Warning: Permanently added '10.128.1.18' (ED25519) to the list of known hosts. 2026/02/13 16:44:40 parsed 1 programs [ 83.426287][ T5798] cgroup: Unknown subsys name 'net' [ 83.658860][ T5798] cgroup: Unknown subsys name 'cpuset' [ 83.722934][ T5798] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.436007][ T5798] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.816479][ T807] cfg80211: failed to load regulatory.db [ 88.545264][ T1555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.545290][ T1555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.678761][ T87] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.678783][ T87] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.351349][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 92.610823][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.612118][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.623327][ T5856] bridge_slave_0: entered allmulticast mode [ 92.626001][ T5856] bridge_slave_0: entered promiscuous mode [ 92.645887][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.645982][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.646104][ T5856] bridge_slave_1: entered allmulticast mode [ 92.647533][ T5856] bridge_slave_1: entered promiscuous mode [ 92.697522][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.700578][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.731265][ T5856] team0: Port device team_slave_0 added [ 92.735588][ T5856] team0: Port device team_slave_1 added [ 92.765429][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.765442][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.765455][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.767977][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.767990][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.768010][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.836242][ T5856] hsr_slave_0: entered promiscuous mode [ 92.837537][ T5856] hsr_slave_1: entered promiscuous mode [ 93.197828][ T5856] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.244867][ T5856] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.275269][ T5856] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.315440][ T5856] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.429593][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.600154][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.655999][ T1555] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.656776][ T1555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.679244][ T3479] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.679363][ T3479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.871571][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.915345][ T5856] veth0_vlan: entered promiscuous mode [ 93.921351][ T5856] veth1_vlan: entered promiscuous mode [ 93.957124][ T5856] veth0_macvtap: entered promiscuous mode [ 93.960894][ T5856] veth1_macvtap: entered promiscuous mode [ 93.988881][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.003063][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.016081][ T1114] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.016195][ T1114] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.016242][ T1114] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.016274][ T1114] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.846958][ T1114] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.076007][ T1114] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.274254][ T1114] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.546666][ T1114] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.122011][ T5897] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.126712][ T5897] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.128315][ T5897] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.129849][ T5897] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.130539][ T5897] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2026/02/13 16:44:56 executed programs: 0 [ 96.878489][ T5897] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.884258][ T5897] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.888812][ T5897] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.889806][ T5897] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.890474][ T5897] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.047190][ T1114] bridge_slave_1: left allmulticast mode [ 97.047358][ T1114] bridge_slave_1: left promiscuous mode [ 97.048969][ T1114] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.153727][ T1114] bridge_slave_0: left allmulticast mode [ 97.153746][ T1114] bridge_slave_0: left promiscuous mode [ 97.153893][ T1114] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.463244][ T1114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.522975][ T1114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.544417][ T1114] bond0 (unregistering): Released all slaves [ 98.885083][ T1114] hsr_slave_0: left promiscuous mode [ 98.936761][ T1114] hsr_slave_1: left promiscuous mode [ 98.938865][ T1114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.938925][ T1114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.973166][ T5897] Bluetooth: hci0: command tx timeout [ 98.990578][ T1114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.990606][ T1114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.091059][ T1114] veth1_macvtap: left promiscuous mode [ 99.091278][ T1114] veth0_macvtap: left promiscuous mode [ 99.091550][ T1114] veth1_vlan: left promiscuous mode [ 99.091832][ T1114] veth0_vlan: left promiscuous mode [ 101.053740][ T5115] Bluetooth: hci0: command tx timeout [ 101.462945][ T1114] team0 (unregistering): Port device team_slave_1 removed [ 101.653104][ T1114] team0 (unregistering): Port device team_slave_0 removed [ 103.132387][ T5115] Bluetooth: hci0: command tx timeout [ 103.474501][ T5907] chnl_net:caif_netlink_parms(): no params data found [ 103.581219][ T5907] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.581355][ T5907] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.581476][ T5907] bridge_slave_0: entered allmulticast mode [ 103.593169][ T5907] bridge_slave_0: entered promiscuous mode [ 103.614046][ T5907] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.614221][ T5907] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.614388][ T5907] bridge_slave_1: entered allmulticast mode [ 103.617282][ T5907] bridge_slave_1: entered promiscuous mode [ 103.681971][ T5907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.700828][ T5907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.750370][ T5907] team0: Port device team_slave_0 added [ 103.760048][ T5907] team0: Port device team_slave_1 added [ 103.810209][ T5907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.810226][ T5907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.810249][ T5907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.857669][ T5907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.857685][ T5907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.857710][ T5907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.971263][ T5907] hsr_slave_0: entered promiscuous mode [ 103.978521][ T5907] hsr_slave_1: entered promiscuous mode [ 105.212389][ T5115] Bluetooth: hci0: command tx timeout [ 105.846392][ T5907] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.887091][ T5907] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.926431][ T5907] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.966715][ T5907] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.487415][ T5907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.515217][ T5907] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.534329][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.534539][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.537374][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.537503][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.769814][ T5907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.809866][ T5907] veth0_vlan: entered promiscuous mode [ 106.817342][ T5907] veth1_vlan: entered promiscuous mode [ 106.841900][ T5907] veth0_macvtap: entered promiscuous mode [ 106.847120][ T5907] veth1_macvtap: entered promiscuous mode [ 106.866434][ T5907] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.874197][ T5907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.897355][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.900104][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.945781][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.945830][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.078851][ T3479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.078870][ T3479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.116816][ T3479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.116836][ T3479] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/02/13 16:45:06 executed programs: 2 [ 107.434791][ T6010] loop0: detected capacity change from 0 to 32768 [ 107.438385][ T6010] ======================================================= [ 107.438385][ T6010] WARNING: The mand mount option has been deprecated and [ 107.438385][ T6010] and is ignored by this kernel. Remove the mand [ 107.438385][ T6010] option from the mount to silence this warning. [ 107.438385][ T6010] ======================================================= [ 107.560560][ T6010] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 107.640575][ T6010] overlayfs: upper fs does not support tmpfile. [ 107.655832][ T6010] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 107.656315][ T6010] [ 107.656321][ T6010] ====================================================== [ 107.656325][ T6010] WARNING: possible circular locking dependency detected [ 107.656336][ T6010] syzkaller #0 Not tainted [ 107.656342][ T6010] ------------------------------------------------------ [ 107.656346][ T6010] syz.0.17/6010 is trying to acquire lock: [ 107.656352][ T6010] ffff88805bf02d00 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_local_alloc_bits+0x11f/0x2610 [ 107.656385][ T6010] [ 107.656385][ T6010] but task is already holding lock: [ 107.656389][ T6010] ffff88805bf05c18 (&oi->ip_xattr_sem){+.+.}-{4:4}, at: ocfs2_xattr_set+0x475/0x13e0 [ 107.656412][ T6010] [ 107.656412][ T6010] which lock already depends on the new lock. [ 107.656412][ T6010] [ 107.656416][ T6010] [ 107.656416][ T6010] the existing dependency chain (in reverse order) is: [ 107.656419][ T6010] [ 107.656419][ T6010] -> #3 (&oi->ip_xattr_sem){+.+.}-{4:4}: [ 107.656431][ T6010] down_write+0x3a/0x50 [ 107.656445][ T6010] ocfs2_xattr_set_handle+0x3e6/0x810 [ 107.656458][ T6010] ocfs2_init_security_set+0xbd/0xe0 [ 107.656471][ T6010] ocfs2_mknod+0x1481/0x2210 [ 107.656480][ T6010] ocfs2_mkdir+0x181/0x430 [ 107.656489][ T6010] vfs_mkdir+0x40b/0x630 [ 107.656498][ T6010] filename_mkdirat+0x289/0x520 [ 107.656506][ T6010] __se_sys_mkdirat+0x35/0x150 [ 107.656515][ T6010] do_syscall_64+0x14d/0xf80 [ 107.656527][ T6010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.656536][ T6010] [ 107.656536][ T6010] -> #2 (&journal->j_trans_barrier){.+.+}-{4:4}: [ 107.656548][ T6010] down_read+0x97/0x200 [ 107.656560][ T6010] ocfs2_start_trans+0x3ac/0x700 [ 107.656571][ T6010] ocfs2_reserve_suballoc_bits+0x7bb/0x4790 [ 107.656581][ T6010] ocfs2_reserve_new_metadata_blocks+0x415/0x9a0 [ 107.656592][ T6010] ocfs2_mknod+0xea3/0x2210 [ 107.656600][ T6010] ocfs2_mkdir+0x181/0x430 [ 107.656608][ T6010] vfs_mkdir+0x40b/0x630 [ 107.656616][ T6010] filename_mkdirat+0x289/0x520 [ 107.656625][ T6010] __se_sys_mkdirat+0x35/0x150 [ 107.656634][ T6010] do_syscall_64+0x14d/0xf80 [ 107.656644][ T6010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.656653][ T6010] [ 107.656653][ T6010] -> #1 (sb_internal#2){.+.+}-{0:0}: [ 107.656667][ T6010] ocfs2_start_trans+0x2ac/0x700 [ 107.656678][ T6010] ocfs2_mknod+0xf31/0x2210 [ 107.656686][ T6010] ocfs2_mkdir+0x181/0x430 [ 107.656694][ T6010] vfs_mkdir+0x40b/0x630 [ 107.656702][ T6010] filename_mkdirat+0x289/0x520 [ 107.656711][ T6010] __se_sys_mkdirat+0x35/0x150 [ 107.656719][ T6010] do_syscall_64+0x14d/0xf80 [ 107.656730][ T6010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.656738][ T6010] [ 107.656738][ T6010] -> #0 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}: [ 107.656751][ T6010] __lock_acquire+0x15a5/0x2cf0 [ 107.656763][ T6010] lock_acquire+0x106/0x330 [ 107.656774][ T6010] down_write+0x3a/0x50 [ 107.656786][ T6010] ocfs2_reserve_local_alloc_bits+0x11f/0x2610 [ 107.656794][ T6010] ocfs2_reserve_clusters_with_limit+0x1b9/0xc20 [ 107.656805][ T6010] ocfs2_init_xattr_set_ctxt+0x375/0x710 [ 107.656817][ T6010] ocfs2_xattr_set+0xc42/0x13e0 [ 107.656828][ T6010] __vfs_setxattr+0x43c/0x480 [ 107.656839][ T6010] __vfs_setxattr_noperm+0x12d/0x660 [ 107.656851][ T6010] vfs_setxattr+0x163/0x370 [ 107.656861][ T6010] ovl_fill_super+0x4b50/0x5e60 [ 107.656874][ T6010] get_tree_nodev+0xbb/0x150 [ 107.656881][ T6010] vfs_get_tree+0x92/0x2a0 [ 107.656889][ T6010] do_new_mount+0x341/0xd30 [ 107.656900][ T6010] __se_sys_mount+0x31d/0x420 [ 107.656911][ T6010] do_syscall_64+0x14d/0xf80 [ 107.656922][ T6010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.656937][ T6010] [ 107.656937][ T6010] other info that might help us debug this: [ 107.656937][ T6010] [ 107.656940][ T6010] Chain exists of: [ 107.656940][ T6010] &ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE] --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 107.656940][ T6010] [ 107.656955][ T6010] Possible unsafe locking scenario: [ 107.656955][ T6010] [ 107.656958][ T6010] CPU0 CPU1 [ 107.656961][ T6010] ---- ---- [ 107.656964][ T6010] lock(&oi->ip_xattr_sem); [ 107.656970][ T6010] lock(&journal->j_trans_barrier); [ 107.656977][ T6010] lock(&oi->ip_xattr_sem); [ 107.656983][ T6010] lock(&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]); [ 107.656990][ T6010] [ 107.656990][ T6010] *** DEADLOCK *** [ 107.656990][ T6010] [ 107.656993][ T6010] 4 locks held by syz.0.17/6010: [ 107.656999][ T6010] #0: ffff8880325620d0 (&type->s_umount_key#56/1){+.+.}-{4:4}, at: alloc_super+0x28c/0xac0 [ 107.657029][ T6010] #1: ffff888010fdc480 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 107.657051][ T6010] #2: ffff88805bf05f40 (&sb->s_type->i_mutex_key#26){++++}-{4:4}, at: vfs_setxattr+0x13e/0x370 [ 107.657078][ T6010] #3: ffff88805bf05c18 (&oi->ip_xattr_sem){+.+.}-{4:4}, at: ocfs2_xattr_set+0x475/0x13e0 [ 107.657102][ T6010] [ 107.657102][ T6010] stack backtrace: [ 107.657114][ T6010] CPU: 0 UID: 0 PID: 6010 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 107.657125][ T6010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 107.657136][ T6010] Call Trace: [ 107.657142][ T6010] [ 107.657147][ T6010] dump_stack_lvl+0xe8/0x150 [ 107.657162][ T6010] print_circular_bug+0x2e1/0x300 [ 107.657171][ T6010] check_noncircular+0x12e/0x150 [ 107.657181][ T6010] __lock_acquire+0x15a5/0x2cf0 [ 107.657195][ T6010] ? ocfs2_get_system_file_inode+0x202/0x7e0 [ 107.657206][ T6010] ? __pfx_ocfs2_get_system_file_inode+0x10/0x10 [ 107.657217][ T6010] ? ocfs2_reserve_local_alloc_bits+0x11f/0x2610 [ 107.657226][ T6010] lock_acquire+0x106/0x330 [ 107.657238][ T6010] ? ocfs2_reserve_local_alloc_bits+0x11f/0x2610 [ 107.657249][ T6010] down_write+0x3a/0x50 [ 107.657262][ T6010] ? ocfs2_reserve_local_alloc_bits+0x11f/0x2610 [ 107.657271][ T6010] ocfs2_reserve_local_alloc_bits+0x11f/0x2610 [ 107.657280][ T6010] ? __lock_acquire+0x6b5/0x2cf0 [ 107.657294][ T6010] ? __lock_acquire+0x6b5/0x2cf0 [ 107.657308][ T6010] ? __pfx_ocfs2_reserve_local_alloc_bits+0x10/0x10 [ 107.657318][ T6010] ? do_raw_spin_lock+0x12b/0x2f0 [ 107.657331][ T6010] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 107.657344][ T6010] ? lockdep_hardirqs_on+0x7a/0x110 [ 107.657356][ T6010] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 107.657368][ T6010] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 107.657377][ T6010] ? reacquire_held_locks+0x104/0x190 [ 107.657391][ T6010] ? rt_spin_lock+0x1e0/0x400 [ 107.657401][ T6010] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 107.657411][ T6010] ? rt_spin_unlock+0x14f/0x200 [ 107.657420][ T6010] ? rt_spin_unlock+0x160/0x200 [ 107.657430][ T6010] ? ocfs2_alloc_should_use_local+0x13e/0x2e0 [ 107.657445][ T6010] ? ocfs2_reserve_clusters_with_limit+0x160/0xc20 [ 107.657457][ T6010] ocfs2_reserve_clusters_with_limit+0x1b9/0xc20 [ 107.657469][ T6010] ? __pfx_ocfs2_reserve_clusters_with_limit+0x10/0x10 [ 107.657483][ T6010] ? __pfx_ocfs2_calc_xattr_set_need+0x10/0x10 [ 107.657498][ T6010] ? do_raw_spin_lock+0x12b/0x2f0 [ 107.657510][ T6010] ocfs2_init_xattr_set_ctxt+0x375/0x710 [ 107.657523][ T6010] ? lockdep_hardirqs_on+0x7a/0x110 [ 107.657535][ T6010] ? __pfx_ocfs2_init_xattr_set_ctxt+0x10/0x10 [ 107.657549][ T6010] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 107.657563][ T6010] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 107.657575][ T6010] ? lockdep_hardirqs_on+0x7a/0x110 [ 107.657587][ T6010] ocfs2_xattr_set+0xc42/0x13e0 [ 107.657604][ T6010] ? __pfx_ocfs2_xattr_set+0x10/0x10 [ 107.657616][ T6010] ? desc_update_last_finalized+0x193/0x1f0 [ 107.657634][ T6010] ? lockdep_hardirqs_on+0x7a/0x110 [ 107.657647][ T6010] ? smk_tskacc+0x311/0x3a0 [ 107.657661][ T6010] ? posix_xattr_acl+0x93/0xc0 [ 107.657672][ T6010] ? evm_protect_xattr+0x4d4/0xac0 [ 107.657683][ T6010] ? __pfx_evm_protect_xattr+0x10/0x10 [ 107.657693][ T6010] ? __pfx_ocfs2_xattr_trusted_set+0x10/0x10 [ 107.657706][ T6010] __vfs_setxattr+0x43c/0x480 [ 107.657720][ T6010] __vfs_setxattr_noperm+0x12d/0x660 [ 107.657734][ T6010] vfs_setxattr+0x163/0x370 [ 107.657747][ T6010] ? __pfx_vfs_setxattr+0x10/0x10 [ 107.657758][ T6010] ? __dentry_kill+0x4b2/0x5e0 [ 107.657769][ T6010] ? finish_dput+0xad/0x480 [ 107.657781][ T6010] ? finish_dput+0x3da/0x480 [ 107.657793][ T6010] ovl_fill_super+0x4b50/0x5e60 [ 107.657806][ T6010] ? unwind_get_return_address+0x4d/0x90 [ 107.657823][ T6010] ? __pfx_stack_trace_save+0x10/0x10 [ 107.657836][ T6010] ? __pfx_ovl_fill_super+0x10/0x10 [ 107.657849][ T6010] ? __lock_acquire+0x6b5/0x2cf0 [ 107.657863][ T6010] ? __lock_acquire+0x6b5/0x2cf0 [ 107.657876][ T6010] ? __lock_acquire+0x6b5/0x2cf0 [ 107.657889][ T6010] ? do_raw_spin_lock+0x12b/0x2f0 [ 107.657901][ T6010] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 107.657913][ T6010] ? lockdep_hardirqs_on+0x7a/0x110 [ 107.657929][ T6010] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 107.657941][ T6010] ? rt_mutex_slowunlock+0x1cb/0x300 [ 107.657951][ T6010] ? __raw_spin_lock_init+0x45/0x100 [ 107.657964][ T6010] ? sget_fc+0x962/0xa40 [ 107.657977][ T6010] ? __pfx_set_anon_super_fc+0x10/0x10 [ 107.657985][ T6010] ? __pfx_ovl_fill_super+0x10/0x10 [ 107.657998][ T6010] get_tree_nodev+0xbb/0x150 [ 107.658007][ T6010] vfs_get_tree+0x92/0x2a0 [ 107.658016][ T6010] do_new_mount+0x341/0xd30 [ 107.658027][ T6010] ? safesetid_security_capable+0xa9/0x1a0 [ 107.658043][ T6010] ? __pfx_do_new_mount+0x10/0x10 [ 107.658054][ T6010] ? ns_capable+0x89/0xe0 [ 107.658066][ T6010] ? path_mount+0x690/0x10e0 [ 107.658077][ T6010] ? user_path_at+0xd4/0x160 [ 107.658092][ T6010] ? user_path_at+0xd4/0x160 [ 107.658106][ T6010] __se_sys_mount+0x31d/0x420 [ 107.658119][ T6010] ? __pfx___se_sys_mount+0x10/0x10 [ 107.658132][ T6010] ? __x64_sys_mount+0x20/0xc0 [ 107.658145][ T6010] do_syscall_64+0x14d/0xf80 [ 107.658156][ T6010] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.658165][ T6010] ? trace_irq_disable+0x37/0x100 [ 107.658174][ T6010] ? clear_bhb_loop+0x40/0x90 [ 107.658185][ T6010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.658194][ T6010] RIP: 0033:0x7f1e6c81bf79 [ 107.658207][ T6010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.658215][ T6010] RSP: 002b:00007ffd2b918bd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 107.658225][ T6010] RAX: ffffffffffffffda RBX: 00007f1e6ca95fa0 RCX: 00007f1e6c81bf79 [ 107.658232][ T6010] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 0000000000000000 [ 107.658238][ T6010] RBP: 00007f1e6c8b27e0 R08: 0000200000000240 R09: 0000000000000000 [ 107.658244][ T6010] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 107.658250][ T6010] R13: 00007f1e6ca95fac R14: 00007f1e6ca95fa0 R15: 00007f1e6ca95fa0 [ 107.658260][ T6010] [ 107.658657][ T6010] ------------[ cut here ]------------ [ 107.658662][ T6010] UBSAN: array-index-out-of-bounds in fs/ocfs2/xattr.c:1985:3 [ 107.658670][ T6010] index 2 is out of range for type 'struct ocfs2_xattr_entry[] __counted_by(xh_count)' (aka 'struct ocfs2_xattr_entry[]') [ 107.658680][ T6010] CPU: 0 UID: 0 PID: 6010 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 107.658691][ T6010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 107.658698][ T6010] Call Trace: [ 107.658702][ T6010] [ 107.658706][ T6010] dump_stack_lvl+0xe8/0x150 [ 107.658719][ T6010] ubsan_epilogue+0xa/0x30 [ 107.658729][ T6010] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 107.658745][ T6010] ocfs2_xa_remove_entry+0x49e/0x670 [ 107.658756][ T6010] ocfs2_xa_set+0xdb2/0x2ec0 [ 107.658771][ T6010] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 107.658781][ T6010] ? try_to_take_rt_mutex+0x840/0xb00 [ 107.658792][ T6010] ? rcu_is_watching+0x15/0xb0 [ 107.658807][ T6010] ? __pfx_ocfs2_xa_set+0x10/0x10 [ 107.658821][ T6010] ? rtlock_slowlock_locked+0xfb/0x3c80 [ 107.658831][ T6010] ? do_raw_spin_lock+0x12b/0x2f0 [ 107.658841][ T6010] ? rcu_is_watching+0x15/0xb0 [ 107.658855][ T6010] ? unwind_next_frame+0xa5/0x23c0 [ 107.658867][ T6010] ? rcu_is_watching+0x15/0xb0 [ 107.658881][ T6010] ? unwind_next_frame+0xa5/0x23c0 [ 107.658894][ T6010] ? rcu_is_watching+0x15/0xb0 [ 107.658907][ T6010] ? unwind_next_frame+0xa5/0x23c0 [ 107.658919][ T6010] ? rcu_is_watching+0x15/0xb0 [ 107.658937][ T6010] ? is_bpf_text_address+0x26/0x2b0 [ 107.658947][ T6010] ? rcu_is_watching+0x15/0xb0 [ 107.658961][ T6010] ? rcu_is_watching+0x15/0xb0 [ 107.658974][ T6010] ? lock_release+0x4b/0x3a0 [ 107.658986][ T6010] ? lock_release+0x4b/0x3a0 [ 107.658999][ T6010] ? is_bpf_text_address+0x292/0x2b0 [ 107.659008][ T6010] ? rt_read_lock+0x277/0x4b0 [ 107.659017][ T6010] ? rcu_is_watching+0x15/0xb0 [ 107.659031][ T6010] ? lock_acquire+0x5f/0x330 [ 107.659044][ T6010] ocfs2_xattr_block_set+0x3e0/0x3350 [ 107.659059][ T6010] ? rcu_is_watching+0x15/0xb0 [ 107.659072][ T6010] ? lock_acquire+0x5f/0x330 [ 107.659084][ T6010] ? rcu_is_watching+0x15/0xb0 [ 107.659098][ T6010] ? __pfx_ocfs2_xattr_block_set+0x10/0x10 [ 107.659112][ T6010] ? start_this_handle+0x2135/0x2290 [ 107.659131][ T6010] ? __pfx_start_this_handle+0x10/0x10 [ 107.659147][ T6010] ? rcu_is_watching+0x15/0xb0 [ 107.659161][ T6010] __ocfs2_xattr_set_handle+0x262/0xf50 [ 107.659175][ T6010] ? __pfx___ocfs2_xattr_set_handle+0x10/0x10 [ 107.659188][ T6010] ? jbd2_journal_start+0x2a/0x40 [ 107.659201][ T6010] ? ocfs2_start_trans+0x4e2/0x700 [ 107.659214][ T6010] ? __pfx_ocfs2_start_trans+0x10/0x10 [ 107.659227][ T6010] ocfs2_xattr_set+0xf3f/0x13e0 [ 107.659244][ T6010] ? __pfx_ocfs2_xattr_set+0x10/0x10 [ 107.659258][ T6010] ? smk_tskacc+0x311/0x3a0 [ 107.659269][ T6010] ? smack_log+0xf5/0x3f0 [ 107.659280][ T6010] ? __pfx_smack_log+0x10/0x10 [ 107.659292][ T6010] ? smk_tskacc+0x311/0x3a0 [ 107.659304][ T6010] ? posix_xattr_acl+0x93/0xc0 [ 107.659315][ T6010] ? evm_protect_xattr+0x4d4/0xac0 [ 107.659325][ T6010] ? __pfx_evm_protect_xattr+0x10/0x10 [ 107.659335][ T6010] ? __pfx_ocfs2_xattr_trusted_set+0x10/0x10 [ 107.659348][ T6010] __vfs_removexattr+0x431/0x470 [ 107.659363][ T6010] __vfs_removexattr_locked+0xe2/0x280 [ 107.659377][ T6010] vfs_removexattr+0x7f/0x230 [ 107.659390][ T6010] ovl_fill_super+0x4c39/0x5e60 [ 107.659402][ T6010] ? unwind_get_return_address+0x4d/0x90 [ 107.659419][ T6010] ? __pfx_stack_trace_save+0x10/0x10 [ 107.659432][ T6010] ? __pfx_ovl_fill_super+0x10/0x10 [ 107.659444][ T6010] ? __lock_acquire+0x6b5/0x2cf0 [ 107.659458][ T6010] ? __lock_acquire+0x6b5/0x2cf0 [ 107.659471][ T6010] ? __lock_acquire+0x6b5/0x2cf0 [ 107.659483][ T6010] ? do_raw_spin_lock+0x12b/0x2f0 [ 107.659496][ T6010] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 107.659508][ T6010] ? lockdep_hardirqs_on+0x7a/0x110 [ 107.659519][ T6010] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 107.659531][ T6010] ? rt_mutex_slowunlock+0x1cb/0x300 [ 107.659541][ T6010] ? __raw_spin_lock_init+0x45/0x100 [ 107.659554][ T6010] ? sget_fc+0x962/0xa40 [ 107.659567][ T6010] ? __pfx_set_anon_super_fc+0x10/0x10 [ 107.659575][ T6010] ? __pfx_ovl_fill_super+0x10/0x10 [ 107.659588][ T6010] get_tree_nodev+0xbb/0x150 [ 107.659597][ T6010] vfs_get_tree+0x92/0x2a0 [ 107.659606][ T6010] do_new_mount+0x341/0xd30 [ 107.659617][ T6010] ? safesetid_security_capable+0xa9/0x1a0 [ 107.659632][ T6010] ? __pfx_do_new_mount+0x10/0x10 [ 107.659644][ T6010] ? ns_capable+0x89/0xe0 [ 107.659655][ T6010] ? path_mount+0x690/0x10e0 [ 107.659665][ T6010] ? user_path_at+0xd4/0x160 [ 107.659679][ T6010] ? user_path_at+0xd4/0x160 [ 107.659693][ T6010] __se_sys_mount+0x31d/0x420 [ 107.659706][ T6010] ? __pfx___se_sys_mount+0x10/0x10 [ 107.659719][ T6010] ? __x64_sys_mount+0x20/0xc0 [ 107.659731][ T6010] do_syscall_64+0x14d/0xf80 [ 107.659744][ T6010] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.659752][ T6010] ? trace_irq_disable+0x37/0x100 [ 107.659760][ T6010] ? clear_bhb_loop+0x40/0x90 [ 107.659771][ T6010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.659779][ T6010] RIP: 0033:0x7f1e6c81bf79 [ 107.659787][ T6010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.659795][ T6010] RSP: 002b:00007ffd2b918bd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 107.659805][ T6010] RAX: ffffffffffffffda RBX: 00007f1e6ca95fa0 RCX: 00007f1e6c81bf79 [ 107.659811][ T6010] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 0000000000000000 [ 107.659818][ T6010] RBP: 00007f1e6c8b27e0 R08: 0000200000000240 R09: 0000000000000000 [ 107.659824][ T6010] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 107.659829][ T6010] R13: 00007f1e6ca95fac R14: 00007f1e6ca95fa0 R15: 00007f1e6ca95fa0 [ 107.659839][ T6010] [ 107.659842][ T6010] ---[ end trace ]--- [ 107.659848][ T6010] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 107.659858][ T6010] CPU: 0 UID: 0 PID: 6010 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 107.659869][ T6010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 107.659874][ T6010] Call Trace: [ 107.659877][ T6010] [ 107.659880][ T6010] vpanic+0x1e0/0x670 [ 107.659895][ T6010] panic+0xc5/0xd0 [ 107.659908][ T6010] ? __pfx_panic+0x10/0x10 [ 107.659921][ T6010] ? __pfx__printk+0x10/0x10 [ 107.659936][ T6010] check_panic_on_warn+0x89/0xb0 [ 107.659945][ T6010] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 107.659960][ T6010] ocfs2_xa_remove_entry+0x49e/0x670 [ 107.659971][ T6010] ocfs2_xa_set+0xdb2/0x2ec0 [ 107.659985][ T6010] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 107.659995][ T6010] ? try_to_take_rt_mutex+0x840/0xb00 [ 107.660006][ T6010] ? rcu_is_watching+0x15/0xb0 [ 107.660020][ T6010] ? __pfx_ocfs2_xa_set+0x10/0x10 [ 107.660034][ T6010] ? rtlock_slowlock_locked+0xfb/0x3c80 [ 107.660044][ T6010] ? do_raw_spin_lock+0x12b/0x2f0 [ 107.660054][ T6010] ? rcu_is_watching+0x15/0xb0 [ 107.660068][ T6010] ? unwind_next_frame+0xa5/0x23c0 [ 107.660081][ T6010] ? rcu_is_watching+0x15/0xb0 [ 107.660094][ T6010] ? unwind_next_frame+0xa5/0x23c0 [ 107.660107][ T6010] ? rcu_is_watching+0x15/0xb0 [ 107.660121][ T6010] ? unwind_next_frame+0xa5/0x23c0 [ 107.660133][ T6010] ? rcu_is_watching+0x15/0xb0 [ 107.660147][ T6010] ? is_bpf_text_address+0x26/0x2b0 [ 107.660157][ T6010] ? rcu_is_watching+0x15/0xb0 [ 107.660170][ T6010] ? rcu_is_watching+0x15/0xb0 [ 107.660184][ T6010] ? lock_release+0x4b/0x3a0 [ 107.660195][ T6010] ? lock_release+0x4b/0x3a0 [ 107.660208][ T6010] ? is_bpf_text_address+0x292/0x2b0 [ 107.660218][ T6010] ? rt_read_lock+0x277/0x4b0 [ 107.660227][ T6010] ? rcu_is_watching+0x15/0xb0 [ 107.660241][ T6010] ? lock_acquire+0x5f/0x330 [ 107.660254][ T6010] ocfs2_xattr_block_set+0x3e0/0x3350 [ 107.660269][ T6010] ? rcu_is_watching+0x15/0xb0 [ 107.660283][ T6010] ? lock_acquire+0x5f/0x330 [ 107.660294][ T6010] ? rcu_is_watching+0x15/0xb0 [ 107.660310][ T6010] ? __pfx_ocfs2_xattr_block_set+0x10/0x10 [ 107.660324][ T6010] ? start_this_handle+0x2135/0x2290 [ 107.660342][ T6010] ? __pfx_start_this_handle+0x10/0x10 [ 107.660359][ T6010] ? rcu_is_watching+0x15/0xb0 [ 107.660373][ T6010] __ocfs2_xattr_set_handle+0x262/0xf50 [ 107.660387][ T6010] ? __pfx___ocfs2_xattr_set_handle+0x10/0x10 [ 107.660400][ T6010] ? jbd2_journal_start+0x2a/0x40 [ 107.660413][ T6010] ? ocfs2_start_trans+0x4e2/0x700 [ 107.660426][ T6010] ? __pfx_ocfs2_start_trans+0x10/0x10 [ 107.660440][ T6010] ocfs2_xattr_set+0xf3f/0x13e0 [ 107.660456][ T6010] ? __pfx_ocfs2_xattr_set+0x10/0x10 [ 107.660471][ T6010] ? smk_tskacc+0x311/0x3a0 [ 107.660482][ T6010] ? smack_log+0xf5/0x3f0 [ 107.660492][ T6010] ? __pfx_smack_log+0x10/0x10 [ 107.660505][ T6010] ? smk_tskacc+0x311/0x3a0 [ 107.660517][ T6010] ? posix_xattr_acl+0x93/0xc0 [ 107.660528][ T6010] ? evm_protect_xattr+0x4d4/0xac0 [ 107.660539][ T6010] ? __pfx_evm_protect_xattr+0x10/0x10 [ 107.660548][ T6010] ? __pfx_ocfs2_xattr_trusted_set+0x10/0x10 [ 107.660561][ T6010] __vfs_removexattr+0x431/0x470 [ 107.660576][ T6010] __vfs_removexattr_locked+0xe2/0x280 [ 107.660590][ T6010] vfs_removexattr+0x7f/0x230 [ 107.660603][ T6010] ovl_fill_super+0x4c39/0x5e60 [ 107.660616][ T6010] ? unwind_get_return_address+0x4d/0x90 [ 107.660633][ T6010] ? __pfx_stack_trace_save+0x10/0x10 [ 107.660645][ T6010] ? __pfx_ovl_fill_super+0x10/0x10 [ 107.660658][ T6010] ? __lock_acquire+0x6b5/0x2cf0 [ 107.660672][ T6010] ? __lock_acquire+0x6b5/0x2cf0 [ 107.660685][ T6010] ? __lock_acquire+0x6b5/0x2cf0 [ 107.660698][ T6010] ? do_raw_spin_lock+0x12b/0x2f0 [ 107.660711][ T6010] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 107.660723][ T6010] ? lockdep_hardirqs_on+0x7a/0x110 [ 107.660735][ T6010] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 107.660747][ T6010] ? rt_mutex_slowunlock+0x1cb/0x300 [ 107.660757][ T6010] ? __raw_spin_lock_init+0x45/0x100 [ 107.660770][ T6010] ? sget_fc+0x962/0xa40 [ 107.660783][ T6010] ? __pfx_set_anon_super_fc+0x10/0x10 [ 107.660791][ T6010] ? __pfx_ovl_fill_super+0x10/0x10 [ 107.660804][ T6010] get_tree_nodev+0xbb/0x150 [ 107.660813][ T6010] vfs_get_tree+0x92/0x2a0 [ 107.660822][ T6010] do_new_mount+0x341/0xd30 [ 107.660834][ T6010] ? safesetid_security_capable+0xa9/0x1a0 [ 107.660849][ T6010] ? __pfx_do_new_mount+0x10/0x10 [ 107.660860][ T6010] ? ns_capable+0x89/0xe0 [ 107.660871][ T6010] ? path_mount+0x690/0x10e0 [ 107.660882][ T6010] ? user_path_at+0xd4/0x160 [ 107.660896][ T6010] ? user_path_at+0xd4/0x160 [ 107.660910][ T6010] __se_sys_mount+0x31d/0x420 [ 107.660923][ T6010] ? __pfx___se_sys_mount+0x10/0x10 [ 107.660940][ T6010] ? __x64_sys_mount+0x20/0xc0 [ 107.660953][ T6010] do_syscall_64+0x14d/0xf80 [ 107.660965][ T6010] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.660974][ T6010] ? trace_irq_disable+0x37/0x100 [ 107.660982][ T6010] ? clear_bhb_loop+0x40/0x90 [ 107.660992][ T6010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.661001][ T6010] RIP: 0033:0x7f1e6c81bf79 [ 107.661008][ T6010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.661016][ T6010] RSP: 002b:00007ffd2b918bd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 107.661025][ T6010] RAX: ffffffffffffffda RBX: 00007f1e6ca95fa0 RCX: 00007f1e6c81bf79 [ 107.661032][ T6010] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 0000000000000000 [ 107.661038][ T6010] RBP: 00007f1e6c8b27e0 R08: 0000200000000240 R09: 0000000000000000 [ 107.661044][ T6010] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 107.661050][ T6010] R13: 00007f1e6ca95fac R14: 00007f1e6ca95fa0 R15: 00007f1e6ca95fa0 [ 107.661060][ T6010] [ 107.661437][ T6010] Kernel Offset: disabled