syzbot has bisected this issue to: commit 8d4826cc8a8aca01a3b5e95438dfc0eb3bd589ab Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx> Date: Thu Dec 19 21:52:53 2024 +0000 vsnprintf: collapse the number format state into one single state bisection log: https://syzkaller.appspot.com/x/bisect.txt?x=16342a18580000 start commit: 7b4b9bf203da Add linux-next specific files for 20250107 git tree: linux-next final oops: https://syzkaller.appspot.com/x/report.txt?x=15342a18580000 console output: https://syzkaller.appspot.com/x/log.txt?x=11342a18580000 kernel config: https://syzkaller.appspot.com/x/.config?x=63fa2c9d5e12faef dashboard link: https://syzkaller.appspot.com/bug?extid=fcee6b76cf2e261c51a4 syz repro: https://syzkaller.appspot.com/x/repro.syz?x=174f0a18580000 C reproducer: https://syzkaller.appspot.com/x/repro.c?x=168aecb0580000 Reported-by: syzbot+fcee6b76cf2e261c51a4@xxxxxxxxxxxxxxxxxxxxxxxxx Fixes: 8d4826cc8a8a ("vsnprintf: collapse the number format state into one single state") For information about bisection process see: https://goo.gl/tpsmEJ#bisection