R10: 0000000000030000 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 00000000200003e0 R15: 0000000000000014 ================================================ WARNING: lock held when returning to user space! 6.18.0-rc7-next-20251127 #1 Not tainted ------------------------------------------------ syz-executor.5/7718 is leaving the kernel with locks still held! 1 lock held by syz-executor.5/7718: #0: ffff88800b322a08 (&sb->s_type->i_mutex_key#23/1){+.+.}-{4:4}, at: start_creating_noperm+0x84/0xd0 FAULT_INJECTION: forcing a failure. name fail_page_alloc, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 7722 Comm: syz-executor.4 Not tainted 6.18.0-rc7-next-20251127 #1 PREEMPT(voluntary) Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_fail_alloc_page+0xe0/0x110 prepare_alloc_pages+0x1eb/0x550 __alloc_frozen_pages_noprof+0x17f/0x2000 alloc_pages_mpol+0xed/0x340 folio_alloc_mpol_noprof+0x38/0xa0 shmem_alloc_folio+0x11b/0x140 shmem_get_folio_gfp.constprop.0+0x4ea/0x13a0 shmem_write_begin+0x194/0x3b0 generic_perform_write+0x391/0x810 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x1150 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x420 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa0aacb3ab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007fa0a8275f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007fa0aad4a970 RCX: 00007fa0aacb3ab7 RDX: 0000000000000020 RSI: 0000000020012d00 RDI: 0000000000000004 RBP: 000000000000002c R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000018000 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 00000000200004a0 R15: 000000000000001c EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. ext4 filesystem being mounted at /syzkaller-testdir522199711/syzkaller.zxZ9Cd/179/file0 supports timestamps until 2038-01-19 (0x7fffffff) EXT4-fs warning (device loop4): ext4_enable_quotas:7217: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. IPv6: addrconf: prefix option has invalid lifetime IPv6: addrconf: prefix option has invalid lifetime EXT4-fs (loop4): mount failed EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s sr 1:0:0:0: [sr0] tag#0 CDB: Service action bidirectional, sa=0x1b 9d 1b fa 35 60 6d 11 77 38 a7 0f b2 94 0a 54 59 IPv6: addrconf: prefix option has invalid lifetime FAULT_INJECTION: forcing a failure. name fail_page_alloc, interval 1, probability 0, space 0, times 0 CPU: 1 UID: 0 PID: 7742 Comm: syz-executor.1 Not tainted 6.18.0-rc7-next-20251127 #1 PREEMPT(voluntary) Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_fail_alloc_page+0xe0/0x110 prepare_alloc_pages+0x1eb/0x550 __alloc_frozen_pages_noprof+0x17f/0x2000 alloc_pages_mpol+0xed/0x340 folio_alloc_mpol_noprof+0x38/0xa0 shmem_alloc_folio+0x11b/0x140 shmem_get_folio_gfp.constprop.0+0x4ea/0x13a0 shmem_write_begin+0x194/0x3b0 generic_perform_write+0x391/0x810 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x1150 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x420 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f7c4b5beab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007f7c48b80f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007f7c4b655970 RCX: 00007f7c4b5beab7 RDX: 0000000000000020 RSI: 0000000020012b00 RDI: 0000000000000004 RBP: 0000000000000019 R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000038000 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 00000000200003f8 R15: 0000000000000015 FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 CPU: 1 UID: 0 PID: 7744 Comm: syz-executor.4 Not tainted 6.18.0-rc7-next-20251127 #1 PREEMPT(voluntary) Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 copy_folio_from_iter_atomic+0x383/0x1820 generic_perform_write+0x1d7/0x810 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x1150 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x420 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa0aacb3ab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007fa0a8275f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007fa0aad4a970 RCX: 00007fa0aacb3ab7 RDX: 0000000000000020 RSI: 0000000020012d00 RDI: 0000000000000004 RBP: 000000000000002c R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000018000 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 00000000200004a0 R15: 000000000000001c EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)