloc_pages+0x1a/0x60 [ 49.503325][ T5962] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 49.505022][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 49.506420][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 49.507874][ T5962] __sys_bpf+0xfc6/0x49a0 [ 49.509035][ T5962] __x64_sys_bpf+0x78/0xc0 [ 49.510226][ T5962] do_syscall_64+0xcd/0x250 [ 49.511444][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.513379][ T5962] page last free pid 24 tgid 24 stack trace: [ 49.514971][ T5962] free_unref_page+0x5f4/0xdc0 [ 49.516385][ T5962] __folio_put+0x30d/0x3d0 [ 49.517630][ T5962] free_page_and_swap_cache+0x249/0x2c0 [ 49.519094][ T5962] tlb_remove_table_rcu+0x89/0xe0 [ 49.520473][ T5962] rcu_core+0x79d/0x14d0 [ 49.521629][ T5962] handle_softirqs+0x213/0x8f0 [ 49.522985][ T5962] run_ksoftirqd+0x3a/0x60 [ 49.524201][ T5962] smpboot_thread_fn+0x661/0xa30 [ 49.525823][ T5962] kthread+0x2c1/0x3a0 [ 49.526976][ T5962] ret_from_fork+0x45/0x80 [ 49.528444][ T5962] ret_from_fork_asm+0x1a/0x30 [ 49.529788][ T5962] Modules linked in: [ 49.530941][ T5962] CPU: 2 UID: 0 PID: 5962 Comm: syz-executor392 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 49.534956][ T5962] Tainted: [B]=BAD_PAGE [ 49.536186][ T5962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 49.539128][ T5962] Call Trace: [ 49.540082][ T5962] [ 49.541117][ T5962] dump_stack_lvl+0x16c/0x1f0 [ 49.542402][ T5962] bad_page+0xb3/0x1f0 [ 49.543512][ T5962] ? __pfx_bad_page+0x10/0x10 [ 49.544790][ T5962] ? page_bad_reason+0x9d/0x1e0 [ 49.546111][ T5962] free_unref_page+0x657/0xdc0 [ 49.547396][ T5962] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 49.549199][ T5962] ? __phys_addr+0xc6/0x150 [ 49.550588][ T5962] skb_free_head+0xa0/0x1d0 [ 49.551890][ T5962] skb_release_data+0x560/0x730 [ 49.553560][ T5962] sk_skb_reason_drop+0x129/0x1a0 [ 49.554996][ T5962] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 49.557152][ T5962] ? kernel_text_address+0x8d/0x100 [ 49.558539][ T5962] ? hlock_class+0x4e/0x130 [ 49.559845][ T5962] ? __lock_acquire+0x163e/0x3ce0 [ 49.561421][ T5962] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 49.563529][ T5962] ? hlock_class+0x4e/0x130 [ 49.564926][ T5962] ? __lock_acquire+0xbdd/0x3ce0 [ 49.566458][ T5962] ? __pfx___lock_acquire+0x10/0x10 [ 49.568036][ T5962] __netif_receive_skb_list_core+0x357/0x950 [ 49.570405][ T5962] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 49.572130][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 49.573782][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 49.575868][ T5962] ? lock_acquire+0x2f/0xb0 [ 49.577211][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 49.578989][ T5962] netif_receive_skb_list_internal+0x753/0xdb0 [ 49.580731][ T5962] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 49.582519][ T5962] ? __pfx_eth_type_trans+0x10/0x10 [ 49.584025][ T5962] ? __build_skb_around+0x278/0x3b0 [ 49.585448][ T5962] netif_receive_skb_list+0x4f/0x4a0 [ 49.586873][ T5962] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 49.588762][ T5962] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 49.590713][ T5962] ? bpf_test_timer_continue+0x150/0x3d0 [ 49.592254][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 49.593674][ T5962] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 49.595355][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 49.597226][ T5962] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 49.599126][ T5962] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 49.601192][ T5962] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 49.602788][ T5962] ? 0xffffffffa00045c0 [ 49.603961][ T5962] ? 0xffffffffa00045c0 [ 49.605066][ T5962] ? 0xffffffffa00045c0 [ 49.606171][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 49.607850][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 49.609380][ T5962] ? lock_acquire+0x2f/0xb0 [ 49.610705][ T5962] ? __fget_files+0x40/0x3f0 [ 49.611947][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 49.613521][ T5962] ? fput+0x30/0x390 [ 49.614579][ T5962] ? __bpf_prog_get+0xa0/0x290 [ 49.615899][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 49.617472][ T5962] __sys_bpf+0xfc6/0x49a0 [ 49.618651][ T5962] ? find_held_lock+0x2d/0x110 [ 49.619966][ T5962] ? __pfx___sys_bpf+0x10/0x10 [ 49.621352][ T5962] ? __might_fault+0x13b/0x190 [ 49.622624][ T5962] ? __pfx_lock_release+0x10/0x10 [ 49.624070][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 49.625557][ T5962] ? lock_acquire+0x2f/0xb0 [ 49.626928][ T5962] ? __might_fault+0xe3/0x190 [ 49.628286][ T5962] ? xfd_validate_state+0x5d/0x180 [ 49.630018][ T5962] ? rcu_is_watching+0x12/0xc0 [ 49.631690][ T5962] __x64_sys_bpf+0x78/0xc0 [ 49.633326][ T5962] ? lockdep_hardirqs_on+0x7c/0x110 [ 49.634781][ T5962] do_syscall_64+0xcd/0x250 [ 49.636048][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.637706][ T5962] RIP: 0033:0x7f1b5711ee99 [ 49.639052][ T5962] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 49.644372][ T5962] RSP: 002b:00007f1b570d9228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 49.646571][ T5962] RAX: ffffffffffffffda RBX: 00007f1b571a9328 RCX: 00007f1b5711ee99 [ 49.648879][ T5962] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 49.651388][ T5962] RBP: 00007f1b571a9320 R08: 00007f1b570d96c0 R09: 00007f1b570d96c0 [ 49.653777][ T5962] R10: 00007f1b570d96c0 R11: 0000000000000246 R12: 00007f1b57176074 [ 49.656290][ T5962] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffed9b8fc98 [ 49.658663][ T5962] [ 49.659763][ T5962] BUG: Bad page state in process syz-executor392 pfn:349c6 [ 49.661879][ T5962] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x349c6 [ 49.664301][ T5962] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 49.666202][ T5962] raw: 00fff00000000000 dead000000000040 ffff888106115000 0000000000000000 [ 49.668482][ T5962] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 49.670750][ T5962] page dumped because: page_pool leak [ 49.672236][ T5962] page_owner tracks the page as allocated [ 49.673736][ T5962] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5962, tgid 5958 (syz-executor392), ts 44238878190, free_ts 44054503052 [ 49.678206][ T5962] post_alloc_hook+0x2d1/0x350 [ 49.679467][ T5962] get_page_from_freelist+0x101e/0x3070 [ 49.680909][ T5962] __alloc_pages_noprof+0x223/0x25a0 [ 49.682333][ T5962] alloc_pages_bulk_noprof+0x77c/0x1110 [ 49.683772][ T5962] __page_pool_alloc_pages_slow+0x18f/0x770 [ 49.685356][ T5962] page_pool_alloc_netmem+0xc4/0x160 [ 49.686755][ T5962] page_pool_alloc_pages+0x1a/0x60 [ 49.688069][ T5962] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 49.689646][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 49.691003][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 49.692434][ T5962] __sys_bpf+0xfc6/0x49a0 [ 49.693567][ T5962] __x64_sys_bpf+0x78/0xc0 [ 49.694736][ T5962] do_syscall_64+0xcd/0x250 [ 49.695924][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.697414][ T5962] page last free pid 24 tgid 24 stack trace: [ 49.698967][ T5962] free_unref_page+0x5f4/0xdc0 [ 49.700199][ T5962] rcu_core+0x79d/0x14d0 [ 49.701353][ T5962] handle_softirqs+0x213/0x8f0 [ 49.702612][ T5962] run_ksoftirqd+0x3a/0x60 [ 49.703810][ T5962] smpboot_thread_fn+0x661/0xa30 [ 49.705073][ T5962] kthread+0x2c1/0x3a0 [ 49.706113][ T5962] ret_from_fork+0x45/0x80 [ 49.707232][ T5962] ret_from_fork_asm+0x1a/0x30 [ 49.708735][ T5962] Modules linked in: [ 49.709720][ T5962] CPU: 2 UID: 0 PID: 5962 Comm: syz-executor392 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 49.712822][ T5962] Tainted: [B]=BAD_PAGE [ 49.713860][ T5962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 49.716511][ T5962] Call Trace: [ 49.717345][ T5962] [ 49.718079][ T5962] dump_stack_lvl+0x16c/0x1f0 [ 49.719274][ T5962] bad_page+0xb3/0x1f0 [ 49.720343][ T5962] ? __pfx_bad_page+0x10/0x10 [ 49.721643][ T5962] ? page_bad_reason+0x9d/0x1e0 [ 49.722942][ T5962] free_unref_page+0x657/0xdc0 [ 49.724368][ T5962] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 49.725960][ T5962] ? __phys_addr+0xc6/0x150 [ 49.727132][ T5962] skb_free_head+0xa0/0x1d0 [ 49.728316][ T5962] skb_release_data+0x560/0x730 [ 49.729535][ T5962] sk_skb_reason_drop+0x129/0x1a0 [ 49.730799][ T5962] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 49.732657][ T5962] ? kernel_text_address+0x8d/0x100 [ 49.733961][ T5962] ? hlock_class+0x4e/0x130 [ 49.735084][ T5962] ? __lock_acquire+0x163e/0x3ce0 [ 49.736343][ T5962] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 49.738095][ T5962] ? hlock_class+0x4e/0x130 [ 49.739605][ T5962] ? __lock_acquire+0xbdd/0x3ce0 [ 49.740936][ T5962] ? __pfx___lock_acquire+0x10/0x10 [ 49.742300][ T5962] __netif_receive_skb_list_core+0x357/0x950 [ 49.743807][ T5962] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 49.745406][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 49.746823][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 49.748537][ T5962] ? lock_acquire+0x2f/0xb0 [ 49.749670][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 49.751381][ T5962] netif_receive_skb_list_internal+0x753/0xdb0 [ 49.753054][ T5962] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 49.754937][ T5962] ? __pfx_eth_type_trans+0x10/0x10 [ 49.756233][ T5962] ? __build_skb_around+0x278/0x3b0 [ 49.757888][ T5962] netif_receive_skb_list+0x4f/0x4a0 [ 49.759405][ T5962] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 49.761101][ T5962] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 49.762883][ T5962] ? bpf_test_timer_continue+0x150/0x3d0 [ 49.764404][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 49.765720][ T5962] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 49.767159][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 49.768629][ T5962] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 49.770287][ T5962] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 49.772309][ T5962] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 49.773986][ T5962] ? 0xffffffffa00045c0 [ 49.775162][ T5962] ? 0xffffffffa00045c0 [ 49.776231][ T5962] ? 0xffffffffa00045c0 [ 49.777366][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 49.778894][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 49.780260][ T5962] ? lock_acquire+0x2f/0xb0 [ 49.781375][ T5962] ? __fget_files+0x40/0x3f0 [ 49.782513][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 49.784271][ T5962] ? fput+0x30/0x390 [ 49.785482][ T5962] ? __bpf_prog_get+0xa0/0x290 [ 49.786728][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 49.788288][ T5962] __sys_bpf+0xfc6/0x49a0 [ 49.789394][ T5962] ? find_held_lock+0x2d/0x110 [ 49.790643][ T5962] ? __pfx___sys_bpf+0x10/0x10 [ 49.792142][ T5962] ? __might_fault+0x13b/0x190 [ 49.793446][ T5962] ? __pfx_lock_release+0x10/0x10 [ 49.794711][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 49.796034][ T5962] ? lock_acquire+0x2f/0xb0 [ 49.797213][ T5962] ? __might_fault+0xe3/0x190 [ 49.798439][ T5962] ? xfd_validate_state+0x5d/0x180 [ 49.799743][ T5962] ? rcu_is_watching+0x12/0xc0 [ 49.800968][ T5962] __x64_sys_bpf+0x78/0xc0 [ 49.802115][ T5962] ? lockdep_hardirqs_on+0x7c/0x110 [ 49.803396][ T5962] do_syscall_64+0xcd/0x250 [ 49.804533][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.806185][ T5962] RIP: 0033:0x7f1b5711ee99 [ 49.807418][ T5962] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 49.812655][ T5962] RSP: 002b:00007f1b570d9228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 49.814826][ T5962] RAX: ffffffffffffffda RBX: 00007f1b571a9328 RCX: 00007f1b5711ee99 [ 49.817193][ T5962] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 49.819439][ T5962] RBP: 00007f1b571a9320 R08: 00007f1b570d96c0 R09: 00007f1b570d96c0 [ 49.821580][ T5962] R10: 00007f1b570d96c0 R11: 0000000000000246 R12: 00007f1b57176074 [ 49.823636][ T5962] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffed9b8fc98 [ 49.825687][ T5962] [ 49.826631][ T5962] BUG: Bad page state in process syz-executor392 pfn:30b97 [ 49.828646][ T5962] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x30b97 [ 49.831168][ T5962] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 49.833099][ T5962] raw: 00fff00000000000 dead000000000040 ffff888106115000 0000000000000000 [ 49.835431][ T5962] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 49.838010][ T5962] page dumped because: page_pool leak [ 49.839612][ T5962] page_owner tracks the page as allocated [ 49.841138][ T5962] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5962, tgid 5958 (syz-executor392), ts 44238870596, free_ts 44054509840 [ 49.845768][ T5962] post_alloc_hook+0x2d1/0x350 [ 49.847068][ T5962] get_page_from_freelist+0x101e/0x3070 [ 49.848685][ T5962] __alloc_pages_noprof+0x223/0x25a0 [ 49.850344][ T5962] alloc_pages_bulk_noprof+0x77c/0x1110 [ 49.852201][ T5962] __page_pool_alloc_pages_slow+0x18f/0x770 [ 49.854526][ T5962] page_pool_alloc_netmem+0xc4/0x160 [ 49.856105][ T5962] page_pool_alloc_pages+0x1a/0x60 [ 49.857732][ T5962] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 49.859713][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 49.861138][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 49.862642][ T5962] __sys_bpf+0xfc6/0x49a0 [ 49.863790][ T5962] __x64_sys_bpf+0x78/0xc0 [ 49.864976][ T5962] do_syscall_64+0xcd/0x250 [ 49.866186][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.867770][ T5962] page last free pid 24 tgid 24 stack trace: [ 49.869360][ T5962] free_unref_page+0x5f4/0xdc0 [ 49.870626][ T5962] __folio_put+0x30d/0x3d0 [ 49.871761][ T5962] free_page_and_swap_cache+0x249/0x2c0 [ 49.873739][ T5962] tlb_remove_table_rcu+0x89/0xe0 [ 49.875161][ T5962] rcu_core+0x79d/0x14d0 [ 49.876335][ T5962] handle_softirqs+0x213/0x8f0 [ 49.877588][ T5962] run_ksoftirqd+0x3a/0x60 [ 49.878781][ T5962] smpboot_thread_fn+0x661/0xa30 [ 49.880132][ T5962] kthread+0x2c1/0x3a0 [ 49.881235][ T5962] ret_from_fork+0x45/0x80 [ 49.882501][ T5962] ret_from_fork_asm+0x1a/0x30 [ 49.883810][ T5962] Modules linked in: [ 49.884864][ T5962] CPU: 2 UID: 0 PID: 5962 Comm: syz-executor392 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 49.888149][ T5962] Tainted: [B]=BAD_PAGE [ 49.889251][ T5962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 49.892049][ T5962] Call Trace: [ 49.892951][ T5962] [ 49.893736][ T5962] dump_stack_lvl+0x16c/0x1f0 [ 49.895000][ T5962] bad_page+0xb3/0x1f0 [ 49.896144][ T5962] ? __pfx_bad_page+0x10/0x10 [ 49.897446][ T5962] ? page_bad_reason+0x9d/0x1e0 [ 49.898770][ T5962] free_unref_page+0x657/0xdc0 [ 49.900071][ T5962] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 49.901678][ T5962] ? __phys_addr+0xc6/0x150 [ 49.902923][ T5962] skb_free_head+0xa0/0x1d0 [ 49.904161][ T5962] skb_release_data+0x560/0x730 [ 49.905471][ T5962] sk_skb_reason_drop+0x129/0x1a0 [ 49.906856][ T5962] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 49.908649][ T5962] ? kernel_text_address+0x8d/0x100 [ 49.910047][ T5962] ? hlock_class+0x4e/0x130 [ 49.911280][ T5962] ? __lock_acquire+0x163e/0x3ce0 [ 49.912669][ T5962] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 49.914579][ T5962] ? hlock_class+0x4e/0x130 [ 49.915900][ T5962] ? __lock_acquire+0xbdd/0x3ce0 [ 49.917410][ T5962] ? __pfx___lock_acquire+0x10/0x10 [ 49.918883][ T5962] __netif_receive_skb_list_core+0x357/0x950 [ 49.920792][ T5962] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 49.922629][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 49.924035][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 49.925720][ T5962] ? lock_acquire+0x2f/0xb0 [ 49.926925][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 49.928627][ T5962] netif_receive_skb_list_internal+0x753/0xdb0 [ 49.930442][ T5962] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 49.932280][ T5962] ? __pfx_eth_type_trans+0x10/0x10 [ 49.933751][ T5962] ? __build_skb_around+0x278/0x3b0 [ 49.935299][ T5962] netif_receive_skb_list+0x4f/0x4a0 [ 49.937022][ T5962] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 49.939069][ T5962] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 49.940932][ T5962] ? bpf_test_timer_continue+0x150/0x3d0 [ 49.942673][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 49.944345][ T5962] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 49.946196][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 49.948035][ T5962] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 49.949982][ T5962] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 49.951729][ T5962] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 49.953244][ T5962] ? 0xffffffffa00045c0 [ 49.954357][ T5962] ? 0xffffffffa00045c0 [ 49.955472][ T5962] ? 0xffffffffa00045c0 [ 49.956607][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 49.958170][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 49.959640][ T5962] ? lock_acquire+0x2f/0xb0 [ 49.960838][ T5962] ? __fget_files+0x40/0x3f0 [ 49.962064][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 49.963723][ T5962] ? fput+0x30/0x390 [ 49.964788][ T5962] ? __bpf_prog_get+0xa0/0x290 [ 49.966104][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 49.967690][ T5962] __sys_bpf+0xfc6/0x49a0 [ 49.969234][ T5962] ? find_held_lock+0x2d/0x110 [ 49.970809][ T5962] ? __pfx___sys_bpf+0x10/0x10 [ 49.972179][ T5962] ? __might_fault+0x13b/0x190 [ 49.973763][ T5962] ? __pfx_lock_release+0x10/0x10 [ 49.975273][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 49.976914][ T5962] ? lock_acquire+0x2f/0xb0 [ 49.978369][ T5962] ? __might_fault+0xe3/0x190 [ 49.979819][ T5962] ? xfd_validate_state+0x5d/0x180 [ 49.981232][ T5962] ? rcu_is_watching+0x12/0xc0 [ 49.982602][ T5962] __x64_sys_bpf+0x78/0xc0 [ 49.983979][ T5962] ? lockdep_hardirqs_on+0x7c/0x110 [ 49.985399][ T5962] do_syscall_64+0xcd/0x250 [ 49.986698][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.988298][ T5962] RIP: 0033:0x7f1b5711ee99 [ 49.989850][ T5962] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 49.995341][ T5962] RSP: 002b:00007f1b570d9228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 49.997768][ T5962] RAX: ffffffffffffffda RBX: 00007f1b571a9328 RCX: 00007f1b5711ee99 [ 49.999858][ T5962] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 50.002216][ T5962] RBP: 00007f1b571a9320 R08: 00007f1b570d96c0 R09: 00007f1b570d96c0 [ 50.004319][ T5962] R10: 00007f1b570d96c0 R11: 0000000000000246 R12: 00007f1b57176074 [ 50.006380][ T5962] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffed9b8fc98 [ 50.008589][ T5962] [ 50.009662][ T5962] BUG: Bad page state in process syz-executor392 pfn:349c0 [ 50.012787][ T5962] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880349c2200 pfn:0x349c0 [ 50.015686][ T5962] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 50.017685][ T5962] raw: 00fff00000000000 dead000000000040 ffff888106115000 0000000000000000 [ 50.020103][ T5962] raw: ffff8880349c2200 0000000000000001 00000000ffffffff 0000000000000000 [ 50.022718][ T5962] page dumped because: page_pool leak [ 50.024348][ T5962] page_owner tracks the page as allocated [ 50.026015][ T5962] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5962, tgid 5958 (syz-executor392), ts 44238863613, free_ts 44054513026 [ 50.030627][ T5962] post_alloc_hook+0x2d1/0x350 [ 50.032074][ T5962] get_page_from_freelist+0x101e/0x3070 [ 50.033537][ T5962] __alloc_pages_noprof+0x223/0x25a0 [ 50.035132][ T5962] alloc_pages_bulk_noprof+0x77c/0x1110 [ 50.036838][ T5962] __page_pool_alloc_pages_slow+0x18f/0x770 [ 50.038496][ T5962] page_pool_alloc_netmem+0xc4/0x160 [ 50.040020][ T5962] page_pool_alloc_pages+0x1a/0x60 [ 50.041632][ T5962] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 50.043527][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 50.044933][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 50.046367][ T5962] __sys_bpf+0xfc6/0x49a0 [ 50.047520][ T5962] __x64_sys_bpf+0x78/0xc0 [ 50.048868][ T5962] do_syscall_64+0xcd/0x250 [ 50.050171][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.052153][ T5962] page last free pid 24 tgid 24 stack trace: [ 50.053958][ T5962] free_unref_page+0x5f4/0xdc0 [ 50.055652][ T5962] __folio_put+0x30d/0x3d0 [ 50.057028][ T5962] free_page_and_swap_cache+0x249/0x2c0 [ 50.058682][ T5962] tlb_remove_table_rcu+0x89/0xe0 [ 50.060049][ T5962] rcu_core+0x79d/0x14d0 [ 50.061174][ T5962] handle_softirqs+0x213/0x8f0 [ 50.062577][ T5962] run_ksoftirqd+0x3a/0x60 [ 50.063810][ T5962] smpboot_thread_fn+0x661/0xa30 [ 50.065198][ T5962] kthread+0x2c1/0x3a0 [ 50.066445][ T5962] ret_from_fork+0x45/0x80 [ 50.067904][ T5962] ret_from_fork_asm+0x1a/0x30 [ 50.069387][ T5962] Modules linked in: [ 50.070492][ T5962] CPU: 2 UID: 0 PID: 5962 Comm: syz-executor392 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 50.074063][ T5962] Tainted: [B]=BAD_PAGE [ 50.075156][ T5962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 50.078226][ T5962] Call Trace: [ 50.079110][ T5962] [ 50.079917][ T5962] dump_stack_lvl+0x16c/0x1f0 [ 50.081165][ T5962] bad_page+0xb3/0x1f0 [ 50.082243][ T5962] ? __pfx_bad_page+0x10/0x10 [ 50.083503][ T5962] ? page_bad_reason+0x9d/0x1e0 [ 50.084789][ T5962] free_unref_page+0x657/0xdc0 [ 50.086057][ T5962] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 50.087819][ T5962] ? __phys_addr+0xc6/0x150 [ 50.089051][ T5962] skb_free_head+0xa0/0x1d0 [ 50.090222][ T5962] skb_release_data+0x560/0x730 [ 50.091807][ T5962] sk_skb_reason_drop+0x129/0x1a0 [ 50.093401][ T5962] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 50.095285][ T5962] ? kernel_text_address+0x8d/0x100 [ 50.096927][ T5962] ? hlock_class+0x4e/0x130 [ 50.098375][ T5962] ? __lock_acquire+0x163e/0x3ce0 [ 50.099800][ T5962] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 50.101602][ T5962] ? hlock_class+0x4e/0x130 [ 50.102826][ T5962] ? __lock_acquire+0xbdd/0x3ce0 [ 50.104165][ T5962] ? __pfx___lock_acquire+0x10/0x10 [ 50.105573][ T5962] __netif_receive_skb_list_core+0x357/0x950 [ 50.107164][ T5962] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 50.109095][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 50.110428][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 50.112135][ T5962] ? lock_acquire+0x2f/0xb0 [ 50.113489][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 50.115168][ T5962] netif_receive_skb_list_internal+0x753/0xdb0 [ 50.117151][ T5962] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 50.119036][ T5962] ? __pfx_eth_type_trans+0x10/0x10 [ 50.120487][ T5962] ? __build_skb_around+0x278/0x3b0 [ 50.121834][ T5962] netif_receive_skb_list+0x4f/0x4a0 [ 50.123225][ T5962] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 50.124880][ T5962] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 50.126615][ T5962] ? bpf_test_timer_continue+0x150/0x3d0 [ 50.128111][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 50.129509][ T5962] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 50.131199][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 50.132815][ T5962] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 50.134397][ T5962] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 50.135988][ T5962] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 50.137406][ T5962] ? 0xffffffffa00045c0 [ 50.138520][ T5962] ? 0xffffffffa00045c0 [ 50.139772][ T5962] ? 0xffffffffa00045c0 [ 50.140950][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 50.142594][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 50.144090][ T5962] ? lock_acquire+0x2f/0xb0 [ 50.145343][ T5962] ? __fget_files+0x40/0x3f0 [ 50.146573][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 50.148112][ T5962] ? fput+0x30/0x390 [ 50.149325][ T5962] ? __bpf_prog_get+0xa0/0x290 [ 50.150856][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 50.152556][ T5962] __sys_bpf+0xfc6/0x49a0 [ 50.153871][ T5962] ? find_held_lock+0x2d/0x110 [ 50.155238][ T5962] ? __pfx___sys_bpf+0x10/0x10 [ 50.156706][ T5962] ? __might_fault+0x13b/0x190 [ 50.158030][ T5962] ? __pfx_lock_release+0x10/0x10 [ 50.159427][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 50.161136][ T5962] ? lock_acquire+0x2f/0xb0 [ 50.162538][ T5962] ? __might_fault+0xe3/0x190 [ 50.163978][ T5962] ? xfd_validate_state+0x5d/0x180 [ 50.165448][ T5962] ? rcu_is_watching+0x12/0xc0 [ 50.166830][ T5962] __x64_sys_bpf+0x78/0xc0 [ 50.168056][ T5962] ? lockdep_hardirqs_on+0x7c/0x110 [ 50.169420][ T5962] do_syscall_64+0xcd/0x250 [ 50.170926][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.172743][ T5962] RIP: 0033:0x7f1b5711ee99 [ 50.173894][ T5962] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 50.178666][ T5962] RSP: 002b:00007f1b570d9228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 50.180772][ T5962] RAX: ffffffffffffffda RBX: 00007f1b571a9328 RCX: 00007f1b5711ee99 [ 50.182778][ T5962] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 50.184979][ T5962] RBP: 00007f1b571a9320 R08: 00007f1b570d96c0 R09: 00007f1b570d96c0 [ 50.187062][ T5962] R10: 00007f1b570d96c0 R11: 0000000000000246 R12: 00007f1b57176074 [ 50.189160][ T5962] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffed9b8fc98 [ 50.191233][ T5962] [ 50.192135][ T5962] BUG: Bad page state in process syz-executor392 pfn:34b2b [ 50.194370][ T5962] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34b2b [ 50.197197][ T5962] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 50.199188][ T5962] raw: 00fff00000000000 dead000000000040 ffff888106115000 0000000000000000 [ 50.201524][ T5962] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 50.204134][ T5962] page dumped because: page_pool leak [ 50.205721][ T5962] page_owner tracks the page as allocated [ 50.207398][ T5962] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5962, tgid 5958 (syz-executor392), ts 44238856461, free_ts 44054516394 [ 50.212221][ T5962] post_alloc_hook+0x2d1/0x350 [ 50.213678][ T5962] get_page_from_freelist+0x101e/0x3070 [ 50.215167][ T5962] __alloc_pages_noprof+0x223/0x25a0 [ 50.216706][ T5962] alloc_pages_bulk_noprof+0x77c/0x1110 [ 50.218420][ T5962] __page_pool_alloc_pages_slow+0x18f/0x770 [ 50.220015][ T5962] page_pool_alloc_netmem+0xc4/0x160 [ 50.221365][ T5962] page_pool_alloc_pages+0x1a/0x60 [ 50.222735][ T5962] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 50.224535][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 50.225950][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 50.227326][ T5962] __sys_bpf+0xfc6/0x49a0 [ 50.228620][ T5962] __x64_sys_bpf+0x78/0xc0 [ 50.229807][ T5962] do_syscall_64+0xcd/0x250 [ 50.231025][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.232632][ T5962] page last free pid 24 tgid 24 stack trace: [ 50.234315][ T5962] free_unref_page+0x5f4/0xdc0 [ 50.235842][ T5962] rcu_core+0x79d/0x14d0 [ 50.236946][ T5962] handle_softirqs+0x213/0x8f0 [ 50.238240][ T5962] run_ksoftirqd+0x3a/0x60 [ 50.239543][ T5962] smpboot_thread_fn+0x661/0xa30 [ 50.240969][ T5962] kthread+0x2c1/0x3a0 [ 50.242228][ T5962] ret_from_fork+0x45/0x80 [ 50.243529][ T5962] ret_from_fork_asm+0x1a/0x30 [ 50.244895][ T5962] Modules linked in: [ 50.245983][ T5962] CPU: 2 UID: 0 PID: 5962 Comm: syz-executor392 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 50.249430][ T5962] Tainted: [B]=BAD_PAGE [ 50.250572][ T5962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 50.253410][ T5962] Call Trace: [ 50.254300][ T5962] [ 50.255042][ T5962] dump_stack_lvl+0x16c/0x1f0 [ 50.256243][ T5962] bad_page+0xb3/0x1f0 [ 50.257298][ T5962] ? __pfx_bad_page+0x10/0x10 [ 50.258555][ T5962] ? page_bad_reason+0x9d/0x1e0 [ 50.259843][ T5962] free_unref_page+0x657/0xdc0 [ 50.261102][ T5962] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 50.262628][ T5962] ? __phys_addr+0xc6/0x150 [ 50.263856][ T5962] skb_free_head+0xa0/0x1d0 [ 50.265068][ T5962] skb_release_data+0x560/0x730 [ 50.266372][ T5962] sk_skb_reason_drop+0x129/0x1a0 [ 50.267723][ T5962] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 50.270089][ T5962] ? kernel_text_address+0x8d/0x100 [ 50.271618][ T5962] ? hlock_class+0x4e/0x130 [ 50.273068][ T5962] ? __lock_acquire+0x163e/0x3ce0 [ 50.274797][ T5962] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 50.276765][ T5962] ? hlock_class+0x4e/0x130 [ 50.278025][ T5962] ? __lock_acquire+0xbdd/0x3ce0 [ 50.279405][ T5962] ? __pfx___lock_acquire+0x10/0x10 [ 50.280856][ T5962] __netif_receive_skb_list_core+0x357/0x950 [ 50.282510][ T5962] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 50.284295][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 50.285714][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 50.287378][ T5962] ? lock_acquire+0x2f/0xb0 [ 50.288669][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 50.290712][ T5962] netif_receive_skb_list_internal+0x753/0xdb0 [ 50.292851][ T5962] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 50.295142][ T5962] ? __pfx_eth_type_trans+0x10/0x10 [ 50.297709][ T5962] ? __build_skb_around+0x278/0x3b0 [ 50.299265][ T5962] netif_receive_skb_list+0x4f/0x4a0 [ 50.300823][ T5962] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 50.302553][ T5962] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 50.304599][ T5962] ? bpf_test_timer_continue+0x150/0x3d0 [ 50.306409][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 50.308040][ T5962] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 50.309845][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 50.311412][ T5962] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 50.313049][ T5962] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 50.314543][ T5962] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 50.316030][ T5962] ? 0xffffffffa00045c0 [ 50.317179][ T5962] ? 0xffffffffa00045c0 [ 50.318294][ T5962] ? 0xffffffffa00045c0 [ 50.319660][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 50.321290][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 50.322695][ T5962] ? lock_acquire+0x2f/0xb0 [ 50.323884][ T5962] ? __fget_files+0x40/0x3f0 [ 50.325062][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 50.326499][ T5962] ? fput+0x30/0x390 [ 50.327550][ T5962] ? __bpf_prog_get+0xa0/0x290 [ 50.328965][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 50.330817][ T5962] __sys_bpf+0xfc6/0x49a0 [ 50.331972][ T5962] ? find_held_lock+0x2d/0x110 [ 50.333286][ T5962] ? __pfx___sys_bpf+0x10/0x10 [ 50.334695][ T5962] ? __might_fault+0x13b/0x190 [ 50.336106][ T5962] ? __pfx_lock_release+0x10/0x10 [ 50.338091][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 50.339498][ T5962] ? lock_acquire+0x2f/0xb0 [ 50.340704][ T5962] ? __might_fault+0xe3/0x190 [ 50.342097][ T5962] ? xfd_validate_state+0x5d/0x180 [ 50.343394][ T5962] ? rcu_is_watching+0x12/0xc0 [ 50.344638][ T5962] __x64_sys_bpf+0x78/0xc0 [ 50.345838][ T5962] ? lockdep_hardirqs_on+0x7c/0x110 [ 50.347215][ T5962] do_syscall_64+0xcd/0x250 [ 50.348420][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.349937][ T5962] RIP: 0033:0x7f1b5711ee99 [ 50.351046][ T5962] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 50.356142][ T5962] RSP: 002b:00007f1b570d9228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 50.358321][ T5962] RAX: ffffffffffffffda RBX: 00007f1b571a9328 RCX: 00007f1b5711ee99 [ 50.360383][ T5962] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 50.362555][ T5962] RBP: 00007f1b571a9320 R08: 00007f1b570d96c0 R09: 00007f1b570d96c0 [ 50.364858][ T5962] R10: 00007f1b570d96c0 R11: 0000000000000246 R12: 00007f1b57176074 [ 50.366999][ T5962] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffed9b8fc98 [ 50.369085][ T5962] [ 50.369999][ T5962] BUG: Bad page state in process syz-executor392 pfn:289c9 [ 50.372158][ T5962] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x289c9 [ 50.375055][ T5962] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 50.377304][ T5962] raw: 00fff00000000000 dead000000000040 ffff888106115000 0000000000000000 [ 50.379578][ T5962] raw: 0000000000000004 0000000000000001 00000000ffffffff 0000000000000000 [ 50.381851][ T5962] page dumped because: page_pool leak [ 50.383250][ T5962] page_owner tracks the page as allocated [ 50.384901][ T5962] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5962, tgid 5958 (syz-executor392), ts 44238849308, free_ts 44066335838 [ 50.389810][ T5962] post_alloc_hook+0x2d1/0x350 [ 50.391043][ T5962] get_page_from_freelist+0x101e/0x3070 [ 50.392679][ T5962] __alloc_pages_noprof+0x223/0x25a0 [ 50.394089][ T5962] alloc_pages_bulk_noprof+0x77c/0x1110 [ 50.395532][ T5962] __page_pool_alloc_pages_slow+0x18f/0x770 [ 50.397717][ T5962] page_pool_alloc_netmem+0xc4/0x160 [ 50.399205][ T5962] page_pool_alloc_pages+0x1a/0x60 [ 50.400799][ T5962] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 50.402785][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 50.404266][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 50.405710][ T5962] __sys_bpf+0xfc6/0x49a0 [ 50.406845][ T5962] __x64_sys_bpf+0x78/0xc0 [ 50.408028][ T5962] do_syscall_64+0xcd/0x250 [ 50.409674][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.411411][ T5962] page last free pid 5953 tgid 5952 stack trace: [ 50.413301][ T5962] free_unref_page+0x5f4/0xdc0 [ 50.414571][ T5962] vfree+0x17a/0x890 [ 50.415803][ T5962] hashlimit_mt_destroy_v1+0x78/0x90 [ 50.417604][ T5962] cleanup_entry+0x19f/0x3a0 [ 50.418857][ T5962] translate_table+0xddd/0x17b0 [ 50.420522][ T5962] do_ip6t_set_ctl+0x605/0xc40 [ 50.422268][ T5962] nf_setsockopt+0x8a/0xf0 [ 50.423770][ T5962] ipv6_setsockopt+0x135/0x170 [ 50.425228][ T5962] rawv6_setsockopt+0xd7/0x680 [ 50.426543][ T5962] do_sock_setsockopt+0x222/0x480 [ 50.427924][ T5962] __sys_setsockopt+0x1a4/0x270 [ 50.429540][ T5962] __x64_sys_setsockopt+0xbd/0x160 [ 50.431072][ T5962] do_syscall_64+0xcd/0x250 [ 50.432541][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.434314][ T5962] Modules linked in: [ 50.435321][ T5962] CPU: 2 UID: 0 PID: 5962 Comm: syz-executor392 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 50.438631][ T5962] Tainted: [B]=BAD_PAGE [ 50.439835][ T5962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 50.442700][ T5962] Call Trace: [ 50.443603][ T5962] [ 50.444422][ T5962] dump_stack_lvl+0x16c/0x1f0 [ 50.445680][ T5962] bad_page+0xb3/0x1f0 [ 50.446755][ T5962] ? __pfx_bad_page+0x10/0x10 [ 50.448008][ T5962] ? page_bad_reason+0x9d/0x1e0 [ 50.449278][ T5962] free_unref_page+0x657/0xdc0 [ 50.450549][ T5962] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 50.452146][ T5962] ? __phys_addr+0xc6/0x150 [ 50.453351][ T5962] skb_free_head+0xa0/0x1d0 [ 50.454558][ T5962] skb_release_data+0x560/0x730 [ 50.455873][ T5962] sk_skb_reason_drop+0x129/0x1a0 [ 50.457221][ T5962] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 50.458941][ T5962] ? kernel_text_address+0x8d/0x100 [ 50.460449][ T5962] ? hlock_class+0x4e/0x130 [ 50.461678][ T5962] ? __lock_acquire+0x163e/0x3ce0 [ 50.463042][ T5962] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 50.465133][ T5962] ? hlock_class+0x4e/0x130 [ 50.466487][ T5962] ? __lock_acquire+0xbdd/0x3ce0 [ 50.467950][ T5962] ? __pfx___lock_acquire+0x10/0x10 [ 50.469515][ T5962] __netif_receive_skb_list_core+0x357/0x950 [ 50.471240][ T5962] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 50.473136][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 50.474631][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 50.476393][ T5962] ? lock_acquire+0x2f/0xb0 [ 50.477646][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 50.479202][ T5962] netif_receive_skb_list_internal+0x753/0xdb0 [ 50.480787][ T5962] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 50.482513][ T5962] ? __pfx_eth_type_trans+0x10/0x10 [ 50.483961][ T5962] ? __build_skb_around+0x278/0x3b0 [ 50.485522][ T5962] netif_receive_skb_list+0x4f/0x4a0 [ 50.487103][ T5962] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 50.488950][ T5962] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 50.490973][ T5962] ? bpf_test_timer_continue+0x150/0x3d0 [ 50.492712][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 50.494410][ T5962] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 50.496052][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 50.497676][ T5962] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 50.499268][ T5962] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 50.500842][ T5962] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 50.502273][ T5962] ? 0xffffffffa00045c0 [ 50.503382][ T5962] ? 0xffffffffa00045c0 [ 50.504539][ T5962] ? 0xffffffffa00045c0 [ 50.505717][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 50.507330][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 50.508766][ T5962] ? lock_acquire+0x2f/0xb0 [ 50.509981][ T5962] ? __fget_files+0x40/0x3f0 [ 50.511251][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 50.513065][ T5962] ? fput+0x30/0x390 [ 50.514222][ T5962] ? __bpf_prog_get+0xa0/0x290 [ 50.515555][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 50.517145][ T5962] __sys_bpf+0xfc6/0x49a0 [ 50.518337][ T5962] ? find_held_lock+0x2d/0x110 [ 50.519898][ T5962] ? __pfx___sys_bpf+0x10/0x10 [ 50.521253][ T5962] ? __might_fault+0x13b/0x190 [ 50.522535][ T5962] ? __pfx_lock_release+0x10/0x10 [ 50.523892][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 50.525372][ T5962] ? lock_acquire+0x2f/0xb0 [ 50.526748][ T5962] ? __might_fault+0xe3/0x190 [ 50.528318][ T5962] ? xfd_validate_state+0x5d/0x180 [ 50.530153][ T5962] ? rcu_is_watching+0x12/0xc0 [ 50.532502][ T5962] __x64_sys_bpf+0x78/0xc0 [ 50.533771][ T5962] ? lockdep_hardirqs_on+0x7c/0x110 [ 50.535172][ T5962] do_syscall_64+0xcd/0x250 [ 50.536390][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.538069][ T5962] RIP: 0033:0x7f1b5711ee99 [ 50.539361][ T5962] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 50.544423][ T5962] RSP: 002b:00007f1b570d9228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 50.546633][ T5962] RAX: ffffffffffffffda RBX: 00007f1b571a9328 RCX: 00007f1b5711ee99 [ 50.548854][ T5962] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 50.551070][ T5962] RBP: 00007f1b571a9320 R08: 00007f1b570d96c0 R09: 00007f1b570d96c0 [ 50.553187][ T5962] R10: 00007f1b570d96c0 R11: 0000000000000246 R12: 00007f1b57176074 [ 50.555283][ T5962] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffed9b8fc98 [ 50.557401][ T5962] [ 50.558339][ T5962] BUG: Bad page state in process syz-executor392 pfn:289ca [ 50.560487][ T5962] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x289ca [ 50.563082][ T5962] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 50.565143][ T5962] raw: 00fff00000000000 dead000000000040 ffff888106115000 0000000000000000 [ 50.567659][ T5962] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 50.570332][ T5962] page dumped because: page_pool leak [ 50.571961][ T5962] page_owner tracks the page as allocated [ 50.573562][ T5962] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5962, tgid 5958 (syz-executor392), ts 44238842430, free_ts 44066344557 [ 50.578084][ T5962] post_alloc_hook+0x2d1/0x350 [ 50.579368][ T5962] get_page_from_freelist+0x101e/0x3070 [ 50.580913][ T5962] __alloc_pages_noprof+0x223/0x25a0 [ 50.582381][ T5962] alloc_pages_bulk_noprof+0x77c/0x1110 [ 50.583853][ T5962] __page_pool_alloc_pages_slow+0x18f/0x770 [ 50.585312][ T5962] page_pool_alloc_netmem+0xc4/0x160 [ 50.586664][ T5962] page_pool_alloc_pages+0x1a/0x60 [ 50.588040][ T5962] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 50.589789][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 50.591208][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 50.592711][ T5962] __sys_bpf+0xfc6/0x49a0 [ 50.594024][ T5962] __x64_sys_bpf+0x78/0xc0 [ 50.595282][ T5962] do_syscall_64+0xcd/0x250 [ 50.596804][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.598386][ T5962] page last free pid 5953 tgid 5952 stack trace: [ 50.600139][ T5962] free_unref_page+0x5f4/0xdc0 [ 50.601410][ T5962] vfree+0x17a/0x890 [ 50.602510][ T5962] hashlimit_mt_destroy_v1+0x78/0x90 [ 50.603914][ T5962] cleanup_entry+0x19f/0x3a0 [ 50.605148][ T5962] translate_table+0xddd/0x17b0 [ 50.606439][ T5962] do_ip6t_set_ctl+0x605/0xc40 [ 50.607712][ T5962] nf_setsockopt+0x8a/0xf0 [ 50.608992][ T5962] ipv6_setsockopt+0x135/0x170 [ 50.610291][ T5962] rawv6_setsockopt+0xd7/0x680 [ 50.611546][ T5962] do_sock_setsockopt+0x222/0x480 [ 50.612922][ T5962] __sys_setsockopt+0x1a4/0x270 [ 50.614218][ T5962] __x64_sys_setsockopt+0xbd/0x160 [ 50.615598][ T5962] do_syscall_64+0xcd/0x250 [ 50.616823][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.618403][ T5962] Modules linked in: [ 50.619456][ T5962] CPU: 2 UID: 0 PID: 5962 Comm: syz-executor392 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 50.622700][ T5962] Tainted: [B]=BAD_PAGE [ 50.623798][ T5962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 50.626507][ T5962] Call Trace: [ 50.627347][ T5962] [ 50.628123][ T5962] dump_stack_lvl+0x16c/0x1f0 [ 50.629394][ T5962] bad_page+0xb3/0x1f0 [ 50.630488][ T5962] ? __pfx_bad_page+0x10/0x10 [ 50.631779][ T5962] ? page_bad_reason+0x9d/0x1e0 [ 50.633869][ T5962] free_unref_page+0x657/0xdc0 [ 50.635452][ T5962] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 50.637262][ T5962] ? __phys_addr+0xc6/0x150 [ 50.638673][ T5962] skb_free_head+0xa0/0x1d0 [ 50.639920][ T5962] skb_release_data+0x560/0x730 [ 50.641193][ T5962] sk_skb_reason_drop+0x129/0x1a0 [ 50.642482][ T5962] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 50.644226][ T5962] ? kernel_text_address+0x8d/0x100 [ 50.645617][ T5962] ? hlock_class+0x4e/0x130 [ 50.646799][ T5962] ? __lock_acquire+0x163e/0x3ce0 [ 50.648084][ T5962] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 50.650432][ T5962] ? hlock_class+0x4e/0x130 [ 50.652000][ T5962] ? __lock_acquire+0xbdd/0x3ce0 [ 50.653648][ T5962] ? __pfx___lock_acquire+0x10/0x10 [ 50.655203][ T5962] __netif_receive_skb_list_core+0x357/0x950 [ 50.656738][ T5962] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 50.658663][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 50.660089][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 50.661839][ T5962] ? lock_acquire+0x2f/0xb0 [ 50.663142][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 50.664877][ T5962] netif_receive_skb_list_internal+0x753/0xdb0 [ 50.666575][ T5962] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 50.668424][ T5962] ? __pfx_eth_type_trans+0x10/0x10 [ 50.670391][ T5962] ? __build_skb_around+0x278/0x3b0 [ 50.671952][ T5962] netif_receive_skb_list+0x4f/0x4a0 [ 50.673273][ T5962] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 50.675180][ T5962] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 50.676984][ T5962] ? bpf_test_timer_continue+0x150/0x3d0 [ 50.678576][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 50.680043][ T5962] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 50.681594][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 50.683158][ T5962] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 50.684738][ T5962] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 50.686302][ T5962] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 50.687741][ T5962] ? 0xffffffffa00045c0 [ 50.688852][ T5962] ? 0xffffffffa00045c0 [ 50.690003][ T5962] ? 0xffffffffa00045c0 [ 50.691213][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 50.692941][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 50.694421][ T5962] ? lock_acquire+0x2f/0xb0 [ 50.695651][ T5962] ? __fget_files+0x40/0x3f0 [ 50.696927][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 50.698832][ T5962] ? fput+0x30/0x390 [ 50.699953][ T5962] ? __bpf_prog_get+0xa0/0x290 [ 50.701222][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 50.702768][ T5962] __sys_bpf+0xfc6/0x49a0 [ 50.704001][ T5962] ? find_held_lock+0x2d/0x110 [ 50.705294][ T5962] ? __pfx___sys_bpf+0x10/0x10 [ 50.706572][ T5962] ? __might_fault+0x13b/0x190 [ 50.707867][ T5962] ? __pfx_lock_release+0x10/0x10 [ 50.709190][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 50.710540][ T5962] ? lock_acquire+0x2f/0xb0 [ 50.711839][ T5962] ? __might_fault+0xe3/0x190 [ 50.713144][ T5962] ? xfd_validate_state+0x5d/0x180 [ 50.714675][ T5962] ? rcu_is_watching+0x12/0xc0 [ 50.716140][ T5962] __x64_sys_bpf+0x78/0xc0 [ 50.717487][ T5962] ? lockdep_hardirqs_on+0x7c/0x110 [ 50.719072][ T5962] do_syscall_64+0xcd/0x250 [ 50.720479][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.722105][ T5962] RIP: 0033:0x7f1b5711ee99 [ 50.723312][ T5962] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 50.728394][ T5962] RSP: 002b:00007f1b570d9228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 50.730437][ T5962] RAX: ffffffffffffffda RBX: 00007f1b571a9328 RCX: 00007f1b5711ee99 [ 50.732505][ T5962] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 50.734487][ T5962] RBP: 00007f1b571a9320 R08: 00007f1b570d96c0 R09: 00007f1b570d96c0 [ 50.736675][ T5962] R10: 00007f1b570d96c0 R11: 0000000000000246 R12: 00007f1b57176074 [ 50.738835][ T5962] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffed9b8fc98 [ 50.740957][ T5962] [ 50.741926][ T5962] BUG: Bad page state in process syz-executor392 pfn:289cb [ 50.743963][ T5962] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x289cb [ 50.746328][ T5962] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 50.748418][ T5962] raw: 00fff00000000000 dead000000000040 ffff888106115000 0000000000000000 [ 50.750760][ T5962] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 50.753336][ T5962] page dumped because: page_pool leak [ 50.755567][ T5962] page_owner tracks the page as allocated [ 50.757220][ T5962] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5962, tgid 5958 (syz-executor392), ts 44238834961, free_ts 44066349478 [ 50.762051][ T5962] post_alloc_hook+0x2d1/0x350 [ 50.763356][ T5962] get_page_from_freelist+0x101e/0x3070 [ 50.764789][ T5962] __alloc_pages_noprof+0x223/0x25a0 [ 50.766236][ T5962] alloc_pages_bulk_noprof+0x77c/0x1110 [ 50.767937][ T5962] __page_pool_alloc_pages_slow+0x18f/0x770 [ 50.769823][ T5962] page_pool_alloc_netmem+0xc4/0x160 [ 50.771236][ T5962] page_pool_alloc_pages+0x1a/0x60 [ 50.772670][ T5962] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 50.774295][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 50.775710][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 50.777143][ T5962] __sys_bpf+0xfc6/0x49a0 [ 50.778317][ T5962] __x64_sys_bpf+0x78/0xc0 [ 50.779567][ T5962] do_syscall_64+0xcd/0x250 [ 50.780822][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.782465][ T5962] page last free pid 5953 tgid 5952 stack trace: [ 50.784146][ T5962] free_unref_page+0x5f4/0xdc0 [ 50.785452][ T5962] vfree+0x17a/0x890 [ 50.786523][ T5962] hashlimit_mt_destroy_v1+0x78/0x90 [ 50.787907][ T5962] cleanup_entry+0x19f/0x3a0 [ 50.789063][ T5962] translate_table+0xddd/0x17b0 [ 50.790374][ T5962] do_ip6t_set_ctl+0x605/0xc40 [ 50.791586][ T5962] nf_setsockopt+0x8a/0xf0 [ 50.792742][ T5962] ipv6_setsockopt+0x135/0x170 [ 50.793889][ T5962] rawv6_setsockopt+0xd7/0x680 [ 50.795075][ T5962] do_sock_setsockopt+0x222/0x480 [ 50.796320][ T5962] __sys_setsockopt+0x1a4/0x270 [ 50.797535][ T5962] __x64_sys_setsockopt+0xbd/0x160 [ 50.798847][ T5962] do_syscall_64+0xcd/0x250 [ 50.800065][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.801627][ T5962] Modules linked in: [ 50.802716][ T5962] CPU: 2 UID: 0 PID: 5962 Comm: syz-executor392 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 50.806119][ T5962] Tainted: [B]=BAD_PAGE [ 50.807266][ T5962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 50.810188][ T5962] Call Trace: [ 50.811114][ T5962] [ 50.811950][ T5962] dump_stack_lvl+0x16c/0x1f0 [ 50.813220][ T5962] bad_page+0xb3/0x1f0 [ 50.814474][ T5962] ? __pfx_bad_page+0x10/0x10 [ 50.815766][ T5962] ? page_bad_reason+0x9d/0x1e0 [ 50.817083][ T5962] free_unref_page+0x657/0xdc0 [ 50.818392][ T5962] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 50.819978][ T5962] ? __phys_addr+0xc6/0x150 [ 50.821170][ T5962] skb_free_head+0xa0/0x1d0 [ 50.822402][ T5962] skb_release_data+0x560/0x730 [ 50.823722][ T5962] sk_skb_reason_drop+0x129/0x1a0 [ 50.825102][ T5962] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 50.826888][ T5962] ? kernel_text_address+0x8d/0x100 [ 50.828499][ T5962] ? hlock_class+0x4e/0x130 [ 50.830519][ T5962] ? __lock_acquire+0x163e/0x3ce0 [ 50.832448][ T5962] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 50.835790][ T5962] ? hlock_class+0x4e/0x130 [ 50.837303][ T5962] ? __lock_acquire+0xbdd/0x3ce0 [ 50.838778][ T5962] ? __pfx___lock_acquire+0x10/0x10 [ 50.840188][ T5962] __netif_receive_skb_list_core+0x357/0x950 [ 50.842083][ T5962] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 50.843943][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 50.845380][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 50.847078][ T5962] ? lock_acquire+0x2f/0xb0 [ 50.848413][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 50.850315][ T5962] netif_receive_skb_list_internal+0x753/0xdb0 [ 50.852153][ T5962] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 50.853921][ T5962] ? __pfx_eth_type_trans+0x10/0x10 [ 50.855528][ T5962] ? __build_skb_around+0x278/0x3b0 [ 50.857102][ T5962] netif_receive_skb_list+0x4f/0x4a0 [ 50.858738][ T5962] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 50.860432][ T5962] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 50.862314][ T5962] ? bpf_test_timer_continue+0x150/0x3d0 [ 50.863960][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 50.865475][ T5962] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 50.867139][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 50.868805][ T5962] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 50.870527][ T5962] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 50.872412][ T5962] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 50.874323][ T5962] ? 0xffffffffa00045c0 [ 50.875660][ T5962] ? 0xffffffffa00045c0 [ 50.877084][ T5962] ? 0xffffffffa00045c0 [ 50.878286][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 50.880179][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 50.881750][ T5962] ? lock_acquire+0x2f/0xb0 [ 50.882971][ T5962] ? __fget_files+0x40/0x3f0 [ 50.884232][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 50.885639][ T5962] ? fput+0x30/0x390 [ 50.886640][ T5962] ? __bpf_prog_get+0xa0/0x290 [ 50.887927][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 50.889440][ T5962] __sys_bpf+0xfc6/0x49a0 [ 50.890548][ T5962] ? find_held_lock+0x2d/0x110 [ 50.891909][ T5962] ? __pfx___sys_bpf+0x10/0x10 [ 50.893302][ T5962] ? __might_fault+0x13b/0x190 [ 50.894672][ T5962] ? __pfx_lock_release+0x10/0x10 [ 50.896027][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 50.897418][ T5962] ? lock_acquire+0x2f/0xb0 [ 50.898620][ T5962] ? __might_fault+0xe3/0x190 [ 50.899868][ T5962] ? xfd_validate_state+0x5d/0x180 [ 50.901197][ T5962] ? rcu_is_watching+0x12/0xc0 [ 50.902540][ T5962] __x64_sys_bpf+0x78/0xc0 [ 50.903918][ T5962] ? lockdep_hardirqs_on+0x7c/0x110 [ 50.905493][ T5962] do_syscall_64+0xcd/0x250 [ 50.906873][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.908655][ T5962] RIP: 0033:0x7f1b5711ee99 [ 50.910003][ T5962] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 50.915171][ T5962] RSP: 002b:00007f1b570d9228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 50.917521][ T5962] RAX: ffffffffffffffda RBX: 00007f1b571a9328 RCX: 00007f1b5711ee99 [ 50.919749][ T5962] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 50.921860][ T5962] RBP: 00007f1b571a9320 R08: 00007f1b570d96c0 R09: 00007f1b570d96c0 [ 50.923928][ T5962] R10: 00007f1b570d96c0 R11: 0000000000000246 R12: 00007f1b57176074 [ 50.925984][ T5962] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffed9b8fc98 [ 50.928209][ T5962] [ 50.929223][ T5962] BUG: Bad page state in process syz-executor392 pfn:333f0 [ 50.931718][ T5962] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880333f6000 pfn:0x333f0 [ 50.934846][ T5962] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 50.936720][ T5962] raw: 00fff00000000000 dead000000000040 ffff888106115000 0000000000000000 [ 50.938975][ T5962] raw: ffff8880333f6000 0000000000000001 00000000ffffffff 0000000000000000 [ 50.941459][ T5962] page dumped because: page_pool leak [ 50.943066][ T5962] page_owner tracks the page as allocated [ 50.944759][ T5962] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5962, tgid 5958 (syz-executor392), ts 44238828134, free_ts 44066353147 [ 50.950556][ T5962] post_alloc_hook+0x2d1/0x350 [ 50.952663][ T5962] get_page_from_freelist+0x101e/0x3070 [ 50.954460][ T5962] __alloc_pages_noprof+0x223/0x25a0 [ 50.956003][ T5962] alloc_pages_bulk_noprof+0x77c/0x1110 [ 50.957939][ T5962] __page_pool_alloc_pages_slow+0x18f/0x770 [ 50.959707][ T5962] page_pool_alloc_netmem+0xc4/0x160 [ 50.961306][ T5962] page_pool_alloc_pages+0x1a/0x60 [ 50.962730][ T5962] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 50.964380][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 50.965775][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 50.967204][ T5962] __sys_bpf+0xfc6/0x49a0 [ 50.968375][ T5962] __x64_sys_bpf+0x78/0xc0 [ 50.969544][ T5962] do_syscall_64+0xcd/0x250 [ 50.970847][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.972540][ T5962] page last free pid 5953 tgid 5952 stack trace: [ 50.974524][ T5962] free_unref_page+0x5f4/0xdc0 [ 50.975746][ T5962] vfree+0x17a/0x890 [ 50.976799][ T5962] hashlimit_mt_destroy_v1+0x78/0x90 [ 50.978212][ T5962] cleanup_entry+0x19f/0x3a0 [ 50.979571][ T5962] translate_table+0xddd/0x17b0 [ 50.980873][ T5962] do_ip6t_set_ctl+0x605/0xc40 [ 50.982212][ T5962] nf_setsockopt+0x8a/0xf0 [ 50.983403][ T5962] ipv6_setsockopt+0x135/0x170 [ 50.984702][ T5962] rawv6_setsockopt+0xd7/0x680 [ 50.985979][ T5962] do_sock_setsockopt+0x222/0x480 [ 50.987313][ T5962] __sys_setsockopt+0x1a4/0x270 [ 50.988622][ T5962] __x64_sys_setsockopt+0xbd/0x160 [ 50.990102][ T5962] do_syscall_64+0xcd/0x250 [ 50.991968][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.993921][ T5962] Modules linked in: [ 50.995738][ T5962] CPU: 2 UID: 0 PID: 5962 Comm: syz-executor392 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 50.999389][ T5962] Tainted: [B]=BAD_PAGE [ 51.000493][ T5962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 51.003219][ T5962] Call Trace: [ 51.004133][ T5962] [ 51.004933][ T5962] dump_stack_lvl+0x16c/0x1f0 [ 51.006209][ T5962] bad_page+0xb3/0x1f0 [ 51.007306][ T5962] ? __pfx_bad_page+0x10/0x10 [ 51.008731][ T5962] ? page_bad_reason+0x9d/0x1e0 [ 51.010124][ T5962] free_unref_page+0x657/0xdc0 [ 51.011541][ T5962] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 51.013263][ T5962] ? __phys_addr+0xc6/0x150 [ 51.014484][ T5962] skb_free_head+0xa0/0x1d0 [ 51.015814][ T5962] skb_release_data+0x560/0x730 [ 51.017313][ T5962] sk_skb_reason_drop+0x129/0x1a0 [ 51.018848][ T5962] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 51.020621][ T5962] ? kernel_text_address+0x8d/0x100 [ 51.022019][ T5962] ? hlock_class+0x4e/0x130 [ 51.023270][ T5962] ? __lock_acquire+0x163e/0x3ce0 [ 51.024640][ T5962] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 51.026690][ T5962] ? hlock_class+0x4e/0x130 [ 51.028197][ T5962] ? __lock_acquire+0xbdd/0x3ce0 [ 51.029804][ T5962] ? __pfx___lock_acquire+0x10/0x10 [ 51.031596][ T5962] __netif_receive_skb_list_core+0x357/0x950 [ 51.033996][ T5962] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 51.035812][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 51.037178][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 51.038861][ T5962] ? lock_acquire+0x2f/0xb0 [ 51.040109][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 51.041780][ T5962] netif_receive_skb_list_internal+0x753/0xdb0 [ 51.043548][ T5962] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 51.045311][ T5962] ? __pfx_eth_type_trans+0x10/0x10 [ 51.046599][ T5962] ? __build_skb_around+0x278/0x3b0 [ 51.048004][ T5962] netif_receive_skb_list+0x4f/0x4a0 [ 51.049513][ T5962] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 51.051373][ T5962] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 51.053314][ T5962] ? bpf_test_timer_continue+0x150/0x3d0 [ 51.054975][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 51.056744][ T5962] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 51.058447][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 51.060053][ T5962] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 51.061749][ T5962] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 51.063432][ T5962] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 51.065282][ T5962] ? 0xffffffffa00045c0 [ 51.066515][ T5962] ? 0xffffffffa00045c0 [ 51.067765][ T5962] ? 0xffffffffa00045c0 [ 51.069263][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 51.071981][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 51.074095][ T5962] ? lock_acquire+0x2f/0xb0 [ 51.075371][ T5962] ? __fget_files+0x40/0x3f0 [ 51.076664][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 51.078364][ T5962] ? fput+0x30/0x390 [ 51.079511][ T5962] ? __bpf_prog_get+0xa0/0x290 [ 51.080832][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 51.082381][ T5962] __sys_bpf+0xfc6/0x49a0 [ 51.083551][ T5962] ? find_held_lock+0x2d/0x110 [ 51.084821][ T5962] ? __pfx___sys_bpf+0x10/0x10 [ 51.086071][ T5962] ? __might_fault+0x13b/0x190 [ 51.087360][ T5962] ? __pfx_lock_release+0x10/0x10 [ 51.088833][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 51.090616][ T5962] ? lock_acquire+0x2f/0xb0 [ 51.092011][ T5962] ? __might_fault+0xe3/0x190 [ 51.093236][ T5962] ? xfd_validate_state+0x5d/0x180 [ 51.094603][ T5962] ? rcu_is_watching+0x12/0xc0 [ 51.095985][ T5962] __x64_sys_bpf+0x78/0xc0 [ 51.097461][ T5962] ? lockdep_hardirqs_on+0x7c/0x110 [ 51.098879][ T5962] do_syscall_64+0xcd/0x250 [ 51.100142][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.101809][ T5962] RIP: 0033:0x7f1b5711ee99 [ 51.102998][ T5962] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 51.108204][ T5962] RSP: 002b:00007f1b570d9228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 51.110544][ T5962] RAX: ffffffffffffffda RBX: 00007f1b571a9328 RCX: 00007f1b5711ee99 [ 51.112755][ T5962] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 51.115205][ T5962] RBP: 00007f1b571a9320 R08: 00007f1b570d96c0 R09: 00007f1b570d96c0 [ 51.117740][ T5962] R10: 00007f1b570d96c0 R11: 0000000000000246 R12: 00007f1b57176074 [ 51.119976][ T5962] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffed9b8fc98 [ 51.122121][ T5962] [ 51.123043][ T5962] BUG: Bad page state in process syz-executor392 pfn:333f1 [ 51.125094][ T5962] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x8 pfn:0x333f1 [ 51.127387][ T5962] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 51.129384][ T5962] raw: 00fff00000000000 dead000000000040 ffff888106115000 0000000000000000 [ 51.131999][ T5962] raw: 0000000000000008 0000000000000001 00000000ffffffff 0000000000000000 [ 51.134599][ T5962] page dumped because: page_pool leak [ 51.136218][ T5962] page_owner tracks the page as allocated [ 51.138162][ T5962] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5962, tgid 5958 (syz-executor392), ts 44238820575, free_ts 44066357450 [ 51.142779][ T5962] post_alloc_hook+0x2d1/0x350 [ 51.144063][ T5962] get_page_from_freelist+0x101e/0x3070 [ 51.145482][ T5962] __alloc_pages_noprof+0x223/0x25a0 [ 51.146846][ T5962] alloc_pages_bulk_noprof+0x77c/0x1110 [ 51.148296][ T5962] __page_pool_alloc_pages_slow+0x18f/0x770 [ 51.149924][ T5962] page_pool_alloc_netmem+0xc4/0x160 [ 51.151902][ T5962] page_pool_alloc_pages+0x1a/0x60 [ 51.153493][ T5962] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 51.155588][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 51.157660][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 51.159303][ T5962] __sys_bpf+0xfc6/0x49a0 [ 51.160633][ T5962] __x64_sys_bpf+0x78/0xc0 [ 51.162068][ T5962] do_syscall_64+0xcd/0x250 [ 51.163420][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.165222][ T5962] page last free pid 5953 tgid 5952 stack trace: [ 51.167023][ T5962] free_unref_page+0x5f4/0xdc0 [ 51.168272][ T5962] vfree+0x17a/0x890 [ 51.169466][ T5962] hashlimit_mt_destroy_v1+0x78/0x90 [ 51.170914][ T5962] cleanup_entry+0x19f/0x3a0 [ 51.172366][ T5962] translate_table+0xddd/0x17b0 [ 51.173695][ T5962] do_ip6t_set_ctl+0x605/0xc40 [ 51.175041][ T5962] nf_setsockopt+0x8a/0xf0 [ 51.176643][ T5962] ipv6_setsockopt+0x135/0x170 [ 51.177990][ T5962] rawv6_setsockopt+0xd7/0x680 [ 51.179296][ T5962] do_sock_setsockopt+0x222/0x480 [ 51.180660][ T5962] __sys_setsockopt+0x1a4/0x270 [ 51.182057][ T5962] __x64_sys_setsockopt+0xbd/0x160 [ 51.183444][ T5962] do_syscall_64+0xcd/0x250 [ 51.184914][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.186552][ T5962] Modules linked in: [ 51.187640][ T5962] CPU: 2 UID: 0 PID: 5962 Comm: syz-executor392 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 51.190904][ T5962] Tainted: [B]=BAD_PAGE [ 51.192045][ T5962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 51.194826][ T5962] Call Trace: [ 51.195734][ T5962] [ 51.196520][ T5962] dump_stack_lvl+0x16c/0x1f0 [ 51.197783][ T5962] bad_page+0xb3/0x1f0 [ 51.198854][ T5962] ? __pfx_bad_page+0x10/0x10 [ 51.200144][ T5962] ? page_bad_reason+0x9d/0x1e0 [ 51.201441][ T5962] free_unref_page+0x657/0xdc0 [ 51.202707][ T5962] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 51.204314][ T5962] ? __phys_addr+0xc6/0x150 [ 51.205520][ T5962] skb_free_head+0xa0/0x1d0 [ 51.206726][ T5962] skb_release_data+0x560/0x730 [ 51.208037][ T5962] sk_skb_reason_drop+0x129/0x1a0 [ 51.209379][ T5962] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 51.211097][ T5962] ? kernel_text_address+0x8d/0x100 [ 51.212724][ T5962] ? hlock_class+0x4e/0x130 [ 51.214016][ T5962] ? __lock_acquire+0x163e/0x3ce0 [ 51.215541][ T5962] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 51.217687][ T5962] ? hlock_class+0x4e/0x130 [ 51.219078][ T5962] ? __lock_acquire+0xbdd/0x3ce0 [ 51.220600][ T5962] ? __pfx___lock_acquire+0x10/0x10 [ 51.222154][ T5962] __netif_receive_skb_list_core+0x357/0x950 [ 51.224086][ T5962] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 51.225941][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 51.227335][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 51.229045][ T5962] ? lock_acquire+0x2f/0xb0 [ 51.230281][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 51.232052][ T5962] netif_receive_skb_list_internal+0x753/0xdb0 [ 51.233863][ T5962] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 51.235607][ T5962] ? __pfx_eth_type_trans+0x10/0x10 [ 51.236972][ T5962] ? __build_skb_around+0x278/0x3b0 [ 51.238348][ T5962] netif_receive_skb_list+0x4f/0x4a0 [ 51.239774][ T5962] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 51.241434][ T5962] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 51.243175][ T5962] ? bpf_test_timer_continue+0x150/0x3d0 [ 51.244719][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 51.246098][ T5962] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 51.247593][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 51.249113][ T5962] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 51.250910][ T5962] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 51.252612][ T5962] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 51.254093][ T5962] ? 0xffffffffa00045c0 [ 51.255512][ T5962] ? 0xffffffffa00045c0 [ 51.256681][ T5962] ? 0xffffffffa00045c0 [ 51.258314][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 51.259902][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 51.261314][ T5962] ? lock_acquire+0x2f/0xb0 [ 51.262525][ T5962] ? __fget_files+0x40/0x3f0 [ 51.263754][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 51.265284][ T5962] ? fput+0x30/0x390 [ 51.266331][ T5962] ? __bpf_prog_get+0xa0/0x290 [ 51.267563][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 51.269055][ T5962] __sys_bpf+0xfc6/0x49a0 [ 51.270221][ T5962] ? find_held_lock+0x2d/0x110 [ 51.271554][ T5962] ? __pfx___sys_bpf+0x10/0x10 [ 51.272866][ T5962] ? __might_fault+0x13b/0x190 [ 51.274190][ T5962] ? __pfx_lock_release+0x10/0x10 [ 51.275575][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 51.276931][ T5962] ? lock_acquire+0x2f/0xb0 [ 51.278135][ T5962] ? __might_fault+0xe3/0x190 [ 51.279382][ T5962] ? xfd_validate_state+0x5d/0x180 [ 51.280713][ T5962] ? rcu_is_watching+0x12/0xc0 [ 51.281951][ T5962] __x64_sys_bpf+0x78/0xc0 [ 51.283111][ T5962] ? lockdep_hardirqs_on+0x7c/0x110 [ 51.284477][ T5962] do_syscall_64+0xcd/0x250 [ 51.285665][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.287195][ T5962] RIP: 0033:0x7f1b5711ee99 [ 51.288352][ T5962] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 51.293821][ T5962] RSP: 002b:00007f1b570d9228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 51.296342][ T5962] RAX: ffffffffffffffda RBX: 00007f1b571a9328 RCX: 00007f1b5711ee99 [ 51.298478][ T5962] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 51.300544][ T5962] RBP: 00007f1b571a9320 R08: 00007f1b570d96c0 R09: 00007f1b570d96c0 [ 51.302661][ T5962] R10: 00007f1b570d96c0 R11: 0000000000000246 R12: 00007f1b57176074 [ 51.304731][ T5962] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffed9b8fc98 [ 51.306786][ T5962] [ 51.307750][ T5962] BUG: Bad page state in process syz-executor392 pfn:333f2 [ 51.309897][ T5962] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x333f2 [ 51.312720][ T5962] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 51.314821][ T5962] raw: 00fff00000000000 dead000000000040 ffff888106115000 0000000000000000 [ 51.317120][ T5962] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 51.319390][ T5962] page dumped because: page_pool leak [ 51.320817][ T5962] page_owner tracks the page as allocated [ 51.322364][ T5962] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5962, tgid 5958 (syz-executor392), ts 44238812737, free_ts 44066360953 [ 51.326815][ T5962] post_alloc_hook+0x2d1/0x350 [ 51.328098][ T5962] get_page_from_freelist+0x101e/0x3070 [ 51.329553][ T5962] __alloc_pages_noprof+0x223/0x25a0 [ 51.330915][ T5962] alloc_pages_bulk_noprof+0x77c/0x1110 [ 51.332422][ T5962] __page_pool_alloc_pages_slow+0x18f/0x770 [ 51.333975][ T5962] page_pool_alloc_netmem+0xc4/0x160 [ 51.335358][ T5962] page_pool_alloc_pages+0x1a/0x60 [ 51.336714][ T5962] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 51.338421][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 51.339843][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 51.341415][ T5962] __sys_bpf+0xfc6/0x49a0 [ 51.342647][ T5962] __x64_sys_bpf+0x78/0xc0 [ 51.343857][ T5962] do_syscall_64+0xcd/0x250 [ 51.345087][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.346655][ T5962] page last free pid 5953 tgid 5952 stack trace: [ 51.348292][ T5962] free_unref_page+0x5f4/0xdc0 [ 51.349543][ T5962] vfree+0x17a/0x890 [ 51.350561][ T5962] hashlimit_mt_destroy_v1+0x78/0x90 [ 51.352153][ T5962] cleanup_entry+0x19f/0x3a0 [ 51.353394][ T5962] translate_table+0xddd/0x17b0 [ 51.354689][ T5962] do_ip6t_set_ctl+0x605/0xc40 [ 51.355980][ T5962] nf_setsockopt+0x8a/0xf0 [ 51.357171][ T5962] ipv6_setsockopt+0x135/0x170 [ 51.358432][ T5962] rawv6_setsockopt+0xd7/0x680 [ 51.359709][ T5962] do_sock_setsockopt+0x222/0x480 [ 51.361031][ T5962] __sys_setsockopt+0x1a4/0x270 [ 51.362377][ T5962] __x64_sys_setsockopt+0xbd/0x160 [ 51.363732][ T5962] do_syscall_64+0xcd/0x250 [ 51.364951][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.366514][ T5962] Modules linked in: [ 51.367555][ T5962] CPU: 2 UID: 0 PID: 5962 Comm: syz-executor392 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 51.370795][ T5962] Tainted: [B]=BAD_PAGE [ 51.371904][ T5962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 51.375248][ T5962] Call Trace: [ 51.376197][ T5962] [ 51.377035][ T5962] dump_stack_lvl+0x16c/0x1f0 [ 51.378350][ T5962] bad_page+0xb3/0x1f0 [ 51.379516][ T5962] ? __pfx_bad_page+0x10/0x10 [ 51.380844][ T5962] ? page_bad_reason+0x9d/0x1e0 [ 51.382222][ T5962] free_unref_page+0x657/0xdc0 [ 51.383567][ T5962] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 51.385177][ T5962] ? __phys_addr+0xc6/0x150 [ 51.386402][ T5962] skb_free_head+0xa0/0x1d0 [ 51.387633][ T5962] skb_release_data+0x560/0x730 [ 51.388909][ T5962] sk_skb_reason_drop+0x129/0x1a0 [ 51.390195][ T5962] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 51.391935][ T5962] ? kernel_text_address+0x8d/0x100 [ 51.393309][ T5962] ? hlock_class+0x4e/0x130 [ 51.394527][ T5962] ? __lock_acquire+0x163e/0x3ce0 [ 51.395893][ T5962] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 51.397759][ T5962] ? hlock_class+0x4e/0x130 [ 51.398921][ T5962] ? __lock_acquire+0xbdd/0x3ce0 [ 51.400239][ T5962] ? __pfx___lock_acquire+0x10/0x10 [ 51.401612][ T5962] __netif_receive_skb_list_core+0x357/0x950 [ 51.403164][ T5962] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 51.404892][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 51.406271][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 51.407953][ T5962] ? lock_acquire+0x2f/0xb0 [ 51.409166][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 51.410861][ T5962] netif_receive_skb_list_internal+0x753/0xdb0 [ 51.412494][ T5962] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 51.414390][ T5962] ? __pfx_eth_type_trans+0x10/0x10 [ 51.415819][ T5962] ? __build_skb_around+0x278/0x3b0 [ 51.417629][ T5962] netif_receive_skb_list+0x4f/0x4a0 [ 51.419220][ T5962] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 51.421022][ T5962] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 51.422836][ T5962] ? bpf_test_timer_continue+0x150/0x3d0 [ 51.424498][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 51.426092][ T5962] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 51.427858][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 51.429448][ T5962] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 51.431037][ T5962] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 51.432603][ T5962] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 51.433946][ T5962] ? 0xffffffffa00045c0 [ 51.434961][ T5962] ? 0xffffffffa00045c0 [ 51.436024][ T5962] ? 0xffffffffa00045c0 [ 51.437121][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 51.438724][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 51.440191][ T5962] ? lock_acquire+0x2f/0xb0 [ 51.441405][ T5962] ? __fget_files+0x40/0x3f0 [ 51.442698][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 51.444273][ T5962] ? fput+0x30/0x390 [ 51.445336][ T5962] ? __bpf_prog_get+0xa0/0x290 [ 51.446522][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 51.448054][ T5962] __sys_bpf+0xfc6/0x49a0 [ 51.449217][ T5962] ? find_held_lock+0x2d/0x110 [ 51.450861][ T5962] ? __pfx___sys_bpf+0x10/0x10 [ 51.452216][ T5962] ? __might_fault+0x13b/0x190 [ 51.453492][ T5962] ? __pfx_lock_release+0x10/0x10 [ 51.455185][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 51.457184][ T5962] ? lock_acquire+0x2f/0xb0 [ 51.458813][ T5962] ? __might_fault+0xe3/0x190 [ 51.460360][ T5962] ? xfd_validate_state+0x5d/0x180 [ 51.462069][ T5962] ? rcu_is_watching+0x12/0xc0 [ 51.463524][ T5962] __x64_sys_bpf+0x78/0xc0 [ 51.464758][ T5962] ? lockdep_hardirqs_on+0x7c/0x110 [ 51.466145][ T5962] do_syscall_64+0xcd/0x250 [ 51.467372][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.469391][ T5962] RIP: 0033:0x7f1b5711ee99 [ 51.470961][ T5962] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 51.476913][ T5962] RSP: 002b:00007f1b570d9228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 51.479117][ T5962] RAX: ffffffffffffffda RBX: 00007f1b571a9328 RCX: 00007f1b5711ee99 [ 51.481235][ T5962] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 51.483319][ T5962] RBP: 00007f1b571a9320 R08: 00007f1b570d96c0 R09: 00007f1b570d96c0 [ 51.485426][ T5962] R10: 00007f1b570d96c0 R11: 0000000000000246 R12: 00007f1b57176074 [ 51.487530][ T5962] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffed9b8fc98 [ 51.489724][ T5962] [ 51.490772][ T5962] BUG: Bad page state in process syz-executor392 pfn:333f3 [ 51.493287][ T5962] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x333f3 [ 51.495777][ T5962] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 51.497654][ T5962] raw: 00fff00000000000 dead000000000040 ffff888106115000 0000000000000000 [ 51.499925][ T5962] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 51.502256][ T5962] page dumped because: page_pool leak [ 51.503678][ T5962] page_owner tracks the page as allocated [ 51.505174][ T5962] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5962, tgid 5958 (syz-executor392), ts 44238805570, free_ts 44066364436 [ 51.510052][ T5962] post_alloc_hook+0x2d1/0x350 [ 51.511503][ T5962] get_page_from_freelist+0x101e/0x3070 [ 51.513040][ T5962] __alloc_pages_noprof+0x223/0x25a0 [ 51.514383][ T5962] alloc_pages_bulk_noprof+0x77c/0x1110 [ 51.515863][ T5962] __page_pool_alloc_pages_slow+0x18f/0x770 [ 51.517362][ T5962] page_pool_alloc_netmem+0xc4/0x160 [ 51.518698][ T5962] page_pool_alloc_pages+0x1a/0x60 [ 51.520058][ T5962] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 51.521663][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 51.523127][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 51.524520][ T5962] __sys_bpf+0xfc6/0x49a0 [ 51.525670][ T5962] __x64_sys_bpf+0x78/0xc0 [ 51.526895][ T5962] do_syscall_64+0xcd/0x250 [ 51.528171][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.529775][ T5962] page last free pid 5953 tgid 5952 stack trace: [ 51.531408][ T5962] free_unref_page+0x5f4/0xdc0 [ 51.532747][ T5962] vfree+0x17a/0x890 [ 51.533770][ T5962] hashlimit_mt_destroy_v1+0x78/0x90 [ 51.535091][ T5962] cleanup_entry+0x19f/0x3a0 [ 51.536241][ T5962] translate_table+0xddd/0x17b0 [ 51.537485][ T5962] do_ip6t_set_ctl+0x605/0xc40 [ 51.538763][ T5962] nf_setsockopt+0x8a/0xf0 [ 51.539985][ T5962] ipv6_setsockopt+0x135/0x170 [ 51.541248][ T5962] rawv6_setsockopt+0xd7/0x680 [ 51.542581][ T5962] do_sock_setsockopt+0x222/0x480 [ 51.544055][ T5962] __sys_setsockopt+0x1a4/0x270 [ 51.545458][ T5962] __x64_sys_setsockopt+0xbd/0x160 [ 51.546830][ T5962] do_syscall_64+0xcd/0x250 [ 51.548065][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.549772][ T5962] Modules linked in: [ 51.550797][ T5962] CPU: 2 UID: 0 PID: 5962 Comm: syz-executor392 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 51.554110][ T5962] Tainted: [B]=BAD_PAGE [ 51.555244][ T5962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 51.558127][ T5962] Call Trace: [ 51.559013][ T5962] [ 51.559925][ T5962] dump_stack_lvl+0x16c/0x1f0 [ 51.561219][ T5962] bad_page+0xb3/0x1f0 [ 51.562337][ T5962] ? __pfx_bad_page+0x10/0x10 [ 51.563621][ T5962] ? page_bad_reason+0x9d/0x1e0 [ 51.564976][ T5962] free_unref_page+0x657/0xdc0 [ 51.566264][ T5962] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 51.567877][ T5962] ? __phys_addr+0xc6/0x150 [ 51.569099][ T5962] skb_free_head+0xa0/0x1d0 [ 51.570320][ T5962] skb_release_data+0x560/0x730 [ 51.571630][ T5962] sk_skb_reason_drop+0x129/0x1a0 [ 51.572976][ T5962] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 51.574712][ T5962] ? kernel_text_address+0x8d/0x100 [ 51.576099][ T5962] ? hlock_class+0x4e/0x130 [ 51.577314][ T5962] ? __lock_acquire+0x163e/0x3ce0 [ 51.578650][ T5962] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 51.580495][ T5962] ? hlock_class+0x4e/0x130 [ 51.581704][ T5962] ? __lock_acquire+0xbdd/0x3ce0 [ 51.583015][ T5962] ? __pfx___lock_acquire+0x10/0x10 [ 51.584384][ T5962] __netif_receive_skb_list_core+0x357/0x950 [ 51.585962][ T5962] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 51.587735][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 51.589115][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 51.590897][ T5962] ? lock_acquire+0x2f/0xb0 [ 51.592190][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 51.593983][ T5962] netif_receive_skb_list_internal+0x753/0xdb0 [ 51.595758][ T5962] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 51.597900][ T5962] ? __pfx_eth_type_trans+0x10/0x10 [ 51.599296][ T5962] ? __build_skb_around+0x278/0x3b0 [ 51.600706][ T5962] netif_receive_skb_list+0x4f/0x4a0 [ 51.602120][ T5962] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 51.603777][ T5962] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 51.605515][ T5962] ? bpf_test_timer_continue+0x150/0x3d0 [ 51.606985][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 51.608386][ T5962] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 51.609992][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 51.611841][ T5962] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 51.613629][ T5962] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 51.615251][ T5962] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 51.617082][ T5962] ? 0xffffffffa00045c0 [ 51.618237][ T5962] ? 0xffffffffa00045c0 [ 51.619565][ T5962] ? 0xffffffffa00045c0 [ 51.620782][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 51.622418][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 51.624149][ T5962] ? lock_acquire+0x2f/0xb0 [ 51.625633][ T5962] ? __fget_files+0x40/0x3f0 [ 51.627130][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 51.629025][ T5962] ? fput+0x30/0x390 [ 51.630528][ T5962] ? __bpf_prog_get+0xa0/0x290 [ 51.632239][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 51.633795][ T5962] __sys_bpf+0xfc6/0x49a0 [ 51.634982][ T5962] ? find_held_lock+0x2d/0x110 [ 51.636314][ T5962] ? __pfx___sys_bpf+0x10/0x10 [ 51.637793][ T5962] ? __might_fault+0x13b/0x190 [ 51.639159][ T5962] ? __pfx_lock_release+0x10/0x10 [ 51.640789][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 51.642187][ T5962] ? lock_acquire+0x2f/0xb0 [ 51.643397][ T5962] ? __might_fault+0xe3/0x190 [ 51.644664][ T5962] ? xfd_validate_state+0x5d/0x180 [ 51.646021][ T5962] ? rcu_is_watching+0x12/0xc0 [ 51.647289][ T5962] __x64_sys_bpf+0x78/0xc0 [ 51.648482][ T5962] ? lockdep_hardirqs_on+0x7c/0x110 [ 51.649864][ T5962] do_syscall_64+0xcd/0x250 [ 51.651265][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.652870][ T5962] RIP: 0033:0x7f1b5711ee99 [ 51.654068][ T5962] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 51.659062][ T5962] RSP: 002b:00007f1b570d9228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 51.661329][ T5962] RAX: ffffffffffffffda RBX: 00007f1b571a9328 RCX: 00007f1b5711ee99 [ 51.663519][ T5962] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 51.665645][ T5962] RBP: 00007f1b571a9320 R08: 00007f1b570d96c0 R09: 00007f1b570d96c0 [ 51.667786][ T5962] R10: 00007f1b570d96c0 R11: 0000000000000246 R12: 00007f1b57176074 [ 51.669965][ T5962] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffed9b8fc98 [ 51.672189][ T5962] [ 51.673130][ T5962] BUG: Bad page state in process syz-executor392 pfn:27330 [ 51.675162][ T5962] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888027334000 pfn:0x27330 [ 51.677910][ T5962] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 51.679960][ T5962] raw: 00fff00000000000 dead000000000040 ffff888106115000 0000000000000000 [ 51.682651][ T5962] raw: ffff888027334000 0000000000000001 00000000ffffffff 0000000000000000 [ 51.684946][ T5962] page dumped because: page_pool leak [ 51.686408][ T5962] page_owner tracks the page as allocated [ 51.687928][ T5962] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5962, tgid 5958 (syz-executor392), ts 44238798802, free_ts 44066368306 [ 51.692889][ T5962] post_alloc_hook+0x2d1/0x350 [ 51.694168][ T5962] get_page_from_freelist+0x101e/0x3070 [ 51.696088][ T5962] __alloc_pages_noprof+0x223/0x25a0 [ 51.697462][ T5962] alloc_pages_bulk_noprof+0x77c/0x1110 [ 51.698939][ T5962] __page_pool_alloc_pages_slow+0x18f/0x770 [ 51.700553][ T5962] page_pool_alloc_netmem+0xc4/0x160 [ 51.702274][ T5962] page_pool_alloc_pages+0x1a/0x60 [ 51.703936][ T5962] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 51.705697][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 51.707161][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 51.708593][ T5962] __sys_bpf+0xfc6/0x49a0 [ 51.709750][ T5962] __x64_sys_bpf+0x78/0xc0 [ 51.710954][ T5962] do_syscall_64+0xcd/0x250 [ 51.712325][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.713927][ T5962] page last free pid 5953 tgid 5952 stack trace: [ 51.715597][ T5962] free_unref_page+0x5f4/0xdc0 [ 51.716865][ T5962] vfree+0x17a/0x890 [ 51.717875][ T5962] hashlimit_mt_destroy_v1+0x78/0x90 [ 51.719254][ T5962] cleanup_entry+0x19f/0x3a0 [ 51.720523][ T5962] translate_table+0xddd/0x17b0 [ 51.721866][ T5962] do_ip6t_set_ctl+0x605/0xc40 [ 51.723144][ T5962] nf_setsockopt+0x8a/0xf0 [ 51.724363][ T5962] ipv6_setsockopt+0x135/0x170 [ 51.725629][ T5962] rawv6_setsockopt+0xd7/0x680 [ 51.726905][ T5962] do_sock_setsockopt+0x222/0x480 [ 51.728423][ T5962] __sys_setsockopt+0x1a4/0x270 [ 51.730043][ T5962] __x64_sys_setsockopt+0xbd/0x160 [ 51.731417][ T5962] do_syscall_64+0xcd/0x250 [ 51.732743][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.734335][ T5962] Modules linked in: [ 51.735417][ T5962] CPU: 2 UID: 0 PID: 5962 Comm: syz-executor392 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 51.739704][ T5962] Tainted: [B]=BAD_PAGE [ 51.740953][ T5962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 51.744178][ T5962] Call Trace: [ 51.745195][ T5962] [ 51.746172][ T5962] dump_stack_lvl+0x16c/0x1f0 [ 51.747453][ T5962] bad_page+0xb3/0x1f0 [ 51.748577][ T5962] ? __pfx_bad_page+0x10/0x10 [ 51.749873][ T5962] ? page_bad_reason+0x9d/0x1e0 [ 51.751206][ T5962] free_unref_page+0x657/0xdc0 [ 51.752493][ T5962] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 51.754076][ T5962] ? __phys_addr+0xc6/0x150 [ 51.755252][ T5962] skb_free_head+0xa0/0x1d0 [ 51.756487][ T5962] skb_release_data+0x560/0x730 [ 51.757783][ T5962] sk_skb_reason_drop+0x129/0x1a0 [ 51.759095][ T5962] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 51.760832][ T5962] ? kernel_text_address+0x8d/0x100 [ 51.762181][ T5962] ? hlock_class+0x4e/0x130 [ 51.763397][ T5962] ? __lock_acquire+0x163e/0x3ce0 [ 51.764700][ T5962] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 51.766521][ T5962] ? hlock_class+0x4e/0x130 [ 51.767730][ T5962] ? __lock_acquire+0xbdd/0x3ce0 [ 51.769041][ T5962] ? __pfx___lock_acquire+0x10/0x10 [ 51.770413][ T5962] __netif_receive_skb_list_core+0x357/0x950 [ 51.772007][ T5962] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 51.773739][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 51.775111][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 51.776733][ T5962] ? lock_acquire+0x2f/0xb0 [ 51.777933][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 51.779807][ T5962] netif_receive_skb_list_internal+0x753/0xdb0 [ 51.781646][ T5962] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 51.783556][ T5962] ? __pfx_eth_type_trans+0x10/0x10 [ 51.784892][ T5962] ? __build_skb_around+0x278/0x3b0 [ 51.786218][ T5962] netif_receive_skb_list+0x4f/0x4a0 [ 51.787655][ T5962] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 51.789291][ T5962] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 51.791037][ T5962] ? bpf_test_timer_continue+0x150/0x3d0 [ 51.793138][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 51.794963][ T5962] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 51.796689][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 51.798360][ T5962] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 51.800207][ T5962] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 51.801814][ T5962] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 51.803348][ T5962] ? 0xffffffffa00045c0 [ 51.804471][ T5962] ? 0xffffffffa00045c0 [ 51.805575][ T5962] ? 0xffffffffa00045c0 [ 51.806683][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 51.808313][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 51.810377][ T5962] ? lock_acquire+0x2f/0xb0 [ 51.811718][ T5962] ? __fget_files+0x40/0x3f0 [ 51.813002][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 51.814782][ T5962] ? fput+0x30/0x390 [ 51.815922][ T5962] ? __bpf_prog_get+0xa0/0x290 [ 51.817288][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 51.819320][ T5962] __sys_bpf+0xfc6/0x49a0 [ 51.820742][ T5962] ? find_held_lock+0x2d/0x110 [ 51.822151][ T5962] ? __pfx___sys_bpf+0x10/0x10 [ 51.823563][ T5962] ? __might_fault+0x13b/0x190 [ 51.825153][ T5962] ? __pfx_lock_release+0x10/0x10 [ 51.826784][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 51.828608][ T5962] ? lock_acquire+0x2f/0xb0 [ 51.830193][ T5962] ? __might_fault+0xe3/0x190 [ 51.831862][ T5962] ? xfd_validate_state+0x5d/0x180 [ 51.833622][ T5962] ? rcu_is_watching+0x12/0xc0 [ 51.835079][ T5962] __x64_sys_bpf+0x78/0xc0 [ 51.836283][ T5962] ? lockdep_hardirqs_on+0x7c/0x110 [ 51.837659][ T5962] do_syscall_64+0xcd/0x250 [ 51.838948][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.840603][ T5962] RIP: 0033:0x7f1b5711ee99 [ 51.841869][ T5962] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 51.847303][ T5962] RSP: 002b:00007f1b570d9228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 51.849876][ T5962] RAX: ffffffffffffffda RBX: 00007f1b571a9328 RCX: 00007f1b5711ee99 [ 51.852160][ T5962] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 51.854252][ T5962] RBP: 00007f1b571a9320 R08: 00007f1b570d96c0 R09: 00007f1b570d96c0 [ 51.856418][ T5962] R10: 00007f1b570d96c0 R11: 0000000000000246 R12: 00007f1b57176074 [ 51.858657][ T5962] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffed9b8fc98 [ 51.860901][ T5962] [ 51.861905][ T5962] BUG: Bad page state in process syz-executor392 pfn:27331 [ 51.864119][ T5962] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x8 pfn:0x27331 [ 51.866872][ T5962] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 51.868978][ T5962] raw: 00fff00000000000 dead000000000040 ffff888106115000 0000000000000000 [ 51.871619][ T5962] raw: 0000000000000008 0000000000000001 00000000ffffffff 0000000000000000 [ 51.874359][ T5962] page dumped because: page_pool leak [ 51.876098][ T5962] page_owner tracks the page as allocated [ 51.877772][ T5962] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5962, tgid 5958 (syz-executor392), ts 44238791856, free_ts 44066372441 [ 51.882454][ T5962] post_alloc_hook+0x2d1/0x350 [ 51.883728][ T5962] get_page_from_freelist+0x101e/0x3070 [ 51.885166][ T5962] __alloc_pages_noprof+0x223/0x25a0 [ 51.886726][ T5962] alloc_pages_bulk_noprof+0x77c/0x1110 [ 51.888408][ T5962] __page_pool_alloc_pages_slow+0x18f/0x770 [ 51.890097][ T5962] page_pool_alloc_netmem+0xc4/0x160 [ 51.891953][ T5962] page_pool_alloc_pages+0x1a/0x60 [ 51.893997][ T5962] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 51.895946][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 51.897656][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 51.899282][ T5962] __sys_bpf+0xfc6/0x49a0 [ 51.900575][ T5962] __x64_sys_bpf+0x78/0xc0 [ 51.901876][ T5962] do_syscall_64+0xcd/0x250 [ 51.903106][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.904705][ T5962] page last free pid 5953 tgid 5952 stack trace: [ 51.906465][ T5962] free_unref_page+0x5f4/0xdc0 [ 51.907828][ T5962] vfree+0x17a/0x890 [ 51.909149][ T5962] hashlimit_mt_destroy_v1+0x78/0x90 [ 51.910583][ T5962] cleanup_entry+0x19f/0x3a0 [ 51.911964][ T5962] translate_table+0xddd/0x17b0 [ 51.913323][ T5962] do_ip6t_set_ctl+0x605/0xc40 [ 51.914643][ T5962] nf_setsockopt+0x8a/0xf0 [ 51.916010][ T5962] ipv6_setsockopt+0x135/0x170 [ 51.917589][ T5962] rawv6_setsockopt+0xd7/0x680 [ 51.919349][ T5962] do_sock_setsockopt+0x222/0x480 [ 51.921172][ T5962] __sys_setsockopt+0x1a4/0x270 [ 51.922727][ T5962] __x64_sys_setsockopt+0xbd/0x160 [ 51.924064][ T5962] do_syscall_64+0xcd/0x250 [ 51.925230][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.926735][ T5962] Modules linked in: [ 51.927786][ T5962] CPU: 2 UID: 0 PID: 5962 Comm: syz-executor392 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 51.931039][ T5962] Tainted: [B]=BAD_PAGE [ 51.932175][ T5962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 51.935368][ T5962] Call Trace: [ 51.936358][ T5962] [ 51.937194][ T5962] dump_stack_lvl+0x16c/0x1f0 [ 51.938599][ T5962] bad_page+0xb3/0x1f0 [ 51.939720][ T5962] ? __pfx_bad_page+0x10/0x10 [ 51.940974][ T5962] ? page_bad_reason+0x9d/0x1e0 [ 51.942270][ T5962] free_unref_page+0x657/0xdc0 [ 51.943645][ T5962] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 51.945242][ T5962] ? __phys_addr+0xc6/0x150 [ 51.946462][ T5962] skb_free_head+0xa0/0x1d0 [ 51.947688][ T5962] skb_release_data+0x560/0x730 [ 51.949065][ T5962] sk_skb_reason_drop+0x129/0x1a0 [ 51.950601][ T5962] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 51.952623][ T5962] ? kernel_text_address+0x8d/0x100 [ 51.954108][ T5962] ? hlock_class+0x4e/0x130 [ 51.955428][ T5962] ? __lock_acquire+0x163e/0x3ce0 [ 51.956901][ T5962] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 51.959030][ T5962] ? hlock_class+0x4e/0x130 [ 51.960545][ T5962] ? __lock_acquire+0xbdd/0x3ce0 [ 51.961954][ T5962] ? __pfx___lock_acquire+0x10/0x10 [ 51.963441][ T5962] __netif_receive_skb_list_core+0x357/0x950 [ 51.965442][ T5962] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 51.967344][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 51.968742][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 51.970438][ T5962] ? lock_acquire+0x2f/0xb0 [ 51.971773][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 51.973782][ T5962] netif_receive_skb_list_internal+0x753/0xdb0 [ 51.975380][ T5962] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 51.977254][ T5962] ? __pfx_eth_type_trans+0x10/0x10 [ 51.978627][ T5962] ? __build_skb_around+0x278/0x3b0 [ 51.980063][ T5962] netif_receive_skb_list+0x4f/0x4a0 [ 51.981478][ T5962] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 51.983141][ T5962] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 51.984885][ T5962] ? bpf_test_timer_continue+0x150/0x3d0 [ 51.986372][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 51.987793][ T5962] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 51.989408][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 51.990998][ T5962] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 51.992647][ T5962] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 51.994477][ T5962] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 51.996775][ T5962] ? 0xffffffffa00045c0 [ 51.998235][ T5962] ? 0xffffffffa00045c0 [ 51.999491][ T5962] ? 0xffffffffa00045c0 [ 52.000724][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 52.002344][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 52.003792][ T5962] ? lock_acquire+0x2f/0xb0 [ 52.005022][ T5962] ? __fget_files+0x40/0x3f0 [ 52.006273][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 52.008099][ T5962] ? fput+0x30/0x390 [ 52.009166][ T5962] ? __bpf_prog_get+0xa0/0x290 [ 52.010452][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 52.012045][ T5962] __sys_bpf+0xfc6/0x49a0 [ 52.013234][ T5962] ? find_held_lock+0x2d/0x110 [ 52.014718][ T5962] ? __pfx___sys_bpf+0x10/0x10 [ 52.016098][ T5962] ? __might_fault+0x13b/0x190 [ 52.017465][ T5962] ? __pfx_lock_release+0x10/0x10 [ 52.018850][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 52.020269][ T5962] ? lock_acquire+0x2f/0xb0 [ 52.021427][ T5962] ? __might_fault+0xe3/0x190 [ 52.022602][ T5962] ? xfd_validate_state+0x5d/0x180 [ 52.023979][ T5962] ? rcu_is_watching+0x12/0xc0 [ 52.025262][ T5962] __x64_sys_bpf+0x78/0xc0 [ 52.026556][ T5962] ? lockdep_hardirqs_on+0x7c/0x110 [ 52.028096][ T5962] do_syscall_64+0xcd/0x250 [ 52.029646][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.031669][ T5962] RIP: 0033:0x7f1b5711ee99 [ 52.032978][ T5962] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 52.038817][ T5962] RSP: 002b:00007f1b570d9228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 52.041314][ T5962] RAX: ffffffffffffffda RBX: 00007f1b571a9328 RCX: 00007f1b5711ee99 [ 52.043525][ T5962] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 52.045655][ T5962] RBP: 00007f1b571a9320 R08: 00007f1b570d96c0 R09: 00007f1b570d96c0 [ 52.047979][ T5962] R10: 00007f1b570d96c0 R11: 0000000000000246 R12: 00007f1b57176074 [ 52.050194][ T5962] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffed9b8fc98 [ 52.052802][ T5962] [ 52.053832][ T5962] BUG: Bad page state in process syz-executor392 pfn:27332 [ 52.056011][ T5962] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x27332 [ 52.058689][ T5962] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 52.060664][ T5962] raw: 00fff00000000000 dead000000000040 ffff888106115000 0000000000000000 [ 52.063041][ T5962] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 52.065359][ T5962] page dumped because: page_pool leak [ 52.066772][ T5962] page_owner tracks the page as allocated [ 52.068581][ T5962] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5962, tgid 5958 (syz-executor392), ts 44238784961, free_ts 44066376644 [ 52.074155][ T5962] post_alloc_hook+0x2d1/0x350 [ 52.075568][ T5962] get_page_from_freelist+0x101e/0x3070 [ 52.077089][ T5962] __alloc_pages_noprof+0x223/0x25a0 [ 52.078652][ T5962] alloc_pages_bulk_noprof+0x77c/0x1110 [ 52.080315][ T5962] __page_pool_alloc_pages_slow+0x18f/0x770 [ 52.082417][ T5962] page_pool_alloc_netmem+0xc4/0x160 [ 52.084148][ T5962] page_pool_alloc_pages+0x1a/0x60 [ 52.085760][ T5962] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 52.087749][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 52.089266][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 52.090900][ T5962] __sys_bpf+0xfc6/0x49a0 [ 52.092218][ T5962] __x64_sys_bpf+0x78/0xc0 [ 52.093684][ T5962] do_syscall_64+0xcd/0x250 [ 52.095001][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.096803][ T5962] page last free pid 5953 tgid 5952 stack trace: [ 52.098521][ T5962] free_unref_page+0x5f4/0xdc0 [ 52.099855][ T5962] vfree+0x17a/0x890 [ 52.100963][ T5962] hashlimit_mt_destroy_v1+0x78/0x90 [ 52.102490][ T5962] cleanup_entry+0x19f/0x3a0 [ 52.103752][ T5962] translate_table+0xddd/0x17b0 [ 52.105058][ T5962] do_ip6t_set_ctl+0x605/0xc40 [ 52.106605][ T5962] nf_setsockopt+0x8a/0xf0 [ 52.107944][ T5962] ipv6_setsockopt+0x135/0x170 [ 52.109258][ T5962] rawv6_setsockopt+0xd7/0x680 [ 52.110554][ T5962] do_sock_setsockopt+0x222/0x480 [ 52.111996][ T5962] __sys_setsockopt+0x1a4/0x270 [ 52.113308][ T5962] __x64_sys_setsockopt+0xbd/0x160 [ 52.114891][ T5962] do_syscall_64+0xcd/0x250 [ 52.116306][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.118322][ T5962] Modules linked in: [ 52.119518][ T5962] CPU: 2 UID: 0 PID: 5962 Comm: syz-executor392 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 52.124328][ T5962] Tainted: [B]=BAD_PAGE [ 52.125821][ T5962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 52.129429][ T5962] Call Trace: [ 52.130778][ T5962] [ 52.131876][ T5962] dump_stack_lvl+0x16c/0x1f0 [ 52.133826][ T5962] bad_page+0xb3/0x1f0 [ 52.135338][ T5962] ? __pfx_bad_page+0x10/0x10 [ 52.136954][ T5962] ? page_bad_reason+0x9d/0x1e0 [ 52.138989][ T5962] free_unref_page+0x657/0xdc0 [ 52.140705][ T5962] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 52.142770][ T5962] ? __phys_addr+0xc6/0x150 [ 52.144403][ T5962] skb_free_head+0xa0/0x1d0 [ 52.145850][ T5962] skb_release_data+0x560/0x730 [ 52.147276][ T5962] sk_skb_reason_drop+0x129/0x1a0 [ 52.149003][ T5962] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 52.151370][ T5962] ? kernel_text_address+0x8d/0x100 [ 52.153065][ T5962] ? hlock_class+0x4e/0x130 [ 52.154680][ T5962] ? __lock_acquire+0x163e/0x3ce0 [ 52.156403][ T5962] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 52.159015][ T5962] ? hlock_class+0x4e/0x130 [ 52.160661][ T5962] ? __lock_acquire+0xbdd/0x3ce0 [ 52.162416][ T5962] ? __pfx___lock_acquire+0x10/0x10 [ 52.164787][ T5962] __netif_receive_skb_list_core+0x357/0x950 [ 52.166919][ T5962] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 52.169601][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 52.171487][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 52.173883][ T5962] ? lock_acquire+0x2f/0xb0 [ 52.175411][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 52.177093][ T5962] netif_receive_skb_list_internal+0x753/0xdb0 [ 52.178754][ T5962] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 52.180566][ T5962] ? __pfx_eth_type_trans+0x10/0x10 [ 52.181988][ T5962] ? __build_skb_around+0x278/0x3b0 [ 52.183396][ T5962] netif_receive_skb_list+0x4f/0x4a0 [ 52.184894][ T5962] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 52.186857][ T5962] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 52.188995][ T5962] ? bpf_test_timer_continue+0x150/0x3d0 [ 52.191142][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 52.192945][ T5962] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 52.194538][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 52.196133][ T5962] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 52.197897][ T5962] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 52.200022][ T5962] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 52.201443][ T5962] ? 0xffffffffa00045c0 [ 52.202562][ T5962] ? 0xffffffffa00045c0 [ 52.203797][ T5962] ? 0xffffffffa00045c0 [ 52.205017][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 52.206747][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 52.208345][ T5962] ? lock_acquire+0x2f/0xb0 [ 52.209811][ T5962] ? __fget_files+0x40/0x3f0 [ 52.211325][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 52.213071][ T5962] ? fput+0x30/0x390 [ 52.214189][ T5962] ? __bpf_prog_get+0xa0/0x290 [ 52.215616][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 52.217257][ T5962] __sys_bpf+0xfc6/0x49a0 [ 52.218587][ T5962] ? find_held_lock+0x2d/0x110 [ 52.219997][ T5962] ? __pfx___sys_bpf+0x10/0x10 [ 52.221302][ T5962] ? __might_fault+0x13b/0x190 [ 52.222596][ T5962] ? __pfx_lock_release+0x10/0x10 [ 52.223955][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 52.225643][ T5962] ? lock_acquire+0x2f/0xb0 [ 52.227222][ T5962] ? __might_fault+0xe3/0x190 [ 52.228512][ T5962] ? xfd_validate_state+0x5d/0x180 [ 52.229889][ T5962] ? rcu_is_watching+0x12/0xc0 [ 52.231226][ T5962] __x64_sys_bpf+0x78/0xc0 [ 52.232807][ T5962] ? lockdep_hardirqs_on+0x7c/0x110 [ 52.234541][ T5962] do_syscall_64+0xcd/0x250 [ 52.235976][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.238488][ T5962] RIP: 0033:0x7f1b5711ee99 [ 52.240190][ T5962] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 52.246911][ T5962] RSP: 002b:00007f1b570d9228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 52.249789][ T5962] RAX: ffffffffffffffda RBX: 00007f1b571a9328 RCX: 00007f1b5711ee99 [ 52.252498][ T5962] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 52.255248][ T5962] RBP: 00007f1b571a9320 R08: 00007f1b570d96c0 R09: 00007f1b570d96c0 [ 52.257936][ T5962] R10: 00007f1b570d96c0 R11: 0000000000000246 R12: 00007f1b57176074 [ 52.260685][ T5962] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffed9b8fc98 [ 52.263354][ T5962] [ 52.264312][ T5962] BUG: Bad page state in process syz-executor392 pfn:27333 [ 52.266227][ T5962] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x27333 [ 52.269019][ T5962] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 52.271393][ T5962] raw: 00fff00000000000 dead000000000040 ffff888106115000 0000000000000000 [ 52.273986][ T5962] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 52.276516][ T5962] page dumped because: page_pool leak [ 52.278058][ T5962] page_owner tracks the page as allocated [ 52.279887][ T5962] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5962, tgid 5958 (syz-executor392), ts 44238777626, free_ts 44066380174 [ 52.285596][ T5962] post_alloc_hook+0x2d1/0x350 [ 52.286879][ T5962] get_page_from_freelist+0x101e/0x3070 [ 52.288422][ T5962] __alloc_pages_noprof+0x223/0x25a0 [ 52.290016][ T5962] alloc_pages_bulk_noprof+0x77c/0x1110 [ 52.292428][ T5962] __page_pool_alloc_pages_slow+0x18f/0x770 [ 52.294677][ T5962] page_pool_alloc_netmem+0xc4/0x160 [ 52.296547][ T5962] page_pool_alloc_pages+0x1a/0x60 [ 52.297959][ T5962] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 52.299567][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 52.300918][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 52.302392][ T5962] __sys_bpf+0xfc6/0x49a0 [ 52.303756][ T5962] __x64_sys_bpf+0x78/0xc0 [ 52.304964][ T5962] do_syscall_64+0xcd/0x250 [ 52.306193][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.307777][ T5962] page last free pid 5953 tgid 5952 stack trace: [ 52.309447][ T5962] free_unref_page+0x5f4/0xdc0 [ 52.310731][ T5962] vfree+0x17a/0x890 [ 52.311854][ T5962] hashlimit_mt_destroy_v1+0x78/0x90 [ 52.313261][ T5962] cleanup_entry+0x19f/0x3a0 [ 52.314506][ T5962] translate_table+0xddd/0x17b0 [ 52.315897][ T5962] do_ip6t_set_ctl+0x605/0xc40 [ 52.317283][ T5962] nf_setsockopt+0x8a/0xf0 [ 52.318502][ T5962] ipv6_setsockopt+0x135/0x170 [ 52.319904][ T5962] rawv6_setsockopt+0xd7/0x680 [ 52.321179][ T5962] do_sock_setsockopt+0x222/0x480 [ 52.322564][ T5962] __sys_setsockopt+0x1a4/0x270 [ 52.323863][ T5962] __x64_sys_setsockopt+0xbd/0x160 [ 52.325253][ T5962] do_syscall_64+0xcd/0x250 [ 52.326869][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.328926][ T5962] Modules linked in: [ 52.329988][ T5962] CPU: 2 UID: 0 PID: 5962 Comm: syz-executor392 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 52.333747][ T5962] Tainted: [B]=BAD_PAGE [ 52.334844][ T5962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 52.337672][ T5962] Call Trace: [ 52.338561][ T5962] [ 52.339423][ T5962] dump_stack_lvl+0x16c/0x1f0 [ 52.340796][ T5962] bad_page+0xb3/0x1f0 [ 52.341929][ T5962] ? __pfx_bad_page+0x10/0x10 [ 52.343206][ T5962] ? page_bad_reason+0x9d/0x1e0 [ 52.344542][ T5962] free_unref_page+0x657/0xdc0 [ 52.345939][ T5962] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 52.348034][ T5962] ? __phys_addr+0xc6/0x150 [ 52.349715][ T5962] skb_free_head+0xa0/0x1d0 [ 52.351299][ T5962] skb_release_data+0x560/0x730 [ 52.353028][ T5962] sk_skb_reason_drop+0x129/0x1a0 [ 52.355337][ T5962] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 52.357541][ T5962] ? kernel_text_address+0x8d/0x100 [ 52.359064][ T5962] ? hlock_class+0x4e/0x130 [ 52.360463][ T5962] ? __lock_acquire+0x163e/0x3ce0 [ 52.361879][ T5962] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 52.363869][ T5962] ? hlock_class+0x4e/0x130 [ 52.365113][ T5962] ? __lock_acquire+0xbdd/0x3ce0 [ 52.366436][ T5962] ? __pfx___lock_acquire+0x10/0x10 [ 52.367847][ T5962] __netif_receive_skb_list_core+0x357/0x950 [ 52.369426][ T5962] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 52.371243][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 52.372645][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 52.374364][ T5962] ? lock_acquire+0x2f/0xb0 [ 52.375647][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 52.377454][ T5962] netif_receive_skb_list_internal+0x753/0xdb0 [ 52.379153][ T5962] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 52.380998][ T5962] ? __pfx_eth_type_trans+0x10/0x10 [ 52.382473][ T5962] ? __build_skb_around+0x278/0x3b0 [ 52.383862][ T5962] netif_receive_skb_list+0x4f/0x4a0 [ 52.385156][ T5962] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 52.386714][ T5962] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 52.388445][ T5962] ? bpf_test_timer_continue+0x150/0x3d0 [ 52.389892][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 52.391106][ T5962] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 52.392633][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 52.394086][ T5962] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 52.395614][ T5962] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 52.397239][ T5962] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 52.398634][ T5962] ? 0xffffffffa00045c0 [ 52.399776][ T5962] ? 0xffffffffa00045c0 [ 52.400879][ T5962] ? 0xffffffffa00045c0 [ 52.402180][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 52.403769][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 52.405153][ T5962] ? lock_acquire+0x2f/0xb0 [ 52.406359][ T5962] ? __fget_files+0x40/0x3f0 [ 52.407617][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 52.409159][ T5962] ? fput+0x30/0x390 [ 52.410214][ T5962] ? __bpf_prog_get+0xa0/0x290 [ 52.411485][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 52.413041][ T5962] __sys_bpf+0xfc6/0x49a0 [ 52.414272][ T5962] ? find_held_lock+0x2d/0x110 [ 52.415557][ T5962] ? __pfx___sys_bpf+0x10/0x10 [ 52.416812][ T5962] ? __might_fault+0x13b/0x190 [ 52.418055][ T5962] ? __pfx_lock_release+0x10/0x10 [ 52.419417][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 52.420822][ T5962] ? lock_acquire+0x2f/0xb0 [ 52.422040][ T5962] ? __might_fault+0xe3/0x190 [ 52.423312][ T5962] ? xfd_validate_state+0x5d/0x180 [ 52.424689][ T5962] ? rcu_is_watching+0x12/0xc0 [ 52.425968][ T5962] __x64_sys_bpf+0x78/0xc0 [ 52.427159][ T5962] ? lockdep_hardirqs_on+0x7c/0x110 [ 52.428560][ T5962] do_syscall_64+0xcd/0x250 [ 52.429838][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.431592][ T5962] RIP: 0033:0x7f1b5711ee99 [ 52.432830][ T5962] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 52.438145][ T5962] RSP: 002b:00007f1b570d9228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 52.440329][ T5962] RAX: ffffffffffffffda RBX: 00007f1b571a9328 RCX: 00007f1b5711ee99 [ 52.442384][ T5962] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 52.444425][ T5962] RBP: 00007f1b571a9320 R08: 00007f1b570d96c0 R09: 00007f1b570d96c0 [ 52.446524][ T5962] R10: 00007f1b570d96c0 R11: 0000000000000246 R12: 00007f1b57176074 [ 52.448647][ T5962] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffed9b8fc98 [ 52.450918][ T5962] [ 52.451932][ T5962] BUG: Bad page state in process syz-executor392 pfn:35764 [ 52.453851][ T5962] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x35764 [ 52.456146][ T5962] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 52.457999][ T5962] raw: 00fff00000000000 dead000000000040 ffff888106115000 0000000000000000 [ 52.460247][ T5962] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 52.462512][ T5962] page dumped because: page_pool leak [ 52.463919][ T5962] page_owner tracks the page as allocated [ 52.465388][ T5962] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5962, tgid 5958 (syz-executor392), ts 44238770825, free_ts 44066384009 [ 52.469812][ T5962] post_alloc_hook+0x2d1/0x350 [ 52.471075][ T5962] get_page_from_freelist+0x101e/0x3070 [ 52.472654][ T5962] __alloc_pages_noprof+0x223/0x25a0 [ 52.474041][ T5962] alloc_pages_bulk_noprof+0x77c/0x1110 [ 52.475533][ T5962] __page_pool_alloc_pages_slow+0x18f/0x770 [ 52.477137][ T5962] page_pool_alloc_netmem+0xc4/0x160 [ 52.478578][ T5962] page_pool_alloc_pages+0x1a/0x60 [ 52.479989][ T5962] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 52.481657][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 52.483123][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 52.484560][ T5962] __sys_bpf+0xfc6/0x49a0 [ 52.485700][ T5962] __x64_sys_bpf+0x78/0xc0 [ 52.486872][ T5962] do_syscall_64+0xcd/0x250 [ 52.488082][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.489620][ T5962] page last free pid 5953 tgid 5952 stack trace: [ 52.491267][ T5962] free_unref_page+0x5f4/0xdc0 [ 52.492578][ T5962] vfree+0x17a/0x890 [ 52.493615][ T5962] hashlimit_mt_destroy_v1+0x78/0x90 [ 52.495007][ T5962] cleanup_entry+0x19f/0x3a0 [ 52.496231][ T5962] translate_table+0xddd/0x17b0 [ 52.497514][ T5962] do_ip6t_set_ctl+0x605/0xc40 [ 52.498778][ T5962] nf_setsockopt+0x8a/0xf0 [ 52.499980][ T5962] ipv6_setsockopt+0x135/0x170 [ 52.501238][ T5962] rawv6_setsockopt+0xd7/0x680 [ 52.502555][ T5962] do_sock_setsockopt+0x222/0x480 [ 52.503895][ T5962] __sys_setsockopt+0x1a4/0x270 [ 52.505175][ T5962] __x64_sys_setsockopt+0xbd/0x160 [ 52.506513][ T5962] do_syscall_64+0xcd/0x250 [ 52.507723][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.509626][ T5962] Modules linked in: [ 52.510905][ T5962] CPU: 2 UID: 0 PID: 5962 Comm: syz-executor392 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 52.514737][ T5962] Tainted: [B]=BAD_PAGE [ 52.515917][ T5962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 52.518810][ T5962] Call Trace: [ 52.520048][ T5962] [ 52.521155][ T5962] dump_stack_lvl+0x16c/0x1f0 [ 52.522831][ T5962] bad_page+0xb3/0x1f0 [ 52.524371][ T5962] ? __pfx_bad_page+0x10/0x10 [ 52.525973][ T5962] ? page_bad_reason+0x9d/0x1e0 [ 52.527548][ T5962] free_unref_page+0x657/0xdc0 [ 52.529200][ T5962] ? page_frag_free+0x188/0x1e0 [ 52.530886][ T5962] skb_free_head+0xa0/0x1d0 [ 52.532400][ T5962] skb_release_data+0x560/0x730 [ 52.533690][ T5962] sk_skb_reason_drop+0x129/0x1a0 [ 52.535112][ T5962] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 52.536901][ T5962] ? kernel_text_address+0x8d/0x100 [ 52.538329][ T5962] ? hlock_class+0x4e/0x130 [ 52.539575][ T5962] ? __lock_acquire+0x163e/0x3ce0 [ 52.540902][ T5962] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 52.542771][ T5962] ? hlock_class+0x4e/0x130 [ 52.544022][ T5962] ? __lock_acquire+0xbdd/0x3ce0 [ 52.545354][ T5962] ? __pfx___lock_acquire+0x10/0x10 [ 52.546869][ T5962] __netif_receive_skb_list_core+0x357/0x950 [ 52.548523][ T5962] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 52.550372][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 52.551921][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 52.553789][ T5962] ? lock_acquire+0x2f/0xb0 [ 52.555077][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 52.556985][ T5962] netif_receive_skb_list_internal+0x753/0xdb0 [ 52.558877][ T5962] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 52.560986][ T5962] ? __pfx_eth_type_trans+0x10/0x10 [ 52.562579][ T5962] ? __build_skb_around+0x278/0x3b0 [ 52.564103][ T5962] netif_receive_skb_list+0x4f/0x4a0 [ 52.565697][ T5962] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 52.567426][ T5962] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 52.569187][ T5962] ? bpf_test_timer_continue+0x150/0x3d0 [ 52.570682][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 52.572159][ T5962] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 52.573709][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 52.575322][ T5962] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 52.577216][ T5962] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 52.578943][ T5962] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 52.580778][ T5962] ? 0xffffffffa00045c0 [ 52.582234][ T5962] ? 0xffffffffa00045c0 [ 52.583590][ T5962] ? 0xffffffffa00045c0 [ 52.584992][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 52.587132][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 52.589378][ T5962] ? lock_acquire+0x2f/0xb0 [ 52.591196][ T5962] ? __fget_files+0x40/0x3f0 [ 52.592796][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 52.594781][ T5962] ? fput+0x30/0x390 [ 52.596175][ T5962] ? __bpf_prog_get+0xa0/0x290 [ 52.597812][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 52.599972][ T5962] __sys_bpf+0xfc6/0x49a0 [ 52.601514][ T5962] ? find_held_lock+0x2d/0x110 [ 52.603182][ T5962] ? __pfx___sys_bpf+0x10/0x10 [ 52.604850][ T5962] ? __might_fault+0x13b/0x190 [ 52.606448][ T5962] ? __pfx_lock_release+0x10/0x10 [ 52.608320][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 52.610150][ T5962] ? lock_acquire+0x2f/0xb0 [ 52.611835][ T5962] ? __might_fault+0xe3/0x190 [ 52.613621][ T5962] ? xfd_validate_state+0x5d/0x180 [ 52.615451][ T5962] ? rcu_is_watching+0x12/0xc0 [ 52.617047][ T5962] __x64_sys_bpf+0x78/0xc0 [ 52.618630][ T5962] ? lockdep_hardirqs_on+0x7c/0x110 [ 52.620395][ T5962] do_syscall_64+0xcd/0x250 [ 52.622120][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.624336][ T5962] RIP: 0033:0x7f1b5711ee99 [ 52.625915][ T5962] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 52.632971][ T5962] RSP: 002b:00007f1b570d9228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 52.636098][ T5962] RAX: ffffffffffffffda RBX: 00007f1b571a9328 RCX: 00007f1b5711ee99 [ 52.638802][ T5962] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 52.641086][ T5962] RBP: 00007f1b571a9320 R08: 00007f1b570d96c0 R09: 00007f1b570d96c0 [ 52.643156][ T5962] R10: 00007f1b570d96c0 R11: 0000000000000246 R12: 00007f1b57176074 [ 52.645238][ T5962] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffed9b8fc98 [ 52.647418][ T5962] [ 52.648380][ T5962] BUG: Bad page state in process syz-executor392 pfn:35765 [ 52.650303][ T5962] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x35765 [ 52.652657][ T5962] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 52.654656][ T5962] raw: 00fff00000000000 dead000000000040 ffff888106115000 0000000000000000 [ 52.656968][ T5962] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 52.659247][ T5962] page dumped because: page_pool leak [ 52.660688][ T5962] page_owner tracks the page as allocated [ 52.662243][ T5962] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5962, tgid 5958 (syz-executor392), ts 44238763677, free_ts 44066388025 [ 52.666723][ T5962] post_alloc_hook+0x2d1/0x350 [ 52.668015][ T5962] get_page_from_freelist+0x101e/0x3070 [ 52.669478][ T5962] __alloc_pages_noprof+0x223/0x25a0 [ 52.670868][ T5962] alloc_pages_bulk_noprof+0x77c/0x1110 [ 52.672415][ T5962] __page_pool_alloc_pages_slow+0x18f/0x770 [ 52.673973][ T5962] page_pool_alloc_netmem+0xc4/0x160 [ 52.675381][ T5962] page_pool_alloc_pages+0x1a/0x60 [ 52.676735][ T5962] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 52.678451][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 52.679916][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 52.681439][ T5962] __sys_bpf+0xfc6/0x49a0 [ 52.682727][ T5962] __x64_sys_bpf+0x78/0xc0 [ 52.683948][ T5962] do_syscall_64+0xcd/0x250 [ 52.685168][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.686804][ T5962] page last free pid 5953 tgid 5952 stack trace: [ 52.688608][ T5962] free_unref_page+0x5f4/0xdc0 [ 52.690183][ T5962] vfree+0x17a/0x890 [ 52.691320][ T5962] hashlimit_mt_destroy_v1+0x78/0x90 [ 52.692975][ T5962] cleanup_entry+0x19f/0x3a0 [ 52.694228][ T5962] translate_table+0xddd/0x17b0 [ 52.695550][ T5962] do_ip6t_set_ctl+0x605/0xc40 [ 52.696812][ T5962] nf_setsockopt+0x8a/0xf0 [ 52.698076][ T5962] ipv6_setsockopt+0x135/0x170 [ 52.699378][ T5962] rawv6_setsockopt+0xd7/0x680 [ 52.700673][ T5962] do_sock_setsockopt+0x222/0x480 [ 52.702113][ T5962] __sys_setsockopt+0x1a4/0x270 [ 52.703433][ T5962] __x64_sys_setsockopt+0xbd/0x160 [ 52.704812][ T5962] do_syscall_64+0xcd/0x250 [ 52.706040][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.707624][ T5962] Modules linked in: [ 52.708675][ T5962] CPU: 2 UID: 0 PID: 5962 Comm: syz-executor392 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 52.711890][ T5962] Tainted: [B]=BAD_PAGE [ 52.712988][ T5962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 52.715777][ T5962] Call Trace: [ 52.716720][ T5962] [ 52.717562][ T5962] dump_stack_lvl+0x16c/0x1f0 [ 52.718862][ T5962] bad_page+0xb3/0x1f0 [ 52.719971][ T5962] ? __pfx_bad_page+0x10/0x10 [ 52.721218][ T5962] ? page_bad_reason+0x9d/0x1e0 [ 52.722536][ T5962] free_unref_page+0x657/0xdc0 [ 52.723924][ T5962] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 52.725498][ T5962] ? __phys_addr+0xc6/0x150 [ 52.726715][ T5962] skb_free_head+0xa0/0x1d0 [ 52.727945][ T5962] skb_release_data+0x560/0x730 [ 52.729244][ T5962] sk_skb_reason_drop+0x129/0x1a0 [ 52.730582][ T5962] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 52.732348][ T5962] ? kernel_text_address+0x8d/0x100 [ 52.733714][ T5962] ? hlock_class+0x4e/0x130 [ 52.734978][ T5962] ? __lock_acquire+0x163e/0x3ce0 [ 52.736417][ T5962] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 52.738362][ T5962] ? hlock_class+0x4e/0x130 [ 52.739627][ T5962] ? __lock_acquire+0xbdd/0x3ce0 [ 52.740991][ T5962] ? __pfx___lock_acquire+0x10/0x10 [ 52.742388][ T5962] __netif_receive_skb_list_core+0x357/0x950 [ 52.743998][ T5962] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 52.745773][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 52.747210][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 52.748970][ T5962] ? lock_acquire+0x2f/0xb0 [ 52.750191][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 52.752327][ T5962] netif_receive_skb_list_internal+0x753/0xdb0 [ 52.754108][ T5962] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 52.756164][ T5962] ? __pfx_eth_type_trans+0x10/0x10 [ 52.757579][ T5962] ? __build_skb_around+0x278/0x3b0 [ 52.759061][ T5962] netif_receive_skb_list+0x4f/0x4a0 [ 52.760487][ T5962] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 52.762169][ T5962] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 52.763931][ T5962] ? bpf_test_timer_continue+0x150/0x3d0 [ 52.765438][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 52.766856][ T5962] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 52.768436][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 52.770006][ T5962] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 52.771596][ T5962] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 52.773152][ T5962] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 52.774551][ T5962] ? 0xffffffffa00045c0 [ 52.775680][ T5962] ? 0xffffffffa00045c0 [ 52.776794][ T5962] ? 0xffffffffa00045c0 [ 52.777909][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 52.779499][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 52.780936][ T5962] ? lock_acquire+0x2f/0xb0 [ 52.782148][ T5962] ? __fget_files+0x40/0x3f0 [ 52.783380][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 52.784919][ T5962] ? fput+0x30/0x390 [ 52.785968][ T5962] ? __bpf_prog_get+0xa0/0x290 [ 52.787252][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 52.788829][ T5962] __sys_bpf+0xfc6/0x49a0 [ 52.790043][ T5962] ? find_held_lock+0x2d/0x110 [ 52.791327][ T5962] ? __pfx___sys_bpf+0x10/0x10 [ 52.792628][ T5962] ? __might_fault+0x13b/0x190 [ 52.794005][ T5962] ? __pfx_lock_release+0x10/0x10 [ 52.795515][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 52.797022][ T5962] ? lock_acquire+0x2f/0xb0 [ 52.798360][ T5962] ? __might_fault+0xe3/0x190 [ 52.799768][ T5962] ? xfd_validate_state+0x5d/0x180 [ 52.801243][ T5962] ? rcu_is_watching+0x12/0xc0 [ 52.802600][ T5962] __x64_sys_bpf+0x78/0xc0 [ 52.803746][ T5962] ? lockdep_hardirqs_on+0x7c/0x110 [ 52.805098][ T5962] do_syscall_64+0xcd/0x250 [ 52.806262][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.807816][ T5962] RIP: 0033:0x7f1b5711ee99 [ 52.808964][ T5962] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 52.813867][ T5962] RSP: 002b:00007f1b570d9228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 52.815980][ T5962] RAX: ffffffffffffffda RBX: 00007f1b571a9328 RCX: 00007f1b5711ee99 [ 52.818009][ T5962] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 52.820104][ T5962] RBP: 00007f1b571a9320 R08: 00007f1b570d96c0 R09: 00007f1b570d96c0 [ 52.822154][ T5962] R10: 00007f1b570d96c0 R11: 0000000000000246 R12: 00007f1b57176074 [ 52.824294][ T5962] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffed9b8fc98 [ 52.826400][ T5962] [ 52.827355][ T5962] BUG: Bad page state in process syz-executor392 pfn:35766 [ 52.829287][ T5962] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x35766 [ 52.831725][ T5962] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 52.833800][ T5962] raw: 00fff00000000000 dead000000000040 ffff888106115000 0000000000000000 [ 52.836313][ T5962] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 52.838707][ T5962] page dumped because: page_pool leak [ 52.840206][ T5962] page_owner tracks the page as allocated [ 52.841697][ T5962] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5962, tgid 5958 (syz-executor392), ts 44238756443, free_ts 44066391641 [ 52.846227][ T5962] post_alloc_hook+0x2d1/0x350 [ 52.847531][ T5962] get_page_from_freelist+0x101e/0x3070 [ 52.849001][ T5962] __alloc_pages_noprof+0x223/0x25a0 [ 52.850343][ T5962] alloc_pages_bulk_noprof+0x77c/0x1110 [ 52.851864][ T5962] __page_pool_alloc_pages_slow+0x18f/0x770 [ 52.853660][ T5962] page_pool_alloc_netmem+0xc4/0x160 [ 52.855121][ T5962] page_pool_alloc_pages+0x1a/0x60 [ 52.856587][ T5962] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 52.858515][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 52.859967][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 52.861402][ T5962] __sys_bpf+0xfc6/0x49a0 [ 52.862647][ T5962] __x64_sys_bpf+0x78/0xc0 [ 52.863935][ T5962] do_syscall_64+0xcd/0x250 [ 52.865237][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.866916][ T5962] page last free pid 5953 tgid 5952 stack trace: [ 52.868619][ T5962] free_unref_page+0x5f4/0xdc0 [ 52.869897][ T5962] vfree+0x17a/0x890 [ 52.870946][ T5962] hashlimit_mt_destroy_v1+0x78/0x90 [ 52.872685][ T5962] cleanup_entry+0x19f/0x3a0 [ 52.874016][ T5962] translate_table+0xddd/0x17b0 [ 52.875251][ T5962] do_ip6t_set_ctl+0x605/0xc40 [ 52.876503][ T5962] nf_setsockopt+0x8a/0xf0 [ 52.877764][ T5962] ipv6_setsockopt+0x135/0x170 [ 52.879034][ T5962] rawv6_setsockopt+0xd7/0x680 [ 52.880373][ T5962] do_sock_setsockopt+0x222/0x480 [ 52.881714][ T5962] __sys_setsockopt+0x1a4/0x270 [ 52.883066][ T5962] __x64_sys_setsockopt+0xbd/0x160 [ 52.884451][ T5962] do_syscall_64+0xcd/0x250 [ 52.885702][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.887443][ T5962] Modules linked in: [ 52.888625][ T5962] CPU: 2 UID: 0 PID: 5962 Comm: syz-executor392 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 52.892220][ T5962] Tainted: [B]=BAD_PAGE [ 52.893406][ T5962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 52.896612][ T5962] Call Trace: [ 52.897696][ T5962] [ 52.898508][ T5962] dump_stack_lvl+0x16c/0x1f0 [ 52.899794][ T5962] bad_page+0xb3/0x1f0 [ 52.901047][ T5962] ? __pfx_bad_page+0x10/0x10 [ 52.902321][ T5962] ? page_bad_reason+0x9d/0x1e0 [ 52.903675][ T5962] free_unref_page+0x657/0xdc0 [ 52.905140][ T5962] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 52.906739][ T5962] ? __phys_addr+0xc6/0x150 [ 52.907974][ T5962] skb_free_head+0xa0/0x1d0 [ 52.909221][ T5962] skb_release_data+0x560/0x730 [ 52.910575][ T5962] sk_skb_reason_drop+0x129/0x1a0 [ 52.912146][ T5962] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 52.914366][ T5962] ? kernel_text_address+0x8d/0x100 [ 52.915907][ T5962] ? hlock_class+0x4e/0x130 [ 52.917710][ T5962] ? __lock_acquire+0x163e/0x3ce0 [ 52.919384][ T5962] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 52.921486][ T5962] ? hlock_class+0x4e/0x130 [ 52.922828][ T5962] ? __lock_acquire+0xbdd/0x3ce0 [ 52.924224][ T5962] ? __pfx___lock_acquire+0x10/0x10 [ 52.925605][ T5962] __netif_receive_skb_list_core+0x357/0x950 [ 52.927197][ T5962] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 52.928996][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 52.930386][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 52.932060][ T5962] ? lock_acquire+0x2f/0xb0 [ 52.933299][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 52.935079][ T5962] netif_receive_skb_list_internal+0x753/0xdb0 [ 52.936941][ T5962] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 52.938740][ T5962] ? __pfx_eth_type_trans+0x10/0x10 [ 52.940471][ T5962] ? __build_skb_around+0x278/0x3b0 [ 52.941858][ T5962] netif_receive_skb_list+0x4f/0x4a0 [ 52.943289][ T5962] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 52.945501][ T5962] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 52.947715][ T5962] ? bpf_test_timer_continue+0x150/0x3d0 [ 52.949918][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 52.952052][ T5962] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 52.953883][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 52.955770][ T5962] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 52.957547][ T5962] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 52.959334][ T5962] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 52.960853][ T5962] ? 0xffffffffa00045c0 [ 52.962018][ T5962] ? 0xffffffffa00045c0 [ 52.963142][ T5962] ? 0xffffffffa00045c0 [ 52.964279][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 52.965874][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 52.967324][ T5962] ? lock_acquire+0x2f/0xb0 [ 52.968603][ T5962] ? __fget_files+0x40/0x3f0 [ 52.969862][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 52.971446][ T5962] ? fput+0x30/0x390 [ 52.972508][ T5962] ? __bpf_prog_get+0xa0/0x290 [ 52.973803][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 52.975470][ T5962] __sys_bpf+0xfc6/0x49a0 [ 52.976839][ T5962] ? find_held_lock+0x2d/0x110 [ 52.978505][ T5962] ? __pfx___sys_bpf+0x10/0x10 [ 52.980252][ T5962] ? __might_fault+0x13b/0x190 [ 52.981970][ T5962] ? __pfx_lock_release+0x10/0x10 [ 52.983614][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 52.985009][ T5962] ? lock_acquire+0x2f/0xb0 [ 52.986218][ T5962] ? __might_fault+0xe3/0x190 [ 52.987478][ T5962] ? xfd_validate_state+0x5d/0x180 [ 52.988835][ T5962] ? rcu_is_watching+0x12/0xc0 [ 52.990179][ T5962] __x64_sys_bpf+0x78/0xc0 [ 52.991369][ T5962] ? lockdep_hardirqs_on+0x7c/0x110 [ 52.992776][ T5962] do_syscall_64+0xcd/0x250 [ 52.993990][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.995641][ T5962] RIP: 0033:0x7f1b5711ee99 [ 52.996816][ T5962] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 53.002184][ T5962] RSP: 002b:00007f1b570d9228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 53.004586][ T5962] RAX: ffffffffffffffda RBX: 00007f1b571a9328 RCX: 00007f1b5711ee99 [ 53.006961][ T5962] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 53.009382][ T5962] RBP: 00007f1b571a9320 R08: 00007f1b570d96c0 R09: 00007f1b570d96c0 [ 53.011804][ T5962] R10: 00007f1b570d96c0 R11: 0000000000000246 R12: 00007f1b57176074 [ 53.013902][ T5962] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffed9b8fc98 [ 53.016159][ T5962] [ 53.017143][ T5962] BUG: Bad page state in process syz-executor392 pfn:35767 [ 53.019111][ T5962] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x35767 [ 53.021580][ T5962] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 53.023882][ T5962] raw: 00fff00000000000 dead000000000040 ffff888106115000 0000000000000000 [ 53.026856][ T5962] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 53.029366][ T5962] page dumped because: page_pool leak [ 53.030760][ T5962] page_owner tracks the page as allocated [ 53.032340][ T5962] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5962, tgid 5958 (syz-executor392), ts 44238749145, free_ts 44066395304 [ 53.037096][ T5962] post_alloc_hook+0x2d1/0x350 [ 53.038469][ T5962] get_page_from_freelist+0x101e/0x3070 [ 53.040013][ T5962] __alloc_pages_noprof+0x223/0x25a0 [ 53.041415][ T5962] alloc_pages_bulk_noprof+0x77c/0x1110 [ 53.042993][ T5962] __page_pool_alloc_pages_slow+0x18f/0x770 [ 53.044749][ T5962] page_pool_alloc_netmem+0xc4/0x160 [ 53.046317][ T5962] page_pool_alloc_pages+0x1a/0x60 [ 53.048275][ T5962] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 53.050664][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 53.052447][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 53.054092][ T5962] __sys_bpf+0xfc6/0x49a0 [ 53.055263][ T5962] __x64_sys_bpf+0x78/0xc0 [ 53.056526][ T5962] do_syscall_64+0xcd/0x250 [ 53.057831][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.059730][ T5962] page last free pid 5953 tgid 5952 stack trace: [ 53.061427][ T5962] free_unref_page+0x5f4/0xdc0 [ 53.062798][ T5962] vfree+0x17a/0x890 [ 53.063891][ T5962] hashlimit_mt_destroy_v1+0x78/0x90 [ 53.065305][ T5962] cleanup_entry+0x19f/0x3a0 [ 53.066543][ T5962] translate_table+0xddd/0x17b0 [ 53.067828][ T5962] do_ip6t_set_ctl+0x605/0xc40 [ 53.069008][ T5962] nf_setsockopt+0x8a/0xf0 [ 53.070189][ T5962] ipv6_setsockopt+0x135/0x170 [ 53.071421][ T5962] rawv6_setsockopt+0xd7/0x680 [ 53.072754][ T5962] do_sock_setsockopt+0x222/0x480 [ 53.074188][ T5962] __sys_setsockopt+0x1a4/0x270 [ 53.075472][ T5962] __x64_sys_setsockopt+0xbd/0x160 [ 53.076966][ T5962] do_syscall_64+0xcd/0x250 [ 53.078321][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.080032][ T5962] Modules linked in: [ 53.081131][ T5962] CPU: 2 UID: 0 PID: 5962 Comm: syz-executor392 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 53.085539][ T5962] Tainted: [B]=BAD_PAGE [ 53.087152][ T5962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 53.089915][ T5962] Call Trace: [ 53.090796][ T5962] [ 53.091635][ T5962] dump_stack_lvl+0x16c/0x1f0 [ 53.092954][ T5962] bad_page+0xb3/0x1f0 [ 53.094037][ T5962] ? __pfx_bad_page+0x10/0x10 [ 53.095281][ T5962] ? page_bad_reason+0x9d/0x1e0 [ 53.096596][ T5962] free_unref_page+0x657/0xdc0 [ 53.097859][ T5962] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 53.099473][ T5962] ? __phys_addr+0xc6/0x150 [ 53.100682][ T5962] skb_free_head+0xa0/0x1d0 [ 53.101886][ T5962] skb_release_data+0x560/0x730 [ 53.103179][ T5962] sk_skb_reason_drop+0x129/0x1a0 [ 53.104526][ T5962] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 53.106273][ T5962] ? kernel_text_address+0x8d/0x100 [ 53.107720][ T5962] ? hlock_class+0x4e/0x130 [ 53.109005][ T5962] ? __lock_acquire+0x163e/0x3ce0 [ 53.110449][ T5962] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 53.112569][ T5962] ? hlock_class+0x4e/0x130 [ 53.113929][ T5962] ? __lock_acquire+0xbdd/0x3ce0 [ 53.115438][ T5962] ? __pfx___lock_acquire+0x10/0x10 [ 53.116890][ T5962] __netif_receive_skb_list_core+0x357/0x950 [ 53.118544][ T5962] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 53.120257][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 53.121629][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 53.123299][ T5962] ? lock_acquire+0x2f/0xb0 [ 53.124517][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 53.126205][ T5962] netif_receive_skb_list_internal+0x753/0xdb0 [ 53.127951][ T5962] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 53.129793][ T5962] ? __pfx_eth_type_trans+0x10/0x10 [ 53.131136][ T5962] ? __build_skb_around+0x278/0x3b0 [ 53.132578][ T5962] netif_receive_skb_list+0x4f/0x4a0 [ 53.134023][ T5962] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 53.135841][ T5962] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 53.137794][ T5962] ? bpf_test_timer_continue+0x150/0x3d0 [ 53.139542][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 53.141126][ T5962] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 53.142721][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 53.144287][ T5962] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 53.145853][ T5962] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 53.147405][ T5962] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 53.148836][ T5962] ? 0xffffffffa00045c0 [ 53.149988][ T5962] ? 0xffffffffa00045c0 [ 53.151176][ T5962] ? 0xffffffffa00045c0 [ 53.152278][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 53.153831][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 53.155241][ T5962] ? lock_acquire+0x2f/0xb0 [ 53.156437][ T5962] ? __fget_files+0x40/0x3f0 [ 53.157703][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 53.159323][ T5962] ? fput+0x30/0x390 [ 53.160657][ T5962] ? __bpf_prog_get+0xa0/0x290 [ 53.162176][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 53.163948][ T5962] __sys_bpf+0xfc6/0x49a0 [ 53.165283][ T5962] ? find_held_lock+0x2d/0x110 [ 53.166715][ T5962] ? __pfx___sys_bpf+0x10/0x10 [ 53.168012][ T5962] ? __might_fault+0x13b/0x190 [ 53.169300][ T5962] ? __pfx_lock_release+0x10/0x10 [ 53.170646][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 53.172047][ T5962] ? lock_acquire+0x2f/0xb0 [ 53.173284][ T5962] ? __might_fault+0xe3/0x190 [ 53.174544][ T5962] ? xfd_validate_state+0x5d/0x180 [ 53.175959][ T5962] ? rcu_is_watching+0x12/0xc0 [ 53.177322][ T5962] __x64_sys_bpf+0x78/0xc0 [ 53.178610][ T5962] ? lockdep_hardirqs_on+0x7c/0x110 [ 53.180186][ T5962] do_syscall_64+0xcd/0x250 [ 53.181650][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.183432][ T5962] RIP: 0033:0x7f1b5711ee99 [ 53.184842][ T5962] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 53.189954][ T5962] RSP: 002b:00007f1b570d9228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 53.192163][ T5962] RAX: ffffffffffffffda RBX: 00007f1b571a9328 RCX: 00007f1b5711ee99 [ 53.194679][ T5962] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 53.196985][ T5962] RBP: 00007f1b571a9320 R08: 00007f1b570d96c0 R09: 00007f1b570d96c0 [ 53.199174][ T5962] R10: 00007f1b570d96c0 R11: 0000000000000246 R12: 00007f1b57176074 [ 53.201636][ T5962] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffed9b8fc98 [ 53.204126][ T5962] [ 53.205280][ T5962] BUG: Bad page state in process syz-executor392 pfn:2139c [ 53.207895][ T5962] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802139c600 pfn:0x2139c [ 53.211600][ T5962] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 53.213695][ T5962] raw: 00fff00000000000 dead000000000040 ffff888106115000 0000000000000000 [ 53.215985][ T5962] raw: ffff88802139c600 0000000000000001 00000000ffffffff 0000000000000000 [ 53.218264][ T5962] page dumped because: page_pool leak [ 53.219691][ T5962] page_owner tracks the page as allocated [ 53.221191][ T5962] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5962, tgid 5958 (syz-executor392), ts 44238742187, free_ts 44066399195 [ 53.225818][ T5962] post_alloc_hook+0x2d1/0x350 [ 53.227098][ T5962] get_page_from_freelist+0x101e/0x3070 [ 53.228564][ T5962] __alloc_pages_noprof+0x223/0x25a0 [ 53.229967][ T5962] alloc_pages_bulk_noprof+0x77c/0x1110 [ 53.231430][ T5962] __page_pool_alloc_pages_slow+0x18f/0x770 [ 53.233250][ T5962] page_pool_alloc_netmem+0xc4/0x160 [ 53.234715][ T5962] page_pool_alloc_pages+0x1a/0x60 [ 53.236467][ T5962] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 53.238233][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 53.239820][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 53.241322][ T5962] __sys_bpf+0xfc6/0x49a0 [ 53.242538][ T5962] __x64_sys_bpf+0x78/0xc0 [ 53.243881][ T5962] do_syscall_64+0xcd/0x250 [ 53.245228][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.246934][ T5962] page last free pid 5953 tgid 5952 stack trace: [ 53.248738][ T5962] free_unref_page+0x5f4/0xdc0 [ 53.250288][ T5962] vfree+0x17a/0x890 [ 53.251392][ T5962] hashlimit_mt_destroy_v1+0x78/0x90 [ 53.253128][ T5962] cleanup_entry+0x19f/0x3a0 [ 53.254536][ T5962] translate_table+0xddd/0x17b0 [ 53.255851][ T5962] do_ip6t_set_ctl+0x605/0xc40 [ 53.257132][ T5962] nf_setsockopt+0x8a/0xf0 [ 53.258334][ T5962] ipv6_setsockopt+0x135/0x170 [ 53.259630][ T5962] rawv6_setsockopt+0xd7/0x680 [ 53.260908][ T5962] do_sock_setsockopt+0x222/0x480 [ 53.262490][ T5962] __sys_setsockopt+0x1a4/0x270 [ 53.263919][ T5962] __x64_sys_setsockopt+0xbd/0x160 [ 53.265330][ T5962] do_syscall_64+0xcd/0x250 [ 53.266548][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.268152][ T5962] Modules linked in: [ 53.269369][ T5962] CPU: 2 UID: 0 PID: 5962 Comm: syz-executor392 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 53.273322][ T5962] Tainted: [B]=BAD_PAGE [ 53.274668][ T5962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 53.278228][ T5962] Call Trace: [ 53.279198][ T5962] [ 53.280177][ T5962] dump_stack_lvl+0x16c/0x1f0 [ 53.281483][ T5962] bad_page+0xb3/0x1f0 [ 53.282636][ T5962] ? __pfx_bad_page+0x10/0x10 [ 53.283987][ T5962] ? page_bad_reason+0x9d/0x1e0 [ 53.285380][ T5962] free_unref_page+0x657/0xdc0 [ 53.286657][ T5962] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 53.288269][ T5962] ? __phys_addr+0xc6/0x150 [ 53.289725][ T5962] skb_free_head+0xa0/0x1d0 [ 53.290951][ T5962] skb_release_data+0x560/0x730 [ 53.292669][ T5962] sk_skb_reason_drop+0x129/0x1a0 [ 53.294103][ T5962] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 53.296123][ T5962] ? kernel_text_address+0x8d/0x100 [ 53.297727][ T5962] ? hlock_class+0x4e/0x130 [ 53.299056][ T5962] ? __lock_acquire+0x163e/0x3ce0 [ 53.300735][ T5962] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 53.302856][ T5962] ? hlock_class+0x4e/0x130 [ 53.304190][ T5962] ? __lock_acquire+0xbdd/0x3ce0 [ 53.305539][ T5962] ? __pfx___lock_acquire+0x10/0x10 [ 53.306926][ T5962] __netif_receive_skb_list_core+0x357/0x950 [ 53.308568][ T5962] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 53.310481][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 53.312211][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 53.314107][ T5962] ? lock_acquire+0x2f/0xb0 [ 53.315324][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 53.317243][ T5962] netif_receive_skb_list_internal+0x753/0xdb0 [ 53.318891][ T5962] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 53.320727][ T5962] ? __pfx_eth_type_trans+0x10/0x10 [ 53.322348][ T5962] ? __build_skb_around+0x278/0x3b0 [ 53.323849][ T5962] netif_receive_skb_list+0x4f/0x4a0 [ 53.325412][ T5962] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 53.327211][ T5962] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 53.329180][ T5962] ? bpf_test_timer_continue+0x150/0x3d0 [ 53.330815][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 53.332145][ T5962] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 53.333903][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 53.335817][ T5962] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 53.337740][ T5962] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 53.339522][ T5962] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 53.341005][ T5962] ? 0xffffffffa00045c0 [ 53.342112][ T5962] ? 0xffffffffa00045c0 [ 53.343222][ T5962] ? 0xffffffffa00045c0 [ 53.344338][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 53.346016][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 53.347586][ T5962] ? lock_acquire+0x2f/0xb0 [ 53.348850][ T5962] ? __fget_files+0x40/0x3f0 [ 53.350149][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 53.351696][ T5962] ? fput+0x30/0x390 [ 53.352750][ T5962] ? __bpf_prog_get+0xa0/0x290 [ 53.354110][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 53.355785][ T5962] __sys_bpf+0xfc6/0x49a0 [ 53.356983][ T5962] ? find_held_lock+0x2d/0x110 [ 53.358384][ T5962] ? __pfx___sys_bpf+0x10/0x10 [ 53.359796][ T5962] ? __might_fault+0x13b/0x190 [ 53.361178][ T5962] ? __pfx_lock_release+0x10/0x10 [ 53.362645][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 53.364301][ T5962] ? lock_acquire+0x2f/0xb0 [ 53.365621][ T5962] ? __might_fault+0xe3/0x190 [ 53.366986][ T5962] ? xfd_validate_state+0x5d/0x180 [ 53.368733][ T5962] ? rcu_is_watching+0x12/0xc0 [ 53.370092][ T5962] __x64_sys_bpf+0x78/0xc0 [ 53.371314][ T5962] ? lockdep_hardirqs_on+0x7c/0x110 [ 53.372910][ T5962] do_syscall_64+0xcd/0x250 [ 53.374145][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.375869][ T5962] RIP: 0033:0x7f1b5711ee99 [ 53.377074][ T5962] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 53.382663][ T5962] RSP: 002b:00007f1b570d9228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 53.385082][ T5962] RAX: ffffffffffffffda RBX: 00007f1b571a9328 RCX: 00007f1b5711ee99 [ 53.387444][ T5962] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 53.390056][ T5962] RBP: 00007f1b571a9320 R08: 00007f1b570d96c0 R09: 00007f1b570d96c0 [ 53.392350][ T5962] R10: 00007f1b570d96c0 R11: 0000000000000246 R12: 00007f1b57176074 [ 53.394435][ T5962] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffed9b8fc98 [ 53.396537][ T5962] [ 53.397493][ T5962] BUG: Bad page state in process syz-executor392 pfn:2139d [ 53.399570][ T5962] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2 pfn:0x2139d [ 53.402267][ T5962] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 53.404290][ T5962] raw: 00fff00000000000 dead000000000040 ffff888106115000 0000000000000000 [ 53.406811][ T5962] raw: 0000000000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 53.409142][ T5962] page dumped because: page_pool leak [ 53.410881][ T5962] page_owner tracks the page as allocated [ 53.412756][ T5962] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5962, tgid 5958 (syz-executor392), ts 44238735281, free_ts 44066403171 [ 53.417219][ T5962] post_alloc_hook+0x2d1/0x350 [ 53.418489][ T5962] get_page_from_freelist+0x101e/0x3070 [ 53.419963][ T5962] __alloc_pages_noprof+0x223/0x25a0 [ 53.421362][ T5962] alloc_pages_bulk_noprof+0x77c/0x1110 [ 53.422853][ T5962] __page_pool_alloc_pages_slow+0x18f/0x770 [ 53.424674][ T5962] page_pool_alloc_netmem+0xc4/0x160 [ 53.426328][ T5962] page_pool_alloc_pages+0x1a/0x60 [ 53.427926][ T5962] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 53.429940][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 53.431619][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 53.433548][ T5962] __sys_bpf+0xfc6/0x49a0 [ 53.434755][ T5962] __x64_sys_bpf+0x78/0xc0 [ 53.436038][ T5962] do_syscall_64+0xcd/0x250 [ 53.437388][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.439248][ T5962] page last free pid 5953 tgid 5952 stack trace: [ 53.440946][ T5962] free_unref_page+0x5f4/0xdc0 [ 53.442303][ T5962] vfree+0x17a/0x890 [ 53.443348][ T5962] hashlimit_mt_destroy_v1+0x78/0x90 [ 53.444757][ T5962] cleanup_entry+0x19f/0x3a0 [ 53.445988][ T5962] translate_table+0xddd/0x17b0 [ 53.447281][ T5962] do_ip6t_set_ctl+0x605/0xc40 [ 53.448680][ T5962] nf_setsockopt+0x8a/0xf0 [ 53.449999][ T5962] ipv6_setsockopt+0x135/0x170 [ 53.451234][ T5962] rawv6_setsockopt+0xd7/0x680 [ 53.452566][ T5962] do_sock_setsockopt+0x222/0x480 [ 53.454023][ T5962] __sys_setsockopt+0x1a4/0x270 [ 53.455631][ T5962] __x64_sys_setsockopt+0xbd/0x160 [ 53.457493][ T5962] do_syscall_64+0xcd/0x250 [ 53.458747][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.460377][ T5962] Modules linked in: [ 53.461430][ T5962] CPU: 2 UID: 0 PID: 5962 Comm: syz-executor392 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 53.464717][ T5962] Tainted: [B]=BAD_PAGE [ 53.465893][ T5962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 53.468695][ T5962] Call Trace: [ 53.469591][ T5962] [ 53.470403][ T5962] dump_stack_lvl+0x16c/0x1f0 [ 53.471761][ T5962] bad_page+0xb3/0x1f0 [ 53.472918][ T5962] ? __pfx_bad_page+0x10/0x10 [ 53.474253][ T5962] ? page_bad_reason+0x9d/0x1e0 [ 53.475819][ T5962] free_unref_page+0x657/0xdc0 [ 53.477688][ T5962] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 53.479295][ T5962] ? __phys_addr+0xc6/0x150 [ 53.480594][ T5962] skb_free_head+0xa0/0x1d0 [ 53.481879][ T5962] skb_release_data+0x560/0x730 [ 53.483185][ T5962] sk_skb_reason_drop+0x129/0x1a0 [ 53.484553][ T5962] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 53.486320][ T5962] ? kernel_text_address+0x8d/0x100 [ 53.487727][ T5962] ? hlock_class+0x4e/0x130 [ 53.489054][ T5962] ? __lock_acquire+0x163e/0x3ce0 [ 53.490427][ T5962] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 53.492356][ T5962] ? hlock_class+0x4e/0x130 [ 53.493562][ T5962] ? __lock_acquire+0xbdd/0x3ce0 [ 53.494947][ T5962] ? __pfx___lock_acquire+0x10/0x10 [ 53.496777][ T5962] __netif_receive_skb_list_core+0x357/0x950 [ 53.498648][ T5962] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 53.500608][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 53.502257][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 53.504149][ T5962] ? lock_acquire+0x2f/0xb0 [ 53.505357][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 53.507024][ T5962] netif_receive_skb_list_internal+0x753/0xdb0 [ 53.508666][ T5962] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 53.510413][ T5962] ? __pfx_eth_type_trans+0x10/0x10 [ 53.511812][ T5962] ? __build_skb_around+0x278/0x3b0 [ 53.513195][ T5962] netif_receive_skb_list+0x4f/0x4a0 [ 53.514578][ T5962] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 53.516344][ T5962] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 53.518070][ T5962] ? bpf_test_timer_continue+0x150/0x3d0 [ 53.519594][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 53.520984][ T5962] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 53.522536][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 53.524120][ T5962] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 53.525701][ T5962] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 53.527261][ T5962] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 53.528943][ T5962] ? 0xffffffffa00045c0 [ 53.530533][ T5962] ? 0xffffffffa00045c0 [ 53.531802][ T5962] ? 0xffffffffa00045c0 [ 53.533141][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 53.534910][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 53.536558][ T5962] ? lock_acquire+0x2f/0xb0 [ 53.537932][ T5962] ? __fget_files+0x40/0x3f0 [ 53.539354][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 53.540935][ T5962] ? fput+0x30/0x390 [ 53.541984][ T5962] ? __bpf_prog_get+0xa0/0x290 [ 53.543254][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 53.545151][ T5962] __sys_bpf+0xfc6/0x49a0 [ 53.546320][ T5962] ? find_held_lock+0x2d/0x110 [ 53.547638][ T5962] ? __pfx___sys_bpf+0x10/0x10 [ 53.548912][ T5962] ? __might_fault+0x13b/0x190 [ 53.550200][ T5962] ? __pfx_lock_release+0x10/0x10 [ 53.551977][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 53.553384][ T5962] ? lock_acquire+0x2f/0xb0 [ 53.554581][ T5962] ? __might_fault+0xe3/0x190 [ 53.555948][ T5962] ? xfd_validate_state+0x5d/0x180 [ 53.557561][ T5962] ? rcu_is_watching+0x12/0xc0 [ 53.559084][ T5962] __x64_sys_bpf+0x78/0xc0 [ 53.560325][ T5962] ? lockdep_hardirqs_on+0x7c/0x110 [ 53.561742][ T5962] do_syscall_64+0xcd/0x250 [ 53.563048][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.564654][ T5962] RIP: 0033:0x7f1b5711ee99 [ 53.565969][ T5962] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 53.571884][ T5962] RSP: 002b:00007f1b570d9228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 53.574708][ T5962] RAX: ffffffffffffffda RBX: 00007f1b571a9328 RCX: 00007f1b5711ee99 [ 53.576896][ T5962] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 53.579006][ T5962] RBP: 00007f1b571a9320 R08: 00007f1b570d96c0 R09: 00007f1b570d96c0 [ 53.581072][ T5962] R10: 00007f1b570d96c0 R11: 0000000000000246 R12: 00007f1b57176074 [ 53.583138][ T5962] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffed9b8fc98 [ 53.585211][ T5962] [ 53.586260][ T5962] BUG: Bad page state in process syz-executor392 pfn:2139f [ 53.588230][ T5962] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2 pfn:0x2139f [ 53.590675][ T5962] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 53.592612][ T5962] raw: 00fff00000000000 dead000000000040 ffff888106115000 0000000000000000 [ 53.595323][ T5962] raw: 0000000000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 53.597758][ T5962] page dumped because: page_pool leak [ 53.599370][ T5962] page_owner tracks the page as allocated [ 53.601087][ T5962] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5962, tgid 5958 (syz-executor392), ts 44238728087, free_ts 44069898019 [ 53.606474][ T5962] post_alloc_hook+0x2d1/0x350 [ 53.607756][ T5962] get_page_from_freelist+0x101e/0x3070 [ 53.609215][ T5962] __alloc_pages_noprof+0x223/0x25a0 [ 53.610611][ T5962] alloc_pages_bulk_noprof+0x77c/0x1110 [ 53.612135][ T5962] __page_pool_alloc_pages_slow+0x18f/0x770 [ 53.613934][ T5962] page_pool_alloc_netmem+0xc4/0x160 [ 53.615339][ T5962] page_pool_alloc_pages+0x1a/0x60 [ 53.617404][ T5962] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 53.619150][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 53.620695][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 53.622183][ T5962] __sys_bpf+0xfc6/0x49a0 [ 53.623336][ T5962] __x64_sys_bpf+0x78/0xc0 [ 53.624571][ T5962] do_syscall_64+0xcd/0x250 [ 53.625778][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.627327][ T5962] page last free pid 5953 tgid 5952 stack trace: [ 53.628989][ T5962] free_unref_page+0x5f4/0xdc0 [ 53.630260][ T5962] vfree+0x17a/0x890 [ 53.631299][ T5962] hashlimit_mt_destroy+0x7e/0xa0 [ 53.632705][ T5962] cleanup_entry+0x19f/0x3a0 [ 53.633939][ T5962] translate_table+0xddd/0x17b0 [ 53.635234][ T5962] do_ip6t_set_ctl+0x605/0xc40 [ 53.636630][ T5962] nf_setsockopt+0x8a/0xf0 [ 53.638042][ T5962] ipv6_setsockopt+0x135/0x170 [ 53.639486][ T5962] rawv6_setsockopt+0xd7/0x680 [ 53.640759][ T5962] do_sock_setsockopt+0x222/0x480 [ 53.642128][ T5962] __sys_setsockopt+0x1a4/0x270 [ 53.643369][ T5962] __x64_sys_setsockopt+0xbd/0x160 [ 53.644730][ T5962] do_syscall_64+0xcd/0x250 [ 53.645960][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.647574][ T5962] Modules linked in: [ 53.648800][ T5962] CPU: 2 UID: 0 PID: 5962 Comm: syz-executor392 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 53.652579][ T5962] Tainted: [B]=BAD_PAGE [ 53.653679][ T5962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 53.656667][ T5962] Call Trace: [ 53.657664][ T5962] [ 53.658475][ T5962] dump_stack_lvl+0x16c/0x1f0 [ 53.659842][ T5962] bad_page+0xb3/0x1f0 [ 53.661108][ T5962] ? __pfx_bad_page+0x10/0x10 [ 53.662450][ T5962] ? page_bad_reason+0x9d/0x1e0 [ 53.663832][ T5962] free_unref_page+0x657/0xdc0 [ 53.665115][ T5962] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 53.666712][ T5962] ? __phys_addr+0xc6/0x150 [ 53.668035][ T5962] skb_free_head+0xa0/0x1d0 [ 53.669533][ T5962] skb_release_data+0x560/0x730 [ 53.670982][ T5962] sk_skb_reason_drop+0x129/0x1a0 [ 53.672892][ T5962] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 53.674884][ T5962] ? kernel_text_address+0x8d/0x100 [ 53.676412][ T5962] ? hlock_class+0x4e/0x130 [ 53.677641][ T5962] ? __lock_acquire+0x163e/0x3ce0 [ 53.678971][ T5962] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 53.680888][ T5962] ? hlock_class+0x4e/0x130 [ 53.682106][ T5962] ? __lock_acquire+0xbdd/0x3ce0 [ 53.683437][ T5962] ? __pfx___lock_acquire+0x10/0x10 [ 53.684859][ T5962] __netif_receive_skb_list_core+0x357/0x950 [ 53.686505][ T5962] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 53.688291][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 53.689668][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 53.691332][ T5962] ? lock_acquire+0x2f/0xb0 [ 53.692555][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 53.694213][ T5962] netif_receive_skb_list_internal+0x753/0xdb0 [ 53.696014][ T5962] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 53.698117][ T5962] ? __pfx_eth_type_trans+0x10/0x10 [ 53.699732][ T5962] ? __build_skb_around+0x278/0x3b0 [ 53.701281][ T5962] netif_receive_skb_list+0x4f/0x4a0 [ 53.702898][ T5962] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 53.704759][ T5962] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 53.706475][ T5962] ? bpf_test_timer_continue+0x150/0x3d0 [ 53.707960][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 53.709585][ T5962] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 53.711145][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 53.712732][ T5962] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 53.714479][ T5962] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 53.716072][ T5962] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 53.717732][ T5962] ? 0xffffffffa00045c0 [ 53.718977][ T5962] ? 0xffffffffa00045c0 [ 53.720170][ T5962] ? 0xffffffffa00045c0 [ 53.721278][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 53.722840][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 53.724346][ T5962] ? lock_acquire+0x2f/0xb0 [ 53.725566][ T5962] ? __fget_files+0x40/0x3f0 [ 53.726800][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 53.728371][ T5962] ? fput+0x30/0x390 [ 53.729767][ T5962] ? __bpf_prog_get+0xa0/0x290 [ 53.731103][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 53.732737][ T5962] __sys_bpf+0xfc6/0x49a0 [ 53.734000][ T5962] ? find_held_lock+0x2d/0x110 [ 53.735568][ T5962] ? __pfx___sys_bpf+0x10/0x10 [ 53.737022][ T5962] ? __might_fault+0x13b/0x190 [ 53.738555][ T5962] ? __pfx_lock_release+0x10/0x10 [ 53.739955][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 53.741345][ T5962] ? lock_acquire+0x2f/0xb0 [ 53.742560][ T5962] ? __might_fault+0xe3/0x190 [ 53.743835][ T5962] ? xfd_validate_state+0x5d/0x180 [ 53.745185][ T5962] ? rcu_is_watching+0x12/0xc0 [ 53.746463][ T5962] __x64_sys_bpf+0x78/0xc0 [ 53.747676][ T5962] ? lockdep_hardirqs_on+0x7c/0x110 [ 53.749058][ T5962] do_syscall_64+0xcd/0x250 [ 53.750278][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.751818][ T5962] RIP: 0033:0x7f1b5711ee99 [ 53.753006][ T5962] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 53.758055][ T5962] RSP: 002b:00007f1b570d9228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 53.760218][ T5962] RAX: ffffffffffffffda RBX: 00007f1b571a9328 RCX: 00007f1b5711ee99 [ 53.762275][ T5962] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 53.764558][ T5962] RBP: 00007f1b571a9320 R08: 00007f1b570d96c0 R09: 00007f1b570d96c0 [ 53.767197][ T5962] R10: 00007f1b570d96c0 R11: 0000000000000246 R12: 00007f1b57176074 [ 53.769891][ T5962] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffed9b8fc98 [ 53.772635][ T5962] [ 53.773710][ T5962] BUG: Bad page state in process syz-executor392 pfn:35718 [ 53.775831][ T5962] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803571e000 pfn:0x35718 [ 53.778830][ T5962] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 53.780905][ T5962] raw: 00fff00000000000 dead000000000040 ffff888106115000 0000000000000000 [ 53.783232][ T5962] raw: ffff88803571e000 0000000000000001 00000000ffffffff 0000000000000000 [ 53.785435][ T5962] page dumped because: page_pool leak [ 53.786859][ T5962] page_owner tracks the page as allocated [ 53.788423][ T5962] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5962, tgid 5958 (syz-executor392), ts 44238720888, free_ts 44069908453 [ 53.793363][ T5962] post_alloc_hook+0x2d1/0x350 [ 53.794871][ T5962] get_page_from_freelist+0x101e/0x3070 [ 53.796593][ T5962] __alloc_pages_noprof+0x223/0x25a0 [ 53.798096][ T5962] alloc_pages_bulk_noprof+0x77c/0x1110 [ 53.799819][ T5962] __page_pool_alloc_pages_slow+0x18f/0x770 [ 53.801512][ T5962] page_pool_alloc_netmem+0xc4/0x160 [ 53.803082][ T5962] page_pool_alloc_pages+0x1a/0x60 [ 53.804559][ T5962] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 53.806260][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 53.807680][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 53.809363][ T5962] __sys_bpf+0xfc6/0x49a0 [ 53.810748][ T5962] __x64_sys_bpf+0x78/0xc0 [ 53.812076][ T5962] do_syscall_64+0xcd/0x250 [ 53.813475][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.815248][ T5962] page last free pid 5953 tgid 5952 stack trace: [ 53.817072][ T5962] free_unref_page+0x5f4/0xdc0 [ 53.818726][ T5962] vfree+0x17a/0x890 [ 53.819883][ T5962] hashlimit_mt_destroy+0x7e/0xa0 [ 53.821306][ T5962] cleanup_entry+0x19f/0x3a0 [ 53.822700][ T5962] translate_table+0xddd/0x17b0 [ 53.824194][ T5962] do_ip6t_set_ctl+0x605/0xc40 [ 53.825837][ T5962] nf_setsockopt+0x8a/0xf0 [ 53.827113][ T5962] ipv6_setsockopt+0x135/0x170 [ 53.828526][ T5962] rawv6_setsockopt+0xd7/0x680 [ 53.830610][ T5962] do_sock_setsockopt+0x222/0x480 [ 53.832109][ T5962] __sys_setsockopt+0x1a4/0x270 [ 53.833681][ T5962] __x64_sys_setsockopt+0xbd/0x160 [ 53.835159][ T5962] do_syscall_64+0xcd/0x250 [ 53.836414][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.838090][ T5962] Modules linked in: [ 53.839144][ T5962] CPU: 2 UID: 0 PID: 5962 Comm: syz-executor392 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 53.842423][ T5962] Tainted: [B]=BAD_PAGE [ 53.843541][ T5962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 53.846336][ T5962] Call Trace: [ 53.847115][ T5962] [ 53.847886][ T5962] dump_stack_lvl+0x16c/0x1f0 [ 53.849246][ T5962] bad_page+0xb3/0x1f0 [ 53.850432][ T5962] ? __pfx_bad_page+0x10/0x10 [ 53.851734][ T5962] ? page_bad_reason+0x9d/0x1e0 [ 53.853185][ T5962] free_unref_page+0x657/0xdc0 [ 53.854713][ T5962] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 53.856431][ T5962] ? __phys_addr+0xc6/0x150 [ 53.858018][ T5962] skb_free_head+0xa0/0x1d0 [ 53.859399][ T5962] skb_release_data+0x560/0x730 [ 53.860883][ T5962] sk_skb_reason_drop+0x129/0x1a0 [ 53.862662][ T5962] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 53.864775][ T5962] ? kernel_text_address+0x8d/0x100 [ 53.866412][ T5962] ? hlock_class+0x4e/0x130 [ 53.867857][ T5962] ? __lock_acquire+0x163e/0x3ce0 [ 53.869603][ T5962] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 53.871434][ T5962] ? hlock_class+0x4e/0x130 [ 53.872640][ T5962] ? __lock_acquire+0xbdd/0x3ce0 [ 53.873919][ T5962] ? __pfx___lock_acquire+0x10/0x10 [ 53.875356][ T5962] __netif_receive_skb_list_core+0x357/0x950 [ 53.877073][ T5962] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 53.878814][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 53.880195][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 53.881872][ T5962] ? lock_acquire+0x2f/0xb0 [ 53.883079][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 53.884757][ T5962] netif_receive_skb_list_internal+0x753/0xdb0 [ 53.886384][ T5962] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 53.888142][ T5962] ? __pfx_eth_type_trans+0x10/0x10 [ 53.889515][ T5962] ? __build_skb_around+0x278/0x3b0 [ 53.890897][ T5962] netif_receive_skb_list+0x4f/0x4a0 [ 53.892311][ T5962] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 53.893953][ T5962] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 53.895740][ T5962] ? bpf_test_timer_continue+0x150/0x3d0 [ 53.897145][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 53.898795][ T5962] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 53.900568][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 53.902444][ T5962] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 53.904121][ T5962] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 53.905830][ T5962] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 53.907260][ T5962] ? 0xffffffffa00045c0 [ 53.908557][ T5962] ? 0xffffffffa00045c0 [ 53.909641][ T5962] ? 0xffffffffa00045c0 [ 53.910782][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 53.912361][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 53.913780][ T5962] ? lock_acquire+0x2f/0xb0 [ 53.915175][ T5962] ? __fget_files+0x40/0x3f0 [ 53.916748][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 53.918604][ T5962] ? fput+0x30/0x390 [ 53.919763][ T5962] ? __bpf_prog_get+0xa0/0x290 [ 53.921182][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 53.922899][ T5962] __sys_bpf+0xfc6/0x49a0 [ 53.924182][ T5962] ? find_held_lock+0x2d/0x110 [ 53.925504][ T5962] ? __pfx___sys_bpf+0x10/0x10 [ 53.926783][ T5962] ? __might_fault+0x13b/0x190 [ 53.928060][ T5962] ? __pfx_lock_release+0x10/0x10 [ 53.929497][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 53.930982][ T5962] ? lock_acquire+0x2f/0xb0 [ 53.932424][ T5962] ? __might_fault+0xe3/0x190 [ 53.933780][ T5962] ? xfd_validate_state+0x5d/0x180 [ 53.935253][ T5962] ? rcu_is_watching+0x12/0xc0 [ 53.936909][ T5962] __x64_sys_bpf+0x78/0xc0 [ 53.938398][ T5962] ? lockdep_hardirqs_on+0x7c/0x110 [ 53.939982][ T5962] do_syscall_64+0xcd/0x250 [ 53.941324][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.943052][ T5962] RIP: 0033:0x7f1b5711ee99 [ 53.944384][ T5962] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 53.949729][ T5962] RSP: 002b:00007f1b570d9228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 53.952024][ T5962] RAX: ffffffffffffffda RBX: 00007f1b571a9328 RCX: 00007f1b5711ee99 [ 53.954323][ T5962] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 53.956581][ T5962] RBP: 00007f1b571a9320 R08: 00007f1b570d96c0 R09: 00007f1b570d96c0 [ 53.958818][ T5962] R10: 00007f1b570d96c0 R11: 0000000000000246 R12: 00007f1b57176074 [ 53.960962][ T5962] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffed9b8fc98 [ 53.963065][ T5962] [ 53.964034][ T5962] BUG: Bad page state in process syz-executor392 pfn:35719 [ 53.966077][ T5962] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x8 pfn:0x35719 [ 53.968919][ T5962] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 53.971067][ T5962] raw: 00fff00000000000 dead000000000040 ffff888106115000 0000000000000000 [ 53.973606][ T5962] raw: 0000000000000008 0000000000000001 00000000ffffffff 0000000000000000 [ 53.976261][ T5962] page dumped because: page_pool leak [ 53.978126][ T5962] page_owner tracks the page as allocated [ 53.979675][ T5962] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5962, tgid 5958 (syz-executor392), ts 44238713519, free_ts 44069913114 [ 53.984470][ T5962] post_alloc_hook+0x2d1/0x350 [ 53.985802][ T5962] get_page_from_freelist+0x101e/0x3070 [ 53.987328][ T5962] __alloc_pages_noprof+0x223/0x25a0 [ 53.988750][ T5962] alloc_pages_bulk_noprof+0x77c/0x1110 [ 53.990294][ T5962] __page_pool_alloc_pages_slow+0x18f/0x770 [ 53.992236][ T5962] page_pool_alloc_netmem+0xc4/0x160 [ 53.993834][ T5962] page_pool_alloc_pages+0x1a/0x60 [ 53.995244][ T5962] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 53.996986][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 53.998539][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 54.000256][ T5962] __sys_bpf+0xfc6/0x49a0 [ 54.001604][ T5962] __x64_sys_bpf+0x78/0xc0 [ 54.002938][ T5962] do_syscall_64+0xcd/0x250 [ 54.004218][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.005833][ T5962] page last free pid 5953 tgid 5952 stack trace: [ 54.007522][ T5962] free_unref_page+0x5f4/0xdc0 [ 54.009026][ T5962] vfree+0x17a/0x890 [ 54.010119][ T5962] hashlimit_mt_destroy+0x7e/0xa0 [ 54.011409][ T5962] cleanup_entry+0x19f/0x3a0 [ 54.013349][ T5962] translate_table+0xddd/0x17b0 [ 54.015264][ T5962] do_ip6t_set_ctl+0x605/0xc40 [ 54.016823][ T5962] nf_setsockopt+0x8a/0xf0 [ 54.018176][ T5962] ipv6_setsockopt+0x135/0x170 [ 54.019732][ T5962] rawv6_setsockopt+0xd7/0x680 [ 54.021178][ T5962] do_sock_setsockopt+0x222/0x480 [ 54.022636][ T5962] __sys_setsockopt+0x1a4/0x270 [ 54.023981][ T5962] __x64_sys_setsockopt+0xbd/0x160 [ 54.025347][ T5962] do_syscall_64+0xcd/0x250 [ 54.026552][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.028266][ T5962] Modules linked in: [ 54.029713][ T5962] CPU: 2 UID: 0 PID: 5962 Comm: syz-executor392 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 54.033175][ T5962] Tainted: [B]=BAD_PAGE [ 54.034331][ T5962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 54.037754][ T5962] Call Trace: [ 54.038709][ T5962] [ 54.039702][ T5962] dump_stack_lvl+0x16c/0x1f0 [ 54.041289][ T5962] bad_page+0xb3/0x1f0 [ 54.042612][ T5962] ? __pfx_bad_page+0x10/0x10 [ 54.043886][ T5962] ? page_bad_reason+0x9d/0x1e0 [ 54.045191][ T5962] free_unref_page+0x657/0xdc0 [ 54.046478][ T5962] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 54.048273][ T5962] ? __phys_addr+0xc6/0x150 [ 54.049593][ T5962] skb_free_head+0xa0/0x1d0 [ 54.050998][ T5962] skb_release_data+0x560/0x730 [ 54.052718][ T5962] sk_skb_reason_drop+0x129/0x1a0 [ 54.054384][ T5962] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 54.056203][ T5962] ? kernel_text_address+0x8d/0x100 [ 54.057564][ T5962] ? hlock_class+0x4e/0x130 [ 54.058849][ T5962] ? __lock_acquire+0x163e/0x3ce0 [ 54.060313][ T5962] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 54.062315][ T5962] ? hlock_class+0x4e/0x130 [ 54.063587][ T5962] ? __lock_acquire+0xbdd/0x3ce0 [ 54.065061][ T5962] ? __pfx___lock_acquire+0x10/0x10 [ 54.066449][ T5962] __netif_receive_skb_list_core+0x357/0x950 [ 54.068047][ T5962] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 54.069766][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 54.071134][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 54.072993][ T5962] ? lock_acquire+0x2f/0xb0 [ 54.074255][ T5962] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 54.076092][ T5962] netif_receive_skb_list_internal+0x753/0xdb0 [ 54.077942][ T5962] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 54.080151][ T5962] ? __pfx_eth_type_trans+0x10/0x10 [ 54.081829][ T5962] ? __build_skb_around+0x278/0x3b0 [ 54.083461][ T5962] netif_receive_skb_list+0x4f/0x4a0 [ 54.084866][ T5962] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 54.086497][ T5962] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 54.088401][ T5962] ? bpf_test_timer_continue+0x150/0x3d0 [ 54.090343][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 54.091966][ T5962] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 54.093723][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 54.095771][ T5962] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 54.097372][ T5962] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 54.099276][ T5962] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 54.100788][ T5962] ? 0xffffffffa00045c0 [ 54.102135][ T5962] ? 0xffffffffa00045c0 [ 54.103333][ T5962] ? 0xffffffffa00045c0 [ 54.104626][ T5962] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 54.106332][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 54.107956][ T5962] ? lock_acquire+0x2f/0xb0 [ 54.109172][ T5962] ? __fget_files+0x40/0x3f0 [ 54.110432][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 54.111989][ T5962] ? fput+0x30/0x390 [ 54.113091][ T5962] ? __bpf_prog_get+0xa0/0x290 [ 54.114587][ T5962] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 54.116196][ T5962] __sys_bpf+0xfc6/0x49a0 [ 54.117758][ T5962] ? find_held_lock+0x2d/0x110 [ 54.119188][ T5962] ? __pfx___sys_bpf+0x10/0x10 [ 54.120647][ T5962] ? __might_fault+0x13b/0x190 [ 54.121931][ T5962] ? __pfx_lock_release+0x10/0x10 [ 54.123275][ T5962] ? trace_lock_acquire+0x14a/0x1d0 [ 54.124693][ T5962] ? lock_acquire+0x2f/0xb0 [ 54.125895][ T5962] ? __might_fault+0xe3/0x190 [ 54.127166][ T5962] ? xfd_validate_state+0x5d/0x180 [ 54.128685][ T5962] ? rcu_is_watching+0x12/0xc0 [ 54.130098][ T5962] __x64_sys_bpf+0x78/0xc0 [ 54.131509][ T5962] ? lockdep_hardirqs_on+0x7c/0x110 [ 54.133133][ T5962] do_syscall_64+0xcd/0x250 [ 54.134557][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.136381][ T5962] RIP: 0033:0x7f1b5711ee99 [ 54.137655][ T5962] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 54.142863][ T5962] RSP: 002b:00007f1b570d9228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 54.145067][ T5962] RAX: ffffffffffffffda RBX: 00007f1b571a9328 RCX: 00007f1b5711ee99 [ 54.147147][ T5962] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 54.149231][ T5962] RBP: 00007f1b571a9320 R08: 00007f1b570d96c0 R09: 00007f1b570d96c0 [ 54.151356][ T5962] R10: 00007f1b570d96c0 R11: 0000000000000246 R12: 00007f1b57176074 [ 54.153828][ T5962] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffed9b8fc98 [ 54.156217][ T5962] [ 54.157292][ T5962] BUG: Bad page state in process syz-executor392 pfn:3571a [ 54.159796][ T5962] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3571a [ 54.162459][ T5962] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 54.164543][ T5962] raw: 00fff00000000000 dead000000000040 ffff888106115000 0000000000000000 [ 54.166982][ T5962] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 54.169226][ T5962] page dumped because: page_pool leak [ 54.170654][ T5962] page_owner tracks the page as allocated [ 54.172506][ T5962] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5962, tgid 5958 (syz-executor392), ts 44238706853, free_ts 44069917259 [ 54.177159][ T5962] post_alloc_hook+0x2d1/0x350 [ 54.178430][ T5962] get_page_from_freelist+0x101e/0x3070 [ 54.180013][ T5962] __alloc_pages_noprof+0x223/0x25a0 [ 54.181437][ T5962] alloc_pages_bulk_noprof+0x77c/0x1110 [ 54.183181][ T5962] __page_pool_alloc_pages_slow+0x18f/0x770 [ 54.184950][ T5962] page_pool_alloc_netmem+0xc4/0x160 [ 54.186547][ T5962] page_pool_alloc_pages+0x1a/0x60 [ 54.188108][ T5962] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 54.190003][ T5962] bpf_test_run_xdp_live+0x365/0x500 [ 54.192278][ T5962] bpf_prog_test_run_xdp+0x827/0x1580 [ 54.193999][ T5962] __sys_bpf+0xfc6/0x49a0 [ 54.195192][ T5962] __x64_sys_bpf+0x78/0xc0 [ 54.196437][ T5962] do_syscall_64+0xcd/0x250 [ 54.197682][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.199425][ T5962] page last free pid 5953 tgid 5952 stack trace: [ 54.201234][ T5962] free_unref_page+0x5f4/0xdc0 [ 54.202598][ T5962] vfree+0x17a/0x890 [ 54.203666][ T5962] hashlimit_mt_destroy+0x7e/0xa0 [ 54.205031][ T5962] cleanup_entry+0x19f/0x3a0 [ 54.206265][ T5962] translate_table+0xddd/0x17b0 [ 54.207560][ T5962] do_ip6t_set_ctl+0x605/0xc40 [ 54.209122][ T5962] nf_setsockopt+0x8a/0xf0 [ 54.210624][ T5962] ipv6_setsockopt+0x135/0x170 [ 54.212086][ T5962] rawv6_setsockopt+0xd7/0x680 [ 54.213489][ T5962] do_sock_setsockopt+0x222/0x480 [ 54.214892][ T5962] __sys_setsockopt+0x1a4/0x270 [ 54.216269][ T5962] __x64_sys_setsockopt+0xbd/0x160 [ 54.217693][ T5962] do_syscall_64+0xcd/0x250 [ 54.218968][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.220687][ T5962] Modules linked in: [ 54.221867][ T5962] CPU: 2 UID: 0 PID: 5962 Comm: syz-executor392 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 54.225870][ T5962] Tainted: [B]=BAD_PAGE [ 54.227168][ T5962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 54.230990][ T5962] Call Trace: [ 54.232000][ T5962] [ 54.232857][ T5962] dump_stack_lvl+0x16c/0x1f0 [ 54.234185][ T5962] bad_page+0xb3/0x1f0 [ 54.235539][ T5962] ? __pfx_bad_page+0x10/0x10 [ 54.236714][ T5962] ? page_bad_reason+0x9d/0x1e0 [ 54.237909][ T5962] free_unref_page+0x657/0xdc0 [ 54.239172][ T5962] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 54.240901][ T5962] ? __phys_addr+0xc6/0x150 [ 54.242117][ T5962] skb_free_head+0xa0/0x1d0 [ 54.243411][ T5962] skb_release_data+0x560/0x730 [ 54.244838][ T5962] sk_skb_reason_drop+0x129/0x1a0 [ 54.246237][ T5962] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 54.248036][ T5962] ? kernel_text_address+0x8d/0x100 [ 54.249530][ T5962] ? hlock_class+0x4e/0x130 [ 54.250751][ T5962] ? __lock_acquire+0x163e/0x3ce0 VM DIAGNOSIS: 15:53:25 Registers: info registers vcpu 0 CPU#0 RAX=000000000009478f RBX=0000000000000000 RCX=ffffffff8b2305e9 RDX=0000000000000000 RSI=ffffffff8b6cd040 RDI=ffffffff8bd1ad40 RBP=fffffbfff1bd2af8 RSP=ffffffff8de07e20 R8 =0000000000000001 R9 =ffffed100d4c7025 R10=ffff88806a63812b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8de957c0 R14=ffffffff905f5088 R15=0000000000000000 RIP=ffffffff8b2319cf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000000000000 CR3=00000000332cc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000800000 Opmask01=0000000000000001 Opmask02=00000000fff7ffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1b571aeee0 00007f1b571aeee0 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1b571aeed0 00007f1b571aeed0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1b571af6a8 00007f1b571a3590 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1b57192de4 00007f1b571a8260 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6f723d52455355 0038383032353533 323933726f747563 6578652d7a79732f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000046 RBX=ffffffff8150769d RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff8b6cd080 RDI=ffffffff8bd1ad40 RBP=ffffffff895fe41f RSP=ffffc90003b97698 R8 =0000000000000000 R9 =fffff520007f3209 R10=ffffc90003f9904b R11=0000000000000000 R12=00000000000017e2 R13=1ffff92000772ee3 R14=0000000000000001 R15=ffffc90003f99000 RIP=ffffffff8b22f433 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f1b570d96c0 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fdba2c21440 CR3=000000002846e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000800000 Opmask01=0000000000000001 Opmask02=00000000fff7ffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1b571aeee0 00007f1b571aeee0 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1b571aeed0 00007f1b571aeed0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1b571af6a8 00007f1b571a3590 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1b57192de4 00007f1b571a8260 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6f723d52455355 0038383032353533 323933726f747563 6578652d7a79732f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff850b46e5 RDI=ffffffff9aae7bc0 RBP=ffffffff9aae7b80 RSP=ffffc900042c6990 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000030 R14=ffffffff850b4680 R15=0000000000000000 RIP=ffffffff850b470f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f1b570d96c0 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000000000000 CR3=0000000020bf6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffffff0 Opmask01=0000000000000001 Opmask02=00000000fff7ffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5a87000000000000 80fe003cc20362ce ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000074 696d696c68736168 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000018 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1b571a89e8 00007f1b571a89e0 00007f1b571a89e0 00007f1b571aebe0 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7865006a64615f65 726f63735f6d6f6f 2f666c65732f636f 72702f0030303031 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5d40004f41445f40 574a46565f484a4a 0a434940560a464a 57550a0015151514 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000a4da17246 RBX=ffffea00008fa080 RCX=0000000ac783a7fc RDX=0000000a4da17246 RSI=0000000000000001 RDI=ffffea00008fa080 RBP=0000000000000000 RSP=ffffc90000908c40 R8 =0000000000000000 R9 =fffff9400011f416 R10=ffffea00008fa0b7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81faec00 RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f5f57a08440 CR3=000000002ff50000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffffff0 Opmask01=0000000000000001 Opmask02=00000000fff7ffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1b5714b8e7 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555594916028 00007f1b571aeee0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000018 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1b571a89e8 00007f1b571a89e0 00007f1b571a89e0 00007f1b571aebe0 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7865006a64615f65 726f63735f6d6f6f 2f666c65732f636f 72702f0030303031 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5d40004f41445f40 574a46565f484a4a 0a434940560a464a 57550a0015151514 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000