[ 38.081610][ T39] audit: type=1400 audit(1730237350.513:80): avc: denied { write } for pid=5847 comm="sh" path="pipe:[6099]" dev="pipefs" ino=6099 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 38.089613][ T39] audit: type=1400 audit(1730237350.513:81): avc: denied { rlimitinh } for pid=5847 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.094364][ T39] audit: type=1400 audit(1730237350.513:82): avc: denied { siginh } for pid=5847 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 48.807670][ T39] audit: type=1400 audit(1730237361.253:83): avc: denied { read } for pid=5338 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 48.816715][ T39] audit: type=1400 audit(1730237361.253:84): avc: denied { append } for pid=5338 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 48.823326][ T39] audit: type=1400 audit(1730237361.253:85): avc: denied { open } for pid=5338 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 48.831045][ T39] audit: type=1400 audit(1730237361.253:86): avc: denied { getattr } for pid=5338 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:54294' (ED25519) to the list of known hosts. [ 50.515970][ T39] audit: type=1400 audit(1730237362.963:87): avc: denied { execute } for pid=5937 comm="sh" name="syz-executor1536116636" dev="sda1" ino=1926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 executing program executing program executing program [ 50.523930][ T39] audit: type=1400 audit(1730237362.963:88): avc: denied { execute_no_trans } for pid=5937 comm="sh" path="/syz-executor1536116636" dev="sda1" ino=1926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 executing program [ 50.531725][ T39] audit: type=1400 audit(1730237362.963:89): avc: denied { execmem } for pid=5937 comm="syz-executor153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 50.538785][ T39] audit: type=1400 audit(1730237362.973:90): avc: denied { write } for pid=5940 comm="syz-executor153" path="pipe:[8200]" dev="pipefs" ino=8200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 50.549238][ T39] audit: type=1400 audit(1730237362.973:91): avc: denied { create } for pid=5940 comm="syz-executor153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.556845][ T39] audit: type=1400 audit(1730237362.973:92): avc: denied { setopt } for pid=5940 comm="syz-executor153" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.558965][ T5947] BUG: Bad page state in process syz-executor153 pfn:346a0 [ 50.564926][ T5947] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880346a6000 pfn:0x346a0 [ 50.568824][ T5947] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 50.571031][ T5947] raw: 00fff00000000000 dead000000000040 ffff88802a725000 0000000000000000 [ 50.573247][ T5947] raw: ffff8880346a6000 0000000000000001 00000000ffffffff 0000000000000000 [ 50.575538][ T5947] page dumped because: page_pool leak [ 50.576964][ T5947] page_owner tracks the page as allocated [ 50.578494][ T5947] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5947, tgid 5942 (syz-executor153), ts 50555560392, free_ts 50198891047 [ 50.582935][ T5947] post_alloc_hook+0x2d1/0x350 [ 50.584170][ T5947] get_page_from_freelist+0x101e/0x3070 [ 50.585975][ T5947] __alloc_pages_noprof+0x223/0x25a0 [ 50.587338][ T5947] alloc_pages_bulk_noprof+0x77c/0x1110 [ 50.588831][ T5947] __page_pool_alloc_pages_slow+0x18f/0x770 [ 50.590425][ T5947] page_pool_alloc_netmem+0xc4/0x160 [ 50.591821][ T5947] page_pool_alloc_pages+0x1a/0x60 [ 50.593148][ T5947] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 50.594899][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 50.596270][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 50.597684][ T5947] __sys_bpf+0xfc6/0x49a0 [ 50.598807][ T5947] __x64_sys_bpf+0x78/0xc0 [ 50.599975][ T5947] do_syscall_64+0xcd/0x250 [ 50.601179][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.602997][ T5947] page last free pid 0 tgid 0 stack trace: [ 50.604680][ T5947] free_unref_page+0x5f4/0xdc0 [ 50.606162][ T5947] __folio_put+0x30d/0x3d0 [ 50.607517][ T5947] put_page+0x21e/0x280 [ 50.608609][ T5947] skb_release_data+0x4d7/0x730 [ 50.610290][ T5947] kfree_skb_list_reason+0x2c6/0x4c0 [ 50.611957][ T5947] skb_release_data+0x553/0x730 [ 50.613227][ T5947] napi_consume_skb+0x15a/0x220 [ 50.614600][ T5947] net_rx_action+0x47c/0x1010 [ 50.615841][ T5947] handle_softirqs+0x213/0x8f0 [ 50.617103][ T5947] irq_exit_rcu+0xbb/0x120 [ 50.618298][ T5947] common_interrupt+0xbf/0xe0 [ 50.619558][ T5947] asm_common_interrupt+0x26/0x40 [ 50.621016][ T5947] Modules linked in: [ 50.622157][ T5947] CPU: 3 UID: 0 PID: 5947 Comm: syz-executor153 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 50.625706][ T5947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 50.628787][ T5947] Call Trace: [ 50.629750][ T5947] [ 50.630646][ T5947] dump_stack_lvl+0x16c/0x1f0 [ 50.631929][ T5947] bad_page+0xb3/0x1f0 [ 50.633040][ T5947] ? __pfx_bad_page+0x10/0x10 [ 50.634311][ T5947] ? page_bad_reason+0x9d/0x1e0 [ 50.635605][ T5947] free_unref_page+0x657/0xdc0 [ 50.636895][ T5947] ? hlock_class+0x4e/0x130 [ 50.638145][ T5947] ? __phys_addr+0xc6/0x150 [ 50.639359][ T5947] skb_free_head+0xa0/0x1d0 [ 50.640582][ T5947] skb_release_data+0x560/0x730 [ 50.641864][ T5947] sk_skb_reason_drop+0x129/0x1a0 [ 50.643231][ T5947] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 50.645289][ T5947] ? kernel_text_address+0x8d/0x100 [ 50.646667][ T5947] ? hlock_class+0x4e/0x130 [ 50.647870][ T5947] ? __lock_acquire+0x163e/0x3ce0 [ 50.649224][ T5947] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 50.651479][ T5947] ? hlock_class+0x4e/0x130 [ 50.652712][ T5947] ? __lock_acquire+0xbdd/0x3ce0 [ 50.654003][ T5947] ? __pfx___lock_acquire+0x10/0x10 [ 50.655335][ T5947] __netif_receive_skb_list_core+0x357/0x950 [ 50.657061][ T5947] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 50.658900][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 50.660352][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 50.662043][ T5947] ? lock_acquire+0x2f/0xb0 [ 50.663246][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 50.664900][ T5947] netif_receive_skb_list_internal+0x753/0xdb0 [ 50.666527][ T5947] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 50.668278][ T5947] ? __pfx_eth_type_trans+0x10/0x10 [ 50.669671][ T5947] ? __build_skb_around+0x278/0x3b0 [ 50.671059][ T5947] netif_receive_skb_list+0x4f/0x4a0 [ 50.672446][ T5947] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 50.674083][ T5947] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 50.675740][ T5947] ? bpf_test_timer_continue+0x150/0x3d0 [ 50.677176][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 50.678569][ T5947] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 50.680109][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 50.681695][ T5947] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 50.683590][ T5947] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 50.685209][ T5947] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 50.686694][ T5947] ? 0xffffffffa00045c0 [ 50.687803][ T5947] ? 0xffffffffa00045c0 [ 50.688909][ T5947] ? 0xffffffffa00045c0 [ 50.690044][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 50.691623][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 50.693087][ T5947] ? lock_acquire+0x2f/0xb0 [ 50.694428][ T5947] ? __fget_files+0x40/0x3f0 [ 50.695674][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 50.697230][ T5947] ? fput+0x30/0x390 [ 50.698290][ T5947] ? __bpf_prog_get+0xa0/0x290 [ 50.699565][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 50.701183][ T5947] __sys_bpf+0xfc6/0x49a0 [ 50.702988][ T5947] ? find_held_lock+0x2d/0x110 [ 50.704474][ T5947] ? __pfx___sys_bpf+0x10/0x10 [ 50.705888][ T5947] ? __might_fault+0x13b/0x190 [ 50.707222][ T5947] ? __pfx_lock_release+0x10/0x10 [ 50.708539][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 50.709914][ T5947] ? lock_acquire+0x2f/0xb0 [ 50.711117][ T5947] ? __might_fault+0xe3/0x190 [ 50.712373][ T5947] ? xfd_validate_state+0x5d/0x180 [ 50.713680][ T5947] ? rcu_is_watching+0x12/0xc0 [ 50.714959][ T5947] __x64_sys_bpf+0x78/0xc0 [ 50.716139][ T5947] ? lockdep_hardirqs_on+0x7c/0x110 [ 50.717652][ T5947] do_syscall_64+0xcd/0x250 [ 50.718897][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.720494][ T5947] RIP: 0033:0x7ffb21d3be99 [ 50.721707][ T5947] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 50.727770][ T5947] RSP: 002b:00007ffb21cf6228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 50.730415][ T5947] RAX: ffffffffffffffda RBX: 00007ffb21dc6328 RCX: 00007ffb21d3be99 [ 50.732714][ T5947] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 50.734966][ T5947] RBP: 00007ffb21dc6320 R08: 00007ffb21cf66c0 R09: 00007ffb21cf66c0 [ 50.737023][ T5947] R10: 00007ffb21cf66c0 R11: 0000000000000246 R12: 00007ffb21d93074 [ 50.739094][ T5947] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe38c46e08 [ 50.741167][ T5947] [ 50.742123][ T5947] Disabling lock debugging due to kernel taint [ 50.743838][ T5947] BUG: Bad page state in process syz-executor153 pfn:238f7 [ 50.746035][ T5947] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x238f7 [ 50.748534][ T5947] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 50.750625][ T5947] raw: 00fff00000000000 dead000000000040 ffff88802a725000 0000000000000000 [ 50.752997][ T5947] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 50.755321][ T5947] page dumped because: page_pool leak [ 50.756738][ T5947] page_owner tracks the page as allocated [ 50.758319][ T5947] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5947, tgid 5942 (syz-executor153), ts 50555556158, free_ts 50198914286 [ 50.762708][ T5947] post_alloc_hook+0x2d1/0x350 [ 50.763955][ T5947] get_page_from_freelist+0x101e/0x3070 [ 50.765433][ T5947] __alloc_pages_noprof+0x223/0x25a0 [ 50.766898][ T5947] alloc_pages_bulk_noprof+0x77c/0x1110 [ 50.768438][ T5947] __page_pool_alloc_pages_slow+0x18f/0x770 [ 50.770088][ T5947] page_pool_alloc_netmem+0xc4/0x160 [ 50.771682][ T5947] page_pool_alloc_pages+0x1a/0x60 [ 50.773009][ T5947] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 50.774760][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 50.776150][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 50.777559][ T5947] __sys_bpf+0xfc6/0x49a0 [ 50.778707][ T5947] __x64_sys_bpf+0x78/0xc0 [ 50.779877][ T5947] do_syscall_64+0xcd/0x250 [ 50.781116][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.783188][ T5947] page last free pid 0 tgid 0 stack trace: [ 50.785025][ T5947] free_unref_page+0x5f4/0xdc0 [ 50.786438][ T5947] skb_free_head+0xa0/0x1d0 [ 50.787790][ T5947] skb_release_data+0x560/0x730 [ 50.789274][ T5947] kfree_skb_list_reason+0x2c6/0x4c0 [ 50.791297][ T5947] skb_release_data+0x553/0x730 [ 50.792767][ T5947] napi_consume_skb+0x15a/0x220 [ 50.794143][ T5947] net_rx_action+0x47c/0x1010 [ 50.795426][ T5947] handle_softirqs+0x213/0x8f0 [ 50.796888][ T5947] irq_exit_rcu+0xbb/0x120 [ 50.798298][ T5947] common_interrupt+0xbf/0xe0 [ 50.799579][ T5947] asm_common_interrupt+0x26/0x40 [ 50.800913][ T5947] Modules linked in: [ 50.802075][ T5947] CPU: 3 UID: 0 PID: 5947 Comm: syz-executor153 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 50.805661][ T5947] Tainted: [B]=BAD_PAGE [ 50.806837][ T5947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 50.810039][ T5947] Call Trace: [ 50.810980][ T5947] [ 50.811825][ T5947] dump_stack_lvl+0x16c/0x1f0 [ 50.813283][ T5947] bad_page+0xb3/0x1f0 [ 50.814416][ T5947] ? __pfx_bad_page+0x10/0x10 [ 50.815768][ T5947] ? page_bad_reason+0x9d/0x1e0 [ 50.817394][ T5947] free_unref_page+0x657/0xdc0 [ 50.818901][ T5947] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 50.820806][ T5947] ? __phys_addr+0xc6/0x150 [ 50.822355][ T5947] skb_free_head+0xa0/0x1d0 [ 50.823632][ T5947] skb_release_data+0x560/0x730 [ 50.824933][ T5947] sk_skb_reason_drop+0x129/0x1a0 [ 50.826282][ T5947] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 50.828051][ T5947] ? kernel_text_address+0x8d/0x100 [ 50.829421][ T5947] ? hlock_class+0x4e/0x130 [ 50.830607][ T5947] ? __lock_acquire+0x163e/0x3ce0 [ 50.832053][ T5947] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 50.834022][ T5947] ? hlock_class+0x4e/0x130 [ 50.835183][ T5947] ? __lock_acquire+0xbdd/0x3ce0 [ 50.836407][ T5947] ? __pfx___lock_acquire+0x10/0x10 [ 50.837751][ T5947] __netif_receive_skb_list_core+0x357/0x950 [ 50.839292][ T5947] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 50.840860][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 50.842252][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 50.844403][ T5947] ? lock_acquire+0x2f/0xb0 [ 50.845830][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 50.847594][ T5947] netif_receive_skb_list_internal+0x753/0xdb0 [ 50.849530][ T5947] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 50.851613][ T5947] ? __pfx_eth_type_trans+0x10/0x10 [ 50.853475][ T5947] ? __build_skb_around+0x278/0x3b0 [ 50.855167][ T5947] netif_receive_skb_list+0x4f/0x4a0 [ 50.856714][ T5947] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 50.858381][ T5947] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 50.860106][ T5947] ? bpf_test_timer_continue+0x150/0x3d0 [ 50.861591][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 50.863434][ T5947] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 50.865300][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 50.867041][ T5947] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 50.868859][ T5947] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 50.870435][ T5947] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 50.871873][ T5947] ? 0xffffffffa00045c0 [ 50.873039][ T5947] ? 0xffffffffa00045c0 [ 50.874228][ T5947] ? 0xffffffffa00045c0 [ 50.875398][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 50.877068][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 50.878603][ T5947] ? lock_acquire+0x2f/0xb0 [ 50.879954][ T5947] ? __fget_files+0x40/0x3f0 [ 50.881205][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 50.882896][ T5947] ? fput+0x30/0x390 [ 50.884114][ T5947] ? __bpf_prog_get+0xa0/0x290 [ 50.885616][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 50.887765][ T5947] __sys_bpf+0xfc6/0x49a0 [ 50.889571][ T5947] ? find_held_lock+0x2d/0x110 [ 50.891216][ T5947] ? __pfx___sys_bpf+0x10/0x10 [ 50.892485][ T5947] ? __might_fault+0x13b/0x190 [ 50.893777][ T5947] ? __pfx_lock_release+0x10/0x10 [ 50.895109][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 50.896432][ T5947] ? lock_acquire+0x2f/0xb0 [ 50.897726][ T5947] ? __might_fault+0xe3/0x190 [ 50.898947][ T5947] ? xfd_validate_state+0x5d/0x180 [ 50.900221][ T5947] ? rcu_is_watching+0x12/0xc0 [ 50.901439][ T5947] __x64_sys_bpf+0x78/0xc0 [ 50.902734][ T5947] ? lockdep_hardirqs_on+0x7c/0x110 [ 50.904443][ T5947] do_syscall_64+0xcd/0x250 [ 50.905774][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.907404][ T5947] RIP: 0033:0x7ffb21d3be99 [ 50.908602][ T5947] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 50.914758][ T5947] RSP: 002b:00007ffb21cf6228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 50.917216][ T5947] RAX: ffffffffffffffda RBX: 00007ffb21dc6328 RCX: 00007ffb21d3be99 [ 50.919278][ T5947] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 50.921356][ T5947] RBP: 00007ffb21dc6320 R08: 00007ffb21cf66c0 R09: 00007ffb21cf66c0 [ 50.923306][ T5947] R10: 00007ffb21cf66c0 R11: 0000000000000246 R12: 00007ffb21d93074 [ 50.925504][ T5947] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe38c46e08 [ 50.927796][ T5947] [ 50.928720][ T5947] BUG: Bad page state in process syz-executor153 pfn:238f6 [ 50.930642][ T5947] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x238f6 [ 50.932946][ T5947] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 50.934890][ T5947] raw: 00fff00000000000 dead000000000040 ffff88802a725000 0000000000000000 [ 50.937144][ T5947] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 50.939407][ T5947] page dumped because: page_pool leak [ 50.940887][ T5947] page_owner tracks the page as allocated [ 50.942701][ T5947] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5947, tgid 5942 (syz-executor153), ts 50555552042, free_ts 50198914286 [ 50.948478][ T5947] post_alloc_hook+0x2d1/0x350 [ 50.949871][ T5947] get_page_from_freelist+0x101e/0x3070 [ 50.951323][ T5947] __alloc_pages_noprof+0x223/0x25a0 [ 50.952839][ T5947] alloc_pages_bulk_noprof+0x77c/0x1110 [ 50.954450][ T5947] __page_pool_alloc_pages_slow+0x18f/0x770 [ 50.956013][ T5947] page_pool_alloc_netmem+0xc4/0x160 [ 50.957506][ T5947] page_pool_alloc_pages+0x1a/0x60 [ 50.958858][ T5947] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 50.960444][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 50.961780][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 50.963524][ T5947] __sys_bpf+0xfc6/0x49a0 [ 50.964943][ T5947] __x64_sys_bpf+0x78/0xc0 [ 50.966281][ T5947] do_syscall_64+0xcd/0x250 [ 50.967481][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.968957][ T5947] page last free pid 0 tgid 0 stack trace: [ 50.970547][ T5947] free_unref_page+0x5f4/0xdc0 [ 50.971797][ T5947] skb_free_head+0xa0/0x1d0 [ 50.973064][ T5947] skb_release_data+0x560/0x730 [ 50.974858][ T5947] kfree_skb_list_reason+0x2c6/0x4c0 [ 50.976448][ T5947] skb_release_data+0x553/0x730 [ 50.977863][ T5947] napi_consume_skb+0x15a/0x220 [ 50.979201][ T5947] net_rx_action+0x47c/0x1010 [ 50.980576][ T5947] handle_softirqs+0x213/0x8f0 [ 50.981804][ T5947] irq_exit_rcu+0xbb/0x120 [ 50.982927][ T5947] common_interrupt+0xbf/0xe0 [ 50.984154][ T5947] asm_common_interrupt+0x26/0x40 [ 50.985479][ T5947] Modules linked in: [ 50.986634][ T5947] CPU: 3 UID: 0 PID: 5947 Comm: syz-executor153 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 50.990583][ T5947] Tainted: [B]=BAD_PAGE [ 50.991876][ T5947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 50.994890][ T5947] Call Trace: [ 50.996062][ T5947] [ 50.997316][ T5947] dump_stack_lvl+0x16c/0x1f0 [ 50.999041][ T5947] bad_page+0xb3/0x1f0 [ 51.000542][ T5947] ? __pfx_bad_page+0x10/0x10 [ 51.002050][ T5947] ? page_bad_reason+0x9d/0x1e0 [ 51.003663][ T5947] free_unref_page+0x657/0xdc0 [ 51.005195][ T5947] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 51.006873][ T5947] ? __phys_addr+0xc6/0x150 [ 51.008081][ T5947] skb_free_head+0xa0/0x1d0 [ 51.009291][ T5947] skb_release_data+0x560/0x730 [ 51.010573][ T5947] sk_skb_reason_drop+0x129/0x1a0 [ 51.012057][ T5947] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 51.013764][ T5947] ? kernel_text_address+0x8d/0x100 [ 51.015028][ T5947] ? hlock_class+0x4e/0x130 [ 51.016207][ T5947] ? __lock_acquire+0x163e/0x3ce0 [ 51.017536][ T5947] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 51.019291][ T5947] ? hlock_class+0x4e/0x130 [ 51.020415][ T5947] ? __lock_acquire+0xbdd/0x3ce0 [ 51.021754][ T5947] ? __pfx___lock_acquire+0x10/0x10 [ 51.023134][ T5947] __netif_receive_skb_list_core+0x357/0x950 [ 51.024791][ T5947] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 51.026804][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 51.028188][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 51.029886][ T5947] ? lock_acquire+0x2f/0xb0 [ 51.031113][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 51.032873][ T5947] netif_receive_skb_list_internal+0x753/0xdb0 [ 51.034605][ T5947] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 51.036295][ T5947] ? __pfx_eth_type_trans+0x10/0x10 [ 51.037578][ T5947] ? __build_skb_around+0x278/0x3b0 [ 51.038861][ T5947] netif_receive_skb_list+0x4f/0x4a0 [ 51.040185][ T5947] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 51.041716][ T5947] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 51.043342][ T5947] ? bpf_test_timer_continue+0x150/0x3d0 [ 51.044851][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 51.046376][ T5947] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 51.047938][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 51.049504][ T5947] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 51.051506][ T5947] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 51.053242][ T5947] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 51.054700][ T5947] ? 0xffffffffa00045c0 [ 51.055834][ T5947] ? 0xffffffffa00045c0 [ 51.056913][ T5947] ? 0xffffffffa00045c0 [ 51.058105][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 51.059735][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 51.061726][ T5947] ? lock_acquire+0x2f/0xb0 [ 51.063141][ T5947] ? __fget_files+0x40/0x3f0 [ 51.064491][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 51.066120][ T5947] ? fput+0x30/0x390 [ 51.067221][ T5947] ? __bpf_prog_get+0xa0/0x290 [ 51.068400][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 51.069850][ T5947] __sys_bpf+0xfc6/0x49a0 [ 51.070920][ T5947] ? find_held_lock+0x2d/0x110 [ 51.072172][ T5947] ? __pfx___sys_bpf+0x10/0x10 [ 51.073354][ T5947] ? __might_fault+0x13b/0x190 [ 51.074554][ T5947] ? __pfx_lock_release+0x10/0x10 [ 51.075905][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 51.077219][ T5947] ? lock_acquire+0x2f/0xb0 [ 51.078387][ T5947] ? __might_fault+0xe3/0x190 [ 51.079555][ T5947] ? xfd_validate_state+0x5d/0x180 [ 51.080842][ T5947] ? rcu_is_watching+0x12/0xc0 [ 51.082037][ T5947] __x64_sys_bpf+0x78/0xc0 [ 51.083246][ T5947] ? lockdep_hardirqs_on+0x7c/0x110 [ 51.084580][ T5947] do_syscall_64+0xcd/0x250 [ 51.085765][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.087212][ T5947] RIP: 0033:0x7ffb21d3be99 [ 51.088656][ T5947] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 51.093757][ T5947] RSP: 002b:00007ffb21cf6228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 51.095992][ T5947] RAX: ffffffffffffffda RBX: 00007ffb21dc6328 RCX: 00007ffb21d3be99 [ 51.098112][ T5947] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 51.100150][ T5947] RBP: 00007ffb21dc6320 R08: 00007ffb21cf66c0 R09: 00007ffb21cf66c0 [ 51.102112][ T5947] R10: 00007ffb21cf66c0 R11: 0000000000000246 R12: 00007ffb21d93074 [ 51.104147][ T5947] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe38c46e08 [ 51.106406][ T5947] [ 51.107411][ T5947] BUG: Bad page state in process syz-executor153 pfn:238f5 [ 51.109891][ T5947] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x238f5 [ 51.112501][ T5947] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 51.114610][ T5947] raw: 00fff00000000000 dead000000000040 ffff88802a725000 0000000000000000 [ 51.116981][ T5947] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 51.119405][ T5947] page dumped because: page_pool leak [ 51.120988][ T5947] page_owner tracks the page as allocated [ 51.122549][ T5947] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5947, tgid 5942 (syz-executor153), ts 50555547812, free_ts 50198914286 [ 51.126979][ T5947] post_alloc_hook+0x2d1/0x350 [ 51.128710][ T5947] get_page_from_freelist+0x101e/0x3070 [ 51.130117][ T5947] __alloc_pages_noprof+0x223/0x25a0 [ 51.131472][ T5947] alloc_pages_bulk_noprof+0x77c/0x1110 [ 51.132827][ T5947] __page_pool_alloc_pages_slow+0x18f/0x770 [ 51.134491][ T5947] page_pool_alloc_netmem+0xc4/0x160 [ 51.135879][ T5947] page_pool_alloc_pages+0x1a/0x60 [ 51.137257][ T5947] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 51.138827][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 51.140178][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 51.141573][ T5947] __sys_bpf+0xfc6/0x49a0 [ 51.142733][ T5947] __x64_sys_bpf+0x78/0xc0 [ 51.143972][ T5947] do_syscall_64+0xcd/0x250 [ 51.145382][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.147109][ T5947] page last free pid 0 tgid 0 stack trace: [ 51.148767][ T5947] free_unref_page+0x5f4/0xdc0 [ 51.150072][ T5947] skb_free_head+0xa0/0x1d0 [ 51.151275][ T5947] skb_release_data+0x560/0x730 [ 51.152553][ T5947] kfree_skb_list_reason+0x2c6/0x4c0 [ 51.154130][ T5947] skb_release_data+0x553/0x730 [ 51.155493][ T5947] napi_consume_skb+0x15a/0x220 [ 51.156885][ T5947] net_rx_action+0x47c/0x1010 [ 51.158136][ T5947] handle_softirqs+0x213/0x8f0 [ 51.159351][ T5947] irq_exit_rcu+0xbb/0x120 [ 51.160500][ T5947] common_interrupt+0xbf/0xe0 [ 51.161750][ T5947] asm_common_interrupt+0x26/0x40 [ 51.163075][ T5947] Modules linked in: [ 51.164447][ T5947] CPU: 3 UID: 0 PID: 5947 Comm: syz-executor153 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 51.168301][ T5947] Tainted: [B]=BAD_PAGE [ 51.169581][ T5947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 51.172866][ T5947] Call Trace: [ 51.173970][ T5947] [ 51.174930][ T5947] dump_stack_lvl+0x16c/0x1f0 [ 51.176329][ T5947] bad_page+0xb3/0x1f0 [ 51.177498][ T5947] ? __pfx_bad_page+0x10/0x10 [ 51.178770][ T5947] ? page_bad_reason+0x9d/0x1e0 [ 51.180055][ T5947] free_unref_page+0x657/0xdc0 [ 51.181333][ T5947] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 51.183049][ T5947] ? __phys_addr+0xc6/0x150 [ 51.184337][ T5947] skb_free_head+0xa0/0x1d0 [ 51.185589][ T5947] skb_release_data+0x560/0x730 [ 51.187079][ T5947] sk_skb_reason_drop+0x129/0x1a0 [ 51.188414][ T5947] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 51.190271][ T5947] ? kernel_text_address+0x8d/0x100 [ 51.191713][ T5947] ? hlock_class+0x4e/0x130 [ 51.193107][ T5947] ? __lock_acquire+0x163e/0x3ce0 [ 51.194580][ T5947] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 51.196389][ T5947] ? hlock_class+0x4e/0x130 [ 51.197622][ T5947] ? __lock_acquire+0xbdd/0x3ce0 [ 51.198826][ T5947] ? __pfx___lock_acquire+0x10/0x10 [ 51.200131][ T5947] __netif_receive_skb_list_core+0x357/0x950 [ 51.201719][ T5947] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 51.203412][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 51.204842][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 51.206631][ T5947] ? lock_acquire+0x2f/0xb0 [ 51.207973][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 51.209633][ T5947] netif_receive_skb_list_internal+0x753/0xdb0 [ 51.211417][ T5947] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 51.213289][ T5947] ? __pfx_eth_type_trans+0x10/0x10 [ 51.214904][ T5947] ? __build_skb_around+0x278/0x3b0 [ 51.216389][ T5947] netif_receive_skb_list+0x4f/0x4a0 [ 51.217879][ T5947] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 51.219570][ T5947] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 51.221430][ T5947] ? bpf_test_timer_continue+0x150/0x3d0 [ 51.223156][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 51.225017][ T5947] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 51.226961][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 51.228855][ T5947] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 51.230391][ T5947] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 51.231883][ T5947] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 51.233275][ T5947] ? 0xffffffffa00045c0 [ 51.234398][ T5947] ? 0xffffffffa00045c0 [ 51.235518][ T5947] ? 0xffffffffa00045c0 [ 51.236602][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 51.238194][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 51.239597][ T5947] ? lock_acquire+0x2f/0xb0 [ 51.240786][ T5947] ? __fget_files+0x40/0x3f0 [ 51.242019][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 51.243771][ T5947] ? fput+0x30/0x390 [ 51.244913][ T5947] ? __bpf_prog_get+0xa0/0x290 [ 51.246407][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 51.248123][ T5947] __sys_bpf+0xfc6/0x49a0 [ 51.249470][ T5947] ? find_held_lock+0x2d/0x110 [ 51.250744][ T5947] ? __pfx___sys_bpf+0x10/0x10 [ 51.252008][ T5947] ? __might_fault+0x13b/0x190 [ 51.253321][ T5947] ? __pfx_lock_release+0x10/0x10 [ 51.254764][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 51.256186][ T5947] ? lock_acquire+0x2f/0xb0 [ 51.257405][ T5947] ? __might_fault+0xe3/0x190 [ 51.258636][ T5947] ? xfd_validate_state+0x5d/0x180 [ 51.259946][ T5947] ? rcu_is_watching+0x12/0xc0 [ 51.261228][ T5947] __x64_sys_bpf+0x78/0xc0 [ 51.262403][ T5947] ? lockdep_hardirqs_on+0x7c/0x110 [ 51.263765][ T5947] do_syscall_64+0xcd/0x250 [ 51.265128][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.266728][ T5947] RIP: 0033:0x7ffb21d3be99 [ 51.268038][ T5947] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 51.273431][ T5947] RSP: 002b:00007ffb21cf6228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 51.275661][ T5947] RAX: ffffffffffffffda RBX: 00007ffb21dc6328 RCX: 00007ffb21d3be99 [ 51.277880][ T5947] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 51.279971][ T5947] RBP: 00007ffb21dc6320 R08: 00007ffb21cf66c0 R09: 00007ffb21cf66c0 [ 51.282055][ T5947] R10: 00007ffb21cf66c0 R11: 0000000000000246 R12: 00007ffb21d93074 [ 51.284311][ T5947] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe38c46e08 [ 51.286693][ T5947] [ 51.287716][ T5947] BUG: Bad page state in process syz-executor153 pfn:238f4 [ 51.290831][ T5947] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x238f4 [ 51.293695][ T5947] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 51.295840][ T5947] raw: 00fff00000000000 dead000000000040 ffff88802a725000 0000000000000000 [ 51.298134][ T5947] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 51.300464][ T5947] page dumped because: page_pool leak [ 51.302048][ T5947] page_owner tracks the page as allocated [ 51.303916][ T5947] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5947, tgid 5942 (syz-executor153), ts 50555543478, free_ts 50198914286 [ 51.309251][ T5947] post_alloc_hook+0x2d1/0x350 [ 51.310738][ T5947] get_page_from_freelist+0x101e/0x3070 [ 51.312215][ T5947] __alloc_pages_noprof+0x223/0x25a0 [ 51.313721][ T5947] alloc_pages_bulk_noprof+0x77c/0x1110 [ 51.315288][ T5947] __page_pool_alloc_pages_slow+0x18f/0x770 [ 51.316975][ T5947] page_pool_alloc_netmem+0xc4/0x160 [ 51.318407][ T5947] page_pool_alloc_pages+0x1a/0x60 [ 51.319784][ T5947] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 51.321430][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 51.322839][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 51.324535][ T5947] __sys_bpf+0xfc6/0x49a0 [ 51.325771][ T5947] __x64_sys_bpf+0x78/0xc0 [ 51.326977][ T5947] do_syscall_64+0xcd/0x250 [ 51.328492][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.330414][ T5947] page last free pid 0 tgid 0 stack trace: [ 51.332258][ T5947] free_unref_page+0x5f4/0xdc0 [ 51.333785][ T5947] skb_free_head+0xa0/0x1d0 [ 51.335231][ T5947] skb_release_data+0x560/0x730 [ 51.336728][ T5947] kfree_skb_list_reason+0x2c6/0x4c0 [ 51.338084][ T5947] skb_release_data+0x553/0x730 [ 51.339382][ T5947] napi_consume_skb+0x15a/0x220 [ 51.340664][ T5947] net_rx_action+0x47c/0x1010 [ 51.341956][ T5947] handle_softirqs+0x213/0x8f0 [ 51.343379][ T5947] irq_exit_rcu+0xbb/0x120 [ 51.344650][ T5947] common_interrupt+0xbf/0xe0 [ 51.346345][ T5947] asm_common_interrupt+0x26/0x40 [ 51.347922][ T5947] Modules linked in: [ 51.349616][ T5947] CPU: 3 UID: 0 PID: 5947 Comm: syz-executor153 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 51.352870][ T5947] Tainted: [B]=BAD_PAGE [ 51.353992][ T5947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 51.356864][ T5947] Call Trace: [ 51.357913][ T5947] [ 51.358735][ T5947] dump_stack_lvl+0x16c/0x1f0 [ 51.360121][ T5947] bad_page+0xb3/0x1f0 [ 51.361423][ T5947] ? __pfx_bad_page+0x10/0x10 [ 51.362881][ T5947] ? page_bad_reason+0x9d/0x1e0 [ 51.364373][ T5947] free_unref_page+0x657/0xdc0 [ 51.365707][ T5947] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 51.367482][ T5947] ? __phys_addr+0xc6/0x150 [ 51.368876][ T5947] skb_free_head+0xa0/0x1d0 [ 51.370224][ T5947] skb_release_data+0x560/0x730 [ 51.371681][ T5947] sk_skb_reason_drop+0x129/0x1a0 [ 51.373216][ T5947] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 51.374965][ T5947] ? kernel_text_address+0x8d/0x100 [ 51.376311][ T5947] ? hlock_class+0x4e/0x130 [ 51.377639][ T5947] ? __lock_acquire+0x163e/0x3ce0 [ 51.378915][ T5947] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 51.380791][ T5947] ? hlock_class+0x4e/0x130 [ 51.382122][ T5947] ? __lock_acquire+0xbdd/0x3ce0 [ 51.383809][ T5947] ? __pfx___lock_acquire+0x10/0x10 [ 51.385466][ T5947] __netif_receive_skb_list_core+0x357/0x950 [ 51.387413][ T5947] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 51.389611][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 51.391649][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 51.393680][ T5947] ? lock_acquire+0x2f/0xb0 [ 51.395281][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 51.397183][ T5947] netif_receive_skb_list_internal+0x753/0xdb0 [ 51.398810][ T5947] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 51.400577][ T5947] ? __pfx_eth_type_trans+0x10/0x10 [ 51.402045][ T5947] ? __build_skb_around+0x278/0x3b0 [ 51.403746][ T5947] netif_receive_skb_list+0x4f/0x4a0 [ 51.405495][ T5947] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 51.407384][ T5947] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 51.409183][ T5947] ? bpf_test_timer_continue+0x150/0x3d0 [ 51.411590][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 51.413171][ T5947] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 51.414765][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 51.416324][ T5947] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 51.417912][ T5947] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 51.419366][ T5947] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 51.420693][ T5947] ? 0xffffffffa00045c0 [ 51.421769][ T5947] ? 0xffffffffa00045c0 [ 51.422797][ T5947] ? 0xffffffffa00045c0 [ 51.423872][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 51.425567][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 51.427137][ T5947] ? lock_acquire+0x2f/0xb0 [ 51.428372][ T5947] ? __fget_files+0x40/0x3f0 [ 51.429551][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 51.431134][ T5947] ? fput+0x30/0x390 [ 51.432302][ T5947] ? __bpf_prog_get+0xa0/0x290 [ 51.433591][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 51.435124][ T5947] __sys_bpf+0xfc6/0x49a0 [ 51.436259][ T5947] ? find_held_lock+0x2d/0x110 [ 51.437519][ T5947] ? __pfx___sys_bpf+0x10/0x10 [ 51.438774][ T5947] ? __might_fault+0x13b/0x190 [ 51.440060][ T5947] ? __pfx_lock_release+0x10/0x10 [ 51.441529][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 51.443218][ T5947] ? lock_acquire+0x2f/0xb0 [ 51.444625][ T5947] ? __might_fault+0xe3/0x190 [ 51.446104][ T5947] ? xfd_validate_state+0x5d/0x180 [ 51.447520][ T5947] ? rcu_is_watching+0x12/0xc0 [ 51.449197][ T5947] __x64_sys_bpf+0x78/0xc0 [ 51.450456][ T5947] ? lockdep_hardirqs_on+0x7c/0x110 [ 51.452011][ T5947] do_syscall_64+0xcd/0x250 [ 51.453415][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.455104][ T5947] RIP: 0033:0x7ffb21d3be99 [ 51.456329][ T5947] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 51.461772][ T5947] RSP: 002b:00007ffb21cf6228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 51.464065][ T5947] RAX: ffffffffffffffda RBX: 00007ffb21dc6328 RCX: 00007ffb21d3be99 [ 51.466743][ T5947] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 51.469011][ T5947] RBP: 00007ffb21dc6320 R08: 00007ffb21cf66c0 R09: 00007ffb21cf66c0 [ 51.471312][ T5947] R10: 00007ffb21cf66c0 R11: 0000000000000246 R12: 00007ffb21d93074 [ 51.473415][ T5947] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe38c46e08 [ 51.475664][ T5947] [ 51.476677][ T5947] BUG: Bad page state in process syz-executor153 pfn:238f3 [ 51.479605][ T5947] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x238f3 [ 51.482347][ T5947] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 51.484228][ T5947] raw: 00fff00000000000 dead000000000040 ffff88802a725000 0000000000000000 [ 51.486620][ T5947] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 51.488791][ T5947] page dumped because: page_pool leak [ 51.490217][ T5947] page_owner tracks the page as allocated [ 51.491886][ T5947] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5947, tgid 5942 (syz-executor153), ts 50555527388, free_ts 50198914286 [ 51.497282][ T5947] post_alloc_hook+0x2d1/0x350 [ 51.498850][ T5947] get_page_from_freelist+0x101e/0x3070 [ 51.500491][ T5947] __alloc_pages_noprof+0x223/0x25a0 [ 51.501910][ T5947] alloc_pages_bulk_noprof+0x77c/0x1110 [ 51.503462][ T5947] __page_pool_alloc_pages_slow+0x18f/0x770 [ 51.505083][ T5947] page_pool_alloc_netmem+0xc4/0x160 [ 51.506631][ T5947] page_pool_alloc_pages+0x1a/0x60 [ 51.507972][ T5947] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 51.509568][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 51.510925][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 51.512320][ T5947] __sys_bpf+0xfc6/0x49a0 [ 51.513488][ T5947] __x64_sys_bpf+0x78/0xc0 [ 51.514765][ T5947] do_syscall_64+0xcd/0x250 [ 51.515919][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.517800][ T5947] page last free pid 0 tgid 0 stack trace: [ 51.519460][ T5947] free_unref_page+0x5f4/0xdc0 [ 51.520722][ T5947] skb_free_head+0xa0/0x1d0 [ 51.521949][ T5947] skb_release_data+0x560/0x730 [ 51.523371][ T5947] kfree_skb_list_reason+0x2c6/0x4c0 [ 51.525257][ T5947] skb_release_data+0x553/0x730 [ 51.526698][ T5947] napi_consume_skb+0x15a/0x220 [ 51.528009][ T5947] net_rx_action+0x47c/0x1010 [ 51.529381][ T5947] handle_softirqs+0x213/0x8f0 [ 51.530794][ T5947] irq_exit_rcu+0xbb/0x120 [ 51.532071][ T5947] common_interrupt+0xbf/0xe0 [ 51.533677][ T5947] asm_common_interrupt+0x26/0x40 [ 51.535291][ T5947] Modules linked in: [ 51.536458][ T5947] CPU: 3 UID: 0 PID: 5947 Comm: syz-executor153 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 51.539885][ T5947] Tainted: [B]=BAD_PAGE [ 51.540969][ T5947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 51.544045][ T5947] Call Trace: [ 51.545217][ T5947] [ 51.546043][ T5947] dump_stack_lvl+0x16c/0x1f0 [ 51.547578][ T5947] bad_page+0xb3/0x1f0 [ 51.548894][ T5947] ? __pfx_bad_page+0x10/0x10 [ 51.550377][ T5947] ? page_bad_reason+0x9d/0x1e0 [ 51.552042][ T5947] free_unref_page+0x657/0xdc0 [ 51.553371][ T5947] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 51.554965][ T5947] ? __phys_addr+0xc6/0x150 [ 51.556265][ T5947] skb_free_head+0xa0/0x1d0 [ 51.557595][ T5947] skb_release_data+0x560/0x730 [ 51.559003][ T5947] sk_skb_reason_drop+0x129/0x1a0 [ 51.560446][ T5947] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 51.562515][ T5947] ? kernel_text_address+0x8d/0x100 [ 51.563988][ T5947] ? hlock_class+0x4e/0x130 [ 51.565648][ T5947] ? __lock_acquire+0x163e/0x3ce0 [ 51.567044][ T5947] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 51.568836][ T5947] ? hlock_class+0x4e/0x130 [ 51.570003][ T5947] ? __lock_acquire+0xbdd/0x3ce0 [ 51.571317][ T5947] ? __pfx___lock_acquire+0x10/0x10 [ 51.572664][ T5947] __netif_receive_skb_list_core+0x357/0x950 [ 51.574293][ T5947] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 51.575993][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 51.577378][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 51.579059][ T5947] ? lock_acquire+0x2f/0xb0 [ 51.580246][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 51.582244][ T5947] netif_receive_skb_list_internal+0x753/0xdb0 [ 51.584255][ T5947] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 51.586603][ T5947] ? __pfx_eth_type_trans+0x10/0x10 [ 51.588288][ T5947] ? __build_skb_around+0x278/0x3b0 [ 51.590042][ T5947] netif_receive_skb_list+0x4f/0x4a0 [ 51.591565][ T5947] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 51.593367][ T5947] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 51.595236][ T5947] ? bpf_test_timer_continue+0x150/0x3d0 [ 51.596735][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 51.598106][ T5947] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 51.599593][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 51.601197][ T5947] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 51.602823][ T5947] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 51.604500][ T5947] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 51.605845][ T5947] ? 0xffffffffa00045c0 [ 51.606926][ T5947] ? 0xffffffffa00045c0 [ 51.607925][ T5947] ? 0xffffffffa00045c0 [ 51.608962][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 51.610779][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 51.612476][ T5947] ? lock_acquire+0x2f/0xb0 [ 51.613922][ T5947] ? __fget_files+0x40/0x3f0 [ 51.615298][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 51.617074][ T5947] ? fput+0x30/0x390 [ 51.618273][ T5947] ? __bpf_prog_get+0xa0/0x290 [ 51.619597][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 51.621182][ T5947] __sys_bpf+0xfc6/0x49a0 [ 51.622326][ T5947] ? find_held_lock+0x2d/0x110 [ 51.623594][ T5947] ? __pfx___sys_bpf+0x10/0x10 [ 51.625240][ T5947] ? __might_fault+0x13b/0x190 [ 51.626717][ T5947] ? __pfx_lock_release+0x10/0x10 [ 51.628279][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 51.629941][ T5947] ? lock_acquire+0x2f/0xb0 [ 51.631416][ T5947] ? __might_fault+0xe3/0x190 [ 51.632781][ T5947] ? xfd_validate_state+0x5d/0x180 [ 51.634455][ T5947] ? rcu_is_watching+0x12/0xc0 [ 51.635883][ T5947] __x64_sys_bpf+0x78/0xc0 [ 51.637181][ T5947] ? lockdep_hardirqs_on+0x7c/0x110 [ 51.638648][ T5947] do_syscall_64+0xcd/0x250 [ 51.639869][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.641465][ T5947] RIP: 0033:0x7ffb21d3be99 [ 51.642891][ T5947] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 51.648452][ T5947] RSP: 002b:00007ffb21cf6228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 51.650856][ T5947] RAX: ffffffffffffffda RBX: 00007ffb21dc6328 RCX: 00007ffb21d3be99 [ 51.653418][ T5947] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 51.655594][ T5947] RBP: 00007ffb21dc6320 R08: 00007ffb21cf66c0 R09: 00007ffb21cf66c0 [ 51.657702][ T5947] R10: 00007ffb21cf66c0 R11: 0000000000000246 R12: 00007ffb21d93074 [ 51.659957][ T5947] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe38c46e08 [ 51.662007][ T5947] [ 51.663096][ T5947] BUG: Bad page state in process syz-executor153 pfn:238f2 [ 51.666284][ T5947] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x238f2 [ 51.669177][ T5947] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 51.671169][ T5947] raw: 00fff00000000000 dead000000000040 ffff88802a725000 0000000000000000 [ 51.673884][ T5947] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 51.676460][ T5947] page dumped because: page_pool leak [ 51.678023][ T5947] page_owner tracks the page as allocated [ 51.679399][ T5947] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5947, tgid 5942 (syz-executor153), ts 50555523073, free_ts 50198914286 [ 51.683836][ T5947] post_alloc_hook+0x2d1/0x350 [ 51.685199][ T5947] get_page_from_freelist+0x101e/0x3070 [ 51.686717][ T5947] __alloc_pages_noprof+0x223/0x25a0 [ 51.688294][ T5947] alloc_pages_bulk_noprof+0x77c/0x1110 [ 51.689759][ T5947] __page_pool_alloc_pages_slow+0x18f/0x770 [ 51.691647][ T5947] page_pool_alloc_netmem+0xc4/0x160 [ 51.693081][ T5947] page_pool_alloc_pages+0x1a/0x60 [ 51.694495][ T5947] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 51.696258][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 51.697714][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 51.699167][ T5947] __sys_bpf+0xfc6/0x49a0 [ 51.700344][ T5947] __x64_sys_bpf+0x78/0xc0 [ 51.701612][ T5947] do_syscall_64+0xcd/0x250 [ 51.703181][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.705182][ T5947] page last free pid 0 tgid 0 stack trace: [ 51.707052][ T5947] free_unref_page+0x5f4/0xdc0 [ 51.708340][ T5947] skb_free_head+0xa0/0x1d0 [ 51.709560][ T5947] skb_release_data+0x560/0x730 [ 51.711292][ T5947] kfree_skb_list_reason+0x2c6/0x4c0 [ 51.712756][ T5947] skb_release_data+0x553/0x730 [ 51.714122][ T5947] napi_consume_skb+0x15a/0x220 [ 51.715541][ T5947] net_rx_action+0x47c/0x1010 [ 51.716978][ T5947] handle_softirqs+0x213/0x8f0 [ 51.718287][ T5947] irq_exit_rcu+0xbb/0x120 [ 51.719596][ T5947] common_interrupt+0xbf/0xe0 [ 51.721024][ T5947] asm_common_interrupt+0x26/0x40 [ 51.722555][ T5947] Modules linked in: [ 51.723878][ T5947] CPU: 3 UID: 0 PID: 5947 Comm: syz-executor153 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 51.727131][ T5947] Tainted: [B]=BAD_PAGE [ 51.728206][ T5947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 51.730920][ T5947] Call Trace: [ 51.731766][ T5947] [ 51.732517][ T5947] dump_stack_lvl+0x16c/0x1f0 [ 51.733903][ T5947] bad_page+0xb3/0x1f0 [ 51.734992][ T5947] ? __pfx_bad_page+0x10/0x10 [ 51.736232][ T5947] ? page_bad_reason+0x9d/0x1e0 [ 51.737493][ T5947] free_unref_page+0x657/0xdc0 [ 51.738744][ T5947] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 51.740253][ T5947] ? __phys_addr+0xc6/0x150 [ 51.741411][ T5947] skb_free_head+0xa0/0x1d0 [ 51.742577][ T5947] skb_release_data+0x560/0x730 [ 51.744032][ T5947] sk_skb_reason_drop+0x129/0x1a0 [ 51.745631][ T5947] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 51.747634][ T5947] ? kernel_text_address+0x8d/0x100 [ 51.749168][ T5947] ? hlock_class+0x4e/0x130 [ 51.750360][ T5947] ? __lock_acquire+0x163e/0x3ce0 [ 51.751931][ T5947] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 51.753998][ T5947] ? hlock_class+0x4e/0x130 [ 51.755332][ T5947] ? __lock_acquire+0xbdd/0x3ce0 [ 51.756701][ T5947] ? __pfx___lock_acquire+0x10/0x10 [ 51.758232][ T5947] __netif_receive_skb_list_core+0x357/0x950 [ 51.759953][ T5947] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 51.761629][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 51.762925][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 51.764844][ T5947] ? lock_acquire+0x2f/0xb0 [ 51.766017][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 51.768083][ T5947] netif_receive_skb_list_internal+0x753/0xdb0 [ 51.770064][ T5947] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 51.772024][ T5947] ? __pfx_eth_type_trans+0x10/0x10 [ 51.773544][ T5947] ? __build_skb_around+0x278/0x3b0 [ 51.774936][ T5947] netif_receive_skb_list+0x4f/0x4a0 [ 51.776359][ T5947] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 51.778073][ T5947] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 51.779783][ T5947] ? bpf_test_timer_continue+0x150/0x3d0 [ 51.781399][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 51.782967][ T5947] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 51.784670][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 51.786469][ T5947] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 51.788529][ T5947] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 51.790423][ T5947] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 51.791827][ T5947] ? 0xffffffffa00045c0 [ 51.792923][ T5947] ? 0xffffffffa00045c0 [ 51.794041][ T5947] ? 0xffffffffa00045c0 [ 51.795200][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 51.796701][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 51.798152][ T5947] ? lock_acquire+0x2f/0xb0 [ 51.799346][ T5947] ? __fget_files+0x40/0x3f0 [ 51.800736][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 51.802508][ T5947] ? fput+0x30/0x390 [ 51.803825][ T5947] ? __bpf_prog_get+0xa0/0x290 [ 51.805275][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 51.806892][ T5947] __sys_bpf+0xfc6/0x49a0 [ 51.808329][ T5947] ? find_held_lock+0x2d/0x110 [ 51.809894][ T5947] ? __pfx___sys_bpf+0x10/0x10 [ 51.811553][ T5947] ? __might_fault+0x13b/0x190 [ 51.813205][ T5947] ? __pfx_lock_release+0x10/0x10 [ 51.814947][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 51.816687][ T5947] ? lock_acquire+0x2f/0xb0 [ 51.817948][ T5947] ? __might_fault+0xe3/0x190 [ 51.819201][ T5947] ? xfd_validate_state+0x5d/0x180 [ 51.820543][ T5947] ? rcu_is_watching+0x12/0xc0 [ 51.821954][ T5947] __x64_sys_bpf+0x78/0xc0 [ 51.823356][ T5947] ? lockdep_hardirqs_on+0x7c/0x110 [ 51.825032][ T5947] do_syscall_64+0xcd/0x250 [ 51.826593][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.828328][ T5947] RIP: 0033:0x7ffb21d3be99 [ 51.829580][ T5947] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 51.834777][ T5947] RSP: 002b:00007ffb21cf6228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 51.837116][ T5947] RAX: ffffffffffffffda RBX: 00007ffb21dc6328 RCX: 00007ffb21d3be99 [ 51.839314][ T5947] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 51.841425][ T5947] RBP: 00007ffb21dc6320 R08: 00007ffb21cf66c0 R09: 00007ffb21cf66c0 [ 51.843730][ T5947] R10: 00007ffb21cf66c0 R11: 0000000000000246 R12: 00007ffb21d93074 [ 51.845912][ T5947] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe38c46e08 [ 51.848117][ T5947] [ 51.849132][ T5947] BUG: Bad page state in process syz-executor153 pfn:238f1 [ 51.852013][ T5947] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x8 pfn:0x238f1 [ 51.854846][ T5947] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 51.856875][ T5947] raw: 00fff00000000000 dead000000000040 ffff88802a725000 0000000000000000 [ 51.859316][ T5947] raw: 0000000000000008 0000000000000001 00000000ffffffff 0000000000000000 [ 51.861535][ T5947] page dumped because: page_pool leak [ 51.862932][ T5947] page_owner tracks the page as allocated [ 51.864844][ T5947] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5947, tgid 5942 (syz-executor153), ts 50555518976, free_ts 50198914286 [ 51.869938][ T5947] post_alloc_hook+0x2d1/0x350 [ 51.871294][ T5947] get_page_from_freelist+0x101e/0x3070 [ 51.872784][ T5947] __alloc_pages_noprof+0x223/0x25a0 [ 51.874383][ T5947] alloc_pages_bulk_noprof+0x77c/0x1110 [ 51.875975][ T5947] __page_pool_alloc_pages_slow+0x18f/0x770 [ 51.877602][ T5947] page_pool_alloc_netmem+0xc4/0x160 [ 51.879026][ T5947] page_pool_alloc_pages+0x1a/0x60 [ 51.880331][ T5947] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 51.882118][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 51.883603][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 51.886045][ T5947] __sys_bpf+0xfc6/0x49a0 [ 51.887763][ T5947] __x64_sys_bpf+0x78/0xc0 [ 51.889058][ T5947] do_syscall_64+0xcd/0x250 [ 51.890178][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.891749][ T5947] page last free pid 0 tgid 0 stack trace: [ 51.893578][ T5947] free_unref_page+0x5f4/0xdc0 [ 51.895041][ T5947] skb_free_head+0xa0/0x1d0 [ 51.896280][ T5947] skb_release_data+0x560/0x730 [ 51.897522][ T5947] kfree_skb_list_reason+0x2c6/0x4c0 [ 51.898867][ T5947] skb_release_data+0x553/0x730 [ 51.900099][ T5947] napi_consume_skb+0x15a/0x220 [ 51.901341][ T5947] net_rx_action+0x47c/0x1010 [ 51.902695][ T5947] handle_softirqs+0x213/0x8f0 [ 51.904093][ T5947] irq_exit_rcu+0xbb/0x120 [ 51.905409][ T5947] common_interrupt+0xbf/0xe0 [ 51.906776][ T5947] asm_common_interrupt+0x26/0x40 [ 51.908222][ T5947] Modules linked in: [ 51.909384][ T5947] CPU: 3 UID: 0 PID: 5947 Comm: syz-executor153 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 51.913056][ T5947] Tainted: [B]=BAD_PAGE [ 51.914399][ T5947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 51.917220][ T5947] Call Trace: [ 51.918124][ T5947] [ 51.918898][ T5947] dump_stack_lvl+0x16c/0x1f0 [ 51.920106][ T5947] bad_page+0xb3/0x1f0 [ 51.921139][ T5947] ? __pfx_bad_page+0x10/0x10 [ 51.922322][ T5947] ? page_bad_reason+0x9d/0x1e0 [ 51.923558][ T5947] free_unref_page+0x657/0xdc0 [ 51.924860][ T5947] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 51.926715][ T5947] ? __phys_addr+0xc6/0x150 [ 51.928078][ T5947] skb_free_head+0xa0/0x1d0 [ 51.929410][ T5947] skb_release_data+0x560/0x730 [ 51.930808][ T5947] sk_skb_reason_drop+0x129/0x1a0 [ 51.932471][ T5947] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 51.934251][ T5947] ? kernel_text_address+0x8d/0x100 [ 51.935632][ T5947] ? hlock_class+0x4e/0x130 [ 51.936822][ T5947] ? __lock_acquire+0x163e/0x3ce0 [ 51.938223][ T5947] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 51.940104][ T5947] ? hlock_class+0x4e/0x130 [ 51.941308][ T5947] ? __lock_acquire+0xbdd/0x3ce0 [ 51.942547][ T5947] ? __pfx___lock_acquire+0x10/0x10 [ 51.943844][ T5947] __netif_receive_skb_list_core+0x357/0x950 [ 51.945418][ T5947] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 51.947110][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 51.948794][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 51.950538][ T5947] ? lock_acquire+0x2f/0xb0 [ 51.951813][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 51.953744][ T5947] netif_receive_skb_list_internal+0x753/0xdb0 [ 51.955650][ T5947] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 51.957706][ T5947] ? __pfx_eth_type_trans+0x10/0x10 [ 51.959272][ T5947] ? __build_skb_around+0x278/0x3b0 [ 51.960692][ T5947] netif_receive_skb_list+0x4f/0x4a0 [ 51.962104][ T5947] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 51.964013][ T5947] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 51.966560][ T5947] ? bpf_test_timer_continue+0x150/0x3d0 [ 51.968034][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 51.969537][ T5947] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 51.971298][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 51.972959][ T5947] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 51.974502][ T5947] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 51.976010][ T5947] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 51.977393][ T5947] ? 0xffffffffa00045c0 [ 51.978452][ T5947] ? 0xffffffffa00045c0 [ 51.979605][ T5947] ? 0xffffffffa00045c0 [ 51.980799][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 51.982789][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 51.984541][ T5947] ? lock_acquire+0x2f/0xb0 [ 51.985762][ T5947] ? __fget_files+0x40/0x3f0 [ 51.987061][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 51.988698][ T5947] ? fput+0x30/0x390 [ 51.989934][ T5947] ? __bpf_prog_get+0xa0/0x290 [ 51.991228][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 51.992698][ T5947] __sys_bpf+0xfc6/0x49a0 [ 51.993833][ T5947] ? find_held_lock+0x2d/0x110 [ 51.995271][ T5947] ? __pfx___sys_bpf+0x10/0x10 [ 51.996649][ T5947] ? __might_fault+0x13b/0x190 [ 51.998019][ T5947] ? __pfx_lock_release+0x10/0x10 [ 51.999433][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 52.000747][ T5947] ? lock_acquire+0x2f/0xb0 [ 52.001947][ T5947] ? __might_fault+0xe3/0x190 [ 52.003575][ T5947] ? xfd_validate_state+0x5d/0x180 [ 52.005101][ T5947] ? rcu_is_watching+0x12/0xc0 [ 52.006423][ T5947] __x64_sys_bpf+0x78/0xc0 [ 52.007660][ T5947] ? lockdep_hardirqs_on+0x7c/0x110 [ 52.009844][ T5947] do_syscall_64+0xcd/0x250 [ 52.011043][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.012598][ T5947] RIP: 0033:0x7ffb21d3be99 [ 52.013751][ T5947] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 52.019013][ T5947] RSP: 002b:00007ffb21cf6228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 52.021257][ T5947] RAX: ffffffffffffffda RBX: 00007ffb21dc6328 RCX: 00007ffb21d3be99 [ 52.023502][ T5947] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 52.025571][ T5947] RBP: 00007ffb21dc6320 R08: 00007ffb21cf66c0 R09: 00007ffb21cf66c0 [ 52.027886][ T5947] R10: 00007ffb21cf66c0 R11: 0000000000000246 R12: 00007ffb21d93074 [ 52.030282][ T5947] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe38c46e08 [ 52.032607][ T5947] [ 52.033583][ T5947] BUG: Bad page state in process syz-executor153 pfn:238f0 [ 52.036416][ T5947] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880238f6600 pfn:0x238f0 [ 52.039509][ T5947] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 52.041468][ T5947] raw: 00fff00000000000 dead000000000040 ffff88802a725000 0000000000000000 [ 52.043749][ T5947] raw: ffff8880238f6600 0000000000000001 00000000ffffffff 0000000000000000 [ 52.046262][ T5947] page dumped because: page_pool leak [ 52.047765][ T5947] page_owner tracks the page as allocated [ 52.049167][ T5947] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5947, tgid 5942 (syz-executor153), ts 50555514682, free_ts 50198914286 [ 52.053808][ T5947] post_alloc_hook+0x2d1/0x350 [ 52.055192][ T5947] get_page_from_freelist+0x101e/0x3070 [ 52.056723][ T5947] __alloc_pages_noprof+0x223/0x25a0 [ 52.058150][ T5947] alloc_pages_bulk_noprof+0x77c/0x1110 [ 52.059530][ T5947] __page_pool_alloc_pages_slow+0x18f/0x770 [ 52.061165][ T5947] page_pool_alloc_netmem+0xc4/0x160 [ 52.062665][ T5947] page_pool_alloc_pages+0x1a/0x60 [ 52.064414][ T5947] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 52.066629][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 52.068443][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 52.069916][ T5947] __sys_bpf+0xfc6/0x49a0 [ 52.071217][ T5947] __x64_sys_bpf+0x78/0xc0 [ 52.072696][ T5947] do_syscall_64+0xcd/0x250 [ 52.073986][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.075610][ T5947] page last free pid 0 tgid 0 stack trace: [ 52.077265][ T5947] free_unref_page+0x5f4/0xdc0 [ 52.078465][ T5947] skb_free_head+0xa0/0x1d0 [ 52.079658][ T5947] skb_release_data+0x560/0x730 [ 52.080949][ T5947] kfree_skb_list_reason+0x2c6/0x4c0 [ 52.082374][ T5947] skb_release_data+0x553/0x730 [ 52.083663][ T5947] napi_consume_skb+0x15a/0x220 [ 52.085251][ T5947] net_rx_action+0x47c/0x1010 [ 52.087114][ T5947] handle_softirqs+0x213/0x8f0 [ 52.088787][ T5947] irq_exit_rcu+0xbb/0x120 [ 52.090104][ T5947] common_interrupt+0xbf/0xe0 [ 52.091532][ T5947] asm_common_interrupt+0x26/0x40 [ 52.092970][ T5947] Modules linked in: [ 52.094219][ T5947] CPU: 3 UID: 0 PID: 5947 Comm: syz-executor153 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 52.097645][ T5947] Tainted: [B]=BAD_PAGE [ 52.098753][ T5947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 52.101637][ T5947] Call Trace: [ 52.102708][ T5947] [ 52.103736][ T5947] dump_stack_lvl+0x16c/0x1f0 [ 52.105260][ T5947] bad_page+0xb3/0x1f0 [ 52.106367][ T5947] ? __pfx_bad_page+0x10/0x10 [ 52.107624][ T5947] ? page_bad_reason+0x9d/0x1e0 [ 52.108978][ T5947] free_unref_page+0x657/0xdc0 [ 52.110430][ T5947] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 52.112646][ T5947] ? __phys_addr+0xc6/0x150 [ 52.114545][ T5947] skb_free_head+0xa0/0x1d0 [ 52.116270][ T5947] skb_release_data+0x560/0x730 [ 52.118064][ T5947] sk_skb_reason_drop+0x129/0x1a0 [ 52.119766][ T5947] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 52.122111][ T5947] ? kernel_text_address+0x8d/0x100 [ 52.123908][ T5947] ? hlock_class+0x4e/0x130 [ 52.125476][ T5947] ? __lock_acquire+0x163e/0x3ce0 [ 52.127078][ T5947] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 52.128992][ T5947] ? hlock_class+0x4e/0x130 [ 52.130288][ T5947] ? __lock_acquire+0xbdd/0x3ce0 [ 52.131864][ T5947] ? __pfx___lock_acquire+0x10/0x10 [ 52.133197][ T5947] __netif_receive_skb_list_core+0x357/0x950 [ 52.134759][ T5947] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 52.136336][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 52.137664][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 52.139356][ T5947] ? lock_acquire+0x2f/0xb0 [ 52.140507][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 52.142240][ T5947] netif_receive_skb_list_internal+0x753/0xdb0 [ 52.143840][ T5947] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 52.145717][ T5947] ? __pfx_eth_type_trans+0x10/0x10 [ 52.147306][ T5947] ? __build_skb_around+0x278/0x3b0 [ 52.148683][ T5947] netif_receive_skb_list+0x4f/0x4a0 [ 52.150094][ T5947] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 52.152044][ T5947] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 52.153931][ T5947] ? bpf_test_timer_continue+0x150/0x3d0 [ 52.155367][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 52.156654][ T5947] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 52.158164][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 52.159684][ T5947] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 52.161201][ T5947] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 52.162773][ T5947] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 52.164268][ T5947] ? 0xffffffffa00045c0 [ 52.165377][ T5947] ? 0xffffffffa00045c0 [ 52.166421][ T5947] ? 0xffffffffa00045c0 [ 52.167517][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 52.169088][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 52.170559][ T5947] ? lock_acquire+0x2f/0xb0 [ 52.171807][ T5947] ? __fget_files+0x40/0x3f0 [ 52.173125][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 52.174752][ T5947] ? fput+0x30/0x390 [ 52.175892][ T5947] ? __bpf_prog_get+0xa0/0x290 [ 52.177237][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 52.178773][ T5947] __sys_bpf+0xfc6/0x49a0 [ 52.180039][ T5947] ? find_held_lock+0x2d/0x110 [ 52.181344][ T5947] ? __pfx___sys_bpf+0x10/0x10 [ 52.182624][ T5947] ? __might_fault+0x13b/0x190 [ 52.183890][ T5947] ? __pfx_lock_release+0x10/0x10 [ 52.185233][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 52.186593][ T5947] ? lock_acquire+0x2f/0xb0 [ 52.187781][ T5947] ? __might_fault+0xe3/0x190 [ 52.189024][ T5947] ? xfd_validate_state+0x5d/0x180 [ 52.190361][ T5947] ? rcu_is_watching+0x12/0xc0 [ 52.191619][ T5947] __x64_sys_bpf+0x78/0xc0 [ 52.192820][ T5947] ? lockdep_hardirqs_on+0x7c/0x110 [ 52.194279][ T5947] do_syscall_64+0xcd/0x250 [ 52.195561][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.197699][ T5947] RIP: 0033:0x7ffb21d3be99 [ 52.199034][ T5947] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 52.204369][ T5947] RSP: 002b:00007ffb21cf6228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 52.206895][ T5947] RAX: ffffffffffffffda RBX: 00007ffb21dc6328 RCX: 00007ffb21d3be99 [ 52.209489][ T5947] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 52.211871][ T5947] RBP: 00007ffb21dc6320 R08: 00007ffb21cf66c0 R09: 00007ffb21cf66c0 [ 52.214390][ T5947] R10: 00007ffb21cf66c0 R11: 0000000000000246 R12: 00007ffb21d93074 [ 52.216500][ T5947] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe38c46e08 [ 52.218573][ T5947] [ 52.219509][ T5947] BUG: Bad page state in process syz-executor153 pfn:32107 [ 52.222458][ T5947] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x32107 [ 52.225288][ T5947] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 52.227129][ T5947] raw: 00fff00000000000 dead000000000040 ffff88802a725000 0000000000000000 [ 52.229461][ T5947] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 52.231988][ T5947] page dumped because: page_pool leak [ 52.233525][ T5947] page_owner tracks the page as allocated [ 52.235153][ T5947] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5947, tgid 5942 (syz-executor153), ts 50555510308, free_ts 50198924742 [ 52.239714][ T5947] post_alloc_hook+0x2d1/0x350 [ 52.241082][ T5947] get_page_from_freelist+0x101e/0x3070 [ 52.242733][ T5947] __alloc_pages_noprof+0x223/0x25a0 [ 52.244438][ T5947] alloc_pages_bulk_noprof+0x77c/0x1110 [ 52.246128][ T5947] __page_pool_alloc_pages_slow+0x18f/0x770 [ 52.247693][ T5947] page_pool_alloc_netmem+0xc4/0x160 [ 52.249749][ T5947] page_pool_alloc_pages+0x1a/0x60 [ 52.251221][ T5947] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 52.252923][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 52.254659][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 52.256184][ T5947] __sys_bpf+0xfc6/0x49a0 [ 52.257351][ T5947] __x64_sys_bpf+0x78/0xc0 [ 52.258514][ T5947] do_syscall_64+0xcd/0x250 [ 52.259708][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.261265][ T5947] page last free pid 0 tgid 0 stack trace: [ 52.262783][ T5947] free_unref_page+0x5f4/0xdc0 [ 52.264043][ T5947] skb_free_head+0xa0/0x1d0 [ 52.265346][ T5947] skb_release_data+0x560/0x730 [ 52.266740][ T5947] napi_consume_skb+0x15a/0x220 [ 52.268024][ T5947] net_rx_action+0x47c/0x1010 [ 52.269264][ T5947] handle_softirqs+0x213/0x8f0 [ 52.270480][ T5947] irq_exit_rcu+0xbb/0x120 [ 52.271649][ T5947] common_interrupt+0xbf/0xe0 [ 52.272879][ T5947] asm_common_interrupt+0x26/0x40 [ 52.274214][ T5947] Modules linked in: [ 52.275355][ T5947] CPU: 3 UID: 0 PID: 5947 Comm: syz-executor153 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 52.278779][ T5947] Tainted: [B]=BAD_PAGE [ 52.279863][ T5947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 52.282781][ T5947] Call Trace: [ 52.283675][ T5947] [ 52.284477][ T5947] dump_stack_lvl+0x16c/0x1f0 [ 52.285825][ T5947] bad_page+0xb3/0x1f0 [ 52.286887][ T5947] ? __pfx_bad_page+0x10/0x10 [ 52.288120][ T5947] ? page_bad_reason+0x9d/0x1e0 [ 52.289411][ T5947] free_unref_page+0x657/0xdc0 [ 52.290663][ T5947] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 52.292185][ T5947] ? __phys_addr+0xc6/0x150 [ 52.293353][ T5947] skb_free_head+0xa0/0x1d0 [ 52.294566][ T5947] skb_release_data+0x560/0x730 [ 52.295994][ T5947] sk_skb_reason_drop+0x129/0x1a0 [ 52.297321][ T5947] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 52.299111][ T5947] ? kernel_text_address+0x8d/0x100 [ 52.300521][ T5947] ? hlock_class+0x4e/0x130 [ 52.301757][ T5947] ? __lock_acquire+0x163e/0x3ce0 [ 52.303083][ T5947] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 52.305410][ T5947] ? hlock_class+0x4e/0x130 [ 52.306846][ T5947] ? __lock_acquire+0xbdd/0x3ce0 [ 52.308167][ T5947] ? __pfx___lock_acquire+0x10/0x10 [ 52.309557][ T5947] __netif_receive_skb_list_core+0x357/0x950 [ 52.311756][ T5947] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 52.313422][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 52.314795][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 52.316617][ T5947] ? lock_acquire+0x2f/0xb0 [ 52.317842][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 52.319558][ T5947] netif_receive_skb_list_internal+0x753/0xdb0 [ 52.321298][ T5947] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 52.323305][ T5947] ? __pfx_eth_type_trans+0x10/0x10 [ 52.324949][ T5947] ? __build_skb_around+0x278/0x3b0 [ 52.326448][ T5947] netif_receive_skb_list+0x4f/0x4a0 [ 52.327831][ T5947] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 52.329462][ T5947] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 52.331181][ T5947] ? bpf_test_timer_continue+0x150/0x3d0 [ 52.332648][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 52.334095][ T5947] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 52.335799][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 52.337352][ T5947] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 52.338904][ T5947] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 52.340443][ T5947] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 52.341855][ T5947] ? 0xffffffffa00045c0 [ 52.342947][ T5947] ? 0xffffffffa00045c0 [ 52.344047][ T5947] ? 0xffffffffa00045c0 [ 52.345397][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 52.347079][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 52.348559][ T5947] ? lock_acquire+0x2f/0xb0 [ 52.349825][ T5947] ? __fget_files+0x40/0x3f0 [ 52.351107][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 52.352878][ T5947] ? fput+0x30/0x390 [ 52.354015][ T5947] ? __bpf_prog_get+0xa0/0x290 [ 52.355372][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 52.356999][ T5947] __sys_bpf+0xfc6/0x49a0 [ 52.358144][ T5947] ? find_held_lock+0x2d/0x110 [ 52.359408][ T5947] ? __pfx___sys_bpf+0x10/0x10 [ 52.360660][ T5947] ? __might_fault+0x13b/0x190 [ 52.361960][ T5947] ? __pfx_lock_release+0x10/0x10 [ 52.363272][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 52.364935][ T5947] ? lock_acquire+0x2f/0xb0 [ 52.366231][ T5947] ? __might_fault+0xe3/0x190 [ 52.367743][ T5947] ? xfd_validate_state+0x5d/0x180 [ 52.369457][ T5947] ? rcu_is_watching+0x12/0xc0 [ 52.370983][ T5947] __x64_sys_bpf+0x78/0xc0 [ 52.372455][ T5947] ? lockdep_hardirqs_on+0x7c/0x110 [ 52.374036][ T5947] do_syscall_64+0xcd/0x250 [ 52.375454][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.377398][ T5947] RIP: 0033:0x7ffb21d3be99 [ 52.378524][ T5947] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 52.383507][ T5947] RSP: 002b:00007ffb21cf6228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 52.385731][ T5947] RAX: ffffffffffffffda RBX: 00007ffb21dc6328 RCX: 00007ffb21d3be99 [ 52.387852][ T5947] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 52.389873][ T5947] RBP: 00007ffb21dc6320 R08: 00007ffb21cf66c0 R09: 00007ffb21cf66c0 [ 52.391926][ T5947] R10: 00007ffb21cf66c0 R11: 0000000000000246 R12: 00007ffb21d93074 [ 52.393971][ T5947] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe38c46e08 [ 52.396011][ T5947] [ 52.396988][ T5947] BUG: Bad page state in process syz-executor153 pfn:32106 [ 52.399748][ T5947] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x32106 [ 52.402593][ T5947] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 52.404753][ T5947] raw: 00fff00000000000 dead000000000040 ffff88802a725000 0000000000000000 [ 52.407483][ T5947] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 52.409739][ T5947] page dumped because: page_pool leak [ 52.411117][ T5947] page_owner tracks the page as allocated [ 52.412514][ T5947] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5947, tgid 5942 (syz-executor153), ts 50555506145, free_ts 50198924742 [ 52.416898][ T5947] post_alloc_hook+0x2d1/0x350 [ 52.418251][ T5947] get_page_from_freelist+0x101e/0x3070 [ 52.419627][ T5947] __alloc_pages_noprof+0x223/0x25a0 [ 52.420942][ T5947] alloc_pages_bulk_noprof+0x77c/0x1110 [ 52.422386][ T5947] __page_pool_alloc_pages_slow+0x18f/0x770 [ 52.423914][ T5947] page_pool_alloc_netmem+0xc4/0x160 [ 52.425543][ T5947] page_pool_alloc_pages+0x1a/0x60 [ 52.427099][ T5947] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 52.428727][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 52.430466][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 52.432084][ T5947] __sys_bpf+0xfc6/0x49a0 [ 52.433290][ T5947] __x64_sys_bpf+0x78/0xc0 [ 52.434648][ T5947] do_syscall_64+0xcd/0x250 [ 52.435968][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.437538][ T5947] page last free pid 0 tgid 0 stack trace: [ 52.438995][ T5947] free_unref_page+0x5f4/0xdc0 [ 52.440232][ T5947] skb_free_head+0xa0/0x1d0 [ 52.441536][ T5947] skb_release_data+0x560/0x730 [ 52.442844][ T5947] napi_consume_skb+0x15a/0x220 [ 52.444199][ T5947] net_rx_action+0x47c/0x1010 [ 52.445621][ T5947] handle_softirqs+0x213/0x8f0 [ 52.447132][ T5947] irq_exit_rcu+0xbb/0x120 [ 52.448402][ T5947] common_interrupt+0xbf/0xe0 [ 52.449730][ T5947] asm_common_interrupt+0x26/0x40 [ 52.451142][ T5947] Modules linked in: [ 52.452229][ T5947] CPU: 3 UID: 0 PID: 5947 Comm: syz-executor153 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 52.455415][ T5947] Tainted: [B]=BAD_PAGE [ 52.456483][ T5947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 52.459397][ T5947] Call Trace: [ 52.460271][ T5947] [ 52.461069][ T5947] dump_stack_lvl+0x16c/0x1f0 [ 52.462295][ T5947] bad_page+0xb3/0x1f0 [ 52.463369][ T5947] ? __pfx_bad_page+0x10/0x10 [ 52.464617][ T5947] ? page_bad_reason+0x9d/0x1e0 [ 52.465933][ T5947] free_unref_page+0x657/0xdc0 [ 52.468016][ T5947] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 52.469934][ T5947] ? __phys_addr+0xc6/0x150 [ 52.471508][ T5947] skb_free_head+0xa0/0x1d0 [ 52.472801][ T5947] skb_release_data+0x560/0x730 [ 52.474259][ T5947] sk_skb_reason_drop+0x129/0x1a0 [ 52.475755][ T5947] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 52.477576][ T5947] ? kernel_text_address+0x8d/0x100 [ 52.478918][ T5947] ? hlock_class+0x4e/0x130 [ 52.480095][ T5947] ? __lock_acquire+0x163e/0x3ce0 [ 52.481390][ T5947] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 52.483207][ T5947] ? hlock_class+0x4e/0x130 [ 52.484374][ T5947] ? __lock_acquire+0xbdd/0x3ce0 [ 52.485674][ T5947] ? __pfx___lock_acquire+0x10/0x10 [ 52.487043][ T5947] __netif_receive_skb_list_core+0x357/0x950 [ 52.488639][ T5947] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 52.490414][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 52.491792][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 52.493458][ T5947] ? lock_acquire+0x2f/0xb0 [ 52.494653][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 52.496376][ T5947] netif_receive_skb_list_internal+0x753/0xdb0 [ 52.498163][ T5947] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 52.500079][ T5947] ? __pfx_eth_type_trans+0x10/0x10 [ 52.501621][ T5947] ? __build_skb_around+0x278/0x3b0 [ 52.503151][ T5947] netif_receive_skb_list+0x4f/0x4a0 [ 52.504704][ T5947] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 52.506348][ T5947] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 52.508089][ T5947] ? bpf_test_timer_continue+0x150/0x3d0 [ 52.509557][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 52.510935][ T5947] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 52.512465][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 52.513952][ T5947] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 52.515452][ T5947] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 52.517178][ T5947] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 52.518665][ T5947] ? 0xffffffffa00045c0 [ 52.519765][ T5947] ? 0xffffffffa00045c0 [ 52.520856][ T5947] ? 0xffffffffa00045c0 [ 52.521960][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 52.523714][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 52.525218][ T5947] ? lock_acquire+0x2f/0xb0 [ 52.526525][ T5947] ? __fget_files+0x40/0x3f0 [ 52.527752][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 52.529464][ T5947] ? fput+0x30/0x390 [ 52.530543][ T5947] ? __bpf_prog_get+0xa0/0x290 [ 52.531788][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 52.533399][ T5947] __sys_bpf+0xfc6/0x49a0 [ 52.534640][ T5947] ? find_held_lock+0x2d/0x110 [ 52.535923][ T5947] ? __pfx___sys_bpf+0x10/0x10 [ 52.537226][ T5947] ? __might_fault+0x13b/0x190 [ 52.538521][ T5947] ? __pfx_lock_release+0x10/0x10 [ 52.539835][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 52.541219][ T5947] ? lock_acquire+0x2f/0xb0 [ 52.542413][ T5947] ? __might_fault+0xe3/0x190 [ 52.543722][ T5947] ? xfd_validate_state+0x5d/0x180 [ 52.545103][ T5947] ? rcu_is_watching+0x12/0xc0 [ 52.546329][ T5947] __x64_sys_bpf+0x78/0xc0 [ 52.547426][ T5947] ? lockdep_hardirqs_on+0x7c/0x110 [ 52.548782][ T5947] do_syscall_64+0xcd/0x250 [ 52.549980][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.551457][ T5947] RIP: 0033:0x7ffb21d3be99 [ 52.552579][ T5947] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 52.557594][ T5947] RSP: 002b:00007ffb21cf6228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 52.559929][ T5947] RAX: ffffffffffffffda RBX: 00007ffb21dc6328 RCX: 00007ffb21d3be99 [ 52.562080][ T5947] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 52.564187][ T5947] RBP: 00007ffb21dc6320 R08: 00007ffb21cf66c0 R09: 00007ffb21cf66c0 [ 52.566373][ T5947] R10: 00007ffb21cf66c0 R11: 0000000000000246 R12: 00007ffb21d93074 [ 52.568517][ T5947] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe38c46e08 [ 52.570619][ T5947] [ 52.571545][ T5947] BUG: Bad page state in process syz-executor153 pfn:32105 [ 52.574203][ T5947] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x32105 [ 52.576877][ T5947] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 52.578776][ T5947] raw: 00fff00000000000 dead000000000040 ffff88802a725000 0000000000000000 [ 52.581009][ T5947] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 52.583174][ T5947] page dumped because: page_pool leak [ 52.584946][ T5947] page_owner tracks the page as allocated [ 52.586562][ T5947] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5947, tgid 5942 (syz-executor153), ts 50555501696, free_ts 50198924742 [ 52.591581][ T5947] post_alloc_hook+0x2d1/0x350 [ 52.592947][ T5947] get_page_from_freelist+0x101e/0x3070 [ 52.594539][ T5947] __alloc_pages_noprof+0x223/0x25a0 [ 52.596167][ T5947] alloc_pages_bulk_noprof+0x77c/0x1110 [ 52.597816][ T5947] __page_pool_alloc_pages_slow+0x18f/0x770 [ 52.599368][ T5947] page_pool_alloc_netmem+0xc4/0x160 [ 52.600744][ T5947] page_pool_alloc_pages+0x1a/0x60 [ 52.602194][ T5947] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 52.604079][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 52.605671][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 52.607300][ T5947] __sys_bpf+0xfc6/0x49a0 [ 52.608645][ T5947] __x64_sys_bpf+0x78/0xc0 [ 52.609871][ T5947] do_syscall_64+0xcd/0x250 [ 52.611345][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.612926][ T5947] page last free pid 0 tgid 0 stack trace: [ 52.614583][ T5947] free_unref_page+0x5f4/0xdc0 [ 52.615870][ T5947] skb_free_head+0xa0/0x1d0 [ 52.617077][ T5947] skb_release_data+0x560/0x730 [ 52.618493][ T5947] napi_consume_skb+0x15a/0x220 [ 52.619835][ T5947] net_rx_action+0x47c/0x1010 [ 52.621210][ T5947] handle_softirqs+0x213/0x8f0 [ 52.622582][ T5947] irq_exit_rcu+0xbb/0x120 [ 52.623970][ T5947] common_interrupt+0xbf/0xe0 [ 52.625381][ T5947] asm_common_interrupt+0x26/0x40 [ 52.626849][ T5947] Modules linked in: [ 52.627991][ T5947] CPU: 3 UID: 0 PID: 5947 Comm: syz-executor153 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 52.631680][ T5947] Tainted: [B]=BAD_PAGE [ 52.632790][ T5947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 52.635559][ T5947] Call Trace: [ 52.636443][ T5947] [ 52.637249][ T5947] dump_stack_lvl+0x16c/0x1f0 [ 52.638479][ T5947] bad_page+0xb3/0x1f0 [ 52.639572][ T5947] ? __pfx_bad_page+0x10/0x10 [ 52.641317][ T5947] ? page_bad_reason+0x9d/0x1e0 [ 52.642823][ T5947] free_unref_page+0x657/0xdc0 [ 52.644278][ T5947] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 52.646116][ T5947] ? __phys_addr+0xc6/0x150 [ 52.647492][ T5947] skb_free_head+0xa0/0x1d0 [ 52.648807][ T5947] skb_release_data+0x560/0x730 [ 52.650078][ T5947] sk_skb_reason_drop+0x129/0x1a0 [ 52.651405][ T5947] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 52.653169][ T5947] ? kernel_text_address+0x8d/0x100 [ 52.654565][ T5947] ? hlock_class+0x4e/0x130 [ 52.655765][ T5947] ? __lock_acquire+0x163e/0x3ce0 [ 52.657049][ T5947] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 52.658862][ T5947] ? hlock_class+0x4e/0x130 [ 52.660016][ T5947] ? __lock_acquire+0xbdd/0x3ce0 [ 52.661398][ T5947] ? __pfx___lock_acquire+0x10/0x10 [ 52.662829][ T5947] __netif_receive_skb_list_core+0x357/0x950 [ 52.664370][ T5947] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 52.666050][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 52.667565][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 52.669450][ T5947] ? lock_acquire+0x2f/0xb0 [ 52.670829][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 52.673100][ T5947] netif_receive_skb_list_internal+0x753/0xdb0 [ 52.675235][ T5947] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 52.677004][ T5947] ? __pfx_eth_type_trans+0x10/0x10 [ 52.678402][ T5947] ? __build_skb_around+0x278/0x3b0 [ 52.679760][ T5947] netif_receive_skb_list+0x4f/0x4a0 [ 52.681181][ T5947] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 52.682935][ T5947] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 52.684841][ T5947] ? bpf_test_timer_continue+0x150/0x3d0 [ 52.686458][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 52.688048][ T5947] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 52.689693][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 52.691327][ T5947] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 52.693073][ T5947] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 52.694657][ T5947] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 52.696053][ T5947] ? 0xffffffffa00045c0 [ 52.697386][ T5947] ? 0xffffffffa00045c0 [ 52.698689][ T5947] ? 0xffffffffa00045c0 [ 52.699993][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 52.701876][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 52.703425][ T5947] ? lock_acquire+0x2f/0xb0 [ 52.704732][ T5947] ? __fget_files+0x40/0x3f0 [ 52.706057][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 52.707585][ T5947] ? fput+0x30/0x390 [ 52.708624][ T5947] ? __bpf_prog_get+0xa0/0x290 [ 52.709896][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 52.711440][ T5947] __sys_bpf+0xfc6/0x49a0 [ 52.712616][ T5947] ? find_held_lock+0x2d/0x110 [ 52.713896][ T5947] ? __pfx___sys_bpf+0x10/0x10 [ 52.715186][ T5947] ? __might_fault+0x13b/0x190 [ 52.716446][ T5947] ? __pfx_lock_release+0x10/0x10 [ 52.717788][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 52.719193][ T5947] ? lock_acquire+0x2f/0xb0 [ 52.720471][ T5947] ? __might_fault+0xe3/0x190 [ 52.721828][ T5947] ? xfd_validate_state+0x5d/0x180 [ 52.723307][ T5947] ? rcu_is_watching+0x12/0xc0 [ 52.724768][ T5947] __x64_sys_bpf+0x78/0xc0 [ 52.726058][ T5947] ? lockdep_hardirqs_on+0x7c/0x110 [ 52.727476][ T5947] do_syscall_64+0xcd/0x250 [ 52.728699][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.730271][ T5947] RIP: 0033:0x7ffb21d3be99 [ 52.731431][ T5947] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 52.736416][ T5947] RSP: 002b:00007ffb21cf6228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 52.738600][ T5947] RAX: ffffffffffffffda RBX: 00007ffb21dc6328 RCX: 00007ffb21d3be99 [ 52.740719][ T5947] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 52.743066][ T5947] RBP: 00007ffb21dc6320 R08: 00007ffb21cf66c0 R09: 00007ffb21cf66c0 [ 52.745440][ T5947] R10: 00007ffb21cf66c0 R11: 0000000000000246 R12: 00007ffb21d93074 [ 52.747924][ T5947] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe38c46e08 [ 52.750214][ T5947] [ 52.751162][ T5947] BUG: Bad page state in process syz-executor153 pfn:32104 [ 52.753486][ T5947] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x32104 [ 52.756251][ T5947] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 52.758471][ T5947] raw: 00fff00000000000 dead000000000040 ffff88802a725000 0000000000000000 [ 52.761038][ T5947] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 52.764765][ T5947] page dumped because: page_pool leak [ 52.766405][ T5947] page_owner tracks the page as allocated [ 52.767823][ T5947] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5947, tgid 5942 (syz-executor153), ts 50555497545, free_ts 50198924742 [ 52.772773][ T5947] post_alloc_hook+0x2d1/0x350 [ 52.774372][ T5947] get_page_from_freelist+0x101e/0x3070 [ 52.775839][ T5947] __alloc_pages_noprof+0x223/0x25a0 [ 52.777261][ T5947] alloc_pages_bulk_noprof+0x77c/0x1110 [ 52.778718][ T5947] __page_pool_alloc_pages_slow+0x18f/0x770 [ 52.780328][ T5947] page_pool_alloc_netmem+0xc4/0x160 [ 52.781838][ T5947] page_pool_alloc_pages+0x1a/0x60 [ 52.783278][ T5947] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 52.785266][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 52.786926][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 52.788555][ T5947] __sys_bpf+0xfc6/0x49a0 [ 52.789791][ T5947] __x64_sys_bpf+0x78/0xc0 [ 52.790958][ T5947] do_syscall_64+0xcd/0x250 [ 52.792150][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.793718][ T5947] page last free pid 0 tgid 0 stack trace: [ 52.795318][ T5947] free_unref_page+0x5f4/0xdc0 [ 52.796578][ T5947] skb_free_head+0xa0/0x1d0 [ 52.797845][ T5947] skb_release_data+0x560/0x730 [ 52.799119][ T5947] napi_consume_skb+0x15a/0x220 [ 52.800323][ T5947] net_rx_action+0x47c/0x1010 [ 52.801573][ T5947] handle_softirqs+0x213/0x8f0 [ 52.802834][ T5947] irq_exit_rcu+0xbb/0x120 [ 52.803999][ T5947] common_interrupt+0xbf/0xe0 [ 52.805356][ T5947] asm_common_interrupt+0x26/0x40 [ 52.806684][ T5947] Modules linked in: [ 52.807675][ T5947] CPU: 3 UID: 0 PID: 5947 Comm: syz-executor153 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 52.810851][ T5947] Tainted: [B]=BAD_PAGE [ 52.811940][ T5947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 52.814785][ T5947] Call Trace: [ 52.815674][ T5947] [ 52.816469][ T5947] dump_stack_lvl+0x16c/0x1f0 [ 52.817776][ T5947] bad_page+0xb3/0x1f0 [ 52.818850][ T5947] ? __pfx_bad_page+0x10/0x10 [ 52.820054][ T5947] ? page_bad_reason+0x9d/0x1e0 [ 52.821375][ T5947] free_unref_page+0x657/0xdc0 [ 52.822653][ T5947] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 52.824433][ T5947] ? __phys_addr+0xc6/0x150 [ 52.825740][ T5947] skb_free_head+0xa0/0x1d0 [ 52.827041][ T5947] skb_release_data+0x560/0x730 [ 52.828432][ T5947] sk_skb_reason_drop+0x129/0x1a0 [ 52.829755][ T5947] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 52.831497][ T5947] ? kernel_text_address+0x8d/0x100 [ 52.832870][ T5947] ? hlock_class+0x4e/0x130 [ 52.834079][ T5947] ? __lock_acquire+0x163e/0x3ce0 [ 52.835424][ T5947] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 52.837274][ T5947] ? hlock_class+0x4e/0x130 [ 52.838460][ T5947] ? __lock_acquire+0xbdd/0x3ce0 [ 52.839817][ T5947] ? __pfx___lock_acquire+0x10/0x10 [ 52.841397][ T5947] __netif_receive_skb_list_core+0x357/0x950 [ 52.843168][ T5947] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 52.845072][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 52.846478][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 52.848108][ T5947] ? lock_acquire+0x2f/0xb0 [ 52.849279][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 52.850951][ T5947] netif_receive_skb_list_internal+0x753/0xdb0 [ 52.852626][ T5947] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 52.854329][ T5947] ? __pfx_eth_type_trans+0x10/0x10 [ 52.855727][ T5947] ? __build_skb_around+0x278/0x3b0 [ 52.857089][ T5947] netif_receive_skb_list+0x4f/0x4a0 [ 52.858490][ T5947] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 52.860130][ T5947] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 52.861844][ T5947] ? bpf_test_timer_continue+0x150/0x3d0 [ 52.863314][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 52.864651][ T5947] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 52.866176][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 52.867813][ T5947] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 52.869433][ T5947] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 52.871072][ T5947] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 52.872581][ T5947] ? 0xffffffffa00045c0 [ 52.873878][ T5947] ? 0xffffffffa00045c0 [ 52.875314][ T5947] ? 0xffffffffa00045c0 [ 52.876870][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 52.878973][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 52.880766][ T5947] ? lock_acquire+0x2f/0xb0 [ 52.882206][ T5947] ? __fget_files+0x40/0x3f0 [ 52.883851][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 52.885956][ T5947] ? fput+0x30/0x390 [ 52.887111][ T5947] ? __bpf_prog_get+0xa0/0x290 [ 52.888702][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 52.890854][ T5947] __sys_bpf+0xfc6/0x49a0 [ 52.892363][ T5947] ? find_held_lock+0x2d/0x110 [ 52.893880][ T5947] ? __pfx___sys_bpf+0x10/0x10 [ 52.895373][ T5947] ? __might_fault+0x13b/0x190 [ 52.896884][ T5947] ? __pfx_lock_release+0x10/0x10 [ 52.898515][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 52.900161][ T5947] ? lock_acquire+0x2f/0xb0 [ 52.901608][ T5947] ? __might_fault+0xe3/0x190 [ 52.903376][ T5947] ? xfd_validate_state+0x5d/0x180 [ 52.905207][ T5947] ? rcu_is_watching+0x12/0xc0 [ 52.906724][ T5947] __x64_sys_bpf+0x78/0xc0 [ 52.908299][ T5947] ? lockdep_hardirqs_on+0x7c/0x110 [ 52.910161][ T5947] do_syscall_64+0xcd/0x250 [ 52.911735][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.913624][ T5947] RIP: 0033:0x7ffb21d3be99 [ 52.915049][ T5947] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 52.921151][ T5947] RSP: 002b:00007ffb21cf6228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 52.923875][ T5947] RAX: ffffffffffffffda RBX: 00007ffb21dc6328 RCX: 00007ffb21d3be99 [ 52.926547][ T5947] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 52.929233][ T5947] RBP: 00007ffb21dc6320 R08: 00007ffb21cf66c0 R09: 00007ffb21cf66c0 [ 52.931797][ T5947] R10: 00007ffb21cf66c0 R11: 0000000000000246 R12: 00007ffb21d93074 [ 52.934485][ T5947] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe38c46e08 [ 52.936948][ T5947] [ 52.937919][ T5947] BUG: Bad page state in process syz-executor153 pfn:32103 [ 52.939885][ T5947] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x32103 [ 52.942206][ T5947] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 52.944055][ T5947] raw: 00fff00000000000 dead000000000040 ffff88802a725000 0000000000000000 [ 52.946366][ T5947] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 52.948597][ T5947] page dumped because: page_pool leak [ 52.950009][ T5947] page_owner tracks the page as allocated [ 52.951507][ T5947] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5947, tgid 5942 (syz-executor153), ts 50555493217, free_ts 50198924742 [ 52.956538][ T5947] post_alloc_hook+0x2d1/0x350 [ 52.957950][ T5947] get_page_from_freelist+0x101e/0x3070 [ 52.959539][ T5947] __alloc_pages_noprof+0x223/0x25a0 [ 52.960959][ T5947] alloc_pages_bulk_noprof+0x77c/0x1110 [ 52.962407][ T5947] __page_pool_alloc_pages_slow+0x18f/0x770 [ 52.963941][ T5947] page_pool_alloc_netmem+0xc4/0x160 [ 52.965383][ T5947] page_pool_alloc_pages+0x1a/0x60 [ 52.966756][ T5947] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 52.968370][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 52.969761][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 52.971180][ T5947] __sys_bpf+0xfc6/0x49a0 [ 52.972347][ T5947] __x64_sys_bpf+0x78/0xc0 [ 52.973621][ T5947] do_syscall_64+0xcd/0x250 [ 52.974901][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.976629][ T5947] page last free pid 0 tgid 0 stack trace: [ 52.978359][ T5947] free_unref_page+0x5f4/0xdc0 [ 52.979907][ T5947] skb_free_head+0xa0/0x1d0 [ 52.981411][ T5947] skb_release_data+0x560/0x730 [ 52.982955][ T5947] napi_consume_skb+0x15a/0x220 [ 52.984696][ T5947] net_rx_action+0x47c/0x1010 [ 52.985962][ T5947] handle_softirqs+0x213/0x8f0 [ 52.987232][ T5947] irq_exit_rcu+0xbb/0x120 [ 52.988414][ T5947] common_interrupt+0xbf/0xe0 [ 52.989660][ T5947] asm_common_interrupt+0x26/0x40 [ 52.990977][ T5947] Modules linked in: [ 52.992020][ T5947] CPU: 3 UID: 0 PID: 5947 Comm: syz-executor153 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 52.995306][ T5947] Tainted: [B]=BAD_PAGE [ 52.996407][ T5947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 52.999286][ T5947] Call Trace: [ 53.000163][ T5947] [ 53.000947][ T5947] dump_stack_lvl+0x16c/0x1f0 [ 53.002199][ T5947] bad_page+0xb3/0x1f0 [ 53.003249][ T5947] ? __pfx_bad_page+0x10/0x10 [ 53.004419][ T5947] ? page_bad_reason+0x9d/0x1e0 [ 53.005643][ T5947] free_unref_page+0x657/0xdc0 [ 53.007013][ T5947] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 53.008755][ T5947] ? __phys_addr+0xc6/0x150 [ 53.010100][ T5947] skb_free_head+0xa0/0x1d0 [ 53.011419][ T5947] skb_release_data+0x560/0x730 [ 53.012773][ T5947] sk_skb_reason_drop+0x129/0x1a0 [ 53.014175][ T5947] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 53.015895][ T5947] ? kernel_text_address+0x8d/0x100 [ 53.017256][ T5947] ? hlock_class+0x4e/0x130 [ 53.018451][ T5947] ? __lock_acquire+0x163e/0x3ce0 [ 53.019799][ T5947] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 53.021636][ T5947] ? hlock_class+0x4e/0x130 [ 53.022821][ T5947] ? __lock_acquire+0xbdd/0x3ce0 [ 53.024062][ T5947] ? __pfx___lock_acquire+0x10/0x10 [ 53.025420][ T5947] __netif_receive_skb_list_core+0x357/0x950 [ 53.026987][ T5947] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 53.028717][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 53.030169][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 53.031930][ T5947] ? lock_acquire+0x2f/0xb0 [ 53.033202][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 53.035157][ T5947] netif_receive_skb_list_internal+0x753/0xdb0 [ 53.037070][ T5947] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 53.039015][ T5947] ? __pfx_eth_type_trans+0x10/0x10 [ 53.040466][ T5947] ? __build_skb_around+0x278/0x3b0 [ 53.041903][ T5947] netif_receive_skb_list+0x4f/0x4a0 [ 53.043323][ T5947] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 53.045229][ T5947] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 53.047507][ T5947] ? bpf_test_timer_continue+0x150/0x3d0 [ 53.048946][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 53.050338][ T5947] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 53.052045][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 53.053551][ T5947] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 53.055073][ T5947] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 53.056644][ T5947] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 53.058129][ T5947] ? 0xffffffffa00045c0 [ 53.059256][ T5947] ? 0xffffffffa00045c0 [ 53.060497][ T5947] ? 0xffffffffa00045c0 [ 53.061921][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 53.064050][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 53.065866][ T5947] ? lock_acquire+0x2f/0xb0 [ 53.067382][ T5947] ? __fget_files+0x40/0x3f0 [ 53.068851][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 53.070776][ T5947] ? fput+0x30/0x390 [ 53.071924][ T5947] ? __bpf_prog_get+0xa0/0x290 [ 53.073218][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 53.074697][ T5947] __sys_bpf+0xfc6/0x49a0 [ 53.075967][ T5947] ? find_held_lock+0x2d/0x110 [ 53.077297][ T5947] ? __pfx___sys_bpf+0x10/0x10 [ 53.078550][ T5947] ? __might_fault+0x13b/0x190 [ 53.079835][ T5947] ? __pfx_lock_release+0x10/0x10 [ 53.081153][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 53.082532][ T5947] ? lock_acquire+0x2f/0xb0 [ 53.083791][ T5947] ? __might_fault+0xe3/0x190 [ 53.085392][ T5947] ? xfd_validate_state+0x5d/0x180 [ 53.086711][ T5947] ? rcu_is_watching+0x12/0xc0 [ 53.087985][ T5947] __x64_sys_bpf+0x78/0xc0 [ 53.089186][ T5947] ? lockdep_hardirqs_on+0x7c/0x110 [ 53.090578][ T5947] do_syscall_64+0xcd/0x250 [ 53.091830][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.093378][ T5947] RIP: 0033:0x7ffb21d3be99 [ 53.094544][ T5947] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 53.099708][ T5947] RSP: 002b:00007ffb21cf6228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 53.102015][ T5947] RAX: ffffffffffffffda RBX: 00007ffb21dc6328 RCX: 00007ffb21d3be99 [ 53.104276][ T5947] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 53.106780][ T5947] RBP: 00007ffb21dc6320 R08: 00007ffb21cf66c0 R09: 00007ffb21cf66c0 [ 53.108854][ T5947] R10: 00007ffb21cf66c0 R11: 0000000000000246 R12: 00007ffb21d93074 [ 53.111011][ T5947] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe38c46e08 [ 53.113230][ T5947] [ 53.114143][ T5947] BUG: Bad page state in process syz-executor153 pfn:32102 [ 53.116106][ T5947] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x32102 [ 53.118443][ T5947] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 53.120468][ T5947] raw: 00fff00000000000 dead000000000040 ffff88802a725000 0000000000000000 [ 53.123085][ T5947] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 53.125805][ T5947] page dumped because: page_pool leak [ 53.127439][ T5947] page_owner tracks the page as allocated [ 53.129056][ T5947] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5947, tgid 5942 (syz-executor153), ts 50555486122, free_ts 50198924742 [ 53.133543][ T5947] post_alloc_hook+0x2d1/0x350 [ 53.134875][ T5947] get_page_from_freelist+0x101e/0x3070 [ 53.136353][ T5947] __alloc_pages_noprof+0x223/0x25a0 [ 53.137778][ T5947] alloc_pages_bulk_noprof+0x77c/0x1110 [ 53.139245][ T5947] __page_pool_alloc_pages_slow+0x18f/0x770 [ 53.140805][ T5947] page_pool_alloc_netmem+0xc4/0x160 [ 53.142169][ T5947] page_pool_alloc_pages+0x1a/0x60 [ 53.143488][ T5947] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 53.145148][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 53.146593][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 53.148010][ T5947] __sys_bpf+0xfc6/0x49a0 [ 53.149329][ T5947] __x64_sys_bpf+0x78/0xc0 [ 53.150625][ T5947] do_syscall_64+0xcd/0x250 [ 53.151922][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.153976][ T5947] page last free pid 0 tgid 0 stack trace: [ 53.155911][ T5947] free_unref_page+0x5f4/0xdc0 [ 53.157681][ T5947] skb_free_head+0xa0/0x1d0 [ 53.159150][ T5947] skb_release_data+0x560/0x730 [ 53.160452][ T5947] napi_consume_skb+0x15a/0x220 [ 53.161889][ T5947] net_rx_action+0x47c/0x1010 [ 53.163290][ T5947] handle_softirqs+0x213/0x8f0 [ 53.164756][ T5947] irq_exit_rcu+0xbb/0x120 [ 53.166068][ T5947] common_interrupt+0xbf/0xe0 [ 53.167509][ T5947] asm_common_interrupt+0x26/0x40 [ 53.169403][ T5947] Modules linked in: [ 53.170842][ T5947] CPU: 3 UID: 0 PID: 5947 Comm: syz-executor153 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 53.174809][ T5947] Tainted: [B]=BAD_PAGE [ 53.176006][ T5947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 53.178710][ T5947] Call Trace: [ 53.179549][ T5947] [ 53.180276][ T5947] dump_stack_lvl+0x16c/0x1f0 [ 53.181465][ T5947] bad_page+0xb3/0x1f0 [ 53.182552][ T5947] ? __pfx_bad_page+0x10/0x10 [ 53.183800][ T5947] ? page_bad_reason+0x9d/0x1e0 [ 53.185077][ T5947] free_unref_page+0x657/0xdc0 [ 53.186345][ T5947] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 53.187917][ T5947] ? __phys_addr+0xc6/0x150 [ 53.189495][ T5947] skb_free_head+0xa0/0x1d0 [ 53.190690][ T5947] skb_release_data+0x560/0x730 [ 53.192104][ T5947] sk_skb_reason_drop+0x129/0x1a0 [ 53.193540][ T5947] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 53.195418][ T5947] ? kernel_text_address+0x8d/0x100 [ 53.197037][ T5947] ? hlock_class+0x4e/0x130 [ 53.198474][ T5947] ? __lock_acquire+0x163e/0x3ce0 [ 53.200028][ T5947] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 53.202119][ T5947] ? hlock_class+0x4e/0x130 [ 53.203433][ T5947] ? __lock_acquire+0xbdd/0x3ce0 [ 53.204812][ T5947] ? __pfx___lock_acquire+0x10/0x10 [ 53.206179][ T5947] __netif_receive_skb_list_core+0x357/0x950 [ 53.207653][ T5947] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 53.209292][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 53.210740][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 53.212418][ T5947] ? lock_acquire+0x2f/0xb0 [ 53.213636][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 53.215302][ T5947] netif_receive_skb_list_internal+0x753/0xdb0 [ 53.217021][ T5947] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 53.218846][ T5947] ? __pfx_eth_type_trans+0x10/0x10 [ 53.220232][ T5947] ? __build_skb_around+0x278/0x3b0 [ 53.221581][ T5947] netif_receive_skb_list+0x4f/0x4a0 [ 53.222933][ T5947] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 53.224536][ T5947] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 53.226266][ T5947] ? bpf_test_timer_continue+0x150/0x3d0 [ 53.227736][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 53.229149][ T5947] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 53.230576][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 53.232132][ T5947] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 53.233699][ T5947] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 53.235229][ T5947] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 53.236545][ T5947] ? 0xffffffffa00045c0 [ 53.237609][ T5947] ? 0xffffffffa00045c0 [ 53.238741][ T5947] ? 0xffffffffa00045c0 [ 53.239910][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 53.241572][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 53.243045][ T5947] ? lock_acquire+0x2f/0xb0 [ 53.244277][ T5947] ? __fget_files+0x40/0x3f0 [ 53.245584][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 53.247570][ T5947] ? fput+0x30/0x390 [ 53.248793][ T5947] ? __bpf_prog_get+0xa0/0x290 [ 53.250150][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 53.251800][ T5947] __sys_bpf+0xfc6/0x49a0 [ 53.253001][ T5947] ? find_held_lock+0x2d/0x110 [ 53.254593][ T5947] ? __pfx___sys_bpf+0x10/0x10 [ 53.255898][ T5947] ? __might_fault+0x13b/0x190 [ 53.257153][ T5947] ? __pfx_lock_release+0x10/0x10 [ 53.258425][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 53.259765][ T5947] ? lock_acquire+0x2f/0xb0 [ 53.260980][ T5947] ? __might_fault+0xe3/0x190 [ 53.262236][ T5947] ? xfd_validate_state+0x5d/0x180 [ 53.263603][ T5947] ? rcu_is_watching+0x12/0xc0 [ 53.264847][ T5947] __x64_sys_bpf+0x78/0xc0 [ 53.266023][ T5947] ? lockdep_hardirqs_on+0x7c/0x110 [ 53.267448][ T5947] do_syscall_64+0xcd/0x250 [ 53.268750][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.270352][ T5947] RIP: 0033:0x7ffb21d3be99 [ 53.271591][ T5947] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 53.276599][ T5947] RSP: 002b:00007ffb21cf6228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 53.278695][ T5947] RAX: ffffffffffffffda RBX: 00007ffb21dc6328 RCX: 00007ffb21d3be99 [ 53.280696][ T5947] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 53.282654][ T5947] RBP: 00007ffb21dc6320 R08: 00007ffb21cf66c0 R09: 00007ffb21cf66c0 [ 53.284713][ T5947] R10: 00007ffb21cf66c0 R11: 0000000000000246 R12: 00007ffb21d93074 [ 53.286768][ T5947] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe38c46e08 [ 53.288761][ T5947] [ 53.289659][ T5947] BUG: Bad page state in process syz-executor153 pfn:3661e [ 53.291608][ T5947] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3661e [ 53.293893][ T5947] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 53.295787][ T5947] raw: 00fff00000000000 dead000000000040 ffff88802a725000 0000000000000000 [ 53.297980][ T5947] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 53.300160][ T5947] page dumped because: page_pool leak [ 53.301524][ T5947] page_owner tracks the page as allocated [ 53.303006][ T5947] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5947, tgid 5942 (syz-executor153), ts 50555342221, free_ts 48538655741 [ 53.308382][ T5947] post_alloc_hook+0x2d1/0x350 [ 53.309602][ T5947] get_page_from_freelist+0x101e/0x3070 [ 53.311527][ T5947] __alloc_pages_noprof+0x223/0x25a0 [ 53.312888][ T5947] alloc_pages_bulk_noprof+0x77c/0x1110 [ 53.314485][ T5947] __page_pool_alloc_pages_slow+0x18f/0x770 [ 53.316163][ T5947] page_pool_alloc_netmem+0xc4/0x160 [ 53.317894][ T5947] page_pool_alloc_pages+0x1a/0x60 [ 53.319297][ T5947] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 53.320924][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 53.322309][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 53.323688][ T5947] __sys_bpf+0xfc6/0x49a0 [ 53.324896][ T5947] __x64_sys_bpf+0x78/0xc0 [ 53.326053][ T5947] do_syscall_64+0xcd/0x250 [ 53.327290][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.328799][ T5947] page last free pid 5924 tgid 5924 stack trace: [ 53.330425][ T5947] free_unref_page+0x5f4/0xdc0 [ 53.331690][ T5947] __folio_put+0x30d/0x3d0 [ 53.332839][ T5947] put_page+0x21e/0x280 [ 53.333905][ T5947] anon_pipe_buf_release+0x11a/0x240 [ 53.335288][ T5947] pipe_read+0x641/0x13f0 [ 53.336485][ T5947] vfs_read+0xa4c/0xbe0 [ 53.337577][ T5947] ksys_read+0x1fa/0x260 [ 53.338713][ T5947] do_syscall_64+0xcd/0x250 [ 53.339893][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.341442][ T5947] Modules linked in: [ 53.342431][ T5947] CPU: 3 UID: 0 PID: 5947 Comm: syz-executor153 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 53.345411][ T5947] Tainted: [B]=BAD_PAGE [ 53.346670][ T5947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 53.349251][ T5947] Call Trace: [ 53.350088][ T5947] [ 53.350831][ T5947] dump_stack_lvl+0x16c/0x1f0 [ 53.352005][ T5947] bad_page+0xb3/0x1f0 [ 53.353017][ T5947] ? __pfx_bad_page+0x10/0x10 [ 53.354305][ T5947] ? page_bad_reason+0x9d/0x1e0 [ 53.355511][ T5947] free_unref_page+0x657/0xdc0 [ 53.356765][ T5947] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 53.358421][ T5947] ? __phys_addr+0xc6/0x150 [ 53.359751][ T5947] skb_free_head+0xa0/0x1d0 [ 53.361110][ T5947] skb_release_data+0x560/0x730 [ 53.362530][ T5947] sk_skb_reason_drop+0x129/0x1a0 [ 53.363976][ T5947] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 53.365788][ T5947] ? kernel_text_address+0x8d/0x100 [ 53.367195][ T5947] ? hlock_class+0x4e/0x130 [ 53.368583][ T5947] ? __lock_acquire+0x163e/0x3ce0 [ 53.370067][ T5947] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 53.371916][ T5947] ? hlock_class+0x4e/0x130 [ 53.373168][ T5947] ? __lock_acquire+0xbdd/0x3ce0 [ 53.374433][ T5947] ? __pfx___lock_acquire+0x10/0x10 [ 53.375721][ T5947] __netif_receive_skb_list_core+0x357/0x950 [ 53.377322][ T5947] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 53.379044][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 53.380473][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 53.382128][ T5947] ? lock_acquire+0x2f/0xb0 [ 53.383297][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 53.384849][ T5947] netif_receive_skb_list_internal+0x753/0xdb0 [ 53.386647][ T5947] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 53.388692][ T5947] ? __pfx_eth_type_trans+0x10/0x10 [ 53.390219][ T5947] ? __build_skb_around+0x278/0x3b0 [ 53.391673][ T5947] netif_receive_skb_list+0x4f/0x4a0 [ 53.393058][ T5947] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 53.394733][ T5947] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 53.396479][ T5947] ? bpf_test_timer_continue+0x150/0x3d0 [ 53.397983][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 53.399369][ T5947] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 53.400905][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 53.402520][ T5947] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 53.404084][ T5947] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 53.406119][ T5947] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 53.407924][ T5947] ? 0xffffffffa00045c0 [ 53.409618][ T5947] ? 0xffffffffa00045c0 [ 53.410789][ T5947] ? 0xffffffffa00045c0 [ 53.411904][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 53.413592][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 53.415123][ T5947] ? lock_acquire+0x2f/0xb0 [ 53.416388][ T5947] ? __fget_files+0x40/0x3f0 [ 53.417797][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 53.419697][ T5947] ? fput+0x30/0x390 [ 53.420948][ T5947] ? __bpf_prog_get+0xa0/0x290 [ 53.422479][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 53.424592][ T5947] __sys_bpf+0xfc6/0x49a0 [ 53.425936][ T5947] ? find_held_lock+0x2d/0x110 [ 53.427143][ T5947] ? __pfx___sys_bpf+0x10/0x10 [ 53.428374][ T5947] ? __might_fault+0x13b/0x190 [ 53.429674][ T5947] ? __pfx_lock_release+0x10/0x10 [ 53.430941][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 53.432274][ T5947] ? lock_acquire+0x2f/0xb0 [ 53.433450][ T5947] ? __might_fault+0xe3/0x190 [ 53.434652][ T5947] ? xfd_validate_state+0x5d/0x180 [ 53.435953][ T5947] ? rcu_is_watching+0x12/0xc0 [ 53.437223][ T5947] __x64_sys_bpf+0x78/0xc0 [ 53.438374][ T5947] ? lockdep_hardirqs_on+0x7c/0x110 [ 53.439753][ T5947] do_syscall_64+0xcd/0x250 [ 53.440970][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.442554][ T5947] RIP: 0033:0x7ffb21d3be99 [ 53.443742][ T5947] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 53.448682][ T5947] RSP: 002b:00007ffb21cf6228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 53.450858][ T5947] RAX: ffffffffffffffda RBX: 00007ffb21dc6328 RCX: 00007ffb21d3be99 [ 53.452939][ T5947] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 53.455020][ T5947] RBP: 00007ffb21dc6320 R08: 00007ffb21cf66c0 R09: 00007ffb21cf66c0 [ 53.457070][ T5947] R10: 00007ffb21cf66c0 R11: 0000000000000246 R12: 00007ffb21d93074 [ 53.459472][ T5947] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe38c46e08 [ 53.461810][ T5947] [ 53.462830][ T5947] BUG: Bad page state in process syz-executor153 pfn:3661d [ 53.464991][ T5947] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3661d [ 53.467925][ T5947] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 53.470004][ T5947] raw: 00fff00000000000 dead000000000040 ffff88802a725000 0000000000000000 [ 53.472185][ T5947] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 53.474690][ T5947] page dumped because: page_pool leak [ 53.476068][ T5947] page_owner tracks the page as allocated [ 53.477505][ T5947] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5947, tgid 5942 (syz-executor153), ts 50555338302, free_ts 48538659806 [ 53.481815][ T5947] post_alloc_hook+0x2d1/0x350 [ 53.483065][ T5947] get_page_from_freelist+0x101e/0x3070 [ 53.484797][ T5947] __alloc_pages_noprof+0x223/0x25a0 [ 53.486403][ T5947] alloc_pages_bulk_noprof+0x77c/0x1110 [ 53.487918][ T5947] __page_pool_alloc_pages_slow+0x18f/0x770 [ 53.489482][ T5947] page_pool_alloc_netmem+0xc4/0x160 [ 53.490993][ T5947] page_pool_alloc_pages+0x1a/0x60 [ 53.492449][ T5947] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 53.494098][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 53.495564][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 53.497089][ T5947] __sys_bpf+0xfc6/0x49a0 [ 53.498271][ T5947] __x64_sys_bpf+0x78/0xc0 [ 53.499447][ T5947] do_syscall_64+0xcd/0x250 [ 53.500642][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.502287][ T5947] page last free pid 5924 tgid 5924 stack trace: [ 53.504057][ T5947] free_unref_page+0x5f4/0xdc0 [ 53.505854][ T5947] __folio_put+0x30d/0x3d0 [ 53.507311][ T5947] put_page+0x21e/0x280 [ 53.508763][ T5947] anon_pipe_buf_release+0x11a/0x240 [ 53.510211][ T5947] pipe_read+0x641/0x13f0 [ 53.511320][ T5947] vfs_read+0xa4c/0xbe0 [ 53.512554][ T5947] ksys_read+0x1fa/0x260 [ 53.513676][ T5947] do_syscall_64+0xcd/0x250 [ 53.514913][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.516448][ T5947] Modules linked in: [ 53.517501][ T5947] CPU: 3 UID: 0 PID: 5947 Comm: syz-executor153 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 53.520728][ T5947] Tainted: [B]=BAD_PAGE [ 53.521830][ T5947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 53.524597][ T5947] Call Trace: [ 53.525495][ T5947] [ 53.526285][ T5947] dump_stack_lvl+0x16c/0x1f0 [ 53.527532][ T5947] bad_page+0xb3/0x1f0 [ 53.528941][ T5947] ? __pfx_bad_page+0x10/0x10 [ 53.530299][ T5947] ? page_bad_reason+0x9d/0x1e0 [ 53.531679][ T5947] free_unref_page+0x657/0xdc0 [ 53.532987][ T5947] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 53.534560][ T5947] ? __phys_addr+0xc6/0x150 [ 53.535786][ T5947] skb_free_head+0xa0/0x1d0 [ 53.537166][ T5947] skb_release_data+0x560/0x730 [ 53.538522][ T5947] sk_skb_reason_drop+0x129/0x1a0 [ 53.539988][ T5947] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 53.541891][ T5947] ? kernel_text_address+0x8d/0x100 [ 53.543245][ T5947] ? hlock_class+0x4e/0x130 [ 53.544461][ T5947] ? __lock_acquire+0x163e/0x3ce0 [ 53.545797][ T5947] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 53.547652][ T5947] ? hlock_class+0x4e/0x130 [ 53.548844][ T5947] ? __lock_acquire+0xbdd/0x3ce0 [ 53.550045][ T5947] ? __pfx___lock_acquire+0x10/0x10 [ 53.551218][ T5947] __netif_receive_skb_list_core+0x357/0x950 [ 53.552593][ T5947] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 53.554306][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 53.555602][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 53.557257][ T5947] ? lock_acquire+0x2f/0xb0 [ 53.558443][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 53.560090][ T5947] netif_receive_skb_list_internal+0x753/0xdb0 [ 53.561714][ T5947] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 53.563441][ T5947] ? __pfx_eth_type_trans+0x10/0x10 [ 53.564783][ T5947] ? __build_skb_around+0x278/0x3b0 [ 53.566164][ T5947] netif_receive_skb_list+0x4f/0x4a0 [ 53.567569][ T5947] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 53.569107][ T5947] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 53.570874][ T5947] ? bpf_test_timer_continue+0x150/0x3d0 [ 53.572735][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 53.574236][ T5947] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 53.575848][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 53.577470][ T5947] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 53.579032][ T5947] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 53.580575][ T5947] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 53.581985][ T5947] ? 0xffffffffa00045c0 [ 53.583087][ T5947] ? 0xffffffffa00045c0 [ 53.584195][ T5947] ? 0xffffffffa00045c0 [ 53.585312][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 53.586932][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 53.588464][ T5947] ? lock_acquire+0x2f/0xb0 [ 53.589692][ T5947] ? __fget_files+0x40/0x3f0 [ 53.591043][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 53.592674][ T5947] ? fput+0x30/0x390 [ 53.593752][ T5947] ? __bpf_prog_get+0xa0/0x290 [ 53.595150][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 53.596854][ T5947] __sys_bpf+0xfc6/0x49a0 [ 53.598152][ T5947] ? find_held_lock+0x2d/0x110 [ 53.599454][ T5947] ? __pfx___sys_bpf+0x10/0x10 [ 53.600722][ T5947] ? __might_fault+0x13b/0x190 [ 53.602016][ T5947] ? __pfx_lock_release+0x10/0x10 [ 53.603282][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 53.604685][ T5947] ? lock_acquire+0x2f/0xb0 [ 53.605877][ T5947] ? __might_fault+0xe3/0x190 [ 53.607079][ T5947] ? xfd_validate_state+0x5d/0x180 [ 53.608426][ T5947] ? rcu_is_watching+0x12/0xc0 [ 53.609709][ T5947] __x64_sys_bpf+0x78/0xc0 [ 53.610967][ T5947] ? lockdep_hardirqs_on+0x7c/0x110 [ 53.612364][ T5947] do_syscall_64+0xcd/0x250 [ 53.613584][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.615185][ T5947] RIP: 0033:0x7ffb21d3be99 [ 53.616438][ T5947] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 53.622054][ T5947] RSP: 002b:00007ffb21cf6228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 53.624332][ T5947] RAX: ffffffffffffffda RBX: 00007ffb21dc6328 RCX: 00007ffb21d3be99 [ 53.626334][ T5947] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 53.628315][ T5947] RBP: 00007ffb21dc6320 R08: 00007ffb21cf66c0 R09: 00007ffb21cf66c0 [ 53.630384][ T5947] R10: 00007ffb21cf66c0 R11: 0000000000000246 R12: 00007ffb21d93074 [ 53.632460][ T5947] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe38c46e08 [ 53.634515][ T5947] [ 53.635435][ T5947] BUG: Bad page state in process syz-executor153 pfn:3661c [ 53.637382][ T5947] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3661c [ 53.639710][ T5947] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 53.641690][ T5947] raw: 00fff00000000000 dead000000000040 ffff88802a725000 0000000000000000 [ 53.644176][ T5947] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 53.646986][ T5947] page dumped because: page_pool leak [ 53.648559][ T5947] page_owner tracks the page as allocated [ 53.650203][ T5947] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5947, tgid 5942 (syz-executor153), ts 50555334197, free_ts 48540759688 [ 53.654866][ T5947] post_alloc_hook+0x2d1/0x350 [ 53.656147][ T5947] get_page_from_freelist+0x101e/0x3070 [ 53.657632][ T5947] __alloc_pages_noprof+0x223/0x25a0 [ 53.659044][ T5947] alloc_pages_bulk_noprof+0x77c/0x1110 [ 53.660525][ T5947] __page_pool_alloc_pages_slow+0x18f/0x770 [ 53.662092][ T5947] page_pool_alloc_netmem+0xc4/0x160 [ 53.663414][ T5947] page_pool_alloc_pages+0x1a/0x60 [ 53.664798][ T5947] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 53.666333][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 53.667729][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 53.669176][ T5947] __sys_bpf+0xfc6/0x49a0 [ 53.670350][ T5947] __x64_sys_bpf+0x78/0xc0 [ 53.671697][ T5947] do_syscall_64+0xcd/0x250 [ 53.673100][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.675050][ T5947] page last free pid 5924 tgid 5924 stack trace: [ 53.676950][ T5947] free_unref_page+0x5f4/0xdc0 [ 53.678509][ T5947] __folio_put+0x30d/0x3d0 [ 53.679925][ T5947] put_page+0x21e/0x280 [ 53.681220][ T5947] anon_pipe_buf_release+0x11a/0x240 [ 53.682714][ T5947] pipe_read+0x641/0x13f0 [ 53.683875][ T5947] vfs_read+0xa4c/0xbe0 [ 53.684977][ T5947] ksys_read+0x1fa/0x260 [ 53.686801][ T5947] do_syscall_64+0xcd/0x250 [ 53.688390][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.690492][ T5947] Modules linked in: [ 53.691728][ T5947] CPU: 3 UID: 0 PID: 5947 Comm: syz-executor153 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 53.694992][ T5947] Tainted: [B]=BAD_PAGE [ 53.696098][ T5947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 53.699014][ T5947] Call Trace: [ 53.699901][ T5947] [ 53.700677][ T5947] dump_stack_lvl+0x16c/0x1f0 [ 53.701840][ T5947] bad_page+0xb3/0x1f0 [ 53.703026][ T5947] ? __pfx_bad_page+0x10/0x10 [ 53.704364][ T5947] ? page_bad_reason+0x9d/0x1e0 [ 53.705786][ T5947] free_unref_page+0x657/0xdc0 [ 53.707099][ T5947] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 53.708837][ T5947] ? __phys_addr+0xc6/0x150 [ 53.710282][ T5947] skb_free_head+0xa0/0x1d0 [ 53.711756][ T5947] skb_release_data+0x560/0x730 [ 53.713485][ T5947] sk_skb_reason_drop+0x129/0x1a0 [ 53.715052][ T5947] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 53.716878][ T5947] ? kernel_text_address+0x8d/0x100 [ 53.718478][ T5947] ? hlock_class+0x4e/0x130 [ 53.719796][ T5947] ? __lock_acquire+0x163e/0x3ce0 [ 53.721178][ T5947] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 53.723073][ T5947] ? hlock_class+0x4e/0x130 [ 53.724319][ T5947] ? __lock_acquire+0xbdd/0x3ce0 [ 53.725657][ T5947] ? __pfx___lock_acquire+0x10/0x10 [ 53.727061][ T5947] __netif_receive_skb_list_core+0x357/0x950 [ 53.728624][ T5947] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 53.730653][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 53.732314][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 53.733986][ T5947] ? lock_acquire+0x2f/0xb0 [ 53.735204][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 53.736879][ T5947] netif_receive_skb_list_internal+0x753/0xdb0 [ 53.738550][ T5947] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 53.740312][ T5947] ? __pfx_eth_type_trans+0x10/0x10 [ 53.741679][ T5947] ? __build_skb_around+0x278/0x3b0 [ 53.743137][ T5947] netif_receive_skb_list+0x4f/0x4a0 [ 53.744687][ T5947] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 53.746555][ T5947] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 53.748466][ T5947] ? bpf_test_timer_continue+0x150/0x3d0 [ 53.749956][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 53.751510][ T5947] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 53.753090][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 53.754618][ T5947] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 53.756146][ T5947] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 53.757713][ T5947] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 53.759092][ T5947] ? 0xffffffffa00045c0 [ 53.760183][ T5947] ? 0xffffffffa00045c0 [ 53.761284][ T5947] ? 0xffffffffa00045c0 [ 53.762380][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 53.764127][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 53.765922][ T5947] ? lock_acquire+0x2f/0xb0 [ 53.767125][ T5947] ? __fget_files+0x40/0x3f0 [ 53.768539][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 53.770598][ T5947] ? fput+0x30/0x390 [ 53.771640][ T5947] ? __bpf_prog_get+0xa0/0x290 [ 53.772853][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 53.774408][ T5947] __sys_bpf+0xfc6/0x49a0 [ 53.775541][ T5947] ? find_held_lock+0x2d/0x110 [ 53.776797][ T5947] ? __pfx___sys_bpf+0x10/0x10 [ 53.778093][ T5947] ? __might_fault+0x13b/0x190 [ 53.779351][ T5947] ? __pfx_lock_release+0x10/0x10 [ 53.780704][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 53.782120][ T5947] ? lock_acquire+0x2f/0xb0 [ 53.783294][ T5947] ? __might_fault+0xe3/0x190 [ 53.784538][ T5947] ? xfd_validate_state+0x5d/0x180 [ 53.785909][ T5947] ? rcu_is_watching+0x12/0xc0 [ 53.787177][ T5947] __x64_sys_bpf+0x78/0xc0 [ 53.788378][ T5947] ? lockdep_hardirqs_on+0x7c/0x110 [ 53.789753][ T5947] do_syscall_64+0xcd/0x250 [ 53.790967][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.792664][ T5947] RIP: 0033:0x7ffb21d3be99 [ 53.793969][ T5947] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 53.799339][ T5947] RSP: 002b:00007ffb21cf6228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 53.801562][ T5947] RAX: ffffffffffffffda RBX: 00007ffb21dc6328 RCX: 00007ffb21d3be99 [ 53.803586][ T5947] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 53.805670][ T5947] RBP: 00007ffb21dc6320 R08: 00007ffb21cf66c0 R09: 00007ffb21cf66c0 [ 53.807819][ T5947] R10: 00007ffb21cf66c0 R11: 0000000000000246 R12: 00007ffb21d93074 [ 53.810156][ T5947] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe38c46e08 [ 53.812343][ T5947] [ 53.813351][ T5947] BUG: Bad page state in process syz-executor153 pfn:3645f [ 53.815295][ T5947] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3645f [ 53.817673][ T5947] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 53.819634][ T5947] raw: 00fff00000000000 dead000000000040 ffff88802a725000 0000000000000000 [ 53.821990][ T5947] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 53.824855][ T5947] page dumped because: page_pool leak [ 53.826673][ T5947] page_owner tracks the page as allocated [ 53.828480][ T5947] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5947, tgid 5942 (syz-executor153), ts 50555330135, free_ts 48678052230 [ 53.833476][ T5947] post_alloc_hook+0x2d1/0x350 [ 53.834808][ T5947] get_page_from_freelist+0x101e/0x3070 [ 53.836274][ T5947] __alloc_pages_noprof+0x223/0x25a0 [ 53.837693][ T5947] alloc_pages_bulk_noprof+0x77c/0x1110 [ 53.839155][ T5947] __page_pool_alloc_pages_slow+0x18f/0x770 [ 53.841069][ T5947] page_pool_alloc_netmem+0xc4/0x160 [ 53.842747][ T5947] page_pool_alloc_pages+0x1a/0x60 [ 53.844633][ T5947] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 53.846448][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 53.848205][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 53.849700][ T5947] __sys_bpf+0xfc6/0x49a0 [ 53.851217][ T5947] __x64_sys_bpf+0x78/0xc0 [ 53.852624][ T5947] do_syscall_64+0xcd/0x250 [ 53.854213][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.856459][ T5947] page last free pid 5924 tgid 5924 stack trace: [ 53.859327][ T5947] free_unref_page+0x5f4/0xdc0 [ 53.861415][ T5947] __folio_put+0x30d/0x3d0 [ 53.863220][ T5947] put_page+0x21e/0x280 [ 53.864715][ T5947] anon_pipe_buf_release+0x11a/0x240 [ 53.866424][ T5947] pipe_read+0x641/0x13f0 [ 53.867811][ T5947] vfs_read+0xa4c/0xbe0 [ 53.869164][ T5947] ksys_read+0x1fa/0x260 [ 53.870534][ T5947] do_syscall_64+0xcd/0x250 [ 53.871871][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.873665][ T5947] Modules linked in: [ 53.874964][ T5947] CPU: 3 UID: 0 PID: 5947 Comm: syz-executor153 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 53.879185][ T5947] Tainted: [B]=BAD_PAGE [ 53.880501][ T5947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 53.883487][ T5947] Call Trace: [ 53.884641][ T5947] [ 53.885700][ T5947] dump_stack_lvl+0x16c/0x1f0 [ 53.887327][ T5947] bad_page+0xb3/0x1f0 [ 53.888755][ T5947] ? __pfx_bad_page+0x10/0x10 [ 53.890129][ T5947] ? page_bad_reason+0x9d/0x1e0 [ 53.891416][ T5947] free_unref_page+0x657/0xdc0 [ 53.892667][ T5947] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 53.894263][ T5947] ? __phys_addr+0xc6/0x150 [ 53.895463][ T5947] skb_free_head+0xa0/0x1d0 [ 53.896678][ T5947] skb_release_data+0x560/0x730 [ 53.898058][ T5947] sk_skb_reason_drop+0x129/0x1a0 [ 53.899418][ T5947] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 53.901354][ T5947] ? kernel_text_address+0x8d/0x100 [ 53.903105][ T5947] ? hlock_class+0x4e/0x130 [ 53.904633][ T5947] ? __lock_acquire+0x163e/0x3ce0 [ 53.906705][ T5947] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 53.908761][ T5947] ? hlock_class+0x4e/0x130 [ 53.910157][ T5947] ? __lock_acquire+0xbdd/0x3ce0 [ 53.911481][ T5947] ? __pfx___lock_acquire+0x10/0x10 [ 53.912932][ T5947] __netif_receive_skb_list_core+0x357/0x950 [ 53.914617][ T5947] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 53.916649][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 53.918246][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 53.919923][ T5947] ? lock_acquire+0x2f/0xb0 [ 53.921170][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 53.922839][ T5947] netif_receive_skb_list_internal+0x753/0xdb0 [ 53.924464][ T5947] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 53.926203][ T5947] ? __pfx_eth_type_trans+0x10/0x10 [ 53.927567][ T5947] ? __build_skb_around+0x278/0x3b0 [ 53.928935][ T5947] netif_receive_skb_list+0x4f/0x4a0 [ 53.930345][ T5947] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 53.931995][ T5947] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 53.933721][ T5947] ? bpf_test_timer_continue+0x150/0x3d0 [ 53.935262][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 53.936724][ T5947] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 53.938335][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 53.939890][ T5947] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 53.941490][ T5947] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 53.943477][ T5947] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 53.945290][ T5947] ? 0xffffffffa00045c0 [ 53.946754][ T5947] ? 0xffffffffa00045c0 [ 53.948229][ T5947] ? 0xffffffffa00045c0 [ 53.949691][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 53.951746][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 53.953719][ T5947] ? lock_acquire+0x2f/0xb0 [ 53.955397][ T5947] ? __fget_files+0x40/0x3f0 [ 53.956956][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 53.958924][ T5947] ? fput+0x30/0x390 [ 53.960265][ T5947] ? __bpf_prog_get+0xa0/0x290 [ 53.961971][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 53.964069][ T5947] __sys_bpf+0xfc6/0x49a0 [ 53.965630][ T5947] ? find_held_lock+0x2d/0x110 [ 53.967440][ T5947] ? __pfx___sys_bpf+0x10/0x10 [ 53.969252][ T5947] ? __might_fault+0x13b/0x190 [ 53.971075][ T5947] ? __pfx_lock_release+0x10/0x10 [ 53.972850][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 53.974406][ T5947] ? lock_acquire+0x2f/0xb0 [ 53.975711][ T5947] ? __might_fault+0xe3/0x190 [ 53.976977][ T5947] ? xfd_validate_state+0x5d/0x180 [ 53.978323][ T5947] ? rcu_is_watching+0x12/0xc0 [ 53.979657][ T5947] __x64_sys_bpf+0x78/0xc0 [ 53.981194][ T5947] ? lockdep_hardirqs_on+0x7c/0x110 [ 53.982972][ T5947] do_syscall_64+0xcd/0x250 [ 53.984515][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.986515][ T5947] RIP: 0033:0x7ffb21d3be99 [ 53.988049][ T5947] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 53.994785][ T5947] RSP: 002b:00007ffb21cf6228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 53.997996][ T5947] RAX: ffffffffffffffda RBX: 00007ffb21dc6328 RCX: 00007ffb21d3be99 [ 54.001241][ T5947] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 54.004398][ T5947] RBP: 00007ffb21dc6320 R08: 00007ffb21cf66c0 R09: 00007ffb21cf66c0 [ 54.007319][ T5947] R10: 00007ffb21cf66c0 R11: 0000000000000246 R12: 00007ffb21d93074 [ 54.010291][ T5947] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe38c46e08 [ 54.012999][ T5947] [ 54.014205][ T5947] BUG: Bad page state in process syz-executor153 pfn:3645e [ 54.016823][ T5947] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3645e [ 54.019806][ T5947] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 54.022215][ T5947] raw: 00fff00000000000 dead000000000040 ffff88802a725000 0000000000000000 [ 54.025200][ T5947] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 54.028021][ T5947] page dumped because: page_pool leak [ 54.029873][ T5947] page_owner tracks the page as allocated [ 54.032044][ T5947] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5947, tgid 5942 (syz-executor153), ts 50555325969, free_ts 48678057850 [ 54.038328][ T5947] post_alloc_hook+0x2d1/0x350 [ 54.039941][ T5947] get_page_from_freelist+0x101e/0x3070 [ 54.041849][ T5947] __alloc_pages_noprof+0x223/0x25a0 [ 54.043663][ T5947] alloc_pages_bulk_noprof+0x77c/0x1110 [ 54.045749][ T5947] __page_pool_alloc_pages_slow+0x18f/0x770 [ 54.047829][ T5947] page_pool_alloc_netmem+0xc4/0x160 [ 54.049670][ T5947] page_pool_alloc_pages+0x1a/0x60 [ 54.051563][ T5947] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 54.053920][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 54.055807][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 54.057735][ T5947] __sys_bpf+0xfc6/0x49a0 [ 54.059256][ T5947] __x64_sys_bpf+0x78/0xc0 [ 54.060780][ T5947] do_syscall_64+0xcd/0x250 [ 54.062366][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.064531][ T5947] page last free pid 5924 tgid 5924 stack trace: [ 54.066830][ T5947] free_unref_page+0x5f4/0xdc0 [ 54.068708][ T5947] __folio_put+0x30d/0x3d0 [ 54.070361][ T5947] put_page+0x21e/0x280 [ 54.071794][ T5947] anon_pipe_buf_release+0x11a/0x240 [ 54.073690][ T5947] pipe_read+0x641/0x13f0 [ 54.075266][ T5947] vfs_read+0xa4c/0xbe0 [ 54.076683][ T5947] ksys_read+0x1fa/0x260 [ 54.078168][ T5947] do_syscall_64+0xcd/0x250 [ 54.079738][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.081781][ T5947] Modules linked in: [ 54.083313][ T5947] CPU: 3 UID: 0 PID: 5947 Comm: syz-executor153 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 54.088016][ T5947] Tainted: [B]=BAD_PAGE [ 54.089528][ T5947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 54.093226][ T5947] Call Trace: [ 54.094450][ T5947] [ 54.095532][ T5947] dump_stack_lvl+0x16c/0x1f0 [ 54.097237][ T5947] bad_page+0xb3/0x1f0 [ 54.098631][ T5947] ? __pfx_bad_page+0x10/0x10 [ 54.100220][ T5947] ? page_bad_reason+0x9d/0x1e0 [ 54.102035][ T5947] free_unref_page+0x657/0xdc0 [ 54.103841][ T5947] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 54.106286][ T5947] ? __phys_addr+0xc6/0x150 [ 54.107969][ T5947] skb_free_head+0xa0/0x1d0 [ 54.109666][ T5947] skb_release_data+0x560/0x730 [ 54.111441][ T5947] sk_skb_reason_drop+0x129/0x1a0 [ 54.113179][ T5947] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 54.115470][ T5947] ? kernel_text_address+0x8d/0x100 [ 54.117275][ T5947] ? hlock_class+0x4e/0x130 [ 54.118875][ T5947] ? __lock_acquire+0x163e/0x3ce0 [ 54.120832][ T5947] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 54.123567][ T5947] ? hlock_class+0x4e/0x130 [ 54.125339][ T5947] ? __lock_acquire+0xbdd/0x3ce0 [ 54.127151][ T5947] ? __pfx___lock_acquire+0x10/0x10 [ 54.128993][ T5947] __netif_receive_skb_list_core+0x357/0x950 [ 54.131408][ T5947] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 54.133745][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 54.135496][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 54.137660][ T5947] ? lock_acquire+0x2f/0xb0 [ 54.139203][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 54.141357][ T5947] netif_receive_skb_list_internal+0x753/0xdb0 [ 54.143449][ T5947] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 54.145872][ T5947] ? __pfx_eth_type_trans+0x10/0x10 [ 54.147720][ T5947] ? __build_skb_around+0x278/0x3b0 [ 54.149557][ T5947] netif_receive_skb_list+0x4f/0x4a0 [ 54.151525][ T5947] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 54.153935][ T5947] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 54.156254][ T5947] ? bpf_test_timer_continue+0x150/0x3d0 [ 54.158199][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 54.159979][ T5947] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 54.161964][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 54.164046][ T5947] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 54.166064][ T5947] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 54.168031][ T5947] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 54.169784][ T5947] ? 0xffffffffa00045c0 [ 54.171560][ T5947] ? 0xffffffffa00045c0 [ 54.173077][ T5947] ? 0xffffffffa00045c0 [ 54.174543][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 54.176458][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 54.177872][ T5947] ? lock_acquire+0x2f/0xb0 [ 54.179072][ T5947] ? __fget_files+0x40/0x3f0 [ 54.180437][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 54.182165][ T5947] ? fput+0x30/0x390 [ 54.183322][ T5947] ? __bpf_prog_get+0xa0/0x290 [ 54.184720][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 54.186377][ T5947] __sys_bpf+0xfc6/0x49a0 [ 54.187597][ T5947] ? find_held_lock+0x2d/0x110 [ 54.189042][ T5947] ? __pfx___sys_bpf+0x10/0x10 [ 54.190324][ T5947] ? __might_fault+0x13b/0x190 [ 54.191591][ T5947] ? __pfx_lock_release+0x10/0x10 [ 54.193104][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 54.194522][ T5947] ? lock_acquire+0x2f/0xb0 [ 54.195725][ T5947] ? __might_fault+0xe3/0x190 [ 54.197006][ T5947] ? xfd_validate_state+0x5d/0x180 [ 54.198365][ T5947] ? rcu_is_watching+0x12/0xc0 [ 54.199579][ T5947] __x64_sys_bpf+0x78/0xc0 [ 54.200738][ T5947] ? lockdep_hardirqs_on+0x7c/0x110 [ 54.202172][ T5947] do_syscall_64+0xcd/0x250 [ 54.203439][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.205092][ T5947] RIP: 0033:0x7ffb21d3be99 [ 54.206362][ T5947] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 54.211855][ T5947] RSP: 002b:00007ffb21cf6228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 54.214211][ T5947] RAX: ffffffffffffffda RBX: 00007ffb21dc6328 RCX: 00007ffb21d3be99 [ 54.216338][ T5947] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 54.218432][ T5947] RBP: 00007ffb21dc6320 R08: 00007ffb21cf66c0 R09: 00007ffb21cf66c0 [ 54.220488][ T5947] R10: 00007ffb21cf66c0 R11: 0000000000000246 R12: 00007ffb21d93074 [ 54.222578][ T5947] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe38c46e08 [ 54.224700][ T5947] [ 54.225636][ T5947] BUG: Bad page state in process syz-executor153 pfn:3645d [ 54.227548][ T5947] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3645d [ 54.230058][ T5947] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 54.232179][ T5947] raw: 00fff00000000000 dead000000000040 ffff88802a725000 0000000000000000 [ 54.234917][ T5947] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 54.237494][ T5947] page dumped because: page_pool leak [ 54.238961][ T5947] page_owner tracks the page as allocated [ 54.240462][ T5947] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5947, tgid 5942 (syz-executor153), ts 50555321967, free_ts 48678078670 [ 54.244931][ T5947] post_alloc_hook+0x2d1/0x350 [ 54.246444][ T5947] get_page_from_freelist+0x101e/0x3070 [ 54.248303][ T5947] __alloc_pages_noprof+0x223/0x25a0 [ 54.250225][ T5947] alloc_pages_bulk_noprof+0x77c/0x1110 [ 54.251892][ T5947] __page_pool_alloc_pages_slow+0x18f/0x770 [ 54.253546][ T5947] page_pool_alloc_netmem+0xc4/0x160 [ 54.255039][ T5947] page_pool_alloc_pages+0x1a/0x60 [ 54.256457][ T5947] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 54.258357][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 54.259837][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 54.261322][ T5947] __sys_bpf+0xfc6/0x49a0 [ 54.262564][ T5947] __x64_sys_bpf+0x78/0xc0 [ 54.263795][ T5947] do_syscall_64+0xcd/0x250 [ 54.265091][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.266648][ T5947] page last free pid 5924 tgid 5924 stack trace: [ 54.268242][ T5947] free_unref_page+0x5f4/0xdc0 [ 54.269500][ T5947] __folio_put+0x30d/0x3d0 [ 54.270587][ T5947] put_page+0x21e/0x280 [ 54.271615][ T5947] anon_pipe_buf_release+0x11a/0x240 [ 54.272908][ T5947] pipe_read+0x641/0x13f0 [ 54.273969][ T5947] vfs_read+0xa4c/0xbe0 [ 54.275063][ T5947] ksys_read+0x1fa/0x260 [ 54.276125][ T5947] do_syscall_64+0xcd/0x250 [ 54.277301][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.278768][ T5947] Modules linked in: [ 54.279808][ T5947] CPU: 3 UID: 0 PID: 5947 Comm: syz-executor153 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 54.283295][ T5947] Tainted: [B]=BAD_PAGE [ 54.285444][ T5947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 54.289541][ T5947] Call Trace: [ 54.290429][ T5947] [ 54.291220][ T5947] dump_stack_lvl+0x16c/0x1f0 [ 54.292454][ T5947] bad_page+0xb3/0x1f0 [ 54.293527][ T5947] ? __pfx_bad_page+0x10/0x10 [ 54.294945][ T5947] ? page_bad_reason+0x9d/0x1e0 [ 54.296245][ T5947] free_unref_page+0x657/0xdc0 [ 54.297563][ T5947] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 54.299119][ T5947] ? __phys_addr+0xc6/0x150 [ 54.300394][ T5947] skb_free_head+0xa0/0x1d0 [ 54.301638][ T5947] skb_release_data+0x560/0x730 [ 54.303167][ T5947] sk_skb_reason_drop+0x129/0x1a0 [ 54.304519][ T5947] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 54.306641][ T5947] ? kernel_text_address+0x8d/0x100 [ 54.308235][ T5947] ? hlock_class+0x4e/0x130 [ 54.309610][ T5947] ? __lock_acquire+0x163e/0x3ce0 [ 54.311417][ T5947] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 54.313528][ T5947] ? hlock_class+0x4e/0x130 [ 54.314962][ T5947] ? __lock_acquire+0xbdd/0x3ce0 [ 54.316318][ T5947] ? __pfx___lock_acquire+0x10/0x10 [ 54.317744][ T5947] __netif_receive_skb_list_core+0x357/0x950 [ 54.319402][ T5947] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 54.321204][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 54.322743][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 54.324632][ T5947] ? lock_acquire+0x2f/0xb0 [ 54.326198][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 54.327989][ T5947] netif_receive_skb_list_internal+0x753/0xdb0 [ 54.329822][ T5947] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 54.331529][ T5947] ? __pfx_eth_type_trans+0x10/0x10 [ 54.332926][ T5947] ? __build_skb_around+0x278/0x3b0 [ 54.334324][ T5947] netif_receive_skb_list+0x4f/0x4a0 [ 54.335916][ T5947] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 54.337685][ T5947] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 54.340073][ T5947] ? bpf_test_timer_continue+0x150/0x3d0 [ 54.341737][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 54.343266][ T5947] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 54.345066][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 54.346877][ T5947] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 54.348772][ T5947] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 54.350636][ T5947] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 54.352303][ T5947] ? 0xffffffffa00045c0 [ 54.353551][ T5947] ? 0xffffffffa00045c0 [ 54.354703][ T5947] ? 0xffffffffa00045c0 [ 54.355939][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 54.357511][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 54.358937][ T5947] ? lock_acquire+0x2f/0xb0 [ 54.360138][ T5947] ? __fget_files+0x40/0x3f0 [ 54.361382][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 54.363039][ T5947] ? fput+0x30/0x390 [ 54.364097][ T5947] ? __bpf_prog_get+0xa0/0x290 [ 54.365426][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 54.367041][ T5947] __sys_bpf+0xfc6/0x49a0 [ 54.368243][ T5947] ? find_held_lock+0x2d/0x110 [ 54.369724][ T5947] ? __pfx___sys_bpf+0x10/0x10 [ 54.371367][ T5947] ? __might_fault+0x13b/0x190 [ 54.373146][ T5947] ? __pfx_lock_release+0x10/0x10 [ 54.374684][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 54.376342][ T5947] ? lock_acquire+0x2f/0xb0 [ 54.378007][ T5947] ? __might_fault+0xe3/0x190 [ 54.379578][ T5947] ? xfd_validate_state+0x5d/0x180 [ 54.380920][ T5947] ? rcu_is_watching+0x12/0xc0 [ 54.382352][ T5947] __x64_sys_bpf+0x78/0xc0 [ 54.383640][ T5947] ? lockdep_hardirqs_on+0x7c/0x110 [ 54.385242][ T5947] do_syscall_64+0xcd/0x250 [ 54.386519][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.388093][ T5947] RIP: 0033:0x7ffb21d3be99 [ 54.389608][ T5947] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 54.394433][ T5947] RSP: 002b:00007ffb21cf6228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 54.396474][ T5947] RAX: ffffffffffffffda RBX: 00007ffb21dc6328 RCX: 00007ffb21d3be99 [ 54.398587][ T5947] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 54.400659][ T5947] RBP: 00007ffb21dc6320 R08: 00007ffb21cf66c0 R09: 00007ffb21cf66c0 [ 54.402788][ T5947] R10: 00007ffb21cf66c0 R11: 0000000000000246 R12: 00007ffb21d93074 [ 54.405251][ T5947] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe38c46e08 [ 54.407408][ T5947] [ 54.408364][ T5947] BUG: Bad page state in process syz-executor153 pfn:3645c [ 54.410515][ T5947] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3645c [ 54.413137][ T5947] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 54.415223][ T5947] raw: 00fff00000000000 dead000000000040 ffff88802a725000 0000000000000000 [ 54.418035][ T5947] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 54.420428][ T5947] page dumped because: page_pool leak [ 54.422010][ T5947] page_owner tracks the page as allocated [ 54.423625][ T5947] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5947, tgid 5942 (syz-executor153), ts 50555317801, free_ts 48678084677 [ 54.428476][ T5947] post_alloc_hook+0x2d1/0x350 [ 54.431175][ T5947] get_page_from_freelist+0x101e/0x3070 [ 54.433182][ T5947] __alloc_pages_noprof+0x223/0x25a0 [ 54.435109][ T5947] alloc_pages_bulk_noprof+0x77c/0x1110 [ 54.436730][ T5947] __page_pool_alloc_pages_slow+0x18f/0x770 [ 54.438729][ T5947] page_pool_alloc_netmem+0xc4/0x160 [ 54.440494][ T5947] page_pool_alloc_pages+0x1a/0x60 [ 54.442405][ T5947] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 54.444620][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 54.446471][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 54.448366][ T5947] __sys_bpf+0xfc6/0x49a0 [ 54.450202][ T5947] __x64_sys_bpf+0x78/0xc0 [ 54.451850][ T5947] do_syscall_64+0xcd/0x250 [ 54.453541][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.455796][ T5947] page last free pid 5924 tgid 5924 stack trace: [ 54.458130][ T5947] free_unref_page+0x5f4/0xdc0 [ 54.459773][ T5947] __folio_put+0x30d/0x3d0 [ 54.461155][ T5947] put_page+0x21e/0x280 [ 54.462374][ T5947] anon_pipe_buf_release+0x11a/0x240 [ 54.463863][ T5947] pipe_read+0x641/0x13f0 [ 54.465081][ T5947] vfs_read+0xa4c/0xbe0 [ 54.466230][ T5947] ksys_read+0x1fa/0x260 [ 54.467365][ T5947] do_syscall_64+0xcd/0x250 [ 54.468575][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.470226][ T5947] Modules linked in: [ 54.471594][ T5947] CPU: 3 UID: 0 PID: 5947 Comm: syz-executor153 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 54.475869][ T5947] Tainted: [B]=BAD_PAGE [ 54.477323][ T5947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 54.480999][ T5947] Call Trace: [ 54.482372][ T5947] [ 54.483452][ T5947] dump_stack_lvl+0x16c/0x1f0 [ 54.485098][ T5947] bad_page+0xb3/0x1f0 [ 54.486941][ T5947] ? __pfx_bad_page+0x10/0x10 [ 54.489045][ T5947] ? page_bad_reason+0x9d/0x1e0 [ 54.491069][ T5947] free_unref_page+0x657/0xdc0 [ 54.492832][ T5947] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 54.494861][ T5947] ? __phys_addr+0xc6/0x150 [ 54.496368][ T5947] skb_free_head+0xa0/0x1d0 [ 54.497932][ T5947] skb_release_data+0x560/0x730 [ 54.499557][ T5947] sk_skb_reason_drop+0x129/0x1a0 [ 54.501266][ T5947] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 54.503815][ T5947] ? kernel_text_address+0x8d/0x100 [ 54.505834][ T5947] ? hlock_class+0x4e/0x130 [ 54.507550][ T5947] ? __lock_acquire+0x163e/0x3ce0 [ 54.509220][ T5947] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 54.511994][ T5947] ? hlock_class+0x4e/0x130 [ 54.513972][ T5947] ? __lock_acquire+0xbdd/0x3ce0 [ 54.515807][ T5947] ? __pfx___lock_acquire+0x10/0x10 [ 54.517718][ T5947] __netif_receive_skb_list_core+0x357/0x950 [ 54.519744][ T5947] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 54.521903][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 54.524071][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 54.526316][ T5947] ? lock_acquire+0x2f/0xb0 [ 54.527961][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 54.530846][ T5947] netif_receive_skb_list_internal+0x753/0xdb0 [ 54.532913][ T5947] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 54.535084][ T5947] ? __pfx_eth_type_trans+0x10/0x10 [ 54.536833][ T5947] ? __build_skb_around+0x278/0x3b0 [ 54.538611][ T5947] netif_receive_skb_list+0x4f/0x4a0 [ 54.540469][ T5947] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 54.542865][ T5947] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 54.545991][ T5947] ? bpf_test_timer_continue+0x150/0x3d0 [ 54.548274][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 54.550040][ T5947] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 54.551985][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 54.553959][ T5947] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 54.555925][ T5947] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 54.558002][ T5947] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 54.559754][ T5947] ? 0xffffffffa00045c0 [ 54.561152][ T5947] ? 0xffffffffa00045c0 [ 54.562526][ T5947] ? 0xffffffffa00045c0 [ 54.564186][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 54.566541][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 54.568357][ T5947] ? lock_acquire+0x2f/0xb0 [ 54.569881][ T5947] ? __fget_files+0x40/0x3f0 [ 54.571394][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 54.573097][ T5947] ? fput+0x30/0x390 [ 54.574157][ T5947] ? __bpf_prog_get+0xa0/0x290 [ 54.575426][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 54.577053][ T5947] __sys_bpf+0xfc6/0x49a0 [ 54.578227][ T5947] ? find_held_lock+0x2d/0x110 [ 54.579489][ T5947] ? __pfx___sys_bpf+0x10/0x10 [ 54.580756][ T5947] ? __might_fault+0x13b/0x190 [ 54.582037][ T5947] ? __pfx_lock_release+0x10/0x10 [ 54.583423][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 54.584869][ T5947] ? lock_acquire+0x2f/0xb0 [ 54.586154][ T5947] ? __might_fault+0xe3/0x190 [ 54.587498][ T5947] ? xfd_validate_state+0x5d/0x180 [ 54.589138][ T5947] ? rcu_is_watching+0x12/0xc0 [ 54.590873][ T5947] __x64_sys_bpf+0x78/0xc0 [ 54.592411][ T5947] ? lockdep_hardirqs_on+0x7c/0x110 [ 54.594017][ T5947] do_syscall_64+0xcd/0x250 [ 54.595323][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.596868][ T5947] RIP: 0033:0x7ffb21d3be99 [ 54.598110][ T5947] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 54.603553][ T5947] RSP: 002b:00007ffb21cf6228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 54.606360][ T5947] RAX: ffffffffffffffda RBX: 00007ffb21dc6328 RCX: 00007ffb21d3be99 [ 54.608876][ T5947] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 54.610958][ T5947] RBP: 00007ffb21dc6320 R08: 00007ffb21cf66c0 R09: 00007ffb21cf66c0 [ 54.613392][ T5947] R10: 00007ffb21cf66c0 R11: 0000000000000246 R12: 00007ffb21d93074 [ 54.615824][ T5947] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe38c46e08 [ 54.618451][ T5947] [ 54.619620][ T5947] BUG: Bad page state in process syz-executor153 pfn:36473 [ 54.622127][ T5947] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x36473 [ 54.625594][ T5947] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 54.627901][ T5947] raw: 00fff00000000000 dead000000000040 ffff88802a725000 0000000000000000 [ 54.630351][ T5947] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 54.632612][ T5947] page dumped because: page_pool leak [ 54.634183][ T5947] page_owner tracks the page as allocated [ 54.636082][ T5947] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5947, tgid 5942 (syz-executor153), ts 50555313772, free_ts 48680551480 [ 54.640901][ T5947] post_alloc_hook+0x2d1/0x350 [ 54.642212][ T5947] get_page_from_freelist+0x101e/0x3070 [ 54.643741][ T5947] __alloc_pages_noprof+0x223/0x25a0 [ 54.645607][ T5947] alloc_pages_bulk_noprof+0x77c/0x1110 [ 54.647338][ T5947] __page_pool_alloc_pages_slow+0x18f/0x770 [ 54.648975][ T5947] page_pool_alloc_netmem+0xc4/0x160 [ 54.650532][ T5947] page_pool_alloc_pages+0x1a/0x60 [ 54.652092][ T5947] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 54.653827][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 54.655453][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 54.656950][ T5947] __sys_bpf+0xfc6/0x49a0 [ 54.658296][ T5947] __x64_sys_bpf+0x78/0xc0 [ 54.659698][ T5947] do_syscall_64+0xcd/0x250 [ 54.661212][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.663046][ T5947] page last free pid 5924 tgid 5924 stack trace: [ 54.665365][ T5947] free_unref_page+0x5f4/0xdc0 [ 54.666905][ T5947] __folio_put+0x30d/0x3d0 [ 54.668391][ T5947] put_page+0x21e/0x280 [ 54.669554][ T5947] anon_pipe_buf_release+0x11a/0x240 [ 54.670992][ T5947] pipe_read+0x641/0x13f0 [ 54.672485][ T5947] vfs_read+0xa4c/0xbe0 [ 54.673628][ T5947] ksys_read+0x1fa/0x260 [ 54.674832][ T5947] do_syscall_64+0xcd/0x250 [ 54.676051][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.677653][ T5947] Modules linked in: [ 54.678702][ T5947] CPU: 3 UID: 0 PID: 5947 Comm: syz-executor153 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 54.682104][ T5947] Tainted: [B]=BAD_PAGE [ 54.683260][ T5947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 54.686183][ T5947] Call Trace: [ 54.687085][ T5947] [ 54.687837][ T5947] dump_stack_lvl+0x16c/0x1f0 [ 54.689145][ T5947] bad_page+0xb3/0x1f0 [ 54.690479][ T5947] ? __pfx_bad_page+0x10/0x10 [ 54.692204][ T5947] ? page_bad_reason+0x9d/0x1e0 [ 54.693955][ T5947] free_unref_page+0x657/0xdc0 [ 54.695237][ T5947] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 54.696819][ T5947] ? __phys_addr+0xc6/0x150 [ 54.698070][ T5947] skb_free_head+0xa0/0x1d0 [ 54.699283][ T5947] skb_release_data+0x560/0x730 [ 54.700573][ T5947] sk_skb_reason_drop+0x129/0x1a0 [ 54.701921][ T5947] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 54.703995][ T5947] ? kernel_text_address+0x8d/0x100 [ 54.705521][ T5947] ? hlock_class+0x4e/0x130 [ 54.706741][ T5947] ? __lock_acquire+0x163e/0x3ce0 [ 54.708093][ T5947] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 54.709970][ T5947] ? hlock_class+0x4e/0x130 [ 54.711180][ T5947] ? __lock_acquire+0xbdd/0x3ce0 [ 54.712499][ T5947] ? __pfx___lock_acquire+0x10/0x10 [ 54.714023][ T5947] __netif_receive_skb_list_core+0x357/0x950 [ 54.715695][ T5947] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 54.717483][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 54.718952][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 54.720840][ T5947] ? lock_acquire+0x2f/0xb0 [ 54.722219][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 54.724421][ T5947] netif_receive_skb_list_internal+0x753/0xdb0 [ 54.726276][ T5947] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 54.728137][ T5947] ? __pfx_eth_type_trans+0x10/0x10 [ 54.729692][ T5947] ? __build_skb_around+0x278/0x3b0 [ 54.731285][ T5947] netif_receive_skb_list+0x4f/0x4a0 [ 54.732669][ T5947] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 54.734496][ T5947] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 54.736450][ T5947] ? bpf_test_timer_continue+0x150/0x3d0 [ 54.738033][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 54.739589][ T5947] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 54.741180][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 54.742942][ T5947] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 54.744677][ T5947] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 54.746391][ T5947] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 54.748022][ T5947] ? 0xffffffffa00045c0 [ 54.749460][ T5947] ? 0xffffffffa00045c0 [ 54.750777][ T5947] ? 0xffffffffa00045c0 [ 54.751910][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 54.753925][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 54.755528][ T5947] ? lock_acquire+0x2f/0xb0 [ 54.756731][ T5947] ? __fget_files+0x40/0x3f0 [ 54.757919][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 54.759423][ T5947] ? fput+0x30/0x390 [ 54.760464][ T5947] ? __bpf_prog_get+0xa0/0x290 [ 54.761776][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 54.763463][ T5947] __sys_bpf+0xfc6/0x49a0 [ 54.764564][ T5947] ? find_held_lock+0x2d/0x110 [ 54.765924][ T5947] ? __pfx___sys_bpf+0x10/0x10 [ 54.767569][ T5947] ? __might_fault+0x13b/0x190 [ 54.768814][ T5947] ? __pfx_lock_release+0x10/0x10 [ 54.770109][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 54.771499][ T5947] ? lock_acquire+0x2f/0xb0 [ 54.772684][ T5947] ? __might_fault+0xe3/0x190 [ 54.773931][ T5947] ? xfd_validate_state+0x5d/0x180 [ 54.775244][ T5947] ? rcu_is_watching+0x12/0xc0 [ 54.776422][ T5947] __x64_sys_bpf+0x78/0xc0 [ 54.777627][ T5947] ? lockdep_hardirqs_on+0x7c/0x110 [ 54.779181][ T5947] do_syscall_64+0xcd/0x250 [ 54.780490][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.782061][ T5947] RIP: 0033:0x7ffb21d3be99 [ 54.783415][ T5947] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 54.789099][ T5947] RSP: 002b:00007ffb21cf6228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 54.791579][ T5947] RAX: ffffffffffffffda RBX: 00007ffb21dc6328 RCX: 00007ffb21d3be99 [ 54.793806][ T5947] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 54.795944][ T5947] RBP: 00007ffb21dc6320 R08: 00007ffb21cf66c0 R09: 00007ffb21cf66c0 [ 54.798189][ T5947] R10: 00007ffb21cf66c0 R11: 0000000000000246 R12: 00007ffb21d93074 [ 54.800284][ T5947] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe38c46e08 [ 54.802404][ T5947] [ 54.803347][ T5947] BUG: Bad page state in process syz-executor153 pfn:36472 [ 54.805342][ T5947] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x36472 [ 54.807828][ T5947] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 54.809863][ T5947] raw: 00fff00000000000 dead000000000040 ffff88802a725000 0000000000000000 [ 54.812252][ T5947] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 54.814937][ T5947] page dumped because: page_pool leak [ 54.816451][ T5947] page_owner tracks the page as allocated [ 54.818109][ T5947] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5947, tgid 5942 (syz-executor153), ts 50555309702, free_ts 48680547432 [ 54.822839][ T5947] post_alloc_hook+0x2d1/0x350 [ 54.824136][ T5947] get_page_from_freelist+0x101e/0x3070 [ 54.825630][ T5947] __alloc_pages_noprof+0x223/0x25a0 [ 54.827063][ T5947] alloc_pages_bulk_noprof+0x77c/0x1110 [ 54.828542][ T5947] __page_pool_alloc_pages_slow+0x18f/0x770 [ 54.830337][ T5947] page_pool_alloc_netmem+0xc4/0x160 [ 54.832258][ T5947] page_pool_alloc_pages+0x1a/0x60 [ 54.833636][ T5947] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 54.835350][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 54.836749][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 54.838314][ T5947] __sys_bpf+0xfc6/0x49a0 [ 54.839544][ T5947] __x64_sys_bpf+0x78/0xc0 [ 54.840816][ T5947] do_syscall_64+0xcd/0x250 [ 54.842183][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.844047][ T5947] page last free pid 5924 tgid 5924 stack trace: [ 54.846110][ T5947] free_unref_page+0x5f4/0xdc0 [ 54.847597][ T5947] __folio_put+0x30d/0x3d0 [ 54.848898][ T5947] put_page+0x21e/0x280 [ 54.850032][ T5947] anon_pipe_buf_release+0x11a/0x240 [ 54.851448][ T5947] pipe_read+0x641/0x13f0 [ 54.852593][ T5947] vfs_read+0xa4c/0xbe0 [ 54.853708][ T5947] ksys_read+0x1fa/0x260 [ 54.854870][ T5947] do_syscall_64+0xcd/0x250 [ 54.856085][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.857684][ T5947] Modules linked in: [ 54.858728][ T5947] CPU: 3 UID: 0 PID: 5947 Comm: syz-executor153 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 54.861969][ T5947] Tainted: [B]=BAD_PAGE [ 54.863036][ T5947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 54.866410][ T5947] Call Trace: [ 54.867739][ T5947] [ 54.868684][ T5947] dump_stack_lvl+0x16c/0x1f0 [ 54.869981][ T5947] bad_page+0xb3/0x1f0 [ 54.871139][ T5947] ? __pfx_bad_page+0x10/0x10 [ 54.872713][ T5947] ? page_bad_reason+0x9d/0x1e0 [ 54.874051][ T5947] free_unref_page+0x657/0xdc0 [ 54.875383][ T5947] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 54.877211][ T5947] ? __phys_addr+0xc6/0x150 [ 54.878575][ T5947] skb_free_head+0xa0/0x1d0 [ 54.879916][ T5947] skb_release_data+0x560/0x730 [ 54.881346][ T5947] sk_skb_reason_drop+0x129/0x1a0 [ 54.882725][ T5947] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 54.884719][ T5947] ? kernel_text_address+0x8d/0x100 [ 54.886108][ T5947] ? hlock_class+0x4e/0x130 [ 54.887267][ T5947] ? __lock_acquire+0x163e/0x3ce0 [ 54.888624][ T5947] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 54.890370][ T5947] ? hlock_class+0x4e/0x130 [ 54.891516][ T5947] ? __lock_acquire+0xbdd/0x3ce0 [ 54.892999][ T5947] ? __pfx___lock_acquire+0x10/0x10 [ 54.894370][ T5947] __netif_receive_skb_list_core+0x357/0x950 [ 54.895885][ T5947] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 54.897548][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 54.898937][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 54.900611][ T5947] ? lock_acquire+0x2f/0xb0 [ 54.901913][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 54.904401][ T5947] netif_receive_skb_list_internal+0x753/0xdb0 [ 54.906350][ T5947] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 54.908434][ T5947] ? __pfx_eth_type_trans+0x10/0x10 [ 54.909941][ T5947] ? __build_skb_around+0x278/0x3b0 [ 54.911426][ T5947] netif_receive_skb_list+0x4f/0x4a0 [ 54.913011][ T5947] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 54.914723][ T5947] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 54.916536][ T5947] ? bpf_test_timer_continue+0x150/0x3d0 [ 54.918146][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 54.919629][ T5947] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 54.921394][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 54.923040][ T5947] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 54.924684][ T5947] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 54.926241][ T5947] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 54.927637][ T5947] ? 0xffffffffa00045c0 [ 54.928744][ T5947] ? 0xffffffffa00045c0 [ 54.929894][ T5947] ? 0xffffffffa00045c0 [ 54.930982][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 54.932531][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 54.934140][ T5947] ? lock_acquire+0x2f/0xb0 [ 54.935404][ T5947] ? __fget_files+0x40/0x3f0 [ 54.936741][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 54.938381][ T5947] ? fput+0x30/0x390 [ 54.939427][ T5947] ? __bpf_prog_get+0xa0/0x290 [ 54.940672][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 54.942388][ T5947] __sys_bpf+0xfc6/0x49a0 [ 54.943558][ T5947] ? find_held_lock+0x2d/0x110 [ 54.944822][ T5947] ? __pfx___sys_bpf+0x10/0x10 [ 54.946353][ T5947] ? __might_fault+0x13b/0x190 [ 54.947806][ T5947] ? __pfx_lock_release+0x10/0x10 [ 54.949223][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 54.950956][ T5947] ? lock_acquire+0x2f/0xb0 [ 54.952289][ T5947] ? __might_fault+0xe3/0x190 [ 54.953728][ T5947] ? xfd_validate_state+0x5d/0x180 [ 54.955145][ T5947] ? rcu_is_watching+0x12/0xc0 [ 54.956444][ T5947] __x64_sys_bpf+0x78/0xc0 [ 54.957672][ T5947] ? lockdep_hardirqs_on+0x7c/0x110 [ 54.959093][ T5947] do_syscall_64+0xcd/0x250 [ 54.960343][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.962101][ T5947] RIP: 0033:0x7ffb21d3be99 [ 54.963455][ T5947] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 54.968407][ T5947] RSP: 002b:00007ffb21cf6228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 54.970704][ T5947] RAX: ffffffffffffffda RBX: 00007ffb21dc6328 RCX: 00007ffb21d3be99 [ 54.972798][ T5947] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 54.975093][ T5947] RBP: 00007ffb21dc6320 R08: 00007ffb21cf66c0 R09: 00007ffb21cf66c0 [ 54.977190][ T5947] R10: 00007ffb21cf66c0 R11: 0000000000000246 R12: 00007ffb21d93074 [ 54.979217][ T5947] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe38c46e08 [ 54.981240][ T5947] [ 54.982172][ T5947] BUG: Bad page state in process syz-executor153 pfn:36471 [ 54.984147][ T5947] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x36471 [ 54.986465][ T5947] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 54.988320][ T5947] raw: 00fff00000000000 dead000000000040 ffff88802a725000 0000000000000000 [ 54.990538][ T5947] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 54.992735][ T5947] page dumped because: page_pool leak [ 54.994145][ T5947] page_owner tracks the page as allocated [ 54.995668][ T5947] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5947, tgid 5942 (syz-executor153), ts 50555305734, free_ts 48680532378 [ 55.000045][ T5947] post_alloc_hook+0x2d1/0x350 [ 55.001294][ T5947] get_page_from_freelist+0x101e/0x3070 [ 55.002662][ T5947] __alloc_pages_noprof+0x223/0x25a0 [ 55.004006][ T5947] alloc_pages_bulk_noprof+0x77c/0x1110 [ 55.005519][ T5947] __page_pool_alloc_pages_slow+0x18f/0x770 [ 55.007043][ T5947] page_pool_alloc_netmem+0xc4/0x160 [ 55.008430][ T5947] page_pool_alloc_pages+0x1a/0x60 [ 55.009771][ T5947] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 55.011377][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 55.012750][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 55.014157][ T5947] __sys_bpf+0xfc6/0x49a0 [ 55.015333][ T5947] __x64_sys_bpf+0x78/0xc0 [ 55.016506][ T5947] do_syscall_64+0xcd/0x250 [ 55.017737][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.019504][ T5947] page last free pid 5924 tgid 5924 stack trace: [ 55.021248][ T5947] free_unref_page+0x5f4/0xdc0 [ 55.022518][ T5947] __folio_put+0x30d/0x3d0 [ 55.023712][ T5947] put_page+0x21e/0x280 [ 55.024928][ T5947] anon_pipe_buf_release+0x11a/0x240 [ 55.026519][ T5947] pipe_read+0x641/0x13f0 [ 55.027750][ T5947] vfs_read+0xa4c/0xbe0 [ 55.029307][ T5947] ksys_read+0x1fa/0x260 [ 55.030878][ T5947] do_syscall_64+0xcd/0x250 [ 55.032400][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.034520][ T5947] Modules linked in: [ 55.035560][ T5947] CPU: 3 UID: 0 PID: 5947 Comm: syz-executor153 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 55.038812][ T5947] Tainted: [B]=BAD_PAGE [ 55.039886][ T5947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 55.042710][ T5947] Call Trace: [ 55.043609][ T5947] [ 55.044448][ T5947] dump_stack_lvl+0x16c/0x1f0 [ 55.045715][ T5947] bad_page+0xb3/0x1f0 [ 55.046757][ T5947] ? __pfx_bad_page+0x10/0x10 [ 55.048151][ T5947] ? page_bad_reason+0x9d/0x1e0 [ 55.049462][ T5947] free_unref_page+0x657/0xdc0 [ 55.050707][ T5947] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 55.052288][ T5947] ? __phys_addr+0xc6/0x150 [ 55.053497][ T5947] skb_free_head+0xa0/0x1d0 [ 55.054708][ T5947] skb_release_data+0x560/0x730 [ 55.056011][ T5947] sk_skb_reason_drop+0x129/0x1a0 [ 55.057364][ T5947] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 55.059452][ T5947] ? kernel_text_address+0x8d/0x100 [ 55.061372][ T5947] ? hlock_class+0x4e/0x130 [ 55.063253][ T5947] ? __lock_acquire+0x163e/0x3ce0 [ 55.064901][ T5947] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 55.066879][ T5947] ? hlock_class+0x4e/0x130 [ 55.068087][ T5947] ? __lock_acquire+0xbdd/0x3ce0 [ 55.069637][ T5947] ? __pfx___lock_acquire+0x10/0x10 [ 55.071070][ T5947] __netif_receive_skb_list_core+0x357/0x950 [ 55.072770][ T5947] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 55.074706][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 55.076152][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 55.077966][ T5947] ? lock_acquire+0x2f/0xb0 [ 55.079238][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 55.080937][ T5947] netif_receive_skb_list_internal+0x753/0xdb0 [ 55.082534][ T5947] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 55.084424][ T5947] ? __pfx_eth_type_trans+0x10/0x10 [ 55.085731][ T5947] ? __build_skb_around+0x278/0x3b0 [ 55.087046][ T5947] netif_receive_skb_list+0x4f/0x4a0 [ 55.088358][ T5947] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 55.089864][ T5947] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 55.091530][ T5947] ? bpf_test_timer_continue+0x150/0x3d0 [ 55.093009][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 55.094376][ T5947] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 55.095869][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 55.097464][ T5947] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 55.099007][ T5947] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 55.100544][ T5947] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 55.101952][ T5947] ? 0xffffffffa00045c0 [ 55.103007][ T5947] ? 0xffffffffa00045c0 [ 55.104090][ T5947] ? 0xffffffffa00045c0 [ 55.105214][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 55.106752][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 55.108306][ T5947] ? lock_acquire+0x2f/0xb0 [ 55.109583][ T5947] ? __fget_files+0x40/0x3f0 [ 55.111064][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 55.112809][ T5947] ? fput+0x30/0x390 [ 55.114222][ T5947] ? __bpf_prog_get+0xa0/0x290 [ 55.115761][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 55.117681][ T5947] __sys_bpf+0xfc6/0x49a0 [ 55.119106][ T5947] ? find_held_lock+0x2d/0x110 [ 55.120368][ T5947] ? __pfx___sys_bpf+0x10/0x10 [ 55.121511][ T5947] ? __might_fault+0x13b/0x190 [ 55.122765][ T5947] ? __pfx_lock_release+0x10/0x10 [ 55.124052][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 55.125413][ T5947] ? lock_acquire+0x2f/0xb0 [ 55.126778][ T5947] ? __might_fault+0xe3/0x190 [ 55.128146][ T5947] ? xfd_validate_state+0x5d/0x180 [ 55.129624][ T5947] ? rcu_is_watching+0x12/0xc0 [ 55.130902][ T5947] __x64_sys_bpf+0x78/0xc0 [ 55.132189][ T5947] ? lockdep_hardirqs_on+0x7c/0x110 [ 55.133528][ T5947] do_syscall_64+0xcd/0x250 [ 55.134704][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.136193][ T5947] RIP: 0033:0x7ffb21d3be99 [ 55.137330][ T5947] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 55.142392][ T5947] RSP: 002b:00007ffb21cf6228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 55.144798][ T5947] RAX: ffffffffffffffda RBX: 00007ffb21dc6328 RCX: 00007ffb21d3be99 [ 55.147412][ T5947] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 55.149986][ T5947] RBP: 00007ffb21dc6320 R08: 00007ffb21cf66c0 R09: 00007ffb21cf66c0 [ 55.152263][ T5947] R10: 00007ffb21cf66c0 R11: 0000000000000246 R12: 00007ffb21d93074 [ 55.154288][ T5947] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe38c46e08 [ 55.156329][ T5947] [ 55.157261][ T5947] BUG: Bad page state in process syz-executor153 pfn:36470 [ 55.159135][ T5947] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x36470 [ 55.161363][ T5947] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 55.163279][ T5947] raw: 00fff00000000000 dead000000000040 ffff88802a725000 0000000000000000 [ 55.165531][ T5947] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 55.167698][ T5947] page dumped because: page_pool leak [ 55.169072][ T5947] page_owner tracks the page as allocated [ 55.170503][ T5947] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5947, tgid 5942 (syz-executor153), ts 50555301372, free_ts 48680527828 [ 55.174944][ T5947] post_alloc_hook+0x2d1/0x350 [ 55.176202][ T5947] get_page_from_freelist+0x101e/0x3070 [ 55.177676][ T5947] __alloc_pages_noprof+0x223/0x25a0 [ 55.179010][ T5947] alloc_pages_bulk_noprof+0x77c/0x1110 [ 55.180445][ T5947] __page_pool_alloc_pages_slow+0x18f/0x770 [ 55.181987][ T5947] page_pool_alloc_netmem+0xc4/0x160 [ 55.183588][ T5947] page_pool_alloc_pages+0x1a/0x60 [ 55.185007][ T5947] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 55.186828][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 55.188455][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 55.190799][ T5947] __sys_bpf+0xfc6/0x49a0 [ 55.192010][ T5947] __x64_sys_bpf+0x78/0xc0 [ 55.193208][ T5947] do_syscall_64+0xcd/0x250 [ 55.194535][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.196061][ T5947] page last free pid 5924 tgid 5924 stack trace: [ 55.197782][ T5947] free_unref_page+0x5f4/0xdc0 [ 55.199091][ T5947] __folio_put+0x30d/0x3d0 [ 55.200363][ T5947] put_page+0x21e/0x280 [ 55.201557][ T5947] anon_pipe_buf_release+0x11a/0x240 [ 55.203518][ T5947] pipe_read+0x641/0x13f0 [ 55.204768][ T5947] vfs_read+0xa4c/0xbe0 [ 55.206194][ T5947] ksys_read+0x1fa/0x260 [ 55.207539][ T5947] do_syscall_64+0xcd/0x250 [ 55.208933][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.210750][ T5947] Modules linked in: [ 55.211882][ T5947] CPU: 3 UID: 0 PID: 5947 Comm: syz-executor153 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 55.215363][ T5947] Tainted: [B]=BAD_PAGE [ 55.216471][ T5947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 55.219425][ T5947] Call Trace: [ 55.220323][ T5947] [ 55.221107][ T5947] dump_stack_lvl+0x16c/0x1f0 [ 55.222589][ T5947] bad_page+0xb3/0x1f0 [ 55.223738][ T5947] ? __pfx_bad_page+0x10/0x10 [ 55.225008][ T5947] ? page_bad_reason+0x9d/0x1e0 [ 55.226309][ T5947] free_unref_page+0x657/0xdc0 [ 55.227573][ T5947] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 55.229169][ T5947] ? __phys_addr+0xc6/0x150 [ 55.230380][ T5947] skb_free_head+0xa0/0x1d0 [ 55.231565][ T5947] skb_release_data+0x560/0x730 [ 55.232845][ T5947] sk_skb_reason_drop+0x129/0x1a0 [ 55.234200][ T5947] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 55.235903][ T5947] ? kernel_text_address+0x8d/0x100 [ 55.237270][ T5947] ? hlock_class+0x4e/0x130 [ 55.238462][ T5947] ? __lock_acquire+0x163e/0x3ce0 [ 55.239744][ T5947] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 55.241610][ T5947] ? hlock_class+0x4e/0x130 [ 55.242816][ T5947] ? __lock_acquire+0xbdd/0x3ce0 [ 55.244312][ T5947] ? __pfx___lock_acquire+0x10/0x10 [ 55.245792][ T5947] __netif_receive_skb_list_core+0x357/0x950 [ 55.247588][ T5947] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 55.249497][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 55.251047][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 55.253048][ T5947] ? lock_acquire+0x2f/0xb0 [ 55.254547][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 55.256350][ T5947] netif_receive_skb_list_internal+0x753/0xdb0 [ 55.257963][ T5947] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 55.259679][ T5947] ? __pfx_eth_type_trans+0x10/0x10 [ 55.261168][ T5947] ? __build_skb_around+0x278/0x3b0 [ 55.262632][ T5947] netif_receive_skb_list+0x4f/0x4a0 [ 55.264236][ T5947] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 55.265878][ T5947] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 55.267682][ T5947] ? bpf_test_timer_continue+0x150/0x3d0 [ 55.269178][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 55.270577][ T5947] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 55.272122][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 55.273734][ T5947] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 55.275410][ T5947] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 55.277080][ T5947] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 55.278768][ T5947] ? 0xffffffffa00045c0 [ 55.279935][ T5947] ? 0xffffffffa00045c0 [ 55.281310][ T5947] ? 0xffffffffa00045c0 [ 55.282475][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 55.284245][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 55.285727][ T5947] ? lock_acquire+0x2f/0xb0 [ 55.286975][ T5947] ? __fget_files+0x40/0x3f0 [ 55.288206][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 55.289741][ T5947] ? fput+0x30/0x390 [ 55.290775][ T5947] ? __bpf_prog_get+0xa0/0x290 [ 55.292129][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 55.293679][ T5947] __sys_bpf+0xfc6/0x49a0 [ 55.294899][ T5947] ? find_held_lock+0x2d/0x110 [ 55.296185][ T5947] ? __pfx___sys_bpf+0x10/0x10 [ 55.297482][ T5947] ? __might_fault+0x13b/0x190 [ 55.298772][ T5947] ? __pfx_lock_release+0x10/0x10 [ 55.300111][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 55.301504][ T5947] ? lock_acquire+0x2f/0xb0 [ 55.302921][ T5947] ? __might_fault+0xe3/0x190 [ 55.304355][ T5947] ? xfd_validate_state+0x5d/0x180 [ 55.305715][ T5947] ? rcu_is_watching+0x12/0xc0 [ 55.307250][ T5947] __x64_sys_bpf+0x78/0xc0 [ 55.308516][ T5947] ? lockdep_hardirqs_on+0x7c/0x110 [ 55.310118][ T5947] do_syscall_64+0xcd/0x250 [ 55.311744][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.313475][ T5947] RIP: 0033:0x7ffb21d3be99 [ 55.314755][ T5947] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 55.319939][ T5947] RSP: 002b:00007ffb21cf6228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 55.322050][ T5947] RAX: ffffffffffffffda RBX: 00007ffb21dc6328 RCX: 00007ffb21d3be99 [ 55.324076][ T5947] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 55.326297][ T5947] RBP: 00007ffb21dc6320 R08: 00007ffb21cf66c0 R09: 00007ffb21cf66c0 [ 55.328917][ T5947] R10: 00007ffb21cf66c0 R11: 0000000000000246 R12: 00007ffb21d93074 [ 55.331093][ T5947] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe38c46e08 [ 55.333105][ T5947] [ 55.334022][ T5947] BUG: Bad page state in process syz-executor153 pfn:28937 [ 55.335907][ T5947] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28937 [ 55.338132][ T5947] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 55.339954][ T5947] raw: 00fff00000000000 dead000000000040 ffff88802a725000 0000000000000000 [ 55.342361][ T5947] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 55.344701][ T5947] page dumped because: page_pool leak [ 55.346175][ T5947] page_owner tracks the page as allocated [ 55.347673][ T5947] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5947, tgid 5942 (syz-executor153), ts 50555297489, free_ts 49937530631 [ 55.353306][ T5947] post_alloc_hook+0x2d1/0x350 [ 55.354791][ T5947] get_page_from_freelist+0x101e/0x3070 [ 55.356370][ T5947] __alloc_pages_noprof+0x223/0x25a0 [ 55.357860][ T5947] alloc_pages_bulk_noprof+0x77c/0x1110 [ 55.359410][ T5947] __page_pool_alloc_pages_slow+0x18f/0x770 [ 55.361005][ T5947] page_pool_alloc_netmem+0xc4/0x160 [ 55.362522][ T5947] page_pool_alloc_pages+0x1a/0x60 [ 55.364333][ T5947] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 55.366070][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 55.367511][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 55.369027][ T5947] __sys_bpf+0xfc6/0x49a0 [ 55.370155][ T5947] __x64_sys_bpf+0x78/0xc0 [ 55.371321][ T5947] do_syscall_64+0xcd/0x250 [ 55.372583][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.374113][ T5947] page last free pid 5932 tgid 5932 stack trace: [ 55.375810][ T5947] free_unref_page+0x5f4/0xdc0 [ 55.377077][ T5947] qlist_free_all+0x4e/0x120 [ 55.378323][ T5947] kasan_quarantine_reduce+0x192/0x1e0 [ 55.379757][ T5947] __kasan_slab_alloc+0x69/0x90 [ 55.381021][ T5947] __kmalloc_noprof+0x199/0x400 [ 55.382537][ T5947] tomoyo_realpath_from_path+0xb9/0x720 [ 55.384081][ T5947] tomoyo_path_perm+0x273/0x450 [ 55.385533][ T5947] security_inode_getattr+0x116/0x290 [ 55.387381][ T5947] vfs_fstat+0x53/0xd0 [ 55.388826][ T5947] vfs_fstatat+0x146/0x160 [ 55.390417][ T5947] __do_sys_newfstatat+0xa2/0x130 [ 55.391850][ T5947] do_syscall_64+0xcd/0x250 [ 55.393063][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.394674][ T5947] Modules linked in: [ 55.395682][ T5947] CPU: 3 UID: 0 PID: 5947 Comm: syz-executor153 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 55.398887][ T5947] Tainted: [B]=BAD_PAGE [ 55.399956][ T5947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 55.402693][ T5947] Call Trace: [ 55.403580][ T5947] [ 55.404383][ T5947] dump_stack_lvl+0x16c/0x1f0 [ 55.405631][ T5947] bad_page+0xb3/0x1f0 [ 55.406696][ T5947] ? __pfx_bad_page+0x10/0x10 [ 55.407998][ T5947] ? page_bad_reason+0x9d/0x1e0 [ 55.409317][ T5947] free_unref_page+0x657/0xdc0 [ 55.410589][ T5947] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 55.412202][ T5947] ? __phys_addr+0xc6/0x150 [ 55.413484][ T5947] skb_free_head+0xa0/0x1d0 [ 55.414808][ T5947] skb_release_data+0x560/0x730 [ 55.416243][ T5947] sk_skb_reason_drop+0x129/0x1a0 [ 55.417730][ T5947] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 55.419574][ T5947] ? kernel_text_address+0x8d/0x100 [ 55.420890][ T5947] ? hlock_class+0x4e/0x130 [ 55.422076][ T5947] ? __lock_acquire+0x163e/0x3ce0 [ 55.423342][ T5947] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 55.425157][ T5947] ? hlock_class+0x4e/0x130 [ 55.426307][ T5947] ? __lock_acquire+0xbdd/0x3ce0 [ 55.427587][ T5947] ? __pfx___lock_acquire+0x10/0x10 [ 55.428935][ T5947] __netif_receive_skb_list_core+0x357/0x950 [ 55.430566][ T5947] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 55.432350][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 55.433773][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 55.435550][ T5947] ? lock_acquire+0x2f/0xb0 [ 55.436828][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 55.438627][ T5947] netif_receive_skb_list_internal+0x753/0xdb0 [ 55.440262][ T5947] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 55.442008][ T5947] ? __pfx_eth_type_trans+0x10/0x10 [ 55.443373][ T5947] ? __build_skb_around+0x278/0x3b0 [ 55.444736][ T5947] netif_receive_skb_list+0x4f/0x4a0 [ 55.446251][ T5947] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 55.448153][ T5947] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 55.450060][ T5947] ? bpf_test_timer_continue+0x150/0x3d0 [ 55.451540][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 55.452924][ T5947] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 55.455048][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 55.456655][ T5947] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 55.458413][ T5947] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 55.460003][ T5947] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 55.461471][ T5947] ? 0xffffffffa00045c0 [ 55.462942][ T5947] ? 0xffffffffa00045c0 [ 55.464393][ T5947] ? 0xffffffffa00045c0 [ 55.465590][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 55.467351][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 55.469255][ T5947] ? lock_acquire+0x2f/0xb0 [ 55.470769][ T5947] ? __fget_files+0x40/0x3f0 [ 55.472100][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 55.473814][ T5947] ? fput+0x30/0x390 [ 55.474929][ T5947] ? __bpf_prog_get+0xa0/0x290 [ 55.476336][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 55.478514][ T5947] __sys_bpf+0xfc6/0x49a0 [ 55.480038][ T5947] ? find_held_lock+0x2d/0x110 [ 55.481772][ T5947] ? __pfx___sys_bpf+0x10/0x10 [ 55.483391][ T5947] ? __might_fault+0x13b/0x190 [ 55.484867][ T5947] ? __pfx_lock_release+0x10/0x10 [ 55.486326][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 55.487914][ T5947] ? lock_acquire+0x2f/0xb0 [ 55.489106][ T5947] ? __might_fault+0xe3/0x190 [ 55.490557][ T5947] ? xfd_validate_state+0x5d/0x180 [ 55.492002][ T5947] ? rcu_is_watching+0x12/0xc0 [ 55.493381][ T5947] __x64_sys_bpf+0x78/0xc0 [ 55.494543][ T5947] ? lockdep_hardirqs_on+0x7c/0x110 [ 55.495891][ T5947] do_syscall_64+0xcd/0x250 [ 55.497094][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.499142][ T5947] RIP: 0033:0x7ffb21d3be99 [ 55.500694][ T5947] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 55.508399][ T5947] RSP: 002b:00007ffb21cf6228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 55.511668][ T5947] RAX: ffffffffffffffda RBX: 00007ffb21dc6328 RCX: 00007ffb21d3be99 [ 55.514275][ T5947] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 55.517006][ T5947] RBP: 00007ffb21dc6320 R08: 00007ffb21cf66c0 R09: 00007ffb21cf66c0 [ 55.519486][ T5947] R10: 00007ffb21cf66c0 R11: 0000000000000246 R12: 00007ffb21d93074 [ 55.522089][ T5947] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe38c46e08 [ 55.524948][ T5947] [ 55.526195][ T5947] BUG: Bad page state in process syz-executor153 pfn:28936 [ 55.528949][ T5947] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28936 [ 55.532582][ T5947] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 55.535026][ T5947] raw: 00fff00000000000 dead000000000040 ffff88802a725000 0000000000000000 [ 55.538361][ T5947] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 55.541511][ T5947] page dumped because: page_pool leak [ 55.543434][ T5947] page_owner tracks the page as allocated [ 55.545408][ T5947] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5947, tgid 5942 (syz-executor153), ts 50555293052, free_ts 49937530631 [ 55.552099][ T5947] post_alloc_hook+0x2d1/0x350 [ 55.553740][ T5947] get_page_from_freelist+0x101e/0x3070 [ 55.555554][ T5947] __alloc_pages_noprof+0x223/0x25a0 [ 55.557340][ T5947] alloc_pages_bulk_noprof+0x77c/0x1110 [ 55.559164][ T5947] __page_pool_alloc_pages_slow+0x18f/0x770 [ 55.561130][ T5947] page_pool_alloc_netmem+0xc4/0x160 [ 55.562881][ T5947] page_pool_alloc_pages+0x1a/0x60 [ 55.564886][ T5947] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 55.567297][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 55.569061][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 55.571202][ T5947] __sys_bpf+0xfc6/0x49a0 [ 55.572744][ T5947] __x64_sys_bpf+0x78/0xc0 [ 55.574456][ T5947] do_syscall_64+0xcd/0x250 [ 55.576030][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.578088][ T5947] page last free pid 5932 tgid 5932 stack trace: [ 55.580170][ T5947] free_unref_page+0x5f4/0xdc0 [ 55.581754][ T5947] qlist_free_all+0x4e/0x120 [ 55.583304][ T5947] kasan_quarantine_reduce+0x192/0x1e0 [ 55.585321][ T5947] __kasan_slab_alloc+0x69/0x90 [ 55.587009][ T5947] __kmalloc_noprof+0x199/0x400 [ 55.588702][ T5947] tomoyo_realpath_from_path+0xb9/0x720 [ 55.590641][ T5947] tomoyo_path_perm+0x273/0x450 [ 55.592183][ T5947] security_inode_getattr+0x116/0x290 [ 55.593811][ T5947] vfs_fstat+0x53/0xd0 [ 55.595364][ T5947] vfs_fstatat+0x146/0x160 [ 55.596896][ T5947] __do_sys_newfstatat+0xa2/0x130 [ 55.598604][ T5947] do_syscall_64+0xcd/0x250 [ 55.600011][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.602041][ T5947] Modules linked in: [ 55.603273][ T5947] CPU: 3 UID: 0 PID: 5947 Comm: syz-executor153 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 55.606843][ T5947] Tainted: [B]=BAD_PAGE [ 55.607949][ T5947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 55.610922][ T5947] Call Trace: [ 55.612158][ T5947] [ 55.613015][ T5947] dump_stack_lvl+0x16c/0x1f0 [ 55.614283][ T5947] bad_page+0xb3/0x1f0 [ 55.615369][ T5947] ? __pfx_bad_page+0x10/0x10 [ 55.616770][ T5947] ? page_bad_reason+0x9d/0x1e0 [ 55.618153][ T5947] free_unref_page+0x657/0xdc0 [ 55.619419][ T5947] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 55.621058][ T5947] ? __phys_addr+0xc6/0x150 [ 55.622326][ T5947] skb_free_head+0xa0/0x1d0 [ 55.623588][ T5947] skb_release_data+0x560/0x730 [ 55.625465][ T5947] sk_skb_reason_drop+0x129/0x1a0 [ 55.627050][ T5947] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 55.629098][ T5947] ? kernel_text_address+0x8d/0x100 [ 55.630675][ T5947] ? hlock_class+0x4e/0x130 [ 55.631910][ T5947] ? __lock_acquire+0x163e/0x3ce0 [ 55.633244][ T5947] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 55.635105][ T5947] ? hlock_class+0x4e/0x130 [ 55.636316][ T5947] ? __lock_acquire+0xbdd/0x3ce0 [ 55.637655][ T5947] ? __pfx___lock_acquire+0x10/0x10 [ 55.639035][ T5947] __netif_receive_skb_list_core+0x357/0x950 [ 55.640577][ T5947] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 55.642903][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 55.644470][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 55.646169][ T5947] ? lock_acquire+0x2f/0xb0 [ 55.647673][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 55.649671][ T5947] netif_receive_skb_list_internal+0x753/0xdb0 [ 55.651283][ T5947] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 55.652996][ T5947] ? __pfx_eth_type_trans+0x10/0x10 [ 55.654364][ T5947] ? __build_skb_around+0x278/0x3b0 [ 55.655719][ T5947] netif_receive_skb_list+0x4f/0x4a0 [ 55.657298][ T5947] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 55.658947][ T5947] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 55.660672][ T5947] ? bpf_test_timer_continue+0x150/0x3d0 [ 55.662161][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 55.663564][ T5947] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 55.665402][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 55.667160][ T5947] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 55.668817][ T5947] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 55.670669][ T5947] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 55.672249][ T5947] ? 0xffffffffa00045c0 [ 55.673446][ T5947] ? 0xffffffffa00045c0 [ 55.674614][ T5947] ? 0xffffffffa00045c0 [ 55.675792][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 55.677447][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 55.678857][ T5947] ? lock_acquire+0x2f/0xb0 [ 55.680049][ T5947] ? __fget_files+0x40/0x3f0 [ 55.681290][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 55.682832][ T5947] ? fput+0x30/0x390 [ 55.683945][ T5947] ? __bpf_prog_get+0xa0/0x290 [ 55.685217][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 55.686740][ T5947] __sys_bpf+0xfc6/0x49a0 [ 55.687898][ T5947] ? find_held_lock+0x2d/0x110 [ 55.689178][ T5947] ? __pfx___sys_bpf+0x10/0x10 [ 55.690437][ T5947] ? __might_fault+0x13b/0x190 [ 55.691701][ T5947] ? __pfx_lock_release+0x10/0x10 [ 55.693009][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 55.694403][ T5947] ? lock_acquire+0x2f/0xb0 [ 55.695635][ T5947] ? __might_fault+0xe3/0x190 [ 55.697070][ T5947] ? xfd_validate_state+0x5d/0x180 [ 55.698608][ T5947] ? rcu_is_watching+0x12/0xc0 [ 55.700031][ T5947] __x64_sys_bpf+0x78/0xc0 [ 55.701517][ T5947] ? lockdep_hardirqs_on+0x7c/0x110 [ 55.703197][ T5947] do_syscall_64+0xcd/0x250 [ 55.704745][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.706571][ T5947] RIP: 0033:0x7ffb21d3be99 [ 55.707856][ T5947] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 55.713205][ T5947] RSP: 002b:00007ffb21cf6228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 55.715476][ T5947] RAX: ffffffffffffffda RBX: 00007ffb21dc6328 RCX: 00007ffb21d3be99 [ 55.717565][ T5947] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 55.719641][ T5947] RBP: 00007ffb21dc6320 R08: 00007ffb21cf66c0 R09: 00007ffb21cf66c0 [ 55.721700][ T5947] R10: 00007ffb21cf66c0 R11: 0000000000000246 R12: 00007ffb21d93074 [ 55.723709][ T5947] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe38c46e08 [ 55.726126][ T5947] [ 55.727167][ T5947] BUG: Bad page state in process syz-executor153 pfn:28935 [ 55.729105][ T5947] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28935 [ 55.731576][ T5947] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 55.733670][ T5947] raw: 00fff00000000000 dead000000000040 ffff88802a725000 0000000000000000 [ 55.736603][ T5947] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 55.739306][ T5947] page dumped because: page_pool leak [ 55.740803][ T5947] page_owner tracks the page as allocated [ 55.742149][ T5947] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5947, tgid 5942 (syz-executor153), ts 50555288695, free_ts 49937530631 [ 55.746879][ T5947] post_alloc_hook+0x2d1/0x350 [ 55.748151][ T5947] get_page_from_freelist+0x101e/0x3070 [ 55.749593][ T5947] __alloc_pages_noprof+0x223/0x25a0 [ 55.750949][ T5947] alloc_pages_bulk_noprof+0x77c/0x1110 [ 55.752382][ T5947] __page_pool_alloc_pages_slow+0x18f/0x770 [ 55.753864][ T5947] page_pool_alloc_netmem+0xc4/0x160 [ 55.755244][ T5947] page_pool_alloc_pages+0x1a/0x60 [ 55.756537][ T5947] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 55.758157][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 55.759526][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 55.760994][ T5947] __sys_bpf+0xfc6/0x49a0 [ 55.762144][ T5947] __x64_sys_bpf+0x78/0xc0 [ 55.763320][ T5947] do_syscall_64+0xcd/0x250 [ 55.764555][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.766112][ T5947] page last free pid 5932 tgid 5932 stack trace: [ 55.767777][ T5947] free_unref_page+0x5f4/0xdc0 [ 55.769048][ T5947] qlist_free_all+0x4e/0x120 [ 55.770282][ T5947] kasan_quarantine_reduce+0x192/0x1e0 [ 55.771710][ T5947] __kasan_slab_alloc+0x69/0x90 [ 55.772984][ T5947] __kmalloc_noprof+0x199/0x400 [ 55.774320][ T5947] tomoyo_realpath_from_path+0xb9/0x720 [ 55.775711][ T5947] tomoyo_path_perm+0x273/0x450 [ 55.776945][ T5947] security_inode_getattr+0x116/0x290 [ 55.778520][ T5947] vfs_fstat+0x53/0xd0 [ 55.779744][ T5947] vfs_fstatat+0x146/0x160 [ 55.780882][ T5947] __do_sys_newfstatat+0xa2/0x130 [ 55.782180][ T5947] do_syscall_64+0xcd/0x250 [ 55.783541][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.785396][ T5947] Modules linked in: [ 55.786594][ T5947] CPU: 3 UID: 0 PID: 5947 Comm: syz-executor153 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 55.790348][ T5947] Tainted: [B]=BAD_PAGE [ 55.791455][ T5947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 55.794746][ T5947] Call Trace: [ 55.795795][ T5947] [ 55.796695][ T5947] dump_stack_lvl+0x16c/0x1f0 [ 55.798116][ T5947] bad_page+0xb3/0x1f0 [ 55.799305][ T5947] ? __pfx_bad_page+0x10/0x10 [ 55.800578][ T5947] ? page_bad_reason+0x9d/0x1e0 [ 55.801908][ T5947] free_unref_page+0x657/0xdc0 [ 55.803552][ T5947] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 55.805217][ T5947] ? __phys_addr+0xc6/0x150 [ 55.806401][ T5947] skb_free_head+0xa0/0x1d0 [ 55.807560][ T5947] skb_release_data+0x560/0x730 [ 55.808979][ T5947] sk_skb_reason_drop+0x129/0x1a0 [ 55.810356][ T5947] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 55.812341][ T5947] ? kernel_text_address+0x8d/0x100 [ 55.813740][ T5947] ? hlock_class+0x4e/0x130 [ 55.814948][ T5947] ? __lock_acquire+0x163e/0x3ce0 [ 55.816300][ T5947] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 55.818335][ T5947] ? hlock_class+0x4e/0x130 [ 55.819766][ T5947] ? __lock_acquire+0xbdd/0x3ce0 [ 55.821337][ T5947] ? __pfx___lock_acquire+0x10/0x10 [ 55.823074][ T5947] __netif_receive_skb_list_core+0x357/0x950 [ 55.825444][ T5947] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 55.827294][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 55.828664][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 55.830381][ T5947] ? lock_acquire+0x2f/0xb0 [ 55.831642][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 55.833348][ T5947] netif_receive_skb_list_internal+0x753/0xdb0 [ 55.835133][ T5947] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 55.836981][ T5947] ? __pfx_eth_type_trans+0x10/0x10 [ 55.838383][ T5947] ? __build_skb_around+0x278/0x3b0 [ 55.839767][ T5947] netif_receive_skb_list+0x4f/0x4a0 [ 55.841173][ T5947] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 55.843082][ T5947] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 55.844961][ T5947] ? bpf_test_timer_continue+0x150/0x3d0 [ 55.846685][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 55.848459][ T5947] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 55.850338][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 55.852512][ T5947] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 55.854157][ T5947] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 55.855717][ T5947] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 55.857137][ T5947] ? 0xffffffffa00045c0 [ 55.858203][ T5947] ? 0xffffffffa00045c0 [ 55.859224][ T5947] ? 0xffffffffa00045c0 [ 55.860267][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 55.861984][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 55.863787][ T5947] ? lock_acquire+0x2f/0xb0 [ 55.865465][ T5947] ? __fget_files+0x40/0x3f0 [ 55.867071][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 55.868934][ T5947] ? fput+0x30/0x390 [ 55.870085][ T5947] ? __bpf_prog_get+0xa0/0x290 [ 55.871697][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 55.873452][ T5947] __sys_bpf+0xfc6/0x49a0 [ 55.874599][ T5947] ? find_held_lock+0x2d/0x110 [ 55.875863][ T5947] ? __pfx___sys_bpf+0x10/0x10 [ 55.877163][ T5947] ? __might_fault+0x13b/0x190 [ 55.878426][ T5947] ? __pfx_lock_release+0x10/0x10 [ 55.879728][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 55.881132][ T5947] ? lock_acquire+0x2f/0xb0 [ 55.882361][ T5947] ? __might_fault+0xe3/0x190 [ 55.883609][ T5947] ? xfd_validate_state+0x5d/0x180 [ 55.885145][ T5947] ? rcu_is_watching+0x12/0xc0 [ 55.886479][ T5947] __x64_sys_bpf+0x78/0xc0 [ 55.887751][ T5947] ? lockdep_hardirqs_on+0x7c/0x110 [ 55.889356][ T5947] do_syscall_64+0xcd/0x250 [ 55.890768][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.892687][ T5947] RIP: 0033:0x7ffb21d3be99 [ 55.893945][ T5947] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 55.899429][ T5947] RSP: 002b:00007ffb21cf6228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 55.901927][ T5947] RAX: ffffffffffffffda RBX: 00007ffb21dc6328 RCX: 00007ffb21d3be99 [ 55.904139][ T5947] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 55.906570][ T5947] RBP: 00007ffb21dc6320 R08: 00007ffb21cf66c0 R09: 00007ffb21cf66c0 [ 55.908581][ T5947] R10: 00007ffb21cf66c0 R11: 0000000000000246 R12: 00007ffb21d93074 [ 55.910847][ T5947] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe38c46e08 [ 55.913097][ T5947] [ 55.914096][ T5947] BUG: Bad page state in process syz-executor153 pfn:28934 [ 55.916062][ T5947] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28934 [ 55.918401][ T5947] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 55.920277][ T5947] raw: 00fff00000000000 dead000000000040 ffff88802a725000 0000000000000000 [ 55.922762][ T5947] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 55.925405][ T5947] page dumped because: page_pool leak [ 55.926994][ T5947] page_owner tracks the page as allocated [ 55.928487][ T5947] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5947, tgid 5942 (syz-executor153), ts 50555282150, free_ts 49937530631 [ 55.932989][ T5947] post_alloc_hook+0x2d1/0x350 [ 55.934367][ T5947] get_page_from_freelist+0x101e/0x3070 [ 55.935822][ T5947] __alloc_pages_noprof+0x223/0x25a0 [ 55.937246][ T5947] alloc_pages_bulk_noprof+0x77c/0x1110 [ 55.938762][ T5947] __page_pool_alloc_pages_slow+0x18f/0x770 [ 55.940304][ T5947] page_pool_alloc_netmem+0xc4/0x160 [ 55.941720][ T5947] page_pool_alloc_pages+0x1a/0x60 [ 55.943541][ T5947] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 55.945605][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 55.947190][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 55.948821][ T5947] __sys_bpf+0xfc6/0x49a0 [ 55.949968][ T5947] __x64_sys_bpf+0x78/0xc0 [ 55.951089][ T5947] do_syscall_64+0xcd/0x250 [ 55.952418][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.953894][ T5947] page last free pid 5932 tgid 5932 stack trace: [ 55.955488][ T5947] free_unref_page+0x5f4/0xdc0 [ 55.956670][ T5947] qlist_free_all+0x4e/0x120 [ 55.957844][ T5947] kasan_quarantine_reduce+0x192/0x1e0 [ 55.959176][ T5947] __kasan_slab_alloc+0x69/0x90 [ 55.960381][ T5947] __kmalloc_noprof+0x199/0x400 [ 55.961604][ T5947] tomoyo_realpath_from_path+0xb9/0x720 [ 55.962979][ T5947] tomoyo_path_perm+0x273/0x450 [ 55.964210][ T5947] security_inode_getattr+0x116/0x290 [ 55.965743][ T5947] vfs_fstat+0x53/0xd0 [ 55.966771][ T5947] vfs_fstatat+0x146/0x160 [ 55.968450][ T5947] __do_sys_newfstatat+0xa2/0x130 [ 55.969851][ T5947] do_syscall_64+0xcd/0x250 [ 55.971092][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.972737][ T5947] Modules linked in: [ 55.974017][ T5947] CPU: 3 UID: 0 PID: 5947 Comm: syz-executor153 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 55.977613][ T5947] Tainted: [B]=BAD_PAGE [ 55.978776][ T5947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 55.981631][ T5947] Call Trace: [ 55.982479][ T5947] [ 55.983613][ T5947] dump_stack_lvl+0x16c/0x1f0 [ 55.985401][ T5947] bad_page+0xb3/0x1f0 [ 55.986905][ T5947] ? __pfx_bad_page+0x10/0x10 [ 55.988517][ T5947] ? page_bad_reason+0x9d/0x1e0 [ 55.989861][ T5947] free_unref_page+0x657/0xdc0 [ 55.991106][ T5947] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 55.992859][ T5947] ? __phys_addr+0xc6/0x150 [ 55.994101][ T5947] skb_free_head+0xa0/0x1d0 [ 55.995331][ T5947] skb_release_data+0x560/0x730 [ 55.996664][ T5947] sk_skb_reason_drop+0x129/0x1a0 [ 55.998092][ T5947] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 56.000020][ T5947] ? kernel_text_address+0x8d/0x100 [ 56.001616][ T5947] ? hlock_class+0x4e/0x130 [ 56.003063][ T5947] ? __lock_acquire+0x163e/0x3ce0 [ 56.004432][ T5947] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 56.006464][ T5947] ? hlock_class+0x4e/0x130 [ 56.007736][ T5947] ? __lock_acquire+0xbdd/0x3ce0 [ 56.009157][ T5947] ? __pfx___lock_acquire+0x10/0x10 [ 56.010505][ T5947] __netif_receive_skb_list_core+0x357/0x950 [ 56.012177][ T5947] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 56.013879][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 56.015253][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 56.016887][ T5947] ? lock_acquire+0x2f/0xb0 [ 56.018109][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 56.019733][ T5947] netif_receive_skb_list_internal+0x753/0xdb0 [ 56.021333][ T5947] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 56.023038][ T5947] ? __pfx_eth_type_trans+0x10/0x10 [ 56.024343][ T5947] ? __build_skb_around+0x278/0x3b0 [ 56.025975][ T5947] netif_receive_skb_list+0x4f/0x4a0 [ 56.027589][ T5947] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 56.029606][ T5947] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 56.032205][ T5947] ? bpf_test_timer_continue+0x150/0x3d0 [ 56.033697][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 56.035118][ T5947] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 56.036767][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 56.038940][ T5947] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 56.040758][ T5947] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 56.042528][ T5947] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 56.044051][ T5947] ? 0xffffffffa00045c0 [ 56.045335][ T5947] ? 0xffffffffa00045c0 [ 56.046444][ T5947] ? 0xffffffffa00045c0 [ 56.047697][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 56.049479][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 56.051315][ T5947] ? lock_acquire+0x2f/0xb0 [ 56.052494][ T5947] ? __fget_files+0x40/0x3f0 [ 56.053659][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 56.055143][ T5947] ? fput+0x30/0x390 [ 56.056271][ T5947] ? __bpf_prog_get+0xa0/0x290 [ 56.057586][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 56.059130][ T5947] __sys_bpf+0xfc6/0x49a0 [ 56.060279][ T5947] ? find_held_lock+0x2d/0x110 [ 56.061566][ T5947] ? __pfx___sys_bpf+0x10/0x10 [ 56.063153][ T5947] ? __might_fault+0x13b/0x190 [ 56.064539][ T5947] ? __pfx_lock_release+0x10/0x10 [ 56.065893][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 56.067607][ T5947] ? lock_acquire+0x2f/0xb0 [ 56.069059][ T5947] ? __might_fault+0xe3/0x190 [ 56.070422][ T5947] ? xfd_validate_state+0x5d/0x180 [ 56.071819][ T5947] ? rcu_is_watching+0x12/0xc0 [ 56.073131][ T5947] __x64_sys_bpf+0x78/0xc0 [ 56.074268][ T5947] ? lockdep_hardirqs_on+0x7c/0x110 [ 56.075544][ T5947] do_syscall_64+0xcd/0x250 [ 56.076646][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.078219][ T5947] RIP: 0033:0x7ffb21d3be99 [ 56.079379][ T5947] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 56.084296][ T5947] RSP: 002b:00007ffb21cf6228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 56.086442][ T5947] RAX: ffffffffffffffda RBX: 00007ffb21dc6328 RCX: 00007ffb21d3be99 [ 56.088838][ T5947] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 56.091291][ T5947] RBP: 00007ffb21dc6320 R08: 00007ffb21cf66c0 R09: 00007ffb21cf66c0 [ 56.093990][ T5947] R10: 00007ffb21cf66c0 R11: 0000000000000246 R12: 00007ffb21d93074 [ 56.096647][ T5947] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe38c46e08 [ 56.098913][ T5947] [ 56.099864][ T5947] BUG: Bad page state in process syz-executor153 pfn:35c4b [ 56.101785][ T5947] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x35c4b [ 56.103942][ T5947] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 56.106087][ T5947] raw: 00fff00000000000 dead000000000040 ffff88802a725000 0000000000000000 [ 56.108554][ T5947] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 56.111027][ T5947] page dumped because: page_pool leak [ 56.112703][ T5947] page_owner tracks the page as allocated [ 56.114136][ T5947] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5947, tgid 5942 (syz-executor153), ts 50555277940, free_ts 48393633756 [ 56.118406][ T5947] post_alloc_hook+0x2d1/0x350 [ 56.119592][ T5947] get_page_from_freelist+0x101e/0x3070 [ 56.120948][ T5947] __alloc_pages_noprof+0x223/0x25a0 [ 56.122383][ T5947] alloc_pages_bulk_noprof+0x77c/0x1110 [ 56.123761][ T5947] __page_pool_alloc_pages_slow+0x18f/0x770 [ 56.125312][ T5947] page_pool_alloc_netmem+0xc4/0x160 [ 56.126709][ T5947] page_pool_alloc_pages+0x1a/0x60 [ 56.128135][ T5947] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 56.130311][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 56.132107][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 56.133565][ T5947] __sys_bpf+0xfc6/0x49a0 [ 56.134816][ T5947] __x64_sys_bpf+0x78/0xc0 [ 56.136051][ T5947] do_syscall_64+0xcd/0x250 [ 56.137266][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.138922][ T5947] page last free pid 5924 tgid 5924 stack trace: [ 56.140554][ T5947] free_unref_page+0x5f4/0xdc0 [ 56.141810][ T5947] __folio_put+0x30d/0x3d0 [ 56.143239][ T5947] put_page+0x21e/0x280 [ 56.144412][ T5947] anon_pipe_buf_release+0x11a/0x240 [ 56.145958][ T5947] pipe_read+0x641/0x13f0 [ 56.147550][ T5947] vfs_read+0xa4c/0xbe0 [ 56.148676][ T5947] ksys_read+0x1fa/0x260 [ 56.150030][ T5947] do_syscall_64+0xcd/0x250 [ 56.151611][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.153248][ T5947] Modules linked in: [ 56.154379][ T5947] CPU: 3 UID: 0 PID: 5947 Comm: syz-executor153 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 56.157920][ T5947] Tainted: [B]=BAD_PAGE [ 56.159228][ T5947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 56.162524][ T5947] Call Trace: [ 56.163608][ T5947] [ 56.164418][ T5947] dump_stack_lvl+0x16c/0x1f0 [ 56.165910][ T5947] bad_page+0xb3/0x1f0 [ 56.167236][ T5947] ? __pfx_bad_page+0x10/0x10 [ 56.168954][ T5947] ? page_bad_reason+0x9d/0x1e0 [ 56.170320][ T5947] free_unref_page+0x657/0xdc0 [ 56.171884][ T5947] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 56.173459][ T5947] ? __phys_addr+0xc6/0x150 [ 56.174637][ T5947] skb_free_head+0xa0/0x1d0 [ 56.175998][ T5947] skb_release_data+0x560/0x730 [ 56.177412][ T5947] sk_skb_reason_drop+0x129/0x1a0 [ 56.178915][ T5947] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 56.181202][ T5947] ? kernel_text_address+0x8d/0x100 [ 56.182926][ T5947] ? hlock_class+0x4e/0x130 [ 56.184542][ T5947] ? __lock_acquire+0x163e/0x3ce0 [ 56.186091][ T5947] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 56.188239][ T5947] ? hlock_class+0x4e/0x130 [ 56.189501][ T5947] ? __lock_acquire+0xbdd/0x3ce0 [ 56.190776][ T5947] ? __pfx___lock_acquire+0x10/0x10 [ 56.192284][ T5947] __netif_receive_skb_list_core+0x357/0x950 [ 56.194172][ T5947] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 56.195935][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 56.197342][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 56.198997][ T5947] ? lock_acquire+0x2f/0xb0 [ 56.200153][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 56.201913][ T5947] netif_receive_skb_list_internal+0x753/0xdb0 [ 56.203882][ T5947] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 56.206038][ T5947] ? __pfx_eth_type_trans+0x10/0x10 [ 56.207608][ T5947] ? __build_skb_around+0x278/0x3b0 [ 56.209182][ T5947] netif_receive_skb_list+0x4f/0x4a0 [ 56.210804][ T5947] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 56.212470][ T5947] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 56.214397][ T5947] ? bpf_test_timer_continue+0x150/0x3d0 [ 56.216039][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 56.217547][ T5947] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 56.219010][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 56.220455][ T5947] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 56.221998][ T5947] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 56.223466][ T5947] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 56.224757][ T5947] ? 0xffffffffa00045c0 [ 56.225901][ T5947] ? 0xffffffffa00045c0 [ 56.226923][ T5947] ? 0xffffffffa00045c0 [ 56.227951][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 56.229457][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 56.230897][ T5947] ? lock_acquire+0x2f/0xb0 [ 56.231998][ T5947] ? __fget_files+0x40/0x3f0 [ 56.233119][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 56.234652][ T5947] ? fput+0x30/0x390 [ 56.235633][ T5947] ? __bpf_prog_get+0xa0/0x290 [ 56.236995][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 56.238934][ T5947] __sys_bpf+0xfc6/0x49a0 [ 56.240244][ T5947] ? find_held_lock+0x2d/0x110 [ 56.241759][ T5947] ? __pfx___sys_bpf+0x10/0x10 [ 56.243764][ T5947] ? __might_fault+0x13b/0x190 [ 56.245473][ T5947] ? __pfx_lock_release+0x10/0x10 [ 56.246991][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 56.248319][ T5947] ? lock_acquire+0x2f/0xb0 [ 56.249478][ T5947] ? __might_fault+0xe3/0x190 [ 56.250704][ T5947] ? xfd_validate_state+0x5d/0x180 [ 56.252184][ T5947] ? rcu_is_watching+0x12/0xc0 [ 56.253542][ T5947] __x64_sys_bpf+0x78/0xc0 [ 56.254722][ T5947] ? lockdep_hardirqs_on+0x7c/0x110 [ 56.256313][ T5947] do_syscall_64+0xcd/0x250 [ 56.257719][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.259243][ T5947] RIP: 0033:0x7ffb21d3be99 [ 56.260382][ T5947] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 56.265989][ T5947] RSP: 002b:00007ffb21cf6228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 56.268445][ T5947] RAX: ffffffffffffffda RBX: 00007ffb21dc6328 RCX: 00007ffb21d3be99 [ 56.271253][ T5947] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 56.274156][ T5947] RBP: 00007ffb21dc6320 R08: 00007ffb21cf66c0 R09: 00007ffb21cf66c0 [ 56.276221][ T5947] R10: 00007ffb21cf66c0 R11: 0000000000000246 R12: 00007ffb21d93074 [ 56.278357][ T5947] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe38c46e08 [ 56.280432][ T5947] [ 56.281384][ T5947] BUG: Bad page state in process syz-executor153 pfn:35c4a [ 56.283194][ T5947] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x35c4a [ 56.286044][ T5947] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 56.288049][ T5947] raw: 00fff00000000000 dead000000000040 ffff88802a725000 0000000000000000 [ 56.290772][ T5947] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 56.293304][ T5947] page dumped because: page_pool leak [ 56.294827][ T5947] page_owner tracks the page as allocated [ 56.296332][ T5947] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5947, tgid 5942 (syz-executor153), ts 50555273835, free_ts 48393641963 [ 56.301289][ T5947] post_alloc_hook+0x2d1/0x350 [ 56.302741][ T5947] get_page_from_freelist+0x101e/0x3070 [ 56.304589][ T5947] __alloc_pages_noprof+0x223/0x25a0 [ 56.305973][ T5947] alloc_pages_bulk_noprof+0x77c/0x1110 [ 56.307366][ T5947] __page_pool_alloc_pages_slow+0x18f/0x770 [ 56.309400][ T5947] page_pool_alloc_netmem+0xc4/0x160 [ 56.311006][ T5947] page_pool_alloc_pages+0x1a/0x60 [ 56.312573][ T5947] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 56.314675][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 56.316113][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 56.317568][ T5947] __sys_bpf+0xfc6/0x49a0 [ 56.318759][ T5947] __x64_sys_bpf+0x78/0xc0 [ 56.319947][ T5947] do_syscall_64+0xcd/0x250 [ 56.321113][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.322586][ T5947] page last free pid 5924 tgid 5924 stack trace: [ 56.324199][ T5947] free_unref_page+0x5f4/0xdc0 [ 56.325524][ T5947] __folio_put+0x30d/0x3d0 [ 56.326690][ T5947] put_page+0x21e/0x280 [ 56.327917][ T5947] anon_pipe_buf_release+0x11a/0x240 [ 56.329486][ T5947] pipe_read+0x641/0x13f0 [ 56.330798][ T5947] vfs_read+0xa4c/0xbe0 [ 56.332054][ T5947] ksys_read+0x1fa/0x260 [ 56.333147][ T5947] do_syscall_64+0xcd/0x250 [ 56.334395][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.336134][ T5947] Modules linked in: [ 56.337309][ T5947] CPU: 3 UID: 0 PID: 5947 Comm: syz-executor153 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 56.341379][ T5947] Tainted: [B]=BAD_PAGE [ 56.342831][ T5947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 56.345740][ T5947] Call Trace: [ 56.346647][ T5947] [ 56.347445][ T5947] dump_stack_lvl+0x16c/0x1f0 [ 56.348664][ T5947] bad_page+0xb3/0x1f0 [ 56.349898][ T5947] ? __pfx_bad_page+0x10/0x10 [ 56.351316][ T5947] ? page_bad_reason+0x9d/0x1e0 [ 56.352788][ T5947] free_unref_page+0x657/0xdc0 [ 56.354205][ T5947] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 56.355866][ T5947] ? __phys_addr+0xc6/0x150 [ 56.357075][ T5947] skb_free_head+0xa0/0x1d0 [ 56.358359][ T5947] skb_release_data+0x560/0x730 [ 56.359645][ T5947] sk_skb_reason_drop+0x129/0x1a0 [ 56.361117][ T5947] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 56.362988][ T5947] ? kernel_text_address+0x8d/0x100 [ 56.364420][ T5947] ? hlock_class+0x4e/0x130 [ 56.365808][ T5947] ? __lock_acquire+0x163e/0x3ce0 [ 56.367179][ T5947] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 56.369522][ T5947] ? hlock_class+0x4e/0x130 [ 56.371327][ T5947] ? __lock_acquire+0xbdd/0x3ce0 [ 56.372690][ T5947] ? __pfx___lock_acquire+0x10/0x10 [ 56.374200][ T5947] __netif_receive_skb_list_core+0x357/0x950 [ 56.375887][ T5947] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 56.377996][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 56.379545][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 56.381434][ T5947] ? lock_acquire+0x2f/0xb0 [ 56.382646][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 56.384460][ T5947] netif_receive_skb_list_internal+0x753/0xdb0 [ 56.386190][ T5947] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 56.388073][ T5947] ? __pfx_eth_type_trans+0x10/0x10 [ 56.389803][ T5947] ? __build_skb_around+0x278/0x3b0 [ 56.391672][ T5947] netif_receive_skb_list+0x4f/0x4a0 [ 56.393146][ T5947] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 56.394955][ T5947] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 56.396582][ T5947] ? bpf_test_timer_continue+0x150/0x3d0 [ 56.398224][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 56.399833][ T5947] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 56.401679][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 56.403689][ T5947] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 56.405657][ T5947] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 56.407594][ T5947] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 56.409275][ T5947] ? 0xffffffffa00045c0 [ 56.410480][ T5947] ? 0xffffffffa00045c0 [ 56.411688][ T5947] ? 0xffffffffa00045c0 [ 56.412760][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 56.414259][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 56.415624][ T5947] ? lock_acquire+0x2f/0xb0 [ 56.416776][ T5947] ? __fget_files+0x40/0x3f0 [ 56.418016][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 56.419490][ T5947] ? fput+0x30/0x390 [ 56.420497][ T5947] ? __bpf_prog_get+0xa0/0x290 [ 56.421727][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 56.423254][ T5947] __sys_bpf+0xfc6/0x49a0 [ 56.424387][ T5947] ? find_held_lock+0x2d/0x110 [ 56.425744][ T5947] ? __pfx___sys_bpf+0x10/0x10 [ 56.427024][ T5947] ? __might_fault+0x13b/0x190 [ 56.428277][ T5947] ? __pfx_lock_release+0x10/0x10 [ 56.429577][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 56.430914][ T5947] ? lock_acquire+0x2f/0xb0 [ 56.432084][ T5947] ? __might_fault+0xe3/0x190 [ 56.433341][ T5947] ? xfd_validate_state+0x5d/0x180 [ 56.434975][ T5947] ? rcu_is_watching+0x12/0xc0 [ 56.436392][ T5947] __x64_sys_bpf+0x78/0xc0 [ 56.437779][ T5947] ? lockdep_hardirqs_on+0x7c/0x110 [ 56.439499][ T5947] do_syscall_64+0xcd/0x250 [ 56.440712][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.442550][ T5947] RIP: 0033:0x7ffb21d3be99 [ 56.443658][ T5947] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 56.448873][ T5947] RSP: 002b:00007ffb21cf6228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 56.451120][ T5947] RAX: ffffffffffffffda RBX: 00007ffb21dc6328 RCX: 00007ffb21d3be99 [ 56.453251][ T5947] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 56.455433][ T5947] RBP: 00007ffb21dc6320 R08: 00007ffb21cf66c0 R09: 00007ffb21cf66c0 [ 56.457736][ T5947] R10: 00007ffb21cf66c0 R11: 0000000000000246 R12: 00007ffb21d93074 [ 56.460013][ T5947] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe38c46e08 [ 56.462157][ T5947] [ 56.463090][ T5947] BUG: Bad page state in process syz-executor153 pfn:35c49 [ 56.465164][ T5947] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x8 pfn:0x35c49 [ 56.467521][ T5947] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 56.469392][ T5947] raw: 00fff00000000000 dead000000000040 ffff88802a725000 0000000000000000 [ 56.472135][ T5947] raw: 0000000000000008 0000000000000001 00000000ffffffff 0000000000000000 [ 56.474955][ T5947] page dumped because: page_pool leak [ 56.476658][ T5947] page_owner tracks the page as allocated [ 56.478535][ T5947] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5947, tgid 5942 (syz-executor153), ts 50555269737, free_ts 48434829309 [ 56.483088][ T5947] post_alloc_hook+0x2d1/0x350 [ 56.484657][ T5947] get_page_from_freelist+0x101e/0x3070 [ 56.486135][ T5947] __alloc_pages_noprof+0x223/0x25a0 [ 56.487558][ T5947] alloc_pages_bulk_noprof+0x77c/0x1110 [ 56.489464][ T5947] __page_pool_alloc_pages_slow+0x18f/0x770 [ 56.491078][ T5947] page_pool_alloc_netmem+0xc4/0x160 [ 56.492665][ T5947] page_pool_alloc_pages+0x1a/0x60 [ 56.494017][ T5947] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 56.495688][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 56.497081][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 56.498562][ T5947] __sys_bpf+0xfc6/0x49a0 [ 56.499761][ T5947] __x64_sys_bpf+0x78/0xc0 [ 56.501025][ T5947] do_syscall_64+0xcd/0x250 [ 56.502535][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.504191][ T5947] page last free pid 5924 tgid 5924 stack trace: [ 56.506081][ T5947] free_unref_page+0x5f4/0xdc0 [ 56.507645][ T5947] __folio_put+0x30d/0x3d0 [ 56.508957][ T5947] put_page+0x21e/0x280 [ 56.510046][ T5947] anon_pipe_buf_release+0x11a/0x240 [ 56.511733][ T5947] pipe_read+0x641/0x13f0 [ 56.512962][ T5947] vfs_read+0xa4c/0xbe0 [ 56.514032][ T5947] ksys_read+0x1fa/0x260 [ 56.515190][ T5947] do_syscall_64+0xcd/0x250 [ 56.516344][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.517888][ T5947] Modules linked in: [ 56.518881][ T5947] CPU: 3 UID: 0 PID: 5947 Comm: syz-executor153 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 56.522100][ T5947] Tainted: [B]=BAD_PAGE [ 56.523598][ T5947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 56.526413][ T5947] Call Trace: [ 56.527360][ T5947] [ 56.528358][ T5947] dump_stack_lvl+0x16c/0x1f0 [ 56.529857][ T5947] bad_page+0xb3/0x1f0 [ 56.531059][ T5947] ? __pfx_bad_page+0x10/0x10 [ 56.532461][ T5947] ? page_bad_reason+0x9d/0x1e0 [ 56.533845][ T5947] free_unref_page+0x657/0xdc0 [ 56.535240][ T5947] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 56.536911][ T5947] ? __phys_addr+0xc6/0x150 [ 56.538323][ T5947] skb_free_head+0xa0/0x1d0 [ 56.539569][ T5947] skb_release_data+0x560/0x730 [ 56.540848][ T5947] sk_skb_reason_drop+0x129/0x1a0 [ 56.542118][ T5947] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 56.543942][ T5947] ? kernel_text_address+0x8d/0x100 [ 56.545440][ T5947] ? hlock_class+0x4e/0x130 [ 56.546741][ T5947] ? __lock_acquire+0x163e/0x3ce0 [ 56.548089][ T5947] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 56.549927][ T5947] ? hlock_class+0x4e/0x130 [ 56.551416][ T5947] ? __lock_acquire+0xbdd/0x3ce0 [ 56.552738][ T5947] ? __pfx___lock_acquire+0x10/0x10 [ 56.554392][ T5947] __netif_receive_skb_list_core+0x357/0x950 [ 56.555897][ T5947] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 56.557709][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 56.559153][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 56.560809][ T5947] ? lock_acquire+0x2f/0xb0 [ 56.562257][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 56.563906][ T5947] netif_receive_skb_list_internal+0x753/0xdb0 [ 56.565589][ T5947] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 56.567613][ T5947] ? __pfx_eth_type_trans+0x10/0x10 [ 56.569288][ T5947] ? __build_skb_around+0x278/0x3b0 [ 56.571138][ T5947] netif_receive_skb_list+0x4f/0x4a0 [ 56.572453][ T5947] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 56.574095][ T5947] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 56.575868][ T5947] ? bpf_test_timer_continue+0x150/0x3d0 [ 56.577590][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 56.579156][ T5947] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 56.580712][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 56.582251][ T5947] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 56.584261][ T5947] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 56.586634][ T5947] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 56.588219][ T5947] ? 0xffffffffa00045c0 [ 56.589466][ T5947] ? 0xffffffffa00045c0 [ 56.590784][ T5947] ? 0xffffffffa00045c0 [ 56.592007][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 56.593695][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 56.595136][ T5947] ? lock_acquire+0x2f/0xb0 [ 56.596291][ T5947] ? __fget_files+0x40/0x3f0 [ 56.597539][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 56.599130][ T5947] ? fput+0x30/0x390 [ 56.600118][ T5947] ? __bpf_prog_get+0xa0/0x290 [ 56.601349][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 56.603025][ T5947] __sys_bpf+0xfc6/0x49a0 [ 56.604280][ T5947] ? find_held_lock+0x2d/0x110 [ 56.605834][ T5947] ? __pfx___sys_bpf+0x10/0x10 [ 56.607994][ T5947] ? __might_fault+0x13b/0x190 [ 56.609624][ T5947] ? __pfx_lock_release+0x10/0x10 [ 56.611096][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 56.612482][ T5947] ? lock_acquire+0x2f/0xb0 [ 56.613811][ T5947] ? __might_fault+0xe3/0x190 [ 56.615103][ T5947] ? xfd_validate_state+0x5d/0x180 [ 56.616798][ T5947] ? rcu_is_watching+0x12/0xc0 [ 56.618397][ T5947] __x64_sys_bpf+0x78/0xc0 [ 56.619939][ T5947] ? lockdep_hardirqs_on+0x7c/0x110 [ 56.621558][ T5947] do_syscall_64+0xcd/0x250 [ 56.623120][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.624938][ T5947] RIP: 0033:0x7ffb21d3be99 [ 56.626281][ T5947] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 56.632458][ T5947] RSP: 002b:00007ffb21cf6228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 56.634615][ T5947] RAX: ffffffffffffffda RBX: 00007ffb21dc6328 RCX: 00007ffb21d3be99 [ 56.636512][ T5947] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 56.638679][ T5947] RBP: 00007ffb21dc6320 R08: 00007ffb21cf66c0 R09: 00007ffb21cf66c0 [ 56.640803][ T5947] R10: 00007ffb21cf66c0 R11: 0000000000000246 R12: 00007ffb21d93074 [ 56.642791][ T5947] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe38c46e08 [ 56.644907][ T5947] [ 56.646190][ T5947] BUG: Bad page state in process syz-executor153 pfn:35c48 [ 56.648579][ T5947] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888035c4d500 pfn:0x35c48 [ 56.651629][ T5947] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 56.653711][ T5947] raw: 00fff00000000000 dead000000000040 ffff88802a725000 0000000000000000 [ 56.656625][ T5947] raw: ffff888035c4d500 0000000000000001 00000000ffffffff 0000000000000000 [ 56.659622][ T5947] page dumped because: page_pool leak [ 56.660994][ T5947] page_owner tracks the page as allocated [ 56.662510][ T5947] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5947, tgid 5942 (syz-executor153), ts 50555265504, free_ts 48745311163 [ 56.666820][ T5947] post_alloc_hook+0x2d1/0x350 [ 56.668392][ T5947] get_page_from_freelist+0x101e/0x3070 [ 56.669828][ T5947] __alloc_pages_noprof+0x223/0x25a0 [ 56.671235][ T5947] alloc_pages_bulk_noprof+0x77c/0x1110 [ 56.672622][ T5947] __page_pool_alloc_pages_slow+0x18f/0x770 [ 56.674303][ T5947] page_pool_alloc_netmem+0xc4/0x160 [ 56.675618][ T5947] page_pool_alloc_pages+0x1a/0x60 [ 56.676928][ T5947] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 56.678590][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 56.679914][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 56.681438][ T5947] __sys_bpf+0xfc6/0x49a0 [ 56.682617][ T5947] __x64_sys_bpf+0x78/0xc0 [ 56.683828][ T5947] do_syscall_64+0xcd/0x250 [ 56.685086][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.686603][ T5947] page last free pid 5924 tgid 5924 stack trace: [ 56.688306][ T5947] free_unref_page+0x5f4/0xdc0 [ 56.689642][ T5947] __folio_put+0x30d/0x3d0 [ 56.691065][ T5947] put_page+0x21e/0x280 [ 56.692540][ T5947] anon_pipe_buf_release+0x11a/0x240 [ 56.694390][ T5947] pipe_read+0x641/0x13f0 [ 56.695873][ T5947] vfs_read+0xa4c/0xbe0 [ 56.697257][ T5947] ksys_read+0x1fa/0x260 [ 56.698577][ T5947] do_syscall_64+0xcd/0x250 [ 56.699816][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.701276][ T5947] Modules linked in: [ 56.702248][ T5947] CPU: 3 UID: 0 PID: 5947 Comm: syz-executor153 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 56.705473][ T5947] Tainted: [B]=BAD_PAGE [ 56.706594][ T5947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 56.709765][ T5947] Call Trace: [ 56.710962][ T5947] [ 56.711751][ T5947] dump_stack_lvl+0x16c/0x1f0 [ 56.713082][ T5947] bad_page+0xb3/0x1f0 [ 56.714322][ T5947] ? __pfx_bad_page+0x10/0x10 [ 56.715542][ T5947] ? page_bad_reason+0x9d/0x1e0 [ 56.716920][ T5947] free_unref_page+0x657/0xdc0 [ 56.718274][ T5947] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 56.720009][ T5947] ? __phys_addr+0xc6/0x150 [ 56.721204][ T5947] skb_free_head+0xa0/0x1d0 [ 56.722570][ T5947] skb_release_data+0x560/0x730 [ 56.723928][ T5947] sk_skb_reason_drop+0x129/0x1a0 [ 56.725685][ T5947] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 56.727791][ T5947] ? kernel_text_address+0x8d/0x100 [ 56.729988][ T5947] ? hlock_class+0x4e/0x130 [ 56.731803][ T5947] ? __lock_acquire+0x163e/0x3ce0 [ 56.733327][ T5947] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 56.735268][ T5947] ? hlock_class+0x4e/0x130 [ 56.736683][ T5947] ? __lock_acquire+0xbdd/0x3ce0 [ 56.738290][ T5947] ? __pfx___lock_acquire+0x10/0x10 [ 56.739605][ T5947] __netif_receive_skb_list_core+0x357/0x950 [ 56.741232][ T5947] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 56.742915][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 56.744435][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 56.746191][ T5947] ? lock_acquire+0x2f/0xb0 [ 56.747575][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 56.749893][ T5947] netif_receive_skb_list_internal+0x753/0xdb0 [ 56.751784][ T5947] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 56.753631][ T5947] ? __pfx_eth_type_trans+0x10/0x10 [ 56.755115][ T5947] ? __build_skb_around+0x278/0x3b0 [ 56.756677][ T5947] netif_receive_skb_list+0x4f/0x4a0 [ 56.758283][ T5947] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 56.760171][ T5947] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 56.762046][ T5947] ? bpf_test_timer_continue+0x150/0x3d0 [ 56.763680][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 56.765146][ T5947] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 56.766825][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 56.768406][ T5947] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 56.770117][ T5947] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 56.771856][ T5947] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 56.773442][ T5947] ? 0xffffffffa00045c0 [ 56.774576][ T5947] ? 0xffffffffa00045c0 [ 56.775685][ T5947] ? 0xffffffffa00045c0 [ 56.776762][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 56.778340][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 56.779741][ T5947] ? lock_acquire+0x2f/0xb0 [ 56.780936][ T5947] ? __fget_files+0x40/0x3f0 [ 56.782169][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 56.784055][ T5947] ? fput+0x30/0x390 [ 56.785238][ T5947] ? __bpf_prog_get+0xa0/0x290 [ 56.786718][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 56.788755][ T5947] __sys_bpf+0xfc6/0x49a0 [ 56.790840][ T5947] ? find_held_lock+0x2d/0x110 [ 56.792243][ T5947] ? __pfx___sys_bpf+0x10/0x10 [ 56.793821][ T5947] ? __might_fault+0x13b/0x190 [ 56.795295][ T5947] ? __pfx_lock_release+0x10/0x10 [ 56.796627][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 56.798031][ T5947] ? lock_acquire+0x2f/0xb0 [ 56.799231][ T5947] ? __might_fault+0xe3/0x190 [ 56.800517][ T5947] ? xfd_validate_state+0x5d/0x180 [ 56.801997][ T5947] ? rcu_is_watching+0x12/0xc0 [ 56.803488][ T5947] __x64_sys_bpf+0x78/0xc0 [ 56.804876][ T5947] ? lockdep_hardirqs_on+0x7c/0x110 [ 56.806690][ T5947] do_syscall_64+0xcd/0x250 [ 56.807910][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.809688][ T5947] RIP: 0033:0x7ffb21d3be99 [ 56.810886][ T5947] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 56.817197][ T5947] RSP: 002b:00007ffb21cf6228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 56.819391][ T5947] RAX: ffffffffffffffda RBX: 00007ffb21dc6328 RCX: 00007ffb21d3be99 [ 56.821607][ T5947] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 56.823730][ T5947] RBP: 00007ffb21dc6320 R08: 00007ffb21cf66c0 R09: 00007ffb21cf66c0 [ 56.826002][ T5947] R10: 00007ffb21cf66c0 R11: 0000000000000246 R12: 00007ffb21d93074 [ 56.828299][ T5947] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe38c46e08 [ 56.830677][ T5947] [ 56.831669][ T5947] BUG: Bad page state in process syz-executor153 pfn:3652f [ 56.833574][ T5947] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3652f [ 56.836150][ T5947] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 56.838275][ T5947] raw: 00fff00000000000 dead000000000040 ffff88802a725000 0000000000000000 [ 56.840533][ T5947] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 56.843305][ T5947] page dumped because: page_pool leak [ 56.845249][ T5947] page_owner tracks the page as allocated [ 56.846734][ T5947] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5947, tgid 5942 (syz-executor153), ts 50555261328, free_ts 48745385682 [ 56.851350][ T5947] post_alloc_hook+0x2d1/0x350 [ 56.852762][ T5947] get_page_from_freelist+0x101e/0x3070 [ 56.854398][ T5947] __alloc_pages_noprof+0x223/0x25a0 [ 56.855744][ T5947] alloc_pages_bulk_noprof+0x77c/0x1110 [ 56.857150][ T5947] __page_pool_alloc_pages_slow+0x18f/0x770 [ 56.858630][ T5947] page_pool_alloc_netmem+0xc4/0x160 [ 56.860038][ T5947] page_pool_alloc_pages+0x1a/0x60 [ 56.861383][ T5947] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 56.863014][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 56.864509][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 56.866064][ T5947] __sys_bpf+0xfc6/0x49a0 [ 56.867160][ T5947] __x64_sys_bpf+0x78/0xc0 [ 56.868277][ T5947] do_syscall_64+0xcd/0x250 [ 56.869882][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.871560][ T5947] page last free pid 5924 tgid 5924 stack trace: [ 56.873426][ T5947] free_unref_page+0x5f4/0xdc0 [ 56.874676][ T5947] __folio_put+0x30d/0x3d0 [ 56.875827][ T5947] put_page+0x21e/0x280 [ 56.877118][ T5947] anon_pipe_buf_release+0x11a/0x240 [ 56.878616][ T5947] pipe_read+0x641/0x13f0 [ 56.879964][ T5947] vfs_read+0xa4c/0xbe0 [ 56.881273][ T5947] ksys_read+0x1fa/0x260 [ 56.882519][ T5947] do_syscall_64+0xcd/0x250 [ 56.883820][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.885682][ T5947] Modules linked in: [ 56.886915][ T5947] CPU: 3 UID: 0 PID: 5947 Comm: syz-executor153 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 56.890104][ T5947] Tainted: [B]=BAD_PAGE [ 56.891144][ T5947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 56.894013][ T5947] Call Trace: [ 56.894878][ T5947] [ 56.895634][ T5947] dump_stack_lvl+0x16c/0x1f0 [ 56.896857][ T5947] bad_page+0xb3/0x1f0 [ 56.898040][ T5947] ? __pfx_bad_page+0x10/0x10 [ 56.899347][ T5947] ? page_bad_reason+0x9d/0x1e0 [ 56.900853][ T5947] free_unref_page+0x657/0xdc0 [ 56.902384][ T5947] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 56.904398][ T5947] ? __phys_addr+0xc6/0x150 [ 56.905799][ T5947] skb_free_head+0xa0/0x1d0 [ 56.907130][ T5947] skb_release_data+0x560/0x730 [ 56.908499][ T5947] sk_skb_reason_drop+0x129/0x1a0 [ 56.909934][ T5947] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 56.911624][ T5947] ? kernel_text_address+0x8d/0x100 [ 56.912977][ T5947] ? hlock_class+0x4e/0x130 [ 56.914277][ T5947] ? __lock_acquire+0x163e/0x3ce0 [ 56.915579][ T5947] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 56.917442][ T5947] ? hlock_class+0x4e/0x130 [ 56.918627][ T5947] ? __lock_acquire+0xbdd/0x3ce0 [ 56.919939][ T5947] ? __pfx___lock_acquire+0x10/0x10 [ 56.921313][ T5947] __netif_receive_skb_list_core+0x357/0x950 [ 56.922858][ T5947] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 56.924614][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 56.925955][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 56.927551][ T5947] ? lock_acquire+0x2f/0xb0 [ 56.928767][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 56.930425][ T5947] netif_receive_skb_list_internal+0x753/0xdb0 [ 56.932011][ T5947] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 56.933788][ T5947] ? __pfx_eth_type_trans+0x10/0x10 [ 56.935228][ T5947] ? __build_skb_around+0x278/0x3b0 [ 56.936604][ T5947] netif_receive_skb_list+0x4f/0x4a0 [ 56.938040][ T5947] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 56.939785][ T5947] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 56.941852][ T5947] ? bpf_test_timer_continue+0x150/0x3d0 [ 56.943498][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 56.944929][ T5947] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 56.946472][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 56.947969][ T5947] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 56.949656][ T5947] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 56.951397][ T5947] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 56.952976][ T5947] ? 0xffffffffa00045c0 [ 56.954104][ T5947] ? 0xffffffffa00045c0 [ 56.955191][ T5947] ? 0xffffffffa00045c0 [ 56.956287][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 56.957840][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 56.959233][ T5947] ? lock_acquire+0x2f/0xb0 [ 56.960409][ T5947] ? __fget_files+0x40/0x3f0 [ 56.961626][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 56.963548][ T5947] ? fput+0x30/0x390 [ 56.964746][ T5947] ? __bpf_prog_get+0xa0/0x290 [ 56.966185][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 56.967731][ T5947] __sys_bpf+0xfc6/0x49a0 [ 56.968912][ T5947] ? find_held_lock+0x2d/0x110 [ 56.970220][ T5947] ? __pfx___sys_bpf+0x10/0x10 [ 56.971523][ T5947] ? __might_fault+0x13b/0x190 [ 56.972965][ T5947] ? __pfx_lock_release+0x10/0x10 [ 56.974616][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 56.976385][ T5947] ? lock_acquire+0x2f/0xb0 [ 56.977893][ T5947] ? __might_fault+0xe3/0x190 [ 56.979128][ T5947] ? xfd_validate_state+0x5d/0x180 [ 56.980452][ T5947] ? rcu_is_watching+0x12/0xc0 [ 56.981727][ T5947] __x64_sys_bpf+0x78/0xc0 [ 56.983080][ T5947] ? lockdep_hardirqs_on+0x7c/0x110 [ 56.984462][ T5947] do_syscall_64+0xcd/0x250 [ 56.985680][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.987222][ T5947] RIP: 0033:0x7ffb21d3be99 [ 56.988384][ T5947] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 56.993399][ T5947] RSP: 002b:00007ffb21cf6228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 56.995698][ T5947] RAX: ffffffffffffffda RBX: 00007ffb21dc6328 RCX: 00007ffb21d3be99 [ 56.997876][ T5947] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 57.000019][ T5947] RBP: 00007ffb21dc6320 R08: 00007ffb21cf66c0 R09: 00007ffb21cf66c0 [ 57.002148][ T5947] R10: 00007ffb21cf66c0 R11: 0000000000000246 R12: 00007ffb21d93074 [ 57.004297][ T5947] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe38c46e08 [ 57.006394][ T5947] [ 57.007325][ T5947] BUG: Bad page state in process syz-executor153 pfn:3652e [ 57.009359][ T5947] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3652e [ 57.011866][ T5947] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 57.014117][ T5947] raw: 00fff00000000000 dead000000000040 ffff88802a725000 0000000000000000 [ 57.016433][ T5947] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 57.018567][ T5947] page dumped because: page_pool leak [ 57.020193][ T5947] page_owner tracks the page as allocated [ 57.021742][ T5947] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5947, tgid 5942 (syz-executor153), ts 50555257210, free_ts 48745377987 [ 57.026445][ T5947] post_alloc_hook+0x2d1/0x350 [ 57.027789][ T5947] get_page_from_freelist+0x101e/0x3070 [ 57.029215][ T5947] __alloc_pages_noprof+0x223/0x25a0 [ 57.030582][ T5947] alloc_pages_bulk_noprof+0x77c/0x1110 [ 57.032182][ T5947] __page_pool_alloc_pages_slow+0x18f/0x770 [ 57.034356][ T5947] page_pool_alloc_netmem+0xc4/0x160 [ 57.036006][ T5947] page_pool_alloc_pages+0x1a/0x60 [ 57.037419][ T5947] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 57.039151][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 57.040538][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 57.041977][ T5947] __sys_bpf+0xfc6/0x49a0 [ 57.043304][ T5947] __x64_sys_bpf+0x78/0xc0 [ 57.044702][ T5947] do_syscall_64+0xcd/0x250 [ 57.045941][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.047509][ T5947] page last free pid 5924 tgid 5924 stack trace: [ 57.049127][ T5947] free_unref_page+0x5f4/0xdc0 [ 57.050371][ T5947] __folio_put+0x30d/0x3d0 [ 57.051704][ T5947] put_page+0x21e/0x280 [ 57.052779][ T5947] anon_pipe_buf_release+0x11a/0x240 [ 57.054125][ T5947] pipe_read+0x641/0x13f0 [ 57.055314][ T5947] vfs_read+0xa4c/0xbe0 [ 57.056385][ T5947] ksys_read+0x1fa/0x260 [ 57.057507][ T5947] do_syscall_64+0xcd/0x250 [ 57.058699][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.060739][ T5947] Modules linked in: [ 57.061776][ T5947] CPU: 3 UID: 0 PID: 5947 Comm: syz-executor153 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 57.065758][ T5947] Tainted: [B]=BAD_PAGE [ 57.067365][ T5947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 57.070861][ T5947] Call Trace: [ 57.071914][ T5947] [ 57.072696][ T5947] dump_stack_lvl+0x16c/0x1f0 [ 57.073959][ T5947] bad_page+0xb3/0x1f0 [ 57.075247][ T5947] ? __pfx_bad_page+0x10/0x10 [ 57.076491][ T5947] ? page_bad_reason+0x9d/0x1e0 [ 57.077795][ T5947] free_unref_page+0x657/0xdc0 [ 57.079026][ T5947] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 57.080586][ T5947] ? __phys_addr+0xc6/0x150 [ 57.081806][ T5947] skb_free_head+0xa0/0x1d0 [ 57.082990][ T5947] skb_release_data+0x560/0x730 [ 57.084251][ T5947] sk_skb_reason_drop+0x129/0x1a0 [ 57.085802][ T5947] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 57.087800][ T5947] ? kernel_text_address+0x8d/0x100 [ 57.090231][ T5947] ? hlock_class+0x4e/0x130 [ 57.091444][ T5947] ? __lock_acquire+0x163e/0x3ce0 [ 57.092912][ T5947] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 57.094737][ T5947] ? hlock_class+0x4e/0x130 [ 57.095933][ T5947] ? __lock_acquire+0xbdd/0x3ce0 [ 57.097345][ T5947] ? __pfx___lock_acquire+0x10/0x10 [ 57.098752][ T5947] __netif_receive_skb_list_core+0x357/0x950 [ 57.100310][ T5947] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 57.102018][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 57.103551][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 57.105574][ T5947] ? lock_acquire+0x2f/0xb0 [ 57.107028][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 57.108942][ T5947] netif_receive_skb_list_internal+0x753/0xdb0 [ 57.110888][ T5947] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 57.113502][ T5947] ? __pfx_eth_type_trans+0x10/0x10 [ 57.115272][ T5947] ? __build_skb_around+0x278/0x3b0 [ 57.116617][ T5947] netif_receive_skb_list+0x4f/0x4a0 [ 57.118241][ T5947] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 57.119892][ T5947] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 57.121676][ T5947] ? bpf_test_timer_continue+0x150/0x3d0 [ 57.123311][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 57.124689][ T5947] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 57.126401][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 57.128017][ T5947] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 57.129749][ T5947] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 57.131329][ T5947] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 57.132755][ T5947] ? 0xffffffffa00045c0 [ 57.134000][ T5947] ? 0xffffffffa00045c0 [ 57.135252][ T5947] ? 0xffffffffa00045c0 [ 57.136385][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 57.137940][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 57.139373][ T5947] ? lock_acquire+0x2f/0xb0 [ 57.140626][ T5947] ? __fget_files+0x40/0x3f0 [ 57.141857][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 57.143738][ T5947] ? fput+0x30/0x390 [ 57.144971][ T5947] ? __bpf_prog_get+0xa0/0x290 [ 57.146576][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 57.148435][ T5947] __sys_bpf+0xfc6/0x49a0 [ 57.149862][ T5947] ? find_held_lock+0x2d/0x110 [ 57.151195][ T5947] ? __pfx___sys_bpf+0x10/0x10 [ 57.152444][ T5947] ? __might_fault+0x13b/0x190 [ 57.153797][ T5947] ? __pfx_lock_release+0x10/0x10 [ 57.155145][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 57.156507][ T5947] ? lock_acquire+0x2f/0xb0 [ 57.157725][ T5947] ? __might_fault+0xe3/0x190 [ 57.158954][ T5947] ? xfd_validate_state+0x5d/0x180 [ 57.160273][ T5947] ? rcu_is_watching+0x12/0xc0 [ 57.161547][ T5947] __x64_sys_bpf+0x78/0xc0 [ 57.162698][ T5947] ? lockdep_hardirqs_on+0x7c/0x110 [ 57.164365][ T5947] do_syscall_64+0xcd/0x250 [ 57.165642][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.167395][ T5947] RIP: 0033:0x7ffb21d3be99 [ 57.168683][ T5947] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 57.174469][ T5947] RSP: 002b:00007ffb21cf6228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 57.177010][ T5947] RAX: ffffffffffffffda RBX: 00007ffb21dc6328 RCX: 00007ffb21d3be99 [ 57.179054][ T5947] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 57.181119][ T5947] RBP: 00007ffb21dc6320 R08: 00007ffb21cf66c0 R09: 00007ffb21cf66c0 [ 57.183224][ T5947] R10: 00007ffb21cf66c0 R11: 0000000000000246 R12: 00007ffb21d93074 [ 57.185535][ T5947] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe38c46e08 [ 57.187905][ T5947] [ 57.188839][ T5947] BUG: Bad page state in process syz-executor153 pfn:3652d [ 57.191026][ T5947] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3652d [ 57.193729][ T5947] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 57.195991][ T5947] raw: 00fff00000000000 dead000000000040 ffff88802a725000 0000000000000000 [ 57.198503][ T5947] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 57.200693][ T5947] page dumped because: page_pool leak [ 57.202038][ T5947] page_owner tracks the page as allocated [ 57.203789][ T5947] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5947, tgid 5942 (syz-executor153), ts 50555253075, free_ts 48745370469 [ 57.209444][ T5947] post_alloc_hook+0x2d1/0x350 [ 57.210774][ T5947] get_page_from_freelist+0x101e/0x3070 [ 57.212755][ T5947] __alloc_pages_noprof+0x223/0x25a0 [ 57.214685][ T5947] alloc_pages_bulk_noprof+0x77c/0x1110 [ 57.216625][ T5947] __page_pool_alloc_pages_slow+0x18f/0x770 [ 57.218759][ T5947] page_pool_alloc_netmem+0xc4/0x160 [ 57.220733][ T5947] page_pool_alloc_pages+0x1a/0x60 [ 57.222500][ T5947] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 57.224766][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 57.227029][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 57.229472][ T5947] __sys_bpf+0xfc6/0x49a0 [ 57.231027][ T5947] __x64_sys_bpf+0x78/0xc0 [ 57.232756][ T5947] do_syscall_64+0xcd/0x250 [ 57.234430][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.236436][ T5947] page last free pid 5924 tgid 5924 stack trace: [ 57.238467][ T5947] free_unref_page+0x5f4/0xdc0 [ 57.240013][ T5947] __folio_put+0x30d/0x3d0 [ 57.241483][ T5947] put_page+0x21e/0x280 [ 57.242826][ T5947] anon_pipe_buf_release+0x11a/0x240 [ 57.244970][ T5947] pipe_read+0x641/0x13f0 [ 57.246482][ T5947] vfs_read+0xa4c/0xbe0 [ 57.248260][ T5947] ksys_read+0x1fa/0x260 [ 57.249728][ T5947] do_syscall_64+0xcd/0x250 [ 57.250981][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.252497][ T5947] Modules linked in: [ 57.253743][ T5947] CPU: 3 UID: 0 PID: 5947 Comm: syz-executor153 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 57.257630][ T5947] Tainted: [B]=BAD_PAGE [ 57.258743][ T5947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 57.261498][ T5947] Call Trace: [ 57.262632][ T5947] [ 57.263453][ T5947] dump_stack_lvl+0x16c/0x1f0 [ 57.264730][ T5947] bad_page+0xb3/0x1f0 [ 57.266015][ T5947] ? __pfx_bad_page+0x10/0x10 [ 57.267441][ T5947] ? page_bad_reason+0x9d/0x1e0 [ 57.268709][ T5947] free_unref_page+0x657/0xdc0 [ 57.269946][ T5947] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 57.271967][ T5947] ? __phys_addr+0xc6/0x150 [ 57.273221][ T5947] skb_free_head+0xa0/0x1d0 [ 57.274437][ T5947] skb_release_data+0x560/0x730 [ 57.275658][ T5947] sk_skb_reason_drop+0x129/0x1a0 [ 57.276999][ T5947] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 57.278664][ T5947] ? kernel_text_address+0x8d/0x100 [ 57.279962][ T5947] ? hlock_class+0x4e/0x130 [ 57.281087][ T5947] ? __lock_acquire+0x163e/0x3ce0 [ 57.282604][ T5947] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 57.284535][ T5947] ? hlock_class+0x4e/0x130 [ 57.285837][ T5947] ? __lock_acquire+0xbdd/0x3ce0 [ 57.287279][ T5947] ? __pfx___lock_acquire+0x10/0x10 [ 57.288668][ T5947] __netif_receive_skb_list_core+0x357/0x950 [ 57.290263][ T5947] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 57.292001][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 57.293433][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 57.295098][ T5947] ? lock_acquire+0x2f/0xb0 [ 57.296234][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 57.297862][ T5947] netif_receive_skb_list_internal+0x753/0xdb0 [ 57.299386][ T5947] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 57.301286][ T5947] ? __pfx_eth_type_trans+0x10/0x10 [ 57.302561][ T5947] ? __build_skb_around+0x278/0x3b0 [ 57.303858][ T5947] netif_receive_skb_list+0x4f/0x4a0 [ 57.305177][ T5947] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 57.306851][ T5947] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 57.308724][ T5947] ? bpf_test_timer_continue+0x150/0x3d0 [ 57.310247][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 57.311680][ T5947] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 57.313375][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 57.315234][ T5947] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 57.316958][ T5947] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 57.318599][ T5947] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 57.320040][ T5947] ? 0xffffffffa00045c0 [ 57.321170][ T5947] ? 0xffffffffa00045c0 [ 57.322348][ T5947] ? 0xffffffffa00045c0 [ 57.323589][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 57.325158][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 57.326562][ T5947] ? lock_acquire+0x2f/0xb0 [ 57.327740][ T5947] ? __fget_files+0x40/0x3f0 [ 57.328954][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 57.330517][ T5947] ? fput+0x30/0x390 [ 57.331586][ T5947] ? __bpf_prog_get+0xa0/0x290 [ 57.332905][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 57.334499][ T5947] __sys_bpf+0xfc6/0x49a0 [ 57.335702][ T5947] ? find_held_lock+0x2d/0x110 [ 57.337202][ T5947] ? __pfx___sys_bpf+0x10/0x10 [ 57.338586][ T5947] ? __might_fault+0x13b/0x190 [ 57.339977][ T5947] ? __pfx_lock_release+0x10/0x10 [ 57.341306][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 57.342666][ T5947] ? lock_acquire+0x2f/0xb0 [ 57.343918][ T5947] ? __might_fault+0xe3/0x190 [ 57.345175][ T5947] ? xfd_validate_state+0x5d/0x180 [ 57.346670][ T5947] ? rcu_is_watching+0x12/0xc0 [ 57.348134][ T5947] __x64_sys_bpf+0x78/0xc0 [ 57.349515][ T5947] ? lockdep_hardirqs_on+0x7c/0x110 [ 57.351124][ T5947] do_syscall_64+0xcd/0x250 [ 57.352554][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.354802][ T5947] RIP: 0033:0x7ffb21d3be99 [ 57.356300][ T5947] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 57.363031][ T5947] RSP: 002b:00007ffb21cf6228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 57.366148][ T5947] RAX: ffffffffffffffda RBX: 00007ffb21dc6328 RCX: 00007ffb21d3be99 [ 57.368960][ T5947] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 57.372381][ T5947] RBP: 00007ffb21dc6320 R08: 00007ffb21cf66c0 R09: 00007ffb21cf66c0 [ 57.375004][ T5947] R10: 00007ffb21cf66c0 R11: 0000000000000246 R12: 00007ffb21d93074 [ 57.377551][ T5947] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe38c46e08 [ 57.380057][ T5947] [ 57.381238][ T5947] BUG: Bad page state in process syz-executor153 pfn:3652c [ 57.383623][ T5947] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3652c [ 57.387560][ T5947] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 57.391097][ T5947] raw: 00fff00000000000 dead000000000040 ffff88802a725000 0000000000000000 [ 57.393883][ T5947] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 57.396694][ T5947] page dumped because: page_pool leak [ 57.398482][ T5947] page_owner tracks the page as allocated [ 57.400301][ T5947] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5947, tgid 5942 (syz-executor153), ts 50555248851, free_ts 48745352951 [ 57.406195][ T5947] post_alloc_hook+0x2d1/0x350 [ 57.408163][ T5947] get_page_from_freelist+0x101e/0x3070 [ 57.410494][ T5947] __alloc_pages_noprof+0x223/0x25a0 [ 57.412314][ T5947] alloc_pages_bulk_noprof+0x77c/0x1110 [ 57.414460][ T5947] __page_pool_alloc_pages_slow+0x18f/0x770 [ 57.416443][ T5947] page_pool_alloc_netmem+0xc4/0x160 [ 57.418232][ T5947] page_pool_alloc_pages+0x1a/0x60 [ 57.419958][ T5947] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 57.421666][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 57.423547][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 57.425224][ T5947] __sys_bpf+0xfc6/0x49a0 [ 57.426382][ T5947] __x64_sys_bpf+0x78/0xc0 [ 57.427681][ T5947] do_syscall_64+0xcd/0x250 [ 57.429040][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.430735][ T5947] page last free pid 5924 tgid 5924 stack trace: [ 57.432888][ T5947] free_unref_page+0x5f4/0xdc0 [ 57.434512][ T5947] __folio_put+0x30d/0x3d0 [ 57.435753][ T5947] put_page+0x21e/0x280 [ 57.436894][ T5947] anon_pipe_buf_release+0x11a/0x240 [ 57.438362][ T5947] pipe_read+0x641/0x13f0 [ 57.439501][ T5947] vfs_read+0xa4c/0xbe0 [ 57.440706][ T5947] ksys_read+0x1fa/0x260 [ 57.442276][ T5947] do_syscall_64+0xcd/0x250 [ 57.444072][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.446025][ T5947] Modules linked in: [ 57.447032][ T5947] CPU: 3 UID: 0 PID: 5947 Comm: syz-executor153 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 57.450728][ T5947] Tainted: [B]=BAD_PAGE [ 57.452130][ T5947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 57.455607][ T5947] Call Trace: [ 57.456718][ T5947] [ 57.457749][ T5947] dump_stack_lvl+0x16c/0x1f0 [ 57.459235][ T5947] bad_page+0xb3/0x1f0 [ 57.460332][ T5947] ? __pfx_bad_page+0x10/0x10 [ 57.461596][ T5947] ? page_bad_reason+0x9d/0x1e0 [ 57.462951][ T5947] free_unref_page+0x657/0xdc0 [ 57.464718][ T5947] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 57.466572][ T5947] ? __phys_addr+0xc6/0x150 [ 57.467910][ T5947] skb_free_head+0xa0/0x1d0 [ 57.469312][ T5947] skb_release_data+0x560/0x730 [ 57.471046][ T5947] sk_skb_reason_drop+0x129/0x1a0 [ 57.472352][ T5947] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 57.474058][ T5947] ? kernel_text_address+0x8d/0x100 [ 57.475392][ T5947] ? hlock_class+0x4e/0x130 [ 57.476577][ T5947] ? __lock_acquire+0x163e/0x3ce0 [ 57.477930][ T5947] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 57.479784][ T5947] ? hlock_class+0x4e/0x130 [ 57.480985][ T5947] ? __lock_acquire+0xbdd/0x3ce0 [ 57.482240][ T5947] ? __pfx___lock_acquire+0x10/0x10 [ 57.483590][ T5947] __netif_receive_skb_list_core+0x357/0x950 [ 57.485152][ T5947] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 57.486830][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 57.488276][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 57.490017][ T5947] ? lock_acquire+0x2f/0xb0 [ 57.491334][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 57.493047][ T5947] netif_receive_skb_list_internal+0x753/0xdb0 [ 57.494653][ T5947] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 57.496376][ T5947] ? __pfx_eth_type_trans+0x10/0x10 [ 57.497757][ T5947] ? __build_skb_around+0x278/0x3b0 [ 57.499075][ T5947] netif_receive_skb_list+0x4f/0x4a0 [ 57.500446][ T5947] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 57.502056][ T5947] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 57.503878][ T5947] ? bpf_test_timer_continue+0x150/0x3d0 [ 57.505482][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 57.507048][ T5947] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 57.508929][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 57.510775][ T5947] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 57.512306][ T5947] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 57.514063][ T5947] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 57.515515][ T5947] ? 0xffffffffa00045c0 [ 57.516628][ T5947] ? 0xffffffffa00045c0 [ 57.517774][ T5947] ? 0xffffffffa00045c0 [ 57.518879][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 57.520401][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 57.521782][ T5947] ? lock_acquire+0x2f/0xb0 [ 57.523279][ T5947] ? __fget_files+0x40/0x3f0 [ 57.524578][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 57.526308][ T5947] ? fput+0x30/0x390 [ 57.527407][ T5947] ? __bpf_prog_get+0xa0/0x290 [ 57.528780][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 57.530656][ T5947] __sys_bpf+0xfc6/0x49a0 [ 57.531903][ T5947] ? find_held_lock+0x2d/0x110 [ 57.533399][ T5947] ? __pfx___sys_bpf+0x10/0x10 [ 57.534720][ T5947] ? __might_fault+0x13b/0x190 [ 57.536015][ T5947] ? __pfx_lock_release+0x10/0x10 [ 57.537361][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 57.538680][ T5947] ? lock_acquire+0x2f/0xb0 [ 57.539832][ T5947] ? __might_fault+0xe3/0x190 [ 57.541072][ T5947] ? xfd_validate_state+0x5d/0x180 [ 57.542649][ T5947] ? rcu_is_watching+0x12/0xc0 [ 57.543878][ T5947] __x64_sys_bpf+0x78/0xc0 [ 57.545229][ T5947] ? lockdep_hardirqs_on+0x7c/0x110 [ 57.546735][ T5947] do_syscall_64+0xcd/0x250 [ 57.547938][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.549793][ T5947] RIP: 0033:0x7ffb21d3be99 [ 57.551132][ T5947] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 57.556170][ T5947] RSP: 002b:00007ffb21cf6228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 57.558780][ T5947] RAX: ffffffffffffffda RBX: 00007ffb21dc6328 RCX: 00007ffb21d3be99 [ 57.561018][ T5947] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 57.563546][ T5947] RBP: 00007ffb21dc6320 R08: 00007ffb21cf66c0 R09: 00007ffb21cf66c0 [ 57.566277][ T5947] R10: 00007ffb21cf66c0 R11: 0000000000000246 R12: 00007ffb21d93074 [ 57.569226][ T5947] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe38c46e08 [ 57.571796][ T5947] [ 57.572961][ T5947] BUG: Bad page state in process syz-executor153 pfn:35f2f [ 57.575355][ T5947] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x35f2f [ 57.578352][ T5947] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 57.580786][ T5947] raw: 00fff00000000000 dead000000000040 ffff88802a725000 0000000000000000 [ 57.583523][ T5947] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 57.586405][ T5947] page dumped because: page_pool leak [ 57.588152][ T5947] page_owner tracks the page as allocated [ 57.589984][ T5947] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5947, tgid 5942 (syz-executor153), ts 50555244526, free_ts 48540806799 [ 57.595543][ T5947] post_alloc_hook+0x2d1/0x350 [ 57.597146][ T5947] get_page_from_freelist+0x101e/0x3070 [ 57.598905][ T5947] __alloc_pages_noprof+0x223/0x25a0 [ 57.600646][ T5947] alloc_pages_bulk_noprof+0x77c/0x1110 [ 57.602939][ T5947] __page_pool_alloc_pages_slow+0x18f/0x770 [ 57.605383][ T5947] page_pool_alloc_netmem+0xc4/0x160 [ 57.607417][ T5947] page_pool_alloc_pages+0x1a/0x60 [ 57.609420][ T5947] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 57.611529][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 57.613332][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 57.615166][ T5947] __sys_bpf+0xfc6/0x49a0 [ 57.616596][ T5947] __x64_sys_bpf+0x78/0xc0 [ 57.618093][ T5947] do_syscall_64+0xcd/0x250 [ 57.619605][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.621547][ T5947] page last free pid 5924 tgid 5924 stack trace: [ 57.623601][ T5947] free_unref_page+0x5f4/0xdc0 [ 57.625313][ T5947] __folio_put+0x30d/0x3d0 [ 57.626745][ T5947] put_page+0x21e/0x280 [ 57.628538][ T5947] anon_pipe_buf_release+0x11a/0x240 [ 57.630425][ T5947] pipe_read+0x641/0x13f0 [ 57.632196][ T5947] vfs_read+0xa4c/0xbe0 [ 57.633615][ T5947] ksys_read+0x1fa/0x260 [ 57.635110][ T5947] do_syscall_64+0xcd/0x250 [ 57.636599][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.638529][ T5947] Modules linked in: [ 57.639807][ T5947] CPU: 3 UID: 0 PID: 5947 Comm: syz-executor153 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 57.643222][ T5947] Tainted: [B]=BAD_PAGE [ 57.644336][ T5947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 57.647527][ T5947] Call Trace: [ 57.648577][ T5947] [ 57.649537][ T5947] dump_stack_lvl+0x16c/0x1f0 [ 57.651010][ T5947] bad_page+0xb3/0x1f0 [ 57.652320][ T5947] ? __pfx_bad_page+0x10/0x10 [ 57.653723][ T5947] ? page_bad_reason+0x9d/0x1e0 [ 57.655147][ T5947] free_unref_page+0x657/0xdc0 [ 57.656515][ T5947] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 57.658086][ T5947] ? __phys_addr+0xc6/0x150 [ 57.659290][ T5947] skb_free_head+0xa0/0x1d0 [ 57.660462][ T5947] skb_release_data+0x560/0x730 [ 57.661845][ T5947] sk_skb_reason_drop+0x129/0x1a0 [ 57.663189][ T5947] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 57.665017][ T5947] ? kernel_text_address+0x8d/0x100 [ 57.667009][ T5947] ? hlock_class+0x4e/0x130 [ 57.668417][ T5947] ? __lock_acquire+0x163e/0x3ce0 [ 57.669793][ T5947] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 57.671641][ T5947] ? hlock_class+0x4e/0x130 [ 57.672852][ T5947] ? __lock_acquire+0xbdd/0x3ce0 [ 57.674151][ T5947] ? __pfx___lock_acquire+0x10/0x10 [ 57.675526][ T5947] __netif_receive_skb_list_core+0x357/0x950 [ 57.677353][ T5947] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 57.679303][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 57.680683][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 57.682567][ T5947] ? lock_acquire+0x2f/0xb0 [ 57.683887][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 57.685685][ T5947] netif_receive_skb_list_internal+0x753/0xdb0 [ 57.687496][ T5947] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 57.689496][ T5947] ? __pfx_eth_type_trans+0x10/0x10 [ 57.691062][ T5947] ? __build_skb_around+0x278/0x3b0 [ 57.692518][ T5947] netif_receive_skb_list+0x4f/0x4a0 [ 57.694065][ T5947] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 57.695834][ T5947] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 57.697853][ T5947] ? bpf_test_timer_continue+0x150/0x3d0 [ 57.699452][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 57.700797][ T5947] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 57.702313][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 57.703849][ T5947] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 57.705652][ T5947] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 57.707105][ T5947] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 57.708592][ T5947] ? 0xffffffffa00045c0 [ 57.709803][ T5947] ? 0xffffffffa00045c0 [ 57.711114][ T5947] ? 0xffffffffa00045c0 [ 57.712371][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 57.713969][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 57.715410][ T5947] ? lock_acquire+0x2f/0xb0 [ 57.716672][ T5947] ? __fget_files+0x40/0x3f0 [ 57.717889][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 57.719372][ T5947] ? fput+0x30/0x390 [ 57.720401][ T5947] ? __bpf_prog_get+0xa0/0x290 [ 57.721683][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 57.723238][ T5947] __sys_bpf+0xfc6/0x49a0 [ 57.724700][ T5947] ? find_held_lock+0x2d/0x110 [ 57.726049][ T5947] ? __pfx___sys_bpf+0x10/0x10 [ 57.727502][ T5947] ? __might_fault+0x13b/0x190 [ 57.728922][ T5947] ? __pfx_lock_release+0x10/0x10 [ 57.730245][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 57.731838][ T5947] ? lock_acquire+0x2f/0xb0 [ 57.733307][ T5947] ? __might_fault+0xe3/0x190 [ 57.734913][ T5947] ? xfd_validate_state+0x5d/0x180 [ 57.736595][ T5947] ? rcu_is_watching+0x12/0xc0 [ 57.738173][ T5947] __x64_sys_bpf+0x78/0xc0 [ 57.739483][ T5947] ? lockdep_hardirqs_on+0x7c/0x110 [ 57.740980][ T5947] do_syscall_64+0xcd/0x250 [ 57.742321][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.743893][ T5947] RIP: 0033:0x7ffb21d3be99 [ 57.745348][ T5947] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 57.750345][ T5947] RSP: 002b:00007ffb21cf6228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 57.752483][ T5947] RAX: ffffffffffffffda RBX: 00007ffb21dc6328 RCX: 00007ffb21d3be99 [ 57.754620][ T5947] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 57.756669][ T5947] RBP: 00007ffb21dc6320 R08: 00007ffb21cf66c0 R09: 00007ffb21cf66c0 [ 57.758710][ T5947] R10: 00007ffb21cf66c0 R11: 0000000000000246 R12: 00007ffb21d93074 [ 57.760750][ T5947] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe38c46e08 [ 57.762929][ T5947] [ 57.763966][ T5947] BUG: Bad page state in process syz-executor153 pfn:35f2e [ 57.766118][ T5947] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x35f2e [ 57.768768][ T5947] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 57.770639][ T5947] raw: 00fff00000000000 dead000000000040 ffff88802a725000 0000000000000000 [ 57.773321][ T5947] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 57.776205][ T5947] page dumped because: page_pool leak [ 57.777939][ T5947] page_owner tracks the page as allocated [ 57.779752][ T5947] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5947, tgid 5942 (syz-executor153), ts 50555240310, free_ts 48540816945 [ 57.785011][ T5947] post_alloc_hook+0x2d1/0x350 [ 57.786265][ T5947] get_page_from_freelist+0x101e/0x3070 [ 57.787713][ T5947] __alloc_pages_noprof+0x223/0x25a0 [ 57.789135][ T5947] alloc_pages_bulk_noprof+0x77c/0x1110 [ 57.790578][ T5947] __page_pool_alloc_pages_slow+0x18f/0x770 [ 57.792086][ T5947] page_pool_alloc_netmem+0xc4/0x160 [ 57.793426][ T5947] page_pool_alloc_pages+0x1a/0x60 [ 57.794794][ T5947] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 57.796379][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 57.797737][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 57.799126][ T5947] __sys_bpf+0xfc6/0x49a0 [ 57.800269][ T5947] __x64_sys_bpf+0x78/0xc0 [ 57.801518][ T5947] do_syscall_64+0xcd/0x250 [ 57.802805][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.804495][ T5947] page last free pid 5924 tgid 5924 stack trace: [ 57.806181][ T5947] free_unref_page+0x5f4/0xdc0 [ 57.807476][ T5947] __folio_put+0x30d/0x3d0 [ 57.808779][ T5947] put_page+0x21e/0x280 [ 57.810308][ T5947] anon_pipe_buf_release+0x11a/0x240 [ 57.811852][ T5947] pipe_read+0x641/0x13f0 [ 57.813023][ T5947] vfs_read+0xa4c/0xbe0 [ 57.814133][ T5947] ksys_read+0x1fa/0x260 [ 57.815305][ T5947] do_syscall_64+0xcd/0x250 [ 57.816510][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.818054][ T5947] Modules linked in: [ 57.819070][ T5947] CPU: 3 UID: 0 PID: 5947 Comm: syz-executor153 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 57.822572][ T5947] Tainted: [B]=BAD_PAGE [ 57.823809][ T5947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 57.827166][ T5947] Call Trace: [ 57.828148][ T5947] [ 57.828936][ T5947] dump_stack_lvl+0x16c/0x1f0 [ 57.830223][ T5947] bad_page+0xb3/0x1f0 [ 57.831335][ T5947] ? __pfx_bad_page+0x10/0x10 [ 57.832849][ T5947] ? page_bad_reason+0x9d/0x1e0 [ 57.834214][ T5947] free_unref_page+0x657/0xdc0 [ 57.835545][ T5947] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 57.837426][ T5947] ? __phys_addr+0xc6/0x150 [ 57.838687][ T5947] skb_free_head+0xa0/0x1d0 [ 57.839942][ T5947] skb_release_data+0x560/0x730 [ 57.841348][ T5947] sk_skb_reason_drop+0x129/0x1a0 [ 57.842809][ T5947] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 57.845336][ T5947] ? kernel_text_address+0x8d/0x100 [ 57.847413][ T5947] ? hlock_class+0x4e/0x130 [ 57.848966][ T5947] ? __lock_acquire+0x163e/0x3ce0 [ 57.850348][ T5947] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 57.852182][ T5947] ? hlock_class+0x4e/0x130 [ 57.853507][ T5947] ? __lock_acquire+0xbdd/0x3ce0 [ 57.854816][ T5947] ? __pfx___lock_acquire+0x10/0x10 [ 57.856199][ T5947] __netif_receive_skb_list_core+0x357/0x950 [ 57.858021][ T5947] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 57.860037][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 57.861652][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 57.863792][ T5947] ? lock_acquire+0x2f/0xb0 [ 57.865197][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 57.867132][ T5947] netif_receive_skb_list_internal+0x753/0xdb0 [ 57.868964][ T5947] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 57.870715][ T5947] ? __pfx_eth_type_trans+0x10/0x10 [ 57.872161][ T5947] ? __build_skb_around+0x278/0x3b0 [ 57.873655][ T5947] netif_receive_skb_list+0x4f/0x4a0 [ 57.875173][ T5947] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 57.876785][ T5947] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 57.878502][ T5947] ? bpf_test_timer_continue+0x150/0x3d0 [ 57.879978][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 57.881379][ T5947] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 57.883408][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 57.885027][ T5947] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 57.887016][ T5947] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 57.888820][ T5947] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 57.890193][ T5947] ? 0xffffffffa00045c0 [ 57.891329][ T5947] ? 0xffffffffa00045c0 [ 57.892403][ T5947] ? 0xffffffffa00045c0 [ 57.893752][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 57.895771][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 57.897257][ T5947] ? lock_acquire+0x2f/0xb0 [ 57.898522][ T5947] ? __fget_files+0x40/0x3f0 [ 57.899773][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 57.901415][ T5947] ? fput+0x30/0x390 [ 57.902465][ T5947] ? __bpf_prog_get+0xa0/0x290 [ 57.903733][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 57.905348][ T5947] __sys_bpf+0xfc6/0x49a0 [ 57.906689][ T5947] ? find_held_lock+0x2d/0x110 [ 57.908077][ T5947] ? __pfx___sys_bpf+0x10/0x10 [ 57.909378][ T5947] ? __might_fault+0x13b/0x190 [ 57.910670][ T5947] ? __pfx_lock_release+0x10/0x10 [ 57.912020][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 57.913381][ T5947] ? lock_acquire+0x2f/0xb0 [ 57.914533][ T5947] ? __might_fault+0xe3/0x190 [ 57.915746][ T5947] ? xfd_validate_state+0x5d/0x180 [ 57.917073][ T5947] ? rcu_is_watching+0x12/0xc0 [ 57.918315][ T5947] __x64_sys_bpf+0x78/0xc0 [ 57.919621][ T5947] ? lockdep_hardirqs_on+0x7c/0x110 [ 57.921072][ T5947] do_syscall_64+0xcd/0x250 [ 57.922301][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.923846][ T5947] RIP: 0033:0x7ffb21d3be99 [ 57.925023][ T5947] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 57.930253][ T5947] RSP: 002b:00007ffb21cf6228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 57.932414][ T5947] RAX: ffffffffffffffda RBX: 00007ffb21dc6328 RCX: 00007ffb21d3be99 [ 57.934590][ T5947] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 57.936967][ T5947] RBP: 00007ffb21dc6320 R08: 00007ffb21cf66c0 R09: 00007ffb21cf66c0 [ 57.939197][ T5947] R10: 00007ffb21cf66c0 R11: 0000000000000246 R12: 00007ffb21d93074 [ 57.941272][ T5947] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe38c46e08 [ 57.943319][ T5947] [ 57.944281][ T5947] BUG: Bad page state in process syz-executor153 pfn:35f2d [ 57.946167][ T5947] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x35f2d [ 57.948731][ T5947] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 57.950863][ T5947] raw: 00fff00000000000 dead000000000040 ffff88802a725000 0000000000000000 [ 57.953419][ T5947] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 57.956057][ T5947] page dumped because: page_pool leak [ 57.957800][ T5947] page_owner tracks the page as allocated [ 57.959338][ T5947] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5947, tgid 5942 (syz-executor153), ts 50555235887, free_ts 48540821269 [ 57.963674][ T5947] post_alloc_hook+0x2d1/0x350 [ 57.964976][ T5947] get_page_from_freelist+0x101e/0x3070 [ 57.966418][ T5947] __alloc_pages_noprof+0x223/0x25a0 [ 57.967731][ T5947] alloc_pages_bulk_noprof+0x77c/0x1110 [ 57.969166][ T5947] __page_pool_alloc_pages_slow+0x18f/0x770 [ 57.970674][ T5947] page_pool_alloc_netmem+0xc4/0x160 [ 57.972127][ T5947] page_pool_alloc_pages+0x1a/0x60 [ 57.973565][ T5947] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 57.975508][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 57.977052][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 57.978667][ T5947] __sys_bpf+0xfc6/0x49a0 [ 57.980113][ T5947] __x64_sys_bpf+0x78/0xc0 [ 57.981556][ T5947] do_syscall_64+0xcd/0x250 [ 57.982749][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.984745][ T5947] page last free pid 5924 tgid 5924 stack trace: [ 57.986556][ T5947] free_unref_page+0x5f4/0xdc0 [ 57.987802][ T5947] __folio_put+0x30d/0x3d0 [ 57.988956][ T5947] put_page+0x21e/0x280 [ 57.990059][ T5947] anon_pipe_buf_release+0x11a/0x240 [ 57.991557][ T5947] pipe_read+0x641/0x13f0 [ 57.992909][ T5947] vfs_read+0xa4c/0xbe0 [ 57.994162][ T5947] ksys_read+0x1fa/0x260 [ 57.995461][ T5947] do_syscall_64+0xcd/0x250 [ 57.996776][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.998447][ T5947] Modules linked in: [ 57.999537][ T5947] CPU: 3 UID: 0 PID: 5947 Comm: syz-executor153 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 58.002979][ T5947] Tainted: [B]=BAD_PAGE [ 58.004317][ T5947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 58.007441][ T5947] Call Trace: [ 58.008431][ T5947] [ 58.009288][ T5947] dump_stack_lvl+0x16c/0x1f0 [ 58.010593][ T5947] bad_page+0xb3/0x1f0 [ 58.011663][ T5947] ? __pfx_bad_page+0x10/0x10 [ 58.012881][ T5947] ? page_bad_reason+0x9d/0x1e0 [ 58.014196][ T5947] free_unref_page+0x657/0xdc0 [ 58.015429][ T5947] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 58.016994][ T5947] ? __phys_addr+0xc6/0x150 [ 58.018210][ T5947] skb_free_head+0xa0/0x1d0 [ 58.019410][ T5947] skb_release_data+0x560/0x730 [ 58.020714][ T5947] sk_skb_reason_drop+0x129/0x1a0 [ 58.022067][ T5947] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 58.024018][ T5947] ? kernel_text_address+0x8d/0x100 [ 58.025456][ T5947] ? hlock_class+0x4e/0x130 [ 58.027030][ T5947] ? __lock_acquire+0x163e/0x3ce0 [ 58.028401][ T5947] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 58.030232][ T5947] ? hlock_class+0x4e/0x130 [ 58.031418][ T5947] ? __lock_acquire+0xbdd/0x3ce0 [ 58.032735][ T5947] ? __pfx___lock_acquire+0x10/0x10 [ 58.034125][ T5947] __netif_receive_skb_list_core+0x357/0x950 [ 58.035680][ T5947] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 58.037404][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 58.038763][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 58.040459][ T5947] ? lock_acquire+0x2f/0xb0 [ 58.041688][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 58.043451][ T5947] netif_receive_skb_list_internal+0x753/0xdb0 [ 58.045123][ T5947] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 58.047145][ T5947] ? __pfx_eth_type_trans+0x10/0x10 [ 58.048596][ T5947] ? __build_skb_around+0x278/0x3b0 [ 58.050223][ T5947] netif_receive_skb_list+0x4f/0x4a0 [ 58.051887][ T5947] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 58.053795][ T5947] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 58.055494][ T5947] ? bpf_test_timer_continue+0x150/0x3d0 [ 58.056905][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 58.058294][ T5947] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 58.059766][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 58.061281][ T5947] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 58.062881][ T5947] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 58.064805][ T5947] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 58.066324][ T5947] ? 0xffffffffa00045c0 [ 58.067621][ T5947] ? 0xffffffffa00045c0 [ 58.068863][ T5947] ? 0xffffffffa00045c0 [ 58.069947][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 58.071580][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 58.072895][ T5947] ? lock_acquire+0x2f/0xb0 [ 58.074145][ T5947] ? __fget_files+0x40/0x3f0 [ 58.075408][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 58.077006][ T5947] ? fput+0x30/0x390 [ 58.078017][ T5947] ? __bpf_prog_get+0xa0/0x290 [ 58.079255][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 58.080846][ T5947] __sys_bpf+0xfc6/0x49a0 [ 58.082057][ T5947] ? find_held_lock+0x2d/0x110 [ 58.083711][ T5947] ? __pfx___sys_bpf+0x10/0x10 [ 58.085244][ T5947] ? __might_fault+0x13b/0x190 [ 58.086561][ T5947] ? __pfx_lock_release+0x10/0x10 [ 58.088155][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 58.089733][ T5947] ? lock_acquire+0x2f/0xb0 [ 58.091024][ T5947] ? __might_fault+0xe3/0x190 [ 58.092430][ T5947] ? xfd_validate_state+0x5d/0x180 [ 58.093795][ T5947] ? rcu_is_watching+0x12/0xc0 [ 58.095045][ T5947] __x64_sys_bpf+0x78/0xc0 [ 58.096155][ T5947] ? lockdep_hardirqs_on+0x7c/0x110 [ 58.097453][ T5947] do_syscall_64+0xcd/0x250 [ 58.098710][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.100167][ T5947] RIP: 0033:0x7ffb21d3be99 [ 58.101283][ T5947] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 58.106545][ T5947] RSP: 002b:00007ffb21cf6228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 58.108928][ T5947] RAX: ffffffffffffffda RBX: 00007ffb21dc6328 RCX: 00007ffb21d3be99 [ 58.111040][ T5947] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 58.113801][ T5947] RBP: 00007ffb21dc6320 R08: 00007ffb21cf66c0 R09: 00007ffb21cf66c0 [ 58.116095][ T5947] R10: 00007ffb21cf66c0 R11: 0000000000000246 R12: 00007ffb21d93074 [ 58.118633][ T5947] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe38c46e08 [ 58.120868][ T5947] [ 58.121924][ T5947] BUG: Bad page state in process syz-executor153 pfn:35f2c [ 58.124039][ T5947] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x35f2c [ 58.126716][ T5947] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 58.128682][ T5947] raw: 00fff00000000000 dead000000000040 ffff88802a725000 0000000000000000 [ 58.130933][ T5947] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 58.133351][ T5947] page dumped because: page_pool leak [ 58.134826][ T5947] page_owner tracks the page as allocated [ 58.136351][ T5947] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5947, tgid 5942 (syz-executor153), ts 50555231485, free_ts 48540825324 [ 58.140566][ T5947] post_alloc_hook+0x2d1/0x350 [ 58.141812][ T5947] get_page_from_freelist+0x101e/0x3070 [ 58.143390][ T5947] __alloc_pages_noprof+0x223/0x25a0 [ 58.144955][ T5947] alloc_pages_bulk_noprof+0x77c/0x1110 [ 58.146697][ T5947] __page_pool_alloc_pages_slow+0x18f/0x770 [ 58.148718][ T5947] page_pool_alloc_netmem+0xc4/0x160 [ 58.150176][ T5947] page_pool_alloc_pages+0x1a/0x60 [ 58.151568][ T5947] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 58.153343][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 58.154854][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 58.156286][ T5947] __sys_bpf+0xfc6/0x49a0 [ 58.157426][ T5947] __x64_sys_bpf+0x78/0xc0 [ 58.158881][ T5947] do_syscall_64+0xcd/0x250 [ 58.160236][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.161822][ T5947] page last free pid 5924 tgid 5924 stack trace: [ 58.163535][ T5947] free_unref_page+0x5f4/0xdc0 [ 58.165018][ T5947] __folio_put+0x30d/0x3d0 [ 58.166374][ T5947] put_page+0x21e/0x280 [ 58.167461][ T5947] anon_pipe_buf_release+0x11a/0x240 [ 58.168798][ T5947] pipe_read+0x641/0x13f0 [ 58.169992][ T5947] vfs_read+0xa4c/0xbe0 [ 58.171343][ T5947] ksys_read+0x1fa/0x260 [ 58.172610][ T5947] do_syscall_64+0xcd/0x250 [ 58.173932][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.175655][ T5947] Modules linked in: [ 58.176653][ T5947] CPU: 3 UID: 0 PID: 5947 Comm: syz-executor153 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 58.179820][ T5947] Tainted: [B]=BAD_PAGE [ 58.180880][ T5947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 58.183984][ T5947] Call Trace: [ 58.184864][ T5947] [ 58.185786][ T5947] dump_stack_lvl+0x16c/0x1f0 [ 58.187095][ T5947] bad_page+0xb3/0x1f0 [ 58.188236][ T5947] ? __pfx_bad_page+0x10/0x10 [ 58.189557][ T5947] ? page_bad_reason+0x9d/0x1e0 [ 58.190982][ T5947] free_unref_page+0x657/0xdc0 [ 58.192252][ T5947] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 58.193830][ T5947] ? __phys_addr+0xc6/0x150 [ 58.194994][ T5947] skb_free_head+0xa0/0x1d0 [ 58.196241][ T5947] skb_release_data+0x560/0x730 [ 58.197751][ T5947] sk_skb_reason_drop+0x129/0x1a0 [ 58.199242][ T5947] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 58.200946][ T5947] ? kernel_text_address+0x8d/0x100 [ 58.202307][ T5947] ? hlock_class+0x4e/0x130 [ 58.203612][ T5947] ? __lock_acquire+0x163e/0x3ce0 [ 58.205203][ T5947] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 58.207052][ T5947] ? hlock_class+0x4e/0x130 [ 58.208480][ T5947] ? __lock_acquire+0xbdd/0x3ce0 [ 58.209854][ T5947] ? __pfx___lock_acquire+0x10/0x10 [ 58.211230][ T5947] __netif_receive_skb_list_core+0x357/0x950 [ 58.213070][ T5947] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 58.214803][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 58.216188][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 58.217808][ T5947] ? lock_acquire+0x2f/0xb0 [ 58.219005][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 58.220587][ T5947] netif_receive_skb_list_internal+0x753/0xdb0 [ 58.222166][ T5947] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 58.223848][ T5947] ? __pfx_eth_type_trans+0x10/0x10 [ 58.225310][ T5947] ? __build_skb_around+0x278/0x3b0 [ 58.226795][ T5947] netif_receive_skb_list+0x4f/0x4a0 [ 58.228160][ T5947] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 58.229950][ T5947] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 58.232305][ T5947] ? bpf_test_timer_continue+0x150/0x3d0 [ 58.233773][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 58.235158][ T5947] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 58.236686][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 58.238234][ T5947] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 58.239732][ T5947] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 58.241221][ T5947] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 58.242564][ T5947] ? 0xffffffffa00045c0 [ 58.243665][ T5947] ? 0xffffffffa00045c0 [ 58.244749][ T5947] ? 0xffffffffa00045c0 [ 58.245845][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 58.247564][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 58.248915][ T5947] ? lock_acquire+0x2f/0xb0 [ 58.250257][ T5947] ? __fget_files+0x40/0x3f0 [ 58.251594][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 58.253322][ T5947] ? fput+0x30/0x390 [ 58.254369][ T5947] ? __bpf_prog_get+0xa0/0x290 [ 58.255622][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 58.257166][ T5947] __sys_bpf+0xfc6/0x49a0 [ 58.258299][ T5947] ? find_held_lock+0x2d/0x110 [ 58.259558][ T5947] ? __pfx___sys_bpf+0x10/0x10 [ 58.260811][ T5947] ? __might_fault+0x13b/0x190 [ 58.262266][ T5947] ? __pfx_lock_release+0x10/0x10 [ 58.263709][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 58.265110][ T5947] ? lock_acquire+0x2f/0xb0 [ 58.266298][ T5947] ? __might_fault+0xe3/0x190 [ 58.267813][ T5947] ? xfd_validate_state+0x5d/0x180 [ 58.269454][ T5947] ? rcu_is_watching+0x12/0xc0 [ 58.270752][ T5947] __x64_sys_bpf+0x78/0xc0 [ 58.272233][ T5947] ? lockdep_hardirqs_on+0x7c/0x110 [ 58.273647][ T5947] do_syscall_64+0xcd/0x250 [ 58.274843][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.276400][ T5947] RIP: 0033:0x7ffb21d3be99 [ 58.277600][ T5947] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 58.282704][ T5947] RSP: 002b:00007ffb21cf6228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 58.285005][ T5947] RAX: ffffffffffffffda RBX: 00007ffb21dc6328 RCX: 00007ffb21d3be99 [ 58.287318][ T5947] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 58.289531][ T5947] RBP: 00007ffb21dc6320 R08: 00007ffb21cf66c0 R09: 00007ffb21cf66c0 [ 58.291710][ T5947] R10: 00007ffb21cf66c0 R11: 0000000000000246 R12: 00007ffb21d93074 [ 58.293938][ T5947] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe38c46e08 [ 58.296017][ T5947] [ 58.296930][ T5947] BUG: Bad page state in process syz-executor153 pfn:35f37 [ 58.298861][ T5947] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x35f37 [ 58.301166][ T5947] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 58.303421][ T5947] raw: 00fff00000000000 dead000000000040 ffff88802a725000 0000000000000000 [ 58.305895][ T5947] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 58.308292][ T5947] page dumped because: page_pool leak [ 58.309925][ T5947] page_owner tracks the page as allocated [ 58.311865][ T5947] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5947, tgid 5942 (syz-executor153), ts 50555226913, free_ts 48536336752 [ 58.317075][ T5947] post_alloc_hook+0x2d1/0x350 [ 58.318335][ T5947] get_page_from_freelist+0x101e/0x3070 [ 58.319754][ T5947] __alloc_pages_noprof+0x223/0x25a0 [ 58.321115][ T5947] alloc_pages_bulk_noprof+0x77c/0x1110 [ 58.322649][ T5947] __page_pool_alloc_pages_slow+0x18f/0x770 [ 58.324150][ T5947] page_pool_alloc_netmem+0xc4/0x160 [ 58.325593][ T5947] page_pool_alloc_pages+0x1a/0x60 [ 58.326912][ T5947] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 58.328471][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 58.330279][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 58.331829][ T5947] __sys_bpf+0xfc6/0x49a0 [ 58.333112][ T5947] __x64_sys_bpf+0x78/0xc0 [ 58.334336][ T5947] do_syscall_64+0xcd/0x250 [ 58.335541][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.337031][ T5947] page last free pid 5924 tgid 5924 stack trace: [ 58.338614][ T5947] free_unref_page+0x5f4/0xdc0 [ 58.339860][ T5947] __folio_put+0x30d/0x3d0 [ 58.341020][ T5947] put_page+0x21e/0x280 [ 58.342201][ T5947] anon_pipe_buf_release+0x11a/0x240 [ 58.343615][ T5947] pipe_read+0x641/0x13f0 [ 58.344837][ T5947] vfs_read+0xa4c/0xbe0 [ 58.345927][ T5947] ksys_read+0x1fa/0x260 [ 58.347038][ T5947] do_syscall_64+0xcd/0x250 [ 58.348221][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.349812][ T5947] Modules linked in: [ 58.351133][ T5947] CPU: 3 UID: 0 PID: 5947 Comm: syz-executor153 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 58.354799][ T5947] Tainted: [B]=BAD_PAGE [ 58.356171][ T5947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 58.359006][ T5947] Call Trace: [ 58.359833][ T5947] [ 58.360611][ T5947] dump_stack_lvl+0x16c/0x1f0 [ 58.361876][ T5947] bad_page+0xb3/0x1f0 [ 58.362942][ T5947] ? __pfx_bad_page+0x10/0x10 [ 58.364173][ T5947] ? page_bad_reason+0x9d/0x1e0 [ 58.365465][ T5947] free_unref_page+0x657/0xdc0 [ 58.366730][ T5947] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 58.368309][ T5947] ? __phys_addr+0xc6/0x150 [ 58.369501][ T5947] skb_free_head+0xa0/0x1d0 [ 58.370696][ T5947] skb_release_data+0x560/0x730 [ 58.372087][ T5947] sk_skb_reason_drop+0x129/0x1a0 [ 58.373489][ T5947] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 58.375198][ T5947] ? kernel_text_address+0x8d/0x100 [ 58.376559][ T5947] ? hlock_class+0x4e/0x130 [ 58.377784][ T5947] ? __lock_acquire+0x163e/0x3ce0 [ 58.379158][ T5947] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 58.381199][ T5947] ? hlock_class+0x4e/0x130 [ 58.382537][ T5947] ? __lock_acquire+0xbdd/0x3ce0 [ 58.383970][ T5947] ? __pfx___lock_acquire+0x10/0x10 [ 58.385762][ T5947] __netif_receive_skb_list_core+0x357/0x950 [ 58.387467][ T5947] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 58.389314][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 58.390690][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 58.392705][ T5947] ? lock_acquire+0x2f/0xb0 [ 58.393918][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 58.395559][ T5947] netif_receive_skb_list_internal+0x753/0xdb0 [ 58.397170][ T5947] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 58.398894][ T5947] ? __pfx_eth_type_trans+0x10/0x10 [ 58.400259][ T5947] ? __build_skb_around+0x278/0x3b0 [ 58.401538][ T5947] netif_receive_skb_list+0x4f/0x4a0 [ 58.403303][ T5947] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 58.405345][ T5947] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 58.407370][ T5947] ? bpf_test_timer_continue+0x150/0x3d0 [ 58.408985][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 58.411611][ T5947] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 58.413129][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 58.414657][ T5947] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 58.416182][ T5947] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 58.417707][ T5947] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 58.419062][ T5947] ? 0xffffffffa00045c0 [ 58.420142][ T5947] ? 0xffffffffa00045c0 [ 58.421249][ T5947] ? 0xffffffffa00045c0 [ 58.422306][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 58.423845][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 58.425588][ T5947] ? lock_acquire+0x2f/0xb0 [ 58.426945][ T5947] ? __fget_files+0x40/0x3f0 [ 58.428382][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 58.430010][ T5947] ? fput+0x30/0x390 [ 58.431074][ T5947] ? __bpf_prog_get+0xa0/0x290 [ 58.432395][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 58.434065][ T5947] __sys_bpf+0xfc6/0x49a0 [ 58.435286][ T5947] ? find_held_lock+0x2d/0x110 [ 58.436698][ T5947] ? __pfx___sys_bpf+0x10/0x10 [ 58.438335][ T5947] ? __might_fault+0x13b/0x190 [ 58.439799][ T5947] ? __pfx_lock_release+0x10/0x10 [ 58.441310][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 58.442710][ T5947] ? lock_acquire+0x2f/0xb0 [ 58.443917][ T5947] ? __might_fault+0xe3/0x190 [ 58.445505][ T5947] ? xfd_validate_state+0x5d/0x180 [ 58.447399][ T5947] ? rcu_is_watching+0x12/0xc0 [ 58.448638][ T5947] __x64_sys_bpf+0x78/0xc0 [ 58.449950][ T5947] ? lockdep_hardirqs_on+0x7c/0x110 [ 58.451446][ T5947] do_syscall_64+0xcd/0x250 [ 58.452700][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.454267][ T5947] RIP: 0033:0x7ffb21d3be99 [ 58.455418][ T5947] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 58.460866][ T5947] RSP: 002b:00007ffb21cf6228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 58.463297][ T5947] RAX: ffffffffffffffda RBX: 00007ffb21dc6328 RCX: 00007ffb21d3be99 [ 58.465773][ T5947] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 58.468453][ T5947] RBP: 00007ffb21dc6320 R08: 00007ffb21cf66c0 R09: 00007ffb21cf66c0 [ 58.470524][ T5947] R10: 00007ffb21cf66c0 R11: 0000000000000246 R12: 00007ffb21d93074 [ 58.472560][ T5947] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe38c46e08 [ 58.474575][ T5947] [ 58.475458][ T5947] BUG: Bad page state in process syz-executor153 pfn:35f36 [ 58.477562][ T5947] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x35f36 [ 58.479815][ T5947] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 58.481958][ T5947] raw: 00fff00000000000 dead000000000040 ffff88802a725000 0000000000000000 [ 58.484491][ T5947] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 58.486795][ T5947] page dumped because: page_pool leak [ 58.488362][ T5947] page_owner tracks the page as allocated [ 58.489952][ T5947] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5947, tgid 5942 (syz-executor153), ts 50555222786, free_ts 48540791148 [ 58.495196][ T5947] post_alloc_hook+0x2d1/0x350 [ 58.496511][ T5947] get_page_from_freelist+0x101e/0x3070 [ 58.498039][ T5947] __alloc_pages_noprof+0x223/0x25a0 [ 58.499583][ T5947] alloc_pages_bulk_noprof+0x77c/0x1110 [ 58.501056][ T5947] __page_pool_alloc_pages_slow+0x18f/0x770 [ 58.502915][ T5947] page_pool_alloc_netmem+0xc4/0x160 [ 58.504542][ T5947] page_pool_alloc_pages+0x1a/0x60 [ 58.506049][ T5947] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 58.507913][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 58.509407][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 58.510924][ T5947] __sys_bpf+0xfc6/0x49a0 [ 58.512104][ T5947] __x64_sys_bpf+0x78/0xc0 [ 58.513272][ T5947] do_syscall_64+0xcd/0x250 [ 58.514516][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.516210][ T5947] page last free pid 5924 tgid 5924 stack trace: [ 58.517967][ T5947] free_unref_page+0x5f4/0xdc0 [ 58.519227][ T5947] __folio_put+0x30d/0x3d0 [ 58.520380][ T5947] put_page+0x21e/0x280 [ 58.521480][ T5947] anon_pipe_buf_release+0x11a/0x240 [ 58.522851][ T5947] pipe_read+0x641/0x13f0 [ 58.523990][ T5947] vfs_read+0xa4c/0xbe0 [ 58.525143][ T5947] ksys_read+0x1fa/0x260 [ 58.526250][ T5947] do_syscall_64+0xcd/0x250 [ 58.527435][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.528967][ T5947] Modules linked in: [ 58.530001][ T5947] CPU: 3 UID: 0 PID: 5947 Comm: syz-executor153 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 58.533154][ T5947] Tainted: [B]=BAD_PAGE [ 58.534257][ T5947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 58.536987][ T5947] Call Trace: [ 58.537858][ T5947] [ 58.538637][ T5947] dump_stack_lvl+0x16c/0x1f0 [ 58.539915][ T5947] bad_page+0xb3/0x1f0 [ 58.541023][ T5947] ? __pfx_bad_page+0x10/0x10 [ 58.542325][ T5947] ? page_bad_reason+0x9d/0x1e0 [ 58.543800][ T5947] free_unref_page+0x657/0xdc0 [ 58.545504][ T5947] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 58.547772][ T5947] ? __phys_addr+0xc6/0x150 [ 58.549145][ T5947] skb_free_head+0xa0/0x1d0 [ 58.550511][ T5947] skb_release_data+0x560/0x730 [ 58.552237][ T5947] sk_skb_reason_drop+0x129/0x1a0 [ 58.553677][ T5947] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 58.555410][ T5947] ? kernel_text_address+0x8d/0x100 [ 58.556879][ T5947] ? hlock_class+0x4e/0x130 [ 58.558109][ T5947] ? __lock_acquire+0x163e/0x3ce0 [ 58.559430][ T5947] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 58.561302][ T5947] ? hlock_class+0x4e/0x130 [ 58.562676][ T5947] ? __lock_acquire+0xbdd/0x3ce0 [ 58.563986][ T5947] ? __pfx___lock_acquire+0x10/0x10 [ 58.565846][ T5947] __netif_receive_skb_list_core+0x357/0x950 [ 58.567395][ T5947] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 58.569058][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 58.570415][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 58.572142][ T5947] ? lock_acquire+0x2f/0xb0 [ 58.573331][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 58.575041][ T5947] netif_receive_skb_list_internal+0x753/0xdb0 [ 58.576646][ T5947] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 58.578390][ T5947] ? __pfx_eth_type_trans+0x10/0x10 [ 58.579753][ T5947] ? __build_skb_around+0x278/0x3b0 [ 58.581158][ T5947] netif_receive_skb_list+0x4f/0x4a0 [ 58.582561][ T5947] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 58.584356][ T5947] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 58.586555][ T5947] ? bpf_test_timer_continue+0x150/0x3d0 [ 58.588323][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 58.589778][ T5947] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 58.591434][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 58.593108][ T5947] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 58.594749][ T5947] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 58.596270][ T5947] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 58.597672][ T5947] ? 0xffffffffa00045c0 [ 58.598751][ T5947] ? 0xffffffffa00045c0 [ 58.599837][ T5947] ? 0xffffffffa00045c0 [ 58.600924][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 58.602727][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 58.604227][ T5947] ? lock_acquire+0x2f/0xb0 [ 58.605556][ T5947] ? __fget_files+0x40/0x3f0 [ 58.606879][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 58.608517][ T5947] ? fput+0x30/0x390 [ 58.609821][ T5947] ? __bpf_prog_get+0xa0/0x290 [ 58.611133][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 58.613005][ T5947] __sys_bpf+0xfc6/0x49a0 [ 58.614232][ T5947] ? find_held_lock+0x2d/0x110 [ 58.615458][ T5947] ? __pfx___sys_bpf+0x10/0x10 [ 58.616649][ T5947] ? __might_fault+0x13b/0x190 [ 58.617877][ T5947] ? __pfx_lock_release+0x10/0x10 [ 58.619122][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 58.620446][ T5947] ? lock_acquire+0x2f/0xb0 [ 58.621615][ T5947] ? __might_fault+0xe3/0x190 [ 58.622831][ T5947] ? xfd_validate_state+0x5d/0x180 [ 58.624399][ T5947] ? rcu_is_watching+0x12/0xc0 [ 58.625778][ T5947] __x64_sys_bpf+0x78/0xc0 [ 58.627207][ T5947] ? lockdep_hardirqs_on+0x7c/0x110 [ 58.628914][ T5947] do_syscall_64+0xcd/0x250 [ 58.630158][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.631754][ T5947] RIP: 0033:0x7ffb21d3be99 [ 58.632932][ T5947] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 58.638337][ T5947] RSP: 002b:00007ffb21cf6228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 58.641175][ T5947] RAX: ffffffffffffffda RBX: 00007ffb21dc6328 RCX: 00007ffb21d3be99 [ 58.643843][ T5947] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 58.645971][ T5947] RBP: 00007ffb21dc6320 R08: 00007ffb21cf66c0 R09: 00007ffb21cf66c0 [ 58.648411][ T5947] R10: 00007ffb21cf66c0 R11: 0000000000000246 R12: 00007ffb21d93074 [ 58.651059][ T5947] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe38c46e08 [ 58.653072][ T5947] [ 58.653988][ T5947] BUG: Bad page state in process syz-executor153 pfn:35f35 [ 58.656236][ T5947] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x35f35 [ 58.658551][ T5947] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 58.660604][ T5947] raw: 00fff00000000000 dead000000000040 ffff88802a725000 0000000000000000 [ 58.663091][ T5947] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 58.666352][ T5947] page dumped because: page_pool leak [ 58.667729][ T5947] page_owner tracks the page as allocated [ 58.669255][ T5947] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5947, tgid 5942 (syz-executor153), ts 50555218839, free_ts 48540795460 [ 58.674763][ T5947] post_alloc_hook+0x2d1/0x350 [ 58.676369][ T5947] get_page_from_freelist+0x101e/0x3070 [ 58.678213][ T5947] __alloc_pages_noprof+0x223/0x25a0 [ 58.679567][ T5947] alloc_pages_bulk_noprof+0x77c/0x1110 [ 58.680939][ T5947] __page_pool_alloc_pages_slow+0x18f/0x770 [ 58.682650][ T5947] page_pool_alloc_netmem+0xc4/0x160 [ 58.683970][ T5947] page_pool_alloc_pages+0x1a/0x60 [ 58.685858][ T5947] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 58.688137][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 58.689816][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 58.691489][ T5947] __sys_bpf+0xfc6/0x49a0 [ 58.692615][ T5947] __x64_sys_bpf+0x78/0xc0 [ 58.694147][ T5947] do_syscall_64+0xcd/0x250 [ 58.695388][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.696813][ T5947] page last free pid 5924 tgid 5924 stack trace: [ 58.698766][ T5947] free_unref_page+0x5f4/0xdc0 [ 58.699954][ T5947] __folio_put+0x30d/0x3d0 [ 58.701182][ T5947] put_page+0x21e/0x280 [ 58.702427][ T5947] anon_pipe_buf_release+0x11a/0x240 [ 58.704173][ T5947] pipe_read+0x641/0x13f0 [ 58.705705][ T5947] vfs_read+0xa4c/0xbe0 [ 58.707120][ T5947] ksys_read+0x1fa/0x260 [ 58.708591][ T5947] do_syscall_64+0xcd/0x250 [ 58.710135][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.711686][ T5947] Modules linked in: [ 58.712734][ T5947] CPU: 3 UID: 0 PID: 5947 Comm: syz-executor153 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 58.716140][ T5947] Tainted: [B]=BAD_PAGE [ 58.717253][ T5947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 58.719867][ T5947] Call Trace: [ 58.720683][ T5947] [ 58.721442][ T5947] dump_stack_lvl+0x16c/0x1f0 [ 58.722629][ T5947] bad_page+0xb3/0x1f0 [ 58.723935][ T5947] ? __pfx_bad_page+0x10/0x10 [ 58.725508][ T5947] ? page_bad_reason+0x9d/0x1e0 [ 58.726951][ T5947] free_unref_page+0x657/0xdc0 [ 58.728228][ T5947] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 58.729834][ T5947] ? __phys_addr+0xc6/0x150 [ 58.731281][ T5947] skb_free_head+0xa0/0x1d0 [ 58.732526][ T5947] skb_release_data+0x560/0x730 [ 58.733894][ T5947] sk_skb_reason_drop+0x129/0x1a0 [ 58.735145][ T5947] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 58.736796][ T5947] ? kernel_text_address+0x8d/0x100 [ 58.738171][ T5947] ? hlock_class+0x4e/0x130 [ 58.739372][ T5947] ? __lock_acquire+0x163e/0x3ce0 [ 58.740835][ T5947] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 58.742743][ T5947] ? hlock_class+0x4e/0x130 [ 58.744281][ T5947] ? __lock_acquire+0xbdd/0x3ce0 [ 58.745696][ T5947] ? __pfx___lock_acquire+0x10/0x10 [ 58.747220][ T5947] __netif_receive_skb_list_core+0x357/0x950 [ 58.748917][ T5947] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 58.750744][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 58.752131][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 58.754011][ T5947] ? lock_acquire+0x2f/0xb0 [ 58.755313][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 58.757368][ T5947] netif_receive_skb_list_internal+0x753/0xdb0 [ 58.759517][ T5947] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 58.761379][ T5947] ? __pfx_eth_type_trans+0x10/0x10 [ 58.762850][ T5947] ? __build_skb_around+0x278/0x3b0 [ 58.764267][ T5947] netif_receive_skb_list+0x4f/0x4a0 [ 58.765878][ T5947] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 58.767674][ T5947] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 58.769494][ T5947] ? bpf_test_timer_continue+0x150/0x3d0 [ 58.770965][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 58.772348][ T5947] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 58.773868][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 58.775391][ T5947] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 58.776940][ T5947] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 58.778768][ T5947] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 58.780272][ T5947] ? 0xffffffffa00045c0 [ 58.781407][ T5947] ? 0xffffffffa00045c0 [ 58.782583][ T5947] ? 0xffffffffa00045c0 [ 58.784016][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 58.786156][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 58.787627][ T5947] ? lock_acquire+0x2f/0xb0 [ 58.789206][ T5947] ? __fget_files+0x40/0x3f0 [ 58.790594][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 58.792242][ T5947] ? fput+0x30/0x390 [ 58.793318][ T5947] ? __bpf_prog_get+0xa0/0x290 [ 58.794631][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 58.796227][ T5947] __sys_bpf+0xfc6/0x49a0 [ 58.797402][ T5947] ? find_held_lock+0x2d/0x110 [ 58.798674][ T5947] ? __pfx___sys_bpf+0x10/0x10 [ 58.799913][ T5947] ? __might_fault+0x13b/0x190 [ 58.801165][ T5947] ? __pfx_lock_release+0x10/0x10 [ 58.802467][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 58.803930][ T5947] ? lock_acquire+0x2f/0xb0 [ 58.805139][ T5947] ? __might_fault+0xe3/0x190 [ 58.806406][ T5947] ? xfd_validate_state+0x5d/0x180 [ 58.807819][ T5947] ? rcu_is_watching+0x12/0xc0 [ 58.809118][ T5947] __x64_sys_bpf+0x78/0xc0 [ 58.810321][ T5947] ? lockdep_hardirqs_on+0x7c/0x110 [ 58.811734][ T5947] do_syscall_64+0xcd/0x250 [ 58.813016][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.814598][ T5947] RIP: 0033:0x7ffb21d3be99 [ 58.815908][ T5947] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 58.821771][ T5947] RSP: 002b:00007ffb21cf6228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 58.824202][ T5947] RAX: ffffffffffffffda RBX: 00007ffb21dc6328 RCX: 00007ffb21d3be99 [ 58.826329][ T5947] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 58.828359][ T5947] RBP: 00007ffb21dc6320 R08: 00007ffb21cf66c0 R09: 00007ffb21cf66c0 [ 58.831492][ T5947] R10: 00007ffb21cf66c0 R11: 0000000000000246 R12: 00007ffb21d93074 [ 58.833966][ T5947] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe38c46e08 [ 58.835983][ T5947] [ 58.836929][ T5947] BUG: Bad page state in process syz-executor153 pfn:35f34 [ 58.838811][ T5947] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x35f34 [ 58.841033][ T5947] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 58.842893][ T5947] raw: 00fff00000000000 dead000000000040 ffff88802a725000 0000000000000000 [ 58.845779][ T5947] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 58.848173][ T5947] page dumped because: page_pool leak [ 58.849949][ T5947] page_owner tracks the page as allocated [ 58.851541][ T5947] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5947, tgid 5942 (syz-executor153), ts 50555214516, free_ts 48542556190 [ 58.856467][ T5947] post_alloc_hook+0x2d1/0x350 [ 58.857777][ T5947] get_page_from_freelist+0x101e/0x3070 [ 58.859191][ T5947] __alloc_pages_noprof+0x223/0x25a0 [ 58.860546][ T5947] alloc_pages_bulk_noprof+0x77c/0x1110 [ 58.862273][ T5947] __page_pool_alloc_pages_slow+0x18f/0x770 [ 58.864145][ T5947] page_pool_alloc_netmem+0xc4/0x160 [ 58.865779][ T5947] page_pool_alloc_pages+0x1a/0x60 [ 58.867216][ T5947] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 58.869148][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 58.870677][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 58.872230][ T5947] __sys_bpf+0xfc6/0x49a0 [ 58.873509][ T5947] __x64_sys_bpf+0x78/0xc0 [ 58.874771][ T5947] do_syscall_64+0xcd/0x250 [ 58.876002][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.878079][ T5947] page last free pid 5924 tgid 5924 stack trace: [ 58.880484][ T5947] free_unref_page+0x5f4/0xdc0 [ 58.882416][ T5947] __folio_put+0x30d/0x3d0 [ 58.883830][ T5947] put_page+0x21e/0x280 [ 58.885313][ T5947] anon_pipe_buf_release+0x11a/0x240 [ 58.887150][ T5947] pipe_read+0x641/0x13f0 [ 58.888641][ T5947] vfs_read+0xa4c/0xbe0 [ 58.889800][ T5947] ksys_read+0x1fa/0x260 [ 58.890938][ T5947] do_syscall_64+0xcd/0x250 [ 58.892145][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.893715][ T5947] Modules linked in: [ 58.894830][ T5947] CPU: 3 UID: 0 PID: 5947 Comm: syz-executor153 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 58.898383][ T5947] Tainted: [B]=BAD_PAGE [ 58.899498][ T5947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 58.902511][ T5947] Call Trace: [ 58.903447][ T5947] [ 58.904386][ T5947] dump_stack_lvl+0x16c/0x1f0 [ 58.905999][ T5947] bad_page+0xb3/0x1f0 [ 58.907528][ T5947] ? __pfx_bad_page+0x10/0x10 [ 58.908874][ T5947] ? page_bad_reason+0x9d/0x1e0 [ 58.910203][ T5947] free_unref_page+0x657/0xdc0 [ 58.911505][ T5947] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 58.913179][ T5947] ? __phys_addr+0xc6/0x150 [ 58.914435][ T5947] skb_free_head+0xa0/0x1d0 [ 58.915564][ T5947] skb_release_data+0x560/0x730 [ 58.916881][ T5947] sk_skb_reason_drop+0x129/0x1a0 [ 58.918230][ T5947] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 58.919970][ T5947] ? kernel_text_address+0x8d/0x100 [ 58.921361][ T5947] ? hlock_class+0x4e/0x130 [ 58.922685][ T5947] ? __lock_acquire+0x163e/0x3ce0 [ 58.924236][ T5947] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 58.926326][ T5947] ? hlock_class+0x4e/0x130 [ 58.927927][ T5947] ? __lock_acquire+0xbdd/0x3ce0 [ 58.929798][ T5947] ? __pfx___lock_acquire+0x10/0x10 [ 58.931847][ T5947] __netif_receive_skb_list_core+0x357/0x950 [ 58.933968][ T5947] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 58.936230][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 58.938044][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 58.940115][ T5947] ? lock_acquire+0x2f/0xb0 [ 58.941585][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 58.943442][ T5947] netif_receive_skb_list_internal+0x753/0xdb0 [ 58.945226][ T5947] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 58.947087][ T5947] ? __pfx_eth_type_trans+0x10/0x10 [ 58.948639][ T5947] ? __build_skb_around+0x278/0x3b0 [ 58.950233][ T5947] netif_receive_skb_list+0x4f/0x4a0 [ 58.951681][ T5947] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 58.953504][ T5947] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 58.955473][ T5947] ? bpf_test_timer_continue+0x150/0x3d0 [ 58.957232][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 58.958661][ T5947] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 58.960412][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 58.962080][ T5947] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 58.963656][ T5947] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 58.965376][ T5947] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 58.966679][ T5947] ? 0xffffffffa00045c0 [ 58.967724][ T5947] ? 0xffffffffa00045c0 [ 58.968830][ T5947] ? 0xffffffffa00045c0 [ 58.969881][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 58.971377][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 58.972750][ T5947] ? lock_acquire+0x2f/0xb0 [ 58.973946][ T5947] ? __fget_files+0x40/0x3f0 [ 58.975115][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 58.976685][ T5947] ? fput+0x30/0x390 [ 58.977749][ T5947] ? __bpf_prog_get+0xa0/0x290 [ 58.979115][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 58.980582][ T5947] __sys_bpf+0xfc6/0x49a0 [ 58.981686][ T5947] ? find_held_lock+0x2d/0x110 [ 58.982897][ T5947] ? __pfx___sys_bpf+0x10/0x10 [ 58.984101][ T5947] ? __might_fault+0x13b/0x190 [ 58.985301][ T5947] ? __pfx_lock_release+0x10/0x10 [ 58.986591][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 58.988025][ T5947] ? lock_acquire+0x2f/0xb0 [ 58.989232][ T5947] ? __might_fault+0xe3/0x190 [ 58.990512][ T5947] ? xfd_validate_state+0x5d/0x180 [ 58.992224][ T5947] ? rcu_is_watching+0x12/0xc0 [ 58.993565][ T5947] __x64_sys_bpf+0x78/0xc0 [ 58.994724][ T5947] ? lockdep_hardirqs_on+0x7c/0x110 [ 58.996056][ T5947] do_syscall_64+0xcd/0x250 [ 58.997237][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.998813][ T5947] RIP: 0033:0x7ffb21d3be99 [ 59.000037][ T5947] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 59.005393][ T5947] RSP: 002b:00007ffb21cf6228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 59.007825][ T5947] RAX: ffffffffffffffda RBX: 00007ffb21dc6328 RCX: 00007ffb21d3be99 [ 59.010058][ T5947] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 59.012319][ T5947] RBP: 00007ffb21dc6320 R08: 00007ffb21cf66c0 R09: 00007ffb21cf66c0 [ 59.014472][ T5947] R10: 00007ffb21cf66c0 R11: 0000000000000246 R12: 00007ffb21d93074 [ 59.016520][ T5947] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe38c46e08 [ 59.018556][ T5947] [ 59.019474][ T5947] BUG: Bad page state in process syz-executor153 pfn:293f7 [ 59.021333][ T5947] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x293f7 [ 59.023683][ T5947] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 59.025698][ T5947] raw: 00fff00000000000 dead000000000040 ffff88802a725000 0000000000000000 [ 59.027961][ T5947] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 59.030796][ T5947] page dumped because: page_pool leak [ 59.032482][ T5947] page_owner tracks the page as allocated [ 59.034217][ T5947] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5947, tgid 5942 (syz-executor153), ts 50555210422, free_ts 48542582751 [ 59.038953][ T5947] post_alloc_hook+0x2d1/0x350 [ 59.040275][ T5947] get_page_from_freelist+0x101e/0x3070 [ 59.041684][ T5947] __alloc_pages_noprof+0x223/0x25a0 [ 59.043033][ T5947] alloc_pages_bulk_noprof+0x77c/0x1110 [ 59.044595][ T5947] __page_pool_alloc_pages_slow+0x18f/0x770 [ 59.046126][ T5947] page_pool_alloc_netmem+0xc4/0x160 [ 59.047647][ T5947] page_pool_alloc_pages+0x1a/0x60 [ 59.048989][ T5947] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 59.050983][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 59.052416][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 59.053897][ T5947] __sys_bpf+0xfc6/0x49a0 [ 59.055069][ T5947] __x64_sys_bpf+0x78/0xc0 [ 59.056257][ T5947] do_syscall_64+0xcd/0x250 [ 59.057423][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.059047][ T5947] page last free pid 5924 tgid 5924 stack trace: [ 59.060862][ T5947] free_unref_page+0x5f4/0xdc0 [ 59.062323][ T5947] __folio_put+0x30d/0x3d0 [ 59.064218][ T5947] put_page+0x21e/0x280 [ 59.066227][ T5947] anon_pipe_buf_release+0x11a/0x240 [ 59.068023][ T5947] pipe_read+0x641/0x13f0 [ 59.069489][ T5947] vfs_read+0xa4c/0xbe0 [ 59.070743][ T5947] ksys_read+0x1fa/0x260 [ 59.071934][ T5947] do_syscall_64+0xcd/0x250 [ 59.073120][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.074688][ T5947] Modules linked in: [ 59.075715][ T5947] CPU: 3 UID: 0 PID: 5947 Comm: syz-executor153 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 59.078918][ T5947] Tainted: [B]=BAD_PAGE [ 59.079961][ T5947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 59.083241][ T5947] Call Trace: [ 59.084427][ T5947] [ 59.085417][ T5947] dump_stack_lvl+0x16c/0x1f0 [ 59.086925][ T5947] bad_page+0xb3/0x1f0 [ 59.088530][ T5947] ? __pfx_bad_page+0x10/0x10 [ 59.090105][ T5947] ? page_bad_reason+0x9d/0x1e0 [ 59.091721][ T5947] free_unref_page+0x657/0xdc0 [ 59.093309][ T5947] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 59.095539][ T5947] ? __phys_addr+0xc6/0x150 [ 59.097011][ T5947] skb_free_head+0xa0/0x1d0 [ 59.098588][ T5947] skb_release_data+0x560/0x730 [ 59.100262][ T5947] sk_skb_reason_drop+0x129/0x1a0 [ 59.102000][ T5947] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 59.104278][ T5947] ? kernel_text_address+0x8d/0x100 [ 59.106252][ T5947] ? hlock_class+0x4e/0x130 [ 59.108187][ T5947] ? __lock_acquire+0x163e/0x3ce0 [ 59.110160][ T5947] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 59.112697][ T5947] ? hlock_class+0x4e/0x130 [ 59.114289][ T5947] ? __lock_acquire+0xbdd/0x3ce0 [ 59.115947][ T5947] ? __pfx___lock_acquire+0x10/0x10 [ 59.117728][ T5947] __netif_receive_skb_list_core+0x357/0x950 [ 59.119808][ T5947] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 59.122032][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 59.123752][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 59.125812][ T5947] ? lock_acquire+0x2f/0xb0 [ 59.127309][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 59.129483][ T5947] netif_receive_skb_list_internal+0x753/0xdb0 [ 59.131702][ T5947] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 59.134126][ T5947] ? __pfx_eth_type_trans+0x10/0x10 [ 59.135651][ T5947] ? __build_skb_around+0x278/0x3b0 [ 59.137448][ T5947] netif_receive_skb_list+0x4f/0x4a0 [ 59.138926][ T5947] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 59.141008][ T5947] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 59.143462][ T5947] ? bpf_test_timer_continue+0x150/0x3d0 [ 59.145357][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 59.147204][ T5947] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 59.149121][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 59.151087][ T5947] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 59.153040][ T5947] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 59.155053][ T5947] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 59.156601][ T5947] ? 0xffffffffa00045c0 [ 59.157745][ T5947] ? 0xffffffffa00045c0 [ 59.159235][ T5947] ? 0xffffffffa00045c0 [ 59.160486][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 59.162063][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 59.163563][ T5947] ? lock_acquire+0x2f/0xb0 [ 59.164997][ T5947] ? __fget_files+0x40/0x3f0 [ 59.166404][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 59.167979][ T5947] ? fput+0x30/0x390 [ 59.168975][ T5947] ? __bpf_prog_get+0xa0/0x290 [ 59.170209][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 59.171716][ T5947] __sys_bpf+0xfc6/0x49a0 [ 59.172791][ T5947] ? find_held_lock+0x2d/0x110 [ 59.174020][ T5947] ? __pfx___sys_bpf+0x10/0x10 [ 59.175330][ T5947] ? __might_fault+0x13b/0x190 [ 59.176557][ T5947] ? __pfx_lock_release+0x10/0x10 [ 59.177873][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 59.179200][ T5947] ? lock_acquire+0x2f/0xb0 [ 59.180346][ T5947] ? __might_fault+0xe3/0x190 [ 59.181596][ T5947] ? xfd_validate_state+0x5d/0x180 [ 59.183065][ T5947] ? rcu_is_watching+0x12/0xc0 [ 59.184491][ T5947] __x64_sys_bpf+0x78/0xc0 [ 59.185678][ T5947] ? lockdep_hardirqs_on+0x7c/0x110 [ 59.187007][ T5947] do_syscall_64+0xcd/0x250 [ 59.188234][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.190066][ T5947] RIP: 0033:0x7ffb21d3be99 [ 59.191306][ T5947] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 59.196750][ T5947] RSP: 002b:00007ffb21cf6228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 59.199064][ T5947] RAX: ffffffffffffffda RBX: 00007ffb21dc6328 RCX: 00007ffb21d3be99 [ 59.201218][ T5947] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 59.203517][ T5947] RBP: 00007ffb21dc6320 R08: 00007ffb21cf66c0 R09: 00007ffb21cf66c0 [ 59.205648][ T5947] R10: 00007ffb21cf66c0 R11: 0000000000000246 R12: 00007ffb21d93074 [ 59.207890][ T5947] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe38c46e08 [ 59.210018][ T5947] [ 59.210928][ T5947] BUG: Bad page state in process syz-executor153 pfn:293f6 [ 59.212997][ T5947] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x293f6 [ 59.215206][ T5947] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 59.216990][ T5947] raw: 00fff00000000000 dead000000000040 ffff88802a725000 0000000000000000 [ 59.219179][ T5947] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 59.221433][ T5947] page dumped because: page_pool leak [ 59.223402][ T5947] page_owner tracks the page as allocated [ 59.225159][ T5947] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5947, tgid 5942 (syz-executor153), ts 50555206229, free_ts 48542578719 [ 59.230193][ T5947] post_alloc_hook+0x2d1/0x350 [ 59.231477][ T5947] get_page_from_freelist+0x101e/0x3070 [ 59.232940][ T5947] __alloc_pages_noprof+0x223/0x25a0 [ 59.234458][ T5947] alloc_pages_bulk_noprof+0x77c/0x1110 [ 59.236160][ T5947] __page_pool_alloc_pages_slow+0x18f/0x770 [ 59.237889][ T5947] page_pool_alloc_netmem+0xc4/0x160 [ 59.239291][ T5947] page_pool_alloc_pages+0x1a/0x60 [ 59.240622][ T5947] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 59.242370][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 59.243704][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 59.245591][ T5947] __sys_bpf+0xfc6/0x49a0 [ 59.246966][ T5947] __x64_sys_bpf+0x78/0xc0 [ 59.248532][ T5947] do_syscall_64+0xcd/0x250 [ 59.249933][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.251724][ T5947] page last free pid 5924 tgid 5924 stack trace: [ 59.253289][ T5947] free_unref_page+0x5f4/0xdc0 [ 59.254682][ T5947] __folio_put+0x30d/0x3d0 [ 59.255872][ T5947] put_page+0x21e/0x280 [ 59.257245][ T5947] anon_pipe_buf_release+0x11a/0x240 [ 59.258632][ T5947] pipe_read+0x641/0x13f0 [ 59.259725][ T5947] vfs_read+0xa4c/0xbe0 [ 59.260791][ T5947] ksys_read+0x1fa/0x260 [ 59.261988][ T5947] do_syscall_64+0xcd/0x250 [ 59.263222][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.264967][ T5947] Modules linked in: [ 59.266158][ T5947] CPU: 3 UID: 0 PID: 5947 Comm: syz-executor153 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 59.269760][ T5947] Tainted: [B]=BAD_PAGE [ 59.270945][ T5947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 59.273907][ T5947] Call Trace: [ 59.274793][ T5947] [ 59.275557][ T5947] dump_stack_lvl+0x16c/0x1f0 [ 59.276862][ T5947] bad_page+0xb3/0x1f0 [ 59.277955][ T5947] ? __pfx_bad_page+0x10/0x10 [ 59.279214][ T5947] ? page_bad_reason+0x9d/0x1e0 [ 59.280616][ T5947] free_unref_page+0x657/0xdc0 [ 59.282466][ T5947] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 59.284659][ T5947] ? __phys_addr+0xc6/0x150 [ 59.286249][ T5947] skb_free_head+0xa0/0x1d0 [ 59.288022][ T5947] skb_release_data+0x560/0x730 [ 59.289740][ T5947] sk_skb_reason_drop+0x129/0x1a0 [ 59.291146][ T5947] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 59.293240][ T5947] ? kernel_text_address+0x8d/0x100 [ 59.294697][ T5947] ? hlock_class+0x4e/0x130 [ 59.295970][ T5947] ? __lock_acquire+0x163e/0x3ce0 [ 59.297401][ T5947] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 59.299235][ T5947] ? hlock_class+0x4e/0x130 [ 59.300419][ T5947] ? __lock_acquire+0xbdd/0x3ce0 [ 59.301720][ T5947] ? __pfx___lock_acquire+0x10/0x10 [ 59.303403][ T5947] __netif_receive_skb_list_core+0x357/0x950 [ 59.305063][ T5947] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 59.306765][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 59.308121][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 59.309866][ T5947] ? lock_acquire+0x2f/0xb0 [ 59.311181][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 59.312980][ T5947] netif_receive_skb_list_internal+0x753/0xdb0 [ 59.314710][ T5947] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 59.316413][ T5947] ? __pfx_eth_type_trans+0x10/0x10 [ 59.317966][ T5947] ? __build_skb_around+0x278/0x3b0 [ 59.319502][ T5947] netif_receive_skb_list+0x4f/0x4a0 [ 59.320977][ T5947] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 59.323025][ T5947] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 59.324834][ T5947] ? bpf_test_timer_continue+0x150/0x3d0 [ 59.326399][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 59.327874][ T5947] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 59.329791][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 59.331656][ T5947] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 59.333272][ T5947] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 59.334732][ T5947] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 59.336092][ T5947] ? 0xffffffffa00045c0 [ 59.337191][ T5947] ? 0xffffffffa00045c0 [ 59.338277][ T5947] ? 0xffffffffa00045c0 [ 59.339339][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 59.340803][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 59.342367][ T5947] ? lock_acquire+0x2f/0xb0 [ 59.343597][ T5947] ? __fget_files+0x40/0x3f0 [ 59.344921][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 59.346621][ T5947] ? fput+0x30/0x390 [ 59.347951][ T5947] ? __bpf_prog_get+0xa0/0x290 [ 59.349721][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 59.351428][ T5947] __sys_bpf+0xfc6/0x49a0 [ 59.352647][ T5947] ? find_held_lock+0x2d/0x110 [ 59.354096][ T5947] ? __pfx___sys_bpf+0x10/0x10 [ 59.355460][ T5947] ? __might_fault+0x13b/0x190 [ 59.356804][ T5947] ? __pfx_lock_release+0x10/0x10 [ 59.358136][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 59.359483][ T5947] ? lock_acquire+0x2f/0xb0 [ 59.360684][ T5947] ? __might_fault+0xe3/0x190 [ 59.361915][ T5947] ? xfd_validate_state+0x5d/0x180 [ 59.363440][ T5947] ? rcu_is_watching+0x12/0xc0 [ 59.364903][ T5947] __x64_sys_bpf+0x78/0xc0 [ 59.366122][ T5947] ? lockdep_hardirqs_on+0x7c/0x110 [ 59.367601][ T5947] do_syscall_64+0xcd/0x250 [ 59.369108][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.370646][ T5947] RIP: 0033:0x7ffb21d3be99 [ 59.371971][ T5947] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 59.376750][ T5947] RSP: 002b:00007ffb21cf6228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 59.379092][ T5947] RAX: ffffffffffffffda RBX: 00007ffb21dc6328 RCX: 00007ffb21d3be99 [ 59.381106][ T5947] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 59.383435][ T5947] RBP: 00007ffb21dc6320 R08: 00007ffb21cf66c0 R09: 00007ffb21cf66c0 [ 59.385842][ T5947] R10: 00007ffb21cf66c0 R11: 0000000000000246 R12: 00007ffb21d93074 [ 59.388385][ T5947] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe38c46e08 [ 59.390846][ T5947] [ 59.391739][ T5947] BUG: Bad page state in process syz-executor153 pfn:293f5 [ 59.393668][ T5947] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x293f5 [ 59.395900][ T5947] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 59.397680][ T5947] raw: 00fff00000000000 dead000000000040 ffff88802a725000 0000000000000000 [ 59.399753][ T5947] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 59.401941][ T5947] page dumped because: page_pool leak [ 59.403407][ T5947] page_owner tracks the page as allocated [ 59.405228][ T5947] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5947, tgid 5942 (syz-executor153), ts 50555201832, free_ts 48542574662 [ 59.410322][ T5947] post_alloc_hook+0x2d1/0x350 [ 59.411719][ T5947] get_page_from_freelist+0x101e/0x3070 [ 59.413143][ T5947] __alloc_pages_noprof+0x223/0x25a0 [ 59.414517][ T5947] alloc_pages_bulk_noprof+0x77c/0x1110 [ 59.415944][ T5947] __page_pool_alloc_pages_slow+0x18f/0x770 [ 59.417594][ T5947] page_pool_alloc_netmem+0xc4/0x160 [ 59.418938][ T5947] page_pool_alloc_pages+0x1a/0x60 [ 59.420225][ T5947] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 59.421923][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 59.423562][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 59.425011][ T5947] __sys_bpf+0xfc6/0x49a0 [ 59.426147][ T5947] __x64_sys_bpf+0x78/0xc0 [ 59.427649][ T5947] do_syscall_64+0xcd/0x250 [ 59.429033][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.430770][ T5947] page last free pid 5924 tgid 5924 stack trace: [ 59.432418][ T5947] free_unref_page+0x5f4/0xdc0 [ 59.433981][ T5947] __folio_put+0x30d/0x3d0 [ 59.435302][ T5947] put_page+0x21e/0x280 [ 59.436441][ T5947] anon_pipe_buf_release+0x11a/0x240 [ 59.437862][ T5947] pipe_read+0x641/0x13f0 [ 59.439000][ T5947] vfs_read+0xa4c/0xbe0 [ 59.440123][ T5947] ksys_read+0x1fa/0x260 [ 59.441259][ T5947] do_syscall_64+0xcd/0x250 [ 59.442795][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.444536][ T5947] Modules linked in: [ 59.445566][ T5947] CPU: 3 UID: 0 PID: 5947 Comm: syz-executor153 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 59.448786][ T5947] Tainted: [B]=BAD_PAGE [ 59.449877][ T5947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 59.452661][ T5947] Call Trace: [ 59.453614][ T5947] [ 59.454430][ T5947] dump_stack_lvl+0x16c/0x1f0 [ 59.455664][ T5947] bad_page+0xb3/0x1f0 [ 59.456874][ T5947] ? __pfx_bad_page+0x10/0x10 [ 59.458143][ T5947] ? page_bad_reason+0x9d/0x1e0 [ 59.459435][ T5947] free_unref_page+0x657/0xdc0 [ 59.460686][ T5947] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 59.462250][ T5947] ? __phys_addr+0xc6/0x150 [ 59.463455][ T5947] skb_free_head+0xa0/0x1d0 [ 59.464627][ T5947] skb_release_data+0x560/0x730 [ 59.465916][ T5947] sk_skb_reason_drop+0x129/0x1a0 [ 59.467260][ T5947] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 59.469234][ T5947] ? kernel_text_address+0x8d/0x100 [ 59.470711][ T5947] ? hlock_class+0x4e/0x130 [ 59.471991][ T5947] ? __lock_acquire+0x163e/0x3ce0 [ 59.473392][ T5947] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 59.475475][ T5947] ? hlock_class+0x4e/0x130 [ 59.476789][ T5947] ? __lock_acquire+0xbdd/0x3ce0 [ 59.478128][ T5947] ? __pfx___lock_acquire+0x10/0x10 [ 59.479631][ T5947] __netif_receive_skb_list_core+0x357/0x950 [ 59.481382][ T5947] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 59.483623][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 59.484933][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 59.487181][ T5947] ? lock_acquire+0x2f/0xb0 [ 59.488287][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 59.490095][ T5947] netif_receive_skb_list_internal+0x753/0xdb0 [ 59.491706][ T5947] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 59.493740][ T5947] ? __pfx_eth_type_trans+0x10/0x10 [ 59.495154][ T5947] ? __build_skb_around+0x278/0x3b0 [ 59.496535][ T5947] netif_receive_skb_list+0x4f/0x4a0 [ 59.497956][ T5947] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 59.499576][ T5947] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 59.501401][ T5947] ? bpf_test_timer_continue+0x150/0x3d0 [ 59.503132][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 59.504672][ T5947] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 59.506613][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 59.508288][ T5947] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 59.509988][ T5947] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 59.511456][ T5947] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 59.512780][ T5947] ? 0xffffffffa00045c0 [ 59.513889][ T5947] ? 0xffffffffa00045c0 [ 59.515060][ T5947] ? 0xffffffffa00045c0 [ 59.516166][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 59.517738][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 59.519223][ T5947] ? lock_acquire+0x2f/0xb0 [ 59.520462][ T5947] ? __fget_files+0x40/0x3f0 [ 59.521745][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 59.523553][ T5947] ? fput+0x30/0x390 [ 59.524793][ T5947] ? __bpf_prog_get+0xa0/0x290 [ 59.526085][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 59.527850][ T5947] __sys_bpf+0xfc6/0x49a0 [ 59.529206][ T5947] ? find_held_lock+0x2d/0x110 [ 59.530527][ T5947] ? __pfx___sys_bpf+0x10/0x10 [ 59.531876][ T5947] ? __might_fault+0x13b/0x190 [ 59.533254][ T5947] ? __pfx_lock_release+0x10/0x10 [ 59.534625][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 59.536056][ T5947] ? lock_acquire+0x2f/0xb0 [ 59.537425][ T5947] ? __might_fault+0xe3/0x190 [ 59.538777][ T5947] ? xfd_validate_state+0x5d/0x180 [ 59.540246][ T5947] ? rcu_is_watching+0x12/0xc0 [ 59.541632][ T5947] __x64_sys_bpf+0x78/0xc0 [ 59.542881][ T5947] ? lockdep_hardirqs_on+0x7c/0x110 [ 59.544432][ T5947] do_syscall_64+0xcd/0x250 [ 59.545679][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.547476][ T5947] RIP: 0033:0x7ffb21d3be99 [ 59.548645][ T5947] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 59.553946][ T5947] RSP: 002b:00007ffb21cf6228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 59.556029][ T5947] RAX: ffffffffffffffda RBX: 00007ffb21dc6328 RCX: 00007ffb21d3be99 [ 59.558052][ T5947] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 59.560017][ T5947] RBP: 00007ffb21dc6320 R08: 00007ffb21cf66c0 R09: 00007ffb21cf66c0 [ 59.562029][ T5947] R10: 00007ffb21cf66c0 R11: 0000000000000246 R12: 00007ffb21d93074 [ 59.564117][ T5947] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe38c46e08 [ 59.566181][ T5947] [ 59.567103][ T5947] BUG: Bad page state in process syz-executor153 pfn:293f4 [ 59.569084][ T5947] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x293f4 [ 59.571645][ T5947] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 59.573780][ T5947] raw: 00fff00000000000 dead000000000040 ffff88802a725000 0000000000000000 [ 59.576081][ T5947] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 59.578276][ T5947] page dumped because: page_pool leak [ 59.579628][ T5947] page_owner tracks the page as allocated [ 59.581144][ T5947] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5947, tgid 5942 (syz-executor153), ts 50555197248, free_ts 48542565078 [ 59.585592][ T5947] post_alloc_hook+0x2d1/0x350 [ 59.586812][ T5947] get_page_from_freelist+0x101e/0x3070 [ 59.588238][ T5947] __alloc_pages_noprof+0x223/0x25a0 [ 59.589606][ T5947] alloc_pages_bulk_noprof+0x77c/0x1110 [ 59.591153][ T5947] __page_pool_alloc_pages_slow+0x18f/0x770 [ 59.592892][ T5947] page_pool_alloc_netmem+0xc4/0x160 [ 59.594460][ T5947] page_pool_alloc_pages+0x1a/0x60 [ 59.595767][ T5947] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 59.597373][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 59.598682][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 59.600181][ T5947] __sys_bpf+0xfc6/0x49a0 [ 59.601473][ T5947] __x64_sys_bpf+0x78/0xc0 [ 59.602850][ T5947] do_syscall_64+0xcd/0x250 [ 59.604533][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.606591][ T5947] page last free pid 5924 tgid 5924 stack trace: [ 59.608538][ T5947] free_unref_page+0x5f4/0xdc0 [ 59.609996][ T5947] __folio_put+0x30d/0x3d0 [ 59.611339][ T5947] put_page+0x21e/0x280 [ 59.612708][ T5947] anon_pipe_buf_release+0x11a/0x240 [ 59.615984][ T5947] pipe_read+0x641/0x13f0 [ 59.617586][ T5947] vfs_read+0xa4c/0xbe0 [ 59.619097][ T5947] ksys_read+0x1fa/0x260 [ 59.620487][ T5947] do_syscall_64+0xcd/0x250 [ 59.621903][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.623685][ T5947] Modules linked in: [ 59.626187][ T5947] CPU: 3 UID: 0 PID: 5947 Comm: syz-executor153 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 59.630012][ T5947] Tainted: [B]=BAD_PAGE [ 59.631511][ T5947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 59.635133][ T5947] Call Trace: [ 59.636002][ T5947] [ 59.636822][ T5947] dump_stack_lvl+0x16c/0x1f0 [ 59.638090][ T5947] bad_page+0xb3/0x1f0 [ 59.639095][ T5947] ? __pfx_bad_page+0x10/0x10 [ 59.640275][ T5947] ? page_bad_reason+0x9d/0x1e0 [ 59.641742][ T5947] free_unref_page+0x657/0xdc0 [ 59.643105][ T5947] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 59.645618][ T5947] ? __phys_addr+0xc6/0x150 [ 59.647051][ T5947] skb_free_head+0xa0/0x1d0 [ 59.649055][ T5947] skb_release_data+0x560/0x730 [ 59.650537][ T5947] sk_skb_reason_drop+0x129/0x1a0 [ 59.652221][ T5947] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 59.654314][ T5947] ? kernel_text_address+0x8d/0x100 [ 59.655670][ T5947] ? hlock_class+0x4e/0x130 [ 59.656874][ T5947] ? __lock_acquire+0x163e/0x3ce0 [ 59.658214][ T5947] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 59.660318][ T5947] ? hlock_class+0x4e/0x130 [ 59.661718][ T5947] ? __lock_acquire+0xbdd/0x3ce0 [ 59.663703][ T5947] ? __pfx___lock_acquire+0x10/0x10 [ 59.665363][ T5947] __netif_receive_skb_list_core+0x357/0x950 [ 59.667533][ T5947] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 59.669451][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 59.671257][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 59.673272][ T5947] ? lock_acquire+0x2f/0xb0 [ 59.674516][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 59.676158][ T5947] netif_receive_skb_list_internal+0x753/0xdb0 [ 59.678214][ T5947] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 59.680288][ T5947] ? __pfx_eth_type_trans+0x10/0x10 [ 59.681942][ T5947] ? __build_skb_around+0x278/0x3b0 [ 59.683681][ T5947] netif_receive_skb_list+0x4f/0x4a0 [ 59.685570][ T5947] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 59.687301][ T5947] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 59.689032][ T5947] ? bpf_test_timer_continue+0x150/0x3d0 [ 59.690726][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 59.692052][ T5947] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 59.693679][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 59.695422][ T5947] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 59.697248][ T5947] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 59.699082][ T5947] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 59.700488][ T5947] ? 0xffffffffa00045c0 [ 59.701545][ T5947] ? 0xffffffffa00045c0 [ 59.702602][ T5947] ? 0xffffffffa00045c0 [ 59.703823][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 59.705583][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 59.707695][ T5947] ? lock_acquire+0x2f/0xb0 [ 59.709302][ T5947] ? __fget_files+0x40/0x3f0 [ 59.710596][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 59.712058][ T5947] ? fput+0x30/0x390 [ 59.713165][ T5947] ? __bpf_prog_get+0xa0/0x290 [ 59.714584][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 59.716770][ T5947] __sys_bpf+0xfc6/0x49a0 [ 59.718397][ T5947] ? find_held_lock+0x2d/0x110 [ 59.719776][ T5947] ? __pfx___sys_bpf+0x10/0x10 [ 59.721190][ T5947] ? __might_fault+0x13b/0x190 [ 59.722544][ T5947] ? __pfx_lock_release+0x10/0x10 [ 59.724211][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 59.725909][ T5947] ? lock_acquire+0x2f/0xb0 [ 59.727229][ T5947] ? __might_fault+0xe3/0x190 [ 59.728752][ T5947] ? xfd_validate_state+0x5d/0x180 [ 59.730474][ T5947] ? rcu_is_watching+0x12/0xc0 [ 59.731734][ T5947] __x64_sys_bpf+0x78/0xc0 [ 59.732946][ T5947] ? lockdep_hardirqs_on+0x7c/0x110 [ 59.734317][ T5947] do_syscall_64+0xcd/0x250 [ 59.735522][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.737054][ T5947] RIP: 0033:0x7ffb21d3be99 [ 59.738383][ T5947] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 59.743693][ T5947] RSP: 002b:00007ffb21cf6228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 59.746326][ T5947] RAX: ffffffffffffffda RBX: 00007ffb21dc6328 RCX: 00007ffb21d3be99 [ 59.748735][ T5947] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 59.750791][ T5947] RBP: 00007ffb21dc6320 R08: 00007ffb21cf66c0 R09: 00007ffb21cf66c0 [ 59.752848][ T5947] R10: 00007ffb21cf66c0 R11: 0000000000000246 R12: 00007ffb21d93074 [ 59.755018][ T5947] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe38c46e08 [ 59.757107][ T5947] [ 59.758095][ T5947] BUG: Bad page state in process syz-executor153 pfn:36517 [ 59.760188][ T5947] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x36517 [ 59.762446][ T5947] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 59.764361][ T5947] raw: 00fff00000000000 dead000000000040 ffff88802a725000 0000000000000000 [ 59.766580][ T5947] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 59.769760][ T5947] page dumped because: page_pool leak [ 59.771481][ T5947] page_owner tracks the page as allocated [ 59.773136][ T5947] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5947, tgid 5942 (syz-executor153), ts 50555192956, free_ts 48675997126 [ 59.778727][ T5947] post_alloc_hook+0x2d1/0x350 [ 59.780674][ T5947] get_page_from_freelist+0x101e/0x3070 [ 59.782812][ T5947] __alloc_pages_noprof+0x223/0x25a0 [ 59.784534][ T5947] alloc_pages_bulk_noprof+0x77c/0x1110 [ 59.786147][ T5947] __page_pool_alloc_pages_slow+0x18f/0x770 [ 59.787812][ T5947] page_pool_alloc_netmem+0xc4/0x160 [ 59.789199][ T5947] page_pool_alloc_pages+0x1a/0x60 [ 59.790916][ T5947] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 59.792454][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 59.794020][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 59.795476][ T5947] __sys_bpf+0xfc6/0x49a0 [ 59.796581][ T5947] __x64_sys_bpf+0x78/0xc0 [ 59.797890][ T5947] do_syscall_64+0xcd/0x250 [ 59.799058][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.800618][ T5947] page last free pid 5924 tgid 5924 stack trace: [ 59.802184][ T5947] free_unref_page+0x5f4/0xdc0 [ 59.803428][ T5947] __folio_put+0x30d/0x3d0 [ 59.804720][ T5947] put_page+0x21e/0x280 [ 59.805883][ T5947] anon_pipe_buf_release+0x11a/0x240 [ 59.807343][ T5947] pipe_read+0x641/0x13f0 [ 59.809163][ T5947] vfs_read+0xa4c/0xbe0 [ 59.810523][ T5947] ksys_read+0x1fa/0x260 [ 59.811876][ T5947] do_syscall_64+0xcd/0x250 [ 59.813437][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.815187][ T5947] Modules linked in: [ 59.816299][ T5947] CPU: 3 UID: 0 PID: 5947 Comm: syz-executor153 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 59.820074][ T5947] Tainted: [B]=BAD_PAGE [ 59.821123][ T5947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 59.823862][ T5947] Call Trace: [ 59.824765][ T5947] [ 59.825567][ T5947] dump_stack_lvl+0x16c/0x1f0 [ 59.826938][ T5947] bad_page+0xb3/0x1f0 [ 59.828179][ T5947] ? __pfx_bad_page+0x10/0x10 [ 59.829643][ T5947] ? page_bad_reason+0x9d/0x1e0 [ 59.831102][ T5947] free_unref_page+0x657/0xdc0 [ 59.832495][ T5947] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 59.834074][ T5947] ? __phys_addr+0xc6/0x150 [ 59.835316][ T5947] skb_free_head+0xa0/0x1d0 [ 59.836542][ T5947] skb_release_data+0x560/0x730 [ 59.837881][ T5947] sk_skb_reason_drop+0x129/0x1a0 [ 59.839302][ T5947] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 59.841479][ T5947] ? kernel_text_address+0x8d/0x100 [ 59.843224][ T5947] ? hlock_class+0x4e/0x130 [ 59.844663][ T5947] ? __lock_acquire+0x163e/0x3ce0 [ 59.846118][ T5947] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 59.848179][ T5947] ? hlock_class+0x4e/0x130 [ 59.849506][ T5947] ? __lock_acquire+0xbdd/0x3ce0 [ 59.850771][ T5947] ? __pfx___lock_acquire+0x10/0x10 [ 59.852072][ T5947] __netif_receive_skb_list_core+0x357/0x950 [ 59.853734][ T5947] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 59.855582][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 59.856929][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 59.858574][ T5947] ? lock_acquire+0x2f/0xb0 [ 59.859769][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 59.861427][ T5947] netif_receive_skb_list_internal+0x753/0xdb0 [ 59.863187][ T5947] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 59.865220][ T5947] ? __pfx_eth_type_trans+0x10/0x10 [ 59.866805][ T5947] ? __build_skb_around+0x278/0x3b0 [ 59.868748][ T5947] netif_receive_skb_list+0x4f/0x4a0 [ 59.870153][ T5947] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 59.871908][ T5947] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 59.873722][ T5947] ? bpf_test_timer_continue+0x150/0x3d0 [ 59.875170][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 59.876541][ T5947] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 59.878113][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 59.879631][ T5947] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 59.881238][ T5947] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 59.882917][ T5947] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 59.884508][ T5947] ? 0xffffffffa00045c0 [ 59.885822][ T5947] ? 0xffffffffa00045c0 [ 59.887172][ T5947] ? 0xffffffffa00045c0 [ 59.888785][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 59.891087][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 59.892678][ T5947] ? lock_acquire+0x2f/0xb0 [ 59.894285][ T5947] ? __fget_files+0x40/0x3f0 [ 59.895877][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 59.897478][ T5947] ? fput+0x30/0x390 [ 59.898486][ T5947] ? __bpf_prog_get+0xa0/0x290 [ 59.899704][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 59.901215][ T5947] __sys_bpf+0xfc6/0x49a0 [ 59.902461][ T5947] ? find_held_lock+0x2d/0x110 [ 59.903805][ T5947] ? __pfx___sys_bpf+0x10/0x10 [ 59.905129][ T5947] ? __might_fault+0x13b/0x190 [ 59.906559][ T5947] ? __pfx_lock_release+0x10/0x10 [ 59.907851][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 59.909155][ T5947] ? lock_acquire+0x2f/0xb0 [ 59.910366][ T5947] ? __might_fault+0xe3/0x190 [ 59.911885][ T5947] ? xfd_validate_state+0x5d/0x180 [ 59.913229][ T5947] ? rcu_is_watching+0x12/0xc0 [ 59.914449][ T5947] __x64_sys_bpf+0x78/0xc0 [ 59.915596][ T5947] ? lockdep_hardirqs_on+0x7c/0x110 [ 59.916925][ T5947] do_syscall_64+0xcd/0x250 [ 59.918123][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.919740][ T5947] RIP: 0033:0x7ffb21d3be99 [ 59.921057][ T5947] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 59.926587][ T5947] RSP: 002b:00007ffb21cf6228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 59.929164][ T5947] RAX: ffffffffffffffda RBX: 00007ffb21dc6328 RCX: 00007ffb21d3be99 [ 59.931339][ T5947] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 59.933495][ T5947] RBP: 00007ffb21dc6320 R08: 00007ffb21cf66c0 R09: 00007ffb21cf66c0 [ 59.935760][ T5947] R10: 00007ffb21cf66c0 R11: 0000000000000246 R12: 00007ffb21d93074 [ 59.938068][ T5947] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe38c46e08 [ 59.940070][ T5947] [ 59.940990][ T5947] BUG: Bad page state in process syz-executor153 pfn:36516 [ 59.943119][ T5947] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x36516 [ 59.946092][ T5947] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 59.948715][ T5947] raw: 00fff00000000000 dead000000000040 ffff88802a725000 0000000000000000 [ 59.950942][ T5947] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 59.953253][ T5947] page dumped because: page_pool leak [ 59.954813][ T5947] page_owner tracks the page as allocated [ 59.956335][ T5947] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5947, tgid 5942 (syz-executor153), ts 50555188696, free_ts 48675991126 [ 59.960938][ T5947] post_alloc_hook+0x2d1/0x350 [ 59.962209][ T5947] get_page_from_freelist+0x101e/0x3070 [ 59.963652][ T5947] __alloc_pages_noprof+0x223/0x25a0 [ 59.965226][ T5947] alloc_pages_bulk_noprof+0x77c/0x1110 [ 59.966742][ T5947] __page_pool_alloc_pages_slow+0x18f/0x770 [ 59.968299][ T5947] page_pool_alloc_netmem+0xc4/0x160 [ 59.969849][ T5947] page_pool_alloc_pages+0x1a/0x60 [ 59.971223][ T5947] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 59.972823][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 59.974356][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 59.975734][ T5947] __sys_bpf+0xfc6/0x49a0 [ 59.976813][ T5947] __x64_sys_bpf+0x78/0xc0 [ 59.978154][ T5947] do_syscall_64+0xcd/0x250 [ 59.979564][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.981062][ T5947] page last free pid 5924 tgid 5924 stack trace: [ 59.982864][ T5947] free_unref_page+0x5f4/0xdc0 [ 59.984235][ T5947] __folio_put+0x30d/0x3d0 [ 59.985535][ T5947] put_page+0x21e/0x280 [ 59.986724][ T5947] anon_pipe_buf_release+0x11a/0x240 [ 59.988562][ T5947] pipe_read+0x641/0x13f0 [ 59.989839][ T5947] vfs_read+0xa4c/0xbe0 [ 59.991049][ T5947] ksys_read+0x1fa/0x260 [ 59.992316][ T5947] do_syscall_64+0xcd/0x250 [ 59.993785][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.995458][ T5947] Modules linked in: [ 59.996626][ T5947] CPU: 3 UID: 0 PID: 5947 Comm: syz-executor153 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 60.000469][ T5947] Tainted: [B]=BAD_PAGE [ 60.001743][ T5947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 60.004915][ T5947] Call Trace: [ 60.005950][ T5947] [ 60.006858][ T5947] dump_stack_lvl+0x16c/0x1f0 [ 60.008180][ T5947] bad_page+0xb3/0x1f0 [ 60.009198][ T5947] ? __pfx_bad_page+0x10/0x10 [ 60.010367][ T5947] ? page_bad_reason+0x9d/0x1e0 [ 60.011594][ T5947] free_unref_page+0x657/0xdc0 [ 60.012810][ T5947] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 60.014339][ T5947] ? __phys_addr+0xc6/0x150 [ 60.015492][ T5947] skb_free_head+0xa0/0x1d0 [ 60.016708][ T5947] skb_release_data+0x560/0x730 [ 60.017990][ T5947] sk_skb_reason_drop+0x129/0x1a0 [ 60.019332][ T5947] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 60.021039][ T5947] ? kernel_text_address+0x8d/0x100 [ 60.022643][ T5947] ? hlock_class+0x4e/0x130 [ 60.024094][ T5947] ? __lock_acquire+0x163e/0x3ce0 [ 60.025739][ T5947] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 60.027619][ T5947] ? hlock_class+0x4e/0x130 [ 60.028743][ T5947] ? __lock_acquire+0xbdd/0x3ce0 [ 60.030043][ T5947] ? __pfx___lock_acquire+0x10/0x10 [ 60.031358][ T5947] __netif_receive_skb_list_core+0x357/0x950 [ 60.032959][ T5947] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 60.034568][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 60.035897][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 60.037514][ T5947] ? lock_acquire+0x2f/0xb0 [ 60.038690][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 60.040367][ T5947] netif_receive_skb_list_internal+0x753/0xdb0 [ 60.042028][ T5947] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 60.044129][ T5947] ? __pfx_eth_type_trans+0x10/0x10 [ 60.045683][ T5947] ? __build_skb_around+0x278/0x3b0 [ 60.047191][ T5947] netif_receive_skb_list+0x4f/0x4a0 [ 60.048814][ T5947] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 60.050805][ T5947] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 60.052673][ T5947] ? bpf_test_timer_continue+0x150/0x3d0 [ 60.054227][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 60.055515][ T5947] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 60.056966][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 60.058447][ T5947] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 60.059908][ T5947] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 60.061378][ T5947] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 60.062695][ T5947] ? 0xffffffffa00045c0 [ 60.063705][ T5947] ? 0xffffffffa00045c0 [ 60.064760][ T5947] ? 0xffffffffa00045c0 [ 60.065819][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 60.067386][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 60.068765][ T5947] ? lock_acquire+0x2f/0xb0 [ 60.069904][ T5947] ? __fget_files+0x40/0x3f0 [ 60.071091][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 60.072559][ T5947] ? fput+0x30/0x390 [ 60.073695][ T5947] ? __bpf_prog_get+0xa0/0x290 [ 60.075269][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 60.076752][ T5947] __sys_bpf+0xfc6/0x49a0 [ 60.077880][ T5947] ? find_held_lock+0x2d/0x110 [ 60.079107][ T5947] ? __pfx___sys_bpf+0x10/0x10 [ 60.080291][ T5947] ? __might_fault+0x13b/0x190 [ 60.081535][ T5947] ? __pfx_lock_release+0x10/0x10 [ 60.082811][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 60.084155][ T5947] ? lock_acquire+0x2f/0xb0 [ 60.085327][ T5947] ? __might_fault+0xe3/0x190 [ 60.086786][ T5947] ? xfd_validate_state+0x5d/0x180 [ 60.088323][ T5947] ? rcu_is_watching+0x12/0xc0 [ 60.089787][ T5947] __x64_sys_bpf+0x78/0xc0 [ 60.091177][ T5947] ? lockdep_hardirqs_on+0x7c/0x110 [ 60.092459][ T5947] do_syscall_64+0xcd/0x250 [ 60.093609][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.095092][ T5947] RIP: 0033:0x7ffb21d3be99 [ 60.096184][ T5947] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 60.101039][ T5947] RSP: 002b:00007ffb21cf6228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 60.103204][ T5947] RAX: ffffffffffffffda RBX: 00007ffb21dc6328 RCX: 00007ffb21d3be99 [ 60.105183][ T5947] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 60.107182][ T5947] RBP: 00007ffb21dc6320 R08: 00007ffb21cf66c0 R09: 00007ffb21cf66c0 [ 60.109198][ T5947] R10: 00007ffb21cf66c0 R11: 0000000000000246 R12: 00007ffb21d93074 [ 60.111218][ T5947] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe38c46e08 [ 60.113262][ T5947] [ 60.114177][ T5947] BUG: Bad page state in process syz-executor153 pfn:36515 [ 60.116086][ T5947] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x36515 [ 60.118346][ T5947] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 60.120279][ T5947] raw: 00fff00000000000 dead000000000040 ffff88802a725000 0000000000000000 [ 60.122531][ T5947] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 60.124940][ T5947] page dumped because: page_pool leak [ 60.126426][ T5947] page_owner tracks the page as allocated [ 60.127922][ T5947] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5947, tgid 5942 (syz-executor153), ts 50555183960, free_ts 48675927019 [ 60.132553][ T5947] post_alloc_hook+0x2d1/0x350 [ 60.133894][ T5947] get_page_from_freelist+0x101e/0x3070 [ 60.135422][ T5947] __alloc_pages_noprof+0x223/0x25a0 [ 60.136800][ T5947] alloc_pages_bulk_noprof+0x77c/0x1110 [ 60.138264][ T5947] __page_pool_alloc_pages_slow+0x18f/0x770 [ 60.139806][ T5947] page_pool_alloc_netmem+0xc4/0x160 [ 60.141149][ T5947] page_pool_alloc_pages+0x1a/0x60 [ 60.142499][ T5947] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 60.144128][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 60.145680][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 60.147317][ T5947] __sys_bpf+0xfc6/0x49a0 [ 60.148713][ T5947] __x64_sys_bpf+0x78/0xc0 [ 60.149921][ T5947] do_syscall_64+0xcd/0x250 [ 60.151252][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.152925][ T5947] page last free pid 5924 tgid 5924 stack trace: [ 60.154865][ T5947] free_unref_page+0x5f4/0xdc0 [ 60.156239][ T5947] __folio_put+0x30d/0x3d0 [ 60.157565][ T5947] put_page+0x21e/0x280 [ 60.158671][ T5947] anon_pipe_buf_release+0x11a/0x240 [ 60.160049][ T5947] pipe_read+0x641/0x13f0 [ 60.161349][ T5947] vfs_read+0xa4c/0xbe0 [ 60.162770][ T5947] ksys_read+0x1fa/0x260 [ 60.163933][ T5947] do_syscall_64+0xcd/0x250 [ 60.165439][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.167037][ T5947] Modules linked in: [ 60.168078][ T5947] CPU: 3 UID: 0 PID: 5947 Comm: syz-executor153 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 60.171575][ T5947] Tainted: [B]=BAD_PAGE [ 60.172714][ T5947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 60.175816][ T5947] Call Trace: [ 60.176856][ T5947] [ 60.177697][ T5947] dump_stack_lvl+0x16c/0x1f0 [ 60.178925][ T5947] bad_page+0xb3/0x1f0 [ 60.180033][ T5947] ? __pfx_bad_page+0x10/0x10 [ 60.181320][ T5947] ? page_bad_reason+0x9d/0x1e0 [ 60.182900][ T5947] free_unref_page+0x657/0xdc0 [ 60.184389][ T5947] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 60.186076][ T5947] ? __phys_addr+0xc6/0x150 [ 60.187392][ T5947] skb_free_head+0xa0/0x1d0 [ 60.188774][ T5947] skb_release_data+0x560/0x730 [ 60.190200][ T5947] sk_skb_reason_drop+0x129/0x1a0 [ 60.191513][ T5947] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 60.193248][ T5947] ? kernel_text_address+0x8d/0x100 [ 60.194603][ T5947] ? hlock_class+0x4e/0x130 [ 60.195812][ T5947] ? __lock_acquire+0x163e/0x3ce0 [ 60.197172][ T5947] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 60.199151][ T5947] ? hlock_class+0x4e/0x130 [ 60.200388][ T5947] ? __lock_acquire+0xbdd/0x3ce0 [ 60.201695][ T5947] ? __pfx___lock_acquire+0x10/0x10 [ 60.203164][ T5947] __netif_receive_skb_list_core+0x357/0x950 [ 60.205404][ T5947] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 60.207578][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 60.209249][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 60.211248][ T5947] ? lock_acquire+0x2f/0xb0 [ 60.212586][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 60.214401][ T5947] netif_receive_skb_list_internal+0x753/0xdb0 [ 60.216160][ T5947] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 60.217891][ T5947] ? __pfx_eth_type_trans+0x10/0x10 [ 60.219225][ T5947] ? __build_skb_around+0x278/0x3b0 [ 60.220577][ T5947] netif_receive_skb_list+0x4f/0x4a0 [ 60.221881][ T5947] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 60.223669][ T5947] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 60.225578][ T5947] ? bpf_test_timer_continue+0x150/0x3d0 [ 60.227028][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 60.228760][ T5947] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 60.230390][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 60.231994][ T5947] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 60.233514][ T5947] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 60.235035][ T5947] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 60.236349][ T5947] ? 0xffffffffa00045c0 [ 60.237454][ T5947] ? 0xffffffffa00045c0 [ 60.238560][ T5947] ? 0xffffffffa00045c0 [ 60.239654][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 60.241201][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 60.242778][ T5947] ? lock_acquire+0x2f/0xb0 [ 60.244080][ T5947] ? __fget_files+0x40/0x3f0 [ 60.245443][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 60.246980][ T5947] ? fput+0x30/0x390 [ 60.248050][ T5947] ? __bpf_prog_get+0xa0/0x290 [ 60.249303][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 60.250951][ T5947] __sys_bpf+0xfc6/0x49a0 [ 60.252291][ T5947] ? find_held_lock+0x2d/0x110 [ 60.253753][ T5947] ? __pfx___sys_bpf+0x10/0x10 [ 60.255175][ T5947] ? __might_fault+0x13b/0x190 [ 60.256592][ T5947] ? __pfx_lock_release+0x10/0x10 [ 60.258095][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 60.259494][ T5947] ? lock_acquire+0x2f/0xb0 [ 60.260722][ T5947] ? __might_fault+0xe3/0x190 [ 60.261997][ T5947] ? xfd_validate_state+0x5d/0x180 [ 60.263550][ T5947] ? rcu_is_watching+0x12/0xc0 [ 60.264796][ T5947] __x64_sys_bpf+0x78/0xc0 [ 60.265926][ T5947] ? lockdep_hardirqs_on+0x7c/0x110 [ 60.267232][ T5947] do_syscall_64+0xcd/0x250 [ 60.268411][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.269954][ T5947] RIP: 0033:0x7ffb21d3be99 [ 60.271110][ T5947] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 60.276129][ T5947] RSP: 002b:00007ffb21cf6228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 60.278329][ T5947] RAX: ffffffffffffffda RBX: 00007ffb21dc6328 RCX: 00007ffb21d3be99 [ 60.280431][ T5947] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 60.282653][ T5947] RBP: 00007ffb21dc6320 R08: 00007ffb21cf66c0 R09: 00007ffb21cf66c0 [ 60.285466][ T5947] R10: 00007ffb21cf66c0 R11: 0000000000000246 R12: 00007ffb21d93074 [ 60.288233][ T5947] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe38c46e08 [ 60.290956][ T5947] [ 60.292218][ T5947] BUG: Bad page state in process syz-executor153 pfn:36514 [ 60.294523][ T5947] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x36514 [ 60.296872][ T5947] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 60.298739][ T5947] raw: 00fff00000000000 dead000000000040 ffff88802a725000 0000000000000000 [ 60.300971][ T5947] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 60.303314][ T5947] page dumped because: page_pool leak [ 60.304949][ T5947] page_owner tracks the page as allocated [ 60.306705][ T5947] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5947, tgid 5942 (syz-executor153), ts 50555179457, free_ts 48675922277 [ 60.311276][ T5947] post_alloc_hook+0x2d1/0x350 [ 60.312612][ T5947] get_page_from_freelist+0x101e/0x3070 [ 60.314081][ T5947] __alloc_pages_noprof+0x223/0x25a0 [ 60.315516][ T5947] alloc_pages_bulk_noprof+0x77c/0x1110 [ 60.316930][ T5947] __page_pool_alloc_pages_slow+0x18f/0x770 [ 60.318512][ T5947] page_pool_alloc_netmem+0xc4/0x160 [ 60.319924][ T5947] page_pool_alloc_pages+0x1a/0x60 [ 60.321321][ T5947] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 60.322962][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 60.324571][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 60.326259][ T5947] __sys_bpf+0xfc6/0x49a0 [ 60.327714][ T5947] __x64_sys_bpf+0x78/0xc0 [ 60.328849][ T5947] do_syscall_64+0xcd/0x250 [ 60.330053][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.331622][ T5947] page last free pid 5924 tgid 5924 stack trace: [ 60.333571][ T5947] free_unref_page+0x5f4/0xdc0 [ 60.334989][ T5947] __folio_put+0x30d/0x3d0 [ 60.336229][ T5947] put_page+0x21e/0x280 [ 60.337355][ T5947] anon_pipe_buf_release+0x11a/0x240 [ 60.338761][ T5947] pipe_read+0x641/0x13f0 [ 60.339921][ T5947] vfs_read+0xa4c/0xbe0 [ 60.341057][ T5947] ksys_read+0x1fa/0x260 [ 60.342204][ T5947] do_syscall_64+0xcd/0x250 [ 60.343547][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.345266][ T5947] Modules linked in: [ 60.346343][ T5947] CPU: 3 UID: 0 PID: 5947 Comm: syz-executor153 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 60.349536][ T5947] Tainted: [B]=BAD_PAGE [ 60.350646][ T5947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 60.353570][ T5947] Call Trace: [ 60.354475][ T5947] [ 60.355254][ T5947] dump_stack_lvl+0x16c/0x1f0 [ 60.356495][ T5947] bad_page+0xb3/0x1f0 [ 60.357575][ T5947] ? __pfx_bad_page+0x10/0x10 [ 60.358819][ T5947] ? page_bad_reason+0x9d/0x1e0 [ 60.360118][ T5947] free_unref_page+0x657/0xdc0 [ 60.361458][ T5947] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 60.363314][ T5947] ? __phys_addr+0xc6/0x150 [ 60.364889][ T5947] skb_free_head+0xa0/0x1d0 [ 60.366222][ T5947] skb_release_data+0x560/0x730 [ 60.367872][ T5947] sk_skb_reason_drop+0x129/0x1a0 [ 60.369573][ T5947] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 60.371520][ T5947] ? kernel_text_address+0x8d/0x100 [ 60.373102][ T5947] ? hlock_class+0x4e/0x130 [ 60.374294][ T5947] ? __lock_acquire+0x163e/0x3ce0 [ 60.375590][ T5947] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 60.377449][ T5947] ? hlock_class+0x4e/0x130 [ 60.378637][ T5947] ? __lock_acquire+0xbdd/0x3ce0 [ 60.379974][ T5947] ? __pfx___lock_acquire+0x10/0x10 [ 60.381519][ T5947] __netif_receive_skb_list_core+0x357/0x950 [ 60.383266][ T5947] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 60.384942][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 60.386326][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 60.388287][ T5947] ? lock_acquire+0x2f/0xb0 [ 60.389433][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 60.391037][ T5947] netif_receive_skb_list_internal+0x753/0xdb0 [ 60.392631][ T5947] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 60.394564][ T5947] ? __pfx_eth_type_trans+0x10/0x10 [ 60.395927][ T5947] ? __build_skb_around+0x278/0x3b0 [ 60.397368][ T5947] netif_receive_skb_list+0x4f/0x4a0 [ 60.398799][ T5947] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 60.400681][ T5947] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 60.402664][ T5947] ? bpf_test_timer_continue+0x150/0x3d0 [ 60.404707][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 60.406437][ T5947] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 60.407999][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 60.409709][ T5947] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 60.411219][ T5947] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 60.412667][ T5947] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 60.414024][ T5947] ? 0xffffffffa00045c0 [ 60.415196][ T5947] ? 0xffffffffa00045c0 [ 60.416254][ T5947] ? 0xffffffffa00045c0 [ 60.417284][ T5947] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 60.418747][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 60.420115][ T5947] ? lock_acquire+0x2f/0xb0 [ 60.421315][ T5947] ? __fget_files+0x40/0x3f0 [ 60.422645][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 60.424162][ T5947] ? fput+0x30/0x390 [ 60.425242][ T5947] ? __bpf_prog_get+0xa0/0x290 [ 60.426730][ T5947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 60.428594][ T5947] __sys_bpf+0xfc6/0x49a0 [ 60.429880][ T5947] ? find_held_lock+0x2d/0x110 [ 60.431265][ T5947] ? __pfx___sys_bpf+0x10/0x10 [ 60.432648][ T5947] ? __might_fault+0x13b/0x190 [ 60.433988][ T5947] ? __pfx_lock_release+0x10/0x10 [ 60.435271][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 60.436628][ T5947] ? lock_acquire+0x2f/0xb0 [ 60.437943][ T5947] ? __might_fault+0xe3/0x190 [ 60.439233][ T5947] ? xfd_validate_state+0x5d/0x180 [ 60.440686][ T5947] ? rcu_is_watching+0x12/0xc0 [ 60.442070][ T5947] __x64_sys_bpf+0x78/0xc0 [ 60.443447][ T5947] ? lockdep_hardirqs_on+0x7c/0x110 [ 60.445036][ T5947] do_syscall_64+0xcd/0x250 [ 60.446328][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.447904][ T5947] RIP: 0033:0x7ffb21d3be99 [ 60.449242][ T5947] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 60.454574][ T5947] RSP: 002b:00007ffb21cf6228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 60.456698][ T5947] RAX: ffffffffffffffda RBX: 00007ffb21dc6328 RCX: 00007ffb21d3be99 [ 60.458746][ T5947] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 60.460718][ T5947] RBP: 00007ffb21dc6320 R08: 00007ffb21cf66c0 R09: 00007ffb21cf66c0 [ 60.462971][ T5947] R10: 00007ffb21cf66c0 R11: 0000000000000246 R12: 00007ffb21d93074 [ 60.465218][ T5947] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe38c46e08 [ 60.467434][ T5947] [ 60.468614][ T5947] BUG: Bad page state in process syz-executor153 pfn:36527 [ 60.470701][ T5947] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x36527 [ 60.473361][ T5947] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 60.475235][ T5947] raw: 00fff00000000000 dead000000000040 ffff88802a725000 0000000000000000 [ 60.477412][ T5947] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 60.479543][ T5947] page dumped because: page_pool leak [ 60.480957][ T5947] page_owner tracks the page as allocated [ 60.482574][ T5947] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5947, tgid 5942 (syz-executor153), ts 50555173985, free_ts 48676026655 [ 60.487300][ T5947] post_alloc_hook+0x2d1/0x350 [ 60.488609][ T5947] get_page_from_freelist+0x101e/0x3070 [ 60.490090][ T5947] __alloc_pages_noprof+0x223/0x25a0 [ 60.491468][ T5947] alloc_pages_bulk_noprof+0x77c/0x1110 [ 60.492924][ T5947] __page_pool_alloc_pages_slow+0x18f/0x770 [ 60.494645][ T5947] page_pool_alloc_netmem+0xc4/0x160 [ 60.496066][ T5947] page_pool_alloc_pages+0x1a/0x60 [ 60.497727][ T5947] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 60.499800][ T5947] bpf_test_run_xdp_live+0x365/0x500 [ 60.501318][ T5947] bpf_prog_test_run_xdp+0x827/0x1580 [ 60.502960][ T5947] __sys_bpf+0xfc6/0x49a0 [ 60.504154][ T5947] __x64_sys_bpf+0x78/0xc0 [ 60.505461][ T5947] do_syscall_64+0xcd/0x250 [ 60.506664][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.508410][ T5947] page last free pid 5924 tgid 5924 stack trace: [ 60.510181][ T5947] free_unref_page+0x5f4/0xdc0 [ 60.511574][ T5947] __folio_put+0x30d/0x3d0 [ 60.512854][ T5947] put_page+0x21e/0x280 [ 60.513938][ T5947] anon_pipe_buf_release+0x11a/0x240 [ 60.515358][ T5947] pipe_read+0x641/0x13f0 [ 60.516490][ T5947] vfs_read+0xa4c/0xbe0 [ 60.517600][ T5947] ksys_read+0x1fa/0x260 [ 60.518710][ T5947] do_syscall_64+0xcd/0x250 [ 60.519909][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.521466][ T5947] Modules linked in: [ 60.522455][ T5947] CPU: 3 UID: 0 PID: 5947 Comm: syz-executor153 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 60.525775][ T5947] Tainted: [B]=BAD_PAGE [ 60.526860][ T5947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 60.529659][ T5947] Call Trace: [ 60.530527][ T5947] [ 60.531299][ T5947] dump_stack_lvl+0x16c/0x1f0 [ 60.532540][ T5947] bad_page+0xb3/0x1f0 [ 60.533695][ T5947] ? __pfx_bad_page+0x10/0x10 [ 60.535158][ T5947] ? page_bad_reason+0x9d/0x1e0 [ 60.536681][ T5947] free_unref_page+0x657/0xdc0 [ 60.538216][ T5947] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 60.539957][ T5947] ? __phys_addr+0xc6/0x150 [ 60.541144][ T5947] skb_free_head+0xa0/0x1d0 [ 60.542846][ T5947] skb_release_data+0x560/0x730 [ 60.544323][ T5947] sk_skb_reason_drop+0x129/0x1a0 [ 60.545765][ T5947] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 60.547572][ T5947] ? kernel_text_address+0x8d/0x100 [ 60.549185][ T5947] ? hlock_class+0x4e/0x130 [ 60.550354][ T5947] ? __lock_acquire+0x163e/0x3ce0 [ 60.551585][ T5947] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 60.553358][ T5947] ? hlock_class+0x4e/0x130 [ 60.554502][ T5947] ? __lock_acquire+0xbdd/0x3ce0 [ 60.555743][ T5947] ? __pfx___lock_acquire+0x10/0x10 [ 60.557058][ T5947] __netif_receive_skb_list_core+0x357/0x950 [ 60.558585][ T5947] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 60.560334][ T5947] ? trace_lock_acquire+0x14a/0x1d0 [ 60.561777][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 60.563463][ T5947] ? lock_acquire+0x2f/0xb0 [ 60.564718][ T5947] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 60.566498][ T5947] netif_receive_skb_list_internal+0x753/0xdb0 VM DIAGNOSIS: 21:29:23 Registers: info registers vcpu 0 CPU#0 RAX=000000000009748f RBX=0000000000000000 RCX=ffffffff8b2305e9 RDX=0000000000000000 RSI=ffffffff8b6cd040 RDI=ffffffff8bd1ad40 RBP=fffffbfff1bd2af8 RSP=ffffffff8de07e20 R8 =0000000000000001 R9 =ffffed100d4c7025 R10=ffff88806a63812b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8de957c0 R14=ffffffff905f5088 R15=0000000000000000 RIP=ffffffff8b2319cf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000564a7d867018 CR3=0000000035d30000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000800000 Opmask01=0000000000000001 Opmask02=00000000fff7ffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffb21dcbee0 00007ffb21dcbee0 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffb21dcbed0 00007ffb21dcbed0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffb21dcc6a8 00007ffb21dc0590 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffb21dafde4 00007ffb21dc5260 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6f723d52455355 0036333636313136 333531726f747563 6578652d7a79732f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=1ffff92000ab1ecb RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff8b6cd300 RDI=ffffffff8bd1ad40 RBP=ffffffff8e1b8280 RSP=ffffc9000558f608 R8 =0000000000000001 R9 =0000000000000001 R10=ffffffff905f508f R11=0000000000000000 R12=ffff888026624880 R13=ffff888026625360 R14=00000000ffffffff R15=0000000000000000 RIP=ffffffff8b22f839 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007ffb21cf66c0 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000000000000 CR3=000000002b39e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000800000 Opmask01=0000000000000001 Opmask02=00000000fff7ffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffb21dcbee0 00007ffb21dcbee0 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffb21dcbed0 00007ffb21dcbed0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffb21dcc6a8 00007ffb21dc0590 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffb21dafde4 00007ffb21dc5260 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6f723d52455355 0036333636313136 333531726f747563 6578652d7a79732f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88806a946a00 RCX=ffffffff818160dc RDX=ffff88802817a440 RSI=ffffffff818160b6 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc900038af6b0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffed100d528d41 R13=0000000000000001 R14=ffff88806a946a08 R15=ffff88806a840100 RIP=ffffffff818160b8 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007ffb21cf66c0 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000000000000 CR3=00000000124ce000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffffff0 Opmask01=0000000000000001 Opmask02=00000000fff7ffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5a87000000000000 80fe003cc20362ce ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000074 696d696c68736168 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000018 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffb21dc59e8 00007ffb21dc59e0 00007ffb21dc59e0 00007ffb21dcbbe0 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7865006a64615f65 726f63735f6d6f6f 2f666c65732f636f 72702f0030303031 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5d40004f41445f40 574a46565f484a4a 0a434940560a464a 57550a0015151514 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000035 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff850b46e5 RDI=ffffffff9aae7bc0 RBP=ffffffff9aae7b80 RSP=ffffc90003d6e990 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000035 R14=ffffffff850b4680 R15=0000000000000000 RIP=ffffffff850b470f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007ffb21cf66c0 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000000000000 CR3=0000000030894000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000001 Opmask01=0000000000000000 Opmask02=0000000000000018 Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff046dd5e0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c5f5f0045544156 4952505f4342494c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000042494c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6362696c5f5f0045 5441564952505f43 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 73696d7265702065 6c69665f6f666966 3d7373616c637420 745f646873733a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7363677265702065 6663665565666366 3773736166637420 7455646273733000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3337333220332020 2865696465612020 3034313d203a2938 203a3336392e3220 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3337203220202020 2230333933322020 3034202000002938 20303000002e3220 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f7a2a6f66636c55 656c636c3779796b 66697e2a7e556e62 7979300a003b376f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 393d39383a393d3b 227e636e7f6b2a3a 3a3e3b376f7a737e 2a307e636e7f6b2a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000