Warning: Permanently added '10.128.1.73' (ED25519) to the list of known hosts. 2026/02/12 13:35:01 parsed 1 programs [ 76.275799][ T5798] cgroup: Unknown subsys name 'net' [ 76.518644][ T5798] cgroup: Unknown subsys name 'cpuset' [ 76.582778][ T5798] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.164154][ T5798] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.123643][ T5814] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.125369][ T5814] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.126113][ T5814] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.127196][ T5814] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.128008][ T5814] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.561828][ T31] cfg80211: failed to load regulatory.db [ 84.899535][ T1423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.899559][ T1423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.946221][ T1423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.946235][ T1423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.967454][ T5879] chnl_net:caif_netlink_parms(): no params data found [ 86.199852][ T5879] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.201060][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.201162][ T5879] bridge_slave_0: entered allmulticast mode [ 86.213860][ T5879] bridge_slave_0: entered promiscuous mode [ 86.219492][ T5879] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.219701][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.219843][ T5879] bridge_slave_1: entered allmulticast mode [ 86.222596][ T5879] bridge_slave_1: entered promiscuous mode [ 86.261847][ T5879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.265965][ T5879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.302194][ T5879] team0: Port device team_slave_0 added [ 86.305460][ T5879] team0: Port device team_slave_1 added [ 86.338528][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.338539][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.338552][ T5879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.340553][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.340565][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.340582][ T5879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.410671][ T5879] hsr_slave_0: entered promiscuous mode [ 86.412155][ T5879] hsr_slave_1: entered promiscuous mode [ 87.517649][ T5879] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.582649][ T5879] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.624533][ T5879] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.668404][ T5879] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.795590][ T5879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.815024][ T5879] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.825282][ T157] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.825469][ T157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.849512][ T2993] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.849642][ T2993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.029463][ T5879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.077077][ T5879] veth0_vlan: entered promiscuous mode [ 88.090488][ T5879] veth1_vlan: entered promiscuous mode [ 88.116032][ T5879] veth0_macvtap: entered promiscuous mode [ 88.119352][ T5879] veth1_macvtap: entered promiscuous mode [ 88.135468][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.156775][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.171665][ T40] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.174527][ T40] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.174809][ T40] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.175534][ T40] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.886558][ T40] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.117753][ T40] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/02/12 13:35:17 executed programs: 0 [ 89.604948][ T5114] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.607079][ T5114] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.607736][ T5114] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.608869][ T5114] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.609677][ T5114] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.800115][ T5909] chnl_net:caif_netlink_parms(): no params data found [ 89.878540][ T5909] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.878656][ T5909] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.878750][ T5909] bridge_slave_0: entered allmulticast mode [ 89.880122][ T5909] bridge_slave_0: entered promiscuous mode [ 89.908881][ T5909] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.908996][ T5909] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.909096][ T5909] bridge_slave_1: entered allmulticast mode [ 89.910515][ T5909] bridge_slave_1: entered promiscuous mode [ 90.054459][ T40] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.097511][ T5909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.101862][ T5909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.151089][ T5909] team0: Port device team_slave_0 added [ 90.156055][ T5909] team0: Port device team_slave_1 added [ 90.297965][ T5909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.297978][ T5909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.297992][ T5909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.303285][ T5909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.303298][ T5909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.303321][ T5909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.373143][ T5909] hsr_slave_0: entered promiscuous mode [ 90.374280][ T5909] hsr_slave_1: entered promiscuous mode [ 90.375214][ T5909] debugfs: 'hsr0' already exists in 'hsr' [ 90.375310][ T5909] Cannot create hsr debugfs directory [ 90.796079][ T40] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.633879][ T5814] Bluetooth: hci0: command tx timeout [ 91.825546][ T40] bridge_slave_1: left allmulticast mode [ 91.825617][ T40] bridge_slave_1: left promiscuous mode [ 91.826998][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.933353][ T40] bridge_slave_0: left allmulticast mode [ 91.933375][ T40] bridge_slave_0: left promiscuous mode [ 91.933525][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.222849][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.303440][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.344396][ T40] bond0 (unregistering): Released all slaves [ 93.713686][ T5814] Bluetooth: hci0: command tx timeout [ 93.732377][ T40] hsr_slave_0: left promiscuous mode [ 93.772374][ T40] hsr_slave_1: left promiscuous mode [ 93.773504][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.773587][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.824456][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.824481][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.907457][ T40] veth1_macvtap: left promiscuous mode [ 93.907603][ T40] veth0_macvtap: left promiscuous mode [ 93.907754][ T40] veth1_vlan: left promiscuous mode [ 93.907906][ T40] veth0_vlan: left promiscuous mode [ 95.792373][ T5814] Bluetooth: hci0: command tx timeout [ 96.162819][ T40] team0 (unregistering): Port device team_slave_1 removed [ 96.342764][ T40] team0 (unregistering): Port device team_slave_0 removed [ 97.872373][ T5814] Bluetooth: hci0: command tx timeout [ 98.535797][ T5909] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.556225][ T5909] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.597902][ T5909] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.644499][ T5909] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.796670][ T5909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.813716][ T5909] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.819606][ T4707] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.819805][ T4707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.849608][ T1423] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.849809][ T1423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.039001][ T5909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.087157][ T5909] veth0_vlan: entered promiscuous mode [ 99.100239][ T5909] veth1_vlan: entered promiscuous mode [ 99.130407][ T5909] veth0_macvtap: entered promiscuous mode [ 99.134362][ T5909] veth1_macvtap: entered promiscuous mode [ 99.149867][ T5909] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.167981][ T5909] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.308375][ T1423] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.308684][ T1423] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.309889][ T1423] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.310444][ T1423] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.507168][ T157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.507187][ T157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.548247][ T4707] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.548267][ T4707] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/02/12 13:35:27 executed programs: 2 [ 99.874958][ T5959] loop0: detected capacity change from 0 to 32768 [ 99.891678][ T5959] ======================================================= [ 99.891678][ T5959] WARNING: The mand mount option has been deprecated and [ 99.891678][ T5959] and is ignored by this kernel. Remove the mand [ 99.891678][ T5959] option from the mount to silence this warning. [ 99.891678][ T5959] ======================================================= [ 99.950403][ T5959] JBD2: Ignoring recovery information on journal [ 100.010922][ T5959] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 100.076002][ T5959] overlayfs: upper fs does not support tmpfile. [ 100.080289][ T5959] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 100.080724][ T5959] [ 100.080729][ T5959] ====================================================== [ 100.080733][ T5959] WARNING: possible circular locking dependency detected [ 100.080743][ T5959] syzkaller #0 Not tainted [ 100.080749][ T5959] ------------------------------------------------------ [ 100.080753][ T5959] syz.0.17/5959 is trying to acquire lock: [ 100.080758][ T5959] ffff88805f34ad00 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_local_alloc_bits+0x11f/0x2610 [ 100.080793][ T5959] [ 100.080793][ T5959] but task is already holding lock: [ 100.080796][ T5959] ffff88805f34dc18 (&oi->ip_xattr_sem){+.+.}-{4:4}, at: ocfs2_xattr_set+0x475/0x13e0 [ 100.080820][ T5959] [ 100.080820][ T5959] which lock already depends on the new lock. [ 100.080820][ T5959] [ 100.080823][ T5959] [ 100.080823][ T5959] the existing dependency chain (in reverse order) is: [ 100.080827][ T5959] [ 100.080827][ T5959] -> #3 (&oi->ip_xattr_sem){+.+.}-{4:4}: [ 100.080839][ T5959] down_write+0x3a/0x50 [ 100.080853][ T5959] ocfs2_xattr_set_handle+0x3e6/0x810 [ 100.080864][ T5959] ocfs2_init_security_set+0xbd/0xe0 [ 100.080876][ T5959] ocfs2_mknod+0x1481/0x2210 [ 100.080886][ T5959] ocfs2_mkdir+0x181/0x430 [ 100.080894][ T5959] vfs_mkdir+0x40b/0x630 [ 100.080903][ T5959] filename_mkdirat+0x289/0x520 [ 100.080912][ T5959] __se_sys_mkdirat+0x35/0x150 [ 100.080920][ T5959] do_syscall_64+0x14d/0xf80 [ 100.080932][ T5959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.080941][ T5959] [ 100.080941][ T5959] -> #2 (&journal->j_trans_barrier){.+.+}-{4:4}: [ 100.080960][ T5959] down_read+0x97/0x200 [ 100.080972][ T5959] ocfs2_start_trans+0x3ac/0x700 [ 100.080982][ T5959] ocfs2_reserve_suballoc_bits+0x7bb/0x4790 [ 100.080993][ T5959] ocfs2_reserve_new_metadata_blocks+0x415/0x9a0 [ 100.081003][ T5959] ocfs2_mknod+0xea3/0x2210 [ 100.081011][ T5959] ocfs2_mkdir+0x181/0x430 [ 100.081019][ T5959] vfs_mkdir+0x40b/0x630 [ 100.081027][ T5959] filename_mkdirat+0x289/0x520 [ 100.081036][ T5959] __se_sys_mkdirat+0x35/0x150 [ 100.081045][ T5959] do_syscall_64+0x14d/0xf80 [ 100.081055][ T5959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.081064][ T5959] [ 100.081064][ T5959] -> #1 (sb_internal#2){.+.+}-{0:0}: [ 100.081078][ T5959] ocfs2_start_trans+0x2ac/0x700 [ 100.081088][ T5959] ocfs2_mknod+0xf31/0x2210 [ 100.081097][ T5959] ocfs2_mkdir+0x181/0x430 [ 100.081105][ T5959] vfs_mkdir+0x40b/0x630 [ 100.081113][ T5959] filename_mkdirat+0x289/0x520 [ 100.081121][ T5959] __se_sys_mkdirat+0x35/0x150 [ 100.081130][ T5959] do_syscall_64+0x14d/0xf80 [ 100.081141][ T5959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.081149][ T5959] [ 100.081149][ T5959] -> #0 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}: [ 100.081161][ T5959] __lock_acquire+0x15a5/0x2cf0 [ 100.081174][ T5959] lock_acquire+0x106/0x330 [ 100.081185][ T5959] down_write+0x3a/0x50 [ 100.081196][ T5959] ocfs2_reserve_local_alloc_bits+0x11f/0x2610 [ 100.081205][ T5959] ocfs2_reserve_clusters_with_limit+0x1b9/0xc20 [ 100.081215][ T5959] ocfs2_init_xattr_set_ctxt+0x375/0x710 [ 100.081227][ T5959] ocfs2_xattr_set+0xc42/0x13e0 [ 100.081238][ T5959] __vfs_setxattr+0x43c/0x480 [ 100.081249][ T5959] __vfs_setxattr_noperm+0x12d/0x660 [ 100.081260][ T5959] vfs_setxattr+0x163/0x370 [ 100.081271][ T5959] ovl_fill_super+0x4b50/0x5e60 [ 100.081284][ T5959] get_tree_nodev+0xbb/0x150 [ 100.081291][ T5959] vfs_get_tree+0x92/0x2a0 [ 100.081299][ T5959] do_new_mount+0x341/0xd30 [ 100.081310][ T5959] __se_sys_mount+0x31d/0x420 [ 100.081321][ T5959] do_syscall_64+0x14d/0xf80 [ 100.081331][ T5959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.081340][ T5959] [ 100.081340][ T5959] other info that might help us debug this: [ 100.081340][ T5959] [ 100.081343][ T5959] Chain exists of: [ 100.081343][ T5959] &ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE] --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 100.081343][ T5959] [ 100.081358][ T5959] Possible unsafe locking scenario: [ 100.081358][ T5959] [ 100.081361][ T5959] CPU0 CPU1 [ 100.081364][ T5959] ---- ---- [ 100.081367][ T5959] lock(&oi->ip_xattr_sem); [ 100.081373][ T5959] lock(&journal->j_trans_barrier); [ 100.081380][ T5959] lock(&oi->ip_xattr_sem); [ 100.081386][ T5959] lock(&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]); [ 100.081393][ T5959] [ 100.081393][ T5959] *** DEADLOCK *** [ 100.081393][ T5959] [ 100.081395][ T5959] 4 locks held by syz.0.17/5959: [ 100.081401][ T5959] #0: ffff8880391e20d0 (&type->s_umount_key#56/1){+.+.}-{4:4}, at: alloc_super+0x28c/0xac0 [ 100.081431][ T5959] #1: ffff8880360d6480 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 100.081454][ T5959] #2: ffff88805f34df40 (&sb->s_type->i_mutex_key#26){++++}-{4:4}, at: vfs_setxattr+0x13e/0x370 [ 100.081480][ T5959] #3: ffff88805f34dc18 (&oi->ip_xattr_sem){+.+.}-{4:4}, at: ocfs2_xattr_set+0x475/0x13e0 [ 100.081504][ T5959] [ 100.081504][ T5959] stack backtrace: [ 100.081515][ T5959] CPU: 0 UID: 0 PID: 5959 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 100.081527][ T5959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 100.081538][ T5959] Call Trace: [ 100.081544][ T5959] [ 100.081548][ T5959] dump_stack_lvl+0xe8/0x150 [ 100.081562][ T5959] print_circular_bug+0x2e1/0x300 [ 100.081571][ T5959] check_noncircular+0x12e/0x150 [ 100.081581][ T5959] __lock_acquire+0x15a5/0x2cf0 [ 100.081596][ T5959] ? ocfs2_get_system_file_inode+0x202/0x7e0 [ 100.081606][ T5959] ? __pfx_ocfs2_get_system_file_inode+0x10/0x10 [ 100.081617][ T5959] ? ocfs2_reserve_local_alloc_bits+0x11f/0x2610 [ 100.081626][ T5959] lock_acquire+0x106/0x330 [ 100.081638][ T5959] ? ocfs2_reserve_local_alloc_bits+0x11f/0x2610 [ 100.081649][ T5959] down_write+0x3a/0x50 [ 100.081661][ T5959] ? ocfs2_reserve_local_alloc_bits+0x11f/0x2610 [ 100.081670][ T5959] ocfs2_reserve_local_alloc_bits+0x11f/0x2610 [ 100.081680][ T5959] ? __lock_acquire+0x6b5/0x2cf0 [ 100.081693][ T5959] ? __lock_acquire+0x6b5/0x2cf0 [ 100.081707][ T5959] ? __pfx_ocfs2_reserve_local_alloc_bits+0x10/0x10 [ 100.081717][ T5959] ? do_raw_spin_lock+0x12b/0x2f0 [ 100.081730][ T5959] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 100.081743][ T5959] ? lockdep_hardirqs_on+0x7a/0x110 [ 100.081755][ T5959] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 100.081767][ T5959] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 100.081776][ T5959] ? reacquire_held_locks+0x104/0x190 [ 100.081790][ T5959] ? rt_spin_lock+0x1e0/0x400 [ 100.081799][ T5959] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 100.081809][ T5959] ? rt_spin_unlock+0x14f/0x200 [ 100.081819][ T5959] ? rt_spin_unlock+0x160/0x200 [ 100.081828][ T5959] ? ocfs2_alloc_should_use_local+0x13e/0x2e0 [ 100.081843][ T5959] ? ocfs2_reserve_clusters_with_limit+0x160/0xc20 [ 100.081855][ T5959] ocfs2_reserve_clusters_with_limit+0x1b9/0xc20 [ 100.081869][ T5959] ? __pfx_ocfs2_reserve_clusters_with_limit+0x10/0x10 [ 100.081882][ T5959] ? __pfx_ocfs2_calc_xattr_set_need+0x10/0x10 [ 100.081898][ T5959] ? do_raw_spin_lock+0x12b/0x2f0 [ 100.081911][ T5959] ocfs2_init_xattr_set_ctxt+0x375/0x710 [ 100.081923][ T5959] ? lockdep_hardirqs_on+0x7a/0x110 [ 100.081936][ T5959] ? __pfx_ocfs2_init_xattr_set_ctxt+0x10/0x10 [ 100.081953][ T5959] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 100.081967][ T5959] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 100.081979][ T5959] ? lockdep_hardirqs_on+0x7a/0x110 [ 100.081991][ T5959] ocfs2_xattr_set+0xc42/0x13e0 [ 100.082008][ T5959] ? __pfx_ocfs2_xattr_set+0x10/0x10 [ 100.082020][ T5959] ? desc_update_last_finalized+0x193/0x1f0 [ 100.082038][ T5959] ? lockdep_hardirqs_on+0x7a/0x110 [ 100.082051][ T5959] ? smk_tskacc+0x311/0x3a0 [ 100.082065][ T5959] ? posix_xattr_acl+0x93/0xc0 [ 100.082075][ T5959] ? evm_protect_xattr+0x4d4/0xac0 [ 100.082086][ T5959] ? __pfx_evm_protect_xattr+0x10/0x10 [ 100.082096][ T5959] ? __pfx_ocfs2_xattr_trusted_set+0x10/0x10 [ 100.082109][ T5959] __vfs_setxattr+0x43c/0x480 [ 100.082123][ T5959] __vfs_setxattr_noperm+0x12d/0x660 [ 100.082137][ T5959] vfs_setxattr+0x163/0x370 [ 100.082150][ T5959] ? __pfx_vfs_setxattr+0x10/0x10 [ 100.082161][ T5959] ? __dentry_kill+0x4b2/0x5e0 [ 100.082172][ T5959] ? finish_dput+0xad/0x480 [ 100.082184][ T5959] ? finish_dput+0x3da/0x480 [ 100.082197][ T5959] ovl_fill_super+0x4b50/0x5e60 [ 100.082218][ T5959] ? unwind_get_return_address+0x4d/0x90 [ 100.082245][ T5959] ? __pfx_stack_trace_save+0x10/0x10 [ 100.082266][ T5959] ? __pfx_ovl_fill_super+0x10/0x10 [ 100.082285][ T5959] ? __lock_acquire+0x6b5/0x2cf0 [ 100.082308][ T5959] ? __lock_acquire+0x6b5/0x2cf0 [ 100.082331][ T5959] ? __lock_acquire+0x6b5/0x2cf0 [ 100.082352][ T5959] ? do_raw_spin_lock+0x12b/0x2f0 [ 100.082374][ T5959] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 100.082394][ T5959] ? lockdep_hardirqs_on+0x7a/0x110 [ 100.082413][ T5959] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 100.082433][ T5959] ? rt_mutex_slowunlock+0x1cb/0x300 [ 100.082450][ T5959] ? __raw_spin_lock_init+0x45/0x100 [ 100.082474][ T5959] ? sget_fc+0x962/0xa40 [ 100.082496][ T5959] ? __pfx_set_anon_super_fc+0x10/0x10 [ 100.082511][ T5959] ? __pfx_ovl_fill_super+0x10/0x10 [ 100.082531][ T5959] get_tree_nodev+0xbb/0x150 [ 100.082548][ T5959] vfs_get_tree+0x92/0x2a0 [ 100.082565][ T5959] do_new_mount+0x341/0xd30 [ 100.082583][ T5959] ? safesetid_security_capable+0xa9/0x1a0 [ 100.082608][ T5959] ? __pfx_do_new_mount+0x10/0x10 [ 100.082628][ T5959] ? ns_capable+0x89/0xe0 [ 100.082647][ T5959] ? path_mount+0x690/0x10e0 [ 100.082665][ T5959] ? user_path_at+0xd4/0x160 [ 100.082688][ T5959] ? user_path_at+0xd4/0x160 [ 100.082709][ T5959] __se_sys_mount+0x31d/0x420 [ 100.082731][ T5959] ? __pfx___se_sys_mount+0x10/0x10 [ 100.082753][ T5959] ? __x64_sys_mount+0x20/0xc0 [ 100.082774][ T5959] do_syscall_64+0x14d/0xf80 [ 100.082794][ T5959] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.082810][ T5959] ? trace_irq_disable+0x37/0x100 [ 100.082825][ T5959] ? clear_bhb_loop+0x40/0x90 [ 100.082842][ T5959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.082858][ T5959] RIP: 0033:0x7fd39acdbf79 [ 100.082878][ T5959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.082892][ T5959] RSP: 002b:00007fff61534368 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 100.082910][ T5959] RAX: ffffffffffffffda RBX: 00007fd39af55fa0 RCX: 00007fd39acdbf79 [ 100.082923][ T5959] RDX: 0000200000000b80 RSI: 0000200000000340 RDI: 0000000000000000 [ 100.082934][ T5959] RBP: 00007fd39ad727e0 R08: 0000200000000380 R09: 0000000000000000 [ 100.082952][ T5959] R10: 0000000000200008 R11: 0000000000000246 R12: 0000000000000000 [ 100.082962][ T5959] R13: 00007fd39af55fac R14: 00007fd39af55fa0 R15: 00007fd39af55fa0 [ 100.082982][ T5959] [ 100.094065][ T5959] ------------[ cut here ]------------ [ 100.094074][ T5959] UBSAN: array-index-out-of-bounds in fs/ocfs2/xattr.c:1985:3 [ 100.094089][ T5959] index 2 is out of range for type 'struct ocfs2_xattr_entry[] __counted_by(xh_count)' (aka 'struct ocfs2_xattr_entry[]') [ 100.094106][ T5959] CPU: 0 UID: 0 PID: 5959 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 100.094126][ T5959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 100.094136][ T5959] Call Trace: [ 100.094142][ T5959] [ 100.094148][ T5959] dump_stack_lvl+0xe8/0x150 [ 100.094173][ T5959] ubsan_epilogue+0xa/0x30 [ 100.094190][ T5959] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 100.094215][ T5959] ocfs2_xa_remove_entry+0x49e/0x670 [ 100.094236][ T5959] ocfs2_xa_set+0xdb2/0x2ec0 [ 100.094258][ T5959] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 100.094278][ T5959] ? try_to_take_rt_mutex+0x840/0xb00 [ 100.094297][ T5959] ? rcu_is_watching+0x15/0xb0 [ 100.094318][ T5959] ? __pfx_ocfs2_xa_set+0x10/0x10 [ 100.094340][ T5959] ? rtlock_slowlock_locked+0xfb/0x3c80 [ 100.094358][ T5959] ? try_to_take_rt_mutex+0x840/0xb00 [ 100.094376][ T5959] ? unwind_next_frame+0xa5/0x23c0 [ 100.094397][ T5959] ? rcu_is_watching+0x15/0xb0 [ 100.094418][ T5959] ? unwind_next_frame+0xa5/0x23c0 [ 100.094438][ T5959] ? rcu_is_watching+0x15/0xb0 [ 100.094458][ T5959] ? unwind_next_frame+0xa5/0x23c0 [ 100.094478][ T5959] ? rcu_is_watching+0x15/0xb0 [ 100.094499][ T5959] ? is_bpf_text_address+0x26/0x2b0 [ 100.094517][ T5959] ? rcu_is_watching+0x15/0xb0 [ 100.094538][ T5959] ? rcu_is_watching+0x15/0xb0 [ 100.094559][ T5959] ? lock_release+0x4b/0x3a0 [ 100.094577][ T5959] ? lock_release+0x4b/0x3a0 [ 100.094599][ T5959] ? is_bpf_text_address+0x292/0x2b0 [ 100.094616][ T5959] ? rt_read_lock+0x277/0x4b0 [ 100.094631][ T5959] ? rcu_is_watching+0x15/0xb0 [ 100.094652][ T5959] ? lock_acquire+0x5f/0x330 [ 100.094673][ T5959] ocfs2_xattr_block_set+0x3e0/0x3350 [ 100.094697][ T5959] ? rcu_is_watching+0x15/0xb0 [ 100.094718][ T5959] ? lock_acquire+0x5f/0x330 [ 100.094737][ T5959] ? rcu_is_watching+0x15/0xb0 [ 100.094761][ T5959] ? __pfx_ocfs2_xattr_block_set+0x10/0x10 [ 100.094782][ T5959] ? start_this_handle+0x2135/0x2290 [ 100.094813][ T5959] ? __pfx_start_this_handle+0x10/0x10 [ 100.094842][ T5959] ? rcu_is_watching+0x15/0xb0 [ 100.094864][ T5959] __ocfs2_xattr_set_handle+0x262/0xf50 [ 100.094886][ T5959] ? __pfx___ocfs2_xattr_set_handle+0x10/0x10 [ 100.094908][ T5959] ? jbd2_journal_start+0x2a/0x40 [ 100.094928][ T5959] ? ocfs2_start_trans+0x4e2/0x700 [ 100.094954][ T5959] ? __pfx_ocfs2_start_trans+0x10/0x10 [ 100.094977][ T5959] ocfs2_xattr_set+0xf3f/0x13e0 [ 100.095006][ T5959] ? __pfx_ocfs2_xattr_set+0x10/0x10 [ 100.095029][ T5959] ? smk_tskacc+0x311/0x3a0 [ 100.095047][ T5959] ? smack_log+0xf5/0x3f0 [ 100.095065][ T5959] ? __pfx_smack_log+0x10/0x10 [ 100.095087][ T5959] ? smk_tskacc+0x311/0x3a0 [ 100.095108][ T5959] ? posix_xattr_acl+0x93/0xc0 [ 100.095125][ T5959] ? evm_protect_xattr+0x4d4/0xac0 [ 100.095144][ T5959] ? __pfx_evm_protect_xattr+0x10/0x10 [ 100.095160][ T5959] ? __pfx_ocfs2_xattr_trusted_set+0x10/0x10 [ 100.095182][ T5959] __vfs_removexattr+0x431/0x470 [ 100.095207][ T5959] __vfs_removexattr_locked+0xe2/0x280 [ 100.095229][ T5959] vfs_removexattr+0x7f/0x230 [ 100.095250][ T5959] ovl_fill_super+0x4c39/0x5e60 [ 100.095270][ T5959] ? unwind_get_return_address+0x4d/0x90 [ 100.095298][ T5959] ? __pfx_stack_trace_save+0x10/0x10 [ 100.095320][ T5959] ? __pfx_ovl_fill_super+0x10/0x10 [ 100.095341][ T5959] ? __lock_acquire+0x6b5/0x2cf0 [ 100.095363][ T5959] ? __lock_acquire+0x6b5/0x2cf0 [ 100.095385][ T5959] ? __lock_acquire+0x6b5/0x2cf0 [ 100.095406][ T5959] ? do_raw_spin_lock+0x12b/0x2f0 [ 100.095428][ T5959] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 100.095448][ T5959] ? lockdep_hardirqs_on+0x7a/0x110 [ 100.095466][ T5959] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 100.095485][ T5959] ? rt_mutex_slowunlock+0x1cb/0x300 [ 100.095503][ T5959] ? __raw_spin_lock_init+0x45/0x100 [ 100.095526][ T5959] ? sget_fc+0x962/0xa40 [ 100.095547][ T5959] ? __pfx_set_anon_super_fc+0x10/0x10 [ 100.095561][ T5959] ? __pfx_ovl_fill_super+0x10/0x10 [ 100.095581][ T5959] get_tree_nodev+0xbb/0x150 [ 100.095597][ T5959] vfs_get_tree+0x92/0x2a0 [ 100.095614][ T5959] do_new_mount+0x341/0xd30 [ 100.095632][ T5959] ? safesetid_security_capable+0xa9/0x1a0 [ 100.095656][ T5959] ? __pfx_do_new_mount+0x10/0x10 [ 100.095675][ T5959] ? ns_capable+0x89/0xe0 [ 100.095693][ T5959] ? path_mount+0x690/0x10e0 [ 100.095711][ T5959] ? user_path_at+0xd4/0x160 [ 100.095733][ T5959] ? user_path_at+0xd4/0x160 [ 100.095754][ T5959] __se_sys_mount+0x31d/0x420 [ 100.095776][ T5959] ? __pfx___se_sys_mount+0x10/0x10 [ 100.095798][ T5959] ? __x64_sys_mount+0x20/0xc0 [ 100.095817][ T5959] do_syscall_64+0x14d/0xf80 [ 100.095836][ T5959] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.095852][ T5959] ? trace_irq_disable+0x37/0x100 [ 100.095866][ T5959] ? clear_bhb_loop+0x40/0x90 [ 100.095884][ T5959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.095899][ T5959] RIP: 0033:0x7fd39acdbf79 [ 100.095914][ T5959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.095928][ T5959] RSP: 002b:00007fff61534368 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 100.095951][ T5959] RAX: ffffffffffffffda RBX: 00007fd39af55fa0 RCX: 00007fd39acdbf79 [ 100.095963][ T5959] RDX: 0000200000000b80 RSI: 0000200000000340 RDI: 0000000000000000 [ 100.095974][ T5959] RBP: 00007fd39ad727e0 R08: 0000200000000380 R09: 0000000000000000 [ 100.095986][ T5959] R10: 0000000000200008 R11: 0000000000000246 R12: 0000000000000000 [ 100.095997][ T5959] R13: 00007fd39af55fac R14: 00007fd39af55fa0 R15: 00007fd39af55fa0 [ 100.096015][ T5959] [ 100.096022][ T5959] ---[ end trace ]--- [ 100.096030][ T5959] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 100.096046][ T5959] CPU: 0 UID: 0 PID: 5959 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 100.096065][ T5959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 100.096074][ T5959] Call Trace: [ 100.096080][ T5959] [ 100.096087][ T5959] vpanic+0x1e0/0x670 [ 100.096109][ T5959] panic+0xc5/0xd0 [ 100.096129][ T5959] ? __pfx_panic+0x10/0x10 [ 100.096150][ T5959] ? __pfx__printk+0x10/0x10 [ 100.096170][ T5959] check_panic_on_warn+0x89/0xb0 [ 100.096186][ T5959] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 100.096210][ T5959] ocfs2_xa_remove_entry+0x49e/0x670 [ 100.096229][ T5959] ocfs2_xa_set+0xdb2/0x2ec0 [ 100.096251][ T5959] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 100.096269][ T5959] ? try_to_take_rt_mutex+0x840/0xb00 [ 100.096286][ T5959] ? rcu_is_watching+0x15/0xb0 [ 100.096306][ T5959] ? __pfx_ocfs2_xa_set+0x10/0x10 [ 100.096327][ T5959] ? rtlock_slowlock_locked+0xfb/0x3c80 [ 100.096340][ T5959] ? try_to_take_rt_mutex+0x840/0xb00 [ 100.096351][ T5959] ? unwind_next_frame+0xa5/0x23c0 [ 100.096363][ T5959] ? rcu_is_watching+0x15/0xb0 [ 100.096377][ T5959] ? unwind_next_frame+0xa5/0x23c0 [ 100.096390][ T5959] ? rcu_is_watching+0x15/0xb0 [ 100.096403][ T5959] ? unwind_next_frame+0xa5/0x23c0 [ 100.096416][ T5959] ? rcu_is_watching+0x15/0xb0 [ 100.096429][ T5959] ? is_bpf_text_address+0x26/0x2b0 [ 100.096439][ T5959] ? rcu_is_watching+0x15/0xb0 [ 100.096453][ T5959] ? rcu_is_watching+0x15/0xb0 [ 100.096466][ T5959] ? lock_release+0x4b/0x3a0 [ 100.096478][ T5959] ? lock_release+0x4b/0x3a0 [ 100.096491][ T5959] ? is_bpf_text_address+0x292/0x2b0 [ 100.096501][ T5959] ? rt_read_lock+0x277/0x4b0 [ 100.096510][ T5959] ? rcu_is_watching+0x15/0xb0 [ 100.096523][ T5959] ? lock_acquire+0x5f/0x330 [ 100.096536][ T5959] ocfs2_xattr_block_set+0x3e0/0x3350 [ 100.096552][ T5959] ? rcu_is_watching+0x15/0xb0 [ 100.096565][ T5959] ? lock_acquire+0x5f/0x330 [ 100.096577][ T5959] ? rcu_is_watching+0x15/0xb0 [ 100.096592][ T5959] ? __pfx_ocfs2_xattr_block_set+0x10/0x10 [ 100.096606][ T5959] ? start_this_handle+0x2135/0x2290 [ 100.096623][ T5959] ? __pfx_start_this_handle+0x10/0x10 [ 100.096641][ T5959] ? rcu_is_watching+0x15/0xb0 [ 100.096654][ T5959] __ocfs2_xattr_set_handle+0x262/0xf50 [ 100.096668][ T5959] ? __pfx___ocfs2_xattr_set_handle+0x10/0x10 [ 100.096681][ T5959] ? jbd2_journal_start+0x2a/0x40 [ 100.096695][ T5959] ? ocfs2_start_trans+0x4e2/0x700 [ 100.096709][ T5959] ? __pfx_ocfs2_start_trans+0x10/0x10 [ 100.096723][ T5959] ocfs2_xattr_set+0xf3f/0x13e0 [ 100.096739][ T5959] ? __pfx_ocfs2_xattr_set+0x10/0x10 [ 100.096754][ T5959] ? smk_tskacc+0x311/0x3a0 [ 100.096765][ T5959] ? smack_log+0xf5/0x3f0 [ 100.096775][ T5959] ? __pfx_smack_log+0x10/0x10 [ 100.096788][ T5959] ? smk_tskacc+0x311/0x3a0 [ 100.096800][ T5959] ? posix_xattr_acl+0x93/0xc0 [ 100.096810][ T5959] ? evm_protect_xattr+0x4d4/0xac0 [ 100.096821][ T5959] ? __pfx_evm_protect_xattr+0x10/0x10 [ 100.096830][ T5959] ? __pfx_ocfs2_xattr_trusted_set+0x10/0x10 [ 100.096844][ T5959] __vfs_removexattr+0x431/0x470 [ 100.096859][ T5959] __vfs_removexattr_locked+0xe2/0x280 [ 100.096873][ T5959] vfs_removexattr+0x7f/0x230 [ 100.096886][ T5959] ovl_fill_super+0x4c39/0x5e60 [ 100.096899][ T5959] ? unwind_get_return_address+0x4d/0x90 [ 100.096915][ T5959] ? __pfx_stack_trace_save+0x10/0x10 [ 100.096928][ T5959] ? __pfx_ovl_fill_super+0x10/0x10 [ 100.096940][ T5959] ? __lock_acquire+0x6b5/0x2cf0 [ 100.096959][ T5959] ? __lock_acquire+0x6b5/0x2cf0 [ 100.096972][ T5959] ? __lock_acquire+0x6b5/0x2cf0 [ 100.096985][ T5959] ? do_raw_spin_lock+0x12b/0x2f0 [ 100.096998][ T5959] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 100.097010][ T5959] ? lockdep_hardirqs_on+0x7a/0x110 [ 100.097021][ T5959] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 100.097033][ T5959] ? rt_mutex_slowunlock+0x1cb/0x300 [ 100.097043][ T5959] ? __raw_spin_lock_init+0x45/0x100 [ 100.097056][ T5959] ? sget_fc+0x962/0xa40 [ 100.097070][ T5959] ? __pfx_set_anon_super_fc+0x10/0x10 [ 100.097078][ T5959] ? __pfx_ovl_fill_super+0x10/0x10 [ 100.097090][ T5959] get_tree_nodev+0xbb/0x150 [ 100.097099][ T5959] vfs_get_tree+0x92/0x2a0 [ 100.097108][ T5959] do_new_mount+0x341/0xd30 [ 100.097120][ T5959] ? safesetid_security_capable+0xa9/0x1a0 [ 100.097135][ T5959] ? __pfx_do_new_mount+0x10/0x10 [ 100.097147][ T5959] ? ns_capable+0x89/0xe0 [ 100.097158][ T5959] ? path_mount+0x690/0x10e0 [ 100.097169][ T5959] ? user_path_at+0xd4/0x160 [ 100.097183][ T5959] ? user_path_at+0xd4/0x160 [ 100.097196][ T5959] __se_sys_mount+0x31d/0x420 [ 100.097210][ T5959] ? __pfx___se_sys_mount+0x10/0x10 [ 100.097223][ T5959] ? __x64_sys_mount+0x20/0xc0 [ 100.097235][ T5959] do_syscall_64+0x14d/0xf80 [ 100.097247][ T5959] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.097256][ T5959] ? trace_irq_disable+0x37/0x100 [ 100.097264][ T5959] ? clear_bhb_loop+0x40/0x90 [ 100.097274][ T5959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.097283][ T5959] RIP: 0033:0x7fd39acdbf79 [ 100.097291][ T5959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.097299][ T5959] RSP: 002b:00007fff61534368 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 100.097309][ T5959] RAX: ffffffffffffffda RBX: 00007fd39af55fa0 RCX: 00007fd39acdbf79 [ 100.097316][ T5959] RDX: 0000200000000b80 RSI: 0000200000000340 RDI: 0000000000000000 [ 100.097322][ T5959] RBP: 00007fd39ad727e0 R08: 0000200000000380 R09: 0000000000000000 [ 100.097328][ T5959] R10: 0000000000200008 R11: 0000000000000246 R12: 0000000000000000 [ 100.097334][ T5959] R13: 00007fd39af55fac R14: 00007fd39af55fa0 R15: 00007fd39af55fa0 [ 100.097344][ T5959] [ 100.097691][ T5959] Kernel Offset: disabled