Warning: Permanently added '10.128.0.245' (ED25519) to the list of known hosts. 2026/09/20 17:10:17 parsed 1 programs 2026/09/20 17:10:17 serving rpc on tcp://35751 [ 65.194422][ T4198] cgroup: Unknown subsys name 'net' [ 65.343397][ T4198] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.828766][ T4198] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 68.899277][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.917812][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.947493][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.973230][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.982032][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.991098][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.336365][ T4257] chnl_net:caif_netlink_parms(): no params data found [ 70.380713][ T4257] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.388844][ T4257] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.401077][ T4257] device bridge_slave_0 entered promiscuous mode [ 70.410707][ T4257] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.418886][ T4257] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.429939][ T4257] device bridge_slave_1 entered promiscuous mode [ 70.457153][ T4257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.477742][ T4257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.529515][ T4257] team0: Port device team_slave_0 added [ 70.537238][ T4257] team0: Port device team_slave_1 added [ 70.570262][ T4257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.577353][ T4257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.604543][ T4257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.623519][ T4257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.630548][ T4257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.658639][ T4257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.705885][ T4257] device hsr_slave_0 entered promiscuous mode [ 70.719757][ T4257] device hsr_slave_1 entered promiscuous mode [ 70.813852][ T4257] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.824434][ T4257] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.834148][ T4257] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.844092][ T4257] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.866179][ T4257] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.873502][ T4257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.881705][ T4257] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.888873][ T4257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.933095][ T4257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.945809][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.955462][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.965077][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.973085][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 70.985703][ T4257] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.996710][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.005922][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.013066][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.029568][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.038421][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.045498][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.081941][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.090898][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.101093][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.113941][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.129222][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.162964][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.282228][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.290143][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.303854][ T4257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.329811][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.339692][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.364995][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.374131][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.383066][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.391614][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.401899][ T4257] device veth0_vlan entered promiscuous mode [ 71.433894][ T4257] device veth1_vlan entered promiscuous mode [ 71.454536][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.463965][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.474071][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.483870][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.494389][ T4257] device veth0_macvtap entered promiscuous mode [ 71.522974][ T4257] device veth1_macvtap entered promiscuous mode [ 71.537801][ T4257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.545443][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.554346][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.564267][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.573774][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.586038][ T4257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.595553][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.604616][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.615279][ T4257] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.624678][ T4257] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.633724][ T4257] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.643178][ T4257] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.759704][ T4257] syz-executor (4257) used greatest stack depth: 20752 bytes left [ 71.772442][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.772578][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 2026/09/20 17:10:27 executed programs: 0 [ 72.791523][ T4296] chnl_net:caif_netlink_parms(): no params data found [ 72.860243][ T4296] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.867503][ T4296] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.876377][ T4296] device bridge_slave_0 entered promiscuous mode [ 72.890455][ T4296] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.900663][ T4296] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.909516][ T4296] device bridge_slave_1 entered promiscuous mode [ 72.940076][ T4296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.954632][ T4296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.990674][ T4296] team0: Port device team_slave_0 added [ 73.000354][ T4296] team0: Port device team_slave_1 added [ 73.026132][ T4296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.037048][ T4296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.067196][ T4296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.086400][ T4296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.093864][ T4296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.123184][ T4296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.166418][ T4296] device hsr_slave_0 entered promiscuous mode [ 73.176400][ T4296] device hsr_slave_1 entered promiscuous mode [ 73.183606][ T4296] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.197835][ T4296] Cannot create hsr debugfs directory [ 73.314178][ T4296] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.728239][ T4272] Bluetooth: hci0: command 0x0409 tx timeout [ 76.314054][ T4296] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.562265][ T4296] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.615417][ T4296] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.741757][ T4296] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.752280][ T4296] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.761797][ T4296] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.780401][ T4296] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.797996][ T1353] Bluetooth: hci0: command 0x041b tx timeout [ 76.836882][ T4296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.849788][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.858135][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.869456][ T4296] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.886654][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.895831][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.904785][ T3084] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.912043][ T3084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.920305][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.941831][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.951016][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.961081][ T3084] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.968207][ T3084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.990719][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.003282][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.014249][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.023770][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.032819][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.045135][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.054844][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.075743][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.084637][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.095782][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.104811][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.125381][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.156036][ T301] device hsr_slave_0 left promiscuous mode [ 77.163144][ T301] device hsr_slave_1 left promiscuous mode [ 77.172835][ T301] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.181107][ T301] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.192003][ T301] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.200101][ T301] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.208773][ T301] device bridge_slave_1 left promiscuous mode [ 77.215713][ T301] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.230408][ T301] device bridge_slave_0 left promiscuous mode [ 77.236922][ T301] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.255474][ T301] device veth1_macvtap left promiscuous mode [ 77.262507][ T301] device veth0_macvtap left promiscuous mode [ 77.269553][ T301] device veth1_vlan left promiscuous mode [ 77.275854][ T301] device veth0_vlan left promiscuous mode [ 77.423545][ T301] team0 (unregistering): Port device team_slave_1 removed [ 77.436758][ T301] team0 (unregistering): Port device team_slave_0 removed [ 77.450919][ T301] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.463899][ T301] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.520534][ T301] bond0 (unregistering): Released all slaves [ 77.621840][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.629634][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.645328][ T4296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.673660][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.683198][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.700114][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.710070][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.719181][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.727308][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.740231][ T4296] device veth0_vlan entered promiscuous mode [ 77.760038][ T4296] device veth1_vlan entered promiscuous mode [ 77.779757][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.788378][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.796617][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.806040][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.818223][ T4296] device veth0_macvtap entered promiscuous mode [ 77.834973][ T4296] device veth1_macvtap entered promiscuous mode [ 77.854030][ T4296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.861971][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.871595][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.879866][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.889121][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.902594][ T4296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.912180][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.921831][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.934040][ T4296] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.944769][ T4296] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.953911][ T4296] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.963126][ T4296] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.029045][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.044273][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.055247][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 2026/09/20 17:10:32 executed programs: 2 [ 78.082763][ T3084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.091856][ T3084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.101622][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.789393][ T4311] loop0: detected capacity change from 0 to 1024 [ 78.814332][ T4311] hfsplus: invalid length 1033 has been corrected to 255 [ 78.826070][ T4311] hfsplus: invalid length 1033 has been corrected to 255 [ 78.835831][ T4311] ------------[ cut here ]------------ [ 78.841411][ T4311] field width 936623576 too large [ 78.841792][ T4311] WARNING: CPU: 1 PID: 4311 at lib/vsprintf.c:2699 vsnprintf+0x1548/0x1c20 [ 78.855444][ T4311] Modules linked in: [ 78.859359][ T4311] CPU: 1 PID: 4311 Comm: syz.0.17 Not tainted syzkaller #0 [ 78.866672][ T4311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 78.876998][ T4311] RIP: 0010:vsnprintf+0x1548/0x1c20 [ 78.882223][ T4311] Code: 44 89 fe e8 0a 31 aa 05 0f 0b e9 be f7 ff ff e8 ce fb 6c fd c6 05 22 4c 6b 09 01 48 c7 c7 e0 6d 7d 8a 44 89 fe e8 e8 30 aa 05 <0f> 0b e9 59 fa ff ff 89 e9 80 e1 07 38 c1 0f 8c 8e fd ff ff 48 89 [ 78.902315][ T4311] RSP: 0018:ffffc90002e5eef0 EFLAGS: 00010046 [ 78.908414][ T4311] RAX: 567900820c389c00 RBX: ffff0a0000000001 RCX: ffff888025b48000 [ 78.916400][ T4311] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 78.924385][ T4311] RBP: ffffffff8ae28022 R08: ffff8880b912795b R09: 1ffff11017224f2b [ 78.932461][ T4311] R10: dffffc0000000000 R11: ffffed1017224f2c R12: 00ffffffffd3bdd8 [ 78.940455][ T4311] R13: ffffc90002e5f2d5 R14: 00000000d3bdd800 R15: 0000000037d3bdd8 [ 78.948448][ T4311] FS: 000055557aa94500(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 78.957496][ T4311] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 78.964097][ T4311] CR2: 000055fd726e1ca0 CR3: 000000007ccf1000 CR4: 00000000003506e0 [ 78.972189][ T4311] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 78.980442][ T4311] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 78.988715][ T4311] Call Trace: [ 78.992016][ T4311] [ 78.994975][ T4311] pointer+0x7b2/0xc60 [ 78.999097][ T4311] ? __lock_acquire+0x1305/0x7b50 [ 79.004148][ T4311] ? string+0x290/0x290 [ 79.008377][ T4311] ? format_decode+0x8b1/0x1330 [ 79.013444][ T4311] vsnprintf+0xd7c/0x1c20 [ 79.017862][ T4311] vprintk_store+0x378/0x11b0 [ 79.022574][ T4311] ? printk_parse_prefix+0x310/0x310 [ 79.027872][ T4311] ? widen_string+0x3b/0x320 [ 79.032746][ T4311] ? string+0x257/0x290 [ 79.036923][ T4311] ? vsnprintf+0x1b22/0x1c20 [ 79.041905][ T4311] ? snprintf+0xe5/0x140 [ 79.046195][ T4311] ? vscnprintf+0x80/0x80 [ 79.050561][ T4311] vprintk_emit+0x85/0x150 [ 79.055346][ T4311] dev_vprintk_emit+0x2c2/0x360 [ 79.060311][ T4311] ? _dev_info+0x170/0x170 [ 79.064760][ T4311] ? lockdep_hardirqs_on+0x94/0x140 [ 79.070160][ T4311] dev_printk_emit+0xeb/0x140 [ 79.074864][ T4311] ? stack_trace_snprint+0xe0/0xe0 [ 79.080273][ T4311] ? dev_vprintk_emit+0x360/0x360 [ 79.085326][ T4311] ? __kasan_kmalloc+0xc6/0xe0 [ 79.090116][ T4311] ? __kasan_kmalloc+0xaf/0xe0 [ 79.094911][ T4311] ? memdup_user+0x22/0xb0 [ 79.099417][ T4311] ? dvb_usercopy+0x191/0x2b0 [ 79.104142][ T4311] __dynamic_dev_dbg+0x200/0x2b0 [ 79.109214][ T4311] ? __dynamic_pr_debug+0x240/0x240 [ 79.114564][ T4311] ? __might_fault+0xb3/0x110 [ 79.119363][ T4311] dtv_property_process_get+0x3eca/0x4090 [ 79.125202][ T4311] dvb_frontend_do_ioctl+0x227d/0x3b90 [ 79.130800][ T4311] ? unwind_get_return_address+0x49/0x80 [ 79.136469][ T4311] ? stack_trace_save+0xf0/0xf0 [ 79.141477][ T4311] ? kfree+0xef/0x2a0 [ 79.145504][ T4311] ? dvb_frontend_release+0x4a0/0x4a0 [ 79.151018][ T4311] ? stack_trace_save+0xa6/0xf0 [ 79.156918][ T4311] ? stack_trace_snprint+0xe0/0xe0 [ 79.162187][ T4311] ? slab_free_freelist_hook+0xec/0x170 [ 79.167860][ T4311] ? security_file_ioctl+0x6c/0xa0 [ 79.173048][ T4311] ? __se_sys_ioctl+0x48/0x170 [ 79.178222][ T4311] ? do_syscall_64+0x4c/0xa0 [ 79.182864][ T4311] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.189067][ T4311] ? kfree+0xef/0x2a0 [ 79.193285][ T4311] ? kasan_set_track+0x62/0x70 [ 79.198155][ T4311] ? kasan_set_track+0x4b/0x70 [ 79.203028][ T4311] ? kasan_set_free_info+0x1f/0x40 [ 79.208161][ T4311] ? ____kasan_slab_free+0xd5/0x110 [ 79.213375][ T4311] ? slab_free_freelist_hook+0xec/0x170 [ 79.219121][ T4311] ? mark_lock+0x94/0x320 [ 79.223472][ T4311] ? __lock_acquire+0x13dc/0x7b50 [ 79.228540][ T4311] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 79.234670][ T4311] ? verify_lock_unused+0x140/0x140 [ 79.239950][ T4311] ? __lock_acquire+0x7b50/0x7b50 [ 79.245529][ T4311] ? __might_fault+0xb3/0x110 [ 79.250312][ T4311] ? _copy_from_user+0x111/0x170 [ 79.255466][ T4311] dvb_usercopy+0x191/0x2b0 [ 79.259993][ T4311] ? dvb_frontend_release+0x4a0/0x4a0 [ 79.265595][ T4311] ? dvb_generic_ioctl+0xb0/0xb0 [ 79.270739][ T4311] ? lock_chain_count+0x20/0x20 [ 79.275616][ T4311] ? dvb_frontend_poll+0x1f0/0x1f0 [ 79.281134][ T4311] dvb_frontend_ioctl+0x58/0x70 [ 79.286007][ T4311] __se_sys_ioctl+0xfa/0x170 [ 79.290614][ T4311] do_syscall_64+0x4c/0xa0 [ 79.295062][ T4311] ? clear_bhb_loop+0x30/0x80 [ 79.300168][ T4311] ? clear_bhb_loop+0x30/0x80 [ 79.304876][ T4311] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.310795][ T4311] RIP: 0033:0x7ff0f3124159 [ 79.315221][ T4311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.335016][ T4311] RSP: 002b:00007ffec85f7f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 79.343545][ T4311] RAX: ffffffffffffffda RBX: 00007ff0f33abfa0 RCX: 00007ff0f3124159 [ 79.351528][ T4311] RDX: 0000200000000400 RSI: 0000000080106f53 RDI: 0000000000000004 [ 79.359512][ T4311] RBP: 00007ff0f31bb06b R08: 0000000000000000 R09: 0000000000000000 [ 79.367676][ T4311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.376102][ T4311] R13: 00007ff0f33abfac R14: 00007ff0f33abfa0 R15: 00007ff0f33abfa0 [ 79.384317][ T4311] [ 79.387409][ T4311] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 79.394779][ T4311] CPU: 1 PID: 4311 Comm: syz.0.17 Not tainted syzkaller #0 [ 79.401981][ T4311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 79.412909][ T4311] Call Trace: [ 79.416301][ T4311] [ 79.419265][ T4311] dump_stack_lvl+0x188/0x250 [ 79.423976][ T4311] ? show_regs_print_info+0x20/0x20 [ 79.429172][ T4311] ? load_image+0x410/0x410 [ 79.433697][ T4311] panic+0x2f8/0x850 [ 79.437608][ T4311] ? bpf_jit_dump+0xd0/0xd0 [ 79.442389][ T4311] ? vsnprintf+0x1548/0x1c20 [ 79.446999][ T4311] __warn+0x248/0x2b0 [ 79.450983][ T4311] ? vsnprintf+0x1548/0x1c20 [ 79.455575][ T4311] report_bug+0x1b9/0x2e0 [ 79.459910][ T4311] handle_bug+0x3a/0x70 [ 79.464114][ T4311] exc_invalid_op+0x16/0x40 [ 79.468727][ T4311] asm_exc_invalid_op+0x16/0x20 [ 79.474105][ T4311] RIP: 0010:vsnprintf+0x1548/0x1c20 [ 79.479417][ T4311] Code: 44 89 fe e8 0a 31 aa 05 0f 0b e9 be f7 ff ff e8 ce fb 6c fd c6 05 22 4c 6b 09 01 48 c7 c7 e0 6d 7d 8a 44 89 fe e8 e8 30 aa 05 <0f> 0b e9 59 fa ff ff 89 e9 80 e1 07 38 c1 0f 8c 8e fd ff ff 48 89 [ 79.499389][ T4311] RSP: 0018:ffffc90002e5eef0 EFLAGS: 00010046 [ 79.501300][ C0] virtqueue callback for ffff888146e6e700 (ffffffff8444ab50) [ 79.505574][ T4311] RAX: 567900820c389c00 RBX: ffff0a0000000001 RCX: ffff888025b48000 [ 79.505594][ T4311] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 79.513294][ C0] virtqueue interrupt with no work for ffff888146e6e600 [ 79.521550][ T4311] RBP: ffffffff8ae28022 R08: ffff8880b912795b R09: 1ffff11017224f2b [ 79.530454][ C0] virtqueue interrupt with no work for ffff888146e6e500 [ 79.537749][ T4311] R10: dffffc0000000000 R11: ffffed1017224f2c R12: 00ffffffffd3bdd8 [ 79.561541][ T4311] R13: ffffc90002e5f2d5 R14: 00000000d3bdd800 R15: 0000000037d3bdd8 [ 79.569657][ T4311] pointer+0x7b2/0xc60 [ 79.573933][ T4311] ? __lock_acquire+0x1305/0x7b50 [ 79.579055][ T4311] ? string+0x290/0x290 [ 79.583475][ T4311] ? format_decode+0x8b1/0x1330 [ 79.588344][ T4311] vsnprintf+0xd7c/0x1c20 [ 79.592710][ T4311] vprintk_store+0x378/0x11b0 [ 79.597413][ T4311] ? printk_parse_prefix+0x310/0x310 [ 79.602794][ T4311] ? widen_string+0x3b/0x320 [ 79.607390][ T4311] ? string+0x257/0x290 [ 79.611546][ T4311] ? vsnprintf+0x1b22/0x1c20 [ 79.616241][ T4311] ? snprintf+0xe5/0x140 [ 79.620579][ T4311] ? vscnprintf+0x80/0x80 [ 79.625138][ T4311] vprintk_emit+0x85/0x150 [ 79.629970][ T4311] dev_vprintk_emit+0x2c2/0x360 [ 79.634827][ T4311] ? _dev_info+0x170/0x170 [ 79.639436][ T4311] ? lockdep_hardirqs_on+0x94/0x140 [ 79.644646][ T4311] dev_printk_emit+0xeb/0x140 [ 79.649390][ T4311] ? stack_trace_snprint+0xe0/0xe0 [ 79.655220][ T4311] ? dev_vprintk_emit+0x360/0x360 [ 79.660421][ T4311] ? __kasan_kmalloc+0xc6/0xe0 [ 79.665300][ T4311] ? __kasan_kmalloc+0xaf/0xe0 [ 79.670070][ T4311] ? memdup_user+0x22/0xb0 [ 79.674489][ T4311] ? dvb_usercopy+0x191/0x2b0 [ 79.679193][ T4311] __dynamic_dev_dbg+0x200/0x2b0 [ 79.684313][ T4311] ? __dynamic_pr_debug+0x240/0x240 [ 79.689536][ T4311] ? __might_fault+0xb3/0x110 [ 79.694227][ T4311] dtv_property_process_get+0x3eca/0x4090 [ 79.699962][ T4311] dvb_frontend_do_ioctl+0x227d/0x3b90 [ 79.705481][ T4311] ? unwind_get_return_address+0x49/0x80 [ 79.711218][ T4311] ? stack_trace_save+0xf0/0xf0 [ 79.716216][ T4311] ? kfree+0xef/0x2a0 [ 79.720220][ T4311] ? dvb_frontend_release+0x4a0/0x4a0 [ 79.725765][ T4311] ? stack_trace_save+0xa6/0xf0 [ 79.730801][ T4311] ? stack_trace_snprint+0xe0/0xe0 [ 79.735932][ T4311] ? slab_free_freelist_hook+0xec/0x170 [ 79.741506][ T4311] ? security_file_ioctl+0x6c/0xa0 [ 79.746624][ T4311] ? __se_sys_ioctl+0x48/0x170 [ 79.751425][ T4311] ? do_syscall_64+0x4c/0xa0 [ 79.756015][ T4311] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.762088][ T4311] ? kfree+0xef/0x2a0 [ 79.766073][ T4311] ? kasan_set_track+0x62/0x70 [ 79.771086][ T4311] ? kasan_set_track+0x4b/0x70 [ 79.775869][ T4311] ? kasan_set_free_info+0x1f/0x40 [ 79.781336][ T4311] ? ____kasan_slab_free+0xd5/0x110 [ 79.786541][ T4311] ? slab_free_freelist_hook+0xec/0x170 [ 79.792185][ T4311] ? mark_lock+0x94/0x320 [ 79.796614][ T4311] ? __lock_acquire+0x13dc/0x7b50 [ 79.801684][ T4311] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 79.807669][ T4311] ? verify_lock_unused+0x140/0x140 [ 79.812901][ T4311] ? __lock_acquire+0x7b50/0x7b50 [ 79.817931][ T4311] ? __might_fault+0xb3/0x110 [ 79.822617][ T4311] ? _copy_from_user+0x111/0x170 [ 79.827561][ T4311] dvb_usercopy+0x191/0x2b0 [ 79.832066][ T4311] ? dvb_frontend_release+0x4a0/0x4a0 [ 79.837439][ T4311] ? dvb_generic_ioctl+0xb0/0xb0 [ 79.842393][ T4311] ? lock_chain_count+0x20/0x20 [ 79.847247][ T4311] ? dvb_frontend_poll+0x1f0/0x1f0 [ 79.852476][ T4311] dvb_frontend_ioctl+0x58/0x70 [ 79.857364][ T4311] __se_sys_ioctl+0xfa/0x170 [ 79.861979][ T4311] do_syscall_64+0x4c/0xa0 [ 79.866577][ T4311] ? clear_bhb_loop+0x30/0x80 [ 79.871249][ T4311] ? clear_bhb_loop+0x30/0x80 [ 79.876036][ T4311] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.882036][ T4311] RIP: 0033:0x7ff0f3124159 [ 79.886458][ T4311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.906509][ T4311] RSP: 002b:00007ffec85f7f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 79.915016][ T4311] RAX: ffffffffffffffda RBX: 00007ff0f33abfa0 RCX: 00007ff0f3124159 [ 79.922992][ T4311] RDX: 0000200000000400 RSI: 0000000080106f53 RDI: 0000000000000004 [ 79.930986][ T4311] RBP: 00007ff0f31bb06b R08: 0000000000000000 R09: 0000000000000000 [ 79.939019][ T4311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.946993][ T4311] R13: 00007ff0f33abfac R14: 00007ff0f33abfa0 R15: 00007ff0f33abfa0 [ 79.954976][ T4311] [ 79.958072][ T4311] Kernel Offset: disabled [ 79.962484][ T4311] Rebooting in 86400 seconds..