------------[ cut here ]------------
WARNING: kernel/printk/printk_ringbuffer.c:1278 at get_data+0x48a/0x840 kernel/printk/printk_ringbuffer.c:1278, CPU#1: syz-executor/5830
Modules linked in:
CPU: 1 UID: 0 PID: 5830 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
RIP: 0010:get_data+0x48a/0x840 kernel/printk/printk_ringbuffer.c:1278
Code: 83 c4 f8 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 07 84 c0 0f 85 ee 01 00 00 44 89 65 00 49 83 c5 08 eb 13 e8 87 47 1f 00 90 <0f> 0b 90 eb 05 e8 7c 47 1f 00 45 31 ed 4c 89 e8 48 83 c4 28 5b 41
RSP: 0018:ffffc90000a084c0 EFLAGS: 00010006
RAX: ffffffff81a238a9 RBX: 00003fffffffffff RCX: ffff8880606b3d00
RDX: 0000000000010000 RSI: 00003fffffffffff RDI: 0000000000000000
RBP: 0000000000000012 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000012
R13: 0000000000000000 R14: ffffc90000a08608 R15: 1ffffffff1bca6c2
FS: 0000555556411500(0000) GS:ffff888125fc2000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f02d85f5f98 CR3: 00000000450e6000 CR4: 00000000003526f0
Call Trace:
copy_data kernel/printk/printk_ringbuffer.c:1857 [inline]
prb_read kernel/printk/printk_ringbuffer.c:1966 [inline]
_prb_read_valid+0x672/0xa90 kernel/printk/printk_ringbuffer.c:2143
prb_read_valid+0x3c/0x60 kernel/printk/printk_ringbuffer.c:2215
printk_get_next_message+0x15c/0x7b0 kernel/printk/printk.c:2978
console_emit_next_record kernel/printk/printk.c:3062 [inline]
console_flush_one_record kernel/printk/printk.c:3194 [inline]
console_flush_all+0x4cc/0xb10 kernel/printk/printk.c:3268
__console_flush_and_unlock kernel/printk/printk.c:3298 [inline]
console_unlock+0xbb/0x190 kernel/printk/printk.c:3338
wake_up_klogd_work_func+0xa8/0x130 kernel/printk/printk.c:4547
irq_work_single+0xe1/0x240 kernel/irq_work.c:221
irq_work_run_list kernel/irq_work.c:252 [inline]
irq_work_tick+0x2c2/0x360 kernel/irq_work.c:277
update_process_times+0x264/0x2f0 kernel/time/timer.c:2476
tick_sched_handle kernel/time/tick-sched.c:298 [inline]
tick_nohz_handler+0x3e9/0x710 kernel/time/tick-sched.c:319
__run_hrtimer kernel/time/hrtimer.c:1777 [inline]
__hrtimer_run_queues+0x4e0/0xc60 kernel/time/hrtimer.c:1841
hrtimer_interrupt+0x45b/0xaa0 kernel/time/hrtimer.c:1903
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1041 [inline]
__sysvec_apic_timer_interrupt+0x10b/0x410 arch/x86/kernel/apic/apic.c:1058
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1052 [inline]
sysvec_apic_timer_interrupt+0xa1/0xc0 arch/x86/kernel/apic/apic.c:1052
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697
RIP: 0010:finish_task_switch+0x26b/0x960 kernel/sched/core.c:5118
Code: 0f 84 3c 01 00 00 48 85 db 0f 85 63 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 cf df cc 09 e8 1a 56 37 00 fb 4c 8b 65 c0 <49> 8d bc 24 60 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0
RSP: 0018:ffffc90003e9ee78 EFLAGS: 00000286
RAX: 7e1b0568672a1100 RBX: 0000000000000000 RCX: 7e1b0568672a1100
RDX: 0000000000000006 RSI: ffffffff8d786e5e RDI: ffffffff8bbf41e0
RBP: ffffc90003e9eed0 R08: ffffffff8f7da977 R09: 1ffffffff1efb52e
R10: dffffc0000000000 R11: fffffbfff1efb52f R12: ffff8880606b3d00
R13: dffffc0000000000 R14: ffff888027291e80 R15: ffff8880b873af58
context_switch kernel/sched/core.c:5267 [inline]
__schedule+0x1850/0x4ec0 kernel/sched/core.c:6872
preempt_schedule_irq+0xb5/0x150 kernel/sched/core.c:7199
irqentry_exit+0x5b5/0x640 kernel/entry/common.c:216
asm_sysvec_reschedule_ipi+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:arch_static_branch arch/x86/include/asm/jump_label.h:37 [inline]
RIP: 0010:page_table_check_free include/linux/page_table_check.h:40 [inline]
RIP: 0010:free_pages_prepare mm/page_alloc.c:1396 [inline]
RIP: 0010:__free_frozen_pages+0x3c9/0xd30 mm/page_alloc.c:2948
Code: 48 b8 00 00 00 ff 7f 00 80 ff 48 23 03 48 b9 00 00 00 00 00 f0 7f 00 48 09 c1 48 89 0b 48 8b 6c 24 08 45 89 ef e9 f0 07 00 00 ff 07 00 00 83 fd 20 0f 83 0d 08 00 00 41 be 01 00 00 00 89 e9
RSP: 0018:ffffc90003e9f2d0 EFLAGS: 00000293
RAX: ffffffff823267c8 RBX: ffffea0001ef6240 RCX: ffff8880606b3d00
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
RBP: 0000000000000000 R08: ffff88805b6d8e2f R09: 1ffff1100b6db1c5
R10: dffffc0000000000 R11: ffffed100b6db1c6 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
__kasan_populate_vmalloc_do mm/kasan/shadow.c:393 [inline]
__kasan_populate_vmalloc+0x1b2/0x1d0 mm/kasan/shadow.c:424
kasan_populate_vmalloc include/linux/kasan.h:579 [inline]
alloc_vmap_area+0xdf0/0x1520 mm/vmalloc.c:2124
__get_vm_area_node+0x1f8/0x300 mm/vmalloc.c:3220
__vmalloc_node_range_noprof+0x365/0x1640 mm/vmalloc.c:3981
__vmalloc_node_noprof mm/vmalloc.c:4081 [inline]
vzalloc_noprof+0xb2/0xf0 mm/vmalloc.c:4155
alloc_counters+0xd3/0x6d0 net/ipv4/netfilter/ip_tables.c:799
copy_entries_to_user net/ipv6/netfilter/ip6_tables.c:837 [inline]
get_entries net/ipv6/netfilter/ip6_tables.c:1039 [inline]
do_ip6t_get_ctl+0xa94/0x1180 net/ipv6/netfilter/ip6_tables.c:1677
nf_getsockopt+0x26e/0x290 net/netfilter/nf_sockopt.c:116
ipv6_getsockopt+0x1ed/0x290 net/ipv6/ipv6_sockglue.c:1473
do_sock_getsockopt+0x372/0x450 net/socket.c:2425
__sys_getsockopt net/socket.c:2454 [inline]
__do_sys_getsockopt net/socket.c:2461 [inline]
__se_sys_getsockopt net/socket.c:2458 [inline]
__x64_sys_getsockopt+0x1a5/0x250 net/socket.c:2458
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0xfa/0xfa0 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fa58839140a
Code: ff c3 66 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb b8 0f 1f 44 00 00 49 89 ca b8 37 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7
RSP: 002b:00007fff405f8048 EFLAGS: 00000212 ORIG_RAX: 0000000000000037
RAX: ffffffffffffffda RBX: 00007fff405f80d0 RCX: 00007fa58839140a
RDX: 0000000000000041 RSI: 0000000000000029 RDI: 0000000000000003
RBP: 0000000000000003 R08: 00007fff405f806c R09: 0079746972756365
R10: 00007fff405f80d0 R11: 0000000000000212 R12: 00007fa5885b47a0
R13: 00007fff405f806c R14: 0000000000000000 R15: 00007fa5885b4e60
----------------
Code disassembly (best guess):
0: 0f 84 3c 01 00 00 je 0x142
6: 48 85 db test %rbx,%rbx
9: 0f 85 63 01 00 00 jne 0x172
f: 0f 1f 44 00 00 nopl 0x0(%rax,%rax,1)
14: 4c 8b 75 d0 mov -0x30(%rbp),%r14
18: 4c 89 e7 mov %r12,%rdi
1b: e8 cf df cc 09 call 0x9ccdfef
20: e8 1a 56 37 00 call 0x37563f
25: fb sti
26: 4c 8b 65 c0 mov -0x40(%rbp),%r12
* 2a: 49 8d bc 24 60 16 00 lea 0x1660(%r12),%rdi <-- trapping instruction
31: 00
32: 48 89 f8 mov %rdi,%rax
35: 48 c1 e8 03 shr $0x3,%rax
39: 42 0f b6 04 28 movzbl (%rax,%r13,1),%eax
3e: 84 c0 test %al,%al