R10: 0000000000002c00 R11: 0000000000000293 R12: 0000000000000004
R13: 0000000000000004 R14: 0000000020000308 R15: 000000000000000b
 </TASK>
==================================================================
BUG: KASAN: slab-use-after-free in flush_tlb_func+0x24d/0x560
Write of size 8 at addr ffff88803b6b2840 by task syz-executor.0/34580

CPU: 0 UID: 0 PID: 34580 Comm: syz-executor.0 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) 
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
 <IRQ>
 dump_stack_lvl+0xca/0x120
 print_report+0xcb/0x670
 kasan_report+0xca/0x100
 kasan_check_range+0x39/0x1b0
 flush_tlb_func+0x24d/0x560
 __flush_smp_call_function_queue+0x20d/0x740
 __sysvec_call_function_single+0x6d/0x360
 sysvec_call_function_single+0x5f/0xc0
 asm_sysvec_call_function_single+0x1a/0x20
RIP: 0010:handle_softirqs+0x174/0x770
Code: c8 83 83 3c 0a 00 00 01 c7 44 24 20 0a 00 00 00 48 89 44 24 18 65 66 c7 05 cf 84 47 06 00 00 e8 22 65 40 00 fb bb ff ff ff ff <48> c7 c5 c0 c0 a0 85 41 0f bc de 83 c3 01 0f 85 9b 00 00 00 e9 8d
RSP: 0018:ffff88806ce08f78 EFLAGS: 00000206
RAX: 0000000000000188 RBX: 00000000ffffffff RCX: 0000000000000004
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff813b5b6e
RBP: ffff888042a5f958 R08: 0000000000000001 R09: 0000000000000001
R10: ffffffff86438657 R11: 0000000000000001 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000202 R15: 0000000000000000
 __irq_exit_rcu+0xc4/0x100
 irq_exit_rcu+0x9/0x20
 sysvec_apic_timer_interrupt+0x70/0x80
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20
RIP: 0010:dump_stack_lvl+0x115/0x120
Code: fc ff ff 4c 89 e2 31 f6 31 ff e8 e6 40 7b fc e8 e1 f7 a4 fc 48 89 ee 31 ff e8 d7 95 c4 fc e8 72 9a c4 fc e8 7d c4 cc fc fb 5b <5d> 41 5c e9 63 9a c4 fc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90
RSP: 0018:ffff888042a5fa00 EFLAGS: 00000202
RAX: 0000000000000185 RBX: ffffffff85e964a0 RCX: 0000000000000040
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff84aefc13
RBP: 0000000000000200 R08: 0000000000000001 R09: 0000000000000001
R10: ffffffff86438657 R11: 0000000000000001 R12: ffffffff8530f500
R13: ffffffff85e964b0 R14: 0000000000000000 R15: 0000000000000000
 should_fail_ex+0x4d7/0x5e0
 copy_folio_from_iter_atomic+0x3d3/0x1820
 generic_perform_write+0x1e9/0x820
 shmem_file_write_iter+0x111/0x140
 vfs_write+0xbe9/0x10c0
 __x64_sys_pwrite64+0x1f1/0x260
 do_syscall_64+0xbf/0x360
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f19e6af5ab7
Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b
RSP: 002b:00007f19e40b7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012
RAX: ffffffffffffffda RBX: 00007f19e6b8c970 RCX: 00007f19e6af5ab7
RDX: 00000000000000a0 RSI: 0000000020011b00 RDI: 0000000000000004
RBP: 0000000000000019 R08: 0000000000000000 R09: ffffffffffffffff
R10: 0000000000002c00 R11: 0000000000000293 R12: 0000000000000004
R13: 0000000000000004 R14: 0000000020000308 R15: 000000000000000b
 </TASK>

Allocated by task 847:
 kasan_save_stack+0x24/0x50
 kasan_save_track+0x14/0x30
 __kasan_slab_alloc+0x59/0x70
 kmem_cache_alloc_noprof+0x13c/0x470
 copy_process+0x6f3a/0x73e0
 kernel_clone+0xea/0x820
 __do_sys_clone+0xce/0x120
 do_syscall_64+0xbf/0x360
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Freed by task 34578:
 kasan_save_stack+0x24/0x50
 kasan_save_track+0x14/0x30
 kasan_save_free_info+0x3a/0x60
 __kasan_slab_free+0x38/0x50
 kmem_cache_free+0x2a1/0x460
 mmput+0x305/0x390
 do_exit+0x79d/0x2970
 do_group_exit+0xd3/0x2a0
 get_signal+0x2315/0x2340
 arch_do_signal_or_restart+0x80/0x790
 exit_to_user_mode_loop+0x8b/0x100
 do_syscall_64+0x2f7/0x360
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

The buggy address belongs to the object at ffff88803b6b1ec0
 which belongs to the cache mm_struct of size 2456
The buggy address is located 2432 bytes inside of
 freed 2456-byte region [ffff88803b6b1ec0, ffff88803b6b2858)

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3b6b0
head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
memcg:ffff88801b1bd101
anon flags: 0x100000000000040(head|node=0|zone=1)
page_type: f5(slab)
raw: 0100000000000040 ffff888008c4bc80 ffffea00007f1c00 dead000000000003
raw: 0000000000000000 00000000000c000c 00000000f5000000 ffff88801b1bd101
head: 0100000000000040 ffff888008c4bc80 ffffea00007f1c00 dead000000000003
head: 0000000000000000 00000000000c000c 00000000f5000000 ffff88801b1bd101
head: 0100000000000003 ffffea0000edac01 00000000ffffffff 00000000ffffffff
head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
page dumped because: kasan: bad access detected

Memory state around the buggy address:
 ffff88803b6b2700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff88803b6b2780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
>ffff88803b6b2800: fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc fc
                                           ^
 ffff88803b6b2880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
 ffff88803b6b2900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
==================================================================
loop0: detected capacity change from 0 to 2048
EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
loop5: detected capacity change from 0 to 512
EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #2: comm syz-executor.5: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0)
loop4: detected capacity change from 0 to 1348
EXT4-fs (loop5): get root inode failed
EXT4-fs (loop5): mount failed
loop5: detected capacity change from 0 to 512
FAULT_INJECTION: forcing a failure.
name fail_usercopy, interval 1, probability 0, space 0, times 0
CPU: 0 UID: 0 PID: 34605 Comm: syz-executor.0 Tainted: G    B               6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) 
Tainted: [B]=BAD_PAGE
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
 <TASK>
 dump_stack_lvl+0xfa/0x120
 should_fail_ex+0x4d7/0x5e0
 copy_folio_from_iter_atomic+0x3d3/0x1820
 generic_perform_write+0x1e9/0x820
 shmem_file_write_iter+0x111/0x140
 vfs_write+0xbe9/0x10c0
 __x64_sys_pwrite64+0x1f1/0x260
 do_syscall_64+0xbf/0x360
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f19e6af5ab7
Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b
RSP: 002b:00007f19e40b7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012
RAX: ffffffffffffffda RBX: 00007f19e6b8c970 RCX: 00007f19e6af5ab7
RDX: 00000000000000a0 RSI: 0000000020011c00 RDI: 0000000000000004
RBP: 0000000000000019 R08: 0000000000000000 R09: ffffffffffffffff
R10: 0000000000002d00 R11: 0000000000000293 R12: 0000000000000004
R13: 0000000000000004 R14: 0000000020000320 R15: 000000000000000c
 </TASK>
EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #2: comm syz-executor.5: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0)
EXT4-fs (loop5): get root inode failed
EXT4-fs (loop5): mount failed
loop0: detected capacity change from 0 to 2048
EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
loop5: detected capacity change from 0 to 512
loop4: detected capacity change from 0 to 1348
FAULT_INJECTION: forcing a failure.
name fail_usercopy, interval 1, probability 0, space 0, times 0
CPU: 0 UID: 0 PID: 34629 Comm: syz-executor.0 Tainted: G    B               6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) 
Tainted: [B]=BAD_PAGE
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
 <TASK>
 dump_stack_lvl+0xfa/0x120
 should_fail_ex+0x4d7/0x5e0
 copy_folio_from_iter_atomic+0x3d3/0x1820
 generic_perform_write+0x1e9/0x820
 shmem_file_write_iter+0x111/0x140
 vfs_write+0xbe9/0x10c0
 __x64_sys_pwrite64+0x1f1/0x260
 do_syscall_64+0xbf/0x360
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f19e6af5ab7
Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b
RSP: 002b:00007f19e40b7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012
RAX: ffffffffffffffda RBX: 00007f19e6b8c970 RCX: 00007f19e6af5ab7
RDX: 00000000000001a0 RSI: 0000000020011d00 RDI: 0000000000000004
RBP: 0000000000000019 R08: 0000000000000000 R09: ffffffffffffffff
R10: 0000000000002e00 R11: 0000000000000293 R12: 0000000000000004
R13: 0000000000000004 R14: 0000000020000338 R15: 000000000000000d
 </TASK>
EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #2: comm syz-executor.5: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0)
loop0: detected capacity change from 0 to 2048
EXT4-fs (loop5): get root inode failed
EXT4-fs (loop5): mount failed
EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
audit: type=1326 audit(1751271334.033:73): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=34641 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd1c9b6b19 code=0x0
EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
loop5: detected capacity change from 0 to 512
EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #2: comm syz-executor.5: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0)
EXT4-fs (loop5): get root inode failed
EXT4-fs (loop5): mount failed
FAULT_INJECTION: forcing a failure.
name fail_page_alloc, interval 1, probability 0, space 0, times 0
CPU: 0 UID: 0 PID: 34656 Comm: syz-executor.0 Tainted: G    B               6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) 
Tainted: [B]=BAD_PAGE
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
 <TASK>
 dump_stack_lvl+0xfa/0x120
 should_fail_ex+0x4d7/0x5e0
 should_fail_alloc_page+0xe0/0x110
 prepare_alloc_pages+0x1af/0x500
 __alloc_frozen_pages_noprof+0x17f/0x1f10
 alloc_pages_mpol+0xed/0x340
 folio_alloc_mpol_noprof+0x38/0x2a0
 shmem_alloc_folio+0x11b/0x140
 shmem_get_folio_gfp.constprop.0+0x4ea/0x13a0
 shmem_write_begin+0x147/0x2e0
 generic_perform_write+0x3a4/0x820
 shmem_file_write_iter+0x111/0x140
 vfs_write+0xbe9/0x10c0
 __x64_sys_pwrite64+0x1f1/0x260
 do_syscall_64+0xbf/0x360
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f19e6af5ab7
Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b
RSP: 002b:00007f19e40b7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012
RAX: ffffffffffffffda RBX: 00007f19e6b8c970 RCX: 00007f19e6af5ab7
RDX: 0000000000000100 RSI: 0000000020011f00 RDI: 0000000000000004
RBP: 0000000000000019 R08: 0000000000000000 R09: ffffffffffffffff
R10: 0000000000003000 R11: 0000000000000293 R12: 0000000000000004
R13: 0000000000000004 R14: 0000000020000350 R15: 000000000000000e
 </TASK>
loop4: detected capacity change from 0 to 1348
loop5: detected capacity change from 0 to 512
EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #2: comm syz-executor.5: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0)
loop0: detected capacity change from 0 to 2048
EXT4-fs (loop5): get root inode failed
EXT4-fs (loop5): mount failed
EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
loop4: detected capacity change from 0 to 1348
FAULT_INJECTION: forcing a failure.
name fail_usercopy, interval 1, probability 0, space 0, times 0
CPU: 1 UID: 0 PID: 34680 Comm: syz-executor.0 Tainted: G    B               6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) 
Tainted: [B]=BAD_PAGE
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
 <TASK>
 dump_stack_lvl+0xfa/0x120
 should_fail_ex+0x4d7/0x5e0
 copy_folio_from_iter_atomic+0x3d3/0x1820
 generic_perform_write+0x1e9/0x820
 shmem_file_write_iter+0x111/0x140
 vfs_write+0xbe9/0x10c0
 __x64_sys_pwrite64+0x1f1/0x260
 do_syscall_64+0xbf/0x360
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f19e6af5ab7
Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b
RSP: 002b:00007f19e40b7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012
RAX: ffffffffffffffda RBX: 00007f19e6b8c970 RCX: 00007f19e6af5ab7
RDX: 0000000000000100 RSI: 0000000020011f00 RDI: 0000000000000004
RBP: 0000000000000019 R08: 0000000000000000 R09: ffffffffffffffff
R10: 0000000000003000 R11: 0000000000000293 R12: 0000000000000004
R13: 0000000000000004 R14: 0000000020000350 R15: 000000000000000e
 </TASK>
loop0: detected capacity change from 0 to 2048
EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
audit: type=1326 audit(1751271334.866:74): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=34641 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd1c9b6b19 code=0x0
FAULT_INJECTION: forcing a failure.
name fail_page_alloc, interval 1, probability 0, space 0, times 0
CPU: 0 UID: 0 PID: 34695 Comm: syz-executor.0 Tainted: G    B               6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) 
Tainted: [B]=BAD_PAGE
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
 <TASK>
 dump_stack_lvl+0xfa/0x120
 should_fail_ex+0x4d7/0x5e0
 should_fail_alloc_page+0xe0/0x110
 prepare_alloc_pages+0x1af/0x500
 __alloc_frozen_pages_noprof+0x17f/0x1f10
 alloc_pages_mpol+0xed/0x340
 folio_alloc_mpol_noprof+0x38/0x2a0
 shmem_alloc_folio+0x11b/0x140
 shmem_get_folio_gfp.constprop.0+0x4ea/0x13a0
 shmem_write_begin+0x147/0x2e0
 generic_perform_write+0x3a4/0x820
 shmem_file_write_iter+0x111/0x140
 vfs_write+0xbe9/0x10c0
 __x64_sys_pwrite64+0x1f1/0x260
 do_syscall_64+0xbf/0x360
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f19e6af5ab7
Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b
RSP: 002b:00007f19e40b7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012
RAX: ffffffffffffffda RBX: 00007f19e6b8c970 RCX: 00007f19e6af5ab7
RDX: 0000000000000080 RSI: 0000000020012000 RDI: 0000000000000004
RBP: 0000000000000019 R08: 0000000000000000 R09: ffffffffffffffff
R10: 0000000000008000 R11: 0000000000000293 R12: 0000000000000004
R13: 0000000000000004 R14: 0000000020000368 R15: 000000000000000f
 </TASK>
audit: type=1326 audit(1751271335.052:75): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=34694 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd1c9b6b19 code=0x0
audit: type=1326 audit(1751271335.108:76): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=34710 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7bb30d1b19 code=0x0
loop0: detected capacity change from 0 to 2048
audit: type=1326 audit(1751271335.121:77): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=34714 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb7beae8b19 code=0x0
EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
FAULT_INJECTION: forcing a failure.
name fail_usercopy, interval 1, probability 0, space 0, times 0
CPU: 0 UID: 0 PID: 34731 Comm: syz-executor.0 Tainted: G    B               6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) 
Tainted: [B]=BAD_PAGE
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
 <TASK>
 dump_stack_lvl+0xfa/0x120
 should_fail_ex+0x4d7/0x5e0
 copy_folio_from_iter_atomic+0x3d3/0x1820
 generic_perform_write+0x1e9/0x820
 shmem_file_write_iter+0x111/0x140
 vfs_write+0xbe9/0x10c0
 __x64_sys_pwrite64+0x1f1/0x260
 do_syscall_64+0xbf/0x360
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f19e6af5ab7
Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b
RSP: 002b:00007f19e40b7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012
RAX: ffffffffffffffda RBX: 00007f19e6b8c970 RCX: 00007f19e6af5ab7
RDX: 0000000000000080 RSI: 0000000020012000 RDI: 0000000000000004
RBP: 0000000000000019 R08: 0000000000000000 R09: ffffffffffffffff
R10: 0000000000008000 R11: 0000000000000293 R12: 0000000000000004
R13: 0000000000000004 R14: 0000000020000368 R15: 000000000000000f
 </TASK>
loop0: detected capacity change from 0 to 2048
audit: type=1326 audit(1751271336.039:78): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=34734 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd1c9b6b19 code=0x0
EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
audit: type=1326 audit(1751271336.067:79): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=34740 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb7beae8b19 code=0x0
audit: type=1326 audit(1751271336.068:80): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=34728 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7bb30d1b19 code=0x0
EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
FAULT_INJECTION: forcing a failure.
name fail_page_alloc, interval 1, probability 0, space 0, times 0
CPU: 0 UID: 0 PID: 34753 Comm: syz-executor.0 Tainted: G    B               6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) 
Tainted: [B]=BAD_PAGE
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
 <TASK>
 dump_stack_lvl+0xfa/0x120
 should_fail_ex+0x4d7/0x5e0
 should_fail_alloc_page+0xe0/0x110
 prepare_alloc_pages+0x1af/0x500
 __alloc_frozen_pages_noprof+0x17f/0x1f10
 alloc_pages_mpol+0xed/0x340
 folio_alloc_mpol_noprof+0x38/0x2a0
 shmem_alloc_folio+0x11b/0x140
 shmem_get_folio_gfp.constprop.0+0x4ea/0x13a0
 shmem_write_begin+0x147/0x2e0
 generic_perform_write+0x3a4/0x820
 shmem_file_write_iter+0x111/0x140
 vfs_write+0xbe9/0x10c0
 __x64_sys_pwrite64+0x1f1/0x260
 do_syscall_64+0xbf/0x360
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f19e6af5ab7
Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b
RSP: 002b:00007f19e40b7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012
RAX: ffffffffffffffda RBX: 00007f19e6b8c970 RCX: 00007f19e6af5ab7
RDX: 0000000000000020 RSI: 0000000020012100 RDI: 0000000000000004
RBP: 0000000000000019 R08: 0000000000000000 R09: ffffffffffffffff
R10: 0000000000010000 R11: 0000000000000293 R12: 0000000000000004
R13: 0000000000000004 R14: 0000000020000380 R15: 0000000000000010
 </TASK>
loop0: detected capacity change from 0 to 2048
EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
FAULT_INJECTION: forcing a failure.
name fail_usercopy, interval 1, probability 0, space 0, times 0
CPU: 1 UID: 0 PID: 34781 Comm: syz-executor.0 Tainted: G    B               6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) 
Tainted: [B]=BAD_PAGE
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
 <TASK>
 dump_stack_lvl+0xfa/0x120
 should_fail_ex+0x4d7/0x5e0
 copy_folio_from_iter_atomic+0x3d3/0x1820
 generic_perform_write+0x1e9/0x820
 shmem_file_write_iter+0x111/0x140
 vfs_write+0xbe9/0x10c0
 __x64_sys_pwrite64+0x1f1/0x260
 do_syscall_64+0xbf/0x360
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f19e6af5ab7
Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b
RSP: 002b:00007f19e40b7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012
RAX: ffffffffffffffda RBX: 00007f19e6b8c970 RCX: 00007f19e6af5ab7
RDX: 0000000000000020 RSI: 0000000020012100 RDI: 0000000000000004
RBP: 0000000000000019 R08: 0000000000000000 R09: ffffffffffffffff
R10: 0000000000010000 R11: 0000000000000293 R12: 0000000000000004
R13: 0000000000000004 R14: 0000000020000380 R15: 0000000000000010
 </TASK>
audit: type=1326 audit(1751271336.961:81): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=34769 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7bb30d1b19 code=0x0
audit: type=1326 audit(1751271336.987:82): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=34779 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb7beae8b19 code=0x0
loop0: detected capacity change from 0 to 2048
EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
No source specified
No source specified
No source specified
FAULT_INJECTION: forcing a failure.
name fail_usercopy, interval 1, probability 0, space 0, times 0
CPU: 1 UID: 0 PID: 34804 Comm: syz-executor.0 Tainted: G    B               6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) 
Tainted: [B]=BAD_PAGE
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
 <TASK>
 dump_stack_lvl+0xfa/0x120
 should_fail_ex+0x4d7/0x5e0
 copy_folio_from_iter_atomic+0x3d3/0x1820
 generic_perform_write+0x1e9/0x820
 shmem_file_write_iter+0x111/0x140
 vfs_write+0xbe9/0x10c0
 __x64_sys_pwrite64+0x1f1/0x260
 do_syscall_64+0xbf/0x360
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f19e6af5ab7
Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b
RSP: 002b:00007f19e40b7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012
RAX: ffffffffffffffda RBX: 00007f19e6b8c970 RCX: 00007f19e6af5ab7
RDX: 0000000000000020 RSI: 0000000020012200 RDI: 0000000000000004
RBP: 0000000000000019 R08: 0000000000000000 R09: ffffffffffffffff
R10: 0000000000010800 R11: 0000000000000293 R12: 0000000000000004
R13: 0000000000000004 R14: 0000000020000398 R15: 0000000000000011
 </TASK>
loop0: detected capacity change from 0 to 2048
EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
FAULT_INJECTION: forcing a failure.
name fail_page_alloc, interval 1, probability 0, space 0, times 0
No source specified
CPU: 0 UID: 0 PID: 34819 Comm: syz-executor.0 Tainted: G    B               6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) 
Tainted: [B]=BAD_PAGE
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
 <TASK>
 dump_stack_lvl+0xfa/0x120
 should_fail_ex+0x4d7/0x5e0
 should_fail_alloc_page+0xe0/0x110
 prepare_alloc_pages+0x1af/0x500
 __alloc_frozen_pages_noprof+0x17f/0x1f10
 alloc_pages_mpol+0xed/0x340
 folio_alloc_mpol_noprof+0x38/0x2a0
 shmem_alloc_folio+0x11b/0x140
 shmem_get_folio_gfp.constprop.0+0x4ea/0x13a0
 shmem_write_begin+0x147/0x2e0
 generic_perform_write+0x3a4/0x820
 shmem_file_write_iter+0x111/0x140
 vfs_write+0xbe9/0x10c0
 __x64_sys_pwrite64+0x1f1/0x260
 do_syscall_64+0xbf/0x360
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f19e6af5ab7
Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b
RSP: 002b:00007f19e40b7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012
RAX: ffffffffffffffda RBX: 00007f19e6b8c970 RCX: 00007f19e6af5ab7
RDX: 0000000000000020 RSI: 0000000020012300 RDI: 0000000000000004
RBP: 0000000000000019 R08: 0000000000000000 R09: ffffffffffffffff
R10: 0000000000011000 R11: 0000000000000293 R12: 0000000000000004
R13: 0000000000000004 R14: 00000000200003b0 R15: 0000000000000012
 </TASK>
loop0: detected capacity change from 0 to 2048
EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
No source specified
FAULT_INJECTION: forcing a failure.
name fail_usercopy, interval 1, probability 0, space 0, times 0
CPU: 1 UID: 0 PID: 34849 Comm: syz-executor.0 Tainted: G    B               6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) 
Tainted: [B]=BAD_PAGE
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
 <TASK>
 dump_stack_lvl+0xfa/0x120
 should_fail_ex+0x4d7/0x5e0
 copy_folio_from_iter_atomic+0x3d3/0x1820
 generic_perform_write+0x1e9/0x820
 shmem_file_write_iter+0x111/0x140
 vfs_write+0xbe9/0x10c0
 __x64_sys_pwrite64+0x1f1/0x260
 do_syscall_64+0xbf/0x360
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f19e6af5ab7
Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b
RSP: 002b:00007f19e40b7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012
RAX: ffffffffffffffda RBX: 00007f19e6b8c970 RCX: 00007f19e6af5ab7
RDX: 0000000000000020 RSI: 0000000020012300 RDI: 0000000000000004
RBP: 0000000000000019 R08: 0000000000000000 R09: ffffffffffffffff
R10: 0000000000011000 R11: 0000000000000293 R12: 0000000000000004
R13: 0000000000000004 R14: 00000000200003b0 R15: 0000000000000012
 </TASK>
loop0: detected capacity change from 0 to 2048
EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
FAULT_INJECTION: forcing a failure.
name fail_usercopy, interval 1, probability 0, space 0, times 0
CPU: 0 UID: 0 PID: 34868 Comm: syz-executor.0 Tainted: G    B               6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) 
Tainted: [B]=BAD_PAGE
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
 <TASK>
 dump_stack_lvl+0xfa/0x120
 should_fail_ex+0x4d7/0x5e0
 copy_folio_from_iter_atomic+0x3d3/0x1820
 generic_perform_write+0x1e9/0x820
 shmem_file_write_iter+0x111/0x140
 vfs_write+0xbe9/0x10c0
 __x64_sys_pwrite64+0x1f1/0x260
 do_syscall_64+0xbf/0x360
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f19e6af5ab7
Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b
RSP: 002b:00007f19e40b7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012
RAX: ffffffffffffffda RBX: 00007f19e6b8c970 RCX: 00007f19e6af5ab7
RDX: 0000000000000020 RSI: 0000000020012400 RDI: 0000000000000004
RBP: 0000000000000019 R08: 0000000000000000 R09: ffffffffffffffff
R10: 0000000000011800 R11: 0000000000000293 R12: 0000000000000004
R13: 0000000000000004 R14: 00000000200003c8 R15: 0000000000000013
 </TASK>
loop0: detected capacity change from 0 to 2048
EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
FAULT_INJECTION: forcing a failure.
name fail_page_alloc, interval 1, probability 0, space 0, times 0
CPU: 0 UID: 0 PID: 34900 Comm: syz-executor.0 Tainted: G    B               6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) 
Tainted: [B]=BAD_PAGE
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
 <TASK>
 dump_stack_lvl+0xfa/0x120
 should_fail_ex+0x4d7/0x5e0
 should_fail_alloc_page+0xe0/0x110
 prepare_alloc_pages+0x1af/0x500
 __alloc_frozen_pages_noprof+0x17f/0x1f10
 alloc_pages_mpol+0xed/0x340
 folio_alloc_mpol_noprof+0x38/0x2a0
 shmem_alloc_folio+0x11b/0x140
 shmem_get_folio_gfp.constprop.0+0x4ea/0x13a0
 shmem_write_begin+0x147/0x2e0
 generic_perform_write+0x3a4/0x820
 shmem_file_write_iter+0x111/0x140
 vfs_write+0xbe9/0x10c0
 __x64_sys_pwrite64+0x1f1/0x260
 do_syscall_64+0xbf/0x360
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f19e6af5ab7
Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b
RSP: 002b:00007f19e40b7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012
RAX: ffffffffffffffda RBX: 00007f19e6b8c970 RCX: 00007f19e6af5ab7
RDX: 0000000000000020 RSI: 0000000020012500 RDI: 0000000000000004
RBP: 0000000000000019 R08: 0000000000000000 R09: ffffffffffffffff
R10: 0000000000012000 R11: 0000000000000293 R12: 0000000000000004
R13: 0000000000000004 R14: 00000000200003e0 R15: 0000000000000014
 </TASK>
tmpfs: Bad value for 'mpol'
tmpfs: Bad value for 'mpol'
loop0: detected capacity change from 0 to 2048
EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
FAULT_INJECTION: forcing a failure.
name fail_usercopy, interval 1, probability 0, space 0, times 0
CPU: 1 UID: 0 PID: 34934 Comm: syz-executor.0 Tainted: G    B               6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) 
Tainted: [B]=BAD_PAGE
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
 <TASK>
 dump_stack_lvl+0xfa/0x120
 should_fail_ex+0x4d7/0x5e0
 copy_folio_from_iter_atomic+0x3d3/0x1820
 generic_perform_write+0x1e9/0x820
 shmem_file_write_iter+0x111/0x140
 vfs_write+0xbe9/0x10c0
 __x64_sys_pwrite64+0x1f1/0x260
 do_syscall_64+0xbf/0x360
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f19e6af5ab7
Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b
RSP: 002b:00007f19e40b7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012
RAX: ffffffffffffffda RBX: 00007f19e6b8c970 RCX: 00007f19e6af5ab7
RDX: 0000000000000020 RSI: 0000000020012500 RDI: 0000000000000004
RBP: 0000000000000019 R08: 0000000000000000 R09: ffffffffffffffff
R10: 0000000000012000 R11: 0000000000000293 R12: 0000000000000004
R13: 0000000000000004 R14: 00000000200003e0 R15: 0000000000000014
 </TASK>
loop0: detected capacity change from 0 to 2048
FAULT_INJECTION: forcing a failure.
name fail_usercopy, interval 1, probability 0, space 0, times 0
CPU: 1 UID: 0 PID: 34949 Comm: syz-executor.0 Tainted: G    B               6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) 
Tainted: [B]=BAD_PAGE
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
 <TASK>
 dump_stack_lvl+0xfa/0x120
 should_fail_ex+0x4d7/0x5e0
 copy_folio_from_iter_atomic+0x3d3/0x1820
 generic_perform_write+0x1e9/0x820
 shmem_file_write_iter+0x111/0x140
 vfs_write+0xbe9/0x10c0
 __x64_sys_pwrite64+0x1f1/0x260
 do_syscall_64+0xbf/0x360
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f19e6af5ab7
Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b
RSP: 002b:00007f19e40b7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012
RAX: ffffffffffffffda RBX: 00007f19e6b8c970 RCX: 00007f19e6af5ab7
RDX: 0000000000000020 RSI: 0000000020012600 RDI: 0000000000000004
RBP: 0000000000000019 R08: 0000000000000000 R09: ffffffffffffffff
R10: 0000000000012800 R11: 0000000000000293 R12: 0000000000000004
R13: 0000000000000004 R14: 00000000200003f8 R15: 0000000000000015
 </TASK>
loop0: detected capacity change from 0 to 2048
FAULT_INJECTION: forcing a failure.
name fail_page_alloc, interval 1, probability 0, space 0, times 0
CPU: 0 UID: 0 PID: 34973 Comm: syz-executor.0 Tainted: G    B               6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) 
Tainted: [B]=BAD_PAGE
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
 <TASK>
 dump_stack_lvl+0xfa/0x120
 should_fail_ex+0x4d7/0x5e0
 should_fail_alloc_page+0xe0/0x110
 prepare_alloc_pages+0x1af/0x500
 __alloc_frozen_pages_noprof+0x17f/0x1f10
 alloc_pages_mpol+0xed/0x340
 folio_alloc_mpol_noprof+0x38/0x2a0
 shmem_alloc_folio+0x11b/0x140
 shmem_get_folio_gfp.constprop.0+0x4ea/0x13a0
 shmem_write_begin+0x147/0x2e0
 generic_perform_write+0x3a4/0x820
 shmem_file_write_iter+0x111/0x140
 vfs_write+0xbe9/0x10c0
 __x64_sys_pwrite64+0x1f1/0x260
 do_syscall_64+0xbf/0x360
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f19e6af5ab7
Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b
RSP: 002b:00007f19e40b7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012
RAX: ffffffffffffffda RBX: 00007f19e6b8c970 RCX: 00007f19e6af5ab7
RDX: 0000000000000020 RSI: 0000000020012700 RDI: 0000000000000004
RBP: 0000000000000019 R08: 0000000000000000 R09: ffffffffffffffff
R10: 0000000000013000 R11: 0000000000000293 R12: 0000000000000004
R13: 0000000000000004 R14: 0000000020000410 R15: 0000000000000016
 </TASK>
loop0: detected capacity change from 0 to 2048
FAULT_INJECTION: forcing a failure.
name fail_usercopy, interval 1, probability 0, space 0, times 0
CPU: 1 UID: 0 PID: 35004 Comm: syz-executor.0 Tainted: G    B               6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) 
Tainted: [B]=BAD_PAGE
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
 <TASK>
 dump_stack_lvl+0xfa/0x120
 should_fail_ex+0x4d7/0x5e0
 copy_folio_from_iter_atomic+0x3d3/0x1820
 generic_perform_write+0x1e9/0x820
 shmem_file_write_iter+0x111/0x140
 vfs_write+0xbe9/0x10c0
 __x64_sys_pwrite64+0x1f1/0x260
 do_syscall_64+0xbf/0x360
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f19e6af5ab7
Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b
RSP: 002b:00007f19e40b7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012
RAX: ffffffffffffffda RBX: 00007f19e6b8c970 RCX: 00007f19e6af5ab7
RDX: 0000000000000020 RSI: 0000000020012700 RDI: 0000000000000004
RBP: 0000000000000019 R08: 0000000000000000 R09: ffffffffffffffff
R10: 0000000000013000 R11: 0000000000000293 R12: 0000000000000004
R13: 0000000000000004 R14: 0000000020000410 R15: 0000000000000016
 </TASK>
loop0: detected capacity change from 0 to 2048
FAULT_INJECTION: forcing a failure.
name fail_page_alloc, interval 1, probability 0, space 0, times 0
CPU: 1 UID: 0 PID: 35021 Comm: syz-executor.0 Tainted: G    B               6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) 
Tainted: [B]=BAD_PAGE
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
 <TASK>
 dump_stack_lvl+0xfa/0x120
 should_fail_ex+0x4d7/0x5e0
 should_fail_alloc_page+0xe0/0x110
 prepare_alloc_pages+0x1af/0x500
 __alloc_frozen_pages_noprof+0x17f/0x1f10
 alloc_pages_mpol+0xed/0x340
 folio_alloc_mpol_noprof+0x38/0x2a0
 shmem_alloc_folio+0x11b/0x140
 shmem_get_folio_gfp.constprop.0+0x4ea/0x13a0
 shmem_write_begin+0x147/0x2e0
 generic_perform_write+0x3a4/0x820
 shmem_file_write_iter+0x111/0x140
 vfs_write+0xbe9/0x10c0
 __x64_sys_pwrite64+0x1f1/0x260
 do_syscall_64+0xbf/0x360
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f19e6af5ab7
Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b
RSP: 002b:00007f19e40b7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012
RAX: ffffffffffffffda RBX: 00007f19e6b8c970 RCX: 00007f19e6af5ab7
RDX: 0000000000000080 RSI: 0000000020012800 RDI: 0000000000000004
RBP: 0000000000000019 R08: 0000000000000000 R09: ffffffffffffffff
R10: 0000000000020000 R11: 0000000000000293 R12: 0000000000000004
R13: 0000000000000004 R14: 0000000020000428 R15: 0000000000000017
 </TASK>
loop0: detected capacity change from 0 to 2048
EXT4-fs warning (device loop0): read_mmp_block:114: Error -117 while reading MMP block 64
FAULT_INJECTION: forcing a failure.
name fail_usercopy, interval 1, probability 0, space 0, times 0
CPU: 1 UID: 0 PID: 35034 Comm: syz-executor.0 Tainted: G    B               6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) 
Tainted: [B]=BAD_PAGE
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
 <TASK>
 dump_stack_lvl+0xfa/0x120
 should_fail_ex+0x4d7/0x5e0
 copy_folio_from_iter_atomic+0x3d3/0x1820
 generic_perform_write+0x1e9/0x820
 shmem_file_write_iter+0x111/0x140
 vfs_write+0xbe9/0x10c0
 __x64_sys_pwrite64+0x1f1/0x260
 do_syscall_64+0xbf/0x360
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f19e6af5ab7
Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b
RSP: 002b:00007f19e40b7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012
RAX: ffffffffffffffda RBX: 00007f19e6b8c970 RCX: 00007f19e6af5ab7
RDX: 0000000000000080 RSI: 0000000020012800 RDI: 0000000000000004
RBP: 0000000000000019 R08: 0000000000000000 R09: ffffffffffffffff
R10: 0000000000020000 R11: 0000000000000293 R12: 0000000000000004
R13: 0000000000000004 R14: 0000000020000428 R15: 0000000000000017
 </TASK>
loop0: detected capacity change from 0 to 2048
FAULT_INJECTION: forcing a failure.
name fail_page_alloc, interval 1, probability 0, space 0, times 0
CPU: 1 UID: 0 PID: 35048 Comm: syz-executor.0 Tainted: G    B               6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) 
Tainted: [B]=BAD_PAGE
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
 <TASK>
 dump_stack_lvl+0xfa/0x120
 should_fail_ex+0x4d7/0x5e0
 should_fail_alloc_page+0xe0/0x110
 prepare_alloc_pages+0x1af/0x500
 __alloc_frozen_pages_noprof+0x17f/0x1f10
 alloc_pages_mpol+0xed/0x340
 folio_alloc_mpol_noprof+0x38/0x2a0
 shmem_alloc_folio+0x11b/0x140
 shmem_get_folio_gfp.constprop.0+0x4ea/0x13a0
 shmem_write_begin+0x147/0x2e0
 generic_perform_write+0x3a4/0x820
 shmem_file_write_iter+0x111/0x140
 vfs_write+0xbe9/0x10c0
 __x64_sys_pwrite64+0x1f1/0x260
 do_syscall_64+0xbf/0x360
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f19e6af5ab7
Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b
RSP: 002b:00007f19e40b7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012
RAX: ffffffffffffffda RBX: 00007f19e6b8c970 RCX: 00007f19e6af5ab7
RDX: 0000000000000420 RSI: 0000000020012900 RDI: 0000000000000004
RBP: 0000000000000019 R08: 0000000000000000 R09: ffffffffffffffff
R10: 0000000000028000 R11: 0000000000000293 R12: 0000000000000004
R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000018
 </TASK>
loop0: detected capacity change from 0 to 2048
loop5: detected capacity change from 0 to 512
EXT4-fs error (device loop5): __ext4_fill_super:5500: inode #2: comm syz-executor.5: iget: special inode unallocated
EXT4-fs (loop5): get root inode failed
EXT4-fs (loop5): mount failed
loop5: detected capacity change from 0 to 512
EXT4-fs error (device loop5): __ext4_fill_super:5500: inode #2: comm syz-executor.5: iget: special inode unallocated
EXT4-fs (loop5): get root inode failed
EXT4-fs (loop5): mount failed
FAULT_INJECTION: forcing a failure.
name fail_usercopy, interval 1, probability 0, space 0, times 0
CPU: 0 UID: 0 PID: 35072 Comm: syz-executor.0 Tainted: G    B               6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) 
Tainted: [B]=BAD_PAGE
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
 <TASK>
 dump_stack_lvl+0xfa/0x120
 should_fail_ex+0x4d7/0x5e0
 copy_folio_from_iter_atomic+0x3d3/0x1820
 generic_perform_write+0x1e9/0x820
 shmem_file_write_iter+0x111/0x140
 vfs_write+0xbe9/0x10c0
 __x64_sys_pwrite64+0x1f1/0x260
 do_syscall_64+0xbf/0x360
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f19e6af5ab7
Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b
RSP: 002b:00007f19e40b7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012
RAX: ffffffffffffffda RBX: 00007f19e6b8c970 RCX: 00007f19e6af5ab7
RDX: 0000000000000420 RSI: 0000000020012900 RDI: 0000000000000004
RBP: 0000000000000019 R08: 0000000000000000 R09: ffffffffffffffff
R10: 0000000000028000 R11: 0000000000000293 R12: 0000000000000004
R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000018
 </TASK>
loop5: detected capacity change from 0 to 512
loop0: detected capacity change from 0 to 2048
EXT4-fs error (device loop5): __ext4_fill_super:5500: inode #2: comm syz-executor.5: iget: special inode unallocated
EXT4-fs (loop5): get root inode failed
EXT4-fs (loop5): mount failed
loop4: detected capacity change from 0 to 4
EXT4-fs (loop4): unsupported descriptor size 262
loop5: detected capacity change from 0 to 512
EXT4-fs error (device loop5): __ext4_fill_super:5500: inode #2: comm syz-executor.5: iget: special inode unallocated
EXT4-fs (loop5): get root inode failed
EXT4-fs (loop5): mount failed
loop4: detected capacity change from 0 to 4
EXT4-fs (loop4): unsupported descriptor size 262
loop5: detected capacity change from 0 to 512
EXT4-fs error (device loop5): __ext4_fill_super:5500: inode #2: comm syz-executor.5: iget: special inode unallocated
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 0, space 0, times 0
CPU: 0 UID: 0 PID: 35112 Comm: syz-executor.0 Tainted: G    B               6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) 
Tainted: [B]=BAD_PAGE
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
 <TASK>
 dump_stack_lvl+0xfa/0x120
 should_fail_ex+0x4d7/0x5e0
 should_failslab+0xc2/0x120
 kmem_cache_alloc_noprof+0x5f/0x470
 getname_flags.part.0+0x48/0x540
 getname_flags+0x95/0xe0
 do_sys_openat2+0x9f/0x1b0
 __x64_sys_openat+0x142/0x200
 do_syscall_64+0xbf/0x360
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f19e6af5a04
Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44
RSP: 002b:00007f19e40b7ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007f19e6b8c970 RCX: 00007f19e6af5a04
RDX: 0000000000000002 RSI: 00007f19e40b8000 RDI: 00000000ffffff9c
RBP: 00007f19e40b8000 R08: 0000000000000000 R09: ffffffffffffffff
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
R13: 0000000000000004 R14: 0000000020000458 R15: 0000000000000019
 </TASK>
EXT4-fs (loop5): get root inode failed
EXT4-fs (loop5): mount failed
loop0: detected capacity change from 0 to 2048
UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
misc raw-gadget: fail, usb_gadget_register_driver returned -16
FAULT_INJECTION: forcing a failure.
name fail_usercopy, interval 1, probability 0, space 0, times 0
CPU: 1 UID: 0 PID: 35151 Comm: syz-executor.0 Tainted: G    B               6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) 
Tainted: [B]=BAD_PAGE
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
 <TASK>
 dump_stack_lvl+0xfa/0x120
 should_fail_ex+0x4d7/0x5e0
 strncpy_from_user+0x3b/0x2f0
 getname_flags.part.0+0x8d/0x540
 getname_flags+0x95/0xe0
 do_sys_openat2+0x9f/0x1b0
 __x64_sys_openat+0x142/0x200
 do_syscall_64+0xbf/0x360
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f19e6af5a04
Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44
RSP: 002b:00007f19e40b7ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007f19e6b8c970 RCX: 00007f19e6af5a04
RDX: 0000000000000002 RSI: 00007f19e40b8000 RDI: 00000000ffffff9c
RBP: 00007f19e40b8000 R08: 0000000000000000 R09: ffffffffffffffff
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
R13: 0000000000000004 R14: 0000000020000458 R15: 0000000000000019
 </TASK>
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 0, space 0, times 0
CPU: 1 UID: 0 PID: 35156 Comm: syz-executor.0 Tainted: G    B               6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) 
Tainted: [B]=BAD_PAGE
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
 <TASK>
 dump_stack_lvl+0xfa/0x120
 should_fail_ex+0x4d7/0x5e0
 should_failslab+0xc2/0x120
 kmem_cache_alloc_noprof+0x5f/0x470
 alloc_empty_file+0x58/0x1e0
 path_openat+0xe0/0x2880
 do_filp_open+0x1e8/0x450
 do_sys_openat2+0x104/0x1b0
 __x64_sys_openat+0x142/0x200
 do_syscall_64+0xbf/0x360
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f19e6af5a04
Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44
RSP: 002b:00007f19e40b7ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007f19e6b8c970 RCX: 00007f19e6af5a04
RDX: 0000000000000002 RSI: 00007f19e40b8000 RDI: 00000000ffffff9c
RBP: 00007f19e40b8000 R08: 0000000000000000 R09: ffffffffffffffff
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
R13: 0000000000000004 R14: 0000000020000458 R15: 0000000000000019
 </TASK>
UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
misc raw-gadget: fail, usb_gadget_register_driver returned -16
loop0: detected capacity change from 0 to 2048
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 0, space 0, times 0
CPU: 1 UID: 0 PID: 35199 Comm: syz-executor.0 Tainted: G    B               6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) 
Tainted: [B]=BAD_PAGE
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
 <TASK>
 dump_stack_lvl+0xfa/0x120
 should_fail_ex+0x4d7/0x5e0
 should_failslab+0xc2/0x120
 kmem_cache_alloc_noprof+0x5f/0x470
 security_file_alloc+0x35/0x130
 init_file+0x95/0x4c0
 alloc_empty_file+0x76/0x1e0
 path_openat+0xe0/0x2880
 do_filp_open+0x1e8/0x450
 do_sys_openat2+0x104/0x1b0
 __x64_sys_openat+0x142/0x200
 do_syscall_64+0xbf/0x360
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f19e6af5a04
Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44
RSP: 002b:00007f19e40b7ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007f19e6b8c970 RCX: 00007f19e6af5a04
RDX: 0000000000000002 RSI: 00007f19e40b8000 RDI: 00000000ffffff9c
RBP: 00007f19e40b8000 R08: 0000000000000000 R09: ffffffffffffffff
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
R13: 0000000000000004 R14: 0000000020000458 R15: 0000000000000019
 </TASK>
loop0: detected capacity change from 0 to 2048
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 0, space 0, times 0
CPU: 1 UID: 0 PID: 35229 Comm: syz-executor.0 Tainted: G    B               6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) 
Tainted: [B]=BAD_PAGE
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
 <TASK>
 dump_stack_lvl+0xfa/0x120
 should_fail_ex+0x4d7/0x5e0
 should_failslab+0xc2/0x120
 kmem_cache_alloc_noprof+0x5f/0x470
 __kernfs_new_node+0xd3/0x870
 kernfs_new_node+0x13c/0x1e0
 kernfs_create_dir_ns+0x4d/0x1a0
 internal_create_group+0xa7f/0xeb0
 loop_configure+0xc64/0x16f0
 lo_ioctl+0x1066/0x2780
 blkdev_ioctl+0x27c/0x6c0
 __x64_sys_ioctl+0x18f/0x210
 do_syscall_64+0xbf/0x360
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f19e6b428d7
Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f19e40b7f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f19e6b8c970 RCX: 00007f19e6b428d7
RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
R13: 0000000000000004 R14: 0000000020000458 R15: 0000000000000019
 </TASK>
loop0: detected capacity change from 0 to 2048
loop2: detected capacity change from 0 to 544
EXT4-fs error (device loop2): __ext4_fill_super:5500: inode #2: comm syz-executor.2: iget: special inode unallocated
EXT4-fs (loop2): get root inode failed
EXT4-fs (loop2): mount failed
loop2: detected capacity change from 0 to 544
EXT4-fs error (device loop2): __ext4_fill_super:5500: inode #2: comm syz-executor.2: iget: special inode unallocated
EXT4-fs (loop2): get root inode failed
EXT4-fs (loop2): mount failed
loop0: detected capacity change from 0 to 2048
loop7: detected capacity change from 0 to 512
EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)!
EXT4-fs (loop7): group descriptors corrupted!
loop7: detected capacity change from 0 to 512
EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)!
EXT4-fs (loop7): group descriptors corrupted!
loop0: detected capacity change from 0 to 2048
loop0: detected capacity change from 0 to 2048
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 0, space 0, times 0
CPU: 1 UID: 0 PID: 35308 Comm: syz-executor.0 Tainted: G    B               6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) 
Tainted: [B]=BAD_PAGE
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
 <TASK>
 dump_stack_lvl+0xfa/0x120
 should_fail_ex+0x4d7/0x5e0
 should_failslab+0xc2/0x120
 kmem_cache_alloc_noprof+0x5f/0x470
 __kernfs_new_node+0xd3/0x870
 kernfs_new_node+0x13c/0x1e0
 __kernfs_create_file+0x55/0x360
 sysfs_add_file_mode_ns+0x21c/0x440
 internal_create_group+0x571/0xeb0
 loop_configure+0xc64/0x16f0
 lo_ioctl+0x1066/0x2780
 blkdev_ioctl+0x27c/0x6c0
 __x64_sys_ioctl+0x18f/0x210
 do_syscall_64+0xbf/0x360
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f19e6b428d7
Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f19e40b7f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f19e6b8c970 RCX: 00007f19e6b428d7
RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
R13: 0000000000000004 R14: 0000000020000458 R15: 0000000000000019
 </TASK>
loop0: detected capacity change from 0 to 2048
loop0: detected capacity change from 0 to 2048
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 0, space 0, times 0
CPU: 0 UID: 0 PID: 35344 Comm: syz-executor.0 Tainted: G    B               6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) 
Tainted: [B]=BAD_PAGE
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
 <TASK>
 dump_stack_lvl+0xfa/0x120
 should_fail_ex+0x4d7/0x5e0
 should_failslab+0xc2/0x120
 kmem_cache_alloc_noprof+0x5f/0x470
 __kernfs_new_node+0xd3/0x870
 kernfs_new_node+0x13c/0x1e0
 __kernfs_create_file+0x55/0x360
 sysfs_add_file_mode_ns+0x21c/0x440
 internal_create_group+0x571/0xeb0
 loop_configure+0xc64/0x16f0
 lo_ioctl+0x1066/0x2780
 blkdev_ioctl+0x27c/0x6c0
 __x64_sys_ioctl+0x18f/0x210
 do_syscall_64+0xbf/0x360
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f19e6b428d7
Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f19e40b7f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f19e6b8c970 RCX: 00007f19e6b428d7
RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
R13: 0000000000000004 R14: 0000000020000458 R15: 0000000000000019
 </TASK>
loop0: detected capacity change from 0 to 2048
kauditd_printk_skb: 1 callbacks suppressed
audit: type=1400 audit(1751271342.681:84): avc:  denied  { module_load } for  pid=35360 comm="syz-executor.2" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=1657 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=system permissive=1
Invalid ELF header magic: != ELF
loop0: detected capacity change from 0 to 2048
Invalid ELF header magic: != ELF
Invalid ELF header magic: != ELF
Invalid ELF header magic: != ELF
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 0, space 0, times 0
CPU: 1 UID: 0 PID: 35398 Comm: syz-executor.0 Tainted: G    B               6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) 
Tainted: [B]=BAD_PAGE
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
 <TASK>
 dump_stack_lvl+0xfa/0x120
 should_fail_ex+0x4d7/0x5e0
 should_failslab+0xc2/0x120
 kmem_cache_alloc_noprof+0x5f/0x470
 __kernfs_new_node+0xd3/0x870
 kernfs_new_node+0x13c/0x1e0
 __kernfs_create_file+0x55/0x360
 sysfs_add_file_mode_ns+0x21c/0x440
 internal_create_group+0x571/0xeb0
 loop_configure+0xc64/0x16f0
 lo_ioctl+0x1066/0x2780
 blkdev_ioctl+0x27c/0x6c0
 __x64_sys_ioctl+0x18f/0x210
 do_syscall_64+0xbf/0x360
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f19e6b428d7
Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f19e40b7f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f19e6b8c970 RCX: 00007f19e6b428d7
RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
R13: 0000000000000004 R14: 0000000020000458 R15: 0000000000000019
 </TASK>
loop0: detected capacity change from 0 to 2048
Invalid ELF header magic: != ELF
Invalid ELF header magic: != ELF
loop0: detected capacity change from 0 to 2048
Invalid ELF header magic: != ELF
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 0, space 0, times 0
CPU: 0 UID: 0 PID: 35443 Comm: syz-executor.0 Tainted: G    B               6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) 
Tainted: [B]=BAD_PAGE
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
 <TASK>
 dump_stack_lvl+0xfa/0x120
 should_fail_ex+0x4d7/0x5e0
 should_failslab+0xc2/0x120
 kmem_cache_alloc_noprof+0x5f/0x470
 __kernfs_new_node+0xd3/0x870
 kernfs_new_node+0x13c/0x1e0
 __kernfs_create_file+0x55/0x360
 sysfs_add_file_mode_ns+0x21c/0x440
 internal_create_group+0x571/0xeb0
 loop_configure+0xc64/0x16f0
 lo_ioctl+0x1066/0x2780
 blkdev_ioctl+0x27c/0x6c0
 __x64_sys_ioctl+0x18f/0x210
 do_syscall_64+0xbf/0x360
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f19e6b428d7
Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f19e40b7f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f19e6b8c970 RCX: 00007f19e6b428d7
RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
R13: 0000000000000004 R14: 0000000020000458 R15: 0000000000000019
 </TASK>
loop0: detected capacity change from 0 to 2048
----------------
Code disassembly (best guess):
   0:	c8 83 83 3c          	enterq $0x8383,$0x3c
   4:	0a 00                	or     (%rax),%al
   6:	00 01                	add    %al,(%rcx)
   8:	c7 44 24 20 0a 00 00 	movl   $0xa,0x20(%rsp)
   f:	00
  10:	48 89 44 24 18       	mov    %rax,0x18(%rsp)
  15:	65 66 c7 05 cf 84 47 	movw   $0x0,%gs:0x64784cf(%rip)        # 0x64784ee
  1c:	06 00 00
  1f:	e8 22 65 40 00       	callq  0x406546
  24:	fb                   	sti
  25:	bb ff ff ff ff       	mov    $0xffffffff,%ebx
* 2a:	48 c7 c5 c0 c0 a0 85 	mov    $0xffffffff85a0c0c0,%rbp <-- trapping instruction
  31:	41 0f bc de          	bsf    %r14d,%ebx
  35:	83 c3 01             	add    $0x1,%ebx
  38:	0f 85 9b 00 00 00    	jne    0xd9
  3e:	e9                   	.byte 0xe9
  3f:	8d                   	.byte 0x8d