R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 R13: 0000000000000004 R14: 00000000200004b8 R15: 000000000000001d ================================================================== BUG: KASAN: slab-use-after-free in flush_tlb_func+0x24d/0x560 Write of size 8 at addr ffff888016fa3280 by task syz-executor.3/24661 CPU: 0 UID: 0 PID: 24661 Comm: syz-executor.3 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xca/0x120 print_report+0xcb/0x670 kasan_report+0xca/0x100 kasan_check_range+0x39/0x1b0 flush_tlb_func+0x24d/0x560 __flush_smp_call_function_queue+0x20d/0x740 __sysvec_call_function_single+0x6d/0x360 sysvec_call_function_single+0x5f/0xc0 asm_sysvec_call_function_single+0x1a/0x20 RIP: 0010:handle_softirqs+0x174/0x770 Code: c8 83 83 3c 0a 00 00 01 c7 44 24 20 0a 00 00 00 48 89 44 24 18 65 66 c7 05 cf 84 47 06 00 00 e8 22 65 40 00 fb bb ff ff ff ff <48> c7 c5 c0 c0 a0 85 41 0f bc de 83 c3 01 0f 85 9b 00 00 00 e9 8d RSP: 0018:ffff88806ce08f78 EFLAGS: 00000202 RAX: 00000000000001ba RBX: 00000000ffffffff RCX: 0000000000000004 RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff813b5b6e RBP: ffff8880347e71d8 R08: 0000000000000001 R09: 0000000000000001 R10: ffffffff86438657 R11: 0000000000000001 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000080 R15: 0000000000000000 __irq_exit_rcu+0xc4/0x100 irq_exit_rcu+0x9/0x20 sysvec_apic_timer_interrupt+0x70/0x80 asm_sysvec_apic_timer_interrupt+0x1a/0x20 RIP: 0010:dump_stack_lvl+0x115/0x120 Code: fc ff ff 4c 89 e2 31 f6 31 ff e8 e6 40 7b fc e8 e1 f7 a4 fc 48 89 ee 31 ff e8 d7 95 c4 fc e8 72 9a c4 fc e8 7d c4 cc fc fb 5b <5d> 41 5c e9 63 9a c4 fc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 RSP: 0018:ffff8880347e7280 EFLAGS: 00000206 RAX: 00000000000001b7 RBX: ffffffff85d01e20 RCX: 0000000000000040 RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff84aefc13 RBP: 0000000000000200 R08: 0000000000000001 R09: 0000000000000001 R10: ffffffff86438657 R11: 0000000000032ab8 R12: ffffffff8530f500 R13: ffffffff85d01e30 R14: 0000000000000000 R15: 0000000000000000 should_fail_ex+0x4d7/0x5e0 should_failslab+0xc2/0x120 kmem_cache_alloc_noprof+0x5f/0x470 __kernfs_new_node+0xd3/0x870 kernfs_new_node+0x13c/0x1e0 __kernfs_create_file+0x55/0x360 sysfs_add_file_mode_ns+0x21c/0x440 internal_create_group+0x571/0xeb0 loop_configure+0xc64/0x16f0 lo_ioctl+0x1066/0x2780 blkdev_ioctl+0x27c/0x6c0 __x64_sys_ioctl+0x18f/0x210 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f43b9e1a8d7 Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f43b738ff48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f43b9e64970 RCX: 00007f43b9e1a8d7 RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 R13: 0000000000000004 R14: 00000000200004b8 R15: 000000000000001d Allocated by task 843: kasan_save_stack+0x24/0x50 kasan_save_track+0x14/0x30 __kasan_slab_alloc+0x59/0x70 kmem_cache_alloc_noprof+0x13c/0x470 copy_process+0x6f3a/0x73e0 kernel_clone+0xea/0x820 __do_sys_clone+0xce/0x120 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f Freed by task 24652: kasan_save_stack+0x24/0x50 kasan_save_track+0x14/0x30 kasan_save_free_info+0x3a/0x60 __kasan_slab_free+0x38/0x50 kmem_cache_free+0x2a1/0x460 mmput+0x305/0x390 do_exit+0x79d/0x2970 do_group_exit+0xd3/0x2a0 get_signal+0x2315/0x2340 arch_do_signal_or_restart+0x80/0x790 exit_to_user_mode_loop+0x8b/0x100 do_syscall_64+0x2f7/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f The buggy address belongs to the object at ffff888016fa2900 which belongs to the cache mm_struct of size 2456 The buggy address is located 2432 bytes inside of freed 2456-byte region [ffff888016fa2900, ffff888016fa3298) The buggy address belongs to the physical page: page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888016fa1ec0 pfn:0x16fa0 head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 memcg:ffff88800e33a381 anon flags: 0x100000000000040(head|node=0|zone=1) page_type: f5(slab) raw: 0100000000000040 ffff888008c4bc80 0000000000000000 dead000000000001 raw: ffff888016fa1ec0 00000000800c000a 00000000f5000000 ffff88800e33a381 head: 0100000000000040 ffff888008c4bc80 0000000000000000 dead000000000001 head: ffff888016fa1ec0 00000000800c000a 00000000f5000000 ffff88800e33a381 head: 0100000000000003 ffffea00005be801 00000000ffffffff 00000000ffffffff head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 page dumped because: kasan: bad access detected Memory state around the buggy address: ffff888016fa3180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ffff888016fa3200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb >ffff888016fa3280: fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc fc ^ ffff888016fa3300: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00 ffff888016fa3380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ================================================================== EXT4-fs (loop6): bad geometry: block count 512 exceeds size of device (160 blocks) loop6: detected capacity change from 0 to 320 EXT4-fs (loop6): bad geometry: block count 512 exceeds size of device (160 blocks) loop1: detected capacity change from 0 to 640 FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 24668 Comm: syz-executor.0 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 copy_folio_from_iter_atomic+0x3d3/0x1820 generic_perform_write+0x1e9/0x820 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x10c0 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa123adcab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007fa12109ef20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007fa123b73970 RCX: 00007fa123adcab7 RDX: 0000000000000020 RSI: 0000000020012e00 RDI: 0000000000000004 RBP: 000000000000002c R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000018400 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 00000000200004b8 R15: 000000000000001d FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 EXT4-fs (loop1): bad geometry: block count 512 exceeds size of device (320 blocks) CPU: 1 UID: 0 PID: 24672 Comm: syz-executor.7 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 copy_folio_from_iter_atomic+0x3d3/0x1820 generic_perform_write+0x1e9/0x820 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x10c0 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa9b1193ab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007fa9ae755f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007fa9b122a970 RCX: 00007fa9b1193ab7 RDX: 0000000000000420 RSI: 0000000020013400 RDI: 0000000000000004 RBP: 000000000000002e R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000018000 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 0000000020000608 R15: 000000000000002b loop3: detected capacity change from 0 to 512 loop0: detected capacity change from 0 to 2048 loop6: detected capacity change from 0 to 320 loop4: detected capacity change from 0 to 2560 EXT4-fs (loop6): bad geometry: block count 512 exceeds size of device (160 blocks) ext4 filesystem being mounted at /syzkaller-testdir960088904/syzkaller.EkS6Kp/414/file0 supports timestamps until 2038-01-19 (0x7fffffff) FAULT_INJECTION: forcing a failure. name fail_page_alloc, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 24684 Comm: syz-executor.7 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_fail_alloc_page+0xe0/0x110 prepare_alloc_pages+0x1af/0x500 __alloc_frozen_pages_noprof+0x17f/0x1f10 alloc_pages_mpol+0xed/0x340 folio_alloc_mpol_noprof+0x38/0x2a0 shmem_alloc_folio+0x11b/0x140 shmem_get_folio_gfp.constprop.0+0x4ea/0x13a0 shmem_write_begin+0x147/0x2e0 generic_perform_write+0x3a4/0x820 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x10c0 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa9b1193ab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007fa9ae755f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007fa9b122a970 RCX: 00007fa9b1193ab7 RDX: 0000000000000020 RSI: 0000000020013900 RDI: 0000000000000004 RBP: 000000000000002e R08: 0000000000000000 R09: ffffffffffffffff R10: 000000000001c000 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 0000000020000620 R15: 000000000000002c FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 1 UID: 0 PID: 24692 Comm: syz-executor.4 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_failslab+0xc2/0x120 kmem_cache_alloc_noprof+0x5f/0x470 security_file_alloc+0x35/0x130 init_file+0x95/0x4c0 alloc_empty_file+0x76/0x1e0 path_openat+0xe0/0x2880 do_filp_open+0x1e8/0x450 do_sys_openat2+0x104/0x1b0 __x64_sys_openat+0x142/0x200 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f7e43959a04 Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 RSP: 002b:00007f7e40f1bed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007f7e439f0970 RCX: 00007f7e43959a04 RDX: 0000000000000002 RSI: 00007f7e40f1c000 RDI: 00000000ffffff9c RBP: 00007f7e40f1c000 R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 R13: 0000000000000004 R14: 00000000200003f8 R15: 0000000000000015 loop6: detected capacity change from 0 to 320 FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 EXT4-fs (loop6): bad geometry: block count 512 exceeds size of device (160 blocks) CPU: 0 UID: 0 PID: 24706 Comm: syz-executor.0 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 copy_folio_from_iter_atomic+0x3d3/0x1820 generic_perform_write+0x1e9/0x820 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x10c0 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa123adcab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007fa12109ef20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007fa123b73970 RCX: 00007fa123adcab7 RDX: 0000000000000020 RSI: 0000000020012f00 RDI: 0000000000000004 RBP: 000000000000002c R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000018800 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 00000000200004d0 R15: 000000000000001e loop0: detected capacity change from 0 to 2048 FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 24708 Comm: syz-executor.7 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 copy_folio_from_iter_atomic+0x3d3/0x1820 generic_perform_write+0x1e9/0x820 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x10c0 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa9b1193ab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007fa9ae755f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007fa9b122a970 RCX: 00007fa9b1193ab7 RDX: 0000000000000020 RSI: 0000000020013900 RDI: 0000000000000004 RBP: 000000000000002e R08: 0000000000000000 R09: ffffffffffffffff R10: 000000000001c000 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 0000000020000620 R15: 000000000000002c loop6: detected capacity change from 0 to 320 EXT4-fs (loop6): bad geometry: block count 512 exceeds size of device (160 blocks) FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 24719 Comm: syz-executor.3 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 _copy_to_user+0x32/0xd0 simple_read_from_buffer+0xe0/0x180 proc_fail_nth_read+0x189/0x270 vfs_read+0x1eb/0xbe0 ksys_read+0x121/0x240 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f43b9dcd69c Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 RSP: 002b:00007f43b7390170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f43b9dcd69c RDX: 000000000000000f RSI: 00007f43b73901e0 RDI: 0000000000000003 RBP: 00007f43b73901d0 R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 R13: 00007ffde05d580f R14: 00007f43b7390300 R15: 0000000000022000 loop4: detected capacity change from 0 to 2560 FAULT_INJECTION: forcing a failure. name fail_page_alloc, interval 1, probability 0, space 0, times 0 CPU: 1 UID: 0 PID: 24725 Comm: syz-executor.7 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_fail_alloc_page+0xe0/0x110 prepare_alloc_pages+0x1af/0x500 __alloc_frozen_pages_noprof+0x17f/0x1f10 alloc_pages_mpol+0xed/0x340 folio_alloc_mpol_noprof+0x38/0x2a0 shmem_alloc_folio+0x11b/0x140 shmem_get_folio_gfp.constprop.0+0x4ea/0x13a0 shmem_write_begin+0x147/0x2e0 generic_perform_write+0x3a4/0x820 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x10c0 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa9b1193ab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007fa9ae755f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007fa9b122a970 RCX: 00007fa9b1193ab7 RDX: 0000000000000080 RSI: 0000000020013a00 RDI: 0000000000000004 RBP: 000000000000002e R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000024000 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 0000000020000638 R15: 000000000000002d FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 24727 Comm: syz-executor.0 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 copy_folio_from_iter_atomic+0x3d3/0x1820 generic_perform_write+0x1e9/0x820 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x10c0 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa123adcab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007fa12109ef20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007fa123b73970 RCX: 00007fa123adcab7 RDX: 0000000000000020 RSI: 0000000020013000 RDI: 0000000000000004 RBP: 000000000000002c R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000018c00 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 00000000200004e8 R15: 000000000000001f ext4 filesystem being mounted at /syzkaller-testdir960088904/syzkaller.EkS6Kp/416/file0 supports timestamps until 2038-01-19 (0x7fffffff) loop0: detected capacity change from 0 to 2048 loop6: detected capacity change from 0 to 320 EXT4-fs (loop6): bad geometry: block count 512 exceeds size of device (160 blocks) loop6: detected capacity change from 0 to 320 EXT4-fs (loop6): bad geometry: block count 512 exceeds size of device (160 blocks) FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 CPU: 1 UID: 0 PID: 24742 Comm: syz-executor.7 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 copy_folio_from_iter_atomic+0x3d3/0x1820 generic_perform_write+0x1e9/0x820 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x10c0 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa9b1193ab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007fa9ae755f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007fa9b122a970 RCX: 00007fa9b1193ab7 RDX: 0000000000000080 RSI: 0000000020013a00 RDI: 0000000000000004 RBP: 000000000000002e R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000024000 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 0000000020000638 R15: 000000000000002d FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 24746 Comm: syz-executor.4 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_failslab+0xc2/0x120 kmem_cache_alloc_noprof+0x5f/0x470 __kernfs_new_node+0xd3/0x870 kernfs_new_node+0x13c/0x1e0 kernfs_create_dir_ns+0x4d/0x1a0 internal_create_group+0xa7f/0xeb0 loop_configure+0xc64/0x16f0 lo_ioctl+0x1066/0x2780 blkdev_ioctl+0x27c/0x6c0 __x64_sys_ioctl+0x18f/0x210 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f7e439a68d7 Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f7e40f1bf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f7e439f0970 RCX: 00007f7e439a68d7 RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 R13: 0000000000000004 R14: 00000000200003f8 R15: 0000000000000015 FAULT_INJECTION: forcing a failure. name fail_page_alloc, interval 1, probability 0, space 0, times 0 loop4: detected capacity change from 0 to 2560 CPU: 1 UID: 0 PID: 24748 Comm: syz-executor.0 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_fail_alloc_page+0xe0/0x110 prepare_alloc_pages+0x1af/0x500 __alloc_frozen_pages_noprof+0x17f/0x1f10 alloc_pages_mpol+0xed/0x340 folio_alloc_mpol_noprof+0x38/0x2a0 shmem_alloc_folio+0x11b/0x140 shmem_get_folio_gfp.constprop.0+0x4ea/0x13a0 shmem_write_begin+0x147/0x2e0 generic_perform_write+0x3a4/0x820 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x10c0 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa123adcab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007fa12109ef20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007fa123b73970 RCX: 00007fa123adcab7 RDX: 0000000000000020 RSI: 0000000020013100 RDI: 0000000000000004 RBP: 000000000000002c R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000019000 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 0000000020000500 R15: 0000000000000020 loop0: detected capacity change from 0 to 2048 loop3: detected capacity change from 0 to 132 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 1 UID: 0 PID: 24757 Comm: syz-executor.7 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_failslab+0xc2/0x120 kmem_cache_alloc_noprof+0x5f/0x470 getname_flags.part.0+0x48/0x540 getname_flags+0x95/0xe0 do_sys_openat2+0x9f/0x1b0 __x64_sys_openat+0x142/0x200 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa9b1193a04 Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 RSP: 002b:00007fa9ae755ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007fa9b122a970 RCX: 00007fa9b1193a04 RDX: 0000000000000002 RSI: 00007fa9ae756000 RDI: 00000000ffffff9c RBP: 00007fa9ae756000 R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 R13: 0000000000000004 R14: 0000000020000650 R15: 000000000000002e EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (66 blocks) ext4 filesystem being mounted at /syzkaller-testdir960088904/syzkaller.EkS6Kp/417/file0 supports timestamps until 2038-01-19 (0x7fffffff) loop3: detected capacity change from 0 to 132 EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (66 blocks) loop6: detected capacity change from 0 to 320 EXT4-fs (loop6): bad geometry: block count 512 exceeds size of device (160 blocks) loop6: detected capacity change from 0 to 320 EXT4-fs (loop6): bad geometry: block count 512 exceeds size of device (160 blocks) loop3: detected capacity change from 0 to 132 EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (66 blocks) loop3: detected capacity change from 0 to 132 loop1: detected capacity change from 0 to 640 EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (66 blocks) EXT4-fs (loop1): bad geometry: block count 512 exceeds size of device (320 blocks) loop1: detected capacity change from 0 to 640 EXT4-fs (loop1): bad geometry: block count 512 exceeds size of device (320 blocks) FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 24773 Comm: syz-executor.4 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_failslab+0xc2/0x120 kmem_cache_alloc_noprof+0x5f/0x470 __kernfs_new_node+0xd3/0x870 kernfs_new_node+0x13c/0x1e0 kernfs_create_dir_ns+0x4d/0x1a0 internal_create_group+0xa7f/0xeb0 loop_configure+0xc64/0x16f0 lo_ioctl+0x1066/0x2780 blkdev_ioctl+0x27c/0x6c0 __x64_sys_ioctl+0x18f/0x210 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f7e439a68d7 Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f7e40f1bf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f7e439f0970 RCX: 00007f7e439a68d7 RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 R13: 0000000000000004 R14: 00000000200003f8 R15: 0000000000000015 loop4: detected capacity change from 0 to 2560 loop3: detected capacity change from 0 to 132 FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 CPU: 1 UID: 0 PID: 24775 Comm: syz-executor.0 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 copy_folio_from_iter_atomic+0x3d3/0x1820 generic_perform_write+0x1e9/0x820 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x10c0 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa123adcab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007fa12109ef20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007fa123b73970 RCX: 00007fa123adcab7 RDX: 0000000000000020 RSI: 0000000020013100 RDI: 0000000000000004 RBP: 000000000000002c R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000019000 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 0000000020000500 R15: 0000000000000020 EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (66 blocks) loop7: detected capacity change from 0 to 1024 loop0: detected capacity change from 0 to 2048 loop3: detected capacity change from 0 to 132 EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (66 blocks) loop1: detected capacity change from 0 to 640 EXT4-fs (loop1): bad geometry: block count 512 exceeds size of device (320 blocks) ext4 filesystem being mounted at /syzkaller-testdir960088904/syzkaller.EkS6Kp/418/file0 supports timestamps until 2038-01-19 (0x7fffffff) loop1: detected capacity change from 0 to 640 loop6: detected capacity change from 0 to 320 EXT4-fs (loop1): bad geometry: block count 512 exceeds size of device (320 blocks) EXT4-fs (loop6): bad geometry: block count 512 exceeds size of device (160 blocks) loop6: detected capacity change from 0 to 320 FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 EXT4-fs (loop6): bad geometry: block count 512 exceeds size of device (160 blocks) CPU: 1 UID: 0 PID: 24799 Comm: syz-executor.7 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 strncpy_from_user+0x3b/0x2f0 getname_flags.part.0+0x8d/0x540 getname_flags+0x95/0xe0 do_sys_openat2+0x9f/0x1b0 __x64_sys_openat+0x142/0x200 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa9b1193a04 Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 RSP: 002b:00007fa9ae755ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007fa9b122a970 RCX: 00007fa9b1193a04 RDX: 0000000000000002 RSI: 00007fa9ae756000 RDI: 00000000ffffff9c RBP: 00007fa9ae756000 R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 R13: 0000000000000004 R14: 0000000020000650 R15: 000000000000002e loop3: detected capacity change from 0 to 132 EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (66 blocks) loop3: detected capacity change from 0 to 132 EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (66 blocks) FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 CPU: 1 UID: 0 PID: 24802 Comm: syz-executor.0 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 copy_folio_from_iter_atomic+0x3d3/0x1820 generic_perform_write+0x1e9/0x820 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x10c0 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa123adcab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007fa12109ef20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007fa123b73970 RCX: 00007fa123adcab7 RDX: 0000000000000060 RSI: 0000000020013200 RDI: 0000000000000004 RBP: 000000000000002c R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000019400 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 0000000020000518 R15: 0000000000000021 loop0: detected capacity change from 0 to 2048 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 24809 Comm: syz-executor.7 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_failslab+0xc2/0x120 kmem_cache_alloc_noprof+0x5f/0x470 alloc_empty_file+0x58/0x1e0 path_openat+0xe0/0x2880 do_filp_open+0x1e8/0x450 do_sys_openat2+0x104/0x1b0 __x64_sys_openat+0x142/0x200 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa9b1193a04 Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 RSP: 002b:00007fa9ae755ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007fa9b122a970 RCX: 00007fa9b1193a04 RDX: 0000000000000002 RSI: 00007fa9ae756000 RDI: 00000000ffffff9c RBP: 00007fa9ae756000 R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 R13: 0000000000000004 R14: 0000000020000650 R15: 000000000000002e FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 loop1: detected capacity change from 0 to 640 CPU: 1 UID: 0 PID: 24812 Comm: syz-executor.4 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_failslab+0xc2/0x120 kmem_cache_alloc_noprof+0x5f/0x470 __kernfs_new_node+0xd3/0x870 kernfs_new_node+0x13c/0x1e0 __kernfs_create_file+0x55/0x360 sysfs_add_file_mode_ns+0x21c/0x440 internal_create_group+0x571/0xeb0 loop_configure+0xc64/0x16f0 lo_ioctl+0x1066/0x2780 blkdev_ioctl+0x27c/0x6c0 __x64_sys_ioctl+0x18f/0x210 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f7e439a68d7 Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f7e40f1bf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f7e439f0970 RCX: 00007f7e439a68d7 RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 R13: 0000000000000004 R14: 00000000200003f8 R15: 0000000000000015 loop4: detected capacity change from 0 to 2560 EXT4-fs (loop1): bad geometry: block count 512 exceeds size of device (320 blocks) ext4 filesystem being mounted at /syzkaller-testdir960088904/syzkaller.EkS6Kp/419/file0 supports timestamps until 2038-01-19 (0x7fffffff) loop3: detected capacity change from 0 to 132 EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (66 blocks) loop7: detected capacity change from 0 to 1024 FAULT_INJECTION: forcing a failure. name fail_page_alloc, interval 1, probability 0, space 0, times 0 CPU: 1 UID: 0 PID: 24828 Comm: syz-executor.0 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_fail_alloc_page+0xe0/0x110 prepare_alloc_pages+0x1af/0x500 __alloc_frozen_pages_noprof+0x17f/0x1f10 alloc_pages_mpol+0xed/0x340 folio_alloc_mpol_noprof+0x38/0x2a0 shmem_alloc_folio+0x11b/0x140 shmem_get_folio_gfp.constprop.0+0x4ea/0x13a0 shmem_write_begin+0x147/0x2e0 generic_perform_write+0x3a4/0x820 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x10c0 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa123adcab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007fa12109ef20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007fa123b73970 RCX: 00007fa123adcab7 RDX: 0000000000000020 RSI: 0000000020013300 RDI: 0000000000000004 RBP: 000000000000002c R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000020000 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 0000000020000530 R15: 0000000000000022 loop6: detected capacity change from 0 to 320 EXT4-fs (loop6): bad geometry: block count 512 exceeds size of device (160 blocks) loop6: detected capacity change from 0 to 320 EXT4-fs (loop6): bad geometry: block count 512 exceeds size of device (160 blocks) FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 24840 Comm: syz-executor.0 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 copy_folio_from_iter_atomic+0x3d3/0x1820 generic_perform_write+0x1e9/0x820 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x10c0 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa123adcab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007fa12109ef20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007fa123b73970 RCX: 00007fa123adcab7 RDX: 0000000000000020 RSI: 0000000020013300 RDI: 0000000000000004 RBP: 000000000000002c R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000020000 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 0000000020000530 R15: 0000000000000022 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 1 UID: 0 PID: 24847 Comm: syz-executor.7 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_failslab+0xc2/0x120 kmem_cache_alloc_noprof+0x5f/0x470 security_file_alloc+0x35/0x130 init_file+0x95/0x4c0 alloc_empty_file+0x76/0x1e0 path_openat+0xe0/0x2880 do_filp_open+0x1e8/0x450 do_sys_openat2+0x104/0x1b0 __x64_sys_openat+0x142/0x200 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa9b1193a04 Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 RSP: 002b:00007fa9ae755ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007fa9b122a970 RCX: 00007fa9b1193a04 RDX: 0000000000000002 RSI: 00007fa9ae756000 RDI: 00000000ffffff9c RBP: 00007fa9ae756000 R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 R13: 0000000000000004 R14: 0000000020000650 R15: 000000000000002e loop6: detected capacity change from 0 to 320 EXT4-fs (loop6): bad geometry: block count 512 exceeds size of device (160 blocks) loop6: detected capacity change from 0 to 320 EXT4-fs (loop6): bad geometry: block count 512 exceeds size of device (160 blocks) FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 24853 Comm: syz-executor.4 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 _copy_to_user+0x32/0xd0 simple_read_from_buffer+0xe0/0x180 proc_fail_nth_read+0x189/0x270 vfs_read+0x1eb/0xbe0 ksys_read+0x121/0x240 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f7e4395969c Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 RSP: 002b:00007f7e40f1c170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f7e4395969c RDX: 000000000000000f RSI: 00007f7e40f1c1e0 RDI: 0000000000000003 RBP: 00007f7e40f1c1d0 R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 R13: 00007fff4eeaedcf R14: 00007f7e40f1c300 R15: 0000000000022000 loop6: detected capacity change from 0 to 320 loop4: detected capacity change from 0 to 2560 ext4 filesystem being mounted at /syzkaller-testdir960088904/syzkaller.EkS6Kp/423/file0 supports timestamps until 2038-01-19 (0x7fffffff) EXT4-fs (loop6): bad geometry: block count 512 exceeds size of device (160 blocks) loop6: detected capacity change from 0 to 320 EXT4-fs (loop6): bad geometry: block count 512 exceeds size of device (160 blocks) FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 24873 Comm: syz-executor.0 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 copy_folio_from_iter_atomic+0x3d3/0x1820 generic_perform_write+0x1e9/0x820 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x10c0 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa123adcab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007fa12109ef20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007fa123b73970 RCX: 00007fa123adcab7 RDX: 0000000000000020 RSI: 0000000020013400 RDI: 0000000000000004 RBP: 000000000000002c R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000020400 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 0000000020000548 R15: 0000000000000023 loop3: detected capacity change from 0 to 132 EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (66 blocks) loop3: detected capacity change from 0 to 132 EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (66 blocks) loop4: detected capacity change from 0 to 2560 FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 CPU: 1 UID: 0 PID: 24887 Comm: syz-executor.0 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 copy_folio_from_iter_atomic+0x3d3/0x1820 generic_perform_write+0x1e9/0x820 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x10c0 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa123adcab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007fa12109ef20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007fa123b73970 RCX: 00007fa123adcab7 RDX: 0000000000000020 RSI: 0000000020013500 RDI: 0000000000000004 RBP: 000000000000002c R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000020800 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 0000000020000560 R15: 0000000000000024 loop1: detected capacity change from 0 to 640 loop0: detected capacity change from 0 to 2048 ext4 filesystem being mounted at /syzkaller-testdir960088904/syzkaller.EkS6Kp/424/file0 supports timestamps until 2038-01-19 (0x7fffffff) EXT4-fs (loop1): bad geometry: block count 512 exceeds size of device (320 blocks) loop6: detected capacity change from 0 to 320 loop3: detected capacity change from 0 to 132 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 1 UID: 0 PID: 24898 Comm: syz-executor.7 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_failslab+0xc2/0x120 kmem_cache_alloc_noprof+0x5f/0x470 __kernfs_new_node+0xd3/0x870 kernfs_new_node+0x13c/0x1e0 kernfs_create_dir_ns+0x4d/0x1a0 internal_create_group+0xa7f/0xeb0 loop_configure+0xc64/0x16f0 lo_ioctl+0x1066/0x2780 blkdev_ioctl+0x27c/0x6c0 __x64_sys_ioctl+0x18f/0x210 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa9b11e08d7 Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fa9ae755f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007fa9b122a970 RCX: 00007fa9b11e08d7 RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 R13: 0000000000000004 R14: 0000000020000650 R15: 000000000000002e loop7: detected capacity change from 0 to 1024 EXT4-fs (loop6): bad geometry: block count 512 exceeds size of device (160 blocks) EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (66 blocks) loop6: detected capacity change from 0 to 320 EXT4-fs (loop6): bad geometry: block count 512 exceeds size of device (160 blocks) loop1: detected capacity change from 0 to 640 loop4: detected capacity change from 0 to 2560 EXT4-fs (loop1): bad geometry: block count 512 exceeds size of device (320 blocks) loop6: detected capacity change from 0 to 320 loop1: detected capacity change from 0 to 640 EXT4-fs (loop6): bad geometry: block count 512 exceeds size of device (160 blocks) EXT4-fs (loop1): bad geometry: block count 512 exceeds size of device (320 blocks) FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 CPU: 1 UID: 0 PID: 24921 Comm: syz-executor.0 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 copy_folio_from_iter_atomic+0x3d3/0x1820 generic_perform_write+0x1e9/0x820 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x10c0 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa123adcab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007fa12109ef20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007fa123b73970 RCX: 00007fa123adcab7 RDX: 0000000000000020 RSI: 0000000020013600 RDI: 0000000000000004 RBP: 000000000000002c R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000020c00 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 0000000020000578 R15: 0000000000000025 ext4 filesystem being mounted at /syzkaller-testdir960088904/syzkaller.EkS6Kp/425/file0 supports timestamps until 2038-01-19 (0x7fffffff) loop0: detected capacity change from 0 to 2048 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 24928 Comm: syz-executor.7 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_failslab+0xc2/0x120 kmem_cache_alloc_noprof+0x5f/0x470 __kernfs_new_node+0xd3/0x870 kernfs_new_node+0x13c/0x1e0 __kernfs_create_file+0x55/0x360 sysfs_add_file_mode_ns+0x21c/0x440 internal_create_group+0x571/0xeb0 loop_configure+0xc64/0x16f0 lo_ioctl+0x1066/0x2780 blkdev_ioctl+0x27c/0x6c0 __x64_sys_ioctl+0x18f/0x210 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa9b11e08d7 Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fa9ae755f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007fa9b122a970 RCX: 00007fa9b11e08d7 RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 R13: 0000000000000004 R14: 0000000020000650 R15: 000000000000002e loop3: detected capacity change from 0 to 132 loop6: detected capacity change from 0 to 320 EXT4-fs (loop6): bad geometry: block count 512 exceeds size of device (160 blocks) EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (66 blocks) loop6: detected capacity change from 0 to 320 loop7: detected capacity change from 0 to 1024 EXT4-fs (loop6): bad geometry: block count 512 exceeds size of device (160 blocks) FAULT_INJECTION: forcing a failure. name fail_page_alloc, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 24940 Comm: syz-executor.0 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_fail_alloc_page+0xe0/0x110 prepare_alloc_pages+0x1af/0x500 __alloc_frozen_pages_noprof+0x17f/0x1f10 alloc_pages_mpol+0xed/0x340 folio_alloc_mpol_noprof+0x38/0x2a0 shmem_alloc_folio+0x11b/0x140 shmem_get_folio_gfp.constprop.0+0x4ea/0x13a0 shmem_write_begin+0x147/0x2e0 generic_perform_write+0x3a4/0x820 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x10c0 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa123adcab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007fa12109ef20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007fa123b73970 RCX: 00007fa123adcab7 RDX: 0000000000000020 RSI: 0000000020013700 RDI: 0000000000000004 RBP: 000000000000002c R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000021000 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 0000000020000590 R15: 0000000000000026 loop1: detected capacity change from 0 to 640 loop4: detected capacity change from 0 to 2560 loop7: detected capacity change from 0 to 1024 loop0: detected capacity change from 0 to 2048 loop6: detected capacity change from 0 to 320 EXT4-fs (loop6): bad geometry: block count 512 exceeds size of device (160 blocks) EXT4-fs (loop1): bad geometry: block count 512 exceeds size of device (320 blocks) loop6: detected capacity change from 0 to 320 EXT4-fs (loop6): bad geometry: block count 512 exceeds size of device (160 blocks) loop1: detected capacity change from 0 to 640 ext4 filesystem being mounted at /syzkaller-testdir960088904/syzkaller.EkS6Kp/426/file0 supports timestamps until 2038-01-19 (0x7fffffff) EXT4-fs (loop1): bad geometry: block count 512 exceeds size of device (320 blocks) FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 24962 Comm: syz-executor.0 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 copy_folio_from_iter_atomic+0x3d3/0x1820 generic_perform_write+0x1e9/0x820 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x10c0 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa123adcab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007fa12109ef20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007fa123b73970 RCX: 00007fa123adcab7 RDX: 0000000000000020 RSI: 0000000020013700 RDI: 0000000000000004 RBP: 000000000000002c R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000021000 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 0000000020000590 R15: 0000000000000026 loop3: detected capacity change from 0 to 132 EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (66 blocks) loop3: detected capacity change from 0 to 132 EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (66 blocks) FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 24977 Comm: syz-executor.0 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 copy_folio_from_iter_atomic+0x3d3/0x1820 generic_perform_write+0x1e9/0x820 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x10c0 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa123adcab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007fa12109ef20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007fa123b73970 RCX: 00007fa123adcab7 RDX: 0000000000000060 RSI: 0000000020013800 RDI: 0000000000000004 RBP: 000000000000002c R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000021400 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 00000000200005a8 R15: 0000000000000027 FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 24976 Comm: syz-executor.7 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 _copy_to_user+0x32/0xd0 simple_read_from_buffer+0xe0/0x180 proc_fail_nth_read+0x189/0x270 vfs_read+0x1eb/0xbe0 ksys_read+0x121/0x240 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa9b119369c Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 RSP: 002b:00007fa9ae756170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007fa9b119369c RDX: 000000000000000f RSI: 00007fa9ae7561e0 RDI: 0000000000000003 RBP: 00007fa9ae7561d0 R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 R13: 00007ffd24a1080f R14: 00007fa9ae756300 R15: 0000000000022000 loop3: detected capacity change from 0 to 132 EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (66 blocks) FAULT_INJECTION: forcing a failure. name fail_page_alloc, interval 1, probability 0, space 0, times 0 CPU: 1 UID: 0 PID: 24994 Comm: syz-executor.0 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_fail_alloc_page+0xe0/0x110 prepare_alloc_pages+0x1af/0x500 __alloc_frozen_pages_noprof+0x17f/0x1f10 alloc_pages_mpol+0xed/0x340 folio_alloc_mpol_noprof+0x38/0x2a0 shmem_alloc_folio+0x11b/0x140 shmem_get_folio_gfp.constprop.0+0x4ea/0x13a0 shmem_write_begin+0x147/0x2e0 generic_perform_write+0x3a4/0x820 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x10c0 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa123adcab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007fa12109ef20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007fa123b73970 RCX: 00007fa123adcab7 RDX: 0000000000000040 RSI: 0000000020013900 RDI: 0000000000000004 RBP: 000000000000002c R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000028000 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 00000000200005c0 R15: 0000000000000028 loop3: detected capacity change from 0 to 132 EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (66 blocks) loop3: detected capacity change from 0 to 132 FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 CPU: 1 UID: 0 PID: 25014 Comm: syz-executor.0 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 copy_folio_from_iter_atomic+0x3d3/0x1820 generic_perform_write+0x1e9/0x820 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x10c0 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa123adcab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007fa12109ef20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007fa123b73970 RCX: 00007fa123adcab7 RDX: 0000000000000040 RSI: 0000000020013900 RDI: 0000000000000004 RBP: 000000000000002c R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000028000 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 00000000200005c0 R15: 0000000000000028 EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (66 blocks) loop3: detected capacity change from 0 to 132 EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (66 blocks) FAULT_INJECTION: forcing a failure. name fail_page_alloc, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 25031 Comm: syz-executor.0 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_fail_alloc_page+0xe0/0x110 prepare_alloc_pages+0x1af/0x500 __alloc_frozen_pages_noprof+0x17f/0x1f10 alloc_pages_mpol+0xed/0x340 folio_alloc_mpol_noprof+0x38/0x2a0 shmem_alloc_folio+0x11b/0x140 shmem_get_folio_gfp.constprop.0+0x4ea/0x13a0 shmem_write_begin+0x147/0x2e0 generic_perform_write+0x3a4/0x820 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x10c0 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa123adcab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007fa12109ef20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007fa123b73970 RCX: 00007fa123adcab7 RDX: 0000000000000420 RSI: 0000000020013a00 RDI: 0000000000000004 RBP: 000000000000002c R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000030000 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 00000000200005d8 R15: 0000000000000029 loop3: detected capacity change from 0 to 132 EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (66 blocks) FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 CPU: 1 UID: 0 PID: 25045 Comm: syz-executor.0 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 copy_folio_from_iter_atomic+0x3d3/0x1820 generic_perform_write+0x1e9/0x820 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x10c0 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa123adcab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007fa12109ef20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007fa123b73970 RCX: 00007fa123adcab7 RDX: 0000000000000420 RSI: 0000000020013a00 RDI: 0000000000000004 RBP: 000000000000002c R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000030000 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 00000000200005d8 R15: 0000000000000029 FAULT_INJECTION: forcing a failure. name fail_page_alloc, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 25058 Comm: syz-executor.0 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_fail_alloc_page+0xe0/0x110 prepare_alloc_pages+0x1af/0x500 __alloc_frozen_pages_noprof+0x17f/0x1f10 alloc_pages_mpol+0xed/0x340 folio_alloc_mpol_noprof+0x38/0x2a0 shmem_alloc_folio+0x11b/0x140 shmem_get_folio_gfp.constprop.0+0x4ea/0x13a0 shmem_write_begin+0x147/0x2e0 generic_perform_write+0x3a4/0x820 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x10c0 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa123adcab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007fa12109ef20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007fa123b73970 RCX: 00007fa123adcab7 RDX: 0000000000000020 RSI: 0000000020013f00 RDI: 0000000000000004 RBP: 000000000000002c R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000038000 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 00000000200005f0 R15: 000000000000002a loop3: detected capacity change from 0 to 132 EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (66 blocks) FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 CPU: 1 UID: 0 PID: 25068 Comm: syz-executor.0 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 copy_folio_from_iter_atomic+0x3d3/0x1820 generic_perform_write+0x1e9/0x820 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x10c0 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa123adcab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007fa12109ef20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007fa123b73970 RCX: 00007fa123adcab7 RDX: 0000000000000020 RSI: 0000000020013f00 RDI: 0000000000000004 RBP: 000000000000002c R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000038000 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 00000000200005f0 R15: 000000000000002a loop3: detected capacity change from 0 to 132 EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (66 blocks) FAULT_INJECTION: forcing a failure. name fail_page_alloc, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 25082 Comm: syz-executor.0 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_fail_alloc_page+0xe0/0x110 prepare_alloc_pages+0x1af/0x500 __alloc_frozen_pages_noprof+0x17f/0x1f10 alloc_pages_mpol+0xed/0x340 folio_alloc_mpol_noprof+0x38/0x2a0 shmem_alloc_folio+0x11b/0x140 shmem_get_folio_gfp.constprop.0+0x4ea/0x13a0 shmem_write_begin+0x147/0x2e0 generic_perform_write+0x3a4/0x820 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x10c0 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa123adcab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007fa12109ef20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007fa123b73970 RCX: 00007fa123adcab7 RDX: 0000000000000080 RSI: 0000000020014000 RDI: 0000000000000004 RBP: 000000000000002c R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000048000 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 0000000020000608 R15: 000000000000002b loop3: detected capacity change from 0 to 132 EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (66 blocks) loop3: detected capacity change from 0 to 132 EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (66 blocks) loop3: detected capacity change from 0 to 132 EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (66 blocks) loop3: detected capacity change from 0 to 132 EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (66 blocks) FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 CPU: 1 UID: 0 PID: 25148 Comm: syz-executor.0 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 copy_folio_from_iter_atomic+0x3d3/0x1820 generic_perform_write+0x1e9/0x820 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x10c0 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa123adcab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007fa12109ef20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007fa123b73970 RCX: 00007fa123adcab7 RDX: 0000000000000080 RSI: 0000000020014000 RDI: 0000000000000004 RBP: 000000000000002c R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000048000 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 0000000020000608 R15: 000000000000002b loop3: detected capacity change from 0 to 132 EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (66 blocks) loop3: detected capacity change from 0 to 132 EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (66 blocks) loop3: detected capacity change from 0 to 132 EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (66 blocks) FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 25170 Comm: syz-executor.0 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_failslab+0xc2/0x120 kmem_cache_alloc_noprof+0x5f/0x470 getname_flags.part.0+0x48/0x540 getname_flags+0x95/0xe0 do_sys_openat2+0x9f/0x1b0 __x64_sys_openat+0x142/0x200 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa123adca04 Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 RSP: 002b:00007fa12109eed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007fa123b73970 RCX: 00007fa123adca04 RDX: 0000000000000002 RSI: 00007fa12109f000 RDI: 00000000ffffff9c RBP: 00007fa12109f000 R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 R13: 0000000000000004 R14: 0000000020000620 R15: 000000000000002c loop3: detected capacity change from 0 to 132 EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (66 blocks) loop0: detected capacity change from 0 to 2048 loop3: detected capacity change from 0 to 132 EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (66 blocks) FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 25204 Comm: syz-executor.0 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 strncpy_from_user+0x3b/0x2f0 getname_flags.part.0+0x8d/0x540 getname_flags+0x95/0xe0 do_sys_openat2+0x9f/0x1b0 __x64_sys_openat+0x142/0x200 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa123adca04 Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 RSP: 002b:00007fa12109eed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007fa123b73970 RCX: 00007fa123adca04 RDX: 0000000000000002 RSI: 00007fa12109f000 RDI: 00000000ffffff9c RBP: 00007fa12109f000 R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 R13: 0000000000000004 R14: 0000000020000620 R15: 000000000000002c loop3: detected capacity change from 0 to 132 EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (66 blocks) loop3: detected capacity change from 0 to 132 EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (66 blocks) FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 25211 Comm: syz-executor.0 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_failslab+0xc2/0x120 kmem_cache_alloc_noprof+0x5f/0x470 alloc_empty_file+0x58/0x1e0 path_openat+0xe0/0x2880 do_filp_open+0x1e8/0x450 do_sys_openat2+0x104/0x1b0 __x64_sys_openat+0x142/0x200 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa123adca04 Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 RSP: 002b:00007fa12109eed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007fa123b73970 RCX: 00007fa123adca04 RDX: 0000000000000002 RSI: 00007fa12109f000 RDI: 00000000ffffff9c RBP: 00007fa12109f000 R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 R13: 0000000000000004 R14: 0000000020000620 R15: 000000000000002c loop3: detected capacity change from 0 to 132 EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (66 blocks) loop3: detected capacity change from 0 to 132 EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (66 blocks) FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 25231 Comm: syz-executor.0 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_failslab+0xc2/0x120 kmem_cache_alloc_noprof+0x5f/0x470 security_file_alloc+0x35/0x130 init_file+0x95/0x4c0 alloc_empty_file+0x76/0x1e0 path_openat+0xe0/0x2880 do_filp_open+0x1e8/0x450 do_sys_openat2+0x104/0x1b0 __x64_sys_openat+0x142/0x200 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa123adca04 Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 RSP: 002b:00007fa12109eed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007fa123b73970 RCX: 00007fa123adca04 RDX: 0000000000000002 RSI: 00007fa12109f000 RDI: 00000000ffffff9c RBP: 00007fa12109f000 R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 R13: 0000000000000004 R14: 0000000020000620 R15: 000000000000002c loop3: detected capacity change from 0 to 512 loop3: detected capacity change from 0 to 512 FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 25263 Comm: syz-executor.0 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 _copy_from_user+0x30/0xd0 get_timespec64+0x78/0x190 __x64_sys_clock_nanosleep+0x1b4/0x470 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa123b4e8e1 Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 aa e7 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 e3 e7 ff ff 48 8b 04 24 eb 97 66 2e 0f 1f RSP: 002b:00007fa12109eee0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 RAX: ffffffffffffffda RBX: 00007fa12109f6bc RCX: 00007fa123b4e8e1 RDX: 00007fa12109ef20 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000010 R13: 0000000000000004 R14: 0000000020000620 R15: 000000000000002c loop7: detected capacity change from 0 to 576 EXT4-fs (loop7): bad geometry: block count 512 exceeds size of device (288 blocks) loop3: detected capacity change from 0 to 512 Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 ---------------- Code disassembly (best guess): 0: c8 83 83 3c enterq $0x8383,$0x3c 4: 0a 00 or (%rax),%al 6: 00 01 add %al,(%rcx) 8: c7 44 24 20 0a 00 00 movl $0xa,0x20(%rsp) f: 00 10: 48 89 44 24 18 mov %rax,0x18(%rsp) 15: 65 66 c7 05 cf 84 47 movw $0x0,%gs:0x64784cf(%rip) # 0x64784ee 1c: 06 00 00 1f: e8 22 65 40 00 callq 0x406546 24: fb sti 25: bb ff ff ff ff mov $0xffffffff,%ebx * 2a: 48 c7 c5 c0 c0 a0 85 mov $0xffffffff85a0c0c0,%rbp <-- trapping instruction 31: 41 0f bc de bsf %r14d,%ebx 35: 83 c3 01 add $0x1,%ebx 38: 0f 85 9b 00 00 00 jne 0xd9 3e: e9 .byte 0xe9 3f: 8d .byte 0x8d