[ 38.140058][ T39] audit: type=1400 audit(1730224454.284:80): avc: denied { write } for pid=5905 comm="sh" path="pipe:[8208]" dev="pipefs" ino=8208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 38.149339][ T39] audit: type=1400 audit(1730224454.284:81): avc: denied { rlimitinh } for pid=5905 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.156297][ T39] audit: type=1400 audit(1730224454.284:82): avc: denied { siginh } for pid=5905 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 39.404365][ T39] audit: type=1400 audit(1730224455.554:83): avc: denied { read } for pid=5341 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 39.412238][ T39] audit: type=1400 audit(1730224455.554:84): avc: denied { append } for pid=5341 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.419657][ T39] audit: type=1400 audit(1730224455.554:85): avc: denied { open } for pid=5341 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.427574][ T39] audit: type=1400 audit(1730224455.554:86): avc: denied { getattr } for pid=5341 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:26128' (ED25519) to the list of known hosts. [ 44.513277][ T39] audit: type=1400 audit(1730224460.664:87): avc: denied { execute } for pid=5939 comm="sh" name="syz-executor1947941251" dev="sda1" ino=1926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 44.520282][ T39] audit: type=1400 audit(1730224460.674:88): avc: denied { execute_no_trans } for pid=5939 comm="sh" path="/syz-executor1947941251" dev="sda1" ino=1926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 executing program executing program executing program [ 44.528152][ T39] audit: type=1400 audit(1730224460.684:89): avc: denied { execmem } for pid=5939 comm="syz-executor194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 44.534126][ T39] audit: type=1400 audit(1730224460.684:90): avc: denied { write } for pid=5942 comm="syz-executor194" path="pipe:[8245]" dev="pipefs" ino=8245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 executing program [ 44.548059][ T39] audit: type=1400 audit(1730224460.704:91): avc: denied { create } for pid=5950 comm="syz-executor194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.555032][ T39] audit: type=1400 audit(1730224460.704:92): avc: denied { create } for pid=5945 comm="syz-executor194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.561083][ T39] audit: type=1400 audit(1730224460.704:93): avc: denied { setopt } for pid=5942 comm="syz-executor194" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.567598][ T39] audit: type=1400 audit(1730224460.714:94): avc: denied { module_request } for pid=5942 comm="syz-executor194" kmod="ip6t_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 44.586626][ T39] audit: type=1400 audit(1730224460.744:95): avc: denied { prog_load } for pid=5942 comm="syz-executor194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 44.592542][ T39] audit: type=1400 audit(1730224460.744:96): avc: denied { bpf } for pid=5942 comm="syz-executor194" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 executing program executing program executing program executing program [ 44.784262][ T5958] BUG: Bad page state in process syz-executor194 pfn:234ec [ 44.787522][ T5958] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880234ecd80 pfn:0x234ec [ 44.792829][ T5958] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 44.795502][ T5958] raw: 00fff00000000000 dead000000000040 ffff8880322fe000 0000000000000000 [ 44.798526][ T5958] raw: ffff8880234ecd80 0000000000000001 00000000ffffffff 0000000000000000 [ 44.801569][ T5958] page dumped because: page_pool leak [ 44.803147][ T5958] page_owner tracks the page as allocated [ 44.805168][ T5958] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5958, tgid 5957 (syz-executor194), ts 44777255852, free_ts 44761583478 [ 44.811199][ T5958] post_alloc_hook+0x2d1/0x350 [ 44.813186][ T5958] get_page_from_freelist+0x101e/0x3070 [ 44.815366][ T5958] __alloc_pages_noprof+0x223/0x25a0 [ 44.817318][ T5958] alloc_pages_bulk_noprof+0x77c/0x1110 [ 44.819259][ T5958] __page_pool_alloc_pages_slow+0x18f/0x770 [ 44.821519][ T5958] page_pool_alloc_netmem+0xc4/0x160 [ 44.822985][ T5958] page_pool_alloc_pages+0x1a/0x60 [ 44.824926][ T5958] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 44.827163][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 44.829355][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 44.831240][ T5958] __sys_bpf+0xfc6/0x49a0 [ 44.832804][ T5958] __x64_sys_bpf+0x78/0xc0 [ 44.834394][ T5958] do_syscall_64+0xcd/0x250 [ 44.836116][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.838308][ T5958] page last free pid 5962 tgid 5962 stack trace: [ 44.840648][ T5958] free_unref_page+0x5f4/0xdc0 [ 44.842678][ T5958] qlist_free_all+0x4e/0x120 [ 44.844042][ T5958] kasan_quarantine_reduce+0x192/0x1e0 [ 44.845887][ T5958] __kasan_slab_alloc+0x69/0x90 [ 44.847261][ T5958] kmem_cache_alloc_noprof+0x121/0x2f0 [ 44.848868][ T5958] getname_flags.part.0+0x4c/0x550 [ 44.850608][ T5958] getname+0x8d/0xe0 [ 44.851809][ T5958] do_sys_openat2+0x104/0x1e0 [ 44.853554][ T5958] __x64_sys_openat+0x175/0x210 [ 44.855367][ T5958] do_syscall_64+0xcd/0x250 [ 44.857071][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.859154][ T5958] Modules linked in: [ 44.860549][ T5958] CPU: 2 UID: 0 PID: 5958 Comm: syz-executor194 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 44.863812][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 44.867545][ T5958] Call Trace: [ 44.868745][ T5958] [ 44.869811][ T5958] dump_stack_lvl+0x16c/0x1f0 [ 44.871235][ T5958] bad_page+0xb3/0x1f0 [ 44.872437][ T5958] ? __pfx_bad_page+0x10/0x10 [ 44.873724][ T5958] ? page_bad_reason+0x9d/0x1e0 [ 44.875102][ T5958] free_unref_page+0x657/0xdc0 [ 44.876526][ T5958] ? hlock_class+0x4e/0x130 [ 44.877888][ T5958] ? __phys_addr+0xc6/0x150 [ 44.879326][ T5958] skb_free_head+0xa0/0x1d0 [ 44.881311][ T5958] skb_release_data+0x560/0x730 [ 44.883212][ T5958] sk_skb_reason_drop+0x129/0x1a0 [ 44.885061][ T5958] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 44.887387][ T5958] ? kernel_text_address+0x8d/0x100 [ 44.889564][ T5958] ? hlock_class+0x4e/0x130 [ 44.891188][ T5958] ? __lock_acquire+0x163e/0x3ce0 [ 44.893137][ T5958] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 44.895661][ T5958] ? hlock_class+0x4e/0x130 [ 44.897298][ T5958] ? __lock_acquire+0xbdd/0x3ce0 [ 44.899076][ T5958] ? __pfx___lock_acquire+0x10/0x10 [ 44.901090][ T5958] __netif_receive_skb_list_core+0x357/0x950 [ 44.903624][ T5958] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 44.905918][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 44.907754][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 44.910101][ T5958] ? lock_acquire+0x2f/0xb0 [ 44.911765][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 44.914054][ T5958] netif_receive_skb_list_internal+0x753/0xdb0 [ 44.916541][ T5958] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 44.919039][ T5958] ? __pfx_eth_type_trans+0x10/0x10 [ 44.921150][ T5958] ? __build_skb_around+0x278/0x3b0 [ 44.923145][ T5958] netif_receive_skb_list+0x4f/0x4a0 [ 44.925174][ T5958] xdp_test_run_batch.constprop.0+0x138d/0x1960 executing program [ 44.927364][ T5958] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 44.929878][ T5958] ? bpf_test_timer_continue+0x150/0x3d0 [ 44.932073][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 44.933885][ T5958] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 44.935660][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 44.937609][ T5958] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 44.939253][ T5958] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 44.941036][ T5958] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 44.942358][ T5958] ? 0xffffffffa0004340 [ 44.943498][ T5958] ? 0xffffffffa0004340 [ 44.944622][ T5958] ? 0xffffffffa0004340 [ 44.945793][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 44.947528][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 44.949290][ T5958] ? lock_acquire+0x2f/0xb0 [ 44.950433][ T5958] ? __fget_files+0x40/0x3f0 [ 44.951776][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 44.953340][ T5958] ? fput+0x30/0x390 [ 44.954429][ T5958] ? __bpf_prog_get+0xa0/0x290 [ 44.955762][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 44.957673][ T5958] __sys_bpf+0xfc6/0x49a0 [ 44.959090][ T5958] ? find_held_lock+0x2d/0x110 [ 44.960686][ T5958] ? __pfx___sys_bpf+0x10/0x10 [ 44.962231][ T5958] ? __might_fault+0x13b/0x190 [ 44.963822][ T5958] ? __pfx_lock_release+0x10/0x10 [ 44.965206][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 44.966566][ T5958] ? lock_acquire+0x2f/0xb0 [ 44.967731][ T5958] ? __might_fault+0xe3/0x190 [ 44.969009][ T5958] ? xfd_validate_state+0x5d/0x180 [ 44.970366][ T5958] ? rcu_is_watching+0x12/0xc0 [ 44.971644][ T5958] __x64_sys_bpf+0x78/0xc0 [ 44.972857][ T5958] ? lockdep_hardirqs_on+0x7c/0x110 [ 44.974225][ T5958] do_syscall_64+0xcd/0x250 [ 44.975415][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.976978][ T5958] RIP: 0033:0x7f297e773e99 [ 44.978146][ T5958] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 44.983572][ T5958] RSP: 002b:00007f297e72e228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 44.985783][ T5958] RAX: ffffffffffffffda RBX: 00007f297e7fe328 RCX: 00007f297e773e99 [ 44.987773][ T5958] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 44.990035][ T5958] RBP: 00007f297e7fe320 R08: 00007f297e72e6c0 R09: 00007f297e72e6c0 [ 44.992202][ T5958] R10: 00007f297e72e6c0 R11: 0000000000000246 R12: 00007f297e7cb074 [ 44.994286][ T5958] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007fffd5e26f58 [ 44.996378][ T5958] [ 44.997307][ T5958] Disabling lock debugging due to kernel taint [ 44.998967][ T5958] BUG: Bad page state in process syz-executor194 pfn:20b15 [ 45.000939][ T5958] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2 pfn:0x20b15 [ 45.003368][ T5958] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 45.005692][ T5958] raw: 00fff00000000000 dead000000000040 ffff8880322fe000 0000000000000000 [ 45.007856][ T5958] raw: 0000000000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 45.010150][ T5958] page dumped because: page_pool leak [ 45.011612][ T5958] page_owner tracks the page as allocated [ 45.013090][ T5958] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5958, tgid 5957 (syz-executor194), ts 44777249069, free_ts 44755940318 [ 45.017705][ T5958] post_alloc_hook+0x2d1/0x350 [ 45.019007][ T5958] get_page_from_freelist+0x101e/0x3070 [ 45.020640][ T5958] __alloc_pages_noprof+0x223/0x25a0 [ 45.022419][ T5958] alloc_pages_bulk_noprof+0x77c/0x1110 [ 45.023916][ T5958] __page_pool_alloc_pages_slow+0x18f/0x770 [ 45.025505][ T5958] page_pool_alloc_netmem+0xc4/0x160 [ 45.026881][ T5958] page_pool_alloc_pages+0x1a/0x60 [ 45.028232][ T5958] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 45.029823][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 45.031217][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 45.032686][ T5958] __sys_bpf+0xfc6/0x49a0 [ 45.033818][ T5958] __x64_sys_bpf+0x78/0xc0 [ 45.035066][ T5958] do_syscall_64+0xcd/0x250 [ 45.036240][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.037763][ T5958] page last free pid 5943 tgid 5943 stack trace: [ 45.039422][ T5958] free_unref_page+0x5f4/0xdc0 [ 45.040756][ T5958] qlist_free_all+0x4e/0x120 [ 45.042002][ T5958] kasan_quarantine_reduce+0x192/0x1e0 [ 45.043443][ T5958] __kasan_slab_alloc+0x69/0x90 [ 45.044733][ T5958] kmem_cache_alloc_noprof+0x121/0x2f0 [ 45.046209][ T5958] anon_vma_fork+0x200/0x620 [ 45.047481][ T5958] copy_process+0x8946/0x8cb0 [ 45.048759][ T5958] kernel_clone+0xfd/0x960 [ 45.050066][ T5958] __do_sys_clone+0xba/0x100 [ 45.051406][ T5958] do_syscall_64+0xcd/0x250 [ 45.052752][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.054511][ T5958] Modules linked in: [ 45.055709][ T5958] CPU: 2 UID: 0 PID: 5958 Comm: syz-executor194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 45.059126][ T5958] Tainted: [B]=BAD_PAGE [ 45.060221][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 45.062980][ T5958] Call Trace: [ 45.063851][ T5958] [ 45.064638][ T5958] dump_stack_lvl+0x16c/0x1f0 [ 45.065901][ T5958] bad_page+0xb3/0x1f0 [ 45.066972][ T5958] ? __pfx_bad_page+0x10/0x10 [ 45.068217][ T5958] ? page_bad_reason+0x9d/0x1e0 [ 45.069490][ T5958] free_unref_page+0x657/0xdc0 [ 45.070758][ T5958] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 45.072348][ T5958] ? __phys_addr+0xc6/0x150 [ 45.073537][ T5958] skb_free_head+0xa0/0x1d0 [ 45.074908][ T5958] skb_release_data+0x560/0x730 [ 45.076305][ T5958] sk_skb_reason_drop+0x129/0x1a0 [ 45.077643][ T5958] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 45.079562][ T5958] ? kernel_text_address+0x8d/0x100 [ 45.081124][ T5958] ? hlock_class+0x4e/0x130 [ 45.082491][ T5958] ? __lock_acquire+0x163e/0x3ce0 [ 45.084151][ T5958] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 45.086158][ T5958] ? hlock_class+0x4e/0x130 [ 45.087462][ T5958] ? __lock_acquire+0xbdd/0x3ce0 [ 45.088868][ T5958] ? __pfx___lock_acquire+0x10/0x10 [ 45.090293][ T5958] __netif_receive_skb_list_core+0x357/0x950 [ 45.092042][ T5958] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 45.093951][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 45.095414][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 45.097096][ T5958] ? lock_acquire+0x2f/0xb0 [ 45.098290][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 45.099959][ T5958] netif_receive_skb_list_internal+0x753/0xdb0 [ 45.101879][ T5958] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 45.103566][ T5958] ? __pfx_eth_type_trans+0x10/0x10 [ 45.105441][ T5958] ? __build_skb_around+0x278/0x3b0 [ 45.106756][ T5958] netif_receive_skb_list+0x4f/0x4a0 [ 45.108476][ T5958] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 45.110573][ T5958] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 45.112319][ T5958] ? bpf_test_timer_continue+0x150/0x3d0 [ 45.113752][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 45.115164][ T5958] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 45.116763][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 45.118378][ T5958] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 45.120068][ T5958] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 45.121657][ T5958] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 45.123144][ T5958] ? 0xffffffffa0004340 [ 45.124619][ T5958] ? 0xffffffffa0004340 [ 45.126203][ T5958] ? 0xffffffffa0004340 [ 45.127639][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 45.129550][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 45.131076][ T5958] ? lock_acquire+0x2f/0xb0 [ 45.132466][ T5958] ? __fget_files+0x40/0x3f0 [ 45.133716][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 45.135236][ T5958] ? fput+0x30/0x390 [ 45.136283][ T5958] ? __bpf_prog_get+0xa0/0x290 [ 45.137542][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 45.139020][ T5958] __sys_bpf+0xfc6/0x49a0 [ 45.140282][ T5958] ? find_held_lock+0x2d/0x110 [ 45.141715][ T5958] ? __pfx___sys_bpf+0x10/0x10 [ 45.143152][ T5958] ? __might_fault+0x13b/0x190 [ 45.144644][ T5958] ? __pfx_lock_release+0x10/0x10 [ 45.146076][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 45.147454][ T5958] ? lock_acquire+0x2f/0xb0 [ 45.148665][ T5958] ? __might_fault+0xe3/0x190 [ 45.149890][ T5958] ? xfd_validate_state+0x5d/0x180 [ 45.151266][ T5958] ? rcu_is_watching+0x12/0xc0 [ 45.152591][ T5958] __x64_sys_bpf+0x78/0xc0 [ 45.153838][ T5958] ? lockdep_hardirqs_on+0x7c/0x110 [ 45.155252][ T5958] do_syscall_64+0xcd/0x250 [ 45.156483][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.158023][ T5958] RIP: 0033:0x7f297e773e99 [ 45.159374][ T5958] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 45.164968][ T5958] RSP: 002b:00007f297e72e228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 45.167156][ T5958] RAX: ffffffffffffffda RBX: 00007f297e7fe328 RCX: 00007f297e773e99 [ 45.169439][ T5958] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 45.171520][ T5958] RBP: 00007f297e7fe320 R08: 00007f297e72e6c0 R09: 00007f297e72e6c0 [ 45.173612][ T5958] R10: 00007f297e72e6c0 R11: 0000000000000246 R12: 00007f297e7cb074 [ 45.175669][ T5958] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007fffd5e26f58 [ 45.177739][ T5958] [ 45.178638][ T5958] BUG: Bad page state in process syz-executor194 pfn:20b14 [ 45.180555][ T5958] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888020b14000 pfn:0x20b14 [ 45.183153][ T5958] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 45.185051][ T5958] raw: 00fff00000000000 dead000000000040 ffff8880322fe000 0000000000000000 [ 45.187275][ T5958] raw: ffff888020b14000 0000000000000001 00000000ffffffff 0000000000000000 [ 45.189481][ T5958] page dumped because: page_pool leak [ 45.190939][ T5958] page_owner tracks the page as allocated [ 45.192512][ T5958] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5958, tgid 5957 (syz-executor194), ts 44777241498, free_ts 44755940318 [ 45.197004][ T5958] post_alloc_hook+0x2d1/0x350 [ 45.198256][ T5958] get_page_from_freelist+0x101e/0x3070 [ 45.199699][ T5958] __alloc_pages_noprof+0x223/0x25a0 [ 45.201093][ T5958] alloc_pages_bulk_noprof+0x77c/0x1110 [ 45.202536][ T5958] __page_pool_alloc_pages_slow+0x18f/0x770 [ 45.204074][ T5958] page_pool_alloc_netmem+0xc4/0x160 [ 45.205500][ T5958] page_pool_alloc_pages+0x1a/0x60 [ 45.206865][ T5958] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 45.208481][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 45.209859][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 45.211269][ T5958] __sys_bpf+0xfc6/0x49a0 [ 45.212427][ T5958] __x64_sys_bpf+0x78/0xc0 [ 45.213604][ T5958] do_syscall_64+0xcd/0x250 [ 45.214891][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.216492][ T5958] page last free pid 5943 tgid 5943 stack trace: [ 45.218190][ T5958] free_unref_page+0x5f4/0xdc0 [ 45.219492][ T5958] qlist_free_all+0x4e/0x120 [ 45.220721][ T5958] kasan_quarantine_reduce+0x192/0x1e0 [ 45.222146][ T5958] __kasan_slab_alloc+0x69/0x90 [ 45.223429][ T5958] kmem_cache_alloc_noprof+0x121/0x2f0 [ 45.224918][ T5958] anon_vma_fork+0x200/0x620 [ 45.226139][ T5958] copy_process+0x8946/0x8cb0 [ 45.227401][ T5958] kernel_clone+0xfd/0x960 [ 45.228612][ T5958] __do_sys_clone+0xba/0x100 [ 45.229816][ T5958] do_syscall_64+0xcd/0x250 [ 45.231016][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.232590][ T5958] Modules linked in: [ 45.233618][ T5958] CPU: 2 UID: 0 PID: 5958 Comm: syz-executor194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 45.236883][ T5958] Tainted: [B]=BAD_PAGE [ 45.237977][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 45.240771][ T5958] Call Trace: [ 45.241663][ T5958] [ 45.242441][ T5958] dump_stack_lvl+0x16c/0x1f0 [ 45.243675][ T5958] bad_page+0xb3/0x1f0 [ 45.244757][ T5958] ? __pfx_bad_page+0x10/0x10 [ 45.245994][ T5958] ? page_bad_reason+0x9d/0x1e0 [ 45.247257][ T5958] free_unref_page+0x657/0xdc0 [ 45.248506][ T5958] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 45.250171][ T5958] ? __phys_addr+0xc6/0x150 [ 45.251414][ T5958] skb_free_head+0xa0/0x1d0 [ 45.252721][ T5958] skb_release_data+0x560/0x730 [ 45.254083][ T5958] sk_skb_reason_drop+0x129/0x1a0 [ 45.255414][ T5958] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 45.257112][ T5958] ? kernel_text_address+0x8d/0x100 [ 45.258479][ T5958] ? hlock_class+0x4e/0x130 [ 45.259751][ T5958] ? __lock_acquire+0x163e/0x3ce0 [ 45.261556][ T5958] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 45.263993][ T5958] ? hlock_class+0x4e/0x130 [ 45.265498][ T5958] ? __lock_acquire+0xbdd/0x3ce0 [ 45.266761][ T5958] ? __pfx___lock_acquire+0x10/0x10 [ 45.268261][ T5958] __netif_receive_skb_list_core+0x357/0x950 [ 45.269762][ T5958] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 45.271363][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 45.272700][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 45.274283][ T5958] ? lock_acquire+0x2f/0xb0 [ 45.275418][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 45.277297][ T5958] netif_receive_skb_list_internal+0x753/0xdb0 [ 45.279164][ T5958] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 45.280874][ T5958] ? __pfx_eth_type_trans+0x10/0x10 [ 45.282400][ T5958] ? __build_skb_around+0x278/0x3b0 [ 45.284150][ T5958] netif_receive_skb_list+0x4f/0x4a0 [ 45.285864][ T5958] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 45.287923][ T5958] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 45.290050][ T5958] ? bpf_test_timer_continue+0x150/0x3d0 [ 45.291721][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 45.293203][ T5958] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 45.295036][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 45.296737][ T5958] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 45.298337][ T5958] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 45.300453][ T5958] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 45.302382][ T5958] ? 0xffffffffa0004340 [ 45.303768][ T5958] ? 0xffffffffa0004340 [ 45.305370][ T5958] ? 0xffffffffa0004340 [ 45.306788][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 45.308534][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 45.310146][ T5958] ? lock_acquire+0x2f/0xb0 [ 45.311470][ T5958] ? __fget_files+0x40/0x3f0 [ 45.313042][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 45.314764][ T5958] ? fput+0x30/0x390 [ 45.315888][ T5958] ? __bpf_prog_get+0xa0/0x290 [ 45.317172][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 45.318703][ T5958] __sys_bpf+0xfc6/0x49a0 [ 45.319962][ T5958] ? find_held_lock+0x2d/0x110 [ 45.321235][ T5958] ? __pfx___sys_bpf+0x10/0x10 [ 45.322462][ T5958] ? __might_fault+0x13b/0x190 [ 45.323687][ T5958] ? __pfx_lock_release+0x10/0x10 [ 45.324925][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 45.326216][ T5958] ? lock_acquire+0x2f/0xb0 [ 45.327509][ T5958] ? __might_fault+0xe3/0x190 [ 45.328994][ T5958] ? xfd_validate_state+0x5d/0x180 [ 45.330591][ T5958] ? rcu_is_watching+0x12/0xc0 [ 45.332331][ T5958] __x64_sys_bpf+0x78/0xc0 [ 45.333492][ T5958] ? lockdep_hardirqs_on+0x7c/0x110 [ 45.334891][ T5958] do_syscall_64+0xcd/0x250 [ 45.336053][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.337569][ T5958] RIP: 0033:0x7f297e773e99 [ 45.338678][ T5958] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 45.344472][ T5958] RSP: 002b:00007f297e72e228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 45.346770][ T5958] RAX: ffffffffffffffda RBX: 00007f297e7fe328 RCX: 00007f297e773e99 [ 45.348937][ T5958] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 45.351096][ T5958] RBP: 00007f297e7fe320 R08: 00007f297e72e6c0 R09: 00007f297e72e6c0 [ 45.353470][ T5958] R10: 00007f297e72e6c0 R11: 0000000000000246 R12: 00007f297e7cb074 [ 45.355575][ T5958] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007fffd5e26f58 [ 45.357538][ T5958] [ 45.358382][ T5958] BUG: Bad page state in process syz-executor194 pfn:25683 [ 45.360367][ T5958] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2 pfn:0x25683 [ 45.362623][ T5958] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 45.364739][ T5958] raw: 00fff00000000000 dead000000000040 ffff8880322fe000 0000000000000000 [ 45.367110][ T5958] raw: 0000000000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 45.369619][ T5958] page dumped because: page_pool leak [ 45.371134][ T5958] page_owner tracks the page as allocated [ 45.372725][ T5958] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5958, tgid 5957 (syz-executor194), ts 44777233732, free_ts 44755964872 [ 45.377694][ T5958] post_alloc_hook+0x2d1/0x350 [ 45.378928][ T5958] get_page_from_freelist+0x101e/0x3070 [ 45.380610][ T5958] __alloc_pages_noprof+0x223/0x25a0 [ 45.382243][ T5958] alloc_pages_bulk_noprof+0x77c/0x1110 [ 45.383782][ T5958] __page_pool_alloc_pages_slow+0x18f/0x770 [ 45.386274][ T5958] page_pool_alloc_netmem+0xc4/0x160 [ 45.388134][ T5958] page_pool_alloc_pages+0x1a/0x60 [ 45.389827][ T5958] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 45.391851][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 45.393510][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 45.394984][ T5958] __sys_bpf+0xfc6/0x49a0 [ 45.396117][ T5958] __x64_sys_bpf+0x78/0xc0 [ 45.397293][ T5958] do_syscall_64+0xcd/0x250 [ 45.398501][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.400040][ T5958] page last free pid 5943 tgid 5943 stack trace: [ 45.401675][ T5958] free_unref_page+0x5f4/0xdc0 [ 45.402931][ T5958] qlist_free_all+0x4e/0x120 [ 45.404352][ T5958] kasan_quarantine_reduce+0x192/0x1e0 [ 45.406088][ T5958] __kasan_slab_alloc+0x69/0x90 [ 45.407848][ T5958] kmem_cache_alloc_noprof+0x121/0x2f0 [ 45.409481][ T5958] anon_vma_fork+0x200/0x620 [ 45.410829][ T5958] copy_process+0x8946/0x8cb0 [ 45.412139][ T5958] kernel_clone+0xfd/0x960 [ 45.413327][ T5958] __do_sys_clone+0xba/0x100 [ 45.414544][ T5958] do_syscall_64+0xcd/0x250 [ 45.415830][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.417387][ T5958] Modules linked in: [ 45.418403][ T5958] CPU: 2 UID: 0 PID: 5958 Comm: syz-executor194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 45.421795][ T5958] Tainted: [B]=BAD_PAGE [ 45.422919][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 45.426038][ T5958] Call Trace: [ 45.427022][ T5958] [ 45.427877][ T5958] dump_stack_lvl+0x16c/0x1f0 [ 45.429649][ T5958] bad_page+0xb3/0x1f0 [ 45.431273][ T5958] ? __pfx_bad_page+0x10/0x10 [ 45.432928][ T5958] ? page_bad_reason+0x9d/0x1e0 [ 45.434228][ T5958] free_unref_page+0x657/0xdc0 [ 45.435485][ T5958] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 45.437069][ T5958] ? __phys_addr+0xc6/0x150 [ 45.438265][ T5958] skb_free_head+0xa0/0x1d0 [ 45.439479][ T5958] skb_release_data+0x560/0x730 [ 45.440924][ T5958] sk_skb_reason_drop+0x129/0x1a0 [ 45.442247][ T5958] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 45.444330][ T5958] ? kernel_text_address+0x8d/0x100 [ 45.446675][ T5958] ? hlock_class+0x4e/0x130 [ 45.448259][ T5958] ? __lock_acquire+0x163e/0x3ce0 [ 45.449627][ T5958] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 45.451797][ T5958] ? hlock_class+0x4e/0x130 [ 45.453299][ T5958] ? __lock_acquire+0xbdd/0x3ce0 [ 45.454689][ T5958] ? __pfx___lock_acquire+0x10/0x10 [ 45.456122][ T5958] __netif_receive_skb_list_core+0x357/0x950 [ 45.457728][ T5958] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 45.459544][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 45.460984][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 45.462711][ T5958] ? lock_acquire+0x2f/0xb0 [ 45.463933][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 45.465764][ T5958] netif_receive_skb_list_internal+0x753/0xdb0 [ 45.467573][ T5958] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 45.470129][ T5958] ? __pfx_eth_type_trans+0x10/0x10 [ 45.471761][ T5958] ? __build_skb_around+0x278/0x3b0 [ 45.473192][ T5958] netif_receive_skb_list+0x4f/0x4a0 [ 45.474629][ T5958] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 45.476329][ T5958] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 45.478135][ T5958] ? bpf_test_timer_continue+0x150/0x3d0 [ 45.479608][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 45.481089][ T5958] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 45.482615][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 45.484157][ T5958] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 45.485694][ T5958] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 45.487220][ T5958] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 45.488598][ T5958] ? 0xffffffffa0004340 [ 45.489683][ T5958] ? 0xffffffffa0004340 [ 45.490745][ T5958] ? 0xffffffffa0004340 [ 45.491800][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 45.493304][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 45.494593][ T5958] ? lock_acquire+0x2f/0xb0 [ 45.495722][ T5958] ? __fget_files+0x40/0x3f0 [ 45.496926][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 45.498404][ T5958] ? fput+0x30/0x390 [ 45.499428][ T5958] ? __bpf_prog_get+0xa0/0x290 [ 45.500946][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 45.502732][ T5958] __sys_bpf+0xfc6/0x49a0 [ 45.503976][ T5958] ? find_held_lock+0x2d/0x110 [ 45.505451][ T5958] ? __pfx___sys_bpf+0x10/0x10 [ 45.507363][ T5958] ? __might_fault+0x13b/0x190 [ 45.509074][ T5958] ? __pfx_lock_release+0x10/0x10 [ 45.510525][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 45.511979][ T5958] ? lock_acquire+0x2f/0xb0 [ 45.513285][ T5958] ? __might_fault+0xe3/0x190 [ 45.514580][ T5958] ? xfd_validate_state+0x5d/0x180 [ 45.515911][ T5958] ? rcu_is_watching+0x12/0xc0 [ 45.517177][ T5958] __x64_sys_bpf+0x78/0xc0 [ 45.518324][ T5958] ? lockdep_hardirqs_on+0x7c/0x110 [ 45.519760][ T5958] do_syscall_64+0xcd/0x250 [ 45.521030][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.522501][ T5958] RIP: 0033:0x7f297e773e99 [ 45.523674][ T5958] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 45.529474][ T5958] RSP: 002b:00007f297e72e228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 45.531809][ T5958] RAX: ffffffffffffffda RBX: 00007f297e7fe328 RCX: 00007f297e773e99 [ 45.533923][ T5958] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 45.535911][ T5958] RBP: 00007f297e7fe320 R08: 00007f297e72e6c0 R09: 00007f297e72e6c0 [ 45.537928][ T5958] R10: 00007f297e72e6c0 R11: 0000000000000246 R12: 00007f297e7cb074 [ 45.539908][ T5958] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007fffd5e26f58 [ 45.542445][ T5958] [ 45.543342][ T5958] BUG: Bad page state in process syz-executor194 pfn:25682 [ 45.545376][ T5958] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888025682000 pfn:0x25682 [ 45.548173][ T5958] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 45.550204][ T5958] raw: 00fff00000000000 dead000000000040 ffff8880322fe000 0000000000000000 [ 45.552815][ T5958] raw: ffff888025682000 0000000000000001 00000000ffffffff 0000000000000000 [ 45.555581][ T5958] page dumped because: page_pool leak [ 45.557152][ T5958] page_owner tracks the page as allocated [ 45.558568][ T5958] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5958, tgid 5957 (syz-executor194), ts 44777225695, free_ts 44755964872 [ 45.562967][ T5958] post_alloc_hook+0x2d1/0x350 [ 45.564240][ T5958] get_page_from_freelist+0x101e/0x3070 [ 45.565673][ T5958] __alloc_pages_noprof+0x223/0x25a0 [ 45.567338][ T5958] alloc_pages_bulk_noprof+0x77c/0x1110 [ 45.569004][ T5958] __page_pool_alloc_pages_slow+0x18f/0x770 [ 45.570640][ T5958] page_pool_alloc_netmem+0xc4/0x160 [ 45.572067][ T5958] page_pool_alloc_pages+0x1a/0x60 [ 45.573490][ T5958] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 45.575192][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 45.576594][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 45.578021][ T5958] __sys_bpf+0xfc6/0x49a0 [ 45.579240][ T5958] __x64_sys_bpf+0x78/0xc0 [ 45.580513][ T5958] do_syscall_64+0xcd/0x250 [ 45.581696][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.583276][ T5958] page last free pid 5943 tgid 5943 stack trace: [ 45.585030][ T5958] free_unref_page+0x5f4/0xdc0 [ 45.586329][ T5958] qlist_free_all+0x4e/0x120 [ 45.587719][ T5958] kasan_quarantine_reduce+0x192/0x1e0 [ 45.589452][ T5958] __kasan_slab_alloc+0x69/0x90 [ 45.590985][ T5958] kmem_cache_alloc_noprof+0x121/0x2f0 [ 45.593135][ T5958] anon_vma_fork+0x200/0x620 [ 45.594909][ T5958] copy_process+0x8946/0x8cb0 [ 45.596499][ T5958] kernel_clone+0xfd/0x960 [ 45.597636][ T5958] __do_sys_clone+0xba/0x100 [ 45.598846][ T5958] do_syscall_64+0xcd/0x250 [ 45.600155][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.601775][ T5958] Modules linked in: [ 45.602802][ T5958] CPU: 2 UID: 0 PID: 5958 Comm: syz-executor194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 45.606321][ T5958] Tainted: [B]=BAD_PAGE [ 45.607483][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 45.610332][ T5958] Call Trace: [ 45.611221][ T5958] [ 45.612028][ T5958] dump_stack_lvl+0x16c/0x1f0 [ 45.613292][ T5958] bad_page+0xb3/0x1f0 [ 45.614377][ T5958] ? __pfx_bad_page+0x10/0x10 [ 45.615646][ T5958] ? page_bad_reason+0x9d/0x1e0 [ 45.617182][ T5958] free_unref_page+0x657/0xdc0 [ 45.618448][ T5958] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 45.620036][ T5958] ? __phys_addr+0xc6/0x150 [ 45.621447][ T5958] skb_free_head+0xa0/0x1d0 [ 45.622636][ T5958] skb_release_data+0x560/0x730 [ 45.624595][ T5958] sk_skb_reason_drop+0x129/0x1a0 [ 45.626458][ T5958] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 45.628368][ T5958] ? kernel_text_address+0x8d/0x100 [ 45.629778][ T5958] ? hlock_class+0x4e/0x130 [ 45.630930][ T5958] ? __lock_acquire+0x163e/0x3ce0 [ 45.632278][ T5958] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 45.634244][ T5958] ? hlock_class+0x4e/0x130 [ 45.635534][ T5958] ? __lock_acquire+0xbdd/0x3ce0 [ 45.636837][ T5958] ? __pfx___lock_acquire+0x10/0x10 [ 45.638208][ T5958] __netif_receive_skb_list_core+0x357/0x950 [ 45.639784][ T5958] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 45.641505][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 45.642899][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 45.644837][ T5958] ? lock_acquire+0x2f/0xb0 [ 45.646150][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 45.647786][ T5958] netif_receive_skb_list_internal+0x753/0xdb0 [ 45.649404][ T5958] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 45.651185][ T5958] ? __pfx_eth_type_trans+0x10/0x10 [ 45.652764][ T5958] ? __build_skb_around+0x278/0x3b0 [ 45.654396][ T5958] netif_receive_skb_list+0x4f/0x4a0 [ 45.655751][ T5958] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 45.657395][ T5958] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 45.659094][ T5958] ? bpf_test_timer_continue+0x150/0x3d0 [ 45.660808][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 45.662170][ T5958] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 45.663975][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 45.666128][ T5958] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 45.668420][ T5958] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 45.670560][ T5958] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 45.671944][ T5958] ? 0xffffffffa0004340 [ 45.673073][ T5958] ? 0xffffffffa0004340 [ 45.674160][ T5958] ? 0xffffffffa0004340 [ 45.675341][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 45.676933][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 45.678349][ T5958] ? lock_acquire+0x2f/0xb0 [ 45.679550][ T5958] ? __fget_files+0x40/0x3f0 [ 45.681082][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 45.683052][ T5958] ? fput+0x30/0x390 [ 45.684217][ T5958] ? __bpf_prog_get+0xa0/0x290 [ 45.685530][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 45.687215][ T5958] __sys_bpf+0xfc6/0x49a0 [ 45.688572][ T5958] ? find_held_lock+0x2d/0x110 [ 45.690412][ T5958] ? __pfx___sys_bpf+0x10/0x10 [ 45.691759][ T5958] ? __might_fault+0x13b/0x190 [ 45.693352][ T5958] ? __pfx_lock_release+0x10/0x10 [ 45.695047][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 45.696784][ T5958] ? lock_acquire+0x2f/0xb0 [ 45.698368][ T5958] ? __might_fault+0xe3/0x190 [ 45.699839][ T5958] ? xfd_validate_state+0x5d/0x180 [ 45.701434][ T5958] ? rcu_is_watching+0x12/0xc0 [ 45.702648][ T5958] __x64_sys_bpf+0x78/0xc0 [ 45.703937][ T5958] ? lockdep_hardirqs_on+0x7c/0x110 [ 45.705336][ T5958] do_syscall_64+0xcd/0x250 [ 45.706538][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.708169][ T5958] RIP: 0033:0x7f297e773e99 [ 45.709829][ T5958] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 45.714891][ T5958] RSP: 002b:00007f297e72e228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 45.717207][ T5958] RAX: ffffffffffffffda RBX: 00007f297e7fe328 RCX: 00007f297e773e99 [ 45.719321][ T5958] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 45.721840][ T5958] RBP: 00007f297e7fe320 R08: 00007f297e72e6c0 R09: 00007f297e72e6c0 [ 45.724147][ T5958] R10: 00007f297e72e6c0 R11: 0000000000000246 R12: 00007f297e7cb074 [ 45.726469][ T5958] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007fffd5e26f58 [ 45.728767][ T5958] [ 45.729805][ T5958] BUG: Bad page state in process syz-executor194 pfn:30e59 [ 45.732070][ T5958] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000002 pfn:0x30e59 [ 45.734718][ T5958] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 45.736628][ T5958] raw: 00fff00000000000 dead000000000040 ffff8880322fe000 0000000000000000 [ 45.738872][ T5958] raw: ffff888000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 45.741649][ T5958] page dumped because: page_pool leak [ 45.743033][ T5958] page_owner tracks the page as allocated [ 45.744646][ T5958] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5958, tgid 5957 (syz-executor194), ts 44777217786, free_ts 44755982570 [ 45.749747][ T5958] post_alloc_hook+0x2d1/0x350 [ 45.751106][ T5958] get_page_from_freelist+0x101e/0x3070 [ 45.752770][ T5958] __alloc_pages_noprof+0x223/0x25a0 [ 45.754159][ T5958] alloc_pages_bulk_noprof+0x77c/0x1110 [ 45.755657][ T5958] __page_pool_alloc_pages_slow+0x18f/0x770 [ 45.757214][ T5958] page_pool_alloc_netmem+0xc4/0x160 [ 45.758577][ T5958] page_pool_alloc_pages+0x1a/0x60 [ 45.759870][ T5958] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 45.761491][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 45.763023][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 45.764587][ T5958] __sys_bpf+0xfc6/0x49a0 [ 45.766320][ T5958] __x64_sys_bpf+0x78/0xc0 [ 45.767484][ T5958] do_syscall_64+0xcd/0x250 [ 45.768658][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.770316][ T5958] page last free pid 5943 tgid 5943 stack trace: [ 45.771997][ T5958] free_unref_page+0x5f4/0xdc0 [ 45.773290][ T5958] qlist_free_all+0x4e/0x120 [ 45.774518][ T5958] kasan_quarantine_reduce+0x192/0x1e0 [ 45.775969][ T5958] __kasan_slab_alloc+0x69/0x90 [ 45.777301][ T5958] kmem_cache_alloc_noprof+0x121/0x2f0 [ 45.778846][ T5958] anon_vma_fork+0x200/0x620 [ 45.780180][ T5958] copy_process+0x8946/0x8cb0 [ 45.781531][ T5958] kernel_clone+0xfd/0x960 [ 45.782759][ T5958] __do_sys_clone+0xba/0x100 [ 45.783969][ T5958] do_syscall_64+0xcd/0x250 [ 45.785460][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.787087][ T5958] Modules linked in: [ 45.788286][ T5958] CPU: 2 UID: 0 PID: 5958 Comm: syz-executor194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 45.791765][ T5958] Tainted: [B]=BAD_PAGE [ 45.792968][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 45.795886][ T5958] Call Trace: [ 45.796819][ T5958] [ 45.797716][ T5958] dump_stack_lvl+0x16c/0x1f0 [ 45.799144][ T5958] bad_page+0xb3/0x1f0 [ 45.800545][ T5958] ? __pfx_bad_page+0x10/0x10 [ 45.802102][ T5958] ? page_bad_reason+0x9d/0x1e0 [ 45.803553][ T5958] free_unref_page+0x657/0xdc0 [ 45.804961][ T5958] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 45.806863][ T5958] ? __phys_addr+0xc6/0x150 [ 45.808341][ T5958] skb_free_head+0xa0/0x1d0 [ 45.809541][ T5958] skb_release_data+0x560/0x730 [ 45.810812][ T5958] sk_skb_reason_drop+0x129/0x1a0 [ 45.812152][ T5958] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 45.813902][ T5958] ? kernel_text_address+0x8d/0x100 [ 45.815257][ T5958] ? hlock_class+0x4e/0x130 [ 45.816428][ T5958] ? __lock_acquire+0x163e/0x3ce0 [ 45.817770][ T5958] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 45.819588][ T5958] ? hlock_class+0x4e/0x130 [ 45.820810][ T5958] ? __lock_acquire+0xbdd/0x3ce0 [ 45.822293][ T5958] ? __pfx___lock_acquire+0x10/0x10 [ 45.823700][ T5958] __netif_receive_skb_list_core+0x357/0x950 [ 45.825283][ T5958] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 45.827068][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 45.828622][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 45.830623][ T5958] ? lock_acquire+0x2f/0xb0 [ 45.831855][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 45.833546][ T5958] netif_receive_skb_list_internal+0x753/0xdb0 [ 45.835248][ T5958] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 45.837230][ T5958] ? __pfx_eth_type_trans+0x10/0x10 [ 45.838728][ T5958] ? __build_skb_around+0x278/0x3b0 [ 45.840260][ T5958] netif_receive_skb_list+0x4f/0x4a0 [ 45.841973][ T5958] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 45.843723][ T5958] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 45.845497][ T5958] ? bpf_test_timer_continue+0x150/0x3d0 [ 45.846986][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 45.848386][ T5958] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 45.850013][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 45.851932][ T5958] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 45.853598][ T5958] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 45.855210][ T5958] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 45.856662][ T5958] ? 0xffffffffa0004340 [ 45.857824][ T5958] ? 0xffffffffa0004340 [ 45.859136][ T5958] ? 0xffffffffa0004340 [ 45.860569][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 45.863129][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 45.864935][ T5958] ? lock_acquire+0x2f/0xb0 [ 45.866124][ T5958] ? __fget_files+0x40/0x3f0 [ 45.868486][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 45.870167][ T5958] ? fput+0x30/0x390 [ 45.871275][ T5958] ? __bpf_prog_get+0xa0/0x290 [ 45.872569][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 45.874118][ T5958] __sys_bpf+0xfc6/0x49a0 [ 45.875266][ T5958] ? find_held_lock+0x2d/0x110 [ 45.876531][ T5958] ? __pfx___sys_bpf+0x10/0x10 [ 45.877786][ T5958] ? __might_fault+0x13b/0x190 [ 45.879130][ T5958] ? __pfx_lock_release+0x10/0x10 [ 45.880642][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 45.882139][ T5958] ? lock_acquire+0x2f/0xb0 [ 45.883415][ T5958] ? __might_fault+0xe3/0x190 [ 45.884743][ T5958] ? xfd_validate_state+0x5d/0x180 [ 45.886161][ T5958] ? rcu_is_watching+0x12/0xc0 [ 45.887494][ T5958] __x64_sys_bpf+0x78/0xc0 [ 45.889004][ T5958] ? lockdep_hardirqs_on+0x7c/0x110 [ 45.890466][ T5958] do_syscall_64+0xcd/0x250 [ 45.891718][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.893805][ T5958] RIP: 0033:0x7f297e773e99 [ 45.895348][ T5958] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 45.902107][ T5958] RSP: 002b:00007f297e72e228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 45.905744][ T5958] RAX: ffffffffffffffda RBX: 00007f297e7fe328 RCX: 00007f297e773e99 [ 45.908122][ T5958] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 45.910760][ T5958] RBP: 00007f297e7fe320 R08: 00007f297e72e6c0 R09: 00007f297e72e6c0 [ 45.913837][ T5958] R10: 00007f297e72e6c0 R11: 0000000000000246 R12: 00007f297e7cb074 [ 45.916566][ T5958] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007fffd5e26f58 [ 45.919012][ T5958] [ 45.920045][ T5958] BUG: Bad page state in process syz-executor194 pfn:30e58 [ 45.921978][ T5958] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888030e58c00 pfn:0x30e58 [ 45.924874][ T5958] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 45.926895][ T5958] raw: 00fff00000000000 dead000000000040 ffff8880322fe000 0000000000000000 [ 45.929491][ T5958] raw: ffff888030e58c00 0000000000000001 00000000ffffffff 0000000000000000 [ 45.931842][ T5958] page dumped because: page_pool leak [ 45.933491][ T5958] page_owner tracks the page as allocated [ 45.935090][ T5958] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5958, tgid 5957 (syz-executor194), ts 44777210043, free_ts 44755982570 [ 45.940029][ T5958] post_alloc_hook+0x2d1/0x350 [ 45.941276][ T5958] get_page_from_freelist+0x101e/0x3070 [ 45.942722][ T5958] __alloc_pages_noprof+0x223/0x25a0 [ 45.944184][ T5958] alloc_pages_bulk_noprof+0x77c/0x1110 [ 45.945823][ T5958] __page_pool_alloc_pages_slow+0x18f/0x770 [ 45.947738][ T5958] page_pool_alloc_netmem+0xc4/0x160 [ 45.949218][ T5958] page_pool_alloc_pages+0x1a/0x60 [ 45.950557][ T5958] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 45.952197][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 45.953574][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 45.955070][ T5958] __sys_bpf+0xfc6/0x49a0 [ 45.956310][ T5958] __x64_sys_bpf+0x78/0xc0 [ 45.957513][ T5958] do_syscall_64+0xcd/0x250 [ 45.958727][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.960400][ T5958] page last free pid 5943 tgid 5943 stack trace: [ 45.962302][ T5958] free_unref_page+0x5f4/0xdc0 [ 45.963790][ T5958] qlist_free_all+0x4e/0x120 [ 45.965090][ T5958] kasan_quarantine_reduce+0x192/0x1e0 [ 45.966752][ T5958] __kasan_slab_alloc+0x69/0x90 [ 45.968134][ T5958] kmem_cache_alloc_noprof+0x121/0x2f0 [ 45.969663][ T5958] anon_vma_fork+0x200/0x620 [ 45.970962][ T5958] copy_process+0x8946/0x8cb0 [ 45.972247][ T5958] kernel_clone+0xfd/0x960 [ 45.973407][ T5958] __do_sys_clone+0xba/0x100 [ 45.974719][ T5958] do_syscall_64+0xcd/0x250 [ 45.976056][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.977615][ T5958] Modules linked in: [ 45.978651][ T5958] CPU: 2 UID: 0 PID: 5958 Comm: syz-executor194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 45.982296][ T5958] Tainted: [B]=BAD_PAGE [ 45.983359][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 45.986740][ T5958] Call Trace: [ 45.987699][ T5958] [ 45.988565][ T5958] dump_stack_lvl+0x16c/0x1f0 [ 45.990070][ T5958] bad_page+0xb3/0x1f0 [ 45.991217][ T5958] ? __pfx_bad_page+0x10/0x10 [ 45.992579][ T5958] ? page_bad_reason+0x9d/0x1e0 [ 45.993847][ T5958] free_unref_page+0x657/0xdc0 [ 45.995045][ T5958] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 45.996552][ T5958] ? __phys_addr+0xc6/0x150 [ 45.997699][ T5958] skb_free_head+0xa0/0x1d0 [ 45.998845][ T5958] skb_release_data+0x560/0x730 [ 46.000082][ T5958] sk_skb_reason_drop+0x129/0x1a0 [ 46.001346][ T5958] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 46.003098][ T5958] ? kernel_text_address+0x8d/0x100 [ 46.004612][ T5958] ? hlock_class+0x4e/0x130 [ 46.006108][ T5958] ? __lock_acquire+0x163e/0x3ce0 [ 46.007385][ T5958] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 46.009147][ T5958] ? hlock_class+0x4e/0x130 [ 46.010310][ T5958] ? __lock_acquire+0xbdd/0x3ce0 [ 46.011756][ T5958] ? __pfx___lock_acquire+0x10/0x10 [ 46.013324][ T5958] __netif_receive_skb_list_core+0x357/0x950 [ 46.014915][ T5958] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 46.016766][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 46.018157][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 46.020207][ T5958] ? lock_acquire+0x2f/0xb0 [ 46.021526][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 46.023659][ T5958] netif_receive_skb_list_internal+0x753/0xdb0 [ 46.025576][ T5958] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 46.027603][ T5958] ? __pfx_eth_type_trans+0x10/0x10 [ 46.029183][ T5958] ? __build_skb_around+0x278/0x3b0 [ 46.030680][ T5958] netif_receive_skb_list+0x4f/0x4a0 [ 46.032136][ T5958] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 46.033776][ T5958] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 46.035505][ T5958] ? bpf_test_timer_continue+0x150/0x3d0 [ 46.036981][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 46.038368][ T5958] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 46.039908][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 46.041475][ T5958] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 46.043201][ T5958] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 46.045080][ T5958] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 46.046826][ T5958] ? 0xffffffffa0004340 [ 46.047955][ T5958] ? 0xffffffffa0004340 [ 46.049058][ T5958] ? 0xffffffffa0004340 [ 46.050149][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 46.051727][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 46.053247][ T5958] ? lock_acquire+0x2f/0xb0 [ 46.054484][ T5958] ? __fget_files+0x40/0x3f0 [ 46.055692][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 46.057208][ T5958] ? fput+0x30/0x390 [ 46.058241][ T5958] ? __bpf_prog_get+0xa0/0x290 [ 46.059505][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 46.061365][ T5958] __sys_bpf+0xfc6/0x49a0 [ 46.062698][ T5958] ? find_held_lock+0x2d/0x110 [ 46.064346][ T5958] ? __pfx___sys_bpf+0x10/0x10 [ 46.065767][ T5958] ? __might_fault+0x13b/0x190 [ 46.067250][ T5958] ? __pfx_lock_release+0x10/0x10 [ 46.069011][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 46.070569][ T5958] ? lock_acquire+0x2f/0xb0 [ 46.071831][ T5958] ? __might_fault+0xe3/0x190 [ 46.073482][ T5958] ? xfd_validate_state+0x5d/0x180 [ 46.074993][ T5958] ? rcu_is_watching+0x12/0xc0 [ 46.076412][ T5958] __x64_sys_bpf+0x78/0xc0 [ 46.077681][ T5958] ? lockdep_hardirqs_on+0x7c/0x110 [ 46.079138][ T5958] do_syscall_64+0xcd/0x250 [ 46.080324][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.082396][ T5958] RIP: 0033:0x7f297e773e99 [ 46.083787][ T5958] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 46.088637][ T5958] RSP: 002b:00007f297e72e228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 46.090805][ T5958] RAX: ffffffffffffffda RBX: 00007f297e7fe328 RCX: 00007f297e773e99 [ 46.092918][ T5958] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 46.094821][ T5958] RBP: 00007f297e7fe320 R08: 00007f297e72e6c0 R09: 00007f297e72e6c0 [ 46.096904][ T5958] R10: 00007f297e72e6c0 R11: 0000000000000246 R12: 00007f297e7cb074 [ 46.098888][ T5958] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007fffd5e26f58 [ 46.100880][ T5958] [ 46.101743][ T5958] BUG: Bad page state in process syz-executor194 pfn:24841 [ 46.103825][ T5958] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000002 pfn:0x24841 [ 46.106483][ T5958] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 46.108766][ T5958] raw: 00fff00000000000 dead000000000040 ffff8880322fe000 0000000000000000 [ 46.110979][ T5958] raw: ffff888000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 46.113426][ T5958] page dumped because: page_pool leak [ 46.114915][ T5958] page_owner tracks the page as allocated [ 46.116571][ T5958] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5958, tgid 5957 (syz-executor194), ts 44777202583, free_ts 44755987842 [ 46.121741][ T5958] post_alloc_hook+0x2d1/0x350 [ 46.123226][ T5958] get_page_from_freelist+0x101e/0x3070 [ 46.125141][ T5958] __alloc_pages_noprof+0x223/0x25a0 [ 46.126699][ T5958] alloc_pages_bulk_noprof+0x77c/0x1110 [ 46.128321][ T5958] __page_pool_alloc_pages_slow+0x18f/0x770 [ 46.129917][ T5958] page_pool_alloc_netmem+0xc4/0x160 [ 46.131305][ T5958] page_pool_alloc_pages+0x1a/0x60 [ 46.132773][ T5958] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 46.134525][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 46.135979][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 46.137468][ T5958] __sys_bpf+0xfc6/0x49a0 [ 46.138645][ T5958] __x64_sys_bpf+0x78/0xc0 [ 46.139940][ T5958] do_syscall_64+0xcd/0x250 [ 46.141129][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.142623][ T5958] page last free pid 5943 tgid 5943 stack trace: [ 46.144350][ T5958] free_unref_page+0x5f4/0xdc0 [ 46.145628][ T5958] qlist_free_all+0x4e/0x120 [ 46.146841][ T5958] kasan_quarantine_reduce+0x192/0x1e0 [ 46.148269][ T5958] __kasan_slab_alloc+0x69/0x90 [ 46.149814][ T5958] kmem_cache_alloc_noprof+0x121/0x2f0 [ 46.151335][ T5958] anon_vma_fork+0x200/0x620 [ 46.152573][ T5958] copy_process+0x8946/0x8cb0 [ 46.153834][ T5958] kernel_clone+0xfd/0x960 [ 46.155081][ T5958] __do_sys_clone+0xba/0x100 [ 46.156313][ T5958] do_syscall_64+0xcd/0x250 [ 46.157675][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.159421][ T5958] Modules linked in: [ 46.161145][ T5958] CPU: 2 UID: 0 PID: 5958 Comm: syz-executor194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 46.165418][ T5958] Tainted: [B]=BAD_PAGE [ 46.166574][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 46.169833][ T5958] Call Trace: [ 46.170728][ T5958] [ 46.171510][ T5958] dump_stack_lvl+0x16c/0x1f0 [ 46.172748][ T5958] bad_page+0xb3/0x1f0 [ 46.173967][ T5958] ? __pfx_bad_page+0x10/0x10 [ 46.175601][ T5958] ? page_bad_reason+0x9d/0x1e0 [ 46.177765][ T5958] free_unref_page+0x657/0xdc0 [ 46.179503][ T5958] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 46.181534][ T5958] ? __phys_addr+0xc6/0x150 [ 46.182741][ T5958] skb_free_head+0xa0/0x1d0 [ 46.183950][ T5958] skb_release_data+0x560/0x730 [ 46.185261][ T5958] sk_skb_reason_drop+0x129/0x1a0 [ 46.186578][ T5958] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 46.188969][ T5958] ? kernel_text_address+0x8d/0x100 [ 46.190464][ T5958] ? hlock_class+0x4e/0x130 [ 46.191737][ T5958] ? __lock_acquire+0x163e/0x3ce0 [ 46.193477][ T5958] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 46.195791][ T5958] ? hlock_class+0x4e/0x130 [ 46.197088][ T5958] ? __lock_acquire+0xbdd/0x3ce0 [ 46.198404][ T5958] ? __pfx___lock_acquire+0x10/0x10 [ 46.199821][ T5958] __netif_receive_skb_list_core+0x357/0x950 [ 46.201416][ T5958] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 46.203391][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 46.204809][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 46.206485][ T5958] ? lock_acquire+0x2f/0xb0 [ 46.207696][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 46.209373][ T5958] netif_receive_skb_list_internal+0x753/0xdb0 [ 46.211017][ T5958] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 46.212780][ T5958] ? __pfx_eth_type_trans+0x10/0x10 [ 46.214235][ T5958] ? __build_skb_around+0x278/0x3b0 [ 46.215608][ T5958] netif_receive_skb_list+0x4f/0x4a0 [ 46.217030][ T5958] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 46.218660][ T5958] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 46.220389][ T5958] ? bpf_test_timer_continue+0x150/0x3d0 [ 46.221889][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 46.223283][ T5958] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 46.224849][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 46.226407][ T5958] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 46.228191][ T5958] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 46.229780][ T5958] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 46.231222][ T5958] ? 0xffffffffa0004340 [ 46.232376][ T5958] ? 0xffffffffa0004340 [ 46.233462][ T5958] ? 0xffffffffa0004340 [ 46.234526][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 46.236033][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 46.237445][ T5958] ? lock_acquire+0x2f/0xb0 [ 46.238616][ T5958] ? __fget_files+0x40/0x3f0 [ 46.239797][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 46.241274][ T5958] ? fput+0x30/0x390 [ 46.242264][ T5958] ? __bpf_prog_get+0xa0/0x290 [ 46.243487][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 46.245121][ T5958] __sys_bpf+0xfc6/0x49a0 [ 46.246551][ T5958] ? find_held_lock+0x2d/0x110 [ 46.247784][ T5958] ? __pfx___sys_bpf+0x10/0x10 [ 46.249199][ T5958] ? __might_fault+0x13b/0x190 [ 46.250517][ T5958] ? __pfx_lock_release+0x10/0x10 [ 46.251834][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 46.253235][ T5958] ? lock_acquire+0x2f/0xb0 [ 46.254425][ T5958] ? __might_fault+0xe3/0x190 [ 46.255716][ T5958] ? xfd_validate_state+0x5d/0x180 [ 46.257016][ T5958] ? rcu_is_watching+0x12/0xc0 [ 46.258223][ T5958] __x64_sys_bpf+0x78/0xc0 [ 46.259395][ T5958] ? lockdep_hardirqs_on+0x7c/0x110 [ 46.261020][ T5958] do_syscall_64+0xcd/0x250 [ 46.262233][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.263705][ T5958] RIP: 0033:0x7f297e773e99 [ 46.265151][ T5958] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 46.271100][ T5958] RSP: 002b:00007f297e72e228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 46.273437][ T5958] RAX: ffffffffffffffda RBX: 00007f297e7fe328 RCX: 00007f297e773e99 [ 46.275604][ T5958] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 46.277634][ T5958] RBP: 00007f297e7fe320 R08: 00007f297e72e6c0 R09: 00007f297e72e6c0 [ 46.279651][ T5958] R10: 00007f297e72e6c0 R11: 0000000000000246 R12: 00007f297e7cb074 [ 46.281732][ T5958] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007fffd5e26f58 [ 46.283914][ T5958] [ 46.284839][ T5958] BUG: Bad page state in process syz-executor194 pfn:24840 [ 46.286730][ T5958] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888024840a00 pfn:0x24840 [ 46.289330][ T5958] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 46.291120][ T5958] raw: 00fff00000000000 dead000000000040 ffff8880322fe000 0000000000000000 [ 46.293311][ T5958] raw: ffff888024840a00 0000000000000001 00000000ffffffff 0000000000000000 [ 46.295688][ T5958] page dumped because: page_pool leak [ 46.297099][ T5958] page_owner tracks the page as allocated [ 46.298563][ T5958] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5958, tgid 5957 (syz-executor194), ts 44777194726, free_ts 44755987842 [ 46.303198][ T5958] post_alloc_hook+0x2d1/0x350 [ 46.304703][ T5958] get_page_from_freelist+0x101e/0x3070 [ 46.306473][ T5958] __alloc_pages_noprof+0x223/0x25a0 [ 46.307854][ T5958] alloc_pages_bulk_noprof+0x77c/0x1110 [ 46.309446][ T5958] __page_pool_alloc_pages_slow+0x18f/0x770 [ 46.311027][ T5958] page_pool_alloc_netmem+0xc4/0x160 [ 46.312476][ T5958] page_pool_alloc_pages+0x1a/0x60 [ 46.313896][ T5958] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 46.315596][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 46.317010][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 46.318501][ T5958] __sys_bpf+0xfc6/0x49a0 [ 46.319707][ T5958] __x64_sys_bpf+0x78/0xc0 [ 46.321136][ T5958] do_syscall_64+0xcd/0x250 [ 46.322421][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.324142][ T5958] page last free pid 5943 tgid 5943 stack trace: [ 46.325861][ T5958] free_unref_page+0x5f4/0xdc0 [ 46.327132][ T5958] qlist_free_all+0x4e/0x120 [ 46.328347][ T5958] kasan_quarantine_reduce+0x192/0x1e0 [ 46.329803][ T5958] __kasan_slab_alloc+0x69/0x90 [ 46.331165][ T5958] kmem_cache_alloc_noprof+0x121/0x2f0 [ 46.332637][ T5958] anon_vma_fork+0x200/0x620 [ 46.333859][ T5958] copy_process+0x8946/0x8cb0 [ 46.335191][ T5958] kernel_clone+0xfd/0x960 [ 46.336400][ T5958] __do_sys_clone+0xba/0x100 [ 46.337777][ T5958] do_syscall_64+0xcd/0x250 [ 46.339048][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.340680][ T5958] Modules linked in: [ 46.341971][ T5958] CPU: 2 UID: 0 PID: 5958 Comm: syz-executor194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 46.346303][ T5958] Tainted: [B]=BAD_PAGE [ 46.347372][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 46.350551][ T5958] Call Trace: [ 46.351504][ T5958] [ 46.352367][ T5958] dump_stack_lvl+0x16c/0x1f0 [ 46.353776][ T5958] bad_page+0xb3/0x1f0 [ 46.354858][ T5958] ? __pfx_bad_page+0x10/0x10 [ 46.356121][ T5958] ? page_bad_reason+0x9d/0x1e0 [ 46.357434][ T5958] free_unref_page+0x657/0xdc0 [ 46.358831][ T5958] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 46.360448][ T5958] ? __phys_addr+0xc6/0x150 [ 46.361846][ T5958] skb_free_head+0xa0/0x1d0 [ 46.363456][ T5958] skb_release_data+0x560/0x730 [ 46.364903][ T5958] sk_skb_reason_drop+0x129/0x1a0 [ 46.366211][ T5958] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 46.367968][ T5958] ? kernel_text_address+0x8d/0x100 [ 46.369333][ T5958] ? hlock_class+0x4e/0x130 [ 46.370574][ T5958] ? __lock_acquire+0x163e/0x3ce0 [ 46.371970][ T5958] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 46.373894][ T5958] ? hlock_class+0x4e/0x130 [ 46.375101][ T5958] ? __lock_acquire+0xbdd/0x3ce0 [ 46.376414][ T5958] ? __pfx___lock_acquire+0x10/0x10 [ 46.377746][ T5958] __netif_receive_skb_list_core+0x357/0x950 [ 46.379275][ T5958] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 46.381288][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 46.382794][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 46.384943][ T5958] ? lock_acquire+0x2f/0xb0 [ 46.386384][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 46.388325][ T5958] netif_receive_skb_list_internal+0x753/0xdb0 [ 46.390052][ T5958] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 46.391956][ T5958] ? __pfx_eth_type_trans+0x10/0x10 [ 46.393434][ T5958] ? __build_skb_around+0x278/0x3b0 [ 46.395080][ T5958] netif_receive_skb_list+0x4f/0x4a0 [ 46.396669][ T5958] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 46.398507][ T5958] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 46.400260][ T5958] ? bpf_test_timer_continue+0x150/0x3d0 [ 46.401723][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 46.403083][ T5958] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 46.404629][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 46.406388][ T5958] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 46.408104][ T5958] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 46.410025][ T5958] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 46.411575][ T5958] ? 0xffffffffa0004340 [ 46.412826][ T5958] ? 0xffffffffa0004340 [ 46.413918][ T5958] ? 0xffffffffa0004340 [ 46.415009][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 46.416567][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 46.418091][ T5958] ? lock_acquire+0x2f/0xb0 [ 46.419427][ T5958] ? __fget_files+0x40/0x3f0 [ 46.420998][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 46.422884][ T5958] ? fput+0x30/0x390 [ 46.424177][ T5958] ? __bpf_prog_get+0xa0/0x290 [ 46.425677][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 46.427584][ T5958] __sys_bpf+0xfc6/0x49a0 [ 46.429011][ T5958] ? find_held_lock+0x2d/0x110 [ 46.430547][ T5958] ? __pfx___sys_bpf+0x10/0x10 [ 46.431848][ T5958] ? __might_fault+0x13b/0x190 [ 46.433107][ T5958] ? __pfx_lock_release+0x10/0x10 [ 46.434385][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 46.435745][ T5958] ? lock_acquire+0x2f/0xb0 [ 46.436977][ T5958] ? __might_fault+0xe3/0x190 [ 46.438229][ T5958] ? xfd_validate_state+0x5d/0x180 [ 46.439670][ T5958] ? rcu_is_watching+0x12/0xc0 [ 46.441419][ T5958] __x64_sys_bpf+0x78/0xc0 [ 46.442692][ T5958] ? lockdep_hardirqs_on+0x7c/0x110 [ 46.444493][ T5958] do_syscall_64+0xcd/0x250 [ 46.445741][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.447450][ T5958] RIP: 0033:0x7f297e773e99 [ 46.449025][ T5958] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 46.454226][ T5958] RSP: 002b:00007f297e72e228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 46.456424][ T5958] RAX: ffffffffffffffda RBX: 00007f297e7fe328 RCX: 00007f297e773e99 [ 46.458495][ T5958] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 46.460791][ T5958] RBP: 00007f297e7fe320 R08: 00007f297e72e6c0 R09: 00007f297e72e6c0 [ 46.463094][ T5958] R10: 00007f297e72e6c0 R11: 0000000000000246 R12: 00007f297e7cb074 [ 46.465408][ T5958] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007fffd5e26f58 [ 46.467634][ T5958] [ 46.468805][ T5958] BUG: Bad page state in process syz-executor194 pfn:275ed [ 46.470831][ T5958] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2 pfn:0x275ed [ 46.473158][ T5958] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 46.475128][ T5958] raw: 00fff00000000000 dead000000000040 ffff8880322fe000 0000000000000000 [ 46.477383][ T5958] raw: 0000000000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 46.479496][ T5958] page dumped because: page_pool leak [ 46.480856][ T5958] page_owner tracks the page as allocated [ 46.482271][ T5958] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5958, tgid 5957 (syz-executor194), ts 44777186720, free_ts 44756023960 [ 46.486683][ T5958] post_alloc_hook+0x2d1/0x350 [ 46.488059][ T5958] get_page_from_freelist+0x101e/0x3070 [ 46.489533][ T5958] __alloc_pages_noprof+0x223/0x25a0 [ 46.490889][ T5958] alloc_pages_bulk_noprof+0x77c/0x1110 [ 46.492320][ T5958] __page_pool_alloc_pages_slow+0x18f/0x770 [ 46.493875][ T5958] page_pool_alloc_netmem+0xc4/0x160 [ 46.495385][ T5958] page_pool_alloc_pages+0x1a/0x60 [ 46.496681][ T5958] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 46.498263][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 46.499608][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 46.501603][ T5958] __sys_bpf+0xfc6/0x49a0 [ 46.502884][ T5958] __x64_sys_bpf+0x78/0xc0 [ 46.504116][ T5958] do_syscall_64+0xcd/0x250 [ 46.505359][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.506899][ T5958] page last free pid 5943 tgid 5943 stack trace: [ 46.508555][ T5958] free_unref_page+0x5f4/0xdc0 [ 46.509820][ T5958] qlist_free_all+0x4e/0x120 [ 46.511092][ T5958] kasan_quarantine_reduce+0x192/0x1e0 [ 46.512802][ T5958] __kasan_slab_alloc+0x69/0x90 [ 46.514269][ T5958] kmem_cache_alloc_noprof+0x121/0x2f0 [ 46.515916][ T5958] anon_vma_fork+0x200/0x620 [ 46.517287][ T5958] copy_process+0x8946/0x8cb0 [ 46.518644][ T5958] kernel_clone+0xfd/0x960 [ 46.519898][ T5958] __do_sys_clone+0xba/0x100 [ 46.521203][ T5958] do_syscall_64+0xcd/0x250 [ 46.522645][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.524404][ T5958] Modules linked in: [ 46.525506][ T5958] CPU: 2 UID: 0 PID: 5958 Comm: syz-executor194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 46.529158][ T5958] Tainted: [B]=BAD_PAGE [ 46.530252][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 46.533141][ T5958] Call Trace: [ 46.534058][ T5958] [ 46.534883][ T5958] dump_stack_lvl+0x16c/0x1f0 [ 46.536192][ T5958] bad_page+0xb3/0x1f0 [ 46.537312][ T5958] ? __pfx_bad_page+0x10/0x10 [ 46.538603][ T5958] ? page_bad_reason+0x9d/0x1e0 [ 46.539945][ T5958] free_unref_page+0x657/0xdc0 [ 46.541241][ T5958] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 46.542856][ T5958] ? __phys_addr+0xc6/0x150 [ 46.544075][ T5958] skb_free_head+0xa0/0x1d0 [ 46.545273][ T5958] skb_release_data+0x560/0x730 [ 46.546652][ T5958] sk_skb_reason_drop+0x129/0x1a0 [ 46.547975][ T5958] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 46.549718][ T5958] ? kernel_text_address+0x8d/0x100 [ 46.551085][ T5958] ? hlock_class+0x4e/0x130 [ 46.552306][ T5958] ? __lock_acquire+0x163e/0x3ce0 [ 46.553642][ T5958] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 46.555800][ T5958] ? hlock_class+0x4e/0x130 [ 46.557134][ T5958] ? __lock_acquire+0xbdd/0x3ce0 [ 46.558415][ T5958] ? __pfx___lock_acquire+0x10/0x10 [ 46.559774][ T5958] __netif_receive_skb_list_core+0x357/0x950 [ 46.561376][ T5958] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 46.563105][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 46.564593][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 46.566709][ T5958] ? lock_acquire+0x2f/0xb0 [ 46.568171][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 46.570344][ T5958] netif_receive_skb_list_internal+0x753/0xdb0 [ 46.572278][ T5958] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 46.574116][ T5958] ? __pfx_eth_type_trans+0x10/0x10 [ 46.575437][ T5958] ? __build_skb_around+0x278/0x3b0 [ 46.576810][ T5958] netif_receive_skb_list+0x4f/0x4a0 [ 46.578192][ T5958] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 46.579818][ T5958] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 46.581740][ T5958] ? bpf_test_timer_continue+0x150/0x3d0 [ 46.583196][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 46.584608][ T5958] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 46.586365][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 46.587921][ T5958] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 46.589791][ T5958] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 46.591342][ T5958] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 46.592772][ T5958] ? 0xffffffffa0004340 [ 46.593864][ T5958] ? 0xffffffffa0004340 [ 46.594957][ T5958] ? 0xffffffffa0004340 [ 46.596054][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 46.597640][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 46.599062][ T5958] ? lock_acquire+0x2f/0xb0 [ 46.600270][ T5958] ? __fget_files+0x40/0x3f0 [ 46.601711][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 46.603326][ T5958] ? fput+0x30/0x390 [ 46.604550][ T5958] ? __bpf_prog_get+0xa0/0x290 [ 46.605835][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 46.607350][ T5958] __sys_bpf+0xfc6/0x49a0 [ 46.608472][ T5958] ? find_held_lock+0x2d/0x110 [ 46.609725][ T5958] ? __pfx___sys_bpf+0x10/0x10 [ 46.610983][ T5958] ? __might_fault+0x13b/0x190 [ 46.612213][ T5958] ? __pfx_lock_release+0x10/0x10 [ 46.613499][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 46.614852][ T5958] ? lock_acquire+0x2f/0xb0 [ 46.616034][ T5958] ? __might_fault+0xe3/0x190 [ 46.617236][ T5958] ? xfd_validate_state+0x5d/0x180 [ 46.618568][ T5958] ? rcu_is_watching+0x12/0xc0 [ 46.619865][ T5958] __x64_sys_bpf+0x78/0xc0 [ 46.621122][ T5958] ? lockdep_hardirqs_on+0x7c/0x110 [ 46.622479][ T5958] do_syscall_64+0xcd/0x250 [ 46.623669][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.625221][ T5958] RIP: 0033:0x7f297e773e99 [ 46.626382][ T5958] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 46.631226][ T5958] RSP: 002b:00007f297e72e228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 46.633312][ T5958] RAX: ffffffffffffffda RBX: 00007f297e7fe328 RCX: 00007f297e773e99 [ 46.635376][ T5958] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 46.637398][ T5958] RBP: 00007f297e7fe320 R08: 00007f297e72e6c0 R09: 00007f297e72e6c0 [ 46.639366][ T5958] R10: 00007f297e72e6c0 R11: 0000000000000246 R12: 00007f297e7cb074 [ 46.641609][ T5958] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007fffd5e26f58 [ 46.643608][ T5958] [ 46.644685][ T5958] BUG: Bad page state in process syz-executor194 pfn:275ec [ 46.646791][ T5958] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880275edc00 pfn:0x275ec [ 46.649841][ T5958] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 46.651881][ T5958] raw: 00fff00000000000 dead000000000040 ffff8880322fe000 0000000000000000 [ 46.654770][ T5958] raw: ffff8880275edc00 0000000000000001 00000000ffffffff 0000000000000000 [ 46.657425][ T5958] page dumped because: page_pool leak [ 46.658862][ T5958] page_owner tracks the page as allocated [ 46.660509][ T5958] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5958, tgid 5957 (syz-executor194), ts 44777178713, free_ts 44756023960 [ 46.665187][ T5958] post_alloc_hook+0x2d1/0x350 [ 46.666417][ T5958] get_page_from_freelist+0x101e/0x3070 [ 46.667856][ T5958] __alloc_pages_noprof+0x223/0x25a0 [ 46.669247][ T5958] alloc_pages_bulk_noprof+0x77c/0x1110 [ 46.670692][ T5958] __page_pool_alloc_pages_slow+0x18f/0x770 [ 46.672276][ T5958] page_pool_alloc_netmem+0xc4/0x160 [ 46.673614][ T5958] page_pool_alloc_pages+0x1a/0x60 [ 46.674973][ T5958] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 46.676533][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 46.677866][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 46.679236][ T5958] __sys_bpf+0xfc6/0x49a0 [ 46.680370][ T5958] __x64_sys_bpf+0x78/0xc0 [ 46.681529][ T5958] do_syscall_64+0xcd/0x250 [ 46.682650][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.684130][ T5958] page last free pid 5943 tgid 5943 stack trace: [ 46.685817][ T5958] free_unref_page+0x5f4/0xdc0 [ 46.687085][ T5958] qlist_free_all+0x4e/0x120 [ 46.688328][ T5958] kasan_quarantine_reduce+0x192/0x1e0 [ 46.689752][ T5958] __kasan_slab_alloc+0x69/0x90 [ 46.691039][ T5958] kmem_cache_alloc_noprof+0x121/0x2f0 [ 46.692482][ T5958] anon_vma_fork+0x200/0x620 [ 46.693817][ T5958] copy_process+0x8946/0x8cb0 [ 46.695154][ T5958] kernel_clone+0xfd/0x960 [ 46.696383][ T5958] __do_sys_clone+0xba/0x100 [ 46.697637][ T5958] do_syscall_64+0xcd/0x250 [ 46.698881][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.700633][ T5958] Modules linked in: [ 46.701932][ T5958] CPU: 2 UID: 0 PID: 5958 Comm: syz-executor194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 46.706064][ T5958] Tainted: [B]=BAD_PAGE [ 46.707207][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 46.710075][ T5958] Call Trace: [ 46.710976][ T5958] [ 46.711708][ T5958] dump_stack_lvl+0x16c/0x1f0 [ 46.713000][ T5958] bad_page+0xb3/0x1f0 [ 46.714070][ T5958] ? __pfx_bad_page+0x10/0x10 [ 46.715302][ T5958] ? page_bad_reason+0x9d/0x1e0 [ 46.716562][ T5958] free_unref_page+0x657/0xdc0 [ 46.717758][ T5958] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 46.719309][ T5958] ? __phys_addr+0xc6/0x150 [ 46.720520][ T5958] skb_free_head+0xa0/0x1d0 [ 46.722009][ T5958] skb_release_data+0x560/0x730 [ 46.723414][ T5958] sk_skb_reason_drop+0x129/0x1a0 [ 46.724832][ T5958] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 46.726926][ T5958] ? kernel_text_address+0x8d/0x100 [ 46.728415][ T5958] ? hlock_class+0x4e/0x130 [ 46.730019][ T5958] ? __lock_acquire+0x163e/0x3ce0 [ 46.731647][ T5958] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 46.733650][ T5958] ? hlock_class+0x4e/0x130 [ 46.734858][ T5958] ? __lock_acquire+0xbdd/0x3ce0 [ 46.736190][ T5958] ? __pfx___lock_acquire+0x10/0x10 [ 46.737558][ T5958] __netif_receive_skb_list_core+0x357/0x950 [ 46.739146][ T5958] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 46.741063][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 46.742513][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 46.744351][ T5958] ? lock_acquire+0x2f/0xb0 [ 46.745647][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 46.747376][ T5958] netif_receive_skb_list_internal+0x753/0xdb0 [ 46.749045][ T5958] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 46.750771][ T5958] ? __pfx_eth_type_trans+0x10/0x10 [ 46.752188][ T5958] ? __build_skb_around+0x278/0x3b0 [ 46.753561][ T5958] netif_receive_skb_list+0x4f/0x4a0 [ 46.754953][ T5958] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 46.756604][ T5958] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 46.758347][ T5958] ? bpf_test_timer_continue+0x150/0x3d0 [ 46.759812][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 46.761209][ T5958] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 46.762727][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 46.764268][ T5958] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 46.765801][ T5958] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 46.767324][ T5958] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 46.768750][ T5958] ? 0xffffffffa0004340 [ 46.769801][ T5958] ? 0xffffffffa0004340 [ 46.770892][ T5958] ? 0xffffffffa0004340 [ 46.771984][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 46.773505][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 46.774854][ T5958] ? lock_acquire+0x2f/0xb0 [ 46.776125][ T5958] ? __fget_files+0x40/0x3f0 [ 46.777368][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 46.778904][ T5958] ? fput+0x30/0x390 [ 46.779946][ T5958] ? __bpf_prog_get+0xa0/0x290 [ 46.781231][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 46.782762][ T5958] __sys_bpf+0xfc6/0x49a0 [ 46.783912][ T5958] ? find_held_lock+0x2d/0x110 [ 46.785181][ T5958] ? __pfx___sys_bpf+0x10/0x10 [ 46.786456][ T5958] ? __might_fault+0x13b/0x190 [ 46.787963][ T5958] ? __pfx_lock_release+0x10/0x10 [ 46.789611][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 46.791159][ T5958] ? lock_acquire+0x2f/0xb0 [ 46.792417][ T5958] ? __might_fault+0xe3/0x190 [ 46.793648][ T5958] ? xfd_validate_state+0x5d/0x180 [ 46.794984][ T5958] ? rcu_is_watching+0x12/0xc0 [ 46.796245][ T5958] __x64_sys_bpf+0x78/0xc0 [ 46.797421][ T5958] ? lockdep_hardirqs_on+0x7c/0x110 [ 46.798793][ T5958] do_syscall_64+0xcd/0x250 [ 46.799999][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.801757][ T5958] RIP: 0033:0x7f297e773e99 [ 46.803270][ T5958] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 46.809428][ T5958] RSP: 002b:00007f297e72e228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 46.811944][ T5958] RAX: ffffffffffffffda RBX: 00007f297e7fe328 RCX: 00007f297e773e99 [ 46.814106][ T5958] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 46.816230][ T5958] RBP: 00007f297e7fe320 R08: 00007f297e72e6c0 R09: 00007f297e72e6c0 [ 46.818277][ T5958] R10: 00007f297e72e6c0 R11: 0000000000000246 R12: 00007f297e7cb074 [ 46.820362][ T5958] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007fffd5e26f58 [ 46.822558][ T5958] [ 46.823458][ T5958] BUG: Bad page state in process syz-executor194 pfn:23ed1 [ 46.825971][ T5958] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000002 pfn:0x23ed1 [ 46.828952][ T5958] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 46.830831][ T5958] raw: 00fff00000000000 dead000000000040 ffff8880322fe000 0000000000000000 [ 46.833396][ T5958] raw: ffff888000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 46.835761][ T5958] page dumped because: page_pool leak [ 46.837224][ T5958] page_owner tracks the page as allocated [ 46.838784][ T5958] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5958, tgid 5957 (syz-executor194), ts 44777171008, free_ts 44756121630 [ 46.843693][ T5958] post_alloc_hook+0x2d1/0x350 [ 46.845779][ T5958] get_page_from_freelist+0x101e/0x3070 [ 46.847520][ T5958] __alloc_pages_noprof+0x223/0x25a0 [ 46.849007][ T5958] alloc_pages_bulk_noprof+0x77c/0x1110 [ 46.850435][ T5958] __page_pool_alloc_pages_slow+0x18f/0x770 [ 46.852146][ T5958] page_pool_alloc_netmem+0xc4/0x160 [ 46.853543][ T5958] page_pool_alloc_pages+0x1a/0x60 [ 46.854984][ T5958] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 46.856620][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 46.858000][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 46.859418][ T5958] __sys_bpf+0xfc6/0x49a0 [ 46.860592][ T5958] __x64_sys_bpf+0x78/0xc0 [ 46.861770][ T5958] do_syscall_64+0xcd/0x250 [ 46.862975][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.864753][ T5958] page last free pid 5943 tgid 5943 stack trace: [ 46.866818][ T5958] free_unref_page+0x5f4/0xdc0 [ 46.868364][ T5958] qlist_free_all+0x4e/0x120 [ 46.870069][ T5958] kasan_quarantine_reduce+0x192/0x1e0 [ 46.871567][ T5958] __kasan_slab_alloc+0x69/0x90 [ 46.872909][ T5958] kmem_cache_alloc_noprof+0x121/0x2f0 [ 46.874378][ T5958] anon_vma_fork+0x200/0x620 [ 46.875669][ T5958] copy_process+0x8946/0x8cb0 [ 46.876880][ T5958] kernel_clone+0xfd/0x960 [ 46.878015][ T5958] __do_sys_clone+0xba/0x100 [ 46.879158][ T5958] do_syscall_64+0xcd/0x250 [ 46.880379][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.882039][ T5958] Modules linked in: [ 46.883271][ T5958] CPU: 2 UID: 0 PID: 5958 Comm: syz-executor194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 46.886695][ T5958] Tainted: [B]=BAD_PAGE [ 46.887979][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 46.891165][ T5958] Call Trace: [ 46.892144][ T5958] [ 46.892984][ T5958] dump_stack_lvl+0x16c/0x1f0 [ 46.894401][ T5958] bad_page+0xb3/0x1f0 [ 46.895630][ T5958] ? __pfx_bad_page+0x10/0x10 [ 46.897045][ T5958] ? page_bad_reason+0x9d/0x1e0 [ 46.898595][ T5958] free_unref_page+0x657/0xdc0 [ 46.900231][ T5958] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 46.901806][ T5958] ? __phys_addr+0xc6/0x150 [ 46.903009][ T5958] skb_free_head+0xa0/0x1d0 [ 46.904223][ T5958] skb_release_data+0x560/0x730 [ 46.905504][ T5958] sk_skb_reason_drop+0x129/0x1a0 [ 46.906818][ T5958] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 46.908554][ T5958] ? kernel_text_address+0x8d/0x100 [ 46.910117][ T5958] ? hlock_class+0x4e/0x130 [ 46.911762][ T5958] ? __lock_acquire+0x163e/0x3ce0 [ 46.913099][ T5958] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 46.915011][ T5958] ? hlock_class+0x4e/0x130 [ 46.916189][ T5958] ? __lock_acquire+0xbdd/0x3ce0 [ 46.917472][ T5958] ? __pfx___lock_acquire+0x10/0x10 [ 46.918846][ T5958] __netif_receive_skb_list_core+0x357/0x950 [ 46.920432][ T5958] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 46.922139][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 46.923502][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 46.925440][ T5958] ? lock_acquire+0x2f/0xb0 [ 46.926865][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 46.928703][ T5958] netif_receive_skb_list_internal+0x753/0xdb0 [ 46.930535][ T5958] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 46.932358][ T5958] ? __pfx_eth_type_trans+0x10/0x10 [ 46.933828][ T5958] ? __build_skb_around+0x278/0x3b0 [ 46.935229][ T5958] netif_receive_skb_list+0x4f/0x4a0 [ 46.936653][ T5958] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 46.938388][ T5958] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 46.940329][ T5958] ? bpf_test_timer_continue+0x150/0x3d0 [ 46.942436][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 46.943942][ T5958] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 46.945769][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 46.948036][ T5958] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 46.949629][ T5958] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 46.951182][ T5958] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 46.952793][ T5958] ? 0xffffffffa0004340 [ 46.954028][ T5958] ? 0xffffffffa0004340 [ 46.955238][ T5958] ? 0xffffffffa0004340 [ 46.956433][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 46.957987][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 46.959377][ T5958] ? lock_acquire+0x2f/0xb0 [ 46.960597][ T5958] ? __fget_files+0x40/0x3f0 [ 46.961996][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 46.963959][ T5958] ? fput+0x30/0x390 [ 46.965213][ T5958] ? __bpf_prog_get+0xa0/0x290 [ 46.966577][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 46.968191][ T5958] __sys_bpf+0xfc6/0x49a0 [ 46.969339][ T5958] ? find_held_lock+0x2d/0x110 [ 46.970702][ T5958] ? __pfx___sys_bpf+0x10/0x10 [ 46.972177][ T5958] ? __might_fault+0x13b/0x190 [ 46.973627][ T5958] ? __pfx_lock_release+0x10/0x10 [ 46.975182][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 46.976792][ T5958] ? lock_acquire+0x2f/0xb0 [ 46.978201][ T5958] ? __might_fault+0xe3/0x190 [ 46.979458][ T5958] ? xfd_validate_state+0x5d/0x180 [ 46.980815][ T5958] ? rcu_is_watching+0x12/0xc0 [ 46.982074][ T5958] __x64_sys_bpf+0x78/0xc0 [ 46.983244][ T5958] ? lockdep_hardirqs_on+0x7c/0x110 [ 46.984928][ T5958] do_syscall_64+0xcd/0x250 [ 46.986211][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.988419][ T5958] RIP: 0033:0x7f297e773e99 [ 46.990272][ T5958] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 46.995586][ T5958] RSP: 002b:00007f297e72e228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 46.997761][ T5958] RAX: ffffffffffffffda RBX: 00007f297e7fe328 RCX: 00007f297e773e99 [ 46.999841][ T5958] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 47.001911][ T5958] RBP: 00007f297e7fe320 R08: 00007f297e72e6c0 R09: 00007f297e72e6c0 [ 47.003979][ T5958] R10: 00007f297e72e6c0 R11: 0000000000000246 R12: 00007f297e7cb074 [ 47.006052][ T5958] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007fffd5e26f58 [ 47.008293][ T5958] [ 47.009211][ T5958] BUG: Bad page state in process syz-executor194 pfn:23ed0 [ 47.011092][ T5958] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888023ed0600 pfn:0x23ed0 [ 47.013860][ T5958] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 47.015706][ T5958] raw: 00fff00000000000 dead000000000040 ffff8880322fe000 0000000000000000 [ 47.017842][ T5958] raw: ffff888023ed0600 0000000000000001 00000000ffffffff 0000000000000000 [ 47.019979][ T5958] page dumped because: page_pool leak [ 47.021652][ T5958] page_owner tracks the page as allocated [ 47.023107][ T5958] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5958, tgid 5957 (syz-executor194), ts 44777162770, free_ts 44756121630 [ 47.027508][ T5958] post_alloc_hook+0x2d1/0x350 [ 47.028872][ T5958] get_page_from_freelist+0x101e/0x3070 [ 47.030331][ T5958] __alloc_pages_noprof+0x223/0x25a0 [ 47.031713][ T5958] alloc_pages_bulk_noprof+0x77c/0x1110 [ 47.033210][ T5958] __page_pool_alloc_pages_slow+0x18f/0x770 [ 47.034765][ T5958] page_pool_alloc_netmem+0xc4/0x160 [ 47.036461][ T5958] page_pool_alloc_pages+0x1a/0x60 [ 47.037975][ T5958] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 47.039588][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 47.041002][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 47.042587][ T5958] __sys_bpf+0xfc6/0x49a0 [ 47.043826][ T5958] __x64_sys_bpf+0x78/0xc0 [ 47.045184][ T5958] do_syscall_64+0xcd/0x250 [ 47.046472][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.048006][ T5958] page last free pid 5943 tgid 5943 stack trace: [ 47.049653][ T5958] free_unref_page+0x5f4/0xdc0 [ 47.050936][ T5958] qlist_free_all+0x4e/0x120 [ 47.052193][ T5958] kasan_quarantine_reduce+0x192/0x1e0 [ 47.053772][ T5958] __kasan_slab_alloc+0x69/0x90 [ 47.055178][ T5958] kmem_cache_alloc_noprof+0x121/0x2f0 [ 47.056668][ T5958] anon_vma_fork+0x200/0x620 [ 47.057946][ T5958] copy_process+0x8946/0x8cb0 [ 47.059203][ T5958] kernel_clone+0xfd/0x960 [ 47.060419][ T5958] __do_sys_clone+0xba/0x100 [ 47.061683][ T5958] do_syscall_64+0xcd/0x250 [ 47.063078][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.064744][ T5958] Modules linked in: [ 47.066033][ T5958] CPU: 2 UID: 0 PID: 5958 Comm: syz-executor194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 47.069654][ T5958] Tainted: [B]=BAD_PAGE [ 47.070754][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 47.073583][ T5958] Call Trace: [ 47.074469][ T5958] [ 47.075268][ T5958] dump_stack_lvl+0x16c/0x1f0 [ 47.076552][ T5958] bad_page+0xb3/0x1f0 [ 47.077615][ T5958] ? __pfx_bad_page+0x10/0x10 [ 47.078850][ T5958] ? page_bad_reason+0x9d/0x1e0 [ 47.080135][ T5958] free_unref_page+0x657/0xdc0 [ 47.081355][ T5958] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 47.082925][ T5958] ? __phys_addr+0xc6/0x150 [ 47.084120][ T5958] skb_free_head+0xa0/0x1d0 [ 47.085462][ T5958] skb_release_data+0x560/0x730 [ 47.086999][ T5958] sk_skb_reason_drop+0x129/0x1a0 [ 47.088636][ T5958] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 47.090524][ T5958] ? kernel_text_address+0x8d/0x100 [ 47.091992][ T5958] ? hlock_class+0x4e/0x130 [ 47.093313][ T5958] ? __lock_acquire+0x163e/0x3ce0 [ 47.094684][ T5958] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 47.096620][ T5958] ? hlock_class+0x4e/0x130 [ 47.097801][ T5958] ? __lock_acquire+0xbdd/0x3ce0 [ 47.099074][ T5958] ? __pfx___lock_acquire+0x10/0x10 [ 47.100818][ T5958] __netif_receive_skb_list_core+0x357/0x950 [ 47.102383][ T5958] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 47.104381][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 47.105974][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 47.107790][ T5958] ? lock_acquire+0x2f/0xb0 [ 47.109229][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 47.111363][ T5958] netif_receive_skb_list_internal+0x753/0xdb0 [ 47.113146][ T5958] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 47.114906][ T5958] ? __pfx_eth_type_trans+0x10/0x10 [ 47.116254][ T5958] ? __build_skb_around+0x278/0x3b0 [ 47.117549][ T5958] netif_receive_skb_list+0x4f/0x4a0 [ 47.118869][ T5958] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 47.120548][ T5958] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 47.122309][ T5958] ? bpf_test_timer_continue+0x150/0x3d0 [ 47.123812][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 47.125191][ T5958] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 47.126739][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 47.128354][ T5958] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 47.130008][ T5958] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 47.131628][ T5958] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 47.133135][ T5958] ? 0xffffffffa0004340 [ 47.134226][ T5958] ? 0xffffffffa0004340 [ 47.135380][ T5958] ? 0xffffffffa0004340 [ 47.136557][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 47.138165][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 47.139902][ T5958] ? lock_acquire+0x2f/0xb0 [ 47.142046][ T5958] ? __fget_files+0x40/0x3f0 [ 47.143280][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 47.145042][ T5958] ? fput+0x30/0x390 [ 47.146210][ T5958] ? __bpf_prog_get+0xa0/0x290 [ 47.147495][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 47.149024][ T5958] __sys_bpf+0xfc6/0x49a0 [ 47.150174][ T5958] ? find_held_lock+0x2d/0x110 [ 47.151435][ T5958] ? __pfx___sys_bpf+0x10/0x10 [ 47.152738][ T5958] ? __might_fault+0x13b/0x190 [ 47.153997][ T5958] ? __pfx_lock_release+0x10/0x10 [ 47.155323][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 47.156653][ T5958] ? lock_acquire+0x2f/0xb0 [ 47.157813][ T5958] ? __might_fault+0xe3/0x190 [ 47.159067][ T5958] ? xfd_validate_state+0x5d/0x180 [ 47.160429][ T5958] ? rcu_is_watching+0x12/0xc0 [ 47.161810][ T5958] __x64_sys_bpf+0x78/0xc0 [ 47.163460][ T5958] ? lockdep_hardirqs_on+0x7c/0x110 [ 47.165048][ T5958] do_syscall_64+0xcd/0x250 [ 47.166424][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.168440][ T5958] RIP: 0033:0x7f297e773e99 [ 47.169799][ T5958] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 47.174921][ T5958] RSP: 002b:00007f297e72e228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 47.177312][ T5958] RAX: ffffffffffffffda RBX: 00007f297e7fe328 RCX: 00007f297e773e99 [ 47.179926][ T5958] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 47.182570][ T5958] RBP: 00007f297e7fe320 R08: 00007f297e72e6c0 R09: 00007f297e72e6c0 [ 47.184596][ T5958] R10: 00007f297e72e6c0 R11: 0000000000000246 R12: 00007f297e7cb074 [ 47.186642][ T5958] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007fffd5e26f58 [ 47.188692][ T5958] [ 47.189598][ T5958] BUG: Bad page state in process syz-executor194 pfn:2f9d3 [ 47.191487][ T5958] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2 pfn:0x2f9d3 [ 47.193747][ T5958] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 47.195542][ T5958] raw: 00fff00000000000 dead000000000040 ffff8880322fe000 0000000000000000 [ 47.197738][ T5958] raw: 0000000000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 47.199968][ T5958] page dumped because: page_pool leak [ 47.201530][ T5958] page_owner tracks the page as allocated [ 47.203164][ T5958] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5958, tgid 5957 (syz-executor194), ts 44777155072, free_ts 44756168268 [ 47.207909][ T5958] post_alloc_hook+0x2d1/0x350 [ 47.209194][ T5958] get_page_from_freelist+0x101e/0x3070 [ 47.210659][ T5958] __alloc_pages_noprof+0x223/0x25a0 [ 47.212062][ T5958] alloc_pages_bulk_noprof+0x77c/0x1110 [ 47.213744][ T5958] __page_pool_alloc_pages_slow+0x18f/0x770 [ 47.215496][ T5958] page_pool_alloc_netmem+0xc4/0x160 [ 47.216889][ T5958] page_pool_alloc_pages+0x1a/0x60 [ 47.218244][ T5958] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 47.220104][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 47.221738][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 47.223321][ T5958] __sys_bpf+0xfc6/0x49a0 [ 47.224594][ T5958] __x64_sys_bpf+0x78/0xc0 [ 47.226014][ T5958] do_syscall_64+0xcd/0x250 [ 47.227399][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.229272][ T5958] page last free pid 5943 tgid 5943 stack trace: [ 47.231118][ T5958] free_unref_page+0x5f4/0xdc0 [ 47.232521][ T5958] qlist_free_all+0x4e/0x120 [ 47.233747][ T5958] kasan_quarantine_reduce+0x192/0x1e0 [ 47.235238][ T5958] __kasan_slab_alloc+0x69/0x90 [ 47.236540][ T5958] kmem_cache_alloc_noprof+0x121/0x2f0 [ 47.237960][ T5958] anon_vma_fork+0x200/0x620 [ 47.239175][ T5958] copy_process+0x8946/0x8cb0 [ 47.240438][ T5958] kernel_clone+0xfd/0x960 [ 47.241613][ T5958] __do_sys_clone+0xba/0x100 [ 47.242825][ T5958] do_syscall_64+0xcd/0x250 [ 47.244282][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.246095][ T5958] Modules linked in: [ 47.248254][ T5958] CPU: 2 UID: 0 PID: 5958 Comm: syz-executor194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 47.251541][ T5958] Tainted: [B]=BAD_PAGE [ 47.252649][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 47.255444][ T5958] Call Trace: [ 47.256341][ T5958] [ 47.257121][ T5958] dump_stack_lvl+0x16c/0x1f0 [ 47.258361][ T5958] bad_page+0xb3/0x1f0 [ 47.259666][ T5958] ? __pfx_bad_page+0x10/0x10 [ 47.261357][ T5958] ? page_bad_reason+0x9d/0x1e0 [ 47.262922][ T5958] free_unref_page+0x657/0xdc0 [ 47.264501][ T5958] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 47.266843][ T5958] ? __phys_addr+0xc6/0x150 [ 47.268227][ T5958] skb_free_head+0xa0/0x1d0 [ 47.269529][ T5958] skb_release_data+0x560/0x730 [ 47.270894][ T5958] sk_skb_reason_drop+0x129/0x1a0 [ 47.272276][ T5958] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 47.274058][ T5958] ? kernel_text_address+0x8d/0x100 [ 47.275571][ T5958] ? hlock_class+0x4e/0x130 [ 47.276829][ T5958] ? __lock_acquire+0x163e/0x3ce0 [ 47.278188][ T5958] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 47.280518][ T5958] ? hlock_class+0x4e/0x130 [ 47.281828][ T5958] ? __lock_acquire+0xbdd/0x3ce0 [ 47.283274][ T5958] ? __pfx___lock_acquire+0x10/0x10 [ 47.284763][ T5958] __netif_receive_skb_list_core+0x357/0x950 [ 47.286816][ T5958] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 47.288664][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 47.290271][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 47.292063][ T5958] ? lock_acquire+0x2f/0xb0 [ 47.293297][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 47.294955][ T5958] netif_receive_skb_list_internal+0x753/0xdb0 [ 47.296600][ T5958] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 47.298364][ T5958] ? __pfx_eth_type_trans+0x10/0x10 [ 47.299724][ T5958] ? __build_skb_around+0x278/0x3b0 [ 47.301281][ T5958] netif_receive_skb_list+0x4f/0x4a0 [ 47.302869][ T5958] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 47.305199][ T5958] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 47.307516][ T5958] ? bpf_test_timer_continue+0x150/0x3d0 [ 47.310004][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 47.312034][ T5958] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 47.314258][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 47.316565][ T5958] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 47.318620][ T5958] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 47.320423][ T5958] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 47.322240][ T5958] ? 0xffffffffa0004340 [ 47.323385][ T5958] ? 0xffffffffa0004340 [ 47.324511][ T5958] ? 0xffffffffa0004340 [ 47.325859][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 47.327813][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 47.329800][ T5958] ? lock_acquire+0x2f/0xb0 [ 47.331108][ T5958] ? __fget_files+0x40/0x3f0 [ 47.332355][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 47.333858][ T5958] ? fput+0x30/0x390 [ 47.334862][ T5958] ? __bpf_prog_get+0xa0/0x290 [ 47.336094][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 47.337531][ T5958] __sys_bpf+0xfc6/0x49a0 [ 47.338578][ T5958] ? find_held_lock+0x2d/0x110 [ 47.339806][ T5958] ? __pfx___sys_bpf+0x10/0x10 [ 47.341192][ T5958] ? __might_fault+0x13b/0x190 [ 47.342683][ T5958] ? __pfx_lock_release+0x10/0x10 [ 47.344389][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 47.345791][ T5958] ? lock_acquire+0x2f/0xb0 [ 47.347003][ T5958] ? __might_fault+0xe3/0x190 [ 47.348632][ T5958] ? xfd_validate_state+0x5d/0x180 [ 47.350473][ T5958] ? rcu_is_watching+0x12/0xc0 [ 47.352413][ T5958] __x64_sys_bpf+0x78/0xc0 [ 47.354016][ T5958] ? lockdep_hardirqs_on+0x7c/0x110 [ 47.355785][ T5958] do_syscall_64+0xcd/0x250 [ 47.357308][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.359271][ T5958] RIP: 0033:0x7f297e773e99 [ 47.361076][ T5958] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 47.367300][ T5958] RSP: 002b:00007f297e72e228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 47.369997][ T5958] RAX: ffffffffffffffda RBX: 00007f297e7fe328 RCX: 00007f297e773e99 [ 47.372684][ T5958] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 47.375525][ T5958] RBP: 00007f297e7fe320 R08: 00007f297e72e6c0 R09: 00007f297e72e6c0 [ 47.378315][ T5958] R10: 00007f297e72e6c0 R11: 0000000000000246 R12: 00007f297e7cb074 [ 47.381022][ T5958] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007fffd5e26f58 [ 47.384711][ T5958] [ 47.386065][ T5958] BUG: Bad page state in process syz-executor194 pfn:2f9d2 [ 47.388616][ T5958] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802f9d2400 pfn:0x2f9d2 [ 47.392374][ T5958] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 47.394779][ T5958] raw: 00fff00000000000 dead000000000040 ffff8880322fe000 0000000000000000 [ 47.398041][ T5958] raw: ffff88802f9d2400 0000000000000001 00000000ffffffff 0000000000000000 [ 47.401295][ T5958] page dumped because: page_pool leak [ 47.403479][ T5958] page_owner tracks the page as allocated [ 47.405810][ T5958] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5958, tgid 5957 (syz-executor194), ts 44777146941, free_ts 44756168268 [ 47.411270][ T5958] post_alloc_hook+0x2d1/0x350 [ 47.412554][ T5958] get_page_from_freelist+0x101e/0x3070 [ 47.414457][ T5958] __alloc_pages_noprof+0x223/0x25a0 [ 47.416429][ T5958] alloc_pages_bulk_noprof+0x77c/0x1110 [ 47.418378][ T5958] __page_pool_alloc_pages_slow+0x18f/0x770 [ 47.420487][ T5958] page_pool_alloc_netmem+0xc4/0x160 [ 47.422343][ T5958] page_pool_alloc_pages+0x1a/0x60 [ 47.424171][ T5958] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 47.426420][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 47.428289][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 47.430174][ T5958] __sys_bpf+0xfc6/0x49a0 [ 47.431716][ T5958] __x64_sys_bpf+0x78/0xc0 [ 47.433004][ T5958] do_syscall_64+0xcd/0x250 [ 47.434262][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.436270][ T5958] page last free pid 5943 tgid 5943 stack trace: [ 47.438028][ T5958] free_unref_page+0x5f4/0xdc0 [ 47.439276][ T5958] qlist_free_all+0x4e/0x120 [ 47.440741][ T5958] kasan_quarantine_reduce+0x192/0x1e0 [ 47.442131][ T5958] __kasan_slab_alloc+0x69/0x90 [ 47.443629][ T5958] kmem_cache_alloc_noprof+0x121/0x2f0 [ 47.445192][ T5958] anon_vma_fork+0x200/0x620 [ 47.447021][ T5958] copy_process+0x8946/0x8cb0 [ 47.448261][ T5958] kernel_clone+0xfd/0x960 [ 47.449370][ T5958] __do_sys_clone+0xba/0x100 [ 47.450557][ T5958] do_syscall_64+0xcd/0x250 [ 47.451761][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.453345][ T5958] Modules linked in: [ 47.454382][ T5958] CPU: 2 UID: 0 PID: 5958 Comm: syz-executor194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 47.457566][ T5958] Tainted: [B]=BAD_PAGE [ 47.458632][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 47.461382][ T5958] Call Trace: [ 47.462310][ T5958] [ 47.463095][ T5958] dump_stack_lvl+0x16c/0x1f0 [ 47.464352][ T5958] bad_page+0xb3/0x1f0 [ 47.465425][ T5958] ? __pfx_bad_page+0x10/0x10 [ 47.466647][ T5958] ? page_bad_reason+0x9d/0x1e0 [ 47.468157][ T5958] free_unref_page+0x657/0xdc0 [ 47.469629][ T5958] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 47.471268][ T5958] ? __phys_addr+0xc6/0x150 [ 47.472583][ T5958] skb_free_head+0xa0/0x1d0 [ 47.473856][ T5958] skb_release_data+0x560/0x730 [ 47.475202][ T5958] sk_skb_reason_drop+0x129/0x1a0 [ 47.476551][ T5958] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 47.478303][ T5958] ? kernel_text_address+0x8d/0x100 [ 47.479668][ T5958] ? hlock_class+0x4e/0x130 [ 47.480894][ T5958] ? __lock_acquire+0x163e/0x3ce0 [ 47.482209][ T5958] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 47.483997][ T5958] ? hlock_class+0x4e/0x130 [ 47.485175][ T5958] ? __lock_acquire+0xbdd/0x3ce0 [ 47.486467][ T5958] ? __pfx___lock_acquire+0x10/0x10 [ 47.487821][ T5958] __netif_receive_skb_list_core+0x357/0x950 [ 47.489402][ T5958] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 47.491090][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 47.492483][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 47.494239][ T5958] ? lock_acquire+0x2f/0xb0 [ 47.495521][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 47.497253][ T5958] netif_receive_skb_list_internal+0x753/0xdb0 [ 47.498860][ T5958] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 47.500599][ T5958] ? __pfx_eth_type_trans+0x10/0x10 [ 47.501961][ T5958] ? __build_skb_around+0x278/0x3b0 [ 47.503290][ T5958] netif_receive_skb_list+0x4f/0x4a0 [ 47.504698][ T5958] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 47.506327][ T5958] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 47.508030][ T5958] ? bpf_test_timer_continue+0x150/0x3d0 [ 47.509535][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 47.510924][ T5958] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 47.512485][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 47.514024][ T5958] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 47.515559][ T5958] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 47.517079][ T5958] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 47.518447][ T5958] ? 0xffffffffa0004340 [ 47.519532][ T5958] ? 0xffffffffa0004340 [ 47.520629][ T5958] ? 0xffffffffa0004340 [ 47.521710][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 47.523245][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 47.524761][ T5958] ? lock_acquire+0x2f/0xb0 [ 47.525965][ T5958] ? __fget_files+0x40/0x3f0 [ 47.527193][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 47.529302][ T5958] ? fput+0x30/0x390 [ 47.530459][ T5958] ? __bpf_prog_get+0xa0/0x290 [ 47.531725][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 47.533289][ T5958] __sys_bpf+0xfc6/0x49a0 [ 47.534434][ T5958] ? find_held_lock+0x2d/0x110 [ 47.535705][ T5958] ? __pfx___sys_bpf+0x10/0x10 [ 47.537023][ T5958] ? __might_fault+0x13b/0x190 [ 47.538242][ T5958] ? __pfx_lock_release+0x10/0x10 [ 47.539528][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 47.541012][ T5958] ? lock_acquire+0x2f/0xb0 [ 47.542274][ T5958] ? __might_fault+0xe3/0x190 [ 47.543470][ T5958] ? xfd_validate_state+0x5d/0x180 [ 47.544810][ T5958] ? rcu_is_watching+0x12/0xc0 [ 47.546022][ T5958] __x64_sys_bpf+0x78/0xc0 [ 47.547133][ T5958] ? lockdep_hardirqs_on+0x7c/0x110 [ 47.548649][ T5958] do_syscall_64+0xcd/0x250 [ 47.549954][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.551505][ T5958] RIP: 0033:0x7f297e773e99 [ 47.552706][ T5958] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 47.557741][ T5958] RSP: 002b:00007f297e72e228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 47.559889][ T5958] RAX: ffffffffffffffda RBX: 00007f297e7fe328 RCX: 00007f297e773e99 [ 47.562313][ T5958] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 47.564389][ T5958] RBP: 00007f297e7fe320 R08: 00007f297e72e6c0 R09: 00007f297e72e6c0 [ 47.566401][ T5958] R10: 00007f297e72e6c0 R11: 0000000000000246 R12: 00007f297e7cb074 [ 47.568471][ T5958] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007fffd5e26f58 [ 47.570502][ T5958] [ 47.571406][ T5958] BUG: Bad page state in process syz-executor194 pfn:27513 [ 47.573401][ T5958] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2 pfn:0x27513 [ 47.575691][ T5958] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 47.577552][ T5958] raw: 00fff00000000000 dead000000000040 ffff8880322fe000 0000000000000000 [ 47.579861][ T5958] raw: 0000000000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 47.582369][ T5958] page dumped because: page_pool leak [ 47.584184][ T5958] page_owner tracks the page as allocated [ 47.586271][ T5958] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5958, tgid 5957 (syz-executor194), ts 44777138688, free_ts 44756191048 [ 47.591479][ T5958] post_alloc_hook+0x2d1/0x350 [ 47.592914][ T5958] get_page_from_freelist+0x101e/0x3070 [ 47.594333][ T5958] __alloc_pages_noprof+0x223/0x25a0 [ 47.595686][ T5958] alloc_pages_bulk_noprof+0x77c/0x1110 [ 47.597133][ T5958] __page_pool_alloc_pages_slow+0x18f/0x770 [ 47.598628][ T5958] page_pool_alloc_netmem+0xc4/0x160 [ 47.599985][ T5958] page_pool_alloc_pages+0x1a/0x60 [ 47.601291][ T5958] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 47.602875][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 47.604749][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 47.606645][ T5958] __sys_bpf+0xfc6/0x49a0 [ 47.607823][ T5958] __x64_sys_bpf+0x78/0xc0 [ 47.609104][ T5958] do_syscall_64+0xcd/0x250 [ 47.610311][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.611766][ T5958] page last free pid 5943 tgid 5943 stack trace: [ 47.613360][ T5958] free_unref_page+0x5f4/0xdc0 [ 47.614571][ T5958] __put_partials+0x14c/0x170 [ 47.615921][ T5958] qlist_free_all+0x4e/0x120 [ 47.617171][ T5958] kasan_quarantine_reduce+0x192/0x1e0 [ 47.618725][ T5958] __kasan_slab_alloc+0x69/0x90 [ 47.620085][ T5958] kmem_cache_alloc_noprof+0x121/0x2f0 [ 47.621587][ T5958] anon_vma_fork+0x200/0x620 [ 47.622816][ T5958] copy_process+0x8946/0x8cb0 [ 47.624502][ T5958] kernel_clone+0xfd/0x960 [ 47.625821][ T5958] __do_sys_clone+0xba/0x100 [ 47.627093][ T5958] do_syscall_64+0xcd/0x250 [ 47.628411][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.630001][ T5958] Modules linked in: [ 47.631125][ T5958] CPU: 2 UID: 0 PID: 5958 Comm: syz-executor194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 47.634647][ T5958] Tainted: [B]=BAD_PAGE [ 47.635860][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 47.639027][ T5958] Call Trace: [ 47.639899][ T5958] [ 47.640773][ T5958] dump_stack_lvl+0x16c/0x1f0 [ 47.642397][ T5958] bad_page+0xb3/0x1f0 [ 47.643476][ T5958] ? __pfx_bad_page+0x10/0x10 [ 47.644994][ T5958] ? page_bad_reason+0x9d/0x1e0 [ 47.646482][ T5958] free_unref_page+0x657/0xdc0 [ 47.647762][ T5958] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 47.649835][ T5958] ? __phys_addr+0xc6/0x150 [ 47.651163][ T5958] skb_free_head+0xa0/0x1d0 [ 47.652695][ T5958] skb_release_data+0x560/0x730 [ 47.653918][ T5958] sk_skb_reason_drop+0x129/0x1a0 [ 47.655226][ T5958] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 47.656880][ T5958] ? kernel_text_address+0x8d/0x100 [ 47.658243][ T5958] ? hlock_class+0x4e/0x130 [ 47.659392][ T5958] ? __lock_acquire+0x163e/0x3ce0 [ 47.660639][ T5958] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 47.662548][ T5958] ? hlock_class+0x4e/0x130 [ 47.663688][ T5958] ? __lock_acquire+0xbdd/0x3ce0 [ 47.664960][ T5958] ? __pfx___lock_acquire+0x10/0x10 [ 47.666332][ T5958] __netif_receive_skb_list_core+0x357/0x950 [ 47.667828][ T5958] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 47.669478][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 47.670827][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 47.672453][ T5958] ? lock_acquire+0x2f/0xb0 [ 47.673589][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 47.675332][ T5958] netif_receive_skb_list_internal+0x753/0xdb0 [ 47.676993][ T5958] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 47.678719][ T5958] ? __pfx_eth_type_trans+0x10/0x10 [ 47.680113][ T5958] ? __build_skb_around+0x278/0x3b0 [ 47.681484][ T5958] netif_receive_skb_list+0x4f/0x4a0 [ 47.682885][ T5958] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 47.684503][ T5958] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 47.686198][ T5958] ? bpf_test_timer_continue+0x150/0x3d0 [ 47.687861][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 47.689380][ T5958] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 47.691079][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 47.692690][ T5958] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 47.694221][ T5958] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 47.695844][ T5958] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 47.697328][ T5958] ? 0xffffffffa0004340 [ 47.698455][ T5958] ? 0xffffffffa0004340 [ 47.699565][ T5958] ? 0xffffffffa0004340 [ 47.700658][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 47.702092][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 47.703458][ T5958] ? lock_acquire+0x2f/0xb0 [ 47.704687][ T5958] ? __fget_files+0x40/0x3f0 [ 47.705888][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 47.707469][ T5958] ? fput+0x30/0x390 [ 47.708530][ T5958] ? __bpf_prog_get+0xa0/0x290 [ 47.709813][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 47.711367][ T5958] __sys_bpf+0xfc6/0x49a0 [ 47.712587][ T5958] ? find_held_lock+0x2d/0x110 [ 47.713863][ T5958] ? __pfx___sys_bpf+0x10/0x10 [ 47.715082][ T5958] ? __might_fault+0x13b/0x190 [ 47.716311][ T5958] ? __pfx_lock_release+0x10/0x10 [ 47.717583][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 47.718844][ T5958] ? lock_acquire+0x2f/0xb0 [ 47.720050][ T5958] ? __might_fault+0xe3/0x190 [ 47.721296][ T5958] ? xfd_validate_state+0x5d/0x180 [ 47.722652][ T5958] ? rcu_is_watching+0x12/0xc0 [ 47.723934][ T5958] __x64_sys_bpf+0x78/0xc0 [ 47.725175][ T5958] ? lockdep_hardirqs_on+0x7c/0x110 [ 47.727032][ T5958] do_syscall_64+0xcd/0x250 [ 47.728467][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.729920][ T5958] RIP: 0033:0x7f297e773e99 [ 47.731126][ T5958] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 47.735909][ T5958] RSP: 002b:00007f297e72e228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 47.737936][ T5958] RAX: ffffffffffffffda RBX: 00007f297e7fe328 RCX: 00007f297e773e99 [ 47.739854][ T5958] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 47.741811][ T5958] RBP: 00007f297e7fe320 R08: 00007f297e72e6c0 R09: 00007f297e72e6c0 [ 47.744059][ T5958] R10: 00007f297e72e6c0 R11: 0000000000000246 R12: 00007f297e7cb074 [ 47.746405][ T5958] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007fffd5e26f58 [ 47.749056][ T5958] [ 47.750065][ T5958] BUG: Bad page state in process syz-executor194 pfn:27512 [ 47.752190][ T5958] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888027512000 pfn:0x27512 [ 47.754951][ T5958] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 47.756960][ T5958] raw: 00fff00000000000 dead000000000040 ffff8880322fe000 0000000000000000 [ 47.759135][ T5958] raw: ffff888027512000 0000000000000001 00000000ffffffff 0000000000000000 [ 47.761591][ T5958] page dumped because: page_pool leak [ 47.763030][ T5958] page_owner tracks the page as allocated [ 47.764460][ T5958] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5958, tgid 5957 (syz-executor194), ts 44777130788, free_ts 44756191048 [ 47.768967][ T5958] post_alloc_hook+0x2d1/0x350 [ 47.770586][ T5958] get_page_from_freelist+0x101e/0x3070 [ 47.772025][ T5958] __alloc_pages_noprof+0x223/0x25a0 [ 47.773393][ T5958] alloc_pages_bulk_noprof+0x77c/0x1110 [ 47.774800][ T5958] __page_pool_alloc_pages_slow+0x18f/0x770 [ 47.776547][ T5958] page_pool_alloc_netmem+0xc4/0x160 [ 47.778192][ T5958] page_pool_alloc_pages+0x1a/0x60 [ 47.779680][ T5958] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 47.781889][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 47.783489][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 47.785281][ T5958] __sys_bpf+0xfc6/0x49a0 [ 47.786415][ T5958] __x64_sys_bpf+0x78/0xc0 [ 47.787575][ T5958] do_syscall_64+0xcd/0x250 [ 47.788778][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.790329][ T5958] page last free pid 5943 tgid 5943 stack trace: [ 47.791982][ T5958] free_unref_page+0x5f4/0xdc0 [ 47.793196][ T5958] __put_partials+0x14c/0x170 [ 47.794389][ T5958] qlist_free_all+0x4e/0x120 [ 47.795601][ T5958] kasan_quarantine_reduce+0x192/0x1e0 [ 47.796958][ T5958] __kasan_slab_alloc+0x69/0x90 [ 47.798169][ T5958] kmem_cache_alloc_noprof+0x121/0x2f0 [ 47.799546][ T5958] anon_vma_fork+0x200/0x620 [ 47.800701][ T5958] copy_process+0x8946/0x8cb0 [ 47.801940][ T5958] kernel_clone+0xfd/0x960 [ 47.803109][ T5958] __do_sys_clone+0xba/0x100 [ 47.804458][ T5958] do_syscall_64+0xcd/0x250 [ 47.805879][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.807674][ T5958] Modules linked in: [ 47.808856][ T5958] CPU: 2 UID: 0 PID: 5958 Comm: syz-executor194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 47.812416][ T5958] Tainted: [B]=BAD_PAGE [ 47.813624][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 47.816810][ T5958] Call Trace: [ 47.817758][ T5958] [ 47.818658][ T5958] dump_stack_lvl+0x16c/0x1f0 [ 47.819910][ T5958] bad_page+0xb3/0x1f0 [ 47.821215][ T5958] ? __pfx_bad_page+0x10/0x10 [ 47.822489][ T5958] ? page_bad_reason+0x9d/0x1e0 [ 47.823877][ T5958] free_unref_page+0x657/0xdc0 [ 47.825220][ T5958] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 47.826928][ T5958] ? __phys_addr+0xc6/0x150 [ 47.828238][ T5958] skb_free_head+0xa0/0x1d0 [ 47.829554][ T5958] skb_release_data+0x560/0x730 [ 47.830946][ T5958] sk_skb_reason_drop+0x129/0x1a0 [ 47.832580][ T5958] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 47.834556][ T5958] ? kernel_text_address+0x8d/0x100 [ 47.836184][ T5958] ? hlock_class+0x4e/0x130 [ 47.837895][ T5958] ? __lock_acquire+0x163e/0x3ce0 [ 47.839657][ T5958] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 47.841683][ T5958] ? hlock_class+0x4e/0x130 [ 47.842871][ T5958] ? __lock_acquire+0xbdd/0x3ce0 [ 47.844442][ T5958] ? __pfx___lock_acquire+0x10/0x10 [ 47.845905][ T5958] __netif_receive_skb_list_core+0x357/0x950 [ 47.847705][ T5958] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 47.849613][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 47.850987][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 47.852660][ T5958] ? lock_acquire+0x2f/0xb0 [ 47.853857][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 47.855511][ T5958] netif_receive_skb_list_internal+0x753/0xdb0 [ 47.857158][ T5958] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 47.858896][ T5958] ? __pfx_eth_type_trans+0x10/0x10 [ 47.860277][ T5958] ? __build_skb_around+0x278/0x3b0 [ 47.861856][ T5958] netif_receive_skb_list+0x4f/0x4a0 [ 47.863650][ T5958] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 47.865426][ T5958] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 47.867252][ T5958] ? bpf_test_timer_continue+0x150/0x3d0 [ 47.868919][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 47.870476][ T5958] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 47.872301][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 47.873888][ T5958] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 47.875446][ T5958] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 47.876989][ T5958] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 47.878221][ T5958] ? 0xffffffffa0004340 [ 47.879319][ T5958] ? 0xffffffffa0004340 [ 47.880543][ T5958] ? 0xffffffffa0004340 [ 47.881804][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 47.883306][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 47.884983][ T5958] ? lock_acquire+0x2f/0xb0 [ 47.886612][ T5958] ? __fget_files+0x40/0x3f0 [ 47.887843][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 47.889572][ T5958] ? fput+0x30/0x390 [ 47.890640][ T5958] ? __bpf_prog_get+0xa0/0x290 [ 47.892096][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 47.893700][ T5958] __sys_bpf+0xfc6/0x49a0 [ 47.894928][ T5958] ? find_held_lock+0x2d/0x110 [ 47.896336][ T5958] ? __pfx___sys_bpf+0x10/0x10 [ 47.897766][ T5958] ? __might_fault+0x13b/0x190 [ 47.899178][ T5958] ? __pfx_lock_release+0x10/0x10 [ 47.900726][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 47.902266][ T5958] ? lock_acquire+0x2f/0xb0 [ 47.903497][ T5958] ? __might_fault+0xe3/0x190 [ 47.904741][ T5958] ? xfd_validate_state+0x5d/0x180 [ 47.906049][ T5958] ? rcu_is_watching+0x12/0xc0 [ 47.907351][ T5958] __x64_sys_bpf+0x78/0xc0 [ 47.908635][ T5958] ? lockdep_hardirqs_on+0x7c/0x110 [ 47.910045][ T5958] do_syscall_64+0xcd/0x250 [ 47.911322][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.913007][ T5958] RIP: 0033:0x7f297e773e99 [ 47.914163][ T5958] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 47.920285][ T5958] RSP: 002b:00007f297e72e228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 47.922851][ T5958] RAX: ffffffffffffffda RBX: 00007f297e7fe328 RCX: 00007f297e773e99 [ 47.925368][ T5958] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 47.927578][ T5958] RBP: 00007f297e7fe320 R08: 00007f297e72e6c0 R09: 00007f297e72e6c0 [ 47.929687][ T5958] R10: 00007f297e72e6c0 R11: 0000000000000246 R12: 00007f297e7cb074 [ 47.931771][ T5958] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007fffd5e26f58 [ 47.933827][ T5958] [ 47.934706][ T5958] BUG: Bad page state in process syz-executor194 pfn:30fe3 [ 47.936594][ T5958] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000002 pfn:0x30fe3 [ 47.939169][ T5958] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 47.941001][ T5958] raw: 00fff00000000000 dead000000000040 ffff8880322fe000 0000000000000000 [ 47.943189][ T5958] raw: ffff888000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 47.945434][ T5958] page dumped because: page_pool leak [ 47.946783][ T5958] page_owner tracks the page as allocated [ 47.948258][ T5958] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5958, tgid 5957 (syz-executor194), ts 44777123426, free_ts 44761613447 [ 47.952612][ T5958] post_alloc_hook+0x2d1/0x350 [ 47.953789][ T5958] get_page_from_freelist+0x101e/0x3070 [ 47.955265][ T5958] __alloc_pages_noprof+0x223/0x25a0 [ 47.956646][ T5958] alloc_pages_bulk_noprof+0x77c/0x1110 [ 47.958148][ T5958] __page_pool_alloc_pages_slow+0x18f/0x770 [ 47.959759][ T5958] page_pool_alloc_netmem+0xc4/0x160 [ 47.961339][ T5958] page_pool_alloc_pages+0x1a/0x60 [ 47.962728][ T5958] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 47.964559][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 47.966224][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 47.967881][ T5958] __sys_bpf+0xfc6/0x49a0 [ 47.969234][ T5958] __x64_sys_bpf+0x78/0xc0 [ 47.970569][ T5958] do_syscall_64+0xcd/0x250 [ 47.971848][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.973376][ T5958] page last free pid 5962 tgid 5962 stack trace: [ 47.975033][ T5958] free_unref_page+0x5f4/0xdc0 [ 47.976282][ T5958] qlist_free_all+0x4e/0x120 [ 47.977485][ T5958] kasan_quarantine_reduce+0x192/0x1e0 [ 47.978882][ T5958] __kasan_slab_alloc+0x69/0x90 [ 47.980140][ T5958] kmem_cache_alloc_noprof+0x121/0x2f0 [ 47.981551][ T5958] getname_flags.part.0+0x4c/0x550 [ 47.983256][ T5958] getname+0x8d/0xe0 [ 47.984550][ T5958] do_sys_openat2+0x104/0x1e0 [ 47.986178][ T5958] __x64_sys_openat+0x175/0x210 [ 47.987712][ T5958] do_syscall_64+0xcd/0x250 [ 47.989213][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.990812][ T5958] Modules linked in: [ 47.991846][ T5958] CPU: 2 UID: 0 PID: 5958 Comm: syz-executor194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 47.995453][ T5958] Tainted: [B]=BAD_PAGE [ 47.996594][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 47.999397][ T5958] Call Trace: [ 48.000360][ T5958] [ 48.001214][ T5958] dump_stack_lvl+0x16c/0x1f0 [ 48.002733][ T5958] bad_page+0xb3/0x1f0 [ 48.003793][ T5958] ? __pfx_bad_page+0x10/0x10 [ 48.004992][ T5958] ? page_bad_reason+0x9d/0x1e0 [ 48.006344][ T5958] free_unref_page+0x657/0xdc0 [ 48.007760][ T5958] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 48.009598][ T5958] ? __phys_addr+0xc6/0x150 [ 48.010742][ T5958] skb_free_head+0xa0/0x1d0 [ 48.011934][ T5958] skb_release_data+0x560/0x730 [ 48.013166][ T5958] sk_skb_reason_drop+0x129/0x1a0 [ 48.014450][ T5958] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 48.016304][ T5958] ? kernel_text_address+0x8d/0x100 [ 48.017796][ T5958] ? hlock_class+0x4e/0x130 [ 48.019084][ T5958] ? __lock_acquire+0x163e/0x3ce0 [ 48.020438][ T5958] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 48.022607][ T5958] ? hlock_class+0x4e/0x130 [ 48.024058][ T5958] ? __lock_acquire+0xbdd/0x3ce0 [ 48.025434][ T5958] ? __pfx___lock_acquire+0x10/0x10 [ 48.026787][ T5958] __netif_receive_skb_list_core+0x357/0x950 [ 48.028465][ T5958] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 48.030192][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 48.031663][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 48.033470][ T5958] ? lock_acquire+0x2f/0xb0 [ 48.034850][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 48.036562][ T5958] netif_receive_skb_list_internal+0x753/0xdb0 [ 48.038185][ T5958] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 48.040048][ T5958] ? __pfx_eth_type_trans+0x10/0x10 [ 48.041464][ T5958] ? __build_skb_around+0x278/0x3b0 [ 48.042877][ T5958] netif_receive_skb_list+0x4f/0x4a0 [ 48.044362][ T5958] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 48.046078][ T5958] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 48.048348][ T5958] ? bpf_test_timer_continue+0x150/0x3d0 [ 48.050064][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 48.051633][ T5958] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 48.053271][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 48.054879][ T5958] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 48.056684][ T5958] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 48.058377][ T5958] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 48.059863][ T5958] ? 0xffffffffa0004340 [ 48.061032][ T5958] ? 0xffffffffa0004340 [ 48.062108][ T5958] ? 0xffffffffa0004340 [ 48.063152][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 48.064807][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 48.066562][ T5958] ? lock_acquire+0x2f/0xb0 [ 48.067990][ T5958] ? __fget_files+0x40/0x3f0 [ 48.069407][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 48.071093][ T5958] ? fput+0x30/0x390 [ 48.072274][ T5958] ? __bpf_prog_get+0xa0/0x290 [ 48.073676][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 48.075314][ T5958] __sys_bpf+0xfc6/0x49a0 [ 48.076486][ T5958] ? find_held_lock+0x2d/0x110 [ 48.077740][ T5958] ? __pfx___sys_bpf+0x10/0x10 [ 48.078984][ T5958] ? __might_fault+0x13b/0x190 [ 48.080281][ T5958] ? __pfx_lock_release+0x10/0x10 [ 48.081820][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 48.083230][ T5958] ? lock_acquire+0x2f/0xb0 [ 48.084448][ T5958] ? __might_fault+0xe3/0x190 [ 48.085697][ T5958] ? xfd_validate_state+0x5d/0x180 [ 48.087025][ T5958] ? rcu_is_watching+0x12/0xc0 [ 48.088302][ T5958] __x64_sys_bpf+0x78/0xc0 [ 48.089540][ T5958] ? lockdep_hardirqs_on+0x7c/0x110 [ 48.091217][ T5958] do_syscall_64+0xcd/0x250 [ 48.092555][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.094278][ T5958] RIP: 0033:0x7f297e773e99 [ 48.095516][ T5958] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 48.100682][ T5958] RSP: 002b:00007f297e72e228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 48.103141][ T5958] RAX: ffffffffffffffda RBX: 00007f297e7fe328 RCX: 00007f297e773e99 [ 48.105867][ T5958] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 48.108257][ T5958] RBP: 00007f297e7fe320 R08: 00007f297e72e6c0 R09: 00007f297e72e6c0 [ 48.110628][ T5958] R10: 00007f297e72e6c0 R11: 0000000000000246 R12: 00007f297e7cb074 [ 48.112750][ T5958] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007fffd5e26f58 [ 48.114909][ T5958] [ 48.115847][ T5958] BUG: Bad page state in process syz-executor194 pfn:30fe2 [ 48.117834][ T5958] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888030fe3000 pfn:0x30fe2 [ 48.120637][ T5958] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 48.122891][ T5958] raw: 00fff00000000000 dead000000000040 ffff8880322fe000 0000000000000000 [ 48.125786][ T5958] raw: ffff888030fe3000 0000000000000001 00000000ffffffff 0000000000000000 [ 48.128285][ T5958] page dumped because: page_pool leak [ 48.129833][ T5958] page_owner tracks the page as allocated [ 48.131670][ T5958] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5958, tgid 5957 (syz-executor194), ts 44777114939, free_ts 44761613447 [ 48.136886][ T5958] post_alloc_hook+0x2d1/0x350 [ 48.138250][ T5958] get_page_from_freelist+0x101e/0x3070 [ 48.139813][ T5958] __alloc_pages_noprof+0x223/0x25a0 [ 48.141225][ T5958] alloc_pages_bulk_noprof+0x77c/0x1110 [ 48.142792][ T5958] __page_pool_alloc_pages_slow+0x18f/0x770 [ 48.144640][ T5958] page_pool_alloc_netmem+0xc4/0x160 [ 48.146088][ T5958] page_pool_alloc_pages+0x1a/0x60 [ 48.147374][ T5958] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 48.149118][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 48.150652][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 48.152042][ T5958] __sys_bpf+0xfc6/0x49a0 [ 48.153159][ T5958] __x64_sys_bpf+0x78/0xc0 [ 48.154315][ T5958] do_syscall_64+0xcd/0x250 [ 48.155576][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.157100][ T5958] page last free pid 5962 tgid 5962 stack trace: [ 48.158814][ T5958] free_unref_page+0x5f4/0xdc0 [ 48.160380][ T5958] qlist_free_all+0x4e/0x120 [ 48.162024][ T5958] kasan_quarantine_reduce+0x192/0x1e0 [ 48.163720][ T5958] __kasan_slab_alloc+0x69/0x90 [ 48.165231][ T5958] kmem_cache_alloc_noprof+0x121/0x2f0 [ 48.166708][ T5958] getname_flags.part.0+0x4c/0x550 [ 48.168172][ T5958] getname+0x8d/0xe0 [ 48.169431][ T5958] do_sys_openat2+0x104/0x1e0 [ 48.170793][ T5958] __x64_sys_openat+0x175/0x210 [ 48.172099][ T5958] do_syscall_64+0xcd/0x250 [ 48.173298][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.174942][ T5958] Modules linked in: [ 48.175988][ T5958] CPU: 2 UID: 0 PID: 5958 Comm: syz-executor194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 48.179221][ T5958] Tainted: [B]=BAD_PAGE [ 48.180606][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 48.183543][ T5958] Call Trace: [ 48.185029][ T5958] [ 48.186107][ T5958] dump_stack_lvl+0x16c/0x1f0 [ 48.187367][ T5958] bad_page+0xb3/0x1f0 [ 48.188664][ T5958] ? __pfx_bad_page+0x10/0x10 [ 48.190066][ T5958] ? page_bad_reason+0x9d/0x1e0 [ 48.191527][ T5958] free_unref_page+0x657/0xdc0 [ 48.193086][ T5958] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 48.195052][ T5958] ? __phys_addr+0xc6/0x150 [ 48.196571][ T5958] skb_free_head+0xa0/0x1d0 [ 48.197833][ T5958] skb_release_data+0x560/0x730 [ 48.199108][ T5958] sk_skb_reason_drop+0x129/0x1a0 [ 48.200431][ T5958] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 48.202151][ T5958] ? kernel_text_address+0x8d/0x100 [ 48.203481][ T5958] ? hlock_class+0x4e/0x130 [ 48.204843][ T5958] ? __lock_acquire+0x163e/0x3ce0 [ 48.206556][ T5958] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 48.208851][ T5958] ? hlock_class+0x4e/0x130 [ 48.210181][ T5958] ? __lock_acquire+0xbdd/0x3ce0 [ 48.211645][ T5958] ? __pfx___lock_acquire+0x10/0x10 [ 48.213041][ T5958] __netif_receive_skb_list_core+0x357/0x950 [ 48.214612][ T5958] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 48.216334][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 48.217712][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 48.219369][ T5958] ? lock_acquire+0x2f/0xb0 [ 48.220776][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 48.222703][ T5958] netif_receive_skb_list_internal+0x753/0xdb0 [ 48.224541][ T5958] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 48.226419][ T5958] ? __pfx_eth_type_trans+0x10/0x10 [ 48.227825][ T5958] ? __build_skb_around+0x278/0x3b0 [ 48.229430][ T5958] netif_receive_skb_list+0x4f/0x4a0 [ 48.231060][ T5958] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 48.233062][ T5958] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 48.234869][ T5958] ? bpf_test_timer_continue+0x150/0x3d0 [ 48.236462][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 48.237868][ T5958] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 48.239417][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 48.241183][ T5958] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 48.242824][ T5958] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 48.244395][ T5958] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 48.245945][ T5958] ? 0xffffffffa0004340 [ 48.247064][ T5958] ? 0xffffffffa0004340 [ 48.248160][ T5958] ? 0xffffffffa0004340 [ 48.249302][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 48.250964][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 48.252407][ T5958] ? lock_acquire+0x2f/0xb0 [ 48.253617][ T5958] ? __fget_files+0x40/0x3f0 [ 48.254882][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 48.256484][ T5958] ? fput+0x30/0x390 [ 48.257559][ T5958] ? __bpf_prog_get+0xa0/0x290 [ 48.258818][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 48.260585][ T5958] __sys_bpf+0xfc6/0x49a0 [ 48.262132][ T5958] ? find_held_lock+0x2d/0x110 [ 48.263742][ T5958] ? __pfx___sys_bpf+0x10/0x10 [ 48.265530][ T5958] ? __might_fault+0x13b/0x190 [ 48.266989][ T5958] ? __pfx_lock_release+0x10/0x10 [ 48.268525][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 48.269891][ T5958] ? lock_acquire+0x2f/0xb0 [ 48.271086][ T5958] ? __might_fault+0xe3/0x190 [ 48.272447][ T5958] ? xfd_validate_state+0x5d/0x180 [ 48.273800][ T5958] ? rcu_is_watching+0x12/0xc0 [ 48.275071][ T5958] __x64_sys_bpf+0x78/0xc0 [ 48.276284][ T5958] ? lockdep_hardirqs_on+0x7c/0x110 [ 48.277793][ T5958] do_syscall_64+0xcd/0x250 [ 48.279091][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.280720][ T5958] RIP: 0033:0x7f297e773e99 [ 48.282121][ T5958] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 48.289302][ T5958] RSP: 002b:00007f297e72e228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 48.292702][ T5958] RAX: ffffffffffffffda RBX: 00007f297e7fe328 RCX: 00007f297e773e99 [ 48.295581][ T5958] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 48.297882][ T5958] RBP: 00007f297e7fe320 R08: 00007f297e72e6c0 R09: 00007f297e72e6c0 [ 48.300495][ T5958] R10: 00007f297e72e6c0 R11: 0000000000000246 R12: 00007f297e7cb074 [ 48.303215][ T5958] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007fffd5e26f58 [ 48.305473][ T5958] [ 48.306359][ T5958] BUG: Bad page state in process syz-executor194 pfn:30b83 [ 48.308245][ T5958] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2 pfn:0x30b83 [ 48.310896][ T5958] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 48.312791][ T5958] raw: 00fff00000000000 dead000000000040 ffff8880322fe000 0000000000000000 [ 48.315289][ T5958] raw: 0000000000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 48.317877][ T5958] page dumped because: page_pool leak [ 48.319824][ T5958] page_owner tracks the page as allocated [ 48.321715][ T5958] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5958, tgid 5957 (syz-executor194), ts 44777107600, free_ts 44761628326 [ 48.326723][ T5958] post_alloc_hook+0x2d1/0x350 [ 48.328379][ T5958] get_page_from_freelist+0x101e/0x3070 [ 48.329922][ T5958] __alloc_pages_noprof+0x223/0x25a0 [ 48.331253][ T5958] alloc_pages_bulk_noprof+0x77c/0x1110 [ 48.332791][ T5958] __page_pool_alloc_pages_slow+0x18f/0x770 [ 48.334778][ T5958] page_pool_alloc_netmem+0xc4/0x160 [ 48.336579][ T5958] page_pool_alloc_pages+0x1a/0x60 [ 48.338361][ T5958] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 48.340268][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 48.342080][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 48.343573][ T5958] __sys_bpf+0xfc6/0x49a0 [ 48.344751][ T5958] __x64_sys_bpf+0x78/0xc0 [ 48.346002][ T5958] do_syscall_64+0xcd/0x250 [ 48.347253][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.348838][ T5958] page last free pid 5962 tgid 5962 stack trace: [ 48.350439][ T5958] free_unref_page+0x5f4/0xdc0 [ 48.351705][ T5958] qlist_free_all+0x4e/0x120 [ 48.352979][ T5958] kasan_quarantine_reduce+0x192/0x1e0 [ 48.354461][ T5958] __kasan_slab_alloc+0x69/0x90 [ 48.355918][ T5958] kmem_cache_alloc_noprof+0x121/0x2f0 [ 48.357801][ T5958] getname_flags.part.0+0x4c/0x550 [ 48.359556][ T5958] getname+0x8d/0xe0 [ 48.360883][ T5958] do_sys_openat2+0x104/0x1e0 [ 48.362452][ T5958] __x64_sys_openat+0x175/0x210 [ 48.364095][ T5958] do_syscall_64+0xcd/0x250 [ 48.365469][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.367083][ T5958] Modules linked in: [ 48.368129][ T5958] CPU: 2 UID: 0 PID: 5958 Comm: syz-executor194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 48.371322][ T5958] Tainted: [B]=BAD_PAGE [ 48.372430][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 48.375215][ T5958] Call Trace: [ 48.376106][ T5958] [ 48.376896][ T5958] dump_stack_lvl+0x16c/0x1f0 [ 48.378113][ T5958] bad_page+0xb3/0x1f0 [ 48.379191][ T5958] ? __pfx_bad_page+0x10/0x10 [ 48.380437][ T5958] ? page_bad_reason+0x9d/0x1e0 [ 48.381748][ T5958] free_unref_page+0x657/0xdc0 [ 48.383190][ T5958] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 48.385130][ T5958] ? __phys_addr+0xc6/0x150 [ 48.386975][ T5958] skb_free_head+0xa0/0x1d0 [ 48.388738][ T5958] skb_release_data+0x560/0x730 [ 48.390350][ T5958] sk_skb_reason_drop+0x129/0x1a0 [ 48.392256][ T5958] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 48.394567][ T5958] ? kernel_text_address+0x8d/0x100 [ 48.396399][ T5958] ? hlock_class+0x4e/0x130 [ 48.398007][ T5958] ? __lock_acquire+0x163e/0x3ce0 [ 48.399943][ T5958] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 48.402855][ T5958] ? hlock_class+0x4e/0x130 [ 48.404757][ T5958] ? __lock_acquire+0xbdd/0x3ce0 [ 48.406535][ T5958] ? __pfx___lock_acquire+0x10/0x10 [ 48.408630][ T5958] __netif_receive_skb_list_core+0x357/0x950 [ 48.410926][ T5958] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 48.413188][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 48.414987][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 48.417261][ T5958] ? lock_acquire+0x2f/0xb0 [ 48.418935][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 48.421687][ T5958] netif_receive_skb_list_internal+0x753/0xdb0 [ 48.423409][ T5958] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 48.425345][ T5958] ? __pfx_eth_type_trans+0x10/0x10 [ 48.426942][ T5958] ? __build_skb_around+0x278/0x3b0 [ 48.428821][ T5958] netif_receive_skb_list+0x4f/0x4a0 [ 48.430641][ T5958] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 48.432922][ T5958] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 48.435421][ T5958] ? bpf_test_timer_continue+0x150/0x3d0 [ 48.437661][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 48.439603][ T5958] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 48.441766][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 48.443698][ T5958] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 48.445753][ T5958] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 48.447796][ T5958] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 48.449924][ T5958] ? 0xffffffffa0004340 [ 48.451635][ T5958] ? 0xffffffffa0004340 [ 48.453342][ T5958] ? 0xffffffffa0004340 [ 48.454865][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 48.456898][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 48.458625][ T5958] ? lock_acquire+0x2f/0xb0 [ 48.460228][ T5958] ? __fget_files+0x40/0x3f0 [ 48.461675][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 48.463812][ T5958] ? fput+0x30/0x390 [ 48.465285][ T5958] ? __bpf_prog_get+0xa0/0x290 [ 48.467049][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 48.468995][ T5958] __sys_bpf+0xfc6/0x49a0 [ 48.470686][ T5958] ? find_held_lock+0x2d/0x110 [ 48.472862][ T5958] ? __pfx___sys_bpf+0x10/0x10 [ 48.474307][ T5958] ? __might_fault+0x13b/0x190 [ 48.475836][ T5958] ? __pfx_lock_release+0x10/0x10 [ 48.477407][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 48.478950][ T5958] ? lock_acquire+0x2f/0xb0 [ 48.480338][ T5958] ? __might_fault+0xe3/0x190 [ 48.481746][ T5958] ? xfd_validate_state+0x5d/0x180 [ 48.483086][ T5958] ? rcu_is_watching+0x12/0xc0 [ 48.484362][ T5958] __x64_sys_bpf+0x78/0xc0 [ 48.485537][ T5958] ? lockdep_hardirqs_on+0x7c/0x110 [ 48.487574][ T5958] do_syscall_64+0xcd/0x250 [ 48.489128][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.490675][ T5958] RIP: 0033:0x7f297e773e99 [ 48.491877][ T5958] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 48.497171][ T5958] RSP: 002b:00007f297e72e228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 48.499903][ T5958] RAX: ffffffffffffffda RBX: 00007f297e7fe328 RCX: 00007f297e773e99 [ 48.502773][ T5958] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 48.505468][ T5958] RBP: 00007f297e7fe320 R08: 00007f297e72e6c0 R09: 00007f297e72e6c0 [ 48.508382][ T5958] R10: 00007f297e72e6c0 R11: 0000000000000246 R12: 00007f297e7cb074 [ 48.511524][ T5958] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007fffd5e26f58 [ 48.514324][ T5958] [ 48.515506][ T5958] BUG: Bad page state in process syz-executor194 pfn:30b82 [ 48.517863][ T5958] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888030b83a00 pfn:0x30b82 [ 48.520695][ T5958] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 48.522927][ T5958] raw: 00fff00000000000 dead000000000040 ffff8880322fe000 0000000000000000 [ 48.525466][ T5958] raw: ffff888030b83a00 0000000000000001 00000000ffffffff 0000000000000000 [ 48.527600][ T5958] page dumped because: page_pool leak [ 48.529436][ T5958] page_owner tracks the page as allocated [ 48.531165][ T5958] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5958, tgid 5957 (syz-executor194), ts 44777099720, free_ts 44761628326 [ 48.535637][ T5958] post_alloc_hook+0x2d1/0x350 [ 48.536960][ T5958] get_page_from_freelist+0x101e/0x3070 [ 48.538454][ T5958] __alloc_pages_noprof+0x223/0x25a0 [ 48.539890][ T5958] alloc_pages_bulk_noprof+0x77c/0x1110 [ 48.541453][ T5958] __page_pool_alloc_pages_slow+0x18f/0x770 [ 48.543160][ T5958] page_pool_alloc_netmem+0xc4/0x160 [ 48.544919][ T5958] page_pool_alloc_pages+0x1a/0x60 [ 48.546530][ T5958] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 48.548309][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 48.549687][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 48.551280][ T5958] __sys_bpf+0xfc6/0x49a0 [ 48.552464][ T5958] __x64_sys_bpf+0x78/0xc0 [ 48.553630][ T5958] do_syscall_64+0xcd/0x250 [ 48.554879][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.556442][ T5958] page last free pid 5962 tgid 5962 stack trace: [ 48.558078][ T5958] free_unref_page+0x5f4/0xdc0 [ 48.559609][ T5958] qlist_free_all+0x4e/0x120 [ 48.561290][ T5958] kasan_quarantine_reduce+0x192/0x1e0 [ 48.562782][ T5958] __kasan_slab_alloc+0x69/0x90 [ 48.564037][ T5958] kmem_cache_alloc_noprof+0x121/0x2f0 [ 48.565513][ T5958] getname_flags.part.0+0x4c/0x550 [ 48.566833][ T5958] getname+0x8d/0xe0 [ 48.567844][ T5958] do_sys_openat2+0x104/0x1e0 [ 48.569121][ T5958] __x64_sys_openat+0x175/0x210 [ 48.570401][ T5958] do_syscall_64+0xcd/0x250 [ 48.571696][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.573520][ T5958] Modules linked in: [ 48.574624][ T5958] CPU: 2 UID: 0 PID: 5958 Comm: syz-executor194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 48.577894][ T5958] Tainted: [B]=BAD_PAGE [ 48.579001][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 48.581755][ T5958] Call Trace: [ 48.582625][ T5958] [ 48.583329][ T5958] dump_stack_lvl+0x16c/0x1f0 [ 48.584580][ T5958] bad_page+0xb3/0x1f0 [ 48.585633][ T5958] ? __pfx_bad_page+0x10/0x10 [ 48.586821][ T5958] ? page_bad_reason+0x9d/0x1e0 [ 48.588123][ T5958] free_unref_page+0x657/0xdc0 [ 48.589544][ T5958] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 48.591103][ T5958] ? __phys_addr+0xc6/0x150 [ 48.592405][ T5958] skb_free_head+0xa0/0x1d0 [ 48.593600][ T5958] skb_release_data+0x560/0x730 [ 48.594904][ T5958] sk_skb_reason_drop+0x129/0x1a0 [ 48.596260][ T5958] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 48.597998][ T5958] ? kernel_text_address+0x8d/0x100 [ 48.599432][ T5958] ? hlock_class+0x4e/0x130 [ 48.600926][ T5958] ? __lock_acquire+0x163e/0x3ce0 [ 48.602311][ T5958] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 48.604446][ T5958] ? hlock_class+0x4e/0x130 [ 48.605729][ T5958] ? __lock_acquire+0xbdd/0x3ce0 [ 48.607218][ T5958] ? __pfx___lock_acquire+0x10/0x10 [ 48.608793][ T5958] __netif_receive_skb_list_core+0x357/0x950 [ 48.610575][ T5958] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 48.612555][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 48.614097][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 48.616053][ T5958] ? lock_acquire+0x2f/0xb0 [ 48.617306][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 48.618957][ T5958] netif_receive_skb_list_internal+0x753/0xdb0 [ 48.620725][ T5958] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 48.622477][ T5958] ? __pfx_eth_type_trans+0x10/0x10 [ 48.623857][ T5958] ? __build_skb_around+0x278/0x3b0 [ 48.625798][ T5958] netif_receive_skb_list+0x4f/0x4a0 [ 48.627257][ T5958] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 48.629096][ T5958] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 48.631009][ T5958] ? bpf_test_timer_continue+0x150/0x3d0 [ 48.632556][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 48.633908][ T5958] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 48.635407][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 48.636889][ T5958] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 48.638386][ T5958] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 48.639888][ T5958] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 48.641272][ T5958] ? 0xffffffffa0004340 [ 48.642541][ T5958] ? 0xffffffffa0004340 [ 48.643666][ T5958] ? 0xffffffffa0004340 [ 48.644884][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 48.646594][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 48.648040][ T5958] ? lock_acquire+0x2f/0xb0 [ 48.649279][ T5958] ? __fget_files+0x40/0x3f0 [ 48.650534][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 48.652268][ T5958] ? fput+0x30/0x390 [ 48.653359][ T5958] ? __bpf_prog_get+0xa0/0x290 [ 48.654670][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 48.656273][ T5958] __sys_bpf+0xfc6/0x49a0 [ 48.657464][ T5958] ? find_held_lock+0x2d/0x110 [ 48.658763][ T5958] ? __pfx___sys_bpf+0x10/0x10 [ 48.660007][ T5958] ? __might_fault+0x13b/0x190 [ 48.661359][ T5958] ? __pfx_lock_release+0x10/0x10 [ 48.662665][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 48.664026][ T5958] ? lock_acquire+0x2f/0xb0 [ 48.665214][ T5958] ? __might_fault+0xe3/0x190 [ 48.666466][ T5958] ? xfd_validate_state+0x5d/0x180 [ 48.667770][ T5958] ? rcu_is_watching+0x12/0xc0 [ 48.669030][ T5958] __x64_sys_bpf+0x78/0xc0 [ 48.670169][ T5958] ? lockdep_hardirqs_on+0x7c/0x110 [ 48.671496][ T5958] do_syscall_64+0xcd/0x250 [ 48.672666][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.674215][ T5958] RIP: 0033:0x7f297e773e99 [ 48.675331][ T5958] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 48.680312][ T5958] RSP: 002b:00007f297e72e228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 48.682460][ T5958] RAX: ffffffffffffffda RBX: 00007f297e7fe328 RCX: 00007f297e773e99 [ 48.684766][ T5958] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 48.686794][ T5958] RBP: 00007f297e7fe320 R08: 00007f297e72e6c0 R09: 00007f297e72e6c0 [ 48.688830][ T5958] R10: 00007f297e72e6c0 R11: 0000000000000246 R12: 00007f297e7cb074 [ 48.690836][ T5958] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007fffd5e26f58 [ 48.692911][ T5958] [ 48.693787][ T5958] BUG: Bad page state in process syz-executor194 pfn:321d3 [ 48.695674][ T5958] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2 pfn:0x321d3 [ 48.697903][ T5958] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 48.699672][ T5958] raw: 00fff00000000000 dead000000000040 ffff8880322fe000 0000000000000000 [ 48.701971][ T5958] raw: 0000000000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 48.704133][ T5958] page dumped because: page_pool leak [ 48.705520][ T5958] page_owner tracks the page as allocated [ 48.706988][ T5958] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5958, tgid 5957 (syz-executor194), ts 44777091849, free_ts 44761633272 [ 48.711680][ T5958] post_alloc_hook+0x2d1/0x350 [ 48.713171][ T5958] get_page_from_freelist+0x101e/0x3070 [ 48.714560][ T5958] __alloc_pages_noprof+0x223/0x25a0 [ 48.715955][ T5958] alloc_pages_bulk_noprof+0x77c/0x1110 [ 48.717510][ T5958] __page_pool_alloc_pages_slow+0x18f/0x770 [ 48.719127][ T5958] page_pool_alloc_netmem+0xc4/0x160 [ 48.720529][ T5958] page_pool_alloc_pages+0x1a/0x60 [ 48.721858][ T5958] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 48.723439][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 48.724913][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 48.726530][ T5958] __sys_bpf+0xfc6/0x49a0 [ 48.727792][ T5958] __x64_sys_bpf+0x78/0xc0 [ 48.728993][ T5958] do_syscall_64+0xcd/0x250 [ 48.730271][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.731911][ T5958] page last free pid 5962 tgid 5962 stack trace: [ 48.733553][ T5958] free_unref_page+0x5f4/0xdc0 [ 48.734748][ T5958] qlist_free_all+0x4e/0x120 [ 48.736014][ T5958] kasan_quarantine_reduce+0x192/0x1e0 [ 48.737464][ T5958] __kasan_slab_alloc+0x69/0x90 [ 48.738673][ T5958] kmem_cache_alloc_noprof+0x121/0x2f0 [ 48.740012][ T5958] getname_flags.part.0+0x4c/0x550 [ 48.741285][ T5958] getname+0x8d/0xe0 [ 48.742308][ T5958] do_sys_openat2+0x104/0x1e0 [ 48.743513][ T5958] __x64_sys_openat+0x175/0x210 [ 48.744924][ T5958] do_syscall_64+0xcd/0x250 [ 48.746101][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.747699][ T5958] Modules linked in: [ 48.749045][ T5958] CPU: 2 UID: 0 PID: 5958 Comm: syz-executor194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 48.752539][ T5958] Tainted: [B]=BAD_PAGE [ 48.753582][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 48.756210][ T5958] Call Trace: [ 48.757014][ T5958] [ 48.757726][ T5958] dump_stack_lvl+0x16c/0x1f0 [ 48.758895][ T5958] bad_page+0xb3/0x1f0 [ 48.759872][ T5958] ? __pfx_bad_page+0x10/0x10 [ 48.761578][ T5958] ? page_bad_reason+0x9d/0x1e0 [ 48.763045][ T5958] free_unref_page+0x657/0xdc0 [ 48.764450][ T5958] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 48.765968][ T5958] ? __phys_addr+0xc6/0x150 [ 48.767109][ T5958] skb_free_head+0xa0/0x1d0 [ 48.768270][ T5958] skb_release_data+0x560/0x730 [ 48.769505][ T5958] sk_skb_reason_drop+0x129/0x1a0 [ 48.770802][ T5958] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 48.772612][ T5958] ? kernel_text_address+0x8d/0x100 [ 48.773931][ T5958] ? hlock_class+0x4e/0x130 [ 48.775091][ T5958] ? __lock_acquire+0x163e/0x3ce0 [ 48.776481][ T5958] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 48.778240][ T5958] ? hlock_class+0x4e/0x130 [ 48.779353][ T5958] ? __lock_acquire+0xbdd/0x3ce0 [ 48.780622][ T5958] ? __pfx___lock_acquire+0x10/0x10 [ 48.781918][ T5958] __netif_receive_skb_list_core+0x357/0x950 [ 48.783460][ T5958] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 48.785145][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 48.786451][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 48.788036][ T5958] ? lock_acquire+0x2f/0xb0 [ 48.789163][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 48.790699][ T5958] netif_receive_skb_list_internal+0x753/0xdb0 [ 48.792272][ T5958] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 48.794010][ T5958] ? __pfx_eth_type_trans+0x10/0x10 [ 48.795376][ T5958] ? __build_skb_around+0x278/0x3b0 [ 48.796771][ T5958] netif_receive_skb_list+0x4f/0x4a0 [ 48.798172][ T5958] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 48.799895][ T5958] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 48.801667][ T5958] ? bpf_test_timer_continue+0x150/0x3d0 [ 48.803313][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 48.804774][ T5958] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 48.806298][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 48.807825][ T5958] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 48.809365][ T5958] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 48.810896][ T5958] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 48.812318][ T5958] ? 0xffffffffa0004340 [ 48.813406][ T5958] ? 0xffffffffa0004340 [ 48.814491][ T5958] ? 0xffffffffa0004340 [ 48.815571][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 48.817101][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 48.818481][ T5958] ? lock_acquire+0x2f/0xb0 [ 48.819666][ T5958] ? __fget_files+0x40/0x3f0 [ 48.820908][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 48.822438][ T5958] ? fput+0x30/0x390 [ 48.823392][ T5958] ? __bpf_prog_get+0xa0/0x290 [ 48.824790][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 48.826396][ T5958] __sys_bpf+0xfc6/0x49a0 [ 48.827916][ T5958] ? find_held_lock+0x2d/0x110 [ 48.829293][ T5958] ? __pfx___sys_bpf+0x10/0x10 [ 48.830556][ T5958] ? __might_fault+0x13b/0x190 [ 48.831816][ T5958] ? __pfx_lock_release+0x10/0x10 [ 48.833195][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 48.834550][ T5958] ? lock_acquire+0x2f/0xb0 [ 48.835746][ T5958] ? __might_fault+0xe3/0x190 [ 48.837020][ T5958] ? xfd_validate_state+0x5d/0x180 [ 48.838350][ T5958] ? rcu_is_watching+0x12/0xc0 [ 48.839615][ T5958] __x64_sys_bpf+0x78/0xc0 [ 48.840946][ T5958] ? lockdep_hardirqs_on+0x7c/0x110 [ 48.842515][ T5958] do_syscall_64+0xcd/0x250 [ 48.843916][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.845583][ T5958] RIP: 0033:0x7f297e773e99 [ 48.846971][ T5958] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 48.853509][ T5958] RSP: 002b:00007f297e72e228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 48.856179][ T5958] RAX: ffffffffffffffda RBX: 00007f297e7fe328 RCX: 00007f297e773e99 [ 48.858350][ T5958] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 48.860598][ T5958] RBP: 00007f297e7fe320 R08: 00007f297e72e6c0 R09: 00007f297e72e6c0 [ 48.862773][ T5958] R10: 00007f297e72e6c0 R11: 0000000000000246 R12: 00007f297e7cb074 [ 48.865625][ T5958] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007fffd5e26f58 [ 48.868540][ T5958] [ 48.869914][ T5958] BUG: Bad page state in process syz-executor194 pfn:321d2 [ 48.871988][ T5958] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880321d2400 pfn:0x321d2 [ 48.875512][ T5958] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 48.878172][ T5958] raw: 00fff00000000000 dead000000000040 ffff8880322fe000 0000000000000000 [ 48.881183][ T5958] raw: ffff8880321d2400 0000000000000001 00000000ffffffff 0000000000000000 [ 48.884484][ T5958] page dumped because: page_pool leak [ 48.886136][ T5958] page_owner tracks the page as allocated [ 48.887631][ T5958] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5958, tgid 5957 (syz-executor194), ts 44777084018, free_ts 44761633272 [ 48.892794][ T5958] post_alloc_hook+0x2d1/0x350 [ 48.894268][ T5958] get_page_from_freelist+0x101e/0x3070 [ 48.896001][ T5958] __alloc_pages_noprof+0x223/0x25a0 [ 48.897454][ T5958] alloc_pages_bulk_noprof+0x77c/0x1110 [ 48.899018][ T5958] __page_pool_alloc_pages_slow+0x18f/0x770 [ 48.900542][ T5958] page_pool_alloc_netmem+0xc4/0x160 [ 48.902192][ T5958] page_pool_alloc_pages+0x1a/0x60 [ 48.903724][ T5958] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 48.905566][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 48.907236][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 48.908858][ T5958] __sys_bpf+0xfc6/0x49a0 [ 48.910088][ T5958] __x64_sys_bpf+0x78/0xc0 [ 48.911243][ T5958] do_syscall_64+0xcd/0x250 [ 48.912431][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.913935][ T5958] page last free pid 5962 tgid 5962 stack trace: [ 48.915627][ T5958] free_unref_page+0x5f4/0xdc0 [ 48.916925][ T5958] qlist_free_all+0x4e/0x120 [ 48.918077][ T5958] kasan_quarantine_reduce+0x192/0x1e0 [ 48.919433][ T5958] __kasan_slab_alloc+0x69/0x90 [ 48.920940][ T5958] kmem_cache_alloc_noprof+0x121/0x2f0 [ 48.922377][ T5958] getname_flags.part.0+0x4c/0x550 [ 48.923727][ T5958] getname+0x8d/0xe0 [ 48.924786][ T5958] do_sys_openat2+0x104/0x1e0 [ 48.926363][ T5958] __x64_sys_openat+0x175/0x210 [ 48.927707][ T5958] do_syscall_64+0xcd/0x250 [ 48.928974][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.930549][ T5958] Modules linked in: [ 48.931580][ T5958] CPU: 2 UID: 0 PID: 5958 Comm: syz-executor194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 48.934864][ T5958] Tainted: [B]=BAD_PAGE [ 48.935978][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 48.938753][ T5958] Call Trace: [ 48.939652][ T5958] [ 48.940410][ T5958] dump_stack_lvl+0x16c/0x1f0 [ 48.941820][ T5958] bad_page+0xb3/0x1f0 [ 48.942819][ T5958] ? __pfx_bad_page+0x10/0x10 [ 48.944394][ T5958] ? page_bad_reason+0x9d/0x1e0 [ 48.946032][ T5958] free_unref_page+0x657/0xdc0 [ 48.947455][ T5958] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 48.949175][ T5958] ? __phys_addr+0xc6/0x150 [ 48.950373][ T5958] skb_free_head+0xa0/0x1d0 [ 48.951649][ T5958] skb_release_data+0x560/0x730 [ 48.953032][ T5958] sk_skb_reason_drop+0x129/0x1a0 [ 48.954408][ T5958] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 48.956256][ T5958] ? kernel_text_address+0x8d/0x100 [ 48.957646][ T5958] ? hlock_class+0x4e/0x130 [ 48.958862][ T5958] ? __lock_acquire+0x163e/0x3ce0 [ 48.960377][ T5958] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 48.962252][ T5958] ? hlock_class+0x4e/0x130 [ 48.963426][ T5958] ? __lock_acquire+0xbdd/0x3ce0 [ 48.964928][ T5958] ? __pfx___lock_acquire+0x10/0x10 [ 48.966518][ T5958] __netif_receive_skb_list_core+0x357/0x950 [ 48.968433][ T5958] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 48.970320][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 48.971730][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 48.973702][ T5958] ? lock_acquire+0x2f/0xb0 [ 48.974968][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 48.976961][ T5958] netif_receive_skb_list_internal+0x753/0xdb0 [ 48.978843][ T5958] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 48.980951][ T5958] ? __pfx_eth_type_trans+0x10/0x10 [ 48.982328][ T5958] ? __build_skb_around+0x278/0x3b0 [ 48.983679][ T5958] netif_receive_skb_list+0x4f/0x4a0 [ 48.985056][ T5958] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 48.987418][ T5958] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 48.989563][ T5958] ? bpf_test_timer_continue+0x150/0x3d0 [ 48.991079][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 48.992502][ T5958] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 48.994032][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 48.995578][ T5958] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 48.997241][ T5958] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 48.998763][ T5958] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 49.000424][ T5958] ? 0xffffffffa0004340 [ 49.001576][ T5958] ? 0xffffffffa0004340 [ 49.002669][ T5958] ? 0xffffffffa0004340 [ 49.003734][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 49.005798][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 49.007329][ T5958] ? lock_acquire+0x2f/0xb0 [ 49.008733][ T5958] ? __fget_files+0x40/0x3f0 [ 49.009997][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 49.011552][ T5958] ? fput+0x30/0x390 [ 49.012764][ T5958] ? __bpf_prog_get+0xa0/0x290 [ 49.014354][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 49.016000][ T5958] __sys_bpf+0xfc6/0x49a0 [ 49.017238][ T5958] ? find_held_lock+0x2d/0x110 [ 49.018753][ T5958] ? __pfx___sys_bpf+0x10/0x10 [ 49.020217][ T5958] ? __might_fault+0x13b/0x190 [ 49.021632][ T5958] ? __pfx_lock_release+0x10/0x10 [ 49.023135][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 49.024569][ T5958] ? lock_acquire+0x2f/0xb0 [ 49.025702][ T5958] ? __might_fault+0xe3/0x190 [ 49.026973][ T5958] ? xfd_validate_state+0x5d/0x180 [ 49.028304][ T5958] ? rcu_is_watching+0x12/0xc0 [ 49.029556][ T5958] __x64_sys_bpf+0x78/0xc0 [ 49.030715][ T5958] ? lockdep_hardirqs_on+0x7c/0x110 [ 49.032238][ T5958] do_syscall_64+0xcd/0x250 [ 49.033459][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.035012][ T5958] RIP: 0033:0x7f297e773e99 [ 49.036201][ T5958] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 49.041392][ T5958] RSP: 002b:00007f297e72e228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 49.043541][ T5958] RAX: ffffffffffffffda RBX: 00007f297e7fe328 RCX: 00007f297e773e99 [ 49.045593][ T5958] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 49.047617][ T5958] RBP: 00007f297e7fe320 R08: 00007f297e72e6c0 R09: 00007f297e72e6c0 [ 49.049717][ T5958] R10: 00007f297e72e6c0 R11: 0000000000000246 R12: 00007f297e7cb074 [ 49.051917][ T5958] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007fffd5e26f58 [ 49.054148][ T5958] [ 49.055151][ T5958] BUG: Bad page state in process syz-executor194 pfn:2947f [ 49.057103][ T5958] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2 pfn:0x2947f [ 49.059315][ T5958] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 49.061535][ T5958] raw: 00fff00000000000 dead000000000040 ffff8880322fe000 0000000000000000 [ 49.064118][ T5958] raw: 0000000000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 49.067009][ T5958] page dumped because: page_pool leak [ 49.068410][ T5958] page_owner tracks the page as allocated [ 49.070488][ T5958] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5958, tgid 5957 (syz-executor194), ts 44777076401, free_ts 44761723184 [ 49.075291][ T5958] post_alloc_hook+0x2d1/0x350 [ 49.076590][ T5958] get_page_from_freelist+0x101e/0x3070 [ 49.078055][ T5958] __alloc_pages_noprof+0x223/0x25a0 [ 49.079430][ T5958] alloc_pages_bulk_noprof+0x77c/0x1110 [ 49.081209][ T5958] __page_pool_alloc_pages_slow+0x18f/0x770 [ 49.082757][ T5958] page_pool_alloc_netmem+0xc4/0x160 [ 49.084281][ T5958] page_pool_alloc_pages+0x1a/0x60 [ 49.085746][ T5958] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 49.087318][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 49.089055][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 49.090601][ T5958] __sys_bpf+0xfc6/0x49a0 [ 49.091724][ T5958] __x64_sys_bpf+0x78/0xc0 [ 49.092908][ T5958] do_syscall_64+0xcd/0x250 [ 49.094143][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.095841][ T5958] page last free pid 5962 tgid 5962 stack trace: [ 49.097430][ T5958] free_unref_page+0x5f4/0xdc0 [ 49.098655][ T5958] qlist_free_all+0x4e/0x120 [ 49.099936][ T5958] kasan_quarantine_reduce+0x192/0x1e0 [ 49.101433][ T5958] __kasan_slab_alloc+0x69/0x90 [ 49.102935][ T5958] kmem_cache_alloc_noprof+0x121/0x2f0 [ 49.104564][ T5958] getname_flags.part.0+0x4c/0x550 [ 49.105957][ T5958] getname+0x8d/0xe0 [ 49.107014][ T5958] do_sys_openat2+0x104/0x1e0 [ 49.109749][ T5958] __x64_sys_openat+0x175/0x210 [ 49.111042][ T5958] do_syscall_64+0xcd/0x250 [ 49.112378][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.114083][ T5958] Modules linked in: [ 49.115301][ T5958] CPU: 2 UID: 0 PID: 5958 Comm: syz-executor194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 49.118889][ T5958] Tainted: [B]=BAD_PAGE [ 49.120316][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 49.123116][ T5958] Call Trace: [ 49.123980][ T5958] [ 49.124728][ T5958] dump_stack_lvl+0x16c/0x1f0 [ 49.125968][ T5958] bad_page+0xb3/0x1f0 [ 49.126995][ T5958] ? __pfx_bad_page+0x10/0x10 [ 49.128195][ T5958] ? page_bad_reason+0x9d/0x1e0 [ 49.129372][ T5958] free_unref_page+0x657/0xdc0 [ 49.130625][ T5958] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 49.132231][ T5958] ? __phys_addr+0xc6/0x150 [ 49.133358][ T5958] skb_free_head+0xa0/0x1d0 [ 49.134530][ T5958] skb_release_data+0x560/0x730 [ 49.135732][ T5958] sk_skb_reason_drop+0x129/0x1a0 [ 49.136999][ T5958] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 49.138595][ T5958] ? kernel_text_address+0x8d/0x100 [ 49.139875][ T5958] ? hlock_class+0x4e/0x130 [ 49.141032][ T5958] ? __lock_acquire+0x163e/0x3ce0 [ 49.142393][ T5958] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 49.144197][ T5958] ? hlock_class+0x4e/0x130 [ 49.145345][ T5958] ? __lock_acquire+0xbdd/0x3ce0 [ 49.146588][ T5958] ? __pfx___lock_acquire+0x10/0x10 [ 49.147991][ T5958] __netif_receive_skb_list_core+0x357/0x950 [ 49.149575][ T5958] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 49.151291][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 49.153008][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 49.154833][ T5958] ? lock_acquire+0x2f/0xb0 [ 49.156140][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 49.157820][ T5958] netif_receive_skb_list_internal+0x753/0xdb0 [ 49.159457][ T5958] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 49.161708][ T5958] ? __pfx_eth_type_trans+0x10/0x10 [ 49.163072][ T5958] ? __build_skb_around+0x278/0x3b0 [ 49.164648][ T5958] netif_receive_skb_list+0x4f/0x4a0 [ 49.166157][ T5958] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 49.167705][ T5958] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 49.169318][ T5958] ? bpf_test_timer_continue+0x150/0x3d0 [ 49.170718][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 49.172029][ T5958] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 49.173476][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 49.175019][ T5958] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 49.176535][ T5958] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 49.178008][ T5958] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 49.179344][ T5958] ? 0xffffffffa0004340 [ 49.180743][ T5958] ? 0xffffffffa0004340 [ 49.181830][ T5958] ? 0xffffffffa0004340 [ 49.183117][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 49.184916][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 49.186335][ T5958] ? lock_acquire+0x2f/0xb0 [ 49.187676][ T5958] ? __fget_files+0x40/0x3f0 [ 49.189526][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 49.191282][ T5958] ? fput+0x30/0x390 [ 49.192402][ T5958] ? __bpf_prog_get+0xa0/0x290 [ 49.193622][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 49.195143][ T5958] __sys_bpf+0xfc6/0x49a0 [ 49.196239][ T5958] ? find_held_lock+0x2d/0x110 [ 49.197426][ T5958] ? __pfx___sys_bpf+0x10/0x10 [ 49.198657][ T5958] ? __might_fault+0x13b/0x190 [ 49.199898][ T5958] ? __pfx_lock_release+0x10/0x10 [ 49.201334][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 49.202761][ T5958] ? lock_acquire+0x2f/0xb0 [ 49.203962][ T5958] ? __might_fault+0xe3/0x190 [ 49.205216][ T5958] ? xfd_validate_state+0x5d/0x180 [ 49.206789][ T5958] ? rcu_is_watching+0x12/0xc0 [ 49.208171][ T5958] __x64_sys_bpf+0x78/0xc0 [ 49.209452][ T5958] ? lockdep_hardirqs_on+0x7c/0x110 [ 49.210999][ T5958] do_syscall_64+0xcd/0x250 [ 49.212401][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.214125][ T5958] RIP: 0033:0x7f297e773e99 [ 49.215383][ T5958] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 49.220280][ T5958] RSP: 002b:00007f297e72e228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 49.222353][ T5958] RAX: ffffffffffffffda RBX: 00007f297e7fe328 RCX: 00007f297e773e99 [ 49.224537][ T5958] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 49.226665][ T5958] RBP: 00007f297e7fe320 R08: 00007f297e72e6c0 R09: 00007f297e72e6c0 [ 49.228802][ T5958] R10: 00007f297e72e6c0 R11: 0000000000000246 R12: 00007f297e7cb074 [ 49.230793][ T5958] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007fffd5e26f58 [ 49.232923][ T5958] [ 49.233803][ T5958] BUG: Bad page state in process syz-executor194 pfn:2947e [ 49.235696][ T5958] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802947fe00 pfn:0x2947e [ 49.238240][ T5958] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 49.240087][ T5958] raw: 00fff00000000000 dead000000000040 ffff8880322fe000 0000000000000000 [ 49.242555][ T5958] raw: ffff88802947fe00 0000000000000001 00000000ffffffff 0000000000000000 [ 49.245088][ T5958] page dumped because: page_pool leak [ 49.246773][ T5958] page_owner tracks the page as allocated [ 49.248677][ T5958] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5958, tgid 5957 (syz-executor194), ts 44777068551, free_ts 44761723184 [ 49.253372][ T5958] post_alloc_hook+0x2d1/0x350 [ 49.254661][ T5958] get_page_from_freelist+0x101e/0x3070 [ 49.256183][ T5958] __alloc_pages_noprof+0x223/0x25a0 [ 49.257530][ T5958] alloc_pages_bulk_noprof+0x77c/0x1110 [ 49.258887][ T5958] __page_pool_alloc_pages_slow+0x18f/0x770 [ 49.260651][ T5958] page_pool_alloc_netmem+0xc4/0x160 [ 49.262188][ T5958] page_pool_alloc_pages+0x1a/0x60 [ 49.263749][ T5958] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 49.265850][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 49.267234][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 49.268764][ T5958] __sys_bpf+0xfc6/0x49a0 [ 49.269941][ T5958] __x64_sys_bpf+0x78/0xc0 [ 49.271373][ T5958] do_syscall_64+0xcd/0x250 [ 49.272929][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.275127][ T5958] page last free pid 5962 tgid 5962 stack trace: [ 49.277286][ T5958] free_unref_page+0x5f4/0xdc0 [ 49.278456][ T5958] qlist_free_all+0x4e/0x120 [ 49.279593][ T5958] kasan_quarantine_reduce+0x192/0x1e0 [ 49.281126][ T5958] __kasan_slab_alloc+0x69/0x90 [ 49.282575][ T5958] kmem_cache_alloc_noprof+0x121/0x2f0 [ 49.284169][ T5958] getname_flags.part.0+0x4c/0x550 [ 49.286090][ T5958] getname+0x8d/0xe0 [ 49.287071][ T5958] do_sys_openat2+0x104/0x1e0 [ 49.288577][ T5958] __x64_sys_openat+0x175/0x210 [ 49.290114][ T5958] do_syscall_64+0xcd/0x250 [ 49.291255][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.292783][ T5958] Modules linked in: [ 49.293785][ T5958] CPU: 2 UID: 0 PID: 5958 Comm: syz-executor194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 49.297231][ T5958] Tainted: [B]=BAD_PAGE [ 49.298331][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 49.301411][ T5958] Call Trace: [ 49.302268][ T5958] [ 49.303063][ T5958] dump_stack_lvl+0x16c/0x1f0 [ 49.304319][ T5958] bad_page+0xb3/0x1f0 [ 49.305405][ T5958] ? __pfx_bad_page+0x10/0x10 [ 49.306632][ T5958] ? page_bad_reason+0x9d/0x1e0 [ 49.307921][ T5958] free_unref_page+0x657/0xdc0 [ 49.309201][ T5958] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 49.310670][ T5958] ? __phys_addr+0xc6/0x150 [ 49.311920][ T5958] skb_free_head+0xa0/0x1d0 [ 49.313250][ T5958] skb_release_data+0x560/0x730 [ 49.314585][ T5958] sk_skb_reason_drop+0x129/0x1a0 [ 49.315969][ T5958] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 49.317911][ T5958] ? kernel_text_address+0x8d/0x100 [ 49.319400][ T5958] ? hlock_class+0x4e/0x130 [ 49.321105][ T5958] ? __lock_acquire+0x163e/0x3ce0 [ 49.322536][ T5958] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 49.324589][ T5958] ? hlock_class+0x4e/0x130 [ 49.325868][ T5958] ? __lock_acquire+0xbdd/0x3ce0 [ 49.327826][ T5958] ? __pfx___lock_acquire+0x10/0x10 [ 49.329704][ T5958] __netif_receive_skb_list_core+0x357/0x950 [ 49.331372][ T5958] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 49.333095][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 49.334456][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 49.336053][ T5958] ? lock_acquire+0x2f/0xb0 [ 49.337269][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 49.338879][ T5958] netif_receive_skb_list_internal+0x753/0xdb0 [ 49.340684][ T5958] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 49.342514][ T5958] ? __pfx_eth_type_trans+0x10/0x10 [ 49.343888][ T5958] ? __build_skb_around+0x278/0x3b0 [ 49.345326][ T5958] netif_receive_skb_list+0x4f/0x4a0 [ 49.346784][ T5958] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 49.348813][ T5958] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 49.350663][ T5958] ? bpf_test_timer_continue+0x150/0x3d0 [ 49.352277][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 49.353644][ T5958] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 49.355119][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 49.356647][ T5958] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 49.358212][ T5958] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 49.359738][ T5958] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 49.361288][ T5958] ? 0xffffffffa0004340 [ 49.362510][ T5958] ? 0xffffffffa0004340 [ 49.363843][ T5958] ? 0xffffffffa0004340 [ 49.365076][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 49.367013][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 49.368539][ T5958] ? lock_acquire+0x2f/0xb0 [ 49.369939][ T5958] ? __fget_files+0x40/0x3f0 [ 49.371384][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 49.373035][ T5958] ? fput+0x30/0x390 [ 49.374137][ T5958] ? __bpf_prog_get+0xa0/0x290 [ 49.375494][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 49.377106][ T5958] __sys_bpf+0xfc6/0x49a0 [ 49.378248][ T5958] ? find_held_lock+0x2d/0x110 [ 49.379535][ T5958] ? __pfx___sys_bpf+0x10/0x10 [ 49.381085][ T5958] ? __might_fault+0x13b/0x190 [ 49.382502][ T5958] ? __pfx_lock_release+0x10/0x10 [ 49.383944][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 49.385500][ T5958] ? lock_acquire+0x2f/0xb0 [ 49.386746][ T5958] ? __might_fault+0xe3/0x190 [ 49.388013][ T5958] ? xfd_validate_state+0x5d/0x180 [ 49.389385][ T5958] ? rcu_is_watching+0x12/0xc0 [ 49.390825][ T5958] __x64_sys_bpf+0x78/0xc0 [ 49.392042][ T5958] ? lockdep_hardirqs_on+0x7c/0x110 [ 49.393502][ T5958] do_syscall_64+0xcd/0x250 [ 49.394756][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.396430][ T5958] RIP: 0033:0x7f297e773e99 [ 49.397626][ T5958] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 49.403847][ T5958] RSP: 002b:00007f297e72e228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 49.406957][ T5958] RAX: ffffffffffffffda RBX: 00007f297e7fe328 RCX: 00007f297e773e99 [ 49.410209][ T5958] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 49.412283][ T5958] RBP: 00007f297e7fe320 R08: 00007f297e72e6c0 R09: 00007f297e72e6c0 [ 49.414305][ T5958] R10: 00007f297e72e6c0 R11: 0000000000000246 R12: 00007f297e7cb074 [ 49.416378][ T5958] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007fffd5e26f58 [ 49.418360][ T5958] [ 49.419235][ T5958] BUG: Bad page state in process syz-executor194 pfn:2944d [ 49.421295][ T5958] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000002 pfn:0x2944d [ 49.424138][ T5958] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 49.426197][ T5958] raw: 00fff00000000000 dead000000000040 ffff8880322fe000 0000000000000000 [ 49.428507][ T5958] raw: ffff888000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 49.430825][ T5958] page dumped because: page_pool leak [ 49.432302][ T5958] page_owner tracks the page as allocated [ 49.433760][ T5958] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5958, tgid 5957 (syz-executor194), ts 44777060892, free_ts 44761812437 [ 49.438261][ T5958] post_alloc_hook+0x2d1/0x350 [ 49.439517][ T5958] get_page_from_freelist+0x101e/0x3070 [ 49.441032][ T5958] __alloc_pages_noprof+0x223/0x25a0 [ 49.442432][ T5958] alloc_pages_bulk_noprof+0x77c/0x1110 [ 49.443943][ T5958] __page_pool_alloc_pages_slow+0x18f/0x770 [ 49.445689][ T5958] page_pool_alloc_netmem+0xc4/0x160 [ 49.447159][ T5958] page_pool_alloc_pages+0x1a/0x60 [ 49.448726][ T5958] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 49.450552][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 49.452012][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 49.453463][ T5958] __sys_bpf+0xfc6/0x49a0 [ 49.454645][ T5958] __x64_sys_bpf+0x78/0xc0 [ 49.455866][ T5958] do_syscall_64+0xcd/0x250 [ 49.456992][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.458489][ T5958] page last free pid 5962 tgid 5962 stack trace: [ 49.460331][ T5958] free_unref_page+0x5f4/0xdc0 [ 49.461623][ T5958] __put_partials+0x14c/0x170 [ 49.462944][ T5958] qlist_free_all+0x4e/0x120 [ 49.464215][ T5958] kasan_quarantine_reduce+0x192/0x1e0 [ 49.465756][ T5958] __kasan_slab_alloc+0x69/0x90 [ 49.467429][ T5958] kmem_cache_alloc_noprof+0x121/0x2f0 [ 49.469260][ T5958] getname_flags.part.0+0x4c/0x550 [ 49.470762][ T5958] getname+0x8d/0xe0 [ 49.471949][ T5958] do_sys_openat2+0x104/0x1e0 [ 49.473380][ T5958] __x64_sys_openat+0x175/0x210 [ 49.474797][ T5958] do_syscall_64+0xcd/0x250 [ 49.476157][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.477823][ T5958] Modules linked in: [ 49.478877][ T5958] CPU: 2 UID: 0 PID: 5958 Comm: syz-executor194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 49.482469][ T5958] Tainted: [B]=BAD_PAGE [ 49.483672][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 49.486682][ T5958] Call Trace: [ 49.487585][ T5958] [ 49.488380][ T5958] dump_stack_lvl+0x16c/0x1f0 [ 49.489651][ T5958] bad_page+0xb3/0x1f0 [ 49.490901][ T5958] ? __pfx_bad_page+0x10/0x10 [ 49.492203][ T5958] ? page_bad_reason+0x9d/0x1e0 [ 49.493524][ T5958] free_unref_page+0x657/0xdc0 [ 49.494823][ T5958] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 49.496432][ T5958] ? __phys_addr+0xc6/0x150 [ 49.497661][ T5958] skb_free_head+0xa0/0x1d0 [ 49.498874][ T5958] skb_release_data+0x560/0x730 [ 49.500419][ T5958] sk_skb_reason_drop+0x129/0x1a0 [ 49.501911][ T5958] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 49.503663][ T5958] ? kernel_text_address+0x8d/0x100 [ 49.505038][ T5958] ? hlock_class+0x4e/0x130 [ 49.506397][ T5958] ? __lock_acquire+0x163e/0x3ce0 [ 49.508001][ T5958] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 49.510220][ T5958] ? hlock_class+0x4e/0x130 [ 49.511511][ T5958] ? __lock_acquire+0xbdd/0x3ce0 [ 49.512830][ T5958] ? __pfx___lock_acquire+0x10/0x10 [ 49.514310][ T5958] __netif_receive_skb_list_core+0x357/0x950 [ 49.515917][ T5958] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 49.517614][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 49.518949][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 49.520621][ T5958] ? lock_acquire+0x2f/0xb0 [ 49.521780][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 49.523388][ T5958] netif_receive_skb_list_internal+0x753/0xdb0 [ 49.525034][ T5958] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 49.526723][ T5958] ? __pfx_eth_type_trans+0x10/0x10 [ 49.528052][ T5958] ? __build_skb_around+0x278/0x3b0 [ 49.529462][ T5958] netif_receive_skb_list+0x4f/0x4a0 [ 49.530827][ T5958] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 49.532551][ T5958] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 49.534208][ T5958] ? bpf_test_timer_continue+0x150/0x3d0 [ 49.535722][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 49.537150][ T5958] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 49.538846][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 49.540818][ T5958] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 49.542598][ T5958] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 49.544364][ T5958] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 49.545923][ T5958] ? 0xffffffffa0004340 [ 49.547123][ T5958] ? 0xffffffffa0004340 [ 49.548367][ T5958] ? 0xffffffffa0004340 [ 49.549610][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 49.551262][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 49.552687][ T5958] ? lock_acquire+0x2f/0xb0 [ 49.553914][ T5958] ? __fget_files+0x40/0x3f0 [ 49.555171][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 49.556712][ T5958] ? fput+0x30/0x390 [ 49.557766][ T5958] ? __bpf_prog_get+0xa0/0x290 [ 49.559038][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 49.560747][ T5958] __sys_bpf+0xfc6/0x49a0 [ 49.562230][ T5958] ? find_held_lock+0x2d/0x110 [ 49.563553][ T5958] ? __pfx___sys_bpf+0x10/0x10 [ 49.565238][ T5958] ? __might_fault+0x13b/0x190 [ 49.566712][ T5958] ? __pfx_lock_release+0x10/0x10 [ 49.568463][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 49.570010][ T5958] ? lock_acquire+0x2f/0xb0 [ 49.571336][ T5958] ? __might_fault+0xe3/0x190 [ 49.572742][ T5958] ? xfd_validate_state+0x5d/0x180 [ 49.574326][ T5958] ? rcu_is_watching+0x12/0xc0 [ 49.575687][ T5958] __x64_sys_bpf+0x78/0xc0 [ 49.576872][ T5958] ? lockdep_hardirqs_on+0x7c/0x110 [ 49.578230][ T5958] do_syscall_64+0xcd/0x250 [ 49.579418][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.580925][ T5958] RIP: 0033:0x7f297e773e99 [ 49.582094][ T5958] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 49.586946][ T5958] RSP: 002b:00007f297e72e228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 49.589134][ T5958] RAX: ffffffffffffffda RBX: 00007f297e7fe328 RCX: 00007f297e773e99 [ 49.591159][ T5958] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 49.593504][ T5958] RBP: 00007f297e7fe320 R08: 00007f297e72e6c0 R09: 00007f297e72e6c0 [ 49.595744][ T5958] R10: 00007f297e72e6c0 R11: 0000000000000246 R12: 00007f297e7cb074 [ 49.597856][ T5958] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007fffd5e26f58 [ 49.599948][ T5958] [ 49.600879][ T5958] BUG: Bad page state in process syz-executor194 pfn:2944c [ 49.602875][ T5958] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802944da00 pfn:0x2944c [ 49.605951][ T5958] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 49.607892][ T5958] raw: 00fff00000000000 dead000000000040 ffff8880322fe000 0000000000000000 [ 49.610782][ T5958] raw: ffff88802944da00 0000000000000001 00000000ffffffff 0000000000000000 [ 49.613048][ T5958] page dumped because: page_pool leak [ 49.614450][ T5958] page_owner tracks the page as allocated [ 49.615980][ T5958] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5958, tgid 5957 (syz-executor194), ts 44777052809, free_ts 44761812437 [ 49.620508][ T5958] post_alloc_hook+0x2d1/0x350 [ 49.622204][ T5958] get_page_from_freelist+0x101e/0x3070 [ 49.623951][ T5958] __alloc_pages_noprof+0x223/0x25a0 [ 49.625571][ T5958] alloc_pages_bulk_noprof+0x77c/0x1110 [ 49.627357][ T5958] __page_pool_alloc_pages_slow+0x18f/0x770 [ 49.629245][ T5958] page_pool_alloc_netmem+0xc4/0x160 [ 49.630839][ T5958] page_pool_alloc_pages+0x1a/0x60 [ 49.632441][ T5958] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 49.634252][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 49.635715][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 49.637153][ T5958] __sys_bpf+0xfc6/0x49a0 [ 49.638297][ T5958] __x64_sys_bpf+0x78/0xc0 [ 49.639455][ T5958] do_syscall_64+0xcd/0x250 [ 49.640634][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.642268][ T5958] page last free pid 5962 tgid 5962 stack trace: [ 49.643814][ T5958] free_unref_page+0x5f4/0xdc0 [ 49.645091][ T5958] __put_partials+0x14c/0x170 [ 49.646305][ T5958] qlist_free_all+0x4e/0x120 [ 49.647464][ T5958] kasan_quarantine_reduce+0x192/0x1e0 [ 49.648839][ T5958] __kasan_slab_alloc+0x69/0x90 [ 49.650083][ T5958] kmem_cache_alloc_noprof+0x121/0x2f0 [ 49.651451][ T5958] getname_flags.part.0+0x4c/0x550 [ 49.652737][ T5958] getname+0x8d/0xe0 [ 49.653740][ T5958] do_sys_openat2+0x104/0x1e0 [ 49.655009][ T5958] __x64_sys_openat+0x175/0x210 [ 49.656269][ T5958] do_syscall_64+0xcd/0x250 [ 49.657447][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.658955][ T5958] Modules linked in: [ 49.660029][ T5958] CPU: 2 UID: 0 PID: 5958 Comm: syz-executor194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 49.663378][ T5958] Tainted: [B]=BAD_PAGE [ 49.664475][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 49.667199][ T5958] Call Trace: [ 49.668069][ T5958] [ 49.668806][ T5958] dump_stack_lvl+0x16c/0x1f0 [ 49.670278][ T5958] bad_page+0xb3/0x1f0 [ 49.671328][ T5958] ? __pfx_bad_page+0x10/0x10 [ 49.672585][ T5958] ? page_bad_reason+0x9d/0x1e0 [ 49.673876][ T5958] free_unref_page+0x657/0xdc0 [ 49.675221][ T5958] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 49.676918][ T5958] ? __phys_addr+0xc6/0x150 [ 49.678253][ T5958] skb_free_head+0xa0/0x1d0 [ 49.679592][ T5958] skb_release_data+0x560/0x730 [ 49.680853][ T5958] sk_skb_reason_drop+0x129/0x1a0 [ 49.682154][ T5958] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 49.683765][ T5958] ? kernel_text_address+0x8d/0x100 [ 49.685079][ T5958] ? hlock_class+0x4e/0x130 [ 49.686216][ T5958] ? __lock_acquire+0x163e/0x3ce0 [ 49.687471][ T5958] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 49.689250][ T5958] ? hlock_class+0x4e/0x130 [ 49.690411][ T5958] ? __lock_acquire+0xbdd/0x3ce0 [ 49.691652][ T5958] ? __pfx___lock_acquire+0x10/0x10 [ 49.692971][ T5958] __netif_receive_skb_list_core+0x357/0x950 [ 49.694448][ T5958] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 49.696089][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 49.697456][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 49.699077][ T5958] ? lock_acquire+0x2f/0xb0 [ 49.700311][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 49.702457][ T5958] netif_receive_skb_list_internal+0x753/0xdb0 [ 49.704364][ T5958] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 49.706204][ T5958] ? __pfx_eth_type_trans+0x10/0x10 [ 49.708244][ T5958] ? __build_skb_around+0x278/0x3b0 [ 49.709960][ T5958] netif_receive_skb_list+0x4f/0x4a0 [ 49.711339][ T5958] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 49.712967][ T5958] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 49.714681][ T5958] ? bpf_test_timer_continue+0x150/0x3d0 [ 49.716192][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 49.717574][ T5958] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 49.719045][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 49.720680][ T5958] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 49.722156][ T5958] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 49.723626][ T5958] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 49.725026][ T5958] ? 0xffffffffa0004340 [ 49.726112][ T5958] ? 0xffffffffa0004340 [ 49.727271][ T5958] ? 0xffffffffa0004340 [ 49.728807][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 49.730540][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 49.731882][ T5958] ? lock_acquire+0x2f/0xb0 [ 49.733029][ T5958] ? __fget_files+0x40/0x3f0 [ 49.734154][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 49.735598][ T5958] ? fput+0x30/0x390 [ 49.736605][ T5958] ? __bpf_prog_get+0xa0/0x290 [ 49.737784][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 49.739248][ T5958] __sys_bpf+0xfc6/0x49a0 [ 49.740539][ T5958] ? find_held_lock+0x2d/0x110 [ 49.741944][ T5958] ? __pfx___sys_bpf+0x10/0x10 [ 49.743338][ T5958] ? __might_fault+0x13b/0x190 [ 49.744838][ T5958] ? __pfx_lock_release+0x10/0x10 [ 49.746471][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 49.747823][ T5958] ? lock_acquire+0x2f/0xb0 [ 49.749017][ T5958] ? __might_fault+0xe3/0x190 [ 49.750219][ T5958] ? xfd_validate_state+0x5d/0x180 [ 49.751562][ T5958] ? rcu_is_watching+0x12/0xc0 [ 49.752881][ T5958] __x64_sys_bpf+0x78/0xc0 [ 49.754089][ T5958] ? lockdep_hardirqs_on+0x7c/0x110 [ 49.755468][ T5958] do_syscall_64+0xcd/0x250 [ 49.756701][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.758240][ T5958] RIP: 0033:0x7f297e773e99 [ 49.759377][ T5958] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 49.764542][ T5958] RSP: 002b:00007f297e72e228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 49.766591][ T5958] RAX: ffffffffffffffda RBX: 00007f297e7fe328 RCX: 00007f297e773e99 [ 49.768816][ T5958] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 49.770775][ T5958] RBP: 00007f297e7fe320 R08: 00007f297e72e6c0 R09: 00007f297e72e6c0 [ 49.772871][ T5958] R10: 00007f297e72e6c0 R11: 0000000000000246 R12: 00007f297e7cb074 [ 49.774941][ T5958] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007fffd5e26f58 [ 49.777009][ T5958] [ 49.777835][ T5958] BUG: Bad page state in process syz-executor194 pfn:32449 [ 49.779659][ T5958] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x8 pfn:0x32449 [ 49.782299][ T5958] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 49.784465][ T5958] raw: 00fff00000000000 dead000000000040 ffff8880322fe000 0000000000000000 [ 49.786801][ T5958] raw: 0000000000000008 0000000000000001 00000000ffffffff 0000000000000000 [ 49.789399][ T5958] page dumped because: page_pool leak [ 49.791101][ T5958] page_owner tracks the page as allocated [ 49.792922][ T5958] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5958, tgid 5957 (syz-executor194), ts 44777043952, free_ts 42707652699 [ 49.798147][ T5958] post_alloc_hook+0x2d1/0x350 [ 49.799544][ T5958] get_page_from_freelist+0x101e/0x3070 [ 49.801356][ T5958] __alloc_pages_noprof+0x223/0x25a0 [ 49.802964][ T5958] alloc_pages_bulk_noprof+0x77c/0x1110 [ 49.804669][ T5958] __page_pool_alloc_pages_slow+0x18f/0x770 [ 49.806692][ T5958] page_pool_alloc_netmem+0xc4/0x160 [ 49.808219][ T5958] page_pool_alloc_pages+0x1a/0x60 [ 49.809579][ T5958] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 49.811219][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 49.812573][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 49.813933][ T5958] __sys_bpf+0xfc6/0x49a0 [ 49.815132][ T5958] __x64_sys_bpf+0x78/0xc0 [ 49.816318][ T5958] do_syscall_64+0xcd/0x250 [ 49.817464][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.818962][ T5958] page last free pid 5929 tgid 5929 stack trace: [ 49.820595][ T5958] free_unref_page+0x5f4/0xdc0 [ 49.821998][ T5958] __put_partials+0x14c/0x170 [ 49.823244][ T5958] qlist_free_all+0x4e/0x120 [ 49.824511][ T5958] kasan_quarantine_reduce+0x192/0x1e0 [ 49.826096][ T5958] __kasan_slab_alloc+0x69/0x90 [ 49.827457][ T5958] kmem_cache_alloc_noprof+0x121/0x2f0 [ 49.828986][ T5958] getname_flags.part.0+0x4c/0x550 [ 49.830439][ T5958] getname+0x8d/0xe0 [ 49.831556][ T5958] do_sys_openat2+0x104/0x1e0 [ 49.832913][ T5958] __x64_sys_openat+0x175/0x210 [ 49.834276][ T5958] do_syscall_64+0xcd/0x250 [ 49.835615][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.837221][ T5958] Modules linked in: [ 49.838247][ T5958] CPU: 2 UID: 0 PID: 5958 Comm: syz-executor194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 49.841728][ T5958] Tainted: [B]=BAD_PAGE [ 49.842971][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 49.846105][ T5958] Call Trace: [ 49.847064][ T5958] [ 49.848330][ T5958] dump_stack_lvl+0x16c/0x1f0 [ 49.849650][ T5958] bad_page+0xb3/0x1f0 [ 49.850734][ T5958] ? __pfx_bad_page+0x10/0x10 [ 49.851986][ T5958] ? page_bad_reason+0x9d/0x1e0 [ 49.853358][ T5958] free_unref_page+0x657/0xdc0 [ 49.854851][ T5958] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 49.856613][ T5958] ? __phys_addr+0xc6/0x150 [ 49.858053][ T5958] skb_free_head+0xa0/0x1d0 [ 49.859316][ T5958] skb_release_data+0x560/0x730 [ 49.860781][ T5958] sk_skb_reason_drop+0x129/0x1a0 [ 49.862528][ T5958] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 49.864289][ T5958] ? kernel_text_address+0x8d/0x100 [ 49.865682][ T5958] ? hlock_class+0x4e/0x130 [ 49.867158][ T5958] ? __lock_acquire+0x163e/0x3ce0 [ 49.868464][ T5958] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 49.870214][ T5958] ? hlock_class+0x4e/0x130 [ 49.871337][ T5958] ? __lock_acquire+0xbdd/0x3ce0 [ 49.872767][ T5958] ? __pfx___lock_acquire+0x10/0x10 [ 49.874247][ T5958] __netif_receive_skb_list_core+0x357/0x950 [ 49.875751][ T5958] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 49.877347][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 49.878645][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 49.880276][ T5958] ? lock_acquire+0x2f/0xb0 [ 49.881458][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 49.883285][ T5958] netif_receive_skb_list_internal+0x753/0xdb0 [ 49.885337][ T5958] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 49.887324][ T5958] ? __pfx_eth_type_trans+0x10/0x10 [ 49.888835][ T5958] ? __build_skb_around+0x278/0x3b0 [ 49.890550][ T5958] netif_receive_skb_list+0x4f/0x4a0 [ 49.892179][ T5958] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 49.894053][ T5958] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 49.895918][ T5958] ? bpf_test_timer_continue+0x150/0x3d0 [ 49.897540][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 49.899026][ T5958] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 49.900590][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 49.902238][ T5958] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 49.904166][ T5958] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 49.905858][ T5958] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 49.907556][ T5958] ? 0xffffffffa0004340 [ 49.908757][ T5958] ? 0xffffffffa0004340 [ 49.909876][ T5958] ? 0xffffffffa0004340 [ 49.910971][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 49.912650][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 49.914147][ T5958] ? lock_acquire+0x2f/0xb0 [ 49.915418][ T5958] ? __fget_files+0x40/0x3f0 [ 49.916812][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 49.918497][ T5958] ? fput+0x30/0x390 [ 49.919615][ T5958] ? __bpf_prog_get+0xa0/0x290 [ 49.921015][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 49.922690][ T5958] __sys_bpf+0xfc6/0x49a0 [ 49.924192][ T5958] ? find_held_lock+0x2d/0x110 [ 49.925613][ T5958] ? __pfx___sys_bpf+0x10/0x10 [ 49.927077][ T5958] ? __might_fault+0x13b/0x190 [ 49.928393][ T5958] ? __pfx_lock_release+0x10/0x10 [ 49.930021][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 49.931384][ T5958] ? lock_acquire+0x2f/0xb0 [ 49.932590][ T5958] ? __might_fault+0xe3/0x190 [ 49.933833][ T5958] ? xfd_validate_state+0x5d/0x180 [ 49.935156][ T5958] ? rcu_is_watching+0x12/0xc0 [ 49.936422][ T5958] __x64_sys_bpf+0x78/0xc0 [ 49.937583][ T5958] ? lockdep_hardirqs_on+0x7c/0x110 [ 49.938914][ T5958] do_syscall_64+0xcd/0x250 [ 49.940110][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.941646][ T5958] RIP: 0033:0x7f297e773e99 [ 49.942960][ T5958] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 49.948534][ T5958] RSP: 002b:00007f297e72e228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 49.950712][ T5958] RAX: ffffffffffffffda RBX: 00007f297e7fe328 RCX: 00007f297e773e99 [ 49.952767][ T5958] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 49.954818][ T5958] RBP: 00007f297e7fe320 R08: 00007f297e72e6c0 R09: 00007f297e72e6c0 [ 49.956868][ T5958] R10: 00007f297e72e6c0 R11: 0000000000000246 R12: 00007f297e7cb074 [ 49.958945][ T5958] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007fffd5e26f58 [ 49.961015][ T5958] [ 49.961982][ T5958] BUG: Bad page state in process syz-executor194 pfn:23f26 [ 49.964114][ T5958] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888023f26e88 pfn:0x23f26 [ 49.967293][ T5958] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 49.969273][ T5958] raw: 00fff00000000000 dead000000000040 ffff8880322fe000 0000000000000000 [ 49.971632][ T5958] raw: ffff888023f26e88 0000000000000001 00000000ffffffff 0000000000000000 [ 49.974245][ T5958] page dumped because: page_pool leak [ 49.975710][ T5958] page_owner tracks the page as allocated [ 49.977203][ T5958] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5958, tgid 5957 (syz-executor194), ts 44777035483, free_ts 44761528386 [ 49.982069][ T5958] post_alloc_hook+0x2d1/0x350 [ 49.983591][ T5958] get_page_from_freelist+0x101e/0x3070 [ 49.985108][ T5958] __alloc_pages_noprof+0x223/0x25a0 [ 49.986470][ T5958] alloc_pages_bulk_noprof+0x77c/0x1110 [ 49.987860][ T5958] __page_pool_alloc_pages_slow+0x18f/0x770 [ 49.989304][ T5958] page_pool_alloc_netmem+0xc4/0x160 [ 49.990648][ T5958] page_pool_alloc_pages+0x1a/0x60 [ 49.992160][ T5958] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 49.993753][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 49.995179][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 49.996617][ T5958] __sys_bpf+0xfc6/0x49a0 [ 49.997851][ T5958] __x64_sys_bpf+0x78/0xc0 [ 49.999367][ T5958] do_syscall_64+0xcd/0x250 [ 50.000895][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.002814][ T5958] page last free pid 5962 tgid 5962 stack trace: [ 50.004953][ T5958] free_unref_page+0x5f4/0xdc0 [ 50.006450][ T5958] qlist_free_all+0x4e/0x120 [ 50.007841][ T5958] kasan_quarantine_reduce+0x192/0x1e0 [ 50.009259][ T5958] __kasan_slab_alloc+0x69/0x90 [ 50.010536][ T5958] kmem_cache_alloc_noprof+0x121/0x2f0 [ 50.012141][ T5958] getname_flags.part.0+0x4c/0x550 [ 50.013478][ T5958] getname+0x8d/0xe0 [ 50.014566][ T5958] do_sys_openat2+0x104/0x1e0 [ 50.015827][ T5958] __x64_sys_openat+0x175/0x210 [ 50.017086][ T5958] do_syscall_64+0xcd/0x250 [ 50.018282][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.019821][ T5958] Modules linked in: [ 50.021031][ T5958] CPU: 2 UID: 0 PID: 5958 Comm: syz-executor194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 50.024647][ T5958] Tainted: [B]=BAD_PAGE [ 50.025817][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 50.028924][ T5958] Call Trace: [ 50.030013][ T5958] [ 50.030792][ T5958] dump_stack_lvl+0x16c/0x1f0 [ 50.032024][ T5958] bad_page+0xb3/0x1f0 [ 50.033084][ T5958] ? __pfx_bad_page+0x10/0x10 [ 50.034326][ T5958] ? page_bad_reason+0x9d/0x1e0 [ 50.035608][ T5958] free_unref_page+0x657/0xdc0 [ 50.036820][ T5958] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 50.038328][ T5958] ? __phys_addr+0xc6/0x150 [ 50.039494][ T5958] skb_free_head+0xa0/0x1d0 [ 50.040682][ T5958] skb_release_data+0x560/0x730 [ 50.042232][ T5958] sk_skb_reason_drop+0x129/0x1a0 [ 50.043643][ T5958] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 50.045558][ T5958] ? kernel_text_address+0x8d/0x100 [ 50.046958][ T5958] ? hlock_class+0x4e/0x130 [ 50.048421][ T5958] ? __lock_acquire+0x163e/0x3ce0 [ 50.049777][ T5958] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 50.051638][ T5958] ? hlock_class+0x4e/0x130 [ 50.052844][ T5958] ? __lock_acquire+0xbdd/0x3ce0 [ 50.054141][ T5958] ? __pfx___lock_acquire+0x10/0x10 [ 50.055504][ T5958] __netif_receive_skb_list_core+0x357/0x950 [ 50.057145][ T5958] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 50.058824][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 50.060479][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 50.062099][ T5958] ? lock_acquire+0x2f/0xb0 [ 50.063271][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 50.064893][ T5958] netif_receive_skb_list_internal+0x753/0xdb0 [ 50.066526][ T5958] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 50.068217][ T5958] ? __pfx_eth_type_trans+0x10/0x10 [ 50.069557][ T5958] ? __build_skb_around+0x278/0x3b0 [ 50.070994][ T5958] netif_receive_skb_list+0x4f/0x4a0 [ 50.072413][ T5958] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 50.074040][ T5958] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 50.075898][ T5958] ? bpf_test_timer_continue+0x150/0x3d0 [ 50.077536][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 50.079030][ T5958] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 50.080782][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 50.082347][ T5958] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 50.083934][ T5958] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 50.085485][ T5958] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 50.087035][ T5958] ? 0xffffffffa0004340 [ 50.088123][ T5958] ? 0xffffffffa0004340 [ 50.089191][ T5958] ? 0xffffffffa0004340 [ 50.090263][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 50.091877][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 50.093266][ T5958] ? lock_acquire+0x2f/0xb0 [ 50.094458][ T5958] ? __fget_files+0x40/0x3f0 [ 50.095658][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 50.097161][ T5958] ? fput+0x30/0x390 [ 50.098190][ T5958] ? __bpf_prog_get+0xa0/0x290 [ 50.099430][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 50.101015][ T5958] __sys_bpf+0xfc6/0x49a0 [ 50.102266][ T5958] ? find_held_lock+0x2d/0x110 [ 50.103724][ T5958] ? __pfx___sys_bpf+0x10/0x10 [ 50.105667][ T5958] ? __might_fault+0x13b/0x190 [ 50.107839][ T5958] ? __pfx_lock_release+0x10/0x10 [ 50.109676][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 50.111343][ T5958] ? lock_acquire+0x2f/0xb0 [ 50.112566][ T5958] ? __might_fault+0xe3/0x190 [ 50.113765][ T5958] ? xfd_validate_state+0x5d/0x180 [ 50.115060][ T5958] ? rcu_is_watching+0x12/0xc0 [ 50.116300][ T5958] __x64_sys_bpf+0x78/0xc0 [ 50.117467][ T5958] ? lockdep_hardirqs_on+0x7c/0x110 [ 50.118809][ T5958] do_syscall_64+0xcd/0x250 [ 50.119998][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.121851][ T5958] RIP: 0033:0x7f297e773e99 [ 50.122997][ T5958] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 50.128916][ T5958] RSP: 002b:00007f297e72e228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 50.131218][ T5958] RAX: ffffffffffffffda RBX: 00007f297e7fe328 RCX: 00007f297e773e99 [ 50.133264][ T5958] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 50.135330][ T5958] RBP: 00007f297e7fe320 R08: 00007f297e72e6c0 R09: 00007f297e72e6c0 [ 50.137484][ T5958] R10: 00007f297e72e6c0 R11: 0000000000000246 R12: 00007f297e7cb074 [ 50.139858][ T5958] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007fffd5e26f58 [ 50.142594][ T5958] [ 50.143857][ T5958] BUG: Bad page state in process syz-executor194 pfn:278d6 [ 50.146619][ T5958] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880278d6798 pfn:0x278d6 [ 50.149555][ T5958] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 50.151465][ T5958] raw: 00fff00000000000 dead000000000040 ffff8880322fe000 0000000000000000 [ 50.153690][ T5958] raw: ffff8880278d6798 0000000000000001 00000000ffffffff 0000000000000000 [ 50.155937][ T5958] page dumped because: page_pool leak [ 50.157421][ T5958] page_owner tracks the page as allocated [ 50.158872][ T5958] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5958, tgid 5957 (syz-executor194), ts 44777027006, free_ts 44761539070 [ 50.163477][ T5958] post_alloc_hook+0x2d1/0x350 [ 50.164736][ T5958] get_page_from_freelist+0x101e/0x3070 [ 50.166211][ T5958] __alloc_pages_noprof+0x223/0x25a0 [ 50.167578][ T5958] alloc_pages_bulk_noprof+0x77c/0x1110 [ 50.169622][ T5958] __page_pool_alloc_pages_slow+0x18f/0x770 [ 50.171279][ T5958] page_pool_alloc_netmem+0xc4/0x160 [ 50.172695][ T5958] page_pool_alloc_pages+0x1a/0x60 [ 50.174001][ T5958] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 50.175810][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 50.177423][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 50.178994][ T5958] __sys_bpf+0xfc6/0x49a0 [ 50.180587][ T5958] __x64_sys_bpf+0x78/0xc0 [ 50.182013][ T5958] do_syscall_64+0xcd/0x250 [ 50.183257][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.184934][ T5958] page last free pid 5962 tgid 5962 stack trace: [ 50.186855][ T5958] free_unref_page+0x5f4/0xdc0 [ 50.188165][ T5958] qlist_free_all+0x4e/0x120 [ 50.189555][ T5958] kasan_quarantine_reduce+0x192/0x1e0 [ 50.191034][ T5958] __kasan_slab_alloc+0x69/0x90 [ 50.192514][ T5958] kmem_cache_alloc_noprof+0x121/0x2f0 [ 50.193924][ T5958] getname_flags.part.0+0x4c/0x550 [ 50.195365][ T5958] getname+0x8d/0xe0 [ 50.196533][ T5958] do_sys_openat2+0x104/0x1e0 [ 50.197882][ T5958] __x64_sys_openat+0x175/0x210 [ 50.199302][ T5958] do_syscall_64+0xcd/0x250 [ 50.200779][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.202531][ T5958] Modules linked in: [ 50.203767][ T5958] CPU: 2 UID: 0 PID: 5958 Comm: syz-executor194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 50.207100][ T5958] Tainted: [B]=BAD_PAGE [ 50.208195][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 50.211328][ T5958] Call Trace: [ 50.212243][ T5958] [ 50.213024][ T5958] dump_stack_lvl+0x16c/0x1f0 [ 50.214275][ T5958] bad_page+0xb3/0x1f0 [ 50.215341][ T5958] ? __pfx_bad_page+0x10/0x10 [ 50.216575][ T5958] ? page_bad_reason+0x9d/0x1e0 [ 50.217847][ T5958] free_unref_page+0x657/0xdc0 [ 50.219098][ T5958] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 50.220682][ T5958] ? __phys_addr+0xc6/0x150 [ 50.221851][ T5958] skb_free_head+0xa0/0x1d0 [ 50.223423][ T5958] skb_release_data+0x560/0x730 [ 50.224886][ T5958] sk_skb_reason_drop+0x129/0x1a0 [ 50.226594][ T5958] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 50.228437][ T5958] ? kernel_text_address+0x8d/0x100 [ 50.229861][ T5958] ? hlock_class+0x4e/0x130 [ 50.231117][ T5958] ? __lock_acquire+0x163e/0x3ce0 [ 50.232617][ T5958] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 50.234563][ T5958] ? hlock_class+0x4e/0x130 [ 50.235787][ T5958] ? __lock_acquire+0xbdd/0x3ce0 [ 50.237107][ T5958] ? __pfx___lock_acquire+0x10/0x10 [ 50.238498][ T5958] __netif_receive_skb_list_core+0x357/0x950 [ 50.240062][ T5958] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 50.241788][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 50.243244][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 50.245326][ T5958] ? lock_acquire+0x2f/0xb0 [ 50.246819][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 50.248738][ T5958] netif_receive_skb_list_internal+0x753/0xdb0 [ 50.250695][ T5958] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 50.252443][ T5958] ? __pfx_eth_type_trans+0x10/0x10 [ 50.253755][ T5958] ? __build_skb_around+0x278/0x3b0 [ 50.255083][ T5958] netif_receive_skb_list+0x4f/0x4a0 [ 50.256437][ T5958] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 50.258026][ T5958] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 50.259670][ T5958] ? bpf_test_timer_continue+0x150/0x3d0 [ 50.261432][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 50.263047][ T5958] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 50.264838][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 50.266518][ T5958] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 50.268262][ T5958] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 50.269962][ T5958] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 50.271538][ T5958] ? 0xffffffffa0004340 [ 50.272796][ T5958] ? 0xffffffffa0004340 [ 50.273971][ T5958] ? 0xffffffffa0004340 [ 50.275132][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 50.276914][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 50.278317][ T5958] ? lock_acquire+0x2f/0xb0 [ 50.279486][ T5958] ? __fget_files+0x40/0x3f0 [ 50.280826][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 50.282389][ T5958] ? fput+0x30/0x390 [ 50.283562][ T5958] ? __bpf_prog_get+0xa0/0x290 [ 50.285173][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 50.286858][ T5958] __sys_bpf+0xfc6/0x49a0 [ 50.288188][ T5958] ? find_held_lock+0x2d/0x110 [ 50.289439][ T5958] ? __pfx___sys_bpf+0x10/0x10 [ 50.290806][ T5958] ? __might_fault+0x13b/0x190 [ 50.292096][ T5958] ? __pfx_lock_release+0x10/0x10 [ 50.293354][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 50.294715][ T5958] ? lock_acquire+0x2f/0xb0 [ 50.295958][ T5958] ? __might_fault+0xe3/0x190 [ 50.297215][ T5958] ? xfd_validate_state+0x5d/0x180 [ 50.298571][ T5958] ? rcu_is_watching+0x12/0xc0 [ 50.299886][ T5958] __x64_sys_bpf+0x78/0xc0 [ 50.301289][ T5958] ? lockdep_hardirqs_on+0x7c/0x110 [ 50.302914][ T5958] do_syscall_64+0xcd/0x250 [ 50.304283][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.305851][ T5958] RIP: 0033:0x7f297e773e99 [ 50.308162][ T5958] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 50.313441][ T5958] RSP: 002b:00007f297e72e228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 50.315597][ T5958] RAX: ffffffffffffffda RBX: 00007f297e7fe328 RCX: 00007f297e773e99 [ 50.317775][ T5958] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 50.319828][ T5958] RBP: 00007f297e7fe320 R08: 00007f297e72e6c0 R09: 00007f297e72e6c0 [ 50.321929][ T5958] R10: 00007f297e72e6c0 R11: 0000000000000246 R12: 00007f297e7cb074 [ 50.324303][ T5958] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007fffd5e26f58 [ 50.326327][ T5958] [ 50.327327][ T5958] BUG: Bad page state in process syz-executor194 pfn:323ca [ 50.330685][ T5958] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880323ca288 pfn:0x323ca [ 50.333478][ T5958] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 50.335507][ T5958] raw: 00fff00000000000 dead000000000040 ffff8880322fe000 0000000000000000 [ 50.337773][ T5958] raw: ffff8880323ca288 0000000000000001 00000000ffffffff 0000000000000000 [ 50.340268][ T5958] page dumped because: page_pool leak [ 50.341958][ T5958] page_owner tracks the page as allocated [ 50.344532][ T5958] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5958, tgid 5957 (syz-executor194), ts 44777018426, free_ts 44761566449 [ 50.350510][ T5958] post_alloc_hook+0x2d1/0x350 [ 50.351765][ T5958] get_page_from_freelist+0x101e/0x3070 [ 50.353244][ T5958] __alloc_pages_noprof+0x223/0x25a0 [ 50.354599][ T5958] alloc_pages_bulk_noprof+0x77c/0x1110 [ 50.356080][ T5958] __page_pool_alloc_pages_slow+0x18f/0x770 [ 50.357644][ T5958] page_pool_alloc_netmem+0xc4/0x160 [ 50.359004][ T5958] page_pool_alloc_pages+0x1a/0x60 [ 50.360464][ T5958] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 50.362343][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 50.363867][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 50.365369][ T5958] __sys_bpf+0xfc6/0x49a0 [ 50.366501][ T5958] __x64_sys_bpf+0x78/0xc0 [ 50.367658][ T5958] do_syscall_64+0xcd/0x250 [ 50.368851][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.370498][ T5958] page last free pid 5962 tgid 5962 stack trace: [ 50.372128][ T5958] free_unref_page+0x5f4/0xdc0 [ 50.373393][ T5958] qlist_free_all+0x4e/0x120 [ 50.374594][ T5958] kasan_quarantine_reduce+0x192/0x1e0 [ 50.376030][ T5958] __kasan_slab_alloc+0x69/0x90 [ 50.377294][ T5958] kmem_cache_alloc_noprof+0x121/0x2f0 [ 50.378665][ T5958] getname_flags.part.0+0x4c/0x550 [ 50.380205][ T5958] getname+0x8d/0xe0 [ 50.381320][ T5958] do_sys_openat2+0x104/0x1e0 [ 50.382809][ T5958] __x64_sys_openat+0x175/0x210 [ 50.384396][ T5958] do_syscall_64+0xcd/0x250 [ 50.385872][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.387450][ T5958] Modules linked in: [ 50.388487][ T5958] CPU: 2 UID: 0 PID: 5958 Comm: syz-executor194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 50.391529][ T5958] Tainted: [B]=BAD_PAGE [ 50.392578][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 50.395178][ T5958] Call Trace: [ 50.396031][ T5958] [ 50.396765][ T5958] dump_stack_lvl+0x16c/0x1f0 [ 50.397933][ T5958] bad_page+0xb3/0x1f0 [ 50.398943][ T5958] ? __pfx_bad_page+0x10/0x10 [ 50.400111][ T5958] ? page_bad_reason+0x9d/0x1e0 [ 50.401340][ T5958] free_unref_page+0x657/0xdc0 [ 50.402560][ T5958] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 50.404038][ T5958] ? __phys_addr+0xc6/0x150 [ 50.405423][ T5958] skb_free_head+0xa0/0x1d0 [ 50.406715][ T5958] skb_release_data+0x560/0x730 [ 50.408081][ T5958] sk_skb_reason_drop+0x129/0x1a0 [ 50.409888][ T5958] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 50.411743][ T5958] ? kernel_text_address+0x8d/0x100 [ 50.413073][ T5958] ? hlock_class+0x4e/0x130 [ 50.414267][ T5958] ? __lock_acquire+0x163e/0x3ce0 [ 50.415571][ T5958] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 50.417430][ T5958] ? hlock_class+0x4e/0x130 [ 50.418628][ T5958] ? __lock_acquire+0xbdd/0x3ce0 [ 50.419897][ T5958] ? __pfx___lock_acquire+0x10/0x10 [ 50.421277][ T5958] __netif_receive_skb_list_core+0x357/0x950 [ 50.422755][ T5958] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 50.424356][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 50.425634][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 50.427247][ T5958] ? lock_acquire+0x2f/0xb0 [ 50.428368][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 50.430128][ T5958] netif_receive_skb_list_internal+0x753/0xdb0 [ 50.431862][ T5958] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 50.433688][ T5958] ? __pfx_eth_type_trans+0x10/0x10 [ 50.435142][ T5958] ? __build_skb_around+0x278/0x3b0 [ 50.436599][ T5958] netif_receive_skb_list+0x4f/0x4a0 [ 50.437864][ T5958] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 50.439617][ T5958] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 50.441575][ T5958] ? bpf_test_timer_continue+0x150/0x3d0 [ 50.443021][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 50.444617][ T5958] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 50.446173][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 50.447751][ T5958] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 50.449312][ T5958] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 50.450794][ T5958] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 50.452196][ T5958] ? 0xffffffffa0004340 [ 50.453278][ T5958] ? 0xffffffffa0004340 [ 50.454351][ T5958] ? 0xffffffffa0004340 [ 50.455420][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 50.456970][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 50.458340][ T5958] ? lock_acquire+0x2f/0xb0 [ 50.459515][ T5958] ? __fget_files+0x40/0x3f0 [ 50.460727][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 50.462645][ T5958] ? fput+0x30/0x390 [ 50.463681][ T5958] ? __bpf_prog_get+0xa0/0x290 [ 50.464990][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 50.466552][ T5958] __sys_bpf+0xfc6/0x49a0 [ 50.467699][ T5958] ? find_held_lock+0x2d/0x110 [ 50.468987][ T5958] ? __pfx___sys_bpf+0x10/0x10 [ 50.470318][ T5958] ? __might_fault+0x13b/0x190 [ 50.471589][ T5958] ? __pfx_lock_release+0x10/0x10 [ 50.472933][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 50.474242][ T5958] ? lock_acquire+0x2f/0xb0 [ 50.475363][ T5958] ? __might_fault+0xe3/0x190 [ 50.476584][ T5958] ? xfd_validate_state+0x5d/0x180 [ 50.477914][ T5958] ? rcu_is_watching+0x12/0xc0 [ 50.479164][ T5958] __x64_sys_bpf+0x78/0xc0 [ 50.480329][ T5958] ? lockdep_hardirqs_on+0x7c/0x110 [ 50.481607][ T5958] do_syscall_64+0xcd/0x250 [ 50.482731][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.484239][ T5958] RIP: 0033:0x7f297e773e99 [ 50.485399][ T5958] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 50.490306][ T5958] RSP: 002b:00007f297e72e228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 50.492463][ T5958] RAX: ffffffffffffffda RBX: 00007f297e7fe328 RCX: 00007f297e773e99 [ 50.494494][ T5958] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 50.496552][ T5958] RBP: 00007f297e7fe320 R08: 00007f297e72e6c0 R09: 00007f297e72e6c0 [ 50.498560][ T5958] R10: 00007f297e72e6c0 R11: 0000000000000246 R12: 00007f297e7cb074 [ 50.500986][ T5958] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007fffd5e26f58 [ 50.503302][ T5958] [ 50.504388][ T5958] BUG: Bad page state in process syz-executor194 pfn:33350 [ 50.506951][ T5958] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880333500f8 pfn:0x33350 [ 50.509887][ T5958] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 50.511681][ T5958] raw: 00fff00000000000 dead000000000040 ffff8880322fe000 0000000000000000 [ 50.513877][ T5958] raw: ffff8880333500f8 0000000000000001 00000000ffffffff 0000000000000000 [ 50.516219][ T5958] page dumped because: page_pool leak [ 50.517607][ T5958] page_owner tracks the page as allocated [ 50.519149][ T5958] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5958, tgid 5957 (syz-executor194), ts 44777009673, free_ts 44761598826 [ 50.523379][ T5958] post_alloc_hook+0x2d1/0x350 [ 50.524609][ T5958] get_page_from_freelist+0x101e/0x3070 [ 50.526023][ T5958] __alloc_pages_noprof+0x223/0x25a0 [ 50.527473][ T5958] alloc_pages_bulk_noprof+0x77c/0x1110 [ 50.529072][ T5958] __page_pool_alloc_pages_slow+0x18f/0x770 [ 50.530592][ T5958] page_pool_alloc_netmem+0xc4/0x160 [ 50.532201][ T5958] page_pool_alloc_pages+0x1a/0x60 [ 50.533774][ T5958] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 50.535799][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 50.537433][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 50.538933][ T5958] __sys_bpf+0xfc6/0x49a0 [ 50.540107][ T5958] __x64_sys_bpf+0x78/0xc0 [ 50.541283][ T5958] do_syscall_64+0xcd/0x250 [ 50.542436][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.544006][ T5958] page last free pid 5962 tgid 5962 stack trace: [ 50.545920][ T5958] free_unref_page+0x5f4/0xdc0 [ 50.547379][ T5958] qlist_free_all+0x4e/0x120 [ 50.548572][ T5958] kasan_quarantine_reduce+0x192/0x1e0 [ 50.549929][ T5958] __kasan_slab_alloc+0x69/0x90 [ 50.551219][ T5958] kmem_cache_alloc_noprof+0x121/0x2f0 [ 50.552637][ T5958] getname_flags.part.0+0x4c/0x550 [ 50.553994][ T5958] getname+0x8d/0xe0 [ 50.555047][ T5958] do_sys_openat2+0x104/0x1e0 [ 50.556343][ T5958] __x64_sys_openat+0x175/0x210 [ 50.557766][ T5958] do_syscall_64+0xcd/0x250 [ 50.559111][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.560739][ T5958] Modules linked in: [ 50.561841][ T5958] CPU: 2 UID: 0 PID: 5958 Comm: syz-executor194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 50.565336][ T5958] Tainted: [B]=BAD_PAGE [ 50.566405][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 50.569136][ T5958] Call Trace: [ 50.570018][ T5958] [ 50.570944][ T5958] dump_stack_lvl+0x16c/0x1f0 [ 50.572290][ T5958] bad_page+0xb3/0x1f0 [ 50.573383][ T5958] ? __pfx_bad_page+0x10/0x10 [ 50.574525][ T5958] ? page_bad_reason+0x9d/0x1e0 [ 50.575734][ T5958] free_unref_page+0x657/0xdc0 [ 50.576984][ T5958] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 50.578614][ T5958] ? __phys_addr+0xc6/0x150 [ 50.579780][ T5958] skb_free_head+0xa0/0x1d0 [ 50.581072][ T5958] skb_release_data+0x560/0x730 [ 50.582298][ T5958] sk_skb_reason_drop+0x129/0x1a0 [ 50.583543][ T5958] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 50.585498][ T5958] ? kernel_text_address+0x8d/0x100 [ 50.587592][ T5958] ? hlock_class+0x4e/0x130 [ 50.589131][ T5958] ? __lock_acquire+0x163e/0x3ce0 [ 50.590605][ T5958] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 50.592746][ T5958] ? hlock_class+0x4e/0x130 [ 50.593921][ T5958] ? __lock_acquire+0xbdd/0x3ce0 [ 50.595363][ T5958] ? __pfx___lock_acquire+0x10/0x10 [ 50.597279][ T5958] __netif_receive_skb_list_core+0x357/0x950 [ 50.599427][ T5958] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 50.601676][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 50.603831][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 50.606293][ T5958] ? lock_acquire+0x2f/0xb0 [ 50.608331][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 50.610778][ T5958] netif_receive_skb_list_internal+0x753/0xdb0 [ 50.613402][ T5958] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 50.615803][ T5958] ? __pfx_eth_type_trans+0x10/0x10 [ 50.617554][ T5958] ? __build_skb_around+0x278/0x3b0 [ 50.619310][ T5958] netif_receive_skb_list+0x4f/0x4a0 [ 50.621132][ T5958] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 50.623201][ T5958] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 50.625475][ T5958] ? bpf_test_timer_continue+0x150/0x3d0 [ 50.627026][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 50.628431][ T5958] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 50.629944][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 50.631471][ T5958] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 50.633155][ T5958] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 50.634689][ T5958] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 50.636174][ T5958] ? 0xffffffffa0004340 [ 50.637355][ T5958] ? 0xffffffffa0004340 [ 50.638763][ T5958] ? 0xffffffffa0004340 [ 50.639936][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 50.641754][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 50.643372][ T5958] ? lock_acquire+0x2f/0xb0 [ 50.645157][ T5958] ? __fget_files+0x40/0x3f0 [ 50.646756][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 50.648673][ T5958] ? fput+0x30/0x390 [ 50.649743][ T5958] ? __bpf_prog_get+0xa0/0x290 [ 50.651433][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 50.653598][ T5958] __sys_bpf+0xfc6/0x49a0 [ 50.655057][ T5958] ? find_held_lock+0x2d/0x110 [ 50.656696][ T5958] ? __pfx___sys_bpf+0x10/0x10 [ 50.658288][ T5958] ? __might_fault+0x13b/0x190 [ 50.660203][ T5958] ? __pfx_lock_release+0x10/0x10 [ 50.661983][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 50.663748][ T5958] ? lock_acquire+0x2f/0xb0 [ 50.665290][ T5958] ? __might_fault+0xe3/0x190 [ 50.666829][ T5958] ? xfd_validate_state+0x5d/0x180 [ 50.668584][ T5958] ? rcu_is_watching+0x12/0xc0 [ 50.670245][ T5958] __x64_sys_bpf+0x78/0xc0 [ 50.671923][ T5958] ? lockdep_hardirqs_on+0x7c/0x110 [ 50.673707][ T5958] do_syscall_64+0xcd/0x250 [ 50.675245][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.676891][ T5958] RIP: 0033:0x7f297e773e99 [ 50.678194][ T5958] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 50.684343][ T5958] RSP: 002b:00007f297e72e228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 50.686717][ T5958] RAX: ffffffffffffffda RBX: 00007f297e7fe328 RCX: 00007f297e773e99 [ 50.689159][ T5958] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 50.691192][ T5958] RBP: 00007f297e7fe320 R08: 00007f297e72e6c0 R09: 00007f297e72e6c0 [ 50.693104][ T5958] R10: 00007f297e72e6c0 R11: 0000000000000246 R12: 00007f297e7cb074 [ 50.695051][ T5958] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007fffd5e26f58 [ 50.697013][ T5958] [ 50.697872][ T5958] BUG: Bad page state in process syz-executor194 pfn:26263 [ 50.699752][ T5958] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888026263288 pfn:0x26263 [ 50.702875][ T5958] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 50.704961][ T5958] raw: 00fff00000000000 dead000000000040 ffff8880322fe000 0000000000000000 [ 50.707101][ T5958] raw: ffff888026263288 0000000000000001 00000000ffffffff 0000000000000000 [ 50.709619][ T5958] page dumped because: page_pool leak [ 50.710971][ T5958] page_owner tracks the page as allocated [ 50.712466][ T5958] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5958, tgid 5957 (syz-executor194), ts 44777001328, free_ts 44761618966 [ 50.716788][ T5958] post_alloc_hook+0x2d1/0x350 [ 50.718246][ T5958] get_page_from_freelist+0x101e/0x3070 [ 50.719577][ T5958] __alloc_pages_noprof+0x223/0x25a0 [ 50.721192][ T5958] alloc_pages_bulk_noprof+0x77c/0x1110 [ 50.722582][ T5958] __page_pool_alloc_pages_slow+0x18f/0x770 [ 50.724026][ T5958] page_pool_alloc_netmem+0xc4/0x160 [ 50.725432][ T5958] page_pool_alloc_pages+0x1a/0x60 [ 50.726770][ T5958] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 50.728315][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 50.729660][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 50.731052][ T5958] __sys_bpf+0xfc6/0x49a0 [ 50.732170][ T5958] __x64_sys_bpf+0x78/0xc0 [ 50.733290][ T5958] do_syscall_64+0xcd/0x250 [ 50.734381][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.735922][ T5958] page last free pid 5962 tgid 5962 stack trace: [ 50.737477][ T5958] free_unref_page+0x5f4/0xdc0 [ 50.738692][ T5958] qlist_free_all+0x4e/0x120 [ 50.740270][ T5958] kasan_quarantine_reduce+0x192/0x1e0 [ 50.741945][ T5958] __kasan_slab_alloc+0x69/0x90 [ 50.743236][ T5958] kmem_cache_alloc_noprof+0x121/0x2f0 [ 50.744672][ T5958] getname_flags.part.0+0x4c/0x550 [ 50.746057][ T5958] getname+0x8d/0xe0 [ 50.747159][ T5958] do_sys_openat2+0x104/0x1e0 [ 50.748422][ T5958] __x64_sys_openat+0x175/0x210 [ 50.749765][ T5958] do_syscall_64+0xcd/0x250 [ 50.751213][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.753215][ T5958] Modules linked in: [ 50.754512][ T5958] CPU: 2 UID: 0 PID: 5958 Comm: syz-executor194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 50.758261][ T5958] Tainted: [B]=BAD_PAGE [ 50.759325][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 50.762022][ T5958] Call Trace: [ 50.762961][ T5958] [ 50.763731][ T5958] dump_stack_lvl+0x16c/0x1f0 [ 50.764976][ T5958] bad_page+0xb3/0x1f0 [ 50.766029][ T5958] ? __pfx_bad_page+0x10/0x10 [ 50.767272][ T5958] ? page_bad_reason+0x9d/0x1e0 [ 50.768685][ T5958] free_unref_page+0x657/0xdc0 [ 50.769962][ T5958] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 50.771611][ T5958] ? __phys_addr+0xc6/0x150 [ 50.772965][ T5958] skb_free_head+0xa0/0x1d0 [ 50.774318][ T5958] skb_release_data+0x560/0x730 [ 50.775602][ T5958] sk_skb_reason_drop+0x129/0x1a0 [ 50.776917][ T5958] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 50.778592][ T5958] ? kernel_text_address+0x8d/0x100 [ 50.780000][ T5958] ? hlock_class+0x4e/0x130 [ 50.781424][ T5958] ? __lock_acquire+0x163e/0x3ce0 [ 50.782861][ T5958] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 50.784852][ T5958] ? hlock_class+0x4e/0x130 [ 50.786136][ T5958] ? __lock_acquire+0xbdd/0x3ce0 [ 50.787391][ T5958] ? __pfx___lock_acquire+0x10/0x10 [ 50.788691][ T5958] __netif_receive_skb_list_core+0x357/0x950 [ 50.790539][ T5958] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 50.792247][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 50.793606][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 50.795239][ T5958] ? lock_acquire+0x2f/0xb0 [ 50.796442][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 50.798005][ T5958] netif_receive_skb_list_internal+0x753/0xdb0 [ 50.799520][ T5958] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 50.801509][ T5958] ? __pfx_eth_type_trans+0x10/0x10 [ 50.802824][ T5958] ? __build_skb_around+0x278/0x3b0 [ 50.804349][ T5958] netif_receive_skb_list+0x4f/0x4a0 [ 50.805714][ T5958] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 50.807246][ T5958] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 50.808931][ T5958] ? bpf_test_timer_continue+0x150/0x3d0 [ 50.810356][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 50.811951][ T5958] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 50.813691][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 50.815534][ T5958] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 50.817277][ T5958] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 50.818846][ T5958] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 50.820347][ T5958] ? 0xffffffffa0004340 [ 50.821659][ T5958] ? 0xffffffffa0004340 [ 50.823226][ T5958] ? 0xffffffffa0004340 [ 50.824655][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 50.826717][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 50.828488][ T5958] ? lock_acquire+0x2f/0xb0 [ 50.830024][ T5958] ? __fget_files+0x40/0x3f0 [ 50.831365][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 50.833674][ T5958] ? fput+0x30/0x390 [ 50.835071][ T5958] ? __bpf_prog_get+0xa0/0x290 [ 50.836567][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 50.838575][ T5958] __sys_bpf+0xfc6/0x49a0 [ 50.840314][ T5958] ? find_held_lock+0x2d/0x110 [ 50.842206][ T5958] ? __pfx___sys_bpf+0x10/0x10 [ 50.843731][ T5958] ? __might_fault+0x13b/0x190 [ 50.845258][ T5958] ? __pfx_lock_release+0x10/0x10 [ 50.847052][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 50.848647][ T5958] ? lock_acquire+0x2f/0xb0 [ 50.850283][ T5958] ? __might_fault+0xe3/0x190 [ 50.851982][ T5958] ? xfd_validate_state+0x5d/0x180 [ 50.853716][ T5958] ? rcu_is_watching+0x12/0xc0 [ 50.855504][ T5958] __x64_sys_bpf+0x78/0xc0 [ 50.857276][ T5958] ? lockdep_hardirqs_on+0x7c/0x110 [ 50.859270][ T5958] do_syscall_64+0xcd/0x250 [ 50.861075][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.862980][ T5958] RIP: 0033:0x7f297e773e99 [ 50.864942][ T5958] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 50.871312][ T5958] RSP: 002b:00007f297e72e228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 50.874374][ T5958] RAX: ffffffffffffffda RBX: 00007f297e7fe328 RCX: 00007f297e773e99 [ 50.877259][ T5958] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 50.880032][ T5958] RBP: 00007f297e7fe320 R08: 00007f297e72e6c0 R09: 00007f297e72e6c0 [ 50.883272][ T5958] R10: 00007f297e72e6c0 R11: 0000000000000246 R12: 00007f297e7cb074 [ 50.886276][ T5958] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007fffd5e26f58 [ 50.889701][ T5958] [ 50.890922][ T5958] BUG: Bad page state in process syz-executor194 pfn:27500 [ 50.893762][ T5958] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888027500000 pfn:0x27500 [ 50.896687][ T5958] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 50.898469][ T5958] raw: 00fff00000000000 dead000000000040 ffff8880322fe000 0000000000000000 [ 50.900627][ T5958] raw: ffff888027500000 0000000000000001 00000000ffffffff 0000000000000000 [ 50.902735][ T5958] page dumped because: page_pool leak [ 50.904136][ T5958] page_owner tracks the page as allocated [ 50.905873][ T5958] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5958, tgid 5957 (syz-executor194), ts 44776992598, free_ts 44761622950 [ 50.911120][ T5958] post_alloc_hook+0x2d1/0x350 [ 50.912553][ T5958] get_page_from_freelist+0x101e/0x3070 [ 50.914320][ T5958] __alloc_pages_noprof+0x223/0x25a0 [ 50.915715][ T5958] alloc_pages_bulk_noprof+0x77c/0x1110 [ 50.917129][ T5958] __page_pool_alloc_pages_slow+0x18f/0x770 [ 50.918584][ T5958] page_pool_alloc_netmem+0xc4/0x160 [ 50.919900][ T5958] page_pool_alloc_pages+0x1a/0x60 [ 50.921208][ T5958] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 50.922757][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 50.924327][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 50.925869][ T5958] __sys_bpf+0xfc6/0x49a0 [ 50.927043][ T5958] __x64_sys_bpf+0x78/0xc0 [ 50.928252][ T5958] do_syscall_64+0xcd/0x250 [ 50.929402][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.930945][ T5958] page last free pid 5962 tgid 5962 stack trace: [ 50.932763][ T5958] free_unref_page+0x5f4/0xdc0 [ 50.934089][ T5958] qlist_free_all+0x4e/0x120 [ 50.935332][ T5958] kasan_quarantine_reduce+0x192/0x1e0 [ 50.936687][ T5958] __kasan_slab_alloc+0x69/0x90 [ 50.937933][ T5958] kmem_cache_alloc_noprof+0x121/0x2f0 [ 50.939385][ T5958] getname_flags.part.0+0x4c/0x550 [ 50.940758][ T5958] getname+0x8d/0xe0 [ 50.941836][ T5958] do_sys_openat2+0x104/0x1e0 [ 50.943443][ T5958] __x64_sys_openat+0x175/0x210 [ 50.945162][ T5958] do_syscall_64+0xcd/0x250 [ 50.946690][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.948314][ T5958] Modules linked in: [ 50.949515][ T5958] CPU: 2 UID: 0 PID: 5958 Comm: syz-executor194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 50.952950][ T5958] Tainted: [B]=BAD_PAGE [ 50.953995][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 50.956873][ T5958] Call Trace: [ 50.957726][ T5958] [ 50.958498][ T5958] dump_stack_lvl+0x16c/0x1f0 [ 50.959727][ T5958] bad_page+0xb3/0x1f0 [ 50.961320][ T5958] ? __pfx_bad_page+0x10/0x10 [ 50.962578][ T5958] ? page_bad_reason+0x9d/0x1e0 [ 50.963932][ T5958] free_unref_page+0x657/0xdc0 [ 50.965375][ T5958] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 50.967294][ T5958] ? __phys_addr+0xc6/0x150 [ 50.968631][ T5958] skb_free_head+0xa0/0x1d0 [ 50.969877][ T5958] skb_release_data+0x560/0x730 [ 50.971102][ T5958] sk_skb_reason_drop+0x129/0x1a0 [ 50.972415][ T5958] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 50.974113][ T5958] ? kernel_text_address+0x8d/0x100 [ 50.975679][ T5958] ? hlock_class+0x4e/0x130 [ 50.976915][ T5958] ? __lock_acquire+0x163e/0x3ce0 [ 50.978271][ T5958] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 50.980173][ T5958] ? hlock_class+0x4e/0x130 [ 50.981391][ T5958] ? __lock_acquire+0xbdd/0x3ce0 [ 50.982682][ T5958] ? __pfx___lock_acquire+0x10/0x10 [ 50.984057][ T5958] __netif_receive_skb_list_core+0x357/0x950 [ 50.985586][ T5958] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 50.987456][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 50.989036][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 50.990822][ T5958] ? lock_acquire+0x2f/0xb0 [ 50.992220][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 50.993980][ T5958] netif_receive_skb_list_internal+0x753/0xdb0 [ 50.995804][ T5958] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 50.997819][ T5958] ? __pfx_eth_type_trans+0x10/0x10 [ 50.999320][ T5958] ? __build_skb_around+0x278/0x3b0 [ 51.000773][ T5958] netif_receive_skb_list+0x4f/0x4a0 [ 51.002553][ T5958] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 51.005072][ T5958] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 51.007327][ T5958] ? bpf_test_timer_continue+0x150/0x3d0 [ 51.009032][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 51.011048][ T5958] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 51.013296][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 51.015004][ T5958] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 51.016830][ T5958] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 51.018349][ T5958] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 51.019849][ T5958] ? 0xffffffffa0004340 [ 51.021338][ T5958] ? 0xffffffffa0004340 [ 51.022442][ T5958] ? 0xffffffffa0004340 [ 51.023780][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 51.025662][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 51.027884][ T5958] ? lock_acquire+0x2f/0xb0 [ 51.029441][ T5958] ? __fget_files+0x40/0x3f0 [ 51.031042][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 51.033050][ T5958] ? fput+0x30/0x390 [ 51.034399][ T5958] ? __bpf_prog_get+0xa0/0x290 [ 51.036298][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 51.038327][ T5958] __sys_bpf+0xfc6/0x49a0 [ 51.039855][ T5958] ? find_held_lock+0x2d/0x110 [ 51.041498][ T5958] ? __pfx___sys_bpf+0x10/0x10 [ 51.043136][ T5958] ? __might_fault+0x13b/0x190 [ 51.044746][ T5958] ? __pfx_lock_release+0x10/0x10 [ 51.046465][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 51.048309][ T5958] ? lock_acquire+0x2f/0xb0 [ 51.049812][ T5958] ? __might_fault+0xe3/0x190 [ 51.051144][ T5958] ? xfd_validate_state+0x5d/0x180 [ 51.052725][ T5958] ? rcu_is_watching+0x12/0xc0 [ 51.054277][ T5958] __x64_sys_bpf+0x78/0xc0 [ 51.055558][ T5958] ? lockdep_hardirqs_on+0x7c/0x110 [ 51.057017][ T5958] do_syscall_64+0xcd/0x250 [ 51.058312][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.060180][ T5958] RIP: 0033:0x7f297e773e99 [ 51.061921][ T5958] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 51.068656][ T5958] RSP: 002b:00007f297e72e228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 51.071736][ T5958] RAX: ffffffffffffffda RBX: 00007f297e7fe328 RCX: 00007f297e773e99 [ 51.074786][ T5958] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 51.077904][ T5958] RBP: 00007f297e7fe320 R08: 00007f297e72e6c0 R09: 00007f297e72e6c0 [ 51.081058][ T5958] R10: 00007f297e72e6c0 R11: 0000000000000246 R12: 00007f297e7cb074 [ 51.084748][ T5958] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007fffd5e26f58 [ 51.087563][ T5958] [ 51.088813][ T5958] BUG: Bad page state in process syz-executor194 pfn:251ad [ 51.091298][ T5958] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x251ad [ 51.093484][ T5958] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 51.095377][ T5958] raw: 00fff00000000000 dead000000000040 ffff8880322fe000 0000000000000000 [ 51.097510][ T5958] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 51.099836][ T5958] page dumped because: page_pool leak [ 51.101433][ T5958] page_owner tracks the page as allocated [ 51.103256][ T5958] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5958, tgid 5957 (syz-executor194), ts 44776951709, free_ts 42205444533 [ 51.108970][ T5958] post_alloc_hook+0x2d1/0x350 [ 51.110231][ T5958] get_page_from_freelist+0x101e/0x3070 [ 51.111729][ T5958] __alloc_pages_noprof+0x223/0x25a0 [ 51.113238][ T5958] alloc_pages_bulk_noprof+0x77c/0x1110 [ 51.114627][ T5958] __page_pool_alloc_pages_slow+0x18f/0x770 [ 51.116230][ T5958] page_pool_alloc_netmem+0xc4/0x160 [ 51.117546][ T5958] page_pool_alloc_pages+0x1a/0x60 [ 51.118821][ T5958] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 51.120834][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 51.122683][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 51.124373][ T5958] __sys_bpf+0xfc6/0x49a0 [ 51.125652][ T5958] __x64_sys_bpf+0x78/0xc0 [ 51.127638][ T5958] do_syscall_64+0xcd/0x250 [ 51.128956][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.130861][ T5958] page last free pid 5910 tgid 5910 stack trace: [ 51.132635][ T5958] free_unref_page+0x5f4/0xdc0 [ 51.133899][ T5958] __folio_put+0x30d/0x3d0 [ 51.135100][ T5958] put_page+0x21e/0x280 [ 51.136203][ T5958] anon_pipe_buf_release+0x11a/0x240 [ 51.137632][ T5958] pipe_read+0x641/0x13f0 [ 51.138829][ T5958] vfs_read+0xa4c/0xbe0 [ 51.140129][ T5958] ksys_read+0x1fa/0x260 [ 51.141472][ T5958] do_syscall_64+0xcd/0x250 [ 51.142943][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.145187][ T5958] Modules linked in: [ 51.146542][ T5958] CPU: 2 UID: 0 PID: 5958 Comm: syz-executor194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 51.150054][ T5958] Tainted: [B]=BAD_PAGE [ 51.151278][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 51.154305][ T5958] Call Trace: [ 51.155190][ T5958] [ 51.155995][ T5958] dump_stack_lvl+0x16c/0x1f0 [ 51.157288][ T5958] bad_page+0xb3/0x1f0 [ 51.158466][ T5958] ? __pfx_bad_page+0x10/0x10 [ 51.159754][ T5958] ? page_bad_reason+0x9d/0x1e0 [ 51.161111][ T5958] free_unref_page+0x657/0xdc0 [ 51.162411][ T5958] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 51.163996][ T5958] ? __phys_addr+0xc6/0x150 [ 51.165224][ T5958] skb_free_head+0xa0/0x1d0 [ 51.166434][ T5958] skb_release_data+0x560/0x730 [ 51.167769][ T5958] sk_skb_reason_drop+0x129/0x1a0 [ 51.169176][ T5958] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 51.170946][ T5958] ? kernel_text_address+0x8d/0x100 [ 51.172801][ T5958] ? hlock_class+0x4e/0x130 [ 51.174351][ T5958] ? __lock_acquire+0x163e/0x3ce0 [ 51.175963][ T5958] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 51.178162][ T5958] ? hlock_class+0x4e/0x130 [ 51.179573][ T5958] ? __lock_acquire+0xbdd/0x3ce0 [ 51.181324][ T5958] ? __pfx___lock_acquire+0x10/0x10 [ 51.183176][ T5958] __netif_receive_skb_list_core+0x357/0x950 [ 51.185119][ T5958] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 51.187237][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 51.189024][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 51.191175][ T5958] ? lock_acquire+0x2f/0xb0 [ 51.192667][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 51.194833][ T5958] netif_receive_skb_list_internal+0x753/0xdb0 [ 51.197033][ T5958] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 51.199343][ T5958] ? __pfx_eth_type_trans+0x10/0x10 [ 51.201270][ T5958] ? __build_skb_around+0x278/0x3b0 [ 51.203118][ T5958] netif_receive_skb_list+0x4f/0x4a0 [ 51.204929][ T5958] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 51.206864][ T5958] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 51.209266][ T5958] ? bpf_test_timer_continue+0x150/0x3d0 [ 51.211056][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 51.212733][ T5958] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 51.214610][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 51.216594][ T5958] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 51.218609][ T5958] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 51.220540][ T5958] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 51.222208][ T5958] ? 0xffffffffa0004340 [ 51.223546][ T5958] ? 0xffffffffa0004340 [ 51.225268][ T5958] ? 0xffffffffa0004340 [ 51.226789][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 51.228740][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 51.230477][ T5958] ? lock_acquire+0x2f/0xb0 [ 51.231899][ T5958] ? __fget_files+0x40/0x3f0 [ 51.233311][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 51.235045][ T5958] ? fput+0x30/0x390 [ 51.236251][ T5958] ? __bpf_prog_get+0xa0/0x290 [ 51.237736][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 51.239582][ T5958] __sys_bpf+0xfc6/0x49a0 [ 51.241269][ T5958] ? find_held_lock+0x2d/0x110 [ 51.242827][ T5958] ? __pfx___sys_bpf+0x10/0x10 [ 51.244476][ T5958] ? __might_fault+0x13b/0x190 [ 51.246583][ T5958] ? __pfx_lock_release+0x10/0x10 [ 51.248302][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 51.250009][ T5958] ? lock_acquire+0x2f/0xb0 [ 51.251171][ T5958] ? __might_fault+0xe3/0x190 [ 51.252426][ T5958] ? xfd_validate_state+0x5d/0x180 [ 51.253744][ T5958] ? rcu_is_watching+0x12/0xc0 [ 51.254961][ T5958] __x64_sys_bpf+0x78/0xc0 [ 51.256123][ T5958] ? lockdep_hardirqs_on+0x7c/0x110 [ 51.257490][ T5958] do_syscall_64+0xcd/0x250 [ 51.258634][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.260482][ T5958] RIP: 0033:0x7f297e773e99 [ 51.262542][ T5958] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 51.268173][ T5958] RSP: 002b:00007f297e72e228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 51.270563][ T5958] RAX: ffffffffffffffda RBX: 00007f297e7fe328 RCX: 00007f297e773e99 [ 51.272712][ T5958] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 51.274906][ T5958] RBP: 00007f297e7fe320 R08: 00007f297e72e6c0 R09: 00007f297e72e6c0 [ 51.277050][ T5958] R10: 00007f297e72e6c0 R11: 0000000000000246 R12: 00007f297e7cb074 [ 51.279271][ T5958] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007fffd5e26f58 [ 51.281530][ T5958] [ 51.282477][ T5958] BUG: Bad page state in process syz-executor194 pfn:32112 [ 51.284383][ T5958] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888032112870 pfn:0x32112 [ 51.287028][ T5958] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 51.288915][ T5958] raw: 00fff00000000000 dead000000000040 ffff8880322fe000 0000000000000000 [ 51.291169][ T5958] raw: ffff888032112870 0000000000000001 00000000ffffffff 0000000000000000 [ 51.293328][ T5958] page dumped because: page_pool leak [ 51.294704][ T5958] page_owner tracks the page as allocated [ 51.296226][ T5958] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5958, tgid 5957 (syz-executor194), ts 44776943979, free_ts 42205448945 [ 51.301078][ T5958] post_alloc_hook+0x2d1/0x350 [ 51.302467][ T5958] get_page_from_freelist+0x101e/0x3070 [ 51.304416][ T5958] __alloc_pages_noprof+0x223/0x25a0 [ 51.305896][ T5958] alloc_pages_bulk_noprof+0x77c/0x1110 [ 51.307305][ T5958] __page_pool_alloc_pages_slow+0x18f/0x770 [ 51.308793][ T5958] page_pool_alloc_netmem+0xc4/0x160 [ 51.310091][ T5958] page_pool_alloc_pages+0x1a/0x60 [ 51.311363][ T5958] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 51.312878][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 51.314188][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 51.315574][ T5958] __sys_bpf+0xfc6/0x49a0 [ 51.316673][ T5958] __x64_sys_bpf+0x78/0xc0 [ 51.317787][ T5958] do_syscall_64+0xcd/0x250 [ 51.318936][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.320551][ T5958] page last free pid 5910 tgid 5910 stack trace: [ 51.322212][ T5958] free_unref_page+0x5f4/0xdc0 [ 51.323680][ T5958] __folio_put+0x30d/0x3d0 [ 51.325022][ T5958] put_page+0x21e/0x280 [ 51.326084][ T5958] anon_pipe_buf_release+0x11a/0x240 [ 51.327599][ T5958] pipe_read+0x641/0x13f0 [ 51.328836][ T5958] vfs_read+0xa4c/0xbe0 [ 51.329929][ T5958] ksys_read+0x1fa/0x260 [ 51.331032][ T5958] do_syscall_64+0xcd/0x250 [ 51.332225][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.333696][ T5958] Modules linked in: [ 51.334738][ T5958] CPU: 2 UID: 0 PID: 5958 Comm: syz-executor194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 51.337863][ T5958] Tainted: [B]=BAD_PAGE [ 51.338911][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 51.341684][ T5958] Call Trace: [ 51.342566][ T5958] [ 51.343407][ T5958] dump_stack_lvl+0x16c/0x1f0 [ 51.344606][ T5958] bad_page+0xb3/0x1f0 [ 51.345826][ T5958] ? __pfx_bad_page+0x10/0x10 [ 51.347036][ T5958] ? page_bad_reason+0x9d/0x1e0 [ 51.348280][ T5958] free_unref_page+0x657/0xdc0 [ 51.349478][ T5958] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 51.351018][ T5958] ? __phys_addr+0xc6/0x150 [ 51.352177][ T5958] skb_free_head+0xa0/0x1d0 [ 51.353304][ T5958] skb_release_data+0x560/0x730 [ 51.354516][ T5958] sk_skb_reason_drop+0x129/0x1a0 [ 51.355795][ T5958] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 51.357452][ T5958] ? kernel_text_address+0x8d/0x100 [ 51.358747][ T5958] ? hlock_class+0x4e/0x130 [ 51.359874][ T5958] ? __lock_acquire+0x163e/0x3ce0 [ 51.361138][ T5958] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 51.362882][ T5958] ? hlock_class+0x4e/0x130 [ 51.364220][ T5958] ? __lock_acquire+0xbdd/0x3ce0 [ 51.365473][ T5958] ? __pfx___lock_acquire+0x10/0x10 [ 51.366784][ T5958] __netif_receive_skb_list_core+0x357/0x950 [ 51.368301][ T5958] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 51.369920][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 51.371237][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 51.372905][ T5958] ? lock_acquire+0x2f/0xb0 [ 51.374118][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 51.375717][ T5958] netif_receive_skb_list_internal+0x753/0xdb0 [ 51.377306][ T5958] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 51.379007][ T5958] ? __pfx_eth_type_trans+0x10/0x10 [ 51.380614][ T5958] ? __build_skb_around+0x278/0x3b0 [ 51.382108][ T5958] netif_receive_skb_list+0x4f/0x4a0 [ 51.383456][ T5958] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 51.385263][ T5958] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 51.386930][ T5958] ? bpf_test_timer_continue+0x150/0x3d0 [ 51.388473][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 51.389797][ T5958] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 51.391267][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 51.392928][ T5958] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 51.394455][ T5958] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 51.395925][ T5958] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 51.397250][ T5958] ? 0xffffffffa0004340 [ 51.398259][ T5958] ? 0xffffffffa0004340 [ 51.399309][ T5958] ? 0xffffffffa0004340 [ 51.400602][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 51.402199][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 51.403671][ T5958] ? lock_acquire+0x2f/0xb0 [ 51.404844][ T5958] ? __fget_files+0x40/0x3f0 [ 51.406014][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 51.407821][ T5958] ? fput+0x30/0x390 [ 51.408856][ T5958] ? __bpf_prog_get+0xa0/0x290 [ 51.410087][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 51.411622][ T5958] __sys_bpf+0xfc6/0x49a0 [ 51.412704][ T5958] ? find_held_lock+0x2d/0x110 [ 51.413935][ T5958] ? __pfx___sys_bpf+0x10/0x10 [ 51.415142][ T5958] ? __might_fault+0x13b/0x190 [ 51.416386][ T5958] ? __pfx_lock_release+0x10/0x10 [ 51.417689][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 51.419031][ T5958] ? lock_acquire+0x2f/0xb0 [ 51.420183][ T5958] ? __might_fault+0xe3/0x190 [ 51.421377][ T5958] ? xfd_validate_state+0x5d/0x180 [ 51.422661][ T5958] ? rcu_is_watching+0x12/0xc0 [ 51.423936][ T5958] __x64_sys_bpf+0x78/0xc0 [ 51.425115][ T5958] ? lockdep_hardirqs_on+0x7c/0x110 [ 51.426485][ T5958] do_syscall_64+0xcd/0x250 [ 51.427692][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.429327][ T5958] RIP: 0033:0x7f297e773e99 [ 51.430535][ T5958] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 51.435772][ T5958] RSP: 002b:00007f297e72e228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 51.437879][ T5958] RAX: ffffffffffffffda RBX: 00007f297e7fe328 RCX: 00007f297e773e99 [ 51.439871][ T5958] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 51.441817][ T5958] RBP: 00007f297e7fe320 R08: 00007f297e72e6c0 R09: 00007f297e72e6c0 [ 51.443715][ T5958] R10: 00007f297e72e6c0 R11: 0000000000000246 R12: 00007f297e7cb074 [ 51.445680][ T5958] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007fffd5e26f58 [ 51.447581][ T5958] [ 51.448452][ T5958] BUG: Bad page state in process syz-executor194 pfn:26fdd [ 51.450551][ T5958] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x26fdd [ 51.452816][ T5958] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 51.454590][ T5958] raw: 00fff00000000000 dead000000000040 ffff8880322fe000 0000000000000000 [ 51.456842][ T5958] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 51.459057][ T5958] page dumped because: page_pool leak [ 51.460558][ T5958] page_owner tracks the page as allocated [ 51.461956][ T5958] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5958, tgid 5957 (syz-executor194), ts 44776935571, free_ts 42205453176 [ 51.466672][ T5958] post_alloc_hook+0x2d1/0x350 [ 51.467976][ T5958] get_page_from_freelist+0x101e/0x3070 [ 51.469610][ T5958] __alloc_pages_noprof+0x223/0x25a0 [ 51.471060][ T5958] alloc_pages_bulk_noprof+0x77c/0x1110 [ 51.472556][ T5958] __page_pool_alloc_pages_slow+0x18f/0x770 [ 51.474243][ T5958] page_pool_alloc_netmem+0xc4/0x160 [ 51.475903][ T5958] page_pool_alloc_pages+0x1a/0x60 [ 51.477502][ T5958] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 51.479441][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 51.481039][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 51.482577][ T5958] __sys_bpf+0xfc6/0x49a0 [ 51.483794][ T5958] __x64_sys_bpf+0x78/0xc0 [ 51.485117][ T5958] do_syscall_64+0xcd/0x250 [ 51.486281][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.487782][ T5958] page last free pid 5910 tgid 5910 stack trace: [ 51.489380][ T5958] free_unref_page+0x5f4/0xdc0 [ 51.490590][ T5958] __folio_put+0x30d/0x3d0 [ 51.491703][ T5958] put_page+0x21e/0x280 [ 51.492834][ T5958] anon_pipe_buf_release+0x11a/0x240 [ 51.494269][ T5958] pipe_read+0x641/0x13f0 [ 51.495455][ T5958] vfs_read+0xa4c/0xbe0 [ 51.496550][ T5958] ksys_read+0x1fa/0x260 [ 51.497652][ T5958] do_syscall_64+0xcd/0x250 [ 51.498823][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.500391][ T5958] Modules linked in: [ 51.501410][ T5958] CPU: 2 UID: 0 PID: 5958 Comm: syz-executor194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 51.505087][ T5958] Tainted: [B]=BAD_PAGE [ 51.506202][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 51.509257][ T5958] Call Trace: [ 51.510328][ T5958] [ 51.511114][ T5958] dump_stack_lvl+0x16c/0x1f0 [ 51.512418][ T5958] bad_page+0xb3/0x1f0 [ 51.513533][ T5958] ? __pfx_bad_page+0x10/0x10 [ 51.514817][ T5958] ? page_bad_reason+0x9d/0x1e0 [ 51.516141][ T5958] free_unref_page+0x657/0xdc0 [ 51.517411][ T5958] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 51.519030][ T5958] ? __phys_addr+0xc6/0x150 [ 51.520278][ T5958] skb_free_head+0xa0/0x1d0 [ 51.521482][ T5958] skb_release_data+0x560/0x730 [ 51.522806][ T5958] sk_skb_reason_drop+0x129/0x1a0 [ 51.524181][ T5958] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 51.525895][ T5958] ? kernel_text_address+0x8d/0x100 [ 51.527215][ T5958] ? hlock_class+0x4e/0x130 [ 51.528393][ T5958] ? __lock_acquire+0x163e/0x3ce0 [ 51.529687][ T5958] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 51.531517][ T5958] ? hlock_class+0x4e/0x130 [ 51.532794][ T5958] ? __lock_acquire+0xbdd/0x3ce0 [ 51.534176][ T5958] ? __pfx___lock_acquire+0x10/0x10 [ 51.535538][ T5958] __netif_receive_skb_list_core+0x357/0x950 [ 51.537204][ T5958] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 51.538936][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 51.540462][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 51.542669][ T5958] ? lock_acquire+0x2f/0xb0 [ 51.544152][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 51.545821][ T5958] netif_receive_skb_list_internal+0x753/0xdb0 [ 51.547684][ T5958] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 51.549547][ T5958] ? __pfx_eth_type_trans+0x10/0x10 [ 51.550997][ T5958] ? __build_skb_around+0x278/0x3b0 [ 51.552360][ T5958] netif_receive_skb_list+0x4f/0x4a0 [ 51.553755][ T5958] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 51.555380][ T5958] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 51.557108][ T5958] ? bpf_test_timer_continue+0x150/0x3d0 [ 51.558528][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 51.559904][ T5958] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 51.561449][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 51.562952][ T5958] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 51.564512][ T5958] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 51.566116][ T5958] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 51.567709][ T5958] ? 0xffffffffa0004340 [ 51.568927][ T5958] ? 0xffffffffa0004340 [ 51.570142][ T5958] ? 0xffffffffa0004340 [ 51.571269][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 51.572851][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 51.574255][ T5958] ? lock_acquire+0x2f/0xb0 [ 51.575411][ T5958] ? __fget_files+0x40/0x3f0 [ 51.576611][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 51.578132][ T5958] ? fput+0x30/0x390 [ 51.579140][ T5958] ? __bpf_prog_get+0xa0/0x290 [ 51.580372][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 51.581803][ T5958] __sys_bpf+0xfc6/0x49a0 [ 51.582852][ T5958] ? find_held_lock+0x2d/0x110 [ 51.584054][ T5958] ? __pfx___sys_bpf+0x10/0x10 [ 51.585289][ T5958] ? __might_fault+0x13b/0x190 [ 51.586620][ T5958] ? __pfx_lock_release+0x10/0x10 [ 51.588018][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 51.589491][ T5958] ? lock_acquire+0x2f/0xb0 [ 51.590804][ T5958] ? __might_fault+0xe3/0x190 [ 51.592207][ T5958] ? xfd_validate_state+0x5d/0x180 [ 51.593526][ T5958] ? rcu_is_watching+0x12/0xc0 [ 51.594750][ T5958] __x64_sys_bpf+0x78/0xc0 [ 51.595876][ T5958] ? lockdep_hardirqs_on+0x7c/0x110 [ 51.597165][ T5958] do_syscall_64+0xcd/0x250 [ 51.598324][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.599829][ T5958] RIP: 0033:0x7f297e773e99 [ 51.600993][ T5958] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 51.605846][ T5958] RSP: 002b:00007f297e72e228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 51.608081][ T5958] RAX: ffffffffffffffda RBX: 00007f297e7fe328 RCX: 00007f297e773e99 [ 51.610188][ T5958] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 51.612251][ T5958] RBP: 00007f297e7fe320 R08: 00007f297e72e6c0 R09: 00007f297e72e6c0 [ 51.614283][ T5958] R10: 00007f297e72e6c0 R11: 0000000000000246 R12: 00007f297e7cb074 [ 51.616270][ T5958] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007fffd5e26f58 [ 51.618315][ T5958] [ 51.619228][ T5958] BUG: Bad page state in process syz-executor194 pfn:30b9d [ 51.621055][ T5958] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888030b9d9b0 pfn:0x30b9d [ 51.623592][ T5958] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 51.625477][ T5958] raw: 00fff00000000000 dead000000000040 ffff8880322fe000 0000000000000000 [ 51.627815][ T5958] raw: ffff888030b9d9b0 0000000000000001 00000000ffffffff 0000000000000000 [ 51.630432][ T5958] page dumped because: page_pool leak [ 51.631912][ T5958] page_owner tracks the page as allocated [ 51.633366][ T5958] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5958, tgid 5957 (syz-executor194), ts 44776926857, free_ts 42205457619 [ 51.637721][ T5958] post_alloc_hook+0x2d1/0x350 [ 51.638946][ T5958] get_page_from_freelist+0x101e/0x3070 [ 51.640243][ T5958] __alloc_pages_noprof+0x223/0x25a0 [ 51.641592][ T5958] alloc_pages_bulk_noprof+0x77c/0x1110 [ 51.642934][ T5958] __page_pool_alloc_pages_slow+0x18f/0x770 [ 51.644402][ T5958] page_pool_alloc_netmem+0xc4/0x160 [ 51.645731][ T5958] page_pool_alloc_pages+0x1a/0x60 [ 51.646982][ T5958] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 51.648542][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 51.649896][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 51.651218][ T5958] __sys_bpf+0xfc6/0x49a0 [ 51.652281][ T5958] __x64_sys_bpf+0x78/0xc0 [ 51.653417][ T5958] do_syscall_64+0xcd/0x250 [ 51.654603][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.656164][ T5958] page last free pid 5910 tgid 5910 stack trace: [ 51.657764][ T5958] free_unref_page+0x5f4/0xdc0 [ 51.659008][ T5958] __folio_put+0x30d/0x3d0 [ 51.660457][ T5958] put_page+0x21e/0x280 [ 51.661996][ T5958] anon_pipe_buf_release+0x11a/0x240 [ 51.663473][ T5958] pipe_read+0x641/0x13f0 [ 51.664685][ T5958] vfs_read+0xa4c/0xbe0 [ 51.665862][ T5958] ksys_read+0x1fa/0x260 [ 51.666994][ T5958] do_syscall_64+0xcd/0x250 [ 51.668261][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.669751][ T5958] Modules linked in: [ 51.670749][ T5958] CPU: 2 UID: 0 PID: 5958 Comm: syz-executor194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 51.673851][ T5958] Tainted: [B]=BAD_PAGE [ 51.674927][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 51.677600][ T5958] Call Trace: [ 51.678549][ T5958] [ 51.679320][ T5958] dump_stack_lvl+0x16c/0x1f0 [ 51.680554][ T5958] bad_page+0xb3/0x1f0 [ 51.681631][ T5958] ? __pfx_bad_page+0x10/0x10 [ 51.682855][ T5958] ? page_bad_reason+0x9d/0x1e0 [ 51.684078][ T5958] free_unref_page+0x657/0xdc0 [ 51.685300][ T5958] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 51.686814][ T5958] ? __phys_addr+0xc6/0x150 [ 51.688017][ T5958] skb_free_head+0xa0/0x1d0 [ 51.689214][ T5958] skb_release_data+0x560/0x730 [ 51.690501][ T5958] sk_skb_reason_drop+0x129/0x1a0 [ 51.691780][ T5958] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 51.693522][ T5958] ? kernel_text_address+0x8d/0x100 [ 51.694871][ T5958] ? hlock_class+0x4e/0x130 [ 51.696080][ T5958] ? __lock_acquire+0x163e/0x3ce0 [ 51.697392][ T5958] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 51.699125][ T5958] ? hlock_class+0x4e/0x130 [ 51.700274][ T5958] ? __lock_acquire+0xbdd/0x3ce0 [ 51.701456][ T5958] ? __pfx___lock_acquire+0x10/0x10 [ 51.702824][ T5958] __netif_receive_skb_list_core+0x357/0x950 [ 51.704309][ T5958] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 51.705952][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 51.707285][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 51.708927][ T5958] ? lock_acquire+0x2f/0xb0 [ 51.710106][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 51.711699][ T5958] netif_receive_skb_list_internal+0x753/0xdb0 [ 51.713325][ T5958] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 51.715028][ T5958] ? __pfx_eth_type_trans+0x10/0x10 [ 51.716360][ T5958] ? __build_skb_around+0x278/0x3b0 [ 51.717686][ T5958] netif_receive_skb_list+0x4f/0x4a0 [ 51.719034][ T5958] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 51.720619][ T5958] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 51.722291][ T5958] ? bpf_test_timer_continue+0x150/0x3d0 [ 51.723678][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 51.725205][ T5958] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 51.726858][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 51.728392][ T5958] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 51.729863][ T5958] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 51.731447][ T5958] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 51.732791][ T5958] ? 0xffffffffa0004340 [ 51.733884][ T5958] ? 0xffffffffa0004340 [ 51.735094][ T5958] ? 0xffffffffa0004340 [ 51.736322][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 51.738046][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 51.739592][ T5958] ? lock_acquire+0x2f/0xb0 [ 51.740846][ T5958] ? __fget_files+0x40/0x3f0 [ 51.742017][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 51.743475][ T5958] ? fput+0x30/0x390 [ 51.744452][ T5958] ? __bpf_prog_get+0xa0/0x290 [ 51.745739][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 51.747245][ T5958] __sys_bpf+0xfc6/0x49a0 [ 51.748405][ T5958] ? find_held_lock+0x2d/0x110 [ 51.749660][ T5958] ? __pfx___sys_bpf+0x10/0x10 [ 51.750923][ T5958] ? __might_fault+0x13b/0x190 [ 51.752377][ T5958] ? __pfx_lock_release+0x10/0x10 [ 51.753673][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 51.755027][ T5958] ? lock_acquire+0x2f/0xb0 [ 51.756298][ T5958] ? __might_fault+0xe3/0x190 [ 51.757674][ T5958] ? xfd_validate_state+0x5d/0x180 [ 51.758991][ T5958] ? rcu_is_watching+0x12/0xc0 [ 51.760358][ T5958] __x64_sys_bpf+0x78/0xc0 [ 51.761543][ T5958] ? lockdep_hardirqs_on+0x7c/0x110 [ 51.762865][ T5958] do_syscall_64+0xcd/0x250 [ 51.764137][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.765882][ T5958] RIP: 0033:0x7f297e773e99 [ 51.767101][ T5958] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 51.772552][ T5958] RSP: 002b:00007f297e72e228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 51.775074][ T5958] RAX: ffffffffffffffda RBX: 00007f297e7fe328 RCX: 00007f297e773e99 [ 51.777377][ T5958] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 51.779429][ T5958] RBP: 00007f297e7fe320 R08: 00007f297e72e6c0 R09: 00007f297e72e6c0 [ 51.781512][ T5958] R10: 00007f297e72e6c0 R11: 0000000000000246 R12: 00007f297e7cb074 [ 51.783564][ T5958] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007fffd5e26f58 [ 51.785619][ T5958] [ 51.786478][ T5958] BUG: Bad page state in process syz-executor194 pfn:2ae30 [ 51.788308][ T5958] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2ae30 [ 51.790469][ T5958] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 51.792234][ T5958] raw: 00fff00000000000 dead000000000040 ffff8880322fe000 0000000000000000 [ 51.794354][ T5958] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 51.796495][ T5958] page dumped because: page_pool leak [ 51.797801][ T5958] page_owner tracks the page as allocated [ 51.799218][ T5958] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5958, tgid 5957 (syz-executor194), ts 44776918710, free_ts 42205468237 [ 51.803418][ T5958] post_alloc_hook+0x2d1/0x350 [ 51.804775][ T5958] get_page_from_freelist+0x101e/0x3070 [ 51.806716][ T5958] __alloc_pages_noprof+0x223/0x25a0 [ 51.808478][ T5958] alloc_pages_bulk_noprof+0x77c/0x1110 [ 51.809998][ T5958] __page_pool_alloc_pages_slow+0x18f/0x770 [ 51.811594][ T5958] page_pool_alloc_netmem+0xc4/0x160 [ 51.813006][ T5958] page_pool_alloc_pages+0x1a/0x60 [ 51.814302][ T5958] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 51.815914][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 51.817216][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 51.818598][ T5958] __sys_bpf+0xfc6/0x49a0 [ 51.819736][ T5958] __x64_sys_bpf+0x78/0xc0 [ 51.820949][ T5958] do_syscall_64+0xcd/0x250 [ 51.822117][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.823682][ T5958] page last free pid 5910 tgid 5910 stack trace: [ 51.825410][ T5958] free_unref_page+0x5f4/0xdc0 [ 51.826652][ T5958] __folio_put+0x30d/0x3d0 [ 51.827820][ T5958] put_page+0x21e/0x280 [ 51.829035][ T5958] anon_pipe_buf_release+0x11a/0x240 [ 51.830524][ T5958] pipe_read+0x641/0x13f0 [ 51.831649][ T5958] vfs_read+0xa4c/0xbe0 [ 51.832779][ T5958] ksys_read+0x1fa/0x260 [ 51.833897][ T5958] do_syscall_64+0xcd/0x250 [ 51.835133][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.836700][ T5958] Modules linked in: [ 51.837720][ T5958] CPU: 2 UID: 0 PID: 5958 Comm: syz-executor194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 51.840905][ T5958] Tainted: [B]=BAD_PAGE [ 51.842097][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 51.844935][ T5958] Call Trace: [ 51.845813][ T5958] [ 51.846565][ T5958] dump_stack_lvl+0x16c/0x1f0 [ 51.847798][ T5958] bad_page+0xb3/0x1f0 [ 51.848891][ T5958] ? __pfx_bad_page+0x10/0x10 [ 51.850141][ T5958] ? page_bad_reason+0x9d/0x1e0 [ 51.851420][ T5958] free_unref_page+0x657/0xdc0 [ 51.852694][ T5958] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 51.854208][ T5958] ? __phys_addr+0xc6/0x150 [ 51.855371][ T5958] skb_free_head+0xa0/0x1d0 [ 51.856574][ T5958] skb_release_data+0x560/0x730 [ 51.857871][ T5958] sk_skb_reason_drop+0x129/0x1a0 [ 51.859375][ T5958] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 51.861220][ T5958] ? kernel_text_address+0x8d/0x100 [ 51.862592][ T5958] ? hlock_class+0x4e/0x130 [ 51.864091][ T5958] ? __lock_acquire+0x163e/0x3ce0 [ 51.865583][ T5958] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 51.867619][ T5958] ? hlock_class+0x4e/0x130 [ 51.868899][ T5958] ? __lock_acquire+0xbdd/0x3ce0 [ 51.870579][ T5958] ? __pfx___lock_acquire+0x10/0x10 [ 51.872159][ T5958] __netif_receive_skb_list_core+0x357/0x950 [ 51.873837][ T5958] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 51.875543][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 51.876883][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 51.878517][ T5958] ? lock_acquire+0x2f/0xb0 [ 51.879706][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 51.881286][ T5958] netif_receive_skb_list_internal+0x753/0xdb0 [ 51.882845][ T5958] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 51.884647][ T5958] ? __pfx_eth_type_trans+0x10/0x10 [ 51.885955][ T5958] ? __build_skb_around+0x278/0x3b0 [ 51.887286][ T5958] netif_receive_skb_list+0x4f/0x4a0 [ 51.888620][ T5958] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 51.890175][ T5958] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 51.892011][ T5958] ? bpf_test_timer_continue+0x150/0x3d0 [ 51.893617][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 51.895160][ T5958] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 51.896946][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 51.898702][ T5958] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 51.900654][ T5958] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 51.902423][ T5958] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 51.903878][ T5958] ? 0xffffffffa0004340 [ 51.904889][ T5958] ? 0xffffffffa0004340 [ 51.905922][ T5958] ? 0xffffffffa0004340 [ 51.907011][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 51.908464][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 51.909784][ T5958] ? lock_acquire+0x2f/0xb0 [ 51.910915][ T5958] ? __fget_files+0x40/0x3f0 [ 51.912118][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 51.913562][ T5958] ? fput+0x30/0x390 [ 51.914530][ T5958] ? __bpf_prog_get+0xa0/0x290 [ 51.915738][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 51.917169][ T5958] __sys_bpf+0xfc6/0x49a0 [ 51.918244][ T5958] ? find_held_lock+0x2d/0x110 [ 51.919420][ T5958] ? __pfx___sys_bpf+0x10/0x10 [ 51.920618][ T5958] ? __might_fault+0x13b/0x190 [ 51.921851][ T5958] ? __pfx_lock_release+0x10/0x10 [ 51.923316][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 51.924627][ T5958] ? lock_acquire+0x2f/0xb0 [ 51.925788][ T5958] ? __might_fault+0xe3/0x190 [ 51.927025][ T5958] ? xfd_validate_state+0x5d/0x180 [ 51.928328][ T5958] ? rcu_is_watching+0x12/0xc0 [ 51.929533][ T5958] __x64_sys_bpf+0x78/0xc0 [ 51.930687][ T5958] ? lockdep_hardirqs_on+0x7c/0x110 [ 51.932071][ T5958] do_syscall_64+0xcd/0x250 [ 51.933323][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.934839][ T5958] RIP: 0033:0x7f297e773e99 [ 51.936075][ T5958] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 51.941332][ T5958] RSP: 002b:00007f297e72e228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 51.943431][ T5958] RAX: ffffffffffffffda RBX: 00007f297e7fe328 RCX: 00007f297e773e99 [ 51.945456][ T5958] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 51.947457][ T5958] RBP: 00007f297e7fe320 R08: 00007f297e72e6c0 R09: 00007f297e72e6c0 [ 51.949457][ T5958] R10: 00007f297e72e6c0 R11: 0000000000000246 R12: 00007f297e7cb074 [ 51.951497][ T5958] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007fffd5e26f58 [ 51.953599][ T5958] [ 51.954549][ T5958] BUG: Bad page state in process syz-executor194 pfn:33128 [ 51.956749][ T5958] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803312e600 pfn:0x33128 [ 51.959582][ T5958] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 51.961838][ T5958] raw: 00fff00000000000 dead000000000040 ffff8880322fe000 0000000000000000 [ 51.964410][ T5958] raw: ffff88803312e600 0000000000000001 00000000ffffffff 0000000000000000 [ 51.966689][ T5958] page dumped because: page_pool leak [ 51.968113][ T5958] page_owner tracks the page as allocated [ 51.969613][ T5958] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5958, tgid 5957 (syz-executor194), ts 44776910581, free_ts 42205473220 [ 51.974158][ T5958] post_alloc_hook+0x2d1/0x350 [ 51.975612][ T5958] get_page_from_freelist+0x101e/0x3070 [ 51.977343][ T5958] __alloc_pages_noprof+0x223/0x25a0 [ 51.978724][ T5958] alloc_pages_bulk_noprof+0x77c/0x1110 [ 51.980190][ T5958] __page_pool_alloc_pages_slow+0x18f/0x770 [ 51.981740][ T5958] page_pool_alloc_netmem+0xc4/0x160 [ 51.983145][ T5958] page_pool_alloc_pages+0x1a/0x60 [ 51.984447][ T5958] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 51.986202][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 51.987961][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 51.989817][ T5958] __sys_bpf+0xfc6/0x49a0 [ 51.991343][ T5958] __x64_sys_bpf+0x78/0xc0 [ 51.992571][ T5958] do_syscall_64+0xcd/0x250 [ 51.993929][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.995943][ T5958] page last free pid 5910 tgid 5910 stack trace: [ 51.997742][ T5958] free_unref_page+0x5f4/0xdc0 [ 51.998979][ T5958] __folio_put+0x30d/0x3d0 [ 52.000317][ T5958] put_page+0x21e/0x280 [ 52.001653][ T5958] anon_pipe_buf_release+0x11a/0x240 [ 52.003355][ T5958] pipe_read+0x641/0x13f0 [ 52.004769][ T5958] vfs_read+0xa4c/0xbe0 [ 52.006341][ T5958] ksys_read+0x1fa/0x260 [ 52.008019][ T5958] do_syscall_64+0xcd/0x250 [ 52.009634][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.011358][ T5958] Modules linked in: [ 52.012594][ T5958] CPU: 2 UID: 0 PID: 5958 Comm: syz-executor194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 52.016172][ T5958] Tainted: [B]=BAD_PAGE [ 52.017838][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 52.021581][ T5958] Call Trace: [ 52.022721][ T5958] [ 52.023734][ T5958] dump_stack_lvl+0x16c/0x1f0 [ 52.025350][ T5958] bad_page+0xb3/0x1f0 [ 52.026648][ T5958] ? __pfx_bad_page+0x10/0x10 [ 52.028257][ T5958] ? page_bad_reason+0x9d/0x1e0 [ 52.029886][ T5958] free_unref_page+0x657/0xdc0 [ 52.031527][ T5958] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 52.033640][ T5958] ? __phys_addr+0xc6/0x150 [ 52.035177][ T5958] skb_free_head+0xa0/0x1d0 [ 52.036875][ T5958] skb_release_data+0x560/0x730 [ 52.038847][ T5958] sk_skb_reason_drop+0x129/0x1a0 [ 52.040898][ T5958] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 52.043192][ T5958] ? kernel_text_address+0x8d/0x100 [ 52.044868][ T5958] ? hlock_class+0x4e/0x130 [ 52.046214][ T5958] ? __lock_acquire+0x163e/0x3ce0 [ 52.047522][ T5958] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 52.049796][ T5958] ? hlock_class+0x4e/0x130 [ 52.051264][ T5958] ? __lock_acquire+0xbdd/0x3ce0 [ 52.052755][ T5958] ? __pfx___lock_acquire+0x10/0x10 [ 52.054175][ T5958] __netif_receive_skb_list_core+0x357/0x950 [ 52.055830][ T5958] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 52.057469][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 52.058736][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 52.060318][ T5958] ? lock_acquire+0x2f/0xb0 [ 52.061424][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 52.063123][ T5958] netif_receive_skb_list_internal+0x753/0xdb0 [ 52.064749][ T5958] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 52.066416][ T5958] ? __pfx_eth_type_trans+0x10/0x10 [ 52.067709][ T5958] ? __build_skb_around+0x278/0x3b0 [ 52.069076][ T5958] netif_receive_skb_list+0x4f/0x4a0 [ 52.070426][ T5958] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 52.072091][ T5958] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 52.073737][ T5958] ? bpf_test_timer_continue+0x150/0x3d0 [ 52.075096][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 52.076454][ T5958] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 52.077951][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 52.079426][ T5958] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 52.080880][ T5958] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 52.082337][ T5958] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 52.083666][ T5958] ? 0xffffffffa0004340 [ 52.084695][ T5958] ? 0xffffffffa0004340 [ 52.085742][ T5958] ? 0xffffffffa0004340 [ 52.086764][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 52.088267][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 52.089609][ T5958] ? lock_acquire+0x2f/0xb0 [ 52.090755][ T5958] ? __fget_files+0x40/0x3f0 [ 52.091958][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 52.093427][ T5958] ? fput+0x30/0x390 [ 52.094401][ T5958] ? __bpf_prog_get+0xa0/0x290 [ 52.095607][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 52.097087][ T5958] __sys_bpf+0xfc6/0x49a0 [ 52.098243][ T5958] ? find_held_lock+0x2d/0x110 [ 52.099450][ T5958] ? __pfx___sys_bpf+0x10/0x10 [ 52.100938][ T5958] ? __might_fault+0x13b/0x190 [ 52.102554][ T5958] ? __pfx_lock_release+0x10/0x10 [ 52.103854][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 52.105196][ T5958] ? lock_acquire+0x2f/0xb0 [ 52.106323][ T5958] ? __might_fault+0xe3/0x190 [ 52.107548][ T5958] ? xfd_validate_state+0x5d/0x180 [ 52.108898][ T5958] ? rcu_is_watching+0x12/0xc0 [ 52.110241][ T5958] __x64_sys_bpf+0x78/0xc0 [ 52.111397][ T5958] ? lockdep_hardirqs_on+0x7c/0x110 [ 52.112771][ T5958] do_syscall_64+0xcd/0x250 [ 52.113952][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.115463][ T5958] RIP: 0033:0x7f297e773e99 [ 52.116575][ T5958] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 52.121391][ T5958] RSP: 002b:00007f297e72e228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 52.123516][ T5958] RAX: ffffffffffffffda RBX: 00007f297e7fe328 RCX: 00007f297e773e99 [ 52.125596][ T5958] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 52.127628][ T5958] RBP: 00007f297e7fe320 R08: 00007f297e72e6c0 R09: 00007f297e72e6c0 [ 52.129624][ T5958] R10: 00007f297e72e6c0 R11: 0000000000000246 R12: 00007f297e7cb074 [ 52.131600][ T5958] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007fffd5e26f58 [ 52.133671][ T5958] [ 52.134551][ T5958] BUG: Bad page state in process syz-executor194 pfn:2338a [ 52.136412][ T5958] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2338a [ 52.138541][ T5958] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 52.140349][ T5958] raw: 00fff00000000000 dead000000000040 ffff8880322fe000 0000000000000000 [ 52.142522][ T5958] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 52.144683][ T5958] page dumped because: page_pool leak [ 52.146335][ T5958] page_owner tracks the page as allocated [ 52.148198][ T5958] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5958, tgid 5957 (syz-executor194), ts 44776903002, free_ts 44717676259 [ 52.152682][ T5958] post_alloc_hook+0x2d1/0x350 [ 52.153901][ T5958] get_page_from_freelist+0x101e/0x3070 [ 52.155428][ T5958] __alloc_pages_noprof+0x223/0x25a0 [ 52.156818][ T5958] alloc_pages_bulk_noprof+0x77c/0x1110 [ 52.158266][ T5958] __page_pool_alloc_pages_slow+0x18f/0x770 [ 52.159753][ T5958] page_pool_alloc_netmem+0xc4/0x160 [ 52.161100][ T5958] page_pool_alloc_pages+0x1a/0x60 [ 52.162443][ T5958] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 52.163991][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 52.165385][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 52.166733][ T5958] __sys_bpf+0xfc6/0x49a0 [ 52.167811][ T5958] __x64_sys_bpf+0x78/0xc0 [ 52.168933][ T5958] do_syscall_64+0xcd/0x250 [ 52.170081][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.171561][ T5958] page last free pid 5956 tgid 5950 stack trace: [ 52.173099][ T5958] free_unref_page+0x5f4/0xdc0 [ 52.174312][ T5958] __folio_put+0x30d/0x3d0 [ 52.175454][ T5958] put_page+0x21e/0x280 [ 52.176500][ T5958] page_pool_return_page+0x400/0x520 [ 52.177833][ T5958] page_pool_release+0xf4/0x7d0 [ 52.179050][ T5958] page_pool_destroy+0x10a/0x4c0 [ 52.180280][ T5958] bpf_test_run_xdp_live+0x3a1/0x500 [ 52.181603][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 52.182921][ T5958] __sys_bpf+0xfc6/0x49a0 [ 52.184011][ T5958] __x64_sys_bpf+0x78/0xc0 [ 52.185230][ T5958] do_syscall_64+0xcd/0x250 [ 52.186565][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.188094][ T5958] Modules linked in: [ 52.189107][ T5958] CPU: 2 UID: 0 PID: 5958 Comm: syz-executor194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 52.192526][ T5958] Tainted: [B]=BAD_PAGE [ 52.193605][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 52.196295][ T5958] Call Trace: [ 52.197188][ T5958] [ 52.197929][ T5958] dump_stack_lvl+0x16c/0x1f0 [ 52.199147][ T5958] bad_page+0xb3/0x1f0 [ 52.200275][ T5958] ? __pfx_bad_page+0x10/0x10 [ 52.201566][ T5958] ? page_bad_reason+0x9d/0x1e0 [ 52.202964][ T5958] free_unref_page+0x657/0xdc0 [ 52.204943][ T5958] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 52.206757][ T5958] ? __phys_addr+0xc6/0x150 [ 52.207937][ T5958] skb_free_head+0xa0/0x1d0 [ 52.209146][ T5958] skb_release_data+0x560/0x730 [ 52.210378][ T5958] sk_skb_reason_drop+0x129/0x1a0 [ 52.211664][ T5958] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 52.213352][ T5958] ? kernel_text_address+0x8d/0x100 [ 52.214662][ T5958] ? hlock_class+0x4e/0x130 [ 52.215826][ T5958] ? __lock_acquire+0x163e/0x3ce0 [ 52.217123][ T5958] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 52.218941][ T5958] ? hlock_class+0x4e/0x130 [ 52.220176][ T5958] ? __lock_acquire+0xbdd/0x3ce0 [ 52.221479][ T5958] ? __pfx___lock_acquire+0x10/0x10 [ 52.222965][ T5958] __netif_receive_skb_list_core+0x357/0x950 [ 52.224910][ T5958] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 52.227013][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 52.228618][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 52.230385][ T5958] ? lock_acquire+0x2f/0xb0 [ 52.231697][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 52.233524][ T5958] netif_receive_skb_list_internal+0x753/0xdb0 [ 52.235168][ T5958] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 52.236912][ T5958] ? __pfx_eth_type_trans+0x10/0x10 [ 52.238261][ T5958] ? __build_skb_around+0x278/0x3b0 [ 52.239555][ T5958] netif_receive_skb_list+0x4f/0x4a0 [ 52.240889][ T5958] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 52.242539][ T5958] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 52.244673][ T5958] ? bpf_test_timer_continue+0x150/0x3d0 [ 52.246219][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 52.247603][ T5958] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 52.249394][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 52.250955][ T5958] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 52.252550][ T5958] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 52.254077][ T5958] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 52.255423][ T5958] ? 0xffffffffa0004340 [ 52.256758][ T5958] ? 0xffffffffa0004340 [ 52.258055][ T5958] ? 0xffffffffa0004340 [ 52.259302][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 52.260856][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 52.262263][ T5958] ? lock_acquire+0x2f/0xb0 [ 52.263427][ T5958] ? __fget_files+0x40/0x3f0 [ 52.264808][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 52.266416][ T5958] ? fput+0x30/0x390 [ 52.267496][ T5958] ? __bpf_prog_get+0xa0/0x290 [ 52.268913][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 52.270660][ T5958] __sys_bpf+0xfc6/0x49a0 [ 52.271978][ T5958] ? find_held_lock+0x2d/0x110 [ 52.273405][ T5958] ? __pfx___sys_bpf+0x10/0x10 [ 52.274669][ T5958] ? __might_fault+0x13b/0x190 [ 52.275895][ T5958] ? __pfx_lock_release+0x10/0x10 [ 52.277277][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 52.278684][ T5958] ? lock_acquire+0x2f/0xb0 [ 52.279872][ T5958] ? __might_fault+0xe3/0x190 [ 52.281419][ T5958] ? xfd_validate_state+0x5d/0x180 [ 52.282751][ T5958] ? rcu_is_watching+0x12/0xc0 [ 52.284164][ T5958] __x64_sys_bpf+0x78/0xc0 [ 52.285360][ T5958] ? lockdep_hardirqs_on+0x7c/0x110 [ 52.286743][ T5958] do_syscall_64+0xcd/0x250 [ 52.287952][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.289629][ T5958] RIP: 0033:0x7f297e773e99 [ 52.290791][ T5958] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 52.295766][ T5958] RSP: 002b:00007f297e72e228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 52.297919][ T5958] RAX: ffffffffffffffda RBX: 00007f297e7fe328 RCX: 00007f297e773e99 [ 52.300063][ T5958] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 52.302058][ T5958] RBP: 00007f297e7fe320 R08: 00007f297e72e6c0 R09: 00007f297e72e6c0 [ 52.304514][ T5958] R10: 00007f297e72e6c0 R11: 0000000000000246 R12: 00007f297e7cb074 [ 52.306539][ T5958] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007fffd5e26f58 [ 52.308724][ T5958] [ 52.309675][ T5958] BUG: Bad page state in process syz-executor194 pfn:2f927 [ 52.311686][ T5958] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802f927d00 pfn:0x2f927 [ 52.314307][ T5958] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 52.316147][ T5958] raw: 00fff00000000000 dead000000000040 ffff8880322fe000 0000000000000000 [ 52.318294][ T5958] raw: ffff88802f927d00 0000000000000001 00000000ffffffff 0000000000000000 [ 52.320480][ T5958] page dumped because: page_pool leak [ 52.322097][ T5958] page_owner tracks the page as allocated [ 52.323761][ T5958] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5958, tgid 5957 (syz-executor194), ts 44776894879, free_ts 44717688243 [ 52.328622][ T5958] post_alloc_hook+0x2d1/0x350 [ 52.330086][ T5958] get_page_from_freelist+0x101e/0x3070 [ 52.331753][ T5958] __alloc_pages_noprof+0x223/0x25a0 [ 52.333259][ T5958] alloc_pages_bulk_noprof+0x77c/0x1110 [ 52.334763][ T5958] __page_pool_alloc_pages_slow+0x18f/0x770 [ 52.336464][ T5958] page_pool_alloc_netmem+0xc4/0x160 [ 52.337928][ T5958] page_pool_alloc_pages+0x1a/0x60 [ 52.339265][ T5958] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 52.340892][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 52.342241][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 52.343577][ T5958] __sys_bpf+0xfc6/0x49a0 [ 52.344688][ T5958] __x64_sys_bpf+0x78/0xc0 [ 52.345881][ T5958] do_syscall_64+0xcd/0x250 [ 52.347031][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.348508][ T5958] page last free pid 5956 tgid 5950 stack trace: [ 52.350097][ T5958] free_unref_page+0x5f4/0xdc0 [ 52.351270][ T5958] __folio_put+0x30d/0x3d0 [ 52.352393][ T5958] put_page+0x21e/0x280 [ 52.353424][ T5958] page_pool_return_page+0x400/0x520 [ 52.354722][ T5958] page_pool_release+0xf4/0x7d0 [ 52.355973][ T5958] page_pool_destroy+0x10a/0x4c0 [ 52.357216][ T5958] bpf_test_run_xdp_live+0x3a1/0x500 [ 52.358515][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 52.359816][ T5958] __sys_bpf+0xfc6/0x49a0 [ 52.360889][ T5958] __x64_sys_bpf+0x78/0xc0 [ 52.362009][ T5958] do_syscall_64+0xcd/0x250 [ 52.363170][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.364681][ T5958] Modules linked in: [ 52.365727][ T5958] CPU: 2 UID: 0 PID: 5958 Comm: syz-executor194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 52.368874][ T5958] Tainted: [B]=BAD_PAGE [ 52.369916][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 52.372681][ T5958] Call Trace: [ 52.373551][ T5958] [ 52.374361][ T5958] dump_stack_lvl+0x16c/0x1f0 [ 52.375637][ T5958] bad_page+0xb3/0x1f0 [ 52.376730][ T5958] ? __pfx_bad_page+0x10/0x10 [ 52.377940][ T5958] ? page_bad_reason+0x9d/0x1e0 [ 52.379172][ T5958] free_unref_page+0x657/0xdc0 [ 52.380405][ T5958] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 52.381937][ T5958] ? __phys_addr+0xc6/0x150 [ 52.383061][ T5958] skb_free_head+0xa0/0x1d0 [ 52.384226][ T5958] skb_release_data+0x560/0x730 [ 52.385443][ T5958] sk_skb_reason_drop+0x129/0x1a0 [ 52.386681][ T5958] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 52.388628][ T5958] ? kernel_text_address+0x8d/0x100 [ 52.390191][ T5958] ? hlock_class+0x4e/0x130 [ 52.391333][ T5958] ? __lock_acquire+0x163e/0x3ce0 [ 52.392612][ T5958] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 52.394416][ T5958] ? hlock_class+0x4e/0x130 [ 52.395561][ T5958] ? __lock_acquire+0xbdd/0x3ce0 [ 52.396798][ T5958] ? __pfx___lock_acquire+0x10/0x10 [ 52.398073][ T5958] __netif_receive_skb_list_core+0x357/0x950 [ 52.399585][ T5958] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 52.401206][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 52.402463][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 52.404066][ T5958] ? lock_acquire+0x2f/0xb0 [ 52.405171][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 52.406922][ T5958] netif_receive_skb_list_internal+0x753/0xdb0 [ 52.408844][ T5958] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 52.410826][ T5958] ? __pfx_eth_type_trans+0x10/0x10 [ 52.412609][ T5958] ? __build_skb_around+0x278/0x3b0 [ 52.414148][ T5958] netif_receive_skb_list+0x4f/0x4a0 [ 52.415789][ T5958] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 52.417562][ T5958] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 52.419283][ T5958] ? bpf_test_timer_continue+0x150/0x3d0 [ 52.420688][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 52.421996][ T5958] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 52.423500][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 52.425023][ T5958] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 52.426723][ T5958] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 52.428437][ T5958] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 52.429709][ T5958] ? 0xffffffffa0004340 [ 52.430725][ T5958] ? 0xffffffffa0004340 [ 52.431771][ T5958] ? 0xffffffffa0004340 [ 52.433003][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 52.434465][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 52.435821][ T5958] ? lock_acquire+0x2f/0xb0 [ 52.436994][ T5958] ? __fget_files+0x40/0x3f0 [ 52.438192][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 52.439659][ T5958] ? fput+0x30/0x390 [ 52.440692][ T5958] ? __bpf_prog_get+0xa0/0x290 [ 52.442333][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 52.443797][ T5958] __sys_bpf+0xfc6/0x49a0 [ 52.444967][ T5958] ? find_held_lock+0x2d/0x110 [ 52.446416][ T5958] ? __pfx___sys_bpf+0x10/0x10 [ 52.447752][ T5958] ? __might_fault+0x13b/0x190 [ 52.449230][ T5958] ? __pfx_lock_release+0x10/0x10 [ 52.450488][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 52.451729][ T5958] ? lock_acquire+0x2f/0xb0 [ 52.452921][ T5958] ? __might_fault+0xe3/0x190 [ 52.454282][ T5958] ? xfd_validate_state+0x5d/0x180 [ 52.455611][ T5958] ? rcu_is_watching+0x12/0xc0 [ 52.456855][ T5958] __x64_sys_bpf+0x78/0xc0 [ 52.458018][ T5958] ? lockdep_hardirqs_on+0x7c/0x110 [ 52.459362][ T5958] do_syscall_64+0xcd/0x250 [ 52.460815][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.462474][ T5958] RIP: 0033:0x7f297e773e99 [ 52.463616][ T5958] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 52.468508][ T5958] RSP: 002b:00007f297e72e228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 52.470633][ T5958] RAX: ffffffffffffffda RBX: 00007f297e7fe328 RCX: 00007f297e773e99 [ 52.472929][ T5958] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 52.474922][ T5958] RBP: 00007f297e7fe320 R08: 00007f297e72e6c0 R09: 00007f297e72e6c0 [ 52.476928][ T5958] R10: 00007f297e72e6c0 R11: 0000000000000246 R12: 00007f297e7cb074 [ 52.478871][ T5958] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007fffd5e26f58 [ 52.481145][ T5958] [ 52.482038][ T5958] BUG: Bad page state in process syz-executor194 pfn:20b2c [ 52.483827][ T5958] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888020b2cc98 pfn:0x20b2c [ 52.486273][ T5958] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 52.487976][ T5958] raw: 00fff00000000000 dead000000000040 ffff8880322fe000 0000000000000000 [ 52.490221][ T5958] raw: ffff888020b2cc98 0000000000000001 00000000ffffffff 0000000000000000 [ 52.492524][ T5958] page dumped because: page_pool leak [ 52.493962][ T5958] page_owner tracks the page as allocated [ 52.495547][ T5958] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5958, tgid 5957 (syz-executor194), ts 44776886816, free_ts 44717695004 [ 52.500003][ T5958] post_alloc_hook+0x2d1/0x350 [ 52.501299][ T5958] get_page_from_freelist+0x101e/0x3070 [ 52.502739][ T5958] __alloc_pages_noprof+0x223/0x25a0 [ 52.504114][ T5958] alloc_pages_bulk_noprof+0x77c/0x1110 [ 52.505602][ T5958] __page_pool_alloc_pages_slow+0x18f/0x770 [ 52.507142][ T5958] page_pool_alloc_netmem+0xc4/0x160 [ 52.508569][ T5958] page_pool_alloc_pages+0x1a/0x60 [ 52.509878][ T5958] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 52.511438][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 52.512965][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 52.514371][ T5958] __sys_bpf+0xfc6/0x49a0 [ 52.515543][ T5958] __x64_sys_bpf+0x78/0xc0 [ 52.516714][ T5958] do_syscall_64+0xcd/0x250 [ 52.517915][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.519426][ T5958] page last free pid 5956 tgid 5950 stack trace: [ 52.521034][ T5958] free_unref_page+0x5f4/0xdc0 [ 52.522403][ T5958] __folio_put+0x30d/0x3d0 [ 52.523643][ T5958] put_page+0x21e/0x280 [ 52.524809][ T5958] page_pool_return_page+0x400/0x520 [ 52.526558][ T5958] page_pool_release+0xf4/0x7d0 [ 52.528427][ T5958] page_pool_destroy+0x10a/0x4c0 [ 52.529848][ T5958] bpf_test_run_xdp_live+0x3a1/0x500 [ 52.531220][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 52.532612][ T5958] __sys_bpf+0xfc6/0x49a0 [ 52.533737][ T5958] __x64_sys_bpf+0x78/0xc0 [ 52.534970][ T5958] do_syscall_64+0xcd/0x250 [ 52.536243][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.537783][ T5958] Modules linked in: [ 52.538828][ T5958] CPU: 2 UID: 0 PID: 5958 Comm: syz-executor194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 52.542035][ T5958] Tainted: [B]=BAD_PAGE [ 52.543104][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 52.545956][ T5958] Call Trace: [ 52.546844][ T5958] [ 52.547634][ T5958] dump_stack_lvl+0x16c/0x1f0 [ 52.548891][ T5958] bad_page+0xb3/0x1f0 [ 52.549974][ T5958] ? __pfx_bad_page+0x10/0x10 [ 52.551220][ T5958] ? page_bad_reason+0x9d/0x1e0 [ 52.552516][ T5958] free_unref_page+0x657/0xdc0 [ 52.553746][ T5958] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 52.555313][ T5958] ? __phys_addr+0xc6/0x150 [ 52.556505][ T5958] skb_free_head+0xa0/0x1d0 [ 52.557788][ T5958] skb_release_data+0x560/0x730 [ 52.559046][ T5958] sk_skb_reason_drop+0x129/0x1a0 [ 52.560346][ T5958] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 52.562022][ T5958] ? kernel_text_address+0x8d/0x100 [ 52.563270][ T5958] ? hlock_class+0x4e/0x130 [ 52.564449][ T5958] ? __lock_acquire+0x163e/0x3ce0 [ 52.565914][ T5958] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 52.567766][ T5958] ? hlock_class+0x4e/0x130 [ 52.568956][ T5958] ? __lock_acquire+0xbdd/0x3ce0 [ 52.570262][ T5958] ? __pfx___lock_acquire+0x10/0x10 [ 52.571681][ T5958] __netif_receive_skb_list_core+0x357/0x950 [ 52.573303][ T5958] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 52.575010][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 52.576397][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 52.577986][ T5958] ? lock_acquire+0x2f/0xb0 [ 52.579127][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 52.580856][ T5958] netif_receive_skb_list_internal+0x753/0xdb0 [ 52.582537][ T5958] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 52.584392][ T5958] ? __pfx_eth_type_trans+0x10/0x10 [ 52.585835][ T5958] ? __build_skb_around+0x278/0x3b0 [ 52.587505][ T5958] netif_receive_skb_list+0x4f/0x4a0 [ 52.589319][ T5958] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 52.591002][ T5958] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 52.592738][ T5958] ? bpf_test_timer_continue+0x150/0x3d0 [ 52.594180][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 52.595543][ T5958] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 52.597073][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 52.598634][ T5958] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 52.600304][ T5958] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 52.602178][ T5958] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 52.603670][ T5958] ? 0xffffffffa0004340 [ 52.604770][ T5958] ? 0xffffffffa0004340 [ 52.605972][ T5958] ? 0xffffffffa0004340 [ 52.607466][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 52.609055][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 52.610454][ T5958] ? lock_acquire+0x2f/0xb0 [ 52.611630][ T5958] ? __fget_files+0x40/0x3f0 [ 52.612853][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 52.614339][ T5958] ? fput+0x30/0x390 [ 52.615359][ T5958] ? __bpf_prog_get+0xa0/0x290 [ 52.616615][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 52.618234][ T5958] __sys_bpf+0xfc6/0x49a0 [ 52.619471][ T5958] ? find_held_lock+0x2d/0x110 [ 52.620706][ T5958] ? __pfx___sys_bpf+0x10/0x10 [ 52.622211][ T5958] ? __might_fault+0x13b/0x190 [ 52.623588][ T5958] ? __pfx_lock_release+0x10/0x10 [ 52.624885][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 52.626479][ T5958] ? lock_acquire+0x2f/0xb0 [ 52.627692][ T5958] ? __might_fault+0xe3/0x190 [ 52.629063][ T5958] ? xfd_validate_state+0x5d/0x180 [ 52.630448][ T5958] ? rcu_is_watching+0x12/0xc0 [ 52.631701][ T5958] __x64_sys_bpf+0x78/0xc0 [ 52.632853][ T5958] ? lockdep_hardirqs_on+0x7c/0x110 [ 52.634183][ T5958] do_syscall_64+0xcd/0x250 [ 52.635355][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.636891][ T5958] RIP: 0033:0x7f297e773e99 [ 52.638076][ T5958] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 52.643863][ T5958] RSP: 002b:00007f297e72e228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 52.646343][ T5958] RAX: ffffffffffffffda RBX: 00007f297e7fe328 RCX: 00007f297e773e99 [ 52.648506][ T5958] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 52.650468][ T5958] RBP: 00007f297e7fe320 R08: 00007f297e72e6c0 R09: 00007f297e72e6c0 [ 52.652488][ T5958] R10: 00007f297e72e6c0 R11: 0000000000000246 R12: 00007f297e7cb074 [ 52.654393][ T5958] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007fffd5e26f58 [ 52.656328][ T5958] [ 52.657184][ T5958] BUG: Bad page state in process syz-executor194 pfn:2400c [ 52.658922][ T5958] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802400cd90 pfn:0x2400c [ 52.661519][ T5958] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 52.663317][ T5958] raw: 00fff00000000000 dead000000000040 ffff8880322fe000 0000000000000000 [ 52.665557][ T5958] raw: ffff88802400cd90 0000000000000001 00000000ffffffff 0000000000000000 [ 52.667675][ T5958] page dumped because: page_pool leak [ 52.669042][ T5958] page_owner tracks the page as allocated [ 52.670471][ T5958] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5958, tgid 5957 (syz-executor194), ts 44776878924, free_ts 44717702146 [ 52.674748][ T5958] post_alloc_hook+0x2d1/0x350 [ 52.676038][ T5958] get_page_from_freelist+0x101e/0x3070 [ 52.677437][ T5958] __alloc_pages_noprof+0x223/0x25a0 [ 52.678821][ T5958] alloc_pages_bulk_noprof+0x77c/0x1110 [ 52.680435][ T5958] __page_pool_alloc_pages_slow+0x18f/0x770 [ 52.681895][ T5958] page_pool_alloc_netmem+0xc4/0x160 [ 52.683172][ T5958] page_pool_alloc_pages+0x1a/0x60 [ 52.684511][ T5958] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 52.686179][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 52.687599][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 52.689228][ T5958] __sys_bpf+0xfc6/0x49a0 [ 52.690446][ T5958] __x64_sys_bpf+0x78/0xc0 [ 52.691636][ T5958] do_syscall_64+0xcd/0x250 [ 52.692885][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.694352][ T5958] page last free pid 5956 tgid 5950 stack trace: [ 52.695938][ T5958] free_unref_page+0x5f4/0xdc0 [ 52.697191][ T5958] __folio_put+0x30d/0x3d0 [ 52.698336][ T5958] put_page+0x21e/0x280 [ 52.699407][ T5958] page_pool_return_page+0x400/0x520 [ 52.700749][ T5958] page_pool_release+0xf4/0x7d0 [ 52.702034][ T5958] page_pool_destroy+0x10a/0x4c0 [ 52.703318][ T5958] bpf_test_run_xdp_live+0x3a1/0x500 [ 52.704972][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 52.706378][ T5958] __sys_bpf+0xfc6/0x49a0 [ 52.707452][ T5958] __x64_sys_bpf+0x78/0xc0 [ 52.708587][ T5958] do_syscall_64+0xcd/0x250 [ 52.710044][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.711586][ T5958] Modules linked in: [ 52.712598][ T5958] CPU: 2 UID: 0 PID: 5958 Comm: syz-executor194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 52.715606][ T5958] Tainted: [B]=BAD_PAGE [ 52.716641][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 52.719212][ T5958] Call Trace: [ 52.720042][ T5958] [ 52.720784][ T5958] dump_stack_lvl+0x16c/0x1f0 [ 52.721959][ T5958] bad_page+0xb3/0x1f0 [ 52.723149][ T5958] ? __pfx_bad_page+0x10/0x10 [ 52.724377][ T5958] ? page_bad_reason+0x9d/0x1e0 [ 52.725624][ T5958] free_unref_page+0x657/0xdc0 [ 52.727426][ T5958] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 52.729274][ T5958] ? __phys_addr+0xc6/0x150 [ 52.730551][ T5958] skb_free_head+0xa0/0x1d0 [ 52.731728][ T5958] skb_release_data+0x560/0x730 [ 52.733009][ T5958] sk_skb_reason_drop+0x129/0x1a0 [ 52.734273][ T5958] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 52.735913][ T5958] ? kernel_text_address+0x8d/0x100 [ 52.737235][ T5958] ? hlock_class+0x4e/0x130 [ 52.738373][ T5958] ? __lock_acquire+0x163e/0x3ce0 [ 52.739636][ T5958] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 52.741476][ T5958] ? hlock_class+0x4e/0x130 [ 52.742656][ T5958] ? __lock_acquire+0xbdd/0x3ce0 [ 52.743910][ T5958] ? __pfx___lock_acquire+0x10/0x10 [ 52.745296][ T5958] __netif_receive_skb_list_core+0x357/0x950 [ 52.746754][ T5958] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 52.748374][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 52.749699][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 52.751255][ T5958] ? lock_acquire+0x2f/0xb0 [ 52.752439][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 52.754080][ T5958] netif_receive_skb_list_internal+0x753/0xdb0 [ 52.755603][ T5958] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 52.757419][ T5958] ? __pfx_eth_type_trans+0x10/0x10 [ 52.758755][ T5958] ? __build_skb_around+0x278/0x3b0 [ 52.760237][ T5958] netif_receive_skb_list+0x4f/0x4a0 [ 52.761786][ T5958] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 52.763590][ T5958] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 52.765308][ T5958] ? bpf_test_timer_continue+0x150/0x3d0 [ 52.766745][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 52.768052][ T5958] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 52.769517][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 52.771035][ T5958] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 52.772585][ T5958] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 52.774180][ T5958] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 52.775628][ T5958] ? 0xffffffffa0004340 [ 52.776722][ T5958] ? 0xffffffffa0004340 [ 52.777802][ T5958] ? 0xffffffffa0004340 [ 52.778886][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 52.780417][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 52.781766][ T5958] ? lock_acquire+0x2f/0xb0 [ 52.782914][ T5958] ? __fget_files+0x40/0x3f0 [ 52.784420][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 52.786008][ T5958] ? fput+0x30/0x390 [ 52.787372][ T5958] ? __bpf_prog_get+0xa0/0x290 [ 52.788871][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 52.790696][ T5958] __sys_bpf+0xfc6/0x49a0 [ 52.791911][ T5958] ? find_held_lock+0x2d/0x110 [ 52.793247][ T5958] ? __pfx___sys_bpf+0x10/0x10 [ 52.794566][ T5958] ? __might_fault+0x13b/0x190 [ 52.795890][ T5958] ? __pfx_lock_release+0x10/0x10 [ 52.797266][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 52.798671][ T5958] ? lock_acquire+0x2f/0xb0 [ 52.799913][ T5958] ? __might_fault+0xe3/0x190 [ 52.801168][ T5958] ? xfd_validate_state+0x5d/0x180 [ 52.802487][ T5958] ? rcu_is_watching+0x12/0xc0 [ 52.803728][ T5958] __x64_sys_bpf+0x78/0xc0 [ 52.804869][ T5958] ? lockdep_hardirqs_on+0x7c/0x110 [ 52.806184][ T5958] do_syscall_64+0xcd/0x250 [ 52.807379][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.808927][ T5958] RIP: 0033:0x7f297e773e99 [ 52.810289][ T5958] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 52.815120][ T5958] RSP: 002b:00007f297e72e228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 52.817206][ T5958] RAX: ffffffffffffffda RBX: 00007f297e7fe328 RCX: 00007f297e773e99 [ 52.819292][ T5958] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 52.821485][ T5958] RBP: 00007f297e7fe320 R08: 00007f297e72e6c0 R09: 00007f297e72e6c0 [ 52.823890][ T5958] R10: 00007f297e72e6c0 R11: 0000000000000246 R12: 00007f297e7cb074 [ 52.825974][ T5958] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007fffd5e26f58 [ 52.828155][ T5958] [ 52.829088][ T5958] BUG: Bad page state in process syz-executor194 pfn:28824 [ 52.831035][ T5958] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888028824100 pfn:0x28824 [ 52.833582][ T5958] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 52.835385][ T5958] raw: 00fff00000000000 dead000000000040 ffff8880322fe000 0000000000000000 [ 52.837529][ T5958] raw: ffff888028824100 0000000000000001 00000000ffffffff 0000000000000000 [ 52.839656][ T5958] page dumped because: page_pool leak [ 52.841042][ T5958] page_owner tracks the page as allocated [ 52.842464][ T5958] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5958, tgid 5957 (syz-executor194), ts 44776871332, free_ts 44717708807 [ 52.847011][ T5958] post_alloc_hook+0x2d1/0x350 [ 52.848231][ T5958] get_page_from_freelist+0x101e/0x3070 [ 52.849577][ T5958] __alloc_pages_noprof+0x223/0x25a0 [ 52.850909][ T5958] alloc_pages_bulk_noprof+0x77c/0x1110 [ 52.852306][ T5958] __page_pool_alloc_pages_slow+0x18f/0x770 [ 52.853836][ T5958] page_pool_alloc_netmem+0xc4/0x160 [ 52.855217][ T5958] page_pool_alloc_pages+0x1a/0x60 [ 52.856523][ T5958] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 52.858107][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 52.859416][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 52.860744][ T5958] __sys_bpf+0xfc6/0x49a0 [ 52.861791][ T5958] __x64_sys_bpf+0x78/0xc0 [ 52.862904][ T5958] do_syscall_64+0xcd/0x250 [ 52.864053][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.865593][ T5958] page last free pid 5956 tgid 5950 stack trace: [ 52.867208][ T5958] free_unref_page+0x5f4/0xdc0 [ 52.868416][ T5958] __folio_put+0x30d/0x3d0 [ 52.869517][ T5958] put_page+0x21e/0x280 [ 52.870586][ T5958] page_pool_return_page+0x400/0x520 [ 52.871947][ T5958] page_pool_release+0xf4/0x7d0 [ 52.873220][ T5958] page_pool_destroy+0x10a/0x4c0 [ 52.874497][ T5958] bpf_test_run_xdp_live+0x3a1/0x500 [ 52.875867][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 52.877251][ T5958] __sys_bpf+0xfc6/0x49a0 [ 52.878373][ T5958] __x64_sys_bpf+0x78/0xc0 [ 52.879530][ T5958] do_syscall_64+0xcd/0x250 [ 52.880720][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.882216][ T5958] Modules linked in: [ 52.883251][ T5958] CPU: 2 UID: 0 PID: 5958 Comm: syz-executor194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 52.886455][ T5958] Tainted: [B]=BAD_PAGE [ 52.887516][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 52.890304][ T5958] Call Trace: [ 52.891226][ T5958] [ 52.892008][ T5958] dump_stack_lvl+0x16c/0x1f0 [ 52.893280][ T5958] bad_page+0xb3/0x1f0 [ 52.894534][ T5958] ? __pfx_bad_page+0x10/0x10 [ 52.896003][ T5958] ? page_bad_reason+0x9d/0x1e0 [ 52.897488][ T5958] free_unref_page+0x657/0xdc0 [ 52.898912][ T5958] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 52.900852][ T5958] ? __phys_addr+0xc6/0x150 [ 52.902014][ T5958] skb_free_head+0xa0/0x1d0 [ 52.903165][ T5958] skb_release_data+0x560/0x730 [ 52.904427][ T5958] sk_skb_reason_drop+0x129/0x1a0 [ 52.905745][ T5958] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 52.908145][ T5958] ? kernel_text_address+0x8d/0x100 [ 52.909632][ T5958] ? hlock_class+0x4e/0x130 [ 52.910881][ T5958] ? __lock_acquire+0x163e/0x3ce0 [ 52.912283][ T5958] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 52.914093][ T5958] ? hlock_class+0x4e/0x130 [ 52.915290][ T5958] ? __lock_acquire+0xbdd/0x3ce0 [ 52.916594][ T5958] ? __pfx___lock_acquire+0x10/0x10 [ 52.917889][ T5958] __netif_receive_skb_list_core+0x357/0x950 [ 52.919425][ T5958] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 52.921215][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 52.922511][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 52.924527][ T5958] ? lock_acquire+0x2f/0xb0 [ 52.925946][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 52.928002][ T5958] netif_receive_skb_list_internal+0x753/0xdb0 [ 52.929596][ T5958] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 52.931498][ T5958] ? __pfx_eth_type_trans+0x10/0x10 [ 52.932837][ T5958] ? __build_skb_around+0x278/0x3b0 [ 52.934143][ T5958] netif_receive_skb_list+0x4f/0x4a0 [ 52.935458][ T5958] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 52.937080][ T5958] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 52.938766][ T5958] ? bpf_test_timer_continue+0x150/0x3d0 [ 52.940308][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 52.941973][ T5958] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 52.944069][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 52.945722][ T5958] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 52.947299][ T5958] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 52.948922][ T5958] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 52.950368][ T5958] ? 0xffffffffa0004340 [ 52.951441][ T5958] ? 0xffffffffa0004340 [ 52.952573][ T5958] ? 0xffffffffa0004340 [ 52.953737][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 52.955319][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 52.956695][ T5958] ? lock_acquire+0x2f/0xb0 [ 52.957851][ T5958] ? __fget_files+0x40/0x3f0 [ 52.959013][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 52.960504][ T5958] ? fput+0x30/0x390 [ 52.961480][ T5958] ? __bpf_prog_get+0xa0/0x290 [ 52.962740][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 52.964371][ T5958] __sys_bpf+0xfc6/0x49a0 [ 52.966154][ T5958] ? find_held_lock+0x2d/0x110 [ 52.968019][ T5958] ? __pfx___sys_bpf+0x10/0x10 [ 52.969666][ T5958] ? __might_fault+0x13b/0x190 [ 52.971017][ T5958] ? __pfx_lock_release+0x10/0x10 [ 52.972467][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 52.973939][ T5958] ? lock_acquire+0x2f/0xb0 [ 52.975190][ T5958] ? __might_fault+0xe3/0x190 [ 52.976502][ T5958] ? xfd_validate_state+0x5d/0x180 [ 52.977902][ T5958] ? rcu_is_watching+0x12/0xc0 [ 52.979101][ T5958] __x64_sys_bpf+0x78/0xc0 [ 52.980214][ T5958] ? lockdep_hardirqs_on+0x7c/0x110 [ 52.981519][ T5958] do_syscall_64+0xcd/0x250 [ 52.982685][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.984183][ T5958] RIP: 0033:0x7f297e773e99 [ 52.985284][ T5958] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 52.989963][ T5958] RSP: 002b:00007f297e72e228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 52.992032][ T5958] RAX: ffffffffffffffda RBX: 00007f297e7fe328 RCX: 00007f297e773e99 [ 52.994002][ T5958] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 52.996034][ T5958] RBP: 00007f297e7fe320 R08: 00007f297e72e6c0 R09: 00007f297e72e6c0 [ 52.998013][ T5958] R10: 00007f297e72e6c0 R11: 0000000000000246 R12: 00007f297e7cb074 [ 53.000033][ T5958] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007fffd5e26f58 [ 53.001998][ T5958] [ 53.002907][ T5958] BUG: Bad page state in process syz-executor194 pfn:299d1 [ 53.004703][ T5958] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x8 pfn:0x299d1 [ 53.007026][ T5958] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 53.008882][ T5958] raw: 00fff00000000000 dead000000000040 ffff8880322fe000 0000000000000000 [ 53.011089][ T5958] raw: 0000000000000008 0000000000000001 00000000ffffffff 0000000000000000 [ 53.013382][ T5958] page dumped because: page_pool leak [ 53.014776][ T5958] page_owner tracks the page as allocated [ 53.016270][ T5958] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5958, tgid 5957 (syz-executor194), ts 44776862910, free_ts 44717714825 [ 53.020587][ T5958] post_alloc_hook+0x2d1/0x350 [ 53.021830][ T5958] get_page_from_freelist+0x101e/0x3070 [ 53.023506][ T5958] __alloc_pages_noprof+0x223/0x25a0 [ 53.025018][ T5958] alloc_pages_bulk_noprof+0x77c/0x1110 [ 53.026435][ T5958] __page_pool_alloc_pages_slow+0x18f/0x770 [ 53.028082][ T5958] page_pool_alloc_netmem+0xc4/0x160 [ 53.029564][ T5958] page_pool_alloc_pages+0x1a/0x60 [ 53.030987][ T5958] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 53.032713][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 53.034172][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 53.035779][ T5958] __sys_bpf+0xfc6/0x49a0 [ 53.036978][ T5958] __x64_sys_bpf+0x78/0xc0 [ 53.038191][ T5958] do_syscall_64+0xcd/0x250 [ 53.039360][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.041140][ T5958] page last free pid 5956 tgid 5950 stack trace: [ 53.043004][ T5958] free_unref_page+0x5f4/0xdc0 [ 53.044226][ T5958] __folio_put+0x30d/0x3d0 [ 53.045419][ T5958] put_page+0x21e/0x280 [ 53.046500][ T5958] page_pool_return_page+0x400/0x520 [ 53.047871][ T5958] page_pool_release+0xf4/0x7d0 [ 53.049244][ T5958] page_pool_destroy+0x10a/0x4c0 [ 53.050625][ T5958] bpf_test_run_xdp_live+0x3a1/0x500 [ 53.051991][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 53.053399][ T5958] __sys_bpf+0xfc6/0x49a0 [ 53.054541][ T5958] __x64_sys_bpf+0x78/0xc0 [ 53.055800][ T5958] do_syscall_64+0xcd/0x250 [ 53.056981][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.058467][ T5958] Modules linked in: [ 53.059444][ T5958] CPU: 2 UID: 0 PID: 5958 Comm: syz-executor194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 53.062977][ T5958] Tainted: [B]=BAD_PAGE [ 53.064217][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 53.067229][ T5958] Call Trace: [ 53.068173][ T5958] [ 53.068941][ T5958] dump_stack_lvl+0x16c/0x1f0 [ 53.070354][ T5958] bad_page+0xb3/0x1f0 [ 53.071560][ T5958] ? __pfx_bad_page+0x10/0x10 [ 53.072866][ T5958] ? page_bad_reason+0x9d/0x1e0 [ 53.074267][ T5958] free_unref_page+0x657/0xdc0 [ 53.075611][ T5958] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 53.077470][ T5958] ? __phys_addr+0xc6/0x150 [ 53.078914][ T5958] skb_free_head+0xa0/0x1d0 [ 53.080347][ T5958] skb_release_data+0x560/0x730 [ 53.081786][ T5958] sk_skb_reason_drop+0x129/0x1a0 [ 53.083166][ T5958] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 53.084930][ T5958] ? kernel_text_address+0x8d/0x100 [ 53.086488][ T5958] ? hlock_class+0x4e/0x130 [ 53.087691][ T5958] ? __lock_acquire+0x163e/0x3ce0 [ 53.089297][ T5958] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 53.091222][ T5958] ? hlock_class+0x4e/0x130 [ 53.092406][ T5958] ? __lock_acquire+0xbdd/0x3ce0 [ 53.093651][ T5958] ? __pfx___lock_acquire+0x10/0x10 [ 53.094961][ T5958] __netif_receive_skb_list_core+0x357/0x950 [ 53.096510][ T5958] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 53.098142][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 53.099402][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 53.101907][ T5958] ? lock_acquire+0x2f/0xb0 [ 53.103061][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 53.104675][ T5958] netif_receive_skb_list_internal+0x753/0xdb0 [ 53.106271][ T5958] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 53.107908][ T5958] ? __pfx_eth_type_trans+0x10/0x10 [ 53.109218][ T5958] ? __build_skb_around+0x278/0x3b0 [ 53.110674][ T5958] netif_receive_skb_list+0x4f/0x4a0 [ 53.112271][ T5958] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 53.114219][ T5958] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 53.116113][ T5958] ? bpf_test_timer_continue+0x150/0x3d0 [ 53.117578][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 53.118960][ T5958] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 53.120478][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 53.121987][ T5958] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 53.123540][ T5958] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 53.125011][ T5958] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 53.126398][ T5958] ? 0xffffffffa0004340 [ 53.127488][ T5958] ? 0xffffffffa0004340 [ 53.128568][ T5958] ? 0xffffffffa0004340 [ 53.129583][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 53.131048][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 53.132395][ T5958] ? lock_acquire+0x2f/0xb0 [ 53.133502][ T5958] ? __fget_files+0x40/0x3f0 [ 53.134688][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 53.136223][ T5958] ? fput+0x30/0x390 [ 53.137417][ T5958] ? __bpf_prog_get+0xa0/0x290 [ 53.138767][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 53.140635][ T5958] __sys_bpf+0xfc6/0x49a0 [ 53.141970][ T5958] ? find_held_lock+0x2d/0x110 [ 53.143488][ T5958] ? __pfx___sys_bpf+0x10/0x10 [ 53.144880][ T5958] ? __might_fault+0x13b/0x190 [ 53.146168][ T5958] ? __pfx_lock_release+0x10/0x10 [ 53.147460][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 53.148782][ T5958] ? lock_acquire+0x2f/0xb0 [ 53.149903][ T5958] ? __might_fault+0xe3/0x190 [ 53.151067][ T5958] ? xfd_validate_state+0x5d/0x180 [ 53.152370][ T5958] ? rcu_is_watching+0x12/0xc0 [ 53.153550][ T5958] __x64_sys_bpf+0x78/0xc0 [ 53.154688][ T5958] ? lockdep_hardirqs_on+0x7c/0x110 [ 53.155963][ T5958] do_syscall_64+0xcd/0x250 [ 53.157147][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.158659][ T5958] RIP: 0033:0x7f297e773e99 [ 53.159853][ T5958] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 53.164931][ T5958] RSP: 002b:00007f297e72e228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 53.167150][ T5958] RAX: ffffffffffffffda RBX: 00007f297e7fe328 RCX: 00007f297e773e99 [ 53.169441][ T5958] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 53.171571][ T5958] RBP: 00007f297e7fe320 R08: 00007f297e72e6c0 R09: 00007f297e72e6c0 [ 53.173938][ T5958] R10: 00007f297e72e6c0 R11: 0000000000000246 R12: 00007f297e7cb074 [ 53.176196][ T5958] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007fffd5e26f58 [ 53.178393][ T5958] [ 53.179308][ T5958] BUG: Bad page state in process syz-executor194 pfn:26c01 [ 53.181335][ T5958] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x26c01 [ 53.183574][ T5958] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 53.185643][ T5958] raw: 00fff00000000000 dead000000000040 ffff8880322fe000 0000000000000000 [ 53.187864][ T5958] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 53.190147][ T5958] page dumped because: page_pool leak [ 53.191622][ T5958] page_owner tracks the page as allocated [ 53.193147][ T5958] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5958, tgid 5957 (syz-executor194), ts 44776854464, free_ts 44717720880 [ 53.197515][ T5958] post_alloc_hook+0x2d1/0x350 [ 53.198924][ T5958] get_page_from_freelist+0x101e/0x3070 [ 53.200967][ T5958] __alloc_pages_noprof+0x223/0x25a0 [ 53.202751][ T5958] alloc_pages_bulk_noprof+0x77c/0x1110 [ 53.204538][ T5958] __page_pool_alloc_pages_slow+0x18f/0x770 [ 53.206585][ T5958] page_pool_alloc_netmem+0xc4/0x160 [ 53.208355][ T5958] page_pool_alloc_pages+0x1a/0x60 [ 53.209662][ T5958] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 53.211230][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 53.212579][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 53.213947][ T5958] __sys_bpf+0xfc6/0x49a0 [ 53.215106][ T5958] __x64_sys_bpf+0x78/0xc0 [ 53.216281][ T5958] do_syscall_64+0xcd/0x250 [ 53.217479][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.218981][ T5958] page last free pid 5956 tgid 5950 stack trace: [ 53.220543][ T5958] free_unref_page+0x5f4/0xdc0 [ 53.221780][ T5958] __folio_put+0x30d/0x3d0 [ 53.222918][ T5958] put_page+0x21e/0x280 [ 53.223968][ T5958] page_pool_return_page+0x400/0x520 [ 53.225396][ T5958] page_pool_release+0xf4/0x7d0 [ 53.226637][ T5958] page_pool_destroy+0x10a/0x4c0 [ 53.227907][ T5958] bpf_test_run_xdp_live+0x3a1/0x500 [ 53.229284][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 53.230611][ T5958] __sys_bpf+0xfc6/0x49a0 [ 53.231682][ T5958] __x64_sys_bpf+0x78/0xc0 [ 53.232963][ T5958] do_syscall_64+0xcd/0x250 [ 53.234258][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.235805][ T5958] Modules linked in: [ 53.236819][ T5958] CPU: 2 UID: 0 PID: 5958 Comm: syz-executor194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 53.240058][ T5958] Tainted: [B]=BAD_PAGE [ 53.241364][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 53.244485][ T5958] Call Trace: [ 53.245719][ T5958] [ 53.246798][ T5958] dump_stack_lvl+0x16c/0x1f0 [ 53.248301][ T5958] bad_page+0xb3/0x1f0 [ 53.249597][ T5958] ? __pfx_bad_page+0x10/0x10 [ 53.251079][ T5958] ? page_bad_reason+0x9d/0x1e0 [ 53.252584][ T5958] free_unref_page+0x657/0xdc0 [ 53.253934][ T5958] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 53.255472][ T5958] ? __phys_addr+0xc6/0x150 [ 53.256653][ T5958] skb_free_head+0xa0/0x1d0 [ 53.257804][ T5958] skb_release_data+0x560/0x730 [ 53.259058][ T5958] sk_skb_reason_drop+0x129/0x1a0 [ 53.260575][ T5958] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 53.262284][ T5958] ? kernel_text_address+0x8d/0x100 [ 53.263646][ T5958] ? hlock_class+0x4e/0x130 [ 53.264954][ T5958] ? __lock_acquire+0x163e/0x3ce0 [ 53.266504][ T5958] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 53.268324][ T5958] ? hlock_class+0x4e/0x130 [ 53.269475][ T5958] ? __lock_acquire+0xbdd/0x3ce0 [ 53.270750][ T5958] ? __pfx___lock_acquire+0x10/0x10 [ 53.272334][ T5958] __netif_receive_skb_list_core+0x357/0x950 [ 53.274130][ T5958] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 53.276061][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 53.277558][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 53.279408][ T5958] ? lock_acquire+0x2f/0xb0 [ 53.280995][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 53.282757][ T5958] netif_receive_skb_list_internal+0x753/0xdb0 [ 53.284391][ T5958] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 53.286075][ T5958] ? __pfx_eth_type_trans+0x10/0x10 [ 53.287435][ T5958] ? __build_skb_around+0x278/0x3b0 [ 53.288848][ T5958] netif_receive_skb_list+0x4f/0x4a0 [ 53.290221][ T5958] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 53.292000][ T5958] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 53.293687][ T5958] ? bpf_test_timer_continue+0x150/0x3d0 [ 53.295165][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 53.296486][ T5958] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 53.297977][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 53.299485][ T5958] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 53.301155][ T5958] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 53.303192][ T5958] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 53.304769][ T5958] ? 0xffffffffa0004340 [ 53.306109][ T5958] ? 0xffffffffa0004340 [ 53.307450][ T5958] ? 0xffffffffa0004340 [ 53.308988][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 53.310845][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 53.312314][ T5958] ? lock_acquire+0x2f/0xb0 [ 53.313510][ T5958] ? __fget_files+0x40/0x3f0 [ 53.314706][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 53.316195][ T5958] ? fput+0x30/0x390 [ 53.317216][ T5958] ? __bpf_prog_get+0xa0/0x290 [ 53.318450][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 53.319952][ T5958] __sys_bpf+0xfc6/0x49a0 [ 53.321067][ T5958] ? find_held_lock+0x2d/0x110 [ 53.322603][ T5958] ? __pfx___sys_bpf+0x10/0x10 [ 53.323836][ T5958] ? __might_fault+0x13b/0x190 [ 53.325079][ T5958] ? __pfx_lock_release+0x10/0x10 [ 53.326351][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 53.328065][ T5958] ? lock_acquire+0x2f/0xb0 [ 53.329355][ T5958] ? __might_fault+0xe3/0x190 [ 53.330574][ T5958] ? xfd_validate_state+0x5d/0x180 [ 53.331952][ T5958] ? rcu_is_watching+0x12/0xc0 [ 53.333196][ T5958] __x64_sys_bpf+0x78/0xc0 [ 53.334356][ T5958] ? lockdep_hardirqs_on+0x7c/0x110 [ 53.335678][ T5958] do_syscall_64+0xcd/0x250 [ 53.336958][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.338471][ T5958] RIP: 0033:0x7f297e773e99 [ 53.339610][ T5958] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 53.344487][ T5958] RSP: 002b:00007f297e72e228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 53.346951][ T5958] RAX: ffffffffffffffda RBX: 00007f297e7fe328 RCX: 00007f297e773e99 [ 53.349204][ T5958] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 53.351358][ T5958] RBP: 00007f297e7fe320 R08: 00007f297e72e6c0 R09: 00007f297e72e6c0 [ 53.353450][ T5958] R10: 00007f297e72e6c0 R11: 0000000000000246 R12: 00007f297e7cb074 [ 53.355396][ T5958] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007fffd5e26f58 [ 53.357407][ T5958] [ 53.358330][ T5958] BUG: Bad page state in process syz-executor194 pfn:2b512 [ 53.360255][ T5958] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802b513dc0 pfn:0x2b512 [ 53.363272][ T5958] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 53.365697][ T5958] raw: 00fff00000000000 dead000000000040 ffff8880322fe000 0000000000000000 [ 53.367858][ T5958] raw: ffff88802b513dc0 0000000000000001 00000000ffffffff 0000000000000000 [ 53.370099][ T5958] page dumped because: page_pool leak [ 53.371529][ T5958] page_owner tracks the page as allocated [ 53.372962][ T5958] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5958, tgid 5957 (syz-executor194), ts 44776846992, free_ts 44717726848 [ 53.377587][ T5958] post_alloc_hook+0x2d1/0x350 [ 53.378908][ T5958] get_page_from_freelist+0x101e/0x3070 [ 53.380636][ T5958] __alloc_pages_noprof+0x223/0x25a0 [ 53.382422][ T5958] alloc_pages_bulk_noprof+0x77c/0x1110 [ 53.384269][ T5958] __page_pool_alloc_pages_slow+0x18f/0x770 [ 53.386235][ T5958] page_pool_alloc_netmem+0xc4/0x160 [ 53.387831][ T5958] page_pool_alloc_pages+0x1a/0x60 [ 53.389329][ T5958] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 53.390854][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 53.392208][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 53.393640][ T5958] __sys_bpf+0xfc6/0x49a0 [ 53.394713][ T5958] __x64_sys_bpf+0x78/0xc0 [ 53.395900][ T5958] do_syscall_64+0xcd/0x250 [ 53.397058][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.398477][ T5958] page last free pid 5956 tgid 5950 stack trace: [ 53.400461][ T5958] free_unref_page+0x5f4/0xdc0 [ 53.401991][ T5958] __folio_put+0x30d/0x3d0 [ 53.403194][ T5958] put_page+0x21e/0x280 [ 53.404247][ T5958] page_pool_return_page+0x400/0x520 [ 53.405639][ T5958] page_pool_release+0xf4/0x7d0 [ 53.406900][ T5958] page_pool_destroy+0x10a/0x4c0 [ 53.408171][ T5958] bpf_test_run_xdp_live+0x3a1/0x500 [ 53.409699][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 53.411080][ T5958] __sys_bpf+0xfc6/0x49a0 [ 53.412333][ T5958] __x64_sys_bpf+0x78/0xc0 [ 53.413498][ T5958] do_syscall_64+0xcd/0x250 [ 53.414718][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.416392][ T5958] Modules linked in: [ 53.417365][ T5958] CPU: 2 UID: 0 PID: 5958 Comm: syz-executor194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 53.420426][ T5958] Tainted: [B]=BAD_PAGE [ 53.421486][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 53.424774][ T5958] Call Trace: [ 53.425663][ T5958] [ 53.426553][ T5958] dump_stack_lvl+0x16c/0x1f0 [ 53.428196][ T5958] bad_page+0xb3/0x1f0 [ 53.429431][ T5958] ? __pfx_bad_page+0x10/0x10 [ 53.430893][ T5958] ? page_bad_reason+0x9d/0x1e0 [ 53.432201][ T5958] free_unref_page+0x657/0xdc0 [ 53.433443][ T5958] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 53.434974][ T5958] ? __phys_addr+0xc6/0x150 [ 53.436212][ T5958] skb_free_head+0xa0/0x1d0 [ 53.437417][ T5958] skb_release_data+0x560/0x730 [ 53.438672][ T5958] sk_skb_reason_drop+0x129/0x1a0 [ 53.440232][ T5958] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 53.442405][ T5958] ? kernel_text_address+0x8d/0x100 [ 53.443967][ T5958] ? hlock_class+0x4e/0x130 [ 53.445314][ T5958] ? __lock_acquire+0x163e/0x3ce0 [ 53.446673][ T5958] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 53.448603][ T5958] ? hlock_class+0x4e/0x130 [ 53.450061][ T5958] ? __lock_acquire+0xbdd/0x3ce0 [ 53.451325][ T5958] ? __pfx___lock_acquire+0x10/0x10 [ 53.452797][ T5958] __netif_receive_skb_list_core+0x357/0x950 [ 53.454323][ T5958] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 53.456093][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 53.457458][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 53.459011][ T5958] ? lock_acquire+0x2f/0xb0 [ 53.460134][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 53.461904][ T5958] netif_receive_skb_list_internal+0x753/0xdb0 [ 53.463460][ T5958] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 53.465241][ T5958] ? __pfx_eth_type_trans+0x10/0x10 [ 53.466531][ T5958] ? __build_skb_around+0x278/0x3b0 [ 53.468308][ T5958] netif_receive_skb_list+0x4f/0x4a0 [ 53.469631][ T5958] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 53.471185][ T5958] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 53.473065][ T5958] ? bpf_test_timer_continue+0x150/0x3d0 [ 53.474481][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 53.475813][ T5958] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 53.477292][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 53.478800][ T5958] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 53.480331][ T5958] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 53.481950][ T5958] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 53.483656][ T5958] ? 0xffffffffa0004340 [ 53.485005][ T5958] ? 0xffffffffa0004340 [ 53.486313][ T5958] ? 0xffffffffa0004340 [ 53.487580][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 53.489237][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 53.490606][ T5958] ? lock_acquire+0x2f/0xb0 [ 53.491750][ T5958] ? __fget_files+0x40/0x3f0 [ 53.493113][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 53.494583][ T5958] ? fput+0x30/0x390 [ 53.495586][ T5958] ? __bpf_prog_get+0xa0/0x290 [ 53.496817][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 53.498290][ T5958] __sys_bpf+0xfc6/0x49a0 [ 53.499419][ T5958] ? find_held_lock+0x2d/0x110 [ 53.500936][ T5958] ? __pfx___sys_bpf+0x10/0x10 [ 53.502164][ T5958] ? __might_fault+0x13b/0x190 [ 53.503377][ T5958] ? __pfx_lock_release+0x10/0x10 [ 53.504642][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 53.505979][ T5958] ? lock_acquire+0x2f/0xb0 [ 53.507067][ T5958] ? __might_fault+0xe3/0x190 [ 53.508240][ T5958] ? xfd_validate_state+0x5d/0x180 [ 53.509551][ T5958] ? rcu_is_watching+0x12/0xc0 [ 53.510768][ T5958] __x64_sys_bpf+0x78/0xc0 [ 53.511937][ T5958] ? lockdep_hardirqs_on+0x7c/0x110 [ 53.513409][ T5958] do_syscall_64+0xcd/0x250 [ 53.514750][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.516259][ T5958] RIP: 0033:0x7f297e773e99 [ 53.517394][ T5958] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 53.522216][ T5958] RSP: 002b:00007f297e72e228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 53.524521][ T5958] RAX: ffffffffffffffda RBX: 00007f297e7fe328 RCX: 00007f297e773e99 [ 53.526569][ T5958] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 53.528598][ T5958] RBP: 00007f297e7fe320 R08: 00007f297e72e6c0 R09: 00007f297e72e6c0 [ 53.530656][ T5958] R10: 00007f297e72e6c0 R11: 0000000000000246 R12: 00007f297e7cb074 [ 53.532763][ T5958] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007fffd5e26f58 [ 53.534765][ T5958] [ 53.535605][ T5958] BUG: Bad page state in process syz-executor194 pfn:31676 [ 53.537443][ T5958] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888031676f00 pfn:0x31676 [ 53.539918][ T5958] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 53.541850][ T5958] raw: 00fff00000000000 dead000000000040 ffff8880322fe000 0000000000000000 [ 53.544094][ T5958] raw: ffff888031676f00 0000000000000001 00000000ffffffff 0000000000000000 [ 53.546383][ T5958] page dumped because: page_pool leak [ 53.547921][ T5958] page_owner tracks the page as allocated [ 53.549520][ T5958] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5958, tgid 5957 (syz-executor194), ts 44776838419, free_ts 44762616413 [ 53.554465][ T5958] post_alloc_hook+0x2d1/0x350 [ 53.555819][ T5958] get_page_from_freelist+0x101e/0x3070 [ 53.557247][ T5958] __alloc_pages_noprof+0x223/0x25a0 [ 53.558559][ T5958] alloc_pages_bulk_noprof+0x77c/0x1110 [ 53.559952][ T5958] __page_pool_alloc_pages_slow+0x18f/0x770 [ 53.561812][ T5958] page_pool_alloc_netmem+0xc4/0x160 [ 53.563531][ T5958] page_pool_alloc_pages+0x1a/0x60 [ 53.564964][ T5958] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 53.566563][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 53.567937][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 53.569316][ T5958] __sys_bpf+0xfc6/0x49a0 [ 53.570435][ T5958] __x64_sys_bpf+0x78/0xc0 [ 53.571587][ T5958] do_syscall_64+0xcd/0x250 [ 53.572798][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.574336][ T5958] page last free pid 5962 tgid 5962 stack trace: [ 53.576131][ T5958] free_unref_page+0x5f4/0xdc0 [ 53.577341][ T5958] __put_partials+0x14c/0x170 [ 53.578570][ T5958] qlist_free_all+0x4e/0x120 [ 53.579782][ T5958] kasan_quarantine_reduce+0x192/0x1e0 [ 53.581151][ T5958] __kasan_slab_alloc+0x69/0x90 [ 53.582397][ T5958] kmem_cache_alloc_noprof+0x121/0x2f0 [ 53.584632][ T5958] getname_flags.part.0+0x4c/0x550 [ 53.586095][ T5958] getname+0x8d/0xe0 [ 53.587140][ T5958] do_sys_openat2+0x104/0x1e0 [ 53.588405][ T5958] __x64_sys_openat+0x175/0x210 [ 53.589690][ T5958] do_syscall_64+0xcd/0x250 [ 53.590901][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.592515][ T5958] Modules linked in: [ 53.593549][ T5958] CPU: 2 UID: 0 PID: 5958 Comm: syz-executor194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 53.596996][ T5958] Tainted: [B]=BAD_PAGE [ 53.598086][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 53.600906][ T5958] Call Trace: [ 53.601794][ T5958] [ 53.602579][ T5958] dump_stack_lvl+0x16c/0x1f0 [ 53.604012][ T5958] bad_page+0xb3/0x1f0 [ 53.605476][ T5958] ? __pfx_bad_page+0x10/0x10 [ 53.607265][ T5958] ? page_bad_reason+0x9d/0x1e0 [ 53.608606][ T5958] free_unref_page+0x657/0xdc0 [ 53.610088][ T5958] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 53.611930][ T5958] ? __phys_addr+0xc6/0x150 [ 53.613307][ T5958] skb_free_head+0xa0/0x1d0 [ 53.614695][ T5958] skb_release_data+0x560/0x730 [ 53.616196][ T5958] sk_skb_reason_drop+0x129/0x1a0 [ 53.617654][ T5958] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 53.619421][ T5958] ? kernel_text_address+0x8d/0x100 [ 53.620765][ T5958] ? hlock_class+0x4e/0x130 [ 53.622963][ T5958] ? __lock_acquire+0x163e/0x3ce0 [ 53.624326][ T5958] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 53.626285][ T5958] ? hlock_class+0x4e/0x130 [ 53.627494][ T5958] ? __lock_acquire+0xbdd/0x3ce0 [ 53.628944][ T5958] ? __pfx___lock_acquire+0x10/0x10 [ 53.630362][ T5958] __netif_receive_skb_list_core+0x357/0x950 [ 53.632066][ T5958] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 53.633650][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 53.634963][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 53.636560][ T5958] ? lock_acquire+0x2f/0xb0 [ 53.637668][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 53.639234][ T5958] netif_receive_skb_list_internal+0x753/0xdb0 [ 53.641497][ T5958] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 53.643429][ T5958] ? __pfx_eth_type_trans+0x10/0x10 [ 53.644793][ T5958] ? __build_skb_around+0x278/0x3b0 [ 53.646152][ T5958] netif_receive_skb_list+0x4f/0x4a0 [ 53.647509][ T5958] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 53.649131][ T5958] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 53.650795][ T5958] ? bpf_test_timer_continue+0x150/0x3d0 [ 53.652293][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 53.653665][ T5958] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 53.655172][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 53.656668][ T5958] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 53.658113][ T5958] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 53.659550][ T5958] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 53.660902][ T5958] ? 0xffffffffa0004340 [ 53.661961][ T5958] ? 0xffffffffa0004340 [ 53.663039][ T5958] ? 0xffffffffa0004340 [ 53.664137][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 53.665624][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 53.666982][ T5958] ? lock_acquire+0x2f/0xb0 [ 53.668146][ T5958] ? __fget_files+0x40/0x3f0 [ 53.669296][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 53.670772][ T5958] ? fput+0x30/0x390 [ 53.671786][ T5958] ? __bpf_prog_get+0xa0/0x290 [ 53.673004][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 53.674440][ T5958] __sys_bpf+0xfc6/0x49a0 [ 53.675555][ T5958] ? find_held_lock+0x2d/0x110 [ 53.676819][ T5958] ? __pfx___sys_bpf+0x10/0x10 [ 53.678070][ T5958] ? __might_fault+0x13b/0x190 [ 53.679333][ T5958] ? __pfx_lock_release+0x10/0x10 [ 53.680701][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 53.682118][ T5958] ? lock_acquire+0x2f/0xb0 [ 53.683400][ T5958] ? __might_fault+0xe3/0x190 [ 53.684898][ T5958] ? xfd_validate_state+0x5d/0x180 [ 53.686360][ T5958] ? rcu_is_watching+0x12/0xc0 [ 53.687856][ T5958] __x64_sys_bpf+0x78/0xc0 [ 53.689141][ T5958] ? lockdep_hardirqs_on+0x7c/0x110 [ 53.690661][ T5958] do_syscall_64+0xcd/0x250 [ 53.691974][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.693613][ T5958] RIP: 0033:0x7f297e773e99 [ 53.694817][ T5958] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 53.699726][ T5958] RSP: 002b:00007f297e72e228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 53.701854][ T5958] RAX: ffffffffffffffda RBX: 00007f297e7fe328 RCX: 00007f297e773e99 [ 53.703822][ T5958] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 53.705791][ T5958] RBP: 00007f297e7fe320 R08: 00007f297e72e6c0 R09: 00007f297e72e6c0 [ 53.707776][ T5958] R10: 00007f297e72e6c0 R11: 0000000000000246 R12: 00007f297e7cb074 [ 53.709761][ T5958] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007fffd5e26f58 [ 53.711782][ T5958] [ 53.712693][ T5958] BUG: Bad page state in process syz-executor194 pfn:276d5 [ 53.714422][ T5958] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880276d5f00 pfn:0x276d5 [ 53.716710][ T5958] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 53.718566][ T5958] raw: 00fff00000000000 dead000000000040 ffff8880322fe000 0000000000000000 [ 53.720709][ T5958] raw: ffff8880276d5f00 0000000000000001 00000000ffffffff 0000000000000000 [ 53.722989][ T5958] page dumped because: page_pool leak [ 53.724373][ T5958] page_owner tracks the page as allocated [ 53.725897][ T5958] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5958, tgid 5957 (syz-executor194), ts 44776829825, free_ts 44762626594 [ 53.730920][ T5958] post_alloc_hook+0x2d1/0x350 [ 53.732176][ T5958] get_page_from_freelist+0x101e/0x3070 [ 53.733568][ T5958] __alloc_pages_noprof+0x223/0x25a0 [ 53.734916][ T5958] alloc_pages_bulk_noprof+0x77c/0x1110 [ 53.736334][ T5958] __page_pool_alloc_pages_slow+0x18f/0x770 [ 53.737853][ T5958] page_pool_alloc_netmem+0xc4/0x160 [ 53.739210][ T5958] page_pool_alloc_pages+0x1a/0x60 [ 53.740671][ T5958] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 53.742413][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 53.743809][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 53.745326][ T5958] __sys_bpf+0xfc6/0x49a0 [ 53.746482][ T5958] __x64_sys_bpf+0x78/0xc0 [ 53.747675][ T5958] do_syscall_64+0xcd/0x250 [ 53.748949][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.750559][ T5958] page last free pid 5962 tgid 5962 stack trace: [ 53.752270][ T5958] free_unref_page+0x5f4/0xdc0 [ 53.753526][ T5958] __put_partials+0x14c/0x170 [ 53.754740][ T5958] qlist_free_all+0x4e/0x120 [ 53.755971][ T5958] kasan_quarantine_reduce+0x192/0x1e0 [ 53.757382][ T5958] __kasan_slab_alloc+0x69/0x90 [ 53.758611][ T5958] kmem_cache_alloc_noprof+0x121/0x2f0 [ 53.760011][ T5958] getname_flags.part.0+0x4c/0x550 [ 53.761536][ T5958] getname+0x8d/0xe0 [ 53.762559][ T5958] do_sys_openat2+0x104/0x1e0 [ 53.763814][ T5958] __x64_sys_openat+0x175/0x210 [ 53.765241][ T5958] do_syscall_64+0xcd/0x250 [ 53.766407][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.767961][ T5958] Modules linked in: [ 53.768990][ T5958] CPU: 2 UID: 0 PID: 5958 Comm: syz-executor194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 53.772939][ T5958] Tainted: [B]=BAD_PAGE [ 53.774294][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 53.777399][ T5958] Call Trace: [ 53.778226][ T5958] [ 53.778998][ T5958] dump_stack_lvl+0x16c/0x1f0 [ 53.780228][ T5958] bad_page+0xb3/0x1f0 [ 53.781845][ T5958] ? __pfx_bad_page+0x10/0x10 [ 53.783216][ T5958] ? page_bad_reason+0x9d/0x1e0 [ 53.784586][ T5958] free_unref_page+0x657/0xdc0 [ 53.785784][ T5958] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 53.787321][ T5958] ? __phys_addr+0xc6/0x150 [ 53.788529][ T5958] skb_free_head+0xa0/0x1d0 [ 53.789714][ T5958] skb_release_data+0x560/0x730 [ 53.791111][ T5958] sk_skb_reason_drop+0x129/0x1a0 [ 53.792424][ T5958] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 53.794131][ T5958] ? kernel_text_address+0x8d/0x100 [ 53.795442][ T5958] ? hlock_class+0x4e/0x130 [ 53.796652][ T5958] ? __lock_acquire+0x163e/0x3ce0 [ 53.797953][ T5958] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 53.799709][ T5958] ? hlock_class+0x4e/0x130 [ 53.800860][ T5958] ? __lock_acquire+0xbdd/0x3ce0 [ 53.802382][ T5958] ? __pfx___lock_acquire+0x10/0x10 [ 53.803741][ T5958] __netif_receive_skb_list_core+0x357/0x950 [ 53.805366][ T5958] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 53.807259][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 53.808782][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 53.810745][ T5958] ? lock_acquire+0x2f/0xb0 [ 53.811960][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 53.813591][ T5958] netif_receive_skb_list_internal+0x753/0xdb0 [ 53.815193][ T5958] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 53.816948][ T5958] ? __pfx_eth_type_trans+0x10/0x10 [ 53.818257][ T5958] ? __build_skb_around+0x278/0x3b0 [ 53.819508][ T5958] netif_receive_skb_list+0x4f/0x4a0 [ 53.821263][ T5958] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 53.822914][ T5958] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 53.824853][ T5958] ? bpf_test_timer_continue+0x150/0x3d0 [ 53.826354][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 53.827793][ T5958] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 53.829384][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 53.830887][ T5958] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 53.832400][ T5958] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 53.834031][ T5958] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 53.835364][ T5958] ? 0xffffffffa0004340 [ 53.836412][ T5958] ? 0xffffffffa0004340 [ 53.837504][ T5958] ? 0xffffffffa0004340 [ 53.838560][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 53.840061][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 53.841621][ T5958] ? lock_acquire+0x2f/0xb0 [ 53.842800][ T5958] ? __fget_files+0x40/0x3f0 [ 53.844259][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 53.846193][ T5958] ? fput+0x30/0x390 [ 53.847339][ T5958] ? __bpf_prog_get+0xa0/0x290 [ 53.848781][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 53.850382][ T5958] __sys_bpf+0xfc6/0x49a0 [ 53.851518][ T5958] ? find_held_lock+0x2d/0x110 [ 53.852787][ T5958] ? __pfx___sys_bpf+0x10/0x10 [ 53.853993][ T5958] ? __might_fault+0x13b/0x190 [ 53.855188][ T5958] ? __pfx_lock_release+0x10/0x10 [ 53.856507][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 53.857768][ T5958] ? lock_acquire+0x2f/0xb0 [ 53.858898][ T5958] ? __might_fault+0xe3/0x190 [ 53.860132][ T5958] ? xfd_validate_state+0x5d/0x180 [ 53.861426][ T5958] ? rcu_is_watching+0x12/0xc0 [ 53.862600][ T5958] __x64_sys_bpf+0x78/0xc0 [ 53.863833][ T5958] ? lockdep_hardirqs_on+0x7c/0x110 [ 53.865293][ T5958] do_syscall_64+0xcd/0x250 [ 53.866489][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.868206][ T5958] RIP: 0033:0x7f297e773e99 [ 53.869382][ T5958] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 53.874607][ T5958] RSP: 002b:00007f297e72e228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 53.876944][ T5958] RAX: ffffffffffffffda RBX: 00007f297e7fe328 RCX: 00007f297e773e99 [ 53.879052][ T5958] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 53.881860][ T5958] RBP: 00007f297e7fe320 R08: 00007f297e72e6c0 R09: 00007f297e72e6c0 [ 53.884646][ T5958] R10: 00007f297e72e6c0 R11: 0000000000000246 R12: 00007f297e7cb074 [ 53.886950][ T5958] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007fffd5e26f58 [ 53.889358][ T5958] [ 53.890436][ T5958] BUG: Bad page state in process syz-executor194 pfn:250c1 [ 53.892488][ T5958] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880250c1f00 pfn:0x250c1 [ 53.895020][ T5958] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 53.896797][ T5958] raw: 00fff00000000000 dead000000000040 ffff8880322fe000 0000000000000000 [ 53.898927][ T5958] raw: ffff8880250c1f00 0000000000000001 00000000ffffffff 0000000000000000 [ 53.901832][ T5958] page dumped because: page_pool leak [ 53.903333][ T5958] page_owner tracks the page as allocated [ 53.905318][ T5958] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5958, tgid 5957 (syz-executor194), ts 44776821202, free_ts 44762633228 [ 53.910064][ T5958] post_alloc_hook+0x2d1/0x350 [ 53.911251][ T5958] get_page_from_freelist+0x101e/0x3070 [ 53.912638][ T5958] __alloc_pages_noprof+0x223/0x25a0 [ 53.914000][ T5958] alloc_pages_bulk_noprof+0x77c/0x1110 [ 53.915456][ T5958] __page_pool_alloc_pages_slow+0x18f/0x770 [ 53.916929][ T5958] page_pool_alloc_netmem+0xc4/0x160 [ 53.918317][ T5958] page_pool_alloc_pages+0x1a/0x60 [ 53.919702][ T5958] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 53.921590][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 53.923290][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 53.924718][ T5958] __sys_bpf+0xfc6/0x49a0 [ 53.926173][ T5958] __x64_sys_bpf+0x78/0xc0 [ 53.927586][ T5958] do_syscall_64+0xcd/0x250 [ 53.928985][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.930706][ T5958] page last free pid 5962 tgid 5962 stack trace: [ 53.932370][ T5958] free_unref_page+0x5f4/0xdc0 [ 53.933666][ T5958] __put_partials+0x14c/0x170 [ 53.935252][ T5958] qlist_free_all+0x4e/0x120 [ 53.936518][ T5958] kasan_quarantine_reduce+0x192/0x1e0 [ 53.937855][ T5958] __kasan_slab_alloc+0x69/0x90 [ 53.939108][ T5958] kmem_cache_alloc_noprof+0x121/0x2f0 [ 53.940454][ T5958] getname_flags.part.0+0x4c/0x550 [ 53.941742][ T5958] getname+0x8d/0xe0 [ 53.943057][ T5958] do_sys_openat2+0x104/0x1e0 [ 53.944401][ T5958] __x64_sys_openat+0x175/0x210 [ 53.945753][ T5958] do_syscall_64+0xcd/0x250 [ 53.946959][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.948853][ T5958] Modules linked in: [ 53.950040][ T5958] CPU: 2 UID: 0 PID: 5958 Comm: syz-executor194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 53.953370][ T5958] Tainted: [B]=BAD_PAGE [ 53.954444][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 53.957140][ T5958] Call Trace: [ 53.958022][ T5958] [ 53.958809][ T5958] dump_stack_lvl+0x16c/0x1f0 [ 53.960033][ T5958] bad_page+0xb3/0x1f0 [ 53.961241][ T5958] ? __pfx_bad_page+0x10/0x10 [ 53.962559][ T5958] ? page_bad_reason+0x9d/0x1e0 [ 53.963857][ T5958] free_unref_page+0x657/0xdc0 [ 53.965594][ T5958] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 53.967423][ T5958] ? __phys_addr+0xc6/0x150 [ 53.968735][ T5958] skb_free_head+0xa0/0x1d0 [ 53.970014][ T5958] skb_release_data+0x560/0x730 [ 53.971247][ T5958] sk_skb_reason_drop+0x129/0x1a0 [ 53.972572][ T5958] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 53.974321][ T5958] ? kernel_text_address+0x8d/0x100 [ 53.975694][ T5958] ? hlock_class+0x4e/0x130 [ 53.976942][ T5958] ? __lock_acquire+0x163e/0x3ce0 [ 53.978314][ T5958] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 53.980113][ T5958] ? hlock_class+0x4e/0x130 [ 53.981303][ T5958] ? __lock_acquire+0xbdd/0x3ce0 [ 53.982568][ T5958] ? __pfx___lock_acquire+0x10/0x10 [ 53.984214][ T5958] __netif_receive_skb_list_core+0x357/0x950 [ 53.986127][ T5958] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 53.988185][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 53.989670][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 53.991501][ T5958] ? lock_acquire+0x2f/0xb0 [ 53.992810][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 53.994382][ T5958] netif_receive_skb_list_internal+0x753/0xdb0 [ 53.996047][ T5958] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 53.997795][ T5958] ? __pfx_eth_type_trans+0x10/0x10 [ 53.999160][ T5958] ? __build_skb_around+0x278/0x3b0 [ 54.000740][ T5958] netif_receive_skb_list+0x4f/0x4a0 [ 54.002154][ T5958] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 54.003776][ T5958] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 54.005490][ T5958] ? bpf_test_timer_continue+0x150/0x3d0 [ 54.006949][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 54.008339][ T5958] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 54.009853][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 54.011505][ T5958] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 54.013231][ T5958] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 54.014831][ T5958] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 54.016361][ T5958] ? 0xffffffffa0004340 [ 54.017879][ T5958] ? 0xffffffffa0004340 [ 54.019169][ T5958] ? 0xffffffffa0004340 [ 54.020276][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 54.021819][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 54.023234][ T5958] ? lock_acquire+0x2f/0xb0 [ 54.024405][ T5958] ? __fget_files+0x40/0x3f0 [ 54.025877][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 54.027405][ T5958] ? fput+0x30/0x390 [ 54.028459][ T5958] ? __bpf_prog_get+0xa0/0x290 [ 54.029729][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 54.031282][ T5958] __sys_bpf+0xfc6/0x49a0 [ 54.032535][ T5958] ? find_held_lock+0x2d/0x110 [ 54.033773][ T5958] ? __pfx___sys_bpf+0x10/0x10 [ 54.035024][ T5958] ? __might_fault+0x13b/0x190 [ 54.036256][ T5958] ? __pfx_lock_release+0x10/0x10 [ 54.038219][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 54.039767][ T5958] ? lock_acquire+0x2f/0xb0 [ 54.041071][ T5958] ? __might_fault+0xe3/0x190 [ 54.042324][ T5958] ? xfd_validate_state+0x5d/0x180 [ 54.043646][ T5958] ? rcu_is_watching+0x12/0xc0 [ 54.044851][ T5958] __x64_sys_bpf+0x78/0xc0 [ 54.045972][ T5958] ? lockdep_hardirqs_on+0x7c/0x110 [ 54.047363][ T5958] do_syscall_64+0xcd/0x250 [ 54.048547][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.050129][ T5958] RIP: 0033:0x7f297e773e99 [ 54.051288][ T5958] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 54.057419][ T5958] RSP: 002b:00007f297e72e228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 54.060317][ T5958] RAX: ffffffffffffffda RBX: 00007f297e7fe328 RCX: 00007f297e773e99 [ 54.062715][ T5958] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 54.064744][ T5958] RBP: 00007f297e7fe320 R08: 00007f297e72e6c0 R09: 00007f297e72e6c0 [ 54.066762][ T5958] R10: 00007f297e72e6c0 R11: 0000000000000246 R12: 00007f297e7cb074 [ 54.068780][ T5958] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007fffd5e26f58 [ 54.070829][ T5958] [ 54.071725][ T5958] BUG: Bad page state in process syz-executor194 pfn:2f0e5 [ 54.073844][ T5958] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802f0e5000 pfn:0x2f0e5 [ 54.076456][ T5958] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 54.078198][ T5958] raw: 00fff00000000000 dead000000000040 ffff8880322fe000 0000000000000000 [ 54.080417][ T5958] raw: ffff88802f0e5000 0000000000000001 00000000ffffffff 0000000000000000 [ 54.082561][ T5958] page dumped because: page_pool leak [ 54.083891][ T5958] page_owner tracks the page as allocated [ 54.085365][ T5958] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5958, tgid 5957 (syz-executor194), ts 44776813280, free_ts 44762642849 [ 54.089985][ T5958] post_alloc_hook+0x2d1/0x350 [ 54.092159][ T5958] get_page_from_freelist+0x101e/0x3070 [ 54.094524][ T5958] __alloc_pages_noprof+0x223/0x25a0 [ 54.096844][ T5958] alloc_pages_bulk_noprof+0x77c/0x1110 [ 54.098787][ T5958] __page_pool_alloc_pages_slow+0x18f/0x770 [ 54.100879][ T5958] page_pool_alloc_netmem+0xc4/0x160 [ 54.102606][ T5958] page_pool_alloc_pages+0x1a/0x60 [ 54.104072][ T5958] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 54.106125][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 54.107582][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 54.109248][ T5958] __sys_bpf+0xfc6/0x49a0 [ 54.110952][ T5958] __x64_sys_bpf+0x78/0xc0 [ 54.112741][ T5958] do_syscall_64+0xcd/0x250 [ 54.114134][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.116953][ T5958] page last free pid 5962 tgid 5962 stack trace: [ 54.118681][ T5958] free_unref_page+0x5f4/0xdc0 [ 54.120052][ T5958] qlist_free_all+0x4e/0x120 [ 54.121504][ T5958] kasan_quarantine_reduce+0x192/0x1e0 [ 54.123387][ T5958] __kasan_slab_alloc+0x69/0x90 [ 54.124749][ T5958] kmem_cache_alloc_noprof+0x121/0x2f0 [ 54.126243][ T5958] getname_flags.part.0+0x4c/0x550 [ 54.127814][ T5958] getname+0x8d/0xe0 [ 54.129082][ T5958] do_sys_openat2+0x104/0x1e0 [ 54.130896][ T5958] __x64_sys_openat+0x175/0x210 [ 54.132580][ T5958] do_syscall_64+0xcd/0x250 [ 54.133924][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.135774][ T5958] Modules linked in: [ 54.137117][ T5958] CPU: 2 UID: 0 PID: 5958 Comm: syz-executor194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 54.140953][ T5958] Tainted: [B]=BAD_PAGE [ 54.142130][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 54.144785][ T5958] Call Trace: [ 54.145666][ T5958] [ 54.146434][ T5958] dump_stack_lvl+0x16c/0x1f0 [ 54.147627][ T5958] bad_page+0xb3/0x1f0 [ 54.148685][ T5958] ? __pfx_bad_page+0x10/0x10 [ 54.149922][ T5958] ? page_bad_reason+0x9d/0x1e0 [ 54.151277][ T5958] free_unref_page+0x657/0xdc0 [ 54.152748][ T5958] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 54.154353][ T5958] ? __phys_addr+0xc6/0x150 [ 54.155559][ T5958] skb_free_head+0xa0/0x1d0 [ 54.157278][ T5958] skb_release_data+0x560/0x730 [ 54.158643][ T5958] sk_skb_reason_drop+0x129/0x1a0 [ 54.160196][ T5958] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 54.162204][ T5958] ? kernel_text_address+0x8d/0x100 [ 54.163681][ T5958] ? hlock_class+0x4e/0x130 [ 54.165246][ T5958] ? __lock_acquire+0x163e/0x3ce0 [ 54.167045][ T5958] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 54.169304][ T5958] ? hlock_class+0x4e/0x130 [ 54.171004][ T5958] ? __lock_acquire+0xbdd/0x3ce0 [ 54.172324][ T5958] ? __pfx___lock_acquire+0x10/0x10 [ 54.174386][ T5958] __netif_receive_skb_list_core+0x357/0x950 [ 54.177736][ T5958] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 54.179618][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 54.181315][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 54.183145][ T5958] ? lock_acquire+0x2f/0xb0 [ 54.184338][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 54.186126][ T5958] netif_receive_skb_list_internal+0x753/0xdb0 [ 54.187821][ T5958] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 54.189525][ T5958] ? __pfx_eth_type_trans+0x10/0x10 [ 54.190855][ T5958] ? __build_skb_around+0x278/0x3b0 [ 54.192389][ T5958] netif_receive_skb_list+0x4f/0x4a0 [ 54.193685][ T5958] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 54.195205][ T5958] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 54.197269][ T5958] ? bpf_test_timer_continue+0x150/0x3d0 [ 54.199032][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 54.200675][ T5958] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 54.202144][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 54.203753][ T5958] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 54.205388][ T5958] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 54.206912][ T5958] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 54.208293][ T5958] ? 0xffffffffa0004340 [ 54.209374][ T5958] ? 0xffffffffa0004340 [ 54.210423][ T5958] ? 0xffffffffa0004340 [ 54.211585][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 54.213448][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 54.214798][ T5958] ? lock_acquire+0x2f/0xb0 [ 54.216147][ T5958] ? __fget_files+0x40/0x3f0 [ 54.217731][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 54.219310][ T5958] ? fput+0x30/0x390 [ 54.220445][ T5958] ? __bpf_prog_get+0xa0/0x290 [ 54.221726][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 54.223270][ T5958] __sys_bpf+0xfc6/0x49a0 [ 54.224428][ T5958] ? find_held_lock+0x2d/0x110 [ 54.225698][ T5958] ? __pfx___sys_bpf+0x10/0x10 [ 54.226972][ T5958] ? __might_fault+0x13b/0x190 [ 54.228286][ T5958] ? __pfx_lock_release+0x10/0x10 [ 54.229626][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 54.231001][ T5958] ? lock_acquire+0x2f/0xb0 [ 54.232175][ T5958] ? __might_fault+0xe3/0x190 [ 54.233374][ T5958] ? xfd_validate_state+0x5d/0x180 [ 54.234676][ T5958] ? rcu_is_watching+0x12/0xc0 [ 54.235916][ T5958] __x64_sys_bpf+0x78/0xc0 [ 54.237092][ T5958] ? lockdep_hardirqs_on+0x7c/0x110 [ 54.238598][ T5958] do_syscall_64+0xcd/0x250 [ 54.239950][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.241874][ T5958] RIP: 0033:0x7f297e773e99 [ 54.243171][ T5958] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 54.249394][ T5958] RSP: 002b:00007f297e72e228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 54.252532][ T5958] RAX: ffffffffffffffda RBX: 00007f297e7fe328 RCX: 00007f297e773e99 [ 54.255186][ T5958] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 54.257885][ T5958] RBP: 00007f297e7fe320 R08: 00007f297e72e6c0 R09: 00007f297e72e6c0 [ 54.260339][ T5958] R10: 00007f297e72e6c0 R11: 0000000000000246 R12: 00007f297e7cb074 [ 54.262781][ T5958] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007fffd5e26f58 [ 54.265171][ T5958] [ 54.266068][ T5958] BUG: Bad page state in process syz-executor194 pfn:2d9d3 [ 54.267912][ T5958] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802d9d3800 pfn:0x2d9d3 [ 54.270951][ T5958] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 54.273196][ T5958] raw: 00fff00000000000 dead000000000040 ffff8880322fe000 0000000000000000 [ 54.276174][ T5958] raw: ffff88802d9d3800 0000000000000001 00000000ffffffff 0000000000000000 [ 54.278764][ T5958] page dumped because: page_pool leak [ 54.280569][ T5958] page_owner tracks the page as allocated [ 54.282491][ T5958] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5958, tgid 5957 (syz-executor194), ts 44776805300, free_ts 44762651921 [ 54.288363][ T5958] post_alloc_hook+0x2d1/0x350 [ 54.289848][ T5958] get_page_from_freelist+0x101e/0x3070 [ 54.292509][ T5958] __alloc_pages_noprof+0x223/0x25a0 [ 54.294458][ T5958] alloc_pages_bulk_noprof+0x77c/0x1110 [ 54.296875][ T5958] __page_pool_alloc_pages_slow+0x18f/0x770 [ 54.298792][ T5958] page_pool_alloc_netmem+0xc4/0x160 [ 54.300678][ T5958] page_pool_alloc_pages+0x1a/0x60 [ 54.302256][ T5958] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 54.304279][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 54.306185][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 54.307925][ T5958] __sys_bpf+0xfc6/0x49a0 [ 54.309355][ T5958] __x64_sys_bpf+0x78/0xc0 [ 54.311594][ T5958] do_syscall_64+0xcd/0x250 [ 54.313645][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.315694][ T5958] page last free pid 5962 tgid 5962 stack trace: [ 54.317517][ T5958] free_unref_page+0x5f4/0xdc0 [ 54.318931][ T5958] qlist_free_all+0x4e/0x120 [ 54.320678][ T5958] kasan_quarantine_reduce+0x192/0x1e0 [ 54.322620][ T5958] __kasan_slab_alloc+0x69/0x90 [ 54.324552][ T5958] kmem_cache_alloc_noprof+0x121/0x2f0 [ 54.326172][ T5958] getname_flags.part.0+0x4c/0x550 [ 54.327479][ T5958] getname+0x8d/0xe0 [ 54.328488][ T5958] do_sys_openat2+0x104/0x1e0 [ 54.329695][ T5958] __x64_sys_openat+0x175/0x210 [ 54.330983][ T5958] do_syscall_64+0xcd/0x250 [ 54.332187][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.333670][ T5958] Modules linked in: [ 54.334797][ T5958] CPU: 2 UID: 0 PID: 5958 Comm: syz-executor194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 54.337919][ T5958] Tainted: [B]=BAD_PAGE [ 54.338985][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 54.341692][ T5958] Call Trace: [ 54.342539][ T5958] [ 54.343759][ T5958] dump_stack_lvl+0x16c/0x1f0 [ 54.345200][ T5958] bad_page+0xb3/0x1f0 [ 54.346397][ T5958] ? __pfx_bad_page+0x10/0x10 [ 54.347771][ T5958] ? page_bad_reason+0x9d/0x1e0 [ 54.349241][ T5958] free_unref_page+0x657/0xdc0 [ 54.350618][ T5958] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 54.352269][ T5958] ? __phys_addr+0xc6/0x150 [ 54.353544][ T5958] skb_free_head+0xa0/0x1d0 [ 54.354863][ T5958] skb_release_data+0x560/0x730 [ 54.356302][ T5958] sk_skb_reason_drop+0x129/0x1a0 [ 54.357779][ T5958] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 54.359731][ T5958] ? kernel_text_address+0x8d/0x100 [ 54.361110][ T5958] ? hlock_class+0x4e/0x130 [ 54.362294][ T5958] ? __lock_acquire+0x163e/0x3ce0 [ 54.363599][ T5958] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 54.365428][ T5958] ? hlock_class+0x4e/0x130 [ 54.366642][ T5958] ? __lock_acquire+0xbdd/0x3ce0 [ 54.367930][ T5958] ? __pfx___lock_acquire+0x10/0x10 [ 54.369289][ T5958] __netif_receive_skb_list_core+0x357/0x950 [ 54.370880][ T5958] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 54.372584][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 54.373934][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 54.375576][ T5958] ? lock_acquire+0x2f/0xb0 [ 54.376773][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 54.378389][ T5958] netif_receive_skb_list_internal+0x753/0xdb0 [ 54.379910][ T5958] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 54.381583][ T5958] ? __pfx_eth_type_trans+0x10/0x10 [ 54.382867][ T5958] ? __build_skb_around+0x278/0x3b0 [ 54.384194][ T5958] netif_receive_skb_list+0x4f/0x4a0 [ 54.385556][ T5958] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 54.387349][ T5958] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 54.389378][ T5958] ? bpf_test_timer_continue+0x150/0x3d0 [ 54.391026][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 54.392775][ T5958] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 54.394568][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 54.396272][ T5958] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 54.397873][ T5958] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 54.399404][ T5958] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 54.401534][ T5958] ? 0xffffffffa0004340 [ 54.402974][ T5958] ? 0xffffffffa0004340 [ 54.404372][ T5958] ? 0xffffffffa0004340 [ 54.405717][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 54.407637][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 54.409233][ T5958] ? lock_acquire+0x2f/0xb0 [ 54.410494][ T5958] ? __fget_files+0x40/0x3f0 [ 54.412173][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 54.414101][ T5958] ? fput+0x30/0x390 [ 54.415454][ T5958] ? __bpf_prog_get+0xa0/0x290 [ 54.417076][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 54.418654][ T5958] __sys_bpf+0xfc6/0x49a0 [ 54.419860][ T5958] ? find_held_lock+0x2d/0x110 [ 54.421593][ T5958] ? __pfx___sys_bpf+0x10/0x10 [ 54.422975][ T5958] ? __might_fault+0x13b/0x190 [ 54.424724][ T5958] ? __pfx_lock_release+0x10/0x10 [ 54.426876][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 54.428908][ T5958] ? lock_acquire+0x2f/0xb0 [ 54.430457][ T5958] ? __might_fault+0xe3/0x190 [ 54.432037][ T5958] ? xfd_validate_state+0x5d/0x180 [ 54.433599][ T5958] ? rcu_is_watching+0x12/0xc0 [ 54.435191][ T5958] __x64_sys_bpf+0x78/0xc0 [ 54.436727][ T5958] ? lockdep_hardirqs_on+0x7c/0x110 [ 54.438496][ T5958] do_syscall_64+0xcd/0x250 [ 54.440039][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.442153][ T5958] RIP: 0033:0x7f297e773e99 [ 54.443903][ T5958] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 54.450941][ T5958] RSP: 002b:00007f297e72e228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 54.453862][ T5958] RAX: ffffffffffffffda RBX: 00007f297e7fe328 RCX: 00007f297e773e99 [ 54.456488][ T5958] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 54.458969][ T5958] RBP: 00007f297e7fe320 R08: 00007f297e72e6c0 R09: 00007f297e72e6c0 [ 54.461297][ T5958] R10: 00007f297e72e6c0 R11: 0000000000000246 R12: 00007f297e7cb074 [ 54.463695][ T5958] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007fffd5e26f58 [ 54.466036][ T5958] [ 54.467178][ T5958] BUG: Bad page state in process syz-executor194 pfn:27350 [ 54.469591][ T5958] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888027350000 pfn:0x27350 [ 54.473168][ T5958] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 54.475982][ T5958] raw: 00fff00000000000 dead000000000040 ffff8880322fe000 0000000000000000 [ 54.478949][ T5958] raw: ffff888027350000 0000000000000001 00000000ffffffff 0000000000000000 [ 54.481071][ T5958] page dumped because: page_pool leak [ 54.482395][ T5958] page_owner tracks the page as allocated [ 54.483816][ T5958] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5958, tgid 5957 (syz-executor194), ts 44776797373, free_ts 44762688103 [ 54.487963][ T5958] post_alloc_hook+0x2d1/0x350 [ 54.489120][ T5958] get_page_from_freelist+0x101e/0x3070 [ 54.490478][ T5958] __alloc_pages_noprof+0x223/0x25a0 [ 54.491918][ T5958] alloc_pages_bulk_noprof+0x77c/0x1110 [ 54.493357][ T5958] __page_pool_alloc_pages_slow+0x18f/0x770 [ 54.494911][ T5958] page_pool_alloc_netmem+0xc4/0x160 [ 54.496289][ T5958] page_pool_alloc_pages+0x1a/0x60 [ 54.497553][ T5958] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 54.499373][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 54.501152][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 54.502929][ T5958] __sys_bpf+0xfc6/0x49a0 [ 54.504361][ T5958] __x64_sys_bpf+0x78/0xc0 [ 54.505900][ T5958] do_syscall_64+0xcd/0x250 [ 54.507419][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.509384][ T5958] page last free pid 5962 tgid 5962 stack trace: [ 54.511438][ T5958] free_unref_page+0x5f4/0xdc0 [ 54.512774][ T5958] qlist_free_all+0x4e/0x120 [ 54.513996][ T5958] kasan_quarantine_reduce+0x192/0x1e0 [ 54.515576][ T5958] __kasan_slab_alloc+0x69/0x90 [ 54.517005][ T5958] kmem_cache_alloc_noprof+0x121/0x2f0 [ 54.518456][ T5958] getname_flags.part.0+0x4c/0x550 [ 54.519795][ T5958] getname+0x8d/0xe0 [ 54.520971][ T5958] do_sys_openat2+0x104/0x1e0 [ 54.522203][ T5958] __x64_sys_openat+0x175/0x210 [ 54.523467][ T5958] do_syscall_64+0xcd/0x250 [ 54.525007][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.527012][ T5958] Modules linked in: [ 54.528336][ T5958] CPU: 2 UID: 0 PID: 5958 Comm: syz-executor194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 54.532324][ T5958] Tainted: [B]=BAD_PAGE [ 54.533710][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 54.537289][ T5958] Call Trace: [ 54.538411][ T5958] [ 54.539376][ T5958] dump_stack_lvl+0x16c/0x1f0 [ 54.541003][ T5958] bad_page+0xb3/0x1f0 [ 54.542304][ T5958] ? __pfx_bad_page+0x10/0x10 [ 54.543623][ T5958] ? page_bad_reason+0x9d/0x1e0 [ 54.545463][ T5958] free_unref_page+0x657/0xdc0 [ 54.546947][ T5958] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 54.549341][ T5958] ? __phys_addr+0xc6/0x150 [ 54.550898][ T5958] skb_free_head+0xa0/0x1d0 [ 54.552200][ T5958] skb_release_data+0x560/0x730 [ 54.553450][ T5958] sk_skb_reason_drop+0x129/0x1a0 [ 54.554718][ T5958] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 54.556419][ T5958] ? kernel_text_address+0x8d/0x100 [ 54.557745][ T5958] ? hlock_class+0x4e/0x130 [ 54.558889][ T5958] ? __lock_acquire+0x163e/0x3ce0 [ 54.560184][ T5958] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 54.561971][ T5958] ? hlock_class+0x4e/0x130 [ 54.563299][ T5958] ? __lock_acquire+0xbdd/0x3ce0 [ 54.565626][ T5958] ? __pfx___lock_acquire+0x10/0x10 [ 54.567196][ T5958] __netif_receive_skb_list_core+0x357/0x950 [ 54.568853][ T5958] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 54.570796][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 54.572378][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 54.574469][ T5958] ? lock_acquire+0x2f/0xb0 [ 54.575685][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 54.577337][ T5958] netif_receive_skb_list_internal+0x753/0xdb0 [ 54.578959][ T5958] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 54.580768][ T5958] ? __pfx_eth_type_trans+0x10/0x10 [ 54.582187][ T5958] ? __build_skb_around+0x278/0x3b0 [ 54.583685][ T5958] netif_receive_skb_list+0x4f/0x4a0 [ 54.585351][ T5958] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 54.587552][ T5958] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 54.589423][ T5958] ? bpf_test_timer_continue+0x150/0x3d0 [ 54.590929][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 54.592553][ T5958] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 54.594404][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 54.596345][ T5958] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 54.597887][ T5958] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 54.599400][ T5958] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 54.600800][ T5958] ? 0xffffffffa0004340 [ 54.601912][ T5958] ? 0xffffffffa0004340 [ 54.602978][ T5958] ? 0xffffffffa0004340 [ 54.604059][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 54.606004][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 54.607587][ T5958] ? lock_acquire+0x2f/0xb0 [ 54.609201][ T5958] ? __fget_files+0x40/0x3f0 [ 54.610482][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 54.612039][ T5958] ? fput+0x30/0x390 [ 54.613072][ T5958] ? __bpf_prog_get+0xa0/0x290 [ 54.614319][ T5958] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 54.615908][ T5958] __sys_bpf+0xfc6/0x49a0 [ 54.617031][ T5958] ? find_held_lock+0x2d/0x110 [ 54.618239][ T5958] ? __pfx___sys_bpf+0x10/0x10 [ 54.619523][ T5958] ? __might_fault+0x13b/0x190 [ 54.620820][ T5958] ? __pfx_lock_release+0x10/0x10 [ 54.622156][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 54.623560][ T5958] ? lock_acquire+0x2f/0xb0 [ 54.624818][ T5958] ? __might_fault+0xe3/0x190 [ 54.626139][ T5958] ? xfd_validate_state+0x5d/0x180 [ 54.627577][ T5958] ? rcu_is_watching+0x12/0xc0 [ 54.628841][ T5958] __x64_sys_bpf+0x78/0xc0 [ 54.629933][ T5958] ? lockdep_hardirqs_on+0x7c/0x110 [ 54.631239][ T5958] do_syscall_64+0xcd/0x250 [ 54.632373][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.633881][ T5958] RIP: 0033:0x7f297e773e99 [ 54.635015][ T5958] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 54.639915][ T5958] RSP: 002b:00007f297e72e228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 54.641960][ T5958] RAX: ffffffffffffffda RBX: 00007f297e7fe328 RCX: 00007f297e773e99 [ 54.644069][ T5958] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 54.646204][ T5958] RBP: 00007f297e7fe320 R08: 00007f297e72e6c0 R09: 00007f297e72e6c0 [ 54.648539][ T5958] R10: 00007f297e72e6c0 R11: 0000000000000246 R12: 00007f297e7cb074 [ 54.650806][ T5958] R13: 0000000020000eb8 R14: 2caa1414ac000000 R15: 00007fffd5e26f58 [ 54.652784][ T5958] [ 54.653684][ T5958] BUG: Bad page state in process syz-executor194 pfn:2d26e [ 54.655621][ T5958] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802d26ec00 pfn:0x2d26e [ 54.658199][ T5958] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 54.660067][ T5958] raw: 00fff00000000000 dead000000000040 ffff8880322fe000 0000000000000000 [ 54.662294][ T5958] raw: ffff88802d26ec00 0000000000000001 00000000ffffffff 0000000000000000 [ 54.664520][ T5958] page dumped because: page_pool leak [ 54.666258][ T5958] page_owner tracks the page as allocated [ 54.668019][ T5958] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5958, tgid 5957 (syz-executor194), ts 44776789383, free_ts 44762707121 [ 54.672900][ T5958] post_alloc_hook+0x2d1/0x350 [ 54.674157][ T5958] get_page_from_freelist+0x101e/0x3070 [ 54.675606][ T5958] __alloc_pages_noprof+0x223/0x25a0 [ 54.676999][ T5958] alloc_pages_bulk_noprof+0x77c/0x1110 [ 54.678490][ T5958] __page_pool_alloc_pages_slow+0x18f/0x770 [ 54.680038][ T5958] page_pool_alloc_netmem+0xc4/0x160 [ 54.681432][ T5958] page_pool_alloc_pages+0x1a/0x60 [ 54.682804][ T5958] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 54.684418][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 54.685842][ T5958] bpf_prog_test_run_xdp+0x827/0x1580 [ 54.687236][ T5958] __sys_bpf+0xfc6/0x49a0 [ 54.688355][ T5958] __x64_sys_bpf+0x78/0xc0 [ 54.689490][ T5958] do_syscall_64+0xcd/0x250 [ 54.690659][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.692182][ T5958] page last free pid 5962 tgid 5962 stack trace: [ 54.693803][ T5958] free_unref_page+0x5f4/0xdc0 [ 54.695092][ T5958] qlist_free_all+0x4e/0x120 [ 54.696297][ T5958] kasan_quarantine_reduce+0x192/0x1e0 [ 54.697701][ T5958] __kasan_slab_alloc+0x69/0x90 [ 54.698948][ T5958] kmem_cache_alloc_noprof+0x121/0x2f0 [ 54.700340][ T5958] getname_flags.part.0+0x4c/0x550 [ 54.701808][ T5958] getname+0x8d/0xe0 [ 54.702830][ T5958] do_sys_openat2+0x104/0x1e0 [ 54.704053][ T5958] __x64_sys_openat+0x175/0x210 [ 54.705373][ T5958] do_syscall_64+0xcd/0x250 [ 54.706554][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.708188][ T5958] Modules linked in: [ 54.709366][ T5958] CPU: 2 UID: 0 PID: 5958 Comm: syz-executor194 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 54.713416][ T5958] Tainted: [B]=BAD_PAGE [ 54.714846][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 54.718401][ T5958] Call Trace: [ 54.719554][ T5958] [ 54.720461][ T5958] dump_stack_lvl+0x16c/0x1f0 [ 54.721925][ T5958] bad_page+0xb3/0x1f0 [ 54.723037][ T5958] ? __pfx_bad_page+0x10/0x10 [ 54.724245][ T5958] ? page_bad_reason+0x9d/0x1e0 [ 54.725524][ T5958] free_unref_page+0x657/0xdc0 [ 54.726758][ T5958] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 54.728307][ T5958] ? __phys_addr+0xc6/0x150 [ 54.729475][ T5958] skb_free_head+0xa0/0x1d0 [ 54.730663][ T5958] skb_release_data+0x560/0x730 [ 54.731924][ T5958] sk_skb_reason_drop+0x129/0x1a0 [ 54.733241][ T5958] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 54.735190][ T5958] ? kernel_text_address+0x8d/0x100 [ 54.736894][ T5958] ? hlock_class+0x4e/0x130 [ 54.738422][ T5958] ? __lock_acquire+0x163e/0x3ce0 [ 54.740114][ T5958] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 54.742466][ T5958] ? hlock_class+0x4e/0x130 [ 54.744042][ T5958] ? __lock_acquire+0xbdd/0x3ce0 [ 54.745786][ T5958] ? __pfx___lock_acquire+0x10/0x10 [ 54.747608][ T5958] __netif_receive_skb_list_core+0x357/0x950 [ 54.749778][ T5958] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 54.752136][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 54.753970][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 54.756112][ T5958] ? lock_acquire+0x2f/0xb0 [ 54.757656][ T5958] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 54.759787][ T5958] netif_receive_skb_list_internal+0x753/0xdb0 [ 54.762222][ T5958] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 54.764520][ T5958] ? __pfx_eth_type_trans+0x10/0x10 [ 54.766248][ T5958] ? __build_skb_around+0x278/0x3b0 [ 54.767609][ T5958] netif_receive_skb_list+0x4f/0x4a0 [ 54.768981][ T5958] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 54.770611][ T5958] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 54.772552][ T5958] ? bpf_test_timer_continue+0x150/0x3d0 [ 54.774385][ T5958] bpf_test_run_xdp_live+0x365/0x500 [ 54.775791][ T5958] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 54.777332][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 54.779011][ T5958] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 54.780823][ T5958] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 54.782960][ T5958] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 54.784538][ T5958] ? 0xffffffffa0004340 [ 54.785923][ T5958] ? 0xffffffffa0004340 [ 54.787260][ T5958] ? 0xffffffffa0004340 [ 54.788647][ T5958] ? bpf_dispatcher_change_prog+0x54d/0xa80 VM DIAGNOSIS: 17:54:21 Registers: info registers vcpu 0 CPU#0 RAX=0000000000096d25 RBX=0000000000000000 RCX=ffffffff8b2305e9 RDX=0000000000000000 RSI=ffffffff8b6cd040 RDI=ffffffff8bd1ad40 RBP=fffffbfff1bd2af8 RSP=ffffffff8de07e20 R8 =0000000000000001 R9 =ffffed100d4c7025 R10=ffff88806a63812b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8de957c0 R14=ffffffff905f5088 R15=0000000000000000 RIP=ffffffff8b2319cf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f40337e6440 CR3=00000000350be000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffffff0 Opmask01=0000000000000001 Opmask02=00000000fff7ffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f297e7a08e7 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556f39c028 00007f297e803ee0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000018 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f297e7fd9e8 00007f297e7fd9e0 00007f297e7fd9e0 00007f297e803be0 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7865006a64615f65 726f63735f6d6f6f 2f666c65732f636f 72702f0030303031 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5d40004f41445f40 574a46565f484a4a 0a434940560a464a 57550a0015151514 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff88806a846a20 RCX=ffffffff818160dc RDX=ffff888026f12440 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc9000323f6a8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffed100d508d45 R13=0000000000000001 R14=ffff88806a846a28 R15=ffff88806a740100 RIP=ffffffff818d7d02 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f297e72e6c0 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000000000000 CR3=00000000350be000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffffff0 Opmask01=0000000000000001 Opmask02=00000000fff7ffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5a87000000000000 80fe003cc20362ce ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000074 696d696c68736168 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000018 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f297e7fd9e8 00007f297e7fd9e0 00007f297e7fd9e0 00007f297e803be0 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7865006a64615f65 726f63735f6d6f6f 2f666c65732f636f 72702f0030303031 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5d40004f41445f40 574a46565f484a4a 0a434940560a464a 57550a0015151514 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff850b46e5 RDI=ffffffff9aae7bc0 RBP=ffffffff9aae7b80 RSP=ffffc90003e9e990 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000030 R14=ffffffff850b4680 R15=0000000000000000 RIP=ffffffff850b470f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f297e72e6c0 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f6986dc0be0 CR3=000000002a62a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffffff0 Opmask01=0000000000000001 Opmask02=00000000fff7ffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f297e7a08e7 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556f39c028 00007f297e803ee0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000018 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f297e7fd9e8 00007f297e7fd9e0 00007f297e7fd9e0 00007f297e803be0 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7865006a64615f65 726f63735f6d6f6f 2f666c65732f636f 72702f0030303031 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5d40004f41445f40 574a46565f484a4a 0a434940560a464a 57550a0015151514 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000343b1 RBX=0000000000000003 RCX=ffffffff8b2305e9 RDX=0000000000000000 RSI=ffffffff8b6cd040 RDI=ffffffff8bd1ad40 RBP=ffffed1003b5b488 RSP=ffffc900001a7e08 R8 =0000000000000001 R9 =ffffed100d527025 R10=ffff88806a93812b R11=0000000000000000 R12=0000000000000003 R13=ffff88801dada440 R14=ffffffff905f5088 R15=0000000000000000 RIP=ffffffff8b2319cf RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f6986c42440 CR3=000000002dde2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000800000 Opmask01=0000000000000001 Opmask02=00000000fff7ffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f297e803ee0 00007f297e803ee0 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f297e803ed0 00007f297e803ed0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f297e8046a8 00007f297e7f8590 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f297e7e7de4 00007f297e7fd260 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6f723d52455355 0031353231343937 343931726f747563 6578652d7a79732f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000