[ 38.261696][ T39] audit: type=1400 audit(1730230150.997:81): avc: denied { rlimitinh } for pid=5916 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.266778][ T39] audit: type=1400 audit(1730230150.997:82): avc: denied { siginh } for pid=5916 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 81.370196][ T829] cfg80211: failed to load regulatory.db [ 109.000158][ T39] audit: type=1400 audit(1730230221.757:83): avc: denied { read } for pid=5339 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 109.007156][ T39] audit: type=1400 audit(1730230221.757:84): avc: denied { append } for pid=5339 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 109.014601][ T39] audit: type=1400 audit(1730230221.757:85): avc: denied { open } for pid=5339 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 109.021667][ T39] audit: type=1400 audit(1730230221.757:86): avc: denied { getattr } for pid=5339 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:52342' (ED25519) to the list of known hosts. [ 111.201960][ T39] audit: type=1400 audit(1730230223.957:87): avc: denied { execute } for pid=5954 comm="sh" name="syz-execprog" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 111.209335][ T39] audit: type=1400 audit(1730230223.957:88): avc: denied { execute_no_trans } for pid=5954 comm="sh" path="/syz-execprog" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 111.654584][ T39] audit: type=1400 audit(1730230224.407:89): avc: denied { write } for pid=5954 comm="syz-execprog" path="pipe:[1864]" dev="pipefs" ino=1864 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 2024/10/29 19:30:24 ignoring optional flag "sandboxArg"="0" 2024/10/29 19:30:24 parsed 1 programs [ 112.058807][ T39] audit: type=1400 audit(1730230224.807:90): avc: denied { node_bind } for pid=5954 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 114.028054][ T39] audit: type=1400 audit(1730230226.777:91): avc: denied { mounton } for pid=5961 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1927 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 114.030918][ T5961] cgroup: Unknown subsys name 'net' [ 114.034452][ T39] audit: type=1400 audit(1730230226.787:92): avc: denied { mount } for pid=5961 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 114.041629][ T39] audit: type=1400 audit(1730230226.787:93): avc: denied { unmount } for pid=5961 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 114.252563][ T5961] cgroup: Unknown subsys name 'cpuset' [ 114.256233][ T5961] cgroup: Unknown subsys name 'rlimit' [ 114.424303][ T39] audit: type=1400 audit(1730230227.177:94): avc: denied { setattr } for pid=5961 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 114.435086][ T39] audit: type=1400 audit(1730230227.177:95): avc: denied { create } for pid=5961 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 114.443506][ T39] audit: type=1400 audit(1730230227.177:96): avc: denied { write } for pid=5961 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 114.451675][ T39] audit: type=1400 audit(1730230227.177:97): avc: denied { read } for pid=5961 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 114.457622][ T39] audit: type=1400 audit(1730230227.187:98): avc: denied { read } for pid=5657 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 114.463372][ T39] audit: type=1400 audit(1730230227.187:99): avc: denied { mounton } for pid=5961 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 114.469972][ T39] audit: type=1400 audit(1730230227.187:100): avc: denied { mount } for pid=5961 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 114.474114][ T5967] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 115.090737][ T5961] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 116.784979][ T5975] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 116.816440][ T5973] chnl_net:caif_netlink_parms(): no params data found [ 116.887397][ T5993] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 116.894674][ T5993] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 116.898052][ T5993] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 116.901190][ T5993] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 116.904372][ T5993] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 116.908204][ T5993] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 116.941282][ T5973] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.943722][ T5973] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.945746][ T5973] bridge_slave_0: entered allmulticast mode [ 116.948280][ T5973] bridge_slave_0: entered promiscuous mode [ 116.969458][ T5973] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.971317][ T5973] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.973099][ T5973] bridge_slave_1: entered allmulticast mode [ 116.975292][ T5973] bridge_slave_1: entered promiscuous mode [ 117.009552][ T5973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.015535][ T5973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.060961][ T5973] team0: Port device team_slave_0 added [ 117.063936][ T5973] team0: Port device team_slave_1 added [ 117.105677][ T5973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.107906][ T5973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.115432][ T5973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.120764][ T5973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.122546][ T5973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.130136][ T5973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.173648][ T5973] hsr_slave_0: entered promiscuous mode [ 117.175961][ T5973] hsr_slave_1: entered promiscuous mode [ 117.582799][ T5973] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 117.594662][ T5973] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 117.602658][ T5973] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 117.624804][ T5973] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 117.641786][ T5973] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.643879][ T5973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.646741][ T5973] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.649237][ T5973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.679238][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.681975][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.690833][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.695159][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.719499][ T5973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.722434][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.725381][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.739356][ T5973] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.750559][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.752730][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.758086][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.760243][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.897527][ T5973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.938469][ T5973] veth0_vlan: entered promiscuous mode [ 117.954147][ T5973] veth1_vlan: entered promiscuous mode [ 117.985428][ T5973] veth0_macvtap: entered promiscuous mode [ 117.991163][ T5973] veth1_macvtap: entered promiscuous mode [ 118.003992][ T5973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.011824][ T5973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.017689][ T5973] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.022339][ T5973] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.025833][ T5973] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.029003][ T5973] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2024/10/29 19:30:30 executed programs: 0 [ 118.105121][ T5973] syz-executor (5973) used greatest stack depth: 20480 bytes left [ 118.118307][ T5993] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 118.122142][ T5993] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 118.125450][ T5993] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 118.129788][ T5993] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 118.132357][ T5993] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 118.134620][ T5993] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 118.143053][ T67] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 118.146479][ T67] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 118.148830][ T67] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 118.152090][ T67] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 118.154676][ T67] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 118.160682][ T5294] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 118.163390][ T5993] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 118.172005][ T5993] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 118.176935][ T5993] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 118.178042][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.197422][ T5294] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 118.211003][ T5294] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 118.214071][ T5294] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 118.216654][ T5294] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 118.220339][ T6064] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 118.220977][ T5294] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 118.224467][ T5294] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 118.226419][ T6064] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 118.226541][ T5294] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 118.270685][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.352929][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.381164][ T6051] chnl_net:caif_netlink_parms(): no params data found [ 118.431758][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.479554][ T6054] chnl_net:caif_netlink_parms(): no params data found [ 118.535406][ T6051] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.537592][ T6051] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.540820][ T6051] bridge_slave_0: entered allmulticast mode [ 118.542819][ T6051] bridge_slave_0: entered promiscuous mode [ 118.548471][ T6051] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.550849][ T6051] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.552657][ T6051] bridge_slave_1: entered allmulticast mode [ 118.554595][ T6051] bridge_slave_1: entered promiscuous mode [ 118.586759][ T6060] chnl_net:caif_netlink_parms(): no params data found [ 118.648158][ T6062] chnl_net:caif_netlink_parms(): no params data found [ 118.653948][ T6051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.656758][ T6054] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.659680][ T6054] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.661954][ T6054] bridge_slave_0: entered allmulticast mode [ 118.664396][ T6054] bridge_slave_0: entered promiscuous mode [ 118.667489][ T6054] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.671891][ T6054] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.673907][ T6054] bridge_slave_1: entered allmulticast mode [ 118.676882][ T6054] bridge_slave_1: entered promiscuous mode [ 118.691073][ T6051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.743803][ T6051] team0: Port device team_slave_0 added [ 118.764842][ T6054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.778777][ T6060] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.781447][ T6060] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.784326][ T6060] bridge_slave_0: entered allmulticast mode [ 118.787366][ T6060] bridge_slave_0: entered promiscuous mode [ 118.821185][ T6051] team0: Port device team_slave_1 added [ 118.850435][ T6054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.854530][ T6060] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.857155][ T6060] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.860406][ T6060] bridge_slave_1: entered allmulticast mode [ 118.866200][ T6060] bridge_slave_1: entered promiscuous mode [ 118.897724][ T6051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.901351][ T6051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.908413][ T6051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.941902][ T6062] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.943953][ T6062] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.945926][ T6062] bridge_slave_0: entered allmulticast mode [ 118.948078][ T6062] bridge_slave_0: entered promiscuous mode [ 118.952545][ T6062] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.955949][ T6062] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.959151][ T6062] bridge_slave_1: entered allmulticast mode [ 118.962304][ T6062] bridge_slave_1: entered promiscuous mode [ 118.965939][ T6051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.967796][ T6051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.978197][ T6051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.037882][ T6062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.044611][ T6054] team0: Port device team_slave_0 added [ 119.048620][ T6054] team0: Port device team_slave_1 added [ 119.053298][ T6060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.080640][ T6062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.109297][ T6060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.114489][ T6051] hsr_slave_0: entered promiscuous mode [ 119.117378][ T6051] hsr_slave_1: entered promiscuous mode [ 119.119997][ T6051] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 119.123237][ T6051] Cannot create hsr debugfs directory [ 119.136776][ T6054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.139122][ T6054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.146677][ T6054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.183074][ T6054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.184948][ T6054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.192026][ T6054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.222971][ T6060] team0: Port device team_slave_0 added [ 119.243165][ T6062] team0: Port device team_slave_0 added [ 119.248119][ T6062] team0: Port device team_slave_1 added [ 119.251775][ T6060] team0: Port device team_slave_1 added [ 119.276217][ T6060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.278181][ T6060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.285269][ T6060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.335521][ T6060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.337694][ T6060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.346192][ T6060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.361283][ T6062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.363331][ T6062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.371089][ T6062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.376475][ T6062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.378952][ T6062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.386000][ T6062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.432284][ T6060] hsr_slave_0: entered promiscuous mode [ 119.434141][ T6060] hsr_slave_1: entered promiscuous mode [ 119.435756][ T6060] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 119.437641][ T6060] Cannot create hsr debugfs directory [ 119.441038][ T6054] hsr_slave_0: entered promiscuous mode [ 119.443121][ T6054] hsr_slave_1: entered promiscuous mode [ 119.444999][ T6054] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 119.447128][ T6054] Cannot create hsr debugfs directory [ 119.477144][ T6062] hsr_slave_0: entered promiscuous mode [ 119.480079][ T6062] hsr_slave_1: entered promiscuous mode [ 119.482844][ T6062] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 119.484901][ T6062] Cannot create hsr debugfs directory [ 120.170065][ T5993] Bluetooth: hci0: command tx timeout [ 120.249100][ T5993] Bluetooth: hci2: command tx timeout [ 120.252711][ T6057] Bluetooth: hci1: command tx timeout [ 120.259756][ T6057] Bluetooth: hci3: command tx timeout [ 121.511026][ T12] bridge_slave_1: left allmulticast mode [ 121.513788][ T12] bridge_slave_1: left promiscuous mode [ 121.517805][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.526363][ T12] bridge_slave_0: left allmulticast mode [ 121.528625][ T12] bridge_slave_0: left promiscuous mode [ 121.532017][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.819341][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.827149][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.830752][ T12] bond0 (unregistering): Released all slaves [ 121.855611][ T39] kauditd_printk_skb: 37 callbacks suppressed [ 121.855626][ T39] audit: type=1400 audit(1730230234.607:138): avc: denied { search } for pid=5657 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.898497][ T39] audit: type=1400 audit(1730230234.647:139): avc: denied { read } for pid=6095 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.905949][ T39] audit: type=1400 audit(1730230234.647:140): avc: denied { open } for pid=6095 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.914712][ T39] audit: type=1400 audit(1730230234.647:141): avc: denied { getattr } for pid=6095 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.924780][ T39] audit: type=1400 audit(1730230234.657:142): avc: denied { write } for pid=6094 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1767 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.934136][ T39] audit: type=1400 audit(1730230234.657:143): avc: denied { add_name } for pid=6094 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.946286][ T12] hsr_slave_0: left promiscuous mode [ 121.948212][ T12] hsr_slave_1: left promiscuous mode [ 121.949200][ T39] audit: type=1400 audit(1730230234.697:144): avc: denied { remove_name } for pid=6097 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=1949 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.958271][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.960407][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.963136][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.965411][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.977523][ T12] veth1_macvtap: left promiscuous mode [ 121.979343][ T12] veth0_macvtap: left promiscuous mode [ 121.980766][ T12] veth1_vlan: left promiscuous mode [ 121.982141][ T12] veth0_vlan: left promiscuous mode [ 122.248909][ T6057] Bluetooth: hci0: command tx timeout [ 122.330106][ T6057] Bluetooth: hci3: command tx timeout [ 122.330145][ T6064] Bluetooth: hci1: command tx timeout [ 122.330581][ T5993] Bluetooth: hci2: command tx timeout [ 122.433174][ T12] team0 (unregistering): Port device team_slave_1 removed [ 122.483807][ T12] team0 (unregistering): Port device team_slave_0 removed [ 123.301134][ T6051] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 123.306151][ T6051] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 123.315190][ T6051] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 123.318801][ T6051] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 123.349889][ T6060] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 123.354309][ T6060] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 123.358615][ T6060] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 123.367875][ T6060] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 123.399701][ T6054] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 123.405910][ T6054] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 123.409438][ T6054] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 123.413763][ T6054] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 123.454582][ T6051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.457182][ T6062] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 123.461466][ T6062] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 123.468733][ T6062] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 123.472170][ T6062] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 123.483809][ T6051] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.491276][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.493818][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.505443][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.507390][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.582260][ T6060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.607353][ T6054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.613580][ T6060] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.626333][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.628221][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.649300][ T6054] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.652896][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.655207][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.666295][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.668224][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.689532][ T6062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.699569][ T92] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.702336][ T92] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.737110][ T6051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.746976][ T6062] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.757790][ T6054] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 123.762527][ T6054] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 123.797116][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.799082][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.810692][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.813357][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.857389][ T6051] veth0_vlan: entered promiscuous mode [ 123.868452][ T6060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.872989][ T6051] veth1_vlan: entered promiscuous mode [ 123.891508][ T6051] veth0_macvtap: entered promiscuous mode [ 123.897731][ T6054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.910322][ T6051] veth1_macvtap: entered promiscuous mode [ 123.927642][ T6051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.935906][ T6060] veth0_vlan: entered promiscuous mode [ 123.945101][ T6051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.947705][ T6060] veth1_vlan: entered promiscuous mode [ 123.961072][ T6054] veth0_vlan: entered promiscuous mode [ 123.965179][ T6051] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.967527][ T6051] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.970205][ T6051] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.972568][ T6051] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.990390][ T6054] veth1_vlan: entered promiscuous mode [ 124.000575][ T6060] veth0_macvtap: entered promiscuous mode [ 124.010871][ T6062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.021115][ T6060] veth1_macvtap: entered promiscuous mode [ 124.028514][ T6054] veth0_macvtap: entered promiscuous mode [ 124.041606][ T6054] veth1_macvtap: entered promiscuous mode [ 124.045527][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.047599][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.064353][ T92] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.064979][ T6060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.066413][ T92] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.069529][ T6060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.075066][ T6060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.083606][ T6060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.086434][ T6060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.090799][ T6060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.094309][ T6062] veth0_vlan: entered promiscuous mode [ 124.098714][ T6062] veth1_vlan: entered promiscuous mode [ 124.102130][ T6054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.105338][ T6054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.108062][ T6054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.111599][ T6054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 2024/10/29 19:30:36 executed programs: 8 [ 124.116084][ T6054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.118567][ T6060] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.120846][ T39] audit: type=1400 audit(1730230236.877:145): avc: denied { create } for pid=6145 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 124.121439][ T6060] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.126348][ T39] audit: type=1400 audit(1730230236.877:146): avc: denied { create } for pid=6145 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 124.128936][ T6060] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.135311][ T39] audit: type=1400 audit(1730230236.877:147): avc: denied { setopt } for pid=6145 comm="syz.0.15" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 124.136632][ T6060] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.154516][ T6054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.157374][ T6054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.161394][ T6054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.164199][ T6054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.168327][ T6054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.221513][ T6054] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.224606][ T6054] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.228064][ T6054] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.230965][ T6054] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.258343][ T6062] veth0_macvtap: entered promiscuous mode [ 124.262400][ T6062] veth1_macvtap: entered promiscuous mode [ 124.275855][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.278347][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.287370][ T6062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.291368][ T6062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.294438][ T6062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.297495][ T6062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.301904][ T6062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.305371][ T6062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.309422][ T6062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.318809][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.321594][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.326240][ T6062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.330166][ T6062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.333785][ T6062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.337120][ T6062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.338864][ T6064] Bluetooth: hci0: command tx timeout [ 124.340847][ T6062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.345235][ T6062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.349867][ T6062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.364928][ T92] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.366984][ T92] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.368625][ T6062] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.372393][ T6062] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.375028][ T6062] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.377535][ T6062] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.395733][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.399448][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.408905][ T6064] Bluetooth: hci2: command tx timeout [ 124.409494][ T6057] Bluetooth: hci3: command tx timeout [ 124.410411][ T5993] Bluetooth: hci1: command tx timeout [ 124.463321][ T92] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.465218][ T92] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.484266][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.486525][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.409149][ T6064] Bluetooth: hci0: command tx timeout [ 126.488986][ T6064] Bluetooth: hci2: command tx timeout [ 126.491187][ T6064] Bluetooth: hci1: command tx timeout [ 126.499827][ T5993] Bluetooth: hci3: command tx timeout [ 127.139061][ T6305] BUG: Bad page state in process syz.1.66 pfn:29368 [ 127.141672][ T6305] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29368 [ 127.147159][ T6305] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 127.149888][ T6305] raw: 00fff00000000000 dead000000000040 ffff88804cdea000 0000000000000000 [ 127.153056][ T6305] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 127.155843][ T6305] page dumped because: page_pool leak [ 127.157787][ T6305] page_owner tracks the page as allocated [ 127.160100][ T6305] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6305, tgid 6299 (syz.1.66), ts 127123879345, free_ts 126833605133 [ 127.166506][ T6305] post_alloc_hook+0x2d1/0x350 [ 127.168376][ T6305] get_page_from_freelist+0x101e/0x3070 [ 127.170539][ T6305] __alloc_pages_noprof+0x223/0x25a0 [ 127.172457][ T6305] alloc_pages_bulk_noprof+0x77c/0x1110 [ 127.174628][ T6305] __page_pool_alloc_pages_slow+0x18f/0x770 [ 127.176746][ T6305] page_pool_alloc_netmem+0xc4/0x160 [ 127.178383][ T6305] page_pool_alloc_pages+0x1a/0x60 [ 127.179920][ T6305] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 127.182268][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 127.184341][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 127.186471][ T6305] __sys_bpf+0xfc6/0x49a0 [ 127.188061][ T6305] __x64_sys_bpf+0x78/0xc0 [ 127.189810][ T6305] do_syscall_64+0xcd/0x250 [ 127.191238][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.192813][ T6305] page last free pid 6281 tgid 6279 stack trace: [ 127.194684][ T6305] free_unref_page+0x5f4/0xdc0 [ 127.195982][ T6305] __folio_put+0x30d/0x3d0 [ 127.197217][ T6305] put_page+0x21e/0x280 [ 127.198457][ T6305] page_pool_return_page+0x400/0x520 [ 127.200172][ T6305] page_pool_release+0xf4/0x7d0 [ 127.201566][ T6305] page_pool_destroy+0x10a/0x4c0 [ 127.203061][ T6305] bpf_test_run_xdp_live+0x3a1/0x500 [ 127.205183][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 127.207369][ T6305] __sys_bpf+0xfc6/0x49a0 [ 127.209092][ T6305] __x64_sys_bpf+0x78/0xc0 [ 127.210726][ T6305] do_syscall_64+0xcd/0x250 [ 127.212398][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.214560][ T6305] Modules linked in: [ 127.215720][ T6305] CPU: 3 UID: 0 PID: 6305 Comm: syz.1.66 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 127.219517][ T6305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 127.222640][ T6305] Call Trace: [ 127.223604][ T6305] [ 127.224385][ T6305] dump_stack_lvl+0x16c/0x1f0 [ 127.225812][ T6305] bad_page+0xb3/0x1f0 [ 127.227122][ T6305] ? __pfx_bad_page+0x10/0x10 [ 127.228833][ T6305] ? page_bad_reason+0x9d/0x1e0 [ 127.230676][ T6305] free_unref_page+0x657/0xdc0 [ 127.232276][ T6305] ? rcu_is_watching+0x12/0xc0 [ 127.233818][ T6305] ? __phys_addr+0xc6/0x150 [ 127.235304][ T6305] skb_free_head+0xa0/0x1d0 [ 127.236903][ T6305] skb_release_data+0x560/0x730 [ 127.239019][ T6305] sk_skb_reason_drop+0x129/0x1a0 [ 127.241036][ T6305] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 127.243475][ T6305] ? kernel_text_address+0x8d/0x100 [ 127.245346][ T6305] ? hlock_class+0x4e/0x130 [ 127.246996][ T6305] ? __lock_acquire+0x163e/0x3ce0 [ 127.248749][ T6305] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 127.251219][ T6305] ? hlock_class+0x4e/0x130 [ 127.252580][ T6305] ? __lock_acquire+0xbdd/0x3ce0 [ 127.253871][ T6305] ? __pfx___lock_acquire+0x10/0x10 [ 127.255261][ T6305] __netif_receive_skb_list_core+0x357/0x950 [ 127.256804][ T6305] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 127.258500][ T6305] ? trace_lock_acquire+0x14a/0x1d0 [ 127.259878][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 127.261547][ T6305] ? lock_acquire+0x2f/0xb0 [ 127.262764][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 127.264410][ T6305] netif_receive_skb_list_internal+0x753/0xdb0 [ 127.266033][ T6305] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 127.267757][ T6305] ? __pfx_eth_type_trans+0x10/0x10 [ 127.269104][ T6305] ? __build_skb_around+0x278/0x3b0 [ 127.270603][ T6305] netif_receive_skb_list+0x4f/0x4a0 [ 127.272034][ T6305] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 127.273642][ T6305] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 127.275343][ T6305] ? bpf_test_timer_continue+0x150/0x3d0 [ 127.276778][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 127.278177][ T6305] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 127.279729][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 127.281306][ T6305] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 127.282967][ T6305] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 127.284481][ T6305] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 127.286034][ T6305] ? 0xffffffffa00045c0 [ 127.287174][ T6305] ? 0xffffffffa00045c0 [ 127.288362][ T6305] ? 0xffffffffa00045c0 [ 127.289495][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 127.291128][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 127.292598][ T6305] ? lock_acquire+0x2f/0xb0 [ 127.293800][ T6305] ? __fget_files+0x40/0x3f0 [ 127.295070][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 127.297008][ T6305] ? fput+0x30/0x390 [ 127.298273][ T6305] ? __bpf_prog_get+0xa0/0x290 [ 127.299778][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 127.302472][ T6305] __sys_bpf+0xfc6/0x49a0 [ 127.304016][ T6305] ? __pfx___sys_bpf+0x10/0x10 [ 127.305668][ T6305] ? __schedule+0xe5d/0x5730 [ 127.307429][ T6305] ? __fget_files+0x23a/0x3f0 [ 127.309100][ T6305] ? do_futex+0x123/0x350 [ 127.310625][ T6305] ? __pfx_do_futex+0x10/0x10 [ 127.312316][ T6305] ? xfd_validate_state+0x5d/0x180 [ 127.314706][ T6305] ? rcu_is_watching+0x12/0xc0 [ 127.316607][ T6305] __x64_sys_bpf+0x78/0xc0 [ 127.318228][ T6305] ? lockdep_hardirqs_on+0x7c/0x110 [ 127.320077][ T6305] do_syscall_64+0xcd/0x250 [ 127.321717][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.323879][ T6305] RIP: 0033:0x7fd45b57e719 [ 127.325607][ T6305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.332914][ T6305] RSP: 002b:00007fd45c319038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 127.335288][ T6305] RAX: ffffffffffffffda RBX: 00007fd45b736058 RCX: 00007fd45b57e719 [ 127.337669][ T6305] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 127.339777][ T6305] RBP: 00007fd45b5f132e R08: 0000000000000000 R09: 0000000000000000 [ 127.342000][ T6305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.344269][ T6305] R13: 0000000000000000 R14: 00007fd45b736058 R15: 00007ffd2e0c9fc8 [ 127.346360][ T6305] [ 127.347274][ T6305] Disabling lock debugging due to kernel taint [ 127.348952][ T6305] BUG: Bad page state in process syz.1.66 pfn:3108f [ 127.350703][ T6305] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803108fc98 pfn:0x3108f [ 127.353412][ T6305] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 127.355395][ T6305] raw: 00fff00000000000 dead000000000040 ffff88804cdea000 0000000000000000 [ 127.357704][ T6305] raw: ffff88803108fc98 0000000000000001 00000000ffffffff 0000000000000000 [ 127.360084][ T6305] page dumped because: page_pool leak [ 127.361597][ T6305] page_owner tracks the page as allocated [ 127.363514][ T6305] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6305, tgid 6299 (syz.1.66), ts 127123874685, free_ts 126833608969 [ 127.368311][ T6305] post_alloc_hook+0x2d1/0x350 [ 127.369676][ T6305] get_page_from_freelist+0x101e/0x3070 [ 127.371410][ T6305] __alloc_pages_noprof+0x223/0x25a0 [ 127.372891][ T6305] alloc_pages_bulk_noprof+0x77c/0x1110 [ 127.374821][ T6305] __page_pool_alloc_pages_slow+0x18f/0x770 [ 127.376843][ T6305] page_pool_alloc_netmem+0xc4/0x160 [ 127.378607][ T6305] page_pool_alloc_pages+0x1a/0x60 [ 127.380209][ T6305] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 127.382046][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 127.383648][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 127.385179][ T6305] __sys_bpf+0xfc6/0x49a0 [ 127.386405][ T6305] __x64_sys_bpf+0x78/0xc0 [ 127.387635][ T6305] do_syscall_64+0xcd/0x250 [ 127.388868][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.390428][ T6305] page last free pid 6281 tgid 6279 stack trace: [ 127.392102][ T6305] free_unref_page+0x5f4/0xdc0 [ 127.393496][ T6305] __folio_put+0x30d/0x3d0 [ 127.394724][ T6305] put_page+0x21e/0x280 [ 127.395882][ T6305] page_pool_return_page+0x400/0x520 [ 127.397305][ T6305] page_pool_release+0xf4/0x7d0 [ 127.398722][ T6305] page_pool_destroy+0x10a/0x4c0 [ 127.400133][ T6305] bpf_test_run_xdp_live+0x3a1/0x500 [ 127.401573][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 127.403114][ T6305] __sys_bpf+0xfc6/0x49a0 [ 127.404369][ T6305] __x64_sys_bpf+0x78/0xc0 [ 127.405783][ T6305] do_syscall_64+0xcd/0x250 [ 127.407149][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.408789][ T6305] Modules linked in: [ 127.409812][ T6305] CPU: 3 UID: 0 PID: 6305 Comm: syz.1.66 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 127.412910][ T6305] Tainted: [B]=BAD_PAGE [ 127.414003][ T6305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 127.416777][ T6305] Call Trace: [ 127.417653][ T6305] [ 127.418437][ T6305] dump_stack_lvl+0x16c/0x1f0 [ 127.419680][ T6305] bad_page+0xb3/0x1f0 [ 127.420740][ T6305] ? __pfx_bad_page+0x10/0x10 [ 127.421896][ T6305] ? page_bad_reason+0x9d/0x1e0 [ 127.423202][ T6305] free_unref_page+0x657/0xdc0 [ 127.424454][ T6305] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 127.426048][ T6305] ? __phys_addr+0xc6/0x150 [ 127.427259][ T6305] skb_free_head+0xa0/0x1d0 [ 127.428563][ T6305] skb_release_data+0x560/0x730 [ 127.429990][ T6305] sk_skb_reason_drop+0x129/0x1a0 [ 127.431532][ T6305] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 127.433658][ T6305] ? kernel_text_address+0x8d/0x100 [ 127.435150][ T6305] ? hlock_class+0x4e/0x130 [ 127.436744][ T6305] ? __lock_acquire+0x163e/0x3ce0 [ 127.438352][ T6305] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 127.440234][ T6305] ? hlock_class+0x4e/0x130 [ 127.441665][ T6305] ? __lock_acquire+0xbdd/0x3ce0 [ 127.443169][ T6305] ? __pfx___lock_acquire+0x10/0x10 [ 127.444538][ T6305] __netif_receive_skb_list_core+0x357/0x950 [ 127.446156][ T6305] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 127.448122][ T6305] ? trace_lock_acquire+0x14a/0x1d0 [ 127.449550][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 127.451340][ T6305] ? lock_acquire+0x2f/0xb0 [ 127.452633][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 127.454595][ T6305] netif_receive_skb_list_internal+0x753/0xdb0 [ 127.456246][ T6305] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 127.457943][ T6305] ? __pfx_eth_type_trans+0x10/0x10 [ 127.459503][ T6305] ? __build_skb_around+0x278/0x3b0 [ 127.461065][ T6305] netif_receive_skb_list+0x4f/0x4a0 [ 127.462971][ T6305] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 127.464864][ T6305] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 127.467055][ T6305] ? bpf_test_timer_continue+0x150/0x3d0 [ 127.468660][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 127.470228][ T6305] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 127.471986][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 127.473999][ T6305] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 127.475707][ T6305] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 127.477325][ T6305] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 127.478964][ T6305] ? 0xffffffffa00045c0 [ 127.480194][ T6305] ? 0xffffffffa00045c0 [ 127.481585][ T6305] ? 0xffffffffa00045c0 [ 127.483283][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 127.484849][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 127.486367][ T6305] ? lock_acquire+0x2f/0xb0 [ 127.487559][ T6305] ? __fget_files+0x40/0x3f0 [ 127.488795][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 127.490391][ T6305] ? fput+0x30/0x390 [ 127.491544][ T6305] ? __bpf_prog_get+0xa0/0x290 [ 127.492942][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 127.494653][ T6305] __sys_bpf+0xfc6/0x49a0 [ 127.495932][ T6305] ? __pfx___sys_bpf+0x10/0x10 [ 127.497470][ T6305] ? __schedule+0xe5d/0x5730 [ 127.499317][ T6305] ? __fget_files+0x23a/0x3f0 [ 127.500690][ T6305] ? do_futex+0x123/0x350 [ 127.501832][ T6305] ? __pfx_do_futex+0x10/0x10 [ 127.503082][ T6305] ? xfd_validate_state+0x5d/0x180 [ 127.504417][ T6305] ? rcu_is_watching+0x12/0xc0 [ 127.505679][ T6305] __x64_sys_bpf+0x78/0xc0 [ 127.506908][ T6305] ? lockdep_hardirqs_on+0x7c/0x110 [ 127.508267][ T6305] do_syscall_64+0xcd/0x250 [ 127.509462][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.511027][ T6305] RIP: 0033:0x7fd45b57e719 [ 127.512201][ T6305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.517226][ T6305] RSP: 002b:00007fd45c319038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 127.519651][ T6305] RAX: ffffffffffffffda RBX: 00007fd45b736058 RCX: 00007fd45b57e719 [ 127.521959][ T6305] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 127.524240][ T6305] RBP: 00007fd45b5f132e R08: 0000000000000000 R09: 0000000000000000 [ 127.526697][ T6305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.528928][ T6305] R13: 0000000000000000 R14: 00007fd45b736058 R15: 00007ffd2e0c9fc8 [ 127.531236][ T6305] [ 127.532260][ T6305] BUG: Bad page state in process syz.1.66 pfn:2968b [ 127.534490][ T6305] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802968b000 pfn:0x2968b [ 127.537262][ T6305] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 127.539331][ T6305] raw: 00fff00000000000 dead000000000040 ffff88804cdea000 0000000000000000 [ 127.541675][ T6305] raw: ffff88802968b000 0000000000000001 00000000ffffffff 0000000000000000 [ 127.543962][ T6305] page dumped because: page_pool leak [ 127.545346][ T6305] page_owner tracks the page as allocated [ 127.546860][ T6305] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6305, tgid 6299 (syz.1.66), ts 127123870314, free_ts 126833612599 [ 127.551524][ T6305] post_alloc_hook+0x2d1/0x350 [ 127.553036][ T6305] get_page_from_freelist+0x101e/0x3070 [ 127.554768][ T6305] __alloc_pages_noprof+0x223/0x25a0 [ 127.556616][ T6305] alloc_pages_bulk_noprof+0x77c/0x1110 [ 127.558248][ T6305] __page_pool_alloc_pages_slow+0x18f/0x770 [ 127.559891][ T6305] page_pool_alloc_netmem+0xc4/0x160 [ 127.561256][ T6305] page_pool_alloc_pages+0x1a/0x60 [ 127.562678][ T6305] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 127.564428][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 127.565800][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 127.567325][ T6305] __sys_bpf+0xfc6/0x49a0 [ 127.568468][ T6305] __x64_sys_bpf+0x78/0xc0 [ 127.569745][ T6305] do_syscall_64+0xcd/0x250 [ 127.570959][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.572516][ T6305] page last free pid 6281 tgid 6279 stack trace: [ 127.574302][ T6305] free_unref_page+0x5f4/0xdc0 [ 127.575716][ T6305] __folio_put+0x30d/0x3d0 [ 127.577347][ T6305] put_page+0x21e/0x280 [ 127.578829][ T6305] page_pool_return_page+0x400/0x520 [ 127.580356][ T6305] page_pool_release+0xf4/0x7d0 [ 127.581758][ T6305] page_pool_destroy+0x10a/0x4c0 [ 127.583196][ T6305] bpf_test_run_xdp_live+0x3a1/0x500 [ 127.584720][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 127.586162][ T6305] __sys_bpf+0xfc6/0x49a0 [ 127.587297][ T6305] __x64_sys_bpf+0x78/0xc0 [ 127.588468][ T6305] do_syscall_64+0xcd/0x250 [ 127.589706][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.591341][ T6305] Modules linked in: [ 127.592284][ T6305] CPU: 3 UID: 0 PID: 6305 Comm: syz.1.66 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 127.595315][ T6305] Tainted: [B]=BAD_PAGE [ 127.596435][ T6305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 127.599583][ T6305] Call Trace: [ 127.600938][ T6305] [ 127.601814][ T6305] dump_stack_lvl+0x16c/0x1f0 [ 127.603017][ T6305] bad_page+0xb3/0x1f0 [ 127.604158][ T6305] ? __pfx_bad_page+0x10/0x10 [ 127.605480][ T6305] ? page_bad_reason+0x9d/0x1e0 [ 127.606854][ T6305] free_unref_page+0x657/0xdc0 [ 127.608198][ T6305] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 127.610159][ T6305] ? __phys_addr+0xc6/0x150 [ 127.611526][ T6305] skb_free_head+0xa0/0x1d0 [ 127.612880][ T6305] skb_release_data+0x560/0x730 [ 127.614186][ T6305] sk_skb_reason_drop+0x129/0x1a0 [ 127.615529][ T6305] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 127.617429][ T6305] ? kernel_text_address+0x8d/0x100 [ 127.619079][ T6305] ? hlock_class+0x4e/0x130 [ 127.620534][ T6305] ? __lock_acquire+0x163e/0x3ce0 [ 127.622033][ T6305] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 127.623892][ T6305] ? hlock_class+0x4e/0x130 [ 127.625124][ T6305] ? __lock_acquire+0xbdd/0x3ce0 [ 127.626503][ T6305] ? __pfx___lock_acquire+0x10/0x10 [ 127.627927][ T6305] __netif_receive_skb_list_core+0x357/0x950 [ 127.629907][ T6305] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 127.631824][ T6305] ? trace_lock_acquire+0x14a/0x1d0 [ 127.633354][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 127.635490][ T6305] ? lock_acquire+0x2f/0xb0 [ 127.637220][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 127.639005][ T6305] netif_receive_skb_list_internal+0x753/0xdb0 [ 127.640602][ T6305] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 127.642289][ T6305] ? __pfx_eth_type_trans+0x10/0x10 [ 127.643661][ T6305] ? __build_skb_around+0x278/0x3b0 [ 127.645032][ T6305] netif_receive_skb_list+0x4f/0x4a0 [ 127.646463][ T6305] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 127.648099][ T6305] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 127.649815][ T6305] ? bpf_test_timer_continue+0x150/0x3d0 [ 127.651260][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 127.652614][ T6305] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 127.654286][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 127.655947][ T6305] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 127.657661][ T6305] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 127.659640][ T6305] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 127.661380][ T6305] ? 0xffffffffa00045c0 [ 127.662683][ T6305] ? 0xffffffffa00045c0 [ 127.663774][ T6305] ? 0xffffffffa00045c0 [ 127.664861][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 127.666430][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 127.667833][ T6305] ? lock_acquire+0x2f/0xb0 [ 127.669019][ T6305] ? __fget_files+0x40/0x3f0 [ 127.670304][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 127.671923][ T6305] ? fput+0x30/0x390 [ 127.673087][ T6305] ? __bpf_prog_get+0xa0/0x290 [ 127.674556][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 127.676247][ T6305] __sys_bpf+0xfc6/0x49a0 [ 127.677440][ T6305] ? __pfx___sys_bpf+0x10/0x10 [ 127.678770][ T6305] ? __schedule+0xe5d/0x5730 [ 127.680154][ T6305] ? __fget_files+0x23a/0x3f0 [ 127.681395][ T6305] ? do_futex+0x123/0x350 [ 127.682536][ T6305] ? __pfx_do_futex+0x10/0x10 [ 127.683759][ T6305] ? xfd_validate_state+0x5d/0x180 [ 127.685294][ T6305] ? rcu_is_watching+0x12/0xc0 [ 127.686788][ T6305] __x64_sys_bpf+0x78/0xc0 [ 127.688076][ T6305] ? lockdep_hardirqs_on+0x7c/0x110 [ 127.689495][ T6305] do_syscall_64+0xcd/0x250 [ 127.690767][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.692421][ T6305] RIP: 0033:0x7fd45b57e719 [ 127.693785][ T6305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.699357][ T6305] RSP: 002b:00007fd45c319038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 127.701455][ T6305] RAX: ffffffffffffffda RBX: 00007fd45b736058 RCX: 00007fd45b57e719 [ 127.703735][ T6305] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 127.705809][ T6305] RBP: 00007fd45b5f132e R08: 0000000000000000 R09: 0000000000000000 [ 127.707896][ T6305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.709942][ T6305] R13: 0000000000000000 R14: 00007fd45b736058 R15: 00007ffd2e0c9fc8 [ 127.712024][ T6305] [ 127.712944][ T6305] BUG: Bad page state in process syz.1.66 pfn:35ea9 [ 127.714834][ T6305] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888035ea9f00 pfn:0x35ea9 [ 127.717443][ T6305] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 127.719423][ T6305] raw: 00fff00000000000 dead000000000040 ffff88804cdea000 0000000000000000 [ 127.721695][ T6305] raw: ffff888035ea9f00 0000000000000001 00000000ffffffff 0000000000000000 [ 127.721755][ T39] kauditd_printk_skb: 4 callbacks suppressed [ 127.721775][ T39] audit: type=1400 audit(1730230240.467:152): avc: denied { rename } for pid=5339 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 127.724224][ T6305] page dumped because: page_pool leak [ 127.724236][ T6305] page_owner tracks the page as allocated [ 127.724240][ T6305] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6305, tgid 6299 (syz.1.66), ts 127123865922, free_ts 126833616569 [ 127.724259][ T6305] post_alloc_hook+0x2d1/0x350 [ 127.724276][ T6305] get_page_from_freelist+0x101e/0x3070 [ 127.726563][ T39] audit: type=1400 audit(1730230240.467:153): avc: denied { unlink } for pid=5339 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 127.732142][ T6305] __alloc_pages_noprof+0x223/0x25a0 [ 127.732165][ T6305] alloc_pages_bulk_noprof+0x77c/0x1110 [ 127.732177][ T6305] __page_pool_alloc_pages_slow+0x18f/0x770 [ 127.735540][ T39] audit: type=1400 audit(1730230240.467:154): avc: denied { create } for pid=5339 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 127.736520][ T6305] page_pool_alloc_netmem+0xc4/0x160 [ 127.763468][ T6305] page_pool_alloc_pages+0x1a/0x60 [ 127.764914][ T6305] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 127.766740][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 127.768544][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 127.770108][ T6305] __sys_bpf+0xfc6/0x49a0 [ 127.771386][ T6305] __x64_sys_bpf+0x78/0xc0 [ 127.772588][ T6305] do_syscall_64+0xcd/0x250 [ 127.773865][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.775677][ T6305] page last free pid 6281 tgid 6279 stack trace: [ 127.777748][ T6305] free_unref_page+0x5f4/0xdc0 [ 127.779424][ T6305] __folio_put+0x30d/0x3d0 [ 127.781056][ T6305] put_page+0x21e/0x280 [ 127.782839][ T6305] page_pool_return_page+0x400/0x520 [ 127.785180][ T6305] page_pool_release+0xf4/0x7d0 [ 127.787318][ T6305] page_pool_destroy+0x10a/0x4c0 [ 127.789118][ T6305] bpf_test_run_xdp_live+0x3a1/0x500 [ 127.790983][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 127.792841][ T6305] __sys_bpf+0xfc6/0x49a0 [ 127.794405][ T6305] __x64_sys_bpf+0x78/0xc0 [ 127.795935][ T6305] do_syscall_64+0xcd/0x250 [ 127.797447][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.799403][ T6305] Modules linked in: [ 127.800802][ T6305] CPU: 3 UID: 0 PID: 6305 Comm: syz.1.66 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 127.805053][ T6305] Tainted: [B]=BAD_PAGE [ 127.806524][ T6305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 127.810160][ T6305] Call Trace: [ 127.811347][ T6305] [ 127.812499][ T6305] dump_stack_lvl+0x16c/0x1f0 [ 127.814430][ T6305] bad_page+0xb3/0x1f0 [ 127.816104][ T6305] ? __pfx_bad_page+0x10/0x10 [ 127.817831][ T6305] ? page_bad_reason+0x9d/0x1e0 [ 127.820415][ T6305] free_unref_page+0x657/0xdc0 [ 127.822091][ T6305] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 127.824255][ T6305] ? __phys_addr+0xc6/0x150 [ 127.825896][ T6305] skb_free_head+0xa0/0x1d0 [ 127.827547][ T6305] skb_release_data+0x560/0x730 [ 127.829253][ T6305] sk_skb_reason_drop+0x129/0x1a0 [ 127.831014][ T6305] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 127.833234][ T6305] ? kernel_text_address+0x8d/0x100 [ 127.835331][ T6305] ? hlock_class+0x4e/0x130 [ 127.836897][ T6305] ? __lock_acquire+0x163e/0x3ce0 [ 127.838634][ T6305] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 127.841247][ T6305] ? hlock_class+0x4e/0x130 [ 127.842969][ T6305] ? __lock_acquire+0xbdd/0x3ce0 [ 127.844885][ T6305] ? __pfx___lock_acquire+0x10/0x10 [ 127.846803][ T6305] __netif_receive_skb_list_core+0x357/0x950 [ 127.848871][ T6305] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 127.850992][ T6305] ? trace_lock_acquire+0x14a/0x1d0 [ 127.852971][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 127.855601][ T6305] ? lock_acquire+0x2f/0xb0 [ 127.857011][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 127.859123][ T6305] netif_receive_skb_list_internal+0x753/0xdb0 [ 127.861349][ T6305] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 127.863990][ T6305] ? __pfx_eth_type_trans+0x10/0x10 [ 127.866202][ T6305] ? __build_skb_around+0x278/0x3b0 [ 127.868515][ T6305] netif_receive_skb_list+0x4f/0x4a0 [ 127.870387][ T6305] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 127.872549][ T6305] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 127.874782][ T6305] ? bpf_test_timer_continue+0x150/0x3d0 [ 127.876812][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 127.878608][ T6305] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 127.880893][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 127.883305][ T6305] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 127.885354][ T6305] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 127.887363][ T6305] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 127.889535][ T6305] ? 0xffffffffa00045c0 [ 127.891026][ T6305] ? 0xffffffffa00045c0 [ 127.892425][ T6305] ? 0xffffffffa00045c0 [ 127.894280][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 127.896615][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 127.898677][ T6305] ? lock_acquire+0x2f/0xb0 [ 127.900262][ T6305] ? __fget_files+0x40/0x3f0 [ 127.902034][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 127.904360][ T6305] ? fput+0x30/0x390 [ 127.905741][ T6305] ? __bpf_prog_get+0xa0/0x290 [ 127.907447][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 127.909492][ T6305] __sys_bpf+0xfc6/0x49a0 [ 127.911014][ T6305] ? __pfx___sys_bpf+0x10/0x10 [ 127.912686][ T6305] ? __schedule+0xe5d/0x5730 [ 127.914714][ T6305] ? __fget_files+0x23a/0x3f0 [ 127.916960][ T6305] ? do_futex+0x123/0x350 [ 127.918803][ T6305] ? __pfx_do_futex+0x10/0x10 [ 127.920629][ T6305] ? xfd_validate_state+0x5d/0x180 [ 127.922461][ T6305] ? rcu_is_watching+0x12/0xc0 [ 127.924167][ T6305] __x64_sys_bpf+0x78/0xc0 [ 127.925968][ T6305] ? lockdep_hardirqs_on+0x7c/0x110 [ 127.928159][ T6305] do_syscall_64+0xcd/0x250 [ 127.929832][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.931892][ T6305] RIP: 0033:0x7fd45b57e719 [ 127.933513][ T6305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.940383][ T6305] RSP: 002b:00007fd45c319038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 127.943589][ T6305] RAX: ffffffffffffffda RBX: 00007fd45b736058 RCX: 00007fd45b57e719 [ 127.946624][ T6305] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 127.950017][ T6305] RBP: 00007fd45b5f132e R08: 0000000000000000 R09: 0000000000000000 [ 127.953204][ T6305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.956359][ T6305] R13: 0000000000000000 R14: 00007fd45b736058 R15: 00007ffd2e0c9fc8 [ 127.959666][ T6305] [ 127.960877][ T6305] BUG: Bad page state in process syz.1.66 pfn:292b3 [ 127.963208][ T6305] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x292b3 [ 127.966268][ T6305] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 127.968791][ T6305] raw: 00fff00000000000 dead000000000040 ffff88804cdea000 0000000000000000 [ 127.971707][ T6305] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 127.974591][ T6305] page dumped because: page_pool leak [ 127.976479][ T6305] page_owner tracks the page as allocated [ 127.978514][ T6305] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6305, tgid 6299 (syz.1.66), ts 127123861437, free_ts 126833620356 [ 127.985171][ T6305] post_alloc_hook+0x2d1/0x350 [ 127.987004][ T6305] get_page_from_freelist+0x101e/0x3070 [ 127.988906][ T6305] __alloc_pages_noprof+0x223/0x25a0 [ 127.990750][ T6305] alloc_pages_bulk_noprof+0x77c/0x1110 [ 127.992665][ T6305] __page_pool_alloc_pages_slow+0x18f/0x770 [ 127.994912][ T6305] page_pool_alloc_netmem+0xc4/0x160 [ 127.996914][ T6305] page_pool_alloc_pages+0x1a/0x60 [ 127.999086][ T6305] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 128.001399][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 128.003239][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 128.005109][ T6305] __sys_bpf+0xfc6/0x49a0 [ 128.006643][ T6305] __x64_sys_bpf+0x78/0xc0 [ 128.008183][ T6305] do_syscall_64+0xcd/0x250 [ 128.009833][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.012171][ T6305] page last free pid 6281 tgid 6279 stack trace: [ 128.014726][ T6305] free_unref_page+0x5f4/0xdc0 [ 128.016582][ T6305] __folio_put+0x30d/0x3d0 [ 128.018475][ T6305] put_page+0x21e/0x280 [ 128.020457][ T6305] page_pool_return_page+0x400/0x520 [ 128.022539][ T6305] page_pool_release+0xf4/0x7d0 [ 128.024534][ T6305] page_pool_destroy+0x10a/0x4c0 [ 128.026619][ T6305] bpf_test_run_xdp_live+0x3a1/0x500 [ 128.028740][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 128.030690][ T6305] __sys_bpf+0xfc6/0x49a0 [ 128.032293][ T6305] __x64_sys_bpf+0x78/0xc0 [ 128.034094][ T6305] do_syscall_64+0xcd/0x250 [ 128.036058][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.038498][ T6305] Modules linked in: [ 128.040292][ T6305] CPU: 3 UID: 0 PID: 6305 Comm: syz.1.66 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 128.044566][ T6305] Tainted: [B]=BAD_PAGE [ 128.046038][ T6305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 128.049740][ T6305] Call Trace: [ 128.051025][ T6305] [ 128.052210][ T6305] dump_stack_lvl+0x16c/0x1f0 [ 128.054328][ T6305] bad_page+0xb3/0x1f0 [ 128.056059][ T6305] ? __pfx_bad_page+0x10/0x10 [ 128.057796][ T6305] ? page_bad_reason+0x9d/0x1e0 [ 128.059524][ T6305] free_unref_page+0x657/0xdc0 [ 128.061191][ T6305] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 128.063600][ T6305] ? __phys_addr+0xc6/0x150 [ 128.065211][ T6305] skb_free_head+0xa0/0x1d0 [ 128.066852][ T6305] skb_release_data+0x560/0x730 [ 128.068500][ T6305] sk_skb_reason_drop+0x129/0x1a0 [ 128.070278][ T6305] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 128.072612][ T6305] ? kernel_text_address+0x8d/0x100 [ 128.074622][ T6305] ? hlock_class+0x4e/0x130 [ 128.076640][ T6305] ? __lock_acquire+0x163e/0x3ce0 [ 128.078642][ T6305] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 128.081319][ T6305] ? hlock_class+0x4e/0x130 [ 128.082821][ T6305] ? __lock_acquire+0xbdd/0x3ce0 [ 128.084483][ T6305] ? __pfx___lock_acquire+0x10/0x10 [ 128.086260][ T6305] __netif_receive_skb_list_core+0x357/0x950 [ 128.088321][ T6305] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 128.090859][ T6305] ? trace_lock_acquire+0x14a/0x1d0 [ 128.092789][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 128.095405][ T6305] ? lock_acquire+0x2f/0xb0 [ 128.097120][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 128.099499][ T6305] netif_receive_skb_list_internal+0x753/0xdb0 [ 128.101878][ T6305] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 128.104338][ T6305] ? __pfx_eth_type_trans+0x10/0x10 [ 128.106233][ T6305] ? __build_skb_around+0x278/0x3b0 [ 128.107997][ T6305] netif_receive_skb_list+0x4f/0x4a0 [ 128.109794][ T6305] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 128.112176][ T6305] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 128.114526][ T6305] ? bpf_test_timer_continue+0x150/0x3d0 [ 128.116493][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 128.118561][ T6305] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 128.121138][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 128.124009][ T6305] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 128.126457][ T6305] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 128.128786][ T6305] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 128.130654][ T6305] ? 0xffffffffa00045c0 [ 128.132117][ T6305] ? 0xffffffffa00045c0 [ 128.133536][ T6305] ? 0xffffffffa00045c0 [ 128.134649][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 128.136348][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 128.138553][ T6305] ? lock_acquire+0x2f/0xb0 [ 128.140279][ T6305] ? __fget_files+0x40/0x3f0 [ 128.142088][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 128.144445][ T6305] ? fput+0x30/0x390 [ 128.145849][ T6305] ? __bpf_prog_get+0xa0/0x290 [ 128.147562][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 128.149611][ T6305] __sys_bpf+0xfc6/0x49a0 [ 128.151152][ T6305] ? __pfx___sys_bpf+0x10/0x10 [ 128.152839][ T6305] ? __schedule+0xe5d/0x5730 [ 128.154343][ T6305] ? __fget_files+0x23a/0x3f0 [ 128.155835][ T6305] ? do_futex+0x123/0x350 [ 128.157120][ T6305] ? __pfx_do_futex+0x10/0x10 [ 128.158795][ T6305] ? xfd_validate_state+0x5d/0x180 [ 128.160564][ T6305] ? rcu_is_watching+0x12/0xc0 [ 128.162494][ T6305] __x64_sys_bpf+0x78/0xc0 [ 128.164070][ T6305] ? lockdep_hardirqs_on+0x7c/0x110 [ 128.165879][ T6305] do_syscall_64+0xcd/0x250 [ 128.167737][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.169924][ T6305] RIP: 0033:0x7fd45b57e719 [ 128.171508][ T6305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.177796][ T6305] RSP: 002b:00007fd45c319038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 128.180365][ T6305] RAX: ffffffffffffffda RBX: 00007fd45b736058 RCX: 00007fd45b57e719 [ 128.183047][ T6305] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 128.185785][ T6305] RBP: 00007fd45b5f132e R08: 0000000000000000 R09: 0000000000000000 [ 128.188422][ T6305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.191198][ T6305] R13: 0000000000000000 R14: 00007fd45b736058 R15: 00007ffd2e0c9fc8 [ 128.193782][ T6305] [ 128.194752][ T6305] BUG: Bad page state in process syz.1.66 pfn:35d49 [ 128.196878][ T6305] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888035d492d0 pfn:0x35d49 [ 128.200641][ T6305] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 128.203196][ T6305] raw: 00fff00000000000 dead000000000040 ffff88804cdea000 0000000000000000 [ 128.206183][ T6305] raw: ffff888035d492d0 0000000000000001 00000000ffffffff 0000000000000000 [ 128.209251][ T6305] page dumped because: page_pool leak [ 128.211151][ T6305] page_owner tracks the page as allocated [ 128.213121][ T6305] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6305, tgid 6299 (syz.1.66), ts 127123856734, free_ts 126833624291 [ 128.219207][ T6305] post_alloc_hook+0x2d1/0x350 [ 128.221094][ T6305] get_page_from_freelist+0x101e/0x3070 [ 128.223272][ T6305] __alloc_pages_noprof+0x223/0x25a0 [ 128.224888][ T6305] alloc_pages_bulk_noprof+0x77c/0x1110 [ 128.227079][ T6305] __page_pool_alloc_pages_slow+0x18f/0x770 [ 128.228958][ T6305] page_pool_alloc_netmem+0xc4/0x160 [ 128.230535][ T6305] page_pool_alloc_pages+0x1a/0x60 [ 128.231928][ T6305] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 128.234366][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 128.235904][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 128.237544][ T6305] __sys_bpf+0xfc6/0x49a0 [ 128.239092][ T6305] __x64_sys_bpf+0x78/0xc0 [ 128.240441][ T6305] do_syscall_64+0xcd/0x250 [ 128.241905][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.243699][ T6305] page last free pid 6281 tgid 6279 stack trace: [ 128.245557][ T6305] free_unref_page+0x5f4/0xdc0 [ 128.247286][ T6305] __folio_put+0x30d/0x3d0 [ 128.248834][ T6305] put_page+0x21e/0x280 [ 128.249944][ T6305] page_pool_return_page+0x400/0x520 [ 128.251410][ T6305] page_pool_release+0xf4/0x7d0 [ 128.252691][ T6305] page_pool_destroy+0x10a/0x4c0 [ 128.254646][ T6305] bpf_test_run_xdp_live+0x3a1/0x500 [ 128.256796][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 128.258978][ T6305] __sys_bpf+0xfc6/0x49a0 [ 128.261503][ T6305] __x64_sys_bpf+0x78/0xc0 [ 128.263268][ T6305] do_syscall_64+0xcd/0x250 [ 128.265001][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.267269][ T6305] Modules linked in: [ 128.268757][ T6305] CPU: 3 UID: 0 PID: 6305 Comm: syz.1.66 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 128.272269][ T6305] Tainted: [B]=BAD_PAGE [ 128.273354][ T6305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 128.276480][ T6305] Call Trace: [ 128.277694][ T6305] [ 128.278508][ T6305] dump_stack_lvl+0x16c/0x1f0 [ 128.279746][ T6305] bad_page+0xb3/0x1f0 [ 128.280868][ T6305] ? __pfx_bad_page+0x10/0x10 [ 128.282217][ T6305] ? page_bad_reason+0x9d/0x1e0 [ 128.283491][ T6305] free_unref_page+0x657/0xdc0 [ 128.284772][ T6305] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 128.286766][ T6305] ? __phys_addr+0xc6/0x150 [ 128.287949][ T6305] skb_free_head+0xa0/0x1d0 [ 128.289243][ T6305] skb_release_data+0x560/0x730 [ 128.290594][ T6305] sk_skb_reason_drop+0x129/0x1a0 [ 128.291948][ T6305] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 128.293932][ T6305] ? kernel_text_address+0x8d/0x100 [ 128.295753][ T6305] ? hlock_class+0x4e/0x130 [ 128.297292][ T6305] ? __lock_acquire+0x163e/0x3ce0 [ 128.298725][ T6305] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 128.300892][ T6305] ? hlock_class+0x4e/0x130 [ 128.302162][ T6305] ? __lock_acquire+0xbdd/0x3ce0 [ 128.303820][ T6305] ? __pfx___lock_acquire+0x10/0x10 [ 128.305409][ T6305] __netif_receive_skb_list_core+0x357/0x950 [ 128.307679][ T6305] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 128.309726][ T6305] ? trace_lock_acquire+0x14a/0x1d0 [ 128.311235][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 128.313658][ T6305] ? lock_acquire+0x2f/0xb0 [ 128.315108][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 128.317168][ T6305] netif_receive_skb_list_internal+0x753/0xdb0 [ 128.319424][ T6305] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 128.321618][ T6305] ? __pfx_eth_type_trans+0x10/0x10 [ 128.323364][ T6305] ? __build_skb_around+0x278/0x3b0 [ 128.325358][ T6305] netif_receive_skb_list+0x4f/0x4a0 [ 128.327000][ T6305] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 128.328661][ T6305] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 128.330422][ T6305] ? bpf_test_timer_continue+0x150/0x3d0 [ 128.332167][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 128.333826][ T6305] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 128.335630][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 128.337977][ T6305] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 128.340514][ T6305] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 128.343201][ T6305] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 128.345228][ T6305] ? 0xffffffffa00045c0 [ 128.347062][ T6305] ? 0xffffffffa00045c0 [ 128.348584][ T6305] ? 0xffffffffa00045c0 [ 128.349990][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 128.351917][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 128.353524][ T6305] ? lock_acquire+0x2f/0xb0 [ 128.354855][ T6305] ? __fget_files+0x40/0x3f0 [ 128.356204][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 128.357956][ T6305] ? fput+0x30/0x390 [ 128.359008][ T6305] ? __bpf_prog_get+0xa0/0x290 [ 128.360274][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 128.361864][ T6305] __sys_bpf+0xfc6/0x49a0 [ 128.363055][ T6305] ? __pfx___sys_bpf+0x10/0x10 [ 128.364549][ T6305] ? __schedule+0xe5d/0x5730 [ 128.365789][ T6305] ? __fget_files+0x23a/0x3f0 [ 128.367153][ T6305] ? do_futex+0x123/0x350 [ 128.368649][ T6305] ? __pfx_do_futex+0x10/0x10 [ 128.370241][ T6305] ? xfd_validate_state+0x5d/0x180 [ 128.371702][ T6305] ? rcu_is_watching+0x12/0xc0 [ 128.373189][ T6305] __x64_sys_bpf+0x78/0xc0 [ 128.374716][ T6305] ? lockdep_hardirqs_on+0x7c/0x110 [ 128.376171][ T6305] do_syscall_64+0xcd/0x250 [ 128.377556][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.379150][ T6305] RIP: 0033:0x7fd45b57e719 [ 128.380458][ T6305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.386490][ T6305] RSP: 002b:00007fd45c319038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 128.389134][ T6305] RAX: ffffffffffffffda RBX: 00007fd45b736058 RCX: 00007fd45b57e719 [ 128.391764][ T6305] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 128.394178][ T6305] RBP: 00007fd45b5f132e R08: 0000000000000000 R09: 0000000000000000 [ 128.396443][ T6305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.398905][ T6305] R13: 0000000000000000 R14: 00007fd45b736058 R15: 00007ffd2e0c9fc8 [ 128.401660][ T6305] [ 128.402877][ T6305] BUG: Bad page state in process syz.1.66 pfn:31665 [ 128.404828][ T6305] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888031665100 pfn:0x31665 [ 128.407862][ T6305] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 128.410187][ T6305] raw: 00fff00000000000 dead000000000040 ffff88804cdea000 0000000000000000 [ 128.412670][ T6305] raw: ffff888031665100 0000000000000001 00000000ffffffff 0000000000000000 [ 128.415616][ T6305] page dumped because: page_pool leak [ 128.417430][ T6305] page_owner tracks the page as allocated [ 128.419486][ T6305] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6305, tgid 6299 (syz.1.66), ts 127123852332, free_ts 126833627942 [ 128.424767][ T6305] post_alloc_hook+0x2d1/0x350 [ 128.426032][ T6305] get_page_from_freelist+0x101e/0x3070 [ 128.427452][ T6305] __alloc_pages_noprof+0x223/0x25a0 [ 128.429054][ T6305] alloc_pages_bulk_noprof+0x77c/0x1110 [ 128.430649][ T6305] __page_pool_alloc_pages_slow+0x18f/0x770 [ 128.432306][ T6305] page_pool_alloc_netmem+0xc4/0x160 [ 128.434503][ T6305] page_pool_alloc_pages+0x1a/0x60 [ 128.436102][ T6305] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 128.437962][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 128.440021][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 128.441649][ T6305] __sys_bpf+0xfc6/0x49a0 [ 128.443014][ T6305] __x64_sys_bpf+0x78/0xc0 [ 128.444545][ T6305] do_syscall_64+0xcd/0x250 [ 128.445752][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.447384][ T6305] page last free pid 6281 tgid 6279 stack trace: [ 128.449209][ T6305] free_unref_page+0x5f4/0xdc0 [ 128.450525][ T6305] __folio_put+0x30d/0x3d0 [ 128.451738][ T6305] put_page+0x21e/0x280 [ 128.452943][ T6305] page_pool_return_page+0x400/0x520 [ 128.454652][ T6305] page_pool_release+0xf4/0x7d0 [ 128.456064][ T6305] page_pool_destroy+0x10a/0x4c0 [ 128.457562][ T6305] bpf_test_run_xdp_live+0x3a1/0x500 [ 128.459496][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 128.461250][ T6305] __sys_bpf+0xfc6/0x49a0 [ 128.462406][ T6305] __x64_sys_bpf+0x78/0xc0 [ 128.463589][ T6305] do_syscall_64+0xcd/0x250 [ 128.464959][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.466843][ T6305] Modules linked in: [ 128.468007][ T6305] CPU: 3 UID: 0 PID: 6305 Comm: syz.1.66 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 128.471972][ T6305] Tainted: [B]=BAD_PAGE [ 128.473349][ T6305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 128.476195][ T6305] Call Trace: [ 128.477252][ T6305] [ 128.478089][ T6305] dump_stack_lvl+0x16c/0x1f0 [ 128.479615][ T6305] bad_page+0xb3/0x1f0 [ 128.481282][ T6305] ? __pfx_bad_page+0x10/0x10 [ 128.483338][ T6305] ? page_bad_reason+0x9d/0x1e0 [ 128.484658][ T6305] free_unref_page+0x657/0xdc0 [ 128.485993][ T6305] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 128.487795][ T6305] ? __phys_addr+0xc6/0x150 [ 128.488999][ T6305] skb_free_head+0xa0/0x1d0 [ 128.490337][ T6305] skb_release_data+0x560/0x730 [ 128.491882][ T6305] sk_skb_reason_drop+0x129/0x1a0 [ 128.493417][ T6305] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 128.495285][ T6305] ? kernel_text_address+0x8d/0x100 [ 128.496656][ T6305] ? hlock_class+0x4e/0x130 [ 128.497984][ T6305] ? __lock_acquire+0x163e/0x3ce0 [ 128.499559][ T6305] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 128.501680][ T6305] ? hlock_class+0x4e/0x130 [ 128.503051][ T6305] ? __lock_acquire+0xbdd/0x3ce0 [ 128.504340][ T6305] ? __pfx___lock_acquire+0x10/0x10 [ 128.505704][ T6305] __netif_receive_skb_list_core+0x357/0x950 [ 128.507426][ T6305] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 128.509152][ T6305] ? trace_lock_acquire+0x14a/0x1d0 [ 128.510555][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 128.512552][ T6305] ? lock_acquire+0x2f/0xb0 [ 128.514286][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 128.516134][ T6305] netif_receive_skb_list_internal+0x753/0xdb0 [ 128.517879][ T6305] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 128.519820][ T6305] ? __pfx_eth_type_trans+0x10/0x10 [ 128.521547][ T6305] ? __build_skb_around+0x278/0x3b0 [ 128.523718][ T6305] netif_receive_skb_list+0x4f/0x4a0 [ 128.525245][ T6305] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 128.527051][ T6305] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 128.528746][ T6305] ? bpf_test_timer_continue+0x150/0x3d0 [ 128.530583][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 128.531979][ T6305] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 128.533687][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 128.535456][ T6305] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 128.537425][ T6305] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 128.539209][ T6305] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 128.540864][ T6305] ? 0xffffffffa00045c0 [ 128.542033][ T6305] ? 0xffffffffa00045c0 [ 128.543373][ T6305] ? 0xffffffffa00045c0 [ 128.544705][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 128.546627][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 128.548354][ T6305] ? lock_acquire+0x2f/0xb0 [ 128.549740][ T6305] ? __fget_files+0x40/0x3f0 [ 128.551314][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 128.553160][ T6305] ? fput+0x30/0x390 [ 128.554491][ T6305] ? __bpf_prog_get+0xa0/0x290 [ 128.556279][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 128.558198][ T6305] __sys_bpf+0xfc6/0x49a0 [ 128.559552][ T6305] ? __pfx___sys_bpf+0x10/0x10 [ 128.560926][ T6305] ? __schedule+0xe5d/0x5730 [ 128.562172][ T6305] ? __fget_files+0x23a/0x3f0 [ 128.563494][ T6305] ? do_futex+0x123/0x350 [ 128.564641][ T6305] ? __pfx_do_futex+0x10/0x10 [ 128.565884][ T6305] ? xfd_validate_state+0x5d/0x180 [ 128.567306][ T6305] ? rcu_is_watching+0x12/0xc0 [ 128.569053][ T6305] __x64_sys_bpf+0x78/0xc0 [ 128.570710][ T6305] ? lockdep_hardirqs_on+0x7c/0x110 [ 128.572126][ T6305] do_syscall_64+0xcd/0x250 [ 128.573349][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.574903][ T6305] RIP: 0033:0x7fd45b57e719 [ 128.576069][ T6305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.581286][ T6305] RSP: 002b:00007fd45c319038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 128.583766][ T6305] RAX: ffffffffffffffda RBX: 00007fd45b736058 RCX: 00007fd45b57e719 [ 128.586311][ T6305] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 128.588907][ T6305] RBP: 00007fd45b5f132e R08: 0000000000000000 R09: 0000000000000000 [ 128.591377][ T6305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.593935][ T6305] R13: 0000000000000000 R14: 00007fd45b736058 R15: 00007ffd2e0c9fc8 [ 128.596451][ T6305] [ 128.597441][ T6305] BUG: Bad page state in process syz.1.66 pfn:312d0 [ 128.599541][ T6305] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880312d0f00 pfn:0x312d0 [ 128.602414][ T6305] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 128.604290][ T6305] raw: 00fff00000000000 dead000000000040 ffff88804cdea000 0000000000000000 [ 128.606527][ T6305] raw: ffff8880312d0f00 0000000000000001 00000000ffffffff 0000000000000000 [ 128.608790][ T6305] page dumped because: page_pool leak [ 128.610224][ T6305] page_owner tracks the page as allocated [ 128.611775][ T6305] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6305, tgid 6299 (syz.1.66), ts 127123847550, free_ts 126833632484 [ 128.617145][ T6305] post_alloc_hook+0x2d1/0x350 [ 128.619040][ T6305] get_page_from_freelist+0x101e/0x3070 [ 128.620625][ T6305] __alloc_pages_noprof+0x223/0x25a0 [ 128.622152][ T6305] alloc_pages_bulk_noprof+0x77c/0x1110 [ 128.623943][ T6305] __page_pool_alloc_pages_slow+0x18f/0x770 [ 128.626388][ T6305] page_pool_alloc_netmem+0xc4/0x160 [ 128.628313][ T6305] page_pool_alloc_pages+0x1a/0x60 [ 128.630684][ T6305] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 128.632760][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 128.634355][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 128.635863][ T6305] __sys_bpf+0xfc6/0x49a0 [ 128.637237][ T6305] __x64_sys_bpf+0x78/0xc0 [ 128.638418][ T6305] do_syscall_64+0xcd/0x250 [ 128.639686][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.641543][ T6305] page last free pid 6281 tgid 6279 stack trace: [ 128.643294][ T6305] free_unref_page+0x5f4/0xdc0 [ 128.644823][ T6305] __folio_put+0x30d/0x3d0 [ 128.646356][ T6305] put_page+0x21e/0x280 [ 128.647566][ T6305] page_pool_return_page+0x400/0x520 [ 128.649171][ T6305] page_pool_release+0xf4/0x7d0 [ 128.650532][ T6305] page_pool_destroy+0x10a/0x4c0 [ 128.652016][ T6305] bpf_test_run_xdp_live+0x3a1/0x500 [ 128.653575][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 128.655115][ T6305] __sys_bpf+0xfc6/0x49a0 [ 128.656263][ T6305] __x64_sys_bpf+0x78/0xc0 [ 128.657439][ T6305] do_syscall_64+0xcd/0x250 [ 128.658756][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.660404][ T6305] Modules linked in: [ 128.661972][ T6305] CPU: 3 UID: 0 PID: 6305 Comm: syz.1.66 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 128.666208][ T6305] Tainted: [B]=BAD_PAGE [ 128.667629][ T6305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 128.670721][ T6305] Call Trace: [ 128.671615][ T6305] [ 128.672403][ T6305] dump_stack_lvl+0x16c/0x1f0 [ 128.673683][ T6305] bad_page+0xb3/0x1f0 [ 128.674783][ T6305] ? __pfx_bad_page+0x10/0x10 [ 128.676024][ T6305] ? page_bad_reason+0x9d/0x1e0 [ 128.677481][ T6305] free_unref_page+0x657/0xdc0 [ 128.678831][ T6305] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 128.680731][ T6305] ? __phys_addr+0xc6/0x150 [ 128.682416][ T6305] skb_free_head+0xa0/0x1d0 [ 128.683924][ T6305] skb_release_data+0x560/0x730 [ 128.685273][ T6305] sk_skb_reason_drop+0x129/0x1a0 [ 128.686897][ T6305] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 128.688872][ T6305] ? kernel_text_address+0x8d/0x100 [ 128.691062][ T6305] ? hlock_class+0x4e/0x130 [ 128.692384][ T6305] ? __lock_acquire+0x163e/0x3ce0 [ 128.694095][ T6305] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 128.696545][ T6305] ? hlock_class+0x4e/0x130 [ 128.698016][ T6305] ? __lock_acquire+0xbdd/0x3ce0 [ 128.699336][ T6305] ? __pfx___lock_acquire+0x10/0x10 [ 128.700814][ T6305] __netif_receive_skb_list_core+0x357/0x950 [ 128.702419][ T6305] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 128.704314][ T6305] ? trace_lock_acquire+0x14a/0x1d0 [ 128.706192][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 128.707895][ T6305] ? lock_acquire+0x2f/0xb0 [ 128.709067][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 128.710881][ T6305] netif_receive_skb_list_internal+0x753/0xdb0 [ 128.712781][ T6305] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 128.715935][ T6305] ? __pfx_eth_type_trans+0x10/0x10 [ 128.718103][ T6305] ? __build_skb_around+0x278/0x3b0 [ 128.719660][ T6305] netif_receive_skb_list+0x4f/0x4a0 [ 128.721217][ T6305] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 128.723275][ T6305] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 128.725153][ T6305] ? bpf_test_timer_continue+0x150/0x3d0 [ 128.726813][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 128.728404][ T6305] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 128.729941][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 128.731598][ T6305] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 128.733394][ T6305] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 128.735379][ T6305] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 128.736992][ T6305] ? 0xffffffffa00045c0 [ 128.738328][ T6305] ? 0xffffffffa00045c0 [ 128.739487][ T6305] ? 0xffffffffa00045c0 [ 128.740820][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 128.742544][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 128.743974][ T6305] ? lock_acquire+0x2f/0xb0 [ 128.745182][ T6305] ? __fget_files+0x40/0x3f0 [ 128.746434][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 128.748344][ T6305] ? fput+0x30/0x390 [ 128.749653][ T6305] ? __bpf_prog_get+0xa0/0x290 [ 128.751355][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 128.752985][ T6305] __sys_bpf+0xfc6/0x49a0 [ 128.754127][ T6305] ? __pfx___sys_bpf+0x10/0x10 [ 128.755354][ T6305] ? __schedule+0xe5d/0x5730 [ 128.756716][ T6305] ? __fget_files+0x23a/0x3f0 [ 128.757927][ T6305] ? do_futex+0x123/0x350 [ 128.759073][ T6305] ? __pfx_do_futex+0x10/0x10 [ 128.760417][ T6305] ? xfd_validate_state+0x5d/0x180 [ 128.762314][ T6305] ? rcu_is_watching+0x12/0xc0 [ 128.763904][ T6305] __x64_sys_bpf+0x78/0xc0 [ 128.765112][ T6305] ? lockdep_hardirqs_on+0x7c/0x110 [ 128.766520][ T6305] do_syscall_64+0xcd/0x250 [ 128.768167][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.769799][ T6305] RIP: 0033:0x7fd45b57e719 [ 128.771101][ T6305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.777376][ T6305] RSP: 002b:00007fd45c319038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 128.780019][ T6305] RAX: ffffffffffffffda RBX: 00007fd45b736058 RCX: 00007fd45b57e719 [ 128.782795][ T6305] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 128.785964][ T6305] RBP: 00007fd45b5f132e R08: 0000000000000000 R09: 0000000000000000 [ 128.788833][ T6305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.791571][ T6305] R13: 0000000000000000 R14: 00007fd45b736058 R15: 00007ffd2e0c9fc8 [ 128.795573][ T6305] [ 128.797022][ T6305] BUG: Bad page state in process syz.1.66 pfn:321a0 [ 128.800658][ T6305] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880321a0798 pfn:0x321a0 [ 128.805236][ T6305] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 128.807884][ T6305] raw: 00fff00000000000 dead000000000040 ffff88804cdea000 0000000000000000 [ 128.811098][ T6305] raw: ffff8880321a0798 0000000000000001 00000000ffffffff 0000000000000000 [ 128.814208][ T6305] page dumped because: page_pool leak [ 128.816622][ T6305] page_owner tracks the page as allocated [ 128.818810][ T6305] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6305, tgid 6299 (syz.1.66), ts 127123842930, free_ts 126833636506 [ 128.824946][ T6305] post_alloc_hook+0x2d1/0x350 [ 128.826902][ T6305] get_page_from_freelist+0x101e/0x3070 [ 128.829155][ T6305] __alloc_pages_noprof+0x223/0x25a0 [ 128.831255][ T6305] alloc_pages_bulk_noprof+0x77c/0x1110 [ 128.833511][ T6305] __page_pool_alloc_pages_slow+0x18f/0x770 [ 128.836042][ T6305] page_pool_alloc_netmem+0xc4/0x160 [ 128.838418][ T6305] page_pool_alloc_pages+0x1a/0x60 [ 128.840340][ T6305] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 128.842530][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 128.844446][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 128.846719][ T6305] __sys_bpf+0xfc6/0x49a0 [ 128.848293][ T6305] __x64_sys_bpf+0x78/0xc0 [ 128.849970][ T6305] do_syscall_64+0xcd/0x250 [ 128.851847][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.854046][ T6305] page last free pid 6281 tgid 6279 stack trace: [ 128.856693][ T6305] free_unref_page+0x5f4/0xdc0 [ 128.858463][ T6305] __folio_put+0x30d/0x3d0 [ 128.860343][ T6305] put_page+0x21e/0x280 [ 128.861984][ T6305] page_pool_return_page+0x400/0x520 [ 128.864547][ T6305] page_pool_release+0xf4/0x7d0 [ 128.866586][ T6305] page_pool_destroy+0x10a/0x4c0 [ 128.868326][ T6305] bpf_test_run_xdp_live+0x3a1/0x500 [ 128.870354][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 128.872210][ T6305] __sys_bpf+0xfc6/0x49a0 [ 128.873878][ T6305] __x64_sys_bpf+0x78/0xc0 [ 128.875702][ T6305] do_syscall_64+0xcd/0x250 [ 128.877431][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.879991][ T6305] Modules linked in: [ 128.881616][ T6305] CPU: 3 UID: 0 PID: 6305 Comm: syz.1.66 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 128.886605][ T6305] Tainted: [B]=BAD_PAGE [ 128.888309][ T6305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 128.892566][ T6305] Call Trace: [ 128.893940][ T6305] [ 128.895079][ T6305] dump_stack_lvl+0x16c/0x1f0 [ 128.897191][ T6305] bad_page+0xb3/0x1f0 [ 128.898872][ T6305] ? __pfx_bad_page+0x10/0x10 [ 128.900756][ T6305] ? page_bad_reason+0x9d/0x1e0 [ 128.902302][ T6305] free_unref_page+0x657/0xdc0 [ 128.903960][ T6305] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 128.906080][ T6305] ? __phys_addr+0xc6/0x150 [ 128.907697][ T6305] skb_free_head+0xa0/0x1d0 [ 128.909545][ T6305] skb_release_data+0x560/0x730 [ 128.911517][ T6305] sk_skb_reason_drop+0x129/0x1a0 [ 128.913617][ T6305] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 128.916637][ T6305] ? kernel_text_address+0x8d/0x100 [ 128.919412][ T6305] ? hlock_class+0x4e/0x130 [ 128.921045][ T6305] ? __lock_acquire+0x163e/0x3ce0 [ 128.922769][ T6305] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 128.925354][ T6305] ? hlock_class+0x4e/0x130 [ 128.927066][ T6305] ? __lock_acquire+0xbdd/0x3ce0 [ 128.928858][ T6305] ? __pfx___lock_acquire+0x10/0x10 [ 128.930766][ T6305] __netif_receive_skb_list_core+0x357/0x950 [ 128.932908][ T6305] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 128.935417][ T6305] ? trace_lock_acquire+0x14a/0x1d0 [ 128.937619][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 128.940163][ T6305] ? lock_acquire+0x2f/0xb0 [ 128.942034][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 128.944582][ T6305] netif_receive_skb_list_internal+0x753/0xdb0 [ 128.947240][ T6305] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 128.950118][ T6305] ? __pfx_eth_type_trans+0x10/0x10 [ 128.952220][ T6305] ? __build_skb_around+0x278/0x3b0 [ 128.954524][ T6305] netif_receive_skb_list+0x4f/0x4a0 [ 128.956626][ T6305] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 128.958944][ T6305] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 128.961290][ T6305] ? bpf_test_timer_continue+0x150/0x3d0 [ 128.963292][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 128.965176][ T6305] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 128.967703][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 128.970253][ T6305] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 128.972788][ T6305] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 128.974820][ T6305] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 128.976416][ T6305] ? 0xffffffffa00045c0 [ 128.977686][ T6305] ? 0xffffffffa00045c0 [ 128.978869][ T6305] ? 0xffffffffa00045c0 [ 128.980123][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 128.981741][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 128.983304][ T6305] ? lock_acquire+0x2f/0xb0 [ 128.984940][ T6305] ? __fget_files+0x40/0x3f0 [ 128.986658][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 128.989007][ T6305] ? fput+0x30/0x390 [ 128.990623][ T6305] ? __bpf_prog_get+0xa0/0x290 [ 128.992692][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 128.995456][ T6305] __sys_bpf+0xfc6/0x49a0 [ 128.997646][ T6305] ? __pfx___sys_bpf+0x10/0x10 [ 128.999657][ T6305] ? __schedule+0xe5d/0x5730 [ 129.001493][ T6305] ? __fget_files+0x23a/0x3f0 [ 129.003431][ T6305] ? do_futex+0x123/0x350 [ 129.004642][ T6305] ? __pfx_do_futex+0x10/0x10 [ 129.005969][ T6305] ? xfd_validate_state+0x5d/0x180 [ 129.007511][ T6305] ? rcu_is_watching+0x12/0xc0 [ 129.008838][ T6305] __x64_sys_bpf+0x78/0xc0 [ 129.010189][ T6305] ? lockdep_hardirqs_on+0x7c/0x110 [ 129.011657][ T6305] do_syscall_64+0xcd/0x250 [ 129.012991][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.015057][ T6305] RIP: 0033:0x7fd45b57e719 [ 129.016658][ T6305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.023764][ T6305] RSP: 002b:00007fd45c319038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 129.027029][ T6305] RAX: ffffffffffffffda RBX: 00007fd45b736058 RCX: 00007fd45b57e719 [ 129.029883][ T6305] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 129.032672][ T6305] RBP: 00007fd45b5f132e R08: 0000000000000000 R09: 0000000000000000 [ 129.035264][ T6305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.037625][ T6305] R13: 0000000000000000 R14: 00007fd45b736058 R15: 00007ffd2e0c9fc8 [ 129.040318][ T6305] [ 129.041247][ T6305] BUG: Bad page state in process syz.1.66 pfn:20b84 [ 129.043175][ T6305] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888020b84e58 pfn:0x20b84 [ 129.046310][ T6305] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 129.048783][ T6305] raw: 00fff00000000000 dead000000000040 ffff88804cdea000 0000000000000000 [ 129.051700][ T6305] raw: ffff888020b84e58 0000000000000001 00000000ffffffff 0000000000000000 [ 129.054395][ T6305] page dumped because: page_pool leak [ 129.056056][ T6305] page_owner tracks the page as allocated [ 129.057884][ T6305] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6305, tgid 6299 (syz.1.66), ts 127123838462, free_ts 126833640122 [ 129.063147][ T6305] post_alloc_hook+0x2d1/0x350 [ 129.064412][ T6305] get_page_from_freelist+0x101e/0x3070 [ 129.065856][ T6305] __alloc_pages_noprof+0x223/0x25a0 [ 129.067266][ T6305] alloc_pages_bulk_noprof+0x77c/0x1110 [ 129.068764][ T6305] __page_pool_alloc_pages_slow+0x18f/0x770 [ 129.070361][ T6305] page_pool_alloc_netmem+0xc4/0x160 [ 129.071760][ T6305] page_pool_alloc_pages+0x1a/0x60 [ 129.073102][ T6305] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 129.074743][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 129.076122][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 129.077684][ T6305] __sys_bpf+0xfc6/0x49a0 [ 129.079085][ T6305] __x64_sys_bpf+0x78/0xc0 [ 129.080414][ T6305] do_syscall_64+0xcd/0x250 [ 129.081771][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.083372][ T6305] page last free pid 6281 tgid 6279 stack trace: [ 129.085040][ T6305] free_unref_page+0x5f4/0xdc0 [ 129.086397][ T6305] __folio_put+0x30d/0x3d0 [ 129.087643][ T6305] put_page+0x21e/0x280 [ 129.088883][ T6305] page_pool_return_page+0x400/0x520 [ 129.090366][ T6305] page_pool_release+0xf4/0x7d0 [ 129.091669][ T6305] page_pool_destroy+0x10a/0x4c0 [ 129.093059][ T6305] bpf_test_run_xdp_live+0x3a1/0x500 [ 129.094783][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 129.096598][ T6305] __sys_bpf+0xfc6/0x49a0 [ 129.097877][ T6305] __x64_sys_bpf+0x78/0xc0 [ 129.099235][ T6305] do_syscall_64+0xcd/0x250 [ 129.100530][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.102244][ T6305] Modules linked in: [ 129.103558][ T6305] CPU: 3 UID: 0 PID: 6305 Comm: syz.1.66 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 129.107487][ T6305] Tainted: [B]=BAD_PAGE [ 129.108713][ T6305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 129.111785][ T6305] Call Trace: [ 129.112662][ T6305] [ 129.113717][ T6305] dump_stack_lvl+0x16c/0x1f0 [ 129.115290][ T6305] bad_page+0xb3/0x1f0 [ 129.116591][ T6305] ? __pfx_bad_page+0x10/0x10 [ 129.118114][ T6305] ? page_bad_reason+0x9d/0x1e0 [ 129.120140][ T6305] free_unref_page+0x657/0xdc0 [ 129.122110][ T6305] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 129.124088][ T6305] ? __phys_addr+0xc6/0x150 [ 129.125708][ T6305] skb_free_head+0xa0/0x1d0 [ 129.127362][ T6305] skb_release_data+0x560/0x730 [ 129.128684][ T6305] sk_skb_reason_drop+0x129/0x1a0 [ 129.130017][ T6305] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 129.131898][ T6305] ? kernel_text_address+0x8d/0x100 [ 129.133307][ T6305] ? hlock_class+0x4e/0x130 [ 129.134524][ T6305] ? __lock_acquire+0x163e/0x3ce0 [ 129.135852][ T6305] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 129.137707][ T6305] ? hlock_class+0x4e/0x130 [ 129.138920][ T6305] ? __lock_acquire+0xbdd/0x3ce0 [ 129.140234][ T6305] ? __pfx___lock_acquire+0x10/0x10 [ 129.141656][ T6305] __netif_receive_skb_list_core+0x357/0x950 [ 129.143482][ T6305] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 129.145841][ T6305] ? trace_lock_acquire+0x14a/0x1d0 [ 129.147751][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 129.150026][ T6305] ? lock_acquire+0x2f/0xb0 [ 129.151621][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 129.153793][ T6305] netif_receive_skb_list_internal+0x753/0xdb0 [ 129.155944][ T6305] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 129.158357][ T6305] ? __pfx_eth_type_trans+0x10/0x10 [ 129.160259][ T6305] ? __build_skb_around+0x278/0x3b0 [ 129.162167][ T6305] netif_receive_skb_list+0x4f/0x4a0 [ 129.164088][ T6305] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 129.166337][ T6305] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 129.168512][ T6305] ? bpf_test_timer_continue+0x150/0x3d0 [ 129.170020][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 129.171502][ T6305] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 129.173289][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 129.175308][ T6305] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 129.176950][ T6305] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 129.179228][ T6305] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 129.181069][ T6305] ? 0xffffffffa00045c0 [ 129.182979][ T6305] ? 0xffffffffa00045c0 [ 129.184485][ T6305] ? 0xffffffffa00045c0 [ 129.186007][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 129.188182][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 129.190424][ T6305] ? lock_acquire+0x2f/0xb0 [ 129.192195][ T6305] ? __fget_files+0x40/0x3f0 [ 129.193939][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 129.196148][ T6305] ? fput+0x30/0x390 [ 129.197583][ T6305] ? __bpf_prog_get+0xa0/0x290 [ 129.199315][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 129.201245][ T6305] __sys_bpf+0xfc6/0x49a0 [ 129.202724][ T6305] ? __pfx___sys_bpf+0x10/0x10 [ 129.204340][ T6305] ? __schedule+0xe5d/0x5730 [ 129.205945][ T6305] ? __fget_files+0x23a/0x3f0 [ 129.207652][ T6305] ? do_futex+0x123/0x350 [ 129.209246][ T6305] ? __pfx_do_futex+0x10/0x10 [ 129.211103][ T6305] ? xfd_validate_state+0x5d/0x180 [ 129.213165][ T6305] ? rcu_is_watching+0x12/0xc0 [ 129.214974][ T6305] __x64_sys_bpf+0x78/0xc0 [ 129.216708][ T6305] ? lockdep_hardirqs_on+0x7c/0x110 [ 129.218355][ T6305] do_syscall_64+0xcd/0x250 [ 129.220060][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.221841][ T6305] RIP: 0033:0x7fd45b57e719 [ 129.223287][ T6305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.229971][ T6305] RSP: 002b:00007fd45c319038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 129.232791][ T6305] RAX: ffffffffffffffda RBX: 00007fd45b736058 RCX: 00007fd45b57e719 [ 129.235499][ T6305] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 129.238426][ T6305] RBP: 00007fd45b5f132e R08: 0000000000000000 R09: 0000000000000000 [ 129.241853][ T6305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.245473][ T6305] R13: 0000000000000000 R14: 00007fd45b736058 R15: 00007ffd2e0c9fc8 [ 129.248205][ T6305] [ 129.249186][ T6305] BUG: Bad page state in process syz.1.66 pfn:32566 [ 129.251089][ T6305] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888032566f00 pfn:0x32566 [ 129.254031][ T6305] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 129.256183][ T6305] raw: 00fff00000000000 dead000000000040 ffff88804cdea000 0000000000000000 [ 129.258736][ T6305] raw: ffff888032566f00 0000000000000001 00000000ffffffff 0000000000000000 [ 129.261283][ T6305] page dumped because: page_pool leak [ 129.262945][ T6305] page_owner tracks the page as allocated [ 129.264899][ T6305] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6305, tgid 6299 (syz.1.66), ts 127123833901, free_ts 126833643884 [ 129.270984][ T6305] post_alloc_hook+0x2d1/0x350 [ 129.272830][ T6305] get_page_from_freelist+0x101e/0x3070 [ 129.275252][ T6305] __alloc_pages_noprof+0x223/0x25a0 [ 129.277549][ T6305] alloc_pages_bulk_noprof+0x77c/0x1110 [ 129.279871][ T6305] __page_pool_alloc_pages_slow+0x18f/0x770 [ 129.282313][ T6305] page_pool_alloc_netmem+0xc4/0x160 [ 129.284219][ T6305] page_pool_alloc_pages+0x1a/0x60 [ 129.286024][ T6305] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 129.288007][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 129.289983][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 129.291717][ T6305] __sys_bpf+0xfc6/0x49a0 [ 129.292932][ T6305] __x64_sys_bpf+0x78/0xc0 [ 129.294467][ T6305] do_syscall_64+0xcd/0x250 [ 129.295840][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.297659][ T6305] page last free pid 6281 tgid 6279 stack trace: [ 129.299619][ T6305] free_unref_page+0x5f4/0xdc0 [ 129.300987][ T6305] __folio_put+0x30d/0x3d0 [ 129.302282][ T6305] put_page+0x21e/0x280 [ 129.303476][ T6305] page_pool_return_page+0x400/0x520 [ 129.304969][ T6305] page_pool_release+0xf4/0x7d0 [ 129.307029][ T6305] page_pool_destroy+0x10a/0x4c0 [ 129.308342][ T6305] bpf_test_run_xdp_live+0x3a1/0x500 [ 129.309812][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 129.311254][ T6305] __sys_bpf+0xfc6/0x49a0 [ 129.312370][ T6305] __x64_sys_bpf+0x78/0xc0 [ 129.313979][ T6305] do_syscall_64+0xcd/0x250 [ 129.315466][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.317379][ T6305] Modules linked in: [ 129.319147][ T6305] CPU: 3 UID: 0 PID: 6305 Comm: syz.1.66 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 129.323872][ T6305] Tainted: [B]=BAD_PAGE [ 129.325260][ T6305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 129.329027][ T6305] Call Trace: [ 129.330214][ T6305] [ 129.331255][ T6305] dump_stack_lvl+0x16c/0x1f0 [ 129.332710][ T6305] bad_page+0xb3/0x1f0 [ 129.333923][ T6305] ? __pfx_bad_page+0x10/0x10 [ 129.335180][ T6305] ? page_bad_reason+0x9d/0x1e0 [ 129.336467][ T6305] free_unref_page+0x657/0xdc0 [ 129.337772][ T6305] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 129.339786][ T6305] ? __phys_addr+0xc6/0x150 [ 129.341685][ T6305] skb_free_head+0xa0/0x1d0 [ 129.343608][ T6305] skb_release_data+0x560/0x730 [ 129.345527][ T6305] sk_skb_reason_drop+0x129/0x1a0 [ 129.347540][ T6305] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 129.350204][ T6305] ? kernel_text_address+0x8d/0x100 [ 129.352336][ T6305] ? hlock_class+0x4e/0x130 [ 129.354370][ T6305] ? __lock_acquire+0x163e/0x3ce0 [ 129.356534][ T6305] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 129.359268][ T6305] ? hlock_class+0x4e/0x130 [ 129.360912][ T6305] ? __lock_acquire+0xbdd/0x3ce0 [ 129.362571][ T6305] ? __pfx___lock_acquire+0x10/0x10 [ 129.364124][ T6305] __netif_receive_skb_list_core+0x357/0x950 [ 129.366297][ T6305] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 129.368680][ T6305] ? trace_lock_acquire+0x14a/0x1d0 [ 129.370641][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 129.373001][ T6305] ? lock_acquire+0x2f/0xb0 [ 129.374283][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 129.376050][ T6305] netif_receive_skb_list_internal+0x753/0xdb0 [ 129.378259][ T6305] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 129.380409][ T6305] ? __pfx_eth_type_trans+0x10/0x10 [ 129.382200][ T6305] ? __build_skb_around+0x278/0x3b0 [ 129.384005][ T6305] netif_receive_skb_list+0x4f/0x4a0 [ 129.385520][ T6305] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 129.387328][ T6305] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 129.389175][ T6305] ? bpf_test_timer_continue+0x150/0x3d0 [ 129.390719][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 129.392157][ T6305] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 129.393773][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 129.395754][ T6305] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 129.397456][ T6305] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 129.398985][ T6305] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 129.400441][ T6305] ? 0xffffffffa00045c0 [ 129.401736][ T6305] ? 0xffffffffa00045c0 [ 129.402892][ T6305] ? 0xffffffffa00045c0 [ 129.404559][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 129.406535][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 129.408268][ T6305] ? lock_acquire+0x2f/0xb0 [ 129.409717][ T6305] ? __fget_files+0x40/0x3f0 [ 129.411124][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 129.412896][ T6305] ? fput+0x30/0x390 [ 129.414220][ T6305] ? __bpf_prog_get+0xa0/0x290 [ 129.415493][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 129.416992][ T6305] __sys_bpf+0xfc6/0x49a0 [ 129.418096][ T6305] ? __pfx___sys_bpf+0x10/0x10 [ 129.419726][ T6305] ? __schedule+0xe5d/0x5730 [ 129.421009][ T6305] ? __fget_files+0x23a/0x3f0 [ 129.422283][ T6305] ? do_futex+0x123/0x350 [ 129.423697][ T6305] ? __pfx_do_futex+0x10/0x10 [ 129.425105][ T6305] ? xfd_validate_state+0x5d/0x180 [ 129.426594][ T6305] ? rcu_is_watching+0x12/0xc0 [ 129.427936][ T6305] __x64_sys_bpf+0x78/0xc0 [ 129.429208][ T6305] ? lockdep_hardirqs_on+0x7c/0x110 [ 129.430663][ T6305] do_syscall_64+0xcd/0x250 [ 129.431956][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.433758][ T6305] RIP: 0033:0x7fd45b57e719 [ 129.435139][ T6305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.440618][ T6305] RSP: 002b:00007fd45c319038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 129.443340][ T6305] RAX: ffffffffffffffda RBX: 00007fd45b736058 RCX: 00007fd45b57e719 [ 129.445545][ T6305] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 129.447664][ T6305] RBP: 00007fd45b5f132e R08: 0000000000000000 R09: 0000000000000000 [ 129.449717][ T6305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.451795][ T6305] R13: 0000000000000000 R14: 00007fd45b736058 R15: 00007ffd2e0c9fc8 [ 129.453842][ T6305] [ 129.455356][ T6305] BUG: Bad page state in process syz.1.66 pfn:4030e [ 129.457157][ T6305] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804030ee88 pfn:0x4030e [ 129.460718][ T6305] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 129.463073][ T6305] raw: 00fff00000000000 dead000000000040 ffff88804cdea000 0000000000000000 [ 129.465523][ T6305] raw: ffff88804030ee88 0000000000000001 00000000ffffffff 0000000000000000 [ 129.467809][ T6305] page dumped because: page_pool leak [ 129.469298][ T6305] page_owner tracks the page as allocated [ 129.470798][ T6305] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6305, tgid 6299 (syz.1.66), ts 127123829132, free_ts 126833648025 [ 129.475464][ T6305] post_alloc_hook+0x2d1/0x350 [ 129.477141][ T6305] get_page_from_freelist+0x101e/0x3070 [ 129.479092][ T6305] __alloc_pages_noprof+0x223/0x25a0 [ 129.480778][ T6305] alloc_pages_bulk_noprof+0x77c/0x1110 [ 129.483129][ T6305] __page_pool_alloc_pages_slow+0x18f/0x770 [ 129.485021][ T6305] page_pool_alloc_netmem+0xc4/0x160 [ 129.486625][ T6305] page_pool_alloc_pages+0x1a/0x60 [ 129.487974][ T6305] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 129.489665][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 129.491078][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 129.492488][ T6305] __sys_bpf+0xfc6/0x49a0 [ 129.493646][ T6305] __x64_sys_bpf+0x78/0xc0 [ 129.494802][ T6305] do_syscall_64+0xcd/0x250 [ 129.496083][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.497683][ T6305] page last free pid 6281 tgid 6279 stack trace: [ 129.499480][ T6305] free_unref_page+0x5f4/0xdc0 [ 129.500730][ T6305] __folio_put+0x30d/0x3d0 [ 129.501896][ T6305] put_page+0x21e/0x280 [ 129.502987][ T6305] page_pool_return_page+0x400/0x520 [ 129.504361][ T6305] page_pool_release+0xf4/0x7d0 [ 129.505632][ T6305] page_pool_destroy+0x10a/0x4c0 [ 129.506946][ T6305] bpf_test_run_xdp_live+0x3a1/0x500 [ 129.508347][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 129.509941][ T6305] __sys_bpf+0xfc6/0x49a0 [ 129.511195][ T6305] __x64_sys_bpf+0x78/0xc0 [ 129.512501][ T6305] do_syscall_64+0xcd/0x250 [ 129.513836][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.515605][ T6305] Modules linked in: [ 129.516793][ T6305] CPU: 3 UID: 0 PID: 6305 Comm: syz.1.66 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 129.520504][ T6305] Tainted: [B]=BAD_PAGE [ 129.521643][ T6305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 129.524403][ T6305] Call Trace: [ 129.525284][ T6305] [ 129.526080][ T6305] dump_stack_lvl+0x16c/0x1f0 [ 129.527342][ T6305] bad_page+0xb3/0x1f0 [ 129.528432][ T6305] ? __pfx_bad_page+0x10/0x10 [ 129.529675][ T6305] ? page_bad_reason+0x9d/0x1e0 [ 129.530972][ T6305] free_unref_page+0x657/0xdc0 [ 129.532232][ T6305] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 129.533792][ T6305] ? __phys_addr+0xc6/0x150 [ 129.535096][ T6305] skb_free_head+0xa0/0x1d0 [ 129.536381][ T6305] skb_release_data+0x560/0x730 [ 129.537752][ T6305] sk_skb_reason_drop+0x129/0x1a0 [ 129.539256][ T6305] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 129.541268][ T6305] ? kernel_text_address+0x8d/0x100 [ 129.542964][ T6305] ? hlock_class+0x4e/0x130 [ 129.544471][ T6305] ? __lock_acquire+0x163e/0x3ce0 [ 129.546176][ T6305] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 129.548158][ T6305] ? hlock_class+0x4e/0x130 [ 129.549401][ T6305] ? __lock_acquire+0xbdd/0x3ce0 [ 129.550744][ T6305] ? __pfx___lock_acquire+0x10/0x10 [ 129.552107][ T6305] __netif_receive_skb_list_core+0x357/0x950 [ 129.553707][ T6305] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 129.555416][ T6305] ? trace_lock_acquire+0x14a/0x1d0 [ 129.556725][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 129.558587][ T6305] ? lock_acquire+0x2f/0xb0 [ 129.559929][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 129.561894][ T6305] netif_receive_skb_list_internal+0x753/0xdb0 [ 129.563709][ T6305] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 129.565603][ T6305] ? __pfx_eth_type_trans+0x10/0x10 [ 129.567009][ T6305] ? __build_skb_around+0x278/0x3b0 [ 129.568397][ T6305] netif_receive_skb_list+0x4f/0x4a0 [ 129.569865][ T6305] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 129.571582][ T6305] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 129.573369][ T6305] ? bpf_test_timer_continue+0x150/0x3d0 [ 129.574920][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 129.576431][ T6305] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 129.578068][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 129.579734][ T6305] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 129.581300][ T6305] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 129.582810][ T6305] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 129.584187][ T6305] ? 0xffffffffa00045c0 [ 129.585280][ T6305] ? 0xffffffffa00045c0 [ 129.586392][ T6305] ? 0xffffffffa00045c0 [ 129.587479][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 129.589017][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 129.590472][ T6305] ? lock_acquire+0x2f/0xb0 [ 129.591703][ T6305] ? __fget_files+0x40/0x3f0 [ 129.593029][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 129.594706][ T6305] ? fput+0x30/0x390 [ 129.595813][ T6305] ? __bpf_prog_get+0xa0/0x290 [ 129.597303][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 129.599111][ T6305] __sys_bpf+0xfc6/0x49a0 [ 129.600447][ T6305] ? __pfx___sys_bpf+0x10/0x10 [ 129.601799][ T6305] ? __schedule+0xe5d/0x5730 [ 129.603101][ T6305] ? __fget_files+0x23a/0x3f0 [ 129.604344][ T6305] ? do_futex+0x123/0x350 [ 129.605566][ T6305] ? __pfx_do_futex+0x10/0x10 [ 129.606850][ T6305] ? xfd_validate_state+0x5d/0x180 [ 129.608206][ T6305] ? rcu_is_watching+0x12/0xc0 [ 129.609469][ T6305] __x64_sys_bpf+0x78/0xc0 [ 129.610655][ T6305] ? lockdep_hardirqs_on+0x7c/0x110 [ 129.612024][ T6305] do_syscall_64+0xcd/0x250 [ 129.613270][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.614848][ T6305] RIP: 0033:0x7fd45b57e719 [ 129.616029][ T6305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.621886][ T6305] RSP: 002b:00007fd45c319038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 129.624381][ T6305] RAX: ffffffffffffffda RBX: 00007fd45b736058 RCX: 00007fd45b57e719 [ 129.626630][ T6305] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 129.628981][ T6305] RBP: 00007fd45b5f132e R08: 0000000000000000 R09: 0000000000000000 [ 129.631324][ T6305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.633462][ T6305] R13: 0000000000000000 R14: 00007fd45b736058 R15: 00007ffd2e0c9fc8 [ 129.635548][ T6305] [ 129.636481][ T6305] BUG: Bad page state in process syz.1.66 pfn:4e026 [ 129.638266][ T6305] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804e026400 pfn:0x4e026 [ 129.640912][ T6305] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 129.642763][ T6305] raw: 00fff00000000000 dead000000000040 ffff88804cdea000 0000000000000000 [ 129.645115][ T6305] raw: ffff88804e026400 0000000000000001 00000000ffffffff 0000000000000000 [ 129.647364][ T6305] page dumped because: page_pool leak [ 129.648831][ T6305] page_owner tracks the page as allocated [ 129.650337][ T6305] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6305, tgid 6299 (syz.1.66), ts 127123824688, free_ts 126833651819 [ 129.654648][ T6305] post_alloc_hook+0x2d1/0x350 [ 129.656044][ T6305] get_page_from_freelist+0x101e/0x3070 [ 129.657580][ T6305] __alloc_pages_noprof+0x223/0x25a0 [ 129.659117][ T6305] alloc_pages_bulk_noprof+0x77c/0x1110 [ 129.660661][ T6305] __page_pool_alloc_pages_slow+0x18f/0x770 [ 129.662303][ T6305] page_pool_alloc_netmem+0xc4/0x160 [ 129.663690][ T6305] page_pool_alloc_pages+0x1a/0x60 [ 129.665036][ T6305] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 129.666666][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 129.668080][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 129.669549][ T6305] __sys_bpf+0xfc6/0x49a0 [ 129.670707][ T6305] __x64_sys_bpf+0x78/0xc0 [ 129.671886][ T6305] do_syscall_64+0xcd/0x250 [ 129.673095][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.674684][ T6305] page last free pid 6281 tgid 6279 stack trace: [ 129.676398][ T6305] free_unref_page+0x5f4/0xdc0 [ 129.677703][ T6305] __folio_put+0x30d/0x3d0 [ 129.679020][ T6305] put_page+0x21e/0x280 [ 129.680303][ T6305] page_pool_return_page+0x400/0x520 [ 129.682022][ T6305] page_pool_release+0xf4/0x7d0 [ 129.683427][ T6305] page_pool_destroy+0x10a/0x4c0 [ 129.684794][ T6305] bpf_test_run_xdp_live+0x3a1/0x500 [ 129.686247][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 129.687664][ T6305] __sys_bpf+0xfc6/0x49a0 [ 129.689020][ T6305] __x64_sys_bpf+0x78/0xc0 [ 129.690363][ T6305] do_syscall_64+0xcd/0x250 [ 129.691579][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.693150][ T6305] Modules linked in: [ 129.694278][ T6305] CPU: 3 UID: 0 PID: 6305 Comm: syz.1.66 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 129.697413][ T6305] Tainted: [B]=BAD_PAGE [ 129.698530][ T6305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 129.701580][ T6305] Call Trace: [ 129.702770][ T6305] [ 129.703783][ T6305] dump_stack_lvl+0x16c/0x1f0 [ 129.705322][ T6305] bad_page+0xb3/0x1f0 [ 129.706676][ T6305] ? __pfx_bad_page+0x10/0x10 [ 129.708206][ T6305] ? page_bad_reason+0x9d/0x1e0 [ 129.709649][ T6305] free_unref_page+0x657/0xdc0 [ 129.710942][ T6305] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 129.712535][ T6305] ? __phys_addr+0xc6/0x150 [ 129.713721][ T6305] skb_free_head+0xa0/0x1d0 [ 129.714943][ T6305] skb_release_data+0x560/0x730 [ 129.716225][ T6305] sk_skb_reason_drop+0x129/0x1a0 [ 129.717555][ T6305] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 129.719462][ T6305] ? kernel_text_address+0x8d/0x100 [ 129.720809][ T6305] ? hlock_class+0x4e/0x130 [ 129.722009][ T6305] ? __lock_acquire+0x163e/0x3ce0 [ 129.723316][ T6305] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 129.725061][ T6305] ? hlock_class+0x4e/0x130 [ 129.726191][ T6305] ? __lock_acquire+0xbdd/0x3ce0 [ 129.727405][ T6305] ? __pfx___lock_acquire+0x10/0x10 [ 129.728684][ T6305] __netif_receive_skb_list_core+0x357/0x950 [ 129.730277][ T6305] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 129.731970][ T6305] ? trace_lock_acquire+0x14a/0x1d0 [ 129.733349][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 129.735486][ T6305] ? lock_acquire+0x2f/0xb0 [ 129.737266][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 129.740256][ T6305] netif_receive_skb_list_internal+0x753/0xdb0 [ 129.744037][ T6305] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 129.747273][ T6305] ? __pfx_eth_type_trans+0x10/0x10 [ 129.749103][ T6305] ? __build_skb_around+0x278/0x3b0 [ 129.750949][ T6305] netif_receive_skb_list+0x4f/0x4a0 [ 129.752809][ T6305] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 129.754996][ T6305] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 129.757540][ T6305] ? bpf_test_timer_continue+0x150/0x3d0 [ 129.759998][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 129.762078][ T6305] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 129.764312][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 129.766170][ T6305] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 129.768122][ T6305] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 129.769935][ T6305] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 129.771434][ T6305] ? 0xffffffffa00045c0 [ 129.772530][ T6305] ? 0xffffffffa00045c0 [ 129.773881][ T6305] ? 0xffffffffa00045c0 [ 129.775256][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 129.777242][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 129.778641][ T6305] ? lock_acquire+0x2f/0xb0 [ 129.779771][ T6305] ? __fget_files+0x40/0x3f0 [ 129.780981][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 129.782468][ T6305] ? fput+0x30/0x390 [ 129.783610][ T6305] ? __bpf_prog_get+0xa0/0x290 [ 129.784871][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 129.786477][ T6305] __sys_bpf+0xfc6/0x49a0 [ 129.787768][ T6305] ? __pfx___sys_bpf+0x10/0x10 [ 129.789169][ T6305] ? __schedule+0xe5d/0x5730 [ 129.790907][ T6305] ? __fget_files+0x23a/0x3f0 [ 129.792379][ T6305] ? do_futex+0x123/0x350 [ 129.793899][ T6305] ? __pfx_do_futex+0x10/0x10 [ 129.795397][ T6305] ? xfd_validate_state+0x5d/0x180 [ 129.796950][ T6305] ? rcu_is_watching+0x12/0xc0 [ 129.798358][ T6305] __x64_sys_bpf+0x78/0xc0 [ 129.799853][ T6305] ? lockdep_hardirqs_on+0x7c/0x110 [ 129.801704][ T6305] do_syscall_64+0xcd/0x250 [ 129.803250][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.805314][ T6305] RIP: 0033:0x7fd45b57e719 [ 129.806971][ T6305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.813429][ T6305] RSP: 002b:00007fd45c319038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 129.816351][ T6305] RAX: ffffffffffffffda RBX: 00007fd45b736058 RCX: 00007fd45b57e719 [ 129.819160][ T6305] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 129.821867][ T6305] RBP: 00007fd45b5f132e R08: 0000000000000000 R09: 0000000000000000 [ 129.824708][ T6305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.827589][ T6305] R13: 0000000000000000 R14: 00007fd45b736058 R15: 00007ffd2e0c9fc8 [ 129.830374][ T6305] [ 129.831623][ T6305] BUG: Bad page state in process syz.1.66 pfn:28352 [ 129.833955][ T6305] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888028352c00 pfn:0x28352 [ 129.837573][ T6305] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 129.840219][ T6305] raw: 00fff00000000000 dead000000000040 ffff88804cdea000 0000000000000000 [ 129.843310][ T6305] raw: ffff888028352c00 0000000000000001 00000000ffffffff 0000000000000000 [ 129.846339][ T6305] page dumped because: page_pool leak [ 129.848241][ T6305] page_owner tracks the page as allocated [ 129.850376][ T6305] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6305, tgid 6299 (syz.1.66), ts 127123820224, free_ts 126833655781 [ 129.856399][ T6305] post_alloc_hook+0x2d1/0x350 [ 129.858157][ T6305] get_page_from_freelist+0x101e/0x3070 [ 129.860153][ T6305] __alloc_pages_noprof+0x223/0x25a0 [ 129.862165][ T6305] alloc_pages_bulk_noprof+0x77c/0x1110 [ 129.864124][ T6305] __page_pool_alloc_pages_slow+0x18f/0x770 [ 129.866466][ T6305] page_pool_alloc_netmem+0xc4/0x160 [ 129.868509][ T6305] page_pool_alloc_pages+0x1a/0x60 [ 129.870652][ T6305] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 129.872844][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 129.874810][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 129.876823][ T6305] __sys_bpf+0xfc6/0x49a0 [ 129.878367][ T6305] __x64_sys_bpf+0x78/0xc0 [ 129.880067][ T6305] do_syscall_64+0xcd/0x250 [ 129.881735][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.883807][ T6305] page last free pid 6281 tgid 6279 stack trace: [ 129.886078][ T6305] free_unref_page+0x5f4/0xdc0 [ 129.887801][ T6305] __folio_put+0x30d/0x3d0 [ 129.889536][ T6305] put_page+0x21e/0x280 [ 129.891184][ T6305] page_pool_return_page+0x400/0x520 [ 129.893212][ T6305] page_pool_release+0xf4/0x7d0 [ 129.895094][ T6305] page_pool_destroy+0x10a/0x4c0 [ 129.897170][ T6305] bpf_test_run_xdp_live+0x3a1/0x500 [ 129.899079][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 129.901300][ T6305] __sys_bpf+0xfc6/0x49a0 [ 129.903115][ T6305] __x64_sys_bpf+0x78/0xc0 [ 129.904817][ T6305] do_syscall_64+0xcd/0x250 [ 129.906496][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.908568][ T6305] Modules linked in: [ 129.910027][ T6305] CPU: 3 UID: 0 PID: 6305 Comm: syz.1.66 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 129.914161][ T6305] Tainted: [B]=BAD_PAGE [ 129.915650][ T6305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 129.919478][ T6305] Call Trace: [ 129.921007][ T6305] [ 129.922150][ T6305] dump_stack_lvl+0x16c/0x1f0 [ 129.924173][ T6305] bad_page+0xb3/0x1f0 [ 129.925731][ T6305] ? __pfx_bad_page+0x10/0x10 [ 129.927537][ T6305] ? page_bad_reason+0x9d/0x1e0 [ 129.929324][ T6305] free_unref_page+0x657/0xdc0 [ 129.931061][ T6305] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 129.933175][ T6305] ? __phys_addr+0xc6/0x150 [ 129.934813][ T6305] skb_free_head+0xa0/0x1d0 [ 129.936417][ T6305] skb_release_data+0x560/0x730 [ 129.938209][ T6305] sk_skb_reason_drop+0x129/0x1a0 [ 129.939976][ T6305] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 129.942467][ T6305] ? kernel_text_address+0x8d/0x100 [ 129.944657][ T6305] ? hlock_class+0x4e/0x130 [ 129.946634][ T6305] ? __lock_acquire+0x163e/0x3ce0 [ 129.948802][ T6305] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 129.951888][ T6305] ? hlock_class+0x4e/0x130 [ 129.953556][ T6305] ? __lock_acquire+0xbdd/0x3ce0 [ 129.955374][ T6305] ? __pfx___lock_acquire+0x10/0x10 [ 129.957260][ T6305] __netif_receive_skb_list_core+0x357/0x950 [ 129.959397][ T6305] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 129.961709][ T6305] ? trace_lock_acquire+0x14a/0x1d0 [ 129.963602][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 129.965909][ T6305] ? lock_acquire+0x2f/0xb0 [ 129.967568][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 129.969766][ T6305] netif_receive_skb_list_internal+0x753/0xdb0 [ 129.971897][ T6305] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 129.974572][ T6305] ? __pfx_eth_type_trans+0x10/0x10 [ 129.976413][ T6305] ? __build_skb_around+0x278/0x3b0 [ 129.978268][ T6305] netif_receive_skb_list+0x4f/0x4a0 [ 129.980134][ T6305] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 129.982307][ T6305] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 129.984600][ T6305] ? bpf_test_timer_continue+0x150/0x3d0 [ 129.986582][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 129.988444][ T6305] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 129.990494][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 129.992735][ T6305] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 129.994905][ T6305] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 129.997045][ T6305] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 129.999001][ T6305] ? 0xffffffffa00045c0 [ 130.000558][ T6305] ? 0xffffffffa00045c0 [ 130.002182][ T6305] ? 0xffffffffa00045c0 [ 130.003784][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 130.005946][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 130.007903][ T6305] ? lock_acquire+0x2f/0xb0 [ 130.009525][ T6305] ? __fget_files+0x40/0x3f0 [ 130.011187][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 130.013221][ T6305] ? fput+0x30/0x390 [ 130.015141][ T6305] ? __bpf_prog_get+0xa0/0x290 [ 130.017013][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 130.019206][ T6305] __sys_bpf+0xfc6/0x49a0 [ 130.020896][ T6305] ? __pfx___sys_bpf+0x10/0x10 [ 130.023118][ T6305] ? __schedule+0xe5d/0x5730 [ 130.025592][ T6305] ? __fget_files+0x23a/0x3f0 [ 130.028140][ T6305] ? do_futex+0x123/0x350 [ 130.029785][ T6305] ? __pfx_do_futex+0x10/0x10 [ 130.031474][ T6305] ? xfd_validate_state+0x5d/0x180 [ 130.033277][ T6305] ? rcu_is_watching+0x12/0xc0 [ 130.035023][ T6305] __x64_sys_bpf+0x78/0xc0 [ 130.036616][ T6305] ? lockdep_hardirqs_on+0x7c/0x110 [ 130.038481][ T6305] do_syscall_64+0xcd/0x250 [ 130.040106][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.042336][ T6305] RIP: 0033:0x7fd45b57e719 [ 130.043847][ T6305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.050632][ T6305] RSP: 002b:00007fd45c319038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 130.053585][ T6305] RAX: ffffffffffffffda RBX: 00007fd45b736058 RCX: 00007fd45b57e719 [ 130.056399][ T6305] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 130.059997][ T6305] RBP: 00007fd45b5f132e R08: 0000000000000000 R09: 0000000000000000 [ 130.063490][ T6305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.066466][ T6305] R13: 0000000000000000 R14: 00007fd45b736058 R15: 00007ffd2e0c9fc8 [ 130.069244][ T6305] [ 130.070481][ T6305] BUG: Bad page state in process syz.1.66 pfn:4a34d [ 130.072832][ T6305] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804a34d000 pfn:0x4a34d [ 130.076347][ T6305] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 130.079363][ T6305] raw: 00fff00000000000 dead000000000040 ffff88804cdea000 0000000000000000 [ 130.082864][ T6305] raw: ffff88804a34d000 0000000000000001 00000000ffffffff 0000000000000000 [ 130.086220][ T6305] page dumped because: page_pool leak [ 130.088076][ T6305] page_owner tracks the page as allocated [ 130.090116][ T6305] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6305, tgid 6299 (syz.1.66), ts 127123815374, free_ts 126833659711 [ 130.096245][ T6305] post_alloc_hook+0x2d1/0x350 [ 130.098235][ T6305] get_page_from_freelist+0x101e/0x3070 [ 130.100372][ T6305] __alloc_pages_noprof+0x223/0x25a0 [ 130.102525][ T6305] alloc_pages_bulk_noprof+0x77c/0x1110 [ 130.104575][ T6305] __page_pool_alloc_pages_slow+0x18f/0x770 [ 130.106751][ T6305] page_pool_alloc_netmem+0xc4/0x160 [ 130.108742][ T6305] page_pool_alloc_pages+0x1a/0x60 [ 130.110752][ T6305] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 130.113529][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 130.115804][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 130.117889][ T6305] __sys_bpf+0xfc6/0x49a0 [ 130.119971][ T6305] __x64_sys_bpf+0x78/0xc0 [ 130.121568][ T6305] do_syscall_64+0xcd/0x250 [ 130.123302][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.125416][ T6305] page last free pid 6281 tgid 6279 stack trace: [ 130.127652][ T6305] free_unref_page+0x5f4/0xdc0 [ 130.129440][ T6305] __folio_put+0x30d/0x3d0 [ 130.131024][ T6305] put_page+0x21e/0x280 [ 130.132511][ T6305] page_pool_return_page+0x400/0x520 [ 130.134415][ T6305] page_pool_release+0xf4/0x7d0 [ 130.136117][ T6305] page_pool_destroy+0x10a/0x4c0 [ 130.138221][ T6305] bpf_test_run_xdp_live+0x3a1/0x500 [ 130.140692][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 130.142711][ T6305] __sys_bpf+0xfc6/0x49a0 [ 130.144293][ T6305] __x64_sys_bpf+0x78/0xc0 [ 130.145991][ T6305] do_syscall_64+0xcd/0x250 [ 130.147799][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.150288][ T6305] Modules linked in: [ 130.151894][ T6305] CPU: 3 UID: 0 PID: 6305 Comm: syz.1.66 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 130.156708][ T6305] Tainted: [B]=BAD_PAGE [ 130.158381][ T6305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 130.162230][ T6305] Call Trace: [ 130.163697][ T6305] [ 130.164755][ T6305] dump_stack_lvl+0x16c/0x1f0 [ 130.166537][ T6305] bad_page+0xb3/0x1f0 [ 130.167998][ T6305] ? __pfx_bad_page+0x10/0x10 [ 130.169676][ T6305] ? page_bad_reason+0x9d/0x1e0 [ 130.171434][ T6305] free_unref_page+0x657/0xdc0 [ 130.173225][ T6305] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 130.175543][ T6305] ? __phys_addr+0xc6/0x150 [ 130.177259][ T6305] skb_free_head+0xa0/0x1d0 [ 130.179151][ T6305] skb_release_data+0x560/0x730 [ 130.181236][ T6305] sk_skb_reason_drop+0x129/0x1a0 [ 130.183166][ T6305] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 130.185538][ T6305] ? kernel_text_address+0x8d/0x100 [ 130.187421][ T6305] ? hlock_class+0x4e/0x130 [ 130.189029][ T6305] ? __lock_acquire+0x163e/0x3ce0 [ 130.190807][ T6305] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 130.193196][ T6305] ? hlock_class+0x4e/0x130 [ 130.194723][ T6305] ? __lock_acquire+0xbdd/0x3ce0 [ 130.196373][ T6305] ? __pfx___lock_acquire+0x10/0x10 [ 130.198154][ T6305] __netif_receive_skb_list_core+0x357/0x950 [ 130.200260][ T6305] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 130.202396][ T6305] ? trace_lock_acquire+0x14a/0x1d0 [ 130.204122][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 130.206303][ T6305] ? lock_acquire+0x2f/0xb0 [ 130.207923][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 130.210169][ T6305] netif_receive_skb_list_internal+0x753/0xdb0 [ 130.212452][ T6305] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 130.215025][ T6305] ? __pfx_eth_type_trans+0x10/0x10 [ 130.217103][ T6305] ? __build_skb_around+0x278/0x3b0 [ 130.219216][ T6305] netif_receive_skb_list+0x4f/0x4a0 [ 130.221217][ T6305] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 130.223461][ T6305] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 130.225859][ T6305] ? bpf_test_timer_continue+0x150/0x3d0 [ 130.227998][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 130.229961][ T6305] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 130.232073][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 130.234194][ T6305] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 130.236325][ T6305] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 130.238441][ T6305] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 130.240354][ T6305] ? 0xffffffffa00045c0 [ 130.242024][ T6305] ? 0xffffffffa00045c0 [ 130.243769][ T6305] ? 0xffffffffa00045c0 [ 130.245527][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 130.248105][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 130.250265][ T6305] ? lock_acquire+0x2f/0xb0 [ 130.251864][ T6305] ? __fget_files+0x40/0x3f0 [ 130.253513][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 130.255525][ T6305] ? fput+0x30/0x390 [ 130.256859][ T6305] ? __bpf_prog_get+0xa0/0x290 [ 130.258463][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 130.260485][ T6305] __sys_bpf+0xfc6/0x49a0 [ 130.261775][ T6305] ? __pfx___sys_bpf+0x10/0x10 [ 130.263038][ T6305] ? __schedule+0xe5d/0x5730 [ 130.264644][ T6305] ? __fget_files+0x23a/0x3f0 [ 130.266381][ T6305] ? do_futex+0x123/0x350 [ 130.267943][ T6305] ? __pfx_do_futex+0x10/0x10 [ 130.269630][ T6305] ? xfd_validate_state+0x5d/0x180 [ 130.271418][ T6305] ? rcu_is_watching+0x12/0xc0 [ 130.273180][ T6305] __x64_sys_bpf+0x78/0xc0 [ 130.274883][ T6305] ? lockdep_hardirqs_on+0x7c/0x110 [ 130.276856][ T6305] do_syscall_64+0xcd/0x250 [ 130.278560][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.280913][ T6305] RIP: 0033:0x7fd45b57e719 [ 130.282471][ T6305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.289436][ T6305] RSP: 002b:00007fd45c319038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 130.292733][ T6305] RAX: ffffffffffffffda RBX: 00007fd45b736058 RCX: 00007fd45b57e719 [ 130.295092][ T6305] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 130.298010][ T6305] RBP: 00007fd45b5f132e R08: 0000000000000000 R09: 0000000000000000 [ 130.301947][ T6305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.304349][ T6305] R13: 0000000000000000 R14: 00007fd45b736058 R15: 00007ffd2e0c9fc8 [ 130.306462][ T6305] [ 130.307368][ T6305] BUG: Bad page state in process syz.1.66 pfn:2fb76 [ 130.309117][ T6305] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802fb76000 pfn:0x2fb76 [ 130.312803][ T6305] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 130.315856][ T6305] raw: 00fff00000000000 dead000000000040 ffff88804cdea000 0000000000000000 [ 130.319717][ T6305] raw: ffff88802fb76000 0000000000000001 00000000ffffffff 0000000000000000 [ 130.323885][ T6305] page dumped because: page_pool leak [ 130.325928][ T6305] page_owner tracks the page as allocated [ 130.328362][ T6305] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6305, tgid 6299 (syz.1.66), ts 127123810985, free_ts 126833663760 [ 130.334166][ T6305] post_alloc_hook+0x2d1/0x350 [ 130.335610][ T6305] get_page_from_freelist+0x101e/0x3070 [ 130.337169][ T6305] __alloc_pages_noprof+0x223/0x25a0 [ 130.339068][ T6305] alloc_pages_bulk_noprof+0x77c/0x1110 [ 130.340986][ T6305] __page_pool_alloc_pages_slow+0x18f/0x770 [ 130.342854][ T6305] page_pool_alloc_netmem+0xc4/0x160 [ 130.344625][ T6305] page_pool_alloc_pages+0x1a/0x60 [ 130.346269][ T6305] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 130.348406][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 130.350054][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 130.352122][ T6305] __sys_bpf+0xfc6/0x49a0 [ 130.353735][ T6305] __x64_sys_bpf+0x78/0xc0 [ 130.355200][ T6305] do_syscall_64+0xcd/0x250 [ 130.356741][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.358600][ T6305] page last free pid 6281 tgid 6279 stack trace: [ 130.360514][ T6305] free_unref_page+0x5f4/0xdc0 [ 130.362018][ T6305] __folio_put+0x30d/0x3d0 [ 130.363449][ T6305] put_page+0x21e/0x280 [ 130.364715][ T6305] page_pool_return_page+0x400/0x520 [ 130.366507][ T6305] page_pool_release+0xf4/0x7d0 [ 130.368224][ T6305] page_pool_destroy+0x10a/0x4c0 [ 130.369728][ T6305] bpf_test_run_xdp_live+0x3a1/0x500 [ 130.371247][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 130.372844][ T6305] __sys_bpf+0xfc6/0x49a0 [ 130.374103][ T6305] __x64_sys_bpf+0x78/0xc0 [ 130.375488][ T6305] do_syscall_64+0xcd/0x250 [ 130.376817][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.378961][ T6305] Modules linked in: [ 130.380579][ T6305] CPU: 3 UID: 0 PID: 6305 Comm: syz.1.66 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 130.384601][ T6305] Tainted: [B]=BAD_PAGE [ 130.386163][ T6305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 130.389811][ T6305] Call Trace: [ 130.391017][ T6305] [ 130.392044][ T6305] dump_stack_lvl+0x16c/0x1f0 [ 130.393791][ T6305] bad_page+0xb3/0x1f0 [ 130.395190][ T6305] ? __pfx_bad_page+0x10/0x10 [ 130.397605][ T6305] ? page_bad_reason+0x9d/0x1e0 [ 130.399552][ T6305] free_unref_page+0x657/0xdc0 [ 130.401058][ T6305] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 130.403297][ T6305] ? __phys_addr+0xc6/0x150 [ 130.404719][ T6305] skb_free_head+0xa0/0x1d0 [ 130.406252][ T6305] skb_release_data+0x560/0x730 [ 130.407978][ T6305] sk_skb_reason_drop+0x129/0x1a0 [ 130.409627][ T6305] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 130.411559][ T6305] ? kernel_text_address+0x8d/0x100 [ 130.413368][ T6305] ? hlock_class+0x4e/0x130 [ 130.414954][ T6305] ? __lock_acquire+0x163e/0x3ce0 [ 130.416710][ T6305] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 130.419193][ T6305] ? hlock_class+0x4e/0x130 [ 130.420805][ T6305] ? __lock_acquire+0xbdd/0x3ce0 [ 130.422624][ T6305] ? __pfx___lock_acquire+0x10/0x10 [ 130.424362][ T6305] __netif_receive_skb_list_core+0x357/0x950 [ 130.426004][ T6305] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 130.428177][ T6305] ? trace_lock_acquire+0x14a/0x1d0 [ 130.430362][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 130.433026][ T6305] ? lock_acquire+0x2f/0xb0 [ 130.435010][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 130.437559][ T6305] netif_receive_skb_list_internal+0x753/0xdb0 [ 130.440020][ T6305] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 130.442573][ T6305] ? __pfx_eth_type_trans+0x10/0x10 [ 130.444510][ T6305] ? __build_skb_around+0x278/0x3b0 [ 130.446353][ T6305] netif_receive_skb_list+0x4f/0x4a0 [ 130.448221][ T6305] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 130.450393][ T6305] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 130.452370][ T6305] ? bpf_test_timer_continue+0x150/0x3d0 [ 130.454790][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 130.456329][ T6305] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 130.458353][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 130.460247][ T6305] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 130.462235][ T6305] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 130.464280][ T6305] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 130.466174][ T6305] ? 0xffffffffa00045c0 [ 130.467542][ T6305] ? 0xffffffffa00045c0 [ 130.468804][ T6305] ? 0xffffffffa00045c0 [ 130.470106][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 130.471996][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 130.473679][ T6305] ? lock_acquire+0x2f/0xb0 [ 130.475291][ T6305] ? __fget_files+0x40/0x3f0 [ 130.476998][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 130.479768][ T6305] ? fput+0x30/0x390 [ 130.481615][ T6305] ? __bpf_prog_get+0xa0/0x290 [ 130.483591][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 130.485966][ T6305] __sys_bpf+0xfc6/0x49a0 [ 130.487679][ T6305] ? __pfx___sys_bpf+0x10/0x10 [ 130.489497][ T6305] ? __schedule+0xe5d/0x5730 [ 130.491275][ T6305] ? __fget_files+0x23a/0x3f0 [ 130.493036][ T6305] ? do_futex+0x123/0x350 [ 130.494573][ T6305] ? __pfx_do_futex+0x10/0x10 [ 130.496314][ T6305] ? xfd_validate_state+0x5d/0x180 [ 130.498794][ T6305] ? rcu_is_watching+0x12/0xc0 [ 130.500645][ T6305] __x64_sys_bpf+0x78/0xc0 [ 130.502898][ T6305] ? lockdep_hardirqs_on+0x7c/0x110 [ 130.504847][ T6305] do_syscall_64+0xcd/0x250 [ 130.506467][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.508591][ T6305] RIP: 0033:0x7fd45b57e719 [ 130.510208][ T6305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.519152][ T6305] RSP: 002b:00007fd45c319038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 130.523021][ T6305] RAX: ffffffffffffffda RBX: 00007fd45b736058 RCX: 00007fd45b57e719 [ 130.525732][ T6305] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 130.528449][ T6305] RBP: 00007fd45b5f132e R08: 0000000000000000 R09: 0000000000000000 [ 130.531219][ T6305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.533994][ T6305] R13: 0000000000000000 R14: 00007fd45b736058 R15: 00007ffd2e0c9fc8 [ 130.536718][ T6305] [ 130.538026][ T6305] BUG: Bad page state in process syz.1.66 pfn:24444 [ 130.541385][ T6305] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888024444d90 pfn:0x24444 [ 130.545422][ T6305] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 130.548365][ T6305] raw: 00fff00000000000 dead000000000040 ffff88804cdea000 0000000000000000 [ 130.551515][ T6305] raw: ffff888024444d90 0000000000000001 00000000ffffffff 0000000000000000 [ 130.554483][ T6305] page dumped because: page_pool leak [ 130.556273][ T6305] page_owner tracks the page as allocated [ 130.558222][ T6305] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6305, tgid 6299 (syz.1.66), ts 127123806601, free_ts 126833669963 [ 130.564040][ T6305] post_alloc_hook+0x2d1/0x350 [ 130.565707][ T6305] get_page_from_freelist+0x101e/0x3070 [ 130.567585][ T6305] __alloc_pages_noprof+0x223/0x25a0 [ 130.569493][ T6305] alloc_pages_bulk_noprof+0x77c/0x1110 [ 130.571602][ T6305] __page_pool_alloc_pages_slow+0x18f/0x770 [ 130.573843][ T6305] page_pool_alloc_netmem+0xc4/0x160 [ 130.575882][ T6305] page_pool_alloc_pages+0x1a/0x60 [ 130.577933][ T6305] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 130.580311][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 130.582191][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 130.584118][ T6305] __sys_bpf+0xfc6/0x49a0 [ 130.585617][ T6305] __x64_sys_bpf+0x78/0xc0 [ 130.587192][ T6305] do_syscall_64+0xcd/0x250 [ 130.588867][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.590904][ T6305] page last free pid 6281 tgid 6279 stack trace: [ 130.593211][ T6305] free_unref_page+0x5f4/0xdc0 [ 130.595105][ T6305] __folio_put+0x30d/0x3d0 [ 130.597043][ T6305] put_page+0x21e/0x280 [ 130.599161][ T6305] page_pool_return_page+0x400/0x520 [ 130.601503][ T6305] page_pool_release+0xf4/0x7d0 [ 130.603646][ T6305] page_pool_destroy+0x10a/0x4c0 [ 130.605472][ T6305] bpf_test_run_xdp_live+0x3a1/0x500 [ 130.607285][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 130.609128][ T6305] __sys_bpf+0xfc6/0x49a0 [ 130.610627][ T6305] __x64_sys_bpf+0x78/0xc0 [ 130.612148][ T6305] do_syscall_64+0xcd/0x250 [ 130.613710][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.615787][ T6305] Modules linked in: [ 130.617962][ T6305] CPU: 3 UID: 0 PID: 6305 Comm: syz.1.66 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 130.622631][ T6305] Tainted: [B]=BAD_PAGE [ 130.624170][ T6305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 130.628338][ T6305] Call Trace: [ 130.629712][ T6305] [ 130.630826][ T6305] dump_stack_lvl+0x16c/0x1f0 [ 130.632586][ T6305] bad_page+0xb3/0x1f0 [ 130.634091][ T6305] ? __pfx_bad_page+0x10/0x10 [ 130.635846][ T6305] ? page_bad_reason+0x9d/0x1e0 [ 130.637693][ T6305] free_unref_page+0x657/0xdc0 [ 130.639475][ T6305] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 130.641107][ T6305] ? __phys_addr+0xc6/0x150 [ 130.642427][ T6305] skb_free_head+0xa0/0x1d0 [ 130.643787][ T6305] skb_release_data+0x560/0x730 [ 130.645226][ T6305] sk_skb_reason_drop+0x129/0x1a0 [ 130.646708][ T6305] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 130.648820][ T6305] ? kernel_text_address+0x8d/0x100 [ 130.650516][ T6305] ? hlock_class+0x4e/0x130 [ 130.652385][ T6305] ? __lock_acquire+0x163e/0x3ce0 [ 130.654348][ T6305] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 130.657138][ T6305] ? hlock_class+0x4e/0x130 [ 130.658926][ T6305] ? __lock_acquire+0xbdd/0x3ce0 [ 130.660518][ T6305] ? __pfx___lock_acquire+0x10/0x10 [ 130.662667][ T6305] __netif_receive_skb_list_core+0x357/0x950 [ 130.664338][ T6305] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 130.666248][ T6305] ? trace_lock_acquire+0x14a/0x1d0 [ 130.668009][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 130.669724][ T6305] ? lock_acquire+0x2f/0xb0 [ 130.671058][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 130.672806][ T6305] netif_receive_skb_list_internal+0x753/0xdb0 [ 130.674574][ T6305] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 130.676511][ T6305] ? __pfx_eth_type_trans+0x10/0x10 [ 130.678144][ T6305] ? __build_skb_around+0x278/0x3b0 [ 130.679793][ T6305] netif_receive_skb_list+0x4f/0x4a0 [ 130.681536][ T6305] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 130.683794][ T6305] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 130.686621][ T6305] ? bpf_test_timer_continue+0x150/0x3d0 [ 130.689076][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 130.691025][ T6305] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 130.693074][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 130.695171][ T6305] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 130.697126][ T6305] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 130.699204][ T6305] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 130.701031][ T6305] ? 0xffffffffa00045c0 [ 130.702417][ T6305] ? 0xffffffffa00045c0 [ 130.703801][ T6305] ? 0xffffffffa00045c0 [ 130.705191][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 130.707276][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 130.709111][ T6305] ? lock_acquire+0x2f/0xb0 [ 130.710687][ T6305] ? __fget_files+0x40/0x3f0 [ 130.712280][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 130.714336][ T6305] ? fput+0x30/0x390 [ 130.715655][ T6305] ? __bpf_prog_get+0xa0/0x290 [ 130.717372][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 130.719698][ T6305] __sys_bpf+0xfc6/0x49a0 [ 130.721368][ T6305] ? __pfx___sys_bpf+0x10/0x10 [ 130.723489][ T6305] ? __schedule+0xe5d/0x5730 [ 130.725546][ T6305] ? __fget_files+0x23a/0x3f0 [ 130.727358][ T6305] ? do_futex+0x123/0x350 [ 130.728984][ T6305] ? __pfx_do_futex+0x10/0x10 [ 130.730733][ T6305] ? xfd_validate_state+0x5d/0x180 [ 130.732548][ T6305] ? rcu_is_watching+0x12/0xc0 [ 130.734158][ T6305] __x64_sys_bpf+0x78/0xc0 [ 130.735613][ T6305] ? lockdep_hardirqs_on+0x7c/0x110 [ 130.737449][ T6305] do_syscall_64+0xcd/0x250 [ 130.739064][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.741078][ T6305] RIP: 0033:0x7fd45b57e719 [ 130.742678][ T6305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.749458][ T6305] RSP: 002b:00007fd45c319038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 130.752779][ T6305] RAX: ffffffffffffffda RBX: 00007fd45b736058 RCX: 00007fd45b57e719 [ 130.755674][ T6305] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 130.758434][ T6305] RBP: 00007fd45b5f132e R08: 0000000000000000 R09: 0000000000000000 [ 130.761145][ T6305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.763927][ T6305] R13: 0000000000000000 R14: 00007fd45b736058 R15: 00007ffd2e0c9fc8 [ 130.766522][ T6305] [ 130.767742][ T6305] BUG: Bad page state in process syz.1.66 pfn:35e64 [ 130.770243][ T6305] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888035e64000 pfn:0x35e64 [ 130.773824][ T6305] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 130.776320][ T6305] raw: 00fff00000000000 dead000000000040 ffff88804cdea000 0000000000000000 [ 130.779606][ T6305] raw: ffff888035e64000 0000000000000001 00000000ffffffff 0000000000000000 [ 130.782980][ T6305] page dumped because: page_pool leak [ 130.785029][ T6305] page_owner tracks the page as allocated [ 130.787399][ T6305] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6305, tgid 6299 (syz.1.66), ts 127123801983, free_ts 126833673950 [ 130.793312][ T6305] post_alloc_hook+0x2d1/0x350 [ 130.795166][ T6305] get_page_from_freelist+0x101e/0x3070 [ 130.797241][ T6305] __alloc_pages_noprof+0x223/0x25a0 [ 130.799214][ T6305] alloc_pages_bulk_noprof+0x77c/0x1110 [ 130.801141][ T6305] __page_pool_alloc_pages_slow+0x18f/0x770 [ 130.803190][ T6305] page_pool_alloc_netmem+0xc4/0x160 [ 130.805001][ T6305] page_pool_alloc_pages+0x1a/0x60 [ 130.806788][ T6305] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 130.808973][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 130.810837][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 130.812780][ T6305] __sys_bpf+0xfc6/0x49a0 [ 130.814454][ T6305] __x64_sys_bpf+0x78/0xc0 [ 130.816219][ T6305] do_syscall_64+0xcd/0x250 [ 130.818165][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.820797][ T6305] page last free pid 6281 tgid 6279 stack trace: [ 130.823552][ T6305] free_unref_page+0x5f4/0xdc0 [ 130.825231][ T6305] __folio_put+0x30d/0x3d0 [ 130.826980][ T6305] put_page+0x21e/0x280 [ 130.828497][ T6305] page_pool_return_page+0x400/0x520 [ 130.830556][ T6305] page_pool_release+0xf4/0x7d0 [ 130.832253][ T6305] page_pool_destroy+0x10a/0x4c0 [ 130.833995][ T6305] bpf_test_run_xdp_live+0x3a1/0x500 [ 130.835840][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 130.837687][ T6305] __sys_bpf+0xfc6/0x49a0 [ 130.839281][ T6305] __x64_sys_bpf+0x78/0xc0 [ 130.840920][ T6305] do_syscall_64+0xcd/0x250 [ 130.842664][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.844915][ T6305] Modules linked in: [ 130.846370][ T6305] CPU: 3 UID: 0 PID: 6305 Comm: syz.1.66 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 130.850618][ T6305] Tainted: [B]=BAD_PAGE [ 130.852094][ T6305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 130.855869][ T6305] Call Trace: [ 130.857025][ T6305] [ 130.858040][ T6305] dump_stack_lvl+0x16c/0x1f0 [ 130.859738][ T6305] bad_page+0xb3/0x1f0 [ 130.861214][ T6305] ? __pfx_bad_page+0x10/0x10 [ 130.862856][ T6305] ? page_bad_reason+0x9d/0x1e0 [ 130.864599][ T6305] free_unref_page+0x657/0xdc0 [ 130.866312][ T6305] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 130.868405][ T6305] ? __phys_addr+0xc6/0x150 [ 130.869944][ T6305] skb_free_head+0xa0/0x1d0 [ 130.871570][ T6305] skb_release_data+0x560/0x730 [ 130.873267][ T6305] sk_skb_reason_drop+0x129/0x1a0 [ 130.875046][ T6305] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 130.877373][ T6305] ? kernel_text_address+0x8d/0x100 [ 130.879215][ T6305] ? hlock_class+0x4e/0x130 [ 130.880838][ T6305] ? __lock_acquire+0x163e/0x3ce0 [ 130.882589][ T6305] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 130.884956][ T6305] ? hlock_class+0x4e/0x130 [ 130.886607][ T6305] ? __lock_acquire+0xbdd/0x3ce0 [ 130.888348][ T6305] ? __pfx___lock_acquire+0x10/0x10 [ 130.890209][ T6305] __netif_receive_skb_list_core+0x357/0x950 [ 130.892344][ T6305] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 130.894690][ T6305] ? trace_lock_acquire+0x14a/0x1d0 [ 130.896225][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 130.898322][ T6305] ? lock_acquire+0x2f/0xb0 [ 130.900369][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 130.902516][ T6305] netif_receive_skb_list_internal+0x753/0xdb0 [ 130.904260][ T6305] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 130.906170][ T6305] ? __pfx_eth_type_trans+0x10/0x10 [ 130.907587][ T6305] ? __build_skb_around+0x278/0x3b0 [ 130.908949][ T6305] netif_receive_skb_list+0x4f/0x4a0 [ 130.910355][ T6305] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 130.911996][ T6305] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 130.913722][ T6305] ? bpf_test_timer_continue+0x150/0x3d0 [ 130.915287][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 130.916816][ T6305] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 130.918358][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 130.919906][ T6305] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 130.921476][ T6305] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 130.923029][ T6305] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 130.924418][ T6305] ? 0xffffffffa00045c0 [ 130.925513][ T6305] ? 0xffffffffa00045c0 [ 130.926763][ T6305] ? 0xffffffffa00045c0 [ 130.927880][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 130.929452][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 130.930893][ T6305] ? lock_acquire+0x2f/0xb0 [ 130.932109][ T6305] ? __fget_files+0x40/0x3f0 [ 130.933345][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 130.934879][ T6305] ? fput+0x30/0x390 [ 130.936232][ T6305] ? __bpf_prog_get+0xa0/0x290 [ 130.937566][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 130.939215][ T6305] __sys_bpf+0xfc6/0x49a0 [ 130.940376][ T6305] ? __pfx___sys_bpf+0x10/0x10 [ 130.941846][ T6305] ? __schedule+0xe5d/0x5730 [ 130.943224][ T6305] ? __fget_files+0x23a/0x3f0 [ 130.944701][ T6305] ? do_futex+0x123/0x350 [ 130.946004][ T6305] ? __pfx_do_futex+0x10/0x10 [ 130.947401][ T6305] ? xfd_validate_state+0x5d/0x180 [ 130.948854][ T6305] ? rcu_is_watching+0x12/0xc0 [ 130.950228][ T6305] __x64_sys_bpf+0x78/0xc0 [ 130.951511][ T6305] ? lockdep_hardirqs_on+0x7c/0x110 [ 130.952908][ T6305] do_syscall_64+0xcd/0x250 [ 130.954135][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.955705][ T6305] RIP: 0033:0x7fd45b57e719 [ 130.956935][ T6305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.961968][ T6305] RSP: 002b:00007fd45c319038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 130.964161][ T6305] RAX: ffffffffffffffda RBX: 00007fd45b736058 RCX: 00007fd45b57e719 [ 130.966251][ T6305] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 130.968322][ T6305] RBP: 00007fd45b5f132e R08: 0000000000000000 R09: 0000000000000000 [ 130.970402][ T6305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.972468][ T6305] R13: 0000000000000000 R14: 00007fd45b736058 R15: 00007ffd2e0c9fc8 [ 130.974549][ T6305] [ 130.975481][ T6305] BUG: Bad page state in process syz.1.66 pfn:2879d [ 130.977235][ T6305] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802879dca8 pfn:0x2879d [ 130.979909][ T6305] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 130.981641][ T6305] raw: 00fff00000000000 dead000000000040 ffff88804cdea000 0000000000000000 [ 130.983859][ T6305] raw: ffff88802879dca8 0000000000000001 00000000ffffffff 0000000000000000 [ 130.986105][ T6305] page dumped because: page_pool leak [ 130.987525][ T6305] page_owner tracks the page as allocated [ 130.989061][ T6305] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6305, tgid 6299 (syz.1.66), ts 127123797667, free_ts 126833694883 [ 130.993358][ T6305] post_alloc_hook+0x2d1/0x350 [ 130.994651][ T6305] get_page_from_freelist+0x101e/0x3070 [ 130.996143][ T6305] __alloc_pages_noprof+0x223/0x25a0 [ 130.997570][ T6305] alloc_pages_bulk_noprof+0x77c/0x1110 [ 130.999159][ T6305] __page_pool_alloc_pages_slow+0x18f/0x770 [ 131.000835][ T6305] page_pool_alloc_netmem+0xc4/0x160 [ 131.002344][ T6305] page_pool_alloc_pages+0x1a/0x60 [ 131.003877][ T6305] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 131.005723][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 131.007282][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 131.008755][ T6305] __sys_bpf+0xfc6/0x49a0 [ 131.009896][ T6305] __x64_sys_bpf+0x78/0xc0 [ 131.011107][ T6305] do_syscall_64+0xcd/0x250 [ 131.012336][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.013910][ T6305] page last free pid 6281 tgid 6279 stack trace: [ 131.015575][ T6305] free_unref_page+0x5f4/0xdc0 [ 131.016842][ T6305] __folio_put+0x30d/0x3d0 [ 131.018023][ T6305] put_page+0x21e/0x280 [ 131.019168][ T6305] page_pool_return_page+0x400/0x520 [ 131.020525][ T6305] page_pool_release+0xf4/0x7d0 [ 131.021792][ T6305] page_pool_destroy+0x10a/0x4c0 [ 131.023101][ T6305] bpf_test_run_xdp_live+0x3a1/0x500 [ 131.024490][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 131.025907][ T6305] __sys_bpf+0xfc6/0x49a0 [ 131.027062][ T6305] __x64_sys_bpf+0x78/0xc0 [ 131.028234][ T6305] do_syscall_64+0xcd/0x250 [ 131.029471][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.031030][ T6305] Modules linked in: [ 131.032013][ T6305] CPU: 3 UID: 0 PID: 6305 Comm: syz.1.66 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 131.035074][ T6305] Tainted: [B]=BAD_PAGE [ 131.036178][ T6305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 131.039044][ T6305] Call Trace: [ 131.039932][ T6305] [ 131.040729][ T6305] dump_stack_lvl+0x16c/0x1f0 [ 131.041958][ T6305] bad_page+0xb3/0x1f0 [ 131.043126][ T6305] ? __pfx_bad_page+0x10/0x10 [ 131.044374][ T6305] ? page_bad_reason+0x9d/0x1e0 [ 131.045654][ T6305] free_unref_page+0x657/0xdc0 [ 131.046896][ T6305] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 131.048472][ T6305] ? __phys_addr+0xc6/0x150 [ 131.049669][ T6305] skb_free_head+0xa0/0x1d0 [ 131.050879][ T6305] skb_release_data+0x560/0x730 [ 131.052163][ T6305] sk_skb_reason_drop+0x129/0x1a0 [ 131.053490][ T6305] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 131.055236][ T6305] ? kernel_text_address+0x8d/0x100 [ 131.056599][ T6305] ? hlock_class+0x4e/0x130 [ 131.057790][ T6305] ? __lock_acquire+0x163e/0x3ce0 [ 131.059152][ T6305] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 131.061237][ T6305] ? hlock_class+0x4e/0x130 [ 131.062645][ T6305] ? __lock_acquire+0xbdd/0x3ce0 [ 131.064057][ T6305] ? __pfx___lock_acquire+0x10/0x10 [ 131.065411][ T6305] __netif_receive_skb_list_core+0x357/0x950 [ 131.067010][ T6305] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 131.068693][ T6305] ? trace_lock_acquire+0x14a/0x1d0 [ 131.070058][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 131.071726][ T6305] ? lock_acquire+0x2f/0xb0 [ 131.072924][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 131.074962][ T6305] netif_receive_skb_list_internal+0x753/0xdb0 [ 131.076666][ T6305] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 131.078439][ T6305] ? __pfx_eth_type_trans+0x10/0x10 [ 131.079826][ T6305] ? __build_skb_around+0x278/0x3b0 [ 131.081203][ T6305] netif_receive_skb_list+0x4f/0x4a0 [ 131.082709][ T6305] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 131.084351][ T6305] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 131.086200][ T6305] ? bpf_test_timer_continue+0x150/0x3d0 [ 131.087699][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 131.089106][ T6305] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 131.090648][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 131.092217][ T6305] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 131.093825][ T6305] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 131.095494][ T6305] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 131.096985][ T6305] ? 0xffffffffa00045c0 [ 131.098159][ T6305] ? 0xffffffffa00045c0 [ 131.099257][ T6305] ? 0xffffffffa00045c0 [ 131.100361][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 131.101921][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 131.103451][ T6305] ? lock_acquire+0x2f/0xb0 [ 131.104666][ T6305] ? __fget_files+0x40/0x3f0 [ 131.105909][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 131.107453][ T6305] ? fput+0x30/0x390 [ 131.108496][ T6305] ? __bpf_prog_get+0xa0/0x290 [ 131.109761][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 131.111301][ T6305] __sys_bpf+0xfc6/0x49a0 [ 131.112456][ T6305] ? __pfx___sys_bpf+0x10/0x10 [ 131.113722][ T6305] ? __schedule+0xe5d/0x5730 [ 131.114958][ T6305] ? __fget_files+0x23a/0x3f0 [ 131.116202][ T6305] ? do_futex+0x123/0x350 [ 131.117347][ T6305] ? __pfx_do_futex+0x10/0x10 [ 131.118602][ T6305] ? xfd_validate_state+0x5d/0x180 [ 131.119914][ T6305] ? rcu_is_watching+0x12/0xc0 [ 131.121125][ T6305] __x64_sys_bpf+0x78/0xc0 [ 131.122272][ T6305] ? lockdep_hardirqs_on+0x7c/0x110 [ 131.123605][ T6305] do_syscall_64+0xcd/0x250 [ 131.124782][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.126306][ T6305] RIP: 0033:0x7fd45b57e719 [ 131.127444][ T6305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.132257][ T6305] RSP: 002b:00007fd45c319038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 131.134536][ T6305] RAX: ffffffffffffffda RBX: 00007fd45b736058 RCX: 00007fd45b57e719 [ 131.136488][ T6305] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 131.138495][ T6305] RBP: 00007fd45b5f132e R08: 0000000000000000 R09: 0000000000000000 [ 131.140698][ T6305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.143046][ T6305] R13: 0000000000000000 R14: 00007fd45b736058 R15: 00007ffd2e0c9fc8 [ 131.145398][ T6305] [ 131.146457][ T6305] BUG: Bad page state in process syz.1.66 pfn:31323 [ 131.148272][ T6305] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888031323d80 pfn:0x31323 [ 131.150805][ T6305] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 131.152565][ T6305] raw: 00fff00000000000 dead000000000040 ffff88804cdea000 0000000000000000 [ 131.154722][ T6305] raw: ffff888031323d80 0000000000000001 00000000ffffffff 0000000000000000 [ 131.156829][ T6305] page dumped because: page_pool leak [ 131.158190][ T6305] page_owner tracks the page as allocated [ 131.159731][ T6305] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6305, tgid 6299 (syz.1.66), ts 127123793217, free_ts 126833698783 [ 131.163933][ T6305] post_alloc_hook+0x2d1/0x350 [ 131.165141][ T6305] get_page_from_freelist+0x101e/0x3070 [ 131.166534][ T6305] __alloc_pages_noprof+0x223/0x25a0 [ 131.167890][ T6305] alloc_pages_bulk_noprof+0x77c/0x1110 [ 131.169347][ T6305] __page_pool_alloc_pages_slow+0x18f/0x770 [ 131.170856][ T6305] page_pool_alloc_netmem+0xc4/0x160 [ 131.172211][ T6305] page_pool_alloc_pages+0x1a/0x60 [ 131.173520][ T6305] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 131.175254][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 131.176685][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 131.178219][ T6305] __sys_bpf+0xfc6/0x49a0 [ 131.179408][ T6305] __x64_sys_bpf+0x78/0xc0 [ 131.180707][ T6305] do_syscall_64+0xcd/0x250 [ 131.182087][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.183714][ T6305] page last free pid 6281 tgid 6279 stack trace: [ 131.185295][ T6305] free_unref_page+0x5f4/0xdc0 [ 131.186544][ T6305] __folio_put+0x30d/0x3d0 [ 131.187678][ T6305] put_page+0x21e/0x280 [ 131.188750][ T6305] page_pool_return_page+0x400/0x520 [ 131.190066][ T6305] page_pool_release+0xf4/0x7d0 [ 131.191312][ T6305] page_pool_destroy+0x10a/0x4c0 [ 131.192536][ T6305] bpf_test_run_xdp_live+0x3a1/0x500 [ 131.193951][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 131.195339][ T6305] __sys_bpf+0xfc6/0x49a0 [ 131.196436][ T6305] __x64_sys_bpf+0x78/0xc0 [ 131.197529][ T6305] do_syscall_64+0xcd/0x250 [ 131.198771][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.200426][ T6305] Modules linked in: [ 131.201644][ T6305] CPU: 3 UID: 0 PID: 6305 Comm: syz.1.66 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 131.205073][ T6305] Tainted: [B]=BAD_PAGE [ 131.206183][ T6305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 131.208991][ T6305] Call Trace: [ 131.209887][ T6305] [ 131.210688][ T6305] dump_stack_lvl+0x16c/0x1f0 [ 131.212014][ T6305] bad_page+0xb3/0x1f0 [ 131.213183][ T6305] ? __pfx_bad_page+0x10/0x10 [ 131.214533][ T6305] ? page_bad_reason+0x9d/0x1e0 [ 131.215907][ T6305] free_unref_page+0x657/0xdc0 [ 131.217258][ T6305] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 131.219278][ T6305] ? __phys_addr+0xc6/0x150 [ 131.220547][ T6305] skb_free_head+0xa0/0x1d0 [ 131.221788][ T6305] skb_release_data+0x560/0x730 [ 131.223084][ T6305] sk_skb_reason_drop+0x129/0x1a0 [ 131.224414][ T6305] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 131.226155][ T6305] ? kernel_text_address+0x8d/0x100 [ 131.227503][ T6305] ? hlock_class+0x4e/0x130 [ 131.228701][ T6305] ? __lock_acquire+0x163e/0x3ce0 [ 131.230016][ T6305] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 131.232030][ T6305] ? hlock_class+0x4e/0x130 [ 131.233266][ T6305] ? __lock_acquire+0xbdd/0x3ce0 [ 131.234590][ T6305] ? __pfx___lock_acquire+0x10/0x10 [ 131.235985][ T6305] __netif_receive_skb_list_core+0x357/0x950 [ 131.237742][ T6305] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 131.239681][ T6305] ? trace_lock_acquire+0x14a/0x1d0 [ 131.241406][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 131.243205][ T6305] ? lock_acquire+0x2f/0xb0 [ 131.244419][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 131.246134][ T6305] netif_receive_skb_list_internal+0x753/0xdb0 [ 131.247798][ T6305] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 131.249578][ T6305] ? __pfx_eth_type_trans+0x10/0x10 [ 131.250994][ T6305] ? __build_skb_around+0x278/0x3b0 [ 131.252417][ T6305] netif_receive_skb_list+0x4f/0x4a0 [ 131.254097][ T6305] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 131.256073][ T6305] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 131.257996][ T6305] ? bpf_test_timer_continue+0x150/0x3d0 [ 131.259546][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 131.261087][ T6305] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 131.262621][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 131.264283][ T6305] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 131.265843][ T6305] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 131.267405][ T6305] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 131.268805][ T6305] ? 0xffffffffa00045c0 [ 131.269900][ T6305] ? 0xffffffffa00045c0 [ 131.271017][ T6305] ? 0xffffffffa00045c0 [ 131.272091][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 131.273626][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 131.275341][ T6305] ? lock_acquire+0x2f/0xb0 [ 131.276467][ T6305] ? __fget_files+0x40/0x3f0 [ 131.277624][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 131.279097][ T6305] ? fput+0x30/0x390 [ 131.280092][ T6305] ? __bpf_prog_get+0xa0/0x290 [ 131.281357][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 131.282856][ T6305] __sys_bpf+0xfc6/0x49a0 [ 131.284062][ T6305] ? __pfx___sys_bpf+0x10/0x10 [ 131.285381][ T6305] ? __schedule+0xe5d/0x5730 [ 131.286713][ T6305] ? __fget_files+0x23a/0x3f0 [ 131.287951][ T6305] ? do_futex+0x123/0x350 [ 131.289061][ T6305] ? __pfx_do_futex+0x10/0x10 [ 131.290266][ T6305] ? xfd_validate_state+0x5d/0x180 [ 131.291612][ T6305] ? rcu_is_watching+0x12/0xc0 [ 131.292870][ T6305] __x64_sys_bpf+0x78/0xc0 [ 131.294328][ T6305] ? lockdep_hardirqs_on+0x7c/0x110 [ 131.295773][ T6305] do_syscall_64+0xcd/0x250 [ 131.297171][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.298959][ T6305] RIP: 0033:0x7fd45b57e719 [ 131.300142][ T6305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.305270][ T6305] RSP: 002b:00007fd45c319038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 131.307525][ T6305] RAX: ffffffffffffffda RBX: 00007fd45b736058 RCX: 00007fd45b57e719 [ 131.309590][ T6305] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 131.312021][ T6305] RBP: 00007fd45b5f132e R08: 0000000000000000 R09: 0000000000000000 [ 131.314880][ T6305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.317785][ T6305] R13: 0000000000000000 R14: 00007fd45b736058 R15: 00007ffd2e0c9fc8 [ 131.320265][ T6305] [ 131.321177][ T6305] BUG: Bad page state in process syz.1.66 pfn:491d7 [ 131.323113][ T6305] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x7f625d0e3 pfn:0x491d7 [ 131.325708][ T6305] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 131.327787][ T6305] raw: 00fff00000000000 dead000000000040 ffff88804cdea000 0000000000000000 [ 131.330283][ T6305] raw: 00000007f625d0e3 0000000000000001 00000000ffffffff 0000000000000000 [ 131.332535][ T6305] page dumped because: page_pool leak [ 131.334083][ T6305] page_owner tracks the page as allocated [ 131.335707][ T6305] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6305, tgid 6299 (syz.1.66), ts 127123788780, free_ts 126833703167 [ 131.340089][ T6305] post_alloc_hook+0x2d1/0x350 [ 131.341344][ T6305] get_page_from_freelist+0x101e/0x3070 [ 131.342802][ T6305] __alloc_pages_noprof+0x223/0x25a0 [ 131.344181][ T6305] alloc_pages_bulk_noprof+0x77c/0x1110 [ 131.345625][ T6305] __page_pool_alloc_pages_slow+0x18f/0x770 [ 131.347181][ T6305] page_pool_alloc_netmem+0xc4/0x160 [ 131.348558][ T6305] page_pool_alloc_pages+0x1a/0x60 [ 131.350054][ T6305] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 131.351861][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 131.353469][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 131.355192][ T6305] __sys_bpf+0xfc6/0x49a0 [ 131.356323][ T6305] __x64_sys_bpf+0x78/0xc0 [ 131.357549][ T6305] do_syscall_64+0xcd/0x250 [ 131.359051][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.360651][ T6305] page last free pid 6281 tgid 6279 stack trace: [ 131.362254][ T6305] free_unref_page+0x5f4/0xdc0 [ 131.363600][ T6305] __folio_put+0x30d/0x3d0 [ 131.364885][ T6305] put_page+0x21e/0x280 [ 131.366012][ T6305] page_pool_return_page+0x400/0x520 [ 131.367595][ T6305] page_pool_release+0xf4/0x7d0 [ 131.368975][ T6305] page_pool_destroy+0x10a/0x4c0 [ 131.370324][ T6305] bpf_test_run_xdp_live+0x3a1/0x500 [ 131.371739][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 131.373171][ T6305] __sys_bpf+0xfc6/0x49a0 [ 131.374547][ T6305] __x64_sys_bpf+0x78/0xc0 [ 131.375846][ T6305] do_syscall_64+0xcd/0x250 [ 131.377157][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.378855][ T6305] Modules linked in: [ 131.380284][ T6305] CPU: 3 UID: 0 PID: 6305 Comm: syz.1.66 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 131.383794][ T6305] Tainted: [B]=BAD_PAGE [ 131.384902][ T6305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 131.387743][ T6305] Call Trace: [ 131.388652][ T6305] [ 131.389442][ T6305] dump_stack_lvl+0x16c/0x1f0 [ 131.390705][ T6305] bad_page+0xb3/0x1f0 [ 131.391792][ T6305] ? __pfx_bad_page+0x10/0x10 [ 131.393086][ T6305] ? page_bad_reason+0x9d/0x1e0 [ 131.394600][ T6305] free_unref_page+0x657/0xdc0 [ 131.396062][ T6305] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 131.397843][ T6305] ? __phys_addr+0xc6/0x150 [ 131.399114][ T6305] skb_free_head+0xa0/0x1d0 [ 131.400506][ T6305] skb_release_data+0x560/0x730 [ 131.401875][ T6305] sk_skb_reason_drop+0x129/0x1a0 [ 131.403312][ T6305] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 131.405302][ T6305] ? kernel_text_address+0x8d/0x100 [ 131.406731][ T6305] ? hlock_class+0x4e/0x130 [ 131.407935][ T6305] ? __lock_acquire+0x163e/0x3ce0 [ 131.409270][ T6305] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 131.411152][ T6305] ? hlock_class+0x4e/0x130 [ 131.412297][ T6305] ? __lock_acquire+0xbdd/0x3ce0 [ 131.413790][ T6305] ? __pfx___lock_acquire+0x10/0x10 [ 131.415183][ T6305] __netif_receive_skb_list_core+0x357/0x950 [ 131.416669][ T6305] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 131.418340][ T6305] ? trace_lock_acquire+0x14a/0x1d0 [ 131.419761][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 131.421350][ T6305] ? lock_acquire+0x2f/0xb0 [ 131.422817][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 131.424627][ T6305] netif_receive_skb_list_internal+0x753/0xdb0 [ 131.426598][ T6305] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 131.428674][ T6305] ? __pfx_eth_type_trans+0x10/0x10 [ 131.430313][ T6305] ? __build_skb_around+0x278/0x3b0 [ 131.431831][ T6305] netif_receive_skb_list+0x4f/0x4a0 [ 131.433463][ T6305] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 131.435335][ T6305] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 131.437218][ T6305] ? bpf_test_timer_continue+0x150/0x3d0 [ 131.439053][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 131.440477][ T6305] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 131.442450][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 131.444143][ T6305] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 131.445667][ T6305] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 131.447180][ T6305] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 131.448518][ T6305] ? 0xffffffffa00045c0 [ 131.449631][ T6305] ? 0xffffffffa00045c0 [ 131.450749][ T6305] ? 0xffffffffa00045c0 [ 131.451850][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 131.453424][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 131.454866][ T6305] ? lock_acquire+0x2f/0xb0 [ 131.456091][ T6305] ? __fget_files+0x40/0x3f0 [ 131.457455][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 131.459155][ T6305] ? fput+0x30/0x390 [ 131.460489][ T6305] ? __bpf_prog_get+0xa0/0x290 [ 131.461981][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 131.463798][ T6305] __sys_bpf+0xfc6/0x49a0 [ 131.465030][ T6305] ? __pfx___sys_bpf+0x10/0x10 [ 131.466528][ T6305] ? __schedule+0xe5d/0x5730 [ 131.467873][ T6305] ? __fget_files+0x23a/0x3f0 [ 131.469229][ T6305] ? do_futex+0x123/0x350 [ 131.470433][ T6305] ? __pfx_do_futex+0x10/0x10 [ 131.471695][ T6305] ? xfd_validate_state+0x5d/0x180 [ 131.473053][ T6305] ? rcu_is_watching+0x12/0xc0 [ 131.474331][ T6305] __x64_sys_bpf+0x78/0xc0 [ 131.475520][ T6305] ? lockdep_hardirqs_on+0x7c/0x110 [ 131.476886][ T6305] do_syscall_64+0xcd/0x250 [ 131.478089][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.479803][ T6305] RIP: 0033:0x7fd45b57e719 [ 131.480996][ T6305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.486764][ T6305] RSP: 002b:00007fd45c319038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 131.488974][ T6305] RAX: ffffffffffffffda RBX: 00007fd45b736058 RCX: 00007fd45b57e719 [ 131.491124][ T6305] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 131.493166][ T6305] RBP: 00007fd45b5f132e R08: 0000000000000000 R09: 0000000000000000 [ 131.495245][ T6305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.497329][ T6305] R13: 0000000000000000 R14: 00007fd45b736058 R15: 00007ffd2e0c9fc8 [ 131.499398][ T6305] [ 131.500410][ T6305] BUG: Bad page state in process syz.1.66 pfn:314fa [ 131.502379][ T6305] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880314faf50 pfn:0x314fa [ 131.505383][ T6305] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 131.507480][ T6305] raw: 00fff00000000000 dead000000000040 ffff88804cdea000 0000000000000000 [ 131.510021][ T6305] raw: ffff8880314faf50 0000000000000001 00000000ffffffff 0000000000000000 [ 131.512245][ T6305] page dumped because: page_pool leak [ 131.513667][ T6305] page_owner tracks the page as allocated [ 131.515204][ T6305] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6305, tgid 6299 (syz.1.66), ts 127123784315, free_ts 126833707405 [ 131.519584][ T6305] post_alloc_hook+0x2d1/0x350 [ 131.521050][ T6305] get_page_from_freelist+0x101e/0x3070 [ 131.522778][ T6305] __alloc_pages_noprof+0x223/0x25a0 [ 131.524296][ T6305] alloc_pages_bulk_noprof+0x77c/0x1110 [ 131.525950][ T6305] __page_pool_alloc_pages_slow+0x18f/0x770 [ 131.527625][ T6305] page_pool_alloc_netmem+0xc4/0x160 [ 131.529173][ T6305] page_pool_alloc_pages+0x1a/0x60 [ 131.530572][ T6305] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 131.532302][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 131.533947][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 131.535790][ T6305] __sys_bpf+0xfc6/0x49a0 [ 131.537125][ T6305] __x64_sys_bpf+0x78/0xc0 [ 131.538808][ T6305] do_syscall_64+0xcd/0x250 [ 131.540311][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.542227][ T6305] page last free pid 6281 tgid 6279 stack trace: [ 131.543885][ T6305] free_unref_page+0x5f4/0xdc0 [ 131.545268][ T6305] __folio_put+0x30d/0x3d0 [ 131.546573][ T6305] put_page+0x21e/0x280 [ 131.547778][ T6305] page_pool_return_page+0x400/0x520 [ 131.549235][ T6305] page_pool_release+0xf4/0x7d0 [ 131.550539][ T6305] page_pool_destroy+0x10a/0x4c0 [ 131.551844][ T6305] bpf_test_run_xdp_live+0x3a1/0x500 [ 131.553312][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 131.554748][ T6305] __sys_bpf+0xfc6/0x49a0 [ 131.555923][ T6305] __x64_sys_bpf+0x78/0xc0 [ 131.557103][ T6305] do_syscall_64+0xcd/0x250 [ 131.558308][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.559940][ T6305] Modules linked in: [ 131.560988][ T6305] CPU: 3 UID: 0 PID: 6305 Comm: syz.1.66 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 131.564286][ T6305] Tainted: [B]=BAD_PAGE [ 131.565559][ T6305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 131.568982][ T6305] Call Trace: [ 131.569977][ T6305] [ 131.570801][ T6305] dump_stack_lvl+0x16c/0x1f0 [ 131.572107][ T6305] bad_page+0xb3/0x1f0 [ 131.573229][ T6305] ? __pfx_bad_page+0x10/0x10 [ 131.574715][ T6305] ? page_bad_reason+0x9d/0x1e0 [ 131.576089][ T6305] free_unref_page+0x657/0xdc0 [ 131.577407][ T6305] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 131.579022][ T6305] ? __phys_addr+0xc6/0x150 [ 131.580248][ T6305] skb_free_head+0xa0/0x1d0 [ 131.581452][ T6305] skb_release_data+0x560/0x730 [ 131.582762][ T6305] sk_skb_reason_drop+0x129/0x1a0 [ 131.584095][ T6305] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 131.586144][ T6305] ? kernel_text_address+0x8d/0x100 [ 131.587590][ T6305] ? hlock_class+0x4e/0x130 [ 131.588836][ T6305] ? __lock_acquire+0x163e/0x3ce0 [ 131.590227][ T6305] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 131.592141][ T6305] ? hlock_class+0x4e/0x130 [ 131.593385][ T6305] ? __lock_acquire+0xbdd/0x3ce0 [ 131.594692][ T6305] ? __pfx___lock_acquire+0x10/0x10 [ 131.596649][ T6305] __netif_receive_skb_list_core+0x357/0x950 [ 131.598354][ T6305] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 131.600062][ T6305] ? trace_lock_acquire+0x14a/0x1d0 [ 131.601461][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 131.603305][ T6305] ? lock_acquire+0x2f/0xb0 [ 131.604491][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 131.606443][ T6305] netif_receive_skb_list_internal+0x753/0xdb0 [ 131.608083][ T6305] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 131.609826][ T6305] ? __pfx_eth_type_trans+0x10/0x10 [ 131.611203][ T6305] ? __build_skb_around+0x278/0x3b0 [ 131.612562][ T6305] netif_receive_skb_list+0x4f/0x4a0 [ 131.613959][ T6305] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 131.615599][ T6305] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 131.617441][ T6305] ? bpf_test_timer_continue+0x150/0x3d0 [ 131.619028][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 131.620480][ T6305] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 131.622085][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 131.623740][ T6305] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 131.625585][ T6305] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 131.627538][ T6305] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 131.629293][ T6305] ? 0xffffffffa00045c0 [ 131.630661][ T6305] ? 0xffffffffa00045c0 [ 131.631992][ T6305] ? 0xffffffffa00045c0 [ 131.633288][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 131.634798][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 131.636207][ T6305] ? lock_acquire+0x2f/0xb0 [ 131.637401][ T6305] ? __fget_files+0x40/0x3f0 [ 131.638816][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 131.640444][ T6305] ? fput+0x30/0x390 [ 131.641511][ T6305] ? __bpf_prog_get+0xa0/0x290 [ 131.642791][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 131.644332][ T6305] __sys_bpf+0xfc6/0x49a0 [ 131.645475][ T6305] ? __pfx___sys_bpf+0x10/0x10 [ 131.646872][ T6305] ? __schedule+0xe5d/0x5730 [ 131.648100][ T6305] ? __fget_files+0x23a/0x3f0 [ 131.649316][ T6305] ? do_futex+0x123/0x350 [ 131.650475][ T6305] ? __pfx_do_futex+0x10/0x10 [ 131.651907][ T6305] ? xfd_validate_state+0x5d/0x180 [ 131.653358][ T6305] ? rcu_is_watching+0x12/0xc0 [ 131.654685][ T6305] __x64_sys_bpf+0x78/0xc0 [ 131.655921][ T6305] ? lockdep_hardirqs_on+0x7c/0x110 [ 131.657375][ T6305] do_syscall_64+0xcd/0x250 [ 131.658593][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.660213][ T6305] RIP: 0033:0x7fd45b57e719 [ 131.661463][ T6305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.666965][ T6305] RSP: 002b:00007fd45c319038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 131.669340][ T6305] RAX: ffffffffffffffda RBX: 00007fd45b736058 RCX: 00007fd45b57e719 [ 131.671723][ T6305] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 131.674052][ T6305] RBP: 00007fd45b5f132e R08: 0000000000000000 R09: 0000000000000000 [ 131.676373][ T6305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.678688][ T6305] R13: 0000000000000000 R14: 00007fd45b736058 R15: 00007ffd2e0c9fc8 [ 131.681060][ T6305] [ 131.682120][ T6305] BUG: Bad page state in process syz.1.66 pfn:27255 [ 131.683986][ T6305] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x27255 [ 131.686771][ T6305] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 131.688876][ T6305] raw: 00fff00000000000 dead000000000040 ffff88804cdea000 0000000000000000 [ 131.691371][ T6305] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 131.693852][ T6305] page dumped because: page_pool leak [ 131.695729][ T6305] page_owner tracks the page as allocated [ 131.697309][ T6305] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6305, tgid 6299 (syz.1.66), ts 127123779733, free_ts 126833711233 [ 131.702185][ T6305] post_alloc_hook+0x2d1/0x350 [ 131.703879][ T6305] get_page_from_freelist+0x101e/0x3070 [ 131.705351][ T6305] __alloc_pages_noprof+0x223/0x25a0 [ 131.706787][ T6305] alloc_pages_bulk_noprof+0x77c/0x1110 [ 131.708270][ T6305] __page_pool_alloc_pages_slow+0x18f/0x770 [ 131.709908][ T6305] page_pool_alloc_netmem+0xc4/0x160 [ 131.711322][ T6305] page_pool_alloc_pages+0x1a/0x60 [ 131.712678][ T6305] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 131.714747][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 131.716280][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 131.718079][ T6305] __sys_bpf+0xfc6/0x49a0 [ 131.720018][ T6305] __x64_sys_bpf+0x78/0xc0 [ 131.721819][ T6305] do_syscall_64+0xcd/0x250 [ 131.723555][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.725547][ T6305] page last free pid 6281 tgid 6279 stack trace: [ 131.727274][ T6305] free_unref_page+0x5f4/0xdc0 [ 131.728552][ T6305] __folio_put+0x30d/0x3d0 [ 131.729812][ T6305] put_page+0x21e/0x280 [ 131.730944][ T6305] page_pool_return_page+0x400/0x520 [ 131.732346][ T6305] page_pool_release+0xf4/0x7d0 [ 131.733817][ T6305] page_pool_destroy+0x10a/0x4c0 [ 131.735173][ T6305] bpf_test_run_xdp_live+0x3a1/0x500 [ 131.736747][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 131.738266][ T6305] __sys_bpf+0xfc6/0x49a0 [ 131.739704][ T6305] __x64_sys_bpf+0x78/0xc0 [ 131.740977][ T6305] do_syscall_64+0xcd/0x250 [ 131.742200][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.743912][ T6305] Modules linked in: [ 131.744947][ T6305] CPU: 3 UID: 0 PID: 6305 Comm: syz.1.66 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 131.748054][ T6305] Tainted: [B]=BAD_PAGE [ 131.749264][ T6305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 131.752095][ T6305] Call Trace: [ 131.753089][ T6305] [ 131.754524][ T6305] dump_stack_lvl+0x16c/0x1f0 [ 131.756172][ T6305] bad_page+0xb3/0x1f0 [ 131.757485][ T6305] ? __pfx_bad_page+0x10/0x10 [ 131.759122][ T6305] ? page_bad_reason+0x9d/0x1e0 [ 131.760749][ T6305] free_unref_page+0x657/0xdc0 [ 131.762229][ T6305] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 131.763852][ T6305] ? __phys_addr+0xc6/0x150 [ 131.765067][ T6305] skb_free_head+0xa0/0x1d0 [ 131.766416][ T6305] skb_release_data+0x560/0x730 [ 131.767756][ T6305] sk_skb_reason_drop+0x129/0x1a0 [ 131.769086][ T6305] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 131.770876][ T6305] ? kernel_text_address+0x8d/0x100 [ 131.772170][ T6305] ? hlock_class+0x4e/0x130 [ 131.773631][ T6305] ? __lock_acquire+0x163e/0x3ce0 [ 131.775072][ T6305] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 131.776924][ T6305] ? hlock_class+0x4e/0x130 [ 131.778201][ T6305] ? __lock_acquire+0xbdd/0x3ce0 [ 131.779511][ T6305] ? __pfx___lock_acquire+0x10/0x10 [ 131.780861][ T6305] __netif_receive_skb_list_core+0x357/0x950 [ 131.782564][ T6305] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 131.784281][ T6305] ? trace_lock_acquire+0x14a/0x1d0 [ 131.785706][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 131.787359][ T6305] ? lock_acquire+0x2f/0xb0 [ 131.788586][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 131.790339][ T6305] netif_receive_skb_list_internal+0x753/0xdb0 [ 131.792040][ T6305] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 131.793808][ T6305] ? __pfx_eth_type_trans+0x10/0x10 [ 131.795184][ T6305] ? __build_skb_around+0x278/0x3b0 [ 131.796543][ T6305] netif_receive_skb_list+0x4f/0x4a0 [ 131.798152][ T6305] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 131.799892][ T6305] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 131.801836][ T6305] ? bpf_test_timer_continue+0x150/0x3d0 [ 131.803330][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 131.804727][ T6305] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 131.806284][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 131.807827][ T6305] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 131.809483][ T6305] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 131.811100][ T6305] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 131.812570][ T6305] ? 0xffffffffa00045c0 [ 131.813887][ T6305] ? 0xffffffffa00045c0 [ 131.815648][ T6305] ? 0xffffffffa00045c0 [ 131.817019][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 131.818973][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 131.820388][ T6305] ? lock_acquire+0x2f/0xb0 [ 131.821582][ T6305] ? __fget_files+0x40/0x3f0 [ 131.822807][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 131.824439][ T6305] ? fput+0x30/0x390 [ 131.825497][ T6305] ? __bpf_prog_get+0xa0/0x290 [ 131.826799][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 131.828351][ T6305] __sys_bpf+0xfc6/0x49a0 [ 131.829509][ T6305] ? __pfx___sys_bpf+0x10/0x10 [ 131.830783][ T6305] ? __schedule+0xe5d/0x5730 [ 131.832012][ T6305] ? __fget_files+0x23a/0x3f0 [ 131.833290][ T6305] ? do_futex+0x123/0x350 [ 131.834532][ T6305] ? __pfx_do_futex+0x10/0x10 [ 131.836021][ T6305] ? xfd_validate_state+0x5d/0x180 [ 131.837559][ T6305] ? rcu_is_watching+0x12/0xc0 [ 131.839009][ T6305] __x64_sys_bpf+0x78/0xc0 [ 131.840231][ T6305] ? lockdep_hardirqs_on+0x7c/0x110 [ 131.841681][ T6305] do_syscall_64+0xcd/0x250 [ 131.843093][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.844730][ T6305] RIP: 0033:0x7fd45b57e719 [ 131.846025][ T6305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.851619][ T6305] RSP: 002b:00007fd45c319038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 131.854464][ T6305] RAX: ffffffffffffffda RBX: 00007fd45b736058 RCX: 00007fd45b57e719 [ 131.857660][ T6305] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 131.859856][ T6305] RBP: 00007fd45b5f132e R08: 0000000000000000 R09: 0000000000000000 [ 131.862251][ T6305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.864467][ T6305] R13: 0000000000000000 R14: 00007fd45b736058 R15: 00007ffd2e0c9fc8 [ 131.866594][ T6305] [ 131.867616][ T6305] BUG: Bad page state in process syz.1.66 pfn:315b4 [ 131.869437][ T6305] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880315b4000 pfn:0x315b4 [ 131.872089][ T6305] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 131.874220][ T6305] raw: 00fff00000000000 dead000000000040 ffff88804cdea000 0000000000000000 [ 131.876468][ T6305] raw: ffff8880315b4000 0000000000000001 00000000ffffffff 0000000000000000 [ 131.878966][ T6305] page dumped because: page_pool leak [ 131.880354][ T6305] page_owner tracks the page as allocated [ 131.881822][ T6305] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6305, tgid 6299 (syz.1.66), ts 127123775303, free_ts 126833715151 [ 131.886355][ T6305] post_alloc_hook+0x2d1/0x350 [ 131.887691][ T6305] get_page_from_freelist+0x101e/0x3070 [ 131.889296][ T6305] __alloc_pages_noprof+0x223/0x25a0 [ 131.890738][ T6305] alloc_pages_bulk_noprof+0x77c/0x1110 [ 131.892230][ T6305] __page_pool_alloc_pages_slow+0x18f/0x770 [ 131.894087][ T6305] page_pool_alloc_netmem+0xc4/0x160 [ 131.895883][ T6305] page_pool_alloc_pages+0x1a/0x60 [ 131.897304][ T6305] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 131.899007][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 131.900394][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 131.901799][ T6305] __sys_bpf+0xfc6/0x49a0 [ 131.902946][ T6305] __x64_sys_bpf+0x78/0xc0 [ 131.904110][ T6305] do_syscall_64+0xcd/0x250 [ 131.905306][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.906875][ T6305] page last free pid 6281 tgid 6279 stack trace: [ 131.908534][ T6305] free_unref_page+0x5f4/0xdc0 [ 131.909854][ T6305] __folio_put+0x30d/0x3d0 [ 131.911108][ T6305] put_page+0x21e/0x280 [ 131.912273][ T6305] page_pool_return_page+0x400/0x520 [ 131.913739][ T6305] page_pool_release+0xf4/0x7d0 [ 131.915098][ T6305] page_pool_destroy+0x10a/0x4c0 [ 131.916395][ T6305] bpf_test_run_xdp_live+0x3a1/0x500 [ 131.917978][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 131.919784][ T6305] __sys_bpf+0xfc6/0x49a0 [ 131.921209][ T6305] __x64_sys_bpf+0x78/0xc0 [ 131.923157][ T6305] do_syscall_64+0xcd/0x250 [ 131.924460][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.926033][ T6305] Modules linked in: [ 131.927091][ T6305] CPU: 3 UID: 0 PID: 6305 Comm: syz.1.66 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 131.930274][ T6305] Tainted: [B]=BAD_PAGE [ 131.931394][ T6305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 131.934302][ T6305] Call Trace: [ 131.935187][ T6305] [ 131.935969][ T6305] dump_stack_lvl+0x16c/0x1f0 [ 131.937356][ T6305] bad_page+0xb3/0x1f0 [ 131.938609][ T6305] ? __pfx_bad_page+0x10/0x10 [ 131.940600][ T6305] ? page_bad_reason+0x9d/0x1e0 [ 131.941937][ T6305] free_unref_page+0x657/0xdc0 [ 131.943502][ T6305] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 131.945183][ T6305] ? __phys_addr+0xc6/0x150 [ 131.946461][ T6305] skb_free_head+0xa0/0x1d0 [ 131.947731][ T6305] skb_release_data+0x560/0x730 [ 131.949087][ T6305] sk_skb_reason_drop+0x129/0x1a0 [ 131.950533][ T6305] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 131.952334][ T6305] ? kernel_text_address+0x8d/0x100 [ 131.953757][ T6305] ? hlock_class+0x4e/0x130 [ 131.955210][ T6305] ? __lock_acquire+0x163e/0x3ce0 [ 131.956622][ T6305] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 131.958853][ T6305] ? hlock_class+0x4e/0x130 [ 131.960200][ T6305] ? __lock_acquire+0xbdd/0x3ce0 [ 131.961519][ T6305] ? __pfx___lock_acquire+0x10/0x10 [ 131.962928][ T6305] __netif_receive_skb_list_core+0x357/0x950 [ 131.964627][ T6305] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 131.966546][ T6305] ? trace_lock_acquire+0x14a/0x1d0 [ 131.968011][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 131.969771][ T6305] ? lock_acquire+0x2f/0xb0 [ 131.971063][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 131.972789][ T6305] netif_receive_skb_list_internal+0x753/0xdb0 [ 131.974490][ T6305] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 131.976234][ T6305] ? __pfx_eth_type_trans+0x10/0x10 [ 131.977888][ T6305] ? __build_skb_around+0x278/0x3b0 [ 131.979328][ T6305] netif_receive_skb_list+0x4f/0x4a0 [ 131.980685][ T6305] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 131.982509][ T6305] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 131.984268][ T6305] ? bpf_test_timer_continue+0x150/0x3d0 [ 131.985757][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 131.987476][ T6305] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 131.989036][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 131.990646][ T6305] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 131.992318][ T6305] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 131.994198][ T6305] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 131.995705][ T6305] ? 0xffffffffa00045c0 [ 131.996865][ T6305] ? 0xffffffffa00045c0 [ 131.998001][ T6305] ? 0xffffffffa00045c0 [ 131.999100][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 132.000637][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 132.002053][ T6305] ? lock_acquire+0x2f/0xb0 [ 132.003242][ T6305] ? __fget_files+0x40/0x3f0 [ 132.004390][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 132.005838][ T6305] ? fput+0x30/0x390 [ 132.006862][ T6305] ? __bpf_prog_get+0xa0/0x290 [ 132.008081][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 132.009549][ T6305] __sys_bpf+0xfc6/0x49a0 [ 132.010922][ T6305] ? __pfx___sys_bpf+0x10/0x10 [ 132.012171][ T6305] ? __schedule+0xe5d/0x5730 [ 132.013529][ T6305] ? __fget_files+0x23a/0x3f0 [ 132.014734][ T6305] ? do_futex+0x123/0x350 [ 132.015827][ T6305] ? __pfx_do_futex+0x10/0x10 [ 132.016992][ T6305] ? xfd_validate_state+0x5d/0x180 [ 132.018270][ T6305] ? rcu_is_watching+0x12/0xc0 [ 132.019533][ T6305] __x64_sys_bpf+0x78/0xc0 [ 132.020683][ T6305] ? lockdep_hardirqs_on+0x7c/0x110 [ 132.022061][ T6305] do_syscall_64+0xcd/0x250 [ 132.023295][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.024845][ T6305] RIP: 0033:0x7fd45b57e719 [ 132.026153][ T6305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.031629][ T6305] RSP: 002b:00007fd45c319038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 132.034055][ T6305] RAX: ffffffffffffffda RBX: 00007fd45b736058 RCX: 00007fd45b57e719 [ 132.036595][ T6305] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 132.038865][ T6305] RBP: 00007fd45b5f132e R08: 0000000000000000 R09: 0000000000000000 [ 132.041352][ T6305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.043567][ T6305] R13: 0000000000000000 R14: 00007fd45b736058 R15: 00007ffd2e0c9fc8 [ 132.045801][ T6305] [ 132.046744][ T6305] BUG: Bad page state in process syz.1.66 pfn:31d91 [ 132.048542][ T6305] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888031d91e58 pfn:0x31d91 [ 132.051130][ T6305] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 132.052921][ T6305] raw: 00fff00000000000 dead000000000040 ffff88804cdea000 0000000000000000 [ 132.055433][ T6305] raw: ffff888031d91e58 0000000000000001 00000000ffffffff 0000000000000000 [ 132.057546][ T6305] page dumped because: page_pool leak [ 132.058964][ T6305] page_owner tracks the page as allocated [ 132.060325][ T6305] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6305, tgid 6299 (syz.1.66), ts 127123770850, free_ts 126833718844 [ 132.064556][ T6305] post_alloc_hook+0x2d1/0x350 [ 132.065834][ T6305] get_page_from_freelist+0x101e/0x3070 [ 132.067316][ T6305] __alloc_pages_noprof+0x223/0x25a0 [ 132.068774][ T6305] alloc_pages_bulk_noprof+0x77c/0x1110 [ 132.070239][ T6305] __page_pool_alloc_pages_slow+0x18f/0x770 [ 132.071777][ T6305] page_pool_alloc_netmem+0xc4/0x160 [ 132.073166][ T6305] page_pool_alloc_pages+0x1a/0x60 [ 132.074514][ T6305] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 132.076152][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 132.077545][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 132.079016][ T6305] __sys_bpf+0xfc6/0x49a0 [ 132.080156][ T6305] __x64_sys_bpf+0x78/0xc0 [ 132.081337][ T6305] do_syscall_64+0xcd/0x250 [ 132.082554][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.084095][ T6305] page last free pid 6281 tgid 6279 stack trace: [ 132.085748][ T6305] free_unref_page+0x5f4/0xdc0 [ 132.087024][ T6305] __folio_put+0x30d/0x3d0 [ 132.088195][ T6305] put_page+0x21e/0x280 [ 132.089341][ T6305] page_pool_return_page+0x400/0x520 [ 132.090697][ T6305] page_pool_release+0xf4/0x7d0 [ 132.091928][ T6305] page_pool_destroy+0x10a/0x4c0 [ 132.093232][ T6305] bpf_test_run_xdp_live+0x3a1/0x500 [ 132.094616][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 132.096014][ T6305] __sys_bpf+0xfc6/0x49a0 [ 132.097146][ T6305] __x64_sys_bpf+0x78/0xc0 [ 132.098328][ T6305] do_syscall_64+0xcd/0x250 [ 132.099566][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.101119][ T6305] Modules linked in: [ 132.102156][ T6305] CPU: 3 UID: 0 PID: 6305 Comm: syz.1.66 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 132.105229][ T6305] Tainted: [B]=BAD_PAGE [ 132.106332][ T6305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 132.109126][ T6305] Call Trace: [ 132.110009][ T6305] [ 132.110805][ T6305] dump_stack_lvl+0x16c/0x1f0 [ 132.112051][ T6305] bad_page+0xb3/0x1f0 [ 132.113125][ T6305] ? __pfx_bad_page+0x10/0x10 [ 132.114372][ T6305] ? page_bad_reason+0x9d/0x1e0 [ 132.115657][ T6305] free_unref_page+0x657/0xdc0 [ 132.116922][ T6305] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 132.118507][ T6305] ? __phys_addr+0xc6/0x150 [ 132.119703][ T6305] skb_free_head+0xa0/0x1d0 [ 132.120900][ T6305] skb_release_data+0x560/0x730 [ 132.122188][ T6305] sk_skb_reason_drop+0x129/0x1a0 [ 132.123509][ T6305] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 132.125248][ T6305] ? kernel_text_address+0x8d/0x100 [ 132.126636][ T6305] ? hlock_class+0x4e/0x130 [ 132.127828][ T6305] ? __lock_acquire+0x163e/0x3ce0 [ 132.129122][ T6305] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 132.130970][ T6305] ? hlock_class+0x4e/0x130 [ 132.132150][ T6305] ? __lock_acquire+0xbdd/0x3ce0 [ 132.133454][ T6305] ? __pfx___lock_acquire+0x10/0x10 [ 132.134826][ T6305] __netif_receive_skb_list_core+0x357/0x950 [ 132.136407][ T6305] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 132.138112][ T6305] ? trace_lock_acquire+0x14a/0x1d0 [ 132.139476][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 132.141107][ T6305] ? lock_acquire+0x2f/0xb0 [ 132.142226][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 132.143883][ T6305] netif_receive_skb_list_internal+0x753/0xdb0 [ 132.145511][ T6305] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 132.147264][ T6305] ? __pfx_eth_type_trans+0x10/0x10 [ 132.148633][ T6305] ? __build_skb_around+0x278/0x3b0 [ 132.150003][ T6305] netif_receive_skb_list+0x4f/0x4a0 [ 132.151401][ T6305] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 132.153044][ T6305] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 132.154820][ T6305] ? bpf_test_timer_continue+0x150/0x3d0 [ 132.156302][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 132.157693][ T6305] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 132.159234][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 132.160789][ T6305] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 132.162404][ T6305] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 132.163971][ T6305] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 132.165382][ T6305] ? 0xffffffffa00045c0 [ 132.166506][ T6305] ? 0xffffffffa00045c0 [ 132.167592][ T6305] ? 0xffffffffa00045c0 [ 132.168667][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 132.170228][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 132.171634][ T6305] ? lock_acquire+0x2f/0xb0 [ 132.172833][ T6305] ? __fget_files+0x40/0x3f0 [ 132.174058][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 132.175598][ T6305] ? fput+0x30/0x390 [ 132.176614][ T6305] ? __bpf_prog_get+0xa0/0x290 [ 132.177866][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 132.179458][ T6305] __sys_bpf+0xfc6/0x49a0 [ 132.180608][ T6305] ? __pfx___sys_bpf+0x10/0x10 [ 132.181872][ T6305] ? __schedule+0xe5d/0x5730 [ 132.183104][ T6305] ? __fget_files+0x23a/0x3f0 [ 132.184356][ T6305] ? do_futex+0x123/0x350 [ 132.185486][ T6305] ? __pfx_do_futex+0x10/0x10 [ 132.186790][ T6305] ? xfd_validate_state+0x5d/0x180 [ 132.188128][ T6305] ? rcu_is_watching+0x12/0xc0 [ 132.189409][ T6305] __x64_sys_bpf+0x78/0xc0 [ 132.190586][ T6305] ? lockdep_hardirqs_on+0x7c/0x110 [ 132.191948][ T6305] do_syscall_64+0xcd/0x250 [ 132.193157][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.194748][ T6305] RIP: 0033:0x7fd45b57e719 [ 132.195973][ T6305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.201463][ T6305] RSP: 002b:00007fd45c319038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 132.204067][ T6305] RAX: ffffffffffffffda RBX: 00007fd45b736058 RCX: 00007fd45b57e719 [ 132.206296][ T6305] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 132.208504][ T6305] RBP: 00007fd45b5f132e R08: 0000000000000000 R09: 0000000000000000 [ 132.210696][ T6305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.212837][ T6305] R13: 0000000000000000 R14: 00007fd45b736058 R15: 00007ffd2e0c9fc8 [ 132.214934][ T6305] [ 132.215876][ T6305] BUG: Bad page state in process syz.1.66 pfn:2f9ab [ 132.217516][ T6305] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802f9abf00 pfn:0x2f9ab [ 132.220246][ T6305] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 132.222138][ T6305] raw: 00fff00000000000 dead000000000040 ffff88804cdea000 0000000000000000 [ 132.224714][ T6305] raw: ffff88802f9abf00 0000000000000001 00000000ffffffff 0000000000000000 [ 132.226941][ T6305] page dumped because: page_pool leak [ 132.228343][ T6305] page_owner tracks the page as allocated [ 132.229878][ T6305] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6305, tgid 6299 (syz.1.66), ts 127123766426, free_ts 126833723210 [ 132.234170][ T6305] post_alloc_hook+0x2d1/0x350 [ 132.235432][ T6305] get_page_from_freelist+0x101e/0x3070 [ 132.236866][ T6305] __alloc_pages_noprof+0x223/0x25a0 [ 132.238249][ T6305] alloc_pages_bulk_noprof+0x77c/0x1110 [ 132.239743][ T6305] __page_pool_alloc_pages_slow+0x18f/0x770 [ 132.241316][ T6305] page_pool_alloc_netmem+0xc4/0x160 [ 132.242700][ T6305] page_pool_alloc_pages+0x1a/0x60 [ 132.244032][ T6305] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 132.245633][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 132.247028][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 132.248448][ T6305] __sys_bpf+0xfc6/0x49a0 [ 132.249639][ T6305] __x64_sys_bpf+0x78/0xc0 [ 132.250800][ T6305] do_syscall_64+0xcd/0x250 [ 132.252002][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.253794][ T6305] page last free pid 6281 tgid 6279 stack trace: [ 132.255808][ T6305] free_unref_page+0x5f4/0xdc0 [ 132.257122][ T6305] __folio_put+0x30d/0x3d0 [ 132.258293][ T6305] put_page+0x21e/0x280 [ 132.259685][ T6305] page_pool_return_page+0x400/0x520 [ 132.261086][ T6305] page_pool_release+0xf4/0x7d0 [ 132.262389][ T6305] page_pool_destroy+0x10a/0x4c0 [ 132.263698][ T6305] bpf_test_run_xdp_live+0x3a1/0x500 [ 132.265097][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 132.266543][ T6305] __sys_bpf+0xfc6/0x49a0 [ 132.267691][ T6305] __x64_sys_bpf+0x78/0xc0 [ 132.268958][ T6305] do_syscall_64+0xcd/0x250 [ 132.270302][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.271867][ T6305] Modules linked in: [ 132.272903][ T6305] CPU: 3 UID: 0 PID: 6305 Comm: syz.1.66 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 132.275993][ T6305] Tainted: [B]=BAD_PAGE [ 132.277089][ T6305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 132.279899][ T6305] Call Trace: [ 132.280796][ T6305] [ 132.281603][ T6305] dump_stack_lvl+0x16c/0x1f0 [ 132.282884][ T6305] bad_page+0xb3/0x1f0 [ 132.283977][ T6305] ? __pfx_bad_page+0x10/0x10 [ 132.285226][ T6305] ? page_bad_reason+0x9d/0x1e0 [ 132.286530][ T6305] free_unref_page+0x657/0xdc0 [ 132.287802][ T6305] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 132.289387][ T6305] ? __phys_addr+0xc6/0x150 [ 132.290596][ T6305] skb_free_head+0xa0/0x1d0 [ 132.291794][ T6305] skb_release_data+0x560/0x730 [ 132.293082][ T6305] sk_skb_reason_drop+0x129/0x1a0 [ 132.295322][ T6305] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 132.297058][ T6305] ? kernel_text_address+0x8d/0x100 [ 132.298365][ T6305] ? hlock_class+0x4e/0x130 [ 132.299554][ T6305] ? __lock_acquire+0x163e/0x3ce0 [ 132.300841][ T6305] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 132.302690][ T6305] ? hlock_class+0x4e/0x130 [ 132.304116][ T6305] ? __lock_acquire+0xbdd/0x3ce0 [ 132.305474][ T6305] ? __pfx___lock_acquire+0x10/0x10 [ 132.306849][ T6305] __netif_receive_skb_list_core+0x357/0x950 [ 132.308408][ T6305] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 132.310214][ T6305] ? trace_lock_acquire+0x14a/0x1d0 [ 132.311605][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 132.313274][ T6305] ? lock_acquire+0x2f/0xb0 [ 132.314491][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 132.316143][ T6305] netif_receive_skb_list_internal+0x753/0xdb0 [ 132.317768][ T6305] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 132.319510][ T6305] ? __pfx_eth_type_trans+0x10/0x10 [ 132.321011][ T6305] ? __build_skb_around+0x278/0x3b0 [ 132.322459][ T6305] netif_receive_skb_list+0x4f/0x4a0 [ 132.323936][ T6305] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 132.325686][ T6305] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 132.327473][ T6305] ? bpf_test_timer_continue+0x150/0x3d0 [ 132.328954][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 132.330360][ T6305] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 132.331890][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 132.333428][ T6305] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 132.335383][ T6305] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 132.337940][ T6305] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 132.339479][ T6305] ? 0xffffffffa00045c0 [ 132.340631][ T6305] ? 0xffffffffa00045c0 [ 132.341887][ T6305] ? 0xffffffffa00045c0 [ 132.343151][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 132.344719][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 132.346329][ T6305] ? lock_acquire+0x2f/0xb0 [ 132.347866][ T6305] ? __fget_files+0x40/0x3f0 [ 132.349338][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 132.351002][ T6305] ? fput+0x30/0x390 [ 132.352076][ T6305] ? __bpf_prog_get+0xa0/0x290 [ 132.353377][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 132.355132][ T6305] __sys_bpf+0xfc6/0x49a0 [ 132.356492][ T6305] ? __pfx___sys_bpf+0x10/0x10 [ 132.358408][ T6305] ? __schedule+0xe5d/0x5730 [ 132.359828][ T6305] ? __fget_files+0x23a/0x3f0 [ 132.361278][ T6305] ? do_futex+0x123/0x350 [ 132.362424][ T6305] ? __pfx_do_futex+0x10/0x10 [ 132.363836][ T6305] ? xfd_validate_state+0x5d/0x180 [ 132.365195][ T6305] ? rcu_is_watching+0x12/0xc0 [ 132.366496][ T6305] __x64_sys_bpf+0x78/0xc0 [ 132.367762][ T6305] ? lockdep_hardirqs_on+0x7c/0x110 [ 132.369156][ T6305] do_syscall_64+0xcd/0x250 [ 132.370404][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.371994][ T6305] RIP: 0033:0x7fd45b57e719 [ 132.373215][ T6305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.378441][ T6305] RSP: 002b:00007fd45c319038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 132.380655][ T6305] RAX: ffffffffffffffda RBX: 00007fd45b736058 RCX: 00007fd45b57e719 [ 132.382751][ T6305] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 132.384826][ T6305] RBP: 00007fd45b5f132e R08: 0000000000000000 R09: 0000000000000000 [ 132.387239][ T6305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.389500][ T6305] R13: 0000000000000000 R14: 00007fd45b736058 R15: 00007ffd2e0c9fc8 [ 132.391591][ T6305] [ 132.392539][ T6305] BUG: Bad page state in process syz.1.66 pfn:27fea [ 132.394232][ T6305] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888027fea1e0 pfn:0x27fea [ 132.396825][ T6305] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 132.398854][ T6305] raw: 00fff00000000000 dead000000000040 ffff88804cdea000 0000000000000000 [ 132.401437][ T6305] raw: ffff888027fea1e0 0000000000000001 00000000ffffffff 0000000000000000 [ 132.403968][ T6305] page dumped because: page_pool leak [ 132.405413][ T6305] page_owner tracks the page as allocated [ 132.406913][ T6305] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6305, tgid 6299 (syz.1.66), ts 127123761316, free_ts 126833726911 [ 132.411170][ T6305] post_alloc_hook+0x2d1/0x350 [ 132.412432][ T6305] get_page_from_freelist+0x101e/0x3070 [ 132.413891][ T6305] __alloc_pages_noprof+0x223/0x25a0 [ 132.415290][ T6305] alloc_pages_bulk_noprof+0x77c/0x1110 [ 132.416734][ T6305] __page_pool_alloc_pages_slow+0x18f/0x770 [ 132.418293][ T6305] page_pool_alloc_netmem+0xc4/0x160 [ 132.419737][ T6305] page_pool_alloc_pages+0x1a/0x60 [ 132.421085][ T6305] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 132.422701][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 132.424078][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 132.425541][ T6305] __sys_bpf+0xfc6/0x49a0 [ 132.426681][ T6305] __x64_sys_bpf+0x78/0xc0 [ 132.427853][ T6305] do_syscall_64+0xcd/0x250 [ 132.429108][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.430645][ T6305] page last free pid 6281 tgid 6279 stack trace: [ 132.432288][ T6305] free_unref_page+0x5f4/0xdc0 [ 132.433632][ T6305] __folio_put+0x30d/0x3d0 [ 132.434980][ T6305] put_page+0x21e/0x280 [ 132.436175][ T6305] page_pool_return_page+0x400/0x520 [ 132.437752][ T6305] page_pool_release+0xf4/0x7d0 [ 132.439381][ T6305] page_pool_destroy+0x10a/0x4c0 [ 132.440971][ T6305] bpf_test_run_xdp_live+0x3a1/0x500 [ 132.442398][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 132.443800][ T6305] __sys_bpf+0xfc6/0x49a0 [ 132.444903][ T6305] __x64_sys_bpf+0x78/0xc0 [ 132.446027][ T6305] do_syscall_64+0xcd/0x250 [ 132.447195][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.448795][ T6305] Modules linked in: [ 132.449819][ T6305] CPU: 3 UID: 0 PID: 6305 Comm: syz.1.66 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 132.452890][ T6305] Tainted: [B]=BAD_PAGE [ 132.454061][ T6305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 132.456976][ T6305] Call Trace: [ 132.457920][ T6305] [ 132.458897][ T6305] dump_stack_lvl+0x16c/0x1f0 [ 132.460431][ T6305] bad_page+0xb3/0x1f0 [ 132.461649][ T6305] ? __pfx_bad_page+0x10/0x10 [ 132.462881][ T6305] ? page_bad_reason+0x9d/0x1e0 [ 132.464155][ T6305] free_unref_page+0x657/0xdc0 [ 132.465440][ T6305] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 132.467056][ T6305] ? __phys_addr+0xc6/0x150 [ 132.468272][ T6305] skb_free_head+0xa0/0x1d0 [ 132.469490][ T6305] skb_release_data+0x560/0x730 [ 132.470915][ T6305] sk_skb_reason_drop+0x129/0x1a0 [ 132.472438][ T6305] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 132.474395][ T6305] ? kernel_text_address+0x8d/0x100 [ 132.475991][ T6305] ? hlock_class+0x4e/0x130 [ 132.477507][ T6305] ? __lock_acquire+0x163e/0x3ce0 [ 132.479177][ T6305] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 132.481183][ T6305] ? hlock_class+0x4e/0x130 [ 132.482407][ T6305] ? __lock_acquire+0xbdd/0x3ce0 [ 132.483799][ T6305] ? __pfx___lock_acquire+0x10/0x10 [ 132.485286][ T6305] __netif_receive_skb_list_core+0x357/0x950 [ 132.486999][ T6305] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 132.488815][ T6305] ? trace_lock_acquire+0x14a/0x1d0 [ 132.490285][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 132.492026][ T6305] ? lock_acquire+0x2f/0xb0 [ 132.493218][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 132.494921][ T6305] netif_receive_skb_list_internal+0x753/0xdb0 [ 132.496555][ T6305] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 132.498415][ T6305] ? __pfx_eth_type_trans+0x10/0x10 [ 132.499764][ T6305] ? __build_skb_around+0x278/0x3b0 [ 132.502247][ T6305] netif_receive_skb_list+0x4f/0x4a0 [ 132.503995][ T6305] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 132.505858][ T6305] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 132.507964][ T6305] ? bpf_test_timer_continue+0x150/0x3d0 [ 132.509760][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 132.511203][ T6305] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 132.512862][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 132.514432][ T6305] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 132.515986][ T6305] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 132.517518][ T6305] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 132.518803][ T6305] ? 0xffffffffa00045c0 [ 132.519917][ T6305] ? 0xffffffffa00045c0 [ 132.521036][ T6305] ? 0xffffffffa00045c0 [ 132.522122][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 132.523680][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 132.525117][ T6305] ? lock_acquire+0x2f/0xb0 [ 132.526332][ T6305] ? __fget_files+0x40/0x3f0 [ 132.527561][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 132.529101][ T6305] ? fput+0x30/0x390 [ 132.530147][ T6305] ? __bpf_prog_get+0xa0/0x290 [ 132.531363][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 132.532803][ T6305] __sys_bpf+0xfc6/0x49a0 [ 132.533885][ T6305] ? __pfx___sys_bpf+0x10/0x10 [ 132.535126][ T6305] ? __schedule+0xe5d/0x5730 [ 132.536318][ T6305] ? __fget_files+0x23a/0x3f0 [ 132.537526][ T6305] ? do_futex+0x123/0x350 [ 132.538588][ T6305] ? __pfx_do_futex+0x10/0x10 [ 132.539866][ T6305] ? xfd_validate_state+0x5d/0x180 [ 132.541250][ T6305] ? rcu_is_watching+0x12/0xc0 [ 132.542532][ T6305] __x64_sys_bpf+0x78/0xc0 [ 132.543781][ T6305] ? lockdep_hardirqs_on+0x7c/0x110 [ 132.545193][ T6305] do_syscall_64+0xcd/0x250 [ 132.546401][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.547964][ T6305] RIP: 0033:0x7fd45b57e719 [ 132.549060][ T6305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.554315][ T6305] RSP: 002b:00007fd45c319038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 132.556556][ T6305] RAX: ffffffffffffffda RBX: 00007fd45b736058 RCX: 00007fd45b57e719 [ 132.558555][ T6305] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 132.560506][ T6305] RBP: 00007fd45b5f132e R08: 0000000000000000 R09: 0000000000000000 [ 132.562661][ T6305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.564799][ T6305] R13: 0000000000000000 R14: 00007fd45b736058 R15: 00007ffd2e0c9fc8 [ 132.566929][ T6305] [ 132.567868][ T6305] BUG: Bad page state in process syz.1.66 pfn:3b271 [ 132.569663][ T6305] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803b271000 pfn:0x3b271 [ 132.572279][ T6305] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 132.574150][ T6305] raw: 00fff00000000000 dead000000000040 ffff88804cdea000 0000000000000000 [ 132.576400][ T6305] raw: ffff88803b271000 0000000000000001 00000000ffffffff 0000000000000000 [ 132.578768][ T6305] page dumped because: page_pool leak [ 132.579996][ T1411] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.580523][ T6305] page_owner tracks the page as allocated [ 132.582235][ T1411] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.585912][ T6305] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6305, tgid 6299 (syz.1.66), ts 127123756878, free_ts 126833731261 [ 132.590376][ T6305] post_alloc_hook+0x2d1/0x350 [ 132.591643][ T6305] get_page_from_freelist+0x101e/0x3070 [ 132.593092][ T6305] __alloc_pages_noprof+0x223/0x25a0 [ 132.594508][ T6305] alloc_pages_bulk_noprof+0x77c/0x1110 [ 132.596042][ T6305] __page_pool_alloc_pages_slow+0x18f/0x770 [ 132.597596][ T6305] page_pool_alloc_netmem+0xc4/0x160 [ 132.599048][ T6305] page_pool_alloc_pages+0x1a/0x60 [ 132.600394][ T6305] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 132.602009][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 132.603408][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 132.604818][ T6305] __sys_bpf+0xfc6/0x49a0 [ 132.605979][ T6305] __x64_sys_bpf+0x78/0xc0 [ 132.607157][ T6305] do_syscall_64+0xcd/0x250 [ 132.608373][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.609991][ T6305] page last free pid 6281 tgid 6279 stack trace: [ 132.611643][ T6305] free_unref_page+0x5f4/0xdc0 [ 132.612920][ T6305] __folio_put+0x30d/0x3d0 [ 132.614084][ T6305] put_page+0x21e/0x280 [ 132.615267][ T6305] page_pool_return_page+0x400/0x520 [ 132.616673][ T6305] page_pool_release+0xf4/0x7d0 [ 132.618078][ T6305] page_pool_destroy+0x10a/0x4c0 [ 132.619599][ T6305] bpf_test_run_xdp_live+0x3a1/0x500 [ 132.621135][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 132.622765][ T6305] __sys_bpf+0xfc6/0x49a0 [ 132.623994][ T6305] __x64_sys_bpf+0x78/0xc0 [ 132.625168][ T6305] do_syscall_64+0xcd/0x250 [ 132.626388][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.627948][ T6305] Modules linked in: [ 132.629059][ T6305] CPU: 3 UID: 0 PID: 6305 Comm: syz.1.66 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 132.632176][ T6305] Tainted: [B]=BAD_PAGE [ 132.633282][ T6305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 132.635965][ T6305] Call Trace: [ 132.636857][ T6305] [ 132.637646][ T6305] dump_stack_lvl+0x16c/0x1f0 [ 132.638918][ T6305] bad_page+0xb3/0x1f0 [ 132.640008][ T6305] ? __pfx_bad_page+0x10/0x10 [ 132.641257][ T6305] ? page_bad_reason+0x9d/0x1e0 [ 132.642548][ T6305] free_unref_page+0x657/0xdc0 [ 132.643942][ T6305] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 132.645559][ T6305] ? __phys_addr+0xc6/0x150 [ 132.646806][ T6305] skb_free_head+0xa0/0x1d0 [ 132.648031][ T6305] skb_release_data+0x560/0x730 [ 132.649321][ T6305] sk_skb_reason_drop+0x129/0x1a0 [ 132.650679][ T6305] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 132.652486][ T6305] ? kernel_text_address+0x8d/0x100 [ 132.653891][ T6305] ? hlock_class+0x4e/0x130 [ 132.655146][ T6305] ? __lock_acquire+0x163e/0x3ce0 [ 132.656469][ T6305] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 132.658259][ T6305] ? hlock_class+0x4e/0x130 [ 132.659451][ T6305] ? __lock_acquire+0xbdd/0x3ce0 [ 132.660746][ T6305] ? __pfx___lock_acquire+0x10/0x10 [ 132.662122][ T6305] __netif_receive_skb_list_core+0x357/0x950 [ 132.663702][ T6305] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 132.665391][ T6305] ? trace_lock_acquire+0x14a/0x1d0 [ 132.666772][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 132.668437][ T6305] ? lock_acquire+0x2f/0xb0 [ 132.669621][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 132.671165][ T6305] netif_receive_skb_list_internal+0x753/0xdb0 [ 132.672764][ T6305] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 132.674482][ T6305] ? __pfx_eth_type_trans+0x10/0x10 [ 132.675850][ T6305] ? __build_skb_around+0x278/0x3b0 [ 132.677221][ T6305] netif_receive_skb_list+0x4f/0x4a0 [ 132.678827][ T6305] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 132.680657][ T6305] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 132.683104][ T6305] ? bpf_test_timer_continue+0x150/0x3d0 [ 132.684708][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 132.686142][ T6305] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 132.687694][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 132.689263][ T6305] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 132.690872][ T6305] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 132.692419][ T6305] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 132.693813][ T6305] ? 0xffffffffa00045c0 [ 132.694921][ T6305] ? 0xffffffffa00045c0 [ 132.696005][ T6305] ? 0xffffffffa00045c0 [ 132.697127][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 132.698676][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 132.700112][ T6305] ? lock_acquire+0x2f/0xb0 [ 132.701303][ T6305] ? __fget_files+0x40/0x3f0 [ 132.702522][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 132.704059][ T6305] ? fput+0x30/0x390 [ 132.705103][ T6305] ? __bpf_prog_get+0xa0/0x290 [ 132.706387][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 132.707891][ T6305] __sys_bpf+0xfc6/0x49a0 [ 132.709037][ T6305] ? __pfx___sys_bpf+0x10/0x10 [ 132.710419][ T6305] ? __schedule+0xe5d/0x5730 [ 132.711816][ T6305] ? __fget_files+0x23a/0x3f0 [ 132.713231][ T6305] ? do_futex+0x123/0x350 [ 132.714535][ T6305] ? __pfx_do_futex+0x10/0x10 [ 132.716010][ T6305] ? xfd_validate_state+0x5d/0x180 [ 132.717601][ T6305] ? rcu_is_watching+0x12/0xc0 [ 132.719410][ T6305] __x64_sys_bpf+0x78/0xc0 [ 132.720845][ T6305] ? lockdep_hardirqs_on+0x7c/0x110 [ 132.722266][ T6305] do_syscall_64+0xcd/0x250 [ 132.723712][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.725316][ T6305] RIP: 0033:0x7fd45b57e719 [ 132.726532][ T6305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.731527][ T6305] RSP: 002b:00007fd45c319038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 132.733706][ T6305] RAX: ffffffffffffffda RBX: 00007fd45b736058 RCX: 00007fd45b57e719 [ 132.735850][ T6305] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 132.737931][ T6305] RBP: 00007fd45b5f132e R08: 0000000000000000 R09: 0000000000000000 [ 132.740402][ T6305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.743241][ T6305] R13: 0000000000000000 R14: 00007fd45b736058 R15: 00007ffd2e0c9fc8 [ 132.745341][ T6305] [ 132.746306][ T6305] BUG: Bad page state in process syz.1.66 pfn:490e2 [ 132.748065][ T6305] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x7f625cfee pfn:0x490e2 [ 132.750604][ T6305] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 132.752472][ T6305] raw: 00fff00000000000 dead000000000040 ffff88804cdea000 0000000000000000 [ 132.754776][ T6305] raw: 00000007f625cfee 0000000000000001 00000000ffffffff 0000000000000000 [ 132.757142][ T6305] page dumped because: page_pool leak [ 132.758778][ T6305] page_owner tracks the page as allocated [ 132.760632][ T6305] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6305, tgid 6299 (syz.1.66), ts 127123752403, free_ts 126833736618 [ 132.765553][ T6305] post_alloc_hook+0x2d1/0x350 [ 132.766826][ T6305] get_page_from_freelist+0x101e/0x3070 [ 132.768289][ T6305] __alloc_pages_noprof+0x223/0x25a0 [ 132.769736][ T6305] alloc_pages_bulk_noprof+0x77c/0x1110 [ 132.771206][ T6305] __page_pool_alloc_pages_slow+0x18f/0x770 [ 132.772762][ T6305] page_pool_alloc_netmem+0xc4/0x160 [ 132.774153][ T6305] page_pool_alloc_pages+0x1a/0x60 [ 132.775504][ T6305] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 132.777057][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 132.778432][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 132.779860][ T6305] __sys_bpf+0xfc6/0x49a0 [ 132.780981][ T6305] __x64_sys_bpf+0x78/0xc0 [ 132.782158][ T6305] do_syscall_64+0xcd/0x250 [ 132.783371][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.784963][ T6305] page last free pid 6281 tgid 6279 stack trace: [ 132.786699][ T6305] free_unref_page+0x5f4/0xdc0 [ 132.787992][ T6305] __folio_put+0x30d/0x3d0 [ 132.789191][ T6305] put_page+0x21e/0x280 [ 132.790351][ T6305] page_pool_return_page+0x400/0x520 [ 132.791855][ T6305] page_pool_release+0xf4/0x7d0 [ 132.793149][ T6305] page_pool_destroy+0x10a/0x4c0 [ 132.794571][ T6305] bpf_test_run_xdp_live+0x3a1/0x500 [ 132.796023][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 132.797534][ T6305] __sys_bpf+0xfc6/0x49a0 [ 132.798775][ T6305] __x64_sys_bpf+0x78/0xc0 [ 132.800007][ T6305] do_syscall_64+0xcd/0x250 [ 132.801256][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.803579][ T6305] Modules linked in: [ 132.804716][ T6305] CPU: 3 UID: 0 PID: 6305 Comm: syz.1.66 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 132.808408][ T6305] Tainted: [B]=BAD_PAGE [ 132.809770][ T6305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 132.812922][ T6305] Call Trace: [ 132.813856][ T6305] [ 132.814700][ T6305] dump_stack_lvl+0x16c/0x1f0 [ 132.816014][ T6305] bad_page+0xb3/0x1f0 [ 132.817145][ T6305] ? __pfx_bad_page+0x10/0x10 [ 132.818526][ T6305] ? page_bad_reason+0x9d/0x1e0 [ 132.819884][ T6305] free_unref_page+0x657/0xdc0 [ 132.821168][ T6305] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 132.822853][ T6305] ? __phys_addr+0xc6/0x150 [ 132.824045][ T6305] skb_free_head+0xa0/0x1d0 [ 132.825278][ T6305] skb_release_data+0x560/0x730 [ 132.826678][ T6305] sk_skb_reason_drop+0x129/0x1a0 [ 132.828096][ T6305] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 132.829845][ T6305] ? kernel_text_address+0x8d/0x100 [ 132.831242][ T6305] ? hlock_class+0x4e/0x130 [ 132.832450][ T6305] ? __lock_acquire+0x163e/0x3ce0 [ 132.833733][ T6305] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 132.835599][ T6305] ? hlock_class+0x4e/0x130 [ 132.836849][ T6305] ? __lock_acquire+0xbdd/0x3ce0 [ 132.838331][ T6305] ? __pfx___lock_acquire+0x10/0x10 [ 132.839826][ T6305] __netif_receive_skb_list_core+0x357/0x950 [ 132.841680][ T6305] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 132.843703][ T6305] ? trace_lock_acquire+0x14a/0x1d0 [ 132.845107][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 132.846800][ T6305] ? lock_acquire+0x2f/0xb0 [ 132.847999][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 132.849612][ T6305] netif_receive_skb_list_internal+0x753/0xdb0 [ 132.851236][ T6305] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 132.852982][ T6305] ? __pfx_eth_type_trans+0x10/0x10 [ 132.854415][ T6305] ? __build_skb_around+0x278/0x3b0 [ 132.855881][ T6305] netif_receive_skb_list+0x4f/0x4a0 [ 132.857426][ T6305] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 132.859063][ T6305] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 132.860907][ T6305] ? bpf_test_timer_continue+0x150/0x3d0 [ 132.862341][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 132.863731][ T6305] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 132.865278][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 132.866855][ T6305] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 132.868420][ T6305] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 132.869937][ T6305] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 132.871314][ T6305] ? 0xffffffffa00045c0 [ 132.872401][ T6305] ? 0xffffffffa00045c0 [ 132.873839][ T6305] ? 0xffffffffa00045c0 [ 132.874965][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 132.876489][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 132.878144][ T6305] ? lock_acquire+0x2f/0xb0 [ 132.879504][ T6305] ? __fget_files+0x40/0x3f0 [ 132.880722][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 132.882516][ T6305] ? fput+0x30/0x390 [ 132.883627][ T6305] ? __bpf_prog_get+0xa0/0x290 [ 132.885000][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 132.886652][ T6305] __sys_bpf+0xfc6/0x49a0 [ 132.887821][ T6305] ? __pfx___sys_bpf+0x10/0x10 [ 132.889106][ T6305] ? __schedule+0xe5d/0x5730 [ 132.890356][ T6305] ? __fget_files+0x23a/0x3f0 [ 132.891618][ T6305] ? do_futex+0x123/0x350 [ 132.892775][ T6305] ? __pfx_do_futex+0x10/0x10 [ 132.894117][ T6305] ? xfd_validate_state+0x5d/0x180 [ 132.895530][ T6305] ? rcu_is_watching+0x12/0xc0 [ 132.896804][ T6305] __x64_sys_bpf+0x78/0xc0 [ 132.897986][ T6305] ? lockdep_hardirqs_on+0x7c/0x110 [ 132.899350][ T6305] do_syscall_64+0xcd/0x250 [ 132.900544][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.902111][ T6305] RIP: 0033:0x7fd45b57e719 [ 132.903296][ T6305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.908303][ T6305] RSP: 002b:00007fd45c319038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 132.910463][ T6305] RAX: ffffffffffffffda RBX: 00007fd45b736058 RCX: 00007fd45b57e719 [ 132.912527][ T6305] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 132.914590][ T6305] RBP: 00007fd45b5f132e R08: 0000000000000000 R09: 0000000000000000 [ 132.916897][ T6305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.919192][ T6305] R13: 0000000000000000 R14: 00007fd45b736058 R15: 00007ffd2e0c9fc8 [ 132.921279][ T6305] [ 132.922605][ T6305] BUG: Bad page state in process syz.1.66 pfn:32a7c [ 132.924370][ T6305] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888032a7cd90 pfn:0x32a7c [ 132.927105][ T6305] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 132.929057][ T6305] raw: 00fff00000000000 dead000000000040 ffff88804cdea000 0000000000000000 [ 132.931291][ T6305] raw: ffff888032a7cd90 0000000000000001 00000000ffffffff 0000000000000000 [ 132.933524][ T6305] page dumped because: page_pool leak [ 132.934945][ T6305] page_owner tracks the page as allocated [ 132.936444][ T6305] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6305, tgid 6299 (syz.1.66), ts 127123747751, free_ts 126833754906 [ 132.941093][ T6305] post_alloc_hook+0x2d1/0x350 [ 132.942410][ T6305] get_page_from_freelist+0x101e/0x3070 [ 132.943942][ T6305] __alloc_pages_noprof+0x223/0x25a0 [ 132.945532][ T6305] alloc_pages_bulk_noprof+0x77c/0x1110 [ 132.947223][ T6305] __page_pool_alloc_pages_slow+0x18f/0x770 [ 132.948939][ T6305] page_pool_alloc_netmem+0xc4/0x160 [ 132.950371][ T6305] page_pool_alloc_pages+0x1a/0x60 [ 132.951720][ T6305] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 132.953361][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 132.954764][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 132.956170][ T6305] __sys_bpf+0xfc6/0x49a0 [ 132.957298][ T6305] __x64_sys_bpf+0x78/0xc0 [ 132.958491][ T6305] do_syscall_64+0xcd/0x250 [ 132.959783][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.961432][ T6305] page last free pid 6281 tgid 6279 stack trace: [ 132.963205][ T6305] free_unref_page+0x5f4/0xdc0 [ 132.964543][ T6305] __folio_put+0x30d/0x3d0 [ 132.965779][ T6305] put_page+0x21e/0x280 [ 132.966947][ T6305] page_pool_return_page+0x400/0x520 [ 132.968487][ T6305] page_pool_release+0xf4/0x7d0 [ 132.970134][ T6305] page_pool_destroy+0x10a/0x4c0 [ 132.971553][ T6305] bpf_test_run_xdp_live+0x3a1/0x500 [ 132.973018][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 132.974540][ T6305] __sys_bpf+0xfc6/0x49a0 [ 132.975798][ T6305] __x64_sys_bpf+0x78/0xc0 [ 132.977201][ T6305] do_syscall_64+0xcd/0x250 [ 132.978601][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.980206][ T6305] Modules linked in: [ 132.981263][ T6305] CPU: 3 UID: 0 PID: 6305 Comm: syz.1.66 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 132.984453][ T6305] Tainted: [B]=BAD_PAGE [ 132.985592][ T6305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 132.988764][ T6305] Call Trace: [ 132.989831][ T6305] [ 132.990802][ T6305] dump_stack_lvl+0x16c/0x1f0 [ 132.992080][ T6305] bad_page+0xb3/0x1f0 [ 132.993175][ T6305] ? __pfx_bad_page+0x10/0x10 [ 132.994443][ T6305] ? page_bad_reason+0x9d/0x1e0 [ 132.995732][ T6305] free_unref_page+0x657/0xdc0 [ 132.997004][ T6305] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 132.998603][ T6305] ? __phys_addr+0xc6/0x150 [ 132.999826][ T6305] skb_free_head+0xa0/0x1d0 [ 133.000933][ T6305] skb_release_data+0x560/0x730 [ 133.002223][ T6305] sk_skb_reason_drop+0x129/0x1a0 [ 133.003566][ T6305] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 133.005409][ T6305] ? kernel_text_address+0x8d/0x100 [ 133.006893][ T6305] ? hlock_class+0x4e/0x130 [ 133.008182][ T6305] ? __lock_acquire+0x163e/0x3ce0 [ 133.009606][ T6305] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 133.011557][ T6305] ? hlock_class+0x4e/0x130 [ 133.012758][ T6305] ? __lock_acquire+0xbdd/0x3ce0 [ 133.014057][ T6305] ? __pfx___lock_acquire+0x10/0x10 [ 133.015433][ T6305] __netif_receive_skb_list_core+0x357/0x950 [ 133.017013][ T6305] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 133.018961][ T6305] ? trace_lock_acquire+0x14a/0x1d0 [ 133.020664][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 133.022944][ T6305] ? lock_acquire+0x2f/0xb0 [ 133.024259][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 133.026077][ T6305] netif_receive_skb_list_internal+0x753/0xdb0 [ 133.027985][ T6305] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 133.029923][ T6305] ? __pfx_eth_type_trans+0x10/0x10 [ 133.031452][ T6305] ? __build_skb_around+0x278/0x3b0 [ 133.033043][ T6305] netif_receive_skb_list+0x4f/0x4a0 [ 133.034667][ T6305] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 133.036547][ T6305] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 133.038571][ T6305] ? bpf_test_timer_continue+0x150/0x3d0 [ 133.040166][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 133.041571][ T6305] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 133.043116][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 133.044664][ T6305] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 133.046216][ T6305] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 133.047732][ T6305] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 133.049121][ T6305] ? 0xffffffffa00045c0 [ 133.050209][ T6305] ? 0xffffffffa00045c0 [ 133.051304][ T6305] ? 0xffffffffa00045c0 [ 133.052401][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 133.053945][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 133.055358][ T6305] ? lock_acquire+0x2f/0xb0 [ 133.056547][ T6305] ? __fget_files+0x40/0x3f0 [ 133.057859][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 133.059736][ T6305] ? fput+0x30/0x390 [ 133.060966][ T6305] ? __bpf_prog_get+0xa0/0x290 [ 133.062391][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 133.064151][ T6305] __sys_bpf+0xfc6/0x49a0 [ 133.065438][ T6305] ? __pfx___sys_bpf+0x10/0x10 [ 133.066791][ T6305] ? __schedule+0xe5d/0x5730 [ 133.068025][ T6305] ? __fget_files+0x23a/0x3f0 [ 133.069280][ T6305] ? do_futex+0x123/0x350 [ 133.070431][ T6305] ? __pfx_do_futex+0x10/0x10 [ 133.071680][ T6305] ? xfd_validate_state+0x5d/0x180 [ 133.073036][ T6305] ? rcu_is_watching+0x12/0xc0 [ 133.074325][ T6305] __x64_sys_bpf+0x78/0xc0 [ 133.075512][ T6305] ? lockdep_hardirqs_on+0x7c/0x110 [ 133.076886][ T6305] do_syscall_64+0xcd/0x250 [ 133.078118][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.079707][ T6305] RIP: 0033:0x7fd45b57e719 [ 133.080886][ T6305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.085901][ T6305] RSP: 002b:00007fd45c319038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 133.088091][ T6305] RAX: ffffffffffffffda RBX: 00007fd45b736058 RCX: 00007fd45b57e719 [ 133.090165][ T6305] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 133.092233][ T6305] RBP: 00007fd45b5f132e R08: 0000000000000000 R09: 0000000000000000 [ 133.094306][ T6305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.096608][ T6305] R13: 0000000000000000 R14: 00007fd45b736058 R15: 00007ffd2e0c9fc8 [ 133.098775][ T6305] [ 133.099760][ T6305] BUG: Bad page state in process syz.1.66 pfn:4cf01 [ 133.101531][ T6305] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2 pfn:0x4cf01 [ 133.104338][ T6305] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 133.106431][ T6305] raw: 00fff00000000000 dead000000000040 ffff88804cdea000 0000000000000000 [ 133.108830][ T6305] raw: 0000000000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 133.111104][ T6305] page dumped because: page_pool leak [ 133.112506][ T6305] page_owner tracks the page as allocated [ 133.114481][ T6305] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6305, tgid 6299 (syz.1.66), ts 127123743327, free_ts 126833759860 [ 133.119224][ T6305] post_alloc_hook+0x2d1/0x350 [ 133.120611][ T6305] get_page_from_freelist+0x101e/0x3070 [ 133.122355][ T6305] __alloc_pages_noprof+0x223/0x25a0 [ 133.123868][ T6305] alloc_pages_bulk_noprof+0x77c/0x1110 [ 133.125555][ T6305] __page_pool_alloc_pages_slow+0x18f/0x770 [ 133.127171][ T6305] page_pool_alloc_netmem+0xc4/0x160 [ 133.128595][ T6305] page_pool_alloc_pages+0x1a/0x60 [ 133.130132][ T6305] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 133.131958][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 133.133628][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 133.135658][ T6305] __sys_bpf+0xfc6/0x49a0 [ 133.136958][ T6305] __x64_sys_bpf+0x78/0xc0 [ 133.138360][ T6305] do_syscall_64+0xcd/0x250 [ 133.140208][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.141954][ T6305] page last free pid 6281 tgid 6279 stack trace: [ 133.143736][ T6305] free_unref_page+0x5f4/0xdc0 [ 133.145022][ T6305] __folio_put+0x30d/0x3d0 [ 133.146241][ T6305] put_page+0x21e/0x280 [ 133.147344][ T6305] page_pool_return_page+0x400/0x520 [ 133.148804][ T6305] page_pool_release+0xf4/0x7d0 [ 133.150110][ T6305] page_pool_destroy+0x10a/0x4c0 [ 133.151435][ T6305] bpf_test_run_xdp_live+0x3a1/0x500 [ 133.152832][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 133.154609][ T6305] __sys_bpf+0xfc6/0x49a0 [ 133.155888][ T6305] __x64_sys_bpf+0x78/0xc0 [ 133.157178][ T6305] do_syscall_64+0xcd/0x250 [ 133.158517][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.160288][ T6305] Modules linked in: [ 133.161475][ T6305] CPU: 3 UID: 0 PID: 6305 Comm: syz.1.66 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 133.164765][ T6305] Tainted: [B]=BAD_PAGE [ 133.165807][ T6305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 133.168537][ T6305] Call Trace: [ 133.169403][ T6305] [ 133.170238][ T6305] dump_stack_lvl+0x16c/0x1f0 [ 133.171483][ T6305] bad_page+0xb3/0x1f0 [ 133.172559][ T6305] ? __pfx_bad_page+0x10/0x10 [ 133.173793][ T6305] ? page_bad_reason+0x9d/0x1e0 [ 133.175074][ T6305] free_unref_page+0x657/0xdc0 [ 133.176490][ T6305] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 133.178076][ T6305] ? __phys_addr+0xc6/0x150 [ 133.179490][ T6305] skb_free_head+0xa0/0x1d0 [ 133.180912][ T6305] skb_release_data+0x560/0x730 [ 133.182235][ T6305] sk_skb_reason_drop+0x129/0x1a0 [ 133.183685][ T6305] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 133.185670][ T6305] ? kernel_text_address+0x8d/0x100 [ 133.187168][ T6305] ? hlock_class+0x4e/0x130 [ 133.188444][ T6305] ? __lock_acquire+0x163e/0x3ce0 [ 133.189874][ T6305] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 133.191812][ T6305] ? hlock_class+0x4e/0x130 [ 133.192957][ T6305] ? __lock_acquire+0xbdd/0x3ce0 [ 133.194469][ T6305] ? __pfx___lock_acquire+0x10/0x10 [ 133.196514][ T6305] __netif_receive_skb_list_core+0x357/0x950 [ 133.198247][ T6305] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 133.200054][ T6305] ? trace_lock_acquire+0x14a/0x1d0 [ 133.201450][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 133.203319][ T6305] ? lock_acquire+0x2f/0xb0 [ 133.204591][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 133.206354][ T6305] netif_receive_skb_list_internal+0x753/0xdb0 [ 133.208044][ T6305] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 133.210003][ T6305] ? __pfx_eth_type_trans+0x10/0x10 [ 133.211680][ T6305] ? __build_skb_around+0x278/0x3b0 [ 133.213225][ T6305] netif_receive_skb_list+0x4f/0x4a0 [ 133.214813][ T6305] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 133.216626][ T6305] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 133.218379][ T6305] ? bpf_test_timer_continue+0x150/0x3d0 [ 133.219871][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 133.221312][ T6305] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 133.222901][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 133.224518][ T6305] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 133.226579][ T6305] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 133.228311][ T6305] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 133.229718][ T6305] ? 0xffffffffa00045c0 [ 133.230847][ T6305] ? 0xffffffffa00045c0 [ 133.231960][ T6305] ? 0xffffffffa00045c0 [ 133.233067][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 133.234643][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 133.236289][ T6305] ? lock_acquire+0x2f/0xb0 [ 133.237492][ T6305] ? __fget_files+0x40/0x3f0 [ 133.238722][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 133.240471][ T6305] ? fput+0x30/0x390 [ 133.241521][ T6305] ? __bpf_prog_get+0xa0/0x290 [ 133.242819][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 133.244363][ T6305] __sys_bpf+0xfc6/0x49a0 [ 133.245514][ T6305] ? __pfx___sys_bpf+0x10/0x10 [ 133.246812][ T6305] ? __schedule+0xe5d/0x5730 [ 133.248051][ T6305] ? __fget_files+0x23a/0x3f0 [ 133.249326][ T6305] ? do_futex+0x123/0x350 [ 133.250644][ T6305] ? __pfx_do_futex+0x10/0x10 [ 133.251955][ T6305] ? xfd_validate_state+0x5d/0x180 [ 133.253322][ T6305] ? rcu_is_watching+0x12/0xc0 [ 133.254623][ T6305] __x64_sys_bpf+0x78/0xc0 [ 133.255822][ T6305] ? lockdep_hardirqs_on+0x7c/0x110 [ 133.257268][ T6305] do_syscall_64+0xcd/0x250 [ 133.258500][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.260128][ T6305] RIP: 0033:0x7fd45b57e719 [ 133.261360][ T6305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.266550][ T6305] RSP: 002b:00007fd45c319038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 133.268732][ T6305] RAX: ffffffffffffffda RBX: 00007fd45b736058 RCX: 00007fd45b57e719 [ 133.270817][ T6305] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 133.272895][ T6305] RBP: 00007fd45b5f132e R08: 0000000000000000 R09: 0000000000000000 [ 133.274955][ T6305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.277334][ T6305] R13: 0000000000000000 R14: 00007fd45b736058 R15: 00007ffd2e0c9fc8 [ 133.279449][ T6305] [ 133.280386][ T6305] BUG: Bad page state in process syz.1.66 pfn:4034d [ 133.282124][ T6305] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804034d000 pfn:0x4034d [ 133.285026][ T6305] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 133.286892][ T6305] raw: 00fff00000000000 dead000000000040 ffff88804cdea000 0000000000000000 [ 133.289179][ T6305] raw: ffff88804034d000 0000000000000001 00000000ffffffff 0000000000000000 [ 133.291371][ T6305] page dumped because: page_pool leak [ 133.292788][ T6305] page_owner tracks the page as allocated [ 133.294325][ T6305] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6305, tgid 6299 (syz.1.66), ts 127123738877, free_ts 126833763837 [ 133.299005][ T6305] post_alloc_hook+0x2d1/0x350 [ 133.300392][ T6305] get_page_from_freelist+0x101e/0x3070 [ 133.301839][ T6305] __alloc_pages_noprof+0x223/0x25a0 [ 133.303303][ T6305] alloc_pages_bulk_noprof+0x77c/0x1110 [ 133.304996][ T6305] __page_pool_alloc_pages_slow+0x18f/0x770 [ 133.306709][ T6305] page_pool_alloc_netmem+0xc4/0x160 [ 133.308268][ T6305] page_pool_alloc_pages+0x1a/0x60 [ 133.309884][ T6305] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 133.311557][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 133.313596][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 133.315204][ T6305] __sys_bpf+0xfc6/0x49a0 [ 133.316413][ T6305] __x64_sys_bpf+0x78/0xc0 [ 133.317840][ T6305] do_syscall_64+0xcd/0x250 [ 133.319532][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.321238][ T6305] page last free pid 6281 tgid 6279 stack trace: [ 133.322982][ T6305] free_unref_page+0x5f4/0xdc0 [ 133.324426][ T6305] __folio_put+0x30d/0x3d0 [ 133.325624][ T6305] put_page+0x21e/0x280 [ 133.326753][ T6305] page_pool_return_page+0x400/0x520 [ 133.328114][ T6305] page_pool_release+0xf4/0x7d0 [ 133.329469][ T6305] page_pool_destroy+0x10a/0x4c0 [ 133.330784][ T6305] bpf_test_run_xdp_live+0x3a1/0x500 [ 133.332135][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 133.333989][ T6305] __sys_bpf+0xfc6/0x49a0 [ 133.335148][ T6305] __x64_sys_bpf+0x78/0xc0 [ 133.336542][ T6305] do_syscall_64+0xcd/0x250 [ 133.337775][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.339395][ T6305] Modules linked in: [ 133.340449][ T6305] CPU: 3 UID: 0 PID: 6305 Comm: syz.1.66 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 133.343608][ T6305] Tainted: [B]=BAD_PAGE [ 133.344740][ T6305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 133.347713][ T6305] Call Trace: [ 133.348676][ T6305] [ 133.349516][ T6305] dump_stack_lvl+0x16c/0x1f0 [ 133.350859][ T6305] bad_page+0xb3/0x1f0 [ 133.352088][ T6305] ? __pfx_bad_page+0x10/0x10 [ 133.353443][ T6305] ? page_bad_reason+0x9d/0x1e0 [ 133.355231][ T6305] free_unref_page+0x657/0xdc0 [ 133.357269][ T6305] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 133.359226][ T6305] ? __phys_addr+0xc6/0x150 [ 133.360502][ T6305] skb_free_head+0xa0/0x1d0 [ 133.361815][ T6305] skb_release_data+0x560/0x730 [ 133.363075][ T6305] sk_skb_reason_drop+0x129/0x1a0 [ 133.364542][ T6305] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 133.366422][ T6305] ? kernel_text_address+0x8d/0x100 [ 133.367767][ T6305] ? hlock_class+0x4e/0x130 [ 133.368952][ T6305] ? __lock_acquire+0x163e/0x3ce0 [ 133.370277][ T6305] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 133.372164][ T6305] ? hlock_class+0x4e/0x130 [ 133.373379][ T6305] ? __lock_acquire+0xbdd/0x3ce0 [ 133.374976][ T6305] ? __pfx___lock_acquire+0x10/0x10 [ 133.376642][ T6305] __netif_receive_skb_list_core+0x357/0x950 [ 133.378907][ T6305] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 133.381058][ T6305] ? trace_lock_acquire+0x14a/0x1d0 [ 133.382971][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 133.385174][ T6305] ? lock_acquire+0x2f/0xb0 [ 133.386812][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 133.388630][ T6305] netif_receive_skb_list_internal+0x753/0xdb0 [ 133.390374][ T6305] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 133.392130][ T6305] ? __pfx_eth_type_trans+0x10/0x10 [ 133.393555][ T6305] ? __build_skb_around+0x278/0x3b0 [ 133.394965][ T6305] netif_receive_skb_list+0x4f/0x4a0 [ 133.396704][ T6305] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 133.398379][ T6305] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 133.400073][ T6305] ? bpf_test_timer_continue+0x150/0x3d0 [ 133.401593][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 133.402981][ T6305] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 133.404499][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 133.406068][ T6305] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 133.407978][ T6305] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 133.409530][ T6305] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 133.410972][ T6305] ? 0xffffffffa00045c0 [ 133.412060][ T6305] ? 0xffffffffa00045c0 [ 133.413253][ T6305] ? 0xffffffffa00045c0 [ 133.414448][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 133.416361][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 133.417816][ T6305] ? lock_acquire+0x2f/0xb0 [ 133.419030][ T6305] ? __fget_files+0x40/0x3f0 [ 133.420250][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 133.421795][ T6305] ? fput+0x30/0x390 [ 133.422849][ T6305] ? __bpf_prog_get+0xa0/0x290 [ 133.424121][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 133.425643][ T6305] __sys_bpf+0xfc6/0x49a0 [ 133.426955][ T6305] ? __pfx___sys_bpf+0x10/0x10 [ 133.428230][ T6305] ? __schedule+0xe5d/0x5730 [ 133.429451][ T6305] ? __fget_files+0x23a/0x3f0 [ 133.430700][ T6305] ? do_futex+0x123/0x350 [ 133.431831][ T6305] ? __pfx_do_futex+0x10/0x10 [ 133.433090][ T6305] ? xfd_validate_state+0x5d/0x180 [ 133.434442][ T6305] ? rcu_is_watching+0x12/0xc0 [ 133.435710][ T6305] __x64_sys_bpf+0x78/0xc0 [ 133.436898][ T6305] ? lockdep_hardirqs_on+0x7c/0x110 [ 133.438289][ T6305] do_syscall_64+0xcd/0x250 [ 133.439675][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.441479][ T6305] RIP: 0033:0x7fd45b57e719 [ 133.442721][ T6305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.447982][ T6305] RSP: 002b:00007fd45c319038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 133.450510][ T6305] RAX: ffffffffffffffda RBX: 00007fd45b736058 RCX: 00007fd45b57e719 [ 133.452722][ T6305] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 133.455202][ T6305] RBP: 00007fd45b5f132e R08: 0000000000000000 R09: 0000000000000000 [ 133.457528][ T6305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.460275][ T6305] R13: 0000000000000000 R14: 00007fd45b736058 R15: 00007ffd2e0c9fc8 [ 133.462479][ T6305] [ 133.463506][ T6305] BUG: Bad page state in process syz.1.66 pfn:2849b [ 133.465395][ T6305] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2849b [ 133.467728][ T6305] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 133.469613][ T6305] raw: 00fff00000000000 dead000000000040 ffff88804cdea000 0000000000000000 [ 133.471851][ T6305] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 133.474075][ T6305] page dumped because: page_pool leak [ 133.475882][ T6305] page_owner tracks the page as allocated [ 133.477541][ T6305] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6305, tgid 6299 (syz.1.66), ts 127123734262, free_ts 126833767623 [ 133.483218][ T6305] post_alloc_hook+0x2d1/0x350 [ 133.484625][ T6305] get_page_from_freelist+0x101e/0x3070 [ 133.486230][ T6305] __alloc_pages_noprof+0x223/0x25a0 [ 133.487824][ T6305] alloc_pages_bulk_noprof+0x77c/0x1110 [ 133.489411][ T6305] __page_pool_alloc_pages_slow+0x18f/0x770 [ 133.490982][ T6305] page_pool_alloc_netmem+0xc4/0x160 [ 133.492369][ T6305] page_pool_alloc_pages+0x1a/0x60 [ 133.493717][ T6305] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 133.495488][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 133.496896][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 133.498286][ T6305] __sys_bpf+0xfc6/0x49a0 [ 133.499564][ T6305] __x64_sys_bpf+0x78/0xc0 [ 133.500857][ T6305] do_syscall_64+0xcd/0x250 [ 133.502108][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.503777][ T6305] page last free pid 6281 tgid 6279 stack trace: [ 133.505543][ T6305] free_unref_page+0x5f4/0xdc0 [ 133.506870][ T6305] __folio_put+0x30d/0x3d0 [ 133.508064][ T6305] put_page+0x21e/0x280 [ 133.509243][ T6305] page_pool_return_page+0x400/0x520 [ 133.510766][ T6305] page_pool_release+0xf4/0x7d0 [ 133.512091][ T6305] page_pool_destroy+0x10a/0x4c0 [ 133.513408][ T6305] bpf_test_run_xdp_live+0x3a1/0x500 [ 133.514833][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 133.516268][ T6305] __sys_bpf+0xfc6/0x49a0 [ 133.517525][ T6305] __x64_sys_bpf+0x78/0xc0 [ 133.518741][ T6305] do_syscall_64+0xcd/0x250 [ 133.520147][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.522074][ T6305] Modules linked in: [ 133.523136][ T6305] CPU: 3 UID: 0 PID: 6305 Comm: syz.1.66 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 133.526347][ T6305] Tainted: [B]=BAD_PAGE [ 133.527453][ T6305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 133.530274][ T6305] Call Trace: [ 133.531162][ T6305] [ 133.531946][ T6305] dump_stack_lvl+0x16c/0x1f0 [ 133.533222][ T6305] bad_page+0xb3/0x1f0 [ 133.534512][ T6305] ? __pfx_bad_page+0x10/0x10 [ 133.536050][ T6305] ? page_bad_reason+0x9d/0x1e0 [ 133.537473][ T6305] free_unref_page+0x657/0xdc0 [ 133.538794][ T6305] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 133.540365][ T6305] ? __phys_addr+0xc6/0x150 [ 133.541733][ T6305] skb_free_head+0xa0/0x1d0 [ 133.542992][ T6305] skb_release_data+0x560/0x730 [ 133.544266][ T6305] sk_skb_reason_drop+0x129/0x1a0 [ 133.545738][ T6305] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 133.547527][ T6305] ? kernel_text_address+0x8d/0x100 [ 133.548915][ T6305] ? hlock_class+0x4e/0x130 [ 133.550160][ T6305] ? __lock_acquire+0x163e/0x3ce0 [ 133.551503][ T6305] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 133.553516][ T6305] ? hlock_class+0x4e/0x130 [ 133.555026][ T6305] ? __lock_acquire+0xbdd/0x3ce0 [ 133.556603][ T6305] ? __pfx___lock_acquire+0x10/0x10 [ 133.558285][ T6305] __netif_receive_skb_list_core+0x357/0x950 [ 133.559920][ T6305] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 133.561714][ T6305] ? trace_lock_acquire+0x14a/0x1d0 [ 133.563270][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 133.565103][ T6305] ? lock_acquire+0x2f/0xb0 [ 133.566540][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 133.568502][ T6305] netif_receive_skb_list_internal+0x753/0xdb0 [ 133.570565][ T6305] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 133.572515][ T6305] ? __pfx_eth_type_trans+0x10/0x10 [ 133.574179][ T6305] ? __build_skb_around+0x278/0x3b0 [ 133.575670][ T6305] netif_receive_skb_list+0x4f/0x4a0 [ 133.577498][ T6305] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 133.579446][ T6305] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 133.581245][ T6305] ? bpf_test_timer_continue+0x150/0x3d0 [ 133.582794][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 133.584535][ T6305] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 133.586129][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 133.587678][ T6305] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 133.589177][ T6305] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 133.590712][ T6305] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 133.592104][ T6305] ? 0xffffffffa00045c0 [ 133.593198][ T6305] ? 0xffffffffa00045c0 [ 133.594303][ T6305] ? 0xffffffffa00045c0 [ 133.595441][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 133.597035][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 133.598473][ T6305] ? lock_acquire+0x2f/0xb0 [ 133.599664][ T6305] ? __fget_files+0x40/0x3f0 [ 133.600887][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 133.602418][ T6305] ? fput+0x30/0x390 [ 133.603452][ T6305] ? __bpf_prog_get+0xa0/0x290 [ 133.604722][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 133.606277][ T6305] __sys_bpf+0xfc6/0x49a0 [ 133.607419][ T6305] ? __pfx___sys_bpf+0x10/0x10 [ 133.608672][ T6305] ? __schedule+0xe5d/0x5730 [ 133.609898][ T6305] ? __fget_files+0x23a/0x3f0 [ 133.611150][ T6305] ? do_futex+0x123/0x350 [ 133.612302][ T6305] ? __pfx_do_futex+0x10/0x10 [ 133.613743][ T6305] ? xfd_validate_state+0x5d/0x180 [ 133.615327][ T6305] ? rcu_is_watching+0x12/0xc0 [ 133.616598][ T6305] __x64_sys_bpf+0x78/0xc0 [ 133.617770][ T6305] ? lockdep_hardirqs_on+0x7c/0x110 [ 133.619184][ T6305] do_syscall_64+0xcd/0x250 [ 133.620393][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.622068][ T6305] RIP: 0033:0x7fd45b57e719 [ 133.623282][ T6305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.628530][ T6305] RSP: 002b:00007fd45c319038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 133.630731][ T6305] RAX: ffffffffffffffda RBX: 00007fd45b736058 RCX: 00007fd45b57e719 [ 133.632812][ T6305] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 133.635314][ T6305] RBP: 00007fd45b5f132e R08: 0000000000000000 R09: 0000000000000000 [ 133.637547][ T6305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.639691][ T6305] R13: 0000000000000000 R14: 00007fd45b736058 R15: 00007ffd2e0c9fc8 [ 133.641752][ T6305] [ 133.642671][ T6305] BUG: Bad page state in process syz.1.66 pfn:31189 [ 133.644390][ T6305] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x31189 [ 133.646662][ T6305] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 133.648515][ T6305] raw: 00fff00000000000 dead000000000040 ffff88804cdea000 0000000000000000 [ 133.650981][ T6305] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 133.653390][ T6305] page dumped because: page_pool leak [ 133.654819][ T6305] page_owner tracks the page as allocated [ 133.656313][ T6305] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6305, tgid 6299 (syz.1.66), ts 127123729738, free_ts 126833771430 [ 133.661115][ T6305] post_alloc_hook+0x2d1/0x350 [ 133.662529][ T6305] get_page_from_freelist+0x101e/0x3070 [ 133.664139][ T6305] __alloc_pages_noprof+0x223/0x25a0 [ 133.665543][ T6305] alloc_pages_bulk_noprof+0x77c/0x1110 [ 133.667042][ T6305] __page_pool_alloc_pages_slow+0x18f/0x770 [ 133.668618][ T6305] page_pool_alloc_netmem+0xc4/0x160 [ 133.670114][ T6305] page_pool_alloc_pages+0x1a/0x60 [ 133.671469][ T6305] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 133.673100][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 133.674641][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 133.676051][ T6305] __sys_bpf+0xfc6/0x49a0 [ 133.677304][ T6305] __x64_sys_bpf+0x78/0xc0 [ 133.678576][ T6305] do_syscall_64+0xcd/0x250 [ 133.679949][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.681652][ T6305] page last free pid 6281 tgid 6279 stack trace: [ 133.683464][ T6305] free_unref_page+0x5f4/0xdc0 [ 133.684721][ T6305] __folio_put+0x30d/0x3d0 [ 133.685999][ T6305] put_page+0x21e/0x280 [ 133.687132][ T6305] page_pool_return_page+0x400/0x520 [ 133.688584][ T6305] page_pool_release+0xf4/0x7d0 [ 133.689965][ T6305] page_pool_destroy+0x10a/0x4c0 [ 133.691292][ T6305] bpf_test_run_xdp_live+0x3a1/0x500 [ 133.692704][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 133.694143][ T6305] __sys_bpf+0xfc6/0x49a0 [ 133.695463][ T6305] __x64_sys_bpf+0x78/0xc0 [ 133.696832][ T6305] do_syscall_64+0xcd/0x250 [ 133.698230][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.699858][ T6305] Modules linked in: [ 133.701108][ T6305] CPU: 3 UID: 0 PID: 6305 Comm: syz.1.66 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 133.704550][ T6305] Tainted: [B]=BAD_PAGE [ 133.705704][ T6305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 133.708805][ T6305] Call Trace: [ 133.709731][ T6305] [ 133.710563][ T6305] dump_stack_lvl+0x16c/0x1f0 [ 133.711869][ T6305] bad_page+0xb3/0x1f0 [ 133.713011][ T6305] ? __pfx_bad_page+0x10/0x10 [ 133.714333][ T6305] ? page_bad_reason+0x9d/0x1e0 [ 133.715773][ T6305] free_unref_page+0x657/0xdc0 [ 133.717218][ T6305] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 133.719347][ T6305] ? __phys_addr+0xc6/0x150 [ 133.720572][ T6305] skb_free_head+0xa0/0x1d0 [ 133.722007][ T6305] skb_release_data+0x560/0x730 [ 133.723413][ T6305] sk_skb_reason_drop+0x129/0x1a0 [ 133.724788][ T6305] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 133.726564][ T6305] ? kernel_text_address+0x8d/0x100 [ 133.727932][ T6305] ? hlock_class+0x4e/0x130 [ 133.729148][ T6305] ? __lock_acquire+0x163e/0x3ce0 [ 133.730486][ T6305] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 133.732346][ T6305] ? hlock_class+0x4e/0x130 [ 133.733569][ T6305] ? __lock_acquire+0xbdd/0x3ce0 [ 133.734899][ T6305] ? __pfx___lock_acquire+0x10/0x10 [ 133.736289][ T6305] __netif_receive_skb_list_core+0x357/0x950 [ 133.737889][ T6305] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 133.739873][ T6305] ? trace_lock_acquire+0x14a/0x1d0 [ 133.741532][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 133.743406][ T6305] ? lock_acquire+0x2f/0xb0 [ 133.744709][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 133.746925][ T6305] netif_receive_skb_list_internal+0x753/0xdb0 [ 133.748936][ T6305] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 133.750788][ T6305] ? __pfx_eth_type_trans+0x10/0x10 [ 133.752183][ T6305] ? __build_skb_around+0x278/0x3b0 [ 133.753578][ T6305] netif_receive_skb_list+0x4f/0x4a0 [ 133.754977][ T6305] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 133.756635][ T6305] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 133.758617][ T6305] ? bpf_test_timer_continue+0x150/0x3d0 [ 133.760446][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 133.761782][ T6305] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 133.763305][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 133.764836][ T6305] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 133.766733][ T6305] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 133.768450][ T6305] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 133.769947][ T6305] ? 0xffffffffa00045c0 [ 133.771045][ T6305] ? 0xffffffffa00045c0 [ 133.772152][ T6305] ? 0xffffffffa00045c0 [ 133.773487][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 133.775517][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 133.777108][ T6305] ? lock_acquire+0x2f/0xb0 [ 133.778337][ T6305] ? __fget_files+0x40/0x3f0 [ 133.780127][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 133.781824][ T6305] ? fput+0x30/0x390 [ 133.783049][ T6305] ? __bpf_prog_get+0xa0/0x290 [ 133.784321][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 133.785910][ T6305] __sys_bpf+0xfc6/0x49a0 [ 133.787114][ T6305] ? __pfx___sys_bpf+0x10/0x10 [ 133.788435][ T6305] ? __schedule+0xe5d/0x5730 [ 133.789700][ T6305] ? __fget_files+0x23a/0x3f0 [ 133.791010][ T6305] ? do_futex+0x123/0x350 [ 133.792257][ T6305] ? __pfx_do_futex+0x10/0x10 [ 133.793428][ T6305] ? xfd_validate_state+0x5d/0x180 [ 133.794986][ T6305] ? rcu_is_watching+0x12/0xc0 [ 133.796579][ T6305] __x64_sys_bpf+0x78/0xc0 [ 133.797903][ T6305] ? lockdep_hardirqs_on+0x7c/0x110 [ 133.799578][ T6305] do_syscall_64+0xcd/0x250 [ 133.801039][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.802966][ T6305] RIP: 0033:0x7fd45b57e719 [ 133.804380][ T6305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.809453][ T6305] RSP: 002b:00007fd45c319038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 133.811623][ T6305] RAX: ffffffffffffffda RBX: 00007fd45b736058 RCX: 00007fd45b57e719 [ 133.813966][ T6305] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 133.816469][ T6305] RBP: 00007fd45b5f132e R08: 0000000000000000 R09: 0000000000000000 [ 133.818719][ T6305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.820794][ T6305] R13: 0000000000000000 R14: 00007fd45b736058 R15: 00007ffd2e0c9fc8 [ 133.823274][ T6305] [ 133.824430][ T6305] BUG: Bad page state in process syz.1.66 pfn:31dae [ 133.826621][ T6305] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888031daee88 pfn:0x31dae [ 133.829540][ T6305] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 133.831696][ T6305] raw: 00fff00000000000 dead000000000040 ffff88804cdea000 0000000000000000 [ 133.834000][ T6305] raw: ffff888031daee88 0000000000000001 00000000ffffffff 0000000000000000 [ 133.836308][ T6305] page dumped because: page_pool leak [ 133.837786][ T6305] page_owner tracks the page as allocated [ 133.839367][ T6305] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6305, tgid 6299 (syz.1.66), ts 127123725223, free_ts 126833775410 [ 133.844239][ T6305] post_alloc_hook+0x2d1/0x350 [ 133.845542][ T6305] get_page_from_freelist+0x101e/0x3070 [ 133.847059][ T6305] __alloc_pages_noprof+0x223/0x25a0 [ 133.848740][ T6305] alloc_pages_bulk_noprof+0x77c/0x1110 [ 133.850482][ T6305] __page_pool_alloc_pages_slow+0x18f/0x770 [ 133.852390][ T6305] page_pool_alloc_netmem+0xc4/0x160 [ 133.854287][ T6305] page_pool_alloc_pages+0x1a/0x60 [ 133.855964][ T6305] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 133.857803][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 133.859277][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 133.860703][ T6305] __sys_bpf+0xfc6/0x49a0 [ 133.861836][ T6305] __x64_sys_bpf+0x78/0xc0 [ 133.863206][ T6305] do_syscall_64+0xcd/0x250 [ 133.864471][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.866038][ T6305] page last free pid 6281 tgid 6279 stack trace: [ 133.867865][ T6305] free_unref_page+0x5f4/0xdc0 [ 133.869226][ T6305] __folio_put+0x30d/0x3d0 [ 133.870543][ T6305] put_page+0x21e/0x280 [ 133.871658][ T6305] page_pool_return_page+0x400/0x520 [ 133.873055][ T6305] page_pool_release+0xf4/0x7d0 [ 133.874648][ T6305] page_pool_destroy+0x10a/0x4c0 [ 133.875984][ T6305] bpf_test_run_xdp_live+0x3a1/0x500 [ 133.877714][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 133.879712][ T6305] __sys_bpf+0xfc6/0x49a0 [ 133.881093][ T6305] __x64_sys_bpf+0x78/0xc0 [ 133.882317][ T6305] do_syscall_64+0xcd/0x250 [ 133.883678][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.885435][ T6305] Modules linked in: [ 133.886554][ T6305] CPU: 3 UID: 0 PID: 6305 Comm: syz.1.66 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 133.889863][ T6305] Tainted: [B]=BAD_PAGE [ 133.891112][ T6305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 133.895104][ T6305] Call Trace: [ 133.896453][ T6305] [ 133.897408][ T6305] dump_stack_lvl+0x16c/0x1f0 [ 133.899155][ T6305] bad_page+0xb3/0x1f0 [ 133.900580][ T6305] ? __pfx_bad_page+0x10/0x10 [ 133.902067][ T6305] ? page_bad_reason+0x9d/0x1e0 [ 133.903520][ T6305] free_unref_page+0x657/0xdc0 [ 133.904907][ T6305] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 133.906616][ T6305] ? __phys_addr+0xc6/0x150 [ 133.907874][ T6305] skb_free_head+0xa0/0x1d0 [ 133.909077][ T6305] skb_release_data+0x560/0x730 [ 133.910393][ T6305] sk_skb_reason_drop+0x129/0x1a0 [ 133.911762][ T6305] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 133.913520][ T6305] ? kernel_text_address+0x8d/0x100 [ 133.914953][ T6305] ? hlock_class+0x4e/0x130 [ 133.916165][ T6305] ? __lock_acquire+0x163e/0x3ce0 [ 133.917483][ T6305] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 133.919333][ T6305] ? hlock_class+0x4e/0x130 [ 133.920551][ T6305] ? __lock_acquire+0xbdd/0x3ce0 [ 133.921841][ T6305] ? __pfx___lock_acquire+0x10/0x10 [ 133.923185][ T6305] __netif_receive_skb_list_core+0x357/0x950 [ 133.924761][ T6305] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 133.926473][ T6305] ? trace_lock_acquire+0x14a/0x1d0 [ 133.927853][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 133.929504][ T6305] ? lock_acquire+0x2f/0xb0 [ 133.930706][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 133.932362][ T6305] netif_receive_skb_list_internal+0x753/0xdb0 [ 133.934268][ T6305] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 133.936062][ T6305] ? __pfx_eth_type_trans+0x10/0x10 [ 133.937340][ T6305] ? __build_skb_around+0x278/0x3b0 [ 133.938712][ T6305] netif_receive_skb_list+0x4f/0x4a0 [ 133.940264][ T6305] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 133.941868][ T6305] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 133.943762][ T6305] ? bpf_test_timer_continue+0x150/0x3d0 [ 133.945249][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 133.946669][ T6305] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 133.948236][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 133.949779][ T6305] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 133.951332][ T6305] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 133.952878][ T6305] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 133.954273][ T6305] ? 0xffffffffa00045c0 [ 133.955360][ T6305] ? 0xffffffffa00045c0 [ 133.956455][ T6305] ? 0xffffffffa00045c0 [ 133.957680][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 133.959268][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 133.960812][ T6305] ? lock_acquire+0x2f/0xb0 [ 133.962041][ T6305] ? __fget_files+0x40/0x3f0 [ 133.963301][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 133.964839][ T6305] ? fput+0x30/0x390 [ 133.965903][ T6305] ? __bpf_prog_get+0xa0/0x290 [ 133.967185][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 133.968911][ T6305] __sys_bpf+0xfc6/0x49a0 [ 133.970069][ T6305] ? __pfx___sys_bpf+0x10/0x10 [ 133.971364][ T6305] ? __schedule+0xe5d/0x5730 [ 133.972600][ T6305] ? __fget_files+0x23a/0x3f0 [ 133.973869][ T6305] ? do_futex+0x123/0x350 [ 133.975039][ T6305] ? __pfx_do_futex+0x10/0x10 [ 133.976298][ T6305] ? xfd_validate_state+0x5d/0x180 [ 133.977807][ T6305] ? rcu_is_watching+0x12/0xc0 [ 133.979125][ T6305] __x64_sys_bpf+0x78/0xc0 [ 133.980311][ T6305] ? lockdep_hardirqs_on+0x7c/0x110 [ 133.981686][ T6305] do_syscall_64+0xcd/0x250 [ 133.982914][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.984621][ T6305] RIP: 0033:0x7fd45b57e719 [ 133.985827][ T6305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.991117][ T6305] RSP: 002b:00007fd45c319038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 133.993728][ T6305] RAX: ffffffffffffffda RBX: 00007fd45b736058 RCX: 00007fd45b57e719 [ 133.996291][ T6305] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 133.998339][ T6305] RBP: 00007fd45b5f132e R08: 0000000000000000 R09: 0000000000000000 [ 134.000397][ T6305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.002435][ T6305] R13: 0000000000000000 R14: 00007fd45b736058 R15: 00007ffd2e0c9fc8 [ 134.004658][ T6305] [ 134.005589][ T6305] BUG: Bad page state in process syz.1.66 pfn:4d685 [ 134.007389][ T6305] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804d685e88 pfn:0x4d685 [ 134.009999][ T6305] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 134.011842][ T6305] raw: 00fff00000000000 dead000000000040 ffff88804cdea000 0000000000000000 [ 134.014079][ T6305] raw: ffff88804d685e88 0000000000000001 00000000ffffffff 0000000000000000 [ 134.016513][ T6305] page dumped because: page_pool leak [ 134.018208][ T6305] page_owner tracks the page as allocated [ 134.019982][ T6305] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6305, tgid 6299 (syz.1.66), ts 127123720285, free_ts 126833790665 [ 134.025460][ T6305] post_alloc_hook+0x2d1/0x350 [ 134.026825][ T6305] get_page_from_freelist+0x101e/0x3070 [ 134.028327][ T6305] __alloc_pages_noprof+0x223/0x25a0 [ 134.029801][ T6305] alloc_pages_bulk_noprof+0x77c/0x1110 [ 134.031262][ T6305] __page_pool_alloc_pages_slow+0x18f/0x770 [ 134.032822][ T6305] page_pool_alloc_netmem+0xc4/0x160 [ 134.034228][ T6305] page_pool_alloc_pages+0x1a/0x60 [ 134.035683][ T6305] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 134.037538][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 134.039018][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 134.040412][ T6305] __sys_bpf+0xfc6/0x49a0 [ 134.041686][ T6305] __x64_sys_bpf+0x78/0xc0 [ 134.042882][ T6305] do_syscall_64+0xcd/0x250 [ 134.044090][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.045644][ T6305] page last free pid 6281 tgid 6279 stack trace: [ 134.047378][ T6305] free_unref_page+0x5f4/0xdc0 [ 134.048575][ T6305] __folio_put+0x30d/0x3d0 [ 134.049832][ T6305] put_page+0x21e/0x280 [ 134.050932][ T6305] page_pool_return_page+0x400/0x520 [ 134.052334][ T6305] page_pool_release+0xf4/0x7d0 [ 134.053631][ T6305] page_pool_destroy+0x10a/0x4c0 [ 134.055081][ T6305] bpf_test_run_xdp_live+0x3a1/0x500 [ 134.056523][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 134.057936][ T6305] __sys_bpf+0xfc6/0x49a0 [ 134.059554][ T6305] __x64_sys_bpf+0x78/0xc0 [ 134.060801][ T6305] do_syscall_64+0xcd/0x250 [ 134.062006][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.063599][ T6305] Modules linked in: [ 134.064642][ T6305] CPU: 3 UID: 0 PID: 6305 Comm: syz.1.66 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 134.067745][ T6305] Tainted: [B]=BAD_PAGE [ 134.068848][ T6305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 134.071630][ T6305] Call Trace: [ 134.072503][ T6305] [ 134.073277][ T6305] dump_stack_lvl+0x16c/0x1f0 [ 134.074648][ T6305] bad_page+0xb3/0x1f0 [ 134.075717][ T6305] ? __pfx_bad_page+0x10/0x10 [ 134.077066][ T6305] ? page_bad_reason+0x9d/0x1e0 [ 134.078368][ T6305] free_unref_page+0x657/0xdc0 [ 134.079784][ T6305] ? __phys_addr+0xc6/0x150 [ 134.080994][ T6305] skb_free_head+0xa0/0x1d0 [ 134.082230][ T6305] skb_release_data+0x560/0x730 [ 134.083509][ T6305] sk_skb_reason_drop+0x129/0x1a0 [ 134.084833][ T6305] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 134.086617][ T6305] ? kernel_text_address+0x8d/0x100 [ 134.088004][ T6305] ? hlock_class+0x4e/0x130 [ 134.089209][ T6305] ? __lock_acquire+0x163e/0x3ce0 [ 134.090671][ T6305] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 134.092552][ T6305] ? hlock_class+0x4e/0x130 [ 134.093770][ T6305] ? __lock_acquire+0xbdd/0x3ce0 [ 134.095088][ T6305] ? __pfx___lock_acquire+0x10/0x10 [ 134.096464][ T6305] __netif_receive_skb_list_core+0x357/0x950 [ 134.098061][ T6305] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 134.100042][ T6305] ? trace_lock_acquire+0x14a/0x1d0 [ 134.101419][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 134.103088][ T6305] ? lock_acquire+0x2f/0xb0 [ 134.104368][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 134.106060][ T6305] netif_receive_skb_list_internal+0x753/0xdb0 [ 134.107719][ T6305] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 134.109483][ T6305] ? __pfx_eth_type_trans+0x10/0x10 [ 134.110857][ T6305] ? __build_skb_around+0x278/0x3b0 [ 134.112242][ T6305] netif_receive_skb_list+0x4f/0x4a0 [ 134.113640][ T6305] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 134.115534][ T6305] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 134.117245][ T6305] ? bpf_test_timer_continue+0x150/0x3d0 [ 134.119288][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 134.121155][ T6305] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 134.122817][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 134.124461][ T6305] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 134.126042][ T6305] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 134.127607][ T6305] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 134.128987][ T6305] ? 0xffffffffa00045c0 [ 134.130075][ T6305] ? 0xffffffffa00045c0 [ 134.131191][ T6305] ? 0xffffffffa00045c0 [ 134.132288][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 134.133867][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 134.135286][ T6305] ? lock_acquire+0x2f/0xb0 [ 134.136574][ T6305] ? __fget_files+0x40/0x3f0 [ 134.137811][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 134.139943][ T6305] ? fput+0x30/0x390 [ 134.141152][ T6305] ? __bpf_prog_get+0xa0/0x290 [ 134.142521][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 134.144183][ T6305] __sys_bpf+0xfc6/0x49a0 [ 134.145406][ T6305] ? __pfx___sys_bpf+0x10/0x10 [ 134.146776][ T6305] ? __schedule+0xe5d/0x5730 [ 134.148055][ T6305] ? __fget_files+0x23a/0x3f0 [ 134.149274][ T6305] ? do_futex+0x123/0x350 [ 134.150447][ T6305] ? __pfx_do_futex+0x10/0x10 [ 134.151729][ T6305] ? xfd_validate_state+0x5d/0x180 [ 134.153156][ T6305] ? rcu_is_watching+0x12/0xc0 [ 134.154607][ T6305] __x64_sys_bpf+0x78/0xc0 [ 134.155834][ T6305] ? lockdep_hardirqs_on+0x7c/0x110 [ 134.157249][ T6305] do_syscall_64+0xcd/0x250 [ 134.158516][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.160259][ T6305] RIP: 0033:0x7fd45b57e719 [ 134.161460][ T6305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.166541][ T6305] RSP: 002b:00007fd45c319038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 134.168708][ T6305] RAX: ffffffffffffffda RBX: 00007fd45b736058 RCX: 00007fd45b57e719 [ 134.170783][ T6305] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 134.172884][ T6305] RBP: 00007fd45b5f132e R08: 0000000000000000 R09: 0000000000000000 [ 134.175320][ T6305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.177689][ T6305] R13: 0000000000000000 R14: 00007fd45b736058 R15: 00007ffd2e0c9fc8 [ 134.179971][ T6305] [ 134.180889][ T6305] BUG: Bad page state in process syz.1.66 pfn:4db2b [ 134.182642][ T6305] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804db2bd90 pfn:0x4db2b [ 134.185350][ T6305] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 134.187237][ T6305] raw: 00fff00000000000 dead000000000040 ffff88804cdea000 0000000000000000 [ 134.189782][ T6305] raw: ffff88804db2bd90 0000000000000001 00000000ffffffff 0000000000000000 [ 134.192350][ T6305] page dumped because: page_pool leak [ 134.194135][ T6305] page_owner tracks the page as allocated [ 134.195891][ T6305] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6305, tgid 6299 (syz.1.66), ts 127123715514, free_ts 126833794612 [ 134.200934][ T6305] post_alloc_hook+0x2d1/0x350 [ 134.202682][ T6305] get_page_from_freelist+0x101e/0x3070 [ 134.204187][ T6305] __alloc_pages_noprof+0x223/0x25a0 [ 134.205575][ T6305] alloc_pages_bulk_noprof+0x77c/0x1110 [ 134.207053][ T6305] __page_pool_alloc_pages_slow+0x18f/0x770 [ 134.208611][ T6305] page_pool_alloc_netmem+0xc4/0x160 [ 134.210153][ T6305] page_pool_alloc_pages+0x1a/0x60 [ 134.211518][ T6305] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 134.213150][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 134.214570][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 134.215988][ T6305] __sys_bpf+0xfc6/0x49a0 [ 134.217158][ T6305] __x64_sys_bpf+0x78/0xc0 [ 134.218406][ T6305] do_syscall_64+0xcd/0x250 [ 134.219664][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.221215][ T6305] page last free pid 6281 tgid 6279 stack trace: [ 134.222861][ T6305] free_unref_page+0x5f4/0xdc0 [ 134.224121][ T6305] __folio_put+0x30d/0x3d0 [ 134.225302][ T6305] put_page+0x21e/0x280 [ 134.226416][ T6305] page_pool_return_page+0x400/0x520 [ 134.227798][ T6305] page_pool_release+0xf4/0x7d0 [ 134.229140][ T6305] page_pool_destroy+0x10a/0x4c0 [ 134.230450][ T6305] bpf_test_run_xdp_live+0x3a1/0x500 [ 134.231841][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 134.233261][ T6305] __sys_bpf+0xfc6/0x49a0 [ 134.235207][ T6305] __x64_sys_bpf+0x78/0xc0 [ 134.236383][ T6305] do_syscall_64+0xcd/0x250 [ 134.237580][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.239224][ T6305] Modules linked in: [ 134.240269][ T6305] CPU: 3 UID: 0 PID: 6305 Comm: syz.1.66 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 134.243365][ T6305] Tainted: [B]=BAD_PAGE [ 134.244471][ T6305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 134.247268][ T6305] Call Trace: [ 134.248324][ T6305] [ 134.249159][ T6305] dump_stack_lvl+0x16c/0x1f0 [ 134.250449][ T6305] bad_page+0xb3/0x1f0 [ 134.251559][ T6305] ? __pfx_bad_page+0x10/0x10 [ 134.252837][ T6305] ? page_bad_reason+0x9d/0x1e0 [ 134.254356][ T6305] free_unref_page+0x657/0xdc0 [ 134.255703][ T6305] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 134.257581][ T6305] ? __phys_addr+0xc6/0x150 [ 134.259186][ T6305] skb_free_head+0xa0/0x1d0 [ 134.260337][ T6305] skb_release_data+0x560/0x730 [ 134.261929][ T6305] sk_skb_reason_drop+0x129/0x1a0 [ 134.263549][ T6305] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 134.265517][ T6305] ? kernel_text_address+0x8d/0x100 [ 134.267127][ T6305] ? hlock_class+0x4e/0x130 [ 134.268480][ T6305] ? __lock_acquire+0x163e/0x3ce0 [ 134.269875][ T6305] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 134.271768][ T6305] ? hlock_class+0x4e/0x130 [ 134.272989][ T6305] ? __lock_acquire+0xbdd/0x3ce0 [ 134.274487][ T6305] ? __pfx___lock_acquire+0x10/0x10 [ 134.275946][ T6305] __netif_receive_skb_list_core+0x357/0x950 [ 134.278388][ T6305] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 134.280090][ T6305] ? trace_lock_acquire+0x14a/0x1d0 [ 134.281649][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 134.283410][ T6305] ? lock_acquire+0x2f/0xb0 [ 134.284626][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 134.286324][ T6305] netif_receive_skb_list_internal+0x753/0xdb0 [ 134.287974][ T6305] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 134.289746][ T6305] ? __pfx_eth_type_trans+0x10/0x10 [ 134.291138][ T6305] ? __build_skb_around+0x278/0x3b0 [ 134.292608][ T6305] netif_receive_skb_list+0x4f/0x4a0 [ 134.294392][ T6305] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 134.296134][ T6305] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 134.297979][ T6305] ? bpf_test_timer_continue+0x150/0x3d0 [ 134.299807][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 134.301308][ T6305] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 134.302913][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 134.304570][ T6305] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 134.306409][ T6305] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 134.308056][ T6305] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 134.309542][ T6305] ? 0xffffffffa00045c0 [ 134.310726][ T6305] ? 0xffffffffa00045c0 [ 134.311927][ T6305] ? 0xffffffffa00045c0 [ 134.313101][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 134.314646][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 134.316065][ T6305] ? lock_acquire+0x2f/0xb0 [ 134.317263][ T6305] ? __fget_files+0x40/0x3f0 [ 134.318587][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 134.320621][ T6305] ? fput+0x30/0x390 [ 134.321790][ T6305] ? __bpf_prog_get+0xa0/0x290 [ 134.323268][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 134.324848][ T6305] __sys_bpf+0xfc6/0x49a0 [ 134.326018][ T6305] ? __pfx___sys_bpf+0x10/0x10 [ 134.327324][ T6305] ? __schedule+0xe5d/0x5730 [ 134.328625][ T6305] ? __fget_files+0x23a/0x3f0 [ 134.329998][ T6305] ? do_futex+0x123/0x350 [ 134.331277][ T6305] ? __pfx_do_futex+0x10/0x10 [ 134.332659][ T6305] ? xfd_validate_state+0x5d/0x180 [ 134.334321][ T6305] ? rcu_is_watching+0x12/0xc0 [ 134.335667][ T6305] __x64_sys_bpf+0x78/0xc0 [ 134.337074][ T6305] ? lockdep_hardirqs_on+0x7c/0x110 [ 134.338738][ T6305] do_syscall_64+0xcd/0x250 [ 134.339952][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.341615][ T6305] RIP: 0033:0x7fd45b57e719 [ 134.343026][ T6305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.348047][ T6305] RSP: 002b:00007fd45c319038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 134.350230][ T6305] RAX: ffffffffffffffda RBX: 00007fd45b736058 RCX: 00007fd45b57e719 [ 134.352288][ T6305] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 134.354360][ T6305] RBP: 00007fd45b5f132e R08: 0000000000000000 R09: 0000000000000000 [ 134.356603][ T6305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.358992][ T6305] R13: 0000000000000000 R14: 00007fd45b736058 R15: 00007ffd2e0c9fc8 [ 134.361402][ T6305] [ 134.362506][ T6305] BUG: Bad page state in process syz.1.66 pfn:205cb [ 134.364257][ T6305] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880205cbf00 pfn:0x205cb [ 134.367031][ T6305] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 134.368962][ T6305] raw: 00fff00000000000 dead000000000040 ffff88804cdea000 0000000000000000 [ 134.371348][ T6305] raw: ffff8880205cbf00 0000000000000001 00000000ffffffff 0000000000000000 [ 134.373610][ T6305] page dumped because: page_pool leak [ 134.375191][ T6305] page_owner tracks the page as allocated [ 134.376862][ T6305] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6305, tgid 6299 (syz.1.66), ts 127123697993, free_ts 126833816701 [ 134.381836][ T6305] post_alloc_hook+0x2d1/0x350 [ 134.383146][ T6305] get_page_from_freelist+0x101e/0x3070 [ 134.384798][ T6305] __alloc_pages_noprof+0x223/0x25a0 [ 134.386337][ T6305] alloc_pages_bulk_noprof+0x77c/0x1110 [ 134.387776][ T6305] __page_pool_alloc_pages_slow+0x18f/0x770 [ 134.389530][ T6305] page_pool_alloc_netmem+0xc4/0x160 [ 134.391038][ T6305] page_pool_alloc_pages+0x1a/0x60 [ 134.392510][ T6305] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 134.394436][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 134.396021][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 134.397651][ T6305] __sys_bpf+0xfc6/0x49a0 [ 134.398873][ T6305] __x64_sys_bpf+0x78/0xc0 [ 134.400078][ T6305] do_syscall_64+0xcd/0x250 [ 134.401285][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.402858][ T6305] page last free pid 6281 tgid 6279 stack trace: [ 134.404511][ T6305] free_unref_page+0x5f4/0xdc0 [ 134.405783][ T6305] __folio_put+0x30d/0x3d0 [ 134.407289][ T6305] put_page+0x21e/0x280 [ 134.408437][ T6305] page_pool_return_page+0x400/0x520 [ 134.409890][ T6305] page_pool_release+0xf4/0x7d0 [ 134.411221][ T6305] page_pool_destroy+0x10a/0x4c0 [ 134.412573][ T6305] bpf_test_run_xdp_live+0x3a1/0x500 [ 134.414148][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 134.415599][ T6305] __sys_bpf+0xfc6/0x49a0 [ 134.416758][ T6305] __x64_sys_bpf+0x78/0xc0 [ 134.417954][ T6305] do_syscall_64+0xcd/0x250 [ 134.419255][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.420844][ T6305] Modules linked in: [ 134.421958][ T6305] CPU: 3 UID: 0 PID: 6305 Comm: syz.1.66 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 134.425371][ T6305] Tainted: [B]=BAD_PAGE [ 134.426699][ T6305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 134.429583][ T6305] Call Trace: [ 134.430581][ T6305] [ 134.431456][ T6305] dump_stack_lvl+0x16c/0x1f0 [ 134.432887][ T6305] bad_page+0xb3/0x1f0 [ 134.434266][ T6305] ? __pfx_bad_page+0x10/0x10 [ 134.435541][ T6305] ? page_bad_reason+0x9d/0x1e0 [ 134.437042][ T6305] free_unref_page+0x657/0xdc0 [ 134.438358][ T6305] ? __phys_addr+0xc6/0x150 [ 134.439560][ T6305] skb_free_head+0xa0/0x1d0 [ 134.440753][ T6305] skb_release_data+0x560/0x730 [ 134.442037][ T6305] sk_skb_reason_drop+0x129/0x1a0 [ 134.443399][ T6305] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 134.445141][ T6305] ? kernel_text_address+0x8d/0x100 [ 134.446542][ T6305] ? hlock_class+0x4e/0x130 [ 134.447733][ T6305] ? __lock_acquire+0x163e/0x3ce0 [ 134.449049][ T6305] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 134.450892][ T6305] ? hlock_class+0x4e/0x130 [ 134.452093][ T6305] ? __lock_acquire+0xbdd/0x3ce0 [ 134.453395][ T6305] ? __pfx___lock_acquire+0x10/0x10 [ 134.454764][ T6305] __netif_receive_skb_list_core+0x357/0x950 [ 134.456322][ T6305] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 134.458014][ T6305] ? trace_lock_acquire+0x14a/0x1d0 [ 134.459385][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 134.461116][ T6305] ? lock_acquire+0x2f/0xb0 [ 134.462321][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 134.463971][ T6305] netif_receive_skb_list_internal+0x753/0xdb0 [ 134.465601][ T6305] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 134.467352][ T6305] ? __pfx_eth_type_trans+0x10/0x10 [ 134.468715][ T6305] ? __build_skb_around+0x278/0x3b0 [ 134.470050][ T6305] netif_receive_skb_list+0x4f/0x4a0 [ 134.471449][ T6305] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 134.473086][ T6305] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 134.475196][ T6305] ? bpf_test_timer_continue+0x150/0x3d0 [ 134.477087][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 134.478711][ T6305] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 134.480480][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 134.482240][ T6305] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 134.483959][ T6305] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 134.485666][ T6305] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 134.487167][ T6305] ? 0xffffffffa00045c0 [ 134.488310][ T6305] ? 0xffffffffa00045c0 [ 134.489470][ T6305] ? 0xffffffffa00045c0 [ 134.490636][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 134.492211][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 134.493794][ T6305] ? lock_acquire+0x2f/0xb0 [ 134.495187][ T6305] ? __fget_files+0x40/0x3f0 [ 134.496610][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 134.498146][ T6305] ? fput+0x30/0x390 [ 134.499175][ T6305] ? __bpf_prog_get+0xa0/0x290 [ 134.500709][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 134.502339][ T6305] __sys_bpf+0xfc6/0x49a0 [ 134.503491][ T6305] ? __pfx___sys_bpf+0x10/0x10 [ 134.504882][ T6305] ? __schedule+0xe5d/0x5730 [ 134.506187][ T6305] ? __fget_files+0x23a/0x3f0 [ 134.507500][ T6305] ? do_futex+0x123/0x350 [ 134.508732][ T6305] ? __pfx_do_futex+0x10/0x10 [ 134.510109][ T6305] ? xfd_validate_state+0x5d/0x180 [ 134.511471][ T6305] ? rcu_is_watching+0x12/0xc0 [ 134.512746][ T6305] __x64_sys_bpf+0x78/0xc0 [ 134.514044][ T6305] ? lockdep_hardirqs_on+0x7c/0x110 [ 134.515435][ T6305] do_syscall_64+0xcd/0x250 [ 134.516668][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.518438][ T6305] RIP: 0033:0x7fd45b57e719 [ 134.519638][ T6305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.525259][ T6305] RSP: 002b:00007fd45c319038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 134.527696][ T6305] RAX: ffffffffffffffda RBX: 00007fd45b736058 RCX: 00007fd45b57e719 [ 134.529883][ T6305] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 134.531895][ T6305] RBP: 00007fd45b5f132e R08: 0000000000000000 R09: 0000000000000000 [ 134.534175][ T6305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.536353][ T6305] R13: 0000000000000000 R14: 00007fd45b736058 R15: 00007ffd2e0c9fc8 [ 134.538490][ T6305] [ 134.539949][ T6305] BUG: Bad page state in process syz.1.66 pfn:27d98 [ 134.541888][ T6305] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888027d98f00 pfn:0x27d98 [ 134.544752][ T6305] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 134.546708][ T6305] raw: 00fff00000000000 dead000000000040 ffff88804cdea000 0000000000000000 [ 134.549261][ T6305] raw: ffff888027d98f00 0000000000000001 00000000ffffffff 0000000000000000 [ 134.551573][ T6305] page dumped because: page_pool leak [ 134.553016][ T6305] page_owner tracks the page as allocated [ 134.554579][ T6305] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6305, tgid 6299 (syz.1.66), ts 127123693219, free_ts 126833821632 [ 134.559090][ T6305] post_alloc_hook+0x2d1/0x350 [ 134.560526][ T6305] get_page_from_freelist+0x101e/0x3070 [ 134.562132][ T6305] __alloc_pages_noprof+0x223/0x25a0 [ 134.563580][ T6305] alloc_pages_bulk_noprof+0x77c/0x1110 [ 134.565238][ T6305] __page_pool_alloc_pages_slow+0x18f/0x770 [ 134.566825][ T6305] page_pool_alloc_netmem+0xc4/0x160 [ 134.568221][ T6305] page_pool_alloc_pages+0x1a/0x60 [ 134.569600][ T6305] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 134.571223][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 134.572645][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 134.574406][ T6305] __sys_bpf+0xfc6/0x49a0 [ 134.575648][ T6305] __x64_sys_bpf+0x78/0xc0 [ 134.576879][ T6305] do_syscall_64+0xcd/0x250 [ 134.578348][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.580509][ T6305] page last free pid 6281 tgid 6279 stack trace: [ 134.582218][ T6305] free_unref_page+0x5f4/0xdc0 [ 134.583622][ T6305] __folio_put+0x30d/0x3d0 [ 134.584930][ T6305] put_page+0x21e/0x280 [ 134.586166][ T6305] page_pool_return_page+0x400/0x520 [ 134.587672][ T6305] page_pool_release+0xf4/0x7d0 [ 134.589126][ T6305] page_pool_destroy+0x10a/0x4c0 [ 134.590445][ T6305] bpf_test_run_xdp_live+0x3a1/0x500 [ 134.591851][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 134.593275][ T6305] __sys_bpf+0xfc6/0x49a0 [ 134.594436][ T6305] __x64_sys_bpf+0x78/0xc0 [ 134.595623][ T6305] do_syscall_64+0xcd/0x250 [ 134.597199][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.599193][ T6305] Modules linked in: [ 134.600435][ T6305] CPU: 3 UID: 0 PID: 6305 Comm: syz.1.66 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 134.603806][ T6305] Tainted: [B]=BAD_PAGE [ 134.605041][ T6305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 134.608126][ T6305] Call Trace: [ 134.609039][ T6305] [ 134.609783][ T6305] dump_stack_lvl+0x16c/0x1f0 [ 134.610977][ T6305] bad_page+0xb3/0x1f0 [ 134.611984][ T6305] ? __pfx_bad_page+0x10/0x10 [ 134.613158][ T6305] ? page_bad_reason+0x9d/0x1e0 [ 134.614661][ T6305] free_unref_page+0x657/0xdc0 [ 134.616032][ T6305] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 134.617613][ T6305] ? __phys_addr+0xc6/0x150 [ 134.618836][ T6305] skb_free_head+0xa0/0x1d0 [ 134.620044][ T6305] skb_release_data+0x560/0x730 [ 134.621447][ T6305] sk_skb_reason_drop+0x129/0x1a0 [ 134.623171][ T6305] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 134.625470][ T6305] ? kernel_text_address+0x8d/0x100 [ 134.627300][ T6305] ? hlock_class+0x4e/0x130 [ 134.628879][ T6305] ? __lock_acquire+0x163e/0x3ce0 [ 134.630633][ T6305] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 134.633115][ T6305] ? hlock_class+0x4e/0x130 [ 134.634581][ T6305] ? __lock_acquire+0xbdd/0x3ce0 [ 134.636023][ T6305] ? __pfx___lock_acquire+0x10/0x10 [ 134.637464][ T6305] __netif_receive_skb_list_core+0x357/0x950 [ 134.639118][ T6305] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 134.640846][ T6305] ? trace_lock_acquire+0x14a/0x1d0 [ 134.642171][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 134.643764][ T6305] ? lock_acquire+0x2f/0xb0 [ 134.645122][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 134.646857][ T6305] netif_receive_skb_list_internal+0x753/0xdb0 [ 134.648428][ T6305] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 134.650139][ T6305] ? __pfx_eth_type_trans+0x10/0x10 [ 134.651383][ T6305] ? __build_skb_around+0x278/0x3b0 [ 134.652714][ T6305] netif_receive_skb_list+0x4f/0x4a0 [ 134.654039][ T6305] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 134.655690][ T6305] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 134.657403][ T6305] ? bpf_test_timer_continue+0x150/0x3d0 [ 134.659397][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 134.660797][ T6305] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 134.662365][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 134.664041][ T6305] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 134.665612][ T6305] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 134.667192][ T6305] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 134.668597][ T6305] ? 0xffffffffa00045c0 [ 134.669708][ T6305] ? 0xffffffffa00045c0 [ 134.670826][ T6305] ? 0xffffffffa00045c0 [ 134.671988][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 134.673736][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 134.675192][ T6305] ? lock_acquire+0x2f/0xb0 [ 134.676374][ T6305] ? __fget_files+0x40/0x3f0 [ 134.677601][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 134.679263][ T6305] ? fput+0x30/0x390 [ 134.680403][ T6305] ? __bpf_prog_get+0xa0/0x290 [ 134.681755][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 134.683370][ T6305] __sys_bpf+0xfc6/0x49a0 [ 134.684610][ T6305] ? __pfx___sys_bpf+0x10/0x10 [ 134.685907][ T6305] ? __schedule+0xe5d/0x5730 [ 134.687185][ T6305] ? __fget_files+0x23a/0x3f0 [ 134.688407][ T6305] ? do_futex+0x123/0x350 [ 134.689596][ T6305] ? __pfx_do_futex+0x10/0x10 [ 134.690846][ T6305] ? xfd_validate_state+0x5d/0x180 [ 134.692322][ T6305] ? rcu_is_watching+0x12/0xc0 [ 134.693608][ T6305] __x64_sys_bpf+0x78/0xc0 [ 134.694875][ T6305] ? lockdep_hardirqs_on+0x7c/0x110 [ 134.696555][ T6305] do_syscall_64+0xcd/0x250 [ 134.698008][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.699805][ T6305] RIP: 0033:0x7fd45b57e719 [ 134.701157][ T6305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.706785][ T6305] RSP: 002b:00007fd45c319038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 134.709063][ T6305] RAX: ffffffffffffffda RBX: 00007fd45b736058 RCX: 00007fd45b57e719 [ 134.711168][ T6305] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 134.713408][ T6305] RBP: 00007fd45b5f132e R08: 0000000000000000 R09: 0000000000000000 [ 134.715902][ T6305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.718130][ T6305] R13: 0000000000000000 R14: 00007fd45b736058 R15: 00007ffd2e0c9fc8 [ 134.720214][ T6305] [ 134.721167][ T6305] BUG: Bad page state in process syz.1.66 pfn:315bd [ 134.722994][ T6305] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880315bd000 pfn:0x315bd [ 134.725768][ T6305] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 134.727665][ T6305] raw: 00fff00000000000 dead000000000040 ffff88804cdea000 0000000000000000 [ 134.729984][ T6305] raw: ffff8880315bd000 0000000000000001 00000000ffffffff 0000000000000000 [ 134.732226][ T6305] page dumped because: page_pool leak [ 134.733660][ T6305] page_owner tracks the page as allocated [ 134.735369][ T6305] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6305, tgid 6299 (syz.1.66), ts 127123688680, free_ts 126833841660 [ 134.740016][ T6305] post_alloc_hook+0x2d1/0x350 [ 134.741302][ T6305] get_page_from_freelist+0x101e/0x3070 [ 134.742721][ T6305] __alloc_pages_noprof+0x223/0x25a0 [ 134.744101][ T6305] alloc_pages_bulk_noprof+0x77c/0x1110 [ 134.745891][ T6305] __page_pool_alloc_pages_slow+0x18f/0x770 [ 134.747486][ T6305] page_pool_alloc_netmem+0xc4/0x160 [ 134.749063][ T6305] page_pool_alloc_pages+0x1a/0x60 [ 134.750472][ T6305] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 134.752155][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 134.753692][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 134.755138][ T6305] __sys_bpf+0xfc6/0x49a0 [ 134.756324][ T6305] __x64_sys_bpf+0x78/0xc0 [ 134.757741][ T6305] do_syscall_64+0xcd/0x250 [ 134.759096][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.760688][ T6305] page last free pid 6281 tgid 6279 stack trace: [ 134.762565][ T6305] free_unref_page+0x5f4/0xdc0 [ 134.764052][ T6305] __folio_put+0x30d/0x3d0 [ 134.765432][ T6305] put_page+0x21e/0x280 [ 134.766778][ T6305] page_pool_return_page+0x400/0x520 [ 134.768204][ T6305] page_pool_release+0xf4/0x7d0 [ 134.769550][ T6305] page_pool_destroy+0x10a/0x4c0 [ 134.770860][ T6305] bpf_test_run_xdp_live+0x3a1/0x500 [ 134.772250][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 134.773651][ T6305] __sys_bpf+0xfc6/0x49a0 [ 134.774888][ T6305] __x64_sys_bpf+0x78/0xc0 [ 134.776082][ T6305] do_syscall_64+0xcd/0x250 [ 134.777298][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.778921][ T6305] Modules linked in: [ 134.779964][ T6305] CPU: 3 UID: 0 PID: 6305 Comm: syz.1.66 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 134.783158][ T6305] Tainted: [B]=BAD_PAGE [ 134.784241][ T6305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 134.787006][ T6305] Call Trace: [ 134.787880][ T6305] [ 134.788666][ T6305] dump_stack_lvl+0x16c/0x1f0 [ 134.789997][ T6305] bad_page+0xb3/0x1f0 [ 134.791106][ T6305] ? __pfx_bad_page+0x10/0x10 [ 134.792373][ T6305] ? page_bad_reason+0x9d/0x1e0 [ 134.794304][ T6305] free_unref_page+0x657/0xdc0 [ 134.795785][ T6305] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 134.797414][ T6305] ? __phys_addr+0xc6/0x150 [ 134.798558][ T6305] skb_free_head+0xa0/0x1d0 [ 134.799773][ T6305] skb_release_data+0x560/0x730 [ 134.801100][ T6305] sk_skb_reason_drop+0x129/0x1a0 [ 134.802445][ T6305] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 134.804199][ T6305] ? kernel_text_address+0x8d/0x100 [ 134.805599][ T6305] ? hlock_class+0x4e/0x130 [ 134.806867][ T6305] ? __lock_acquire+0x163e/0x3ce0 [ 134.808230][ T6305] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 134.810232][ T6305] ? hlock_class+0x4e/0x130 [ 134.811670][ T6305] ? __lock_acquire+0xbdd/0x3ce0 [ 134.813056][ T6305] ? __pfx___lock_acquire+0x10/0x10 [ 134.814683][ T6305] __netif_receive_skb_list_core+0x357/0x950 [ 134.816247][ T6305] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 134.817971][ T6305] ? trace_lock_acquire+0x14a/0x1d0 [ 134.819333][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 134.820975][ T6305] ? lock_acquire+0x2f/0xb0 [ 134.822409][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 134.824268][ T6305] netif_receive_skb_list_internal+0x753/0xdb0 [ 134.825964][ T6305] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 134.827922][ T6305] ? __pfx_eth_type_trans+0x10/0x10 [ 134.829507][ T6305] ? __build_skb_around+0x278/0x3b0 [ 134.830921][ T6305] netif_receive_skb_list+0x4f/0x4a0 [ 134.832338][ T6305] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 134.834002][ T6305] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 134.835741][ T6305] ? bpf_test_timer_continue+0x150/0x3d0 [ 134.837248][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 134.838675][ T6305] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 134.840218][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 134.841772][ T6305] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 134.843339][ T6305] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 134.844890][ T6305] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 134.846286][ T6305] ? 0xffffffffa00045c0 [ 134.847340][ T6305] ? 0xffffffffa00045c0 [ 134.848405][ T6305] ? 0xffffffffa00045c0 [ 134.849453][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 134.850989][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 134.852412][ T6305] ? lock_acquire+0x2f/0xb0 [ 134.853609][ T6305] ? __fget_files+0x40/0x3f0 [ 134.855316][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 134.857118][ T6305] ? fput+0x30/0x390 [ 134.858290][ T6305] ? __bpf_prog_get+0xa0/0x290 [ 134.859712][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 134.861423][ T6305] __sys_bpf+0xfc6/0x49a0 [ 134.862719][ T6305] ? __pfx___sys_bpf+0x10/0x10 [ 134.864158][ T6305] ? __schedule+0xe5d/0x5730 [ 134.865441][ T6305] ? __fget_files+0x23a/0x3f0 [ 134.866728][ T6305] ? do_futex+0x123/0x350 [ 134.867903][ T6305] ? __pfx_do_futex+0x10/0x10 [ 134.869218][ T6305] ? xfd_validate_state+0x5d/0x180 [ 134.870744][ T6305] ? rcu_is_watching+0x12/0xc0 [ 134.872309][ T6305] __x64_sys_bpf+0x78/0xc0 [ 134.873734][ T6305] ? lockdep_hardirqs_on+0x7c/0x110 [ 134.875381][ T6305] do_syscall_64+0xcd/0x250 [ 134.876851][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.878686][ T6305] RIP: 0033:0x7fd45b57e719 [ 134.879863][ T6305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.885460][ T6305] RSP: 002b:00007fd45c319038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 134.887658][ T6305] RAX: ffffffffffffffda RBX: 00007fd45b736058 RCX: 00007fd45b57e719 [ 134.889665][ T6305] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 134.891720][ T6305] RBP: 00007fd45b5f132e R08: 0000000000000000 R09: 0000000000000000 [ 134.893780][ T6305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.895855][ T6305] R13: 0000000000000000 R14: 00007fd45b736058 R15: 00007ffd2e0c9fc8 [ 134.897923][ T6305] [ 134.898839][ T6305] BUG: Bad page state in process syz.1.66 pfn:4e03c [ 134.900750][ T6305] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804e03ce58 pfn:0x4e03c [ 134.903519][ T6305] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 134.905392][ T6305] raw: 00fff00000000000 dead000000000040 ffff88804cdea000 0000000000000000 [ 134.907762][ T6305] raw: ffff88804e03ce58 0000000000000001 00000000ffffffff 0000000000000000 [ 134.910228][ T6305] page dumped because: page_pool leak [ 134.911646][ T6305] page_owner tracks the page as allocated [ 134.913149][ T6305] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6305, tgid 6299 (syz.1.66), ts 127123684283, free_ts 126833847670 [ 134.917506][ T6305] post_alloc_hook+0x2d1/0x350 [ 134.918978][ T6305] get_page_from_freelist+0x101e/0x3070 [ 134.920421][ T6305] __alloc_pages_noprof+0x223/0x25a0 [ 134.921943][ T6305] alloc_pages_bulk_noprof+0x77c/0x1110 [ 134.923655][ T6305] __page_pool_alloc_pages_slow+0x18f/0x770 [ 134.925221][ T6305] page_pool_alloc_netmem+0xc4/0x160 [ 134.926654][ T6305] page_pool_alloc_pages+0x1a/0x60 [ 134.928164][ T6305] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 134.930106][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 134.931705][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 134.933395][ T6305] __sys_bpf+0xfc6/0x49a0 [ 134.934876][ T6305] __x64_sys_bpf+0x78/0xc0 [ 134.936400][ T6305] do_syscall_64+0xcd/0x250 [ 134.937725][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.939494][ T6305] page last free pid 6281 tgid 6279 stack trace: [ 134.941494][ T6305] free_unref_page+0x5f4/0xdc0 [ 134.942900][ T6305] __folio_put+0x30d/0x3d0 [ 134.944156][ T6305] put_page+0x21e/0x280 [ 134.945265][ T6305] page_pool_return_page+0x400/0x520 [ 134.946692][ T6305] page_pool_release+0xf4/0x7d0 [ 134.947987][ T6305] page_pool_destroy+0x10a/0x4c0 [ 134.949340][ T6305] bpf_test_run_xdp_live+0x3a1/0x500 [ 134.950731][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 134.952152][ T6305] __sys_bpf+0xfc6/0x49a0 [ 134.953305][ T6305] __x64_sys_bpf+0x78/0xc0 [ 134.954512][ T6305] do_syscall_64+0xcd/0x250 [ 134.956040][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.957613][ T6305] Modules linked in: [ 134.958751][ T6305] CPU: 3 UID: 0 PID: 6305 Comm: syz.1.66 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 134.962112][ T6305] Tainted: [B]=BAD_PAGE [ 134.963320][ T6305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 134.966687][ T6305] Call Trace: [ 134.967754][ T6305] [ 134.968674][ T6305] dump_stack_lvl+0x16c/0x1f0 [ 134.969934][ T6305] bad_page+0xb3/0x1f0 [ 134.971016][ T6305] ? __pfx_bad_page+0x10/0x10 [ 134.972233][ T6305] ? page_bad_reason+0x9d/0x1e0 [ 134.973519][ T6305] free_unref_page+0x657/0xdc0 [ 134.974783][ T6305] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 134.976361][ T6305] ? __phys_addr+0xc6/0x150 [ 134.977556][ T6305] skb_free_head+0xa0/0x1d0 [ 134.978770][ T6305] skb_release_data+0x560/0x730 [ 134.980088][ T6305] sk_skb_reason_drop+0x129/0x1a0 [ 134.981409][ T6305] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 134.983145][ T6305] ? kernel_text_address+0x8d/0x100 [ 134.984511][ T6305] ? hlock_class+0x4e/0x130 [ 134.985902][ T6305] ? __lock_acquire+0x163e/0x3ce0 [ 134.987309][ T6305] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 134.989168][ T6305] ? hlock_class+0x4e/0x130 [ 134.990388][ T6305] ? __lock_acquire+0xbdd/0x3ce0 [ 134.991710][ T6305] ? __pfx___lock_acquire+0x10/0x10 [ 134.993086][ T6305] __netif_receive_skb_list_core+0x357/0x950 [ 134.994640][ T6305] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 134.996326][ T6305] ? trace_lock_acquire+0x14a/0x1d0 [ 134.997695][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 134.999362][ T6305] ? lock_acquire+0x2f/0xb0 [ 135.000570][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 135.002240][ T6305] netif_receive_skb_list_internal+0x753/0xdb0 [ 135.003868][ T6305] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 135.005625][ T6305] ? __pfx_eth_type_trans+0x10/0x10 [ 135.007031][ T6305] ? __build_skb_around+0x278/0x3b0 [ 135.008402][ T6305] netif_receive_skb_list+0x4f/0x4a0 [ 135.009768][ T6305] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 135.011400][ T6305] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 135.013134][ T6305] ? bpf_test_timer_continue+0x150/0x3d0 [ 135.014620][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 135.015999][ T6305] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 135.017617][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 135.019169][ T6305] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 135.020725][ T6305] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 135.022260][ T6305] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 135.023785][ T6305] ? 0xffffffffa00045c0 [ 135.024869][ T6305] ? 0xffffffffa00045c0 [ 135.025971][ T6305] ? 0xffffffffa00045c0 [ 135.027187][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 135.028741][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 135.030193][ T6305] ? lock_acquire+0x2f/0xb0 [ 135.031401][ T6305] ? __fget_files+0x40/0x3f0 [ 135.032620][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 135.034165][ T6305] ? fput+0x30/0x390 [ 135.035201][ T6305] ? __bpf_prog_get+0xa0/0x290 [ 135.036473][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 135.038002][ T6305] __sys_bpf+0xfc6/0x49a0 [ 135.039274][ T6305] ? __pfx___sys_bpf+0x10/0x10 [ 135.040629][ T6305] ? __schedule+0xe5d/0x5730 [ 135.041884][ T6305] ? __fget_files+0x23a/0x3f0 [ 135.043081][ T6305] ? do_futex+0x123/0x350 [ 135.044281][ T6305] ? __pfx_do_futex+0x10/0x10 [ 135.045523][ T6305] ? xfd_validate_state+0x5d/0x180 [ 135.046852][ T6305] ? rcu_is_watching+0x12/0xc0 [ 135.048120][ T6305] __x64_sys_bpf+0x78/0xc0 [ 135.049305][ T6305] ? lockdep_hardirqs_on+0x7c/0x110 [ 135.050688][ T6305] do_syscall_64+0xcd/0x250 [ 135.051900][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.053470][ T6305] RIP: 0033:0x7fd45b57e719 [ 135.054660][ T6305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.059821][ T6305] RSP: 002b:00007fd45c319038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 135.062478][ T6305] RAX: ffffffffffffffda RBX: 00007fd45b736058 RCX: 00007fd45b57e719 [ 135.064652][ T6305] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 135.066728][ T6305] RBP: 00007fd45b5f132e R08: 0000000000000000 R09: 0000000000000000 [ 135.068800][ T6305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.070842][ T6305] R13: 0000000000000000 R14: 00007fd45b736058 R15: 00007ffd2e0c9fc8 [ 135.072903][ T6305] [ 135.073897][ T6305] BUG: Bad page state in process syz.1.66 pfn:2913b [ 135.075845][ T6305] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802913b000 pfn:0x2913b [ 135.078467][ T6305] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 135.080364][ T6305] raw: 00fff00000000000 dead000000000040 ffff88804cdea000 0000000000000000 [ 135.082578][ T6305] raw: ffff88802913b000 0000000000000001 00000000ffffffff 0000000000000000 [ 135.084804][ T6305] page dumped because: page_pool leak [ 135.086247][ T6305] page_owner tracks the page as allocated [ 135.087745][ T6305] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6305, tgid 6299 (syz.1.66), ts 127123679613, free_ts 126888303226 [ 135.092145][ T6305] post_alloc_hook+0x2d1/0x350 [ 135.093418][ T6305] get_page_from_freelist+0x101e/0x3070 [ 135.094895][ T6305] __alloc_pages_noprof+0x223/0x25a0 [ 135.096282][ T6305] alloc_pages_bulk_noprof+0x77c/0x1110 [ 135.097737][ T6305] __page_pool_alloc_pages_slow+0x18f/0x770 [ 135.099370][ T6305] page_pool_alloc_netmem+0xc4/0x160 [ 135.100769][ T6305] page_pool_alloc_pages+0x1a/0x60 [ 135.102135][ T6305] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 135.103747][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 135.105133][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 135.106567][ T6305] __sys_bpf+0xfc6/0x49a0 [ 135.107729][ T6305] __x64_sys_bpf+0x78/0xc0 [ 135.108974][ T6305] do_syscall_64+0xcd/0x250 [ 135.110191][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.111739][ T6305] page last free pid 6291 tgid 6288 stack trace: [ 135.113400][ T6305] free_unref_page+0x5f4/0xdc0 [ 135.114676][ T6305] vfree+0x17a/0x890 [ 135.115718][ T6305] hashlimit_mt_destroy+0x7e/0xa0 [ 135.117047][ T6305] cleanup_entry+0x19f/0x3a0 [ 135.118280][ T6305] translate_table+0xddd/0x17b0 [ 135.119615][ T6305] do_ip6t_set_ctl+0x605/0xc40 [ 135.120888][ T6305] nf_setsockopt+0x8a/0xf0 [ 135.122098][ T6305] ipv6_setsockopt+0x135/0x170 [ 135.123378][ T6305] rawv6_setsockopt+0xd7/0x680 [ 135.124638][ T6305] do_sock_setsockopt+0x222/0x480 [ 135.125978][ T6305] __sys_setsockopt+0x1a4/0x270 [ 135.127259][ T6305] __x64_sys_setsockopt+0xbd/0x160 [ 135.128595][ T6305] do_syscall_64+0xcd/0x250 [ 135.129827][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.131401][ T6305] Modules linked in: [ 135.132448][ T6305] CPU: 3 UID: 0 PID: 6305 Comm: syz.1.66 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 135.135512][ T6305] Tainted: [B]=BAD_PAGE [ 135.136621][ T6305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 135.139602][ T6305] Call Trace: [ 135.140482][ T6305] [ 135.141426][ T6305] dump_stack_lvl+0x16c/0x1f0 [ 135.142723][ T6305] bad_page+0xb3/0x1f0 [ 135.143896][ T6305] ? __pfx_bad_page+0x10/0x10 [ 135.145166][ T6305] ? page_bad_reason+0x9d/0x1e0 [ 135.146527][ T6305] free_unref_page+0x657/0xdc0 [ 135.147854][ T6305] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 135.149510][ T6305] ? __phys_addr+0xc6/0x150 [ 135.150778][ T6305] skb_free_head+0xa0/0x1d0 [ 135.152053][ T6305] skb_release_data+0x560/0x730 [ 135.153415][ T6305] sk_skb_reason_drop+0x129/0x1a0 [ 135.154767][ T6305] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 135.156525][ T6305] ? kernel_text_address+0x8d/0x100 [ 135.158266][ T6305] ? hlock_class+0x4e/0x130 [ 135.159641][ T6305] ? __lock_acquire+0x163e/0x3ce0 [ 135.161078][ T6305] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 135.163197][ T6305] ? hlock_class+0x4e/0x130 [ 135.164541][ T6305] ? __lock_acquire+0xbdd/0x3ce0 [ 135.165951][ T6305] ? __pfx___lock_acquire+0x10/0x10 [ 135.167323][ T6305] __netif_receive_skb_list_core+0x357/0x950 [ 135.168876][ T6305] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 135.170570][ T6305] ? trace_lock_acquire+0x14a/0x1d0 [ 135.171954][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 135.173702][ T6305] ? lock_acquire+0x2f/0xb0 [ 135.175102][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 135.177038][ T6305] netif_receive_skb_list_internal+0x753/0xdb0 [ 135.178790][ T6305] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 135.181165][ T6305] ? __pfx_eth_type_trans+0x10/0x10 [ 135.183281][ T6305] ? __build_skb_around+0x278/0x3b0 [ 135.184722][ T6305] netif_receive_skb_list+0x4f/0x4a0 [ 135.186323][ T6305] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 135.187977][ T6305] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 135.189714][ T6305] ? bpf_test_timer_continue+0x150/0x3d0 [ 135.191419][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 135.192891][ T6305] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 135.194480][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 135.196148][ T6305] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 135.197896][ T6305] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 135.199553][ T6305] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 135.201020][ T6305] ? 0xffffffffa00045c0 [ 135.202397][ T6305] ? 0xffffffffa00045c0 [ 135.203574][ T6305] ? 0xffffffffa00045c0 [ 135.204733][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 135.206410][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 135.207910][ T6305] ? lock_acquire+0x2f/0xb0 [ 135.209109][ T6305] ? __fget_files+0x40/0x3f0 [ 135.210431][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 135.211988][ T6305] ? fput+0x30/0x390 [ 135.213046][ T6305] ? __bpf_prog_get+0xa0/0x290 [ 135.214344][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 135.215990][ T6305] __sys_bpf+0xfc6/0x49a0 [ 135.217610][ T6305] ? __pfx___sys_bpf+0x10/0x10 [ 135.219223][ T6305] ? __schedule+0xe5d/0x5730 [ 135.220446][ T6305] ? __fget_files+0x23a/0x3f0 [ 135.221694][ T6305] ? do_futex+0x123/0x350 [ 135.222839][ T6305] ? __pfx_do_futex+0x10/0x10 [ 135.224162][ T6305] ? xfd_validate_state+0x5d/0x180 [ 135.225519][ T6305] ? rcu_is_watching+0x12/0xc0 [ 135.226878][ T6305] __x64_sys_bpf+0x78/0xc0 [ 135.228105][ T6305] ? lockdep_hardirqs_on+0x7c/0x110 [ 135.229531][ T6305] do_syscall_64+0xcd/0x250 [ 135.230904][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.232664][ T6305] RIP: 0033:0x7fd45b57e719 [ 135.234012][ T6305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.239510][ T6305] RSP: 002b:00007fd45c319038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 135.241673][ T6305] RAX: ffffffffffffffda RBX: 00007fd45b736058 RCX: 00007fd45b57e719 [ 135.243743][ T6305] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 135.245798][ T6305] RBP: 00007fd45b5f132e R08: 0000000000000000 R09: 0000000000000000 [ 135.247888][ T6305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.249983][ T6305] R13: 0000000000000000 R14: 00007fd45b736058 R15: 00007ffd2e0c9fc8 [ 135.252120][ T6305] [ 135.253125][ T6305] BUG: Bad page state in process syz.1.66 pfn:27573 [ 135.254986][ T6305] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888027573d90 pfn:0x27573 [ 135.257675][ T6305] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 135.259615][ T6305] raw: 00fff00000000000 dead000000000040 ffff88804cdea000 0000000000000000 [ 135.262062][ T6305] raw: ffff888027573d90 0000000000000001 00000000ffffffff 0000000000000000 [ 135.264665][ T6305] page dumped because: page_pool leak [ 135.266254][ T6305] page_owner tracks the page as allocated [ 135.267984][ T6305] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6305, tgid 6299 (syz.1.66), ts 127123674783, free_ts 126888308501 [ 135.272353][ T6305] post_alloc_hook+0x2d1/0x350 [ 135.273640][ T6305] get_page_from_freelist+0x101e/0x3070 [ 135.275130][ T6305] __alloc_pages_noprof+0x223/0x25a0 [ 135.276654][ T6305] alloc_pages_bulk_noprof+0x77c/0x1110 [ 135.278280][ T6305] __page_pool_alloc_pages_slow+0x18f/0x770 [ 135.279900][ T6305] page_pool_alloc_netmem+0xc4/0x160 [ 135.281373][ T6305] page_pool_alloc_pages+0x1a/0x60 [ 135.282770][ T6305] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 135.284445][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 135.285913][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 135.287393][ T6305] __sys_bpf+0xfc6/0x49a0 [ 135.288588][ T6305] __x64_sys_bpf+0x78/0xc0 [ 135.289855][ T6305] do_syscall_64+0xcd/0x250 [ 135.291074][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.292631][ T6305] page last free pid 6291 tgid 6288 stack trace: [ 135.294292][ T6305] free_unref_page+0x5f4/0xdc0 [ 135.295553][ T6305] vfree+0x17a/0x890 [ 135.296579][ T6305] hashlimit_mt_destroy+0x7e/0xa0 [ 135.297976][ T6305] cleanup_entry+0x19f/0x3a0 [ 135.299312][ T6305] translate_table+0xddd/0x17b0 [ 135.300600][ T6305] do_ip6t_set_ctl+0x605/0xc40 [ 135.302194][ T6305] nf_setsockopt+0x8a/0xf0 [ 135.303588][ T6305] ipv6_setsockopt+0x135/0x170 [ 135.305022][ T6305] rawv6_setsockopt+0xd7/0x680 [ 135.306459][ T6305] do_sock_setsockopt+0x222/0x480 [ 135.307938][ T6305] __sys_setsockopt+0x1a4/0x270 [ 135.309457][ T6305] __x64_sys_setsockopt+0xbd/0x160 [ 135.310899][ T6305] do_syscall_64+0xcd/0x250 [ 135.312103][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.313761][ T6305] Modules linked in: [ 135.314990][ T6305] CPU: 3 UID: 0 PID: 6305 Comm: syz.1.66 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 135.318231][ T6305] Tainted: [B]=BAD_PAGE [ 135.319385][ T6305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 135.322386][ T6305] Call Trace: [ 135.323393][ T6305] [ 135.324301][ T6305] dump_stack_lvl+0x16c/0x1f0 [ 135.325833][ T6305] bad_page+0xb3/0x1f0 [ 135.327181][ T6305] ? __pfx_bad_page+0x10/0x10 [ 135.328569][ T6305] ? page_bad_reason+0x9d/0x1e0 [ 135.329873][ T6305] free_unref_page+0x657/0xdc0 [ 135.331118][ T6305] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 135.332684][ T6305] ? __phys_addr+0xc6/0x150 [ 135.333850][ T6305] skb_free_head+0xa0/0x1d0 [ 135.335023][ T6305] skb_release_data+0x560/0x730 [ 135.336215][ T6305] sk_skb_reason_drop+0x129/0x1a0 [ 135.337475][ T6305] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 135.339124][ T6305] ? kernel_text_address+0x8d/0x100 [ 135.340573][ T6305] ? hlock_class+0x4e/0x130 [ 135.341812][ T6305] ? __lock_acquire+0x163e/0x3ce0 [ 135.343314][ T6305] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 135.345482][ T6305] ? hlock_class+0x4e/0x130 [ 135.346723][ T6305] ? __lock_acquire+0xbdd/0x3ce0 [ 135.348037][ T6305] ? __pfx___lock_acquire+0x10/0x10 [ 135.349400][ T6305] __netif_receive_skb_list_core+0x357/0x950 [ 135.351012][ T6305] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 135.352669][ T6305] ? trace_lock_acquire+0x14a/0x1d0 [ 135.354015][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 135.355666][ T6305] ? lock_acquire+0x2f/0xb0 [ 135.356890][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 135.358588][ T6305] netif_receive_skb_list_internal+0x753/0xdb0 [ 135.360257][ T6305] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 135.362107][ T6305] ? __pfx_eth_type_trans+0x10/0x10 [ 135.363535][ T6305] ? __build_skb_around+0x278/0x3b0 [ 135.365013][ T6305] netif_receive_skb_list+0x4f/0x4a0 [ 135.366526][ T6305] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 135.368308][ T6305] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 135.370398][ T6305] ? bpf_test_timer_continue+0x150/0x3d0 [ 135.372040][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 135.373738][ T6305] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 135.375597][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 135.377272][ T6305] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 135.378845][ T6305] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 135.380409][ T6305] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 135.381793][ T6305] ? 0xffffffffa00045c0 [ 135.383132][ T6305] ? 0xffffffffa00045c0 [ 135.384456][ T6305] ? 0xffffffffa00045c0 [ 135.385670][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 135.387342][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 135.388775][ T6305] ? lock_acquire+0x2f/0xb0 [ 135.389988][ T6305] ? __fget_files+0x40/0x3f0 [ 135.391283][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 135.392828][ T6305] ? fput+0x30/0x390 [ 135.394139][ T6305] ? __bpf_prog_get+0xa0/0x290 [ 135.395566][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 135.397359][ T6305] __sys_bpf+0xfc6/0x49a0 [ 135.398523][ T6305] ? __pfx___sys_bpf+0x10/0x10 [ 135.399795][ T6305] ? __schedule+0xe5d/0x5730 [ 135.401224][ T6305] ? __fget_files+0x23a/0x3f0 [ 135.402609][ T6305] ? do_futex+0x123/0x350 [ 135.403796][ T6305] ? __pfx_do_futex+0x10/0x10 [ 135.405279][ T6305] ? xfd_validate_state+0x5d/0x180 [ 135.406762][ T6305] ? rcu_is_watching+0x12/0xc0 [ 135.408130][ T6305] __x64_sys_bpf+0x78/0xc0 [ 135.409405][ T6305] ? lockdep_hardirqs_on+0x7c/0x110 [ 135.410971][ T6305] do_syscall_64+0xcd/0x250 [ 135.412426][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.414374][ T6305] RIP: 0033:0x7fd45b57e719 [ 135.415693][ T6305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.421326][ T6305] RSP: 002b:00007fd45c319038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 135.423983][ T6305] RAX: ffffffffffffffda RBX: 00007fd45b736058 RCX: 00007fd45b57e719 [ 135.426316][ T6305] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 135.428386][ T6305] RBP: 00007fd45b5f132e R08: 0000000000000000 R09: 0000000000000000 [ 135.430503][ T6305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.432622][ T6305] R13: 0000000000000000 R14: 00007fd45b736058 R15: 00007ffd2e0c9fc8 [ 135.435002][ T6305] [ 135.435952][ T6305] BUG: Bad page state in process syz.1.66 pfn:2efc7 [ 135.437714][ T6305] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802efc73c0 pfn:0x2efc7 [ 135.440651][ T6305] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 135.442537][ T6305] raw: 00fff00000000000 dead000000000040 ffff88804cdea000 0000000000000000 [ 135.444662][ T6305] raw: ffff88802efc73c0 0000000000000001 00000000ffffffff 0000000000000000 [ 135.446841][ T6305] page dumped because: page_pool leak [ 135.448333][ T6305] page_owner tracks the page as allocated [ 135.450022][ T6305] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6305, tgid 6299 (syz.1.66), ts 127123669627, free_ts 126888313833 [ 135.455023][ T6305] post_alloc_hook+0x2d1/0x350 [ 135.456676][ T6305] get_page_from_freelist+0x101e/0x3070 [ 135.458797][ T6305] __alloc_pages_noprof+0x223/0x25a0 [ 135.460579][ T6305] alloc_pages_bulk_noprof+0x77c/0x1110 [ 135.462747][ T6305] __page_pool_alloc_pages_slow+0x18f/0x770 [ 135.464604][ T6305] page_pool_alloc_netmem+0xc4/0x160 [ 135.466046][ T6305] page_pool_alloc_pages+0x1a/0x60 [ 135.467432][ T6305] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 135.469039][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 135.470456][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 135.471907][ T6305] __sys_bpf+0xfc6/0x49a0 [ 135.473061][ T6305] __x64_sys_bpf+0x78/0xc0 [ 135.474261][ T6305] do_syscall_64+0xcd/0x250 [ 135.475670][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.477325][ T6305] page last free pid 6291 tgid 6288 stack trace: [ 135.479348][ T6305] free_unref_page+0x5f4/0xdc0 [ 135.480693][ T6305] vfree+0x17a/0x890 [ 135.481740][ T6305] hashlimit_mt_destroy+0x7e/0xa0 [ 135.483090][ T6305] cleanup_entry+0x19f/0x3a0 [ 135.484310][ T6305] translate_table+0xddd/0x17b0 [ 135.485717][ T6305] do_ip6t_set_ctl+0x605/0xc40 [ 135.487325][ T6305] nf_setsockopt+0x8a/0xf0 [ 135.489155][ T6305] ipv6_setsockopt+0x135/0x170 [ 135.490921][ T6305] rawv6_setsockopt+0xd7/0x680 [ 135.492610][ T6305] do_sock_setsockopt+0x222/0x480 [ 135.494636][ T6305] __sys_setsockopt+0x1a4/0x270 [ 135.495982][ T6305] __x64_sys_setsockopt+0xbd/0x160 [ 135.497638][ T6305] do_syscall_64+0xcd/0x250 [ 135.498976][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.500746][ T6305] Modules linked in: [ 135.501882][ T6305] CPU: 3 UID: 0 PID: 6305 Comm: syz.1.66 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 135.504985][ T6305] Tainted: [B]=BAD_PAGE [ 135.506047][ T6305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 135.508859][ T6305] Call Trace: [ 135.509740][ T6305] [ 135.510537][ T6305] dump_stack_lvl+0x16c/0x1f0 [ 135.511792][ T6305] bad_page+0xb3/0x1f0 [ 135.512880][ T6305] ? __pfx_bad_page+0x10/0x10 [ 135.514134][ T6305] ? page_bad_reason+0x9d/0x1e0 [ 135.515841][ T6305] free_unref_page+0x657/0xdc0 [ 135.517463][ T6305] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 135.519060][ T6305] ? __phys_addr+0xc6/0x150 [ 135.520267][ T6305] skb_free_head+0xa0/0x1d0 [ 135.521596][ T6305] skb_release_data+0x560/0x730 [ 135.523176][ T6305] sk_skb_reason_drop+0x129/0x1a0 [ 135.524556][ T6305] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 135.526411][ T6305] ? kernel_text_address+0x8d/0x100 [ 135.527830][ T6305] ? hlock_class+0x4e/0x130 [ 135.529190][ T6305] ? __lock_acquire+0x163e/0x3ce0 [ 135.530574][ T6305] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 135.532458][ T6305] ? hlock_class+0x4e/0x130 [ 135.533994][ T6305] ? __lock_acquire+0xbdd/0x3ce0 [ 135.535408][ T6305] ? __pfx___lock_acquire+0x10/0x10 [ 135.536931][ T6305] __netif_receive_skb_list_core+0x357/0x950 [ 135.538731][ T6305] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 135.540697][ T6305] ? trace_lock_acquire+0x14a/0x1d0 [ 135.542291][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 135.544216][ T6305] ? lock_acquire+0x2f/0xb0 [ 135.545661][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 135.547823][ T6305] netif_receive_skb_list_internal+0x753/0xdb0 [ 135.549744][ T6305] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 135.551853][ T6305] ? __pfx_eth_type_trans+0x10/0x10 [ 135.553593][ T6305] ? __build_skb_around+0x278/0x3b0 [ 135.555898][ T6305] netif_receive_skb_list+0x4f/0x4a0 [ 135.557451][ T6305] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 135.559185][ T6305] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 135.560893][ T6305] ? bpf_test_timer_continue+0x150/0x3d0 [ 135.562587][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 135.564168][ T6305] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 135.565821][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 135.567488][ T6305] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 135.569070][ T6305] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 135.570646][ T6305] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 135.571986][ T6305] ? 0xffffffffa00045c0 [ 135.573256][ T6305] ? 0xffffffffa00045c0 [ 135.574678][ T6305] ? 0xffffffffa00045c0 [ 135.575944][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 135.577638][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 135.579186][ T6305] ? lock_acquire+0x2f/0xb0 [ 135.580613][ T6305] ? __fget_files+0x40/0x3f0 [ 135.582391][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 135.584283][ T6305] ? fput+0x30/0x390 [ 135.585525][ T6305] ? __bpf_prog_get+0xa0/0x290 [ 135.586995][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 135.588749][ T6305] __sys_bpf+0xfc6/0x49a0 [ 135.589924][ T6305] ? __pfx___sys_bpf+0x10/0x10 [ 135.591198][ T6305] ? __schedule+0xe5d/0x5730 [ 135.592403][ T6305] ? __fget_files+0x23a/0x3f0 [ 135.593667][ T6305] ? do_futex+0x123/0x350 [ 135.594814][ T6305] ? __pfx_do_futex+0x10/0x10 [ 135.596057][ T6305] ? xfd_validate_state+0x5d/0x180 [ 135.597399][ T6305] ? rcu_is_watching+0x12/0xc0 [ 135.598674][ T6305] __x64_sys_bpf+0x78/0xc0 [ 135.599856][ T6305] ? lockdep_hardirqs_on+0x7c/0x110 [ 135.601224][ T6305] do_syscall_64+0xcd/0x250 [ 135.602444][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.603985][ T6305] RIP: 0033:0x7fd45b57e719 [ 135.605150][ T6305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.610167][ T6305] RSP: 002b:00007fd45c319038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 135.612932][ T6305] RAX: ffffffffffffffda RBX: 00007fd45b736058 RCX: 00007fd45b57e719 [ 135.615753][ T6305] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 135.620054][ T6305] RBP: 00007fd45b5f132e R08: 0000000000000000 R09: 0000000000000000 [ 135.624001][ T6305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.627845][ T6305] R13: 0000000000000000 R14: 00007fd45b736058 R15: 00007ffd2e0c9fc8 [ 135.631520][ T6305] [ 135.632868][ T6305] BUG: Bad page state in process syz.1.66 pfn:2ad73 [ 135.635609][ T6305] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802ad73e88 pfn:0x2ad73 [ 135.640496][ T6305] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 135.642491][ T6305] raw: 00fff00000000000 dead000000000040 ffff88804cdea000 0000000000000000 [ 135.645074][ T6305] raw: ffff88802ad73e88 0000000000000001 00000000ffffffff 0000000000000000 [ 135.647385][ T6305] page dumped because: page_pool leak [ 135.649781][ T6305] page_owner tracks the page as allocated [ 135.651965][ T6305] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6305, tgid 6299 (syz.1.66), ts 127123665080, free_ts 126888318929 [ 135.660568][ T6305] post_alloc_hook+0x2d1/0x350 [ 135.663451][ T6305] get_page_from_freelist+0x101e/0x3070 [ 135.668223][ T6305] __alloc_pages_noprof+0x223/0x25a0 [ 135.670770][ T6305] alloc_pages_bulk_noprof+0x77c/0x1110 [ 135.673374][ T6305] __page_pool_alloc_pages_slow+0x18f/0x770 [ 135.675014][ T6305] page_pool_alloc_netmem+0xc4/0x160 [ 135.677892][ T6305] page_pool_alloc_pages+0x1a/0x60 [ 135.679610][ T6305] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 135.681881][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 135.684631][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 135.686207][ T6305] __sys_bpf+0xfc6/0x49a0 [ 135.687362][ T6305] __x64_sys_bpf+0x78/0xc0 [ 135.688550][ T6305] do_syscall_64+0xcd/0x250 [ 135.691511][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.694977][ T6305] page last free pid 6291 tgid 6288 stack trace: [ 135.698776][ T6305] free_unref_page+0x5f4/0xdc0 [ 135.700600][ T6305] vfree+0x17a/0x890 [ 135.702061][ T6305] hashlimit_mt_destroy+0x7e/0xa0 [ 135.703997][ T6305] cleanup_entry+0x19f/0x3a0 [ 135.705557][ T6305] translate_table+0xddd/0x17b0 [ 135.707294][ T6305] do_ip6t_set_ctl+0x605/0xc40 [ 135.709845][ T6305] nf_setsockopt+0x8a/0xf0 [ 135.712450][ T6305] ipv6_setsockopt+0x135/0x170 [ 135.714808][ T6305] rawv6_setsockopt+0xd7/0x680 [ 135.717163][ T6305] do_sock_setsockopt+0x222/0x480 [ 135.719629][ T6305] __sys_setsockopt+0x1a4/0x270 [ 135.722935][ T6305] __x64_sys_setsockopt+0xbd/0x160 [ 135.725785][ T6305] do_syscall_64+0xcd/0x250 [ 135.727598][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.729720][ T6305] Modules linked in: [ 135.731192][ T6305] CPU: 3 UID: 0 PID: 6305 Comm: syz.1.66 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 135.737565][ T6305] Tainted: [B]=BAD_PAGE [ 135.739910][ T6305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 135.746838][ T6305] Call Trace: [ 135.747725][ T6305] [ 135.748516][ T6305] dump_stack_lvl+0x16c/0x1f0 [ 135.749775][ T6305] bad_page+0xb3/0x1f0 [ 135.750895][ T6305] ? __pfx_bad_page+0x10/0x10 [ 135.752279][ T6305] ? page_bad_reason+0x9d/0x1e0 [ 135.754581][ T6305] free_unref_page+0x657/0xdc0 [ 135.756973][ T6305] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 135.761344][ T6305] ? __phys_addr+0xc6/0x150 [ 135.764130][ T6305] skb_free_head+0xa0/0x1d0 [ 135.766937][ T6305] skb_release_data+0x560/0x730 [ 135.769821][ T6305] sk_skb_reason_drop+0x129/0x1a0 [ 135.771920][ T6305] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 135.773915][ T6305] ? kernel_text_address+0x8d/0x100 [ 135.775824][ T6305] ? hlock_class+0x4e/0x130 [ 135.777264][ T6305] ? __lock_acquire+0x163e/0x3ce0 [ 135.778600][ T6305] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 135.780471][ T6305] ? hlock_class+0x4e/0x130 [ 135.781772][ T6305] ? __lock_acquire+0xbdd/0x3ce0 [ 135.783108][ T6305] ? __pfx___lock_acquire+0x10/0x10 [ 135.786420][ T6305] __netif_receive_skb_list_core+0x357/0x950 [ 135.790154][ T6305] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 135.793834][ T6305] ? trace_lock_acquire+0x14a/0x1d0 [ 135.797890][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 135.802867][ T6305] ? lock_acquire+0x2f/0xb0 [ 135.804616][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 135.806562][ T6305] netif_receive_skb_list_internal+0x753/0xdb0 [ 135.809558][ T6305] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 135.813379][ T6305] ? __pfx_eth_type_trans+0x10/0x10 [ 135.815837][ T6305] ? __build_skb_around+0x278/0x3b0 [ 135.817247][ T6305] netif_receive_skb_list+0x4f/0x4a0 [ 135.818665][ T6305] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 135.820487][ T6305] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 135.822453][ T6305] ? bpf_test_timer_continue+0x150/0x3d0 [ 135.824501][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 135.826532][ T6305] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 135.828548][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 135.830104][ T6305] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 135.831645][ T6305] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 135.833941][ T6305] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 135.835722][ T6305] ? 0xffffffffa00045c0 [ 135.836852][ T6305] ? 0xffffffffa00045c0 [ 135.838123][ T6305] ? 0xffffffffa00045c0 [ 135.839527][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 135.841010][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 135.842768][ T6305] ? lock_acquire+0x2f/0xb0 [ 135.844413][ T6305] ? __fget_files+0x40/0x3f0 [ 135.846027][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 135.847890][ T6305] ? fput+0x30/0x390 [ 135.848907][ T6305] ? __bpf_prog_get+0xa0/0x290 [ 135.850148][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 135.851595][ T6305] __sys_bpf+0xfc6/0x49a0 [ 135.853115][ T6305] ? __pfx___sys_bpf+0x10/0x10 [ 135.854880][ T6305] ? __schedule+0xe5d/0x5730 [ 135.856293][ T6305] ? __fget_files+0x23a/0x3f0 [ 135.857794][ T6305] ? do_futex+0x123/0x350 [ 135.859137][ T6305] ? __pfx_do_futex+0x10/0x10 [ 135.860408][ T6305] ? xfd_validate_state+0x5d/0x180 [ 135.862175][ T6305] ? rcu_is_watching+0x12/0xc0 [ 135.863938][ T6305] __x64_sys_bpf+0x78/0xc0 [ 135.865713][ T6305] ? lockdep_hardirqs_on+0x7c/0x110 [ 135.867654][ T6305] do_syscall_64+0xcd/0x250 [ 135.869005][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.870591][ T6305] RIP: 0033:0x7fd45b57e719 [ 135.871801][ T6305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.878000][ T6305] RSP: 002b:00007fd45c319038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 135.880869][ T6305] RAX: ffffffffffffffda RBX: 00007fd45b736058 RCX: 00007fd45b57e719 [ 135.884295][ T6305] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 135.886683][ T6305] RBP: 00007fd45b5f132e R08: 0000000000000000 R09: 0000000000000000 [ 135.888714][ T6305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.890776][ T6305] R13: 0000000000000000 R14: 00007fd45b736058 R15: 00007ffd2e0c9fc8 [ 135.893565][ T6305] [ 135.894793][ T6305] BUG: Bad page state in process syz.1.66 pfn:254ae [ 135.896770][ T6305] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880254aed90 pfn:0x254ae [ 135.899732][ T6305] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 135.901660][ T6305] raw: 00fff00000000000 dead000000000040 ffff88804cdea000 0000000000000000 [ 135.905044][ T6305] raw: ffff8880254aed90 0000000000000001 00000000ffffffff 0000000000000000 [ 135.907645][ T6305] page dumped because: page_pool leak [ 135.909193][ T6305] page_owner tracks the page as allocated [ 135.910745][ T6305] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6305, tgid 6299 (syz.1.66), ts 127123660673, free_ts 126888324413 [ 135.916199][ T6305] post_alloc_hook+0x2d1/0x350 [ 135.917887][ T6305] get_page_from_freelist+0x101e/0x3070 [ 135.920040][ T6305] __alloc_pages_noprof+0x223/0x25a0 [ 135.922495][ T6305] alloc_pages_bulk_noprof+0x77c/0x1110 [ 135.924483][ T6305] __page_pool_alloc_pages_slow+0x18f/0x770 [ 135.926780][ T6305] page_pool_alloc_netmem+0xc4/0x160 [ 135.928795][ T6305] page_pool_alloc_pages+0x1a/0x60 [ 135.930734][ T6305] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 135.932986][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 135.935329][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 135.937509][ T6305] __sys_bpf+0xfc6/0x49a0 [ 135.939506][ T6305] __x64_sys_bpf+0x78/0xc0 [ 135.941451][ T6305] do_syscall_64+0xcd/0x250 [ 135.943445][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.945761][ T6305] page last free pid 6291 tgid 6288 stack trace: [ 135.948192][ T6305] free_unref_page+0x5f4/0xdc0 [ 135.949630][ T6305] vfree+0x17a/0x890 [ 135.950687][ T6305] hashlimit_mt_destroy+0x7e/0xa0 [ 135.952078][ T6305] cleanup_entry+0x19f/0x3a0 [ 135.953433][ T6305] translate_table+0xddd/0x17b0 [ 135.954712][ T6305] do_ip6t_set_ctl+0x605/0xc40 [ 135.956115][ T6305] nf_setsockopt+0x8a/0xf0 [ 135.957469][ T6305] ipv6_setsockopt+0x135/0x170 [ 135.959291][ T6305] rawv6_setsockopt+0xd7/0x680 [ 135.960768][ T6305] do_sock_setsockopt+0x222/0x480 [ 135.962509][ T6305] __sys_setsockopt+0x1a4/0x270 [ 135.963980][ T6305] __x64_sys_setsockopt+0xbd/0x160 [ 135.965337][ T6305] do_syscall_64+0xcd/0x250 [ 135.966569][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.968205][ T6305] Modules linked in: [ 135.969382][ T6305] CPU: 3 UID: 0 PID: 6305 Comm: syz.1.66 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 135.972859][ T6305] Tainted: [B]=BAD_PAGE [ 135.974243][ T6305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 135.979033][ T6305] Call Trace: [ 135.980541][ T6305] [ 135.981802][ T6305] dump_stack_lvl+0x16c/0x1f0 [ 135.983612][ T6305] bad_page+0xb3/0x1f0 [ 135.985201][ T6305] ? __pfx_bad_page+0x10/0x10 [ 135.987308][ T6305] ? page_bad_reason+0x9d/0x1e0 [ 135.989211][ T6305] free_unref_page+0x657/0xdc0 [ 135.991236][ T6305] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 135.993607][ T6305] ? __phys_addr+0xc6/0x150 [ 135.995331][ T6305] skb_free_head+0xa0/0x1d0 [ 135.997166][ T6305] skb_release_data+0x560/0x730 [ 135.998957][ T6305] sk_skb_reason_drop+0x129/0x1a0 [ 136.000272][ T6305] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 136.002055][ T6305] ? kernel_text_address+0x8d/0x100 [ 136.003400][ T6305] ? hlock_class+0x4e/0x130 [ 136.004539][ T6305] ? __lock_acquire+0x163e/0x3ce0 [ 136.005860][ T6305] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 136.007760][ T6305] ? hlock_class+0x4e/0x130 [ 136.008997][ T6305] ? __lock_acquire+0xbdd/0x3ce0 [ 136.010295][ T6305] ? __pfx___lock_acquire+0x10/0x10 [ 136.011576][ T6305] __netif_receive_skb_list_core+0x357/0x950 [ 136.013209][ T6305] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 136.014837][ T6305] ? trace_lock_acquire+0x14a/0x1d0 [ 136.016145][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 136.017752][ T6305] ? lock_acquire+0x2f/0xb0 [ 136.018943][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 136.020486][ T6305] netif_receive_skb_list_internal+0x753/0xdb0 [ 136.022484][ T6305] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 136.024326][ T6305] ? __pfx_eth_type_trans+0x10/0x10 [ 136.025670][ T6305] ? __build_skb_around+0x278/0x3b0 [ 136.027012][ T6305] netif_receive_skb_list+0x4f/0x4a0 [ 136.028462][ T6305] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 136.030135][ T6305] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 136.031933][ T6305] ? bpf_test_timer_continue+0x150/0x3d0 [ 136.034188][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 136.036228][ T6305] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 136.037806][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 136.039543][ T6305] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 136.041506][ T6305] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 136.043197][ T6305] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 136.044984][ T6305] ? 0xffffffffa00045c0 [ 136.046298][ T6305] ? 0xffffffffa00045c0 [ 136.047438][ T6305] ? 0xffffffffa00045c0 [ 136.048617][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 136.050258][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 136.051657][ T6305] ? lock_acquire+0x2f/0xb0 [ 136.053363][ T6305] ? __fget_files+0x40/0x3f0 [ 136.055067][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 136.057083][ T6305] ? fput+0x30/0x390 [ 136.059276][ T6305] ? __bpf_prog_get+0xa0/0x290 [ 136.060768][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 136.062568][ T6305] __sys_bpf+0xfc6/0x49a0 [ 136.063809][ T6305] ? __pfx___sys_bpf+0x10/0x10 [ 136.065102][ T6305] ? __schedule+0xe5d/0x5730 [ 136.066420][ T6305] ? __fget_files+0x23a/0x3f0 [ 136.067699][ T6305] ? do_futex+0x123/0x350 [ 136.068854][ T6305] ? __pfx_do_futex+0x10/0x10 [ 136.070170][ T6305] ? xfd_validate_state+0x5d/0x180 [ 136.071540][ T6305] ? rcu_is_watching+0x12/0xc0 [ 136.073240][ T6305] __x64_sys_bpf+0x78/0xc0 [ 136.074889][ T6305] ? lockdep_hardirqs_on+0x7c/0x110 [ 136.076780][ T6305] do_syscall_64+0xcd/0x250 [ 136.078050][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.079717][ T6305] RIP: 0033:0x7fd45b57e719 [ 136.080999][ T6305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.086154][ T6305] RSP: 002b:00007fd45c319038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 136.088325][ T6305] RAX: ffffffffffffffda RBX: 00007fd45b736058 RCX: 00007fd45b57e719 [ 136.090432][ T6305] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 136.092806][ T6305] RBP: 00007fd45b5f132e R08: 0000000000000000 R09: 0000000000000000 [ 136.095667][ T6305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.097880][ T6305] R13: 0000000000000000 R14: 00007fd45b736058 R15: 00007ffd2e0c9fc8 [ 136.099914][ T6305] [ 136.100809][ T6305] BUG: Bad page state in process syz.1.66 pfn:48f16 [ 136.102597][ T6305] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x7f625ce22 pfn:0x48f16 [ 136.105100][ T6305] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 136.107122][ T6305] raw: 00fff00000000000 dead000000000040 ffff88804cdea000 0000000000000000 [ 136.109355][ T6305] raw: 00000007f625ce22 0000000000000001 00000000ffffffff 0000000000000000 [ 136.111858][ T6305] page dumped because: page_pool leak [ 136.113295][ T6305] page_owner tracks the page as allocated [ 136.114874][ T6305] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6305, tgid 6299 (syz.1.66), ts 127123656152, free_ts 126888330078 [ 136.119964][ T6305] post_alloc_hook+0x2d1/0x350 [ 136.121516][ T6305] get_page_from_freelist+0x101e/0x3070 [ 136.123309][ T6305] __alloc_pages_noprof+0x223/0x25a0 [ 136.124739][ T6305] alloc_pages_bulk_noprof+0x77c/0x1110 [ 136.126242][ T6305] __page_pool_alloc_pages_slow+0x18f/0x770 [ 136.127791][ T6305] page_pool_alloc_netmem+0xc4/0x160 [ 136.129241][ T6305] page_pool_alloc_pages+0x1a/0x60 [ 136.130636][ T6305] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 136.132449][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 136.133836][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 136.135246][ T6305] __sys_bpf+0xfc6/0x49a0 [ 136.136380][ T6305] __x64_sys_bpf+0x78/0xc0 [ 136.137553][ T6305] do_syscall_64+0xcd/0x250 [ 136.139056][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.141039][ T6305] page last free pid 6291 tgid 6288 stack trace: [ 136.143147][ T6305] free_unref_page+0x5f4/0xdc0 [ 136.144897][ T6305] vfree+0x17a/0x890 [ 136.146414][ T6305] hashlimit_mt_destroy+0x7e/0xa0 [ 136.148182][ T6305] cleanup_entry+0x19f/0x3a0 [ 136.149890][ T6305] translate_table+0xddd/0x17b0 [ 136.151628][ T6305] do_ip6t_set_ctl+0x605/0xc40 [ 136.153460][ T6305] nf_setsockopt+0x8a/0xf0 [ 136.155285][ T6305] ipv6_setsockopt+0x135/0x170 [ 136.156985][ T6305] rawv6_setsockopt+0xd7/0x680 [ 136.158919][ T6305] do_sock_setsockopt+0x222/0x480 [ 136.160992][ T6305] __sys_setsockopt+0x1a4/0x270 [ 136.162785][ T6305] __x64_sys_setsockopt+0xbd/0x160 [ 136.164714][ T6305] do_syscall_64+0xcd/0x250 [ 136.166093][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.167622][ T6305] Modules linked in: [ 136.168724][ T6305] CPU: 3 UID: 0 PID: 6305 Comm: syz.1.66 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 136.171824][ T6305] Tainted: [B]=BAD_PAGE [ 136.173077][ T6305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 136.175898][ T6305] Call Trace: [ 136.176773][ T6305] [ 136.177562][ T6305] dump_stack_lvl+0x16c/0x1f0 [ 136.178830][ T6305] bad_page+0xb3/0x1f0 [ 136.179985][ T6305] ? __pfx_bad_page+0x10/0x10 [ 136.181268][ T6305] ? page_bad_reason+0x9d/0x1e0 [ 136.182930][ T6305] free_unref_page+0x657/0xdc0 [ 136.184455][ T6305] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 136.186124][ T6305] ? __phys_addr+0xc6/0x150 [ 136.187415][ T6305] skb_free_head+0xa0/0x1d0 [ 136.188755][ T6305] skb_release_data+0x560/0x730 [ 136.190207][ T6305] sk_skb_reason_drop+0x129/0x1a0 [ 136.191715][ T6305] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 136.194233][ T6305] ? kernel_text_address+0x8d/0x100 [ 136.196050][ T6305] ? hlock_class+0x4e/0x130 [ 136.197244][ T6305] ? __lock_acquire+0x163e/0x3ce0 [ 136.198563][ T6305] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 136.200442][ T6305] ? hlock_class+0x4e/0x130 [ 136.201621][ T6305] ? __lock_acquire+0xbdd/0x3ce0 [ 136.203169][ T6305] ? __pfx___lock_acquire+0x10/0x10 [ 136.204495][ T6305] __netif_receive_skb_list_core+0x357/0x950 [ 136.206093][ T6305] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 136.207730][ T6305] ? trace_lock_acquire+0x14a/0x1d0 [ 136.209008][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 136.210557][ T6305] ? lock_acquire+0x2f/0xb0 [ 136.211797][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 136.213541][ T6305] netif_receive_skb_list_internal+0x753/0xdb0 [ 136.215521][ T6305] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 136.217692][ T6305] ? __pfx_eth_type_trans+0x10/0x10 [ 136.219327][ T6305] ? __build_skb_around+0x278/0x3b0 [ 136.220723][ T6305] netif_receive_skb_list+0x4f/0x4a0 [ 136.222324][ T6305] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 136.224561][ T6305] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 136.226762][ T6305] ? bpf_test_timer_continue+0x150/0x3d0 [ 136.228247][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 136.229701][ T6305] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 136.231247][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 136.232898][ T6305] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 136.234776][ T6305] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 136.236559][ T6305] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 136.237982][ T6305] ? 0xffffffffa00045c0 [ 136.239129][ T6305] ? 0xffffffffa00045c0 [ 136.240223][ T6305] ? 0xffffffffa00045c0 [ 136.241336][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 136.243357][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 136.245414][ T6305] ? lock_acquire+0x2f/0xb0 [ 136.247106][ T6305] ? __fget_files+0x40/0x3f0 [ 136.248732][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 136.250346][ T6305] ? fput+0x30/0x390 [ 136.251400][ T6305] ? __bpf_prog_get+0xa0/0x290 [ 136.252719][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 136.254656][ T6305] __sys_bpf+0xfc6/0x49a0 [ 136.255953][ T6305] ? __pfx___sys_bpf+0x10/0x10 [ 136.257746][ T6305] ? __schedule+0xe5d/0x5730 [ 136.259081][ T6305] ? __fget_files+0x23a/0x3f0 [ 136.260604][ T6305] ? do_futex+0x123/0x350 [ 136.262043][ T6305] ? __pfx_do_futex+0x10/0x10 [ 136.263823][ T6305] ? xfd_validate_state+0x5d/0x180 [ 136.265725][ T6305] ? rcu_is_watching+0x12/0xc0 [ 136.267516][ T6305] __x64_sys_bpf+0x78/0xc0 [ 136.269117][ T6305] ? lockdep_hardirqs_on+0x7c/0x110 [ 136.270622][ T6305] do_syscall_64+0xcd/0x250 [ 136.271922][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.273558][ T6305] RIP: 0033:0x7fd45b57e719 [ 136.274907][ T6305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.281407][ T6305] RSP: 002b:00007fd45c319038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 136.284966][ T6305] RAX: ffffffffffffffda RBX: 00007fd45b736058 RCX: 00007fd45b57e719 [ 136.287888][ T6305] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 136.290371][ T6305] RBP: 00007fd45b5f132e R08: 0000000000000000 R09: 0000000000000000 [ 136.292738][ T6305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.295075][ T6305] R13: 0000000000000000 R14: 00007fd45b736058 R15: 00007ffd2e0c9fc8 [ 136.297171][ T6305] [ 136.298118][ T6305] BUG: Bad page state in process syz.1.66 pfn:259e4 [ 136.299973][ T6305] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880259e40f0 pfn:0x259e4 [ 136.303295][ T6305] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 136.305332][ T6305] raw: 00fff00000000000 dead000000000040 ffff88804cdea000 0000000000000000 [ 136.307973][ T6305] raw: ffff8880259e40f0 0000000000000001 00000000ffffffff 0000000000000000 [ 136.310412][ T6305] page dumped because: page_pool leak [ 136.311929][ T6305] page_owner tracks the page as allocated [ 136.313921][ T6305] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6305, tgid 6299 (syz.1.66), ts 127123651458, free_ts 126890520488 [ 136.319276][ T6305] post_alloc_hook+0x2d1/0x350 [ 136.320742][ T6305] get_page_from_freelist+0x101e/0x3070 [ 136.322478][ T6305] __alloc_pages_noprof+0x223/0x25a0 [ 136.324171][ T6305] alloc_pages_bulk_noprof+0x77c/0x1110 [ 136.325910][ T6305] __page_pool_alloc_pages_slow+0x18f/0x770 [ 136.327712][ T6305] page_pool_alloc_netmem+0xc4/0x160 [ 136.329234][ T6305] page_pool_alloc_pages+0x1a/0x60 [ 136.330731][ T6305] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 136.332690][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 136.334849][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 136.336882][ T6305] __sys_bpf+0xfc6/0x49a0 [ 136.337984][ T6305] __x64_sys_bpf+0x78/0xc0 [ 136.339356][ T6305] do_syscall_64+0xcd/0x250 [ 136.340697][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.342607][ T6305] page last free pid 6291 tgid 6288 stack trace: [ 136.344806][ T6305] free_unref_page+0x5f4/0xdc0 [ 136.346487][ T6305] vfree+0x17a/0x890 [ 136.347990][ T6305] bpf_prog_calc_tag+0x539/0x720 [ 136.349844][ T6305] resolve_pseudo_ldimm64+0xcd/0x2950 [ 136.351799][ T6305] bpf_check+0x6e0f/0xb430 [ 136.353403][ T6305] bpf_prog_load+0xedb/0x2660 [ 136.355190][ T6305] __sys_bpf+0x402b/0x49a0 [ 136.357038][ T6305] __x64_sys_bpf+0x78/0xc0 [ 136.358869][ T6305] do_syscall_64+0xcd/0x250 [ 136.360565][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.362709][ T6305] Modules linked in: [ 136.363952][ T6305] CPU: 3 UID: 0 PID: 6305 Comm: syz.1.66 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 136.367117][ T6305] Tainted: [B]=BAD_PAGE [ 136.368244][ T6305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 136.371223][ T6305] Call Trace: [ 136.372228][ T6305] [ 136.373021][ T6305] dump_stack_lvl+0x16c/0x1f0 [ 136.374299][ T6305] bad_page+0xb3/0x1f0 [ 136.375489][ T6305] ? __pfx_bad_page+0x10/0x10 [ 136.376737][ T6305] ? page_bad_reason+0x9d/0x1e0 [ 136.377980][ T6305] free_unref_page+0x657/0xdc0 [ 136.379498][ T6305] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 136.381100][ T6305] ? __phys_addr+0xc6/0x150 [ 136.382530][ T6305] skb_free_head+0xa0/0x1d0 [ 136.383888][ T6305] skb_release_data+0x560/0x730 [ 136.385589][ T6305] sk_skb_reason_drop+0x129/0x1a0 [ 136.387294][ T6305] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 136.389372][ T6305] ? kernel_text_address+0x8d/0x100 [ 136.391006][ T6305] ? hlock_class+0x4e/0x130 [ 136.392344][ T6305] ? __lock_acquire+0x163e/0x3ce0 [ 136.393654][ T6305] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 136.395668][ T6305] ? hlock_class+0x4e/0x130 [ 136.397029][ T6305] ? __lock_acquire+0xbdd/0x3ce0 [ 136.398544][ T6305] ? __pfx___lock_acquire+0x10/0x10 [ 136.399917][ T6305] __netif_receive_skb_list_core+0x357/0x950 [ 136.401517][ T6305] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 136.403371][ T6305] ? trace_lock_acquire+0x14a/0x1d0 [ 136.404795][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 136.406475][ T6305] ? lock_acquire+0x2f/0xb0 [ 136.407721][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 136.409401][ T6305] netif_receive_skb_list_internal+0x753/0xdb0 [ 136.411080][ T6305] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 136.412821][ T6305] ? __pfx_eth_type_trans+0x10/0x10 [ 136.414363][ T6305] ? __build_skb_around+0x278/0x3b0 [ 136.415819][ T6305] netif_receive_skb_list+0x4f/0x4a0 [ 136.417370][ T6305] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 136.419495][ T6305] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 136.421333][ T6305] ? bpf_test_timer_continue+0x150/0x3d0 [ 136.422860][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 136.424705][ T6305] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 136.426562][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 136.428150][ T6305] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 136.429699][ T6305] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 136.431330][ T6305] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 136.432729][ T6305] ? 0xffffffffa00045c0 [ 136.434008][ T6305] ? 0xffffffffa00045c0 [ 136.435235][ T6305] ? 0xffffffffa00045c0 [ 136.436679][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 136.438440][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 136.440099][ T6305] ? lock_acquire+0x2f/0xb0 [ 136.441351][ T6305] ? __fget_files+0x40/0x3f0 [ 136.442729][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 136.444374][ T6305] ? fput+0x30/0x390 [ 136.445491][ T6305] ? __bpf_prog_get+0xa0/0x290 [ 136.446909][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 136.448447][ T6305] __sys_bpf+0xfc6/0x49a0 [ 136.449594][ T6305] ? __pfx___sys_bpf+0x10/0x10 [ 136.450868][ T6305] ? __schedule+0xe5d/0x5730 [ 136.452098][ T6305] ? __fget_files+0x23a/0x3f0 [ 136.453397][ T6305] ? do_futex+0x123/0x350 [ 136.454659][ T6305] ? __pfx_do_futex+0x10/0x10 [ 136.456023][ T6305] ? xfd_validate_state+0x5d/0x180 [ 136.457519][ T6305] ? rcu_is_watching+0x12/0xc0 [ 136.458995][ T6305] __x64_sys_bpf+0x78/0xc0 [ 136.460339][ T6305] ? lockdep_hardirqs_on+0x7c/0x110 [ 136.462127][ T6305] do_syscall_64+0xcd/0x250 [ 136.463373][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.464942][ T6305] RIP: 0033:0x7fd45b57e719 [ 136.466193][ T6305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.471356][ T6305] RSP: 002b:00007fd45c319038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 136.473550][ T6305] RAX: ffffffffffffffda RBX: 00007fd45b736058 RCX: 00007fd45b57e719 [ 136.475649][ T6305] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 136.477983][ T6305] RBP: 00007fd45b5f132e R08: 0000000000000000 R09: 0000000000000000 [ 136.480155][ T6305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.482582][ T6305] R13: 0000000000000000 R14: 00007fd45b736058 R15: 00007ffd2e0c9fc8 [ 136.485080][ T6305] [ 136.486261][ T6305] BUG: Bad page state in process syz.1.66 pfn:2f024 [ 136.488238][ T6305] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802f024e58 pfn:0x2f024 [ 136.491119][ T6305] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 136.492990][ T6305] raw: 00fff00000000000 dead000000000040 ffff88804cdea000 0000000000000000 [ 136.495389][ T6305] raw: ffff88802f024e58 0000000000000001 00000000ffffffff 0000000000000000 [ 136.497633][ T6305] page dumped because: page_pool leak [ 136.499112][ T6305] page_owner tracks the page as allocated [ 136.500513][ T6305] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6305, tgid 6299 (syz.1.66), ts 127123646977, free_ts 126890595257 [ 136.504784][ T6305] post_alloc_hook+0x2d1/0x350 [ 136.506123][ T6305] get_page_from_freelist+0x101e/0x3070 [ 136.507588][ T6305] __alloc_pages_noprof+0x223/0x25a0 [ 136.509036][ T6305] alloc_pages_bulk_noprof+0x77c/0x1110 [ 136.510592][ T6305] __page_pool_alloc_pages_slow+0x18f/0x770 [ 136.512172][ T6305] page_pool_alloc_netmem+0xc4/0x160 [ 136.513599][ T6305] page_pool_alloc_pages+0x1a/0x60 [ 136.515141][ T6305] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 136.516809][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 136.518218][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 136.519720][ T6305] __sys_bpf+0xfc6/0x49a0 [ 136.520878][ T6305] __x64_sys_bpf+0x78/0xc0 [ 136.522173][ T6305] do_syscall_64+0xcd/0x250 [ 136.523545][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.525365][ T6305] page last free pid 6291 tgid 6288 stack trace: [ 136.527178][ T6305] free_unref_page+0x5f4/0xdc0 [ 136.528557][ T6305] vfree+0x17a/0x890 [ 136.529742][ T6305] bpf_check+0x1b2b/0xb430 [ 136.531311][ T6305] bpf_prog_load+0xedb/0x2660 [ 136.532617][ T6305] __sys_bpf+0x402b/0x49a0 [ 136.533943][ T6305] __x64_sys_bpf+0x78/0xc0 [ 136.535319][ T6305] do_syscall_64+0xcd/0x250 [ 136.536548][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.538131][ T6305] Modules linked in: [ 136.539439][ T6305] CPU: 3 UID: 0 PID: 6305 Comm: syz.1.66 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 136.543275][ T6305] Tainted: [B]=BAD_PAGE [ 136.544373][ T6305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 136.547181][ T6305] Call Trace: [ 136.548066][ T6305] [ 136.548871][ T6305] dump_stack_lvl+0x16c/0x1f0 [ 136.550130][ T6305] bad_page+0xb3/0x1f0 [ 136.551207][ T6305] ? __pfx_bad_page+0x10/0x10 [ 136.552444][ T6305] ? page_bad_reason+0x9d/0x1e0 [ 136.553926][ T6305] free_unref_page+0x657/0xdc0 [ 136.555855][ T6305] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 136.557561][ T6305] ? __phys_addr+0xc6/0x150 [ 136.558785][ T6305] skb_free_head+0xa0/0x1d0 [ 136.560235][ T6305] skb_release_data+0x560/0x730 [ 136.561667][ T6305] sk_skb_reason_drop+0x129/0x1a0 [ 136.563473][ T6305] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 136.565318][ T6305] ? kernel_text_address+0x8d/0x100 [ 136.566826][ T6305] ? hlock_class+0x4e/0x130 [ 136.568182][ T6305] ? __lock_acquire+0x163e/0x3ce0 [ 136.569577][ T6305] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 136.571564][ T6305] ? hlock_class+0x4e/0x130 [ 136.572807][ T6305] ? __lock_acquire+0xbdd/0x3ce0 [ 136.574139][ T6305] ? __pfx___lock_acquire+0x10/0x10 [ 136.576159][ T6305] __netif_receive_skb_list_core+0x357/0x950 [ 136.577765][ T6305] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 136.579486][ T6305] ? trace_lock_acquire+0x14a/0x1d0 [ 136.580846][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 136.582761][ T6305] ? lock_acquire+0x2f/0xb0 [ 136.584065][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 136.585878][ T6305] netif_receive_skb_list_internal+0x753/0xdb0 [ 136.587736][ T6305] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 136.589507][ T6305] ? __pfx_eth_type_trans+0x10/0x10 [ 136.590970][ T6305] ? __build_skb_around+0x278/0x3b0 [ 136.592406][ T6305] netif_receive_skb_list+0x4f/0x4a0 [ 136.593961][ T6305] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 136.595849][ T6305] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 136.597571][ T6305] ? bpf_test_timer_continue+0x150/0x3d0 [ 136.599052][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 136.600640][ T6305] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 136.602434][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 136.604266][ T6305] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 136.606079][ T6305] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 136.607794][ T6305] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 136.609238][ T6305] ? 0xffffffffa00045c0 [ 136.610463][ T6305] ? 0xffffffffa00045c0 [ 136.611595][ T6305] ? 0xffffffffa00045c0 [ 136.612733][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 136.614488][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 136.615925][ T6305] ? lock_acquire+0x2f/0xb0 [ 136.617265][ T6305] ? __fget_files+0x40/0x3f0 [ 136.618520][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 136.620110][ T6305] ? fput+0x30/0x390 [ 136.621229][ T6305] ? __bpf_prog_get+0xa0/0x290 [ 136.622614][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 136.624298][ T6305] __sys_bpf+0xfc6/0x49a0 [ 136.625532][ T6305] ? __pfx___sys_bpf+0x10/0x10 [ 136.626966][ T6305] ? __schedule+0xe5d/0x5730 [ 136.628542][ T6305] ? __fget_files+0x23a/0x3f0 [ 136.629958][ T6305] ? do_futex+0x123/0x350 [ 136.631238][ T6305] ? __pfx_do_futex+0x10/0x10 [ 136.632500][ T6305] ? xfd_validate_state+0x5d/0x180 [ 136.634365][ T6305] ? rcu_is_watching+0x12/0xc0 [ 136.635734][ T6305] __x64_sys_bpf+0x78/0xc0 [ 136.636993][ T6305] ? lockdep_hardirqs_on+0x7c/0x110 [ 136.638752][ T6305] do_syscall_64+0xcd/0x250 [ 136.640035][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.641592][ T6305] RIP: 0033:0x7fd45b57e719 [ 136.643058][ T6305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.648113][ T6305] RSP: 002b:00007fd45c319038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 136.650423][ T6305] RAX: ffffffffffffffda RBX: 00007fd45b736058 RCX: 00007fd45b57e719 [ 136.652700][ T6305] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 136.654869][ T6305] RBP: 00007fd45b5f132e R08: 0000000000000000 R09: 0000000000000000 [ 136.657540][ T6305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.659941][ T6305] R13: 0000000000000000 R14: 00007fd45b736058 R15: 00007ffd2e0c9fc8 [ 136.662426][ T6305] [ 136.663366][ T6305] BUG: Bad page state in process syz.1.66 pfn:298ea [ 136.665127][ T6305] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880298eaca8 pfn:0x298ea [ 136.667786][ T6305] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 136.669722][ T6305] raw: 00fff00000000000 dead000000000040 ffff88804cdea000 0000000000000000 [ 136.671945][ T6305] raw: ffff8880298eaca8 0000000000000001 00000000ffffffff 0000000000000000 [ 136.674089][ T6305] page dumped because: page_pool leak [ 136.675509][ T6305] page_owner tracks the page as allocated [ 136.677149][ T6305] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6305, tgid 6299 (syz.1.66), ts 127123642347, free_ts 126901686523 [ 136.682414][ T6305] post_alloc_hook+0x2d1/0x350 [ 136.683761][ T6305] get_page_from_freelist+0x101e/0x3070 [ 136.685446][ T6305] __alloc_pages_noprof+0x223/0x25a0 [ 136.687020][ T6305] alloc_pages_bulk_noprof+0x77c/0x1110 [ 136.688759][ T6305] __page_pool_alloc_pages_slow+0x18f/0x770 [ 136.690533][ T6305] page_pool_alloc_netmem+0xc4/0x160 [ 136.692118][ T6305] page_pool_alloc_pages+0x1a/0x60 [ 136.693577][ T6305] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 136.695299][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 136.696684][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 136.698131][ T6305] __sys_bpf+0xfc6/0x49a0 [ 136.699382][ T6305] __x64_sys_bpf+0x78/0xc0 [ 136.700576][ T6305] do_syscall_64+0xcd/0x250 [ 136.701782][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.703481][ T6305] page last free pid 6285 tgid 6284 stack trace: [ 136.705256][ T6305] free_unref_page+0x5f4/0xdc0 [ 136.706624][ T6305] __folio_put+0x30d/0x3d0 [ 136.707877][ T6305] put_page+0x21e/0x280 [ 136.709130][ T6305] page_pool_return_page+0x400/0x520 [ 136.710590][ T6305] page_pool_release+0xf4/0x7d0 [ 136.711972][ T6305] page_pool_destroy+0x10a/0x4c0 [ 136.713314][ T6305] bpf_test_run_xdp_live+0x3a1/0x500 [ 136.714736][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 136.716190][ T6305] __sys_bpf+0xfc6/0x49a0 [ 136.717464][ T6305] __x64_sys_bpf+0x78/0xc0 [ 136.718804][ T6305] do_syscall_64+0xcd/0x250 [ 136.720082][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.721716][ T6305] Modules linked in: [ 136.722774][ T6305] CPU: 3 UID: 0 PID: 6305 Comm: syz.1.66 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 136.725874][ T6305] Tainted: [B]=BAD_PAGE [ 136.727006][ T6305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 136.730096][ T6305] Call Trace: [ 136.731000][ T6305] [ 136.731819][ T6305] dump_stack_lvl+0x16c/0x1f0 [ 136.733131][ T6305] bad_page+0xb3/0x1f0 [ 136.734259][ T6305] ? __pfx_bad_page+0x10/0x10 [ 136.735565][ T6305] ? page_bad_reason+0x9d/0x1e0 [ 136.737073][ T6305] free_unref_page+0x657/0xdc0 [ 136.738617][ T6305] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 136.740408][ T6305] ? __phys_addr+0xc6/0x150 [ 136.741725][ T6305] skb_free_head+0xa0/0x1d0 [ 136.743051][ T6305] skb_release_data+0x560/0x730 [ 136.744337][ T6305] sk_skb_reason_drop+0x129/0x1a0 [ 136.745651][ T6305] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 136.747661][ T6305] ? kernel_text_address+0x8d/0x100 [ 136.749063][ T6305] ? hlock_class+0x4e/0x130 [ 136.750397][ T6305] ? __lock_acquire+0x163e/0x3ce0 [ 136.751795][ T6305] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 136.753712][ T6305] ? hlock_class+0x4e/0x130 [ 136.754951][ T6305] ? __lock_acquire+0xbdd/0x3ce0 [ 136.756274][ T6305] ? __pfx___lock_acquire+0x10/0x10 [ 136.757726][ T6305] __netif_receive_skb_list_core+0x357/0x950 [ 136.759919][ T6305] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 136.762018][ T6305] ? trace_lock_acquire+0x14a/0x1d0 [ 136.763527][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 136.765313][ T6305] ? lock_acquire+0x2f/0xb0 [ 136.766827][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 136.768770][ T6305] netif_receive_skb_list_internal+0x753/0xdb0 [ 136.770971][ T6305] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 136.772772][ T6305] ? __pfx_eth_type_trans+0x10/0x10 [ 136.774368][ T6305] ? __build_skb_around+0x278/0x3b0 [ 136.775947][ T6305] netif_receive_skb_list+0x4f/0x4a0 [ 136.777334][ T6305] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 136.779008][ T6305] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 136.781002][ T6305] ? bpf_test_timer_continue+0x150/0x3d0 [ 136.782725][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 136.784246][ T6305] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 136.785672][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 136.787219][ T6305] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 136.788762][ T6305] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 136.790287][ T6305] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 136.791757][ T6305] ? 0xffffffffa00045c0 [ 136.792847][ T6305] ? 0xffffffffa00045c0 [ 136.793942][ T6305] ? 0xffffffffa00045c0 [ 136.795214][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 136.796908][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 136.798959][ T6305] ? lock_acquire+0x2f/0xb0 [ 136.800372][ T6305] ? __fget_files+0x40/0x3f0 [ 136.801892][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 136.803684][ T6305] ? fput+0x30/0x390 [ 136.804899][ T6305] ? __bpf_prog_get+0xa0/0x290 [ 136.806426][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 136.808217][ T6305] __sys_bpf+0xfc6/0x49a0 [ 136.809532][ T6305] ? __pfx___sys_bpf+0x10/0x10 [ 136.810783][ T6305] ? __schedule+0xe5d/0x5730 [ 136.811998][ T6305] ? __fget_files+0x23a/0x3f0 [ 136.813549][ T6305] ? do_futex+0x123/0x350 [ 136.814777][ T6305] ? __pfx_do_futex+0x10/0x10 [ 136.816024][ T6305] ? xfd_validate_state+0x5d/0x180 [ 136.817367][ T6305] ? rcu_is_watching+0x12/0xc0 [ 136.818869][ T6305] __x64_sys_bpf+0x78/0xc0 [ 136.820683][ T6305] ? lockdep_hardirqs_on+0x7c/0x110 [ 136.822082][ T6305] do_syscall_64+0xcd/0x250 [ 136.823474][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.825029][ T6305] RIP: 0033:0x7fd45b57e719 [ 136.826231][ T6305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.831371][ T6305] RSP: 002b:00007fd45c319038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 136.833541][ T6305] RAX: ffffffffffffffda RBX: 00007fd45b736058 RCX: 00007fd45b57e719 [ 136.835586][ T6305] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 136.837910][ T6305] RBP: 00007fd45b5f132e R08: 0000000000000000 R09: 0000000000000000 [ 136.840057][ T6305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.842048][ T6305] R13: 0000000000000000 R14: 00007fd45b736058 R15: 00007ffd2e0c9fc8 [ 136.844312][ T6305] [ 136.845261][ T6305] BUG: Bad page state in process syz.1.66 pfn:2fdb5 [ 136.847065][ T6305] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802fdb5e58 pfn:0x2fdb5 [ 136.850074][ T6305] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 136.851988][ T6305] raw: 00fff00000000000 dead000000000040 ffff88804cdea000 0000000000000000 [ 136.855334][ T6305] raw: ffff88802fdb5e58 0000000000000001 00000000ffffffff 0000000000000000 [ 136.858151][ T6305] page dumped because: page_pool leak [ 136.860046][ T6305] page_owner tracks the page as allocated [ 136.862153][ T6305] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6305, tgid 6299 (syz.1.66), ts 127123637643, free_ts 126901700539 [ 136.866789][ T6305] post_alloc_hook+0x2d1/0x350 [ 136.868047][ T6305] get_page_from_freelist+0x101e/0x3070 [ 136.869618][ T6305] __alloc_pages_noprof+0x223/0x25a0 [ 136.871017][ T6305] alloc_pages_bulk_noprof+0x77c/0x1110 [ 136.872458][ T6305] __page_pool_alloc_pages_slow+0x18f/0x770 [ 136.874032][ T6305] page_pool_alloc_netmem+0xc4/0x160 [ 136.875669][ T6305] page_pool_alloc_pages+0x1a/0x60 [ 136.877234][ T6305] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 136.879311][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 136.880714][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 136.882307][ T6305] __sys_bpf+0xfc6/0x49a0 [ 136.883642][ T6305] __x64_sys_bpf+0x78/0xc0 [ 136.884924][ T6305] do_syscall_64+0xcd/0x250 [ 136.886226][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.887802][ T6305] page last free pid 6285 tgid 6284 stack trace: [ 136.889779][ T6305] free_unref_page+0x5f4/0xdc0 [ 136.891054][ T6305] __folio_put+0x30d/0x3d0 [ 136.892223][ T6305] put_page+0x21e/0x280 [ 136.893412][ T6305] page_pool_return_page+0x400/0x520 [ 136.894816][ T6305] page_pool_release+0xf4/0x7d0 [ 136.896203][ T6305] page_pool_destroy+0x10a/0x4c0 [ 136.897875][ T6305] bpf_test_run_xdp_live+0x3a1/0x500 [ 136.899373][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 136.900772][ T6305] __sys_bpf+0xfc6/0x49a0 [ 136.902198][ T6305] __x64_sys_bpf+0x78/0xc0 [ 136.903533][ T6305] do_syscall_64+0xcd/0x250 [ 136.904760][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.906341][ T6305] Modules linked in: [ 136.907366][ T6305] CPU: 3 UID: 0 PID: 6305 Comm: syz.1.66 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 136.910689][ T6305] Tainted: [B]=BAD_PAGE [ 136.911777][ T6305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 136.915115][ T6305] Call Trace: [ 136.916199][ T6305] [ 136.916965][ T6305] dump_stack_lvl+0x16c/0x1f0 [ 136.918535][ T6305] bad_page+0xb3/0x1f0 [ 136.919641][ T6305] ? __pfx_bad_page+0x10/0x10 [ 136.921190][ T6305] ? page_bad_reason+0x9d/0x1e0 [ 136.922493][ T6305] free_unref_page+0x657/0xdc0 [ 136.923756][ T6305] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 136.925324][ T6305] ? __phys_addr+0xc6/0x150 [ 136.926548][ T6305] skb_free_head+0xa0/0x1d0 [ 136.927749][ T6305] skb_release_data+0x560/0x730 [ 136.929056][ T6305] sk_skb_reason_drop+0x129/0x1a0 [ 136.930405][ T6305] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 136.932150][ T6305] ? kernel_text_address+0x8d/0x100 [ 136.933516][ T6305] ? hlock_class+0x4e/0x130 [ 136.934718][ T6305] ? __lock_acquire+0x163e/0x3ce0 [ 136.936032][ T6305] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 136.937863][ T6305] ? hlock_class+0x4e/0x130 [ 136.939084][ T6305] ? __lock_acquire+0xbdd/0x3ce0 [ 136.940383][ T6305] ? __pfx___lock_acquire+0x10/0x10 [ 136.941740][ T6305] __netif_receive_skb_list_core+0x357/0x950 [ 136.943540][ T6305] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 136.945512][ T6305] ? trace_lock_acquire+0x14a/0x1d0 [ 136.946914][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 136.948589][ T6305] ? lock_acquire+0x2f/0xb0 [ 136.949849][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 136.951495][ T6305] netif_receive_skb_list_internal+0x753/0xdb0 [ 136.953223][ T6305] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 136.955083][ T6305] ? __pfx_eth_type_trans+0x10/0x10 [ 136.956625][ T6305] ? __build_skb_around+0x278/0x3b0 [ 136.958391][ T6305] netif_receive_skb_list+0x4f/0x4a0 [ 136.960118][ T6305] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 136.962314][ T6305] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 136.964355][ T6305] ? bpf_test_timer_continue+0x150/0x3d0 [ 136.966132][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 136.967802][ T6305] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 136.969706][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 136.971573][ T6305] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 136.973416][ T6305] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 136.975311][ T6305] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 136.977181][ T6305] ? 0xffffffffa00045c0 [ 136.978967][ T6305] ? 0xffffffffa00045c0 [ 136.980361][ T6305] ? 0xffffffffa00045c0 [ 136.981669][ T6305] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 136.983510][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 136.985160][ T6305] ? lock_acquire+0x2f/0xb0 [ 136.986581][ T6305] ? __fget_files+0x40/0x3f0 [ 136.988113][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 136.989928][ T6305] ? fput+0x30/0x390 [ 136.991117][ T6305] ? __bpf_prog_get+0xa0/0x290 [ 136.992602][ T6305] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 136.994879][ T6305] __sys_bpf+0xfc6/0x49a0 [ 136.996539][ T6305] ? __pfx___sys_bpf+0x10/0x10 [ 136.997935][ T6305] ? __schedule+0xe5d/0x5730 [ 136.999295][ T6305] ? __fget_files+0x23a/0x3f0 [ 137.000692][ T6305] ? do_futex+0x123/0x350 [ 137.001921][ T6305] ? __pfx_do_futex+0x10/0x10 [ 137.003510][ T6305] ? xfd_validate_state+0x5d/0x180 [ 137.004943][ T6305] ? rcu_is_watching+0x12/0xc0 [ 137.006340][ T6305] __x64_sys_bpf+0x78/0xc0 [ 137.007672][ T6305] ? lockdep_hardirqs_on+0x7c/0x110 [ 137.009156][ T6305] do_syscall_64+0xcd/0x250 [ 137.010460][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.012136][ T6305] RIP: 0033:0x7fd45b57e719 [ 137.013452][ T6305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.019947][ T6305] RSP: 002b:00007fd45c319038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 137.022814][ T6305] RAX: ffffffffffffffda RBX: 00007fd45b736058 RCX: 00007fd45b57e719 [ 137.025569][ T6305] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 137.028219][ T6305] RBP: 00007fd45b5f132e R08: 0000000000000000 R09: 0000000000000000 [ 137.030946][ T6305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.033508][ T6305] R13: 0000000000000000 R14: 00007fd45b736058 R15: 00007ffd2e0c9fc8 [ 137.036103][ T6305] [ 137.037281][ T6305] BUG: Bad page state in process syz.1.66 pfn:2d818 [ 137.039387][ T6305] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802d818690 pfn:0x2d818 [ 137.042399][ T6305] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 137.044626][ T6305] raw: 00fff00000000000 dead000000000040 ffff88804cdea000 0000000000000000 [ 137.047044][ T6305] raw: ffff88802d818690 0000000000000001 00000000ffffffff 0000000000000000 [ 137.049486][ T6305] page dumped because: page_pool leak [ 137.050995][ T6305] page_owner tracks the page as allocated [ 137.052544][ T6305] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6305, tgid 6299 (syz.1.66), ts 127123633028, free_ts 126901710214 [ 137.057390][ T6305] post_alloc_hook+0x2d1/0x350 [ 137.058813][ T6305] get_page_from_freelist+0x101e/0x3070 [ 137.060346][ T6305] __alloc_pages_noprof+0x223/0x25a0 [ 137.061819][ T6305] alloc_pages_bulk_noprof+0x77c/0x1110 [ 137.063362][ T6305] __page_pool_alloc_pages_slow+0x18f/0x770 [ 137.065012][ T6305] page_pool_alloc_netmem+0xc4/0x160 [ 137.066635][ T6305] page_pool_alloc_pages+0x1a/0x60 [ 137.068111][ T6305] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 137.069862][ T6305] bpf_test_run_xdp_live+0x365/0x500 [ 137.071372][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 137.072868][ T6305] __sys_bpf+0xfc6/0x49a0 [ 137.074352][ T6305] __x64_sys_bpf+0x78/0xc0 [ 137.075690][ T6305] do_syscall_64+0xcd/0x250 [ 137.076942][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.078756][ T6305] page last free pid 6285 tgid 6284 stack trace: [ 137.080449][ T6305] free_unref_page+0x5f4/0xdc0 [ 137.081766][ T6305] __folio_put+0x30d/0x3d0 [ 137.082999][ T6305] put_page+0x21e/0x280 [ 137.084127][ T6305] page_pool_return_page+0x400/0x520 [ 137.085572][ T6305] page_pool_release+0xf4/0x7d0 [ 137.086922][ T6305] page_pool_destroy+0x10a/0x4c0 [ 137.088275][ T6305] bpf_test_run_xdp_live+0x3a1/0x500 [ 137.089874][ T6305] bpf_prog_test_run_xdp+0x827/0x1580 [ 137.091759][ T6305] __sys_bpf+0xfc6/0x49a0 [ 137.093080][ T6305] __x64_sys_bpf+0x78/0xc0 [ 137.094557][ T6305] do_syscall_64+0xcd/0x250 [ 137.095867][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.097476][ T6305] Modules linked in: [ 137.098564][ T6305] CPU: 3 UID: 0 PID: 6305 Comm: syz.1.66 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 137.101797][ T6305] Tainted: [B]=BAD_PAGE [ 137.103018][ T6305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 137.105972][ T6305] Call Trace: [ 137.106922][ T6305] [ 137.107753][ T6305] dump_stack_lvl+0x16c/0x1f0 [ 137.109058][ T6305] bad_page+0xb3/0x1f0 [ 137.110230][ T6305] ? __pfx_bad_page+0x10/0x10 [ 137.111526][ T6305] ? page_bad_reason+0x9d/0x1e0 [ 137.112976][ T6305] free_unref_page+0x657/0xdc0 [ 137.114321][ T6305] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 137.115981][ T6305] ? __phys_addr+0xc6/0x150 [ 137.117227][ T6305] skb_free_head+0xa0/0x1d0 [ 137.118526][ T6305] skb_release_data+0x560/0x730 [ 137.119902][ T6305] sk_skb_reason_drop+0x129/0x1a0 [ 137.121485][ T6305] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 137.123669][ T6305] ? kernel_text_address+0x8d/0x100 [ 137.125116][ T6305] ? hlock_class+0x4e/0x130 [ 137.126430][ T6305] ? __lock_acquire+0x163e/0x3ce0 [ 137.127834][ T6305] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 137.129720][ T6305] ? hlock_class+0x4e/0x130 [ 137.131064][ T6305] ? __lock_acquire+0xbdd/0x3ce0 [ 137.132432][ T6305] ? __pfx___lock_acquire+0x10/0x10 [ 137.134136][ T6305] __netif_receive_skb_list_core+0x357/0x950 [ 137.135833][ T6305] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 137.137601][ T6305] ? trace_lock_acquire+0x14a/0x1d0 [ 137.139068][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 137.140749][ T6305] ? lock_acquire+0x2f/0xb0 [ 137.142106][ T6305] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 137.143870][ T6305] netif_receive_skb_list_internal+0x753/0xdb0 VM DIAGNOSIS: 19:30:40 Registers: info registers vcpu 0 CPU#0 RAX=00000000000b4605 RBX=0000000000000000 RCX=ffffffff8b2305e9 RDX=0000000000000000 RSI=ffffffff8b6cd040 RDI=ffffffff8bd1ad40 RBP=fffffbfff1bd2af8 RSP=ffffffff8de07e20 R8 =0000000000000001 R9 =ffffed100d4c7025 R10=ffff88806a63812b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8de957c0 R14=ffffffff905f5088 R15=0000000000000000 RIP=ffffffff8b2319cf RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020000b00 CR3=0000000040168000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000003000007 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f49613f21cb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f49613f21d8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f49613f21d2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f49613f21e6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f49613f226c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f49613f234a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f496150c488 00007f496150c480 00007f496150c478 00007f496150c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f496206d100 00007f496150c440 00007f496150c458 00007f496150c4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f496150c498 00007f496150c490 00007f496150c488 00007f496150c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000d03 0000000000000000 0000000000000000 000000000032e68a ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff88806a946a20 RCX=ffffffff818160dc RDX=ffff88802c350000 RSI=ffffffff818160b6 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc900044276b0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffed100d528d45 R13=0000000000000001 R14=ffff88806a946a28 R15=ffff88806a740100 RIP=ffffffff818160b8 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fd821be56c0 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000000000000 CR3=000000002af52000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000003000007 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd820df21cb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd820df21d8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd820df21d2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd820df21e6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd820df226c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd820df234a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd820f0c488 00007fd820f0c480 00007fd820f0c478 00007fd820f0c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd821a6d100 00007fd820f0c440 00007fd820f0c458 00007fd820f0c4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd820f0c498 00007fd820f0c490 00007fd820f0c488 00007fd820f0c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000d01 0000000000000000 0000000000000000 000000000032e5ea ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff816b172d RDX=ffff88803052c880 RSI=ffffffff895fe411 RDI=ffffc90005416048 RBP=dffffc0000000000 RSP=ffffc900049476c8 R8 =0000000000000001 R9 =fffff52000928ecc R10=0000000000000003 R11=0000000000000000 R12=000000000000070f R13=1ffff92000928ee3 R14=0000000000000001 R15=ffffc90005416000 RIP=ffffffff8b257a90 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f1d4542e6c0 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f54a68e2440 CR3=0000000040106000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000084000 Opmask01=0000000000000001 Opmask02=00000000ffff3f01 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f7b348b329d5b235 38a38800fd90b75b ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a8a1c404972623dc 74cf987f22bae25c ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d4160cca2fbb0c73 971cfc93f0d1a373 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b8ee2ec2235aff68 f3399c30a609fcc0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000005e00 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1d000000a6000000 4e1ce2994e1d1ab5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ee000000c4000000 8a000000b6000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c00000004e1c304f 4e1bd98d00007a15 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e1d72304e1e8820 3a0000004e1ba8e3 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 deb04ac56315d2d0 f41bddb2e884ae07 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6986a1148c55f0e2 8b33c10767e3b6f4 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3261396131623234 65672d3530303030 2d72656c6c616b7a 79732d3563722d30 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 20726f20656c6966 2068637573206f4e ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0079726f74636572 696420726f20656c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000006e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff850b46e5 RDI=ffffffff9aae7bc0 RBP=ffffffff9aae7b80 RSP=ffffc900048e6990 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=000000000000006e R14=ffffffff850b4680 R15=0000000000000000 RIP=ffffffff850b470f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fd45c3196c0 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000c002470000 CR3=000000004a0b6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000004080 Opmask01=00000000300001ff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000056314704f600 000056314705aea0 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc9abe86c0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc9abe7c60 0000003000000010 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000ff00000000 00ff000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 616c732f32706f6f 6c2f6b636f6c622f 6c6175747269762f 736563697665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f646e756f732f00 682e6c6974752f64 65726168732f6372 732f2e2e2f2e2e00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 616c732f32706f6f 6c2f6b636f6c622f 6c6175747269762f 736563697665642f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 22cf2a4369370cb7 000056342410bc9b 00000000000000b1 00736576616c732f ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282a84b279befd2e 0000000500000001 0000000000000231 0000000039316c6c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a263b383a3a263a 383a3a26493b3a3a 26483b3a3a264b3b 3a0a00307f617930 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 264c383a3a264f38 3a3a264e383a3a26 49383a3a2648383a 3a2633383a3a2632 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020