R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffe9d7e0ebf R14: 00007f66418b9300 R15: 0000000000022000 ================================================================== BUG: KASAN: slab-use-after-free in flush_tlb_func+0x24d/0x560 Write of size 8 at addr ffff888036e03280 by task syz-fuzzer/260 CPU: 1 UID: 0 PID: 260 Comm: syz-fuzzer Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xca/0x120 print_report+0xcb/0x670 kasan_report+0xca/0x100 kasan_check_range+0x39/0x1b0 flush_tlb_func+0x24d/0x560 __flush_smp_call_function_queue+0x20d/0x740 __sysvec_call_function_single+0x6d/0x360 sysvec_call_function_single+0x5f/0xc0 asm_sysvec_call_function_single+0x1a/0x20 RIP: 0010:handle_softirqs+0x174/0x770 Code: c8 83 83 3c 0a 00 00 01 c7 44 24 20 0a 00 00 00 48 89 44 24 18 65 66 c7 05 cf 84 47 06 00 00 e8 22 65 40 00 fb bb ff ff ff ff <48> c7 c5 c0 c0 a0 85 41 0f bc de 83 c3 01 0f 85 9b 00 00 00 e9 8d RSP: 0018:ffff88806cf08f90 EFLAGS: 00000206 RAX: 0000000000125eee RBX: 00000000ffffffff RCX: 0000000000000004 RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff813b5b6e RBP: ffffffff83c51785 R08: 0000000000000001 R09: 0000000000000001 R10: ffffffff86438657 R11: ffff88806cf08ff8 R12: ffff888009860940 R13: ffff888009860800 R14: 0000000000000008 R15: ffff88800a420000 do_softirq+0x48/0x80 __local_bh_enable_ip+0xf1/0x110 __dev_queue_xmit+0xdda/0x3c10 ip_finish_output2+0xaa0/0x1bc0 __ip_finish_output.part.0+0x1bb/0x350 ip_output+0x27f/0x850 __ip_queue_xmit+0x19c6/0x21f0 __tcp_transmit_skb+0x24c2/0x3a40 tcp_write_xmit+0x1539/0x70f0 __tcp_push_pending_frames+0xae/0x330 tcp_push+0x227/0x700 tcp_sendmsg_locked+0x2d5c/0x3840 tcp_sendmsg+0x2f/0x50 inet_sendmsg+0xb9/0x150 sock_write_iter+0x4c9/0x5c0 vfs_write+0xbe9/0x10c0 ksys_write+0x1ef/0x240 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x4b0f4b Code: ff e9 69 ff ff ff cc cc cc cc cc cc cc cc cc e8 5b c3 f8 ff 48 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30 RSP: 002b:000000c000497388 EFLAGS: 00000212 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 000000c000020800 RCX: 00000000004b0f4b RDX: 0000000000000004 RSI: 000000c00000a200 RDI: 0000000000000006 RBP: 000000c0004973d8 R08: 000000c00000a201 R09: 0000000000000004 R10: 0000000000000008 R11: 0000000000000212 R12: 000000000000011e R13: 000000c0004f6000 R14: 000000000000001f R15: 00000000000054c9 Allocated by task 854: kasan_save_stack+0x24/0x50 kasan_save_track+0x14/0x30 __kasan_slab_alloc+0x59/0x70 kmem_cache_alloc_noprof+0x13c/0x470 copy_process+0x6f3a/0x73e0 kernel_clone+0xea/0x820 __do_sys_clone+0xce/0x120 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f Freed by task 32834: kasan_save_stack+0x24/0x50 kasan_save_track+0x14/0x30 kasan_save_free_info+0x3a/0x60 __kasan_slab_free+0x38/0x50 kmem_cache_free+0x2a1/0x460 mmput+0x305/0x390 do_exit+0x79d/0x2970 do_group_exit+0xd3/0x2a0 get_signal+0x2315/0x2340 arch_do_signal_or_restart+0x80/0x790 exit_to_user_mode_loop+0x8b/0x100 do_syscall_64+0x2f7/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f The buggy address belongs to the object at ffff888036e02900 which belongs to the cache mm_struct of size 2456 The buggy address is located 2432 bytes inside of freed 2456-byte region [ffff888036e02900, ffff888036e03298) The buggy address belongs to the physical page: page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x36e00 head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 memcg:ffff88800a14bb01 anon flags: 0x100000000000040(head|node=0|zone=1) page_type: f5(slab) raw: 0100000000000040 ffff888008c4bc80 ffffea0000598800 dead000000000003 raw: 0000000000000000 00000000800c000c 00000000f5000000 ffff88800a14bb01 head: 0100000000000040 ffff888008c4bc80 ffffea0000598800 dead000000000003 head: 0000000000000000 00000000800c000c 00000000f5000000 ffff88800a14bb01 head: 0100000000000003 ffffea0000db8001 00000000ffffffff 00000000ffffffff head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 page dumped because: kasan: bad access detected Memory state around the buggy address: ffff888036e03180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ffff888036e03200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb >ffff888036e03280: fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc fc ^ ffff888036e03300: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb ffff888036e03380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ================================================================== mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 1 UID: 0 PID: 32841 Comm: syz-executor.4 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_failslab+0xc2/0x120 __kmalloc_cache_noprof+0x73/0x470 alloc_name+0x41/0x110 __x64_sys_memfd_create+0x130/0x280 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fc4e5dd2b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fc4e3347f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fc4e5dd2b19 RDX: 00000000002a2000 RSI: 0000000000000000 RDI: 00007fc4e5e2c0fb RBP: 000000000000000b R08: 0000000000151000 R09: ffffffffffffffff R10: 000000000000000b R11: 0000000000000246 R12: 0000000008100000 R13: 0000000020000100 R14: 00000000002a2000 R15: 0000000020011000 loop4: detected capacity change from 0 to 5392 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 32852 Comm: syz-executor.2 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_failslab+0xc2/0x120 kmem_cache_alloc_node_noprof+0x71/0x470 __alloc_skb+0x2ab/0x370 netlink_alloc_large_skb+0x69/0x150 netlink_sendmsg+0x676/0xd80 ____sys_sendmsg+0xa67/0xc20 ___sys_sendmsg+0x10f/0x1b0 __sys_sendmsg+0x150/0x200 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f054ec37b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f054c1ad188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f054ed4af60 RCX: 00007f054ec37b19 RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 RBP: 00007f054c1ad1d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffe44cc4b6f R14: 00007f054c1ad300 R15: 0000000000022000 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 loop6: detected capacity change from 0 to 512 CPU: 1 UID: 0 PID: 32851 Comm: syz-executor.0 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_failslab+0xc2/0x120 kmem_cache_alloc_noprof+0x5f/0x470 getname_flags.part.0+0x48/0x540 getname_uflags+0x9a/0xe0 __x64_sys_execveat+0xcd/0x130 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f484da6ab19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f484afe0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 RAX: ffffffffffffffda RBX: 00007f484db7df60 RCX: 00007f484da6ab19 RDX: 0000000020000180 RSI: 0000000020000140 RDI: ffffffffffffff9c RBP: 00007f484afe01d0 R08: 0000000000000000 R09: 0000000000000000 R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000001 R13: 00007fffc387f7df R14: 00007f484afe0300 R15: 0000000000022000 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 1 UID: 0 PID: 32849 Comm: syz-executor.7 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_failslab+0xc2/0x120 kmem_cache_alloc_noprof+0x5f/0x470 getname_flags.part.0+0x48/0x540 getname_uflags+0x9a/0xe0 __x64_sys_execveat+0xcd/0x130 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fb0fdb4fb19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fb0fb0c5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 RAX: ffffffffffffffda RBX: 00007fb0fdc62f60 RCX: 00007fb0fdb4fb19 RDX: 00000000200003c0 RSI: 0000000020000380 RDI: ffffffffffffff9c RBP: 00007fb0fb0c51d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000020000400 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffd5dbf560f R14: 00007fb0fb0c5300 R15: 0000000000022000 EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 32857 Comm: syz-executor.5 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_failslab+0xc2/0x120 kmem_cache_alloc_node_noprof+0x71/0x470 __alloc_skb+0x2ab/0x370 netlink_alloc_large_skb+0x69/0x150 netlink_sendmsg+0x676/0xd80 ____sys_sendmsg+0xa67/0xc20 ___sys_sendmsg+0x10f/0x1b0 __sys_sendmsg+0x150/0x200 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f76c39e2b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f76c0f58188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f76c3af5f60 RCX: 00007f76c39e2b19 RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 RBP: 00007f76c0f581d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffda78a0b1f R14: 00007f76c0f58300 R15: 0000000000022000 FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 32864 Comm: syz-executor.4 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 strncpy_from_user+0x3b/0x2f0 alloc_name+0x78/0x110 __x64_sys_memfd_create+0x130/0x280 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fc4e5dd2b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fc4e3347f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fc4e5dd2b19 RDX: 00000000002a2000 RSI: 0000000000000000 RDI: 00007fc4e5e2c0fb RBP: 000000000000000b R08: 0000000000151000 R09: ffffffffffffffff R10: 000000000000000b R11: 0000000000000246 R12: 0000000008100000 R13: 0000000020000100 R14: 00000000002a2000 R15: 0000000020011000 mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 32869 Comm: syz-executor.4 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_failslab+0xc2/0x120 kmem_cache_alloc_lru_noprof+0x73/0x460 shmem_alloc_inode+0x27/0x50 alloc_inode+0x67/0x250 new_inode+0x1e/0x160 __shmem_get_inode+0x17c/0xe80 __shmem_file_setup+0x107/0x370 alloc_file+0x11c/0x500 __x64_sys_memfd_create+0x193/0x280 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fc4e5dd2b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fc4e3347f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fc4e5dd2b19 RDX: 00000000002a2000 RSI: 0000000000000000 RDI: 00007fc4e5e2c0fb RBP: 000000000000000b R08: 0000000000151000 R09: ffffffffffffffff R10: 000000000000000b R11: 0000000000000246 R12: 0000000008100000 R13: 0000000020000100 R14: 00000000002a2000 R15: 0000000020011000 FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. CPU: 1 UID: 0 PID: 32872 Comm: syz-executor.7 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 strncpy_from_user+0x3b/0x2f0 getname_flags.part.0+0x8d/0x540 getname_uflags+0x9a/0xe0 __x64_sys_execveat+0xcd/0x130 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fb0fdb4fb19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fb0fb0c5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 RAX: ffffffffffffffda RBX: 00007fb0fdc62f60 RCX: 00007fb0fdb4fb19 RDX: 00000000200003c0 RSI: 0000000020000380 RDI: ffffffffffffff9c RBP: 00007fb0fb0c51d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000020000400 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffd5dbf560f R14: 00007fb0fb0c5300 R15: 0000000000022000 FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 CPU: 1 UID: 0 PID: 32879 Comm: syz-executor.6 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 strncpy_from_user+0x3b/0x2f0 alloc_name+0x78/0x110 __x64_sys_memfd_create+0x130/0x280 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f14e4832b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f14e1da7f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f14e4832b19 RDX: 0000000000018000 RSI: 0000000000000000 RDI: 00007f14e488c0fb RBP: 0000000000000016 R08: 000000000000c000 R09: ffffffffffffffff R10: 0000000000000016 R11: 0000000000000246 R12: 0000000008100000 R13: 0000000020000100 R14: 0000000000040000 R15: 0000000020013a00 loop4: detected capacity change from 0 to 5392 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 32885 Comm: syz-executor.6 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_failslab+0xc2/0x120 kmem_cache_alloc_lru_noprof+0x73/0x460 shmem_alloc_inode+0x27/0x50 alloc_inode+0x67/0x250 new_inode+0x1e/0x160 __shmem_get_inode+0x17c/0xe80 __shmem_file_setup+0x107/0x370 alloc_file+0x11c/0x500 __x64_sys_memfd_create+0x193/0x280 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f14e4832b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f14e1da7f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f14e4832b19 RDX: 0000000000018000 RSI: 0000000000000000 RDI: 00007f14e488c0fb RBP: 0000000000000016 R08: 000000000000c000 R09: ffffffffffffffff R10: 0000000000000016 R11: 0000000000000246 R12: 0000000008100000 R13: 0000000020000100 R14: 0000000000040000 R15: 0000000020013a00 FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 CPU: 1 UID: 0 PID: 32894 Comm: syz-executor.1 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 _copy_from_iter+0x1dc/0x15b0 netlink_sendmsg+0x809/0xd80 ____sys_sendmsg+0xa67/0xc20 ___sys_sendmsg+0x10f/0x1b0 __sys_sendmsg+0x150/0x200 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f6644343b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f66418b9188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f6644456f60 RCX: 00007f6644343b19 RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 RBP: 00007f66418b91d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffe9d7e0ebf R14: 00007f66418b9300 R15: 0000000000022000 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 32892 Comm: syz-executor.0 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 strncpy_from_user+0x3b/0x2f0 getname_flags.part.0+0x8d/0x540 getname_uflags+0x9a/0xe0 __x64_sys_execveat+0xcd/0x130 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f484da6ab19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f484afe0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 RAX: ffffffffffffffda RBX: 00007f484db7df60 RCX: 00007f484da6ab19 RDX: 0000000020000180 RSI: 0000000020000140 RDI: ffffffffffffff9c RBP: 00007f484afe01d0 R08: 0000000000000000 R09: 0000000000000000 R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000001 R13: 00007fffc387f7df R14: 00007f484afe0300 R15: 0000000000022000 CPU: 1 UID: 0 PID: 32889 Comm: syz-executor.7 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_failslab+0xc2/0x120 kmem_cache_alloc_noprof+0x5f/0x470 alloc_empty_file+0x58/0x1e0 path_openat+0xe0/0x2880 do_filp_open+0x1e8/0x450 do_open_execat+0x10c/0x3e0 alloc_bprm+0x2b/0x6e0 do_execveat_common+0x235/0x770 __x64_sys_execveat+0xe4/0x130 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fb0fdb4fb19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fb0fb0c5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 RAX: ffffffffffffffda RBX: 00007fb0fdc62f60 RCX: 00007fb0fdb4fb19 RDX: 00000000200003c0 RSI: 0000000020000380 RDI: ffffffffffffff9c RBP: 00007fb0fb0c51d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000020000400 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffd5dbf560f R14: 00007fb0fb0c5300 R15: 0000000000022000 mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 CPU: 1 UID: 0 PID: 32901 Comm: syz-executor.2 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 _copy_from_iter+0x1dc/0x15b0 netlink_sendmsg+0x809/0xd80 ____sys_sendmsg+0xa67/0xc20 ___sys_sendmsg+0x10f/0x1b0 __sys_sendmsg+0x150/0x200 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f054ec37b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f054c1ad188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f054ed4af60 RCX: 00007f054ec37b19 RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 RBP: 00007f054c1ad1d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffe44cc4b6f R14: 00007f054c1ad300 R15: 0000000000022000 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 32902 Comm: syz-executor.0 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_failslab+0xc2/0x120 kmem_cache_alloc_noprof+0x5f/0x470 alloc_empty_file+0x58/0x1e0 path_openat+0xe0/0x2880 do_filp_open+0x1e8/0x450 do_open_execat+0x10c/0x3e0 alloc_bprm+0x2b/0x6e0 do_execveat_common+0x235/0x770 __x64_sys_execveat+0xe4/0x130 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f484da6ab19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f484afe0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 RAX: ffffffffffffffda RBX: 00007f484db7df60 RCX: 00007f484da6ab19 RDX: 0000000020000180 RSI: 0000000020000140 RDI: ffffffffffffff9c RBP: 00007f484afe01d0 R08: 0000000000000000 R09: 0000000000000000 R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000001 R13: 00007fffc387f7df R14: 00007f484afe0300 R15: 0000000000022000 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 1 UID: 0 PID: 32906 Comm: syz-executor.1 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_failslab+0xc2/0x120 __kmalloc_noprof+0xb4/0x4b0 genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290 genl_family_rcv_msg_doit+0xab/0x2f0 genl_rcv_msg+0x532/0x7e0 netlink_rcv_skb+0x147/0x430 genl_rcv+0x28/0x40 netlink_unicast+0x53d/0x7f0 netlink_sendmsg+0x8ac/0xd80 ____sys_sendmsg+0xa67/0xc20 ___sys_sendmsg+0x10f/0x1b0 __sys_sendmsg+0x150/0x200 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f6644343b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f66418b9188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f6644456f60 RCX: 00007f6644343b19 RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 RBP: 00007f66418b91d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffe9d7e0ebf R14: 00007f66418b9300 R15: 0000000000022000 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 32908 Comm: syz-executor.4 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_failslab+0xc2/0x120 kmem_cache_alloc_noprof+0x5f/0x470 security_inode_alloc+0x3e/0x130 inode_init_always_gfp+0xc94/0xff0 alloc_inode+0x8d/0x250 new_inode+0x1e/0x160 __shmem_get_inode+0x17c/0xe80 __shmem_file_setup+0x107/0x370 alloc_file+0x11c/0x500 __x64_sys_memfd_create+0x193/0x280 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fc4e5dd2b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fc4e3347f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fc4e5dd2b19 RDX: 00000000002a2000 RSI: 0000000000000000 RDI: 00007fc4e5e2c0fb RBP: 000000000000000b R08: 0000000000151000 R09: ffffffffffffffff R10: 000000000000000b R11: 0000000000000246 R12: 0000000008100000 R13: 0000000020000100 R14: 00000000002a2000 R15: 0000000020011000 loop6: detected capacity change from 0 to 512 EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 1 UID: 0 PID: 32913 Comm: syz-executor.2 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_failslab+0xc2/0x120 __kmalloc_noprof+0xb4/0x4b0 genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290 genl_family_rcv_msg_doit+0xab/0x2f0 genl_rcv_msg+0x532/0x7e0 netlink_rcv_skb+0x147/0x430 genl_rcv+0x28/0x40 netlink_unicast+0x53d/0x7f0 netlink_sendmsg+0x8ac/0xd80 ____sys_sendmsg+0xa67/0xc20 ___sys_sendmsg+0x10f/0x1b0 __sys_sendmsg+0x150/0x200 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f054ec37b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f054c1ad188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f054ed4af60 RCX: 00007f054ec37b19 RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 RBP: 00007f054c1ad1d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffe44cc4b6f R14: 00007f054c1ad300 R15: 0000000000022000 EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 32923 Comm: syz-executor.6 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_failslab+0xc2/0x120 kmem_cache_alloc_noprof+0x5f/0x470 security_inode_alloc+0x3e/0x130 inode_init_always_gfp+0xc94/0xff0 alloc_inode+0x8d/0x250 new_inode+0x1e/0x160 __shmem_get_inode+0x17c/0xe80 __shmem_file_setup+0x107/0x370 alloc_file+0x11c/0x500 __x64_sys_memfd_create+0x193/0x280 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f14e4832b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f14e1da7f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f14e4832b19 RDX: 0000000000018000 RSI: 0000000000000000 RDI: 00007f14e488c0fb RBP: 0000000000000016 R08: 000000000000c000 R09: ffffffffffffffff R10: 0000000000000016 R11: 0000000000000246 R12: 0000000008100000 R13: 0000000020000100 R14: 0000000000040000 R15: 0000000020013a00 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 1 UID: 0 PID: 32926 Comm: syz-executor.7 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_failslab+0xc2/0x120 kmem_cache_alloc_noprof+0x5f/0x470 security_file_alloc+0x35/0x130 init_file+0x95/0x4c0 alloc_empty_file+0x76/0x1e0 path_openat+0xe0/0x2880 do_filp_open+0x1e8/0x450 do_open_execat+0x10c/0x3e0 alloc_bprm+0x2b/0x6e0 do_execveat_common+0x235/0x770 __x64_sys_execveat+0xe4/0x130 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fb0fdb4fb19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fb0fb0c5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 RAX: ffffffffffffffda RBX: 00007fb0fdc62f60 RCX: 00007fb0fdb4fb19 RDX: 00000000200003c0 RSI: 0000000020000380 RDI: ffffffffffffff9c RBP: 00007fb0fb0c51d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000020000400 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffd5dbf560f R14: 00007fb0fb0c5300 R15: 0000000000022000 loop4: detected capacity change from 0 to 5392 mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium loop6: detected capacity change from 0 to 512 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 32934 Comm: syz-executor.2 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_failslab+0xc2/0x120 kmem_cache_alloc_node_noprof+0x71/0x470 __alloc_skb+0x2ab/0x370 netlink_ack+0x167/0xbf0 netlink_rcv_skb+0x344/0x430 genl_rcv+0x28/0x40 netlink_unicast+0x53d/0x7f0 netlink_sendmsg+0x8ac/0xd80 ____sys_sendmsg+0xa67/0xc20 ___sys_sendmsg+0x10f/0x1b0 __sys_sendmsg+0x150/0x200 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f054ec37b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f054c1ad188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f054ed4af60 RCX: 00007f054ec37b19 RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 RBP: 00007f054c1ad1d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffe44cc4b6f R14: 00007f054c1ad300 R15: 0000000000022000 EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 1 UID: 0 PID: 32938 Comm: syz-executor.0 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_failslab+0xc2/0x120 kmem_cache_alloc_noprof+0x5f/0x470 security_file_alloc+0x35/0x130 init_file+0x95/0x4c0 alloc_empty_file+0x76/0x1e0 path_openat+0xe0/0x2880 do_filp_open+0x1e8/0x450 do_open_execat+0x10c/0x3e0 alloc_bprm+0x2b/0x6e0 do_execveat_common+0x235/0x770 __x64_sys_execveat+0xe4/0x130 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f484da6ab19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f484afe0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 RAX: ffffffffffffffda RBX: 00007f484db7df60 RCX: 00007f484da6ab19 RDX: 0000000020000180 RSI: 0000000020000140 RDI: ffffffffffffff9c RBP: 00007f484afe01d0 R08: 0000000000000000 R09: 0000000000000000 R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000001 R13: 00007fffc387f7df R14: 00007f484afe0300 R15: 0000000000022000 EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 32946 Comm: syz-executor.6 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_failslab+0xc2/0x120 kmem_cache_alloc_lru_noprof+0x73/0x460 __d_alloc+0x31/0xa10 d_alloc_pseudo+0x1d/0xc0 alloc_file_pseudo+0xbe/0x220 __shmem_file_setup+0x1a7/0x370 alloc_file+0x11c/0x500 __x64_sys_memfd_create+0x193/0x280 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f14e4832b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f14e1da7f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f14e4832b19 RDX: 0000000000018000 RSI: 0000000000000000 RDI: 00007f14e488c0fb RBP: 0000000000000016 R08: 000000000000c000 R09: ffffffffffffffff R10: 0000000000000016 R11: 0000000000000246 R12: 0000000008100000 R13: 0000000020000100 R14: 0000000000040000 R15: 0000000020013a00 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 1 UID: 0 PID: 32947 Comm: syz-executor.1 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_failslab+0xc2/0x120 kmem_cache_alloc_node_noprof+0x71/0x470 __alloc_skb+0x2ab/0x370 netlink_ack+0x167/0xbf0 netlink_rcv_skb+0x344/0x430 genl_rcv+0x28/0x40 netlink_unicast+0x53d/0x7f0 netlink_sendmsg+0x8ac/0xd80 ____sys_sendmsg+0xa67/0xc20 ___sys_sendmsg+0x10f/0x1b0 __sys_sendmsg+0x150/0x200 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f6644343b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f66418b9188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f6644456f60 RCX: 00007f6644343b19 RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 RBP: 00007f66418b91d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffe9d7e0ebf R14: 00007f66418b9300 R15: 0000000000022000 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 32948 Comm: syz-executor.4 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_failslab+0xc2/0x120 kmem_cache_alloc_lru_noprof+0x73/0x460 __d_alloc+0x31/0xa10 d_alloc_pseudo+0x1d/0xc0 alloc_file_pseudo+0xbe/0x220 __shmem_file_setup+0x1a7/0x370 alloc_file+0x11c/0x500 __x64_sys_memfd_create+0x193/0x280 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fc4e5dd2b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fc4e3347f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fc4e5dd2b19 RDX: 00000000002a2000 RSI: 0000000000000000 RDI: 00007fc4e5e2c0fb RBP: 000000000000000b R08: 0000000000151000 R09: ffffffffffffffff R10: 000000000000000b R11: 0000000000000246 R12: 0000000008100000 R13: 0000000020000100 R14: 00000000002a2000 R15: 0000000020011000 loop6: detected capacity change from 0 to 512 EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. loop4: detected capacity change from 0 to 5392 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 1 UID: 0 PID: 32959 Comm: syz-executor.7 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_failslab+0xc2/0x120 __kmalloc_cache_noprof+0x73/0x470 alloc_bprm+0x84/0x6e0 do_execveat_common+0x235/0x770 __x64_sys_execveat+0xe4/0x130 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fb0fdb4fb19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fb0fb0c5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 RAX: ffffffffffffffda RBX: 00007fb0fdc62f60 RCX: 00007fb0fdb4fb19 RDX: 00000000200003c0 RSI: 0000000020000380 RDI: ffffffffffffff9c RBP: 00007fb0fb0c51d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000020000400 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffd5dbf560f R14: 00007fb0fb0c5300 R15: 0000000000022000 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 1 UID: 0 PID: 32964 Comm: syz-executor.6 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_failslab+0xc2/0x120 kmem_cache_alloc_noprof+0x5f/0x470 alloc_empty_file+0x58/0x1e0 alloc_file_pseudo+0x12b/0x220 __shmem_file_setup+0x1a7/0x370 alloc_file+0x11c/0x500 __x64_sys_memfd_create+0x193/0x280 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f14e4832b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f14e1da7f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f14e4832b19 RDX: 0000000000018000 RSI: 0000000000000000 RDI: 00007f14e488c0fb RBP: 0000000000000016 R08: 000000000000c000 R09: ffffffffffffffff R10: 0000000000000016 R11: 0000000000000246 R12: 0000000008100000 R13: 0000000020000100 R14: 0000000000040000 R15: 0000000020013a00 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 32970 Comm: syz-executor.0 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_failslab+0xc2/0x120 __kmalloc_cache_noprof+0x73/0x470 alloc_bprm+0x84/0x6e0 do_execveat_common+0x235/0x770 __x64_sys_execveat+0xe4/0x130 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f484da6ab19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f484afe0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 RAX: ffffffffffffffda RBX: 00007f484db7df60 RCX: 00007f484da6ab19 RDX: 0000000020000180 RSI: 0000000020000140 RDI: ffffffffffffff9c RBP: 00007f484afe01d0 R08: 0000000000000000 R09: 0000000000000000 R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000001 R13: 00007fffc387f7df R14: 00007f484afe0300 R15: 0000000000022000 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 1 UID: 0 PID: 32972 Comm: syz-executor.4 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_failslab+0xc2/0x120 kmem_cache_alloc_noprof+0x5f/0x470 alloc_empty_file+0x58/0x1e0 alloc_file_pseudo+0x12b/0x220 __shmem_file_setup+0x1a7/0x370 alloc_file+0x11c/0x500 __x64_sys_memfd_create+0x193/0x280 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fc4e5dd2b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fc4e3347f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fc4e5dd2b19 RDX: 00000000002a2000 RSI: 0000000000000000 RDI: 00007fc4e5e2c0fb RBP: 000000000000000b R08: 0000000000151000 R09: ffffffffffffffff R10: 000000000000000b R11: 0000000000000246 R12: 0000000008100000 R13: 0000000020000100 R14: 00000000002a2000 R15: 0000000020011000 mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 1 UID: 0 PID: 32978 Comm: syz-executor.7 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_failslab+0xc2/0x120 kmem_cache_alloc_noprof+0x5f/0x470 mm_alloc+0x1d/0xd0 alloc_bprm+0x2e3/0x6e0 do_execveat_common+0x235/0x770 __x64_sys_execveat+0xe4/0x130 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fb0fdb4fb19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fb0fb0c5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 RAX: ffffffffffffffda RBX: 00007fb0fdc62f60 RCX: 00007fb0fdb4fb19 RDX: 00000000200003c0 RSI: 0000000020000380 RDI: ffffffffffffff9c RBP: 00007fb0fb0c51d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000020000400 R11: 0000000000000246 R12: 0000000000000002 R13: 00007ffd5dbf560f R14: 00007fb0fb0c5300 R15: 0000000000022000 loop6: detected capacity change from 0 to 512 EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. loop4: detected capacity change from 0 to 5392 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 32999 Comm: syz-executor.0 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_failslab+0xc2/0x120 kmem_cache_alloc_noprof+0x5f/0x470 mm_alloc+0x1d/0xd0 alloc_bprm+0x2e3/0x6e0 do_execveat_common+0x235/0x770 __x64_sys_execveat+0xe4/0x130 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f484da6ab19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f484afe0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 RAX: ffffffffffffffda RBX: 00007f484db7df60 RCX: 00007f484da6ab19 RDX: 0000000020000180 RSI: 0000000020000140 RDI: ffffffffffffff9c RBP: 00007f484afe01d0 R08: 0000000000000000 R09: 0000000000000000 R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000002 R13: 00007fffc387f7df R14: 00007f484afe0300 R15: 0000000000022000 FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 CPU: 1 UID: 0 PID: 33001 Comm: syz-executor.6 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_failslab+0xc2/0x120 kmem_cache_alloc_noprof+0x5f/0x470 security_file_alloc+0x35/0x130 init_file+0x95/0x4c0 alloc_empty_file+0x76/0x1e0 alloc_file_pseudo+0x12b/0x220 __shmem_file_setup+0x1a7/0x370 alloc_file+0x11c/0x500 __x64_sys_memfd_create+0x193/0x280 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f14e4832b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f14e1da7f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f14e4832b19 RDX: 0000000000018000 RSI: 0000000000000000 RDI: 00007f14e488c0fb RBP: 0000000000000016 R08: 000000000000c000 R09: ffffffffffffffff R10: 0000000000000016 R11: 0000000000000246 R12: 0000000008100000 R13: 0000000020000100 R14: 0000000000040000 R15: 0000000020013a00 CPU: 0 UID: 0 PID: 32998 Comm: syz-executor.5 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 _copy_from_iter+0x1dc/0x15b0 netlink_sendmsg+0x809/0xd80 ____sys_sendmsg+0xa67/0xc20 ___sys_sendmsg+0x10f/0x1b0 __sys_sendmsg+0x150/0x200 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f76c39e2b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f76c0f58188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f76c3af5f60 RCX: 00007f76c39e2b19 RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 RBP: 00007f76c0f581d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffda78a0b1f R14: 00007f76c0f58300 R15: 0000000000022000 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 32997 Comm: syz-executor.7 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_failslab+0xc2/0x120 kmem_cache_alloc_noprof+0x5f/0x470 mm_alloc+0x1d/0xd0 alloc_bprm+0x2e3/0x6e0 do_execveat_common+0x235/0x770 __x64_sys_execveat+0xe4/0x130 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fb0fdb4fb19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fb0fb0c5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 RAX: ffffffffffffffda RBX: 00007fb0fdc62f60 RCX: 00007fb0fdb4fb19 RDX: 00000000200003c0 RSI: 0000000020000380 RDI: ffffffffffffff9c RBP: 00007fb0fb0c51d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000020000400 R11: 0000000000000246 R12: 0000000000000002 R13: 00007ffd5dbf560f R14: 00007fb0fb0c5300 R15: 0000000000022000 mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 33003 Comm: syz-executor.2 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 _copy_from_user+0x30/0xd0 kstrtouint_from_user+0xbd/0x180 proc_fail_nth_write+0x7c/0x250 vfs_write+0x2b7/0x10c0 ksys_write+0x121/0x240 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f054ebea5ff Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 RSP: 002b:00007f054c1ad170 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f054ebea5ff RDX: 0000000000000001 RSI: 00007f054c1ad1e0 RDI: 0000000000000004 RBP: 00007f054c1ad1d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 R13: 00007ffe44cc4b6f R14: 00007f054c1ad300 R15: 0000000000022000 mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium loop6: detected capacity change from 0 to 512 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 33014 Comm: syz-executor.4 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_failslab+0xc2/0x120 kmem_cache_alloc_noprof+0x5f/0x470 security_file_alloc+0x35/0x130 init_file+0x95/0x4c0 alloc_empty_file+0x76/0x1e0 alloc_file_pseudo+0x12b/0x220 __shmem_file_setup+0x1a7/0x370 alloc_file+0x11c/0x500 __x64_sys_memfd_create+0x193/0x280 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fc4e5dd2b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fc4e3347f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fc4e5dd2b19 RDX: 00000000002a2000 RSI: 0000000000000000 RDI: 00007fc4e5e2c0fb RBP: 000000000000000b R08: 0000000000151000 R09: ffffffffffffffff R10: 000000000000000b R11: 0000000000000246 R12: 0000000008100000 R13: 0000000020000100 R14: 00000000002a2000 R15: 0000000020011000 EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 33010 Comm: syz-executor.1 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 _copy_to_user+0x32/0xd0 simple_read_from_buffer+0xe0/0x180 proc_fail_nth_read+0x189/0x270 vfs_read+0x1eb/0xbe0 ksys_read+0x121/0x240 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f66442f669c Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 RSP: 002b:00007f66418b9170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 RAX: ffffffffffffffda RBX: 0000000000000024 RCX: 00007f66442f669c RDX: 000000000000000f RSI: 00007f66418b91e0 RDI: 0000000000000004 RBP: 00007f66418b91d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 R13: 00007ffe9d7e0ebf R14: 00007f66418b9300 R15: 0000000000022000 EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. FAULT_INJECTION: forcing a failure. name fail_page_alloc, interval 1, probability 0, space 0, times 1 CPU: 0 UID: 0 PID: 33022 Comm: syz-executor.7 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_fail_alloc_page+0xe0/0x110 prepare_alloc_pages+0x1af/0x500 __alloc_frozen_pages_noprof+0x17f/0x1f10 alloc_pages_mpol+0xed/0x340 alloc_pages_noprof+0xa1/0x380 pgd_alloc+0x4d/0x610 mm_init+0x753/0x11f0 mm_alloc+0xa0/0xd0 alloc_bprm+0x2e3/0x6e0 do_execveat_common+0x235/0x770 __x64_sys_execveat+0xe4/0x130 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fb0fdb4fb19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fb0fb0c5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 RAX: ffffffffffffffda RBX: 00007fb0fdc62f60 RCX: 00007fb0fdb4fb19 RDX: 00000000200003c0 RSI: 0000000020000380 RDI: ffffffffffffff9c RBP: 00007fb0fb0c51d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000020000400 R11: 0000000000000246 R12: 0000000000000002 R13: 00007ffd5dbf560f R14: 00007fb0fb0c5300 R15: 0000000000022000 FAULT_INJECTION: forcing a failure. name fail_page_alloc, interval 1, probability 0, space 0, times 1 CPU: 1 UID: 0 PID: 33023 Comm: syz-executor.6 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_fail_alloc_page+0xe0/0x110 prepare_alloc_pages+0x1af/0x500 __alloc_frozen_pages_noprof+0x17f/0x1f10 alloc_pages_mpol+0xed/0x340 folio_alloc_mpol_noprof+0x38/0x2a0 shmem_alloc_folio+0x11b/0x140 shmem_get_folio_gfp.constprop.0+0x4ea/0x13a0 shmem_write_begin+0x147/0x2e0 generic_perform_write+0x3a4/0x820 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x10c0 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f14e47e5ab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007f14e1da7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007f14e487c970 RCX: 00007f14e47e5ab7 RDX: 00000000000000c0 RSI: 0000000020010000 RDI: 0000000000000004 RBP: 0000000000000016 R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000 loop4: detected capacity change from 0 to 5392 FAULT_INJECTION: forcing a failure. name fail_page_alloc, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 33029 Comm: syz-executor.4 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_fail_alloc_page+0xe0/0x110 prepare_alloc_pages+0x1af/0x500 __alloc_frozen_pages_noprof+0x17f/0x1f10 alloc_pages_mpol+0xed/0x340 folio_alloc_mpol_noprof+0x38/0x2a0 shmem_alloc_folio+0x11b/0x140 shmem_get_folio_gfp.constprop.0+0x4ea/0x13a0 shmem_write_begin+0x147/0x2e0 generic_perform_write+0x3a4/0x820 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x10c0 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fc4e5d85ab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007fc4e3347f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007fc4e5e1c970 RCX: 00007fc4e5d85ab7 RDX: 0000000000000060 RSI: 0000000020010000 RDI: 0000000000000004 RBP: 000000000000000b R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000 FAULT_INJECTION: forcing a failure. name fail_page_alloc, interval 1, probability 0, space 0, times 0 FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 CPU: 1 UID: 0 PID: 33032 Comm: syz-executor.0 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_fail_alloc_page+0xe0/0x110 prepare_alloc_pages+0x1af/0x500 __alloc_frozen_pages_noprof+0x17f/0x1f10 alloc_pages_mpol+0xed/0x340 alloc_pages_noprof+0xa1/0x380 pgd_alloc+0x4d/0x610 mm_init+0x753/0x11f0 mm_alloc+0xa0/0xd0 alloc_bprm+0x2e3/0x6e0 do_execveat_common+0x235/0x770 __x64_sys_execveat+0xe4/0x130 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f484da6ab19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f484afe0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 RAX: ffffffffffffffda RBX: 00007f484db7df60 RCX: 00007f484da6ab19 RDX: 0000000020000180 RSI: 0000000020000140 RDI: ffffffffffffff9c RBP: 00007f484afe01d0 R08: 0000000000000000 R09: 0000000000000000 R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000002 R13: 00007fffc387f7df R14: 00007f484afe0300 R15: 0000000000022000 CPU: 0 UID: 0 PID: 33035 Comm: syz-executor.6 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 copy_folio_from_iter_atomic+0x3d3/0x1820 generic_perform_write+0x1e9/0x820 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x10c0 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f14e47e5ab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007f14e1da7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007f14e487c970 RCX: 00007f14e47e5ab7 RDX: 00000000000000c0 RSI: 0000000020010000 RDI: 0000000000000004 RBP: 0000000000000016 R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 33039 Comm: syz-executor.5 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_failslab+0xc2/0x120 __kmalloc_noprof+0xb4/0x4b0 genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290 genl_family_rcv_msg_doit+0xab/0x2f0 genl_rcv_msg+0x532/0x7e0 netlink_rcv_skb+0x147/0x430 genl_rcv+0x28/0x40 netlink_unicast+0x53d/0x7f0 netlink_sendmsg+0x8ac/0xd80 ____sys_sendmsg+0xa67/0xc20 ___sys_sendmsg+0x10f/0x1b0 __sys_sendmsg+0x150/0x200 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f76c39e2b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f76c0f58188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f76c3af5f60 RCX: 00007f76c39e2b19 RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 RBP: 00007f76c0f581d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffda78a0b1f R14: 00007f76c0f58300 R15: 0000000000022000 loop6: detected capacity change from 0 to 512 EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. loop4: detected capacity change from 0 to 5392 FAT-fs (loop4): bogus number of reserved sectors FAT-fs (loop4): Can't find a valid FAT filesystem mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 33045 Comm: syz-executor.6 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 copy_folio_from_iter_atomic+0x3d3/0x1820 generic_perform_write+0x1e9/0x820 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x10c0 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f14e47e5ab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007f14e1da7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007f14e487c970 RCX: 00007f14e47e5ab7 RDX: 0000000000000040 RSI: 0000000020010100 RDI: 0000000000000004 RBP: 0000000000000016 R08: 0000000000000000 R09: ffffffffffffffff R10: 00000000000004e0 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 33056 Comm: syz-executor.4 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 copy_folio_from_iter_atomic+0x3d3/0x1820 generic_perform_write+0x1e9/0x820 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x10c0 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fc4e5d85ab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007fc4e3347f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007fc4e5e1c970 RCX: 00007fc4e5d85ab7 RDX: 0000000000000060 RSI: 0000000020010000 RDI: 0000000000000004 RBP: 000000000000000b R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000 loop4: detected capacity change from 0 to 5392 FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 33062 Comm: syz-executor.6 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 copy_folio_from_iter_atomic+0x3d3/0x1820 generic_perform_write+0x1e9/0x820 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x10c0 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f14e47e5ab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007f14e1da7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007f14e487c970 RCX: 00007f14e47e5ab7 RDX: 0000000000000040 RSI: 0000000020010200 RDI: 0000000000000004 RBP: 0000000000000016 R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000000540 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 0000000020000230 R15: 0000000000000002 FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium CPU: 1 UID: 0 PID: 33066 Comm: syz-executor.4 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 copy_folio_from_iter_atomic+0x3d3/0x1820 generic_perform_write+0x1e9/0x820 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x10c0 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fc4e5d85ab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007fc4e3347f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007fc4e5e1c970 RCX: 00007fc4e5d85ab7 RDX: 0000000000000020 RSI: 0000000020010100 RDI: 0000000000000004 RBP: 000000000000000b R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000000800 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 loop4: detected capacity change from 0 to 5392 loop6: detected capacity change from 0 to 512 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 1 UID: 0 PID: 33073 Comm: syz-executor.7 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_failslab+0xc2/0x120 kmem_cache_alloc_noprof+0x5f/0x470 vm_area_alloc+0x20/0x170 create_init_stack_vma+0x28/0x600 alloc_bprm+0x451/0x6e0 do_execveat_common+0x235/0x770 __x64_sys_execveat+0xe4/0x130 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fb0fdb4fb19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fb0fb0c5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 RAX: ffffffffffffffda RBX: 00007fb0fdc62f60 RCX: 00007fb0fdb4fb19 RDX: 00000000200003c0 RSI: 0000000020000380 RDI: ffffffffffffff9c RBP: 00007fb0fb0c51d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000020000400 R11: 0000000000000246 R12: 0000000000000002 R13: 00007ffd5dbf560f R14: 00007fb0fb0c5300 R15: 0000000000022000 mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 33081 Comm: syz-executor.6 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 copy_folio_from_iter_atomic+0x3d3/0x1820 generic_perform_write+0x1e9/0x820 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x10c0 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f14e47e5ab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007f14e1da7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007f14e487c970 RCX: 00007f14e47e5ab7 RDX: 0000000000000020 RSI: 0000000020010300 RDI: 0000000000000004 RBP: 0000000000000016 R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000000640 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 loop6: detected capacity change from 0 to 512 EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 33089 Comm: syz-executor.0 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_failslab+0xc2/0x120 kmem_cache_alloc_noprof+0x5f/0x470 vm_area_alloc+0x20/0x170 create_init_stack_vma+0x28/0x600 alloc_bprm+0x451/0x6e0 do_execveat_common+0x235/0x770 __x64_sys_execveat+0xe4/0x130 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f484da6ab19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f484afe0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 RAX: ffffffffffffffda RBX: 00007f484db7df60 RCX: 00007f484da6ab19 RDX: 0000000020000180 RSI: 0000000020000140 RDI: ffffffffffffff9c RBP: 00007f484afe01d0 R08: 0000000000000000 R09: 0000000000000000 R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000002 R13: 00007fffc387f7df R14: 00007f484afe0300 R15: 0000000000022000 FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 33100 Comm: syz-executor.4 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 copy_folio_from_iter_atomic+0x3d3/0x1820 generic_perform_write+0x1e9/0x820 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x10c0 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fc4e5d85ab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007fc4e3347f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007fc4e5e1c970 RCX: 00007fc4e5d85ab7 RDX: 0000000000000020 RSI: 0000000020010200 RDI: 0000000000000004 RBP: 000000000000000b R08: 0000000000000000 R09: ffffffffffffffff R10: 00000000000009e0 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 0000000020000230 R15: 0000000000000002 FAULT_INJECTION: forcing a failure. name fail_page_alloc, interval 1, probability 0, space 0, times 0 loop4: detected capacity change from 0 to 5392 CPU: 1 UID: 0 PID: 33096 Comm: syz-executor.6 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_fail_alloc_page+0xe0/0x110 prepare_alloc_pages+0x1af/0x500 __alloc_frozen_pages_noprof+0x17f/0x1f10 alloc_pages_mpol+0xed/0x340 folio_alloc_mpol_noprof+0x38/0x2a0 shmem_alloc_folio+0x11b/0x140 shmem_get_folio_gfp.constprop.0+0x4ea/0x13a0 shmem_write_begin+0x147/0x2e0 generic_perform_write+0x3a4/0x820 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x10c0 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f14e47e5ab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007f14e1da7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007f14e487c970 RCX: 00007f14e47e5ab7 RDX: 0000000000000020 RSI: 0000000020010400 RDI: 0000000000000004 RBP: 0000000000000016 R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000001000 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 0000000020000260 R15: 0000000000000004 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 1 UID: 0 PID: 33107 Comm: syz-executor.7 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_failslab+0xc2/0x120 kmem_cache_alloc_noprof+0x5f/0x470 mas_alloc_nodes+0x432/0x8f0 mas_node_count_gfp+0x106/0x140 mas_preallocate+0x2af/0x690 vma_link+0x103/0x930 insert_vm_struct+0xf4/0x2d0 create_init_stack_vma+0x1f4/0x600 alloc_bprm+0x451/0x6e0 do_execveat_common+0x235/0x770 __x64_sys_execveat+0xe4/0x130 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fb0fdb4fb19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fb0fb0c5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 RAX: ffffffffffffffda RBX: 00007fb0fdc62f60 RCX: 00007fb0fdb4fb19 RDX: 00000000200003c0 RSI: 0000000020000380 RDI: ffffffffffffff9c RBP: 00007fb0fb0c51d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000020000400 R11: 0000000000000246 R12: 0000000000000002 R13: 00007ffd5dbf560f R14: 00007fb0fb0c5300 R15: 0000000000022000 loop6: detected capacity change from 0 to 512 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 33106 Comm: syz-executor.5 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_failslab+0xc2/0x120 kmem_cache_alloc_node_noprof+0x71/0x470 __alloc_skb+0x2ab/0x370 netlink_ack+0x167/0xbf0 netlink_rcv_skb+0x344/0x430 genl_rcv+0x28/0x40 netlink_unicast+0x53d/0x7f0 netlink_sendmsg+0x8ac/0xd80 ____sys_sendmsg+0xa67/0xc20 ___sys_sendmsg+0x10f/0x1b0 __sys_sendmsg+0x150/0x200 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f76c39e2b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f76c0f58188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f76c3af5f60 RCX: 00007f76c39e2b19 RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 RBP: 00007f76c0f581d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffda78a0b1f R14: 00007f76c0f58300 R15: 0000000000022000 EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock EXT4-fs (loop6): group descriptors corrupted! mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. FAULT_INJECTION: forcing a failure. name fail_page_alloc, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 33123 Comm: syz-executor.4 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_fail_alloc_page+0xe0/0x110 prepare_alloc_pages+0x1af/0x500 __alloc_frozen_pages_noprof+0x17f/0x1f10 alloc_pages_mpol+0xed/0x340 folio_alloc_mpol_noprof+0x38/0x2a0 shmem_alloc_folio+0x11b/0x140 shmem_get_folio_gfp.constprop.0+0x4ea/0x13a0 shmem_write_begin+0x147/0x2e0 generic_perform_write+0x3a4/0x820 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x10c0 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fc4e5d85ab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007fc4e3347f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007fc4e5e1c970 RCX: 00007fc4e5d85ab7 RDX: 0000000000000060 RSI: 0000000020010300 RDI: 0000000000000004 RBP: 000000000000000b R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000003000 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 loop6: detected capacity change from 0 to 512 EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium loop4: detected capacity change from 0 to 5392 netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. loop6: detected capacity change from 0 to 512 FAULT_INJECTION: forcing a failure. name fail_page_alloc, interval 1, probability 0, space 0, times 0 CPU: 1 UID: 0 PID: 33153 Comm: syz-executor.0 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_fail_alloc_page+0xe0/0x110 prepare_alloc_pages+0x1af/0x500 __alloc_frozen_pages_noprof+0x17f/0x1f10 alloc_pages_mpol+0xed/0x340 alloc_pages_noprof+0xa1/0x380 __pud_alloc+0x3f/0x7c0 __handle_mm_fault+0xbb3/0x30f0 handle_mm_fault+0x2c3/0x900 __get_user_pages+0x58a/0x2f10 get_user_pages_remote+0x285/0xaf0 get_arg_page+0xeb/0x310 copy_string_kernel+0x196/0x510 do_execveat_common+0x35a/0x770 __x64_sys_execveat+0xe4/0x130 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f484da6ab19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f484afe0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 RAX: ffffffffffffffda RBX: 00007f484db7df60 RCX: 00007f484da6ab19 RDX: 0000000020000180 RSI: 0000000020000140 RDI: ffffffffffffff9c RBP: 00007f484afe01d0 R08: 0000000000000000 R09: 0000000000000000 R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000002 R13: 00007fffc387f7df R14: 00007f484afe0300 R15: 0000000000022000 mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. FAULT_INJECTION: forcing a failure. name fail_page_alloc, interval 1, probability 0, space 0, times 0 EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. CPU: 1 UID: 0 PID: 33174 Comm: syz-executor.7 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_fail_alloc_page+0xe0/0x110 prepare_alloc_pages+0x1af/0x500 __alloc_frozen_pages_noprof+0x17f/0x1f10 alloc_pages_mpol+0xed/0x340 alloc_pages_noprof+0xa1/0x380 __pmd_alloc+0x3b/0x980 __handle_mm_fault+0xcae/0x30f0 handle_mm_fault+0x2c3/0x900 __get_user_pages+0x58a/0x2f10 get_user_pages_remote+0x285/0xaf0 get_arg_page+0xeb/0x310 copy_string_kernel+0x196/0x510 do_execveat_common+0x35a/0x770 __x64_sys_execveat+0xe4/0x130 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fb0fdb4fb19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fb0fb0c5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 RAX: ffffffffffffffda RBX: 00007fb0fdc62f60 RCX: 00007fb0fdb4fb19 RDX: 00000000200003c0 RSI: 0000000020000380 RDI: ffffffffffffff9c RBP: 00007fb0fb0c51d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000020000400 R11: 0000000000000246 R12: 0000000000000002 R13: 00007ffd5dbf560f R14: 00007fb0fb0c5300 R15: 0000000000022000 FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 CPU: 1 UID: 0 PID: 33182 Comm: syz-executor.6 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 copy_folio_from_iter_atomic+0x3d3/0x1820 generic_perform_write+0x1e9/0x820 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x10c0 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f14e47e5ab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007f14e1da7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007f14e487c970 RCX: 00007f14e47e5ab7 RDX: 0000000000000020 RSI: 0000000020010400 RDI: 0000000000000004 RBP: 0000000000000016 R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000001000 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 0000000020000260 R15: 0000000000000004 mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium loop6: detected capacity change from 0 to 512 loop4: detected capacity change from 0 to 5392 FAULT_INJECTION: forcing a failure. name fail_page_alloc, interval 1, probability 0, space 0, times 0 FAULT_INJECTION: forcing a failure. name fail_page_alloc, interval 1, probability 0, space 0, times 0 CPU: 1 UID: 0 PID: 33186 Comm: syz-executor.0 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_fail_alloc_page+0xe0/0x110 prepare_alloc_pages+0x1af/0x500 __alloc_frozen_pages_noprof+0x17f/0x1f10 alloc_pages_mpol+0xed/0x340 alloc_pages_noprof+0xa1/0x380 __pmd_alloc+0x3b/0x980 __handle_mm_fault+0xcae/0x30f0 handle_mm_fault+0x2c3/0x900 __get_user_pages+0x58a/0x2f10 get_user_pages_remote+0x285/0xaf0 get_arg_page+0xeb/0x310 copy_string_kernel+0x196/0x510 do_execveat_common+0x35a/0x770 __x64_sys_execveat+0xe4/0x130 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f484da6ab19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f484afe0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 RAX: ffffffffffffffda RBX: 00007f484db7df60 RCX: 00007f484da6ab19 RDX: 0000000020000180 RSI: 0000000020000140 RDI: ffffffffffffff9c RBP: 00007f484afe01d0 R08: 0000000000000000 R09: 0000000000000000 R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000002 R13: 00007fffc387f7df R14: 00007f484afe0300 R15: 0000000000022000 EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. CPU: 0 UID: 0 PID: 33188 Comm: syz-executor.7 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_fail_alloc_page+0xe0/0x110 prepare_alloc_pages+0x1af/0x500 __alloc_frozen_pages_noprof+0x17f/0x1f10 alloc_pages_mpol+0xed/0x340 alloc_pages_noprof+0xa1/0x380 __pmd_alloc+0x3b/0x980 __handle_mm_fault+0xcae/0x30f0 handle_mm_fault+0x2c3/0x900 __get_user_pages+0x58a/0x2f10 get_user_pages_remote+0x285/0xaf0 get_arg_page+0xeb/0x310 copy_string_kernel+0x196/0x510 do_execveat_common+0x35a/0x770 __x64_sys_execveat+0xe4/0x130 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fb0fdb4fb19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fb0fb0c5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 RAX: ffffffffffffffda RBX: 00007fb0fdc62f60 RCX: 00007fb0fdb4fb19 RDX: 00000000200003c0 RSI: 0000000020000380 RDI: ffffffffffffff9c RBP: 00007fb0fb0c51d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000020000400 R11: 0000000000000246 R12: 0000000000000002 R13: 00007ffd5dbf560f R14: 00007fb0fb0c5300 R15: 0000000000022000 mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. FAULT_INJECTION: forcing a failure. name fail_page_alloc, interval 1, probability 0, space 0, times 0 CPU: 1 UID: 0 PID: 33201 Comm: syz-executor.7 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_fail_alloc_page+0xe0/0x110 prepare_alloc_pages+0x1af/0x500 __alloc_frozen_pages_noprof+0x17f/0x1f10 alloc_pages_mpol+0xed/0x340 alloc_pages_noprof+0xa1/0x380 pte_alloc_one+0x1e/0x360 __pte_alloc+0x6c/0x360 __handle_mm_fault+0x24bf/0x30f0 handle_mm_fault+0x2c3/0x900 __get_user_pages+0x58a/0x2f10 get_user_pages_remote+0x285/0xaf0 get_arg_page+0xeb/0x310 copy_string_kernel+0x196/0x510 do_execveat_common+0x35a/0x770 __x64_sys_execveat+0xe4/0x130 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fb0fdb4fb19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fb0fb0c5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 RAX: ffffffffffffffda RBX: 00007fb0fdc62f60 RCX: 00007fb0fdb4fb19 RDX: 00000000200003c0 RSI: 0000000020000380 RDI: ffffffffffffff9c RBP: 00007fb0fb0c51d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000020000400 R11: 0000000000000246 R12: 0000000000000002 R13: 00007ffd5dbf560f R14: 00007fb0fb0c5300 R15: 0000000000022000 FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 CPU: 1 UID: 0 PID: 33204 Comm: syz-executor.4 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 copy_folio_from_iter_atomic+0x3d3/0x1820 generic_perform_write+0x1e9/0x820 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x10c0 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fc4e5d85ab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007fc4e3347f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007fc4e5e1c970 RCX: 00007fc4e5d85ab7 RDX: 0000000000000060 RSI: 0000000020010300 RDI: 0000000000000004 RBP: 000000000000000b R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000003000 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 33207 Comm: syz-executor.0 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_failslab+0xc2/0x120 kmem_cache_alloc_noprof+0x5f/0x470 __pmd_alloc+0x98/0x980 __handle_mm_fault+0xcae/0x30f0 handle_mm_fault+0x2c3/0x900 __get_user_pages+0x58a/0x2f10 get_user_pages_remote+0x285/0xaf0 get_arg_page+0xeb/0x310 copy_string_kernel+0x196/0x510 do_execveat_common+0x35a/0x770 __x64_sys_execveat+0xe4/0x130 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f484da6ab19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f484afe0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 RAX: ffffffffffffffda RBX: 00007f484db7df60 RCX: 00007f484da6ab19 RDX: 0000000020000180 RSI: 0000000020000140 RDI: ffffffffffffff9c RBP: 00007f484afe01d0 R08: 0000000000000000 R09: 0000000000000000 R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000002 R13: 00007fffc387f7df R14: 00007f484afe0300 R15: 0000000000022000 loop4: detected capacity change from 0 to 5392 FAULT_INJECTION: forcing a failure. name fail_page_alloc, interval 1, probability 0, space 0, times 0 CPU: 1 UID: 0 PID: 33215 Comm: syz-executor.6 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_fail_alloc_page+0xe0/0x110 prepare_alloc_pages+0x1af/0x500 __alloc_frozen_pages_noprof+0x17f/0x1f10 alloc_pages_mpol+0xed/0x340 folio_alloc_mpol_noprof+0x38/0x2a0 shmem_alloc_folio+0x11b/0x140 shmem_get_folio_gfp.constprop.0+0x4ea/0x13a0 shmem_write_begin+0x147/0x2e0 generic_perform_write+0x3a4/0x820 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x10c0 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f14e47e5ab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007f14e1da7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007f14e487c970 RCX: 00007f14e47e5ab7 RDX: 0000000000002020 RSI: 0000000020010500 RDI: 0000000000000004 RBP: 0000000000000016 R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000002000 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 0000000020000278 R15: 0000000000000005 FAULT_INJECTION: forcing a failure. name fail_page_alloc, interval 1, probability 0, space 0, times 0 CPU: 1 UID: 0 PID: 33220 Comm: syz-executor.0 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_fail_alloc_page+0xe0/0x110 prepare_alloc_pages+0x1af/0x500 __alloc_frozen_pages_noprof+0x17f/0x1f10 alloc_pages_mpol+0xed/0x340 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 alloc_pages_noprof+0xa1/0x380 pte_alloc_one+0x1e/0x360 __pte_alloc+0x6c/0x360 __handle_mm_fault+0x24bf/0x30f0 handle_mm_fault+0x2c3/0x900 __get_user_pages+0x58a/0x2f10 get_user_pages_remote+0x285/0xaf0 get_arg_page+0xeb/0x310 copy_string_kernel+0x196/0x510 do_execveat_common+0x35a/0x770 __x64_sys_execveat+0xe4/0x130 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f484da6ab19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f484afe0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 RAX: ffffffffffffffda RBX: 00007f484db7df60 RCX: 00007f484da6ab19 RDX: 0000000020000180 RSI: 0000000020000140 RDI: ffffffffffffff9c RBP: 00007f484afe01d0 R08: 0000000000000000 R09: 0000000000000000 R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000002 R13: 00007fffc387f7df R14: 00007f484afe0300 R15: 0000000000022000 CPU: 0 UID: 0 PID: 33221 Comm: syz-executor.7 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_failslab+0xc2/0x120 kmem_cache_alloc_noprof+0x5f/0x470 ptlock_alloc+0x21/0x70 pte_alloc_one+0x86/0x360 __pte_alloc+0x6c/0x360 __handle_mm_fault+0x24bf/0x30f0 handle_mm_fault+0x2c3/0x900 __get_user_pages+0x58a/0x2f10 get_user_pages_remote+0x285/0xaf0 get_arg_page+0xeb/0x310 copy_string_kernel+0x196/0x510 do_execveat_common+0x35a/0x770 __x64_sys_execveat+0xe4/0x130 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fb0fdb4fb19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fb0fb0c5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 RAX: ffffffffffffffda RBX: 00007fb0fdc62f60 RCX: 00007fb0fdb4fb19 RDX: 00000000200003c0 RSI: 0000000020000380 RDI: ffffffffffffff9c RBP: 00007fb0fb0c51d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000020000400 R11: 0000000000000246 R12: 0000000000000002 R13: 00007ffd5dbf560f R14: 00007fb0fb0c5300 R15: 0000000000022000 loop6: detected capacity change from 0 to 512 EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 CPU: 1 UID: 0 PID: 33238 Comm: syz-executor.6 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 copy_folio_from_iter_atomic+0x3d3/0x1820 generic_perform_write+0x1e9/0x820 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x10c0 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f14e47e5ab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007f14e1da7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007f14e487c970 RCX: 00007f14e47e5ab7 RDX: 0000000000002020 RSI: 0000000020010500 RDI: 0000000000000004 RBP: 0000000000000016 R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000002000 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 0000000020000278 R15: 0000000000000005 FAULT_INJECTION: forcing a failure. name fail_page_alloc, interval 1, probability 0, space 0, times 0 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 33240 Comm: syz-executor.4 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_fail_alloc_page+0xe0/0x110 prepare_alloc_pages+0x1af/0x500 __alloc_frozen_pages_noprof+0x17f/0x1f10 alloc_pages_mpol+0xed/0x340 folio_alloc_mpol_noprof+0x38/0x2a0 shmem_alloc_folio+0x11b/0x140 shmem_get_folio_gfp.constprop.0+0x4ea/0x13a0 shmem_write_begin+0x147/0x2e0 generic_perform_write+0x3a4/0x820 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x10c0 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fc4e5d85ab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007fc4e3347f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007fc4e5e1c970 RCX: 00007fc4e5d85ab7 RDX: 0000000000000020 RSI: 0000000020010400 RDI: 0000000000000004 RBP: 000000000000000b R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000010000 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 0000000020000260 R15: 0000000000000004 loop4: detected capacity change from 0 to 5392 CPU: 1 UID: 0 PID: 33241 Comm: syz-executor.0 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_failslab+0xc2/0x120 kmem_cache_alloc_noprof+0x5f/0x470 ptlock_alloc+0x21/0x70 pte_alloc_one+0x86/0x360 __pte_alloc+0x6c/0x360 __handle_mm_fault+0x24bf/0x30f0 handle_mm_fault+0x2c3/0x900 __get_user_pages+0x58a/0x2f10 get_user_pages_remote+0x285/0xaf0 get_arg_page+0xeb/0x310 copy_string_kernel+0x196/0x510 do_execveat_common+0x35a/0x770 __x64_sys_execveat+0xe4/0x130 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f484da6ab19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f484afe0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 RAX: ffffffffffffffda RBX: 00007f484db7df60 RCX: 00007f484da6ab19 RDX: 0000000020000180 RSI: 0000000020000140 RDI: ffffffffffffff9c RBP: 00007f484afe01d0 R08: 0000000000000000 R09: 0000000000000000 R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000002 R13: 00007fffc387f7df R14: 00007f484afe0300 R15: 0000000000022000 loop6: detected capacity change from 0 to 512 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 33248 Comm: syz-executor.7 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_failslab+0xc2/0x120 kmem_cache_alloc_noprof+0x5f/0x470 __anon_vma_prepare+0xae/0x590 __vmf_anon_prepare+0x11f/0x250 __handle_mm_fault+0x13ad/0x30f0 handle_mm_fault+0x2c3/0x900 __get_user_pages+0x58a/0x2f10 get_user_pages_remote+0x285/0xaf0 get_arg_page+0xeb/0x310 copy_string_kernel+0x196/0x510 do_execveat_common+0x35a/0x770 __x64_sys_execveat+0xe4/0x130 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fb0fdb4fb19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fb0fb0c5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 RAX: ffffffffffffffda RBX: 00007fb0fdc62f60 RCX: 00007fb0fdb4fb19 RDX: 00000000200003c0 RSI: 0000000020000380 RDI: ffffffffffffff9c RBP: 00007fb0fb0c51d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000020000400 R11: 0000000000000246 R12: 0000000000000002 R13: 00007ffd5dbf560f R14: 00007fb0fb0c5300 R15: 0000000000022000 EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) FAT-fs (loop4): Filesystem has been set read-only EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 33260 Comm: syz-executor.4 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 copy_folio_from_iter_atomic+0x3d3/0x1820 generic_perform_write+0x1e9/0x820 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x10c0 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fc4e5d85ab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007fc4e3347f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007fc4e5e1c970 RCX: 00007fc4e5d85ab7 RDX: 0000000000000020 RSI: 0000000020010400 RDI: 0000000000000004 RBP: 000000000000000b R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000010000 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 0000000020000260 R15: 0000000000000004 loop4: detected capacity change from 0 to 5392 FAULT_INJECTION: forcing a failure. name fail_page_alloc, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 33266 Comm: syz-executor.6 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_fail_alloc_page+0xe0/0x110 prepare_alloc_pages+0x1af/0x500 __alloc_frozen_pages_noprof+0x17f/0x1f10 alloc_pages_mpol+0xed/0x340 folio_alloc_mpol_noprof+0x38/0x2a0 shmem_alloc_folio+0x11b/0x140 shmem_get_folio_gfp.constprop.0+0x4ea/0x13a0 shmem_write_begin+0x147/0x2e0 generic_perform_write+0x3a4/0x820 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x10c0 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f14e47e5ab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007f14e1da7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007f14e487c970 RCX: 00007f14e47e5ab7 RDX: 0000000000002020 RSI: 0000000020010500 RDI: 0000000000000004 RBP: 0000000000000016 R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000002000 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 0000000020000278 R15: 0000000000000005 loop6: detected capacity change from 0 to 512 EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 33277 Comm: syz-executor.6 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 copy_folio_from_iter_atomic+0x3d3/0x1820 generic_perform_write+0x1e9/0x820 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x10c0 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f14e47e5ab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007f14e1da7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007f14e487c970 RCX: 00007f14e47e5ab7 RDX: 0000000000002020 RSI: 0000000020010500 RDI: 0000000000000004 RBP: 0000000000000016 R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000002000 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 0000000020000278 R15: 0000000000000005 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 33284 Comm: syz-executor.0 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_failslab+0xc2/0x120 kmem_cache_alloc_noprof+0x5f/0x470 __anon_vma_prepare+0xae/0x590 __vmf_anon_prepare+0x11f/0x250 __handle_mm_fault+0x13ad/0x30f0 handle_mm_fault+0x2c3/0x900 __get_user_pages+0x58a/0x2f10 get_user_pages_remote+0x285/0xaf0 get_arg_page+0xeb/0x310 copy_string_kernel+0x196/0x510 do_execveat_common+0x35a/0x770 __x64_sys_execveat+0xe4/0x130 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f484da6ab19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f484afe0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 RAX: ffffffffffffffda RBX: 00007f484db7df60 RCX: 00007f484da6ab19 RDX: 0000000020000180 RSI: 0000000020000140 RDI: ffffffffffffff9c RBP: 00007f484afe01d0 R08: 0000000000000000 R09: 0000000000000000 R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000002 R13: 00007fffc387f7df R14: 00007f484afe0300 R15: 0000000000022000 FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 33279 Comm: syz-executor.5 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 _copy_to_user+0x32/0xd0 simple_read_from_buffer+0xe0/0x180 proc_fail_nth_read+0x189/0x270 vfs_read+0x1eb/0xbe0 ksys_read+0x121/0x240 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f76c399569c Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 RSP: 002b:00007f76c0f58170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 RAX: ffffffffffffffda RBX: 0000000000000040 RCX: 00007f76c399569c RDX: 000000000000000f RSI: 00007f76c0f581e0 RDI: 0000000000000004 RBP: 00007f76c0f581d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 R13: 00007ffda78a0b1f R14: 00007f76c0f58300 R15: 0000000000022000 FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 loop6: detected capacity change from 0 to 512 CPU: 1 UID: 0 PID: 33287 Comm: syz-executor.4 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 copy_folio_from_iter_atomic+0x3d3/0x1820 generic_perform_write+0x1e9/0x820 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x10c0 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fc4e5d85ab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007fc4e3347f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007fc4e5e1c970 RCX: 00007fc4e5d85ab7 RDX: 0000000000000020 RSI: 0000000020010500 RDI: 0000000000000004 RBP: 000000000000000b R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000010800 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 0000000020000278 R15: 0000000000000005 loop4: detected capacity change from 0 to 5392 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 1 UID: 0 PID: 33297 Comm: syz-executor.7 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_failslab+0xc2/0x120 kmem_cache_alloc_noprof+0x5f/0x470 __anon_vma_prepare+0x2ee/0x590 __vmf_anon_prepare+0x11f/0x250 __handle_mm_fault+0x13ad/0x30f0 handle_mm_fault+0x2c3/0x900 __get_user_pages+0x58a/0x2f10 get_user_pages_remote+0x285/0xaf0 get_arg_page+0xeb/0x310 copy_string_kernel+0x196/0x510 do_execveat_common+0x35a/0x770 __x64_sys_execveat+0xe4/0x130 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fb0fdb4fb19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fb0fb0c5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 RAX: ffffffffffffffda RBX: 00007fb0fdc62f60 RCX: 00007fb0fdb4fb19 RDX: 00000000200003c0 RSI: 0000000020000380 RDI: ffffffffffffff9c RBP: 00007fb0fb0c51d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000020000400 R11: 0000000000000246 R12: 0000000000000002 R13: 00007ffd5dbf560f R14: 00007fb0fb0c5300 R15: 0000000000022000 mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 1 UID: 0 PID: 33306 Comm: syz-executor.0 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_failslab+0xc2/0x120 kmem_cache_alloc_noprof+0x5f/0x470 __anon_vma_prepare+0x2ee/0x590 __vmf_anon_prepare+0x11f/0x250 __handle_mm_fault+0x13ad/0x30f0 handle_mm_fault+0x2c3/0x900 __get_user_pages+0x58a/0x2f10 get_user_pages_remote+0x285/0xaf0 get_arg_page+0xeb/0x310 copy_string_kernel+0x196/0x510 do_execveat_common+0x35a/0x770 __x64_sys_execveat+0xe4/0x130 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f484da6ab19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f484afe0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 RAX: ffffffffffffffda RBX: 00007f484db7df60 RCX: 00007f484da6ab19 RDX: 0000000020000180 RSI: 0000000020000140 RDI: ffffffffffffff9c RBP: 00007f484afe01d0 R08: 0000000000000000 R09: 0000000000000000 R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000002 R13: 00007fffc387f7df R14: 00007f484afe0300 R15: 0000000000022000 EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium FAULT_INJECTION: forcing a failure. name fail_page_alloc, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 33317 Comm: syz-executor.6 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_fail_alloc_page+0xe0/0x110 prepare_alloc_pages+0x1af/0x500 __alloc_frozen_pages_noprof+0x17f/0x1f10 alloc_pages_mpol+0xed/0x340 folio_alloc_mpol_noprof+0x38/0x2a0 shmem_alloc_folio+0x11b/0x140 shmem_get_folio_gfp.constprop.0+0x4ea/0x13a0 shmem_write_begin+0x147/0x2e0 generic_perform_write+0x3a4/0x820 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x10c0 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f14e47e5ab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007f14e1da7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007f14e487c970 RCX: 00007f14e47e5ab7 RDX: 0000000000002020 RSI: 0000000020010500 RDI: 0000000000000004 RBP: 0000000000000016 R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000002000 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 0000000020000278 R15: 0000000000000005 FAULT_INJECTION: forcing a failure. name fail_page_alloc, interval 1, probability 0, space 0, times 0 loop6: detected capacity change from 0 to 512 CPU: 1 UID: 0 PID: 33319 Comm: syz-executor.4 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_fail_alloc_page+0xe0/0x110 prepare_alloc_pages+0x1af/0x500 __alloc_frozen_pages_noprof+0x17f/0x1f10 alloc_pages_mpol+0xed/0x340 folio_alloc_mpol_noprof+0x38/0x2a0 shmem_alloc_folio+0x11b/0x140 shmem_get_folio_gfp.constprop.0+0x4ea/0x13a0 shmem_write_begin+0x147/0x2e0 generic_perform_write+0x3a4/0x820 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x10c0 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fc4e5d85ab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007fc4e3347f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007fc4e5e1c970 RCX: 00007fc4e5d85ab7 RDX: 0000000000000120 RSI: 0000000020010600 RDI: 0000000000000004 RBP: 000000000000000b R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000011000 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 0000000020000290 R15: 0000000000000006 EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. FAULT_INJECTION: forcing a failure. name fail_page_alloc, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 33328 Comm: syz-executor.7 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_fail_alloc_page+0xe0/0x110 prepare_alloc_pages+0x1af/0x500 __alloc_frozen_pages_noprof+0x17f/0x1f10 alloc_pages_mpol+0xed/0x340 vma_alloc_folio_noprof+0xe9/0x440 __handle_mm_fault+0x142c/0x30f0 handle_mm_fault+0x2c3/0x900 __get_user_pages+0x58a/0x2f10 get_user_pages_remote+0x285/0xaf0 get_arg_page+0xeb/0x310 copy_string_kernel+0x196/0x510 do_execveat_common+0x35a/0x770 __x64_sys_execveat+0xe4/0x130 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fb0fdb4fb19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fb0fb0c5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 RAX: ffffffffffffffda RBX: 00007fb0fdc62f60 RCX: 00007fb0fdb4fb19 RDX: 00000000200003c0 RSI: 0000000020000380 RDI: ffffffffffffff9c RBP: 00007fb0fb0c51d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000020000400 R11: 0000000000000246 R12: 0000000000000002 R13: 00007ffd5dbf560f R14: 00007fb0fb0c5300 R15: 0000000000022000 FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 loop4: detected capacity change from 0 to 5392 CPU: 1 UID: 0 PID: 33334 Comm: syz-executor.6 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 copy_folio_from_iter_atomic+0x3d3/0x1820 generic_perform_write+0x1e9/0x820 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x10c0 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f14e47e5ab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007f14e1da7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007f14e487c970 RCX: 00007f14e47e5ab7 RDX: 0000000000002020 RSI: 0000000020010500 RDI: 0000000000000004 RBP: 0000000000000016 R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000002000 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 0000000020000278 R15: 0000000000000005 loop6: detected capacity change from 0 to 512 FAULT_INJECTION: forcing a failure. name fail_page_alloc, interval 1, probability 0, space 0, times 0 CPU: 1 UID: 0 PID: 33339 Comm: syz-executor.0 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_fail_alloc_page+0xe0/0x110 prepare_alloc_pages+0x1af/0x500 __alloc_frozen_pages_noprof+0x17f/0x1f10 alloc_pages_mpol+0xed/0x340 vma_alloc_folio_noprof+0xe9/0x440 __handle_mm_fault+0x142c/0x30f0 handle_mm_fault+0x2c3/0x900 __get_user_pages+0x58a/0x2f10 get_user_pages_remote+0x285/0xaf0 get_arg_page+0xeb/0x310 copy_string_kernel+0x196/0x510 do_execveat_common+0x35a/0x770 __x64_sys_execveat+0xe4/0x130 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f484da6ab19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f484afe0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 RAX: ffffffffffffffda RBX: 00007f484db7df60 RCX: 00007f484da6ab19 RDX: 0000000020000180 RSI: 0000000020000140 RDI: ffffffffffffff9c RBP: 00007f484afe01d0 R08: 0000000000000000 R09: 0000000000000000 R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000002 R13: 00007fffc387f7df R14: 00007f484afe0300 R15: 0000000000022000 EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 33348 Comm: syz-executor.6 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 copy_folio_from_iter_atomic+0x3d3/0x1820 generic_perform_write+0x1e9/0x820 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x10c0 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f14e47e5ab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007f14e1da7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007f14e487c970 RCX: 00007f14e47e5ab7 RDX: 0000000000000040 RSI: 0000000020012600 RDI: 0000000000000004 RBP: 0000000000000016 R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000004200 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 0000000020000290 R15: 0000000000000006 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 CPU: 1 UID: 0 PID: 33357 Comm: syz-executor.0 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_failslab+0xc2/0x120 kmem_cache_alloc_noprof+0x5f/0x470 prepare_creds+0x2c/0x7e0 prepare_exec_creds+0x11/0x260 bprm_execve+0xbf/0x15a0 do_execveat_common+0x5b2/0x770 __x64_sys_execveat+0xe4/0x130 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f484da6ab19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f484afe0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 RAX: ffffffffffffffda RBX: 00007f484db7df60 RCX: 00007f484da6ab19 RDX: 0000000020000180 RSI: 0000000020000140 RDI: ffffffffffffff9c RBP: 00007f484afe01d0 R08: 0000000000000000 R09: 0000000000000000 R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000002 R13: 00007fffc387f7df R14: 00007f484afe0300 R15: 0000000000022000 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 33359 Comm: syz-executor.4 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 copy_folio_from_iter_atomic+0x3d3/0x1820 generic_perform_write+0x1e9/0x820 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x10c0 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fc4e5d85ab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007fc4e3347f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007fc4e5e1c970 RCX: 00007fc4e5d85ab7 RDX: 0000000000000120 RSI: 0000000020010600 RDI: 0000000000000004 RBP: 000000000000000b R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000011000 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 0000000020000290 R15: 0000000000000006 mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium CPU: 1 UID: 0 PID: 33356 Comm: syz-executor.7 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_failslab+0xc2/0x120 kmem_cache_alloc_noprof+0x5f/0x470 prepare_creds+0x2c/0x7e0 prepare_exec_creds+0x11/0x260 bprm_execve+0xbf/0x15a0 do_execveat_common+0x5b2/0x770 __x64_sys_execveat+0xe4/0x130 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fb0fdb4fb19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fb0fb0c5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 RAX: ffffffffffffffda RBX: 00007fb0fdc62f60 RCX: 00007fb0fdb4fb19 RDX: 00000000200003c0 RSI: 0000000020000380 RDI: ffffffffffffff9c RBP: 00007fb0fb0c51d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000020000400 R11: 0000000000000246 R12: 0000000000000002 R13: 00007ffd5dbf560f R14: 00007fb0fb0c5300 R15: 0000000000022000 loop4: detected capacity change from 0 to 5392 loop6: detected capacity change from 0 to 512 EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 1 UID: 0 PID: 33381 Comm: syz-executor.7 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_failslab+0xc2/0x120 __kmalloc_noprof+0xb4/0x4b0 security_prepare_creds+0x101/0x160 prepare_creds+0x579/0x7e0 prepare_exec_creds+0x11/0x260 bprm_execve+0xbf/0x15a0 do_execveat_common+0x5b2/0x770 __x64_sys_execveat+0xe4/0x130 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fb0fdb4fb19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fb0fb0c5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 RAX: ffffffffffffffda RBX: 00007fb0fdc62f60 RCX: 00007fb0fdb4fb19 RDX: 00000000200003c0 RSI: 0000000020000380 RDI: ffffffffffffff9c RBP: 00007fb0fb0c51d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000020000400 R11: 0000000000000246 R12: 0000000000000002 R13: 00007ffd5dbf560f R14: 00007fb0fb0c5300 R15: 0000000000022000 mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 33383 Comm: syz-executor.0 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_failslab+0xc2/0x120 __kmalloc_noprof+0xb4/0x4b0 security_prepare_creds+0x101/0x160 prepare_creds+0x579/0x7e0 prepare_exec_creds+0x11/0x260 bprm_execve+0xbf/0x15a0 do_execveat_common+0x5b2/0x770 __x64_sys_execveat+0xe4/0x130 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f484da6ab19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f484afe0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 RAX: ffffffffffffffda RBX: 00007f484db7df60 RCX: 00007f484da6ab19 RDX: 0000000020000180 RSI: 0000000020000140 RDI: ffffffffffffff9c RBP: 00007f484afe01d0 R08: 0000000000000000 R09: 0000000000000000 R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000002 R13: 00007fffc387f7df R14: 00007f484afe0300 R15: 0000000000022000 FAULT_INJECTION: forcing a failure. name fail_page_alloc, interval 1, probability 0, space 0, times 0 FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 CPU: 1 UID: 0 PID: 33388 Comm: syz-executor.4 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_fail_alloc_page+0xe0/0x110 prepare_alloc_pages+0x1af/0x500 __alloc_frozen_pages_noprof+0x17f/0x1f10 alloc_pages_mpol+0xed/0x340 folio_alloc_mpol_noprof+0x38/0x2a0 shmem_alloc_folio+0x11b/0x140 shmem_get_folio_gfp.constprop.0+0x4ea/0x13a0 shmem_write_begin+0x147/0x2e0 generic_perform_write+0x3a4/0x820 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x10c0 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fc4e5d85ab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007fc4e3347f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007fc4e5e1c970 RCX: 00007fc4e5d85ab7 RDX: 0000000000000080 RSI: 0000000020010800 RDI: 0000000000000004 RBP: 000000000000000b R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000051000 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 00000000200002a8 R15: 0000000000000007 mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium CPU: 0 UID: 0 PID: 33391 Comm: syz-executor.6 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 copy_folio_from_iter_atomic+0x3d3/0x1820 generic_perform_write+0x1e9/0x820 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x10c0 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f14e47e5ab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007f14e1da7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007f14e487c970 RCX: 00007f14e47e5ab7 RDX: 0000000000000020 RSI: 0000000020012700 RDI: 0000000000000004 RBP: 0000000000000016 R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000004280 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 00000000200002a8 R15: 0000000000000007 loop6: detected capacity change from 0 to 512 loop4: detected capacity change from 0 to 5392 EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. loop4: detected capacity change from 0 to 5392 EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. loop4: detected capacity change from 0 to 5392 FAULT_INJECTION: forcing a failure. name fail_page_alloc, interval 1, probability 0, space 0, times 0 CPU: 1 UID: 0 PID: 33414 Comm: syz-executor.6 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_fail_alloc_page+0xe0/0x110 prepare_alloc_pages+0x1af/0x500 __alloc_frozen_pages_noprof+0x17f/0x1f10 alloc_pages_mpol+0xed/0x340 folio_alloc_mpol_noprof+0x38/0x2a0 shmem_alloc_folio+0x11b/0x140 shmem_get_folio_gfp.constprop.0+0x4ea/0x13a0 shmem_write_begin+0x147/0x2e0 generic_perform_write+0x3a4/0x820 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x10c0 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f14e47e5ab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007f14e1da7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007f14e487c970 RCX: 00007f14e47e5ab7 RDX: 0000000000000040 RSI: 0000000020012800 RDI: 0000000000000004 RBP: 0000000000000016 R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000005400 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 00000000200002c0 R15: 0000000000000008 loop6: detected capacity change from 0 to 512 EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 33432 Comm: syz-executor.6 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 copy_folio_from_iter_atomic+0x3d3/0x1820 generic_perform_write+0x1e9/0x820 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x10c0 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f14e47e5ab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007f14e1da7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007f14e487c970 RCX: 00007f14e47e5ab7 RDX: 0000000000000040 RSI: 0000000020012800 RDI: 0000000000000004 RBP: 0000000000000016 R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000005400 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 00000000200002c0 R15: 0000000000000008 loop4: detected capacity change from 0 to 5392 loop6: detected capacity change from 0 to 512 mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 33449 Comm: syz-executor.7 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_failslab+0xc2/0x120 __kmalloc_node_track_caller_noprof+0xb8/0x490 kstrdup+0x3e/0xc0 bprm_change_interp+0x80/0xf0 load_misc_binary+0x54e/0xcd0 bprm_execve+0x8d9/0x15a0 do_execveat_common+0x5b2/0x770 __x64_sys_execveat+0xe4/0x130 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fb0fdb4fb19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fb0fb0c5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 RAX: ffffffffffffffda RBX: 00007fb0fdc62f60 RCX: 00007fb0fdb4fb19 RDX: 00000000200003c0 RSI: 0000000020000380 RDI: ffffffffffffff9c RBP: 00007fb0fb0c51d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000020000400 R11: 0000000000000246 R12: 0000000000000002 R13: 00007ffd5dbf560f R14: 00007fb0fb0c5300 R15: 0000000000022000 loop4: detected capacity change from 0 to 5392 FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 CPU: 1 UID: 0 PID: 33460 Comm: syz-executor.6 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 copy_folio_from_iter_atomic+0x3d3/0x1820 generic_perform_write+0x1e9/0x820 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x10c0 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f14e47e5ab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007f14e1da7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007f14e487c970 RCX: 00007f14e47e5ab7 RDX: 0000000000000040 RSI: 0000000020012900 RDI: 0000000000000004 RBP: 0000000000000016 R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000005480 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 00000000200002d8 R15: 0000000000000009 loop6: detected capacity change from 0 to 512 EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 CPU: 1 UID: 0 PID: 33481 Comm: syz-executor.6 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 copy_folio_from_iter_atomic+0x3d3/0x1820 generic_perform_write+0x1e9/0x820 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x10c0 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f14e47e5ab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007f14e1da7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007f14e487c970 RCX: 00007f14e47e5ab7 RDX: 00000000000000c0 RSI: 0000000020012a00 RDI: 0000000000000004 RBP: 0000000000000016 R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000005600 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 00000000200002f0 R15: 000000000000000a FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 loop6: detected capacity change from 0 to 512 CPU: 0 UID: 0 PID: 33482 Comm: syz-executor.4 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 copy_folio_from_iter_atomic+0x3d3/0x1820 generic_perform_write+0x1e9/0x820 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x10c0 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fc4e5d85ab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007fc4e3347f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007fc4e5e1c970 RCX: 00007fc4e5d85ab7 RDX: 0000000000000080 RSI: 0000000020010800 RDI: 0000000000000004 RBP: 000000000000000b R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000051000 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 00000000200002a8 R15: 0000000000000007 loop4: detected capacity change from 0 to 5392 EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 1 UID: 0 PID: 33491 Comm: syz-executor.7 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_failslab+0xc2/0x120 kmem_cache_alloc_noprof+0x5f/0x470 getname_kernel+0x52/0x390 open_exec+0x17/0x80 load_misc_binary+0xae1/0xcd0 bprm_execve+0x8d9/0x15a0 do_execveat_common+0x5b2/0x770 __x64_sys_execveat+0xe4/0x130 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fb0fdb4fb19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fb0fb0c5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 RAX: ffffffffffffffda RBX: 00007fb0fdc62f60 RCX: 00007fb0fdb4fb19 RDX: 00000000200003c0 RSI: 0000000020000380 RDI: ffffffffffffff9c RBP: 00007fb0fb0c51d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000020000400 R11: 0000000000000246 R12: 0000000000000002 R13: 00007ffd5dbf560f R14: 00007fb0fb0c5300 R15: 0000000000022000 FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 33501 Comm: syz-executor.6 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 copy_folio_from_iter_atomic+0x3d3/0x1820 generic_perform_write+0x1e9/0x820 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x10c0 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f14e47e5ab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007f14e1da7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007f14e487c970 RCX: 00007f14e47e5ab7 RDX: 00000000000000a0 RSI: 0000000020012b00 RDI: 0000000000000004 RBP: 0000000000000016 R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000005800 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 0000000020000308 R15: 000000000000000b mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 1 UID: 0 PID: 33507 Comm: syz-executor.7 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_failslab+0xc2/0x120 kmem_cache_alloc_noprof+0x5f/0x470 alloc_empty_file+0x58/0x1e0 path_openat+0xe0/0x2880 do_filp_open+0x1e8/0x450 do_open_execat+0x10c/0x3e0 open_exec+0x46/0x80 load_misc_binary+0xae1/0xcd0 bprm_execve+0x8d9/0x15a0 do_execveat_common+0x5b2/0x770 __x64_sys_execveat+0xe4/0x130 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fb0fdb4fb19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fb0fb0c5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 RAX: ffffffffffffffda RBX: 00007fb0fdc62f60 RCX: 00007fb0fdb4fb19 RDX: 00000000200003c0 RSI: 0000000020000380 RDI: ffffffffffffff9c RBP: 00007fb0fb0c51d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000020000400 R11: 0000000000000246 R12: 0000000000000002 R13: 00007ffd5dbf560f R14: 00007fb0fb0c5300 R15: 0000000000022000 FAULT_INJECTION: forcing a failure. name fail_page_alloc, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 33512 Comm: syz-executor.4 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_fail_alloc_page+0xe0/0x110 prepare_alloc_pages+0x1af/0x500 __alloc_frozen_pages_noprof+0x17f/0x1f10 alloc_pages_mpol+0xed/0x340 folio_alloc_mpol_noprof+0x38/0x2a0 shmem_alloc_folio+0x11b/0x140 shmem_get_folio_gfp.constprop.0+0x4ea/0x13a0 shmem_write_begin+0x147/0x2e0 generic_perform_write+0x3a4/0x820 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x10c0 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fc4e5d85ab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007fc4e3347f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007fc4e5e1c970 RCX: 00007fc4e5d85ab7 RDX: 0000000000000420 RSI: 0000000020010900 RDI: 0000000000000004 RBP: 000000000000000b R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000091000 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 00000000200002c0 R15: 0000000000000008 mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium loop6: detected capacity change from 0 to 512 EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. loop4: detected capacity change from 0 to 5392 mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 33531 Comm: syz-executor.6 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 copy_folio_from_iter_atomic+0x3d3/0x1820 generic_perform_write+0x1e9/0x820 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x10c0 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f14e47e5ab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007f14e1da7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007f14e487c970 RCX: 00007f14e47e5ab7 RDX: 00000000000000a0 RSI: 0000000020012c00 RDI: 0000000000000004 RBP: 0000000000000016 R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000005a00 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 0000000020000320 R15: 000000000000000c mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium loop6: detected capacity change from 0 to 512 EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium loop4: detected capacity change from 0 to 5392 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 1 UID: 0 PID: 33566 Comm: syz-executor.7 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_failslab+0xc2/0x120 kmem_cache_alloc_noprof+0x5f/0x470 security_file_alloc+0x35/0x130 init_file+0x95/0x4c0 alloc_empty_file+0x76/0x1e0 path_openat+0xe0/0x2880 do_filp_open+0x1e8/0x450 do_open_execat+0x10c/0x3e0 open_exec+0x46/0x80 load_misc_binary+0xae1/0xcd0 bprm_execve+0x8d9/0x15a0 do_execveat_common+0x5b2/0x770 __x64_sys_execveat+0xe4/0x130 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fb0fdb4fb19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fb0fb0c5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 RAX: ffffffffffffffda RBX: 00007fb0fdc62f60 RCX: 00007fb0fdb4fb19 RDX: 00000000200003c0 RSI: 0000000020000380 RDI: ffffffffffffff9c RBP: 00007fb0fb0c51d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000020000400 R11: 0000000000000246 R12: 0000000000000002 R13: 00007ffd5dbf560f R14: 00007fb0fb0c5300 R15: 0000000000022000 FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 33570 Comm: syz-executor.6 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 copy_folio_from_iter_atomic+0x3d3/0x1820 generic_perform_write+0x1e9/0x820 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x10c0 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f14e47e5ab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007f14e1da7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007f14e487c970 RCX: 00007f14e47e5ab7 RDX: 0000000000000100 RSI: 0000000020012d00 RDI: 0000000000000004 RBP: 0000000000000016 R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000005c00 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 0000000020000338 R15: 000000000000000d loop6: detected capacity change from 0 to 512 mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 CPU: 1 UID: 0 PID: 33585 Comm: syz-executor.4 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 copy_folio_from_iter_atomic+0x3d3/0x1820 generic_perform_write+0x1e9/0x820 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x10c0 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fc4e5d85ab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007fc4e3347f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007fc4e5e1c970 RCX: 00007fc4e5d85ab7 RDX: 0000000000000420 RSI: 0000000020010900 RDI: 0000000000000004 RBP: 000000000000000b R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000091000 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 00000000200002c0 R15: 0000000000000008 EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 33604 Comm: syz-executor.6 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 copy_folio_from_iter_atomic+0x3d3/0x1820 generic_perform_write+0x1e9/0x820 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x10c0 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f14e47e5ab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007f14e1da7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007f14e487c970 RCX: 00007f14e47e5ab7 RDX: 00000000000000c0 RSI: 0000000020012e00 RDI: 0000000000000004 RBP: 0000000000000016 R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000005de0 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 0000000020000350 R15: 000000000000000e loop6: detected capacity change from 0 to 512 EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium FAULT_INJECTION: forcing a failure. name fail_page_alloc, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 33611 Comm: syz-executor.6 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_fail_alloc_page+0xe0/0x110 prepare_alloc_pages+0x1af/0x500 __alloc_frozen_pages_noprof+0x17f/0x1f10 alloc_pages_mpol+0xed/0x340 folio_alloc_mpol_noprof+0x38/0x2a0 shmem_alloc_folio+0x11b/0x140 shmem_get_folio_gfp.constprop.0+0x4ea/0x13a0 shmem_write_begin+0x147/0x2e0 generic_perform_write+0x3a4/0x820 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x10c0 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f14e47e5ab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007f14e1da7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007f14e487c970 RCX: 00007f14e47e5ab7 RDX: 00000000000000c0 RSI: 0000000020012f00 RDI: 0000000000000004 RBP: 0000000000000016 R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000006000 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 0000000020000368 R15: 000000000000000f mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium FAULT_INJECTION: forcing a failure. name fail_page_alloc, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 33619 Comm: syz-executor.4 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_fail_alloc_page+0xe0/0x110 prepare_alloc_pages+0x1af/0x500 __alloc_frozen_pages_noprof+0x17f/0x1f10 alloc_pages_mpol+0xed/0x340 folio_alloc_mpol_noprof+0x38/0x2a0 shmem_alloc_folio+0x11b/0x140 shmem_get_folio_gfp.constprop.0+0x4ea/0x13a0 shmem_write_begin+0x147/0x2e0 generic_perform_write+0x3a4/0x820 shmem_file_write_iter+0x111/0x140 vfs_write+0xbe9/0x10c0 __x64_sys_pwrite64+0x1f1/0x260 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fc4e5d85ab7 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007fc4e3347f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00007fc4e5e1c970 RCX: 00007fc4e5d85ab7 RDX: 0000000000000020 RSI: 0000000020010e00 RDI: 0000000000000004 RBP: 000000000000000b R08: 0000000000000000 R09: ffffffffffffffff R10: 00000000000d1000 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 00000000200002d8 R15: 0000000000000009 mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium loop4: detected capacity change from 0 to 5392 loop6: detected capacity change from 0 to 512 EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 ---------------- Code disassembly (best guess): 0: c8 83 83 3c enterq $0x8383,$0x3c 4: 0a 00 or (%rax),%al 6: 00 01 add %al,(%rcx) 8: c7 44 24 20 0a 00 00 movl $0xa,0x20(%rsp) f: 00 10: 48 89 44 24 18 mov %rax,0x18(%rsp) 15: 65 66 c7 05 cf 84 47 movw $0x0,%gs:0x64784cf(%rip) # 0x64784ee 1c: 06 00 00 1f: e8 22 65 40 00 callq 0x406546 24: fb sti 25: bb ff ff ff ff mov $0xffffffff,%ebx * 2a: 48 c7 c5 c0 c0 a0 85 mov $0xffffffff85a0c0c0,%rbp <-- trapping instruction 31: 41 0f bc de bsf %r14d,%ebx 35: 83 c3 01 add $0x1,%ebx 38: 0f 85 9b 00 00 00 jne 0xd9 3e: e9 .byte 0xe9 3f: 8d .byte 0x8d