Warning: Permanently added '10.128.0.142' (ED25519) to the list of known hosts. 2026/09/20 20:37:01 parsed 1 programs 2026/09/20 20:37:01 serving rpc on tcp://34239 [ 65.925006][ T4197] cgroup: Unknown subsys name 'net' [ 66.029056][ T4197] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.498139][ T4197] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 69.114625][ T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.122681][ T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.138830][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.156996][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.167027][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.178838][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.695080][ T4229] syz-executor (4229) used greatest stack depth: 20944 bytes left [ 70.446357][ T4249] chnl_net:caif_netlink_parms(): no params data found [ 70.510947][ T4249] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.518819][ T4249] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.527622][ T4249] device bridge_slave_0 entered promiscuous mode [ 70.538382][ T4249] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.546124][ T4249] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.554527][ T4249] device bridge_slave_1 entered promiscuous mode [ 70.582702][ T4249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.596604][ T4249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.627444][ T4249] team0: Port device team_slave_0 added [ 70.637804][ T4249] team0: Port device team_slave_1 added [ 70.660196][ T4249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.667327][ T4249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.693890][ T4249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.707558][ T4249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.714808][ T4249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.741169][ T4249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.780139][ T4249] device hsr_slave_0 entered promiscuous mode [ 70.787081][ T4249] device hsr_slave_1 entered promiscuous mode [ 70.912147][ T4249] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.924776][ T4249] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.935779][ T4249] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.946403][ T4249] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.978890][ T4249] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.986395][ T4249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.994820][ T4249] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.001962][ T4249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.046014][ T4249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.060160][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.069266][ T1407] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.078249][ T1407] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.091349][ T4249] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.108366][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.118572][ T1407] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.125927][ T1407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.183645][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.195638][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.204475][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.211599][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.221401][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.235495][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.251856][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.262162][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.271943][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.295269][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.305505][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.321543][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.331657][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.342679][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.351398][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.363126][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.446255][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.453996][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.467140][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.470571][ T4249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.474516][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.493757][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.502577][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.520927][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.529969][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.539770][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.548052][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.559918][ T4249] device veth0_vlan entered promiscuous mode [ 71.572150][ T4249] device veth1_vlan entered promiscuous mode [ 71.590828][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.599308][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.607939][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.617125][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.627825][ T4249] device veth0_macvtap entered promiscuous mode [ 71.656580][ T4249] device veth1_macvtap entered promiscuous mode [ 71.671964][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.680074][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.689077][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.697526][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.707390][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.718567][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.727429][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.736323][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.748505][ T4249] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.757949][ T4249] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.766909][ T4249] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.775981][ T4249] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.899215][ T4249] syz-executor (4249) used greatest stack depth: 20304 bytes left 2026/09/20 20:37:10 executed programs: 0 [ 73.407834][ T4301] chnl_net:caif_netlink_parms(): no params data found [ 73.477152][ T4301] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.484429][ T4301] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.492822][ T4301] device bridge_slave_0 entered promiscuous mode [ 73.505134][ T4301] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.512264][ T4301] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.524126][ T4301] device bridge_slave_1 entered promiscuous mode [ 73.552267][ T4301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.565554][ T4301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.596614][ T4301] team0: Port device team_slave_0 added [ 73.605147][ T4301] team0: Port device team_slave_1 added [ 73.631424][ T4301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.640979][ T4301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.669724][ T4301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.682262][ T4301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.692377][ T4301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.720933][ T4301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.760002][ T4301] device hsr_slave_0 entered promiscuous mode [ 73.767033][ T4301] device hsr_slave_1 entered promiscuous mode [ 73.774048][ T4301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.782277][ T4301] Cannot create hsr debugfs directory [ 73.874254][ T4301] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.304177][ T4270] Bluetooth: hci0: command 0x0409 tx timeout [ 77.321298][ T4301] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.358131][ T4301] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.393614][ T23] Bluetooth: hci0: command 0x041b tx timeout [ 77.444461][ T4301] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.578622][ T4301] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.587412][ T4301] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.597575][ T4301] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.607066][ T4301] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.667245][ T4301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.678704][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.686822][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.697377][ T4301] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.722883][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.735820][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.744753][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.751814][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.762030][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.796341][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.805982][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.815020][ T1407] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.822105][ T1407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.845658][ T4301] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 77.856328][ T4301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.868653][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.878061][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.887294][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.897302][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.906071][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.915540][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.924808][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.933183][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.941853][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.950505][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.958977][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.966990][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.071472][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.079247][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.090960][ T4301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.111381][ T145] device hsr_slave_0 left promiscuous mode [ 78.118018][ T145] device hsr_slave_1 left promiscuous mode [ 78.126404][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.134299][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.146821][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.154941][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.163015][ T145] device bridge_slave_1 left promiscuous mode [ 78.170960][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.186089][ T145] device bridge_slave_0 left promiscuous mode [ 78.192496][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.209599][ T145] device veth1_macvtap left promiscuous mode [ 78.216604][ T145] device veth0_macvtap left promiscuous mode [ 78.222685][ T145] device veth1_vlan left promiscuous mode [ 78.228697][ T145] device veth0_vlan left promiscuous mode [ 78.380338][ T145] team0 (unregistering): Port device team_slave_1 removed [ 78.396784][ T145] team0 (unregistering): Port device team_slave_0 removed [ 78.409424][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.422340][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.478107][ T145] bond0 (unregistering): Released all slaves [ 78.535570][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.544673][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.562680][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.571507][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.580441][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.589165][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.598624][ T4301] device veth0_vlan entered promiscuous mode [ 78.614257][ T4301] device veth1_vlan entered promiscuous mode [ 78.638611][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 78.646868][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 78.656239][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.665821][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.677304][ T4301] device veth0_macvtap entered promiscuous mode [ 78.690315][ T4301] device veth1_macvtap entered promiscuous mode [ 78.703506][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.711644][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.724662][ T4301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.732101][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.741427][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.754569][ T4301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.761912][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.771695][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.782150][ T4301] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.792104][ T4301] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.802316][ T4301] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.813187][ T4301] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.881726][ T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.891788][ T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.911306][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.922526][ T1407] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 2026/09/20 20:37:16 executed programs: 2 [ 78.931088][ T1407] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.939245][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.473976][ T4270] Bluetooth: hci0: command 0x040f tx timeout [ 79.691232][ T4325] loop0: detected capacity change from 0 to 1024 [ 79.808680][ T4325] hfsplus: invalid length 1033 has been corrected to 255 [ 79.827422][ T4325] hfsplus: invalid length 1033 has been corrected to 255 [ 79.844752][ T4325] ------------[ cut here ]------------ [ 79.850424][ T4325] field width 936623576 too large [ 79.850802][ T4325] WARNING: CPU: 1 PID: 4325 at lib/vsprintf.c:2699 vsnprintf+0x1548/0x1c20 [ 79.864449][ T4325] Modules linked in: [ 79.868370][ T4325] CPU: 1 PID: 4325 Comm: syz.0.17 Not tainted syzkaller #0 [ 79.875671][ T4325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 79.885921][ T4325] RIP: 0010:vsnprintf+0x1548/0x1c20 [ 79.891255][ T4325] Code: 44 89 fe e8 0a 31 aa 05 0f 0b e9 be f7 ff ff e8 ce fb 6c fd c6 05 22 4c 6b 09 01 48 c7 c7 e0 6d 7d 8a 44 89 fe e8 e8 30 aa 05 <0f> 0b e9 59 fa ff ff 89 e9 80 e1 07 38 c1 0f 8c 8e fd ff ff 48 89 [ 79.911359][ T4325] RSP: 0018:ffffc900031ceef0 EFLAGS: 00010046 [ 79.917465][ T4325] RAX: d446bb05f837a300 RBX: ffff0a0000000001 RCX: ffff888025b5bb80 [ 79.925461][ T4325] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 79.933456][ T4325] RBP: ffffffff8ae28022 R08: ffff8880b912795b R09: 1ffff11017224f2b [ 79.941530][ T4325] R10: dffffc0000000000 R11: ffffed1017224f2c R12: 00ffffffffd3bdd8 [ 79.949615][ T4325] R13: ffffc900031cf2d5 R14: 00000000d3bdd800 R15: 0000000037d3bdd8 [ 79.957611][ T4325] FS: 0000555593b82500(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 79.966561][ T4325] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 79.973340][ T4325] CR2: 0000001b31824008 CR3: 000000007bceb000 CR4: 00000000003506e0 [ 79.981418][ T4325] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 79.989426][ T4325] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 79.997513][ T4325] Call Trace: [ 80.000814][ T4325] [ 80.003775][ T4325] pointer+0x7b2/0xc60 [ 80.007958][ T4325] ? __lock_acquire+0x1305/0x7b50 [ 80.013007][ T4325] ? string+0x290/0x290 [ 80.017182][ T4325] ? format_decode+0x8b1/0x1330 [ 80.022060][ T4325] vsnprintf+0xd7c/0x1c20 [ 80.026512][ T4325] vprintk_store+0x378/0x11b0 [ 80.031229][ T4325] ? printk_parse_prefix+0x310/0x310 [ 80.036529][ T4325] ? widen_string+0x3b/0x320 [ 80.041156][ T4325] ? string+0x257/0x290 [ 80.045367][ T4325] ? vsnprintf+0x1b22/0x1c20 [ 80.050006][ T4325] ? snprintf+0xe5/0x140 [ 80.054306][ T4325] ? vscnprintf+0x80/0x80 [ 80.058839][ T4325] vprintk_emit+0x85/0x150 [ 80.063298][ T4325] dev_vprintk_emit+0x2c2/0x360 [ 80.068257][ T4325] ? _dev_info+0x170/0x170 [ 80.072702][ T4325] ? lockdep_hardirqs_on+0x94/0x140 [ 80.078107][ T4325] dev_printk_emit+0xeb/0x140 [ 80.082998][ T4325] ? stack_trace_snprint+0xe0/0xe0 [ 80.088308][ T4325] ? dev_vprintk_emit+0x360/0x360 [ 80.094324][ T4325] ? __kasan_kmalloc+0xc6/0xe0 [ 80.099130][ T4325] ? __kasan_kmalloc+0xaf/0xe0 [ 80.103920][ T4325] ? memdup_user+0x22/0xb0 [ 80.108446][ T4325] ? dvb_usercopy+0x191/0x2b0 [ 80.113145][ T4325] __dynamic_dev_dbg+0x200/0x2b0 [ 80.118118][ T4325] ? __dynamic_pr_debug+0x240/0x240 [ 80.124089][ T4325] ? __might_fault+0xb3/0x110 [ 80.128817][ T4325] dtv_property_process_get+0x3eca/0x4090 [ 80.134666][ T4325] dvb_frontend_do_ioctl+0x227d/0x3b90 [ 80.140272][ T4325] ? unwind_get_return_address+0x49/0x80 [ 80.145936][ T4325] ? stack_trace_save+0xf0/0xf0 [ 80.151090][ T4325] ? kfree+0xef/0x2a0 [ 80.155101][ T4325] ? dvb_frontend_release+0x4a0/0x4a0 [ 80.160509][ T4325] ? stack_trace_save+0xa6/0xf0 [ 80.165394][ T4325] ? stack_trace_snprint+0xe0/0xe0 [ 80.170736][ T4325] ? slab_free_freelist_hook+0xec/0x170 [ 80.176297][ T4325] ? security_file_ioctl+0x6c/0xa0 [ 80.181419][ T4325] ? __se_sys_ioctl+0x48/0x170 [ 80.186185][ T4325] ? do_syscall_64+0x4c/0xa0 [ 80.190811][ T4325] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.196912][ T4325] ? kfree+0xef/0x2a0 [ 80.201003][ T4325] ? kasan_set_track+0x62/0x70 [ 80.205772][ T4325] ? kasan_set_track+0x4b/0x70 [ 80.210539][ T4325] ? kasan_set_free_info+0x1f/0x40 [ 80.215738][ T4325] ? ____kasan_slab_free+0xd5/0x110 [ 80.221039][ T4325] ? slab_free_freelist_hook+0xec/0x170 [ 80.226587][ T4325] ? mark_lock+0x94/0x320 [ 80.230920][ T4325] ? __lock_acquire+0x13dc/0x7b50 [ 80.236046][ T4325] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 80.242030][ T4325] ? verify_lock_unused+0x140/0x140 [ 80.247271][ T4325] ? __lock_acquire+0x7b50/0x7b50 [ 80.252304][ T4325] ? __might_fault+0xb3/0x110 [ 80.256984][ T4325] ? _copy_from_user+0x111/0x170 [ 80.261923][ T4325] dvb_usercopy+0x191/0x2b0 [ 80.266432][ T4325] ? dvb_frontend_release+0x4a0/0x4a0 [ 80.271804][ T4325] ? dvb_generic_ioctl+0xb0/0xb0 [ 80.276752][ T4325] ? lock_chain_count+0x20/0x20 [ 80.281606][ T4325] ? dvb_frontend_poll+0x1f0/0x1f0 [ 80.286855][ T4325] dvb_frontend_ioctl+0x58/0x70 [ 80.292084][ T4325] __se_sys_ioctl+0xfa/0x170 [ 80.296684][ T4325] do_syscall_64+0x4c/0xa0 [ 80.301114][ T4325] ? clear_bhb_loop+0x30/0x80 [ 80.305882][ T4325] ? clear_bhb_loop+0x30/0x80 [ 80.310562][ T4325] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.316637][ T4325] RIP: 0033:0x7f277fe96159 [ 80.321085][ T4325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.340729][ T4325] RSP: 002b:00007ffd6185e508 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 80.349158][ T4325] RAX: ffffffffffffffda RBX: 00007f278011dfa0 RCX: 00007f277fe96159 [ 80.357223][ T4325] RDX: 0000200000000400 RSI: 0000000080106f53 RDI: 0000000000000004 [ 80.365195][ T4325] RBP: 00007f277ff2d06b R08: 0000000000000000 R09: 0000000000000000 [ 80.373180][ T4325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.381356][ T4325] R13: 00007f278011dfac R14: 00007f278011dfa0 R15: 00007f278011dfa0 [ 80.389370][ T4325] [ 80.392397][ T4325] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 80.399685][ T4325] CPU: 1 PID: 4325 Comm: syz.0.17 Not tainted syzkaller #0 [ 80.407056][ T4325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 80.417119][ T4325] Call Trace: [ 80.420415][ T4325] [ 80.423359][ T4325] dump_stack_lvl+0x188/0x250 [ 80.428070][ T4325] ? show_regs_print_info+0x20/0x20 [ 80.433313][ T4325] ? load_image+0x410/0x410 [ 80.437845][ T4325] panic+0x2f8/0x850 [ 80.441754][ T4325] ? bpf_jit_dump+0xd0/0xd0 [ 80.446265][ T4325] ? vsnprintf+0x1548/0x1c20 [ 80.450881][ T4325] __warn+0x248/0x2b0 [ 80.454868][ T4325] ? vsnprintf+0x1548/0x1c20 [ 80.459462][ T4325] report_bug+0x1b9/0x2e0 [ 80.463821][ T4325] handle_bug+0x3a/0x70 [ 80.467990][ T4325] exc_invalid_op+0x16/0x40 [ 80.472495][ T4325] asm_exc_invalid_op+0x16/0x20 [ 80.477535][ T4325] RIP: 0010:vsnprintf+0x1548/0x1c20 [ 80.482759][ T4325] Code: 44 89 fe e8 0a 31 aa 05 0f 0b e9 be f7 ff ff e8 ce fb 6c fd c6 05 22 4c 6b 09 01 48 c7 c7 e0 6d 7d 8a 44 89 fe e8 e8 30 aa 05 <0f> 0b e9 59 fa ff ff 89 e9 80 e1 07 38 c1 0f 8c 8e fd ff ff 48 89 [ 80.502505][ T4325] RSP: 0018:ffffc900031ceef0 EFLAGS: 00010046 [ 80.508598][ T4325] RAX: d446bb05f837a300 RBX: ffff0a0000000001 RCX: ffff888025b5bb80 [ 80.516852][ T4325] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 80.525001][ T4325] RBP: ffffffff8ae28022 R08: ffff8880b912795b R09: 1ffff11017224f2b [ 80.533060][ T4325] R10: dffffc0000000000 R11: ffffed1017224f2c R12: 00ffffffffd3bdd8 [ 80.541308][ T4325] R13: ffffc900031cf2d5 R14: 00000000d3bdd800 R15: 0000000037d3bdd8 [ 80.549384][ T4325] pointer+0x7b2/0xc60 [ 80.553582][ T4325] ? __lock_acquire+0x1305/0x7b50 [ 80.558622][ T4325] ? string+0x290/0x290 [ 80.562779][ T4325] ? format_decode+0x8b1/0x1330 [ 80.567637][ T4325] vsnprintf+0xd7c/0x1c20 [ 80.572061][ T4325] vprintk_store+0x378/0x11b0 [ 80.576844][ T4325] ? printk_parse_prefix+0x310/0x310 [ 80.582318][ T4325] ? widen_string+0x3b/0x320 [ 80.587079][ T4325] ? string+0x257/0x290 [ 80.591237][ T4325] ? vsnprintf+0x1b22/0x1c20 [ 80.595945][ T4325] ? snprintf+0xe5/0x140 [ 80.600313][ T4325] ? vscnprintf+0x80/0x80 [ 80.604920][ T4325] vprintk_emit+0x85/0x150 [ 80.609340][ T4325] dev_vprintk_emit+0x2c2/0x360 [ 80.614258][ T4325] ? _dev_info+0x170/0x170 [ 80.618901][ T4325] ? lockdep_hardirqs_on+0x94/0x140 [ 80.624365][ T4325] dev_printk_emit+0xeb/0x140 [ 80.629098][ T4325] ? stack_trace_snprint+0xe0/0xe0 [ 80.634760][ T4325] ? dev_vprintk_emit+0x360/0x360 [ 80.639670][ C0] virtqueue callback for ffff88801e631f00 (ffffffff8444ab50) [ 80.640001][ T4325] ? __kasan_kmalloc+0xc6/0xe0 [ 80.647848][ C0] virtqueue interrupt with no work for ffff88801e631e00 [ 80.652896][ T4325] ? __kasan_kmalloc+0xaf/0xe0 [ 80.659905][ C0] virtqueue interrupt with no work for ffff88801e631d00 [ 80.671969][ T4325] ? memdup_user+0x22/0xb0 [ 80.676592][ T4325] ? dvb_usercopy+0x191/0x2b0 [ 80.681304][ T4325] __dynamic_dev_dbg+0x200/0x2b0 [ 80.686427][ T4325] ? __dynamic_pr_debug+0x240/0x240 [ 80.691735][ T4325] ? __might_fault+0xb3/0x110 [ 80.696594][ T4325] dtv_property_process_get+0x3eca/0x4090 [ 80.702329][ T4325] dvb_frontend_do_ioctl+0x227d/0x3b90 [ 80.707985][ T4325] ? unwind_get_return_address+0x49/0x80 [ 80.713795][ T4325] ? stack_trace_save+0xf0/0xf0 [ 80.718658][ T4325] ? kfree+0xef/0x2a0 [ 80.722654][ T4325] ? dvb_frontend_release+0x4a0/0x4a0 [ 80.728119][ T4325] ? stack_trace_save+0xa6/0xf0 [ 80.733332][ T4325] ? stack_trace_snprint+0xe0/0xe0 [ 80.738623][ T4325] ? slab_free_freelist_hook+0xec/0x170 [ 80.744258][ T4325] ? security_file_ioctl+0x6c/0xa0 [ 80.749807][ T4325] ? __se_sys_ioctl+0x48/0x170 [ 80.754824][ T4325] ? do_syscall_64+0x4c/0xa0 [ 80.759438][ T4325] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.765769][ T4325] ? kfree+0xef/0x2a0 [ 80.769749][ T4325] ? kasan_set_track+0x62/0x70 [ 80.774517][ T4325] ? kasan_set_track+0x4b/0x70 [ 80.779370][ T4325] ? kasan_set_free_info+0x1f/0x40 [ 80.784655][ T4325] ? ____kasan_slab_free+0xd5/0x110 [ 80.790180][ T4325] ? slab_free_freelist_hook+0xec/0x170 [ 80.795735][ T4325] ? mark_lock+0x94/0x320 [ 80.800068][ T4325] ? __lock_acquire+0x13dc/0x7b50 [ 80.805104][ T4325] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 80.811093][ T4325] ? verify_lock_unused+0x140/0x140 [ 80.816582][ T4325] ? __lock_acquire+0x7b50/0x7b50 [ 80.821614][ T4325] ? __might_fault+0xb3/0x110 [ 80.826307][ T4325] ? _copy_from_user+0x111/0x170 [ 80.831244][ T4325] dvb_usercopy+0x191/0x2b0 [ 80.835748][ T4325] ? dvb_frontend_release+0x4a0/0x4a0 [ 80.841121][ T4325] ? dvb_generic_ioctl+0xb0/0xb0 [ 80.846070][ T4325] ? lock_chain_count+0x20/0x20 [ 80.850926][ T4325] ? dvb_frontend_poll+0x1f0/0x1f0 [ 80.856037][ T4325] dvb_frontend_ioctl+0x58/0x70 [ 80.860979][ T4325] __se_sys_ioctl+0xfa/0x170 [ 80.865756][ T4325] do_syscall_64+0x4c/0xa0 [ 80.870172][ T4325] ? clear_bhb_loop+0x30/0x80 [ 80.874869][ T4325] ? clear_bhb_loop+0x30/0x80 [ 80.879571][ T4325] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.885482][ T4325] RIP: 0033:0x7f277fe96159 [ 80.890078][ T4325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.909704][ T4325] RSP: 002b:00007ffd6185e508 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 80.918222][ T4325] RAX: ffffffffffffffda RBX: 00007f278011dfa0 RCX: 00007f277fe96159 [ 80.926202][ T4325] RDX: 0000200000000400 RSI: 0000000080106f53 RDI: 0000000000000004 [ 80.934174][ T4325] RBP: 00007f277ff2d06b R08: 0000000000000000 R09: 0000000000000000 [ 80.942141][ T4325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.950110][ T4325] R13: 00007f278011dfac R14: 00007f278011dfa0 R15: 00007f278011dfa0 [ 80.958269][ T4325] [ 80.961376][ T4325] Kernel Offset: disabled [ 80.965779][ T4325] Rebooting in 86400 seconds..