Warning: Permanently added '10.128.0.76' (ED25519) to the list of known hosts. 2026/01/19 12:46:14 parsed 1 programs [ 81.359399][ T5809] cgroup: Unknown subsys name 'net' [ 81.607256][ T5809] cgroup: Unknown subsys name 'cpuset' [ 81.672944][ T5809] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.986530][ T9] cfg80211: failed to load regulatory.db [ 83.395557][ T5809] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.767347][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 87.891826][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.894044][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.894242][ T5841] bridge_slave_0: entered allmulticast mode [ 87.896736][ T5841] bridge_slave_0: entered promiscuous mode [ 87.920130][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.920305][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.920430][ T5841] bridge_slave_1: entered allmulticast mode [ 87.921770][ T5841] bridge_slave_1: entered promiscuous mode [ 88.070369][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.074952][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.108820][ T5841] team0: Port device team_slave_0 added [ 88.110831][ T5841] team0: Port device team_slave_1 added [ 88.141914][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.141926][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.141939][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.150224][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.150240][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.150262][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.298401][ T5841] hsr_slave_0: entered promiscuous mode [ 88.299442][ T5841] hsr_slave_1: entered promiscuous mode [ 88.534299][ T5841] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.582073][ T5841] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.607177][ T5841] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.645477][ T5841] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.028490][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.052054][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.066726][ T3866] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.068591][ T3866] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.096353][ T1713] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.096483][ T1713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.284626][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.327110][ T5841] veth0_vlan: entered promiscuous mode [ 89.334938][ T5841] veth1_vlan: entered promiscuous mode [ 89.368517][ T5841] veth0_macvtap: entered promiscuous mode [ 89.372295][ T5841] veth1_macvtap: entered promiscuous mode [ 89.391821][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.408107][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.427228][ T1713] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.428943][ T1713] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.428982][ T1713] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.429020][ T1713] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.096812][ T1013] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.317043][ T1013] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.526244][ T1013] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.411667][ T5124] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.426036][ T5124] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.428115][ T5124] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.443315][ T5124] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.458191][ T5124] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.531185][ T1013] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.888791][ T3866] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.888817][ T3866] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.945743][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.945763][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.893208][ T1013] bridge_slave_1: left allmulticast mode [ 92.893403][ T1013] bridge_slave_1: left promiscuous mode [ 92.895471][ T1013] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.056670][ T1013] bridge_slave_0: left allmulticast mode [ 93.056698][ T1013] bridge_slave_0: left promiscuous mode [ 93.056929][ T1013] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.423240][ T1013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.503173][ T1013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.524572][ T1013] bond0 (unregistering): Released all slaves [ 94.854545][ T1013] hsr_slave_0: left promiscuous mode [ 94.892544][ T1013] hsr_slave_1: left promiscuous mode [ 94.893699][ T1013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.894647][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.934628][ T1013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.934654][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.032131][ T1013] veth1_macvtap: left promiscuous mode [ 95.037003][ T1013] veth0_macvtap: left promiscuous mode [ 95.037318][ T1013] veth1_vlan: left promiscuous mode [ 95.037613][ T1013] veth0_vlan: left promiscuous mode [ 97.243031][ T1013] team0 (unregistering): Port device team_slave_1 removed [ 97.423158][ T1013] team0 (unregistering): Port device team_slave_0 removed 2026/01/19 12:46:35 executed programs: 0 [ 100.084334][ T5124] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.086452][ T5124] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 100.088839][ T5124] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 100.099312][ T5124] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 100.099983][ T5124] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.429862][ T5968] chnl_net:caif_netlink_parms(): no params data found [ 101.148066][ T5968] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.148263][ T5968] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.148406][ T5968] bridge_slave_0: entered allmulticast mode [ 101.150795][ T5968] bridge_slave_0: entered promiscuous mode [ 101.183164][ T5968] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.183931][ T5968] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.184097][ T5968] bridge_slave_1: entered allmulticast mode [ 101.186574][ T5968] bridge_slave_1: entered promiscuous mode [ 101.264283][ T5968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.267774][ T5968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.326268][ T5968] team0: Port device team_slave_0 added [ 101.329566][ T5968] team0: Port device team_slave_1 added [ 101.384544][ T5968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.384560][ T5968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.384582][ T5968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.386592][ T5968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.386604][ T5968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.386625][ T5968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.689307][ T5968] hsr_slave_0: entered promiscuous mode [ 101.690090][ T5968] hsr_slave_1: entered promiscuous mode [ 102.144611][ T5124] Bluetooth: hci0: command tx timeout [ 103.872648][ T5968] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.953640][ T5968] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.032996][ T5968] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.093156][ T5968] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.233464][ T5124] Bluetooth: hci0: command tx timeout [ 104.435772][ T5968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.476540][ T5968] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.486021][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.486213][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.527888][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.527963][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.870036][ T5968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.938944][ T5968] veth0_vlan: entered promiscuous mode [ 104.956328][ T5968] veth1_vlan: entered promiscuous mode [ 105.002562][ T5968] veth0_macvtap: entered promiscuous mode [ 105.008370][ T5968] veth1_macvtap: entered promiscuous mode [ 105.027939][ T5968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.045997][ T5968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.058018][ T1114] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.058060][ T1114] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.058091][ T1114] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.058122][ T1114] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.340585][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.340605][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.403825][ T3866] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.403845][ T3866] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/01/19 12:46:41 executed programs: 2 [ 105.925598][ T6092] loop0: detected capacity change from 0 to 32768 [ 105.928920][ T6092] ======================================================= [ 105.928920][ T6092] WARNING: The mand mount option has been deprecated and [ 105.928920][ T6092] and is ignored by this kernel. Remove the mand [ 105.928920][ T6092] option from the mount to silence this warning. [ 105.928920][ T6092] ======================================================= [ 106.079070][ T6092] JBD2: Ignoring recovery information on journal [ 106.167233][ T6092] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 106.278487][ T6092] overlayfs: upper fs does not support tmpfile. [ 106.287094][ T6092] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 106.287866][ T6092] [ 106.287873][ T6092] =========================================[ 106.287873][ T6092] ====================================================== [ 106.287880][ T6092] WARNING: possible circular locking dependency detected [ 106.287896][ T6092] syzkaller #0 Not tainted [ 106.287904][ T6092] ------------------------------------------------------ [ 106.287910][ T6092] syz.0.17/6092 is trying to acquire lock: [ 106.287920][ T6092] ffff88805a1b4e80 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_local_alloc_bits+0x11f/0x2610 [ 106.287976][ T6092] [ 106.287976][ T6092] but task is already holding lock: [ 106.287981][ T6092] ffff888041eb9918 (&oi->ip_xattr_sem){+.+.}-{4:4}, at: ocfs2_xattr_set+0x475/0x13e0 [ 106.288020][ T6092] [ 106.288020][ T6092] which lock already depends on the new lock. [ 106.288020][ T6092] [ 106.288025][ T6092] [ 106.288025][ T6092] the existing dependency chain (in reverse order) is: [ 106.288032][ T6092] [ 106.288032][ T6092] -> #3 (&oi->ip_xattr_sem){+.+.}-{4:4}: [ 106.288054][ T6092] down_write+0x3a/0x50 [ 106.288072][ T6092] ocfs2_xattr_set_handle+0x3e6/0x810 [ 106.288090][ T6092] ocfs2_init_security_set+0xbd/0xe0 [ 106.288108][ T6092] ocfs2_mknod+0x1481/0x2210 [ 106.288122][ T6092] ocfs2_mkdir+0x181/0x430 [ 106.288136][ T6092] vfs_mkdir+0x52c/0x5d0 [ 106.288155][ T6092] do_mkdirat+0x281/0x4c0 [ 106.288172][ T6092] __x64_sys_mkdirat+0x87/0xa0 [ 106.288190][ T6092] do_syscall_64+0xe2/0xf80 [ 106.288206][ T6092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.288221][ T6092] [ 106.288221][ T6092] -> #2 (&journal->j_trans_barrier){.+.+}-{4:4}: [ 106.288243][ T6092] down_read+0x97/0x200 [ 106.288259][ T6092] ocfs2_start_trans+0x3ac/0x700 [ 106.288276][ T6092] ocfs2_reserve_suballoc_bits+0x7bb/0x4790 [ 106.288293][ T6092] ocfs2_reserve_new_metadata_blocks+0x415/0x9a0 [ 106.288309][ T6092] ocfs2_mknod+0xea3/0x2210 [ 106.288323][ T6092] ocfs2_mkdir+0x181/0x430 [ 106.288337][ T6092] vfs_mkdir+0x52c/0x5d0 [ 106.288354][ T6092] do_mkdirat+0x281/0x4c0 [ 106.288371][ T6092] __x64_sys_mkdirat+0x87/0xa0 [ 106.288389][ T6092] do_syscall_64+0xe2/0xf80 [ 106.288404][ T6092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.288418][ T6092] [ 106.288418][ T6092] -> #1 (sb_internal#2){.+.+}-{0:0}: [ 106.288450][ T6092] ocfs2_start_trans+0x2ac/0x700 [ 106.288467][ T6092] ocfs2_mknod+0xf31/0x2210 [ 106.288480][ T6092] ocfs2_mkdir+0x181/0x430 [ 106.288494][ T6092] vfs_mkdir+0x52c/0x5d0 [ 106.288511][ T6092] do_mkdirat+0x281/0x4c0 [ 106.288528][ T6092] __x64_sys_mkdirat+0x87/0xa0 [ 106.288546][ T6092] do_syscall_64+0xe2/0xf80 [ 106.288562][ T6092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.288576][ T6092] [ 106.288576][ T6092] -> #0 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}: [ 106.288599][ T6092] __lock_acquire+0x15a5/0x2cf0 [ 106.288617][ T6092] lock_acquire+0x106/0x330 [ 106.288634][ T6092] down_write+0x3a/0x50 [ 106.288650][ T6092] ocfs2_reserve_local_alloc_bits+0x11f/0x2610 [ 106.288664][ T6092] ocfs2_reserve_clusters_with_limit+0x1b9/0xc20 [ 106.288681][ T6092] ocfs2_init_xattr_set_ctxt+0x375/0x710 [ 106.288699][ T6092] ocfs2_xattr_set+0xc42/0x13e0 [ 106.288715][ T6092] __vfs_setxattr+0x43c/0x480 [ 106.288729][ T6092] __vfs_setxattr_noperm+0x12d/0x660 [ 106.288744][ T6092] vfs_setxattr+0x16a/0x2f0 [ 106.288757][ T6092] ovl_fill_super+0x4b50/0x5e60 [ 106.288776][ T6092] get_tree_nodev+0xbb/0x150 [ 106.288794][ T6092] vfs_get_tree+0x92/0x2a0 [ 106.288811][ T6092] do_new_mount+0x329/0xa50 [ 106.288825][ T6092] __se_sys_mount+0x31d/0x420 [ 106.288839][ T6092] do_syscall_64+0xe2/0xf80 [ 106.288854][ T6092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.288869][ T6092] [ 106.288869][ T6092] other info that might help us debug this: [ 106.288869][ T6092] [ 106.288874][ T6092] Chain exists of: [ 106.288874][ T6092] &ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE] --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 106.288874][ T6092] [ 106.288902][ T6092] Possible unsafe locking scenario: [ 106.288902][ T6092] [ 106.288907][ T6092] CPU0 CPU1 [ 106.288912][ T6092] ---- ---- [ 106.288917][ T6092] lock(&oi->ip_xattr_sem); [ 106.288928][ T6092] lock(&journal->j_trans_barrier); [ 106.288941][ T6092] lock(&oi->ip_xattr_sem); [ 106.288953][ T6092] lock(&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]); [ 106.288965][ T6092] [ 106.288965][ T6092] *** DEADLOCK *** [ 106.288965][ T6092] [ 106.288970][ T6092] 4 locks held by syz.0.17/6092: [ 106.288979][ T6092] #0: ffff888036ffa0d0 (&type->s_umount_key#55/1){+.+.}-{4:4}, at: alloc_super+0x28c/0xab0 [ 106.289027][ T6092] #1: ffff888035f16480 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 106.289071][ T6092] #2: ffff888041eb9c40 (&sb->s_type->i_mutex_key#25){++++}-{4:4}, at: vfs_setxattr+0x143/0x2f0 [ 106.289112][ T6092] #3: ffff888041eb9918 (&oi->ip_xattr_sem){+.+.}-{4:4}, at: ocfs2_xattr_set+0x475/0x13e0 [ 106.289152][ T6092] [ 106.289152][ T6092] stack backtrace: [ 106.289171][ T6092] CPU: 0 UID: 0 PID: 6092 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 106.289190][ T6092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 106.289210][ T6092] Call Trace: [ 106.289219][ T6092] [ 106.289226][ T6092] dump_stack_lvl+0xe8/0x150 [ 106.289247][ T6092] print_circular_bug+0x2e1/0x300 [ 106.289271][ T6092] check_noncircular+0x12e/0x150 [ 106.289294][ T6092] __lock_acquire+0x15a5/0x2cf0 [ 106.289316][ T6092] ? ocfs2_get_system_file_inode+0x202/0x7e0 [ 106.289334][ T6092] ? __pfx_ocfs2_get_system_file_inode+0x10/0x10 [ 106.289351][ T6092] ? ocfs2_reserve_local_alloc_bits+0x11f/0x2610 [ 106.289365][ T6092] lock_acquire+0x106/0x330 [ 106.289380][ T6092] ? ocfs2_reserve_local_alloc_bits+0x11f/0x2610 [ 106.289398][ T6092] down_write+0x3a/0x50 [ 106.289414][ T6092] ? ocfs2_reserve_local_alloc_bits+0x11f/0x2610 [ 106.289434][ T6092] ocfs2_reserve_local_alloc_bits+0x11f/0x2610 [ 106.289449][ T6092] ? __lock_acquire+0x6b5/0x2cf0 [ 106.289467][ T6092] ? __lock_acquire+0x6b5/0x2cf0 [ 106.289488][ T6092] ? __pfx_ocfs2_reserve_local_alloc_bits+0x10/0x10 [ 106.289506][ T6092] ? do_raw_spin_lock+0x12b/0x2f0 [ 106.289527][ T6092] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 106.289546][ T6092] ? lockdep_hardirqs_on+0x7a/0x110 [ 106.289562][ T6092] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 106.289580][ T6092] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 106.289601][ T6092] ? reacquire_held_locks+0x104/0x190 [ 106.289621][ T6092] ? rt_spin_lock+0x1e0/0x400 [ 106.289643][ T6092] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 106.289665][ T6092] ? rt_spin_unlock+0x14f/0x200 [ 106.289687][ T6092] ? rt_spin_unlock+0x160/0x200 [ 106.289709][ T6092] ? ocfs2_alloc_should_use_local+0x13e/0x2e0 [ 106.289730][ T6092] ? ocfs2_reserve_clusters_with_limit+0x160/0xc20 [ 106.289750][ T6092] ocfs2_reserve_clusters_with_limit+0x1b9/0xc20 [ 106.289771][ T6092] ? __pfx_ocfs2_reserve_clusters_with_limit+0x10/0x10 [ 106.289793][ T6092] ? __pfx_ocfs2_calc_xattr_set_need+0x10/0x10 [ 106.289816][ T6092] ? do_raw_spin_lock+0x12b/0x2f0 [ 106.289837][ T6092] ocfs2_init_xattr_set_ctxt+0x375/0x710 [ 106.289856][ T6092] ? lockdep_hardirqs_on+0x7a/0x110 [ 106.289874][ T6092] ? __pfx_ocfs2_init_xattr_set_ctxt+0x10/0x10 [ 106.289895][ T6092] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 106.289916][ T6092] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 106.289933][ T6092] ? lockdep_hardirqs_on+0x7a/0x110 [ 106.289952][ T6092] ocfs2_xattr_set+0xc42/0x13e0 [ 106.289979][ T6092] ? __pfx_ocfs2_xattr_set+0x10/0x10 [ 106.289998][ T6092] ? desc_update_last_finalized+0x193/0x1f0 [ 106.290025][ T6092] ? lockdep_hardirqs_on+0x7a/0x110 [ 106.290045][ T6092] ? smk_tskacc+0x311/0x3a0 [ 106.290066][ T6092] ? posix_xattr_acl+0x93/0xc0 [ 106.290083][ T6092] ? evm_protect_xattr+0x4d4/0xac0 [ 106.290100][ T6092] ? __pfx_evm_protect_xattr+0x10/0x10 [ 106.290115][ T6092] ? safesetid_security_capable+0xa9/0x1a0 [ 106.290136][ T6092] ? __pfx_ocfs2_xattr_trusted_set+0x10/0x10 [ 106.290157][ T6092] __vfs_setxattr+0x43c/0x480 [ 106.290175][ T6092] __vfs_setxattr_noperm+0x12d/0x660 [ 106.290194][ T6092] vfs_setxattr+0x16a/0x2f0 [ 106.290212][ T6092] ? __pfx_vfs_setxattr+0x10/0x10 [ 106.290226][ T6092] ? __dentry_kill+0x51b/0x660 [ 106.290247][ T6092] ? finish_dput+0xad/0x480 [ 106.290263][ T6092] ? finish_dput+0x3da/0x480 [ 106.290278][ T6092] ovl_fill_super+0x4b50/0x5e60 [ 106.290298][ T6092] ? unwind_get_return_address+0x4d/0x90 [ 106.290324][ T6092] ? __pfx_stack_trace_save+0x10/0x10 [ 106.290348][ T6092] ? __pfx_ovl_fill_super+0x10/0x10 [ 106.290367][ T6092] ? __lock_acquire+0x6b5/0x2cf0 [ 106.290388][ T6092] ? __lock_acquire+0x6b5/0x2cf0 [ 106.290410][ T6092] ? __lock_acquire+0x6b5/0x2cf0 [ 106.290434][ T6092] ? do_raw_spin_lock+0x12b/0x2f0 [ 106.290454][ T6092] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 106.290472][ T6092] ? lockdep_hardirqs_on+0x7a/0x110 [ 106.290489][ T6092] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 106.290506][ T6092] ? rt_mutex_slowunlock+0x1cb/0x300 [ 106.290529][ T6092] ? __raw_spin_lock_init+0x45/0x100 [ 106.290550][ T6092] ? sget_fc+0x962/0xa40 [ 106.290568][ T6092] ? __pfx_set_anon_super_fc+0x10/0x10 [ 106.290587][ T6092] ? __pfx_ovl_fill_super+0x10/0x10 [ 106.290606][ T6092] get_tree_nodev+0xbb/0x150 [ 106.290626][ T6092] vfs_get_tree+0x92/0x2a0 [ 106.290646][ T6092] do_new_mount+0x329/0xa50 [ 106.290661][ T6092] ? safesetid_security_capable+0xa9/0x1a0 [ 106.290684][ T6092] ? __pfx_do_new_mount+0x10/0x10 [ 106.290699][ T6092] ? ns_capable+0x89/0xe0 [ 106.290716][ T6092] ? path_mount+0x63d/0x1000 [ 106.290735][ T6092] __se_sys_mount+0x31d/0x420 [ 106.290753][ T6092] ? __pfx___se_sys_mount+0x10/0x10 [ 106.290771][ T6092] ? __x64_sys_mount+0x20/0xc0 [ 106.290786][ T6092] do_syscall_64+0xe2/0xf80 [ 106.290803][ T6092] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.290818][ T6092] ? trace_irq_disable+0x37/0x100 [ 106.290834][ T6092] ? clear_bhb_loop+0x60/0xb0 [ 106.290852][ T6092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.290868][ T6092] RIP: 0033:0x7f72df0cacb9 [ 106.290891][ T6092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.290905][ T6092] RSP: 002b:00007fff1058ff18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 106.290922][ T6092] RAX: ffffffffffffffda RBX: 00007f72df345fa0 RCX: 00007f72df0cacb9 [ 106.290935][ T6092] RDX: 0000200000000b80 RSI: 0000200000000100 RDI: 0000000000000000 [ 106.290946][ T6092] RBP: 00007f72df138bf7 R08: 0000200000000480 R09: 0000000000000000 [ 106.290957][ T6092] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 106.290967][ T6092] R13: 00007f72df345fac R14: 00007f72df345fa0 R15: 00007f72df345fa0 [ 106.290984][ T6092] [ 106.291658][ T6092] ------------[ cut here ]------------ [ 106.291665][ T6092] UBSAN: array-index-out-of-bounds in fs/ocfs2/xattr.c:1985:3 [ 106.291678][ T6092] index 2 is out of range for type 'struct ocfs2_xattr_entry[] __counted_by(xh_count)' (aka 'struct ocfs2_xattr_entry[]') [ 106.291693][ T6092] CPU: 0 UID: 0 PID: 6092 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 106.291712][ T6092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 106.291721][ T6092] Call Trace: [ 106.291728][ T6092] [ 106.291734][ T6092] dump_stack_lvl+0xe8/0x150 [ 106.291755][ T6092] ubsan_epilogue+0xa/0x30 [ 106.291771][ T6092] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 106.291789][ T6092] ocfs2_xa_remove_entry+0x49e/0x670 [ 106.291809][ T6092] ocfs2_xa_set+0xb27/0x2b50 [ 106.291830][ T6092] ? kasan_save_track+0x3e/0x80 [ 106.291851][ T6092] ? rcu_is_watching+0x15/0xb0 [ 106.291869][ T6092] ? __pfx_ocfs2_xa_set+0x10/0x10 [ 106.291888][ T6092] ? rcu_is_watching+0x15/0xb0 [ 106.291904][ T6092] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 106.291921][ T6092] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 106.291944][ T6092] ? rcu_is_watching+0x15/0xb0 [ 106.291960][ T6092] ? try_to_take_rt_mutex+0x840/0xb00 [ 106.291979][ T6092] ? rtlock_slowlock_locked+0x100/0x3e70 [ 106.291993][ T6092] ? is_bpf_text_address+0x26/0x2b0 [ 106.292013][ T6092] ? do_raw_spin_lock+0x12b/0x2f0 [ 106.292029][ T6092] ? rcu_is_watching+0x15/0xb0 [ 106.292044][ T6092] ? unwind_next_frame+0xa5/0x23c0 [ 106.292062][ T6092] ? rcu_is_watching+0x15/0xb0 [ 106.292077][ T6092] ? unwind_next_frame+0xa5/0x23c0 [ 106.292094][ T6092] ? rcu_is_watching+0x15/0xb0 [ 106.292108][ T6092] ? unwind_next_frame+0xa5/0x23c0 [ 106.292127][ T6092] ? rcu_is_watching+0x15/0xb0 [ 106.292142][ T6092] ? is_bpf_text_address+0x26/0x2b0 [ 106.292160][ T6092] ? rcu_is_watching+0x15/0xb0 [ 106.292174][ T6092] ? rcu_is_watching+0x15/0xb0 [ 106.292188][ T6092] ? lock_release+0x4b/0x3a0 [ 106.292206][ T6092] ? lock_release+0x4b/0x3a0 [ 106.292227][ T6092] ? is_bpf_text_address+0x292/0x2b0 [ 106.292246][ T6092] ? rt_read_lock+0x277/0x4b0 [ 106.292260][ T6092] ? rcu_is_watching+0x15/0xb0 [ 106.292274][ T6092] ? lock_acquire+0x5f/0x330 [ 106.292294][ T6092] ocfs2_xattr_block_set+0x3e0/0x3350 [ 106.292318][ T6092] ? rcu_is_watching+0x15/0xb0 [ 106.292332][ T6092] ? lock_acquire+0x5f/0x330 [ 106.292357][ T6092] ? __pfx_ocfs2_xattr_block_set+0x10/0x10 [ 106.292376][ T6092] ? start_this_handle+0x2135/0x2290 [ 106.292404][ T6092] ? __pfx_start_this_handle+0x10/0x10 [ 106.292435][ T6092] ? jbd2__journal_start+0x145/0x5b0 [ 106.292452][ T6092] ? rcu_is_watching+0x15/0xb0 [ 106.292468][ T6092] __ocfs2_xattr_set_handle+0x262/0xf50 [ 106.292490][ T6092] ? __pfx___ocfs2_xattr_set_handle+0x10/0x10 [ 106.292511][ T6092] ? jbd2_journal_start+0x2a/0x40 [ 106.292528][ T6092] ? ocfs2_start_trans+0x4e2/0x700 [ 106.292549][ T6092] ? __pfx_ocfs2_start_trans+0x10/0x10 [ 106.292571][ T6092] ocfs2_xattr_set+0xf3f/0x13e0 [ 106.292599][ T6092] ? __pfx_ocfs2_xattr_set+0x10/0x10 [ 106.292622][ T6092] ? smack_log+0xf5/0x3f0 [ 106.292639][ T6092] ? __pfx_smack_log+0x10/0x10 [ 106.292655][ T6092] ? do_raw_spin_lock+0x12b/0x2f0 [ 106.292671][ T6092] ? rcu_is_watching+0x15/0xb0 [ 106.292686][ T6092] ? rcu_is_watching+0x15/0xb0 [ 106.292702][ T6092] ? smk_tskacc+0x311/0x3a0 [ 106.292722][ T6092] ? posix_xattr_acl+0x93/0xc0 [ 106.292738][ T6092] ? evm_protect_xattr+0x4d4/0xac0 [ 106.292755][ T6092] ? __pfx_ocfs2_xattr_trusted_set+0x10/0x10 [ 106.292777][ T6092] __vfs_removexattr+0x431/0x470 [ 106.292798][ T6092] __vfs_removexattr_locked+0x1ee/0x230 [ 106.292824][ T6092] vfs_removexattr+0x80/0x1b0 [ 106.292842][ T6092] ovl_fill_super+0x4c39/0x5e60 [ 106.292861][ T6092] ? unwind_get_return_address+0x4d/0x90 [ 106.292886][ T6092] ? __pfx_stack_trace_save+0x10/0x10 [ 106.292909][ T6092] ? __pfx_ovl_fill_super+0x10/0x10 [ 106.292928][ T6092] ? __lock_acquire+0x6b5/0x2cf0 [ 106.292950][ T6092] ? __lock_acquire+0x6b5/0x2cf0 [ 106.292971][ T6092] ? __lock_acquire+0x6b5/0x2cf0 [ 106.293005][ T6092] ? do_raw_spin_lock+0x12b/0x2f0 [ 106.293026][ T6092] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 106.293044][ T6092] ? lockdep_hardirqs_on+0x7a/0x110 [ 106.293061][ T6092] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 106.293083][ T6092] ? rt_mutex_slowunlock+0x1cb/0x300 [ 106.293105][ T6092] ? __raw_spin_lock_init+0x45/0x100 [ 106.293127][ T6092] ? sget_fc+0x962/0xa40 [ 106.293145][ T6092] ? __pfx_set_anon_super_fc+0x10/0x10 [ 106.293164][ T6092] ? __pfx_ovl_fill_super+0x10/0x10 [ 106.293183][ T6092] get_tree_nodev+0xbb/0x150 [ 106.293203][ T6092] vfs_get_tree+0x92/0x2a0 [ 106.293223][ T6092] do_new_mount+0x329/0xa50 [ 106.293238][ T6092] ? safesetid_security_capable+0xa9/0x1a0 [ 106.293260][ T6092] ? __pfx_do_new_mount+0x10/0x10 [ 106.293276][ T6092] ? ns_capable+0x89/0xe0 [ 106.293293][ T6092] ? path_mount+0x63d/0x1000 [ 106.293311][ T6092] __se_sys_mount+0x31d/0x420 [ 106.293329][ T6092] ? __pfx___se_sys_mount+0x10/0x10 [ 106.293346][ T6092] ? __x64_sys_mount+0x20/0xc0 [ 106.293363][ T6092] do_syscall_64+0xe2/0xf80 [ 106.293380][ T6092] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.293396][ T6092] ? trace_irq_disable+0x37/0x100 [ 106.293412][ T6092] ? clear_bhb_loop+0x60/0xb0 [ 106.293434][ T6092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.293449][ T6092] RIP: 0033:0x7f72df0cacb9 [ 106.293463][ T6092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.293477][ T6092] RSP: 002b:00007fff1058ff18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 106.293494][ T6092] RAX: ffffffffffffffda RBX: 00007f72df345fa0 RCX: 00007f72df0cacb9 [ 106.293505][ T6092] RDX: 0000200000000b80 RSI: 0000200000000100 RDI: 0000000000000000 [ 106.293517][ T6092] RBP: 00007f72df138bf7 R08: 0000200000000480 R09: 0000000000000000 [ 106.293528][ T6092] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 106.293537][ T6092] R13: 00007f72df345fac R14: 00007f72df345fa0 R15: 00007f72df345fa0 [ 106.293555][ T6092] [ 106.301413][ T6092] ---[ end trace ]--- [ 106.301433][ T6092] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 106.301454][ T6092] CPU: 0 UID: 0 PID: 6092 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 106.301474][ T6092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 106.301484][ T6092] Call Trace: [ 106.301491][ T6092] [ 106.301497][ T6092] vpanic+0x1e0/0x670 [ 106.301524][ T6092] panic+0xc5/0xd0 [ 106.301544][ T6092] ? __pfx_panic+0x10/0x10 [ 106.301564][ T6092] ? __pfx__printk+0x10/0x10 [ 106.301582][ T6092] check_panic_on_warn+0x89/0xb0 [ 106.301605][ T6092] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 106.301625][ T6092] ocfs2_xa_remove_entry+0x49e/0x670 [ 106.301645][ T6092] ocfs2_xa_set+0xb27/0x2b50 [ 106.301666][ T6092] ? kasan_save_track+0x3e/0x80 [ 106.301688][ T6092] ? rcu_is_watching+0x15/0xb0 [ 106.301705][ T6092] ? __pfx_ocfs2_xa_set+0x10/0x10 [ 106.301726][ T6092] ? rcu_is_watching+0x15/0xb0 [ 106.301741][ T6092] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 106.301761][ T6092] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 106.301784][ T6092] ? rcu_is_watching+0x15/0xb0 [ 106.301799][ T6092] ? try_to_take_rt_mutex+0x840/0xb00 [ 106.301819][ T6092] ? rtlock_slowlock_locked+0x100/0x3e70 [ 106.301842][ T6092] ? is_bpf_text_address+0x26/0x2b0 [ 106.301862][ T6092] ? do_raw_spin_lock+0x12b/0x2f0 [ 106.301879][ T6092] ? rcu_is_watching+0x15/0xb0 [ 106.301894][ T6092] ? unwind_next_frame+0xa5/0x23c0 [ 106.301913][ T6092] ? rcu_is_watching+0x15/0xb0 [ 106.301928][ T6092] ? unwind_next_frame+0xa5/0x23c0 [ 106.301946][ T6092] ? rcu_is_watching+0x15/0xb0 [ 106.301961][ T6092] ? unwind_next_frame+0xa5/0x23c0 [ 106.301978][ T6092] ? rcu_is_watching+0x15/0xb0 [ 106.301994][ T6092] ? is_bpf_text_address+0x26/0x2b0 [ 106.302011][ T6092] ? rcu_is_watching+0x15/0xb0 [ 106.302027][ T6092] ? rcu_is_watching+0x15/0xb0 [ 106.302041][ T6092] ? lock_release+0x4b/0x3a0 [ 106.302060][ T6092] ? lock_release+0x4b/0x3a0 [ 106.302080][ T6092] ? is_bpf_text_address+0x292/0x2b0 [ 106.302099][ T6092] ? rt_read_lock+0x277/0x4b0 [ 106.302112][ T6092] ? rcu_is_watching+0x15/0xb0 [ 106.302127][ T6092] ? lock_acquire+0x5f/0x330 [ 106.302148][ T6092] ocfs2_xattr_block_set+0x3e0/0x3350 [ 106.302171][ T6092] ? rcu_is_watching+0x15/0xb0 [ 106.302186][ T6092] ? lock_acquire+0x5f/0x330 [ 106.302208][ T6092] ? __pfx_ocfs2_xattr_block_set+0x10/0x10 [ 106.302229][ T6092] ? start_this_handle+0x2135/0x2290 [ 106.302257][ T6092] ? __pfx_start_this_handle+0x10/0x10 [ 106.302283][ T6092] ? jbd2__journal_start+0x145/0x5b0 [ 106.302300][ T6092] ? rcu_is_watching+0x15/0xb0 [ 106.302315][ T6092] __ocfs2_xattr_set_handle+0x262/0xf50 [ 106.302338][ T6092] ? __pfx___ocfs2_xattr_set_handle+0x10/0x10 [ 106.302361][ T6092] ? jbd2_journal_start+0x2a/0x40 [ 106.302377][ T6092] ? ocfs2_start_trans+0x4e2/0x700 [ 106.302396][ T6092] ? __pfx_ocfs2_start_trans+0x10/0x10 [ 106.302417][ T6092] ocfs2_xattr_set+0xf3f/0x13e0 [ 106.302449][ T6092] ? __pfx_ocfs2_xattr_set+0x10/0x10 [ 106.302473][ T6092] ? smack_log+0xf5/0x3f0 [ 106.302491][ T6092] ? __pfx_smack_log+0x10/0x10 [ 106.302507][ T6092] ? do_raw_spin_lock+0x12b/0x2f0 [ 106.302524][ T6092] ? rcu_is_watching+0x15/0xb0 [ 106.302540][ T6092] ? rcu_is_watching+0x15/0xb0 [ 106.302556][ T6092] ? smk_tskacc+0x311/0x3a0 [ 106.302576][ T6092] ? posix_xattr_acl+0x93/0xc0 [ 106.302592][ T6092] ? evm_protect_xattr+0x4d4/0xac0 [ 106.302610][ T6092] ? __pfx_ocfs2_xattr_trusted_set+0x10/0x10 [ 106.302631][ T6092] __vfs_removexattr+0x431/0x470 [ 106.302653][ T6092] __vfs_removexattr_locked+0x1ee/0x230 [ 106.302671][ T6092] vfs_removexattr+0x80/0x1b0 [ 106.302689][ T6092] ovl_fill_super+0x4c39/0x5e60 [ 106.302709][ T6092] ? unwind_get_return_address+0x4d/0x90 [ 106.302735][ T6092] ? __pfx_stack_trace_save+0x10/0x10 [ 106.302758][ T6092] ? __pfx_ovl_fill_super+0x10/0x10 [ 106.302778][ T6092] ? __lock_acquire+0x6b5/0x2cf0 [ 106.302799][ T6092] ? __lock_acquire+0x6b5/0x2cf0 [ 106.302820][ T6092] ? __lock_acquire+0x6b5/0x2cf0 [ 106.302840][ T6092] ? do_raw_spin_lock+0x12b/0x2f0 [ 106.302861][ T6092] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 106.302879][ T6092] ? lockdep_hardirqs_on+0x7a/0x110 [ 106.302896][ T6092] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 106.302914][ T6092] ? rt_mutex_slowunlock+0x1cb/0x300 [ 106.302937][ T6092] ? __raw_spin_lock_init+0x45/0x100 [ 106.302959][ T6092] ? sget_fc+0x962/0xa40 [ 106.302978][ T6092] ? __pfx_set_anon_super_fc+0x10/0x10 [ 106.302996][ T6092] ? __pfx_ovl_fill_super+0x10/0x10 [ 106.303017][ T6092] get_tree_nodev+0xbb/0x150 [ 106.303037][ T6092] vfs_get_tree+0x92/0x2a0 [ 106.303058][ T6092] do_new_mount+0x329/0xa50 [ 106.303077][ T6092] ? safesetid_security_capable+0xa9/0x1a0 [ 106.303100][ T6092] ? __pfx_do_new_mount+0x10/0x10 [ 106.303115][ T6092] ? ns_capable+0x89/0xe0 [ 106.303133][ T6092] ? path_mount+0x63d/0x1000 [ 106.303151][ T6092] __se_sys_mount+0x31d/0x420 [ 106.303169][ T6092] ? __pfx___se_sys_mount+0x10/0x10 [ 106.303186][ T6092] ? __x64_sys_mount+0x20/0xc0 [ 106.303202][ T6092] do_syscall_64+0xe2/0xf80 [ 106.303221][ T6092] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.303237][ T6092] ? trace_irq_disable+0x37/0x100 [ 106.303253][ T6092] ? clear_bhb_loop+0x60/0xb0 [ 106.303270][ T6092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.303287][ T6092] RIP: 0033:0x7f72df0cacb9 [ 106.303301][ T6092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.303315][ T6092] RSP: 002b:00007fff1058ff18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 106.303333][ T6092] RAX: ffffffffffffffda RBX: 00007f72df345fa0 RCX: 00007f72df0cacb9 [ 106.303346][ T6092] RDX: 0000200000000b80 RSI: 0000200000000100 RDI: 0000000000000000 [ 106.303357][ T6092] RBP: 00007f72df138bf7 R08: 0000200000000480 R09: 0000000000000000 [ 106.303369][ T6092] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 106.303379][ T6092] R13: 00007f72df345fac R14: 00007f72df345fa0 R15: 00007f72df345fa0 [ 106.303396][ T6092] [ 106.303731][ T6092] Kernel Offset: disabled