c[?7lSeaBIOS (version 1.17.0-debian-1.17.0-1ubuntu1) iPXE (https://ipxe.org) 00:03.0 CA00 PCI2.10 PnP PMM+3EFC8BD0+3EF08BD0 CA00 Press Ctrl-B to configure iPXE (PCI 00:03.0)... Booting from ROM..c[?7l[ 0.000000] Linux version 6.6.18 (vscode@2d5e7a9675e0) (gcc (Ubuntu 15.2.0-16ubuntu1) 15.2.0, GNU ld (GNU Binutils for Ubuntu) 2.46) #6 SMP PREEMPT_DYNAMIC Tue Jul 7 14:22:11 UTC 2026 [ 0.000000] Command line: console=ttyS0 panic=-1 page_poison=1 [ 0.000000] BIOS-provided physical RAM map: [ 0.000000] BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable [ 0.000000] BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved [ 0.000000] BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved [ 0.000000] BIOS-e820: [mem 0x0000000000100000-0x000000003ffdffff] usable [ 0.000000] BIOS-e820: [mem 0x000000003ffe0000-0x000000003fffffff] reserved [ 0.000000] BIOS-e820: [mem 0x00000000fffc0000-0x00000000ffffffff] reserved [ 0.000000] BIOS-e820: [mem 0x000000fd00000000-0x000000ffffffffff] reserved [ 0.000000] NX (Execute Disable) protection: active [ 0.000000] APIC: Static calls initialized [ 0.000000] SMBIOS 2.8 present. [ 0.000000] DMI: QEMU Ubuntu 26.04 PC (i440FX + PIIX, 1996), BIOS 1.17.0-debian-1.17.0-1ubuntu1 04/01/2014 [ 0.000000] tsc: Fast TSC calibration using PIT [ 0.000000] tsc: Detected 3000.112 MHz processor [ 0.007774] last_pfn = 0x3ffe0 max_arch_pfn = 0x10000000000 [ 0.008538] MTRR map: 4 entries (3 fixed + 1 variable; max 19), built from 8 variable MTRRs [ 0.008751] x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT [ 0.022001] found SMP MP-table at [mem 0x000f5460-0x000f546f] [ 0.023829] Using GB pages for direct mapping [ 0.027422] RAMDISK: [mem 0x3ff81000-0x3ffdffff] [ 0.027914] ACPI: Early table checksum verification disabled [ 0.028316] ACPI: RSDP 0x00000000000F5280 000014 (v00 BOCHS ) [ 0.028711] ACPI: RSDT 0x000000003FFE2390 000034 (v01 BOCHS BXPC 00000001 BXPC 00000001) [ 0.029579] ACPI: FACP 0x000000003FFE223C 000074 (v01 BOCHS BXPC 00000001 BXPC 00000001) [ 0.030674] ACPI: DSDT 0x000000003FFE0040 0021FC (v01 BOCHS BXPC 00000001 BXPC 00000001) [ 0.030821] ACPI: FACS 0x000000003FFE0000 000040 [ 0.030878] ACPI: APIC 0x000000003FFE22B0 000080 (v03 BOCHS BXPC 00000001 BXPC 00000001) [ 0.030903] ACPI: HPET 0x000000003FFE2330 000038 (v01 BOCHS BXPC 00000001 BXPC 00000001) [ 0.030927] ACPI: WAET 0x000000003FFE2368 000028 (v01 BOCHS BXPC 00000001 BXPC 00000001) [ 0.030994] ACPI: Reserving FACP table memory at [mem 0x3ffe223c-0x3ffe22af] [ 0.031017] ACPI: Reserving DSDT table memory at [mem 0x3ffe0040-0x3ffe223b] [ 0.031026] ACPI: Reserving FACS table memory at [mem 0x3ffe0000-0x3ffe003f] [ 0.031034] ACPI: Reserving APIC table memory at [mem 0x3ffe22b0-0x3ffe232f] [ 0.031041] ACPI: Reserving HPET table memory at [mem 0x3ffe2330-0x3ffe2367] [ 0.031049] ACPI: Reserving WAET table memory at [mem 0x3ffe2368-0x3ffe238f] [ 0.033485] No NUMA configuration found [ 0.033526] Faking a node at [mem 0x0000000000000000-0x000000003ffdffff] [ 0.034227] NODE_DATA(0) allocated [mem 0x3ff7d000-0x3ff80fff] [ 0.036549] Zone ranges: [ 0.036578] DMA [mem 0x0000000000001000-0x0000000000ffffff] [ 0.036652] DMA32 [mem 0x0000000001000000-0x000000003ffdffff] [ 0.036674] Normal empty [ 0.036705] Movable zone start for each node [ 0.036733] Early memory node ranges [ 0.036754] node 0: [mem 0x0000000000001000-0x000000000009efff] [ 0.036919] node 0: [mem 0x0000000000100000-0x000000003ffdffff] [ 0.037164] Initmem setup node 0 [mem 0x0000000000001000-0x000000003ffdffff] [ 0.038352] On node 0, zone DMA: 1 pages in unavailable ranges [ 0.039214] On node 0, zone DMA: 97 pages in unavailable ranges [ 0.087826] On node 0, zone DMA32: 32 pages in unavailable ranges [ 0.120739] kasan: KernelAddressSanitizer initialized [ 0.121303] ACPI: PM-Timer IO Port: 0x608 [ 0.121918] ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) [ 0.122571] IOAPIC[0]: apic_id 0, version 32, address 0xfec00000, GSI 0-23 [ 0.122781] ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl) [ 0.123126] ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) [ 0.123205] ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) [ 0.123326] ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) [ 0.123345] ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) [ 0.123627] ACPI: Using ACPI (MADT) for SMP configuration information [ 0.123739] ACPI: HPET id: 0x8086a201 base: 0xfed00000 [ 0.124138] smpboot: Allowing 2 CPUs, 0 hotplug CPUs [ 0.125328] [mem 0x40000000-0xfffbffff] available for PCI devices [ 0.125381] Booting paravirtualized kernel on bare hardware [ 0.125746] clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns [ 0.151900] setup_percpu: NR_CPUS:64 nr_cpumask_bits:2 nr_cpu_ids:2 nr_node_ids:1 [ 0.153595] percpu: Embedded 66 pages/cpu s232680 r8192 d29464 u1048576 [ 0.156505] Kernel command line: console=ttyS0 panic=-1 page_poison=1 [ 0.158791] random: crng init done [ 0.159150] Dentry cache hash table entries: 131072 (order: 8, 1048576 bytes, linear) [ 0.159341] Inode-cache hash table entries: 65536 (order: 7, 524288 bytes, linear) [ 0.162468] Fallback order for Node 0: 0 [ 0.162948] Built 1 zonelists, mobility grouping on. Total pages: 257760 [ 0.162983] Policy zone: DMA32 [ 0.163752] mem auto-init: stack:all(zero), heap alloc:off, heap free:off [ 0.163809] stackdepot: allocating hash table via alloc_large_system_hash [ 0.165546] stackdepot hash table entries: 1048576 (order: 11, 8388608 bytes, linear) [ 0.398323] Memory: 778236K/1048056K available (51200K kernel code, 8034K rwdata, 10272K rodata, 5728K init, 1512K bss, 269620K reserved, 0K cma-reserved) [ 0.404991] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 [ 0.428291] Dynamic Preempt: voluntary [ 0.438672] rcu: Preemptible hierarchical RCU implementation. [ 0.438735] rcu: RCU event tracing is enabled. [ 0.438767] rcu: RCU restricting CPUs from NR_CPUS=64 to nr_cpu_ids=2. [ 0.438885] Trampoline variant of Tasks RCU enabled. [ 0.439030] rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. [ 0.439066] rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 [ 0.521123] NR_IRQS: 4352, nr_irqs: 440, preallocated irqs: 16 [ 0.537479] rcu: srcu_init: Setting srcu_struct sizes based on contention. [ 0.548151] Console: colour VGA+ 80x25 [ 0.550973] printk: console [ttyS0] enabled [ 0.560673] ACPI: Core revision 20230628 [ 0.569298] clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604467 ns [ 0.577518] APIC: Switch to symmetric I/O mode setup [ 0.585292] ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 [ 0.591153] tsc: Marking TSC unstable due to TSCs unsynchronized [ 0.591760] Calibrating delay loop (skipped), value calculated using timer frequency.. 6000.22 BogoMIPS (lpj=3000112) [ 0.595194] x86/cpu: User Mode Instruction Prevention (UMIP) activated [ 0.608367] Last level iTLB entries: 4KB 0, 2MB 0, 4MB 0 [ 0.608508] Last level dTLB entries: 4KB 0, 2MB 0, 4MB 0, 1GB 0 [ 0.610701] Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization [ 0.611409] Spectre V2 : Mitigation: Retpolines [ 0.611509] Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch [ 0.611615] Spectre V2 : Spectre v2 / SpectreRSB : Filling RSB on VMEXIT [ 0.611778] Speculative Store Bypass: Vulnerable [ 0.615440] x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' [ 0.618695] x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' [ 0.618827] x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' [ 0.618912] x86/fpu: Supporting XSAVE feature 0x008: 'MPX bounds registers' [ 0.619003] x86/fpu: Supporting XSAVE feature 0x010: 'MPX CSR' [ 0.619159] x86/fpu: Supporting XSAVE feature 0x200: 'Protection Keys User registers' [ 0.619742] x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 [ 0.620120] x86/fpu: xstate_offset[3]: 960, xstate_sizes[3]: 64 [ 0.620189] x86/fpu: xstate_offset[4]: 1024, xstate_sizes[4]: 64 [ 0.620257] x86/fpu: xstate_offset[9]: 2688, xstate_sizes[9]: 8 [ 0.620465] x86/fpu: Enabled xstate features 0x21f, context size is 2696 bytes, using 'standard' format. [ 0.780137] Freeing SMP alternatives memory: 48K [ 0.780750] pid_max: default: 32768 minimum: 301 [ 0.789737] LSM: initializing lsm=capability,selinux,integrity [ 0.790951] SELinux: Initializing. [ 0.797864] Mount-cache hash table entries: 2048 (order: 2, 16384 bytes, linear) [ 0.798287] Mountpoint-cache hash table entries: 2048 (order: 2, 16384 bytes, linear) [ 0.955367] smpboot: CPU0: AMD QEMU TCG CPU version 2.5+ (family: 0x6, model: 0x6, stepping: 0x3) [ 0.980252] RCU Tasks: Setting shift to 1 and lim to 1 rcu_task_cb_adjust=1. [ 0.982058] Performance Events: PMU not available due to virtualization, using software events only. [ 0.983758] signal: max sigframe size: 3632 [ 0.987729] rcu: Hierarchical SRCU implementation. [ 0.987827] rcu: Max phase no-delay instances is 400. [ 1.005133] smp: Bringing up secondary CPUs ... [ 1.018218] smpboot: x86: Booting SMP configuration: [ 1.018320] .... node #0, CPUs: #1 [ 1.107428] smp: Brought up 1 node, 2 CPUs [ 1.107807] smpboot: Max logical packages: 1 [ 1.108022] smpboot: Total of 2 processors activated (11995.87 BogoMIPS) [ 1.135519] devtmpfs: initialized [ 1.169875] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns [ 1.171069] futex hash table entries: 512 (order: 3, 32768 bytes, linear) [ 1.176460] PM: RTC time: 14:22:44, date: 2026-07-07 [ 1.187873] NET: Registered PF_NETLINK/PF_ROUTE protocol family [ 1.195094] audit: initializing netlink subsys (disabled) [ 1.199771] audit: type=2000 audit(1783434163.622:1): state=initialized audit_enabled=0 res=1 [ 1.208095] thermal_sys: Registered thermal governor 'step_wise' [ 1.208148] thermal_sys: Registered thermal governor 'user_space' [ 1.212827] cpuidle: using governor menu [ 1.220347] PCI: Using configuration type 1 for base access [ 1.224633] mtrr: your CPUs had inconsistent fixed MTRR settings [ 1.224729] mtrr: your CPUs had inconsistent variable MTRR settings [ 1.224809] mtrr: your CPUs had inconsistent MTRRdefType settings [ 1.224915] mtrr: probably your BIOS does not setup all CPUs. [ 1.224994] mtrr: corrected configuration. [ 1.227548] kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. [ 1.237323] HugeTLB: registered 2.00 MiB page size, pre-allocated 0 pages [ 1.237484] HugeTLB: 28 KiB vmemmap can be freed for a 2.00 MiB page [ 1.245158] cryptd: max_cpu_qlen set to 1000 [ 1.254183] ACPI: Added _OSI(Module Device) [ 1.254271] ACPI: Added _OSI(Processor Device) [ 1.254332] ACPI: Added _OSI(3.0 _SCP Extensions) [ 1.254390] ACPI: Added _OSI(Processor Aggregator Device) [ 1.377754] ACPI: 1 ACPI AML tables successfully acquired and loaded [ 1.406949] ACPI: _OSC evaluation for CPUs failed, trying _PDC [ 1.416997] ACPI: Interpreter enabled [ 1.418641] ACPI: PM: (supports S0 S3 S5) [ 1.418789] ACPI: Using IOAPIC for interrupt routing [ 1.419603] PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug [ 1.419744] PCI: Using E820 reservations for host bridge windows [ 1.427184] ACPI: Enabled 2 GPEs in block 00 to 0F [ 1.626000] ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) [ 1.627245] acpi PNP0A03:00: _OSC: OS supports [ASPM ClockPM Segments MSI HPX-Type3] [ 1.627575] acpi PNP0A03:00: _OSC: not requesting OS control; OS requires [ExtendedConfig ASPM ClockPM MSI] [ 1.629269] acpi PNP0A03:00: fail to add MMCONFIG information, can't access extended configuration space under this bridge [ 1.638728] PCI host bridge to bus 0000:00 [ 1.639812] pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] [ 1.640475] pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] [ 1.640592] pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] [ 1.640789] pci_bus 0000:00: root bus resource [mem 0x40000000-0xfebfffff window] [ 1.640904] pci_bus 0000:00: root bus resource [mem 0x100000000-0x17fffffff window] [ 1.641272] pci_bus 0000:00: root bus resource [bus 00-ff] [ 1.644221] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 1.654764] pci 0000:00:01.0: [8086:7000] type 00 class 0x060100 [ 1.660042] pci 0000:00:01.1: [8086:7010] type 00 class 0x010180 [ 1.662188] pci 0000:00:01.1: reg 0x20: [io 0xc040-0xc04f] [ 1.663132] pci 0000:00:01.1: legacy IDE quirk: reg 0x10: [io 0x01f0-0x01f7] [ 1.663287] pci 0000:00:01.1: legacy IDE quirk: reg 0x14: [io 0x03f6] [ 1.663438] pci 0000:00:01.1: legacy IDE quirk: reg 0x18: [io 0x0170-0x0177] [ 1.663556] pci 0000:00:01.1: legacy IDE quirk: reg 0x1c: [io 0x0376] [ 1.669066] pci 0000:00:01.3: [8086:7113] type 00 class 0x068000 [ 1.669848] pci 0000:00:01.3: quirk: [io 0x0600-0x063f] claimed by PIIX4 ACPI [ 1.669974] pci 0000:00:01.3: quirk: [io 0x0700-0x070f] claimed by PIIX4 SMB [ 1.673982] pci 0000:00:02.0: [1234:1111] type 00 class 0x030000 [ 1.674412] pci 0000:00:02.0: reg 0x10: [mem 0xfd000000-0xfdffffff pref] [ 1.675601] pci 0000:00:02.0: reg 0x18: [mem 0xfebb0000-0xfebb0fff] [ 1.677921] pci 0000:00:02.0: reg 0x30: [mem 0xfeba0000-0xfebaffff pref] [ 1.678559] pci 0000:00:02.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1.683046] pci 0000:00:03.0: [8086:100e] type 00 class 0x020000 [ 1.683618] pci 0000:00:03.0: reg 0x10: [mem 0xfeb80000-0xfeb9ffff] [ 1.684165] pci 0000:00:03.0: reg 0x14: [io 0xc000-0xc03f] [ 1.688453] pci 0000:00:03.0: reg 0x30: [mem 0xfeb00000-0xfeb7ffff pref] [ 1.772928] ACPI: PCI: Interrupt link LNKA configured for IRQ 10 [ 1.780698] ACPI: PCI: Interrupt link LNKB configured for IRQ 10 [ 1.786304] ACPI: PCI: Interrupt link LNKC configured for IRQ 11 [ 1.791290] ACPI: PCI: Interrupt link LNKD configured for IRQ 11 [ 1.793751] ACPI: PCI: Interrupt link LNKS configured for IRQ 9 [ 1.813263] iommu: Default domain type: Translated [ 1.813416] iommu: DMA domain TLB invalidation policy: lazy mode [ 1.818340] SCSI subsystem initialized [ 1.825425] ACPI: bus type USB registered [ 1.827288] usbcore: registered new interface driver usbfs [ 1.827814] usbcore: registered new interface driver hub [ 1.828251] usbcore: registered new device driver usb [ 1.829931] pps_core: LinuxPPS API ver. 1 registered [ 1.830027] pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti [ 1.830851] PTP clock support registered [ 1.837991] Advanced Linux Sound Architecture Driver Initialized. [ 1.862095] NetLabel: Initializing [ 1.862254] NetLabel: domain hash size = 128 [ 1.862323] NetLabel: protocols = UNLABELED CIPSOv4 CALIPSO [ 1.865722] NetLabel: unlabeled traffic allowed by default [ 1.874627] PCI: Using ACPI for IRQ routing [ 1.879219] pci 0000:00:02.0: vgaarb: setting as boot VGA device [ 1.879367] pci 0000:00:02.0: vgaarb: bridge control possible [ 1.879367] pci 0000:00:02.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1.880459] vgaarb: loaded [ 1.882413] hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0 [ 1.882715] hpet0: 3 comparators, 64-bit 100.000000 MHz counter [ 1.888708] clocksource: Switched to clocksource hpet [ 1.921819] VFS: Disk quotas dquot_6.6.0 [ 1.922346] VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) [ 1.927930] pnp: PnP ACPI init [ 1.951403] pnp: PnP ACPI: found 6 devices [ 2.044592] clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns [ 2.046381] NET: Registered PF_INET protocol family [ 2.052372] IP idents hash table entries: 16384 (order: 5, 131072 bytes, linear) [ 2.067559] tcp_listen_portaddr_hash hash table entries: 512 (order: 1, 8192 bytes, linear) [ 2.071585] Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) [ 2.072869] TCP established hash table entries: 8192 (order: 4, 65536 bytes, linear) [ 2.077375] TCP bind hash table entries: 8192 (order: 6, 262144 bytes, linear) [ 2.077757] TCP: Hash tables configured (established 8192 bind 8192) [ 2.082481] UDP hash table entries: 512 (order: 2, 16384 bytes, linear) [ 2.083147] UDP-Lite hash table entries: 512 (order: 2, 16384 bytes, linear) [ 2.085823] NET: Registered PF_UNIX/PF_LOCAL protocol family [ 2.094902] RPC: Registered named UNIX socket transport module. [ 2.095159] RPC: Registered udp transport module. [ 2.095259] RPC: Registered tcp transport module. [ 2.095356] RPC: Registered tcp-with-tls transport module. [ 2.095462] RPC: Registered tcp NFSv4.1 backchannel transport module. [ 2.105719] pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] [ 2.105830] pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] [ 2.105899] pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] [ 2.105987] pci_bus 0000:00: resource 7 [mem 0x40000000-0xfebfffff window] [ 2.106122] pci_bus 0000:00: resource 8 [mem 0x100000000-0x17fffffff window] [ 2.107643] pci 0000:00:01.0: PIIX3: Enabling Passive Release [ 2.107863] pci 0000:00:00.0: Limiting direct PCI/PCI transfers [ 2.108261] PCI: CLS 0 bytes, default 64 [ 2.117881] Unpacking initramfs... [ 2.140707] Initialise system trusted keyrings [ 2.145228] workingset: timestamp_bits=56 max_order=18 bucket_order=0 [ 2.155178] NFS: Registering the id_resolver key type [ 2.155792] Key type id_resolver registered [ 2.155904] Key type id_legacy registered [ 2.157565] 9p: Installing v9fs 9p2000 file system support [ 2.179906] Freeing initrd memory: 380K [ 2.222719] NET: Registered PF_ALG protocol family [ 2.223566] Key type asymmetric registered [ 2.223724] Asymmetric key parser 'x509' registered [ 2.225149] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 251) [ 2.225819] io scheduler mq-deadline registered [ 2.225941] io scheduler kyber registered [ 2.232797] input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input0 [ 2.239164] ACPI: button: Power Button [PWRF] [ 2.251306] Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled [ 2.260552] 00:04: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A [ 2.282930] Non-volatile memory driver v1.3 [ 2.283191] Linux agpgart interface v0.103 [ 2.286571] ACPI: bus type drm_connector registered [ 2.365810] loop: module loaded [ 2.400501] scsi host0: ata_piix [ 2.409242] scsi host1: ata_piix [ 2.410977] ata1: PATA max MWDMA2 cmd 0x1f0 ctl 0x3f6 bmdma 0xc040 irq 14 [ 2.411271] ata2: PATA max MWDMA2 cmd 0x170 ctl 0x376 bmdma 0xc048 irq 15 [ 2.427308] e100: Intel(R) PRO/100 Network Driver [ 2.427562] e100: Copyright(c) 1999-2006 Intel Corporation [ 2.427838] e1000: Intel(R) PRO/1000 Network Driver [ 2.427936] e1000: Copyright (c) 1999-2006 Intel Corporation. [ 2.531378] ACPI: \_SB_.LNKC: Enabled at IRQ 11 [ 2.570454] ata2: found unknown device (class 0) [ 2.579729] ata2.00: ATAPI: QEMU DVD-ROM, 2.5+, max UDMA/100 [ 2.602617] scsi 1:0:0:0: CD-ROM QEMU QEMU DVD-ROM 2.5+ PQ: 0 ANSI: 5 [ 2.629365] sr 1:0:0:0: [sr0] scsi3-mmc drive: 4x/4x cd/rw xa/form2 tray [ 2.630169] cdrom: Uniform CD-ROM driver Revision: 3.20 [ 2.652913] sr 1:0:0:0: Attached scsi generic sg0 type 5 [ 2.832899] e1000 0000:00:03.0 eth0: (PCI:33MHz:32-bit) 52:54:00:12:34:56 [ 2.833745] e1000 0000:00:03.0 eth0: Intel(R) PRO/1000 Network Connection [ 2.834757] e1000e: Intel(R) PRO/1000 Network Driver [ 2.834850] e1000e: Copyright(c) 1999 - 2015 Intel Corporation. [ 2.835800] sky2: driver version 1.30 [ 2.843503] usbcore: registered new interface driver usblp [ 2.843994] usbcore: registered new interface driver usb-storage [ 2.845850] i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 [ 2.850796] serio: i8042 KBD port at 0x60,0x64 irq 1 [ 2.851388] serio: i8042 AUX port at 0x60,0x64 irq 12 [ 2.858430] rtc_cmos 00:05: RTC can wake from S4 [ 2.863984] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1 [ 2.868570] rtc_cmos 00:05: registered as rtc0 [ 2.870896] rtc_cmos 00:05: alarms up to one day, y3k, 242 bytes nvram, hpet irqs [ 2.872793] fail to initialize ptp_kvm [ 2.875511] device-mapper: ioctl: 4.48.0-ioctl (2023-03-01) initialised: dm-devel@redhat.com [ 2.877944] hid: raw HID events driver (C) Jiri Kosina [ 2.887123] usbcore: registered new interface driver usbhid [ 2.887278] usbhid: USB HID core driver [ 2.912249] Initializing XFRM netlink socket [ 2.913491] NET: Registered PF_INET6 protocol family [ 2.940981] Segment Routing with IPv6 [ 2.941484] In-situ OAM (IOAM) with IPv6 [ 2.943581] sit: IPv6, IPv4 and MPLS over IPv4 tunneling driver [ 2.952884] NET: Registered PF_PACKET protocol family [ 2.957680] 9pnet: Installing 9P2000 support [ 2.958365] Key type dns_resolver registered [ 2.964687] IPI shorthand broadcast: enabled [ 2.965157] AVX2 version of gcm_enc/dec engaged. [ 2.967585] AES CTR mode by8 optimization enabled [ 3.164905] registered taskstats version 1 [ 3.165190] Loading compiled-in X.509 certificates [ 3.269755] PM: Magic number: 2:838:383 [ 3.270345] container PNP0A06:01: hash matches [ 3.270467] acpi PNP0A06:01: hash matches [ 3.271294] printk: console [netcon0] enabled [ 3.271441] netconsole: network logging started [ 3.273858] cfg80211: Loading compiled-in X.509 certificates for regulatory database [ 3.302480] kworker/u4:2 (55) used greatest stack depth: 29128 bytes left [ 3.321218] Loaded X.509 cert 'sforshee: 00b28ddf47aef9cea7' [ 3.322899] Loaded X.509 cert 'wens: 61c038651aabdcf94bd0ac7ff06c7248db18c600' [ 3.324487] Unstable clock detected, switching default tracing clock to "global" [ 3.324487] If you want to keep using the local clock, then add: [ 3.324487] "trace_clock=local" [ 3.324487] on the kernel command line [ 3.328139] ALSA device list: [ 3.328114] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3.328392] No soundcards found. [ 3.328747] cfg80211: failed to load regulatory.db [ 3.720159] Freeing unused kernel image (initmem) memory: 5728K [ 3.721626] Write protecting the kernel read-only data: 63488k [ 3.724824] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input3 [ 3.728590] Freeing unused kernel image (rodata/data gap) memory: 2016K [ 4.742475] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 4.743653] Run /init as init process === CVE-2024-26582 kTLS UAF Reproducer === Kernel: v6.6.18 (fix reverted) [kTLS] Loopback interface configured [kTLS] Starting CVE-2024-26582 reproduction test [kTLS] Record size: 4096, partial read: 100 [kTLS] TCP connection established [kTLS] TCP_ULP set on both ends [kTLS] TLS_TX/TLS_RX set with AES-128-GCM [kTLS] Sent 4096 bytes [ 4.956254] ================================================================== [ 4.956611] BUG: KASAN: use-after-free in copyout+0x2d/0x50 [ 4.957007] Read of size 100 at addr ff1100000186000d by task init/58 [ 4.957072] [ 4.957072] CPU: 0 PID: 58 Comm: init Not tainted 6.6.18 #6 [ 4.957072] Hardware name: QEMU Ubuntu 26.04 PC (i440FX + PIIX, 1996), BIOS 1.17.0-debian-1.17.0-1ubuntu1 04/01/2014 [ 4.957072] Call Trace: [ 4.957072] [ 4.957072] dump_stack_lvl+0x36/0x50 [ 4.957072] print_report+0xcf/0x660 [ 4.957072] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 4.957072] ? copyout+0x2d/0x50 [ 4.957072] kasan_report+0xc1/0x100 [ 4.957072] ? copyout+0x2d/0x50 [ 4.957072] kasan_check_range+0x125/0x210 [ 4.957072] copyout+0x2d/0x50 [ 4.957072] _copy_to_iter+0x15b/0x1070 [ 4.957072] ? inet_recvmsg+0x355/0x4f0 [ 4.957072] ? sock_recvmsg+0x16d/0x220 [ 4.957072] ? __sys_recvfrom+0x18e/0x2a0 [ 4.957072] ? __x64_sys_recvfrom+0xdf/0x1f0 [ 4.957072] ? do_syscall_64+0x3f/0x90 [ 4.957072] ? entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 4.957072] ? __pfx__copy_to_iter+0x10/0x10 [ 4.957072] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 4.957072] __skb_datagram_iter+0x3c7/0x890 [ 4.957072] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 4.957072] skb_copy_datagram_iter+0x2f/0x120 [ 4.957072] process_rx_list+0x2b5/0x5f0 [ 4.957072] tls_sw_recvmsg+0x1081/0x17b0 [ 4.957072] ? _raw_write_unlock_irqrestore+0x10/0x70 [ 4.957072] ? __pfx_tls_sw_recvmsg+0x10/0x10 [ 4.957072] ? _raw_write_unlock_irqrestore+0x27/0x70 [ 4.957072] inet_recvmsg+0x355/0x4f0 [ 4.957072] ? __pfx_inet_recvmsg+0x10/0x10 [ 4.957072] ? sock_recvmsg+0x79/0x220 [ 4.957072] sock_recvmsg+0x16d/0x220 [ 4.957072] ? sockfd_lookup_light+0x11/0x180 [ 4.957072] __sys_recvfrom+0x18e/0x2a0 [ 4.957072] ? __pfx___sys_recvfrom+0x10/0x10 [ 4.957072] ? __asan_memset+0x27/0x50 [ 4.957072] ? ksys_write+0xff/0x210 [ 4.957072] __x64_sys_recvfrom+0xdf/0x1f0 [ 4.957072] ? exit_to_user_mode_prepare+0x27/0x120 [ 4.957072] ? syscall_exit_to_user_mode+0x2f/0x50 [ 4.957072] ? __pfx___x64_sys_recvfrom+0x10/0x10 [ 4.957072] do_syscall_64+0x3f/0x90 [ 4.957072] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 4.957072] RIP: 0033:0x45c8e6 [ 4.957072] Code: 47 ba 04 00 00 00 48 c7 c0 f0 ff ff ff 64 89 10 48 c7 c2 ff ff ff ff c9 48 89 d0 c3 0f 1f 84 00 00 00 00 00 48 8b 45 10 0f 05 <48> 89 c2 48 3d 00 f0 ff ff 77 0f c9 48 89 d0 c3 66 2e 0f 1f 84 00 [ 4.957072] RSP: 002b:00007fff623e6350 EFLAGS: 00000202 ORIG_RAX: 000000000000002d [ 4.957072] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 000000000045c8e6 [ 4.957072] RDX: 0000000000000064 RSI: 00007fff623e7420 RDI: 0000000000000005 [ 4.957072] RBP: 00007fff623e6360 R08: 0000000000000000 R09: 0000000000000000 [ 4.957072] R10: 0000000000000100 R11: 0000000000000202 R12: 00007fff623e8588 [ 4.957072] R13: 00007fff623e8598 R14: 0000000000000002 R15: 00000000004bd9e0 [ 4.957072] [ 4.957072] [ 4.957072] The buggy address belongs to the physical page: [ 4.957072] page:00000000217541ed refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1860 [ 4.957072] flags: 0x100000000000000(node=0|zone=1) [ 4.957072] page_type: 0xffffffff() [ 4.957072] raw: 0100000000000000 ffd4000000061888 ff1100003553bec8 0000000000000000 [ 4.957072] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 4.957072] page dumped because: kasan: bad access detected [ 4.957072] [ 4.957072] Memory state around the buggy address: [ 4.957072] ff1100000185ff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 4.957072] ff1100000185ff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 4.957072] >ff11000001860000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 4.957072] ^ [ 4.957072] ff11000001860080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 4.957072] ff11000001860100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 4.957072] ================================================================== [ 4.964863] Disabling lock debugging due to kernel taint [kTLS] Partial recv #1: ret=100 [kTLS] Partial recv #2: ret=3996 [kTLS] Received total: 4096 bytes [kTLS] Data MISMATCH - corruption detected! [ 4.969549] BUG: Bad page state in process init pfn:02efc [ 4.969709] page:0000000099aa0e29 refcount:-1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2efc [ 4.969846] flags: 0x100000000000000(node=0|zone=1) [ 4.969964] page_type: 0xffffffff() [ 4.970139] raw: 0100000000000000 dead000000000100 dead000000000122 0000000000000000 [ 4.970248] raw: 0000000000000000 0000000000000000 ffffffffffffffff 0000000000000000 [ 4.970346] page dumped because: nonzero _refcount [ 4.970473] Modules linked in: [ 4.970702] CPU: 0 PID: 58 Comm: init Tainted: G B 6.6.18 #6 [ 4.970807] Hardware name: QEMU Ubuntu 26.04 PC (i440FX + PIIX, 1996), BIOS 1.17.0-debian-1.17.0-1ubuntu1 04/01/2014 [ 4.970929] Call Trace: [ 4.971019] [ 4.971078] dump_stack_lvl+0x36/0x50 [ 4.971078] bad_page+0xcf/0x240 [ 4.971078] ? __pfx_bad_page+0x10/0x10 [ 4.971078] ? __pfx_stack_trace_save+0x10/0x10 [ 4.971078] ? __stack_depot_save+0x32/0x520 [ 4.971078] __rmqueue_pcplist+0x3e1/0x13d0 [ 4.971078] ? kasan_save_stack+0x41/0x60 [ 4.971078] ? kasan_save_stack+0x30/0x60 [ 4.971078] ? tls_decrypt_sg+0x3a8/0x2d60 [ 4.971078] ? inet_recvmsg+0x355/0x4f0 [ 4.971078] ? sock_recvmsg+0x16d/0x220 [ 4.971078] ? __sys_recvfrom+0x18e/0x2a0 [ 4.971078] ? __x64_sys_recvfrom+0xdf/0x1f0 [ 4.971078] ? do_syscall_64+0x3f/0x90 [ 4.971078] ? entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 4.971078] ? __pfx___rmqueue_pcplist+0x10/0x10 [ 4.971078] ? __pfx__raw_spin_trylock+0x10/0x10 [ 4.971078] get_page_from_freelist+0x4cc/0x3010 [ 4.971078] ? __pfx_get_page_from_freelist+0x10/0x10 [ 4.971078] ? kmem_cache_alloc_node+0x13c/0x290 [ 4.971078] ? kasan_set_track+0x25/0x30 [ 4.971078] ? kmalloc_reserve+0x114/0x1e0 [ 4.971078] __alloc_pages+0x297/0x560 [ 4.971078] ? __build_skb_around+0x23a/0x340 [ 4.971078] ? __pfx___alloc_pages+0x10/0x10 [ 4.971078] ? __alloc_skb+0x104/0x270 [ 4.971078] ? kasan_set_track+0x25/0x30 [ 4.971078] ? kasan_save_free_info+0x2b/0x50 [ 4.971078] ? __kasan_slab_free+0x109/0x180 [ 4.971078] alloc_skb_with_frags+0x130/0x5d0 [ 4.971078] tls_decrypt_sg+0x3a8/0x2d60 [ 4.971078] ? tls_strp_load_anchor_with_queue+0x226/0x3d0 [ 4.971078] ? __pfx_tls_strp_load_anchor_with_queue+0x10/0x10 [ 4.971078] ? tcp_check_space+0x52/0x600 [ 4.971078] ? __pfx_tls_decrypt_sg+0x10/0x10 [ 4.971078] ? tls_rx_rec_wait+0x68e/0x840 [ 4.971078] tls_rx_one_record+0xd6/0xca0 [ 4.971078] ? __pfx__raw_spin_lock_bh+0x10/0x10 [ 4.971078] ? __pfx_tls_rx_one_record+0x10/0x10 [ 4.971078] ? mutex_unlock+0x81/0xd0 [ 4.971078] ? __pfx_mutex_unlock+0x10/0x10 [ 4.971078] tls_sw_recvmsg+0x721/0x17b0 [ 4.971078] ? __pfx_tls_sw_recvmsg+0x10/0x10 [ 4.971078] inet_recvmsg+0x355/0x4f0 [ 4.971078] ? _raw_spin_lock+0x7f/0xe0 [ 4.971078] ? __pfx_inet_recvmsg+0x10/0x10 [ 4.971078] ? security_socket_recvmsg+0x6f/0xb0 [ 4.971078] sock_recvmsg+0x16d/0x220 [ 4.971078] ? sockfd_lookup_light+0x11/0x180 [ 4.971078] __sys_recvfrom+0x18e/0x2a0 [ 4.971078] ? __pfx___sys_recvfrom+0x10/0x10 [ 4.971078] ? __asan_memset+0x27/0x50 [ 4.971078] ? __pfx_restore_fpregs_from_fpstate+0x10/0x10 [ 4.971078] ? ksys_write+0xff/0x210 [ 4.971078] __x64_sys_recvfrom+0xdf/0x1f0 [ 4.971078] ? exit_to_user_mode_prepare+0x110/0x120 [ 4.971078] ? syscall_exit_to_user_mode+0x2f/0x50 [ 4.971078] ? __pfx___x64_sys_recvfrom+0x10/0x10 [ 4.971078] do_syscall_64+0x3f/0x90 [ 4.971078] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 4.971078] RIP: 0033:0x45c8e6 [ 4.971078] Code: 47 ba 04 00 00 00 48 c7 c0 f0 ff ff ff 64 89 10 48 c7 c2 ff ff ff ff c9 48 89 d0 c3 0f 1f 84 00 00 00 00 00 48 8b 45 10 0f 05 <48> 89 c2 48 3d 00 f0 ff ff 77 0f c9 48 89 d0 c3 66 2e 0f 1f 84 00 [ 4.971078] RSP: 002b:00007fff623e6350 EFLAGS: 00000202 ORIG_RAX: 000000000000002d [ 4.971078] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 000000000045c8e6 [ 4.971078] RDX: 0000000000000064 RSI: 00007fff623e7420 RDI: 0000000000000005 [ 4.971078] RBP: 00007fff623e6360 R08: 0000000000000000 R09: 0000000000000000 [ 4.971078] R10: 0000000000000100 R11: 0000000000000202 R12: 00007fff623e8588 [ 4.971078] R13: 00007fff623e8598 R14: 0000000000000002 R15: 00000000004bd9e0 [ 4.971078] [ 4.980375] BUG: Bad page state in process init pfn:02efe [ 4.980483] page:00000000e39f9c63 refcount:-1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2efe [ 4.980571] flags: 0x100000000000000(node=0|zone=1) [ 4.980638] page_type: 0xffffffff() [ 4.980704] raw: 0100000000000000 dead000000000100 dead000000000122 0000000000000000 [ 4.980771] raw: 0000000000000000 0000000000000000 ffffffffffffffff 0000000000000000 [ 4.980834] page dumped because: nonzero _refcount [ 4.980887] Modules linked in: [ 4.980985] CPU: 0 PID: 58 Comm: init Tainted: G B 6.6.18 #6 [ 4.981076] Hardware name: QEMU Ubuntu 26.04 PC (i440FX + PIIX, 1996), BIOS 1.17.0-debian-1.17.0-1ubuntu1 04/01/2014 [ 4.981076] Call Trace: [ 4.981076] [ 4.981076] dump_stack_lvl+0x36/0x50 [ 4.981076] bad_page+0xcf/0x240 [ 4.981076] ? __pfx_bad_page+0x10/0x10 [ 4.981076] ? __pfx_stack_trace_save+0x10/0x10 [ 4.981076] ? __stack_depot_save+0x32/0x520 [ 4.981076] __rmqueue_pcplist+0x3e1/0x13d0 [ 4.981076] ? kasan_save_stack+0x41/0x60 [ 4.981076] ? kasan_save_stack+0x30/0x60 [ 4.981076] ? tls_decrypt_sg+0x3a8/0x2d60 [ 4.981076] ? inet_recvmsg+0x355/0x4f0 [ 4.981076] ? sock_recvmsg+0x16d/0x220 [ 4.981076] ? __sys_recvfrom+0x18e/0x2a0 [ 4.981076] ? __x64_sys_recvfrom+0xdf/0x1f0 [ 4.981076] ? do_syscall_64+0x3f/0x90 [ 4.981076] ? entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 4.981076] ? __pfx___rmqueue_pcplist+0x10/0x10 [ 4.981076] ? __pfx__raw_spin_trylock+0x10/0x10 [ 4.981076] get_page_from_freelist+0x4cc/0x3010 [ 4.981076] ? __pfx_get_page_from_freelist+0x10/0x10 [ 4.981076] ? kmem_cache_alloc_node+0x13c/0x290 [ 4.981076] ? kasan_set_track+0x25/0x30 [ 4.981076] ? kmalloc_reserve+0x114/0x1e0 [ 4.981076] __alloc_pages+0x297/0x560 [ 4.981076] ? __build_skb_around+0x23a/0x340 [ 4.981076] ? __pfx___alloc_pages+0x10/0x10 [ 4.981076] ? __alloc_skb+0x104/0x270 [ 4.981076] ? kasan_set_track+0x25/0x30 [ 4.981076] ? kasan_save_free_info+0x2b/0x50 [ 4.981076] ? __kasan_slab_free+0x109/0x180 [ 4.981076] alloc_skb_with_frags+0x130/0x5d0 [ 4.981076] tls_decrypt_sg+0x3a8/0x2d60 [ 4.981076] ? tls_strp_load_anchor_with_queue+0x226/0x3d0 [ 4.981076] ? __pfx_tls_strp_load_anchor_with_queue+0x10/0x10 [ 4.981076] ? tcp_check_space+0x52/0x600 [ 4.981076] ? __pfx_tls_decrypt_sg+0x10/0x10 [ 4.981076] ? tls_rx_rec_wait+0x68e/0x840 [ 4.981076] tls_rx_one_record+0xd6/0xca0 [ 4.981076] ? __pfx__raw_spin_lock_bh+0x10/0x10 [ 4.981076] ? __pfx_tls_rx_one_record+0x10/0x10 [ 4.981076] ? mutex_unlock+0x81/0xd0 [ 4.981076] ? __pfx_mutex_unlock+0x10/0x10 [ 4.981076] tls_sw_recvmsg+0x721/0x17b0 [ 4.981076] ? __pfx_tls_sw_recvmsg+0x10/0x10 [ 4.981076] inet_recvmsg+0x355/0x4f0 [ 4.981076] ? _raw_spin_lock+0x7f/0xe0 [ 4.981076] ? __pfx_inet_recvmsg+0x10/0x10 [ 4.981076] ? security_socket_recvmsg+0x6f/0xb0 [ 4.981076] sock_recvmsg+0x16d/0x220 [ 4.981076] ? sockfd_lookup_light+0x11/0x180 [ 4.981076] __sys_recvfrom+0x18e/0x2a0 [ 4.981076] ? __pfx___sys_recvfrom+0x10/0x10 [ 4.981076] ? __asan_memset+0x27/0x50 [ 4.981076] ? __pfx_restore_fpregs_from_fpstate+0x10/0x10 [ 4.981076] ? ksys_write+0xff/0x210 [ 4.981076] __x64_sys_recvfrom+0xdf/0x1f0 [ 4.981076] ? exit_to_user_mode_prepare+0x110/0x120 [ 4.981076] ? syscall_exit_to_user_mode+0x2f/0x50 [ 4.981076] ? __pfx___x64_sys_recvfrom+0x10/0x10 [ 4.981076] do_syscall_64+0x3f/0x90 [ 4.981076] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 4.981076] RIP: 0033:0x45c8e6 [ 4.981076] Code: 47 ba 04 00 00 00 48 c7 c0 f0 ff ff ff 64 89 10 48 c7 c2 ff ff ff ff c9 48 89 d0 c3 0f 1f 84 00 00 00 00 00 48 8b 45 10 0f 05 <48> 89 c2 48 3d 00 f0 ff ff 77 0f c9 48 89 d0 c3 66 2e 0f 1f 84 00 [ 4.981076] RSP: 002b:00007fff623e6350 EFLAGS: 00000202 ORIG_RAX: 000000000000002d [ 4.981076] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 000000000045c8e6 [ 4.981076] RDX: 0000000000000064 RSI: 00007fff623e7420 RDI: 0000000000000005 [ 4.981076] RBP: 00007fff623e6360 R08: 0000000000000000 R09: 0000000000000000 [ 4.981076] R10: 0000000000000100 R11: 0000000000000202 R12: 00007fff623e8588 [ 4.981076] R13: 00007fff623e8598 R14: 0000000000000002 R15: 00000000004bd9e0 [ 4.981076] [ 4.988710] BUG: Bad page state in process init pfn:02f00 [ 4.988804] page:00000000eaf4bf7f refcount:-1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2f00 [ 4.988887] flags: 0x100000000000000(node=0|zone=1) [ 4.988994] page_type: 0xffffffff() [ 4.989167] raw: 0100000000000000 dead000000000100 dead000000000122 0000000000000000 [ 4.989240] raw: 0000000000000000 0000000000000000 ffffffffffffffff 0000000000000000 [ 4.989302] page dumped because: nonzero _refcount [ 4.989355] Modules linked in: [ 4.989421] CPU: 0 PID: 58 Comm: init Tainted: G B 6.6.18 #6 [ 4.989489] Hardware name: QEMU Ubuntu 26.04 PC (i440FX + PIIX, 1996), BIOS 1.17.0-debian-1.17.0-1ubuntu1 04/01/2014 [ 4.989595] Call Trace: [ 4.989650] [ 4.989695] dump_stack_lvl+0x36/0x50 [ 4.989761] bad_page+0xcf/0x240 [ 4.989823] ? __pfx_bad_page+0x10/0x10 [ 4.989879] ? __pfx_stack_trace_save+0x10/0x10 [ 4.989939] ? __stack_depot_save+0x32/0x520 [ 4.990088] __rmqueue_pcplist+0x3e1/0x13d0 [ 4.990105] ? kasan_save_stack+0x41/0x60 [ 4.990105] ? kasan_save_stack+0x30/0x60 [ 4.990105] ? tls_decrypt_sg+0x3a8/0x2d60 [ 4.990105] ? inet_recvmsg+0x355/0x4f0 [ 4.990105] ? sock_recvmsg+0x16d/0x220 [ 4.990105] ? __sys_recvfrom+0x18e/0x2a0 [ 4.990105] ? __x64_sys_recvfrom+0xdf/0x1f0 [ 4.990105] ? do_syscall_64+0x3f/0x90 [ 4.990105] ? entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 4.990105] ? __pfx___rmqueue_pcplist+0x10/0x10 [ 4.990105] ? __pfx__raw_spin_trylock+0x10/0x10 [ 4.990105] get_page_from_freelist+0x4cc/0x3010 [ 4.990105] ? __pfx_get_page_from_freelist+0x10/0x10 [ 4.990105] ? kmem_cache_alloc_node+0x13c/0x290 [ 4.990105] ? kasan_set_track+0x25/0x30 [ 4.990105] ? kmalloc_reserve+0x114/0x1e0 [ 4.990105] __alloc_pages+0x297/0x560 [ 4.990105] ? __build_skb_around+0x23a/0x340 [ 4.990105] ? __pfx___alloc_pages+0x10/0x10 [ 4.990105] ? __alloc_skb+0x104/0x270 [ 4.990105] alloc_skb_with_frags+0x130/0x5d0 [ 4.990105] tls_decrypt_sg+0x3a8/0x2d60 [ 4.990105] ? tls_strp_load_anchor_with_queue+0x226/0x3d0 [ 4.990105] ? __pfx_tls_strp_load_anchor_with_queue+0x10/0x10 [ 4.990105] ? __pfx_tls_decrypt_sg+0x10/0x10 [ 4.990105] ? tls_rx_rec_wait+0x68e/0x840 [ 4.990105] tls_rx_one_record+0xd6/0xca0 [ 4.990105] ? __pfx_tls_rx_one_record+0x10/0x10 [ 4.990105] ? mutex_unlock+0x81/0xd0 [ 4.990105] ? __pfx_mutex_unlock+0x10/0x10 [ 4.990105] tls_sw_recvmsg+0x721/0x17b0 [ 4.990105] ? __pfx_tls_sw_recvmsg+0x10/0x10 [ 4.990105] inet_recvmsg+0x355/0x4f0 [ 4.990105] ? _raw_spin_lock+0x7f/0xe0 [ 4.990105] ? __pfx_inet_recvmsg+0x10/0x10 [ 4.990105] ? security_socket_recvmsg+0x6f/0xb0 [ 4.990105] sock_recvmsg+0x16d/0x220 [ 4.990105] ? sockfd_lookup_light+0x11/0x180 [ 4.990105] __sys_recvfrom+0x18e/0x2a0 [ 4.990105] ? __pfx___sys_recvfrom+0x10/0x10 [ 4.990105] ? __asan_memset+0x27/0x50 [ 4.990105] ? __pfx_restore_fpregs_from_fpstate+0x10/0x10 [ 4.990105] ? ksys_write+0xff/0x210 [ 4.990105] __x64_sys_recvfrom+0xdf/0x1f0 [ 4.990105] ? exit_to_user_mode_prepare+0x110/0x120 [ 4.990105] ? syscall_exit_to_user_mode+0x2f/0x50 [ 4.990105] ? __pfx___x64_sys_recvfrom+0x10/0x10 [ 4.990105] do_syscall_64+0x3f/0x90 [ 4.990105] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 4.990105] RIP: 0033:0x45c8e6 [ 4.990105] Code: 47 ba 04 00 00 00 48 c7 c0 f0 ff ff ff 64 89 10 48 c7 c2 ff ff ff ff c9 48 89 d0 c3 0f 1f 84 00 00 00 00 00 48 8b 45 10 0f 05 <48> 89 c2 48 3d 00 f0 ff ff 77 0f c9 48 89 d0 c3 66 2e 0f 1f 84 00 [ 4.990105] RSP: 002b:00007fff623e6350 EFLAGS: 00000202 ORIG_RAX: 000000000000002d [ 4.990105] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 000000000045c8e6 [ 4.990105] RDX: 0000000000000064 RSI: 00007fff623e7420 RDI: 0000000000000005 [ 4.990105] RBP: 00007fff623e6360 R08: 0000000000000000 R09: 0000000000000000 [ 4.990105] R10: 0000000000000100 R11: 0000000000000202 R12: 00007fff623e8588 [ 4.990105] R13: 00007fff623e8598 R14: 0000000000000002 R15: 00000000004bd9e0 [ 4.990105] [ 4.995367] BUG: Bad page state in process init pfn:02f02 [ 4.995444] page:000000000afc7539 refcount:-1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2f02 [ 4.995556] flags: 0x100000000000000(node=0|zone=1) [ 4.995616] page_type: 0xffffffff() [ 4.995671] raw: 0100000000000000 dead000000000100 dead000000000122 0000000000000000 [ 4.995737] raw: 0000000000000000 0000000000000000 ffffffffffffffff 0000000000000000 [ 4.995797] page dumped because: nonzero _refcount [ 4.995849] Modules linked in: [ 4.995906] CPU: 0 PID: 58 Comm: init Tainted: G B 6.6.18 #6 [ 4.995994] Hardware name: QEMU Ubuntu 26.04 PC (i440FX + PIIX, 1996), BIOS 1.17.0-debian-1.17.0-1ubuntu1 04/01/2014 [ 4.996085] Call Trace: [ 4.996085] [ 4.996085] dump_stack_lvl+0x36/0x50 [ 4.996085] bad_page+0xcf/0x240 [ 4.996085] ? __pfx_bad_page+0x10/0x10 [ 4.996085] ? __pfx_stack_trace_save+0x10/0x10 [ 4.996085] ? __stack_depot_save+0x32/0x520 [ 4.996085] __rmqueue_pcplist+0x3e1/0x13d0 [ 4.996085] ? kasan_save_stack+0x41/0x60 [ 4.996085] ? kasan_save_stack+0x30/0x60 [ 4.996085] ? tls_decrypt_sg+0x3a8/0x2d60 [ 4.996085] ? inet_recvmsg+0x355/0x4f0 [ 4.996085] ? sock_recvmsg+0x16d/0x220 [ 4.996085] ? __sys_recvfrom+0x18e/0x2a0 [ 4.996085] ? __x64_sys_recvfrom+0xdf/0x1f0 [ 4.996085] ? do_syscall_64+0x3f/0x90 [ 4.996085] ? entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 4.996085] ? __pfx___rmqueue_pcplist+0x10/0x10 [ 4.996085] ? __pfx__raw_spin_trylock+0x10/0x10 [ 4.996085] get_page_from_freelist+0x4cc/0x3010 [ 4.996085] ? __pfx_get_page_from_freelist+0x10/0x10 [ 4.996085] ? kmem_cache_alloc_node+0x13c/0x290 [ 4.996085] ? kasan_set_track+0x25/0x30 [ 4.996085] ? kmalloc_reserve+0x114/0x1e0 [ 4.996085] __alloc_pages+0x297/0x560 [ 4.996085] ? __build_skb_around+0x23a/0x340 [ 4.996085] ? __pfx___alloc_pages+0x10/0x10 [ 4.996085] ? __alloc_skb+0x104/0x270 [ 4.996085] alloc_skb_with_frags+0x130/0x5d0 [ 4.996085] tls_decrypt_sg+0x3a8/0x2d60 [ 4.996085] ? tls_strp_load_anchor_with_queue+0x226/0x3d0 [ 4.996085] ? __pfx_tls_strp_load_anchor_with_queue+0x10/0x10 [ 4.996085] ? __pfx_tls_decrypt_sg+0x10/0x10 [ 4.996085] ? tls_rx_rec_wait+0x68e/0x840 [ 4.996085] tls_rx_one_record+0xd6/0xca0 [ 4.996085] ? __pfx_tls_rx_one_record+0x10/0x10 [ 4.996085] ? mutex_unlock+0x81/0xd0 [ 4.996085] ? __pfx_mutex_unlock+0x10/0x10 [ 4.996085] tls_sw_recvmsg+0x721/0x17b0 [ 4.996085] ? __pfx_tls_sw_recvmsg+0x10/0x10 [ 4.996085] inet_recvmsg+0x355/0x4f0 [ 4.996085] ? _raw_spin_lock+0x7f/0xe0 [ 4.996085] ? __pfx_inet_recvmsg+0x10/0x10 [ 4.996085] ? security_socket_recvmsg+0x6f/0xb0 [ 4.996085] sock_recvmsg+0x16d/0x220 [ 4.996085] ? sockfd_lookup_light+0x11/0x180 [ 4.996085] __sys_recvfrom+0x18e/0x2a0 [ 4.996085] ? __pfx___sys_recvfrom+0x10/0x10 [ 4.996085] ? __asan_memset+0x27/0x50 [ 4.996085] ? __pfx_restore_fpregs_from_fpstate+0x10/0x10 [ 4.996085] ? ksys_write+0xff/0x210 [ 4.996085] __x64_sys_recvfrom+0xdf/0x1f0 [ 4.996085] ? exit_to_user_mode_prepare+0x110/0x120 [ 4.996085] ? syscall_exit_to_user_mode+0x2f/0x50 [ 4.996085] ? __pfx___x64_sys_recvfrom+0x10/0x10 [ 4.996085] do_syscall_64+0x3f/0x90 [ 4.996085] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 4.996085] RIP: 0033:0x45c8e6 [ 4.996085] Code: 47 ba 04 00 00 00 48 c7 c0 f0 ff ff ff 64 89 10 48 c7 c2 ff ff ff ff c9 48 89 d0 c3 0f 1f 84 00 00 00 00 00 48 8b 45 10 0f 05 <48> 89 c2 48 3d 00 f0 ff ff 77 0f c9 48 89 d0 c3 66 2e 0f 1f 84 00 [ 4.996085] RSP: 002b:00007fff623e6350 EFLAGS: 00000202 ORIG_RAX: 000000000000002d [ 4.996085] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 000000000045c8e6 [ 4.996085] RDX: 0000000000000064 RSI: 00007fff623e7420 RDI: 0000000000000005 [ 4.996085] RBP: 00007fff623e6360 R08: 0000000000000000 R09: 0000000000000000 [ 4.996085] R10: 0000000000000100 R11: 0000000000000202 R12: 00007fff623e8588 [ 4.996085] R13: 00007fff623e8598 R14: 0000000000000002 R15: 00000000004bd9e0 [ 4.996085] [ 5.002293] BUG: Bad page state in process init pfn:02f04 [ 5.002370] page:00000000922660a6 refcount:-1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2f04 [ 5.002447] flags: 0x100000000000000(node=0|zone=1) [ 5.002522] page_type: 0xffffffff() [ 5.002580] raw: 0100000000000000 dead000000000100 dead000000000122 0000000000000000 [ 5.002646] raw: 0000000000000000 0000000000000000 ffffffffffffffff 0000000000000000 [ 5.002707] page dumped because: nonzero _refcount [ 5.002759] Modules linked in: [ 5.002818] CPU: 0 PID: 58 Comm: init Tainted: G B 6.6.18 #6 [ 5.002883] Hardware name: QEMU Ubuntu 26.04 PC (i440FX + PIIX, 1996), BIOS 1.17.0-debian-1.17.0-1ubuntu1 04/01/2014 [ 5.002977] Call Trace: [ 5.003036] [ 5.003082] dump_stack_lvl+0x36/0x50 [ 5.003082] bad_page+0xcf/0x240 [ 5.003082] ? __pfx_bad_page+0x10/0x10 [ 5.003082] ? __pfx_stack_trace_save+0x10/0x10 [ 5.003082] ? __stack_depot_save+0x32/0x520 [ 5.003082] __rmqueue_pcplist+0x3e1/0x13d0 [ 5.003082] ? kasan_save_stack+0x41/0x60 [ 5.003082] ? kasan_save_stack+0x30/0x60 [ 5.003082] ? tls_decrypt_sg+0x3a8/0x2d60 [ 5.003082] ? inet_recvmsg+0x355/0x4f0 [ 5.003082] ? sock_recvmsg+0x16d/0x220 [ 5.003082] ? __sys_recvfrom+0x18e/0x2a0 [ 5.003082] ? __x64_sys_recvfrom+0xdf/0x1f0 [ 5.003082] ? do_syscall_64+0x3f/0x90 [ 5.003082] ? entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 5.003082] ? __pfx___rmqueue_pcplist+0x10/0x10 [ 5.003082] ? __pfx__raw_spin_trylock+0x10/0x10 [ 5.003082] get_page_from_freelist+0x4cc/0x3010 [ 5.003082] ? __pfx_get_page_from_freelist+0x10/0x10 [ 5.003082] ? kmem_cache_alloc_node+0x13c/0x290 [ 5.003082] ? kasan_set_track+0x25/0x30 [ 5.003082] ? kmalloc_reserve+0x114/0x1e0 [ 5.003082] __alloc_pages+0x297/0x560 [ 5.003082] ? __build_skb_around+0x23a/0x340 [ 5.003082] ? __pfx___alloc_pages+0x10/0x10 [ 5.003082] ? __alloc_skb+0x104/0x270 [ 5.003082] alloc_skb_with_frags+0x130/0x5d0 [ 5.003082] tls_decrypt_sg+0x3a8/0x2d60 [ 5.003082] ? tls_strp_load_anchor_with_queue+0x226/0x3d0 [ 5.003082] ? __pfx_tls_strp_load_anchor_with_queue+0x10/0x10 [ 5.003082] ? __pfx_tls_decrypt_sg+0x10/0x10 [ 5.003082] ? tls_rx_rec_wait+0x68e/0x840 [ 5.003082] tls_rx_one_record+0xd6/0xca0 [ 5.003082] ? __pfx_tls_rx_one_record+0x10/0x10 [ 5.003082] ? mutex_unlock+0x81/0xd0 [ 5.003082] ? __pfx_mutex_unlock+0x10/0x10 [ 5.003082] tls_sw_recvmsg+0x721/0x17b0 [ 5.003082] ? __pfx_tls_sw_recvmsg+0x10/0x10 [ 5.003082] inet_recvmsg+0x355/0x4f0 [ 5.003082] ? _raw_spin_lock+0x7f/0xe0 [ 5.003082] ? __pfx_inet_recvmsg+0x10/0x10 [ 5.003082] ? security_socket_recvmsg+0x6f/0xb0 [ 5.003082] sock_recvmsg+0x16d/0x220 [ 5.003082] ? sockfd_lookup_light+0x11/0x180 [ 5.003082] __sys_recvfrom+0x18e/0x2a0 [ 5.003082] ? __pfx___sys_recvfrom+0x10/0x10 [ 5.003082] ? __asan_memset+0x27/0x50 [ 5.003082] ? __pfx_restore_fpregs_from_fpstate+0x10/0x10 [ 5.003082] ? ksys_write+0xff/0x210 [ 5.003082] __x64_sys_recvfrom+0xdf/0x1f0 [ 5.003082] ? exit_to_user_mode_prepare+0x110/0x120 [ 5.003082] ? syscall_exit_to_user_mode+0x2f/0x50 [ 5.003082] ? __pfx___x64_sys_recvfrom+0x10/0x10 [ 5.003082] do_syscall_64+0x3f/0x90 [ 5.003082] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 5.003082] RIP: 0033:0x45c8e6 [ 5.003082] Code: 47 ba 04 00 00 00 48 c7 c0 f0 ff ff ff 64 89 10 48 c7 c2 ff ff ff ff c9 48 89 d0 c3 0f 1f 84 00 00 00 00 00 48 8b 45 10 0f 05 <48> 89 c2 48 3d 00 f0 ff ff 77 0f c9 48 89 d0 c3 66 2e 0f 1f 84 00 [ 5.003082] RSP: 002b:00007fff623e6350 EFLAGS: 00000202 ORIG_RAX: 000000000000002d [ 5.003082] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 000000000045c8e6 [ 5.003082] RDX: 0000000000000064 RSI: 00007fff623e7420 RDI: 0000000000000005 [ 5.003082] RBP: 00007fff623e6360 R08: 0000000000000000 R09: 0000000000000000 [ 5.003082] R10: 0000000000000100 R11: 0000000000000202 R12: 00007fff623e8588 [ 5.003082] R13: 00007fff623e8598 R14: 0000000000000002 R15: 00000000004bd9e0 [ 5.003082] [ 5.008388] BUG: Bad page state in process init pfn:02f06 [ 5.008464] page:000000003635d0ce refcount:-1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2f06 [ 5.008541] flags: 0x100000000000000(node=0|zone=1) [ 5.008599] page_type: 0xffffffff() [ 5.008653] raw: 0100000000000000 dead000000000100 dead000000000122 0000000000000000 [ 5.008720] raw: 0000000000000000 0000000000000000 ffffffffffffffff 0000000000000000 [ 5.008782] page dumped because: nonzero _refcount [ 5.008833] Modules linked in: [ 5.008891] CPU: 0 PID: 58 Comm: init Tainted: G B 6.6.18 #6 [ 5.008976] Hardware name: QEMU Ubuntu 26.04 PC (i440FX + PIIX, 1996), BIOS 1.17.0-debian-1.17.0-1ubuntu1 04/01/2014 [ 5.009068] Call Trace: [ 5.009068] [ 5.009068] dump_stack_lvl+0x36/0x50 [ 5.009068] bad_page+0xcf/0x240 [ 5.009068] ? __pfx_bad_page+0x10/0x10 [ 5.009068] ? __pfx_stack_trace_save+0x10/0x10 [ 5.009068] ? __stack_depot_save+0x32/0x520 [ 5.009068] __rmqueue_pcplist+0x3e1/0x13d0 [ 5.009068] ? kasan_save_stack+0x41/0x60 [ 5.009068] ? kasan_save_stack+0x30/0x60 [ 5.009068] ? tls_decrypt_sg+0x3a8/0x2d60 [ 5.009068] ? inet_recvmsg+0x355/0x4f0 [ 5.009068] ? sock_recvmsg+0x16d/0x220 [ 5.009068] ? __sys_recvfrom+0x18e/0x2a0 [ 5.009068] ? __x64_sys_recvfrom+0xdf/0x1f0 [ 5.009068] ? do_syscall_64+0x3f/0x90 [ 5.009068] ? entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 5.009068] ? __pfx___rmqueue_pcplist+0x10/0x10 [ 5.009068] ? __pfx__raw_spin_trylock+0x10/0x10 [ 5.009068] get_page_from_freelist+0x4cc/0x3010 [ 5.009068] ? __pfx_get_page_from_freelist+0x10/0x10 [ 5.009068] ? kmem_cache_alloc_node+0x13c/0x290 [ 5.009068] ? kasan_set_track+0x25/0x30 [ 5.009068] ? kmalloc_reserve+0x114/0x1e0 [ 5.009068] __alloc_pages+0x297/0x560 [ 5.009068] ? __build_skb_around+0x23a/0x340 [ 5.009068] ? __pfx___alloc_pages+0x10/0x10 [ 5.009068] ? __alloc_skb+0x104/0x270 [ 5.009068] alloc_skb_with_frags+0x130/0x5d0 [ 5.009068] tls_decrypt_sg+0x3a8/0x2d60 [ 5.009068] ? tls_strp_load_anchor_with_queue+0x226/0x3d0 [ 5.009068] ? __pfx_tls_strp_load_anchor_with_queue+0x10/0x10 [ 5.009068] ? __pfx_tls_decrypt_sg+0x10/0x10 [ 5.009068] ? tls_rx_rec_wait+0x68e/0x840 [ 5.009068] tls_rx_one_record+0xd6/0xca0 [ 5.009068] ? __pfx_tls_rx_one_record+0x10/0x10 [ 5.009068] ? mutex_unlock+0x81/0xd0 [ 5.009068] ? __pfx_mutex_unlock+0x10/0x10 [ 5.009068] tls_sw_recvmsg+0x721/0x17b0 [ 5.009068] ? __pfx_tls_sw_recvmsg+0x10/0x10 [ 5.009068] inet_recvmsg+0x355/0x4f0 [ 5.009068] ? _raw_spin_lock+0x7f/0xe0 [ 5.009068] ? __pfx_inet_recvmsg+0x10/0x10 [ 5.009068] ? security_socket_recvmsg+0x6f/0xb0 [ 5.009068] sock_recvmsg+0x16d/0x220 [ 5.009068] ? sockfd_lookup_light+0x11/0x180 [ 5.009068] __sys_recvfrom+0x18e/0x2a0 [ 5.009068] ? __pfx___sys_recvfrom+0x10/0x10 [ 5.009068] ? __asan_memset+0x27/0x50 [ 5.009068] ? __pfx_restore_fpregs_from_fpstate+0x10/0x10 [ 5.009068] ? ksys_write+0xff/0x210 [ 5.009068] __x64_sys_recvfrom+0xdf/0x1f0 [ 5.009068] ? exit_to_user_mode_prepare+0x110/0x120 [ 5.009068] ? syscall_exit_to_user_mode+0x2f/0x50 [ 5.009068] ? __pfx___x64_sys_recvfrom+0x10/0x10 [ 5.009068] do_syscall_64+0x3f/0x90 [ 5.009068] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 5.009068] RIP: 0033:0x45c8e6 [ 5.009068] Code: 47 ba 04 00 00 00 48 c7 c0 f0 ff ff ff 64 89 10 48 c7 c2 ff ff ff ff c9 48 89 d0 c3 0f 1f 84 00 00 00 00 00 48 8b 45 10 0f 05 <48> 89 c2 48 3d 00 f0 ff ff 77 0f c9 48 89 d0 c3 66 2e 0f 1f 84 00 [ 5.009068] RSP: 002b:00007fff623e6350 EFLAGS: 00000202 ORIG_RAX: 000000000000002d [ 5.009068] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 000000000045c8e6 [ 5.009068] RDX: 0000000000000064 RSI: 00007fff623e7420 RDI: 0000000000000005 [ 5.009068] RBP: 00007fff623e6360 R08: 0000000000000000 R09: 0000000000000000 [ 5.009068] R10: 0000000000000100 R11: 0000000000000202 R12: 00007fff623e8588 [ 5.009068] R13: 00007fff623e8598 R14: 0000000000000002 R15: 00000000004bd9e0 [ 5.009068] [ 5.014588] BUG: Bad page state in process init pfn:02f08 [ 5.014666] page:0000000061db500b refcount:-1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2f08 [ 5.014753] flags: 0x100000000000000(node=0|zone=1) [ 5.014863] page_type: 0xffffffff() [ 5.014984] raw: 0100000000000000 dead000000000100 dead000000000122 0000000000000000 [ 5.015204] raw: 0000000000000000 0000000000000000 ffffffffffffffff 0000000000000000 [ 5.015278] page dumped because: nonzero _refcount [ 5.015350] Modules linked in: [ 5.015424] CPU: 0 PID: 58 Comm: init Tainted: G B 6.6.18 #6 [ 5.015536] Hardware name: QEMU Ubuntu 26.04 PC (i440FX + PIIX, 1996), BIOS 1.17.0-debian-1.17.0-1ubuntu1 04/01/2014 [ 5.015644] Call Trace: [ 5.015706] [ 5.015766] dump_stack_lvl+0x36/0x50 [ 5.015850] bad_page+0xcf/0x240 [ 5.015930] ? __pfx_bad_page+0x10/0x10 [ 5.016095] ? __pfx_stack_trace_save+0x10/0x10 [ 5.016151] ? __stack_depot_save+0x32/0x520 [ 5.016151] __rmqueue_pcplist+0x3e1/0x13d0 [ 5.016151] ? kasan_save_stack+0x41/0x60 [ 5.016151] ? kasan_save_stack+0x30/0x60 [ 5.016151] ? tls_decrypt_sg+0x3a8/0x2d60 [ 5.016151] ? inet_recvmsg+0x355/0x4f0 [ 5.016151] ? sock_recvmsg+0x16d/0x220 [ 5.016151] ? __sys_recvfrom+0x18e/0x2a0 [ 5.016151] ? __x64_sys_recvfrom+0xdf/0x1f0 [ 5.016151] ? do_syscall_64+0x3f/0x90 [ 5.016151] ? entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 5.016151] ? __pfx___rmqueue_pcplist+0x10/0x10 [ 5.016151] ? __pfx__raw_spin_trylock+0x10/0x10 [ 5.016151] get_page_from_freelist+0x4cc/0x3010 [ 5.016151] ? __pfx_get_page_from_freelist+0x10/0x10 [ 5.016151] ? kmem_cache_alloc_node+0x13c/0x290 [ 5.016151] ? kasan_set_track+0x25/0x30 [ 5.016151] ? kmalloc_reserve+0x114/0x1e0 [ 5.016151] __alloc_pages+0x297/0x560 [ 5.016151] ? __build_skb_around+0x23a/0x340 [ 5.016151] ? __pfx___alloc_pages+0x10/0x10 [ 5.016151] ? __alloc_skb+0x104/0x270 [ 5.016151] alloc_skb_with_frags+0x130/0x5d0 [ 5.016151] tls_decrypt_sg+0x3a8/0x2d60 [ 5.016151] ? tls_strp_load_anchor_with_queue+0x226/0x3d0 [ 5.016151] ? __pfx_tls_strp_load_anchor_with_queue+0x10/0x10 [ 5.016151] ? __pfx_tls_decrypt_sg+0x10/0x10 [ 5.016151] ? tls_rx_rec_wait+0x68e/0x840 [ 5.016151] tls_rx_one_record+0xd6/0xca0 [ 5.016151] ? __pfx_tls_rx_one_record+0x10/0x10 [ 5.016151] ? mutex_unlock+0x81/0xd0 [ 5.016151] ? __pfx_mutex_unlock+0x10/0x10 [ 5.016151] tls_sw_recvmsg+0x721/0x17b0 [ 5.016151] ? __pfx_tls_sw_recvmsg+0x10/0x10 [ 5.016151] inet_recvmsg+0x355/0x4f0 [ 5.016151] ? __pfx_run_posix_cpu_timers+0x10/0x10 [ 5.016151] ? __pfx_inet_recvmsg+0x10/0x10 [ 5.016151] ? security_socket_recvmsg+0x6f/0xb0 [ 5.016151] sock_recvmsg+0x16d/0x220 [ 5.016151] ? sockfd_lookup_light+0x11/0x180 [ 5.016151] __sys_recvfrom+0x18e/0x2a0 [ 5.016151] ? __pfx___sys_recvfrom+0x10/0x10 [ 5.016151] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 5.016151] ? enqueue_hrtimer+0xf1/0x240 [ 5.016151] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 5.016151] ? __pfx_restore_fpregs_from_fpstate+0x10/0x10 [ 5.016151] __x64_sys_recvfrom+0xdf/0x1f0 [ 5.016151] ? exit_to_user_mode_prepare+0x110/0x120 [ 5.016151] ? syscall_exit_to_user_mode+0x2f/0x50 [ 5.016151] ? __pfx___x64_sys_recvfrom+0x10/0x10 [ 5.016151] do_syscall_64+0x3f/0x90 [ 5.016151] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 5.016151] RIP: 0033:0x45c8e6 [ 5.016151] Code: 47 ba 04 00 00 00 48 c7 c0 f0 ff ff ff 64 89 10 48 c7 c2 ff ff ff ff c9 48 89 d0 c3 0f 1f 84 00 00 00 00 00 48 8b 45 10 0f 05 <48> 89 c2 48 3d 00 f0 ff ff 77 0f c9 48 89 d0 c3 66 2e 0f 1f 84 00 [ 5.016151] RSP: 002b:00007fff623e6350 EFLAGS: 00000202 ORIG_RAX: 000000000000002d [ 5.016151] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 000000000045c8e6 [ 5.016151] RDX: 0000000000000064 RSI: 00007fff623e7420 RDI: 0000000000000005 [ 5.016151] RBP: 00007fff623e6360 R08: 0000000000000000 R09: 0000000000000000 [ 5.016151] R10: 0000000000000100 R11: 0000000000000202 R12: 00007fff623e8588 [ 5.016151] R13: 00007fff623e8598 R14: 0000000000000002 R15: 00000000004bd9e0 [ 5.016151] [ 5.021521] BUG: Bad page state in process init pfn:02f0a [ 5.021598] page:00000000526b4ff3 refcount:-1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2f0a [ 5.021678] flags: 0x100000000000000(node=0|zone=1) [ 5.021737] page_type: 0xffffffff() [ 5.021792] raw: 0100000000000000 dead000000000100 dead000000000122 0000000000000000 [ 5.021860] raw: 0000000000000000 0000000000000000 ffffffffffffffff 0000000000000000 [ 5.021920] page dumped because: nonzero _refcount [ 5.021997] Modules linked in: [ 5.022143] CPU: 0 PID: 58 Comm: init Tainted: G B 6.6.18 #6 [ 5.022217] Hardware name: QEMU Ubuntu 26.04 PC (i440FX + PIIX, 1996), BIOS 1.17.0-debian-1.17.0-1ubuntu1 04/01/2014 [ 5.022288] Call Trace: [ 5.022336] [ 5.022380] dump_stack_lvl+0x36/0x50 [ 5.022442] bad_page+0xcf/0x240 [ 5.022524] ? __pfx_bad_page+0x10/0x10 [ 5.022581] ? __pfx_stack_trace_save+0x10/0x10 [ 5.022640] ? __stack_depot_save+0x32/0x520 [ 5.022698] __rmqueue_pcplist+0x3e1/0x13d0 [ 5.022759] ? kasan_save_stack+0x41/0x60 [ 5.022818] ? kasan_save_stack+0x30/0x60 [ 5.022878] ? tls_decrypt_sg+0x3a8/0x2d60 [ 5.022936] ? inet_recvmsg+0x355/0x4f0 [ 5.023019] ? sock_recvmsg+0x16d/0x220 [ 5.023072] ? __sys_recvfrom+0x18e/0x2a0 [ 5.023072] ? __x64_sys_recvfrom+0xdf/0x1f0 [ 5.023072] ? do_syscall_64+0x3f/0x90 [ 5.023072] ? entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 5.023072] ? __pfx___rmqueue_pcplist+0x10/0x10 [ 5.023072] ? __pfx__raw_spin_trylock+0x10/0x10 [ 5.023072] get_page_from_freelist+0x4cc/0x3010 [ 5.023072] ? __pfx_get_page_from_freelist+0x10/0x10 [ 5.023072] ? kmem_cache_alloc_node+0x13c/0x290 [ 5.023072] ? kasan_set_track+0x25/0x30 [ 5.023072] ? kmalloc_reserve+0x114/0x1e0 [ 5.023072] __alloc_pages+0x297/0x560 [ 5.023072] ? __build_skb_around+0x23a/0x340 [ 5.023072] ? __pfx___alloc_pages+0x10/0x10 [ 5.023072] ? __alloc_skb+0x104/0x270 [ 5.023072] alloc_skb_with_frags+0x130/0x5d0 [ 5.023072] tls_decrypt_sg+0x3a8/0x2d60 [ 5.023072] ? tls_strp_load_anchor_with_queue+0x226/0x3d0 [ 5.023072] ? __pfx_tls_strp_load_anchor_with_queue+0x10/0x10 [ 5.023072] ? __pfx_tls_decrypt_sg+0x10/0x10 [ 5.023072] ? tls_rx_rec_wait+0x68e/0x840 [ 5.023072] tls_rx_one_record+0xd6/0xca0 [ 5.023072] ? __pfx_tls_rx_one_record+0x10/0x10 [ 5.023072] ? mutex_unlock+0x81/0xd0 [ 5.023072] ? __pfx_mutex_unlock+0x10/0x10 [ 5.023072] tls_sw_recvmsg+0x721/0x17b0 [ 5.023072] ? __pfx_tls_sw_recvmsg+0x10/0x10 [ 5.023072] inet_recvmsg+0x355/0x4f0 [ 5.023072] ? __pfx_run_posix_cpu_timers+0x10/0x10 [ 5.023072] ? __pfx_inet_recvmsg+0x10/0x10 [ 5.023072] ? security_socket_recvmsg+0x6f/0xb0 [ 5.023072] sock_recvmsg+0x16d/0x220 [ 5.023072] ? sockfd_lookup_light+0x11/0x180 [ 5.023072] __sys_recvfrom+0x18e/0x2a0 [ 5.023072] ? __pfx___sys_recvfrom+0x10/0x10 [ 5.023072] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 5.023072] ? enqueue_hrtimer+0xf1/0x240 [ 5.023072] ? __asan_memset+0x27/0x50 [ 5.023072] ? __pfx_restore_fpregs_from_fpstate+0x10/0x10 [ 5.023072] __x64_sys_recvfrom+0xdf/0x1f0 [ 5.023072] ? exit_to_user_mode_prepare+0x110/0x120 [ 5.023072] ? syscall_exit_to_user_mode+0x2f/0x50 [ 5.023072] ? __pfx___x64_sys_recvfrom+0x10/0x10 [ 5.023072] do_syscall_64+0x3f/0x90 [ 5.023072] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 5.023072] RIP: 0033:0x45c8e6 [ 5.023072] Code: 47 ba 04 00 00 00 48 c7 c0 f0 ff ff ff 64 89 10 48 c7 c2 ff ff ff ff c9 48 89 d0 c3 0f 1f 84 00 00 00 00 00 48 8b 45 10 0f 05 <48> 89 c2 48 3d 00 f0 ff ff 77 0f c9 48 89 d0 c3 66 2e 0f 1f 84 00 [ 5.023072] RSP: 002b:00007fff623e6350 EFLAGS: 00000202 ORIG_RAX: 000000000000002d [ 5.023072] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 000000000045c8e6 [ 5.023072] RDX: 0000000000000064 RSI: 00007fff623e7420 RDI: 0000000000000005 [ 5.023072] RBP: 00007fff623e6360 R08: 0000000000000000 R09: 0000000000000000 [ 5.023072] R10: 0000000000000100 R11: 0000000000000202 R12: 00007fff623e8588 [ 5.023072] R13: 00007fff623e8598 R14: 0000000000000002 R15: 00000000004bd9e0 [ 5.023072] [ 5.027696] BUG: Bad page state in process init pfn:02f0c [ 5.027773] page:000000003da18b8b refcount:-1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2f0c [ 5.027849] flags: 0x100000000000000(node=0|zone=1) [ 5.027907] page_type: 0xffffffff() [ 5.027990] raw: 0100000000000000 dead000000000100 dead000000000122 0000000000000000 [ 5.028144] raw: 0000000000000000 0000000000000000 ffffffffffffffff 0000000000000000 [ 5.028213] page dumped because: nonzero _refcount [ 5.028266] Modules linked in: [ 5.028323] CPU: 0 PID: 58 Comm: init Tainted: G B 6.6.18 #6 [ 5.028388] Hardware name: QEMU Ubuntu 26.04 PC (i440FX + PIIX, 1996), BIOS 1.17.0-debian-1.17.0-1ubuntu1 04/01/2014 [ 5.028459] Call Trace: [ 5.028536] [ 5.028581] dump_stack_lvl+0x36/0x50 [ 5.028643] bad_page+0xcf/0x240 [ 5.028703] ? __pfx_bad_page+0x10/0x10 [ 5.028759] ? __pfx_stack_trace_save+0x10/0x10 [ 5.028819] ? __stack_depot_save+0x32/0x520 [ 5.028877] __rmqueue_pcplist+0x3e1/0x13d0 [ 5.028939] ? kasan_save_stack+0x41/0x60 [ 5.029037] ? kasan_save_stack+0x30/0x60 [ 5.029093] ? tls_decrypt_sg+0x3a8/0x2d60 [ 5.029093] ? inet_recvmsg+0x355/0x4f0 [ 5.029093] ? sock_recvmsg+0x16d/0x220 [ 5.029093] ? __sys_recvfrom+0x18e/0x2a0 [ 5.029093] ? __x64_sys_recvfrom+0xdf/0x1f0 [ 5.029093] ? do_syscall_64+0x3f/0x90 [ 5.029093] ? entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 5.029093] ? __pfx___rmqueue_pcplist+0x10/0x10 [ 5.029093] ? __pfx__raw_spin_trylock+0x10/0x10 [ 5.029093] get_page_from_freelist+0x4cc/0x3010 [ 5.029093] ? __pfx_get_page_from_freelist+0x10/0x10 [ 5.029093] ? kmem_cache_alloc_node+0x13c/0x290 [ 5.029093] ? kasan_set_track+0x25/0x30 [ 5.029093] ? kmalloc_reserve+0x114/0x1e0 [ 5.029093] __alloc_pages+0x297/0x560 [ 5.029093] ? __build_skb_around+0x23a/0x340 [ 5.029093] ? __pfx___alloc_pages+0x10/0x10 [ 5.029093] ? __alloc_skb+0x104/0x270 [ 5.029093] alloc_skb_with_frags+0x130/0x5d0 [ 5.029093] tls_decrypt_sg+0x3a8/0x2d60 [ 5.029093] ? tls_strp_load_anchor_with_queue+0x226/0x3d0 [ 5.029093] ? __pfx_tls_strp_load_anchor_with_queue+0x10/0x10 [ 5.029093] ? __pfx_tls_decrypt_sg+0x10/0x10 [ 5.029093] ? tls_rx_rec_wait+0x68e/0x840 [ 5.029093] tls_rx_one_record+0xd6/0xca0 [ 5.029093] ? __pfx_tls_rx_one_record+0x10/0x10 [ 5.029093] ? mutex_unlock+0x81/0xd0 [ 5.029093] ? __pfx_mutex_unlock+0x10/0x10 [ 5.029093] tls_sw_recvmsg+0x721/0x17b0 [ 5.029093] ? __pfx_tls_sw_recvmsg+0x10/0x10 [ 5.029093] inet_recvmsg+0x355/0x4f0 [ 5.029093] ? __pfx_run_posix_cpu_timers+0x10/0x10 [ 5.029093] ? __pfx_inet_recvmsg+0x10/0x10 [ 5.029093] ? security_socket_recvmsg+0x6f/0xb0 [ 5.029093] sock_recvmsg+0x16d/0x220 [ 5.029093] ? sockfd_lookup_light+0x11/0x180 [ 5.029093] __sys_recvfrom+0x18e/0x2a0 [ 5.029093] ? __pfx___sys_recvfrom+0x10/0x10 [ 5.029093] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 5.029093] ? enqueue_hrtimer+0xf1/0x240 [ 5.029093] ? __asan_memset+0x27/0x50 [ 5.029093] ? __pfx_restore_fpregs_from_fpstate+0x10/0x10 [ 5.029093] __x64_sys_recvfrom+0xdf/0x1f0 [ 5.029093] ? exit_to_user_mode_prepare+0x110/0x120 [ 5.029093] ? syscall_exit_to_user_mode+0x2f/0x50 [ 5.029093] ? __pfx___x64_sys_recvfrom+0x10/0x10 [ 5.029093] do_syscall_64+0x3f/0x90 [ 5.029093] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 5.029093] RIP: 0033:0x45c8e6 [ 5.029093] Code: 47 ba 04 00 00 00 48 c7 c0 f0 ff ff ff 64 89 10 48 c7 c2 ff ff ff ff c9 48 89 d0 c3 0f 1f 84 00 00 00 00 00 48 8b 45 10 0f 05 <48> 89 c2 48 3d 00 f0 ff ff 77 0f c9 48 89 d0 c3 66 2e 0f 1f 84 00 [ 5.029093] RSP: 002b:00007fff623e6350 EFLAGS: 00000202 ORIG_RAX: 000000000000002d [ 5.029093] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 000000000045c8e6 [ 5.029093] RDX: 0000000000000064 RSI: 00007fff623e7420 RDI: 0000000000000005 [ 5.029093] RBP: 00007fff623e6360 R08: 0000000000000000 R09: 0000000000000000 [ 5.029093] R10: 0000000000000100 R11: 0000000000000202 R12: 00007fff623e8588 [ 5.029093] R13: 00007fff623e8598 R14: 0000000000000002 R15: 00000000004bd9e0 [ 5.029093] [ 5.034877] BUG: Bad page state in process init pfn:02f0e [ 5.034974] page:00000000d9555541 refcount:-1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2f0e [ 5.035150] flags: 0x100000000000000(node=0|zone=1) [ 5.035240] page_type: 0xffffffff() [ 5.035317] raw: 0100000000000000 dead000000000100 dead000000000122 0000000000000000 [ 5.035423] raw: 0000000000000000 0000000000000000 ffffffffffffffff 0000000000000000 [ 5.035538] page dumped because: nonzero _refcount [ 5.035614] Modules linked in: [ 5.035689] CPU: 0 PID: 58 Comm: init Tainted: G B 6.6.18 #6 [ 5.035792] Hardware name: QEMU Ubuntu 26.04 PC (i440FX + PIIX, 1996), BIOS 1.17.0-debian-1.17.0-1ubuntu1 04/01/2014 [ 5.035909] Call Trace: [ 5.036021] [ 5.036090] dump_stack_lvl+0x36/0x50 [ 5.036090] bad_page+0xcf/0x240 [ 5.036090] ? __pfx_bad_page+0x10/0x10 [ 5.036090] ? __pfx_stack_trace_save+0x10/0x10 [ 5.036090] ? __stack_depot_save+0x32/0x520 [ 5.036090] __rmqueue_pcplist+0x3e1/0x13d0 [ 5.036090] ? kasan_save_stack+0x41/0x60 [ 5.036090] ? kasan_save_stack+0x30/0x60 [ 5.036090] ? tls_decrypt_sg+0x3a8/0x2d60 [ 5.036090] ? inet_recvmsg+0x355/0x4f0 [ 5.036090] ? sock_recvmsg+0x16d/0x220 [ 5.036090] ? __sys_recvfrom+0x18e/0x2a0 [ 5.036090] ? __x64_sys_recvfrom+0xdf/0x1f0 [ 5.036090] ? do_syscall_64+0x3f/0x90 [ 5.036090] ? entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 5.036090] ? __pfx___rmqueue_pcplist+0x10/0x10 [ 5.036090] ? __pfx__raw_spin_trylock+0x10/0x10 [ 5.036090] get_page_from_freelist+0x4cc/0x3010 [ 5.036090] ? __pfx_get_page_from_freelist+0x10/0x10 [ 5.036090] ? kmem_cache_alloc_node+0x13c/0x290 [ 5.036090] ? kasan_set_track+0x25/0x30 [ 5.036090] ? kmalloc_reserve+0x114/0x1e0 [ 5.036090] __alloc_pages+0x297/0x560 [ 5.036090] ? __build_skb_around+0x23a/0x340 [ 5.036090] ? __pfx___alloc_pages+0x10/0x10 [ 5.036090] ? __alloc_skb+0x104/0x270 [ 5.036090] alloc_skb_with_frags+0x130/0x5d0 [ 5.036090] tls_decrypt_sg+0x3a8/0x2d60 [ 5.036090] ? tls_strp_load_anchor_with_queue+0x226/0x3d0 [ 5.036090] ? __pfx_tls_strp_load_anchor_with_queue+0x10/0x10 [ 5.036090] ? __pfx_tls_decrypt_sg+0x10/0x10 [ 5.036090] ? tls_rx_rec_wait+0x68e/0x840 [ 5.036090] tls_rx_one_record+0xd6/0xca0 [ 5.036090] ? __pfx_tls_rx_one_record+0x10/0x10 [ 5.036090] ? mutex_unlock+0x81/0xd0 [ 5.036090] ? __pfx_mutex_unlock+0x10/0x10 [ 5.036090] tls_sw_recvmsg+0x721/0x17b0 [ 5.036090] ? __pfx_tls_sw_recvmsg+0x10/0x10 [ 5.036090] inet_recvmsg+0x355/0x4f0 [ 5.036090] ? __pfx_run_posix_cpu_timers+0x10/0x10 [ 5.036090] ? __pfx_inet_recvmsg+0x10/0x10 [ 5.036090] ? security_socket_recvmsg+0x6f/0xb0 [ 5.036090] sock_recvmsg+0x16d/0x220 [ 5.036090] ? sockfd_lookup_light+0x11/0x180 [ 5.036090] __sys_recvfrom+0x18e/0x2a0 [ 5.036090] ? __pfx___sys_recvfrom+0x10/0x10 [ 5.036090] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 5.036090] ? enqueue_hrtimer+0xf1/0x240 [ 5.036090] ? __asan_memset+0x27/0x50 [ 5.036090] ? __pfx_restore_fpregs_from_fpstate+0x10/0x10 [ 5.036090] __x64_sys_recvfrom+0xdf/0x1f0 [ 5.036090] ? exit_to_user_mode_prepare+0x110/0x120 [ 5.036090] ? syscall_exit_to_user_mode+0x2f/0x50 [ 5.036090] ? __pfx___x64_sys_recvfrom+0x10/0x10 [ 5.036090] do_syscall_64+0x3f/0x90 [ 5.036090] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 5.036090] RIP: 0033:0x45c8e6 [ 5.036090] Code: 47 ba 04 00 00 00 48 c7 c0 f0 ff ff ff 64 89 10 48 c7 c2 ff ff ff ff c9 48 89 d0 c3 0f 1f 84 00 00 00 00 00 48 8b 45 10 0f 05 <48> 89 c2 48 3d 00 f0 ff ff 77 0f c9 48 89 d0 c3 66 2e 0f 1f 84 00 [ 5.036090] RSP: 002b:00007fff623e6350 EFLAGS: 00000202 ORIG_RAX: 000000000000002d [ 5.036090] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 000000000045c8e6 [ 5.036090] RDX: 0000000000000064 RSI: 00007fff623e7420 RDI: 0000000000000005 [ 5.036090] RBP: 00007fff623e6360 R08: 0000000000000000 R09: 0000000000000000 [ 5.036090] R10: 0000000000000100 R11: 0000000000000202 R12: 00007fff623e8588 [ 5.036090] R13: 00007fff623e8598 R14: 0000000000000002 R15: 00000000004bd9e0 [ 5.036090] [ 5.041263] BUG: Bad page state in process init pfn:02f10 [ 5.041338] page:00000000f6bb26ee refcount:-1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2f10 [ 5.041414] flags: 0x100000000000000(node=0|zone=1) [ 5.041472] page_type: 0xffffffff() [ 5.041552] raw: 0100000000000000 dead000000000100 dead000000000122 0000000000000000 [ 5.041619] raw: 0000000000000000 0000000000000000 ffffffffffffffff 0000000000000000 [ 5.041680] page dumped because: nonzero _refcount [ 5.041733] Modules linked in: [ 5.041789] CPU: 0 PID: 58 Comm: init Tainted: G B 6.6.18 #6 [ 5.041854] Hardware name: QEMU Ubuntu 26.04 PC (i440FX + PIIX, 1996), BIOS 1.17.0-debian-1.17.0-1ubuntu1 04/01/2014 [ 5.041926] Call Trace: [ 5.042005] [ 5.042069] dump_stack_lvl+0x36/0x50 [ 5.042074] bad_page+0xcf/0x240 [ 5.042074] ? __pfx_bad_page+0x10/0x10 [ 5.042074] ? format_decode+0x6e1/0xe30 [ 5.042074] __rmqueue_pcplist+0x3e1/0x13d0 [ 5.042074] ? __pfx___rmqueue_pcplist+0x10/0x10 [ 5.042074] ? __pfx__raw_spin_trylock+0x10/0x10 [ 5.042074] get_page_from_freelist+0x4cc/0x3010 [ 5.042074] ? __pfx__prb_read_valid+0x10/0x10 [ 5.042074] ? record_print_text+0x2e2/0x3c0 [ 5.042074] ? record_print_text+0x2e2/0x3c0 [ 5.042074] ? __pfx_get_page_from_freelist+0x10/0x10 [ 5.042074] ? prb_read_valid+0x65/0x90 [ 5.042074] __alloc_pages+0x297/0x560 [ 5.042074] ? __pfx___alloc_pages+0x10/0x10 [ 5.042074] ? __asan_memcpy+0x3c/0x60 [ 5.042074] ? desc_read+0x221/0x330 [ 5.042074] allocate_slab+0x228/0x2d0 [ 5.042074] ? _prb_read_valid+0x412/0x5a0 [ 5.042074] ___slab_alloc+0x382/0x880 [ 5.042074] ? __alloc_skb+0x1c4/0x270 [ 5.042074] ? kernel_fpu_begin_mask+0x160/0x230 [ 5.042074] kmem_cache_alloc_node+0x1f4/0x290 [ 5.042074] ? __alloc_skb+0x1c4/0x270 [ 5.042074] __alloc_skb+0x1c4/0x270 [ 5.042074] ? __pfx___alloc_skb+0x10/0x10 [ 5.042074] ? __pfx_tcp_current_mss+0x10/0x10 [ 5.042074] ? up+0x11/0xc0 [ 5.042074] tcp_stream_alloc_skb+0x23/0x5c0 [ 5.042074] ? tcp_send_mss+0x1a/0x260 [ 5.042074] tcp_sendmsg_locked+0xcd1/0x34f0 [ 5.042074] ? __asan_memcpy+0x3c/0x60 [ 5.042074] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 5.042074] ? scatterwalk_copychunks+0x196/0x4c0 [ 5.042074] ? scatterwalk_map_and_copy+0x12d/0x160 [ 5.042074] ? __pfx_scatterwalk_map_and_copy+0x10/0x10 [ 5.042074] tls_push_sg+0x20f/0x810 [ 5.042074] ? __pfx_tls_push_sg+0x10/0x10 [ 5.042074] ? gcmaes_encrypt+0x1a7/0x260 [ 5.042074] ? generic_gcmaes_encrypt+0x14a/0x1c0 [ 5.042074] ? __pfx_generic_gcmaes_encrypt+0x10/0x10 [ 5.042074] tls_tx_records+0x25b/0x510 [ 5.042074] tls_push_record+0x146a/0x2ed0 [ 5.042074] ? __pfx_tls_push_record+0x10/0x10 [ 5.042074] bpf_exec_tx_verdict+0x153/0x1270 [ 5.042074] ? __pfx_bpf_exec_tx_verdict+0x10/0x10 [ 5.042074] ? __iov_iter_get_pages_alloc+0x240/0x1140 [ 5.042074] ? sk_msg_alloc+0x212/0xa60 [ 5.042074] tls_sw_sendmsg+0x164d/0x1f60 [ 5.042074] ? __pfx_tls_sw_sendmsg+0x10/0x10 [ 5.042074] ? __pfx_selinux_socket_sendmsg+0x10/0x10 [ 5.042074] ? __pfx_run_posix_cpu_timers+0x10/0x10 [ 5.042074] ? __fget_light+0x52/0x4d0 [ 5.042074] __sys_sendto+0x385/0x440 [ 5.042074] ? __pfx___sys_sendto+0x10/0x10 [ 5.042074] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 5.042074] ? enqueue_hrtimer+0xf1/0x240 [ 5.042074] ? __asan_memset+0x27/0x50 [ 5.042074] __x64_sys_sendto+0xdf/0x1f0 [ 5.042074] ? exit_to_user_mode_prepare+0x27/0x120 [ 5.042074] ? syscall_exit_to_user_mode+0x2f/0x50 [ 5.042074] ? __pfx___x64_sys_sendto+0x10/0x10 [ 5.042074] do_syscall_64+0x3f/0x90 [ 5.042074] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 5.042074] RIP: 0033:0x45c8e6 [ 5.042074] Code: 47 ba 04 00 00 00 48 c7 c0 f0 ff ff ff 64 89 10 48 c7 c2 ff ff ff ff c9 48 89 d0 c3 0f 1f 84 00 00 00 00 00 48 8b 45 10 0f 05 <48> 89 c2 48 3d 00 f0 ff ff 77 0f c9 48 89 d0 c3 66 2e 0f 1f 84 00 [ 5.042074] RSP: 002b:00007fff623e6350 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 5.042074] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 000000000045c8e6 [ 5.042074] RDX: 0000000000001000 RSI: 00007fff623e6420 RDI: 0000000000000003 [ 5.042074] RBP: 00007fff623e6360 R08: 0000000000000000 R09: 0000000000000000 [ 5.042074] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fff623e8588 [ 5.042074] R13: 00007fff623e8598 R14: 0000000000000002 R15: 00000000004bd9e0 [ 5.042074] [ 5.048183] BUG: Bad page state in process init pfn:02f14 [ 5.048258] page:0000000077fa2e34 refcount:-1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2f14 [ 5.048335] flags: 0x100000000000000(node=0|zone=1) [ 5.048394] page_type: 0xffffffff() [ 5.048448] raw: 0100000000000000 dead000000000100 dead000000000122 0000000000000000 [ 5.048536] raw: 0000000000000000 0000000000000000 ffffffffffffffff 0000000000000000 [ 5.048598] page dumped because: nonzero _refcount [ 5.048650] Modules linked in: [ 5.048707] CPU: 0 PID: 58 Comm: init Tainted: G B 6.6.18 #6 [ 5.048773] Hardware name: QEMU Ubuntu 26.04 PC (i440FX + PIIX, 1996), BIOS 1.17.0-debian-1.17.0-1ubuntu1 04/01/2014 [ 5.048845] Call Trace: [ 5.048893] [ 5.048937] dump_stack_lvl+0x36/0x50 [ 5.049031] bad_page+0xcf/0x240 [ 5.049076] ? __pfx_bad_page+0x10/0x10 [ 5.049076] ? __pfx_stack_trace_save+0x10/0x10 [ 5.049076] ? __stack_depot_save+0x32/0x520 [ 5.049076] __rmqueue_pcplist+0x3e1/0x13d0 [ 5.049076] ? kasan_save_stack+0x41/0x60 [ 5.049076] ? kasan_save_stack+0x30/0x60 [ 5.049076] ? tls_decrypt_sg+0x3a8/0x2d60 [ 5.049076] ? inet_recvmsg+0x355/0x4f0 [ 5.049076] ? sock_recvmsg+0x16d/0x220 [ 5.049076] ? __sys_recvfrom+0x18e/0x2a0 [ 5.049076] ? __x64_sys_recvfrom+0xdf/0x1f0 [ 5.049076] ? do_syscall_64+0x3f/0x90 [ 5.049076] ? entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 5.049076] ? __pfx___rmqueue_pcplist+0x10/0x10 [ 5.049076] ? __pfx__raw_spin_trylock+0x10/0x10 [ 5.049076] get_page_from_freelist+0x4cc/0x3010 [ 5.049076] ? __pfx_get_page_from_freelist+0x10/0x10 [ 5.049076] ? kmem_cache_alloc_node+0x13c/0x290 [ 5.049076] ? kasan_set_track+0x25/0x30 [ 5.049076] ? kmalloc_reserve+0x114/0x1e0 [ 5.049076] __alloc_pages+0x297/0x560 [ 5.049076] ? __build_skb_around+0x23a/0x340 [ 5.049076] ? __pfx___alloc_pages+0x10/0x10 [ 5.049076] ? __alloc_skb+0x104/0x270 [ 5.049076] alloc_skb_with_frags+0x130/0x5d0 [ 5.049076] tls_decrypt_sg+0x3a8/0x2d60 [ 5.049076] ? tls_strp_load_anchor_with_queue+0x226/0x3d0 [ 5.049076] ? __pfx_tls_strp_load_anchor_with_queue+0x10/0x10 [ 5.049076] ? __pfx_tls_decrypt_sg+0x10/0x10 [ 5.049076] ? tls_rx_rec_wait+0x68e/0x840 [ 5.049076] tls_rx_one_record+0xd6/0xca0 [ 5.049076] ? __pfx_tls_rx_one_record+0x10/0x10 [ 5.049076] ? mutex_unlock+0x81/0xd0 [ 5.049076] ? __pfx_mutex_unlock+0x10/0x10 [ 5.049076] tls_sw_recvmsg+0x721/0x17b0 [ 5.049076] ? __pfx_tls_sw_recvmsg+0x10/0x10 [ 5.049076] inet_recvmsg+0x355/0x4f0 [ 5.049076] ? __pfx_run_posix_cpu_timers+0x10/0x10 [ 5.049076] ? __pfx_inet_recvmsg+0x10/0x10 [ 5.049076] ? security_socket_recvmsg+0x6f/0xb0 [ 5.049076] sock_recvmsg+0x16d/0x220 [ 5.049076] ? sockfd_lookup_light+0x11/0x180 [ 5.049076] __sys_recvfrom+0x18e/0x2a0 [ 5.049076] ? __pfx___sys_recvfrom+0x10/0x10 [ 5.049076] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 5.049076] ? enqueue_hrtimer+0xf1/0x240 [ 5.049076] ? __asan_memset+0x27/0x50 [ 5.049076] ? __pfx_restore_fpregs_from_fpstate+0x10/0x10 [ 5.049076] __x64_sys_recvfrom+0xdf/0x1f0 [ 5.049076] ? exit_to_user_mode_prepare+0x110/0x120 [ 5.049076] ? syscall_exit_to_user_mode+0x2f/0x50 [ 5.049076] ? __pfx___x64_sys_recvfrom+0x10/0x10 [ 5.049076] do_syscall_64+0x3f/0x90 [ 5.049076] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 5.049076] RIP: 0033:0x45c8e6 [ 5.049076] Code: 47 ba 04 00 00 00 48 c7 c0 f0 ff ff ff 64 89 10 48 c7 c2 ff ff ff ff c9 48 89 d0 c3 0f 1f 84 00 00 00 00 00 48 8b 45 10 0f 05 <48> 89 c2 48 3d 00 f0 ff ff 77 0f c9 48 89 d0 c3 66 2e 0f 1f 84 00 [ 5.049076] RSP: 002b:00007fff623e6350 EFLAGS: 00000202 ORIG_RAX: 000000000000002d [ 5.049076] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 000000000045c8e6 [ 5.049076] RDX: 0000000000000064 RSI: 00007fff623e7420 RDI: 0000000000000005 [ 5.049076] RBP: 00007fff623e6360 R08: 0000000000000000 R09: 0000000000000000 [ 5.049076] R10: 0000000000000100 R11: 0000000000000202 R12: 00007fff623e8588 [ 5.049076] R13: 00007fff623e8598 R14: 0000000000000002 R15: 00000000004bd9e0 [ 5.049076] [ 5.054130] BUG: Bad page state in process init pfn:02f16 [ 5.054207] page:000000008e71c477 refcount:-1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2f16 [ 5.054283] flags: 0x100000000000000(node=0|zone=1) [ 5.054341] page_type: 0xffffffff() [ 5.054396] raw: 0100000000000000 dead000000000100 dead000000000122 0000000000000000 [ 5.054463] raw: 0000000000000000 0000000000000000 ffffffffffffffff 0000000000000000 [ 5.054560] page dumped because: nonzero _refcount [ 5.054613] Modules linked in: [ 5.054670] CPU: 0 PID: 58 Comm: init Tainted: G B 6.6.18 #6 [ 5.054735] Hardware name: QEMU Ubuntu 26.04 PC (i440FX + PIIX, 1996), BIOS 1.17.0-debian-1.17.0-1ubuntu1 04/01/2014 [ 5.054807] Call Trace: [ 5.054855] [ 5.054899] dump_stack_lvl+0x36/0x50 [ 5.054976] bad_page+0xcf/0x240 [ 5.055042] ? __pfx_bad_page+0x10/0x10 [ 5.055081] ? __pfx_stack_trace_save+0x10/0x10 [ 5.055081] ? __stack_depot_save+0x32/0x520 [ 5.055081] __rmqueue_pcplist+0x3e1/0x13d0 [ 5.055081] ? kasan_save_stack+0x41/0x60 [ 5.055081] ? kasan_save_stack+0x30/0x60 [ 5.055081] ? tls_decrypt_sg+0x3a8/0x2d60 [ 5.055081] ? inet_recvmsg+0x355/0x4f0 [ 5.055081] ? sock_recvmsg+0x16d/0x220 [ 5.055081] ? __sys_recvfrom+0x18e/0x2a0 [ 5.055081] ? __x64_sys_recvfrom+0xdf/0x1f0 [ 5.055081] ? do_syscall_64+0x3f/0x90 [ 5.055081] ? entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 5.055081] ? __pfx___rmqueue_pcplist+0x10/0x10 [ 5.055081] ? __pfx__raw_spin_trylock+0x10/0x10 [ 5.055081] get_page_from_freelist+0x4cc/0x3010 [ 5.055081] ? __pfx_get_page_from_freelist+0x10/0x10 [ 5.055081] ? kmem_cache_alloc_node+0x13c/0x290 [ 5.055081] ? kasan_set_track+0x25/0x30 [ 5.055081] ? kmalloc_reserve+0x114/0x1e0 [ 5.055081] __alloc_pages+0x297/0x560 [ 5.055081] ? __build_skb_around+0x23a/0x340 [ 5.055081] ? __pfx___alloc_pages+0x10/0x10 [ 5.055081] ? __alloc_skb+0x104/0x270 [ 5.055081] alloc_skb_with_frags+0x130/0x5d0 [ 5.055081] tls_decrypt_sg+0x3a8/0x2d60 [ 5.055081] ? tls_strp_load_anchor_with_queue+0x226/0x3d0 [ 5.055081] ? __pfx_tls_strp_load_anchor_with_queue+0x10/0x10 [ 5.055081] ? __pfx_tls_decrypt_sg+0x10/0x10 [ 5.055081] ? tls_rx_rec_wait+0x68e/0x840 [ 5.055081] tls_rx_one_record+0xd6/0xca0 [ 5.055081] ? __pfx_tls_rx_one_record+0x10/0x10 [ 5.055081] ? mutex_unlock+0x81/0xd0 [ 5.055081] ? __pfx_mutex_unlock+0x10/0x10 [ 5.055081] tls_sw_recvmsg+0x721/0x17b0 [ 5.055081] ? __pfx_tls_sw_recvmsg+0x10/0x10 [ 5.055081] inet_recvmsg+0x355/0x4f0 [ 5.055081] ? __pfx_run_posix_cpu_timers+0x10/0x10 [ 5.055081] ? __pfx_inet_recvmsg+0x10/0x10 [ 5.055081] ? security_socket_recvmsg+0x6f/0xb0 [ 5.055081] sock_recvmsg+0x16d/0x220 [ 5.055081] ? sockfd_lookup_light+0x11/0x180 [ 5.055081] __sys_recvfrom+0x18e/0x2a0 [ 5.055081] ? __pfx___sys_recvfrom+0x10/0x10 [ 5.055081] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 5.055081] ? enqueue_hrtimer+0xf1/0x240 [ 5.055081] ? __asan_memset+0x27/0x50 [ 5.055081] ? __pfx_restore_fpregs_from_fpstate+0x10/0x10 [ 5.055081] __x64_sys_recvfrom+0xdf/0x1f0 [ 5.055081] ? exit_to_user_mode_prepare+0x110/0x120 [ 5.055081] ? syscall_exit_to_user_mode+0x2f/0x50 [ 5.055081] ? __pfx___x64_sys_recvfrom+0x10/0x10 [ 5.055081] do_syscall_64+0x3f/0x90 [ 5.055081] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 5.055081] RIP: 0033:0x45c8e6 [ 5.055081] Code: 47 ba 04 00 00 00 48 c7 c0 f0 ff ff ff 64 89 10 48 c7 c2 ff ff ff ff c9 48 89 d0 c3 0f 1f 84 00 00 00 00 00 48 8b 45 10 0f 05 <48> 89 c2 48 3d 00 f0 ff ff 77 0f c9 48 89 d0 c3 66 2e 0f 1f 84 00 [ 5.055081] RSP: 002b:00007fff623e6350 EFLAGS: 00000202 ORIG_RAX: 000000000000002d [ 5.055081] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 000000000045c8e6 [ 5.055081] RDX: 0000000000000064 RSI: 00007fff623e7420 RDI: 0000000000000005 [ 5.055081] RBP: 00007fff623e6360 R08: 0000000000000000 R09: 0000000000000000 [ 5.055081] R10: 0000000000000100 R11: 0000000000000202 R12: 00007fff623e8588 [ 5.055081] R13: 00007fff623e8598 R14: 0000000000000002 R15: 00000000004bd9e0 [ 5.055081] [ 5.059931] BUG: Bad page state in process init pfn:02f18 [ 5.060021] page:000000009143f3db refcount:-1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2f18 [ 5.060212] flags: 0x100000000000000(node=0|zone=1) [ 5.060272] page_type: 0xffffffff() [ 5.060328] raw: 0100000000000000 dead000000000100 dead000000000122 0000000000000000 [ 5.060396] raw: 0000000000000000 0000000000000000 ffffffffffffffff 0000000000000000 [ 5.060500] page dumped because: nonzero _refcount [ 5.060579] Modules linked in: [ 5.060659] CPU: 0 PID: 58 Comm: init Tainted: G B 6.6.18 #6 [ 5.060771] Hardware name: QEMU Ubuntu 26.04 PC (i440FX + PIIX, 1996), BIOS 1.17.0-debian-1.17.0-1ubuntu1 04/01/2014 [ 5.060857] Call Trace: [ 5.060907] [ 5.060970] dump_stack_lvl+0x36/0x50 [ 5.061062] bad_page+0xcf/0x240 [ 5.061081] ? __pfx_bad_page+0x10/0x10 [ 5.061081] ? __pfx_stack_trace_save+0x10/0x10 [ 5.061081] ? __stack_depot_save+0x32/0x520 [ 5.061081] __rmqueue_pcplist+0x3e1/0x13d0 [ 5.061081] ? kasan_save_stack+0x41/0x60 [ 5.061081] ? kasan_save_stack+0x30/0x60 [ 5.061081] ? tls_decrypt_sg+0x3a8/0x2d60 [ 5.061081] ? inet_recvmsg+0x355/0x4f0 [ 5.061081] ? sock_recvmsg+0x16d/0x220 [ 5.061081] ? __sys_recvfrom+0x18e/0x2a0 [ 5.061081] ? __x64_sys_recvfrom+0xdf/0x1f0 [ 5.061081] ? do_syscall_64+0x3f/0x90 [ 5.061081] ? entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 5.061081] ? __pfx___rmqueue_pcplist+0x10/0x10 [ 5.061081] ? __pfx__raw_spin_trylock+0x10/0x10 [ 5.061081] get_page_from_freelist+0x4cc/0x3010 [ 5.061081] ? __pfx_get_page_from_freelist+0x10/0x10 [ 5.061081] ? kmem_cache_alloc_node+0x13c/0x290 [ 5.061081] ? kasan_set_track+0x25/0x30 [ 5.061081] ? kmalloc_reserve+0x114/0x1e0 [ 5.061081] __alloc_pages+0x297/0x560 [ 5.061081] ? __build_skb_around+0x23a/0x340 [ 5.061081] ? __pfx___alloc_pages+0x10/0x10 [ 5.061081] ? __alloc_skb+0x104/0x270 [ 5.061081] alloc_skb_with_frags+0x130/0x5d0 [ 5.061081] tls_decrypt_sg+0x3a8/0x2d60 [ 5.061081] ? tls_strp_load_anchor_with_queue+0x226/0x3d0 [ 5.061081] ? __pfx_tls_strp_load_anchor_with_queue+0x10/0x10 [ 5.061081] ? __pfx_tls_decrypt_sg+0x10/0x10 [ 5.061081] ? tls_rx_rec_wait+0x68e/0x840 [ 5.061081] tls_rx_one_record+0xd6/0xca0 [ 5.061081] ? __pfx_tls_rx_one_record+0x10/0x10 [ 5.061081] ? mutex_unlock+0x81/0xd0 [ 5.061081] ? __pfx_mutex_unlock+0x10/0x10 [ 5.061081] tls_sw_recvmsg+0x721/0x17b0 [ 5.061081] ? __pfx_tls_sw_recvmsg+0x10/0x10 [ 5.061081] inet_recvmsg+0x355/0x4f0 [ 5.061081] ? __pfx_run_posix_cpu_timers+0x10/0x10 [ 5.061081] ? __pfx_inet_recvmsg+0x10/0x10 [ 5.061081] ? security_socket_recvmsg+0x6f/0xb0 [ 5.061081] sock_recvmsg+0x16d/0x220 [ 5.061081] ? sockfd_lookup_light+0x11/0x180 [ 5.061081] __sys_recvfrom+0x18e/0x2a0 [ 5.061081] ? __pfx___sys_recvfrom+0x10/0x10 [ 5.061081] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 5.061081] ? enqueue_hrtimer+0xf1/0x240 [ 5.061081] ? __asan_memset+0x27/0x50 [ 5.061081] ? __pfx_restore_fpregs_from_fpstate+0x10/0x10 [ 5.061081] __x64_sys_recvfrom+0xdf/0x1f0 [ 5.061081] ? exit_to_user_mode_prepare+0x110/0x120 [ 5.061081] ? syscall_exit_to_user_mode+0x2f/0x50 [ 5.061081] ? __pfx___x64_sys_recvfrom+0x10/0x10 [ 5.061081] do_syscall_64+0x3f/0x90 [ 5.061081] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 5.061081] RIP: 0033:0x45c8e6 [ 5.061081] Code: 47 ba 04 00 00 00 48 c7 c0 f0 ff ff ff 64 89 10 48 c7 c2 ff ff ff ff c9 48 89 d0 c3 0f 1f 84 00 00 00 00 00 48 8b 45 10 0f 05 <48> 89 c2 48 3d 00 f0 ff ff 77 0f c9 48 89 d0 c3 66 2e 0f 1f 84 00 [ 5.061081] RSP: 002b:00007fff623e6350 EFLAGS: 00000202 ORIG_RAX: 000000000000002d [ 5.061081] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 000000000045c8e6 [ 5.061081] RDX: 0000000000000064 RSI: 00007fff623e7420 RDI: 0000000000000005 [ 5.061081] RBP: 00007fff623e6360 R08: 0000000000000000 R09: 0000000000000000 [ 5.061081] R10: 0000000000000100 R11: 0000000000000202 R12: 00007fff623e8588 [ 5.061081] R13: 00007fff623e8598 R14: 0000000000000002 R15: 00000000004bd9e0 [ 5.061081] [ 5.066182] BUG: Bad page state in process init pfn:02f1a [ 5.066258] page:00000000218f89a4 refcount:-1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2f1a [ 5.066334] flags: 0x100000000000000(node=0|zone=1) [ 5.066391] page_type: 0xffffffff() [ 5.066448] raw: 0100000000000000 dead000000000100 dead000000000122 0000000000000000 [ 5.066539] raw: 0000000000000000 0000000000000000 ffffffffffffffff 0000000000000000 [ 5.066600] page dumped because: nonzero _refcount [ 5.066654] Modules linked in: [ 5.066710] CPU: 0 PID: 58 Comm: init Tainted: G B 6.6.18 #6 [ 5.066778] Hardware name: QEMU Ubuntu 26.04 PC (i440FX + PIIX, 1996), BIOS 1.17.0-debian-1.17.0-1ubuntu1 04/01/2014 [ 5.066851] Call Trace: [ 5.066899] [ 5.066943] dump_stack_lvl+0x36/0x50 [ 5.067030] bad_page+0xcf/0x240 [ 5.067067] ? __pfx_bad_page+0x10/0x10 [ 5.067067] ? __pfx_stack_trace_save+0x10/0x10 [ 5.067067] ? __stack_depot_save+0x32/0x520 [ 5.067067] __rmqueue_pcplist+0x3e1/0x13d0 [ 5.067067] ? kasan_save_stack+0x41/0x60 [ 5.067067] ? kasan_save_stack+0x30/0x60 [ 5.067067] ? tls_decrypt_sg+0x3a8/0x2d60 [ 5.067067] ? inet_recvmsg+0x355/0x4f0 [ 5.067067] ? sock_recvmsg+0x16d/0x220 [ 5.067067] ? __sys_recvfrom+0x18e/0x2a0 [ 5.067067] ? __x64_sys_recvfrom+0xdf/0x1f0 [ 5.067067] ? do_syscall_64+0x3f/0x90 [ 5.067067] ? entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 5.067067] ? __pfx___rmqueue_pcplist+0x10/0x10 [ 5.067067] ? __pfx__raw_spin_trylock+0x10/0x10 [ 5.067067] get_page_from_freelist+0x4cc/0x3010 [ 5.067067] ? __pfx_get_page_from_freelist+0x10/0x10 [ 5.067067] ? kmem_cache_alloc_node+0x13c/0x290 [ 5.067067] ? kasan_set_track+0x25/0x30 [ 5.067067] ? kmalloc_reserve+0x114/0x1e0 [ 5.067067] __alloc_pages+0x297/0x560 [ 5.067067] ? __build_skb_around+0x23a/0x340 [ 5.067067] ? __pfx___alloc_pages+0x10/0x10 [ 5.067067] ? __alloc_skb+0x104/0x270 [ 5.067067] alloc_skb_with_frags+0x130/0x5d0 [ 5.067067] tls_decrypt_sg+0x3a8/0x2d60 [ 5.067067] ? tls_strp_load_anchor_with_queue+0x226/0x3d0 [ 5.067067] ? __pfx_tls_strp_load_anchor_with_queue+0x10/0x10 [ 5.067067] ? __pfx_tls_decrypt_sg+0x10/0x10 [ 5.067067] ? tls_rx_rec_wait+0x68e/0x840 [ 5.067067] tls_rx_one_record+0xd6/0xca0 [ 5.067067] ? __pfx_tls_rx_one_record+0x10/0x10 [ 5.067067] ? mutex_unlock+0x81/0xd0 [ 5.067067] ? __pfx_mutex_unlock+0x10/0x10 [ 5.067067] tls_sw_recvmsg+0x721/0x17b0 [ 5.067067] ? __pfx_tls_sw_recvmsg+0x10/0x10 [ 5.067067] inet_recvmsg+0x355/0x4f0 [ 5.067067] ? __pfx_run_posix_cpu_timers+0x10/0x10 [ 5.067067] ? __pfx_inet_recvmsg+0x10/0x10 [ 5.067067] ? security_socket_recvmsg+0x6f/0xb0 [ 5.067067] sock_recvmsg+0x16d/0x220 [ 5.067067] ? sockfd_lookup_light+0x11/0x180 [ 5.067067] __sys_recvfrom+0x18e/0x2a0 [ 5.067067] ? __pfx___sys_recvfrom+0x10/0x10 [ 5.067067] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 5.067067] ? enqueue_hrtimer+0xf1/0x240 [ 5.067067] ? __asan_memset+0x27/0x50 [ 5.067067] ? __pfx_restore_fpregs_from_fpstate+0x10/0x10 [ 5.067067] __x64_sys_recvfrom+0xdf/0x1f0 [ 5.067067] ? exit_to_user_mode_prepare+0x110/0x120 [ 5.067067] ? syscall_exit_to_user_mode+0x2f/0x50 [ 5.067067] ? __pfx___x64_sys_recvfrom+0x10/0x10 [ 5.067067] do_syscall_64+0x3f/0x90 [ 5.067067] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 5.067067] RIP: 0033:0x45c8e6 [ 5.067067] Code: 47 ba 04 00 00 00 48 c7 c0 f0 ff ff ff 64 89 10 48 c7 c2 ff ff ff ff c9 48 89 d0 c3 0f 1f 84 00 00 00 00 00 48 8b 45 10 0f 05 <48> 89 c2 48 3d 00 f0 ff ff 77 0f c9 48 89 d0 c3 66 2e 0f 1f 84 00 [ 5.067067] RSP: 002b:00007fff623e6350 EFLAGS: 00000202 ORIG_RAX: 000000000000002d [ 5.067067] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 000000000045c8e6 [ 5.067067] RDX: 0000000000000064 RSI: 00007fff623e7420 RDI: 0000000000000005 [ 5.067067] RBP: 00007fff623e6360 R08: 0000000000000000 R09: 0000000000000000 [ 5.067067] R10: 0000000000000100 R11: 0000000000000202 R12: 00007fff623e8588 [ 5.067067] R13: 00007fff623e8598 R14: 0000000000000002 R15: 00000000004bd9e0 [ 5.067067] [ 5.072186] BUG: Bad page state in process init pfn:02f1c [ 5.072261] page:00000000010531c8 refcount:-1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2f1c [ 5.072337] flags: 0x100000000000000(node=0|zone=1) [ 5.072395] page_type: 0xffffffff() [ 5.072450] raw: 0100000000000000 dead000000000100 dead000000000122 0000000000000000 [ 5.072537] raw: 0000000000000000 0000000000000000 ffffffffffffffff 0000000000000000 [ 5.072599] page dumped because: nonzero _refcount [ 5.072651] Modules linked in: [ 5.072707] CPU: 0 PID: 58 Comm: init Tainted: G B 6.6.18 #6 [ 5.072773] Hardware name: QEMU Ubuntu 26.04 PC (i440FX + PIIX, 1996), BIOS 1.17.0-debian-1.17.0-1ubuntu1 04/01/2014 [ 5.072845] Call Trace: [ 5.072893] [ 5.072937] dump_stack_lvl+0x36/0x50 [ 5.073025] bad_page+0xcf/0x240 [ 5.073067] ? __pfx_bad_page+0x10/0x10 [ 5.073067] ? __pfx_stack_trace_save+0x10/0x10 [ 5.073067] ? __stack_depot_save+0x32/0x520 [ 5.073067] __rmqueue_pcplist+0x3e1/0x13d0 [ 5.073067] ? kasan_save_stack+0x41/0x60 [ 5.073067] ? kasan_save_stack+0x30/0x60 [ 5.073067] ? tls_decrypt_sg+0x3a8/0x2d60 [ 5.073067] ? inet_recvmsg+0x355/0x4f0 [ 5.073067] ? sock_recvmsg+0x16d/0x220 [ 5.073067] ? __sys_recvfrom+0x18e/0x2a0 [ 5.073067] ? __x64_sys_recvfrom+0xdf/0x1f0 [ 5.073067] ? do_syscall_64+0x3f/0x90 [ 5.073067] ? entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 5.073067] ? __pfx___rmqueue_pcplist+0x10/0x10 [ 5.073067] ? __pfx__raw_spin_trylock+0x10/0x10 [ 5.073067] get_page_from_freelist+0x4cc/0x3010 [ 5.073067] ? __pfx_get_page_from_freelist+0x10/0x10 [ 5.073067] ? kmem_cache_alloc_node+0x13c/0x290 [ 5.073067] ? kasan_set_track+0x25/0x30 [ 5.073067] ? kmalloc_reserve+0x114/0x1e0 [ 5.073067] __alloc_pages+0x297/0x560 [ 5.073067] ? __build_skb_around+0x23a/0x340 [ 5.073067] ? __pfx___alloc_pages+0x10/0x10 [ 5.073067] ? __alloc_skb+0x104/0x270 [ 5.073067] alloc_skb_with_frags+0x130/0x5d0 [ 5.073067] tls_decrypt_sg+0x3a8/0x2d60 [ 5.073067] ? tls_strp_load_anchor_with_queue+0x226/0x3d0 [ 5.073067] ? __pfx_tls_strp_load_anchor_with_queue+0x10/0x10 [ 5.073067] ? __pfx_tls_decrypt_sg+0x10/0x10 [ 5.073067] ? tls_rx_rec_wait+0x68e/0x840 [ 5.073067] tls_rx_one_record+0xd6/0xca0 [ 5.073067] ? __pfx_tls_rx_one_record+0x10/0x10 [ 5.073067] ? mutex_unlock+0x81/0xd0 [ 5.073067] ? __pfx_mutex_unlock+0x10/0x10 [ 5.073067] tls_sw_recvmsg+0x721/0x17b0 [ 5.073067] ? __pfx_tls_sw_recvmsg+0x10/0x10 [ 5.073067] inet_recvmsg+0x355/0x4f0 [ 5.073067] ? __pfx_run_posix_cpu_timers+0x10/0x10 [ 5.073067] ? __pfx_inet_recvmsg+0x10/0x10 [ 5.073067] ? security_socket_recvmsg+0x6f/0xb0 [ 5.073067] sock_recvmsg+0x16d/0x220 [ 5.073067] ? sockfd_lookup_light+0x11/0x180 [ 5.073067] __sys_recvfrom+0x18e/0x2a0 [ 5.073067] ? __pfx___sys_recvfrom+0x10/0x10 [ 5.073067] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 5.073067] ? enqueue_hrtimer+0xf1/0x240 [ 5.073067] ? __asan_memset+0x27/0x50 [ 5.073067] ? __pfx_restore_fpregs_from_fpstate+0x10/0x10 [ 5.073067] __x64_sys_recvfrom+0xdf/0x1f0 [ 5.073067] ? exit_to_user_mode_prepare+0x110/0x120 [ 5.073067] ? syscall_exit_to_user_mode+0x2f/0x50 [ 5.073067] ? __pfx___x64_sys_recvfrom+0x10/0x10 [ 5.073067] do_syscall_64+0x3f/0x90 [ 5.073067] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 5.073067] RIP: 0033:0x45c8e6 [ 5.073067] Code: 47 ba 04 00 00 00 48 c7 c0 f0 ff ff ff 64 89 10 48 c7 c2 ff ff ff ff c9 48 89 d0 c3 0f 1f 84 00 00 00 00 00 48 8b 45 10 0f 05 <48> 89 c2 48 3d 00 f0 ff ff 77 0f c9 48 89 d0 c3 66 2e 0f 1f 84 00 [ 5.073067] RSP: 002b:00007fff623e6350 EFLAGS: 00000202 ORIG_RAX: 000000000000002d [ 5.073067] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 000000000045c8e6 [ 5.073067] RDX: 0000000000000064 RSI: 00007fff623e7420 RDI: 0000000000000005 [ 5.073067] RBP: 00007fff623e6360 R08: 0000000000000000 R09: 0000000000000000 [ 5.073067] R10: 0000000000000100 R11: 0000000000000202 R12: 00007fff623e8588 [ 5.073067] R13: 00007fff623e8598 R14: 0000000000000002 R15: 00000000004bd9e0 [ 5.073067] [ 5.078292] BUG: Bad page state in process init pfn:02f1e [ 5.078368] page:000000008b3c2eed refcount:-1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2f1e [ 5.078445] flags: 0x100000000000000(node=0|zone=1) [ 5.078534] page_type: 0xffffffff() [ 5.078591] raw: 0100000000000000 dead000000000100 dead000000000122 0000000000000000 [ 5.078657] raw: 0000000000000000 0000000000000000 ffffffffffffffff 0000000000000000 [ 5.078718] page dumped because: nonzero _refcount [ 5.078771] Modules linked in: [ 5.078827] CPU: 0 PID: 58 Comm: init Tainted: G B 6.6.18 #6 [ 5.078892] Hardware name: QEMU Ubuntu 26.04 PC (i440FX + PIIX, 1996), BIOS 1.17.0-debian-1.17.0-1ubuntu1 04/01/2014 [ 5.078977] Call Trace: [ 5.079029] [ 5.079066] dump_stack_lvl+0x36/0x50 [ 5.079066] bad_page+0xcf/0x240 [ 5.079066] ? __pfx_bad_page+0x10/0x10 [ 5.079066] ? __pfx_stack_trace_save+0x10/0x10 [ 5.079066] ? __stack_depot_save+0x32/0x520 [ 5.079066] __rmqueue_pcplist+0x3e1/0x13d0 [ 5.079066] ? kasan_save_stack+0x41/0x60 [ 5.079066] ? kasan_save_stack+0x30/0x60 [ 5.079066] ? tls_decrypt_sg+0x3a8/0x2d60 [ 5.079066] ? inet_recvmsg+0x355/0x4f0 [ 5.079066] ? sock_recvmsg+0x16d/0x220 [ 5.079066] ? __sys_recvfrom+0x18e/0x2a0 [ 5.079066] ? __x64_sys_recvfrom+0xdf/0x1f0 [ 5.079066] ? do_syscall_64+0x3f/0x90 [ 5.079066] ? entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 5.079066] ? __pfx___rmqueue_pcplist+0x10/0x10 [ 5.079066] ? __pfx__raw_spin_trylock+0x10/0x10 [ 5.079066] get_page_from_freelist+0x4cc/0x3010 [ 5.079066] ? __pfx_get_page_from_freelist+0x10/0x10 [ 5.079066] ? kmem_cache_alloc_node+0x13c/0x290 [ 5.079066] ? kasan_set_track+0x25/0x30 [ 5.079066] ? kmalloc_reserve+0x114/0x1e0 [ 5.079066] __alloc_pages+0x297/0x560 [ 5.079066] ? __build_skb_around+0x23a/0x340 [ 5.079066] ? __pfx___alloc_pages+0x10/0x10 [ 5.079066] ? __alloc_skb+0x104/0x270 [ 5.079066] alloc_skb_with_frags+0x130/0x5d0 [ 5.079066] tls_decrypt_sg+0x3a8/0x2d60 [ 5.079066] ? tls_strp_load_anchor_with_queue+0x226/0x3d0 [ 5.079066] ? __pfx_tls_strp_load_anchor_with_queue+0x10/0x10 [ 5.079066] ? __pfx_tls_decrypt_sg+0x10/0x10 [ 5.079066] ? tls_rx_rec_wait+0x68e/0x840 [ 5.079066] tls_rx_one_record+0xd6/0xca0 [ 5.079066] ? __pfx_tls_rx_one_record+0x10/0x10 [ 5.079066] ? mutex_unlock+0x81/0xd0 [ 5.079066] ? __pfx_mutex_unlock+0x10/0x10 [ 5.079066] tls_sw_recvmsg+0x721/0x17b0 [ 5.079066] ? __pfx_tls_sw_recvmsg+0x10/0x10 [ 5.079066] inet_recvmsg+0x355/0x4f0 [ 5.079066] ? __pfx_run_posix_cpu_timers+0x10/0x10 [ 5.079066] ? __pfx_inet_recvmsg+0x10/0x10 [ 5.079066] ? security_socket_recvmsg+0x6f/0xb0 [ 5.079066] sock_recvmsg+0x16d/0x220 [ 5.079066] ? sockfd_lookup_light+0x11/0x180 [ 5.079066] __sys_recvfrom+0x18e/0x2a0 [ 5.079066] ? __pfx___sys_recvfrom+0x10/0x10 [ 5.079066] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 5.079066] ? enqueue_hrtimer+0xf1/0x240 [ 5.079066] ? __asan_memset+0x27/0x50 [ 5.079066] ? __pfx_restore_fpregs_from_fpstate+0x10/0x10 [ 5.079066] __x64_sys_recvfrom+0xdf/0x1f0 [ 5.079066] ? exit_to_user_mode_prepare+0x110/0x120 [ 5.079066] ? syscall_exit_to_user_mode+0x2f/0x50 [ 5.079066] ? __pfx___x64_sys_recvfrom+0x10/0x10 [ 5.079066] do_syscall_64+0x3f/0x90 [ 5.079066] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 5.079066] RIP: 0033:0x45c8e6 [ 5.079066] Code: 47 ba 04 00 00 00 48 c7 c0 f0 ff ff ff 64 89 10 48 c7 c2 ff ff ff ff c9 48 89 d0 c3 0f 1f 84 00 00 00 00 00 48 8b 45 10 0f 05 <48> 89 c2 48 3d 00 f0 ff ff 77 0f c9 48 89 d0 c3 66 2e 0f 1f 84 00 [ 5.079066] RSP: 002b:00007fff623e6350 EFLAGS: 00000202 ORIG_RAX: 000000000000002d [ 5.079066] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 000000000045c8e6 [ 5.079066] RDX: 0000000000000064 RSI: 00007fff623e7420 RDI: 0000000000000005 [ 5.079066] RBP: 00007fff623e6360 R08: 0000000000000000 R09: 0000000000000000 [ 5.079066] R10: 0000000000000100 R11: 0000000000000202 R12: 00007fff623e8588 [ 5.079066] R13: 00007fff623e8598 R14: 0000000000000002 R15: 00000000004bd9e0 [ 5.079066] [ 5.084978] BUG: Bad page state in process init pfn:02f20 [ 5.085118] page:00000000030c6608 refcount:-1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2f20 [ 5.085215] flags: 0x100000000000000(node=0|zone=1) [ 5.085274] page_type: 0xffffffff() [ 5.085330] raw: 0100000000000000 dead000000000100 dead000000000122 0000000000000000 [ 5.085397] raw: 0000000000000000 0000000000000000 ffffffffffffffff 0000000000000000 [ 5.085459] page dumped because: nonzero _refcount [ 5.085541] Modules linked in: [ 5.085601] CPU: 0 PID: 58 Comm: init Tainted: G B 6.6.18 #6 [ 5.085666] Hardware name: QEMU Ubuntu 26.04 PC (i440FX + PIIX, 1996), BIOS 1.17.0-debian-1.17.0-1ubuntu1 04/01/2014 [ 5.085738] Call Trace: [ 5.085785] [ 5.085829] dump_stack_lvl+0x36/0x50 [ 5.085891] bad_page+0xcf/0x240 [ 5.085962] ? __pfx_bad_page+0x10/0x10 [ 5.086031] ? __pfx_stack_trace_save+0x10/0x10 [ 5.086081] ? __stack_depot_save+0x32/0x520 [ 5.086081] __rmqueue_pcplist+0x3e1/0x13d0 [ 5.086081] ? kasan_save_stack+0x41/0x60 [ 5.086081] ? kasan_save_stack+0x30/0x60 [ 5.086081] ? tls_decrypt_sg+0x3a8/0x2d60 [ 5.086081] ? inet_recvmsg+0x355/0x4f0 [ 5.086081] ? sock_recvmsg+0x16d/0x220 [ 5.086081] ? __sys_recvfrom+0x18e/0x2a0 [ 5.086081] ? __x64_sys_recvfrom+0xdf/0x1f0 [ 5.086081] ? do_syscall_64+0x3f/0x90 [ 5.086081] ? entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 5.086081] ? __pfx___rmqueue_pcplist+0x10/0x10 [ 5.086081] ? __pfx__raw_spin_trylock+0x10/0x10 [ 5.086081] get_page_from_freelist+0x4cc/0x3010 [ 5.086081] ? __pfx_get_page_from_freelist+0x10/0x10 [ 5.086081] ? kmem_cache_alloc_node+0x13c/0x290 [ 5.086081] ? kasan_set_track+0x25/0x30 [ 5.086081] ? kmalloc_reserve+0x114/0x1e0 [ 5.086081] __alloc_pages+0x297/0x560 [ 5.086081] ? __build_skb_around+0x23a/0x340 [ 5.086081] ? __pfx___alloc_pages+0x10/0x10 [ 5.086081] ? __alloc_skb+0x104/0x270 [ 5.086081] alloc_skb_with_frags+0x130/0x5d0 [ 5.086081] tls_decrypt_sg+0x3a8/0x2d60 [ 5.086081] ? tls_strp_load_anchor_with_queue+0x226/0x3d0 [ 5.086081] ? __pfx_tls_strp_load_anchor_with_queue+0x10/0x10 [ 5.086081] ? __pfx_tls_decrypt_sg+0x10/0x10 [ 5.086081] ? tls_rx_rec_wait+0x68e/0x840 [ 5.086081] tls_rx_one_record+0xd6/0xca0 [ 5.086081] ? __pfx_tls_rx_one_record+0x10/0x10 [ 5.086081] ? mutex_unlock+0x81/0xd0 [ 5.086081] ? __pfx_mutex_unlock+0x10/0x10 [ 5.086081] tls_sw_recvmsg+0x721/0x17b0 [ 5.086081] ? __pfx_tls_sw_recvmsg+0x10/0x10 [ 5.086081] inet_recvmsg+0x355/0x4f0 [ 5.086081] ? __pfx_run_posix_cpu_timers+0x10/0x10 [ 5.086081] ? __pfx_inet_recvmsg+0x10/0x10 [ 5.086081] ? security_socket_recvmsg+0x6f/0xb0 [ 5.086081] sock_recvmsg+0x16d/0x220 [ 5.086081] ? sockfd_lookup_light+0x11/0x180 [ 5.086081] __sys_recvfrom+0x18e/0x2a0 [ 5.086081] ? __pfx___sys_recvfrom+0x10/0x10 [ 5.086081] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 5.086081] ? enqueue_hrtimer+0xf1/0x240 [ 5.086081] ? __asan_memset+0x27/0x50 [ 5.086081] ? __pfx_restore_fpregs_from_fpstate+0x10/0x10 [ 5.086081] __x64_sys_recvfrom+0xdf/0x1f0 [ 5.086081] ? exit_to_user_mode_prepare+0x110/0x120 [ 5.086081] ? syscall_exit_to_user_mode+0x2f/0x50 [ 5.086081] ? __pfx___x64_sys_recvfrom+0x10/0x10 [ 5.086081] do_syscall_64+0x3f/0x90 [ 5.086081] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 5.086081] RIP: 0033:0x45c8e6 [ 5.086081] Code: 47 ba 04 00 00 00 48 c7 c0 f0 ff ff ff 64 89 10 48 c7 c2 ff ff ff ff c9 48 89 d0 c3 0f 1f 84 00 00 00 00 00 48 8b 45 10 0f 05 <48> 89 c2 48 3d 00 f0 ff ff 77 0f c9 48 89 d0 c3 66 2e 0f 1f 84 00 [ 5.086081] RSP: 002b:00007fff623e6350 EFLAGS: 00000202 ORIG_RAX: 000000000000002d [ 5.086081] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 000000000045c8e6 [ 5.086081] RDX: 0000000000000064 RSI: 00007fff623e7420 RDI: 0000000000000005 [ 5.086081] RBP: 00007fff623e6360 R08: 0000000000000000 R09: 0000000000000000 [ 5.086081] R10: 0000000000000100 R11: 0000000000000202 R12: 00007fff623e8588 [ 5.086081] R13: 00007fff623e8598 R14: 0000000000000002 R15: 00000000004bd9e0 [ 5.086081] [ 5.090929] BUG: Bad page state in process init pfn:02f22 [ 5.091015] page:000000004c4ba8af refcount:-1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2f22 [ 5.091177] flags: 0x100000000000000(node=0|zone=1) [ 5.091237] page_type: 0xffffffff() [ 5.091291] raw: 0100000000000000 dead000000000100 dead000000000122 0000000000000000 [ 5.091358] raw: 0000000000000000 0000000000000000 ffffffffffffffff 0000000000000000 [ 5.091418] page dumped because: nonzero _refcount [ 5.091470] Modules linked in: [ 5.091527] CPU: 0 PID: 58 Comm: init Tainted: G B 6.6.18 #6 [ 5.091594] Hardware name: QEMU Ubuntu 26.04 PC (i440FX + PIIX, 1996), BIOS 1.17.0-debian-1.17.0-1ubuntu1 04/01/2014 [ 5.091665] Call Trace: [ 5.091713] [ 5.091758] dump_stack_lvl+0x36/0x50 [ 5.091819] bad_page+0xcf/0x240 [ 5.091879] ? __pfx_bad_page+0x10/0x10 [ 5.091935] ? __pfx_stack_trace_save+0x10/0x10 [ 5.092022] ? __stack_depot_save+0x32/0x520 [ 5.092064] __rmqueue_pcplist+0x3e1/0x13d0 [ 5.092064] ? kasan_save_stack+0x41/0x60 [ 5.092064] ? kasan_save_stack+0x30/0x60 [ 5.092064] ? tls_decrypt_sg+0x3a8/0x2d60 [ 5.092064] ? inet_recvmsg+0x355/0x4f0 [ 5.092064] ? sock_recvmsg+0x16d/0x220 [ 5.092064] ? __sys_recvfrom+0x18e/0x2a0 [ 5.092064] ? __x64_sys_recvfrom+0xdf/0x1f0 [ 5.092064] ? do_syscall_64+0x3f/0x90 [ 5.092064] ? entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 5.092064] ? __pfx___rmqueue_pcplist+0x10/0x10 [ 5.092064] ? __pfx__raw_spin_trylock+0x10/0x10 [ 5.092064] get_page_from_freelist+0x4cc/0x3010 [ 5.092064] ? __pfx_get_page_from_freelist+0x10/0x10 [ 5.092064] ? kmem_cache_alloc_node+0x13c/0x290 [ 5.092064] ? kasan_set_track+0x25/0x30 [ 5.092064] ? kmalloc_reserve+0x114/0x1e0 [ 5.092064] __alloc_pages+0x297/0x560 [ 5.092064] ? __build_skb_around+0x23a/0x340 [ 5.092064] ? __pfx___alloc_pages+0x10/0x10 [ 5.092064] ? __alloc_skb+0x104/0x270 [ 5.092064] alloc_skb_with_frags+0x130/0x5d0 [ 5.092064] tls_decrypt_sg+0x3a8/0x2d60 [ 5.092064] ? tls_strp_load_anchor_with_queue+0x226/0x3d0 [ 5.092064] ? __pfx_tls_strp_load_anchor_with_queue+0x10/0x10 [ 5.092064] ? __pfx_tls_decrypt_sg+0x10/0x10 [ 5.092064] ? tls_rx_rec_wait+0x68e/0x840 [ 5.092064] tls_rx_one_record+0xd6/0xca0 [ 5.092064] ? __pfx_tls_rx_one_record+0x10/0x10 [ 5.092064] ? mutex_unlock+0x81/0xd0 [ 5.092064] ? __pfx_mutex_unlock+0x10/0x10 [ 5.092064] tls_sw_recvmsg+0x721/0x17b0 [ 5.092064] ? __pfx_tls_sw_recvmsg+0x10/0x10 [ 5.092064] inet_recvmsg+0x355/0x4f0 [ 5.092064] ? __pfx_run_posix_cpu_timers+0x10/0x10 [ 5.092064] ? __pfx_inet_recvmsg+0x10/0x10 [ 5.092064] ? security_socket_recvmsg+0x6f/0xb0 [ 5.092064] sock_recvmsg+0x16d/0x220 [ 5.092064] ? sockfd_lookup_light+0x11/0x180 [ 5.092064] __sys_recvfrom+0x18e/0x2a0 [ 5.092064] ? __pfx___sys_recvfrom+0x10/0x10 [ 5.092064] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 5.092064] ? enqueue_hrtimer+0xf1/0x240 [ 5.092064] ? __asan_memset+0x27/0x50 [ 5.092064] ? __pfx_restore_fpregs_from_fpstate+0x10/0x10 [ 5.092064] __x64_sys_recvfrom+0xdf/0x1f0 [ 5.092064] ? exit_to_user_mode_prepare+0x110/0x120 [ 5.092064] ? syscall_exit_to_user_mode+0x2f/0x50 [ 5.092064] ? __pfx___x64_sys_recvfrom+0x10/0x10 [ 5.092064] do_syscall_64+0x3f/0x90 [ 5.092064] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 5.092064] RIP: 0033:0x45c8e6 [ 5.092064] Code: 47 ba 04 00 00 00 48 c7 c0 f0 ff ff ff 64 89 10 48 c7 c2 ff ff ff ff c9 48 89 d0 c3 0f 1f 84 00 00 00 00 00 48 8b 45 10 0f 05 <48> 89 c2 48 3d 00 f0 ff ff 77 0f c9 48 89 d0 c3 66 2e 0f 1f 84 00 [ 5.092064] RSP: 002b:00007fff623e6350 EFLAGS: 00000202 ORIG_RAX: 000000000000002d [ 5.092064] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 000000000045c8e6 [ 5.092064] RDX: 0000000000000064 RSI: 00007fff623e7420 RDI: 0000000000000005 [ 5.092064] RBP: 00007fff623e6360 R08: 0000000000000000 R09: 0000000000000000 [ 5.092064] R10: 0000000000000100 R11: 0000000000000202 R12: 00007fff623e8588 [ 5.092064] R13: 00007fff623e8598 R14: 0000000000000002 R15: 00000000004bd9e0 [ 5.092064] [kTLS] Completed 20 iterations [kTLS] Test complete. If KASAN is enabled, check dmesg for UAF report. [ 5.107538] init (58) used greatest stack depth: 23856 bytes left === Checking dmesg for KASAN reports === [ 5.111909] BUG: Bad page state in process init pfn:01860 [ 5.112021] page:00000000217541ed refcount:-1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1860 [ 5.112203] flags: 0x100000000000000(node=0|zone=1) [ 5.112271] page_type: 0xffffffff() [ 5.112339] raw: 0100000000000000 dead000000000100 dead000000000122 0000000000000000 [ 5.112406] raw: 0000000000000000 0000000000000000 ffffffffffffffff 0000000000000000 [ 5.112467] page dumped because: nonzero _refcount [ 5.112520] Modules linked in: [ 5.112598] CPU: 1 PID: 1 Comm: init Tainted: G B 6.6.18 #6 [ 5.112666] Hardware name: QEMU Ubuntu 26.04 PC (i440FX + PIIX, 1996), BIOS 1.17.0-debian-1.17.0-1ubuntu1 04/01/2014 [ 5.112742] Call Trace: [ 5.112793] [ 5.112839] dump_stack_lvl+0x36/0x50 [ 5.112920] bad_page+0xcf/0x240 [ 5.113001] ? __pfx_bad_page+0x10/0x10 [ 5.113104] __rmqueue_pcplist+0x3e1/0x13d0 [ 5.113104] ? kernel_text_address+0xca/0x140 [ 5.113104] ? unwind_next_frame+0xcf0/0x2380 [ 5.113104] ? arch_stack_walk+0x75/0x110 [ 5.113104] ? __pfx___rmqueue_pcplist+0x10/0x10 [ 5.113104] ? __pfx__raw_spin_trylock+0x10/0x10 [ 5.113104] ? unwind_next_frame+0x139d/0x2380 [ 5.113104] ? is_module_text_address+0x18/0x170 [ 5.113104] get_page_from_freelist+0x4cc/0x3010 [ 5.113104] ? unwind_next_frame+0x139d/0x2380 [ 5.113104] ? __is_insn_slot_addr+0x87/0x100 [ 5.113104] ? is_module_text_address+0x18/0x170 [ 5.113104] ? __pfx_get_page_from_freelist+0x10/0x10 [ 5.113104] ? kernel_text_address+0xca/0x140 [ 5.113104] ? __kernel_text_address+0xd/0x30 [ 5.113104] ? unwind_get_return_address+0x66/0xd0 [ 5.113104] __alloc_pages+0x297/0x560 [ 5.113104] ? __pfx___alloc_pages+0x10/0x10 [ 5.113104] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 5.113104] ? __stack_depot_save+0x299/0x520 [ 5.113104] allocate_slab+0x228/0x2d0 [ 5.113104] ? kasan_save_stack+0x41/0x60 [ 5.113104] ___slab_alloc+0x382/0x880 [ 5.113104] ? mas_alloc_nodes+0xf2/0x650 [ 5.113104] ? entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 5.113104] kmem_cache_alloc+0x22c/0x250 [ 5.113104] ? mas_alloc_nodes+0xf2/0x650 [ 5.113104] mas_alloc_nodes+0xf2/0x650 [ 5.113104] mas_preallocate+0x41d/0xbb0 [ 5.113104] ? __pfx_mas_preallocate+0x10/0x10 [ 5.113104] ? kmem_cache_alloc+0x108/0x250 [ 5.113104] ? vm_area_alloc+0xda/0x1b0 [ 5.113104] ? __init_rwsem+0xf5/0x170 [ 5.113104] mmap_region+0xa72/0x1b70 [ 5.113104] ? __pfx_mmap_region+0x10/0x10 [ 5.113104] ? __pfx_selinux_mmap_addr+0x10/0x10 [ 5.113104] ? security_mmap_addr+0x55/0x80 [ 5.113104] ? get_unmapped_area+0x1a4/0x360 [ 5.113104] do_mmap+0x616/0xf60 [ 5.113104] ? __pfx_do_mmap+0x10/0x10 [ 5.113104] ? down_write_killable+0xb0/0x160 [ 5.113104] ? __pfx_down_write_killable+0x10/0x10 [ 5.113104] vm_mmap_pgoff+0x174/0x270 [ 5.113104] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 5.113104] ? fpregs_assert_state_consistent+0x1f/0xb0 [ 5.113104] do_syscall_64+0x3f/0x90 [ 5.113104] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 5.113104] RIP: 0033:0x428e2c [ 5.113104] Code: 1e fa 41 f7 c1 ff 0f 00 00 75 33 55 48 89 e5 41 54 41 89 cc 53 48 89 fb 48 85 ff 74 41 45 89 e2 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6c 5b 41 5c 5d c3 0f 1f 80 00 00 00 00 48 c7 [ 5.113104] RSP: 002b:00007fff623e7da0 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 5.113104] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000428e2c [ 5.113104] RDX: 0000000000000003 RSI: 0000000000009000 RDI: 0000000000000000 [ 5.113104] RBP: 00007fff623e7db0 R08: 00000000ffffffff R09: 0000000000000000 [ 5.113104] R10: 0000000000020022 R11: 0000000000000246 R12: 0000000000020022 [ 5.113104] R13: 00007fff623e80f0 R14: 00007fff623e82c0 R15: 0000000000000005 [ 5.113104] === Reproduction complete === [ 5.212014] ACPI: PM: Preparing to enter system sleep state S5 [ 5.214314] reboot: Power down