[ 31.137358][ T1230] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 31.163011][ T1230] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 31.212660][ T1230] bond0 (unregistering): Released all slaves [ 31.351354][ T4398] 8021q: adding VLAN 0 to HW filter on device eth4 [ 31.441180][ T1230] hsr_slave_0: left promiscuous mode [ 31.441453][ T1230] hsr_slave_1: left promiscuous mode [ 31.441690][ T1230] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 31.441702][ T1230] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 31.442346][ T1230] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 31.442355][ T1230] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 31.453117][ T1230] veth1_macvtap: left promiscuous mode [ 31.453203][ T1230] veth0_macvtap: left promiscuous mode [ 31.453252][ T1230] veth1_vlan: left promiscuous mode [ 31.453291][ T1230] veth0_vlan: left promiscuous mode [ 31.551098][ T1230] team0 (unregistering): Port device team_slave_1 removed [ 31.557233][ T1230] team0 (unregistering): Port device team_slave_0 removed [ 31.601291][ T4398] 8021q: adding VLAN 0 to HW filter on device eth5 [ 31.724708][ T4398] 8021q: adding VLAN 0 to HW filter on device eth6 [ 31.858598][ T4398] 8021q: adding VLAN 0 to HW filter on device eth7 Warning: Permanently added '10.128.0.144' (ED25519) to the list of known hosts. [ 36.277597][ T5017] ------------[ cut here ]------------ [ 36.277600][ T5017] field width 1163001896 out of range [ 36.277827][ T5017] WARNING: lib/vsprintf.c:2654 at vsnprintf+0xb9c/0xd10, CPU#1: syz-executor257/5017 [ 36.281269][ T5017] Modules linked in: [ 36.281930][ T5017] CPU: 1 UID: 0 PID: 5017 Comm: syz-executor257 Not tainted syzkaller #0 PREEMPT [ 36.283544][ T5017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 36.285360][ T5017] pstate: 634000c5 (nZCv daIF +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 36.286732][ T5017] pc : vsnprintf+0xb9c/0xd10 [ 36.287672][ T5017] lr : vsnprintf+0xb9c/0xd10 [ 36.288537][ T5017] sp : ffff8000950d6b10 [ 36.289321][ T5017] x29: ffff8000950d6b60 x28: 00000000007fffff x27: ffff8000873d6422 [ 36.290755][ T5017] x26: 0000000045520028 x25: ffff8000950d6bd8 x24: 0000000000000402 [ 36.292205][ T5017] x23: ffff8000950d6f18 x22: ffff800087abd600 x21: ffff8000950d6bf0 [ 36.293706][ T5017] x20: ffff8000950d6ecb x19: dfff800000000000 x18: 0000000000000000 [ 36.295150][ T5017] x17: ffff8000839f990c x16: ffff800083a13a68 x15: 0000fffff4c1bf60 [ 36.296608][ T5017] x14: 0000000000000747 x13: 0000000000000001 x12: 0000000000000003 [ 36.298083][ T5017] x11: 0000000000000000 x10: 0000000000000002 x9 : a322e52aa42a7400 [ 36.299576][ T5017] x8 : a322e52aa42a7400 x7 : ffff8000804823d8 x6 : 0000000000000000 [ 36.301068][ T5017] x5 : 0000000000000001 x4 : 0000000000000000 x3 : ffff8000802f3e90 [ 36.302574][ T5017] x2 : 0000000100000000 x1 : ffff0000d38bd880 x0 : 0000000000000000 [ 36.304058][ T5017] Call trace: [ 36.304623][ T5017] vsnprintf+0xb9c/0xd10 (P) [ 36.305465][ T5017] pointer+0x5e8/0x6b4 [ 36.306198][ T5017] vsnprintf+0x618/0xd10 [ 36.307006][ T5017] vprintk_store+0x344/0xb94 [ 36.307886][ T5017] vprintk_emit+0x1bc/0x514 [ 36.308732][ T5017] dev_vprintk_emit+0x2ec/0x3b4 [ 36.309626][ T5017] dev_printk_emit+0xe0/0x130 [ 36.310486][ T5017] __dynamic_dev_dbg+0x1b4/0x254 [ 36.311408][ T5017] dtv_property_process_get+0x26bc/0x2838 [ 36.312438][ T5017] dvb_frontend_handle_ioctl+0x1644/0x2424 [ 36.313569][ T5017] dvb_frontend_do_ioctl+0x124/0x278 [ 36.314637][ T5017] dvb_usercopy+0x2a4/0x4d4 [ 36.315458][ T5017] dvb_frontend_ioctl+0x68/0x8c [ 36.316359][ T5017] __arm64_sys_ioctl+0x154/0x1cc [ 36.317274][ T5017] invoke_syscall+0x98/0x244 [ 36.318096][ T5017] el0_svc_common+0xec/0x23c [ 36.318903][ T5017] do_el0_svc+0x4c/0x5c [ 36.319694][ T5017] el0_svc+0x60/0x1d8 [ 36.320432][ T5017] el0t_64_sync_handler+0x44/0x104 [ 36.321369][ T5017] el0t_64_sync+0x198/0x19c [ 36.322189][ T5017] irq event stamp: 7442 [ 36.322950][ T5017] hardirqs last enabled at (7441): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 36.324825][ T5017] hardirqs last disabled at (7442): [] vprintk_store+0x13c/0xb94 [ 36.326515][ T5017] softirqs last enabled at (7400): [] do_sve_acc+0x32c/0x4b8 [ 36.328166][ T5017] softirqs last disabled at (7398): [] do_sve_acc+0x10c/0x4b8 [ 36.329888][ T5017] ---[ end trace 0000000000000000 ]--- [+] Enabled dynamic debug for dvb_frontend.c [+] open /dev/dvb/adapter0/frontend0 successful. [+] ioctl FE_GET_PROPERTY successful. [ 36.330961][ T5017] ================================================================== [ 36.330966][ T5017] BUG: KASAN: slab-out-of-bounds in hex_st