syzkaller login: [ 92.115391][ T807] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.107' (ED25519) to the list of known hosts. 2026/02/19 01:38:10 parsed 1 programs [ 98.835093][ T5802] cgroup: Unknown subsys name 'net' [ 99.076734][ T5802] cgroup: Unknown subsys name 'cpuset' [ 99.131993][ T5802] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 101.177515][ T5802] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 106.578801][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 106.892373][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.893343][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.893510][ T5844] bridge_slave_0: entered allmulticast mode [ 106.895523][ T5844] bridge_slave_0: entered promiscuous mode [ 106.900688][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.900831][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.901156][ T5844] bridge_slave_1: entered allmulticast mode [ 106.907725][ T5844] bridge_slave_1: entered promiscuous mode [ 106.987637][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.003808][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.042524][ T5844] team0: Port device team_slave_0 added [ 107.045478][ T5844] team0: Port device team_slave_1 added [ 107.213475][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.213495][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.213526][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.216887][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.216905][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.216932][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.367129][ T5844] hsr_slave_0: entered promiscuous mode [ 107.368269][ T5844] hsr_slave_1: entered promiscuous mode [ 107.853476][ T5844] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 107.889122][ T5844] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 107.937366][ T5844] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 107.955071][ T5844] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 108.092714][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.120782][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.145594][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.146343][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.168132][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.176037][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.425803][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.489345][ T5844] veth0_vlan: entered promiscuous mode [ 108.503471][ T5844] veth1_vlan: entered promiscuous mode [ 108.543108][ T5844] veth0_macvtap: entered promiscuous mode [ 108.547819][ T5844] veth1_macvtap: entered promiscuous mode [ 108.573717][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.588019][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.605378][ T68] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.605959][ T68] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.606879][ T68] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.606945][ T68] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.466393][ T1506] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.694565][ T1506] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.924366][ T1506] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.021645][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.021669][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.088561][ T1306] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.088584][ T1306] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.946629][ T1506] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.105092][ T1506] bridge_slave_1: left allmulticast mode [ 112.105175][ T1506] bridge_slave_1: left promiscuous mode [ 112.106420][ T1506] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.202716][ T1506] bridge_slave_0: left allmulticast mode [ 112.202748][ T1506] bridge_slave_0: left promiscuous mode [ 112.203024][ T1506] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.541836][ T1506] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.621896][ T1506] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.643753][ T1506] bond0 (unregistering): Released all slaves [ 114.022031][ T1506] hsr_slave_0: left promiscuous mode [ 114.061247][ T1506] hsr_slave_1: left promiscuous mode [ 114.062567][ T1506] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.062665][ T1506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.168051][ T1506] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.168081][ T1506] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.184194][ T5117] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 114.186142][ T5117] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 114.207140][ T5117] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 114.234079][ T5117] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 114.241954][ T5117] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 114.328625][ T1506] veth1_macvtap: left promiscuous mode [ 114.328789][ T1506] veth0_macvtap: left promiscuous mode [ 114.328980][ T1506] veth1_vlan: left promiscuous mode [ 114.329181][ T1506] veth0_vlan: left promiscuous mode [ 116.353157][ T60] Bluetooth: hci0: command tx timeout [ 116.641702][ T1506] team0 (unregistering): Port device team_slave_1 removed [ 116.841924][ T1506] team0 (unregistering): Port device team_slave_0 removed [ 118.431118][ T60] Bluetooth: hci0: command tx timeout 2026/02/19 01:38:35 executed programs: 0 [ 119.897902][ T5117] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 119.915626][ T5117] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 119.918653][ T5117] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 119.939624][ T5117] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 119.948915][ T5117] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 120.844121][ T5948] chnl_net:caif_netlink_parms(): no params data found [ 121.029426][ T5948] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.029607][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.029780][ T5948] bridge_slave_0: entered allmulticast mode [ 121.054976][ T5948] bridge_slave_0: entered promiscuous mode [ 121.058517][ T5948] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.058720][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.058891][ T5948] bridge_slave_1: entered allmulticast mode [ 121.088671][ T5948] bridge_slave_1: entered promiscuous mode [ 121.152567][ T5948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.156953][ T5948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.244699][ T5948] team0: Port device team_slave_0 added [ 121.249507][ T5948] team0: Port device team_slave_1 added [ 121.297942][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.297961][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.297991][ T5948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.300656][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.300672][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.300701][ T5948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.473046][ T5948] hsr_slave_0: entered promiscuous mode [ 121.474473][ T5948] hsr_slave_1: entered promiscuous mode [ 122.031108][ T60] Bluetooth: hci0: command tx timeout [ 124.111120][ T60] Bluetooth: hci0: command tx timeout [ 124.477396][ T5948] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 124.514324][ T5948] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 124.558106][ T5948] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 124.585292][ T5948] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 124.750219][ T5948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.780192][ T5948] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.796872][ T1506] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.797117][ T1506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.833746][ T1506] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.835731][ T1506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.175449][ T5948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.259483][ T5948] veth0_vlan: entered promiscuous mode [ 125.278097][ T5948] veth1_vlan: entered promiscuous mode [ 125.320113][ T5948] veth0_macvtap: entered promiscuous mode [ 125.340367][ T5948] veth1_macvtap: entered promiscuous mode [ 125.374527][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.391689][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.411834][ T1506] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.415016][ T1506] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.415673][ T1506] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.415905][ T1506] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.692757][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.692781][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.755414][ T3537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.755438][ T3537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/02/19 01:38:41 executed programs: 2 [ 126.191143][ T60] Bluetooth: hci0: command tx timeout [ 126.357107][ T6059] loop0: detected capacity change from 0 to 32768 [ 126.384845][ T6059] ======================================================= [ 126.384845][ T6059] WARNING: The mand mount option has been deprecated and [ 126.384845][ T6059] and is ignored by this kernel. Remove the mand [ 126.384845][ T6059] option from the mount to silence this warning. [ 126.384845][ T6059] ======================================================= [ 126.538468][ T6059] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 126.695713][ T6059] overlayfs: upper fs does not support tmpfile. [ 126.713652][ T6059] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 126.714440][ T6059] [ 126.714449][ T6059] ====================================================== [ 126.714458][ T6059] WARNING: possible circular locking dependency detected [ 126.714476][ T6059] syzkaller #0 Not tainted [ 126.714487][ T6059] ------------------------------------------------------ [ 126.714496][ T6059] syz.0.17/6059 is trying to acquire lock: [ 126.714507][ T6059] ffff88804ae42d00 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_local_alloc_bits+0x11f/0x2610 [ 126.714581][ T6059] [ 126.714581][ T6059] but task is already holding lock: [ 126.714588][ T6059] ffff88804ae45c18 (&oi->ip_xattr_sem){+.+.}-{4:4}, at: ocfs2_xattr_set+0x475/0x13e0 [ 126.714640][ T6059] [ 126.714640][ T6059] which lock already depends on the new lock. [ 126.714640][ T6059] [ 126.714648][ T6059] [ 126.714648][ T6059] the existing dependency chain (in reverse order) is: [ 126.714656][ T6059] [ 126.714656][ T6059] -> #3 (&oi->ip_xattr_sem){+.+.}-{4:4}: [ 126.714684][ T6059] down_write+0x3a/0x50 [ 126.714713][ T6059] ocfs2_xattr_set_handle+0x3e6/0x810 [ 126.714739][ T6059] ocfs2_init_security_set+0xbd/0xe0 [ 126.714767][ T6059] ocfs2_mknod+0x1481/0x2210 [ 126.714787][ T6059] ocfs2_mkdir+0x181/0x430 [ 126.714807][ T6059] vfs_mkdir+0x40b/0x630 [ 126.714826][ T6059] filename_mkdirat+0x289/0x520 [ 126.714846][ T6059] __se_sys_mkdirat+0x35/0x150 [ 126.714866][ T6059] do_syscall_64+0x14d/0xf80 [ 126.714892][ T6059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.714912][ T6059] [ 126.714912][ T6059] -> #2 (&journal->j_trans_barrier){.+.+}-{4:4}: [ 126.714940][ T6059] down_read+0x97/0x200 [ 126.714967][ T6059] ocfs2_start_trans+0x3ac/0x700 [ 126.714991][ T6059] ocfs2_reserve_suballoc_bits+0x7bb/0x4790 [ 126.715015][ T6059] ocfs2_reserve_new_metadata_blocks+0x415/0x9a0 [ 126.715039][ T6059] ocfs2_mknod+0xea3/0x2210 [ 126.715058][ T6059] ocfs2_mkdir+0x181/0x430 [ 126.715077][ T6059] vfs_mkdir+0x40b/0x630 [ 126.715095][ T6059] filename_mkdirat+0x289/0x520 [ 126.715115][ T6059] __se_sys_mkdirat+0x35/0x150 [ 126.715134][ T6059] do_syscall_64+0x14d/0xf80 [ 126.715159][ T6059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.715178][ T6059] [ 126.715178][ T6059] -> #1 (sb_internal#2){.+.+}-{0:0}: [ 126.715210][ T6059] ocfs2_start_trans+0x2ac/0x700 [ 126.715235][ T6059] ocfs2_mknod+0xf31/0x2210 [ 126.715254][ T6059] ocfs2_mkdir+0x181/0x430 [ 126.715273][ T6059] vfs_mkdir+0x40b/0x630 [ 126.715292][ T6059] filename_mkdirat+0x289/0x520 [ 126.715312][ T6059] __se_sys_mkdirat+0x35/0x150 [ 126.715332][ T6059] do_syscall_64+0x14d/0xf80 [ 126.715357][ T6059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.715376][ T6059] [ 126.715376][ T6059] -> #0 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}: [ 126.715414][ T6059] __lock_acquire+0x15a5/0x2cf0 [ 126.715441][ T6059] lock_acquire+0x106/0x330 [ 126.715466][ T6059] down_write+0x3a/0x50 [ 126.715491][ T6059] ocfs2_reserve_local_alloc_bits+0x11f/0x2610 [ 126.715511][ T6059] ocfs2_reserve_clusters_with_limit+0x1b9/0xc20 [ 126.715535][ T6059] ocfs2_init_xattr_set_ctxt+0x375/0x710 [ 126.715560][ T6059] ocfs2_xattr_set+0xc42/0x13e0 [ 126.715584][ T6059] __vfs_setxattr+0x43c/0x480 [ 126.715610][ T6059] __vfs_setxattr_noperm+0x12d/0x660 [ 126.715636][ T6059] vfs_setxattr+0x163/0x370 [ 126.715660][ T6059] ovl_fill_super+0x4b50/0x5e60 [ 126.715688][ T6059] get_tree_nodev+0xbb/0x150 [ 126.715705][ T6059] vfs_get_tree+0x92/0x2a0 [ 126.715722][ T6059] do_new_mount+0x341/0xd30 [ 126.715747][ T6059] __se_sys_mount+0x31d/0x420 [ 126.715772][ T6059] do_syscall_64+0x14d/0xf80 [ 126.715797][ T6059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.715816][ T6059] [ 126.715816][ T6059] other info that might help us debug this: [ 126.715816][ T6059] [ 126.715823][ T6059] Chain exists of: [ 126.715823][ T6059] &ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE] --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 126.715823][ T6059] [ 126.715859][ T6059] Possible unsafe locking scenario: [ 126.715859][ T6059] [ 126.715866][ T6059] CPU0 CPU1 [ 126.715872][ T6059] ---- ---- [ 126.715878][ T6059] lock(&oi->ip_xattr_sem); [ 126.715892][ T6059] lock(&journal->j_trans_barrier); [ 126.715908][ T6059] lock(&oi->ip_xattr_sem); [ 126.715922][ T6059] lock(&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]); [ 126.715936][ T6059] [ 126.715936][ T6059] *** DEADLOCK *** [ 126.715936][ T6059] [ 126.715941][ T6059] 4 locks held by syz.0.17/6059: [ 126.715952][ T6059] #0: ffff888040d160d0 (&type->s_umount_key#56/1){+.+.}-{4:4}, at: alloc_super+0x28c/0xac0 [ 126.716020][ T6059] #1: ffff88803a2dc480 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 126.716072][ T6059] #2: ffff88804ae45f40 (&sb->s_type->i_mutex_key#26){++++}-{4:4}, at: vfs_setxattr+0x13e/0x370 [ 126.716129][ T6059] #3: ffff88804ae45c18 (&oi->ip_xattr_sem){+.+.}-{4:4}, at: ocfs2_xattr_set+0x475/0x13e0 [ 126.716184][ T6059] [ 126.716184][ T6059] stack backtrace: [ 126.716211][ T6059] CPU: 0 UID: 0 PID: 6059 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.716234][ T6059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 126.716255][ T6059] Call Trace: [ 126.716266][ T6059] [ 126.716275][ T6059] dump_stack_lvl+0xe8/0x150 [ 126.716304][ T6059] print_circular_bug+0x2e1/0x300 [ 126.716326][ T6059] check_noncircular+0x12e/0x150 [ 126.716349][ T6059] __lock_acquire+0x15a5/0x2cf0 [ 126.716412][ T6059] ? ocfs2_get_system_file_inode+0x202/0x7e0 [ 126.716437][ T6059] ? __pfx_ocfs2_get_system_file_inode+0x10/0x10 [ 126.716460][ T6059] ? ocfs2_reserve_local_alloc_bits+0x11f/0x2610 [ 126.716479][ T6059] lock_acquire+0x106/0x330 [ 126.716506][ T6059] ? ocfs2_reserve_local_alloc_bits+0x11f/0x2610 [ 126.716534][ T6059] down_write+0x3a/0x50 [ 126.716562][ T6059] ? ocfs2_reserve_local_alloc_bits+0x11f/0x2610 [ 126.716584][ T6059] ocfs2_reserve_local_alloc_bits+0x11f/0x2610 [ 126.716608][ T6059] ? __lock_acquire+0x6b5/0x2cf0 [ 126.716639][ T6059] ? __lock_acquire+0x6b5/0x2cf0 [ 126.716672][ T6059] ? __pfx_ocfs2_reserve_local_alloc_bits+0x10/0x10 [ 126.716697][ T6059] ? do_raw_spin_lock+0x12b/0x2f0 [ 126.716726][ T6059] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 126.716754][ T6059] ? lockdep_hardirqs_on+0x7a/0x110 [ 126.716779][ T6059] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 126.716814][ T6059] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 126.716836][ T6059] ? reacquire_held_locks+0x104/0x190 [ 126.716870][ T6059] ? rt_spin_lock+0x1e0/0x400 [ 126.716892][ T6059] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 126.716914][ T6059] ? rt_spin_unlock+0x14f/0x200 [ 126.716938][ T6059] ? rt_spin_unlock+0x160/0x200 [ 126.716960][ T6059] ? ocfs2_alloc_should_use_local+0x13e/0x2e0 [ 126.716991][ T6059] ? ocfs2_reserve_clusters_with_limit+0x160/0xc20 [ 126.717020][ T6059] ocfs2_reserve_clusters_with_limit+0x1b9/0xc20 [ 126.717050][ T6059] ? __pfx_ocfs2_reserve_clusters_with_limit+0x10/0x10 [ 126.717082][ T6059] ? __pfx_ocfs2_calc_xattr_set_need+0x10/0x10 [ 126.717115][ T6059] ? do_raw_spin_lock+0x12b/0x2f0 [ 126.717146][ T6059] ocfs2_init_xattr_set_ctxt+0x375/0x710 [ 126.717175][ T6059] ? lockdep_hardirqs_on+0x7a/0x110 [ 126.717204][ T6059] ? __pfx_ocfs2_init_xattr_set_ctxt+0x10/0x10 [ 126.717234][ T6059] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 126.717266][ T6059] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 126.717294][ T6059] ? lockdep_hardirqs_on+0x7a/0x110 [ 126.717322][ T6059] ocfs2_xattr_set+0xc42/0x13e0 [ 126.717364][ T6059] ? __pfx_ocfs2_xattr_set+0x10/0x10 [ 126.717478][ T6059] ? desc_update_last_finalized+0x193/0x1f0 [ 126.717525][ T6059] ? lockdep_hardirqs_on+0x7a/0x110 [ 126.717557][ T6059] ? smk_tskacc+0x311/0x3a0 [ 126.717589][ T6059] ? posix_xattr_acl+0x93/0xc0 [ 126.717614][ T6059] ? evm_protect_xattr+0x4d4/0xac0 [ 126.717636][ T6059] ? __pfx_evm_protect_xattr+0x10/0x10 [ 126.717660][ T6059] ? __pfx_ocfs2_xattr_trusted_set+0x10/0x10 [ 126.717692][ T6059] __vfs_setxattr+0x43c/0x480 [ 126.717726][ T6059] __vfs_setxattr_noperm+0x12d/0x660 [ 126.717758][ T6059] vfs_setxattr+0x163/0x370 [ 126.717789][ T6059] ? __pfx_vfs_setxattr+0x10/0x10 [ 126.717817][ T6059] ? __dentry_kill+0x4b2/0x5e0 [ 126.717840][ T6059] ? finish_dput+0xad/0x480 [ 126.717869][ T6059] ? finish_dput+0x3da/0x480 [ 126.717899][ T6059] ovl_fill_super+0x4b50/0x5e60 [ 126.717927][ T6059] ? unwind_get_return_address+0x4d/0x90 [ 126.717967][ T6059] ? __pfx_stack_trace_save+0x10/0x10 [ 126.717998][ T6059] ? __pfx_ovl_fill_super+0x10/0x10 [ 126.718027][ T6059] ? __lock_acquire+0x6b5/0x2cf0 [ 126.718060][ T6059] ? __lock_acquire+0x6b5/0x2cf0 [ 126.718094][ T6059] ? __lock_acquire+0x6b5/0x2cf0 [ 126.718125][ T6059] ? do_raw_spin_lock+0x12b/0x2f0 [ 126.718156][ T6059] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 126.718185][ T6059] ? lockdep_hardirqs_on+0x7a/0x110 [ 126.718211][ T6059] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 126.718240][ T6059] ? rt_mutex_slowunlock+0x1cb/0x300 [ 126.718264][ T6059] ? __raw_spin_lock_init+0x45/0x100 [ 126.718296][ T6059] ? sget_fc+0x962/0xa40 [ 126.718327][ T6059] ? __pfx_set_anon_super_fc+0x10/0x10 [ 126.718347][ T6059] ? __pfx_ovl_fill_super+0x10/0x10 [ 126.718388][ T6059] get_tree_nodev+0xbb/0x150 [ 126.718409][ T6059] vfs_get_tree+0x92/0x2a0 [ 126.718431][ T6059] do_new_mount+0x341/0xd30 [ 126.718458][ T6059] ? safesetid_security_capable+0xa9/0x1a0 [ 126.718493][ T6059] ? __pfx_do_new_mount+0x10/0x10 [ 126.718521][ T6059] ? ns_capable+0x89/0xe0 [ 126.718546][ T6059] ? path_mount+0x690/0x10e0 [ 126.718573][ T6059] ? user_path_at+0xd4/0x160 [ 126.718606][ T6059] ? user_path_at+0xd4/0x160 [ 126.718639][ T6059] __se_sys_mount+0x31d/0x420 [ 126.718671][ T6059] ? __pfx___se_sys_mount+0x10/0x10 [ 126.718703][ T6059] ? __x64_sys_mount+0x20/0xc0 [ 126.718732][ T6059] do_syscall_64+0x14d/0xf80 [ 126.718759][ T6059] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.718781][ T6059] ? trace_irq_disable+0x37/0x100 [ 126.718799][ T6059] ? clear_bhb_loop+0x40/0x90 [ 126.718824][ T6059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.718845][ T6059] RIP: 0033:0x7fc975b0c629 [ 126.718876][ T6059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.718895][ T6059] RSP: 002b:00007ffe4f24fb78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 126.718918][ T6059] RAX: ffffffffffffffda RBX: 00007fc975d85fa0 RCX: 00007fc975b0c629 [ 126.718934][ T6059] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 126.718948][ T6059] RBP: 00007fc975ba2b39 R08: 0000200000000400 R09: 0000000000000000 [ 126.718962][ T6059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.718975][ T6059] R13: 00007fc975d85fac R14: 00007fc975d85fa0 R15: 00007fc975d85fa0 [ 126.718998][ T6059] [ 126.728782][ T6059] ------------[ cut here ]------------ [ 126.728831][ T6059] UBSAN: array-index-out-of-bounds in fs/ocfs2/xattr.c:1985:3 [ 126.728868][ T6059] index 2 is out of range for type 'struct ocfs2_xattr_entry[] __counted_by(xh_count)' (aka 'struct ocfs2_xattr_entry[]') [ 126.728922][ T6059] CPU: 0 UID: 0 PID: 6059 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.728988][ T6059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 126.729022][ T6059] Call Trace: [ 126.729044][ T6059] [ 126.729065][ T6059] dump_stack_lvl+0xe8/0x150 [ 126.729138][ T6059] ubsan_epilogue+0xa/0x30 [ 126.729200][ T6059] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 126.729286][ T6059] ocfs2_xa_remove_entry+0x49e/0x670 [ 126.729351][ T6059] ocfs2_xa_set+0xdb2/0x2ec0 [ 126.729471][ T6059] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 126.729536][ T6059] ? try_to_take_rt_mutex+0x840/0xb00 [ 126.729600][ T6059] ? rcu_is_watching+0x15/0xb0 [ 126.729679][ T6059] ? __pfx_ocfs2_xa_set+0x10/0x10 [ 126.729765][ T6059] ? rtlock_slowlock_locked+0xfb/0x3c80 [ 126.729827][ T6059] ? do_raw_spin_lock+0x12b/0x2f0 [ 126.729883][ T6059] ? rcu_is_watching+0x15/0xb0 [ 126.729978][ T6059] ? unwind_next_frame+0xa5/0x23c0 [ 126.730053][ T6059] ? rcu_is_watching+0x15/0xb0 [ 126.730129][ T6059] ? unwind_next_frame+0xa5/0x23c0 [ 126.730211][ T6059] ? rcu_is_watching+0x15/0xb0 [ 126.730277][ T6059] ? unwind_next_frame+0xa5/0x23c0 [ 126.730362][ T6059] ? rcu_is_watching+0x15/0xb0 [ 126.730465][ T6059] ? is_bpf_text_address+0x26/0x2b0 [ 126.730526][ T6059] ? rcu_is_watching+0x15/0xb0 [ 126.730608][ T6059] ? rcu_is_watching+0x15/0xb0 [ 126.730695][ T6059] ? lock_release+0x4b/0x3a0 [ 126.730771][ T6059] ? lock_release+0x4b/0x3a0 [ 126.730847][ T6059] ? is_bpf_text_address+0x292/0x2b0 [ 126.730868][ T6059] ? rt_read_lock+0x277/0x4b0 [ 126.730886][ T6059] ? rcu_is_watching+0x15/0xb0 [ 126.730915][ T6059] ? lock_acquire+0x5f/0x330 [ 126.730944][ T6059] ocfs2_xattr_block_set+0x3e0/0x3350 [ 126.730978][ T6059] ? rcu_is_watching+0x15/0xb0 [ 126.731008][ T6059] ? lock_acquire+0x5f/0x330 [ 126.731035][ T6059] ? rcu_is_watching+0x15/0xb0 [ 126.731098][ T6059] ? __pfx_ocfs2_xattr_block_set+0x10/0x10 [ 126.731182][ T6059] ? start_this_handle+0x2135/0x2290 [ 126.731290][ T6059] ? __pfx_start_this_handle+0x10/0x10 [ 126.731404][ T6059] ? rcu_is_watching+0x15/0xb0 [ 126.731488][ T6059] __ocfs2_xattr_set_handle+0x262/0xf50 [ 126.731572][ T6059] ? __pfx___ocfs2_xattr_set_handle+0x10/0x10 [ 126.731644][ T6059] ? jbd2_journal_start+0x2a/0x40 [ 126.731718][ T6059] ? ocfs2_start_trans+0x4e2/0x700 [ 126.731821][ T6059] ? __pfx_ocfs2_start_trans+0x10/0x10 [ 126.731919][ T6059] ocfs2_xattr_set+0xf3f/0x13e0 [ 126.732023][ T6059] ? __pfx_ocfs2_xattr_set+0x10/0x10 [ 126.732115][ T6059] ? smk_tskacc+0x311/0x3a0 [ 126.732178][ T6059] ? smack_log+0xf5/0x3f0 [ 126.732247][ T6059] ? __pfx_smack_log+0x10/0x10 [ 126.732320][ T6059] ? smk_tskacc+0x311/0x3a0 [ 126.732406][ T6059] ? posix_xattr_acl+0x93/0xc0 [ 126.732470][ T6059] ? evm_protect_xattr+0x4d4/0xac0 [ 126.732533][ T6059] ? __pfx_evm_protect_xattr+0x10/0x10 [ 126.732587][ T6059] ? __pfx_ocfs2_xattr_trusted_set+0x10/0x10 [ 126.732673][ T6059] __vfs_removexattr+0x431/0x470 [ 126.732763][ T6059] __vfs_removexattr_locked+0xe2/0x280 [ 126.732846][ T6059] vfs_removexattr+0x7f/0x230 [ 126.732922][ T6059] ovl_fill_super+0x4c39/0x5e60 [ 126.732997][ T6059] ? unwind_get_return_address+0x4d/0x90 [ 126.733088][ T6059] ? __pfx_stack_trace_save+0x10/0x10 [ 126.733176][ T6059] ? __pfx_ovl_fill_super+0x10/0x10 [ 126.733272][ T6059] ? __lock_acquire+0x6b5/0x2cf0 [ 126.733356][ T6059] ? __lock_acquire+0x6b5/0x2cf0 [ 126.733449][ T6059] ? __lock_acquire+0x6b5/0x2cf0 [ 126.733523][ T6059] ? do_raw_spin_lock+0x12b/0x2f0 [ 126.733599][ T6059] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 126.733676][ T6059] ? lockdep_hardirqs_on+0x7a/0x110 [ 126.733749][ T6059] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 126.733822][ T6059] ? rt_mutex_slowunlock+0x1cb/0x300 [ 126.733877][ T6059] ? __raw_spin_lock_init+0x45/0x100 [ 126.733953][ T6059] ? sget_fc+0x962/0xa40 [ 126.734029][ T6059] ? __pfx_set_anon_super_fc+0x10/0x10 [ 126.734082][ T6059] ? __pfx_ovl_fill_super+0x10/0x10 [ 126.734156][ T6059] get_tree_nodev+0xbb/0x150 [ 126.734209][ T6059] vfs_get_tree+0x92/0x2a0 [ 126.734265][ T6059] do_new_mount+0x341/0xd30 [ 126.734331][ T6059] ? safesetid_security_capable+0xa9/0x1a0 [ 126.734425][ T6059] ? __pfx_do_new_mount+0x10/0x10 [ 126.734498][ T6059] ? ns_capable+0x89/0xe0 [ 126.734582][ T6059] ? path_mount+0x690/0x10e0 [ 126.734660][ T6059] ? user_path_at+0xd4/0x160 [ 126.734738][ T6059] ? user_path_at+0xd4/0x160 [ 126.734831][ T6059] __se_sys_mount+0x31d/0x420 [ 126.734910][ T6059] ? __pfx___se_sys_mount+0x10/0x10 [ 126.734992][ T6059] ? __x64_sys_mount+0x20/0xc0 [ 126.735065][ T6059] do_syscall_64+0x14d/0xf80 [ 126.735131][ T6059] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.735185][ T6059] ? trace_irq_disable+0x37/0x100 [ 126.735235][ T6059] ? clear_bhb_loop+0x40/0x90 [ 126.735298][ T6059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.735351][ T6059] RIP: 0033:0x7fc975b0c629 [ 126.735411][ T6059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.735454][ T6059] RSP: 002b:00007ffe4f24fb78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 126.735509][ T6059] RAX: ffffffffffffffda RBX: 00007fc975d85fa0 RCX: 00007fc975b0c629 [ 126.735553][ T6059] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 126.735594][ T6059] RBP: 00007fc975ba2b39 R08: 0000200000000400 R09: 0000000000000000 [ 126.735628][ T6059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.735654][ T6059] R13: 00007fc975d85fac R14: 00007fc975d85fa0 R15: 00007fc975d85fa0 [ 126.735718][ T6059] [ 126.747756][ T6059] ---[ end trace ]--- [ 126.747800][ T6059] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 126.747862][ T6059] CPU: 0 UID: 0 PID: 6059 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.747926][ T6059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 126.747959][ T6059] Call Trace: [ 126.747980][ T6059] [ 126.748002][ T6059] vpanic+0x1e0/0x670 [ 126.748098][ T6059] panic+0xc5/0xd0 [ 126.748172][ T6059] ? __pfx_panic+0x10/0x10 [ 126.748255][ T6059] ? __pfx__printk+0x10/0x10 [ 126.748319][ T6059] check_panic_on_warn+0x89/0xb0 [ 126.748386][ T6059] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 126.748473][ T6059] ocfs2_xa_remove_entry+0x49e/0x670 [ 126.748545][ T6059] ocfs2_xa_set+0xdb2/0x2ec0 [ 126.748623][ T6059] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 126.748687][ T6059] ? try_to_take_rt_mutex+0x840/0xb00 [ 126.748758][ T6059] ? rcu_is_watching+0x15/0xb0 [ 126.748806][ T6059] ? __pfx_ocfs2_xa_set+0x10/0x10 [ 126.748837][ T6059] ? rtlock_slowlock_locked+0xfb/0x3c80 [ 126.748862][ T6059] ? do_raw_spin_lock+0x12b/0x2f0 [ 126.748886][ T6059] ? rcu_is_watching+0x15/0xb0 [ 126.748918][ T6059] ? unwind_next_frame+0xa5/0x23c0 [ 126.748949][ T6059] ? rcu_is_watching+0x15/0xb0 [ 126.748981][ T6059] ? unwind_next_frame+0xa5/0x23c0 [ 126.749010][ T6059] ? rcu_is_watching+0x15/0xb0 [ 126.749042][ T6059] ? unwind_next_frame+0xa5/0x23c0 [ 126.749071][ T6059] ? rcu_is_watching+0x15/0xb0 [ 126.749104][ T6059] ? is_bpf_text_address+0x26/0x2b0 [ 126.749125][ T6059] ? rcu_is_watching+0x15/0xb0 [ 126.749158][ T6059] ? rcu_is_watching+0x15/0xb0 [ 126.749188][ T6059] ? lock_release+0x4b/0x3a0 [ 126.749216][ T6059] ? lock_release+0x4b/0x3a0 [ 126.749245][ T6059] ? is_bpf_text_address+0x292/0x2b0 [ 126.749268][ T6059] ? rt_read_lock+0x277/0x4b0 [ 126.749288][ T6059] ? rcu_is_watching+0x15/0xb0 [ 126.749318][ T6059] ? lock_acquire+0x5f/0x330 [ 126.749349][ T6059] ocfs2_xattr_block_set+0x3e0/0x3350 [ 126.749393][ T6059] ? rcu_is_watching+0x15/0xb0 [ 126.749423][ T6059] ? lock_acquire+0x5f/0x330 [ 126.749450][ T6059] ? rcu_is_watching+0x15/0xb0 [ 126.749484][ T6059] ? __pfx_ocfs2_xattr_block_set+0x10/0x10 [ 126.749515][ T6059] ? start_this_handle+0x2135/0x2290 [ 126.749556][ T6059] ? __pfx_start_this_handle+0x10/0x10 [ 126.749597][ T6059] ? rcu_is_watching+0x15/0xb0 [ 126.749629][ T6059] __ocfs2_xattr_set_handle+0x262/0xf50 [ 126.749660][ T6059] ? __pfx___ocfs2_xattr_set_handle+0x10/0x10 [ 126.749690][ T6059] ? jbd2_journal_start+0x2a/0x40 [ 126.749718][ T6059] ? ocfs2_start_trans+0x4e2/0x700 [ 126.749749][ T6059] ? __pfx_ocfs2_start_trans+0x10/0x10 [ 126.749782][ T6059] ocfs2_xattr_set+0xf3f/0x13e0 [ 126.749821][ T6059] ? __pfx_ocfs2_xattr_set+0x10/0x10 [ 126.749855][ T6059] ? smk_tskacc+0x311/0x3a0 [ 126.749879][ T6059] ? smack_log+0xf5/0x3f0 [ 126.749905][ T6059] ? __pfx_smack_log+0x10/0x10 [ 126.749934][ T6059] ? smk_tskacc+0x311/0x3a0 [ 126.749963][ T6059] ? posix_xattr_acl+0x93/0xc0 [ 126.749987][ T6059] ? evm_protect_xattr+0x4d4/0xac0 [ 126.750012][ T6059] ? __pfx_evm_protect_xattr+0x10/0x10 [ 126.750033][ T6059] ? __pfx_ocfs2_xattr_trusted_set+0x10/0x10 [ 126.750063][ T6059] __vfs_removexattr+0x431/0x470 [ 126.750098][ T6059] __vfs_removexattr_locked+0xe2/0x280 [ 126.750129][ T6059] vfs_removexattr+0x7f/0x230 [ 126.750158][ T6059] ovl_fill_super+0x4c39/0x5e60 [ 126.750188][ T6059] ? unwind_get_return_address+0x4d/0x90 [ 126.750226][ T6059] ? __pfx_stack_trace_save+0x10/0x10 [ 126.750254][ T6059] ? __pfx_ovl_fill_super+0x10/0x10 [ 126.750283][ T6059] ? __lock_acquire+0x6b5/0x2cf0 [ 126.750316][ T6059] ? __lock_acquire+0x6b5/0x2cf0 [ 126.750347][ T6059] ? __lock_acquire+0x6b5/0x2cf0 [ 126.750390][ T6059] ? do_raw_spin_lock+0x12b/0x2f0 [ 126.750420][ T6059] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 126.750449][ T6059] ? lockdep_hardirqs_on+0x7a/0x110 [ 126.750476][ T6059] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 126.750503][ T6059] ? rt_mutex_slowunlock+0x1cb/0x300 [ 126.750528][ T6059] ? __raw_spin_lock_init+0x45/0x100 [ 126.750560][ T6059] ? sget_fc+0x962/0xa40 [ 126.750591][ T6059] ? __pfx_set_anon_super_fc+0x10/0x10 [ 126.750611][ T6059] ? __pfx_ovl_fill_super+0x10/0x10 [ 126.750640][ T6059] get_tree_nodev+0xbb/0x150 [ 126.750661][ T6059] vfs_get_tree+0x92/0x2a0 [ 126.750683][ T6059] do_new_mount+0x341/0xd30 [ 126.750712][ T6059] ? safesetid_security_capable+0xa9/0x1a0 [ 126.750747][ T6059] ? __pfx_do_new_mount+0x10/0x10 [ 126.750774][ T6059] ? ns_capable+0x89/0xe0 [ 126.750800][ T6059] ? path_mount+0x690/0x10e0 [ 126.750827][ T6059] ? user_path_at+0xd4/0x160 [ 126.750864][ T6059] ? user_path_at+0xd4/0x160 [ 126.750894][ T6059] __se_sys_mount+0x31d/0x420 [ 126.750925][ T6059] ? __pfx___se_sys_mount+0x10/0x10 [ 126.750955][ T6059] ? __x64_sys_mount+0x20/0xc0 [ 126.750981][ T6059] do_syscall_64+0x14d/0xf80 [ 126.751006][ T6059] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.751027][ T6059] ? trace_irq_disable+0x37/0x100 [ 126.751045][ T6059] ? clear_bhb_loop+0x40/0x90 [ 126.751069][ T6059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.751091][ T6059] RIP: 0033:0x7fc975b0c629 [ 126.751110][ T6059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.751128][ T6059] RSP: 002b:00007ffe4f24fb78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 126.751152][ T6059] RAX: ffffffffffffffda RBX: 00007fc975d85fa0 RCX: 00007fc975b0c629 [ 126.751168][ T6059] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 126.751183][ T6059] RBP: 00007fc975ba2b39 R08: 0000200000000400 R09: 0000000000000000 [ 126.751198][ T6059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.751211][ T6059] R13: 00007fc975d85fac R14: 00007fc975d85fa0 R15: 00007fc975d85fa0 [ 126.751235][ T6059] [ 126.751837][ T6059] Kernel Offset: disabled