RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff
R10: 0000000000008000 R11: 0000000000000293 R12: 0000000000000004
R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000
------------[ cut here ]------------
WARNING: kernel/printk/printk_ringbuffer.c:1278 at get_data+0x364/0x400, CPU#0: syz-executor.4/29800
Modules linked in:
CPU: 0 UID: 0 PID: 29800 Comm: syz-executor.4 Not tainted 6.18.0-rc2-next-20251027 #1 PREEMPT(voluntary)
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:get_data+0x364/0x400
Code: e8 83 e0 07 83 c0 03 38 d0 0f 8c be fe ff ff 84 d2 0f 84 b6 fe ff ff 48 89 ef e8 47 91 5b 00 e9 a9 fe ff ff e8 3d b7 1e 00 90 <0f> 0b 90 45 31 e4 e9 3b ff ff ff e8 2c b7 1e 00 90 0f 0b 90 45 31
RSP: 0018:ffff88806ce08720 EFLAGS: 00010046
RAX: 0000000000010000 RBX: ffff88806ce08838 RCX: ffffffff81555756
RDX: ffff88804e053700 RSI: ffffffff81555923 RDI: 0000000000000006
RBP: ffff88806ce08800 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff85d30650
R13: 00003fffffffffff R14: 0000000000000000 R15: 0000000000000000
FS: 00007feccaac5700(0000) GS:ffff8880e53f4000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007feccaac4f78 CR3: 00000000372cb000 CR4: 0000000000350ef0
Call Trace:
_prb_read_valid+0x2f3/0x830
prb_read_valid+0x78/0xa0
printk_get_next_message+0x10b/0x570
console_flush_one_record+0x64f/0xb20
__console_flush_and_unlock+0xb1/0x1d0
wake_up_klogd_work_func+0x17c/0x1e0
irq_work_single+0x128/0x260
irq_work_run_list+0x91/0xc0
update_process_times+0x12f/0x210
tick_nohz_handler+0x414/0x6d0
__hrtimer_run_queues+0x60f/0xac0
hrtimer_interrupt+0x369/0x830
__sysvec_apic_timer_interrupt+0xbb/0x330
sysvec_apic_timer_interrupt+0x6b/0x80
asm_sysvec_apic_timer_interrupt+0x1a/0x20
RIP: 0010:dump_stack_lvl+0x115/0x120
Code: fc ff ff 4c 89 e2 31 f6 31 ff e8 86 97 72 fc e8 91 90 9c fc 48 89 ee 31 ff e8 c7 5d bc fc e8 62 62 bc fc e8 0d bf c4 fc fb 5b <5d> 41 5c e9 53 62 bc fc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90
RSP: 0018:ffff88804e88f640 EFLAGS: 00000202
RAX: 00000000000000d3 RBX: ffffffff85f03940 RCX: 0000000000000040
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff84b7ae03
RBP: 0000000000000200 R08: 0000000000000001 R09: 0000000000000001
R10: ffffffff86646957 R11: 0000000000000001 R12: ffffffff85519140
R13: ffffffff85f03950 R14: 0000000000000000 R15: 0000000000000000
should_fail_ex+0x4d7/0x5e0
should_fail_alloc_page+0xe0/0x110
prepare_alloc_pages+0x1eb/0x550
__alloc_frozen_pages_noprof+0x17f/0x1f20
alloc_pages_mpol+0xed/0x340
folio_alloc_mpol_noprof+0x38/0xa0
shmem_alloc_folio+0x11b/0x140
shmem_get_folio_gfp.constprop.0+0x4ea/0x13a0
shmem_write_begin+0x147/0x2e0
generic_perform_write+0x391/0x810
shmem_file_write_iter+0x111/0x140
vfs_write+0xbe9/0x1150
__x64_sys_pwrite64+0x1f1/0x260
do_syscall_64+0xbf/0x390
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7feccd502ab7
Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b
RSP: 002b:00007feccaac4f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012
RAX: ffffffffffffffda RBX: 00007feccd599970 RCX: 00007feccd502ab7
RDX: 000000000000009f RSI: 0000000020010000 RDI: 0000000000000004
RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff
R10: 0000000000008000 R11: 0000000000000293 R12: 0000000000000004
R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000
irq event stamp: 212
hardirqs last enabled at (211): [] dump_stack_lvl+0x113/0x120
hardirqs last disabled at (212): [] sysvec_apic_timer_interrupt+0xf/0x80
softirqs last enabled at (206): [] handle_softirqs+0x50c/0x770
softirqs last disabled at (189): [] __irq_exit_rcu+0xc4/0x100
---[ end trace 0000000000000000 ]---
loop4: detected capacity change from 0 to 184
ISOFS: Unable to identify CD-ROM format.
FAULT_INJECTION: forcing a failure.
name fail_usercopy, interval 1, probability 0, space 0, times 0
CPU: 1 UID: 0 PID: 30149 Comm: syz-executor.3 Tainted: G W 6.18.0-rc2-next-20251027 #1 PREEMPT(voluntary)
Tainted: [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
dump_stack_lvl+0xfa/0x120
should_fail_ex+0x4d7/0x5e0
copy_folio_from_iter_atomic+0x3d3/0x18c0
generic_perform_write+0x1d7/0x810
shmem_file_write_iter+0x111/0x140
vfs_write+0xbe9/0x1150
__x64_sys_pwrite64+0x1f1/0x260
do_syscall_64+0xbf/0x390
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f39a59f0ab7
Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b
RSP: 002b:00007f39a2fb2f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012
RAX: ffffffffffffffda RBX: 00007f39a5a87970 RCX: 00007f39a59f0ab7
RDX: 0000000000000006 RSI: 0000000020010600 RDI: 0000000000000004
RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff
R10: 0000000000008800 R11: 0000000000000293 R12: 0000000000000004
R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001
loop3: detected capacity change from 0 to 184
FAULT_INJECTION: forcing a failure.
name fail_usercopy, interval 1, probability 0, space 0, times 0
CPU: 0 UID: 0 PID: 30163 Comm: syz-executor.2 Tainted: G W 6.18.0-rc2-next-20251027 #1 PREEMPT(voluntary)
Tainted: [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
dump_stack_lvl+0xfa/0x120
should_fail_ex+0x4d7/0x5e0
copy_folio_from_iter_atomic+0x3d3/0x18c0
generic_perform_write+0x1d7/0x810
shmem_file_write_iter+0x111/0x140
vfs_write+0xbe9/0x1150
__x64_sys_pwrite64+0x1f1/0x260
do_syscall_64+0xbf/0x390
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f2baf1abab7
Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b
RSP: 002b:00007f2bac76df20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012
RAX: ffffffffffffffda RBX: 00007f2baf242970 RCX: 00007f2baf1abab7
RDX: 000000000000009f RSI: 0000000020010000 RDI: 0000000000000004
RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff
R10: 0000000000008000 R11: 0000000000000293 R12: 0000000000000004
R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000
loop4: detected capacity change from 0 to 184
isofs_fill_super: root inode is not a directory. Corrupted media?
isofs_fill_super: root inode is not a directory. Corrupted media?
loop2: detected capacity change from 0 to 184
isofs_fill_super: root inode is not a directory. Corrupted media?
FAULT_INJECTION: forcing a failure.
name fail_usercopy, interval 1, probability 0, space 0, times 0
CPU: 1 UID: 0 PID: 30477 Comm: syz-executor.3 Tainted: G W 6.18.0-rc2-next-20251027 #1 PREEMPT(voluntary)
Tainted: [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
dump_stack_lvl+0xfa/0x120
should_fail_ex+0x4d7/0x5e0
copy_folio_from_iter_atomic+0x3d3/0x18c0
generic_perform_write+0x1d7/0x810
shmem_file_write_iter+0x111/0x140
vfs_write+0xbe9/0x1150
__x64_sys_pwrite64+0x1f1/0x260
do_syscall_64+0xbf/0x390
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f39a59f0ab7
Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b
RSP: 002b:00007f39a2fb2f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012
RAX: ffffffffffffffda RBX: 00007f39a5a87970 RCX: 00007f39a59f0ab7
RDX: 000000000000009f RSI: 0000000020010000 RDI: 0000000000000004
RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff
R10: 0000000000008000 R11: 0000000000000293 R12: 0000000000000004
R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000
loop3: detected capacity change from 0 to 184
isofs_fill_super: root inode is not a directory. Corrupted media?
loop4: detected capacity change from 0 to 184
sg_write: data in/out 101368737/28 bytes for SCSI command 0x1e-- guessing data in;
program syz-executor.0 not setting count and/or reply_len properly
isofs_fill_super: root inode is not a directory. Corrupted media?
FAULT_INJECTION: forcing a failure.
name fail_usercopy, interval 1, probability 0, space 0, times 0
CPU: 1 UID: 0 PID: 30642 Comm: syz-executor.3 Tainted: G W 6.18.0-rc2-next-20251027 #1 PREEMPT(voluntary)
Tainted: [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
dump_stack_lvl+0xfa/0x120
should_fail_ex+0x4d7/0x5e0
copy_folio_from_iter_atomic+0x3d3/0x18c0
generic_perform_write+0x1d7/0x810
shmem_file_write_iter+0x111/0x140
vfs_write+0xbe9/0x1150
__x64_sys_pwrite64+0x1f1/0x260
do_syscall_64+0xbf/0x390
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f39a59f0ab7
Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b
RSP: 002b:00007f39a2fb2f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012
RAX: ffffffffffffffda RBX: 00007f39a5a87970 RCX: 00007f39a59f0ab7
RDX: 0000000000000001 RSI: 0000000020000300 RDI: 0000000000000004
RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff
R10: 000000000000b800 R11: 0000000000000293 R12: 0000000000000004
R13: 0000000000000004 R14: 0000000020000230 R15: 0000000000000002
FAULT_INJECTION: forcing a failure.
name fail_usercopy, interval 1, probability 0, space 0, times 0
CPU: 0 UID: 0 PID: 30686 Comm: syz-executor.2 Tainted: G W 6.18.0-rc2-next-20251027 #1 PREEMPT(voluntary)
Tainted: [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
dump_stack_lvl+0xfa/0x120
should_fail_ex+0x4d7/0x5e0
copy_folio_from_iter_atomic+0x3d3/0x18c0
generic_perform_write+0x1d7/0x810
shmem_file_write_iter+0x111/0x140
vfs_write+0xbe9/0x1150
__x64_sys_pwrite64+0x1f1/0x260
do_syscall_64+0xbf/0x390
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f2baf1abab7
Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b
RSP: 002b:00007f2bac76df20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012
RAX: ffffffffffffffda RBX: 00007f2baf242970 RCX: 00007f2baf1abab7
RDX: 0000000000000001 RSI: 0000000020000300 RDI: 0000000000000004
RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff
R10: 000000000000b800 R11: 0000000000000293 R12: 0000000000000004
R13: 0000000000000004 R14: 0000000020000230 R15: 0000000000000002
loop3: detected capacity change from 0 to 184
isofs_fill_super: root inode is not a directory. Corrupted media?
loop4: detected capacity change from 0 to 184
loop2: detected capacity change from 0 to 184
isofs_fill_super: root inode is not a directory. Corrupted media?
isofs_fill_super: root inode is not a directory. Corrupted media?
----------------
Code disassembly (best guess), 2 bytes skipped:
0: ff 4c 89 e2 decl -0x1e(%rcx,%rcx,4)
4: 31 f6 xor %esi,%esi
6: 31 ff xor %edi,%edi
8: e8 86 97 72 fc callq 0xfc729793
d: e8 91 90 9c fc callq 0xfc9c90a3
12: 48 89 ee mov %rbp,%rsi
15: 31 ff xor %edi,%edi
17: e8 c7 5d bc fc callq 0xfcbc5de3
1c: e8 62 62 bc fc callq 0xfcbc6283
21: e8 0d bf c4 fc callq 0xfcc4bf33
26: fb sti
27: 5b pop %rbx
* 28: 5d pop %rbp <-- trapping instruction
29: 41 5c pop %r12
2b: e9 53 62 bc fc jmpq 0xfcbc6283
30: 0f 1f 00 nopl (%rax)
33: 90 nop
34: 90 nop
35: 90 nop
36: 90 nop
37: 90 nop
38: 90 nop
39: 90 nop
3a: 90 nop
3b: 90 nop
3c: 90 nop
3d: 90 nop