[ 39.175688][ T39] audit: type=1400 audit(1730218958.353:83): avc: denied { read } for pid=5343 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 39.181424][ T39] audit: type=1400 audit(1730218958.353:84): avc: denied { append } for pid=5343 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.186676][ T39] audit: type=1400 audit(1730218958.353:85): avc: denied { open } for pid=5343 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.192196][ T39] audit: type=1400 audit(1730218958.353:86): avc: denied { getattr } for pid=5343 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:9563' (ED25519) to the list of known hosts. [ 44.332224][ T39] audit: type=1400 audit(1730218963.513:87): avc: denied { execute } for pid=5947 comm="sh" name="syz-executor687383073" dev="sda1" ino=1926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 44.338351][ T39] audit: type=1400 audit(1730218963.513:88): avc: denied { execute_no_trans } for pid=5947 comm="sh" path="/syz-executor687383073" dev="sda1" ino=1926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 executing program executing program executing program executing program [ 44.344841][ T39] audit: type=1400 audit(1730218963.523:89): avc: denied { execmem } for pid=5947 comm="syz-executor687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 44.351180][ T39] audit: type=1400 audit(1730218963.523:90): avc: denied { write } for pid=5949 comm="syz-executor687" path="pipe:[8244]" dev="pipefs" ino=8244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 44.357920][ T39] audit: type=1400 audit(1730218963.523:91): avc: denied { create } for pid=5949 comm="syz-executor687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 44.363124][ T39] audit: type=1400 audit(1730218963.533:92): avc: denied { create } for pid=5955 comm="syz-executor687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.371375][ T39] audit: type=1400 audit(1730218963.533:93): avc: denied { create } for pid=5949 comm="syz-executor687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.379110][ T39] audit: type=1400 audit(1730218963.533:94): avc: denied { setopt } for pid=5955 comm="syz-executor687" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.386600][ T39] audit: type=1400 audit(1730218963.543:95): avc: denied { module_request } for pid=5956 comm="syz-executor687" kmod="ip6t_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 44.394518][ T39] audit: type=1400 audit(1730218963.553:96): avc: denied { prog_load } for pid=5956 comm="syz-executor687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 executing program [ 44.495752][ T5957] BUG: Bad page state in process syz-executor687 pfn:3203b [ 44.498337][ T5957] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3203b [ 44.503785][ T5957] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 44.506311][ T5957] raw: 00fff00000000000 dead000000000040 ffff888032d1e000 0000000000000000 [ 44.509238][ T5957] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 44.511949][ T5957] page dumped because: page_pool leak [ 44.513564][ T5957] page_owner tracks the page as allocated [ 44.515494][ T5957] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5957, tgid 5955 (syz-executor687), ts 44479171932, free_ts 44477123809 [ 44.521308][ T5957] post_alloc_hook+0x2d1/0x350 [ 44.522963][ T5957] get_page_from_freelist+0x101e/0x3070 [ 44.525137][ T5957] __alloc_pages_noprof+0x223/0x25a0 [ 44.526938][ T5957] alloc_pages_bulk_noprof+0x77c/0x1110 [ 44.528777][ T5957] __page_pool_alloc_pages_slow+0x18f/0x770 [ 44.530959][ T5957] page_pool_alloc_netmem+0xc4/0x160 [ 44.532531][ T5957] page_pool_alloc_pages+0x1a/0x60 [ 44.533915][ T5957] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 44.535981][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 44.537604][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 44.539271][ T5957] __sys_bpf+0xfc6/0x49a0 [ 44.540829][ T5957] __x64_sys_bpf+0x78/0xc0 [ 44.542335][ T5957] do_syscall_64+0xcd/0x250 [ 44.543895][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.546012][ T5957] page last free pid 5958 tgid 5952 stack trace: [ 44.548124][ T5957] free_unref_page+0x5f4/0xdc0 [ 44.549744][ T5957] __folio_put+0x30d/0x3d0 [ 44.551329][ T5957] put_page+0x21e/0x280 [ 44.552741][ T5957] page_pool_return_page+0x400/0x520 [ 44.554536][ T5957] page_pool_release+0xf4/0x7d0 [ 44.555933][ T5957] page_pool_destroy+0x10a/0x4c0 [ 44.557293][ T5957] bpf_test_run_xdp_live+0x3a1/0x500 [ 44.558985][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 44.560872][ T5957] __sys_bpf+0xfc6/0x49a0 [ 44.562339][ T5957] __x64_sys_bpf+0x78/0xc0 [ 44.563949][ T5957] do_syscall_64+0xcd/0x250 [ 44.565487][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.567445][ T5957] Modules linked in: [ 44.568806][ T5957] CPU: 3 UID: 0 PID: 5957 Comm: syz-executor687 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 44.573376][ T5957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 44.577719][ T5957] Call Trace: [ 44.579037][ T5957] [ 44.580055][ T5957] dump_stack_lvl+0x16c/0x1f0 [ 44.581733][ T5957] bad_page+0xb3/0x1f0 [ 44.583265][ T5957] ? __pfx_bad_page+0x10/0x10 [ 44.584903][ T5957] ? page_bad_reason+0x9d/0x1e0 [ 44.586309][ T5957] free_unref_page+0x657/0xdc0 [ 44.588026][ T5957] ? __phys_addr+0xc6/0x150 [ 44.589221][ T5957] skb_free_head+0xa0/0x1d0 [ 44.590411][ T5957] skb_release_data+0x560/0x730 [ 44.591720][ T5957] sk_skb_reason_drop+0x129/0x1a0 [ 44.593255][ T5957] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 44.595179][ T5957] ? kernel_text_address+0x8d/0x100 [ 44.596796][ T5957] ? hlock_class+0x4e/0x130 [ 44.598194][ T5957] ? __lock_acquire+0x163e/0x3ce0 [ 44.599627][ T5957] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 44.602099][ T5957] ? hlock_class+0x4e/0x130 [ 44.603656][ T5957] ? __lock_acquire+0xbdd/0x3ce0 [ 44.605663][ T5957] ? __pfx___lock_acquire+0x10/0x10 [ 44.607691][ T5957] __netif_receive_skb_list_core+0x357/0x950 [ 44.609761][ T5957] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 44.611923][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 44.613608][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 44.615708][ T5957] ? lock_acquire+0x2f/0xb0 [ 44.617256][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 44.619464][ T5957] netif_receive_skb_list_internal+0x753/0xdb0 [ 44.621244][ T5957] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 44.623263][ T5957] ? __pfx_eth_type_trans+0x10/0x10 [ 44.624568][ T5957] ? __build_skb_around+0x278/0x3b0 [ 44.625896][ T5957] netif_receive_skb_list+0x4f/0x4a0 [ 44.627257][ T5957] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 44.628829][ T5957] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 44.630478][ T5957] ? bpf_test_timer_continue+0x150/0x3d0 [ 44.631906][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 44.633267][ T5957] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 44.634734][ T5957] ? try_to_wake_up+0x154/0x14f0 [ 44.636247][ T5957] ? __pfx_try_to_wake_up+0x10/0x10 [ 44.637674][ T5957] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 44.639198][ T5957] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 44.640615][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 44.642220][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 44.643771][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 44.645104][ T5957] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 44.646566][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 44.647921][ T5957] ? lock_acquire+0x2f/0xb0 [ 44.649066][ T5957] ? __fget_files+0x40/0x3f0 [ 44.650245][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 44.651744][ T5957] ? fput+0x30/0x390 [ 44.652761][ T5957] ? __bpf_prog_get+0xa0/0x290 [ 44.654154][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 44.655784][ T5957] __sys_bpf+0xfc6/0x49a0 [ 44.657037][ T5957] ? find_held_lock+0x2d/0x110 [ 44.658256][ T5957] ? __pfx___sys_bpf+0x10/0x10 [ 44.659486][ T5957] ? __might_fault+0x13b/0x190 [ 44.660697][ T5957] ? __pfx_lock_release+0x10/0x10 [ 44.661954][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 44.663302][ T5957] ? lock_acquire+0x2f/0xb0 [ 44.664427][ T5957] ? __might_fault+0xe3/0x190 [ 44.665764][ T5957] ? xfd_validate_state+0x5d/0x180 [ 44.667071][ T5957] ? rcu_is_watching+0x12/0xc0 [ 44.668281][ T5957] __x64_sys_bpf+0x78/0xc0 [ 44.669410][ T5957] ? lockdep_hardirqs_on+0x7c/0x110 [ 44.670745][ T5957] do_syscall_64+0xcd/0x250 [ 44.671911][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.673561][ T5957] RIP: 0033:0x7f1bf86dbe99 [ 44.674691][ T5957] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 44.679434][ T5957] RSP: 002b:00007f1bf8696228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 44.681897][ T5957] RAX: ffffffffffffffda RBX: 00007f1bf8766328 RCX: 00007f1bf86dbe99 [ 44.684009][ T5957] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 44.685990][ T5957] RBP: 00007f1bf8766320 R08: 00007f1bf86966c0 R09: 00007f1bf86966c0 [ 44.687968][ T5957] R10: 00007f1bf86966c0 R11: 0000000000000246 R12: 00007f1bf8733074 [ 44.690092][ T5957] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe730b5808 [ 44.692165][ T5957] [ 44.693115][ T5957] Disabling lock debugging due to kernel taint [ 44.694738][ T5957] BUG: Bad page state in process syz-executor687 pfn:3203e [ 44.696730][ T5957] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3203e [ 44.698872][ T5957] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 44.700698][ T5957] raw: 00fff00000000000 dead000000000040 ffff888032d1e000 0000000000000000 [ 44.703182][ T5957] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 44.705424][ T5957] page dumped because: page_pool leak [ 44.706768][ T5957] page_owner tracks the page as allocated [ 44.708184][ T5957] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5957, tgid 5955 (syz-executor687), ts 44479163907, free_ts 44477137328 [ 44.712467][ T5957] post_alloc_hook+0x2d1/0x350 [ 44.713694][ T5957] get_page_from_freelist+0x101e/0x3070 [ 44.715097][ T5957] __alloc_pages_noprof+0x223/0x25a0 [ 44.716425][ T5957] alloc_pages_bulk_noprof+0x77c/0x1110 [ 44.717808][ T5957] __page_pool_alloc_pages_slow+0x18f/0x770 [ 44.720052][ T5957] page_pool_alloc_netmem+0xc4/0x160 [ 44.721578][ T5957] page_pool_alloc_pages+0x1a/0x60 [ 44.722889][ T5957] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 44.724434][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 44.725777][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 44.727209][ T5957] __sys_bpf+0xfc6/0x49a0 [ 44.728321][ T5957] __x64_sys_bpf+0x78/0xc0 [ 44.729492][ T5957] do_syscall_64+0xcd/0x250 [ 44.730743][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.732245][ T5957] page last free pid 5958 tgid 5952 stack trace: [ 44.733850][ T5957] free_unref_page+0x5f4/0xdc0 [ 44.735303][ T5957] __folio_put+0x30d/0x3d0 [ 44.736483][ T5957] put_page+0x21e/0x280 [ 44.737651][ T5957] page_pool_return_page+0x400/0x520 [ 44.739123][ T5957] page_pool_release+0xf4/0x7d0 [ 44.740518][ T5957] page_pool_destroy+0x10a/0x4c0 [ 44.741911][ T5957] bpf_test_run_xdp_live+0x3a1/0x500 [ 44.743557][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 44.745068][ T5957] __sys_bpf+0xfc6/0x49a0 [ 44.746232][ T5957] __x64_sys_bpf+0x78/0xc0 [ 44.747400][ T5957] do_syscall_64+0xcd/0x250 [ 44.748594][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.750200][ T5957] Modules linked in: [ 44.751240][ T5957] CPU: 3 UID: 0 PID: 5957 Comm: syz-executor687 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 44.754453][ T5957] Tainted: [B]=BAD_PAGE [ 44.755506][ T5957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 44.759390][ T5957] Call Trace: [ 44.760330][ T5957] [ 44.761186][ T5957] dump_stack_lvl+0x16c/0x1f0 [ 44.762486][ T5957] bad_page+0xb3/0x1f0 [ 44.763555][ T5957] ? __pfx_bad_page+0x10/0x10 [ 44.764749][ T5957] ? page_bad_reason+0x9d/0x1e0 [ 44.765981][ T5957] free_unref_page+0x657/0xdc0 [ 44.767200][ T5957] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 44.768695][ T5957] ? __phys_addr+0xc6/0x150 [ 44.769862][ T5957] skb_free_head+0xa0/0x1d0 [ 44.770999][ T5957] skb_release_data+0x560/0x730 [ 44.772201][ T5957] sk_skb_reason_drop+0x129/0x1a0 [ 44.773430][ T5957] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 44.775112][ T5957] ? kernel_text_address+0x8d/0x100 [ 44.776524][ T5957] ? hlock_class+0x4e/0x130 [ 44.777670][ T5957] ? __lock_acquire+0x163e/0x3ce0 [ 44.778916][ T5957] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 44.780660][ T5957] ? hlock_class+0x4e/0x130 [ 44.781807][ T5957] ? __lock_acquire+0xbdd/0x3ce0 [ 44.783067][ T5957] ? __pfx___lock_acquire+0x10/0x10 [ 44.784335][ T5957] __netif_receive_skb_list_core+0x357/0x950 [ 44.785779][ T5957] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 44.787347][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 44.788611][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 44.790133][ T5957] ? lock_acquire+0x2f/0xb0 [ 44.791275][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 44.792862][ T5957] netif_receive_skb_list_internal+0x753/0xdb0 [ 44.794407][ T5957] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 44.796098][ T5957] ? __pfx_eth_type_trans+0x10/0x10 [ 44.797403][ T5957] ? __build_skb_around+0x278/0x3b0 [ 44.798710][ T5957] netif_receive_skb_list+0x4f/0x4a0 [ 44.800018][ T5957] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 44.801593][ T5957] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 44.803284][ T5957] ? bpf_test_timer_continue+0x150/0x3d0 [ 44.804664][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 44.805989][ T5957] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 44.807433][ T5957] ? try_to_wake_up+0x154/0x14f0 [ 44.808695][ T5957] ? __pfx_try_to_wake_up+0x10/0x10 [ 44.809981][ T5957] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 44.811501][ T5957] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 44.812851][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 44.814164][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 44.815491][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 44.816788][ T5957] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 44.818232][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 44.819555][ T5957] ? lock_acquire+0x2f/0xb0 [ 44.820672][ T5957] ? __fget_files+0x40/0x3f0 [ 44.821830][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 44.823340][ T5957] ? fput+0x30/0x390 [ 44.824339][ T5957] ? __bpf_prog_get+0xa0/0x290 [ 44.825514][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 44.826948][ T5957] __sys_bpf+0xfc6/0x49a0 [ 44.828015][ T5957] ? find_held_lock+0x2d/0x110 [ 44.829212][ T5957] ? __pfx___sys_bpf+0x10/0x10 [ 44.830401][ T5957] ? __might_fault+0x13b/0x190 [ 44.831618][ T5957] ? __pfx_lock_release+0x10/0x10 [ 44.832914][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 44.834182][ T5957] ? lock_acquire+0x2f/0xb0 [ 44.835332][ T5957] ? __might_fault+0xe3/0x190 [ 44.836522][ T5957] ? xfd_validate_state+0x5d/0x180 [ 44.837789][ T5957] ? rcu_is_watching+0x12/0xc0 [ 44.838973][ T5957] __x64_sys_bpf+0x78/0xc0 [ 44.840087][ T5957] ? lockdep_hardirqs_on+0x7c/0x110 [ 44.841399][ T5957] do_syscall_64+0xcd/0x250 [ 44.842569][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.844058][ T5957] RIP: 0033:0x7f1bf86dbe99 [ 44.845162][ T5957] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 44.849881][ T5957] RSP: 002b:00007f1bf8696228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 44.851882][ T5957] RAX: ffffffffffffffda RBX: 00007f1bf8766328 RCX: 00007f1bf86dbe99 [ 44.853842][ T5957] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 44.855811][ T5957] RBP: 00007f1bf8766320 R08: 00007f1bf86966c0 R09: 00007f1bf86966c0 [ 44.857765][ T5957] R10: 00007f1bf86966c0 R11: 0000000000000246 R12: 00007f1bf8733074 [ 44.859744][ T5957] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe730b5808 [ 44.861870][ T5957] [ 44.863029][ T5957] BUG: Bad page state in process syz-executor687 pfn:3203c [ 44.865029][ T5957] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3203c [ 44.867767][ T5957] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 44.869629][ T5957] raw: 00fff00000000000 dead000000000040 ffff888032d1e000 0000000000000000 [ 44.871956][ T5957] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 44.874046][ T5957] page dumped because: page_pool leak [ 44.875579][ T5957] page_owner tracks the page as allocated [ 44.877097][ T5957] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5957, tgid 5955 (syz-executor687), ts 44479155997, free_ts 44477144505 [ 44.881492][ T5957] post_alloc_hook+0x2d1/0x350 [ 44.882695][ T5957] get_page_from_freelist+0x101e/0x3070 [ 44.884047][ T5957] __alloc_pages_noprof+0x223/0x25a0 [ 44.885343][ T5957] alloc_pages_bulk_noprof+0x77c/0x1110 [ 44.886710][ T5957] __page_pool_alloc_pages_slow+0x18f/0x770 [ 44.888181][ T5957] page_pool_alloc_netmem+0xc4/0x160 [ 44.889491][ T5957] page_pool_alloc_pages+0x1a/0x60 [ 44.890838][ T5957] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 44.892390][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 44.893747][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 44.895081][ T5957] __sys_bpf+0xfc6/0x49a0 [ 44.896168][ T5957] __x64_sys_bpf+0x78/0xc0 [ 44.897288][ T5957] do_syscall_64+0xcd/0x250 [ 44.898425][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.899965][ T5957] page last free pid 5958 tgid 5952 stack trace: [ 44.901537][ T5957] free_unref_page+0x5f4/0xdc0 [ 44.902748][ T5957] __folio_put+0x30d/0x3d0 [ 44.903891][ T5957] put_page+0x21e/0x280 [ 44.904923][ T5957] page_pool_return_page+0x400/0x520 [ 44.906245][ T5957] page_pool_release+0xf4/0x7d0 [ 44.907463][ T5957] page_pool_destroy+0x10a/0x4c0 [ 44.908669][ T5957] bpf_test_run_xdp_live+0x3a1/0x500 [ 44.910013][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 44.911352][ T5957] __sys_bpf+0xfc6/0x49a0 [ 44.912536][ T5957] __x64_sys_bpf+0x78/0xc0 [ 44.913678][ T5957] do_syscall_64+0xcd/0x250 [ 44.914905][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.916363][ T5957] Modules linked in: [ 44.917339][ T5957] CPU: 3 UID: 0 PID: 5957 Comm: syz-executor687 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 44.920359][ T5957] Tainted: [B]=BAD_PAGE [ 44.921391][ T5957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 44.924403][ T5957] Call Trace: [ 44.925257][ T5957] [ 44.925989][ T5957] dump_stack_lvl+0x16c/0x1f0 [ 44.927165][ T5957] bad_page+0xb3/0x1f0 [ 44.928174][ T5957] ? __pfx_bad_page+0x10/0x10 [ 44.929357][ T5957] ? page_bad_reason+0x9d/0x1e0 [ 44.930544][ T5957] free_unref_page+0x657/0xdc0 [ 44.931723][ T5957] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 44.933208][ T5957] ? __phys_addr+0xc6/0x150 [ 44.934309][ T5957] skb_free_head+0xa0/0x1d0 [ 44.935426][ T5957] skb_release_data+0x560/0x730 [ 44.936608][ T5957] sk_skb_reason_drop+0x129/0x1a0 [ 44.937822][ T5957] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 44.939437][ T5957] ? kernel_text_address+0x8d/0x100 [ 44.940722][ T5957] ? hlock_class+0x4e/0x130 [ 44.941842][ T5957] ? __lock_acquire+0x163e/0x3ce0 [ 44.943087][ T5957] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 44.944914][ T5957] ? hlock_class+0x4e/0x130 [ 44.946029][ T5957] ? __lock_acquire+0xbdd/0x3ce0 [ 44.947285][ T5957] ? __pfx___lock_acquire+0x10/0x10 [ 44.948545][ T5957] __netif_receive_skb_list_core+0x357/0x950 [ 44.950007][ T5957] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 44.951575][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 44.952886][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 44.954795][ T5957] ? lock_acquire+0x2f/0xb0 [ 44.956224][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 44.958383][ T5957] netif_receive_skb_list_internal+0x753/0xdb0 [ 44.960274][ T5957] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 44.962076][ T5957] ? __pfx_eth_type_trans+0x10/0x10 [ 44.963640][ T5957] ? __build_skb_around+0x278/0x3b0 [ 44.964935][ T5957] netif_receive_skb_list+0x4f/0x4a0 [ 44.966306][ T5957] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 44.967888][ T5957] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 44.969519][ T5957] ? bpf_test_timer_continue+0x150/0x3d0 [ 44.970989][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 44.972306][ T5957] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 44.973758][ T5957] ? try_to_wake_up+0x154/0x14f0 [ 44.975023][ T5957] ? __pfx_try_to_wake_up+0x10/0x10 [ 44.976326][ T5957] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 44.977834][ T5957] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 44.979152][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 44.980548][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 44.982919][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 44.984311][ T5957] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 44.985764][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 44.987340][ T5957] ? lock_acquire+0x2f/0xb0 [ 44.988603][ T5957] ? __fget_files+0x40/0x3f0 [ 44.989741][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 44.991170][ T5957] ? fput+0x30/0x390 [ 44.992110][ T5957] ? __bpf_prog_get+0xa0/0x290 [ 44.993335][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 44.994807][ T5957] __sys_bpf+0xfc6/0x49a0 [ 44.996096][ T5957] ? find_held_lock+0x2d/0x110 [ 44.997304][ T5957] ? __pfx___sys_bpf+0x10/0x10 [ 44.998498][ T5957] ? __might_fault+0x13b/0x190 [ 44.999698][ T5957] ? __pfx_lock_release+0x10/0x10 [ 45.000929][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 45.002204][ T5957] ? lock_acquire+0x2f/0xb0 [ 45.003498][ T5957] ? __might_fault+0xe3/0x190 [ 45.004746][ T5957] ? xfd_validate_state+0x5d/0x180 [ 45.006084][ T5957] ? rcu_is_watching+0x12/0xc0 [ 45.007628][ T5957] __x64_sys_bpf+0x78/0xc0 [ 45.008789][ T5957] ? lockdep_hardirqs_on+0x7c/0x110 [ 45.010186][ T5957] do_syscall_64+0xcd/0x250 [ 45.011513][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.013233][ T5957] RIP: 0033:0x7f1bf86dbe99 [ 45.014470][ T5957] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 45.019530][ T5957] RSP: 002b:00007f1bf8696228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 45.021646][ T5957] RAX: ffffffffffffffda RBX: 00007f1bf8766328 RCX: 00007f1bf86dbe99 [ 45.023694][ T5957] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 45.025625][ T5957] RBP: 00007f1bf8766320 R08: 00007f1bf86966c0 R09: 00007f1bf86966c0 [ 45.027579][ T5957] R10: 00007f1bf86966c0 R11: 0000000000000246 R12: 00007f1bf8733074 [ 45.029529][ T5957] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe730b5808 [ 45.031491][ T5957] [ 45.032375][ T5957] BUG: Bad page state in process syz-executor687 pfn:28a21 [ 45.034604][ T5957] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888028a21000 pfn:0x28a21 [ 45.037261][ T5957] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 45.039064][ T5957] raw: 00fff00000000000 dead000000000040 ffff888032d1e000 0000000000000000 [ 45.041495][ T5957] raw: ffff888028a21000 0000000000000001 00000000ffffffff 0000000000000000 [ 45.043786][ T5957] page dumped because: page_pool leak [ 45.045143][ T5957] page_owner tracks the page as allocated [ 45.046584][ T5957] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5957, tgid 5955 (syz-executor687), ts 44479147994, free_ts 44477151465 [ 45.050888][ T5957] post_alloc_hook+0x2d1/0x350 [ 45.052189][ T5957] get_page_from_freelist+0x101e/0x3070 [ 45.053736][ T5957] __alloc_pages_noprof+0x223/0x25a0 [ 45.055404][ T5957] alloc_pages_bulk_noprof+0x77c/0x1110 [ 45.056982][ T5957] __page_pool_alloc_pages_slow+0x18f/0x770 [ 45.058574][ T5957] page_pool_alloc_netmem+0xc4/0x160 [ 45.059982][ T5957] page_pool_alloc_pages+0x1a/0x60 [ 45.061263][ T5957] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 45.062832][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 45.064207][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 45.065552][ T5957] __sys_bpf+0xfc6/0x49a0 [ 45.066976][ T5957] __x64_sys_bpf+0x78/0xc0 [ 45.068108][ T5957] do_syscall_64+0xcd/0x250 [ 45.069279][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.070870][ T5957] page last free pid 5958 tgid 5952 stack trace: [ 45.072478][ T5957] free_unref_page+0x5f4/0xdc0 [ 45.073728][ T5957] __folio_put+0x30d/0x3d0 [ 45.074864][ T5957] put_page+0x21e/0x280 [ 45.075917][ T5957] page_pool_return_page+0x400/0x520 [ 45.077230][ T5957] page_pool_release+0xf4/0x7d0 [ 45.078558][ T5957] page_pool_destroy+0x10a/0x4c0 [ 45.080170][ T5957] bpf_test_run_xdp_live+0x3a1/0x500 [ 45.081515][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 45.083300][ T5957] __sys_bpf+0xfc6/0x49a0 [ 45.084454][ T5957] __x64_sys_bpf+0x78/0xc0 [ 45.085639][ T5957] do_syscall_64+0xcd/0x250 [ 45.086865][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.088498][ T5957] Modules linked in: [ 45.089608][ T5957] CPU: 3 UID: 0 PID: 5957 Comm: syz-executor687 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 45.093002][ T5957] Tainted: [B]=BAD_PAGE [ 45.094259][ T5957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 45.097190][ T5957] Call Trace: [ 45.098024][ T5957] [ 45.098804][ T5957] dump_stack_lvl+0x16c/0x1f0 [ 45.100019][ T5957] bad_page+0xb3/0x1f0 [ 45.101046][ T5957] ? __pfx_bad_page+0x10/0x10 [ 45.102384][ T5957] ? page_bad_reason+0x9d/0x1e0 [ 45.103655][ T5957] free_unref_page+0x657/0xdc0 [ 45.104975][ T5957] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 45.106610][ T5957] ? __phys_addr+0xc6/0x150 [ 45.107833][ T5957] skb_free_head+0xa0/0x1d0 [ 45.109000][ T5957] skb_release_data+0x560/0x730 [ 45.110233][ T5957] sk_skb_reason_drop+0x129/0x1a0 [ 45.111557][ T5957] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 45.113499][ T5957] ? kernel_text_address+0x8d/0x100 [ 45.114818][ T5957] ? hlock_class+0x4e/0x130 [ 45.116141][ T5957] ? __lock_acquire+0x163e/0x3ce0 [ 45.117683][ T5957] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 45.119979][ T5957] ? hlock_class+0x4e/0x130 [ 45.121478][ T5957] ? __lock_acquire+0xbdd/0x3ce0 [ 45.123273][ T5957] ? __pfx___lock_acquire+0x10/0x10 [ 45.124621][ T5957] __netif_receive_skb_list_core+0x357/0x950 [ 45.126266][ T5957] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 45.128011][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 45.129314][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 45.130897][ T5957] ? lock_acquire+0x2f/0xb0 [ 45.132052][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 45.133698][ T5957] netif_receive_skb_list_internal+0x753/0xdb0 [ 45.135527][ T5957] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 45.137356][ T5957] ? __pfx_eth_type_trans+0x10/0x10 [ 45.138727][ T5957] ? __build_skb_around+0x278/0x3b0 [ 45.140428][ T5957] netif_receive_skb_list+0x4f/0x4a0 [ 45.141969][ T5957] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 45.143742][ T5957] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 45.145591][ T5957] ? bpf_test_timer_continue+0x150/0x3d0 [ 45.147074][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 45.148396][ T5957] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 45.149910][ T5957] ? try_to_wake_up+0x154/0x14f0 [ 45.151186][ T5957] ? __pfx_try_to_wake_up+0x10/0x10 [ 45.152540][ T5957] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 45.154200][ T5957] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 45.155574][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 45.157044][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 45.158417][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 45.159907][ T5957] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 45.161562][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 45.163377][ T5957] ? lock_acquire+0x2f/0xb0 [ 45.164603][ T5957] ? __fget_files+0x40/0x3f0 [ 45.166022][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 45.167676][ T5957] ? fput+0x30/0x390 [ 45.168769][ T5957] ? __bpf_prog_get+0xa0/0x290 [ 45.170039][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 45.171513][ T5957] __sys_bpf+0xfc6/0x49a0 [ 45.172672][ T5957] ? find_held_lock+0x2d/0x110 [ 45.173897][ T5957] ? __pfx___sys_bpf+0x10/0x10 [ 45.175110][ T5957] ? __might_fault+0x13b/0x190 [ 45.176329][ T5957] ? __pfx_lock_release+0x10/0x10 [ 45.177603][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 45.179055][ T5957] ? lock_acquire+0x2f/0xb0 [ 45.180204][ T5957] ? __might_fault+0xe3/0x190 [ 45.181412][ T5957] ? xfd_validate_state+0x5d/0x180 [ 45.182748][ T5957] ? rcu_is_watching+0x12/0xc0 [ 45.183982][ T5957] __x64_sys_bpf+0x78/0xc0 [ 45.185175][ T5957] ? lockdep_hardirqs_on+0x7c/0x110 [ 45.186578][ T5957] do_syscall_64+0xcd/0x250 [ 45.187740][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.189331][ T5957] RIP: 0033:0x7f1bf86dbe99 [ 45.190465][ T5957] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 45.195253][ T5957] RSP: 002b:00007f1bf8696228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 45.197963][ T5957] RAX: ffffffffffffffda RBX: 00007f1bf8766328 RCX: 00007f1bf86dbe99 [ 45.200048][ T5957] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 45.202168][ T5957] RBP: 00007f1bf8766320 R08: 00007f1bf86966c0 R09: 00007f1bf86966c0 [ 45.204261][ T5957] R10: 00007f1bf86966c0 R11: 0000000000000246 R12: 00007f1bf8733074 [ 45.206248][ T5957] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe730b5808 [ 45.208224][ T5957] [ 45.209128][ T5957] BUG: Bad page state in process syz-executor687 pfn:35dc4 [ 45.211001][ T5957] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x35dc4 [ 45.213557][ T5957] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 45.216155][ T5957] raw: 00fff00000000000 dead000000000040 ffff888032d1e000 0000000000000000 [ 45.218272][ T5957] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 45.220486][ T5957] page dumped because: page_pool leak [ 45.221842][ T5957] page_owner tracks the page as allocated [ 45.223568][ T5957] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5957, tgid 5955 (syz-executor687), ts 44479139930, free_ts 44477158486 [ 45.227984][ T5957] post_alloc_hook+0x2d1/0x350 [ 45.229296][ T5957] get_page_from_freelist+0x101e/0x3070 [ 45.230951][ T5957] __alloc_pages_noprof+0x223/0x25a0 [ 45.232479][ T5957] alloc_pages_bulk_noprof+0x77c/0x1110 [ 45.234149][ T5957] __page_pool_alloc_pages_slow+0x18f/0x770 [ 45.235794][ T5957] page_pool_alloc_netmem+0xc4/0x160 [ 45.237126][ T5957] page_pool_alloc_pages+0x1a/0x60 [ 45.238401][ T5957] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 45.240015][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 45.241321][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 45.242828][ T5957] __sys_bpf+0xfc6/0x49a0 [ 45.244115][ T5957] __x64_sys_bpf+0x78/0xc0 [ 45.245229][ T5957] do_syscall_64+0xcd/0x250 [ 45.246398][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.247939][ T5957] page last free pid 5958 tgid 5952 stack trace: [ 45.249517][ T5957] free_unref_page+0x5f4/0xdc0 [ 45.251713][ T5957] __folio_put+0x30d/0x3d0 [ 45.253063][ T5957] put_page+0x21e/0x280 [ 45.254235][ T5957] page_pool_return_page+0x400/0x520 [ 45.255831][ T5957] page_pool_release+0xf4/0x7d0 [ 45.257153][ T5957] page_pool_destroy+0x10a/0x4c0 [ 45.258416][ T5957] bpf_test_run_xdp_live+0x3a1/0x500 [ 45.259781][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 45.261174][ T5957] __sys_bpf+0xfc6/0x49a0 [ 45.262324][ T5957] __x64_sys_bpf+0x78/0xc0 [ 45.263557][ T5957] do_syscall_64+0xcd/0x250 [ 45.264763][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.266313][ T5957] Modules linked in: [ 45.267352][ T5957] CPU: 3 UID: 0 PID: 5957 Comm: syz-executor687 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 45.270569][ T5957] Tainted: [B]=BAD_PAGE [ 45.271696][ T5957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 45.274519][ T5957] Call Trace: [ 45.275386][ T5957] [ 45.276146][ T5957] dump_stack_lvl+0x16c/0x1f0 [ 45.277312][ T5957] bad_page+0xb3/0x1f0 [ 45.278327][ T5957] ? __pfx_bad_page+0x10/0x10 [ 45.279535][ T5957] ? page_bad_reason+0x9d/0x1e0 [ 45.280767][ T5957] free_unref_page+0x657/0xdc0 [ 45.281939][ T5957] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 45.283543][ T5957] ? __phys_addr+0xc6/0x150 [ 45.284793][ T5957] skb_free_head+0xa0/0x1d0 [ 45.285969][ T5957] skb_release_data+0x560/0x730 [ 45.287287][ T5957] sk_skb_reason_drop+0x129/0x1a0 [ 45.288714][ T5957] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 45.290398][ T5957] ? kernel_text_address+0x8d/0x100 [ 45.291874][ T5957] ? hlock_class+0x4e/0x130 [ 45.293079][ T5957] ? __lock_acquire+0x163e/0x3ce0 [ 45.294446][ T5957] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 45.296322][ T5957] ? hlock_class+0x4e/0x130 [ 45.297663][ T5957] ? __lock_acquire+0xbdd/0x3ce0 [ 45.299055][ T5957] ? __pfx___lock_acquire+0x10/0x10 [ 45.300514][ T5957] __netif_receive_skb_list_core+0x357/0x950 [ 45.302176][ T5957] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 45.303868][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 45.305169][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 45.306746][ T5957] ? lock_acquire+0x2f/0xb0 [ 45.307892][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 45.309470][ T5957] netif_receive_skb_list_internal+0x753/0xdb0 [ 45.311028][ T5957] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 45.312717][ T5957] ? __pfx_eth_type_trans+0x10/0x10 [ 45.314031][ T5957] ? __build_skb_around+0x278/0x3b0 [ 45.315317][ T5957] netif_receive_skb_list+0x4f/0x4a0 [ 45.316643][ T5957] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 45.318331][ T5957] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 45.320122][ T5957] ? bpf_test_timer_continue+0x150/0x3d0 [ 45.321570][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 45.323013][ T5957] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 45.324501][ T5957] ? try_to_wake_up+0x154/0x14f0 [ 45.325865][ T5957] ? __pfx_try_to_wake_up+0x10/0x10 [ 45.327190][ T5957] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 45.328674][ T5957] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 45.330016][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 45.331421][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 45.332879][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 45.334215][ T5957] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 45.335816][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 45.337174][ T5957] ? lock_acquire+0x2f/0xb0 [ 45.338331][ T5957] ? __fget_files+0x40/0x3f0 [ 45.339485][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 45.340955][ T5957] ? fput+0x30/0x390 [ 45.341958][ T5957] ? __bpf_prog_get+0xa0/0x290 [ 45.343172][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 45.344620][ T5957] __sys_bpf+0xfc6/0x49a0 [ 45.345687][ T5957] ? find_held_lock+0x2d/0x110 [ 45.346867][ T5957] ? __pfx___sys_bpf+0x10/0x10 [ 45.348023][ T5957] ? __might_fault+0x13b/0x190 [ 45.349200][ T5957] ? __pfx_lock_release+0x10/0x10 [ 45.350420][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 45.351917][ T5957] ? lock_acquire+0x2f/0xb0 [ 45.353056][ T5957] ? __might_fault+0xe3/0x190 [ 45.354327][ T5957] ? xfd_validate_state+0x5d/0x180 [ 45.355972][ T5957] ? rcu_is_watching+0x12/0xc0 [ 45.357269][ T5957] __x64_sys_bpf+0x78/0xc0 [ 45.358410][ T5957] ? lockdep_hardirqs_on+0x7c/0x110 [ 45.359753][ T5957] do_syscall_64+0xcd/0x250 [ 45.360964][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.362662][ T5957] RIP: 0033:0x7f1bf86dbe99 [ 45.363951][ T5957] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 45.369239][ T5957] RSP: 002b:00007f1bf8696228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 45.371864][ T5957] RAX: ffffffffffffffda RBX: 00007f1bf8766328 RCX: 00007f1bf86dbe99 [ 45.374253][ T5957] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 45.376217][ T5957] RBP: 00007f1bf8766320 R08: 00007f1bf86966c0 R09: 00007f1bf86966c0 [ 45.378192][ T5957] R10: 00007f1bf86966c0 R11: 0000000000000246 R12: 00007f1bf8733074 [ 45.380144][ T5957] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe730b5808 [ 45.382154][ T5957] [ 45.383092][ T5957] BUG: Bad page state in process syz-executor687 pfn:2b20d [ 45.384925][ T5957] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802b20dca8 pfn:0x2b20d [ 45.387531][ T5957] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 45.389422][ T5957] raw: 00fff00000000000 dead000000000040 ffff888032d1e000 0000000000000000 [ 45.391823][ T5957] raw: ffff88802b20dca8 0000000000000001 00000000ffffffff 0000000000000000 [ 45.393976][ T5957] page dumped because: page_pool leak [ 45.395302][ T5957] page_owner tracks the page as allocated [ 45.396665][ T5957] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5957, tgid 5955 (syz-executor687), ts 44479131997, free_ts 44477165469 [ 45.400840][ T5957] post_alloc_hook+0x2d1/0x350 [ 45.402153][ T5957] get_page_from_freelist+0x101e/0x3070 [ 45.403620][ T5957] __alloc_pages_noprof+0x223/0x25a0 [ 45.404956][ T5957] alloc_pages_bulk_noprof+0x77c/0x1110 [ 45.406324][ T5957] __page_pool_alloc_pages_slow+0x18f/0x770 [ 45.407776][ T5957] page_pool_alloc_netmem+0xc4/0x160 [ 45.409101][ T5957] page_pool_alloc_pages+0x1a/0x60 [ 45.410460][ T5957] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 45.412041][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 45.413553][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 45.414991][ T5957] __sys_bpf+0xfc6/0x49a0 [ 45.416070][ T5957] __x64_sys_bpf+0x78/0xc0 [ 45.417207][ T5957] do_syscall_64+0xcd/0x250 [ 45.418358][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.419869][ T5957] page last free pid 5958 tgid 5952 stack trace: [ 45.421519][ T5957] free_unref_page+0x5f4/0xdc0 [ 45.422763][ T5957] __folio_put+0x30d/0x3d0 [ 45.424190][ T5957] put_page+0x21e/0x280 [ 45.425265][ T5957] page_pool_return_page+0x400/0x520 [ 45.426604][ T5957] page_pool_release+0xf4/0x7d0 [ 45.428169][ T5957] page_pool_destroy+0x10a/0x4c0 [ 45.429517][ T5957] bpf_test_run_xdp_live+0x3a1/0x500 [ 45.431016][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 45.432579][ T5957] __sys_bpf+0xfc6/0x49a0 [ 45.433909][ T5957] __x64_sys_bpf+0x78/0xc0 [ 45.435107][ T5957] do_syscall_64+0xcd/0x250 [ 45.436270][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.437771][ T5957] Modules linked in: [ 45.438791][ T5957] CPU: 3 UID: 0 PID: 5957 Comm: syz-executor687 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 45.441888][ T5957] Tainted: [B]=BAD_PAGE [ 45.442949][ T5957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 45.446194][ T5957] Call Trace: [ 45.447181][ T5957] [ 45.447944][ T5957] dump_stack_lvl+0x16c/0x1f0 [ 45.449397][ T5957] bad_page+0xb3/0x1f0 [ 45.450552][ T5957] ? __pfx_bad_page+0x10/0x10 [ 45.451914][ T5957] ? page_bad_reason+0x9d/0x1e0 [ 45.453432][ T5957] free_unref_page+0x657/0xdc0 [ 45.454757][ T5957] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 45.456441][ T5957] ? __phys_addr+0xc6/0x150 [ 45.457761][ T5957] skb_free_head+0xa0/0x1d0 [ 45.458939][ T5957] skb_release_data+0x560/0x730 [ 45.460196][ T5957] sk_skb_reason_drop+0x129/0x1a0 [ 45.461506][ T5957] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 45.463219][ T5957] ? kernel_text_address+0x8d/0x100 [ 45.464898][ T5957] ? hlock_class+0x4e/0x130 [ 45.466033][ T5957] ? __lock_acquire+0x163e/0x3ce0 [ 45.467328][ T5957] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 45.469066][ T5957] ? hlock_class+0x4e/0x130 [ 45.470250][ T5957] ? __lock_acquire+0xbdd/0x3ce0 [ 45.471513][ T5957] ? __pfx___lock_acquire+0x10/0x10 [ 45.472956][ T5957] __netif_receive_skb_list_core+0x357/0x950 [ 45.474469][ T5957] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 45.476118][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 45.477439][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 45.479027][ T5957] ? lock_acquire+0x2f/0xb0 [ 45.480182][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 45.481780][ T5957] netif_receive_skb_list_internal+0x753/0xdb0 [ 45.483371][ T5957] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 45.485100][ T5957] ? __pfx_eth_type_trans+0x10/0x10 [ 45.486388][ T5957] ? __build_skb_around+0x278/0x3b0 [ 45.487685][ T5957] netif_receive_skb_list+0x4f/0x4a0 [ 45.488984][ T5957] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 45.490746][ T5957] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 45.492449][ T5957] ? bpf_test_timer_continue+0x150/0x3d0 [ 45.493921][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 45.495370][ T5957] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 45.496948][ T5957] ? try_to_wake_up+0x154/0x14f0 [ 45.498296][ T5957] ? __pfx_try_to_wake_up+0x10/0x10 [ 45.499649][ T5957] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 45.501232][ T5957] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 45.502603][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 45.504055][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 45.505355][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 45.506683][ T5957] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 45.508158][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 45.509505][ T5957] ? lock_acquire+0x2f/0xb0 [ 45.510688][ T5957] ? __fget_files+0x40/0x3f0 [ 45.511866][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 45.513367][ T5957] ? fput+0x30/0x390 [ 45.514350][ T5957] ? __bpf_prog_get+0xa0/0x290 [ 45.515759][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 45.517351][ T5957] __sys_bpf+0xfc6/0x49a0 [ 45.518472][ T5957] ? find_held_lock+0x2d/0x110 [ 45.519696][ T5957] ? __pfx___sys_bpf+0x10/0x10 [ 45.520880][ T5957] ? __might_fault+0x13b/0x190 [ 45.522110][ T5957] ? __pfx_lock_release+0x10/0x10 [ 45.523409][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 45.524691][ T5957] ? lock_acquire+0x2f/0xb0 [ 45.525829][ T5957] ? __might_fault+0xe3/0x190 [ 45.527017][ T5957] ? xfd_validate_state+0x5d/0x180 [ 45.528289][ T5957] ? rcu_is_watching+0x12/0xc0 [ 45.529486][ T5957] __x64_sys_bpf+0x78/0xc0 [ 45.530612][ T5957] ? lockdep_hardirqs_on+0x7c/0x110 [ 45.531919][ T5957] do_syscall_64+0xcd/0x250 [ 45.533079][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.534484][ T5957] RIP: 0033:0x7f1bf86dbe99 [ 45.535552][ T5957] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 45.540250][ T5957] RSP: 002b:00007f1bf8696228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 45.542249][ T5957] RAX: ffffffffffffffda RBX: 00007f1bf8766328 RCX: 00007f1bf86dbe99 [ 45.544260][ T5957] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 45.546337][ T5957] RBP: 00007f1bf8766320 R08: 00007f1bf86966c0 R09: 00007f1bf86966c0 [ 45.548568][ T5957] R10: 00007f1bf86966c0 R11: 0000000000000246 R12: 00007f1bf8733074 [ 45.550501][ T5957] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe730b5808 [ 45.552445][ T5957] [ 45.553373][ T5957] BUG: Bad page state in process syz-executor687 pfn:27024 [ 45.555141][ T5957] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x27024 [ 45.557204][ T5957] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 45.558945][ T5957] raw: 00fff00000000000 dead000000000040 ffff888032d1e000 0000000000000000 [ 45.561167][ T5957] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 45.563350][ T5957] page dumped because: page_pool leak [ 45.564768][ T5957] page_owner tracks the page as allocated [ 45.566347][ T5957] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5957, tgid 5955 (syz-executor687), ts 44479124091, free_ts 44477172344 [ 45.570936][ T5957] post_alloc_hook+0x2d1/0x350 [ 45.572310][ T5957] get_page_from_freelist+0x101e/0x3070 [ 45.573799][ T5957] __alloc_pages_noprof+0x223/0x25a0 [ 45.575344][ T5957] alloc_pages_bulk_noprof+0x77c/0x1110 [ 45.576987][ T5957] __page_pool_alloc_pages_slow+0x18f/0x770 [ 45.578547][ T5957] page_pool_alloc_netmem+0xc4/0x160 [ 45.579882][ T5957] page_pool_alloc_pages+0x1a/0x60 [ 45.581312][ T5957] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 45.582901][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 45.584189][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 45.585694][ T5957] __sys_bpf+0xfc6/0x49a0 [ 45.586974][ T5957] __x64_sys_bpf+0x78/0xc0 [ 45.588235][ T5957] do_syscall_64+0xcd/0x250 [ 45.589482][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.591330][ T5957] page last free pid 5958 tgid 5952 stack trace: [ 45.593128][ T5957] free_unref_page+0x5f4/0xdc0 [ 45.594376][ T5957] __folio_put+0x30d/0x3d0 [ 45.595668][ T5957] put_page+0x21e/0x280 [ 45.596732][ T5957] page_pool_return_page+0x400/0x520 [ 45.598050][ T5957] page_pool_release+0xf4/0x7d0 [ 45.599257][ T5957] page_pool_destroy+0x10a/0x4c0 [ 45.600558][ T5957] bpf_test_run_xdp_live+0x3a1/0x500 [ 45.601895][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 45.603343][ T5957] __sys_bpf+0xfc6/0x49a0 [ 45.605450][ T5957] __x64_sys_bpf+0x78/0xc0 [ 45.606656][ T5957] do_syscall_64+0xcd/0x250 [ 45.607915][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.609482][ T5957] Modules linked in: [ 45.610592][ T5957] CPU: 3 UID: 0 PID: 5957 Comm: syz-executor687 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 45.613859][ T5957] Tainted: [B]=BAD_PAGE [ 45.614898][ T5957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 45.617548][ T5957] Call Trace: [ 45.618400][ T5957] [ 45.619162][ T5957] dump_stack_lvl+0x16c/0x1f0 [ 45.620370][ T5957] bad_page+0xb3/0x1f0 [ 45.621404][ T5957] ? __pfx_bad_page+0x10/0x10 [ 45.622620][ T5957] ? page_bad_reason+0x9d/0x1e0 [ 45.623844][ T5957] free_unref_page+0x657/0xdc0 [ 45.624988][ T5957] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 45.626467][ T5957] ? __phys_addr+0xc6/0x150 [ 45.627695][ T5957] skb_free_head+0xa0/0x1d0 [ 45.628861][ T5957] skb_release_data+0x560/0x730 [ 45.630110][ T5957] sk_skb_reason_drop+0x129/0x1a0 [ 45.631672][ T5957] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 45.633510][ T5957] ? kernel_text_address+0x8d/0x100 [ 45.634907][ T5957] ? hlock_class+0x4e/0x130 [ 45.636041][ T5957] ? __lock_acquire+0x163e/0x3ce0 [ 45.637324][ T5957] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 45.639094][ T5957] ? hlock_class+0x4e/0x130 [ 45.640228][ T5957] ? __lock_acquire+0xbdd/0x3ce0 [ 45.641464][ T5957] ? __pfx___lock_acquire+0x10/0x10 [ 45.642803][ T5957] __netif_receive_skb_list_core+0x357/0x950 [ 45.645043][ T5957] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 45.646741][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 45.648220][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 45.650018][ T5957] ? lock_acquire+0x2f/0xb0 [ 45.651346][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 45.653221][ T5957] netif_receive_skb_list_internal+0x753/0xdb0 [ 45.655011][ T5957] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 45.656673][ T5957] ? __pfx_eth_type_trans+0x10/0x10 [ 45.658013][ T5957] ? __build_skb_around+0x278/0x3b0 [ 45.659349][ T5957] netif_receive_skb_list+0x4f/0x4a0 [ 45.660710][ T5957] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 45.662284][ T5957] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 45.664066][ T5957] ? bpf_test_timer_continue+0x150/0x3d0 [ 45.665960][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 45.667348][ T5957] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 45.668820][ T5957] ? try_to_wake_up+0x154/0x14f0 [ 45.670057][ T5957] ? __pfx_try_to_wake_up+0x10/0x10 [ 45.671394][ T5957] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 45.673030][ T5957] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 45.674379][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 45.675780][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 45.677124][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 45.678424][ T5957] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 45.679884][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 45.681259][ T5957] ? lock_acquire+0x2f/0xb0 [ 45.682422][ T5957] ? __fget_files+0x40/0x3f0 [ 45.683648][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 45.685299][ T5957] ? fput+0x30/0x390 [ 45.686298][ T5957] ? __bpf_prog_get+0xa0/0x290 [ 45.687495][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 45.688961][ T5957] __sys_bpf+0xfc6/0x49a0 [ 45.690071][ T5957] ? find_held_lock+0x2d/0x110 [ 45.691434][ T5957] ? __pfx___sys_bpf+0x10/0x10 [ 45.692905][ T5957] ? __might_fault+0x13b/0x190 [ 45.694098][ T5957] ? __pfx_lock_release+0x10/0x10 [ 45.695484][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 45.696799][ T5957] ? lock_acquire+0x2f/0xb0 [ 45.698055][ T5957] ? __might_fault+0xe3/0x190 [ 45.699221][ T5957] ? xfd_validate_state+0x5d/0x180 [ 45.700512][ T5957] ? rcu_is_watching+0x12/0xc0 [ 45.701737][ T5957] __x64_sys_bpf+0x78/0xc0 [ 45.702955][ T5957] ? lockdep_hardirqs_on+0x7c/0x110 [ 45.704289][ T5957] do_syscall_64+0xcd/0x250 [ 45.705587][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.707455][ T5957] RIP: 0033:0x7f1bf86dbe99 [ 45.708611][ T5957] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 45.714143][ T5957] RSP: 002b:00007f1bf8696228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 45.716243][ T5957] RAX: ffffffffffffffda RBX: 00007f1bf8766328 RCX: 00007f1bf86dbe99 [ 45.718213][ T5957] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 45.720346][ T5957] RBP: 00007f1bf8766320 R08: 00007f1bf86966c0 R09: 00007f1bf86966c0 [ 45.722331][ T5957] R10: 00007f1bf86966c0 R11: 0000000000000246 R12: 00007f1bf8733074 [ 45.724298][ T5957] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe730b5808 [ 45.726224][ T5957] [ 45.727263][ T5957] BUG: Bad page state in process syz-executor687 pfn:33bf6 [ 45.729360][ T5957] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x33bf6 [ 45.732107][ T5957] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 45.733869][ T5957] raw: 00fff00000000000 dead000000000040 ffff888032d1e000 0000000000000000 [ 45.735925][ T5957] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 45.737976][ T5957] page dumped because: page_pool leak [ 45.739323][ T5957] page_owner tracks the page as allocated [ 45.740769][ T5957] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5957, tgid 5955 (syz-executor687), ts 44479116204, free_ts 44477179310 [ 45.745252][ T5957] post_alloc_hook+0x2d1/0x350 [ 45.746542][ T5957] get_page_from_freelist+0x101e/0x3070 [ 45.748040][ T5957] __alloc_pages_noprof+0x223/0x25a0 [ 45.749494][ T5957] alloc_pages_bulk_noprof+0x77c/0x1110 [ 45.750968][ T5957] __page_pool_alloc_pages_slow+0x18f/0x770 [ 45.752918][ T5957] page_pool_alloc_netmem+0xc4/0x160 [ 45.754292][ T5957] page_pool_alloc_pages+0x1a/0x60 [ 45.755581][ T5957] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 45.757135][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 45.758467][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 45.759834][ T5957] __sys_bpf+0xfc6/0x49a0 [ 45.760985][ T5957] __x64_sys_bpf+0x78/0xc0 [ 45.762106][ T5957] do_syscall_64+0xcd/0x250 [ 45.763377][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.765123][ T5957] page last free pid 5958 tgid 5952 stack trace: [ 45.766911][ T5957] free_unref_page+0x5f4/0xdc0 [ 45.768113][ T5957] __folio_put+0x30d/0x3d0 [ 45.769477][ T5957] put_page+0x21e/0x280 [ 45.770597][ T5957] page_pool_return_page+0x400/0x520 [ 45.772208][ T5957] page_pool_release+0xf4/0x7d0 [ 45.773551][ T5957] page_pool_destroy+0x10a/0x4c0 [ 45.774799][ T5957] bpf_test_run_xdp_live+0x3a1/0x500 [ 45.776153][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 45.777583][ T5957] __sys_bpf+0xfc6/0x49a0 [ 45.778765][ T5957] __x64_sys_bpf+0x78/0xc0 [ 45.780066][ T5957] do_syscall_64+0xcd/0x250 [ 45.781380][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.783272][ T5957] Modules linked in: [ 45.784404][ T5957] CPU: 3 UID: 0 PID: 5957 Comm: syz-executor687 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 45.788323][ T5957] Tainted: [B]=BAD_PAGE [ 45.789391][ T5957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 45.792721][ T5957] Call Trace: [ 45.793574][ T5957] [ 45.794315][ T5957] dump_stack_lvl+0x16c/0x1f0 [ 45.795570][ T5957] bad_page+0xb3/0x1f0 [ 45.796599][ T5957] ? __pfx_bad_page+0x10/0x10 [ 45.797784][ T5957] ? page_bad_reason+0x9d/0x1e0 [ 45.799032][ T5957] free_unref_page+0x657/0xdc0 [ 45.800397][ T5957] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 45.801885][ T5957] ? __phys_addr+0xc6/0x150 [ 45.803061][ T5957] skb_free_head+0xa0/0x1d0 [ 45.804201][ T5957] skb_release_data+0x560/0x730 [ 45.805425][ T5957] sk_skb_reason_drop+0x129/0x1a0 [ 45.806645][ T5957] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 45.808426][ T5957] ? kernel_text_address+0x8d/0x100 [ 45.809903][ T5957] ? hlock_class+0x4e/0x130 [ 45.811422][ T5957] ? __lock_acquire+0x163e/0x3ce0 [ 45.812716][ T5957] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 45.814460][ T5957] ? hlock_class+0x4e/0x130 [ 45.815632][ T5957] ? __lock_acquire+0xbdd/0x3ce0 [ 45.816876][ T5957] ? __pfx___lock_acquire+0x10/0x10 [ 45.818186][ T5957] __netif_receive_skb_list_core+0x357/0x950 [ 45.819685][ T5957] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 45.821320][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 45.822632][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 45.824668][ T5957] ? lock_acquire+0x2f/0xb0 [ 45.826076][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 45.827890][ T5957] netif_receive_skb_list_internal+0x753/0xdb0 [ 45.829680][ T5957] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 45.831337][ T5957] ? __pfx_eth_type_trans+0x10/0x10 [ 45.832727][ T5957] ? __build_skb_around+0x278/0x3b0 [ 45.834020][ T5957] netif_receive_skb_list+0x4f/0x4a0 [ 45.835334][ T5957] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 45.836861][ T5957] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 45.838503][ T5957] ? bpf_test_timer_continue+0x150/0x3d0 [ 45.839946][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 45.841270][ T5957] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 45.842737][ T5957] ? try_to_wake_up+0x154/0x14f0 [ 45.843975][ T5957] ? __pfx_try_to_wake_up+0x10/0x10 [ 45.845220][ T5957] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 45.846644][ T5957] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 45.847917][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 45.849212][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 45.850469][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 45.851766][ T5957] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 45.853557][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 45.854881][ T5957] ? lock_acquire+0x2f/0xb0 [ 45.855997][ T5957] ? __fget_files+0x40/0x3f0 [ 45.857145][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 45.858596][ T5957] ? fput+0x30/0x390 [ 45.859572][ T5957] ? __bpf_prog_get+0xa0/0x290 [ 45.860776][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 45.862206][ T5957] __sys_bpf+0xfc6/0x49a0 [ 45.863528][ T5957] ? find_held_lock+0x2d/0x110 [ 45.864752][ T5957] ? __pfx___sys_bpf+0x10/0x10 [ 45.866144][ T5957] ? __might_fault+0x13b/0x190 [ 45.867493][ T5957] ? __pfx_lock_release+0x10/0x10 [ 45.868741][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 45.870308][ T5957] ? lock_acquire+0x2f/0xb0 [ 45.871651][ T5957] ? __might_fault+0xe3/0x190 [ 45.872911][ T5957] ? xfd_validate_state+0x5d/0x180 [ 45.874328][ T5957] ? rcu_is_watching+0x12/0xc0 [ 45.875512][ T5957] __x64_sys_bpf+0x78/0xc0 [ 45.876671][ T5957] ? lockdep_hardirqs_on+0x7c/0x110 [ 45.877923][ T5957] do_syscall_64+0xcd/0x250 [ 45.879035][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.880464][ T5957] RIP: 0033:0x7f1bf86dbe99 [ 45.881548][ T5957] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 45.886092][ T5957] RSP: 002b:00007f1bf8696228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 45.888107][ T5957] RAX: ffffffffffffffda RBX: 00007f1bf8766328 RCX: 00007f1bf86dbe99 [ 45.890478][ T5957] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 45.892615][ T5957] RBP: 00007f1bf8766320 R08: 00007f1bf86966c0 R09: 00007f1bf86966c0 [ 45.894608][ T5957] R10: 00007f1bf86966c0 R11: 0000000000000246 R12: 00007f1bf8733074 [ 45.896699][ T5957] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe730b5808 [ 45.898690][ T5957] [ 45.899635][ T5957] BUG: Bad page state in process syz-executor687 pfn:32815 [ 45.901497][ T5957] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880328151f0 pfn:0x32815 [ 45.904240][ T5957] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 45.906212][ T5957] raw: 00fff00000000000 dead000000000040 ffff888032d1e000 0000000000000000 [ 45.908407][ T5957] raw: ffff8880328151f0 0000000000000001 00000000ffffffff 0000000000000000 [ 45.910515][ T5957] page dumped because: page_pool leak [ 45.911825][ T5957] page_owner tracks the page as allocated [ 45.913245][ T5957] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5957, tgid 5955 (syz-executor687), ts 44479108216, free_ts 44477187340 [ 45.917448][ T5957] post_alloc_hook+0x2d1/0x350 [ 45.918752][ T5957] get_page_from_freelist+0x101e/0x3070 [ 45.920259][ T5957] __alloc_pages_noprof+0x223/0x25a0 [ 45.921610][ T5957] alloc_pages_bulk_noprof+0x77c/0x1110 [ 45.922999][ T5957] __page_pool_alloc_pages_slow+0x18f/0x770 [ 45.924988][ T5957] page_pool_alloc_netmem+0xc4/0x160 [ 45.926479][ T5957] page_pool_alloc_pages+0x1a/0x60 [ 45.927848][ T5957] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 45.929497][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 45.930918][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 45.932230][ T5957] __sys_bpf+0xfc6/0x49a0 [ 45.933326][ T5957] __x64_sys_bpf+0x78/0xc0 [ 45.934469][ T5957] do_syscall_64+0xcd/0x250 [ 45.935582][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.937049][ T5957] page last free pid 5958 tgid 5952 stack trace: [ 45.938585][ T5957] free_unref_page+0x5f4/0xdc0 [ 45.939793][ T5957] __folio_put+0x30d/0x3d0 [ 45.941031][ T5957] put_page+0x21e/0x280 [ 45.942083][ T5957] page_pool_return_page+0x400/0x520 [ 45.943458][ T5957] page_pool_release+0xf4/0x7d0 [ 45.944748][ T5957] page_pool_destroy+0x10a/0x4c0 [ 45.946726][ T5957] bpf_test_run_xdp_live+0x3a1/0x500 [ 45.948378][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 45.950453][ T5957] __sys_bpf+0xfc6/0x49a0 [ 45.951574][ T5957] __x64_sys_bpf+0x78/0xc0 [ 45.952744][ T5957] do_syscall_64+0xcd/0x250 [ 45.953953][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.955443][ T5957] Modules linked in: [ 45.956427][ T5957] CPU: 3 UID: 0 PID: 5957 Comm: syz-executor687 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 45.959443][ T5957] Tainted: [B]=BAD_PAGE [ 45.960478][ T5957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 45.963099][ T5957] Call Trace: [ 45.963911][ T5957] [ 45.964640][ T5957] dump_stack_lvl+0x16c/0x1f0 [ 45.965787][ T5957] bad_page+0xb3/0x1f0 [ 45.966895][ T5957] ? __pfx_bad_page+0x10/0x10 [ 45.968072][ T5957] ? page_bad_reason+0x9d/0x1e0 [ 45.969275][ T5957] free_unref_page+0x657/0xdc0 [ 45.970451][ T5957] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 45.971962][ T5957] ? __phys_addr+0xc6/0x150 [ 45.973118][ T5957] skb_free_head+0xa0/0x1d0 [ 45.974231][ T5957] skb_release_data+0x560/0x730 [ 45.975428][ T5957] sk_skb_reason_drop+0x129/0x1a0 [ 45.976801][ T5957] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 45.978426][ T5957] ? kernel_text_address+0x8d/0x100 [ 45.979725][ T5957] ? hlock_class+0x4e/0x130 [ 45.980872][ T5957] ? __lock_acquire+0x163e/0x3ce0 [ 45.982105][ T5957] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 45.983962][ T5957] ? hlock_class+0x4e/0x130 [ 45.985222][ T5957] ? __lock_acquire+0xbdd/0x3ce0 [ 45.986823][ T5957] ? __pfx___lock_acquire+0x10/0x10 [ 45.988215][ T5957] __netif_receive_skb_list_core+0x357/0x950 [ 45.989986][ T5957] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 45.991675][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 45.993624][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 45.995530][ T5957] ? lock_acquire+0x2f/0xb0 [ 45.996763][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 45.998426][ T5957] netif_receive_skb_list_internal+0x753/0xdb0 [ 45.999954][ T5957] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 46.001606][ T5957] ? __pfx_eth_type_trans+0x10/0x10 [ 46.002971][ T5957] ? __build_skb_around+0x278/0x3b0 [ 46.004306][ T5957] netif_receive_skb_list+0x4f/0x4a0 [ 46.005682][ T5957] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 46.007442][ T5957] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 46.009394][ T5957] ? bpf_test_timer_continue+0x150/0x3d0 [ 46.010849][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 46.012134][ T5957] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 46.013823][ T5957] ? try_to_wake_up+0x154/0x14f0 [ 46.015350][ T5957] ? __pfx_try_to_wake_up+0x10/0x10 [ 46.016672][ T5957] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 46.018139][ T5957] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 46.019448][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 46.020727][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 46.022031][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 46.023360][ T5957] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 46.025006][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 46.026631][ T5957] ? lock_acquire+0x2f/0xb0 [ 46.027989][ T5957] ? __fget_files+0x40/0x3f0 [ 46.029441][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 46.031400][ T5957] ? fput+0x30/0x390 [ 46.032791][ T5957] ? __bpf_prog_get+0xa0/0x290 [ 46.034256][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 46.036004][ T5957] __sys_bpf+0xfc6/0x49a0 [ 46.037098][ T5957] ? find_held_lock+0x2d/0x110 [ 46.038324][ T5957] ? __pfx___sys_bpf+0x10/0x10 [ 46.039577][ T5957] ? __might_fault+0x13b/0x190 [ 46.040787][ T5957] ? __pfx_lock_release+0x10/0x10 [ 46.042133][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 46.043671][ T5957] ? lock_acquire+0x2f/0xb0 [ 46.044891][ T5957] ? __might_fault+0xe3/0x190 [ 46.046052][ T5957] ? xfd_validate_state+0x5d/0x180 [ 46.047300][ T5957] ? rcu_is_watching+0x12/0xc0 [ 46.048483][ T5957] __x64_sys_bpf+0x78/0xc0 [ 46.049583][ T5957] ? lockdep_hardirqs_on+0x7c/0x110 [ 46.050888][ T5957] do_syscall_64+0xcd/0x250 [ 46.052017][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.053530][ T5957] RIP: 0033:0x7f1bf86dbe99 [ 46.054613][ T5957] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 46.059252][ T5957] RSP: 002b:00007f1bf8696228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 46.061298][ T5957] RAX: ffffffffffffffda RBX: 00007f1bf8766328 RCX: 00007f1bf86dbe99 [ 46.063261][ T5957] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 46.065180][ T5957] RBP: 00007f1bf8766320 R08: 00007f1bf86966c0 R09: 00007f1bf86966c0 [ 46.067074][ T5957] R10: 00007f1bf86966c0 R11: 0000000000000246 R12: 00007f1bf8733074 [ 46.068965][ T5957] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe730b5808 [ 46.070980][ T5957] [ 46.071879][ T5957] BUG: Bad page state in process syz-executor687 pfn:25295 [ 46.074002][ T5957] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x25295 [ 46.076195][ T5957] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 46.077945][ T5957] raw: 00fff00000000000 dead000000000040 ffff888032d1e000 0000000000000000 [ 46.080137][ T5957] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 46.082266][ T5957] page dumped because: page_pool leak [ 46.084009][ T5957] page_owner tracks the page as allocated [ 46.085714][ T5957] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5957, tgid 5955 (syz-executor687), ts 44479100029, free_ts 44477194555 [ 46.090716][ T5957] post_alloc_hook+0x2d1/0x350 [ 46.091920][ T5957] get_page_from_freelist+0x101e/0x3070 [ 46.093283][ T5957] __alloc_pages_noprof+0x223/0x25a0 [ 46.094689][ T5957] alloc_pages_bulk_noprof+0x77c/0x1110 [ 46.096165][ T5957] __page_pool_alloc_pages_slow+0x18f/0x770 [ 46.097655][ T5957] page_pool_alloc_netmem+0xc4/0x160 [ 46.098997][ T5957] page_pool_alloc_pages+0x1a/0x60 [ 46.100314][ T5957] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 46.101868][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 46.103221][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 46.104558][ T5957] __sys_bpf+0xfc6/0x49a0 [ 46.105754][ T5957] __x64_sys_bpf+0x78/0xc0 [ 46.107278][ T5957] do_syscall_64+0xcd/0x250 [ 46.108501][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.110023][ T5957] page last free pid 5958 tgid 5952 stack trace: [ 46.111801][ T5957] free_unref_page+0x5f4/0xdc0 [ 46.113202][ T5957] __folio_put+0x30d/0x3d0 [ 46.114322][ T5957] put_page+0x21e/0x280 [ 46.115354][ T5957] page_pool_return_page+0x400/0x520 [ 46.116661][ T5957] page_pool_release+0xf4/0x7d0 [ 46.118132][ T5957] page_pool_destroy+0x10a/0x4c0 [ 46.119644][ T5957] bpf_test_run_xdp_live+0x3a1/0x500 [ 46.121304][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 46.122961][ T5957] __sys_bpf+0xfc6/0x49a0 [ 46.124227][ T5957] __x64_sys_bpf+0x78/0xc0 [ 46.125558][ T5957] do_syscall_64+0xcd/0x250 [ 46.126780][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.128230][ T5957] Modules linked in: [ 46.129199][ T5957] CPU: 3 UID: 0 PID: 5957 Comm: syz-executor687 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 46.132205][ T5957] Tainted: [B]=BAD_PAGE [ 46.133264][ T5957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 46.135826][ T5957] Call Trace: [ 46.136660][ T5957] [ 46.137400][ T5957] dump_stack_lvl+0x16c/0x1f0 [ 46.138563][ T5957] bad_page+0xb3/0x1f0 [ 46.139588][ T5957] ? __pfx_bad_page+0x10/0x10 [ 46.140737][ T5957] ? page_bad_reason+0x9d/0x1e0 [ 46.141932][ T5957] free_unref_page+0x657/0xdc0 [ 46.143157][ T5957] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 46.144965][ T5957] ? __phys_addr+0xc6/0x150 [ 46.146229][ T5957] skb_free_head+0xa0/0x1d0 [ 46.147614][ T5957] skb_release_data+0x560/0x730 [ 46.148822][ T5957] sk_skb_reason_drop+0x129/0x1a0 [ 46.150091][ T5957] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 46.151867][ T5957] ? kernel_text_address+0x8d/0x100 [ 46.153282][ T5957] ? hlock_class+0x4e/0x130 [ 46.154425][ T5957] ? __lock_acquire+0x163e/0x3ce0 [ 46.155787][ T5957] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 46.157590][ T5957] ? hlock_class+0x4e/0x130 [ 46.158746][ T5957] ? __lock_acquire+0xbdd/0x3ce0 [ 46.159983][ T5957] ? __pfx___lock_acquire+0x10/0x10 [ 46.161273][ T5957] __netif_receive_skb_list_core+0x357/0x950 [ 46.163036][ T5957] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 46.164645][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 46.165898][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 46.167575][ T5957] ? lock_acquire+0x2f/0xb0 [ 46.168697][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 46.170248][ T5957] netif_receive_skb_list_internal+0x753/0xdb0 [ 46.171815][ T5957] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 46.173759][ T5957] ? __pfx_eth_type_trans+0x10/0x10 [ 46.175092][ T5957] ? __build_skb_around+0x278/0x3b0 [ 46.176424][ T5957] netif_receive_skb_list+0x4f/0x4a0 [ 46.177760][ T5957] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 46.179317][ T5957] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 46.180931][ T5957] ? bpf_test_timer_continue+0x150/0x3d0 [ 46.182298][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 46.183663][ T5957] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 46.185096][ T5957] ? try_to_wake_up+0x154/0x14f0 [ 46.186406][ T5957] ? __pfx_try_to_wake_up+0x10/0x10 [ 46.187703][ T5957] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 46.189164][ T5957] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 46.190453][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 46.191786][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 46.193187][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 46.194501][ T5957] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 46.195968][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 46.197295][ T5957] ? lock_acquire+0x2f/0xb0 [ 46.198426][ T5957] ? __fget_files+0x40/0x3f0 [ 46.199584][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 46.201005][ T5957] ? fput+0x30/0x390 [ 46.201987][ T5957] ? __bpf_prog_get+0xa0/0x290 [ 46.203402][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 46.204955][ T5957] __sys_bpf+0xfc6/0x49a0 [ 46.206091][ T5957] ? find_held_lock+0x2d/0x110 [ 46.207319][ T5957] ? __pfx___sys_bpf+0x10/0x10 [ 46.208519][ T5957] ? __might_fault+0x13b/0x190 [ 46.210038][ T5957] ? __pfx_lock_release+0x10/0x10 [ 46.211730][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 46.213654][ T5957] ? lock_acquire+0x2f/0xb0 [ 46.214980][ T5957] ? __might_fault+0xe3/0x190 [ 46.216217][ T5957] ? xfd_validate_state+0x5d/0x180 [ 46.217543][ T5957] ? rcu_is_watching+0x12/0xc0 [ 46.218757][ T5957] __x64_sys_bpf+0x78/0xc0 [ 46.219884][ T5957] ? lockdep_hardirqs_on+0x7c/0x110 [ 46.221204][ T5957] do_syscall_64+0xcd/0x250 [ 46.222358][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.223869][ T5957] RIP: 0033:0x7f1bf86dbe99 [ 46.224964][ T5957] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 46.230679][ T5957] RSP: 002b:00007f1bf8696228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 46.232950][ T5957] RAX: ffffffffffffffda RBX: 00007f1bf8766328 RCX: 00007f1bf86dbe99 [ 46.234992][ T5957] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 46.236879][ T5957] RBP: 00007f1bf8766320 R08: 00007f1bf86966c0 R09: 00007f1bf86966c0 [ 46.238812][ T5957] R10: 00007f1bf86966c0 R11: 0000000000000246 R12: 00007f1bf8733074 [ 46.240727][ T5957] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe730b5808 [ 46.242690][ T5957] [ 46.243598][ T5957] BUG: Bad page state in process syz-executor687 pfn:2833f [ 46.245387][ T5957] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2833f [ 46.248371][ T5957] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 46.250129][ T5957] raw: 00fff00000000000 dead000000000040 ffff888032d1e000 0000000000000000 [ 46.252519][ T5957] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 46.254965][ T5957] page dumped because: page_pool leak [ 46.256261][ T5957] page_owner tracks the page as allocated [ 46.257620][ T5957] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5957, tgid 5955 (syz-executor687), ts 44479091942, free_ts 44477201660 [ 46.261911][ T5957] post_alloc_hook+0x2d1/0x350 [ 46.263155][ T5957] get_page_from_freelist+0x101e/0x3070 [ 46.264515][ T5957] __alloc_pages_noprof+0x223/0x25a0 [ 46.265797][ T5957] alloc_pages_bulk_noprof+0x77c/0x1110 [ 46.267344][ T5957] __page_pool_alloc_pages_slow+0x18f/0x770 [ 46.268988][ T5957] page_pool_alloc_netmem+0xc4/0x160 [ 46.270659][ T5957] page_pool_alloc_pages+0x1a/0x60 [ 46.272391][ T5957] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 46.273987][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 46.275400][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 46.276713][ T5957] __sys_bpf+0xfc6/0x49a0 [ 46.277783][ T5957] __x64_sys_bpf+0x78/0xc0 [ 46.278966][ T5957] do_syscall_64+0xcd/0x250 [ 46.280159][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.281615][ T5957] page last free pid 5958 tgid 5952 stack trace: [ 46.283228][ T5957] free_unref_page+0x5f4/0xdc0 [ 46.284505][ T5957] __folio_put+0x30d/0x3d0 [ 46.286186][ T5957] put_page+0x21e/0x280 [ 46.287368][ T5957] page_pool_return_page+0x400/0x520 [ 46.288809][ T5957] page_pool_release+0xf4/0x7d0 [ 46.290460][ T5957] page_pool_destroy+0x10a/0x4c0 [ 46.291755][ T5957] bpf_test_run_xdp_live+0x3a1/0x500 [ 46.293079][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 46.294582][ T5957] __sys_bpf+0xfc6/0x49a0 [ 46.295624][ T5957] __x64_sys_bpf+0x78/0xc0 [ 46.296738][ T5957] do_syscall_64+0xcd/0x250 [ 46.297874][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.299305][ T5957] Modules linked in: [ 46.300341][ T5957] CPU: 3 UID: 0 PID: 5957 Comm: syz-executor687 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 46.303378][ T5957] Tainted: [B]=BAD_PAGE [ 46.304410][ T5957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 46.307523][ T5957] Call Trace: [ 46.308359][ T5957] [ 46.309311][ T5957] dump_stack_lvl+0x16c/0x1f0 [ 46.310698][ T5957] bad_page+0xb3/0x1f0 [ 46.312099][ T5957] ? __pfx_bad_page+0x10/0x10 [ 46.313405][ T5957] ? page_bad_reason+0x9d/0x1e0 [ 46.314774][ T5957] free_unref_page+0x657/0xdc0 [ 46.316016][ T5957] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 46.317489][ T5957] ? __phys_addr+0xc6/0x150 [ 46.318634][ T5957] skb_free_head+0xa0/0x1d0 [ 46.319763][ T5957] skb_release_data+0x560/0x730 [ 46.320972][ T5957] sk_skb_reason_drop+0x129/0x1a0 [ 46.322248][ T5957] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 46.324171][ T5957] ? kernel_text_address+0x8d/0x100 [ 46.325660][ T5957] ? hlock_class+0x4e/0x130 [ 46.326859][ T5957] ? __lock_acquire+0x163e/0x3ce0 [ 46.328265][ T5957] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 46.330169][ T5957] ? hlock_class+0x4e/0x130 [ 46.331377][ T5957] ? __lock_acquire+0xbdd/0x3ce0 [ 46.332613][ T5957] ? __pfx___lock_acquire+0x10/0x10 [ 46.333864][ T5957] __netif_receive_skb_list_core+0x357/0x950 [ 46.335458][ T5957] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 46.337103][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 46.338386][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 46.339928][ T5957] ? lock_acquire+0x2f/0xb0 [ 46.341062][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 46.342676][ T5957] netif_receive_skb_list_internal+0x753/0xdb0 [ 46.344195][ T5957] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 46.346078][ T5957] ? __pfx_eth_type_trans+0x10/0x10 [ 46.347397][ T5957] ? __build_skb_around+0x278/0x3b0 [ 46.348699][ T5957] netif_receive_skb_list+0x4f/0x4a0 [ 46.350020][ T5957] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 46.351589][ T5957] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 46.353279][ T5957] ? bpf_test_timer_continue+0x150/0x3d0 [ 46.354687][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 46.355999][ T5957] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 46.357427][ T5957] ? try_to_wake_up+0x154/0x14f0 [ 46.358879][ T5957] ? __pfx_try_to_wake_up+0x10/0x10 [ 46.360481][ T5957] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 46.362236][ T5957] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 46.364080][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 46.365750][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 46.367260][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 46.368609][ T5957] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 46.370267][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 46.371622][ T5957] ? lock_acquire+0x2f/0xb0 [ 46.372779][ T5957] ? __fget_files+0x40/0x3f0 [ 46.374010][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 46.375507][ T5957] ? fput+0x30/0x390 [ 46.376496][ T5957] ? __bpf_prog_get+0xa0/0x290 [ 46.377670][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 46.379133][ T5957] __sys_bpf+0xfc6/0x49a0 [ 46.380196][ T5957] ? find_held_lock+0x2d/0x110 [ 46.381388][ T5957] ? __pfx___sys_bpf+0x10/0x10 [ 46.382622][ T5957] ? __might_fault+0x13b/0x190 [ 46.383850][ T5957] ? __pfx_lock_release+0x10/0x10 [ 46.385073][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 46.386360][ T5957] ? lock_acquire+0x2f/0xb0 [ 46.387465][ T5957] ? __might_fault+0xe3/0x190 [ 46.388619][ T5957] ? xfd_validate_state+0x5d/0x180 [ 46.389880][ T5957] ? rcu_is_watching+0x12/0xc0 [ 46.391081][ T5957] __x64_sys_bpf+0x78/0xc0 [ 46.392184][ T5957] ? lockdep_hardirqs_on+0x7c/0x110 [ 46.393499][ T5957] do_syscall_64+0xcd/0x250 [ 46.394635][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.396064][ T5957] RIP: 0033:0x7f1bf86dbe99 [ 46.397164][ T5957] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 46.401759][ T5957] RSP: 002b:00007f1bf8696228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 46.403805][ T5957] RAX: ffffffffffffffda RBX: 00007f1bf8766328 RCX: 00007f1bf86dbe99 [ 46.405976][ T5957] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 46.408100][ T5957] RBP: 00007f1bf8766320 R08: 00007f1bf86966c0 R09: 00007f1bf86966c0 [ 46.410028][ T5957] R10: 00007f1bf86966c0 R11: 0000000000000246 R12: 00007f1bf8733074 [ 46.411962][ T5957] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe730b5808 [ 46.414031][ T5957] [ 46.414983][ T5957] BUG: Bad page state in process syz-executor687 pfn:282fc [ 46.416850][ T5957] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x282fc [ 46.418964][ T5957] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 46.420742][ T5957] raw: 00fff00000000000 dead000000000040 ffff888032d1e000 0000000000000000 [ 46.422851][ T5957] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 46.425190][ T5957] page dumped because: page_pool leak [ 46.426500][ T5957] page_owner tracks the page as allocated [ 46.427921][ T5957] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5957, tgid 5955 (syz-executor687), ts 44479083843, free_ts 44477209094 [ 46.432247][ T5957] post_alloc_hook+0x2d1/0x350 [ 46.433460][ T5957] get_page_from_freelist+0x101e/0x3070 [ 46.434800][ T5957] __alloc_pages_noprof+0x223/0x25a0 [ 46.436302][ T5957] alloc_pages_bulk_noprof+0x77c/0x1110 [ 46.437682][ T5957] __page_pool_alloc_pages_slow+0x18f/0x770 [ 46.439196][ T5957] page_pool_alloc_netmem+0xc4/0x160 [ 46.440555][ T5957] page_pool_alloc_pages+0x1a/0x60 [ 46.441838][ T5957] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 46.443426][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 46.445133][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 46.446651][ T5957] __sys_bpf+0xfc6/0x49a0 [ 46.447766][ T5957] __x64_sys_bpf+0x78/0xc0 [ 46.449100][ T5957] do_syscall_64+0xcd/0x250 [ 46.450320][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.451833][ T5957] page last free pid 5958 tgid 5952 stack trace: [ 46.453402][ T5957] free_unref_page+0x5f4/0xdc0 [ 46.454591][ T5957] __folio_put+0x30d/0x3d0 [ 46.455825][ T5957] put_page+0x21e/0x280 [ 46.456865][ T5957] page_pool_return_page+0x400/0x520 [ 46.458167][ T5957] page_pool_release+0xf4/0x7d0 [ 46.459568][ T5957] page_pool_destroy+0x10a/0x4c0 [ 46.460998][ T5957] bpf_test_run_xdp_live+0x3a1/0x500 [ 46.462307][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 46.463636][ T5957] __sys_bpf+0xfc6/0x49a0 [ 46.464856][ T5957] __x64_sys_bpf+0x78/0xc0 [ 46.465988][ T5957] do_syscall_64+0xcd/0x250 [ 46.467117][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.468574][ T5957] Modules linked in: [ 46.469566][ T5957] CPU: 3 UID: 0 PID: 5957 Comm: syz-executor687 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 46.472653][ T5957] Tainted: [B]=BAD_PAGE [ 46.473687][ T5957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 46.476847][ T5957] Call Trace: [ 46.477692][ T5957] [ 46.478449][ T5957] dump_stack_lvl+0x16c/0x1f0 [ 46.479653][ T5957] bad_page+0xb3/0x1f0 [ 46.480678][ T5957] ? __pfx_bad_page+0x10/0x10 [ 46.481850][ T5957] ? page_bad_reason+0x9d/0x1e0 [ 46.483508][ T5957] free_unref_page+0x657/0xdc0 [ 46.484723][ T5957] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 46.486275][ T5957] ? __phys_addr+0xc6/0x150 [ 46.487423][ T5957] skb_free_head+0xa0/0x1d0 [ 46.488544][ T5957] skb_release_data+0x560/0x730 [ 46.489714][ T5957] sk_skb_reason_drop+0x129/0x1a0 [ 46.491032][ T5957] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 46.492672][ T5957] ? kernel_text_address+0x8d/0x100 [ 46.493964][ T5957] ? hlock_class+0x4e/0x130 [ 46.495294][ T5957] ? __lock_acquire+0x163e/0x3ce0 [ 46.496653][ T5957] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 46.498815][ T5957] ? hlock_class+0x4e/0x130 [ 46.500255][ T5957] ? __lock_acquire+0xbdd/0x3ce0 [ 46.501480][ T5957] ? __pfx___lock_acquire+0x10/0x10 [ 46.502806][ T5957] __netif_receive_skb_list_core+0x357/0x950 [ 46.504629][ T5957] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 46.506299][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 46.507605][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 46.509152][ T5957] ? lock_acquire+0x2f/0xb0 [ 46.510349][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 46.511963][ T5957] netif_receive_skb_list_internal+0x753/0xdb0 [ 46.513695][ T5957] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 46.515916][ T5957] ? __pfx_eth_type_trans+0x10/0x10 [ 46.517282][ T5957] ? __build_skb_around+0x278/0x3b0 [ 46.518575][ T5957] netif_receive_skb_list+0x4f/0x4a0 [ 46.519914][ T5957] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 46.521470][ T5957] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 46.523140][ T5957] ? bpf_test_timer_continue+0x150/0x3d0 [ 46.524560][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 46.525929][ T5957] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 46.527370][ T5957] ? try_to_wake_up+0x154/0x14f0 [ 46.528594][ T5957] ? __pfx_try_to_wake_up+0x10/0x10 [ 46.529856][ T5957] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 46.531352][ T5957] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 46.532686][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 46.534126][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 46.535536][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 46.536864][ T5957] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 46.538527][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 46.540100][ T5957] ? lock_acquire+0x2f/0xb0 [ 46.541238][ T5957] ? __fget_files+0x40/0x3f0 [ 46.542422][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 46.544020][ T5957] ? fput+0x30/0x390 [ 46.545085][ T5957] ? __bpf_prog_get+0xa0/0x290 [ 46.546354][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 46.547829][ T5957] __sys_bpf+0xfc6/0x49a0 [ 46.548920][ T5957] ? find_held_lock+0x2d/0x110 [ 46.550144][ T5957] ? __pfx___sys_bpf+0x10/0x10 [ 46.551386][ T5957] ? __might_fault+0x13b/0x190 [ 46.552576][ T5957] ? __pfx_lock_release+0x10/0x10 [ 46.553820][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 46.555146][ T5957] ? lock_acquire+0x2f/0xb0 [ 46.556641][ T5957] ? __might_fault+0xe3/0x190 [ 46.558317][ T5957] ? xfd_validate_state+0x5d/0x180 [ 46.559626][ T5957] ? rcu_is_watching+0x12/0xc0 [ 46.560971][ T5957] __x64_sys_bpf+0x78/0xc0 [ 46.562112][ T5957] ? lockdep_hardirqs_on+0x7c/0x110 [ 46.563398][ T5957] do_syscall_64+0xcd/0x250 [ 46.564693][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.566165][ T5957] RIP: 0033:0x7f1bf86dbe99 [ 46.567304][ T5957] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 46.572007][ T5957] RSP: 002b:00007f1bf8696228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 46.574071][ T5957] RAX: ffffffffffffffda RBX: 00007f1bf8766328 RCX: 00007f1bf86dbe99 [ 46.576563][ T5957] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 46.578783][ T5957] RBP: 00007f1bf8766320 R08: 00007f1bf86966c0 R09: 00007f1bf86966c0 [ 46.580802][ T5957] R10: 00007f1bf86966c0 R11: 0000000000000246 R12: 00007f1bf8733074 [ 46.582689][ T5957] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe730b5808 [ 46.584602][ T5957] [ 46.585482][ T5957] BUG: Bad page state in process syz-executor687 pfn:282ff [ 46.587254][ T5957] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x282ff [ 46.589409][ T5957] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 46.591231][ T5957] raw: 00fff00000000000 dead000000000040 ffff888032d1e000 0000000000000000 [ 46.593458][ T5957] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 46.595652][ T5957] page dumped because: page_pool leak [ 46.596968][ T5957] page_owner tracks the page as allocated [ 46.598510][ T5957] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5957, tgid 5955 (syz-executor687), ts 44479075859, free_ts 44477216085 [ 46.602948][ T5957] post_alloc_hook+0x2d1/0x350 [ 46.604153][ T5957] get_page_from_freelist+0x101e/0x3070 [ 46.605749][ T5957] __alloc_pages_noprof+0x223/0x25a0 [ 46.607117][ T5957] alloc_pages_bulk_noprof+0x77c/0x1110 [ 46.608506][ T5957] __page_pool_alloc_pages_slow+0x18f/0x770 [ 46.610113][ T5957] page_pool_alloc_netmem+0xc4/0x160 [ 46.611404][ T5957] page_pool_alloc_pages+0x1a/0x60 [ 46.612665][ T5957] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 46.614560][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 46.616061][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 46.617699][ T5957] __sys_bpf+0xfc6/0x49a0 [ 46.618822][ T5957] __x64_sys_bpf+0x78/0xc0 [ 46.620000][ T5957] do_syscall_64+0xcd/0x250 [ 46.621147][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.622611][ T5957] page last free pid 5958 tgid 5952 stack trace: [ 46.624188][ T5957] free_unref_page+0x5f4/0xdc0 [ 46.625426][ T5957] __folio_put+0x30d/0x3d0 [ 46.626603][ T5957] put_page+0x21e/0x280 [ 46.627621][ T5957] page_pool_return_page+0x400/0x520 [ 46.628944][ T5957] page_pool_release+0xf4/0x7d0 [ 46.630197][ T5957] page_pool_destroy+0x10a/0x4c0 [ 46.631427][ T5957] bpf_test_run_xdp_live+0x3a1/0x500 [ 46.632818][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 46.634156][ T5957] __sys_bpf+0xfc6/0x49a0 [ 46.635226][ T5957] __x64_sys_bpf+0x78/0xc0 [ 46.636359][ T5957] do_syscall_64+0xcd/0x250 [ 46.637571][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.639055][ T5957] Modules linked in: [ 46.640184][ T5957] CPU: 3 UID: 0 PID: 5957 Comm: syz-executor687 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 46.644152][ T5957] Tainted: [B]=BAD_PAGE [ 46.645260][ T5957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 46.647995][ T5957] Call Trace: [ 46.648816][ T5957] [ 46.649548][ T5957] dump_stack_lvl+0x16c/0x1f0 [ 46.650756][ T5957] bad_page+0xb3/0x1f0 [ 46.651783][ T5957] ? __pfx_bad_page+0x10/0x10 [ 46.652969][ T5957] ? page_bad_reason+0x9d/0x1e0 [ 46.654176][ T5957] free_unref_page+0x657/0xdc0 [ 46.655660][ T5957] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 46.657131][ T5957] ? __phys_addr+0xc6/0x150 [ 46.658264][ T5957] skb_free_head+0xa0/0x1d0 [ 46.659406][ T5957] skb_release_data+0x560/0x730 [ 46.660593][ T5957] sk_skb_reason_drop+0x129/0x1a0 [ 46.661862][ T5957] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 46.663521][ T5957] ? kernel_text_address+0x8d/0x100 [ 46.664793][ T5957] ? hlock_class+0x4e/0x130 [ 46.665939][ T5957] ? __lock_acquire+0x163e/0x3ce0 [ 46.667207][ T5957] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 46.669114][ T5957] ? hlock_class+0x4e/0x130 [ 46.670270][ T5957] ? __lock_acquire+0xbdd/0x3ce0 [ 46.671526][ T5957] ? __pfx___lock_acquire+0x10/0x10 [ 46.672804][ T5957] __netif_receive_skb_list_core+0x357/0x950 [ 46.674314][ T5957] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 46.675996][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 46.677263][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 46.678986][ T5957] ? lock_acquire+0x2f/0xb0 [ 46.680123][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 46.681842][ T5957] netif_receive_skb_list_internal+0x753/0xdb0 [ 46.683960][ T5957] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 46.685682][ T5957] ? __pfx_eth_type_trans+0x10/0x10 [ 46.686996][ T5957] ? __build_skb_around+0x278/0x3b0 [ 46.688301][ T5957] netif_receive_skb_list+0x4f/0x4a0 [ 46.689623][ T5957] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 46.691371][ T5957] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 46.692959][ T5957] ? bpf_test_timer_continue+0x150/0x3d0 [ 46.694334][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 46.696368][ T5957] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 46.697818][ T5957] ? try_to_wake_up+0x154/0x14f0 [ 46.699045][ T5957] ? __pfx_try_to_wake_up+0x10/0x10 [ 46.700328][ T5957] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 46.701927][ T5957] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 46.703582][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 46.705083][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 46.706436][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 46.707790][ T5957] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 46.709240][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 46.710600][ T5957] ? lock_acquire+0x2f/0xb0 [ 46.711753][ T5957] ? __fget_files+0x40/0x3f0 [ 46.712899][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 46.714551][ T5957] ? fput+0x30/0x390 [ 46.715567][ T5957] ? __bpf_prog_get+0xa0/0x290 [ 46.716753][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 46.718171][ T5957] __sys_bpf+0xfc6/0x49a0 [ 46.719261][ T5957] ? find_held_lock+0x2d/0x110 [ 46.720425][ T5957] ? __pfx___sys_bpf+0x10/0x10 [ 46.721618][ T5957] ? __might_fault+0x13b/0x190 [ 46.722798][ T5957] ? __pfx_lock_release+0x10/0x10 [ 46.724037][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 46.725299][ T5957] ? lock_acquire+0x2f/0xb0 [ 46.726434][ T5957] ? __might_fault+0xe3/0x190 [ 46.727581][ T5957] ? xfd_validate_state+0x5d/0x180 [ 46.728835][ T5957] ? rcu_is_watching+0x12/0xc0 [ 46.730020][ T5957] __x64_sys_bpf+0x78/0xc0 [ 46.731105][ T5957] ? lockdep_hardirqs_on+0x7c/0x110 [ 46.732358][ T5957] do_syscall_64+0xcd/0x250 [ 46.733464][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.734924][ T5957] RIP: 0033:0x7f1bf86dbe99 [ 46.736049][ T5957] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 46.740680][ T5957] RSP: 002b:00007f1bf8696228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 46.742700][ T5957] RAX: ffffffffffffffda RBX: 00007f1bf8766328 RCX: 00007f1bf86dbe99 [ 46.744604][ T5957] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 46.746516][ T5957] RBP: 00007f1bf8766320 R08: 00007f1bf86966c0 R09: 00007f1bf86966c0 [ 46.748430][ T5957] R10: 00007f1bf86966c0 R11: 0000000000000246 R12: 00007f1bf8733074 [ 46.750358][ T5957] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe730b5808 [ 46.752298][ T5957] [ 46.753169][ T5957] BUG: Bad page state in process syz-executor687 pfn:33186 [ 46.754937][ T5957] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x33186 [ 46.757035][ T5957] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 46.758732][ T5957] raw: 00fff00000000000 dead000000000040 ffff888032d1e000 0000000000000000 [ 46.760885][ T5957] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 46.762964][ T5957] page dumped because: page_pool leak [ 46.764299][ T5957] page_owner tracks the page as allocated [ 46.765692][ T5957] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5957, tgid 5955 (syz-executor687), ts 44479067615, free_ts 44477223154 [ 46.769807][ T5957] post_alloc_hook+0x2d1/0x350 [ 46.771055][ T5957] get_page_from_freelist+0x101e/0x3070 [ 46.772418][ T5957] __alloc_pages_noprof+0x223/0x25a0 [ 46.773766][ T5957] alloc_pages_bulk_noprof+0x77c/0x1110 [ 46.775665][ T5957] __page_pool_alloc_pages_slow+0x18f/0x770 [ 46.777395][ T5957] page_pool_alloc_netmem+0xc4/0x160 [ 46.778690][ T5957] page_pool_alloc_pages+0x1a/0x60 [ 46.780024][ T5957] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 46.781693][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 46.782982][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 46.784298][ T5957] __sys_bpf+0xfc6/0x49a0 [ 46.785376][ T5957] __x64_sys_bpf+0x78/0xc0 [ 46.786517][ T5957] do_syscall_64+0xcd/0x250 [ 46.787654][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.789082][ T5957] page last free pid 5958 tgid 5952 stack trace: [ 46.790661][ T5957] free_unref_page+0x5f4/0xdc0 [ 46.791846][ T5957] __folio_put+0x30d/0x3d0 [ 46.792931][ T5957] put_page+0x21e/0x280 [ 46.794129][ T5957] page_pool_return_page+0x400/0x520 [ 46.795500][ T5957] page_pool_release+0xf4/0x7d0 [ 46.796715][ T5957] page_pool_destroy+0x10a/0x4c0 [ 46.798035][ T5957] bpf_test_run_xdp_live+0x3a1/0x500 [ 46.799362][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 46.800767][ T5957] __sys_bpf+0xfc6/0x49a0 [ 46.801908][ T5957] __x64_sys_bpf+0x78/0xc0 [ 46.803310][ T5957] do_syscall_64+0xcd/0x250 [ 46.804794][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.806682][ T5957] Modules linked in: [ 46.807949][ T5957] CPU: 3 UID: 0 PID: 5957 Comm: syz-executor687 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 46.811735][ T5957] Tainted: [B]=BAD_PAGE [ 46.813026][ T5957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 46.816276][ T5957] Call Trace: [ 46.817456][ T5957] [ 46.818814][ T5957] dump_stack_lvl+0x16c/0x1f0 [ 46.820399][ T5957] bad_page+0xb3/0x1f0 [ 46.821753][ T5957] ? __pfx_bad_page+0x10/0x10 [ 46.823329][ T5957] ? page_bad_reason+0x9d/0x1e0 [ 46.824982][ T5957] free_unref_page+0x657/0xdc0 [ 46.826525][ T5957] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 46.828468][ T5957] ? __phys_addr+0xc6/0x150 [ 46.829913][ T5957] skb_free_head+0xa0/0x1d0 [ 46.831393][ T5957] skb_release_data+0x560/0x730 [ 46.832936][ T5957] sk_skb_reason_drop+0x129/0x1a0 [ 46.834515][ T5957] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 46.836589][ T5957] ? kernel_text_address+0x8d/0x100 [ 46.838196][ T5957] ? hlock_class+0x4e/0x130 [ 46.839660][ T5957] ? __lock_acquire+0x163e/0x3ce0 [ 46.841279][ T5957] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 46.843563][ T5957] ? hlock_class+0x4e/0x130 [ 46.845266][ T5957] ? __lock_acquire+0xbdd/0x3ce0 [ 46.847317][ T5957] ? __pfx___lock_acquire+0x10/0x10 [ 46.849090][ T5957] __netif_receive_skb_list_core+0x357/0x950 [ 46.851147][ T5957] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 46.853143][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 46.854755][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 46.856727][ T5957] ? lock_acquire+0x2f/0xb0 [ 46.858660][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 46.860838][ T5957] netif_receive_skb_list_internal+0x753/0xdb0 [ 46.863484][ T5957] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 46.865580][ T5957] ? __pfx_eth_type_trans+0x10/0x10 [ 46.867206][ T5957] ? __build_skb_around+0x278/0x3b0 [ 46.868835][ T5957] netif_receive_skb_list+0x4f/0x4a0 [ 46.870563][ T5957] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 46.872840][ T5957] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 46.875243][ T5957] ? bpf_test_timer_continue+0x150/0x3d0 [ 46.877274][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 46.879142][ T5957] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 46.881144][ T5957] ? try_to_wake_up+0x154/0x14f0 [ 46.883008][ T5957] ? __pfx_try_to_wake_up+0x10/0x10 [ 46.884816][ T5957] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 46.886860][ T5957] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 46.888679][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 46.890335][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 46.891996][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 46.893640][ T5957] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 46.895578][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 46.897036][ T5957] ? lock_acquire+0x2f/0xb0 [ 46.898172][ T5957] ? __fget_files+0x40/0x3f0 [ 46.899336][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 46.900947][ T5957] ? fput+0x30/0x390 [ 46.901932][ T5957] ? __bpf_prog_get+0xa0/0x290 [ 46.903142][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 46.904781][ T5957] __sys_bpf+0xfc6/0x49a0 [ 46.905879][ T5957] ? find_held_lock+0x2d/0x110 [ 46.907092][ T5957] ? __pfx___sys_bpf+0x10/0x10 [ 46.908281][ T5957] ? __might_fault+0x13b/0x190 [ 46.909472][ T5957] ? __pfx_lock_release+0x10/0x10 [ 46.910719][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 46.911991][ T5957] ? lock_acquire+0x2f/0xb0 [ 46.913184][ T5957] ? __might_fault+0xe3/0x190 [ 46.914690][ T5957] ? xfd_validate_state+0x5d/0x180 [ 46.916704][ T5957] ? rcu_is_watching+0x12/0xc0 [ 46.918426][ T5957] __x64_sys_bpf+0x78/0xc0 [ 46.919762][ T5957] ? lockdep_hardirqs_on+0x7c/0x110 [ 46.921389][ T5957] do_syscall_64+0xcd/0x250 [ 46.922727][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.924494][ T5957] RIP: 0033:0x7f1bf86dbe99 [ 46.926076][ T5957] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 46.931459][ T5957] RSP: 002b:00007f1bf8696228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 46.933508][ T5957] RAX: ffffffffffffffda RBX: 00007f1bf8766328 RCX: 00007f1bf86dbe99 [ 46.935523][ T5957] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 46.937807][ T5957] RBP: 00007f1bf8766320 R08: 00007f1bf86966c0 R09: 00007f1bf86966c0 [ 46.940282][ T5957] R10: 00007f1bf86966c0 R11: 0000000000000246 R12: 00007f1bf8733074 [ 46.942364][ T5957] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe730b5808 [ 46.944688][ T5957] [ 46.945632][ T5957] BUG: Bad page state in process syz-executor687 pfn:3094f [ 46.947470][ T5957] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3094f [ 46.949888][ T5957] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 46.951730][ T5957] raw: 00fff00000000000 dead000000000040 ffff888032d1e000 0000000000000000 [ 46.954221][ T5957] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 46.956655][ T5957] page dumped because: page_pool leak [ 46.958286][ T5957] page_owner tracks the page as allocated [ 46.960285][ T5957] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5957, tgid 5955 (syz-executor687), ts 44479059207, free_ts 44477230559 [ 46.966192][ T5957] post_alloc_hook+0x2d1/0x350 [ 46.967952][ T5957] get_page_from_freelist+0x101e/0x3070 [ 46.969849][ T5957] __alloc_pages_noprof+0x223/0x25a0 [ 46.971727][ T5957] alloc_pages_bulk_noprof+0x77c/0x1110 [ 46.973421][ T5957] __page_pool_alloc_pages_slow+0x18f/0x770 [ 46.975327][ T5957] page_pool_alloc_netmem+0xc4/0x160 [ 46.977189][ T5957] page_pool_alloc_pages+0x1a/0x60 [ 46.978900][ T5957] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 46.981386][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 46.983167][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 46.984935][ T5957] __sys_bpf+0xfc6/0x49a0 [ 46.986414][ T5957] __x64_sys_bpf+0x78/0xc0 [ 46.987940][ T5957] do_syscall_64+0xcd/0x250 [ 46.989379][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.991365][ T5957] page last free pid 5958 tgid 5952 stack trace: [ 46.993289][ T5957] free_unref_page+0x5f4/0xdc0 [ 46.994784][ T5957] __folio_put+0x30d/0x3d0 [ 46.996586][ T5957] put_page+0x21e/0x280 [ 46.997881][ T5957] page_pool_return_page+0x400/0x520 [ 47.000335][ T5957] page_pool_release+0xf4/0x7d0 [ 47.002327][ T5957] page_pool_destroy+0x10a/0x4c0 [ 47.004074][ T5957] bpf_test_run_xdp_live+0x3a1/0x500 [ 47.005727][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 47.007509][ T5957] __sys_bpf+0xfc6/0x49a0 [ 47.008877][ T5957] __x64_sys_bpf+0x78/0xc0 [ 47.010372][ T5957] do_syscall_64+0xcd/0x250 [ 47.011718][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.013417][ T5957] Modules linked in: [ 47.014649][ T5957] CPU: 3 UID: 0 PID: 5957 Comm: syz-executor687 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 47.018317][ T5957] Tainted: [B]=BAD_PAGE [ 47.019688][ T5957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 47.023081][ T5957] Call Trace: [ 47.024234][ T5957] [ 47.025372][ T5957] dump_stack_lvl+0x16c/0x1f0 [ 47.027775][ T5957] bad_page+0xb3/0x1f0 [ 47.029209][ T5957] ? __pfx_bad_page+0x10/0x10 [ 47.031312][ T5957] ? page_bad_reason+0x9d/0x1e0 [ 47.033003][ T5957] free_unref_page+0x657/0xdc0 [ 47.034653][ T5957] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 47.036402][ T5957] ? __phys_addr+0xc6/0x150 [ 47.038092][ T5957] skb_free_head+0xa0/0x1d0 [ 47.039644][ T5957] skb_release_data+0x560/0x730 [ 47.041263][ T5957] sk_skb_reason_drop+0x129/0x1a0 [ 47.042861][ T5957] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 47.045150][ T5957] ? kernel_text_address+0x8d/0x100 [ 47.047431][ T5957] ? hlock_class+0x4e/0x130 [ 47.049421][ T5957] ? __lock_acquire+0x163e/0x3ce0 [ 47.051096][ T5957] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 47.054151][ T5957] ? hlock_class+0x4e/0x130 [ 47.055585][ T5957] ? __lock_acquire+0xbdd/0x3ce0 [ 47.057140][ T5957] ? __pfx___lock_acquire+0x10/0x10 [ 47.058453][ T5957] __netif_receive_skb_list_core+0x357/0x950 [ 47.059973][ T5957] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 47.061899][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 47.063482][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 47.065210][ T5957] ? lock_acquire+0x2f/0xb0 [ 47.066407][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 47.068468][ T5957] netif_receive_skb_list_internal+0x753/0xdb0 [ 47.070351][ T5957] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 47.072126][ T5957] ? __pfx_eth_type_trans+0x10/0x10 [ 47.073798][ T5957] ? __build_skb_around+0x278/0x3b0 [ 47.075511][ T5957] netif_receive_skb_list+0x4f/0x4a0 [ 47.076964][ T5957] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 47.078508][ T5957] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 47.080217][ T5957] ? bpf_test_timer_continue+0x150/0x3d0 [ 47.081647][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 47.083005][ T5957] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 47.084477][ T5957] ? try_to_wake_up+0x154/0x14f0 [ 47.085750][ T5957] ? __pfx_try_to_wake_up+0x10/0x10 [ 47.087109][ T5957] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 47.088616][ T5957] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 47.089979][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 47.091520][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 47.093350][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 47.095372][ T5957] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 47.097337][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 47.099348][ T5957] ? lock_acquire+0x2f/0xb0 [ 47.101132][ T5957] ? __fget_files+0x40/0x3f0 [ 47.102684][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 47.105672][ T5957] ? fput+0x30/0x390 [ 47.107254][ T5957] ? __bpf_prog_get+0xa0/0x290 [ 47.109161][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 47.111075][ T5957] __sys_bpf+0xfc6/0x49a0 [ 47.112291][ T5957] ? find_held_lock+0x2d/0x110 [ 47.113815][ T5957] ? __pfx___sys_bpf+0x10/0x10 [ 47.115477][ T5957] ? __might_fault+0x13b/0x190 [ 47.117191][ T5957] ? __pfx_lock_release+0x10/0x10 [ 47.118795][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 47.120448][ T5957] ? lock_acquire+0x2f/0xb0 [ 47.121918][ T5957] ? __might_fault+0xe3/0x190 [ 47.123495][ T5957] ? xfd_validate_state+0x5d/0x180 [ 47.125119][ T5957] ? rcu_is_watching+0x12/0xc0 [ 47.126407][ T5957] __x64_sys_bpf+0x78/0xc0 [ 47.127785][ T5957] ? lockdep_hardirqs_on+0x7c/0x110 [ 47.129686][ T5957] do_syscall_64+0xcd/0x250 [ 47.131044][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.133259][ T5957] RIP: 0033:0x7f1bf86dbe99 [ 47.134801][ T5957] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 47.140837][ T5957] RSP: 002b:00007f1bf8696228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 47.143534][ T5957] RAX: ffffffffffffffda RBX: 00007f1bf8766328 RCX: 00007f1bf86dbe99 [ 47.146183][ T5957] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 47.148409][ T5957] RBP: 00007f1bf8766320 R08: 00007f1bf86966c0 R09: 00007f1bf86966c0 [ 47.150806][ T5957] R10: 00007f1bf86966c0 R11: 0000000000000246 R12: 00007f1bf8733074 [ 47.153060][ T5957] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe730b5808 [ 47.155220][ T5957] [ 47.156126][ T5957] BUG: Bad page state in process syz-executor687 pfn:35c87 [ 47.157978][ T5957] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x35c87 [ 47.160230][ T5957] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 47.162029][ T5957] raw: 00fff00000000000 dead000000000040 ffff888032d1e000 0000000000000000 [ 47.164395][ T5957] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 47.167168][ T5957] page dumped because: page_pool leak [ 47.168783][ T5957] page_owner tracks the page as allocated [ 47.170281][ T5957] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5957, tgid 5955 (syz-executor687), ts 44479050892, free_ts 44477237540 [ 47.175937][ T5957] post_alloc_hook+0x2d1/0x350 [ 47.177304][ T5957] get_page_from_freelist+0x101e/0x3070 [ 47.179025][ T5957] __alloc_pages_noprof+0x223/0x25a0 [ 47.180870][ T5957] alloc_pages_bulk_noprof+0x77c/0x1110 [ 47.182578][ T5957] __page_pool_alloc_pages_slow+0x18f/0x770 [ 47.184438][ T5957] page_pool_alloc_netmem+0xc4/0x160 [ 47.186174][ T5957] page_pool_alloc_pages+0x1a/0x60 [ 47.188228][ T5957] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 47.190188][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 47.191735][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 47.193247][ T5957] __sys_bpf+0xfc6/0x49a0 [ 47.194618][ T5957] __x64_sys_bpf+0x78/0xc0 [ 47.195796][ T5957] do_syscall_64+0xcd/0x250 [ 47.196961][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.198547][ T5957] page last free pid 5958 tgid 5952 stack trace: [ 47.200211][ T5957] free_unref_page+0x5f4/0xdc0 [ 47.201770][ T5957] __folio_put+0x30d/0x3d0 [ 47.203252][ T5957] put_page+0x21e/0x280 [ 47.204703][ T5957] page_pool_return_page+0x400/0x520 [ 47.206473][ T5957] page_pool_release+0xf4/0x7d0 [ 47.208358][ T5957] page_pool_destroy+0x10a/0x4c0 [ 47.210130][ T5957] bpf_test_run_xdp_live+0x3a1/0x500 [ 47.211828][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 47.213622][ T5957] __sys_bpf+0xfc6/0x49a0 [ 47.215126][ T5957] __x64_sys_bpf+0x78/0xc0 [ 47.216414][ T5957] do_syscall_64+0xcd/0x250 [ 47.217651][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.219483][ T5957] Modules linked in: [ 47.220546][ T5957] CPU: 3 UID: 0 PID: 5957 Comm: syz-executor687 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 47.224161][ T5957] Tainted: [B]=BAD_PAGE [ 47.225335][ T5957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 47.228344][ T5957] Call Trace: [ 47.229426][ T5957] [ 47.230335][ T5957] dump_stack_lvl+0x16c/0x1f0 [ 47.231897][ T5957] bad_page+0xb3/0x1f0 [ 47.233443][ T5957] ? __pfx_bad_page+0x10/0x10 [ 47.235122][ T5957] ? page_bad_reason+0x9d/0x1e0 [ 47.236672][ T5957] free_unref_page+0x657/0xdc0 [ 47.238273][ T5957] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 47.241192][ T5957] ? __phys_addr+0xc6/0x150 [ 47.242770][ T5957] skb_free_head+0xa0/0x1d0 [ 47.244480][ T5957] skb_release_data+0x560/0x730 [ 47.246301][ T5957] sk_skb_reason_drop+0x129/0x1a0 [ 47.248250][ T5957] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 47.250745][ T5957] ? kernel_text_address+0x8d/0x100 [ 47.252422][ T5957] ? hlock_class+0x4e/0x130 [ 47.254071][ T5957] ? __lock_acquire+0x163e/0x3ce0 [ 47.256061][ T5957] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 47.258418][ T5957] ? hlock_class+0x4e/0x130 [ 47.259912][ T5957] ? __lock_acquire+0xbdd/0x3ce0 [ 47.261525][ T5957] ? __pfx___lock_acquire+0x10/0x10 [ 47.263186][ T5957] __netif_receive_skb_list_core+0x357/0x950 [ 47.265161][ T5957] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 47.267261][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 47.268943][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 47.270997][ T5957] ? lock_acquire+0x2f/0xb0 [ 47.272470][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 47.274502][ T5957] netif_receive_skb_list_internal+0x753/0xdb0 [ 47.276496][ T5957] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 47.278612][ T5957] ? __pfx_eth_type_trans+0x10/0x10 [ 47.280289][ T5957] ? __build_skb_around+0x278/0x3b0 [ 47.281956][ T5957] netif_receive_skb_list+0x4f/0x4a0 [ 47.283655][ T5957] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 47.285712][ T5957] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 47.287929][ T5957] ? bpf_test_timer_continue+0x150/0x3d0 [ 47.289809][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 47.291583][ T5957] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 47.293687][ T5957] ? try_to_wake_up+0x154/0x14f0 [ 47.295387][ T5957] ? __pfx_try_to_wake_up+0x10/0x10 [ 47.297157][ T5957] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 47.299224][ T5957] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 47.300952][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 47.302701][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 47.304529][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 47.306259][ T5957] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 47.308250][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 47.309976][ T5957] ? lock_acquire+0x2f/0xb0 [ 47.311459][ T5957] ? __fget_files+0x40/0x3f0 [ 47.312930][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 47.314852][ T5957] ? fput+0x30/0x390 [ 47.316182][ T5957] ? __bpf_prog_get+0xa0/0x290 [ 47.317801][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 47.319840][ T5957] __sys_bpf+0xfc6/0x49a0 [ 47.321460][ T5957] ? find_held_lock+0x2d/0x110 [ 47.323443][ T5957] ? __pfx___sys_bpf+0x10/0x10 [ 47.325192][ T5957] ? __might_fault+0x13b/0x190 [ 47.326918][ T5957] ? __pfx_lock_release+0x10/0x10 [ 47.328519][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 47.330513][ T5957] ? lock_acquire+0x2f/0xb0 [ 47.332352][ T5957] ? __might_fault+0xe3/0x190 [ 47.333898][ T5957] ? xfd_validate_state+0x5d/0x180 [ 47.335490][ T5957] ? rcu_is_watching+0x12/0xc0 [ 47.336889][ T5957] __x64_sys_bpf+0x78/0xc0 [ 47.338345][ T5957] ? lockdep_hardirqs_on+0x7c/0x110 [ 47.340040][ T5957] do_syscall_64+0xcd/0x250 [ 47.341578][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.343494][ T5957] RIP: 0033:0x7f1bf86dbe99 [ 47.344958][ T5957] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 47.351189][ T5957] RSP: 002b:00007f1bf8696228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 47.353951][ T5957] RAX: ffffffffffffffda RBX: 00007f1bf8766328 RCX: 00007f1bf86dbe99 [ 47.356706][ T5957] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 47.359438][ T5957] RBP: 00007f1bf8766320 R08: 00007f1bf86966c0 R09: 00007f1bf86966c0 [ 47.362369][ T5957] R10: 00007f1bf86966c0 R11: 0000000000000246 R12: 00007f1bf8733074 [ 47.365535][ T5957] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe730b5808 [ 47.368612][ T5957] [ 47.369996][ T5957] BUG: Bad page state in process syz-executor687 pfn:23056 [ 47.372891][ T5957] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x23056 [ 47.375662][ T5957] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 47.377916][ T5957] raw: 00fff00000000000 dead000000000040 ffff888032d1e000 0000000000000000 [ 47.380690][ T5957] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 47.383360][ T5957] page dumped because: page_pool leak [ 47.385013][ T5957] page_owner tracks the page as allocated [ 47.387000][ T5957] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5957, tgid 5955 (syz-executor687), ts 44479043419, free_ts 44477244574 [ 47.393325][ T5957] post_alloc_hook+0x2d1/0x350 [ 47.394971][ T5957] get_page_from_freelist+0x101e/0x3070 [ 47.396795][ T5957] __alloc_pages_noprof+0x223/0x25a0 [ 47.398483][ T5957] alloc_pages_bulk_noprof+0x77c/0x1110 [ 47.400351][ T5957] __page_pool_alloc_pages_slow+0x18f/0x770 [ 47.402246][ T5957] page_pool_alloc_netmem+0xc4/0x160 [ 47.403914][ T5957] page_pool_alloc_pages+0x1a/0x60 [ 47.405514][ T5957] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 47.407779][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 47.409487][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 47.411582][ T5957] __sys_bpf+0xfc6/0x49a0 [ 47.413366][ T5957] __x64_sys_bpf+0x78/0xc0 [ 47.414787][ T5957] do_syscall_64+0xcd/0x250 [ 47.416254][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.418349][ T5957] page last free pid 5958 tgid 5952 stack trace: [ 47.420692][ T5957] free_unref_page+0x5f4/0xdc0 [ 47.422677][ T5957] __folio_put+0x30d/0x3d0 [ 47.424529][ T5957] put_page+0x21e/0x280 [ 47.425996][ T5957] page_pool_return_page+0x400/0x520 [ 47.427713][ T5957] page_pool_release+0xf4/0x7d0 [ 47.429300][ T5957] page_pool_destroy+0x10a/0x4c0 [ 47.431016][ T5957] bpf_test_run_xdp_live+0x3a1/0x500 [ 47.432908][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 47.434786][ T5957] __sys_bpf+0xfc6/0x49a0 [ 47.436232][ T5957] __x64_sys_bpf+0x78/0xc0 [ 47.437697][ T5957] do_syscall_64+0xcd/0x250 [ 47.439201][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.441177][ T5957] Modules linked in: [ 47.442448][ T5957] CPU: 3 UID: 0 PID: 5957 Comm: syz-executor687 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 47.447134][ T5957] Tainted: [B]=BAD_PAGE [ 47.448368][ T5957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 47.451789][ T5957] Call Trace: [ 47.452851][ T5957] [ 47.453833][ T5957] dump_stack_lvl+0x16c/0x1f0 [ 47.455333][ T5957] bad_page+0xb3/0x1f0 [ 47.456660][ T5957] ? __pfx_bad_page+0x10/0x10 [ 47.458163][ T5957] ? page_bad_reason+0x9d/0x1e0 [ 47.459739][ T5957] free_unref_page+0x657/0xdc0 [ 47.461260][ T5957] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 47.463179][ T5957] ? __phys_addr+0xc6/0x150 [ 47.464838][ T5957] skb_free_head+0xa0/0x1d0 [ 47.466440][ T5957] skb_release_data+0x560/0x730 [ 47.468023][ T5957] sk_skb_reason_drop+0x129/0x1a0 [ 47.469741][ T5957] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 47.471890][ T5957] ? kernel_text_address+0x8d/0x100 [ 47.473535][ T5957] ? hlock_class+0x4e/0x130 [ 47.475109][ T5957] ? __lock_acquire+0x163e/0x3ce0 [ 47.476763][ T5957] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 47.479118][ T5957] ? hlock_class+0x4e/0x130 [ 47.480577][ T5957] ? __lock_acquire+0xbdd/0x3ce0 [ 47.482177][ T5957] ? __pfx___lock_acquire+0x10/0x10 [ 47.483837][ T5957] __netif_receive_skb_list_core+0x357/0x950 [ 47.485789][ T5957] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 47.487869][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 47.489540][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 47.491573][ T5957] ? lock_acquire+0x2f/0xb0 [ 47.493035][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 47.495065][ T5957] netif_receive_skb_list_internal+0x753/0xdb0 [ 47.497011][ T5957] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 47.499139][ T5957] ? __pfx_eth_type_trans+0x10/0x10 [ 47.500823][ T5957] ? __build_skb_around+0x278/0x3b0 [ 47.502472][ T5957] netif_receive_skb_list+0x4f/0x4a0 [ 47.504168][ T5957] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 47.506179][ T5957] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 47.508341][ T5957] ? bpf_test_timer_continue+0x150/0x3d0 [ 47.510157][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 47.511854][ T5957] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 47.513758][ T5957] ? try_to_wake_up+0x154/0x14f0 [ 47.515357][ T5957] ? __pfx_try_to_wake_up+0x10/0x10 [ 47.517005][ T5957] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 47.518899][ T5957] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 47.520575][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 47.522285][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 47.523993][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 47.525926][ T5957] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 47.527970][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 47.529844][ T5957] ? lock_acquire+0x2f/0xb0 [ 47.531331][ T5957] ? __fget_files+0x40/0x3f0 [ 47.532815][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 47.534857][ T5957] ? fput+0x30/0x390 [ 47.536214][ T5957] ? __bpf_prog_get+0xa0/0x290 [ 47.537754][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 47.539612][ T5957] __sys_bpf+0xfc6/0x49a0 [ 47.541006][ T5957] ? find_held_lock+0x2d/0x110 [ 47.542555][ T5957] ? __pfx___sys_bpf+0x10/0x10 [ 47.544106][ T5957] ? __might_fault+0x13b/0x190 [ 47.545632][ T5957] ? __pfx_lock_release+0x10/0x10 [ 47.547254][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 47.549178][ T5957] ? lock_acquire+0x2f/0xb0 [ 47.551165][ T5957] ? __might_fault+0xe3/0x190 [ 47.552892][ T5957] ? xfd_validate_state+0x5d/0x180 [ 47.554542][ T5957] ? rcu_is_watching+0x12/0xc0 [ 47.556106][ T5957] __x64_sys_bpf+0x78/0xc0 [ 47.557542][ T5957] ? lockdep_hardirqs_on+0x7c/0x110 [ 47.559304][ T5957] do_syscall_64+0xcd/0x250 [ 47.560791][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.562692][ T5957] RIP: 0033:0x7f1bf86dbe99 [ 47.564121][ T5957] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 47.570629][ T5957] RSP: 002b:00007f1bf8696228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 47.573895][ T5957] RAX: ffffffffffffffda RBX: 00007f1bf8766328 RCX: 00007f1bf86dbe99 [ 47.576455][ T5957] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 47.578922][ T5957] RBP: 00007f1bf8766320 R08: 00007f1bf86966c0 R09: 00007f1bf86966c0 [ 47.581470][ T5957] R10: 00007f1bf86966c0 R11: 0000000000000246 R12: 00007f1bf8733074 [ 47.583978][ T5957] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe730b5808 [ 47.586527][ T5957] [ 47.587662][ T5957] BUG: Bad page state in process syz-executor687 pfn:35947 [ 47.589994][ T5957] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x35947 [ 47.592981][ T5957] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 47.595263][ T5957] raw: 00fff00000000000 dead000000000040 ffff888032d1e000 0000000000000000 [ 47.598014][ T5957] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 47.600783][ T5957] page dumped because: page_pool leak [ 47.602506][ T5957] page_owner tracks the page as allocated [ 47.604671][ T5957] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5957, tgid 5955 (syz-executor687), ts 44479035619, free_ts 44477251696 [ 47.610880][ T5957] post_alloc_hook+0x2d1/0x350 [ 47.612536][ T5957] get_page_from_freelist+0x101e/0x3070 [ 47.614318][ T5957] __alloc_pages_noprof+0x223/0x25a0 [ 47.616119][ T5957] alloc_pages_bulk_noprof+0x77c/0x1110 [ 47.617910][ T5957] __page_pool_alloc_pages_slow+0x18f/0x770 [ 47.619839][ T5957] page_pool_alloc_netmem+0xc4/0x160 [ 47.621588][ T5957] page_pool_alloc_pages+0x1a/0x60 [ 47.623241][ T5957] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 47.625203][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 47.626914][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 47.628608][ T5957] __sys_bpf+0xfc6/0x49a0 [ 47.630077][ T5957] __x64_sys_bpf+0x78/0xc0 [ 47.631537][ T5957] do_syscall_64+0xcd/0x250 [ 47.633144][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.635235][ T5957] page last free pid 5958 tgid 5952 stack trace: [ 47.637389][ T5957] free_unref_page+0x5f4/0xdc0 [ 47.638996][ T5957] __folio_put+0x30d/0x3d0 [ 47.640522][ T5957] put_page+0x21e/0x280 [ 47.641867][ T5957] page_pool_return_page+0x400/0x520 [ 47.643580][ T5957] page_pool_release+0xf4/0x7d0 [ 47.645149][ T5957] page_pool_destroy+0x10a/0x4c0 [ 47.646732][ T5957] bpf_test_run_xdp_live+0x3a1/0x500 [ 47.648422][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 47.650232][ T5957] __sys_bpf+0xfc6/0x49a0 [ 47.651692][ T5957] __x64_sys_bpf+0x78/0xc0 [ 47.653161][ T5957] do_syscall_64+0xcd/0x250 [ 47.654702][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.656681][ T5957] Modules linked in: [ 47.658236][ T5957] CPU: 3 UID: 0 PID: 5957 Comm: syz-executor687 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 47.662467][ T5957] Tainted: [B]=BAD_PAGE [ 47.663834][ T5957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 47.667261][ T5957] Call Trace: [ 47.668354][ T5957] [ 47.669310][ T5957] dump_stack_lvl+0x16c/0x1f0 [ 47.670854][ T5957] bad_page+0xb3/0x1f0 [ 47.672434][ T5957] ? __pfx_bad_page+0x10/0x10 [ 47.674007][ T5957] ? page_bad_reason+0x9d/0x1e0 [ 47.675620][ T5957] free_unref_page+0x657/0xdc0 [ 47.677351][ T5957] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 47.679313][ T5957] ? __phys_addr+0xc6/0x150 [ 47.680808][ T5957] skb_free_head+0xa0/0x1d0 [ 47.682289][ T5957] skb_release_data+0x560/0x730 [ 47.683899][ T5957] sk_skb_reason_drop+0x129/0x1a0 [ 47.685498][ T5957] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 47.688244][ T5957] ? kernel_text_address+0x8d/0x100 [ 47.690137][ T5957] ? hlock_class+0x4e/0x130 [ 47.691787][ T5957] ? __lock_acquire+0x163e/0x3ce0 [ 47.693648][ T5957] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 47.696520][ T5957] ? hlock_class+0x4e/0x130 [ 47.698184][ T5957] ? __lock_acquire+0xbdd/0x3ce0 [ 47.699782][ T5957] ? __pfx___lock_acquire+0x10/0x10 [ 47.701458][ T5957] __netif_receive_skb_list_core+0x357/0x950 [ 47.703408][ T5957] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 47.705450][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 47.707117][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 47.709185][ T5957] ? lock_acquire+0x2f/0xb0 [ 47.710467][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 47.712644][ T5957] netif_receive_skb_list_internal+0x753/0xdb0 [ 47.714852][ T5957] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 47.717167][ T5957] ? __pfx_eth_type_trans+0x10/0x10 [ 47.718904][ T5957] ? __build_skb_around+0x278/0x3b0 [ 47.720665][ T5957] netif_receive_skb_list+0x4f/0x4a0 [ 47.722447][ T5957] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 47.724495][ T5957] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 47.726700][ T5957] ? bpf_test_timer_continue+0x150/0x3d0 [ 47.728985][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 47.730988][ T5957] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 47.732908][ T5957] ? try_to_wake_up+0x154/0x14f0 [ 47.734603][ T5957] ? __pfx_try_to_wake_up+0x10/0x10 [ 47.736328][ T5957] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 47.738266][ T5957] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 47.740046][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 47.741923][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 47.743829][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 47.745726][ T5957] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 47.747904][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 47.749914][ T5957] ? lock_acquire+0x2f/0xb0 [ 47.751512][ T5957] ? __fget_files+0x40/0x3f0 [ 47.753054][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 47.754908][ T5957] ? fput+0x30/0x390 [ 47.756185][ T5957] ? __bpf_prog_get+0xa0/0x290 [ 47.757744][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 47.759642][ T5957] __sys_bpf+0xfc6/0x49a0 [ 47.761002][ T5957] ? find_held_lock+0x2d/0x110 [ 47.762531][ T5957] ? __pfx___sys_bpf+0x10/0x10 [ 47.764064][ T5957] ? __might_fault+0x13b/0x190 [ 47.765697][ T5957] ? __pfx_lock_release+0x10/0x10 [ 47.767343][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 47.769162][ T5957] ? lock_acquire+0x2f/0xb0 [ 47.770674][ T5957] ? __might_fault+0xe3/0x190 [ 47.772900][ T5957] ? xfd_validate_state+0x5d/0x180 [ 47.774623][ T5957] ? rcu_is_watching+0x12/0xc0 [ 47.776208][ T5957] __x64_sys_bpf+0x78/0xc0 [ 47.777687][ T5957] ? lockdep_hardirqs_on+0x7c/0x110 [ 47.779383][ T5957] do_syscall_64+0xcd/0x250 [ 47.780898][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.782964][ T5957] RIP: 0033:0x7f1bf86dbe99 [ 47.784470][ T5957] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 47.790465][ T5957] RSP: 002b:00007f1bf8696228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 47.793112][ T5957] RAX: ffffffffffffffda RBX: 00007f1bf8766328 RCX: 00007f1bf86dbe99 [ 47.795612][ T5957] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 47.798083][ T5957] RBP: 00007f1bf8766320 R08: 00007f1bf86966c0 R09: 00007f1bf86966c0 [ 47.800653][ T5957] R10: 00007f1bf86966c0 R11: 0000000000000246 R12: 00007f1bf8733074 [ 47.803226][ T5957] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe730b5808 [ 47.806068][ T5957] [ 47.807395][ T5957] BUG: Bad page state in process syz-executor687 pfn:3479a [ 47.810637][ T5957] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3479a [ 47.814092][ T5957] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 47.816559][ T5957] raw: 00fff00000000000 dead000000000040 ffff888032d1e000 0000000000000000 [ 47.819303][ T5957] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 47.822077][ T5957] page dumped because: page_pool leak [ 47.824161][ T5957] page_owner tracks the page as allocated [ 47.826363][ T5957] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5957, tgid 5955 (syz-executor687), ts 44479026113, free_ts 44477259405 [ 47.833437][ T5957] post_alloc_hook+0x2d1/0x350 [ 47.835085][ T5957] get_page_from_freelist+0x101e/0x3070 [ 47.836871][ T5957] __alloc_pages_noprof+0x223/0x25a0 [ 47.838525][ T5957] alloc_pages_bulk_noprof+0x77c/0x1110 [ 47.840367][ T5957] __page_pool_alloc_pages_slow+0x18f/0x770 [ 47.842282][ T5957] page_pool_alloc_netmem+0xc4/0x160 [ 47.844010][ T5957] page_pool_alloc_pages+0x1a/0x60 [ 47.845718][ T5957] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 47.847873][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 47.849770][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 47.851736][ T5957] __sys_bpf+0xfc6/0x49a0 [ 47.853194][ T5957] __x64_sys_bpf+0x78/0xc0 [ 47.854650][ T5957] do_syscall_64+0xcd/0x250 [ 47.856450][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.858289][ T5957] page last free pid 5958 tgid 5952 stack trace: [ 47.860333][ T5957] free_unref_page+0x5f4/0xdc0 [ 47.861843][ T5957] __folio_put+0x30d/0x3d0 [ 47.863329][ T5957] put_page+0x21e/0x280 [ 47.864632][ T5957] page_pool_return_page+0x400/0x520 [ 47.866303][ T5957] page_pool_release+0xf4/0x7d0 [ 47.867875][ T5957] page_pool_destroy+0x10a/0x4c0 [ 47.869509][ T5957] bpf_test_run_xdp_live+0x3a1/0x500 [ 47.871247][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 47.873151][ T5957] __sys_bpf+0xfc6/0x49a0 [ 47.874896][ T5957] __x64_sys_bpf+0x78/0xc0 [ 47.876312][ T5957] do_syscall_64+0xcd/0x250 [ 47.877663][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.879668][ T5957] Modules linked in: [ 47.881159][ T5957] CPU: 3 UID: 0 PID: 5957 Comm: syz-executor687 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 47.885617][ T5957] Tainted: [B]=BAD_PAGE [ 47.887401][ T5957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 47.890847][ T5957] Call Trace: [ 47.891920][ T5957] [ 47.892903][ T5957] dump_stack_lvl+0x16c/0x1f0 [ 47.894419][ T5957] bad_page+0xb3/0x1f0 [ 47.895851][ T5957] ? __pfx_bad_page+0x10/0x10 [ 47.897372][ T5957] ? page_bad_reason+0x9d/0x1e0 [ 47.898948][ T5957] free_unref_page+0x657/0xdc0 [ 47.900497][ T5957] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 47.902430][ T5957] ? __phys_addr+0xc6/0x150 [ 47.903883][ T5957] skb_free_head+0xa0/0x1d0 [ 47.905390][ T5957] skb_release_data+0x560/0x730 [ 47.907135][ T5957] sk_skb_reason_drop+0x129/0x1a0 [ 47.909225][ T5957] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 47.911942][ T5957] ? kernel_text_address+0x8d/0x100 [ 47.913988][ T5957] ? hlock_class+0x4e/0x130 [ 47.915764][ T5957] ? __lock_acquire+0x163e/0x3ce0 [ 47.917439][ T5957] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 47.919731][ T5957] ? hlock_class+0x4e/0x130 [ 47.921349][ T5957] ? __lock_acquire+0xbdd/0x3ce0 [ 47.922986][ T5957] ? __pfx___lock_acquire+0x10/0x10 [ 47.924948][ T5957] __netif_receive_skb_list_core+0x357/0x950 [ 47.927109][ T5957] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 47.929559][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 47.931287][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 47.933583][ T5957] ? lock_acquire+0x2f/0xb0 [ 47.935264][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 47.937572][ T5957] netif_receive_skb_list_internal+0x753/0xdb0 [ 47.939586][ T5957] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 47.941741][ T5957] ? __pfx_eth_type_trans+0x10/0x10 [ 47.943458][ T5957] ? __build_skb_around+0x278/0x3b0 [ 47.945609][ T5957] netif_receive_skb_list+0x4f/0x4a0 [ 47.947684][ T5957] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 47.950179][ T5957] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 47.952968][ T5957] ? bpf_test_timer_continue+0x150/0x3d0 [ 47.955102][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 47.956990][ T5957] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 47.959009][ T5957] ? try_to_wake_up+0x154/0x14f0 [ 47.960600][ T5957] ? __pfx_try_to_wake_up+0x10/0x10 [ 47.962268][ T5957] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 47.964261][ T5957] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 47.966168][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 47.968045][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 47.969784][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 47.971822][ T5957] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 47.974050][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 47.975801][ T5957] ? lock_acquire+0x2f/0xb0 [ 47.977254][ T5957] ? __fget_files+0x40/0x3f0 [ 47.978824][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 47.980938][ T5957] ? fput+0x30/0x390 [ 47.982231][ T5957] ? __bpf_prog_get+0xa0/0x290 [ 47.984101][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 47.986298][ T5957] __sys_bpf+0xfc6/0x49a0 [ 47.988181][ T5957] ? find_held_lock+0x2d/0x110 [ 47.990131][ T5957] ? __pfx___sys_bpf+0x10/0x10 [ 47.991851][ T5957] ? __might_fault+0x13b/0x190 [ 47.993495][ T5957] ? __pfx_lock_release+0x10/0x10 [ 47.995200][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 47.996874][ T5957] ? lock_acquire+0x2f/0xb0 [ 47.998535][ T5957] ? __might_fault+0xe3/0x190 [ 48.000233][ T5957] ? xfd_validate_state+0x5d/0x180 [ 48.001898][ T5957] ? rcu_is_watching+0x12/0xc0 [ 48.003438][ T5957] __x64_sys_bpf+0x78/0xc0 [ 48.004687][ T5957] ? lockdep_hardirqs_on+0x7c/0x110 [ 48.006348][ T5957] do_syscall_64+0xcd/0x250 [ 48.007464][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.009049][ T5957] RIP: 0033:0x7f1bf86dbe99 [ 48.010074][ T5957] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 48.016312][ T5957] RSP: 002b:00007f1bf8696228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 48.018946][ T5957] RAX: ffffffffffffffda RBX: 00007f1bf8766328 RCX: 00007f1bf86dbe99 [ 48.021395][ T5957] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 48.024044][ T5957] RBP: 00007f1bf8766320 R08: 00007f1bf86966c0 R09: 00007f1bf86966c0 [ 48.027085][ T5957] R10: 00007f1bf86966c0 R11: 0000000000000246 R12: 00007f1bf8733074 [ 48.030016][ T5957] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe730b5808 [ 48.032912][ T5957] [ 48.034106][ T5957] BUG: Bad page state in process syz-executor687 pfn:2df84 [ 48.036521][ T5957] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2df84 [ 48.039303][ T5957] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 48.041614][ T5957] raw: 00fff00000000000 dead000000000040 ffff888032d1e000 0000000000000000 [ 48.044461][ T5957] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 48.047283][ T5957] page dumped because: page_pool leak [ 48.049076][ T5957] page_owner tracks the page as allocated [ 48.051018][ T5957] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5957, tgid 5955 (syz-executor687), ts 44478996986, free_ts 44477265768 [ 48.056925][ T5957] post_alloc_hook+0x2d1/0x350 [ 48.058604][ T5957] get_page_from_freelist+0x101e/0x3070 [ 48.060757][ T5957] __alloc_pages_noprof+0x223/0x25a0 [ 48.062751][ T5957] alloc_pages_bulk_noprof+0x77c/0x1110 [ 48.064825][ T5957] __page_pool_alloc_pages_slow+0x18f/0x770 [ 48.066971][ T5957] page_pool_alloc_netmem+0xc4/0x160 [ 48.068733][ T5957] page_pool_alloc_pages+0x1a/0x60 [ 48.070552][ T5957] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 48.072817][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 48.074787][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 48.076537][ T5957] __sys_bpf+0xfc6/0x49a0 [ 48.077945][ T5957] __x64_sys_bpf+0x78/0xc0 [ 48.079386][ T5957] do_syscall_64+0xcd/0x250 [ 48.080932][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.082870][ T5957] page last free pid 5958 tgid 5952 stack trace: [ 48.084996][ T5957] free_unref_page+0x5f4/0xdc0 [ 48.086603][ T5957] __folio_put+0x30d/0x3d0 [ 48.088144][ T5957] put_page+0x21e/0x280 [ 48.089641][ T5957] page_pool_return_page+0x400/0x520 [ 48.091705][ T5957] page_pool_release+0xf4/0x7d0 [ 48.093582][ T5957] page_pool_destroy+0x10a/0x4c0 [ 48.095496][ T5957] bpf_test_run_xdp_live+0x3a1/0x500 [ 48.097543][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 48.099574][ T5957] __sys_bpf+0xfc6/0x49a0 [ 48.101039][ T5957] __x64_sys_bpf+0x78/0xc0 [ 48.102492][ T5957] do_syscall_64+0xcd/0x250 [ 48.104106][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.106093][ T5957] Modules linked in: [ 48.107402][ T5957] CPU: 3 UID: 0 PID: 5957 Comm: syz-executor687 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 48.111562][ T5957] Tainted: [B]=BAD_PAGE [ 48.112931][ T5957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 48.116308][ T5957] Call Trace: [ 48.117403][ T5957] [ 48.118372][ T5957] dump_stack_lvl+0x16c/0x1f0 [ 48.119927][ T5957] bad_page+0xb3/0x1f0 [ 48.121279][ T5957] ? __pfx_bad_page+0x10/0x10 [ 48.122912][ T5957] ? page_bad_reason+0x9d/0x1e0 [ 48.124657][ T5957] free_unref_page+0x657/0xdc0 [ 48.126390][ T5957] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 48.128703][ T5957] ? __phys_addr+0xc6/0x150 [ 48.130449][ T5957] skb_free_head+0xa0/0x1d0 [ 48.132483][ T5957] skb_release_data+0x560/0x730 [ 48.134164][ T5957] sk_skb_reason_drop+0x129/0x1a0 [ 48.135948][ T5957] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 48.138046][ T5957] ? kernel_text_address+0x8d/0x100 [ 48.139880][ T5957] ? hlock_class+0x4e/0x130 [ 48.141410][ T5957] ? __lock_acquire+0x163e/0x3ce0 [ 48.143310][ T5957] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 48.145668][ T5957] ? hlock_class+0x4e/0x130 [ 48.147193][ T5957] ? __lock_acquire+0xbdd/0x3ce0 [ 48.148785][ T5957] ? __pfx___lock_acquire+0x10/0x10 [ 48.150411][ T5957] __netif_receive_skb_list_core+0x357/0x950 [ 48.153004][ T5957] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 48.155156][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 48.156937][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 48.159196][ T5957] ? lock_acquire+0x2f/0xb0 [ 48.160839][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 48.163139][ T5957] netif_receive_skb_list_internal+0x753/0xdb0 [ 48.165333][ T5957] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 48.167637][ T5957] ? __pfx_eth_type_trans+0x10/0x10 [ 48.169345][ T5957] ? __build_skb_around+0x278/0x3b0 [ 48.171087][ T5957] netif_receive_skb_list+0x4f/0x4a0 [ 48.172855][ T5957] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 48.174891][ T5957] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 48.177069][ T5957] ? bpf_test_timer_continue+0x150/0x3d0 [ 48.178979][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 48.180755][ T5957] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 48.182762][ T5957] ? try_to_wake_up+0x154/0x14f0 [ 48.184563][ T5957] ? __pfx_try_to_wake_up+0x10/0x10 [ 48.186357][ T5957] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 48.188472][ T5957] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 48.190355][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 48.192269][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 48.193997][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 48.195668][ T5957] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 48.197565][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 48.199271][ T5957] ? lock_acquire+0x2f/0xb0 [ 48.200605][ T5957] ? __fget_files+0x40/0x3f0 [ 48.202124][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 48.204060][ T5957] ? fput+0x30/0x390 [ 48.205425][ T5957] ? __bpf_prog_get+0xa0/0x290 [ 48.206560][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 48.208584][ T5957] __sys_bpf+0xfc6/0x49a0 [ 48.210116][ T5957] ? find_held_lock+0x2d/0x110 [ 48.211756][ T5957] ? __pfx___sys_bpf+0x10/0x10 [ 48.213395][ T5957] ? __might_fault+0x13b/0x190 [ 48.214778][ T5957] ? __pfx_lock_release+0x10/0x10 [ 48.216481][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 48.218193][ T5957] ? lock_acquire+0x2f/0xb0 [ 48.219662][ T5957] ? __might_fault+0xe3/0x190 [ 48.221187][ T5957] ? xfd_validate_state+0x5d/0x180 [ 48.222840][ T5957] ? rcu_is_watching+0x12/0xc0 [ 48.224496][ T5957] __x64_sys_bpf+0x78/0xc0 [ 48.225989][ T5957] ? lockdep_hardirqs_on+0x7c/0x110 [ 48.227670][ T5957] do_syscall_64+0xcd/0x250 [ 48.229078][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.230968][ T5957] RIP: 0033:0x7f1bf86dbe99 [ 48.232404][ T5957] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 48.238475][ T5957] RSP: 002b:00007f1bf8696228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 48.241330][ T5957] RAX: ffffffffffffffda RBX: 00007f1bf8766328 RCX: 00007f1bf86dbe99 [ 48.244110][ T5957] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 48.246687][ T5957] RBP: 00007f1bf8766320 R08: 00007f1bf86966c0 R09: 00007f1bf86966c0 [ 48.249238][ T5957] R10: 00007f1bf86966c0 R11: 0000000000000246 R12: 00007f1bf8733074 [ 48.251741][ T5957] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe730b5808 [ 48.254698][ T5957] [ 48.255890][ T5957] BUG: Bad page state in process syz-executor687 pfn:2cab8 [ 48.258438][ T5957] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2cab8 [ 48.261555][ T5957] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 48.264144][ T5957] raw: 00fff00000000000 dead000000000040 ffff888032d1e000 0000000000000000 [ 48.267199][ T5957] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 48.270030][ T5957] page dumped because: page_pool leak [ 48.271798][ T5957] page_owner tracks the page as allocated [ 48.273680][ T5957] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5957, tgid 5955 (syz-executor687), ts 44478989058, free_ts 44477272619 [ 48.279040][ T5957] post_alloc_hook+0x2d1/0x350 [ 48.280658][ T5957] get_page_from_freelist+0x101e/0x3070 [ 48.282483][ T5957] __alloc_pages_noprof+0x223/0x25a0 [ 48.284295][ T5957] alloc_pages_bulk_noprof+0x77c/0x1110 [ 48.286303][ T5957] __page_pool_alloc_pages_slow+0x18f/0x770 [ 48.288524][ T5957] page_pool_alloc_netmem+0xc4/0x160 [ 48.290766][ T5957] page_pool_alloc_pages+0x1a/0x60 [ 48.292903][ T5957] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 48.295030][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 48.296845][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 48.298594][ T5957] __sys_bpf+0xfc6/0x49a0 [ 48.300070][ T5957] __x64_sys_bpf+0x78/0xc0 [ 48.301509][ T5957] do_syscall_64+0xcd/0x250 [ 48.303076][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.305034][ T5957] page last free pid 5958 tgid 5952 stack trace: [ 48.307448][ T5957] free_unref_page+0x5f4/0xdc0 [ 48.309357][ T5957] __folio_put+0x30d/0x3d0 [ 48.311275][ T5957] put_page+0x21e/0x280 [ 48.312789][ T5957] page_pool_return_page+0x400/0x520 [ 48.314661][ T5957] page_pool_release+0xf4/0x7d0 [ 48.316449][ T5957] page_pool_destroy+0x10a/0x4c0 [ 48.318284][ T5957] bpf_test_run_xdp_live+0x3a1/0x500 [ 48.320143][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 48.321860][ T5957] __sys_bpf+0xfc6/0x49a0 [ 48.323271][ T5957] __x64_sys_bpf+0x78/0xc0 [ 48.324851][ T5957] do_syscall_64+0xcd/0x250 [ 48.326557][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.328616][ T5957] Modules linked in: [ 48.329889][ T5957] CPU: 3 UID: 0 PID: 5957 Comm: syz-executor687 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 48.334135][ T5957] Tainted: [B]=BAD_PAGE [ 48.335477][ T5957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 48.338909][ T5957] Call Trace: [ 48.340014][ T5957] [ 48.340994][ T5957] dump_stack_lvl+0x16c/0x1f0 [ 48.342536][ T5957] bad_page+0xb3/0x1f0 [ 48.343855][ T5957] ? __pfx_bad_page+0x10/0x10 [ 48.345336][ T5957] ? page_bad_reason+0x9d/0x1e0 [ 48.346931][ T5957] free_unref_page+0x657/0xdc0 [ 48.348457][ T5957] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 48.350448][ T5957] ? __phys_addr+0xc6/0x150 [ 48.352065][ T5957] skb_free_head+0xa0/0x1d0 [ 48.353964][ T5957] skb_release_data+0x560/0x730 [ 48.355678][ T5957] sk_skb_reason_drop+0x129/0x1a0 [ 48.357329][ T5957] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 48.359473][ T5957] ? kernel_text_address+0x8d/0x100 [ 48.361160][ T5957] ? hlock_class+0x4e/0x130 [ 48.362608][ T5957] ? __lock_acquire+0x163e/0x3ce0 [ 48.364237][ T5957] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 48.366508][ T5957] ? hlock_class+0x4e/0x130 [ 48.368101][ T5957] ? __lock_acquire+0xbdd/0x3ce0 [ 48.369697][ T5957] ? __pfx___lock_acquire+0x10/0x10 [ 48.371412][ T5957] __netif_receive_skb_list_core+0x357/0x950 [ 48.373445][ T5957] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 48.375503][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 48.377168][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 48.379163][ T5957] ? lock_acquire+0x2f/0xb0 [ 48.380635][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 48.382640][ T5957] netif_receive_skb_list_internal+0x753/0xdb0 [ 48.384755][ T5957] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 48.387150][ T5957] ? __pfx_eth_type_trans+0x10/0x10 [ 48.389229][ T5957] ? __build_skb_around+0x278/0x3b0 [ 48.391214][ T5957] netif_receive_skb_list+0x4f/0x4a0 [ 48.393536][ T5957] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 48.395838][ T5957] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 48.397919][ T5957] ? bpf_test_timer_continue+0x150/0x3d0 [ 48.399720][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 48.401402][ T5957] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 48.403296][ T5957] ? try_to_wake_up+0x154/0x14f0 [ 48.404900][ T5957] ? __pfx_try_to_wake_up+0x10/0x10 [ 48.406547][ T5957] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 48.408426][ T5957] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 48.410100][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 48.411808][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 48.413486][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 48.415215][ T5957] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 48.417096][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 48.418832][ T5957] ? lock_acquire+0x2f/0xb0 [ 48.420279][ T5957] ? __fget_files+0x40/0x3f0 [ 48.421766][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 48.423974][ T5957] ? fput+0x30/0x390 [ 48.425577][ T5957] ? __bpf_prog_get+0xa0/0x290 [ 48.427417][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 48.429519][ T5957] __sys_bpf+0xfc6/0x49a0 [ 48.430949][ T5957] ? find_held_lock+0x2d/0x110 [ 48.432525][ T5957] ? __pfx___sys_bpf+0x10/0x10 [ 48.434119][ T5957] ? __might_fault+0x13b/0x190 [ 48.435699][ T5957] ? __pfx_lock_release+0x10/0x10 [ 48.437330][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 48.439024][ T5957] ? lock_acquire+0x2f/0xb0 [ 48.440492][ T5957] ? __might_fault+0xe3/0x190 [ 48.441997][ T5957] ? xfd_validate_state+0x5d/0x180 [ 48.443670][ T5957] ? rcu_is_watching+0x12/0xc0 [ 48.445511][ T5957] __x64_sys_bpf+0x78/0xc0 [ 48.447164][ T5957] ? lockdep_hardirqs_on+0x7c/0x110 [ 48.448937][ T5957] do_syscall_64+0xcd/0x250 [ 48.450439][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.452352][ T5957] RIP: 0033:0x7f1bf86dbe99 [ 48.453789][ T5957] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 48.459846][ T5957] RSP: 002b:00007f1bf8696228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 48.462516][ T5957] RAX: ffffffffffffffda RBX: 00007f1bf8766328 RCX: 00007f1bf86dbe99 [ 48.465224][ T5957] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 48.467930][ T5957] RBP: 00007f1bf8766320 R08: 00007f1bf86966c0 R09: 00007f1bf86966c0 [ 48.470558][ T5957] R10: 00007f1bf86966c0 R11: 0000000000000246 R12: 00007f1bf8733074 [ 48.473208][ T5957] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe730b5808 [ 48.475776][ T5957] [ 48.476888][ T5957] BUG: Bad page state in process syz-executor687 pfn:3250c [ 48.479240][ T5957] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803250ce88 pfn:0x3250c [ 48.482480][ T5957] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 48.485583][ T5957] raw: 00fff00000000000 dead000000000040 ffff888032d1e000 0000000000000000 [ 48.488956][ T5957] raw: ffff88803250ce88 0000000000000001 00000000ffffffff 0000000000000000 [ 48.492263][ T5957] page dumped because: page_pool leak [ 48.494267][ T5957] page_owner tracks the page as allocated [ 48.496303][ T5957] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5957, tgid 5955 (syz-executor687), ts 44478980999, free_ts 44477279756 [ 48.502794][ T5957] post_alloc_hook+0x2d1/0x350 [ 48.504433][ T5957] get_page_from_freelist+0x101e/0x3070 [ 48.506265][ T5957] __alloc_pages_noprof+0x223/0x25a0 [ 48.508317][ T5957] alloc_pages_bulk_noprof+0x77c/0x1110 [ 48.510442][ T5957] __page_pool_alloc_pages_slow+0x18f/0x770 [ 48.512743][ T5957] page_pool_alloc_netmem+0xc4/0x160 [ 48.514675][ T5957] page_pool_alloc_pages+0x1a/0x60 [ 48.516479][ T5957] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 48.518477][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 48.520264][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 48.521980][ T5957] __sys_bpf+0xfc6/0x49a0 [ 48.523395][ T5957] __x64_sys_bpf+0x78/0xc0 [ 48.524891][ T5957] do_syscall_64+0xcd/0x250 [ 48.526442][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.529224][ T5957] page last free pid 5958 tgid 5952 stack trace: [ 48.531915][ T5957] free_unref_page+0x5f4/0xdc0 [ 48.533460][ T5957] __folio_put+0x30d/0x3d0 [ 48.535019][ T5957] put_page+0x21e/0x280 [ 48.536366][ T5957] page_pool_return_page+0x400/0x520 [ 48.538064][ T5957] page_pool_release+0xf4/0x7d0 [ 48.539627][ T5957] page_pool_destroy+0x10a/0x4c0 [ 48.541359][ T5957] bpf_test_run_xdp_live+0x3a1/0x500 [ 48.542906][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 48.544603][ T5957] __sys_bpf+0xfc6/0x49a0 [ 48.545988][ T5957] __x64_sys_bpf+0x78/0xc0 [ 48.547452][ T5957] do_syscall_64+0xcd/0x250 [ 48.548914][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.551001][ T5957] Modules linked in: [ 48.552272][ T5957] CPU: 3 UID: 0 PID: 5957 Comm: syz-executor687 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 48.556329][ T5957] Tainted: [B]=BAD_PAGE [ 48.557671][ T5957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 48.561248][ T5957] Call Trace: [ 48.562362][ T5957] [ 48.563409][ T5957] dump_stack_lvl+0x16c/0x1f0 [ 48.565183][ T5957] bad_page+0xb3/0x1f0 [ 48.566634][ T5957] ? __pfx_bad_page+0x10/0x10 [ 48.568311][ T5957] ? page_bad_reason+0x9d/0x1e0 [ 48.570207][ T5957] free_unref_page+0x657/0xdc0 [ 48.571901][ T5957] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 48.574105][ T5957] ? __phys_addr+0xc6/0x150 [ 48.575573][ T5957] skb_free_head+0xa0/0x1d0 [ 48.577175][ T5957] skb_release_data+0x560/0x730 [ 48.579200][ T5957] sk_skb_reason_drop+0x129/0x1a0 [ 48.580908][ T5957] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 48.583236][ T5957] ? kernel_text_address+0x8d/0x100 [ 48.584928][ T5957] ? hlock_class+0x4e/0x130 [ 48.586400][ T5957] ? __lock_acquire+0x163e/0x3ce0 [ 48.588039][ T5957] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 48.590276][ T5957] ? hlock_class+0x4e/0x130 [ 48.591767][ T5957] ? __lock_acquire+0xbdd/0x3ce0 [ 48.593375][ T5957] ? __pfx___lock_acquire+0x10/0x10 [ 48.595048][ T5957] __netif_receive_skb_list_core+0x357/0x950 [ 48.596943][ T5957] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 48.599004][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 48.600655][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 48.602743][ T5957] ? lock_acquire+0x2f/0xb0 [ 48.604225][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 48.606287][ T5957] netif_receive_skb_list_internal+0x753/0xdb0 [ 48.608425][ T5957] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 48.610698][ T5957] ? __pfx_eth_type_trans+0x10/0x10 [ 48.612380][ T5957] ? __build_skb_around+0x278/0x3b0 [ 48.614052][ T5957] netif_receive_skb_list+0x4f/0x4a0 [ 48.615753][ T5957] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 48.617734][ T5957] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 48.619847][ T5957] ? bpf_test_timer_continue+0x150/0x3d0 [ 48.621648][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 48.623346][ T5957] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 48.625201][ T5957] ? try_to_wake_up+0x154/0x14f0 [ 48.626787][ T5957] ? __pfx_try_to_wake_up+0x10/0x10 [ 48.628439][ T5957] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 48.630339][ T5957] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 48.632053][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 48.633726][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 48.635409][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 48.637092][ T5957] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 48.638991][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 48.640717][ T5957] ? lock_acquire+0x2f/0xb0 [ 48.642140][ T5957] ? __fget_files+0x40/0x3f0 [ 48.643637][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 48.646309][ T5957] ? fput+0x30/0x390 [ 48.648021][ T5957] ? __bpf_prog_get+0xa0/0x290 [ 48.649571][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 48.651459][ T5957] __sys_bpf+0xfc6/0x49a0 [ 48.653248][ T5957] ? find_held_lock+0x2d/0x110 [ 48.655091][ T5957] ? __pfx___sys_bpf+0x10/0x10 [ 48.656879][ T5957] ? __might_fault+0x13b/0x190 [ 48.658509][ T5957] ? __pfx_lock_release+0x10/0x10 [ 48.660231][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 48.661917][ T5957] ? lock_acquire+0x2f/0xb0 [ 48.663421][ T5957] ? __might_fault+0xe3/0x190 [ 48.664975][ T5957] ? xfd_validate_state+0x5d/0x180 [ 48.666629][ T5957] ? rcu_is_watching+0x12/0xc0 [ 48.668224][ T5957] __x64_sys_bpf+0x78/0xc0 [ 48.669724][ T5957] ? lockdep_hardirqs_on+0x7c/0x110 [ 48.671420][ T5957] do_syscall_64+0xcd/0x250 [ 48.672898][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.674831][ T5957] RIP: 0033:0x7f1bf86dbe99 [ 48.676276][ T5957] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 48.682883][ T5957] RSP: 002b:00007f1bf8696228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 48.685599][ T5957] RAX: ffffffffffffffda RBX: 00007f1bf8766328 RCX: 00007f1bf86dbe99 [ 48.688155][ T5957] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 48.690702][ T5957] RBP: 00007f1bf8766320 R08: 00007f1bf86966c0 R09: 00007f1bf86966c0 [ 48.693225][ T5957] R10: 00007f1bf86966c0 R11: 0000000000000246 R12: 00007f1bf8733074 [ 48.695755][ T5957] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe730b5808 [ 48.698252][ T5957] [ 48.699370][ T5957] BUG: Bad page state in process syz-executor687 pfn:321f3 [ 48.702501][ T5957] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x321f3 [ 48.705766][ T5957] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 48.708059][ T5957] raw: 00fff00000000000 dead000000000040 ffff888032d1e000 0000000000000000 [ 48.710919][ T5957] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 48.713739][ T5957] page dumped because: page_pool leak [ 48.715650][ T5957] page_owner tracks the page as allocated [ 48.717504][ T5957] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5957, tgid 5955 (syz-executor687), ts 44478972283, free_ts 44477287163 [ 48.723088][ T5957] post_alloc_hook+0x2d1/0x350 [ 48.724799][ T5957] get_page_from_freelist+0x101e/0x3070 [ 48.727374][ T5957] __alloc_pages_noprof+0x223/0x25a0 [ 48.729427][ T5957] alloc_pages_bulk_noprof+0x77c/0x1110 [ 48.731915][ T5957] __page_pool_alloc_pages_slow+0x18f/0x770 [ 48.734568][ T5957] page_pool_alloc_netmem+0xc4/0x160 [ 48.736594][ T5957] page_pool_alloc_pages+0x1a/0x60 [ 48.738223][ T5957] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 48.740277][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 48.741967][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 48.743713][ T5957] __sys_bpf+0xfc6/0x49a0 [ 48.745121][ T5957] __x64_sys_bpf+0x78/0xc0 [ 48.746531][ T5957] do_syscall_64+0xcd/0x250 [ 48.747991][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.750023][ T5957] page last free pid 5958 tgid 5952 stack trace: [ 48.752072][ T5957] free_unref_page+0x5f4/0xdc0 [ 48.753624][ T5957] __folio_put+0x30d/0x3d0 [ 48.755240][ T5957] put_page+0x21e/0x280 [ 48.756598][ T5957] page_pool_return_page+0x400/0x520 [ 48.758297][ T5957] page_pool_release+0xf4/0x7d0 [ 48.759872][ T5957] page_pool_destroy+0x10a/0x4c0 [ 48.761531][ T5957] bpf_test_run_xdp_live+0x3a1/0x500 [ 48.763344][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 48.765306][ T5957] __sys_bpf+0xfc6/0x49a0 [ 48.766898][ T5957] __x64_sys_bpf+0x78/0xc0 [ 48.768524][ T5957] do_syscall_64+0xcd/0x250 [ 48.770148][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.772082][ T5957] Modules linked in: [ 48.773359][ T5957] CPU: 3 UID: 0 PID: 5957 Comm: syz-executor687 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 48.777288][ T5957] Tainted: [B]=BAD_PAGE [ 48.778569][ T5957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 48.781850][ T5957] Call Trace: [ 48.782957][ T5957] [ 48.784179][ T5957] dump_stack_lvl+0x16c/0x1f0 [ 48.785907][ T5957] bad_page+0xb3/0x1f0 [ 48.787458][ T5957] ? __pfx_bad_page+0x10/0x10 [ 48.789325][ T5957] ? page_bad_reason+0x9d/0x1e0 [ 48.792160][ T5957] free_unref_page+0x657/0xdc0 [ 48.793791][ T5957] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 48.796114][ T5957] ? __phys_addr+0xc6/0x150 [ 48.797740][ T5957] skb_free_head+0xa0/0x1d0 [ 48.799408][ T5957] skb_release_data+0x560/0x730 [ 48.801028][ T5957] sk_skb_reason_drop+0x129/0x1a0 [ 48.802683][ T5957] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 48.804853][ T5957] ? kernel_text_address+0x8d/0x100 [ 48.806537][ T5957] ? hlock_class+0x4e/0x130 [ 48.808049][ T5957] ? __lock_acquire+0x163e/0x3ce0 [ 48.809703][ T5957] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 48.812170][ T5957] ? hlock_class+0x4e/0x130 [ 48.813787][ T5957] ? __lock_acquire+0xbdd/0x3ce0 [ 48.815519][ T5957] ? __pfx___lock_acquire+0x10/0x10 [ 48.817252][ T5957] __netif_receive_skb_list_core+0x357/0x950 [ 48.819172][ T5957] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 48.821226][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 48.822997][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 48.825008][ T5957] ? lock_acquire+0x2f/0xb0 [ 48.826463][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 48.828456][ T5957] netif_receive_skb_list_internal+0x753/0xdb0 [ 48.830698][ T5957] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 48.833134][ T5957] ? __pfx_eth_type_trans+0x10/0x10 [ 48.834919][ T5957] ? __build_skb_around+0x278/0x3b0 [ 48.836635][ T5957] netif_receive_skb_list+0x4f/0x4a0 [ 48.838382][ T5957] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 48.840533][ T5957] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 48.842656][ T5957] ? bpf_test_timer_continue+0x150/0x3d0 [ 48.844453][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 48.846133][ T5957] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 48.848283][ T5957] ? try_to_wake_up+0x154/0x14f0 [ 48.850097][ T5957] ? __pfx_try_to_wake_up+0x10/0x10 [ 48.852391][ T5957] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 48.854649][ T5957] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 48.856560][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 48.858465][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 48.860456][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 48.862449][ T5957] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 48.864656][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 48.866539][ T5957] ? lock_acquire+0x2f/0xb0 [ 48.868070][ T5957] ? __fget_files+0x40/0x3f0 [ 48.869763][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 48.871702][ T5957] ? fput+0x30/0x390 [ 48.872985][ T5957] ? __bpf_prog_get+0xa0/0x290 [ 48.874598][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 48.876598][ T5957] __sys_bpf+0xfc6/0x49a0 [ 48.877990][ T5957] ? find_held_lock+0x2d/0x110 [ 48.879524][ T5957] ? __pfx___sys_bpf+0x10/0x10 [ 48.881064][ T5957] ? __might_fault+0x13b/0x190 [ 48.882599][ T5957] ? __pfx_lock_release+0x10/0x10 [ 48.884222][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 48.885879][ T5957] ? lock_acquire+0x2f/0xb0 [ 48.887345][ T5957] ? __might_fault+0xe3/0x190 [ 48.888892][ T5957] ? xfd_validate_state+0x5d/0x180 [ 48.890572][ T5957] ? rcu_is_watching+0x12/0xc0 [ 48.892705][ T5957] __x64_sys_bpf+0x78/0xc0 [ 48.894219][ T5957] ? lockdep_hardirqs_on+0x7c/0x110 [ 48.896271][ T5957] do_syscall_64+0xcd/0x250 [ 48.897787][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.899721][ T5957] RIP: 0033:0x7f1bf86dbe99 [ 48.901198][ T5957] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 48.907623][ T5957] RSP: 002b:00007f1bf8696228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 48.910400][ T5957] RAX: ffffffffffffffda RBX: 00007f1bf8766328 RCX: 00007f1bf86dbe99 [ 48.913165][ T5957] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 48.915872][ T5957] RBP: 00007f1bf8766320 R08: 00007f1bf86966c0 R09: 00007f1bf86966c0 [ 48.919055][ T5957] R10: 00007f1bf86966c0 R11: 0000000000000246 R12: 00007f1bf8733074 [ 48.921694][ T5957] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe730b5808 [ 48.924215][ T5957] [ 48.925300][ T5957] BUG: Bad page state in process syz-executor687 pfn:2a23d [ 48.927650][ T5957] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2a23d [ 48.930518][ T5957] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 48.932830][ T5957] raw: 00fff00000000000 dead000000000040 ffff888032d1e000 0000000000000000 [ 48.935572][ T5957] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 48.938224][ T5957] page dumped because: page_pool leak [ 48.939888][ T5957] page_owner tracks the page as allocated [ 48.941928][ T5957] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5957, tgid 5955 (syz-executor687), ts 44478964298, free_ts 44477294471 [ 48.949594][ T5957] post_alloc_hook+0x2d1/0x350 [ 48.952038][ T5957] get_page_from_freelist+0x101e/0x3070 [ 48.954220][ T5957] __alloc_pages_noprof+0x223/0x25a0 [ 48.955937][ T5957] alloc_pages_bulk_noprof+0x77c/0x1110 [ 48.957716][ T5957] __page_pool_alloc_pages_slow+0x18f/0x770 [ 48.959613][ T5957] page_pool_alloc_netmem+0xc4/0x160 [ 48.961393][ T5957] page_pool_alloc_pages+0x1a/0x60 [ 48.963022][ T5957] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 48.964942][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 48.966623][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 48.968344][ T5957] __sys_bpf+0xfc6/0x49a0 [ 48.969740][ T5957] __x64_sys_bpf+0x78/0xc0 [ 48.971271][ T5957] do_syscall_64+0xcd/0x250 [ 48.972757][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.974661][ T5957] page last free pid 5958 tgid 5952 stack trace: [ 48.976627][ T5957] free_unref_page+0x5f4/0xdc0 [ 48.978146][ T5957] __folio_put+0x30d/0x3d0 [ 48.979582][ T5957] put_page+0x21e/0x280 [ 48.980883][ T5957] page_pool_return_page+0x400/0x520 [ 48.982564][ T5957] page_pool_release+0xf4/0x7d0 [ 48.984150][ T5957] page_pool_destroy+0x10a/0x4c0 [ 48.986087][ T5957] bpf_test_run_xdp_live+0x3a1/0x500 [ 48.987985][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 48.990710][ T5957] __sys_bpf+0xfc6/0x49a0 [ 48.992462][ T5957] __x64_sys_bpf+0x78/0xc0 [ 48.994239][ T5957] do_syscall_64+0xcd/0x250 [ 48.995701][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.997567][ T5957] Modules linked in: [ 48.998849][ T5957] CPU: 3 UID: 0 PID: 5957 Comm: syz-executor687 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 49.002844][ T5957] Tainted: [B]=BAD_PAGE [ 49.004176][ T5957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 49.007546][ T5957] Call Trace: [ 49.008627][ T5957] [ 49.009573][ T5957] dump_stack_lvl+0x16c/0x1f0 [ 49.011117][ T5957] bad_page+0xb3/0x1f0 [ 49.012425][ T5957] ? __pfx_bad_page+0x10/0x10 [ 49.013939][ T5957] ? page_bad_reason+0x9d/0x1e0 [ 49.015521][ T5957] free_unref_page+0x657/0xdc0 [ 49.017037][ T5957] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 49.018946][ T5957] ? __phys_addr+0xc6/0x150 [ 49.020370][ T5957] skb_free_head+0xa0/0x1d0 [ 49.021821][ T5957] skb_release_data+0x560/0x730 [ 49.023474][ T5957] sk_skb_reason_drop+0x129/0x1a0 [ 49.025410][ T5957] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 49.028404][ T5957] ? kernel_text_address+0x8d/0x100 [ 49.031020][ T5957] ? hlock_class+0x4e/0x130 [ 49.032493][ T5957] ? __lock_acquire+0x163e/0x3ce0 [ 49.034256][ T5957] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 49.036559][ T5957] ? hlock_class+0x4e/0x130 [ 49.038018][ T5957] ? __lock_acquire+0xbdd/0x3ce0 [ 49.039623][ T5957] ? __pfx___lock_acquire+0x10/0x10 [ 49.041286][ T5957] __netif_receive_skb_list_core+0x357/0x950 [ 49.043193][ T5957] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 49.045274][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 49.046921][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 49.048882][ T5957] ? lock_acquire+0x2f/0xb0 [ 49.050345][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 49.052345][ T5957] netif_receive_skb_list_internal+0x753/0xdb0 [ 49.054292][ T5957] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 49.056412][ T5957] ? __pfx_eth_type_trans+0x10/0x10 [ 49.058110][ T5957] ? __build_skb_around+0x278/0x3b0 [ 49.059812][ T5957] netif_receive_skb_list+0x4f/0x4a0 [ 49.061510][ T5957] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 49.063497][ T5957] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 49.065527][ T5957] ? bpf_test_timer_continue+0x150/0x3d0 [ 49.067352][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 49.069130][ T5957] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 49.071496][ T5957] ? try_to_wake_up+0x154/0x14f0 [ 49.073376][ T5957] ? __pfx_try_to_wake_up+0x10/0x10 [ 49.075283][ T5957] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 49.077426][ T5957] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 49.079545][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 49.081275][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 49.082981][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 49.084529][ T5957] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 49.086374][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 49.088664][ T5957] ? lock_acquire+0x2f/0xb0 [ 49.090221][ T5957] ? __fget_files+0x40/0x3f0 [ 49.092121][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 49.094200][ T5957] ? fput+0x30/0x390 [ 49.095473][ T5957] ? __bpf_prog_get+0xa0/0x290 [ 49.097143][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 49.098995][ T5957] __sys_bpf+0xfc6/0x49a0 [ 49.100362][ T5957] ? find_held_lock+0x2d/0x110 [ 49.101881][ T5957] ? __pfx___sys_bpf+0x10/0x10 [ 49.103427][ T5957] ? __might_fault+0x13b/0x190 [ 49.104995][ T5957] ? __pfx_lock_release+0x10/0x10 [ 49.106568][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 49.108383][ T5957] ? lock_acquire+0x2f/0xb0 [ 49.110214][ T5957] ? __might_fault+0xe3/0x190 [ 49.112086][ T5957] ? xfd_validate_state+0x5d/0x180 [ 49.113859][ T5957] ? rcu_is_watching+0x12/0xc0 [ 49.115557][ T5957] __x64_sys_bpf+0x78/0xc0 [ 49.117161][ T5957] ? lockdep_hardirqs_on+0x7c/0x110 [ 49.119028][ T5957] do_syscall_64+0xcd/0x250 [ 49.120568][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.122670][ T5957] RIP: 0033:0x7f1bf86dbe99 [ 49.124127][ T5957] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 49.130090][ T5957] RSP: 002b:00007f1bf8696228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 49.132713][ T5957] RAX: ffffffffffffffda RBX: 00007f1bf8766328 RCX: 00007f1bf86dbe99 [ 49.135219][ T5957] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 49.137687][ T5957] RBP: 00007f1bf8766320 R08: 00007f1bf86966c0 R09: 00007f1bf86966c0 [ 49.140173][ T5957] R10: 00007f1bf86966c0 R11: 0000000000000246 R12: 00007f1bf8733074 [ 49.142650][ T5957] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe730b5808 [ 49.145126][ T5957] [ 49.146444][ T5957] BUG: Bad page state in process syz-executor687 pfn:2a0c2 [ 49.149057][ T5957] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802a0c2ca8 pfn:0x2a0c2 [ 49.152828][ T5957] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 49.155430][ T5957] raw: 00fff00000000000 dead000000000040 ffff888032d1e000 0000000000000000 [ 49.158408][ T5957] raw: ffff88802a0c2ca8 0000000000000001 00000000ffffffff 0000000000000000 [ 49.161207][ T5957] page dumped because: page_pool leak [ 49.163149][ T5957] page_owner tracks the page as allocated [ 49.165348][ T5957] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5957, tgid 5955 (syz-executor687), ts 44478956169, free_ts 44477301476 [ 49.171147][ T5957] post_alloc_hook+0x2d1/0x350 [ 49.172713][ T5957] get_page_from_freelist+0x101e/0x3070 [ 49.174504][ T5957] __alloc_pages_noprof+0x223/0x25a0 [ 49.176203][ T5957] alloc_pages_bulk_noprof+0x77c/0x1110 [ 49.178464][ T5957] __page_pool_alloc_pages_slow+0x18f/0x770 [ 49.180560][ T5957] page_pool_alloc_netmem+0xc4/0x160 [ 49.182295][ T5957] page_pool_alloc_pages+0x1a/0x60 [ 49.183980][ T5957] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 49.185969][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 49.187714][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 49.189490][ T5957] __sys_bpf+0xfc6/0x49a0 [ 49.191102][ T5957] __x64_sys_bpf+0x78/0xc0 [ 49.192706][ T5957] do_syscall_64+0xcd/0x250 [ 49.194330][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.196549][ T5957] page last free pid 5958 tgid 5952 stack trace: [ 49.198757][ T5957] free_unref_page+0x5f4/0xdc0 [ 49.200369][ T5957] __folio_put+0x30d/0x3d0 [ 49.201788][ T5957] put_page+0x21e/0x280 [ 49.203194][ T5957] page_pool_return_page+0x400/0x520 [ 49.204881][ T5957] page_pool_release+0xf4/0x7d0 [ 49.206454][ T5957] page_pool_destroy+0x10a/0x4c0 [ 49.208040][ T5957] bpf_test_run_xdp_live+0x3a1/0x500 [ 49.209681][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 49.211480][ T5957] __sys_bpf+0xfc6/0x49a0 [ 49.212861][ T5957] __x64_sys_bpf+0x78/0xc0 [ 49.214291][ T5957] do_syscall_64+0xcd/0x250 [ 49.215763][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.217633][ T5957] Modules linked in: [ 49.218888][ T5957] CPU: 3 UID: 0 PID: 5957 Comm: syz-executor687 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 49.222787][ T5957] Tainted: [B]=BAD_PAGE [ 49.224117][ T5957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 49.227608][ T5957] Call Trace: [ 49.228817][ T5957] [ 49.229778][ T5957] dump_stack_lvl+0x16c/0x1f0 [ 49.231392][ T5957] bad_page+0xb3/0x1f0 [ 49.233025][ T5957] ? __pfx_bad_page+0x10/0x10 [ 49.234663][ T5957] ? page_bad_reason+0x9d/0x1e0 [ 49.236244][ T5957] free_unref_page+0x657/0xdc0 [ 49.237769][ T5957] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 49.239736][ T5957] ? __phys_addr+0xc6/0x150 [ 49.241216][ T5957] skb_free_head+0xa0/0x1d0 [ 49.242732][ T5957] skb_release_data+0x560/0x730 [ 49.244394][ T5957] sk_skb_reason_drop+0x129/0x1a0 [ 49.246103][ T5957] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 49.248427][ T5957] ? kernel_text_address+0x8d/0x100 [ 49.250088][ T5957] ? hlock_class+0x4e/0x130 [ 49.251581][ T5957] ? __lock_acquire+0x163e/0x3ce0 [ 49.253179][ T5957] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 49.255582][ T5957] ? hlock_class+0x4e/0x130 [ 49.257042][ T5957] ? __lock_acquire+0xbdd/0x3ce0 [ 49.258599][ T5957] ? __pfx___lock_acquire+0x10/0x10 [ 49.260252][ T5957] __netif_receive_skb_list_core+0x357/0x950 [ 49.262159][ T5957] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 49.264223][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 49.265889][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 49.267960][ T5957] ? lock_acquire+0x2f/0xb0 [ 49.269878][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 49.272076][ T5957] netif_receive_skb_list_internal+0x753/0xdb0 [ 49.274264][ T5957] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 49.277014][ T5957] ? __pfx_eth_type_trans+0x10/0x10 [ 49.278910][ T5957] ? __build_skb_around+0x278/0x3b0 [ 49.280787][ T5957] netif_receive_skb_list+0x4f/0x4a0 [ 49.282543][ T5957] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 49.284676][ T5957] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 49.287456][ T5957] ? bpf_test_timer_continue+0x150/0x3d0 [ 49.289554][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 49.291507][ T5957] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 49.293369][ T5957] ? try_to_wake_up+0x154/0x14f0 [ 49.294994][ T5957] ? __pfx_try_to_wake_up+0x10/0x10 [ 49.296691][ T5957] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 49.298906][ T5957] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 49.300691][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 49.302379][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 49.304069][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 49.305771][ T5957] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 49.307758][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 49.309595][ T5957] ? lock_acquire+0x2f/0xb0 [ 49.311203][ T5957] ? __fget_files+0x40/0x3f0 [ 49.312844][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 49.314923][ T5957] ? fput+0x30/0x390 [ 49.316256][ T5957] ? __bpf_prog_get+0xa0/0x290 [ 49.317797][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 49.319646][ T5957] __sys_bpf+0xfc6/0x49a0 [ 49.321033][ T5957] ? find_held_lock+0x2d/0x110 [ 49.322559][ T5957] ? __pfx___sys_bpf+0x10/0x10 [ 49.324137][ T5957] ? __might_fault+0x13b/0x190 [ 49.325847][ T5957] ? __pfx_lock_release+0x10/0x10 [ 49.328125][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 49.329858][ T5957] ? lock_acquire+0x2f/0xb0 [ 49.331413][ T5957] ? __might_fault+0xe3/0x190 [ 49.332945][ T5957] ? xfd_validate_state+0x5d/0x180 [ 49.334570][ T5957] ? rcu_is_watching+0x12/0xc0 [ 49.336127][ T5957] __x64_sys_bpf+0x78/0xc0 [ 49.337562][ T5957] ? lockdep_hardirqs_on+0x7c/0x110 [ 49.339233][ T5957] do_syscall_64+0xcd/0x250 [ 49.340679][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.342543][ T5957] RIP: 0033:0x7f1bf86dbe99 [ 49.343960][ T5957] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 49.350092][ T5957] RSP: 002b:00007f1bf8696228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 49.353454][ T5957] RAX: ffffffffffffffda RBX: 00007f1bf8766328 RCX: 00007f1bf86dbe99 [ 49.356028][ T5957] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 49.358644][ T5957] RBP: 00007f1bf8766320 R08: 00007f1bf86966c0 R09: 00007f1bf86966c0 [ 49.361346][ T5957] R10: 00007f1bf86966c0 R11: 0000000000000246 R12: 00007f1bf8733074 [ 49.364261][ T5957] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe730b5808 [ 49.366913][ T5957] [ 49.368117][ T5957] BUG: Bad page state in process syz-executor687 pfn:2a23e [ 49.370519][ T5957] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2a23e [ 49.373741][ T5957] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 49.376119][ T5957] raw: 00fff00000000000 dead000000000040 ffff888032d1e000 0000000000000000 [ 49.378834][ T5957] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 49.381528][ T5957] page dumped because: page_pool leak [ 49.383245][ T5957] page_owner tracks the page as allocated [ 49.385045][ T5957] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5957, tgid 5955 (syz-executor687), ts 44478947864, free_ts 44477308430 [ 49.390563][ T5957] post_alloc_hook+0x2d1/0x350 [ 49.392435][ T5957] get_page_from_freelist+0x101e/0x3070 [ 49.394227][ T5957] __alloc_pages_noprof+0x223/0x25a0 [ 49.395946][ T5957] alloc_pages_bulk_noprof+0x77c/0x1110 [ 49.397738][ T5957] __page_pool_alloc_pages_slow+0x18f/0x770 [ 49.399644][ T5957] page_pool_alloc_netmem+0xc4/0x160 [ 49.401397][ T5957] page_pool_alloc_pages+0x1a/0x60 [ 49.403029][ T5957] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 49.404992][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 49.406680][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 49.408415][ T5957] __sys_bpf+0xfc6/0x49a0 [ 49.409806][ T5957] __x64_sys_bpf+0x78/0xc0 [ 49.411333][ T5957] do_syscall_64+0xcd/0x250 [ 49.412782][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.414775][ T5957] page last free pid 5958 tgid 5952 stack trace: [ 49.416799][ T5957] free_unref_page+0x5f4/0xdc0 [ 49.418342][ T5957] __folio_put+0x30d/0x3d0 [ 49.419798][ T5957] put_page+0x21e/0x280 [ 49.421220][ T5957] page_pool_return_page+0x400/0x520 [ 49.422952][ T5957] page_pool_release+0xf4/0x7d0 [ 49.424517][ T5957] page_pool_destroy+0x10a/0x4c0 [ 49.426100][ T5957] bpf_test_run_xdp_live+0x3a1/0x500 [ 49.427779][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 49.429481][ T5957] __sys_bpf+0xfc6/0x49a0 [ 49.430953][ T5957] __x64_sys_bpf+0x78/0xc0 [ 49.432427][ T5957] do_syscall_64+0xcd/0x250 [ 49.433985][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.436134][ T5957] Modules linked in: [ 49.437572][ T5957] CPU: 3 UID: 0 PID: 5957 Comm: syz-executor687 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 49.441816][ T5957] Tainted: [B]=BAD_PAGE [ 49.443143][ T5957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 49.446589][ T5957] Call Trace: [ 49.447666][ T5957] [ 49.448599][ T5957] dump_stack_lvl+0x16c/0x1f0 [ 49.450137][ T5957] bad_page+0xb3/0x1f0 [ 49.451495][ T5957] ? __pfx_bad_page+0x10/0x10 [ 49.453016][ T5957] ? page_bad_reason+0x9d/0x1e0 [ 49.454558][ T5957] free_unref_page+0x657/0xdc0 [ 49.456121][ T5957] ? __phys_addr+0xc6/0x150 [ 49.457571][ T5957] skb_free_head+0xa0/0x1d0 [ 49.459033][ T5957] skb_release_data+0x560/0x730 [ 49.460563][ T5957] sk_skb_reason_drop+0x129/0x1a0 [ 49.462201][ T5957] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 49.464368][ T5957] ? kernel_text_address+0x8d/0x100 [ 49.466038][ T5957] ? hlock_class+0x4e/0x130 [ 49.467511][ T5957] ? __lock_acquire+0x163e/0x3ce0 [ 49.469150][ T5957] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 49.471472][ T5957] ? hlock_class+0x4e/0x130 [ 49.473048][ T5957] ? __lock_acquire+0xbdd/0x3ce0 [ 49.474717][ T5957] ? __pfx___lock_acquire+0x10/0x10 [ 49.476706][ T5957] __netif_receive_skb_list_core+0x357/0x950 [ 49.478873][ T5957] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 49.481182][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 49.482872][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 49.484888][ T5957] ? lock_acquire+0x2f/0xb0 [ 49.486352][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 49.488375][ T5957] netif_receive_skb_list_internal+0x753/0xdb0 [ 49.490380][ T5957] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 49.492717][ T5957] ? __pfx_eth_type_trans+0x10/0x10 [ 49.494370][ T5957] ? __build_skb_around+0x278/0x3b0 [ 49.496074][ T5957] netif_receive_skb_list+0x4f/0x4a0 [ 49.497764][ T5957] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 49.499780][ T5957] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 49.501882][ T5957] ? bpf_test_timer_continue+0x150/0x3d0 [ 49.503781][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 49.505903][ T5957] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 49.508259][ T5957] ? try_to_wake_up+0x154/0x14f0 [ 49.510011][ T5957] ? __pfx_try_to_wake_up+0x10/0x10 [ 49.511815][ T5957] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 49.513838][ T5957] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 49.515747][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 49.517665][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 49.519355][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 49.521049][ T5957] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 49.522949][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 49.524677][ T5957] ? lock_acquire+0x2f/0xb0 [ 49.526139][ T5957] ? __fget_files+0x40/0x3f0 [ 49.527650][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 49.529518][ T5957] ? fput+0x30/0x390 [ 49.530948][ T5957] ? __bpf_prog_get+0xa0/0x290 [ 49.532487][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 49.534758][ T5957] __sys_bpf+0xfc6/0x49a0 [ 49.536187][ T5957] ? find_held_lock+0x2d/0x110 [ 49.537848][ T5957] ? __pfx___sys_bpf+0x10/0x10 [ 49.539514][ T5957] ? __might_fault+0x13b/0x190 [ 49.541151][ T5957] ? __pfx_lock_release+0x10/0x10 [ 49.542854][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 49.544552][ T5957] ? lock_acquire+0x2f/0xb0 [ 49.546022][ T5957] ? __might_fault+0xe3/0x190 [ 49.547538][ T5957] ? xfd_validate_state+0x5d/0x180 [ 49.549237][ T5957] ? rcu_is_watching+0x12/0xc0 [ 49.551059][ T5957] __x64_sys_bpf+0x78/0xc0 [ 49.552911][ T5957] ? lockdep_hardirqs_on+0x7c/0x110 [ 49.554702][ T5957] do_syscall_64+0xcd/0x250 [ 49.556354][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.558463][ T5957] RIP: 0033:0x7f1bf86dbe99 [ 49.560047][ T5957] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 49.566267][ T5957] RSP: 002b:00007f1bf8696228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 49.568920][ T5957] RAX: ffffffffffffffda RBX: 00007f1bf8766328 RCX: 00007f1bf86dbe99 [ 49.571472][ T5957] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 49.574426][ T5957] RBP: 00007f1bf8766320 R08: 00007f1bf86966c0 R09: 00007f1bf86966c0 [ 49.577088][ T5957] R10: 00007f1bf86966c0 R11: 0000000000000246 R12: 00007f1bf8733074 [ 49.579582][ T5957] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe730b5808 [ 49.582115][ T5957] [ 49.583249][ T5957] BUG: Bad page state in process syz-executor687 pfn:318f2 [ 49.585562][ T5957] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880318f26c8 pfn:0x318f2 [ 49.588796][ T5957] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 49.591127][ T5957] raw: 00fff00000000000 dead000000000040 ffff888032d1e000 0000000000000000 [ 49.594434][ T5957] raw: ffff8880318f26c8 0000000000000001 00000000ffffffff 0000000000000000 [ 49.597332][ T5957] page dumped because: page_pool leak [ 49.599292][ T5957] page_owner tracks the page as allocated [ 49.601485][ T5957] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5957, tgid 5955 (syz-executor687), ts 44478939554, free_ts 44477315358 [ 49.607252][ T5957] post_alloc_hook+0x2d1/0x350 [ 49.608793][ T5957] get_page_from_freelist+0x101e/0x3070 [ 49.610627][ T5957] __alloc_pages_noprof+0x223/0x25a0 [ 49.612302][ T5957] alloc_pages_bulk_noprof+0x77c/0x1110 [ 49.614356][ T5957] __page_pool_alloc_pages_slow+0x18f/0x770 [ 49.616352][ T5957] page_pool_alloc_netmem+0xc4/0x160 [ 49.618053][ T5957] page_pool_alloc_pages+0x1a/0x60 [ 49.619710][ T5957] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 49.621782][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 49.623027][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 49.624753][ T5957] __sys_bpf+0xfc6/0x49a0 [ 49.626161][ T5957] __x64_sys_bpf+0x78/0xc0 [ 49.627591][ T5957] do_syscall_64+0xcd/0x250 [ 49.629055][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.631042][ T5957] page last free pid 5958 tgid 5952 stack trace: [ 49.633062][ T5957] free_unref_page+0x5f4/0xdc0 [ 49.634589][ T5957] __folio_put+0x30d/0x3d0 [ 49.636034][ T5957] put_page+0x21e/0x280 [ 49.637363][ T5957] page_pool_return_page+0x400/0x520 [ 49.639030][ T5957] page_pool_release+0xf4/0x7d0 [ 49.640652][ T5957] page_pool_destroy+0x10a/0x4c0 [ 49.642214][ T5957] bpf_test_run_xdp_live+0x3a1/0x500 [ 49.643914][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 49.645699][ T5957] __sys_bpf+0xfc6/0x49a0 [ 49.647312][ T5957] __x64_sys_bpf+0x78/0xc0 [ 49.648843][ T5957] do_syscall_64+0xcd/0x250 [ 49.650379][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.652294][ T5957] Modules linked in: [ 49.653567][ T5957] CPU: 3 UID: 0 PID: 5957 Comm: syz-executor687 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 49.657453][ T5957] Tainted: [B]=BAD_PAGE [ 49.658765][ T5957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 49.662164][ T5957] Call Trace: [ 49.663246][ T5957] [ 49.664334][ T5957] dump_stack_lvl+0x16c/0x1f0 [ 49.666255][ T5957] bad_page+0xb3/0x1f0 [ 49.668074][ T5957] ? __pfx_bad_page+0x10/0x10 [ 49.669885][ T5957] ? page_bad_reason+0x9d/0x1e0 [ 49.671739][ T5957] free_unref_page+0x657/0xdc0 [ 49.674060][ T5957] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 49.676340][ T5957] ? __phys_addr+0xc6/0x150 [ 49.677979][ T5957] skb_free_head+0xa0/0x1d0 [ 49.679453][ T5957] skb_release_data+0x560/0x730 [ 49.681016][ T5957] sk_skb_reason_drop+0x129/0x1a0 [ 49.682614][ T5957] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 49.684868][ T5957] ? kernel_text_address+0x8d/0x100 [ 49.686515][ T5957] ? hlock_class+0x4e/0x130 [ 49.688014][ T5957] ? __lock_acquire+0x163e/0x3ce0 [ 49.689661][ T5957] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 49.691918][ T5957] ? hlock_class+0x4e/0x130 [ 49.693350][ T5957] ? __lock_acquire+0xbdd/0x3ce0 [ 49.694924][ T5957] ? __pfx___lock_acquire+0x10/0x10 [ 49.696555][ T5957] __netif_receive_skb_list_core+0x357/0x950 [ 49.698424][ T5957] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 49.700457][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 49.702085][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 49.704140][ T5957] ? lock_acquire+0x2f/0xb0 [ 49.705565][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 49.707561][ T5957] netif_receive_skb_list_internal+0x753/0xdb0 [ 49.709504][ T5957] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 49.711561][ T5957] ? __pfx_eth_type_trans+0x10/0x10 [ 49.713190][ T5957] ? __build_skb_around+0x278/0x3b0 [ 49.714839][ T5957] netif_receive_skb_list+0x4f/0x4a0 [ 49.716510][ T5957] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 49.718495][ T5957] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 49.720672][ T5957] ? bpf_test_timer_continue+0x150/0x3d0 [ 49.722673][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 49.724608][ T5957] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 49.726719][ T5957] ? try_to_wake_up+0x154/0x14f0 [ 49.728470][ T5957] ? __pfx_try_to_wake_up+0x10/0x10 [ 49.730208][ T5957] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 49.732102][ T5957] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 49.733790][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 49.735454][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 49.737119][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 49.738751][ T5957] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 49.740605][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 49.742262][ T5957] ? lock_acquire+0x2f/0xb0 [ 49.743703][ T5957] ? __fget_files+0x40/0x3f0 [ 49.745164][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 49.747001][ T5957] ? fput+0x30/0x390 [ 49.748243][ T5957] ? __bpf_prog_get+0xa0/0x290 [ 49.749798][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 49.751678][ T5957] __sys_bpf+0xfc6/0x49a0 [ 49.753050][ T5957] ? find_held_lock+0x2d/0x110 [ 49.754552][ T5957] ? __pfx___sys_bpf+0x10/0x10 [ 49.756085][ T5957] ? __might_fault+0x13b/0x190 [ 49.757594][ T5957] ? __pfx_lock_release+0x10/0x10 [ 49.759213][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 49.760885][ T5957] ? lock_acquire+0x2f/0xb0 [ 49.762322][ T5957] ? __might_fault+0xe3/0x190 [ 49.763819][ T5957] ? xfd_validate_state+0x5d/0x180 [ 49.765455][ T5957] ? rcu_is_watching+0x12/0xc0 [ 49.767038][ T5957] __x64_sys_bpf+0x78/0xc0 [ 49.768458][ T5957] ? lockdep_hardirqs_on+0x7c/0x110 [ 49.770099][ T5957] do_syscall_64+0xcd/0x250 [ 49.771559][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.773403][ T5957] RIP: 0033:0x7f1bf86dbe99 [ 49.774831][ T5957] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 49.780760][ T5957] RSP: 002b:00007f1bf8696228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 49.783410][ T5957] RAX: ffffffffffffffda RBX: 00007f1bf8766328 RCX: 00007f1bf86dbe99 [ 49.785867][ T5957] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 49.788399][ T5957] RBP: 00007f1bf8766320 R08: 00007f1bf86966c0 R09: 00007f1bf86966c0 [ 49.790996][ T5957] R10: 00007f1bf86966c0 R11: 0000000000000246 R12: 00007f1bf8733074 [ 49.793503][ T5957] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe730b5808 [ 49.796023][ T5957] [ 49.797184][ T5957] BUG: Bad page state in process syz-executor687 pfn:3235a [ 49.799535][ T5957] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3235a [ 49.802547][ T5957] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 49.804784][ T5957] raw: 00fff00000000000 dead000000000040 ffff888032d1e000 0000000000000000 [ 49.807469][ T5957] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 49.810178][ T5957] page dumped because: page_pool leak [ 49.811903][ T5957] page_owner tracks the page as allocated [ 49.813684][ T5957] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5957, tgid 5955 (syz-executor687), ts 44478916974, free_ts 44477322214 [ 49.819044][ T5957] post_alloc_hook+0x2d1/0x350 [ 49.820635][ T5957] get_page_from_freelist+0x101e/0x3070 [ 49.822403][ T5957] __alloc_pages_noprof+0x223/0x25a0 [ 49.824101][ T5957] alloc_pages_bulk_noprof+0x77c/0x1110 [ 49.825885][ T5957] __page_pool_alloc_pages_slow+0x18f/0x770 [ 49.827744][ T5957] page_pool_alloc_netmem+0xc4/0x160 [ 49.829403][ T5957] page_pool_alloc_pages+0x1a/0x60 [ 49.831130][ T5957] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 49.833103][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 49.834768][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 49.836490][ T5957] __sys_bpf+0xfc6/0x49a0 [ 49.837896][ T5957] __x64_sys_bpf+0x78/0xc0 [ 49.839338][ T5957] do_syscall_64+0xcd/0x250 [ 49.840884][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.842807][ T5957] page last free pid 5958 tgid 5952 stack trace: [ 49.844836][ T5957] free_unref_page+0x5f4/0xdc0 [ 49.846342][ T5957] __folio_put+0x30d/0x3d0 [ 49.847753][ T5957] put_page+0x21e/0x280 [ 49.849062][ T5957] page_pool_return_page+0x400/0x520 [ 49.850828][ T5957] page_pool_release+0xf4/0x7d0 [ 49.852523][ T5957] page_pool_destroy+0x10a/0x4c0 [ 49.854411][ T5957] bpf_test_run_xdp_live+0x3a1/0x500 [ 49.856098][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 49.857832][ T5957] __sys_bpf+0xfc6/0x49a0 [ 49.859261][ T5957] __x64_sys_bpf+0x78/0xc0 [ 49.860824][ T5957] do_syscall_64+0xcd/0x250 [ 49.862344][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.864313][ T5957] Modules linked in: [ 49.865734][ T5957] CPU: 3 UID: 0 PID: 5957 Comm: syz-executor687 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 49.869935][ T5957] Tainted: [B]=BAD_PAGE [ 49.871237][ T5957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 49.874518][ T5957] Call Trace: [ 49.875633][ T5957] [ 49.876605][ T5957] dump_stack_lvl+0x16c/0x1f0 [ 49.878136][ T5957] bad_page+0xb3/0x1f0 [ 49.879462][ T5957] ? __pfx_bad_page+0x10/0x10 [ 49.880963][ T5957] ? page_bad_reason+0x9d/0x1e0 [ 49.882502][ T5957] free_unref_page+0x657/0xdc0 [ 49.884110][ T5957] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 49.886039][ T5957] ? __phys_addr+0xc6/0x150 [ 49.887614][ T5957] skb_free_head+0xa0/0x1d0 [ 49.889183][ T5957] skb_release_data+0x560/0x730 [ 49.890913][ T5957] sk_skb_reason_drop+0x129/0x1a0 [ 49.892732][ T5957] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 49.895025][ T5957] ? kernel_text_address+0x8d/0x100 [ 49.896754][ T5957] ? hlock_class+0x4e/0x130 [ 49.898258][ T5957] ? __lock_acquire+0x163e/0x3ce0 [ 49.899870][ T5957] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 49.902059][ T5957] ? hlock_class+0x4e/0x130 [ 49.903510][ T5957] ? __lock_acquire+0xbdd/0x3ce0 [ 49.905282][ T5957] ? __pfx___lock_acquire+0x10/0x10 [ 49.907138][ T5957] __netif_receive_skb_list_core+0x357/0x950 [ 49.909292][ T5957] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 49.911718][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 49.913351][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 49.915500][ T5957] ? lock_acquire+0x2f/0xb0 [ 49.916937][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 49.918944][ T5957] netif_receive_skb_list_internal+0x753/0xdb0 [ 49.920965][ T5957] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 49.923079][ T5957] ? __pfx_eth_type_trans+0x10/0x10 [ 49.924764][ T5957] ? __build_skb_around+0x278/0x3b0 [ 49.926427][ T5957] netif_receive_skb_list+0x4f/0x4a0 [ 49.928546][ T5957] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 49.930958][ T5957] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 49.933139][ T5957] ? bpf_test_timer_continue+0x150/0x3d0 [ 49.935335][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 49.937187][ T5957] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 49.939226][ T5957] ? try_to_wake_up+0x154/0x14f0 [ 49.940834][ T5957] ? __pfx_try_to_wake_up+0x10/0x10 [ 49.942458][ T5957] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 49.944347][ T5957] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 49.946118][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 49.947803][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 49.949479][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 49.951168][ T5957] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 49.953074][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 49.954764][ T5957] ? lock_acquire+0x2f/0xb0 [ 49.956234][ T5957] ? __fget_files+0x40/0x3f0 [ 49.957717][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 49.959574][ T5957] ? fput+0x30/0x390 [ 49.960831][ T5957] ? __bpf_prog_get+0xa0/0x290 [ 49.962353][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 49.964250][ T5957] __sys_bpf+0xfc6/0x49a0 [ 49.965605][ T5957] ? find_held_lock+0x2d/0x110 [ 49.967442][ T5957] ? __pfx___sys_bpf+0x10/0x10 [ 49.969054][ T5957] ? __might_fault+0x13b/0x190 [ 49.970703][ T5957] ? __pfx_lock_release+0x10/0x10 [ 49.972511][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 49.974524][ T5957] ? lock_acquire+0x2f/0xb0 [ 49.976244][ T5957] ? __might_fault+0xe3/0x190 [ 49.978074][ T5957] ? xfd_validate_state+0x5d/0x180 [ 49.979980][ T5957] ? rcu_is_watching+0x12/0xc0 [ 49.981844][ T5957] __x64_sys_bpf+0x78/0xc0 [ 49.983646][ T5957] ? lockdep_hardirqs_on+0x7c/0x110 [ 49.985438][ T5957] do_syscall_64+0xcd/0x250 [ 49.986924][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.988843][ T5957] RIP: 0033:0x7f1bf86dbe99 [ 49.990378][ T5957] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 49.996461][ T5957] RSP: 002b:00007f1bf8696228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 49.999156][ T5957] RAX: ffffffffffffffda RBX: 00007f1bf8766328 RCX: 00007f1bf86dbe99 [ 50.001667][ T5957] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 50.004209][ T5957] RBP: 00007f1bf8766320 R08: 00007f1bf86966c0 R09: 00007f1bf86966c0 [ 50.007169][ T5957] R10: 00007f1bf86966c0 R11: 0000000000000246 R12: 00007f1bf8733074 [ 50.009696][ T5957] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe730b5808 [ 50.012273][ T5957] [ 50.013526][ T5957] BUG: Bad page state in process syz-executor687 pfn:20dfb [ 50.016567][ T5957] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20dfb [ 50.020073][ T5957] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 50.022329][ T5957] raw: 00fff00000000000 dead000000000040 ffff888032d1e000 0000000000000000 [ 50.025107][ T5957] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 50.027765][ T5957] page dumped because: page_pool leak [ 50.029503][ T5957] page_owner tracks the page as allocated [ 50.031608][ T5957] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5957, tgid 5955 (syz-executor687), ts 44478907357, free_ts 44477329411 [ 50.037246][ T5957] post_alloc_hook+0x2d1/0x350 [ 50.039003][ T5957] get_page_from_freelist+0x101e/0x3070 [ 50.041181][ T5957] __alloc_pages_noprof+0x223/0x25a0 [ 50.043218][ T5957] alloc_pages_bulk_noprof+0x77c/0x1110 [ 50.045336][ T5957] __page_pool_alloc_pages_slow+0x18f/0x770 [ 50.047710][ T5957] page_pool_alloc_netmem+0xc4/0x160 [ 50.049701][ T5957] page_pool_alloc_pages+0x1a/0x60 [ 50.051582][ T5957] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 50.053541][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 50.055207][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 50.057073][ T5957] __sys_bpf+0xfc6/0x49a0 [ 50.058497][ T5957] __x64_sys_bpf+0x78/0xc0 [ 50.060019][ T5957] do_syscall_64+0xcd/0x250 [ 50.061482][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.063410][ T5957] page last free pid 5958 tgid 5952 stack trace: [ 50.065393][ T5957] free_unref_page+0x5f4/0xdc0 [ 50.066918][ T5957] __folio_put+0x30d/0x3d0 [ 50.068342][ T5957] put_page+0x21e/0x280 [ 50.069672][ T5957] page_pool_return_page+0x400/0x520 [ 50.071443][ T5957] page_pool_release+0xf4/0x7d0 [ 50.073003][ T5957] page_pool_destroy+0x10a/0x4c0 [ 50.074618][ T5957] bpf_test_run_xdp_live+0x3a1/0x500 [ 50.076396][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 50.078149][ T5957] __sys_bpf+0xfc6/0x49a0 [ 50.079550][ T5957] __x64_sys_bpf+0x78/0xc0 [ 50.081061][ T5957] do_syscall_64+0xcd/0x250 [ 50.082554][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.084463][ T5957] Modules linked in: [ 50.085717][ T5957] CPU: 3 UID: 0 PID: 5957 Comm: syz-executor687 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 50.089578][ T5957] Tainted: [B]=BAD_PAGE [ 50.091127][ T5957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 50.094829][ T5957] Call Trace: [ 50.095998][ T5957] [ 50.097014][ T5957] dump_stack_lvl+0x16c/0x1f0 [ 50.098604][ T5957] bad_page+0xb3/0x1f0 [ 50.099991][ T5957] ? __pfx_bad_page+0x10/0x10 [ 50.101497][ T5957] ? page_bad_reason+0x9d/0x1e0 [ 50.103075][ T5957] free_unref_page+0x657/0xdc0 [ 50.104569][ T5957] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 50.106669][ T5957] ? __phys_addr+0xc6/0x150 [ 50.108397][ T5957] skb_free_head+0xa0/0x1d0 [ 50.110118][ T5957] skb_release_data+0x560/0x730 [ 50.112124][ T5957] sk_skb_reason_drop+0x129/0x1a0 [ 50.113780][ T5957] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 50.116001][ T5957] ? kernel_text_address+0x8d/0x100 [ 50.117723][ T5957] ? hlock_class+0x4e/0x130 [ 50.119260][ T5957] ? __lock_acquire+0x163e/0x3ce0 [ 50.120906][ T5957] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 50.123222][ T5957] ? hlock_class+0x4e/0x130 [ 50.124714][ T5957] ? __lock_acquire+0xbdd/0x3ce0 [ 50.126308][ T5957] ? __pfx___lock_acquire+0x10/0x10 [ 50.127992][ T5957] __netif_receive_skb_list_core+0x357/0x950 [ 50.129881][ T5957] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 50.131954][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 50.133639][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 50.135775][ T5957] ? lock_acquire+0x2f/0xb0 [ 50.137330][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 50.139780][ T5957] netif_receive_skb_list_internal+0x753/0xdb0 [ 50.142193][ T5957] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 50.144715][ T5957] ? __pfx_eth_type_trans+0x10/0x10 [ 50.146604][ T5957] ? __build_skb_around+0x278/0x3b0 [ 50.148382][ T5957] netif_receive_skb_list+0x4f/0x4a0 [ 50.150385][ T5957] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 50.152862][ T5957] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 50.155124][ T5957] ? bpf_test_timer_continue+0x150/0x3d0 [ 50.156913][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 50.158611][ T5957] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 50.160523][ T5957] ? try_to_wake_up+0x154/0x14f0 [ 50.162119][ T5957] ? __pfx_try_to_wake_up+0x10/0x10 [ 50.163778][ T5957] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 50.165661][ T5957] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 50.167367][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 50.169059][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 50.170758][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 50.172546][ T5957] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 50.174609][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 50.176572][ T5957] ? lock_acquire+0x2f/0xb0 [ 50.178351][ T5957] ? __fget_files+0x40/0x3f0 [ 50.180151][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 50.181998][ T5957] ? fput+0x30/0x390 [ 50.183270][ T5957] ? __bpf_prog_get+0xa0/0x290 [ 50.184807][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 50.186672][ T5957] __sys_bpf+0xfc6/0x49a0 [ 50.188086][ T5957] ? find_held_lock+0x2d/0x110 [ 50.189619][ T5957] ? __pfx___sys_bpf+0x10/0x10 [ 50.191190][ T5957] ? __might_fault+0x13b/0x190 [ 50.192733][ T5957] ? __pfx_lock_release+0x10/0x10 [ 50.194315][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 50.195981][ T5957] ? lock_acquire+0x2f/0xb0 [ 50.197474][ T5957] ? __might_fault+0xe3/0x190 [ 50.198987][ T5957] ? xfd_validate_state+0x5d/0x180 [ 50.200593][ T5957] ? rcu_is_watching+0x12/0xc0 [ 50.202130][ T5957] __x64_sys_bpf+0x78/0xc0 [ 50.203616][ T5957] ? lockdep_hardirqs_on+0x7c/0x110 [ 50.205304][ T5957] do_syscall_64+0xcd/0x250 [ 50.206786][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.208710][ T5957] RIP: 0033:0x7f1bf86dbe99 [ 50.210115][ T5957] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 50.216633][ T5957] RSP: 002b:00007f1bf8696228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 50.219355][ T5957] RAX: ffffffffffffffda RBX: 00007f1bf8766328 RCX: 00007f1bf86dbe99 [ 50.221872][ T5957] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 50.224415][ T5957] RBP: 00007f1bf8766320 R08: 00007f1bf86966c0 R09: 00007f1bf86966c0 [ 50.226899][ T5957] R10: 00007f1bf86966c0 R11: 0000000000000246 R12: 00007f1bf8733074 [ 50.229584][ T5957] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe730b5808 [ 50.232342][ T5957] [ 50.233807][ T5957] BUG: Bad page state in process syz-executor687 pfn:26bcb [ 50.236303][ T5957] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x26bcb [ 50.238492][ T5957] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 50.240616][ T5957] raw: 00fff00000000000 dead000000000040 ffff888032d1e000 0000000000000000 [ 50.243327][ T5957] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 50.246237][ T5957] page dumped because: page_pool leak [ 50.248053][ T5957] page_owner tracks the page as allocated [ 50.250169][ T5957] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5957, tgid 5955 (syz-executor687), ts 44478876962, free_ts 44477336409 [ 50.256089][ T5957] post_alloc_hook+0x2d1/0x350 [ 50.257803][ T5957] get_page_from_freelist+0x101e/0x3070 [ 50.259878][ T5957] __alloc_pages_noprof+0x223/0x25a0 [ 50.261991][ T5957] alloc_pages_bulk_noprof+0x77c/0x1110 [ 50.264113][ T5957] __page_pool_alloc_pages_slow+0x18f/0x770 [ 50.266978][ T5957] page_pool_alloc_netmem+0xc4/0x160 [ 50.268858][ T5957] page_pool_alloc_pages+0x1a/0x60 [ 50.270610][ T5957] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 50.272618][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 50.274318][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 50.276482][ T5957] __sys_bpf+0xfc6/0x49a0 [ 50.277880][ T5957] __x64_sys_bpf+0x78/0xc0 [ 50.279330][ T5957] do_syscall_64+0xcd/0x250 [ 50.280884][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.282815][ T5957] page last free pid 5958 tgid 5952 stack trace: [ 50.284827][ T5957] free_unref_page+0x5f4/0xdc0 [ 50.286369][ T5957] __folio_put+0x30d/0x3d0 [ 50.288052][ T5957] put_page+0x21e/0x280 [ 50.289592][ T5957] page_pool_return_page+0x400/0x520 [ 50.291465][ T5957] page_pool_release+0xf4/0x7d0 [ 50.293156][ T5957] page_pool_destroy+0x10a/0x4c0 [ 50.294853][ T5957] bpf_test_run_xdp_live+0x3a1/0x500 [ 50.296594][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 50.298395][ T5957] __sys_bpf+0xfc6/0x49a0 [ 50.300074][ T5957] __x64_sys_bpf+0x78/0xc0 [ 50.301550][ T5957] do_syscall_64+0xcd/0x250 [ 50.303176][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.305205][ T5957] Modules linked in: [ 50.306503][ T5957] CPU: 3 UID: 0 PID: 5957 Comm: syz-executor687 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 50.310561][ T5957] Tainted: [B]=BAD_PAGE [ 50.312025][ T5957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 50.315690][ T5957] Call Trace: [ 50.316847][ T5957] [ 50.317868][ T5957] dump_stack_lvl+0x16c/0x1f0 [ 50.319514][ T5957] bad_page+0xb3/0x1f0 [ 50.320903][ T5957] ? __pfx_bad_page+0x10/0x10 [ 50.322473][ T5957] ? page_bad_reason+0x9d/0x1e0 [ 50.324240][ T5957] free_unref_page+0x657/0xdc0 [ 50.326322][ T5957] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 50.328414][ T5957] ? __phys_addr+0xc6/0x150 [ 50.329937][ T5957] skb_free_head+0xa0/0x1d0 [ 50.331427][ T5957] skb_release_data+0x560/0x730 [ 50.333134][ T5957] sk_skb_reason_drop+0x129/0x1a0 [ 50.334857][ T5957] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 50.337385][ T5957] ? kernel_text_address+0x8d/0x100 [ 50.339179][ T5957] ? hlock_class+0x4e/0x130 [ 50.340635][ T5957] ? __lock_acquire+0x163e/0x3ce0 [ 50.342243][ T5957] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 50.345591][ T5957] ? hlock_class+0x4e/0x130 [ 50.347104][ T5957] ? __lock_acquire+0xbdd/0x3ce0 [ 50.348774][ T5957] ? __pfx___lock_acquire+0x10/0x10 [ 50.350625][ T5957] __netif_receive_skb_list_core+0x357/0x950 [ 50.352913][ T5957] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 50.355214][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 50.356897][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 50.358989][ T5957] ? lock_acquire+0x2f/0xb0 [ 50.360559][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 50.363246][ T5957] netif_receive_skb_list_internal+0x753/0xdb0 [ 50.365611][ T5957] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 50.368354][ T5957] ? __pfx_eth_type_trans+0x10/0x10 [ 50.370229][ T5957] ? __build_skb_around+0x278/0x3b0 [ 50.372380][ T5957] netif_receive_skb_list+0x4f/0x4a0 [ 50.374349][ T5957] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 50.376419][ T5957] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 50.378696][ T5957] ? bpf_test_timer_continue+0x150/0x3d0 [ 50.380484][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 50.382183][ T5957] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 50.384043][ T5957] ? try_to_wake_up+0x154/0x14f0 [ 50.385840][ T5957] ? __pfx_try_to_wake_up+0x10/0x10 [ 50.387835][ T5957] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 50.390466][ T5957] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 50.392840][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 50.395121][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 50.396965][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 50.398665][ T5957] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 50.400570][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 50.402286][ T5957] ? lock_acquire+0x2f/0xb0 [ 50.403769][ T5957] ? __fget_files+0x40/0x3f0 [ 50.405264][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 50.407175][ T5957] ? fput+0x30/0x390 [ 50.408791][ T5957] ? __bpf_prog_get+0xa0/0x290 [ 50.410983][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 50.413223][ T5957] __sys_bpf+0xfc6/0x49a0 [ 50.414935][ T5957] ? find_held_lock+0x2d/0x110 [ 50.416463][ T5957] ? __pfx___sys_bpf+0x10/0x10 [ 50.417994][ T5957] ? __might_fault+0x13b/0x190 [ 50.419541][ T5957] ? __pfx_lock_release+0x10/0x10 [ 50.421149][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 50.422844][ T5957] ? lock_acquire+0x2f/0xb0 [ 50.424339][ T5957] ? __might_fault+0xe3/0x190 [ 50.425868][ T5957] ? xfd_validate_state+0x5d/0x180 [ 50.427533][ T5957] ? rcu_is_watching+0x12/0xc0 [ 50.429044][ T5957] __x64_sys_bpf+0x78/0xc0 [ 50.430489][ T5957] ? lockdep_hardirqs_on+0x7c/0x110 [ 50.432192][ T5957] do_syscall_64+0xcd/0x250 [ 50.433697][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.435581][ T5957] RIP: 0033:0x7f1bf86dbe99 [ 50.437038][ T5957] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 50.443147][ T5957] RSP: 002b:00007f1bf8696228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 50.445716][ T5957] RAX: ffffffffffffffda RBX: 00007f1bf8766328 RCX: 00007f1bf86dbe99 [ 50.448233][ T5957] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 50.450779][ T5957] RBP: 00007f1bf8766320 R08: 00007f1bf86966c0 R09: 00007f1bf86966c0 [ 50.453638][ T5957] R10: 00007f1bf86966c0 R11: 0000000000000246 R12: 00007f1bf8733074 [ 50.456517][ T5957] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe730b5808 [ 50.459284][ T5957] [ 50.460379][ T5957] BUG: Bad page state in process syz-executor687 pfn:252e5 [ 50.462712][ T5957] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000004 pfn:0x252e5 [ 50.465884][ T5957] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 50.468208][ T5957] raw: 00fff00000000000 dead000000000040 ffff888032d1e000 0000000000000000 [ 50.471031][ T5957] raw: ffff888000000004 0000000000000001 00000000ffffffff 0000000000000000 [ 50.473738][ T5957] page dumped because: page_pool leak [ 50.475468][ T5957] page_owner tracks the page as allocated [ 50.477287][ T5957] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5957, tgid 5955 (syz-executor687), ts 44478828126, free_ts 44477344486 [ 50.482707][ T5957] post_alloc_hook+0x2d1/0x350 [ 50.484254][ T5957] get_page_from_freelist+0x101e/0x3070 [ 50.486040][ T5957] __alloc_pages_noprof+0x223/0x25a0 [ 50.487747][ T5957] alloc_pages_bulk_noprof+0x77c/0x1110 [ 50.490035][ T5957] __page_pool_alloc_pages_slow+0x18f/0x770 [ 50.491983][ T5957] page_pool_alloc_netmem+0xc4/0x160 [ 50.493696][ T5957] page_pool_alloc_pages+0x1a/0x60 [ 50.495466][ T5957] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 50.497482][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 50.499216][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 50.501140][ T5957] __sys_bpf+0xfc6/0x49a0 [ 50.502523][ T5957] __x64_sys_bpf+0x78/0xc0 [ 50.503979][ T5957] do_syscall_64+0xcd/0x250 [ 50.505437][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.507363][ T5957] page last free pid 5958 tgid 5952 stack trace: [ 50.509362][ T5957] free_unref_page+0x5f4/0xdc0 [ 50.511033][ T5957] __folio_put+0x30d/0x3d0 [ 50.512488][ T5957] put_page+0x21e/0x280 [ 50.513816][ T5957] page_pool_return_page+0x400/0x520 [ 50.515513][ T5957] page_pool_release+0xf4/0x7d0 [ 50.516825][ T5957] page_pool_destroy+0x10a/0x4c0 [ 50.518399][ T5957] bpf_test_run_xdp_live+0x3a1/0x500 [ 50.520136][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 50.521841][ T5957] __sys_bpf+0xfc6/0x49a0 [ 50.523224][ T5957] __x64_sys_bpf+0x78/0xc0 [ 50.524666][ T5957] do_syscall_64+0xcd/0x250 [ 50.526125][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.528017][ T5957] Modules linked in: [ 50.529238][ T5957] CPU: 3 UID: 0 PID: 5957 Comm: syz-executor687 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 50.533663][ T5957] Tainted: [B]=BAD_PAGE [ 50.535092][ T5957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 50.538545][ T5957] Call Trace: [ 50.539639][ T5957] [ 50.540598][ T5957] dump_stack_lvl+0x16c/0x1f0 [ 50.542155][ T5957] bad_page+0xb3/0x1f0 [ 50.543473][ T5957] ? __pfx_bad_page+0x10/0x10 [ 50.544984][ T5957] ? page_bad_reason+0x9d/0x1e0 [ 50.546679][ T5957] free_unref_page+0x657/0xdc0 [ 50.548397][ T5957] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 50.550519][ T5957] ? __phys_addr+0xc6/0x150 [ 50.552200][ T5957] skb_free_head+0xa0/0x1d0 [ 50.553704][ T5957] skb_release_data+0x560/0x730 [ 50.555284][ T5957] sk_skb_reason_drop+0x129/0x1a0 [ 50.556867][ T5957] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 50.558972][ T5957] ? kernel_text_address+0x8d/0x100 [ 50.560641][ T5957] ? hlock_class+0x4e/0x130 [ 50.562101][ T5957] ? __lock_acquire+0x163e/0x3ce0 [ 50.563727][ T5957] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 50.566513][ T5957] ? hlock_class+0x4e/0x130 [ 50.568018][ T5957] ? __lock_acquire+0xbdd/0x3ce0 [ 50.569632][ T5957] ? __pfx___lock_acquire+0x10/0x10 [ 50.571346][ T5957] __netif_receive_skb_list_core+0x357/0x950 [ 50.573299][ T5957] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 50.575391][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 50.577185][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 50.579271][ T5957] ? lock_acquire+0x2f/0xb0 [ 50.580879][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 50.582927][ T5957] netif_receive_skb_list_internal+0x753/0xdb0 [ 50.584765][ T5957] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 50.586914][ T5957] ? __pfx_eth_type_trans+0x10/0x10 [ 50.588576][ T5957] ? __build_skb_around+0x278/0x3b0 [ 50.590230][ T5957] netif_receive_skb_list+0x4f/0x4a0 [ 50.591960][ T5957] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 50.593981][ T5957] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 50.596046][ T5957] ? bpf_test_timer_continue+0x150/0x3d0 [ 50.597820][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 50.599534][ T5957] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 50.601389][ T5957] ? try_to_wake_up+0x154/0x14f0 [ 50.602969][ T5957] ? __pfx_try_to_wake_up+0x10/0x10 [ 50.604628][ T5957] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 50.606505][ T5957] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 50.608174][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 50.609828][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 50.611518][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 50.613205][ T5957] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 50.615077][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 50.617103][ T5957] ? lock_acquire+0x2f/0xb0 [ 50.618532][ T5957] ? __fget_files+0x40/0x3f0 [ 50.620047][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 50.621916][ T5957] ? fput+0x30/0x390 [ 50.623192][ T5957] ? __bpf_prog_get+0xa0/0x290 [ 50.624720][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 50.626557][ T5957] __sys_bpf+0xfc6/0x49a0 [ 50.628070][ T5957] ? find_held_lock+0x2d/0x110 [ 50.629921][ T5957] ? __pfx___sys_bpf+0x10/0x10 [ 50.631705][ T5957] ? __might_fault+0x13b/0x190 [ 50.633249][ T5957] ? __pfx_lock_release+0x10/0x10 [ 50.634886][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 50.636557][ T5957] ? lock_acquire+0x2f/0xb0 [ 50.638012][ T5957] ? __might_fault+0xe3/0x190 [ 50.639545][ T5957] ? xfd_validate_state+0x5d/0x180 [ 50.641164][ T5957] ? rcu_is_watching+0x12/0xc0 [ 50.642702][ T5957] __x64_sys_bpf+0x78/0xc0 [ 50.644147][ T5957] ? lockdep_hardirqs_on+0x7c/0x110 [ 50.645800][ T5957] do_syscall_64+0xcd/0x250 [ 50.647280][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.649151][ T5957] RIP: 0033:0x7f1bf86dbe99 [ 50.650587][ T5957] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 50.656580][ T5957] RSP: 002b:00007f1bf8696228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 50.659330][ T5957] RAX: ffffffffffffffda RBX: 00007f1bf8766328 RCX: 00007f1bf86dbe99 [ 50.662147][ T5957] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 50.664653][ T5957] RBP: 00007f1bf8766320 R08: 00007f1bf86966c0 R09: 00007f1bf86966c0 [ 50.667126][ T5957] R10: 00007f1bf86966c0 R11: 0000000000000246 R12: 00007f1bf8733074 [ 50.669568][ T5957] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe730b5808 [ 50.672128][ T5957] [ 50.673308][ T5957] BUG: Bad page state in process syz-executor687 pfn:34443 [ 50.675673][ T5957] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34443 [ 50.678584][ T5957] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 50.680935][ T5957] raw: 00fff00000000000 dead000000000040 ffff888032d1e000 0000000000000000 [ 50.683679][ T5957] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 50.686377][ T5957] page dumped because: page_pool leak [ 50.688068][ T5957] page_owner tracks the page as allocated [ 50.689858][ T5957] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5957, tgid 5955 (syz-executor687), ts 44478818307, free_ts 44477351353 [ 50.695251][ T5957] post_alloc_hook+0x2d1/0x350 [ 50.696782][ T5957] get_page_from_freelist+0x101e/0x3070 [ 50.698537][ T5957] __alloc_pages_noprof+0x223/0x25a0 [ 50.700310][ T5957] alloc_pages_bulk_noprof+0x77c/0x1110 [ 50.702090][ T5957] __page_pool_alloc_pages_slow+0x18f/0x770 [ 50.703996][ T5957] page_pool_alloc_netmem+0xc4/0x160 [ 50.705704][ T5957] page_pool_alloc_pages+0x1a/0x60 [ 50.707327][ T5957] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 50.709283][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 50.711054][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 50.712752][ T5957] __sys_bpf+0xfc6/0x49a0 [ 50.714068][ T5957] __x64_sys_bpf+0x78/0xc0 [ 50.715277][ T5957] do_syscall_64+0xcd/0x250 [ 50.716459][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.717999][ T5957] page last free pid 5958 tgid 5952 stack trace: [ 50.719691][ T5957] free_unref_page+0x5f4/0xdc0 [ 50.721064][ T5957] __folio_put+0x30d/0x3d0 [ 50.722295][ T5957] put_page+0x21e/0x280 [ 50.723437][ T5957] page_pool_return_page+0x400/0x520 [ 50.725461][ T5957] page_pool_release+0xf4/0x7d0 [ 50.726706][ T5957] page_pool_destroy+0x10a/0x4c0 [ 50.727993][ T5957] bpf_test_run_xdp_live+0x3a1/0x500 [ 50.729355][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 50.730821][ T5957] __sys_bpf+0xfc6/0x49a0 [ 50.731933][ T5957] __x64_sys_bpf+0x78/0xc0 [ 50.733223][ T5957] do_syscall_64+0xcd/0x250 [ 50.734438][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.735999][ T5957] Modules linked in: [ 50.737022][ T5957] CPU: 3 UID: 0 PID: 5957 Comm: syz-executor687 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 50.740416][ T5957] Tainted: [B]=BAD_PAGE [ 50.741491][ T5957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 50.744488][ T5957] Call Trace: [ 50.745887][ T5957] [ 50.746644][ T5957] dump_stack_lvl+0x16c/0x1f0 [ 50.747852][ T5957] bad_page+0xb3/0x1f0 [ 50.748906][ T5957] ? __pfx_bad_page+0x10/0x10 [ 50.750125][ T5957] ? page_bad_reason+0x9d/0x1e0 [ 50.751425][ T5957] free_unref_page+0x657/0xdc0 [ 50.752677][ T5957] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 50.754250][ T5957] ? __phys_addr+0xc6/0x150 [ 50.755475][ T5957] skb_free_head+0xa0/0x1d0 [ 50.756690][ T5957] skb_release_data+0x560/0x730 [ 50.757976][ T5957] sk_skb_reason_drop+0x129/0x1a0 [ 50.759340][ T5957] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 50.761046][ T5957] ? kernel_text_address+0x8d/0x100 [ 50.762314][ T5957] ? hlock_class+0x4e/0x130 [ 50.763498][ T5957] ? __lock_acquire+0x163e/0x3ce0 [ 50.764760][ T5957] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 50.766991][ T5957] ? hlock_class+0x4e/0x130 [ 50.768419][ T5957] ? __lock_acquire+0xbdd/0x3ce0 [ 50.770007][ T5957] ? __pfx___lock_acquire+0x10/0x10 [ 50.771676][ T5957] __netif_receive_skb_list_core+0x357/0x950 [ 50.773516][ T5957] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 50.775561][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 50.777169][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 50.779254][ T5957] ? lock_acquire+0x2f/0xb0 [ 50.780720][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 50.782717][ T5957] netif_receive_skb_list_internal+0x753/0xdb0 [ 50.784705][ T5957] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 50.786868][ T5957] ? __pfx_eth_type_trans+0x10/0x10 [ 50.788502][ T5957] ? __build_skb_around+0x278/0x3b0 [ 50.790196][ T5957] netif_receive_skb_list+0x4f/0x4a0 [ 50.791919][ T5957] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 50.794160][ T5957] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 50.796492][ T5957] ? bpf_test_timer_continue+0x150/0x3d0 [ 50.798339][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 50.800040][ T5957] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 50.801891][ T5957] ? try_to_wake_up+0x154/0x14f0 [ 50.803522][ T5957] ? __pfx_try_to_wake_up+0x10/0x10 [ 50.805220][ T5957] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 50.807111][ T5957] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 50.808910][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 50.811130][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 50.813210][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 50.815129][ T5957] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 50.817236][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 50.819271][ T5957] ? lock_acquire+0x2f/0xb0 [ 50.820824][ T5957] ? __fget_files+0x40/0x3f0 [ 50.822313][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 50.824445][ T5957] ? fput+0x30/0x390 [ 50.825677][ T5957] ? __bpf_prog_get+0xa0/0x290 [ 50.827192][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 50.829042][ T5957] __sys_bpf+0xfc6/0x49a0 [ 50.830402][ T5957] ? find_held_lock+0x2d/0x110 [ 50.831961][ T5957] ? __pfx___sys_bpf+0x10/0x10 [ 50.833446][ T5957] ? __might_fault+0x13b/0x190 [ 50.835030][ T5957] ? __pfx_lock_release+0x10/0x10 [ 50.836608][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 50.838255][ T5957] ? lock_acquire+0x2f/0xb0 [ 50.839560][ T5957] ? __might_fault+0xe3/0x190 [ 50.841082][ T5957] ? xfd_validate_state+0x5d/0x180 [ 50.842688][ T5957] ? rcu_is_watching+0x12/0xc0 [ 50.844310][ T5957] __x64_sys_bpf+0x78/0xc0 [ 50.845866][ T5957] ? lockdep_hardirqs_on+0x7c/0x110 [ 50.847703][ T5957] do_syscall_64+0xcd/0x250 [ 50.849256][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.851208][ T5957] RIP: 0033:0x7f1bf86dbe99 [ 50.852707][ T5957] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 50.858717][ T5957] RSP: 002b:00007f1bf8696228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 50.861346][ T5957] RAX: ffffffffffffffda RBX: 00007f1bf8766328 RCX: 00007f1bf86dbe99 [ 50.863854][ T5957] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 50.866307][ T5957] RBP: 00007f1bf8766320 R08: 00007f1bf86966c0 R09: 00007f1bf86966c0 [ 50.868920][ T5957] R10: 00007f1bf86966c0 R11: 0000000000000246 R12: 00007f1bf8733074 [ 50.871623][ T5957] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe730b5808 [ 50.874875][ T5957] [ 50.876089][ T5957] BUG: Bad page state in process syz-executor687 pfn:3458a [ 50.878632][ T5957] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3458a [ 50.881580][ T5957] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 50.884011][ T5957] raw: 00fff00000000000 dead000000000040 ffff888032d1e000 0000000000000000 [ 50.887184][ T5957] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 50.890500][ T5957] page dumped because: page_pool leak [ 50.892468][ T5957] page_owner tracks the page as allocated [ 50.894861][ T5957] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5957, tgid 5955 (syz-executor687), ts 44478794769, free_ts 44477358309 [ 50.901075][ T5957] post_alloc_hook+0x2d1/0x350 [ 50.902825][ T5957] get_page_from_freelist+0x101e/0x3070 [ 50.904780][ T5957] __alloc_pages_noprof+0x223/0x25a0 [ 50.906608][ T5957] alloc_pages_bulk_noprof+0x77c/0x1110 [ 50.908462][ T5957] __page_pool_alloc_pages_slow+0x18f/0x770 [ 50.910499][ T5957] page_pool_alloc_netmem+0xc4/0x160 [ 50.912279][ T5957] page_pool_alloc_pages+0x1a/0x60 [ 50.913979][ T5957] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 50.916031][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 50.917679][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 50.919068][ T5957] __sys_bpf+0xfc6/0x49a0 [ 50.920255][ T5957] __x64_sys_bpf+0x78/0xc0 [ 50.921400][ T5957] do_syscall_64+0xcd/0x250 [ 50.922595][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.924128][ T5957] page last free pid 5958 tgid 5952 stack trace: [ 50.925670][ T5957] free_unref_page+0x5f4/0xdc0 [ 50.926908][ T5957] __folio_put+0x30d/0x3d0 [ 50.928058][ T5957] put_page+0x21e/0x280 [ 50.929115][ T5957] page_pool_return_page+0x400/0x520 [ 50.930515][ T5957] page_pool_release+0xf4/0x7d0 [ 50.931809][ T5957] page_pool_destroy+0x10a/0x4c0 [ 50.933069][ T5957] bpf_test_run_xdp_live+0x3a1/0x500 [ 50.934406][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 50.935789][ T5957] __sys_bpf+0xfc6/0x49a0 [ 50.936892][ T5957] __x64_sys_bpf+0x78/0xc0 [ 50.938053][ T5957] do_syscall_64+0xcd/0x250 [ 50.939242][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.940806][ T5957] Modules linked in: [ 50.941814][ T5957] CPU: 3 UID: 0 PID: 5957 Comm: syz-executor687 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 50.944904][ T5957] Tainted: [B]=BAD_PAGE [ 50.945941][ T5957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 50.948828][ T5957] Call Trace: [ 50.949982][ T5957] [ 50.950971][ T5957] dump_stack_lvl+0x16c/0x1f0 [ 50.952805][ T5957] bad_page+0xb3/0x1f0 [ 50.954209][ T5957] ? __pfx_bad_page+0x10/0x10 [ 50.955903][ T5957] ? page_bad_reason+0x9d/0x1e0 [ 50.957527][ T5957] free_unref_page+0x657/0xdc0 [ 50.959157][ T5957] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 50.961234][ T5957] ? __phys_addr+0xc6/0x150 [ 50.962857][ T5957] skb_free_head+0xa0/0x1d0 [ 50.964449][ T5957] skb_release_data+0x560/0x730 [ 50.966569][ T5957] sk_skb_reason_drop+0x129/0x1a0 [ 50.968332][ T5957] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 50.971059][ T5957] ? kernel_text_address+0x8d/0x100 [ 50.972945][ T5957] ? hlock_class+0x4e/0x130 [ 50.974492][ T5957] ? __lock_acquire+0x163e/0x3ce0 [ 50.976194][ T5957] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 50.978468][ T5957] ? hlock_class+0x4e/0x130 [ 50.979966][ T5957] ? __lock_acquire+0xbdd/0x3ce0 [ 50.981771][ T5957] ? __pfx___lock_acquire+0x10/0x10 [ 50.983610][ T5957] __netif_receive_skb_list_core+0x357/0x950 [ 50.985550][ T5957] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 50.987615][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 50.989311][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 50.991552][ T5957] ? lock_acquire+0x2f/0xb0 [ 50.993290][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 50.995823][ T5957] netif_receive_skb_list_internal+0x753/0xdb0 [ 50.998003][ T5957] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 51.000149][ T5957] ? __pfx_eth_type_trans+0x10/0x10 [ 51.001844][ T5957] ? __build_skb_around+0x278/0x3b0 [ 51.003563][ T5957] netif_receive_skb_list+0x4f/0x4a0 [ 51.005261][ T5957] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 51.007246][ T5957] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 51.009348][ T5957] ? bpf_test_timer_continue+0x150/0x3d0 [ 51.011187][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 51.012878][ T5957] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 51.014760][ T5957] ? try_to_wake_up+0x154/0x14f0 [ 51.016234][ T5957] ? __pfx_try_to_wake_up+0x10/0x10 [ 51.017888][ T5957] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 51.019756][ T5957] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 51.021437][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 51.023165][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 51.024941][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 51.026753][ T5957] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 51.028817][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 51.030816][ T5957] ? lock_acquire+0x2f/0xb0 [ 51.032474][ T5957] ? __fget_files+0x40/0x3f0 [ 51.034090][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 51.035920][ T5957] ? fput+0x30/0x390 [ 51.037185][ T5957] ? __bpf_prog_get+0xa0/0x290 [ 51.038737][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 51.040595][ T5957] __sys_bpf+0xfc6/0x49a0 [ 51.041961][ T5957] ? find_held_lock+0x2d/0x110 [ 51.043487][ T5957] ? __pfx___sys_bpf+0x10/0x10 [ 51.045015][ T5957] ? __might_fault+0x13b/0x190 [ 51.046567][ T5957] ? __pfx_lock_release+0x10/0x10 [ 51.048356][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 51.050119][ T5957] ? lock_acquire+0x2f/0xb0 [ 51.051616][ T5957] ? __might_fault+0xe3/0x190 [ 51.053170][ T5957] ? xfd_validate_state+0x5d/0x180 [ 51.054823][ T5957] ? rcu_is_watching+0x12/0xc0 [ 51.056375][ T5957] __x64_sys_bpf+0x78/0xc0 [ 51.057824][ T5957] ? lockdep_hardirqs_on+0x7c/0x110 [ 51.059522][ T5957] do_syscall_64+0xcd/0x250 [ 51.061090][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.063110][ T5957] RIP: 0033:0x7f1bf86dbe99 [ 51.065420][ T5957] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 51.072397][ T5957] RSP: 002b:00007f1bf8696228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 51.075024][ T5957] RAX: ffffffffffffffda RBX: 00007f1bf8766328 RCX: 00007f1bf86dbe99 [ 51.077628][ T5957] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 51.080140][ T5957] RBP: 00007f1bf8766320 R08: 00007f1bf86966c0 R09: 00007f1bf86966c0 [ 51.082633][ T5957] R10: 00007f1bf86966c0 R11: 0000000000000246 R12: 00007f1bf8733074 [ 51.085116][ T5957] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe730b5808 [ 51.087570][ T5957] [ 51.088693][ T5957] BUG: Bad page state in process syz-executor687 pfn:31fff [ 51.091116][ T5957] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x31fff [ 51.093905][ T5957] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 51.096182][ T5957] raw: 00fff00000000000 dead000000000040 ffff888032d1e000 0000000000000000 [ 51.099123][ T5957] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 51.102162][ T5957] page dumped because: page_pool leak [ 51.104275][ T5957] page_owner tracks the page as allocated [ 51.106468][ T5957] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5957, tgid 5955 (syz-executor687), ts 44478786101, free_ts 44477365282 [ 51.112083][ T5957] post_alloc_hook+0x2d1/0x350 [ 51.113615][ T5957] get_page_from_freelist+0x101e/0x3070 [ 51.115386][ T5957] __alloc_pages_noprof+0x223/0x25a0 [ 51.117097][ T5957] alloc_pages_bulk_noprof+0x77c/0x1110 [ 51.118831][ T5957] __page_pool_alloc_pages_slow+0x18f/0x770 [ 51.120753][ T5957] page_pool_alloc_netmem+0xc4/0x160 [ 51.122408][ T5957] page_pool_alloc_pages+0x1a/0x60 [ 51.124057][ T5957] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 51.126017][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 51.127682][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 51.129394][ T5957] __sys_bpf+0xfc6/0x49a0 [ 51.130893][ T5957] __x64_sys_bpf+0x78/0xc0 [ 51.132343][ T5957] do_syscall_64+0xcd/0x250 [ 51.133846][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.135885][ T5957] page last free pid 5958 tgid 5952 stack trace: [ 51.138016][ T5957] free_unref_page+0x5f4/0xdc0 [ 51.139766][ T5957] __folio_put+0x30d/0x3d0 [ 51.141524][ T5957] put_page+0x21e/0x280 [ 51.143078][ T5957] page_pool_return_page+0x400/0x520 [ 51.145034][ T5957] page_pool_release+0xf4/0x7d0 [ 51.146667][ T5957] page_pool_destroy+0x10a/0x4c0 [ 51.148274][ T5957] bpf_test_run_xdp_live+0x3a1/0x500 [ 51.150492][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 51.152582][ T5957] __sys_bpf+0xfc6/0x49a0 [ 51.153991][ T5957] __x64_sys_bpf+0x78/0xc0 [ 51.155650][ T5957] do_syscall_64+0xcd/0x250 [ 51.157127][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.159056][ T5957] Modules linked in: [ 51.160413][ T5957] CPU: 3 UID: 0 PID: 5957 Comm: syz-executor687 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 51.164289][ T5957] Tainted: [B]=BAD_PAGE [ 51.165707][ T5957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 51.169449][ T5957] Call Trace: [ 51.170522][ T5957] [ 51.171483][ T5957] dump_stack_lvl+0x16c/0x1f0 [ 51.173018][ T5957] bad_page+0xb3/0x1f0 [ 51.174514][ T5957] ? __pfx_bad_page+0x10/0x10 [ 51.176396][ T5957] ? page_bad_reason+0x9d/0x1e0 [ 51.178084][ T5957] free_unref_page+0x657/0xdc0 [ 51.179762][ T5957] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 51.181854][ T5957] ? __phys_addr+0xc6/0x150 [ 51.183375][ T5957] skb_free_head+0xa0/0x1d0 [ 51.184842][ T5957] skb_release_data+0x560/0x730 [ 51.186539][ T5957] sk_skb_reason_drop+0x129/0x1a0 [ 51.188791][ T5957] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 51.190962][ T5957] ? kernel_text_address+0x8d/0x100 [ 51.193254][ T5957] ? hlock_class+0x4e/0x130 [ 51.194810][ T5957] ? __lock_acquire+0x163e/0x3ce0 [ 51.196501][ T5957] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 51.198863][ T5957] ? hlock_class+0x4e/0x130 [ 51.200324][ T5957] ? __lock_acquire+0xbdd/0x3ce0 [ 51.201934][ T5957] ? __pfx___lock_acquire+0x10/0x10 [ 51.203606][ T5957] __netif_receive_skb_list_core+0x357/0x950 [ 51.205509][ T5957] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 51.207552][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 51.209218][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 51.211445][ T5957] ? lock_acquire+0x2f/0xb0 [ 51.212879][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 51.214977][ T5957] netif_receive_skb_list_internal+0x753/0xdb0 [ 51.216915][ T5957] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 51.218996][ T5957] ? __pfx_eth_type_trans+0x10/0x10 [ 51.220659][ T5957] ? __build_skb_around+0x278/0x3b0 [ 51.222320][ T5957] netif_receive_skb_list+0x4f/0x4a0 [ 51.224035][ T5957] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 51.226115][ T5957] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 51.228322][ T5957] ? bpf_test_timer_continue+0x150/0x3d0 [ 51.230188][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 51.231963][ T5957] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 51.233893][ T5957] ? try_to_wake_up+0x154/0x14f0 [ 51.235530][ T5957] ? __pfx_try_to_wake_up+0x10/0x10 [ 51.237220][ T5957] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 51.239157][ T5957] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 51.240886][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 51.242594][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 51.244337][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 51.246160][ T5957] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 51.248085][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 51.249871][ T5957] ? lock_acquire+0x2f/0xb0 [ 51.251543][ T5957] ? __fget_files+0x40/0x3f0 [ 51.253075][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 51.255146][ T5957] ? fput+0x30/0x390 [ 51.256459][ T5957] ? __bpf_prog_get+0xa0/0x290 [ 51.258041][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 51.259980][ T5957] __sys_bpf+0xfc6/0x49a0 [ 51.261406][ T5957] ? find_held_lock+0x2d/0x110 [ 51.263051][ T5957] ? __pfx___sys_bpf+0x10/0x10 [ 51.264632][ T5957] ? __might_fault+0x13b/0x190 [ 51.266252][ T5957] ? __pfx_lock_release+0x10/0x10 [ 51.267924][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 51.269637][ T5957] ? lock_acquire+0x2f/0xb0 [ 51.271269][ T5957] ? __might_fault+0xe3/0x190 [ 51.273083][ T5957] ? xfd_validate_state+0x5d/0x180 [ 51.275126][ T5957] ? rcu_is_watching+0x12/0xc0 [ 51.277046][ T5957] __x64_sys_bpf+0x78/0xc0 [ 51.278843][ T5957] ? lockdep_hardirqs_on+0x7c/0x110 [ 51.280951][ T5957] do_syscall_64+0xcd/0x250 [ 51.282907][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.284862][ T5957] RIP: 0033:0x7f1bf86dbe99 [ 51.286352][ T5957] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 51.292942][ T5957] RSP: 002b:00007f1bf8696228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 51.295321][ T5957] RAX: ffffffffffffffda RBX: 00007f1bf8766328 RCX: 00007f1bf86dbe99 [ 51.297706][ T5957] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 51.300452][ T5957] RBP: 00007f1bf8766320 R08: 00007f1bf86966c0 R09: 00007f1bf86966c0 [ 51.303116][ T5957] R10: 00007f1bf86966c0 R11: 0000000000000246 R12: 00007f1bf8733074 [ 51.305887][ T5957] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe730b5808 [ 51.308686][ T5957] [ 51.309827][ T5957] BUG: Bad page state in process syz-executor687 pfn:275fa [ 51.312545][ T5957] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880275fa800 pfn:0x275fa [ 51.315974][ T5957] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 51.318330][ T5957] raw: 00fff00000000000 dead000000000040 ffff888032d1e000 0000000000000000 [ 51.321137][ T5957] raw: ffff8880275fa800 0000000000000001 00000000ffffffff 0000000000000000 [ 51.324106][ T5957] page dumped because: page_pool leak [ 51.326926][ T5957] page_owner tracks the page as allocated [ 51.329297][ T5957] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5957, tgid 5955 (syz-executor687), ts 44478777276, free_ts 44477372282 [ 51.335284][ T5957] post_alloc_hook+0x2d1/0x350 [ 51.336840][ T5957] get_page_from_freelist+0x101e/0x3070 [ 51.338618][ T5957] __alloc_pages_noprof+0x223/0x25a0 [ 51.340373][ T5957] alloc_pages_bulk_noprof+0x77c/0x1110 [ 51.342145][ T5957] __page_pool_alloc_pages_slow+0x18f/0x770 [ 51.344338][ T5957] page_pool_alloc_netmem+0xc4/0x160 [ 51.346110][ T5957] page_pool_alloc_pages+0x1a/0x60 [ 51.347794][ T5957] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 51.350237][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 51.352312][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 51.354160][ T5957] __sys_bpf+0xfc6/0x49a0 [ 51.355735][ T5957] __x64_sys_bpf+0x78/0xc0 [ 51.357224][ T5957] do_syscall_64+0xcd/0x250 [ 51.358967][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.361227][ T5957] page last free pid 5958 tgid 5952 stack trace: [ 51.363356][ T5957] free_unref_page+0x5f4/0xdc0 [ 51.364790][ T5957] __folio_put+0x30d/0x3d0 [ 51.366372][ T5957] put_page+0x21e/0x280 [ 51.367758][ T5957] page_pool_return_page+0x400/0x520 [ 51.369437][ T5957] page_pool_release+0xf4/0x7d0 [ 51.371067][ T5957] page_pool_destroy+0x10a/0x4c0 [ 51.372622][ T5957] bpf_test_run_xdp_live+0x3a1/0x500 [ 51.374290][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 51.375977][ T5957] __sys_bpf+0xfc6/0x49a0 [ 51.377736][ T5957] __x64_sys_bpf+0x78/0xc0 [ 51.379193][ T5957] do_syscall_64+0xcd/0x250 [ 51.380733][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.382715][ T5957] Modules linked in: [ 51.384085][ T5957] CPU: 3 UID: 0 PID: 5957 Comm: syz-executor687 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 51.388252][ T5957] Tainted: [B]=BAD_PAGE [ 51.389781][ T5957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 51.393816][ T5957] Call Trace: [ 51.394913][ T5957] [ 51.395989][ T5957] dump_stack_lvl+0x16c/0x1f0 [ 51.397476][ T5957] bad_page+0xb3/0x1f0 [ 51.398898][ T5957] ? __pfx_bad_page+0x10/0x10 [ 51.400407][ T5957] ? page_bad_reason+0x9d/0x1e0 [ 51.401928][ T5957] free_unref_page+0x657/0xdc0 [ 51.403455][ T5957] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 51.405347][ T5957] ? __phys_addr+0xc6/0x150 [ 51.406809][ T5957] skb_free_head+0xa0/0x1d0 [ 51.408275][ T5957] skb_release_data+0x560/0x730 [ 51.410070][ T5957] sk_skb_reason_drop+0x129/0x1a0 [ 51.411712][ T5957] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 51.413835][ T5957] ? kernel_text_address+0x8d/0x100 [ 51.415462][ T5957] ? hlock_class+0x4e/0x130 [ 51.416914][ T5957] ? __lock_acquire+0x163e/0x3ce0 [ 51.418444][ T5957] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 51.420567][ T5957] ? hlock_class+0x4e/0x130 [ 51.422064][ T5957] ? __lock_acquire+0xbdd/0x3ce0 [ 51.423686][ T5957] ? __pfx___lock_acquire+0x10/0x10 [ 51.425168][ T5957] __netif_receive_skb_list_core+0x357/0x950 [ 51.427265][ T5957] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 51.429621][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 51.431575][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 51.433491][ T5957] ? lock_acquire+0x2f/0xb0 [ 51.435045][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 51.437032][ T5957] netif_receive_skb_list_internal+0x753/0xdb0 [ 51.438986][ T5957] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 51.441105][ T5957] ? __pfx_eth_type_trans+0x10/0x10 [ 51.442835][ T5957] ? __build_skb_around+0x278/0x3b0 [ 51.444644][ T5957] netif_receive_skb_list+0x4f/0x4a0 [ 51.446397][ T5957] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 51.448455][ T5957] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 51.450734][ T5957] ? bpf_test_timer_continue+0x150/0x3d0 [ 51.452559][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 51.454260][ T5957] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 51.456093][ T5957] ? try_to_wake_up+0x154/0x14f0 [ 51.457686][ T5957] ? __pfx_try_to_wake_up+0x10/0x10 [ 51.459451][ T5957] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 51.461282][ T5957] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 51.462651][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 51.464291][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 51.465737][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 51.467212][ T5957] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 51.468567][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 51.469960][ T5957] ? lock_acquire+0x2f/0xb0 [ 51.471176][ T5957] ? __fget_files+0x40/0x3f0 [ 51.472380][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 51.473877][ T5957] ? fput+0x30/0x390 [ 51.474900][ T5957] ? __bpf_prog_get+0xa0/0x290 [ 51.476442][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 51.477956][ T5957] __sys_bpf+0xfc6/0x49a0 [ 51.479073][ T5957] ? find_held_lock+0x2d/0x110 [ 51.480486][ T5957] ? __pfx___sys_bpf+0x10/0x10 [ 51.481723][ T5957] ? __might_fault+0x13b/0x190 [ 51.483207][ T5957] ? __pfx_lock_release+0x10/0x10 [ 51.484534][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 51.485966][ T5957] ? lock_acquire+0x2f/0xb0 [ 51.487183][ T5957] ? __might_fault+0xe3/0x190 [ 51.488409][ T5957] ? xfd_validate_state+0x5d/0x180 [ 51.489736][ T5957] ? rcu_is_watching+0x12/0xc0 [ 51.491413][ T5957] __x64_sys_bpf+0x78/0xc0 [ 51.492715][ T5957] ? lockdep_hardirqs_on+0x7c/0x110 [ 51.494261][ T5957] do_syscall_64+0xcd/0x250 [ 51.495838][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.497420][ T5957] RIP: 0033:0x7f1bf86dbe99 [ 51.498538][ T5957] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 51.503530][ T5957] RSP: 002b:00007f1bf8696228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 51.505913][ T5957] RAX: ffffffffffffffda RBX: 00007f1bf8766328 RCX: 00007f1bf86dbe99 [ 51.507879][ T5957] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 51.509855][ T5957] RBP: 00007f1bf8766320 R08: 00007f1bf86966c0 R09: 00007f1bf86966c0 [ 51.511892][ T5957] R10: 00007f1bf86966c0 R11: 0000000000000246 R12: 00007f1bf8733074 [ 51.514125][ T5957] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe730b5808 [ 51.516194][ T5957] [ 51.517086][ T5957] BUG: Bad page state in process syz-executor687 pfn:31edc [ 51.520492][ T5957] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888031edde00 pfn:0x31edc [ 51.523973][ T5957] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 51.526001][ T5957] raw: 00fff00000000000 dead000000000040 ffff888032d1e000 0000000000000000 [ 51.528205][ T5957] raw: ffff888031edde00 0000000000000001 00000000ffffffff 0000000000000000 [ 51.531108][ T5957] page dumped because: page_pool leak [ 51.532943][ T5957] page_owner tracks the page as allocated [ 51.534716][ T5957] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5957, tgid 5955 (syz-executor687), ts 44478754166, free_ts 44477379394 [ 51.540870][ T5957] post_alloc_hook+0x2d1/0x350 [ 51.542530][ T5957] get_page_from_freelist+0x101e/0x3070 [ 51.544552][ T5957] __alloc_pages_noprof+0x223/0x25a0 [ 51.546287][ T5957] alloc_pages_bulk_noprof+0x77c/0x1110 [ 51.548173][ T5957] __page_pool_alloc_pages_slow+0x18f/0x770 [ 51.550258][ T5957] page_pool_alloc_netmem+0xc4/0x160 [ 51.552117][ T5957] page_pool_alloc_pages+0x1a/0x60 [ 51.554125][ T5957] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 51.556666][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 51.558586][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 51.560850][ T5957] __sys_bpf+0xfc6/0x49a0 [ 51.562550][ T5957] __x64_sys_bpf+0x78/0xc0 [ 51.564327][ T5957] do_syscall_64+0xcd/0x250 [ 51.565724][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.567243][ T5957] page last free pid 5958 tgid 5952 stack trace: [ 51.568798][ T5957] free_unref_page+0x5f4/0xdc0 [ 51.570082][ T5957] __folio_put+0x30d/0x3d0 [ 51.571233][ T5957] put_page+0x21e/0x280 [ 51.572303][ T5957] page_pool_return_page+0x400/0x520 [ 51.573697][ T5957] page_pool_release+0xf4/0x7d0 [ 51.574950][ T5957] page_pool_destroy+0x10a/0x4c0 [ 51.576376][ T5957] bpf_test_run_xdp_live+0x3a1/0x500 [ 51.577906][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 51.579317][ T5957] __sys_bpf+0xfc6/0x49a0 [ 51.580820][ T5957] __x64_sys_bpf+0x78/0xc0 [ 51.582421][ T5957] do_syscall_64+0xcd/0x250 [ 51.583611][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.585082][ T5957] Modules linked in: [ 51.586067][ T5957] CPU: 3 UID: 0 PID: 5957 Comm: syz-executor687 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 51.589200][ T5957] Tainted: [B]=BAD_PAGE [ 51.590304][ T5957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 51.593080][ T5957] Call Trace: [ 51.593967][ T5957] [ 51.594794][ T5957] dump_stack_lvl+0x16c/0x1f0 [ 51.596288][ T5957] bad_page+0xb3/0x1f0 [ 51.597560][ T5957] ? __pfx_bad_page+0x10/0x10 [ 51.599094][ T5957] ? page_bad_reason+0x9d/0x1e0 [ 51.600439][ T5957] free_unref_page+0x657/0xdc0 [ 51.601775][ T5957] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 51.603500][ T5957] ? __phys_addr+0xc6/0x150 [ 51.604681][ T5957] skb_free_head+0xa0/0x1d0 [ 51.605947][ T5957] skb_release_data+0x560/0x730 [ 51.607243][ T5957] sk_skb_reason_drop+0x129/0x1a0 [ 51.608518][ T5957] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 51.610207][ T5957] ? kernel_text_address+0x8d/0x100 [ 51.611532][ T5957] ? hlock_class+0x4e/0x130 [ 51.612727][ T5957] ? __lock_acquire+0x163e/0x3ce0 [ 51.614027][ T5957] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 51.615856][ T5957] ? hlock_class+0x4e/0x130 [ 51.617055][ T5957] ? __lock_acquire+0xbdd/0x3ce0 [ 51.618429][ T5957] ? __pfx___lock_acquire+0x10/0x10 [ 51.619755][ T5957] __netif_receive_skb_list_core+0x357/0x950 [ 51.621279][ T5957] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 51.623311][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 51.624660][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 51.626228][ T5957] ? lock_acquire+0x2f/0xb0 [ 51.627465][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 51.629097][ T5957] netif_receive_skb_list_internal+0x753/0xdb0 [ 51.630663][ T5957] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 51.632364][ T5957] ? __pfx_eth_type_trans+0x10/0x10 [ 51.633738][ T5957] ? __build_skb_around+0x278/0x3b0 [ 51.635099][ T5957] netif_receive_skb_list+0x4f/0x4a0 [ 51.636480][ T5957] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 51.638888][ T5957] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 51.640619][ T5957] ? bpf_test_timer_continue+0x150/0x3d0 [ 51.642290][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 51.643986][ T5957] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 51.645503][ T5957] ? try_to_wake_up+0x154/0x14f0 [ 51.646794][ T5957] ? __pfx_try_to_wake_up+0x10/0x10 [ 51.648198][ T5957] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 51.649732][ T5957] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 51.651170][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 51.652563][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 51.653934][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 51.655276][ T5957] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 51.656936][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 51.658395][ T5957] ? lock_acquire+0x2f/0xb0 [ 51.659588][ T5957] ? __fget_files+0x40/0x3f0 [ 51.661180][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 51.662774][ T5957] ? fput+0x30/0x390 [ 51.664014][ T5957] ? __bpf_prog_get+0xa0/0x290 [ 51.665495][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 51.667178][ T5957] __sys_bpf+0xfc6/0x49a0 [ 51.668458][ T5957] ? find_held_lock+0x2d/0x110 [ 51.669869][ T5957] ? __pfx___sys_bpf+0x10/0x10 [ 51.671228][ T5957] ? __might_fault+0x13b/0x190 [ 51.672463][ T5957] ? __pfx_lock_release+0x10/0x10 [ 51.673775][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 51.675174][ T5957] ? lock_acquire+0x2f/0xb0 [ 51.676313][ T5957] ? __might_fault+0xe3/0x190 [ 51.677800][ T5957] ? xfd_validate_state+0x5d/0x180 [ 51.679129][ T5957] ? rcu_is_watching+0x12/0xc0 [ 51.680463][ T5957] __x64_sys_bpf+0x78/0xc0 [ 51.681799][ T5957] ? lockdep_hardirqs_on+0x7c/0x110 [ 51.683315][ T5957] do_syscall_64+0xcd/0x250 [ 51.684704][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.686302][ T5957] RIP: 0033:0x7f1bf86dbe99 [ 51.687489][ T5957] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 51.692599][ T5957] RSP: 002b:00007f1bf8696228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 51.695466][ T5957] RAX: ffffffffffffffda RBX: 00007f1bf8766328 RCX: 00007f1bf86dbe99 [ 51.698082][ T5957] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 51.700735][ T5957] RBP: 00007f1bf8766320 R08: 00007f1bf86966c0 R09: 00007f1bf86966c0 [ 51.703440][ T5957] R10: 00007f1bf86966c0 R11: 0000000000000246 R12: 00007f1bf8733074 [ 51.706134][ T5957] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe730b5808 [ 51.708816][ T5957] [ 51.709996][ T5957] BUG: Bad page state in process syz-executor687 pfn:31856 [ 51.712521][ T5957] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x31856 [ 51.715434][ T5957] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 51.717508][ T5957] raw: 00fff00000000000 dead000000000040 ffff888032d1e000 0000000000000000 [ 51.720088][ T5957] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 51.722816][ T5957] page dumped because: page_pool leak [ 51.724272][ T5957] page_owner tracks the page as allocated [ 51.725715][ T5957] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5957, tgid 5955 (syz-executor687), ts 44478744870, free_ts 44477386489 [ 51.730071][ T5957] post_alloc_hook+0x2d1/0x350 [ 51.731302][ T5957] get_page_from_freelist+0x101e/0x3070 [ 51.732674][ T5957] __alloc_pages_noprof+0x223/0x25a0 [ 51.733992][ T5957] alloc_pages_bulk_noprof+0x77c/0x1110 [ 51.735483][ T5957] __page_pool_alloc_pages_slow+0x18f/0x770 [ 51.736989][ T5957] page_pool_alloc_netmem+0xc4/0x160 [ 51.738269][ T5957] page_pool_alloc_pages+0x1a/0x60 [ 51.739629][ T5957] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 51.741216][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 51.742516][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 51.743866][ T5957] __sys_bpf+0xfc6/0x49a0 [ 51.745204][ T5957] __x64_sys_bpf+0x78/0xc0 [ 51.746468][ T5957] do_syscall_64+0xcd/0x250 [ 51.747622][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.749102][ T5957] page last free pid 5958 tgid 5952 stack trace: [ 51.750809][ T5957] free_unref_page+0x5f4/0xdc0 [ 51.752030][ T5957] __folio_put+0x30d/0x3d0 [ 51.753184][ T5957] put_page+0x21e/0x280 [ 51.754238][ T5957] page_pool_return_page+0x400/0x520 [ 51.755651][ T5957] page_pool_release+0xf4/0x7d0 [ 51.756891][ T5957] page_pool_destroy+0x10a/0x4c0 [ 51.758210][ T5957] bpf_test_run_xdp_live+0x3a1/0x500 [ 51.759603][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 51.761092][ T5957] __sys_bpf+0xfc6/0x49a0 [ 51.762197][ T5957] __x64_sys_bpf+0x78/0xc0 [ 51.763574][ T5957] do_syscall_64+0xcd/0x250 [ 51.765015][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.766866][ T5957] Modules linked in: [ 51.767889][ T5957] CPU: 3 UID: 0 PID: 5957 Comm: syz-executor687 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 51.771059][ T5957] Tainted: [B]=BAD_PAGE [ 51.772109][ T5957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 51.774964][ T5957] Call Trace: [ 51.775980][ T5957] [ 51.776858][ T5957] dump_stack_lvl+0x16c/0x1f0 [ 51.778171][ T5957] bad_page+0xb3/0x1f0 [ 51.779206][ T5957] ? __pfx_bad_page+0x10/0x10 [ 51.780385][ T5957] ? page_bad_reason+0x9d/0x1e0 [ 51.781630][ T5957] free_unref_page+0x657/0xdc0 [ 51.783218][ T5957] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 51.784776][ T5957] ? __phys_addr+0xc6/0x150 [ 51.786050][ T5957] skb_free_head+0xa0/0x1d0 [ 51.787559][ T5957] skb_release_data+0x560/0x730 [ 51.788901][ T5957] sk_skb_reason_drop+0x129/0x1a0 [ 51.790282][ T5957] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 51.791999][ T5957] ? kernel_text_address+0x8d/0x100 [ 51.793405][ T5957] ? hlock_class+0x4e/0x130 [ 51.794701][ T5957] ? __lock_acquire+0x163e/0x3ce0 [ 51.796145][ T5957] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 51.797978][ T5957] ? hlock_class+0x4e/0x130 [ 51.799109][ T5957] ? __lock_acquire+0xbdd/0x3ce0 [ 51.800338][ T5957] ? __pfx___lock_acquire+0x10/0x10 [ 51.801720][ T5957] __netif_receive_skb_list_core+0x357/0x950 [ 51.803587][ T5957] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 51.805384][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 51.806710][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 51.808309][ T5957] ? lock_acquire+0x2f/0xb0 [ 51.809438][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 51.811202][ T5957] netif_receive_skb_list_internal+0x753/0xdb0 [ 51.813422][ T5957] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 51.815195][ T5957] ? __pfx_eth_type_trans+0x10/0x10 [ 51.816867][ T5957] ? __build_skb_around+0x278/0x3b0 [ 51.818261][ T5957] netif_receive_skb_list+0x4f/0x4a0 [ 51.819571][ T5957] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 51.821095][ T5957] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 51.822812][ T5957] ? bpf_test_timer_continue+0x150/0x3d0 [ 51.824329][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 51.825769][ T5957] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 51.827313][ T5957] ? try_to_wake_up+0x154/0x14f0 [ 51.828539][ T5957] ? __pfx_try_to_wake_up+0x10/0x10 [ 51.829946][ T5957] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 51.831469][ T5957] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 51.832849][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 51.834335][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 51.835862][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 51.837202][ T5957] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 51.838807][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 51.840153][ T5957] ? lock_acquire+0x2f/0xb0 [ 51.841302][ T5957] ? __fget_files+0x40/0x3f0 [ 51.842487][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 51.844054][ T5957] ? fput+0x30/0x390 [ 51.845040][ T5957] ? __bpf_prog_get+0xa0/0x290 [ 51.846431][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 51.847951][ T5957] __sys_bpf+0xfc6/0x49a0 [ 51.849302][ T5957] ? find_held_lock+0x2d/0x110 [ 51.850496][ T5957] ? __pfx___sys_bpf+0x10/0x10 [ 51.851899][ T5957] ? __might_fault+0x13b/0x190 [ 51.853293][ T5957] ? __pfx_lock_release+0x10/0x10 [ 51.854669][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 51.856182][ T5957] ? lock_acquire+0x2f/0xb0 [ 51.857279][ T5957] ? __might_fault+0xe3/0x190 [ 51.858486][ T5957] ? xfd_validate_state+0x5d/0x180 [ 51.859867][ T5957] ? rcu_is_watching+0x12/0xc0 [ 51.861099][ T5957] __x64_sys_bpf+0x78/0xc0 [ 51.862228][ T5957] ? lockdep_hardirqs_on+0x7c/0x110 [ 51.863531][ T5957] do_syscall_64+0xcd/0x250 [ 51.865085][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.866934][ T5957] RIP: 0033:0x7f1bf86dbe99 [ 51.868156][ T5957] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 51.872960][ T5957] RSP: 002b:00007f1bf8696228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 51.875197][ T5957] RAX: ffffffffffffffda RBX: 00007f1bf8766328 RCX: 00007f1bf86dbe99 [ 51.877351][ T5957] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 51.879409][ T5957] RBP: 00007f1bf8766320 R08: 00007f1bf86966c0 R09: 00007f1bf86966c0 [ 51.881464][ T5957] R10: 00007f1bf86966c0 R11: 0000000000000246 R12: 00007f1bf8733074 [ 51.883518][ T5957] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe730b5808 [ 51.885807][ T5957] [ 51.886699][ T5957] BUG: Bad page state in process syz-executor687 pfn:34661 [ 51.888494][ T5957] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x8 pfn:0x34661 [ 51.891115][ T5957] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 51.893522][ T5957] raw: 00fff00000000000 dead000000000040 ffff888032d1e000 0000000000000000 [ 51.895907][ T5957] raw: 0000000000000008 0000000000000001 00000000ffffffff 0000000000000000 [ 51.898085][ T5957] page dumped because: page_pool leak [ 51.899443][ T5957] page_owner tracks the page as allocated [ 51.900944][ T5957] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5957, tgid 5955 (syz-executor687), ts 44478710446, free_ts 44477393688 [ 51.905186][ T5957] post_alloc_hook+0x2d1/0x350 [ 51.906433][ T5957] get_page_from_freelist+0x101e/0x3070 [ 51.907901][ T5957] __alloc_pages_noprof+0x223/0x25a0 [ 51.909284][ T5957] alloc_pages_bulk_noprof+0x77c/0x1110 [ 51.910863][ T5957] __page_pool_alloc_pages_slow+0x18f/0x770 [ 51.912429][ T5957] page_pool_alloc_netmem+0xc4/0x160 [ 51.914132][ T5957] page_pool_alloc_pages+0x1a/0x60 [ 51.915676][ T5957] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 51.917194][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 51.918636][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 51.920214][ T5957] __sys_bpf+0xfc6/0x49a0 [ 51.921266][ T5957] __x64_sys_bpf+0x78/0xc0 [ 51.922371][ T5957] do_syscall_64+0xcd/0x250 [ 51.923887][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.925408][ T5957] page last free pid 5958 tgid 5952 stack trace: [ 51.927291][ T5957] free_unref_page+0x5f4/0xdc0 [ 51.928551][ T5957] __folio_put+0x30d/0x3d0 [ 51.929664][ T5957] put_page+0x21e/0x280 [ 51.930805][ T5957] page_pool_return_page+0x400/0x520 [ 51.932199][ T5957] page_pool_release+0xf4/0x7d0 [ 51.933423][ T5957] page_pool_destroy+0x10a/0x4c0 [ 51.934674][ T5957] bpf_test_run_xdp_live+0x3a1/0x500 [ 51.936127][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 51.937476][ T5957] __sys_bpf+0xfc6/0x49a0 [ 51.938580][ T5957] __x64_sys_bpf+0x78/0xc0 [ 51.939818][ T5957] do_syscall_64+0xcd/0x250 [ 51.941009][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.942463][ T5957] Modules linked in: [ 51.943525][ T5957] CPU: 3 UID: 0 PID: 5957 Comm: syz-executor687 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 51.947162][ T5957] Tainted: [B]=BAD_PAGE [ 51.948238][ T5957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 51.951111][ T5957] Call Trace: [ 51.951934][ T5957] [ 51.952673][ T5957] dump_stack_lvl+0x16c/0x1f0 [ 51.953847][ T5957] bad_page+0xb3/0x1f0 [ 51.954905][ T5957] ? __pfx_bad_page+0x10/0x10 [ 51.956119][ T5957] ? page_bad_reason+0x9d/0x1e0 [ 51.957334][ T5957] free_unref_page+0x657/0xdc0 [ 51.958714][ T5957] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 51.960527][ T5957] ? __phys_addr+0xc6/0x150 [ 51.962017][ T5957] skb_free_head+0xa0/0x1d0 [ 51.963489][ T5957] skb_release_data+0x560/0x730 [ 51.965052][ T5957] sk_skb_reason_drop+0x129/0x1a0 [ 51.966647][ T5957] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 51.968786][ T5957] ? kernel_text_address+0x8d/0x100 [ 51.970361][ T5957] ? hlock_class+0x4e/0x130 [ 51.972337][ T5957] ? __lock_acquire+0x163e/0x3ce0 [ 51.973667][ T5957] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 51.975383][ T5957] ? hlock_class+0x4e/0x130 [ 51.976789][ T5957] ? __lock_acquire+0xbdd/0x3ce0 [ 51.978034][ T5957] ? __pfx___lock_acquire+0x10/0x10 [ 51.979446][ T5957] __netif_receive_skb_list_core+0x357/0x950 [ 51.980950][ T5957] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 51.982560][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 51.984019][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 51.985594][ T5957] ? lock_acquire+0x2f/0xb0 [ 51.986712][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 51.988381][ T5957] netif_receive_skb_list_internal+0x753/0xdb0 [ 51.990068][ T5957] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 51.991881][ T5957] ? __pfx_eth_type_trans+0x10/0x10 [ 51.993274][ T5957] ? __build_skb_around+0x278/0x3b0 [ 51.994689][ T5957] netif_receive_skb_list+0x4f/0x4a0 [ 51.996048][ T5957] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 51.997674][ T5957] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 51.999362][ T5957] ? bpf_test_timer_continue+0x150/0x3d0 [ 52.000784][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 52.002185][ T5957] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 52.003915][ T5957] ? try_to_wake_up+0x154/0x14f0 [ 52.005421][ T5957] ? __pfx_try_to_wake_up+0x10/0x10 [ 52.007634][ T5957] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 52.009216][ T5957] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 52.010715][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 52.012372][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 52.013932][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 52.015319][ T5957] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 52.016803][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 52.018104][ T5957] ? lock_acquire+0x2f/0xb0 [ 52.019245][ T5957] ? __fget_files+0x40/0x3f0 [ 52.020395][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 52.021891][ T5957] ? fput+0x30/0x390 [ 52.022904][ T5957] ? __bpf_prog_get+0xa0/0x290 [ 52.024167][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 52.025824][ T5957] __sys_bpf+0xfc6/0x49a0 [ 52.027010][ T5957] ? find_held_lock+0x2d/0x110 [ 52.028185][ T5957] ? __pfx___sys_bpf+0x10/0x10 [ 52.029362][ T5957] ? __might_fault+0x13b/0x190 [ 52.030657][ T5957] ? __pfx_lock_release+0x10/0x10 [ 52.031978][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 52.033308][ T5957] ? lock_acquire+0x2f/0xb0 [ 52.034502][ T5957] ? __might_fault+0xe3/0x190 [ 52.035777][ T5957] ? xfd_validate_state+0x5d/0x180 [ 52.037059][ T5957] ? rcu_is_watching+0x12/0xc0 [ 52.038225][ T5957] __x64_sys_bpf+0x78/0xc0 [ 52.039439][ T5957] ? lockdep_hardirqs_on+0x7c/0x110 [ 52.040748][ T5957] do_syscall_64+0xcd/0x250 [ 52.042023][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.043504][ T5957] RIP: 0033:0x7f1bf86dbe99 [ 52.044694][ T5957] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 52.052588][ T5957] RSP: 002b:00007f1bf8696228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 52.055114][ T5957] RAX: ffffffffffffffda RBX: 00007f1bf8766328 RCX: 00007f1bf86dbe99 [ 52.057265][ T5957] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 52.059233][ T5957] RBP: 00007f1bf8766320 R08: 00007f1bf86966c0 R09: 00007f1bf86966c0 [ 52.061288][ T5957] R10: 00007f1bf86966c0 R11: 0000000000000246 R12: 00007f1bf8733074 [ 52.063286][ T5957] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe730b5808 [ 52.065295][ T5957] [ 52.066151][ T5957] BUG: Bad page state in process syz-executor687 pfn:2a31b [ 52.068354][ T5957] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802a31baf8 pfn:0x2a31b [ 52.071198][ T5957] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 52.073309][ T5957] raw: 00fff00000000000 dead000000000040 ffff888032d1e000 0000000000000000 [ 52.075710][ T5957] raw: ffff88802a31baf8 0000000000000001 00000000ffffffff 0000000000000000 [ 52.077871][ T5957] page dumped because: page_pool leak [ 52.079202][ T5957] page_owner tracks the page as allocated [ 52.080667][ T5957] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5957, tgid 5955 (syz-executor687), ts 44478701882, free_ts 44477418520 [ 52.085200][ T5957] post_alloc_hook+0x2d1/0x350 [ 52.086712][ T5957] get_page_from_freelist+0x101e/0x3070 [ 52.088398][ T5957] __alloc_pages_noprof+0x223/0x25a0 [ 52.090034][ T5957] alloc_pages_bulk_noprof+0x77c/0x1110 [ 52.092054][ T5957] __page_pool_alloc_pages_slow+0x18f/0x770 [ 52.093918][ T5957] page_pool_alloc_netmem+0xc4/0x160 [ 52.095368][ T5957] page_pool_alloc_pages+0x1a/0x60 [ 52.096847][ T5957] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 52.098556][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 52.099871][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 52.101252][ T5957] __sys_bpf+0xfc6/0x49a0 [ 52.102402][ T5957] __x64_sys_bpf+0x78/0xc0 [ 52.103627][ T5957] do_syscall_64+0xcd/0x250 [ 52.105053][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.106649][ T5957] page last free pid 5958 tgid 5952 stack trace: [ 52.108599][ T5957] free_unref_page+0x5f4/0xdc0 [ 52.109863][ T5957] __folio_put+0x30d/0x3d0 [ 52.111199][ T5957] put_page+0x21e/0x280 [ 52.112229][ T5957] page_pool_return_page+0x400/0x520 [ 52.113534][ T5957] page_pool_release+0xf4/0x7d0 [ 52.114718][ T5957] page_pool_destroy+0x10a/0x4c0 [ 52.116208][ T5957] bpf_test_run_xdp_live+0x3a1/0x500 [ 52.117611][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 52.118980][ T5957] __sys_bpf+0xfc6/0x49a0 [ 52.120157][ T5957] __x64_sys_bpf+0x78/0xc0 [ 52.121506][ T5957] do_syscall_64+0xcd/0x250 [ 52.122749][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.124493][ T5957] Modules linked in: [ 52.126016][ T5957] CPU: 3 UID: 0 PID: 5957 Comm: syz-executor687 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 52.129684][ T5957] Tainted: [B]=BAD_PAGE [ 52.130827][ T5957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 52.133612][ T5957] Call Trace: [ 52.134428][ T5957] [ 52.135176][ T5957] dump_stack_lvl+0x16c/0x1f0 [ 52.136547][ T5957] bad_page+0xb3/0x1f0 [ 52.137776][ T5957] ? __pfx_bad_page+0x10/0x10 [ 52.138992][ T5957] ? page_bad_reason+0x9d/0x1e0 [ 52.140212][ T5957] free_unref_page+0x657/0xdc0 [ 52.141562][ T5957] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 52.143069][ T5957] ? __phys_addr+0xc6/0x150 [ 52.144231][ T5957] skb_free_head+0xa0/0x1d0 [ 52.145665][ T5957] skb_release_data+0x560/0x730 [ 52.146871][ T5957] sk_skb_reason_drop+0x129/0x1a0 [ 52.148139][ T5957] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 52.149900][ T5957] ? kernel_text_address+0x8d/0x100 [ 52.151342][ T5957] ? hlock_class+0x4e/0x130 [ 52.152514][ T5957] ? __lock_acquire+0x163e/0x3ce0 [ 52.153961][ T5957] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 52.155877][ T5957] ? hlock_class+0x4e/0x130 [ 52.157022][ T5957] ? __lock_acquire+0xbdd/0x3ce0 [ 52.158371][ T5957] ? __pfx___lock_acquire+0x10/0x10 [ 52.159663][ T5957] __netif_receive_skb_list_core+0x357/0x950 [ 52.161227][ T5957] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 52.162867][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 52.164141][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 52.166007][ T5957] ? lock_acquire+0x2f/0xb0 [ 52.167392][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 52.169834][ T5957] netif_receive_skb_list_internal+0x753/0xdb0 [ 52.172243][ T5957] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 52.174308][ T5957] ? __pfx_eth_type_trans+0x10/0x10 [ 52.175757][ T5957] ? __build_skb_around+0x278/0x3b0 [ 52.177024][ T5957] netif_receive_skb_list+0x4f/0x4a0 [ 52.178339][ T5957] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 52.180038][ T5957] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 52.181684][ T5957] ? bpf_test_timer_continue+0x150/0x3d0 [ 52.183355][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 52.184746][ T5957] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 52.186307][ T5957] ? try_to_wake_up+0x154/0x14f0 [ 52.187671][ T5957] ? __pfx_try_to_wake_up+0x10/0x10 [ 52.189469][ T5957] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 52.191234][ T5957] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 52.192748][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 52.194330][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 52.195836][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 52.197205][ T5957] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 52.198726][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 52.200215][ T5957] ? lock_acquire+0x2f/0xb0 [ 52.201361][ T5957] ? __fget_files+0x40/0x3f0 [ 52.202492][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 52.204191][ T5957] ? fput+0x30/0x390 [ 52.205388][ T5957] ? __bpf_prog_get+0xa0/0x290 [ 52.206682][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 52.208236][ T5957] __sys_bpf+0xfc6/0x49a0 [ 52.209531][ T5957] ? find_held_lock+0x2d/0x110 [ 52.210710][ T5957] ? __pfx___sys_bpf+0x10/0x10 [ 52.211908][ T5957] ? __might_fault+0x13b/0x190 [ 52.213106][ T5957] ? __pfx_lock_release+0x10/0x10 [ 52.214362][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 52.215826][ T5957] ? lock_acquire+0x2f/0xb0 [ 52.216963][ T5957] ? __might_fault+0xe3/0x190 [ 52.218152][ T5957] ? xfd_validate_state+0x5d/0x180 [ 52.219436][ T5957] ? rcu_is_watching+0x12/0xc0 [ 52.220604][ T5957] __x64_sys_bpf+0x78/0xc0 [ 52.221704][ T5957] ? lockdep_hardirqs_on+0x7c/0x110 [ 52.223157][ T5957] do_syscall_64+0xcd/0x250 [ 52.224469][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.226080][ T5957] RIP: 0033:0x7f1bf86dbe99 [ 52.227284][ T5957] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 52.232348][ T5957] RSP: 002b:00007f1bf8696228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 52.234579][ T5957] RAX: ffffffffffffffda RBX: 00007f1bf8766328 RCX: 00007f1bf86dbe99 [ 52.236700][ T5957] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 52.238721][ T5957] RBP: 00007f1bf8766320 R08: 00007f1bf86966c0 R09: 00007f1bf86966c0 [ 52.240657][ T5957] R10: 00007f1bf86966c0 R11: 0000000000000246 R12: 00007f1bf8733074 [ 52.242760][ T5957] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe730b5808 [ 52.244975][ T5957] [ 52.245983][ T5957] BUG: Bad page state in process syz-executor687 pfn:3177d [ 52.248077][ T5957] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803177df00 pfn:0x3177d [ 52.250573][ T5957] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 52.252377][ T5957] raw: 00fff00000000000 dead000000000040 ffff888032d1e000 0000000000000000 [ 52.254579][ T5957] raw: ffff88803177df00 0000000000000001 00000000ffffffff 0000000000000000 [ 52.256674][ T5957] page dumped because: page_pool leak [ 52.258155][ T5957] page_owner tracks the page as allocated [ 52.259519][ T5957] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5957, tgid 5955 (syz-executor687), ts 44478693266, free_ts 44477425851 [ 52.263948][ T5957] post_alloc_hook+0x2d1/0x350 [ 52.265147][ T5957] get_page_from_freelist+0x101e/0x3070 [ 52.266834][ T5957] __alloc_pages_noprof+0x223/0x25a0 [ 52.268158][ T5957] alloc_pages_bulk_noprof+0x77c/0x1110 [ 52.269483][ T5957] __page_pool_alloc_pages_slow+0x18f/0x770 [ 52.271197][ T5957] page_pool_alloc_netmem+0xc4/0x160 [ 52.272550][ T5957] page_pool_alloc_pages+0x1a/0x60 [ 52.273842][ T5957] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 52.275549][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 52.277246][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 52.279005][ T5957] __sys_bpf+0xfc6/0x49a0 [ 52.280313][ T5957] __x64_sys_bpf+0x78/0xc0 [ 52.281425][ T5957] do_syscall_64+0xcd/0x250 [ 52.282571][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.284037][ T5957] page last free pid 5958 tgid 5952 stack trace: [ 52.285552][ T5957] free_unref_page+0x5f4/0xdc0 [ 52.286737][ T5957] __folio_put+0x30d/0x3d0 [ 52.287844][ T5957] put_page+0x21e/0x280 [ 52.288862][ T5957] page_pool_return_page+0x400/0x520 [ 52.290233][ T5957] page_pool_release+0xf4/0x7d0 [ 52.291502][ T5957] page_pool_destroy+0x10a/0x4c0 [ 52.292711][ T5957] bpf_test_run_xdp_live+0x3a1/0x500 [ 52.294013][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 52.295520][ T5957] __sys_bpf+0xfc6/0x49a0 [ 52.296680][ T5957] __x64_sys_bpf+0x78/0xc0 [ 52.297796][ T5957] do_syscall_64+0xcd/0x250 [ 52.298940][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.300571][ T5957] Modules linked in: [ 52.301532][ T5957] CPU: 3 UID: 0 PID: 5957 Comm: syz-executor687 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 52.304613][ T5957] Tainted: [B]=BAD_PAGE [ 52.305633][ T5957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 52.309086][ T5957] Call Trace: [ 52.310032][ T5957] [ 52.311197][ T5957] dump_stack_lvl+0x16c/0x1f0 [ 52.312632][ T5957] bad_page+0xb3/0x1f0 [ 52.313682][ T5957] ? __pfx_bad_page+0x10/0x10 [ 52.314954][ T5957] ? page_bad_reason+0x9d/0x1e0 [ 52.316191][ T5957] free_unref_page+0x657/0xdc0 [ 52.317503][ T5957] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 52.319009][ T5957] ? __phys_addr+0xc6/0x150 [ 52.320164][ T5957] skb_free_head+0xa0/0x1d0 [ 52.321402][ T5957] skb_release_data+0x560/0x730 [ 52.322637][ T5957] sk_skb_reason_drop+0x129/0x1a0 [ 52.323922][ T5957] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 52.325912][ T5957] ? kernel_text_address+0x8d/0x100 [ 52.327866][ T5957] ? hlock_class+0x4e/0x130 [ 52.329287][ T5957] ? __lock_acquire+0x163e/0x3ce0 [ 52.330578][ T5957] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 52.332539][ T5957] ? hlock_class+0x4e/0x130 [ 52.333821][ T5957] ? __lock_acquire+0xbdd/0x3ce0 [ 52.335244][ T5957] ? __pfx___lock_acquire+0x10/0x10 [ 52.336795][ T5957] __netif_receive_skb_list_core+0x357/0x950 [ 52.338416][ T5957] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 52.340038][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 52.341421][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 52.342994][ T5957] ? lock_acquire+0x2f/0xb0 [ 52.344836][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 52.346366][ T5957] netif_receive_skb_list_internal+0x753/0xdb0 [ 52.347844][ T5957] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 52.349412][ T5957] ? __pfx_eth_type_trans+0x10/0x10 [ 52.350689][ T5957] ? __build_skb_around+0x278/0x3b0 [ 52.352105][ T5957] netif_receive_skb_list+0x4f/0x4a0 [ 52.353437][ T5957] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 52.355090][ T5957] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 52.356709][ T5957] ? bpf_test_timer_continue+0x150/0x3d0 [ 52.358117][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 52.359576][ T5957] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 52.361282][ T5957] ? try_to_wake_up+0x154/0x14f0 [ 52.362754][ T5957] ? __pfx_try_to_wake_up+0x10/0x10 [ 52.364281][ T5957] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 52.366062][ T5957] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 52.367417][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 52.368748][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 52.370149][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 52.371479][ T5957] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 52.372917][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 52.374370][ T5957] ? lock_acquire+0x2f/0xb0 [ 52.375530][ T5957] ? __fget_files+0x40/0x3f0 [ 52.376708][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 52.378267][ T5957] ? fput+0x30/0x390 [ 52.379260][ T5957] ? __bpf_prog_get+0xa0/0x290 [ 52.380465][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 52.382034][ T5957] __sys_bpf+0xfc6/0x49a0 [ 52.383546][ T5957] ? find_held_lock+0x2d/0x110 [ 52.385269][ T5957] ? __pfx___sys_bpf+0x10/0x10 [ 52.386991][ T5957] ? __might_fault+0x13b/0x190 [ 52.388595][ T5957] ? __pfx_lock_release+0x10/0x10 [ 52.390459][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 52.392442][ T5957] ? lock_acquire+0x2f/0xb0 [ 52.393734][ T5957] ? __might_fault+0xe3/0x190 [ 52.395116][ T5957] ? xfd_validate_state+0x5d/0x180 [ 52.396692][ T5957] ? rcu_is_watching+0x12/0xc0 [ 52.398080][ T5957] __x64_sys_bpf+0x78/0xc0 [ 52.399322][ T5957] ? lockdep_hardirqs_on+0x7c/0x110 [ 52.400725][ T5957] do_syscall_64+0xcd/0x250 [ 52.401886][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.403384][ T5957] RIP: 0033:0x7f1bf86dbe99 [ 52.404675][ T5957] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 52.409773][ T5957] RSP: 002b:00007f1bf8696228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 52.411832][ T5957] RAX: ffffffffffffffda RBX: 00007f1bf8766328 RCX: 00007f1bf86dbe99 [ 52.413940][ T5957] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 52.415947][ T5957] RBP: 00007f1bf8766320 R08: 00007f1bf86966c0 R09: 00007f1bf86966c0 [ 52.417935][ T5957] R10: 00007f1bf86966c0 R11: 0000000000000246 R12: 00007f1bf8733074 [ 52.419890][ T5957] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe730b5808 [ 52.421885][ T5957] [ 52.422786][ T5957] BUG: Bad page state in process syz-executor687 pfn:30b62 [ 52.424770][ T5957] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888030b62f00 pfn:0x30b62 [ 52.427449][ T5957] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 52.429355][ T5957] raw: 00fff00000000000 dead000000000040 ffff888032d1e000 0000000000000000 [ 52.431613][ T5957] raw: ffff888030b62f00 0000000000000001 00000000ffffffff 0000000000000000 [ 52.433839][ T5957] page dumped because: page_pool leak [ 52.435175][ T5957] page_owner tracks the page as allocated [ 52.436724][ T5957] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5957, tgid 5955 (syz-executor687), ts 44478684813, free_ts 44477433511 [ 52.441163][ T5957] post_alloc_hook+0x2d1/0x350 [ 52.442373][ T5957] get_page_from_freelist+0x101e/0x3070 [ 52.443890][ T5957] __alloc_pages_noprof+0x223/0x25a0 [ 52.445242][ T5957] alloc_pages_bulk_noprof+0x77c/0x1110 [ 52.446825][ T5957] __page_pool_alloc_pages_slow+0x18f/0x770 [ 52.448442][ T5957] page_pool_alloc_netmem+0xc4/0x160 [ 52.449969][ T5957] page_pool_alloc_pages+0x1a/0x60 [ 52.451481][ T5957] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 52.453032][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 52.454373][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 52.455913][ T5957] __sys_bpf+0xfc6/0x49a0 [ 52.457012][ T5957] __x64_sys_bpf+0x78/0xc0 [ 52.458127][ T5957] do_syscall_64+0xcd/0x250 [ 52.459295][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.460883][ T5957] page last free pid 5958 tgid 5952 stack trace: [ 52.462551][ T5957] free_unref_page+0x5f4/0xdc0 [ 52.464130][ T5957] __folio_put+0x30d/0x3d0 [ 52.465276][ T5957] put_page+0x21e/0x280 [ 52.466450][ T5957] page_pool_return_page+0x400/0x520 [ 52.467914][ T5957] page_pool_release+0xf4/0x7d0 [ 52.469139][ T5957] page_pool_destroy+0x10a/0x4c0 [ 52.470564][ T5957] bpf_test_run_xdp_live+0x3a1/0x500 [ 52.472009][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 52.473385][ T5957] __sys_bpf+0xfc6/0x49a0 [ 52.474560][ T5957] __x64_sys_bpf+0x78/0xc0 [ 52.475746][ T5957] do_syscall_64+0xcd/0x250 [ 52.476997][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.478515][ T5957] Modules linked in: [ 52.479533][ T5957] CPU: 3 UID: 0 PID: 5957 Comm: syz-executor687 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 52.482741][ T5957] Tainted: [B]=BAD_PAGE [ 52.483779][ T5957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 52.486482][ T5957] Call Trace: [ 52.487574][ T5957] [ 52.488431][ T5957] dump_stack_lvl+0x16c/0x1f0 [ 52.490023][ T5957] bad_page+0xb3/0x1f0 [ 52.491139][ T5957] ? __pfx_bad_page+0x10/0x10 [ 52.492377][ T5957] ? page_bad_reason+0x9d/0x1e0 [ 52.493702][ T5957] free_unref_page+0x657/0xdc0 [ 52.495147][ T5957] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 52.496709][ T5957] ? __phys_addr+0xc6/0x150 [ 52.497924][ T5957] skb_free_head+0xa0/0x1d0 [ 52.499115][ T5957] skb_release_data+0x560/0x730 [ 52.500353][ T5957] sk_skb_reason_drop+0x129/0x1a0 [ 52.501656][ T5957] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 52.503377][ T5957] ? kernel_text_address+0x8d/0x100 [ 52.504714][ T5957] ? hlock_class+0x4e/0x130 [ 52.506370][ T5957] ? __lock_acquire+0x163e/0x3ce0 [ 52.507732][ T5957] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 52.509485][ T5957] ? hlock_class+0x4e/0x130 [ 52.510652][ T5957] ? __lock_acquire+0xbdd/0x3ce0 [ 52.511927][ T5957] ? __pfx___lock_acquire+0x10/0x10 [ 52.513323][ T5957] __netif_receive_skb_list_core+0x357/0x950 [ 52.515201][ T5957] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 52.517102][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 52.518537][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 52.520230][ T5957] ? lock_acquire+0x2f/0xb0 [ 52.521393][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 52.523491][ T5957] netif_receive_skb_list_internal+0x753/0xdb0 [ 52.525523][ T5957] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 52.527692][ T5957] ? __pfx_eth_type_trans+0x10/0x10 [ 52.529348][ T5957] ? __build_skb_around+0x278/0x3b0 [ 52.531026][ T5957] netif_receive_skb_list+0x4f/0x4a0 [ 52.532840][ T5957] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 52.534858][ T5957] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 52.536945][ T5957] ? bpf_test_timer_continue+0x150/0x3d0 [ 52.538661][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 52.540324][ T5957] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 52.542171][ T5957] ? try_to_wake_up+0x154/0x14f0 [ 52.544000][ T5957] ? __pfx_try_to_wake_up+0x10/0x10 [ 52.545722][ T5957] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 52.547718][ T5957] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 52.549480][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 52.551378][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 52.552981][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 52.554409][ T5957] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 52.555951][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 52.557328][ T5957] ? lock_acquire+0x2f/0xb0 [ 52.558489][ T5957] ? __fget_files+0x40/0x3f0 [ 52.559713][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 52.561206][ T5957] ? fput+0x30/0x390 [ 52.562205][ T5957] ? __bpf_prog_get+0xa0/0x290 [ 52.563415][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 52.564884][ T5957] __sys_bpf+0xfc6/0x49a0 [ 52.565972][ T5957] ? find_held_lock+0x2d/0x110 [ 52.567208][ T5957] ? __pfx___sys_bpf+0x10/0x10 [ 52.568453][ T5957] ? __might_fault+0x13b/0x190 [ 52.569680][ T5957] ? __pfx_lock_release+0x10/0x10 [ 52.571004][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 52.572323][ T5957] ? lock_acquire+0x2f/0xb0 [ 52.573520][ T5957] ? __might_fault+0xe3/0x190 [ 52.574725][ T5957] ? xfd_validate_state+0x5d/0x180 [ 52.576036][ T5957] ? rcu_is_watching+0x12/0xc0 [ 52.577258][ T5957] __x64_sys_bpf+0x78/0xc0 [ 52.578382][ T5957] ? lockdep_hardirqs_on+0x7c/0x110 [ 52.579707][ T5957] do_syscall_64+0xcd/0x250 [ 52.580867][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.582417][ T5957] RIP: 0033:0x7f1bf86dbe99 [ 52.583549][ T5957] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 52.588427][ T5957] RSP: 002b:00007f1bf8696228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 52.590472][ T5957] RAX: ffffffffffffffda RBX: 00007f1bf8766328 RCX: 00007f1bf86dbe99 [ 52.592497][ T5957] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 52.594871][ T5957] RBP: 00007f1bf8766320 R08: 00007f1bf86966c0 R09: 00007f1bf86966c0 [ 52.597408][ T5957] R10: 00007f1bf86966c0 R11: 0000000000000246 R12: 00007f1bf8733074 [ 52.599749][ T5957] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe730b5808 [ 52.602295][ T5957] [ 52.603406][ T5957] BUG: Bad page state in process syz-executor687 pfn:3452a [ 52.605824][ T5957] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3452a [ 52.608645][ T5957] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 52.611077][ T5957] raw: 00fff00000000000 dead000000000040 ffff888032d1e000 0000000000000000 [ 52.613730][ T5957] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 52.616547][ T5957] page dumped because: page_pool leak [ 52.618241][ T5957] page_owner tracks the page as allocated [ 52.619840][ T5957] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5957, tgid 5955 (syz-executor687), ts 44478676409, free_ts 44477440572 [ 52.624504][ T5957] post_alloc_hook+0x2d1/0x350 [ 52.626051][ T5957] get_page_from_freelist+0x101e/0x3070 [ 52.627719][ T5957] __alloc_pages_noprof+0x223/0x25a0 [ 52.629180][ T5957] alloc_pages_bulk_noprof+0x77c/0x1110 [ 52.630741][ T5957] __page_pool_alloc_pages_slow+0x18f/0x770 [ 52.633165][ T5957] page_pool_alloc_netmem+0xc4/0x160 [ 52.634594][ T5957] page_pool_alloc_pages+0x1a/0x60 [ 52.636289][ T5957] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 52.637953][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 52.639607][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 52.641110][ T5957] __sys_bpf+0xfc6/0x49a0 [ 52.642420][ T5957] __x64_sys_bpf+0x78/0xc0 [ 52.643849][ T5957] do_syscall_64+0xcd/0x250 [ 52.645546][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.647442][ T5957] page last free pid 5958 tgid 5952 stack trace: [ 52.649403][ T5957] free_unref_page+0x5f4/0xdc0 [ 52.650850][ T5957] __folio_put+0x30d/0x3d0 [ 52.652284][ T5957] put_page+0x21e/0x280 [ 52.653419][ T5957] page_pool_return_page+0x400/0x520 [ 52.655185][ T5957] page_pool_release+0xf4/0x7d0 [ 52.656795][ T5957] page_pool_destroy+0x10a/0x4c0 [ 52.658324][ T5957] bpf_test_run_xdp_live+0x3a1/0x500 [ 52.660133][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 52.661856][ T5957] __sys_bpf+0xfc6/0x49a0 [ 52.663126][ T5957] __x64_sys_bpf+0x78/0xc0 [ 52.664513][ T5957] do_syscall_64+0xcd/0x250 [ 52.665994][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.667821][ T5957] Modules linked in: [ 52.669074][ T5957] CPU: 3 UID: 0 PID: 5957 Comm: syz-executor687 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 52.672815][ T5957] Tainted: [B]=BAD_PAGE [ 52.674118][ T5957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 52.677120][ T5957] Call Trace: [ 52.677967][ T5957] [ 52.678742][ T5957] dump_stack_lvl+0x16c/0x1f0 [ 52.680318][ T5957] bad_page+0xb3/0x1f0 [ 52.681556][ T5957] ? __pfx_bad_page+0x10/0x10 [ 52.683214][ T5957] ? page_bad_reason+0x9d/0x1e0 [ 52.685306][ T5957] free_unref_page+0x657/0xdc0 [ 52.686910][ T5957] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 52.688885][ T5957] ? __phys_addr+0xc6/0x150 [ 52.690469][ T5957] skb_free_head+0xa0/0x1d0 [ 52.692397][ T5957] skb_release_data+0x560/0x730 [ 52.694074][ T5957] sk_skb_reason_drop+0x129/0x1a0 [ 52.695711][ T5957] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 52.697979][ T5957] ? kernel_text_address+0x8d/0x100 [ 52.699640][ T5957] ? hlock_class+0x4e/0x130 [ 52.701002][ T5957] ? __lock_acquire+0x163e/0x3ce0 [ 52.702536][ T5957] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 52.705991][ T5957] ? hlock_class+0x4e/0x130 [ 52.707637][ T5957] ? __lock_acquire+0xbdd/0x3ce0 [ 52.709381][ T5957] ? __pfx___lock_acquire+0x10/0x10 [ 52.711465][ T5957] __netif_receive_skb_list_core+0x357/0x950 [ 52.713438][ T5957] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 52.715440][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 52.716853][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 52.718488][ T5957] ? lock_acquire+0x2f/0xb0 [ 52.719819][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 52.721835][ T5957] netif_receive_skb_list_internal+0x753/0xdb0 [ 52.723738][ T5957] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 52.725978][ T5957] ? __pfx_eth_type_trans+0x10/0x10 [ 52.728012][ T5957] ? __build_skb_around+0x278/0x3b0 [ 52.729609][ T5957] netif_receive_skb_list+0x4f/0x4a0 [ 52.731269][ T5957] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 52.732923][ T5957] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 52.735014][ T5957] ? bpf_test_timer_continue+0x150/0x3d0 [ 52.736820][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 52.738414][ T5957] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 52.739881][ T5957] ? try_to_wake_up+0x154/0x14f0 [ 52.741418][ T5957] ? __pfx_try_to_wake_up+0x10/0x10 [ 52.742798][ T5957] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 52.744956][ T5957] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 52.746665][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 52.748281][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 52.749639][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 52.751023][ T5957] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 52.752532][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 52.754178][ T5957] ? lock_acquire+0x2f/0xb0 [ 52.755454][ T5957] ? __fget_files+0x40/0x3f0 [ 52.756921][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 52.758510][ T5957] ? fput+0x30/0x390 [ 52.759721][ T5957] ? __bpf_prog_get+0xa0/0x290 [ 52.761318][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 52.763227][ T5957] __sys_bpf+0xfc6/0x49a0 [ 52.764868][ T5957] ? find_held_lock+0x2d/0x110 [ 52.766550][ T5957] ? __pfx___sys_bpf+0x10/0x10 [ 52.767995][ T5957] ? __might_fault+0x13b/0x190 [ 52.769682][ T5957] ? __pfx_lock_release+0x10/0x10 [ 52.771877][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 52.773655][ T5957] ? lock_acquire+0x2f/0xb0 [ 52.775102][ T5957] ? __might_fault+0xe3/0x190 [ 52.776538][ T5957] ? xfd_validate_state+0x5d/0x180 [ 52.778108][ T5957] ? rcu_is_watching+0x12/0xc0 [ 52.779841][ T5957] __x64_sys_bpf+0x78/0xc0 [ 52.781130][ T5957] ? lockdep_hardirqs_on+0x7c/0x110 [ 52.782944][ T5957] do_syscall_64+0xcd/0x250 [ 52.785139][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.787367][ T5957] RIP: 0033:0x7f1bf86dbe99 [ 52.788875][ T5957] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 52.794738][ T5957] RSP: 002b:00007f1bf8696228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 52.797267][ T5957] RAX: ffffffffffffffda RBX: 00007f1bf8766328 RCX: 00007f1bf86dbe99 [ 52.799746][ T5957] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 52.802216][ T5957] RBP: 00007f1bf8766320 R08: 00007f1bf86966c0 R09: 00007f1bf86966c0 [ 52.804786][ T5957] R10: 00007f1bf86966c0 R11: 0000000000000246 R12: 00007f1bf8733074 [ 52.807467][ T5957] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe730b5808 [ 52.809820][ T5957] [ 52.810875][ T5957] BUG: Bad page state in process syz-executor687 pfn:31bd4 [ 52.813728][ T5957] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888031bd4b00 pfn:0x31bd4 [ 52.817009][ T5957] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 52.818924][ T5957] raw: 00fff00000000000 dead000000000040 ffff888032d1e000 0000000000000000 [ 52.821559][ T5957] raw: ffff888031bd4b00 0000000000000001 00000000ffffffff 0000000000000000 [ 52.824055][ T5957] page dumped because: page_pool leak [ 52.825387][ T5957] page_owner tracks the page as allocated [ 52.827069][ T5957] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5957, tgid 5955 (syz-executor687), ts 44478667662, free_ts 44477447586 [ 52.833072][ T5957] post_alloc_hook+0x2d1/0x350 [ 52.834626][ T5957] get_page_from_freelist+0x101e/0x3070 [ 52.836814][ T5957] __alloc_pages_noprof+0x223/0x25a0 [ 52.838574][ T5957] alloc_pages_bulk_noprof+0x77c/0x1110 [ 52.840381][ T5957] __page_pool_alloc_pages_slow+0x18f/0x770 [ 52.842489][ T5957] page_pool_alloc_netmem+0xc4/0x160 [ 52.844162][ T5957] page_pool_alloc_pages+0x1a/0x60 [ 52.845779][ T5957] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 52.847566][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 52.849406][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 52.851363][ T5957] __sys_bpf+0xfc6/0x49a0 [ 52.852682][ T5957] __x64_sys_bpf+0x78/0xc0 [ 52.854175][ T5957] do_syscall_64+0xcd/0x250 [ 52.855628][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.857515][ T5957] page last free pid 5958 tgid 5952 stack trace: [ 52.859356][ T5957] free_unref_page+0x5f4/0xdc0 [ 52.860648][ T5957] __folio_put+0x30d/0x3d0 [ 52.862240][ T5957] put_page+0x21e/0x280 [ 52.863703][ T5957] page_pool_return_page+0x400/0x520 [ 52.865311][ T5957] page_pool_release+0xf4/0x7d0 [ 52.866894][ T5957] page_pool_destroy+0x10a/0x4c0 [ 52.868493][ T5957] bpf_test_run_xdp_live+0x3a1/0x500 [ 52.870262][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 52.871749][ T5957] __sys_bpf+0xfc6/0x49a0 [ 52.873018][ T5957] __x64_sys_bpf+0x78/0xc0 [ 52.874237][ T5957] do_syscall_64+0xcd/0x250 [ 52.875595][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.877178][ T5957] Modules linked in: [ 52.878384][ T5957] CPU: 3 UID: 0 PID: 5957 Comm: syz-executor687 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 52.882331][ T5957] Tainted: [B]=BAD_PAGE [ 52.883884][ T5957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 52.887100][ T5957] Call Trace: [ 52.888184][ T5957] [ 52.889112][ T5957] dump_stack_lvl+0x16c/0x1f0 [ 52.890437][ T5957] bad_page+0xb3/0x1f0 [ 52.891549][ T5957] ? __pfx_bad_page+0x10/0x10 [ 52.892779][ T5957] ? page_bad_reason+0x9d/0x1e0 [ 52.894019][ T5957] free_unref_page+0x657/0xdc0 [ 52.895351][ T5957] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 52.897022][ T5957] ? __phys_addr+0xc6/0x150 [ 52.898145][ T5957] skb_free_head+0xa0/0x1d0 [ 52.899288][ T5957] skb_release_data+0x560/0x730 [ 52.900487][ T5957] sk_skb_reason_drop+0x129/0x1a0 [ 52.901756][ T5957] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 52.903724][ T5957] ? kernel_text_address+0x8d/0x100 [ 52.905084][ T5957] ? hlock_class+0x4e/0x130 [ 52.906225][ T5957] ? __lock_acquire+0x163e/0x3ce0 [ 52.907499][ T5957] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 52.909501][ T5957] ? hlock_class+0x4e/0x130 [ 52.910674][ T5957] ? __lock_acquire+0xbdd/0x3ce0 [ 52.912144][ T5957] ? __pfx___lock_acquire+0x10/0x10 [ 52.913673][ T5957] __netif_receive_skb_list_core+0x357/0x950 [ 52.915492][ T5957] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 52.917460][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 52.919305][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 52.921130][ T5957] ? lock_acquire+0x2f/0xb0 [ 52.922505][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 52.924289][ T5957] netif_receive_skb_list_internal+0x753/0xdb0 [ 52.926082][ T5957] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 52.928156][ T5957] ? __pfx_eth_type_trans+0x10/0x10 [ 52.929690][ T5957] ? __build_skb_around+0x278/0x3b0 [ 52.931379][ T5957] netif_receive_skb_list+0x4f/0x4a0 [ 52.932956][ T5957] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 52.934915][ T5957] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 52.936978][ T5957] ? bpf_test_timer_continue+0x150/0x3d0 [ 52.938612][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 52.940197][ T5957] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 52.942020][ T5957] ? try_to_wake_up+0x154/0x14f0 [ 52.943735][ T5957] ? __pfx_try_to_wake_up+0x10/0x10 [ 52.945586][ T5957] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 52.947105][ T5957] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 52.948503][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 52.950074][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 52.951669][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 52.953555][ T5957] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 52.955623][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 52.957671][ T5957] ? lock_acquire+0x2f/0xb0 [ 52.958997][ T5957] ? __fget_files+0x40/0x3f0 [ 52.960460][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 52.962575][ T5957] ? fput+0x30/0x390 [ 52.963950][ T5957] ? __bpf_prog_get+0xa0/0x290 [ 52.965701][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 52.967679][ T5957] __sys_bpf+0xfc6/0x49a0 [ 52.969020][ T5957] ? find_held_lock+0x2d/0x110 [ 52.970568][ T5957] ? __pfx___sys_bpf+0x10/0x10 [ 52.972044][ T5957] ? __might_fault+0x13b/0x190 [ 52.973976][ T5957] ? __pfx_lock_release+0x10/0x10 [ 52.975550][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 52.977322][ T5957] ? lock_acquire+0x2f/0xb0 [ 52.979150][ T5957] ? __might_fault+0xe3/0x190 [ 52.980594][ T5957] ? xfd_validate_state+0x5d/0x180 [ 52.982075][ T5957] ? rcu_is_watching+0x12/0xc0 [ 52.983317][ T5957] __x64_sys_bpf+0x78/0xc0 [ 52.984573][ T5957] ? lockdep_hardirqs_on+0x7c/0x110 [ 52.986402][ T5957] do_syscall_64+0xcd/0x250 [ 52.987671][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.989122][ T5957] RIP: 0033:0x7f1bf86dbe99 [ 52.990255][ T5957] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 52.995118][ T5957] RSP: 002b:00007f1bf8696228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 52.997176][ T5957] RAX: ffffffffffffffda RBX: 00007f1bf8766328 RCX: 00007f1bf86dbe99 [ 52.999198][ T5957] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 53.001182][ T5957] RBP: 00007f1bf8766320 R08: 00007f1bf86966c0 R09: 00007f1bf86966c0 [ 53.003130][ T5957] R10: 00007f1bf86966c0 R11: 0000000000000246 R12: 00007f1bf8733074 [ 53.005354][ T5957] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe730b5808 [ 53.007464][ T5957] [ 53.008446][ T5957] BUG: Bad page state in process syz-executor687 pfn:32025 [ 53.010472][ T5957] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888032025e58 pfn:0x32025 [ 53.013057][ T5957] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 53.014889][ T5957] raw: 00fff00000000000 dead000000000040 ffff888032d1e000 0000000000000000 [ 53.017067][ T5957] raw: ffff888032025e58 0000000000000001 00000000ffffffff 0000000000000000 [ 53.019440][ T5957] page dumped because: page_pool leak [ 53.021016][ T5957] page_owner tracks the page as allocated [ 53.022747][ T5957] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5957, tgid 5955 (syz-executor687), ts 44478659264, free_ts 44477454475 [ 53.028303][ T5957] post_alloc_hook+0x2d1/0x350 [ 53.029760][ T5957] get_page_from_freelist+0x101e/0x3070 [ 53.031947][ T5957] __alloc_pages_noprof+0x223/0x25a0 [ 53.033796][ T5957] alloc_pages_bulk_noprof+0x77c/0x1110 [ 53.035560][ T5957] __page_pool_alloc_pages_slow+0x18f/0x770 [ 53.037436][ T5957] page_pool_alloc_netmem+0xc4/0x160 [ 53.039144][ T5957] page_pool_alloc_pages+0x1a/0x60 [ 53.040889][ T5957] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 53.042807][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 53.044218][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 53.045623][ T5957] __sys_bpf+0xfc6/0x49a0 [ 53.046760][ T5957] __x64_sys_bpf+0x78/0xc0 [ 53.048003][ T5957] do_syscall_64+0xcd/0x250 [ 53.049265][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.051293][ T5957] page last free pid 5958 tgid 5952 stack trace: [ 53.053497][ T5957] free_unref_page+0x5f4/0xdc0 [ 53.055149][ T5957] __folio_put+0x30d/0x3d0 [ 53.056588][ T5957] put_page+0x21e/0x280 [ 53.057886][ T5957] page_pool_return_page+0x400/0x520 [ 53.059707][ T5957] page_pool_release+0xf4/0x7d0 [ 53.061456][ T5957] page_pool_destroy+0x10a/0x4c0 [ 53.063179][ T5957] bpf_test_run_xdp_live+0x3a1/0x500 [ 53.064678][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 53.065996][ T5957] __sys_bpf+0xfc6/0x49a0 [ 53.067077][ T5957] __x64_sys_bpf+0x78/0xc0 [ 53.068176][ T5957] do_syscall_64+0xcd/0x250 [ 53.069355][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.070915][ T5957] Modules linked in: [ 53.071924][ T5957] CPU: 3 UID: 0 PID: 5957 Comm: syz-executor687 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 53.075080][ T5957] Tainted: [B]=BAD_PAGE [ 53.076132][ T5957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 53.078746][ T5957] Call Trace: [ 53.079576][ T5957] [ 53.080314][ T5957] dump_stack_lvl+0x16c/0x1f0 [ 53.081545][ T5957] bad_page+0xb3/0x1f0 [ 53.082677][ T5957] ? __pfx_bad_page+0x10/0x10 [ 53.083982][ T5957] ? page_bad_reason+0x9d/0x1e0 [ 53.085270][ T5957] free_unref_page+0x657/0xdc0 [ 53.086519][ T5957] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 53.088207][ T5957] ? __phys_addr+0xc6/0x150 [ 53.089507][ T5957] skb_free_head+0xa0/0x1d0 [ 53.090815][ T5957] skb_release_data+0x560/0x730 [ 53.092186][ T5957] sk_skb_reason_drop+0x129/0x1a0 [ 53.093518][ T5957] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 53.095730][ T5957] ? kernel_text_address+0x8d/0x100 [ 53.097193][ T5957] ? hlock_class+0x4e/0x130 [ 53.098358][ T5957] ? __lock_acquire+0x163e/0x3ce0 [ 53.099642][ T5957] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 53.101418][ T5957] ? hlock_class+0x4e/0x130 [ 53.102689][ T5957] ? __lock_acquire+0xbdd/0x3ce0 [ 53.104038][ T5957] ? __pfx___lock_acquire+0x10/0x10 [ 53.105335][ T5957] __netif_receive_skb_list_core+0x357/0x950 [ 53.106840][ T5957] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 53.108495][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 53.109824][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 53.111373][ T5957] ? lock_acquire+0x2f/0xb0 [ 53.112516][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 53.114339][ T5957] netif_receive_skb_list_internal+0x753/0xdb0 [ 53.116140][ T5957] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 53.118113][ T5957] ? __pfx_eth_type_trans+0x10/0x10 [ 53.119580][ T5957] ? __build_skb_around+0x278/0x3b0 [ 53.120905][ T5957] netif_receive_skb_list+0x4f/0x4a0 [ 53.122196][ T5957] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 53.123890][ T5957] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 53.125587][ T5957] ? bpf_test_timer_continue+0x150/0x3d0 [ 53.127224][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 53.128614][ T5957] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 53.130080][ T5957] ? try_to_wake_up+0x154/0x14f0 [ 53.131329][ T5957] ? __pfx_try_to_wake_up+0x10/0x10 [ 53.132648][ T5957] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 53.135000][ T5957] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 53.136984][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 53.138660][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 53.140489][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 53.142354][ T5957] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 53.144489][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 53.146202][ T5957] ? lock_acquire+0x2f/0xb0 [ 53.147650][ T5957] ? __fget_files+0x40/0x3f0 [ 53.149045][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 53.150722][ T5957] ? fput+0x30/0x390 [ 53.151833][ T5957] ? __bpf_prog_get+0xa0/0x290 [ 53.153234][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 53.155511][ T5957] __sys_bpf+0xfc6/0x49a0 [ 53.156925][ T5957] ? find_held_lock+0x2d/0x110 [ 53.158408][ T5957] ? __pfx___sys_bpf+0x10/0x10 [ 53.159937][ T5957] ? __might_fault+0x13b/0x190 [ 53.161526][ T5957] ? __pfx_lock_release+0x10/0x10 [ 53.163092][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 53.164854][ T5957] ? lock_acquire+0x2f/0xb0 [ 53.166284][ T5957] ? __might_fault+0xe3/0x190 [ 53.167747][ T5957] ? xfd_validate_state+0x5d/0x180 [ 53.169121][ T5957] ? rcu_is_watching+0x12/0xc0 [ 53.170608][ T5957] __x64_sys_bpf+0x78/0xc0 [ 53.172027][ T5957] ? lockdep_hardirqs_on+0x7c/0x110 [ 53.173494][ T5957] do_syscall_64+0xcd/0x250 [ 53.175492][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.177464][ T5957] RIP: 0033:0x7f1bf86dbe99 [ 53.178870][ T5957] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 53.184723][ T5957] RSP: 002b:00007f1bf8696228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 53.186954][ T5957] RAX: ffffffffffffffda RBX: 00007f1bf8766328 RCX: 00007f1bf86dbe99 [ 53.189452][ T5957] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 53.192189][ T5957] RBP: 00007f1bf8766320 R08: 00007f1bf86966c0 R09: 00007f1bf86966c0 [ 53.194668][ T5957] R10: 00007f1bf86966c0 R11: 0000000000000246 R12: 00007f1bf8733074 [ 53.197182][ T5957] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe730b5808 [ 53.199694][ T5957] [ 53.200881][ T5957] BUG: Bad page state in process syz-executor687 pfn:2aa5b [ 53.203011][ T5957] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2aa5b [ 53.205857][ T5957] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 53.207974][ T5957] raw: 00fff00000000000 dead000000000040 ffff888032d1e000 0000000000000000 [ 53.210635][ T5957] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 53.213074][ T5957] page dumped because: page_pool leak [ 53.214629][ T5957] page_owner tracks the page as allocated [ 53.216700][ T5957] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5957, tgid 5955 (syz-executor687), ts 44478650573, free_ts 44477461222 [ 53.223243][ T5957] post_alloc_hook+0x2d1/0x350 [ 53.224772][ T5957] get_page_from_freelist+0x101e/0x3070 [ 53.226529][ T5957] __alloc_pages_noprof+0x223/0x25a0 [ 53.228190][ T5957] alloc_pages_bulk_noprof+0x77c/0x1110 [ 53.230016][ T5957] __page_pool_alloc_pages_slow+0x18f/0x770 [ 53.231877][ T5957] page_pool_alloc_netmem+0xc4/0x160 [ 53.233204][ T5957] page_pool_alloc_pages+0x1a/0x60 [ 53.235414][ T5957] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 53.237680][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 53.239439][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 53.241262][ T5957] __sys_bpf+0xfc6/0x49a0 [ 53.242797][ T5957] __x64_sys_bpf+0x78/0xc0 [ 53.244563][ T5957] do_syscall_64+0xcd/0x250 [ 53.246045][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.247930][ T5957] page last free pid 5958 tgid 5952 stack trace: [ 53.249891][ T5957] free_unref_page+0x5f4/0xdc0 [ 53.251314][ T5957] __folio_put+0x30d/0x3d0 [ 53.252797][ T5957] put_page+0x21e/0x280 [ 53.254276][ T5957] page_pool_return_page+0x400/0x520 [ 53.255944][ T5957] page_pool_release+0xf4/0x7d0 [ 53.257522][ T5957] page_pool_destroy+0x10a/0x4c0 [ 53.259136][ T5957] bpf_test_run_xdp_live+0x3a1/0x500 [ 53.260488][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 53.262160][ T5957] __sys_bpf+0xfc6/0x49a0 [ 53.263558][ T5957] __x64_sys_bpf+0x78/0xc0 [ 53.264925][ T5957] do_syscall_64+0xcd/0x250 [ 53.266377][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.268316][ T5957] Modules linked in: [ 53.269686][ T5957] CPU: 3 UID: 0 PID: 5957 Comm: syz-executor687 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 53.273479][ T5957] Tainted: [B]=BAD_PAGE [ 53.274512][ T5957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 53.277121][ T5957] Call Trace: [ 53.277970][ T5957] [ 53.278702][ T5957] dump_stack_lvl+0x16c/0x1f0 [ 53.279906][ T5957] bad_page+0xb3/0x1f0 [ 53.280936][ T5957] ? __pfx_bad_page+0x10/0x10 [ 53.282108][ T5957] ? page_bad_reason+0x9d/0x1e0 [ 53.283315][ T5957] free_unref_page+0x657/0xdc0 [ 53.284529][ T5957] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 53.286085][ T5957] ? __phys_addr+0xc6/0x150 [ 53.287368][ T5957] skb_free_head+0xa0/0x1d0 [ 53.288550][ T5957] skb_release_data+0x560/0x730 [ 53.289785][ T5957] sk_skb_reason_drop+0x129/0x1a0 [ 53.291107][ T5957] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 53.292868][ T5957] ? kernel_text_address+0x8d/0x100 [ 53.294208][ T5957] ? hlock_class+0x4e/0x130 [ 53.295457][ T5957] ? __lock_acquire+0x163e/0x3ce0 [ 53.296906][ T5957] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 53.299132][ T5957] ? hlock_class+0x4e/0x130 [ 53.300558][ T5957] ? __lock_acquire+0xbdd/0x3ce0 [ 53.302104][ T5957] ? __pfx___lock_acquire+0x10/0x10 [ 53.303572][ T5957] __netif_receive_skb_list_core+0x357/0x950 [ 53.305258][ T5957] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 53.307185][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 53.308543][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 53.310295][ T5957] ? lock_acquire+0x2f/0xb0 [ 53.311878][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 53.314164][ T5957] netif_receive_skb_list_internal+0x753/0xdb0 [ 53.316309][ T5957] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 53.318156][ T5957] ? __pfx_eth_type_trans+0x10/0x10 [ 53.319778][ T5957] ? __build_skb_around+0x278/0x3b0 [ 53.321529][ T5957] netif_receive_skb_list+0x4f/0x4a0 [ 53.323099][ T5957] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 53.324943][ T5957] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 53.327184][ T5957] ? bpf_test_timer_continue+0x150/0x3d0 [ 53.328956][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 53.330525][ T5957] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 53.332458][ T5957] ? try_to_wake_up+0x154/0x14f0 [ 53.334082][ T5957] ? __pfx_try_to_wake_up+0x10/0x10 [ 53.335448][ T5957] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 53.337383][ T5957] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 53.339274][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 53.340766][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 53.342162][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 53.343625][ T5957] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 53.345146][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 53.346500][ T5957] ? lock_acquire+0x2f/0xb0 [ 53.347652][ T5957] ? __fget_files+0x40/0x3f0 [ 53.348838][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 53.350358][ T5957] ? fput+0x30/0x390 [ 53.351366][ T5957] ? __bpf_prog_get+0xa0/0x290 [ 53.352622][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 53.354113][ T5957] __sys_bpf+0xfc6/0x49a0 [ 53.355378][ T5957] ? find_held_lock+0x2d/0x110 [ 53.356615][ T5957] ? __pfx___sys_bpf+0x10/0x10 [ 53.357844][ T5957] ? __might_fault+0x13b/0x190 [ 53.359116][ T5957] ? __pfx_lock_release+0x10/0x10 [ 53.360421][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 53.361737][ T5957] ? lock_acquire+0x2f/0xb0 [ 53.362905][ T5957] ? __might_fault+0xe3/0x190 [ 53.364106][ T5957] ? xfd_validate_state+0x5d/0x180 [ 53.365389][ T5957] ? rcu_is_watching+0x12/0xc0 [ 53.366625][ T5957] __x64_sys_bpf+0x78/0xc0 [ 53.367743][ T5957] ? lockdep_hardirqs_on+0x7c/0x110 [ 53.369036][ T5957] do_syscall_64+0xcd/0x250 [ 53.370663][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.372476][ T5957] RIP: 0033:0x7f1bf86dbe99 [ 53.373714][ T5957] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 53.378516][ T5957] RSP: 002b:00007f1bf8696228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 53.380637][ T5957] RAX: ffffffffffffffda RBX: 00007f1bf8766328 RCX: 00007f1bf86dbe99 [ 53.382598][ T5957] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 53.384925][ T5957] RBP: 00007f1bf8766320 R08: 00007f1bf86966c0 R09: 00007f1bf86966c0 [ 53.387136][ T5957] R10: 00007f1bf86966c0 R11: 0000000000000246 R12: 00007f1bf8733074 [ 53.389458][ T5957] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe730b5808 [ 53.391893][ T5957] [ 53.393266][ T5957] BUG: Bad page state in process syz-executor687 pfn:28366 [ 53.395702][ T5957] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28366 [ 53.397976][ T5957] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 53.399852][ T5957] raw: 00fff00000000000 dead000000000040 ffff888032d1e000 0000000000000000 [ 53.402325][ T5957] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 53.404662][ T5957] page dumped because: page_pool leak [ 53.405996][ T5957] page_owner tracks the page as allocated [ 53.407396][ T5957] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5957, tgid 5955 (syz-executor687), ts 44478642067, free_ts 44477468175 [ 53.411915][ T5957] post_alloc_hook+0x2d1/0x350 [ 53.413632][ T5957] get_page_from_freelist+0x101e/0x3070 [ 53.415425][ T5957] __alloc_pages_noprof+0x223/0x25a0 [ 53.416751][ T5957] alloc_pages_bulk_noprof+0x77c/0x1110 [ 53.418139][ T5957] __page_pool_alloc_pages_slow+0x18f/0x770 [ 53.419614][ T5957] page_pool_alloc_netmem+0xc4/0x160 [ 53.420999][ T5957] page_pool_alloc_pages+0x1a/0x60 [ 53.422321][ T5957] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 53.423872][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 53.425185][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 53.426525][ T5957] __sys_bpf+0xfc6/0x49a0 [ 53.427620][ T5957] __x64_sys_bpf+0x78/0xc0 [ 53.428756][ T5957] do_syscall_64+0xcd/0x250 [ 53.429976][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.431497][ T5957] page last free pid 5958 tgid 5952 stack trace: [ 53.433706][ T5957] free_unref_page+0x5f4/0xdc0 [ 53.435526][ T5957] __folio_put+0x30d/0x3d0 [ 53.436705][ T5957] put_page+0x21e/0x280 [ 53.437767][ T5957] page_pool_return_page+0x400/0x520 [ 53.439136][ T5957] page_pool_release+0xf4/0x7d0 [ 53.440435][ T5957] page_pool_destroy+0x10a/0x4c0 [ 53.441713][ T5957] bpf_test_run_xdp_live+0x3a1/0x500 [ 53.443337][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 53.444686][ T5957] __sys_bpf+0xfc6/0x49a0 [ 53.445909][ T5957] __x64_sys_bpf+0x78/0xc0 [ 53.447056][ T5957] do_syscall_64+0xcd/0x250 [ 53.448208][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.449668][ T5957] Modules linked in: [ 53.450830][ T5957] CPU: 3 UID: 0 PID: 5957 Comm: syz-executor687 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 53.454839][ T5957] Tainted: [B]=BAD_PAGE [ 53.455892][ T5957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 53.458585][ T5957] Call Trace: [ 53.459430][ T5957] [ 53.460199][ T5957] dump_stack_lvl+0x16c/0x1f0 [ 53.461408][ T5957] bad_page+0xb3/0x1f0 [ 53.462610][ T5957] ? __pfx_bad_page+0x10/0x10 [ 53.464044][ T5957] ? page_bad_reason+0x9d/0x1e0 [ 53.465284][ T5957] free_unref_page+0x657/0xdc0 [ 53.466488][ T5957] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 53.468004][ T5957] ? __phys_addr+0xc6/0x150 [ 53.469423][ T5957] skb_free_head+0xa0/0x1d0 [ 53.470596][ T5957] skb_release_data+0x560/0x730 [ 53.472027][ T5957] sk_skb_reason_drop+0x129/0x1a0 [ 53.474084][ T5957] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 53.476194][ T5957] ? kernel_text_address+0x8d/0x100 [ 53.477513][ T5957] ? hlock_class+0x4e/0x130 [ 53.478850][ T5957] ? __lock_acquire+0x163e/0x3ce0 [ 53.480190][ T5957] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 53.481970][ T5957] ? hlock_class+0x4e/0x130 [ 53.483148][ T5957] ? __lock_acquire+0xbdd/0x3ce0 [ 53.484507][ T5957] ? __pfx___lock_acquire+0x10/0x10 [ 53.486357][ T5957] __netif_receive_skb_list_core+0x357/0x950 [ 53.488125][ T5957] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 53.489776][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 53.491221][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 53.492852][ T5957] ? lock_acquire+0x2f/0xb0 [ 53.494002][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 53.495585][ T5957] netif_receive_skb_list_internal+0x753/0xdb0 [ 53.497082][ T5957] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 53.498756][ T5957] ? __pfx_eth_type_trans+0x10/0x10 [ 53.500214][ T5957] ? __build_skb_around+0x278/0x3b0 [ 53.501559][ T5957] netif_receive_skb_list+0x4f/0x4a0 [ 53.502930][ T5957] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 53.504498][ T5957] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 53.506132][ T5957] ? bpf_test_timer_continue+0x150/0x3d0 [ 53.507718][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 53.509202][ T5957] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 53.510794][ T5957] ? try_to_wake_up+0x154/0x14f0 [ 53.512172][ T5957] ? __pfx_try_to_wake_up+0x10/0x10 [ 53.514128][ T5957] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 53.515872][ T5957] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 53.517192][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 53.518520][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 53.519823][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 53.521136][ T5957] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 53.522674][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 53.524595][ T5957] ? lock_acquire+0x2f/0xb0 [ 53.525748][ T5957] ? __fget_files+0x40/0x3f0 [ 53.526936][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 53.528401][ T5957] ? fput+0x30/0x390 [ 53.529391][ T5957] ? __bpf_prog_get+0xa0/0x290 [ 53.530614][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 53.532215][ T5957] __sys_bpf+0xfc6/0x49a0 [ 53.533739][ T5957] ? find_held_lock+0x2d/0x110 [ 53.535356][ T5957] ? __pfx___sys_bpf+0x10/0x10 [ 53.536553][ T5957] ? __might_fault+0x13b/0x190 [ 53.537757][ T5957] ? __pfx_lock_release+0x10/0x10 [ 53.539031][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 53.540342][ T5957] ? lock_acquire+0x2f/0xb0 [ 53.541497][ T5957] ? __might_fault+0xe3/0x190 [ 53.542856][ T5957] ? xfd_validate_state+0x5d/0x180 [ 53.544130][ T5957] ? rcu_is_watching+0x12/0xc0 [ 53.545342][ T5957] __x64_sys_bpf+0x78/0xc0 [ 53.546481][ T5957] ? lockdep_hardirqs_on+0x7c/0x110 [ 53.548286][ T5957] do_syscall_64+0xcd/0x250 [ 53.549447][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.550963][ T5957] RIP: 0033:0x7f1bf86dbe99 [ 53.552212][ T5957] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 53.557486][ T5957] RSP: 002b:00007f1bf8696228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 53.559579][ T5957] RAX: ffffffffffffffda RBX: 00007f1bf8766328 RCX: 00007f1bf86dbe99 [ 53.561496][ T5957] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 53.563484][ T5957] RBP: 00007f1bf8766320 R08: 00007f1bf86966c0 R09: 00007f1bf86966c0 [ 53.565795][ T5957] R10: 00007f1bf86966c0 R11: 0000000000000246 R12: 00007f1bf8733074 [ 53.568123][ T5957] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe730b5808 [ 53.570376][ T5957] [ 53.571276][ T5957] BUG: Bad page state in process syz-executor687 pfn:26c22 [ 53.573597][ T5957] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888026c22e58 pfn:0x26c22 [ 53.576658][ T5957] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 53.578436][ T5957] raw: 00fff00000000000 dead000000000040 ffff888032d1e000 0000000000000000 [ 53.580849][ T5957] raw: ffff888026c22e58 0000000000000001 00000000ffffffff 0000000000000000 [ 53.583418][ T5957] page dumped because: page_pool leak [ 53.585307][ T5957] page_owner tracks the page as allocated [ 53.586926][ T5957] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5957, tgid 5955 (syz-executor687), ts 44478633670, free_ts 44477475188 [ 53.592987][ T5957] post_alloc_hook+0x2d1/0x350 [ 53.594653][ T5957] get_page_from_freelist+0x101e/0x3070 [ 53.596078][ T5957] __alloc_pages_noprof+0x223/0x25a0 [ 53.597409][ T5957] alloc_pages_bulk_noprof+0x77c/0x1110 [ 53.598778][ T5957] __page_pool_alloc_pages_slow+0x18f/0x770 [ 53.600297][ T5957] page_pool_alloc_netmem+0xc4/0x160 [ 53.601620][ T5957] page_pool_alloc_pages+0x1a/0x60 [ 53.602917][ T5957] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 53.604464][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 53.605815][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 53.607173][ T5957] __sys_bpf+0xfc6/0x49a0 [ 53.608287][ T5957] __x64_sys_bpf+0x78/0xc0 [ 53.609400][ T5957] do_syscall_64+0xcd/0x250 [ 53.610645][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.612235][ T5957] page last free pid 5958 tgid 5952 stack trace: [ 53.614438][ T5957] free_unref_page+0x5f4/0xdc0 [ 53.615741][ T5957] __folio_put+0x30d/0x3d0 [ 53.616877][ T5957] put_page+0x21e/0x280 [ 53.617944][ T5957] page_pool_return_page+0x400/0x520 [ 53.619284][ T5957] page_pool_release+0xf4/0x7d0 [ 53.620560][ T5957] page_pool_destroy+0x10a/0x4c0 [ 53.621797][ T5957] bpf_test_run_xdp_live+0x3a1/0x500 [ 53.623122][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 53.624482][ T5957] __sys_bpf+0xfc6/0x49a0 [ 53.625577][ T5957] __x64_sys_bpf+0x78/0xc0 [ 53.626716][ T5957] do_syscall_64+0xcd/0x250 [ 53.627889][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.629388][ T5957] Modules linked in: [ 53.630427][ T5957] CPU: 3 UID: 0 PID: 5957 Comm: syz-executor687 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 53.634318][ T5957] Tainted: [B]=BAD_PAGE [ 53.635602][ T5957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 53.638311][ T5957] Call Trace: [ 53.639146][ T5957] [ 53.639869][ T5957] dump_stack_lvl+0x16c/0x1f0 [ 53.641064][ T5957] bad_page+0xb3/0x1f0 [ 53.642119][ T5957] ? __pfx_bad_page+0x10/0x10 [ 53.643461][ T5957] ? page_bad_reason+0x9d/0x1e0 [ 53.644705][ T5957] free_unref_page+0x657/0xdc0 [ 53.646077][ T5957] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 53.647838][ T5957] ? __phys_addr+0xc6/0x150 [ 53.649059][ T5957] skb_free_head+0xa0/0x1d0 [ 53.650210][ T5957] skb_release_data+0x560/0x730 [ 53.651436][ T5957] sk_skb_reason_drop+0x129/0x1a0 [ 53.653028][ T5957] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 53.655408][ T5957] ? kernel_text_address+0x8d/0x100 [ 53.656737][ T5957] ? hlock_class+0x4e/0x130 [ 53.657892][ T5957] ? __lock_acquire+0x163e/0x3ce0 [ 53.659176][ T5957] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 53.660949][ T5957] ? hlock_class+0x4e/0x130 [ 53.662244][ T5957] ? __lock_acquire+0xbdd/0x3ce0 [ 53.663689][ T5957] ? __pfx___lock_acquire+0x10/0x10 [ 53.665086][ T5957] __netif_receive_skb_list_core+0x357/0x950 [ 53.666619][ T5957] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 53.668463][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 53.669803][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 53.671451][ T5957] ? lock_acquire+0x2f/0xb0 [ 53.672947][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 53.675028][ T5957] netif_receive_skb_list_internal+0x753/0xdb0 [ 53.676682][ T5957] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 53.678399][ T5957] ? __pfx_eth_type_trans+0x10/0x10 [ 53.679715][ T5957] ? __build_skb_around+0x278/0x3b0 [ 53.681047][ T5957] netif_receive_skb_list+0x4f/0x4a0 [ 53.682546][ T5957] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 53.684268][ T5957] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 53.685917][ T5957] ? bpf_test_timer_continue+0x150/0x3d0 [ 53.687322][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 53.688678][ T5957] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 53.690159][ T5957] ? try_to_wake_up+0x154/0x14f0 [ 53.691693][ T5957] ? __pfx_try_to_wake_up+0x10/0x10 [ 53.693500][ T5957] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 53.695576][ T5957] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 53.696890][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 53.698185][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 53.699490][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 53.700806][ T5957] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 53.702462][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 53.704490][ T5957] ? lock_acquire+0x2f/0xb0 [ 53.706635][ T5957] ? __fget_files+0x40/0x3f0 [ 53.708130][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 53.709581][ T5957] ? fput+0x30/0x390 [ 53.710562][ T5957] ? __bpf_prog_get+0xa0/0x290 [ 53.712371][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 53.714554][ T5957] __sys_bpf+0xfc6/0x49a0 [ 53.715893][ T5957] ? find_held_lock+0x2d/0x110 [ 53.717095][ T5957] ? __pfx___sys_bpf+0x10/0x10 [ 53.718303][ T5957] ? __might_fault+0x13b/0x190 [ 53.719540][ T5957] ? __pfx_lock_release+0x10/0x10 [ 53.720789][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 53.722124][ T5957] ? lock_acquire+0x2f/0xb0 [ 53.723262][ T5957] ? __might_fault+0xe3/0x190 [ 53.724432][ T5957] ? xfd_validate_state+0x5d/0x180 [ 53.725701][ T5957] ? rcu_is_watching+0x12/0xc0 [ 53.726898][ T5957] __x64_sys_bpf+0x78/0xc0 [ 53.728004][ T5957] ? lockdep_hardirqs_on+0x7c/0x110 [ 53.729303][ T5957] do_syscall_64+0xcd/0x250 [ 53.730587][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.732229][ T5957] RIP: 0033:0x7f1bf86dbe99 [ 53.733941][ T5957] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 53.738979][ T5957] RSP: 002b:00007f1bf8696228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 53.741062][ T5957] RAX: ffffffffffffffda RBX: 00007f1bf8766328 RCX: 00007f1bf86dbe99 [ 53.743251][ T5957] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 53.745198][ T5957] RBP: 00007f1bf8766320 R08: 00007f1bf86966c0 R09: 00007f1bf86966c0 [ 53.747145][ T5957] R10: 00007f1bf86966c0 R11: 0000000000000246 R12: 00007f1bf8733074 [ 53.749087][ T5957] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe730b5808 [ 53.751054][ T5957] [ 53.752012][ T5957] BUG: Bad page state in process syz-executor687 pfn:3210a [ 53.754552][ T5957] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3210a [ 53.756789][ T5957] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 53.758535][ T5957] raw: 00fff00000000000 dead000000000040 ffff888032d1e000 0000000000000000 [ 53.760741][ T5957] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 53.763017][ T5957] page dumped because: page_pool leak [ 53.764358][ T5957] page_owner tracks the page as allocated [ 53.765901][ T5957] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5957, tgid 5955 (syz-executor687), ts 44478619141, free_ts 44477482488 [ 53.770828][ T5957] post_alloc_hook+0x2d1/0x350 [ 53.772255][ T5957] get_page_from_freelist+0x101e/0x3070 [ 53.774171][ T5957] __alloc_pages_noprof+0x223/0x25a0 [ 53.775532][ T5957] alloc_pages_bulk_noprof+0x77c/0x1110 [ 53.777110][ T5957] __page_pool_alloc_pages_slow+0x18f/0x770 [ 53.778640][ T5957] page_pool_alloc_netmem+0xc4/0x160 [ 53.780084][ T5957] page_pool_alloc_pages+0x1a/0x60 [ 53.781365][ T5957] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 53.783187][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 53.784951][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 53.786304][ T5957] __sys_bpf+0xfc6/0x49a0 [ 53.787410][ T5957] __x64_sys_bpf+0x78/0xc0 [ 53.788850][ T5957] do_syscall_64+0xcd/0x250 [ 53.790322][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.791879][ T5957] page last free pid 5958 tgid 5952 stack trace: [ 53.794260][ T5957] free_unref_page+0x5f4/0xdc0 [ 53.796033][ T5957] __folio_put+0x30d/0x3d0 [ 53.797397][ T5957] put_page+0x21e/0x280 [ 53.798874][ T5957] page_pool_return_page+0x400/0x520 [ 53.800556][ T5957] page_pool_release+0xf4/0x7d0 [ 53.801878][ T5957] page_pool_destroy+0x10a/0x4c0 [ 53.803408][ T5957] bpf_test_run_xdp_live+0x3a1/0x500 [ 53.804942][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 53.806548][ T5957] __sys_bpf+0xfc6/0x49a0 [ 53.807757][ T5957] __x64_sys_bpf+0x78/0xc0 [ 53.808912][ T5957] do_syscall_64+0xcd/0x250 [ 53.810145][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.811659][ T5957] Modules linked in: [ 53.812981][ T5957] CPU: 3 UID: 0 PID: 5957 Comm: syz-executor687 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 53.816590][ T5957] Tainted: [B]=BAD_PAGE [ 53.817696][ T5957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 53.820664][ T5957] Call Trace: [ 53.821582][ T5957] [ 53.822473][ T5957] dump_stack_lvl+0x16c/0x1f0 [ 53.823708][ T5957] bad_page+0xb3/0x1f0 [ 53.824732][ T5957] ? __pfx_bad_page+0x10/0x10 [ 53.825952][ T5957] ? page_bad_reason+0x9d/0x1e0 [ 53.827177][ T5957] free_unref_page+0x657/0xdc0 [ 53.828398][ T5957] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 53.829910][ T5957] ? __phys_addr+0xc6/0x150 [ 53.831298][ T5957] skb_free_head+0xa0/0x1d0 [ 53.832727][ T5957] skb_release_data+0x560/0x730 [ 53.834573][ T5957] sk_skb_reason_drop+0x129/0x1a0 [ 53.835975][ T5957] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 53.837668][ T5957] ? kernel_text_address+0x8d/0x100 [ 53.838995][ T5957] ? hlock_class+0x4e/0x130 [ 53.840152][ T5957] ? __lock_acquire+0x163e/0x3ce0 [ 53.841422][ T5957] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 53.843216][ T5957] ? hlock_class+0x4e/0x130 [ 53.844828][ T5957] ? __lock_acquire+0xbdd/0x3ce0 [ 53.846107][ T5957] ? __pfx___lock_acquire+0x10/0x10 [ 53.847436][ T5957] __netif_receive_skb_list_core+0x357/0x950 [ 53.848987][ T5957] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 53.850614][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 53.851981][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 53.854149][ T5957] ? lock_acquire+0x2f/0xb0 [ 53.855562][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 53.857123][ T5957] netif_receive_skb_list_internal+0x753/0xdb0 [ 53.858671][ T5957] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 53.860407][ T5957] ? __pfx_eth_type_trans+0x10/0x10 [ 53.861787][ T5957] ? __build_skb_around+0x278/0x3b0 [ 53.863366][ T5957] netif_receive_skb_list+0x4f/0x4a0 [ 53.864894][ T5957] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 53.866656][ T5957] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 53.868409][ T5957] ? bpf_test_timer_continue+0x150/0x3d0 [ 53.869906][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 53.871335][ T5957] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 53.873195][ T5957] ? try_to_wake_up+0x154/0x14f0 [ 53.875017][ T5957] ? __pfx_try_to_wake_up+0x10/0x10 [ 53.876435][ T5957] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 53.877928][ T5957] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 53.879339][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 53.880730][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 53.882228][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 53.884044][ T5957] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 53.885637][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 53.887059][ T5957] ? lock_acquire+0x2f/0xb0 [ 53.888228][ T5957] ? __fget_files+0x40/0x3f0 [ 53.889415][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 53.890940][ T5957] ? fput+0x30/0x390 [ 53.892014][ T5957] ? __bpf_prog_get+0xa0/0x290 [ 53.893699][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 53.895794][ T5957] __sys_bpf+0xfc6/0x49a0 [ 53.897050][ T5957] ? find_held_lock+0x2d/0x110 [ 53.898256][ T5957] ? __pfx___sys_bpf+0x10/0x10 [ 53.899487][ T5957] ? __might_fault+0x13b/0x190 [ 53.900741][ T5957] ? __pfx_lock_release+0x10/0x10 [ 53.902223][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 53.903710][ T5957] ? lock_acquire+0x2f/0xb0 [ 53.905067][ T5957] ? __might_fault+0xe3/0x190 [ 53.906396][ T5957] ? xfd_validate_state+0x5d/0x180 [ 53.908127][ T5957] ? rcu_is_watching+0x12/0xc0 [ 53.909573][ T5957] __x64_sys_bpf+0x78/0xc0 [ 53.910829][ T5957] ? lockdep_hardirqs_on+0x7c/0x110 [ 53.912488][ T5957] do_syscall_64+0xcd/0x250 [ 53.914222][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.916088][ T5957] RIP: 0033:0x7f1bf86dbe99 [ 53.917217][ T5957] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 53.921970][ T5957] RSP: 002b:00007f1bf8696228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 53.924066][ T5957] RAX: ffffffffffffffda RBX: 00007f1bf8766328 RCX: 00007f1bf86dbe99 [ 53.926105][ T5957] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 53.928076][ T5957] RBP: 00007f1bf8766320 R08: 00007f1bf86966c0 R09: 00007f1bf86966c0 [ 53.930026][ T5957] R10: 00007f1bf86966c0 R11: 0000000000000246 R12: 00007f1bf8733074 [ 53.932139][ T5957] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe730b5808 [ 53.935175][ T5957] [ 53.936066][ T5957] BUG: Bad page state in process syz-executor687 pfn:2727c [ 53.937892][ T5957] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2727c [ 53.940085][ T5957] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 53.941960][ T5957] raw: 00fff00000000000 dead000000000040 ffff888032d1e000 0000000000000000 [ 53.944383][ T5957] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 53.946877][ T5957] page dumped because: page_pool leak [ 53.948344][ T5957] page_owner tracks the page as allocated [ 53.949874][ T5957] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5957, tgid 5955 (syz-executor687), ts 44478610627, free_ts 44477511373 [ 53.955302][ T5957] post_alloc_hook+0x2d1/0x350 [ 53.956531][ T5957] get_page_from_freelist+0x101e/0x3070 [ 53.957919][ T5957] __alloc_pages_noprof+0x223/0x25a0 [ 53.959284][ T5957] alloc_pages_bulk_noprof+0x77c/0x1110 [ 53.960747][ T5957] __page_pool_alloc_pages_slow+0x18f/0x770 [ 53.962249][ T5957] page_pool_alloc_netmem+0xc4/0x160 [ 53.963623][ T5957] page_pool_alloc_pages+0x1a/0x60 [ 53.965079][ T5957] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 53.966671][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 53.968000][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 53.969356][ T5957] __sys_bpf+0xfc6/0x49a0 [ 53.970515][ T5957] __x64_sys_bpf+0x78/0xc0 [ 53.971700][ T5957] do_syscall_64+0xcd/0x250 [ 53.973262][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.975369][ T5957] page last free pid 5958 tgid 5952 stack trace: [ 53.976983][ T5957] free_unref_page+0x5f4/0xdc0 [ 53.978209][ T5957] __folio_put+0x30d/0x3d0 [ 53.979370][ T5957] put_page+0x21e/0x280 [ 53.980481][ T5957] page_pool_return_page+0x400/0x520 [ 53.981852][ T5957] page_pool_release+0xf4/0x7d0 [ 53.983498][ T5957] page_pool_destroy+0x10a/0x4c0 [ 53.984818][ T5957] bpf_test_run_xdp_live+0x3a1/0x500 [ 53.986160][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 53.987521][ T5957] __sys_bpf+0xfc6/0x49a0 [ 53.988617][ T5957] __x64_sys_bpf+0x78/0xc0 [ 53.989757][ T5957] do_syscall_64+0xcd/0x250 [ 53.991005][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.992485][ T5957] Modules linked in: [ 53.993488][ T5957] CPU: 3 UID: 0 PID: 5957 Comm: syz-executor687 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 53.996597][ T5957] Tainted: [B]=BAD_PAGE [ 53.997648][ T5957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 54.000556][ T5957] Call Trace: [ 54.001431][ T5957] [ 54.002162][ T5957] dump_stack_lvl+0x16c/0x1f0 [ 54.003703][ T5957] bad_page+0xb3/0x1f0 [ 54.004788][ T5957] ? __pfx_bad_page+0x10/0x10 [ 54.005958][ T5957] ? page_bad_reason+0x9d/0x1e0 [ 54.007235][ T5957] free_unref_page+0x657/0xdc0 [ 54.008466][ T5957] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 54.010005][ T5957] ? __phys_addr+0xc6/0x150 [ 54.011190][ T5957] skb_free_head+0xa0/0x1d0 [ 54.012348][ T5957] skb_release_data+0x560/0x730 [ 54.013604][ T5957] sk_skb_reason_drop+0x129/0x1a0 [ 54.014912][ T5957] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 54.017082][ T5957] ? kernel_text_address+0x8d/0x100 [ 54.018384][ T5957] ? hlock_class+0x4e/0x130 [ 54.019546][ T5957] ? __lock_acquire+0x163e/0x3ce0 [ 54.020828][ T5957] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 54.022587][ T5957] ? hlock_class+0x4e/0x130 [ 54.023735][ T5957] ? __lock_acquire+0xbdd/0x3ce0 [ 54.024985][ T5957] ? __pfx___lock_acquire+0x10/0x10 [ 54.026286][ T5957] __netif_receive_skb_list_core+0x357/0x950 [ 54.027779][ T5957] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 54.029377][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 54.030708][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 54.032303][ T5957] ? lock_acquire+0x2f/0xb0 [ 54.033461][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 54.035092][ T5957] netif_receive_skb_list_internal+0x753/0xdb0 [ 54.036688][ T5957] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 54.038281][ T5957] ? __pfx_eth_type_trans+0x10/0x10 [ 54.039557][ T5957] ? __build_skb_around+0x278/0x3b0 [ 54.040880][ T5957] netif_receive_skb_list+0x4f/0x4a0 [ 54.042239][ T5957] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 54.043809][ T5957] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 54.045577][ T5957] ? bpf_test_timer_continue+0x150/0x3d0 [ 54.047008][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 54.048366][ T5957] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 54.049871][ T5957] ? try_to_wake_up+0x154/0x14f0 [ 54.051175][ T5957] ? __pfx_try_to_wake_up+0x10/0x10 [ 54.052484][ T5957] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 54.053979][ T5957] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 54.055541][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 54.056886][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 54.058339][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 54.059869][ T5957] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 54.061942][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 54.063522][ T5957] ? lock_acquire+0x2f/0xb0 [ 54.064723][ T5957] ? __fget_files+0x40/0x3f0 [ 54.066027][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 54.067608][ T5957] ? fput+0x30/0x390 [ 54.068620][ T5957] ? __bpf_prog_get+0xa0/0x290 [ 54.069850][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 54.071437][ T5957] __sys_bpf+0xfc6/0x49a0 [ 54.072589][ T5957] ? find_held_lock+0x2d/0x110 [ 54.073846][ T5957] ? __pfx___sys_bpf+0x10/0x10 [ 54.075094][ T5957] ? __might_fault+0x13b/0x190 [ 54.076326][ T5957] ? __pfx_lock_release+0x10/0x10 [ 54.077771][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 54.079148][ T5957] ? lock_acquire+0x2f/0xb0 [ 54.080687][ T5957] ? __might_fault+0xe3/0x190 [ 54.082086][ T5957] ? xfd_validate_state+0x5d/0x180 [ 54.083600][ T5957] ? rcu_is_watching+0x12/0xc0 [ 54.084864][ T5957] __x64_sys_bpf+0x78/0xc0 [ 54.086081][ T5957] ? lockdep_hardirqs_on+0x7c/0x110 [ 54.087572][ T5957] do_syscall_64+0xcd/0x250 [ 54.088855][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.090365][ T5957] RIP: 0033:0x7f1bf86dbe99 [ 54.091535][ T5957] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 54.096824][ T5957] RSP: 002b:00007f1bf8696228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 54.099178][ T5957] RAX: ffffffffffffffda RBX: 00007f1bf8766328 RCX: 00007f1bf86dbe99 [ 54.101756][ T5957] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 54.104016][ T5957] RBP: 00007f1bf8766320 R08: 00007f1bf86966c0 R09: 00007f1bf86966c0 [ 54.106030][ T5957] R10: 00007f1bf86966c0 R11: 0000000000000246 R12: 00007f1bf8733074 [ 54.108046][ T5957] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe730b5808 [ 54.110056][ T5957] [ 54.110961][ T5957] BUG: Bad page state in process syz-executor687 pfn:358af [ 54.112778][ T5957] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x358af [ 54.115231][ T5957] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 54.117298][ T5957] raw: 00fff00000000000 dead000000000040 ffff888032d1e000 0000000000000000 [ 54.120008][ T5957] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 54.122176][ T5957] page dumped because: page_pool leak [ 54.123821][ T5957] page_owner tracks the page as allocated [ 54.125244][ T5957] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5957, tgid 5955 (syz-executor687), ts 44478602137, free_ts 44477519372 [ 54.129504][ T5957] post_alloc_hook+0x2d1/0x350 [ 54.130833][ T5957] get_page_from_freelist+0x101e/0x3070 [ 54.132255][ T5957] __alloc_pages_noprof+0x223/0x25a0 [ 54.133605][ T5957] alloc_pages_bulk_noprof+0x77c/0x1110 [ 54.135390][ T5957] __page_pool_alloc_pages_slow+0x18f/0x770 [ 54.137029][ T5957] page_pool_alloc_netmem+0xc4/0x160 [ 54.138417][ T5957] page_pool_alloc_pages+0x1a/0x60 [ 54.139733][ T5957] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 54.141482][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 54.143445][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 54.144947][ T5957] __sys_bpf+0xfc6/0x49a0 [ 54.146381][ T5957] __x64_sys_bpf+0x78/0xc0 [ 54.147850][ T5957] do_syscall_64+0xcd/0x250 [ 54.149364][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.151341][ T5957] page last free pid 5958 tgid 5952 stack trace: [ 54.153406][ T5957] free_unref_page+0x5f4/0xdc0 [ 54.154932][ T5957] __folio_put+0x30d/0x3d0 [ 54.156143][ T5957] put_page+0x21e/0x280 [ 54.157225][ T5957] page_pool_return_page+0x400/0x520 [ 54.158613][ T5957] page_pool_release+0xf4/0x7d0 [ 54.159888][ T5957] page_pool_destroy+0x10a/0x4c0 [ 54.161329][ T5957] bpf_test_run_xdp_live+0x3a1/0x500 [ 54.162750][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 54.164342][ T5957] __sys_bpf+0xfc6/0x49a0 [ 54.165488][ T5957] __x64_sys_bpf+0x78/0xc0 [ 54.166625][ T5957] do_syscall_64+0xcd/0x250 [ 54.167816][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.169322][ T5957] Modules linked in: [ 54.170391][ T5957] CPU: 3 UID: 0 PID: 5957 Comm: syz-executor687 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 54.173495][ T5957] Tainted: [B]=BAD_PAGE [ 54.174537][ T5957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 54.177166][ T5957] Call Trace: [ 54.178012][ T5957] [ 54.179000][ T5957] dump_stack_lvl+0x16c/0x1f0 [ 54.180483][ T5957] bad_page+0xb3/0x1f0 [ 54.181824][ T5957] ? __pfx_bad_page+0x10/0x10 [ 54.183101][ T5957] ? page_bad_reason+0x9d/0x1e0 [ 54.184351][ T5957] free_unref_page+0x657/0xdc0 [ 54.185579][ T5957] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 54.187109][ T5957] ? __phys_addr+0xc6/0x150 [ 54.188262][ T5957] skb_free_head+0xa0/0x1d0 [ 54.189429][ T5957] skb_release_data+0x560/0x730 [ 54.190692][ T5957] sk_skb_reason_drop+0x129/0x1a0 [ 54.191994][ T5957] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 54.193684][ T5957] ? kernel_text_address+0x8d/0x100 [ 54.195004][ T5957] ? hlock_class+0x4e/0x130 [ 54.196153][ T5957] ? __lock_acquire+0x163e/0x3ce0 [ 54.197405][ T5957] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 54.199483][ T5957] ? hlock_class+0x4e/0x130 [ 54.200748][ T5957] ? __lock_acquire+0xbdd/0x3ce0 [ 54.201999][ T5957] ? __pfx___lock_acquire+0x10/0x10 [ 54.203337][ T5957] __netif_receive_skb_list_core+0x357/0x950 [ 54.204942][ T5957] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 54.206604][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 54.207928][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 54.209504][ T5957] ? lock_acquire+0x2f/0xb0 [ 54.210657][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 54.212260][ T5957] netif_receive_skb_list_internal+0x753/0xdb0 [ 54.213867][ T5957] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 54.215814][ T5957] ? __pfx_eth_type_trans+0x10/0x10 [ 54.217135][ T5957] ? __build_skb_around+0x278/0x3b0 [ 54.218481][ T5957] netif_receive_skb_list+0x4f/0x4a0 [ 54.219835][ T5957] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 54.221419][ T5957] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 54.223072][ T5957] ? bpf_test_timer_continue+0x150/0x3d0 [ 54.224579][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 54.225928][ T5957] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 54.227408][ T5957] ? try_to_wake_up+0x154/0x14f0 [ 54.228669][ T5957] ? __pfx_try_to_wake_up+0x10/0x10 [ 54.229996][ T5957] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 54.231532][ T5957] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 54.232884][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 54.234203][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 54.235769][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 54.237282][ T5957] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 54.238944][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 54.240336][ T5957] ? lock_acquire+0x2f/0xb0 [ 54.241512][ T5957] ? __fget_files+0x40/0x3f0 [ 54.242716][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 54.244181][ T5957] ? fput+0x30/0x390 [ 54.245192][ T5957] ? __bpf_prog_get+0xa0/0x290 [ 54.246419][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 54.248041][ T5957] __sys_bpf+0xfc6/0x49a0 [ 54.249227][ T5957] ? find_held_lock+0x2d/0x110 [ 54.250452][ T5957] ? __pfx___sys_bpf+0x10/0x10 [ 54.251669][ T5957] ? __might_fault+0x13b/0x190 [ 54.252898][ T5957] ? __pfx_lock_release+0x10/0x10 [ 54.254163][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 54.255780][ T5957] ? lock_acquire+0x2f/0xb0 [ 54.257074][ T5957] ? __might_fault+0xe3/0x190 [ 54.258523][ T5957] ? xfd_validate_state+0x5d/0x180 [ 54.260069][ T5957] ? rcu_is_watching+0x12/0xc0 [ 54.261296][ T5957] __x64_sys_bpf+0x78/0xc0 [ 54.262654][ T5957] ? lockdep_hardirqs_on+0x7c/0x110 [ 54.264173][ T5957] do_syscall_64+0xcd/0x250 [ 54.265499][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.267045][ T5957] RIP: 0033:0x7f1bf86dbe99 [ 54.268191][ T5957] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 54.272970][ T5957] RSP: 002b:00007f1bf8696228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 54.275124][ T5957] RAX: ffffffffffffffda RBX: 00007f1bf8766328 RCX: 00007f1bf86dbe99 [ 54.277099][ T5957] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 54.279289][ T5957] RBP: 00007f1bf8766320 R08: 00007f1bf86966c0 R09: 00007f1bf86966c0 [ 54.281505][ T5957] R10: 00007f1bf86966c0 R11: 0000000000000246 R12: 00007f1bf8733074 [ 54.283659][ T5957] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe730b5808 [ 54.285818][ T5957] [ 54.286722][ T5957] BUG: Bad page state in process syz-executor687 pfn:27cf2 [ 54.288575][ T5957] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888027cf2600 pfn:0x27cf2 [ 54.291167][ T5957] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 54.292892][ T5957] raw: 00fff00000000000 dead000000000040 ffff888032d1e000 0000000000000000 [ 54.295139][ T5957] raw: ffff888027cf2600 0000000000000001 00000000ffffffff 0000000000000000 [ 54.297358][ T5957] page dumped because: page_pool leak [ 54.298952][ T5957] page_owner tracks the page as allocated [ 54.300742][ T5957] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5957, tgid 5955 (syz-executor687), ts 44478593245, free_ts 44477526430 [ 54.305107][ T5957] post_alloc_hook+0x2d1/0x350 [ 54.306330][ T5957] get_page_from_freelist+0x101e/0x3070 [ 54.307739][ T5957] __alloc_pages_noprof+0x223/0x25a0 [ 54.309078][ T5957] alloc_pages_bulk_noprof+0x77c/0x1110 [ 54.310545][ T5957] __page_pool_alloc_pages_slow+0x18f/0x770 [ 54.312237][ T5957] page_pool_alloc_netmem+0xc4/0x160 [ 54.313632][ T5957] page_pool_alloc_pages+0x1a/0x60 [ 54.314975][ T5957] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 54.316586][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 54.318058][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 54.319509][ T5957] __sys_bpf+0xfc6/0x49a0 [ 54.320974][ T5957] __x64_sys_bpf+0x78/0xc0 [ 54.322212][ T5957] do_syscall_64+0xcd/0x250 [ 54.323600][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.325264][ T5957] page last free pid 5958 tgid 5952 stack trace: [ 54.326864][ T5957] free_unref_page+0x5f4/0xdc0 [ 54.328061][ T5957] __folio_put+0x30d/0x3d0 [ 54.329194][ T5957] put_page+0x21e/0x280 [ 54.330394][ T5957] page_pool_return_page+0x400/0x520 [ 54.331774][ T5957] page_pool_release+0xf4/0x7d0 [ 54.333005][ T5957] page_pool_destroy+0x10a/0x4c0 [ 54.334277][ T5957] bpf_test_run_xdp_live+0x3a1/0x500 [ 54.335821][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 54.337207][ T5957] __sys_bpf+0xfc6/0x49a0 [ 54.338808][ T5957] __x64_sys_bpf+0x78/0xc0 [ 54.340093][ T5957] do_syscall_64+0xcd/0x250 [ 54.341406][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.343007][ T5957] Modules linked in: [ 54.344112][ T5957] CPU: 3 UID: 0 PID: 5957 Comm: syz-executor687 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 54.347341][ T5957] Tainted: [B]=BAD_PAGE [ 54.348439][ T5957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 54.351128][ T5957] Call Trace: [ 54.352006][ T5957] [ 54.352773][ T5957] dump_stack_lvl+0x16c/0x1f0 [ 54.353972][ T5957] bad_page+0xb3/0x1f0 [ 54.355037][ T5957] ? __pfx_bad_page+0x10/0x10 [ 54.356251][ T5957] ? page_bad_reason+0x9d/0x1e0 [ 54.357491][ T5957] free_unref_page+0x657/0xdc0 [ 54.358697][ T5957] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 54.360239][ T5957] ? __phys_addr+0xc6/0x150 [ 54.361390][ T5957] skb_free_head+0xa0/0x1d0 [ 54.362538][ T5957] skb_release_data+0x560/0x730 [ 54.363770][ T5957] sk_skb_reason_drop+0x129/0x1a0 [ 54.365027][ T5957] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 54.366683][ T5957] ? kernel_text_address+0x8d/0x100 [ 54.368021][ T5957] ? hlock_class+0x4e/0x130 [ 54.369177][ T5957] ? __lock_acquire+0x163e/0x3ce0 [ 54.370452][ T5957] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 54.372243][ T5957] ? hlock_class+0x4e/0x130 [ 54.373404][ T5957] ? __lock_acquire+0xbdd/0x3ce0 [ 54.374655][ T5957] ? __pfx___lock_acquire+0x10/0x10 [ 54.375958][ T5957] __netif_receive_skb_list_core+0x357/0x950 [ 54.377488][ T5957] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 54.379131][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 54.380437][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 54.382042][ T5957] ? lock_acquire+0x2f/0xb0 [ 54.383200][ T5957] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 54.384809][ T5957] netif_receive_skb_list_internal+0x753/0xdb0 [ 54.386389][ T5957] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 54.388075][ T5957] ? __pfx_eth_type_trans+0x10/0x10 [ 54.389375][ T5957] ? __build_skb_around+0x278/0x3b0 [ 54.390704][ T5957] netif_receive_skb_list+0x4f/0x4a0 [ 54.392056][ T5957] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 54.393632][ T5957] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 54.395293][ T5957] ? bpf_test_timer_continue+0x150/0x3d0 [ 54.396702][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 54.398021][ T5957] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 54.399498][ T5957] ? try_to_wake_up+0x154/0x14f0 [ 54.400761][ T5957] ? __pfx_try_to_wake_up+0x10/0x10 [ 54.402093][ T5957] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 54.403597][ T5957] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 54.404941][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 54.406274][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 54.407628][ T5957] ? bpf_dispatcher_xdp+0x800/0x1000 [ 54.408964][ T5957] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 54.410464][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 54.411870][ T5957] ? lock_acquire+0x2f/0xb0 [ 54.413026][ T5957] ? __fget_files+0x40/0x3f0 [ 54.414353][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 54.415856][ T5957] ? fput+0x30/0x390 [ 54.416874][ T5957] ? __bpf_prog_get+0xa0/0x290 [ 54.418109][ T5957] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 54.419612][ T5957] __sys_bpf+0xfc6/0x49a0 [ 54.420729][ T5957] ? find_held_lock+0x2d/0x110 [ 54.421957][ T5957] ? __pfx___sys_bpf+0x10/0x10 [ 54.423184][ T5957] ? __might_fault+0x13b/0x190 [ 54.424433][ T5957] ? __pfx_lock_release+0x10/0x10 [ 54.425725][ T5957] ? trace_lock_acquire+0x14a/0x1d0 [ 54.427050][ T5957] ? lock_acquire+0x2f/0xb0 [ 54.428206][ T5957] ? __might_fault+0xe3/0x190 [ 54.429416][ T5957] ? xfd_validate_state+0x5d/0x180 [ 54.430763][ T5957] ? rcu_is_watching+0x12/0xc0 [ 54.431983][ T5957] __x64_sys_bpf+0x78/0xc0 [ 54.433127][ T5957] ? lockdep_hardirqs_on+0x7c/0x110 [ 54.434434][ T5957] do_syscall_64+0xcd/0x250 [ 54.435605][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.437131][ T5957] RIP: 0033:0x7f1bf86dbe99 [ 54.438285][ T5957] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 54.443101][ T5957] RSP: 002b:00007f1bf8696228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 54.445163][ T5957] RAX: ffffffffffffffda RBX: 00007f1bf8766328 RCX: 00007f1bf86dbe99 [ 54.447268][ T5957] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 54.449255][ T5957] RBP: 00007f1bf8766320 R08: 00007f1bf86966c0 R09: 00007f1bf86966c0 [ 54.451284][ T5957] R10: 00007f1bf86966c0 R11: 0000000000000246 R12: 00007f1bf8733074 [ 54.453271][ T5957] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007ffe730b5808 [ 54.455296][ T5957] [ 54.456215][ T5957] BUG: Bad page state in process syz-executor687 pfn:3441c [ 54.458036][ T5957] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3441c [ 54.460313][ T5957] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 54.462134][ T5957] raw: 00fff00000000000 dead000000000040 ffff888032d1e000 0000000000000000 [ 54.464300][ T5957] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 54.466441][ T5957] page dumped because: page_pool leak [ 54.467787][ T5957] page_owner tracks the page as allocated [ 54.469308][ T5957] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5957, tgid 5955 (syz-executor687), ts 44478584872, free_ts 44477533432 [ 54.473823][ T5957] post_alloc_hook+0x2d1/0x350 [ 54.475047][ T5957] get_page_from_freelist+0x101e/0x3070 [ 54.476458][ T5957] __alloc_pages_noprof+0x223/0x25a0 [ 54.477802][ T5957] alloc_pages_bulk_noprof+0x77c/0x1110 [ 54.479214][ T5957] __page_pool_alloc_pages_slow+0x18f/0x770 [ 54.480731][ T5957] page_pool_alloc_netmem+0xc4/0x160 [ 54.482066][ T5957] page_pool_alloc_pages+0x1a/0x60 [ 54.483461][ T5957] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 54.485245][ T5957] bpf_test_run_xdp_live+0x365/0x500 [ 54.486640][ T5957] bpf_prog_test_run_xdp+0x827/0x1580 [ 54.488170][ T5957] __sys_bpf+0xfc6/0x49a0 [ 54.489409][ T5957] __x64_sys_bpf+0x78/0xc0 [ 54.490623][ T5957] do_syscall_64+0xcd/0x250 [ 54.491787][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.493271][ T5957] page last free pid 5958 tgid 5952 stack trace: [ 54.494969][ T5957] free_unref_page+0x5f4/0xdc0 [ 54.496226][ T5957] __folio_put+0x30d/0x3d0 [ 54.497353][ T5957] put_page+0x21e/0x280 [ 54.498414][ T5957] page_pool_return_page+0x400/0x520 [ 54.499760][ T5957] page_pool_release+0xf4/0x7d0 [ 54.501064][ T5957] page_pool_destroy+0x10a/0x4c0 VM DIAGNOSIS: 16:22:43 Registers: info registers vcpu 0 CPU#0 RAX=00000000000926fd RBX=0000000000000000 RCX=ffffffff8b2305e9 RDX=0000000000000000 RSI=ffffffff8b6cd040 RDI=ffffffff8bd1ad40 RBP=fffffbfff1bd2af8 RSP=ffffffff8de07e20 R8 =0000000000000001 R9 =ffffed100d4c7025 R10=ffff88806a63812b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8de957c0 R14=ffffffff905f5088 R15=0000000000000000 RIP=ffffffff8b2319cf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055555c8bdce8 CR3=00000000249e6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000400000 Opmask01=0000000000000001 Opmask02=00000000fff7ffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1bf876bee0 00007f1bf876bee0 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1bf876bed0 00007f1bf876bed0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1bf876c6a8 00007f1bf8760590 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1bf874fde4 00007f1bf8765260 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 746f6f723d524553 5500333730333833 373836726f747563 6578652d7a79732f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=ffff8880324a2ba0 RCX=ffffffff8b113248 RDX=0000000000000001 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000001 RSP=ffffc900038d7478 R8 =0000000000000005 R9 =0000000000000003 R10=0000000000000001 R11=0000000000000000 R12=ffff8880251d1340 R13=0000000000000000 R14=0000000000000004 R15=00007f4cca5d1fff RIP=ffffffff818d7cc0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4cca477270 CR3=000000002df86000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffffffffffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000039c7d RBX=0000000000000002 RCX=ffffffff8b2305e9 RDX=0000000000000000 RSI=ffffffff8b6cd040 RDI=ffffffff8bd1ad40 RBP=ffffed1003bd9000 RSP=ffffc90000197e08 R8 =0000000000000001 R9 =ffffed100d507025 R10=ffff88806a83812b R11=0000000000000000 R12=0000000000000002 R13=ffff88801dec8000 R14=ffffffff905f5088 R15=0000000000000000 RIP=ffffffff8b2319cf RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020000b60 CR3=0000000028598000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000400000 Opmask01=0000000000000001 Opmask02=00000000fff7ffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1bf876bee0 00007f1bf876bee0 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1bf876bed0 00007f1bf876bed0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1bf876c6a8 00007f1bf8760590 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1bf874fde4 00007f1bf8765260 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 746f6f723d524553 5500333730333833 373836726f747563 6578652d7a79732f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000000a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff850b46e5 RDI=ffffffff9aae7bc0 RBP=ffffffff9aae7b80 RSP=ffffc900043e6990 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=000000000000000a R14=ffffffff850b4680 R15=0000000000000000 RIP=ffffffff850b470f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f1bf86966c0 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000000000000 CR3=000000002766c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000400000 Opmask01=0000000000000001 Opmask02=00000000fff7ffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1bf876bee0 00007f1bf876bee0 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1bf876bed0 00007f1bf876bed0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1bf876c6a8 00007f1bf8760590 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1bf874fde4 00007f1bf8765260 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 746f6f723d524553 5500333730333833 373836726f747563 6578652d7a79732f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000