RBP: 00007f41bb99c1d0 R08: 0000000000000000 R09: 0000000000000000 R13: 00007ffdf5a1a44f R14: 00007f41bb99c300 R15: 0000000000022000 ------------[ cut here ]------------ WARNING: kernel/printk/printk_ringbuffer.c:1278 at get_data+0x364/0x400, CPU#0: syz-executor.1/10132 Modules linked in: CPU: 0 UID: 0 PID: 10132 Comm: syz-executor.1 Not tainted 6.18.0-rc3-next-20251031 #1 PREEMPT(voluntary) Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:get_data+0x364/0x400 Code: e8 83 e0 07 83 c0 03 38 d0 0f 8c be fe ff ff 84 d2 0f 84 b6 fe ff ff 48 89 ef e8 17 b8 5b 00 e9 a9 fe ff ff e8 4d bb 1e 00 90 <0f> 0b 90 45 31 e4 e9 3b ff ff ff e8 3c bb 1e 00 90 0f 0b 90 45 31 RSP: 0018:ffff88806ce08720 EFLAGS: 00010046 RAX: 0000000000010000 RBX: ffff88806ce08838 RCX: ffffffff815559d6 RDX: ffff88804af01b80 RSI: ffffffff81555ba3 RDI: 0000000000000006 RBP: ffff88806ce08800 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff85d30790 R13: 00003fffffffffff R14: 0000000000000000 R15: 0000000000000000 FS: 00007f41bb99c700(0000) GS:ffff8880e53ed000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f41bb99bf78 CR3: 0000000015a92000 CR4: 0000000000350ef0 Call Trace: _prb_read_valid+0x2f3/0x830 prb_read_valid+0x78/0xa0 printk_get_next_message+0x10b/0x570 console_flush_one_record+0x64f/0xb20 __console_flush_and_unlock+0xb1/0x1d0 wake_up_klogd_work_func+0x17c/0x1e0 irq_work_single+0x128/0x260 irq_work_run_list+0x91/0xc0 update_process_times+0x12f/0x210 tick_nohz_handler+0x414/0x6d0 __hrtimer_run_queues+0x60f/0xac0 hrtimer_interrupt+0x369/0x830 __sysvec_apic_timer_interrupt+0xbb/0x330 sysvec_apic_timer_interrupt+0x6b/0x80 asm_sysvec_apic_timer_interrupt+0x1a/0x20 RIP: 0010:dump_stack_lvl+0x115/0x120 Code: fc ff ff 4c 89 e2 31 f6 31 ff e8 66 57 71 fc e8 81 50 9b fc 48 89 ee 31 ff e8 57 24 bb fc e8 f2 28 bb fc e8 9d 93 c3 fc fb 5b <5d> 41 5c e9 e3 28 bb fc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 RSP: 0018:ffff888019eaf9f0 EFLAGS: 00000206 RAX: 0000000000000187 RBX: ffffffff8609f840 RCX: 0000000000000080 RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff84b8ee03 RBP: 0000000000000200 R08: 0000000000000001 R09: 0000000000000001 R10: ffffffff86648157 R11: 0000000000000001 R12: ffffffff8551dc20 R13: ffffffff8609f850 R14: 0000000000000000 R15: 0000000000000000 should_fail_ex+0x4d7/0x5e0 _copy_from_iter+0x1dc/0x1660 kernfs_fop_write_iter+0x1b1/0x570 do_iter_readv_writev+0x5b3/0x910 vfs_writev+0x2d4/0xcd0 do_pwritev+0x1ab/0x280 do_syscall_64+0xbf/0x390 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f41be426b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f41bb99c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 RAX: ffffffffffffffda RBX: 00007f41be539f60 RCX: 00007f41be426b19 RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000004 RBP: 00007f41bb99c1d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffdf5a1a44f R14: 00007f41bb99c300 R15: 0000000000022000 irq event stamp: 392 hardirqs last enabled at (391): [] dump_stack_lvl+0x113/0x120 hardirqs last disabled at (392): [] sysvec_apic_timer_interrupt+0xf/0x80 softirqs last enabled at (386): [] handle_softirqs+0x50c/0x770 softirqs last disabled at (361): [] __irq_exit_rcu+0xc4/0x100 ---[ end trace 0000000000000000 ]--- FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 1 UID: 0 PID: 10152 Comm: syz-executor.6 Tainted: G W 6.18.0-rc3-next-20251031 #1 PREEMPT(voluntary) Tainted: [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 should_failslab+0xc2/0x120 __kvmalloc_node_noprof+0x11f/0x770 seq_read_iter+0x9ee/0x1320 kernfs_fop_read_iter+0x482/0x610 copy_splice_read+0x5c2/0xc00 do_splice_read+0x1f8/0x2a0 splice_direct_to_actor+0x2a8/0x9d0 do_splice_direct+0x179/0x250 do_sendfile+0xa8e/0xdc0 __x64_sys_sendfile64+0x14c/0x210 do_syscall_64+0xbf/0x390 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f839afd0b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f8398546188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 RAX: ffffffffffffffda RBX: 00007f839b0e3f60 RCX: 00007f839afd0b19 RDX: 0000000020000000 RSI: 0000000000000005 RDI: 0000000000000004 RBP: 00007f83985461d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffc3cd62ccf R14: 00007f8398546300 R15: 0000000000022000 FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 10171 Comm: syz-executor.1 Tainted: G W 6.18.0-rc3-next-20251031 #1 PREEMPT(voluntary) Tainted: [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 _copy_to_user+0x32/0xd0 simple_read_from_buffer+0xe0/0x180 proc_fail_nth_read+0x18a/0x240 vfs_read+0x1eb/0xc70 ksys_read+0x121/0x240 do_syscall_64+0xbf/0x390 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f41be3d969c Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 RSP: 002b:00007f41bb99c170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f41be3d969c RDX: 000000000000000f RSI: 00007f41bb99c1e0 RDI: 0000000000000005 RBP: 00007f41bb99c1d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffdf5a1a44f R14: 00007f41bb99c300 R15: 0000000000022000 FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 CPU: 1 UID: 0 PID: 10173 Comm: syz-executor.7 Tainted: G W 6.18.0-rc3-next-20251031 #1 PREEMPT(voluntary) Tainted: [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 _copy_from_user+0x30/0xd0 io_submit_one+0x8e/0x1a90 __x64_sys_io_submit+0x182/0x2e0 do_syscall_64+0xbf/0x390 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f7c98955b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f7c95ecb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 RAX: ffffffffffffffda RBX: 00007f7c98a68f60 RCX: 00007f7c98955b19 RDX: 0000000020000180 RSI: 0000000000000003 RDI: 00007f7c95e95000 RBP: 00007f7c95ecb1d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffe5246accf R14: 00007f7c95ecb300 R15: 0000000000022000 FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 CPU: 0 UID: 0 PID: 10201 Comm: syz-executor.7 Tainted: G W 6.18.0-rc3-next-20251031 #1 PREEMPT(voluntary) Tainted: [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 should_fail_ex+0x4d7/0x5e0 _copy_to_user+0x32/0xd0 simple_read_from_buffer+0xe0/0x180 proc_fail_nth_read+0x18a/0x240 vfs_read+0x1eb/0xc70 ksys_read+0x121/0x240 do_syscall_64+0xbf/0x390 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f7c9890869c Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 RSP: 002b:00007f7c95ecb170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f7c9890869c RDX: 000000000000000f RSI: 00007f7c95ecb1e0 RDI: 0000000000000006 RBP: 00007f7c95ecb1d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffe5246accf R14: 00007f7c95ecb300 R15: 0000000000022000 ---------------- Code disassembly (best guess), 2 bytes skipped: 0: ff 4c 89 e2 decl -0x1e(%rcx,%rcx,4) 4: 31 f6 xor %esi,%esi 6: 31 ff xor %edi,%edi 8: e8 66 57 71 fc callq 0xfc715773 d: e8 81 50 9b fc callq 0xfc9b5093 12: 48 89 ee mov %rbp,%rsi 15: 31 ff xor %edi,%edi 17: e8 57 24 bb fc callq 0xfcbb2473 1c: e8 f2 28 bb fc callq 0xfcbb2913 21: e8 9d 93 c3 fc callq 0xfcc393c3 26: fb sti 27: 5b pop %rbx * 28: 5d pop %rbp <-- trapping instruction 29: 41 5c pop %r12 2b: e9 e3 28 bb fc jmpq 0xfcbb2913 30: 0f 1f 00 nopl (%rax) 33: 90 nop 34: 90 nop 35: 90 nop 36: 90 nop 37: 90 nop 38: 90 nop 39: 90 nop 3a: 90 nop 3b: 90 nop 3c: 90 nop 3d: 90 nop