program: syz_mount_image$squashfs(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0), 0x1, 0x222, &(0x7f0000000000)="$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") memfd_create(&(0x7f0000000f40)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\xff\xff\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xab\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A\xc0\x00\x00\x00\xde\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\xff\x0f\x00\x00\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5U\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262-\x00\x00\x00\x00\xc8X\xdaNz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x00\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[R\xc36b\xa2]\xed\xe8\xb0\xfa\"\xa2\xd27)\xd5yQ\xff\x9e\r\xd5w\xebf$>\xfb\xb2\xa0-\xcd\xa5\xbe}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x00P\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8f#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\xf6]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1n 1\x8d \xc1\xaf\x19\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe5\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00KT2\x1b\x16=\x10\xd3\x9a\xf0\xb7>\xfc\xa83\x05\x02+\xfcy\xd87\xd7\xf8\x81\x92\x9b\x86\x11=\xbb\xdf(a~\x7f3\xc4\xcb\xaa\xb9tVu\t\xe7^z\xee\xf9\xb4\r\xc9\xa6\xb7m\xbdY\x8b\xe5\xdf2\xbb\xd4\x05\x90>\x16,m\xebm\xf8g\xe8\bH\x11\xde\t\xd7\xdd\xc5\xc9\x9f\xcft\x9a\xef\xbb\x04%\xd3c\x03\r\aA\x89zg\xf67\xc3\xb9l\x0f\x93\xb8X<\x95\xb3\xfe\x9bfs\x9b\x00\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc2, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000000d80)=ANY=[@ANYBLOB="6465636f6d706f73652c756d61736b3d30303030303030303030303030303030303033333536372c73657373696f6e3d3078666666666666666666666666666637662c63726561746f723da54522892c63726561746f723dddf2bd6c2c6e6f6465636f6d706f73652c7569643d", @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030312c63726561746f723d85f194712c626172726965722c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB="2c0400000000000000e8bd380072726965722c7569643d755d91b1ce56569b961a6aed1c90fd4f4cf6d11bf1fb9d319c201b82ff5a3dae77099c11a21ab64150db91d6bc5f", @ANYRESHEX=0x0, @ANYBLOB=',nls=utf8,barrier,uid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00'], 0x1, 0x6de, &(0x7f00000003c0)="$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") syz_mount_image$bcachefs(&(0x7f00000058c0), &(0x7f0000005900)='./file0\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="645073636172642c00d6293f5b2f36e21adf186684dda74a466eef0b9444df0cf4bdab70c5ba55712608"], 0x1, 0x58d8, &(0x7f000000b240)="$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") setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000013c0)=ANY=[@ANYBLOB='osx.'], 0x0, 0x0, 0x0) [ 81.904926][ T5098] Bluetooth: hci0: command tx timeout [ 82.007676][ T5111] loop0: detected capacity change from 0 to 8 [ 82.060835][ T5111] SQUASHFS error: xz decompression failed, data probably corrupt [ 82.064082][ T5111] SQUASHFS error: Failed to read block 0x108: -5 [ 82.075675][ T5111] SQUASHFS error: Unable to read metadata cache entry [106] [ 82.079392][ T5111] SQUASHFS error: Unable to read inode 0x11f [ 82.232537][ T5112] BUG: Bad page state in process syz.0.0 pfn:1208e [ 82.235355][ T5112] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1208e [ 82.239297][ T5112] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 82.242795][ T5112] raw: 00fff00000000000 dead000000000040 ffff88804b2a2000 0000000000000000 [ 82.246357][ T5112] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 82.249431][ T5112] page dumped because: page_pool leak [ 82.251333][ T5112] page_owner tracks the page as allocated [ 82.253872][ T5112] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5112, tgid 5110 (syz.0.0), ts 82204550043, free_ts 82088118300 [ 82.261580][ T5112] post_alloc_hook+0x1f3/0x230 [ 82.263603][ T5112] get_page_from_freelist+0x3045/0x3190 [ 82.265833][ T5112] __alloc_pages_noprof+0x292/0x710 [ 82.268075][ T5112] alloc_pages_bulk_noprof+0x729/0xd40 [ 82.270485][ T5112] __page_pool_alloc_pages_slow+0x122/0x690 [ 82.273598][ T5112] page_pool_alloc_pages+0xd0/0x1c0 [ 82.275991][ T5112] bpf_test_run_xdp_live+0x950/0x2160 [ 82.277754][ T5112] bpf_prog_test_run_xdp+0x805/0x11e0 [ 82.279675][ T5112] bpf_prog_test_run+0x2e4/0x360 [ 82.281740][ T5112] __sys_bpf+0x48d/0x810 [ 82.283614][ T5112] __x64_sys_bpf+0x7c/0x90 [ 82.285684][ T5112] do_syscall_64+0xf3/0x230 [ 82.287775][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.290177][ T5112] page last free pid 9 tgid 9 stack trace: [ 82.292474][ T5112] free_unref_page+0xcfb/0xf20 [ 82.294464][ T5112] __slab_free+0x31b/0x3d0 [ 82.296479][ T5112] qlist_free_all+0x9a/0x140 [ 82.298317][ T5112] kasan_quarantine_reduce+0x14f/0x170 [ 82.300288][ T5112] __kasan_kmalloc+0x23/0xb0 [ 82.302104][ T5112] __kmalloc_node_track_caller_noprof+0x225/0x440 [ 82.305047][ T5112] kmalloc_reserve+0x111/0x2a0 [ 82.308185][ T5112] __alloc_skb+0x1f3/0x440 [ 82.310245][ T5112] alloc_skb_with_frags+0xc3/0x820 [ 82.312350][ T5112] sock_alloc_send_pskb+0x91a/0xa60 [ 82.314768][ T5112] mld_newpack+0x1c3/0xa90 [ 82.316858][ T5112] add_grec+0x1492/0x19a0 [ 82.319125][ T5112] mld_send_initial_cr+0x228/0x4b0 [ 82.321462][ T5112] mld_dad_work+0x44/0x500 [ 82.323667][ T5112] process_scheduled_works+0xa63/0x1850 [ 82.326521][ T5112] worker_thread+0x870/0xd30 [ 82.328771][ T5112] Modules linked in: [ 82.330632][ T5112] CPU: 0 UID: 0 PID: 5112 Comm: syz.0.0 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 82.335208][ T5112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 82.340044][ T5112] Call Trace: [ 82.341327][ T5112] [ 82.342595][ T5112] dump_stack_lvl+0x241/0x360 [ 82.344490][ T5112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 82.346608][ T5112] ? __pfx_print_modules+0x10/0x10 [ 82.348624][ T5112] ? pcpu_memcg_post_alloc_hook+0x12a/0x720 [ 82.351182][ T5112] bad_page+0x166/0x1b0 [ 82.353208][ T5112] free_unref_page+0xed0/0xf20 [ 82.355605][ T5112] skb_release_data+0x6dc/0x8a0 [ 82.358149][ T5112] sk_skb_reason_drop+0x1c9/0x380 [ 82.360054][ T5112] __netif_receive_skb_core+0x3edd/0x4570 [ 82.362110][ T5112] ? mark_lock+0x9a/0x360 [ 82.363633][ T5112] ? __lock_acquire+0x1384/0x2050 [ 82.365600][ T5112] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 82.367973][ T5112] ? mark_lock+0x9a/0x360 [ 82.369806][ T5112] ? __lock_acquire+0x1384/0x2050 [ 82.371947][ T5112] __netif_receive_skb_list_core+0x2b1/0x980 [ 82.374609][ T5112] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 82.377317][ T5112] ? timekeeping_get_ns+0x2c0/0x420 [ 82.379293][ T5112] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 82.381779][ T5112] netif_receive_skb_list_internal+0xa51/0xe30 [ 82.384207][ T5112] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 82.386737][ T5112] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 82.389406][ T5112] ? __pfx_eth_type_trans+0x10/0x10 [ 82.391882][ T5112] ? __phys_addr+0xba/0x170 [ 82.394187][ T5112] ? build_skb_around+0x111/0x260 [ 82.396478][ T5112] ? __xdp_build_skb_from_frame+0x338/0x650 [ 82.399302][ T5112] netif_receive_skb_list+0x55/0x4b0 [ 82.401228][ T5112] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 82.403077][ T5112] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 82.404974][ T5112] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 82.406913][ T5112] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 82.409213][ T5112] ? synchronize_rcu+0x11b/0x360 [ 82.411482][ T5112] ? __pfx_synchronize_rcu+0x10/0x10 [ 82.413753][ T5112] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 82.416430][ T5112] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 82.418788][ T5112] ? _copy_from_user+0xa6/0xe0 [ 82.421005][ T5112] ? bpf_test_init+0x15a/0x180 [ 82.423099][ T5112] ? xdp_convert_md_to_buff+0x5b/0x330 [ 82.425679][ T5112] bpf_prog_test_run_xdp+0x805/0x11e0 [ 82.428954][ T5112] ? __pfx_lock_release+0x10/0x10 [ 82.431625][ T5112] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 82.433941][ T5112] ? __fget_files+0x29/0x470 [ 82.435664][ T5112] ? fput+0x1a8/0x230 [ 82.437031][ T5112] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 82.439126][ T5112] bpf_prog_test_run+0x2e4/0x360 [ 82.440932][ T5112] __sys_bpf+0x48d/0x810 [ 82.442293][ T5112] ? __pfx___sys_bpf+0x10/0x10 [ 82.443729][ T5112] ? __rseq_handle_notify_resume+0x353/0x14e0 [ 82.446126][ T5112] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 82.448874][ T5112] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 82.451528][ T5112] ? do_syscall_64+0x100/0x230 [ 82.453458][ T5112] __x64_sys_bpf+0x7c/0x90 [ 82.455256][ T5112] do_syscall_64+0xf3/0x230 [ 82.457102][ T5112] ? clear_bhb_loop+0x35/0x90 [ 82.458910][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.461275][ T5112] RIP: 0033:0x7ff7a817dff9 [ 82.463730][ T5112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.472267][ T5112] RSP: 002b:00007ff7a8eb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 82.475830][ T5112] RAX: ffffffffffffffda RBX: 00007ff7a8336058 RCX: 00007ff7a817dff9 [ 82.478219][ T5112] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 82.480571][ T5112] RBP: 00007ff7a81f0296 R08: 0000000000000000 R09: 0000000000000000 [ 82.483170][ T5112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.486325][ T5112] R13: 0000000000000000 R14: 00007ff7a8336058 R15: 00007ffe3304be48 [ 82.489026][ T5112] [ 82.490113][ T5112] Disabling lock debugging due to kernel taint [ 82.492157][ T5112] BUG: Bad page state in process syz.0.0 pfn:1208d [ 82.494340][ T5112] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1208d [ 82.497615][ T5112] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 82.501095][ T5112] raw: 00fff00000000000 dead000000000040 ffff88804b2a2000 0000000000000000 [ 82.506900][ T5112] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 82.510537][ T5112] page dumped because: page_pool leak [ 82.512678][ T5112] page_owner tracks the page as allocated [ 82.514795][ T5112] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5112, tgid 5110 (syz.0.0), ts 82204544031, free_ts 82088118300 [ 82.521218][ T5112] post_alloc_hook+0x1f3/0x230 [ 82.523460][ T5112] get_page_from_freelist+0x3045/0x3190 [ 82.527438][ T5112] __alloc_pages_noprof+0x292/0x710 [ 82.529884][ T5112] alloc_pages_bulk_noprof+0x729/0xd40 [ 82.532063][ T5112] __page_pool_alloc_pages_slow+0x122/0x690 [ 82.534330][ T5112] page_pool_alloc_pages+0xd0/0x1c0 [ 82.536526][ T5112] bpf_test_run_xdp_live+0x950/0x2160 [ 82.538618][ T5112] bpf_prog_test_run_xdp+0x805/0x11e0 [ 82.540689][ T5112] bpf_prog_test_run+0x2e4/0x360 [ 82.543045][ T5112] __sys_bpf+0x48d/0x810 [ 82.545767][ T5112] __x64_sys_bpf+0x7c/0x90 [ 82.548178][ T5112] do_syscall_64+0xf3/0x230 [ 82.549705][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.551758][ T5112] page last free pid 9 tgid 9 stack trace: [ 82.553972][ T5112] free_unref_page+0xcfb/0xf20 [ 82.555980][ T5112] __slab_free+0x31b/0x3d0 [ 82.557834][ T5112] qlist_free_all+0x9a/0x140 [ 82.560061][ T5112] kasan_quarantine_reduce+0x14f/0x170 [ 82.563161][ T5112] __kasan_kmalloc+0x23/0xb0 [ 82.565606][ T5112] __kmalloc_node_track_caller_noprof+0x225/0x440 [ 82.568292][ T5112] kmalloc_reserve+0x111/0x2a0 [ 82.570080][ T5112] __alloc_skb+0x1f3/0x440 [ 82.571758][ T5112] alloc_skb_with_frags+0xc3/0x820 [ 82.573604][ T5112] sock_alloc_send_pskb+0x91a/0xa60 [ 82.575700][ T5112] mld_newpack+0x1c3/0xa90 [ 82.577539][ T5112] add_grec+0x1492/0x19a0 [ 82.579830][ T5112] mld_send_initial_cr+0x228/0x4b0 [ 82.582761][ T5112] mld_dad_work+0x44/0x500 [ 82.584957][ T5112] process_scheduled_works+0xa63/0x1850 [ 82.587168][ T5112] worker_thread+0x870/0xd30 [ 82.588675][ T5112] Modules linked in: [ 82.590153][ T5112] CPU: 0 UID: 0 PID: 5112 Comm: syz.0.0 Tainted: G B 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 82.594619][ T5112] Tainted: [B]=BAD_PAGE [ 82.596473][ T5112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 82.601965][ T5112] Call Trace: [ 82.603580][ T5112] [ 82.604558][ T5112] dump_stack_lvl+0x241/0x360 [ 82.606476][ T5112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 82.608542][ T5112] ? __pfx_print_modules+0x10/0x10 [ 82.610596][ T5112] bad_page+0x166/0x1b0 [ 82.612201][ T5112] free_unref_page+0xed0/0xf20 [ 82.613974][ T5112] skb_release_data+0x6dc/0x8a0 [ 82.617647][ T5112] sk_skb_reason_drop+0x1c9/0x380 [ 82.620098][ T5112] __netif_receive_skb_core+0x3edd/0x4570 [ 82.622424][ T5112] ? mark_lock+0x9a/0x360 [ 82.623914][ T5112] ? __lock_acquire+0x1384/0x2050 [ 82.625640][ T5112] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 82.627820][ T5112] ? mark_lock+0x9a/0x360 [ 82.629551][ T5112] ? __lock_acquire+0x1384/0x2050 [ 82.631495][ T5112] __netif_receive_skb_list_core+0x2b1/0x980 [ 82.634462][ T5112] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 82.637954][ T5112] ? timekeeping_get_ns+0x2c0/0x420 [ 82.640399][ T5112] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 82.642692][ T5112] netif_receive_skb_list_internal+0xa51/0xe30 [ 82.644998][ T5112] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 82.647390][ T5112] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 82.650237][ T5112] ? __pfx_eth_type_trans+0x10/0x10 [ 82.652403][ T5112] ? __phys_addr+0xba/0x170 [ 82.654677][ T5112] ? build_skb_around+0x111/0x260 [ 82.656810][ T5112] ? __xdp_build_skb_from_frame+0x338/0x650 [ 82.659346][ T5112] netif_receive_skb_list+0x55/0x4b0 [ 82.661238][ T5112] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 82.663472][ T5112] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 82.665522][ T5112] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 82.667564][ T5112] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 82.669366][ T5112] ? synchronize_rcu+0x11b/0x360 [ 82.670996][ T5112] ? __pfx_synchronize_rcu+0x10/0x10 [ 82.672942][ T5112] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 82.675422][ T5112] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 82.678754][ T5112] ? _copy_from_user+0xa6/0xe0 [ 82.681391][ T5112] ? bpf_test_init+0x15a/0x180 [ 82.683245][ T5112] ? xdp_convert_md_to_buff+0x5b/0x330 [ 82.685271][ T5112] bpf_prog_test_run_xdp+0x805/0x11e0 [ 82.687253][ T5112] ? __pfx_lock_release+0x10/0x10 [ 82.689202][ T5112] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 82.691538][ T5112] ? __fget_files+0x29/0x470 [ 82.694125][ T5112] ? fput+0x1a8/0x230 [ 82.696387][ T5112] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 82.698856][ T5112] bpf_prog_test_run+0x2e4/0x360 [ 82.700780][ T5112] __sys_bpf+0x48d/0x810 [ 82.702379][ T5112] ? __pfx___sys_bpf+0x10/0x10 [ 82.704491][ T5112] ? __rseq_handle_notify_resume+0x353/0x14e0 [ 82.707429][ T5112] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 82.710108][ T5112] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 82.712776][ T5112] ? do_syscall_64+0x100/0x230 [ 82.714742][ T5112] __x64_sys_bpf+0x7c/0x90 [ 82.716576][ T5112] do_syscall_64+0xf3/0x230 [ 82.718429][ T5112] ? clear_bhb_loop+0x35/0x90 [ 82.720355][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.723124][ T5112] RIP: 0033:0x7ff7a817dff9 [ 82.725000][ T5112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.734497][ T5112] RSP: 002b:00007ff7a8eb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 82.738465][ T5112] RAX: ffffffffffffffda RBX: 00007ff7a8336058 RCX: 00007ff7a817dff9 [ 82.741492][ T5112] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 82.744419][ T5112] RBP: 00007ff7a81f0296 R08: 0000000000000000 R09: 0000000000000000 [ 82.747398][ T5112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.750374][ T5112] R13: 0000000000000000 R14: 00007ff7a8336058 R15: 00007ffe3304be48 [ 82.753530][ T5112] [ 82.754926][ T5112] BUG: Bad page state in process syz.0.0 pfn:1208c [ 82.757648][ T5112] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1208c [ 82.761286][ T5112] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 82.763965][ T5112] raw: 00fff00000000000 dead000000000040 ffff88804b2a2000 0000000000000000 [ 82.767222][ T5112] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 82.770463][ T5112] page dumped because: page_pool leak [ 82.772654][ T5112] page_owner tracks the page as allocated [ 82.776083][ T5112] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5112, tgid 5110 (syz.0.0), ts 82204534821, free_ts 82088118300 [ 82.783540][ T5112] post_alloc_hook+0x1f3/0x230 [ 82.785718][ T5112] get_page_from_freelist+0x3045/0x3190 [ 82.787830][ T5112] __alloc_pages_noprof+0x292/0x710 [ 82.789710][ T5112] alloc_pages_bulk_noprof+0x729/0xd40 [ 82.791725][ T5112] __page_pool_alloc_pages_slow+0x122/0x690 [ 82.794032][ T5112] page_pool_alloc_pages+0xd0/0x1c0 [ 82.796598][ T5112] bpf_test_run_xdp_live+0x950/0x2160 [ 82.799512][ T5112] bpf_prog_test_run_xdp+0x805/0x11e0 [ 82.801814][ T5112] bpf_prog_test_run+0x2e4/0x360 [ 82.803938][ T5112] __sys_bpf+0x48d/0x810 [ 82.805532][ T5112] __x64_sys_bpf+0x7c/0x90 [ 82.807047][ T5112] do_syscall_64+0xf3/0x230 [ 82.808545][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.810632][ T5112] page last free pid 9 tgid 9 stack trace: [ 82.812770][ T5112] free_unref_page+0xcfb/0xf20 [ 82.814669][ T5112] __slab_free+0x31b/0x3d0 [ 82.816711][ T5112] qlist_free_all+0x9a/0x140 [ 82.819129][ T5112] kasan_quarantine_reduce+0x14f/0x170 [ 82.821978][ T5112] __kasan_kmalloc+0x23/0xb0 [ 82.823918][ T5112] __kmalloc_node_track_caller_noprof+0x225/0x440 [ 82.826447][ T5112] kmalloc_reserve+0x111/0x2a0 [ 82.828367][ T5112] __alloc_skb+0x1f3/0x440 [ 82.830260][ T5112] alloc_skb_with_frags+0xc3/0x820 [ 82.832631][ T5112] sock_alloc_send_pskb+0x91a/0xa60 [ 82.835370][ T5112] mld_newpack+0x1c3/0xa90 [ 82.837513][ T5112] add_grec+0x1492/0x19a0 [ 82.839631][ T5112] mld_send_initial_cr+0x228/0x4b0 [ 82.841697][ T5112] mld_dad_work+0x44/0x500 [ 82.843384][ T5112] process_scheduled_works+0xa63/0x1850 [ 82.845408][ T5112] worker_thread+0x870/0xd30 [ 82.847078][ T5112] Modules linked in: [ 82.848488][ T5112] CPU: 0 UID: 0 PID: 5112 Comm: syz.0.0 Tainted: G B 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 82.853274][ T5112] Tainted: [B]=BAD_PAGE [ 82.855526][ T5112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 82.861051][ T5112] Call Trace: [ 82.862285][ T5112] [ 82.863394][ T5112] dump_stack_lvl+0x241/0x360 [ 82.865401][ T5112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 82.867397][ T5112] ? __pfx_print_modules+0x10/0x10 [ 82.869363][ T5112] bad_page+0x166/0x1b0 [ 82.870915][ T5112] free_unref_page+0xed0/0xf20 [ 82.872658][ T5112] skb_release_data+0x6dc/0x8a0 [ 82.874458][ T5112] sk_skb_reason_drop+0x1c9/0x380 [ 82.876597][ T5112] __netif_receive_skb_core+0x3edd/0x4570 [ 82.878973][ T5112] ? mark_lock+0x9a/0x360 [ 82.881192][ T5112] ? __lock_acquire+0x1384/0x2050 [ 82.883252][ T5112] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 82.885533][ T5112] ? mark_lock+0x9a/0x360 [ 82.887312][ T5112] ? __lock_acquire+0x1384/0x2050 [ 82.889304][ T5112] __netif_receive_skb_list_core+0x2b1/0x980 [ 82.892106][ T5112] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 82.895477][ T5112] ? timekeeping_get_ns+0x2c0/0x420 [ 82.897708][ T5112] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 82.900268][ T5112] netif_receive_skb_list_internal+0xa51/0xe30 [ 82.902858][ T5112] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 82.905422][ T5112] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 82.908145][ T5112] ? __pfx_eth_type_trans+0x10/0x10 [ 82.910153][ T5112] ? __phys_addr+0xba/0x170 [ 82.912095][ T5112] ? build_skb_around+0x111/0x260 [ 82.914060][ T5112] ? __xdp_build_skb_from_frame+0x338/0x650 [ 82.916472][ T5112] netif_receive_skb_list+0x55/0x4b0 [ 82.918710][ T5112] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 82.920914][ T5112] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 82.923243][ T5112] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 82.925265][ T5112] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 82.927394][ T5112] ? synchronize_rcu+0x11b/0x360 [ 82.930408][ T5112] ? __pfx_synchronize_rcu+0x10/0x10 [ 82.933498][ T5112] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 82.935665][ T5112] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 82.937627][ T5112] ? _copy_from_user+0xa6/0xe0 [ 82.939313][ T5112] ? bpf_test_init+0x15a/0x180 [ 82.941244][ T5112] ? xdp_convert_md_to_buff+0x5b/0x330 [ 82.943435][ T5112] bpf_prog_test_run_xdp+0x805/0x11e0 [ 82.946042][ T5112] ? __pfx_lock_release+0x10/0x10 [ 82.948556][ T5112] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 82.950960][ T5112] ? __fget_files+0x29/0x470 [ 82.952676][ T5112] ? fput+0x1a8/0x230 [ 82.954253][ T5112] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 82.956639][ T5112] bpf_prog_test_run+0x2e4/0x360 [ 82.958890][ T5112] __sys_bpf+0x48d/0x810 [ 82.960988][ T5112] ? __pfx___sys_bpf+0x10/0x10 [ 82.963049][ T5112] ? __rseq_handle_notify_resume+0x353/0x14e0 [ 82.965344][ T5112] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 82.967855][ T5112] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 82.970467][ T5112] ? do_syscall_64+0x100/0x230 [ 82.972422][ T5112] __x64_sys_bpf+0x7c/0x90 [ 82.974162][ T5112] do_syscall_64+0xf3/0x230 [ 82.975846][ T5112] ? clear_bhb_loop+0x35/0x90 [ 82.977832][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.980730][ T5112] RIP: 0033:0x7ff7a817dff9 [ 82.982957][ T5112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.990317][ T5112] RSP: 002b:00007ff7a8eb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 82.993524][ T5112] RAX: ffffffffffffffda RBX: 00007ff7a8336058 RCX: 00007ff7a817dff9 [ 82.996636][ T5112] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 83.000086][ T5112] RBP: 00007ff7a81f0296 R08: 0000000000000000 R09: 0000000000000000 [ 83.003494][ T5112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.006605][ T5112] R13: 0000000000000000 R14: 00007ff7a8336058 R15: 00007ffe3304be48 [ 83.009586][ T5112] [ 83.010878][ T5112] BUG: Bad page state in process syz.0.0 pfn:1208b [ 83.013459][ T5112] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1208b [ 83.017595][ T5112] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 83.020533][ T5112] raw: 00fff00000000000 dead000000000040 ffff88804b2a2000 0000000000000000 [ 83.023318][ T5112] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 83.026721][ T5112] page dumped because: page_pool leak [ 83.029312][ T5112] page_owner tracks the page as allocated [ 83.031669][ T5112] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5112, tgid 5110 (syz.0.0), ts 82204527269, free_ts 82088118300 [ 83.037329][ T5112] post_alloc_hook+0x1f3/0x230 [ 83.039073][ T5112] get_page_from_freelist+0x3045/0x3190 [ 83.040823][ T5112] __alloc_pages_noprof+0x292/0x710 [ 83.042316][ T5112] alloc_pages_bulk_noprof+0x729/0xd40 [ 83.043852][ T5112] __page_pool_alloc_pages_slow+0x122/0x690 [ 83.045736][ T5112] page_pool_alloc_pages+0xd0/0x1c0 [ 83.047233][ T5112] bpf_test_run_xdp_live+0x950/0x2160 [ 83.048787][ T5112] bpf_prog_test_run_xdp+0x805/0x11e0 [ 83.050326][ T5112] bpf_prog_test_run+0x2e4/0x360 [ 83.051844][ T5112] __sys_bpf+0x48d/0x810 [ 83.053407][ T5112] __x64_sys_bpf+0x7c/0x90 [ 83.055025][ T5112] do_syscall_64+0xf3/0x230 [ 83.056773][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.058942][ T5112] page last free pid 9 tgid 9 stack trace: [ 83.060990][ T5112] free_unref_page+0xcfb/0xf20 [ 83.062705][ T5112] __slab_free+0x31b/0x3d0 [ 83.064404][ T5112] qlist_free_all+0x9a/0x140 [ 83.066224][ T5112] kasan_quarantine_reduce+0x14f/0x170 [ 83.068280][ T5112] __kasan_kmalloc+0x23/0xb0 [ 83.070031][ T5112] __kmalloc_node_track_caller_noprof+0x225/0x440 [ 83.072484][ T5112] kmalloc_reserve+0x111/0x2a0 [ 83.074230][ T5112] __alloc_skb+0x1f3/0x440 [ 83.075952][ T5112] alloc_skb_with_frags+0xc3/0x820 [ 83.077636][ T5112] sock_alloc_send_pskb+0x91a/0xa60 [ 83.079394][ T5112] mld_newpack+0x1c3/0xa90 [ 83.080856][ T5112] add_grec+0x1492/0x19a0 [ 83.082403][ T5112] mld_send_initial_cr+0x228/0x4b0 [ 83.084589][ T5112] mld_dad_work+0x44/0x500 [ 83.086561][ T5112] process_scheduled_works+0xa63/0x1850 [ 83.088702][ T5112] worker_thread+0x870/0xd30 [ 83.090359][ T5112] Modules linked in: [ 83.091893][ T5112] CPU: 0 UID: 0 PID: 5112 Comm: syz.0.0 Tainted: G B 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 83.096716][ T5112] Tainted: [B]=BAD_PAGE [ 83.098336][ T5112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 83.102644][ T5112] Call Trace: [ 83.103894][ T5112] [ 83.104969][ T5112] dump_stack_lvl+0x241/0x360 [ 83.106694][ T5112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 83.108773][ T5112] ? __pfx_print_modules+0x10/0x10 [ 83.111271][ T5112] bad_page+0x166/0x1b0 [ 83.113260][ T5112] free_unref_page+0xed0/0xf20 [ 83.115229][ T5112] skb_release_data+0x6dc/0x8a0 [ 83.117160][ T5112] sk_skb_reason_drop+0x1c9/0x380 [ 83.119046][ T5112] __netif_receive_skb_core+0x3edd/0x4570 [ 83.121200][ T5112] ? mark_lock+0x9a/0x360 [ 83.122895][ T5112] ? __lock_acquire+0x1384/0x2050 [ 83.124897][ T5112] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 83.127700][ T5112] ? mark_lock+0x9a/0x360 [ 83.129751][ T5112] ? __lock_acquire+0x1384/0x2050 [ 83.131946][ T5112] __netif_receive_skb_list_core+0x2b1/0x980 [ 83.134517][ T5112] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 83.137046][ T5112] ? timekeeping_get_ns+0x2c0/0x420 [ 83.139075][ T5112] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 83.141606][ T5112] netif_receive_skb_list_internal+0xa51/0xe30 [ 83.144435][ T5112] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 83.147264][ T5112] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 83.149932][ T5112] ? __pfx_eth_type_trans+0x10/0x10 [ 83.152042][ T5112] ? __phys_addr+0xba/0x170 [ 83.153913][ T5112] ? build_skb_around+0x111/0x260 [ 83.156086][ T5112] ? __xdp_build_skb_from_frame+0x338/0x650 [ 83.159429][ T5112] netif_receive_skb_list+0x55/0x4b0 [ 83.162255][ T5112] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 83.165396][ T5112] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 83.167903][ T5112] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 83.170180][ T5112] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 83.172419][ T5112] ? synchronize_rcu+0x11b/0x360 [ 83.174251][ T5112] ? __pfx_synchronize_rcu+0x10/0x10 [ 83.176256][ T5112] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 83.178681][ T5112] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 83.181732][ T5112] ? _copy_from_user+0xa6/0xe0 [ 83.184540][ T5112] ? bpf_test_init+0x15a/0x180 [ 83.186961][ T5112] ? xdp_convert_md_to_buff+0x5b/0x330 [ 83.189261][ T5112] bpf_prog_test_run_xdp+0x805/0x11e0 [ 83.191354][ T5112] ? __pfx_lock_release+0x10/0x10 [ 83.193373][ T5112] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 83.195797][ T5112] ? __fget_files+0x29/0x470 [ 83.197413][ T5112] ? fput+0x1a8/0x230 [ 83.198735][ T5112] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 83.200561][ T5112] bpf_prog_test_run+0x2e4/0x360 [ 83.202193][ T5112] __sys_bpf+0x48d/0x810 [ 83.203498][ T5112] ? __pfx___sys_bpf+0x10/0x10 [ 83.205201][ T5112] ? __rseq_handle_notify_resume+0x353/0x14e0 [ 83.207482][ T5112] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 83.209704][ T5112] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 83.212009][ T5112] ? do_syscall_64+0x100/0x230 [ 83.213944][ T5112] __x64_sys_bpf+0x7c/0x90 [ 83.215714][ T5112] do_syscall_64+0xf3/0x230 [ 83.217342][ T5112] ? clear_bhb_loop+0x35/0x90 [ 83.218902][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.220997][ T5112] RIP: 0033:0x7ff7a817dff9 [ 83.222742][ T5112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.230128][ T5112] RSP: 002b:00007ff7a8eb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 83.233013][ T5112] RAX: ffffffffffffffda RBX: 00007ff7a8336058 RCX: 00007ff7a817dff9 [ 83.235943][ T5112] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 83.238466][ T5112] RBP: 00007ff7a81f0296 R08: 0000000000000000 R09: 0000000000000000 [ 83.240918][ T5112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.243389][ T5112] R13: 0000000000000000 R14: 00007ff7a8336058 R15: 00007ffe3304be48 [ 83.245957][ T5112] [ 83.247171][ T5112] BUG: Bad page state in process syz.0.0 pfn:1208a [ 83.249364][ T5112] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1208a [ 83.252292][ T5112] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 83.255409][ T5112] raw: 00fff00000000000 dead000000000040 ffff88804b2a2000 0000000000000000 [ 83.259335][ T5112] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 83.262511][ T5112] page dumped because: page_pool leak [ 83.264558][ T5112] page_owner tracks the page as allocated [ 83.266952][ T5112] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5112, tgid 5110 (syz.0.0), ts 82204520511, free_ts 82088118300 [ 83.272983][ T5112] post_alloc_hook+0x1f3/0x230 [ 83.274896][ T5112] get_page_from_freelist+0x3045/0x3190 [ 83.277181][ T5112] __alloc_pages_noprof+0x292/0x710 [ 83.279346][ T5112] alloc_pages_bulk_noprof+0x729/0xd40 [ 83.281446][ T5112] __page_pool_alloc_pages_slow+0x122/0x690 [ 83.283587][ T5112] page_pool_alloc_pages+0xd0/0x1c0 [ 83.285459][ T5112] bpf_test_run_xdp_live+0x950/0x2160 [ 83.287346][ T5112] bpf_prog_test_run_xdp+0x805/0x11e0 [ 83.289121][ T5112] bpf_prog_test_run+0x2e4/0x360 [ 83.290853][ T5112] __sys_bpf+0x48d/0x810 [ 83.292715][ T5112] __x64_sys_bpf+0x7c/0x90 [ 83.294862][ T5112] do_syscall_64+0xf3/0x230 [ 83.297085][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.299487][ T5112] page last free pid 9 tgid 9 stack trace: [ 83.301444][ T5112] free_unref_page+0xcfb/0xf20 [ 83.302943][ T5112] __slab_free+0x31b/0x3d0 [ 83.304485][ T5112] qlist_free_all+0x9a/0x140 [ 83.306294][ T5112] kasan_quarantine_reduce+0x14f/0x170 [ 83.308537][ T5112] __kasan_kmalloc+0x23/0xb0 [ 83.310934][ T5112] __kmalloc_node_track_caller_noprof+0x225/0x440 [ 83.314362][ T5112] kmalloc_reserve+0x111/0x2a0 [ 83.316621][ T5112] __alloc_skb+0x1f3/0x440 [ 83.318418][ T5112] alloc_skb_with_frags+0xc3/0x820 [ 83.320278][ T5112] sock_alloc_send_pskb+0x91a/0xa60 [ 83.322269][ T5112] mld_newpack+0x1c3/0xa90 [ 83.324028][ T5112] add_grec+0x1492/0x19a0 [ 83.325806][ T5112] mld_send_initial_cr+0x228/0x4b0 [ 83.327821][ T5112] mld_dad_work+0x44/0x500 [ 83.329789][ T5112] process_scheduled_works+0xa63/0x1850 [ 83.333287][ T5112] worker_thread+0x870/0xd30 [ 83.336707][ T5112] Modules linked in: [ 83.338491][ T5112] CPU: 0 UID: 0 PID: 5112 Comm: syz.0.0 Tainted: G B 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 83.343225][ T5112] Tainted: [B]=BAD_PAGE [ 83.344806][ T5112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 83.349095][ T5112] Call Trace: [ 83.350154][ T5112] [ 83.351194][ T5112] dump_stack_lvl+0x241/0x360 [ 83.352677][ T5112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 83.354651][ T5112] ? __pfx_print_modules+0x10/0x10 [ 83.356822][ T5112] bad_page+0x166/0x1b0 [ 83.358668][ T5112] free_unref_page+0xed0/0xf20 [ 83.360933][ T5112] skb_release_data+0x6dc/0x8a0 [ 83.363046][ T5112] sk_skb_reason_drop+0x1c9/0x380 [ 83.365152][ T5112] __netif_receive_skb_core+0x3edd/0x4570 [ 83.367304][ T5112] ? mark_lock+0x9a/0x360 [ 83.368959][ T5112] ? __lock_acquire+0x1384/0x2050 [ 83.370753][ T5112] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 83.373235][ T5112] ? mark_lock+0x9a/0x360 [ 83.375050][ T5112] ? __lock_acquire+0x1384/0x2050 [ 83.377013][ T5112] __netif_receive_skb_list_core+0x2b1/0x980 [ 83.379610][ T5112] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 83.382266][ T5112] ? timekeeping_get_ns+0x2c0/0x420 [ 83.384391][ T5112] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 83.386775][ T5112] netif_receive_skb_list_internal+0xa51/0xe30 [ 83.389267][ T5112] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 83.391808][ T5112] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 83.394649][ T5112] ? __pfx_eth_type_trans+0x10/0x10 [ 83.396768][ T5112] ? __phys_addr+0xba/0x170 [ 83.398520][ T5112] ? build_skb_around+0x111/0x260 [ 83.400387][ T5112] ? __xdp_build_skb_from_frame+0x338/0x650 [ 83.402664][ T5112] netif_receive_skb_list+0x55/0x4b0 [ 83.404545][ T5112] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 83.406961][ T5112] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 83.410468][ T5112] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 83.412353][ T5112] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 83.414348][ T5112] ? synchronize_rcu+0x11b/0x360 [ 83.416356][ T5112] ? __pfx_synchronize_rcu+0x10/0x10 [ 83.418600][ T5112] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 83.421502][ T5112] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 83.424162][ T5112] ? _copy_from_user+0xa6/0xe0 [ 83.425983][ T5112] ? bpf_test_init+0x15a/0x180 [ 83.427887][ T5112] ? xdp_convert_md_to_buff+0x5b/0x330 [ 83.430227][ T5112] bpf_prog_test_run_xdp+0x805/0x11e0 [ 83.432662][ T5112] ? __pfx_lock_release+0x10/0x10 [ 83.435229][ T5112] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 83.437767][ T5112] ? __fget_files+0x29/0x470 [ 83.439803][ T5112] ? fput+0x1a8/0x230 [ 83.441294][ T5112] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 83.443588][ T5112] bpf_prog_test_run+0x2e4/0x360 [ 83.445438][ T5112] __sys_bpf+0x48d/0x810 [ 83.447292][ T5112] ? __pfx___sys_bpf+0x10/0x10 [ 83.449356][ T5112] ? __rseq_handle_notify_resume+0x353/0x14e0 [ 83.452203][ T5112] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 83.454695][ T5112] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 83.457329][ T5112] ? do_syscall_64+0x100/0x230 [ 83.459290][ T5112] __x64_sys_bpf+0x7c/0x90 [ 83.461045][ T5112] do_syscall_64+0xf3/0x230 [ 83.463383][ T5112] ? clear_bhb_loop+0x35/0x90 [ 83.466102][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.468835][ T5112] RIP: 0033:0x7ff7a817dff9 [ 83.470612][ T5112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.478294][ T5112] RSP: 002b:00007ff7a8eb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 83.481275][ T5112] RAX: ffffffffffffffda RBX: 00007ff7a8336058 RCX: 00007ff7a817dff9 [ 83.484260][ T5112] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 83.487191][ T5112] RBP: 00007ff7a81f0296 R08: 0000000000000000 R09: 0000000000000000 [ 83.490635][ T5112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.495544][ T5112] R13: 0000000000000000 R14: 00007ff7a8336058 R15: 00007ffe3304be48 [ 83.499079][ T5112] [ 83.500454][ T5112] BUG: Bad page state in process syz.0.0 pfn:12089 [ 83.502965][ T5112] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x8 pfn:0x12089 [ 83.506485][ T5112] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 83.508903][ T5112] raw: 00fff00000000000 dead000000000040 ffff88804b2a2000 0000000000000000 [ 83.512556][ T5112] raw: 0000000000000008 0000000000000001 00000000ffffffff 0000000000000000 [ 83.517525][ T5112] page dumped because: page_pool leak [ 83.520263][ T5112] page_owner tracks the page as allocated [ 83.522444][ T5112] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5112, tgid 5110 (syz.0.0), ts 82204513471, free_ts 82088118300 [ 83.528632][ T5112] post_alloc_hook+0x1f3/0x230 [ 83.530325][ T5112] get_page_from_freelist+0x3045/0x3190 [ 83.532503][ T5112] __alloc_pages_noprof+0x292/0x710 [ 83.535133][ T5112] alloc_pages_bulk_noprof+0x729/0xd40 [ 83.538212][ T5112] __page_pool_alloc_pages_slow+0x122/0x690 [ 83.540955][ T5112] page_pool_alloc_pages+0xd0/0x1c0 [ 83.543135][ T5112] bpf_test_run_xdp_live+0x950/0x2160 [ 83.545471][ T5112] bpf_prog_test_run_xdp+0x805/0x11e0 [ 83.547552][ T5112] bpf_prog_test_run+0x2e4/0x360 [ 83.549437][ T5112] __sys_bpf+0x48d/0x810 [ 83.551038][ T5112] __x64_sys_bpf+0x7c/0x90 [ 83.552707][ T5112] do_syscall_64+0xf3/0x230 [ 83.554347][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.556746][ T5112] page last free pid 9 tgid 9 stack trace: [ 83.558719][ T5112] free_unref_page+0xcfb/0xf20 [ 83.560544][ T5112] __slab_free+0x31b/0x3d0 [ 83.562095][ T5112] qlist_free_all+0x9a/0x140 [ 83.563863][ T5112] kasan_quarantine_reduce+0x14f/0x170 [ 83.566050][ T5112] __kasan_kmalloc+0x23/0xb0 [ 83.567882][ T5112] __kmalloc_node_track_caller_noprof+0x225/0x440 [ 83.570295][ T5112] kmalloc_reserve+0x111/0x2a0 [ 83.572161][ T5112] __alloc_skb+0x1f3/0x440 [ 83.573885][ T5112] alloc_skb_with_frags+0xc3/0x820 [ 83.576444][ T5112] sock_alloc_send_pskb+0x91a/0xa60 [ 83.579361][ T5112] mld_newpack+0x1c3/0xa90 [ 83.581684][ T5112] add_grec+0x1492/0x19a0 [ 83.583734][ T5112] mld_send_initial_cr+0x228/0x4b0 [ 83.586106][ T5112] mld_dad_work+0x44/0x500 [ 83.587636][ T5112] process_scheduled_works+0xa63/0x1850 [ 83.589580][ T5112] worker_thread+0x870/0xd30 [ 83.591391][ T5112] Modules linked in: [ 83.592957][ T5112] CPU: 0 UID: 0 PID: 5112 Comm: syz.0.0 Tainted: G B 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 83.598660][ T5112] Tainted: [B]=BAD_PAGE [ 83.600891][ T5112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 83.605708][ T5112] Call Trace: [ 83.607045][ T5112] [ 83.608233][ T5112] dump_stack_lvl+0x241/0x360 [ 83.610025][ T5112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 83.611811][ T5112] ? __pfx_print_modules+0x10/0x10 [ 83.613611][ T5112] bad_page+0x166/0x1b0 [ 83.615210][ T5112] free_unref_page+0xed0/0xf20 [ 83.617128][ T5112] skb_release_data+0x6dc/0x8a0 [ 83.619379][ T5112] sk_skb_reason_drop+0x1c9/0x380 [ 83.621871][ T5112] __netif_receive_skb_core+0x3edd/0x4570 [ 83.624343][ T5112] ? mark_lock+0x9a/0x360 [ 83.625823][ T5112] ? __lock_acquire+0x1384/0x2050 [ 83.627604][ T5112] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 83.629651][ T5112] ? mark_lock+0x9a/0x360 [ 83.631131][ T5112] ? __lock_acquire+0x1384/0x2050 [ 83.633208][ T5112] __netif_receive_skb_list_core+0x2b1/0x980 [ 83.636375][ T5112] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 83.638933][ T5112] ? timekeeping_get_ns+0x2c0/0x420 [ 83.640754][ T5112] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 83.643032][ T5112] netif_receive_skb_list_internal+0xa51/0xe30 [ 83.645517][ T5112] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 83.648326][ T5112] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 83.651589][ T5112] ? __pfx_eth_type_trans+0x10/0x10 [ 83.654207][ T5112] ? __phys_addr+0xba/0x170 [ 83.655932][ T5112] ? build_skb_around+0x111/0x260 [ 83.657830][ T5112] ? __xdp_build_skb_from_frame+0x338/0x650 [ 83.659981][ T5112] netif_receive_skb_list+0x55/0x4b0 [ 83.661859][ T5112] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 83.663899][ T5112] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 83.666181][ T5112] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 83.669043][ T5112] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 83.672610][ T5112] ? synchronize_rcu+0x11b/0x360 [ 83.674694][ T5112] ? __pfx_synchronize_rcu+0x10/0x10 [ 83.676653][ T5112] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 83.678967][ T5112] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 83.681175][ T5112] ? _copy_from_user+0xa6/0xe0 [ 83.683270][ T5112] ? bpf_test_init+0x15a/0x180 [ 83.685186][ T5112] ? xdp_convert_md_to_buff+0x5b/0x330 [ 83.687591][ T5112] bpf_prog_test_run_xdp+0x805/0x11e0 [ 83.690080][ T5112] ? __pfx_lock_release+0x10/0x10 [ 83.692464][ T5112] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 83.694784][ T5112] ? __fget_files+0x29/0x470 [ 83.696702][ T5112] ? fput+0x1a8/0x230 [ 83.698327][ T5112] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 83.700610][ T5112] bpf_prog_test_run+0x2e4/0x360 [ 83.702420][ T5112] __sys_bpf+0x48d/0x810 [ 83.703872][ T5112] ? __pfx___sys_bpf+0x10/0x10 [ 83.705603][ T5112] ? __rseq_handle_notify_resume+0x353/0x14e0 [ 83.707766][ T5112] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 83.710159][ T5112] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 83.713326][ T5112] ? do_syscall_64+0x100/0x230 [ 83.715506][ T5112] __x64_sys_bpf+0x7c/0x90 [ 83.717380][ T5112] do_syscall_64+0xf3/0x230 [ 83.719099][ T5112] ? clear_bhb_loop+0x35/0x90 [ 83.720832][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.723404][ T5112] RIP: 0033:0x7ff7a817dff9 [ 83.725192][ T5112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.733852][ T5112] RSP: 002b:00007ff7a8eb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 83.736974][ T5112] RAX: ffffffffffffffda RBX: 00007ff7a8336058 RCX: 00007ff7a817dff9 [ 83.739601][ T5112] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 83.742325][ T5112] RBP: 00007ff7a81f0296 R08: 0000000000000000 R09: 0000000000000000 [ 83.745641][ T5112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.749209][ T5112] R13: 0000000000000000 R14: 00007ff7a8336058 R15: 00007ffe3304be48 [ 83.752338][ T5112] [ 83.753547][ T5112] BUG: Bad page state in process syz.0.0 pfn:12088 [ 83.756186][ T5112] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88801208d500 pfn:0x12088 [ 83.760061][ T5112] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 83.762876][ T5112] raw: 00fff00000000000 dead000000000040 ffff88804b2a2000 0000000000000000 [ 83.766265][ T5112] raw: ffff88801208d500 0000000000000001 00000000ffffffff 0000000000000000 [ 83.770068][ T5112] page dumped because: page_pool leak [ 83.771948][ T5112] page_owner tracks the page as allocated [ 83.773940][ T5112] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5112, tgid 5110 (syz.0.0), ts 82204508173, free_ts 82088118300 [ 83.780146][ T5112] post_alloc_hook+0x1f3/0x230 [ 83.782292][ T5112] get_page_from_freelist+0x3045/0x3190 [ 83.784896][ T5112] __alloc_pages_noprof+0x292/0x710 [ 83.787127][ T5112] alloc_pages_bulk_noprof+0x729/0xd40 [ 83.789056][ T5112] __page_pool_alloc_pages_slow+0x122/0x690 [ 83.791218][ T5112] page_pool_alloc_pages+0xd0/0x1c0 [ 83.793007][ T5112] bpf_test_run_xdp_live+0x950/0x2160 [ 83.795085][ T5112] bpf_prog_test_run_xdp+0x805/0x11e0 [ 83.797960][ T5112] bpf_prog_test_run+0x2e4/0x360 [ 83.800638][ T5112] __sys_bpf+0x48d/0x810 [ 83.802050][ T5112] __x64_sys_bpf+0x7c/0x90 [ 83.803794][ T5112] do_syscall_64+0xf3/0x230 [ 83.805592][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.807867][ T5112] page last free pid 9 tgid 9 stack trace: [ 83.809947][ T5112] free_unref_page+0xcfb/0xf20 [ 83.811785][ T5112] __slab_free+0x31b/0x3d0 [ 83.813484][ T5112] qlist_free_all+0x9a/0x140 [ 83.815378][ T5112] kasan_quarantine_reduce+0x14f/0x170 [ 83.817345][ T5112] __kasan_kmalloc+0x23/0xb0 [ 83.818984][ T5112] __kmalloc_node_track_caller_noprof+0x225/0x440 [ 83.821448][ T5112] kmalloc_reserve+0x111/0x2a0 [ 83.823394][ T5112] __alloc_skb+0x1f3/0x440 [ 83.825253][ T5112] alloc_skb_with_frags+0xc3/0x820 [ 83.827355][ T5112] sock_alloc_send_pskb+0x91a/0xa60 [ 83.829208][ T5112] mld_newpack+0x1c3/0xa90 [ 83.830860][ T5112] add_grec+0x1492/0x19a0 [ 83.832949][ T5112] mld_send_initial_cr+0x228/0x4b0 [ 83.835587][ T5112] mld_dad_work+0x44/0x500 [ 83.837111][ T5112] process_scheduled_works+0xa63/0x1850 [ 83.838875][ T5112] worker_thread+0x870/0xd30 [ 83.840655][ T5112] Modules linked in: [ 83.842248][ T5112] CPU: 0 UID: 0 PID: 5112 Comm: syz.0.0 Tainted: G B 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 83.847738][ T5112] Tainted: [B]=BAD_PAGE [ 83.850237][ T5112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 83.854653][ T5112] Call Trace: [ 83.855949][ T5112] [ 83.857081][ T5112] dump_stack_lvl+0x241/0x360 [ 83.858925][ T5112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 83.861008][ T5112] ? __pfx_print_modules+0x10/0x10 [ 83.863104][ T5112] bad_page+0x166/0x1b0 [ 83.864741][ T5112] free_unref_page+0xed0/0xf20 [ 83.866906][ T5112] skb_release_data+0x6dc/0x8a0 [ 83.869296][ T5112] sk_skb_reason_drop+0x1c9/0x380 [ 83.871752][ T5112] __netif_receive_skb_core+0x3edd/0x4570 [ 83.874351][ T5112] ? mark_lock+0x9a/0x360 [ 83.876111][ T5112] ? __lock_acquire+0x1384/0x2050 [ 83.877985][ T5112] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 83.880141][ T5112] ? mark_lock+0x9a/0x360 [ 83.881858][ T5112] ? __lock_acquire+0x1384/0x2050 [ 83.883752][ T5112] __netif_receive_skb_list_core+0x2b1/0x980 [ 83.886303][ T5112] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 83.889742][ T5112] ? timekeeping_get_ns+0x2c0/0x420 [ 83.891835][ T5112] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 83.894432][ T5112] netif_receive_skb_list_internal+0xa51/0xe30 [ 83.896994][ T5112] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 83.899612][ T5112] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 83.902412][ T5112] ? __pfx_eth_type_trans+0x10/0x10 [ 83.904600][ T5112] ? __phys_addr+0xba/0x170 [ 83.906074][ T5112] ? build_skb_around+0x111/0x260 [ 83.907938][ T5112] ? __xdp_build_skb_from_frame+0x338/0x650 [ 83.910206][ T5112] netif_receive_skb_list+0x55/0x4b0 [ 83.912211][ T5112] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 83.915278][ T5112] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 83.918727][ T5112] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 83.921042][ T5112] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 83.923408][ T5112] ? synchronize_rcu+0x11b/0x360 [ 83.925323][ T5112] ? __pfx_synchronize_rcu+0x10/0x10 [ 83.927329][ T5112] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 83.929683][ T5112] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 83.932001][ T5112] ? _copy_from_user+0xa6/0xe0 [ 83.934426][ T5112] ? bpf_test_init+0x15a/0x180 [ 83.937326][ T5112] ? xdp_convert_md_to_buff+0x5b/0x330 [ 83.939612][ T5112] bpf_prog_test_run_xdp+0x805/0x11e0 [ 83.941592][ T5112] ? __pfx_lock_release+0x10/0x10 [ 83.943523][ T5112] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 83.945662][ T5112] ? __fget_files+0x29/0x470 [ 83.947424][ T5112] ? fput+0x1a8/0x230 [ 83.949120][ T5112] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 83.951686][ T5112] bpf_prog_test_run+0x2e4/0x360 [ 83.954133][ T5112] __sys_bpf+0x48d/0x810 [ 83.956191][ T5112] ? __pfx___sys_bpf+0x10/0x10 [ 83.958125][ T5112] ? __rseq_handle_notify_resume+0x353/0x14e0 [ 83.960354][ T5112] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 83.962570][ T5112] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 83.964712][ T5112] ? do_syscall_64+0x100/0x230 [ 83.966228][ T5112] __x64_sys_bpf+0x7c/0x90 [ 83.967898][ T5112] do_syscall_64+0xf3/0x230 [ 83.970337][ T5112] ? clear_bhb_loop+0x35/0x90 [ 83.973042][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.976088][ T5112] RIP: 0033:0x7ff7a817dff9 [ 83.977843][ T5112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.984966][ T5112] RSP: 002b:00007ff7a8eb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 83.988065][ T5112] RAX: ffffffffffffffda RBX: 00007ff7a8336058 RCX: 00007ff7a817dff9 [ 83.991266][ T5112] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 83.995134][ T5112] RBP: 00007ff7a81f0296 R08: 0000000000000000 R09: 0000000000000000 [ 83.998636][ T5112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.001611][ T5112] R13: 0000000000000000 R14: 00007ff7a8336058 R15: 00007ffe3304be48 [ 84.004604][ T5112] [ 84.005926][ T5112] BUG: Bad page state in process syz.0.0 pfn:12427 [ 84.009474][ T5112] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12427 [ 84.013982][ T5112] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 84.016731][ T5112] raw: 00fff00000000000 dead000000000040 ffff88804b2a2000 0000000000000000 [ 84.020143][ T5112] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 84.023675][ T5112] page dumped because: page_pool leak [ 84.026129][ T5112] page_owner tracks the page as allocated [ 84.028670][ T5112] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5112, tgid 5110 (syz.0.0), ts 82204501020, free_ts 82088167937 [ 84.035055][ T5112] post_alloc_hook+0x1f3/0x230 [ 84.036833][ T5112] get_page_from_freelist+0x3045/0x3190 [ 84.038846][ T5112] __alloc_pages_noprof+0x292/0x710 [ 84.041120][ T5112] alloc_pages_bulk_noprof+0x729/0xd40 [ 84.043537][ T5112] __page_pool_alloc_pages_slow+0x122/0x690 [ 84.046345][ T5112] page_pool_alloc_pages+0xd0/0x1c0 [ 84.048309][ T5112] bpf_test_run_xdp_live+0x950/0x2160 [ 84.050425][ T5112] bpf_prog_test_run_xdp+0x805/0x11e0 [ 84.052605][ T5112] bpf_prog_test_run+0x2e4/0x360 [ 84.054709][ T5112] __sys_bpf+0x48d/0x810 [ 84.056925][ T5112] __x64_sys_bpf+0x7c/0x90 [ 84.059204][ T5112] do_syscall_64+0xf3/0x230 [ 84.061357][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.063629][ T5112] page last free pid 9 tgid 9 stack trace: [ 84.065893][ T5112] free_unref_page+0xcfb/0xf20 [ 84.067828][ T5112] __slab_free+0x31b/0x3d0 [ 84.069472][ T5112] qlist_free_all+0x9a/0x140 [ 84.071427][ T5112] kasan_quarantine_reduce+0x14f/0x170 [ 84.073717][ T5112] __kasan_kmalloc+0x23/0xb0 [ 84.075782][ T5112] __kmalloc_node_track_caller_noprof+0x225/0x440 [ 84.078057][ T5112] kmalloc_reserve+0x111/0x2a0 [ 84.079854][ T5112] __alloc_skb+0x1f3/0x440 [ 84.081417][ T5112] alloc_skb_with_frags+0xc3/0x820 [ 84.083945][ T5112] sock_alloc_send_pskb+0x91a/0xa60 [ 84.086740][ T5112] mld_newpack+0x1c3/0xa90 [ 84.088812][ T5112] add_grec+0x1492/0x19a0 [ 84.090890][ T5112] mld_send_initial_cr+0x228/0x4b0 [ 84.092987][ T5112] mld_dad_work+0x44/0x500 [ 84.094540][ T5112] process_scheduled_works+0xa63/0x1850 [ 84.096662][ T5112] worker_thread+0x870/0xd30 [ 84.098368][ T5112] Modules linked in: [ 84.099789][ T5112] CPU: 0 UID: 0 PID: 5112 Comm: syz.0.0 Tainted: G B 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 84.104208][ T5112] Tainted: [B]=BAD_PAGE [ 84.105921][ T5112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.111290][ T5112] Call Trace: [ 84.112679][ T5112] [ 84.113780][ T5112] dump_stack_lvl+0x241/0x360 [ 84.115667][ T5112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 84.117597][ T5112] ? __pfx_print_modules+0x10/0x10 [ 84.119500][ T5112] bad_page+0x166/0x1b0 [ 84.121835][ T5112] free_unref_page+0xed0/0xf20 [ 84.124395][ T5112] skb_release_data+0x6dc/0x8a0 [ 84.126294][ T5112] sk_skb_reason_drop+0x1c9/0x380 [ 84.128569][ T5112] __netif_receive_skb_core+0x3edd/0x4570 [ 84.130985][ T5112] ? mark_lock+0x9a/0x360 [ 84.132618][ T5112] ? __lock_acquire+0x1384/0x2050 [ 84.134368][ T5112] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 84.136833][ T5112] ? mark_lock+0x9a/0x360 [ 84.138649][ T5112] ? __lock_acquire+0x1384/0x2050 [ 84.141510][ T5112] __netif_receive_skb_list_core+0x2b1/0x980 [ 84.144492][ T5112] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 84.148090][ T5112] ? timekeeping_get_ns+0x2c0/0x420 [ 84.150082][ T5112] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 84.152618][ T5112] netif_receive_skb_list_internal+0xa51/0xe30 [ 84.155130][ T5112] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 84.157552][ T5112] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 84.160084][ T5112] ? __pfx_eth_type_trans+0x10/0x10 [ 84.161882][ T5112] ? __phys_addr+0xba/0x170 [ 84.163615][ T5112] ? build_skb_around+0x111/0x260 [ 84.165378][ T5112] ? __xdp_build_skb_from_frame+0x338/0x650 [ 84.167460][ T5112] netif_receive_skb_list+0x55/0x4b0 [ 84.169516][ T5112] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 84.171546][ T5112] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 84.173701][ T5112] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 84.175752][ T5112] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 84.177776][ T5112] ? synchronize_rcu+0x11b/0x360 [ 84.179676][ T5112] ? __pfx_synchronize_rcu+0x10/0x10 [ 84.181689][ T5112] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 84.184111][ T5112] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 84.186298][ T5112] ? _copy_from_user+0xa6/0xe0 [ 84.188126][ T5112] ? bpf_test_init+0x15a/0x180 [ 84.189893][ T5112] ? xdp_convert_md_to_buff+0x5b/0x330 [ 84.191964][ T5112] bpf_prog_test_run_xdp+0x805/0x11e0 [ 84.194328][ T5112] ? __pfx_lock_release+0x10/0x10 [ 84.196316][ T5112] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 84.198524][ T5112] ? __fget_files+0x29/0x470 [ 84.200269][ T5112] ? fput+0x1a8/0x230 [ 84.201805][ T5112] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 84.203996][ T5112] bpf_prog_test_run+0x2e4/0x360 [ 84.205818][ T5112] __sys_bpf+0x48d/0x810 [ 84.207402][ T5112] ? __pfx___sys_bpf+0x10/0x10 [ 84.209305][ T5112] ? __rseq_handle_notify_resume+0x353/0x14e0 [ 84.211596][ T5112] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 84.213826][ T5112] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 84.216115][ T5112] ? do_syscall_64+0x100/0x230 [ 84.217985][ T5112] __x64_sys_bpf+0x7c/0x90 [ 84.219781][ T5112] do_syscall_64+0xf3/0x230 [ 84.221593][ T5112] ? clear_bhb_loop+0x35/0x90 [ 84.223426][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.225551][ T5112] RIP: 0033:0x7ff7a817dff9 [ 84.227207][ T5112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.233921][ T5112] RSP: 002b:00007ff7a8eb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 84.236885][ T5112] RAX: ffffffffffffffda RBX: 00007ff7a8336058 RCX: 00007ff7a817dff9 [ 84.239386][ T5112] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 84.242385][ T5112] RBP: 00007ff7a81f0296 R08: 0000000000000000 R09: 0000000000000000 [ 84.245259][ T5112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.248127][ T5112] R13: 0000000000000000 R14: 00007ff7a8336058 R15: 00007ffe3304be48 [ 84.251998][ T5112] [ 84.253872][ T5112] BUG: Bad page state in process syz.0.0 pfn:12426 [ 84.257120][ T5112] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12426 [ 84.260484][ T5112] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 84.263291][ T5112] raw: 00fff00000000000 dead000000000040 ffff88804b2a2000 0000000000000000 [ 84.266977][ T5112] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 84.270687][ T5112] page dumped because: page_pool leak [ 84.273060][ T5112] page_owner tracks the page as allocated [ 84.275506][ T5112] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5112, tgid 5110 (syz.0.0), ts 82204493656, free_ts 82088167937 [ 84.281482][ T5112] post_alloc_hook+0x1f3/0x230 [ 84.283658][ T5112] get_page_from_freelist+0x3045/0x3190 [ 84.286677][ T5112] __alloc_pages_noprof+0x292/0x710 [ 84.289081][ T5112] alloc_pages_bulk_noprof+0x729/0xd40 [ 84.291453][ T5112] __page_pool_alloc_pages_slow+0x122/0x690 [ 84.293681][ T5112] page_pool_alloc_pages+0xd0/0x1c0 [ 84.295794][ T5112] bpf_test_run_xdp_live+0x950/0x2160 [ 84.297921][ T5112] bpf_prog_test_run_xdp+0x805/0x11e0 [ 84.300037][ T5112] bpf_prog_test_run+0x2e4/0x360 [ 84.302088][ T5112] __sys_bpf+0x48d/0x810 [ 84.304007][ T5112] __x64_sys_bpf+0x7c/0x90 [ 84.306201][ T5112] do_syscall_64+0xf3/0x230 [ 84.308371][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.310943][ T5112] page last free pid 9 tgid 9 stack trace: [ 84.313230][ T5112] free_unref_page+0xcfb/0xf20 [ 84.315193][ T5112] __slab_free+0x31b/0x3d0 [ 84.317181][ T5112] qlist_free_all+0x9a/0x140 [ 84.319279][ T5112] kasan_quarantine_reduce+0x14f/0x170 [ 84.321432][ T5112] __kasan_kmalloc+0x23/0xb0 [ 84.323426][ T5112] __kmalloc_node_track_caller_noprof+0x225/0x440 [ 84.326625][ T5112] kmalloc_reserve+0x111/0x2a0 [ 84.329166][ T5112] __alloc_skb+0x1f3/0x440 [ 84.331061][ T5112] alloc_skb_with_frags+0xc3/0x820 [ 84.333100][ T5112] sock_alloc_send_pskb+0x91a/0xa60 [ 84.335412][ T5112] mld_newpack+0x1c3/0xa90 [ 84.337242][ T5112] add_grec+0x1492/0x19a0 [ 84.338933][ T5112] mld_send_initial_cr+0x228/0x4b0 [ 84.341384][ T5112] mld_dad_work+0x44/0x500 [ 84.343523][ T5112] process_scheduled_works+0xa63/0x1850 [ 84.346071][ T5112] worker_thread+0x870/0xd30 [ 84.348119][ T5112] Modules linked in: [ 84.349817][ T5112] CPU: 0 UID: 0 PID: 5112 Comm: syz.0.0 Tainted: G B 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 84.354351][ T5112] Tainted: [B]=BAD_PAGE [ 84.355951][ T5112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.359802][ T5112] Call Trace: [ 84.360970][ T5112] [ 84.362027][ T5112] dump_stack_lvl+0x241/0x360 [ 84.363920][ T5112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 84.366279][ T5112] ? __pfx_print_modules+0x10/0x10 [ 84.368624][ T5112] bad_page+0x166/0x1b0 [ 84.370360][ T5112] free_unref_page+0xed0/0xf20 [ 84.372085][ T5112] skb_release_data+0x6dc/0x8a0 [ 84.373775][ T5112] sk_skb_reason_drop+0x1c9/0x380 [ 84.375688][ T5112] __netif_receive_skb_core+0x3edd/0x4570 [ 84.377897][ T5112] ? mark_lock+0x9a/0x360 [ 84.379648][ T5112] ? __lock_acquire+0x1384/0x2050 [ 84.381957][ T5112] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 84.385548][ T5112] ? mark_lock+0x9a/0x360 [ 84.387582][ T5112] ? __lock_acquire+0x1384/0x2050 [ 84.389635][ T5112] __netif_receive_skb_list_core+0x2b1/0x980 [ 84.391648][ T5112] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 84.394037][ T5112] ? timekeeping_get_ns+0x2c0/0x420 [ 84.396035][ T5112] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 84.398691][ T5112] netif_receive_skb_list_internal+0xa51/0xe30 [ 84.401527][ T5112] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 84.404139][ T5112] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 84.406738][ T5112] ? __pfx_eth_type_trans+0x10/0x10 [ 84.408689][ T5112] ? __phys_addr+0xba/0x170 [ 84.410723][ T5112] ? build_skb_around+0x111/0x260 [ 84.413444][ T5112] ? __xdp_build_skb_from_frame+0x338/0x650 [ 84.416062][ T5112] netif_receive_skb_list+0x55/0x4b0 [ 84.418230][ T5112] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 84.420306][ T5112] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 84.422554][ T5112] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 84.424759][ T5112] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 84.427300][ T5112] ? synchronize_rcu+0x11b/0x360 [ 84.430406][ T5112] ? __pfx_synchronize_rcu+0x10/0x10 [ 84.432801][ T5112] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 84.435231][ T5112] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 84.437421][ T5112] ? _copy_from_user+0xa6/0xe0 [ 84.439358][ T5112] ? bpf_test_init+0x15a/0x180 [ 84.441549][ T5112] ? xdp_convert_md_to_buff+0x5b/0x330 [ 84.444214][ T5112] bpf_prog_test_run_xdp+0x805/0x11e0 [ 84.446552][ T5112] ? __pfx_lock_release+0x10/0x10 [ 84.448679][ T5112] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 84.450787][ T5112] ? __fget_files+0x29/0x470 [ 84.452500][ T5112] ? fput+0x1a8/0x230 [ 84.454024][ T5112] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 84.456405][ T5112] bpf_prog_test_run+0x2e4/0x360 [ 84.458988][ T5112] __sys_bpf+0x48d/0x810 [ 84.461311][ T5112] ? __pfx___sys_bpf+0x10/0x10 [ 84.463470][ T5112] ? __rseq_handle_notify_resume+0x353/0x14e0 [ 84.465926][ T5112] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 84.467982][ T5112] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 84.470071][ T5112] ? do_syscall_64+0x100/0x230 [ 84.471664][ T5112] __x64_sys_bpf+0x7c/0x90 [ 84.473318][ T5112] do_syscall_64+0xf3/0x230 [ 84.475168][ T5112] ? clear_bhb_loop+0x35/0x90 [ 84.477021][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.479420][ T5112] RIP: 0033:0x7ff7a817dff9 [ 84.481092][ T5112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.488209][ T5112] RSP: 002b:00007ff7a8eb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 84.491597][ T5112] RAX: ffffffffffffffda RBX: 00007ff7a8336058 RCX: 00007ff7a817dff9 [ 84.495804][ T5112] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 84.498899][ T5112] RBP: 00007ff7a81f0296 R08: 0000000000000000 R09: 0000000000000000 [ 84.501910][ T5112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.505290][ T5112] R13: 0000000000000000 R14: 00007ff7a8336058 R15: 00007ffe3304be48 [ 84.509118][ T5112] [ 84.510619][ T5112] BUG: Bad page state in process syz.0.0 pfn:12425 [ 84.513242][ T5112] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12425 [ 84.516824][ T5112] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 84.519701][ T5112] raw: 00fff00000000000 dead000000000040 ffff88804b2a2000 0000000000000000 [ 84.523067][ T5112] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 84.526366][ T5112] page dumped because: page_pool leak [ 84.528546][ T5112] page_owner tracks the page as allocated [ 84.532945][ T5112] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5112, tgid 5110 (syz.0.0), ts 82204486245, free_ts 82088167937 [ 84.539995][ T5112] post_alloc_hook+0x1f3/0x230 [ 84.541881][ T5112] get_page_from_freelist+0x3045/0x3190 [ 84.544227][ T5112] __alloc_pages_noprof+0x292/0x710 [ 84.546542][ T5112] alloc_pages_bulk_noprof+0x729/0xd40 [ 84.549126][ T5112] __page_pool_alloc_pages_slow+0x122/0x690 [ 84.551503][ T5112] page_pool_alloc_pages+0xd0/0x1c0 [ 84.553544][ T5112] bpf_test_run_xdp_live+0x950/0x2160 [ 84.555770][ T5112] bpf_prog_test_run_xdp+0x805/0x11e0 [ 84.558354][ T5112] bpf_prog_test_run+0x2e4/0x360 [ 84.560947][ T5112] __sys_bpf+0x48d/0x810 [ 84.562627][ T5112] __x64_sys_bpf+0x7c/0x90 [ 84.564182][ T5112] do_syscall_64+0xf3/0x230 [ 84.566083][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.569402][ T5112] page last free pid 9 tgid 9 stack trace: [ 84.572364][ T5112] free_unref_page+0xcfb/0xf20 [ 84.574233][ T5112] __slab_free+0x31b/0x3d0 [ 84.576013][ T5112] qlist_free_all+0x9a/0x140 [ 84.577815][ T5112] kasan_quarantine_reduce+0x14f/0x170 [ 84.579844][ T5112] __kasan_kmalloc+0x23/0xb0 [ 84.581969][ T5112] __kmalloc_node_track_caller_noprof+0x225/0x440 [ 84.585655][ T5112] kmalloc_reserve+0x111/0x2a0 [ 84.587806][ T5112] __alloc_skb+0x1f3/0x440 [ 84.589671][ T5112] alloc_skb_with_frags+0xc3/0x820 [ 84.591565][ T5112] sock_alloc_send_pskb+0x91a/0xa60 [ 84.593337][ T5112] mld_newpack+0x1c3/0xa90 [ 84.594848][ T5112] add_grec+0x1492/0x19a0 [ 84.596529][ T5112] mld_send_initial_cr+0x228/0x4b0 [ 84.598737][ T5112] mld_dad_work+0x44/0x500 [ 84.600393][ T5112] process_scheduled_works+0xa63/0x1850 [ 84.602764][ T5112] worker_thread+0x870/0xd30 [ 84.605531][ T5112] Modules linked in: [ 84.607686][ T5112] CPU: 0 UID: 0 PID: 5112 Comm: syz.0.0 Tainted: G B 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 84.612429][ T5112] Tainted: [B]=BAD_PAGE [ 84.613971][ T5112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.618331][ T5112] Call Trace: [ 84.619794][ T5112] [ 84.620937][ T5112] dump_stack_lvl+0x241/0x360 [ 84.622874][ T5112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 84.624750][ T5112] ? __pfx_print_modules+0x10/0x10 [ 84.626738][ T5112] bad_page+0x166/0x1b0 [ 84.628385][ T5112] free_unref_page+0xed0/0xf20 [ 84.630319][ T5112] skb_release_data+0x6dc/0x8a0 [ 84.632485][ T5112] sk_skb_reason_drop+0x1c9/0x380 [ 84.634617][ T5112] __netif_receive_skb_core+0x3edd/0x4570 [ 84.636866][ T5112] ? mark_lock+0x9a/0x360 [ 84.638608][ T5112] ? __lock_acquire+0x1384/0x2050 [ 84.640609][ T5112] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 84.643024][ T5112] ? mark_lock+0x9a/0x360 [ 84.644913][ T5112] ? __lock_acquire+0x1384/0x2050 [ 84.647093][ T5112] __netif_receive_skb_list_core+0x2b1/0x980 [ 84.649405][ T5112] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 84.651705][ T5112] ? timekeeping_get_ns+0x2c0/0x420 [ 84.653633][ T5112] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 84.656285][ T5112] netif_receive_skb_list_internal+0xa51/0xe30 [ 84.659208][ T5112] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 84.661835][ T5112] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 84.664477][ T5112] ? __pfx_eth_type_trans+0x10/0x10 [ 84.666293][ T5112] ? __phys_addr+0xba/0x170 [ 84.668098][ T5112] ? build_skb_around+0x111/0x260 [ 84.669990][ T5112] ? __xdp_build_skb_from_frame+0x338/0x650 [ 84.672335][ T5112] netif_receive_skb_list+0x55/0x4b0 [ 84.674828][ T5112] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 84.677281][ T5112] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 84.679807][ T5112] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 84.682079][ T5112] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 84.684180][ T5112] ? synchronize_rcu+0x11b/0x360 [ 84.685946][ T5112] ? __pfx_synchronize_rcu+0x10/0x10 [ 84.687960][ T5112] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 84.690419][ T5112] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 84.692980][ T5112] ? _copy_from_user+0xa6/0xe0 [ 84.695432][ T5112] ? bpf_test_init+0x15a/0x180 [ 84.697851][ T5112] ? xdp_convert_md_to_buff+0x5b/0x330 [ 84.700118][ T5112] bpf_prog_test_run_xdp+0x805/0x11e0 [ 84.702186][ T5112] ? __pfx_lock_release+0x10/0x10 [ 84.704174][ T5112] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 84.706442][ T5112] ? __fget_files+0x29/0x470 [ 84.708566][ T5112] ? fput+0x1a8/0x230 [ 84.710601][ T5112] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 84.713535][ T5112] bpf_prog_test_run+0x2e4/0x360 [ 84.715571][ T5112] __sys_bpf+0x48d/0x810 [ 84.717109][ T5112] ? __pfx___sys_bpf+0x10/0x10 [ 84.718775][ T5112] ? __rseq_handle_notify_resume+0x353/0x14e0 [ 84.720912][ T5112] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 84.723190][ T5112] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 84.725613][ T5112] ? do_syscall_64+0x100/0x230 [ 84.727464][ T5112] __x64_sys_bpf+0x7c/0x90 [ 84.729250][ T5112] do_syscall_64+0xf3/0x230 [ 84.731697][ T5112] ? clear_bhb_loop+0x35/0x90 [ 84.734330][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.736779][ T5112] RIP: 0033:0x7ff7a817dff9 [ 84.738672][ T5112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.746075][ T5112] RSP: 002b:00007ff7a8eb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 84.749903][ T5112] RAX: ffffffffffffffda RBX: 00007ff7a8336058 RCX: 00007ff7a817dff9 [ 84.753284][ T5112] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 84.756330][ T5112] RBP: 00007ff7a81f0296 R08: 0000000000000000 R09: 0000000000000000 [ 84.759060][ T5112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.762257][ T5112] R13: 0000000000000000 R14: 00007ff7a8336058 R15: 00007ffe3304be48 [ 84.766205][ T5112] [ 84.767957][ T5112] BUG: Bad page state in process syz.0.0 pfn:12424 [ 84.770610][ T5112] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12424 [ 84.773946][ T5112] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 84.776828][ T5112] raw: 00fff00000000000 dead000000000040 ffff88804b2a2000 0000000000000000 [ 84.780683][ T5112] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 84.784794][ T5112] page dumped because: page_pool leak [ 84.787279][ T5112] page_owner tracks the page as allocated [ 84.789449][ T5112] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5112, tgid 5110 (syz.0.0), ts 82204478936, free_ts 82088167937 [ 84.795509][ T5112] post_alloc_hook+0x1f3/0x230 [ 84.797337][ T5112] get_page_from_freelist+0x3045/0x3190 [ 84.799436][ T5112] __alloc_pages_noprof+0x292/0x710 [ 84.801533][ T5112] alloc_pages_bulk_noprof+0x729/0xd40 [ 84.804527][ T5112] __page_pool_alloc_pages_slow+0x122/0x690 [ 84.807728][ T5112] page_pool_alloc_pages+0xd0/0x1c0 [ 84.809641][ T5112] bpf_test_run_xdp_live+0x950/0x2160 [ 84.811663][ T5112] bpf_prog_test_run_xdp+0x805/0x11e0 [ 84.813766][ T5112] bpf_prog_test_run+0x2e4/0x360 [ 84.815814][ T5112] __sys_bpf+0x48d/0x810 [ 84.818054][ T5112] __x64_sys_bpf+0x7c/0x90 [ 84.819942][ T5112] do_syscall_64+0xf3/0x230 [ 84.821818][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.824234][ T5112] page last free pid 9 tgid 9 stack trace: [ 84.826553][ T5112] free_unref_page+0xcfb/0xf20 [ 84.828477][ T5112] __slab_free+0x31b/0x3d0 [ 84.830303][ T5112] qlist_free_all+0x9a/0x140 [ 84.832155][ T5112] kasan_quarantine_reduce+0x14f/0x170 [ 84.834410][ T5112] __kasan_kmalloc+0x23/0xb0 [ 84.836503][ T5112] __kmalloc_node_track_caller_noprof+0x225/0x440 [ 84.839284][ T5112] kmalloc_reserve+0x111/0x2a0 [ 84.841028][ T5112] __alloc_skb+0x1f3/0x440 [ 84.842787][ T5112] alloc_skb_with_frags+0xc3/0x820 [ 84.844998][ T5112] sock_alloc_send_pskb+0x91a/0xa60 [ 84.847411][ T5112] mld_newpack+0x1c3/0xa90 [ 84.849246][ T5112] add_grec+0x1492/0x19a0 [ 84.850948][ T5112] mld_send_initial_cr+0x228/0x4b0 [ 84.852936][ T5112] mld_dad_work+0x44/0x500 [ 84.854583][ T5112] process_scheduled_works+0xa63/0x1850 [ 84.856702][ T5112] worker_thread+0x870/0xd30 [ 84.858644][ T5112] Modules linked in: [ 84.860803][ T5112] CPU: 0 UID: 0 PID: 5112 Comm: syz.0.0 Tainted: G B 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 84.867011][ T5112] Tainted: [B]=BAD_PAGE [ 84.868632][ T5112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.872670][ T5112] Call Trace: [ 84.873999][ T5112] [ 84.875323][ T5112] dump_stack_lvl+0x241/0x360 [ 84.877418][ T5112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 84.879961][ T5112] ? __pfx_print_modules+0x10/0x10 [ 84.882246][ T5112] bad_page+0x166/0x1b0 [ 84.883906][ T5112] free_unref_page+0xed0/0xf20 [ 84.885658][ T5112] skb_release_data+0x6dc/0x8a0 [ 84.887571][ T5112] sk_skb_reason_drop+0x1c9/0x380 [ 84.889469][ T5112] __netif_receive_skb_core+0x3edd/0x4570 [ 84.891527][ T5112] ? mark_lock+0x9a/0x360 [ 84.893426][ T5112] ? __lock_acquire+0x1384/0x2050 [ 84.895910][ T5112] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 84.898710][ T5112] ? mark_lock+0x9a/0x360 [ 84.900459][ T5112] ? __lock_acquire+0x1384/0x2050 [ 84.902337][ T5112] __netif_receive_skb_list_core+0x2b1/0x980 [ 84.904547][ T5112] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 84.907200][ T5112] ? timekeeping_get_ns+0x2c0/0x420 [ 84.909913][ T5112] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 84.913270][ T5112] netif_receive_skb_list_internal+0xa51/0xe30 [ 84.915867][ T5112] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 84.918460][ T5112] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 84.921793][ T5112] ? __pfx_eth_type_trans+0x10/0x10 [ 84.924198][ T5112] ? __phys_addr+0xba/0x170 [ 84.925841][ T5112] ? build_skb_around+0x111/0x260 [ 84.927679][ T5112] ? __xdp_build_skb_from_frame+0x338/0x650 [ 84.929791][ T5112] netif_receive_skb_list+0x55/0x4b0 [ 84.932180][ T5112] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 84.934529][ T5112] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 84.937107][ T5112] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 84.939379][ T5112] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 84.941617][ T5112] ? synchronize_rcu+0x11b/0x360 [ 84.943528][ T5112] ? __pfx_synchronize_rcu+0x10/0x10 [ 84.945421][ T5112] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 84.947774][ T5112] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 84.950669][ T5112] ? _copy_from_user+0xa6/0xe0 [ 84.953850][ T5112] ? bpf_test_init+0x15a/0x180 [ 84.955803][ T5112] ? xdp_convert_md_to_buff+0x5b/0x330 [ 84.957936][ T5112] bpf_prog_test_run_xdp+0x805/0x11e0 [ 84.960111][ T5112] ? __pfx_lock_release+0x10/0x10 [ 84.962287][ T5112] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 84.964527][ T5112] ? __fget_files+0x29/0x470 [ 84.966720][ T5112] ? fput+0x1a8/0x230 [ 84.968863][ T5112] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 84.971399][ T5112] bpf_prog_test_run+0x2e4/0x360 [ 84.973121][ T5112] __sys_bpf+0x48d/0x810 [ 84.974580][ T5112] ? __pfx___sys_bpf+0x10/0x10 [ 84.976400][ T5112] ? __rseq_handle_notify_resume+0x353/0x14e0 [ 84.978680][ T5112] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 84.981091][ T5112] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 84.984427][ T5112] ? do_syscall_64+0x100/0x230 [ 84.986504][ T5112] __x64_sys_bpf+0x7c/0x90 [ 84.988157][ T5112] do_syscall_64+0xf3/0x230 [ 84.989588][ T5112] ? clear_bhb_loop+0x35/0x90 [ 84.991373][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.993784][ T5112] RIP: 0033:0x7ff7a817dff9 [ 84.995773][ T5112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.002950][ T5112] RSP: 002b:00007ff7a8eb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 85.006764][ T5112] RAX: ffffffffffffffda RBX: 00007ff7a8336058 RCX: 00007ff7a817dff9 [ 85.010196][ T5112] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 85.013324][ T5112] RBP: 00007ff7a81f0296 R08: 0000000000000000 R09: 0000000000000000 [ 85.016514][ T5112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.019808][ T5112] R13: 0000000000000000 R14: 00007ff7a8336058 R15: 00007ffe3304be48 [ 85.023086][ T5112] [ 85.024717][ T5112] BUG: Bad page state in process syz.0.0 pfn:12423 [ 85.027338][ T5112] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12423 [ 85.030773][ T5112] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 85.033966][ T5112] raw: 00fff00000000000 dead000000000040 ffff88804b2a2000 0000000000000000 [ 85.037950][ T5112] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 85.041402][ T5112] page dumped because: page_pool leak [ 85.043479][ T5112] page_owner tracks the page as allocated [ 85.045905][ T5112] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5112, tgid 5110 (syz.0.0), ts 82204471736, free_ts 82088167937 [ 85.053484][ T5112] post_alloc_hook+0x1f3/0x230 [ 85.055444][ T5112] get_page_from_freelist+0x3045/0x3190 [ 85.057498][ T5112] __alloc_pages_noprof+0x292/0x710 [ 85.059500][ T5112] alloc_pages_bulk_noprof+0x729/0xd40 [ 85.061814][ T5112] __page_pool_alloc_pages_slow+0x122/0x690 [ 85.064998][ T5112] page_pool_alloc_pages+0xd0/0x1c0 [ 85.067555][ T5112] bpf_test_run_xdp_live+0x950/0x2160 [ 85.069580][ T5112] bpf_prog_test_run_xdp+0x805/0x11e0 [ 85.071681][ T5112] bpf_prog_test_run+0x2e4/0x360 [ 85.073456][ T5112] __sys_bpf+0x48d/0x810 [ 85.075030][ T5112] __x64_sys_bpf+0x7c/0x90 [ 85.076802][ T5112] do_syscall_64+0xf3/0x230 [ 85.078481][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.080923][ T5112] page last free pid 9 tgid 9 stack trace: [ 85.084230][ T5112] free_unref_page+0xcfb/0xf20 [ 85.086794][ T5112] __slab_free+0x31b/0x3d0 [ 85.088580][ T5112] qlist_free_all+0x9a/0x140 [ 85.090297][ T5112] kasan_quarantine_reduce+0x14f/0x170 [ 85.092388][ T5112] __kasan_kmalloc+0x23/0xb0 [ 85.094169][ T5112] __kmalloc_node_track_caller_noprof+0x225/0x440 [ 85.096591][ T5112] kmalloc_reserve+0x111/0x2a0 [ 85.098684][ T5112] __alloc_skb+0x1f3/0x440 [ 85.101049][ T5112] alloc_skb_with_frags+0xc3/0x820 [ 85.103450][ T5112] sock_alloc_send_pskb+0x91a/0xa60 [ 85.105521][ T5112] mld_newpack+0x1c3/0xa90 [ 85.107270][ T5112] add_grec+0x1492/0x19a0 [ 85.108988][ T5112] mld_send_initial_cr+0x228/0x4b0 [ 85.110932][ T5112] mld_dad_work+0x44/0x500 [ 85.112603][ T5112] process_scheduled_works+0xa63/0x1850 [ 85.115400][ T5112] worker_thread+0x870/0xd30 [ 85.117712][ T5112] Modules linked in: [ 85.119373][ T5112] CPU: 0 UID: 0 PID: 5112 Comm: syz.0.0 Tainted: G B 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 85.123924][ T5112] Tainted: [B]=BAD_PAGE [ 85.125460][ T5112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.130242][ T5112] Call Trace: [ 85.131803][ T5112] [ 85.133001][ T5112] dump_stack_lvl+0x241/0x360 [ 85.134785][ T5112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.136699][ T5112] ? __pfx_print_modules+0x10/0x10 [ 85.138606][ T5112] bad_page+0x166/0x1b0 [ 85.140331][ T5112] free_unref_page+0xed0/0xf20 [ 85.142615][ T5112] skb_release_data+0x6dc/0x8a0 [ 85.145041][ T5112] sk_skb_reason_drop+0x1c9/0x380 [ 85.147301][ T5112] __netif_receive_skb_core+0x3edd/0x4570 [ 85.149660][ T5112] ? mark_lock+0x9a/0x360 [ 85.151310][ T5112] ? __lock_acquire+0x1384/0x2050 [ 85.153217][ T5112] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 85.155628][ T5112] ? mark_lock+0x9a/0x360 [ 85.157466][ T5112] ? __lock_acquire+0x1384/0x2050 [ 85.159541][ T5112] __netif_receive_skb_list_core+0x2b1/0x980 [ 85.161896][ T5112] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 85.164442][ T5112] ? timekeeping_get_ns+0x2c0/0x420 [ 85.166299][ T5112] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 85.168728][ T5112] netif_receive_skb_list_internal+0xa51/0xe30 [ 85.171388][ T5112] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 85.174591][ T5112] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 85.177549][ T5112] ? __pfx_eth_type_trans+0x10/0x10 [ 85.179634][ T5112] ? __phys_addr+0xba/0x170 [ 85.181363][ T5112] ? build_skb_around+0x111/0x260 [ 85.183279][ T5112] ? __xdp_build_skb_from_frame+0x338/0x650 [ 85.185525][ T5112] netif_receive_skb_list+0x55/0x4b0 [ 85.187429][ T5112] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 85.189534][ T5112] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 85.192050][ T5112] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 85.194712][ T5112] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 85.197179][ T5112] ? synchronize_rcu+0x11b/0x360 [ 85.199093][ T5112] ? __pfx_synchronize_rcu+0x10/0x10 [ 85.201038][ T5112] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 85.203476][ T5112] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 85.206346][ T5112] ? _copy_from_user+0xa6/0xe0 [ 85.208751][ T5112] ? bpf_test_init+0x15a/0x180 [ 85.210573][ T5112] ? xdp_convert_md_to_buff+0x5b/0x330 [ 85.212665][ T5112] bpf_prog_test_run_xdp+0x805/0x11e0 [ 85.214651][ T5112] ? __pfx_lock_release+0x10/0x10 [ 85.216546][ T5112] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 85.219121][ T5112] ? __fget_files+0x29/0x470 [ 85.221581][ T5112] ? fput+0x1a8/0x230 [ 85.223591][ T5112] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 85.225843][ T5112] bpf_prog_test_run+0x2e4/0x360 [ 85.227727][ T5112] __sys_bpf+0x48d/0x810 [ 85.229362][ T5112] ? __pfx___sys_bpf+0x10/0x10 [ 85.231203][ T5112] ? __rseq_handle_notify_resume+0x353/0x14e0 [ 85.233465][ T5112] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 85.235901][ T5112] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 85.238915][ T5112] ? do_syscall_64+0x100/0x230 [ 85.241164][ T5112] __x64_sys_bpf+0x7c/0x90 [ 85.243198][ T5112] do_syscall_64+0xf3/0x230 [ 85.244875][ T5112] ? clear_bhb_loop+0x35/0x90 [ 85.246573][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.248865][ T5112] RIP: 0033:0x7ff7a817dff9 [ 85.250541][ T5112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.259154][ T5112] RSP: 002b:00007ff7a8eb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 85.262028][ T5112] RAX: ffffffffffffffda RBX: 00007ff7a8336058 RCX: 00007ff7a817dff9 [ 85.264711][ T5112] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 85.267697][ T5112] RBP: 00007ff7a81f0296 R08: 0000000000000000 R09: 0000000000000000 [ 85.271828][ T5112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.275320][ T5112] R13: 0000000000000000 R14: 00007ff7a8336058 R15: 00007ffe3304be48 [ 85.278177][ T5112] [ 85.279467][ T5112] BUG: Bad page state in process syz.0.0 pfn:12422 [ 85.281936][ T5112] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12422 [ 85.286169][ T5112] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 85.289249][ T5112] raw: 00fff00000000000 dead000000000040 ffff88804b2a2000 0000000000000000 [ 85.292391][ T5112] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 85.295375][ T5112] page dumped because: page_pool leak [ 85.297246][ T5112] page_owner tracks the page as allocated [ 85.299701][ T5112] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5112, tgid 5110 (syz.0.0), ts 82204464318, free_ts 82088167937 [ 85.313259][ T5112] post_alloc_hook+0x1f3/0x230 [ 85.315260][ T5112] get_page_from_freelist+0x3045/0x3190 [ 85.317988][ T5112] __alloc_pages_noprof+0x292/0x710 [ 85.320854][ T5112] alloc_pages_bulk_noprof+0x729/0xd40 [ 85.323014][ T5112] __page_pool_alloc_pages_slow+0x122/0x690 [ 85.325256][ T5112] page_pool_alloc_pages+0xd0/0x1c0 [ 85.327305][ T5112] bpf_test_run_xdp_live+0x950/0x2160 [ 85.329307][ T5112] bpf_prog_test_run_xdp+0x805/0x11e0 [ 85.331437][ T5112] bpf_prog_test_run+0x2e4/0x360 [ 85.333704][ T5112] __sys_bpf+0x48d/0x810 [ 85.335972][ T5112] __x64_sys_bpf+0x7c/0x90 [ 85.338131][ T5112] do_syscall_64+0xf3/0x230 [ 85.339974][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.342206][ T5112] page last free pid 9 tgid 9 stack trace: [ 85.344505][ T5112] free_unref_page+0xcfb/0xf20 [ 85.346403][ T5112] __slab_free+0x31b/0x3d0 [ 85.348142][ T5112] qlist_free_all+0x9a/0x140 [ 85.349897][ T5112] kasan_quarantine_reduce+0x14f/0x170 [ 85.352425][ T5112] __kasan_kmalloc+0x23/0xb0 [ 85.354720][ T5112] __kmalloc_node_track_caller_noprof+0x225/0x440 [ 85.357918][ T5112] kmalloc_reserve+0x111/0x2a0 [ 85.359742][ T5112] __alloc_skb+0x1f3/0x440 [ 85.361406][ T5112] alloc_skb_with_frags+0xc3/0x820 [ 85.363418][ T5112] sock_alloc_send_pskb+0x91a/0xa60 [ 85.365516][ T5112] mld_newpack+0x1c3/0xa90 [ 85.367292][ T5112] add_grec+0x1492/0x19a0 [ 85.368948][ T5112] mld_send_initial_cr+0x228/0x4b0 [ 85.371268][ T5112] mld_dad_work+0x44/0x500 [ 85.373300][ T5112] process_scheduled_works+0xa63/0x1850 [ 85.375691][ T5112] worker_thread+0x870/0xd30 [ 85.377537][ T5112] Modules linked in: [ 85.379909][ T5112] CPU: 0 UID: 0 PID: 5112 Comm: syz.0.0 Tainted: G B 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 85.384219][ T5112] Tainted: [B]=BAD_PAGE [ 85.386126][ T5112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.391408][ T5112] Call Trace: [ 85.392793][ T5112] [ 85.393970][ T5112] dump_stack_lvl+0x241/0x360 [ 85.395830][ T5112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.397803][ T5112] ? __pfx_print_modules+0x10/0x10 [ 85.399758][ T5112] bad_page+0x166/0x1b0 [ 85.401438][ T5112] free_unref_page+0xed0/0xf20 [ 85.403681][ T5112] skb_release_data+0x6dc/0x8a0 [ 85.406004][ T5112] sk_skb_reason_drop+0x1c9/0x380 [ 85.408566][ T5112] __netif_receive_skb_core+0x3edd/0x4570 [ 85.410614][ T5112] ? mark_lock+0x9a/0x360 [ 85.412269][ T5112] ? __lock_acquire+0x1384/0x2050 [ 85.414201][ T5112] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 85.416496][ T5112] ? mark_lock+0x9a/0x360 [ 85.418244][ T5112] ? __lock_acquire+0x1384/0x2050 [ 85.420295][ T5112] __netif_receive_skb_list_core+0x2b1/0x980 [ 85.423086][ T5112] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 85.426232][ T5112] ? timekeeping_get_ns+0x2c0/0x420 [ 85.428171][ T5112] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 85.430419][ T5112] netif_receive_skb_list_internal+0xa51/0xe30 [ 85.432691][ T5112] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 85.435073][ T5112] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 85.437505][ T5112] ? __pfx_eth_type_trans+0x10/0x10 [ 85.439571][ T5112] ? __phys_addr+0xba/0x170 [ 85.441640][ T5112] ? build_skb_around+0x111/0x260 [ 85.444164][ T5112] ? __xdp_build_skb_from_frame+0x338/0x650 [ 85.446894][ T5112] netif_receive_skb_list+0x55/0x4b0 [ 85.448741][ T5112] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 85.450778][ T5112] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 85.453057][ T5112] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 85.455087][ T5112] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 85.457310][ T5112] ? synchronize_rcu+0x11b/0x360 [ 85.459707][ T5112] ? __pfx_synchronize_rcu+0x10/0x10 [ 85.462268][ T5112] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 85.465609][ T5112] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 85.468113][ T5112] ? _copy_from_user+0xa6/0xe0 [ 85.470134][ T5112] ? bpf_test_init+0x15a/0x180 [ 85.472247][ T5112] ? xdp_convert_md_to_buff+0x5b/0x330 [ 85.474712][ T5112] bpf_prog_test_run_xdp+0x805/0x11e0 [ 85.477124][ T5112] ? __pfx_lock_release+0x10/0x10 [ 85.479657][ T5112] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 85.482632][ T5112] ? __fget_files+0x29/0x470 [ 85.484605][ T5112] ? fput+0x1a8/0x230 [ 85.486234][ T5112] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 85.488343][ T5112] bpf_prog_test_run+0x2e4/0x360 [ 85.490085][ T5112] __sys_bpf+0x48d/0x810 [ 85.491595][ T5112] ? __pfx___sys_bpf+0x10/0x10 [ 85.493362][ T5112] ? __rseq_handle_notify_resume+0x353/0x14e0 [ 85.495834][ T5112] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 85.498066][ T5112] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 85.500100][ T5112] ? do_syscall_64+0x100/0x230 [ 85.501780][ T5112] __x64_sys_bpf+0x7c/0x90 [ 85.503363][ T5112] do_syscall_64+0xf3/0x230 [ 85.505016][ T5112] ? clear_bhb_loop+0x35/0x90 [ 85.506749][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.509017][ T5112] RIP: 0033:0x7ff7a817dff9 [ 85.510759][ T5112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.517919][ T5112] RSP: 002b:00007ff7a8eb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 85.520919][ T5112] RAX: ffffffffffffffda RBX: 00007ff7a8336058 RCX: 00007ff7a817dff9 [ 85.523947][ T5112] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 85.526574][ T5112] RBP: 00007ff7a81f0296 R08: 0000000000000000 R09: 0000000000000000 [ 85.529322][ T5112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.532024][ T5112] R13: 0000000000000000 R14: 00007ff7a8336058 R15: 00007ffe3304be48 [ 85.534715][ T5112] [ 85.536187][ T5112] BUG: Bad page state in process syz.0.0 pfn:12421 [ 85.538672][ T5112] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x8 pfn:0x12421 [ 85.542058][ T5112] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 85.544671][ T5112] raw: 00fff00000000000 dead000000000040 ffff88804b2a2000 0000000000000000 [ 85.547903][ T5112] raw: 0000000000000008 0000000000000001 00000000ffffffff 0000000000000000 [ 85.551184][ T5112] page dumped because: page_pool leak [ 85.553199][ T5112] page_owner tracks the page as allocated [ 85.555248][ T5112] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5112, tgid 5110 (syz.0.0), ts 82204456949, free_ts 82088167937 [ 85.562975][ T5112] post_alloc_hook+0x1f3/0x230 [ 85.565052][ T5112] get_page_from_freelist+0x3045/0x3190 [ 85.567283][ T5112] __alloc_pages_noprof+0x292/0x710 [ 85.569145][ T5112] alloc_pages_bulk_noprof+0x729/0xd40 [ 85.571344][ T5112] __page_pool_alloc_pages_slow+0x122/0x690 [ 85.573663][ T5112] page_pool_alloc_pages+0xd0/0x1c0 [ 85.576243][ T5112] bpf_test_run_xdp_live+0x950/0x2160 [ 85.579015][ T5112] bpf_prog_test_run_xdp+0x805/0x11e0 [ 85.581377][ T5112] bpf_prog_test_run+0x2e4/0x360 [ 85.583473][ T5112] __sys_bpf+0x48d/0x810 [ 85.585093][ T5112] __x64_sys_bpf+0x7c/0x90 [ 85.586957][ T5112] do_syscall_64+0xf3/0x230 [ 85.588925][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.591652][ T5112] page last free pid 9 tgid 9 stack trace: [ 85.594498][ T5112] free_unref_page+0xcfb/0xf20 [ 85.596704][ T5112] __slab_free+0x31b/0x3d0 [ 85.598329][ T5112] qlist_free_all+0x9a/0x140 [ 85.599988][ T5112] kasan_quarantine_reduce+0x14f/0x170 [ 85.601971][ T5112] __kasan_kmalloc+0x23/0xb0 [ 85.603657][ T5112] __kmalloc_node_track_caller_noprof+0x225/0x440 [ 85.606387][ T5112] kmalloc_reserve+0x111/0x2a0 [ 85.608486][ T5112] __alloc_skb+0x1f3/0x440 [ 85.610212][ T5112] alloc_skb_with_frags+0xc3/0x820 [ 85.612240][ T5112] sock_alloc_send_pskb+0x91a/0xa60 [ 85.614178][ T5112] mld_newpack+0x1c3/0xa90 [ 85.615890][ T5112] add_grec+0x1492/0x19a0 [ 85.617549][ T5112] mld_send_initial_cr+0x228/0x4b0 [ 85.619833][ T5112] mld_dad_work+0x44/0x500 [ 85.622213][ T5112] process_scheduled_works+0xa63/0x1850 [ 85.625175][ T5112] worker_thread+0x870/0xd30 [ 85.627788][ T5112] Modules linked in: [ 85.629269][ T5112] CPU: 0 UID: 0 PID: 5112 Comm: syz.0.0 Tainted: G B 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 85.633535][ T5112] Tainted: [B]=BAD_PAGE [ 85.635114][ T5112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.638729][ T5112] Call Trace: [ 85.639863][ T5112] [ 85.640973][ T5112] dump_stack_lvl+0x241/0x360 [ 85.643103][ T5112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.645379][ T5112] ? __pfx_print_modules+0x10/0x10 [ 85.647403][ T5112] bad_page+0x166/0x1b0 [ 85.648949][ T5112] free_unref_page+0xed0/0xf20 [ 85.650717][ T5112] skb_release_data+0x6dc/0x8a0 [ 85.652440][ T5112] sk_skb_reason_drop+0x1c9/0x380 [ 85.654120][ T5112] __netif_receive_skb_core+0x3edd/0x4570 [ 85.656277][ T5112] ? mark_lock+0x9a/0x360 [ 85.658324][ T5112] ? __lock_acquire+0x1384/0x2050 [ 85.660740][ T5112] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 85.663662][ T5112] ? mark_lock+0x9a/0x360 [ 85.665834][ T5112] ? __lock_acquire+0x1384/0x2050 [ 85.668320][ T5112] __netif_receive_skb_list_core+0x2b1/0x980 [ 85.670667][ T5112] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 85.673228][ T5112] ? timekeeping_get_ns+0x2c0/0x420 [ 85.675264][ T5112] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 85.677594][ T5112] netif_receive_skb_list_internal+0xa51/0xe30 [ 85.679798][ T5112] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 85.682343][ T5112] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 85.685672][ T5112] ? __pfx_eth_type_trans+0x10/0x10 [ 85.688665][ T5112] ? __phys_addr+0xba/0x170 [ 85.690339][ T5112] ? build_skb_around+0x111/0x260 [ 85.692221][ T5112] ? __xdp_build_skb_from_frame+0x338/0x650 [ 85.694504][ T5112] netif_receive_skb_list+0x55/0x4b0 [ 85.696594][ T5112] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 85.698685][ T5112] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 85.701459][ T5112] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 85.704643][ T5112] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 85.707118][ T5112] ? synchronize_rcu+0x11b/0x360 [ 85.709146][ T5112] ? __pfx_synchronize_rcu+0x10/0x10 [ 85.711109][ T5112] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 85.713484][ T5112] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 85.715934][ T5112] ? _copy_from_user+0xa6/0xe0 [ 85.717823][ T5112] ? bpf_test_init+0x15a/0x180 [ 85.719879][ T5112] ? xdp_convert_md_to_buff+0x5b/0x330 [ 85.722272][ T5112] bpf_prog_test_run_xdp+0x805/0x11e0 [ 85.724459][ T5112] ? __pfx_lock_release+0x10/0x10 [ 85.726457][ T5112] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 85.728714][ T5112] ? __fget_files+0x29/0x470 [ 85.730555][ T5112] ? fput+0x1a8/0x230 [ 85.732072][ T5112] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 85.734199][ T5112] bpf_prog_test_run+0x2e4/0x360 [ 85.736519][ T5112] __sys_bpf+0x48d/0x810 [ 85.738566][ T5112] ? __pfx___sys_bpf+0x10/0x10 [ 85.741097][ T5112] ? __rseq_handle_notify_resume+0x353/0x14e0 [ 85.743615][ T5112] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 85.746054][ T5112] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 85.748515][ T5112] ? do_syscall_64+0x100/0x230 [ 85.750337][ T5112] __x64_sys_bpf+0x7c/0x90 [ 85.752182][ T5112] do_syscall_64+0xf3/0x230 [ 85.754109][ T5112] ? clear_bhb_loop+0x35/0x90 [ 85.756636][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.759270][ T5112] RIP: 0033:0x7ff7a817dff9 [ 85.761018][ T5112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.768653][ T5112] RSP: 002b:00007ff7a8eb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 85.772972][ T5112] RAX: ffffffffffffffda RBX: 00007ff7a8336058 RCX: 00007ff7a817dff9 [ 85.776652][ T5112] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 85.779389][ T5112] RBP: 00007ff7a81f0296 R08: 0000000000000000 R09: 0000000000000000 [ 85.782178][ T5112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.785031][ T5112] R13: 0000000000000000 R14: 00007ff7a8336058 R15: 00007ffe3304be48 [ 85.787671][ T5112] [ 85.789021][ T5112] BUG: Bad page state in process syz.0.0 pfn:12420 [ 85.791497][ T5112] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888012422200 pfn:0x12420 [ 85.796347][ T5112] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 85.799114][ T5112] raw: 00fff00000000000 dead000000000040 ffff88804b2a2000 0000000000000000 [ 85.802073][ T5112] raw: ffff888012422200 0000000000000001 00000000ffffffff 0000000000000000 [ 85.805397][ T5112] page dumped because: page_pool leak [ 85.808621][ T5112] page_owner tracks the page as allocated [ 85.811847][ T5112] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5112, tgid 5110 (syz.0.0), ts 82204449523, free_ts 82088167937 [ 85.817971][ T5112] post_alloc_hook+0x1f3/0x230 [ 85.819861][ T5112] get_page_from_freelist+0x3045/0x3190 [ 85.822077][ T5112] __alloc_pages_noprof+0x292/0x710 [ 85.824401][ T5112] alloc_pages_bulk_noprof+0x729/0xd40 [ 85.826918][ T5112] __page_pool_alloc_pages_slow+0x122/0x690 [ 85.829675][ T5112] page_pool_alloc_pages+0xd0/0x1c0 [ 85.831625][ T5112] bpf_test_run_xdp_live+0x950/0x2160 [ 85.833487][ T5112] bpf_prog_test_run_xdp+0x805/0x11e0 [ 85.835503][ T5112] bpf_prog_test_run+0x2e4/0x360 [ 85.837419][ T5112] __sys_bpf+0x48d/0x810 [ 85.839089][ T5112] __x64_sys_bpf+0x7c/0x90 [ 85.840880][ T5112] do_syscall_64+0xf3/0x230 [ 85.843693][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.847270][ T5112] page last free pid 9 tgid 9 stack trace: [ 85.849245][ T5112] free_unref_page+0xcfb/0xf20 [ 85.850870][ T5112] __slab_free+0x31b/0x3d0 [ 85.852533][ T5112] qlist_free_all+0x9a/0x140 [ 85.854211][ T5112] kasan_quarantine_reduce+0x14f/0x170 [ 85.856328][ T5112] __kasan_kmalloc+0x23/0xb0 [ 85.857988][ T5112] __kmalloc_node_track_caller_noprof+0x225/0x440 [ 85.860228][ T5112] kmalloc_reserve+0x111/0x2a0 [ 85.861877][ T5112] __alloc_skb+0x1f3/0x440 [ 85.863625][ T5112] alloc_skb_with_frags+0xc3/0x820 [ 85.865662][ T5112] sock_alloc_send_pskb+0x91a/0xa60 [ 85.867710][ T5112] mld_newpack+0x1c3/0xa90 [ 85.869272][ T5112] add_grec+0x1492/0x19a0 [ 85.870760][ T5112] mld_send_initial_cr+0x228/0x4b0 [ 85.872960][ T5112] mld_dad_work+0x44/0x500 [ 85.874823][ T5112] process_scheduled_works+0xa63/0x1850 [ 85.876837][ T5112] worker_thread+0x870/0xd30 [ 85.878773][ T5112] Modules linked in: [ 85.880650][ T5112] CPU: 0 UID: 0 PID: 5112 Comm: syz.0.0 Tainted: G B 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 85.885214][ T5112] Tainted: [B]=BAD_PAGE [ 85.886824][ T5112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.890792][ T5112] Call Trace: [ 85.892267][ T5112] [ 85.893598][ T5112] dump_stack_lvl+0x241/0x360 [ 85.895703][ T5112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.898078][ T5112] ? __pfx_print_modules+0x10/0x10 [ 85.900072][ T5112] bad_page+0x166/0x1b0 [ 85.901590][ T5112] free_unref_page+0xed0/0xf20 [ 85.903367][ T5112] skb_release_data+0x6dc/0x8a0 [ 85.905196][ T5112] sk_skb_reason_drop+0x1c9/0x380 [ 85.907030][ T5112] __netif_receive_skb_core+0x3edd/0x4570 [ 85.909289][ T5112] ? mark_lock+0x9a/0x360 [ 85.911141][ T5112] ? __lock_acquire+0x1384/0x2050 [ 85.913408][ T5112] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 85.916474][ T5112] ? mark_lock+0x9a/0x360 [ 85.918229][ T5112] ? __lock_acquire+0x1384/0x2050 [ 85.920140][ T5112] __netif_receive_skb_list_core+0x2b1/0x980 [ 85.922412][ T5112] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 85.924819][ T5112] ? timekeeping_get_ns+0x2c0/0x420 [ 85.926665][ T5112] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 85.929054][ T5112] netif_receive_skb_list_internal+0xa51/0xe30 [ 85.931782][ T5112] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 85.934947][ T5112] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 85.937742][ T5112] ? __pfx_eth_type_trans+0x10/0x10 [ 85.939490][ T5112] ? __phys_addr+0xba/0x170 [ 85.941091][ T5112] ? build_skb_around+0x111/0x260 [ 85.942897][ T5112] ? __xdp_build_skb_from_frame+0x338/0x650 [ 85.945058][ T5112] netif_receive_skb_list+0x55/0x4b0 [ 85.947091][ T5112] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 85.949563][ T5112] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 85.952538][ T5112] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 85.954584][ T5112] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 85.956810][ T5112] ? synchronize_rcu+0x11b/0x360 [ 85.958669][ T5112] ? __pfx_synchronize_rcu+0x10/0x10 [ 85.960586][ T5112] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 85.962962][ T5112] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 85.966510][ T5112] ? _copy_from_user+0xa6/0xe0 [ 85.969596][ T5112] ? bpf_test_init+0x15a/0x180 [ 85.971820][ T5112] ? xdp_convert_md_to_buff+0x5b/0x330 [ 85.974023][ T5112] bpf_prog_test_run_xdp+0x805/0x11e0 [ 85.976321][ T5112] ? __pfx_lock_release+0x10/0x10 [ 85.978411][ T5112] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 85.980726][ T5112] ? __fget_files+0x29/0x470 [ 85.982523][ T5112] ? fput+0x1a8/0x230 [ 85.983954][ T5112] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 85.986161][ T5112] bpf_prog_test_run+0x2e4/0x360 [ 85.988146][ T5112] __sys_bpf+0x48d/0x810 [ 85.989732][ T5112] ? __pfx___sys_bpf+0x10/0x10 [ 85.991423][ T5112] ? __rseq_handle_notify_resume+0x353/0x14e0 [ 85.993675][ T5112] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 85.996544][ T5112] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 85.999659][ T5112] ? do_syscall_64+0x100/0x230 [ 86.001359][ T5112] __x64_sys_bpf+0x7c/0x90 [ 86.002758][ T5112] do_syscall_64+0xf3/0x230 [ 86.004428][ T5112] ? clear_bhb_loop+0x35/0x90 [ 86.006120][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.008251][ T5112] RIP: 0033:0x7ff7a817dff9 [ 86.010150][ T5112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.017840][ T5112] RSP: 002b:00007ff7a8eb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 86.020773][ T5112] RAX: ffffffffffffffda RBX: 00007ff7a8336058 RCX: 00007ff7a817dff9 [ 86.024066][ T5112] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 86.027540][ T5112] RBP: 00007ff7a81f0296 R08: 0000000000000000 R09: 0000000000000000 [ 86.030565][ T5112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.033355][ T5112] R13: 0000000000000000 R14: 00007ff7a8336058 R15: 00007ffe3304be48 [ 86.036449][ T5112] [ 86.037823][ T5112] BUG: Bad page state in process syz.0.0 pfn:1268f [ 86.041014][ T5112] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1268f [ 86.044626][ T5112] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 86.047444][ T5112] raw: 00fff00000000000 dead000000000040 ffff88804b2a2000 0000000000000000 [ 86.050241][ T5112] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 86.053454][ T5112] page dumped because: page_pool leak [ 86.055681][ T5112] page_owner tracks the page as allocated [ 86.058167][ T5112] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5112, tgid 5110 (syz.0.0), ts 82204443024, free_ts 82088211358 [ 86.065017][ T5112] post_alloc_hook+0x1f3/0x230 [ 86.067139][ T5112] get_page_from_freelist+0x3045/0x3190 [ 86.069103][ T5112] __alloc_pages_noprof+0x292/0x710 [ 86.070940][ T5112] alloc_pages_bulk_noprof+0x729/0xd40 [ 86.073594][ T5112] __page_pool_alloc_pages_slow+0x122/0x690 [ 86.075815][ T5112] page_pool_alloc_pages+0xd0/0x1c0 [ 86.077620][ T5112] bpf_test_run_xdp_live+0x950/0x2160 [ 86.079440][ T5112] bpf_prog_test_run_xdp+0x805/0x11e0 [ 86.081279][ T5112] bpf_prog_test_run+0x2e4/0x360 [ 86.082910][ T5112] __sys_bpf+0x48d/0x810 [ 86.084376][ T5112] __x64_sys_bpf+0x7c/0x90 [ 86.086012][ T5112] do_syscall_64+0xf3/0x230 [ 86.087588][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.089667][ T5112] page last free pid 9 tgid 9 stack trace: [ 86.091644][ T5112] free_unref_page+0xcfb/0xf20 [ 86.093372][ T5112] __slab_free+0x31b/0x3d0 [ 86.094875][ T5112] qlist_free_all+0x9a/0x140 [ 86.096646][ T5112] kasan_quarantine_reduce+0x14f/0x170 [ 86.098656][ T5112] __kasan_kmalloc+0x23/0xb0 [ 86.100249][ T5112] __kmalloc_node_track_caller_noprof+0x225/0x440 [ 86.102364][ T5112] kmalloc_reserve+0x111/0x2a0 [ 86.103814][ T5112] __alloc_skb+0x1f3/0x440 [ 86.105388][ T5112] alloc_skb_with_frags+0xc3/0x820 [ 86.107086][ T5112] sock_alloc_send_pskb+0x91a/0xa60 [ 86.108823][ T5112] mld_newpack+0x1c3/0xa90 [ 86.110374][ T5112] add_grec+0x1492/0x19a0 [ 86.111933][ T5112] mld_send_initial_cr+0x228/0x4b0 [ 86.113820][ T5112] mld_dad_work+0x44/0x500 [ 86.115497][ T5112] process_scheduled_works+0xa63/0x1850 [ 86.117299][ T5112] worker_thread+0x870/0xd30 [ 86.118937][ T5112] Modules linked in: [ 86.120318][ T5112] CPU: 0 UID: 0 PID: 5112 Comm: syz.0.0 Tainted: G B 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 86.124393][ T5112] Tainted: [B]=BAD_PAGE [ 86.125851][ T5112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.130399][ T5112] Call Trace: [ 86.132105][ T5112] [ 86.133649][ T5112] dump_stack_lvl+0x241/0x360 [ 86.136015][ T5112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 86.137957][ T5112] ? __pfx_print_modules+0x10/0x10 [ 86.139985][ T5112] bad_page+0x166/0x1b0 [ 86.141511][ T5112] free_unref_page+0xed0/0xf20 [ 86.143173][ T5112] skb_release_data+0x6dc/0x8a0 [ 86.144728][ T5112] sk_skb_reason_drop+0x1c9/0x380 [ 86.146347][ T5112] __netif_receive_skb_core+0x3edd/0x4570 [ 86.148193][ T5112] ? mark_lock+0x9a/0x360 [ 86.149612][ T5112] ? __lock_acquire+0x1384/0x2050 [ 86.151240][ T5112] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 86.153142][ T5112] ? mark_lock+0x9a/0x360 [ 86.154809][ T5112] ? __lock_acquire+0x1384/0x2050 [ 86.156594][ T5112] __netif_receive_skb_list_core+0x2b1/0x980 [ 86.158668][ T5112] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 86.160927][ T5112] ? timekeeping_get_ns+0x2c0/0x420 [ 86.162737][ T5112] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 86.164842][ T5112] netif_receive_skb_list_internal+0xa51/0xe30 [ 86.166869][ T5112] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 86.168998][ T5112] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 86.171248][ T5112] ? __pfx_eth_type_trans+0x10/0x10 [ 86.173343][ T5112] ? __phys_addr+0xba/0x170 [ 86.174961][ T5112] ? build_skb_around+0x111/0x260 [ 86.176799][ T5112] ? __xdp_build_skb_from_frame+0x338/0x650 [ 86.178819][ T5112] netif_receive_skb_list+0x55/0x4b0 [ 86.180557][ T5112] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 86.182964][ T5112] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 86.186173][ T5112] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 86.188373][ T5112] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 86.190239][ T5112] ? synchronize_rcu+0x11b/0x360 [ 86.192320][ T5112] ? __pfx_synchronize_rcu+0x10/0x10 [ 86.194366][ T5112] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 86.196746][ T5112] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 86.199033][ T5112] ? _copy_from_user+0xa6/0xe0 [ 86.200690][ T5112] ? bpf_test_init+0x15a/0x180 [ 86.202613][ T5112] ? xdp_convert_md_to_buff+0x5b/0x330 [ 86.204525][ T5112] bpf_prog_test_run_xdp+0x805/0x11e0 [ 86.206427][ T5112] ? __pfx_lock_release+0x10/0x10 [ 86.208280][ T5112] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 86.210816][ T5112] ? __fget_files+0x29/0x470 [ 86.213340][ T5112] ? fput+0x1a8/0x230 [ 86.215539][ T5112] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 86.217613][ T5112] bpf_prog_test_run+0x2e4/0x360 [ 86.219388][ T5112] __sys_bpf+0x48d/0x810 [ 86.220993][ T5112] ? __pfx___sys_bpf+0x10/0x10 [ 86.222808][ T5112] ? __rseq_handle_notify_resume+0x353/0x14e0 [ 86.224806][ T5112] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 86.226826][ T5112] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 86.229509][ T5112] ? do_syscall_64+0x100/0x230 [ 86.231756][ T5112] __x64_sys_bpf+0x7c/0x90 [ 86.233659][ T5112] do_syscall_64+0xf3/0x230 [ 86.235357][ T5112] ? clear_bhb_loop+0x35/0x90 [ 86.236945][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.239096][ T5112] RIP: 0033:0x7ff7a817dff9 [ 86.240674][ T5112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.249288][ T5112] RSP: 002b:00007ff7a8eb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 86.252814][ T5112] RAX: ffffffffffffffda RBX: 00007ff7a8336058 RCX: 00007ff7a817dff9 [ 86.255787][ T5112] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 86.258679][ T5112] RBP: 00007ff7a81f0296 R08: 0000000000000000 R09: 0000000000000000 [ 86.261471][ T5112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.264494][ T5112] R13: 0000000000000000 R14: 00007ff7a8336058 R15: 00007ffe3304be48 [ 86.267845][ T5112] [ 86.269417][ T5112] BUG: Bad page state in process syz.0.0 pfn:1268e [ 86.272075][ T5112] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1268e [ 86.275086][ T5112] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 86.277640][ T5112] raw: 00fff00000000000 dead000000000040 ffff88804b2a2000 0000000000000000 [ 86.280596][ T5112] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 86.284680][ T5112] page dumped because: page_pool leak [ 86.287179][ T5112] page_owner tracks the page as allocated [ 86.289488][ T5112] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5112, tgid 5110 (syz.0.0), ts 82204434417, free_ts 82088211358 [ 86.295514][ T5112] post_alloc_hook+0x1f3/0x230 [ 86.297291][ T5112] get_page_from_freelist+0x3045/0x3190 [ 86.299319][ T5112] __alloc_pages_noprof+0x292/0x710 [ 86.301309][ T5112] alloc_pages_bulk_noprof+0x729/0xd40 [ 86.303741][ T5112] __page_pool_alloc_pages_slow+0x122/0x690 [ 86.306722][ T5112] page_pool_alloc_pages+0xd0/0x1c0 [ 86.308974][ T5112] bpf_test_run_xdp_live+0x950/0x2160 [ 86.311272][ T5112] bpf_prog_test_run_xdp+0x805/0x11e0 [ 86.313188][ T5112] bpf_prog_test_run+0x2e4/0x360 [ 86.314917][ T5112] __sys_bpf+0x48d/0x810 [ 86.316428][ T5112] __x64_sys_bpf+0x7c/0x90 [ 86.317931][ T5112] do_syscall_64+0xf3/0x230 [ 86.319499][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.321769][ T5112] page last free pid 9 tgid 9 stack trace: [ 86.324476][ T5112] free_unref_page+0xcfb/0xf20 [ 86.327212][ T5112] __slab_free+0x31b/0x3d0 [ 86.329270][ T5112] qlist_free_all+0x9a/0x140 [ 86.331183][ T5112] kasan_quarantine_reduce+0x14f/0x170 [ 86.333170][ T5112] __kasan_kmalloc+0x23/0xb0 [ 86.334844][ T5112] __kmalloc_node_track_caller_noprof+0x225/0x440 [ 86.337100][ T5112] kmalloc_reserve+0x111/0x2a0 [ 86.338543][ T5112] __alloc_skb+0x1f3/0x440 [ 86.340042][ T5112] alloc_skb_with_frags+0xc3/0x820 [ 86.341742][ T5112] sock_alloc_send_pskb+0x91a/0xa60 [ 86.343653][ T5112] mld_newpack+0x1c3/0xa90 [ 86.345447][ T5112] add_grec+0x1492/0x19a0 [ 86.347224][ T5112] mld_send_initial_cr+0x228/0x4b0 [ 86.349120][ T5112] mld_dad_work+0x44/0x500 [ 86.350793][ T5112] process_scheduled_works+0xa63/0x1850 [ 86.352893][ T5112] worker_thread+0x870/0xd30 [ 86.354749][ T5112] Modules linked in: [ 86.356324][ T5112] CPU: 0 UID: 0 PID: 5112 Comm: syz.0.0 Tainted: G B 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 86.360644][ T5112] Tainted: [B]=BAD_PAGE [ 86.362549][ T5112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.367138][ T5112] Call Trace: [ 86.368589][ T5112] [ 86.369689][ T5112] dump_stack_lvl+0x241/0x360 [ 86.371386][ T5112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 86.373129][ T5112] ? __pfx_print_modules+0x10/0x10 [ 86.374831][ T5112] bad_page+0x166/0x1b0 [ 86.376442][ T5112] free_unref_page+0xed0/0xf20 [ 86.378216][ T5112] skb_release_data+0x6dc/0x8a0 [ 86.380110][ T5112] sk_skb_reason_drop+0x1c9/0x380 [ 86.381917][ T5112] __netif_receive_skb_core+0x3edd/0x4570 [ 86.384185][ T5112] ? mark_lock+0x9a/0x360 [ 86.385774][ T5112] ? __lock_acquire+0x1384/0x2050 [ 86.387541][ T5112] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 86.389631][ T5112] ? mark_lock+0x9a/0x360 [ 86.391145][ T5112] ? __lock_acquire+0x1384/0x2050 [ 86.392918][ T5112] __netif_receive_skb_list_core+0x2b1/0x980 [ 86.395579][ T5112] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 86.398818][ T5112] ? timekeeping_get_ns+0x2c0/0x420 [ 86.401450][ T5112] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 86.403813][ T5112] netif_receive_skb_list_internal+0xa51/0xe30 [ 86.405951][ T5112] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 86.408254][ T5112] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 86.410537][ T5112] ? __pfx_eth_type_trans+0x10/0x10 [ 86.412335][ T5112] ? __phys_addr+0xba/0x170 [ 86.413946][ T5112] ? build_skb_around+0x111/0x260 [ 86.415857][ T5112] ? __xdp_build_skb_from_frame+0x338/0x650 [ 86.418329][ T5112] netif_receive_skb_list+0x55/0x4b0 [ 86.421056][ T5112] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 86.423920][ T5112] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 86.426168][ T5112] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 86.428149][ T5112] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 86.430059][ T5112] ? synchronize_rcu+0x11b/0x360 [ 86.431957][ T5112] ? __pfx_synchronize_rcu+0x10/0x10 [ 86.433763][ T5112] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 86.436550][ T5112] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 86.438846][ T5112] ? _copy_from_user+0xa6/0xe0 [ 86.440950][ T5112] ? bpf_test_init+0x15a/0x180 [ 86.444834][ T5112] ? xdp_convert_md_to_buff+0x5b/0x330 [ 86.446672][ T5112] bpf_prog_test_run_xdp+0x805/0x11e0 [ 86.448528][ T5112] ? __pfx_lock_release+0x10/0x10 [ 86.450130][ T5112] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 86.452029][ T5112] ? __fget_files+0x29/0x470 [ 86.453576][ T5112] ? fput+0x1a8/0x230 [ 86.454886][ T5112] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 86.456795][ T5112] bpf_prog_test_run+0x2e4/0x360 [ 86.458635][ T5112] __sys_bpf+0x48d/0x810 [ 86.463749][ T5112] ? __pfx___sys_bpf+0x10/0x10 [ 86.465539][ T5112] ? __rseq_handle_notify_resume+0x353/0x14e0 [ 86.467537][ T5112] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 86.469594][ T5112] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 86.472144][ T5112] ? do_syscall_64+0x100/0x230 [ 86.474768][ T5112] __x64_sys_bpf+0x7c/0x90 [ 86.477186][ T5112] do_syscall_64+0xf3/0x230 [ 86.479012][ T5112] ? clear_bhb_loop+0x35/0x90 [ 86.480447][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.482358][ T5112] RIP: 0033:0x7ff7a817dff9 [ 86.484153][ T5112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.492307][ T5112] RSP: 002b:00007ff7a8eb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 86.495737][ T5112] RAX: ffffffffffffffda RBX: 00007ff7a8336058 RCX: 00007ff7a817dff9 [ 86.498910][ T5112] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 86.501939][ T5112] RBP: 00007ff7a81f0296 R08: 0000000000000000 R09: 0000000000000000 [ 86.504858][ T5112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.507692][ T5112] R13: 0000000000000000 R14: 00007ff7a8336058 R15: 00007ffe3304be48 [ 86.510445][ T5112] [ 86.511847][ T5112] BUG: Bad page state in process syz.0.0 pfn:1268d [ 86.514113][ T5112] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1268d [ 86.517302][ T5112] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 86.520085][ T5112] raw: 00fff00000000000 dead000000000040 ffff88804b2a2000 0000000000000000 [ 86.523540][ T5112] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 86.527138][ T5112] page dumped because: page_pool leak [ 86.529208][ T5112] page_owner tracks the page as allocated [ 86.531159][ T5112] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5112, tgid 5110 (syz.0.0), ts 82204404822, free_ts 82088211358 [ 86.536776][ T5112] post_alloc_hook+0x1f3/0x230 [ 86.538695][ T5112] get_page_from_freelist+0x3045/0x3190 [ 86.541704][ T5112] __alloc_pages_noprof+0x292/0x710 [ 86.543589][ T5112] alloc_pages_bulk_noprof+0x729/0xd40 [ 86.545567][ T5112] __page_pool_alloc_pages_slow+0x122/0x690 [ 86.547844][ T5112] page_pool_alloc_pages+0xd0/0x1c0 [ 86.549369][ T5112] bpf_test_run_xdp_live+0x950/0x2160 [ 86.551342][ T5112] bpf_prog_test_run_xdp+0x805/0x11e0 [ 86.553463][ T5112] bpf_prog_test_run+0x2e4/0x360 [ 86.555685][ T5112] __sys_bpf+0x48d/0x810 [ 86.557311][ T5112] __x64_sys_bpf+0x7c/0x90 [ 86.559053][ T5112] do_syscall_64+0xf3/0x230 [ 86.560850][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.563087][ T5112] page last free pid 9 tgid 9 stack trace: [ 86.565210][ T5112] free_unref_page+0xcfb/0xf20 [ 86.567161][ T5112] __slab_free+0x31b/0x3d0 [ 86.569175][ T5112] qlist_free_all+0x9a/0x140 [ 86.571469][ T5112] kasan_quarantine_reduce+0x14f/0x170 [ 86.573682][ T5112] __kasan_kmalloc+0x23/0xb0 [ 86.575516][ T5112] __kmalloc_node_track_caller_noprof+0x225/0x440 [ 86.577753][ T5112] kmalloc_reserve+0x111/0x2a0 [ 86.579482][ T5112] __alloc_skb+0x1f3/0x440 [ 86.581117][ T5112] alloc_skb_with_frags+0xc3/0x820 [ 86.583188][ T5112] sock_alloc_send_pskb+0x91a/0xa60 [ 86.585472][ T5112] mld_newpack+0x1c3/0xa90 [ 86.587920][ T5112] add_grec+0x1492/0x19a0 [ 86.590176][ T5112] mld_send_initial_cr+0x228/0x4b0 [ 86.592441][ T5112] mld_dad_work+0x44/0x500 [ 86.593902][ T5112] process_scheduled_works+0xa63/0x1850 [ 86.595985][ T5112] worker_thread+0x870/0xd30 [ 86.597396][ T5112] Modules linked in: [ 86.598589][ T5112] CPU: 0 UID: 0 PID: 5112 Comm: syz.0.0 Tainted: G B 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 86.602183][ T5112] Tainted: [B]=BAD_PAGE [ 86.603440][ T5112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.606948][ T5112] Call Trace: [ 86.608021][ T5112] [ 86.608986][ T5112] dump_stack_lvl+0x241/0x360 [ 86.610367][ T5112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 86.611956][ T5112] ? __pfx_print_modules+0x10/0x10 [ 86.613686][ T5112] bad_page+0x166/0x1b0 [ 86.614999][ T5112] free_unref_page+0xed0/0xf20 [ 86.616632][ T5112] skb_release_data+0x6dc/0x8a0 [ 86.618237][ T5112] sk_skb_reason_drop+0x1c9/0x380 [ 86.619871][ T5112] __netif_receive_skb_core+0x3edd/0x4570 [ 86.621747][ T5112] ? mark_lock+0x9a/0x360 [ 86.623073][ T5112] ? __lock_acquire+0x1384/0x2050 [ 86.624496][ T5112] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 86.626474][ T5112] ? mark_lock+0x9a/0x360 [ 86.628034][ T5112] ? __lock_acquire+0x1384/0x2050 [ 86.629741][ T5112] __netif_receive_skb_list_core+0x2b1/0x980 [ 86.631834][ T5112] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 86.634090][ T5112] ? timekeeping_get_ns+0x2c0/0x420 [ 86.635763][ T5112] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 86.637485][ T5112] netif_receive_skb_list_internal+0xa51/0xe30 [ 86.639330][ T5112] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 86.641273][ T5112] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 86.643182][ T5112] ? __pfx_eth_type_trans+0x10/0x10 [ 86.644799][ T5112] ? __phys_addr+0xba/0x170 [ 86.646366][ T5112] ? build_skb_around+0x111/0x260 [ 86.648046][ T5112] ? __xdp_build_skb_from_frame+0x338/0x650 [ 86.650045][ T5112] netif_receive_skb_list+0x55/0x4b0 [ 86.651815][ T5112] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 86.654031][ T5112] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 86.656759][ T5112] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 86.659314][ T5112] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 86.661881][ T5112] ? synchronize_rcu+0x11b/0x360 [ 86.663412][ T5112] ? __pfx_synchronize_rcu+0x10/0x10 [ 86.665156][ T5112] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 86.667363][ T5112] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 86.670083][ T5112] ? _copy_from_user+0xa6/0xe0 [ 86.672084][ T5112] ? bpf_test_init+0x15a/0x180 [ 86.674160][ T5112] ? xdp_convert_md_to_buff+0x5b/0x330 [ 86.676477][ T5112] bpf_prog_test_run_xdp+0x805/0x11e0 [ 86.678388][ T5112] ? __pfx_lock_release+0x10/0x10 [ 86.680131][ T5112] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 86.681960][ T5112] ? __fget_files+0x29/0x470 [ 86.683548][ T5112] ? fput+0x1a8/0x230 [ 86.685096][ T5112] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 86.687589][ T5112] bpf_prog_test_run+0x2e4/0x360 [ 86.689974][ T5112] __sys_bpf+0x48d/0x810 [ 86.691935][ T5112] ? __pfx___sys_bpf+0x10/0x10 [ 86.693631][ T5112] ? __rseq_handle_notify_resume+0x353/0x14e0 [ 86.695783][ T5112] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 86.698073][ T5112] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 86.700826][ T5112] ? do_syscall_64+0x100/0x230 [ 86.702890][ T5112] __x64_sys_bpf+0x7c/0x90 [ 86.704602][ T5112] do_syscall_64+0xf3/0x230 [ 86.706384][ T5112] ? clear_bhb_loop+0x35/0x90 [ 86.708220][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.710476][ T5112] RIP: 0033:0x7ff7a817dff9 [ 86.712010][ T5112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.718692][ T5112] RSP: 002b:00007ff7a8eb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 86.722330][ T5112] RAX: ffffffffffffffda RBX: 00007ff7a8336058 RCX: 00007ff7a817dff9 [ 86.725405][ T5112] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 86.728119][ T5112] RBP: 00007ff7a81f0296 R08: 0000000000000000 R09: 0000000000000000 [ 86.731003][ T5112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.734130][ T5112] R13: 0000000000000000 R14: 00007ff7a8336058 R15: 00007ffe3304be48 [ 86.737443][ T5112] [ 86.739098][ T5112] BUG: Bad page state in process syz.0.0 pfn:1268c [ 86.741889][ T5112] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1268c [ 86.745510][ T5112] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 86.748095][ T5112] raw: 00fff00000000000 dead000000000040 ffff88804b2a2000 0000000000000000 [ 86.751334][ T5112] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 86.754271][ T5112] page dumped because: page_pool leak [ 86.756143][ T5112] page_owner tracks the page as allocated [ 86.758179][ T5112] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5112, tgid 5110 (syz.0.0), ts 82204396633, free_ts 82088211358 [ 86.765079][ T5112] post_alloc_hook+0x1f3/0x230 [ 86.767506][ T5112] get_page_from_freelist+0x3045/0x3190 [ 86.769717][ T5112] __alloc_pages_noprof+0x292/0x710 [ 86.771213][ T5112] alloc_pages_bulk_noprof+0x729/0xd40 [ 86.772841][ T5112] __page_pool_alloc_pages_slow+0x122/0x690 [ 86.774656][ T5112] page_pool_alloc_pages+0xd0/0x1c0 [ 86.776339][ T5112] bpf_test_run_xdp_live+0x950/0x2160 [ 86.778037][ T5112] bpf_prog_test_run_xdp+0x805/0x11e0 [ 86.779932][ T5112] bpf_prog_test_run+0x2e4/0x360 [ 86.781696][ T5112] __sys_bpf+0x48d/0x810 [ 86.783337][ T5112] __x64_sys_bpf+0x7c/0x90 [ 86.785110][ T5112] do_syscall_64+0xf3/0x230 [ 86.786850][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.788865][ T5112] page last free pid 9 tgid 9 stack trace: [ 86.790776][ T5112] free_unref_page+0xcfb/0xf20 [ 86.792512][ T5112] __slab_free+0x31b/0x3d0 [ 86.794299][ T5112] qlist_free_all+0x9a/0x140 [ 86.796725][ T5112] kasan_quarantine_reduce+0x14f/0x170 [ 86.799096][ T5112] __kasan_kmalloc+0x23/0xb0 [ 86.800912][ T5112] __kmalloc_node_track_caller_noprof+0x225/0x440 [ 86.802780][ T5112] kmalloc_reserve+0x111/0x2a0 [ 86.804411][ T5112] __alloc_skb+0x1f3/0x440 [ 86.805966][ T5112] alloc_skb_with_frags+0xc3/0x820 [ 86.807711][ T5112] sock_alloc_send_pskb+0x91a/0xa60 [ 86.809332][ T5112] mld_newpack+0x1c3/0xa90 [ 86.811194][ T5112] add_grec+0x1492/0x19a0 [ 86.813122][ T5112] mld_send_initial_cr+0x228/0x4b0 [ 86.815704][ T5112] mld_dad_work+0x44/0x500 [ 86.817326][ T5112] process_scheduled_works+0xa63/0x1850 [ 86.819384][ T5112] worker_thread+0x870/0xd30 [ 86.821172][ T5112] Modules linked in: [ 86.822506][ T5112] CPU: 0 UID: 0 PID: 5112 Comm: syz.0.0 Tainted: G B 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 86.827268][ T5112] Tainted: [B]=BAD_PAGE [ 86.829583][ T5112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.833749][ T5112] Call Trace: [ 86.834886][ T5112] [ 86.835887][ T5112] dump_stack_lvl+0x241/0x360 [ 86.837440][ T5112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 86.839231][ T5112] ? __pfx_print_modules+0x10/0x10 [ 86.841131][ T5112] bad_page+0x166/0x1b0 [ 86.842823][ T5112] free_unref_page+0xed0/0xf20 [ 86.847655][ T5112] skb_release_data+0x6dc/0x8a0 [ 86.849762][ T5112] sk_skb_reason_drop+0x1c9/0x380 [ 86.851692][ T5112] __netif_receive_skb_core+0x3edd/0x4570 [ 86.853675][ T5112] ? mark_lock+0x9a/0x360 [ 86.855322][ T5112] ? __lock_acquire+0x1384/0x2050 [ 86.857193][ T5112] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 86.859474][ T5112] ? mark_lock+0x9a/0x360 [ 86.860928][ T5112] ? __lock_acquire+0x1384/0x2050 [ 86.862823][ T5112] __netif_receive_skb_list_core+0x2b1/0x980 [ 86.865050][ T5112] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 86.867387][ T5112] ? timekeeping_get_ns+0x2c0/0x420 [ 86.869264][ T5112] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 86.871608][ T5112] netif_receive_skb_list_internal+0xa51/0xe30 [ 86.873911][ T5112] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 86.876493][ T5112] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 86.878776][ T5112] ? __pfx_eth_type_trans+0x10/0x10 [ 86.880708][ T5112] ? __phys_addr+0xba/0x170 [ 86.882411][ T5112] ? build_skb_around+0x111/0x260 [ 86.884233][ T5112] ? __xdp_build_skb_from_frame+0x338/0x650 [ 86.886300][ T5112] netif_receive_skb_list+0x55/0x4b0 [ 86.888230][ T5112] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 86.890228][ T5112] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 86.892443][ T5112] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 86.894455][ T5112] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 86.896487][ T5112] ? synchronize_rcu+0x11b/0x360 [ 86.898149][ T5112] ? __pfx_synchronize_rcu+0x10/0x10 [ 86.899933][ T5112] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 86.902075][ T5112] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 86.904127][ T5112] ? _copy_from_user+0xa6/0xe0 [ 86.905827][ T5112] ? bpf_test_init+0x15a/0x180 [ 86.907513][ T5112] ? xdp_convert_md_to_buff+0x5b/0x330 [ 86.909428][ T5112] bpf_prog_test_run_xdp+0x805/0x11e0 [ 86.911345][ T5112] ? __pfx_lock_release+0x10/0x10 [ 86.913093][ T5112] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 86.915295][ T5112] ? __fget_files+0x29/0x470 [ 86.916996][ T5112] ? fput+0x1a8/0x230 [ 86.918536][ T5112] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 86.920735][ T5112] bpf_prog_test_run+0x2e4/0x360 [ 86.922632][ T5112] __sys_bpf+0x48d/0x810 [ 86.924258][ T5112] ? __pfx___sys_bpf+0x10/0x10 [ 86.926053][ T5112] ? __rseq_handle_notify_resume+0x353/0x14e0 [ 86.928413][ T5112] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 86.930630][ T5112] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 86.932978][ T5112] ? do_syscall_64+0x100/0x230 [ 86.934782][ T5112] __x64_sys_bpf+0x7c/0x90 [ 86.936473][ T5112] do_syscall_64+0xf3/0x230 [ 86.938244][ T5112] ? clear_bhb_loop+0x35/0x90 [ 86.940073][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.942351][ T5112] RIP: 0033:0x7ff7a817dff9 [ 86.944038][ T5112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.951439][ T5112] RSP: 002b:00007ff7a8eb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 86.954584][ T5112] RAX: ffffffffffffffda RBX: 00007ff7a8336058 RCX: 00007ff7a817dff9 [ 86.957538][ T5112] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 86.960467][ T5112] RBP: 00007ff7a81f0296 R08: 0000000000000000 R09: 0000000000000000 [ 86.963412][ T5112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.966343][ T5112] R13: 0000000000000000 R14: 00007ff7a8336058 R15: 00007ffe3304be48 [ 86.969323][ T5112] [ 86.970717][ T5112] BUG: Bad page state in process syz.0.0 pfn:1268b [ 86.973189][ T5112] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1268b [ 86.976570][ T5112] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 86.979336][ T5112] raw: 00fff00000000000 dead000000000040 ffff88804b2a2000 0000000000000000 [ 86.982771][ T5112] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 86.986271][ T5112] page dumped because: page_pool leak [ 86.988362][ T5112] page_owner tracks the page as allocated [ 86.990438][ T5112] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5112, tgid 5110 (syz.0.0), ts 82204388947, free_ts 82088211358 [ 86.996687][ T5112] post_alloc_hook+0x1f3/0x230 [ 86.998571][ T5112] get_page_from_freelist+0x3045/0x3190 [ 87.000700][ T5112] __alloc_pages_noprof+0x292/0x710 [ 87.002694][ T5112] alloc_pages_bulk_noprof+0x729/0xd40 [ 87.004713][ T5112] __page_pool_alloc_pages_slow+0x122/0x690 [ 87.007062][ T5112] page_pool_alloc_pages+0xd0/0x1c0 [ 87.009015][ T5112] bpf_test_run_xdp_live+0x950/0x2160 [ 87.011093][ T5112] bpf_prog_test_run_xdp+0x805/0x11e0 [ 87.013217][ T5112] bpf_prog_test_run+0x2e4/0x360 [ 87.015064][ T5112] __sys_bpf+0x48d/0x810 [ 87.016692][ T5112] __x64_sys_bpf+0x7c/0x90 [ 87.018268][ T5112] do_syscall_64+0xf3/0x230 [ 87.019864][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.021923][ T5112] page last free pid 9 tgid 9 stack trace: [ 87.023969][ T5112] free_unref_page+0xcfb/0xf20 [ 87.025716][ T5112] __slab_free+0x31b/0x3d0 [ 87.027331][ T5112] qlist_free_all+0x9a/0x140 [ 87.028949][ T5112] kasan_quarantine_reduce+0x14f/0x170 [ 87.031041][ T5112] __kasan_kmalloc+0x23/0xb0 [ 87.032842][ T5112] __kmalloc_node_track_caller_noprof+0x225/0x440 [ 87.035384][ T5112] kmalloc_reserve+0x111/0x2a0 [ 87.037502][ T5112] __alloc_skb+0x1f3/0x440 [ 87.039199][ T5112] alloc_skb_with_frags+0xc3/0x820 [ 87.041634][ T5112] sock_alloc_send_pskb+0x91a/0xa60 [ 87.044920][ T5112] mld_newpack+0x1c3/0xa90 [ 87.047227][ T5112] add_grec+0x1492/0x19a0 [ 87.048979][ T5112] mld_send_initial_cr+0x228/0x4b0 [ 87.050873][ T5112] mld_dad_work+0x44/0x500 [ 87.052619][ T5112] process_scheduled_works+0xa63/0x1850 [ 87.054810][ T5112] worker_thread+0x870/0xd30 [ 87.056648][ T5112] Modules linked in: [ 87.058167][ T5112] CPU: 0 UID: 0 PID: 5112 Comm: syz.0.0 Tainted: G B 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 87.064805][ T5112] Tainted: [B]=BAD_PAGE [ 87.066563][ T5112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.070574][ T5112] Call Trace: [ 87.071883][ T5112] [ 87.073851][ T5112] dump_stack_lvl+0x241/0x360 [ 87.075942][ T5112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.078113][ T5112] ? __pfx_print_modules+0x10/0x10 [ 87.080233][ T5112] bad_page+0x166/0x1b0 [ 87.082181][ T5112] free_unref_page+0xed0/0xf20 [ 87.084547][ T5112] skb_release_data+0x6dc/0x8a0 [ 87.086645][ T5112] sk_skb_reason_drop+0x1c9/0x380 [ 87.089016][ T5112] __netif_receive_skb_core+0x3edd/0x4570 [ 87.091458][ T5112] ? mark_lock+0x9a/0x360 [ 87.093156][ T5112] ? __lock_acquire+0x1384/0x2050 [ 87.094930][ T5112] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 87.097223][ T5112] ? mark_lock+0x9a/0x360 [ 87.099243][ T5112] ? __lock_acquire+0x1384/0x2050 [ 87.102095][ T5112] __netif_receive_skb_list_core+0x2b1/0x980 [ 87.104966][ T5112] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 87.106922][ T5112] ? timekeeping_get_ns+0x2c0/0x420 [ 87.109034][ T5112] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 87.111242][ T5112] netif_receive_skb_list_internal+0xa51/0xe30 [ 87.113610][ T5112] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 87.116073][ T5112] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 87.118944][ T5112] ? __pfx_eth_type_trans+0x10/0x10 [ 87.121198][ T5112] ? __phys_addr+0xba/0x170 [ 87.123044][ T5112] ? build_skb_around+0x111/0x260 [ 87.124914][ T5112] ? __xdp_build_skb_from_frame+0x338/0x650 [ 87.127075][ T5112] netif_receive_skb_list+0x55/0x4b0 [ 87.129095][ T5112] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 87.131318][ T5112] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 87.134271][ T5112] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 87.136926][ T5112] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 87.139254][ T5112] ? synchronize_rcu+0x11b/0x360 [ 87.141042][ T5112] ? __pfx_synchronize_rcu+0x10/0x10 [ 87.142897][ T5112] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 87.145239][ T5112] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 87.147594][ T5112] ? _copy_from_user+0xa6/0xe0 [ 87.149938][ T5112] ? bpf_test_init+0x15a/0x180 [ 87.152940][ T5112] ? xdp_convert_md_to_buff+0x5b/0x330 [ 87.155285][ T5112] bpf_prog_test_run_xdp+0x805/0x11e0 [ 87.157275][ T5112] ? __pfx_lock_release+0x10/0x10 [ 87.159129][ T5112] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 87.161255][ T5112] ? __fget_files+0x29/0x470 [ 87.163068][ T5112] ? fput+0x1a8/0x230 [ 87.164465][ T5112] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 87.166668][ T5112] bpf_prog_test_run+0x2e4/0x360 [ 87.168963][ T5112] __sys_bpf+0x48d/0x810 [ 87.170925][ T5112] ? __pfx___sys_bpf+0x10/0x10 [ 87.173004][ T5112] ? __rseq_handle_notify_resume+0x353/0x14e0 [ 87.175337][ T5112] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 87.177597][ T5112] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 87.180211][ T5112] ? do_syscall_64+0x100/0x230 [ 87.182473][ T5112] __x64_sys_bpf+0x7c/0x90 [ 87.184649][ T5112] do_syscall_64+0xf3/0x230 [ 87.186772][ T5112] ? clear_bhb_loop+0x35/0x90 [ 87.188485][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.190553][ T5112] RIP: 0033:0x7ff7a817dff9 [ 87.192284][ T5112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.200014][ T5112] RSP: 002b:00007ff7a8eb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 87.203395][ T5112] RAX: ffffffffffffffda RBX: 00007ff7a8336058 RCX: 00007ff7a817dff9 [ 87.206133][ T5112] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 87.209413][ T5112] RBP: 00007ff7a81f0296 R08: 0000000000000000 R09: 0000000000000000 [ 87.212880][ T5112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.216719][ T5112] R13: 0000000000000000 R14: 00007ff7a8336058 R15: 00007ffe3304be48 [ 87.219750][ T5112] [ 87.221074][ T5112] BUG: Bad page state in process syz.0.0 pfn:1268a [ 87.223565][ T5112] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1268a [ 87.226754][ T5112] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 87.229256][ T5112] raw: 00fff00000000000 dead000000000040 ffff88804b2a2000 0000000000000000 [ 87.232024][ T5112] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 87.234885][ T5112] page dumped because: page_pool leak [ 87.236853][ T5112] page_owner tracks the page as allocated [ 87.238931][ T5112] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5112, tgid 5110 (syz.0.0), ts 82204382390, free_ts 82088211358 [ 87.244710][ T5112] post_alloc_hook+0x1f3/0x230 [ 87.246396][ T5112] get_page_from_freelist+0x3045/0x3190 [ 87.248445][ T5112] __alloc_pages_noprof+0x292/0x710 [ 87.250176][ T5112] alloc_pages_bulk_noprof+0x729/0xd40 [ 87.252188][ T5112] __page_pool_alloc_pages_slow+0x122/0x690 [ 87.254373][ T5112] page_pool_alloc_pages+0xd0/0x1c0 [ 87.256389][ T5112] bpf_test_run_xdp_live+0x950/0x2160 [ 87.258535][ T5112] bpf_prog_test_run_xdp+0x805/0x11e0 [ 87.260584][ T5112] bpf_prog_test_run+0x2e4/0x360 [ 87.262416][ T5112] __sys_bpf+0x48d/0x810 [ 87.264001][ T5112] __x64_sys_bpf+0x7c/0x90 [ 87.265717][ T5112] do_syscall_64+0xf3/0x230 [ 87.267192][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.269312][ T5112] page last free pid 9 tgid 9 stack trace: [ 87.271402][ T5112] free_unref_page+0xcfb/0xf20 [ 87.273229][ T5112] __slab_free+0x31b/0x3d0 [ 87.275000][ T5112] qlist_free_all+0x9a/0x140 [ 87.276741][ T5112] kasan_quarantine_reduce+0x14f/0x170 [ 87.278427][ T5112] __kasan_kmalloc+0x23/0xb0 [ 87.279938][ T5112] __kmalloc_node_track_caller_noprof+0x225/0x440 [ 87.281948][ T5112] kmalloc_reserve+0x111/0x2a0 [ 87.283632][ T5112] __alloc_skb+0x1f3/0x440 [ 87.285248][ T5112] alloc_skb_with_frags+0xc3/0x820 [ 87.287187][ T5112] sock_alloc_send_pskb+0x91a/0xa60 [ 87.289126][ T5112] mld_newpack+0x1c3/0xa90 [ 87.290740][ T5112] add_grec+0x1492/0x19a0 [ 87.292261][ T5112] mld_send_initial_cr+0x228/0x4b0 [ 87.294088][ T5112] mld_dad_work+0x44/0x500 [ 87.295831][ T5112] process_scheduled_works+0xa63/0x1850 [ 87.298035][ T5112] worker_thread+0x870/0xd30 [ 87.300195][ T5112] Modules linked in: [ 87.302087][ T5112] CPU: 0 UID: 0 PID: 5112 Comm: syz.0.0 Tainted: G B 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 87.306841][ T5112] Tainted: [B]=BAD_PAGE [ 87.308456][ T5112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.312540][ T5112] Call Trace: [ 87.313816][ T5112] [ 87.314989][ T5112] dump_stack_lvl+0x241/0x360 [ 87.317106][ T5112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.319947][ T5112] ? __pfx_print_modules+0x10/0x10 [ 87.322615][ T5112] bad_page+0x166/0x1b0 [ 87.324060][ T5112] free_unref_page+0xed0/0xf20 [ 87.326174][ T5112] skb_release_data+0x6dc/0x8a0 [ 87.328364][ T5112] sk_skb_reason_drop+0x1c9/0x380 [ 87.330590][ T5112] __netif_receive_skb_core+0x3edd/0x4570 [ 87.333124][ T5112] ? mark_lock+0x9a/0x360 [ 87.334834][ T5112] ? __lock_acquire+0x1384/0x2050 [ 87.336811][ T5112] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 87.338954][ T5112] ? mark_lock+0x9a/0x360 [ 87.340650][ T5112] ? __lock_acquire+0x1384/0x2050 [ 87.342652][ T5112] __netif_receive_skb_list_core+0x2b1/0x980 [ 87.345798][ T5112] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 87.349026][ T5112] ? timekeeping_get_ns+0x2c0/0x420 [ 87.350955][ T5112] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 87.353383][ T5112] netif_receive_skb_list_internal+0xa51/0xe30 [ 87.355656][ T5112] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 87.357809][ T5112] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 87.360381][ T5112] ? __pfx_eth_type_trans+0x10/0x10 [ 87.362398][ T5112] ? __phys_addr+0xba/0x170 [ 87.364522][ T5112] ? build_skb_around+0x111/0x260 [ 87.366895][ T5112] ? __xdp_build_skb_from_frame+0x338/0x650 [ 87.369241][ T5112] netif_receive_skb_list+0x55/0x4b0 [ 87.371151][ T5112] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 87.373157][ T5112] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 87.375257][ T5112] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 87.377293][ T5112] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 87.379664][ T5112] ? synchronize_rcu+0x11b/0x360 [ 87.381965][ T5112] ? __pfx_synchronize_rcu+0x10/0x10 [ 87.384272][ T5112] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 87.386276][ T5112] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 87.388611][ T5112] ? _copy_from_user+0xa6/0xe0 [ 87.390370][ T5112] ? bpf_test_init+0x15a/0x180 [ 87.391999][ T5112] ? xdp_convert_md_to_buff+0x5b/0x330 [ 87.393942][ T5112] bpf_prog_test_run_xdp+0x805/0x11e0 [ 87.395919][ T5112] ? __pfx_lock_release+0x10/0x10 [ 87.397709][ T5112] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 87.400264][ T5112] ? __fget_files+0x29/0x470 [ 87.401985][ T5112] ? fput+0x1a8/0x230 [ 87.403517][ T5112] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 87.405598][ T5112] bpf_prog_test_run+0x2e4/0x360 [ 87.407151][ T5112] __sys_bpf+0x48d/0x810 [ 87.408667][ T5112] ? __pfx___sys_bpf+0x10/0x10 [ 87.410322][ T5112] ? __rseq_handle_notify_resume+0x353/0x14e0 [ 87.412433][ T5112] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 87.414465][ T5112] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 87.416755][ T5112] ? do_syscall_64+0x100/0x230 [ 87.418510][ T5112] __x64_sys_bpf+0x7c/0x90 [ 87.420186][ T5112] do_syscall_64+0xf3/0x230 [ 87.422074][ T5112] ? clear_bhb_loop+0x35/0x90 [ 87.424079][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.426190][ T5112] RIP: 0033:0x7ff7a817dff9 [ 87.427659][ T5112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.434352][ T5112] RSP: 002b:00007ff7a8eb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 87.437586][ T5112] RAX: ffffffffffffffda RBX: 00007ff7a8336058 RCX: 00007ff7a817dff9 [ 87.440716][ T5112] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 87.444364][ T5112] RBP: 00007ff7a81f0296 R08: 0000000000000000 R09: 0000000000000000 [ 87.447791][ T5112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.450449][ T5112] R13: 0000000000000000 R14: 00007ff7a8336058 R15: 00007ffe3304be48 [ 87.453254][ T5112] [ 87.454472][ T5112] BUG: Bad page state in process syz.0.0 pfn:12689 [ 87.457386][ T5112] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x8 pfn:0x12689 [ 87.462165][ T5112] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 87.465009][ T5112] raw: 00fff00000000000 dead000000000040 ffff88804b2a2000 0000000000000000 [ 87.468347][ T5112] raw: 0000000000000008 0000000000000001 00000000ffffffff 0000000000000000 [ 87.471234][ T5112] page dumped because: page_pool leak [ 87.473117][ T5112] page_owner tracks the page as allocated [ 87.475356][ T5112] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5112, tgid 5110 (syz.0.0), ts 82204376049, free_ts 82088211358 [ 87.482021][ T5112] post_alloc_hook+0x1f3/0x230 [ 87.484046][ T5112] get_page_from_freelist+0x3045/0x3190 [ 87.486531][ T5112] __alloc_pages_noprof+0x292/0x710 [ 87.488446][ T5112] alloc_pages_bulk_noprof+0x729/0xd40 [ 87.490432][ T5112] __page_pool_alloc_pages_slow+0x122/0x690 [ 87.492695][ T5112] page_pool_alloc_pages+0xd0/0x1c0 [ 87.495111][ T5112] bpf_test_run_xdp_live+0x950/0x2160 [ 87.497340][ T5112] bpf_prog_test_run_xdp+0x805/0x11e0 [ 87.499564][ T5112] bpf_prog_test_run+0x2e4/0x360 [ 87.501645][ T5112] __sys_bpf+0x48d/0x810 [ 87.503248][ T5112] __x64_sys_bpf+0x7c/0x90 [ 87.504966][ T5112] do_syscall_64+0xf3/0x230 [ 87.506739][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.508818][ T5112] page last free pid 9 tgid 9 stack trace: [ 87.510852][ T5112] free_unref_page+0xcfb/0xf20 [ 87.512877][ T5112] __slab_free+0x31b/0x3d0 [ 87.514691][ T5112] qlist_free_all+0x9a/0x140 [ 87.516632][ T5112] kasan_quarantine_reduce+0x14f/0x170 [ 87.518753][ T5112] __kasan_kmalloc+0x23/0xb0 [ 87.520372][ T5112] __kmalloc_node_track_caller_noprof+0x225/0x440 [ 87.522561][ T5112] kmalloc_reserve+0x111/0x2a0 [ 87.524243][ T5112] __alloc_skb+0x1f3/0x440 [ 87.525866][ T5112] alloc_skb_with_frags+0xc3/0x820 [ 87.527925][ T5112] sock_alloc_send_pskb+0x91a/0xa60 [ 87.530638][ T5112] mld_newpack+0x1c3/0xa90 [ 87.533260][ T5112] add_grec+0x1492/0x19a0 [ 87.535243][ T5112] mld_send_initial_cr+0x228/0x4b0 [ 87.537224][ T5112] mld_dad_work+0x44/0x500 [ 87.538745][ T5112] process_scheduled_works+0xa63/0x1850 [ 87.540630][ T5112] worker_thread+0x870/0xd30 [ 87.542285][ T5112] Modules linked in: [ 87.543687][ T5112] CPU: 0 UID: 0 PID: 5112 Comm: syz.0.0 Tainted: G B 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 87.547708][ T5112] Tainted: [B]=BAD_PAGE [ 87.549193][ T5112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.553357][ T5112] Call Trace: [ 87.554869][ T5112] [ 87.556141][ T5112] dump_stack_lvl+0x241/0x360 [ 87.558182][ T5112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.560273][ T5112] ? __pfx_print_modules+0x10/0x10 [ 87.561836][ T5112] bad_page+0x166/0x1b0 [ 87.563170][ T5112] free_unref_page+0xed0/0xf20 [ 87.565078][ T5112] skb_release_data+0x6dc/0x8a0 [ 87.567533][ T5112] sk_skb_reason_drop+0x1c9/0x380 [ 87.570300][ T5112] __netif_receive_skb_core+0x3edd/0x4570 [ 87.572637][ T5112] ? mark_lock+0x9a/0x360 [ 87.574442][ T5112] ? __lock_acquire+0x1384/0x2050 [ 87.576338][ T5112] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 87.578670][ T5112] ? mark_lock+0x9a/0x360 [ 87.580318][ T5112] ? __lock_acquire+0x1384/0x2050 [ 87.582219][ T5112] __netif_receive_skb_list_core+0x2b1/0x980 [ 87.584481][ T5112] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 87.587190][ T5112] ? timekeeping_get_ns+0x2c0/0x420 [ 87.589660][ T5112] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 87.592169][ T5112] netif_receive_skb_list_internal+0xa51/0xe30 [ 87.594451][ T5112] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 87.596583][ T5112] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 87.599015][ T5112] ? __pfx_eth_type_trans+0x10/0x10 [ 87.601328][ T5112] ? __phys_addr+0xba/0x170 [ 87.603395][ T5112] ? build_skb_around+0x111/0x260 [ 87.605630][ T5112] ? __xdp_build_skb_from_frame+0x338/0x650 [ 87.607915][ T5112] netif_receive_skb_list+0x55/0x4b0 [ 87.609807][ T5112] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 87.611775][ T5112] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 87.614088][ T5112] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 87.616382][ T5112] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 87.618865][ T5112] ? synchronize_rcu+0x11b/0x360 [ 87.620947][ T5112] ? __pfx_synchronize_rcu+0x10/0x10 [ 87.623166][ T5112] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 87.625563][ T5112] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 87.627758][ T5112] ? _copy_from_user+0xa6/0xe0 [ 87.629622][ T5112] ? bpf_test_init+0x15a/0x180 [ 87.631881][ T5112] ? xdp_convert_md_to_buff+0x5b/0x330 [ 87.635353][ T5112] bpf_prog_test_run_xdp+0x805/0x11e0 [ 87.637909][ T5112] ? __pfx_lock_release+0x10/0x10 [ 87.639899][ T5112] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 87.642096][ T5112] ? __fget_files+0x29/0x470 [ 87.643853][ T5112] ? fput+0x1a8/0x230 [ 87.645393][ T5112] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 87.647724][ T5112] bpf_prog_test_run+0x2e4/0x360 [ 87.649799][ T5112] __sys_bpf+0x48d/0x810 [ 87.651731][ T5112] ? __pfx___sys_bpf+0x10/0x10 [ 87.653766][ T5112] ? __rseq_handle_notify_resume+0x353/0x14e0 [ 87.656167][ T5112] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 87.658283][ T5112] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 87.660890][ T5112] ? do_syscall_64+0x100/0x230 [ 87.663130][ T5112] __x64_sys_bpf+0x7c/0x90 [ 87.665240][ T5112] do_syscall_64+0xf3/0x230 [ 87.667366][ T5112] ? clear_bhb_loop+0x35/0x90 [ 87.669229][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.671490][ T5112] RIP: 0033:0x7ff7a817dff9 [ 87.673136][ T5112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.680204][ T5112] RSP: 002b:00007ff7a8eb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 87.683709][ T5112] RAX: ffffffffffffffda RBX: 00007ff7a8336058 RCX: 00007ff7a817dff9 [ 87.687453][ T5112] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 87.690462][ T5112] RBP: 00007ff7a81f0296 R08: 0000000000000000 R09: 0000000000000000 [ 87.693280][ T5112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.696114][ T5112] R13: 0000000000000000 R14: 00007ff7a8336058 R15: 00007ffe3304be48 [ 87.699537][ T5112] [ 87.701314][ T5112] BUG: Bad page state in process syz.0.0 pfn:12688 [ 87.704944][ T5112] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88801268a000 pfn:0x12688 [ 87.708934][ T5112] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 87.711552][ T5112] raw: 00fff00000000000 dead000000000040 ffff88804b2a2000 0000000000000000 [ 87.714713][ T5112] raw: ffff88801268a000 0000000000000001 00000000ffffffff 0000000000000000 [ 87.718206][ T5112] page dumped because: page_pool leak [ 87.720434][ T5112] page_owner tracks the page as allocated [ 87.723332][ T5112] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5112, tgid 5110 (syz.0.0), ts 82204369020, free_ts 82088211358 [ 87.729361][ T5112] post_alloc_hook+0x1f3/0x230 [ 87.731090][ T5112] get_page_from_freelist+0x3045/0x3190 [ 87.733126][ T5112] __alloc_pages_noprof+0x292/0x710 [ 87.735204][ T5112] alloc_pages_bulk_noprof+0x729/0xd40 [ 87.737736][ T5112] __page_pool_alloc_pages_slow+0x122/0x690 [ 87.740535][ T5112] page_pool_alloc_pages+0xd0/0x1c0 [ 87.742671][ T5112] bpf_test_run_xdp_live+0x950/0x2160 [ 87.744612][ T5112] bpf_prog_test_run_xdp+0x805/0x11e0 [ 87.746735][ T5112] bpf_prog_test_run+0x2e4/0x360 [ 87.748602][ T5112] __sys_bpf+0x48d/0x810 [ 87.750107][ T5112] __x64_sys_bpf+0x7c/0x90 [ 87.751736][ T5112] do_syscall_64+0xf3/0x230 [ 87.753383][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.755765][ T5112] page last free pid 9 tgid 9 stack trace: [ 87.758134][ T5112] free_unref_page+0xcfb/0xf20 [ 87.760191][ T5112] __slab_free+0x31b/0x3d0 [ 87.761739][ T5112] qlist_free_all+0x9a/0x140 [ 87.763423][ T5112] kasan_quarantine_reduce+0x14f/0x170 [ 87.765629][ T5112] __kasan_kmalloc+0x23/0xb0 [ 87.767649][ T5112] __kmalloc_node_track_caller_noprof+0x225/0x440 [ 87.770649][ T5112] kmalloc_reserve+0x111/0x2a0 [ 87.772440][ T5112] __alloc_skb+0x1f3/0x440 [ 87.773998][ T5112] alloc_skb_with_frags+0xc3/0x820 [ 87.775944][ T5112] sock_alloc_send_pskb+0x91a/0xa60 [ 87.777811][ T5112] mld_newpack+0x1c3/0xa90 [ 87.779756][ T5112] add_grec+0x1492/0x19a0 [ 87.781882][ T5112] mld_send_initial_cr+0x228/0x4b0 [ 87.784236][ T5112] mld_dad_work+0x44/0x500 [ 87.785961][ T5112] process_scheduled_works+0xa63/0x1850 [ 87.788282][ T5112] worker_thread+0x870/0xd30 [ 87.790130][ T5112] Modules linked in: [ 87.791929][ T5112] CPU: 0 UID: 0 PID: 5112 Comm: syz.0.0 Tainted: G B 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 87.796466][ T5112] Tainted: [B]=BAD_PAGE [ 87.797983][ T5112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.801624][ T5112] Call Trace: [ 87.802841][ T5112] [ 87.803854][ T5112] dump_stack_lvl+0x241/0x360 [ 87.805590][ T5112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.807409][ T5112] ? __pfx_print_modules+0x10/0x10 [ 87.809196][ T5112] bad_page+0x166/0x1b0 [ 87.810638][ T5112] free_unref_page+0xed0/0xf20 [ 87.812283][ T5112] skb_release_data+0x6dc/0x8a0 [ 87.814093][ T5112] sk_skb_reason_drop+0x1c9/0x380 [ 87.815770][ T5112] __netif_receive_skb_core+0x3edd/0x4570 [ 87.817931][ T5112] ? mark_lock+0x9a/0x360 [ 87.819462][ T5112] ? __lock_acquire+0x1384/0x2050 [ 87.821337][ T5112] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 87.823839][ T5112] ? mark_lock+0x9a/0x360 [ 87.825575][ T5112] ? __lock_acquire+0x1384/0x2050 [ 87.827362][ T5112] __netif_receive_skb_list_core+0x2b1/0x980 [ 87.829422][ T5112] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 87.831662][ T5112] ? timekeeping_get_ns+0x2c0/0x420 [ 87.833339][ T5112] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 87.835305][ T5112] netif_receive_skb_list_internal+0xa51/0xe30 [ 87.837323][ T5112] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 87.839588][ T5112] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 87.841973][ T5112] ? __pfx_eth_type_trans+0x10/0x10 [ 87.843934][ T5112] ? __phys_addr+0xba/0x170 [ 87.845512][ T5112] ? build_skb_around+0x111/0x260 [ 87.847396][ T5112] ? __xdp_build_skb_from_frame+0x338/0x650 [ 87.849783][ T5112] netif_receive_skb_list+0x55/0x4b0 [ 87.852628][ T5112] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 87.855264][ T5112] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 87.857963][ T5112] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 87.859906][ T5112] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 87.862005][ T5112] ? synchronize_rcu+0x11b/0x360 [ 87.863729][ T5112] ? __pfx_synchronize_rcu+0x10/0x10 [ 87.865724][ T5112] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 87.868034][ T5112] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 87.870277][ T5112] ? _copy_from_user+0xa6/0xe0 [ 87.872640][ T5112] ? bpf_test_init+0x15a/0x180 [ 87.875091][ T5112] ? xdp_convert_md_to_buff+0x5b/0x330 [ 87.877104][ T5112] bpf_prog_test_run_xdp+0x805/0x11e0 [ 87.879090][ T5112] ? __pfx_lock_release+0x10/0x10 [ 87.881042][ T5112] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 87.883258][ T5112] ? __fget_files+0x29/0x470 [ 87.885166][ T5112] ? fput+0x1a8/0x230 [ 87.886819][ T5112] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 87.889442][ T5112] bpf_prog_test_run+0x2e4/0x360 [ 87.891571][ T5112] __sys_bpf+0x48d/0x810 [ 87.893241][ T5112] ? __pfx___sys_bpf+0x10/0x10 [ 87.895174][ T5112] ? __rseq_handle_notify_resume+0x353/0x14e0 [ 87.897632][ T5112] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 87.899882][ T5112] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 87.902603][ T5112] ? do_syscall_64+0x100/0x230 [ 87.905328][ T5112] __x64_sys_bpf+0x7c/0x90 [ 87.907471][ T5112] do_syscall_64+0xf3/0x230 [ 87.909309][ T5112] ? clear_bhb_loop+0x35/0x90 [ 87.911113][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.913283][ T5112] RIP: 0033:0x7ff7a817dff9 [ 87.915016][ T5112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.922704][ T5112] RSP: 002b:00007ff7a8eb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 87.926119][ T5112] RAX: ffffffffffffffda RBX: 00007ff7a8336058 RCX: 00007ff7a817dff9 [ 87.928974][ T5112] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 87.932013][ T5112] RBP: 00007ff7a81f0296 R08: 0000000000000000 R09: 0000000000000000 [ 87.935860][ T5112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.939494][ T5112] R13: 0000000000000000 R14: 00007ff7a8336058 R15: 00007ffe3304be48 [ 87.942383][ T5112] [ 87.943738][ T5112] BUG: Bad page state in process syz.0.0 pfn:11a47 [ 87.946178][ T5112] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11a47 [ 87.949259][ T5112] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 87.952098][ T5112] raw: 00fff00000000000 dead000000000040 ffff88804b2a2000 0000000000000000 [ 87.955897][ T5112] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 87.959365][ T5112] page dumped because: page_pool leak [ 87.961408][ T5112] page_owner tracks the page as allocated [ 87.963499][ T5112] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5112, tgid 5110 (syz.0.0), ts 82204362545, free_ts 82088326310 [ 87.970702][ T5112] post_alloc_hook+0x1f3/0x230 [ 87.972661][ T5112] get_page_from_freelist+0x3045/0x3190 [ 87.974708][ T5112] __alloc_pages_noprof+0x292/0x710 [ 87.976703][ T5112] alloc_pages_bulk_noprof+0x729/0xd40 [ 87.978722][ T5112] __page_pool_alloc_pages_slow+0x122/0x690 [ 87.981087][ T5112] page_pool_alloc_pages+0xd0/0x1c0 [ 87.983547][ T5112] bpf_test_run_xdp_live+0x950/0x2160 [ 87.986308][ T5112] bpf_prog_test_run_xdp+0x805/0x11e0 [ 87.988532][ T5112] bpf_prog_test_run+0x2e4/0x360 [ 87.990390][ T5112] __sys_bpf+0x48d/0x810 [ 87.991930][ T5112] __x64_sys_bpf+0x7c/0x90 [ 87.993638][ T5112] do_syscall_64+0xf3/0x230 [ 87.995488][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.997562][ T5112] page last free pid 9 tgid 9 stack trace: [ 87.999764][ T5112] free_unref_page+0xcfb/0xf20 [ 88.001863][ T5112] __slab_free+0x31b/0x3d0 [ 88.004054][ T5112] qlist_free_all+0x9a/0x140 [ 88.006429][ T5112] kasan_quarantine_reduce+0x14f/0x170 [ 88.008541][ T5112] __kasan_kmalloc+0x23/0xb0 [ 88.010270][ T5112] __kmalloc_node_track_caller_noprof+0x225/0x440 [ 88.012707][ T5112] kmalloc_reserve+0x111/0x2a0 [ 88.014473][ T5112] __alloc_skb+0x1f3/0x440 [ 88.016372][ T5112] alloc_skb_with_frags+0xc3/0x820 [ 88.018781][ T5112] sock_alloc_send_pskb+0x91a/0xa60 [ 88.021197][ T5112] mld_newpack+0x1c3/0xa90 [ 88.023166][ T5112] add_grec+0x1492/0x19a0 [ 88.024795][ T5112] mld_send_initial_cr+0x228/0x4b0 [ 88.026879][ T5112] mld_dad_work+0x44/0x500 [ 88.028584][ T5112] process_scheduled_works+0xa63/0x1850 [ 88.030656][ T5112] worker_thread+0x870/0xd30 [ 88.032478][ T5112] Modules linked in: [ 88.034013][ T5112] CPU: 0 UID: 0 PID: 5112 Comm: syz.0.0 Tainted: G B 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 88.039264][ T5112] Tainted: [B]=BAD_PAGE [ 88.040983][ T5112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.044877][ T5112] Call Trace: [ 88.046301][ T5112] [ 88.047563][ T5112] dump_stack_lvl+0x241/0x360 [ 88.049814][ T5112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.052125][ T5112] ? __pfx_print_modules+0x10/0x10 [ 88.054230][ T5112] bad_page+0x166/0x1b0 [ 88.055782][ T5112] free_unref_page+0xed0/0xf20 [ 88.057573][ T5112] skb_release_data+0x6dc/0x8a0 [ 88.059520][ T5112] sk_skb_reason_drop+0x1c9/0x380 [ 88.061563][ T5112] __netif_receive_skb_core+0x3edd/0x4570 [ 88.064121][ T5112] ? mark_lock+0x9a/0x360 [ 88.066181][ T5112] ? __lock_acquire+0x1384/0x2050 [ 88.068422][ T5112] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 88.070509][ T5112] ? mark_lock+0x9a/0x360 [ 88.072027][ T5112] ? __lock_acquire+0x1384/0x2050 [ 88.073906][ T5112] __netif_receive_skb_list_core+0x2b1/0x980 [ 88.076276][ T5112] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 88.079059][ T5112] ? timekeeping_get_ns+0x2c0/0x420 [ 88.081437][ T5112] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 88.084130][ T5112] netif_receive_skb_list_internal+0xa51/0xe30 [ 88.086520][ T5112] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 88.088921][ T5112] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 88.091444][ T5112] ? __pfx_eth_type_trans+0x10/0x10 [ 88.093775][ T5112] ? __phys_addr+0xba/0x170 [ 88.096267][ T5112] ? build_skb_around+0x111/0x260 [ 88.098329][ T5112] ? __xdp_build_skb_from_frame+0x338/0x650 [ 88.100597][ T5112] netif_receive_skb_list+0x55/0x4b0 [ 88.102474][ T5112] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 88.104648][ T5112] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 88.107361][ T5112] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 88.109817][ T5112] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 88.112154][ T5112] ? synchronize_rcu+0x11b/0x360 [ 88.113777][ T5112] ? __pfx_synchronize_rcu+0x10/0x10 [ 88.115608][ T5112] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 88.117561][ T5112] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 88.119444][ T5112] ? _copy_from_user+0xa6/0xe0 [ 88.120975][ T5112] ? bpf_test_init+0x15a/0x180 [ 88.122534][ T5112] ? xdp_convert_md_to_buff+0x5b/0x330 [ 88.124472][ T5112] bpf_prog_test_run_xdp+0x805/0x11e0 [ 88.126604][ T5112] ? __pfx_lock_release+0x10/0x10 [ 88.128854][ T5112] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 88.131506][ T5112] ? __fget_files+0x29/0x470 [ 88.133326][ T5112] ? fput+0x1a8/0x230 [ 88.134739][ T5112] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 88.137013][ T5112] bpf_prog_test_run+0x2e4/0x360 [ 88.138879][ T5112] __sys_bpf+0x48d/0x810 [ 88.140420][ T5112] ? __pfx___sys_bpf+0x10/0x10 [ 88.142118][ T5112] ? __rseq_handle_notify_resume+0x353/0x14e0 [ 88.144298][ T5112] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 88.146616][ T5112] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 88.149675][ T5112] ? do_syscall_64+0x100/0x230 [ 88.151661][ T5112] __x64_sys_bpf+0x7c/0x90 [ 88.153330][ T5112] do_syscall_64+0xf3/0x230 [ 88.154941][ T5112] ? clear_bhb_loop+0x35/0x90 [ 88.156710][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.158734][ T5112] RIP: 0033:0x7ff7a817dff9 [ 88.160360][ T5112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.168775][ T5112] RSP: 002b:00007ff7a8eb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 88.171882][ T5112] RAX: ffffffffffffffda RBX: 00007ff7a8336058 RCX: 00007ff7a817dff9 [ 88.174570][ T5112] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 88.177701][ T5112] RBP: 00007ff7a81f0296 R08: 0000000000000000 R09: 0000000000000000 [ 88.181103][ T5112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.184058][ T5112] R13: 0000000000000000 R14: 00007ff7a8336058 R15: 00007ffe3304be48 [ 88.186909][ T5112] [ 88.188271][ T5112] BUG: Bad page state in process syz.0.0 pfn:11a46 [ 88.191159][ T5112] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11a46 [ 88.195004][ T5112] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 88.197632][ T5112] raw: 00fff00000000000 dead000000000040 ffff88804b2a2000 0000000000000000 [ 88.200740][ T5112] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 88.204365][ T5112] page dumped because: page_pool leak [ 88.206625][ T5112] page_owner tracks the page as allocated [ 88.208768][ T5112] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5112, tgid 5110 (syz.0.0), ts 82204355726, free_ts 82088326310 [ 88.214761][ T5112] post_alloc_hook+0x1f3/0x230 [ 88.217474][ T5112] get_page_from_freelist+0x3045/0x3190 [ 88.219973][ T5112] __alloc_pages_noprof+0x292/0x710 [ 88.222059][ T5112] alloc_pages_bulk_noprof+0x729/0xd40 [ 88.224065][ T5112] __page_pool_alloc_pages_slow+0x122/0x690 [ 88.226226][ T5112] page_pool_alloc_pages+0xd0/0x1c0 [ 88.228165][ T5112] bpf_test_run_xdp_live+0x950/0x2160 [ 88.230159][ T5112] bpf_prog_test_run_xdp+0x805/0x11e0 [ 88.232039][ T5112] bpf_prog_test_run+0x2e4/0x360 [ 88.234306][ T5112] __sys_bpf+0x48d/0x810 [ 88.236543][ T5112] __x64_sys_bpf+0x7c/0x90 [ 88.238682][ T5112] do_syscall_64+0xf3/0x230 [ 88.240639][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.242850][ T5112] page last free pid 9 tgid 9 stack trace: [ 88.245098][ T5112] free_unref_page+0xcfb/0xf20 [ 88.246891][ T5112] __slab_free+0x31b/0x3d0 [ 88.248610][ T5112] qlist_free_all+0x9a/0x140 [ 88.250459][ T5112] kasan_quarantine_reduce+0x14f/0x170 [ 88.252703][ T5112] __kasan_kmalloc+0x23/0xb0 [ 88.254373][ T5112] __kmalloc_node_track_caller_noprof+0x225/0x440 [ 88.257233][ T5112] kmalloc_reserve+0x111/0x2a0 [ 88.259194][ T5112] __alloc_skb+0x1f3/0x440 [ 88.261075][ T5112] alloc_skb_with_frags+0xc3/0x820 [ 88.263134][ T5112] sock_alloc_send_pskb+0x91a/0xa60 [ 88.265238][ T5112] mld_newpack+0x1c3/0xa90 [ 88.267095][ T5112] add_grec+0x1492/0x19a0 [ 88.268804][ T5112] mld_send_initial_cr+0x228/0x4b0 [ 88.270761][ T5112] mld_dad_work+0x44/0x500 [ 88.272364][ T5112] process_scheduled_works+0xa63/0x1850 [ 88.274520][ T5112] worker_thread+0x870/0xd30 [ 88.276412][ T5112] Modules linked in: [ 88.277986][ T5112] CPU: 0 UID: 0 PID: 5112 Comm: syz.0.0 Tainted: G B 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 88.282659][ T5112] Tainted: [B]=BAD_PAGE [ 88.284301][ T5112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.288147][ T5112] Call Trace: [ 88.289614][ T5112] [ 88.290994][ T5112] dump_stack_lvl+0x241/0x360 [ 88.293516][ T5112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.295847][ T5112] ? __pfx_print_modules+0x10/0x10 [ 88.297765][ T5112] bad_page+0x166/0x1b0 [ 88.299293][ T5112] free_unref_page+0xed0/0xf20 [ 88.301000][ T5112] skb_release_data+0x6dc/0x8a0 [ 88.302734][ T5112] sk_skb_reason_drop+0x1c9/0x380 [ 88.304704][ T5112] __netif_receive_skb_core+0x3edd/0x4570 [ 88.307500][ T5112] ? mark_lock+0x9a/0x360 [ 88.309773][ T5112] ? __lock_acquire+0x1384/0x2050 [ 88.311970][ T5112] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 88.314405][ T5112] ? mark_lock+0x9a/0x360 [ 88.316003][ T5112] ? __lock_acquire+0x1384/0x2050 [ 88.317611][ T5112] __netif_receive_skb_list_core+0x2b1/0x980 [ 88.319520][ T5112] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 88.321554][ T5112] ? timekeeping_get_ns+0x2c0/0x420 [ 88.323453][ T5112] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 88.326370][ T5112] netif_receive_skb_list_internal+0xa51/0xe30 [ 88.329690][ T5112] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 88.332571][ T5112] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 88.334899][ T5112] ? __pfx_eth_type_trans+0x10/0x10 [ 88.336621][ T5112] ? __phys_addr+0xba/0x170 [ 88.338259][ T5112] ? build_skb_around+0x111/0x260 [ 88.339944][ T5112] ? __xdp_build_skb_from_frame+0x338/0x650 [ 88.341979][ T5112] netif_receive_skb_list+0x55/0x4b0 [ 88.343899][ T5112] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 88.346083][ T5112] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 88.348928][ T5112] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 88.351205][ T5112] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 88.353232][ T5112] ? synchronize_rcu+0x11b/0x360 [ 88.354991][ T5112] ? __pfx_synchronize_rcu+0x10/0x10 [ 88.356926][ T5112] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 88.361380][ T5112] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 88.364506][ T5112] ? _copy_from_user+0xa6/0xe0 [ 88.366455][ T5112] ? bpf_test_init+0x15a/0x180 [ 88.368429][ T5112] ? xdp_convert_md_to_buff+0x5b/0x330 [ 88.370439][ T5112] bpf_prog_test_run_xdp+0x805/0x11e0 [ 88.372493][ T5112] ? __pfx_lock_release+0x10/0x10 [ 88.374407][ T5112] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 88.376564][ T5112] ? __fget_files+0x29/0x470 [ 88.378392][ T5112] ? fput+0x1a8/0x230 [ 88.380166][ T5112] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 88.382461][ T5112] bpf_prog_test_run+0x2e4/0x360 [ 88.384592][ T5112] __sys_bpf+0x48d/0x810 [ 88.385883][ T5112] ? __pfx___sys_bpf+0x10/0x10 [ 88.388154][ T5112] ? __rseq_handle_notify_resume+0x353/0x14e0 [ 88.390618][ T5112] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 88.393280][ T5112] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 88.396111][ T5112] ? do_syscall_64+0x100/0x230 [ 88.397974][ T5112] __x64_sys_bpf+0x7c/0x90 [ 88.399508][ T5112] do_syscall_64+0xf3/0x230 [ 88.401063][ T5112] ? clear_bhb_loop+0x35/0x90 [ 88.402643][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.404814][ T5112] RIP: 0033:0x7ff7a817dff9 [ 88.406574][ T5112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.414651][ T5112] RSP: 002b:00007ff7a8eb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 88.417668][ T5112] RAX: ffffffffffffffda RBX: 00007ff7a8336058 RCX: 00007ff7a817dff9 [ 88.420861][ T5112] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 88.424086][ T5112] RBP: 00007ff7a81f0296 R08: 0000000000000000 R09: 0000000000000000 [ 88.427486][ T5112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.430577][ T5112] R13: 0000000000000000 R14: 00007ff7a8336058 R15: 00007ffe3304be48 [ 88.433040][ T5112] [ 88.434583][ T5112] BUG: Bad page state in process syz.0.0 pfn:11a45 [ 88.437217][ T5112] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11a45 [ 88.440713][ T5112] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 88.443215][ T5112] raw: 00fff00000000000 dead000000000040 ffff88804b2a2000 0000000000000000 [ 88.446312][ T5112] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 88.449204][ T5112] page dumped because: page_pool leak [ 88.451166][ T5112] page_owner tracks the page as allocated [ 88.453133][ T5112] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5112, tgid 5110 (syz.0.0), ts 82204348465, free_ts 82088326310 [ 88.459058][ T5112] post_alloc_hook+0x1f3/0x230 [ 88.460796][ T5112] get_page_from_freelist+0x3045/0x3190 [ 88.462796][ T5112] __alloc_pages_noprof+0x292/0x710 [ 88.464572][ T5112] alloc_pages_bulk_noprof+0x729/0xd40 [ 88.466625][ T5112] __page_pool_alloc_pages_slow+0x122/0x690 [ 88.468826][ T5112] page_pool_alloc_pages+0xd0/0x1c0 [ 88.470608][ T5112] bpf_test_run_xdp_live+0x950/0x2160 [ 88.472424][ T5112] bpf_prog_test_run_xdp+0x805/0x11e0 [ 88.474253][ T5112] bpf_prog_test_run+0x2e4/0x360 [ 88.475931][ T5112] __sys_bpf+0x48d/0x810 [ 88.477624][ T5112] __x64_sys_bpf+0x7c/0x90 [ 88.479589][ T5112] do_syscall_64+0xf3/0x230 [ 88.481160][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.483313][ T5112] page last free pid 9 tgid 9 stack trace: [ 88.485565][ T5112] free_unref_page+0xcfb/0xf20 [ 88.487331][ T5112] __slab_free+0x31b/0x3d0 [ 88.488979][ T5112] qlist_free_all+0x9a/0x140 [ 88.490677][ T5112] kasan_quarantine_reduce+0x14f/0x170 [ 88.492807][ T5112] __kasan_kmalloc+0x23/0xb0 [ 88.494511][ T5112] __kmalloc_node_track_caller_noprof+0x225/0x440 [ 88.496984][ T5112] kmalloc_reserve+0x111/0x2a0 [ 88.498720][ T5112] __alloc_skb+0x1f3/0x440 [ 88.500311][ T5112] alloc_skb_with_frags+0xc3/0x820 [ 88.502301][ T5112] sock_alloc_send_pskb+0x91a/0xa60 [ 88.504255][ T5112] mld_newpack+0x1c3/0xa90 [ 88.505606][ T5112] add_grec+0x1492/0x19a0 [ 88.507066][ T5112] mld_send_initial_cr+0x228/0x4b0 [ 88.508923][ T5112] mld_dad_work+0x44/0x500 [ 88.510623][ T5112] process_scheduled_works+0xa63/0x1850 [ 88.513686][ T5112] worker_thread+0x870/0xd30 [ 88.516726][ T5112] Modules linked in: [ 88.518512][ T5112] CPU: 0 UID: 0 PID: 5112 Comm: syz.0.0 Tainted: G B 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 88.522775][ T5112] Tainted: [B]=BAD_PAGE [ 88.524288][ T5112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.527917][ T5112] Call Trace: [ 88.529076][ T5112] [ 88.530202][ T5112] dump_stack_lvl+0x241/0x360 [ 88.531779][ T5112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.533562][ T5112] ? __pfx_print_modules+0x10/0x10 [ 88.535480][ T5112] bad_page+0x166/0x1b0 [ 88.537407][ T5112] free_unref_page+0xed0/0xf20 [ 88.539637][ T5112] skb_release_data+0x6dc/0x8a0 [ 88.541638][ T5112] sk_skb_reason_drop+0x1c9/0x380 [ 88.543379][ T5112] __netif_receive_skb_core+0x3edd/0x4570 [ 88.545325][ T5112] ? mark_lock+0x9a/0x360 [ 88.546916][ T5112] ? __lock_acquire+0x1384/0x2050 [ 88.548729][ T5112] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 88.550887][ T5112] ? mark_lock+0x9a/0x360 [ 88.552318][ T5112] ? __lock_acquire+0x1384/0x2050 [ 88.554639][ T5112] __netif_receive_skb_list_core+0x2b1/0x980 [ 88.557912][ T5112] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 88.560679][ T5112] ? timekeeping_get_ns+0x2c0/0x420 [ 88.562686][ T5112] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 88.564773][ T5112] netif_receive_skb_list_internal+0xa51/0xe30 [ 88.566950][ T5112] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 88.569118][ T5112] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 88.571501][ T5112] ? __pfx_eth_type_trans+0x10/0x10 [ 88.573773][ T5112] ? __phys_addr+0xba/0x170 [ 88.576246][ T5112] ? build_skb_around+0x111/0x260 [ 88.578624][ T5112] ? __xdp_build_skb_from_frame+0x338/0x650 [ 88.581000][ T5112] netif_receive_skb_list+0x55/0x4b0 [ 88.582582][ T5112] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 88.584140][ T5112] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 88.585846][ T5112] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 88.587830][ T5112] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 88.590286][ T5112] ? synchronize_rcu+0x11b/0x360 [ 88.592672][ T5112] ? __pfx_synchronize_rcu+0x10/0x10 [ 88.595137][ T5112] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 88.597759][ T5112] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 88.600111][ T5112] ? _copy_from_user+0xa6/0xe0 [ 88.601846][ T5112] ? bpf_test_init+0x15a/0x180 [ 88.603636][ T5112] ? xdp_convert_md_to_buff+0x5b/0x330 [ 88.605665][ T5112] bpf_prog_test_run_xdp+0x805/0x11e0 [ 88.609121][ T5112] ? __pfx_lock_release+0x10/0x10 [ 88.611893][ T5112] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 88.613932][ T5112] ? __fget_files+0x29/0x470 [ 88.615545][ T5112] ? fput+0x1a8/0x230 [ 88.616885][ T5112] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 88.619149][ T5112] bpf_prog_test_run+0x2e4/0x360 [ 88.621078][ T5112] __sys_bpf+0x48d/0x810 [ 88.622794][ T5112] ? __pfx___sys_bpf+0x10/0x10 [ 88.625089][ T5112] ? __rseq_handle_notify_resume+0x353/0x14e0 [ 88.628413][ T5112] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 88.631256][ T5112] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 88.634105][ T5112] ? do_syscall_64+0x100/0x230 [ 88.636101][ T5112] __x64_sys_bpf+0x7c/0x90 [ 88.637916][ T5112] do_syscall_64+0xf3/0x230 [ 88.639750][ T5112] ? clear_bhb_loop+0x35/0x90 [ 88.641426][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.643498][ T5112] RIP: 0033:0x7ff7a817dff9 [ 88.645032][ T5112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.653272][ T5112] RSP: 002b:00007ff7a8eb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 88.657001][ T5112] RAX: ffffffffffffffda RBX: 00007ff7a8336058 RCX: 00007ff7a817dff9 [ 88.660038][ T5112] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 88.663069][ T5112] RBP: 00007ff7a81f0296 R08: 0000000000000000 R09: 0000000000000000 [ 88.665933][ T5112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.668588][ T5112] R13: 0000000000000000 R14: 00007ff7a8336058 R15: 00007ffe3304be48 [ 88.671882][ T5112] [ 88.673470][ T5112] BUG: Bad page state in process syz.0.0 pfn:11a44 [ 88.676500][ T5112] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11a44 [ 88.680124][ T5112] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 88.682573][ T5112] raw: 00fff00000000000 dead000000000040 ffff88804b2a2000 0000000000000000 [ 88.685351][ T5112] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 88.688264][ T5112] page dumped because: page_pool leak [ 88.690131][ T5112] page_owner tracks the page as allocated [ 88.692373][ T5112] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5112, tgid 5110 (syz.0.0), ts 82204341217, free_ts 82088326310 [ 88.700750][ T5112] post_alloc_hook+0x1f3/0x230 [ 88.702618][ T5112] get_page_from_freelist+0x3045/0x3190 [ 88.704696][ T5112] __alloc_pages_noprof+0x292/0x710 [ 88.706696][ T5112] alloc_pages_bulk_noprof+0x729/0xd40 [ 88.708790][ T5112] __page_pool_alloc_pages_slow+0x122/0x690 [ 88.711198][ T5112] page_pool_alloc_pages+0xd0/0x1c0 [ 88.713397][ T5112] bpf_test_run_xdp_live+0x950/0x2160 [ 88.715889][ T5112] bpf_prog_test_run_xdp+0x805/0x11e0 [ 88.718148][ T5112] bpf_prog_test_run+0x2e4/0x360 [ 88.720070][ T5112] __sys_bpf+0x48d/0x810 [ 88.721658][ T5112] __x64_sys_bpf+0x7c/0x90 [ 88.723375][ T5112] do_syscall_64+0xf3/0x230 [ 88.725388][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.728334][ T5112] page last free pid 9 tgid 9 stack trace: [ 88.731407][ T5112] free_unref_page+0xcfb/0xf20 [ 88.733481][ T5112] __slab_free+0x31b/0x3d0 [ 88.735117][ T5112] qlist_free_all+0x9a/0x140 [ 88.736991][ T5112] kasan_quarantine_reduce+0x14f/0x170 [ 88.739182][ T5112] __kasan_kmalloc+0x23/0xb0 [ 88.741312][ T5112] __kmalloc_node_track_caller_noprof+0x225/0x440 [ 88.744278][ T5112] kmalloc_reserve+0x111/0x2a0 [ 88.746343][ T5112] __alloc_skb+0x1f3/0x440 [ 88.747945][ T5112] alloc_skb_with_frags+0xc3/0x820 [ 88.749809][ T5112] sock_alloc_send_pskb+0x91a/0xa60 [ 88.752378][ T5112] mld_newpack+0x1c3/0xa90 [ 88.754607][ T5112] add_grec+0x1492/0x19a0 [ 88.756861][ T5112] mld_send_initial_cr+0x228/0x4b0 [ 88.759440][ T5112] mld_dad_work+0x44/0x500 [ 88.761724][ T5112] process_scheduled_works+0xa63/0x1850 [ 88.764682][ T5112] worker_thread+0x870/0xd30 [ 88.766897][ T5112] Modules linked in: [ 88.768428][ T5112] CPU: 0 UID: 0 PID: 5112 Comm: syz.0.0 Tainted: G B 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 88.772466][ T5112] Tainted: [B]=BAD_PAGE [ 88.773858][ T5112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.777342][ T5112] Call Trace: [ 88.778525][ T5112] [ 88.779665][ T5112] dump_stack_lvl+0x241/0x360 [ 88.781455][ T5112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.783903][ T5112] ? __pfx_print_modules+0x10/0x10 [ 88.786313][ T5112] bad_page+0x166/0x1b0 [ 88.788253][ T5112] free_unref_page+0xed0/0xf20 [ 88.790044][ T5112] skb_release_data+0x6dc/0x8a0 [ 88.791674][ T5112] sk_skb_reason_drop+0x1c9/0x380 [ 88.793320][ T5112] __netif_receive_skb_core+0x3edd/0x4570 [ 88.795199][ T5112] ? mark_lock+0x9a/0x360 [ 88.796620][ T5112] ? __lock_acquire+0x1384/0x2050 [ 88.798264][ T5112] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 88.800270][ T5112] ? mark_lock+0x9a/0x360 [ 88.801761][ T5112] ? __lock_acquire+0x1384/0x2050 [ 88.803661][ T5112] __netif_receive_skb_list_core+0x2b1/0x980 [ 88.806818][ T5112] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 88.810692][ T5112] ? timekeeping_get_ns+0x2c0/0x420 [ 88.813370][ T5112] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 88.815763][ T5112] netif_receive_skb_list_internal+0xa51/0xe30 [ 88.818215][ T5112] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 88.820634][ T5112] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 88.823206][ T5112] ? __pfx_eth_type_trans+0x10/0x10 [ 88.825031][ T5112] ? __phys_addr+0xba/0x170 [ 88.826341][ T5112] ? build_skb_around+0x111/0x260 [ 88.827938][ T5112] ? __xdp_build_skb_from_frame+0x338/0x650 [ 88.830189][ T5112] netif_receive_skb_list+0x55/0x4b0 [ 88.832292][ T5112] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 88.834447][ T5112] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 88.836749][ T5112] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 88.839205][ T5112] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 88.841738][ T5112] ? synchronize_rcu+0x11b/0x360 [ 88.844036][ T5112] ? __pfx_synchronize_rcu+0x10/0x10 [ 88.846170][ T5112] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 88.848468][ T5112] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 88.850779][ T5112] ? _copy_from_user+0xa6/0xe0 [ 88.852734][ T5112] ? bpf_test_init+0x15a/0x180 [ 88.855249][ T5112] ? xdp_convert_md_to_buff+0x5b/0x330 [ 88.858099][ T5112] bpf_prog_test_run_xdp+0x805/0x11e0 [ 88.860242][ T5112] ? __pfx_lock_release+0x10/0x10 [ 88.862105][ T5112] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 88.864283][ T5112] ? __fget_files+0x29/0x470 [ 88.866037][ T5112] ? fput+0x1a8/0x230 [ 88.867578][ T5112] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 88.870052][ T5112] bpf_prog_test_run+0x2e4/0x360 [ 88.872585][ T5112] __sys_bpf+0x48d/0x810 [ 88.874289][ T5112] ? __pfx___sys_bpf+0x10/0x10 [ 88.876100][ T5112] ? __rseq_handle_notify_resume+0x353/0x14e0 [ 88.878546][ T5112] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 88.880754][ T5112] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 88.883122][ T5112] ? do_syscall_64+0x100/0x230 [ 88.884992][ T5112] __x64_sys_bpf+0x7c/0x90 [ 88.886707][ T5112] do_syscall_64+0xf3/0x230 [ 88.888543][ T5112] ? clear_bhb_loop+0x35/0x90 [ 88.890556][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.893778][ T5112] RIP: 0033:0x7ff7a817dff9 [ 88.895821][ T5112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.903797][ T5112] RSP: 002b:00007ff7a8eb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 88.907341][ T5112] RAX: ffffffffffffffda RBX: 00007ff7a8336058 RCX: 00007ff7a817dff9 [ 88.911165][ T5112] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 88.914775][ T5112] RBP: 00007ff7a81f0296 R08: 0000000000000000 R09: 0000000000000000 [ 88.917806][ T5112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.920792][ T5112] R13: 0000000000000000 R14: 00007ff7a8336058 R15: 00007ffe3304be48 [ 88.924001][ T5112] [ 88.925250][ T5112] BUG: Bad page state in process syz.0.0 pfn:11a43 [ 88.928066][ T5112] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11a43 [ 88.931866][ T5112] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 88.934584][ T5112] raw: 00fff00000000000 dead000000000040 ffff88804b2a2000 0000000000000000 [ 88.937779][ T5112] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 88.941110][ T5112] page dumped because: page_pool leak [ 88.944242][ T5112] page_owner tracks the page as allocated [ 88.947033][ T5112] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5112, tgid 5110 (syz.0.0), ts 82204333935, free_ts 82088326310 [ 88.952900][ T5112] post_alloc_hook+0x1f3/0x230 [ 88.954648][ T5112] get_page_from_freelist+0x3045/0x3190 [ 88.956698][ T5112] __alloc_pages_noprof+0x292/0x710 [ 88.958633][ T5112] alloc_pages_bulk_noprof+0x729/0xd40 [ 88.960792][ T5112] __page_pool_alloc_pages_slow+0x122/0x690 [ 88.963156][ T5112] page_pool_alloc_pages+0xd0/0x1c0 [ 88.965224][ T5112] bpf_test_run_xdp_live+0x950/0x2160 [ 88.967541][ T5112] bpf_prog_test_run_xdp+0x805/0x11e0 [ 88.970474][ T5112] bpf_prog_test_run+0x2e4/0x360 [ 88.972771][ T5112] __sys_bpf+0x48d/0x810 [ 88.974108][ T5112] __x64_sys_bpf+0x7c/0x90 [ 88.975598][ T5112] do_syscall_64+0xf3/0x230 [ 88.977150][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.979258][ T5112] page last free pid 9 tgid 9 stack trace: [ 88.981397][ T5112] free_unref_page+0xcfb/0xf20 [ 88.983303][ T5112] __slab_free+0x31b/0x3d0 [ 88.985091][ T5112] qlist_free_all+0x9a/0x140 [ 88.987294][ T5112] kasan_quarantine_reduce+0x14f/0x170 [ 88.989745][ T5112] __kasan_kmalloc+0x23/0xb0 [ 88.991813][ T5112] __kmalloc_node_track_caller_noprof+0x225/0x440 [ 88.994315][ T5112] kmalloc_reserve+0x111/0x2a0 [ 88.996211][ T5112] __alloc_skb+0x1f3/0x440 [ 88.997866][ T5112] alloc_skb_with_frags+0xc3/0x820 [ 88.999770][ T5112] sock_alloc_send_pskb+0x91a/0xa60 [ 89.002071][ T5112] mld_newpack+0x1c3/0xa90 [ 89.004558][ T5112] add_grec+0x1492/0x19a0 [ 89.007293][ T5112] mld_send_initial_cr+0x228/0x4b0 [ 89.009301][ T5112] mld_dad_work+0x44/0x500 [ 89.011119][ T5112] process_scheduled_works+0xa63/0x1850 [ 89.013293][ T5112] worker_thread+0x870/0xd30 [ 89.014777][ T5112] Modules linked in: [ 89.016201][ T5112] CPU: 0 UID: 0 PID: 5112 Comm: syz.0.0 Tainted: G B 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 89.020425][ T5112] Tainted: [B]=BAD_PAGE [ 89.022526][ T5112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 89.027309][ T5112] Call Trace: [ 89.028409][ T5112] [ 89.029292][ T5112] dump_stack_lvl+0x241/0x360 [ 89.030926][ T5112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 89.032782][ T5112] ? __pfx_print_modules+0x10/0x10 [ 89.034575][ T5112] bad_page+0x166/0x1b0 [ 89.036252][ T5112] free_unref_page+0xed0/0xf20 [ 89.037981][ T5112] skb_release_data+0x6dc/0x8a0 [ 89.039879][ T5112] sk_skb_reason_drop+0x1c9/0x380 [ 89.042114][ T5112] __netif_receive_skb_core+0x3edd/0x4570 [ 89.044412][ T5112] ? mark_lock+0x9a/0x360 [ 89.046040][ T5112] ? __lock_acquire+0x1384/0x2050 [ 89.047752][ T5112] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 89.049827][ T5112] ? mark_lock+0x9a/0x360 [ 89.051299][ T5112] ? __lock_acquire+0x1384/0x2050 [ 89.053184][ T5112] __netif_receive_skb_list_core+0x2b1/0x980 [ 89.055320][ T5112] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 89.058493][ T5112] ? timekeeping_get_ns+0x2c0/0x420 [ 89.060629][ T5112] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 89.063081][ T5112] netif_receive_skb_list_internal+0xa51/0xe30 [ 89.065394][ T5112] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 89.067772][ T5112] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 89.070261][ T5112] ? __pfx_eth_type_trans+0x10/0x10 [ 89.072244][ T5112] ? __phys_addr+0xba/0x170 [ 89.074039][ T5112] ? build_skb_around+0x111/0x260 [ 89.075969][ T5112] ? __xdp_build_skb_from_frame+0x338/0x650 [ 89.078209][ T5112] netif_receive_skb_list+0x55/0x4b0 [ 89.080279][ T5112] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 89.082361][ T5112] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 89.084568][ T5112] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 89.086597][ T5112] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 89.088908][ T5112] ? synchronize_rcu+0x11b/0x360 [ 89.091437][ T5112] ? __pfx_synchronize_rcu+0x10/0x10 [ 89.094071][ T5112] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 89.096695][ T5112] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 89.098919][ T5112] ? _copy_from_user+0xa6/0xe0 [ 89.100782][ T5112] ? bpf_test_init+0x15a/0x180 [ 89.102769][ T5112] ? xdp_convert_md_to_buff+0x5b/0x330 [ 89.105223][ T5112] bpf_prog_test_run_xdp+0x805/0x11e0 [ 89.107521][ T5112] ? __pfx_lock_release+0x10/0x10 [ 89.109590][ T5112] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 89.112109][ T5112] ? __fget_files+0x29/0x470 [ 89.113956][ T5112] ? fput+0x1a8/0x230 [ 89.115214][ T5112] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 89.117118][ T5112] bpf_prog_test_run+0x2e4/0x360 [ 89.119003][ T5112] __sys_bpf+0x48d/0x810 [ 89.120594][ T5112] ? __pfx___sys_bpf+0x10/0x10 [ 89.122521][ T5112] ? __rseq_handle_notify_resume+0x353/0x14e0 [ 89.126026][ T5112] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 89.128903][ T5112] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 89.131585][ T5112] ? do_syscall_64+0x100/0x230 [ 89.133348][ T5112] __x64_sys_bpf+0x7c/0x90 [ 89.135269][ T5112] do_syscall_64+0xf3/0x230 [ 89.137164][ T5112] ? clear_bhb_loop+0x35/0x90 [ 89.138872][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.141070][ T5112] RIP: 0033:0x7ff7a817dff9 [ 89.143873][ T5112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.152422][ T5112] RSP: 002b:00007ff7a8eb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 89.156107][ T5112] RAX: ffffffffffffffda RBX: 00007ff7a8336058 RCX: 00007ff7a817dff9 [ 89.159437][ T5112] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 89.162308][ T5112] RBP: 00007ff7a81f0296 R08: 0000000000000000 R09: 0000000000000000 [ 89.165389][ T5112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.168729][ T5112] R13: 0000000000000000 R14: 00007ff7a8336058 R15: 00007ffe3304be48 [ 89.171997][ T5112] [ 89.173447][ T5112] BUG: Bad page state in process syz.0.0 pfn:11a42 [ 89.175980][ T5112] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11a42 [ 89.181405][ T5112] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 89.184391][ T5112] raw: 00fff00000000000 dead000000000040 ffff88804b2a2000 0000000000000000 [ 89.187643][ T5112] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 89.190718][ T5112] page dumped because: page_pool leak [ 89.193063][ T5112] page_owner tracks the page as allocated [ 89.196164][ T5112] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5112, tgid 5110 (syz.0.0), ts 82204326590, free_ts 82088326310 [ 89.203408][ T5112] post_alloc_hook+0x1f3/0x230 [ 89.205225][ T5112] get_page_from_freelist+0x3045/0x3190 [ 89.207315][ T5112] __alloc_pages_noprof+0x292/0x710 [ 89.209137][ T5112] alloc_pages_bulk_noprof+0x729/0xd40 [ 89.211162][ T5112] __page_pool_alloc_pages_slow+0x122/0x690 [ 89.213768][ T5112] page_pool_alloc_pages+0xd0/0x1c0 [ 89.216395][ T5112] bpf_test_run_xdp_live+0x950/0x2160 [ 89.218912][ T5112] bpf_prog_test_run_xdp+0x805/0x11e0 [ 89.221006][ T5112] bpf_prog_test_run+0x2e4/0x360 [ 89.222627][ T5112] __sys_bpf+0x48d/0x810 [ 89.224139][ T5112] __x64_sys_bpf+0x7c/0x90 [ 89.225888][ T5112] do_syscall_64+0xf3/0x230 [ 89.227661][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.229950][ T5112] page last free pid 9 tgid 9 stack trace: [ 89.233155][ T5112] free_unref_page+0xcfb/0xf20 [ 89.235842][ T5112] __slab_free+0x31b/0x3d0 [ 89.237842][ T5112] qlist_free_all+0x9a/0x140 [ 89.239764][ T5112] kasan_quarantine_reduce+0x14f/0x170 [ 89.241807][ T5112] __kasan_kmalloc+0x23/0xb0 [ 89.243642][ T5112] __kmalloc_node_track_caller_noprof+0x225/0x440 [ 89.245996][ T5112] kmalloc_reserve+0x111/0x2a0 [ 89.247652][ T5112] __alloc_skb+0x1f3/0x440 [ 89.249242][ T5112] alloc_skb_with_frags+0xc3/0x820 [ 89.251568][ T5112] sock_alloc_send_pskb+0x91a/0xa60 [ 89.254150][ T5112] mld_newpack+0x1c3/0xa90 [ 89.256084][ T5112] add_grec+0x1492/0x19a0 [ 89.257653][ T5112] mld_send_initial_cr+0x228/0x4b0 [ 89.259662][ T5112] mld_dad_work+0x44/0x500 [ 89.261416][ T5112] process_scheduled_works+0xa63/0x1850 [ 89.263612][ T5112] worker_thread+0x870/0xd30 [ 89.265710][ T5112] Modules linked in: [ 89.267623][ T5112] CPU: 0 UID: 0 PID: 5112 Comm: syz.0.0 Tainted: G B 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 89.274209][ T5112] Tainted: [B]=BAD_PAGE [ 89.275877][ T5112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 89.280455][ T5112] Call Trace: [ 89.281894][ T5112] [ 89.283173][ T5112] dump_stack_lvl+0x241/0x360 [ 89.285414][ T5112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 89.288432][ T5112] ? __pfx_print_modules+0x10/0x10 [ 89.291795][ T5112] bad_page+0x166/0x1b0 [ 89.293766][ T5112] free_unref_page+0xed0/0xf20 [ 89.295718][ T5112] skb_release_data+0x6dc/0x8a0 [ 89.297573][ T5112] sk_skb_reason_drop+0x1c9/0x380 [ 89.299320][ T5112] __netif_receive_skb_core+0x3edd/0x4570 [ 89.301332][ T5112] ? mark_lock+0x9a/0x360 [ 89.302860][ T5112] ? __lock_acquire+0x1384/0x2050 [ 89.304615][ T5112] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 89.307609][ T5112] ? mark_lock+0x9a/0x360 [ 89.310771][ T5112] ? __lock_acquire+0x1384/0x2050 [ 89.313422][ T5112] __netif_receive_skb_list_core+0x2b1/0x980 [ 89.315456][ T5112] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 89.317671][ T5112] ? timekeeping_get_ns+0x2c0/0x420 [ 89.319744][ T5112] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 89.322155][ T5112] netif_receive_skb_list_internal+0xa51/0xe30 [ 89.324470][ T5112] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 89.326340][ T5112] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 89.328424][ T5112] ? __pfx_eth_type_trans+0x10/0x10 [ 89.330221][ T5112] ? __phys_addr+0xba/0x170 [ 89.332090][ T5112] ? build_skb_around+0x111/0x260 [ 89.334218][ T5112] ? __xdp_build_skb_from_frame+0x338/0x650 [ 89.336860][ T5112] netif_receive_skb_list+0x55/0x4b0 [ 89.339395][ T5112] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 89.341884][ T5112] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 89.343882][ T5112] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 89.345706][ T5112] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 89.347997][ T5112] ? synchronize_rcu+0x11b/0x360 [ 89.350027][ T5112] ? __pfx_synchronize_rcu+0x10/0x10 [ 89.352415][ T5112] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 89.355484][ T5112] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 89.358083][ T5112] ? _copy_from_user+0xa6/0xe0 [ 89.360133][ T5112] ? bpf_test_init+0x15a/0x180 [ 89.361974][ T5112] ? xdp_convert_md_to_buff+0x5b/0x330 [ 89.364003][ T5112] bpf_prog_test_run_xdp+0x805/0x11e0 [ 89.366115][ T5112] ? __pfx_lock_release+0x10/0x10 [ 89.367995][ T5112] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 89.370383][ T5112] ? __fget_files+0x29/0x470 [ 89.372302][ T5112] ? fput+0x1a8/0x230 [ 89.374138][ T5112] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 89.376800][ T5112] bpf_prog_test_run+0x2e4/0x360 [ 89.378689][ T5112] __sys_bpf+0x48d/0x810 [ 89.380356][ T5112] ? __pfx___sys_bpf+0x10/0x10 [ 89.382075][ T5112] ? __rseq_handle_notify_resume+0x353/0x14e0 [ 89.384137][ T5112] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 89.386708][ T5112] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 89.389558][ T5112] ? do_syscall_64+0x100/0x230 [ 89.391896][ T5112] __x64_sys_bpf+0x7c/0x90 [ 89.393573][ T5112] do_syscall_64+0xf3/0x230 [ 89.395461][ T5112] ? clear_bhb_loop+0x35/0x90 [ 89.397110][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.399571][ T5112] RIP: 0033:0x7ff7a817dff9 [ 89.401279][ T5112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.410367][ T5112] RSP: 002b:00007ff7a8eb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 89.413648][ T5112] RAX: ffffffffffffffda RBX: 00007ff7a8336058 RCX: 00007ff7a817dff9 [ 89.416655][ T5112] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 89.419614][ T5112] RBP: 00007ff7a81f0296 R08: 0000000000000000 R09: 0000000000000000 [ 89.422524][ T5112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.425241][ T5112] R13: 0000000000000000 R14: 00007ff7a8336058 R15: 00007ffe3304be48 [ 89.428547][ T5112] [ 89.431080][ T5112] BUG: Bad page state in process syz.0.0 pfn:11a41 [ 89.434307][ T5112] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x8 pfn:0x11a41 [ 89.437376][ T5112] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 89.439819][ T5112] raw: 00fff00000000000 dead000000000040 ffff88804b2a2000 0000000000000000 [ 89.442505][ T5112] raw: 0000000000000008 0000000000000001 00000000ffffffff 0000000000000000 [ 89.445639][ T5112] page dumped because: page_pool leak [ 89.447682][ T5112] page_owner tracks the page as allocated [ 89.449738][ T5112] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5112, tgid 5110 (syz.0.0), ts 82204319148, free_ts 82088326310 [ 89.457502][ T5112] post_alloc_hook+0x1f3/0x230 [ 89.459277][ T5112] get_page_from_freelist+0x3045/0x3190 [ 89.461151][ T5112] __alloc_pages_noprof+0x292/0x710 [ 89.463069][ T5112] alloc_pages_bulk_noprof+0x729/0xd40 [ 89.465139][ T5112] __page_pool_alloc_pages_slow+0x122/0x690 [ 89.467243][ T5112] page_pool_alloc_pages+0xd0/0x1c0 [ 89.469248][ T5112] bpf_test_run_xdp_live+0x950/0x2160 [ 89.471253][ T5112] bpf_prog_test_run_xdp+0x805/0x11e0 [ 89.473143][ T5112] bpf_prog_test_run+0x2e4/0x360 [ 89.474903][ T5112] __sys_bpf+0x48d/0x810 [ 89.476843][ T5112] __x64_sys_bpf+0x7c/0x90 [ 89.478557][ T5112] do_syscall_64+0xf3/0x230 [ 89.480339][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.482552][ T5112] page last free pid 9 tgid 9 stack trace: [ 89.484786][ T5112] free_unref_page+0xcfb/0xf20 [ 89.486722][ T5112] __slab_free+0x31b/0x3d0 [ 89.488563][ T5112] qlist_free_all+0x9a/0x140 [ 89.490639][ T5112] kasan_quarantine_reduce+0x14f/0x170 [ 89.493349][ T5112] __kasan_kmalloc+0x23/0xb0 [ 89.495540][ T5112] __kmalloc_node_track_caller_noprof+0x225/0x440 [ 89.497971][ T5112] kmalloc_reserve+0x111/0x2a0 [ 89.499785][ T5112] __alloc_skb+0x1f3/0x440 [ 89.501400][ T5112] alloc_skb_with_frags+0xc3/0x820 [ 89.503270][ T5112] sock_alloc_send_pskb+0x91a/0xa60 [ 89.505152][ T5112] mld_newpack+0x1c3/0xa90 [ 89.507186][ T5112] add_grec+0x1492/0x19a0 [ 89.508832][ T5112] mld_send_initial_cr+0x228/0x4b0 [ 89.511353][ T5112] mld_dad_work+0x44/0x500 [ 89.513105][ T5112] process_scheduled_works+0xa63/0x1850 [ 89.515396][ T5112] worker_thread+0x870/0xd30 [ 89.517116][ T5112] Modules linked in: [ 89.518540][ T5112] CPU: 0 UID: 0 PID: 5112 Comm: syz.0.0 Tainted: G B 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 89.523251][ T5112] Tainted: [B]=BAD_PAGE [ 89.525735][ T5112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 89.531171][ T5112] Call Trace: [ 89.532394][ T5112] [ 89.533487][ T5112] dump_stack_lvl+0x241/0x360 [ 89.535550][ T5112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 89.537578][ T5112] ? __pfx_print_modules+0x10/0x10 [ 89.539656][ T5112] bad_page+0x166/0x1b0 [ 89.541376][ T5112] free_unref_page+0xed0/0xf20 [ 89.543282][ T5112] skb_release_data+0x6dc/0x8a0 [ 89.545281][ T5112] sk_skb_reason_drop+0x1c9/0x380 [ 89.547387][ T5112] __netif_receive_skb_core+0x3edd/0x4570 [ 89.549634][ T5112] ? mark_lock+0x9a/0x360 [ 89.551237][ T5112] ? __lock_acquire+0x1384/0x2050 [ 89.553002][ T5112] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 89.555453][ T5112] ? mark_lock+0x9a/0x360 [ 89.557453][ T5112] ? __lock_acquire+0x1384/0x2050 [ 89.560273][ T5112] __netif_receive_skb_list_core+0x2b1/0x980 [ 89.563123][ T5112] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 89.565645][ T5112] ? timekeeping_get_ns+0x2c0/0x420 [ 89.567466][ T5112] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 89.569703][ T5112] netif_receive_skb_list_internal+0xa51/0xe30 [ 89.572103][ T5112] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 89.574760][ T5112] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 89.577903][ T5112] ? __pfx_eth_type_trans+0x10/0x10 [ 89.580221][ T5112] ? __phys_addr+0xba/0x170 [ 89.581857][ T5112] ? build_skb_around+0x111/0x260 [ 89.583595][ T5112] ? __xdp_build_skb_from_frame+0x338/0x650 [ 89.585709][ T5112] netif_receive_skb_list+0x55/0x4b0 [ 89.587580][ T5112] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 89.589945][ T5112] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 89.593016][ T5112] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 89.595880][ T5112] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 89.597956][ T5112] ? synchronize_rcu+0x11b/0x360 [ 89.599840][ T5112] ? __pfx_synchronize_rcu+0x10/0x10 [ 89.601792][ T5112] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 89.604033][ T5112] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 89.606261][ T5112] ? _copy_from_user+0xa6/0xe0 [ 89.608261][ T5112] ? bpf_test_init+0x15a/0x180 [ 89.610689][ T5112] ? xdp_convert_md_to_buff+0x5b/0x330 [ 89.613564][ T5112] bpf_prog_test_run_xdp+0x805/0x11e0 [ 89.615773][ T5112] ? __pfx_lock_release+0x10/0x10 [ 89.617682][ T5112] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 89.619910][ T5112] ? __fget_files+0x29/0x470 [ 89.621937][ T5112] ? fput+0x1a8/0x230 [ 89.623829][ T5112] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 89.627032][ T5112] bpf_prog_test_run+0x2e4/0x360 [ 89.629190][ T5112] __sys_bpf+0x48d/0x810 [ 89.630698][ T5112] ? __pfx___sys_bpf+0x10/0x10 [ 89.632399][ T5112] ? __rseq_handle_notify_resume+0x353/0x14e0 [ 89.634783][ T5112] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 89.637175][ T5112] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 89.639802][ T5112] ? do_syscall_64+0x100/0x230 [ 89.642261][ T5112] __x64_sys_bpf+0x7c/0x90 [ 89.644530][ T5112] do_syscall_64+0xf3/0x230 [ 89.646562][ T5112] ? clear_bhb_loop+0x35/0x90 [ 89.648337][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.650637][ T5112] RIP: 0033:0x7ff7a817dff9 [ 89.652729][ T5112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.661069][ T5112] RSP: 002b:00007ff7a8eb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 89.664693][ T5112] RAX: ffffffffffffffda RBX: 00007ff7a8336058 RCX: 00007ff7a817dff9 [ 89.667766][ T5112] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 89.670976][ T5112] RBP: 00007ff7a81f0296 R08: 0000000000000000 R09: 0000000000000000 [ 89.674389][ T5112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.677980][ T5112] R13: 0000000000000000 R14: 00007ff7a8336058 R15: 00007ffe3304be48 [ 89.681248][ T5112] [ 89.682808][ T5112] BUG: Bad page state in process syz.0.0 pfn:11a40 [ 89.686063][ T5112] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888011a46000 pfn:0x11a40 [ 89.691334][ T5112] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 89.694700][ T5112] raw: 00fff00000000000 dead000000000040 ffff88804b2a2000 0000000000000000 [ 89.697966][ T5112] raw: ffff888011a46000 0000000000000001 00000000ffffffff 0000000000000000 [ 89.701631][ T5112] page dumped because: page_pool leak [ 89.703747][ T5112] page_owner tracks the page as allocated [ 89.705839][ T5112] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5112, tgid 5110 (syz.0.0), ts 82204311744, free_ts 82088326310 [ 89.714289][ T5112] post_alloc_hook+0x1f3/0x230 [ 89.716960][ T5112] get_page_from_freelist+0x3045/0x3190 [ 89.719166][ T5112] __alloc_pages_noprof+0x292/0x710 [ 89.722042][ T5112] alloc_pages_bulk_noprof+0x729/0xd40 [ 89.724389][ T5112] __page_pool_alloc_pages_slow+0x122/0x690 [ 89.727061][ T5112] page_pool_alloc_pages+0xd0/0x1c0 [ 89.729293][ T5112] bpf_test_run_xdp_live+0x950/0x2160 [ 89.731625][ T5112] bpf_prog_test_run_xdp+0x805/0x11e0 [ 89.733862][ T5112] bpf_prog_test_run+0x2e4/0x360 [ 89.736102][ T5112] __sys_bpf+0x48d/0x810 [ 89.737937][ T5112] __x64_sys_bpf+0x7c/0x90 [ 89.739867][ T5112] do_syscall_64+0xf3/0x230 [ 89.741715][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.744157][ T5112] page last free pid 9 tgid 9 stack trace: [ 89.746808][ T5112] free_unref_page+0xcfb/0xf20 [ 89.749446][ T5112] __slab_free+0x31b/0x3d0 [ 89.751859][ T5112] qlist_free_all+0x9a/0x140 [ 89.754240][ T5112] kasan_quarantine_reduce+0x14f/0x170 [ 89.756810][ T5112] __kasan_kmalloc+0x23/0xb0 [ 89.758724][ T5112] __kmalloc_node_track_caller_noprof+0x225/0x440 [ 89.761287][ T5112] kmalloc_reserve+0x111/0x2a0 [ 89.763076][ T5112] __alloc_skb+0x1f3/0x440 [ 89.764779][ T5112] alloc_skb_with_frags+0xc3/0x820 [ 89.766785][ T5112] sock_alloc_send_pskb+0x91a/0xa60 [ 89.768869][ T5112] mld_newpack+0x1c3/0xa90 [ 89.771483][ T5112] add_grec+0x1492/0x19a0 [ 89.774093][ T5112] mld_send_initial_cr+0x228/0x4b0 [ 89.776500][ T5112] mld_dad_work+0x44/0x500 [ 89.778155][ T5112] process_scheduled_works+0xa63/0x1850 [ 89.780369][ T5112] worker_thread+0x870/0xd30 [ 89.782103][ T5112] Modules linked in: [ 89.783560][ T5112] CPU: 0 UID: 0 PID: 5112 Comm: syz.0.0 Tainted: G B 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 89.788107][ T5112] Tainted: [B]=BAD_PAGE [ 89.789942][ T5112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 89.794674][ T5112] Call Trace: [ 89.795933][ T5112] [ 89.797041][ T5112] dump_stack_lvl+0x241/0x360 [ 89.798855][ T5112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 89.800975][ T5112] ? __pfx_print_modules+0x10/0x10 [ 89.803268][ T5112] bad_page+0x166/0x1b0 [ 89.805276][ T5112] free_unref_page+0xed0/0xf20 [ 89.807632][ T5112] skb_release_data+0x6dc/0x8a0 [ 89.809746][ T5112] sk_skb_reason_drop+0x1c9/0x380 [ 89.811904][ T5112] __netif_receive_skb_core+0x3edd/0x4570 [ 89.814027][ T5112] ? mark_lock+0x9a/0x360 [ 89.815675][ T5112] ? __lock_acquire+0x1384/0x2050 [ 89.817572][ T5112] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 89.819893][ T5112] ? mark_lock+0x9a/0x360 [ 89.821508][ T5112] ? __lock_acquire+0x1384/0x2050 [ 89.823672][ T5112] __netif_receive_skb_list_core+0x2b1/0x980 [ 89.826429][ T5112] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 89.829381][ T5112] ? timekeeping_get_ns+0x2c0/0x420 [ 89.831554][ T5112] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 89.833925][ T5112] netif_receive_skb_list_internal+0xa51/0xe30 [ 89.836337][ T5112] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 89.838718][ T5112] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 89.841354][ T5112] ? __pfx_eth_type_trans+0x10/0x10 [ 89.844127][ T5112] ? __phys_addr+0xba/0x170 [ 89.846881][ T5112] ? build_skb_around+0x111/0x260 [ 89.849448][ T5112] ? __xdp_build_skb_from_frame+0x338/0x650 [ 89.851863][ T5112] netif_receive_skb_list+0x55/0x4b0 [ 89.853964][ T5112] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 89.856033][ T5112] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 89.858270][ T5112] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 89.860353][ T5112] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 89.862577][ T5112] ? synchronize_rcu+0x11b/0x360 [ 89.864918][ T5112] ? __pfx_synchronize_rcu+0x10/0x10 [ 89.867305][ T5112] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 89.870347][ T5112] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 89.872865][ T5112] ? _copy_from_user+0xa6/0xe0 [ 89.874653][ T5112] ? bpf_test_init+0x15a/0x180 [ 89.876569][ T5112] ? xdp_convert_md_to_buff+0x5b/0x330 [ 89.878672][ T5112] bpf_prog_test_run_xdp+0x805/0x11e0 [ 89.880735][ T5112] ? __pfx_lock_release+0x10/0x10 [ 89.886781][ T5112] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 89.889663][ T5112] ? __fget_files+0x29/0x470 [ 89.891822][ T5112] ? fput+0x1a8/0x230 [ 89.893292][ T5112] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 89.895486][ T5112] bpf_prog_test_run+0x2e4/0x360 [ 89.897479][ T5112] __sys_bpf+0x48d/0x810 [ 89.899178][ T5112] ? __pfx___sys_bpf+0x10/0x10 [ 89.900966][ T5112] ? __rseq_handle_notify_resume+0x353/0x14e0 [ 89.903474][ T5112] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 89.906451][ T5112] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 89.909370][ T5112] ? do_syscall_64+0x100/0x230 [ 89.911383][ T5112] __x64_sys_bpf+0x7c/0x90 [ 89.912993][ T5112] do_syscall_64+0xf3/0x230 [ 89.914841][ T5112] ? clear_bhb_loop+0x35/0x90 [ 89.916667][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.918795][ T5112] RIP: 0033:0x7ff7a817dff9 [ 89.920711][ T5112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.930446][ T5112] RSP: 002b:00007ff7a8eb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 89.933557][ T5112] RAX: ffffffffffffffda RBX: 00007ff7a8336058 RCX: 00007ff7a817dff9 [ 89.936552][ T5112] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 89.939300][ T5112] RBP: 00007ff7a81f0296 R08: 0000000000000000 R09: 0000000000000000 [ 89.942167][ T5112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.945042][ T5112] R13: 0000000000000000 R14: 00007ff7a8336058 R15: 00007ffe3304be48 [ 89.947975][ T5112] [ 89.949508][ T5112] BUG: Bad page state in process syz.0.0 pfn:120c7 [ 89.951897][ T5112] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x120c7 [ 89.955434][ T5112] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 89.958027][ T5112] raw: 00fff00000000000 dead000000000040 ffff88804b2a2000 0000000000000000 [ 89.961243][ T5112] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 89.964217][ T5112] page dumped because: page_pool leak [ 89.966413][ T5112] page_owner tracks the page as allocated [ 89.968406][ T5112] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5112, tgid 5110 (syz.0.0), ts 82204304400, free_ts 82089164645 [ 89.974409][ T5112] post_alloc_hook+0x1f3/0x230 [ 89.976526][ T5112] get_page_from_freelist+0x3045/0x3190 [ 89.978560][ T5112] __alloc_pages_noprof+0x292/0x710 [ 89.980523][ T5112] alloc_pages_bulk_noprof+0x729/0xd40 [ 89.982625][ T5112] __page_pool_alloc_pages_slow+0x122/0x690 [ 89.984758][ T5112] page_pool_alloc_pages+0xd0/0x1c0 [ 89.986754][ T5112] bpf_test_run_xdp_live+0x950/0x2160 [ 89.988857][ T5112] bpf_prog_test_run_xdp+0x805/0x11e0 [ 89.990852][ T5112] bpf_prog_test_run+0x2e4/0x360 [ 89.992842][ T5112] __sys_bpf+0x48d/0x810 [ 89.994350][ T5112] __x64_sys_bpf+0x7c/0x90 [ 89.996110][ T5112] do_syscall_64+0xf3/0x230 [ 89.997775][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.999955][ T5112] page last free pid 912 tgid 912 stack trace: [ 90.002339][ T5112] free_unref_page+0xcfb/0xf20 [ 90.004005][ T5112] __slab_free+0x31b/0x3d0 [ 90.005683][ T5112] qlist_free_all+0x9a/0x140 [ 90.007469][ T5112] kasan_quarantine_reduce+0x14f/0x170 [ 90.009457][ T5112] __kasan_slab_alloc+0x23/0x80 [ 90.011252][ T5112] __kmalloc_cache_noprof+0x132/0x2c0 [ 90.013312][ T5112] nsim_fib_event_work+0xe1a/0x4130 [ 90.015145][ T5112] process_scheduled_works+0xa63/0x1850 [ 90.017300][ T5112] worker_thread+0x870/0xd30 [ 90.019006][ T5112] kthread+0x2f0/0x390 [ 90.020681][ T5112] ret_from_fork+0x4b/0x80 [ 90.022447][ T5112] ret_from_fork_asm+0x1a/0x30 [ 90.024323][ T5112] Modules linked in: [ 90.025994][ T5112] CPU: 0 UID: 0 PID: 5112 Comm: syz.0.0 Tainted: G B 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 90.030419][ T5112] Tainted: [B]=BAD_PAGE [ 90.031998][ T5112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 90.036020][ T5112] Call Trace: [ 90.037335][ T5112] [ 90.038478][ T5112] dump_stack_lvl+0x241/0x360 [ 90.040338][ T5112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 90.042360][ T5112] ? __pfx_print_modules+0x10/0x10 [ 90.044394][ T5112] bad_page+0x166/0x1b0 [ 90.045946][ T5112] free_unref_page+0xed0/0xf20 [ 90.047740][ T5112] skb_release_data+0x6dc/0x8a0 [ 90.049511][ T5112] sk_skb_reason_drop+0x1c9/0x380 [ 90.051379][ T5112] __netif_receive_skb_core+0x3edd/0x4570 [ 90.053582][ T5112] ? mark_lock+0x9a/0x360 [ 90.055114][ T5112] ? __lock_acquire+0x1384/0x2050 [ 90.056914][ T5112] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 90.059158][ T5112] ? mark_lock+0x9a/0x360 [ 90.060661][ T5112] ? __lock_acquire+0x1384/0x2050 [ 90.062469][ T5112] __netif_receive_skb_list_core+0x2b1/0x980 [ 90.064775][ T5112] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 90.067199][ T5112] ? timekeeping_get_ns+0x2c0/0x420 [ 90.069244][ T5112] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 90.071671][ T5112] netif_receive_skb_list_internal+0xa51/0xe30 [ 90.074063][ T5112] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 90.077133][ T5112] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 90.080058][ T5112] ? __pfx_eth_type_trans+0x10/0x10 [ 90.082177][ T5112] ? __phys_addr+0xba/0x170 [ 90.084104][ T5112] ? build_skb_around+0x111/0x260 [ 90.086230][ T5112] ? __xdp_build_skb_from_frame+0x338/0x650 [ 90.088703][ T5112] netif_receive_skb_list+0x55/0x4b0 [ 90.090909][ T5112] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 90.093228][ T5112] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 90.095700][ T5112] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 90.097999][ T5112] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 90.100346][ T5112] ? synchronize_rcu+0x11b/0x360 [ 90.102389][ T5112] ? __pfx_synchronize_rcu+0x10/0x10 [ 90.104744][ T5112] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 90.107309][ T5112] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 90.109378][ T5112] ? _copy_from_user+0xa6/0xe0 [ 90.111350][ T5112] ? bpf_test_init+0x15a/0x180 [ 90.113307][ T5112] ? xdp_convert_md_to_buff+0x5b/0x330 [ 90.115574][ T5112] bpf_prog_test_run_xdp+0x805/0x11e0 [ 90.117794][ T5112] ? __pfx_lock_release+0x10/0x10 [ 90.119904][ T5112] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 90.122341][ T5112] ? __fget_files+0x29/0x470 [ 90.124245][ T5112] ? fput+0x1a8/0x230 [ 90.125891][ T5112] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 90.127920][ T5112] bpf_prog_test_run+0x2e4/0x360 [ 90.129682][ T5112] __sys_bpf+0x48d/0x810 [ 90.131183][ T5112] ? __pfx___sys_bpf+0x10/0x10 [ 90.132833][ T5112] ? __rseq_handle_notify_resume+0x353/0x14e0 [ 90.134851][ T5112] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 90.137208][ T5112] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 90.139447][ T5112] ? do_syscall_64+0x100/0x230 [ 90.141312][ T5112] __x64_sys_bpf+0x7c/0x90 [ 90.143176][ T5112] do_syscall_64+0xf3/0x230 [ 90.144925][ T5112] ? clear_bhb_loop+0x35/0x90 [ 90.146682][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.148987][ T5112] RIP: 0033:0x7ff7a817dff9 [ 90.150655][ T5112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.157944][ T5112] RSP: 002b:00007ff7a8eb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 90.161401][ T5112] RAX: ffffffffffffffda RBX: 00007ff7a8336058 RCX: 00007ff7a817dff9 [ 90.164273][ T5112] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 90.167330][ T5112] RBP: 00007ff7a81f0296 R08: 0000000000000000 R09: 0000000000000000 [ 90.170317][ T5112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.173197][ T5112] R13: 0000000000000000 R14: 00007ff7a8336058 R15: 00007ffe3304be48 [ 90.176278][ T5112] [ 90.177619][ T5112] BUG: Bad page state in process syz.0.0 pfn:120c6 [ 90.180156][ T5112] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x120c6 [ 90.183633][ T5112] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 90.186378][ T5112] raw: 00fff00000000000 dead000000000040 ffff88804b2a2000 0000000000000000 [ 90.189509][ T5112] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 90.193632][ T5112] page dumped because: page_pool leak [ 90.196106][ T5112] page_owner tracks the page as allocated [ 90.198301][ T5112] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5112, tgid 5110 (syz.0.0), ts 82204298411, free_ts 82089164645 [ 90.205019][ T5112] post_alloc_hook+0x1f3/0x230 [ 90.207055][ T5112] get_page_from_freelist+0x3045/0x3190 [ 90.209240][ T5112] __alloc_pages_noprof+0x292/0x710 [ 90.211297][ T5112] alloc_pages_bulk_noprof+0x729/0xd40 [ 90.213371][ T5112] __page_pool_alloc_pages_slow+0x122/0x690 [ 90.215854][ T5112] page_pool_alloc_pages+0xd0/0x1c0 [ 90.217800][ T5112] bpf_test_run_xdp_live+0x950/0x2160 [ 90.219798][ T5112] bpf_prog_test_run_xdp+0x805/0x11e0 [ 90.221703][ T5112] bpf_prog_test_run+0x2e4/0x360 [ 90.223523][ T5112] __sys_bpf+0x48d/0x810 [ 90.225027][ T5112] __x64_sys_bpf+0x7c/0x90 [ 90.226702][ T5112] do_syscall_64+0xf3/0x230 [ 90.228283][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.230534][ T5112] page last free pid 912 tgid 912 stack trace: [ 90.232915][ T5112] free_unref_page+0xcfb/0xf20 [ 90.234771][ T5112] __slab_free+0x31b/0x3d0 [ 90.236400][ T5112] qlist_free_all+0x9a/0x140 [ 90.238126][ T5112] kasan_quarantine_reduce+0x14f/0x170 [ 90.240195][ T5112] __kasan_slab_alloc+0x23/0x80 [ 90.241851][ T5112] __kmalloc_cache_noprof+0x132/0x2c0 [ 90.243938][ T5112] nsim_fib_event_work+0xe1a/0x4130 [ 90.245828][ T5112] process_scheduled_works+0xa63/0x1850 [ 90.247852][ T5112] worker_thread+0x870/0xd30 [ 90.249512][ T5112] kthread+0x2f0/0x390 [ 90.251037][ T5112] ret_from_fork+0x4b/0x80 [ 90.252754][ T5112] ret_from_fork_asm+0x1a/0x30 [ 90.254729][ T5112] Modules linked in: [ 90.256556][ T5112] CPU: 0 UID: 0 PID: 5112 Comm: syz.0.0 Tainted: G B 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 90.261147][ T5112] Tainted: [B]=BAD_PAGE [ 90.262705][ T5112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 90.266645][ T5112] Call Trace: [ 90.268054][ T5112] [ 90.269217][ T5112] dump_stack_lvl+0x241/0x360 [ 90.271041][ T5112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 90.272964][ T5112] ? __pfx_print_modules+0x10/0x10 [ 90.274888][ T5112] bad_page+0x166/0x1b0 [ 90.276492][ T5112] free_unref_page+0xed0/0xf20 [ 90.278322][ T5112] skb_release_data+0x6dc/0x8a0 [ 90.280093][ T5112] sk_skb_reason_drop+0x1c9/0x380 [ 90.282080][ T5112] __netif_receive_skb_core+0x3edd/0x4570 [ 90.284356][ T5112] ? mark_lock+0x9a/0x360 [ 90.286090][ T5112] ? __lock_acquire+0x1384/0x2050 [ 90.288021][ T5112] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 90.290446][ T5112] ? mark_lock+0x9a/0x360 [ 90.292090][ T5112] ? __lock_acquire+0x1384/0x2050 [ 90.293774][ T5112] __netif_receive_skb_list_core+0x2b1/0x980 [ 90.296887][ T5112] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 90.299381][ T5112] ? timekeeping_get_ns+0x2c0/0x420 [ 90.301382][ T5112] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 90.303699][ T5112] netif_receive_skb_list_internal+0xa51/0xe30 [ 90.305827][ T5112] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 90.308531][ T5112] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 90.311931][ T5112] ? __pfx_eth_type_trans+0x10/0x10 [ 90.314609][ T5112] ? __phys_addr+0xba/0x170 [ 90.316445][ T5112] ? build_skb_around+0x111/0x260 [ 90.318318][ T5112] ? __xdp_build_skb_from_frame+0x338/0x650 [ 90.320648][ T5112] netif_receive_skb_list+0x55/0x4b0 [ 90.322674][ T5112] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 90.324699][ T5112] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 90.327767][ T5112] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 90.331799][ T5112] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 90.334936][ T5112] ? synchronize_rcu+0x11b/0x360 [ 90.336903][ T5112] ? __pfx_synchronize_rcu+0x10/0x10 [ 90.338818][ T5112] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 90.341309][ T5112] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 90.343842][ T5112] ? _copy_from_user+0xa6/0xe0 [ 90.345801][ T5112] ? bpf_test_init+0x15a/0x180 [ 90.347743][ T5112] ? xdp_convert_md_to_buff+0x5b/0x330 [ 90.350134][ T5112] bpf_prog_test_run_xdp+0x805/0x11e0 [ 90.352490][ T5112] ? __pfx_lock_release+0x10/0x10 [ 90.354509][ T5112] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 90.356650][ T5112] ? __fget_files+0x29/0x470 [ 90.358158][ T5112] ? fput+0x1a8/0x230 [ 90.359634][ T5112] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 90.361865][ T5112] bpf_prog_test_run+0x2e4/0x360 [ 90.363755][ T5112] __sys_bpf+0x48d/0x810 [ 90.365363][ T5112] ? __pfx___sys_bpf+0x10/0x10 [ 90.367064][ T5112] ? __rseq_handle_notify_resume+0x353/0x14e0 [ 90.369971][ T5112] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 90.373184][ T5112] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 90.375983][ T5112] ? do_syscall_64+0x100/0x230 [ 90.377805][ T5112] __x64_sys_bpf+0x7c/0x90 [ 90.379571][ T5112] do_syscall_64+0xf3/0x230 [ 90.381121][ T5112] ? clear_bhb_loop+0x35/0x90 [ 90.382793][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.384963][ T5112] RIP: 0033:0x7ff7a817dff9 [ 90.386688][ T5112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.394390][ T5112] RSP: 002b:00007ff7a8eb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 90.398403][ T5112] RAX: ffffffffffffffda RBX: 00007ff7a8336058 RCX: 00007ff7a817dff9 [ 90.401432][ T5112] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 90.404505][ T5112] RBP: 00007ff7a81f0296 R08: 0000000000000000 R09: 0000000000000000 [ 90.407673][ T5112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.410770][ T5112] R13: 0000000000000000 R14: 00007ff7a8336058 R15: 00007ffe3304be48 [ 90.414705][ T5112] [ 90.416495][ T5112] BUG: Bad page state in process syz.0.0 pfn:120c5 [ 90.419627][ T5112] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x120c5 [ 90.422830][ T5112] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 90.425616][ T5112] raw: 00fff00000000000 dead000000000040 ffff88804b2a2000 0000000000000000 [ 90.429119][ T5112] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 90.432456][ T5112] page dumped because: page_pool leak [ 90.434904][ T5112] page_owner tracks the page as allocated [ 90.437836][ T5112] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5112, tgid 5110 (syz.0.0), ts 82204289776, free_ts 82089164645 [ 90.444444][ T5112] post_alloc_hook+0x1f3/0x230 [ 90.446616][ T5112] get_page_from_freelist+0x3045/0x3190 [ 90.449164][ T5112] __alloc_pages_noprof+0x292/0x710 [ 90.451612][ T5112] alloc_pages_bulk_noprof+0x729/0xd40 [ 90.454083][ T5112] __page_pool_alloc_pages_slow+0x122/0x690 [ 90.456195][ T5112] page_pool_alloc_pages+0xd0/0x1c0 [ 90.458231][ T5112] bpf_test_run_xdp_live+0x950/0x2160 [ 90.460330][ T5112] bpf_prog_test_run_xdp+0x805/0x11e0 [ 90.462535][ T5112] bpf_prog_test_run+0x2e4/0x360 [ 90.464759][ T5112] __sys_bpf+0x48d/0x810 [ 90.466794][ T5112] __x64_sys_bpf+0x7c/0x90 [ 90.468985][ T5112] do_syscall_64+0xf3/0x230 [ 90.470991][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.473564][ T5112] page last free pid 912 tgid 912 stack trace: [ 90.476358][ T5112] free_unref_page+0xcfb/0xf20 [ 90.478301][ T5112] __slab_free+0x31b/0x3d0 [ 90.480199][ T5112] qlist_free_all+0x9a/0x140 [ 90.482166][ T5112] kasan_quarantine_reduce+0x14f/0x170 [ 90.484694][ T5112] __kasan_slab_alloc+0x23/0x80 [ 90.487140][ T5112] __kmalloc_cache_noprof+0x132/0x2c0 [ 90.489436][ T5112] nsim_fib_event_work+0xe1a/0x4130 [ 90.491647][ T5112] process_scheduled_works+0xa63/0x1850 [ 90.493786][ T5112] worker_thread+0x870/0xd30 [ 90.495751][ T5112] kthread+0x2f0/0x390 [ 90.497685][ T5112] ret_from_fork+0x4b/0x80 [ 90.499837][ T5112] ret_from_fork_asm+0x1a/0x30 [ 90.502281][ T5112] Modules linked in: [ 90.503992][ T5112] CPU: 0 UID: 0 PID: 5112 Comm: syz.0.0 Tainted: G B 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 90.508670][ T5112] Tainted: [B]=BAD_PAGE [ 90.510294][ T5112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 90.515051][ T5112] Call Trace: [ 90.516730][ T5112] [ 90.518072][ T5112] dump_stack_lvl+0x241/0x360 [ 90.520289][ T5112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 90.522224][ T5112] ? __pfx_print_modules+0x10/0x10 [ 90.524062][ T5112] bad_page+0x166/0x1b0 [ 90.525612][ T5112] free_unref_page+0xed0/0xf20 [ 90.527340][ T5112] skb_release_data+0x6dc/0x8a0 [ 90.529268][ T5112] sk_skb_reason_drop+0x1c9/0x380 [ 90.531106][ T5112] __netif_receive_skb_core+0x3edd/0x4570 [ 90.533530][ T5112] ? mark_lock+0x9a/0x360 [ 90.536019][ T5112] ? __lock_acquire+0x1384/0x2050 [ 90.537933][ T5112] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 90.540141][ T5112] ? mark_lock+0x9a/0x360 [ 90.541535][ T5112] ? __lock_acquire+0x1384/0x2050 [ 90.543204][ T5112] __netif_receive_skb_list_core+0x2b1/0x980 [ 90.545368][ T5112] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 90.548523][ T5112] ? timekeeping_get_ns+0x2c0/0x420 [ 90.551161][ T5112] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 90.553816][ T5112] netif_receive_skb_list_internal+0xa51/0xe30 [ 90.556215][ T5112] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 90.558556][ T5112] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 90.560908][ T5112] ? __pfx_eth_type_trans+0x10/0x10 [ 90.562886][ T5112] ? __phys_addr+0xba/0x170 [ 90.564544][ T5112] ? build_skb_around+0x111/0x260 [ 90.566510][ T5112] ? __xdp_build_skb_from_frame+0x338/0x650 [ 90.571254][ T5112] netif_receive_skb_list+0x55/0x4b0 [ 90.574190][ T5112] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 90.576253][ T5112] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 90.578571][ T5112] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 90.580726][ T5112] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 90.583040][ T5112] ? synchronize_rcu+0x11b/0x360 [ 90.584981][ T5112] ? __pfx_synchronize_rcu+0x10/0x10 [ 90.587210][ T5112] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 90.590788][ T5112] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 90.594262][ T5112] ? _copy_from_user+0xa6/0xe0 [ 90.597000][ T5112] ? bpf_test_init+0x15a/0x180 [ 90.599117][ T5112] ? xdp_convert_md_to_buff+0x5b/0x330 [ 90.601483][ T5112] bpf_prog_test_run_xdp+0x805/0x11e0 [ 90.603828][ T5112] ? __pfx_lock_release+0x10/0x10 [ 90.605946][ T5112] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 90.608381][ T5112] ? __fget_files+0x29/0x470 [ 90.610342][ T5112] ? fput+0x1a8/0x230 [ 90.611881][ T5112] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 90.613978][ T5112] bpf_prog_test_run+0x2e4/0x360 [ 90.615748][ T5112] __sys_bpf+0x48d/0x810 [ 90.617394][ T5112] ? __pfx___sys_bpf+0x10/0x10 [ 90.619318][ T5112] ? __rseq_handle_notify_resume+0x353/0x14e0 [ 90.621806][ T5112] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 90.625380][ T5112] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 90.628273][ T5112] ? do_syscall_64+0x100/0x230 [ 90.630084][ T5112] __x64_sys_bpf+0x7c/0x90 [ 90.631797][ T5112] do_syscall_64+0xf3/0x230 [ 90.633550][ T5112] ? clear_bhb_loop+0x35/0x90 [ 90.635258][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.637598][ T5112] RIP: 0033:0x7ff7a817dff9 [ 90.639336][ T5112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.647741][ T5112] RSP: 002b:00007ff7a8eb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 90.651452][ T5112] RAX: ffffffffffffffda RBX: 00007ff7a8336058 RCX: 00007ff7a817dff9 [ 90.654896][ T5112] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 90.657882][ T5112] RBP: 00007ff7a81f0296 R08: 0000000000000000 R09: 0000000000000000 [ 90.660972][ T5112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.664650][ T5112] R13: 0000000000000000 R14: 00007ff7a8336058 R15: 00007ffe3304be48 [ 90.668563][ T5112] [ 90.670648][ T5112] BUG: Bad page state in process syz.0.0 pfn:120c4