Warning: Permanently added '10.128.1.239' (ED25519) to the list of known hosts. 2026/01/13 07:14:52 parsed 1 programs [ 91.867046][ T49] cfg80211: failed to load regulatory.db [ 95.206913][ T5801] cgroup: Unknown subsys name 'net' [ 95.449714][ T5801] cgroup: Unknown subsys name 'cpuset' [ 95.503653][ T5801] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 97.416258][ T5801] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 100.899529][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 101.205372][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.207049][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.207370][ T5819] bridge_slave_0: entered allmulticast mode [ 101.209312][ T5819] bridge_slave_0: entered promiscuous mode [ 101.218754][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.219257][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.219675][ T5819] bridge_slave_1: entered allmulticast mode [ 101.226888][ T5819] bridge_slave_1: entered promiscuous mode [ 101.438450][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.441608][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.577217][ T5819] team0: Port device team_slave_0 added [ 101.579829][ T5819] team0: Port device team_slave_1 added [ 101.745491][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.745504][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.745523][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.748506][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.748517][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.748535][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.170384][ T5819] hsr_slave_0: entered promiscuous mode [ 102.171540][ T5819] hsr_slave_1: entered promiscuous mode [ 102.539796][ T5819] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.560704][ T5819] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.597477][ T5819] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.638366][ T5819] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.774396][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.864697][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.871447][ T3667] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.872326][ T3667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.906574][ T139] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.906771][ T139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.140291][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.204868][ T5819] veth0_vlan: entered promiscuous mode [ 103.211866][ T5819] veth1_vlan: entered promiscuous mode [ 103.252717][ T5819] veth0_macvtap: entered promiscuous mode [ 103.262604][ T5819] veth1_macvtap: entered promiscuous mode [ 103.284401][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.301352][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.320491][ T139] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.322236][ T139] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.322277][ T139] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.322313][ T139] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.108956][ T43] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.416337][ T43] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.667430][ T43] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.627682][ T43] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.027361][ T3667] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.027404][ T3667] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.089480][ T139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.089501][ T139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.529277][ T43] bridge_slave_1: left allmulticast mode [ 106.529448][ T43] bridge_slave_1: left promiscuous mode [ 106.530939][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.615010][ T43] bridge_slave_0: left allmulticast mode [ 106.615031][ T43] bridge_slave_0: left promiscuous mode [ 106.615199][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.273797][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.333762][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.375589][ T43] bond0 (unregistering): Released all slaves [ 108.813162][ T43] hsr_slave_0: left promiscuous mode [ 108.854022][ T43] hsr_slave_1: left promiscuous mode [ 108.855457][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.855540][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.919249][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.919276][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.038677][ T43] veth1_macvtap: left promiscuous mode [ 109.038917][ T43] veth0_macvtap: left promiscuous mode [ 109.039229][ T43] veth1_vlan: left promiscuous mode [ 109.039522][ T43] veth0_vlan: left promiscuous mode [ 111.003789][ T43] team0 (unregistering): Port device team_slave_1 removed [ 111.223872][ T43] team0 (unregistering): Port device team_slave_0 removed [ 114.696371][ T5115] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 114.702180][ T5115] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 114.718181][ T5115] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 114.721077][ T5115] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 114.722650][ T5115] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2026/01/13 07:15:18 executed programs: 0 [ 118.062502][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 118.072914][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 118.081730][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 118.089501][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 118.096156][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 118.525811][ T5975] chnl_net:caif_netlink_parms(): no params data found [ 118.913504][ T5975] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.913647][ T5975] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.913800][ T5975] bridge_slave_0: entered allmulticast mode [ 118.915666][ T5975] bridge_slave_0: entered promiscuous mode [ 118.973612][ T5975] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.973751][ T5975] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.974059][ T5975] bridge_slave_1: entered allmulticast mode [ 118.976156][ T5975] bridge_slave_1: entered promiscuous mode [ 119.190166][ T5975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.206026][ T5975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.389688][ T5975] team0: Port device team_slave_0 added [ 119.399164][ T5975] team0: Port device team_slave_1 added [ 119.536346][ T5975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.536359][ T5975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.536377][ T5975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.538079][ T5975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.538091][ T5975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.538109][ T5975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.062802][ T5975] hsr_slave_0: entered promiscuous mode [ 120.066721][ T5975] hsr_slave_1: entered promiscuous mode [ 120.185040][ T61] Bluetooth: hci0: command tx timeout [ 121.732892][ T5975] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 121.768228][ T5975] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 121.807848][ T5975] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 121.847150][ T5975] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 122.030571][ T5975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.055614][ T5975] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.062788][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.078510][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.106635][ T139] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.107402][ T139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.263109][ T61] Bluetooth: hci0: command tx timeout [ 122.452802][ T5975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.538582][ T5975] veth0_vlan: entered promiscuous mode [ 122.556693][ T5975] veth1_vlan: entered promiscuous mode [ 122.604558][ T5975] veth0_macvtap: entered promiscuous mode [ 122.610656][ T5975] veth1_macvtap: entered promiscuous mode [ 122.645195][ T5975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.667722][ T5975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.700418][ T3667] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.702867][ T3667] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.702910][ T3667] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.702945][ T3667] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.923728][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.923750][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.007812][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.007836][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/01/13 07:15:23 executed programs: 2 [ 123.540507][ T6059] loop0: detected capacity change from 0 to 32768 [ 123.618658][ T6059] XFS (loop0): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 123.622455][ T6059] XFS (loop0): Log size 624 blocks too small, minimum size is 816 blocks [ 123.622476][ T6059] XFS (loop0): AAIEEE! Log failed size checks. Abort! [ 123.665119][ T6059] XFS (loop0): log mount failed [ 124.353945][ T61] Bluetooth: hci0: command tx timeout [ 124.355962][ T6080] loop0: detected capacity change from 0 to 32768 [ 124.452448][ T6080] XFS (loop0): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 124.484098][ T6080] XFS (loop0): Log size 624 blocks too small, minimum size is 816 blocks [ 124.484129][ T6080] XFS (loop0): AAIEEE! Log failed size checks. Abort! [ 124.509409][ T6080] XFS (loop0): log mount failed [ 124.749328][ T6080] loop0: detected capacity change from 0 to 128 [ 124.754759][ T6080] ======================================================= [ 124.754759][ T6080] WARNING: The mand mount option has been deprecated and [ 124.754759][ T6080] and is ignored by this kernel. Remove the mand [ 124.754759][ T6080] option from the mount to silence this warning. [ 124.754759][ T6080] ======================================================= [ 124.837823][ T6080] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 124.838010][ T6080] hpfs: filesystem error: improperly stopped [ 124.838027][ T6080] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 124.838042][ T6080] hpfs: You really don't want any checks? You are crazy... [ 124.838732][ T6080] hpfs: hpfs_map_sector(): read error [ 124.838745][ T6080] hpfs: code page support is disabled [ 124.840049][ T6080] hpfs: filesystem error: map_dirent: not a directory [ 124.840063][ T6080] [ 124.840074][ T6080] hpfs: hpfs_map_4sectors(): unaligned read [ 124.840084][ T6080] hpfs: filesystem error: unable to find root dir [ 124.853435][ T6080] hpfs: filesystem error: sector 00000000 not found in external anode ffffffff [ 124.853603][ T6080] hpfs: filesystem error: sector 00000001 not found in external anode ffffffff [ 124.853676][ T6080] hpfs: filesystem error: sector 00000002 not found in external anode ffffffff [ 124.853746][ T6080] hpfs: filesystem error: sector 00000003 not found in external anode ffffffff [ 124.853829][ T6080] hpfs: filesystem error: sector 00000004 not found in external anode ffffffff [ 124.853907][ T6080] hpfs: filesystem error: sector(s) 'bmap' badly placed at 00000000 [ 124.855492][ T6080] hpfs: filesystem error: sector 00000000 not found in external anode ffffffff [ 124.855589][ T6080] hpfs: filesystem error: sector 00000001 not found in external anode ffffffff [ 124.855660][ T6080] hpfs: filesystem error: sector 00000002 not found in external anode ffffffff [ 124.855730][ T6080] hpfs: filesystem error: sector 00000003 not found in external anode ffffffff [ 124.855799][ T6080] hpfs: filesystem error: sector 00000004 not found in external anode ffffffff [ 124.943718][ T6080] syz.0.18: attempt to access beyond end of device [ 124.943718][ T6080] loop0: rw=524288, sector=219, nr_sectors = 256 limit=128 [ 124.949427][ T6080] syz.0.18: attempt to access beyond end of device [ 124.949427][ T6080] loop0: rw=524288, sector=475, nr_sectors = 256 limit=128 [ 124.950083][ T6080] syz.0.18: attempt to access beyond end of device [ 124.950083][ T6080] loop0: rw=8388608, sector=219, nr_sectors = 8 limit=128 [ 125.011051][ T37] audit: type=1800 audit(1768288525.660:2): pid=6080 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.18" name="/" dev="loop0" ino=5 res=0 errno=0 [ 125.483163][ T6106] loop0: detected capacity change from 0 to 32768 [ 125.573945][ T6106] XFS (loop0): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 125.599253][ T6106] XFS (loop0): Log size 624 blocks too small, minimum size is 816 blocks [ 125.599278][ T6106] XFS (loop0): AAIEEE! Log failed size checks. Abort! [ 125.607860][ T6106] XFS (loop0): log mount failed [ 126.315388][ T6123] loop0: detected capacity change from 0 to 32768 [ 126.357230][ T6123] XFS (loop0): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 126.359909][ T6123] XFS (loop0): Log size 624 blocks too small, minimum size is 816 blocks [ 126.359931][ T6123] XFS (loop0): AAIEEE! Log failed size checks. Abort! [ 126.369964][ T6123] XFS (loop0): log mount failed [ 126.433133][ T61] Bluetooth: hci0: command tx timeout [ 126.797427][ T6144] loop0: detected capacity change from 0 to 32768 [ 126.846520][ T6144] XFS (loop0): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 126.848453][ T6144] XFS (loop0): Log size 624 blocks too small, minimum size is 816 blocks [ 126.848469][ T6144] XFS (loop0): AAIEEE! Log failed size checks. Abort! [ 126.856456][ T6144] XFS (loop0): log mount failed [ 127.248412][ T6154] loop0: detected capacity change from 0 to 32768 [ 127.285752][ T6154] XFS (loop0): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 127.287777][ T6154] XFS (loop0): Log size 624 blocks too small, minimum size is 816 blocks [ 127.287793][ T6154] XFS (loop0): AAIEEE! Log failed size checks. Abort! [ 127.303401][ T6154] XFS (loop0): log mount failed [ 127.729647][ T6162] loop0: detected capacity change from 0 to 32768 [ 127.752426][ T6162] XFS (loop0): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 127.765222][ T6162] XFS (loop0): Log size 624 blocks too small, minimum size is 816 blocks [ 127.765238][ T6162] XFS (loop0): AAIEEE! Log failed size checks. Abort! [ 127.774752][ T6162] XFS (loop0): log mount failed [ 128.211480][ T6170] loop0: detected capacity change from 0 to 32768 [ 128.239311][ T6170] XFS (loop0): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 128.241431][ T6170] XFS (loop0): Log size 624 blocks too small, minimum size is 816 blocks [ 128.241448][ T6170] XFS (loop0): AAIEEE! Log failed size checks. Abort! [ 128.258541][ T6170] XFS (loop0): log mount failed 2026/01/13 07:15:29 executed programs: 10 [ 128.722023][ T6180] loop0: detected capacity change from 0 to 32768 [ 128.760588][ T6180] XFS (loop0): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 128.782899][ T6180] XFS (loop0): Log size 624 blocks too small, minimum size is 816 blocks [ 128.782925][ T6180] XFS (loop0): AAIEEE! Log failed size checks. Abort! [ 128.812540][ T6180] XFS (loop0): log mount failed [ 128.848338][ T6180] loop0: detected capacity change from 0 to 128 [ 128.862644][ T6180] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 128.862692][ T6180] hpfs: filesystem error: improperly stopped [ 128.862707][ T6180] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 128.862722][ T6180] hpfs: You really don't want any checks? You are crazy... [ 128.873291][ T6180] hpfs: hpfs_map_sector(): read error [ 128.873322][ T6180] hpfs: code page support is disabled [ 128.920081][ T6180] hpfs: filesystem error: map_dirent: not a directory [ 128.920096][ T6180] [ 128.920103][ T6180] hpfs: hpfs_map_4sectors(): unaligned read [ 128.920112][ T6180] hpfs: filesystem error: unable to find root dir [ 128.921379][ T6180] hpfs: filesystem error: sector 00000000 not found in external anode ffffffff [ 128.921410][ T6180] hpfs: filesystem error: sector 00000001 not found in external anode ffffffff [ 128.921437][ T6180] hpfs: filesystem error: sector 00000002 not found in external anode ffffffff [ 128.921463][ T6180] hpfs: filesystem error: sector 00000003 not found in external anode ffffffff [ 128.921488][ T6180] hpfs: filesystem error: sector 00000004 not found in external anode ffffffff [ 128.921515][ T6180] hpfs: filesystem error: sector(s) 'bmap' badly placed at 00000000 [ 128.921753][ T6180] hpfs: filesystem error: sector 00000000 not found in external anode ffffffff [ 128.921782][ T6180] hpfs: filesystem error: sector 00000001 not found in external anode ffffffff [ 128.921810][ T6180] hpfs: filesystem error: sector 00000002 not found in external anode ffffffff [ 128.921838][ T6180] hpfs: filesystem error: sector 00000003 not found in external anode ffffffff [ 128.921867][ T6180] hpfs: filesystem error: sector 00000004 not found in external anode ffffffff [ 128.929231][ T6180] syz.0.25: attempt to access beyond end of device [ 128.929231][ T6180] loop0: rw=524288, sector=219, nr_sectors = 256 limit=128 [ 128.980668][ T6180] syz.0.25: attempt to access beyond end of device [ 128.980668][ T6180] loop0: rw=524288, sector=475, nr_sectors = 256 limit=128 [ 128.981132][ T6180] syz.0.25: attempt to access beyond end of device [ 128.981132][ T6180] loop0: rw=8388608, sector=219, nr_sectors = 8 limit=128 [ 128.995047][ T37] audit: type=1800 audit(1768288529.690:3): pid=6180 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.25" name="/" dev="loop0" ino=5 res=0 errno=0 [ 129.475309][ T6190] loop0: detected capacity change from 0 to 32768 [ 129.493473][ T6190] XFS (loop0): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 129.524760][ T6190] XFS (loop0): Log size 624 blocks too small, minimum size is 816 blocks [ 129.524784][ T6190] XFS (loop0): AAIEEE! Log failed size checks. Abort! [ 129.526458][ T6190] XFS (loop0): log mount failed [ 129.932201][ T6198] loop0: detected capacity change from 0 to 32768 [ 129.972399][ T6198] XFS (loop0): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 130.002451][ T6198] XFS (loop0): Log size 624 blocks too small, minimum size is 816 blocks [ 130.002470][ T6198] XFS (loop0): AAIEEE! Log failed size checks. Abort! [ 130.003502][ T6198] XFS (loop0): log mount failed [ 130.050004][ T6198] loop0: detected capacity change from 0 to 128 [ 130.060845][ T6198] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 130.067182][ T6198] hpfs: filesystem error: improperly stopped [ 130.067198][ T6198] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 130.067213][ T6198] hpfs: You really don't want any checks? You are crazy... [ 130.068334][ T6198] hpfs: hpfs_map_sector(): read error [ 130.068357][ T6198] hpfs: code page support is disabled [ 130.096567][ T6198] hpfs: filesystem error: map_dirent: not a directory [ 130.096607][ T6198] [ 130.096627][ T6198] hpfs: hpfs_map_4sectors(): unaligned read [ 130.096656][ T6198] hpfs: filesystem error: unable to find root dir [ 130.109065][ T6198] ================================================================== [ 130.109104][ T6198] BUG: KASAN: use-after-free in hpfs_bplus_lookup+0x4dc/0x860 [ 130.109201][ T6198] Read of size 4 at addr ffff888052abe004 by task syz.0.27/6198 [ 130.109243][ T6198] [ 130.109312][ T6198] CPU: 1 UID: 0 PID: 6198 Comm: syz.0.27 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 130.109373][ T6198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 130.109420][ T6198] Call Trace: [ 130.109440][ T6198] [ 130.109461][ T6198] dump_stack_lvl+0xe8/0x150 [ 130.109543][ T6198] print_report+0xca/0x240 [ 130.109638][ T6198] ? hpfs_bplus_lookup+0x4dc/0x860 [ 130.109697][ T6198] kasan_report+0x118/0x150 [ 130.109791][ T6198] ? hpfs_bplus_lookup+0x4dc/0x860 [ 130.109841][ T6198] hpfs_bplus_lookup+0x4dc/0x860 [ 130.109928][ T6198] ? __pfx_hpfs_bplus_lookup+0x10/0x10 [ 130.110000][ T6198] hpfs_bmap+0x22a/0x4d0 [ 130.110077][ T6198] ? __pfx_hpfs_bmap+0x10/0x10 [ 130.110153][ T6198] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 130.110204][ T6198] ? mutex_lock_nested+0x154/0x1d0 [ 130.110270][ T6198] ? hpfs_get_block+0x98/0x6e0 [ 130.110338][ T6198] hpfs_get_block+0xa8/0x6e0 [ 130.110413][ T6198] do_mpage_readpage+0x822/0x1990 [ 130.110499][ T6198] mpage_readahead+0x3b0/0x790 [ 130.110564][ T6198] ? __pfx_mpage_readahead+0x10/0x10 [ 130.110645][ T6198] ? __pfx_hpfs_get_block+0x10/0x10 [ 130.110696][ T6198] ? rt_mutex_slowunlock+0x493/0x8a0 [ 130.110785][ T6198] ? reacquire_held_locks+0x104/0x190 [ 130.110901][ T6198] ? blk_start_plug+0x6f/0x1b0 [ 130.110976][ T6198] read_pages+0x17a/0x580 [ 130.111052][ T6198] ? __pfx_read_pages+0x10/0x10 [ 130.111110][ T6198] ? __folio_batch_add_and_move+0x6d1/0xa90 [ 130.111202][ T6198] ? filemap_add_folio+0x3db/0x620 [ 130.111290][ T6198] page_cache_ra_unbounded+0x68b/0x8c0 [ 130.111389][ T6198] filemap_get_pages+0x446/0x1ee0 [ 130.111505][ T6198] ? __pfx_filemap_get_pages+0x10/0x10 [ 130.111581][ T6198] ? unwind_next_frame+0xa5/0x23d0 [ 130.111667][ T6198] filemap_read+0x3f9/0x11a0 [ 130.111781][ T6198] ? kernel_text_address+0xa5/0xe0 [ 130.111850][ T6198] ? __kernel_text_address+0xd/0x40 [ 130.111950][ T6198] ? __pfx_filemap_read+0x10/0x10 [ 130.112052][ T6198] ? generic_file_read_iter+0x8f/0x520 [ 130.112149][ T6198] ? __asan_memset+0x22/0x50 [ 130.112243][ T6198] ? iov_iter_kvec+0xb8/0x180 [ 130.112334][ T6198] __kernel_read+0x4d8/0x970 [ 130.112422][ T6198] ? __pfx___kernel_read+0x10/0x10 [ 130.112530][ T6198] integrity_kernel_read+0x89/0xd0 [ 130.112633][ T6198] ? __pfx_integrity_kernel_read+0x10/0x10 [ 130.112697][ T6198] ? __kmalloc_cache_noprof+0x1fb/0x6d0 [ 130.112786][ T6198] ? ima_calc_file_hash+0x82c/0x1700 [ 130.112863][ T6198] ima_calc_file_hash+0x86a/0x1700 [ 130.112917][ T6198] ? unwind_next_frame+0xa5/0x23d0 [ 130.112987][ T6198] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 130.113024][ T6198] ? arch_stack_walk+0xfc/0x150 [ 130.113102][ T6198] ? stack_trace_save+0x9c/0xe0 [ 130.113171][ T6198] ? __pfx_stack_trace_save+0x10/0x10 [ 130.113240][ T6198] ? make_vfsgid+0x49/0xa0 [ 130.113335][ T6198] ? generic_fillattr+0x63d/0x9a0 [ 130.113405][ T6198] ima_collect_measurement+0x42e/0x900 [ 130.113463][ T6198] ? look_up_lock_class+0x57/0x110 [ 130.113525][ T6198] ? __pfx_ima_collect_measurement+0x10/0x10 [ 130.113621][ T6198] ? do_raw_spin_lock+0x121/0x290 [ 130.113720][ T6198] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 130.113792][ T6198] ? lockdep_hardirqs_on+0x7b/0x110 [ 130.113842][ T6198] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 130.113899][ T6198] process_measurement+0x112a/0x1a80 [ 130.114008][ T6198] ? __pfx_process_measurement+0x10/0x10 [ 130.114089][ T6198] ? smack_log+0xef/0x3f0 [ 130.114165][ T6198] ? __pfx_smack_log+0x10/0x10 [ 130.114239][ T6198] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 130.114330][ T6198] ? __pfx_smack_file_open+0x10/0x10 [ 130.114412][ T6198] ? tomoyo_file_open+0x168/0x220 [ 130.114465][ T6198] ima_file_check+0xd9/0x130 [ 130.114533][ T6198] ? do_dentry_open+0xd19/0x1270 [ 130.114589][ T6198] ? __pfx_ima_file_check+0x10/0x10 [ 130.114676][ T6198] security_file_post_open+0xbb/0x290 [ 130.114771][ T6198] path_openat+0x3472/0x3df0 [ 130.114869][ T6198] ? __pfx_path_openat+0x10/0x10 [ 130.114944][ T6198] ? kasan_save_track+0x4f/0x80 [ 130.115042][ T6198] ? kasan_save_track+0x3e/0x80 [ 130.115120][ T6198] ? __kasan_slab_alloc+0x6c/0x80 [ 130.115201][ T6198] ? kmem_cache_alloc_noprof+0x18d/0x6c0 [ 130.115271][ T6198] ? getname_flags+0xb8/0x540 [ 130.115315][ T6198] ? do_sys_openat2+0xbc/0x200 [ 130.115391][ T6198] ? do_raw_spin_lock+0x121/0x290 [ 130.115472][ T6198] do_filp_open+0x1fa/0x410 [ 130.115544][ T6198] ? __pfx_do_filp_open+0x10/0x10 [ 130.115614][ T6198] ? rt_mutex_slowunlock+0x493/0x8a0 [ 130.115716][ T6198] ? alloc_fd+0x64f/0x6c0 [ 130.115777][ T6198] do_sys_openat2+0x121/0x200 [ 130.115838][ T6198] ? __se_sys_futex+0x36f/0x400 [ 130.115913][ T6198] ? __pfx_do_sys_openat2+0x10/0x10 [ 130.115982][ T6198] ? exc_page_fault+0x71/0xd0 [ 130.116035][ T6198] ? __pfx___se_sys_futex+0x10/0x10 [ 130.116140][ T6198] __x64_sys_openat+0x138/0x170 [ 130.116199][ T6198] do_syscall_64+0xec/0xf80 [ 130.116253][ T6198] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.116308][ T6198] ? trace_irq_disable+0x37/0x100 [ 130.116382][ T6198] ? clear_bhb_loop+0x60/0xb0 [ 130.116453][ T6198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.116527][ T6198] RIP: 0033:0x7fb59539f749 [ 130.116580][ T6198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.116623][ T6198] RSP: 002b:00007fff3ac53cb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 130.116703][ T6198] RAX: ffffffffffffffda RBX: 00007fb5955f5fa0 RCX: 00007fb59539f749 [ 130.116744][ T6198] RDX: 0000000000000000 RSI: 0000200000004280 RDI: ffffffffffffff9c [ 130.116779][ T6198] RBP: 00007fb595423f91 R08: 0000000000000000 R09: 0000000000000000 [ 130.116812][ T6198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.116844][ T6198] R13: 00007fb5955f5fa0 R14: 00007fb5955f5fa0 R15: 0000000000000004 [ 130.116901][ T6198] [ 130.116922][ T6198] [ 130.116941][ T6198] The buggy address belongs to the physical page: [ 130.116990][ T6198] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x7fb58c615 pfn:0x52abe [ 130.117042][ T6198] flags: 0x80000000000000(node=0|zone=1) [ 130.117116][ T6198] raw: 0080000000000000 ffffea00014aafc8 ffff8880b8842d30 0000000000000000 [ 130.117176][ T6198] raw: 00000007fb58c615 0000000000000000 00000000ffffffff 0000000000000000 [ 130.117209][ T6198] page dumped because: kasan: bad access detected [ 130.117240][ T6198] page_owner tracks the page as freed [ 130.117260][ T6198] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO|__GFP_COMP), pid 6198, tgid 6198 (syz.0.27), ts 130045840131, free_ts 130049000115 [ 130.117354][ T6198] post_alloc_hook+0x234/0x290 [ 130.117429][ T6198] get_page_from_freelist+0x28c0/0x2960 [ 130.117463][ T6198] __alloc_frozen_pages_noprof+0x181/0x370 [ 130.117483][ T6198] alloc_pages_mpol+0xd1/0x380 [ 130.117537][ T6198] vma_alloc_folio_noprof+0xe4/0x280 [ 130.117608][ T6198] folio_prealloc+0x30/0x180 [ 130.117697][ T6198] do_pte_missing+0x86a/0x27a0 [ 130.117747][ T6198] handle_mm_fault+0xcc1/0x1330 [ 130.117819][ T6198] do_user_addr_fault+0xa7c/0x1380 [ 130.117885][ T6198] exc_page_fault+0x71/0xd0 [ 130.117927][ T6198] asm_exc_page_fault+0x26/0x30 [ 130.117969][ T6198] page last free pid 6198 tgid 6198 stack trace: [ 130.118005][ T6198] free_unref_folios+0xc28/0x1810 [ 130.118077][ T6198] folios_put_refs+0x569/0x670 [ 130.118124][ T6198] free_pages_and_swap_cache+0x4be/0x520 [ 130.118194][ T6198] tlb_flush_mmu+0x3a0/0x680 [ 130.118236][ T6198] tlb_finish_mmu+0xc3/0x1d0 [ 130.118285][ T6198] vms_clear_ptes+0x42b/0x530 [ 130.118345][ T6198] vms_complete_munmap_vmas+0x206/0x8a0 [ 130.118403][ T6198] do_vmi_align_munmap+0x372/0x450 [ 130.118454][ T6198] do_vmi_munmap+0x253/0x2e0 [ 130.118505][ T6198] __vm_munmap+0x207/0x380 [ 130.118564][ T6198] __x64_sys_munmap+0x60/0x70 [ 130.118634][ T6198] do_syscall_64+0xec/0xf80 [ 130.118684][ T6198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.118734][ T6198] [ 130.118745][ T6198] Memory state around the buggy address: [ 130.118774][ T6198] ffff888052abdf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 130.118813][ T6198] ffff888052abdf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 130.118852][ T6198] >ffff888052abe000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 130.118875][ T6198] ^ [ 130.118891][ T6198] ffff888052abe080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 130.118923][ T6198] ffff888052abe100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 130.118959][ T6198] ================================================================== [ 130.196119][ T6198] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 130.196182][ T6198] CPU: 1 UID: 0 PID: 6198 Comm: syz.0.27 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 130.196251][ T6198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 130.196289][ T6198] Call Trace: [ 130.196320][ T6198] [ 130.196340][ T6198] vpanic+0x1e0/0x670 [ 130.196438][ T6198] panic+0xb9/0xc0 [ 130.196503][ T6198] ? __pfx_panic+0x10/0x10 [ 130.196582][ T6198] ? preempt_schedule_thunk+0x16/0x30 [ 130.196658][ T6198] ? hpfs_bplus_lookup+0x4dc/0x860 [ 130.196711][ T6198] check_panic_on_warn+0x89/0xb0 [ 130.196798][ T6198] ? hpfs_bplus_lookup+0x4dc/0x860 [ 130.196849][ T6198] end_report+0x6f/0x140 [ 130.196937][ T6198] kasan_report+0x129/0x150 [ 130.197026][ T6198] ? hpfs_bplus_lookup+0x4dc/0x860 [ 130.197088][ T6198] hpfs_bplus_lookup+0x4dc/0x860 [ 130.197187][ T6198] ? __pfx_hpfs_bplus_lookup+0x10/0x10 [ 130.197257][ T6198] hpfs_bmap+0x22a/0x4d0 [ 130.197347][ T6198] ? __pfx_hpfs_bmap+0x10/0x10 [ 130.197422][ T6198] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 130.197478][ T6198] ? mutex_lock_nested+0x154/0x1d0 [ 130.197544][ T6198] ? hpfs_get_block+0x98/0x6e0 [ 130.197610][ T6198] hpfs_get_block+0xa8/0x6e0 [ 130.197684][ T6198] do_mpage_readpage+0x822/0x1990 [ 130.197769][ T6198] mpage_readahead+0x3b0/0x790 [ 130.197825][ T6198] ? __pfx_mpage_readahead+0x10/0x10 [ 130.197910][ T6198] ? __pfx_hpfs_get_block+0x10/0x10 [ 130.197974][ T6198] ? rt_mutex_slowunlock+0x493/0x8a0 [ 130.198010][ T6198] ? reacquire_held_locks+0x104/0x190 [ 130.198044][ T6198] ? blk_start_plug+0x6f/0x1b0 [ 130.198069][ T6198] read_pages+0x17a/0x580 [ 130.198096][ T6198] ? __pfx_read_pages+0x10/0x10 [ 130.198127][ T6198] ? __folio_batch_add_and_move+0x6d1/0xa90 [ 130.198161][ T6198] ? filemap_add_folio+0x3db/0x620 [ 130.198187][ T6198] page_cache_ra_unbounded+0x68b/0x8c0 [ 130.198220][ T6198] filemap_get_pages+0x446/0x1ee0 [ 130.198260][ T6198] ? __pfx_filemap_get_pages+0x10/0x10 [ 130.198298][ T6198] ? unwind_next_frame+0xa5/0x23d0 [ 130.198333][ T6198] filemap_read+0x3f9/0x11a0 [ 130.198365][ T6198] ? kernel_text_address+0xa5/0xe0 [ 130.198395][ T6198] ? __kernel_text_address+0xd/0x40 [ 130.198428][ T6198] ? __pfx_filemap_read+0x10/0x10 [ 130.198469][ T6198] ? generic_file_read_iter+0x8f/0x520 [ 130.198497][ T6198] ? __asan_memset+0x22/0x50 [ 130.198520][ T6198] ? iov_iter_kvec+0xb8/0x180 [ 130.198552][ T6198] __kernel_read+0x4d8/0x970 [ 130.198584][ T6198] ? __pfx___kernel_read+0x10/0x10 [ 130.198622][ T6198] integrity_kernel_read+0x89/0xd0 [ 130.198649][ T6198] ? __pfx_integrity_kernel_read+0x10/0x10 [ 130.198674][ T6198] ? __kmalloc_cache_noprof+0x1fb/0x6d0 [ 130.198703][ T6198] ? ima_calc_file_hash+0x82c/0x1700 [ 130.198724][ T6198] ima_calc_file_hash+0x86a/0x1700 [ 130.198745][ T6198] ? unwind_next_frame+0xa5/0x23d0 [ 130.198773][ T6198] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 130.198809][ T6198] ? arch_stack_walk+0xfc/0x150 [ 130.198835][ T6198] ? stack_trace_save+0x9c/0xe0 [ 130.198852][ T6198] ? __pfx_stack_trace_save+0x10/0x10 [ 130.198874][ T6198] ? make_vfsgid+0x49/0xa0 [ 130.198895][ T6198] ? generic_fillattr+0x63d/0x9a0 [ 130.198912][ T6198] ima_collect_measurement+0x42e/0x900 [ 130.198926][ T6198] ? look_up_lock_class+0x57/0x110 [ 130.198944][ T6198] ? __pfx_ima_collect_measurement+0x10/0x10 [ 130.198960][ T6198] ? do_raw_spin_lock+0x121/0x290 [ 130.198986][ T6198] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 130.199005][ T6198] ? lockdep_hardirqs_on+0x7b/0x110 [ 130.199018][ T6198] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 130.199035][ T6198] process_measurement+0x112a/0x1a80 [ 130.199063][ T6198] ? __pfx_process_measurement+0x10/0x10 [ 130.199084][ T6198] ? smack_log+0xef/0x3f0 [ 130.199120][ T6198] ? __pfx_smack_log+0x10/0x10 [ 130.199135][ T6198] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 130.199165][ T6198] ? __pfx_smack_file_open+0x10/0x10 [ 130.199189][ T6198] ? tomoyo_file_open+0x168/0x220 [ 130.199207][ T6198] ima_file_check+0xd9/0x130 [ 130.199229][ T6198] ? do_dentry_open+0xd19/0x1270 [ 130.199246][ T6198] ? __pfx_ima_file_check+0x10/0x10 [ 130.199271][ T6198] security_file_post_open+0xbb/0x290 [ 130.199295][ T6198] path_openat+0x3472/0x3df0 [ 130.199332][ T6198] ? __pfx_path_openat+0x10/0x10 [ 130.199352][ T6198] ? kasan_save_track+0x4f/0x80 [ 130.199371][ T6198] ? kasan_save_track+0x3e/0x80 [ 130.199391][ T6198] ? __kasan_slab_alloc+0x6c/0x80 [ 130.199412][ T6198] ? kmem_cache_alloc_noprof+0x18d/0x6c0 [ 130.199432][ T6198] ? getname_flags+0xb8/0x540 [ 130.199445][ T6198] ? do_sys_openat2+0xbc/0x200 [ 130.199464][ T6198] ? do_raw_spin_lock+0x121/0x290 [ 130.199485][ T6198] do_filp_open+0x1fa/0x410 [ 130.199505][ T6198] ? __pfx_do_filp_open+0x10/0x10 [ 130.199524][ T6198] ? rt_mutex_slowunlock+0x493/0x8a0 [ 130.199553][ T6198] ? alloc_fd+0x64f/0x6c0 [ 130.199571][ T6198] do_sys_openat2+0x121/0x200 [ 130.199587][ T6198] ? __se_sys_futex+0x36f/0x400 [ 130.199608][ T6198] ? __pfx_do_sys_openat2+0x10/0x10 [ 130.199625][ T6198] ? exc_page_fault+0x71/0xd0 [ 130.199638][ T6198] ? __pfx___se_sys_futex+0x10/0x10 [ 130.199662][ T6198] __x64_sys_openat+0x138/0x170 [ 130.199681][ T6198] do_syscall_64+0xec/0xf80 [ 130.199696][ T6198] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.199710][ T6198] ? trace_irq_disable+0x37/0x100 [ 130.199726][ T6198] ? clear_bhb_loop+0x60/0xb0 [ 130.199742][ T6198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.199757][ T6198] RIP: 0033:0x7fb59539f749 [ 130.199770][ T6198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.199783][ T6198] RSP: 002b:00007fff3ac53cb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 130.199799][ T6198] RAX: ffffffffffffffda RBX: 00007fb5955f5fa0 RCX: 00007fb59539f749 [ 130.199810][ T6198] RDX: 0000000000000000 RSI: 0000200000004280 RDI: ffffffffffffff9c [ 130.199820][ T6198] RBP: 00007fb595423f91 R08: 0000000000000000 R09: 0000000000000000 [ 130.199829][ T6198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.199838][ T6198] R13: 00007fb5955f5fa0 R14: 00007fb5955f5fa0 R15: 0000000000000004 [ 130.199855][ T6198] [ 130.200482][ T6198] Kernel Offset: disabled