RBP: 00007ffbd227dd60 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 R13: 00007fffd52fcaff R14: 00007ffbd227e300 R15: 0000000000022000 ------------[ cut here ]------------ WARNING: kernel/printk/printk_ringbuffer.c:1278 at get_data+0x364/0x400, CPU#0: syz-executor.3/6629 Modules linked in: CPU: 0 UID: 0 PID: 6629 Comm: syz-executor.3 Not tainted 6.18.0-rc4-next-20251104 #1 PREEMPT(voluntary) Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:get_data+0x364/0x400 Code: e8 83 e0 07 83 c0 03 38 d0 0f 8c be fe ff ff 84 d2 0f 84 b6 fe ff ff 48 89 ef e8 d7 f1 5b 00 e9 a9 fe ff ff e8 3d f2 1e 00 90 <0f> 0b 90 45 31 e4 e9 3b ff ff ff e8 2c f2 1e 00 90 0f 0b 90 45 31 RSP: 0018:ffff88806ce086b8 EFLAGS: 00010046 RAX: 0000000000010000 RBX: ffff88806ce087d0 RCX: ffffffff81559466 RDX: ffff88801d8f8000 RSI: ffffffff81559633 RDI: 0000000000000006 RBP: ffff88806ce08798 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff85d2e3d0 R13: 00003fffffffffff R14: 0000000000000000 R15: 0000000000000000 FS: 00007ffbd227e700(0000) GS:ffff8880e53a8000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055558f97e708 CR3: 000000001779d000 CR4: 0000000000350ef0 Call Trace: _prb_read_valid+0x2f3/0x830 prb_read_valid+0x78/0xa0 printk_get_next_message+0x10b/0x570 console_flush_one_record+0x64f/0xb20 __console_flush_and_unlock+0xb1/0x1d0 wake_up_klogd_work_func+0x17c/0x1e0 irq_work_single+0x128/0x260 irq_work_run_list+0x91/0xc0 update_process_times+0x12f/0x210 tick_nohz_handler+0x4ff/0x8c0 __hrtimer_run_queues+0x60f/0xac0 hrtimer_interrupt+0x369/0x830 __sysvec_apic_timer_interrupt+0xbb/0x330 sysvec_apic_timer_interrupt+0x6b/0x80 asm_sysvec_apic_timer_interrupt+0x1a/0x20 RIP: 0010:dump_stack_lvl+0x115/0x120 Code: fc ff ff 4c 89 e2 31 f6 31 ff e8 f6 f5 6f fc e8 11 2b 9a fc 48 89 ee 31 ff e8 d7 35 ba fc e8 72 3a ba fc e8 1d a5 c2 fc fb 5b <5d> 41 5c e9 63 3a ba fc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 RSP: 0018:ffff888051047550 EFLAGS: 00000202 RAX: 00000000000001b3 RBX: ffffffff85f023e0 RCX: 0000000000000040 RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff84ba4e03 RBP: 0000000000000200 R08: 0000000000000001 R09: 0000000000000001 R10: ffffffff86648157 R11: 0000000000000001 R12: ffffffff855203a0 R13: ffffffff85f023f0 R14: 0000000000000000 R15: 0000000000000000 should_fail_ex+0x4d7/0x5e0 should_fail_alloc_page+0xe0/0x110 prepare_alloc_pages+0x1eb/0x550 __alloc_frozen_pages_noprof+0x17f/0x1f20 alloc_pages_mpol+0xed/0x340 alloc_pages_noprof+0x9d/0x180 get_zeroed_page_noprof+0x18/0xb0 mon_alloc_buff+0xed/0x250 mon_bin_open+0x209/0x4a0 chrdev_open+0x234/0x690 do_dentry_open+0x71c/0x1420 vfs_open+0x82/0x3f0 path_openat+0x1c3f/0x2880 do_filp_open+0x1e8/0x450 do_sys_openat2+0x104/0x1b0 __x64_sys_openat+0x142/0x200 do_syscall_64+0xbf/0x3f0 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7ffbd4cbba04 Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 RSP: 002b:00007ffbd227dcc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00007ffbd4cbba04 RDX: 0000000000000000 RSI: 00007ffbd227dd60 RDI: 00000000ffffff9c RBP: 00007ffbd227dd60 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 R13: 00007fffd52fcaff R14: 00007ffbd227e300 R15: 0000000000022000 irq event stamp: 436 hardirqs last enabled at (435): [] dump_stack_lvl+0x113/0x120 hardirqs last disabled at (436): [] sysvec_apic_timer_interrupt+0xf/0x80 softirqs last enabled at (430): [] handle_softirqs+0x50c/0x770 softirqs last disabled at (421): [] __irq_exit_rcu+0xc4/0x100 ---[ end trace 0000000000000000 ]--- ---------------- Code disassembly (best guess), 2 bytes skipped: 0: ff 4c 89 e2 decl -0x1e(%rcx,%rcx,4) 4: 31 f6 xor %esi,%esi 6: 31 ff xor %edi,%edi 8: e8 f6 f5 6f fc callq 0xfc6ff603 d: e8 11 2b 9a fc callq 0xfc9a2b23 12: 48 89 ee mov %rbp,%rsi 15: 31 ff xor %edi,%edi 17: e8 d7 35 ba fc callq 0xfcba35f3 1c: e8 72 3a ba fc callq 0xfcba3a93 21: e8 1d a5 c2 fc callq 0xfcc2a543 26: fb sti 27: 5b pop %rbx * 28: 5d pop %rbp <-- trapping instruction 29: 41 5c pop %r12 2b: e9 63 3a ba fc jmpq 0xfcba3a93 30: 0f 1f 00 nopl (%rax) 33: 90 nop 34: 90 nop 35: 90 nop 36: 90 nop 37: 90 nop 38: 90 nop 39: 90 nop 3a: 90 nop 3b: 90 nop 3c: 90 nop 3d: 90 nop