[ 38.100187][ T39] audit: type=1400 audit(1730233612.683:80): avc: denied { write } for pid=5875 comm="sh" path="pipe:[3961]" dev="pipefs" ino=3961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 38.106557][ T39] audit: type=1400 audit(1730233612.683:81): avc: denied { rlimitinh } for pid=5875 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.111306][ T39] audit: type=1400 audit(1730233612.683:82): avc: denied { siginh } for pid=5875 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 50.464996][ T39] audit: type=1400 audit(1730233625.053:83): avc: denied { read } for pid=5342 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 50.473477][ T39] audit: type=1400 audit(1730233625.053:84): avc: denied { append } for pid=5342 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 50.481421][ T39] audit: type=1400 audit(1730233625.053:85): avc: denied { open } for pid=5342 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 50.489353][ T39] audit: type=1400 audit(1730233625.053:86): avc: denied { getattr } for pid=5342 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:50617' (ED25519) to the list of known hosts. [ 52.500822][ T39] audit: type=1400 audit(1730233627.093:87): avc: denied { execute } for pid=5941 comm="sh" name="syz-execprog" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 52.507573][ T39] audit: type=1400 audit(1730233627.093:88): avc: denied { execute_no_trans } for pid=5941 comm="sh" path="/syz-execprog" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2024/10/29 20:27:07 ignoring optional flag "sandboxArg"="0" [ 52.923510][ T39] audit: type=1400 audit(1730233627.513:89): avc: denied { write } for pid=5941 comm="syz-execprog" path="pipe:[4006]" dev="pipefs" ino=4006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 2024/10/29 20:27:07 parsed 1 programs [ 53.240815][ T39] audit: type=1400 audit(1730233627.833:90): avc: denied { node_bind } for pid=5941 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 55.179230][ T39] audit: type=1400 audit(1730233629.773:91): avc: denied { mounton } for pid=5948 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1927 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 55.187369][ T39] audit: type=1400 audit(1730233629.793:92): avc: denied { mount } for pid=5948 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 55.190064][ T5948] cgroup: Unknown subsys name 'net' [ 55.348499][ T5948] cgroup: Unknown subsys name 'cpuset' [ 55.352352][ T5948] cgroup: Unknown subsys name 'rlimit' [ 55.482080][ T39] kauditd_printk_skb: 1 callbacks suppressed [ 55.482096][ T39] audit: type=1400 audit(1730233630.073:94): avc: denied { setattr } for pid=5948 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 55.492909][ T39] audit: type=1400 audit(1730233630.093:95): avc: denied { create } for pid=5948 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.501304][ T39] audit: type=1400 audit(1730233630.093:96): avc: denied { write } for pid=5948 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.509562][ T39] audit: type=1400 audit(1730233630.093:97): avc: denied { read } for pid=5948 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.517105][ T39] audit: type=1400 audit(1730233630.103:98): avc: denied { mounton } for pid=5948 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 55.525726][ T39] audit: type=1400 audit(1730233630.103:99): avc: denied { mount } for pid=5948 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 55.534980][ T39] audit: type=1400 audit(1730233630.103:100): avc: denied { read } for pid=5660 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 55.557680][ T5954] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 55.561114][ T39] audit: type=1400 audit(1730233630.153:101): avc: denied { relabelto } for pid=5954 comm="mkswap" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 55.569382][ T39] audit: type=1400 audit(1730233630.153:102): avc: denied { write } for pid=5954 comm="mkswap" path="/swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 55.582818][ T39] audit: type=1400 audit(1730233630.183:103): avc: denied { read } for pid=5948 comm="syz-executor" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 56.255454][ T5948] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 57.902247][ T5960] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 58.062438][ T5988] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 58.067420][ T5988] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 58.069827][ T5988] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 58.080801][ T5988] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 58.084103][ T5988] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 58.090189][ T5988] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.096112][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.098436][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.122422][ T1235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.125709][ T1235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.140562][ T5971] chnl_net:caif_netlink_parms(): no params data found [ 58.359152][ T5971] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.368759][ T5971] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.373514][ T5971] bridge_slave_0: entered allmulticast mode [ 58.381131][ T5971] bridge_slave_0: entered promiscuous mode [ 58.415441][ T5971] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.417345][ T5971] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.419237][ T5971] bridge_slave_1: entered allmulticast mode [ 58.421302][ T5971] bridge_slave_1: entered promiscuous mode [ 58.468154][ T5971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.483731][ T5971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.537104][ T5971] team0: Port device team_slave_0 added [ 58.562576][ T5971] team0: Port device team_slave_1 added [ 58.625518][ T5971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.627719][ T5971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.637259][ T5971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.645458][ T5971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.647871][ T5971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.655262][ T5971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.714015][ T5971] hsr_slave_0: entered promiscuous mode [ 58.717519][ T5971] hsr_slave_1: entered promiscuous mode [ 58.924739][ T5971] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.931281][ T5971] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.935096][ T5971] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.938826][ T5971] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.956237][ T5971] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.958381][ T5971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.961130][ T5971] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.963303][ T5971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.990043][ T5971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.004965][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.015986][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.044979][ T5971] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.050048][ T1235] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.051877][ T1235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.058984][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.060828][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.186660][ T5971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.204241][ T5971] veth0_vlan: entered promiscuous mode [ 59.211175][ T5971] veth1_vlan: entered promiscuous mode [ 59.230673][ T5971] veth0_macvtap: entered promiscuous mode [ 59.233603][ T5971] veth1_macvtap: entered promiscuous mode [ 59.241074][ T5971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.247235][ T5971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.252569][ T5971] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.255939][ T5971] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.258175][ T5971] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.260383][ T5971] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2024/10/29 20:27:13 executed programs: 0 [ 59.362617][ T66] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.366347][ T66] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 59.368697][ T66] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 59.375274][ T66] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 59.386888][ T5298] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 59.389668][ T5298] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 59.393820][ T5298] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 59.396959][ T5298] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 59.399853][ T5298] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 59.403140][ T5298] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 59.415321][ T5992] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 59.417268][ T5988] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 59.420612][ T5988] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 59.439503][ T5988] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 59.441953][ T5988] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 59.446160][ T5988] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 59.450469][ T5988] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 59.457292][ T66] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 59.457390][ T6052] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 59.459771][ T66] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 59.462053][ T6052] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 59.463602][ T66] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 59.465706][ T5988] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 59.472191][ T5298] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 59.547742][ T6040] chnl_net:caif_netlink_parms(): no params data found [ 59.586089][ T1179] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.681832][ T6040] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.684748][ T6040] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.687616][ T6040] bridge_slave_0: entered allmulticast mode [ 59.691242][ T6040] bridge_slave_0: entered promiscuous mode [ 59.706917][ T1179] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.742417][ T6040] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.744374][ T6040] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.747130][ T6040] bridge_slave_1: entered allmulticast mode [ 59.749318][ T6040] bridge_slave_1: entered promiscuous mode [ 59.780559][ T6040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.808937][ T6040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.812975][ T6045] chnl_net:caif_netlink_parms(): no params data found [ 59.816801][ T6048] chnl_net:caif_netlink_parms(): no params data found [ 59.923785][ T6040] team0: Port device team_slave_0 added [ 59.927132][ T6051] chnl_net:caif_netlink_parms(): no params data found [ 59.951561][ T6040] team0: Port device team_slave_1 added [ 59.977849][ T6045] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.980051][ T6045] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.982019][ T6045] bridge_slave_0: entered allmulticast mode [ 59.984346][ T6045] bridge_slave_0: entered promiscuous mode [ 59.992637][ T6045] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.998315][ T6045] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.000211][ T6045] bridge_slave_1: entered allmulticast mode [ 60.002366][ T6045] bridge_slave_1: entered promiscuous mode [ 60.035903][ T6048] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.037830][ T6048] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.039892][ T6048] bridge_slave_0: entered allmulticast mode [ 60.042048][ T6048] bridge_slave_0: entered promiscuous mode [ 60.064081][ T6040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.066015][ T6040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.072370][ T6040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.091395][ T6048] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.093679][ T6048] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.097568][ T6048] bridge_slave_1: entered allmulticast mode [ 60.100209][ T6048] bridge_slave_1: entered promiscuous mode [ 60.103741][ T6045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.107309][ T6045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.110272][ T6040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.112815][ T6040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.122913][ T6040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.207521][ T6048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.234932][ T6045] team0: Port device team_slave_0 added [ 60.236622][ T6051] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.238475][ T6051] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.240523][ T6051] bridge_slave_0: entered allmulticast mode [ 60.242521][ T6051] bridge_slave_0: entered promiscuous mode [ 60.246495][ T6051] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.248314][ T6051] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.250170][ T6051] bridge_slave_1: entered allmulticast mode [ 60.252097][ T6051] bridge_slave_1: entered promiscuous mode [ 60.255759][ T6048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.259839][ T6040] hsr_slave_0: entered promiscuous mode [ 60.262303][ T6040] hsr_slave_1: entered promiscuous mode [ 60.265371][ T6040] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.267539][ T6040] Cannot create hsr debugfs directory [ 60.269545][ T6045] team0: Port device team_slave_1 added [ 60.349707][ T6051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.355295][ T6048] team0: Port device team_slave_0 added [ 60.361768][ T6048] team0: Port device team_slave_1 added [ 60.364156][ T6045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.366648][ T6045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.375848][ T6045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.380662][ T6045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.382724][ T6045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.389029][ T6045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.394377][ T6051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.428648][ T6048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.430693][ T6048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.437693][ T6048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.444177][ T6048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.446362][ T6048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.453763][ T6048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.496435][ T6051] team0: Port device team_slave_0 added [ 60.500750][ T6051] team0: Port device team_slave_1 added [ 60.553029][ T6045] hsr_slave_0: entered promiscuous mode [ 60.555563][ T6045] hsr_slave_1: entered promiscuous mode [ 60.557563][ T6045] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.559456][ T6045] Cannot create hsr debugfs directory [ 60.561564][ T6051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.563389][ T6051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.570147][ T6051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.589301][ T6051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.591323][ T6051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.598150][ T6051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.627237][ T6048] hsr_slave_0: entered promiscuous mode [ 60.629252][ T6048] hsr_slave_1: entered promiscuous mode [ 60.631091][ T6048] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.633223][ T6048] Cannot create hsr debugfs directory [ 60.689833][ T6051] hsr_slave_0: entered promiscuous mode [ 60.692436][ T6051] hsr_slave_1: entered promiscuous mode [ 60.695265][ T6051] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.697249][ T6051] Cannot create hsr debugfs directory [ 60.848815][ T6040] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.857787][ T6040] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.861507][ T6040] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.867379][ T6040] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.909798][ T6045] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.913229][ T6045] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.917146][ T6045] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.923830][ T6045] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.968400][ T6040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.001156][ T6040] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.007587][ T6045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.011160][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.013242][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.020925][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.023278][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.031782][ T6045] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.042726][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.045741][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.057523][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.059929][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.141997][ T6040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.162358][ T6045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.180374][ T6040] veth0_vlan: entered promiscuous mode [ 61.189445][ T6040] veth1_vlan: entered promiscuous mode [ 61.201139][ T6045] veth0_vlan: entered promiscuous mode [ 61.208138][ T6045] veth1_vlan: entered promiscuous mode [ 61.218345][ T6040] veth0_macvtap: entered promiscuous mode [ 61.224497][ T6040] veth1_macvtap: entered promiscuous mode [ 61.234080][ T6045] veth0_macvtap: entered promiscuous mode [ 61.239083][ T6045] veth1_macvtap: entered promiscuous mode [ 61.241850][ T6040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.245744][ T6040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.249661][ T6040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.256851][ T6040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.259535][ T6040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.262871][ T6040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.269150][ T6045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.271770][ T6045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.274135][ T6045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.276832][ T6045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.280115][ T6045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.283320][ T6040] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.286642][ T6040] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.289888][ T6040] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.292724][ T6040] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.299793][ T6045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.303072][ T6045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.306627][ T6045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.310244][ T6045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.313742][ T6045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.319326][ T6045] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.321702][ T6045] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.323985][ T6045] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.327000][ T6045] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.364251][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.366597][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.377996][ T4145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.380058][ T4145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.393852][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.396317][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.407871][ T4145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.410504][ T4145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.430374][ T39] kauditd_printk_skb: 33 callbacks suppressed [ 61.430385][ T39] audit: type=1400 audit(1730233636.023:137): avc: denied { create } for pid=6088 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 61.438430][ T39] audit: type=1400 audit(1730233636.033:138): avc: denied { create } for pid=6088 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.444414][ T39] audit: type=1400 audit(1730233636.033:139): avc: denied { setopt } for pid=6088 comm="syz.0.15" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.462241][ T5988] Bluetooth: hci0: command tx timeout [ 61.474257][ T39] audit: type=1400 audit(1730233636.063:140): avc: denied { prog_load } for pid=6088 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 61.479989][ T39] audit: type=1400 audit(1730233636.063:141): avc: denied { bpf } for pid=6088 comm="syz.0.15" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 61.485990][ T39] audit: type=1400 audit(1730233636.063:142): avc: denied { perfmon } for pid=6088 comm="syz.0.15" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 61.491233][ T39] audit: type=1400 audit(1730233636.073:143): avc: denied { prog_run } for pid=6088 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 61.535124][ T5988] Bluetooth: hci2: command tx timeout [ 61.535679][ T5992] Bluetooth: hci3: command tx timeout [ 61.536679][ T5298] Bluetooth: hci1: command tx timeout [ 61.750715][ T1179] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.493830][ T1179] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.535998][ T5298] Bluetooth: hci0: command tx timeout [ 63.615405][ T5298] Bluetooth: hci1: command tx timeout [ 63.625040][ T5298] Bluetooth: hci2: command tx timeout [ 63.625100][ T5992] Bluetooth: hci3: command tx timeout [ 63.644151][ T1179] bridge_slave_1: left allmulticast mode [ 63.658470][ T1179] bridge_slave_1: left promiscuous mode [ 63.660516][ T1179] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.667488][ T1179] bridge_slave_0: left allmulticast mode [ 63.668997][ T1179] bridge_slave_0: left promiscuous mode [ 63.671020][ T1179] bridge0: port 1(bridge_slave_0) entered disabled state 2024/10/29 20:27:19 executed programs: 50 [ 64.645886][ T1179] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.652212][ T1179] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.660548][ T1179] bond0 (unregistering): Released all slaves [ 64.698990][ T39] audit: type=1400 audit(1730233639.293:144): avc: denied { search } for pid=5660 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.744004][ T39] audit: type=1400 audit(1730233639.333:145): avc: denied { read } for pid=6235 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.752649][ T39] audit: type=1400 audit(1730233639.343:146): avc: denied { open } for pid=6235 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.006265][ T1179] hsr_slave_0: left promiscuous mode [ 65.009004][ T1179] hsr_slave_1: left promiscuous mode [ 65.011843][ T1179] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.014222][ T1179] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.017621][ T1179] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.020181][ T1179] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.041967][ T1179] veth1_macvtap: left promiscuous mode [ 65.044235][ T1179] veth0_macvtap: left promiscuous mode [ 65.049738][ T1179] veth1_vlan: left promiscuous mode [ 65.051912][ T1179] veth0_vlan: left promiscuous mode [ 65.615908][ T5992] Bluetooth: hci0: command tx timeout [ 65.694984][ T5298] Bluetooth: hci1: command tx timeout [ 65.695534][ T5988] Bluetooth: hci3: command tx timeout [ 65.697061][ T5992] Bluetooth: hci2: command tx timeout [ 67.314569][ T1179] team0 (unregistering): Port device team_slave_1 removed [ 67.514583][ T1179] team0 (unregistering): Port device team_slave_0 removed [ 67.694942][ T5992] Bluetooth: hci0: command tx timeout [ 67.774957][ T5992] Bluetooth: hci2: command tx timeout [ 67.775504][ T5988] Bluetooth: hci1: command tx timeout [ 67.777094][ T5298] Bluetooth: hci3: command tx timeout 2024/10/29 20:27:24 executed programs: 109 [ 69.984949][ T6051] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.993159][ T6051] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.000379][ T6051] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.078148][ T6051] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.156698][ T6048] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.210570][ T6048] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.253142][ T6048] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.267653][ T6048] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.347795][ T6051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.355701][ T6048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.376871][ T6051] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.382882][ T6048] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.388574][ T4145] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.391435][ T4145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.416684][ T4145] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.418650][ T4145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.422970][ T4145] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.425702][ T4145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.434307][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.436262][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.553948][ T6051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.587052][ T6051] veth0_vlan: entered promiscuous mode [ 70.594691][ T6051] veth1_vlan: entered promiscuous mode [ 70.604326][ T6048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.638045][ T6051] veth0_macvtap: entered promiscuous mode [ 70.644097][ T6051] veth1_macvtap: entered promiscuous mode [ 70.662154][ T6492] BUG: Bad page state in process syz.1.132 pfn:303aa [ 70.664599][ T6492] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880303aa3e0 pfn:0x303aa [ 70.668336][ T6048] veth0_vlan: entered promiscuous mode [ 70.670626][ T6492] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 70.674250][ T6492] raw: 00fff00000000000 dead000000000040 ffff88804c173000 0000000000000000 [ 70.676838][ T6492] raw: ffff8880303aa3e0 0000000000000001 00000000ffffffff 0000000000000000 [ 70.679105][ T6492] page dumped because: page_pool leak [ 70.680790][ T6492] page_owner tracks the page as allocated [ 70.682459][ T6051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.682982][ T6492] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6492, tgid 6486 (syz.1.132), ts 70655604114, free_ts 70606146413 [ 70.683024][ T6492] post_alloc_hook+0x2d1/0x350 [ 70.686425][ T6051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.690457][ T6492] get_page_from_freelist+0x101e/0x3070 [ 70.690482][ T6492] __alloc_pages_noprof+0x223/0x25a0 [ 70.690495][ T6492] alloc_pages_bulk_noprof+0x77c/0x1110 [ 70.690507][ T6492] __page_pool_alloc_pages_slow+0x18f/0x770 [ 70.692323][ T6051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.694889][ T6492] page_pool_alloc_netmem+0xc4/0x160 [ 70.694912][ T6492] page_pool_alloc_pages+0x1a/0x60 [ 70.694926][ T6492] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 70.694944][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 70.694960][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 70.694978][ T6492] __sys_bpf+0xfc6/0x49a0 [ 70.694991][ T6492] __x64_sys_bpf+0x78/0xc0 [ 70.696957][ T6051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.698561][ T6492] do_syscall_64+0xcd/0x250 [ 70.701037][ T6051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.701761][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.707798][ T6048] veth1_vlan: entered promiscuous mode [ 70.709529][ T6492] page last free pid 34 tgid 34 stack trace: [ 70.709540][ T6492] free_unref_page+0x5f4/0xdc0 [ 70.713221][ T6051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.713838][ T6492] __folio_put+0x30d/0x3d0 [ 70.715622][ T6051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.718038][ T6492] free_page_and_swap_cache+0x249/0x2c0 [ 70.719612][ T6051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.721442][ T6492] tlb_remove_table_rcu+0x89/0xe0 [ 70.721463][ T6492] rcu_core+0x79d/0x14d0 [ 70.721474][ T6492] handle_softirqs+0x213/0x8f0 [ 70.721486][ T6492] run_ksoftirqd+0x3a/0x60 [ 70.721496][ T6492] smpboot_thread_fn+0x661/0xa30 [ 70.721508][ T6492] kthread+0x2c1/0x3a0 [ 70.724225][ T6051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.725724][ T6492] ret_from_fork+0x45/0x80 [ 70.725740][ T6492] ret_from_fork_asm+0x1a/0x30 [ 70.725756][ T6492] Modules linked in: [ 70.725765][ T6492] CPU: 3 UID: 0 PID: 6492 Comm: syz.1.132 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 70.725778][ T6492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.725784][ T6492] Call Trace: [ 70.725789][ T6492] [ 70.725795][ T6492] dump_stack_lvl+0x16c/0x1f0 [ 70.725814][ T6492] bad_page+0xb3/0x1f0 [ 70.725830][ T6492] ? __pfx_bad_page+0x10/0x10 [ 70.725862][ T6492] ? page_bad_reason+0x9d/0x1e0 [ 70.725878][ T6492] free_unref_page+0x657/0xdc0 [ 70.725891][ T6492] ? rcu_is_watching+0x12/0xc0 [ 70.729312][ T6051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.729515][ T6492] ? __phys_addr+0xc6/0x150 [ 70.740575][ T6051] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.742589][ T6492] skb_free_head+0xa0/0x1d0 [ 70.744448][ T6051] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.745889][ T6492] skb_release_data+0x560/0x730 [ 70.745913][ T6492] sk_skb_reason_drop+0x129/0x1a0 [ 70.745927][ T6492] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 70.745946][ T6492] ? kernel_text_address+0x8d/0x100 [ 70.745959][ T6492] ? hlock_class+0x4e/0x130 [ 70.745974][ T6492] ? __lock_acquire+0x163e/0x3ce0 [ 70.745985][ T6492] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 70.746005][ T6492] ? hlock_class+0x4e/0x130 [ 70.747902][ T6051] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.749319][ T6492] ? __lock_acquire+0xbdd/0x3ce0 [ 70.751095][ T6051] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.752207][ T6492] ? __pfx___lock_acquire+0x10/0x10 [ 70.806895][ T6492] __netif_receive_skb_list_core+0x357/0x950 [ 70.808658][ T6492] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 70.810439][ T6492] ? trace_lock_acquire+0x14a/0x1d0 [ 70.811905][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 70.814035][ T6492] ? lock_acquire+0x2f/0xb0 [ 70.815967][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 70.818459][ T6492] netif_receive_skb_list_internal+0x753/0xdb0 [ 70.820505][ T6492] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 70.822630][ T6492] ? __pfx_eth_type_trans+0x10/0x10 [ 70.824379][ T6492] ? __build_skb_around+0x278/0x3b0 [ 70.826437][ T6492] netif_receive_skb_list+0x4f/0x4a0 [ 70.828363][ T6492] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 70.830255][ T6492] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 70.831973][ T6492] ? bpf_test_timer_continue+0x150/0x3d0 [ 70.833466][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 70.834866][ T6492] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 70.836443][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 70.838176][ T6492] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 70.839744][ T6492] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 70.841314][ T6492] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 70.842725][ T6492] ? 0xffffffffa0004340 [ 70.844338][ T6492] ? 0xffffffffa0004340 [ 70.845948][ T6492] ? 0xffffffffa0004340 [ 70.847790][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 70.849512][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 70.851185][ T6492] ? lock_acquire+0x2f/0xb0 [ 70.852474][ T6492] ? __fget_files+0x40/0x3f0 [ 70.853851][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 70.855627][ T6492] ? fput+0x30/0x390 [ 70.856816][ T6492] ? __bpf_prog_get+0xa0/0x290 [ 70.858135][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 70.859603][ T6492] __sys_bpf+0xfc6/0x49a0 [ 70.860750][ T6492] ? __pfx_futex_wake+0x10/0x10 [ 70.862138][ T6492] ? finish_task_switch.isra.0+0x2e8/0xcc0 [ 70.863677][ T6492] ? __pfx___sys_bpf+0x10/0x10 [ 70.864933][ T6492] ? __schedule+0xe5d/0x5730 [ 70.866456][ T6492] ? __fget_files+0x23a/0x3f0 [ 70.867782][ T6492] ? do_futex+0x123/0x350 [ 70.868977][ T6492] ? __pfx_do_futex+0x10/0x10 [ 70.870213][ T6492] ? xfd_validate_state+0x5d/0x180 [ 70.871588][ T6492] ? rcu_is_watching+0x12/0xc0 [ 70.872864][ T6492] __x64_sys_bpf+0x78/0xc0 [ 70.874169][ T6492] ? lockdep_hardirqs_on+0x7c/0x110 [ 70.875558][ T6492] do_syscall_64+0xcd/0x250 [ 70.877034][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.878815][ T6492] RIP: 0033:0x7f475a17e719 [ 70.880209][ T6492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.885833][ T6492] RSP: 002b:00007f475b009038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 70.888186][ T6492] RAX: ffffffffffffffda RBX: 00007f475a336058 RCX: 00007f475a17e719 [ 70.890562][ T6492] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 70.892669][ T6492] RBP: 00007f475a1f132e R08: 0000000000000000 R09: 0000000000000000 [ 70.894816][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.896989][ T6492] R13: 0000000000000000 R14: 00007f475a336058 R15: 00007ffe2d0f8dd8 [ 70.899087][ T6492] [ 70.899995][ T6492] Disabling lock debugging due to kernel taint [ 70.901654][ T6492] BUG: Bad page state in process syz.1.132 pfn:31a1f [ 70.903584][ T6492] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888031a1fc98 pfn:0x31a1f [ 70.906395][ T6492] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 70.908757][ T6492] raw: 00fff00000000000 dead000000000040 ffff88804c173000 0000000000000000 [ 70.911136][ T6492] raw: ffff888031a1fc98 0000000000000001 00000000ffffffff 0000000000000000 [ 70.913604][ T6492] page dumped because: page_pool leak [ 70.915233][ T6492] page_owner tracks the page as allocated [ 70.916744][ T6492] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6492, tgid 6486 (syz.1.132), ts 70655599221, free_ts 70606149931 [ 70.921515][ T6492] post_alloc_hook+0x2d1/0x350 [ 70.922966][ T6492] get_page_from_freelist+0x101e/0x3070 [ 70.924466][ T6492] __alloc_pages_noprof+0x223/0x25a0 [ 70.925937][ T6492] alloc_pages_bulk_noprof+0x77c/0x1110 [ 70.927386][ T6492] __page_pool_alloc_pages_slow+0x18f/0x770 [ 70.928961][ T6492] page_pool_alloc_netmem+0xc4/0x160 [ 70.930402][ T6492] page_pool_alloc_pages+0x1a/0x60 [ 70.931864][ T6492] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 70.933541][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 70.934998][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 70.936417][ T6492] __sys_bpf+0xfc6/0x49a0 [ 70.937580][ T6492] __x64_sys_bpf+0x78/0xc0 [ 70.938822][ T6492] do_syscall_64+0xcd/0x250 [ 70.940099][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.941759][ T6492] page last free pid 34 tgid 34 stack trace: [ 70.943525][ T6492] free_unref_page+0x5f4/0xdc0 [ 70.944923][ T6492] __folio_put+0x30d/0x3d0 [ 70.946373][ T6492] free_page_and_swap_cache+0x249/0x2c0 [ 70.948229][ T6492] tlb_remove_table_rcu+0x89/0xe0 [ 70.949787][ T6492] rcu_core+0x79d/0x14d0 [ 70.950948][ T6492] handle_softirqs+0x213/0x8f0 [ 70.952199][ T6492] run_ksoftirqd+0x3a/0x60 [ 70.953421][ T6492] smpboot_thread_fn+0x661/0xa30 [ 70.954742][ T6492] kthread+0x2c1/0x3a0 [ 70.955879][ T6492] ret_from_fork+0x45/0x80 [ 70.957045][ T6492] ret_from_fork_asm+0x1a/0x30 [ 70.958348][ T6492] Modules linked in: [ 70.959387][ T6492] CPU: 3 UID: 0 PID: 6492 Comm: syz.1.132 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 70.962481][ T6492] Tainted: [B]=BAD_PAGE [ 70.963614][ T6492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.966407][ T6492] Call Trace: [ 70.967278][ T6492] [ 70.968063][ T6492] dump_stack_lvl+0x16c/0x1f0 [ 70.969435][ T6492] bad_page+0xb3/0x1f0 [ 70.970527][ T6492] ? __pfx_bad_page+0x10/0x10 [ 70.971762][ T6492] ? page_bad_reason+0x9d/0x1e0 [ 70.973078][ T6492] free_unref_page+0x657/0xdc0 [ 70.974570][ T6492] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 70.976238][ T6492] ? __phys_addr+0xc6/0x150 [ 70.977532][ T6492] skb_free_head+0xa0/0x1d0 [ 70.978919][ T6492] skb_release_data+0x560/0x730 [ 70.980195][ T6492] sk_skb_reason_drop+0x129/0x1a0 [ 70.981543][ T6492] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 70.983780][ T6492] ? kernel_text_address+0x8d/0x100 [ 70.985586][ T6492] ? hlock_class+0x4e/0x130 [ 70.987298][ T6492] ? __lock_acquire+0x163e/0x3ce0 [ 70.988871][ T6492] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 70.991225][ T6492] ? hlock_class+0x4e/0x130 [ 70.992724][ T6492] ? __lock_acquire+0xbdd/0x3ce0 [ 70.994325][ T6492] ? __pfx___lock_acquire+0x10/0x10 [ 70.995927][ T6492] __netif_receive_skb_list_core+0x357/0x950 [ 70.997774][ T6492] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 70.999804][ T6492] ? trace_lock_acquire+0x14a/0x1d0 [ 71.001702][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 71.003662][ T6492] ? lock_acquire+0x2f/0xb0 [ 71.004840][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 71.006501][ T6492] netif_receive_skb_list_internal+0x753/0xdb0 [ 71.008179][ T6492] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 71.009966][ T6492] ? __pfx_eth_type_trans+0x10/0x10 [ 71.011586][ T6492] ? __build_skb_around+0x278/0x3b0 [ 71.012994][ T6492] netif_receive_skb_list+0x4f/0x4a0 [ 71.014427][ T6492] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 71.016051][ T6492] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 71.017761][ T6492] ? bpf_test_timer_continue+0x150/0x3d0 [ 71.019413][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 71.020828][ T6492] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 71.022410][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 71.023952][ T6492] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 71.025502][ T6492] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 71.027117][ T6492] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 71.028553][ T6492] ? 0xffffffffa0004340 [ 71.029651][ T6492] ? 0xffffffffa0004340 [ 71.030825][ T6492] ? 0xffffffffa0004340 [ 71.032310][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 71.034352][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 71.036053][ T6492] ? lock_acquire+0x2f/0xb0 [ 71.037333][ T6492] ? __fget_files+0x40/0x3f0 [ 71.038643][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 71.040328][ T6492] ? fput+0x30/0x390 [ 71.041432][ T6492] ? __bpf_prog_get+0xa0/0x290 [ 71.042804][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 71.044369][ T6492] __sys_bpf+0xfc6/0x49a0 [ 71.045502][ T6492] ? __pfx_futex_wake+0x10/0x10 [ 71.046868][ T6492] ? finish_task_switch.isra.0+0x2e8/0xcc0 [ 71.048386][ T6492] ? __pfx___sys_bpf+0x10/0x10 [ 71.049641][ T6492] ? __schedule+0xe5d/0x5730 [ 71.050940][ T6492] ? __fget_files+0x23a/0x3f0 [ 71.052252][ T6492] ? do_futex+0x123/0x350 [ 71.053376][ T6492] ? __pfx_do_futex+0x10/0x10 [ 71.054591][ T6492] ? xfd_validate_state+0x5d/0x180 [ 71.055901][ T6492] ? rcu_is_watching+0x12/0xc0 [ 71.057130][ T6492] __x64_sys_bpf+0x78/0xc0 [ 71.058295][ T6492] ? lockdep_hardirqs_on+0x7c/0x110 [ 71.059630][ T6492] do_syscall_64+0xcd/0x250 [ 71.060953][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.062786][ T6492] RIP: 0033:0x7f475a17e719 [ 71.064434][ T6492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.070036][ T6492] RSP: 002b:00007f475b009038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 71.072235][ T6492] RAX: ffffffffffffffda RBX: 00007f475a336058 RCX: 00007f475a17e719 [ 71.074284][ T6492] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 71.076321][ T6492] RBP: 00007f475a1f132e R08: 0000000000000000 R09: 0000000000000000 [ 71.078338][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.080324][ T6492] R13: 0000000000000000 R14: 00007f475a336058 R15: 00007ffe2d0f8dd8 [ 71.082626][ T6492] [ 71.083697][ T6492] BUG: Bad page state in process syz.1.132 pfn:4d463 [ 71.085453][ T6492] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2 pfn:0x4d463 [ 71.087799][ T6492] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 71.089596][ T6492] raw: 00fff00000000000 dead000000000040 ffff88804c173000 0000000000000000 [ 71.091848][ T6492] raw: 0000000000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 71.094194][ T6492] page dumped because: page_pool leak [ 71.095596][ T6492] page_owner tracks the page as allocated [ 71.097138][ T6492] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6492, tgid 6486 (syz.1.132), ts 70655594596, free_ts 70606153216 [ 71.101740][ T6492] post_alloc_hook+0x2d1/0x350 [ 71.103275][ T6492] get_page_from_freelist+0x101e/0x3070 [ 71.105247][ T6492] __alloc_pages_noprof+0x223/0x25a0 [ 71.107126][ T6492] alloc_pages_bulk_noprof+0x77c/0x1110 [ 71.108683][ T6492] __page_pool_alloc_pages_slow+0x18f/0x770 [ 71.110439][ T6492] page_pool_alloc_netmem+0xc4/0x160 [ 71.111827][ T6492] page_pool_alloc_pages+0x1a/0x60 [ 71.113233][ T6492] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 71.114985][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 71.116458][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 71.117856][ T6492] __sys_bpf+0xfc6/0x49a0 [ 71.118999][ T6492] __x64_sys_bpf+0x78/0xc0 [ 71.120161][ T6492] do_syscall_64+0xcd/0x250 [ 71.121441][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.123403][ T6492] page last free pid 34 tgid 34 stack trace: [ 71.125234][ T6492] free_unref_page+0x5f4/0xdc0 [ 71.126663][ T6492] __folio_put+0x30d/0x3d0 [ 71.128080][ T6492] free_page_and_swap_cache+0x249/0x2c0 [ 71.129955][ T6492] tlb_remove_table_rcu+0x89/0xe0 [ 71.131393][ T6492] rcu_core+0x79d/0x14d0 [ 71.132518][ T6492] handle_softirqs+0x213/0x8f0 [ 71.134067][ T6492] run_ksoftirqd+0x3a/0x60 [ 71.135809][ T6492] smpboot_thread_fn+0x661/0xa30 [ 71.137656][ T6492] kthread+0x2c1/0x3a0 [ 71.138880][ T6492] ret_from_fork+0x45/0x80 [ 71.140057][ T6492] ret_from_fork_asm+0x1a/0x30 [ 71.141316][ T6492] Modules linked in: [ 71.142384][ T6492] CPU: 3 UID: 0 PID: 6492 Comm: syz.1.132 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 71.145732][ T6492] Tainted: [B]=BAD_PAGE [ 71.147536][ T6492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 71.150801][ T6492] Call Trace: [ 71.151738][ T6492] [ 71.152640][ T6492] dump_stack_lvl+0x16c/0x1f0 [ 71.154101][ T6492] bad_page+0xb3/0x1f0 [ 71.155300][ T6492] ? __pfx_bad_page+0x10/0x10 [ 71.156848][ T6492] ? page_bad_reason+0x9d/0x1e0 [ 71.158301][ T6492] free_unref_page+0x657/0xdc0 [ 71.159943][ T6492] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 71.161794][ T6492] ? __phys_addr+0xc6/0x150 [ 71.162961][ T6492] skb_free_head+0xa0/0x1d0 [ 71.164613][ T6492] skb_release_data+0x560/0x730 [ 71.166360][ T6492] sk_skb_reason_drop+0x129/0x1a0 [ 71.168104][ T6492] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 71.170200][ T6492] ? kernel_text_address+0x8d/0x100 [ 71.171567][ T6492] ? hlock_class+0x4e/0x130 [ 71.172853][ T6492] ? __lock_acquire+0x163e/0x3ce0 [ 71.174287][ T6492] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 71.176073][ T6492] ? hlock_class+0x4e/0x130 [ 71.177291][ T6492] ? __lock_acquire+0xbdd/0x3ce0 [ 71.178581][ T6492] ? __pfx___lock_acquire+0x10/0x10 [ 71.179906][ T6492] __netif_receive_skb_list_core+0x357/0x950 [ 71.181448][ T6492] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 71.183168][ T6492] ? trace_lock_acquire+0x14a/0x1d0 [ 71.184525][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 71.186360][ T6492] ? lock_acquire+0x2f/0xb0 [ 71.187656][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 71.189377][ T6492] netif_receive_skb_list_internal+0x753/0xdb0 [ 71.191120][ T6492] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 71.193011][ T6492] ? __pfx_eth_type_trans+0x10/0x10 [ 71.194851][ T6492] ? __build_skb_around+0x278/0x3b0 [ 71.196870][ T6492] netif_receive_skb_list+0x4f/0x4a0 [ 71.198631][ T6492] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 71.200271][ T6492] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 71.202446][ T6492] ? bpf_test_timer_continue+0x150/0x3d0 [ 71.204415][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 71.206003][ T6492] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 71.207977][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 71.209670][ T6492] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 71.211349][ T6492] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 71.212880][ T6492] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 71.214348][ T6492] ? 0xffffffffa0004340 [ 71.215655][ T6492] ? 0xffffffffa0004340 [ 71.216982][ T6492] ? 0xffffffffa0004340 [ 71.218228][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 71.220078][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 71.221829][ T6492] ? lock_acquire+0x2f/0xb0 [ 71.223564][ T6492] ? __fget_files+0x40/0x3f0 [ 71.225300][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 71.226374][ T1410] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.227775][ T6492] ? fput+0x30/0x390 [ 71.227801][ T6492] ? __bpf_prog_get+0xa0/0x290 [ 71.227824][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 71.230709][ T1410] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.231898][ T6492] __sys_bpf+0xfc6/0x49a0 [ 71.237697][ T39] kauditd_printk_skb: 4 callbacks suppressed [ 71.237707][ T39] audit: type=1400 audit(1730233645.833:151): avc: denied { rename } for pid=5342 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 71.237957][ T6492] ? __pfx_futex_wake+0x10/0x10 [ 71.239625][ T39] audit: type=1400 audit(1730233645.833:152): avc: denied { unlink } for pid=5342 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 71.245443][ T6492] ? finish_task_switch.isra.0+0x2e8/0xcc0 [ 71.245467][ T6492] ? __pfx___sys_bpf+0x10/0x10 [ 71.245479][ T6492] ? __schedule+0xe5d/0x5730 [ 71.245493][ T6492] ? __fget_files+0x23a/0x3f0 [ 71.245509][ T6492] ? do_futex+0x123/0x350 [ 71.245522][ T6492] ? __pfx_do_futex+0x10/0x10 [ 71.245537][ T6492] ? xfd_validate_state+0x5d/0x180 [ 71.245547][ T6492] ? rcu_is_watching+0x12/0xc0 [ 71.246943][ T39] audit: type=1400 audit(1730233645.833:153): avc: denied { create } for pid=5342 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 71.253009][ T6492] __x64_sys_bpf+0x78/0xc0 [ 71.272013][ T6492] ? lockdep_hardirqs_on+0x7c/0x110 [ 71.273510][ T6492] do_syscall_64+0xcd/0x250 [ 71.274729][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.276354][ T6492] RIP: 0033:0x7f475a17e719 [ 71.277544][ T6492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.283218][ T6492] RSP: 002b:00007f475b009038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 71.285423][ T6492] RAX: ffffffffffffffda RBX: 00007f475a336058 RCX: 00007f475a17e719 [ 71.287500][ T6492] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 71.289554][ T6492] RBP: 00007f475a1f132e R08: 0000000000000000 R09: 0000000000000000 [ 71.291771][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.294097][ T6492] R13: 0000000000000000 R14: 00007f475a336058 R15: 00007ffe2d0f8dd8 [ 71.297104][ T6492] [ 71.298354][ T6492] BUG: Bad page state in process syz.1.132 pfn:24b4a [ 71.300275][ T6492] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888024b4ad00 pfn:0x24b4a [ 71.302985][ T6492] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 71.305107][ T6492] raw: 00fff00000000000 dead000000000040 ffff88804c173000 0000000000000000 [ 71.307605][ T6492] raw: ffff888024b4ad00 0000000000000001 00000000ffffffff 0000000000000000 [ 71.310036][ T6492] page dumped because: page_pool leak [ 71.311428][ T6492] page_owner tracks the page as allocated [ 71.312855][ T6492] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6492, tgid 6486 (syz.1.132), ts 70655589868, free_ts 70606156813 [ 71.317602][ T6492] post_alloc_hook+0x2d1/0x350 [ 71.318881][ T6492] get_page_from_freelist+0x101e/0x3070 [ 71.320318][ T6492] __alloc_pages_noprof+0x223/0x25a0 [ 71.321914][ T6492] alloc_pages_bulk_noprof+0x77c/0x1110 [ 71.323696][ T6492] __page_pool_alloc_pages_slow+0x18f/0x770 [ 71.326188][ T6492] page_pool_alloc_netmem+0xc4/0x160 [ 71.328365][ T6492] page_pool_alloc_pages+0x1a/0x60 [ 71.329876][ T6492] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 71.331521][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 71.332900][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 71.334492][ T6492] __sys_bpf+0xfc6/0x49a0 [ 71.335684][ T6492] __x64_sys_bpf+0x78/0xc0 [ 71.336853][ T6492] do_syscall_64+0xcd/0x250 [ 71.338009][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.340126][ T6492] page last free pid 34 tgid 34 stack trace: [ 71.341675][ T6492] free_unref_page+0x5f4/0xdc0 [ 71.342942][ T6492] __folio_put+0x30d/0x3d0 [ 71.344455][ T6492] free_page_and_swap_cache+0x249/0x2c0 [ 71.346687][ T6492] tlb_remove_table_rcu+0x89/0xe0 [ 71.348685][ T6492] rcu_core+0x79d/0x14d0 [ 71.350301][ T6492] handle_softirqs+0x213/0x8f0 [ 71.352097][ T6492] run_ksoftirqd+0x3a/0x60 [ 71.353880][ T6492] smpboot_thread_fn+0x661/0xa30 [ 71.355632][ T6492] kthread+0x2c1/0x3a0 [ 71.357038][ T6492] ret_from_fork+0x45/0x80 [ 71.358535][ T6492] ret_from_fork_asm+0x1a/0x30 [ 71.360009][ T6492] Modules linked in: [ 71.361381][ T6492] CPU: 3 UID: 0 PID: 6492 Comm: syz.1.132 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 71.365202][ T6492] Tainted: [B]=BAD_PAGE [ 71.366547][ T6492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 71.370110][ T6492] Call Trace: [ 71.371333][ T6492] [ 71.372275][ T6492] dump_stack_lvl+0x16c/0x1f0 [ 71.373914][ T6492] bad_page+0xb3/0x1f0 [ 71.375360][ T6492] ? __pfx_bad_page+0x10/0x10 [ 71.377323][ T6492] ? page_bad_reason+0x9d/0x1e0 [ 71.379233][ T6492] free_unref_page+0x657/0xdc0 [ 71.381177][ T6492] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 71.383811][ T6492] ? __phys_addr+0xc6/0x150 [ 71.385578][ T6492] skb_free_head+0xa0/0x1d0 [ 71.387499][ T6492] skb_release_data+0x560/0x730 [ 71.389312][ T6492] sk_skb_reason_drop+0x129/0x1a0 [ 71.391041][ T6492] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 71.393404][ T6492] ? kernel_text_address+0x8d/0x100 [ 71.395312][ T6492] ? hlock_class+0x4e/0x130 [ 71.396904][ T6492] ? __lock_acquire+0x163e/0x3ce0 [ 71.398611][ T6492] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 71.400975][ T6492] ? hlock_class+0x4e/0x130 [ 71.402534][ T6492] ? __lock_acquire+0xbdd/0x3ce0 [ 71.404263][ T6492] ? __pfx___lock_acquire+0x10/0x10 [ 71.406146][ T6492] __netif_receive_skb_list_core+0x357/0x950 [ 71.408444][ T6492] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 71.410830][ T6492] ? trace_lock_acquire+0x14a/0x1d0 [ 71.412675][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 71.414975][ T6492] ? lock_acquire+0x2f/0xb0 [ 71.416624][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 71.418910][ T6492] netif_receive_skb_list_internal+0x753/0xdb0 [ 71.421006][ T6492] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 71.423563][ T6492] ? __pfx_eth_type_trans+0x10/0x10 [ 71.425377][ T6492] ? __build_skb_around+0x278/0x3b0 [ 71.427321][ T6492] netif_receive_skb_list+0x4f/0x4a0 [ 71.429358][ T6492] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 71.431621][ T6492] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 71.433919][ T6492] ? bpf_test_timer_continue+0x150/0x3d0 [ 71.436262][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 71.438688][ T6492] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 71.442245][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 71.444768][ T6492] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 71.447191][ T6492] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 71.449405][ T6492] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 71.451336][ T6492] ? 0xffffffffa0004340 [ 71.452763][ T6492] ? 0xffffffffa0004340 [ 71.454177][ T6492] ? 0xffffffffa0004340 [ 71.455600][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 71.457659][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 71.459602][ T6492] ? lock_acquire+0x2f/0xb0 [ 71.461201][ T6492] ? __fget_files+0x40/0x3f0 [ 71.462830][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 71.464853][ T6492] ? fput+0x30/0x390 [ 71.466281][ T6492] ? __bpf_prog_get+0xa0/0x290 [ 71.468404][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 71.470525][ T6492] __sys_bpf+0xfc6/0x49a0 [ 71.472219][ T6492] ? __pfx_futex_wake+0x10/0x10 [ 71.474112][ T6492] ? finish_task_switch.isra.0+0x2e8/0xcc0 [ 71.476169][ T6492] ? __pfx___sys_bpf+0x10/0x10 [ 71.477836][ T6492] ? __schedule+0xe5d/0x5730 [ 71.479481][ T6492] ? __fget_files+0x23a/0x3f0 [ 71.481316][ T6492] ? do_futex+0x123/0x350 [ 71.483014][ T6492] ? __pfx_do_futex+0x10/0x10 [ 71.484841][ T6492] ? xfd_validate_state+0x5d/0x180 [ 71.486929][ T6492] ? rcu_is_watching+0x12/0xc0 [ 71.488915][ T6492] __x64_sys_bpf+0x78/0xc0 [ 71.490806][ T6492] ? lockdep_hardirqs_on+0x7c/0x110 [ 71.492748][ T6492] do_syscall_64+0xcd/0x250 [ 71.494382][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.496440][ T6492] RIP: 0033:0x7f475a17e719 [ 71.497978][ T6492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.505141][ T6492] RSP: 002b:00007f475b009038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 71.508374][ T6492] RAX: ffffffffffffffda RBX: 00007f475a336058 RCX: 00007f475a17e719 [ 71.511444][ T6492] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 71.514429][ T6492] RBP: 00007f475a1f132e R08: 0000000000000000 R09: 0000000000000000 [ 71.517736][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.521425][ T6492] R13: 0000000000000000 R14: 00007f475a336058 R15: 00007ffe2d0f8dd8 [ 71.524580][ T6492] [ 71.525736][ T6492] BUG: Bad page state in process syz.1.132 pfn:4f733 [ 71.528163][ T6492] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2 pfn:0x4f733 [ 71.531537][ T6492] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 71.534311][ T6492] raw: 00fff00000000000 dead000000000040 ffff88804c173000 0000000000000000 [ 71.537457][ T6492] raw: 0000000000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 71.540477][ T6492] page dumped because: page_pool leak [ 71.542431][ T6492] page_owner tracks the page as allocated [ 71.544964][ T6492] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6492, tgid 6486 (syz.1.132), ts 70655585295, free_ts 70606160103 [ 71.551414][ T6492] post_alloc_hook+0x2d1/0x350 [ 71.553503][ T6492] get_page_from_freelist+0x101e/0x3070 [ 71.555877][ T6492] __alloc_pages_noprof+0x223/0x25a0 [ 71.557903][ T6492] alloc_pages_bulk_noprof+0x77c/0x1110 [ 71.559831][ T6492] __page_pool_alloc_pages_slow+0x18f/0x770 [ 71.561923][ T6492] page_pool_alloc_netmem+0xc4/0x160 [ 71.563768][ T6492] page_pool_alloc_pages+0x1a/0x60 [ 71.565882][ T6492] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 71.568070][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 71.569961][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 71.571810][ T6492] __sys_bpf+0xfc6/0x49a0 [ 71.573341][ T6492] __x64_sys_bpf+0x78/0xc0 [ 71.574994][ T6492] do_syscall_64+0xcd/0x250 [ 71.576615][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.578671][ T6492] page last free pid 34 tgid 34 stack trace: [ 71.581104][ T6492] free_unref_page+0x5f4/0xdc0 [ 71.583070][ T6492] __folio_put+0x30d/0x3d0 [ 71.584882][ T6492] free_page_and_swap_cache+0x249/0x2c0 [ 71.586746][ T6492] tlb_remove_table_rcu+0x89/0xe0 [ 71.588527][ T6492] rcu_core+0x79d/0x14d0 [ 71.590242][ T6492] handle_softirqs+0x213/0x8f0 [ 71.591638][ T6492] run_ksoftirqd+0x3a/0x60 [ 71.593144][ T6492] smpboot_thread_fn+0x661/0xa30 [ 71.594896][ T6492] kthread+0x2c1/0x3a0 [ 71.596294][ T6492] ret_from_fork+0x45/0x80 [ 71.597914][ T6492] ret_from_fork_asm+0x1a/0x30 [ 71.599594][ T6492] Modules linked in: [ 71.601064][ T6492] CPU: 3 UID: 0 PID: 6492 Comm: syz.1.132 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 71.606364][ T6492] Tainted: [B]=BAD_PAGE [ 71.608092][ T6492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 71.611864][ T6492] Call Trace: [ 71.613176][ T6492] [ 71.614254][ T6492] dump_stack_lvl+0x16c/0x1f0 [ 71.615932][ T6492] bad_page+0xb3/0x1f0 [ 71.617403][ T6492] ? __pfx_bad_page+0x10/0x10 [ 71.619103][ T6492] ? page_bad_reason+0x9d/0x1e0 [ 71.621039][ T6492] free_unref_page+0x657/0xdc0 [ 71.623414][ T6492] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 71.626138][ T6492] ? __phys_addr+0xc6/0x150 [ 71.628080][ T6492] skb_free_head+0xa0/0x1d0 [ 71.629802][ T6492] skb_release_data+0x560/0x730 [ 71.631711][ T6492] sk_skb_reason_drop+0x129/0x1a0 [ 71.633758][ T6492] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 71.636380][ T6492] ? kernel_text_address+0x8d/0x100 [ 71.638198][ T6492] ? hlock_class+0x4e/0x130 [ 71.639820][ T6492] ? __lock_acquire+0x163e/0x3ce0 [ 71.641867][ T6492] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 71.644747][ T6492] ? hlock_class+0x4e/0x130 [ 71.646549][ T6492] ? __lock_acquire+0xbdd/0x3ce0 [ 71.648364][ T6492] ? __pfx___lock_acquire+0x10/0x10 [ 71.650276][ T6492] __netif_receive_skb_list_core+0x357/0x950 [ 71.653062][ T6492] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 71.655869][ T6492] ? trace_lock_acquire+0x14a/0x1d0 [ 71.657337][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 71.658872][ T6492] ? lock_acquire+0x2f/0xb0 [ 71.660104][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 71.661765][ T6492] netif_receive_skb_list_internal+0x753/0xdb0 [ 71.663301][ T6492] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 71.665068][ T6492] ? __pfx_eth_type_trans+0x10/0x10 [ 71.666694][ T6492] ? __build_skb_around+0x278/0x3b0 [ 71.668431][ T6492] netif_receive_skb_list+0x4f/0x4a0 [ 71.670641][ T6492] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 71.673135][ T6492] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 71.675982][ T6492] ? bpf_test_timer_continue+0x150/0x3d0 [ 71.678432][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 71.681066][ T6492] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 71.683790][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 71.686224][ T6492] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 71.688566][ T6492] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 71.690937][ T6492] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 71.692698][ T6492] ? 0xffffffffa0004340 [ 71.694148][ T6492] ? 0xffffffffa0004340 [ 71.695568][ T6492] ? 0xffffffffa0004340 [ 71.696986][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 71.699053][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 71.700949][ T6492] ? lock_acquire+0x2f/0xb0 [ 71.702561][ T6492] ? __fget_files+0x40/0x3f0 [ 71.704200][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 71.706317][ T6492] ? fput+0x30/0x390 [ 71.707738][ T6492] ? __bpf_prog_get+0xa0/0x290 [ 71.709443][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 71.711678][ T6492] __sys_bpf+0xfc6/0x49a0 [ 71.713350][ T6492] ? __pfx_futex_wake+0x10/0x10 [ 71.715325][ T6492] ? finish_task_switch.isra.0+0x2e8/0xcc0 [ 71.717520][ T6492] ? __pfx___sys_bpf+0x10/0x10 [ 71.719302][ T6492] ? __schedule+0xe5d/0x5730 [ 71.720899][ T6492] ? __fget_files+0x23a/0x3f0 [ 71.722556][ T6492] ? do_futex+0x123/0x350 [ 71.724149][ T6492] ? __pfx_do_futex+0x10/0x10 [ 71.725759][ T6492] ? xfd_validate_state+0x5d/0x180 [ 71.727759][ T6492] ? rcu_is_watching+0x12/0xc0 [ 71.729935][ T6492] __x64_sys_bpf+0x78/0xc0 [ 71.731517][ T6492] ? lockdep_hardirqs_on+0x7c/0x110 [ 71.733274][ T6492] do_syscall_64+0xcd/0x250 [ 71.734917][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.737097][ T6492] RIP: 0033:0x7f475a17e719 [ 71.738823][ T6492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.746850][ T6492] RSP: 002b:00007f475b009038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 71.749752][ T6492] RAX: ffffffffffffffda RBX: 00007f475a336058 RCX: 00007f475a17e719 [ 71.751750][ T6492] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 71.753772][ T6492] RBP: 00007f475a1f132e R08: 0000000000000000 R09: 0000000000000000 [ 71.755939][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.758501][ T6492] R13: 0000000000000000 R14: 00007f475a336058 R15: 00007ffe2d0f8dd8 [ 71.761560][ T6492] [ 71.762985][ T6492] BUG: Bad page state in process syz.1.132 pfn:4f732 [ 71.765682][ T6492] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804f732000 pfn:0x4f732 [ 71.769424][ T6492] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 71.772237][ T6492] raw: 00fff00000000000 dead000000000040 ffff88804c173000 0000000000000000 [ 71.774625][ T6492] raw: ffff88804f732000 0000000000000001 00000000ffffffff 0000000000000000 [ 71.776990][ T6492] page dumped because: page_pool leak [ 71.778406][ T6492] page_owner tracks the page as allocated [ 71.779877][ T6492] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6492, tgid 6486 (syz.1.132), ts 70655580102, free_ts 70606163214 [ 71.785640][ T6492] post_alloc_hook+0x2d1/0x350 [ 71.787546][ T6492] get_page_from_freelist+0x101e/0x3070 [ 71.790186][ T6492] __alloc_pages_noprof+0x223/0x25a0 [ 71.792360][ T6492] alloc_pages_bulk_noprof+0x77c/0x1110 [ 71.795151][ T6492] __page_pool_alloc_pages_slow+0x18f/0x770 [ 71.797485][ T6492] page_pool_alloc_netmem+0xc4/0x160 [ 71.799268][ T6492] page_pool_alloc_pages+0x1a/0x60 [ 71.800911][ T6492] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 71.802952][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 71.804750][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 71.806286][ T6492] __sys_bpf+0xfc6/0x49a0 [ 71.807870][ T6492] __x64_sys_bpf+0x78/0xc0 [ 71.809337][ T6492] do_syscall_64+0xcd/0x250 [ 71.811015][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.813000][ T6492] page last free pid 34 tgid 34 stack trace: [ 71.814982][ T6492] free_unref_page+0x5f4/0xdc0 [ 71.816649][ T6492] __folio_put+0x30d/0x3d0 [ 71.818241][ T6492] free_page_and_swap_cache+0x249/0x2c0 [ 71.820543][ T6492] tlb_remove_table_rcu+0x89/0xe0 [ 71.822341][ T6492] rcu_core+0x79d/0x14d0 [ 71.823814][ T6492] handle_softirqs+0x213/0x8f0 [ 71.825572][ T6492] run_ksoftirqd+0x3a/0x60 [ 71.827105][ T6492] smpboot_thread_fn+0x661/0xa30 [ 71.829104][ T6492] kthread+0x2c1/0x3a0 [ 71.830644][ T6492] ret_from_fork+0x45/0x80 [ 71.832368][ T6492] ret_from_fork_asm+0x1a/0x30 [ 71.834228][ T6492] Modules linked in: [ 71.836041][ T6492] CPU: 3 UID: 0 PID: 6492 Comm: syz.1.132 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 71.840461][ T6492] Tainted: [B]=BAD_PAGE [ 71.841951][ T6492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 71.846026][ T6492] Call Trace: [ 71.847442][ T6492] [ 71.848761][ T6492] dump_stack_lvl+0x16c/0x1f0 [ 71.850605][ T6492] bad_page+0xb3/0x1f0 [ 71.852131][ T6492] ? __pfx_bad_page+0x10/0x10 [ 71.854154][ T6492] ? page_bad_reason+0x9d/0x1e0 [ 71.855935][ T6492] free_unref_page+0x657/0xdc0 [ 71.857687][ T6492] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 71.860006][ T6492] ? __phys_addr+0xc6/0x150 [ 71.861893][ T6492] skb_free_head+0xa0/0x1d0 [ 71.864002][ T6492] skb_release_data+0x560/0x730 [ 71.865752][ T6492] sk_skb_reason_drop+0x129/0x1a0 [ 71.867662][ T6492] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 71.870377][ T6492] ? kernel_text_address+0x8d/0x100 [ 71.872084][ T6492] ? hlock_class+0x4e/0x130 [ 71.873654][ T6492] ? __lock_acquire+0x163e/0x3ce0 [ 71.875372][ T6492] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 71.877643][ T6492] ? hlock_class+0x4e/0x130 [ 71.879198][ T6492] ? __lock_acquire+0xbdd/0x3ce0 [ 71.880816][ T6492] ? __pfx___lock_acquire+0x10/0x10 [ 71.882705][ T6492] __netif_receive_skb_list_core+0x357/0x950 [ 71.885004][ T6492] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 71.887894][ T6492] ? trace_lock_acquire+0x14a/0x1d0 [ 71.890831][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 71.893798][ T6492] ? lock_acquire+0x2f/0xb0 [ 71.895620][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 71.897816][ T6492] netif_receive_skb_list_internal+0x753/0xdb0 [ 71.900014][ T6492] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 71.902431][ T6492] ? __pfx_eth_type_trans+0x10/0x10 [ 71.904277][ T6492] ? __build_skb_around+0x278/0x3b0 [ 71.906086][ T6492] netif_receive_skb_list+0x4f/0x4a0 [ 71.908094][ T6492] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 71.910348][ T6492] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 71.912638][ T6492] ? bpf_test_timer_continue+0x150/0x3d0 [ 71.914627][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 71.916412][ T6492] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 71.918680][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 71.920813][ T6492] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 71.923025][ T6492] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 71.925229][ T6492] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 71.928317][ T6492] ? 0xffffffffa0004340 [ 71.930318][ T6492] ? 0xffffffffa0004340 [ 71.932140][ T6492] ? 0xffffffffa0004340 [ 71.933817][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 71.936229][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 71.938147][ T6492] ? lock_acquire+0x2f/0xb0 [ 71.939695][ T6492] ? __fget_files+0x40/0x3f0 [ 71.941285][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 71.943261][ T6492] ? fput+0x30/0x390 [ 71.944545][ T6492] ? __bpf_prog_get+0xa0/0x290 [ 71.946166][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 71.948146][ T6492] __sys_bpf+0xfc6/0x49a0 [ 71.949993][ T6492] ? __pfx_futex_wake+0x10/0x10 [ 71.951628][ T6492] ? finish_task_switch.isra.0+0x2e8/0xcc0 [ 71.953560][ T6492] ? __pfx___sys_bpf+0x10/0x10 [ 71.955116][ T6492] ? __schedule+0xe5d/0x5730 [ 71.956601][ T6492] ? __fget_files+0x23a/0x3f0 [ 71.958136][ T6492] ? do_futex+0x123/0x350 [ 71.959533][ T6492] ? __pfx_do_futex+0x10/0x10 [ 71.961063][ T6492] ? xfd_validate_state+0x5d/0x180 [ 71.962730][ T6492] ? rcu_is_watching+0x12/0xc0 [ 71.964272][ T6492] __x64_sys_bpf+0x78/0xc0 [ 71.965438][ T6492] ? lockdep_hardirqs_on+0x7c/0x110 [ 71.966985][ T6492] do_syscall_64+0xcd/0x250 [ 71.968571][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.970235][ T6492] RIP: 0033:0x7f475a17e719 [ 71.971679][ T6492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.978392][ T6492] RSP: 002b:00007f475b009038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 71.981257][ T6492] RAX: ffffffffffffffda RBX: 00007f475a336058 RCX: 00007f475a17e719 [ 71.984049][ T6492] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 71.987370][ T6492] RBP: 00007f475a1f132e R08: 0000000000000000 R09: 0000000000000000 [ 71.990515][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.993249][ T6492] R13: 0000000000000000 R14: 00007f475a336058 R15: 00007ffe2d0f8dd8 [ 71.996247][ T6492] [ 71.997414][ T6492] BUG: Bad page state in process syz.1.132 pfn:4d461 [ 71.999660][ T6492] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2 pfn:0x4d461 [ 72.002792][ T6492] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 72.005646][ T6492] raw: 00fff00000000000 dead000000000040 ffff88804c173000 0000000000000000 [ 72.008951][ T6492] raw: 0000000000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 72.012351][ T6492] page dumped because: page_pool leak [ 72.014582][ T6492] page_owner tracks the page as allocated [ 72.016702][ T6492] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6492, tgid 6486 (syz.1.132), ts 70655575564, free_ts 70606166308 [ 72.022279][ T6492] post_alloc_hook+0x2d1/0x350 [ 72.023926][ T6492] get_page_from_freelist+0x101e/0x3070 [ 72.025892][ T6492] __alloc_pages_noprof+0x223/0x25a0 [ 72.028039][ T6492] alloc_pages_bulk_noprof+0x77c/0x1110 [ 72.030219][ T6492] __page_pool_alloc_pages_slow+0x18f/0x770 [ 72.032116][ T6492] page_pool_alloc_netmem+0xc4/0x160 [ 72.033944][ T6492] page_pool_alloc_pages+0x1a/0x60 [ 72.035784][ T6492] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 72.037878][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 72.039702][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 72.041538][ T6492] __sys_bpf+0xfc6/0x49a0 [ 72.043083][ T6492] __x64_sys_bpf+0x78/0xc0 [ 72.044715][ T6492] do_syscall_64+0xcd/0x250 [ 72.046543][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.049135][ T6492] page last free pid 34 tgid 34 stack trace: [ 72.051668][ T6492] free_unref_page+0x5f4/0xdc0 [ 72.053754][ T6492] __folio_put+0x30d/0x3d0 [ 72.055657][ T6492] free_page_and_swap_cache+0x249/0x2c0 [ 72.057101][ T6492] tlb_remove_table_rcu+0x89/0xe0 [ 72.058432][ T6492] rcu_core+0x79d/0x14d0 [ 72.060194][ T6492] handle_softirqs+0x213/0x8f0 [ 72.061901][ T6492] run_ksoftirqd+0x3a/0x60 [ 72.063479][ T6492] smpboot_thread_fn+0x661/0xa30 [ 72.065265][ T6492] kthread+0x2c1/0x3a0 [ 72.066695][ T6492] ret_from_fork+0x45/0x80 [ 72.068218][ T6492] ret_from_fork_asm+0x1a/0x30 [ 72.070098][ T6492] Modules linked in: [ 72.071574][ T6492] CPU: 3 UID: 0 PID: 6492 Comm: syz.1.132 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 72.075650][ T6492] Tainted: [B]=BAD_PAGE [ 72.077158][ T6492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 72.080956][ T6492] Call Trace: [ 72.082160][ T6492] [ 72.083180][ T6492] dump_stack_lvl+0x16c/0x1f0 [ 72.084966][ T6492] bad_page+0xb3/0x1f0 [ 72.086744][ T6492] ? __pfx_bad_page+0x10/0x10 [ 72.088891][ T6492] ? page_bad_reason+0x9d/0x1e0 [ 72.091478][ T6492] free_unref_page+0x657/0xdc0 [ 72.093306][ T6492] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 72.095375][ T6492] ? __phys_addr+0xc6/0x150 [ 72.097017][ T6492] skb_free_head+0xa0/0x1d0 [ 72.098666][ T6492] skb_release_data+0x560/0x730 [ 72.100453][ T6492] sk_skb_reason_drop+0x129/0x1a0 [ 72.102269][ T6492] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 72.104586][ T6492] ? kernel_text_address+0x8d/0x100 [ 72.106829][ T6492] ? hlock_class+0x4e/0x130 [ 72.108573][ T6492] ? __lock_acquire+0x163e/0x3ce0 [ 72.110272][ T6492] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 72.113006][ T6492] ? hlock_class+0x4e/0x130 [ 72.114764][ T6492] ? __lock_acquire+0xbdd/0x3ce0 [ 72.116878][ T6492] ? __pfx___lock_acquire+0x10/0x10 [ 72.118939][ T6492] __netif_receive_skb_list_core+0x357/0x950 [ 72.121438][ T6492] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 72.123339][ T6492] ? trace_lock_acquire+0x14a/0x1d0 [ 72.125144][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 72.127244][ T6492] ? lock_acquire+0x2f/0xb0 [ 72.128801][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 72.131008][ T6492] netif_receive_skb_list_internal+0x753/0xdb0 [ 72.133258][ T6492] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 72.135741][ T6492] ? __pfx_eth_type_trans+0x10/0x10 [ 72.137651][ T6492] ? __build_skb_around+0x278/0x3b0 [ 72.139805][ T6492] netif_receive_skb_list+0x4f/0x4a0 [ 72.142130][ T6492] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 72.145007][ T6492] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 72.148277][ T6492] ? bpf_test_timer_continue+0x150/0x3d0 [ 72.150835][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 72.152619][ T6492] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 72.154635][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 72.156689][ T6492] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 72.158735][ T6492] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 72.160833][ T6492] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 72.162931][ T6492] ? 0xffffffffa0004340 [ 72.164800][ T6492] ? 0xffffffffa0004340 [ 72.166294][ T6492] ? 0xffffffffa0004340 [ 72.167932][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 72.170238][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 72.172093][ T6492] ? lock_acquire+0x2f/0xb0 [ 72.173567][ T6492] ? __fget_files+0x40/0x3f0 [ 72.175072][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 72.177012][ T6492] ? fput+0x30/0x390 [ 72.178378][ T6492] ? __bpf_prog_get+0xa0/0x290 [ 72.180078][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 72.182385][ T6492] __sys_bpf+0xfc6/0x49a0 [ 72.184080][ T6492] ? __pfx_futex_wake+0x10/0x10 [ 72.185933][ T6492] ? finish_task_switch.isra.0+0x2e8/0xcc0 [ 72.188785][ T6492] ? __pfx___sys_bpf+0x10/0x10 [ 72.191298][ T6492] ? __schedule+0xe5d/0x5730 [ 72.193591][ T6492] ? __fget_files+0x23a/0x3f0 [ 72.195677][ T6492] ? do_futex+0x123/0x350 [ 72.197231][ T6492] ? __pfx_do_futex+0x10/0x10 [ 72.198928][ T6492] ? xfd_validate_state+0x5d/0x180 [ 72.200722][ T6492] ? rcu_is_watching+0x12/0xc0 [ 72.202424][ T6492] __x64_sys_bpf+0x78/0xc0 [ 72.204017][ T6492] ? lockdep_hardirqs_on+0x7c/0x110 [ 72.206414][ T6492] do_syscall_64+0xcd/0x250 [ 72.208211][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.210497][ T6492] RIP: 0033:0x7f475a17e719 [ 72.212154][ T6492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.218803][ T6492] RSP: 002b:00007f475b009038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 72.221610][ T6492] RAX: ffffffffffffffda RBX: 00007f475a336058 RCX: 00007f475a17e719 [ 72.224571][ T6492] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 72.228230][ T6492] RBP: 00007f475a1f132e R08: 0000000000000000 R09: 0000000000000000 [ 72.231583][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.234371][ T6492] R13: 0000000000000000 R14: 00007f475a336058 R15: 00007ffe2d0f8dd8 [ 72.237148][ T6492] [ 72.238359][ T6492] BUG: Bad page state in process syz.1.132 pfn:4d460 [ 72.240502][ T6492] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804d461e00 pfn:0x4d460 [ 72.244145][ T6492] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 72.246938][ T6492] raw: 00fff00000000000 dead000000000040 ffff88804c173000 0000000000000000 [ 72.250621][ T6492] raw: ffff88804d461e00 0000000000000001 00000000ffffffff 0000000000000000 [ 72.253775][ T6492] page dumped because: page_pool leak [ 72.256561][ T6492] page_owner tracks the page as allocated [ 72.258992][ T6492] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6492, tgid 6486 (syz.1.132), ts 70655570893, free_ts 70606170006 [ 72.264939][ T6492] post_alloc_hook+0x2d1/0x350 [ 72.266539][ T6492] get_page_from_freelist+0x101e/0x3070 [ 72.268404][ T6492] __alloc_pages_noprof+0x223/0x25a0 [ 72.270292][ T6492] alloc_pages_bulk_noprof+0x77c/0x1110 [ 72.272207][ T6492] __page_pool_alloc_pages_slow+0x18f/0x770 [ 72.274153][ T6492] page_pool_alloc_netmem+0xc4/0x160 [ 72.276018][ T6492] page_pool_alloc_pages+0x1a/0x60 [ 72.277687][ T6492] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 72.279775][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 72.281576][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 72.283793][ T6492] __sys_bpf+0xfc6/0x49a0 [ 72.285285][ T6492] __x64_sys_bpf+0x78/0xc0 [ 72.286511][ T6492] do_syscall_64+0xcd/0x250 [ 72.287816][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.289467][ T6492] page last free pid 34 tgid 34 stack trace: [ 72.291148][ T6492] free_unref_page+0x5f4/0xdc0 [ 72.292502][ T6492] __folio_put+0x30d/0x3d0 [ 72.294281][ T6492] free_page_and_swap_cache+0x249/0x2c0 [ 72.296012][ T6492] tlb_remove_table_rcu+0x89/0xe0 [ 72.297836][ T6492] rcu_core+0x79d/0x14d0 [ 72.299339][ T6492] handle_softirqs+0x213/0x8f0 [ 72.300970][ T6492] run_ksoftirqd+0x3a/0x60 [ 72.302399][ T6492] smpboot_thread_fn+0x661/0xa30 [ 72.303769][ T6492] kthread+0x2c1/0x3a0 [ 72.304912][ T6492] ret_from_fork+0x45/0x80 [ 72.306432][ T6492] ret_from_fork_asm+0x1a/0x30 [ 72.308296][ T6492] Modules linked in: [ 72.309498][ T6492] CPU: 3 UID: 0 PID: 6492 Comm: syz.1.132 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 72.313046][ T6492] Tainted: [B]=BAD_PAGE [ 72.314561][ T6492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 72.317681][ T6492] Call Trace: [ 72.318731][ T6492] [ 72.319650][ T6492] dump_stack_lvl+0x16c/0x1f0 [ 72.321186][ T6492] bad_page+0xb3/0x1f0 [ 72.322614][ T6492] ? __pfx_bad_page+0x10/0x10 [ 72.324037][ T6492] ? page_bad_reason+0x9d/0x1e0 [ 72.325693][ T6492] free_unref_page+0x657/0xdc0 [ 72.327277][ T6492] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 72.328787][ T6492] ? __phys_addr+0xc6/0x150 [ 72.329924][ T6492] skb_free_head+0xa0/0x1d0 [ 72.331112][ T6492] skb_release_data+0x560/0x730 [ 72.332332][ T6492] sk_skb_reason_drop+0x129/0x1a0 [ 72.333875][ T6492] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 72.335632][ T6492] ? kernel_text_address+0x8d/0x100 [ 72.336961][ T6492] ? hlock_class+0x4e/0x130 [ 72.338124][ T6492] ? __lock_acquire+0x163e/0x3ce0 [ 72.339644][ T6492] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 72.341484][ T6492] ? hlock_class+0x4e/0x130 [ 72.342761][ T6492] ? __lock_acquire+0xbdd/0x3ce0 [ 72.344401][ T6492] ? __pfx___lock_acquire+0x10/0x10 [ 72.346097][ T6492] __netif_receive_skb_list_core+0x357/0x950 [ 72.347878][ T6492] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 72.349644][ T6492] ? trace_lock_acquire+0x14a/0x1d0 [ 72.350841][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 72.352766][ T6492] ? lock_acquire+0x2f/0xb0 [ 72.354340][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 72.356526][ T6492] netif_receive_skb_list_internal+0x753/0xdb0 [ 72.358675][ T6492] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 72.360630][ T6492] ? __pfx_eth_type_trans+0x10/0x10 [ 72.361899][ T6492] ? __build_skb_around+0x278/0x3b0 [ 72.363439][ T6492] netif_receive_skb_list+0x4f/0x4a0 [ 72.365726][ T6492] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 72.368287][ T6492] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 72.370158][ T6492] ? bpf_test_timer_continue+0x150/0x3d0 [ 72.371872][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 72.373408][ T6492] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 72.375817][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 72.377467][ T6492] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 72.379471][ T6492] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 72.381622][ T6492] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 72.383328][ T6492] ? 0xffffffffa0004340 [ 72.384693][ T6492] ? 0xffffffffa0004340 [ 72.386154][ T6492] ? 0xffffffffa0004340 [ 72.387483][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 72.389363][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 72.391073][ T6492] ? lock_acquire+0x2f/0xb0 [ 72.392572][ T6492] ? __fget_files+0x40/0x3f0 [ 72.394110][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 72.396184][ T6492] ? fput+0x30/0x390 [ 72.397574][ T6492] ? __bpf_prog_get+0xa0/0x290 [ 72.399607][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 72.401438][ T6492] __sys_bpf+0xfc6/0x49a0 [ 72.402747][ T6492] ? __pfx_futex_wake+0x10/0x10 [ 72.404296][ T6492] ? finish_task_switch.isra.0+0x2e8/0xcc0 [ 72.406036][ T6492] ? __pfx___sys_bpf+0x10/0x10 [ 72.408412][ T6492] ? __schedule+0xe5d/0x5730 [ 72.410353][ T6492] ? __fget_files+0x23a/0x3f0 [ 72.412138][ T6492] ? do_futex+0x123/0x350 [ 72.413607][ T6492] ? __pfx_do_futex+0x10/0x10 [ 72.414922][ T6492] ? xfd_validate_state+0x5d/0x180 [ 72.416590][ T6492] ? rcu_is_watching+0x12/0xc0 [ 72.418254][ T6492] __x64_sys_bpf+0x78/0xc0 [ 72.419843][ T6492] ? lockdep_hardirqs_on+0x7c/0x110 [ 72.421523][ T6492] do_syscall_64+0xcd/0x250 [ 72.423046][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.424762][ T6492] RIP: 0033:0x7f475a17e719 [ 72.426430][ T6492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.433129][ T6492] RSP: 002b:00007f475b009038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 72.435989][ T6492] RAX: ffffffffffffffda RBX: 00007f475a336058 RCX: 00007f475a17e719 [ 72.438537][ T6492] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 72.441440][ T6492] RBP: 00007f475a1f132e R08: 0000000000000000 R09: 0000000000000000 [ 72.445092][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.448731][ T6492] R13: 0000000000000000 R14: 00007f475a336058 R15: 00007ffe2d0f8dd8 [ 72.451757][ T6492] [ 72.453164][ T6492] BUG: Bad page state in process syz.1.132 pfn:29c39 [ 72.455630][ T6492] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2 pfn:0x29c39 [ 72.458509][ T6492] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 72.460715][ T6492] raw: 00fff00000000000 dead000000000040 ffff88804c173000 0000000000000000 [ 72.463714][ T6492] raw: 0000000000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 72.467316][ T6492] page dumped because: page_pool leak [ 72.469699][ T6492] page_owner tracks the page as allocated [ 72.471744][ T6492] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6492, tgid 6486 (syz.1.132), ts 70655566196, free_ts 70606173308 [ 72.477054][ T6492] post_alloc_hook+0x2d1/0x350 [ 72.478677][ T6492] get_page_from_freelist+0x101e/0x3070 [ 72.480138][ T6492] __alloc_pages_noprof+0x223/0x25a0 [ 72.481633][ T6492] alloc_pages_bulk_noprof+0x77c/0x1110 [ 72.483394][ T6492] __page_pool_alloc_pages_slow+0x18f/0x770 [ 72.485322][ T6492] page_pool_alloc_netmem+0xc4/0x160 [ 72.487263][ T6492] page_pool_alloc_pages+0x1a/0x60 [ 72.488733][ T6492] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 72.490525][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 72.492022][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 72.493564][ T6492] __sys_bpf+0xfc6/0x49a0 [ 72.495178][ T6492] __x64_sys_bpf+0x78/0xc0 [ 72.496724][ T6492] do_syscall_64+0xcd/0x250 [ 72.498416][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.500075][ T6492] page last free pid 34 tgid 34 stack trace: [ 72.501607][ T6492] free_unref_page+0x5f4/0xdc0 [ 72.502861][ T6492] __folio_put+0x30d/0x3d0 [ 72.504719][ T6492] free_page_and_swap_cache+0x249/0x2c0 [ 72.507378][ T6492] tlb_remove_table_rcu+0x89/0xe0 [ 72.509316][ T6492] rcu_core+0x79d/0x14d0 [ 72.510691][ T6492] handle_softirqs+0x213/0x8f0 [ 72.512192][ T6492] run_ksoftirqd+0x3a/0x60 [ 72.513999][ T6492] smpboot_thread_fn+0x661/0xa30 [ 72.515771][ T6492] kthread+0x2c1/0x3a0 [ 72.517082][ T6492] ret_from_fork+0x45/0x80 [ 72.518200][ T6492] ret_from_fork_asm+0x1a/0x30 [ 72.519392][ T6492] Modules linked in: [ 72.520413][ T6492] CPU: 3 UID: 0 PID: 6492 Comm: syz.1.132 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 72.523607][ T6492] Tainted: [B]=BAD_PAGE [ 72.525112][ T6492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 72.528874][ T6492] Call Trace: [ 72.529916][ T6492] [ 72.530707][ T6492] dump_stack_lvl+0x16c/0x1f0 [ 72.531981][ T6492] bad_page+0xb3/0x1f0 [ 72.533203][ T6492] ? __pfx_bad_page+0x10/0x10 [ 72.534766][ T6492] ? page_bad_reason+0x9d/0x1e0 [ 72.536050][ T6492] free_unref_page+0x657/0xdc0 [ 72.537302][ T6492] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 72.538890][ T6492] ? __phys_addr+0xc6/0x150 [ 72.540141][ T6492] skb_free_head+0xa0/0x1d0 [ 72.541358][ T6492] skb_release_data+0x560/0x730 [ 72.543422][ T6492] sk_skb_reason_drop+0x129/0x1a0 [ 72.545794][ T6492] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 72.548030][ T6492] ? kernel_text_address+0x8d/0x100 [ 72.549516][ T6492] ? hlock_class+0x4e/0x130 [ 72.550838][ T6492] ? __lock_acquire+0x163e/0x3ce0 [ 72.552267][ T6492] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 72.554917][ T6492] ? hlock_class+0x4e/0x130 [ 72.556216][ T6492] ? __lock_acquire+0xbdd/0x3ce0 [ 72.557685][ T6492] ? __pfx___lock_acquire+0x10/0x10 [ 72.559068][ T6492] __netif_receive_skb_list_core+0x357/0x950 [ 72.560630][ T6492] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 72.562356][ T6492] ? trace_lock_acquire+0x14a/0x1d0 [ 72.563757][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 72.565467][ T6492] ? lock_acquire+0x2f/0xb0 [ 72.566810][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 72.568526][ T6492] netif_receive_skb_list_internal+0x753/0xdb0 [ 72.570257][ T6492] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 72.572029][ T6492] ? __pfx_eth_type_trans+0x10/0x10 [ 72.573537][ T6492] ? __build_skb_around+0x278/0x3b0 [ 72.575088][ T6492] netif_receive_skb_list+0x4f/0x4a0 [ 72.576505][ T6492] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 72.578331][ T6492] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 72.580300][ T6492] ? bpf_test_timer_continue+0x150/0x3d0 [ 72.582350][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 72.584749][ T6492] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 72.586886][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 72.588901][ T6492] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 72.590584][ T6492] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 72.592198][ T6492] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 72.593642][ T6492] ? 0xffffffffa0004340 [ 72.595058][ T6492] ? 0xffffffffa0004340 [ 72.596542][ T6492] ? 0xffffffffa0004340 [ 72.597884][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 72.599585][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 72.601099][ T6492] ? lock_acquire+0x2f/0xb0 [ 72.602414][ T6492] ? __fget_files+0x40/0x3f0 [ 72.603841][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 72.605493][ T6492] ? fput+0x30/0x390 [ 72.606664][ T6492] ? __bpf_prog_get+0xa0/0x290 [ 72.608002][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 72.609733][ T6492] __sys_bpf+0xfc6/0x49a0 [ 72.611136][ T6492] ? __pfx_futex_wake+0x10/0x10 [ 72.612597][ T6492] ? finish_task_switch.isra.0+0x2e8/0xcc0 [ 72.614728][ T6492] ? __pfx___sys_bpf+0x10/0x10 [ 72.616531][ T6492] ? __schedule+0xe5d/0x5730 [ 72.617933][ T6492] ? __fget_files+0x23a/0x3f0 [ 72.619125][ T6492] ? do_futex+0x123/0x350 [ 72.620206][ T6492] ? __pfx_do_futex+0x10/0x10 [ 72.621387][ T6492] ? xfd_validate_state+0x5d/0x180 [ 72.622682][ T6492] ? rcu_is_watching+0x12/0xc0 [ 72.623972][ T6492] __x64_sys_bpf+0x78/0xc0 [ 72.625094][ T6492] ? lockdep_hardirqs_on+0x7c/0x110 [ 72.626492][ T6492] do_syscall_64+0xcd/0x250 [ 72.627637][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.629169][ T6492] RIP: 0033:0x7f475a17e719 [ 72.630291][ T6492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.635327][ T6492] RSP: 002b:00007f475b009038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 72.637429][ T6492] RAX: ffffffffffffffda RBX: 00007f475a336058 RCX: 00007f475a17e719 [ 72.639584][ T6492] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 72.642887][ T6492] RBP: 00007f475a1f132e R08: 0000000000000000 R09: 0000000000000000 [ 72.646300][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.649319][ T6492] R13: 0000000000000000 R14: 00007f475a336058 R15: 00007ffe2d0f8dd8 [ 72.652011][ T6492] [ 72.652853][ T6492] BUG: Bad page state in process syz.1.132 pfn:29597 [ 72.654816][ T6492] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880295971e0 pfn:0x29597 [ 72.657532][ T6492] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 72.659554][ T6492] raw: 00fff00000000000 dead000000000040 ffff88804c173000 0000000000000000 [ 72.662439][ T6492] raw: ffff8880295971e0 0000000000000001 00000000ffffffff 0000000000000000 [ 72.665622][ T6492] page dumped because: page_pool leak [ 72.667625][ T6492] page_owner tracks the page as allocated [ 72.669174][ T6492] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6492, tgid 6486 (syz.1.132), ts 70655561171, free_ts 70606177858 [ 72.673749][ T6492] post_alloc_hook+0x2d1/0x350 [ 72.675561][ T6492] get_page_from_freelist+0x101e/0x3070 [ 72.677513][ T6492] __alloc_pages_noprof+0x223/0x25a0 [ 72.679123][ T6492] alloc_pages_bulk_noprof+0x77c/0x1110 [ 72.680862][ T6492] __page_pool_alloc_pages_slow+0x18f/0x770 [ 72.683029][ T6492] page_pool_alloc_netmem+0xc4/0x160 [ 72.684362][ T6492] page_pool_alloc_pages+0x1a/0x60 [ 72.685932][ T6492] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 72.687754][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 72.689421][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 72.690753][ T6492] __sys_bpf+0xfc6/0x49a0 [ 72.691855][ T6492] __x64_sys_bpf+0x78/0xc0 [ 72.692973][ T6492] do_syscall_64+0xcd/0x250 [ 72.694403][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.695899][ T6492] page last free pid 34 tgid 34 stack trace: [ 72.697425][ T6492] free_unref_page+0x5f4/0xdc0 [ 72.698622][ T6492] rcu_core+0x79d/0x14d0 [ 72.699691][ T6492] handle_softirqs+0x213/0x8f0 [ 72.700893][ T6492] run_ksoftirqd+0x3a/0x60 [ 72.702022][ T6492] smpboot_thread_fn+0x661/0xa30 [ 72.703346][ T6492] kthread+0x2c1/0x3a0 [ 72.704418][ T6492] ret_from_fork+0x45/0x80 [ 72.705674][ T6492] ret_from_fork_asm+0x1a/0x30 [ 72.706948][ T6492] Modules linked in: [ 72.708105][ T6492] CPU: 3 UID: 0 PID: 6492 Comm: syz.1.132 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 72.711600][ T6492] Tainted: [B]=BAD_PAGE [ 72.712773][ T6492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 72.716289][ T6492] Call Trace: [ 72.717449][ T6492] [ 72.718216][ T6492] dump_stack_lvl+0x16c/0x1f0 [ 72.719417][ T6492] bad_page+0xb3/0x1f0 [ 72.720417][ T6492] ? __pfx_bad_page+0x10/0x10 [ 72.721574][ T6492] ? page_bad_reason+0x9d/0x1e0 [ 72.722806][ T6492] free_unref_page+0x657/0xdc0 [ 72.724157][ T6492] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 72.725646][ T6492] ? __phys_addr+0xc6/0x150 [ 72.726856][ T6492] skb_free_head+0xa0/0x1d0 [ 72.728039][ T6492] skb_release_data+0x560/0x730 [ 72.729533][ T6492] sk_skb_reason_drop+0x129/0x1a0 [ 72.730878][ T6492] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 72.732634][ T6492] ? kernel_text_address+0x8d/0x100 [ 72.734420][ T6492] ? hlock_class+0x4e/0x130 [ 72.735857][ T6492] ? __lock_acquire+0x163e/0x3ce0 [ 72.737227][ T6492] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 72.739398][ T6492] ? hlock_class+0x4e/0x130 [ 72.741005][ T6492] ? __lock_acquire+0xbdd/0x3ce0 [ 72.742533][ T6492] ? __pfx___lock_acquire+0x10/0x10 [ 72.744423][ T6492] __netif_receive_skb_list_core+0x357/0x950 [ 72.746484][ T6492] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 72.748612][ T6492] ? trace_lock_acquire+0x14a/0x1d0 [ 72.750222][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 72.751948][ T6492] ? lock_acquire+0x2f/0xb0 [ 72.753213][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 72.755394][ T6492] netif_receive_skb_list_internal+0x753/0xdb0 [ 72.757210][ T6492] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 72.759215][ T6492] ? __pfx_eth_type_trans+0x10/0x10 [ 72.760985][ T6492] ? __build_skb_around+0x278/0x3b0 [ 72.763031][ T6492] netif_receive_skb_list+0x4f/0x4a0 [ 72.764981][ T6492] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 72.767289][ T6492] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 72.769738][ T6492] ? bpf_test_timer_continue+0x150/0x3d0 [ 72.771285][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 72.772710][ T6492] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 72.774632][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 72.776252][ T6492] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 72.777840][ T6492] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 72.779426][ T6492] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 72.780879][ T6492] ? 0xffffffffa0004340 [ 72.782010][ T6492] ? 0xffffffffa0004340 [ 72.783168][ T6492] ? 0xffffffffa0004340 [ 72.784372][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 72.786563][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 72.788513][ T6492] ? lock_acquire+0x2f/0xb0 [ 72.790165][ T6492] ? __fget_files+0x40/0x3f0 [ 72.791803][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 72.793873][ T6492] ? fput+0x30/0x390 [ 72.795288][ T6492] ? __bpf_prog_get+0xa0/0x290 [ 72.797055][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 72.799177][ T6492] __sys_bpf+0xfc6/0x49a0 [ 72.800657][ T6492] ? __pfx_futex_wake+0x10/0x10 [ 72.802310][ T6492] ? finish_task_switch.isra.0+0x2e8/0xcc0 [ 72.804214][ T6492] ? __pfx___sys_bpf+0x10/0x10 [ 72.805891][ T6492] ? __schedule+0xe5d/0x5730 [ 72.807464][ T6492] ? __fget_files+0x23a/0x3f0 [ 72.809042][ T6492] ? do_futex+0x123/0x350 [ 72.810536][ T6492] ? __pfx_do_futex+0x10/0x10 [ 72.812224][ T6492] ? xfd_validate_state+0x5d/0x180 [ 72.814045][ T6492] ? rcu_is_watching+0x12/0xc0 [ 72.815784][ T6492] __x64_sys_bpf+0x78/0xc0 [ 72.817408][ T6492] ? lockdep_hardirqs_on+0x7c/0x110 [ 72.819190][ T6492] do_syscall_64+0xcd/0x250 [ 72.820746][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.823694][ T6492] RIP: 0033:0x7f475a17e719 [ 72.825495][ T6492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.831814][ T6492] RSP: 002b:00007f475b009038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 72.834217][ T6492] RAX: ffffffffffffffda RBX: 00007f475a336058 RCX: 00007f475a17e719 [ 72.836273][ T6492] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 72.838335][ T6492] RBP: 00007f475a1f132e R08: 0000000000000000 R09: 0000000000000000 [ 72.840388][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.842444][ T6492] R13: 0000000000000000 R14: 00007f475a336058 R15: 00007ffe2d0f8dd8 [ 72.844491][ T6492] [ 72.845611][ T6492] BUG: Bad page state in process syz.1.132 pfn:31dd7 [ 72.847428][ T6492] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888031dd7f00 pfn:0x31dd7 [ 72.850087][ T6492] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 72.851954][ T6492] raw: 00fff00000000000 dead000000000040 ffff88804c173000 0000000000000000 [ 72.854254][ T6492] raw: ffff888031dd7f00 0000000000000001 00000000ffffffff 0000000000000000 [ 72.856507][ T6492] page dumped because: page_pool leak [ 72.857904][ T6492] page_owner tracks the page as allocated [ 72.859406][ T6492] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6492, tgid 6486 (syz.1.132), ts 70655556083, free_ts 70606808309 [ 72.863727][ T6492] post_alloc_hook+0x2d1/0x350 [ 72.865014][ T6492] get_page_from_freelist+0x101e/0x3070 [ 72.866488][ T6492] __alloc_pages_noprof+0x223/0x25a0 [ 72.867873][ T6492] alloc_pages_bulk_noprof+0x77c/0x1110 [ 72.869327][ T6492] __page_pool_alloc_pages_slow+0x18f/0x770 [ 72.870877][ T6492] page_pool_alloc_netmem+0xc4/0x160 [ 72.872257][ T6492] page_pool_alloc_pages+0x1a/0x60 [ 72.873591][ T6492] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 72.875265][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 72.876656][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 72.878082][ T6492] __sys_bpf+0xfc6/0x49a0 [ 72.879230][ T6492] __x64_sys_bpf+0x78/0xc0 [ 72.880416][ T6492] do_syscall_64+0xcd/0x250 [ 72.881616][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.883172][ T6492] page last free pid 34 tgid 34 stack trace: [ 72.884724][ T6492] free_unref_page+0x5f4/0xdc0 [ 72.886037][ T6492] __folio_put+0x30d/0x3d0 [ 72.887401][ T6492] free_page_and_swap_cache+0x249/0x2c0 [ 72.888855][ T6492] tlb_remove_table_rcu+0x89/0xe0 [ 72.890192][ T6492] rcu_core+0x79d/0x14d0 [ 72.891309][ T6492] handle_softirqs+0x213/0x8f0 [ 72.892584][ T6492] run_ksoftirqd+0x3a/0x60 [ 72.893754][ T6492] smpboot_thread_fn+0x661/0xa30 [ 72.895219][ T6492] kthread+0x2c1/0x3a0 [ 72.896369][ T6492] ret_from_fork+0x45/0x80 [ 72.897574][ T6492] ret_from_fork_asm+0x1a/0x30 [ 72.898933][ T6492] Modules linked in: [ 72.900073][ T6492] CPU: 3 UID: 0 PID: 6492 Comm: syz.1.132 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 72.903575][ T6492] Tainted: [B]=BAD_PAGE [ 72.904865][ T6492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 72.908038][ T6492] Call Trace: [ 72.908989][ T6492] [ 72.909812][ T6492] dump_stack_lvl+0x16c/0x1f0 [ 72.911095][ T6492] bad_page+0xb3/0x1f0 [ 72.912198][ T6492] ? __pfx_bad_page+0x10/0x10 [ 72.913411][ T6492] ? page_bad_reason+0x9d/0x1e0 [ 72.914689][ T6492] free_unref_page+0x657/0xdc0 [ 72.916003][ T6492] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 72.917561][ T6492] ? __phys_addr+0xc6/0x150 [ 72.918762][ T6492] skb_free_head+0xa0/0x1d0 [ 72.919961][ T6492] skb_release_data+0x560/0x730 [ 72.921240][ T6492] sk_skb_reason_drop+0x129/0x1a0 [ 72.922581][ T6492] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 72.924310][ T6492] ? kernel_text_address+0x8d/0x100 [ 72.925662][ T6492] ? hlock_class+0x4e/0x130 [ 72.926878][ T6492] ? __lock_acquire+0x163e/0x3ce0 [ 72.928197][ T6492] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 72.930019][ T6492] ? hlock_class+0x4e/0x130 [ 72.931213][ T6492] ? __lock_acquire+0xbdd/0x3ce0 [ 72.932497][ T6492] ? __pfx___lock_acquire+0x10/0x10 [ 72.933843][ T6492] __netif_receive_skb_list_core+0x357/0x950 [ 72.935411][ T6492] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 72.937089][ T6492] ? trace_lock_acquire+0x14a/0x1d0 [ 72.938460][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 72.940200][ T6492] ? lock_acquire+0x2f/0xb0 [ 72.941448][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 72.943130][ T6492] netif_receive_skb_list_internal+0x753/0xdb0 [ 72.944769][ T6492] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 72.946659][ T6492] ? __pfx_eth_type_trans+0x10/0x10 [ 72.948073][ T6492] ? __build_skb_around+0x278/0x3b0 [ 72.949393][ T6492] netif_receive_skb_list+0x4f/0x4a0 [ 72.950808][ T6492] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 72.952437][ T6492] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 72.954285][ T6492] ? bpf_test_timer_continue+0x150/0x3d0 [ 72.955919][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 72.957490][ T6492] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 72.959223][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 72.961179][ T6492] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 72.963140][ T6492] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 72.964782][ T6492] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 72.966184][ T6492] ? 0xffffffffa0004340 [ 72.967278][ T6492] ? 0xffffffffa0004340 [ 72.968578][ T6492] ? 0xffffffffa0004340 [ 72.969873][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 72.971560][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 72.972966][ T6492] ? lock_acquire+0x2f/0xb0 [ 72.974159][ T6492] ? __fget_files+0x40/0x3f0 [ 72.975370][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 72.976953][ T6492] ? fput+0x30/0x390 [ 72.977975][ T6492] ? __bpf_prog_get+0xa0/0x290 [ 72.979245][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 72.980755][ T6492] __sys_bpf+0xfc6/0x49a0 [ 72.981883][ T6492] ? __pfx_futex_wake+0x10/0x10 [ 72.983176][ T6492] ? finish_task_switch.isra.0+0x2e8/0xcc0 [ 72.984694][ T6492] ? __pfx___sys_bpf+0x10/0x10 [ 72.985967][ T6492] ? __schedule+0xe5d/0x5730 [ 72.987183][ T6492] ? __fget_files+0x23a/0x3f0 [ 72.988418][ T6492] ? do_futex+0x123/0x350 [ 72.989549][ T6492] ? __pfx_do_futex+0x10/0x10 [ 72.990774][ T6492] ? xfd_validate_state+0x5d/0x180 [ 72.992114][ T6492] ? rcu_is_watching+0x12/0xc0 [ 72.993360][ T6492] __x64_sys_bpf+0x78/0xc0 [ 72.994545][ T6492] ? lockdep_hardirqs_on+0x7c/0x110 [ 72.995913][ T6492] do_syscall_64+0xcd/0x250 [ 72.997120][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.998685][ T6492] RIP: 0033:0x7f475a17e719 [ 72.999870][ T6492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.004842][ T6492] RSP: 002b:00007f475b009038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 73.007212][ T6492] RAX: ffffffffffffffda RBX: 00007f475a336058 RCX: 00007f475a17e719 [ 73.009470][ T6492] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 73.011540][ T6492] RBP: 00007f475a1f132e R08: 0000000000000000 R09: 0000000000000000 [ 73.013633][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.015713][ T6492] R13: 0000000000000000 R14: 00007f475a336058 R15: 00007ffe2d0f8dd8 [ 73.017765][ T6492] [ 73.018668][ T6492] BUG: Bad page state in process syz.1.132 pfn:4c829 [ 73.020427][ T6492] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804c829f00 pfn:0x4c829 [ 73.023142][ T6492] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 73.025124][ T6492] raw: 00fff00000000000 dead000000000040 ffff88804c173000 0000000000000000 [ 73.027396][ T6492] raw: ffff88804c829f00 0000000000000001 00000000ffffffff 0000000000000000 [ 73.029623][ T6492] page dumped because: page_pool leak [ 73.031044][ T6492] page_owner tracks the page as allocated [ 73.032631][ T6492] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6492, tgid 6486 (syz.1.132), ts 70655551403, free_ts 70606813909 [ 73.036904][ T6492] post_alloc_hook+0x2d1/0x350 [ 73.038209][ T6492] get_page_from_freelist+0x101e/0x3070 [ 73.039676][ T6492] __alloc_pages_noprof+0x223/0x25a0 [ 73.041014][ T6492] alloc_pages_bulk_noprof+0x77c/0x1110 [ 73.042468][ T6492] __page_pool_alloc_pages_slow+0x18f/0x770 [ 73.043989][ T6492] page_pool_alloc_netmem+0xc4/0x160 [ 73.045666][ T6492] page_pool_alloc_pages+0x1a/0x60 [ 73.047392][ T6492] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 73.049295][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 73.050800][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 73.052299][ T6492] __sys_bpf+0xfc6/0x49a0 [ 73.053557][ T6492] __x64_sys_bpf+0x78/0xc0 [ 73.054902][ T6492] do_syscall_64+0xcd/0x250 [ 73.056117][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.057688][ T6492] page last free pid 34 tgid 34 stack trace: [ 73.059223][ T6492] free_unref_page+0x5f4/0xdc0 [ 73.060480][ T6492] __folio_put+0x30d/0x3d0 [ 73.061657][ T6492] free_page_and_swap_cache+0x249/0x2c0 [ 73.063171][ T6492] tlb_remove_table_rcu+0x89/0xe0 [ 73.064517][ T6492] rcu_core+0x79d/0x14d0 [ 73.065646][ T6492] handle_softirqs+0x213/0x8f0 [ 73.066939][ T6492] run_ksoftirqd+0x3a/0x60 [ 73.068112][ T6492] smpboot_thread_fn+0x661/0xa30 [ 73.069413][ T6492] kthread+0x2c1/0x3a0 [ 73.070462][ T6492] ret_from_fork+0x45/0x80 [ 73.071786][ T6492] ret_from_fork_asm+0x1a/0x30 [ 73.073200][ T6492] Modules linked in: [ 73.074267][ T6492] CPU: 3 UID: 0 PID: 6492 Comm: syz.1.132 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 73.077373][ T6492] Tainted: [B]=BAD_PAGE [ 73.078536][ T6492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 73.081712][ T6492] Call Trace: [ 73.082614][ T6492] [ 73.083407][ T6492] dump_stack_lvl+0x16c/0x1f0 [ 73.084659][ T6492] bad_page+0xb3/0x1f0 [ 73.085740][ T6492] ? __pfx_bad_page+0x10/0x10 [ 73.087018][ T6492] ? page_bad_reason+0x9d/0x1e0 [ 73.088301][ T6492] free_unref_page+0x657/0xdc0 [ 73.089553][ T6492] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 73.091124][ T6492] ? __phys_addr+0xc6/0x150 [ 73.092545][ T6492] skb_free_head+0xa0/0x1d0 [ 73.093758][ T6492] skb_release_data+0x560/0x730 [ 73.095164][ T6492] sk_skb_reason_drop+0x129/0x1a0 [ 73.096498][ T6492] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 73.098275][ T6492] ? kernel_text_address+0x8d/0x100 [ 73.099658][ T6492] ? hlock_class+0x4e/0x130 [ 73.100896][ T6492] ? __lock_acquire+0x163e/0x3ce0 [ 73.102228][ T6492] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 73.104061][ T6492] ? hlock_class+0x4e/0x130 [ 73.105259][ T6492] ? __lock_acquire+0xbdd/0x3ce0 [ 73.106719][ T6492] ? __pfx___lock_acquire+0x10/0x10 [ 73.108273][ T6492] __netif_receive_skb_list_core+0x357/0x950 [ 73.110048][ T6492] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 73.112042][ T6492] ? trace_lock_acquire+0x14a/0x1d0 [ 73.113676][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 73.115681][ T6492] ? lock_acquire+0x2f/0xb0 [ 73.116875][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 73.118534][ T6492] netif_receive_skb_list_internal+0x753/0xdb0 [ 73.120265][ T6492] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 73.122165][ T6492] ? __pfx_eth_type_trans+0x10/0x10 [ 73.123560][ T6492] ? __build_skb_around+0x278/0x3b0 [ 73.124941][ T6492] netif_receive_skb_list+0x4f/0x4a0 [ 73.126426][ T6492] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 73.128080][ T6492] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 73.129803][ T6492] ? bpf_test_timer_continue+0x150/0x3d0 [ 73.131290][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 73.132683][ T6492] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 73.134335][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 73.135911][ T6492] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 73.137475][ T6492] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 73.139044][ T6492] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 73.140440][ T6492] ? 0xffffffffa0004340 [ 73.141540][ T6492] ? 0xffffffffa0004340 [ 73.142661][ T6492] ? 0xffffffffa0004340 [ 73.143706][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 73.145205][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 73.146653][ T6492] ? lock_acquire+0x2f/0xb0 [ 73.147982][ T6492] ? __fget_files+0x40/0x3f0 [ 73.149536][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 73.151297][ T6492] ? fput+0x30/0x390 [ 73.152392][ T6492] ? __bpf_prog_get+0xa0/0x290 [ 73.153712][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 73.155344][ T6492] __sys_bpf+0xfc6/0x49a0 [ 73.156512][ T6492] ? __pfx_futex_wake+0x10/0x10 [ 73.157786][ T6492] ? finish_task_switch.isra.0+0x2e8/0xcc0 [ 73.159282][ T6492] ? __pfx___sys_bpf+0x10/0x10 [ 73.160518][ T6492] ? __schedule+0xe5d/0x5730 [ 73.161742][ T6492] ? __fget_files+0x23a/0x3f0 [ 73.163406][ T6492] ? do_futex+0x123/0x350 [ 73.164660][ T6492] ? __pfx_do_futex+0x10/0x10 [ 73.165908][ T6492] ? xfd_validate_state+0x5d/0x180 [ 73.167422][ T6492] ? rcu_is_watching+0x12/0xc0 [ 73.168802][ T6492] __x64_sys_bpf+0x78/0xc0 [ 73.170075][ T6492] ? lockdep_hardirqs_on+0x7c/0x110 [ 73.171551][ T6492] do_syscall_64+0xcd/0x250 [ 73.172845][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.174498][ T6492] RIP: 0033:0x7f475a17e719 [ 73.175810][ T6492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.180770][ T6492] RSP: 002b:00007f475b009038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 73.183270][ T6492] RAX: ffffffffffffffda RBX: 00007f475a336058 RCX: 00007f475a17e719 [ 73.185502][ T6492] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 73.187594][ T6492] RBP: 00007f475a1f132e R08: 0000000000000000 R09: 0000000000000000 [ 73.189651][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.192051][ T6492] R13: 0000000000000000 R14: 00007f475a336058 R15: 00007ffe2d0f8dd8 [ 73.194334][ T6492] [ 73.195337][ T6492] BUG: Bad page state in process syz.1.132 pfn:27f81 [ 73.197326][ T6492] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2 pfn:0x27f81 [ 73.199705][ T6492] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 73.201810][ T6492] raw: 00fff00000000000 dead000000000040 ffff88804c173000 0000000000000000 [ 73.204399][ T6492] raw: 0000000000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 73.207449][ T6492] page dumped because: page_pool leak [ 73.208953][ T6492] page_owner tracks the page as allocated [ 73.210892][ T6492] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6492, tgid 6486 (syz.1.132), ts 70655546485, free_ts 70606818453 [ 73.215566][ T6492] post_alloc_hook+0x2d1/0x350 [ 73.216935][ T6492] get_page_from_freelist+0x101e/0x3070 [ 73.218494][ T6492] __alloc_pages_noprof+0x223/0x25a0 [ 73.219857][ T6492] alloc_pages_bulk_noprof+0x77c/0x1110 [ 73.221412][ T6492] __page_pool_alloc_pages_slow+0x18f/0x770 [ 73.223143][ T6492] page_pool_alloc_netmem+0xc4/0x160 [ 73.224541][ T6492] page_pool_alloc_pages+0x1a/0x60 [ 73.226258][ T6492] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 73.228740][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 73.230262][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 73.231650][ T6492] __sys_bpf+0xfc6/0x49a0 [ 73.232785][ T6492] __x64_sys_bpf+0x78/0xc0 [ 73.233954][ T6492] do_syscall_64+0xcd/0x250 [ 73.235307][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.236887][ T6492] page last free pid 34 tgid 34 stack trace: [ 73.238524][ T6492] free_unref_page+0x5f4/0xdc0 [ 73.239996][ T6492] rcu_core+0x79d/0x14d0 [ 73.241304][ T6492] handle_softirqs+0x213/0x8f0 [ 73.242777][ T6492] run_ksoftirqd+0x3a/0x60 [ 73.244073][ T6492] smpboot_thread_fn+0x661/0xa30 [ 73.245423][ T6492] kthread+0x2c1/0x3a0 [ 73.246532][ T6492] ret_from_fork+0x45/0x80 [ 73.247711][ T6492] ret_from_fork_asm+0x1a/0x30 [ 73.248973][ T6492] Modules linked in: [ 73.249988][ T6492] CPU: 3 UID: 0 PID: 6492 Comm: syz.1.132 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 73.253290][ T6492] Tainted: [B]=BAD_PAGE [ 73.254420][ T6492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 73.257339][ T6492] Call Trace: [ 73.258243][ T6492] [ 73.259040][ T6492] dump_stack_lvl+0x16c/0x1f0 [ 73.260292][ T6492] bad_page+0xb3/0x1f0 [ 73.261745][ T6492] ? __pfx_bad_page+0x10/0x10 [ 73.263236][ T6492] ? page_bad_reason+0x9d/0x1e0 [ 73.264687][ T6492] free_unref_page+0x657/0xdc0 [ 73.266205][ T6492] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 73.267927][ T6492] ? __phys_addr+0xc6/0x150 [ 73.269630][ T6492] skb_free_head+0xa0/0x1d0 [ 73.270938][ T6492] skb_release_data+0x560/0x730 [ 73.272382][ T6492] sk_skb_reason_drop+0x129/0x1a0 [ 73.273814][ T6492] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 73.275700][ T6492] ? kernel_text_address+0x8d/0x100 [ 73.277133][ T6492] ? hlock_class+0x4e/0x130 [ 73.278389][ T6492] ? __lock_acquire+0x163e/0x3ce0 [ 73.279715][ T6492] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 73.281574][ T6492] ? hlock_class+0x4e/0x130 [ 73.282727][ T6492] ? __lock_acquire+0xbdd/0x3ce0 [ 73.284037][ T6492] ? __pfx___lock_acquire+0x10/0x10 [ 73.285408][ T6492] __netif_receive_skb_list_core+0x357/0x950 [ 73.286998][ T6492] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 73.288675][ T6492] ? trace_lock_acquire+0x14a/0x1d0 [ 73.290023][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 73.291621][ T6492] ? lock_acquire+0x2f/0xb0 [ 73.292813][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 73.294462][ T6492] netif_receive_skb_list_internal+0x753/0xdb0 [ 73.296103][ T6492] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 73.297917][ T6492] ? __pfx_eth_type_trans+0x10/0x10 [ 73.299303][ T6492] ? __build_skb_around+0x278/0x3b0 [ 73.300640][ T6492] netif_receive_skb_list+0x4f/0x4a0 [ 73.302029][ T6492] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 73.303655][ T6492] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 73.305357][ T6492] ? bpf_test_timer_continue+0x150/0x3d0 [ 73.306989][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 73.308391][ T6492] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 73.309940][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 73.311637][ T6492] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 73.313203][ T6492] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 73.314756][ T6492] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 73.316155][ T6492] ? 0xffffffffa0004340 [ 73.317232][ T6492] ? 0xffffffffa0004340 [ 73.318394][ T6492] ? 0xffffffffa0004340 [ 73.319559][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 73.321388][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 73.322970][ T6492] ? lock_acquire+0x2f/0xb0 [ 73.324740][ T6492] ? __fget_files+0x40/0x3f0 [ 73.326233][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 73.328037][ T6492] ? fput+0x30/0x390 [ 73.329270][ T6492] ? __bpf_prog_get+0xa0/0x290 [ 73.330774][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 73.332493][ T6492] __sys_bpf+0xfc6/0x49a0 [ 73.333668][ T6492] ? __pfx_futex_wake+0x10/0x10 [ 73.334989][ T6492] ? finish_task_switch.isra.0+0x2e8/0xcc0 [ 73.336514][ T6492] ? __pfx___sys_bpf+0x10/0x10 [ 73.337733][ T6492] ? __schedule+0xe5d/0x5730 [ 73.338930][ T6492] ? __fget_files+0x23a/0x3f0 [ 73.340259][ T6492] ? do_futex+0x123/0x350 [ 73.341558][ T6492] ? __pfx_do_futex+0x10/0x10 [ 73.343266][ T6492] ? xfd_validate_state+0x5d/0x180 [ 73.344573][ T6492] ? rcu_is_watching+0x12/0xc0 [ 73.345795][ T6492] __x64_sys_bpf+0x78/0xc0 [ 73.346981][ T6492] ? lockdep_hardirqs_on+0x7c/0x110 [ 73.348550][ T6492] do_syscall_64+0xcd/0x250 [ 73.349795][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.351782][ T6492] RIP: 0033:0x7f475a17e719 [ 73.353087][ T6492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.359251][ T6492] RSP: 002b:00007f475b009038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 73.361917][ T6492] RAX: ffffffffffffffda RBX: 00007f475a336058 RCX: 00007f475a17e719 [ 73.363996][ T6492] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 73.366409][ T6492] RBP: 00007f475a1f132e R08: 0000000000000000 R09: 0000000000000000 [ 73.368513][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.370617][ T6492] R13: 0000000000000000 R14: 00007f475a336058 R15: 00007ffe2d0f8dd8 [ 73.372704][ T6492] [ 73.373615][ T6492] BUG: Bad page state in process syz.1.132 pfn:2c67f [ 73.375414][ T6492] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000002 pfn:0x2c67f [ 73.378013][ T6492] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 73.379919][ T6492] raw: 00fff00000000000 dead000000000040 ffff88804c173000 0000000000000000 [ 73.382130][ T6492] raw: ffff888000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 73.384378][ T6492] page dumped because: page_pool leak [ 73.386170][ T6492] page_owner tracks the page as allocated [ 73.387665][ T6492] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6492, tgid 6486 (syz.1.132), ts 70655541724, free_ts 70607468704 [ 73.391964][ T6492] post_alloc_hook+0x2d1/0x350 [ 73.393350][ T6492] get_page_from_freelist+0x101e/0x3070 [ 73.395002][ T6492] __alloc_pages_noprof+0x223/0x25a0 [ 73.396359][ T6492] alloc_pages_bulk_noprof+0x77c/0x1110 [ 73.397798][ T6492] __page_pool_alloc_pages_slow+0x18f/0x770 [ 73.399346][ T6492] page_pool_alloc_netmem+0xc4/0x160 [ 73.400859][ T6492] page_pool_alloc_pages+0x1a/0x60 [ 73.402228][ T6492] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 73.403968][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 73.405634][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 73.407595][ T6492] __sys_bpf+0xfc6/0x49a0 [ 73.408814][ T6492] __x64_sys_bpf+0x78/0xc0 [ 73.410332][ T6492] do_syscall_64+0xcd/0x250 [ 73.411622][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.413275][ T6492] page last free pid 34 tgid 34 stack trace: [ 73.415029][ T6492] free_unref_page+0x5f4/0xdc0 [ 73.416426][ T6492] __folio_put+0x30d/0x3d0 [ 73.417663][ T6492] free_page_and_swap_cache+0x249/0x2c0 [ 73.419120][ T6492] tlb_remove_table_rcu+0x89/0xe0 [ 73.420435][ T6492] rcu_core+0x79d/0x14d0 [ 73.421544][ T6492] handle_softirqs+0x213/0x8f0 [ 73.422801][ T6492] run_ksoftirqd+0x3a/0x60 [ 73.423984][ T6492] smpboot_thread_fn+0x661/0xa30 [ 73.425536][ T6492] kthread+0x2c1/0x3a0 [ 73.426637][ T6492] ret_from_fork+0x45/0x80 [ 73.428044][ T6492] ret_from_fork_asm+0x1a/0x30 [ 73.429414][ T6492] Modules linked in: [ 73.430547][ T6492] CPU: 3 UID: 0 PID: 6492 Comm: syz.1.132 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 73.433743][ T6492] Tainted: [B]=BAD_PAGE [ 73.434872][ T6492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 73.437636][ T6492] Call Trace: [ 73.438514][ T6492] [ 73.439295][ T6492] dump_stack_lvl+0x16c/0x1f0 [ 73.440541][ T6492] bad_page+0xb3/0x1f0 [ 73.441616][ T6492] ? __pfx_bad_page+0x10/0x10 [ 73.442841][ T6492] ? page_bad_reason+0x9d/0x1e0 [ 73.444123][ T6492] free_unref_page+0x657/0xdc0 [ 73.445384][ T6492] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 73.447157][ T6492] ? __phys_addr+0xc6/0x150 [ 73.448460][ T6492] skb_free_head+0xa0/0x1d0 [ 73.449728][ T6492] skb_release_data+0x560/0x730 [ 73.451142][ T6492] sk_skb_reason_drop+0x129/0x1a0 [ 73.452490][ T6492] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 73.454252][ T6492] ? kernel_text_address+0x8d/0x100 [ 73.455674][ T6492] ? hlock_class+0x4e/0x130 [ 73.456932][ T6492] ? __lock_acquire+0x163e/0x3ce0 [ 73.458322][ T6492] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 73.460219][ T6492] ? hlock_class+0x4e/0x130 [ 73.461422][ T6492] ? __lock_acquire+0xbdd/0x3ce0 [ 73.462723][ T6492] ? __pfx___lock_acquire+0x10/0x10 [ 73.464549][ T6492] __netif_receive_skb_list_core+0x357/0x950 [ 73.466374][ T6492] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 73.468113][ T6492] ? trace_lock_acquire+0x14a/0x1d0 [ 73.469876][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 73.471684][ T6492] ? lock_acquire+0x2f/0xb0 [ 73.472904][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 73.474599][ T6492] netif_receive_skb_list_internal+0x753/0xdb0 [ 73.476323][ T6492] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 73.478192][ T6492] ? __pfx_eth_type_trans+0x10/0x10 [ 73.479625][ T6492] ? __build_skb_around+0x278/0x3b0 [ 73.481010][ T6492] netif_receive_skb_list+0x4f/0x4a0 [ 73.482375][ T6492] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 73.484060][ T6492] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 73.486009][ T6492] ? bpf_test_timer_continue+0x150/0x3d0 [ 73.487604][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 73.489007][ T6492] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 73.490597][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 73.492232][ T6492] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 73.494220][ T6492] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 73.495756][ T6492] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 73.497206][ T6492] ? 0xffffffffa0004340 [ 73.498400][ T6492] ? 0xffffffffa0004340 [ 73.499591][ T6492] ? 0xffffffffa0004340 [ 73.500935][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 73.502485][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 73.504132][ T6492] ? lock_acquire+0x2f/0xb0 [ 73.506045][ T6492] ? __fget_files+0x40/0x3f0 [ 73.507605][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 73.509366][ T6492] ? fput+0x30/0x390 [ 73.510584][ T6492] ? __bpf_prog_get+0xa0/0x290 [ 73.511971][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 73.513539][ T6492] __sys_bpf+0xfc6/0x49a0 [ 73.514905][ T6492] ? __pfx_futex_wake+0x10/0x10 [ 73.516319][ T6492] ? finish_task_switch.isra.0+0x2e8/0xcc0 [ 73.517850][ T6492] ? __pfx___sys_bpf+0x10/0x10 [ 73.519496][ T6492] ? __schedule+0xe5d/0x5730 [ 73.520952][ T6492] ? __fget_files+0x23a/0x3f0 [ 73.522335][ T6492] ? do_futex+0x123/0x350 [ 73.523661][ T6492] ? __pfx_do_futex+0x10/0x10 [ 73.525157][ T6492] ? xfd_validate_state+0x5d/0x180 [ 73.526587][ T6492] ? rcu_is_watching+0x12/0xc0 [ 73.527864][ T6492] __x64_sys_bpf+0x78/0xc0 [ 73.529046][ T6492] ? lockdep_hardirqs_on+0x7c/0x110 [ 73.530429][ T6492] do_syscall_64+0xcd/0x250 [ 73.531643][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.533214][ T6492] RIP: 0033:0x7f475a17e719 [ 73.534375][ T6492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.539673][ T6492] RSP: 002b:00007f475b009038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 73.541995][ T6492] RAX: ffffffffffffffda RBX: 00007f475a336058 RCX: 00007f475a17e719 [ 73.544260][ T6492] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 73.546505][ T6492] RBP: 00007f475a1f132e R08: 0000000000000000 R09: 0000000000000000 [ 73.548917][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.551053][ T6492] R13: 0000000000000000 R14: 00007f475a336058 R15: 00007ffe2d0f8dd8 [ 73.553146][ T6492] [ 73.554094][ T6492] BUG: Bad page state in process syz.1.132 pfn:4db4b [ 73.555900][ T6492] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2 pfn:0x4db4b [ 73.558296][ T6492] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 73.560294][ T6492] raw: 00fff00000000000 dead000000000040 ffff88804c173000 0000000000000000 [ 73.562723][ T6492] raw: 0000000000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 73.565329][ T6492] page dumped because: page_pool leak [ 73.567121][ T6492] page_owner tracks the page as allocated [ 73.569081][ T6492] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6492, tgid 6486 (syz.1.132), ts 70655536952, free_ts 70607476740 [ 73.573949][ T6492] post_alloc_hook+0x2d1/0x350 [ 73.575459][ T6492] get_page_from_freelist+0x101e/0x3070 [ 73.577137][ T6492] __alloc_pages_noprof+0x223/0x25a0 [ 73.578773][ T6492] alloc_pages_bulk_noprof+0x77c/0x1110 [ 73.580661][ T6492] __page_pool_alloc_pages_slow+0x18f/0x770 [ 73.582885][ T6492] page_pool_alloc_netmem+0xc4/0x160 [ 73.584295][ T6492] page_pool_alloc_pages+0x1a/0x60 [ 73.585749][ T6492] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 73.587596][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 73.589018][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 73.590450][ T6492] __sys_bpf+0xfc6/0x49a0 [ 73.591598][ T6492] __x64_sys_bpf+0x78/0xc0 [ 73.592779][ T6492] do_syscall_64+0xcd/0x250 [ 73.593894][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.595480][ T6492] page last free pid 34 tgid 34 stack trace: [ 73.597208][ T6492] free_unref_page+0x5f4/0xdc0 [ 73.598491][ T6492] __folio_put+0x30d/0x3d0 [ 73.599661][ T6492] free_page_and_swap_cache+0x249/0x2c0 [ 73.601190][ T6492] tlb_remove_table_rcu+0x89/0xe0 [ 73.602607][ T6492] rcu_core+0x79d/0x14d0 [ 73.603912][ T6492] handle_softirqs+0x213/0x8f0 [ 73.605387][ T6492] run_ksoftirqd+0x3a/0x60 [ 73.606818][ T6492] smpboot_thread_fn+0x661/0xa30 [ 73.608655][ T6492] kthread+0x2c1/0x3a0 [ 73.609858][ T6492] ret_from_fork+0x45/0x80 [ 73.611206][ T6492] ret_from_fork_asm+0x1a/0x30 [ 73.612498][ T6492] Modules linked in: [ 73.613604][ T6492] CPU: 3 UID: 0 PID: 6492 Comm: syz.1.132 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 73.616979][ T6492] Tainted: [B]=BAD_PAGE [ 73.618143][ T6492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 73.621322][ T6492] Call Trace: [ 73.622230][ T6492] [ 73.623006][ T6492] dump_stack_lvl+0x16c/0x1f0 [ 73.624274][ T6492] bad_page+0xb3/0x1f0 [ 73.625344][ T6492] ? __pfx_bad_page+0x10/0x10 [ 73.626596][ T6492] ? page_bad_reason+0x9d/0x1e0 [ 73.627841][ T6492] free_unref_page+0x657/0xdc0 [ 73.629097][ T6492] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 73.630698][ T6492] ? __phys_addr+0xc6/0x150 [ 73.631910][ T6492] skb_free_head+0xa0/0x1d0 [ 73.633206][ T6492] skb_release_data+0x560/0x730 [ 73.634546][ T6492] sk_skb_reason_drop+0x129/0x1a0 [ 73.635895][ T6492] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 73.637638][ T6492] ? kernel_text_address+0x8d/0x100 [ 73.638998][ T6492] ? hlock_class+0x4e/0x130 [ 73.640603][ T6492] ? __lock_acquire+0x163e/0x3ce0 [ 73.641944][ T6492] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 73.644530][ T6492] ? hlock_class+0x4e/0x130 [ 73.645743][ T6492] ? __lock_acquire+0xbdd/0x3ce0 [ 73.647164][ T6492] ? __pfx___lock_acquire+0x10/0x10 [ 73.648572][ T6492] __netif_receive_skb_list_core+0x357/0x950 [ 73.650319][ T6492] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 73.652045][ T6492] ? trace_lock_acquire+0x14a/0x1d0 [ 73.653440][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 73.655145][ T6492] ? lock_acquire+0x2f/0xb0 [ 73.656371][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 73.658395][ T6492] netif_receive_skb_list_internal+0x753/0xdb0 [ 73.660303][ T6492] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 73.662846][ T6492] ? __pfx_eth_type_trans+0x10/0x10 [ 73.664544][ T6492] ? __build_skb_around+0x278/0x3b0 [ 73.666478][ T6492] netif_receive_skb_list+0x4f/0x4a0 [ 73.668133][ T6492] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 73.669959][ T6492] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 73.671709][ T6492] ? bpf_test_timer_continue+0x150/0x3d0 [ 73.673211][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 73.674624][ T6492] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 73.676160][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 73.677687][ T6492] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 73.679218][ T6492] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 73.680760][ T6492] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 73.682137][ T6492] ? 0xffffffffa0004340 [ 73.683456][ T6492] ? 0xffffffffa0004340 [ 73.684497][ T6492] ? 0xffffffffa0004340 [ 73.685540][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 73.687063][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 73.688437][ T6492] ? lock_acquire+0x2f/0xb0 [ 73.689594][ T6492] ? __fget_files+0x40/0x3f0 [ 73.690772][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 73.692420][ T6492] ? fput+0x30/0x390 [ 73.693472][ T6492] ? __bpf_prog_get+0xa0/0x290 [ 73.694758][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 73.696319][ T6492] __sys_bpf+0xfc6/0x49a0 [ 73.697473][ T6492] ? __pfx_futex_wake+0x10/0x10 [ 73.698790][ T6492] ? finish_task_switch.isra.0+0x2e8/0xcc0 [ 73.700340][ T6492] ? __pfx___sys_bpf+0x10/0x10 [ 73.701607][ T6492] ? __schedule+0xe5d/0x5730 [ 73.703116][ T6492] ? __fget_files+0x23a/0x3f0 [ 73.704625][ T6492] ? do_futex+0x123/0x350 [ 73.705864][ T6492] ? __pfx_do_futex+0x10/0x10 [ 73.707275][ T6492] ? xfd_validate_state+0x5d/0x180 [ 73.708888][ T6492] ? rcu_is_watching+0x12/0xc0 [ 73.710333][ T6492] __x64_sys_bpf+0x78/0xc0 [ 73.711669][ T6492] ? lockdep_hardirqs_on+0x7c/0x110 [ 73.713323][ T6492] do_syscall_64+0xcd/0x250 [ 73.714776][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.716568][ T6492] RIP: 0033:0x7f475a17e719 [ 73.717765][ T6492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.723050][ T6492] RSP: 002b:00007f475b009038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 73.725237][ T6492] RAX: ffffffffffffffda RBX: 00007f475a336058 RCX: 00007f475a17e719 [ 73.727292][ T6492] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 73.729391][ T6492] RBP: 00007f475a1f132e R08: 0000000000000000 R09: 0000000000000000 [ 73.731715][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.733825][ T6492] R13: 0000000000000000 R14: 00007f475a336058 R15: 00007ffe2d0f8dd8 [ 73.736033][ T6492] [ 73.736998][ T6492] BUG: Bad page state in process syz.1.132 pfn:4baca [ 73.738888][ T6492] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804bacbe00 pfn:0x4baca [ 73.741721][ T6492] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 73.744033][ T6492] raw: 00fff00000000000 dead000000000040 ffff88804c173000 0000000000000000 [ 73.746339][ T6492] raw: ffff88804bacbe00 0000000000000001 00000000ffffffff 0000000000000000 [ 73.748627][ T6492] page dumped because: page_pool leak [ 73.750237][ T6492] page_owner tracks the page as allocated [ 73.752221][ T6492] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6492, tgid 6486 (syz.1.132), ts 70655532328, free_ts 70607481630 [ 73.757116][ T6492] post_alloc_hook+0x2d1/0x350 [ 73.758503][ T6492] get_page_from_freelist+0x101e/0x3070 [ 73.760206][ T6492] __alloc_pages_noprof+0x223/0x25a0 [ 73.761969][ T6492] alloc_pages_bulk_noprof+0x77c/0x1110 [ 73.763734][ T6492] __page_pool_alloc_pages_slow+0x18f/0x770 [ 73.765543][ T6492] page_pool_alloc_netmem+0xc4/0x160 [ 73.767055][ T6492] page_pool_alloc_pages+0x1a/0x60 [ 73.768411][ T6492] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 73.770014][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 73.771414][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 73.772814][ T6492] __sys_bpf+0xfc6/0x49a0 [ 73.773982][ T6492] __x64_sys_bpf+0x78/0xc0 [ 73.775473][ T6492] do_syscall_64+0xcd/0x250 [ 73.776717][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.778304][ T6492] page last free pid 34 tgid 34 stack trace: [ 73.779869][ T6492] free_unref_page+0x5f4/0xdc0 [ 73.781135][ T6492] __folio_put+0x30d/0x3d0 [ 73.782319][ T6492] free_page_and_swap_cache+0x249/0x2c0 [ 73.783769][ T6492] tlb_remove_table_rcu+0x89/0xe0 [ 73.785351][ T6492] rcu_core+0x79d/0x14d0 [ 73.786521][ T6492] handle_softirqs+0x213/0x8f0 [ 73.787793][ T6492] run_ksoftirqd+0x3a/0x60 [ 73.788946][ T6492] smpboot_thread_fn+0x661/0xa30 [ 73.790267][ T6492] kthread+0x2c1/0x3a0 [ 73.791357][ T6492] ret_from_fork+0x45/0x80 [ 73.792517][ T6492] ret_from_fork_asm+0x1a/0x30 [ 73.793856][ T6492] Modules linked in: [ 73.794997][ T6492] CPU: 3 UID: 0 PID: 6492 Comm: syz.1.132 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 73.797973][ T6492] Tainted: [B]=BAD_PAGE [ 73.799058][ T6492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 73.802084][ T6492] Call Trace: [ 73.802990][ T6492] [ 73.803793][ T6492] dump_stack_lvl+0x16c/0x1f0 [ 73.805586][ T6492] bad_page+0xb3/0x1f0 [ 73.806797][ T6492] ? __pfx_bad_page+0x10/0x10 [ 73.808117][ T6492] ? page_bad_reason+0x9d/0x1e0 [ 73.809574][ T6492] free_unref_page+0x657/0xdc0 [ 73.811013][ T6492] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 73.812635][ T6492] ? __phys_addr+0xc6/0x150 [ 73.813870][ T6492] skb_free_head+0xa0/0x1d0 [ 73.815103][ T6492] skb_release_data+0x560/0x730 [ 73.816404][ T6492] sk_skb_reason_drop+0x129/0x1a0 [ 73.817742][ T6492] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 73.819623][ T6492] ? kernel_text_address+0x8d/0x100 [ 73.821071][ T6492] ? hlock_class+0x4e/0x130 [ 73.822476][ T6492] ? __lock_acquire+0x163e/0x3ce0 [ 73.824030][ T6492] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 73.826854][ T6492] ? hlock_class+0x4e/0x130 [ 73.828573][ T6492] ? __lock_acquire+0xbdd/0x3ce0 [ 73.829958][ T6492] ? __pfx___lock_acquire+0x10/0x10 [ 73.831362][ T6492] __netif_receive_skb_list_core+0x357/0x950 [ 73.832963][ T6492] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 73.834671][ T6492] ? trace_lock_acquire+0x14a/0x1d0 [ 73.836061][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 73.837721][ T6492] ? lock_acquire+0x2f/0xb0 [ 73.838936][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 73.840766][ T6492] netif_receive_skb_list_internal+0x753/0xdb0 [ 73.842446][ T6492] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 73.844225][ T6492] ? __pfx_eth_type_trans+0x10/0x10 [ 73.845613][ T6492] ? __build_skb_around+0x278/0x3b0 [ 73.847297][ T6492] netif_receive_skb_list+0x4f/0x4a0 [ 73.848765][ T6492] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 73.850544][ T6492] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 73.852264][ T6492] ? bpf_test_timer_continue+0x150/0x3d0 [ 73.853725][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 73.855173][ T6492] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 73.856775][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 73.858344][ T6492] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 73.859887][ T6492] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 73.861943][ T6492] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 73.863575][ T6492] ? 0xffffffffa0004340 [ 73.864852][ T6492] ? 0xffffffffa0004340 [ 73.865944][ T6492] ? 0xffffffffa0004340 [ 73.867068][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 73.868818][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 73.870567][ T6492] ? lock_acquire+0x2f/0xb0 [ 73.872040][ T6492] ? __fget_files+0x40/0x3f0 [ 73.873376][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 73.874964][ T6492] ? fput+0x30/0x390 [ 73.875998][ T6492] ? __bpf_prog_get+0xa0/0x290 [ 73.877264][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 73.878828][ T6492] __sys_bpf+0xfc6/0x49a0 [ 73.879980][ T6492] ? __pfx_futex_wake+0x10/0x10 [ 73.881639][ T6492] ? finish_task_switch.isra.0+0x2e8/0xcc0 [ 73.883462][ T6492] ? __pfx___sys_bpf+0x10/0x10 [ 73.884956][ T6492] ? __schedule+0xe5d/0x5730 [ 73.886209][ T6492] ? __fget_files+0x23a/0x3f0 [ 73.887455][ T6492] ? do_futex+0x123/0x350 [ 73.888619][ T6492] ? __pfx_do_futex+0x10/0x10 [ 73.889960][ T6492] ? xfd_validate_state+0x5d/0x180 [ 73.891485][ T6492] ? rcu_is_watching+0x12/0xc0 [ 73.892917][ T6492] __x64_sys_bpf+0x78/0xc0 [ 73.894314][ T6492] ? lockdep_hardirqs_on+0x7c/0x110 [ 73.896142][ T6492] do_syscall_64+0xcd/0x250 [ 73.897374][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.898934][ T6492] RIP: 0033:0x7f475a17e719 [ 73.900115][ T6492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.905053][ T6492] RSP: 002b:00007f475b009038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 73.907196][ T6492] RAX: ffffffffffffffda RBX: 00007f475a336058 RCX: 00007f475a17e719 [ 73.909184][ T6492] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 73.911179][ T6492] RBP: 00007f475a1f132e R08: 0000000000000000 R09: 0000000000000000 [ 73.913220][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.915310][ T6492] R13: 0000000000000000 R14: 00007f475a336058 R15: 00007ffe2d0f8dd8 [ 73.917386][ T6492] [ 73.918316][ T6492] BUG: Bad page state in process syz.1.132 pfn:24bbf [ 73.920115][ T6492] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888024bbf7c0 pfn:0x24bbf [ 73.922939][ T6492] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 73.924932][ T6492] raw: 00fff00000000000 dead000000000040 ffff88804c173000 0000000000000000 [ 73.927341][ T6492] raw: ffff888024bbf7c0 0000000000000001 00000000ffffffff 0000000000000000 [ 73.929824][ T6492] page dumped because: page_pool leak [ 73.931448][ T6492] page_owner tracks the page as allocated [ 73.933065][ T6492] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6492, tgid 6486 (syz.1.132), ts 70655527568, free_ts 70607485253 [ 73.937424][ T6492] post_alloc_hook+0x2d1/0x350 [ 73.938716][ T6492] get_page_from_freelist+0x101e/0x3070 [ 73.940191][ T6492] __alloc_pages_noprof+0x223/0x25a0 [ 73.941574][ T6492] alloc_pages_bulk_noprof+0x77c/0x1110 [ 73.943197][ T6492] __page_pool_alloc_pages_slow+0x18f/0x770 [ 73.944915][ T6492] page_pool_alloc_netmem+0xc4/0x160 [ 73.946320][ T6492] page_pool_alloc_pages+0x1a/0x60 [ 73.947807][ T6492] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 73.949494][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 73.950954][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 73.952406][ T6492] __sys_bpf+0xfc6/0x49a0 [ 73.953548][ T6492] __x64_sys_bpf+0x78/0xc0 [ 73.954954][ T6492] do_syscall_64+0xcd/0x250 [ 73.956169][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.957716][ T6492] page last free pid 34 tgid 34 stack trace: [ 73.959308][ T6492] free_unref_page+0x5f4/0xdc0 [ 73.960923][ T6492] __folio_put+0x30d/0x3d0 [ 73.962343][ T6492] free_page_and_swap_cache+0x249/0x2c0 [ 73.963788][ T6492] tlb_remove_table_rcu+0x89/0xe0 [ 73.965365][ T6492] rcu_core+0x79d/0x14d0 [ 73.966713][ T6492] handle_softirqs+0x213/0x8f0 [ 73.968189][ T6492] run_ksoftirqd+0x3a/0x60 [ 73.969486][ T6492] smpboot_thread_fn+0x661/0xa30 [ 73.971008][ T6492] kthread+0x2c1/0x3a0 [ 73.972155][ T6492] ret_from_fork+0x45/0x80 [ 73.973346][ T6492] ret_from_fork_asm+0x1a/0x30 [ 73.974652][ T6492] Modules linked in: [ 73.975762][ T6492] CPU: 3 UID: 0 PID: 6492 Comm: syz.1.132 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 73.978985][ T6492] Tainted: [B]=BAD_PAGE [ 73.980112][ T6492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 73.983258][ T6492] Call Trace: [ 73.984284][ T6492] [ 73.985113][ T6492] dump_stack_lvl+0x16c/0x1f0 [ 73.986445][ T6492] bad_page+0xb3/0x1f0 [ 73.987583][ T6492] ? __pfx_bad_page+0x10/0x10 [ 73.988854][ T6492] ? page_bad_reason+0x9d/0x1e0 [ 73.990190][ T6492] free_unref_page+0x657/0xdc0 [ 73.991609][ T6492] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 73.993228][ T6492] ? __phys_addr+0xc6/0x150 [ 73.994468][ T6492] skb_free_head+0xa0/0x1d0 [ 73.995691][ T6492] skb_release_data+0x560/0x730 [ 73.996991][ T6492] sk_skb_reason_drop+0x129/0x1a0 [ 73.998318][ T6492] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 74.000073][ T6492] ? kernel_text_address+0x8d/0x100 [ 74.001599][ T6492] ? hlock_class+0x4e/0x130 [ 74.003145][ T6492] ? __lock_acquire+0x163e/0x3ce0 [ 74.004803][ T6492] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 74.007942][ T6492] ? hlock_class+0x4e/0x130 [ 74.009533][ T6492] ? __lock_acquire+0xbdd/0x3ce0 [ 74.010972][ T6492] ? __pfx___lock_acquire+0x10/0x10 [ 74.012384][ T6492] __netif_receive_skb_list_core+0x357/0x950 [ 74.013992][ T6492] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 74.015735][ T6492] ? trace_lock_acquire+0x14a/0x1d0 [ 74.017122][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 74.018808][ T6492] ? lock_acquire+0x2f/0xb0 [ 74.020025][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 74.021826][ T6492] netif_receive_skb_list_internal+0x753/0xdb0 [ 74.023470][ T6492] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 74.025351][ T6492] ? __pfx_eth_type_trans+0x10/0x10 [ 74.026787][ T6492] ? __build_skb_around+0x278/0x3b0 [ 74.028260][ T6492] netif_receive_skb_list+0x4f/0x4a0 [ 74.029684][ T6492] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 74.031355][ T6492] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 74.033089][ T6492] ? bpf_test_timer_continue+0x150/0x3d0 [ 74.034584][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 74.036069][ T6492] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 74.037622][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 74.039192][ T6492] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 74.040929][ T6492] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 74.042793][ T6492] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 74.044224][ T6492] ? 0xffffffffa0004340 [ 74.045314][ T6492] ? 0xffffffffa0004340 [ 74.046443][ T6492] ? 0xffffffffa0004340 [ 74.047545][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 74.049100][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 74.050635][ T6492] ? lock_acquire+0x2f/0xb0 [ 74.051841][ T6492] ? __fget_files+0x40/0x3f0 [ 74.053069][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 74.054625][ T6492] ? fput+0x30/0x390 [ 74.055670][ T6492] ? __bpf_prog_get+0xa0/0x290 [ 74.056928][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 74.058451][ T6492] __sys_bpf+0xfc6/0x49a0 [ 74.059598][ T6492] ? __pfx_futex_wake+0x10/0x10 [ 74.060885][ T6492] ? finish_task_switch.isra.0+0x2e8/0xcc0 [ 74.062644][ T6492] ? __pfx___sys_bpf+0x10/0x10 [ 74.063928][ T6492] ? __schedule+0xe5d/0x5730 [ 74.065309][ T6492] ? __fget_files+0x23a/0x3f0 [ 74.066676][ T6492] ? do_futex+0x123/0x350 [ 74.067902][ T6492] ? __pfx_do_futex+0x10/0x10 [ 74.069439][ T6492] ? xfd_validate_state+0x5d/0x180 [ 74.071312][ T6492] ? rcu_is_watching+0x12/0xc0 [ 74.073097][ T6492] __x64_sys_bpf+0x78/0xc0 [ 74.074653][ T6492] ? lockdep_hardirqs_on+0x7c/0x110 [ 74.076389][ T6492] do_syscall_64+0xcd/0x250 [ 74.077608][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.079181][ T6492] RIP: 0033:0x7f475a17e719 [ 74.080599][ T6492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.086161][ T6492] RSP: 002b:00007f475b009038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 74.088450][ T6492] RAX: ffffffffffffffda RBX: 00007f475a336058 RCX: 00007f475a17e719 [ 74.090485][ T6492] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 74.092560][ T6492] RBP: 00007f475a1f132e R08: 0000000000000000 R09: 0000000000000000 [ 74.094732][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.096808][ T6492] R13: 0000000000000000 R14: 00007f475a336058 R15: 00007ffe2d0f8dd8 [ 74.098895][ T6492] [ 74.099807][ T6492] BUG: Bad page state in process syz.1.132 pfn:499e0 [ 74.101705][ T6492] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880499e1e00 pfn:0x499e0 [ 74.104691][ T6492] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 74.107196][ T6492] raw: 00fff00000000000 dead000000000040 ffff88804c173000 0000000000000000 [ 74.109843][ T6492] raw: ffff8880499e1e00 0000000000000001 00000000ffffffff 0000000000000000 [ 74.112344][ T6492] page dumped because: page_pool leak [ 74.113790][ T6492] page_owner tracks the page as allocated [ 74.115467][ T6492] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6492, tgid 6486 (syz.1.132), ts 70655522707, free_ts 70607488905 [ 74.120314][ T6492] post_alloc_hook+0x2d1/0x350 [ 74.122103][ T6492] get_page_from_freelist+0x101e/0x3070 [ 74.124317][ T6492] __alloc_pages_noprof+0x223/0x25a0 [ 74.126186][ T6492] alloc_pages_bulk_noprof+0x77c/0x1110 [ 74.127695][ T6492] __page_pool_alloc_pages_slow+0x18f/0x770 [ 74.129297][ T6492] page_pool_alloc_netmem+0xc4/0x160 [ 74.130735][ T6492] page_pool_alloc_pages+0x1a/0x60 [ 74.132129][ T6492] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 74.133935][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 74.135441][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 74.136848][ T6492] __sys_bpf+0xfc6/0x49a0 [ 74.137981][ T6492] __x64_sys_bpf+0x78/0xc0 [ 74.139180][ T6492] do_syscall_64+0xcd/0x250 [ 74.140387][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.142138][ T6492] page last free pid 34 tgid 34 stack trace: [ 74.143893][ T6492] free_unref_page+0x5f4/0xdc0 [ 74.145515][ T6492] __folio_put+0x30d/0x3d0 [ 74.146789][ T6492] free_page_and_swap_cache+0x249/0x2c0 [ 74.148463][ T6492] tlb_remove_table_rcu+0x89/0xe0 [ 74.149804][ T6492] rcu_core+0x79d/0x14d0 [ 74.151019][ T6492] handle_softirqs+0x213/0x8f0 [ 74.152329][ T6492] run_ksoftirqd+0x3a/0x60 [ 74.153497][ T6492] smpboot_thread_fn+0x661/0xa30 [ 74.154890][ T6492] kthread+0x2c1/0x3a0 [ 74.155956][ T6492] ret_from_fork+0x45/0x80 [ 74.157127][ T6492] ret_from_fork_asm+0x1a/0x30 [ 74.158394][ T6492] Modules linked in: [ 74.159520][ T6492] CPU: 3 UID: 0 PID: 6492 Comm: syz.1.132 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 74.162593][ T6492] Tainted: [B]=BAD_PAGE [ 74.163622][ T6492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 74.166383][ T6492] Call Trace: [ 74.167317][ T6492] [ 74.168102][ T6492] dump_stack_lvl+0x16c/0x1f0 [ 74.169364][ T6492] bad_page+0xb3/0x1f0 [ 74.170549][ T6492] ? __pfx_bad_page+0x10/0x10 [ 74.172058][ T6492] ? page_bad_reason+0x9d/0x1e0 [ 74.173519][ T6492] free_unref_page+0x657/0xdc0 [ 74.174955][ T6492] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 74.176638][ T6492] ? __phys_addr+0xc6/0x150 [ 74.177889][ T6492] skb_free_head+0xa0/0x1d0 [ 74.179212][ T6492] skb_release_data+0x560/0x730 [ 74.180505][ T6492] sk_skb_reason_drop+0x129/0x1a0 [ 74.181821][ T6492] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 74.183578][ T6492] ? kernel_text_address+0x8d/0x100 [ 74.184941][ T6492] ? hlock_class+0x4e/0x130 [ 74.186168][ T6492] ? __lock_acquire+0x163e/0x3ce0 [ 74.187495][ T6492] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 74.189344][ T6492] ? hlock_class+0x4e/0x130 [ 74.190552][ T6492] ? __lock_acquire+0xbdd/0x3ce0 [ 74.191852][ T6492] ? __pfx___lock_acquire+0x10/0x10 [ 74.193219][ T6492] __netif_receive_skb_list_core+0x357/0x950 [ 74.194842][ T6492] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 74.196563][ T6492] ? trace_lock_acquire+0x14a/0x1d0 [ 74.197940][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 74.199685][ T6492] ? lock_acquire+0x2f/0xb0 [ 74.200884][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 74.202547][ T6492] netif_receive_skb_list_internal+0x753/0xdb0 [ 74.204394][ T6492] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 74.206504][ T6492] ? __pfx_eth_type_trans+0x10/0x10 [ 74.207885][ T6492] ? __build_skb_around+0x278/0x3b0 [ 74.209389][ T6492] netif_receive_skb_list+0x4f/0x4a0 [ 74.210914][ T6492] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 74.212680][ T6492] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 74.214701][ T6492] ? bpf_test_timer_continue+0x150/0x3d0 [ 74.216315][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 74.217721][ T6492] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 74.219567][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 74.221147][ T6492] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 74.222756][ T6492] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 74.224325][ T6492] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 74.225844][ T6492] ? 0xffffffffa0004340 [ 74.226979][ T6492] ? 0xffffffffa0004340 [ 74.228152][ T6492] ? 0xffffffffa0004340 [ 74.229276][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 74.230913][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 74.232394][ T6492] ? lock_acquire+0x2f/0xb0 [ 74.233833][ T6492] ? __fget_files+0x40/0x3f0 [ 74.235366][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 74.237320][ T6492] ? fput+0x30/0x390 [ 74.238566][ T6492] ? __bpf_prog_get+0xa0/0x290 [ 74.239899][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 74.241791][ T6492] __sys_bpf+0xfc6/0x49a0 [ 74.243276][ T6492] ? __pfx_futex_wake+0x10/0x10 [ 74.244639][ T6492] ? finish_task_switch.isra.0+0x2e8/0xcc0 [ 74.246286][ T6492] ? __pfx___sys_bpf+0x10/0x10 [ 74.247582][ T6492] ? __schedule+0xe5d/0x5730 [ 74.248890][ T6492] ? __fget_files+0x23a/0x3f0 [ 74.250228][ T6492] ? do_futex+0x123/0x350 [ 74.251365][ T6492] ? __pfx_do_futex+0x10/0x10 [ 74.252596][ T6492] ? xfd_validate_state+0x5d/0x180 [ 74.253886][ T6492] ? rcu_is_watching+0x12/0xc0 [ 74.255192][ T6492] __x64_sys_bpf+0x78/0xc0 [ 74.256384][ T6492] ? lockdep_hardirqs_on+0x7c/0x110 [ 74.257819][ T6492] do_syscall_64+0xcd/0x250 [ 74.259183][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.260955][ T6492] RIP: 0033:0x7f475a17e719 [ 74.262348][ T6492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.268528][ T6492] RSP: 002b:00007f475b009038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 74.271014][ T6492] RAX: ffffffffffffffda RBX: 00007f475a336058 RCX: 00007f475a17e719 [ 74.273092][ T6492] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 74.275179][ T6492] RBP: 00007f475a1f132e R08: 0000000000000000 R09: 0000000000000000 [ 74.277242][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.279324][ T6492] R13: 0000000000000000 R14: 00007f475a336058 R15: 00007ffe2d0f8dd8 [ 74.281526][ T6492] [ 74.282596][ T6492] BUG: Bad page state in process syz.1.132 pfn:274a9 [ 74.284443][ T6492] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000002 pfn:0x274a9 [ 74.287099][ T6492] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 74.289137][ T6492] raw: 00fff00000000000 dead000000000040 ffff88804c173000 0000000000000000 [ 74.291481][ T6492] raw: ffff888000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 74.293695][ T6492] page dumped because: page_pool leak [ 74.295176][ T6492] page_owner tracks the page as allocated [ 74.296626][ T6492] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6492, tgid 6486 (syz.1.132), ts 70655517803, free_ts 70607492457 [ 74.300687][ T6492] post_alloc_hook+0x2d1/0x350 [ 74.301930][ T6492] get_page_from_freelist+0x101e/0x3070 [ 74.303528][ T6492] __alloc_pages_noprof+0x223/0x25a0 [ 74.305239][ T6492] alloc_pages_bulk_noprof+0x77c/0x1110 [ 74.306765][ T6492] __page_pool_alloc_pages_slow+0x18f/0x770 [ 74.308598][ T6492] page_pool_alloc_netmem+0xc4/0x160 [ 74.310307][ T6492] page_pool_alloc_pages+0x1a/0x60 [ 74.311816][ T6492] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 74.313575][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 74.315239][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 74.316743][ T6492] __sys_bpf+0xfc6/0x49a0 [ 74.318009][ T6492] __x64_sys_bpf+0x78/0xc0 [ 74.319315][ T6492] do_syscall_64+0xcd/0x250 [ 74.320709][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.322332][ T6492] page last free pid 34 tgid 34 stack trace: [ 74.323851][ T6492] free_unref_page+0x5f4/0xdc0 [ 74.325178][ T6492] __folio_put+0x30d/0x3d0 [ 74.326334][ T6492] free_page_and_swap_cache+0x249/0x2c0 [ 74.327727][ T6492] tlb_remove_table_rcu+0x89/0xe0 [ 74.329038][ T6492] rcu_core+0x79d/0x14d0 [ 74.330127][ T6492] handle_softirqs+0x213/0x8f0 [ 74.331347][ T6492] run_ksoftirqd+0x3a/0x60 [ 74.332524][ T6492] smpboot_thread_fn+0x661/0xa30 [ 74.333828][ T6492] kthread+0x2c1/0x3a0 [ 74.334959][ T6492] ret_from_fork+0x45/0x80 [ 74.336099][ T6492] ret_from_fork_asm+0x1a/0x30 [ 74.337307][ T6492] Modules linked in: [ 74.338320][ T6492] CPU: 3 UID: 0 PID: 6492 Comm: syz.1.132 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 74.341989][ T6492] Tainted: [B]=BAD_PAGE [ 74.343912][ T6492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 74.347220][ T6492] Call Trace: [ 74.348443][ T6492] [ 74.350101][ T6492] dump_stack_lvl+0x16c/0x1f0 [ 74.351768][ T6492] bad_page+0xb3/0x1f0 [ 74.353608][ T6492] ? __pfx_bad_page+0x10/0x10 [ 74.356262][ T6492] ? page_bad_reason+0x9d/0x1e0 [ 74.357728][ T6492] free_unref_page+0x657/0xdc0 [ 74.359185][ T6492] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 74.360820][ T6492] ? __phys_addr+0xc6/0x150 [ 74.363231][ T6492] skb_free_head+0xa0/0x1d0 [ 74.365654][ T6492] skb_release_data+0x560/0x730 [ 74.368137][ T6492] sk_skb_reason_drop+0x129/0x1a0 [ 74.370274][ T6492] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 74.372666][ T6492] ? kernel_text_address+0x8d/0x100 [ 74.374084][ T6492] ? hlock_class+0x4e/0x130 [ 74.376554][ T6492] ? __lock_acquire+0x163e/0x3ce0 [ 74.378144][ T6492] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 74.381396][ T6492] ? hlock_class+0x4e/0x130 [ 74.384880][ T6492] ? __lock_acquire+0xbdd/0x3ce0 [ 74.386433][ T6492] ? __pfx___lock_acquire+0x10/0x10 [ 74.388918][ T6492] __netif_receive_skb_list_core+0x357/0x950 [ 74.390940][ T6492] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 74.393783][ T6492] ? trace_lock_acquire+0x14a/0x1d0 [ 74.395941][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 74.398021][ T6492] ? lock_acquire+0x2f/0xb0 [ 74.399304][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 74.402118][ T6492] netif_receive_skb_list_internal+0x753/0xdb0 [ 74.404795][ T6492] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 74.406593][ T6492] ? __pfx_eth_type_trans+0x10/0x10 [ 74.408580][ T6492] ? __build_skb_around+0x278/0x3b0 [ 74.410541][ T6492] netif_receive_skb_list+0x4f/0x4a0 [ 74.412525][ T6492] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 74.414721][ T6492] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 74.416494][ T6492] ? bpf_test_timer_continue+0x150/0x3d0 [ 74.417999][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 74.419511][ T6492] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 74.422531][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 74.425622][ T6492] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 74.428297][ T6492] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 74.430992][ T6492] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 74.433996][ T6492] ? 0xffffffffa0004340 [ 74.435596][ T6492] ? 0xffffffffa0004340 [ 74.436934][ T6492] ? 0xffffffffa0004340 [ 74.438531][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 74.440272][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 74.441896][ T6492] ? lock_acquire+0x2f/0xb0 [ 74.443133][ T6492] ? __fget_files+0x40/0x3f0 [ 74.444354][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 74.446081][ T6492] ? fput+0x30/0x390 [ 74.447907][ T6492] ? __bpf_prog_get+0xa0/0x290 [ 74.449969][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 74.453338][ T6492] __sys_bpf+0xfc6/0x49a0 [ 74.454616][ T6492] ? __pfx_futex_wake+0x10/0x10 [ 74.455956][ T6492] ? finish_task_switch.isra.0+0x2e8/0xcc0 [ 74.459890][ T6492] ? __pfx___sys_bpf+0x10/0x10 [ 74.462603][ T6492] ? __schedule+0xe5d/0x5730 [ 74.464938][ T6492] ? __fget_files+0x23a/0x3f0 [ 74.467435][ T6492] ? do_futex+0x123/0x350 [ 74.469243][ T6492] ? __pfx_do_futex+0x10/0x10 [ 74.472460][ T6492] ? xfd_validate_state+0x5d/0x180 [ 74.474600][ T6492] ? rcu_is_watching+0x12/0xc0 [ 74.476562][ T6492] __x64_sys_bpf+0x78/0xc0 [ 74.477842][ T6492] ? lockdep_hardirqs_on+0x7c/0x110 [ 74.479353][ T6492] do_syscall_64+0xcd/0x250 [ 74.480623][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.482344][ T6492] RIP: 0033:0x7f475a17e719 [ 74.483675][ T6492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.488925][ T6492] RSP: 002b:00007f475b009038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 74.492663][ T6492] RAX: ffffffffffffffda RBX: 00007f475a336058 RCX: 00007f475a17e719 [ 74.496445][ T6492] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 74.500756][ T6492] RBP: 00007f475a1f132e R08: 0000000000000000 R09: 0000000000000000 [ 74.504772][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.509473][ T6492] R13: 0000000000000000 R14: 00007f475a336058 R15: 00007ffe2d0f8dd8 [ 74.512618][ T6492] [ 74.513546][ T6492] BUG: Bad page state in process syz.1.132 pfn:4c325 [ 74.515471][ T6492] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804c325e88 pfn:0x4c325 [ 74.519860][ T6492] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 74.523986][ T6492] raw: 00fff00000000000 dead000000000040 ffff88804c173000 0000000000000000 [ 74.527808][ T6492] raw: ffff88804c325e88 0000000000000001 00000000ffffffff 0000000000000000 [ 74.531349][ T6492] page dumped because: page_pool leak [ 74.533159][ T6492] page_owner tracks the page as allocated [ 74.536624][ T6492] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6492, tgid 6486 (syz.1.132), ts 70655513138, free_ts 70607497030 [ 74.543246][ T6492] post_alloc_hook+0x2d1/0x350 [ 74.544421][ T6492] get_page_from_freelist+0x101e/0x3070 [ 74.546208][ T6492] __alloc_pages_noprof+0x223/0x25a0 [ 74.548960][ T6492] alloc_pages_bulk_noprof+0x77c/0x1110 [ 74.552491][ T6492] __page_pool_alloc_pages_slow+0x18f/0x770 [ 74.556252][ T6492] page_pool_alloc_netmem+0xc4/0x160 [ 74.559437][ T6492] page_pool_alloc_pages+0x1a/0x60 [ 74.561676][ T6492] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 74.563421][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 74.564890][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 74.566541][ T6492] __sys_bpf+0xfc6/0x49a0 [ 74.567720][ T6492] __x64_sys_bpf+0x78/0xc0 [ 74.568902][ T6492] do_syscall_64+0xcd/0x250 [ 74.570346][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.571910][ T6492] page last free pid 34 tgid 34 stack trace: [ 74.573534][ T6492] free_unref_page+0x5f4/0xdc0 [ 74.574932][ T6492] __folio_put+0x30d/0x3d0 [ 74.576084][ T6492] free_page_and_swap_cache+0x249/0x2c0 [ 74.577828][ T6492] tlb_remove_table_rcu+0x89/0xe0 [ 74.579282][ T6492] rcu_core+0x79d/0x14d0 [ 74.580566][ T6492] handle_softirqs+0x213/0x8f0 [ 74.581993][ T6492] run_ksoftirqd+0x3a/0x60 [ 74.583210][ T6492] smpboot_thread_fn+0x661/0xa30 [ 74.584638][ T6492] kthread+0x2c1/0x3a0 [ 74.585951][ T6492] ret_from_fork+0x45/0x80 [ 74.587206][ T6492] ret_from_fork_asm+0x1a/0x30 [ 74.588486][ T6492] Modules linked in: [ 74.589518][ T6492] CPU: 3 UID: 0 PID: 6492 Comm: syz.1.132 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 74.592861][ T6492] Tainted: [B]=BAD_PAGE [ 74.594190][ T6492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 74.597563][ T6492] Call Trace: [ 74.598551][ T6492] [ 74.599417][ T6492] dump_stack_lvl+0x16c/0x1f0 [ 74.600925][ T6492] bad_page+0xb3/0x1f0 [ 74.602268][ T6492] ? __pfx_bad_page+0x10/0x10 [ 74.603716][ T6492] ? page_bad_reason+0x9d/0x1e0 [ 74.605215][ T6492] free_unref_page+0x657/0xdc0 [ 74.606671][ T6492] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 74.608304][ T6492] ? __phys_addr+0xc6/0x150 [ 74.609515][ T6492] skb_free_head+0xa0/0x1d0 [ 74.610725][ T6492] skb_release_data+0x560/0x730 [ 74.612008][ T6492] sk_skb_reason_drop+0x129/0x1a0 [ 74.613323][ T6492] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 74.615088][ T6492] ? kernel_text_address+0x8d/0x100 [ 74.616401][ T6492] ? hlock_class+0x4e/0x130 [ 74.617600][ T6492] ? __lock_acquire+0x163e/0x3ce0 [ 74.618927][ T6492] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 74.620770][ T6492] ? hlock_class+0x4e/0x130 [ 74.621980][ T6492] ? __lock_acquire+0xbdd/0x3ce0 [ 74.623295][ T6492] ? __pfx___lock_acquire+0x10/0x10 [ 74.624660][ T6492] __netif_receive_skb_list_core+0x357/0x950 [ 74.626502][ T6492] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 74.628195][ T6492] ? trace_lock_acquire+0x14a/0x1d0 [ 74.629587][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 74.631272][ T6492] ? lock_acquire+0x2f/0xb0 [ 74.632538][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 74.634445][ T6492] netif_receive_skb_list_internal+0x753/0xdb0 [ 74.636224][ T6492] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 74.638137][ T6492] ? __pfx_eth_type_trans+0x10/0x10 [ 74.639975][ T6492] ? __build_skb_around+0x278/0x3b0 [ 74.641618][ T6492] netif_receive_skb_list+0x4f/0x4a0 [ 74.643049][ T6492] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 74.645119][ T6492] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 74.647098][ T6492] ? bpf_test_timer_continue+0x150/0x3d0 [ 74.648731][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 74.650146][ T6492] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 74.651762][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 74.653359][ T6492] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 74.655168][ T6492] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 74.657157][ T6492] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 74.658621][ T6492] ? 0xffffffffa0004340 [ 74.660005][ T6492] ? 0xffffffffa0004340 [ 74.661143][ T6492] ? 0xffffffffa0004340 [ 74.662308][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 74.663903][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 74.665355][ T6492] ? lock_acquire+0x2f/0xb0 [ 74.666686][ T6492] ? __fget_files+0x40/0x3f0 [ 74.667978][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 74.669800][ T6492] ? fput+0x30/0x390 [ 74.670978][ T6492] ? __bpf_prog_get+0xa0/0x290 [ 74.672366][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 74.674360][ T6492] __sys_bpf+0xfc6/0x49a0 [ 74.675493][ T6492] ? __pfx_futex_wake+0x10/0x10 [ 74.676716][ T6492] ? finish_task_switch.isra.0+0x2e8/0xcc0 [ 74.678590][ T6492] ? __pfx___sys_bpf+0x10/0x10 [ 74.679927][ T6492] ? __schedule+0xe5d/0x5730 [ 74.681394][ T6492] ? __fget_files+0x23a/0x3f0 [ 74.682774][ T6492] ? do_futex+0x123/0x350 [ 74.684083][ T6492] ? __pfx_do_futex+0x10/0x10 [ 74.685771][ T6492] ? xfd_validate_state+0x5d/0x180 [ 74.687259][ T6492] ? rcu_is_watching+0x12/0xc0 [ 74.688538][ T6492] __x64_sys_bpf+0x78/0xc0 [ 74.689961][ T6492] ? lockdep_hardirqs_on+0x7c/0x110 [ 74.691488][ T6492] do_syscall_64+0xcd/0x250 [ 74.692941][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.695150][ T6492] RIP: 0033:0x7f475a17e719 [ 74.696356][ T6492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.701702][ T6492] RSP: 002b:00007f475b009038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 74.703905][ T6492] RAX: ffffffffffffffda RBX: 00007f475a336058 RCX: 00007f475a17e719 [ 74.706020][ T6492] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 74.708592][ T6492] RBP: 00007f475a1f132e R08: 0000000000000000 R09: 0000000000000000 [ 74.711060][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.713601][ T6492] R13: 0000000000000000 R14: 00007f475a336058 R15: 00007ffe2d0f8dd8 [ 74.716014][ T6492] [ 74.716916][ T6492] BUG: Bad page state in process syz.1.132 pfn:31822 [ 74.719012][ T6492] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888031823e00 pfn:0x31822 [ 74.721667][ T6492] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 74.723638][ T6492] raw: 00fff00000000000 dead000000000040 ffff88804c173000 0000000000000000 [ 74.726092][ T6492] raw: ffff888031823e00 0000000000000001 00000000ffffffff 0000000000000000 [ 74.728435][ T6492] page dumped because: page_pool leak [ 74.729827][ T6492] page_owner tracks the page as allocated [ 74.731550][ T6492] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6492, tgid 6486 (syz.1.132), ts 70655508425, free_ts 70607500658 [ 74.736729][ T6492] post_alloc_hook+0x2d1/0x350 [ 74.738399][ T6492] get_page_from_freelist+0x101e/0x3070 [ 74.740191][ T6492] __alloc_pages_noprof+0x223/0x25a0 [ 74.741888][ T6492] alloc_pages_bulk_noprof+0x77c/0x1110 [ 74.743964][ T6492] __page_pool_alloc_pages_slow+0x18f/0x770 [ 74.746213][ T6492] page_pool_alloc_netmem+0xc4/0x160 [ 74.747799][ T6492] page_pool_alloc_pages+0x1a/0x60 [ 74.749227][ T6492] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 74.751090][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 74.752546][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 74.753975][ T6492] __sys_bpf+0xfc6/0x49a0 [ 74.755477][ T6492] __x64_sys_bpf+0x78/0xc0 [ 74.756753][ T6492] do_syscall_64+0xcd/0x250 [ 74.758138][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.760083][ T6492] page last free pid 34 tgid 34 stack trace: [ 74.761704][ T6492] free_unref_page+0x5f4/0xdc0 [ 74.762994][ T6492] __folio_put+0x30d/0x3d0 [ 74.764118][ T6492] free_page_and_swap_cache+0x249/0x2c0 [ 74.765844][ T6492] tlb_remove_table_rcu+0x89/0xe0 [ 74.767189][ T6492] rcu_core+0x79d/0x14d0 [ 74.768318][ T6492] handle_softirqs+0x213/0x8f0 [ 74.769670][ T6492] run_ksoftirqd+0x3a/0x60 [ 74.771048][ T6492] smpboot_thread_fn+0x661/0xa30 [ 74.772727][ T6492] kthread+0x2c1/0x3a0 [ 74.773984][ T6492] ret_from_fork+0x45/0x80 [ 74.775553][ T6492] ret_from_fork_asm+0x1a/0x30 [ 74.776900][ T6492] Modules linked in: [ 74.778350][ T6492] CPU: 3 UID: 0 PID: 6492 Comm: syz.1.132 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 74.781765][ T6492] Tainted: [B]=BAD_PAGE [ 74.782908][ T6492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 74.786088][ T6492] Call Trace: [ 74.787081][ T6492] [ 74.788046][ T6492] dump_stack_lvl+0x16c/0x1f0 [ 74.789516][ T6492] bad_page+0xb3/0x1f0 [ 74.790898][ T6492] ? __pfx_bad_page+0x10/0x10 [ 74.792348][ T6492] ? page_bad_reason+0x9d/0x1e0 [ 74.793937][ T6492] free_unref_page+0x657/0xdc0 [ 74.795327][ T6492] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 74.796929][ T6492] ? __phys_addr+0xc6/0x150 [ 74.798336][ T6492] skb_free_head+0xa0/0x1d0 [ 74.799618][ T6492] skb_release_data+0x560/0x730 [ 74.801036][ T6492] sk_skb_reason_drop+0x129/0x1a0 [ 74.802393][ T6492] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 74.804200][ T6492] ? kernel_text_address+0x8d/0x100 [ 74.805905][ T6492] ? hlock_class+0x4e/0x130 [ 74.807182][ T6492] ? __lock_acquire+0x163e/0x3ce0 [ 74.808546][ T6492] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 74.810430][ T6492] ? hlock_class+0x4e/0x130 [ 74.811875][ T6492] ? __lock_acquire+0xbdd/0x3ce0 [ 74.813259][ T6492] ? __pfx___lock_acquire+0x10/0x10 [ 74.814680][ T6492] __netif_receive_skb_list_core+0x357/0x950 [ 74.816601][ T6492] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 74.818462][ T6492] ? trace_lock_acquire+0x14a/0x1d0 [ 74.819915][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 74.821696][ T6492] ? lock_acquire+0x2f/0xb0 [ 74.823210][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 74.825219][ T6492] netif_receive_skb_list_internal+0x753/0xdb0 [ 74.827212][ T6492] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 74.828938][ T6492] ? __pfx_eth_type_trans+0x10/0x10 [ 74.830477][ T6492] ? __build_skb_around+0x278/0x3b0 [ 74.831827][ T6492] netif_receive_skb_list+0x4f/0x4a0 [ 74.833362][ T6492] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 74.835234][ T6492] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 74.837120][ T6492] ? bpf_test_timer_continue+0x150/0x3d0 [ 74.838621][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 74.839993][ T6492] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 74.841555][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 74.843326][ T6492] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 74.844908][ T6492] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 74.846499][ T6492] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 74.847898][ T6492] ? 0xffffffffa0004340 [ 74.848999][ T6492] ? 0xffffffffa0004340 [ 74.850102][ T6492] ? 0xffffffffa0004340 [ 74.851444][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 74.853133][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 74.854601][ T6492] ? lock_acquire+0x2f/0xb0 [ 74.856079][ T6492] ? __fget_files+0x40/0x3f0 [ 74.857294][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 74.859094][ T6492] ? fput+0x30/0x390 [ 74.860289][ T6492] ? __bpf_prog_get+0xa0/0x290 [ 74.861703][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 74.863543][ T6492] __sys_bpf+0xfc6/0x49a0 [ 74.864969][ T6492] ? __pfx_futex_wake+0x10/0x10 [ 74.866806][ T6492] ? finish_task_switch.isra.0+0x2e8/0xcc0 [ 74.868469][ T6492] ? __pfx___sys_bpf+0x10/0x10 [ 74.870020][ T6492] ? __schedule+0xe5d/0x5730 [ 74.871398][ T6492] ? __fget_files+0x23a/0x3f0 [ 74.872715][ T6492] ? do_futex+0x123/0x350 [ 74.873879][ T6492] ? __pfx_do_futex+0x10/0x10 [ 74.875183][ T6492] ? xfd_validate_state+0x5d/0x180 [ 74.876644][ T6492] ? rcu_is_watching+0x12/0xc0 [ 74.878145][ T6492] __x64_sys_bpf+0x78/0xc0 [ 74.879505][ T6492] ? lockdep_hardirqs_on+0x7c/0x110 [ 74.880996][ T6492] do_syscall_64+0xcd/0x250 [ 74.882286][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.883922][ T6492] RIP: 0033:0x7f475a17e719 [ 74.885572][ T6492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.891328][ T6492] RSP: 002b:00007f475b009038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 74.894284][ T6492] RAX: ffffffffffffffda RBX: 00007f475a336058 RCX: 00007f475a17e719 [ 74.896386][ T6492] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 74.898717][ T6492] RBP: 00007f475a1f132e R08: 0000000000000000 R09: 0000000000000000 [ 74.901200][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.903405][ T6492] R13: 0000000000000000 R14: 00007f475a336058 R15: 00007ffe2d0f8dd8 [ 74.905757][ T6492] [ 74.906674][ T6492] BUG: Bad page state in process syz.1.132 pfn:32620 [ 74.908416][ T6492] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880326202d0 pfn:0x32620 [ 74.911049][ T6492] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 74.912910][ T6492] raw: 00fff00000000000 dead000000000040 ffff88804c173000 0000000000000000 [ 74.915496][ T6492] raw: ffff8880326202d0 0000000000000001 00000000ffffffff 0000000000000000 [ 74.917837][ T6492] page dumped because: page_pool leak [ 74.919427][ T6492] page_owner tracks the page as allocated [ 74.921176][ T6492] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6492, tgid 6486 (syz.1.132), ts 70655503717, free_ts 70607504696 [ 74.926730][ T6492] post_alloc_hook+0x2d1/0x350 [ 74.928201][ T6492] get_page_from_freelist+0x101e/0x3070 [ 74.929688][ T6492] __alloc_pages_noprof+0x223/0x25a0 [ 74.931143][ T6492] alloc_pages_bulk_noprof+0x77c/0x1110 [ 74.932552][ T6492] __page_pool_alloc_pages_slow+0x18f/0x770 [ 74.934361][ T6492] page_pool_alloc_netmem+0xc4/0x160 [ 74.936110][ T6492] page_pool_alloc_pages+0x1a/0x60 [ 74.937705][ T6492] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 74.939436][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 74.940892][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 74.942325][ T6492] __sys_bpf+0xfc6/0x49a0 [ 74.943491][ T6492] __x64_sys_bpf+0x78/0xc0 [ 74.944950][ T6492] do_syscall_64+0xcd/0x250 [ 74.946393][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.948096][ T6492] page last free pid 34 tgid 34 stack trace: [ 74.949915][ T6492] free_unref_page+0x5f4/0xdc0 [ 74.951321][ T6492] __folio_put+0x30d/0x3d0 [ 74.952529][ T6492] free_page_and_swap_cache+0x249/0x2c0 [ 74.954162][ T6492] tlb_remove_table_rcu+0x89/0xe0 [ 74.955578][ T6492] rcu_core+0x79d/0x14d0 [ 74.956707][ T6492] handle_softirqs+0x213/0x8f0 [ 74.958092][ T6492] run_ksoftirqd+0x3a/0x60 [ 74.959260][ T6492] smpboot_thread_fn+0x661/0xa30 [ 74.960718][ T6492] kthread+0x2c1/0x3a0 [ 74.961821][ T6492] ret_from_fork+0x45/0x80 [ 74.963062][ T6492] ret_from_fork_asm+0x1a/0x30 [ 74.964328][ T6492] Modules linked in: [ 74.965527][ T6492] CPU: 3 UID: 0 PID: 6492 Comm: syz.1.132 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 74.968727][ T6492] Tainted: [B]=BAD_PAGE [ 74.969980][ T6492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 74.972967][ T6492] Call Trace: [ 74.974146][ T6492] [ 74.975826][ T6492] dump_stack_lvl+0x16c/0x1f0 [ 74.977488][ T6492] bad_page+0xb3/0x1f0 [ 74.978954][ T6492] ? __pfx_bad_page+0x10/0x10 [ 74.980262][ T6492] ? page_bad_reason+0x9d/0x1e0 [ 74.981675][ T6492] free_unref_page+0x657/0xdc0 [ 74.983235][ T6492] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 74.984859][ T6492] ? __phys_addr+0xc6/0x150 [ 74.986121][ T6492] skb_free_head+0xa0/0x1d0 [ 74.987339][ T6492] skb_release_data+0x560/0x730 [ 74.988652][ T6492] sk_skb_reason_drop+0x129/0x1a0 [ 74.990006][ T6492] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 74.991776][ T6492] ? kernel_text_address+0x8d/0x100 [ 74.993160][ T6492] ? hlock_class+0x4e/0x130 [ 74.994384][ T6492] ? __lock_acquire+0x163e/0x3ce0 [ 74.995898][ T6492] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 74.997784][ T6492] ? hlock_class+0x4e/0x130 [ 74.999095][ T6492] ? __lock_acquire+0xbdd/0x3ce0 [ 75.000625][ T6492] ? __pfx___lock_acquire+0x10/0x10 [ 75.002319][ T6492] __netif_receive_skb_list_core+0x357/0x950 [ 75.004227][ T6492] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 75.006414][ T6492] ? trace_lock_acquire+0x14a/0x1d0 [ 75.008392][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 75.010439][ T6492] ? lock_acquire+0x2f/0xb0 [ 75.011663][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 75.013356][ T6492] netif_receive_skb_list_internal+0x753/0xdb0 [ 75.015040][ T6492] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 75.016986][ T6492] ? __pfx_eth_type_trans+0x10/0x10 [ 75.018628][ T6492] ? __build_skb_around+0x278/0x3b0 [ 75.020029][ T6492] netif_receive_skb_list+0x4f/0x4a0 [ 75.021412][ T6492] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 75.023064][ T6492] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 75.024804][ T6492] ? bpf_test_timer_continue+0x150/0x3d0 [ 75.026356][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 75.027735][ T6492] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 75.029258][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 75.030806][ T6492] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 75.032346][ T6492] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 75.033869][ T6492] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 75.035299][ T6492] ? 0xffffffffa0004340 [ 75.036390][ T6492] ? 0xffffffffa0004340 [ 75.037474][ T6492] ? 0xffffffffa0004340 [ 75.038581][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 75.040117][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 75.041517][ T6492] ? lock_acquire+0x2f/0xb0 [ 75.042705][ T6492] ? __fget_files+0x40/0x3f0 [ 75.043908][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 75.045456][ T6492] ? fput+0x30/0x390 [ 75.046510][ T6492] ? __bpf_prog_get+0xa0/0x290 [ 75.047765][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 75.049295][ T6492] __sys_bpf+0xfc6/0x49a0 [ 75.050446][ T6492] ? __pfx_futex_wake+0x10/0x10 [ 75.051767][ T6492] ? finish_task_switch.isra.0+0x2e8/0xcc0 [ 75.053390][ T6492] ? __pfx___sys_bpf+0x10/0x10 [ 75.054707][ T6492] ? __schedule+0xe5d/0x5730 [ 75.056010][ T6492] ? __fget_files+0x23a/0x3f0 [ 75.057347][ T6492] ? do_futex+0x123/0x350 [ 75.058474][ T6492] ? __pfx_do_futex+0x10/0x10 [ 75.059690][ T6492] ? xfd_validate_state+0x5d/0x180 [ 75.061133][ T6492] ? rcu_is_watching+0x12/0xc0 [ 75.062425][ T6492] __x64_sys_bpf+0x78/0xc0 [ 75.063594][ T6492] ? lockdep_hardirqs_on+0x7c/0x110 [ 75.064917][ T6492] do_syscall_64+0xcd/0x250 [ 75.066518][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.068061][ T6492] RIP: 0033:0x7f475a17e719 [ 75.069204][ T6492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.074631][ T6492] RSP: 002b:00007f475b009038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 75.077284][ T6492] RAX: ffffffffffffffda RBX: 00007f475a336058 RCX: 00007f475a17e719 [ 75.079448][ T6492] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 75.081766][ T6492] RBP: 00007f475a1f132e R08: 0000000000000000 R09: 0000000000000000 [ 75.084071][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.086923][ T6492] R13: 0000000000000000 R14: 00007f475a336058 R15: 00007ffe2d0f8dd8 [ 75.089009][ T6492] [ 75.089930][ T6492] BUG: Bad page state in process syz.1.132 pfn:2534e [ 75.091770][ T6492] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802534e1f0 pfn:0x2534e [ 75.094403][ T6492] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 75.096545][ T6492] raw: 00fff00000000000 dead000000000040 ffff88804c173000 0000000000000000 [ 75.098812][ T6492] raw: ffff88802534e1f0 0000000000000001 00000000ffffffff 0000000000000000 [ 75.101029][ T6492] page dumped because: page_pool leak [ 75.102906][ T6492] page_owner tracks the page as allocated [ 75.104468][ T6492] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6492, tgid 6486 (syz.1.132), ts 70655499054, free_ts 70607508566 [ 75.109290][ T6492] post_alloc_hook+0x2d1/0x350 [ 75.110562][ T6492] get_page_from_freelist+0x101e/0x3070 [ 75.112042][ T6492] __alloc_pages_noprof+0x223/0x25a0 [ 75.113424][ T6492] alloc_pages_bulk_noprof+0x77c/0x1110 [ 75.115040][ T6492] __page_pool_alloc_pages_slow+0x18f/0x770 [ 75.116768][ T6492] page_pool_alloc_netmem+0xc4/0x160 [ 75.118160][ T6492] page_pool_alloc_pages+0x1a/0x60 [ 75.119546][ T6492] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 75.121156][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 75.123153][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 75.124879][ T6492] __sys_bpf+0xfc6/0x49a0 [ 75.126063][ T6492] __x64_sys_bpf+0x78/0xc0 [ 75.127222][ T6492] do_syscall_64+0xcd/0x250 [ 75.128422][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.130146][ T6492] page last free pid 34 tgid 34 stack trace: [ 75.131873][ T6492] free_unref_page+0x5f4/0xdc0 [ 75.133269][ T6492] __folio_put+0x30d/0x3d0 [ 75.134473][ T6492] free_page_and_swap_cache+0x249/0x2c0 [ 75.136367][ T6492] tlb_remove_table_rcu+0x89/0xe0 [ 75.137720][ T6492] rcu_core+0x79d/0x14d0 [ 75.138956][ T6492] handle_softirqs+0x213/0x8f0 [ 75.140488][ T6492] run_ksoftirqd+0x3a/0x60 [ 75.141884][ T6492] smpboot_thread_fn+0x661/0xa30 [ 75.143749][ T6492] kthread+0x2c1/0x3a0 [ 75.145093][ T6492] ret_from_fork+0x45/0x80 [ 75.146805][ T6492] ret_from_fork_asm+0x1a/0x30 [ 75.148154][ T6492] Modules linked in: [ 75.149198][ T6492] CPU: 3 UID: 0 PID: 6492 Comm: syz.1.132 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 75.152320][ T6492] Tainted: [B]=BAD_PAGE [ 75.153373][ T6492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.156198][ T6492] Call Trace: [ 75.157114][ T6492] [ 75.157881][ T6492] dump_stack_lvl+0x16c/0x1f0 [ 75.159266][ T6492] bad_page+0xb3/0x1f0 [ 75.160348][ T6492] ? __pfx_bad_page+0x10/0x10 [ 75.161564][ T6492] ? page_bad_reason+0x9d/0x1e0 [ 75.162822][ T6492] free_unref_page+0x657/0xdc0 [ 75.164070][ T6492] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 75.165858][ T6492] ? __phys_addr+0xc6/0x150 [ 75.167004][ T6492] skb_free_head+0xa0/0x1d0 [ 75.168199][ T6492] skb_release_data+0x560/0x730 [ 75.169510][ T6492] sk_skb_reason_drop+0x129/0x1a0 [ 75.170833][ T6492] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 75.172562][ T6492] ? kernel_text_address+0x8d/0x100 [ 75.173910][ T6492] ? hlock_class+0x4e/0x130 [ 75.175074][ T6492] ? __lock_acquire+0x163e/0x3ce0 [ 75.176386][ T6492] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 75.178181][ T6492] ? hlock_class+0x4e/0x130 [ 75.179327][ T6492] ? __lock_acquire+0xbdd/0x3ce0 [ 75.180593][ T6492] ? __pfx___lock_acquire+0x10/0x10 [ 75.181902][ T6492] __netif_receive_skb_list_core+0x357/0x950 [ 75.183405][ T6492] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 75.185059][ T6492] ? trace_lock_acquire+0x14a/0x1d0 [ 75.186391][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 75.188386][ T6492] ? lock_acquire+0x2f/0xb0 [ 75.189548][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 75.191293][ T6492] netif_receive_skb_list_internal+0x753/0xdb0 [ 75.192963][ T6492] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 75.194713][ T6492] ? __pfx_eth_type_trans+0x10/0x10 [ 75.196310][ T6492] ? __build_skb_around+0x278/0x3b0 [ 75.197703][ T6492] netif_receive_skb_list+0x4f/0x4a0 [ 75.199204][ T6492] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 75.201005][ T6492] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 75.203081][ T6492] ? bpf_test_timer_continue+0x150/0x3d0 [ 75.204763][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 75.206233][ T6492] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 75.207751][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 75.209295][ T6492] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 75.210850][ T6492] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 75.212451][ T6492] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 75.213858][ T6492] ? 0xffffffffa0004340 [ 75.215010][ T6492] ? 0xffffffffa0004340 [ 75.216121][ T6492] ? 0xffffffffa0004340 [ 75.217159][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 75.218706][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 75.220132][ T6492] ? lock_acquire+0x2f/0xb0 [ 75.221329][ T6492] ? __fget_files+0x40/0x3f0 [ 75.222596][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 75.224197][ T6492] ? fput+0x30/0x390 [ 75.225596][ T6492] ? __bpf_prog_get+0xa0/0x290 [ 75.227008][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 75.228641][ T6492] __sys_bpf+0xfc6/0x49a0 [ 75.229965][ T6492] ? __pfx_futex_wake+0x10/0x10 [ 75.231467][ T6492] ? finish_task_switch.isra.0+0x2e8/0xcc0 [ 75.233074][ T6492] ? __pfx___sys_bpf+0x10/0x10 [ 75.234563][ T6492] ? __schedule+0xe5d/0x5730 [ 75.236014][ T6492] ? __fget_files+0x23a/0x3f0 [ 75.237397][ T6492] ? do_futex+0x123/0x350 [ 75.238659][ T6492] ? __pfx_do_futex+0x10/0x10 [ 75.239983][ T6492] ? xfd_validate_state+0x5d/0x180 [ 75.241577][ T6492] ? rcu_is_watching+0x12/0xc0 [ 75.242926][ T6492] __x64_sys_bpf+0x78/0xc0 [ 75.244176][ T6492] ? lockdep_hardirqs_on+0x7c/0x110 [ 75.245666][ T6492] do_syscall_64+0xcd/0x250 [ 75.247638][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.249299][ T6492] RIP: 0033:0x7f475a17e719 [ 75.250562][ T6492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.255994][ T6492] RSP: 002b:00007f475b009038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 75.258212][ T6492] RAX: ffffffffffffffda RBX: 00007f475a336058 RCX: 00007f475a17e719 [ 75.260600][ T6492] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 75.262928][ T6492] RBP: 00007f475a1f132e R08: 0000000000000000 R09: 0000000000000000 [ 75.265013][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.267133][ T6492] R13: 0000000000000000 R14: 00007f475a336058 R15: 00007ffe2d0f8dd8 [ 75.269360][ T6492] [ 75.270289][ T6492] BUG: Bad page state in process syz.1.132 pfn:3604b [ 75.272039][ T6492] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803604b960 pfn:0x3604b [ 75.274523][ T6492] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 75.276362][ T6492] raw: 00fff00000000000 dead000000000040 ffff88804c173000 0000000000000000 [ 75.278482][ T6492] raw: ffff88803604b960 0000000000000001 00000000ffffffff 0000000000000000 [ 75.280590][ T6492] page dumped because: page_pool leak [ 75.281925][ T6492] page_owner tracks the page as allocated [ 75.283393][ T6492] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6492, tgid 6486 (syz.1.132), ts 70655494309, free_ts 70607512132 [ 75.287707][ T6492] post_alloc_hook+0x2d1/0x350 [ 75.288961][ T6492] get_page_from_freelist+0x101e/0x3070 [ 75.290377][ T6492] __alloc_pages_noprof+0x223/0x25a0 [ 75.291695][ T6492] alloc_pages_bulk_noprof+0x77c/0x1110 [ 75.293070][ T6492] __page_pool_alloc_pages_slow+0x18f/0x770 [ 75.294653][ T6492] page_pool_alloc_netmem+0xc4/0x160 [ 75.296132][ T6492] page_pool_alloc_pages+0x1a/0x60 [ 75.297581][ T6492] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 75.299313][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 75.300798][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 75.302437][ T6492] __sys_bpf+0xfc6/0x49a0 [ 75.303880][ T6492] __x64_sys_bpf+0x78/0xc0 [ 75.305351][ T6492] do_syscall_64+0xcd/0x250 [ 75.306884][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.308853][ T6492] page last free pid 34 tgid 34 stack trace: [ 75.310730][ T6492] free_unref_page+0x5f4/0xdc0 [ 75.312037][ T6492] __folio_put+0x30d/0x3d0 [ 75.313227][ T6492] free_page_and_swap_cache+0x249/0x2c0 [ 75.314701][ T6492] tlb_remove_table_rcu+0x89/0xe0 [ 75.316196][ T6492] rcu_core+0x79d/0x14d0 [ 75.317371][ T6492] handle_softirqs+0x213/0x8f0 [ 75.318710][ T6492] run_ksoftirqd+0x3a/0x60 [ 75.319959][ T6492] smpboot_thread_fn+0x661/0xa30 [ 75.321359][ T6492] kthread+0x2c1/0x3a0 [ 75.322522][ T6492] ret_from_fork+0x45/0x80 [ 75.323778][ T6492] ret_from_fork_asm+0x1a/0x30 [ 75.325210][ T6492] Modules linked in: [ 75.326353][ T6492] CPU: 3 UID: 0 PID: 6492 Comm: syz.1.132 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 75.329451][ T6492] Tainted: [B]=BAD_PAGE [ 75.330540][ T6492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.333180][ T6492] Call Trace: [ 75.334061][ T6492] [ 75.334862][ T6492] dump_stack_lvl+0x16c/0x1f0 [ 75.336290][ T6492] bad_page+0xb3/0x1f0 [ 75.337382][ T6492] ? __pfx_bad_page+0x10/0x10 [ 75.338706][ T6492] ? page_bad_reason+0x9d/0x1e0 [ 75.340037][ T6492] free_unref_page+0x657/0xdc0 [ 75.341324][ T6492] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 75.343136][ T6492] ? __phys_addr+0xc6/0x150 [ 75.344417][ T6492] skb_free_head+0xa0/0x1d0 [ 75.345786][ T6492] skb_release_data+0x560/0x730 [ 75.347091][ T6492] sk_skb_reason_drop+0x129/0x1a0 [ 75.348375][ T6492] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 75.350094][ T6492] ? kernel_text_address+0x8d/0x100 [ 75.351433][ T6492] ? hlock_class+0x4e/0x130 [ 75.352648][ T6492] ? __lock_acquire+0x163e/0x3ce0 [ 75.354005][ T6492] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 75.355959][ T6492] ? hlock_class+0x4e/0x130 [ 75.357204][ T6492] ? __lock_acquire+0xbdd/0x3ce0 [ 75.358553][ T6492] ? __pfx___lock_acquire+0x10/0x10 [ 75.360300][ T6492] __netif_receive_skb_list_core+0x357/0x950 [ 75.361844][ T6492] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 75.363588][ T6492] ? trace_lock_acquire+0x14a/0x1d0 [ 75.365074][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 75.367099][ T6492] ? lock_acquire+0x2f/0xb0 [ 75.368523][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 75.370683][ T6492] netif_receive_skb_list_internal+0x753/0xdb0 [ 75.372322][ T6492] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 75.374086][ T6492] ? __pfx_eth_type_trans+0x10/0x10 [ 75.375530][ T6492] ? __build_skb_around+0x278/0x3b0 [ 75.376910][ T6492] netif_receive_skb_list+0x4f/0x4a0 [ 75.378385][ T6492] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 75.380059][ T6492] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 75.381923][ T6492] ? bpf_test_timer_continue+0x150/0x3d0 [ 75.383540][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 75.384935][ T6492] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 75.386487][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 75.388032][ T6492] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 75.389714][ T6492] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 75.391392][ T6492] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 75.392790][ T6492] ? 0xffffffffa0004340 [ 75.393917][ T6492] ? 0xffffffffa0004340 [ 75.395127][ T6492] ? 0xffffffffa0004340 [ 75.396381][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 75.397914][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 75.399313][ T6492] ? lock_acquire+0x2f/0xb0 [ 75.400498][ T6492] ? __fget_files+0x40/0x3f0 [ 75.401696][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 75.403213][ T6492] ? fput+0x30/0x390 [ 75.404231][ T6492] ? __bpf_prog_get+0xa0/0x290 [ 75.405503][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 75.407040][ T6492] __sys_bpf+0xfc6/0x49a0 [ 75.408178][ T6492] ? __pfx_futex_wake+0x10/0x10 [ 75.409426][ T6492] ? finish_task_switch.isra.0+0x2e8/0xcc0 [ 75.410942][ T6492] ? __pfx___sys_bpf+0x10/0x10 [ 75.412200][ T6492] ? __schedule+0xe5d/0x5730 [ 75.413450][ T6492] ? __fget_files+0x23a/0x3f0 [ 75.414690][ T6492] ? do_futex+0x123/0x350 [ 75.416056][ T6492] ? __pfx_do_futex+0x10/0x10 [ 75.417309][ T6492] ? xfd_validate_state+0x5d/0x180 [ 75.418667][ T6492] ? rcu_is_watching+0x12/0xc0 [ 75.419922][ T6492] __x64_sys_bpf+0x78/0xc0 [ 75.421089][ T6492] ? lockdep_hardirqs_on+0x7c/0x110 [ 75.422437][ T6492] do_syscall_64+0xcd/0x250 [ 75.423725][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.425506][ T6492] RIP: 0033:0x7f475a17e719 [ 75.426875][ T6492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.432466][ T6492] RSP: 002b:00007f475b009038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 75.435234][ T6492] RAX: ffffffffffffffda RBX: 00007f475a336058 RCX: 00007f475a17e719 [ 75.437602][ T6492] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 75.439695][ T6492] RBP: 00007f475a1f132e R08: 0000000000000000 R09: 0000000000000000 [ 75.441765][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.443841][ T6492] R13: 0000000000000000 R14: 00007f475a336058 R15: 00007ffe2d0f8dd8 [ 75.446077][ T6492] [ 75.446978][ T6492] BUG: Bad page state in process syz.1.132 pfn:27e19 [ 75.448736][ T6492] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888027e190f0 pfn:0x27e19 [ 75.451384][ T6492] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 75.453324][ T6492] raw: 00fff00000000000 dead000000000040 ffff88804c173000 0000000000000000 [ 75.455744][ T6492] raw: ffff888027e190f0 0000000000000001 00000000ffffffff 0000000000000000 [ 75.457972][ T6492] page dumped because: page_pool leak [ 75.459382][ T6492] page_owner tracks the page as allocated [ 75.460893][ T6492] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6492, tgid 6486 (syz.1.132), ts 70655489476, free_ts 70607517383 [ 75.465643][ T6492] post_alloc_hook+0x2d1/0x350 [ 75.467172][ T6492] get_page_from_freelist+0x101e/0x3070 [ 75.468745][ T6492] __alloc_pages_noprof+0x223/0x25a0 [ 75.470137][ T6492] alloc_pages_bulk_noprof+0x77c/0x1110 [ 75.471582][ T6492] __page_pool_alloc_pages_slow+0x18f/0x770 [ 75.473141][ T6492] page_pool_alloc_netmem+0xc4/0x160 [ 75.474535][ T6492] page_pool_alloc_pages+0x1a/0x60 [ 75.475937][ T6492] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 75.477545][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 75.478927][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 75.480341][ T6492] __sys_bpf+0xfc6/0x49a0 [ 75.481464][ T6492] __x64_sys_bpf+0x78/0xc0 [ 75.482726][ T6492] do_syscall_64+0xcd/0x250 [ 75.483942][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.485576][ T6492] page last free pid 34 tgid 34 stack trace: [ 75.487187][ T6492] free_unref_page+0x5f4/0xdc0 [ 75.488448][ T6492] rcu_core+0x79d/0x14d0 [ 75.489560][ T6492] handle_softirqs+0x213/0x8f0 [ 75.490773][ T6492] run_ksoftirqd+0x3a/0x60 [ 75.491917][ T6492] smpboot_thread_fn+0x661/0xa30 [ 75.493291][ T6492] kthread+0x2c1/0x3a0 [ 75.494430][ T6492] ret_from_fork+0x45/0x80 [ 75.496052][ T6492] ret_from_fork_asm+0x1a/0x30 [ 75.497520][ T6492] Modules linked in: [ 75.498698][ T6492] CPU: 3 UID: 0 PID: 6492 Comm: syz.1.132 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 75.502098][ T6492] Tainted: [B]=BAD_PAGE [ 75.503293][ T6492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.506153][ T6492] Call Trace: [ 75.507016][ T6492] [ 75.507802][ T6492] dump_stack_lvl+0x16c/0x1f0 [ 75.509017][ T6492] bad_page+0xb3/0x1f0 [ 75.510096][ T6492] ? __pfx_bad_page+0x10/0x10 [ 75.511335][ T6492] ? page_bad_reason+0x9d/0x1e0 [ 75.512604][ T6492] free_unref_page+0x657/0xdc0 [ 75.513853][ T6492] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 75.515456][ T6492] ? __phys_addr+0xc6/0x150 [ 75.516659][ T6492] skb_free_head+0xa0/0x1d0 [ 75.517868][ T6492] skb_release_data+0x560/0x730 [ 75.519161][ T6492] sk_skb_reason_drop+0x129/0x1a0 [ 75.520484][ T6492] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 75.522227][ T6492] ? kernel_text_address+0x8d/0x100 [ 75.523684][ T6492] ? hlock_class+0x4e/0x130 [ 75.525035][ T6492] ? __lock_acquire+0x163e/0x3ce0 [ 75.526556][ T6492] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 75.528445][ T6492] ? hlock_class+0x4e/0x130 [ 75.529689][ T6492] ? __lock_acquire+0xbdd/0x3ce0 [ 75.531009][ T6492] ? __pfx___lock_acquire+0x10/0x10 [ 75.532401][ T6492] __netif_receive_skb_list_core+0x357/0x950 [ 75.534046][ T6492] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 75.535868][ T6492] ? trace_lock_acquire+0x14a/0x1d0 [ 75.537297][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 75.539035][ T6492] ? lock_acquire+0x2f/0xb0 [ 75.540246][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 75.541908][ T6492] netif_receive_skb_list_internal+0x753/0xdb0 [ 75.543539][ T6492] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 75.545531][ T6492] ? __pfx_eth_type_trans+0x10/0x10 [ 75.547427][ T6492] ? __build_skb_around+0x278/0x3b0 [ 75.548872][ T6492] netif_receive_skb_list+0x4f/0x4a0 [ 75.550471][ T6492] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 75.552204][ T6492] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 75.554019][ T6492] ? bpf_test_timer_continue+0x150/0x3d0 [ 75.555725][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 75.557179][ T6492] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 75.558748][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 75.560351][ T6492] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 75.561892][ T6492] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 75.563544][ T6492] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 75.565084][ T6492] ? 0xffffffffa0004340 [ 75.566253][ T6492] ? 0xffffffffa0004340 [ 75.567385][ T6492] ? 0xffffffffa0004340 [ 75.568598][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 75.570457][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 75.572063][ T6492] ? lock_acquire+0x2f/0xb0 [ 75.573407][ T6492] ? __fget_files+0x40/0x3f0 [ 75.574714][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 75.576377][ T6492] ? fput+0x30/0x390 [ 75.577526][ T6492] ? __bpf_prog_get+0xa0/0x290 [ 75.578875][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 75.580413][ T6492] __sys_bpf+0xfc6/0x49a0 [ 75.581553][ T6492] ? __pfx_futex_wake+0x10/0x10 [ 75.582849][ T6492] ? finish_task_switch.isra.0+0x2e8/0xcc0 [ 75.584368][ T6492] ? __pfx___sys_bpf+0x10/0x10 [ 75.585671][ T6492] ? __schedule+0xe5d/0x5730 [ 75.586915][ T6492] ? __fget_files+0x23a/0x3f0 [ 75.588147][ T6492] ? do_futex+0x123/0x350 [ 75.589301][ T6492] ? __pfx_do_futex+0x10/0x10 [ 75.590543][ T6492] ? xfd_validate_state+0x5d/0x180 [ 75.591881][ T6492] ? rcu_is_watching+0x12/0xc0 [ 75.593114][ T6492] __x64_sys_bpf+0x78/0xc0 [ 75.594299][ T6492] ? lockdep_hardirqs_on+0x7c/0x110 [ 75.595691][ T6492] do_syscall_64+0xcd/0x250 [ 75.596928][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.598561][ T6492] RIP: 0033:0x7f475a17e719 [ 75.599823][ T6492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.605614][ T6492] RSP: 002b:00007f475b009038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 75.608115][ T6492] RAX: ffffffffffffffda RBX: 00007f475a336058 RCX: 00007f475a17e719 [ 75.610199][ T6492] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 75.612272][ T6492] RBP: 00007f475a1f132e R08: 0000000000000000 R09: 0000000000000000 [ 75.614353][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.616434][ T6492] R13: 0000000000000000 R14: 00007f475a336058 R15: 00007ffe2d0f8dd8 [ 75.618493][ T6492] [ 75.619359][ T6492] BUG: Bad page state in process syz.1.132 pfn:2cd64 [ 75.621186][ T6492] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802cd65e00 pfn:0x2cd64 [ 75.623815][ T6492] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 75.625826][ T6492] raw: 00fff00000000000 dead000000000040 ffff88804c173000 0000000000000000 [ 75.628119][ T6492] raw: ffff88802cd65e00 0000000000000001 00000000ffffffff 0000000000000000 [ 75.630362][ T6492] page dumped because: page_pool leak [ 75.631776][ T6492] page_owner tracks the page as allocated [ 75.633266][ T6492] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6492, tgid 6486 (syz.1.132), ts 70655484744, free_ts 70607748058 [ 75.637775][ T6492] post_alloc_hook+0x2d1/0x350 [ 75.639104][ T6492] get_page_from_freelist+0x101e/0x3070 [ 75.640743][ T6492] __alloc_pages_noprof+0x223/0x25a0 [ 75.642322][ T6492] alloc_pages_bulk_noprof+0x77c/0x1110 [ 75.643967][ T6492] __page_pool_alloc_pages_slow+0x18f/0x770 [ 75.645824][ T6492] page_pool_alloc_netmem+0xc4/0x160 [ 75.647804][ T6492] page_pool_alloc_pages+0x1a/0x60 [ 75.649352][ T6492] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 75.651349][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 75.652797][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 75.654260][ T6492] __sys_bpf+0xfc6/0x49a0 [ 75.655566][ T6492] __x64_sys_bpf+0x78/0xc0 [ 75.656757][ T6492] do_syscall_64+0xcd/0x250 [ 75.657972][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.659534][ T6492] page last free pid 34 tgid 34 stack trace: [ 75.661094][ T6492] free_unref_page+0x5f4/0xdc0 [ 75.662691][ T6492] __folio_put+0x30d/0x3d0 [ 75.663891][ T6492] free_page_and_swap_cache+0x249/0x2c0 [ 75.665573][ T6492] tlb_remove_table_rcu+0x89/0xe0 [ 75.666985][ T6492] rcu_core+0x79d/0x14d0 [ 75.668113][ T6492] handle_softirqs+0x213/0x8f0 [ 75.669398][ T6492] run_ksoftirqd+0x3a/0x60 [ 75.670686][ T6492] smpboot_thread_fn+0x661/0xa30 [ 75.671981][ T6492] kthread+0x2c1/0x3a0 [ 75.673078][ T6492] ret_from_fork+0x45/0x80 [ 75.674284][ T6492] ret_from_fork_asm+0x1a/0x30 [ 75.675671][ T6492] Modules linked in: [ 75.676924][ T6492] CPU: 3 UID: 0 PID: 6492 Comm: syz.1.132 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 75.680443][ T6492] Tainted: [B]=BAD_PAGE [ 75.681621][ T6492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.684887][ T6492] Call Trace: [ 75.686439][ T6492] [ 75.687255][ T6492] dump_stack_lvl+0x16c/0x1f0 [ 75.688632][ T6492] bad_page+0xb3/0x1f0 [ 75.689746][ T6492] ? __pfx_bad_page+0x10/0x10 [ 75.691024][ T6492] ? page_bad_reason+0x9d/0x1e0 [ 75.692306][ T6492] free_unref_page+0x657/0xdc0 [ 75.693675][ T6492] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 75.695356][ T6492] ? __phys_addr+0xc6/0x150 [ 75.696670][ T6492] skb_free_head+0xa0/0x1d0 [ 75.697881][ T6492] skb_release_data+0x560/0x730 [ 75.699198][ T6492] sk_skb_reason_drop+0x129/0x1a0 [ 75.700583][ T6492] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 75.702267][ T6492] ? kernel_text_address+0x8d/0x100 [ 75.703538][ T6492] ? hlock_class+0x4e/0x130 [ 75.704686][ T6492] ? __lock_acquire+0x163e/0x3ce0 [ 75.706215][ T6492] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 75.708099][ T6492] ? hlock_class+0x4e/0x130 [ 75.709309][ T6492] ? __lock_acquire+0xbdd/0x3ce0 [ 75.710688][ T6492] ? __pfx___lock_acquire+0x10/0x10 [ 75.712096][ T6492] __netif_receive_skb_list_core+0x357/0x950 [ 75.713733][ T6492] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 75.715506][ T6492] ? trace_lock_acquire+0x14a/0x1d0 [ 75.716920][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 75.718591][ T6492] ? lock_acquire+0x2f/0xb0 [ 75.719781][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 75.721455][ T6492] netif_receive_skb_list_internal+0x753/0xdb0 [ 75.723117][ T6492] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 75.724949][ T6492] ? __pfx_eth_type_trans+0x10/0x10 [ 75.726339][ T6492] ? __build_skb_around+0x278/0x3b0 [ 75.727709][ T6492] netif_receive_skb_list+0x4f/0x4a0 [ 75.729122][ T6492] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 75.730788][ T6492] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 75.732544][ T6492] ? bpf_test_timer_continue+0x150/0x3d0 [ 75.734006][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 75.735427][ T6492] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 75.736908][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 75.738469][ T6492] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 75.740026][ T6492] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 75.741571][ T6492] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 75.743022][ T6492] ? 0xffffffffa0004340 [ 75.744203][ T6492] ? 0xffffffffa0004340 [ 75.745483][ T6492] ? 0xffffffffa0004340 [ 75.746801][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 75.748621][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 75.750326][ T6492] ? lock_acquire+0x2f/0xb0 [ 75.751771][ T6492] ? __fget_files+0x40/0x3f0 [ 75.753236][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 75.754908][ T6492] ? fput+0x30/0x390 [ 75.755949][ T6492] ? __bpf_prog_get+0xa0/0x290 [ 75.757211][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 75.758744][ T6492] __sys_bpf+0xfc6/0x49a0 [ 75.759881][ T6492] ? __pfx_futex_wake+0x10/0x10 [ 75.761147][ T6492] ? finish_task_switch.isra.0+0x2e8/0xcc0 [ 75.762668][ T6492] ? __pfx___sys_bpf+0x10/0x10 [ 75.763920][ T6492] ? __schedule+0xe5d/0x5730 [ 75.765148][ T6492] ? __fget_files+0x23a/0x3f0 [ 75.766786][ T6492] ? do_futex+0x123/0x350 [ 75.768004][ T6492] ? __pfx_do_futex+0x10/0x10 [ 75.769490][ T6492] ? xfd_validate_state+0x5d/0x180 [ 75.770992][ T6492] ? rcu_is_watching+0x12/0xc0 [ 75.772359][ T6492] __x64_sys_bpf+0x78/0xc0 [ 75.773632][ T6492] ? lockdep_hardirqs_on+0x7c/0x110 [ 75.775057][ T6492] do_syscall_64+0xcd/0x250 [ 75.776260][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.777825][ T6492] RIP: 0033:0x7f475a17e719 [ 75.779023][ T6492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.784197][ T6492] RSP: 002b:00007f475b009038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 75.786644][ T6492] RAX: ffffffffffffffda RBX: 00007f475a336058 RCX: 00007f475a17e719 [ 75.788713][ T6492] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 75.790846][ T6492] RBP: 00007f475a1f132e R08: 0000000000000000 R09: 0000000000000000 [ 75.792900][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.794980][ T6492] R13: 0000000000000000 R14: 00007f475a336058 R15: 00007ffe2d0f8dd8 [ 75.797055][ T6492] [ 75.797971][ T6492] BUG: Bad page state in process syz.1.132 pfn:2a224 [ 75.799810][ T6492] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802a224780 pfn:0x2a224 [ 75.802535][ T6492] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 75.804474][ T6492] raw: 00fff00000000000 dead000000000040 ffff88804c173000 0000000000000000 [ 75.807300][ T6492] raw: ffff88802a224780 0000000000000001 00000000ffffffff 0000000000000000 [ 75.809681][ T6492] page dumped because: page_pool leak [ 75.811177][ T6492] page_owner tracks the page as allocated [ 75.812677][ T6492] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6492, tgid 6486 (syz.1.132), ts 70655479974, free_ts 70607754139 [ 75.817016][ T6492] post_alloc_hook+0x2d1/0x350 [ 75.818287][ T6492] get_page_from_freelist+0x101e/0x3070 [ 75.819743][ T6492] __alloc_pages_noprof+0x223/0x25a0 [ 75.821120][ T6492] alloc_pages_bulk_noprof+0x77c/0x1110 [ 75.822551][ T6492] __page_pool_alloc_pages_slow+0x18f/0x770 [ 75.824142][ T6492] page_pool_alloc_netmem+0xc4/0x160 [ 75.825819][ T6492] page_pool_alloc_pages+0x1a/0x60 [ 75.827354][ T6492] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 75.829219][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 75.830690][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 75.832089][ T6492] __sys_bpf+0xfc6/0x49a0 [ 75.833240][ T6492] __x64_sys_bpf+0x78/0xc0 [ 75.834477][ T6492] do_syscall_64+0xcd/0x250 [ 75.835824][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.837409][ T6492] page last free pid 34 tgid 34 stack trace: [ 75.839082][ T6492] free_unref_page+0x5f4/0xdc0 [ 75.840510][ T6492] __folio_put+0x30d/0x3d0 [ 75.841860][ T6492] free_page_and_swap_cache+0x249/0x2c0 [ 75.843473][ T6492] tlb_remove_table_rcu+0x89/0xe0 [ 75.844883][ T6492] rcu_core+0x79d/0x14d0 [ 75.846045][ T6492] handle_softirqs+0x213/0x8f0 [ 75.847328][ T6492] run_ksoftirqd+0x3a/0x60 [ 75.848529][ T6492] smpboot_thread_fn+0x661/0xa30 [ 75.849844][ T6492] kthread+0x2c1/0x3a0 [ 75.850920][ T6492] ret_from_fork+0x45/0x80 [ 75.852093][ T6492] ret_from_fork_asm+0x1a/0x30 [ 75.853362][ T6492] Modules linked in: [ 75.854414][ T6492] CPU: 3 UID: 0 PID: 6492 Comm: syz.1.132 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 75.857767][ T6492] Tainted: [B]=BAD_PAGE [ 75.858847][ T6492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.861602][ T6492] Call Trace: [ 75.862490][ T6492] [ 75.863283][ T6492] dump_stack_lvl+0x16c/0x1f0 [ 75.864527][ T6492] bad_page+0xb3/0x1f0 [ 75.865633][ T6492] ? __pfx_bad_page+0x10/0x10 [ 75.867388][ T6492] ? page_bad_reason+0x9d/0x1e0 [ 75.868780][ T6492] free_unref_page+0x657/0xdc0 [ 75.870255][ T6492] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 75.871829][ T6492] ? __phys_addr+0xc6/0x150 [ 75.873037][ T6492] skb_free_head+0xa0/0x1d0 [ 75.874287][ T6492] skb_release_data+0x560/0x730 [ 75.875666][ T6492] sk_skb_reason_drop+0x129/0x1a0 [ 75.876993][ T6492] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 75.878752][ T6492] ? kernel_text_address+0x8d/0x100 [ 75.880129][ T6492] ? hlock_class+0x4e/0x130 [ 75.881332][ T6492] ? __lock_acquire+0x163e/0x3ce0 [ 75.882776][ T6492] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 75.884806][ T6492] ? hlock_class+0x4e/0x130 [ 75.886155][ T6492] ? __lock_acquire+0xbdd/0x3ce0 [ 75.887735][ T6492] ? __pfx___lock_acquire+0x10/0x10 [ 75.889285][ T6492] __netif_receive_skb_list_core+0x357/0x950 [ 75.891096][ T6492] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 75.892970][ T6492] ? trace_lock_acquire+0x14a/0x1d0 [ 75.894456][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 75.896339][ T6492] ? lock_acquire+0x2f/0xb0 [ 75.897685][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 75.899373][ T6492] netif_receive_skb_list_internal+0x753/0xdb0 [ 75.901028][ T6492] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 75.902791][ T6492] ? __pfx_eth_type_trans+0x10/0x10 [ 75.904167][ T6492] ? __build_skb_around+0x278/0x3b0 [ 75.905556][ T6492] netif_receive_skb_list+0x4f/0x4a0 [ 75.906971][ T6492] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 75.908792][ T6492] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 75.910520][ T6492] ? bpf_test_timer_continue+0x150/0x3d0 [ 75.911992][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 75.913377][ T6492] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 75.914922][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 75.916448][ T6492] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 75.917966][ T6492] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 75.919535][ T6492] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 75.920902][ T6492] ? 0xffffffffa0004340 [ 75.922116][ T6492] ? 0xffffffffa0004340 [ 75.923151][ T6492] ? 0xffffffffa0004340 [ 75.924226][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 75.925887][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 75.927281][ T6492] ? lock_acquire+0x2f/0xb0 [ 75.928472][ T6492] ? __fget_files+0x40/0x3f0 [ 75.929727][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 75.931335][ T6492] ? fput+0x30/0x390 [ 75.932393][ T6492] ? __bpf_prog_get+0xa0/0x290 [ 75.933675][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 75.935375][ T6492] __sys_bpf+0xfc6/0x49a0 [ 75.936574][ T6492] ? __pfx_futex_wake+0x10/0x10 [ 75.937961][ T6492] ? finish_task_switch.isra.0+0x2e8/0xcc0 [ 75.939508][ T6492] ? __pfx___sys_bpf+0x10/0x10 [ 75.940747][ T6492] ? __schedule+0xe5d/0x5730 [ 75.941974][ T6492] ? __fget_files+0x23a/0x3f0 [ 75.943474][ T6492] ? do_futex+0x123/0x350 [ 75.944661][ T6492] ? __pfx_do_futex+0x10/0x10 [ 75.945972][ T6492] ? xfd_validate_state+0x5d/0x180 [ 75.947285][ T6492] ? rcu_is_watching+0x12/0xc0 [ 75.948649][ T6492] __x64_sys_bpf+0x78/0xc0 [ 75.949858][ T6492] ? lockdep_hardirqs_on+0x7c/0x110 [ 75.951261][ T6492] do_syscall_64+0xcd/0x250 [ 75.952484][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.954057][ T6492] RIP: 0033:0x7f475a17e719 [ 75.955323][ T6492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.961211][ T6492] RSP: 002b:00007f475b009038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 75.963826][ T6492] RAX: ffffffffffffffda RBX: 00007f475a336058 RCX: 00007f475a17e719 [ 75.965863][ T6492] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 75.967936][ T6492] RBP: 00007f475a1f132e R08: 0000000000000000 R09: 0000000000000000 [ 75.969997][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.972103][ T6492] R13: 0000000000000000 R14: 00007f475a336058 R15: 00007ffe2d0f8dd8 [ 75.974143][ T6492] [ 75.975052][ T6492] BUG: Bad page state in process syz.1.132 pfn:28f75 [ 75.976790][ T6492] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2 pfn:0x28f75 [ 75.979389][ T6492] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 75.981252][ T6492] raw: 00fff00000000000 dead000000000040 ffff88804c173000 0000000000000000 [ 75.983512][ T6492] raw: 0000000000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 75.985863][ T6492] page dumped because: page_pool leak [ 75.987278][ T6492] page_owner tracks the page as allocated [ 75.988758][ T6492] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6492, tgid 6486 (syz.1.132), ts 70655475307, free_ts 70607760714 [ 75.993040][ T6492] post_alloc_hook+0x2d1/0x350 [ 75.994311][ T6492] get_page_from_freelist+0x101e/0x3070 [ 75.995832][ T6492] __alloc_pages_noprof+0x223/0x25a0 [ 75.997230][ T6492] alloc_pages_bulk_noprof+0x77c/0x1110 [ 75.998682][ T6492] __page_pool_alloc_pages_slow+0x18f/0x770 [ 76.000223][ T6492] page_pool_alloc_netmem+0xc4/0x160 [ 76.001595][ T6492] page_pool_alloc_pages+0x1a/0x60 [ 76.002945][ T6492] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 76.004555][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 76.006011][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 76.007436][ T6492] __sys_bpf+0xfc6/0x49a0 [ 76.008913][ T6492] __x64_sys_bpf+0x78/0xc0 [ 76.010188][ T6492] do_syscall_64+0xcd/0x250 [ 76.011450][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.013034][ T6492] page last free pid 34 tgid 34 stack trace: [ 76.014959][ T6492] free_unref_page+0x5f4/0xdc0 [ 76.016361][ T6492] __folio_put+0x30d/0x3d0 [ 76.017623][ T6492] free_page_and_swap_cache+0x249/0x2c0 [ 76.019195][ T6492] tlb_remove_table_rcu+0x89/0xe0 [ 76.020607][ T6492] rcu_core+0x79d/0x14d0 [ 76.021805][ T6492] handle_softirqs+0x213/0x8f0 [ 76.023163][ T6492] run_ksoftirqd+0x3a/0x60 [ 76.024425][ T6492] smpboot_thread_fn+0x661/0xa30 [ 76.026136][ T6492] kthread+0x2c1/0x3a0 [ 76.027349][ T6492] ret_from_fork+0x45/0x80 [ 76.028728][ T6492] ret_from_fork_asm+0x1a/0x30 [ 76.030174][ T6492] Modules linked in: [ 76.031262][ T6492] CPU: 3 UID: 0 PID: 6492 Comm: syz.1.132 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 76.034576][ T6492] Tainted: [B]=BAD_PAGE [ 76.035729][ T6492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.038661][ T6492] Call Trace: [ 76.039571][ T6492] [ 76.040371][ T6492] dump_stack_lvl+0x16c/0x1f0 [ 76.041627][ T6492] bad_page+0xb3/0x1f0 [ 76.042911][ T6492] ? __pfx_bad_page+0x10/0x10 [ 76.044246][ T6492] ? page_bad_reason+0x9d/0x1e0 [ 76.045647][ T6492] free_unref_page+0x657/0xdc0 [ 76.047196][ T6492] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 76.048943][ T6492] ? __phys_addr+0xc6/0x150 [ 76.050261][ T6492] skb_free_head+0xa0/0x1d0 [ 76.051493][ T6492] skb_release_data+0x560/0x730 [ 76.052807][ T6492] sk_skb_reason_drop+0x129/0x1a0 [ 76.054150][ T6492] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 76.055939][ T6492] ? kernel_text_address+0x8d/0x100 [ 76.057304][ T6492] ? hlock_class+0x4e/0x130 [ 76.058527][ T6492] ? __lock_acquire+0x163e/0x3ce0 [ 76.060023][ T6492] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 76.061988][ T6492] ? hlock_class+0x4e/0x130 [ 76.063304][ T6492] ? __lock_acquire+0xbdd/0x3ce0 [ 76.064806][ T6492] ? __pfx___lock_acquire+0x10/0x10 [ 76.066446][ T6492] __netif_receive_skb_list_core+0x357/0x950 [ 76.068270][ T6492] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 76.070324][ T6492] ? trace_lock_acquire+0x14a/0x1d0 [ 76.071716][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 76.073476][ T6492] ? lock_acquire+0x2f/0xb0 [ 76.074672][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 76.076349][ T6492] netif_receive_skb_list_internal+0x753/0xdb0 [ 76.078098][ T6492] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 76.080300][ T6492] ? __pfx_eth_type_trans+0x10/0x10 [ 76.081744][ T6492] ? __build_skb_around+0x278/0x3b0 [ 76.083156][ T6492] netif_receive_skb_list+0x4f/0x4a0 [ 76.084582][ T6492] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 76.086339][ T6492] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 76.088132][ T6492] ? bpf_test_timer_continue+0x150/0x3d0 [ 76.089827][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 76.091346][ T6492] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 76.092943][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 76.094504][ T6492] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 76.096290][ T6492] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 76.097795][ T6492] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 76.099248][ T6492] ? 0xffffffffa0004340 [ 76.100485][ T6492] ? 0xffffffffa0004340 [ 76.101796][ T6492] ? 0xffffffffa0004340 [ 76.103196][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 76.104862][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 76.106543][ T6492] ? lock_acquire+0x2f/0xb0 [ 76.107747][ T6492] ? __fget_files+0x40/0x3f0 [ 76.109225][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 76.110840][ T6492] ? fput+0x30/0x390 [ 76.111872][ T6492] ? __bpf_prog_get+0xa0/0x290 [ 76.113160][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 76.114817][ T6492] __sys_bpf+0xfc6/0x49a0 [ 76.116063][ T6492] ? __pfx_futex_wake+0x10/0x10 [ 76.117435][ T6492] ? finish_task_switch.isra.0+0x2e8/0xcc0 [ 76.119084][ T6492] ? __pfx___sys_bpf+0x10/0x10 [ 76.120400][ T6492] ? __schedule+0xe5d/0x5730 [ 76.121609][ T6492] ? __fget_files+0x23a/0x3f0 [ 76.122855][ T6492] ? do_futex+0x123/0x350 [ 76.123991][ T6492] ? __pfx_do_futex+0x10/0x10 [ 76.125234][ T6492] ? xfd_validate_state+0x5d/0x180 [ 76.126593][ T6492] ? rcu_is_watching+0x12/0xc0 [ 76.127849][ T6492] __x64_sys_bpf+0x78/0xc0 [ 76.129028][ T6492] ? lockdep_hardirqs_on+0x7c/0x110 [ 76.130415][ T6492] do_syscall_64+0xcd/0x250 [ 76.131619][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.133173][ T6492] RIP: 0033:0x7f475a17e719 [ 76.134308][ T6492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.139356][ T6492] RSP: 002b:00007f475b009038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 76.141930][ T6492] RAX: ffffffffffffffda RBX: 00007f475a336058 RCX: 00007f475a17e719 [ 76.144037][ T6492] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 76.146140][ T6492] RBP: 00007f475a1f132e R08: 0000000000000000 R09: 0000000000000000 [ 76.148194][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.150348][ T6492] R13: 0000000000000000 R14: 00007f475a336058 R15: 00007ffe2d0f8dd8 [ 76.152374][ T6492] [ 76.153283][ T6492] BUG: Bad page state in process syz.1.132 pfn:2f3ae [ 76.155149][ T6492] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802f3ae360 pfn:0x2f3ae [ 76.157817][ T6492] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 76.159770][ T6492] raw: 00fff00000000000 dead000000000040 ffff88804c173000 0000000000000000 [ 76.162384][ T6492] raw: ffff88802f3ae360 0000000000000001 00000000ffffffff 0000000000000000 [ 76.164639][ T6492] page dumped because: page_pool leak [ 76.166103][ T6492] page_owner tracks the page as allocated [ 76.167578][ T6492] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6492, tgid 6486 (syz.1.132), ts 70655470381, free_ts 70607766442 [ 76.171849][ T6492] post_alloc_hook+0x2d1/0x350 [ 76.173099][ T6492] get_page_from_freelist+0x101e/0x3070 [ 76.174644][ T6492] __alloc_pages_noprof+0x223/0x25a0 [ 76.176451][ T6492] alloc_pages_bulk_noprof+0x77c/0x1110 [ 76.177871][ T6492] __page_pool_alloc_pages_slow+0x18f/0x770 [ 76.179568][ T6492] page_pool_alloc_netmem+0xc4/0x160 [ 76.180958][ T6492] page_pool_alloc_pages+0x1a/0x60 [ 76.182405][ T6492] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 76.184069][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 76.185967][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 76.187498][ T6492] __sys_bpf+0xfc6/0x49a0 [ 76.188644][ T6492] __x64_sys_bpf+0x78/0xc0 [ 76.189826][ T6492] do_syscall_64+0xcd/0x250 [ 76.191049][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.192608][ T6492] page last free pid 34 tgid 34 stack trace: [ 76.194310][ T6492] free_unref_page+0x5f4/0xdc0 [ 76.195707][ T6492] __folio_put+0x30d/0x3d0 [ 76.196918][ T6492] free_page_and_swap_cache+0x249/0x2c0 [ 76.198380][ T6492] tlb_remove_table_rcu+0x89/0xe0 [ 76.199721][ T6492] rcu_core+0x79d/0x14d0 [ 76.200852][ T6492] handle_softirqs+0x213/0x8f0 [ 76.202219][ T6492] run_ksoftirqd+0x3a/0x60 [ 76.203505][ T6492] smpboot_thread_fn+0x661/0xa30 [ 76.205045][ T6492] kthread+0x2c1/0x3a0 [ 76.206247][ T6492] ret_from_fork+0x45/0x80 [ 76.207700][ T6492] ret_from_fork_asm+0x1a/0x30 [ 76.209387][ T6492] Modules linked in: [ 76.210547][ T6492] CPU: 3 UID: 0 PID: 6492 Comm: syz.1.132 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 76.213838][ T6492] Tainted: [B]=BAD_PAGE [ 76.215288][ T6492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.218291][ T6492] Call Trace: [ 76.219191][ T6492] [ 76.220152][ T6492] dump_stack_lvl+0x16c/0x1f0 [ 76.221584][ T6492] bad_page+0xb3/0x1f0 [ 76.222760][ T6492] ? __pfx_bad_page+0x10/0x10 [ 76.224228][ T6492] ? page_bad_reason+0x9d/0x1e0 [ 76.225918][ T6492] free_unref_page+0x657/0xdc0 [ 76.227312][ T6492] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 76.229069][ T6492] ? __phys_addr+0xc6/0x150 [ 76.230547][ T6492] skb_free_head+0xa0/0x1d0 [ 76.231918][ T6492] skb_release_data+0x560/0x730 [ 76.233357][ T6492] sk_skb_reason_drop+0x129/0x1a0 [ 76.234818][ T6492] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 76.236942][ T6492] ? kernel_text_address+0x8d/0x100 [ 76.238291][ T6492] ? hlock_class+0x4e/0x130 [ 76.239473][ T6492] ? __lock_acquire+0x163e/0x3ce0 [ 76.241186][ T6492] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 76.243203][ T6492] ? hlock_class+0x4e/0x130 [ 76.244429][ T6492] ? __lock_acquire+0xbdd/0x3ce0 [ 76.245779][ T6492] ? __pfx___lock_acquire+0x10/0x10 [ 76.247213][ T6492] __netif_receive_skb_list_core+0x357/0x950 [ 76.248806][ T6492] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 76.250660][ T6492] ? trace_lock_acquire+0x14a/0x1d0 [ 76.252094][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 76.253769][ T6492] ? lock_acquire+0x2f/0xb0 [ 76.255237][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 76.256888][ T6492] netif_receive_skb_list_internal+0x753/0xdb0 [ 76.258637][ T6492] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 76.260690][ T6492] ? __pfx_eth_type_trans+0x10/0x10 [ 76.262469][ T6492] ? __build_skb_around+0x278/0x3b0 [ 76.264225][ T6492] netif_receive_skb_list+0x4f/0x4a0 [ 76.266055][ T6492] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 76.268012][ T6492] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 76.269901][ T6492] ? bpf_test_timer_continue+0x150/0x3d0 [ 76.271493][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 76.272992][ T6492] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 76.274718][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 76.276378][ T6492] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 76.278074][ T6492] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 76.279756][ T6492] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 76.281328][ T6492] ? 0xffffffffa0004340 [ 76.282528][ T6492] ? 0xffffffffa0004340 [ 76.283628][ T6492] ? 0xffffffffa0004340 [ 76.284808][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 76.286419][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 76.287820][ T6492] ? lock_acquire+0x2f/0xb0 [ 76.289015][ T6492] ? __fget_files+0x40/0x3f0 [ 76.290263][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 76.291808][ T6492] ? fput+0x30/0x390 [ 76.292850][ T6492] ? __bpf_prog_get+0xa0/0x290 [ 76.294137][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 76.295667][ T6492] __sys_bpf+0xfc6/0x49a0 [ 76.296818][ T6492] ? __pfx_futex_wake+0x10/0x10 [ 76.298122][ T6492] ? finish_task_switch.isra.0+0x2e8/0xcc0 [ 76.299960][ T6492] ? __pfx___sys_bpf+0x10/0x10 [ 76.301249][ T6492] ? __schedule+0xe5d/0x5730 [ 76.302509][ T6492] ? __fget_files+0x23a/0x3f0 [ 76.303847][ T6492] ? do_futex+0x123/0x350 [ 76.305119][ T6492] ? __pfx_do_futex+0x10/0x10 [ 76.306492][ T6492] ? xfd_validate_state+0x5d/0x180 [ 76.308065][ T6492] ? rcu_is_watching+0x12/0xc0 [ 76.309489][ T6492] __x64_sys_bpf+0x78/0xc0 [ 76.310819][ T6492] ? lockdep_hardirqs_on+0x7c/0x110 [ 76.312352][ T6492] do_syscall_64+0xcd/0x250 [ 76.313689][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.315479][ T6492] RIP: 0033:0x7f475a17e719 [ 76.316663][ T6492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.322271][ T6492] RSP: 002b:00007f475b009038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 76.324437][ T6492] RAX: ffffffffffffffda RBX: 00007f475a336058 RCX: 00007f475a17e719 [ 76.326777][ T6492] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 76.328942][ T6492] RBP: 00007f475a1f132e R08: 0000000000000000 R09: 0000000000000000 [ 76.331259][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.333469][ T6492] R13: 0000000000000000 R14: 00007f475a336058 R15: 00007ffe2d0f8dd8 [ 76.335600][ T6492] [ 76.336494][ T6492] BUG: Bad page state in process syz.1.132 pfn:4dda0 [ 76.338244][ T6492] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804dda0000 pfn:0x4dda0 [ 76.340836][ T6492] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 76.342820][ T6492] raw: 00fff00000000000 dead000000000040 ffff88804c173000 0000000000000000 [ 76.345554][ T6492] raw: ffff88804dda0000 0000000000000001 00000000ffffffff 0000000000000000 [ 76.348040][ T6492] page dumped because: page_pool leak [ 76.349574][ T6492] page_owner tracks the page as allocated [ 76.351121][ T6492] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6492, tgid 6486 (syz.1.132), ts 70655465410, free_ts 70607773004 [ 76.355569][ T6492] post_alloc_hook+0x2d1/0x350 [ 76.357003][ T6492] get_page_from_freelist+0x101e/0x3070 [ 76.358665][ T6492] __alloc_pages_noprof+0x223/0x25a0 [ 76.360262][ T6492] alloc_pages_bulk_noprof+0x77c/0x1110 [ 76.362041][ T6492] __page_pool_alloc_pages_slow+0x18f/0x770 [ 76.364063][ T6492] page_pool_alloc_netmem+0xc4/0x160 [ 76.366076][ T6492] page_pool_alloc_pages+0x1a/0x60 [ 76.367483][ T6492] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 76.369187][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 76.370704][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 76.372124][ T6492] __sys_bpf+0xfc6/0x49a0 [ 76.373266][ T6492] __x64_sys_bpf+0x78/0xc0 [ 76.374446][ T6492] do_syscall_64+0xcd/0x250 [ 76.375740][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.377244][ T6492] page last free pid 34 tgid 34 stack trace: [ 76.378820][ T6492] free_unref_page+0x5f4/0xdc0 [ 76.380268][ T6492] __folio_put+0x30d/0x3d0 [ 76.381890][ T6492] free_page_and_swap_cache+0x249/0x2c0 [ 76.383392][ T6492] tlb_remove_table_rcu+0x89/0xe0 [ 76.384720][ T6492] rcu_core+0x79d/0x14d0 [ 76.385948][ T6492] handle_softirqs+0x213/0x8f0 [ 76.387277][ T6492] run_ksoftirqd+0x3a/0x60 [ 76.388459][ T6492] smpboot_thread_fn+0x661/0xa30 [ 76.389752][ T6492] kthread+0x2c1/0x3a0 [ 76.390971][ T6492] ret_from_fork+0x45/0x80 [ 76.392163][ T6492] ret_from_fork_asm+0x1a/0x30 [ 76.393452][ T6492] Modules linked in: [ 76.394524][ T6492] CPU: 3 UID: 0 PID: 6492 Comm: syz.1.132 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 76.397599][ T6492] Tainted: [B]=BAD_PAGE [ 76.398655][ T6492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.401511][ T6492] Call Trace: [ 76.402434][ T6492] [ 76.403255][ T6492] dump_stack_lvl+0x16c/0x1f0 [ 76.404507][ T6492] bad_page+0xb3/0x1f0 [ 76.405642][ T6492] ? __pfx_bad_page+0x10/0x10 [ 76.406900][ T6492] ? page_bad_reason+0x9d/0x1e0 [ 76.408189][ T6492] free_unref_page+0x657/0xdc0 [ 76.409470][ T6492] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 76.411078][ T6492] ? __phys_addr+0xc6/0x150 [ 76.412285][ T6492] skb_free_head+0xa0/0x1d0 [ 76.413492][ T6492] skb_release_data+0x560/0x730 [ 76.414781][ T6492] sk_skb_reason_drop+0x129/0x1a0 [ 76.416129][ T6492] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 76.417875][ T6492] ? kernel_text_address+0x8d/0x100 [ 76.419522][ T6492] ? hlock_class+0x4e/0x130 [ 76.420882][ T6492] ? __lock_acquire+0x163e/0x3ce0 [ 76.422303][ T6492] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 76.424342][ T6492] ? hlock_class+0x4e/0x130 [ 76.425740][ T6492] ? __lock_acquire+0xbdd/0x3ce0 [ 76.427291][ T6492] ? __pfx___lock_acquire+0x10/0x10 [ 76.428674][ T6492] __netif_receive_skb_list_core+0x357/0x950 [ 76.430432][ T6492] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 76.432156][ T6492] ? trace_lock_acquire+0x14a/0x1d0 [ 76.433555][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 76.435247][ T6492] ? lock_acquire+0x2f/0xb0 [ 76.436471][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 76.438187][ T6492] netif_receive_skb_list_internal+0x753/0xdb0 [ 76.439805][ T6492] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 76.441901][ T6492] ? __pfx_eth_type_trans+0x10/0x10 [ 76.443439][ T6492] ? __build_skb_around+0x278/0x3b0 [ 76.445070][ T6492] netif_receive_skb_list+0x4f/0x4a0 [ 76.446859][ T6492] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 76.448757][ T6492] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 76.450863][ T6492] ? bpf_test_timer_continue+0x150/0x3d0 [ 76.452416][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 76.453969][ T6492] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 76.455784][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 76.457347][ T6492] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 76.458901][ T6492] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 76.460570][ T6492] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 76.462139][ T6492] ? 0xffffffffa0004340 [ 76.463286][ T6492] ? 0xffffffffa0004340 [ 76.464385][ T6492] ? 0xffffffffa0004340 [ 76.465648][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 76.467210][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 76.468707][ T6492] ? lock_acquire+0x2f/0xb0 [ 76.470115][ T6492] ? __fget_files+0x40/0x3f0 [ 76.471358][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 76.472985][ T6492] ? fput+0x30/0x390 [ 76.474104][ T6492] ? __bpf_prog_get+0xa0/0x290 [ 76.475411][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 76.477118][ T6492] __sys_bpf+0xfc6/0x49a0 [ 76.478297][ T6492] ? __pfx_futex_wake+0x10/0x10 [ 76.479604][ T6492] ? finish_task_switch.isra.0+0x2e8/0xcc0 [ 76.481314][ T6492] ? __pfx___sys_bpf+0x10/0x10 [ 76.482629][ T6492] ? __schedule+0xe5d/0x5730 [ 76.483977][ T6492] ? __fget_files+0x23a/0x3f0 [ 76.485217][ T6492] ? do_futex+0x123/0x350 [ 76.486545][ T6492] ? __pfx_do_futex+0x10/0x10 [ 76.487756][ T6492] ? xfd_validate_state+0x5d/0x180 [ 76.489131][ T6492] ? rcu_is_watching+0x12/0xc0 [ 76.490551][ T6492] __x64_sys_bpf+0x78/0xc0 [ 76.491719][ T6492] ? lockdep_hardirqs_on+0x7c/0x110 [ 76.493098][ T6492] do_syscall_64+0xcd/0x250 [ 76.494375][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.496064][ T6492] RIP: 0033:0x7f475a17e719 [ 76.497292][ T6492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.503018][ T6492] RSP: 002b:00007f475b009038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 76.505712][ T6492] RAX: ffffffffffffffda RBX: 00007f475a336058 RCX: 00007f475a17e719 [ 76.508028][ T6492] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 76.510404][ T6492] RBP: 00007f475a1f132e R08: 0000000000000000 R09: 0000000000000000 [ 76.512510][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.514625][ T6492] R13: 0000000000000000 R14: 00007f475a336058 R15: 00007ffe2d0f8dd8 [ 76.516851][ T6492] [ 76.517769][ T6492] BUG: Bad page state in process syz.1.132 pfn:24a97 [ 76.519813][ T6492] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2 pfn:0x24a97 [ 76.522456][ T6492] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 76.524316][ T6492] raw: 00fff00000000000 dead000000000040 ffff88804c173000 0000000000000000 [ 76.527334][ T6492] raw: 0000000000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 76.529675][ T6492] page dumped because: page_pool leak [ 76.531142][ T6492] page_owner tracks the page as allocated [ 76.532791][ T6492] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6492, tgid 6486 (syz.1.132), ts 70655460754, free_ts 70607778438 [ 76.537901][ T6492] post_alloc_hook+0x2d1/0x350 [ 76.539392][ T6492] get_page_from_freelist+0x101e/0x3070 [ 76.541025][ T6492] __alloc_pages_noprof+0x223/0x25a0 [ 76.542448][ T6492] alloc_pages_bulk_noprof+0x77c/0x1110 [ 76.543933][ T6492] __page_pool_alloc_pages_slow+0x18f/0x770 [ 76.545565][ T6492] page_pool_alloc_netmem+0xc4/0x160 [ 76.546979][ T6492] page_pool_alloc_pages+0x1a/0x60 [ 76.548334][ T6492] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 76.549958][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 76.551356][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 76.552745][ T6492] __sys_bpf+0xfc6/0x49a0 [ 76.553894][ T6492] __x64_sys_bpf+0x78/0xc0 [ 76.555174][ T6492] do_syscall_64+0xcd/0x250 [ 76.556402][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.557990][ T6492] page last free pid 34 tgid 34 stack trace: [ 76.559684][ T6492] free_unref_page+0x5f4/0xdc0 [ 76.560975][ T6492] __folio_put+0x30d/0x3d0 [ 76.562157][ T6492] free_page_and_swap_cache+0x249/0x2c0 [ 76.563622][ T6492] tlb_remove_table_rcu+0x89/0xe0 [ 76.565179][ T6492] rcu_core+0x79d/0x14d0 [ 76.566469][ T6492] handle_softirqs+0x213/0x8f0 [ 76.567877][ T6492] run_ksoftirqd+0x3a/0x60 [ 76.569185][ T6492] smpboot_thread_fn+0x661/0xa30 [ 76.570643][ T6492] kthread+0x2c1/0x3a0 [ 76.571847][ T6492] ret_from_fork+0x45/0x80 [ 76.573157][ T6492] ret_from_fork_asm+0x1a/0x30 [ 76.574467][ T6492] Modules linked in: [ 76.575579][ T6492] CPU: 3 UID: 0 PID: 6492 Comm: syz.1.132 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 76.578865][ T6492] Tainted: [B]=BAD_PAGE [ 76.579973][ T6492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.583327][ T6492] Call Trace: [ 76.584232][ T6492] [ 76.585297][ T6492] dump_stack_lvl+0x16c/0x1f0 [ 76.586597][ T6492] bad_page+0xb3/0x1f0 [ 76.587705][ T6492] ? __pfx_bad_page+0x10/0x10 [ 76.588984][ T6492] ? page_bad_reason+0x9d/0x1e0 [ 76.590307][ T6492] free_unref_page+0x657/0xdc0 [ 76.591586][ T6492] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 76.593256][ T6492] ? __phys_addr+0xc6/0x150 [ 76.594612][ T6492] skb_free_head+0xa0/0x1d0 [ 76.595864][ T6492] skb_release_data+0x560/0x730 [ 76.597171][ T6492] sk_skb_reason_drop+0x129/0x1a0 [ 76.598502][ T6492] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 76.600389][ T6492] ? kernel_text_address+0x8d/0x100 [ 76.601966][ T6492] ? hlock_class+0x4e/0x130 [ 76.603271][ T6492] ? __lock_acquire+0x163e/0x3ce0 [ 76.604637][ T6492] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 76.606809][ T6492] ? hlock_class+0x4e/0x130 [ 76.608155][ T6492] ? __lock_acquire+0xbdd/0x3ce0 [ 76.609599][ T6492] ? __pfx___lock_acquire+0x10/0x10 [ 76.611281][ T6492] __netif_receive_skb_list_core+0x357/0x950 [ 76.612973][ T6492] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 76.614788][ T6492] ? trace_lock_acquire+0x14a/0x1d0 [ 76.616285][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 76.618144][ T6492] ? lock_acquire+0x2f/0xb0 [ 76.619345][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 76.621076][ T6492] netif_receive_skb_list_internal+0x753/0xdb0 [ 76.622958][ T6492] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 76.624721][ T6492] ? __pfx_eth_type_trans+0x10/0x10 [ 76.626165][ T6492] ? __build_skb_around+0x278/0x3b0 [ 76.627835][ T6492] netif_receive_skb_list+0x4f/0x4a0 [ 76.629437][ T6492] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 76.631234][ T6492] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 76.632928][ T6492] ? bpf_test_timer_continue+0x150/0x3d0 [ 76.634435][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 76.635879][ T6492] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 76.637424][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 76.638926][ T6492] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 76.640678][ T6492] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 76.642197][ T6492] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 76.643536][ T6492] ? 0xffffffffa0004340 [ 76.644698][ T6492] ? 0xffffffffa0004340 [ 76.645931][ T6492] ? 0xffffffffa0004340 [ 76.647258][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 76.649233][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 76.650741][ T6492] ? lock_acquire+0x2f/0xb0 [ 76.652053][ T6492] ? __fget_files+0x40/0x3f0 [ 76.653499][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 76.655361][ T6492] ? fput+0x30/0x390 [ 76.656655][ T6492] ? __bpf_prog_get+0xa0/0x290 [ 76.657924][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 76.659484][ T6492] __sys_bpf+0xfc6/0x49a0 [ 76.660802][ T6492] ? __pfx_futex_wake+0x10/0x10 [ 76.662445][ T6492] ? finish_task_switch.isra.0+0x2e8/0xcc0 [ 76.664388][ T6492] ? __pfx___sys_bpf+0x10/0x10 [ 76.665802][ T6492] ? __schedule+0xe5d/0x5730 [ 76.667149][ T6492] ? __fget_files+0x23a/0x3f0 [ 76.668578][ T6492] ? do_futex+0x123/0x350 [ 76.669929][ T6492] ? __pfx_do_futex+0x10/0x10 [ 76.671212][ T6492] ? xfd_validate_state+0x5d/0x180 [ 76.672725][ T6492] ? rcu_is_watching+0x12/0xc0 [ 76.674041][ T6492] __x64_sys_bpf+0x78/0xc0 [ 76.675668][ T6492] ? lockdep_hardirqs_on+0x7c/0x110 [ 76.677139][ T6492] do_syscall_64+0xcd/0x250 [ 76.678391][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.680208][ T6492] RIP: 0033:0x7f475a17e719 [ 76.681347][ T6492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.686417][ T6492] RSP: 002b:00007f475b009038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 76.688579][ T6492] RAX: ffffffffffffffda RBX: 00007f475a336058 RCX: 00007f475a17e719 [ 76.690636][ T6492] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 76.692680][ T6492] RBP: 00007f475a1f132e R08: 0000000000000000 R09: 0000000000000000 [ 76.694856][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.696874][ T6492] R13: 0000000000000000 R14: 00007f475a336058 R15: 00007ffe2d0f8dd8 [ 76.698921][ T6492] [ 76.699797][ T6492] BUG: Bad page state in process syz.1.132 pfn:4c6d3 [ 76.701524][ T6492] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2 pfn:0x4c6d3 [ 76.703786][ T6492] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 76.705688][ T6492] raw: 00fff00000000000 dead000000000040 ffff88804c173000 0000000000000000 [ 76.707929][ T6492] raw: 0000000000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 76.710142][ T6492] page dumped because: page_pool leak [ 76.711532][ T6492] page_owner tracks the page as allocated [ 76.713005][ T6492] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6492, tgid 6486 (syz.1.132), ts 70655455880, free_ts 70607784574 [ 76.717340][ T6492] post_alloc_hook+0x2d1/0x350 [ 76.718667][ T6492] get_page_from_freelist+0x101e/0x3070 [ 76.720112][ T6492] __alloc_pages_noprof+0x223/0x25a0 [ 76.721517][ T6492] alloc_pages_bulk_noprof+0x77c/0x1110 [ 76.722963][ T6492] __page_pool_alloc_pages_slow+0x18f/0x770 [ 76.724505][ T6492] page_pool_alloc_netmem+0xc4/0x160 [ 76.725986][ T6492] page_pool_alloc_pages+0x1a/0x60 [ 76.727437][ T6492] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 76.729069][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 76.730479][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 76.731900][ T6492] __sys_bpf+0xfc6/0x49a0 [ 76.733041][ T6492] __x64_sys_bpf+0x78/0xc0 [ 76.734227][ T6492] do_syscall_64+0xcd/0x250 [ 76.735551][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.737113][ T6492] page last free pid 34 tgid 34 stack trace: [ 76.738693][ T6492] free_unref_page+0x5f4/0xdc0 [ 76.739953][ T6492] __folio_put+0x30d/0x3d0 [ 76.741092][ T6492] free_page_and_swap_cache+0x249/0x2c0 [ 76.742542][ T6492] tlb_remove_table_rcu+0x89/0xe0 [ 76.743873][ T6492] rcu_core+0x79d/0x14d0 [ 76.745060][ T6492] handle_softirqs+0x213/0x8f0 [ 76.746366][ T6492] run_ksoftirqd+0x3a/0x60 [ 76.747546][ T6492] smpboot_thread_fn+0x661/0xa30 [ 76.748848][ T6492] kthread+0x2c1/0x3a0 [ 76.749916][ T6492] ret_from_fork+0x45/0x80 [ 76.751091][ T6492] ret_from_fork_asm+0x1a/0x30 [ 76.752347][ T6492] Modules linked in: [ 76.753371][ T6492] CPU: 3 UID: 0 PID: 6492 Comm: syz.1.132 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 76.756506][ T6492] Tainted: [B]=BAD_PAGE [ 76.757604][ T6492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.760428][ T6492] Call Trace: [ 76.761349][ T6492] [ 76.762150][ T6492] dump_stack_lvl+0x16c/0x1f0 [ 76.763398][ T6492] bad_page+0xb3/0x1f0 [ 76.764463][ T6492] ? __pfx_bad_page+0x10/0x10 [ 76.765894][ T6492] ? page_bad_reason+0x9d/0x1e0 [ 76.767338][ T6492] free_unref_page+0x657/0xdc0 [ 76.768780][ T6492] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 76.770519][ T6492] ? __phys_addr+0xc6/0x150 [ 76.772227][ T6492] skb_free_head+0xa0/0x1d0 [ 76.773630][ T6492] skb_release_data+0x560/0x730 [ 76.775037][ T6492] sk_skb_reason_drop+0x129/0x1a0 [ 76.776362][ T6492] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 76.778133][ T6492] ? kernel_text_address+0x8d/0x100 [ 76.779511][ T6492] ? hlock_class+0x4e/0x130 [ 76.780709][ T6492] ? __lock_acquire+0x163e/0x3ce0 [ 76.782062][ T6492] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 76.784349][ T6492] ? hlock_class+0x4e/0x130 [ 76.785602][ T6492] ? __lock_acquire+0xbdd/0x3ce0 [ 76.787212][ T6492] ? __pfx___lock_acquire+0x10/0x10 [ 76.788524][ T6492] __netif_receive_skb_list_core+0x357/0x950 [ 76.790056][ T6492] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 76.791779][ T6492] ? trace_lock_acquire+0x14a/0x1d0 [ 76.793077][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 76.794682][ T6492] ? lock_acquire+0x2f/0xb0 [ 76.795875][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 76.797464][ T6492] netif_receive_skb_list_internal+0x753/0xdb0 [ 76.798987][ T6492] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 76.800838][ T6492] ? __pfx_eth_type_trans+0x10/0x10 [ 76.802229][ T6492] ? __build_skb_around+0x278/0x3b0 [ 76.803801][ T6492] netif_receive_skb_list+0x4f/0x4a0 [ 76.805390][ T6492] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 76.807475][ T6492] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 76.809813][ T6492] ? bpf_test_timer_continue+0x150/0x3d0 [ 76.811387][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 76.812727][ T6492] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 76.814475][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 76.816196][ T6492] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 76.817887][ T6492] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 76.819460][ T6492] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 76.820850][ T6492] ? 0xffffffffa0004340 [ 76.822423][ T6492] ? 0xffffffffa0004340 [ 76.823577][ T6492] ? 0xffffffffa0004340 [ 76.824743][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 76.826447][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 76.827951][ T6492] ? lock_acquire+0x2f/0xb0 [ 76.829163][ T6492] ? __fget_files+0x40/0x3f0 [ 76.830404][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 76.831950][ T6492] ? fput+0x30/0x390 [ 76.832991][ T6492] ? __bpf_prog_get+0xa0/0x290 [ 76.834472][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 76.836075][ T6492] __sys_bpf+0xfc6/0x49a0 [ 76.837223][ T6492] ? __pfx_futex_wake+0x10/0x10 [ 76.838535][ T6492] ? finish_task_switch.isra.0+0x2e8/0xcc0 [ 76.840367][ T6492] ? __pfx___sys_bpf+0x10/0x10 [ 76.841614][ T6492] ? __schedule+0xe5d/0x5730 [ 76.842863][ T6492] ? __fget_files+0x23a/0x3f0 [ 76.844122][ T6492] ? do_futex+0x123/0x350 [ 76.845361][ T6492] ? __pfx_do_futex+0x10/0x10 [ 76.846719][ T6492] ? xfd_validate_state+0x5d/0x180 [ 76.848139][ T6492] ? rcu_is_watching+0x12/0xc0 [ 76.849354][ T6492] __x64_sys_bpf+0x78/0xc0 [ 76.850534][ T6492] ? lockdep_hardirqs_on+0x7c/0x110 [ 76.851892][ T6492] do_syscall_64+0xcd/0x250 [ 76.853096][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.854838][ T6492] RIP: 0033:0x7f475a17e719 [ 76.856040][ T6492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.860981][ T6492] RSP: 002b:00007f475b009038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 76.863320][ T6492] RAX: ffffffffffffffda RBX: 00007f475a336058 RCX: 00007f475a17e719 [ 76.865443][ T6492] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 76.867852][ T6492] RBP: 00007f475a1f132e R08: 0000000000000000 R09: 0000000000000000 [ 76.870260][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.872495][ T6492] R13: 0000000000000000 R14: 00007f475a336058 R15: 00007ffe2d0f8dd8 [ 76.874768][ T6492] [ 76.875769][ T6492] BUG: Bad page state in process syz.1.132 pfn:311d2 [ 76.877649][ T6492] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880311d3e00 pfn:0x311d2 [ 76.880684][ T6492] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 76.882763][ T6492] raw: 00fff00000000000 dead000000000040 ffff88804c173000 0000000000000000 [ 76.885294][ T6492] raw: ffff8880311d3e00 0000000000000001 00000000ffffffff 0000000000000000 [ 76.887735][ T6492] page dumped because: page_pool leak [ 76.889171][ T6492] page_owner tracks the page as allocated [ 76.890809][ T6492] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6492, tgid 6486 (syz.1.132), ts 70655451080, free_ts 70607791619 [ 76.895504][ T6492] post_alloc_hook+0x2d1/0x350 [ 76.896853][ T6492] get_page_from_freelist+0x101e/0x3070 [ 76.898373][ T6492] __alloc_pages_noprof+0x223/0x25a0 [ 76.899872][ T6492] alloc_pages_bulk_noprof+0x77c/0x1110 [ 76.901625][ T6492] __page_pool_alloc_pages_slow+0x18f/0x770 [ 76.903293][ T6492] page_pool_alloc_netmem+0xc4/0x160 [ 76.904707][ T6492] page_pool_alloc_pages+0x1a/0x60 [ 76.906215][ T6492] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 76.908082][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 76.909536][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 76.910987][ T6492] __sys_bpf+0xfc6/0x49a0 [ 76.912234][ T6492] __x64_sys_bpf+0x78/0xc0 [ 76.913434][ T6492] do_syscall_64+0xcd/0x250 [ 76.914671][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.916348][ T6492] page last free pid 34 tgid 34 stack trace: [ 76.918378][ T6492] free_unref_page+0x5f4/0xdc0 [ 76.919878][ T6492] __folio_put+0x30d/0x3d0 [ 76.921289][ T6492] free_page_and_swap_cache+0x249/0x2c0 [ 76.923053][ T6492] tlb_remove_table_rcu+0x89/0xe0 [ 76.924650][ T6492] rcu_core+0x79d/0x14d0 [ 76.926157][ T6492] handle_softirqs+0x213/0x8f0 [ 76.927526][ T6492] run_ksoftirqd+0x3a/0x60 [ 76.928695][ T6492] smpboot_thread_fn+0x661/0xa30 [ 76.929984][ T6492] kthread+0x2c1/0x3a0 [ 76.931083][ T6492] ret_from_fork+0x45/0x80 [ 76.932267][ T6492] ret_from_fork_asm+0x1a/0x30 [ 76.933506][ T6492] Modules linked in: [ 76.934566][ T6492] CPU: 3 UID: 0 PID: 6492 Comm: syz.1.132 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 76.937674][ T6492] Tainted: [B]=BAD_PAGE [ 76.938751][ T6492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.941735][ T6492] Call Trace: [ 76.942642][ T6492] [ 76.943437][ T6492] dump_stack_lvl+0x16c/0x1f0 [ 76.944701][ T6492] bad_page+0xb3/0x1f0 [ 76.945847][ T6492] ? __pfx_bad_page+0x10/0x10 [ 76.947091][ T6492] ? page_bad_reason+0x9d/0x1e0 [ 76.948358][ T6492] free_unref_page+0x657/0xdc0 [ 76.950090][ T6492] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 76.951681][ T6492] ? __phys_addr+0xc6/0x150 [ 76.952895][ T6492] skb_free_head+0xa0/0x1d0 [ 76.954126][ T6492] skb_release_data+0x560/0x730 [ 76.955454][ T6492] sk_skb_reason_drop+0x129/0x1a0 [ 76.956796][ T6492] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 76.958677][ T6492] ? kernel_text_address+0x8d/0x100 [ 76.960136][ T6492] ? hlock_class+0x4e/0x130 [ 76.962463][ T6492] ? __lock_acquire+0x163e/0x3ce0 [ 76.963840][ T6492] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 76.965935][ T6492] ? hlock_class+0x4e/0x130 [ 76.967377][ T6492] ? __lock_acquire+0xbdd/0x3ce0 [ 76.969046][ T6492] ? __pfx___lock_acquire+0x10/0x10 [ 76.970599][ T6492] __netif_receive_skb_list_core+0x357/0x950 [ 76.972352][ T6492] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 76.974069][ T6492] ? trace_lock_acquire+0x14a/0x1d0 [ 76.975557][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 76.977487][ T6492] ? lock_acquire+0x2f/0xb0 [ 76.978736][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 76.980686][ T6492] netif_receive_skb_list_internal+0x753/0xdb0 [ 76.982485][ T6492] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 76.984277][ T6492] ? __pfx_eth_type_trans+0x10/0x10 [ 76.985678][ T6492] ? __build_skb_around+0x278/0x3b0 [ 76.987084][ T6492] netif_receive_skb_list+0x4f/0x4a0 [ 76.988493][ T6492] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 76.990144][ T6492] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 76.991886][ T6492] ? bpf_test_timer_continue+0x150/0x3d0 [ 76.993373][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 76.994791][ T6492] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 76.996345][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 76.997897][ T6492] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 76.999457][ T6492] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 77.001001][ T6492] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 77.002461][ T6492] ? 0xffffffffa0004340 [ 77.003547][ T6492] ? 0xffffffffa0004340 [ 77.004626][ T6492] ? 0xffffffffa0004340 [ 77.005745][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 77.007728][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 77.009428][ T6492] ? lock_acquire+0x2f/0xb0 [ 77.010713][ T6492] ? __fget_files+0x40/0x3f0 [ 77.011954][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 77.013539][ T6492] ? fput+0x30/0x390 [ 77.014598][ T6492] ? __bpf_prog_get+0xa0/0x290 [ 77.015919][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 77.017465][ T6492] __sys_bpf+0xfc6/0x49a0 [ 77.018642][ T6492] ? __pfx_futex_wake+0x10/0x10 [ 77.020069][ T6492] ? finish_task_switch.isra.0+0x2e8/0xcc0 [ 77.021651][ T6492] ? __pfx___sys_bpf+0x10/0x10 [ 77.023164][ T6492] ? __schedule+0xe5d/0x5730 [ 77.024573][ T6492] ? __fget_files+0x23a/0x3f0 [ 77.026041][ T6492] ? do_futex+0x123/0x350 [ 77.027306][ T6492] ? __pfx_do_futex+0x10/0x10 [ 77.028617][ T6492] ? xfd_validate_state+0x5d/0x180 [ 77.030043][ T6492] ? rcu_is_watching+0x12/0xc0 [ 77.031375][ T6492] __x64_sys_bpf+0x78/0xc0 [ 77.032579][ T6492] ? lockdep_hardirqs_on+0x7c/0x110 [ 77.033974][ T6492] do_syscall_64+0xcd/0x250 [ 77.035261][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.036812][ T6492] RIP: 0033:0x7f475a17e719 [ 77.038214][ T6492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.043543][ T6492] RSP: 002b:00007f475b009038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 77.045810][ T6492] RAX: ffffffffffffffda RBX: 00007f475a336058 RCX: 00007f475a17e719 [ 77.047897][ T6492] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 77.049964][ T6492] RBP: 00007f475a1f132e R08: 0000000000000000 R09: 0000000000000000 [ 77.051991][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.053950][ T6492] R13: 0000000000000000 R14: 00007f475a336058 R15: 00007ffe2d0f8dd8 [ 77.055960][ T6492] [ 77.056863][ T6492] BUG: Bad page state in process syz.1.132 pfn:49834 [ 77.059274][ T6492] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888049835e00 pfn:0x49834 [ 77.062569][ T6492] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 77.064661][ T6492] raw: 00fff00000000000 dead000000000040 ffff88804c173000 0000000000000000 [ 77.067469][ T6492] raw: ffff888049835e00 0000000000000001 00000000ffffffff 0000000000000000 [ 77.070249][ T6492] page dumped because: page_pool leak [ 77.071662][ T6492] page_owner tracks the page as allocated [ 77.073157][ T6492] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6492, tgid 6486 (syz.1.132), ts 70655446321, free_ts 70607797475 [ 77.077685][ T6492] post_alloc_hook+0x2d1/0x350 [ 77.079044][ T6492] get_page_from_freelist+0x101e/0x3070 [ 77.080484][ T6492] __alloc_pages_noprof+0x223/0x25a0 [ 77.081866][ T6492] alloc_pages_bulk_noprof+0x77c/0x1110 [ 77.083294][ T6492] __page_pool_alloc_pages_slow+0x18f/0x770 [ 77.085433][ T6492] page_pool_alloc_netmem+0xc4/0x160 [ 77.087061][ T6492] page_pool_alloc_pages+0x1a/0x60 [ 77.088470][ T6492] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 77.090160][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 77.091647][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 77.093169][ T6492] __sys_bpf+0xfc6/0x49a0 [ 77.094472][ T6492] __x64_sys_bpf+0x78/0xc0 [ 77.095883][ T6492] do_syscall_64+0xcd/0x250 [ 77.097230][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.098879][ T6492] page last free pid 34 tgid 34 stack trace: [ 77.100524][ T6492] free_unref_page+0x5f4/0xdc0 [ 77.101794][ T6492] __folio_put+0x30d/0x3d0 [ 77.102994][ T6492] free_page_and_swap_cache+0x249/0x2c0 [ 77.105094][ T6492] tlb_remove_table_rcu+0x89/0xe0 [ 77.106458][ T6492] rcu_core+0x79d/0x14d0 [ 77.107599][ T6492] handle_softirqs+0x213/0x8f0 [ 77.108871][ T6492] run_ksoftirqd+0x3a/0x60 [ 77.110059][ T6492] smpboot_thread_fn+0x661/0xa30 [ 77.111361][ T6492] kthread+0x2c1/0x3a0 [ 77.112436][ T6492] ret_from_fork+0x45/0x80 [ 77.113608][ T6492] ret_from_fork_asm+0x1a/0x30 [ 77.114957][ T6492] Modules linked in: [ 77.116006][ T6492] CPU: 3 UID: 0 PID: 6492 Comm: syz.1.132 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 77.119138][ T6492] Tainted: [B]=BAD_PAGE [ 77.120312][ T6492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.123429][ T6492] Call Trace: [ 77.124593][ T6492] [ 77.125508][ T6492] dump_stack_lvl+0x16c/0x1f0 [ 77.126900][ T6492] bad_page+0xb3/0x1f0 [ 77.128148][ T6492] ? __pfx_bad_page+0x10/0x10 [ 77.129413][ T6492] ? page_bad_reason+0x9d/0x1e0 [ 77.130861][ T6492] free_unref_page+0x657/0xdc0 [ 77.132220][ T6492] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 77.133920][ T6492] ? __phys_addr+0xc6/0x150 [ 77.135248][ T6492] skb_free_head+0xa0/0x1d0 [ 77.136525][ T6492] skb_release_data+0x560/0x730 [ 77.137864][ T6492] sk_skb_reason_drop+0x129/0x1a0 [ 77.139256][ T6492] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 77.141039][ T6492] ? kernel_text_address+0x8d/0x100 [ 77.142378][ T6492] ? hlock_class+0x4e/0x130 [ 77.143713][ T6492] ? __lock_acquire+0x163e/0x3ce0 [ 77.145205][ T6492] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 77.147161][ T6492] ? hlock_class+0x4e/0x130 [ 77.148376][ T6492] ? __lock_acquire+0xbdd/0x3ce0 [ 77.149687][ T6492] ? __pfx___lock_acquire+0x10/0x10 [ 77.151158][ T6492] __netif_receive_skb_list_core+0x357/0x950 [ 77.152770][ T6492] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 77.154493][ T6492] ? trace_lock_acquire+0x14a/0x1d0 [ 77.156117][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 77.157789][ T6492] ? lock_acquire+0x2f/0xb0 [ 77.159011][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 77.160687][ T6492] netif_receive_skb_list_internal+0x753/0xdb0 [ 77.162319][ T6492] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 77.164080][ T6492] ? __pfx_eth_type_trans+0x10/0x10 [ 77.165445][ T6492] ? __build_skb_around+0x278/0x3b0 [ 77.166782][ T6492] netif_receive_skb_list+0x4f/0x4a0 [ 77.168493][ T6492] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 77.170183][ T6492] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 77.171941][ T6492] ? bpf_test_timer_continue+0x150/0x3d0 [ 77.173604][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 77.175260][ T6492] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 77.176817][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 77.178388][ T6492] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 77.180136][ T6492] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 77.181867][ T6492] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 77.183345][ T6492] ? 0xffffffffa0004340 [ 77.184539][ T6492] ? 0xffffffffa0004340 [ 77.186279][ T6492] ? 0xffffffffa0004340 [ 77.187577][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 77.189214][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 77.190638][ T6492] ? lock_acquire+0x2f/0xb0 [ 77.191844][ T6492] ? __fget_files+0x40/0x3f0 [ 77.193308][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 77.194895][ T6492] ? fput+0x30/0x390 [ 77.195936][ T6492] ? __bpf_prog_get+0xa0/0x290 [ 77.197181][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 77.198718][ T6492] __sys_bpf+0xfc6/0x49a0 [ 77.199839][ T6492] ? __pfx_futex_wake+0x10/0x10 [ 77.201438][ T6492] ? finish_task_switch.isra.0+0x2e8/0xcc0 [ 77.202989][ T6492] ? __pfx___sys_bpf+0x10/0x10 [ 77.204262][ T6492] ? __schedule+0xe5d/0x5730 [ 77.205733][ T6492] ? __fget_files+0x23a/0x3f0 [ 77.207097][ T6492] ? do_futex+0x123/0x350 [ 77.208237][ T6492] ? __pfx_do_futex+0x10/0x10 [ 77.209477][ T6492] ? xfd_validate_state+0x5d/0x180 [ 77.210834][ T6492] ? rcu_is_watching+0x12/0xc0 [ 77.212090][ T6492] __x64_sys_bpf+0x78/0xc0 [ 77.213299][ T6492] ? lockdep_hardirqs_on+0x7c/0x110 [ 77.214690][ T6492] do_syscall_64+0xcd/0x250 [ 77.215902][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.217636][ T6492] RIP: 0033:0x7f475a17e719 [ 77.218802][ T6492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.223867][ T6492] RSP: 002b:00007f475b009038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 77.226715][ T6492] RAX: ffffffffffffffda RBX: 00007f475a336058 RCX: 00007f475a17e719 [ 77.228928][ T6492] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 77.231103][ T6492] RBP: 00007f475a1f132e R08: 0000000000000000 R09: 0000000000000000 [ 77.233222][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.235334][ T6492] R13: 0000000000000000 R14: 00007f475a336058 R15: 00007ffe2d0f8dd8 [ 77.237323][ T6492] [ 77.238222][ T6492] BUG: Bad page state in process syz.1.132 pfn:4bacb [ 77.239985][ T6492] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2 pfn:0x4bacb [ 77.242264][ T6492] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 77.244116][ T6492] raw: 00fff00000000000 dead000000000040 ffff88804c173000 0000000000000000 [ 77.246415][ T6492] raw: 0000000000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 77.248646][ T6492] page dumped because: page_pool leak [ 77.250057][ T6492] page_owner tracks the page as allocated [ 77.251655][ T6492] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6492, tgid 6486 (syz.1.132), ts 70655441671, free_ts 70607803555 [ 77.256225][ T6492] post_alloc_hook+0x2d1/0x350 [ 77.257505][ T6492] get_page_from_freelist+0x101e/0x3070 [ 77.259046][ T6492] __alloc_pages_noprof+0x223/0x25a0 [ 77.260541][ T6492] alloc_pages_bulk_noprof+0x77c/0x1110 [ 77.262103][ T6492] __page_pool_alloc_pages_slow+0x18f/0x770 [ 77.263978][ T6492] page_pool_alloc_netmem+0xc4/0x160 [ 77.265805][ T6492] page_pool_alloc_pages+0x1a/0x60 [ 77.267443][ T6492] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 77.269195][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 77.270599][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 77.271957][ T6492] __sys_bpf+0xfc6/0x49a0 [ 77.273075][ T6492] __x64_sys_bpf+0x78/0xc0 [ 77.274276][ T6492] do_syscall_64+0xcd/0x250 [ 77.275571][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.277114][ T6492] page last free pid 34 tgid 34 stack trace: [ 77.278686][ T6492] free_unref_page+0x5f4/0xdc0 [ 77.279941][ T6492] __folio_put+0x30d/0x3d0 [ 77.281109][ T6492] free_page_and_swap_cache+0x249/0x2c0 [ 77.282557][ T6492] tlb_remove_table_rcu+0x89/0xe0 [ 77.283866][ T6492] rcu_core+0x79d/0x14d0 [ 77.285055][ T6492] handle_softirqs+0x213/0x8f0 [ 77.286559][ T6492] run_ksoftirqd+0x3a/0x60 [ 77.287743][ T6492] smpboot_thread_fn+0x661/0xa30 [ 77.289056][ T6492] kthread+0x2c1/0x3a0 [ 77.290229][ T6492] ret_from_fork+0x45/0x80 [ 77.291426][ T6492] ret_from_fork_asm+0x1a/0x30 [ 77.292691][ T6492] Modules linked in: [ 77.293734][ T6492] CPU: 3 UID: 0 PID: 6492 Comm: syz.1.132 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 77.297011][ T6492] Tainted: [B]=BAD_PAGE [ 77.298115][ T6492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.300962][ T6492] Call Trace: [ 77.301874][ T6492] [ 77.302693][ T6492] dump_stack_lvl+0x16c/0x1f0 [ 77.303980][ T6492] bad_page+0xb3/0x1f0 [ 77.305150][ T6492] ? __pfx_bad_page+0x10/0x10 [ 77.306518][ T6492] ? page_bad_reason+0x9d/0x1e0 [ 77.307824][ T6492] free_unref_page+0x657/0xdc0 [ 77.309205][ T6492] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 77.310839][ T6492] ? __phys_addr+0xc6/0x150 [ 77.312044][ T6492] skb_free_head+0xa0/0x1d0 [ 77.313248][ T6492] skb_release_data+0x560/0x730 [ 77.314523][ T6492] sk_skb_reason_drop+0x129/0x1a0 [ 77.315870][ T6492] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 77.317582][ T6492] ? kernel_text_address+0x8d/0x100 [ 77.319011][ T6492] ? hlock_class+0x4e/0x130 [ 77.320252][ T6492] ? __lock_acquire+0x163e/0x3ce0 [ 77.321615][ T6492] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 77.323617][ T6492] ? hlock_class+0x4e/0x130 [ 77.325052][ T6492] ? __lock_acquire+0xbdd/0x3ce0 [ 77.326599][ T6492] ? __pfx___lock_acquire+0x10/0x10 [ 77.328074][ T6492] __netif_receive_skb_list_core+0x357/0x950 [ 77.329812][ T6492] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 77.331645][ T6492] ? trace_lock_acquire+0x14a/0x1d0 [ 77.333000][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 77.334642][ T6492] ? lock_acquire+0x2f/0xb0 [ 77.335870][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 77.337491][ T6492] netif_receive_skb_list_internal+0x753/0xdb0 [ 77.339107][ T6492] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 77.340831][ T6492] ? __pfx_eth_type_trans+0x10/0x10 [ 77.342278][ T6492] ? __build_skb_around+0x278/0x3b0 [ 77.343626][ T6492] netif_receive_skb_list+0x4f/0x4a0 [ 77.345021][ T6492] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 77.346681][ T6492] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 77.348383][ T6492] ? bpf_test_timer_continue+0x150/0x3d0 [ 77.349841][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 77.351234][ T6492] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 77.352751][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 77.354299][ T6492] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 77.355880][ T6492] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 77.357480][ T6492] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 77.358962][ T6492] ? 0xffffffffa0004340 [ 77.360159][ T6492] ? 0xffffffffa0004340 [ 77.361306][ T6492] ? 0xffffffffa0004340 [ 77.362737][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 77.364550][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 77.366050][ T6492] ? lock_acquire+0x2f/0xb0 [ 77.367248][ T6492] ? __fget_files+0x40/0x3f0 [ 77.368458][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 77.369995][ T6492] ? fput+0x30/0x390 [ 77.371035][ T6492] ? __bpf_prog_get+0xa0/0x290 [ 77.372287][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 77.373801][ T6492] __sys_bpf+0xfc6/0x49a0 [ 77.374964][ T6492] ? __pfx_futex_wake+0x10/0x10 [ 77.376275][ T6492] ? finish_task_switch.isra.0+0x2e8/0xcc0 [ 77.377880][ T6492] ? __pfx___sys_bpf+0x10/0x10 [ 77.379180][ T6492] ? __schedule+0xe5d/0x5730 [ 77.380414][ T6492] ? __fget_files+0x23a/0x3f0 [ 77.381673][ T6492] ? do_futex+0x123/0x350 [ 77.382830][ T6492] ? __pfx_do_futex+0x10/0x10 [ 77.384129][ T6492] ? xfd_validate_state+0x5d/0x180 [ 77.385559][ T6492] ? rcu_is_watching+0x12/0xc0 [ 77.386852][ T6492] __x64_sys_bpf+0x78/0xc0 [ 77.388023][ T6492] ? lockdep_hardirqs_on+0x7c/0x110 [ 77.389421][ T6492] do_syscall_64+0xcd/0x250 [ 77.390628][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.392172][ T6492] RIP: 0033:0x7f475a17e719 [ 77.393343][ T6492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.398336][ T6492] RSP: 002b:00007f475b009038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 77.400498][ T6492] RAX: ffffffffffffffda RBX: 00007f475a336058 RCX: 00007f475a17e719 [ 77.402562][ T6492] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 77.404621][ T6492] RBP: 00007f475a1f132e R08: 0000000000000000 R09: 0000000000000000 [ 77.406734][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.408857][ T6492] R13: 0000000000000000 R14: 00007f475a336058 R15: 00007ffe2d0f8dd8 [ 77.411244][ T6492] [ 77.412327][ T6492] BUG: Bad page state in process syz.1.132 pfn:256fa [ 77.414318][ T6492] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880256fbe00 pfn:0x256fa [ 77.417349][ T6492] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 77.419451][ T6492] raw: 00fff00000000000 dead000000000040 ffff88804c173000 0000000000000000 [ 77.421674][ T6492] raw: ffff8880256fbe00 0000000000000001 00000000ffffffff 0000000000000000 [ 77.423921][ T6492] page dumped because: page_pool leak [ 77.425571][ T6492] page_owner tracks the page as allocated [ 77.427249][ T6492] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6492, tgid 6486 (syz.1.132), ts 70655436950, free_ts 70607809220 [ 77.431773][ T6492] post_alloc_hook+0x2d1/0x350 [ 77.433057][ T6492] get_page_from_freelist+0x101e/0x3070 [ 77.434593][ T6492] __alloc_pages_noprof+0x223/0x25a0 [ 77.436178][ T6492] alloc_pages_bulk_noprof+0x77c/0x1110 [ 77.437640][ T6492] __page_pool_alloc_pages_slow+0x18f/0x770 [ 77.439205][ T6492] page_pool_alloc_netmem+0xc4/0x160 [ 77.440585][ T6492] page_pool_alloc_pages+0x1a/0x60 [ 77.441884][ T6492] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 77.443597][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 77.445193][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 77.446869][ T6492] __sys_bpf+0xfc6/0x49a0 [ 77.448175][ T6492] __x64_sys_bpf+0x78/0xc0 [ 77.449477][ T6492] do_syscall_64+0xcd/0x250 [ 77.451093][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.452960][ T6492] page last free pid 34 tgid 34 stack trace: [ 77.454649][ T6492] free_unref_page+0x5f4/0xdc0 [ 77.456090][ T6492] __folio_put+0x30d/0x3d0 [ 77.457344][ T6492] free_page_and_swap_cache+0x249/0x2c0 [ 77.458822][ T6492] tlb_remove_table_rcu+0x89/0xe0 [ 77.460163][ T6492] rcu_core+0x79d/0x14d0 [ 77.461268][ T6492] handle_softirqs+0x213/0x8f0 [ 77.462524][ T6492] run_ksoftirqd+0x3a/0x60 [ 77.463662][ T6492] smpboot_thread_fn+0x661/0xa30 [ 77.465023][ T6492] kthread+0x2c1/0x3a0 [ 77.466142][ T6492] ret_from_fork+0x45/0x80 [ 77.467318][ T6492] ret_from_fork_asm+0x1a/0x30 [ 77.468610][ T6492] Modules linked in: [ 77.469640][ T6492] CPU: 3 UID: 0 PID: 6492 Comm: syz.1.132 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 77.472748][ T6492] Tainted: [B]=BAD_PAGE [ 77.473826][ T6492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.476598][ T6492] Call Trace: [ 77.477481][ T6492] [ 77.478266][ T6492] dump_stack_lvl+0x16c/0x1f0 [ 77.479515][ T6492] bad_page+0xb3/0x1f0 [ 77.480591][ T6492] ? __pfx_bad_page+0x10/0x10 [ 77.481855][ T6492] ? page_bad_reason+0x9d/0x1e0 [ 77.483284][ T6492] free_unref_page+0x657/0xdc0 [ 77.484819][ T6492] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 77.486808][ T6492] ? __phys_addr+0xc6/0x150 [ 77.488340][ T6492] skb_free_head+0xa0/0x1d0 [ 77.489827][ T6492] skb_release_data+0x560/0x730 [ 77.491208][ T6492] sk_skb_reason_drop+0x129/0x1a0 [ 77.492522][ T6492] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 77.494267][ T6492] ? kernel_text_address+0x8d/0x100 [ 77.495669][ T6492] ? hlock_class+0x4e/0x130 [ 77.496862][ T6492] ? __lock_acquire+0x163e/0x3ce0 [ 77.498182][ T6492] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 77.500022][ T6492] ? hlock_class+0x4e/0x130 [ 77.501214][ T6492] ? __lock_acquire+0xbdd/0x3ce0 [ 77.502511][ T6492] ? __pfx___lock_acquire+0x10/0x10 [ 77.503880][ T6492] __netif_receive_skb_list_core+0x357/0x950 [ 77.505499][ T6492] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 77.507223][ T6492] ? trace_lock_acquire+0x14a/0x1d0 [ 77.508584][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 77.510242][ T6492] ? lock_acquire+0x2f/0xb0 [ 77.511412][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 77.513190][ T6492] netif_receive_skb_list_internal+0x753/0xdb0 [ 77.515211][ T6492] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 77.517248][ T6492] ? __pfx_eth_type_trans+0x10/0x10 [ 77.518884][ T6492] ? __build_skb_around+0x278/0x3b0 [ 77.520487][ T6492] netif_receive_skb_list+0x4f/0x4a0 [ 77.522418][ T6492] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 77.524155][ T6492] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 77.525804][ T6492] ? bpf_test_timer_continue+0x150/0x3d0 [ 77.527184][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 77.528669][ T6492] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 77.530311][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 77.531864][ T6492] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 77.533423][ T6492] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 77.535155][ T6492] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 77.536466][ T6492] ? 0xffffffffa0004340 [ 77.537560][ T6492] ? 0xffffffffa0004340 [ 77.538661][ T6492] ? 0xffffffffa0004340 [ 77.539770][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 77.541323][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 77.542747][ T6492] ? lock_acquire+0x2f/0xb0 [ 77.543939][ T6492] ? __fget_files+0x40/0x3f0 [ 77.545127][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 77.546586][ T6492] ? fput+0x30/0x390 [ 77.547575][ T6492] ? __bpf_prog_get+0xa0/0x290 [ 77.548786][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 77.550291][ T6492] __sys_bpf+0xfc6/0x49a0 [ 77.551353][ T6492] ? __pfx_futex_wake+0x10/0x10 [ 77.552526][ T6492] ? finish_task_switch.isra.0+0x2e8/0xcc0 [ 77.553921][ T6492] ? __pfx___sys_bpf+0x10/0x10 [ 77.555151][ T6492] ? __schedule+0xe5d/0x5730 [ 77.556364][ T6492] ? __fget_files+0x23a/0x3f0 [ 77.557611][ T6492] ? do_futex+0x123/0x350 [ 77.558764][ T6492] ? __pfx_do_futex+0x10/0x10 [ 77.560012][ T6492] ? xfd_validate_state+0x5d/0x180 [ 77.561363][ T6492] ? rcu_is_watching+0x12/0xc0 [ 77.562662][ T6492] __x64_sys_bpf+0x78/0xc0 [ 77.563826][ T6492] ? lockdep_hardirqs_on+0x7c/0x110 [ 77.565120][ T6492] do_syscall_64+0xcd/0x250 [ 77.566301][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.567769][ T6492] RIP: 0033:0x7f475a17e719 [ 77.568859][ T6492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.573693][ T6492] RSP: 002b:00007f475b009038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 77.575749][ T6492] RAX: ffffffffffffffda RBX: 00007f475a336058 RCX: 00007f475a17e719 [ 77.577700][ T6492] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 77.579766][ T6492] RBP: 00007f475a1f132e R08: 0000000000000000 R09: 0000000000000000 [ 77.581929][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.584469][ T6492] R13: 0000000000000000 R14: 00007f475a336058 R15: 00007ffe2d0f8dd8 [ 77.587005][ T6492] [ 77.588199][ T6492] BUG: Bad page state in process syz.1.132 pfn:32185 [ 77.590495][ T6492] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880321852d0 pfn:0x32185 [ 77.593304][ T6492] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 77.595282][ T6492] raw: 00fff00000000000 dead000000000040 ffff88804c173000 0000000000000000 [ 77.597525][ T6492] raw: ffff8880321852d0 0000000000000001 00000000ffffffff 0000000000000000 [ 77.599775][ T6492] page dumped because: page_pool leak [ 77.601185][ T6492] page_owner tracks the page as allocated [ 77.602666][ T6492] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6492, tgid 6486 (syz.1.132), ts 70655432187, free_ts 70607816255 [ 77.607278][ T6492] post_alloc_hook+0x2d1/0x350 [ 77.608574][ T6492] get_page_from_freelist+0x101e/0x3070 [ 77.610159][ T6492] __alloc_pages_noprof+0x223/0x25a0 [ 77.611585][ T6492] alloc_pages_bulk_noprof+0x77c/0x1110 [ 77.613052][ T6492] __page_pool_alloc_pages_slow+0x18f/0x770 [ 77.614618][ T6492] page_pool_alloc_netmem+0xc4/0x160 [ 77.616199][ T6492] page_pool_alloc_pages+0x1a/0x60 [ 77.617545][ T6492] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 77.619266][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 77.620740][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 77.622254][ T6492] __sys_bpf+0xfc6/0x49a0 [ 77.623440][ T6492] __x64_sys_bpf+0x78/0xc0 [ 77.624616][ T6492] do_syscall_64+0xcd/0x250 [ 77.625993][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.627626][ T6492] page last free pid 34 tgid 34 stack trace: [ 77.629349][ T6492] free_unref_page+0x5f4/0xdc0 [ 77.630829][ T6492] rcu_core+0x79d/0x14d0 [ 77.632009][ T6492] handle_softirqs+0x213/0x8f0 [ 77.633475][ T6492] run_ksoftirqd+0x3a/0x60 [ 77.634893][ T6492] smpboot_thread_fn+0x661/0xa30 [ 77.636576][ T6492] kthread+0x2c1/0x3a0 [ 77.637769][ T6492] ret_from_fork+0x45/0x80 [ 77.639048][ T6492] ret_from_fork_asm+0x1a/0x30 [ 77.640340][ T6492] Modules linked in: [ 77.641375][ T6492] CPU: 3 UID: 0 PID: 6492 Comm: syz.1.132 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 77.644467][ T6492] Tainted: [B]=BAD_PAGE [ 77.645613][ T6492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.648415][ T6492] Call Trace: [ 77.649303][ T6492] [ 77.650101][ T6492] dump_stack_lvl+0x16c/0x1f0 [ 77.651345][ T6492] bad_page+0xb3/0x1f0 [ 77.652414][ T6492] ? __pfx_bad_page+0x10/0x10 [ 77.653659][ T6492] ? page_bad_reason+0x9d/0x1e0 [ 77.655021][ T6492] free_unref_page+0x657/0xdc0 [ 77.656502][ T6492] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 77.658193][ T6492] ? __phys_addr+0xc6/0x150 [ 77.659471][ T6492] skb_free_head+0xa0/0x1d0 [ 77.660815][ T6492] skb_release_data+0x560/0x730 [ 77.662363][ T6492] sk_skb_reason_drop+0x129/0x1a0 [ 77.663871][ T6492] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 77.666091][ T6492] ? kernel_text_address+0x8d/0x100 [ 77.667702][ T6492] ? hlock_class+0x4e/0x130 [ 77.669389][ T6492] ? __lock_acquire+0x163e/0x3ce0 [ 77.670830][ T6492] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 77.672808][ T6492] ? hlock_class+0x4e/0x130 [ 77.674289][ T6492] ? __lock_acquire+0xbdd/0x3ce0 [ 77.675855][ T6492] ? __pfx___lock_acquire+0x10/0x10 [ 77.677248][ T6492] __netif_receive_skb_list_core+0x357/0x950 [ 77.678838][ T6492] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 77.680509][ T6492] ? trace_lock_acquire+0x14a/0x1d0 [ 77.681859][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 77.683515][ T6492] ? lock_acquire+0x2f/0xb0 [ 77.684740][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 77.686818][ T6492] netif_receive_skb_list_internal+0x753/0xdb0 [ 77.688603][ T6492] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 77.690677][ T6492] ? __pfx_eth_type_trans+0x10/0x10 [ 77.692395][ T6492] ? __build_skb_around+0x278/0x3b0 [ 77.694041][ T6492] netif_receive_skb_list+0x4f/0x4a0 [ 77.695853][ T6492] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 77.697758][ T6492] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 77.699479][ T6492] ? bpf_test_timer_continue+0x150/0x3d0 [ 77.700977][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 77.702390][ T6492] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 77.703926][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 77.705689][ T6492] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 77.707286][ T6492] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 77.708830][ T6492] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 77.710242][ T6492] ? 0xffffffffa0004340 [ 77.711378][ T6492] ? 0xffffffffa0004340 [ 77.712477][ T6492] ? 0xffffffffa0004340 [ 77.713566][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 77.715188][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 77.716592][ T6492] ? lock_acquire+0x2f/0xb0 [ 77.717774][ T6492] ? __fget_files+0x40/0x3f0 [ 77.719091][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 77.720655][ T6492] ? fput+0x30/0x390 [ 77.721701][ T6492] ? __bpf_prog_get+0xa0/0x290 [ 77.723012][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 77.724747][ T6492] __sys_bpf+0xfc6/0x49a0 [ 77.726161][ T6492] ? __pfx_futex_wake+0x10/0x10 [ 77.727665][ T6492] ? finish_task_switch.isra.0+0x2e8/0xcc0 [ 77.729426][ T6492] ? __pfx___sys_bpf+0x10/0x10 [ 77.730693][ T6492] ? __schedule+0xe5d/0x5730 [ 77.731858][ T6492] ? __fget_files+0x23a/0x3f0 [ 77.733084][ T6492] ? do_futex+0x123/0x350 [ 77.734245][ T6492] ? __pfx_do_futex+0x10/0x10 [ 77.735517][ T6492] ? xfd_validate_state+0x5d/0x180 [ 77.736925][ T6492] ? rcu_is_watching+0x12/0xc0 [ 77.738270][ T6492] __x64_sys_bpf+0x78/0xc0 [ 77.739444][ T6492] ? lockdep_hardirqs_on+0x7c/0x110 [ 77.740811][ T6492] do_syscall_64+0xcd/0x250 [ 77.742025][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.743848][ T6492] RIP: 0033:0x7f475a17e719 [ 77.745062][ T6492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.750853][ T6492] RSP: 002b:00007f475b009038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 77.753259][ T6492] RAX: ffffffffffffffda RBX: 00007f475a336058 RCX: 00007f475a17e719 [ 77.755569][ T6492] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 77.757627][ T6492] RBP: 00007f475a1f132e R08: 0000000000000000 R09: 0000000000000000 [ 77.759676][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.761710][ T6492] R13: 0000000000000000 R14: 00007f475a336058 R15: 00007ffe2d0f8dd8 [ 77.763994][ T6492] [ 77.764921][ T6492] BUG: Bad page state in process syz.1.132 pfn:29c3a [ 77.766796][ T6492] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888029c3be00 pfn:0x29c3a [ 77.769404][ T6492] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 77.771442][ T6492] raw: 00fff00000000000 dead000000000040 ffff88804c173000 0000000000000000 [ 77.773673][ T6492] raw: ffff888029c3be00 0000000000000001 00000000ffffffff 0000000000000000 [ 77.776015][ T6492] page dumped because: page_pool leak [ 77.777430][ T6492] page_owner tracks the page as allocated [ 77.778918][ T6492] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6492, tgid 6486 (syz.1.132), ts 70655427511, free_ts 70608499423 [ 77.783526][ T6492] post_alloc_hook+0x2d1/0x350 [ 77.785023][ T6492] get_page_from_freelist+0x101e/0x3070 [ 77.786653][ T6492] __alloc_pages_noprof+0x223/0x25a0 [ 77.788074][ T6492] alloc_pages_bulk_noprof+0x77c/0x1110 [ 77.789601][ T6492] __page_pool_alloc_pages_slow+0x18f/0x770 [ 77.791269][ T6492] page_pool_alloc_netmem+0xc4/0x160 [ 77.792748][ T6492] page_pool_alloc_pages+0x1a/0x60 [ 77.794107][ T6492] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 77.795742][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 77.797129][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 77.798551][ T6492] __sys_bpf+0xfc6/0x49a0 [ 77.799694][ T6492] __x64_sys_bpf+0x78/0xc0 [ 77.800863][ T6492] do_syscall_64+0xcd/0x250 [ 77.802063][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.803586][ T6492] page last free pid 64 tgid 64 stack trace: [ 77.805710][ T6492] free_unref_page+0x5f4/0xdc0 [ 77.806981][ T6492] __folio_put+0x30d/0x3d0 [ 77.808147][ T6492] free_page_and_swap_cache+0x249/0x2c0 [ 77.810265][ T6492] tlb_remove_table_rcu+0x89/0xe0 [ 77.811633][ T6492] rcu_core+0x79d/0x14d0 [ 77.812796][ T6492] handle_softirqs+0x213/0x8f0 [ 77.814251][ T6492] do_softirq+0xb2/0xf0 [ 77.815674][ T6492] __local_bh_enable_ip+0x100/0x120 [ 77.817343][ T6492] ipv6_get_lladdr+0x299/0x4f0 [ 77.818907][ T6492] mld_newpack.isra.0+0x3a1/0x790 [ 77.820602][ T6492] add_grhead+0x299/0x340 [ 77.821890][ T6492] add_grec+0x111e/0x1670 [ 77.823289][ T6492] mld_ifc_work+0x41f/0xca0 [ 77.824707][ T6492] process_one_work+0x9c5/0x1ba0 [ 77.826395][ T6492] worker_thread+0x6c8/0xf00 [ 77.827692][ T6492] kthread+0x2c1/0x3a0 [ 77.828931][ T6492] Modules linked in: [ 77.830223][ T6492] CPU: 3 UID: 0 PID: 6492 Comm: syz.1.132 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 77.833510][ T6492] Tainted: [B]=BAD_PAGE [ 77.834629][ T6492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.837670][ T6492] Call Trace: [ 77.838572][ T6492] [ 77.839354][ T6492] dump_stack_lvl+0x16c/0x1f0 [ 77.840610][ T6492] bad_page+0xb3/0x1f0 [ 77.841703][ T6492] ? __pfx_bad_page+0x10/0x10 [ 77.842952][ T6492] ? page_bad_reason+0x9d/0x1e0 [ 77.844660][ T6492] free_unref_page+0x657/0xdc0 [ 77.846051][ T6492] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 77.847568][ T6492] ? __phys_addr+0xc6/0x150 [ 77.848726][ T6492] skb_free_head+0xa0/0x1d0 [ 77.849910][ T6492] skb_release_data+0x560/0x730 [ 77.851151][ T6492] sk_skb_reason_drop+0x129/0x1a0 [ 77.852457][ T6492] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 77.854224][ T6492] ? kernel_text_address+0x8d/0x100 [ 77.855812][ T6492] ? hlock_class+0x4e/0x130 [ 77.857025][ T6492] ? __lock_acquire+0x163e/0x3ce0 [ 77.858354][ T6492] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 77.860197][ T6492] ? hlock_class+0x4e/0x130 [ 77.861389][ T6492] ? __lock_acquire+0xbdd/0x3ce0 [ 77.862714][ T6492] ? __pfx___lock_acquire+0x10/0x10 [ 77.864072][ T6492] __netif_receive_skb_list_core+0x357/0x950 [ 77.865697][ T6492] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 77.867427][ T6492] ? trace_lock_acquire+0x14a/0x1d0 [ 77.868931][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 77.870684][ T6492] ? lock_acquire+0x2f/0xb0 [ 77.872032][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 77.873873][ T6492] netif_receive_skb_list_internal+0x753/0xdb0 [ 77.876116][ T6492] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 77.877903][ T6492] ? __pfx_eth_type_trans+0x10/0x10 [ 77.879289][ T6492] ? __build_skb_around+0x278/0x3b0 [ 77.880659][ T6492] netif_receive_skb_list+0x4f/0x4a0 [ 77.882049][ T6492] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 77.883688][ T6492] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 77.885436][ T6492] ? bpf_test_timer_continue+0x150/0x3d0 [ 77.886900][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 77.888287][ T6492] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 77.889823][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 77.891373][ T6492] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 77.892898][ T6492] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 77.894366][ T6492] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 77.895791][ T6492] ? 0xffffffffa0004340 [ 77.896891][ T6492] ? 0xffffffffa0004340 [ 77.897983][ T6492] ? 0xffffffffa0004340 [ 77.899079][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 77.900624][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 77.902087][ T6492] ? lock_acquire+0x2f/0xb0 [ 77.903286][ T6492] ? __fget_files+0x40/0x3f0 [ 77.904512][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 77.906111][ T6492] ? fput+0x30/0x390 [ 77.907120][ T6492] ? __bpf_prog_get+0xa0/0x290 [ 77.908283][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 77.909770][ T6492] __sys_bpf+0xfc6/0x49a0 [ 77.910934][ T6492] ? __pfx_futex_wake+0x10/0x10 [ 77.912142][ T6492] ? finish_task_switch.isra.0+0x2e8/0xcc0 [ 77.913593][ T6492] ? __pfx___sys_bpf+0x10/0x10 [ 77.914879][ T6492] ? __schedule+0xe5d/0x5730 [ 77.916064][ T6492] ? __fget_files+0x23a/0x3f0 [ 77.917230][ T6492] ? do_futex+0x123/0x350 [ 77.918305][ T6492] ? __pfx_do_futex+0x10/0x10 [ 77.919530][ T6492] ? xfd_validate_state+0x5d/0x180 [ 77.920868][ T6492] ? rcu_is_watching+0x12/0xc0 [ 77.922142][ T6492] __x64_sys_bpf+0x78/0xc0 [ 77.923383][ T6492] ? lockdep_hardirqs_on+0x7c/0x110 [ 77.925391][ T6492] do_syscall_64+0xcd/0x250 [ 77.926976][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.928654][ T6492] RIP: 0033:0x7f475a17e719 [ 77.929854][ T6492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.935584][ T6492] RSP: 002b:00007f475b009038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 77.938239][ T6492] RAX: ffffffffffffffda RBX: 00007f475a336058 RCX: 00007f475a17e719 [ 77.940565][ T6492] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 77.943212][ T6492] RBP: 00007f475a1f132e R08: 0000000000000000 R09: 0000000000000000 [ 77.945398][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.947464][ T6492] R13: 0000000000000000 R14: 00007f475a336058 R15: 00007ffe2d0f8dd8 [ 77.949440][ T6492] [ 77.950336][ T6492] BUG: Bad page state in process syz.1.132 pfn:270c5 [ 77.952070][ T6492] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880270c54b0 pfn:0x270c5 [ 77.954689][ T6492] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 77.956581][ T6492] raw: 00fff00000000000 dead000000000040 ffff88804c173000 0000000000000000 [ 77.958842][ T6492] raw: ffff8880270c54b0 0000000000000001 00000000ffffffff 0000000000000000 [ 77.961070][ T6492] page dumped because: page_pool leak [ 77.962367][ T6492] page_owner tracks the page as allocated [ 77.963762][ T6492] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6492, tgid 6486 (syz.1.132), ts 70655422728, free_ts 70608508731 [ 77.968042][ T6492] post_alloc_hook+0x2d1/0x350 [ 77.969408][ T6492] get_page_from_freelist+0x101e/0x3070 [ 77.970894][ T6492] __alloc_pages_noprof+0x223/0x25a0 [ 77.972388][ T6492] alloc_pages_bulk_noprof+0x77c/0x1110 [ 77.973856][ T6492] __page_pool_alloc_pages_slow+0x18f/0x770 [ 77.975517][ T6492] page_pool_alloc_netmem+0xc4/0x160 [ 77.976891][ T6492] page_pool_alloc_pages+0x1a/0x60 [ 77.978239][ T6492] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 77.979854][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 77.981247][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 77.982650][ T6492] __sys_bpf+0xfc6/0x49a0 [ 77.983791][ T6492] __x64_sys_bpf+0x78/0xc0 [ 77.985040][ T6492] do_syscall_64+0xcd/0x250 [ 77.986272][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.987822][ T6492] page last free pid 64 tgid 64 stack trace: [ 77.989315][ T6492] free_unref_page+0x5f4/0xdc0 [ 77.990528][ T6492] __folio_put+0x30d/0x3d0 [ 77.991622][ T6492] free_page_and_swap_cache+0x249/0x2c0 [ 77.992977][ T6492] tlb_remove_table_rcu+0x89/0xe0 [ 77.994216][ T6492] rcu_core+0x79d/0x14d0 [ 77.995343][ T6492] handle_softirqs+0x213/0x8f0 [ 77.996543][ T6492] do_softirq+0xb2/0xf0 [ 77.997641][ T6492] __local_bh_enable_ip+0x100/0x120 [ 77.998964][ T6492] ipv6_get_lladdr+0x299/0x4f0 [ 78.000171][ T6492] mld_newpack.isra.0+0x3a1/0x790 [ 78.001476][ T6492] add_grhead+0x299/0x340 [ 78.002622][ T6492] add_grec+0x111e/0x1670 [ 78.003705][ T6492] mld_ifc_work+0x41f/0xca0 [ 78.004929][ T6492] process_one_work+0x9c5/0x1ba0 [ 78.006156][ T6492] worker_thread+0x6c8/0xf00 [ 78.007539][ T6492] kthread+0x2c1/0x3a0 [ 78.008819][ T6492] Modules linked in: [ 78.010066][ T6492] CPU: 3 UID: 0 PID: 6492 Comm: syz.1.132 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 78.012998][ T6492] Tainted: [B]=BAD_PAGE [ 78.014063][ T6492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 78.016978][ T6492] Call Trace: [ 78.017862][ T6492] [ 78.018656][ T6492] dump_stack_lvl+0x16c/0x1f0 [ 78.019909][ T6492] bad_page+0xb3/0x1f0 [ 78.021036][ T6492] ? __pfx_bad_page+0x10/0x10 [ 78.022276][ T6492] ? page_bad_reason+0x9d/0x1e0 [ 78.023551][ T6492] free_unref_page+0x657/0xdc0 [ 78.024820][ T6492] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 78.026809][ T6492] ? __phys_addr+0xc6/0x150 [ 78.028002][ T6492] skb_free_head+0xa0/0x1d0 [ 78.029422][ T6492] skb_release_data+0x560/0x730 [ 78.030741][ T6492] sk_skb_reason_drop+0x129/0x1a0 [ 78.032106][ T6492] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 78.034151][ T6492] ? kernel_text_address+0x8d/0x100 [ 78.035789][ T6492] ? hlock_class+0x4e/0x130 [ 78.037193][ T6492] ? __lock_acquire+0x163e/0x3ce0 [ 78.038511][ T6492] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 78.040317][ T6492] ? hlock_class+0x4e/0x130 [ 78.041460][ T6492] ? __lock_acquire+0xbdd/0x3ce0 [ 78.042698][ T6492] ? __pfx___lock_acquire+0x10/0x10 [ 78.043977][ T6492] __netif_receive_skb_list_core+0x357/0x950 [ 78.045573][ T6492] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 78.047144][ T6492] ? trace_lock_acquire+0x14a/0x1d0 [ 78.048436][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 78.050107][ T6492] ? lock_acquire+0x2f/0xb0 [ 78.051292][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 78.052931][ T6492] netif_receive_skb_list_internal+0x753/0xdb0 [ 78.054531][ T6492] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 78.056271][ T6492] ? __pfx_eth_type_trans+0x10/0x10 [ 78.057631][ T6492] ? __build_skb_around+0x278/0x3b0 [ 78.059001][ T6492] netif_receive_skb_list+0x4f/0x4a0 [ 78.060373][ T6492] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 78.061997][ T6492] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 78.063720][ T6492] ? bpf_test_timer_continue+0x150/0x3d0 [ 78.065207][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 78.066603][ T6492] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 78.068114][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 78.069643][ T6492] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 78.071193][ T6492] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 78.072711][ T6492] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 78.074088][ T6492] ? 0xffffffffa0004340 [ 78.075183][ T6492] ? 0xffffffffa0004340 [ 78.076251][ T6492] ? 0xffffffffa0004340 [ 78.077333][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 78.078868][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 78.080315][ T6492] ? lock_acquire+0x2f/0xb0 [ 78.081499][ T6492] ? __fget_files+0x40/0x3f0 [ 78.082728][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 78.084213][ T6492] ? fput+0x30/0x390 [ 78.085586][ T6492] ? __bpf_prog_get+0xa0/0x290 [ 78.087145][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 78.088805][ T6492] __sys_bpf+0xfc6/0x49a0 [ 78.089957][ T6492] ? __pfx_futex_wake+0x10/0x10 [ 78.091254][ T6492] ? finish_task_switch.isra.0+0x2e8/0xcc0 [ 78.092790][ T6492] ? __pfx___sys_bpf+0x10/0x10 [ 78.094052][ T6492] ? __schedule+0xe5d/0x5730 [ 78.095333][ T6492] ? __fget_files+0x23a/0x3f0 [ 78.096706][ T6492] ? do_futex+0x123/0x350 [ 78.097864][ T6492] ? __pfx_do_futex+0x10/0x10 [ 78.099133][ T6492] ? xfd_validate_state+0x5d/0x180 [ 78.100502][ T6492] ? rcu_is_watching+0x12/0xc0 [ 78.101772][ T6492] __x64_sys_bpf+0x78/0xc0 [ 78.102985][ T6492] ? lockdep_hardirqs_on+0x7c/0x110 [ 78.104362][ T6492] do_syscall_64+0xcd/0x250 [ 78.105607][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.107211][ T6492] RIP: 0033:0x7f475a17e719 [ 78.108400][ T6492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.113406][ T6492] RSP: 002b:00007f475b009038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 78.115641][ T6492] RAX: ffffffffffffffda RBX: 00007f475a336058 RCX: 00007f475a17e719 [ 78.117719][ T6492] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 78.119960][ T6492] RBP: 00007f475a1f132e R08: 0000000000000000 R09: 0000000000000000 [ 78.122121][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.124684][ T6492] R13: 0000000000000000 R14: 00007f475a336058 R15: 00007ffe2d0f8dd8 [ 78.127327][ T6492] [ 78.128481][ T6492] BUG: Bad page state in process syz.1.132 pfn:2a25d [ 78.130401][ T6492] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2 pfn:0x2a25d [ 78.132655][ T6492] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 78.134497][ T6492] raw: 00fff00000000000 dead000000000040 ffff88804c173000 0000000000000000 [ 78.136757][ T6492] raw: 0000000000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 78.138935][ T6492] page dumped because: page_pool leak [ 78.140283][ T6492] page_owner tracks the page as allocated [ 78.141713][ T6492] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6492, tgid 6486 (syz.1.132), ts 70655417825, free_ts 70608512795 [ 78.146111][ T6492] post_alloc_hook+0x2d1/0x350 [ 78.147387][ T6492] get_page_from_freelist+0x101e/0x3070 [ 78.148858][ T6492] __alloc_pages_noprof+0x223/0x25a0 [ 78.150279][ T6492] alloc_pages_bulk_noprof+0x77c/0x1110 [ 78.151727][ T6492] __page_pool_alloc_pages_slow+0x18f/0x770 [ 78.153282][ T6492] page_pool_alloc_netmem+0xc4/0x160 [ 78.154668][ T6492] page_pool_alloc_pages+0x1a/0x60 [ 78.156061][ T6492] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 78.157671][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 78.159070][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 78.160479][ T6492] __sys_bpf+0xfc6/0x49a0 [ 78.161613][ T6492] __x64_sys_bpf+0x78/0xc0 [ 78.162791][ T6492] do_syscall_64+0xcd/0x250 [ 78.163973][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.165591][ T6492] page last free pid 64 tgid 64 stack trace: [ 78.167149][ T6492] free_unref_page+0x5f4/0xdc0 [ 78.168411][ T6492] __folio_put+0x30d/0x3d0 [ 78.169587][ T6492] free_page_and_swap_cache+0x249/0x2c0 [ 78.171021][ T6492] tlb_remove_table_rcu+0x89/0xe0 [ 78.172276][ T6492] rcu_core+0x79d/0x14d0 [ 78.173390][ T6492] handle_softirqs+0x213/0x8f0 [ 78.174746][ T6492] do_softirq+0xb2/0xf0 [ 78.175915][ T6492] __local_bh_enable_ip+0x100/0x120 [ 78.177273][ T6492] ipv6_get_lladdr+0x299/0x4f0 [ 78.178563][ T6492] mld_newpack.isra.0+0x3a1/0x790 [ 78.179876][ T6492] add_grhead+0x299/0x340 [ 78.180996][ T6492] add_grec+0x111e/0x1670 [ 78.182206][ T6492] mld_ifc_work+0x41f/0xca0 [ 78.183392][ T6492] process_one_work+0x9c5/0x1ba0 [ 78.184847][ T6492] worker_thread+0x6c8/0xf00 [ 78.186190][ T6492] kthread+0x2c1/0x3a0 [ 78.187247][ T6492] Modules linked in: [ 78.188264][ T6492] CPU: 3 UID: 0 PID: 6492 Comm: syz.1.132 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 78.191507][ T6492] Tainted: [B]=BAD_PAGE [ 78.192574][ T6492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 78.195492][ T6492] Call Trace: [ 78.196346][ T6492] [ 78.197073][ T6492] dump_stack_lvl+0x16c/0x1f0 [ 78.198230][ T6492] bad_page+0xb3/0x1f0 [ 78.199295][ T6492] ? __pfx_bad_page+0x10/0x10 [ 78.200545][ T6492] ? page_bad_reason+0x9d/0x1e0 [ 78.201813][ T6492] free_unref_page+0x657/0xdc0 [ 78.203028][ T6492] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 78.204761][ T6492] ? __phys_addr+0xc6/0x150 [ 78.206192][ T6492] skb_free_head+0xa0/0x1d0 [ 78.207383][ T6492] skb_release_data+0x560/0x730 [ 78.208697][ T6492] sk_skb_reason_drop+0x129/0x1a0 [ 78.210058][ T6492] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 78.211981][ T6492] ? kernel_text_address+0x8d/0x100 [ 78.213391][ T6492] ? hlock_class+0x4e/0x130 [ 78.214634][ T6492] ? __lock_acquire+0x163e/0x3ce0 [ 78.215947][ T6492] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 78.217682][ T6492] ? hlock_class+0x4e/0x130 [ 78.218826][ T6492] ? __lock_acquire+0xbdd/0x3ce0 [ 78.220066][ T6492] ? __pfx___lock_acquire+0x10/0x10 [ 78.221338][ T6492] __netif_receive_skb_list_core+0x357/0x950 [ 78.222855][ T6492] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 78.224439][ T6492] ? trace_lock_acquire+0x14a/0x1d0 [ 78.225750][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 78.227313][ T6492] ? lock_acquire+0x2f/0xb0 [ 78.228408][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 78.229961][ T6492] netif_receive_skb_list_internal+0x753/0xdb0 [ 78.231620][ T6492] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 78.233356][ T6492] ? __pfx_eth_type_trans+0x10/0x10 [ 78.234778][ T6492] ? __build_skb_around+0x278/0x3b0 [ 78.236237][ T6492] netif_receive_skb_list+0x4f/0x4a0 [ 78.237674][ T6492] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 78.239356][ T6492] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 78.241159][ T6492] ? bpf_test_timer_continue+0x150/0x3d0 [ 78.242574][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 78.243959][ T6492] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 78.245505][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 78.247074][ T6492] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 78.248608][ T6492] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 78.250371][ T6492] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 78.251925][ T6492] ? 0xffffffffa0004340 [ 78.252993][ T6492] ? 0xffffffffa0004340 [ 78.254118][ T6492] ? 0xffffffffa0004340 [ 78.255337][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 78.257151][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 78.258568][ T6492] ? lock_acquire+0x2f/0xb0 [ 78.259763][ T6492] ? __fget_files+0x40/0x3f0 [ 78.260988][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 78.262535][ T6492] ? fput+0x30/0x390 [ 78.263565][ T6492] ? __bpf_prog_get+0xa0/0x290 [ 78.264839][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 78.266393][ T6492] __sys_bpf+0xfc6/0x49a0 [ 78.267532][ T6492] ? __pfx_futex_wake+0x10/0x10 [ 78.268805][ T6492] ? finish_task_switch.isra.0+0x2e8/0xcc0 [ 78.270372][ T6492] ? __pfx___sys_bpf+0x10/0x10 [ 78.271623][ T6492] ? __schedule+0xe5d/0x5730 [ 78.272843][ T6492] ? __fget_files+0x23a/0x3f0 [ 78.274093][ T6492] ? do_futex+0x123/0x350 [ 78.275213][ T6492] ? __pfx_do_futex+0x10/0x10 [ 78.276440][ T6492] ? xfd_validate_state+0x5d/0x180 [ 78.277784][ T6492] ? rcu_is_watching+0x12/0xc0 [ 78.279041][ T6492] __x64_sys_bpf+0x78/0xc0 [ 78.280220][ T6492] ? lockdep_hardirqs_on+0x7c/0x110 [ 78.281596][ T6492] do_syscall_64+0xcd/0x250 [ 78.282807][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.284374][ T6492] RIP: 0033:0x7f475a17e719 [ 78.285765][ T6492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.290782][ T6492] RSP: 002b:00007f475b009038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 78.292884][ T6492] RAX: ffffffffffffffda RBX: 00007f475a336058 RCX: 00007f475a17e719 [ 78.294914][ T6492] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 78.296959][ T6492] RBP: 00007f475a1f132e R08: 0000000000000000 R09: 0000000000000000 [ 78.299003][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.301054][ T6492] R13: 0000000000000000 R14: 00007f475a336058 R15: 00007ffe2d0f8dd8 [ 78.303119][ T6492] [ 78.304028][ T6492] BUG: Bad page state in process syz.1.132 pfn:31fa4 [ 78.306073][ T6492] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888031fa4000 pfn:0x31fa4 [ 78.308651][ T6492] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 78.310494][ T6492] raw: 00fff00000000000 dead000000000040 ffff88804c173000 0000000000000000 [ 78.312713][ T6492] raw: ffff888031fa4000 0000000000000001 00000000ffffffff 0000000000000000 [ 78.315060][ T6492] page dumped because: page_pool leak [ 78.316620][ T6492] page_owner tracks the page as allocated [ 78.318119][ T6492] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6492, tgid 6486 (syz.1.132), ts 70655412945, free_ts 70608516787 [ 78.322472][ T6492] post_alloc_hook+0x2d1/0x350 [ 78.323742][ T6492] get_page_from_freelist+0x101e/0x3070 [ 78.325315][ T6492] __alloc_pages_noprof+0x223/0x25a0 [ 78.326703][ T6492] alloc_pages_bulk_noprof+0x77c/0x1110 [ 78.328100][ T6492] __page_pool_alloc_pages_slow+0x18f/0x770 [ 78.329605][ T6492] page_pool_alloc_netmem+0xc4/0x160 [ 78.331005][ T6492] page_pool_alloc_pages+0x1a/0x60 [ 78.332364][ T6492] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 78.334060][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 78.335477][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 78.336807][ T6492] __sys_bpf+0xfc6/0x49a0 [ 78.337950][ T6492] __x64_sys_bpf+0x78/0xc0 [ 78.339143][ T6492] do_syscall_64+0xcd/0x250 [ 78.340323][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.341991][ T6492] page last free pid 64 tgid 64 stack trace: [ 78.343625][ T6492] free_unref_page+0x5f4/0xdc0 [ 78.345031][ T6492] __folio_put+0x30d/0x3d0 [ 78.346238][ T6492] free_page_and_swap_cache+0x249/0x2c0 [ 78.347668][ T6492] tlb_remove_table_rcu+0x89/0xe0 [ 78.348988][ T6492] rcu_core+0x79d/0x14d0 [ 78.350124][ T6492] handle_softirqs+0x213/0x8f0 [ 78.351387][ T6492] do_softirq+0xb2/0xf0 [ 78.352537][ T6492] __local_bh_enable_ip+0x100/0x120 [ 78.353828][ T6492] ipv6_get_lladdr+0x299/0x4f0 [ 78.355160][ T6492] mld_newpack.isra.0+0x3a1/0x790 [ 78.356483][ T6492] add_grhead+0x299/0x340 [ 78.357616][ T6492] add_grec+0x111e/0x1670 [ 78.358803][ T6492] mld_ifc_work+0x41f/0xca0 [ 78.360102][ T6492] process_one_work+0x9c5/0x1ba0 [ 78.361394][ T6492] worker_thread+0x6c8/0xf00 [ 78.362616][ T6492] kthread+0x2c1/0x3a0 [ 78.363682][ T6492] Modules linked in: [ 78.364727][ T6492] CPU: 3 UID: 0 PID: 6492 Comm: syz.1.132 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 78.367863][ T6492] Tainted: [B]=BAD_PAGE [ 78.369139][ T6492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 78.372000][ T6492] Call Trace: [ 78.372898][ T6492] [ 78.373689][ T6492] dump_stack_lvl+0x16c/0x1f0 [ 78.374913][ T6492] bad_page+0xb3/0x1f0 [ 78.375979][ T6492] ? __pfx_bad_page+0x10/0x10 [ 78.377224][ T6492] ? page_bad_reason+0x9d/0x1e0 [ 78.378465][ T6492] free_unref_page+0x657/0xdc0 [ 78.379693][ T6492] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 78.381256][ T6492] ? __phys_addr+0xc6/0x150 [ 78.382453][ T6492] skb_free_head+0xa0/0x1d0 [ 78.383645][ T6492] skb_release_data+0x560/0x730 [ 78.385198][ T6492] sk_skb_reason_drop+0x129/0x1a0 [ 78.386682][ T6492] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 78.388764][ T6492] ? kernel_text_address+0x8d/0x100 [ 78.390321][ T6492] ? hlock_class+0x4e/0x130 [ 78.391573][ T6492] ? __lock_acquire+0x163e/0x3ce0 [ 78.392912][ T6492] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 78.394801][ T6492] ? hlock_class+0x4e/0x130 [ 78.396039][ T6492] ? __lock_acquire+0xbdd/0x3ce0 [ 78.397349][ T6492] ? __pfx___lock_acquire+0x10/0x10 [ 78.398717][ T6492] __netif_receive_skb_list_core+0x357/0x950 [ 78.400303][ T6492] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 78.402026][ T6492] ? trace_lock_acquire+0x14a/0x1d0 [ 78.403568][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 78.405451][ T6492] ? lock_acquire+0x2f/0xb0 [ 78.406621][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 78.408501][ T6492] netif_receive_skb_list_internal+0x753/0xdb0 [ 78.410337][ T6492] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 78.412107][ T6492] ? __pfx_eth_type_trans+0x10/0x10 [ 78.413756][ T6492] ? __build_skb_around+0x278/0x3b0 [ 78.415367][ T6492] netif_receive_skb_list+0x4f/0x4a0 [ 78.416810][ T6492] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 78.419077][ T6492] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 78.421050][ T6492] ? bpf_test_timer_continue+0x150/0x3d0 [ 78.422714][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 78.424612][ T6492] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 78.426389][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 78.428086][ T6492] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 78.429780][ T6492] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 78.431591][ T6492] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 78.433059][ T6492] ? 0xffffffffa0004340 [ 78.434186][ T6492] ? 0xffffffffa0004340 [ 78.435393][ T6492] ? 0xffffffffa0004340 [ 78.436513][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 78.437944][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 78.439292][ T6492] ? lock_acquire+0x2f/0xb0 [ 78.440455][ T6492] ? __fget_files+0x40/0x3f0 [ 78.441594][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 78.443476][ T6492] ? fput+0x30/0x390 [ 78.444475][ T6492] ? __bpf_prog_get+0xa0/0x290 [ 78.446224][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 78.447657][ T6492] __sys_bpf+0xfc6/0x49a0 [ 78.448766][ T6492] ? __pfx_futex_wake+0x10/0x10 [ 78.450082][ T6492] ? finish_task_switch.isra.0+0x2e8/0xcc0 [ 78.451842][ T6492] ? __pfx___sys_bpf+0x10/0x10 [ 78.453129][ T6492] ? __schedule+0xe5d/0x5730 [ 78.454637][ T6492] ? __fget_files+0x23a/0x3f0 [ 78.456327][ T6492] ? do_futex+0x123/0x350 [ 78.457770][ T6492] ? __pfx_do_futex+0x10/0x10 [ 78.459302][ T6492] ? xfd_validate_state+0x5d/0x180 [ 78.460834][ T6492] ? rcu_is_watching+0x12/0xc0 [ 78.462227][ T6492] __x64_sys_bpf+0x78/0xc0 [ 78.463465][ T6492] ? lockdep_hardirqs_on+0x7c/0x110 [ 78.464920][ T6492] do_syscall_64+0xcd/0x250 [ 78.466103][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.467708][ T6492] RIP: 0033:0x7f475a17e719 [ 78.468849][ T6492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.473936][ T6492] RSP: 002b:00007f475b009038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 78.476107][ T6492] RAX: ffffffffffffffda RBX: 00007f475a336058 RCX: 00007f475a17e719 [ 78.478085][ T6492] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 78.480153][ T6492] RBP: 00007f475a1f132e R08: 0000000000000000 R09: 0000000000000000 [ 78.482105][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.484089][ T6492] R13: 0000000000000000 R14: 00007f475a336058 R15: 00007ffe2d0f8dd8 [ 78.486159][ T6492] [ 78.487032][ T6492] BUG: Bad page state in process syz.1.132 pfn:31ab3 [ 78.488691][ T6492] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888031ab31e0 pfn:0x31ab3 [ 78.491176][ T6492] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 78.493010][ T6492] raw: 00fff00000000000 dead000000000040 ffff88804c173000 0000000000000000 [ 78.495296][ T6492] raw: ffff888031ab31e0 0000000000000001 00000000ffffffff 0000000000000000 [ 78.497456][ T6492] page dumped because: page_pool leak [ 78.498882][ T6492] page_owner tracks the page as allocated [ 78.500438][ T6492] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6492, tgid 6486 (syz.1.132), ts 70655408009, free_ts 70608522030 [ 78.505473][ T6492] post_alloc_hook+0x2d1/0x350 [ 78.506872][ T6492] get_page_from_freelist+0x101e/0x3070 [ 78.508309][ T6492] __alloc_pages_noprof+0x223/0x25a0 [ 78.509798][ T6492] alloc_pages_bulk_noprof+0x77c/0x1110 [ 78.511275][ T6492] __page_pool_alloc_pages_slow+0x18f/0x770 [ 78.512820][ T6492] page_pool_alloc_netmem+0xc4/0x160 [ 78.514347][ T6492] page_pool_alloc_pages+0x1a/0x60 [ 78.515786][ T6492] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 78.517410][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 78.518815][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 78.520306][ T6492] __sys_bpf+0xfc6/0x49a0 [ 78.521445][ T6492] __x64_sys_bpf+0x78/0xc0 [ 78.522659][ T6492] do_syscall_64+0xcd/0x250 [ 78.523868][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.525522][ T6492] page last free pid 64 tgid 64 stack trace: [ 78.527135][ T6492] free_unref_page+0x5f4/0xdc0 [ 78.528404][ T6492] __folio_put+0x30d/0x3d0 [ 78.529695][ T6492] free_page_and_swap_cache+0x249/0x2c0 [ 78.531336][ T6492] tlb_remove_table_rcu+0x89/0xe0 [ 78.532666][ T6492] rcu_core+0x79d/0x14d0 [ 78.533778][ T6492] handle_softirqs+0x213/0x8f0 [ 78.535171][ T6492] do_softirq+0xb2/0xf0 [ 78.536307][ T6492] __local_bh_enable_ip+0x100/0x120 [ 78.537843][ T6492] ipv6_get_lladdr+0x299/0x4f0 [ 78.539168][ T6492] mld_newpack.isra.0+0x3a1/0x790 [ 78.540529][ T6492] add_grhead+0x299/0x340 [ 78.542106][ T6492] add_grec+0x111e/0x1670 [ 78.543507][ T6492] mld_ifc_work+0x41f/0xca0 [ 78.544941][ T6492] process_one_work+0x9c5/0x1ba0 [ 78.546361][ T6492] worker_thread+0x6c8/0xf00 [ 78.547583][ T6492] kthread+0x2c1/0x3a0 [ 78.548697][ T6492] Modules linked in: [ 78.549743][ T6492] CPU: 3 UID: 0 PID: 6492 Comm: syz.1.132 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 78.553031][ T6492] Tainted: [B]=BAD_PAGE [ 78.554160][ T6492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 78.557160][ T6492] Call Trace: [ 78.558027][ T6492] [ 78.558805][ T6492] dump_stack_lvl+0x16c/0x1f0 [ 78.559939][ T6492] bad_page+0xb3/0x1f0 [ 78.560944][ T6492] ? __pfx_bad_page+0x10/0x10 [ 78.562117][ T6492] ? page_bad_reason+0x9d/0x1e0 [ 78.563309][ T6492] free_unref_page+0x657/0xdc0 [ 78.564486][ T6492] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 78.566104][ T6492] ? __phys_addr+0xc6/0x150 [ 78.567219][ T6492] skb_free_head+0xa0/0x1d0 [ 78.568347][ T6492] skb_release_data+0x560/0x730 [ 78.569560][ T6492] sk_skb_reason_drop+0x129/0x1a0 [ 78.570896][ T6492] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 78.572567][ T6492] ? kernel_text_address+0x8d/0x100 [ 78.573925][ T6492] ? hlock_class+0x4e/0x130 [ 78.575063][ T6492] ? __lock_acquire+0x163e/0x3ce0 [ 78.576348][ T6492] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 78.578202][ T6492] ? hlock_class+0x4e/0x130 [ 78.579371][ T6492] ? __lock_acquire+0xbdd/0x3ce0 [ 78.580614][ T6492] ? __pfx___lock_acquire+0x10/0x10 [ 78.581910][ T6492] __netif_receive_skb_list_core+0x357/0x950 [ 78.583428][ T6492] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 78.585124][ T6492] ? trace_lock_acquire+0x14a/0x1d0 [ 78.586515][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 78.588191][ T6492] ? lock_acquire+0x2f/0xb0 [ 78.589522][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 78.591399][ T6492] netif_receive_skb_list_internal+0x753/0xdb0 [ 78.592994][ T6492] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 78.594769][ T6492] ? __pfx_eth_type_trans+0x10/0x10 [ 78.596254][ T6492] ? __build_skb_around+0x278/0x3b0 [ 78.597681][ T6492] netif_receive_skb_list+0x4f/0x4a0 [ 78.599148][ T6492] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 78.601337][ T6492] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 78.603955][ T6492] ? bpf_test_timer_continue+0x150/0x3d0 [ 78.605660][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 78.607088][ T6492] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 78.608617][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 78.610276][ T6492] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 78.611809][ T6492] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 78.613355][ T6492] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 78.614768][ T6492] ? 0xffffffffa0004340 [ 78.615901][ T6492] ? 0xffffffffa0004340 [ 78.616995][ T6492] ? 0xffffffffa0004340 [ 78.618104][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 78.619665][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 78.621089][ T6492] ? lock_acquire+0x2f/0xb0 [ 78.622555][ T6492] ? __fget_files+0x40/0x3f0 [ 78.623787][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 78.625352][ T6492] ? fput+0x30/0x390 [ 78.626647][ T6492] ? __bpf_prog_get+0xa0/0x290 [ 78.628040][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 78.629645][ T6492] __sys_bpf+0xfc6/0x49a0 [ 78.630953][ T6492] ? __pfx_futex_wake+0x10/0x10 [ 78.632284][ T6492] ? finish_task_switch.isra.0+0x2e8/0xcc0 [ 78.633827][ T6492] ? __pfx___sys_bpf+0x10/0x10 [ 78.635110][ T6492] ? __schedule+0xe5d/0x5730 [ 78.636321][ T6492] ? __fget_files+0x23a/0x3f0 [ 78.637564][ T6492] ? do_futex+0x123/0x350 [ 78.638747][ T6492] ? __pfx_do_futex+0x10/0x10 [ 78.640071][ T6492] ? xfd_validate_state+0x5d/0x180 [ 78.641435][ T6492] ? rcu_is_watching+0x12/0xc0 [ 78.642743][ T6492] __x64_sys_bpf+0x78/0xc0 [ 78.643924][ T6492] ? lockdep_hardirqs_on+0x7c/0x110 [ 78.645499][ T6492] do_syscall_64+0xcd/0x250 [ 78.646722][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.648300][ T6492] RIP: 0033:0x7f475a17e719 [ 78.649494][ T6492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.654963][ T6492] RSP: 002b:00007f475b009038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 78.657527][ T6492] RAX: ffffffffffffffda RBX: 00007f475a336058 RCX: 00007f475a17e719 [ 78.659716][ T6492] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 78.662351][ T6492] RBP: 00007f475a1f132e R08: 0000000000000000 R09: 0000000000000000 [ 78.664492][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.666729][ T6492] R13: 0000000000000000 R14: 00007f475a336058 R15: 00007ffe2d0f8dd8 [ 78.669133][ T6492] [ 78.670173][ T6492] BUG: Bad page state in process syz.1.132 pfn:3174b [ 78.671927][ T6492] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803174b3c0 pfn:0x3174b [ 78.674584][ T6492] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 78.676610][ T6492] raw: 00fff00000000000 dead000000000040 ffff88804c173000 0000000000000000 [ 78.679020][ T6492] raw: ffff88803174b3c0 0000000000000001 00000000ffffffff 0000000000000000 [ 78.681503][ T6492] page dumped because: page_pool leak [ 78.683071][ T6492] page_owner tracks the page as allocated [ 78.684648][ T6492] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6492, tgid 6486 (syz.1.132), ts 70655402892, free_ts 70608526634 [ 78.689021][ T6492] post_alloc_hook+0x2d1/0x350 [ 78.690307][ T6492] get_page_from_freelist+0x101e/0x3070 [ 78.691768][ T6492] __alloc_pages_noprof+0x223/0x25a0 [ 78.693166][ T6492] alloc_pages_bulk_noprof+0x77c/0x1110 [ 78.694621][ T6492] __page_pool_alloc_pages_slow+0x18f/0x770 [ 78.696234][ T6492] page_pool_alloc_netmem+0xc4/0x160 [ 78.697639][ T6492] page_pool_alloc_pages+0x1a/0x60 [ 78.699001][ T6492] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 78.700617][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 78.701999][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 78.703424][ T6492] __sys_bpf+0xfc6/0x49a0 [ 78.704562][ T6492] __x64_sys_bpf+0x78/0xc0 [ 78.705812][ T6492] do_syscall_64+0xcd/0x250 [ 78.707022][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.708587][ T6492] page last free pid 64 tgid 64 stack trace: [ 78.710150][ T6492] free_unref_page+0x5f4/0xdc0 [ 78.711388][ T6492] __folio_put+0x30d/0x3d0 [ 78.712551][ T6492] free_page_and_swap_cache+0x249/0x2c0 [ 78.713990][ T6492] tlb_remove_table_rcu+0x89/0xe0 [ 78.715404][ T6492] rcu_core+0x79d/0x14d0 [ 78.716528][ T6492] handle_softirqs+0x213/0x8f0 [ 78.717784][ T6492] do_softirq+0xb2/0xf0 [ 78.718883][ T6492] __local_bh_enable_ip+0x100/0x120 [ 78.720231][ T6492] ipv6_get_lladdr+0x299/0x4f0 [ 78.721480][ T6492] mld_newpack.isra.0+0x3a1/0x790 [ 78.722840][ T6492] add_grhead+0x299/0x340 [ 78.723969][ T6492] add_grec+0x111e/0x1670 [ 78.725169][ T6492] mld_ifc_work+0x41f/0xca0 [ 78.726392][ T6492] process_one_work+0x9c5/0x1ba0 [ 78.727720][ T6492] worker_thread+0x6c8/0xf00 [ 78.728931][ T6492] kthread+0x2c1/0x3a0 [ 78.730014][ T6492] Modules linked in: [ 78.731044][ T6492] CPU: 3 UID: 0 PID: 6492 Comm: syz.1.132 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 78.734122][ T6492] Tainted: [B]=BAD_PAGE [ 78.735243][ T6492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 78.738017][ T6492] Call Trace: [ 78.738893][ T6492] [ 78.739672][ T6492] dump_stack_lvl+0x16c/0x1f0 [ 78.740910][ T6492] bad_page+0xb3/0x1f0 [ 78.742024][ T6492] ? __pfx_bad_page+0x10/0x10 [ 78.743332][ T6492] ? page_bad_reason+0x9d/0x1e0 [ 78.744615][ T6492] free_unref_page+0x657/0xdc0 [ 78.745985][ T6492] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 78.747567][ T6492] ? __phys_addr+0xc6/0x150 [ 78.748758][ T6492] skb_free_head+0xa0/0x1d0 [ 78.749966][ T6492] skb_release_data+0x560/0x730 [ 78.751244][ T6492] sk_skb_reason_drop+0x129/0x1a0 [ 78.752561][ T6492] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 78.754297][ T6492] ? kernel_text_address+0x8d/0x100 [ 78.755683][ T6492] ? hlock_class+0x4e/0x130 [ 78.756879][ T6492] ? __lock_acquire+0x163e/0x3ce0 [ 78.758204][ T6492] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 78.760048][ T6492] ? hlock_class+0x4e/0x130 [ 78.761248][ T6492] ? __lock_acquire+0xbdd/0x3ce0 [ 78.762559][ T6492] ? __pfx___lock_acquire+0x10/0x10 [ 78.763923][ T6492] __netif_receive_skb_list_core+0x357/0x950 [ 78.765510][ T6492] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 78.767221][ T6492] ? trace_lock_acquire+0x14a/0x1d0 [ 78.768574][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 78.770238][ T6492] ? lock_acquire+0x2f/0xb0 [ 78.771425][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 78.773063][ T6492] netif_receive_skb_list_internal+0x753/0xdb0 [ 78.774655][ T6492] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 78.776408][ T6492] ? __pfx_eth_type_trans+0x10/0x10 [ 78.777767][ T6492] ? __build_skb_around+0x278/0x3b0 [ 78.779136][ T6492] netif_receive_skb_list+0x4f/0x4a0 [ 78.780523][ T6492] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 78.782153][ T6492] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 78.783862][ T6492] ? bpf_test_timer_continue+0x150/0x3d0 [ 78.785343][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 78.786754][ T6492] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 78.788279][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 78.789831][ T6492] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 78.791389][ T6492] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 78.792907][ T6492] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 78.794274][ T6492] ? 0xffffffffa0004340 [ 78.795376][ T6492] ? 0xffffffffa0004340 [ 78.796459][ T6492] ? 0xffffffffa0004340 [ 78.797539][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 78.799082][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 78.800469][ T6492] ? lock_acquire+0x2f/0xb0 [ 78.801661][ T6492] ? __fget_files+0x40/0x3f0 [ 78.802905][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 78.804425][ T6492] ? fput+0x30/0x390 [ 78.805608][ T6492] ? __bpf_prog_get+0xa0/0x290 [ 78.806919][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 78.809040][ T6492] __sys_bpf+0xfc6/0x49a0 [ 78.810303][ T6492] ? __pfx_futex_wake+0x10/0x10 [ 78.811603][ T6492] ? finish_task_switch.isra.0+0x2e8/0xcc0 [ 78.813139][ T6492] ? __pfx___sys_bpf+0x10/0x10 [ 78.814420][ T6492] ? __schedule+0xe5d/0x5730 [ 78.815691][ T6492] ? __fget_files+0x23a/0x3f0 [ 78.816941][ T6492] ? do_futex+0x123/0x350 [ 78.818093][ T6492] ? __pfx_do_futex+0x10/0x10 [ 78.819317][ T6492] ? xfd_validate_state+0x5d/0x180 [ 78.820587][ T6492] ? rcu_is_watching+0x12/0xc0 [ 78.821749][ T6492] __x64_sys_bpf+0x78/0xc0 [ 78.822912][ T6492] ? lockdep_hardirqs_on+0x7c/0x110 [ 78.824345][ T6492] do_syscall_64+0xcd/0x250 [ 78.825636][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.827228][ T6492] RIP: 0033:0x7f475a17e719 [ 78.828406][ T6492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.833405][ T6492] RSP: 002b:00007f475b009038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 78.835603][ T6492] RAX: ffffffffffffffda RBX: 00007f475a336058 RCX: 00007f475a17e719 [ 78.837649][ T6492] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 78.839732][ T6492] RBP: 00007f475a1f132e R08: 0000000000000000 R09: 0000000000000000 [ 78.841782][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.844090][ T6492] R13: 0000000000000000 R14: 00007f475a336058 R15: 00007ffe2d0f8dd8 [ 78.846626][ T6492] [ 78.847530][ T6492] BUG: Bad page state in process syz.1.132 pfn:4dfdd [ 78.849289][ T6492] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804dfdd0f8 pfn:0x4dfdd [ 78.851895][ T6492] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 78.853725][ T6492] raw: 00fff00000000000 dead000000000040 ffff88804c173000 0000000000000000 [ 78.856038][ T6492] raw: ffff88804dfdd0f8 0000000000000001 00000000ffffffff 0000000000000000 [ 78.858256][ T6492] page dumped because: page_pool leak [ 78.859665][ T6492] page_owner tracks the page as allocated [ 78.861164][ T6492] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6492, tgid 6486 (syz.1.132), ts 70655398150, free_ts 70608531032 [ 78.865485][ T6492] post_alloc_hook+0x2d1/0x350 [ 78.866772][ T6492] get_page_from_freelist+0x101e/0x3070 [ 78.868207][ T6492] __alloc_pages_noprof+0x223/0x25a0 [ 78.869585][ T6492] alloc_pages_bulk_noprof+0x77c/0x1110 [ 78.871044][ T6492] __page_pool_alloc_pages_slow+0x18f/0x770 [ 78.872588][ T6492] page_pool_alloc_netmem+0xc4/0x160 [ 78.873964][ T6492] page_pool_alloc_pages+0x1a/0x60 [ 78.875681][ T6492] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 78.877443][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 78.878864][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 78.880278][ T6492] __sys_bpf+0xfc6/0x49a0 [ 78.881421][ T6492] __x64_sys_bpf+0x78/0xc0 [ 78.882617][ T6492] do_syscall_64+0xcd/0x250 [ 78.883817][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.885469][ T6492] page last free pid 64 tgid 64 stack trace: [ 78.887187][ T6492] free_unref_page+0x5f4/0xdc0 [ 78.888451][ T6492] __folio_put+0x30d/0x3d0 [ 78.889635][ T6492] free_page_and_swap_cache+0x249/0x2c0 [ 78.891093][ T6492] tlb_remove_table_rcu+0x89/0xe0 [ 78.892418][ T6492] rcu_core+0x79d/0x14d0 [ 78.893539][ T6492] handle_softirqs+0x213/0x8f0 [ 78.894881][ T6492] do_softirq+0xb2/0xf0 [ 78.896058][ T6492] __local_bh_enable_ip+0x100/0x120 [ 78.897442][ T6492] ipv6_get_lladdr+0x299/0x4f0 [ 78.898859][ T6492] mld_newpack.isra.0+0x3a1/0x790 [ 78.900210][ T6492] add_grhead+0x299/0x340 [ 78.901356][ T6492] add_grec+0x111e/0x1670 [ 78.902512][ T6492] mld_ifc_work+0x41f/0xca0 [ 78.903715][ T6492] process_one_work+0x9c5/0x1ba0 [ 78.905182][ T6492] worker_thread+0x6c8/0xf00 [ 78.906709][ T6492] kthread+0x2c1/0x3a0 [ 78.907798][ T6492] Modules linked in: [ 78.908842][ T6492] CPU: 3 UID: 0 PID: 6492 Comm: syz.1.132 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 78.911950][ T6492] Tainted: [B]=BAD_PAGE [ 78.913040][ T6492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 78.915838][ T6492] Call Trace: [ 78.916715][ T6492] [ 78.917492][ T6492] dump_stack_lvl+0x16c/0x1f0 [ 78.918741][ T6492] bad_page+0xb3/0x1f0 [ 78.919817][ T6492] ? __pfx_bad_page+0x10/0x10 [ 78.921059][ T6492] ? page_bad_reason+0x9d/0x1e0 [ 78.922352][ T6492] free_unref_page+0x657/0xdc0 [ 78.923611][ T6492] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 78.925211][ T6492] ? __phys_addr+0xc6/0x150 [ 78.926432][ T6492] skb_free_head+0xa0/0x1d0 [ 78.927589][ T6492] skb_release_data+0x560/0x730 [ 78.928836][ T6492] sk_skb_reason_drop+0x129/0x1a0 [ 78.930180][ T6492] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 78.931921][ T6492] ? kernel_text_address+0x8d/0x100 [ 78.933288][ T6492] ? hlock_class+0x4e/0x130 [ 78.934445][ T6492] ? __lock_acquire+0x163e/0x3ce0 [ 78.935938][ T6492] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 78.937715][ T6492] ? hlock_class+0x4e/0x130 [ 78.938894][ T6492] ? __lock_acquire+0xbdd/0x3ce0 [ 78.940185][ T6492] ? __pfx___lock_acquire+0x10/0x10 [ 78.941525][ T6492] __netif_receive_skb_list_core+0x357/0x950 [ 78.943218][ T6492] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 78.944910][ T6492] ? trace_lock_acquire+0x14a/0x1d0 [ 78.946364][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 78.948004][ T6492] ? lock_acquire+0x2f/0xb0 [ 78.949125][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 78.950740][ T6492] netif_receive_skb_list_internal+0x753/0xdb0 [ 78.952462][ T6492] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 78.954228][ T6492] ? __pfx_eth_type_trans+0x10/0x10 [ 78.955584][ T6492] ? __build_skb_around+0x278/0x3b0 [ 78.956902][ T6492] netif_receive_skb_list+0x4f/0x4a0 [ 78.958262][ T6492] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 78.959862][ T6492] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 78.961554][ T6492] ? bpf_test_timer_continue+0x150/0x3d0 [ 78.963018][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 78.964333][ T6492] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 78.965864][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 78.967424][ T6492] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 78.968968][ T6492] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 78.970506][ T6492] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 78.971890][ T6492] ? 0xffffffffa0004340 [ 78.972981][ T6492] ? 0xffffffffa0004340 [ 78.974081][ T6492] ? 0xffffffffa0004340 [ 78.975311][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 78.976853][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 78.978246][ T6492] ? lock_acquire+0x2f/0xb0 [ 78.979374][ T6492] ? __fget_files+0x40/0x3f0 [ 78.980818][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 78.982442][ T6492] ? fput+0x30/0x390 [ 78.983444][ T6492] ? __bpf_prog_get+0xa0/0x290 [ 78.984658][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 78.986239][ T6492] __sys_bpf+0xfc6/0x49a0 [ 78.987337][ T6492] ? __pfx_futex_wake+0x10/0x10 [ 78.988597][ T6492] ? finish_task_switch.isra.0+0x2e8/0xcc0 [ 78.990131][ T6492] ? __pfx___sys_bpf+0x10/0x10 [ 78.991381][ T6492] ? __schedule+0xe5d/0x5730 [ 78.992596][ T6492] ? __fget_files+0x23a/0x3f0 [ 78.993828][ T6492] ? do_futex+0x123/0x350 [ 78.994992][ T6492] ? __pfx_do_futex+0x10/0x10 [ 78.996229][ T6492] ? xfd_validate_state+0x5d/0x180 [ 78.997510][ T6492] ? rcu_is_watching+0x12/0xc0 [ 78.998737][ T6492] __x64_sys_bpf+0x78/0xc0 [ 78.999912][ T6492] ? lockdep_hardirqs_on+0x7c/0x110 [ 79.001265][ T6492] do_syscall_64+0xcd/0x250 [ 79.002494][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.004021][ T6492] RIP: 0033:0x7f475a17e719 [ 79.005382][ T6492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.010451][ T6492] RSP: 002b:00007f475b009038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 79.012626][ T6492] RAX: ffffffffffffffda RBX: 00007f475a336058 RCX: 00007f475a17e719 [ 79.015068][ T6492] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 79.017096][ T6492] RBP: 00007f475a1f132e R08: 0000000000000000 R09: 0000000000000000 [ 79.019341][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.021420][ T6492] R13: 0000000000000000 R14: 00007f475a336058 R15: 00007ffe2d0f8dd8 [ 79.023515][ T6492] [ 79.024447][ T6492] BUG: Bad page state in process syz.1.132 pfn:32b88 [ 79.026881][ T6492] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888032b88000 pfn:0x32b88 [ 79.029821][ T6492] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 79.031672][ T6492] raw: 00fff00000000000 dead000000000040 ffff88804c173000 0000000000000000 [ 79.033777][ T6492] raw: ffff888032b88000 0000000000000001 00000000ffffffff 0000000000000000 [ 79.035944][ T6492] page dumped because: page_pool leak [ 79.037348][ T6492] page_owner tracks the page as allocated [ 79.038840][ T6492] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6492, tgid 6486 (syz.1.132), ts 70655393334, free_ts 70608578966 [ 79.043032][ T6492] post_alloc_hook+0x2d1/0x350 [ 79.044236][ T6492] get_page_from_freelist+0x101e/0x3070 [ 79.045708][ T6492] __alloc_pages_noprof+0x223/0x25a0 [ 79.047200][ T6492] alloc_pages_bulk_noprof+0x77c/0x1110 [ 79.048635][ T6492] __page_pool_alloc_pages_slow+0x18f/0x770 [ 79.050300][ T6492] page_pool_alloc_netmem+0xc4/0x160 [ 79.051688][ T6492] page_pool_alloc_pages+0x1a/0x60 [ 79.053030][ T6492] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 79.054630][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 79.056102][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 79.057636][ T6492] __sys_bpf+0xfc6/0x49a0 [ 79.058788][ T6492] __x64_sys_bpf+0x78/0xc0 [ 79.059962][ T6492] do_syscall_64+0xcd/0x250 [ 79.061162][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.062684][ T6492] page last free pid 64 tgid 64 stack trace: [ 79.064239][ T6492] free_unref_page+0x5f4/0xdc0 [ 79.065677][ T6492] __folio_put+0x30d/0x3d0 [ 79.066999][ T6492] free_page_and_swap_cache+0x249/0x2c0 [ 79.068430][ T6492] tlb_remove_table_rcu+0x89/0xe0 [ 79.069749][ T6492] rcu_core+0x79d/0x14d0 [ 79.070872][ T6492] handle_softirqs+0x213/0x8f0 [ 79.072132][ T6492] do_softirq+0xb2/0xf0 [ 79.073181][ T6492] __local_bh_enable_ip+0x100/0x120 [ 79.074554][ T6492] ipv6_get_lladdr+0x299/0x4f0 [ 79.075890][ T6492] mld_newpack.isra.0+0x3a1/0x790 [ 79.077324][ T6492] add_grhead+0x299/0x340 [ 79.078473][ T6492] add_grec+0x111e/0x1670 [ 79.079565][ T6492] mld_ifc_work+0x41f/0xca0 [ 79.080731][ T6492] process_one_work+0x9c5/0x1ba0 [ 79.082055][ T6492] worker_thread+0x6c8/0xf00 [ 79.083268][ T6492] kthread+0x2c1/0x3a0 [ 79.084347][ T6492] Modules linked in: [ 79.085725][ T6492] CPU: 3 UID: 0 PID: 6492 Comm: syz.1.132 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 79.088842][ T6492] Tainted: [B]=BAD_PAGE [ 79.089938][ T6492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 79.092717][ T6492] Call Trace: [ 79.093602][ T6492] [ 79.094410][ T6492] dump_stack_lvl+0x16c/0x1f0 [ 79.095702][ T6492] bad_page+0xb3/0x1f0 [ 79.096780][ T6492] ? __pfx_bad_page+0x10/0x10 [ 79.098021][ T6492] ? page_bad_reason+0x9d/0x1e0 [ 79.099299][ T6492] free_unref_page+0x657/0xdc0 [ 79.100553][ T6492] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 79.102124][ T6492] ? __phys_addr+0xc6/0x150 [ 79.103308][ T6492] skb_free_head+0xa0/0x1d0 [ 79.104504][ T6492] skb_release_data+0x560/0x730 [ 79.105813][ T6492] sk_skb_reason_drop+0x129/0x1a0 [ 79.107140][ T6492] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 79.108888][ T6492] ? kernel_text_address+0x8d/0x100 [ 79.110387][ T6492] ? hlock_class+0x4e/0x130 [ 79.111622][ T6492] ? __lock_acquire+0x163e/0x3ce0 [ 79.112975][ T6492] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 79.114868][ T6492] ? hlock_class+0x4e/0x130 [ 79.116094][ T6492] ? __lock_acquire+0xbdd/0x3ce0 [ 79.117411][ T6492] ? __pfx___lock_acquire+0x10/0x10 [ 79.118799][ T6492] __netif_receive_skb_list_core+0x357/0x950 [ 79.120384][ T6492] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 79.122105][ T6492] ? trace_lock_acquire+0x14a/0x1d0 [ 79.123442][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 79.125140][ T6492] ? lock_acquire+0x2f/0xb0 [ 79.126368][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 79.128028][ T6492] netif_receive_skb_list_internal+0x753/0xdb0 [ 79.129636][ T6492] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 79.131390][ T6492] ? __pfx_eth_type_trans+0x10/0x10 [ 79.132748][ T6492] ? __build_skb_around+0x278/0x3b0 [ 79.134133][ T6492] netif_receive_skb_list+0x4f/0x4a0 [ 79.135576][ T6492] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 79.137222][ T6492] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 79.138984][ T6492] ? bpf_test_timer_continue+0x150/0x3d0 [ 79.140465][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 79.141863][ T6492] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 79.143428][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 79.145023][ T6492] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 79.146598][ T6492] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 79.148138][ T6492] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 79.149517][ T6492] ? 0xffffffffa0004340 [ 79.150618][ T6492] ? 0xffffffffa0004340 [ 79.151770][ T6492] ? 0xffffffffa0004340 [ 79.152925][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 79.154500][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 79.155950][ T6492] ? lock_acquire+0x2f/0xb0 [ 79.157128][ T6492] ? __fget_files+0x40/0x3f0 [ 79.158348][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 79.159867][ T6492] ? fput+0x30/0x390 [ 79.160901][ T6492] ? __bpf_prog_get+0xa0/0x290 [ 79.162163][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 79.163684][ T6492] __sys_bpf+0xfc6/0x49a0 [ 79.164836][ T6492] ? __pfx_futex_wake+0x10/0x10 [ 79.166156][ T6492] ? finish_task_switch.isra.0+0x2e8/0xcc0 [ 79.167700][ T6492] ? __pfx___sys_bpf+0x10/0x10 [ 79.168982][ T6492] ? __schedule+0xe5d/0x5730 [ 79.170232][ T6492] ? __fget_files+0x23a/0x3f0 [ 79.171477][ T6492] ? do_futex+0x123/0x350 [ 79.172621][ T6492] ? __pfx_do_futex+0x10/0x10 [ 79.173867][ T6492] ? xfd_validate_state+0x5d/0x180 [ 79.175216][ T6492] ? rcu_is_watching+0x12/0xc0 [ 79.176481][ T6492] __x64_sys_bpf+0x78/0xc0 [ 79.177612][ T6492] ? lockdep_hardirqs_on+0x7c/0x110 [ 79.178983][ T6492] do_syscall_64+0xcd/0x250 [ 79.180187][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.181738][ T6492] RIP: 0033:0x7f475a17e719 [ 79.182927][ T6492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.187943][ T6492] RSP: 002b:00007f475b009038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 79.190107][ T6492] RAX: ffffffffffffffda RBX: 00007f475a336058 RCX: 00007f475a17e719 [ 79.192145][ T6492] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 79.194208][ T6492] RBP: 00007f475a1f132e R08: 0000000000000000 R09: 0000000000000000 [ 79.196279][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.198336][ T6492] R13: 0000000000000000 R14: 00007f475a336058 R15: 00007ffe2d0f8dd8 [ 79.200390][ T6492] [ 79.201290][ T6492] BUG: Bad page state in process syz.1.132 pfn:311ba [ 79.203062][ T6492] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880311bbe00 pfn:0x311ba [ 79.205734][ T6492] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 79.207930][ T6492] raw: 00fff00000000000 dead000000000040 ffff88804c173000 0000000000000000 [ 79.210273][ T6492] raw: ffff8880311bbe00 0000000000000001 00000000ffffffff 0000000000000000 [ 79.212515][ T6492] page dumped because: page_pool leak [ 79.213926][ T6492] page_owner tracks the page as allocated [ 79.215635][ T6492] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6492, tgid 6486 (syz.1.132), ts 70655388687, free_ts 70608583782 [ 79.219995][ T6492] post_alloc_hook+0x2d1/0x350 [ 79.221275][ T6492] get_page_from_freelist+0x101e/0x3070 [ 79.222753][ T6492] __alloc_pages_noprof+0x223/0x25a0 [ 79.224178][ T6492] alloc_pages_bulk_noprof+0x77c/0x1110 [ 79.225705][ T6492] __page_pool_alloc_pages_slow+0x18f/0x770 [ 79.227267][ T6492] page_pool_alloc_netmem+0xc4/0x160 [ 79.228605][ T6492] page_pool_alloc_pages+0x1a/0x60 [ 79.229929][ T6492] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 79.231544][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 79.232925][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 79.234339][ T6492] __sys_bpf+0xfc6/0x49a0 [ 79.235511][ T6492] __x64_sys_bpf+0x78/0xc0 [ 79.236669][ T6492] do_syscall_64+0xcd/0x250 [ 79.237869][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.239422][ T6492] page last free pid 64 tgid 64 stack trace: [ 79.240969][ T6492] free_unref_page+0x5f4/0xdc0 [ 79.242219][ T6492] __folio_put+0x30d/0x3d0 [ 79.243388][ T6492] free_page_and_swap_cache+0x249/0x2c0 [ 79.244895][ T6492] tlb_remove_table_rcu+0x89/0xe0 [ 79.246250][ T6492] rcu_core+0x79d/0x14d0 [ 79.247364][ T6492] handle_softirqs+0x213/0x8f0 [ 79.248621][ T6492] do_softirq+0xb2/0xf0 [ 79.249721][ T6492] __local_bh_enable_ip+0x100/0x120 [ 79.251099][ T6492] ipv6_get_lladdr+0x299/0x4f0 [ 79.252356][ T6492] mld_newpack.isra.0+0x3a1/0x790 [ 79.253674][ T6492] add_grhead+0x299/0x340 [ 79.254964][ T6492] add_grec+0x111e/0x1670 [ 79.256124][ T6492] mld_ifc_work+0x41f/0xca0 [ 79.257341][ T6492] process_one_work+0x9c5/0x1ba0 [ 79.258655][ T6492] worker_thread+0x6c8/0xf00 [ 79.259872][ T6492] kthread+0x2c1/0x3a0 [ 79.260946][ T6492] Modules linked in: [ 79.261969][ T6492] CPU: 3 UID: 0 PID: 6492 Comm: syz.1.132 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 79.265100][ T6492] Tainted: [B]=BAD_PAGE [ 79.266217][ T6492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 79.269004][ T6492] Call Trace: [ 79.269886][ T6492] [ 79.270681][ T6492] dump_stack_lvl+0x16c/0x1f0 [ 79.271926][ T6492] bad_page+0xb3/0x1f0 [ 79.273001][ T6492] ? __pfx_bad_page+0x10/0x10 [ 79.274227][ T6492] ? page_bad_reason+0x9d/0x1e0 [ 79.275535][ T6492] free_unref_page+0x657/0xdc0 [ 79.276784][ T6492] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 79.278378][ T6492] ? __phys_addr+0xc6/0x150 [ 79.279587][ T6492] skb_free_head+0xa0/0x1d0 [ 79.280799][ T6492] skb_release_data+0x560/0x730 [ 79.282092][ T6492] sk_skb_reason_drop+0x129/0x1a0 [ 79.283411][ T6492] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 79.285286][ T6492] ? kernel_text_address+0x8d/0x100 [ 79.286703][ T6492] ? hlock_class+0x4e/0x130 [ 79.287943][ T6492] ? __lock_acquire+0x163e/0x3ce0 [ 79.289267][ T6492] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 79.291147][ T6492] ? hlock_class+0x4e/0x130 [ 79.292360][ T6492] ? __lock_acquire+0xbdd/0x3ce0 [ 79.293673][ T6492] ? __pfx___lock_acquire+0x10/0x10 [ 79.295179][ T6492] __netif_receive_skb_list_core+0x357/0x950 [ 79.296758][ T6492] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 79.298394][ T6492] ? trace_lock_acquire+0x14a/0x1d0 [ 79.299764][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 79.301389][ T6492] ? lock_acquire+0x2f/0xb0 [ 79.302579][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 79.304235][ T6492] netif_receive_skb_list_internal+0x753/0xdb0 [ 79.305834][ T6492] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 79.307500][ T6492] ? __pfx_eth_type_trans+0x10/0x10 [ 79.308819][ T6492] ? __build_skb_around+0x278/0x3b0 [ 79.310191][ T6492] netif_receive_skb_list+0x4f/0x4a0 [ 79.311569][ T6492] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 79.313194][ T6492] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 79.314933][ T6492] ? bpf_test_timer_continue+0x150/0x3d0 [ 79.316396][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 79.317780][ T6492] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 79.319305][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 79.320845][ T6492] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 79.322393][ T6492] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 79.323916][ T6492] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 79.325306][ T6492] ? 0xffffffffa0004340 [ 79.326422][ T6492] ? 0xffffffffa0004340 [ 79.327513][ T6492] ? 0xffffffffa0004340 [ 79.328598][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 79.330163][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 79.331563][ T6492] ? lock_acquire+0x2f/0xb0 [ 79.332771][ T6492] ? __fget_files+0x40/0x3f0 [ 79.333992][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 79.335577][ T6492] ? fput+0x30/0x390 [ 79.336625][ T6492] ? __bpf_prog_get+0xa0/0x290 [ 79.337898][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 79.339432][ T6492] __sys_bpf+0xfc6/0x49a0 [ 79.340551][ T6492] ? __pfx_futex_wake+0x10/0x10 [ 79.341833][ T6492] ? finish_task_switch.isra.0+0x2e8/0xcc0 [ 79.343371][ T6492] ? __pfx___sys_bpf+0x10/0x10 [ 79.344628][ T6492] ? __schedule+0xe5d/0x5730 [ 79.345932][ T6492] ? __fget_files+0x23a/0x3f0 [ 79.347213][ T6492] ? do_futex+0x123/0x350 [ 79.348336][ T6492] ? __pfx_do_futex+0x10/0x10 [ 79.349703][ T6492] ? xfd_validate_state+0x5d/0x180 [ 79.351183][ T6492] ? rcu_is_watching+0x12/0xc0 [ 79.352463][ T6492] __x64_sys_bpf+0x78/0xc0 [ 79.353718][ T6492] ? lockdep_hardirqs_on+0x7c/0x110 [ 79.355234][ T6492] do_syscall_64+0xcd/0x250 [ 79.356491][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.358199][ T6492] RIP: 0033:0x7f475a17e719 [ 79.359471][ T6492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.364237][ T6492] RSP: 002b:00007f475b009038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 79.366401][ T6492] RAX: ffffffffffffffda RBX: 00007f475a336058 RCX: 00007f475a17e719 [ 79.368477][ T6492] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 79.370536][ T6492] RBP: 00007f475a1f132e R08: 0000000000000000 R09: 0000000000000000 [ 79.372596][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.374646][ T6492] R13: 0000000000000000 R14: 00007f475a336058 R15: 00007ffe2d0f8dd8 [ 79.376631][ T6492] [ 79.377517][ T6492] BUG: Bad page state in process syz.1.132 pfn:4cbd0 [ 79.379275][ T6492] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804cbd1e00 pfn:0x4cbd0 [ 79.381690][ T6492] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 79.383481][ T6492] raw: 00fff00000000000 dead000000000040 ffff88804c173000 0000000000000000 [ 79.385965][ T6492] raw: ffff88804cbd1e00 0000000000000001 00000000ffffffff 0000000000000000 [ 79.388256][ T6492] page dumped because: page_pool leak [ 79.389616][ T6492] page_owner tracks the page as allocated [ 79.391070][ T6492] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6492, tgid 6486 (syz.1.132), ts 70655383931, free_ts 70608587758 [ 79.395373][ T6492] post_alloc_hook+0x2d1/0x350 [ 79.396598][ T6492] get_page_from_freelist+0x101e/0x3070 [ 79.398048][ T6492] __alloc_pages_noprof+0x223/0x25a0 [ 79.399395][ T6492] alloc_pages_bulk_noprof+0x77c/0x1110 [ 79.400803][ T6492] __page_pool_alloc_pages_slow+0x18f/0x770 [ 79.402364][ T6492] page_pool_alloc_netmem+0xc4/0x160 [ 79.403705][ T6492] page_pool_alloc_pages+0x1a/0x60 [ 79.405488][ T6492] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 79.407322][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 79.408956][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 79.410386][ T6492] __sys_bpf+0xfc6/0x49a0 [ 79.411499][ T6492] __x64_sys_bpf+0x78/0xc0 [ 79.412904][ T6492] do_syscall_64+0xcd/0x250 [ 79.414372][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.416223][ T6492] page last free pid 64 tgid 64 stack trace: [ 79.417943][ T6492] free_unref_page+0x5f4/0xdc0 [ 79.419306][ T6492] __folio_put+0x30d/0x3d0 [ 79.420604][ T6492] free_page_and_swap_cache+0x249/0x2c0 [ 79.422252][ T6492] tlb_remove_table_rcu+0x89/0xe0 [ 79.423598][ T6492] rcu_core+0x79d/0x14d0 [ 79.424728][ T6492] handle_softirqs+0x213/0x8f0 [ 79.426341][ T6492] do_softirq+0xb2/0xf0 [ 79.427499][ T6492] __local_bh_enable_ip+0x100/0x120 [ 79.428892][ T6492] ipv6_get_lladdr+0x299/0x4f0 [ 79.430301][ T6492] mld_newpack.isra.0+0x3a1/0x790 [ 79.431643][ T6492] add_grhead+0x299/0x340 [ 79.432760][ T6492] add_grec+0x111e/0x1670 [ 79.433872][ T6492] mld_ifc_work+0x41f/0xca0 [ 79.435151][ T6492] process_one_work+0x9c5/0x1ba0 [ 79.436388][ T6492] worker_thread+0x6c8/0xf00 [ 79.437558][ T6492] kthread+0x2c1/0x3a0 [ 79.438586][ T6492] Modules linked in: [ 79.439615][ T6492] CPU: 3 UID: 0 PID: 6492 Comm: syz.1.132 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 79.442751][ T6492] Tainted: [B]=BAD_PAGE [ 79.443839][ T6492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 79.447165][ T6492] Call Trace: [ 79.448052][ T6492] [ 79.448827][ T6492] dump_stack_lvl+0x16c/0x1f0 [ 79.450050][ T6492] bad_page+0xb3/0x1f0 [ 79.451080][ T6492] ? __pfx_bad_page+0x10/0x10 [ 79.452325][ T6492] ? page_bad_reason+0x9d/0x1e0 [ 79.453853][ T6492] free_unref_page+0x657/0xdc0 [ 79.455176][ T6492] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 79.456979][ T6492] ? __phys_addr+0xc6/0x150 [ 79.458268][ T6492] skb_free_head+0xa0/0x1d0 [ 79.459539][ T6492] skb_release_data+0x560/0x730 [ 79.461203][ T6492] sk_skb_reason_drop+0x129/0x1a0 [ 79.462892][ T6492] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 79.464759][ T6492] ? kernel_text_address+0x8d/0x100 [ 79.466418][ T6492] ? hlock_class+0x4e/0x130 [ 79.467710][ T6492] ? __lock_acquire+0x163e/0x3ce0 [ 79.469189][ T6492] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 79.471560][ T6492] ? hlock_class+0x4e/0x130 [ 79.473226][ T6492] ? __lock_acquire+0xbdd/0x3ce0 [ 79.475042][ T6492] ? __pfx___lock_acquire+0x10/0x10 [ 79.476583][ T6492] __netif_receive_skb_list_core+0x357/0x950 [ 79.478175][ T6492] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 79.479892][ T6492] ? trace_lock_acquire+0x14a/0x1d0 [ 79.481263][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 79.482959][ T6492] ? lock_acquire+0x2f/0xb0 [ 79.484183][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 79.485903][ T6492] netif_receive_skb_list_internal+0x753/0xdb0 [ 79.487537][ T6492] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 79.489282][ T6492] ? __pfx_eth_type_trans+0x10/0x10 [ 79.490670][ T6492] ? __build_skb_around+0x278/0x3b0 [ 79.492057][ T6492] netif_receive_skb_list+0x4f/0x4a0 [ 79.493446][ T6492] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 79.495139][ T6492] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 79.496949][ T6492] ? bpf_test_timer_continue+0x150/0x3d0 [ 79.498525][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 79.499982][ T6492] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 79.501565][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 79.503178][ T6492] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 79.504825][ T6492] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 79.506621][ T6492] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 79.508199][ T6492] ? 0xffffffffa0004340 [ 79.509414][ T6492] ? 0xffffffffa0004340 [ 79.510602][ T6492] ? 0xffffffffa0004340 [ 79.511702][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 79.513240][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 79.514657][ T6492] ? lock_acquire+0x2f/0xb0 [ 79.515885][ T6492] ? __fget_files+0x40/0x3f0 [ 79.517114][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 79.518582][ T6492] ? fput+0x30/0x390 [ 79.519603][ T6492] ? __bpf_prog_get+0xa0/0x290 [ 79.520860][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 79.522884][ T6492] __sys_bpf+0xfc6/0x49a0 [ 79.524051][ T6492] ? __pfx_futex_wake+0x10/0x10 [ 79.525387][ T6492] ? finish_task_switch.isra.0+0x2e8/0xcc0 [ 79.526947][ T6492] ? __pfx___sys_bpf+0x10/0x10 [ 79.528226][ T6492] ? __schedule+0xe5d/0x5730 [ 79.529693][ T6492] ? __fget_files+0x23a/0x3f0 [ 79.530983][ T6492] ? do_futex+0x123/0x350 [ 79.532173][ T6492] ? __pfx_do_futex+0x10/0x10 [ 79.533371][ T6492] ? xfd_validate_state+0x5d/0x180 [ 79.534818][ T6492] ? rcu_is_watching+0x12/0xc0 [ 79.536113][ T6492] __x64_sys_bpf+0x78/0xc0 [ 79.537290][ T6492] ? lockdep_hardirqs_on+0x7c/0x110 [ 79.538675][ T6492] do_syscall_64+0xcd/0x250 [ 79.539897][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.541590][ T6492] RIP: 0033:0x7f475a17e719 [ 79.542894][ T6492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.548859][ T6492] RSP: 002b:00007f475b009038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 79.551335][ T6492] RAX: ffffffffffffffda RBX: 00007f475a336058 RCX: 00007f475a17e719 [ 79.553487][ T6492] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 79.555665][ T6492] RBP: 00007f475a1f132e R08: 0000000000000000 R09: 0000000000000000 [ 79.557724][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.559821][ T6492] R13: 0000000000000000 R14: 00007f475a336058 R15: 00007ffe2d0f8dd8 [ 79.561937][ T6492] [ 79.562886][ T6492] BUG: Bad page state in process syz.1.132 pfn:317ab [ 79.564642][ T6492] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880317ab1b0 pfn:0x317ab [ 79.567412][ T6492] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 79.569282][ T6492] raw: 00fff00000000000 dead000000000040 ffff88804c173000 0000000000000000 [ 79.571481][ T6492] raw: ffff8880317ab1b0 0000000000000001 00000000ffffffff 0000000000000000 [ 79.573632][ T6492] page dumped because: page_pool leak [ 79.575144][ T6492] page_owner tracks the page as allocated [ 79.576744][ T6492] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6492, tgid 6486 (syz.1.132), ts 70655379119, free_ts 70608592127 [ 79.581408][ T6492] post_alloc_hook+0x2d1/0x350 [ 79.582734][ T6492] get_page_from_freelist+0x101e/0x3070 [ 79.584429][ T6492] __alloc_pages_noprof+0x223/0x25a0 [ 79.586288][ T6492] alloc_pages_bulk_noprof+0x77c/0x1110 [ 79.587983][ T6492] __page_pool_alloc_pages_slow+0x18f/0x770 [ 79.589949][ T6492] page_pool_alloc_netmem+0xc4/0x160 [ 79.591651][ T6492] page_pool_alloc_pages+0x1a/0x60 [ 79.593132][ T6492] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 79.594980][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 79.596429][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 79.597864][ T6492] __sys_bpf+0xfc6/0x49a0 [ 79.599019][ T6492] __x64_sys_bpf+0x78/0xc0 [ 79.600367][ T6492] do_syscall_64+0xcd/0x250 [ 79.601779][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.603378][ T6492] page last free pid 64 tgid 64 stack trace: [ 79.605055][ T6492] free_unref_page+0x5f4/0xdc0 [ 79.606356][ T6492] rcu_core+0x79d/0x14d0 [ 79.607561][ T6492] handle_softirqs+0x213/0x8f0 [ 79.609022][ T6492] do_softirq+0xb2/0xf0 [ 79.610342][ T6492] __local_bh_enable_ip+0x100/0x120 [ 79.611730][ T6492] ipv6_get_lladdr+0x299/0x4f0 [ 79.613123][ T6492] mld_newpack.isra.0+0x3a1/0x790 [ 79.614478][ T6492] add_grhead+0x299/0x340 [ 79.615726][ T6492] add_grec+0x111e/0x1670 [ 79.616879][ T6492] mld_ifc_work+0x41f/0xca0 [ 79.618098][ T6492] process_one_work+0x9c5/0x1ba0 [ 79.621099][ T6492] worker_thread+0x6c8/0xf00 [ 79.622584][ T6492] kthread+0x2c1/0x3a0 [ 79.623670][ T6492] ret_from_fork+0x45/0x80 [ 79.625946][ T6492] ret_from_fork_asm+0x1a/0x30 [ 79.628562][ T6492] Modules linked in: [ 79.630333][ T6492] CPU: 3 UID: 0 PID: 6492 Comm: syz.1.132 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 79.634455][ T6492] Tainted: [B]=BAD_PAGE [ 79.635573][ T6492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 79.638646][ T6492] Call Trace: [ 79.639611][ T6492] [ 79.640460][ T6492] dump_stack_lvl+0x16c/0x1f0 [ 79.641730][ T6492] bad_page+0xb3/0x1f0 [ 79.642843][ T6492] ? __pfx_bad_page+0x10/0x10 [ 79.644106][ T6492] ? page_bad_reason+0x9d/0x1e0 [ 79.645586][ T6492] free_unref_page+0x657/0xdc0 [ 79.647228][ T6492] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 79.648836][ T6492] ? __phys_addr+0xc6/0x150 [ 79.650072][ T6492] skb_free_head+0xa0/0x1d0 [ 79.651444][ T6492] skb_release_data+0x560/0x730 [ 79.652928][ T6492] sk_skb_reason_drop+0x129/0x1a0 [ 79.654831][ T6492] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 79.657054][ T6492] ? kernel_text_address+0x8d/0x100 [ 79.658525][ T6492] ? hlock_class+0x4e/0x130 [ 79.659988][ T6492] ? __lock_acquire+0x163e/0x3ce0 [ 79.661558][ T6492] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 79.663497][ T6492] ? hlock_class+0x4e/0x130 [ 79.664811][ T6492] ? __lock_acquire+0xbdd/0x3ce0 [ 79.666172][ T6492] ? __pfx___lock_acquire+0x10/0x10 [ 79.667543][ T6492] __netif_receive_skb_list_core+0x357/0x950 [ 79.669132][ T6492] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 79.670843][ T6492] ? trace_lock_acquire+0x14a/0x1d0 [ 79.672209][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 79.673957][ T6492] ? lock_acquire+0x2f/0xb0 [ 79.675266][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 79.676963][ T6492] netif_receive_skb_list_internal+0x753/0xdb0 [ 79.678635][ T6492] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 79.680718][ T6492] ? __pfx_eth_type_trans+0x10/0x10 [ 79.682371][ T6492] ? __build_skb_around+0x278/0x3b0 [ 79.684051][ T6492] netif_receive_skb_list+0x4f/0x4a0 [ 79.685812][ T6492] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 79.687525][ T6492] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 79.689170][ T6492] ? bpf_test_timer_continue+0x150/0x3d0 [ 79.690629][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 79.692034][ T6492] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 79.693540][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 79.695134][ T6492] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 79.696671][ T6492] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 79.698173][ T6492] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 79.699556][ T6492] ? 0xffffffffa0004340 [ 79.700651][ T6492] ? 0xffffffffa0004340 [ 79.701745][ T6492] ? 0xffffffffa0004340 [ 79.702846][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 79.704389][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 79.705832][ T6492] ? lock_acquire+0x2f/0xb0 [ 79.707034][ T6492] ? __fget_files+0x40/0x3f0 [ 79.708378][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 79.710169][ T6492] ? fput+0x30/0x390 [ 79.711349][ T6492] ? __bpf_prog_get+0xa0/0x290 [ 79.712700][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 79.714241][ T6492] __sys_bpf+0xfc6/0x49a0 [ 79.715461][ T6492] ? __pfx_futex_wake+0x10/0x10 [ 79.716959][ T6492] ? finish_task_switch.isra.0+0x2e8/0xcc0 [ 79.718803][ T6492] ? __pfx___sys_bpf+0x10/0x10 [ 79.720544][ T6492] ? __schedule+0xe5d/0x5730 [ 79.722067][ T6492] ? __fget_files+0x23a/0x3f0 [ 79.723597][ T6492] ? do_futex+0x123/0x350 [ 79.725080][ T6492] ? __pfx_do_futex+0x10/0x10 [ 79.726473][ T6492] ? xfd_validate_state+0x5d/0x180 [ 79.727824][ T6492] ? rcu_is_watching+0x12/0xc0 [ 79.729098][ T6492] __x64_sys_bpf+0x78/0xc0 [ 79.730297][ T6492] ? lockdep_hardirqs_on+0x7c/0x110 [ 79.731644][ T6492] do_syscall_64+0xcd/0x250 [ 79.732848][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.734409][ T6492] RIP: 0033:0x7f475a17e719 [ 79.735606][ T6492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.740536][ T6492] RSP: 002b:00007f475b009038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 79.742732][ T6492] RAX: ffffffffffffffda RBX: 00007f475a336058 RCX: 00007f475a17e719 [ 79.744790][ T6492] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 79.746869][ T6492] RBP: 00007f475a1f132e R08: 0000000000000000 R09: 0000000000000000 [ 79.748922][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.750991][ T6492] R13: 0000000000000000 R14: 00007f475a336058 R15: 00007ffe2d0f8dd8 [ 79.753102][ T6492] [ 79.754102][ T6492] BUG: Bad page state in process syz.1.132 pfn:24ad1 [ 79.757629][ T6492] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x24ad1 [ 79.762374][ T6492] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 79.765706][ T6492] raw: 00fff00000000000 dead000000000040 ffff88804c173000 0000000000000000 [ 79.770201][ T6492] raw: 0000000000000004 0000000000000001 00000000ffffffff 0000000000000000 [ 79.777326][ T6492] page dumped because: page_pool leak [ 79.779437][ T6492] page_owner tracks the page as allocated [ 79.780926][ T6492] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6492, tgid 6486 (syz.1.132), ts 70655373913, free_ts 70609738697 [ 79.791921][ T6492] post_alloc_hook+0x2d1/0x350 [ 79.793929][ T6492] get_page_from_freelist+0x101e/0x3070 [ 79.795970][ T6492] __alloc_pages_noprof+0x223/0x25a0 [ 79.797378][ T6492] alloc_pages_bulk_noprof+0x77c/0x1110 [ 79.798802][ T6492] __page_pool_alloc_pages_slow+0x18f/0x770 [ 79.800723][ T6492] page_pool_alloc_netmem+0xc4/0x160 [ 79.802420][ T6492] page_pool_alloc_pages+0x1a/0x60 [ 79.803879][ T6492] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 79.806246][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 79.807777][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 79.809206][ T6492] __sys_bpf+0xfc6/0x49a0 [ 79.810579][ T6492] __x64_sys_bpf+0x78/0xc0 [ 79.811838][ T6492] do_syscall_64+0xcd/0x250 [ 79.813067][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.815003][ T6492] page last free pid 64 tgid 64 stack trace: [ 79.816982][ T6492] free_unref_page+0x5f4/0xdc0 [ 79.818652][ T6492] vfree+0x17a/0x890 [ 79.820255][ T6492] delayed_vfree_work+0x56/0x70 [ 79.821922][ T6492] process_one_work+0x9c5/0x1ba0 [ 79.823369][ T6492] worker_thread+0x6c8/0xf00 [ 79.824679][ T6492] kthread+0x2c1/0x3a0 [ 79.825854][ T6492] ret_from_fork+0x45/0x80 [ 79.827024][ T6492] ret_from_fork_asm+0x1a/0x30 [ 79.828551][ T6492] Modules linked in: [ 79.829843][ T6492] CPU: 3 UID: 0 PID: 6492 Comm: syz.1.132 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 79.832991][ T6492] Tainted: [B]=BAD_PAGE [ 79.834105][ T6492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 79.837170][ T6492] Call Trace: [ 79.838068][ T6492] [ 79.838847][ T6492] dump_stack_lvl+0x16c/0x1f0 [ 79.840100][ T6492] bad_page+0xb3/0x1f0 [ 79.841182][ T6492] ? __pfx_bad_page+0x10/0x10 [ 79.842427][ T6492] ? page_bad_reason+0x9d/0x1e0 [ 79.843715][ T6492] free_unref_page+0x657/0xdc0 [ 79.845002][ T6492] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 79.846680][ T6492] ? __phys_addr+0xc6/0x150 [ 79.848281][ T6492] skb_free_head+0xa0/0x1d0 [ 79.849609][ T6492] skb_release_data+0x560/0x730 [ 79.851177][ T6492] sk_skb_reason_drop+0x129/0x1a0 [ 79.852672][ T6492] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 79.854433][ T6492] ? kernel_text_address+0x8d/0x100 [ 79.855910][ T6492] ? hlock_class+0x4e/0x130 [ 79.857233][ T6492] ? __lock_acquire+0x163e/0x3ce0 [ 79.858718][ T6492] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 79.860840][ T6492] ? hlock_class+0x4e/0x130 [ 79.862389][ T6492] ? __lock_acquire+0xbdd/0x3ce0 [ 79.864060][ T6492] ? __pfx___lock_acquire+0x10/0x10 [ 79.865478][ T6492] __netif_receive_skb_list_core+0x357/0x950 [ 79.867085][ T6492] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 79.868870][ T6492] ? trace_lock_acquire+0x14a/0x1d0 [ 79.870291][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 79.871938][ T6492] ? lock_acquire+0x2f/0xb0 [ 79.873126][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 79.874769][ T6492] netif_receive_skb_list_internal+0x753/0xdb0 [ 79.876385][ T6492] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 79.878120][ T6492] ? __pfx_eth_type_trans+0x10/0x10 [ 79.879572][ T6492] ? __build_skb_around+0x278/0x3b0 [ 79.880939][ T6492] netif_receive_skb_list+0x4f/0x4a0 [ 79.882337][ T6492] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 79.884007][ T6492] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 79.886269][ T6492] ? bpf_test_timer_continue+0x150/0x3d0 [ 79.887807][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 79.889275][ T6492] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 79.891034][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 79.892733][ T6492] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 79.894338][ T6492] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 79.896040][ T6492] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 79.897540][ T6492] ? 0xffffffffa0004340 [ 79.898655][ T6492] ? 0xffffffffa0004340 [ 79.899760][ T6492] ? 0xffffffffa0004340 [ 79.900856][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 79.902416][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 79.903831][ T6492] ? lock_acquire+0x2f/0xb0 [ 79.905067][ T6492] ? __fget_files+0x40/0x3f0 [ 79.906304][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 79.907843][ T6492] ? fput+0x30/0x390 [ 79.908985][ T6492] ? __bpf_prog_get+0xa0/0x290 [ 79.910437][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 79.912223][ T6492] __sys_bpf+0xfc6/0x49a0 [ 79.913695][ T6492] ? __pfx_futex_wake+0x10/0x10 [ 79.915352][ T6492] ? finish_task_switch.isra.0+0x2e8/0xcc0 [ 79.917109][ T6492] ? __pfx___sys_bpf+0x10/0x10 [ 79.918496][ T6492] ? __schedule+0xe5d/0x5730 [ 79.919795][ T6492] ? __fget_files+0x23a/0x3f0 [ 79.921161][ T6492] ? do_futex+0x123/0x350 [ 79.922346][ T6492] ? __pfx_do_futex+0x10/0x10 [ 79.923601][ T6492] ? xfd_validate_state+0x5d/0x180 [ 79.924962][ T6492] ? rcu_is_watching+0x12/0xc0 [ 79.926249][ T6492] __x64_sys_bpf+0x78/0xc0 [ 79.927429][ T6492] ? lockdep_hardirqs_on+0x7c/0x110 [ 79.928799][ T6492] do_syscall_64+0xcd/0x250 [ 79.930027][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.931623][ T6492] RIP: 0033:0x7f475a17e719 [ 79.932806][ T6492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.937934][ T6492] RSP: 002b:00007f475b009038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 79.940100][ T6492] RAX: ffffffffffffffda RBX: 00007f475a336058 RCX: 00007f475a17e719 [ 79.942203][ T6492] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 79.944250][ T6492] RBP: 00007f475a1f132e R08: 0000000000000000 R09: 0000000000000000 [ 79.946360][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.948418][ T6492] R13: 0000000000000000 R14: 00007f475a336058 R15: 00007ffe2d0f8dd8 [ 79.950494][ T6492] [ 79.951422][ T6492] BUG: Bad page state in process syz.1.132 pfn:4f65c [ 79.953257][ T6492] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804f65de00 pfn:0x4f65c [ 79.956256][ T6492] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 79.958586][ T6492] raw: 00fff00000000000 dead000000000040 ffff88804c173000 0000000000000000 [ 79.961174][ T6492] raw: ffff88804f65de00 0000000000000001 00000000ffffffff 0000000000000000 [ 79.963797][ T6492] page dumped because: page_pool leak [ 79.965325][ T6492] page_owner tracks the page as allocated [ 79.966847][ T6492] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6492, tgid 6486 (syz.1.132), ts 70655368828, free_ts 70609745082 [ 79.971353][ T6492] post_alloc_hook+0x2d1/0x350 [ 79.972611][ T6492] get_page_from_freelist+0x101e/0x3070 [ 79.974061][ T6492] __alloc_pages_noprof+0x223/0x25a0 [ 79.975601][ T6492] alloc_pages_bulk_noprof+0x77c/0x1110 [ 79.977110][ T6492] __page_pool_alloc_pages_slow+0x18f/0x770 [ 79.978681][ T6492] page_pool_alloc_netmem+0xc4/0x160 [ 79.980070][ T6492] page_pool_alloc_pages+0x1a/0x60 [ 79.981415][ T6492] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 79.983039][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 79.984929][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 79.986408][ T6492] __sys_bpf+0xfc6/0x49a0 [ 79.987569][ T6492] __x64_sys_bpf+0x78/0xc0 [ 79.988760][ T6492] do_syscall_64+0xcd/0x250 [ 79.989948][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.991502][ T6492] page last free pid 64 tgid 64 stack trace: [ 79.993058][ T6492] free_unref_page+0x5f4/0xdc0 [ 79.994405][ T6492] vfree+0x17a/0x890 [ 79.995580][ T6492] delayed_vfree_work+0x56/0x70 [ 79.996905][ T6492] process_one_work+0x9c5/0x1ba0 [ 79.998305][ T6492] worker_thread+0x6c8/0xf00 [ 79.999600][ T6492] kthread+0x2c1/0x3a0 [ 80.000773][ T6492] ret_from_fork+0x45/0x80 [ 80.002074][ T6492] ret_from_fork_asm+0x1a/0x30 [ 80.003460][ T6492] Modules linked in: [ 80.004571][ T6492] CPU: 3 UID: 0 PID: 6492 Comm: syz.1.132 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 80.007729][ T6492] Tainted: [B]=BAD_PAGE [ 80.008820][ T6492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.011595][ T6492] Call Trace: [ 80.012472][ T6492] [ 80.013254][ T6492] dump_stack_lvl+0x16c/0x1f0 [ 80.014564][ T6492] bad_page+0xb3/0x1f0 [ 80.015799][ T6492] ? __pfx_bad_page+0x10/0x10 [ 80.017033][ T6492] ? page_bad_reason+0x9d/0x1e0 [ 80.018326][ T6492] free_unref_page+0x657/0xdc0 [ 80.019657][ T6492] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 80.021224][ T6492] ? __phys_addr+0xc6/0x150 [ 80.022446][ T6492] skb_free_head+0xa0/0x1d0 [ 80.023646][ T6492] skb_release_data+0x560/0x730 [ 80.024961][ T6492] sk_skb_reason_drop+0x129/0x1a0 [ 80.026323][ T6492] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 80.028081][ T6492] ? kernel_text_address+0x8d/0x100 [ 80.029828][ T6492] ? hlock_class+0x4e/0x130 [ 80.031044][ T6492] ? __lock_acquire+0x163e/0x3ce0 [ 80.032376][ T6492] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 80.034253][ T6492] ? hlock_class+0x4e/0x130 [ 80.035488][ T6492] ? __lock_acquire+0xbdd/0x3ce0 [ 80.036781][ T6492] ? __pfx___lock_acquire+0x10/0x10 [ 80.038181][ T6492] __netif_receive_skb_list_core+0x357/0x950 [ 80.039803][ T6492] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 80.041564][ T6492] ? trace_lock_acquire+0x14a/0x1d0 [ 80.042990][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 80.044667][ T6492] ? lock_acquire+0x2f/0xb0 [ 80.046056][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 80.047732][ T6492] netif_receive_skb_list_internal+0x753/0xdb0 [ 80.049352][ T6492] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 80.051103][ T6492] ? __pfx_eth_type_trans+0x10/0x10 [ 80.052476][ T6492] ? __build_skb_around+0x278/0x3b0 [ 80.053848][ T6492] netif_receive_skb_list+0x4f/0x4a0 [ 80.055224][ T6492] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 80.056855][ T6492] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 80.058574][ T6492] ? bpf_test_timer_continue+0x150/0x3d0 [ 80.060033][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 80.061412][ T6492] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 80.062947][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 80.064485][ T6492] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 80.066202][ T6492] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 80.067854][ T6492] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 80.069262][ T6492] ? 0xffffffffa0004340 [ 80.070488][ T6492] ? 0xffffffffa0004340 [ 80.071607][ T6492] ? 0xffffffffa0004340 [ 80.072803][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 80.074507][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 80.075905][ T6492] ? lock_acquire+0x2f/0xb0 [ 80.077097][ T6492] ? __fget_files+0x40/0x3f0 [ 80.078341][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 80.079897][ T6492] ? fput+0x30/0x390 [ 80.081562][ T6492] ? __bpf_prog_get+0xa0/0x290 [ 80.083033][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 80.084653][ T6492] __sys_bpf+0xfc6/0x49a0 [ 80.086050][ T6492] ? __pfx_futex_wake+0x10/0x10 [ 80.087309][ T6492] ? finish_task_switch.isra.0+0x2e8/0xcc0 [ 80.088835][ T6492] ? __pfx___sys_bpf+0x10/0x10 [ 80.090116][ T6492] ? __schedule+0xe5d/0x5730 [ 80.091498][ T6492] ? __fget_files+0x23a/0x3f0 [ 80.092757][ T6492] ? do_futex+0x123/0x350 [ 80.093943][ T6492] ? __pfx_do_futex+0x10/0x10 [ 80.095285][ T6492] ? xfd_validate_state+0x5d/0x180 [ 80.096701][ T6492] ? rcu_is_watching+0x12/0xc0 [ 80.097960][ T6492] __x64_sys_bpf+0x78/0xc0 [ 80.099149][ T6492] ? lockdep_hardirqs_on+0x7c/0x110 [ 80.100529][ T6492] do_syscall_64+0xcd/0x250 [ 80.101734][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.103292][ T6492] RIP: 0033:0x7f475a17e719 [ 80.104466][ T6492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.109822][ T6492] RSP: 002b:00007f475b009038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 80.112018][ T6492] RAX: ffffffffffffffda RBX: 00007f475a336058 RCX: 00007f475a17e719 [ 80.114089][ T6492] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 80.116188][ T6492] RBP: 00007f475a1f132e R08: 0000000000000000 R09: 0000000000000000 [ 80.118268][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.120340][ T6492] R13: 0000000000000000 R14: 00007f475a336058 R15: 00007ffe2d0f8dd8 [ 80.122408][ T6492] [ 80.123315][ T6492] BUG: Bad page state in process syz.1.132 pfn:3263f [ 80.125140][ T6492] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803263f0d8 pfn:0x3263f [ 80.127789][ T6492] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 80.129655][ T6492] raw: 00fff00000000000 dead000000000040 ffff88804c173000 0000000000000000 [ 80.131913][ T6492] raw: ffff88803263f0d8 0000000000000001 00000000ffffffff 0000000000000000 [ 80.134164][ T6492] page dumped because: page_pool leak [ 80.135647][ T6492] page_owner tracks the page as allocated [ 80.137130][ T6492] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6492, tgid 6486 (syz.1.132), ts 70655364093, free_ts 70609748703 [ 80.142040][ T6492] post_alloc_hook+0x2d1/0x350 [ 80.143357][ T6492] get_page_from_freelist+0x101e/0x3070 [ 80.144985][ T6492] __alloc_pages_noprof+0x223/0x25a0 [ 80.146664][ T6492] alloc_pages_bulk_noprof+0x77c/0x1110 [ 80.148284][ T6492] __page_pool_alloc_pages_slow+0x18f/0x770 [ 80.150019][ T6492] page_pool_alloc_netmem+0xc4/0x160 [ 80.151728][ T6492] page_pool_alloc_pages+0x1a/0x60 [ 80.153499][ T6492] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 80.155355][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 80.156757][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 80.158199][ T6492] __sys_bpf+0xfc6/0x49a0 [ 80.159347][ T6492] __x64_sys_bpf+0x78/0xc0 [ 80.160527][ T6492] do_syscall_64+0xcd/0x250 [ 80.161737][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.163293][ T6492] page last free pid 64 tgid 64 stack trace: [ 80.164924][ T6492] free_unref_page+0x5f4/0xdc0 [ 80.166177][ T6492] vfree+0x17a/0x890 [ 80.167215][ T6492] delayed_vfree_work+0x56/0x70 [ 80.168492][ T6492] process_one_work+0x9c5/0x1ba0 [ 80.169772][ T6492] worker_thread+0x6c8/0xf00 [ 80.170989][ T6492] kthread+0x2c1/0x3a0 [ 80.172062][ T6492] ret_from_fork+0x45/0x80 [ 80.173243][ T6492] ret_from_fork_asm+0x1a/0x30 [ 80.174529][ T6492] Modules linked in: [ 80.175855][ T6492] CPU: 3 UID: 0 PID: 6492 Comm: syz.1.132 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 80.178949][ T6492] Tainted: [B]=BAD_PAGE [ 80.180027][ T6492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.182833][ T6492] Call Trace: [ 80.183710][ T6492] [ 80.184496][ T6492] dump_stack_lvl+0x16c/0x1f0 [ 80.185776][ T6492] bad_page+0xb3/0x1f0 [ 80.186870][ T6492] ? __pfx_bad_page+0x10/0x10 [ 80.188109][ T6492] ? page_bad_reason+0x9d/0x1e0 [ 80.189385][ T6492] free_unref_page+0x657/0xdc0 [ 80.190651][ T6492] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 80.192229][ T6492] ? __phys_addr+0xc6/0x150 [ 80.193412][ T6492] skb_free_head+0xa0/0x1d0 [ 80.194619][ T6492] skb_release_data+0x560/0x730 [ 80.195908][ T6492] sk_skb_reason_drop+0x129/0x1a0 [ 80.197215][ T6492] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 80.199081][ T6492] ? kernel_text_address+0x8d/0x100 [ 80.200487][ T6492] ? hlock_class+0x4e/0x130 [ 80.201708][ T6492] ? __lock_acquire+0x163e/0x3ce0 [ 80.203048][ T6492] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 80.205051][ T6492] ? hlock_class+0x4e/0x130 [ 80.206511][ T6492] ? __lock_acquire+0xbdd/0x3ce0 [ 80.207837][ T6492] ? __pfx___lock_acquire+0x10/0x10 [ 80.209328][ T6492] __netif_receive_skb_list_core+0x357/0x950 [ 80.211051][ T6492] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 80.212724][ T6492] ? trace_lock_acquire+0x14a/0x1d0 [ 80.214115][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 80.215812][ T6492] ? lock_acquire+0x2f/0xb0 [ 80.217009][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 80.218666][ T6492] netif_receive_skb_list_internal+0x753/0xdb0 [ 80.220289][ T6492] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 80.221950][ T6492] ? __pfx_eth_type_trans+0x10/0x10 [ 80.223257][ T6492] ? __build_skb_around+0x278/0x3b0 [ 80.224617][ T6492] netif_receive_skb_list+0x4f/0x4a0 [ 80.226051][ T6492] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 80.227696][ T6492] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 80.229425][ T6492] ? bpf_test_timer_continue+0x150/0x3d0 [ 80.230918][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 80.232251][ T6492] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 80.233724][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 80.235786][ T6492] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 80.237669][ T6492] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 80.239316][ T6492] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 80.240758][ T6492] ? 0xffffffffa0004340 [ 80.241859][ T6492] ? 0xffffffffa0004340 [ 80.243008][ T6492] ? 0xffffffffa0004340 [ 80.244130][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 80.245724][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 80.247175][ T6492] ? lock_acquire+0x2f/0xb0 [ 80.248367][ T6492] ? __fget_files+0x40/0x3f0 [ 80.249585][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 80.251113][ T6492] ? fput+0x30/0x390 [ 80.252139][ T6492] ? __bpf_prog_get+0xa0/0x290 [ 80.253376][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 80.254968][ T6492] __sys_bpf+0xfc6/0x49a0 [ 80.256122][ T6492] ? __pfx_futex_wake+0x10/0x10 [ 80.257392][ T6492] ? finish_task_switch.isra.0+0x2e8/0xcc0 [ 80.258923][ T6492] ? __pfx___sys_bpf+0x10/0x10 [ 80.260191][ T6492] ? __schedule+0xe5d/0x5730 [ 80.261437][ T6492] ? __fget_files+0x23a/0x3f0 [ 80.262683][ T6492] ? do_futex+0x123/0x350 [ 80.263829][ T6492] ? __pfx_do_futex+0x10/0x10 [ 80.265134][ T6492] ? xfd_validate_state+0x5d/0x180 [ 80.266539][ T6492] ? rcu_is_watching+0x12/0xc0 [ 80.267798][ T6492] __x64_sys_bpf+0x78/0xc0 [ 80.268968][ T6492] ? lockdep_hardirqs_on+0x7c/0x110 [ 80.270335][ T6492] do_syscall_64+0xcd/0x250 [ 80.271530][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.273089][ T6492] RIP: 0033:0x7f475a17e719 [ 80.274274][ T6492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.279359][ T6492] RSP: 002b:00007f475b009038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 80.281551][ T6492] RAX: ffffffffffffffda RBX: 00007f475a336058 RCX: 00007f475a17e719 [ 80.283775][ T6492] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 80.285912][ T6492] RBP: 00007f475a1f132e R08: 0000000000000000 R09: 0000000000000000 [ 80.287983][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.290058][ T6492] R13: 0000000000000000 R14: 00007f475a336058 R15: 00007ffe2d0f8dd8 [ 80.292224][ T6492] [ 80.293142][ T6492] BUG: Bad page state in process syz.1.132 pfn:3f052 [ 80.295050][ T6492] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x7f39b97ad pfn:0x3f052 [ 80.297549][ T6492] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 80.299426][ T6492] raw: 00fff00000000000 dead000000000040 ffff88804c173000 0000000000000000 [ 80.301642][ T6492] raw: 00000007f39b97ad 0000000000000001 00000000ffffffff 0000000000000000 [ 80.303879][ T6492] page dumped because: page_pool leak [ 80.305364][ T6492] page_owner tracks the page as allocated [ 80.307058][ T6492] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6492, tgid 6486 (syz.1.132), ts 70655359026, free_ts 70609752394 [ 80.312091][ T6492] post_alloc_hook+0x2d1/0x350 [ 80.313470][ T6492] get_page_from_freelist+0x101e/0x3070 [ 80.315095][ T6492] __alloc_pages_noprof+0x223/0x25a0 [ 80.316501][ T6492] alloc_pages_bulk_noprof+0x77c/0x1110 [ 80.317965][ T6492] __page_pool_alloc_pages_slow+0x18f/0x770 [ 80.319545][ T6492] page_pool_alloc_netmem+0xc4/0x160 [ 80.320936][ T6492] page_pool_alloc_pages+0x1a/0x60 [ 80.322313][ T6492] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 80.323948][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 80.325426][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 80.326882][ T6492] __sys_bpf+0xfc6/0x49a0 [ 80.328006][ T6492] __x64_sys_bpf+0x78/0xc0 [ 80.329191][ T6492] do_syscall_64+0xcd/0x250 [ 80.330397][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.331951][ T6492] page last free pid 64 tgid 64 stack trace: [ 80.333512][ T6492] free_unref_page+0x5f4/0xdc0 [ 80.334846][ T6492] vfree+0x17a/0x890 [ 80.335886][ T6492] delayed_vfree_work+0x56/0x70 [ 80.337183][ T6492] process_one_work+0x9c5/0x1ba0 [ 80.338497][ T6492] worker_thread+0x6c8/0xf00 [ 80.339719][ T6492] kthread+0x2c1/0x3a0 [ 80.340803][ T6492] ret_from_fork+0x45/0x80 [ 80.341982][ T6492] ret_from_fork_asm+0x1a/0x30 [ 80.343314][ T6492] Modules linked in: [ 80.344343][ T6492] CPU: 3 UID: 0 PID: 6492 Comm: syz.1.132 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 80.347459][ T6492] Tainted: [B]=BAD_PAGE [ 80.348543][ T6492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.351346][ T6492] Call Trace: [ 80.352239][ T6492] [ 80.352999][ T6492] dump_stack_lvl+0x16c/0x1f0 [ 80.354243][ T6492] bad_page+0xb3/0x1f0 [ 80.355302][ T6492] ? __pfx_bad_page+0x10/0x10 [ 80.356534][ T6492] ? page_bad_reason+0x9d/0x1e0 [ 80.357811][ T6492] free_unref_page+0x657/0xdc0 [ 80.359067][ T6492] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 80.360623][ T6492] ? __phys_addr+0xc6/0x150 [ 80.361810][ T6492] skb_free_head+0xa0/0x1d0 [ 80.363049][ T6492] skb_release_data+0x560/0x730 [ 80.364325][ T6492] sk_skb_reason_drop+0x129/0x1a0 [ 80.365636][ T6492] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 80.367380][ T6492] ? kernel_text_address+0x8d/0x100 [ 80.368735][ T6492] ? hlock_class+0x4e/0x130 [ 80.369946][ T6492] ? __lock_acquire+0x163e/0x3ce0 [ 80.371267][ T6492] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 80.373138][ T6492] ? hlock_class+0x4e/0x130 [ 80.374337][ T6492] ? __lock_acquire+0xbdd/0x3ce0 [ 80.375632][ T6492] ? __pfx___lock_acquire+0x10/0x10 [ 80.376992][ T6492] __netif_receive_skb_list_core+0x357/0x950 [ 80.378496][ T6492] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 80.380177][ T6492] ? trace_lock_acquire+0x14a/0x1d0 [ 80.381546][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 80.383689][ T6492] ? lock_acquire+0x2f/0xb0 [ 80.385015][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 80.386809][ T6492] netif_receive_skb_list_internal+0x753/0xdb0 [ 80.388450][ T6492] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 80.390346][ T6492] ? __pfx_eth_type_trans+0x10/0x10 [ 80.391806][ T6492] ? __build_skb_around+0x278/0x3b0 [ 80.393257][ T6492] netif_receive_skb_list+0x4f/0x4a0 [ 80.394729][ T6492] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 80.396387][ T6492] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 80.398124][ T6492] ? bpf_test_timer_continue+0x150/0x3d0 [ 80.399590][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 80.400989][ T6492] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 80.402522][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 80.404057][ T6492] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 80.405610][ T6492] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 80.407480][ T6492] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 80.409038][ T6492] ? 0xffffffffa0004340 [ 80.410153][ T6492] ? 0xffffffffa0004340 [ 80.411409][ T6492] ? 0xffffffffa0004340 [ 80.412683][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 80.414385][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 80.415898][ T6492] ? lock_acquire+0x2f/0xb0 [ 80.417201][ T6492] ? __fget_files+0x40/0x3f0 [ 80.418498][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 80.420095][ T6492] ? fput+0x30/0x390 [ 80.421147][ T6492] ? __bpf_prog_get+0xa0/0x290 [ 80.422417][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 80.423942][ T6492] __sys_bpf+0xfc6/0x49a0 [ 80.425702][ T6492] ? __pfx_futex_wake+0x10/0x10 [ 80.427094][ T6492] ? finish_task_switch.isra.0+0x2e8/0xcc0 [ 80.428796][ T6492] ? __pfx___sys_bpf+0x10/0x10 [ 80.430272][ T6492] ? __schedule+0xe5d/0x5730 [ 80.431560][ T6492] ? __fget_files+0x23a/0x3f0 [ 80.432884][ T6492] ? do_futex+0x123/0x350 [ 80.434115][ T6492] ? __pfx_do_futex+0x10/0x10 [ 80.435415][ T6492] ? xfd_validate_state+0x5d/0x180 [ 80.436865][ T6492] ? rcu_is_watching+0x12/0xc0 [ 80.438403][ T6492] __x64_sys_bpf+0x78/0xc0 [ 80.439667][ T6492] ? lockdep_hardirqs_on+0x7c/0x110 [ 80.441136][ T6492] do_syscall_64+0xcd/0x250 [ 80.442420][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.443982][ T6492] RIP: 0033:0x7f475a17e719 [ 80.445134][ T6492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.450404][ T6492] RSP: 002b:00007f475b009038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 80.452597][ T6492] RAX: ffffffffffffffda RBX: 00007f475a336058 RCX: 00007f475a17e719 [ 80.454608][ T6492] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 80.456668][ T6492] RBP: 00007f475a1f132e R08: 0000000000000000 R09: 0000000000000000 [ 80.458723][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.460795][ T6492] R13: 0000000000000000 R14: 00007f475a336058 R15: 00007ffe2d0f8dd8 [ 80.462876][ T6492] [ 80.463802][ T6492] BUG: Bad page state in process syz.1.132 pfn:4e5d1 [ 80.465640][ T6492] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2 pfn:0x4e5d1 [ 80.468103][ T6492] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 80.470047][ T6492] raw: 00fff00000000000 dead000000000040 ffff88804c173000 0000000000000000 [ 80.472320][ T6492] raw: 0000000000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 80.474572][ T6492] page dumped because: page_pool leak [ 80.476042][ T6492] page_owner tracks the page as allocated [ 80.477574][ T6492] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6492, tgid 6486 (syz.1.132), ts 70655354043, free_ts 70609756014 [ 80.481905][ T6492] post_alloc_hook+0x2d1/0x350 [ 80.483196][ T6492] get_page_from_freelist+0x101e/0x3070 [ 80.484642][ T6492] __alloc_pages_noprof+0x223/0x25a0 [ 80.486115][ T6492] alloc_pages_bulk_noprof+0x77c/0x1110 [ 80.487769][ T6492] __page_pool_alloc_pages_slow+0x18f/0x770 [ 80.489453][ T6492] page_pool_alloc_netmem+0xc4/0x160 [ 80.491067][ T6492] page_pool_alloc_pages+0x1a/0x60 [ 80.492411][ T6492] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 80.494069][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 80.495559][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 80.497046][ T6492] __sys_bpf+0xfc6/0x49a0 [ 80.498224][ T6492] __x64_sys_bpf+0x78/0xc0 [ 80.499442][ T6492] do_syscall_64+0xcd/0x250 [ 80.500745][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.502375][ T6492] page last free pid 64 tgid 64 stack trace: [ 80.504409][ T6492] free_unref_page+0x5f4/0xdc0 [ 80.505732][ T6492] vfree+0x17a/0x890 [ 80.506797][ T6492] delayed_vfree_work+0x56/0x70 [ 80.508083][ T6492] process_one_work+0x9c5/0x1ba0 [ 80.509383][ T6492] worker_thread+0x6c8/0xf00 [ 80.510789][ T6492] kthread+0x2c1/0x3a0 [ 80.511935][ T6492] ret_from_fork+0x45/0x80 [ 80.513132][ T6492] ret_from_fork_asm+0x1a/0x30 [ 80.514442][ T6492] Modules linked in: [ 80.515760][ T6492] CPU: 3 UID: 0 PID: 6492 Comm: syz.1.132 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 80.519675][ T6492] Tainted: [B]=BAD_PAGE [ 80.521038][ T6492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.524430][ T6492] Call Trace: [ 80.525337][ T6492] [ 80.526160][ T6492] dump_stack_lvl+0x16c/0x1f0 [ 80.527429][ T6492] bad_page+0xb3/0x1f0 [ 80.528522][ T6492] ? __pfx_bad_page+0x10/0x10 [ 80.529775][ T6492] ? page_bad_reason+0x9d/0x1e0 [ 80.531087][ T6492] free_unref_page+0x657/0xdc0 [ 80.532341][ T6492] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 80.533905][ T6492] ? __phys_addr+0xc6/0x150 [ 80.535133][ T6492] skb_free_head+0xa0/0x1d0 [ 80.536342][ T6492] skb_release_data+0x560/0x730 [ 80.537658][ T6492] sk_skb_reason_drop+0x129/0x1a0 [ 80.539070][ T6492] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 80.540806][ T6492] ? kernel_text_address+0x8d/0x100 [ 80.542201][ T6492] ? hlock_class+0x4e/0x130 [ 80.543432][ T6492] ? __lock_acquire+0x163e/0x3ce0 [ 80.544755][ T6492] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 80.546641][ T6492] ? hlock_class+0x4e/0x130 [ 80.547845][ T6492] ? __lock_acquire+0xbdd/0x3ce0 [ 80.549153][ T6492] ? __pfx___lock_acquire+0x10/0x10 [ 80.550545][ T6492] __netif_receive_skb_list_core+0x357/0x950 [ 80.552141][ T6492] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 80.553847][ T6492] ? trace_lock_acquire+0x14a/0x1d0 [ 80.555164][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 80.556951][ T6492] ? lock_acquire+0x2f/0xb0 [ 80.558376][ T6492] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 80.560345][ T6492] netif_receive_skb_list_internal+0x753/0xdb0 [ 80.562131][ T6492] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 80.563897][ T6492] ? __pfx_eth_type_trans+0x10/0x10 [ 80.565580][ T6492] ? __build_skb_around+0x278/0x3b0 [ 80.567203][ T6492] netif_receive_skb_list+0x4f/0x4a0 [ 80.568643][ T6492] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 80.570300][ T6492] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 80.572303][ T6492] ? bpf_test_timer_continue+0x150/0x3d0 [ 80.573792][ T6492] bpf_test_run_xdp_live+0x365/0x500 [ 80.575227][ T6492] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 80.576874][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 80.578715][ T6492] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 80.580566][ T6492] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 80.582436][ T6492] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 80.583836][ T6492] ? 0xffffffffa0004340 [ 80.584943][ T6492] ? 0xffffffffa0004340 [ 80.586063][ T6492] ? 0xffffffffa0004340 [ 80.587277][ T6492] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 80.589090][ T6492] bpf_prog_test_run_xdp+0x827/0x1580 [ 80.590545][ T6492] ? lock_acquire+0x2f/0xb0 [ 80.591846][ T6492] ? __fget_files+0x40/0x3f0 [ 80.593159][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 80.594750][ T6492] ? fput+0x30/0x390 [ 80.595867][ T6492] ? __bpf_prog_get+0xa0/0x290 [ 80.597270][ T6492] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 80.599109][ T6492] __sys_bpf+0xfc6/0x49a0 [ 80.600340][ T6492] ? __pfx_futex_wake+0x10/0x10 [ 80.601706][ T6492] ? finish_task_switch.isra.0+0x2e8/0xcc0 [ 80.603332][ T6492] ? __pfx___sys_bpf+0x10/0x10 [ 80.604725][ T6492] ? __schedule+0xe5d/0x5730 [ 80.606049][ T6492] ? __fget_files+0x23a/0x3f0 [ 80.607482][ T6492] ? do_futex+0x123/0x350 [ 80.608697][ T6492] ? __pfx_do_futex+0x10/0x10 [ 80.609943][ T6492] ? xfd_validate_state+0x5d/0x180 [ 80.611323][ T6492] ? rcu_is_watching+0x12/0xc0 [ 80.612596][ T6492] __x64_sys_bpf+0x78/0xc0 [ 80.613785][ T6492] ? lockdep_hardirqs_on+0x7c/0x110 [ 80.615158][ T6492] do_syscall_64+0xcd/0x250 [ 80.616368][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.617940][ T6492] RIP: 0033:0x7f475a17e719 [ 80.619148][ T6492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.624217][ T6492] RSP: 002b:00007f475b009038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 80.626537][ T6492] RAX: ffffffffffffffda RBX: 00007f475a336058 RCX: 00007f475a17e719 [ 80.628941][ T6492] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 80.631416][ T6492] RBP: 00007f475a1f132e R08: 0000000000000000 R09: 0000000000000000 [ 80.633837][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.636303][ T6492] R13: 0000000000000000 R14: 00007f475a336058 R15: 00007ffe2d0f8dd8 [ 80.638712][ T6492] [ 80.639714][ T6492] BUG: Bad page state in process syz.1.132 pfn:28bed [ 80.641486][ T6492] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2 pfn:0x28bed [ 80.643945][ T6492] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 80.645870][ T6492] raw: 00fff00000000000 dead000000000040 ffff88804c173000 0000000000000000 [ 80.648209][ T6492] raw: 0000000000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 80.650496][ T6492] page dumped because: page_pool leak [ 80.651833][ T6492] page_owner tracks the page as allocated [ 80.653301][ T6492] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6492, tgid 6486 (syz.1.132), ts 70655348707, free_ts 70609759582 [ 80.658318][ T6492] post_alloc_hook+0x2d1/0x350 [ 80.659577][ T6492] get_page_from_freelist+0x101e/0x3070 [ 80.661046][ T6492] __alloc_pages_noprof+0x223/0x25a0 [ 80.662474][ T6492] alloc_pages_bulk_noprof+0x77c/0x1110 [ 80.663967][ T6492] __page_pool_alloc_pages_slow+0x18f/0x770 [ 80.665583][ T6492] page_pool_alloc_netmem+0xc4/0x160 [ 80.667011][ T6492] page_pool_alloc_pages+0x1a/0x60 [ 80.668348][ T6492] xdp_test_run_batch.constprop.0+0x3a8/0x1960 VM DIAGNOSIS: 20:27:25 Registers: info registers vcpu 0 CPU#0 RAX=0000000100000000 RBX=fffff520006aaf3f RCX=0000000000000000 RDX=ffff8880261a0000 RSI=ffffc90003557a18 RDI=ffffffff817947b0 RBP=0000000000000cc0 RSP=ffffc900035579f8 R8 =0000000000000000 R9 =0000000000000000 R10=ffff88804dbda8c0 R11=0000000000000000 R12=0000000000000001 R13=0000000000000cc0 R14=00000000000007c0 R15=0000000000000001 RIP=ffffffff81794a60 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555585980500 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000000000000 CR3=000000002eb3e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004020040 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3200000000000000 00000000000080fe ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0424df21a0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0424df2198 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0424df21cb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0424df21d8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0424df21d2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0424df21e6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0424df226c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0424df234a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c255b2064252300 6e6170776f6c0030 6e6170776f6c0034 35313230386c6e00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 49005b0541000600 4b4455524a490015 4b4455524a490011 101417151d494b00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000002 RBX=0000000000000002 RCX=0000000000000007 RDX=0000000000000000 RSI=0000000000000000 RDI=0000000000000004 RBP=0000000000000001 RSP=ffffc900009d78d0 R8 =ffff88801bb50ae0 R9 =fffffbfff2dc55a7 R10=ffffffff96e2ad3f R11=0000000000000000 R12=0000000000000000 R13=ffff88801bb50b30 R14=0000000000000004 R15=ffff88801bb50000 RIP=ffffffff816a6141 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fede41fc440 CR3=0000000031b88000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000003000000 Opmask01=0000000003000007 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe83078600 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fca019f21cb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fca019f21d8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fca019f21d2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fca019f21e6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fca019f226c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fca019f234a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000d01 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000032e5ea ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000d01 0000000000000000 0000000000000000 000000000032e5ea ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=0000000000000201 RCX=1ffffffff20bf073 RDX=0000000000000000 RSI=0000000000000201 RDI=ffffffff895fe41f RBP=ffffffff895fe41f RSP=ffffc900038d76b8 R8 =0000000000000000 R9 =fffff52000d22e09 R10=ffffc9000691704b R11=0000000000000000 R12=00000000000014cc R13=1ffff9200071aee3 R14=0000000000000001 R15=ffffc90006917000 RIP=ffffffff81507630 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f475b02a6c0 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f3614ed2440 CR3=0000000033bce000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000084000 Opmask01=0000000000000001 Opmask02=00000000ffff3f01 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdd7adda60 0000003000000008 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdd7adda60 0000003000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c5f5f0045544156 4952505f4342494c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000042494c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6362696c5f5f0045 5441564952505f43 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3261396131623234 65672d3530303030 2d72656c6c616b7a 79732d3563722d30 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 20726f20656c6966 2068637573206f4e ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0079726f74636572 696420726f20656c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff850b46e5 RDI=ffffffff9aae7bc0 RBP=ffffffff9aae7b80 RSP=ffffc90003836990 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000030 R14=ffffffff850b4680 R15=0000000000000000 RIP=ffffffff850b470f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f475b0096c0 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000000000000 CR3=0000000033bce000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f475a1f21cb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f475a1f21d8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f475a1f21d2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f475a1f21e6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f475a1f226c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f475a1f234a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f475a30c488 00007f475a30c480 00007f475a30c478 00007f475a30c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f475ae6d100 00007f475a30c440 00007f475a30c458 00007f475a30c4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f475a30c498 00007f475a30c490 00007f475a30c488 00007f475a30c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000