Warning: Permanently added '10.128.0.15' (ED25519) to the list of known hosts. 2026/09/20 08:56:15 parsed 1 programs 2026/09/20 08:56:15 serving rpc on tcp://45673 [ 62.626136][ T4197] cgroup: Unknown subsys name 'net' [ 62.774936][ T4197] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 63.995837][ T4197] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 65.727308][ T4237] chnl_net:caif_netlink_parms(): no params data found [ 65.768785][ T4237] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.776754][ T4237] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.785806][ T4237] device bridge_slave_0 entered promiscuous mode [ 65.794933][ T4237] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.802296][ T4237] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.810040][ T4237] device bridge_slave_1 entered promiscuous mode [ 65.832607][ T4237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.844503][ T4237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.873840][ T4237] team0: Port device team_slave_0 added [ 65.882372][ T4237] team0: Port device team_slave_1 added [ 65.903840][ T4237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.912041][ T4237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.940107][ T4237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.954505][ T4237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.962047][ T4237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.989400][ T4237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.028336][ T4237] device hsr_slave_0 entered promiscuous mode [ 66.035525][ T4237] device hsr_slave_1 entered promiscuous mode [ 66.171891][ T4237] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.185873][ T4237] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.197557][ T4237] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.208855][ T4237] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.239516][ T4237] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.246775][ T4237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.254737][ T4237] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.261915][ T4237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.317705][ T4237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.332790][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.345108][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.354457][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.362780][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 66.377347][ T4237] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.390804][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.399677][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.406790][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.426210][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.435092][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.442502][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.465230][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.475085][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.484635][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.497892][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.511551][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.523980][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.638838][ T4237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.652522][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.661185][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.687872][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.710826][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.719904][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.729731][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.740356][ T4237] device veth0_vlan entered promiscuous mode [ 66.751976][ T4237] device veth1_vlan entered promiscuous mode [ 66.774962][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.790989][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.801474][ T4237] device veth0_macvtap entered promiscuous mode [ 66.812763][ T4237] device veth1_macvtap entered promiscuous mode [ 66.831626][ T4237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.839337][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.849277][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.857582][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.866891][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.879458][ T4237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.888462][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.897693][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.908682][ T4237] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.917714][ T4237] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.927038][ T4237] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.935876][ T4237] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.290801][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.298844][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.309864][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.335803][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.344732][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.354226][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2026/09/20 08:56:23 executed programs: 0 [ 69.143210][ T4289] chnl_net:caif_netlink_parms(): no params data found [ 69.195006][ T4289] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.202385][ T4289] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.210430][ T4289] device bridge_slave_0 entered promiscuous mode [ 69.218473][ T4289] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.226230][ T4289] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.234250][ T4289] device bridge_slave_1 entered promiscuous mode [ 69.253177][ T4289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.264555][ T4289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.287510][ T4289] team0: Port device team_slave_0 added [ 69.296227][ T4289] team0: Port device team_slave_1 added [ 69.323046][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.336372][ T4289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.343563][ T4289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.370049][ T4289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.383639][ T4289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.390804][ T4289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.417007][ T4289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.443181][ T4289] device hsr_slave_0 entered promiscuous mode [ 69.451089][ T4289] device hsr_slave_1 entered promiscuous mode [ 69.457954][ T4289] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.465803][ T4289] Cannot create hsr debugfs directory [ 71.101112][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 71.262264][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.268943][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.147660][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.185080][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.228201][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.012199][ T4289] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.021563][ T4289] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.030644][ T4289] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.041015][ T4289] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.103056][ T4289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.123434][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.133750][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.144052][ T4289] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.153928][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.162886][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.173367][ T498] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.180631][ T498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.188669][ T4320] Bluetooth: hci0: command 0x041b tx timeout [ 73.212173][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.220161][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.228851][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.237649][ T498] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.244741][ T498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.252501][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.283217][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.293581][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.302742][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.312352][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.325802][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.336739][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.347446][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.356177][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.366650][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.375261][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.407161][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.489078][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.497009][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.508855][ T4289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.541108][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.552395][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.569100][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.578394][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.588077][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.598405][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.608245][ T4289] device veth0_vlan entered promiscuous mode [ 73.637568][ T4289] device veth1_vlan entered promiscuous mode [ 73.654767][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.663366][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.672246][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.680897][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.693567][ T4289] device veth0_macvtap entered promiscuous mode [ 73.707646][ T4289] device veth1_macvtap entered promiscuous mode [ 73.732664][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.744115][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.757469][ T4289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.769050][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.777457][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.786109][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.795212][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.813623][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.825103][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.836696][ T4289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.848807][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.858219][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.871363][ T9] device hsr_slave_0 left promiscuous mode [ 73.878164][ T9] device hsr_slave_1 left promiscuous mode [ 73.885642][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.894803][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.904642][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.912341][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.920332][ T9] device bridge_slave_1 left promiscuous mode [ 73.927671][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.941689][ T9] device bridge_slave_0 left promiscuous mode [ 73.948138][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.964266][ T9] device veth1_macvtap left promiscuous mode [ 73.970732][ T9] device veth0_macvtap left promiscuous mode [ 73.976775][ T9] device veth1_vlan left promiscuous mode [ 73.983700][ T9] device veth0_vlan left promiscuous mode [ 74.134106][ T9] team0 (unregistering): Port device team_slave_1 removed [ 74.148560][ T9] team0 (unregistering): Port device team_slave_0 removed [ 74.161288][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.174730][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.221688][ T9] bond0 (unregistering): Released all slaves [ 74.274605][ T4289] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.283484][ T4289] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.292408][ T4289] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.301721][ T4289] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.387106][ T498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.396869][ T498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.405620][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.427187][ T498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 2026/09/20 08:56:28 executed programs: 2 [ 74.435853][ T498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.448346][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.029271][ T4349] loop0: detected capacity change from 0 to 1024 [ 75.068874][ T4349] hfsplus: invalid length 1033 has been corrected to 255 [ 75.089791][ T4349] hfsplus: invalid length 1033 has been corrected to 255 [ 75.123909][ T4349] ------------[ cut here ]------------ [ 75.129387][ T4349] field width 936623576 too large [ 75.129660][ T4349] WARNING: CPU: 0 PID: 4349 at lib/vsprintf.c:2699 vsnprintf+0x1548/0x1c20 [ 75.135147][ T4349] Modules linked in: [ 75.135168][ T4349] CPU: 0 PID: 4349 Comm: syz.0.17 Not tainted syzkaller #0 [ 75.135188][ T4349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 75.135203][ T4349] RIP: 0010:vsnprintf+0x1548/0x1c20 [ 75.147877][ T4349] Code: 44 89 fe e8 0a 31 aa 05 0f 0b e9 be f7 ff ff e8 ce fb 6c fd c6 05 22 4c 6b 09 01 48 c7 c7 e0 6d 7d 8a 44 89 fe e8 e8 30 aa 05 <0f> 0b e9 59 fa ff ff 89 e9 80 e1 07 38 c1 0f 8c 8e fd ff ff 48 89 [ 75.192273][ T4349] RSP: 0018:ffffc900030ceef0 EFLAGS: 00010046 [ 75.192294][ T4349] RAX: b40db43fccd46a00 RBX: ffff0a0000000001 RCX: ffff88802cd15940 [ 75.192304][ T4349] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 75.192313][ T4349] RBP: ffffffff8ae28022 R08: ffff8880b902795b R09: 1ffff11017204f2b [ 75.192323][ T4349] R10: dffffc0000000000 R11: ffffed1017204f2c R12: 00ffffffffd3bdd8 [ 75.192333][ T4349] R13: ffffc900030cf2d5 R14: 00000000d3bdd800 R15: 0000000037d3bdd8 [ 75.192343][ T4349] FS: 0000555566570500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 75.192356][ T4349] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.192366][ T4349] CR2: 00007fc2442be000 CR3: 000000002097c000 CR4: 00000000003506f0 [ 75.192379][ T4349] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 75.192388][ T4349] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 75.192397][ T4349] Call Trace: [ 75.192402][ T4349] [ 75.192417][ T4349] pointer+0x7b2/0xc60 [ 75.214402][ T4349] ? __lock_acquire+0x1305/0x7b50 [ 75.238650][ T4349] ? string+0x290/0x290 [ 75.298185][ T4349] ? format_decode+0x8b1/0x1330 [ 75.303993][ T4349] vsnprintf+0xd7c/0x1c20 [ 75.308350][ T4349] vprintk_store+0x378/0x11b0 [ 75.313141][ T4349] ? printk_parse_prefix+0x310/0x310 [ 75.318454][ T4349] ? widen_string+0x3b/0x320 [ 75.323046][ T4349] ? string+0x257/0x290 [ 75.327356][ T4349] ? vsnprintf+0x1b22/0x1c20 [ 75.332423][ T4349] ? snprintf+0xe5/0x140 [ 75.336861][ T4349] ? vscnprintf+0x80/0x80 [ 75.341307][ T4349] vprintk_emit+0x85/0x150 [ 75.345744][ T4349] dev_vprintk_emit+0x2c2/0x360 [ 75.350730][ T4349] ? _dev_info+0x170/0x170 [ 75.355195][ T4349] ? lockdep_hardirqs_on+0x94/0x140 [ 75.360424][ T4349] dev_printk_emit+0xeb/0x140 [ 75.365136][ T4349] ? stack_trace_snprint+0xe0/0xe0 [ 75.370276][ T4349] ? dev_vprintk_emit+0x360/0x360 [ 75.375307][ T4349] ? __kasan_kmalloc+0xc6/0xe0 [ 75.380870][ T4349] ? __kasan_kmalloc+0xaf/0xe0 [ 75.385643][ T4349] ? memdup_user+0x22/0xb0 [ 75.390161][ T4349] ? dvb_usercopy+0x191/0x2b0 [ 75.394840][ T4349] __dynamic_dev_dbg+0x200/0x2b0 [ 75.399972][ T4349] ? __dynamic_pr_debug+0x240/0x240 [ 75.405275][ T4349] ? __might_fault+0xb3/0x110 [ 75.409953][ T4349] dtv_property_process_get+0x3eca/0x4090 [ 75.415685][ T4349] dvb_frontend_do_ioctl+0x227d/0x3b90 [ 75.421506][ T4349] ? unwind_get_return_address+0x49/0x80 [ 75.427158][ T4349] ? stack_trace_save+0xf0/0xf0 [ 75.432116][ T4349] ? kfree+0xef/0x2a0 [ 75.436113][ T4349] ? dvb_frontend_release+0x4a0/0x4a0 [ 75.441491][ T4349] ? stack_trace_save+0xa6/0xf0 [ 75.446377][ T4349] ? stack_trace_snprint+0xe0/0xe0 [ 75.451501][ T4349] ? slab_free_freelist_hook+0xec/0x170 [ 75.457055][ T4349] ? security_file_ioctl+0x6c/0xa0 [ 75.462175][ T4349] ? __se_sys_ioctl+0x48/0x170 [ 75.466935][ T4349] ? do_syscall_64+0x4c/0xa0 [ 75.471530][ T4349] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 75.477708][ T4349] ? kfree+0xef/0x2a0 [ 75.481697][ T4349] ? kasan_set_track+0x62/0x70 [ 75.486637][ T4349] ? kasan_set_track+0x4b/0x70 [ 75.491437][ T4349] ? kasan_set_free_info+0x1f/0x40 [ 75.496639][ T4349] ? ____kasan_slab_free+0xd5/0x110 [ 75.501841][ T4349] ? slab_free_freelist_hook+0xec/0x170 [ 75.507390][ T4349] ? mark_lock+0x94/0x320 [ 75.511721][ T4349] ? __lock_acquire+0x13dc/0x7b50 [ 75.516759][ T4349] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 75.522739][ T4349] ? verify_lock_unused+0x140/0x140 [ 75.528010][ T4349] ? __lock_acquire+0x7b50/0x7b50 [ 75.533039][ T4349] ? __might_fault+0xb3/0x110 [ 75.537810][ T4349] ? _copy_from_user+0x111/0x170 [ 75.542785][ T4349] dvb_usercopy+0x191/0x2b0 [ 75.547291][ T4349] ? dvb_frontend_release+0x4a0/0x4a0 [ 75.552666][ T4349] ? dvb_generic_ioctl+0xb0/0xb0 [ 75.557616][ T4349] ? lock_chain_count+0x20/0x20 [ 75.562468][ T4349] ? dvb_frontend_poll+0x1f0/0x1f0 [ 75.567581][ T4349] dvb_frontend_ioctl+0x58/0x70 [ 75.572439][ T4349] __se_sys_ioctl+0xfa/0x170 [ 75.577031][ T4349] do_syscall_64+0x4c/0xa0 [ 75.581451][ T4349] ? clear_bhb_loop+0x30/0x80 [ 75.586135][ T4349] ? clear_bhb_loop+0x30/0x80 [ 75.590819][ T4349] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 75.596719][ T4349] RIP: 0033:0x7f11627ef159 [ 75.601333][ T4349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.620937][ T4349] RSP: 002b:00007ffcd778a6d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 75.629536][ T4349] RAX: ffffffffffffffda RBX: 00007f1162a76fa0 RCX: 00007f11627ef159 [ 75.637704][ T4349] RDX: 0000200000000400 RSI: 0000000080106f53 RDI: 0000000000000004 [ 75.645676][ T4349] RBP: 00007f116288606b R08: 0000000000000000 R09: 0000000000000000 [ 75.653643][ T4349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.661639][ T4349] R13: 00007f1162a76fac R14: 00007f1162a76fa0 R15: 00007f1162a76fa0 [ 75.669617][ T4349] [ 75.672652][ T4349] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 75.677141][ C1] virtqueue callback for ffff8881470d8500 (ffffffff85068310) [ 75.681604][ T4349] CPU: 0 PID: 4349 Comm: syz.0.17 Not tainted syzkaller #0 [ 75.681627][ T4349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 75.688991][ C1] sd 0:0:1:0: cmd ffff888024a36928 response 0 status 0x0 sense_len 0 [ 75.696154][ T4349] Call Trace: [ 75.696164][ T4349] [ 75.696172][ T4349] dump_stack_lvl+0x188/0x250 [ 75.706304][ C1] No more buffers in queue [ 75.714967][ T4349] ? show_regs_print_info+0x20/0x20 [ 75.736711][ T4349] ? load_image+0x410/0x410 [ 75.741239][ T4349] panic+0x2f8/0x850 [ 75.745147][ T4349] ? bpf_jit_dump+0xd0/0xd0 [ 75.749662][ T4349] ? vsnprintf+0x1548/0x1c20 [ 75.754257][ T4349] __warn+0x248/0x2b0 [ 75.758237][ T4349] ? vsnprintf+0x1548/0x1c20 [ 75.762813][ T4349] report_bug+0x1b9/0x2e0 [ 75.767451][ T4349] handle_bug+0x3a/0x70 [ 75.771598][ T4349] exc_invalid_op+0x16/0x40 [ 75.776102][ T4349] asm_exc_invalid_op+0x16/0x20 [ 75.780944][ T4349] RIP: 0010:vsnprintf+0x1548/0x1c20 [ 75.786132][ T4349] Code: 44 89 fe e8 0a 31 aa 05 0f 0b e9 be f7 ff ff e8 ce fb 6c fd c6 05 22 4c 6b 09 01 48 c7 c7 e0 6d 7d 8a 44 89 fe e8 e8 30 aa 05 <0f> 0b e9 59 fa ff ff 89 e9 80 e1 07 38 c1 0f 8c 8e fd ff ff 48 89 [ 75.805851][ T4349] RSP: 0018:ffffc900030ceef0 EFLAGS: 00010046 [ 75.811915][ T4349] RAX: b40db43fccd46a00 RBX: ffff0a0000000001 RCX: ffff88802cd15940 [ 75.819960][ T4349] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 75.828103][ T4349] RBP: ffffffff8ae28022 R08: ffff8880b902795b R09: 1ffff11017204f2b [ 75.836070][ T4349] R10: dffffc0000000000 R11: ffffed1017204f2c R12: 00ffffffffd3bdd8 [ 75.844474][ T4349] R13: ffffc900030cf2d5 R14: 00000000d3bdd800 R15: 0000000037d3bdd8 [ 75.852459][ T4349] pointer+0x7b2/0xc60 [ 75.856525][ T4349] ? __lock_acquire+0x1305/0x7b50 [ 75.861571][ T4349] ? string+0x290/0x290 [ 75.865717][ T4349] ? format_decode+0x8b1/0x1330 [ 75.870781][ T4349] vsnprintf+0xd7c/0x1c20 [ 75.875209][ T4349] vprintk_store+0x378/0x11b0 [ 75.884266][ T4349] ? printk_parse_prefix+0x310/0x310 [ 75.893941][ T4349] ? widen_string+0x3b/0x320 [ 75.898532][ T4349] ? string+0x257/0x290 [ 75.903367][ T4349] ? vsnprintf+0x1b22/0x1c20 [ 75.907973][ T4349] ? snprintf+0xe5/0x140 [ 75.912230][ T4349] ? vscnprintf+0x80/0x80 [ 75.916655][ T4349] vprintk_emit+0x85/0x150 [ 75.921078][ T4349] dev_vprintk_emit+0x2c2/0x360 [ 75.926099][ T4349] ? _dev_info+0x170/0x170 [ 75.930506][ T4349] ? lockdep_hardirqs_on+0x94/0x140 [ 75.935700][ T4349] dev_printk_emit+0xeb/0x140 [ 75.940364][ T4349] ? stack_trace_snprint+0xe0/0xe0 [ 75.946378][ T4349] ? dev_vprintk_emit+0x360/0x360 [ 75.951425][ T4349] ? __kasan_kmalloc+0xc6/0xe0 [ 75.956179][ T4349] ? __kasan_kmalloc+0xaf/0xe0 [ 75.960924][ T4349] ? memdup_user+0x22/0xb0 [ 75.965323][ T4349] ? dvb_usercopy+0x191/0x2b0 [ 75.970067][ T4349] __dynamic_dev_dbg+0x200/0x2b0 [ 75.974997][ T4349] ? __dynamic_pr_debug+0x240/0x240 [ 75.980183][ T4349] ? __might_fault+0xb3/0x110 [ 75.984869][ T4349] dtv_property_process_get+0x3eca/0x4090 [ 75.990572][ T4349] dvb_frontend_do_ioctl+0x227d/0x3b90 [ 75.996030][ T4349] ? unwind_get_return_address+0x49/0x80 [ 76.001646][ T4349] ? stack_trace_save+0xf0/0xf0 [ 76.006483][ T4349] ? kfree+0xef/0x2a0 [ 76.010444][ T4349] ? dvb_frontend_release+0x4a0/0x4a0 [ 76.015884][ T4349] ? stack_trace_save+0xa6/0xf0 [ 76.020720][ T4349] ? stack_trace_snprint+0xe0/0xe0 [ 76.025808][ T4349] ? slab_free_freelist_hook+0xec/0x170 [ 76.032654][ T4349] ? security_file_ioctl+0x6c/0xa0 [ 76.037795][ T4349] ? __se_sys_ioctl+0x48/0x170 [ 76.042631][ T4349] ? do_syscall_64+0x4c/0xa0 [ 76.047205][ T4349] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 76.053260][ T4349] ? kfree+0xef/0x2a0 [ 76.057320][ T4349] ? kasan_set_track+0x62/0x70 [ 76.062063][ T4349] ? kasan_set_track+0x4b/0x70 [ 76.067197][ T4349] ? kasan_set_free_info+0x1f/0x40 [ 76.072329][ T4349] ? ____kasan_slab_free+0xd5/0x110 [ 76.077640][ T4349] ? slab_free_freelist_hook+0xec/0x170 [ 76.083541][ T4349] ? mark_lock+0x94/0x320 [ 76.087865][ T4349] ? __lock_acquire+0x13dc/0x7b50 [ 76.092892][ T4349] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 76.099574][ T4349] ? verify_lock_unused+0x140/0x140 [ 76.105610][ T4349] ? __lock_acquire+0x7b50/0x7b50 [ 76.110637][ T4349] ? __might_fault+0xb3/0x110 [ 76.115305][ T4349] ? _copy_from_user+0x111/0x170 [ 76.120232][ T4349] dvb_usercopy+0x191/0x2b0 [ 76.124754][ T4349] ? dvb_frontend_release+0x4a0/0x4a0 [ 76.130110][ T4349] ? dvb_generic_ioctl+0xb0/0xb0 [ 76.135033][ T4349] ? lock_chain_count+0x20/0x20 [ 76.139868][ T4349] ? dvb_frontend_poll+0x1f0/0x1f0 [ 76.144979][ T4349] dvb_frontend_ioctl+0x58/0x70 [ 76.151653][ T4349] __se_sys_ioctl+0xfa/0x170 [ 76.156330][ T4349] do_syscall_64+0x4c/0xa0 [ 76.160734][ T4349] ? clear_bhb_loop+0x30/0x80 [ 76.165402][ T4349] ? clear_bhb_loop+0x30/0x80 [ 76.170081][ T4349] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 76.176397][ T4349] RIP: 0033:0x7f11627ef159 [ 76.180812][ T4349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.200650][ T4349] RSP: 002b:00007ffcd778a6d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.209061][ T4349] RAX: ffffffffffffffda RBX: 00007f1162a76fa0 RCX: 00007f11627ef159 [ 76.217562][ T4349] RDX: 0000200000000400 RSI: 0000000080106f53 RDI: 0000000000000004 [ 76.226061][ T4349] RBP: 00007f116288606b R08: 0000000000000000 R09: 0000000000000000 [ 76.235502][ T4349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.243467][ T4349] R13: 00007f1162a76fac R14: 00007f1162a76fa0 R15: 00007f1162a76fa0 [ 76.251431][ T4349] [ 76.254519][ T4349] Kernel Offset: disabled [ 76.258952][ T4349] Rebooting in 86400 seconds..