program: r0 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x80800) dup(r0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x8, &(0x7f0000000000), 0x1, 0x51a, &(0x7f0000001200)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f00000000c0)='./file2\x00', r1, &(0x7f0000000100)='./file1\x00', 0x2) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) syz_usb_connect(0x0, 0x24, &(0x7f0000002440)={{0x12, 0x1, 0x0, 0xf5, 0x9a, 0x55, 0x20, 0x50d, 0x122, 0x9a5e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1b, 0x0, 0x0, 0x1c, 0x45, 0x35}}]}}]}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r4 = socket$rds(0x15, 0x5, 0x0) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8927, &(0x7f0000000000)={'vxcan1\x00', 0x0}) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r7, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000900)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x20}}, {{&(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}}}], 0x20}}], 0x2, 0x0) bind$rds(r4, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x9f}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$rds(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)=""/168, 0xa8}], 0x1, &(0x7f0000000300)=[@fadd={0x58, 0x114, 0x6, {{0x10001, 0x8000}, &(0x7f0000000180), &(0x7f00000001c0)=0x3, 0x4, 0xff, 0x4, 0x1, 0xe7, 0x95}}], 0x58}, 0x0) [ 74.940197][ T4671] Bluetooth: hci0: command tx timeout [ 75.026285][ T5323] loop0: detected capacity change from 0 to 512 [ 75.118208][ T5323] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 75.137643][ T5323] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.158144][ T5323] Quota error (device loop0): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 75.164697][ T5323] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 75.169527][ T5323] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.0: Failed to acquire dquot type 0 [ 75.458984][ T5321] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 75.610241][ T5321] usb 5-1: Using ep0 maxpacket: 32 [ 75.616364][ T5321] usb 5-1: config 0 has an invalid interface number: 27 but max is 0 [ 75.621156][ T5321] usb 5-1: config 0 has no interface number 0 [ 75.624159][ T5321] usb 5-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=9a.5e [ 75.628553][ T5321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.636247][ T5321] usb 5-1: config 0 descriptor?? [ 75.864858][ T5321] pegasus 5-1:0.27: probe with driver pegasus failed with error -71 [ 75.888032][ T5321] usb 5-1: USB disconnect, device number 2 [ 76.393786][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.396802][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.469432][ T5324] BUG: Bad page state in process syz.0.0 pfn:32601 [ 76.474912][ T5324] page does not match folio [ 76.477570][ T5324] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffffffffffffffff pfn:0x32601 [ 76.484286][ T5324] ksm flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 76.487604][ T5324] raw: 04fff00000000000 ffffea0000c98000 00000000ffffffff ffffffffffffffff [ 76.491840][ T5324] raw: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000000 [ 76.495733][ T5324] page dumped because: nonzero pincount [ 76.498494][ T5324] page_owner tracks the page as allocated [ 76.503991][ T5324] page last allocated via order 9, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5322, tgid 5322 (syz.0.0), ts 75183794707, free_ts 26660923264 [ 76.514205][ T5324] post_alloc_hook+0x240/0x2a0 [ 76.517876][ T5324] get_page_from_freelist+0x21e4/0x22c0 [ 76.521445][ T5324] __alloc_frozen_pages_noprof+0x181/0x370 [ 76.523874][ T5324] alloc_pages_mpol+0x232/0x4a0 [ 76.526018][ T5324] alloc_pages_noprof+0xa9/0x190 [ 76.528300][ T5324] folio_alloc_noprof+0x1e/0x30 [ 76.531809][ T5324] filemap_alloc_folio_noprof+0xdf/0x470 [ 76.534561][ T5324] page_cache_ra_order+0x5e5/0xc70 [ 76.537259][ T5324] do_sync_mmap_readahead+0x31a/0x5f0 [ 76.539430][ T5324] filemap_fault+0x62a/0x1200 [ 76.542663][ T5324] __do_fault+0x138/0x390 [ 76.544765][ T5324] __handle_mm_fault+0x198b/0x5620 [ 76.546880][ T5324] handle_mm_fault+0x40a/0x8e0 [ 76.549422][ T5324] do_user_addr_fault+0xa81/0x1390 [ 76.552601][ T5324] exc_page_fault+0x76/0xf0 [ 76.555697][ T5324] asm_exc_page_fault+0x26/0x30 [ 76.557737][ T5324] page last free pid 1 tgid 1 stack trace: [ 76.561403][ T5324] __free_frozen_pages+0xc71/0xe70 [ 76.563961][ T5324] destroy_args+0x17d/0x5d0 [ 76.566314][ T5324] debug_vm_pgtable+0x412/0x450 [ 76.568427][ T5324] do_one_initcall+0x233/0x820 [ 76.571549][ T5324] do_initcall_level+0x137/0x1f0 [ 76.573809][ T5324] do_initcalls+0x69/0xd0 [ 76.575867][ T5324] kernel_init_freeable+0x3d9/0x570 [ 76.578795][ T5324] kernel_init+0x1d/0x1d0 [ 76.582730][ T5324] ret_from_fork+0x3fc/0x770 [ 76.584972][ T5324] ret_from_fork_asm+0x1a/0x30 [ 76.587118][ T5324] Modules linked in: [ 76.588812][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 76.588827][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.588840][ T5324] Call Trace: [ 76.588848][ T5324] [ 76.588853][ T5324] dump_stack_lvl+0x189/0x250 [ 76.588877][ T5324] ? __pfx_dump_stack_lvl+0x10/0x10 [ 76.588895][ T5324] ? __pfx_print_modules+0x10/0x10 [ 76.588911][ T5324] ? percpu_ref_put+0x19/0x180 [ 76.588926][ T5324] ? percpu_ref_put+0xf9/0x180 [ 76.588940][ T5324] bad_page+0x180/0x1c0 [ 76.588959][ T5324] free_tail_page_prepare+0x2c3/0x4f0 [ 76.588973][ T5324] __free_frozen_pages+0x8aa/0xe70 [ 76.588991][ T5324] __folio_put+0x21b/0x2c0 [ 76.589007][ T5324] ? __pfx___folio_put+0x10/0x10 [ 76.589025][ T5324] delete_from_page_cache_batch+0x84c/0x9b0 [ 76.589036][ T5324] ? shmem_mapping+0xd/0x50 [ 76.589056][ T5324] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 76.589066][ T5324] ? __filemap_fdatawait_range+0x1d2/0x230 [ 76.589079][ T5324] ? __pfx_workingset_update_node+0x10/0x10 [ 76.589093][ T5324] ? folio_mapping+0x16f/0x240 [ 76.589111][ T5324] ? truncate_cleanup_folio+0x34a/0x430 [ 76.589129][ T5324] truncate_inode_pages_range+0x28a/0xda0 [ 76.589152][ T5324] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 76.589182][ T5324] ? has_bh_in_lru+0x307/0x340 [ 76.589220][ T5324] ? __pfx_has_bh_in_lru+0x10/0x10 [ 76.589237][ T5324] blkdev_flush_mapping+0x108/0x270 [ 76.589326][ T5324] ? bdev_release+0x40f/0x650 [ 76.589339][ T5324] bdev_release+0x417/0x650 [ 76.589354][ T5324] ? __pfx_blkdev_release+0x10/0x10 [ 76.589365][ T5324] blkdev_release+0x15/0x20 [ 76.589375][ T5324] __fput+0x44c/0xa70 [ 76.589399][ T5324] task_work_run+0x1d1/0x260 [ 76.589416][ T5324] ? __pfx_task_work_run+0x10/0x10 [ 76.589435][ T5324] do_exit+0x6ad/0x22e0 [ 76.589455][ T5324] ? do_raw_spin_lock+0x121/0x290 [ 76.589470][ T5324] ? __pfx_do_exit+0x10/0x10 [ 76.589493][ T5324] do_group_exit+0x21c/0x2d0 [ 76.589503][ T5324] ? lockdep_hardirqs_on+0x9c/0x150 [ 76.589516][ T5324] get_signal+0x1286/0x1340 [ 76.589535][ T5324] arch_do_signal_or_restart+0x9a/0x750 [ 76.589553][ T5324] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 76.589572][ T5324] ? __might_fault+0xb0/0x130 [ 76.589584][ T5324] ? exit_to_user_mode_loop+0x40/0x110 [ 76.589639][ T5324] exit_to_user_mode_loop+0x75/0x110 [ 76.589654][ T5324] do_syscall_64+0x2bd/0x3b0 [ 76.589666][ T5324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.589676][ T5324] ? clear_bhb_loop+0x60/0xb0 [ 76.589688][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.589698][ T5324] RIP: 0033:0x7efc79b8e929 [ 76.589710][ T5324] Code: Unable to access opcode bytes at 0x7efc79b8e8ff. [ 76.589715][ T5324] RSP: 002b:00007efc75fd40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 76.589728][ T5324] RAX: fffffffffffffe00 RBX: 00007efc79db6088 RCX: 00007efc79b8e929 [ 76.589735][ T5324] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007efc79db6088 [ 76.589741][ T5324] RBP: 00007efc79db6080 R08: 00007ffef7fbcb07 R09: 0000000000000000 [ 76.589748][ T5324] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efc79db608c [ 76.589755][ T5324] R13: 0000000000000001 R14: 00007ffef7fbca20 R15: 00007ffef7fbcb08 [ 76.589774][ T5324] [ 76.746430][ T5324] Disabling lock debugging due to kernel taint [ 76.749242][ T5324] BUG: Bad page state in process syz.0.0 pfn:32600 [ 76.752780][ T5324] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x32600 [ 76.756558][ T5324] head: order:0 mapcount:0 entire_mapcount:1 nr_pages_mapped:0 pincount:0 [ 76.760927][ T5324] flags: 0x4fff0800000004d(locked|referenced|uptodate|head|node=1|zone=1|lastcpupid=0x7ff) [ 76.765284][ T5324] raw: 04fff0800000004d dead000000000100 dead000000000122 0000000000000000 [ 76.769234][ T5324] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 76.773546][ T5324] head: 04fff0800000004d dead000000000100 dead000000000122 0000000000000000 [ 76.777768][ T5324] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 76.782435][ T5324] head: 04fff00000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 76.786100][ T5324] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000000 [ 76.792924][ T5324] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 76.796439][ T5324] page_owner tracks the page as allocated [ 76.798959][ T5324] page last allocated via order 9, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5322, tgid 5322 (syz.0.0), ts 75183794707, free_ts 26660923264 [ 76.808482][ T5324] post_alloc_hook+0x240/0x2a0 [ 76.811537][ T5324] get_page_from_freelist+0x21e4/0x22c0 [ 76.813960][ T5324] __alloc_frozen_pages_noprof+0x181/0x370 [ 76.817035][ T5324] alloc_pages_mpol+0x232/0x4a0 [ 76.820132][ T5324] alloc_pages_noprof+0xa9/0x190 [ 76.822266][ T5324] folio_alloc_noprof+0x1e/0x30 [ 76.824351][ T5324] filemap_alloc_folio_noprof+0xdf/0x470 [ 76.826840][ T5324] page_cache_ra_order+0x5e5/0xc70 [ 76.829296][ T5324] do_sync_mmap_readahead+0x31a/0x5f0 [ 76.832823][ T5324] filemap_fault+0x62a/0x1200 [ 76.834842][ T5324] __do_fault+0x138/0x390 [ 76.836703][ T5324] __handle_mm_fault+0x198b/0x5620 [ 76.838915][ T5324] handle_mm_fault+0x40a/0x8e0 [ 76.842179][ T5324] do_user_addr_fault+0xa81/0x1390 [ 76.844788][ T5324] exc_page_fault+0x76/0xf0 [ 76.847327][ T5324] asm_exc_page_fault+0x26/0x30 [ 76.851068][ T5324] page last free pid 1 tgid 1 stack trace: [ 76.853492][ T5324] __free_frozen_pages+0xc71/0xe70 [ 76.855810][ T5324] destroy_args+0x17d/0x5d0 [ 76.857674][ T5324] debug_vm_pgtable+0x412/0x450 [ 76.860312][ T5324] do_one_initcall+0x233/0x820 [ 76.862586][ T5324] do_initcall_level+0x137/0x1f0 [ 76.864917][ T5324] do_initcalls+0x69/0xd0 [ 76.867206][ T5324] kernel_init_freeable+0x3d9/0x570 [ 76.870940][ T5324] kernel_init+0x1d/0x1d0 [ 76.872856][ T5324] ret_from_fork+0x3fc/0x770 [ 76.874892][ T5324] ret_from_fork_asm+0x1a/0x30 [ 76.877110][ T5324] Modules linked in: [ 76.879356][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Tainted: G B 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 76.879379][ T5324] Tainted: [B]=BAD_PAGE [ 76.879385][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.879393][ T5324] Call Trace: [ 76.879401][ T5324] [ 76.879409][ T5324] dump_stack_lvl+0x189/0x250 [ 76.879436][ T5324] ? __pfx_dump_stack_lvl+0x10/0x10 [ 76.879457][ T5324] ? __pfx_print_modules+0x10/0x10 [ 76.879477][ T5324] bad_page+0x180/0x1c0 [ 76.879498][ T5324] __free_frozen_pages+0xe17/0xe70 [ 76.879516][ T5324] __folio_put+0x21b/0x2c0 [ 76.879533][ T5324] ? __pfx___folio_put+0x10/0x10 [ 76.879551][ T5324] delete_from_page_cache_batch+0x84c/0x9b0 [ 76.879565][ T5324] ? shmem_mapping+0xd/0x50 [ 76.879584][ T5324] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 76.879620][ T5324] ? __filemap_fdatawait_range+0x1d2/0x230 [ 76.879635][ T5324] ? __pfx_workingset_update_node+0x10/0x10 [ 76.879653][ T5324] ? folio_mapping+0x16f/0x240 [ 76.879672][ T5324] ? truncate_cleanup_folio+0x34a/0x430 [ 76.879692][ T5324] truncate_inode_pages_range+0x28a/0xda0 [ 76.879716][ T5324] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 76.879745][ T5324] ? has_bh_in_lru+0x307/0x340 [ 76.879772][ T5324] ? __pfx_has_bh_in_lru+0x10/0x10 [ 76.879789][ T5324] blkdev_flush_mapping+0x108/0x270 [ 76.879804][ T5324] ? bdev_release+0x40f/0x650 [ 76.879825][ T5324] bdev_release+0x417/0x650 [ 76.879847][ T5324] ? __pfx_blkdev_release+0x10/0x10 [ 76.879859][ T5324] blkdev_release+0x15/0x20 [ 76.879872][ T5324] __fput+0x44c/0xa70 [ 76.879894][ T5324] task_work_run+0x1d1/0x260 [ 76.879912][ T5324] ? __pfx_task_work_run+0x10/0x10 [ 76.879932][ T5324] do_exit+0x6ad/0x22e0 [ 76.879951][ T5324] ? do_raw_spin_lock+0x121/0x290 [ 76.879973][ T5324] ? __pfx_do_exit+0x10/0x10 [ 76.879990][ T5324] do_group_exit+0x21c/0x2d0 [ 76.880004][ T5324] ? lockdep_hardirqs_on+0x9c/0x150 [ 76.880027][ T5324] get_signal+0x1286/0x1340 [ 76.880052][ T5324] arch_do_signal_or_restart+0x9a/0x750 [ 76.880070][ T5324] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 76.880090][ T5324] ? __might_fault+0xb0/0x130 [ 76.880103][ T5324] ? exit_to_user_mode_loop+0x40/0x110 [ 76.880124][ T5324] exit_to_user_mode_loop+0x75/0x110 [ 76.880143][ T5324] do_syscall_64+0x2bd/0x3b0 [ 76.880156][ T5324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.880170][ T5324] ? clear_bhb_loop+0x60/0xb0 [ 76.880186][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.880200][ T5324] RIP: 0033:0x7efc79b8e929 [ 76.880212][ T5324] Code: Unable to access opcode bytes at 0x7efc79b8e8ff. [ 76.880219][ T5324] RSP: 002b:00007efc75fd40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 76.880235][ T5324] RAX: fffffffffffffe00 RBX: 00007efc79db6088 RCX: 00007efc79b8e929 [ 76.880246][ T5324] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007efc79db6088 [ 76.880254][ T5324] RBP: 00007efc79db6080 R08: 00007ffef7fbcb07 R09: 0000000000000000 [ 76.880263][ T5324] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efc79db608c [ 76.880271][ T5324] R13: 0000000000000001 R14: 00007ffef7fbca20 R15: 00007ffef7fbcb08 [ 76.880284][ T5324] [ 77.026456][ T4671] Bluetooth: hci0: command tx timeout