[ 30.671930][ T39] audit: type=1400 audit(1730197225.914:81): avc: denied { rlimitinh } for pid=5855 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 30.677861][ T39] audit: type=1400 audit(1730197225.914:82): avc: denied { siginh } for pid=5855 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 76.177410][ T1016] cfg80211: failed to load regulatory.db [ 106.378866][ T39] audit: type=1400 audit(1730197301.634:83): avc: denied { read } for pid=5344 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 106.385980][ T39] audit: type=1400 audit(1730197301.634:84): avc: denied { append } for pid=5344 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 106.392545][ T39] audit: type=1400 audit(1730197301.634:85): avc: denied { open } for pid=5344 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 106.398876][ T39] audit: type=1400 audit(1730197301.634:86): avc: denied { getattr } for pid=5344 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:60606' (ED25519) to the list of known hosts. [ 108.156351][ T39] audit: type=1400 audit(1730197303.404:87): avc: denied { execute } for pid=5957 comm="sh" name="syz-execprog" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 108.161894][ T39] audit: type=1400 audit(1730197303.404:88): avc: denied { execute_no_trans } for pid=5957 comm="sh" path="/syz-execprog" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2024/10/29 10:21:43 ignoring optional flag "sandboxArg"="0" [ 108.506600][ T39] audit: type=1400 audit(1730197303.764:89): avc: denied { write } for pid=5957 comm="syz-execprog" path="pipe:[7574]" dev="pipefs" ino=7574 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 2024/10/29 10:21:44 parsed 1 programs [ 108.817509][ T39] audit: type=1400 audit(1730197304.074:90): avc: denied { node_bind } for pid=5957 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 110.622180][ T39] audit: type=1400 audit(1730197305.874:91): avc: denied { mounton } for pid=5965 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1927 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 110.625868][ T5965] cgroup: Unknown subsys name 'net' [ 110.629100][ T39] audit: type=1400 audit(1730197305.874:92): avc: denied { mount } for pid=5965 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 110.761232][ T5965] cgroup: Unknown subsys name 'cpuset' [ 110.764288][ T5965] cgroup: Unknown subsys name 'rlimit' [ 110.954803][ T5970] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 111.569757][ T5965] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 112.810478][ T39] kauditd_printk_skb: 12 callbacks suppressed [ 112.810491][ T39] audit: type=1400 audit(1730197308.064:105): avc: denied { execmem } for pid=5972 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 112.826532][ T39] audit: type=1400 audit(1730197308.074:106): avc: denied { read } for pid=5976 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 112.832382][ T39] audit: type=1400 audit(1730197308.074:107): avc: denied { open } for pid=5976 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 112.839014][ T39] audit: type=1400 audit(1730197308.074:108): avc: denied { mounton } for pid=5976 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 112.866767][ T39] audit: type=1400 audit(1730197308.124:109): avc: denied { mount } for pid=5976 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 112.872695][ T39] audit: type=1400 audit(1730197308.124:110): avc: denied { mounton } for pid=5976 comm="syz-executor" path="/syzkaller.4AkqiI/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 112.882818][ T39] audit: type=1400 audit(1730197308.124:111): avc: denied { mount } for pid=5976 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 112.889393][ T39] audit: type=1400 audit(1730197308.124:112): avc: denied { mounton } for pid=5976 comm="syz-executor" path="/syzkaller.4AkqiI/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 112.895759][ T39] audit: type=1400 audit(1730197308.124:113): avc: denied { mounton } for pid=5976 comm="syz-executor" path="/syzkaller.4AkqiI/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=1728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 112.903188][ T39] audit: type=1400 audit(1730197308.124:114): avc: denied { unmount } for pid=5976 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 112.912666][ T5976] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 113.074438][ T5300] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 113.080707][ T5300] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 113.083595][ T5300] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 113.092784][ T5300] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 113.094844][ T5300] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 113.098156][ T5300] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 113.423446][ T6018] chnl_net:caif_netlink_parms(): no params data found [ 113.536704][ T6018] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.538921][ T6018] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.540734][ T6018] bridge_slave_0: entered allmulticast mode [ 113.542701][ T6018] bridge_slave_0: entered promiscuous mode [ 113.545821][ T6018] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.548404][ T6018] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.550393][ T6018] bridge_slave_1: entered allmulticast mode [ 113.553141][ T6018] bridge_slave_1: entered promiscuous mode [ 113.587221][ T6018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.590317][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.591837][ T6018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.592385][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.623931][ T6018] team0: Port device team_slave_0 added [ 113.629172][ T6018] team0: Port device team_slave_1 added [ 113.641245][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.643197][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.655621][ T6018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.658266][ T6018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.665216][ T6018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.670178][ T6018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.673789][ T6018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.680070][ T6018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.703845][ T6018] hsr_slave_0: entered promiscuous mode [ 113.705928][ T6018] hsr_slave_1: entered promiscuous mode [ 113.775389][ T6018] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 113.780187][ T6018] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 113.783074][ T6018] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 113.785813][ T6018] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 113.797003][ T6018] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.798833][ T6018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.800986][ T6018] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.802751][ T6018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.835193][ T6018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.841928][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.844743][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.850329][ T6018] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.855087][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.856989][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.860821][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.862601][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.952136][ T6018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.970353][ T6018] veth0_vlan: entered promiscuous mode [ 113.974261][ T6018] veth1_vlan: entered promiscuous mode [ 113.987855][ T6018] veth0_macvtap: entered promiscuous mode [ 113.991144][ T6018] veth1_macvtap: entered promiscuous mode [ 113.999128][ T6018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.005461][ T6018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.009122][ T6018] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.011380][ T6018] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.013578][ T6018] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.015671][ T6018] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2024/10/29 10:21:49 executed programs: 0 [ 114.080721][ T65] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 114.083220][ T65] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 114.085397][ T65] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 114.087537][ T65] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 114.089464][ T65] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 114.092545][ T65] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 114.107417][ T6059] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 114.110251][ T6059] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 114.120242][ T6064] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 114.122778][ T5300] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 114.128284][ T5300] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 114.129762][ T6064] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 114.130415][ T6068] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 114.134247][ T6068] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 114.136767][ T6068] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 114.138689][ T6068] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 114.140700][ T6068] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 114.143324][ T6068] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 114.152507][ T6068] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 114.157022][ T101] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.157923][ T6005] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 114.162255][ T6005] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 114.165651][ T6005] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 114.167776][ T6005] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 114.170212][ T6005] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 114.255630][ T101] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.324340][ T101] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.348691][ T6062] chnl_net:caif_netlink_parms(): no params data found [ 114.390281][ T6057] chnl_net:caif_netlink_parms(): no params data found [ 114.407234][ T101] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.418578][ T6054] chnl_net:caif_netlink_parms(): no params data found [ 114.487008][ T6062] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.488972][ T6062] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.491003][ T6062] bridge_slave_0: entered allmulticast mode [ 114.493413][ T6062] bridge_slave_0: entered promiscuous mode [ 114.499971][ T6062] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.501799][ T6062] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.503574][ T6062] bridge_slave_1: entered allmulticast mode [ 114.505536][ T6062] bridge_slave_1: entered promiscuous mode [ 114.553184][ T6065] chnl_net:caif_netlink_parms(): no params data found [ 114.573460][ T6054] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.575267][ T6054] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.578124][ T6054] bridge_slave_0: entered allmulticast mode [ 114.580063][ T6054] bridge_slave_0: entered promiscuous mode [ 114.590312][ T6057] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.592150][ T6057] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.593963][ T6057] bridge_slave_0: entered allmulticast mode [ 114.595891][ T6057] bridge_slave_0: entered promiscuous mode [ 114.615184][ T6062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.620557][ T6062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.630860][ T6054] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.632963][ T6054] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.634794][ T6054] bridge_slave_1: entered allmulticast mode [ 114.637378][ T6054] bridge_slave_1: entered promiscuous mode [ 114.646826][ T6057] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.648592][ T6057] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.650375][ T6057] bridge_slave_1: entered allmulticast mode [ 114.652282][ T6057] bridge_slave_1: entered promiscuous mode [ 114.677705][ T6062] team0: Port device team_slave_0 added [ 114.688856][ T6054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.705065][ T6062] team0: Port device team_slave_1 added [ 114.709671][ T6054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.714594][ T6057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.718952][ T6057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.772385][ T6065] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.774280][ T6065] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.776067][ T6065] bridge_slave_0: entered allmulticast mode [ 114.778989][ T6065] bridge_slave_0: entered promiscuous mode [ 114.782642][ T6065] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.784929][ T6065] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.787373][ T6065] bridge_slave_1: entered allmulticast mode [ 114.789645][ T6065] bridge_slave_1: entered promiscuous mode [ 114.802542][ T6062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.804778][ T6062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.811755][ T6062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.824391][ T6054] team0: Port device team_slave_0 added [ 114.827920][ T6057] team0: Port device team_slave_0 added [ 114.844299][ T6062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.846017][ T6062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.852331][ T6062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.857083][ T6054] team0: Port device team_slave_1 added [ 114.869225][ T6057] team0: Port device team_slave_1 added [ 114.879968][ T6065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.902556][ T6054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.905131][ T6054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.913664][ T6054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.925419][ T6057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.927575][ T6057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.935206][ T6057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.939306][ T6065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.949935][ T6054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.951789][ T6054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.958411][ T6054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.962576][ T6057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.964696][ T6057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.971565][ T6057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.994692][ T6062] hsr_slave_0: entered promiscuous mode [ 114.996741][ T6062] hsr_slave_1: entered promiscuous mode [ 114.998434][ T6062] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.000807][ T6062] Cannot create hsr debugfs directory [ 115.009681][ T6065] team0: Port device team_slave_0 added [ 115.013343][ T6065] team0: Port device team_slave_1 added [ 115.090731][ T6065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.092710][ T6065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.099814][ T6065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.104499][ T6057] hsr_slave_0: entered promiscuous mode [ 115.106786][ T6057] hsr_slave_1: entered promiscuous mode [ 115.108490][ T6057] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.110613][ T6057] Cannot create hsr debugfs directory [ 115.117582][ T6054] hsr_slave_0: entered promiscuous mode [ 115.120058][ T6054] hsr_slave_1: entered promiscuous mode [ 115.122734][ T6054] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.125141][ T6054] Cannot create hsr debugfs directory [ 115.127648][ T6065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.129497][ T6065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.135831][ T6065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.235313][ T6065] hsr_slave_0: entered promiscuous mode [ 115.237463][ T6065] hsr_slave_1: entered promiscuous mode [ 115.239198][ T6065] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.241026][ T6065] Cannot create hsr debugfs directory [ 116.176900][ T6059] Bluetooth: hci2: command tx timeout [ 116.176904][ T65] Bluetooth: hci3: command tx timeout [ 116.186900][ T65] Bluetooth: hci0: command tx timeout [ 116.256540][ T65] Bluetooth: hci1: command tx timeout [ 117.650294][ T101] bridge_slave_1: left allmulticast mode [ 117.652094][ T101] bridge_slave_1: left promiscuous mode [ 117.653857][ T101] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.667568][ T101] bridge_slave_0: left allmulticast mode [ 117.669016][ T101] bridge_slave_0: left promiscuous mode [ 117.670534][ T101] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.907620][ T101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.911879][ T101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.914983][ T101] bond0 (unregistering): Released all slaves [ 117.935883][ T39] kauditd_printk_skb: 22 callbacks suppressed [ 117.935894][ T39] audit: type=1400 audit(1730197313.184:137): avc: denied { search } for pid=5662 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.972571][ T39] audit: type=1400 audit(1730197313.224:138): avc: denied { read } for pid=6100 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.979572][ T39] audit: type=1400 audit(1730197313.224:139): avc: denied { open } for pid=6100 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.986594][ T39] audit: type=1400 audit(1730197313.224:140): avc: denied { getattr } for pid=6100 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.993083][ T39] audit: type=1400 audit(1730197313.234:141): avc: denied { write } for pid=6099 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1767 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.998946][ T39] audit: type=1400 audit(1730197313.234:142): avc: denied { add_name } for pid=6099 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.014789][ T39] audit: type=1400 audit(1730197313.264:143): avc: denied { remove_name } for pid=6102 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=1945 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.065600][ T101] hsr_slave_0: left promiscuous mode [ 118.068967][ T101] hsr_slave_1: left promiscuous mode [ 118.070846][ T101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.073068][ T101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.076294][ T101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.078395][ T101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.091342][ T101] veth1_macvtap: left promiscuous mode [ 118.093039][ T101] veth0_macvtap: left promiscuous mode [ 118.094438][ T101] veth1_vlan: left promiscuous mode [ 118.095791][ T101] veth0_vlan: left promiscuous mode [ 118.257183][ T65] Bluetooth: hci0: command tx timeout [ 118.258093][ T6059] Bluetooth: hci2: command tx timeout [ 118.259013][ T6005] Bluetooth: hci3: command tx timeout [ 118.336436][ T6005] Bluetooth: hci1: command tx timeout [ 118.560080][ T101] team0 (unregistering): Port device team_slave_1 removed [ 118.605957][ T101] team0 (unregistering): Port device team_slave_0 removed [ 119.065985][ T6054] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 119.070169][ T6054] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 119.076090][ T6054] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 119.080247][ T6054] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 119.120504][ T6062] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 119.128498][ T6062] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 119.143675][ T6062] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 119.147394][ T6062] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 119.187478][ T6065] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 119.200288][ T6065] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 119.203564][ T6065] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 119.215478][ T6065] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 119.236931][ T6057] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 119.241751][ T6057] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 119.256182][ T6054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.259740][ T6057] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 119.263745][ T6057] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 119.288422][ T6054] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.291835][ T6062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.302627][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.304518][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.311441][ T6062] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.316838][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.318885][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.321525][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.323386][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.336693][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.338617][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.428900][ T6065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.442026][ T6057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.451214][ T6057] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.465426][ T6065] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.471355][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.473500][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.478671][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.481095][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.483925][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.485833][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.499081][ T1208] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.500913][ T1208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.553364][ T6054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.561831][ T6062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.613717][ T6062] veth0_vlan: entered promiscuous mode [ 119.618009][ T6054] veth0_vlan: entered promiscuous mode [ 119.623509][ T6062] veth1_vlan: entered promiscuous mode [ 119.630543][ T6054] veth1_vlan: entered promiscuous mode [ 119.663891][ T6054] veth0_macvtap: entered promiscuous mode [ 119.669497][ T6062] veth0_macvtap: entered promiscuous mode [ 119.672137][ T6057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.678590][ T6054] veth1_macvtap: entered promiscuous mode [ 119.683128][ T6062] veth1_macvtap: entered promiscuous mode [ 119.686008][ T6065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.705635][ T6054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.710871][ T6054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.722849][ T6065] veth0_vlan: entered promiscuous mode [ 119.728293][ T6054] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.730648][ T6054] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.732935][ T6054] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.735226][ T6054] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.741148][ T6057] veth0_vlan: entered promiscuous mode [ 119.748562][ T6062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.751490][ T6062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.755434][ T6062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.761076][ T6065] veth1_vlan: entered promiscuous mode [ 119.771044][ T6062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.773963][ T6062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.777423][ T6062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.779789][ T6057] veth1_vlan: entered promiscuous mode [ 119.787669][ T6065] veth0_macvtap: entered promiscuous mode [ 119.797008][ T6065] veth1_macvtap: entered promiscuous mode [ 119.805586][ T6065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.809280][ T6065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.811702][ T6065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.814348][ T6065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.818259][ T6065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.823327][ T6062] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.825570][ T6062] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.828092][ T6062] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.830406][ T6062] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.835665][ T6065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.840058][ T6065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.843361][ T6065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.847547][ T6065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.851435][ T6065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.867407][ T6065] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.869841][ T6065] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.872271][ T6065] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.874541][ T6065] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.886766][ T1208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.888821][ T1208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.909607][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.911846][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.922931][ T6057] veth0_macvtap: entered promiscuous mode 2024/10/29 10:21:55 executed programs: 8 [ 119.933555][ T1208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.933844][ T6057] veth1_macvtap: entered promiscuous mode [ 119.935945][ T1208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.952451][ T39] audit: type=1400 audit(1730197315.204:144): avc: denied { create } for pid=6148 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 119.953159][ T101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.960442][ T6057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.960639][ T101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.963401][ T6057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.967176][ T39] audit: type=1400 audit(1730197315.204:145): avc: denied { create } for pid=6148 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 119.969240][ T6057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.972759][ T39] audit: type=1400 audit(1730197315.204:146): avc: denied { setopt } for pid=6148 comm="syz.0.15" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 119.975452][ T6057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.983494][ T6057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.986939][ T6057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.990256][ T6057] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.000124][ T6057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.002787][ T6057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.005211][ T6057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.008366][ T6057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.010892][ T6057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.013468][ T6057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.016904][ T6057] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.020868][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.021416][ T6057] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.022941][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.025426][ T6057] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.029921][ T6057] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.032095][ T6057] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.065619][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.067756][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.091064][ T1208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.093141][ T1208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.110474][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.113812][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.337743][ T6005] Bluetooth: hci0: command tx timeout [ 120.339525][ T6005] Bluetooth: hci2: command tx timeout [ 120.340907][ T6005] Bluetooth: hci3: command tx timeout [ 120.416434][ T65] Bluetooth: hci1: command tx timeout [ 122.426905][ T6005] Bluetooth: hci2: command tx timeout [ 122.428265][ T6059] Bluetooth: hci0: command tx timeout [ 122.428466][ T65] Bluetooth: hci3: command tx timeout [ 122.506379][ T65] Bluetooth: hci1: command tx timeout [ 124.618554][ T6441] BUG: Bad page state in process syz.2.108 pfn:4b20e [ 124.620591][ T6441] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804b20fe00 pfn:0x4b20e [ 124.624982][ T6441] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 124.627232][ T6441] raw: 00fff00000000000 dead000000000040 ffff88803fdac000 0000000000000000 [ 124.629497][ T6441] raw: ffff88804b20fe00 0000000000000001 00000000ffffffff 0000000000000000 [ 124.631726][ T6441] page dumped because: page_pool leak [ 124.633198][ T6441] page_owner tracks the page as allocated [ 124.635181][ T6441] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6441, tgid 6432 (syz.2.108), ts 124609231479, free_ts 124547100197 [ 124.639636][ T6441] post_alloc_hook+0x2d1/0x350 [ 124.640911][ T6441] get_page_from_freelist+0x101e/0x3070 [ 124.642349][ T6441] __alloc_pages_noprof+0x223/0x25a0 [ 124.643726][ T6441] alloc_pages_bulk_noprof+0x77c/0x1110 [ 124.645466][ T6441] __page_pool_alloc_pages_slow+0x18f/0x770 [ 124.647145][ T6441] page_pool_alloc_netmem+0xc4/0x160 [ 124.648529][ T6441] page_pool_alloc_pages+0x1a/0x60 [ 124.649883][ T6441] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 124.651656][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 124.653300][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 124.654795][ T6441] __sys_bpf+0xfc6/0x49a0 [ 124.655981][ T6441] __x64_sys_bpf+0x78/0xc0 [ 124.657255][ T6441] do_syscall_64+0xcd/0x250 [ 124.658518][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.660077][ T6441] page last free pid 34 tgid 34 stack trace: [ 124.661694][ T6441] free_unref_page+0x5f4/0xdc0 [ 124.662989][ T6441] __folio_put+0x30d/0x3d0 [ 124.664240][ T6441] free_page_and_swap_cache+0x249/0x2c0 [ 124.665775][ T6441] tlb_remove_table_rcu+0x89/0xe0 [ 124.667193][ T6441] rcu_core+0x79d/0x14d0 [ 124.668319][ T6441] handle_softirqs+0x213/0x8f0 [ 124.669577][ T6441] run_ksoftirqd+0x3a/0x60 [ 124.670899][ T6441] smpboot_thread_fn+0x661/0xa30 [ 124.672397][ T6441] kthread+0x2c1/0x3a0 [ 124.673482][ T6441] ret_from_fork+0x45/0x80 [ 124.674652][ T6441] ret_from_fork_asm+0x1a/0x30 [ 124.675926][ T6441] Modules linked in: [ 124.677039][ T6441] CPU: 3 UID: 0 PID: 6441 Comm: syz.2.108 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 124.679775][ T6441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 124.682570][ T6441] Call Trace: [ 124.683454][ T6441] [ 124.684194][ T6441] dump_stack_lvl+0x16c/0x1f0 [ 124.685394][ T6441] bad_page+0xb3/0x1f0 [ 124.686468][ T6441] ? __pfx_bad_page+0x10/0x10 [ 124.687671][ T6441] ? page_bad_reason+0x9d/0x1e0 [ 124.688897][ T6441] free_unref_page+0x657/0xdc0 [ 124.690099][ T6441] ? rcu_is_watching+0x12/0xc0 [ 124.691307][ T6441] ? __phys_addr+0xc6/0x150 [ 124.693449][ T6441] skb_free_head+0xa0/0x1d0 [ 124.694723][ T6441] skb_release_data+0x560/0x730 [ 124.696114][ T6441] sk_skb_reason_drop+0x129/0x1a0 [ 124.697773][ T6441] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 124.699523][ T6441] ? kernel_text_address+0x8d/0x100 [ 124.700890][ T6441] ? hlock_class+0x4e/0x130 [ 124.702117][ T6441] ? __lock_acquire+0x163e/0x3ce0 [ 124.703441][ T6441] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 124.705311][ T6441] ? hlock_class+0x4e/0x130 [ 124.706512][ T6441] ? __lock_acquire+0xbdd/0x3ce0 [ 124.708070][ T6441] ? __pfx___lock_acquire+0x10/0x10 [ 124.709801][ T6441] __netif_receive_skb_list_core+0x357/0x950 [ 124.711337][ T6441] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 124.713045][ T6441] ? trace_lock_acquire+0x14a/0x1d0 [ 124.714454][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 124.716153][ T6441] ? lock_acquire+0x2f/0xb0 [ 124.717363][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 124.719064][ T6441] netif_receive_skb_list_internal+0x753/0xdb0 [ 124.720828][ T6441] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 124.722628][ T6441] ? __pfx_eth_type_trans+0x10/0x10 [ 124.724042][ T6441] ? __build_skb_around+0x278/0x3b0 [ 124.725510][ T6441] netif_receive_skb_list+0x4f/0x4a0 [ 124.726934][ T6441] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 124.728751][ T6441] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 124.730713][ T6441] ? bpf_test_timer_continue+0x150/0x3d0 [ 124.732237][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 124.733867][ T6441] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 124.735501][ T6441] ? try_to_wake_up+0xc35/0x14f0 [ 124.736919][ T6441] ? __pfx_try_to_wake_up+0x10/0x10 [ 124.738305][ T6441] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 124.739838][ T6441] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 124.741192][ T6441] ? 0xffffffffa0004340 [ 124.742267][ T6441] ? 0xffffffffa0004340 [ 124.743329][ T6441] ? 0xffffffffa0004340 [ 124.744361][ T6441] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 124.745875][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 124.747236][ T6441] ? lock_acquire+0x2f/0xb0 [ 124.748481][ T6441] ? __fget_files+0x40/0x3f0 [ 124.749684][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 124.751176][ T6441] ? fput+0x30/0x390 [ 124.752157][ T6441] ? __bpf_prog_get+0xa0/0x290 [ 124.753388][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 124.754995][ T6441] __sys_bpf+0xfc6/0x49a0 [ 124.756139][ T6441] ? __pfx_futex_wake+0x10/0x10 [ 124.757406][ T6441] ? finish_task_switch.isra.0+0x217/0xcc0 [ 124.758925][ T6441] ? __pfx___sys_bpf+0x10/0x10 [ 124.760494][ T6441] ? __schedule+0xe5d/0x5730 [ 124.761712][ T6441] ? __fget_files+0x23a/0x3f0 [ 124.762900][ T6441] ? do_futex+0x123/0x350 [ 124.763984][ T6441] ? __pfx_do_futex+0x10/0x10 [ 124.765186][ T6441] ? xfd_validate_state+0x5d/0x180 [ 124.766482][ T6441] ? rcu_is_watching+0x12/0xc0 [ 124.767704][ T6441] __x64_sys_bpf+0x78/0xc0 [ 124.768840][ T6441] ? lockdep_hardirqs_on+0x7c/0x110 [ 124.770172][ T6441] do_syscall_64+0xcd/0x250 [ 124.771661][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.773216][ T6441] RIP: 0033:0x7f800db7e719 [ 124.774362][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.779129][ T6441] RSP: 002b:00007f800e9b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 124.781430][ T6441] RAX: ffffffffffffffda RBX: 00007f800dd36058 RCX: 00007f800db7e719 [ 124.783593][ T6441] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 124.785676][ T6441] RBP: 00007f800dbf132e R08: 0000000000000000 R09: 0000000000000000 [ 124.787746][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.789822][ T6441] R13: 0000000000000000 R14: 00007f800dd36058 R15: 00007fffcd7e8d08 [ 124.791901][ T6441] [ 124.792962][ T6441] Disabling lock debugging due to kernel taint [ 124.794767][ T6441] BUG: Bad page state in process syz.2.108 pfn:3fc61 [ 124.796590][ T6441] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x700000002 pfn:0x3fc61 [ 124.799115][ T6441] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 124.800879][ T6441] raw: 00fff00000000000 dead000000000040 ffff88803fdac000 0000000000000000 [ 124.803105][ T6441] raw: 0000000700000002 0000000000000001 00000000ffffffff 0000000000000000 [ 124.805344][ T6441] page dumped because: page_pool leak [ 124.806770][ T6441] page_owner tracks the page as allocated [ 124.808205][ T6441] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6441, tgid 6432 (syz.2.108), ts 124609226907, free_ts 124547104956 [ 124.813412][ T6441] post_alloc_hook+0x2d1/0x350 [ 124.814703][ T6441] get_page_from_freelist+0x101e/0x3070 [ 124.816175][ T6441] __alloc_pages_noprof+0x223/0x25a0 [ 124.817661][ T6441] alloc_pages_bulk_noprof+0x77c/0x1110 [ 124.819130][ T6441] __page_pool_alloc_pages_slow+0x18f/0x770 [ 124.820702][ T6441] page_pool_alloc_netmem+0xc4/0x160 [ 124.822208][ T6441] page_pool_alloc_pages+0x1a/0x60 [ 124.823493][ T6441] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 124.825017][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 124.826455][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 124.827819][ T6441] __sys_bpf+0xfc6/0x49a0 [ 124.829080][ T6441] __x64_sys_bpf+0x78/0xc0 [ 124.830290][ T6441] do_syscall_64+0xcd/0x250 [ 124.831446][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.832928][ T6441] page last free pid 34 tgid 34 stack trace: [ 124.834444][ T6441] free_unref_page+0x5f4/0xdc0 [ 124.835716][ T6441] __folio_put+0x30d/0x3d0 [ 124.836960][ T6441] free_page_and_swap_cache+0x249/0x2c0 [ 124.838396][ T6441] tlb_remove_table_rcu+0x89/0xe0 [ 124.839654][ T6441] rcu_core+0x79d/0x14d0 [ 124.840778][ T6441] handle_softirqs+0x213/0x8f0 [ 124.842059][ T6441] run_ksoftirqd+0x3a/0x60 [ 124.843243][ T6441] smpboot_thread_fn+0x661/0xa30 [ 124.844493][ T6441] kthread+0x2c1/0x3a0 [ 124.845547][ T6441] ret_from_fork+0x45/0x80 [ 124.846878][ T6441] ret_from_fork_asm+0x1a/0x30 [ 124.848127][ T6441] Modules linked in: [ 124.849104][ T6441] CPU: 3 UID: 0 PID: 6441 Comm: syz.2.108 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 124.852221][ T6441] Tainted: [B]=BAD_PAGE [ 124.853282][ T6441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 124.856811][ T6441] Call Trace: [ 124.857822][ T6441] [ 124.858626][ T6441] dump_stack_lvl+0x16c/0x1f0 [ 124.859828][ T6441] bad_page+0xb3/0x1f0 [ 124.860976][ T6441] ? __pfx_bad_page+0x10/0x10 [ 124.862238][ T6441] ? page_bad_reason+0x9d/0x1e0 [ 124.863483][ T6441] free_unref_page+0x657/0xdc0 [ 124.864721][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 124.866207][ T6441] ? __phys_addr+0xc6/0x150 [ 124.867584][ T6441] skb_free_head+0xa0/0x1d0 [ 124.868928][ T6441] skb_release_data+0x560/0x730 [ 124.870332][ T6441] sk_skb_reason_drop+0x129/0x1a0 [ 124.872098][ T6441] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 124.874156][ T6441] ? kernel_text_address+0x8d/0x100 [ 124.875532][ T6441] ? hlock_class+0x4e/0x130 [ 124.876683][ T6441] ? __lock_acquire+0x163e/0x3ce0 [ 124.877971][ T6441] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 124.879756][ T6441] ? hlock_class+0x4e/0x130 [ 124.880910][ T6441] ? __lock_acquire+0xbdd/0x3ce0 [ 124.882206][ T6441] ? __pfx___lock_acquire+0x10/0x10 [ 124.883499][ T6441] __netif_receive_skb_list_core+0x357/0x950 [ 124.885037][ T6441] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 124.886662][ T6441] ? trace_lock_acquire+0x14a/0x1d0 [ 124.887984][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 124.889578][ T6441] ? lock_acquire+0x2f/0xb0 [ 124.890729][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 124.892326][ T6441] netif_receive_skb_list_internal+0x753/0xdb0 [ 124.893870][ T6441] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 124.895565][ T6441] ? __pfx_eth_type_trans+0x10/0x10 [ 124.896871][ T6441] ? __build_skb_around+0x278/0x3b0 [ 124.898203][ T6441] netif_receive_skb_list+0x4f/0x4a0 [ 124.899525][ T6441] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 124.901449][ T6441] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 124.903222][ T6441] ? bpf_test_timer_continue+0x150/0x3d0 [ 124.904637][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 124.906015][ T6441] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 124.907578][ T6441] ? try_to_wake_up+0xc35/0x14f0 [ 124.908896][ T6441] ? __pfx_try_to_wake_up+0x10/0x10 [ 124.910390][ T6441] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 124.912060][ T6441] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 124.913506][ T6441] ? 0xffffffffa0004340 [ 124.914629][ T6441] ? 0xffffffffa0004340 [ 124.915733][ T6441] ? 0xffffffffa0004340 [ 124.916815][ T6441] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 124.918348][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 124.919772][ T6441] ? lock_acquire+0x2f/0xb0 [ 124.920995][ T6441] ? __fget_files+0x40/0x3f0 [ 124.922233][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 124.923776][ T6441] ? fput+0x30/0x390 [ 124.924826][ T6441] ? __bpf_prog_get+0xa0/0x290 [ 124.926110][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 124.927648][ T6441] __sys_bpf+0xfc6/0x49a0 [ 124.928810][ T6441] ? __pfx_futex_wake+0x10/0x10 [ 124.930107][ T6441] ? finish_task_switch.isra.0+0x217/0xcc0 [ 124.931603][ T6441] ? __pfx___sys_bpf+0x10/0x10 [ 124.932818][ T6441] ? __schedule+0xe5d/0x5730 [ 124.934041][ T6441] ? __fget_files+0x23a/0x3f0 [ 124.935285][ T6441] ? do_futex+0x123/0x350 [ 124.936398][ T6441] ? __pfx_do_futex+0x10/0x10 [ 124.937658][ T6441] ? xfd_validate_state+0x5d/0x180 [ 124.938997][ T6441] ? rcu_is_watching+0x12/0xc0 [ 124.940261][ T6441] __x64_sys_bpf+0x78/0xc0 [ 124.941460][ T6441] ? lockdep_hardirqs_on+0x7c/0x110 [ 124.942828][ T6441] do_syscall_64+0xcd/0x250 [ 124.944023][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.945803][ T6441] RIP: 0033:0x7f800db7e719 [ 124.947011][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.952144][ T6441] RSP: 002b:00007f800e9b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 124.954244][ T6441] RAX: ffffffffffffffda RBX: 00007f800dd36058 RCX: 00007f800db7e719 [ 124.956298][ T6441] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 124.958391][ T6441] RBP: 00007f800dbf132e R08: 0000000000000000 R09: 0000000000000000 [ 124.960526][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.962666][ T6441] R13: 0000000000000000 R14: 00007f800dd36058 R15: 00007fffcd7e8d08 [ 124.964758][ T6441] [ 124.965852][ T6441] BUG: Bad page state in process syz.2.108 pfn:4c34e [ 124.967659][ T6441] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804c34fe00 pfn:0x4c34e [ 124.970444][ T6441] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 124.972309][ T6441] raw: 00fff00000000000 dead000000000040 ffff88803fdac000 0000000000000000 [ 124.974680][ T6441] raw: ffff88804c34fe00 0000000000000001 00000000ffffffff 0000000000000000 [ 124.976990][ T6441] page dumped because: page_pool leak [ 124.978421][ T6441] page_owner tracks the page as allocated [ 124.979912][ T6441] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6441, tgid 6432 (syz.2.108), ts 124609222284, free_ts 124547109595 [ 124.984306][ T6441] post_alloc_hook+0x2d1/0x350 [ 124.985597][ T6441] get_page_from_freelist+0x101e/0x3070 [ 124.987162][ T6441] __alloc_pages_noprof+0x223/0x25a0 [ 124.988609][ T6441] alloc_pages_bulk_noprof+0x77c/0x1110 [ 124.990160][ T6441] __page_pool_alloc_pages_slow+0x18f/0x770 [ 124.991778][ T6441] page_pool_alloc_netmem+0xc4/0x160 [ 124.993215][ T6441] page_pool_alloc_pages+0x1a/0x60 [ 124.994610][ T6441] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 124.996288][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 124.997680][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 124.999088][ T6441] __sys_bpf+0xfc6/0x49a0 [ 125.000224][ T6441] __x64_sys_bpf+0x78/0xc0 [ 125.001419][ T6441] do_syscall_64+0xcd/0x250 [ 125.002623][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.004178][ T6441] page last free pid 34 tgid 34 stack trace: [ 125.005760][ T6441] free_unref_page+0x5f4/0xdc0 [ 125.007071][ T6441] __folio_put+0x30d/0x3d0 [ 125.008254][ T6441] free_page_and_swap_cache+0x249/0x2c0 [ 125.009723][ T6441] tlb_remove_table_rcu+0x89/0xe0 [ 125.011129][ T6441] rcu_core+0x79d/0x14d0 [ 125.012252][ T6441] handle_softirqs+0x213/0x8f0 [ 125.013512][ T6441] run_ksoftirqd+0x3a/0x60 [ 125.014701][ T6441] smpboot_thread_fn+0x661/0xa30 [ 125.016028][ T6441] kthread+0x2c1/0x3a0 [ 125.017159][ T6441] ret_from_fork+0x45/0x80 [ 125.018358][ T6441] ret_from_fork_asm+0x1a/0x30 [ 125.019701][ T6441] Modules linked in: [ 125.020978][ T6441] CPU: 3 UID: 0 PID: 6441 Comm: syz.2.108 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 125.024352][ T6441] Tainted: [B]=BAD_PAGE [ 125.025457][ T6441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 125.028354][ T6441] Call Trace: [ 125.029304][ T6441] [ 125.030098][ T6441] dump_stack_lvl+0x16c/0x1f0 [ 125.031365][ T6441] bad_page+0xb3/0x1f0 [ 125.032467][ T6441] ? __pfx_bad_page+0x10/0x10 [ 125.033735][ T6441] ? page_bad_reason+0x20/0x1e0 [ 125.035042][ T6441] ? page_bad_reason+0x9d/0x1e0 [ 125.036304][ T6441] free_unref_page+0x657/0xdc0 [ 125.037587][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 125.039216][ T6441] ? __phys_addr+0xc6/0x150 [ 125.041098][ T6441] skb_free_head+0xa0/0x1d0 [ 125.042759][ T6441] skb_release_data+0x560/0x730 [ 125.044196][ T6441] sk_skb_reason_drop+0x129/0x1a0 [ 125.045804][ T6441] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 125.047613][ T6441] ? kernel_text_address+0x8d/0x100 [ 125.049073][ T6441] ? hlock_class+0x4e/0x130 [ 125.050361][ T6441] ? __lock_acquire+0x163e/0x3ce0 [ 125.051922][ T6441] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 125.053908][ T6441] ? hlock_class+0x4e/0x130 [ 125.055138][ T6441] ? __lock_acquire+0xbdd/0x3ce0 [ 125.056457][ T6441] ? __pfx___lock_acquire+0x10/0x10 [ 125.057832][ T6441] __netif_receive_skb_list_core+0x357/0x950 [ 125.059376][ T6441] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 125.061091][ T6441] ? trace_lock_acquire+0x14a/0x1d0 [ 125.062472][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 125.064132][ T6441] ? lock_acquire+0x2f/0xb0 [ 125.065343][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 125.067006][ T6441] netif_receive_skb_list_internal+0x753/0xdb0 [ 125.068630][ T6441] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 125.070378][ T6441] ? __pfx_eth_type_trans+0x10/0x10 [ 125.071742][ T6441] ? __build_skb_around+0x278/0x3b0 [ 125.073109][ T6441] netif_receive_skb_list+0x4f/0x4a0 [ 125.074507][ T6441] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 125.076236][ T6441] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 125.077983][ T6441] ? bpf_test_timer_continue+0x150/0x3d0 [ 125.079468][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 125.080895][ T6441] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 125.082450][ T6441] ? try_to_wake_up+0xc35/0x14f0 [ 125.083754][ T6441] ? __pfx_try_to_wake_up+0x10/0x10 [ 125.085126][ T6441] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 125.086686][ T6441] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 125.088074][ T6441] ? 0xffffffffa0004340 [ 125.089180][ T6441] ? 0xffffffffa0004340 [ 125.090278][ T6441] ? 0xffffffffa0004340 [ 125.091371][ T6441] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 125.092927][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 125.094338][ T6441] ? lock_acquire+0x2f/0xb0 [ 125.095507][ T6441] ? __fget_files+0x40/0x3f0 [ 125.096691][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 125.098193][ T6441] ? fput+0x30/0x390 [ 125.099210][ T6441] ? __bpf_prog_get+0xa0/0x290 [ 125.100416][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 125.101916][ T6441] __sys_bpf+0xfc6/0x49a0 [ 125.103024][ T6441] ? __pfx_futex_wake+0x10/0x10 [ 125.104283][ T6441] ? finish_task_switch.isra.0+0x217/0xcc0 [ 125.105793][ T6441] ? __pfx___sys_bpf+0x10/0x10 [ 125.107042][ T6441] ? __schedule+0xe5d/0x5730 [ 125.108238][ T6441] ? __fget_files+0x23a/0x3f0 [ 125.109479][ T6441] ? do_futex+0x123/0x350 [ 125.110604][ T6441] ? __pfx_do_futex+0x10/0x10 [ 125.111842][ T6441] ? xfd_validate_state+0x5d/0x180 [ 125.113190][ T6441] ? rcu_is_watching+0x12/0xc0 [ 125.114423][ T6441] __x64_sys_bpf+0x78/0xc0 [ 125.115580][ T6441] ? lockdep_hardirqs_on+0x7c/0x110 [ 125.116888][ T6441] do_syscall_64+0xcd/0x250 [ 125.118042][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.119577][ T6441] RIP: 0033:0x7f800db7e719 [ 125.120746][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.125638][ T6441] RSP: 002b:00007f800e9b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 125.127774][ T6441] RAX: ffffffffffffffda RBX: 00007f800dd36058 RCX: 00007f800db7e719 [ 125.129792][ T6441] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 125.131823][ T6441] RBP: 00007f800dbf132e R08: 0000000000000000 R09: 0000000000000000 [ 125.133857][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.135874][ T6441] R13: 0000000000000000 R14: 00007f800dd36058 R15: 00007fffcd7e8d08 [ 125.137883][ T6441] [ 125.138764][ T6441] BUG: Bad page state in process syz.2.108 pfn:31a9e [ 125.139598][ T39] kauditd_printk_skb: 4 callbacks suppressed [ 125.139607][ T39] audit: type=1400 audit(1730197320.394:151): avc: denied { rename } for pid=5344 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 125.140470][ T6441] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888031a9ef80 pfn:0x31a9e [ 125.140484][ T6441] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 125.140497][ T6441] raw: 00fff00000000000 dead000000000040 ffff88803fdac000 0000000000000000 [ 125.142314][ T39] audit: type=1400 audit(1730197320.394:152): avc: denied { unlink } for pid=5344 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 125.147802][ T6441] raw: ffff888031a9ef80 0000000000000001 00000000ffffffff 0000000000000000 [ 125.147811][ T6441] page dumped because: page_pool leak [ 125.147816][ T6441] page_owner tracks the page as allocated [ 125.153021][ T39] audit: type=1400 audit(1730197320.394:153): avc: denied { create } for pid=5344 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 125.154342][ T6441] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6441, tgid 6432 (syz.2.108), ts 124609217947, free_ts 124547114291 [ 125.154363][ T6441] post_alloc_hook+0x2d1/0x350 [ 125.175347][ T6441] get_page_from_freelist+0x101e/0x3070 [ 125.176853][ T6441] __alloc_pages_noprof+0x223/0x25a0 [ 125.178242][ T6441] alloc_pages_bulk_noprof+0x77c/0x1110 [ 125.179687][ T6441] __page_pool_alloc_pages_slow+0x18f/0x770 [ 125.181222][ T6441] page_pool_alloc_netmem+0xc4/0x160 [ 125.182477][ T6441] page_pool_alloc_pages+0x1a/0x60 [ 125.183626][ T6441] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 125.185242][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 125.186667][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 125.188072][ T6441] __sys_bpf+0xfc6/0x49a0 [ 125.189226][ T6441] __x64_sys_bpf+0x78/0xc0 [ 125.190403][ T6441] do_syscall_64+0xcd/0x250 [ 125.191614][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.193082][ T6441] page last free pid 34 tgid 34 stack trace: [ 125.194630][ T6441] free_unref_page+0x5f4/0xdc0 [ 125.195876][ T6441] __folio_put+0x30d/0x3d0 [ 125.197094][ T6441] free_page_and_swap_cache+0x249/0x2c0 [ 125.198533][ T6441] tlb_remove_table_rcu+0x89/0xe0 [ 125.199849][ T6441] rcu_core+0x79d/0x14d0 [ 125.200981][ T6441] handle_softirqs+0x213/0x8f0 [ 125.202200][ T6441] run_ksoftirqd+0x3a/0x60 [ 125.203210][ T6441] smpboot_thread_fn+0x661/0xa30 [ 125.204420][ T6441] kthread+0x2c1/0x3a0 [ 125.205494][ T6441] ret_from_fork+0x45/0x80 [ 125.206699][ T6441] ret_from_fork_asm+0x1a/0x30 [ 125.207951][ T6441] Modules linked in: [ 125.208947][ T6441] CPU: 3 UID: 0 PID: 6441 Comm: syz.2.108 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 125.211990][ T6441] Tainted: [B]=BAD_PAGE [ 125.213060][ T6441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 125.215741][ T6441] Call Trace: [ 125.216630][ T6441] [ 125.217419][ T6441] dump_stack_lvl+0x16c/0x1f0 [ 125.218658][ T6441] bad_page+0xb3/0x1f0 [ 125.219734][ T6441] ? __pfx_bad_page+0x10/0x10 [ 125.220977][ T6441] ? page_bad_reason+0x9d/0x1e0 [ 125.222263][ T6441] free_unref_page+0x657/0xdc0 [ 125.223524][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 125.225098][ T6441] ? __phys_addr+0xc6/0x150 [ 125.226307][ T6441] skb_free_head+0xa0/0x1d0 [ 125.227467][ T6441] skb_release_data+0x560/0x730 [ 125.228713][ T6441] sk_skb_reason_drop+0x129/0x1a0 [ 125.230005][ T6441] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 125.231708][ T6441] ? kernel_text_address+0x8d/0x100 [ 125.233080][ T6441] ? hlock_class+0x4e/0x130 [ 125.234270][ T6441] ? __lock_acquire+0x163e/0x3ce0 [ 125.235582][ T6441] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 125.237435][ T6441] ? hlock_class+0x4e/0x130 [ 125.238627][ T6441] ? __lock_acquire+0xbdd/0x3ce0 [ 125.239950][ T6441] ? __pfx___lock_acquire+0x10/0x10 [ 125.241335][ T6441] __netif_receive_skb_list_core+0x357/0x950 [ 125.242900][ T6441] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 125.244589][ T6441] ? trace_lock_acquire+0x14a/0x1d0 [ 125.245912][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 125.247548][ T6441] ? lock_acquire+0x2f/0xb0 [ 125.248756][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 125.250412][ T6441] netif_receive_skb_list_internal+0x753/0xdb0 [ 125.252013][ T6441] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 125.253764][ T6441] ? __pfx_eth_type_trans+0x10/0x10 [ 125.255131][ T6441] ? __build_skb_around+0x278/0x3b0 [ 125.256491][ T6441] netif_receive_skb_list+0x4f/0x4a0 [ 125.257876][ T6441] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 125.259505][ T6441] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 125.261244][ T6441] ? bpf_test_timer_continue+0x150/0x3d0 [ 125.262707][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 125.264096][ T6441] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 125.265617][ T6441] ? try_to_wake_up+0xc35/0x14f0 [ 125.266909][ T6441] ? __pfx_try_to_wake_up+0x10/0x10 [ 125.268265][ T6441] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 125.269809][ T6441] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 125.271181][ T6441] ? 0xffffffffa0004340 [ 125.272236][ T6441] ? 0xffffffffa0004340 [ 125.273300][ T6441] ? 0xffffffffa0004340 [ 125.274378][ T6441] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 125.275910][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 125.277323][ T6441] ? lock_acquire+0x2f/0xb0 [ 125.278507][ T6441] ? __fget_files+0x40/0x3f0 [ 125.279720][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 125.281262][ T6441] ? fput+0x30/0x390 [ 125.282288][ T6441] ? __bpf_prog_get+0xa0/0x290 [ 125.283531][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 125.285052][ T6441] __sys_bpf+0xfc6/0x49a0 [ 125.286193][ T6441] ? __pfx_futex_wake+0x10/0x10 [ 125.287471][ T6441] ? finish_task_switch.isra.0+0x217/0xcc0 [ 125.288988][ T6441] ? __pfx___sys_bpf+0x10/0x10 [ 125.290252][ T6441] ? __schedule+0xe5d/0x5730 [ 125.291468][ T6441] ? __fget_files+0x23a/0x3f0 [ 125.292709][ T6441] ? do_futex+0x123/0x350 [ 125.293852][ T6441] ? __pfx_do_futex+0x10/0x10 [ 125.295094][ T6441] ? xfd_validate_state+0x5d/0x180 [ 125.296423][ T6441] ? rcu_is_watching+0x12/0xc0 [ 125.297691][ T6441] __x64_sys_bpf+0x78/0xc0 [ 125.298862][ T6441] ? lockdep_hardirqs_on+0x7c/0x110 [ 125.300224][ T6441] do_syscall_64+0xcd/0x250 [ 125.301464][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.303000][ T6441] RIP: 0033:0x7f800db7e719 [ 125.304168][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.309106][ T6441] RSP: 002b:00007f800e9b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 125.311279][ T6441] RAX: ffffffffffffffda RBX: 00007f800dd36058 RCX: 00007f800db7e719 [ 125.313340][ T6441] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 125.315377][ T6441] RBP: 00007f800dbf132e R08: 0000000000000000 R09: 0000000000000000 [ 125.317434][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.319470][ T6441] R13: 0000000000000000 R14: 00007f800dd36058 R15: 00007fffcd7e8d08 [ 125.321547][ T6441] [ 125.322438][ T6441] BUG: Bad page state in process syz.2.108 pfn:23213 [ 125.324190][ T6441] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888023213d20 pfn:0x23213 [ 125.326832][ T6441] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 125.328688][ T6441] raw: 00fff00000000000 dead000000000040 ffff88803fdac000 0000000000000000 [ 125.330923][ T6441] raw: ffff888023213d20 0000000000000001 00000000ffffffff 0000000000000000 [ 125.333109][ T6441] page dumped because: page_pool leak [ 125.334511][ T6441] page_owner tracks the page as allocated [ 125.335980][ T6441] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6441, tgid 6432 (syz.2.108), ts 124609213655, free_ts 124547119162 [ 125.340324][ T6441] post_alloc_hook+0x2d1/0x350 [ 125.341599][ T6441] get_page_from_freelist+0x101e/0x3070 [ 125.343085][ T6441] __alloc_pages_noprof+0x223/0x25a0 [ 125.344469][ T6441] alloc_pages_bulk_noprof+0x77c/0x1110 [ 125.345914][ T6441] __page_pool_alloc_pages_slow+0x18f/0x770 [ 125.347492][ T6441] page_pool_alloc_netmem+0xc4/0x160 [ 125.348843][ T6441] page_pool_alloc_pages+0x1a/0x60 [ 125.350110][ T6441] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 125.351709][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 125.353080][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 125.354478][ T6441] __sys_bpf+0xfc6/0x49a0 [ 125.355602][ T6441] __x64_sys_bpf+0x78/0xc0 [ 125.356810][ T6441] do_syscall_64+0xcd/0x250 [ 125.358020][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.359554][ T6441] page last free pid 34 tgid 34 stack trace: [ 125.361124][ T6441] free_unref_page+0x5f4/0xdc0 [ 125.362386][ T6441] __folio_put+0x30d/0x3d0 [ 125.363559][ T6441] free_page_and_swap_cache+0x249/0x2c0 [ 125.364990][ T6441] tlb_remove_table_rcu+0x89/0xe0 [ 125.366335][ T6441] rcu_core+0x79d/0x14d0 [ 125.367447][ T6441] handle_softirqs+0x213/0x8f0 [ 125.368707][ T6441] run_ksoftirqd+0x3a/0x60 [ 125.369885][ T6441] smpboot_thread_fn+0x661/0xa30 [ 125.371181][ T6441] kthread+0x2c1/0x3a0 [ 125.372242][ T6441] ret_from_fork+0x45/0x80 [ 125.373403][ T6441] ret_from_fork_asm+0x1a/0x30 [ 125.374657][ T6441] Modules linked in: [ 125.375682][ T6441] CPU: 3 UID: 0 PID: 6441 Comm: syz.2.108 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 125.378754][ T6441] Tainted: [B]=BAD_PAGE [ 125.379829][ T6441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 125.382594][ T6441] Call Trace: [ 125.383468][ T6441] [ 125.384246][ T6441] dump_stack_lvl+0x16c/0x1f0 [ 125.385481][ T6441] bad_page+0xb3/0x1f0 [ 125.386552][ T6441] ? __pfx_bad_page+0x10/0x10 [ 125.387786][ T6441] ? page_bad_reason+0x9d/0x1e0 [ 125.389065][ T6441] free_unref_page+0x657/0xdc0 [ 125.390321][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 125.391884][ T6441] ? __phys_addr+0xc6/0x150 [ 125.393077][ T6441] skb_free_head+0xa0/0x1d0 [ 125.394281][ T6441] skb_release_data+0x560/0x730 [ 125.395566][ T6441] sk_skb_reason_drop+0x129/0x1a0 [ 125.396881][ T6441] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 125.398621][ T6441] ? kernel_text_address+0x8d/0x100 [ 125.399976][ T6441] ? hlock_class+0x4e/0x130 [ 125.401192][ T6441] ? __lock_acquire+0x163e/0x3ce0 [ 125.402513][ T6441] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 125.404342][ T6441] ? hlock_class+0x4e/0x130 [ 125.405536][ T6441] ? __lock_acquire+0xbdd/0x3ce0 [ 125.406829][ T6441] ? __pfx___lock_acquire+0x10/0x10 [ 125.408189][ T6441] __netif_receive_skb_list_core+0x357/0x950 [ 125.409770][ T6441] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 125.411429][ T6441] ? trace_lock_acquire+0x14a/0x1d0 [ 125.412763][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 125.414378][ T6441] ? lock_acquire+0x2f/0xb0 [ 125.415537][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 125.417202][ T6441] netif_receive_skb_list_internal+0x753/0xdb0 [ 125.418784][ T6441] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 125.420485][ T6441] ? __pfx_eth_type_trans+0x10/0x10 [ 125.421829][ T6441] ? __build_skb_around+0x278/0x3b0 [ 125.423168][ T6441] netif_receive_skb_list+0x4f/0x4a0 [ 125.424526][ T6441] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 125.426151][ T6441] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 125.427851][ T6441] ? bpf_test_timer_continue+0x150/0x3d0 [ 125.429317][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 125.430681][ T6441] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 125.432187][ T6441] ? try_to_wake_up+0xc35/0x14f0 [ 125.433482][ T6441] ? __pfx_try_to_wake_up+0x10/0x10 [ 125.434832][ T6441] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 125.436349][ T6441] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 125.438038][ T6441] ? 0xffffffffa0004340 [ 125.439207][ T6441] ? 0xffffffffa0004340 [ 125.440316][ T6441] ? 0xffffffffa0004340 [ 125.441439][ T6441] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 125.443005][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 125.444563][ T6441] ? lock_acquire+0x2f/0xb0 [ 125.445914][ T6441] ? __fget_files+0x40/0x3f0 [ 125.447139][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 125.448695][ T6441] ? fput+0x30/0x390 [ 125.449755][ T6441] ? __bpf_prog_get+0xa0/0x290 [ 125.451017][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 125.452655][ T6441] __sys_bpf+0xfc6/0x49a0 [ 125.453811][ T6441] ? __pfx_futex_wake+0x10/0x10 [ 125.455115][ T6441] ? finish_task_switch.isra.0+0x217/0xcc0 [ 125.456603][ T6441] ? __pfx___sys_bpf+0x10/0x10 [ 125.457893][ T6441] ? __schedule+0xe5d/0x5730 [ 125.459128][ T6441] ? __fget_files+0x23a/0x3f0 [ 125.460379][ T6441] ? do_futex+0x123/0x350 [ 125.461543][ T6441] ? __pfx_do_futex+0x10/0x10 [ 125.462792][ T6441] ? xfd_validate_state+0x5d/0x180 [ 125.464144][ T6441] ? rcu_is_watching+0x12/0xc0 [ 125.465415][ T6441] __x64_sys_bpf+0x78/0xc0 [ 125.466595][ T6441] ? lockdep_hardirqs_on+0x7c/0x110 [ 125.467978][ T6441] do_syscall_64+0xcd/0x250 [ 125.469191][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.470762][ T6441] RIP: 0033:0x7f800db7e719 [ 125.471938][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.477024][ T6441] RSP: 002b:00007f800e9b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 125.479225][ T6441] RAX: ffffffffffffffda RBX: 00007f800dd36058 RCX: 00007f800db7e719 [ 125.481314][ T6441] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 125.483377][ T6441] RBP: 00007f800dbf132e R08: 0000000000000000 R09: 0000000000000000 [ 125.485425][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.487484][ T6441] R13: 0000000000000000 R14: 00007f800dd36058 R15: 00007fffcd7e8d08 [ 125.489555][ T6441] [ 125.490469][ T6441] BUG: Bad page state in process syz.2.108 pfn:27b03 [ 125.492329][ T6441] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888027b03e10 pfn:0x27b03 [ 125.495723][ T6441] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 125.498217][ T6441] raw: 00fff00000000000 dead000000000040 ffff88803fdac000 0000000000000000 [ 125.501159][ T6441] raw: ffff888027b03e10 0000000000000001 00000000ffffffff 0000000000000000 [ 125.504063][ T6441] page dumped because: page_pool leak [ 125.505939][ T6441] page_owner tracks the page as allocated [ 125.507969][ T6441] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6441, tgid 6432 (syz.2.108), ts 124609208977, free_ts 124547124602 [ 125.513549][ T6441] post_alloc_hook+0x2d1/0x350 [ 125.515166][ T6441] get_page_from_freelist+0x101e/0x3070 [ 125.517096][ T6441] __alloc_pages_noprof+0x223/0x25a0 [ 125.518882][ T6441] alloc_pages_bulk_noprof+0x77c/0x1110 [ 125.520803][ T6441] __page_pool_alloc_pages_slow+0x18f/0x770 [ 125.522782][ T6441] page_pool_alloc_netmem+0xc4/0x160 [ 125.524173][ T6441] page_pool_alloc_pages+0x1a/0x60 [ 125.525872][ T6441] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 125.528072][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 125.529912][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 125.531708][ T6441] __sys_bpf+0xfc6/0x49a0 [ 125.533152][ T6441] __x64_sys_bpf+0x78/0xc0 [ 125.534540][ T6441] do_syscall_64+0xcd/0x250 [ 125.535867][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.537484][ T6441] page last free pid 34 tgid 34 stack trace: [ 125.539046][ T6441] free_unref_page+0x5f4/0xdc0 [ 125.540308][ T6441] __folio_put+0x30d/0x3d0 [ 125.541488][ T6441] free_page_and_swap_cache+0x249/0x2c0 [ 125.542931][ T6441] tlb_remove_table_rcu+0x89/0xe0 [ 125.544225][ T6441] rcu_core+0x79d/0x14d0 [ 125.545334][ T6441] handle_softirqs+0x213/0x8f0 [ 125.546640][ T6441] run_ksoftirqd+0x3a/0x60 [ 125.547824][ T6441] smpboot_thread_fn+0x661/0xa30 [ 125.549184][ T6441] kthread+0x2c1/0x3a0 [ 125.550260][ T6441] ret_from_fork+0x45/0x80 [ 125.551442][ T6441] ret_from_fork_asm+0x1a/0x30 [ 125.552704][ T6441] Modules linked in: [ 125.553737][ T6441] CPU: 3 UID: 0 PID: 6441 Comm: syz.2.108 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 125.556851][ T6441] Tainted: [B]=BAD_PAGE [ 125.557987][ T6441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 125.560783][ T6441] Call Trace: [ 125.561697][ T6441] [ 125.562487][ T6441] dump_stack_lvl+0x16c/0x1f0 [ 125.563727][ T6441] bad_page+0xb3/0x1f0 [ 125.564808][ T6441] ? __pfx_bad_page+0x10/0x10 [ 125.566133][ T6441] ? page_bad_reason+0x9d/0x1e0 [ 125.567726][ T6441] free_unref_page+0x657/0xdc0 [ 125.569395][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 125.571461][ T6441] ? __phys_addr+0xc6/0x150 [ 125.573011][ T6441] skb_free_head+0xa0/0x1d0 [ 125.574527][ T6441] skb_release_data+0x560/0x730 [ 125.576223][ T6441] sk_skb_reason_drop+0x129/0x1a0 [ 125.577982][ T6441] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 125.580279][ T6441] ? kernel_text_address+0x8d/0x100 [ 125.582105][ T6441] ? hlock_class+0x4e/0x130 [ 125.583690][ T6441] ? __lock_acquire+0x163e/0x3ce0 [ 125.585436][ T6441] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 125.587814][ T6441] ? hlock_class+0x4e/0x130 [ 125.589316][ T6441] ? __lock_acquire+0xbdd/0x3ce0 [ 125.590864][ T6441] ? __pfx___lock_acquire+0x10/0x10 [ 125.592615][ T6441] __netif_receive_skb_list_core+0x357/0x950 [ 125.594652][ T6441] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 125.596599][ T6441] ? trace_lock_acquire+0x14a/0x1d0 [ 125.598116][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 125.599773][ T6441] ? lock_acquire+0x2f/0xb0 [ 125.600969][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 125.602614][ T6441] netif_receive_skb_list_internal+0x753/0xdb0 [ 125.604214][ T6441] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 125.605959][ T6441] ? __pfx_eth_type_trans+0x10/0x10 [ 125.607313][ T6441] ? __build_skb_around+0x278/0x3b0 [ 125.608668][ T6441] netif_receive_skb_list+0x4f/0x4a0 [ 125.610019][ T6441] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 125.611580][ T6441] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 125.613236][ T6441] ? bpf_test_timer_continue+0x150/0x3d0 [ 125.614626][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 125.615974][ T6441] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 125.617434][ T6441] ? try_to_wake_up+0xc35/0x14f0 [ 125.618697][ T6441] ? __pfx_try_to_wake_up+0x10/0x10 [ 125.620030][ T6441] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 125.621573][ T6441] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 125.622923][ T6441] ? 0xffffffffa0004340 [ 125.623997][ T6441] ? 0xffffffffa0004340 [ 125.625056][ T6441] ? 0xffffffffa0004340 [ 125.626114][ T6441] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 125.627632][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 125.628991][ T6441] ? lock_acquire+0x2f/0xb0 [ 125.630136][ T6441] ? __fget_files+0x40/0x3f0 [ 125.631331][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 125.632841][ T6441] ? fput+0x30/0x390 [ 125.633852][ T6441] ? __bpf_prog_get+0xa0/0x290 [ 125.635093][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 125.636601][ T6441] __sys_bpf+0xfc6/0x49a0 [ 125.637708][ T6441] ? __pfx_futex_wake+0x10/0x10 [ 125.638914][ T6441] ? finish_task_switch.isra.0+0x217/0xcc0 [ 125.640391][ T6441] ? __pfx___sys_bpf+0x10/0x10 [ 125.641613][ T6441] ? __schedule+0xe5d/0x5730 [ 125.642950][ T6441] ? __fget_files+0x23a/0x3f0 [ 125.644330][ T6441] ? do_futex+0x123/0x350 [ 125.645456][ T6441] ? __pfx_do_futex+0x10/0x10 [ 125.646648][ T6441] ? xfd_validate_state+0x5d/0x180 [ 125.647943][ T6441] ? rcu_is_watching+0x12/0xc0 [ 125.649175][ T6441] __x64_sys_bpf+0x78/0xc0 [ 125.650337][ T6441] ? lockdep_hardirqs_on+0x7c/0x110 [ 125.651627][ T6441] do_syscall_64+0xcd/0x250 [ 125.652800][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.654382][ T6441] RIP: 0033:0x7f800db7e719 [ 125.655685][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.660882][ T6441] RSP: 002b:00007f800e9b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 125.663093][ T6441] RAX: ffffffffffffffda RBX: 00007f800dd36058 RCX: 00007f800db7e719 [ 125.665137][ T6441] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 125.667201][ T6441] RBP: 00007f800dbf132e R08: 0000000000000000 R09: 0000000000000000 [ 125.669245][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.671257][ T6441] R13: 0000000000000000 R14: 00007f800dd36058 R15: 00007fffcd7e8d08 [ 125.673347][ T6441] [ 125.674262][ T6441] BUG: Bad page state in process syz.2.108 pfn:23daa [ 125.676019][ T6441] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888023dabe00 pfn:0x23daa [ 125.678663][ T6441] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 125.680503][ T6441] raw: 00fff00000000000 dead000000000040 ffff88803fdac000 0000000000000000 [ 125.682755][ T6441] raw: ffff888023dabe00 0000000000000001 00000000ffffffff 0000000000000000 [ 125.684974][ T6441] page dumped because: page_pool leak [ 125.686429][ T6441] page_owner tracks the page as allocated [ 125.687919][ T6441] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6441, tgid 6432 (syz.2.108), ts 124609204596, free_ts 124583912646 [ 125.692238][ T6441] post_alloc_hook+0x2d1/0x350 [ 125.693495][ T6441] get_page_from_freelist+0x101e/0x3070 [ 125.694922][ T6441] __alloc_pages_noprof+0x223/0x25a0 [ 125.696342][ T6441] alloc_pages_bulk_noprof+0x77c/0x1110 [ 125.697785][ T6441] __page_pool_alloc_pages_slow+0x18f/0x770 [ 125.699329][ T6441] page_pool_alloc_netmem+0xc4/0x160 [ 125.700709][ T6441] page_pool_alloc_pages+0x1a/0x60 [ 125.702067][ T6441] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 125.703662][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 125.705045][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 125.706506][ T6441] __sys_bpf+0xfc6/0x49a0 [ 125.707606][ T6441] __x64_sys_bpf+0x78/0xc0 [ 125.708734][ T6441] do_syscall_64+0xcd/0x250 [ 125.709895][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.711372][ T6441] page last free pid 6429 tgid 6428 stack trace: [ 125.712933][ T6441] free_unref_page+0x5f4/0xdc0 [ 125.714157][ T6441] __folio_put+0x30d/0x3d0 [ 125.715294][ T6441] put_page+0x21e/0x280 [ 125.716397][ T6441] page_pool_return_page+0x400/0x520 [ 125.717745][ T6441] page_pool_release+0xf4/0x7d0 [ 125.718985][ T6441] page_pool_destroy+0x10a/0x4c0 [ 125.720239][ T6441] bpf_test_run_xdp_live+0x3a1/0x500 [ 125.721609][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 125.722921][ T6441] __sys_bpf+0xfc6/0x49a0 [ 125.724007][ T6441] __x64_sys_bpf+0x78/0xc0 [ 125.725109][ T6441] do_syscall_64+0xcd/0x250 [ 125.726321][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.727844][ T6441] Modules linked in: [ 125.728831][ T6441] CPU: 3 UID: 0 PID: 6441 Comm: syz.2.108 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 125.731768][ T6441] Tainted: [B]=BAD_PAGE [ 125.732806][ T6441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 125.735483][ T6441] Call Trace: [ 125.736346][ T6441] [ 125.737115][ T6441] dump_stack_lvl+0x16c/0x1f0 [ 125.738312][ T6441] bad_page+0xb3/0x1f0 [ 125.739358][ T6441] ? __pfx_bad_page+0x10/0x10 [ 125.740548][ T6441] ? page_bad_reason+0x9d/0x1e0 [ 125.741785][ T6441] free_unref_page+0x657/0xdc0 [ 125.742999][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 125.744478][ T6441] ? __phys_addr+0xc6/0x150 [ 125.745647][ T6441] skb_free_head+0xa0/0x1d0 [ 125.746809][ T6441] skb_release_data+0x560/0x730 [ 125.747999][ T6441] sk_skb_reason_drop+0x129/0x1a0 [ 125.749292][ T6441] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 125.750971][ T6441] ? kernel_text_address+0x8d/0x100 [ 125.752319][ T6441] ? hlock_class+0x4e/0x130 [ 125.753478][ T6441] ? __lock_acquire+0x163e/0x3ce0 [ 125.754759][ T6441] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 125.756521][ T6441] ? hlock_class+0x4e/0x130 [ 125.757667][ T6441] ? __lock_acquire+0xbdd/0x3ce0 [ 125.758897][ T6441] ? __pfx___lock_acquire+0x10/0x10 [ 125.760207][ T6441] __netif_receive_skb_list_core+0x357/0x950 [ 125.761730][ T6441] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 125.763369][ T6441] ? trace_lock_acquire+0x14a/0x1d0 [ 125.764678][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 125.766269][ T6441] ? lock_acquire+0x2f/0xb0 [ 125.767400][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 125.768982][ T6441] netif_receive_skb_list_internal+0x753/0xdb0 [ 125.770537][ T6441] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 125.772225][ T6441] ? __pfx_eth_type_trans+0x10/0x10 [ 125.773643][ T6441] ? __build_skb_around+0x278/0x3b0 [ 125.774976][ T6441] netif_receive_skb_list+0x4f/0x4a0 [ 125.776312][ T6441] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 125.777921][ T6441] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 125.779586][ T6441] ? bpf_test_timer_continue+0x150/0x3d0 [ 125.781015][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 125.782346][ T6441] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 125.783823][ T6441] ? try_to_wake_up+0xc35/0x14f0 [ 125.785088][ T6441] ? __pfx_try_to_wake_up+0x10/0x10 [ 125.786413][ T6441] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 125.787908][ T6441] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 125.789257][ T6441] ? 0xffffffffa0004340 [ 125.790298][ T6441] ? 0xffffffffa0004340 [ 125.791352][ T6441] ? 0xffffffffa0004340 [ 125.792390][ T6441] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 125.793875][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 125.795230][ T6441] ? lock_acquire+0x2f/0xb0 [ 125.796392][ T6441] ? __fget_files+0x40/0x3f0 [ 125.797578][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 125.799045][ T6441] ? fput+0x30/0x390 [ 125.800026][ T6441] ? __bpf_prog_get+0xa0/0x290 [ 125.801258][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 125.802705][ T6441] __sys_bpf+0xfc6/0x49a0 [ 125.803803][ T6441] ? __pfx_futex_wake+0x10/0x10 [ 125.805039][ T6441] ? finish_task_switch.isra.0+0x217/0xcc0 [ 125.806522][ T6441] ? __pfx___sys_bpf+0x10/0x10 [ 125.807711][ T6441] ? __schedule+0xe5d/0x5730 [ 125.808875][ T6441] ? __fget_files+0x23a/0x3f0 [ 125.810077][ T6441] ? do_futex+0x123/0x350 [ 125.811168][ T6441] ? __pfx_do_futex+0x10/0x10 [ 125.812348][ T6441] ? xfd_validate_state+0x5d/0x180 [ 125.813618][ T6441] ? rcu_is_watching+0x12/0xc0 [ 125.814827][ T6441] __x64_sys_bpf+0x78/0xc0 [ 125.815953][ T6441] ? lockdep_hardirqs_on+0x7c/0x110 [ 125.817256][ T6441] do_syscall_64+0xcd/0x250 [ 125.818410][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.819909][ T6441] RIP: 0033:0x7f800db7e719 [ 125.821038][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.826994][ T6441] RSP: 002b:00007f800e9b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 125.829271][ T6441] RAX: ffffffffffffffda RBX: 00007f800dd36058 RCX: 00007f800db7e719 [ 125.831274][ T6441] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 125.833259][ T6441] RBP: 00007f800dbf132e R08: 0000000000000000 R09: 0000000000000000 [ 125.835306][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.837330][ T6441] R13: 0000000000000000 R14: 00007f800dd36058 R15: 00007fffcd7e8d08 [ 125.839322][ T6441] [ 125.840216][ T6441] BUG: Bad page state in process syz.2.108 pfn:4b869 [ 125.841953][ T6441] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2 pfn:0x4b869 [ 125.844204][ T6441] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 125.846121][ T6441] raw: 00fff00000000000 dead000000000040 ffff88803fdac000 0000000000000000 [ 125.848419][ T6441] raw: 0000000000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 125.850606][ T6441] page dumped because: page_pool leak [ 125.851946][ T6441] page_owner tracks the page as allocated [ 125.853405][ T6441] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6441, tgid 6432 (syz.2.108), ts 124609200018, free_ts 124583919352 [ 125.857980][ T6441] post_alloc_hook+0x2d1/0x350 [ 125.859359][ T6441] get_page_from_freelist+0x101e/0x3070 [ 125.860958][ T6441] __alloc_pages_noprof+0x223/0x25a0 [ 125.862606][ T6441] alloc_pages_bulk_noprof+0x77c/0x1110 [ 125.864121][ T6441] __page_pool_alloc_pages_slow+0x18f/0x770 [ 125.866494][ T6441] page_pool_alloc_netmem+0xc4/0x160 [ 125.867973][ T6441] page_pool_alloc_pages+0x1a/0x60 [ 125.869289][ T6441] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 125.870848][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 125.872199][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 125.873601][ T6441] __sys_bpf+0xfc6/0x49a0 [ 125.874714][ T6441] __x64_sys_bpf+0x78/0xc0 [ 125.875862][ T6441] do_syscall_64+0xcd/0x250 [ 125.877076][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.878546][ T6441] page last free pid 6429 tgid 6428 stack trace: [ 125.880103][ T6441] free_unref_page+0x5f4/0xdc0 [ 125.881325][ T6441] __folio_put+0x30d/0x3d0 [ 125.882434][ T6441] put_page+0x21e/0x280 [ 125.883624][ T6441] page_pool_return_page+0x400/0x520 [ 125.885011][ T6441] page_pool_release+0xf4/0x7d0 [ 125.886364][ T6441] page_pool_destroy+0x10a/0x4c0 [ 125.887628][ T6441] bpf_test_run_xdp_live+0x3a1/0x500 [ 125.889064][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 125.890442][ T6441] __sys_bpf+0xfc6/0x49a0 [ 125.891517][ T6441] __x64_sys_bpf+0x78/0xc0 [ 125.892632][ T6441] do_syscall_64+0xcd/0x250 [ 125.893799][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.895314][ T6441] Modules linked in: [ 125.896362][ T6441] CPU: 3 UID: 0 PID: 6441 Comm: syz.2.108 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 125.899246][ T6441] Tainted: [B]=BAD_PAGE [ 125.900249][ T6441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 125.902880][ T6441] Call Trace: [ 125.903698][ T6441] [ 125.904427][ T6441] dump_stack_lvl+0x16c/0x1f0 [ 125.905582][ T6441] bad_page+0xb3/0x1f0 [ 125.906606][ T6441] ? __pfx_bad_page+0x10/0x10 [ 125.907778][ T6441] ? page_bad_reason+0x9d/0x1e0 [ 125.909010][ T6441] free_unref_page+0x657/0xdc0 [ 125.910211][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 125.911695][ T6441] ? __phys_addr+0xc6/0x150 [ 125.912853][ T6441] skb_free_head+0xa0/0x1d0 [ 125.914048][ T6441] skb_release_data+0x560/0x730 [ 125.915322][ T6441] sk_skb_reason_drop+0x129/0x1a0 [ 125.916586][ T6441] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 125.918264][ T6441] ? kernel_text_address+0x8d/0x100 [ 125.919575][ T6441] ? hlock_class+0x4e/0x130 [ 125.920758][ T6441] ? __lock_acquire+0x163e/0x3ce0 [ 125.922095][ T6441] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 125.923926][ T6441] ? hlock_class+0x4e/0x130 [ 125.925105][ T6441] ? __lock_acquire+0xbdd/0x3ce0 [ 125.926370][ T6441] ? __pfx___lock_acquire+0x10/0x10 [ 125.927706][ T6441] __netif_receive_skb_list_core+0x357/0x950 [ 125.929260][ T6441] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 125.930869][ T6441] ? trace_lock_acquire+0x14a/0x1d0 [ 125.932209][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 125.933833][ T6441] ? lock_acquire+0x2f/0xb0 [ 125.935019][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 125.936652][ T6441] netif_receive_skb_list_internal+0x753/0xdb0 [ 125.938247][ T6441] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 125.939959][ T6441] ? __pfx_eth_type_trans+0x10/0x10 [ 125.941342][ T6441] ? __build_skb_around+0x278/0x3b0 [ 125.942700][ T6441] netif_receive_skb_list+0x4f/0x4a0 [ 125.944095][ T6441] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 125.945725][ T6441] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 125.947431][ T6441] ? bpf_test_timer_continue+0x150/0x3d0 [ 125.948887][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 125.950267][ T6441] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 125.951786][ T6441] ? try_to_wake_up+0xc35/0x14f0 [ 125.953084][ T6441] ? __pfx_try_to_wake_up+0x10/0x10 [ 125.954430][ T6441] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 125.955978][ T6441] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 125.957375][ T6441] ? 0xffffffffa0004340 [ 125.958461][ T6441] ? 0xffffffffa0004340 [ 125.959547][ T6441] ? 0xffffffffa0004340 [ 125.960628][ T6441] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 125.962182][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 125.963610][ T6441] ? lock_acquire+0x2f/0xb0 [ 125.964795][ T6441] ? __fget_files+0x40/0x3f0 [ 125.965994][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 125.967492][ T6441] ? fput+0x30/0x390 [ 125.968510][ T6441] ? __bpf_prog_get+0xa0/0x290 [ 125.969752][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 125.971208][ T6441] __sys_bpf+0xfc6/0x49a0 [ 125.972296][ T6441] ? __pfx_futex_wake+0x10/0x10 [ 125.973531][ T6441] ? finish_task_switch.isra.0+0x217/0xcc0 [ 125.974987][ T6441] ? __pfx___sys_bpf+0x10/0x10 [ 125.976203][ T6441] ? __schedule+0xe5d/0x5730 [ 125.977575][ T6441] ? __fget_files+0x23a/0x3f0 [ 125.979137][ T6441] ? do_futex+0x123/0x350 [ 125.980291][ T6441] ? __pfx_do_futex+0x10/0x10 [ 125.981522][ T6441] ? xfd_validate_state+0x5d/0x180 [ 125.982806][ T6441] ? rcu_is_watching+0x12/0xc0 [ 125.984065][ T6441] __x64_sys_bpf+0x78/0xc0 [ 125.985213][ T6441] ? lockdep_hardirqs_on+0x7c/0x110 [ 125.986582][ T6441] do_syscall_64+0xcd/0x250 [ 125.987804][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.989375][ T6441] RIP: 0033:0x7f800db7e719 [ 125.990514][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.995374][ T6441] RSP: 002b:00007f800e9b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 125.997540][ T6441] RAX: ffffffffffffffda RBX: 00007f800dd36058 RCX: 00007f800db7e719 [ 125.999588][ T6441] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 126.001659][ T6441] RBP: 00007f800dbf132e R08: 0000000000000000 R09: 0000000000000000 [ 126.003708][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.005771][ T6441] R13: 0000000000000000 R14: 00007f800dd36058 R15: 00007fffcd7e8d08 [ 126.007818][ T6441] [ 126.008713][ T6441] BUG: Bad page state in process syz.2.108 pfn:23958 [ 126.010471][ T6441] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888023958d80 pfn:0x23958 [ 126.013055][ T6441] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 126.014913][ T6441] raw: 00fff00000000000 dead000000000040 ffff88803fdac000 0000000000000000 [ 126.017180][ T6441] raw: ffff888023958d80 0000000000000001 00000000ffffffff 0000000000000000 [ 126.019375][ T6441] page dumped because: page_pool leak [ 126.020765][ T6441] page_owner tracks the page as allocated [ 126.022248][ T6441] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6441, tgid 6432 (syz.2.108), ts 124609195461, free_ts 124583923205 [ 126.026604][ T6441] post_alloc_hook+0x2d1/0x350 [ 126.027849][ T6441] get_page_from_freelist+0x101e/0x3070 [ 126.029298][ T6441] __alloc_pages_noprof+0x223/0x25a0 [ 126.030676][ T6441] alloc_pages_bulk_noprof+0x77c/0x1110 [ 126.032124][ T6441] __page_pool_alloc_pages_slow+0x18f/0x770 [ 126.033669][ T6441] page_pool_alloc_netmem+0xc4/0x160 [ 126.035043][ T6441] page_pool_alloc_pages+0x1a/0x60 [ 126.036422][ T6441] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 126.038004][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 126.039347][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 126.040739][ T6441] __sys_bpf+0xfc6/0x49a0 [ 126.041864][ T6441] __x64_sys_bpf+0x78/0xc0 [ 126.043021][ T6441] do_syscall_64+0xcd/0x250 [ 126.044200][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.045751][ T6441] page last free pid 6429 tgid 6428 stack trace: [ 126.047416][ T6441] free_unref_page+0x5f4/0xdc0 [ 126.048629][ T6441] __folio_put+0x30d/0x3d0 [ 126.049789][ T6441] put_page+0x21e/0x280 [ 126.050872][ T6441] page_pool_return_page+0x400/0x520 [ 126.052216][ T6441] page_pool_release+0xf4/0x7d0 [ 126.053467][ T6441] page_pool_destroy+0x10a/0x4c0 [ 126.054733][ T6441] bpf_test_run_xdp_live+0x3a1/0x500 [ 126.056104][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 126.057532][ T6441] __sys_bpf+0xfc6/0x49a0 [ 126.058658][ T6441] __x64_sys_bpf+0x78/0xc0 [ 126.059822][ T6441] do_syscall_64+0xcd/0x250 [ 126.061002][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.062483][ T6441] Modules linked in: [ 126.063492][ T6441] CPU: 3 UID: 0 PID: 6441 Comm: syz.2.108 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 126.066462][ T6441] Tainted: [B]=BAD_PAGE [ 126.067532][ T6441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 126.070271][ T6441] Call Trace: [ 126.071133][ T6441] [ 126.071900][ T6441] dump_stack_lvl+0x16c/0x1f0 [ 126.073090][ T6441] bad_page+0xb3/0x1f0 [ 126.074121][ T6441] ? __pfx_bad_page+0x10/0x10 [ 126.075290][ T6441] ? page_bad_reason+0x9d/0x1e0 [ 126.076516][ T6441] free_unref_page+0x657/0xdc0 [ 126.077744][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 126.079267][ T6441] ? __phys_addr+0xc6/0x150 [ 126.080459][ T6441] skb_free_head+0xa0/0x1d0 [ 126.081634][ T6441] skb_release_data+0x560/0x730 [ 126.082866][ T6441] sk_skb_reason_drop+0x129/0x1a0 [ 126.084145][ T6441] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 126.085880][ T6441] ? kernel_text_address+0x8d/0x100 [ 126.087233][ T6441] ? hlock_class+0x4e/0x130 [ 126.088417][ T6441] ? __lock_acquire+0x163e/0x3ce0 [ 126.089744][ T6441] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 126.091579][ T6441] ? hlock_class+0x4e/0x130 [ 126.092770][ T6441] ? __lock_acquire+0xbdd/0x3ce0 [ 126.094077][ T6441] ? __pfx___lock_acquire+0x10/0x10 [ 126.095430][ T6441] __netif_receive_skb_list_core+0x357/0x950 [ 126.097170][ T6441] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 126.098986][ T6441] ? trace_lock_acquire+0x14a/0x1d0 [ 126.100346][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 126.101970][ T6441] ? lock_acquire+0x2f/0xb0 [ 126.103130][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 126.104737][ T6441] netif_receive_skb_list_internal+0x753/0xdb0 [ 126.106698][ T6441] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 126.108516][ T6441] ? __pfx_eth_type_trans+0x10/0x10 [ 126.109888][ T6441] ? __build_skb_around+0x278/0x3b0 [ 126.111248][ T6441] netif_receive_skb_list+0x4f/0x4a0 [ 126.112638][ T6441] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 126.114402][ T6441] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 126.116123][ T6441] ? bpf_test_timer_continue+0x150/0x3d0 [ 126.117613][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 126.118955][ T6441] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 126.120429][ T6441] ? try_to_wake_up+0xc35/0x14f0 [ 126.121712][ T6441] ? __pfx_try_to_wake_up+0x10/0x10 [ 126.123040][ T6441] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 126.124556][ T6441] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 126.125911][ T6441] ? 0xffffffffa0004340 [ 126.126976][ T6441] ? 0xffffffffa0004340 [ 126.128048][ T6441] ? 0xffffffffa0004340 [ 126.129107][ T6441] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 126.130613][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 126.131986][ T6441] ? lock_acquire+0x2f/0xb0 [ 126.133193][ T6441] ? __fget_files+0x40/0x3f0 [ 126.134380][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 126.135849][ T6441] ? fput+0x30/0x390 [ 126.136868][ T6441] ? __bpf_prog_get+0xa0/0x290 [ 126.138113][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 126.139634][ T6441] __sys_bpf+0xfc6/0x49a0 [ 126.140710][ T6441] ? __pfx_futex_wake+0x10/0x10 [ 126.141960][ T6441] ? finish_task_switch.isra.0+0x217/0xcc0 [ 126.143436][ T6441] ? __pfx___sys_bpf+0x10/0x10 [ 126.144681][ T6441] ? __schedule+0xe5d/0x5730 [ 126.145876][ T6441] ? __fget_files+0x23a/0x3f0 [ 126.147077][ T6441] ? do_futex+0x123/0x350 [ 126.148173][ T6441] ? __pfx_do_futex+0x10/0x10 [ 126.149381][ T6441] ? xfd_validate_state+0x5d/0x180 [ 126.150665][ T6441] ? rcu_is_watching+0x12/0xc0 [ 126.151905][ T6441] __x64_sys_bpf+0x78/0xc0 [ 126.153034][ T6441] ? lockdep_hardirqs_on+0x7c/0x110 [ 126.154348][ T6441] do_syscall_64+0xcd/0x250 [ 126.155499][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.157018][ T6441] RIP: 0033:0x7f800db7e719 [ 126.158179][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.163133][ T6441] RSP: 002b:00007f800e9b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 126.165200][ T6441] RAX: ffffffffffffffda RBX: 00007f800dd36058 RCX: 00007f800db7e719 [ 126.167195][ T6441] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 126.169173][ T6441] RBP: 00007f800dbf132e R08: 0000000000000000 R09: 0000000000000000 [ 126.171151][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.173089][ T6441] R13: 0000000000000000 R14: 00007f800dd36058 R15: 00007fffcd7e8d08 [ 126.175068][ T6441] [ 126.175972][ T6441] BUG: Bad page state in process syz.2.108 pfn:3ff23 [ 126.177761][ T6441] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803ff23f00 pfn:0x3ff23 [ 126.180531][ T6441] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 126.182599][ T6441] raw: 00fff00000000000 dead000000000040 ffff88803fdac000 0000000000000000 [ 126.184801][ T6441] raw: ffff88803ff23f00 0000000000000001 00000000ffffffff 0000000000000000 [ 126.187203][ T6441] page dumped because: page_pool leak [ 126.188545][ T6441] page_owner tracks the page as allocated [ 126.190051][ T6441] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6441, tgid 6432 (syz.2.108), ts 124609189309, free_ts 124583927074 [ 126.194233][ T6441] post_alloc_hook+0x2d1/0x350 [ 126.195456][ T6441] get_page_from_freelist+0x101e/0x3070 [ 126.196902][ T6441] __alloc_pages_noprof+0x223/0x25a0 [ 126.198239][ T6441] alloc_pages_bulk_noprof+0x77c/0x1110 [ 126.199607][ T6441] __page_pool_alloc_pages_slow+0x18f/0x770 [ 126.201101][ T6441] page_pool_alloc_netmem+0xc4/0x160 [ 126.202440][ T6441] page_pool_alloc_pages+0x1a/0x60 [ 126.203735][ T6441] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 126.205278][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 126.206671][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 126.208018][ T6441] __sys_bpf+0xfc6/0x49a0 [ 126.209110][ T6441] __x64_sys_bpf+0x78/0xc0 [ 126.210246][ T6441] do_syscall_64+0xcd/0x250 [ 126.211380][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.212845][ T6441] page last free pid 6429 tgid 6428 stack trace: [ 126.214390][ T6441] free_unref_page+0x5f4/0xdc0 [ 126.215559][ T6441] __folio_put+0x30d/0x3d0 [ 126.216699][ T6441] put_page+0x21e/0x280 [ 126.217730][ T6441] page_pool_return_page+0x400/0x520 [ 126.219058][ T6441] page_pool_release+0xf4/0x7d0 [ 126.220300][ T6441] page_pool_destroy+0x10a/0x4c0 [ 126.221570][ T6441] bpf_test_run_xdp_live+0x3a1/0x500 [ 126.222895][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 126.224222][ T6441] __sys_bpf+0xfc6/0x49a0 [ 126.225329][ T6441] __x64_sys_bpf+0x78/0xc0 [ 126.226498][ T6441] do_syscall_64+0xcd/0x250 [ 126.227638][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.229095][ T6441] Modules linked in: [ 126.230125][ T6441] CPU: 3 UID: 0 PID: 6441 Comm: syz.2.108 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 126.233061][ T6441] Tainted: [B]=BAD_PAGE [ 126.234124][ T6441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 126.236783][ T6441] Call Trace: [ 126.237636][ T6441] [ 126.238398][ T6441] dump_stack_lvl+0x16c/0x1f0 [ 126.239568][ T6441] bad_page+0xb3/0x1f0 [ 126.240581][ T6441] ? __pfx_bad_page+0x10/0x10 [ 126.241806][ T6441] ? page_bad_reason+0x9d/0x1e0 [ 126.243037][ T6441] free_unref_page+0x657/0xdc0 [ 126.244249][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 126.245726][ T6441] ? __phys_addr+0xc6/0x150 [ 126.246911][ T6441] skb_free_head+0xa0/0x1d0 [ 126.248084][ T6441] skb_release_data+0x560/0x730 [ 126.249335][ T6441] sk_skb_reason_drop+0x129/0x1a0 [ 126.250567][ T6441] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 126.252254][ T6441] ? kernel_text_address+0x8d/0x100 [ 126.253569][ T6441] ? hlock_class+0x4e/0x130 [ 126.254682][ T6441] ? __lock_acquire+0x163e/0x3ce0 [ 126.255966][ T6441] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 126.257685][ T6441] ? hlock_class+0x4e/0x130 [ 126.259068][ T6441] ? __lock_acquire+0xbdd/0x3ce0 [ 126.260313][ T6441] ? __pfx___lock_acquire+0x10/0x10 [ 126.261645][ T6441] __netif_receive_skb_list_core+0x357/0x950 [ 126.263114][ T6441] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 126.264701][ T6441] ? trace_lock_acquire+0x14a/0x1d0 [ 126.266037][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 126.267674][ T6441] ? lock_acquire+0x2f/0xb0 [ 126.268838][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 126.270563][ T6441] netif_receive_skb_list_internal+0x753/0xdb0 [ 126.272096][ T6441] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 126.273772][ T6441] ? __pfx_eth_type_trans+0x10/0x10 [ 126.275102][ T6441] ? __build_skb_around+0x278/0x3b0 [ 126.276455][ T6441] netif_receive_skb_list+0x4f/0x4a0 [ 126.277790][ T6441] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 126.279440][ T6441] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 126.281417][ T6441] ? bpf_test_timer_continue+0x150/0x3d0 [ 126.282854][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 126.284202][ T6441] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 126.285691][ T6441] ? try_to_wake_up+0xc35/0x14f0 [ 126.286988][ T6441] ? __pfx_try_to_wake_up+0x10/0x10 [ 126.288348][ T6441] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 126.289907][ T6441] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 126.291283][ T6441] ? 0xffffffffa0004340 [ 126.292365][ T6441] ? 0xffffffffa0004340 [ 126.293449][ T6441] ? 0xffffffffa0004340 [ 126.294508][ T6441] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 126.295999][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 126.297388][ T6441] ? lock_acquire+0x2f/0xb0 [ 126.298548][ T6441] ? __fget_files+0x40/0x3f0 [ 126.299739][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 126.301246][ T6441] ? fput+0x30/0x390 [ 126.302234][ T6441] ? __bpf_prog_get+0xa0/0x290 [ 126.303462][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 126.304951][ T6441] __sys_bpf+0xfc6/0x49a0 [ 126.306068][ T6441] ? __pfx_futex_wake+0x10/0x10 [ 126.307440][ T6441] ? finish_task_switch.isra.0+0x217/0xcc0 [ 126.309108][ T6441] ? __pfx___sys_bpf+0x10/0x10 [ 126.310317][ T6441] ? __schedule+0xe5d/0x5730 [ 126.311487][ T6441] ? __fget_files+0x23a/0x3f0 [ 126.312679][ T6441] ? do_futex+0x123/0x350 [ 126.313788][ T6441] ? __pfx_do_futex+0x10/0x10 [ 126.314989][ T6441] ? xfd_validate_state+0x5d/0x180 [ 126.316278][ T6441] ? rcu_is_watching+0x12/0xc0 [ 126.317495][ T6441] __x64_sys_bpf+0x78/0xc0 [ 126.318629][ T6441] ? lockdep_hardirqs_on+0x7c/0x110 [ 126.319984][ T6441] do_syscall_64+0xcd/0x250 [ 126.321196][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.322733][ T6441] RIP: 0033:0x7f800db7e719 [ 126.323894][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.328734][ T6441] RSP: 002b:00007f800e9b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 126.330830][ T6441] RAX: ffffffffffffffda RBX: 00007f800dd36058 RCX: 00007f800db7e719 [ 126.332847][ T6441] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 126.334828][ T6441] RBP: 00007f800dbf132e R08: 0000000000000000 R09: 0000000000000000 [ 126.336824][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.338788][ T6441] R13: 0000000000000000 R14: 00007f800dd36058 R15: 00007fffcd7e8d08 [ 126.340766][ T6441] [ 126.341656][ T6441] BUG: Bad page state in process syz.2.108 pfn:35f49 [ 126.343341][ T6441] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888035f498b8 pfn:0x35f49 [ 126.345841][ T6441] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 126.347674][ T6441] raw: 00fff00000000000 dead000000000040 ffff88803fdac000 0000000000000000 [ 126.349821][ T6441] raw: ffff888035f498b8 0000000000000001 00000000ffffffff 0000000000000000 [ 126.351915][ T6441] page dumped because: page_pool leak [ 126.353292][ T6441] page_owner tracks the page as allocated [ 126.354693][ T6441] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6441, tgid 6432 (syz.2.108), ts 124609165967, free_ts 124583930801 [ 126.358910][ T6441] post_alloc_hook+0x2d1/0x350 [ 126.360153][ T6441] get_page_from_freelist+0x101e/0x3070 [ 126.361555][ T6441] __alloc_pages_noprof+0x223/0x25a0 [ 126.362867][ T6441] alloc_pages_bulk_noprof+0x77c/0x1110 [ 126.364257][ T6441] __page_pool_alloc_pages_slow+0x18f/0x770 [ 126.365769][ T6441] page_pool_alloc_netmem+0xc4/0x160 [ 126.367138][ T6441] page_pool_alloc_pages+0x1a/0x60 [ 126.368421][ T6441] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 126.370004][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 126.371356][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 126.372700][ T6441] __sys_bpf+0xfc6/0x49a0 [ 126.373805][ T6441] __x64_sys_bpf+0x78/0xc0 [ 126.374940][ T6441] do_syscall_64+0xcd/0x250 [ 126.376089][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.377865][ T6441] page last free pid 6429 tgid 6428 stack trace: [ 126.379496][ T6441] free_unref_page+0x5f4/0xdc0 [ 126.380745][ T6441] __folio_put+0x30d/0x3d0 [ 126.381939][ T6441] put_page+0x21e/0x280 [ 126.383108][ T6441] page_pool_return_page+0x400/0x520 [ 126.384435][ T6441] page_pool_release+0xf4/0x7d0 [ 126.385700][ T6441] page_pool_destroy+0x10a/0x4c0 [ 126.387032][ T6441] bpf_test_run_xdp_live+0x3a1/0x500 [ 126.388387][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 126.389790][ T6441] __sys_bpf+0xfc6/0x49a0 [ 126.390904][ T6441] __x64_sys_bpf+0x78/0xc0 [ 126.392059][ T6441] do_syscall_64+0xcd/0x250 [ 126.393331][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.394837][ T6441] Modules linked in: [ 126.395847][ T6441] CPU: 3 UID: 0 PID: 6441 Comm: syz.2.108 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 126.398856][ T6441] Tainted: [B]=BAD_PAGE [ 126.399911][ T6441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 126.402625][ T6441] Call Trace: [ 126.403477][ T6441] [ 126.404237][ T6441] dump_stack_lvl+0x16c/0x1f0 [ 126.405455][ T6441] bad_page+0xb3/0x1f0 [ 126.406510][ T6441] ? __pfx_bad_page+0x10/0x10 [ 126.407716][ T6441] ? page_bad_reason+0x9d/0x1e0 [ 126.408953][ T6441] free_unref_page+0x657/0xdc0 [ 126.410254][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 126.411767][ T6441] ? __phys_addr+0xc6/0x150 [ 126.412911][ T6441] skb_free_head+0xa0/0x1d0 [ 126.414085][ T6441] skb_release_data+0x560/0x730 [ 126.415328][ T6441] sk_skb_reason_drop+0x129/0x1a0 [ 126.416638][ T6441] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 126.418321][ T6441] ? kernel_text_address+0x8d/0x100 [ 126.419644][ T6441] ? hlock_class+0x4e/0x130 [ 126.420823][ T6441] ? __lock_acquire+0x163e/0x3ce0 [ 126.422099][ T6441] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 126.423880][ T6441] ? hlock_class+0x4e/0x130 [ 126.425049][ T6441] ? __lock_acquire+0xbdd/0x3ce0 [ 126.426311][ T6441] ? __pfx___lock_acquire+0x10/0x10 [ 126.427647][ T6441] __netif_receive_skb_list_core+0x357/0x950 [ 126.429182][ T6441] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 126.430847][ T6441] ? trace_lock_acquire+0x14a/0x1d0 [ 126.432150][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 126.433739][ T6441] ? lock_acquire+0x2f/0xb0 [ 126.434916][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 126.436550][ T6441] netif_receive_skb_list_internal+0x753/0xdb0 [ 126.438109][ T6441] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 126.439790][ T6441] ? __pfx_eth_type_trans+0x10/0x10 [ 126.441169][ T6441] ? __build_skb_around+0x278/0x3b0 [ 126.442611][ T6441] netif_receive_skb_list+0x4f/0x4a0 [ 126.444183][ T6441] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 126.445992][ T6441] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 126.447901][ T6441] ? bpf_test_timer_continue+0x150/0x3d0 [ 126.449364][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 126.450713][ T6441] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 126.452186][ T6441] ? try_to_wake_up+0xc35/0x14f0 [ 126.453509][ T6441] ? __pfx_try_to_wake_up+0x10/0x10 [ 126.454827][ T6441] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 126.456336][ T6441] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 126.457729][ T6441] ? 0xffffffffa0004340 [ 126.458880][ T6441] ? 0xffffffffa0004340 [ 126.459963][ T6441] ? 0xffffffffa0004340 [ 126.461063][ T6441] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 126.462587][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 126.463936][ T6441] ? lock_acquire+0x2f/0xb0 [ 126.465097][ T6441] ? __fget_files+0x40/0x3f0 [ 126.466294][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 126.467806][ T6441] ? fput+0x30/0x390 [ 126.468800][ T6441] ? __bpf_prog_get+0xa0/0x290 [ 126.470043][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 126.471519][ T6441] __sys_bpf+0xfc6/0x49a0 [ 126.472600][ T6441] ? __pfx_futex_wake+0x10/0x10 [ 126.473811][ T6441] ? finish_task_switch.isra.0+0x217/0xcc0 [ 126.475285][ T6441] ? __pfx___sys_bpf+0x10/0x10 [ 126.476499][ T6441] ? __schedule+0xe5d/0x5730 [ 126.477713][ T6441] ? __fget_files+0x23a/0x3f0 [ 126.478946][ T6441] ? do_futex+0x123/0x350 [ 126.480079][ T6441] ? __pfx_do_futex+0x10/0x10 [ 126.481330][ T6441] ? xfd_validate_state+0x5d/0x180 [ 126.482645][ T6441] ? rcu_is_watching+0x12/0xc0 [ 126.483895][ T6441] __x64_sys_bpf+0x78/0xc0 [ 126.485042][ T6441] ? lockdep_hardirqs_on+0x7c/0x110 [ 126.486389][ T6441] do_syscall_64+0xcd/0x250 [ 126.487550][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.489051][ T6441] RIP: 0033:0x7f800db7e719 [ 126.490187][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.495012][ T6441] RSP: 002b:00007f800e9b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 126.497193][ T6441] RAX: ffffffffffffffda RBX: 00007f800dd36058 RCX: 00007f800db7e719 [ 126.499226][ T6441] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 126.501353][ T6441] RBP: 00007f800dbf132e R08: 0000000000000000 R09: 0000000000000000 [ 126.503446][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.505495][ T6441] R13: 0000000000000000 R14: 00007f800dd36058 R15: 00007fffcd7e8d08 [ 126.507529][ T6441] [ 126.508423][ T6441] BUG: Bad page state in process syz.2.108 pfn:4d408 [ 126.510152][ T6441] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804d409e00 pfn:0x4d408 [ 126.512676][ T6441] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 126.514477][ T6441] raw: 00fff00000000000 dead000000000040 ffff88803fdac000 0000000000000000 [ 126.516637][ T6441] raw: ffff88804d409e00 0000000000000001 00000000ffffffff 0000000000000000 [ 126.518823][ T6441] page dumped because: page_pool leak [ 126.520196][ T6441] page_owner tracks the page as allocated [ 126.521654][ T6441] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6441, tgid 6432 (syz.2.108), ts 124609161184, free_ts 124583934414 [ 126.525825][ T6441] post_alloc_hook+0x2d1/0x350 [ 126.527118][ T6441] get_page_from_freelist+0x101e/0x3070 [ 126.528518][ T6441] __alloc_pages_noprof+0x223/0x25a0 [ 126.529881][ T6441] alloc_pages_bulk_noprof+0x77c/0x1110 [ 126.531258][ T6441] __page_pool_alloc_pages_slow+0x18f/0x770 [ 126.532720][ T6441] page_pool_alloc_netmem+0xc4/0x160 [ 126.534040][ T6441] page_pool_alloc_pages+0x1a/0x60 [ 126.535306][ T6441] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 126.536865][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 126.538364][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 126.539699][ T6441] __sys_bpf+0xfc6/0x49a0 [ 126.540747][ T6441] __x64_sys_bpf+0x78/0xc0 [ 126.541871][ T6441] do_syscall_64+0xcd/0x250 [ 126.543014][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.544477][ T6441] page last free pid 6429 tgid 6428 stack trace: [ 126.546054][ T6441] free_unref_page+0x5f4/0xdc0 [ 126.547337][ T6441] __folio_put+0x30d/0x3d0 [ 126.548452][ T6441] put_page+0x21e/0x280 [ 126.549498][ T6441] page_pool_return_page+0x400/0x520 [ 126.550795][ T6441] page_pool_release+0xf4/0x7d0 [ 126.552041][ T6441] page_pool_destroy+0x10a/0x4c0 [ 126.553299][ T6441] bpf_test_run_xdp_live+0x3a1/0x500 [ 126.554615][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 126.555972][ T6441] __sys_bpf+0xfc6/0x49a0 [ 126.557108][ T6441] __x64_sys_bpf+0x78/0xc0 [ 126.558218][ T6441] do_syscall_64+0xcd/0x250 [ 126.559359][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.560823][ T6441] Modules linked in: [ 126.561974][ T6441] CPU: 3 UID: 0 PID: 6441 Comm: syz.2.108 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 126.565006][ T6441] Tainted: [B]=BAD_PAGE [ 126.566106][ T6441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 126.568792][ T6441] Call Trace: [ 126.569665][ T6441] [ 126.570436][ T6441] dump_stack_lvl+0x16c/0x1f0 [ 126.571661][ T6441] bad_page+0xb3/0x1f0 [ 126.572709][ T6441] ? __pfx_bad_page+0x10/0x10 [ 126.573916][ T6441] ? page_bad_reason+0x9d/0x1e0 [ 126.575173][ T6441] free_unref_page+0x657/0xdc0 [ 126.576410][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 126.577959][ T6441] ? __phys_addr+0xc6/0x150 [ 126.579119][ T6441] skb_free_head+0xa0/0x1d0 [ 126.580297][ T6441] skb_release_data+0x560/0x730 [ 126.581573][ T6441] sk_skb_reason_drop+0x129/0x1a0 [ 126.582877][ T6441] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 126.584581][ T6441] ? kernel_text_address+0x8d/0x100 [ 126.586098][ T6441] ? hlock_class+0x4e/0x130 [ 126.587282][ T6441] ? __lock_acquire+0x163e/0x3ce0 [ 126.588667][ T6441] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 126.590501][ T6441] ? hlock_class+0x4e/0x130 [ 126.591664][ T6441] ? __lock_acquire+0xbdd/0x3ce0 [ 126.592929][ T6441] ? __pfx___lock_acquire+0x10/0x10 [ 126.594262][ T6441] __netif_receive_skb_list_core+0x357/0x950 [ 126.595799][ T6441] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 126.597449][ T6441] ? trace_lock_acquire+0x14a/0x1d0 [ 126.598797][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 126.600408][ T6441] ? lock_acquire+0x2f/0xb0 [ 126.601576][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 126.603172][ T6441] netif_receive_skb_list_internal+0x753/0xdb0 [ 126.604727][ T6441] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 126.606425][ T6441] ? __pfx_eth_type_trans+0x10/0x10 [ 126.607749][ T6441] ? __build_skb_around+0x278/0x3b0 [ 126.609084][ T6441] netif_receive_skb_list+0x4f/0x4a0 [ 126.610425][ T6441] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 126.611983][ T6441] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 126.613664][ T6441] ? bpf_test_timer_continue+0x150/0x3d0 [ 126.615081][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 126.616391][ T6441] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 126.617830][ T6441] ? try_to_wake_up+0xc35/0x14f0 [ 126.619048][ T6441] ? __pfx_try_to_wake_up+0x10/0x10 [ 126.620345][ T6441] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 126.621849][ T6441] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 126.623191][ T6441] ? 0xffffffffa0004340 [ 126.624229][ T6441] ? 0xffffffffa0004340 [ 126.625292][ T6441] ? 0xffffffffa0004340 [ 126.626353][ T6441] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 126.627851][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 126.629225][ T6441] ? lock_acquire+0x2f/0xb0 [ 126.630381][ T6441] ? __fget_files+0x40/0x3f0 [ 126.631564][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 126.633053][ T6441] ? fput+0x30/0x390 [ 126.634050][ T6441] ? __bpf_prog_get+0xa0/0x290 [ 126.635274][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 126.636751][ T6441] __sys_bpf+0xfc6/0x49a0 [ 126.637834][ T6441] ? __pfx_futex_wake+0x10/0x10 [ 126.639080][ T6441] ? finish_task_switch.isra.0+0x217/0xcc0 [ 126.640529][ T6441] ? __pfx___sys_bpf+0x10/0x10 [ 126.641742][ T6441] ? __schedule+0xe5d/0x5730 [ 126.642895][ T6441] ? __fget_files+0x23a/0x3f0 [ 126.644115][ T6441] ? do_futex+0x123/0x350 [ 126.645219][ T6441] ? __pfx_do_futex+0x10/0x10 [ 126.646433][ T6441] ? xfd_validate_state+0x5d/0x180 [ 126.647712][ T6441] ? rcu_is_watching+0x12/0xc0 [ 126.648927][ T6441] __x64_sys_bpf+0x78/0xc0 [ 126.650084][ T6441] ? lockdep_hardirqs_on+0x7c/0x110 [ 126.651402][ T6441] do_syscall_64+0xcd/0x250 [ 126.652575][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.654061][ T6441] RIP: 0033:0x7f800db7e719 [ 126.655206][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.660033][ T6441] RSP: 002b:00007f800e9b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 126.662137][ T6441] RAX: ffffffffffffffda RBX: 00007f800dd36058 RCX: 00007f800db7e719 [ 126.664118][ T6441] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 126.666098][ T6441] RBP: 00007f800dbf132e R08: 0000000000000000 R09: 0000000000000000 [ 126.668084][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.670089][ T6441] R13: 0000000000000000 R14: 00007f800dd36058 R15: 00007fffcd7e8d08 [ 126.672127][ T6441] [ 126.673024][ T6441] BUG: Bad page state in process syz.2.108 pfn:4c75c [ 126.674733][ T6441] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804c75de00 pfn:0x4c75c [ 126.677317][ T6441] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 126.679110][ T6441] raw: 00fff00000000000 dead000000000040 ffff88803fdac000 0000000000000000 [ 126.681285][ T6441] raw: ffff88804c75de00 0000000000000001 00000000ffffffff 0000000000000000 [ 126.683403][ T6441] page dumped because: page_pool leak [ 126.684753][ T6441] page_owner tracks the page as allocated [ 126.686236][ T6441] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6441, tgid 6432 (syz.2.108), ts 124609156469, free_ts 124583938593 [ 126.690648][ T6441] post_alloc_hook+0x2d1/0x350 [ 126.691971][ T6441] get_page_from_freelist+0x101e/0x3070 [ 126.693380][ T6441] __alloc_pages_noprof+0x223/0x25a0 [ 126.694702][ T6441] alloc_pages_bulk_noprof+0x77c/0x1110 [ 126.696127][ T6441] __page_pool_alloc_pages_slow+0x18f/0x770 [ 126.697666][ T6441] page_pool_alloc_netmem+0xc4/0x160 [ 126.698986][ T6441] page_pool_alloc_pages+0x1a/0x60 [ 126.700304][ T6441] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 126.701874][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 126.703213][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 126.704791][ T6441] __sys_bpf+0xfc6/0x49a0 [ 126.706178][ T6441] __x64_sys_bpf+0x78/0xc0 [ 126.707411][ T6441] do_syscall_64+0xcd/0x250 [ 126.708551][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.710048][ T6441] page last free pid 6429 tgid 6428 stack trace: [ 126.711611][ T6441] free_unref_page+0x5f4/0xdc0 [ 126.712803][ T6441] __folio_put+0x30d/0x3d0 [ 126.713926][ T6441] put_page+0x21e/0x280 [ 126.714983][ T6441] page_pool_return_page+0x400/0x520 [ 126.716378][ T6441] page_pool_release+0xf4/0x7d0 [ 126.717607][ T6441] page_pool_destroy+0x10a/0x4c0 [ 126.718864][ T6441] bpf_test_run_xdp_live+0x3a1/0x500 [ 126.720215][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 126.721592][ T6441] __sys_bpf+0xfc6/0x49a0 [ 126.722699][ T6441] __x64_sys_bpf+0x78/0xc0 [ 126.723840][ T6441] do_syscall_64+0xcd/0x250 [ 126.725028][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.726602][ T6441] Modules linked in: [ 126.727601][ T6441] CPU: 3 UID: 0 PID: 6441 Comm: syz.2.108 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 126.730560][ T6441] Tainted: [B]=BAD_PAGE [ 126.731768][ T6441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 126.735024][ T6441] Call Trace: [ 126.736115][ T6441] [ 126.737096][ T6441] dump_stack_lvl+0x16c/0x1f0 [ 126.738342][ T6441] bad_page+0xb3/0x1f0 [ 126.739404][ T6441] ? __pfx_bad_page+0x10/0x10 [ 126.740625][ T6441] ? page_bad_reason+0x9d/0x1e0 [ 126.742064][ T6441] free_unref_page+0x657/0xdc0 [ 126.743333][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 126.744884][ T6441] ? __phys_addr+0xc6/0x150 [ 126.746063][ T6441] skb_free_head+0xa0/0x1d0 [ 126.747250][ T6441] skb_release_data+0x560/0x730 [ 126.748512][ T6441] sk_skb_reason_drop+0x129/0x1a0 [ 126.749814][ T6441] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 126.751520][ T6441] ? kernel_text_address+0x8d/0x100 [ 126.752957][ T6441] ? hlock_class+0x4e/0x130 [ 126.754152][ T6441] ? __lock_acquire+0x163e/0x3ce0 [ 126.755427][ T6441] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 126.757214][ T6441] ? hlock_class+0x4e/0x130 [ 126.758412][ T6441] ? __lock_acquire+0xbdd/0x3ce0 [ 126.759711][ T6441] ? __pfx___lock_acquire+0x10/0x10 [ 126.761069][ T6441] __netif_receive_skb_list_core+0x357/0x950 [ 126.762616][ T6441] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 126.764279][ T6441] ? trace_lock_acquire+0x14a/0x1d0 [ 126.765601][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 126.767182][ T6441] ? lock_acquire+0x2f/0xb0 [ 126.768315][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 126.769882][ T6441] netif_receive_skb_list_internal+0x753/0xdb0 [ 126.771480][ T6441] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 126.773181][ T6441] ? __pfx_eth_type_trans+0x10/0x10 [ 126.774504][ T6441] ? __build_skb_around+0x278/0x3b0 [ 126.775823][ T6441] netif_receive_skb_list+0x4f/0x4a0 [ 126.777224][ T6441] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 126.778801][ T6441] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 126.780477][ T6441] ? bpf_test_timer_continue+0x150/0x3d0 [ 126.781902][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 126.783486][ T6441] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 126.784970][ T6441] ? try_to_wake_up+0xc35/0x14f0 [ 126.786296][ T6441] ? __pfx_try_to_wake_up+0x10/0x10 [ 126.787663][ T6441] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 126.789215][ T6441] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 126.790590][ T6441] ? 0xffffffffa0004340 [ 126.791776][ T6441] ? 0xffffffffa0004340 [ 126.792853][ T6441] ? 0xffffffffa0004340 [ 126.793916][ T6441] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 126.795387][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 126.796751][ T6441] ? lock_acquire+0x2f/0xb0 [ 126.797916][ T6441] ? __fget_files+0x40/0x3f0 [ 126.799087][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 126.800616][ T6441] ? fput+0x30/0x390 [ 126.801653][ T6441] ? __bpf_prog_get+0xa0/0x290 [ 126.802848][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 126.804314][ T6441] __sys_bpf+0xfc6/0x49a0 [ 126.805398][ T6441] ? __pfx_futex_wake+0x10/0x10 [ 126.806658][ T6441] ? finish_task_switch.isra.0+0x217/0xcc0 [ 126.808146][ T6441] ? __pfx___sys_bpf+0x10/0x10 [ 126.809411][ T6441] ? __schedule+0xe5d/0x5730 [ 126.810595][ T6441] ? __fget_files+0x23a/0x3f0 [ 126.811778][ T6441] ? do_futex+0x123/0x350 [ 126.812891][ T6441] ? __pfx_do_futex+0x10/0x10 [ 126.814044][ T6441] ? xfd_validate_state+0x5d/0x180 [ 126.815311][ T6441] ? rcu_is_watching+0x12/0xc0 [ 126.816533][ T6441] __x64_sys_bpf+0x78/0xc0 [ 126.817684][ T6441] ? lockdep_hardirqs_on+0x7c/0x110 [ 126.819092][ T6441] do_syscall_64+0xcd/0x250 [ 126.820265][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.821863][ T6441] RIP: 0033:0x7f800db7e719 [ 126.823436][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.828426][ T6441] RSP: 002b:00007f800e9b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 126.830654][ T6441] RAX: ffffffffffffffda RBX: 00007f800dd36058 RCX: 00007f800db7e719 [ 126.832642][ T6441] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 126.834761][ T6441] RBP: 00007f800dbf132e R08: 0000000000000000 R09: 0000000000000000 [ 126.836796][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.838847][ T6441] R13: 0000000000000000 R14: 00007f800dd36058 R15: 00007fffcd7e8d08 [ 126.840894][ T6441] [ 126.841824][ T6441] BUG: Bad page state in process syz.2.108 pfn:2f902 [ 126.843565][ T6441] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802f902f00 pfn:0x2f902 [ 126.846121][ T6441] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 126.847943][ T6441] raw: 00fff00000000000 dead000000000040 ffff88803fdac000 0000000000000000 [ 126.850138][ T6441] raw: ffff88802f902f00 0000000000000001 00000000ffffffff 0000000000000000 [ 126.852310][ T6441] page dumped because: page_pool leak [ 126.853669][ T6441] page_owner tracks the page as allocated [ 126.855090][ T6441] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6441, tgid 6432 (syz.2.108), ts 124609152011, free_ts 124583942677 [ 126.859419][ T6441] post_alloc_hook+0x2d1/0x350 [ 126.860682][ T6441] get_page_from_freelist+0x101e/0x3070 [ 126.862140][ T6441] __alloc_pages_noprof+0x223/0x25a0 [ 126.863489][ T6441] alloc_pages_bulk_noprof+0x77c/0x1110 [ 126.864920][ T6441] __page_pool_alloc_pages_slow+0x18f/0x770 [ 126.866515][ T6441] page_pool_alloc_netmem+0xc4/0x160 [ 126.867867][ T6441] page_pool_alloc_pages+0x1a/0x60 [ 126.869205][ T6441] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 126.870808][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 126.872197][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 126.873738][ T6441] __sys_bpf+0xfc6/0x49a0 [ 126.874890][ T6441] __x64_sys_bpf+0x78/0xc0 [ 126.876077][ T6441] do_syscall_64+0xcd/0x250 [ 126.877363][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.878926][ T6441] page last free pid 6429 tgid 6428 stack trace: [ 126.880559][ T6441] free_unref_page+0x5f4/0xdc0 [ 126.881826][ T6441] __folio_put+0x30d/0x3d0 [ 126.882994][ T6441] put_page+0x21e/0x280 [ 126.884084][ T6441] page_pool_return_page+0x400/0x520 [ 126.885472][ T6441] page_pool_release+0xf4/0x7d0 [ 126.886803][ T6441] page_pool_destroy+0x10a/0x4c0 [ 126.888101][ T6441] bpf_test_run_xdp_live+0x3a1/0x500 [ 126.889466][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 126.890873][ T6441] __sys_bpf+0xfc6/0x49a0 [ 126.892103][ T6441] __x64_sys_bpf+0x78/0xc0 [ 126.893343][ T6441] do_syscall_64+0xcd/0x250 [ 126.894610][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.896175][ T6441] Modules linked in: [ 126.897272][ T6441] CPU: 3 UID: 0 PID: 6441 Comm: syz.2.108 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 126.900337][ T6441] Tainted: [B]=BAD_PAGE [ 126.901426][ T6441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 126.904087][ T6441] Call Trace: [ 126.904917][ T6441] [ 126.905671][ T6441] dump_stack_lvl+0x16c/0x1f0 [ 126.906874][ T6441] bad_page+0xb3/0x1f0 [ 126.907945][ T6441] ? __pfx_bad_page+0x10/0x10 [ 126.909220][ T6441] ? page_bad_reason+0x9d/0x1e0 [ 126.910517][ T6441] free_unref_page+0x657/0xdc0 [ 126.911775][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 126.913341][ T6441] ? __phys_addr+0xc6/0x150 [ 126.914525][ T6441] skb_free_head+0xa0/0x1d0 [ 126.915729][ T6441] skb_release_data+0x560/0x730 [ 126.916989][ T6441] sk_skb_reason_drop+0x129/0x1a0 [ 126.918314][ T6441] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 126.920052][ T6441] ? kernel_text_address+0x8d/0x100 [ 126.921437][ T6441] ? hlock_class+0x4e/0x130 [ 126.922566][ T6441] ? __lock_acquire+0x163e/0x3ce0 [ 126.923834][ T6441] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 126.925606][ T6441] ? hlock_class+0x4e/0x130 [ 126.926798][ T6441] ? __lock_acquire+0xbdd/0x3ce0 [ 126.928052][ T6441] ? __pfx___lock_acquire+0x10/0x10 [ 126.929366][ T6441] __netif_receive_skb_list_core+0x357/0x950 [ 126.930880][ T6441] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 126.932496][ T6441] ? trace_lock_acquire+0x14a/0x1d0 [ 126.933833][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 126.935455][ T6441] ? lock_acquire+0x2f/0xb0 [ 126.936619][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 126.938224][ T6441] netif_receive_skb_list_internal+0x753/0xdb0 [ 126.939794][ T6441] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 126.941490][ T6441] ? __pfx_eth_type_trans+0x10/0x10 [ 126.942800][ T6441] ? __build_skb_around+0x278/0x3b0 [ 126.944120][ T6441] netif_receive_skb_list+0x4f/0x4a0 [ 126.945454][ T6441] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 126.947049][ T6441] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 126.948691][ T6441] ? bpf_test_timer_continue+0x150/0x3d0 [ 126.950090][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 126.951418][ T6441] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 126.952889][ T6441] ? try_to_wake_up+0xc35/0x14f0 [ 126.954154][ T6441] ? __pfx_try_to_wake_up+0x10/0x10 [ 126.955470][ T6441] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 126.957053][ T6441] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 126.958420][ T6441] ? 0xffffffffa0004340 [ 126.959460][ T6441] ? 0xffffffffa0004340 [ 126.960693][ T6441] ? 0xffffffffa0004340 [ 126.961851][ T6441] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 126.963530][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 126.964897][ T6441] ? lock_acquire+0x2f/0xb0 [ 126.966061][ T6441] ? __fget_files+0x40/0x3f0 [ 126.967257][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 126.968912][ T6441] ? fput+0x30/0x390 [ 126.969993][ T6441] ? __bpf_prog_get+0xa0/0x290 [ 126.971281][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 126.972730][ T6441] __sys_bpf+0xfc6/0x49a0 [ 126.973831][ T6441] ? __pfx_futex_wake+0x10/0x10 [ 126.975101][ T6441] ? finish_task_switch.isra.0+0x217/0xcc0 [ 126.976553][ T6441] ? __pfx___sys_bpf+0x10/0x10 [ 126.977761][ T6441] ? __schedule+0xe5d/0x5730 [ 126.978935][ T6441] ? __fget_files+0x23a/0x3f0 [ 126.980121][ T6441] ? do_futex+0x123/0x350 [ 126.981234][ T6441] ? __pfx_do_futex+0x10/0x10 [ 126.982421][ T6441] ? xfd_validate_state+0x5d/0x180 [ 126.983703][ T6441] ? rcu_is_watching+0x12/0xc0 [ 126.984920][ T6441] __x64_sys_bpf+0x78/0xc0 [ 126.986086][ T6441] ? lockdep_hardirqs_on+0x7c/0x110 [ 126.987386][ T6441] do_syscall_64+0xcd/0x250 [ 126.988536][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.990036][ T6441] RIP: 0033:0x7f800db7e719 [ 126.991176][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.996071][ T6441] RSP: 002b:00007f800e9b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 126.998234][ T6441] RAX: ffffffffffffffda RBX: 00007f800dd36058 RCX: 00007f800db7e719 [ 127.000235][ T6441] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 127.002231][ T6441] RBP: 00007f800dbf132e R08: 0000000000000000 R09: 0000000000000000 [ 127.004202][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.006232][ T6441] R13: 0000000000000000 R14: 00007f800dd36058 R15: 00007fffcd7e8d08 [ 127.008223][ T6441] [ 127.009103][ T6441] BUG: Bad page state in process syz.2.108 pfn:4ba03 [ 127.010817][ T6441] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2 pfn:0x4ba03 [ 127.012976][ T6441] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 127.014744][ T6441] raw: 00fff00000000000 dead000000000040 ffff88803fdac000 0000000000000000 [ 127.016922][ T6441] raw: 0000000000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 127.019096][ T6441] page dumped because: page_pool leak [ 127.020428][ T6441] page_owner tracks the page as allocated [ 127.021895][ T6441] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6441, tgid 6432 (syz.2.108), ts 124609147460, free_ts 124583946101 [ 127.026068][ T6441] post_alloc_hook+0x2d1/0x350 [ 127.027343][ T6441] get_page_from_freelist+0x101e/0x3070 [ 127.028815][ T6441] __alloc_pages_noprof+0x223/0x25a0 [ 127.030151][ T6441] alloc_pages_bulk_noprof+0x77c/0x1110 [ 127.031538][ T6441] __page_pool_alloc_pages_slow+0x18f/0x770 [ 127.032998][ T6441] page_pool_alloc_netmem+0xc4/0x160 [ 127.034382][ T6441] page_pool_alloc_pages+0x1a/0x60 [ 127.035686][ T6441] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 127.037286][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 127.038609][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 127.039963][ T6441] __sys_bpf+0xfc6/0x49a0 [ 127.041067][ T6441] __x64_sys_bpf+0x78/0xc0 [ 127.042223][ T6441] do_syscall_64+0xcd/0x250 [ 127.043373][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.044845][ T6441] page last free pid 6429 tgid 6428 stack trace: [ 127.046521][ T6441] free_unref_page+0x5f4/0xdc0 [ 127.047729][ T6441] __folio_put+0x30d/0x3d0 [ 127.048882][ T6441] put_page+0x21e/0x280 [ 127.049939][ T6441] page_pool_return_page+0x400/0x520 [ 127.051254][ T6441] page_pool_release+0xf4/0x7d0 [ 127.052487][ T6441] page_pool_destroy+0x10a/0x4c0 [ 127.053735][ T6441] bpf_test_run_xdp_live+0x3a1/0x500 [ 127.055058][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 127.056473][ T6441] __sys_bpf+0xfc6/0x49a0 [ 127.057563][ T6441] __x64_sys_bpf+0x78/0xc0 [ 127.058686][ T6441] do_syscall_64+0xcd/0x250 [ 127.059837][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.061348][ T6441] Modules linked in: [ 127.062340][ T6441] CPU: 3 UID: 0 PID: 6441 Comm: syz.2.108 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 127.065380][ T6441] Tainted: [B]=BAD_PAGE [ 127.066463][ T6441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 127.069113][ T6441] Call Trace: [ 127.070009][ T6441] [ 127.070787][ T6441] dump_stack_lvl+0x16c/0x1f0 [ 127.071978][ T6441] bad_page+0xb3/0x1f0 [ 127.073007][ T6441] ? __pfx_bad_page+0x10/0x10 [ 127.074202][ T6441] ? page_bad_reason+0x9d/0x1e0 [ 127.075416][ T6441] free_unref_page+0x657/0xdc0 [ 127.076634][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 127.078197][ T6441] ? __phys_addr+0xc6/0x150 [ 127.079352][ T6441] skb_free_head+0xa0/0x1d0 [ 127.080493][ T6441] skb_release_data+0x560/0x730 [ 127.081753][ T6441] sk_skb_reason_drop+0x129/0x1a0 [ 127.083133][ T6441] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 127.084812][ T6441] ? kernel_text_address+0x8d/0x100 [ 127.086131][ T6441] ? hlock_class+0x4e/0x130 [ 127.087257][ T6441] ? __lock_acquire+0x163e/0x3ce0 [ 127.088496][ T6441] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 127.090475][ T6441] ? hlock_class+0x4e/0x130 [ 127.091586][ T6441] ? __lock_acquire+0xbdd/0x3ce0 [ 127.092808][ T6441] ? __pfx___lock_acquire+0x10/0x10 [ 127.094094][ T6441] __netif_receive_skb_list_core+0x357/0x950 [ 127.095597][ T6441] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 127.097249][ T6441] ? trace_lock_acquire+0x14a/0x1d0 [ 127.098563][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 127.100153][ T6441] ? lock_acquire+0x2f/0xb0 [ 127.101367][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 127.103000][ T6441] netif_receive_skb_list_internal+0x753/0xdb0 [ 127.104678][ T6441] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 127.106366][ T6441] ? __pfx_eth_type_trans+0x10/0x10 [ 127.107738][ T6441] ? __build_skb_around+0x278/0x3b0 [ 127.109110][ T6441] netif_receive_skb_list+0x4f/0x4a0 [ 127.110581][ T6441] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 127.112176][ T6441] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 127.113881][ T6441] ? bpf_test_timer_continue+0x150/0x3d0 [ 127.115323][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 127.116697][ T6441] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 127.118161][ T6441] ? try_to_wake_up+0xc35/0x14f0 [ 127.119421][ T6441] ? __pfx_try_to_wake_up+0x10/0x10 [ 127.120740][ T6441] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 127.122368][ T6441] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 127.123701][ T6441] ? 0xffffffffa0004340 [ 127.124764][ T6441] ? 0xffffffffa0004340 [ 127.125829][ T6441] ? 0xffffffffa0004340 [ 127.126882][ T6441] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 127.128376][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 127.129731][ T6441] ? lock_acquire+0x2f/0xb0 [ 127.130881][ T6441] ? __fget_files+0x40/0x3f0 [ 127.132086][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 127.133538][ T6441] ? fput+0x30/0x390 [ 127.134528][ T6441] ? __bpf_prog_get+0xa0/0x290 [ 127.135747][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 127.137274][ T6441] __sys_bpf+0xfc6/0x49a0 [ 127.138400][ T6441] ? __pfx_futex_wake+0x10/0x10 [ 127.139647][ T6441] ? finish_task_switch.isra.0+0x217/0xcc0 [ 127.141130][ T6441] ? __pfx___sys_bpf+0x10/0x10 [ 127.142348][ T6441] ? __schedule+0xe5d/0x5730 [ 127.143575][ T6441] ? __fget_files+0x23a/0x3f0 [ 127.144825][ T6441] ? do_futex+0x123/0x350 [ 127.145933][ T6441] ? __pfx_do_futex+0x10/0x10 [ 127.147129][ T6441] ? xfd_validate_state+0x5d/0x180 [ 127.148424][ T6441] ? rcu_is_watching+0x12/0xc0 [ 127.149640][ T6441] __x64_sys_bpf+0x78/0xc0 [ 127.150765][ T6441] ? lockdep_hardirqs_on+0x7c/0x110 [ 127.152107][ T6441] do_syscall_64+0xcd/0x250 [ 127.153262][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.154757][ T6441] RIP: 0033:0x7f800db7e719 [ 127.155901][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.160687][ T6441] RSP: 002b:00007f800e9b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 127.162776][ T6441] RAX: ffffffffffffffda RBX: 00007f800dd36058 RCX: 00007f800db7e719 [ 127.164755][ T6441] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 127.166764][ T6441] RBP: 00007f800dbf132e R08: 0000000000000000 R09: 0000000000000000 [ 127.168741][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.170712][ T6441] R13: 0000000000000000 R14: 00007f800dd36058 R15: 00007fffcd7e8d08 [ 127.172675][ T6441] [ 127.173544][ T6441] BUG: Bad page state in process syz.2.108 pfn:4e78f [ 127.175311][ T6441] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804e78ff00 pfn:0x4e78f [ 127.177906][ T6441] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 127.179730][ T6441] raw: 00fff00000000000 dead000000000040 ffff88803fdac000 0000000000000000 [ 127.181933][ T6441] raw: ffff88804e78ff00 0000000000000001 00000000ffffffff 0000000000000000 [ 127.184043][ T6441] page dumped because: page_pool leak [ 127.185405][ T6441] page_owner tracks the page as allocated [ 127.186867][ T6441] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6441, tgid 6432 (syz.2.108), ts 124609143171, free_ts 124583949556 [ 127.191081][ T6441] post_alloc_hook+0x2d1/0x350 [ 127.192296][ T6441] get_page_from_freelist+0x101e/0x3070 [ 127.193686][ T6441] __alloc_pages_noprof+0x223/0x25a0 [ 127.195015][ T6441] alloc_pages_bulk_noprof+0x77c/0x1110 [ 127.196432][ T6441] __page_pool_alloc_pages_slow+0x18f/0x770 [ 127.197934][ T6441] page_pool_alloc_netmem+0xc4/0x160 [ 127.199271][ T6441] page_pool_alloc_pages+0x1a/0x60 [ 127.200555][ T6441] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 127.202118][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 127.203462][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 127.204811][ T6441] __sys_bpf+0xfc6/0x49a0 [ 127.205943][ T6441] __x64_sys_bpf+0x78/0xc0 [ 127.207163][ T6441] do_syscall_64+0xcd/0x250 [ 127.208370][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.209908][ T6441] page last free pid 6429 tgid 6428 stack trace: [ 127.211564][ T6441] free_unref_page+0x5f4/0xdc0 [ 127.212803][ T6441] __folio_put+0x30d/0x3d0 [ 127.213930][ T6441] put_page+0x21e/0x280 [ 127.214988][ T6441] page_pool_return_page+0x400/0x520 [ 127.216381][ T6441] page_pool_release+0xf4/0x7d0 [ 127.217676][ T6441] page_pool_destroy+0x10a/0x4c0 [ 127.218959][ T6441] bpf_test_run_xdp_live+0x3a1/0x500 [ 127.220290][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 127.221681][ T6441] __sys_bpf+0xfc6/0x49a0 [ 127.222780][ T6441] __x64_sys_bpf+0x78/0xc0 [ 127.223905][ T6441] do_syscall_64+0xcd/0x250 [ 127.225081][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.226604][ T6441] Modules linked in: [ 127.227586][ T6441] CPU: 3 UID: 0 PID: 6441 Comm: syz.2.108 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 127.230549][ T6441] Tainted: [B]=BAD_PAGE [ 127.231592][ T6441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 127.234266][ T6441] Call Trace: [ 127.235115][ T6441] [ 127.235847][ T6441] dump_stack_lvl+0x16c/0x1f0 [ 127.237051][ T6441] bad_page+0xb3/0x1f0 [ 127.238097][ T6441] ? __pfx_bad_page+0x10/0x10 [ 127.239290][ T6441] ? page_bad_reason+0x9d/0x1e0 [ 127.240508][ T6441] free_unref_page+0x657/0xdc0 [ 127.241718][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 127.243228][ T6441] ? __phys_addr+0xc6/0x150 [ 127.244373][ T6441] skb_free_head+0xa0/0x1d0 [ 127.245542][ T6441] skb_release_data+0x560/0x730 [ 127.246813][ T6441] sk_skb_reason_drop+0x129/0x1a0 [ 127.248141][ T6441] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 127.249815][ T6441] ? kernel_text_address+0x8d/0x100 [ 127.251118][ T6441] ? hlock_class+0x4e/0x130 [ 127.252249][ T6441] ? __lock_acquire+0x163e/0x3ce0 [ 127.253559][ T6441] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 127.255356][ T6441] ? hlock_class+0x4e/0x130 [ 127.256494][ T6441] ? __lock_acquire+0xbdd/0x3ce0 [ 127.257775][ T6441] ? __pfx___lock_acquire+0x10/0x10 [ 127.259083][ T6441] __netif_receive_skb_list_core+0x357/0x950 [ 127.260577][ T6441] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 127.262262][ T6441] ? trace_lock_acquire+0x14a/0x1d0 [ 127.263567][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 127.265181][ T6441] ? lock_acquire+0x2f/0xb0 [ 127.266346][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 127.267922][ T6441] netif_receive_skb_list_internal+0x753/0xdb0 [ 127.269498][ T6441] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 127.271164][ T6441] ? __pfx_eth_type_trans+0x10/0x10 [ 127.272467][ T6441] ? __build_skb_around+0x278/0x3b0 [ 127.273785][ T6441] netif_receive_skb_list+0x4f/0x4a0 [ 127.275095][ T6441] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 127.276660][ T6441] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 127.278289][ T6441] ? bpf_test_timer_continue+0x150/0x3d0 [ 127.279689][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 127.281024][ T6441] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 127.282493][ T6441] ? try_to_wake_up+0xc35/0x14f0 [ 127.283786][ T6441] ? __pfx_try_to_wake_up+0x10/0x10 [ 127.285118][ T6441] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 127.286599][ T6441] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 127.287928][ T6441] ? 0xffffffffa0004340 [ 127.288965][ T6441] ? 0xffffffffa0004340 [ 127.290063][ T6441] ? 0xffffffffa0004340 [ 127.291154][ T6441] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 127.292620][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 127.293983][ T6441] ? lock_acquire+0x2f/0xb0 [ 127.295129][ T6441] ? __fget_files+0x40/0x3f0 [ 127.296286][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 127.297800][ T6441] ? fput+0x30/0x390 [ 127.298799][ T6441] ? __bpf_prog_get+0xa0/0x290 [ 127.300011][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 127.301484][ T6441] __sys_bpf+0xfc6/0x49a0 [ 127.302574][ T6441] ? __pfx_futex_wake+0x10/0x10 [ 127.303769][ T6441] ? finish_task_switch.isra.0+0x217/0xcc0 [ 127.305196][ T6441] ? __pfx___sys_bpf+0x10/0x10 [ 127.306398][ T6441] ? __schedule+0xe5d/0x5730 [ 127.307553][ T6441] ? __fget_files+0x23a/0x3f0 [ 127.308725][ T6441] ? do_futex+0x123/0x350 [ 127.309821][ T6441] ? __pfx_do_futex+0x10/0x10 [ 127.311020][ T6441] ? xfd_validate_state+0x5d/0x180 [ 127.312298][ T6441] ? rcu_is_watching+0x12/0xc0 [ 127.313476][ T6441] __x64_sys_bpf+0x78/0xc0 [ 127.314571][ T6441] ? lockdep_hardirqs_on+0x7c/0x110 [ 127.315879][ T6441] do_syscall_64+0xcd/0x250 [ 127.317039][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.318569][ T6441] RIP: 0033:0x7f800db7e719 [ 127.319749][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.324544][ T6441] RSP: 002b:00007f800e9b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 127.326708][ T6441] RAX: ffffffffffffffda RBX: 00007f800dd36058 RCX: 00007f800db7e719 [ 127.328665][ T6441] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 127.330659][ T6441] RBP: 00007f800dbf132e R08: 0000000000000000 R09: 0000000000000000 [ 127.332651][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.334632][ T6441] R13: 0000000000000000 R14: 00007f800dd36058 R15: 00007fffcd7e8d08 [ 127.336625][ T6441] [ 127.337537][ T6441] BUG: Bad page state in process syz.2.108 pfn:31c34 [ 127.339250][ T6441] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888031c34e58 pfn:0x31c34 [ 127.341739][ T6441] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 127.343555][ T6441] raw: 00fff00000000000 dead000000000040 ffff88803fdac000 0000000000000000 [ 127.345703][ T6441] raw: ffff888031c34e58 0000000000000001 00000000ffffffff 0000000000000000 [ 127.347887][ T6441] page dumped because: page_pool leak [ 127.349245][ T6441] page_owner tracks the page as allocated [ 127.350638][ T6441] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6441, tgid 6432 (syz.2.108), ts 124609138939, free_ts 124583953186 [ 127.354840][ T6441] post_alloc_hook+0x2d1/0x350 [ 127.356071][ T6441] get_page_from_freelist+0x101e/0x3070 [ 127.357508][ T6441] __alloc_pages_noprof+0x223/0x25a0 [ 127.358831][ T6441] alloc_pages_bulk_noprof+0x77c/0x1110 [ 127.360244][ T6441] __page_pool_alloc_pages_slow+0x18f/0x770 [ 127.361780][ T6441] page_pool_alloc_netmem+0xc4/0x160 [ 127.363099][ T6441] page_pool_alloc_pages+0x1a/0x60 [ 127.364392][ T6441] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 127.365977][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 127.367337][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 127.368715][ T6441] __sys_bpf+0xfc6/0x49a0 [ 127.369814][ T6441] __x64_sys_bpf+0x78/0xc0 [ 127.370947][ T6441] do_syscall_64+0xcd/0x250 [ 127.372120][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.373611][ T6441] page last free pid 6429 tgid 6428 stack trace: [ 127.375172][ T6441] free_unref_page+0x5f4/0xdc0 [ 127.376414][ T6441] __folio_put+0x30d/0x3d0 [ 127.377550][ T6441] put_page+0x21e/0x280 [ 127.378597][ T6441] page_pool_return_page+0x400/0x520 [ 127.379915][ T6441] page_pool_release+0xf4/0x7d0 [ 127.381169][ T6441] page_pool_destroy+0x10a/0x4c0 [ 127.382424][ T6441] bpf_test_run_xdp_live+0x3a1/0x500 [ 127.383754][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 127.385134][ T6441] __sys_bpf+0xfc6/0x49a0 [ 127.386281][ T6441] __x64_sys_bpf+0x78/0xc0 [ 127.387401][ T6441] do_syscall_64+0xcd/0x250 [ 127.388561][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.390130][ T6441] Modules linked in: [ 127.391141][ T6441] CPU: 3 UID: 0 PID: 6441 Comm: syz.2.108 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 127.394114][ T6441] Tainted: [B]=BAD_PAGE [ 127.395201][ T6441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 127.397905][ T6441] Call Trace: [ 127.398743][ T6441] [ 127.399487][ T6441] dump_stack_lvl+0x16c/0x1f0 [ 127.400675][ T6441] bad_page+0xb3/0x1f0 [ 127.401723][ T6441] ? __pfx_bad_page+0x10/0x10 [ 127.402927][ T6441] ? page_bad_reason+0x9d/0x1e0 [ 127.404167][ T6441] free_unref_page+0x657/0xdc0 [ 127.405392][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 127.406931][ T6441] ? __phys_addr+0xc6/0x150 [ 127.408076][ T6441] skb_free_head+0xa0/0x1d0 [ 127.409226][ T6441] skb_release_data+0x560/0x730 [ 127.410454][ T6441] sk_skb_reason_drop+0x129/0x1a0 [ 127.411719][ T6441] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 127.413383][ T6441] ? kernel_text_address+0x8d/0x100 [ 127.414697][ T6441] ? hlock_class+0x4e/0x130 [ 127.415843][ T6441] ? __lock_acquire+0x163e/0x3ce0 [ 127.417124][ T6441] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 127.418895][ T6441] ? hlock_class+0x4e/0x130 [ 127.420047][ T6441] ? __lock_acquire+0xbdd/0x3ce0 [ 127.421320][ T6441] ? __pfx___lock_acquire+0x10/0x10 [ 127.422652][ T6441] __netif_receive_skb_list_core+0x357/0x950 [ 127.424217][ T6441] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 127.425879][ T6441] ? trace_lock_acquire+0x14a/0x1d0 [ 127.427205][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 127.428784][ T6441] ? lock_acquire+0x2f/0xb0 [ 127.429980][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 127.431590][ T6441] netif_receive_skb_list_internal+0x753/0xdb0 [ 127.433097][ T6441] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 127.434765][ T6441] ? __pfx_eth_type_trans+0x10/0x10 [ 127.436079][ T6441] ? __build_skb_around+0x278/0x3b0 [ 127.437380][ T6441] netif_receive_skb_list+0x4f/0x4a0 [ 127.438739][ T6441] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 127.440314][ T6441] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 127.441987][ T6441] ? bpf_test_timer_continue+0x150/0x3d0 [ 127.443418][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 127.444743][ T6441] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 127.446229][ T6441] ? try_to_wake_up+0xc35/0x14f0 [ 127.447493][ T6441] ? __pfx_try_to_wake_up+0x10/0x10 [ 127.448816][ T6441] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 127.450351][ T6441] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 127.451689][ T6441] ? 0xffffffffa0004340 [ 127.452739][ T6441] ? 0xffffffffa0004340 [ 127.453812][ T6441] ? 0xffffffffa0004340 [ 127.454857][ T6441] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 127.456353][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 127.457822][ T6441] ? lock_acquire+0x2f/0xb0 [ 127.458984][ T6441] ? __fget_files+0x40/0x3f0 [ 127.460189][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 127.461691][ T6441] ? fput+0x30/0x390 [ 127.462673][ T6441] ? __bpf_prog_get+0xa0/0x290 [ 127.463866][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 127.465330][ T6441] __sys_bpf+0xfc6/0x49a0 [ 127.466467][ T6441] ? __pfx_futex_wake+0x10/0x10 [ 127.467706][ T6441] ? finish_task_switch.isra.0+0x217/0xcc0 [ 127.469195][ T6441] ? __pfx___sys_bpf+0x10/0x10 [ 127.470381][ T6441] ? __schedule+0xe5d/0x5730 [ 127.471535][ T6441] ? __fget_files+0x23a/0x3f0 [ 127.472724][ T6441] ? do_futex+0x123/0x350 [ 127.473836][ T6441] ? __pfx_do_futex+0x10/0x10 [ 127.475046][ T6441] ? xfd_validate_state+0x5d/0x180 [ 127.476343][ T6441] ? rcu_is_watching+0x12/0xc0 [ 127.477582][ T6441] __x64_sys_bpf+0x78/0xc0 [ 127.478730][ T6441] ? lockdep_hardirqs_on+0x7c/0x110 [ 127.480112][ T6441] do_syscall_64+0xcd/0x250 [ 127.481319][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.482839][ T6441] RIP: 0033:0x7f800db7e719 [ 127.484003][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.488723][ T6441] RSP: 002b:00007f800e9b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 127.490789][ T6441] RAX: ffffffffffffffda RBX: 00007f800dd36058 RCX: 00007f800db7e719 [ 127.492759][ T6441] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 127.494752][ T6441] RBP: 00007f800dbf132e R08: 0000000000000000 R09: 0000000000000000 [ 127.496741][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.498785][ T6441] R13: 0000000000000000 R14: 00007f800dd36058 R15: 00007fffcd7e8d08 [ 127.500993][ T6441] [ 127.502106][ T6441] BUG: Bad page state in process syz.2.108 pfn:4ee61 [ 127.503861][ T6441] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x8 pfn:0x4ee61 [ 127.506126][ T6441] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 127.507980][ T6441] raw: 00fff00000000000 dead000000000040 ffff88803fdac000 0000000000000000 [ 127.510140][ T6441] raw: 0000000000000008 0000000000000001 00000000ffffffff 0000000000000000 [ 127.512271][ T6441] page dumped because: page_pool leak [ 127.513661][ T6441] page_owner tracks the page as allocated [ 127.515088][ T6441] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6441, tgid 6432 (syz.2.108), ts 124609134602, free_ts 124583956633 [ 127.519493][ T6441] post_alloc_hook+0x2d1/0x350 [ 127.520712][ T6441] get_page_from_freelist+0x101e/0x3070 [ 127.522391][ T6441] __alloc_pages_noprof+0x223/0x25a0 [ 127.523726][ T6441] alloc_pages_bulk_noprof+0x77c/0x1110 [ 127.525130][ T6441] __page_pool_alloc_pages_slow+0x18f/0x770 [ 127.526740][ T6441] page_pool_alloc_netmem+0xc4/0x160 [ 127.528128][ T6441] page_pool_alloc_pages+0x1a/0x60 [ 127.529474][ T6441] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 127.531068][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 127.532534][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 127.533961][ T6441] __sys_bpf+0xfc6/0x49a0 [ 127.535074][ T6441] __x64_sys_bpf+0x78/0xc0 [ 127.536303][ T6441] do_syscall_64+0xcd/0x250 [ 127.537512][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.538985][ T6441] page last free pid 6429 tgid 6428 stack trace: [ 127.540553][ T6441] free_unref_page+0x5f4/0xdc0 [ 127.541780][ T6441] __folio_put+0x30d/0x3d0 [ 127.542959][ T6441] put_page+0x21e/0x280 [ 127.544005][ T6441] page_pool_return_page+0x400/0x520 [ 127.545329][ T6441] page_pool_release+0xf4/0x7d0 [ 127.546635][ T6441] page_pool_destroy+0x10a/0x4c0 [ 127.547900][ T6441] bpf_test_run_xdp_live+0x3a1/0x500 [ 127.549239][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 127.550620][ T6441] __sys_bpf+0xfc6/0x49a0 [ 127.551715][ T6441] __x64_sys_bpf+0x78/0xc0 [ 127.552847][ T6441] do_syscall_64+0xcd/0x250 [ 127.554008][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.555548][ T6441] Modules linked in: [ 127.556598][ T6441] CPU: 3 UID: 0 PID: 6441 Comm: syz.2.108 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 127.559539][ T6441] Tainted: [B]=BAD_PAGE [ 127.560588][ T6441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 127.563260][ T6441] Call Trace: [ 127.564098][ T6441] [ 127.564857][ T6441] dump_stack_lvl+0x16c/0x1f0 [ 127.566068][ T6441] bad_page+0xb3/0x1f0 [ 127.567096][ T6441] ? __pfx_bad_page+0x10/0x10 [ 127.568276][ T6441] ? page_bad_reason+0x9d/0x1e0 [ 127.569503][ T6441] free_unref_page+0x657/0xdc0 [ 127.570703][ T6441] ? __phys_addr+0xc6/0x150 [ 127.571887][ T6441] skb_free_head+0xa0/0x1d0 [ 127.573089][ T6441] skb_release_data+0x560/0x730 [ 127.574455][ T6441] sk_skb_reason_drop+0x129/0x1a0 [ 127.575760][ T6441] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 127.577413][ T6441] ? kernel_text_address+0x8d/0x100 [ 127.578765][ T6441] ? hlock_class+0x4e/0x130 [ 127.579936][ T6441] ? __lock_acquire+0x163e/0x3ce0 [ 127.581226][ T6441] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 127.583005][ T6441] ? hlock_class+0x4e/0x130 [ 127.584164][ T6441] ? __lock_acquire+0xbdd/0x3ce0 [ 127.585434][ T6441] ? __pfx___lock_acquire+0x10/0x10 [ 127.586780][ T6441] __netif_receive_skb_list_core+0x357/0x950 [ 127.588281][ T6441] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 127.589925][ T6441] ? trace_lock_acquire+0x14a/0x1d0 [ 127.591238][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 127.592824][ T6441] ? lock_acquire+0x2f/0xb0 [ 127.593984][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 127.595578][ T6441] netif_receive_skb_list_internal+0x753/0xdb0 [ 127.597123][ T6441] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 127.598820][ T6441] ? __pfx_eth_type_trans+0x10/0x10 [ 127.600139][ T6441] ? __build_skb_around+0x278/0x3b0 [ 127.601456][ T6441] netif_receive_skb_list+0x4f/0x4a0 [ 127.602795][ T6441] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 127.604377][ T6441] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 127.606055][ T6441] ? bpf_test_timer_continue+0x150/0x3d0 [ 127.607508][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 127.608865][ T6441] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 127.610313][ T6441] ? try_to_wake_up+0xc35/0x14f0 [ 127.611539][ T6441] ? __pfx_try_to_wake_up+0x10/0x10 [ 127.612834][ T6441] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 127.614392][ T6441] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 127.615726][ T6441] ? 0xffffffffa0004340 [ 127.616806][ T6441] ? 0xffffffffa0004340 [ 127.617892][ T6441] ? 0xffffffffa0004340 [ 127.618952][ T6441] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 127.620421][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 127.621793][ T6441] ? lock_acquire+0x2f/0xb0 [ 127.622945][ T6441] ? __fget_files+0x40/0x3f0 [ 127.624123][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 127.625606][ T6441] ? fput+0x30/0x390 [ 127.626639][ T6441] ? __bpf_prog_get+0xa0/0x290 [ 127.627888][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 127.629388][ T6441] __sys_bpf+0xfc6/0x49a0 [ 127.630496][ T6441] ? __pfx_futex_wake+0x10/0x10 [ 127.631719][ T6441] ? finish_task_switch.isra.0+0x217/0xcc0 [ 127.633189][ T6441] ? __pfx___sys_bpf+0x10/0x10 [ 127.634404][ T6441] ? __schedule+0xe5d/0x5730 [ 127.635588][ T6441] ? __fget_files+0x23a/0x3f0 [ 127.636785][ T6441] ? do_futex+0x123/0x350 [ 127.637883][ T6441] ? __pfx_do_futex+0x10/0x10 [ 127.639191][ T6441] ? xfd_validate_state+0x5d/0x180 [ 127.640514][ T6441] ? rcu_is_watching+0x12/0xc0 [ 127.641759][ T6441] __x64_sys_bpf+0x78/0xc0 [ 127.642901][ T6441] ? lockdep_hardirqs_on+0x7c/0x110 [ 127.644216][ T6441] do_syscall_64+0xcd/0x250 [ 127.645406][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.646969][ T6441] RIP: 0033:0x7f800db7e719 [ 127.648113][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.653026][ T6441] RSP: 002b:00007f800e9b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 127.655187][ T6441] RAX: ffffffffffffffda RBX: 00007f800dd36058 RCX: 00007f800db7e719 [ 127.657209][ T6441] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 127.659208][ T6441] RBP: 00007f800dbf132e R08: 0000000000000000 R09: 0000000000000000 [ 127.661211][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.663213][ T6441] R13: 0000000000000000 R14: 00007f800dd36058 R15: 00007fffcd7e8d08 [ 127.665207][ T6441] [ 127.666144][ T6441] BUG: Bad page state in process syz.2.108 pfn:4b0c2 [ 127.667859][ T6441] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804b0c3e00 pfn:0x4b0c2 [ 127.670371][ T6441] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 127.672146][ T6441] raw: 00fff00000000000 dead000000000040 ffff88803fdac000 0000000000000000 [ 127.674272][ T6441] raw: ffff88804b0c3e00 0000000000000001 00000000ffffffff 0000000000000000 [ 127.676442][ T6441] page dumped because: page_pool leak [ 127.677794][ T6441] page_owner tracks the page as allocated [ 127.679219][ T6441] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6441, tgid 6432 (syz.2.108), ts 124609130277, free_ts 124583960259 [ 127.683665][ T6441] post_alloc_hook+0x2d1/0x350 [ 127.685016][ T6441] get_page_from_freelist+0x101e/0x3070 [ 127.686471][ T6441] __alloc_pages_noprof+0x223/0x25a0 [ 127.687809][ T6441] alloc_pages_bulk_noprof+0x77c/0x1110 [ 127.689198][ T6441] __page_pool_alloc_pages_slow+0x18f/0x770 [ 127.690760][ T6441] page_pool_alloc_netmem+0xc4/0x160 [ 127.692110][ T6441] page_pool_alloc_pages+0x1a/0x60 [ 127.693370][ T6441] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 127.694905][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 127.696286][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 127.697648][ T6441] __sys_bpf+0xfc6/0x49a0 [ 127.698752][ T6441] __x64_sys_bpf+0x78/0xc0 [ 127.699857][ T6441] do_syscall_64+0xcd/0x250 [ 127.701024][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.702518][ T6441] page last free pid 6429 tgid 6428 stack trace: [ 127.704079][ T6441] free_unref_page+0x5f4/0xdc0 [ 127.705283][ T6441] __folio_put+0x30d/0x3d0 [ 127.706459][ T6441] put_page+0x21e/0x280 [ 127.707508][ T6441] page_pool_return_page+0x400/0x520 [ 127.708828][ T6441] page_pool_release+0xf4/0x7d0 [ 127.710059][ T6441] page_pool_destroy+0x10a/0x4c0 [ 127.711297][ T6441] bpf_test_run_xdp_live+0x3a1/0x500 [ 127.712616][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 127.713966][ T6441] __sys_bpf+0xfc6/0x49a0 [ 127.715179][ T6441] __x64_sys_bpf+0x78/0xc0 [ 127.716448][ T6441] do_syscall_64+0xcd/0x250 [ 127.717776][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.719434][ T6441] Modules linked in: [ 127.720530][ T6441] CPU: 3 UID: 0 PID: 6441 Comm: syz.2.108 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 127.723562][ T6441] Tainted: [B]=BAD_PAGE [ 127.724602][ T6441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 127.727330][ T6441] Call Trace: [ 127.728193][ T6441] [ 127.728950][ T6441] dump_stack_lvl+0x16c/0x1f0 [ 127.730170][ T6441] bad_page+0xb3/0x1f0 [ 127.731221][ T6441] ? __pfx_bad_page+0x10/0x10 [ 127.732433][ T6441] ? page_bad_reason+0x9d/0x1e0 [ 127.733686][ T6441] free_unref_page+0x657/0xdc0 [ 127.734939][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 127.736460][ T6441] ? __phys_addr+0xc6/0x150 [ 127.737624][ T6441] skb_free_head+0xa0/0x1d0 [ 127.738793][ T6441] skb_release_data+0x560/0x730 [ 127.740019][ T6441] sk_skb_reason_drop+0x129/0x1a0 [ 127.741317][ T6441] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 127.742980][ T6441] ? kernel_text_address+0x8d/0x100 [ 127.744293][ T6441] ? hlock_class+0x4e/0x130 [ 127.745455][ T6441] ? __lock_acquire+0x163e/0x3ce0 [ 127.746720][ T6441] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 127.748500][ T6441] ? hlock_class+0x4e/0x130 [ 127.749676][ T6441] ? __lock_acquire+0xbdd/0x3ce0 [ 127.750919][ T6441] ? __pfx___lock_acquire+0x10/0x10 [ 127.752230][ T6441] __netif_receive_skb_list_core+0x357/0x950 [ 127.753747][ T6441] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 127.755384][ T6441] ? trace_lock_acquire+0x14a/0x1d0 [ 127.756752][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 127.758364][ T6441] ? lock_acquire+0x2f/0xb0 [ 127.759522][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 127.761118][ T6441] netif_receive_skb_list_internal+0x753/0xdb0 [ 127.762860][ T6441] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 127.764546][ T6441] ? __pfx_eth_type_trans+0x10/0x10 [ 127.765905][ T6441] ? __build_skb_around+0x278/0x3b0 [ 127.767259][ T6441] netif_receive_skb_list+0x4f/0x4a0 [ 127.768595][ T6441] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 127.770224][ T6441] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 127.771883][ T6441] ? bpf_test_timer_continue+0x150/0x3d0 [ 127.773316][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 127.774667][ T6441] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 127.776139][ T6441] ? try_to_wake_up+0xc35/0x14f0 [ 127.777408][ T6441] ? __pfx_try_to_wake_up+0x10/0x10 [ 127.778708][ T6441] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 127.780212][ T6441] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 127.781767][ T6441] ? 0xffffffffa0004340 [ 127.782842][ T6441] ? 0xffffffffa0004340 [ 127.783895][ T6441] ? 0xffffffffa0004340 [ 127.784959][ T6441] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 127.786480][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 127.787841][ T6441] ? lock_acquire+0x2f/0xb0 [ 127.789023][ T6441] ? __fget_files+0x40/0x3f0 [ 127.790225][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 127.791729][ T6441] ? fput+0x30/0x390 [ 127.792762][ T6441] ? __bpf_prog_get+0xa0/0x290 [ 127.793953][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 127.795421][ T6441] __sys_bpf+0xfc6/0x49a0 [ 127.796510][ T6441] ? __pfx_futex_wake+0x10/0x10 [ 127.797779][ T6441] ? finish_task_switch.isra.0+0x217/0xcc0 [ 127.799463][ T6441] ? __pfx___sys_bpf+0x10/0x10 [ 127.800694][ T6441] ? __schedule+0xe5d/0x5730 [ 127.802106][ T6441] ? __fget_files+0x23a/0x3f0 [ 127.803371][ T6441] ? do_futex+0x123/0x350 [ 127.804450][ T6441] ? __pfx_do_futex+0x10/0x10 [ 127.805673][ T6441] ? xfd_validate_state+0x5d/0x180 [ 127.806995][ T6441] ? rcu_is_watching+0x12/0xc0 [ 127.808209][ T6441] __x64_sys_bpf+0x78/0xc0 [ 127.809358][ T6441] ? lockdep_hardirqs_on+0x7c/0x110 [ 127.810726][ T6441] do_syscall_64+0xcd/0x250 [ 127.811868][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.813378][ T6441] RIP: 0033:0x7f800db7e719 [ 127.814493][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.819253][ T6441] RSP: 002b:00007f800e9b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 127.821359][ T6441] RAX: ffffffffffffffda RBX: 00007f800dd36058 RCX: 00007f800db7e719 [ 127.823329][ T6441] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 127.825297][ T6441] RBP: 00007f800dbf132e R08: 0000000000000000 R09: 0000000000000000 [ 127.827270][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.829322][ T6441] R13: 0000000000000000 R14: 00007f800dd36058 R15: 00007fffcd7e8d08 [ 127.831314][ T6441] [ 127.832208][ T6441] BUG: Bad page state in process syz.2.108 pfn:335c9 [ 127.833949][ T6441] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880335c9e58 pfn:0x335c9 [ 127.836572][ T6441] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 127.838350][ T6441] raw: 00fff00000000000 dead000000000040 ffff88803fdac000 0000000000000000 [ 127.840487][ T6441] raw: ffff8880335c9e58 0000000000000001 00000000ffffffff 0000000000000000 [ 127.842683][ T6441] page dumped because: page_pool leak [ 127.844023][ T6441] page_owner tracks the page as allocated [ 127.845587][ T6441] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6441, tgid 6432 (syz.2.108), ts 124609125879, free_ts 124583963883 [ 127.849757][ T6441] post_alloc_hook+0x2d1/0x350 [ 127.850971][ T6441] get_page_from_freelist+0x101e/0x3070 [ 127.852363][ T6441] __alloc_pages_noprof+0x223/0x25a0 [ 127.853705][ T6441] alloc_pages_bulk_noprof+0x77c/0x1110 [ 127.855090][ T6441] __page_pool_alloc_pages_slow+0x18f/0x770 [ 127.856612][ T6441] page_pool_alloc_netmem+0xc4/0x160 [ 127.857932][ T6441] page_pool_alloc_pages+0x1a/0x60 [ 127.859206][ T6441] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 127.860751][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 127.862107][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 127.863499][ T6441] __sys_bpf+0xfc6/0x49a0 [ 127.864618][ T6441] __x64_sys_bpf+0x78/0xc0 [ 127.865745][ T6441] do_syscall_64+0xcd/0x250 [ 127.866977][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.868477][ T6441] page last free pid 6429 tgid 6428 stack trace: [ 127.870129][ T6441] free_unref_page+0x5f4/0xdc0 [ 127.871336][ T6441] __folio_put+0x30d/0x3d0 [ 127.872467][ T6441] put_page+0x21e/0x280 [ 127.873498][ T6441] page_pool_return_page+0x400/0x520 [ 127.874804][ T6441] page_pool_release+0xf4/0x7d0 [ 127.876033][ T6441] page_pool_destroy+0x10a/0x4c0 [ 127.877351][ T6441] bpf_test_run_xdp_live+0x3a1/0x500 [ 127.878671][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 127.879996][ T6441] __sys_bpf+0xfc6/0x49a0 [ 127.881115][ T6441] __x64_sys_bpf+0x78/0xc0 [ 127.882245][ T6441] do_syscall_64+0xcd/0x250 [ 127.883389][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.884862][ T6441] Modules linked in: [ 127.885876][ T6441] CPU: 3 UID: 0 PID: 6441 Comm: syz.2.108 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 127.888814][ T6441] Tainted: [B]=BAD_PAGE [ 127.889868][ T6441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 127.892522][ T6441] Call Trace: [ 127.893526][ T6441] [ 127.894347][ T6441] dump_stack_lvl+0x16c/0x1f0 [ 127.895562][ T6441] bad_page+0xb3/0x1f0 [ 127.896638][ T6441] ? __pfx_bad_page+0x10/0x10 [ 127.897884][ T6441] ? page_bad_reason+0x9d/0x1e0 [ 127.899183][ T6441] free_unref_page+0x657/0xdc0 [ 127.900434][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 127.902007][ T6441] ? __phys_addr+0xc6/0x150 [ 127.903201][ T6441] skb_free_head+0xa0/0x1d0 [ 127.904378][ T6441] skb_release_data+0x560/0x730 [ 127.905615][ T6441] sk_skb_reason_drop+0x129/0x1a0 [ 127.906949][ T6441] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 127.908655][ T6441] ? kernel_text_address+0x8d/0x100 [ 127.909984][ T6441] ? hlock_class+0x4e/0x130 [ 127.911173][ T6441] ? __lock_acquire+0x163e/0x3ce0 [ 127.912470][ T6441] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 127.914290][ T6441] ? hlock_class+0x4e/0x130 [ 127.915471][ T6441] ? __lock_acquire+0xbdd/0x3ce0 [ 127.916766][ T6441] ? __pfx___lock_acquire+0x10/0x10 [ 127.918121][ T6441] __netif_receive_skb_list_core+0x357/0x950 [ 127.919665][ T6441] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 127.921360][ T6441] ? trace_lock_acquire+0x14a/0x1d0 [ 127.922719][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 127.924361][ T6441] ? lock_acquire+0x2f/0xb0 [ 127.925554][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 127.927196][ T6441] netif_receive_skb_list_internal+0x753/0xdb0 [ 127.928789][ T6441] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 127.930499][ T6441] ? __pfx_eth_type_trans+0x10/0x10 [ 127.931849][ T6441] ? __build_skb_around+0x278/0x3b0 [ 127.933208][ T6441] netif_receive_skb_list+0x4f/0x4a0 [ 127.934575][ T6441] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 127.936174][ T6441] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 127.937879][ T6441] ? bpf_test_timer_continue+0x150/0x3d0 [ 127.939312][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 127.940674][ T6441] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 127.942222][ T6441] ? try_to_wake_up+0xc35/0x14f0 [ 127.943508][ T6441] ? __pfx_try_to_wake_up+0x10/0x10 [ 127.944869][ T6441] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 127.946434][ T6441] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 127.947801][ T6441] ? 0xffffffffa0004340 [ 127.948885][ T6441] ? 0xffffffffa0004340 [ 127.949967][ T6441] ? 0xffffffffa0004340 [ 127.951036][ T6441] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 127.952559][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 127.953974][ T6441] ? lock_acquire+0x2f/0xb0 [ 127.955177][ T6441] ? __fget_files+0x40/0x3f0 [ 127.956384][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 127.957930][ T6441] ? fput+0x30/0x390 [ 127.958948][ T6441] ? __bpf_prog_get+0xa0/0x290 [ 127.960195][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 127.962063][ T6441] __sys_bpf+0xfc6/0x49a0 [ 127.963187][ T6441] ? __pfx_futex_wake+0x10/0x10 [ 127.964498][ T6441] ? finish_task_switch.isra.0+0x217/0xcc0 [ 127.966050][ T6441] ? __pfx___sys_bpf+0x10/0x10 [ 127.967337][ T6441] ? __schedule+0xe5d/0x5730 [ 127.968549][ T6441] ? __fget_files+0x23a/0x3f0 [ 127.969791][ T6441] ? do_futex+0x123/0x350 [ 127.970932][ T6441] ? __pfx_do_futex+0x10/0x10 [ 127.972164][ T6441] ? xfd_validate_state+0x5d/0x180 [ 127.973501][ T6441] ? rcu_is_watching+0x12/0xc0 [ 127.974740][ T6441] __x64_sys_bpf+0x78/0xc0 [ 127.975906][ T6441] ? lockdep_hardirqs_on+0x7c/0x110 [ 127.977264][ T6441] do_syscall_64+0xcd/0x250 [ 127.978444][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.979964][ T6441] RIP: 0033:0x7f800db7e719 [ 127.981159][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.986150][ T6441] RSP: 002b:00007f800e9b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 127.988241][ T6441] RAX: ffffffffffffffda RBX: 00007f800dd36058 RCX: 00007f800db7e719 [ 127.990229][ T6441] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 127.992403][ T6441] RBP: 00007f800dbf132e R08: 0000000000000000 R09: 0000000000000000 [ 127.994383][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.996362][ T6441] R13: 0000000000000000 R14: 00007f800dd36058 R15: 00007fffcd7e8d08 [ 127.998470][ T6441] [ 127.999390][ T6441] BUG: Bad page state in process syz.2.108 pfn:4c720 [ 128.001188][ T6441] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804c7200f8 pfn:0x4c720 [ 128.004006][ T6441] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 128.006083][ T6441] raw: 00fff00000000000 dead000000000040 ffff88803fdac000 0000000000000000 [ 128.008383][ T6441] raw: ffff88804c7200f8 0000000000000001 00000000ffffffff 0000000000000000 [ 128.010749][ T6441] page dumped because: page_pool leak [ 128.012169][ T6441] page_owner tracks the page as allocated [ 128.013672][ T6441] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6441, tgid 6432 (syz.2.108), ts 124609121410, free_ts 124583967515 [ 128.018075][ T6441] post_alloc_hook+0x2d1/0x350 [ 128.019329][ T6441] get_page_from_freelist+0x101e/0x3070 [ 128.020774][ T6441] __alloc_pages_noprof+0x223/0x25a0 [ 128.022176][ T6441] alloc_pages_bulk_noprof+0x77c/0x1110 [ 128.023603][ T6441] __page_pool_alloc_pages_slow+0x18f/0x770 [ 128.025066][ T6441] page_pool_alloc_netmem+0xc4/0x160 [ 128.026428][ T6441] page_pool_alloc_pages+0x1a/0x60 [ 128.027740][ T6441] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 128.029296][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 128.030656][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 128.032034][ T6441] __sys_bpf+0xfc6/0x49a0 [ 128.033123][ T6441] __x64_sys_bpf+0x78/0xc0 [ 128.034258][ T6441] do_syscall_64+0xcd/0x250 [ 128.035429][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.036970][ T6441] page last free pid 6429 tgid 6428 stack trace: [ 128.038560][ T6441] free_unref_page+0x5f4/0xdc0 [ 128.039759][ T6441] __folio_put+0x30d/0x3d0 [ 128.040897][ T6441] put_page+0x21e/0x280 [ 128.041985][ T6441] page_pool_return_page+0x400/0x520 [ 128.043323][ T6441] page_pool_release+0xf4/0x7d0 [ 128.044546][ T6441] page_pool_destroy+0x10a/0x4c0 [ 128.045793][ T6441] bpf_test_run_xdp_live+0x3a1/0x500 [ 128.047155][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 128.048500][ T6441] __sys_bpf+0xfc6/0x49a0 [ 128.049611][ T6441] __x64_sys_bpf+0x78/0xc0 [ 128.050743][ T6441] do_syscall_64+0xcd/0x250 [ 128.051884][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.053373][ T6441] Modules linked in: [ 128.054353][ T6441] CPU: 3 UID: 0 PID: 6441 Comm: syz.2.108 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 128.057319][ T6441] Tainted: [B]=BAD_PAGE [ 128.058359][ T6441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 128.061108][ T6441] Call Trace: [ 128.061960][ T6441] [ 128.062766][ T6441] dump_stack_lvl+0x16c/0x1f0 [ 128.063954][ T6441] bad_page+0xb3/0x1f0 [ 128.065013][ T6441] ? __pfx_bad_page+0x10/0x10 [ 128.066259][ T6441] ? page_bad_reason+0x9d/0x1e0 [ 128.067548][ T6441] free_unref_page+0x657/0xdc0 [ 128.068804][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 128.070391][ T6441] ? __phys_addr+0xc6/0x150 [ 128.071507][ T6441] skb_free_head+0xa0/0x1d0 [ 128.072630][ T6441] skb_release_data+0x560/0x730 [ 128.073890][ T6441] sk_skb_reason_drop+0x129/0x1a0 [ 128.075171][ T6441] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 128.076864][ T6441] ? kernel_text_address+0x8d/0x100 [ 128.078222][ T6441] ? hlock_class+0x4e/0x130 [ 128.079378][ T6441] ? __lock_acquire+0x163e/0x3ce0 [ 128.080604][ T6441] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 128.082371][ T6441] ? hlock_class+0x4e/0x130 [ 128.083541][ T6441] ? __lock_acquire+0xbdd/0x3ce0 [ 128.084785][ T6441] ? __pfx___lock_acquire+0x10/0x10 [ 128.086096][ T6441] __netif_receive_skb_list_core+0x357/0x950 [ 128.087600][ T6441] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 128.089223][ T6441] ? trace_lock_acquire+0x14a/0x1d0 [ 128.090524][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 128.092115][ T6441] ? lock_acquire+0x2f/0xb0 [ 128.093260][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 128.094849][ T6441] netif_receive_skb_list_internal+0x753/0xdb0 [ 128.096382][ T6441] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 128.098037][ T6441] ? __pfx_eth_type_trans+0x10/0x10 [ 128.099335][ T6441] ? __build_skb_around+0x278/0x3b0 [ 128.100691][ T6441] netif_receive_skb_list+0x4f/0x4a0 [ 128.102070][ T6441] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 128.103647][ T6441] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 128.105275][ T6441] ? bpf_test_timer_continue+0x150/0x3d0 [ 128.106720][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 128.108101][ T6441] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 128.109625][ T6441] ? try_to_wake_up+0xc35/0x14f0 [ 128.110919][ T6441] ? __pfx_try_to_wake_up+0x10/0x10 [ 128.112223][ T6441] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 128.113714][ T6441] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 128.115062][ T6441] ? 0xffffffffa0004340 [ 128.116110][ T6441] ? 0xffffffffa0004340 [ 128.117153][ T6441] ? 0xffffffffa0004340 [ 128.118192][ T6441] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 128.119680][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 128.121038][ T6441] ? lock_acquire+0x2f/0xb0 [ 128.122201][ T6441] ? __fget_files+0x40/0x3f0 [ 128.123378][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 128.124851][ T6441] ? fput+0x30/0x390 [ 128.125847][ T6441] ? __bpf_prog_get+0xa0/0x290 [ 128.127076][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 128.128546][ T6441] __sys_bpf+0xfc6/0x49a0 [ 128.129638][ T6441] ? __pfx_futex_wake+0x10/0x10 [ 128.130861][ T6441] ? finish_task_switch.isra.0+0x217/0xcc0 [ 128.132310][ T6441] ? __pfx___sys_bpf+0x10/0x10 [ 128.133522][ T6441] ? __schedule+0xe5d/0x5730 [ 128.134697][ T6441] ? __fget_files+0x23a/0x3f0 [ 128.135929][ T6441] ? do_futex+0x123/0x350 [ 128.137084][ T6441] ? __pfx_do_futex+0x10/0x10 [ 128.138297][ T6441] ? xfd_validate_state+0x5d/0x180 [ 128.139590][ T6441] ? rcu_is_watching+0x12/0xc0 [ 128.140787][ T6441] __x64_sys_bpf+0x78/0xc0 [ 128.141941][ T6441] ? lockdep_hardirqs_on+0x7c/0x110 [ 128.143315][ T6441] do_syscall_64+0xcd/0x250 [ 128.144514][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.146025][ T6441] RIP: 0033:0x7f800db7e719 [ 128.147148][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.151887][ T6441] RSP: 002b:00007f800e9b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 128.153953][ T6441] RAX: ffffffffffffffda RBX: 00007f800dd36058 RCX: 00007f800db7e719 [ 128.155883][ T6441] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 128.157878][ T6441] RBP: 00007f800dbf132e R08: 0000000000000000 R09: 0000000000000000 [ 128.159817][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.161796][ T6441] R13: 0000000000000000 R14: 00007f800dd36058 R15: 00007fffcd7e8d08 [ 128.163733][ T6441] [ 128.164581][ T6441] BUG: Bad page state in process syz.2.108 pfn:25d76 [ 128.166280][ T6441] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888025d760f0 pfn:0x25d76 [ 128.168743][ T6441] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 128.170493][ T6441] raw: 00fff00000000000 dead000000000040 ffff88803fdac000 0000000000000000 [ 128.172608][ T6441] raw: ffff888025d760f0 0000000000000001 00000000ffffffff 0000000000000000 [ 128.174805][ T6441] page dumped because: page_pool leak [ 128.176126][ T6441] page_owner tracks the page as allocated [ 128.177597][ T6441] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6441, tgid 6432 (syz.2.108), ts 124609116881, free_ts 124583971216 [ 128.181896][ T6441] post_alloc_hook+0x2d1/0x350 [ 128.183153][ T6441] get_page_from_freelist+0x101e/0x3070 [ 128.184508][ T6441] __alloc_pages_noprof+0x223/0x25a0 [ 128.185822][ T6441] alloc_pages_bulk_noprof+0x77c/0x1110 [ 128.187321][ T6441] __page_pool_alloc_pages_slow+0x18f/0x770 [ 128.188771][ T6441] page_pool_alloc_netmem+0xc4/0x160 [ 128.190067][ T6441] page_pool_alloc_pages+0x1a/0x60 [ 128.191346][ T6441] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 128.192851][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 128.194183][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 128.195514][ T6441] __sys_bpf+0xfc6/0x49a0 [ 128.196664][ T6441] __x64_sys_bpf+0x78/0xc0 [ 128.197798][ T6441] do_syscall_64+0xcd/0x250 [ 128.198964][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.200451][ T6441] page last free pid 6429 tgid 6428 stack trace: [ 128.202027][ T6441] free_unref_page+0x5f4/0xdc0 [ 128.203230][ T6441] __folio_put+0x30d/0x3d0 [ 128.204364][ T6441] put_page+0x21e/0x280 [ 128.205416][ T6441] page_pool_return_page+0x400/0x520 [ 128.206780][ T6441] page_pool_release+0xf4/0x7d0 [ 128.207999][ T6441] page_pool_destroy+0x10a/0x4c0 [ 128.209305][ T6441] bpf_test_run_xdp_live+0x3a1/0x500 [ 128.210626][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 128.211970][ T6441] __sys_bpf+0xfc6/0x49a0 [ 128.213099][ T6441] __x64_sys_bpf+0x78/0xc0 [ 128.214326][ T6441] do_syscall_64+0xcd/0x250 [ 128.215521][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.217110][ T6441] Modules linked in: [ 128.218110][ T6441] CPU: 3 UID: 0 PID: 6441 Comm: syz.2.108 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 128.221103][ T6441] Tainted: [B]=BAD_PAGE [ 128.222154][ T6441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 128.224810][ T6441] Call Trace: [ 128.225665][ T6441] [ 128.226426][ T6441] dump_stack_lvl+0x16c/0x1f0 [ 128.227632][ T6441] bad_page+0xb3/0x1f0 [ 128.228680][ T6441] ? __pfx_bad_page+0x10/0x10 [ 128.229856][ T6441] ? page_bad_reason+0x9d/0x1e0 [ 128.231058][ T6441] free_unref_page+0x657/0xdc0 [ 128.232284][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 128.233795][ T6441] ? __phys_addr+0xc6/0x150 [ 128.234946][ T6441] skb_free_head+0xa0/0x1d0 [ 128.236108][ T6441] skb_release_data+0x560/0x730 [ 128.237347][ T6441] sk_skb_reason_drop+0x129/0x1a0 [ 128.238619][ T6441] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 128.240310][ T6441] ? kernel_text_address+0x8d/0x100 [ 128.241639][ T6441] ? hlock_class+0x4e/0x130 [ 128.242772][ T6441] ? __lock_acquire+0x163e/0x3ce0 [ 128.244041][ T6441] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 128.245837][ T6441] ? hlock_class+0x4e/0x130 [ 128.247031][ T6441] ? __lock_acquire+0xbdd/0x3ce0 [ 128.248273][ T6441] ? __pfx___lock_acquire+0x10/0x10 [ 128.249592][ T6441] __netif_receive_skb_list_core+0x357/0x950 [ 128.251102][ T6441] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 128.252782][ T6441] ? trace_lock_acquire+0x14a/0x1d0 [ 128.254149][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 128.255792][ T6441] ? lock_acquire+0x2f/0xb0 [ 128.256917][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 128.258464][ T6441] netif_receive_skb_list_internal+0x753/0xdb0 [ 128.260030][ T6441] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 128.261712][ T6441] ? __pfx_eth_type_trans+0x10/0x10 [ 128.263045][ T6441] ? __build_skb_around+0x278/0x3b0 [ 128.264367][ T6441] netif_receive_skb_list+0x4f/0x4a0 [ 128.265697][ T6441] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 128.267262][ T6441] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 128.268891][ T6441] ? bpf_test_timer_continue+0x150/0x3d0 [ 128.270284][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 128.271598][ T6441] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 128.273068][ T6441] ? try_to_wake_up+0xc35/0x14f0 [ 128.274279][ T6441] ? __pfx_try_to_wake_up+0x10/0x10 [ 128.275568][ T6441] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 128.277051][ T6441] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 128.278409][ T6441] ? 0xffffffffa0004340 [ 128.279443][ T6441] ? 0xffffffffa0004340 [ 128.280500][ T6441] ? 0xffffffffa0004340 [ 128.281611][ T6441] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 128.283113][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 128.284466][ T6441] ? lock_acquire+0x2f/0xb0 [ 128.285613][ T6441] ? __fget_files+0x40/0x3f0 [ 128.286812][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 128.288341][ T6441] ? fput+0x30/0x390 [ 128.289375][ T6441] ? __bpf_prog_get+0xa0/0x290 [ 128.290561][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 128.292042][ T6441] __sys_bpf+0xfc6/0x49a0 [ 128.293175][ T6441] ? __pfx_futex_wake+0x10/0x10 [ 128.294404][ T6441] ? finish_task_switch.isra.0+0x217/0xcc0 [ 128.295862][ T6441] ? __pfx___sys_bpf+0x10/0x10 [ 128.297071][ T6441] ? __schedule+0xe5d/0x5730 [ 128.298248][ T6441] ? __fget_files+0x23a/0x3f0 [ 128.299422][ T6441] ? do_futex+0x123/0x350 [ 128.300513][ T6441] ? __pfx_do_futex+0x10/0x10 [ 128.301732][ T6441] ? xfd_validate_state+0x5d/0x180 [ 128.303092][ T6441] ? rcu_is_watching+0x12/0xc0 [ 128.304350][ T6441] __x64_sys_bpf+0x78/0xc0 [ 128.305514][ T6441] ? lockdep_hardirqs_on+0x7c/0x110 [ 128.306826][ T6441] do_syscall_64+0xcd/0x250 [ 128.307995][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.309511][ T6441] RIP: 0033:0x7f800db7e719 [ 128.310645][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.315418][ T6441] RSP: 002b:00007f800e9b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 128.317501][ T6441] RAX: ffffffffffffffda RBX: 00007f800dd36058 RCX: 00007f800db7e719 [ 128.319546][ T6441] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 128.321520][ T6441] RBP: 00007f800dbf132e R08: 0000000000000000 R09: 0000000000000000 [ 128.323493][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.325536][ T6441] R13: 0000000000000000 R14: 00007f800dd36058 R15: 00007fffcd7e8d08 [ 128.327595][ T6441] [ 128.328518][ T6441] BUG: Bad page state in process syz.2.108 pfn:323d1 [ 128.330320][ T6441] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880323d12d0 pfn:0x323d1 [ 128.332856][ T6441] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 128.334655][ T6441] raw: 00fff00000000000 dead000000000040 ffff88803fdac000 0000000000000000 [ 128.336865][ T6441] raw: ffff8880323d12d0 0000000000000001 00000000ffffffff 0000000000000000 [ 128.339055][ T6441] page dumped because: page_pool leak [ 128.340398][ T6441] page_owner tracks the page as allocated [ 128.341843][ T6441] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6441, tgid 6432 (syz.2.108), ts 124609112337, free_ts 124583974683 [ 128.346034][ T6441] post_alloc_hook+0x2d1/0x350 [ 128.347323][ T6441] get_page_from_freelist+0x101e/0x3070 [ 128.348702][ T6441] __alloc_pages_noprof+0x223/0x25a0 [ 128.350062][ T6441] alloc_pages_bulk_noprof+0x77c/0x1110 [ 128.351473][ T6441] __page_pool_alloc_pages_slow+0x18f/0x770 [ 128.352966][ T6441] page_pool_alloc_netmem+0xc4/0x160 [ 128.354350][ T6441] page_pool_alloc_pages+0x1a/0x60 [ 128.355677][ T6441] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 128.357292][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 128.358609][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 128.360013][ T6441] __sys_bpf+0xfc6/0x49a0 [ 128.361178][ T6441] __x64_sys_bpf+0x78/0xc0 [ 128.362361][ T6441] do_syscall_64+0xcd/0x250 [ 128.363527][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.365024][ T6441] page last free pid 6429 tgid 6428 stack trace: [ 128.366727][ T6441] free_unref_page+0x5f4/0xdc0 [ 128.367913][ T6441] __folio_put+0x30d/0x3d0 [ 128.369041][ T6441] put_page+0x21e/0x280 [ 128.370111][ T6441] page_pool_return_page+0x400/0x520 [ 128.371422][ T6441] page_pool_release+0xf4/0x7d0 [ 128.372629][ T6441] page_pool_destroy+0x10a/0x4c0 [ 128.373882][ T6441] bpf_test_run_xdp_live+0x3a1/0x500 [ 128.375240][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 128.376649][ T6441] __sys_bpf+0xfc6/0x49a0 [ 128.377747][ T6441] __x64_sys_bpf+0x78/0xc0 [ 128.378893][ T6441] do_syscall_64+0xcd/0x250 [ 128.380051][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.381568][ T6441] Modules linked in: [ 128.382584][ T6441] CPU: 3 UID: 0 PID: 6441 Comm: syz.2.108 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 128.385585][ T6441] Tainted: [B]=BAD_PAGE [ 128.386641][ T6441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 128.389311][ T6441] Call Trace: [ 128.390166][ T6441] [ 128.390930][ T6441] dump_stack_lvl+0x16c/0x1f0 [ 128.392192][ T6441] bad_page+0xb3/0x1f0 [ 128.393259][ T6441] ? __pfx_bad_page+0x10/0x10 [ 128.394398][ T6441] ? page_bad_reason+0x9d/0x1e0 [ 128.395662][ T6441] free_unref_page+0x657/0xdc0 [ 128.396835][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 128.398379][ T6441] ? __phys_addr+0xc6/0x150 [ 128.399570][ T6441] skb_free_head+0xa0/0x1d0 [ 128.400767][ T6441] skb_release_data+0x560/0x730 [ 128.402047][ T6441] sk_skb_reason_drop+0x129/0x1a0 [ 128.403292][ T6441] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 128.404961][ T6441] ? kernel_text_address+0x8d/0x100 [ 128.406301][ T6441] ? hlock_class+0x4e/0x130 [ 128.407442][ T6441] ? __lock_acquire+0x163e/0x3ce0 [ 128.408682][ T6441] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 128.410445][ T6441] ? hlock_class+0x4e/0x130 [ 128.411589][ T6441] ? __lock_acquire+0xbdd/0x3ce0 [ 128.412822][ T6441] ? __pfx___lock_acquire+0x10/0x10 [ 128.414130][ T6441] __netif_receive_skb_list_core+0x357/0x950 [ 128.415636][ T6441] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 128.417256][ T6441] ? trace_lock_acquire+0x14a/0x1d0 [ 128.418572][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 128.420177][ T6441] ? lock_acquire+0x2f/0xb0 [ 128.421342][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 128.422944][ T6441] netif_receive_skb_list_internal+0x753/0xdb0 [ 128.424497][ T6441] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 128.426159][ T6441] ? __pfx_eth_type_trans+0x10/0x10 [ 128.427514][ T6441] ? __build_skb_around+0x278/0x3b0 [ 128.428856][ T6441] netif_receive_skb_list+0x4f/0x4a0 [ 128.430239][ T6441] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 128.431812][ T6441] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 128.433524][ T6441] ? bpf_test_timer_continue+0x150/0x3d0 [ 128.435003][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 128.436338][ T6441] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 128.437828][ T6441] ? try_to_wake_up+0xc35/0x14f0 [ 128.439104][ T6441] ? __pfx_try_to_wake_up+0x10/0x10 [ 128.440410][ T6441] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 128.441904][ T6441] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 128.443234][ T6441] ? 0xffffffffa0004340 [ 128.444268][ T6441] ? 0xffffffffa0004340 [ 128.445312][ T6441] ? 0xffffffffa0004340 [ 128.446359][ T6441] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 128.447866][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 128.449228][ T6441] ? lock_acquire+0x2f/0xb0 [ 128.450382][ T6441] ? __fget_files+0x40/0x3f0 [ 128.451554][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 128.453023][ T6441] ? fput+0x30/0x390 [ 128.454015][ T6441] ? __bpf_prog_get+0xa0/0x290 [ 128.455230][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 128.456699][ T6441] __sys_bpf+0xfc6/0x49a0 [ 128.457808][ T6441] ? __pfx_futex_wake+0x10/0x10 [ 128.459030][ T6441] ? finish_task_switch.isra.0+0x217/0xcc0 [ 128.460488][ T6441] ? __pfx___sys_bpf+0x10/0x10 [ 128.461699][ T6441] ? __schedule+0xe5d/0x5730 [ 128.462858][ T6441] ? __fget_files+0x23a/0x3f0 [ 128.464055][ T6441] ? do_futex+0x123/0x350 [ 128.465212][ T6441] ? __pfx_do_futex+0x10/0x10 [ 128.466413][ T6441] ? xfd_validate_state+0x5d/0x180 [ 128.467696][ T6441] ? rcu_is_watching+0x12/0xc0 [ 128.468910][ T6441] __x64_sys_bpf+0x78/0xc0 [ 128.470034][ T6441] ? lockdep_hardirqs_on+0x7c/0x110 [ 128.471400][ T6441] do_syscall_64+0xcd/0x250 [ 128.472605][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.474166][ T6441] RIP: 0033:0x7f800db7e719 [ 128.475351][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.480137][ T6441] RSP: 002b:00007f800e9b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 128.482162][ T6441] RAX: ffffffffffffffda RBX: 00007f800dd36058 RCX: 00007f800db7e719 [ 128.484129][ T6441] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 128.486094][ T6441] RBP: 00007f800dbf132e R08: 0000000000000000 R09: 0000000000000000 [ 128.488268][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.490234][ T6441] R13: 0000000000000000 R14: 00007f800dd36058 R15: 00007fffcd7e8d08 [ 128.492210][ T6441] [ 128.493096][ T6441] BUG: Bad page state in process syz.2.108 pfn:24d0e [ 128.494774][ T6441] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888024d0e4d8 pfn:0x24d0e [ 128.497304][ T6441] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 128.499083][ T6441] raw: 00fff00000000000 dead000000000040 ffff88803fdac000 0000000000000000 [ 128.501280][ T6441] raw: ffff888024d0e4d8 0000000000000001 00000000ffffffff 0000000000000000 [ 128.503421][ T6441] page dumped because: page_pool leak [ 128.504759][ T6441] page_owner tracks the page as allocated [ 128.506250][ T6441] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6441, tgid 6432 (syz.2.108), ts 124609107824, free_ts 124583978473 [ 128.510571][ T6441] post_alloc_hook+0x2d1/0x350 [ 128.511773][ T6441] get_page_from_freelist+0x101e/0x3070 [ 128.513058][ T6441] __alloc_pages_noprof+0x223/0x25a0 [ 128.514379][ T6441] alloc_pages_bulk_noprof+0x77c/0x1110 [ 128.515747][ T6441] __page_pool_alloc_pages_slow+0x18f/0x770 [ 128.517267][ T6441] page_pool_alloc_netmem+0xc4/0x160 [ 128.518606][ T6441] page_pool_alloc_pages+0x1a/0x60 [ 128.519892][ T6441] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 128.521441][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 128.522769][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 128.524083][ T6441] __sys_bpf+0xfc6/0x49a0 [ 128.525156][ T6441] __x64_sys_bpf+0x78/0xc0 [ 128.526338][ T6441] do_syscall_64+0xcd/0x250 [ 128.527479][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.528948][ T6441] page last free pid 6429 tgid 6428 stack trace: [ 128.530523][ T6441] free_unref_page+0x5f4/0xdc0 [ 128.531745][ T6441] __folio_put+0x30d/0x3d0 [ 128.532876][ T6441] put_page+0x21e/0x280 [ 128.533928][ T6441] page_pool_return_page+0x400/0x520 [ 128.535253][ T6441] page_pool_release+0xf4/0x7d0 [ 128.536523][ T6441] page_pool_destroy+0x10a/0x4c0 [ 128.537742][ T6441] bpf_test_run_xdp_live+0x3a1/0x500 [ 128.539101][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 128.540462][ T6441] __sys_bpf+0xfc6/0x49a0 [ 128.541540][ T6441] __x64_sys_bpf+0x78/0xc0 [ 128.542671][ T6441] do_syscall_64+0xcd/0x250 [ 128.543811][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.545361][ T6441] Modules linked in: [ 128.546428][ T6441] CPU: 3 UID: 0 PID: 6441 Comm: syz.2.108 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 128.549456][ T6441] Tainted: [B]=BAD_PAGE [ 128.550483][ T6441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 128.553151][ T6441] Call Trace: [ 128.553992][ T6441] [ 128.554729][ T6441] dump_stack_lvl+0x16c/0x1f0 [ 128.555944][ T6441] bad_page+0xb3/0x1f0 [ 128.556980][ T6441] ? __pfx_bad_page+0x10/0x10 [ 128.558194][ T6441] ? page_bad_reason+0x9d/0x1e0 [ 128.559413][ T6441] free_unref_page+0x657/0xdc0 [ 128.560610][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 128.562123][ T6441] ? __phys_addr+0xc6/0x150 [ 128.563297][ T6441] skb_free_head+0xa0/0x1d0 [ 128.564448][ T6441] skb_release_data+0x560/0x730 [ 128.565656][ T6441] sk_skb_reason_drop+0x129/0x1a0 [ 128.566898][ T6441] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 128.568549][ T6441] ? kernel_text_address+0x8d/0x100 [ 128.569846][ T6441] ? hlock_class+0x4e/0x130 [ 128.570995][ T6441] ? __lock_acquire+0x163e/0x3ce0 [ 128.572258][ T6441] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 128.574092][ T6441] ? hlock_class+0x4e/0x130 [ 128.575238][ T6441] ? __lock_acquire+0xbdd/0x3ce0 [ 128.576485][ T6441] ? __pfx___lock_acquire+0x10/0x10 [ 128.577819][ T6441] __netif_receive_skb_list_core+0x357/0x950 [ 128.579382][ T6441] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 128.581067][ T6441] ? trace_lock_acquire+0x14a/0x1d0 [ 128.582386][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 128.583984][ T6441] ? lock_acquire+0x2f/0xb0 [ 128.585176][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 128.586757][ T6441] netif_receive_skb_list_internal+0x753/0xdb0 [ 128.588308][ T6441] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 128.590002][ T6441] ? __pfx_eth_type_trans+0x10/0x10 [ 128.591308][ T6441] ? __build_skb_around+0x278/0x3b0 [ 128.592611][ T6441] netif_receive_skb_list+0x4f/0x4a0 [ 128.593999][ T6441] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 128.595583][ T6441] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 128.597245][ T6441] ? bpf_test_timer_continue+0x150/0x3d0 [ 128.598667][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 128.600012][ T6441] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 128.601504][ T6441] ? try_to_wake_up+0xc35/0x14f0 [ 128.602759][ T6441] ? __pfx_try_to_wake_up+0x10/0x10 [ 128.604058][ T6441] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 128.605562][ T6441] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 128.606883][ T6441] ? 0xffffffffa0004340 [ 128.607910][ T6441] ? 0xffffffffa0004340 [ 128.608965][ T6441] ? 0xffffffffa0004340 [ 128.610037][ T6441] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 128.611584][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 128.612943][ T6441] ? lock_acquire+0x2f/0xb0 [ 128.614104][ T6441] ? __fget_files+0x40/0x3f0 [ 128.615284][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 128.616786][ T6441] ? fput+0x30/0x390 [ 128.617821][ T6441] ? __bpf_prog_get+0xa0/0x290 [ 128.619065][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 128.620584][ T6441] __sys_bpf+0xfc6/0x49a0 [ 128.621696][ T6441] ? __pfx_futex_wake+0x10/0x10 [ 128.622922][ T6441] ? finish_task_switch.isra.0+0x217/0xcc0 [ 128.624412][ T6441] ? __pfx___sys_bpf+0x10/0x10 [ 128.625634][ T6441] ? __schedule+0xe5d/0x5730 [ 128.626796][ T6441] ? __fget_files+0x23a/0x3f0 [ 128.627980][ T6441] ? do_futex+0x123/0x350 [ 128.629095][ T6441] ? __pfx_do_futex+0x10/0x10 [ 128.630281][ T6441] ? xfd_validate_state+0x5d/0x180 [ 128.631551][ T6441] ? rcu_is_watching+0x12/0xc0 [ 128.632754][ T6441] __x64_sys_bpf+0x78/0xc0 [ 128.633885][ T6441] ? lockdep_hardirqs_on+0x7c/0x110 [ 128.635188][ T6441] do_syscall_64+0xcd/0x250 [ 128.636334][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.637837][ T6441] RIP: 0033:0x7f800db7e719 [ 128.638962][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.643693][ T6441] RSP: 002b:00007f800e9b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 128.645762][ T6441] RAX: ffffffffffffffda RBX: 00007f800dd36058 RCX: 00007f800db7e719 [ 128.647787][ T6441] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 128.649759][ T6441] RBP: 00007f800dbf132e R08: 0000000000000000 R09: 0000000000000000 [ 128.651738][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.653799][ T6441] R13: 0000000000000000 R14: 00007f800dd36058 R15: 00007fffcd7e8d08 [ 128.655789][ T6441] [ 128.656658][ T6441] BUG: Bad page state in process syz.2.108 pfn:2f8d4 [ 128.658400][ T6441] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802f8d4ff0 pfn:0x2f8d4 [ 128.660892][ T6441] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 128.662710][ T6441] raw: 00fff00000000000 dead000000000040 ffff88803fdac000 0000000000000000 [ 128.664845][ T6441] raw: ffff88802f8d4ff0 0000000000000001 00000000ffffffff 0000000000000000 [ 128.667033][ T6441] page dumped because: page_pool leak [ 128.668381][ T6441] page_owner tracks the page as allocated [ 128.669809][ T6441] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6441, tgid 6432 (syz.2.108), ts 124609103581, free_ts 124583982056 [ 128.673953][ T6441] post_alloc_hook+0x2d1/0x350 [ 128.675176][ T6441] get_page_from_freelist+0x101e/0x3070 [ 128.676599][ T6441] __alloc_pages_noprof+0x223/0x25a0 [ 128.677921][ T6441] alloc_pages_bulk_noprof+0x77c/0x1110 [ 128.679299][ T6441] __page_pool_alloc_pages_slow+0x18f/0x770 [ 128.680776][ T6441] page_pool_alloc_netmem+0xc4/0x160 [ 128.682131][ T6441] page_pool_alloc_pages+0x1a/0x60 [ 128.683441][ T6441] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 128.685049][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 128.686446][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 128.687812][ T6441] __sys_bpf+0xfc6/0x49a0 [ 128.688900][ T6441] __x64_sys_bpf+0x78/0xc0 [ 128.690087][ T6441] do_syscall_64+0xcd/0x250 [ 128.691284][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.692825][ T6441] page last free pid 6429 tgid 6428 stack trace: [ 128.694413][ T6441] free_unref_page+0x5f4/0xdc0 [ 128.695628][ T6441] __folio_put+0x30d/0x3d0 [ 128.696859][ T6441] put_page+0x21e/0x280 [ 128.697924][ T6441] page_pool_return_page+0x400/0x520 [ 128.699251][ T6441] page_pool_release+0xf4/0x7d0 [ 128.700476][ T6441] page_pool_destroy+0x10a/0x4c0 [ 128.701758][ T6441] bpf_test_run_xdp_live+0x3a1/0x500 [ 128.703096][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 128.704429][ T6441] __sys_bpf+0xfc6/0x49a0 [ 128.705534][ T6441] __x64_sys_bpf+0x78/0xc0 [ 128.706709][ T6441] do_syscall_64+0xcd/0x250 [ 128.707870][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.709365][ T6441] Modules linked in: [ 128.710350][ T6441] CPU: 3 UID: 0 PID: 6441 Comm: syz.2.108 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 128.713336][ T6441] Tainted: [B]=BAD_PAGE [ 128.714380][ T6441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 128.717072][ T6441] Call Trace: [ 128.717949][ T6441] [ 128.718733][ T6441] dump_stack_lvl+0x16c/0x1f0 [ 128.719936][ T6441] bad_page+0xb3/0x1f0 [ 128.720975][ T6441] ? __pfx_bad_page+0x10/0x10 [ 128.722176][ T6441] ? page_bad_reason+0x9d/0x1e0 [ 128.723402][ T6441] free_unref_page+0x657/0xdc0 [ 128.724650][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 128.726219][ T6441] ? __phys_addr+0xc6/0x150 [ 128.727445][ T6441] skb_free_head+0xa0/0x1d0 [ 128.728590][ T6441] skb_release_data+0x560/0x730 [ 128.729822][ T6441] sk_skb_reason_drop+0x129/0x1a0 [ 128.731117][ T6441] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 128.732780][ T6441] ? kernel_text_address+0x8d/0x100 [ 128.734105][ T6441] ? hlock_class+0x4e/0x130 [ 128.735275][ T6441] ? __lock_acquire+0x163e/0x3ce0 [ 128.736522][ T6441] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 128.738278][ T6441] ? hlock_class+0x4e/0x130 [ 128.739445][ T6441] ? __lock_acquire+0xbdd/0x3ce0 [ 128.740684][ T6441] ? __pfx___lock_acquire+0x10/0x10 [ 128.742026][ T6441] __netif_receive_skb_list_core+0x357/0x950 [ 128.743546][ T6441] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 128.745181][ T6441] ? trace_lock_acquire+0x14a/0x1d0 [ 128.746496][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 128.748084][ T6441] ? lock_acquire+0x2f/0xb0 [ 128.749239][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 128.750816][ T6441] netif_receive_skb_list_internal+0x753/0xdb0 [ 128.752365][ T6441] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 128.753993][ T6441] ? __pfx_eth_type_trans+0x10/0x10 [ 128.755303][ T6441] ? __build_skb_around+0x278/0x3b0 [ 128.756653][ T6441] netif_receive_skb_list+0x4f/0x4a0 [ 128.758050][ T6441] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 128.759681][ T6441] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 128.761349][ T6441] ? bpf_test_timer_continue+0x150/0x3d0 [ 128.762850][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 128.764242][ T6441] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 128.765771][ T6441] ? try_to_wake_up+0xc35/0x14f0 [ 128.767026][ T6441] ? __pfx_try_to_wake_up+0x10/0x10 [ 128.768336][ T6441] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 128.769871][ T6441] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 128.771196][ T6441] ? 0xffffffffa0004340 [ 128.772251][ T6441] ? 0xffffffffa0004340 [ 128.773314][ T6441] ? 0xffffffffa0004340 [ 128.774382][ T6441] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 128.775891][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 128.777239][ T6441] ? lock_acquire+0x2f/0xb0 [ 128.778396][ T6441] ? __fget_files+0x40/0x3f0 [ 128.779574][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 128.781030][ T6441] ? fput+0x30/0x390 [ 128.781994][ T6441] ? __bpf_prog_get+0xa0/0x290 [ 128.783154][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 128.784595][ T6441] __sys_bpf+0xfc6/0x49a0 [ 128.785669][ T6441] ? __pfx_futex_wake+0x10/0x10 [ 128.786870][ T6441] ? finish_task_switch.isra.0+0x217/0xcc0 [ 128.788302][ T6441] ? __pfx___sys_bpf+0x10/0x10 [ 128.789500][ T6441] ? __schedule+0xe5d/0x5730 [ 128.790669][ T6441] ? __fget_files+0x23a/0x3f0 [ 128.791897][ T6441] ? do_futex+0x123/0x350 [ 128.792992][ T6441] ? __pfx_do_futex+0x10/0x10 [ 128.794186][ T6441] ? xfd_validate_state+0x5d/0x180 [ 128.795471][ T6441] ? rcu_is_watching+0x12/0xc0 [ 128.796707][ T6441] __x64_sys_bpf+0x78/0xc0 [ 128.798024][ T6441] ? lockdep_hardirqs_on+0x7c/0x110 [ 128.799355][ T6441] do_syscall_64+0xcd/0x250 [ 128.800497][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.801981][ T6441] RIP: 0033:0x7f800db7e719 [ 128.803207][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.807950][ T6441] RSP: 002b:00007f800e9b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 128.810015][ T6441] RAX: ffffffffffffffda RBX: 00007f800dd36058 RCX: 00007f800db7e719 [ 128.812040][ T6441] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 128.814046][ T6441] RBP: 00007f800dbf132e R08: 0000000000000000 R09: 0000000000000000 [ 128.816046][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.818018][ T6441] R13: 0000000000000000 R14: 00007f800dd36058 R15: 00007fffcd7e8d08 [ 128.820004][ T6441] [ 128.820890][ T6441] BUG: Bad page state in process syz.2.108 pfn:4d199 [ 128.822605][ T6441] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2 pfn:0x4d199 [ 128.824775][ T6441] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 128.826624][ T6441] raw: 00fff00000000000 dead000000000040 ffff88803fdac000 0000000000000000 [ 128.828820][ T6441] raw: 0000000000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 128.830977][ T6441] page dumped because: page_pool leak [ 128.832327][ T6441] page_owner tracks the page as allocated [ 128.833765][ T6441] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6441, tgid 6432 (syz.2.108), ts 124609099197, free_ts 124583985438 [ 128.838118][ T6441] post_alloc_hook+0x2d1/0x350 [ 128.839348][ T6441] get_page_from_freelist+0x101e/0x3070 [ 128.840741][ T6441] __alloc_pages_noprof+0x223/0x25a0 [ 128.842099][ T6441] alloc_pages_bulk_noprof+0x77c/0x1110 [ 128.843506][ T6441] __page_pool_alloc_pages_slow+0x18f/0x770 [ 128.845005][ T6441] page_pool_alloc_netmem+0xc4/0x160 [ 128.846388][ T6441] page_pool_alloc_pages+0x1a/0x60 [ 128.847688][ T6441] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 128.849249][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 128.850587][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 128.851920][ T6441] __sys_bpf+0xfc6/0x49a0 [ 128.853000][ T6441] __x64_sys_bpf+0x78/0xc0 [ 128.854101][ T6441] do_syscall_64+0xcd/0x250 [ 128.855259][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.856791][ T6441] page last free pid 6429 tgid 6428 stack trace: [ 128.858475][ T6441] free_unref_page+0x5f4/0xdc0 [ 128.859695][ T6441] __folio_put+0x30d/0x3d0 [ 128.860825][ T6441] put_page+0x21e/0x280 [ 128.861917][ T6441] page_pool_return_page+0x400/0x520 [ 128.863254][ T6441] page_pool_release+0xf4/0x7d0 [ 128.864530][ T6441] page_pool_destroy+0x10a/0x4c0 [ 128.865847][ T6441] bpf_test_run_xdp_live+0x3a1/0x500 [ 128.867255][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 128.868611][ T6441] __sys_bpf+0xfc6/0x49a0 [ 128.869825][ T6441] __x64_sys_bpf+0x78/0xc0 [ 128.871006][ T6441] do_syscall_64+0xcd/0x250 [ 128.872216][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.873746][ T6441] Modules linked in: [ 128.874755][ T6441] CPU: 3 UID: 0 PID: 6441 Comm: syz.2.108 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 128.877792][ T6441] Tainted: [B]=BAD_PAGE [ 128.878848][ T6441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 128.881614][ T6441] Call Trace: [ 128.882472][ T6441] [ 128.883236][ T6441] dump_stack_lvl+0x16c/0x1f0 [ 128.884456][ T6441] bad_page+0xb3/0x1f0 [ 128.885530][ T6441] ? __pfx_bad_page+0x10/0x10 [ 128.886721][ T6441] ? page_bad_reason+0x9d/0x1e0 [ 128.887944][ T6441] free_unref_page+0x657/0xdc0 [ 128.889163][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 128.890680][ T6441] ? __phys_addr+0xc6/0x150 [ 128.891831][ T6441] skb_free_head+0xa0/0x1d0 [ 128.892974][ T6441] skb_release_data+0x560/0x730 [ 128.894221][ T6441] sk_skb_reason_drop+0x129/0x1a0 [ 128.895491][ T6441] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 128.897202][ T6441] ? kernel_text_address+0x8d/0x100 [ 128.898567][ T6441] ? hlock_class+0x4e/0x130 [ 128.899719][ T6441] ? __lock_acquire+0x163e/0x3ce0 [ 128.900993][ T6441] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 128.902824][ T6441] ? hlock_class+0x4e/0x130 [ 128.903957][ T6441] ? __lock_acquire+0xbdd/0x3ce0 [ 128.905213][ T6441] ? __pfx___lock_acquire+0x10/0x10 [ 128.906502][ T6441] __netif_receive_skb_list_core+0x357/0x950 [ 128.908028][ T6441] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 128.909705][ T6441] ? trace_lock_acquire+0x14a/0x1d0 [ 128.911088][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 128.912754][ T6441] ? lock_acquire+0x2f/0xb0 [ 128.913953][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 128.915517][ T6441] netif_receive_skb_list_internal+0x753/0xdb0 [ 128.917084][ T6441] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 128.918804][ T6441] ? __pfx_eth_type_trans+0x10/0x10 [ 128.920121][ T6441] ? __build_skb_around+0x278/0x3b0 [ 128.921446][ T6441] netif_receive_skb_list+0x4f/0x4a0 [ 128.922805][ T6441] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 128.924377][ T6441] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 128.926066][ T6441] ? bpf_test_timer_continue+0x150/0x3d0 [ 128.927490][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 128.928821][ T6441] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 128.930298][ T6441] ? try_to_wake_up+0xc35/0x14f0 [ 128.931545][ T6441] ? __pfx_try_to_wake_up+0x10/0x10 [ 128.932859][ T6441] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 128.934398][ T6441] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 128.935722][ T6441] ? 0xffffffffa0004340 [ 128.936778][ T6441] ? 0xffffffffa0004340 [ 128.937848][ T6441] ? 0xffffffffa0004340 [ 128.938902][ T6441] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 128.940432][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 128.941864][ T6441] ? lock_acquire+0x2f/0xb0 [ 128.943012][ T6441] ? __fget_files+0x40/0x3f0 [ 128.944202][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 128.945697][ T6441] ? fput+0x30/0x390 [ 128.946799][ T6441] ? __bpf_prog_get+0xa0/0x290 [ 128.948164][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 128.949805][ T6441] __sys_bpf+0xfc6/0x49a0 [ 128.950936][ T6441] ? __pfx_futex_wake+0x10/0x10 [ 128.952190][ T6441] ? finish_task_switch.isra.0+0x217/0xcc0 [ 128.953722][ T6441] ? __pfx___sys_bpf+0x10/0x10 [ 128.954957][ T6441] ? __schedule+0xe5d/0x5730 [ 128.956140][ T6441] ? __fget_files+0x23a/0x3f0 [ 128.957372][ T6441] ? do_futex+0x123/0x350 [ 128.958484][ T6441] ? __pfx_do_futex+0x10/0x10 [ 128.959702][ T6441] ? xfd_validate_state+0x5d/0x180 [ 128.961032][ T6441] ? rcu_is_watching+0x12/0xc0 [ 128.962437][ T6441] __x64_sys_bpf+0x78/0xc0 [ 128.963671][ T6441] ? lockdep_hardirqs_on+0x7c/0x110 [ 128.965052][ T6441] do_syscall_64+0xcd/0x250 [ 128.966242][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.967770][ T6441] RIP: 0033:0x7f800db7e719 [ 128.968908][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.974155][ T6441] RSP: 002b:00007f800e9b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 128.976639][ T6441] RAX: ffffffffffffffda RBX: 00007f800dd36058 RCX: 00007f800db7e719 [ 128.979006][ T6441] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 128.981219][ T6441] RBP: 00007f800dbf132e R08: 0000000000000000 R09: 0000000000000000 [ 128.983171][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.985158][ T6441] R13: 0000000000000000 R14: 00007f800dd36058 R15: 00007fffcd7e8d08 [ 128.987577][ T6441] [ 128.988496][ T6441] BUG: Bad page state in process syz.2.108 pfn:2a686 [ 128.990278][ T6441] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2a686 [ 128.992439][ T6441] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 128.994299][ T6441] raw: 00fff00000000000 dead000000000040 ffff88803fdac000 0000000000000000 [ 128.996480][ T6441] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 128.998645][ T6441] page dumped because: page_pool leak [ 128.999980][ T6441] page_owner tracks the page as allocated [ 129.001468][ T6441] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6441, tgid 6432 (syz.2.108), ts 124609094801, free_ts 124583989536 [ 129.005660][ T6441] post_alloc_hook+0x2d1/0x350 [ 129.006939][ T6441] get_page_from_freelist+0x101e/0x3070 [ 129.008346][ T6441] __alloc_pages_noprof+0x223/0x25a0 [ 129.009691][ T6441] alloc_pages_bulk_noprof+0x77c/0x1110 [ 129.011075][ T6441] __page_pool_alloc_pages_slow+0x18f/0x770 [ 129.012561][ T6441] page_pool_alloc_netmem+0xc4/0x160 [ 129.013878][ T6441] page_pool_alloc_pages+0x1a/0x60 [ 129.015158][ T6441] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 129.016812][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 129.018148][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 129.019514][ T6441] __sys_bpf+0xfc6/0x49a0 [ 129.020604][ T6441] __x64_sys_bpf+0x78/0xc0 [ 129.021778][ T6441] do_syscall_64+0xcd/0x250 [ 129.022988][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.024821][ T6441] page last free pid 6429 tgid 6428 stack trace: [ 129.026511][ T6441] free_unref_page+0x5f4/0xdc0 [ 129.027745][ T6441] __folio_put+0x30d/0x3d0 [ 129.028876][ T6441] put_page+0x21e/0x280 [ 129.029965][ T6441] page_pool_return_page+0x400/0x520 [ 129.031285][ T6441] page_pool_release+0xf4/0x7d0 [ 129.032531][ T6441] page_pool_destroy+0x10a/0x4c0 [ 129.033778][ T6441] bpf_test_run_xdp_live+0x3a1/0x500 [ 129.035135][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 129.036689][ T6441] __sys_bpf+0xfc6/0x49a0 [ 129.037821][ T6441] __x64_sys_bpf+0x78/0xc0 [ 129.039012][ T6441] do_syscall_64+0xcd/0x250 [ 129.040223][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.041822][ T6441] Modules linked in: [ 129.042870][ T6441] CPU: 3 UID: 0 PID: 6441 Comm: syz.2.108 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 129.045873][ T6441] Tainted: [B]=BAD_PAGE [ 129.046935][ T6441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 129.049643][ T6441] Call Trace: [ 129.050526][ T6441] [ 129.051299][ T6441] dump_stack_lvl+0x16c/0x1f0 [ 129.052486][ T6441] bad_page+0xb3/0x1f0 [ 129.053544][ T6441] ? __pfx_bad_page+0x10/0x10 [ 129.054746][ T6441] ? page_bad_reason+0x9d/0x1e0 [ 129.055964][ T6441] free_unref_page+0x657/0xdc0 [ 129.057182][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 129.058711][ T6441] ? __phys_addr+0xc6/0x150 [ 129.059879][ T6441] skb_free_head+0xa0/0x1d0 [ 129.061501][ T6441] skb_release_data+0x560/0x730 [ 129.063152][ T6441] sk_skb_reason_drop+0x129/0x1a0 [ 129.064439][ T6441] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 129.066130][ T6441] ? kernel_text_address+0x8d/0x100 [ 129.067437][ T6441] ? hlock_class+0x4e/0x130 [ 129.068612][ T6441] ? __lock_acquire+0x163e/0x3ce0 [ 129.069907][ T6441] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 129.071681][ T6441] ? rcu_is_watching+0x12/0xc0 [ 129.072879][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 129.074380][ T6441] __netif_receive_skb_list_core+0x357/0x950 [ 129.075896][ T6441] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 129.077591][ T6441] ? trace_lock_acquire+0x14a/0x1d0 [ 129.078899][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 129.080546][ T6441] ? lock_acquire+0x2f/0xb0 [ 129.081706][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 129.083443][ T6441] netif_receive_skb_list_internal+0x753/0xdb0 [ 129.085014][ T6441] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 129.087025][ T6441] ? __pfx_eth_type_trans+0x10/0x10 [ 129.088332][ T6441] ? __build_skb_around+0x278/0x3b0 [ 129.089654][ T6441] netif_receive_skb_list+0x4f/0x4a0 [ 129.090984][ T6441] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 129.092566][ T6441] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 129.094231][ T6441] ? bpf_test_timer_continue+0x150/0x3d0 [ 129.095659][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 129.097012][ T6441] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 129.098514][ T6441] ? try_to_wake_up+0xc35/0x14f0 [ 129.099817][ T6441] ? __pfx_try_to_wake_up+0x10/0x10 [ 129.101147][ T6441] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 129.102753][ T6441] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 129.104131][ T6441] ? 0xffffffffa0004340 [ 129.105302][ T6441] ? 0xffffffffa0004340 [ 129.106380][ T6441] ? 0xffffffffa0004340 [ 129.107483][ T6441] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 129.108976][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 129.110337][ T6441] ? lock_acquire+0x2f/0xb0 [ 129.111509][ T6441] ? __fget_files+0x40/0x3f0 [ 129.112740][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 129.114202][ T6441] ? fput+0x30/0x390 [ 129.115203][ T6441] ? __bpf_prog_get+0xa0/0x290 [ 129.116420][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 129.117896][ T6441] __sys_bpf+0xfc6/0x49a0 [ 129.119011][ T6441] ? __pfx_futex_wake+0x10/0x10 [ 129.120272][ T6441] ? finish_task_switch.isra.0+0x217/0xcc0 [ 129.121763][ T6441] ? __pfx___sys_bpf+0x10/0x10 [ 129.122971][ T6441] ? __schedule+0xe5d/0x5730 [ 129.124106][ T6441] ? __fget_files+0x23a/0x3f0 [ 129.125297][ T6441] ? do_futex+0x123/0x350 [ 129.126393][ T6441] ? __pfx_do_futex+0x10/0x10 [ 129.127617][ T6441] ? xfd_validate_state+0x5d/0x180 [ 129.128918][ T6441] ? rcu_is_watching+0x12/0xc0 [ 129.130171][ T6441] __x64_sys_bpf+0x78/0xc0 [ 129.131407][ T6441] ? lockdep_hardirqs_on+0x7c/0x110 [ 129.132811][ T6441] do_syscall_64+0xcd/0x250 [ 129.133984][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.135441][ T6441] RIP: 0033:0x7f800db7e719 [ 129.136564][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.141430][ T6441] RSP: 002b:00007f800e9b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 129.143488][ T6441] RAX: ffffffffffffffda RBX: 00007f800dd36058 RCX: 00007f800db7e719 [ 129.145453][ T6441] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 129.147420][ T6441] RBP: 00007f800dbf132e R08: 0000000000000000 R09: 0000000000000000 [ 129.149372][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.151417][ T6441] R13: 0000000000000000 R14: 00007f800dd36058 R15: 00007fffcd7e8d08 [ 129.153424][ T6441] [ 129.154347][ T6441] BUG: Bad page state in process syz.2.108 pfn:29365 [ 129.156053][ T6441] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888029365aa8 pfn:0x29365 [ 129.158623][ T6441] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 129.160383][ T6441] raw: 00fff00000000000 dead000000000040 ffff88803fdac000 0000000000000000 [ 129.162543][ T6441] raw: ffff888029365aa8 0000000000000001 00000000ffffffff 0000000000000000 [ 129.164660][ T6441] page dumped because: page_pool leak [ 129.165995][ T6441] page_owner tracks the page as allocated [ 129.167445][ T6441] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6441, tgid 6432 (syz.2.108), ts 124609090294, free_ts 124583993146 [ 129.171670][ T6441] post_alloc_hook+0x2d1/0x350 [ 129.172902][ T6441] get_page_from_freelist+0x101e/0x3070 [ 129.174329][ T6441] __alloc_pages_noprof+0x223/0x25a0 [ 129.175677][ T6441] alloc_pages_bulk_noprof+0x77c/0x1110 [ 129.177124][ T6441] __page_pool_alloc_pages_slow+0x18f/0x770 [ 129.178635][ T6441] page_pool_alloc_netmem+0xc4/0x160 [ 129.179960][ T6441] page_pool_alloc_pages+0x1a/0x60 [ 129.181273][ T6441] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 129.182828][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 129.184160][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 129.185522][ T6441] __sys_bpf+0xfc6/0x49a0 [ 129.186654][ T6441] __x64_sys_bpf+0x78/0xc0 [ 129.187791][ T6441] do_syscall_64+0xcd/0x250 [ 129.188947][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.190454][ T6441] page last free pid 6429 tgid 6428 stack trace: [ 129.192059][ T6441] free_unref_page+0x5f4/0xdc0 [ 129.193288][ T6441] __folio_put+0x30d/0x3d0 [ 129.194411][ T6441] put_page+0x21e/0x280 [ 129.195475][ T6441] page_pool_return_page+0x400/0x520 [ 129.196840][ T6441] page_pool_release+0xf4/0x7d0 [ 129.198057][ T6441] page_pool_destroy+0x10a/0x4c0 [ 129.199295][ T6441] bpf_test_run_xdp_live+0x3a1/0x500 [ 129.200608][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 129.201962][ T6441] __sys_bpf+0xfc6/0x49a0 [ 129.203039][ T6441] __x64_sys_bpf+0x78/0xc0 [ 129.204177][ T6441] do_syscall_64+0xcd/0x250 [ 129.205348][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.206882][ T6441] Modules linked in: [ 129.207860][ T6441] CPU: 3 UID: 0 PID: 6441 Comm: syz.2.108 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 129.210851][ T6441] Tainted: [B]=BAD_PAGE [ 129.211885][ T6441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 129.214546][ T6441] Call Trace: [ 129.215398][ T6441] [ 129.216145][ T6441] dump_stack_lvl+0x16c/0x1f0 [ 129.217346][ T6441] bad_page+0xb3/0x1f0 [ 129.218412][ T6441] ? __pfx_bad_page+0x10/0x10 [ 129.219582][ T6441] ? page_bad_reason+0x9d/0x1e0 [ 129.220800][ T6441] free_unref_page+0x657/0xdc0 [ 129.222024][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 129.223537][ T6441] ? __phys_addr+0xc6/0x150 [ 129.224663][ T6441] skb_free_head+0xa0/0x1d0 [ 129.225789][ T6441] skb_release_data+0x560/0x730 [ 129.227018][ T6441] sk_skb_reason_drop+0x129/0x1a0 [ 129.228268][ T6441] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 129.229934][ T6441] ? kernel_text_address+0x8d/0x100 [ 129.231260][ T6441] ? hlock_class+0x4e/0x130 [ 129.232389][ T6441] ? __lock_acquire+0x163e/0x3ce0 [ 129.233651][ T6441] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 129.235380][ T6441] ? rcu_is_watching+0x12/0xc0 [ 129.236560][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 129.238203][ T6441] __netif_receive_skb_list_core+0x357/0x950 [ 129.239721][ T6441] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 129.241419][ T6441] ? trace_lock_acquire+0x14a/0x1d0 [ 129.242734][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 129.244330][ T6441] ? lock_acquire+0x2f/0xb0 [ 129.245453][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 129.247112][ T6441] netif_receive_skb_list_internal+0x753/0xdb0 [ 129.248742][ T6441] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 129.250408][ T6441] ? __pfx_eth_type_trans+0x10/0x10 [ 129.251699][ T6441] ? __build_skb_around+0x278/0x3b0 [ 129.252983][ T6441] netif_receive_skb_list+0x4f/0x4a0 [ 129.254318][ T6441] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 129.255865][ T6441] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 129.257537][ T6441] ? bpf_test_timer_continue+0x150/0x3d0 [ 129.258923][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 129.260249][ T6441] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 129.261723][ T6441] ? try_to_wake_up+0xc35/0x14f0 [ 129.263017][ T6441] ? __pfx_try_to_wake_up+0x10/0x10 [ 129.264365][ T6441] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 129.265864][ T6441] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 129.267183][ T6441] ? 0xffffffffa0004340 [ 129.268213][ T6441] ? 0xffffffffa0004340 [ 129.269257][ T6441] ? 0xffffffffa0004340 [ 129.270289][ T6441] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 129.271866][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 129.273272][ T6441] ? lock_acquire+0x2f/0xb0 [ 129.274423][ T6441] ? __fget_files+0x40/0x3f0 [ 129.275767][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 129.277241][ T6441] ? fput+0x30/0x390 [ 129.278227][ T6441] ? __bpf_prog_get+0xa0/0x290 [ 129.279440][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 129.280919][ T6441] __sys_bpf+0xfc6/0x49a0 [ 129.282016][ T6441] ? __pfx_futex_wake+0x10/0x10 [ 129.283224][ T6441] ? finish_task_switch.isra.0+0x217/0xcc0 [ 129.284689][ T6441] ? __pfx___sys_bpf+0x10/0x10 [ 129.286111][ T6441] ? __schedule+0xe5d/0x5730 [ 129.287308][ T6441] ? __fget_files+0x23a/0x3f0 [ 129.288496][ T6441] ? do_futex+0x123/0x350 [ 129.289589][ T6441] ? __pfx_do_futex+0x10/0x10 [ 129.290788][ T6441] ? xfd_validate_state+0x5d/0x180 [ 129.292051][ T6441] ? rcu_is_watching+0x12/0xc0 [ 129.293276][ T6441] __x64_sys_bpf+0x78/0xc0 [ 129.294403][ T6441] ? lockdep_hardirqs_on+0x7c/0x110 [ 129.295686][ T6441] do_syscall_64+0xcd/0x250 [ 129.296811][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.298408][ T6441] RIP: 0033:0x7f800db7e719 [ 129.299526][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.304474][ T6441] RSP: 002b:00007f800e9b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 129.306529][ T6441] RAX: ffffffffffffffda RBX: 00007f800dd36058 RCX: 00007f800db7e719 [ 129.308480][ T6441] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 129.310579][ T6441] RBP: 00007f800dbf132e R08: 0000000000000000 R09: 0000000000000000 [ 129.312501][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.314461][ T6441] R13: 0000000000000000 R14: 00007f800dd36058 R15: 00007fffcd7e8d08 [ 129.316456][ T6441] [ 129.317355][ T6441] BUG: Bad page state in process syz.2.108 pfn:27912 [ 129.319022][ T6441] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888027912960 pfn:0x27912 [ 129.321554][ T6441] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 129.323332][ T6441] raw: 00fff00000000000 dead000000000040 ffff88803fdac000 0000000000000000 [ 129.325492][ T6441] raw: ffff888027912960 0000000000000001 00000000ffffffff 0000000000000000 [ 129.327721][ T6441] page dumped because: page_pool leak [ 129.329045][ T6441] page_owner tracks the page as allocated [ 129.330443][ T6441] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6441, tgid 6432 (syz.2.108), ts 124609085865, free_ts 124583996599 [ 129.334667][ T6441] post_alloc_hook+0x2d1/0x350 [ 129.335858][ T6441] get_page_from_freelist+0x101e/0x3070 [ 129.337304][ T6441] __alloc_pages_noprof+0x223/0x25a0 [ 129.338663][ T6441] alloc_pages_bulk_noprof+0x77c/0x1110 [ 129.340061][ T6441] __page_pool_alloc_pages_slow+0x18f/0x770 [ 129.341606][ T6441] page_pool_alloc_netmem+0xc4/0x160 [ 129.343028][ T6441] page_pool_alloc_pages+0x1a/0x60 [ 129.344314][ T6441] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 129.345890][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 129.347325][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 129.348672][ T6441] __sys_bpf+0xfc6/0x49a0 [ 129.349764][ T6441] __x64_sys_bpf+0x78/0xc0 [ 129.350890][ T6441] do_syscall_64+0xcd/0x250 [ 129.352059][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.353500][ T6441] page last free pid 6429 tgid 6428 stack trace: [ 129.355028][ T6441] free_unref_page+0x5f4/0xdc0 [ 129.356256][ T6441] __folio_put+0x30d/0x3d0 [ 129.357355][ T6441] put_page+0x21e/0x280 [ 129.358686][ T6441] page_pool_return_page+0x400/0x520 [ 129.360367][ T6441] page_pool_release+0xf4/0x7d0 [ 129.361684][ T6441] page_pool_destroy+0x10a/0x4c0 [ 129.362926][ T6441] bpf_test_run_xdp_live+0x3a1/0x500 [ 129.364230][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 129.365594][ T6441] __sys_bpf+0xfc6/0x49a0 [ 129.366742][ T6441] __x64_sys_bpf+0x78/0xc0 [ 129.367861][ T6441] do_syscall_64+0xcd/0x250 [ 129.369034][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.370499][ T6441] Modules linked in: [ 129.371506][ T6441] CPU: 3 UID: 0 PID: 6441 Comm: syz.2.108 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 129.374423][ T6441] Tainted: [B]=BAD_PAGE [ 129.375454][ T6441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 129.378088][ T6441] Call Trace: [ 129.378906][ T6441] [ 129.379625][ T6441] dump_stack_lvl+0x16c/0x1f0 [ 129.380776][ T6441] bad_page+0xb3/0x1f0 [ 129.381797][ T6441] ? __pfx_bad_page+0x10/0x10 [ 129.382963][ T6441] ? page_bad_reason+0x9d/0x1e0 [ 129.384166][ T6441] free_unref_page+0x657/0xdc0 [ 129.385350][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 129.386860][ T6441] ? __phys_addr+0xc6/0x150 [ 129.388012][ T6441] skb_free_head+0xa0/0x1d0 [ 129.389159][ T6441] skb_release_data+0x560/0x730 [ 129.390388][ T6441] sk_skb_reason_drop+0x129/0x1a0 [ 129.391651][ T6441] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 129.393330][ T6441] ? kernel_text_address+0x8d/0x100 [ 129.394624][ T6441] ? hlock_class+0x4e/0x130 [ 129.395786][ T6441] ? __lock_acquire+0x163e/0x3ce0 [ 129.397040][ T6441] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 129.398836][ T6441] ? rcu_is_watching+0x12/0xc0 [ 129.400046][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 129.401528][ T6441] __netif_receive_skb_list_core+0x357/0x950 [ 129.402989][ T6441] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 129.404612][ T6441] ? trace_lock_acquire+0x14a/0x1d0 [ 129.405925][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 129.407505][ T6441] ? lock_acquire+0x2f/0xb0 [ 129.408629][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 129.410195][ T6441] netif_receive_skb_list_internal+0x753/0xdb0 [ 129.411736][ T6441] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 129.413371][ T6441] ? __pfx_eth_type_trans+0x10/0x10 [ 129.414682][ T6441] ? __build_skb_around+0x278/0x3b0 [ 129.415972][ T6441] netif_receive_skb_list+0x4f/0x4a0 [ 129.417326][ T6441] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 129.418872][ T6441] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 129.420533][ T6441] ? bpf_test_timer_continue+0x150/0x3d0 [ 129.422016][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 129.423409][ T6441] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 129.424913][ T6441] ? try_to_wake_up+0xc35/0x14f0 [ 129.426169][ T6441] ? __pfx_try_to_wake_up+0x10/0x10 [ 129.427475][ T6441] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 129.428953][ T6441] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 129.430273][ T6441] ? 0xffffffffa0004340 [ 129.431328][ T6441] ? 0xffffffffa0004340 [ 129.432370][ T6441] ? 0xffffffffa0004340 [ 129.433436][ T6441] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 129.434914][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 129.436261][ T6441] ? lock_acquire+0x2f/0xb0 [ 129.437423][ T6441] ? __fget_files+0x40/0x3f0 [ 129.438594][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 129.440055][ T6441] ? fput+0x30/0x390 [ 129.441072][ T6441] ? __bpf_prog_get+0xa0/0x290 [ 129.442295][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 129.443711][ T6441] __sys_bpf+0xfc6/0x49a0 [ 129.444819][ T6441] ? __pfx_futex_wake+0x10/0x10 [ 129.446054][ T6441] ? finish_task_switch.isra.0+0x217/0xcc0 [ 129.447517][ T6441] ? __pfx___sys_bpf+0x10/0x10 [ 129.448730][ T6441] ? __schedule+0xe5d/0x5730 [ 129.449881][ T6441] ? __fget_files+0x23a/0x3f0 [ 129.451093][ T6441] ? do_futex+0x123/0x350 [ 129.452179][ T6441] ? __pfx_do_futex+0x10/0x10 [ 129.453354][ T6441] ? xfd_validate_state+0x5d/0x180 [ 129.454597][ T6441] ? rcu_is_watching+0x12/0xc0 [ 129.455770][ T6441] __x64_sys_bpf+0x78/0xc0 [ 129.456887][ T6441] ? lockdep_hardirqs_on+0x7c/0x110 [ 129.458264][ T6441] do_syscall_64+0xcd/0x250 [ 129.459439][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.460929][ T6441] RIP: 0033:0x7f800db7e719 [ 129.462040][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.466729][ T6441] RSP: 002b:00007f800e9b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 129.468817][ T6441] RAX: ffffffffffffffda RBX: 00007f800dd36058 RCX: 00007f800db7e719 [ 129.470792][ T6441] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 129.472757][ T6441] RBP: 00007f800dbf132e R08: 0000000000000000 R09: 0000000000000000 [ 129.474753][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.476714][ T6441] R13: 0000000000000000 R14: 00007f800dd36058 R15: 00007fffcd7e8d08 [ 129.478637][ T6441] [ 129.479538][ T6441] BUG: Bad page state in process syz.2.108 pfn:4b7a3 [ 129.481267][ T6441] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2 pfn:0x4b7a3 [ 129.483896][ T6441] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 129.485764][ T6441] raw: 00fff00000000000 dead000000000040 ffff88803fdac000 0000000000000000 [ 129.487996][ T6441] raw: 0000000000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 129.490182][ T6441] page dumped because: page_pool leak [ 129.491515][ T6441] page_owner tracks the page as allocated [ 129.492936][ T6441] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6441, tgid 6432 (syz.2.108), ts 124609081287, free_ts 124584000175 [ 129.497198][ T6441] post_alloc_hook+0x2d1/0x350 [ 129.498413][ T6441] get_page_from_freelist+0x101e/0x3070 [ 129.499808][ T6441] __alloc_pages_noprof+0x223/0x25a0 [ 129.501204][ T6441] alloc_pages_bulk_noprof+0x77c/0x1110 [ 129.502563][ T6441] __page_pool_alloc_pages_slow+0x18f/0x770 [ 129.504055][ T6441] page_pool_alloc_netmem+0xc4/0x160 [ 129.505376][ T6441] page_pool_alloc_pages+0x1a/0x60 [ 129.506724][ T6441] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 129.508235][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 129.509537][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 129.510867][ T6441] __sys_bpf+0xfc6/0x49a0 [ 129.511937][ T6441] __x64_sys_bpf+0x78/0xc0 [ 129.513040][ T6441] do_syscall_64+0xcd/0x250 [ 129.514179][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.515649][ T6441] page last free pid 6429 tgid 6428 stack trace: [ 129.517245][ T6441] free_unref_page+0x5f4/0xdc0 [ 129.518441][ T6441] __folio_put+0x30d/0x3d0 [ 129.519568][ T6441] put_page+0x21e/0x280 [ 129.520608][ T6441] page_pool_return_page+0x400/0x520 [ 129.521933][ T6441] page_pool_release+0xf4/0x7d0 [ 129.523155][ T6441] page_pool_destroy+0x10a/0x4c0 [ 129.524378][ T6441] bpf_test_run_xdp_live+0x3a1/0x500 [ 129.525697][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 129.527049][ T6441] __sys_bpf+0xfc6/0x49a0 [ 129.528128][ T6441] __x64_sys_bpf+0x78/0xc0 [ 129.529264][ T6441] do_syscall_64+0xcd/0x250 [ 129.530365][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.531845][ T6441] Modules linked in: [ 129.532850][ T6441] CPU: 3 UID: 0 PID: 6441 Comm: syz.2.108 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 129.535935][ T6441] Tainted: [B]=BAD_PAGE [ 129.537000][ T6441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 129.539555][ T6441] Call Trace: [ 129.540387][ T6441] [ 129.541152][ T6441] dump_stack_lvl+0x16c/0x1f0 [ 129.542346][ T6441] bad_page+0xb3/0x1f0 [ 129.543381][ T6441] ? __pfx_bad_page+0x10/0x10 [ 129.544571][ T6441] ? page_bad_reason+0x9d/0x1e0 [ 129.545808][ T6441] free_unref_page+0x657/0xdc0 [ 129.547002][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 129.548496][ T6441] ? __phys_addr+0xc6/0x150 [ 129.549658][ T6441] skb_free_head+0xa0/0x1d0 [ 129.550811][ T6441] skb_release_data+0x560/0x730 [ 129.552051][ T6441] sk_skb_reason_drop+0x129/0x1a0 [ 129.553373][ T6441] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 129.555024][ T6441] ? kernel_text_address+0x8d/0x100 [ 129.556325][ T6441] ? hlock_class+0x4e/0x130 [ 129.557491][ T6441] ? __lock_acquire+0x163e/0x3ce0 [ 129.558747][ T6441] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 129.560557][ T6441] ? rcu_is_watching+0x12/0xc0 [ 129.561781][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 129.563286][ T6441] __netif_receive_skb_list_core+0x357/0x950 [ 129.564774][ T6441] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 129.566363][ T6441] ? trace_lock_acquire+0x14a/0x1d0 [ 129.567704][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 129.569306][ T6441] ? lock_acquire+0x2f/0xb0 [ 129.570445][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 129.572011][ T6441] netif_receive_skb_list_internal+0x753/0xdb0 [ 129.573567][ T6441] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 129.575214][ T6441] ? __pfx_eth_type_trans+0x10/0x10 [ 129.576517][ T6441] ? __build_skb_around+0x278/0x3b0 [ 129.577826][ T6441] netif_receive_skb_list+0x4f/0x4a0 [ 129.579152][ T6441] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 129.580719][ T6441] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 129.582365][ T6441] ? bpf_test_timer_continue+0x150/0x3d0 [ 129.583744][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 129.585064][ T6441] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 129.586555][ T6441] ? try_to_wake_up+0xc35/0x14f0 [ 129.587814][ T6441] ? __pfx_try_to_wake_up+0x10/0x10 [ 129.589120][ T6441] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 129.590596][ T6441] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 129.591891][ T6441] ? 0xffffffffa0004340 [ 129.592936][ T6441] ? 0xffffffffa0004340 [ 129.593994][ T6441] ? 0xffffffffa0004340 [ 129.595015][ T6441] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 129.596470][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 129.597795][ T6441] ? lock_acquire+0x2f/0xb0 [ 129.598914][ T6441] ? __fget_files+0x40/0x3f0 [ 129.600074][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 129.601524][ T6441] ? fput+0x30/0x390 [ 129.602477][ T6441] ? __bpf_prog_get+0xa0/0x290 [ 129.603683][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 129.605167][ T6441] __sys_bpf+0xfc6/0x49a0 [ 129.606265][ T6441] ? __pfx_futex_wake+0x10/0x10 [ 129.607482][ T6441] ? finish_task_switch.isra.0+0x217/0xcc0 [ 129.608924][ T6441] ? __pfx___sys_bpf+0x10/0x10 [ 129.610145][ T6441] ? __schedule+0xe5d/0x5730 [ 129.611302][ T6441] ? __fget_files+0x23a/0x3f0 [ 129.612498][ T6441] ? do_futex+0x123/0x350 [ 129.613601][ T6441] ? __pfx_do_futex+0x10/0x10 [ 129.614790][ T6441] ? xfd_validate_state+0x5d/0x180 [ 129.616082][ T6441] ? rcu_is_watching+0x12/0xc0 [ 129.617289][ T6441] __x64_sys_bpf+0x78/0xc0 [ 129.618408][ T6441] ? lockdep_hardirqs_on+0x7c/0x110 [ 129.619714][ T6441] do_syscall_64+0xcd/0x250 [ 129.620878][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.622385][ T6441] RIP: 0033:0x7f800db7e719 [ 129.623486][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.628211][ T6441] RSP: 002b:00007f800e9b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 129.630296][ T6441] RAX: ffffffffffffffda RBX: 00007f800dd36058 RCX: 00007f800db7e719 [ 129.632273][ T6441] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 129.634272][ T6441] RBP: 00007f800dbf132e R08: 0000000000000000 R09: 0000000000000000 [ 129.636271][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.638216][ T6441] R13: 0000000000000000 R14: 00007f800dd36058 R15: 00007fffcd7e8d08 [ 129.640148][ T6441] [ 129.641039][ T6441] BUG: Bad page state in process syz.2.108 pfn:4ddc0 [ 129.642721][ T6441] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804ddc0870 pfn:0x4ddc0 [ 129.645256][ T6441] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 129.647018][ T6441] raw: 00fff00000000000 dead000000000040 ffff88803fdac000 0000000000000000 [ 129.649089][ T6441] raw: ffff88804ddc0870 0000000000000001 00000000ffffffff 0000000000000000 [ 129.651187][ T6441] page dumped because: page_pool leak [ 129.652513][ T6441] page_owner tracks the page as allocated [ 129.653913][ T6441] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6441, tgid 6432 (syz.2.108), ts 124609076914, free_ts 124584003705 [ 129.658069][ T6441] post_alloc_hook+0x2d1/0x350 [ 129.659270][ T6441] get_page_from_freelist+0x101e/0x3070 [ 129.660651][ T6441] __alloc_pages_noprof+0x223/0x25a0 [ 129.661999][ T6441] alloc_pages_bulk_noprof+0x77c/0x1110 [ 129.663369][ T6441] __page_pool_alloc_pages_slow+0x18f/0x770 [ 129.664858][ T6441] page_pool_alloc_netmem+0xc4/0x160 [ 129.666246][ T6441] page_pool_alloc_pages+0x1a/0x60 [ 129.667519][ T6441] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 129.669053][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 129.670395][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 129.671751][ T6441] __sys_bpf+0xfc6/0x49a0 [ 129.672842][ T6441] __x64_sys_bpf+0x78/0xc0 [ 129.673986][ T6441] do_syscall_64+0xcd/0x250 [ 129.675138][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.676629][ T6441] page last free pid 6429 tgid 6428 stack trace: [ 129.678147][ T6441] free_unref_page+0x5f4/0xdc0 [ 129.679297][ T6441] __folio_put+0x30d/0x3d0 [ 129.680392][ T6441] put_page+0x21e/0x280 [ 129.681450][ T6441] page_pool_return_page+0x400/0x520 [ 129.682778][ T6441] page_pool_release+0xf4/0x7d0 [ 129.683980][ T6441] page_pool_destroy+0x10a/0x4c0 [ 129.685197][ T6441] bpf_test_run_xdp_live+0x3a1/0x500 [ 129.686565][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 129.687853][ T6441] __sys_bpf+0xfc6/0x49a0 [ 129.688894][ T6441] __x64_sys_bpf+0x78/0xc0 [ 129.690025][ T6441] do_syscall_64+0xcd/0x250 [ 129.691162][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.692629][ T6441] Modules linked in: [ 129.693631][ T6441] CPU: 3 UID: 0 PID: 6441 Comm: syz.2.108 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 129.697326][ T6441] Tainted: [B]=BAD_PAGE [ 129.698368][ T6441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 129.701022][ T6441] Call Trace: [ 129.702004][ T6441] [ 129.702785][ T6441] dump_stack_lvl+0x16c/0x1f0 [ 129.704003][ T6441] bad_page+0xb3/0x1f0 [ 129.705048][ T6441] ? __pfx_bad_page+0x10/0x10 [ 129.706284][ T6441] ? page_bad_reason+0x9d/0x1e0 [ 129.707506][ T6441] free_unref_page+0x657/0xdc0 [ 129.708745][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 129.710295][ T6441] ? __phys_addr+0xc6/0x150 [ 129.711470][ T6441] skb_free_head+0xa0/0x1d0 [ 129.712627][ T6441] skb_release_data+0x560/0x730 [ 129.713899][ T6441] sk_skb_reason_drop+0x129/0x1a0 [ 129.715188][ T6441] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 129.716868][ T6441] ? kernel_text_address+0x8d/0x100 [ 129.718244][ T6441] ? hlock_class+0x4e/0x130 [ 129.719411][ T6441] ? __lock_acquire+0x163e/0x3ce0 [ 129.720695][ T6441] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 129.722492][ T6441] ? rcu_is_watching+0x12/0xc0 [ 129.723720][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 129.725247][ T6441] __netif_receive_skb_list_core+0x357/0x950 [ 129.726768][ T6441] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 129.728537][ T6441] ? trace_lock_acquire+0x14a/0x1d0 [ 129.729871][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 129.731471][ T6441] ? lock_acquire+0x2f/0xb0 [ 129.732630][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 129.734226][ T6441] netif_receive_skb_list_internal+0x753/0xdb0 [ 129.735798][ T6441] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 129.737499][ T6441] ? __pfx_eth_type_trans+0x10/0x10 [ 129.738838][ T6441] ? __build_skb_around+0x278/0x3b0 [ 129.740163][ T6441] netif_receive_skb_list+0x4f/0x4a0 [ 129.741519][ T6441] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 129.743048][ T6441] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 129.744855][ T6441] ? bpf_test_timer_continue+0x150/0x3d0 [ 129.746280][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 129.747607][ T6441] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 129.749242][ T6441] ? try_to_wake_up+0xc35/0x14f0 [ 129.750470][ T6441] ? __pfx_try_to_wake_up+0x10/0x10 [ 129.751791][ T6441] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 129.753255][ T6441] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 129.754607][ T6441] ? 0xffffffffa0004340 [ 129.755682][ T6441] ? 0xffffffffa0004340 [ 129.756711][ T6441] ? 0xffffffffa0004340 [ 129.757795][ T6441] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 129.759281][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 129.760645][ T6441] ? lock_acquire+0x2f/0xb0 [ 129.761808][ T6441] ? __fget_files+0x40/0x3f0 [ 129.762965][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 129.764451][ T6441] ? fput+0x30/0x390 [ 129.765468][ T6441] ? __bpf_prog_get+0xa0/0x290 [ 129.766682][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 129.768129][ T6441] __sys_bpf+0xfc6/0x49a0 [ 129.769182][ T6441] ? __pfx_futex_wake+0x10/0x10 [ 129.770376][ T6441] ? finish_task_switch.isra.0+0x217/0xcc0 [ 129.771808][ T6441] ? __pfx___sys_bpf+0x10/0x10 [ 129.773003][ T6441] ? __schedule+0xe5d/0x5730 [ 129.774148][ T6441] ? __fget_files+0x23a/0x3f0 [ 129.775306][ T6441] ? do_futex+0x123/0x350 [ 129.776375][ T6441] ? __pfx_do_futex+0x10/0x10 [ 129.777558][ T6441] ? xfd_validate_state+0x5d/0x180 [ 129.778829][ T6441] ? rcu_is_watching+0x12/0xc0 [ 129.780051][ T6441] __x64_sys_bpf+0x78/0xc0 [ 129.781177][ T6441] ? lockdep_hardirqs_on+0x7c/0x110 [ 129.782489][ T6441] do_syscall_64+0xcd/0x250 [ 129.783655][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.785174][ T6441] RIP: 0033:0x7f800db7e719 [ 129.786295][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.790966][ T6441] RSP: 002b:00007f800e9b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 129.792982][ T6441] RAX: ffffffffffffffda RBX: 00007f800dd36058 RCX: 00007f800db7e719 [ 129.794888][ T6441] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 129.796806][ T6441] RBP: 00007f800dbf132e R08: 0000000000000000 R09: 0000000000000000 [ 129.798703][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.800608][ T6441] R13: 0000000000000000 R14: 00007f800dd36058 R15: 00007fffcd7e8d08 [ 129.802784][ T6441] [ 129.803695][ T6441] BUG: Bad page state in process syz.2.108 pfn:2ccee [ 129.805423][ T6441] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802cceef00 pfn:0x2ccee [ 129.808003][ T6441] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 129.809772][ T6441] raw: 00fff00000000000 dead000000000040 ffff88803fdac000 0000000000000000 [ 129.811920][ T6441] raw: ffff88802cceef00 0000000000000001 00000000ffffffff 0000000000000000 [ 129.814062][ T6441] page dumped because: page_pool leak [ 129.815422][ T6441] page_owner tracks the page as allocated [ 129.816860][ T6441] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6441, tgid 6432 (syz.2.108), ts 124609072320, free_ts 124584007123 [ 129.821037][ T6441] post_alloc_hook+0x2d1/0x350 [ 129.822226][ T6441] get_page_from_freelist+0x101e/0x3070 [ 129.823615][ T6441] __alloc_pages_noprof+0x223/0x25a0 [ 129.824914][ T6441] alloc_pages_bulk_noprof+0x77c/0x1110 [ 129.826333][ T6441] __page_pool_alloc_pages_slow+0x18f/0x770 [ 129.827813][ T6441] page_pool_alloc_netmem+0xc4/0x160 [ 129.829145][ T6441] page_pool_alloc_pages+0x1a/0x60 [ 129.830445][ T6441] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 129.831985][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 129.833320][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 129.834666][ T6441] __sys_bpf+0xfc6/0x49a0 [ 129.835747][ T6441] __x64_sys_bpf+0x78/0xc0 [ 129.836922][ T6441] do_syscall_64+0xcd/0x250 [ 129.838089][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.839574][ T6441] page last free pid 6429 tgid 6428 stack trace: [ 129.841169][ T6441] free_unref_page+0x5f4/0xdc0 [ 129.842403][ T6441] __folio_put+0x30d/0x3d0 [ 129.843526][ T6441] put_page+0x21e/0x280 [ 129.844573][ T6441] page_pool_return_page+0x400/0x520 [ 129.845888][ T6441] page_pool_release+0xf4/0x7d0 [ 129.847183][ T6441] page_pool_destroy+0x10a/0x4c0 [ 129.848421][ T6441] bpf_test_run_xdp_live+0x3a1/0x500 [ 129.849747][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 129.851062][ T6441] __sys_bpf+0xfc6/0x49a0 [ 129.852130][ T6441] __x64_sys_bpf+0x78/0xc0 [ 129.853237][ T6441] do_syscall_64+0xcd/0x250 [ 129.854366][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.855892][ T6441] Modules linked in: [ 129.856927][ T6441] CPU: 3 UID: 0 PID: 6441 Comm: syz.2.108 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 129.859798][ T6441] Tainted: [B]=BAD_PAGE [ 129.860803][ T6441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 129.863402][ T6441] Call Trace: [ 129.864421][ T6441] [ 129.865364][ T6441] dump_stack_lvl+0x16c/0x1f0 [ 129.866537][ T6441] bad_page+0xb3/0x1f0 [ 129.867584][ T6441] ? __pfx_bad_page+0x10/0x10 [ 129.868754][ T6441] ? page_bad_reason+0x9d/0x1e0 [ 129.869962][ T6441] free_unref_page+0x657/0xdc0 [ 129.871177][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 129.872696][ T6441] ? __phys_addr+0xc6/0x150 [ 129.873831][ T6441] skb_free_head+0xa0/0x1d0 [ 129.874960][ T6441] skb_release_data+0x560/0x730 [ 129.876237][ T6441] sk_skb_reason_drop+0x129/0x1a0 [ 129.877536][ T6441] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 129.879190][ T6441] ? kernel_text_address+0x8d/0x100 [ 129.880494][ T6441] ? hlock_class+0x4e/0x130 [ 129.881673][ T6441] ? __lock_acquire+0x163e/0x3ce0 [ 129.882907][ T6441] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 129.884695][ T6441] ? rcu_is_watching+0x12/0xc0 [ 129.885947][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 129.887520][ T6441] __netif_receive_skb_list_core+0x357/0x950 [ 129.889086][ T6441] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 129.890779][ T6441] ? trace_lock_acquire+0x14a/0x1d0 [ 129.892083][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 129.893702][ T6441] ? lock_acquire+0x2f/0xb0 [ 129.894920][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 129.896572][ T6441] netif_receive_skb_list_internal+0x753/0xdb0 [ 129.898171][ T6441] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 129.899824][ T6441] ? __pfx_eth_type_trans+0x10/0x10 [ 129.901182][ T6441] ? __build_skb_around+0x278/0x3b0 [ 129.902508][ T6441] netif_receive_skb_list+0x4f/0x4a0 [ 129.903822][ T6441] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 129.905396][ T6441] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 129.907025][ T6441] ? bpf_test_timer_continue+0x150/0x3d0 [ 129.908417][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 129.909733][ T6441] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 129.911193][ T6441] ? try_to_wake_up+0xc35/0x14f0 [ 129.912421][ T6441] ? __pfx_try_to_wake_up+0x10/0x10 [ 129.913716][ T6441] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 129.915250][ T6441] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 129.916549][ T6441] ? 0xffffffffa0004340 [ 129.917599][ T6441] ? 0xffffffffa0004340 [ 129.918689][ T6441] ? 0xffffffffa0004340 [ 129.919774][ T6441] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 129.921335][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 129.922746][ T6441] ? lock_acquire+0x2f/0xb0 [ 129.923927][ T6441] ? __fget_files+0x40/0x3f0 [ 129.925157][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 129.926674][ T6441] ? fput+0x30/0x390 [ 129.927699][ T6441] ? __bpf_prog_get+0xa0/0x290 [ 129.928956][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 129.930479][ T6441] __sys_bpf+0xfc6/0x49a0 [ 129.931620][ T6441] ? __pfx_futex_wake+0x10/0x10 [ 129.932896][ T6441] ? finish_task_switch.isra.0+0x217/0xcc0 [ 129.934414][ T6441] ? __pfx___sys_bpf+0x10/0x10 [ 129.935624][ T6441] ? __schedule+0xe5d/0x5730 [ 129.936796][ T6441] ? __fget_files+0x23a/0x3f0 [ 129.938021][ T6441] ? do_futex+0x123/0x350 [ 129.939172][ T6441] ? __pfx_do_futex+0x10/0x10 [ 129.940429][ T6441] ? xfd_validate_state+0x5d/0x180 [ 129.941801][ T6441] ? rcu_is_watching+0x12/0xc0 [ 129.943069][ T6441] __x64_sys_bpf+0x78/0xc0 [ 129.944254][ T6441] ? lockdep_hardirqs_on+0x7c/0x110 [ 129.945851][ T6441] do_syscall_64+0xcd/0x250 [ 129.947189][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.948759][ T6441] RIP: 0033:0x7f800db7e719 [ 129.949956][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.954769][ T6441] RSP: 002b:00007f800e9b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 129.956888][ T6441] RAX: ffffffffffffffda RBX: 00007f800dd36058 RCX: 00007f800db7e719 [ 129.958890][ T6441] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 129.960906][ T6441] RBP: 00007f800dbf132e R08: 0000000000000000 R09: 0000000000000000 [ 129.962934][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.965012][ T6441] R13: 0000000000000000 R14: 00007f800dd36058 R15: 00007fffcd7e8d08 [ 129.967026][ T6441] [ 129.967915][ T6441] BUG: Bad page state in process syz.2.108 pfn:308b7 [ 129.969711][ T6441] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880308b7d90 pfn:0x308b7 [ 129.972276][ T6441] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 129.974071][ T6441] raw: 00fff00000000000 dead000000000040 ffff88803fdac000 0000000000000000 [ 129.976239][ T6441] raw: ffff8880308b7d90 0000000000000001 00000000ffffffff 0000000000000000 [ 129.978347][ T6441] page dumped because: page_pool leak [ 129.979674][ T6441] page_owner tracks the page as allocated [ 129.981145][ T6441] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6441, tgid 6432 (syz.2.108), ts 124609067639, free_ts 124584010545 [ 129.985323][ T6441] post_alloc_hook+0x2d1/0x350 [ 129.986588][ T6441] get_page_from_freelist+0x101e/0x3070 [ 129.987986][ T6441] __alloc_pages_noprof+0x223/0x25a0 [ 129.989321][ T6441] alloc_pages_bulk_noprof+0x77c/0x1110 [ 129.990722][ T6441] __page_pool_alloc_pages_slow+0x18f/0x770 [ 129.992226][ T6441] page_pool_alloc_netmem+0xc4/0x160 [ 129.993556][ T6441] page_pool_alloc_pages+0x1a/0x60 [ 129.994866][ T6441] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 129.996530][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 129.997861][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 129.999206][ T6441] __sys_bpf+0xfc6/0x49a0 [ 130.000331][ T6441] __x64_sys_bpf+0x78/0xc0 [ 130.001482][ T6441] do_syscall_64+0xcd/0x250 [ 130.002605][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.004151][ T6441] page last free pid 6429 tgid 6428 stack trace: [ 130.005810][ T6441] free_unref_page+0x5f4/0xdc0 [ 130.007120][ T6441] __folio_put+0x30d/0x3d0 [ 130.008291][ T6441] put_page+0x21e/0x280 [ 130.009407][ T6441] page_pool_return_page+0x400/0x520 [ 130.010780][ T6441] page_pool_release+0xf4/0x7d0 [ 130.012054][ T6441] page_pool_destroy+0x10a/0x4c0 [ 130.013351][ T6441] bpf_test_run_xdp_live+0x3a1/0x500 [ 130.014700][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 130.016050][ T6441] __sys_bpf+0xfc6/0x49a0 [ 130.017194][ T6441] __x64_sys_bpf+0x78/0xc0 [ 130.018364][ T6441] do_syscall_64+0xcd/0x250 [ 130.019504][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.020976][ T6441] Modules linked in: [ 130.021985][ T6441] CPU: 3 UID: 0 PID: 6441 Comm: syz.2.108 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 130.024886][ T6441] Tainted: [B]=BAD_PAGE [ 130.025956][ T6441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 130.028583][ T6441] Call Trace: [ 130.029453][ T6441] [ 130.030188][ T6441] dump_stack_lvl+0x16c/0x1f0 [ 130.031380][ T6441] bad_page+0xb3/0x1f0 [ 130.032408][ T6441] ? __pfx_bad_page+0x10/0x10 [ 130.033611][ T6441] ? page_bad_reason+0x9d/0x1e0 [ 130.034802][ T6441] free_unref_page+0x657/0xdc0 [ 130.035960][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 130.037471][ T6441] ? __phys_addr+0xc6/0x150 [ 130.038648][ T6441] skb_free_head+0xa0/0x1d0 [ 130.039796][ T6441] skb_release_data+0x560/0x730 [ 130.041034][ T6441] sk_skb_reason_drop+0x129/0x1a0 [ 130.042352][ T6441] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 130.044063][ T6441] ? kernel_text_address+0x8d/0x100 [ 130.045375][ T6441] ? hlock_class+0x4e/0x130 [ 130.046542][ T6441] ? __lock_acquire+0x163e/0x3ce0 [ 130.047766][ T6441] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 130.049524][ T6441] ? rcu_is_watching+0x12/0xc0 [ 130.050758][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 130.052266][ T6441] __netif_receive_skb_list_core+0x357/0x950 [ 130.053744][ T6441] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 130.055380][ T6441] ? trace_lock_acquire+0x14a/0x1d0 [ 130.056685][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 130.058302][ T6441] ? lock_acquire+0x2f/0xb0 [ 130.059454][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 130.061022][ T6441] netif_receive_skb_list_internal+0x753/0xdb0 [ 130.062569][ T6441] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 130.064214][ T6441] ? __pfx_eth_type_trans+0x10/0x10 [ 130.065557][ T6441] ? __build_skb_around+0x278/0x3b0 [ 130.066921][ T6441] netif_receive_skb_list+0x4f/0x4a0 [ 130.068306][ T6441] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 130.069915][ T6441] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 130.071579][ T6441] ? bpf_test_timer_continue+0x150/0x3d0 [ 130.073037][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 130.074431][ T6441] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 130.075935][ T6441] ? try_to_wake_up+0xc35/0x14f0 [ 130.077150][ T6441] ? __pfx_try_to_wake_up+0x10/0x10 [ 130.078443][ T6441] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 130.079953][ T6441] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 130.081313][ T6441] ? 0xffffffffa0004340 [ 130.082357][ T6441] ? 0xffffffffa0004340 [ 130.083859][ T6441] ? 0xffffffffa0004340 [ 130.085095][ T6441] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 130.086637][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 130.088010][ T6441] ? lock_acquire+0x2f/0xb0 [ 130.089171][ T6441] ? __fget_files+0x40/0x3f0 [ 130.090365][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 130.091844][ T6441] ? fput+0x30/0x390 [ 130.092857][ T6441] ? __bpf_prog_get+0xa0/0x290 [ 130.094116][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 130.095588][ T6441] __sys_bpf+0xfc6/0x49a0 [ 130.096651][ T6441] ? __pfx_futex_wake+0x10/0x10 [ 130.097890][ T6441] ? finish_task_switch.isra.0+0x217/0xcc0 [ 130.099373][ T6441] ? __pfx___sys_bpf+0x10/0x10 [ 130.100580][ T6441] ? __schedule+0xe5d/0x5730 [ 130.101795][ T6441] ? __fget_files+0x23a/0x3f0 [ 130.102998][ T6441] ? do_futex+0x123/0x350 [ 130.104089][ T6441] ? __pfx_do_futex+0x10/0x10 [ 130.105275][ T6441] ? xfd_validate_state+0x5d/0x180 [ 130.106537][ T6441] ? rcu_is_watching+0x12/0xc0 [ 130.107742][ T6441] __x64_sys_bpf+0x78/0xc0 [ 130.108883][ T6441] ? lockdep_hardirqs_on+0x7c/0x110 [ 130.110182][ T6441] do_syscall_64+0xcd/0x250 [ 130.111358][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.112847][ T6441] RIP: 0033:0x7f800db7e719 [ 130.113949][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.118624][ T6441] RSP: 002b:00007f800e9b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 130.120713][ T6441] RAX: ffffffffffffffda RBX: 00007f800dd36058 RCX: 00007f800db7e719 [ 130.122712][ T6441] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 130.124721][ T6441] RBP: 00007f800dbf132e R08: 0000000000000000 R09: 0000000000000000 [ 130.126796][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.128851][ T6441] R13: 0000000000000000 R14: 00007f800dd36058 R15: 00007fffcd7e8d08 [ 130.130931][ T6441] [ 130.131853][ T6441] BUG: Bad page state in process syz.2.108 pfn:4ad56 [ 130.133545][ T6441] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804ad57e00 pfn:0x4ad56 [ 130.136079][ T6441] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 130.137913][ T6441] raw: 00fff00000000000 dead000000000040 ffff88803fdac000 0000000000000000 [ 130.140048][ T6441] raw: ffff88804ad57e00 0000000000000001 00000000ffffffff 0000000000000000 [ 130.142188][ T6441] page dumped because: page_pool leak [ 130.143506][ T6441] page_owner tracks the page as allocated [ 130.144951][ T6441] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6441, tgid 6432 (syz.2.108), ts 124609063337, free_ts 124584014325 [ 130.149145][ T6441] post_alloc_hook+0x2d1/0x350 [ 130.150371][ T6441] get_page_from_freelist+0x101e/0x3070 [ 130.151718][ T6441] __alloc_pages_noprof+0x223/0x25a0 [ 130.153052][ T6441] alloc_pages_bulk_noprof+0x77c/0x1110 [ 130.154445][ T6441] __page_pool_alloc_pages_slow+0x18f/0x770 [ 130.155939][ T6441] page_pool_alloc_netmem+0xc4/0x160 [ 130.157301][ T6441] page_pool_alloc_pages+0x1a/0x60 [ 130.158599][ T6441] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 130.160122][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 130.161497][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 130.162826][ T6441] __sys_bpf+0xfc6/0x49a0 [ 130.163901][ T6441] __x64_sys_bpf+0x78/0xc0 [ 130.165036][ T6441] do_syscall_64+0xcd/0x250 [ 130.166244][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.167725][ T6441] page last free pid 6429 tgid 6428 stack trace: [ 130.169277][ T6441] free_unref_page+0x5f4/0xdc0 [ 130.170473][ T6441] __folio_put+0x30d/0x3d0 [ 130.171599][ T6441] put_page+0x21e/0x280 [ 130.172616][ T6441] page_pool_return_page+0x400/0x520 [ 130.173974][ T6441] page_pool_release+0xf4/0x7d0 [ 130.175187][ T6441] page_pool_destroy+0x10a/0x4c0 [ 130.176492][ T6441] bpf_test_run_xdp_live+0x3a1/0x500 [ 130.177838][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 130.179179][ T6441] __sys_bpf+0xfc6/0x49a0 [ 130.180285][ T6441] __x64_sys_bpf+0x78/0xc0 [ 130.181696][ T6441] do_syscall_64+0xcd/0x250 [ 130.182987][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.184578][ T6441] Modules linked in: [ 130.185611][ T6441] CPU: 3 UID: 0 PID: 6441 Comm: syz.2.108 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 130.188726][ T6441] Tainted: [B]=BAD_PAGE [ 130.189823][ T6441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 130.192514][ T6441] Call Trace: [ 130.193366][ T6441] [ 130.194209][ T6441] dump_stack_lvl+0x16c/0x1f0 [ 130.195387][ T6441] bad_page+0xb3/0x1f0 [ 130.196442][ T6441] ? __pfx_bad_page+0x10/0x10 [ 130.197659][ T6441] ? page_bad_reason+0x9d/0x1e0 [ 130.198873][ T6441] free_unref_page+0x657/0xdc0 [ 130.200074][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 130.201575][ T6441] ? __phys_addr+0xc6/0x150 [ 130.202690][ T6441] skb_free_head+0xa0/0x1d0 [ 130.203819][ T6441] skb_release_data+0x560/0x730 [ 130.205011][ T6441] sk_skb_reason_drop+0x129/0x1a0 [ 130.206259][ T6441] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 130.207906][ T6441] ? kernel_text_address+0x8d/0x100 [ 130.209201][ T6441] ? hlock_class+0x4e/0x130 [ 130.210326][ T6441] ? __lock_acquire+0x163e/0x3ce0 [ 130.211593][ T6441] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 130.213340][ T6441] ? rcu_is_watching+0x12/0xc0 [ 130.214536][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 130.216053][ T6441] __netif_receive_skb_list_core+0x357/0x950 [ 130.217544][ T6441] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 130.219135][ T6441] ? trace_lock_acquire+0x14a/0x1d0 [ 130.220427][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 130.221962][ T6441] ? lock_acquire+0x2f/0xb0 [ 130.223118][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 130.224782][ T6441] netif_receive_skb_list_internal+0x753/0xdb0 [ 130.226470][ T6441] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 130.228105][ T6441] ? __pfx_eth_type_trans+0x10/0x10 [ 130.229430][ T6441] ? __build_skb_around+0x278/0x3b0 [ 130.230783][ T6441] netif_receive_skb_list+0x4f/0x4a0 [ 130.232184][ T6441] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 130.233739][ T6441] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 130.235382][ T6441] ? bpf_test_timer_continue+0x150/0x3d0 [ 130.236751][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 130.238087][ T6441] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 130.239530][ T6441] ? try_to_wake_up+0xc35/0x14f0 [ 130.240764][ T6441] ? __pfx_try_to_wake_up+0x10/0x10 [ 130.242105][ T6441] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 130.243568][ T6441] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 130.244864][ T6441] ? 0xffffffffa0004340 [ 130.245923][ T6441] ? 0xffffffffa0004340 [ 130.246982][ T6441] ? 0xffffffffa0004340 [ 130.248029][ T6441] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 130.249465][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 130.250755][ T6441] ? lock_acquire+0x2f/0xb0 [ 130.251909][ T6441] ? __fget_files+0x40/0x3f0 [ 130.253050][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 130.254522][ T6441] ? fput+0x30/0x390 [ 130.255490][ T6441] ? __bpf_prog_get+0xa0/0x290 [ 130.256686][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 130.258153][ T6441] __sys_bpf+0xfc6/0x49a0 [ 130.259252][ T6441] ? __pfx_futex_wake+0x10/0x10 [ 130.260479][ T6441] ? finish_task_switch.isra.0+0x217/0xcc0 [ 130.262006][ T6441] ? __pfx___sys_bpf+0x10/0x10 [ 130.263235][ T6441] ? __schedule+0xe5d/0x5730 [ 130.264428][ T6441] ? __fget_files+0x23a/0x3f0 [ 130.265619][ T6441] ? do_futex+0x123/0x350 [ 130.266697][ T6441] ? __pfx_do_futex+0x10/0x10 [ 130.267883][ T6441] ? xfd_validate_state+0x5d/0x180 [ 130.269138][ T6441] ? rcu_is_watching+0x12/0xc0 [ 130.270317][ T6441] __x64_sys_bpf+0x78/0xc0 [ 130.271454][ T6441] ? lockdep_hardirqs_on+0x7c/0x110 [ 130.272711][ T6441] do_syscall_64+0xcd/0x250 [ 130.273852][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.275384][ T6441] RIP: 0033:0x7f800db7e719 [ 130.276511][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.281290][ T6441] RSP: 002b:00007f800e9b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 130.283353][ T6441] RAX: ffffffffffffffda RBX: 00007f800dd36058 RCX: 00007f800db7e719 [ 130.285328][ T6441] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 130.287343][ T6441] RBP: 00007f800dbf132e R08: 0000000000000000 R09: 0000000000000000 [ 130.289310][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.291259][ T6441] R13: 0000000000000000 R14: 00007f800dd36058 R15: 00007fffcd7e8d08 [ 130.293556][ T6441] [ 130.294665][ T6441] BUG: Bad page state in process syz.2.108 pfn:29c63 [ 130.296407][ T6441] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2 pfn:0x29c63 [ 130.298640][ T6441] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 130.300401][ T6441] raw: 00fff00000000000 dead000000000040 ffff88803fdac000 0000000000000000 [ 130.302571][ T6441] raw: 0000000000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 130.304659][ T6441] page dumped because: page_pool leak [ 130.305992][ T6441] page_owner tracks the page as allocated [ 130.307451][ T6441] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6441, tgid 6432 (syz.2.108), ts 124609058973, free_ts 124584017998 [ 130.311792][ T6441] post_alloc_hook+0x2d1/0x350 [ 130.313051][ T6441] get_page_from_freelist+0x101e/0x3070 [ 130.314516][ T6441] __alloc_pages_noprof+0x223/0x25a0 [ 130.315862][ T6441] alloc_pages_bulk_noprof+0x77c/0x1110 [ 130.317280][ T6441] __page_pool_alloc_pages_slow+0x18f/0x770 [ 130.318777][ T6441] page_pool_alloc_netmem+0xc4/0x160 [ 130.320096][ T6441] page_pool_alloc_pages+0x1a/0x60 [ 130.321436][ T6441] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 130.323010][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 130.324331][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 130.325670][ T6441] __sys_bpf+0xfc6/0x49a0 [ 130.326816][ T6441] __x64_sys_bpf+0x78/0xc0 [ 130.327937][ T6441] do_syscall_64+0xcd/0x250 [ 130.329095][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.330591][ T6441] page last free pid 6429 tgid 6428 stack trace: [ 130.332141][ T6441] free_unref_page+0x5f4/0xdc0 [ 130.333330][ T6441] __folio_put+0x30d/0x3d0 [ 130.334455][ T6441] put_page+0x21e/0x280 [ 130.335471][ T6441] page_pool_return_page+0x400/0x520 [ 130.336817][ T6441] page_pool_release+0xf4/0x7d0 [ 130.338060][ T6441] page_pool_destroy+0x10a/0x4c0 [ 130.339314][ T6441] bpf_test_run_xdp_live+0x3a1/0x500 [ 130.340680][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 130.342058][ T6441] __sys_bpf+0xfc6/0x49a0 [ 130.343148][ T6441] __x64_sys_bpf+0x78/0xc0 [ 130.344251][ T6441] do_syscall_64+0xcd/0x250 [ 130.345391][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.346949][ T6441] Modules linked in: [ 130.347941][ T6441] CPU: 3 UID: 0 PID: 6441 Comm: syz.2.108 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 130.350915][ T6441] Tainted: [B]=BAD_PAGE [ 130.351927][ T6441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 130.354578][ T6441] Call Trace: [ 130.355423][ T6441] [ 130.356154][ T6441] dump_stack_lvl+0x16c/0x1f0 [ 130.357393][ T6441] bad_page+0xb3/0x1f0 [ 130.358431][ T6441] ? __pfx_bad_page+0x10/0x10 [ 130.359587][ T6441] ? page_bad_reason+0x9d/0x1e0 [ 130.360807][ T6441] free_unref_page+0x657/0xdc0 [ 130.362020][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 130.363483][ T6441] ? __phys_addr+0xc6/0x150 [ 130.364660][ T6441] skb_free_head+0xa0/0x1d0 [ 130.365866][ T6441] skb_release_data+0x560/0x730 [ 130.367147][ T6441] sk_skb_reason_drop+0x129/0x1a0 [ 130.368466][ T6441] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 130.370209][ T6441] ? kernel_text_address+0x8d/0x100 [ 130.371569][ T6441] ? hlock_class+0x4e/0x130 [ 130.372764][ T6441] ? __lock_acquire+0x163e/0x3ce0 [ 130.374088][ T6441] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 130.375855][ T6441] ? rcu_is_watching+0x12/0xc0 [ 130.377053][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 130.378573][ T6441] __netif_receive_skb_list_core+0x357/0x950 [ 130.380093][ T6441] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 130.381744][ T6441] ? trace_lock_acquire+0x14a/0x1d0 [ 130.383057][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 130.384657][ T6441] ? lock_acquire+0x2f/0xb0 [ 130.385821][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 130.387377][ T6441] netif_receive_skb_list_internal+0x753/0xdb0 [ 130.388937][ T6441] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 130.390618][ T6441] ? __pfx_eth_type_trans+0x10/0x10 [ 130.391927][ T6441] ? __build_skb_around+0x278/0x3b0 [ 130.393261][ T6441] netif_receive_skb_list+0x4f/0x4a0 [ 130.394592][ T6441] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 130.396140][ T6441] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 130.397782][ T6441] ? bpf_test_timer_continue+0x150/0x3d0 [ 130.399146][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 130.400492][ T6441] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 130.401965][ T6441] ? try_to_wake_up+0xc35/0x14f0 [ 130.403218][ T6441] ? __pfx_try_to_wake_up+0x10/0x10 [ 130.404544][ T6441] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 130.406038][ T6441] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 130.407377][ T6441] ? 0xffffffffa0004340 [ 130.408414][ T6441] ? 0xffffffffa0004340 [ 130.409431][ T6441] ? 0xffffffffa0004340 [ 130.410465][ T6441] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 130.411971][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 130.413323][ T6441] ? lock_acquire+0x2f/0xb0 [ 130.414488][ T6441] ? __fget_files+0x40/0x3f0 [ 130.415656][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 130.417114][ T6441] ? fput+0x30/0x390 [ 130.418145][ T6441] ? __bpf_prog_get+0xa0/0x290 [ 130.419357][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 130.420814][ T6441] __sys_bpf+0xfc6/0x49a0 [ 130.421962][ T6441] ? __pfx_futex_wake+0x10/0x10 [ 130.423200][ T6441] ? finish_task_switch.isra.0+0x217/0xcc0 [ 130.424678][ T6441] ? __pfx___sys_bpf+0x10/0x10 [ 130.425933][ T6441] ? __schedule+0xe5d/0x5730 [ 130.427146][ T6441] ? __fget_files+0x23a/0x3f0 [ 130.428378][ T6441] ? do_futex+0x123/0x350 [ 130.429516][ T6441] ? __pfx_do_futex+0x10/0x10 [ 130.430755][ T6441] ? xfd_validate_state+0x5d/0x180 [ 130.432068][ T6441] ? rcu_is_watching+0x12/0xc0 [ 130.433278][ T6441] __x64_sys_bpf+0x78/0xc0 [ 130.434398][ T6441] ? lockdep_hardirqs_on+0x7c/0x110 [ 130.435722][ T6441] do_syscall_64+0xcd/0x250 [ 130.436834][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.438336][ T6441] RIP: 0033:0x7f800db7e719 [ 130.439452][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.444177][ T6441] RSP: 002b:00007f800e9b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 130.446282][ T6441] RAX: ffffffffffffffda RBX: 00007f800dd36058 RCX: 00007f800db7e719 [ 130.448247][ T6441] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 130.450228][ T6441] RBP: 00007f800dbf132e R08: 0000000000000000 R09: 0000000000000000 [ 130.452195][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.454182][ T6441] R13: 0000000000000000 R14: 00007f800dd36058 R15: 00007fffcd7e8d08 [ 130.456143][ T6441] [ 130.457009][ T6441] BUG: Bad page state in process syz.2.108 pfn:31d6b [ 130.458711][ T6441] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x31d6b [ 130.460878][ T6441] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 130.462894][ T6441] raw: 00fff00000000000 dead000000000040 ffff88803fdac000 0000000000000000 [ 130.465348][ T6441] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 130.467597][ T6441] page dumped because: page_pool leak [ 130.468962][ T6441] page_owner tracks the page as allocated [ 130.470374][ T6441] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6441, tgid 6432 (syz.2.108), ts 124609054286, free_ts 124584021829 [ 130.474654][ T6441] post_alloc_hook+0x2d1/0x350 [ 130.475909][ T6441] get_page_from_freelist+0x101e/0x3070 [ 130.477377][ T6441] __alloc_pages_noprof+0x223/0x25a0 [ 130.478707][ T6441] alloc_pages_bulk_noprof+0x77c/0x1110 [ 130.480114][ T6441] __page_pool_alloc_pages_slow+0x18f/0x770 [ 130.481670][ T6441] page_pool_alloc_netmem+0xc4/0x160 [ 130.483220][ T6441] page_pool_alloc_pages+0x1a/0x60 [ 130.484563][ T6441] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 130.486270][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 130.487662][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 130.489037][ T6441] __sys_bpf+0xfc6/0x49a0 [ 130.490132][ T6441] __x64_sys_bpf+0x78/0xc0 [ 130.491255][ T6441] do_syscall_64+0xcd/0x250 [ 130.492384][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.493876][ T6441] page last free pid 6429 tgid 6428 stack trace: [ 130.495422][ T6441] free_unref_page+0x5f4/0xdc0 [ 130.496687][ T6441] __folio_put+0x30d/0x3d0 [ 130.497942][ T6441] put_page+0x21e/0x280 [ 130.498978][ T6441] page_pool_return_page+0x400/0x520 [ 130.500303][ T6441] page_pool_release+0xf4/0x7d0 [ 130.501663][ T6441] page_pool_destroy+0x10a/0x4c0 [ 130.502885][ T6441] bpf_test_run_xdp_live+0x3a1/0x500 [ 130.504207][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 130.505535][ T6441] __sys_bpf+0xfc6/0x49a0 [ 130.506668][ T6441] __x64_sys_bpf+0x78/0xc0 [ 130.507827][ T6441] do_syscall_64+0xcd/0x250 [ 130.508959][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.510405][ T6441] Modules linked in: [ 130.511371][ T6441] CPU: 3 UID: 0 PID: 6441 Comm: syz.2.108 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 130.514472][ T6441] Tainted: [B]=BAD_PAGE [ 130.515489][ T6441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 130.518120][ T6441] Call Trace: [ 130.518945][ T6441] [ 130.519688][ T6441] dump_stack_lvl+0x16c/0x1f0 [ 130.520865][ T6441] bad_page+0xb3/0x1f0 [ 130.521896][ T6441] ? __pfx_bad_page+0x10/0x10 [ 130.523088][ T6441] ? page_bad_reason+0x9d/0x1e0 [ 130.524279][ T6441] free_unref_page+0x657/0xdc0 [ 130.525460][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 130.526988][ T6441] ? __phys_addr+0xc6/0x150 [ 130.528132][ T6441] skb_free_head+0xa0/0x1d0 [ 130.529263][ T6441] skb_release_data+0x560/0x730 [ 130.530460][ T6441] sk_skb_reason_drop+0x129/0x1a0 [ 130.531706][ T6441] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 130.533321][ T6441] ? kernel_text_address+0x8d/0x100 [ 130.534616][ T6441] ? hlock_class+0x4e/0x130 [ 130.535728][ T6441] ? __lock_acquire+0x163e/0x3ce0 [ 130.536974][ T6441] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 130.538686][ T6441] ? rcu_is_watching+0x12/0xc0 [ 130.539861][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 130.541379][ T6441] __netif_receive_skb_list_core+0x357/0x950 [ 130.542909][ T6441] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 130.544558][ T6441] ? trace_lock_acquire+0x14a/0x1d0 [ 130.545900][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 130.547469][ T6441] ? lock_acquire+0x2f/0xb0 [ 130.548595][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 130.550175][ T6441] netif_receive_skb_list_internal+0x753/0xdb0 [ 130.551682][ T6441] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 130.553318][ T6441] ? __pfx_eth_type_trans+0x10/0x10 [ 130.554604][ T6441] ? __build_skb_around+0x278/0x3b0 [ 130.555879][ T6441] netif_receive_skb_list+0x4f/0x4a0 [ 130.557227][ T6441] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 130.558760][ T6441] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 130.560381][ T6441] ? bpf_test_timer_continue+0x150/0x3d0 [ 130.561762][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 130.563046][ T6441] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 130.564490][ T6441] ? try_to_wake_up+0xc35/0x14f0 [ 130.565696][ T6441] ? __pfx_try_to_wake_up+0x10/0x10 [ 130.566963][ T6441] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 130.568433][ T6441] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 130.569750][ T6441] ? 0xffffffffa0004340 [ 130.570783][ T6441] ? 0xffffffffa0004340 [ 130.571813][ T6441] ? 0xffffffffa0004340 [ 130.572841][ T6441] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 130.574334][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 130.575670][ T6441] ? lock_acquire+0x2f/0xb0 [ 130.576797][ T6441] ? __fget_files+0x40/0x3f0 [ 130.577946][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 130.579386][ T6441] ? fput+0x30/0x390 [ 130.580357][ T6441] ? __bpf_prog_get+0xa0/0x290 [ 130.581564][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 130.582992][ T6441] __sys_bpf+0xfc6/0x49a0 [ 130.584078][ T6441] ? __pfx_futex_wake+0x10/0x10 [ 130.585332][ T6441] ? finish_task_switch.isra.0+0x217/0xcc0 [ 130.586795][ T6441] ? __pfx___sys_bpf+0x10/0x10 [ 130.588017][ T6441] ? __schedule+0xe5d/0x5730 [ 130.589224][ T6441] ? __fget_files+0x23a/0x3f0 [ 130.590414][ T6441] ? do_futex+0x123/0x350 [ 130.591527][ T6441] ? __pfx_do_futex+0x10/0x10 [ 130.592773][ T6441] ? xfd_validate_state+0x5d/0x180 [ 130.594141][ T6441] ? rcu_is_watching+0x12/0xc0 [ 130.595417][ T6441] __x64_sys_bpf+0x78/0xc0 [ 130.596596][ T6441] ? lockdep_hardirqs_on+0x7c/0x110 [ 130.597969][ T6441] do_syscall_64+0xcd/0x250 [ 130.599172][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.600824][ T6441] RIP: 0033:0x7f800db7e719 [ 130.602055][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.606852][ T6441] RSP: 002b:00007f800e9b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 130.608955][ T6441] RAX: ffffffffffffffda RBX: 00007f800dd36058 RCX: 00007f800db7e719 [ 130.610958][ T6441] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 130.612972][ T6441] RBP: 00007f800dbf132e R08: 0000000000000000 R09: 0000000000000000 [ 130.615076][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.617050][ T6441] R13: 0000000000000000 R14: 00007f800dd36058 R15: 00007fffcd7e8d08 [ 130.619058][ T6441] [ 130.619956][ T6441] BUG: Bad page state in process syz.2.108 pfn:2373e [ 130.621676][ T6441] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802373fe00 pfn:0x2373e [ 130.624290][ T6441] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 130.626102][ T6441] raw: 00fff00000000000 dead000000000040 ffff88803fdac000 0000000000000000 [ 130.628468][ T6441] raw: ffff88802373fe00 0000000000000001 00000000ffffffff 0000000000000000 [ 130.630662][ T6441] page dumped because: page_pool leak [ 130.632010][ T6441] page_owner tracks the page as allocated [ 130.633436][ T6441] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6441, tgid 6432 (syz.2.108), ts 124609050017, free_ts 124584028661 [ 130.637681][ T6441] post_alloc_hook+0x2d1/0x350 [ 130.638889][ T6441] get_page_from_freelist+0x101e/0x3070 [ 130.640282][ T6441] __alloc_pages_noprof+0x223/0x25a0 [ 130.641681][ T6441] alloc_pages_bulk_noprof+0x77c/0x1110 [ 130.643046][ T6441] __page_pool_alloc_pages_slow+0x18f/0x770 [ 130.644530][ T6441] page_pool_alloc_netmem+0xc4/0x160 [ 130.645857][ T6441] page_pool_alloc_pages+0x1a/0x60 [ 130.647302][ T6441] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 130.648904][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 130.650416][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 130.651919][ T6441] __sys_bpf+0xfc6/0x49a0 [ 130.653044][ T6441] __x64_sys_bpf+0x78/0xc0 [ 130.654237][ T6441] do_syscall_64+0xcd/0x250 [ 130.655399][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.656977][ T6441] page last free pid 6429 tgid 6428 stack trace: [ 130.658533][ T6441] free_unref_page+0x5f4/0xdc0 [ 130.659991][ T6441] __folio_put+0x30d/0x3d0 [ 130.661145][ T6441] put_page+0x21e/0x280 [ 130.662221][ T6441] page_pool_return_page+0x400/0x520 [ 130.663556][ T6441] page_pool_release+0xf4/0x7d0 [ 130.664789][ T6441] page_pool_destroy+0x10a/0x4c0 [ 130.666148][ T6441] bpf_test_run_xdp_live+0x3a1/0x500 [ 130.667609][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 130.668953][ T6441] __sys_bpf+0xfc6/0x49a0 [ 130.670061][ T6441] __x64_sys_bpf+0x78/0xc0 [ 130.671207][ T6441] do_syscall_64+0xcd/0x250 [ 130.672361][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.673868][ T6441] Modules linked in: [ 130.674848][ T6441] CPU: 3 UID: 0 PID: 6441 Comm: syz.2.108 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 130.677814][ T6441] Tainted: [B]=BAD_PAGE [ 130.678893][ T6441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 130.681648][ T6441] Call Trace: [ 130.682510][ T6441] [ 130.683251][ T6441] dump_stack_lvl+0x16c/0x1f0 [ 130.684422][ T6441] bad_page+0xb3/0x1f0 [ 130.685451][ T6441] ? __pfx_bad_page+0x10/0x10 [ 130.686662][ T6441] ? page_bad_reason+0x9d/0x1e0 [ 130.687890][ T6441] free_unref_page+0x657/0xdc0 [ 130.689098][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 130.690622][ T6441] ? __phys_addr+0xc6/0x150 [ 130.691801][ T6441] skb_free_head+0xa0/0x1d0 [ 130.692983][ T6441] skb_release_data+0x560/0x730 [ 130.694271][ T6441] sk_skb_reason_drop+0x129/0x1a0 [ 130.695543][ T6441] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 130.697223][ T6441] ? kernel_text_address+0x8d/0x100 [ 130.698543][ T6441] ? hlock_class+0x4e/0x130 [ 130.699689][ T6441] ? __lock_acquire+0x163e/0x3ce0 [ 130.700973][ T6441] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 130.702934][ T6441] ? rcu_is_watching+0x12/0xc0 [ 130.704174][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 130.705731][ T6441] __netif_receive_skb_list_core+0x357/0x950 [ 130.707283][ T6441] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 130.709086][ T6441] ? trace_lock_acquire+0x14a/0x1d0 [ 130.710438][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 130.712118][ T6441] ? lock_acquire+0x2f/0xb0 [ 130.713339][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 130.714996][ T6441] netif_receive_skb_list_internal+0x753/0xdb0 [ 130.716619][ T6441] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 130.718357][ T6441] ? __pfx_eth_type_trans+0x10/0x10 [ 130.719734][ T6441] ? __build_skb_around+0x278/0x3b0 [ 130.721128][ T6441] netif_receive_skb_list+0x4f/0x4a0 [ 130.722493][ T6441] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 130.724066][ T6441] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 130.725733][ T6441] ? bpf_test_timer_continue+0x150/0x3d0 [ 130.727159][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 130.728478][ T6441] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 130.729970][ T6441] ? try_to_wake_up+0xc35/0x14f0 [ 130.731208][ T6441] ? __pfx_try_to_wake_up+0x10/0x10 [ 130.732509][ T6441] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 130.733995][ T6441] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 130.735313][ T6441] ? 0xffffffffa0004340 [ 130.736365][ T6441] ? 0xffffffffa0004340 [ 130.737439][ T6441] ? 0xffffffffa0004340 [ 130.738496][ T6441] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 130.739980][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 130.741311][ T6441] ? lock_acquire+0x2f/0xb0 [ 130.742469][ T6441] ? __fget_files+0x40/0x3f0 [ 130.743644][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 130.745124][ T6441] ? fput+0x30/0x390 [ 130.746155][ T6441] ? __bpf_prog_get+0xa0/0x290 [ 130.747374][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 130.748844][ T6441] __sys_bpf+0xfc6/0x49a0 [ 130.749948][ T6441] ? __pfx_futex_wake+0x10/0x10 [ 130.751181][ T6441] ? finish_task_switch.isra.0+0x217/0xcc0 [ 130.752680][ T6441] ? __pfx___sys_bpf+0x10/0x10 [ 130.753941][ T6441] ? __schedule+0xe5d/0x5730 [ 130.755117][ T6441] ? __fget_files+0x23a/0x3f0 [ 130.756314][ T6441] ? do_futex+0x123/0x350 [ 130.757432][ T6441] ? __pfx_do_futex+0x10/0x10 [ 130.758675][ T6441] ? xfd_validate_state+0x5d/0x180 [ 130.759945][ T6441] ? rcu_is_watching+0x12/0xc0 [ 130.761186][ T6441] __x64_sys_bpf+0x78/0xc0 [ 130.762346][ T6441] ? lockdep_hardirqs_on+0x7c/0x110 [ 130.763668][ T6441] do_syscall_64+0xcd/0x250 [ 130.764828][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.766357][ T6441] RIP: 0033:0x7f800db7e719 [ 130.767469][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.772243][ T6441] RSP: 002b:00007f800e9b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 130.774406][ T6441] RAX: ffffffffffffffda RBX: 00007f800dd36058 RCX: 00007f800db7e719 [ 130.776462][ T6441] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 130.778524][ T6441] RBP: 00007f800dbf132e R08: 0000000000000000 R09: 0000000000000000 [ 130.780573][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.782637][ T6441] R13: 0000000000000000 R14: 00007f800dd36058 R15: 00007fffcd7e8d08 [ 130.784633][ T6441] [ 130.785633][ T6441] BUG: Bad page state in process syz.2.108 pfn:30860 [ 130.787393][ T6441] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888030860948 pfn:0x30860 [ 130.789899][ T6441] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 130.791697][ T6441] raw: 00fff00000000000 dead000000000040 ffff88803fdac000 0000000000000000 [ 130.794002][ T6441] raw: ffff888030860948 0000000000000001 00000000ffffffff 0000000000000000 [ 130.796166][ T6441] page dumped because: page_pool leak [ 130.797614][ T6441] page_owner tracks the page as allocated [ 130.799041][ T6441] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6441, tgid 6432 (syz.2.108), ts 124609045691, free_ts 124584032552 [ 130.803651][ T6441] post_alloc_hook+0x2d1/0x350 [ 130.804857][ T6441] get_page_from_freelist+0x101e/0x3070 [ 130.806385][ T6441] __alloc_pages_noprof+0x223/0x25a0 [ 130.807726][ T6441] alloc_pages_bulk_noprof+0x77c/0x1110 [ 130.809223][ T6441] __page_pool_alloc_pages_slow+0x18f/0x770 [ 130.810734][ T6441] page_pool_alloc_netmem+0xc4/0x160 [ 130.812046][ T6441] page_pool_alloc_pages+0x1a/0x60 [ 130.813362][ T6441] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 130.814912][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 130.816294][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 130.817667][ T6441] __sys_bpf+0xfc6/0x49a0 [ 130.818744][ T6441] __x64_sys_bpf+0x78/0xc0 [ 130.819858][ T6441] do_syscall_64+0xcd/0x250 [ 130.821035][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.822519][ T6441] page last free pid 6429 tgid 6428 stack trace: [ 130.824109][ T6441] free_unref_page+0x5f4/0xdc0 [ 130.825312][ T6441] __folio_put+0x30d/0x3d0 [ 130.826490][ T6441] put_page+0x21e/0x280 [ 130.827574][ T6441] page_pool_return_page+0x400/0x520 [ 130.828888][ T6441] page_pool_release+0xf4/0x7d0 [ 130.830124][ T6441] page_pool_destroy+0x10a/0x4c0 [ 130.831422][ T6441] bpf_test_run_xdp_live+0x3a1/0x500 [ 130.832805][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 130.834213][ T6441] __sys_bpf+0xfc6/0x49a0 [ 130.835343][ T6441] __x64_sys_bpf+0x78/0xc0 [ 130.836592][ T6441] do_syscall_64+0xcd/0x250 [ 130.837795][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.839342][ T6441] Modules linked in: [ 130.840374][ T6441] CPU: 3 UID: 0 PID: 6441 Comm: syz.2.108 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 130.843301][ T6441] Tainted: [B]=BAD_PAGE [ 130.844359][ T6441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 130.847013][ T6441] Call Trace: [ 130.847833][ T6441] [ 130.848548][ T6441] dump_stack_lvl+0x16c/0x1f0 [ 130.849752][ T6441] bad_page+0xb3/0x1f0 [ 130.850790][ T6441] ? __pfx_bad_page+0x10/0x10 [ 130.851980][ T6441] ? page_bad_reason+0x9d/0x1e0 [ 130.853203][ T6441] free_unref_page+0x657/0xdc0 [ 130.854436][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 130.855941][ T6441] ? __phys_addr+0xc6/0x150 [ 130.857099][ T6441] skb_free_head+0xa0/0x1d0 [ 130.858250][ T6441] skb_release_data+0x560/0x730 [ 130.859490][ T6441] sk_skb_reason_drop+0x129/0x1a0 [ 130.860781][ T6441] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 130.862477][ T6441] ? kernel_text_address+0x8d/0x100 [ 130.863767][ T6441] ? hlock_class+0x4e/0x130 [ 130.864926][ T6441] ? __lock_acquire+0x163e/0x3ce0 [ 130.866193][ T6441] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 130.867987][ T6441] ? rcu_is_watching+0x12/0xc0 [ 130.869184][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 130.870674][ T6441] __netif_receive_skb_list_core+0x357/0x950 [ 130.872173][ T6441] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 130.873762][ T6441] ? trace_lock_acquire+0x14a/0x1d0 [ 130.875082][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 130.876660][ T6441] ? lock_acquire+0x2f/0xb0 [ 130.877818][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 130.879376][ T6441] netif_receive_skb_list_internal+0x753/0xdb0 [ 130.880908][ T6441] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 130.882557][ T6441] ? __pfx_eth_type_trans+0x10/0x10 [ 130.883855][ T6441] ? __build_skb_around+0x278/0x3b0 [ 130.885191][ T6441] netif_receive_skb_list+0x4f/0x4a0 [ 130.886507][ T6441] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 130.888078][ T6441] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 130.889782][ T6441] ? bpf_test_timer_continue+0x150/0x3d0 [ 130.891216][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 130.892520][ T6441] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 130.894209][ T6441] ? try_to_wake_up+0xc35/0x14f0 [ 130.895435][ T6441] ? __pfx_try_to_wake_up+0x10/0x10 [ 130.896768][ T6441] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 130.898390][ T6441] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 130.899793][ T6441] ? 0xffffffffa0004340 [ 130.900837][ T6441] ? 0xffffffffa0004340 [ 130.901907][ T6441] ? 0xffffffffa0004340 [ 130.902943][ T6441] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 130.904463][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 130.905797][ T6441] ? lock_acquire+0x2f/0xb0 [ 130.906943][ T6441] ? __fget_files+0x40/0x3f0 [ 130.908199][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 130.909754][ T6441] ? fput+0x30/0x390 [ 130.910770][ T6441] ? __bpf_prog_get+0xa0/0x290 [ 130.911964][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 130.913400][ T6441] __sys_bpf+0xfc6/0x49a0 [ 130.914528][ T6441] ? __pfx_futex_wake+0x10/0x10 [ 130.915778][ T6441] ? finish_task_switch.isra.0+0x217/0xcc0 [ 130.917268][ T6441] ? __pfx___sys_bpf+0x10/0x10 [ 130.918476][ T6441] ? __schedule+0xe5d/0x5730 [ 130.919667][ T6441] ? __fget_files+0x23a/0x3f0 [ 130.920863][ T6441] ? do_futex+0x123/0x350 [ 130.921968][ T6441] ? __pfx_do_futex+0x10/0x10 [ 130.923152][ T6441] ? xfd_validate_state+0x5d/0x180 [ 130.924463][ T6441] ? rcu_is_watching+0x12/0xc0 [ 130.925663][ T6441] __x64_sys_bpf+0x78/0xc0 [ 130.926794][ T6441] ? lockdep_hardirqs_on+0x7c/0x110 [ 130.928121][ T6441] do_syscall_64+0xcd/0x250 [ 130.929283][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.930792][ T6441] RIP: 0033:0x7f800db7e719 [ 130.931922][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.936713][ T6441] RSP: 002b:00007f800e9b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 130.938800][ T6441] RAX: ffffffffffffffda RBX: 00007f800dd36058 RCX: 00007f800db7e719 [ 130.940750][ T6441] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 130.942734][ T6441] RBP: 00007f800dbf132e R08: 0000000000000000 R09: 0000000000000000 [ 130.944642][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.946685][ T6441] R13: 0000000000000000 R14: 00007f800dd36058 R15: 00007fffcd7e8d08 [ 130.948827][ T6441] [ 130.949752][ T6441] BUG: Bad page state in process syz.2.108 pfn:323f0 [ 130.951523][ T6441] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880323f1e00 pfn:0x323f0 [ 130.954148][ T6441] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 130.956044][ T6441] raw: 00fff00000000000 dead000000000040 ffff88803fdac000 0000000000000000 [ 130.958316][ T6441] raw: ffff8880323f1e00 0000000000000001 00000000ffffffff 0000000000000000 [ 130.960445][ T6441] page dumped because: page_pool leak [ 130.961854][ T6441] page_owner tracks the page as allocated [ 130.963302][ T6441] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6441, tgid 6432 (syz.2.108), ts 124609040865, free_ts 124584035911 [ 130.967536][ T6441] post_alloc_hook+0x2d1/0x350 [ 130.968763][ T6441] get_page_from_freelist+0x101e/0x3070 [ 130.970165][ T6441] __alloc_pages_noprof+0x223/0x25a0 [ 130.971511][ T6441] alloc_pages_bulk_noprof+0x77c/0x1110 [ 130.972876][ T6441] __page_pool_alloc_pages_slow+0x18f/0x770 [ 130.974344][ T6441] page_pool_alloc_netmem+0xc4/0x160 [ 130.975681][ T6441] page_pool_alloc_pages+0x1a/0x60 [ 130.977018][ T6441] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 130.978545][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 130.979852][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 130.981238][ T6441] __sys_bpf+0xfc6/0x49a0 [ 130.982315][ T6441] __x64_sys_bpf+0x78/0xc0 [ 130.983413][ T6441] do_syscall_64+0xcd/0x250 [ 130.984551][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.986050][ T6441] page last free pid 6429 tgid 6428 stack trace: [ 130.987733][ T6441] free_unref_page+0x5f4/0xdc0 [ 130.988978][ T6441] __folio_put+0x30d/0x3d0 [ 130.990106][ T6441] put_page+0x21e/0x280 [ 130.991190][ T6441] page_pool_return_page+0x400/0x520 [ 130.992525][ T6441] page_pool_release+0xf4/0x7d0 [ 130.993729][ T6441] page_pool_destroy+0x10a/0x4c0 [ 130.994979][ T6441] bpf_test_run_xdp_live+0x3a1/0x500 [ 130.996355][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 130.997697][ T6441] __sys_bpf+0xfc6/0x49a0 [ 130.998791][ T6441] __x64_sys_bpf+0x78/0xc0 [ 130.999926][ T6441] do_syscall_64+0xcd/0x250 [ 131.001080][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.002581][ T6441] Modules linked in: [ 131.003615][ T6441] CPU: 3 UID: 0 PID: 6441 Comm: syz.2.108 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 131.006624][ T6441] Tainted: [B]=BAD_PAGE [ 131.007706][ T6441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 131.010489][ T6441] Call Trace: [ 131.011364][ T6441] [ 131.012140][ T6441] dump_stack_lvl+0x16c/0x1f0 [ 131.013343][ T6441] bad_page+0xb3/0x1f0 [ 131.014398][ T6441] ? __pfx_bad_page+0x10/0x10 [ 131.015624][ T6441] ? page_bad_reason+0x9d/0x1e0 [ 131.016824][ T6441] free_unref_page+0x657/0xdc0 [ 131.018006][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 131.019522][ T6441] ? __phys_addr+0xc6/0x150 [ 131.020667][ T6441] skb_free_head+0xa0/0x1d0 [ 131.021831][ T6441] skb_release_data+0x560/0x730 [ 131.023061][ T6441] sk_skb_reason_drop+0x129/0x1a0 [ 131.024313][ T6441] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 131.025929][ T6441] ? kernel_text_address+0x8d/0x100 [ 131.027203][ T6441] ? hlock_class+0x4e/0x130 [ 131.028475][ T6441] ? __lock_acquire+0x163e/0x3ce0 [ 131.029711][ T6441] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 131.031465][ T6441] ? rcu_is_watching+0x12/0xc0 [ 131.032677][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 131.034217][ T6441] __netif_receive_skb_list_core+0x357/0x950 [ 131.035724][ T6441] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 131.037347][ T6441] ? trace_lock_acquire+0x14a/0x1d0 [ 131.038675][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 131.040224][ T6441] ? lock_acquire+0x2f/0xb0 [ 131.041403][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 131.043008][ T6441] netif_receive_skb_list_internal+0x753/0xdb0 [ 131.044552][ T6441] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 131.046242][ T6441] ? __pfx_eth_type_trans+0x10/0x10 [ 131.047554][ T6441] ? __build_skb_around+0x278/0x3b0 [ 131.048876][ T6441] netif_receive_skb_list+0x4f/0x4a0 [ 131.050204][ T6441] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 131.051763][ T6441] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 131.053430][ T6441] ? bpf_test_timer_continue+0x150/0x3d0 [ 131.054822][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 131.056170][ T6441] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 131.057647][ T6441] ? try_to_wake_up+0xc35/0x14f0 [ 131.058892][ T6441] ? __pfx_try_to_wake_up+0x10/0x10 [ 131.060180][ T6441] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 131.061688][ T6441] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 131.063067][ T6441] ? 0xffffffffa0004340 [ 131.064159][ T6441] ? 0xffffffffa0004340 [ 131.065261][ T6441] ? 0xffffffffa0004340 [ 131.066356][ T6441] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 131.067901][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 131.069336][ T6441] ? lock_acquire+0x2f/0xb0 [ 131.070644][ T6441] ? __fget_files+0x40/0x3f0 [ 131.072039][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 131.073532][ T6441] ? fput+0x30/0x390 [ 131.074510][ T6441] ? __bpf_prog_get+0xa0/0x290 [ 131.075721][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 131.077162][ T6441] __sys_bpf+0xfc6/0x49a0 [ 131.078258][ T6441] ? __pfx_futex_wake+0x10/0x10 [ 131.079491][ T6441] ? finish_task_switch.isra.0+0x217/0xcc0 [ 131.080931][ T6441] ? __pfx___sys_bpf+0x10/0x10 [ 131.082128][ T6441] ? __schedule+0xe5d/0x5730 [ 131.083296][ T6441] ? __fget_files+0x23a/0x3f0 [ 131.084471][ T6441] ? do_futex+0x123/0x350 [ 131.085569][ T6441] ? __pfx_do_futex+0x10/0x10 [ 131.086759][ T6441] ? xfd_validate_state+0x5d/0x180 [ 131.088045][ T6441] ? rcu_is_watching+0x12/0xc0 [ 131.089256][ T6441] __x64_sys_bpf+0x78/0xc0 [ 131.090375][ T6441] ? lockdep_hardirqs_on+0x7c/0x110 [ 131.091641][ T6441] do_syscall_64+0xcd/0x250 [ 131.092760][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.094241][ T6441] RIP: 0033:0x7f800db7e719 [ 131.095389][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.100141][ T6441] RSP: 002b:00007f800e9b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 131.102255][ T6441] RAX: ffffffffffffffda RBX: 00007f800dd36058 RCX: 00007f800db7e719 [ 131.104247][ T6441] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 131.106208][ T6441] RBP: 00007f800dbf132e R08: 0000000000000000 R09: 0000000000000000 [ 131.108156][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.110134][ T6441] R13: 0000000000000000 R14: 00007f800dd36058 R15: 00007fffcd7e8d08 [ 131.112105][ T6441] [ 131.112989][ T6441] BUG: Bad page state in process syz.2.108 pfn:4d160 [ 131.114687][ T6441] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804d161e00 pfn:0x4d160 [ 131.117229][ T6441] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 131.119046][ T6441] raw: 00fff00000000000 dead000000000040 ffff88803fdac000 0000000000000000 [ 131.121251][ T6441] raw: ffff88804d161e00 0000000000000001 00000000ffffffff 0000000000000000 [ 131.123473][ T6441] page dumped because: page_pool leak [ 131.124873][ T6441] page_owner tracks the page as allocated [ 131.126425][ T6441] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6441, tgid 6432 (syz.2.108), ts 124609036543, free_ts 124584039316 [ 131.130763][ T6441] post_alloc_hook+0x2d1/0x350 [ 131.131972][ T6441] get_page_from_freelist+0x101e/0x3070 [ 131.133372][ T6441] __alloc_pages_noprof+0x223/0x25a0 [ 131.134718][ T6441] alloc_pages_bulk_noprof+0x77c/0x1110 [ 131.136119][ T6441] __page_pool_alloc_pages_slow+0x18f/0x770 [ 131.137680][ T6441] page_pool_alloc_netmem+0xc4/0x160 [ 131.139013][ T6441] page_pool_alloc_pages+0x1a/0x60 [ 131.140297][ T6441] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 131.141883][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 131.143219][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 131.144611][ T6441] __sys_bpf+0xfc6/0x49a0 [ 131.145723][ T6441] __x64_sys_bpf+0x78/0xc0 [ 131.146913][ T6441] do_syscall_64+0xcd/0x250 [ 131.148151][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.150071][ T6441] page last free pid 6429 tgid 6428 stack trace: [ 131.152141][ T6441] free_unref_page+0x5f4/0xdc0 [ 131.153534][ T6441] __folio_put+0x30d/0x3d0 [ 131.154673][ T6441] put_page+0x21e/0x280 [ 131.155731][ T6441] page_pool_return_page+0x400/0x520 [ 131.157137][ T6441] page_pool_release+0xf4/0x7d0 [ 131.158373][ T6441] page_pool_destroy+0x10a/0x4c0 [ 131.159635][ T6441] bpf_test_run_xdp_live+0x3a1/0x500 [ 131.160991][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 131.162352][ T6441] __sys_bpf+0xfc6/0x49a0 [ 131.163459][ T6441] __x64_sys_bpf+0x78/0xc0 [ 131.164580][ T6441] do_syscall_64+0xcd/0x250 [ 131.165741][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.167237][ T6441] Modules linked in: [ 131.168207][ T6441] CPU: 3 UID: 0 PID: 6441 Comm: syz.2.108 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 131.171194][ T6441] Tainted: [B]=BAD_PAGE [ 131.172237][ T6441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 131.174910][ T6441] Call Trace: [ 131.175765][ T6441] [ 131.176558][ T6441] dump_stack_lvl+0x16c/0x1f0 [ 131.177810][ T6441] bad_page+0xb3/0x1f0 [ 131.178895][ T6441] ? __pfx_bad_page+0x10/0x10 [ 131.180133][ T6441] ? page_bad_reason+0x9d/0x1e0 [ 131.181436][ T6441] free_unref_page+0x657/0xdc0 [ 131.182690][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 131.184250][ T6441] ? __phys_addr+0xc6/0x150 [ 131.185447][ T6441] skb_free_head+0xa0/0x1d0 [ 131.186603][ T6441] skb_release_data+0x560/0x730 [ 131.187827][ T6441] sk_skb_reason_drop+0x129/0x1a0 [ 131.189125][ T6441] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 131.190807][ T6441] ? kernel_text_address+0x8d/0x100 [ 131.192092][ T6441] ? hlock_class+0x4e/0x130 [ 131.193223][ T6441] ? __lock_acquire+0x163e/0x3ce0 [ 131.194479][ T6441] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 131.196252][ T6441] ? rcu_is_watching+0x12/0xc0 [ 131.197483][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 131.198988][ T6441] __netif_receive_skb_list_core+0x357/0x950 [ 131.200510][ T6441] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 131.202155][ T6441] ? trace_lock_acquire+0x14a/0x1d0 [ 131.203470][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 131.205077][ T6441] ? lock_acquire+0x2f/0xb0 [ 131.206240][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 131.207811][ T6441] netif_receive_skb_list_internal+0x753/0xdb0 [ 131.209376][ T6441] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 131.211019][ T6441] ? __pfx_eth_type_trans+0x10/0x10 [ 131.212349][ T6441] ? __build_skb_around+0x278/0x3b0 [ 131.213653][ T6441] netif_receive_skb_list+0x4f/0x4a0 [ 131.214970][ T6441] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 131.216545][ T6441] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 131.218216][ T6441] ? bpf_test_timer_continue+0x150/0x3d0 [ 131.219657][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 131.220994][ T6441] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 131.222462][ T6441] ? try_to_wake_up+0xc35/0x14f0 [ 131.223717][ T6441] ? __pfx_try_to_wake_up+0x10/0x10 [ 131.225013][ T6441] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 131.226512][ T6441] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 131.227865][ T6441] ? 0xffffffffa0004340 [ 131.228912][ T6441] ? 0xffffffffa0004340 [ 131.229962][ T6441] ? 0xffffffffa0004340 [ 131.231028][ T6441] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 131.232572][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 131.233936][ T6441] ? lock_acquire+0x2f/0xb0 [ 131.235111][ T6441] ? __fget_files+0x40/0x3f0 [ 131.236336][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 131.237873][ T6441] ? fput+0x30/0x390 [ 131.238909][ T6441] ? __bpf_prog_get+0xa0/0x290 [ 131.240167][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 131.241717][ T6441] __sys_bpf+0xfc6/0x49a0 [ 131.242859][ T6441] ? __pfx_futex_wake+0x10/0x10 [ 131.244131][ T6441] ? finish_task_switch.isra.0+0x217/0xcc0 [ 131.245609][ T6441] ? __pfx___sys_bpf+0x10/0x10 [ 131.246812][ T6441] ? __schedule+0xe5d/0x5730 [ 131.247967][ T6441] ? __fget_files+0x23a/0x3f0 [ 131.249172][ T6441] ? do_futex+0x123/0x350 [ 131.250286][ T6441] ? __pfx_do_futex+0x10/0x10 [ 131.251542][ T6441] ? xfd_validate_state+0x5d/0x180 [ 131.253161][ T6441] ? rcu_is_watching+0x12/0xc0 [ 131.254410][ T6441] __x64_sys_bpf+0x78/0xc0 [ 131.255560][ T6441] ? lockdep_hardirqs_on+0x7c/0x110 [ 131.256900][ T6441] do_syscall_64+0xcd/0x250 [ 131.258080][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.259597][ T6441] RIP: 0033:0x7f800db7e719 [ 131.260729][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.265560][ T6441] RSP: 002b:00007f800e9b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 131.267657][ T6441] RAX: ffffffffffffffda RBX: 00007f800dd36058 RCX: 00007f800db7e719 [ 131.269649][ T6441] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 131.271611][ T6441] RBP: 00007f800dbf132e R08: 0000000000000000 R09: 0000000000000000 [ 131.273612][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.275610][ T6441] R13: 0000000000000000 R14: 00007f800dd36058 R15: 00007fffcd7e8d08 [ 131.277716][ T6441] [ 131.278607][ T6441] BUG: Bad page state in process syz.2.108 pfn:327e7 [ 131.280286][ T6441] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880327e7000 pfn:0x327e7 [ 131.282865][ T6441] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 131.284660][ T6441] raw: 00fff00000000000 dead000000000040 ffff88803fdac000 0000000000000000 [ 131.286866][ T6441] raw: ffff8880327e7000 0000000000000001 00000000ffffffff 0000000000000000 [ 131.289001][ T6441] page dumped because: page_pool leak [ 131.290316][ T6441] page_owner tracks the page as allocated [ 131.291738][ T6441] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6441, tgid 6432 (syz.2.108), ts 124609031631, free_ts 124584042952 [ 131.295904][ T6441] post_alloc_hook+0x2d1/0x350 [ 131.297146][ T6441] get_page_from_freelist+0x101e/0x3070 [ 131.298568][ T6441] __alloc_pages_noprof+0x223/0x25a0 [ 131.299912][ T6441] alloc_pages_bulk_noprof+0x77c/0x1110 [ 131.301362][ T6441] __page_pool_alloc_pages_slow+0x18f/0x770 [ 131.302775][ T6441] page_pool_alloc_netmem+0xc4/0x160 [ 131.304116][ T6441] page_pool_alloc_pages+0x1a/0x60 [ 131.305420][ T6441] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 131.307089][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 131.308384][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 131.309709][ T6441] __sys_bpf+0xfc6/0x49a0 [ 131.310743][ T6441] __x64_sys_bpf+0x78/0xc0 [ 131.311817][ T6441] do_syscall_64+0xcd/0x250 [ 131.312965][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.314424][ T6441] page last free pid 6429 tgid 6428 stack trace: [ 131.315971][ T6441] free_unref_page+0x5f4/0xdc0 [ 131.317241][ T6441] __folio_put+0x30d/0x3d0 [ 131.318365][ T6441] put_page+0x21e/0x280 [ 131.319407][ T6441] page_pool_return_page+0x400/0x520 [ 131.320696][ T6441] page_pool_release+0xf4/0x7d0 [ 131.321909][ T6441] page_pool_destroy+0x10a/0x4c0 [ 131.323126][ T6441] bpf_test_run_xdp_live+0x3a1/0x500 [ 131.324441][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 131.325767][ T6441] __sys_bpf+0xfc6/0x49a0 [ 131.326888][ T6441] __x64_sys_bpf+0x78/0xc0 [ 131.328018][ T6441] do_syscall_64+0xcd/0x250 [ 131.329151][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.330594][ T6441] Modules linked in: [ 131.331545][ T6441] CPU: 3 UID: 0 PID: 6441 Comm: syz.2.108 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 131.334589][ T6441] Tainted: [B]=BAD_PAGE [ 131.335641][ T6441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 131.338316][ T6441] Call Trace: [ 131.339180][ T6441] [ 131.339912][ T6441] dump_stack_lvl+0x16c/0x1f0 [ 131.341103][ T6441] bad_page+0xb3/0x1f0 [ 131.342167][ T6441] ? __pfx_bad_page+0x10/0x10 [ 131.343341][ T6441] ? page_bad_reason+0x9d/0x1e0 [ 131.344544][ T6441] free_unref_page+0x657/0xdc0 [ 131.345723][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 131.347210][ T6441] ? __phys_addr+0xc6/0x150 [ 131.348314][ T6441] skb_free_head+0xa0/0x1d0 [ 131.349458][ T6441] skb_release_data+0x560/0x730 [ 131.350692][ T6441] sk_skb_reason_drop+0x129/0x1a0 [ 131.351911][ T6441] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 131.353579][ T6441] ? kernel_text_address+0x8d/0x100 [ 131.354880][ T6441] ? hlock_class+0x4e/0x130 [ 131.356035][ T6441] ? __lock_acquire+0x163e/0x3ce0 [ 131.357283][ T6441] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 131.359074][ T6441] ? rcu_is_watching+0x12/0xc0 [ 131.360270][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 131.361791][ T6441] __netif_receive_skb_list_core+0x357/0x950 [ 131.363275][ T6441] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 131.364841][ T6441] ? trace_lock_acquire+0x14a/0x1d0 [ 131.366153][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 131.367686][ T6441] ? lock_acquire+0x2f/0xb0 [ 131.368811][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 131.370359][ T6441] netif_receive_skb_list_internal+0x753/0xdb0 [ 131.371907][ T6441] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 131.373996][ T6441] ? __pfx_eth_type_trans+0x10/0x10 [ 131.375310][ T6441] ? __build_skb_around+0x278/0x3b0 [ 131.376630][ T6441] netif_receive_skb_list+0x4f/0x4a0 [ 131.377985][ T6441] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 131.379547][ T6441] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 131.381261][ T6441] ? bpf_test_timer_continue+0x150/0x3d0 [ 131.382584][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 131.383971][ T6441] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 131.385454][ T6441] ? try_to_wake_up+0xc35/0x14f0 [ 131.386647][ T6441] ? __pfx_try_to_wake_up+0x10/0x10 [ 131.387922][ T6441] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 131.389373][ T6441] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 131.390645][ T6441] ? 0xffffffffa0004340 [ 131.391650][ T6441] ? 0xffffffffa0004340 [ 131.392659][ T6441] ? 0xffffffffa0004340 [ 131.393761][ T6441] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 131.395275][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 131.396646][ T6441] ? lock_acquire+0x2f/0xb0 [ 131.397809][ T6441] ? __fget_files+0x40/0x3f0 [ 131.399000][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 131.400481][ T6441] ? fput+0x30/0x390 [ 131.401515][ T6441] ? __bpf_prog_get+0xa0/0x290 [ 131.402725][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 131.404222][ T6441] __sys_bpf+0xfc6/0x49a0 [ 131.405327][ T6441] ? __pfx_futex_wake+0x10/0x10 [ 131.406576][ T6441] ? finish_task_switch.isra.0+0x217/0xcc0 [ 131.408063][ T6441] ? __pfx___sys_bpf+0x10/0x10 [ 131.409274][ T6441] ? __schedule+0xe5d/0x5730 [ 131.410464][ T6441] ? __fget_files+0x23a/0x3f0 [ 131.411688][ T6441] ? do_futex+0x123/0x350 [ 131.412771][ T6441] ? __pfx_do_futex+0x10/0x10 [ 131.413986][ T6441] ? xfd_validate_state+0x5d/0x180 [ 131.415313][ T6441] ? rcu_is_watching+0x12/0xc0 [ 131.416484][ T6441] __x64_sys_bpf+0x78/0xc0 [ 131.417641][ T6441] ? lockdep_hardirqs_on+0x7c/0x110 [ 131.418950][ T6441] do_syscall_64+0xcd/0x250 [ 131.420123][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.421717][ T6441] RIP: 0033:0x7f800db7e719 [ 131.422898][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.427865][ T6441] RSP: 002b:00007f800e9b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 131.430032][ T6441] RAX: ffffffffffffffda RBX: 00007f800dd36058 RCX: 00007f800db7e719 [ 131.432076][ T6441] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 131.434040][ T6441] RBP: 00007f800dbf132e R08: 0000000000000000 R09: 0000000000000000 [ 131.435989][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.437946][ T6441] R13: 0000000000000000 R14: 00007f800dd36058 R15: 00007fffcd7e8d08 [ 131.439874][ T6441] [ 131.440731][ T6441] BUG: Bad page state in process syz.2.108 pfn:32801 [ 131.442585][ T6441] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000002 pfn:0x32801 [ 131.445065][ T6441] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 131.447062][ T6441] raw: 00fff00000000000 dead000000000040 ffff88803fdac000 0000000000000000 [ 131.449494][ T6441] raw: ffff888000000002 0000000000000001 00000000ffffffff 0000000000000000 [ 131.451709][ T6441] page dumped because: page_pool leak [ 131.453091][ T6441] page_owner tracks the page as allocated [ 131.454536][ T6441] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6441, tgid 6432 (syz.2.108), ts 124609027408, free_ts 124584046823 [ 131.458869][ T6441] post_alloc_hook+0x2d1/0x350 [ 131.460132][ T6441] get_page_from_freelist+0x101e/0x3070 [ 131.461593][ T6441] __alloc_pages_noprof+0x223/0x25a0 [ 131.462971][ T6441] alloc_pages_bulk_noprof+0x77c/0x1110 [ 131.464412][ T6441] __page_pool_alloc_pages_slow+0x18f/0x770 [ 131.465978][ T6441] page_pool_alloc_netmem+0xc4/0x160 [ 131.467510][ T6441] page_pool_alloc_pages+0x1a/0x60 [ 131.468778][ T6441] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 131.470321][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 131.471680][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 131.473079][ T6441] __sys_bpf+0xfc6/0x49a0 [ 131.474214][ T6441] __x64_sys_bpf+0x78/0xc0 [ 131.475386][ T6441] do_syscall_64+0xcd/0x250 [ 131.476639][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.478197][ T6441] page last free pid 6429 tgid 6428 stack trace: [ 131.479791][ T6441] free_unref_page+0x5f4/0xdc0 [ 131.481017][ T6441] __folio_put+0x30d/0x3d0 [ 131.482140][ T6441] put_page+0x21e/0x280 [ 131.483179][ T6441] page_pool_return_page+0x400/0x520 [ 131.484519][ T6441] page_pool_release+0xf4/0x7d0 [ 131.485745][ T6441] page_pool_destroy+0x10a/0x4c0 [ 131.487039][ T6441] bpf_test_run_xdp_live+0x3a1/0x500 [ 131.488346][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 131.489741][ T6441] __sys_bpf+0xfc6/0x49a0 [ 131.490816][ T6441] __x64_sys_bpf+0x78/0xc0 [ 131.491920][ T6441] do_syscall_64+0xcd/0x250 [ 131.493044][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.494474][ T6441] Modules linked in: [ 131.495445][ T6441] CPU: 3 UID: 0 PID: 6441 Comm: syz.2.108 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 131.498369][ T6441] Tainted: [B]=BAD_PAGE [ 131.499439][ T6441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 131.502191][ T6441] Call Trace: [ 131.503060][ T6441] [ 131.503832][ T6441] dump_stack_lvl+0x16c/0x1f0 [ 131.505062][ T6441] bad_page+0xb3/0x1f0 [ 131.506138][ T6441] ? __pfx_bad_page+0x10/0x10 [ 131.507356][ T6441] ? page_bad_reason+0x9d/0x1e0 [ 131.508606][ T6441] free_unref_page+0x657/0xdc0 [ 131.509864][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 131.511393][ T6441] ? __phys_addr+0xc6/0x150 [ 131.512566][ T6441] skb_free_head+0xa0/0x1d0 [ 131.513742][ T6441] skb_release_data+0x560/0x730 [ 131.514997][ T6441] sk_skb_reason_drop+0x129/0x1a0 [ 131.516301][ T6441] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 131.518020][ T6441] ? kernel_text_address+0x8d/0x100 [ 131.519356][ T6441] ? hlock_class+0x4e/0x130 [ 131.520493][ T6441] ? __lock_acquire+0x163e/0x3ce0 [ 131.521772][ T6441] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 131.523553][ T6441] ? rcu_is_watching+0x12/0xc0 [ 131.524748][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 131.526263][ T6441] __netif_receive_skb_list_core+0x357/0x950 [ 131.527754][ T6441] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 131.529378][ T6441] ? trace_lock_acquire+0x14a/0x1d0 [ 131.530642][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 131.532199][ T6441] ? lock_acquire+0x2f/0xb0 [ 131.533330][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 131.534931][ T6441] netif_receive_skb_list_internal+0x753/0xdb0 [ 131.536472][ T6441] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 131.538116][ T6441] ? __pfx_eth_type_trans+0x10/0x10 [ 131.539409][ T6441] ? __build_skb_around+0x278/0x3b0 [ 131.540695][ T6441] netif_receive_skb_list+0x4f/0x4a0 [ 131.542007][ T6441] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 131.543538][ T6441] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 131.545196][ T6441] ? bpf_test_timer_continue+0x150/0x3d0 [ 131.546643][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 131.547984][ T6441] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 131.549424][ T6441] ? try_to_wake_up+0xc35/0x14f0 [ 131.550649][ T6441] ? __pfx_try_to_wake_up+0x10/0x10 [ 131.551955][ T6441] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 131.553435][ T6441] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 131.554761][ T6441] ? 0xffffffffa0004340 [ 131.555791][ T6441] ? 0xffffffffa0004340 [ 131.556801][ T6441] ? 0xffffffffa0004340 [ 131.557869][ T6441] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 131.559331][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 131.560675][ T6441] ? lock_acquire+0x2f/0xb0 [ 131.561841][ T6441] ? __fget_files+0x40/0x3f0 [ 131.563027][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 131.564494][ T6441] ? fput+0x30/0x390 [ 131.565500][ T6441] ? __bpf_prog_get+0xa0/0x290 [ 131.566699][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 131.568203][ T6441] __sys_bpf+0xfc6/0x49a0 [ 131.569343][ T6441] ? __pfx_futex_wake+0x10/0x10 [ 131.570538][ T6441] ? finish_task_switch.isra.0+0x217/0xcc0 [ 131.571974][ T6441] ? __pfx___sys_bpf+0x10/0x10 [ 131.573196][ T6441] ? __schedule+0xe5d/0x5730 [ 131.574389][ T6441] ? __fget_files+0x23a/0x3f0 [ 131.575576][ T6441] ? do_futex+0x123/0x350 [ 131.576688][ T6441] ? __pfx_do_futex+0x10/0x10 [ 131.577906][ T6441] ? xfd_validate_state+0x5d/0x180 [ 131.579199][ T6441] ? rcu_is_watching+0x12/0xc0 [ 131.580406][ T6441] __x64_sys_bpf+0x78/0xc0 [ 131.581562][ T6441] ? lockdep_hardirqs_on+0x7c/0x110 [ 131.582898][ T6441] do_syscall_64+0xcd/0x250 [ 131.584017][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.585511][ T6441] RIP: 0033:0x7f800db7e719 [ 131.586643][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.591443][ T6441] RSP: 002b:00007f800e9b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 131.593460][ T6441] RAX: ffffffffffffffda RBX: 00007f800dd36058 RCX: 00007f800db7e719 [ 131.595409][ T6441] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 131.597372][ T6441] RBP: 00007f800dbf132e R08: 0000000000000000 R09: 0000000000000000 [ 131.599351][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.601308][ T6441] R13: 0000000000000000 R14: 00007f800dd36058 R15: 00007fffcd7e8d08 [ 131.603356][ T6441] [ 131.604271][ T6441] BUG: Bad page state in process syz.2.108 pfn:4dd7c [ 131.606043][ T6441] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804dd7c5d0 pfn:0x4dd7c [ 131.608726][ T6441] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 131.610608][ T6441] raw: 00fff00000000000 dead000000000040 ffff88803fdac000 0000000000000000 [ 131.612808][ T6441] raw: ffff88804dd7c5d0 0000000000000001 00000000ffffffff 0000000000000000 [ 131.615029][ T6441] page dumped because: page_pool leak [ 131.616455][ T6441] page_owner tracks the page as allocated [ 131.617928][ T6441] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6441, tgid 6432 (syz.2.108), ts 124609022986, free_ts 124584050456 [ 131.622218][ T6441] post_alloc_hook+0x2d1/0x350 [ 131.623461][ T6441] get_page_from_freelist+0x101e/0x3070 [ 131.624895][ T6441] __alloc_pages_noprof+0x223/0x25a0 [ 131.626329][ T6441] alloc_pages_bulk_noprof+0x77c/0x1110 [ 131.627764][ T6441] __page_pool_alloc_pages_slow+0x18f/0x770 [ 131.629306][ T6441] page_pool_alloc_netmem+0xc4/0x160 [ 131.630681][ T6441] page_pool_alloc_pages+0x1a/0x60 [ 131.632010][ T6441] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 131.633630][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 131.635009][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 131.636455][ T6441] __sys_bpf+0xfc6/0x49a0 [ 131.637547][ T6441] __x64_sys_bpf+0x78/0xc0 [ 131.638720][ T6441] do_syscall_64+0xcd/0x250 [ 131.640022][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.641584][ T6441] page last free pid 6429 tgid 6428 stack trace: [ 131.643211][ T6441] free_unref_page+0x5f4/0xdc0 [ 131.644457][ T6441] __folio_put+0x30d/0x3d0 [ 131.645631][ T6441] put_page+0x21e/0x280 [ 131.646773][ T6441] page_pool_return_page+0x400/0x520 [ 131.648149][ T6441] page_pool_release+0xf4/0x7d0 [ 131.649425][ T6441] page_pool_destroy+0x10a/0x4c0 [ 131.650739][ T6441] bpf_test_run_xdp_live+0x3a1/0x500 [ 131.652113][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 131.653569][ T6441] __sys_bpf+0xfc6/0x49a0 [ 131.654749][ T6441] __x64_sys_bpf+0x78/0xc0 [ 131.655913][ T6441] do_syscall_64+0xcd/0x250 [ 131.657173][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.658707][ T6441] Modules linked in: [ 131.659733][ T6441] CPU: 3 UID: 0 PID: 6441 Comm: syz.2.108 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 131.662745][ T6441] Tainted: [B]=BAD_PAGE [ 131.663829][ T6441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 131.666641][ T6441] Call Trace: [ 131.667519][ T6441] [ 131.668296][ T6441] dump_stack_lvl+0x16c/0x1f0 [ 131.669555][ T6441] bad_page+0xb3/0x1f0 [ 131.670624][ T6441] ? __pfx_bad_page+0x10/0x10 [ 131.671851][ T6441] ? page_bad_reason+0x9d/0x1e0 [ 131.673130][ T6441] free_unref_page+0x657/0xdc0 [ 131.674383][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 131.675948][ T6441] ? __phys_addr+0xc6/0x150 [ 131.677148][ T6441] skb_free_head+0xa0/0x1d0 [ 131.678340][ T6441] skb_release_data+0x560/0x730 [ 131.679608][ T6441] sk_skb_reason_drop+0x129/0x1a0 [ 131.680924][ T6441] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 131.682602][ T6441] ? kernel_text_address+0x8d/0x100 [ 131.683942][ T6441] ? hlock_class+0x4e/0x130 [ 131.685158][ T6441] ? __lock_acquire+0x163e/0x3ce0 [ 131.686480][ T6441] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 131.688329][ T6441] ? rcu_is_watching+0x12/0xc0 [ 131.689600][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 131.691204][ T6441] __netif_receive_skb_list_core+0x357/0x950 [ 131.692766][ T6441] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 131.694469][ T6441] ? trace_lock_acquire+0x14a/0x1d0 [ 131.695831][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 131.697500][ T6441] ? lock_acquire+0x2f/0xb0 [ 131.698688][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 131.700348][ T6441] netif_receive_skb_list_internal+0x753/0xdb0 [ 131.701978][ T6441] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 131.703676][ T6441] ? __pfx_eth_type_trans+0x10/0x10 [ 131.704978][ T6441] ? __build_skb_around+0x278/0x3b0 [ 131.706306][ T6441] netif_receive_skb_list+0x4f/0x4a0 [ 131.707649][ T6441] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 131.709264][ T6441] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 131.710951][ T6441] ? bpf_test_timer_continue+0x150/0x3d0 [ 131.712364][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 131.713711][ T6441] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 131.715182][ T6441] ? try_to_wake_up+0xc35/0x14f0 [ 131.716457][ T6441] ? __pfx_try_to_wake_up+0x10/0x10 [ 131.717800][ T6441] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 131.719288][ T6441] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 131.720611][ T6441] ? 0xffffffffa0004340 [ 131.721679][ T6441] ? 0xffffffffa0004340 [ 131.722771][ T6441] ? 0xffffffffa0004340 [ 131.723860][ T6441] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 131.725345][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 131.726690][ T6441] ? lock_acquire+0x2f/0xb0 [ 131.727851][ T6441] ? __fget_files+0x40/0x3f0 [ 131.729022][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 131.730504][ T6441] ? fput+0x30/0x390 [ 131.731492][ T6441] ? __bpf_prog_get+0xa0/0x290 [ 131.732691][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 131.734196][ T6441] __sys_bpf+0xfc6/0x49a0 [ 131.735290][ T6441] ? __pfx_futex_wake+0x10/0x10 [ 131.736539][ T6441] ? finish_task_switch.isra.0+0x217/0xcc0 [ 131.738015][ T6441] ? __pfx___sys_bpf+0x10/0x10 [ 131.739232][ T6441] ? __schedule+0xe5d/0x5730 [ 131.740396][ T6441] ? __fget_files+0x23a/0x3f0 [ 131.741600][ T6441] ? do_futex+0x123/0x350 [ 131.742697][ T6441] ? __pfx_do_futex+0x10/0x10 [ 131.743879][ T6441] ? xfd_validate_state+0x5d/0x180 [ 131.745155][ T6441] ? rcu_is_watching+0x12/0xc0 [ 131.746390][ T6441] __x64_sys_bpf+0x78/0xc0 [ 131.747528][ T6441] ? lockdep_hardirqs_on+0x7c/0x110 [ 131.748853][ T6441] do_syscall_64+0xcd/0x250 [ 131.750025][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.751516][ T6441] RIP: 0033:0x7f800db7e719 [ 131.752647][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.757471][ T6441] RSP: 002b:00007f800e9b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 131.759556][ T6441] RAX: ffffffffffffffda RBX: 00007f800dd36058 RCX: 00007f800db7e719 [ 131.761567][ T6441] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 131.763791][ T6441] RBP: 00007f800dbf132e R08: 0000000000000000 R09: 0000000000000000 [ 131.765878][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.767884][ T6441] R13: 0000000000000000 R14: 00007f800dd36058 R15: 00007fffcd7e8d08 [ 131.769897][ T6441] [ 131.770797][ T6441] BUG: Bad page state in process syz.2.108 pfn:345f1 [ 131.772541][ T6441] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x8 pfn:0x345f1 [ 131.774730][ T6441] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 131.776642][ T6441] raw: 00fff00000000000 dead000000000040 ffff88803fdac000 0000000000000000 [ 131.779103][ T6441] raw: 0000000000000008 0000000000000001 00000000ffffffff 0000000000000000 [ 131.781481][ T6441] page dumped because: page_pool leak [ 131.783030][ T6441] page_owner tracks the page as allocated [ 131.784526][ T6441] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6441, tgid 6432 (syz.2.108), ts 124609018705, free_ts 124584054037 [ 131.788956][ T6441] post_alloc_hook+0x2d1/0x350 [ 131.790256][ T6441] get_page_from_freelist+0x101e/0x3070 [ 131.791706][ T6441] __alloc_pages_noprof+0x223/0x25a0 [ 131.793068][ T6441] alloc_pages_bulk_noprof+0x77c/0x1110 [ 131.794516][ T6441] __page_pool_alloc_pages_slow+0x18f/0x770 [ 131.796066][ T6441] page_pool_alloc_netmem+0xc4/0x160 [ 131.797433][ T6441] page_pool_alloc_pages+0x1a/0x60 [ 131.798762][ T6441] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 131.800376][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 131.801777][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 131.803179][ T6441] __sys_bpf+0xfc6/0x49a0 [ 131.804434][ T6441] __x64_sys_bpf+0x78/0xc0 [ 131.805652][ T6441] do_syscall_64+0xcd/0x250 [ 131.806933][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.808576][ T6441] page last free pid 6429 tgid 6428 stack trace: [ 131.810356][ T6441] free_unref_page+0x5f4/0xdc0 [ 131.811633][ T6441] __folio_put+0x30d/0x3d0 [ 131.812808][ T6441] put_page+0x21e/0x280 [ 131.813887][ T6441] page_pool_return_page+0x400/0x520 [ 131.815209][ T6441] page_pool_release+0xf4/0x7d0 [ 131.816531][ T6441] page_pool_destroy+0x10a/0x4c0 [ 131.817814][ T6441] bpf_test_run_xdp_live+0x3a1/0x500 [ 131.819195][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 131.820595][ T6441] __sys_bpf+0xfc6/0x49a0 [ 131.821746][ T6441] __x64_sys_bpf+0x78/0xc0 [ 131.823041][ T6441] do_syscall_64+0xcd/0x250 [ 131.824639][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.826281][ T6441] Modules linked in: [ 131.827310][ T6441] CPU: 3 UID: 0 PID: 6441 Comm: syz.2.108 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 131.830328][ T6441] Tainted: [B]=BAD_PAGE [ 131.831385][ T6441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 131.834044][ T6441] Call Trace: [ 131.834891][ T6441] [ 131.835644][ T6441] dump_stack_lvl+0x16c/0x1f0 [ 131.836834][ T6441] bad_page+0xb3/0x1f0 [ 131.837870][ T6441] ? __pfx_bad_page+0x10/0x10 [ 131.839077][ T6441] ? page_bad_reason+0x9d/0x1e0 [ 131.840329][ T6441] free_unref_page+0x657/0xdc0 [ 131.841587][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 131.843497][ T6441] ? __phys_addr+0xc6/0x150 [ 131.844655][ T6441] skb_free_head+0xa0/0x1d0 [ 131.845829][ T6441] skb_release_data+0x560/0x730 [ 131.847082][ T6441] sk_skb_reason_drop+0x129/0x1a0 [ 131.848363][ T6441] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 131.850066][ T6441] ? kernel_text_address+0x8d/0x100 [ 131.851409][ T6441] ? hlock_class+0x4e/0x130 [ 131.852566][ T6441] ? __lock_acquire+0x163e/0x3ce0 [ 131.853914][ T6441] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 131.855697][ T6441] ? rcu_is_watching+0x12/0xc0 [ 131.856921][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 131.858434][ T6441] __netif_receive_skb_list_core+0x357/0x950 [ 131.859904][ T6441] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 131.861559][ T6441] ? trace_lock_acquire+0x14a/0x1d0 [ 131.862900][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 131.864537][ T6441] ? lock_acquire+0x2f/0xb0 [ 131.865820][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 131.867791][ T6441] netif_receive_skb_list_internal+0x753/0xdb0 [ 131.869371][ T6441] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 131.871053][ T6441] ? __pfx_eth_type_trans+0x10/0x10 [ 131.872367][ T6441] ? __build_skb_around+0x278/0x3b0 [ 131.873681][ T6441] netif_receive_skb_list+0x4f/0x4a0 [ 131.875023][ T6441] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 131.876591][ T6441] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 131.878302][ T6441] ? bpf_test_timer_continue+0x150/0x3d0 [ 131.879794][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 131.881141][ T6441] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 131.882547][ T6441] ? try_to_wake_up+0xc35/0x14f0 [ 131.883760][ T6441] ? __pfx_try_to_wake_up+0x10/0x10 [ 131.885135][ T6441] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 131.886692][ T6441] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 131.888084][ T6441] ? 0xffffffffa0004340 [ 131.889290][ T6441] ? 0xffffffffa0004340 [ 131.890390][ T6441] ? 0xffffffffa0004340 [ 131.891480][ T6441] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 131.893039][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 131.894457][ T6441] ? lock_acquire+0x2f/0xb0 [ 131.895660][ T6441] ? __fget_files+0x40/0x3f0 [ 131.896890][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 131.898443][ T6441] ? fput+0x30/0x390 [ 131.899483][ T6441] ? __bpf_prog_get+0xa0/0x290 [ 131.900744][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 131.902292][ T6441] __sys_bpf+0xfc6/0x49a0 [ 131.903426][ T6441] ? __pfx_futex_wake+0x10/0x10 [ 131.904704][ T6441] ? finish_task_switch.isra.0+0x217/0xcc0 [ 131.906235][ T6441] ? __pfx___sys_bpf+0x10/0x10 [ 131.907498][ T6441] ? __schedule+0xe5d/0x5730 [ 131.908711][ T6441] ? __fget_files+0x23a/0x3f0 [ 131.909951][ T6441] ? do_futex+0x123/0x350 [ 131.911089][ T6441] ? __pfx_do_futex+0x10/0x10 [ 131.912323][ T6441] ? xfd_validate_state+0x5d/0x180 [ 131.913665][ T6441] ? rcu_is_watching+0x12/0xc0 [ 131.914917][ T6441] __x64_sys_bpf+0x78/0xc0 [ 131.916087][ T6441] ? lockdep_hardirqs_on+0x7c/0x110 [ 131.917454][ T6441] do_syscall_64+0xcd/0x250 [ 131.918642][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.920185][ T6441] RIP: 0033:0x7f800db7e719 [ 131.921367][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.926320][ T6441] RSP: 002b:00007f800e9b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 131.928471][ T6441] RAX: ffffffffffffffda RBX: 00007f800dd36058 RCX: 00007f800db7e719 [ 131.930522][ T6441] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 131.932564][ T6441] RBP: 00007f800dbf132e R08: 0000000000000000 R09: 0000000000000000 [ 131.934609][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.936646][ T6441] R13: 0000000000000000 R14: 00007f800dd36058 R15: 00007fffcd7e8d08 [ 131.938700][ T6441] [ 131.939613][ T6441] BUG: Bad page state in process syz.2.108 pfn:3ff26 [ 131.941369][ T6441] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803ff26f00 pfn:0x3ff26 [ 131.943969][ T6441] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 131.945828][ T6441] raw: 00fff00000000000 dead000000000040 ffff88803fdac000 0000000000000000 [ 131.948096][ T6441] raw: ffff88803ff26f00 0000000000000001 00000000ffffffff 0000000000000000 [ 131.950322][ T6441] page dumped because: page_pool leak [ 131.951715][ T6441] page_owner tracks the page as allocated [ 131.953210][ T6441] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6441, tgid 6432 (syz.2.108), ts 124609014359, free_ts 124584058217 [ 131.957585][ T6441] post_alloc_hook+0x2d1/0x350 [ 131.958850][ T6441] get_page_from_freelist+0x101e/0x3070 [ 131.960291][ T6441] __alloc_pages_noprof+0x223/0x25a0 [ 131.961684][ T6441] alloc_pages_bulk_noprof+0x77c/0x1110 [ 131.963124][ T6441] __page_pool_alloc_pages_slow+0x18f/0x770 [ 131.964660][ T6441] page_pool_alloc_netmem+0xc4/0x160 [ 131.966049][ T6441] page_pool_alloc_pages+0x1a/0x60 [ 131.967457][ T6441] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 131.969116][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 131.970518][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 131.971984][ T6441] __sys_bpf+0xfc6/0x49a0 [ 131.973133][ T6441] __x64_sys_bpf+0x78/0xc0 [ 131.974301][ T6441] do_syscall_64+0xcd/0x250 [ 131.975496][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.977115][ T6441] page last free pid 6429 tgid 6428 stack trace: [ 131.979143][ T6441] free_unref_page+0x5f4/0xdc0 [ 131.980463][ T6441] __folio_put+0x30d/0x3d0 [ 131.981666][ T6441] put_page+0x21e/0x280 [ 131.982766][ T6441] page_pool_return_page+0x400/0x520 [ 131.984153][ T6441] page_pool_release+0xf4/0x7d0 [ 131.985440][ T6441] page_pool_destroy+0x10a/0x4c0 [ 131.986749][ T6441] bpf_test_run_xdp_live+0x3a1/0x500 [ 131.988199][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 131.989628][ T6441] __sys_bpf+0xfc6/0x49a0 [ 131.990771][ T6441] __x64_sys_bpf+0x78/0xc0 [ 131.991921][ T6441] do_syscall_64+0xcd/0x250 [ 131.993086][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.994613][ T6441] Modules linked in: [ 131.995611][ T6441] CPU: 3 UID: 0 PID: 6441 Comm: syz.2.108 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 131.998617][ T6441] Tainted: [B]=BAD_PAGE [ 131.999667][ T6441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 132.002385][ T6441] Call Trace: [ 132.003237][ T6441] [ 132.003987][ T6441] dump_stack_lvl+0x16c/0x1f0 [ 132.005180][ T6441] bad_page+0xb3/0x1f0 [ 132.006217][ T6441] ? __pfx_bad_page+0x10/0x10 [ 132.007410][ T6441] ? page_bad_reason+0x9d/0x1e0 [ 132.008643][ T6441] free_unref_page+0x657/0xdc0 [ 132.009853][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 132.011344][ T6441] ? __phys_addr+0xc6/0x150 [ 132.012495][ T6441] skb_free_head+0xa0/0x1d0 [ 132.013613][ T6441] skb_release_data+0x560/0x730 [ 132.014840][ T6441] sk_skb_reason_drop+0x129/0x1a0 [ 132.016121][ T6441] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 132.017811][ T6441] ? kernel_text_address+0x8d/0x100 [ 132.019133][ T6441] ? hlock_class+0x4e/0x130 [ 132.020309][ T6441] ? __lock_acquire+0x163e/0x3ce0 [ 132.021603][ T6441] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 132.023370][ T6441] ? rcu_is_watching+0x12/0xc0 [ 132.024593][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 132.026108][ T6441] __netif_receive_skb_list_core+0x357/0x950 [ 132.027624][ T6441] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 132.029252][ T6441] ? trace_lock_acquire+0x14a/0x1d0 [ 132.030567][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 132.032160][ T6441] ? lock_acquire+0x2f/0xb0 [ 132.033315][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 132.034916][ T6441] netif_receive_skb_list_internal+0x753/0xdb0 [ 132.036471][ T6441] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 132.038161][ T6441] ? __pfx_eth_type_trans+0x10/0x10 [ 132.039511][ T6441] ? __build_skb_around+0x278/0x3b0 [ 132.040880][ T6441] netif_receive_skb_list+0x4f/0x4a0 [ 132.042222][ T6441] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 132.043780][ T6441] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 132.045450][ T6441] ? bpf_test_timer_continue+0x150/0x3d0 [ 132.046954][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 132.048343][ T6441] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 132.049856][ T6441] ? try_to_wake_up+0xc35/0x14f0 [ 132.051102][ T6441] ? __pfx_try_to_wake_up+0x10/0x10 [ 132.052452][ T6441] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 132.054006][ T6441] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 132.055312][ T6441] ? 0xffffffffa0004340 [ 132.056378][ T6441] ? 0xffffffffa0004340 [ 132.057422][ T6441] ? 0xffffffffa0004340 [ 132.058475][ T6441] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 132.059957][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 132.061353][ T6441] ? lock_acquire+0x2f/0xb0 [ 132.062545][ T6441] ? __fget_files+0x40/0x3f0 [ 132.063773][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 132.065307][ T6441] ? fput+0x30/0x390 [ 132.066336][ T6441] ? __bpf_prog_get+0xa0/0x290 [ 132.067593][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 132.069120][ T6441] __sys_bpf+0xfc6/0x49a0 [ 132.070256][ T6441] ? __pfx_futex_wake+0x10/0x10 [ 132.071526][ T6441] ? finish_task_switch.isra.0+0x217/0xcc0 [ 132.073034][ T6441] ? __pfx___sys_bpf+0x10/0x10 [ 132.074287][ T6441] ? __schedule+0xe5d/0x5730 [ 132.075498][ T6441] ? __fget_files+0x23a/0x3f0 [ 132.076730][ T6441] ? do_futex+0x123/0x350 [ 132.077870][ T6441] ? __pfx_do_futex+0x10/0x10 [ 132.079112][ T6441] ? xfd_validate_state+0x5d/0x180 [ 132.080446][ T6441] ? rcu_is_watching+0x12/0xc0 [ 132.081685][ T6441] __x64_sys_bpf+0x78/0xc0 [ 132.082778][ T6441] ? lockdep_hardirqs_on+0x7c/0x110 [ 132.084100][ T6441] do_syscall_64+0xcd/0x250 [ 132.085289][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.086820][ T6441] RIP: 0033:0x7f800db7e719 [ 132.087974][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.092855][ T6441] RSP: 002b:00007f800e9b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 132.094920][ T6441] RAX: ffffffffffffffda RBX: 00007f800dd36058 RCX: 00007f800db7e719 [ 132.096959][ T6441] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 132.098983][ T6441] RBP: 00007f800dbf132e R08: 0000000000000000 R09: 0000000000000000 [ 132.100952][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.102970][ T6441] R13: 0000000000000000 R14: 00007f800dd36058 R15: 00007fffcd7e8d08 [ 132.104944][ T6441] [ 132.105844][ T6441] BUG: Bad page state in process syz.2.108 pfn:22a3c [ 132.107565][ T6441] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888022a3cf00 pfn:0x22a3c [ 132.110124][ T6441] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 132.111978][ T6441] raw: 00fff00000000000 dead000000000040 ffff88803fdac000 0000000000000000 [ 132.114186][ T6441] raw: ffff888022a3cf00 0000000000000001 00000000ffffffff 0000000000000000 [ 132.116452][ T6441] page dumped because: page_pool leak [ 132.117851][ T6441] page_owner tracks the page as allocated [ 132.119320][ T6441] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6441, tgid 6432 (syz.2.108), ts 124609010035, free_ts 124584062328 [ 132.123531][ T6441] post_alloc_hook+0x2d1/0x350 [ 132.124734][ T6441] get_page_from_freelist+0x101e/0x3070 [ 132.126173][ T6441] __alloc_pages_noprof+0x223/0x25a0 [ 132.127609][ T6441] alloc_pages_bulk_noprof+0x77c/0x1110 [ 132.129040][ T6441] __page_pool_alloc_pages_slow+0x18f/0x770 [ 132.130573][ T6441] page_pool_alloc_netmem+0xc4/0x160 [ 132.131974][ T6441] page_pool_alloc_pages+0x1a/0x60 [ 132.133318][ T6441] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 132.134920][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 132.136351][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 132.137758][ T6441] __sys_bpf+0xfc6/0x49a0 [ 132.138898][ T6441] __x64_sys_bpf+0x78/0xc0 [ 132.140064][ T6441] do_syscall_64+0xcd/0x250 [ 132.141278][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.142821][ T6441] page last free pid 6429 tgid 6428 stack trace: [ 132.144449][ T6441] free_unref_page+0x5f4/0xdc0 [ 132.145712][ T6441] __folio_put+0x30d/0x3d0 [ 132.146936][ T6441] put_page+0x21e/0x280 [ 132.148025][ T6441] page_pool_return_page+0x400/0x520 [ 132.149411][ T6441] page_pool_release+0xf4/0x7d0 [ 132.150678][ T6441] page_pool_destroy+0x10a/0x4c0 [ 132.151966][ T6441] bpf_test_run_xdp_live+0x3a1/0x500 [ 132.153350][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 132.154675][ T6441] __sys_bpf+0xfc6/0x49a0 [ 132.155755][ T6441] __x64_sys_bpf+0x78/0xc0 [ 132.156971][ T6441] do_syscall_64+0xcd/0x250 [ 132.158175][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.159708][ T6441] Modules linked in: [ 132.160730][ T6441] CPU: 3 UID: 0 PID: 6441 Comm: syz.2.108 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 132.163816][ T6441] Tainted: [B]=BAD_PAGE [ 132.164899][ T6441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 132.167689][ T6441] Call Trace: [ 132.168560][ T6441] [ 132.169341][ T6441] dump_stack_lvl+0x16c/0x1f0 [ 132.170574][ T6441] bad_page+0xb3/0x1f0 [ 132.171647][ T6441] ? __pfx_bad_page+0x10/0x10 [ 132.172878][ T6441] ? page_bad_reason+0x9d/0x1e0 [ 132.174156][ T6441] free_unref_page+0x657/0xdc0 [ 132.175409][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 132.176975][ T6441] ? __phys_addr+0xc6/0x150 [ 132.178170][ T6441] skb_free_head+0xa0/0x1d0 [ 132.179366][ T6441] skb_release_data+0x560/0x730 [ 132.180638][ T6441] sk_skb_reason_drop+0x129/0x1a0 [ 132.181970][ T6441] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 132.183696][ T6441] ? kernel_text_address+0x8d/0x100 [ 132.185050][ T6441] ? hlock_class+0x4e/0x130 [ 132.186251][ T6441] ? __lock_acquire+0x163e/0x3ce0 [ 132.187515][ T6441] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 132.189294][ T6441] ? rcu_is_watching+0x12/0xc0 [ 132.190498][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 132.192008][ T6441] __netif_receive_skb_list_core+0x357/0x950 [ 132.193544][ T6441] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 132.195183][ T6441] ? trace_lock_acquire+0x14a/0x1d0 [ 132.196493][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 132.198091][ T6441] ? lock_acquire+0x2f/0xb0 [ 132.199237][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 132.200828][ T6441] netif_receive_skb_list_internal+0x753/0xdb0 [ 132.202450][ T6441] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 132.204099][ T6441] ? __pfx_eth_type_trans+0x10/0x10 [ 132.205445][ T6441] ? __build_skb_around+0x278/0x3b0 [ 132.206764][ T6441] netif_receive_skb_list+0x4f/0x4a0 [ 132.208095][ T6441] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 132.209691][ T6441] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 132.211322][ T6441] ? bpf_test_timer_continue+0x150/0x3d0 [ 132.212725][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 132.214039][ T6441] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 132.215511][ T6441] ? try_to_wake_up+0xc35/0x14f0 [ 132.216767][ T6441] ? __pfx_try_to_wake_up+0x10/0x10 [ 132.218075][ T6441] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 132.219558][ T6441] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 132.220904][ T6441] ? 0xffffffffa0004340 [ 132.221965][ T6441] ? 0xffffffffa0004340 [ 132.222999][ T6441] ? 0xffffffffa0004340 [ 132.224031][ T6441] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 132.225497][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 132.226863][ T6441] ? lock_acquire+0x2f/0xb0 [ 132.228054][ T6441] ? __fget_files+0x40/0x3f0 [ 132.229218][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 132.230711][ T6441] ? fput+0x30/0x390 [ 132.231746][ T6441] ? __bpf_prog_get+0xa0/0x290 [ 132.233037][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 132.234522][ T6441] __sys_bpf+0xfc6/0x49a0 [ 132.235648][ T6441] ? __pfx_futex_wake+0x10/0x10 [ 132.236883][ T6441] ? finish_task_switch.isra.0+0x217/0xcc0 [ 132.238350][ T6441] ? __pfx___sys_bpf+0x10/0x10 [ 132.239548][ T6441] ? __schedule+0xe5d/0x5730 [ 132.240740][ T6441] ? __fget_files+0x23a/0x3f0 [ 132.241954][ T6441] ? do_futex+0x123/0x350 [ 132.243070][ T6441] ? __pfx_do_futex+0x10/0x10 [ 132.244312][ T6441] ? xfd_validate_state+0x5d/0x180 [ 132.245669][ T6441] ? rcu_is_watching+0x12/0xc0 [ 132.246935][ T6441] __x64_sys_bpf+0x78/0xc0 [ 132.248118][ T6441] ? lockdep_hardirqs_on+0x7c/0x110 [ 132.249559][ T6441] do_syscall_64+0xcd/0x250 [ 132.250803][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.252357][ T6441] RIP: 0033:0x7f800db7e719 [ 132.253535][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.258311][ T6441] RSP: 002b:00007f800e9b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 132.260417][ T6441] RAX: ffffffffffffffda RBX: 00007f800dd36058 RCX: 00007f800db7e719 [ 132.262412][ T6441] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 132.264381][ T6441] RBP: 00007f800dbf132e R08: 0000000000000000 R09: 0000000000000000 [ 132.266337][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.268323][ T6441] R13: 0000000000000000 R14: 00007f800dd36058 R15: 00007fffcd7e8d08 [ 132.270322][ T6441] [ 132.271186][ T6441] BUG: Bad page state in process syz.2.108 pfn:2c7b8 [ 132.272901][ T6441] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802c7b8f00 pfn:0x2c7b8 [ 132.275393][ T6441] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 132.277229][ T6441] raw: 00fff00000000000 dead000000000040 ffff88803fdac000 0000000000000000 [ 132.279360][ T6441] raw: ffff88802c7b8f00 0000000000000001 00000000ffffffff 0000000000000000 [ 132.281544][ T6441] page dumped because: page_pool leak [ 132.282942][ T6441] page_owner tracks the page as allocated [ 132.284430][ T6441] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6441, tgid 6432 (syz.2.108), ts 124609005702, free_ts 124584066100 [ 132.288823][ T6441] post_alloc_hook+0x2d1/0x350 [ 132.290089][ T6441] get_page_from_freelist+0x101e/0x3070 [ 132.291521][ T6441] __alloc_pages_noprof+0x223/0x25a0 [ 132.292837][ T6441] alloc_pages_bulk_noprof+0x77c/0x1110 [ 132.294222][ T6441] __page_pool_alloc_pages_slow+0x18f/0x770 [ 132.295703][ T6441] page_pool_alloc_netmem+0xc4/0x160 [ 132.297109][ T6441] page_pool_alloc_pages+0x1a/0x60 [ 132.298385][ T6441] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 132.299923][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 132.301249][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 132.302607][ T6441] __sys_bpf+0xfc6/0x49a0 [ 132.303699][ T6441] __x64_sys_bpf+0x78/0xc0 [ 132.304850][ T6441] do_syscall_64+0xcd/0x250 [ 132.306036][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.307550][ T6441] page last free pid 6429 tgid 6428 stack trace: [ 132.309131][ T6441] free_unref_page+0x5f4/0xdc0 [ 132.310325][ T6441] __folio_put+0x30d/0x3d0 [ 132.311474][ T6441] put_page+0x21e/0x280 [ 132.312517][ T6441] page_pool_return_page+0x400/0x520 [ 132.313837][ T6441] page_pool_release+0xf4/0x7d0 [ 132.315046][ T6441] page_pool_destroy+0x10a/0x4c0 [ 132.316368][ T6441] bpf_test_run_xdp_live+0x3a1/0x500 [ 132.317676][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 132.319029][ T6441] __sys_bpf+0xfc6/0x49a0 [ 132.320109][ T6441] __x64_sys_bpf+0x78/0xc0 [ 132.321243][ T6441] do_syscall_64+0xcd/0x250 [ 132.322405][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.323868][ T6441] Modules linked in: [ 132.324861][ T6441] CPU: 3 UID: 0 PID: 6441 Comm: syz.2.108 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 132.327900][ T6441] Tainted: [B]=BAD_PAGE [ 132.328987][ T6441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 132.331662][ T6441] Call Trace: [ 132.332504][ T6441] [ 132.333280][ T6441] dump_stack_lvl+0x16c/0x1f0 [ 132.334505][ T6441] bad_page+0xb3/0x1f0 [ 132.335568][ T6441] ? __pfx_bad_page+0x10/0x10 [ 132.336749][ T6441] ? page_bad_reason+0x9d/0x1e0 [ 132.337977][ T6441] free_unref_page+0x657/0xdc0 [ 132.339168][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 132.340668][ T6441] ? __phys_addr+0xc6/0x150 [ 132.341827][ T6441] skb_free_head+0xa0/0x1d0 [ 132.342991][ T6441] skb_release_data+0x560/0x730 [ 132.344213][ T6441] sk_skb_reason_drop+0x129/0x1a0 [ 132.345488][ T6441] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 132.347157][ T6441] ? kernel_text_address+0x8d/0x100 [ 132.348461][ T6441] ? hlock_class+0x4e/0x130 [ 132.349611][ T6441] ? __lock_acquire+0x163e/0x3ce0 [ 132.350874][ T6441] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 132.352630][ T6441] ? rcu_is_watching+0x12/0xc0 [ 132.353884][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 132.355391][ T6441] __netif_receive_skb_list_core+0x357/0x950 [ 132.356902][ T6441] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 132.358542][ T6441] ? trace_lock_acquire+0x14a/0x1d0 [ 132.359871][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 132.361536][ T6441] ? lock_acquire+0x2f/0xb0 [ 132.362719][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 132.364360][ T6441] netif_receive_skb_list_internal+0x753/0xdb0 [ 132.365970][ T6441] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 132.367700][ T6441] ? __pfx_eth_type_trans+0x10/0x10 [ 132.369055][ T6441] ? __build_skb_around+0x278/0x3b0 [ 132.370426][ T6441] netif_receive_skb_list+0x4f/0x4a0 [ 132.371797][ T6441] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 132.373433][ T6441] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 132.375149][ T6441] ? bpf_test_timer_continue+0x150/0x3d0 [ 132.376610][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 132.377987][ T6441] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 132.379435][ T6441] ? try_to_wake_up+0xc35/0x14f0 [ 132.380729][ T6441] ? __pfx_try_to_wake_up+0x10/0x10 [ 132.382075][ T6441] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 132.383597][ T6441] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 132.384984][ T6441] ? 0xffffffffa0004340 [ 132.386067][ T6441] ? 0xffffffffa0004340 [ 132.387167][ T6441] ? 0xffffffffa0004340 [ 132.388279][ T6441] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 132.389830][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 132.391238][ T6441] ? lock_acquire+0x2f/0xb0 [ 132.392428][ T6441] ? __fget_files+0x40/0x3f0 [ 132.393655][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 132.395182][ T6441] ? fput+0x30/0x390 [ 132.396214][ T6441] ? __bpf_prog_get+0xa0/0x290 [ 132.397479][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 132.399008][ T6441] __sys_bpf+0xfc6/0x49a0 [ 132.400144][ T6441] ? __pfx_futex_wake+0x10/0x10 [ 132.401438][ T6441] ? finish_task_switch.isra.0+0x217/0xcc0 [ 132.402962][ T6441] ? __pfx___sys_bpf+0x10/0x10 [ 132.404225][ T6441] ? __schedule+0xe5d/0x5730 [ 132.405448][ T6441] ? __fget_files+0x23a/0x3f0 [ 132.406716][ T6441] ? do_futex+0x123/0x350 [ 132.407849][ T6441] ? __pfx_do_futex+0x10/0x10 [ 132.409032][ T6441] ? xfd_validate_state+0x5d/0x180 [ 132.410329][ T6441] ? rcu_is_watching+0x12/0xc0 [ 132.411575][ T6441] __x64_sys_bpf+0x78/0xc0 [ 132.412759][ T6441] ? lockdep_hardirqs_on+0x7c/0x110 [ 132.414138][ T6441] do_syscall_64+0xcd/0x250 [ 132.415340][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.416882][ T6441] RIP: 0033:0x7f800db7e719 [ 132.418061][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.423272][ T6441] RSP: 002b:00007f800e9b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 132.425483][ T6441] RAX: ffffffffffffffda RBX: 00007f800dd36058 RCX: 00007f800db7e719 [ 132.427603][ T6441] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 132.429695][ T6441] RBP: 00007f800dbf132e R08: 0000000000000000 R09: 0000000000000000 [ 132.431766][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.433837][ T6441] R13: 0000000000000000 R14: 00007f800dd36058 R15: 00007fffcd7e8d08 [ 132.435908][ T6441] [ 132.436821][ T6441] BUG: Bad page state in process syz.2.108 pfn:27b93 [ 132.438592][ T6441] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888027b939a0 pfn:0x27b93 [ 132.441215][ T6441] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 132.443094][ T6441] raw: 00fff00000000000 dead000000000040 ffff88803fdac000 0000000000000000 [ 132.445311][ T6441] raw: ffff888027b939a0 0000000000000001 00000000ffffffff 0000000000000000 [ 132.447573][ T6441] page dumped because: page_pool leak [ 132.448962][ T6441] page_owner tracks the page as allocated [ 132.450440][ T6441] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6441, tgid 6432 (syz.2.108), ts 124609001370, free_ts 124584069585 [ 132.454759][ T6441] post_alloc_hook+0x2d1/0x350 [ 132.456019][ T6441] get_page_from_freelist+0x101e/0x3070 [ 132.457514][ T6441] __alloc_pages_noprof+0x223/0x25a0 [ 132.458890][ T6441] alloc_pages_bulk_noprof+0x77c/0x1110 [ 132.460333][ T6441] __page_pool_alloc_pages_slow+0x18f/0x770 [ 132.461889][ T6441] page_pool_alloc_netmem+0xc4/0x160 [ 132.463272][ T6441] page_pool_alloc_pages+0x1a/0x60 [ 132.464607][ T6441] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 132.466280][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 132.467675][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 132.469074][ T6441] __sys_bpf+0xfc6/0x49a0 [ 132.470222][ T6441] __x64_sys_bpf+0x78/0xc0 [ 132.471396][ T6441] do_syscall_64+0xcd/0x250 [ 132.472597][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.474152][ T6441] page last free pid 6429 tgid 6428 stack trace: [ 132.475793][ T6441] free_unref_page+0x5f4/0xdc0 [ 132.477115][ T6441] __folio_put+0x30d/0x3d0 [ 132.478295][ T6441] put_page+0x21e/0x280 [ 132.479388][ T6441] page_pool_return_page+0x400/0x520 [ 132.480764][ T6441] page_pool_release+0xf4/0x7d0 [ 132.482052][ T6441] page_pool_destroy+0x10a/0x4c0 [ 132.483448][ T6441] bpf_test_run_xdp_live+0x3a1/0x500 [ 132.484831][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 132.486290][ T6441] __sys_bpf+0xfc6/0x49a0 [ 132.487424][ T6441] __x64_sys_bpf+0x78/0xc0 [ 132.488592][ T6441] do_syscall_64+0xcd/0x250 [ 132.489791][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.491336][ T6441] Modules linked in: [ 132.492372][ T6441] CPU: 3 UID: 0 PID: 6441 Comm: syz.2.108 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 132.495323][ T6441] Tainted: [B]=BAD_PAGE [ 132.496415][ T6441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 132.499002][ T6441] Call Trace: [ 132.499881][ T6441] [ 132.500659][ T6441] dump_stack_lvl+0x16c/0x1f0 [ 132.501809][ T6441] bad_page+0xb3/0x1f0 [ 132.502880][ T6441] ? __pfx_bad_page+0x10/0x10 [ 132.504114][ T6441] ? page_bad_reason+0x9d/0x1e0 [ 132.505396][ T6441] free_unref_page+0x657/0xdc0 [ 132.506643][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 132.507526][ T1411] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.508348][ T6441] ? __phys_addr+0xc6/0x150 [ 132.509997][ T1411] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.511183][ T6441] skb_free_head+0xa0/0x1d0 [ 132.514060][ T6441] skb_release_data+0x560/0x730 [ 132.515342][ T6441] sk_skb_reason_drop+0x129/0x1a0 [ 132.516664][ T6441] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 132.518407][ T6441] ? kernel_text_address+0x8d/0x100 [ 132.519762][ T6441] ? hlock_class+0x4e/0x130 [ 132.520969][ T6441] ? __lock_acquire+0x163e/0x3ce0 [ 132.522286][ T6441] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 132.524124][ T6441] ? rcu_is_watching+0x12/0xc0 [ 132.525392][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 132.526969][ T6441] __netif_receive_skb_list_core+0x357/0x950 [ 132.528538][ T6441] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 132.530255][ T6441] ? trace_lock_acquire+0x14a/0x1d0 [ 132.531609][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 132.533267][ T6441] ? lock_acquire+0x2f/0xb0 [ 132.534456][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 132.536098][ T6441] netif_receive_skb_list_internal+0x753/0xdb0 [ 132.537705][ T6441] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 132.539435][ T6441] ? __pfx_eth_type_trans+0x10/0x10 [ 132.540795][ T6441] ? __build_skb_around+0x278/0x3b0 [ 132.542151][ T6441] netif_receive_skb_list+0x4f/0x4a0 [ 132.543532][ T6441] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 132.545159][ T6441] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 132.546859][ T6441] ? bpf_test_timer_continue+0x150/0x3d0 [ 132.548312][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 132.549705][ T6441] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 132.551220][ T6441] ? try_to_wake_up+0xc35/0x14f0 [ 132.552507][ T6441] ? __pfx_try_to_wake_up+0x10/0x10 [ 132.553866][ T6441] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 132.555412][ T6441] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 132.556791][ T6441] ? 0xffffffffa0004340 [ 132.557883][ T6441] ? 0xffffffffa0004340 [ 132.558968][ T6441] ? 0xffffffffa0004340 [ 132.560055][ T6441] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 132.561614][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 132.563017][ T6441] ? lock_acquire+0x2f/0xb0 [ 132.564204][ T6441] ? __fget_files+0x40/0x3f0 [ 132.565419][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 132.566935][ T6441] ? fput+0x30/0x390 [ 132.567957][ T6441] ? __bpf_prog_get+0xa0/0x290 [ 132.569212][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 132.570723][ T6441] __sys_bpf+0xfc6/0x49a0 [ 132.571852][ T6441] ? __pfx_futex_wake+0x10/0x10 [ 132.573133][ T6441] ? finish_task_switch.isra.0+0x217/0xcc0 [ 132.574655][ T6441] ? __pfx___sys_bpf+0x10/0x10 [ 132.575909][ T6441] ? __schedule+0xe5d/0x5730 [ 132.577133][ T6441] ? __fget_files+0x23a/0x3f0 [ 132.578341][ T6441] ? do_futex+0x123/0x350 [ 132.579449][ T6441] ? __pfx_do_futex+0x10/0x10 [ 132.580685][ T6441] ? xfd_validate_state+0x5d/0x180 [ 132.582050][ T6441] ? rcu_is_watching+0x12/0xc0 [ 132.583278][ T6441] __x64_sys_bpf+0x78/0xc0 [ 132.584427][ T6441] ? lockdep_hardirqs_on+0x7c/0x110 [ 132.585934][ T6441] do_syscall_64+0xcd/0x250 [ 132.587130][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.588675][ T6441] RIP: 0033:0x7f800db7e719 [ 132.589863][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.594854][ T6441] RSP: 002b:00007f800e9b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 132.597008][ T6441] RAX: ffffffffffffffda RBX: 00007f800dd36058 RCX: 00007f800db7e719 [ 132.599036][ T6441] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 132.601111][ T6441] RBP: 00007f800dbf132e R08: 0000000000000000 R09: 0000000000000000 [ 132.603161][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.605244][ T6441] R13: 0000000000000000 R14: 00007f800dd36058 R15: 00007fffcd7e8d08 [ 132.607307][ T6441] [ 132.608266][ T6441] BUG: Bad page state in process syz.2.108 pfn:29016 [ 132.610021][ T6441] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888029016e88 pfn:0x29016 [ 132.612604][ T6441] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 132.614464][ T6441] raw: 00fff00000000000 dead000000000040 ffff88803fdac000 0000000000000000 [ 132.616711][ T6441] raw: ffff888029016e88 0000000000000001 00000000ffffffff 0000000000000000 [ 132.618930][ T6441] page dumped because: page_pool leak [ 132.620319][ T6441] page_owner tracks the page as allocated [ 132.621809][ T6441] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6441, tgid 6432 (syz.2.108), ts 124608996286, free_ts 124584073349 [ 132.626109][ T6441] post_alloc_hook+0x2d1/0x350 [ 132.627411][ T6441] get_page_from_freelist+0x101e/0x3070 [ 132.628840][ T6441] __alloc_pages_noprof+0x223/0x25a0 [ 132.630224][ T6441] alloc_pages_bulk_noprof+0x77c/0x1110 [ 132.631662][ T6441] __page_pool_alloc_pages_slow+0x18f/0x770 [ 132.633210][ T6441] page_pool_alloc_netmem+0xc4/0x160 [ 132.634584][ T6441] page_pool_alloc_pages+0x1a/0x60 [ 132.635921][ T6441] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 132.637587][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 132.638960][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 132.640368][ T6441] __sys_bpf+0xfc6/0x49a0 [ 132.641527][ T6441] __x64_sys_bpf+0x78/0xc0 [ 132.642697][ T6441] do_syscall_64+0xcd/0x250 [ 132.643891][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.645432][ T6441] page last free pid 6429 tgid 6428 stack trace: [ 132.647111][ T6441] free_unref_page+0x5f4/0xdc0 [ 132.648357][ T6441] __folio_put+0x30d/0x3d0 [ 132.649526][ T6441] put_page+0x21e/0x280 [ 132.650612][ T6441] page_pool_return_page+0x400/0x520 [ 132.651988][ T6441] page_pool_release+0xf4/0x7d0 [ 132.653263][ T6441] page_pool_destroy+0x10a/0x4c0 [ 132.654560][ T6441] bpf_test_run_xdp_live+0x3a1/0x500 [ 132.655937][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 132.657372][ T6441] __sys_bpf+0xfc6/0x49a0 [ 132.658500][ T6441] __x64_sys_bpf+0x78/0xc0 [ 132.659672][ T6441] do_syscall_64+0xcd/0x250 [ 132.660888][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.662445][ T6441] Modules linked in: [ 132.663702][ T6441] CPU: 3 UID: 0 PID: 6441 Comm: syz.2.108 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 132.666768][ T6441] Tainted: [B]=BAD_PAGE [ 132.667820][ T6441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 132.670629][ T6441] Call Trace: [ 132.671512][ T6441] [ 132.672247][ T6441] dump_stack_lvl+0x16c/0x1f0 [ 132.673424][ T6441] bad_page+0xb3/0x1f0 [ 132.674473][ T6441] ? __pfx_bad_page+0x10/0x10 [ 132.675699][ T6441] ? page_bad_reason+0x9d/0x1e0 [ 132.676895][ T6441] free_unref_page+0x657/0xdc0 [ 132.678136][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 132.679679][ T6441] ? __phys_addr+0xc6/0x150 [ 132.680845][ T6441] skb_free_head+0xa0/0x1d0 [ 132.682018][ T6441] skb_release_data+0x560/0x730 [ 132.683246][ T6441] sk_skb_reason_drop+0x129/0x1a0 [ 132.684564][ T6441] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 132.686305][ T6441] ? kernel_text_address+0x8d/0x100 [ 132.687659][ T6441] ? hlock_class+0x4e/0x130 [ 132.688854][ T6441] ? __lock_acquire+0x163e/0x3ce0 [ 132.690194][ T6441] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 132.692030][ T6441] ? rcu_is_watching+0x12/0xc0 [ 132.693394][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 132.695001][ T6441] __netif_receive_skb_list_core+0x357/0x950 [ 132.696598][ T6441] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 132.698327][ T6441] ? trace_lock_acquire+0x14a/0x1d0 [ 132.699697][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 132.701378][ T6441] ? lock_acquire+0x2f/0xb0 [ 132.702566][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 132.704216][ T6441] netif_receive_skb_list_internal+0x753/0xdb0 [ 132.705831][ T6441] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 132.707529][ T6441] ? __pfx_eth_type_trans+0x10/0x10 [ 132.708847][ T6441] ? __build_skb_around+0x278/0x3b0 [ 132.710127][ T6441] netif_receive_skb_list+0x4f/0x4a0 [ 132.711506][ T6441] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 132.713161][ T6441] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 132.714874][ T6441] ? bpf_test_timer_continue+0x150/0x3d0 [ 132.716342][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 132.717736][ T6441] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 132.719263][ T6441] ? try_to_wake_up+0xc35/0x14f0 [ 132.720560][ T6441] ? __pfx_try_to_wake_up+0x10/0x10 [ 132.721934][ T6441] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 132.723478][ T6441] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 132.724859][ T6441] ? 0xffffffffa0004340 [ 132.725958][ T6441] ? 0xffffffffa0004340 [ 132.727054][ T6441] ? 0xffffffffa0004340 [ 132.728134][ T6441] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 132.729679][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 132.731082][ T6441] ? lock_acquire+0x2f/0xb0 [ 132.732304][ T6441] ? __fget_files+0x40/0x3f0 [ 132.733527][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 132.735062][ T6441] ? fput+0x30/0x390 [ 132.736087][ T6441] ? __bpf_prog_get+0xa0/0x290 [ 132.737360][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 132.738872][ T6441] __sys_bpf+0xfc6/0x49a0 [ 132.740015][ T6441] ? __pfx_futex_wake+0x10/0x10 [ 132.741425][ T6441] ? finish_task_switch.isra.0+0x217/0xcc0 [ 132.742980][ T6441] ? __pfx___sys_bpf+0x10/0x10 [ 132.744254][ T6441] ? __schedule+0xe5d/0x5730 [ 132.745490][ T6441] ? __fget_files+0x23a/0x3f0 [ 132.746737][ T6441] ? do_futex+0x123/0x350 [ 132.747900][ T6441] ? __pfx_do_futex+0x10/0x10 [ 132.749307][ T6441] ? xfd_validate_state+0x5d/0x180 [ 132.750671][ T6441] ? rcu_is_watching+0x12/0xc0 [ 132.751955][ T6441] __x64_sys_bpf+0x78/0xc0 [ 132.753154][ T6441] ? lockdep_hardirqs_on+0x7c/0x110 [ 132.754519][ T6441] do_syscall_64+0xcd/0x250 [ 132.755722][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.757360][ T6441] RIP: 0033:0x7f800db7e719 [ 132.758601][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.763514][ T6441] RSP: 002b:00007f800e9b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 132.765666][ T6441] RAX: ffffffffffffffda RBX: 00007f800dd36058 RCX: 00007f800db7e719 [ 132.767686][ T6441] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 132.769713][ T6441] RBP: 00007f800dbf132e R08: 0000000000000000 R09: 0000000000000000 [ 132.771706][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.773772][ T6441] R13: 0000000000000000 R14: 00007f800dd36058 R15: 00007fffcd7e8d08 [ 132.775847][ T6441] [ 132.776756][ T6441] BUG: Bad page state in process syz.2.108 pfn:3276d [ 132.778574][ T6441] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803276df50 pfn:0x3276d [ 132.781220][ T6441] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 132.783079][ T6441] raw: 00fff00000000000 dead000000000040 ffff88803fdac000 0000000000000000 [ 132.785308][ T6441] raw: ffff88803276df50 0000000000000001 00000000ffffffff 0000000000000000 [ 132.787595][ T6441] page dumped because: page_pool leak [ 132.788992][ T6441] page_owner tracks the page as allocated [ 132.790483][ T6441] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6441, tgid 6432 (syz.2.108), ts 124608991896, free_ts 124584077052 [ 132.794832][ T6441] post_alloc_hook+0x2d1/0x350 [ 132.796109][ T6441] get_page_from_freelist+0x101e/0x3070 [ 132.797623][ T6441] __alloc_pages_noprof+0x223/0x25a0 [ 132.798996][ T6441] alloc_pages_bulk_noprof+0x77c/0x1110 [ 132.800442][ T6441] __page_pool_alloc_pages_slow+0x18f/0x770 [ 132.801999][ T6441] page_pool_alloc_netmem+0xc4/0x160 [ 132.803522][ T6441] page_pool_alloc_pages+0x1a/0x60 [ 132.804936][ T6441] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 132.806736][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 132.808255][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 132.809679][ T6441] __sys_bpf+0xfc6/0x49a0 [ 132.810822][ T6441] __x64_sys_bpf+0x78/0xc0 [ 132.812003][ T6441] do_syscall_64+0xcd/0x250 [ 132.813212][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.814762][ T6441] page last free pid 6429 tgid 6428 stack trace: [ 132.816467][ T6441] free_unref_page+0x5f4/0xdc0 [ 132.817742][ T6441] __folio_put+0x30d/0x3d0 [ 132.818909][ T6441] put_page+0x21e/0x280 [ 132.820004][ T6441] page_pool_return_page+0x400/0x520 [ 132.821411][ T6441] page_pool_release+0xf4/0x7d0 [ 132.822686][ T6441] page_pool_destroy+0x10a/0x4c0 [ 132.823988][ T6441] bpf_test_run_xdp_live+0x3a1/0x500 [ 132.825537][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 132.827017][ T6441] __sys_bpf+0xfc6/0x49a0 [ 132.828166][ T6441] __x64_sys_bpf+0x78/0xc0 [ 132.829363][ T6441] do_syscall_64+0xcd/0x250 [ 132.830570][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.832134][ T6441] Modules linked in: [ 132.833192][ T6441] CPU: 3 UID: 0 PID: 6441 Comm: syz.2.108 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 132.836319][ T6441] Tainted: [B]=BAD_PAGE [ 132.837415][ T6441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 132.840332][ T6441] Call Trace: [ 132.841257][ T6441] [ 132.842044][ T6441] dump_stack_lvl+0x16c/0x1f0 [ 132.843280][ T6441] bad_page+0xb3/0x1f0 [ 132.844316][ T6441] ? __pfx_bad_page+0x10/0x10 [ 132.845528][ T6441] ? page_bad_reason+0x9d/0x1e0 [ 132.846822][ T6441] free_unref_page+0x657/0xdc0 [ 132.848070][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 132.849564][ T6441] ? __phys_addr+0xc6/0x150 [ 132.850712][ T6441] skb_free_head+0xa0/0x1d0 [ 132.851878][ T6441] skb_release_data+0x560/0x730 [ 132.853115][ T6441] sk_skb_reason_drop+0x129/0x1a0 [ 132.854400][ T6441] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 132.856069][ T6441] ? kernel_text_address+0x8d/0x100 [ 132.857445][ T6441] ? hlock_class+0x4e/0x130 [ 132.858649][ T6441] ? __lock_acquire+0x163e/0x3ce0 [ 132.859966][ T6441] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 132.861823][ T6441] ? rcu_is_watching+0x12/0xc0 [ 132.863080][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 132.864646][ T6441] __netif_receive_skb_list_core+0x357/0x950 [ 132.866342][ T6441] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 132.868051][ T6441] ? trace_lock_acquire+0x14a/0x1d0 [ 132.869447][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 132.871139][ T6441] ? lock_acquire+0x2f/0xb0 [ 132.872350][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 132.874026][ T6441] netif_receive_skb_list_internal+0x753/0xdb0 [ 132.875643][ T6441] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 132.877341][ T6441] ? __pfx_eth_type_trans+0x10/0x10 [ 132.878650][ T6441] ? __build_skb_around+0x278/0x3b0 [ 132.879955][ T6441] netif_receive_skb_list+0x4f/0x4a0 [ 132.881355][ T6441] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 132.883007][ T6441] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 132.884675][ T6441] ? bpf_test_timer_continue+0x150/0x3d0 [ 132.886109][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 132.887501][ T6441] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 132.889038][ T6441] ? try_to_wake_up+0xc35/0x14f0 [ 132.890351][ T6441] ? __pfx_try_to_wake_up+0x10/0x10 [ 132.891889][ T6441] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 132.893521][ T6441] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 132.894918][ T6441] ? 0xffffffffa0004340 [ 132.896023][ T6441] ? 0xffffffffa0004340 [ 132.897127][ T6441] ? 0xffffffffa0004340 [ 132.898209][ T6441] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 132.899742][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 132.901273][ T6441] ? lock_acquire+0x2f/0xb0 [ 132.902483][ T6441] ? __fget_files+0x40/0x3f0 [ 132.903712][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 132.905261][ T6441] ? fput+0x30/0x390 [ 132.906312][ T6441] ? __bpf_prog_get+0xa0/0x290 [ 132.907582][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 132.909116][ T6441] __sys_bpf+0xfc6/0x49a0 [ 132.910412][ T6441] ? __pfx_futex_wake+0x10/0x10 [ 132.911736][ T6441] ? finish_task_switch.isra.0+0x217/0xcc0 [ 132.913294][ T6441] ? __pfx___sys_bpf+0x10/0x10 [ 132.914558][ T6441] ? __schedule+0xe5d/0x5730 [ 132.915793][ T6441] ? __fget_files+0x23a/0x3f0 [ 132.917046][ T6441] ? do_futex+0x123/0x350 [ 132.918199][ T6441] ? __pfx_do_futex+0x10/0x10 [ 132.919445][ T6441] ? xfd_validate_state+0x5d/0x180 [ 132.920795][ T6441] ? rcu_is_watching+0x12/0xc0 [ 132.922076][ T6441] __x64_sys_bpf+0x78/0xc0 [ 132.923404][ T6441] ? lockdep_hardirqs_on+0x7c/0x110 [ 132.924791][ T6441] do_syscall_64+0xcd/0x250 [ 132.926059][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.927551][ T6441] RIP: 0033:0x7f800db7e719 [ 132.928702][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.933684][ T6441] RSP: 002b:00007f800e9b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 132.935859][ T6441] RAX: ffffffffffffffda RBX: 00007f800dd36058 RCX: 00007f800db7e719 [ 132.937865][ T6441] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 132.939853][ T6441] RBP: 00007f800dbf132e R08: 0000000000000000 R09: 0000000000000000 [ 132.941854][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.943860][ T6441] R13: 0000000000000000 R14: 00007f800dd36058 R15: 00007fffcd7e8d08 [ 132.945947][ T6441] [ 132.946852][ T6441] BUG: Bad page state in process syz.2.108 pfn:287c2 [ 132.948620][ T6441] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880287c2e10 pfn:0x287c2 [ 132.951227][ T6441] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 132.953089][ T6441] raw: 00fff00000000000 dead000000000040 ffff88803fdac000 0000000000000000 [ 132.955331][ T6441] raw: ffff8880287c2e10 0000000000000001 00000000ffffffff 0000000000000000 [ 132.957616][ T6441] page dumped because: page_pool leak [ 132.959018][ T6441] page_owner tracks the page as allocated [ 132.960492][ T6441] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6441, tgid 6432 (syz.2.108), ts 124608987406, free_ts 124584080655 [ 132.964878][ T6441] post_alloc_hook+0x2d1/0x350 [ 132.966503][ T6441] get_page_from_freelist+0x101e/0x3070 [ 132.967955][ T6441] __alloc_pages_noprof+0x223/0x25a0 [ 132.969303][ T6441] alloc_pages_bulk_noprof+0x77c/0x1110 [ 132.970703][ T6441] __page_pool_alloc_pages_slow+0x18f/0x770 [ 132.972194][ T6441] page_pool_alloc_netmem+0xc4/0x160 [ 132.973555][ T6441] page_pool_alloc_pages+0x1a/0x60 [ 132.974854][ T6441] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 132.976485][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 132.977827][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 132.979180][ T6441] __sys_bpf+0xfc6/0x49a0 [ 132.980277][ T6441] __x64_sys_bpf+0x78/0xc0 [ 132.981428][ T6441] do_syscall_64+0xcd/0x250 [ 132.982597][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.984087][ T6441] page last free pid 6429 tgid 6428 stack trace: [ 132.985692][ T6441] free_unref_page+0x5f4/0xdc0 [ 132.986967][ T6441] __folio_put+0x30d/0x3d0 [ 132.988110][ T6441] put_page+0x21e/0x280 [ 132.989288][ T6441] page_pool_return_page+0x400/0x520 [ 132.990624][ T6441] page_pool_release+0xf4/0x7d0 [ 132.991868][ T6441] page_pool_destroy+0x10a/0x4c0 [ 132.993129][ T6441] bpf_test_run_xdp_live+0x3a1/0x500 [ 132.994470][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 132.995843][ T6441] __sys_bpf+0xfc6/0x49a0 [ 132.997035][ T6441] __x64_sys_bpf+0x78/0xc0 [ 132.998225][ T6441] do_syscall_64+0xcd/0x250 [ 132.999385][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.000905][ T6441] Modules linked in: [ 133.001900][ T6441] CPU: 3 UID: 0 PID: 6441 Comm: syz.2.108 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 133.004864][ T6441] Tainted: [B]=BAD_PAGE [ 133.005932][ T6441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 133.008631][ T6441] Call Trace: [ 133.009494][ T6441] [ 133.010261][ T6441] dump_stack_lvl+0x16c/0x1f0 [ 133.011474][ T6441] bad_page+0xb3/0x1f0 [ 133.012533][ T6441] ? __pfx_bad_page+0x10/0x10 [ 133.013750][ T6441] ? page_bad_reason+0x9d/0x1e0 [ 133.014981][ T6441] free_unref_page+0x657/0xdc0 [ 133.016206][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 133.017786][ T6441] ? __phys_addr+0xc6/0x150 [ 133.018956][ T6441] skb_free_head+0xa0/0x1d0 [ 133.020104][ T6441] skb_release_data+0x560/0x730 [ 133.021366][ T6441] sk_skb_reason_drop+0x129/0x1a0 [ 133.022651][ T6441] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 133.024293][ T6441] ? kernel_text_address+0x8d/0x100 [ 133.025661][ T6441] ? hlock_class+0x4e/0x130 [ 133.026853][ T6441] ? __lock_acquire+0x163e/0x3ce0 [ 133.028115][ T6441] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 133.029911][ T6441] ? rcu_is_watching+0x12/0xc0 [ 133.031133][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 133.032616][ T6441] __netif_receive_skb_list_core+0x357/0x950 [ 133.034148][ T6441] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 133.035800][ T6441] ? trace_lock_acquire+0x14a/0x1d0 [ 133.037112][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 133.038682][ T6441] ? lock_acquire+0x2f/0xb0 [ 133.039808][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 133.041397][ T6441] netif_receive_skb_list_internal+0x753/0xdb0 [ 133.042932][ T6441] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 133.044609][ T6441] ? __pfx_eth_type_trans+0x10/0x10 [ 133.045953][ T6441] ? __build_skb_around+0x278/0x3b0 [ 133.047269][ T6441] netif_receive_skb_list+0x4f/0x4a0 [ 133.048595][ T6441] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 133.050171][ T6441] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 133.051832][ T6441] ? bpf_test_timer_continue+0x150/0x3d0 [ 133.053279][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 133.054626][ T6441] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 133.056107][ T6441] ? try_to_wake_up+0xc35/0x14f0 [ 133.057371][ T6441] ? __pfx_try_to_wake_up+0x10/0x10 [ 133.058668][ T6441] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 133.060162][ T6441] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 133.061529][ T6441] ? 0xffffffffa0004340 [ 133.062621][ T6441] ? 0xffffffffa0004340 [ 133.063702][ T6441] ? 0xffffffffa0004340 [ 133.064790][ T6441] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 133.066341][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 133.067782][ T6441] ? lock_acquire+0x2f/0xb0 [ 133.069045][ T6441] ? __fget_files+0x40/0x3f0 [ 133.070264][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 133.071782][ T6441] ? fput+0x30/0x390 [ 133.072819][ T6441] ? __bpf_prog_get+0xa0/0x290 [ 133.074078][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 133.075601][ T6441] __sys_bpf+0xfc6/0x49a0 [ 133.076734][ T6441] ? __pfx_futex_wake+0x10/0x10 [ 133.078021][ T6441] ? finish_task_switch.isra.0+0x217/0xcc0 [ 133.079537][ T6441] ? __pfx___sys_bpf+0x10/0x10 [ 133.080793][ T6441] ? __schedule+0xe5d/0x5730 [ 133.082023][ T6441] ? __fget_files+0x23a/0x3f0 [ 133.083221][ T6441] ? do_futex+0x123/0x350 [ 133.084331][ T6441] ? __pfx_do_futex+0x10/0x10 [ 133.085536][ T6441] ? xfd_validate_state+0x5d/0x180 [ 133.086803][ T6441] ? rcu_is_watching+0x12/0xc0 [ 133.088069][ T6441] __x64_sys_bpf+0x78/0xc0 [ 133.089173][ T6441] ? lockdep_hardirqs_on+0x7c/0x110 [ 133.090548][ T6441] do_syscall_64+0xcd/0x250 [ 133.091754][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.093317][ T6441] RIP: 0033:0x7f800db7e719 [ 133.094491][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.099469][ T6441] RSP: 002b:00007f800e9b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 133.101651][ T6441] RAX: ffffffffffffffda RBX: 00007f800dd36058 RCX: 00007f800db7e719 [ 133.103705][ T6441] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 133.105758][ T6441] RBP: 00007f800dbf132e R08: 0000000000000000 R09: 0000000000000000 [ 133.107824][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.109877][ T6441] R13: 0000000000000000 R14: 00007f800dd36058 R15: 00007fffcd7e8d08 [ 133.111952][ T6441] [ 133.112880][ T6441] BUG: Bad page state in process syz.2.108 pfn:2476f [ 133.114620][ T6441] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802476ff00 pfn:0x2476f [ 133.117264][ T6441] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 133.119104][ T6441] raw: 00fff00000000000 dead000000000040 ffff88803fdac000 0000000000000000 [ 133.121328][ T6441] raw: ffff88802476ff00 0000000000000001 00000000ffffffff 0000000000000000 [ 133.123546][ T6441] page dumped because: page_pool leak [ 133.124938][ T6441] page_owner tracks the page as allocated [ 133.126464][ T6441] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6441, tgid 6432 (syz.2.108), ts 124608983073, free_ts 124584084392 [ 133.130696][ T6441] post_alloc_hook+0x2d1/0x350 [ 133.131969][ T6441] get_page_from_freelist+0x101e/0x3070 [ 133.133426][ T6441] __alloc_pages_noprof+0x223/0x25a0 [ 133.134811][ T6441] alloc_pages_bulk_noprof+0x77c/0x1110 [ 133.136306][ T6441] __page_pool_alloc_pages_slow+0x18f/0x770 [ 133.137859][ T6441] page_pool_alloc_netmem+0xc4/0x160 [ 133.139179][ T6441] page_pool_alloc_pages+0x1a/0x60 [ 133.140511][ T6441] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 133.142144][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 133.143528][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 133.144928][ T6441] __sys_bpf+0xfc6/0x49a0 [ 133.146071][ T6441] __x64_sys_bpf+0x78/0xc0 [ 133.147285][ T6441] do_syscall_64+0xcd/0x250 [ 133.148474][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.150032][ T6441] page last free pid 6429 tgid 6428 stack trace: [ 133.151669][ T6441] free_unref_page+0x5f4/0xdc0 [ 133.152924][ T6441] __folio_put+0x30d/0x3d0 [ 133.154107][ T6441] put_page+0x21e/0x280 [ 133.155201][ T6441] page_pool_return_page+0x400/0x520 [ 133.156628][ T6441] page_pool_release+0xf4/0x7d0 [ 133.157908][ T6441] page_pool_destroy+0x10a/0x4c0 [ 133.159217][ T6441] bpf_test_run_xdp_live+0x3a1/0x500 [ 133.160606][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 133.162015][ T6441] __sys_bpf+0xfc6/0x49a0 [ 133.163146][ T6441] __x64_sys_bpf+0x78/0xc0 [ 133.164315][ T6441] do_syscall_64+0xcd/0x250 [ 133.165516][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.167109][ T6441] Modules linked in: [ 133.168140][ T6441] CPU: 3 UID: 0 PID: 6441 Comm: syz.2.108 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 133.171224][ T6441] Tainted: [B]=BAD_PAGE [ 133.172306][ T6441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 133.175069][ T6441] Call Trace: [ 133.175939][ T6441] [ 133.176728][ T6441] dump_stack_lvl+0x16c/0x1f0 [ 133.177979][ T6441] bad_page+0xb3/0x1f0 [ 133.179177][ T6441] ? __pfx_bad_page+0x10/0x10 [ 133.180508][ T6441] ? page_bad_reason+0x9d/0x1e0 [ 133.181866][ T6441] free_unref_page+0x657/0xdc0 [ 133.183145][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 133.184728][ T6441] ? __phys_addr+0xc6/0x150 [ 133.186050][ T6441] skb_free_head+0xa0/0x1d0 [ 133.187264][ T6441] skb_release_data+0x560/0x730 [ 133.188547][ T6441] sk_skb_reason_drop+0x129/0x1a0 [ 133.189875][ T6441] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 133.191613][ T6441] ? kernel_text_address+0x8d/0x100 [ 133.192978][ T6441] ? hlock_class+0x4e/0x130 [ 133.194188][ T6441] ? __lock_acquire+0x163e/0x3ce0 [ 133.195497][ T6441] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 133.197329][ T6441] ? rcu_is_watching+0x12/0xc0 [ 133.198580][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 133.200139][ T6441] __netif_receive_skb_list_core+0x357/0x950 [ 133.201728][ T6441] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 133.203416][ T6441] ? trace_lock_acquire+0x14a/0x1d0 [ 133.204774][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 133.206424][ T6441] ? lock_acquire+0x2f/0xb0 [ 133.207617][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 133.209255][ T6441] netif_receive_skb_list_internal+0x753/0xdb0 [ 133.210987][ T6441] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 133.212733][ T6441] ? __pfx_eth_type_trans+0x10/0x10 [ 133.214120][ T6441] ? __build_skb_around+0x278/0x3b0 [ 133.215500][ T6441] netif_receive_skb_list+0x4f/0x4a0 [ 133.216893][ T6441] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 133.218542][ T6441] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 133.220271][ T6441] ? bpf_test_timer_continue+0x150/0x3d0 [ 133.221720][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 133.223060][ T6441] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 133.224671][ T6441] ? try_to_wake_up+0xc35/0x14f0 [ 133.225987][ T6441] ? __pfx_try_to_wake_up+0x10/0x10 [ 133.227312][ T6441] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 133.228860][ T6441] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 133.230201][ T6441] ? 0xffffffffa0004340 [ 133.231288][ T6441] ? 0xffffffffa0004340 [ 133.232333][ T6441] ? 0xffffffffa0004340 [ 133.233435][ T6441] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 133.234972][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 133.236345][ T6441] ? lock_acquire+0x2f/0xb0 [ 133.237529][ T6441] ? __fget_files+0x40/0x3f0 [ 133.238738][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 133.240254][ T6441] ? fput+0x30/0x390 [ 133.241298][ T6441] ? __bpf_prog_get+0xa0/0x290 [ 133.242552][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 133.244072][ T6441] __sys_bpf+0xfc6/0x49a0 [ 133.245352][ T6441] ? __pfx_futex_wake+0x10/0x10 [ 133.246639][ T6441] ? finish_task_switch.isra.0+0x217/0xcc0 [ 133.248154][ T6441] ? __pfx___sys_bpf+0x10/0x10 [ 133.249417][ T6441] ? __schedule+0xe5d/0x5730 [ 133.250624][ T6441] ? __fget_files+0x23a/0x3f0 [ 133.251858][ T6441] ? do_futex+0x123/0x350 [ 133.252993][ T6441] ? __pfx_do_futex+0x10/0x10 [ 133.254240][ T6441] ? xfd_validate_state+0x5d/0x180 [ 133.255570][ T6441] ? rcu_is_watching+0x12/0xc0 [ 133.256823][ T6441] __x64_sys_bpf+0x78/0xc0 [ 133.258002][ T6441] ? lockdep_hardirqs_on+0x7c/0x110 [ 133.259356][ T6441] do_syscall_64+0xcd/0x250 [ 133.260549][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.262109][ T6441] RIP: 0033:0x7f800db7e719 [ 133.263276][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.268196][ T6441] RSP: 002b:00007f800e9b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 133.270361][ T6441] RAX: ffffffffffffffda RBX: 00007f800dd36058 RCX: 00007f800db7e719 [ 133.272411][ T6441] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 133.274463][ T6441] RBP: 00007f800dbf132e R08: 0000000000000000 R09: 0000000000000000 [ 133.276506][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.278556][ T6441] R13: 0000000000000000 R14: 00007f800dd36058 R15: 00007fffcd7e8d08 [ 133.280605][ T6441] [ 133.281532][ T6441] BUG: Bad page state in process syz.2.108 pfn:28800 [ 133.283421][ T6441] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888028800ee0 pfn:0x28800 [ 133.286069][ T6441] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 133.287976][ T6441] raw: 00fff00000000000 dead000000000040 ffff88803fdac000 0000000000000000 [ 133.290208][ T6441] raw: ffff888028800ee0 0000000000000001 00000000ffffffff 0000000000000000 [ 133.292423][ T6441] page dumped because: page_pool leak [ 133.293837][ T6441] page_owner tracks the page as allocated [ 133.295318][ T6441] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6441, tgid 6432 (syz.2.108), ts 124608978724, free_ts 124584087888 [ 133.299690][ T6441] post_alloc_hook+0x2d1/0x350 [ 133.300958][ T6441] get_page_from_freelist+0x101e/0x3070 [ 133.302405][ T6441] __alloc_pages_noprof+0x223/0x25a0 [ 133.303782][ T6441] alloc_pages_bulk_noprof+0x77c/0x1110 [ 133.305228][ T6441] __page_pool_alloc_pages_slow+0x18f/0x770 [ 133.306811][ T6441] page_pool_alloc_netmem+0xc4/0x160 [ 133.308187][ T6441] page_pool_alloc_pages+0x1a/0x60 [ 133.309535][ T6441] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 133.311144][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 133.312616][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 133.314029][ T6441] __sys_bpf+0xfc6/0x49a0 [ 133.315154][ T6441] __x64_sys_bpf+0x78/0xc0 [ 133.316379][ T6441] do_syscall_64+0xcd/0x250 [ 133.317586][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.319133][ T6441] page last free pid 6429 tgid 6428 stack trace: [ 133.320776][ T6441] free_unref_page+0x5f4/0xdc0 [ 133.322065][ T6441] __folio_put+0x30d/0x3d0 [ 133.323190][ T6441] put_page+0x21e/0x280 [ 133.324281][ T6441] page_pool_return_page+0x400/0x520 [ 133.325656][ T6441] page_pool_release+0xf4/0x7d0 [ 133.326988][ T6441] page_pool_destroy+0x10a/0x4c0 [ 133.328290][ T6441] bpf_test_run_xdp_live+0x3a1/0x500 [ 133.329671][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 133.331069][ T6441] __sys_bpf+0xfc6/0x49a0 [ 133.332192][ T6441] __x64_sys_bpf+0x78/0xc0 [ 133.333361][ T6441] do_syscall_64+0xcd/0x250 [ 133.334546][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.336080][ T6441] Modules linked in: [ 133.337159][ T6441] CPU: 3 UID: 0 PID: 6441 Comm: syz.2.108 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 133.340230][ T6441] Tainted: [B]=BAD_PAGE [ 133.341338][ T6441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 133.344136][ T6441] Call Trace: [ 133.345010][ T6441] [ 133.345737][ T6441] dump_stack_lvl+0x16c/0x1f0 [ 133.346949][ T6441] bad_page+0xb3/0x1f0 [ 133.347983][ T6441] ? __pfx_bad_page+0x10/0x10 [ 133.349171][ T6441] ? page_bad_reason+0x9d/0x1e0 [ 133.350397][ T6441] free_unref_page+0x657/0xdc0 [ 133.351612][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 133.353058][ T6441] ? __phys_addr+0xc6/0x150 [ 133.354217][ T6441] skb_free_head+0xa0/0x1d0 [ 133.355412][ T6441] skb_release_data+0x560/0x730 [ 133.356680][ T6441] sk_skb_reason_drop+0x129/0x1a0 [ 133.358004][ T6441] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 133.359727][ T6441] ? kernel_text_address+0x8d/0x100 [ 133.361102][ T6441] ? hlock_class+0x4e/0x130 [ 133.362290][ T6441] ? __lock_acquire+0x163e/0x3ce0 [ 133.363596][ T6441] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 133.365416][ T6441] ? rcu_is_watching+0x12/0xc0 [ 133.366637][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 133.368211][ T6441] __netif_receive_skb_list_core+0x357/0x950 [ 133.369790][ T6441] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 133.371448][ T6441] ? trace_lock_acquire+0x14a/0x1d0 [ 133.372756][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 133.374361][ T6441] ? lock_acquire+0x2f/0xb0 [ 133.375549][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 133.377199][ T6441] netif_receive_skb_list_internal+0x753/0xdb0 [ 133.378736][ T6441] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 133.380417][ T6441] ? __pfx_eth_type_trans+0x10/0x10 [ 133.381781][ T6441] ? __build_skb_around+0x278/0x3b0 [ 133.383148][ T6441] netif_receive_skb_list+0x4f/0x4a0 [ 133.384525][ T6441] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 133.386165][ T6441] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 133.387870][ T6441] ? bpf_test_timer_continue+0x150/0x3d0 [ 133.389284][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 133.390614][ T6441] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 133.392091][ T6441] ? try_to_wake_up+0xc35/0x14f0 [ 133.393362][ T6441] ? __pfx_try_to_wake_up+0x10/0x10 [ 133.394673][ T6441] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 133.396134][ T6441] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 133.397472][ T6441] ? 0xffffffffa0004340 [ 133.398521][ T6441] ? 0xffffffffa0004340 [ 133.399548][ T6441] ? 0xffffffffa0004340 [ 133.400592][ T6441] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 133.402063][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 133.403404][ T6441] ? lock_acquire+0x2f/0xb0 [ 133.404548][ T6441] ? __fget_files+0x40/0x3f0 [ 133.405737][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 133.407212][ T6441] ? fput+0x30/0x390 [ 133.408239][ T6441] ? __bpf_prog_get+0xa0/0x290 [ 133.409462][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 133.410951][ T6441] __sys_bpf+0xfc6/0x49a0 [ 133.412078][ T6441] ? __pfx_futex_wake+0x10/0x10 [ 133.413356][ T6441] ? finish_task_switch.isra.0+0x217/0xcc0 [ 133.414883][ T6441] ? __pfx___sys_bpf+0x10/0x10 [ 133.416136][ T6441] ? __schedule+0xe5d/0x5730 [ 133.417368][ T6441] ? __fget_files+0x23a/0x3f0 [ 133.418604][ T6441] ? do_futex+0x123/0x350 [ 133.419735][ T6441] ? __pfx_do_futex+0x10/0x10 [ 133.420989][ T6441] ? xfd_validate_state+0x5d/0x180 [ 133.422329][ T6441] ? rcu_is_watching+0x12/0xc0 [ 133.423584][ T6441] __x64_sys_bpf+0x78/0xc0 [ 133.424752][ T6441] ? lockdep_hardirqs_on+0x7c/0x110 [ 133.426121][ T6441] do_syscall_64+0xcd/0x250 [ 133.427317][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.428858][ T6441] RIP: 0033:0x7f800db7e719 [ 133.430038][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.434962][ T6441] RSP: 002b:00007f800e9b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 133.437114][ T6441] RAX: ffffffffffffffda RBX: 00007f800dd36058 RCX: 00007f800db7e719 [ 133.439157][ T6441] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 133.441222][ T6441] RBP: 00007f800dbf132e R08: 0000000000000000 R09: 0000000000000000 [ 133.443272][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.445334][ T6441] R13: 0000000000000000 R14: 00007f800dd36058 R15: 00007fffcd7e8d08 [ 133.447383][ T6441] [ 133.448280][ T6441] BUG: Bad page state in process syz.2.108 pfn:305e8 [ 133.450038][ T6441] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880305e8f00 pfn:0x305e8 [ 133.452607][ T6441] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 133.454432][ T6441] raw: 00fff00000000000 dead000000000040 ffff88803fdac000 0000000000000000 [ 133.456684][ T6441] raw: ffff8880305e8f00 0000000000000001 00000000ffffffff 0000000000000000 [ 133.459013][ T6441] page dumped because: page_pool leak [ 133.460401][ T6441] page_owner tracks the page as allocated [ 133.461885][ T6441] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6441, tgid 6432 (syz.2.108), ts 124608974339, free_ts 124584091838 [ 133.466226][ T6441] post_alloc_hook+0x2d1/0x350 [ 133.467434][ T6441] get_page_from_freelist+0x101e/0x3070 [ 133.468862][ T6441] __alloc_pages_noprof+0x223/0x25a0 [ 133.470244][ T6441] alloc_pages_bulk_noprof+0x77c/0x1110 [ 133.471669][ T6441] __page_pool_alloc_pages_slow+0x18f/0x770 [ 133.473205][ T6441] page_pool_alloc_netmem+0xc4/0x160 [ 133.474572][ T6441] page_pool_alloc_pages+0x1a/0x60 [ 133.475883][ T6441] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 133.477532][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 133.478909][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 133.480307][ T6441] __sys_bpf+0xfc6/0x49a0 [ 133.481451][ T6441] __x64_sys_bpf+0x78/0xc0 [ 133.482606][ T6441] do_syscall_64+0xcd/0x250 [ 133.483763][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.485250][ T6441] page last free pid 6429 tgid 6428 stack trace: [ 133.486902][ T6441] free_unref_page+0x5f4/0xdc0 [ 133.488160][ T6441] __folio_put+0x30d/0x3d0 [ 133.489336][ T6441] put_page+0x21e/0x280 [ 133.490422][ T6441] page_pool_return_page+0x400/0x520 [ 133.491790][ T6441] page_pool_release+0xf4/0x7d0 [ 133.493055][ T6441] page_pool_destroy+0x10a/0x4c0 [ 133.494352][ T6441] bpf_test_run_xdp_live+0x3a1/0x500 [ 133.495726][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 133.497167][ T6441] __sys_bpf+0xfc6/0x49a0 [ 133.498304][ T6441] __x64_sys_bpf+0x78/0xc0 [ 133.499466][ T6441] do_syscall_64+0xcd/0x250 [ 133.500662][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.502208][ T6441] Modules linked in: [ 133.503234][ T6441] CPU: 3 UID: 0 PID: 6441 Comm: syz.2.108 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 133.506294][ T6441] Tainted: [B]=BAD_PAGE [ 133.507370][ T6441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 133.510135][ T6441] Call Trace: [ 133.511002][ T6441] [ 133.511788][ T6441] dump_stack_lvl+0x16c/0x1f0 [ 133.513019][ T6441] bad_page+0xb3/0x1f0 [ 133.514109][ T6441] ? __pfx_bad_page+0x10/0x10 [ 133.515338][ T6441] ? page_bad_reason+0x9d/0x1e0 [ 133.516608][ T6441] free_unref_page+0x657/0xdc0 [ 133.517855][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 133.519390][ T6441] ? __phys_addr+0xc6/0x150 [ 133.520534][ T6441] skb_free_head+0xa0/0x1d0 [ 133.521747][ T6441] skb_release_data+0x560/0x730 [ 133.523027][ T6441] sk_skb_reason_drop+0x129/0x1a0 [ 133.524342][ T6441] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 133.526078][ T6441] ? kernel_text_address+0x8d/0x100 [ 133.527431][ T6441] ? hlock_class+0x4e/0x130 [ 133.528621][ T6441] ? __lock_acquire+0x163e/0x3ce0 [ 133.529943][ T6441] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 133.531779][ T6441] ? rcu_is_watching+0x12/0xc0 [ 133.533033][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 133.534597][ T6441] __netif_receive_skb_list_core+0x357/0x950 [ 133.536159][ T6441] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 133.537843][ T6441] ? trace_lock_acquire+0x14a/0x1d0 [ 133.539198][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 133.540807][ T6441] ? lock_acquire+0x2f/0xb0 [ 133.541956][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 133.543574][ T6441] netif_receive_skb_list_internal+0x753/0xdb0 [ 133.545182][ T6441] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 133.546899][ T6441] ? __pfx_eth_type_trans+0x10/0x10 [ 133.548253][ T6441] ? __build_skb_around+0x278/0x3b0 [ 133.549609][ T6441] netif_receive_skb_list+0x4f/0x4a0 [ 133.550969][ T6441] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 133.552585][ T6441] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 133.554267][ T6441] ? bpf_test_timer_continue+0x150/0x3d0 [ 133.555717][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 133.557112][ T6441] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 133.558594][ T6441] ? try_to_wake_up+0xc35/0x14f0 [ 133.559856][ T6441] ? __pfx_try_to_wake_up+0x10/0x10 [ 133.561179][ T6441] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 133.562712][ T6441] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 133.564084][ T6441] ? 0xffffffffa0004340 [ 133.565180][ T6441] ? 0xffffffffa0004340 [ 133.566257][ T6441] ? 0xffffffffa0004340 [ 133.567329][ T6441] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 133.568859][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 133.570270][ T6441] ? lock_acquire+0x2f/0xb0 [ 133.571455][ T6441] ? __fget_files+0x40/0x3f0 [ 133.572664][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 133.574186][ T6441] ? fput+0x30/0x390 [ 133.575217][ T6441] ? __bpf_prog_get+0xa0/0x290 [ 133.576462][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 133.577980][ T6441] __sys_bpf+0xfc6/0x49a0 [ 133.579104][ T6441] ? __pfx_futex_wake+0x10/0x10 [ 133.580372][ T6441] ? finish_task_switch.isra.0+0x217/0xcc0 [ 133.581891][ T6441] ? __pfx___sys_bpf+0x10/0x10 [ 133.583139][ T6441] ? __schedule+0xe5d/0x5730 [ 133.584345][ T6441] ? __fget_files+0x23a/0x3f0 [ 133.585579][ T6441] ? do_futex+0x123/0x350 [ 133.586704][ T6441] ? __pfx_do_futex+0x10/0x10 [ 133.587930][ T6441] ? xfd_validate_state+0x5d/0x180 [ 133.589268][ T6441] ? rcu_is_watching+0x12/0xc0 [ 133.590524][ T6441] __x64_sys_bpf+0x78/0xc0 [ 133.591689][ T6441] ? lockdep_hardirqs_on+0x7c/0x110 [ 133.593049][ T6441] do_syscall_64+0xcd/0x250 [ 133.594253][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.595795][ T6441] RIP: 0033:0x7f800db7e719 [ 133.596965][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.601826][ T6441] RSP: 002b:00007f800e9b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 133.603971][ T6441] RAX: ffffffffffffffda RBX: 00007f800dd36058 RCX: 00007f800db7e719 [ 133.606003][ T6441] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 133.608026][ T6441] RBP: 00007f800dbf132e R08: 0000000000000000 R09: 0000000000000000 [ 133.610066][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.612095][ T6441] R13: 0000000000000000 R14: 00007f800dd36058 R15: 00007fffcd7e8d08 [ 133.614135][ T6441] [ 133.615024][ T6441] BUG: Bad page state in process syz.2.108 pfn:28d74 [ 133.616787][ T6441] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888028d740f0 pfn:0x28d74 [ 133.619377][ T6441] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 133.621160][ T6441] raw: 00fff00000000000 dead000000000040 ffff88803fdac000 0000000000000000 [ 133.623268][ T6441] raw: ffff888028d740f0 0000000000000001 00000000ffffffff 0000000000000000 [ 133.625461][ T6441] page dumped because: page_pool leak [ 133.626884][ T6441] page_owner tracks the page as allocated [ 133.628352][ T6441] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6441, tgid 6432 (syz.2.108), ts 124608969818, free_ts 124584095625 [ 133.632632][ T6441] post_alloc_hook+0x2d1/0x350 [ 133.633887][ T6441] get_page_from_freelist+0x101e/0x3070 [ 133.635328][ T6441] __alloc_pages_noprof+0x223/0x25a0 [ 133.636748][ T6441] alloc_pages_bulk_noprof+0x77c/0x1110 [ 133.638190][ T6441] __page_pool_alloc_pages_slow+0x18f/0x770 [ 133.639722][ T6441] page_pool_alloc_netmem+0xc4/0x160 [ 133.641109][ T6441] page_pool_alloc_pages+0x1a/0x60 [ 133.642440][ T6441] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 133.644038][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 133.645412][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 133.646851][ T6441] __sys_bpf+0xfc6/0x49a0 [ 133.647981][ T6441] __x64_sys_bpf+0x78/0xc0 [ 133.649162][ T6441] do_syscall_64+0xcd/0x250 [ 133.650360][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.651907][ T6441] page last free pid 6429 tgid 6428 stack trace: [ 133.653572][ T6441] free_unref_page+0x5f4/0xdc0 [ 133.654817][ T6441] __folio_put+0x30d/0x3d0 [ 133.655990][ T6441] put_page+0x21e/0x280 [ 133.657144][ T6441] page_pool_return_page+0x400/0x520 [ 133.658521][ T6441] page_pool_release+0xf4/0x7d0 [ 133.659800][ T6441] page_pool_destroy+0x10a/0x4c0 [ 133.661112][ T6441] bpf_test_run_xdp_live+0x3a1/0x500 [ 133.662488][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 133.663885][ T6441] __sys_bpf+0xfc6/0x49a0 [ 133.665017][ T6441] __x64_sys_bpf+0x78/0xc0 [ 133.666140][ T6441] do_syscall_64+0xcd/0x250 [ 133.667341][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.668821][ T6441] Modules linked in: [ 133.669849][ T6441] CPU: 3 UID: 0 PID: 6441 Comm: syz.2.108 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 133.672819][ T6441] Tainted: [B]=BAD_PAGE [ 133.673907][ T6441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 133.676533][ T6441] Call Trace: [ 133.677381][ T6441] [ 133.678143][ T6441] dump_stack_lvl+0x16c/0x1f0 [ 133.679328][ T6441] bad_page+0xb3/0x1f0 [ 133.680383][ T6441] ? __pfx_bad_page+0x10/0x10 [ 133.681597][ T6441] ? page_bad_reason+0x9d/0x1e0 [ 133.682867][ T6441] free_unref_page+0x657/0xdc0 [ 133.684120][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 133.685682][ T6441] ? __phys_addr+0xc6/0x150 [ 133.686874][ T6441] skb_free_head+0xa0/0x1d0 [ 133.688072][ T6441] skb_release_data+0x560/0x730 [ 133.689346][ T6441] sk_skb_reason_drop+0x129/0x1a0 [ 133.690659][ T6441] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 133.692391][ T6441] ? kernel_text_address+0x8d/0x100 [ 133.693753][ T6441] ? hlock_class+0x4e/0x130 [ 133.694920][ T6441] ? __lock_acquire+0x163e/0x3ce0 [ 133.696196][ T6441] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 133.698029][ T6441] ? rcu_is_watching+0x12/0xc0 [ 133.699284][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 133.700847][ T6441] __netif_receive_skb_list_core+0x357/0x950 [ 133.702429][ T6441] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 133.704110][ T6441] ? trace_lock_acquire+0x14a/0x1d0 [ 133.705478][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 133.707110][ T6441] ? lock_acquire+0x2f/0xb0 [ 133.708293][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 133.709940][ T6441] netif_receive_skb_list_internal+0x753/0xdb0 [ 133.711538][ T6441] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 133.713240][ T6441] ? __pfx_eth_type_trans+0x10/0x10 [ 133.714592][ T6441] ? __build_skb_around+0x278/0x3b0 [ 133.715948][ T6441] netif_receive_skb_list+0x4f/0x4a0 [ 133.717333][ T6441] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 133.718960][ T6441] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 133.720663][ T6441] ? bpf_test_timer_continue+0x150/0x3d0 [ 133.722150][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 133.723492][ T6441] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 133.724951][ T6441] ? try_to_wake_up+0xc35/0x14f0 [ 133.726188][ T6441] ? __pfx_try_to_wake_up+0x10/0x10 [ 133.727530][ T6441] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 133.729048][ T6441] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 133.730427][ T6441] ? 0xffffffffa0004340 [ 133.731499][ T6441] ? 0xffffffffa0004340 [ 133.732574][ T6441] ? 0xffffffffa0004340 [ 133.733591][ T6441] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 133.735094][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 133.736466][ T6441] ? lock_acquire+0x2f/0xb0 [ 133.737622][ T6441] ? __fget_files+0x40/0x3f0 [ 133.738780][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 133.740205][ T6441] ? fput+0x30/0x390 [ 133.741226][ T6441] ? __bpf_prog_get+0xa0/0x290 [ 133.742397][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 133.743889][ T6441] __sys_bpf+0xfc6/0x49a0 [ 133.745227][ T6441] ? __pfx_futex_wake+0x10/0x10 [ 133.746765][ T6441] ? finish_task_switch.isra.0+0x217/0xcc0 [ 133.748481][ T6441] ? __pfx___sys_bpf+0x10/0x10 [ 133.749769][ T6441] ? __schedule+0xe5d/0x5730 [ 133.750989][ T6441] ? __fget_files+0x23a/0x3f0 [ 133.752239][ T6441] ? do_futex+0x123/0x350 [ 133.753389][ T6441] ? __pfx_do_futex+0x10/0x10 [ 133.754620][ T6441] ? xfd_validate_state+0x5d/0x180 [ 133.755913][ T6441] ? rcu_is_watching+0x12/0xc0 [ 133.757193][ T6441] __x64_sys_bpf+0x78/0xc0 [ 133.758339][ T6441] ? lockdep_hardirqs_on+0x7c/0x110 [ 133.759664][ T6441] do_syscall_64+0xcd/0x250 [ 133.760801][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.762307][ T6441] RIP: 0033:0x7f800db7e719 [ 133.763455][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.768313][ T6441] RSP: 002b:00007f800e9b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 133.770487][ T6441] RAX: ffffffffffffffda RBX: 00007f800dd36058 RCX: 00007f800db7e719 [ 133.772545][ T6441] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 133.774542][ T6441] RBP: 00007f800dbf132e R08: 0000000000000000 R09: 0000000000000000 [ 133.776546][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.778491][ T6441] R13: 0000000000000000 R14: 00007f800dd36058 R15: 00007fffcd7e8d08 [ 133.780476][ T6441] [ 133.781366][ T6441] BUG: Bad page state in process syz.2.108 pfn:29749 [ 133.783049][ T6441] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888029749e58 pfn:0x29749 [ 133.785493][ T6441] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 133.787274][ T6441] raw: 00fff00000000000 dead000000000040 ffff88803fdac000 0000000000000000 [ 133.789358][ T6441] raw: ffff888029749e58 0000000000000001 00000000ffffffff 0000000000000000 [ 133.791469][ T6441] page dumped because: page_pool leak [ 133.792796][ T6441] page_owner tracks the page as allocated [ 133.794209][ T6441] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6441, tgid 6432 (syz.2.108), ts 124608965247, free_ts 124584099232 [ 133.798265][ T6441] post_alloc_hook+0x2d1/0x350 [ 133.799446][ T6441] get_page_from_freelist+0x101e/0x3070 [ 133.800835][ T6441] __alloc_pages_noprof+0x223/0x25a0 [ 133.802162][ T6441] alloc_pages_bulk_noprof+0x77c/0x1110 [ 133.803504][ T6441] __page_pool_alloc_pages_slow+0x18f/0x770 [ 133.804966][ T6441] page_pool_alloc_netmem+0xc4/0x160 [ 133.806324][ T6441] page_pool_alloc_pages+0x1a/0x60 [ 133.807607][ T6441] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 133.809144][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 133.810499][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 133.811837][ T6441] __sys_bpf+0xfc6/0x49a0 [ 133.812907][ T6441] __x64_sys_bpf+0x78/0xc0 [ 133.814011][ T6441] do_syscall_64+0xcd/0x250 [ 133.815126][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.816649][ T6441] page last free pid 6429 tgid 6428 stack trace: [ 133.818200][ T6441] free_unref_page+0x5f4/0xdc0 [ 133.819386][ T6441] __folio_put+0x30d/0x3d0 [ 133.820706][ T6441] put_page+0x21e/0x280 [ 133.821839][ T6441] page_pool_return_page+0x400/0x520 [ 133.823268][ T6441] page_pool_release+0xf4/0x7d0 [ 133.824490][ T6441] page_pool_destroy+0x10a/0x4c0 [ 133.825903][ T6441] bpf_test_run_xdp_live+0x3a1/0x500 [ 133.827399][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 133.828859][ T6441] __sys_bpf+0xfc6/0x49a0 [ 133.830057][ T6441] __x64_sys_bpf+0x78/0xc0 [ 133.831203][ T6441] do_syscall_64+0xcd/0x250 [ 133.832302][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.833765][ T6441] Modules linked in: [ 133.834731][ T6441] CPU: 3 UID: 0 PID: 6441 Comm: syz.2.108 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 133.837682][ T6441] Tainted: [B]=BAD_PAGE [ 133.838717][ T6441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 133.841499][ T6441] Call Trace: [ 133.842412][ T6441] [ 133.843199][ T6441] dump_stack_lvl+0x16c/0x1f0 [ 133.844446][ T6441] bad_page+0xb3/0x1f0 [ 133.845537][ T6441] ? __pfx_bad_page+0x10/0x10 [ 133.846781][ T6441] ? page_bad_reason+0x9d/0x1e0 [ 133.848067][ T6441] free_unref_page+0x657/0xdc0 [ 133.849334][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 133.850901][ T6441] ? __phys_addr+0xc6/0x150 [ 133.852094][ T6441] skb_free_head+0xa0/0x1d0 [ 133.853306][ T6441] skb_release_data+0x560/0x730 [ 133.854583][ T6441] sk_skb_reason_drop+0x129/0x1a0 [ 133.855942][ T6441] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 133.857690][ T6441] ? kernel_text_address+0x8d/0x100 [ 133.859040][ T6441] ? hlock_class+0x4e/0x130 [ 133.860234][ T6441] ? __lock_acquire+0x163e/0x3ce0 [ 133.861568][ T6441] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 133.863414][ T6441] ? rcu_is_watching+0x12/0xc0 [ 133.864670][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 133.866248][ T6441] __netif_receive_skb_list_core+0x357/0x950 [ 133.867817][ T6441] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 133.869531][ T6441] ? trace_lock_acquire+0x14a/0x1d0 [ 133.870895][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 133.872554][ T6441] ? lock_acquire+0x2f/0xb0 [ 133.873767][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 133.875426][ T6441] netif_receive_skb_list_internal+0x753/0xdb0 [ 133.877046][ T6441] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 133.878791][ T6441] ? __pfx_eth_type_trans+0x10/0x10 [ 133.880162][ T6441] ? __build_skb_around+0x278/0x3b0 [ 133.881540][ T6441] netif_receive_skb_list+0x4f/0x4a0 [ 133.882922][ T6441] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 133.884544][ T6441] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 133.886266][ T6441] ? bpf_test_timer_continue+0x150/0x3d0 [ 133.887733][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 133.889122][ T6441] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 133.890644][ T6441] ? try_to_wake_up+0xc35/0x14f0 [ 133.891943][ T6441] ? __pfx_try_to_wake_up+0x10/0x10 [ 133.893305][ T6441] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 133.894854][ T6441] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 133.896242][ T6441] ? 0xffffffffa0004340 [ 133.897337][ T6441] ? 0xffffffffa0004340 [ 133.898432][ T6441] ? 0xffffffffa0004340 [ 133.899516][ T6441] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 133.901065][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 133.902497][ T6441] ? lock_acquire+0x2f/0xb0 [ 133.903713][ T6441] ? __fget_files+0x40/0x3f0 [ 133.904962][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 133.906453][ T6441] ? fput+0x30/0x390 [ 133.907488][ T6441] ? __bpf_prog_get+0xa0/0x290 [ 133.908731][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 133.910259][ T6441] __sys_bpf+0xfc6/0x49a0 [ 133.911391][ T6441] ? __pfx_futex_wake+0x10/0x10 [ 133.912674][ T6441] ? finish_task_switch.isra.0+0x217/0xcc0 [ 133.914226][ T6441] ? __pfx___sys_bpf+0x10/0x10 [ 133.915485][ T6441] ? __schedule+0xe5d/0x5730 [ 133.916709][ T6441] ? __fget_files+0x23a/0x3f0 [ 133.918042][ T6441] ? do_futex+0x123/0x350 [ 133.919179][ T6441] ? __pfx_do_futex+0x10/0x10 [ 133.920409][ T6441] ? xfd_validate_state+0x5d/0x180 [ 133.921889][ T6441] ? rcu_is_watching+0x12/0xc0 [ 133.923194][ T6441] __x64_sys_bpf+0x78/0xc0 [ 133.924373][ T6441] ? lockdep_hardirqs_on+0x7c/0x110 [ 133.925759][ T6441] do_syscall_64+0xcd/0x250 [ 133.926970][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.928617][ T6441] RIP: 0033:0x7f800db7e719 [ 133.929817][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.934831][ T6441] RSP: 002b:00007f800e9b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 133.937000][ T6441] RAX: ffffffffffffffda RBX: 00007f800dd36058 RCX: 00007f800db7e719 [ 133.939067][ T6441] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 133.941137][ T6441] RBP: 00007f800dbf132e R08: 0000000000000000 R09: 0000000000000000 [ 133.943190][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.945304][ T6441] R13: 0000000000000000 R14: 00007f800dd36058 R15: 00007fffcd7e8d08 [ 133.947435][ T6441] [ 133.948367][ T6441] BUG: Bad page state in process syz.2.108 pfn:2af97 [ 133.950145][ T6441] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802af97000 pfn:0x2af97 [ 133.952613][ T6441] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 133.954460][ T6441] raw: 00fff00000000000 dead000000000040 ffff88803fdac000 0000000000000000 [ 133.956611][ T6441] raw: ffff88802af97000 0000000000000001 00000000ffffffff 0000000000000000 [ 133.958830][ T6441] page dumped because: page_pool leak [ 133.960169][ T6441] page_owner tracks the page as allocated [ 133.961821][ T6441] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6441, tgid 6432 (syz.2.108), ts 124608960955, free_ts 124584102960 [ 133.966752][ T6441] post_alloc_hook+0x2d1/0x350 [ 133.968013][ T6441] get_page_from_freelist+0x101e/0x3070 [ 133.969391][ T6441] __alloc_pages_noprof+0x223/0x25a0 [ 133.970916][ T6441] alloc_pages_bulk_noprof+0x77c/0x1110 [ 133.972356][ T6441] __page_pool_alloc_pages_slow+0x18f/0x770 [ 133.973839][ T6441] page_pool_alloc_netmem+0xc4/0x160 [ 133.975189][ T6441] page_pool_alloc_pages+0x1a/0x60 [ 133.976566][ T6441] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 133.978131][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 133.979518][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 133.981030][ T6441] __sys_bpf+0xfc6/0x49a0 [ 133.982194][ T6441] __x64_sys_bpf+0x78/0xc0 [ 133.983372][ T6441] do_syscall_64+0xcd/0x250 [ 133.984575][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.986142][ T6441] page last free pid 6429 tgid 6428 stack trace: [ 133.987837][ T6441] free_unref_page+0x5f4/0xdc0 [ 133.989101][ T6441] __folio_put+0x30d/0x3d0 [ 133.990279][ T6441] put_page+0x21e/0x280 [ 133.991377][ T6441] page_pool_return_page+0x400/0x520 [ 133.992763][ T6441] page_pool_release+0xf4/0x7d0 [ 133.994051][ T6441] page_pool_destroy+0x10a/0x4c0 [ 133.995359][ T6441] bpf_test_run_xdp_live+0x3a1/0x500 [ 133.996797][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 133.998206][ T6441] __sys_bpf+0xfc6/0x49a0 [ 133.999342][ T6441] __x64_sys_bpf+0x78/0xc0 [ 134.000516][ T6441] do_syscall_64+0xcd/0x250 [ 134.001729][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.003280][ T6441] Modules linked in: [ 134.004320][ T6441] CPU: 3 UID: 0 PID: 6441 Comm: syz.2.108 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 134.007691][ T6441] Tainted: [B]=BAD_PAGE [ 134.008877][ T6441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 134.011648][ T6441] Call Trace: [ 134.012540][ T6441] [ 134.013332][ T6441] dump_stack_lvl+0x16c/0x1f0 [ 134.014572][ T6441] bad_page+0xb3/0x1f0 [ 134.015648][ T6441] ? __pfx_bad_page+0x10/0x10 [ 134.016879][ T6441] ? page_bad_reason+0x9d/0x1e0 [ 134.018169][ T6441] free_unref_page+0x657/0xdc0 [ 134.019431][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 134.021008][ T6441] ? __phys_addr+0xc6/0x150 [ 134.022215][ T6441] skb_free_head+0xa0/0x1d0 [ 134.023467][ T6441] skb_release_data+0x560/0x730 [ 134.024826][ T6441] sk_skb_reason_drop+0x129/0x1a0 [ 134.026245][ T6441] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 134.028028][ T6441] ? kernel_text_address+0x8d/0x100 [ 134.029456][ T6441] ? hlock_class+0x4e/0x130 [ 134.030676][ T6441] ? __lock_acquire+0x163e/0x3ce0 [ 134.032003][ T6441] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 134.033878][ T6441] ? rcu_is_watching+0x12/0xc0 [ 134.035105][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 134.036691][ T6441] __netif_receive_skb_list_core+0x357/0x950 [ 134.038277][ T6441] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 134.039986][ T6441] ? trace_lock_acquire+0x14a/0x1d0 [ 134.041380][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 134.043039][ T6441] ? lock_acquire+0x2f/0xb0 [ 134.044241][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 134.045929][ T6441] netif_receive_skb_list_internal+0x753/0xdb0 [ 134.047550][ T6441] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 134.049352][ T6441] ? __pfx_eth_type_trans+0x10/0x10 [ 134.050737][ T6441] ? __build_skb_around+0x278/0x3b0 [ 134.052106][ T6441] netif_receive_skb_list+0x4f/0x4a0 [ 134.053488][ T6441] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 134.055114][ T6441] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 134.056852][ T6441] ? bpf_test_timer_continue+0x150/0x3d0 [ 134.058330][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 134.059715][ T6441] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 134.061261][ T6441] ? try_to_wake_up+0xc35/0x14f0 [ 134.062562][ T6441] ? __pfx_try_to_wake_up+0x10/0x10 [ 134.063914][ T6441] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 134.065466][ T6441] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 134.066846][ T6441] ? 0xffffffffa0004340 [ 134.067936][ T6441] ? 0xffffffffa0004340 [ 134.069030][ T6441] ? 0xffffffffa0004340 [ 134.070129][ T6441] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 134.071679][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 134.073102][ T6441] ? lock_acquire+0x2f/0xb0 [ 134.074435][ T6441] ? __fget_files+0x40/0x3f0 [ 134.075744][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 134.077300][ T6441] ? fput+0x30/0x390 [ 134.078350][ T6441] ? __bpf_prog_get+0xa0/0x290 [ 134.079609][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 134.081157][ T6441] __sys_bpf+0xfc6/0x49a0 [ 134.082303][ T6441] ? __pfx_futex_wake+0x10/0x10 [ 134.083596][ T6441] ? finish_task_switch.isra.0+0x217/0xcc0 [ 134.085129][ T6441] ? __pfx___sys_bpf+0x10/0x10 [ 134.086389][ T6441] ? __schedule+0xe5d/0x5730 [ 134.087615][ T6441] ? __fget_files+0x23a/0x3f0 [ 134.088855][ T6441] ? do_futex+0x123/0x350 [ 134.090002][ T6441] ? __pfx_do_futex+0x10/0x10 [ 134.091251][ T6441] ? xfd_validate_state+0x5d/0x180 [ 134.092593][ T6441] ? rcu_is_watching+0x12/0xc0 [ 134.093846][ T6441] __x64_sys_bpf+0x78/0xc0 [ 134.095030][ T6441] ? lockdep_hardirqs_on+0x7c/0x110 [ 134.096397][ T6441] do_syscall_64+0xcd/0x250 [ 134.097609][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.099169][ T6441] RIP: 0033:0x7f800db7e719 [ 134.100342][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.105378][ T6441] RSP: 002b:00007f800e9b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 134.107539][ T6441] RAX: ffffffffffffffda RBX: 00007f800dd36058 RCX: 00007f800db7e719 [ 134.109603][ T6441] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 134.111661][ T6441] RBP: 00007f800dbf132e R08: 0000000000000000 R09: 0000000000000000 [ 134.113726][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.115790][ T6441] R13: 0000000000000000 R14: 00007f800dd36058 R15: 00007fffcd7e8d08 [ 134.117857][ T6441] [ 134.118771][ T6441] BUG: Bad page state in process syz.2.108 pfn:2f54e [ 134.120524][ T6441] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802f54ef00 pfn:0x2f54e [ 134.123347][ T6441] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 134.125357][ T6441] raw: 00fff00000000000 dead000000000040 ffff88803fdac000 0000000000000000 [ 134.127617][ T6441] raw: ffff88802f54ef00 0000000000000001 00000000ffffffff 0000000000000000 [ 134.129812][ T6441] page dumped because: page_pool leak [ 134.131207][ T6441] page_owner tracks the page as allocated [ 134.132683][ T6441] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6441, tgid 6432 (syz.2.108), ts 124608956341, free_ts 124584106522 [ 134.137053][ T6441] post_alloc_hook+0x2d1/0x350 [ 134.138321][ T6441] get_page_from_freelist+0x101e/0x3070 [ 134.139766][ T6441] __alloc_pages_noprof+0x223/0x25a0 [ 134.141168][ T6441] alloc_pages_bulk_noprof+0x77c/0x1110 [ 134.142623][ T6441] __page_pool_alloc_pages_slow+0x18f/0x770 [ 134.144275][ T6441] page_pool_alloc_netmem+0xc4/0x160 [ 134.145683][ T6441] page_pool_alloc_pages+0x1a/0x60 [ 134.147097][ T6441] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 134.148712][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 134.150107][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 134.151504][ T6441] __sys_bpf+0xfc6/0x49a0 [ 134.152654][ T6441] __x64_sys_bpf+0x78/0xc0 [ 134.153829][ T6441] do_syscall_64+0xcd/0x250 [ 134.155023][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.156695][ T6441] page last free pid 6429 tgid 6428 stack trace: [ 134.158381][ T6441] free_unref_page+0x5f4/0xdc0 [ 134.159652][ T6441] __folio_put+0x30d/0x3d0 [ 134.160827][ T6441] put_page+0x21e/0x280 [ 134.161945][ T6441] page_pool_return_page+0x400/0x520 [ 134.163334][ T6441] page_pool_release+0xf4/0x7d0 [ 134.164610][ T6441] page_pool_destroy+0x10a/0x4c0 [ 134.165910][ T6441] bpf_test_run_xdp_live+0x3a1/0x500 [ 134.167344][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 134.168750][ T6441] __sys_bpf+0xfc6/0x49a0 [ 134.169889][ T6441] __x64_sys_bpf+0x78/0xc0 [ 134.171069][ T6441] do_syscall_64+0xcd/0x250 [ 134.172267][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.173858][ T6441] Modules linked in: [ 134.174897][ T6441] CPU: 3 UID: 0 PID: 6441 Comm: syz.2.108 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 134.178002][ T6441] Tainted: [B]=BAD_PAGE [ 134.179078][ T6441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 134.181857][ T6441] Call Trace: [ 134.182736][ T6441] [ 134.183517][ T6441] dump_stack_lvl+0x16c/0x1f0 [ 134.184762][ T6441] bad_page+0xb3/0x1f0 [ 134.185842][ T6441] ? __pfx_bad_page+0x10/0x10 [ 134.187080][ T6441] ? page_bad_reason+0x9d/0x1e0 [ 134.188351][ T6441] free_unref_page+0x657/0xdc0 [ 134.189601][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 134.191167][ T6441] ? __phys_addr+0xc6/0x150 [ 134.192353][ T6441] skb_free_head+0xa0/0x1d0 [ 134.193559][ T6441] skb_release_data+0x560/0x730 [ 134.194834][ T6441] sk_skb_reason_drop+0x129/0x1a0 [ 134.196158][ T6441] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 134.197982][ T6441] ? kernel_text_address+0x8d/0x100 [ 134.199352][ T6441] ? hlock_class+0x4e/0x130 [ 134.200552][ T6441] ? __lock_acquire+0x163e/0x3ce0 [ 134.201887][ T6441] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 134.203706][ T6441] ? rcu_is_watching+0x12/0xc0 [ 134.204959][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 134.206530][ T6441] __netif_receive_skb_list_core+0x357/0x950 [ 134.208081][ T6441] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 134.209777][ T6441] ? trace_lock_acquire+0x14a/0x1d0 [ 134.211140][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 134.212778][ T6441] ? lock_acquire+0x2f/0xb0 [ 134.213977][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 134.215622][ T6441] netif_receive_skb_list_internal+0x753/0xdb0 [ 134.217234][ T6441] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 134.218964][ T6441] ? __pfx_eth_type_trans+0x10/0x10 [ 134.220325][ T6441] ? __build_skb_around+0x278/0x3b0 [ 134.221698][ T6441] netif_receive_skb_list+0x4f/0x4a0 [ 134.223076][ T6441] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 134.224704][ T6441] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 134.226416][ T6441] ? bpf_test_timer_continue+0x150/0x3d0 [ 134.227873][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 134.229264][ T6441] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 134.230793][ T6441] ? try_to_wake_up+0xc35/0x14f0 [ 134.232249][ T6441] ? __pfx_try_to_wake_up+0x10/0x10 [ 134.233654][ T6441] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 134.235207][ T6441] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 134.236592][ T6441] ? 0xffffffffa0004340 [ 134.237727][ T6441] ? 0xffffffffa0004340 [ 134.238818][ T6441] ? 0xffffffffa0004340 [ 134.239908][ T6441] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 134.241482][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 134.242891][ T6441] ? lock_acquire+0x2f/0xb0 [ 134.244083][ T6441] ? __fget_files+0x40/0x3f0 [ 134.245308][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 134.246834][ T6441] ? fput+0x30/0x390 [ 134.247864][ T6441] ? __bpf_prog_get+0xa0/0x290 [ 134.249133][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 134.250652][ T6441] __sys_bpf+0xfc6/0x49a0 [ 134.251781][ T6441] ? __pfx_futex_wake+0x10/0x10 [ 134.253059][ T6441] ? finish_task_switch.isra.0+0x217/0xcc0 [ 134.254580][ T6441] ? __pfx___sys_bpf+0x10/0x10 [ 134.255833][ T6441] ? __schedule+0xe5d/0x5730 [ 134.257050][ T6441] ? __fget_files+0x23a/0x3f0 [ 134.258295][ T6441] ? do_futex+0x123/0x350 [ 134.259463][ T6441] ? __pfx_do_futex+0x10/0x10 [ 134.260702][ T6441] ? xfd_validate_state+0x5d/0x180 [ 134.262068][ T6441] ? rcu_is_watching+0x12/0xc0 [ 134.263334][ T6441] __x64_sys_bpf+0x78/0xc0 [ 134.264507][ T6441] ? lockdep_hardirqs_on+0x7c/0x110 [ 134.265876][ T6441] do_syscall_64+0xcd/0x250 [ 134.267081][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.268626][ T6441] RIP: 0033:0x7f800db7e719 [ 134.269813][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.274781][ T6441] RSP: 002b:00007f800e9b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 134.276960][ T6441] RAX: ffffffffffffffda RBX: 00007f800dd36058 RCX: 00007f800db7e719 [ 134.279010][ T6441] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 134.281073][ T6441] RBP: 00007f800dbf132e R08: 0000000000000000 R09: 0000000000000000 [ 134.283141][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.285196][ T6441] R13: 0000000000000000 R14: 00007f800dd36058 R15: 00007fffcd7e8d08 [ 134.287254][ T6441] [ 134.288157][ T6441] BUG: Bad page state in process syz.2.108 pfn:2397d [ 134.289923][ T6441] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802397de88 pfn:0x2397d [ 134.292458][ T6441] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 134.294322][ T6441] raw: 00fff00000000000 dead000000000040 ffff88803fdac000 0000000000000000 [ 134.296617][ T6441] raw: ffff88802397de88 0000000000000001 00000000ffffffff 0000000000000000 [ 134.298818][ T6441] page dumped because: page_pool leak [ 134.300213][ T6441] page_owner tracks the page as allocated [ 134.301686][ T6441] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6441, tgid 6432 (syz.2.108), ts 124608951978, free_ts 124584110398 [ 134.306014][ T6441] post_alloc_hook+0x2d1/0x350 [ 134.307327][ T6441] get_page_from_freelist+0x101e/0x3070 [ 134.308756][ T6441] __alloc_pages_noprof+0x223/0x25a0 [ 134.310156][ T6441] alloc_pages_bulk_noprof+0x77c/0x1110 [ 134.311601][ T6441] __page_pool_alloc_pages_slow+0x18f/0x770 [ 134.313149][ T6441] page_pool_alloc_netmem+0xc4/0x160 [ 134.314530][ T6441] page_pool_alloc_pages+0x1a/0x60 [ 134.315869][ T6441] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 134.317536][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 134.318922][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 134.320338][ T6441] __sys_bpf+0xfc6/0x49a0 [ 134.321496][ T6441] __x64_sys_bpf+0x78/0xc0 [ 134.322663][ T6441] do_syscall_64+0xcd/0x250 [ 134.323855][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.325407][ T6441] page last free pid 6429 tgid 6428 stack trace: [ 134.327095][ T6441] free_unref_page+0x5f4/0xdc0 [ 134.328345][ T6441] __folio_put+0x30d/0x3d0 [ 134.329523][ T6441] put_page+0x21e/0x280 [ 134.330612][ T6441] page_pool_return_page+0x400/0x520 [ 134.331990][ T6441] page_pool_release+0xf4/0x7d0 [ 134.333262][ T6441] page_pool_destroy+0x10a/0x4c0 [ 134.334553][ T6441] bpf_test_run_xdp_live+0x3a1/0x500 [ 134.335936][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 134.337389][ T6441] __sys_bpf+0xfc6/0x49a0 [ 134.338521][ T6441] __x64_sys_bpf+0x78/0xc0 [ 134.339684][ T6441] do_syscall_64+0xcd/0x250 [ 134.340885][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.342488][ T6441] Modules linked in: [ 134.343509][ T6441] CPU: 3 UID: 0 PID: 6441 Comm: syz.2.108 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 134.346598][ T6441] Tainted: [B]=BAD_PAGE [ 134.347683][ T6441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 134.350444][ T6441] Call Trace: [ 134.351322][ T6441] [ 134.352101][ T6441] dump_stack_lvl+0x16c/0x1f0 [ 134.353368][ T6441] bad_page+0xb3/0x1f0 [ 134.354446][ T6441] ? __pfx_bad_page+0x10/0x10 [ 134.355680][ T6441] ? page_bad_reason+0x9d/0x1e0 [ 134.356959][ T6441] free_unref_page+0x657/0xdc0 [ 134.358223][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 134.359781][ T6441] ? __phys_addr+0xc6/0x150 [ 134.360994][ T6441] skb_free_head+0xa0/0x1d0 [ 134.362196][ T6441] skb_release_data+0x560/0x730 [ 134.363464][ T6441] sk_skb_reason_drop+0x129/0x1a0 [ 134.364776][ T6441] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 134.366508][ T6441] ? kernel_text_address+0x8d/0x100 [ 134.367866][ T6441] ? hlock_class+0x4e/0x130 [ 134.369061][ T6441] ? __lock_acquire+0x163e/0x3ce0 [ 134.370380][ T6441] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 134.372216][ T6441] ? rcu_is_watching+0x12/0xc0 [ 134.373484][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 134.375047][ T6441] __netif_receive_skb_list_core+0x357/0x950 [ 134.376616][ T6441] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 134.378308][ T6441] ? trace_lock_acquire+0x14a/0x1d0 [ 134.379665][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 134.381336][ T6441] ? lock_acquire+0x2f/0xb0 [ 134.382528][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 134.384181][ T6441] netif_receive_skb_list_internal+0x753/0xdb0 [ 134.385810][ T6441] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 134.387541][ T6441] ? __pfx_eth_type_trans+0x10/0x10 [ 134.388910][ T6441] ? __build_skb_around+0x278/0x3b0 [ 134.390302][ T6441] netif_receive_skb_list+0x4f/0x4a0 [ 134.391687][ T6441] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 134.393327][ T6441] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 134.395039][ T6441] ? bpf_test_timer_continue+0x150/0x3d0 [ 134.396492][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 134.397876][ T6441] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 134.399406][ T6441] ? try_to_wake_up+0xc35/0x14f0 [ 134.400703][ T6441] ? __pfx_try_to_wake_up+0x10/0x10 [ 134.402082][ T6441] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 134.403629][ T6441] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 134.405013][ T6441] ? 0xffffffffa0004340 [ 134.406112][ T6441] ? 0xffffffffa0004340 [ 134.407204][ T6441] ? 0xffffffffa0004340 [ 134.408297][ T6441] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 134.409845][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 134.411257][ T6441] ? lock_acquire+0x2f/0xb0 [ 134.412451][ T6441] ? __fget_files+0x40/0x3f0 [ 134.413667][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 134.415190][ T6441] ? fput+0x30/0x390 [ 134.416219][ T6441] ? __bpf_prog_get+0xa0/0x290 [ 134.417480][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 134.418998][ T6441] __sys_bpf+0xfc6/0x49a0 [ 134.420124][ T6441] ? __pfx_futex_wake+0x10/0x10 [ 134.421414][ T6441] ? finish_task_switch.isra.0+0x217/0xcc0 [ 134.422938][ T6441] ? __pfx___sys_bpf+0x10/0x10 [ 134.424188][ T6441] ? __schedule+0xe5d/0x5730 [ 134.425404][ T6441] ? __fget_files+0x23a/0x3f0 [ 134.426635][ T6441] ? do_futex+0x123/0x350 [ 134.427768][ T6441] ? __pfx_do_futex+0x10/0x10 [ 134.429003][ T6441] ? xfd_validate_state+0x5d/0x180 [ 134.430351][ T6441] ? rcu_is_watching+0x12/0xc0 [ 134.431612][ T6441] __x64_sys_bpf+0x78/0xc0 [ 134.432779][ T6441] ? lockdep_hardirqs_on+0x7c/0x110 [ 134.434153][ T6441] do_syscall_64+0xcd/0x250 [ 134.435354][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.436898][ T6441] RIP: 0033:0x7f800db7e719 [ 134.438079][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.443060][ T6441] RSP: 002b:00007f800e9b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 134.445230][ T6441] RAX: ffffffffffffffda RBX: 00007f800dd36058 RCX: 00007f800db7e719 [ 134.447266][ T6441] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 134.449277][ T6441] RBP: 00007f800dbf132e R08: 0000000000000000 R09: 0000000000000000 [ 134.451320][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.453360][ T6441] R13: 0000000000000000 R14: 00007f800dd36058 R15: 00007fffcd7e8d08 [ 134.455415][ T6441] [ 134.456307][ T6441] BUG: Bad page state in process syz.2.108 pfn:4ceb2 [ 134.458082][ T6441] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804ceb2e58 pfn:0x4ceb2 [ 134.460682][ T6441] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 134.462546][ T6441] raw: 00fff00000000000 dead000000000040 ffff88803fdac000 0000000000000000 [ 134.464753][ T6441] raw: ffff88804ceb2e58 0000000000000001 00000000ffffffff 0000000000000000 [ 134.467015][ T6441] page dumped because: page_pool leak [ 134.468404][ T6441] page_owner tracks the page as allocated [ 134.469891][ T6441] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6441, tgid 6432 (syz.2.108), ts 124608940508, free_ts 124584114191 [ 134.474192][ T6441] post_alloc_hook+0x2d1/0x350 [ 134.475442][ T6441] get_page_from_freelist+0x101e/0x3070 [ 134.476923][ T6441] __alloc_pages_noprof+0x223/0x25a0 [ 134.478310][ T6441] alloc_pages_bulk_noprof+0x77c/0x1110 [ 134.479747][ T6441] __page_pool_alloc_pages_slow+0x18f/0x770 [ 134.481298][ T6441] page_pool_alloc_netmem+0xc4/0x160 [ 134.482663][ T6441] page_pool_alloc_pages+0x1a/0x60 [ 134.483990][ T6441] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 134.485586][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 134.487004][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 134.488402][ T6441] __sys_bpf+0xfc6/0x49a0 [ 134.489540][ T6441] __x64_sys_bpf+0x78/0xc0 [ 134.490712][ T6441] do_syscall_64+0xcd/0x250 [ 134.491905][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.493459][ T6441] page last free pid 6429 tgid 6428 stack trace: [ 134.495095][ T6441] free_unref_page+0x5f4/0xdc0 [ 134.496385][ T6441] __folio_put+0x30d/0x3d0 [ 134.497568][ T6441] put_page+0x21e/0x280 [ 134.498664][ T6441] page_pool_return_page+0x400/0x520 [ 134.500035][ T6441] page_pool_release+0xf4/0x7d0 [ 134.501315][ T6441] page_pool_destroy+0x10a/0x4c0 [ 134.502634][ T6441] bpf_test_run_xdp_live+0x3a1/0x500 [ 134.504014][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 134.505400][ T6441] __sys_bpf+0xfc6/0x49a0 [ 134.506591][ T6441] __x64_sys_bpf+0x78/0xc0 [ 134.507760][ T6441] do_syscall_64+0xcd/0x250 [ 134.508963][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.510500][ T6441] Modules linked in: [ 134.511526][ T6441] CPU: 3 UID: 0 PID: 6441 Comm: syz.2.108 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 134.514596][ T6441] Tainted: [B]=BAD_PAGE [ 134.515683][ T6441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 134.518458][ T6441] Call Trace: [ 134.519339][ T6441] [ 134.520120][ T6441] dump_stack_lvl+0x16c/0x1f0 [ 134.521371][ T6441] bad_page+0xb3/0x1f0 [ 134.522447][ T6441] ? __pfx_bad_page+0x10/0x10 [ 134.523685][ T6441] ? page_bad_reason+0x9d/0x1e0 [ 134.524978][ T6441] free_unref_page+0x657/0xdc0 [ 134.526245][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 134.527811][ T6441] ? __phys_addr+0xc6/0x150 [ 134.528998][ T6441] skb_free_head+0xa0/0x1d0 [ 134.530216][ T6441] skb_release_data+0x560/0x730 [ 134.531494][ T6441] sk_skb_reason_drop+0x129/0x1a0 [ 134.532815][ T6441] __netif_receive_skb_core.constprop.0+0x592/0x4330 [ 134.534554][ T6441] ? kernel_text_address+0x8d/0x100 [ 134.535911][ T6441] ? hlock_class+0x4e/0x130 [ 134.537114][ T6441] ? __lock_acquire+0x163e/0x3ce0 [ 134.538427][ T6441] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 134.540262][ T6441] ? rcu_is_watching+0x12/0xc0 [ 134.541491][ T6441] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 134.543054][ T6441] __netif_receive_skb_list_core+0x357/0x950 [ 134.544613][ T6441] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 134.546296][ T6441] ? trace_lock_acquire+0x14a/0x1d0 [ 134.547649][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 134.549304][ T6441] ? lock_acquire+0x2f/0xb0 [ 134.550495][ T6441] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 134.552142][ T6441] netif_receive_skb_list_internal+0x753/0xdb0 [ 134.553755][ T6441] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 134.555477][ T6441] ? __pfx_eth_type_trans+0x10/0x10 [ 134.556836][ T6441] ? __build_skb_around+0x278/0x3b0 [ 134.558157][ T6441] netif_receive_skb_list+0x4f/0x4a0 [ 134.559538][ T6441] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 134.561178][ T6441] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 134.562899][ T6441] ? bpf_test_timer_continue+0x150/0x3d0 [ 134.564365][ T6441] bpf_test_run_xdp_live+0x365/0x500 [ 134.565755][ T6441] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 134.567279][ T6441] ? try_to_wake_up+0xc35/0x14f0 [ 134.568575][ T6441] ? __pfx_try_to_wake_up+0x10/0x10 [ 134.569936][ T6441] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 134.571493][ T6441] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 134.572866][ T6441] ? 0xffffffffa0004340 [ 134.573968][ T6441] ? 0xffffffffa0004340 [ 134.575062][ T6441] ? 0xffffffffa0004340 [ 134.576150][ T6441] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 134.577691][ T6441] bpf_prog_test_run_xdp+0x827/0x1580 [ 134.579093][ T6441] ? lock_acquire+0x2f/0xb0 [ 134.580283][ T6441] ? __fget_files+0x40/0x3f0 [ 134.581512][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 134.583038][ T6441] ? fput+0x30/0x390 [ 134.584066][ T6441] ? __bpf_prog_get+0xa0/0x290 [ 134.585336][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 134.586860][ T6441] __sys_bpf+0xfc6/0x49a0 [ 134.587989][ T6441] ? __pfx_futex_wake+0x10/0x10 [ 134.589271][ T6441] ? finish_task_switch.isra.0+0x217/0xcc0 [ 134.590800][ T6441] ? __pfx___sys_bpf+0x10/0x10 [ 134.592055][ T6441] ? __schedule+0xe5d/0x5730 [ 134.593272][ T6441] ? __fget_files+0x23a/0x3f0 [ 134.594505][ T6441] ? do_futex+0x123/0x350 [ 134.595636][ T6441] ? __pfx_do_futex+0x10/0x10 [ 134.596866][ T6441] ? xfd_validate_state+0x5d/0x180 [ 134.598206][ T6441] ? rcu_is_watching+0x12/0xc0 [ 134.599465][ T6441] __x64_sys_bpf+0x78/0xc0 [ 134.600636][ T6441] ? lockdep_hardirqs_on+0x7c/0x110 [ 134.602014][ T6441] do_syscall_64+0xcd/0x250 [ 134.603315][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.604928][ T6441] RIP: 0033:0x7f800db7e719 [ 134.606119][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.611061][ T6441] RSP: 002b:00007f800e9b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 134.613216][ T6441] RAX: ffffffffffffffda RBX: 00007f800dd36058 RCX: 00007f800db7e719 [ 134.615263][ T6441] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 134.617325][ T6441] RBP: 00007f800dbf132e R08: 0000000000000000 R09: 0000000000000000 [ 134.619372][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.621443][ T6441] R13: 0000000000000000 R14: 00007f800dd36058 R15: 00007fffcd7e8d08 [ 134.623660][ T6441] VM DIAGNOSIS: 10:22:00 Registers: info registers vcpu 0 CPU#0 RAX=00000000000ab4e5 RBX=0000000000000000 RCX=ffffffff8b2305e9 RDX=0000000000000000 RSI=ffffffff8b6cd040 RDI=ffffffff8bd1ad40 RBP=fffffbfff1bd2af8 RSP=ffffffff8de07e20 R8 =0000000000000001 R9 =ffffed100d4c7025 R10=ffff88806a63812b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8de957c0 R14=ffffffff905f5088 R15=0000000000000000 RIP=ffffffff8b2319cf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00000000 FS =0000 0000000000000000 ffffffff 00000000 GS =0000 ffff88806a600000 ffffffff 00000000 LDT=0000 0000000000000000 ffffffff 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000000000000 CR3=00000000333c8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000003000000 Opmask01=0000000003000007 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdf8586520 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f38f6ff21cb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f38f6ff21d8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f38f6ff21d2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f38f6ff21e6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f38f6ff226c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f38f6ff234a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000d01 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000032e5ea ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000d01 0000000000000000 0000000000000000 000000000032e5ea ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000007ad33 RBX=0000000000000001 RCX=ffffffff8b2305e9 RDX=0000000000000000 RSI=ffffffff8b6cd040 RDI=ffffffff8bd1ad40 RBP=ffffed1003b53910 RSP=ffffc90000187e08 R8 =0000000000000001 R9 =ffffed100d4e7025 R10=ffff88806a73812b R11=0000000000000000 R12=0000000000000001 R13=ffff88801da9c880 R14=ffffffff905f5088 R15=0000000000000000 RIP=ffffffff8b2319cf RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000000000000 CR3=000000004d604000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000003000007 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa76f9f21cb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa76f9f21d8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa76f9f21d2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa76f9f21e6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa76f9f226c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa76f9f234a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa76fb0c488 00007fa76fb0c480 00007fa76fb0c478 00007fa76fb0c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa77066d100 00007fa76fb0c440 00007fa76fb0c458 00007fa76fb0c4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa76fb0c498 00007fa76fb0c490 00007fa76fb0c488 00007fa76fb0c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000d01 0000000000000000 0000000000000000 000000000032e5ea ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000003 RCX=0000000000000001 RDX=0000000000000000 RSI=00000000ffffffff RDI=ffff888024aef398 RBP=ffff888024aef398 RSP=ffffc9000357f6a8 R8 =0000000000000005 R9 =0000000000000300 R10=0000000000000300 R11=0000000000000000 R12=ffff88804bcac880 R13=00000000ffffffff R14=00000000ffffffff R15=0000000000000001 RIP=ffffffff8b22f774 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f3fc2c33ba8 CR3=0000000029702000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffffffffffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000034 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff850b46e5 RDI=ffffffff9aae7bc0 RBP=ffffffff9aae7b80 RSP=ffffc9000367e990 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000034 R14=ffffffff850b4680 R15=0000000000000000 RIP=ffffffff850b470f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f800e9b16c0 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000000000000 CR3=000000004e71c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f800dbf21cb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f800dbf21d8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f800dbf21d2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f800dbf21e6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f800dbf226c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f800dbf234a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f800dd0c488 00007f800dd0c480 00007f800dd0c478 00007f800dd0c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f800e86d100 00007f800dd0c440 00007f800dd0c458 00007f800dd0c4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f800dd0c498 00007f800dd0c490 00007f800dd0c488 00007f800dd0c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000