Warning: Permanently added '10.128.1.227' (ED25519) to the list of known hosts. 2026/01/12 16:43:46 parsed 1 programs [ 47.168083][ T24] kauditd_printk_skb: 30 callbacks suppressed [ 47.168097][ T24] audit: type=1400 audit(1768236226.630:104): avc: denied { write } for pid=400 comm="syz-execprog" path="pipe:[15440]" dev="pipefs" ino=15440 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 48.204015][ T24] audit: type=1400 audit(1768236227.670:105): avc: denied { unlink } for pid=407 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 48.271467][ T407] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 48.938668][ T433] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.946236][ T433] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.954045][ T433] device bridge_slave_0 entered promiscuous mode [ 48.964236][ T433] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.971293][ T433] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.978721][ T433] device bridge_slave_1 entered promiscuous mode [ 49.134891][ T24] audit: type=1401 audit(1768236228.600:106): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 49.151905][ T433] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.158998][ T433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.166338][ T433] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.173596][ T433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.180841][ T24] audit: type=1400 audit(1768236228.620:107): avc: denied { create } for pid=459 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.252219][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.259887][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.267732][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.276137][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.285064][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.293490][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.300881][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.310522][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.319235][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.327354][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.339398][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.349746][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.364729][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.375889][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.384371][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.391867][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready 2026/01/12 16:43:48 executed programs: 0 [ 49.400088][ T433] device veth0_vlan entered promiscuous mode [ 49.412087][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.421342][ T433] device veth1_macvtap entered promiscuous mode [ 49.431964][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.442204][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.566470][ T472] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.573631][ T472] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.581052][ T472] device bridge_slave_0 entered promiscuous mode [ 49.588891][ T472] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.595979][ T472] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.603466][ T472] device bridge_slave_1 entered promiscuous mode [ 49.675439][ T475] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.682553][ T475] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.689963][ T475] device bridge_slave_0 entered promiscuous mode [ 49.698377][ T475] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.705650][ T475] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.713243][ T475] device bridge_slave_1 entered promiscuous mode [ 49.731265][ T471] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.738419][ T471] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.746158][ T471] device bridge_slave_0 entered promiscuous mode [ 49.754395][ T471] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.761704][ T471] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.769568][ T471] device bridge_slave_1 entered promiscuous mode [ 49.821033][ T470] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.828470][ T470] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.835978][ T470] device bridge_slave_0 entered promiscuous mode [ 49.844731][ T470] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.851990][ T470] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.859462][ T470] device bridge_slave_1 entered promiscuous mode [ 49.942160][ T474] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.949244][ T474] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.957315][ T474] device bridge_slave_0 entered promiscuous mode [ 49.964655][ T474] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.971746][ T474] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.979292][ T474] device bridge_slave_1 entered promiscuous mode [ 50.079798][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.087492][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.123023][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.130539][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.138112][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.145594][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.154186][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.162746][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.170912][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.178001][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.185590][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.194118][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.202315][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.209352][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.216996][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.225329][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.233563][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.240600][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.248502][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.256918][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.265426][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.272521][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.280156][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.287907][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.323435][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.332155][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.340455][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.347816][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.356205][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.364905][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.373439][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.380560][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.388169][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.432170][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.440412][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.449674][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.457903][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.466128][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.474495][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.482989][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.490953][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.499314][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.507521][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.515949][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.524232][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.532834][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.541238][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.549435][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.557695][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.565702][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.578013][ T472] device veth0_vlan entered promiscuous mode [ 50.588914][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.596587][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.604752][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.613863][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.622481][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.629517][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.637354][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.655252][ T475] device veth0_vlan entered promiscuous mode [ 50.663084][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.671307][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.679154][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.687320][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.696304][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.704927][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.713340][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.720389][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.758208][ T471] device veth0_vlan entered promiscuous mode [ 50.765233][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.773718][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.781198][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.789427][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.797102][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.804748][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.813006][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.820059][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.827653][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.836174][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.844568][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.851939][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.859526][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.867814][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.888834][ T471] device veth1_macvtap entered promiscuous mode [ 50.915895][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.925170][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.935966][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.945835][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.954991][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.967089][ T472] device veth1_macvtap entered promiscuous mode [ 50.987545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.996225][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.004500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.012545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.022347][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.039272][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.047885][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.061677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.069567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.080948][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.090139][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.100023][ T475] device veth1_macvtap entered promiscuous mode [ 51.108850][ T470] device veth0_vlan entered promiscuous mode [ 51.122178][ T470] device veth1_macvtap entered promiscuous mode [ 51.137510][ T474] device veth0_vlan entered promiscuous mode [ 51.146371][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.156243][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.164946][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.173897][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.182647][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.190483][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.198680][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.207309][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.215080][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.232074][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.240368][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.250698][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.259485][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.281131][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.289895][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.298990][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.307853][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.316963][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.325618][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.334294][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.342904][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.352453][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.361014][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.379970][ T474] device veth1_macvtap entered promiscuous mode [ 51.408709][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.420373][ T494] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 51.429270][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.429510][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.446209][ T24] audit: type=1400 audit(1768236230.920:108): avc: denied { mount } for pid=493 comm="syz.5.17" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 51.456450][ T494] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.489393][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.499833][ T498] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 51.510113][ T498] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.520540][ T24] audit: type=1400 audit(1768236230.970:109): avc: denied { write } for pid=493 comm="syz.5.17" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 51.520641][ T24] audit: type=1400 audit(1768236230.970:110): avc: denied { add_name } for pid=493 comm="syz.5.17" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 51.546794][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.593597][ T494] EXT4-fs error (device loop5): ext4_dx_csum_set:529: inode #2: comm syz.5.17: dir seems corrupt? Run e2fsck -D. [ 51.602340][ T498] EXT4-fs error (device loop4): dx_make_map:1303: inode #2: block 20: comm syz.4.19: bad entry in directory: inode out of bounds - offset=792, inode=1633771873, rec_len=220, size=1012 fake=0 [ 51.608900][ T431] udevd[431]: incorrect ext4 checksum on /dev/loop5 [ 51.625793][ T498] EXT4-fs error (device loop4) in do_split:2059: Corrupt filesystem [ 51.654680][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.662869][ T24] audit: type=1400 audit(1768236230.970:111): avc: denied { create } for pid=493 comm="syz.5.17" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 51.668553][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.706968][ T24] audit: type=1400 audit(1768236230.970:112): avc: denied { write open } for pid=493 comm="syz.5.17" path="/0/file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 51.745525][ T494] EXT4-fs error (device loop5): dx_make_map:1303: inode #2: block 20: comm syz.5.17: bad entry in directory: inode out of bounds - offset=0, inode=2033530174, rec_len=1012, size=1012 fake=0 [ 51.759750][ T24] audit: type=1400 audit(1768236230.970:113): avc: denied { mounton } for pid=493 comm="syz.5.17" path="/0/file1/bus" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 51.780749][ T494] EXT4-fs error (device loop5) in do_split:2059: Corrupt filesystem [ 51.816657][ T505] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 51.826396][ T505] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.848411][ T475] EXT4-fs warning (device loop4): dx_probe:806: inode #2: comm syz-executor: Unrecognised inode hash code 89 [ 51.853952][ T503] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 51.861689][ T475] EXT4-fs warning (device loop4): dx_probe:946: inode #2: comm syz-executor: Corrupt directory, running e2fsck is recommended [ 51.871372][ T503] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.884943][ T475] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 4: comm syz-executor: path /0/file1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4293793778, rec_len=62303, size=1024 fake=0 [ 51.914770][ T112] device bridge_slave_1 left promiscuous mode [ 51.917452][ T471] EXT4-fs error (device loop5): htree_dirblock_to_tree:1092: inode #2: block 20: comm syz-executor: bad entry in directory: inode out of bounds - offset=1024, inode=2033530174, rec_len=1012, size=1024 fake=0 [ 51.921265][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.949148][ T112] device bridge_slave_0 left promiscuous mode [ 51.956242][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.964891][ T511] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 51.965472][ T505] EXT4-fs error (device loop6): dx_make_map:1303: inode #2: block 20: comm syz.6.18: bad entry in directory: inode out of bounds - offset=792, inode=1633771873, rec_len=220, size=1012 fake=0 [ 51.974187][ T511] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.004437][ T475] EXT4-fs warning (device loop4): dx_probe:806: inode #2: comm syz-executor: Unrecognised inode hash code 89 [ 52.010228][ T112] device veth1_macvtap left promiscuous mode [ 52.016392][ T475] EXT4-fs warning (device loop4): dx_probe:946: inode #2: comm syz-executor: Corrupt directory, running e2fsck is recommended [ 52.031023][ T511] EXT4-fs error (device loop1): dx_make_map:1303: inode #2: block 20: comm syz.1.16: bad entry in directory: inode out of bounds - offset=792, inode=1633771873, rec_len=220, size=1012 fake=0 [ 52.040160][ T475] EXT4-fs error (device loop4): ext4_readdir:223: inode #11: comm syz-executor: path /0/file1/lost+found: directory fails checksum at offset 0 [ 52.062815][ T112] device veth0_vlan left promiscuous mode [ 52.070610][ T475] EXT4-fs error (device loop4): ext4_readdir:223: inode #11: comm syz-executor: path /0/file1/lost+found: directory fails checksum at offset 1024 [ 52.090204][ T475] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:404: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 52.106593][ T475] EXT4-fs error (device loop4): ext4_readdir:223: inode #11: comm syz-executor: path /0/file1/lost+found: directory fails checksum at offset 3072 [ 52.106610][ T515] ================================================================== [ 52.122880][ T475] EXT4-fs error (device loop4): ext4_readdir:223: inode #11: comm syz-executor: path /0/file1/lost+found: directory fails checksum at offset 5120 [ 52.129945][ T515] BUG: KASAN: use-after-free in do_split+0x1995/0x1e30 [ 52.146278][ T475] EXT4-fs error (device loop4): ext4_readdir:223: inode #11: comm syz-executor: path /0/file1/lost+found: directory fails checksum at offset 8192 [ 52.151669][ T515] Read of size 157024 at addr ffff888123230028 by task syz.0.15/515 [ 52.168795][ T475] EXT4-fs warning (device loop4): dx_probe:806: inode #2: comm syz-executor: Unrecognised inode hash code 89 [ 52.175124][ T515] [ 52.175150][ T515] CPU: 0 PID: 515 Comm: syz.0.15 Not tainted syzkaller #0 [ 52.175156][ T515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 52.175169][ T515] Call Trace: [ 52.193282][ T475] EXT4-fs warning (device loop4): dx_probe:946: inode #2: comm syz-executor: Corrupt directory, running e2fsck is recommended [ 52.196829][ T515] __dump_stack+0x21/0x24 [ 52.208168][ T475] EXT4-fs error (device loop4): ext4_empty_dir:3077: inode #11: comm syz-executor: Directory block failed checksum [ 52.210614][ T515] dump_stack_lvl+0x169/0x1d8 [ 52.225331][ T475] EXT4-fs error (device loop4): ext4_readdir:223: inode #11: comm syz-executor: path /0/file1/lost+found: directory fails checksum at offset 0 [ 52.228063][ T515] ? show_regs_print_info+0x18/0x18 [ 52.265456][ T515] ? thaw_kernel_threads+0x220/0x220 [ 52.266924][ T475] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:404: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 52.270793][ T515] print_address_description+0x7f/0x2c0 [ 52.270805][ T515] ? do_split+0x1995/0x1e30 [ 52.270858][ T515] kasan_report+0xe2/0x130 [ 52.286813][ T505] EXT4-fs error (device loop6) in do_split:2059: Corrupt filesystem [ 52.292246][ T515] ? do_split+0x1995/0x1e30 [ 52.292258][ T515] ? do_split+0x1995/0x1e30 [ 52.292306][ T515] kasan_check_range+0x280/0x290 [ 52.297010][ T511] EXT4-fs error (device loop1) in do_split:2059: Corrupt filesystem [ 52.301206][ T515] memmove+0x2d/0x70 [ 52.301247][ T515] do_split+0x1995/0x1e30 [ 52.329556][ T475] EXT4-fs warning (device loop4): dx_probe:806: inode #2: comm syz-executor: Unrecognised inode hash code 89 [ 52.331719][ T515] ? ext4_handle_dirty_dx_node+0x560/0x560 [ 52.331772][ T515] ? ext4_handle_dirty_dx_node+0x3fd/0x560 [ 52.345019][ T472] EXT4-fs warning (device loop6): dx_probe:806: inode #2: comm syz-executor: Unrecognised inode hash code 89 [ 52.351536][ T515] make_indexed_dir+0xd58/0x13f0 [ 52.351583][ T515] ? add_dirent_to_buf+0x6d0/0x6d0 [ 52.360956][ T475] EXT4-fs warning (device loop4): dx_probe:946: inode #2: comm syz-executor: Corrupt directory, running e2fsck is recommended [ 52.363190][ T515] ? add_dirent_to_buf+0x46e/0x6d0 [ 52.363204][ T515] ext4_add_entry+0xc05/0xf10 [ 52.363247][ T515] ? memcpy+0x56/0x70 [ 52.382552][ T474] EXT4-fs warning (device loop1): dx_probe:806: inode #2: comm syz-executor: Unrecognised inode hash code 89 [ 52.384937][ T515] ? ext4_inc_count+0x1b0/0x1b0 [ 52.385003][ T515] ? atime_needs_update+0x5b0/0x5b0 [ 52.399130][ T472] EXT4-fs warning (device loop6): dx_probe:946: inode #2: comm syz-executor: Corrupt directory, running e2fsck is recommended [ 52.403922][ T515] ? __kasan_check_read+0x11/0x20 [ 52.403936][ T515] __ext4_link+0x4db/0x760 [ 52.403949][ T515] ? ext4_update_dx_flag+0x200/0x200 [ 52.403959][ T515] ? __kasan_check_write+0x14/0x20 [ 52.404006][ T515] ? down_write+0xac/0x110 [ 52.413176][ T472] EXT4-fs error (device loop6): ext4_readdir:263: inode #2: block 4: comm syz-executor: path /0/file1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4293793778, rec_len=62303, size=1024 fake=0 [ 52.424673][ T515] ext4_link+0x1de/0x270 [ 52.424689][ T515] vfs_link+0x684/0x880 [ 52.424735][ T515] do_linkat+0x381/0x660 [ 52.446816][ T474] EXT4-fs warning (device loop1): dx_probe:946: inode #2: comm syz-executor: Corrupt directory, running e2fsck is recommended [ 52.447838][ T515] __x64_sys_link+0x68/0x80 [ 52.447890][ T515] do_syscall_64+0x31/0x40 [ 52.464255][ T472] EXT4-fs warning (device loop6): dx_probe:806: inode #2: comm syz-executor: Unrecognised inode hash code 89 [ 52.467929][ T515] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 52.467972][ T515] RIP: 0033:0x7f7c08e88759 [ 52.478354][ T474] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 4: comm syz-executor: path /0/file1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4293793778, rec_len=62303, size=1024 fake=0 [ 52.492428][ T515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.492435][ T515] RSP: 002b:00007f7c088e8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 52.492449][ T515] RAX: ffffffffffffffda RBX: 00007f7c09040058 RCX: 00007f7c08e88759 [ 52.492457][ T515] RDX: 0000000000000000 RSI: 0000000020000bc0 RDI: 0000000020001240 [ 52.492473][ T515] RBP: 00007f7c08efb75e R08: 0000000000000000 R09: 0000000000000000 [ 52.511502][ T472] EXT4-fs warning (device loop6): dx_probe:946: inode #2: comm syz-executor: Corrupt directory, running e2fsck is recommended [ 52.518253][ T515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 52.518260][ T515] R13: 0000000000000001 R14: 00007f7c09040058 R15: 00007ffcc5a370b8 [ 52.518268][ T515] [ 52.518272][ T515] The buggy address belongs to the page: [ 52.518299][ T515] page:ffffea00048c8c00 refcount:3 mapcount:1 mapping:ffff888109194290 index:0x1 pfn:0x123230 [ 52.518315][ T515] aops:def_blk_aops ino:0 [ 52.518326][ T515] flags: 0x400000000032201e(referenced|uptodate|dirty|lru|private|mappedtodisk|unevictable|mlocked) [ 52.518341][ T515] raw: 400000000032201e ffffea0004652308 ffffea000467b608 ffff888109194290 [ 52.518355][ T515] raw: 0000000000000001 ffff88812d1762a0 0000000300000000 ffff888127ec8000 [ 52.518359][ T515] page dumped because: kasan: bad access detected [ 52.518364][ T515] page->mem_cgroup:ffff888127ec8000 [ 52.518369][ T515] page_owner tracks the page as allocated [ 52.518385][ T515] page last allocated via order 0, migratetype Movable, gfp_mask 0x108c48(GFP_NOFS|__GFP_NOFAIL|__GFP_HARDWALL|__GFP_MOVABLE), pid 503, ts 51954436721, free_ts 48361543703 [ 52.518405][ T515] prep_new_page+0x179/0x180 [ 52.518414][ T515] get_page_from_freelist+0x2235/0x23d0 [ 52.518423][ T515] __alloc_pages_nodemask+0x268/0x5f0 [ 52.518434][ T515] pagecache_get_page+0x642/0x930 [ 52.518443][ T515] __getblk_gfp+0x212/0x780 [ 52.518491][ T515] ext4_bread_batch+0x1cc/0x720 [ 52.528540][ T24] kauditd_printk_skb: 4 callbacks suppressed [ 52.528573][ T24] audit: type=1400 audit(1768236231.990:118): avc: denied { read } for pid=76 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 52.539116][ T515] __ext4_find_entry+0xedc/0x1970 [ 52.539126][ T515] ext4_lookup+0x292/0x840 [ 52.539137][ T515] path_openat+0x1127/0x3160 [ 52.539179][ T515] do_filp_open+0x1b3/0x3e0 [ 52.562963][ T474] EXT4-fs warning (device loop1): dx_probe:806: inode #2: comm syz-executor: Unrecognised inode hash code 89 [ 52.569983][ T515] do_sys_openat2+0x14c/0x6d0 [ 52.594073][ T24] audit: type=1400 audit(1768236231.990:119): avc: denied { search } for pid=76 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.598020][ T515] __x64_sys_creat+0x8e/0xb0 [ 52.609354][ T472] EXT4-fs error (device loop6): ext4_readdir:223: inode #11: comm syz-executor: path /0/file1/lost+found: directory fails checksum at offset 0 [ 52.614038][ T515] do_syscall_64+0x31/0x40 [ 52.614051][ T515] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 52.614055][ T515] page last free stack trace: [ 52.614068][ T515] free_unref_page_prepare+0x2b7/0x2d0 [ 52.614111][ T515] free_unref_page_list+0x12e/0x9b0 [ 52.647483][ T24] audit: type=1400 audit(1768236231.990:120): avc: denied { write } for pid=76 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.651232][ T515] release_pages+0xe38/0xe80 [ 52.659494][ T472] EXT4-fs error (device loop6): ext4_readdir:223: inode #11: comm syz-executor: path /0/file1/lost+found: directory fails checksum at offset 1024 [ 52.669496][ T515] free_pages_and_swap_cache+0x86/0xa0 [ 52.669507][ T515] tlb_finish_mmu+0x175/0x300 [ 52.669517][ T515] unmap_region+0x32c/0x380 [ 52.669560][ T515] __do_munmap+0x63c/0x850 [ 52.683963][ T24] audit: type=1400 audit(1768236231.990:121): avc: denied { add_name } for pid=76 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.685327][ T515] __se_sys_munmap+0x127/0x1b0 [ 52.708531][ T474] EXT4-fs warning (device loop1): dx_probe:946: inode #2: comm syz-executor: Corrupt directory, running e2fsck is recommended [ 52.709484][ T515] __x64_sys_munmap+0x5b/0x70 [ 52.722869][ T24] audit: type=1400 audit(1768236231.990:122): avc: denied { create } for pid=76 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 52.738589][ T515] do_syscall_64+0x31/0x40 [ 52.738602][ T515] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 52.738607][ T515] [ 52.738620][ T515] Memory state around the buggy address: [ 52.747179][ T472] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:404: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 52.749255][ T515] ffff888123233f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 52.758460][ T474] EXT4-fs error (device loop1): ext4_readdir:223: inode #11: comm syz-executor: path /0/file1/lost+found: directory fails checksum at offset 0 [ 52.759669][ T515] ffff888123233f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 52.779092][ T472] EXT4-fs error (device loop6): ext4_readdir:223: inode #11: comm syz-executor: path /0/file1/lost+found: directory fails checksum at offset 3072 [ 52.797760][ T515] >ffff888123234000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 52.797765][ T515] ^ [ 52.797773][ T515] ffff888123234080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 52.797780][ T515] ffff888123234100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 52.797784][ T515] ================================================================== [ 52.797788][ T515] Disabling lock debugging due to kernel taint [ 52.836569][ T431] udevd[431]: incorrect ext4 checksum on /dev/loop0 [ 52.857014][ T472] EXT4-fs error (device loop6): ext4_readdir:223: inode #11: comm syz-executor: path /0/file1/lost+found: directory fails checksum at offset 5120 [ 52.982145][ T24] audit: type=1400 audit(1768236231.990:123): avc: denied { append open } for pid=76 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 52.982163][ T24] audit: type=1400 audit(1768236231.990:124): avc: denied { getattr } for pid=76 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 53.033525][ T474] EXT4-fs error (device loop1): ext4_readdir:223: inode #11: comm syz-executor: path /0/file1/lost+found: directory fails checksum at offset 1024 [ 53.036367][ T472] EXT4-fs error (device loop6): ext4_readdir:223: inode #11: comm syz-executor: path /0/file1/lost+found: directory fails checksum at offset 8192 [ 53.044799][ T474] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:404: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 53.059755][ T515] EXT4-fs error (device loop0): ext4_dx_csum_set:529: inode #2: comm syz.0.15: dir seems corrupt? Run e2fsck -D. [ 53.069294][ T474] EXT4-fs error (device loop1): ext4_readdir:223: inode #11: comm syz-executor: path /0/file1/lost+found: directory fails checksum at offset 3072 [ 53.087010][ T431] udevd[431]: incorrect ext4 checksum on /dev/loop0 [ 53.090743][ T474] EXT4-fs error (device loop1): ext4_readdir:223: inode #11: comm syz-executor: path /0/file1/lost+found: directory fails checksum at offset 5120 [ 53.139183][ T472] EXT4-fs warning (device loop6): dx_probe:806: inode #2: comm syz-executor: Unrecognised inode hash code 89 [ 53.145500][ T474] EXT4-fs error (device loop1): ext4_readdir:223: inode #11: comm syz-executor: path /0/file1/lost+found: directory fails checksum at offset 8192 [ 53.148939][ T472] EXT4-fs warning (device loop6): dx_probe:946: inode #2: comm syz-executor: Corrupt directory, running e2fsck is recommended [ 53.156467][ T474] EXT4-fs warning (device loop1): dx_probe:806: inode #2: comm syz-executor: Unrecognised inode hash code 89 [ 53.192364][ T472] EXT4-fs error (device loop6): ext4_empty_dir:3077: inode #11: comm syz-executor: Directory block failed checksum [ 53.194161][ T474] EXT4-fs warning (device loop1): dx_probe:946: inode #2: comm syz-executor: Corrupt directory, running e2fsck is recommended [ 53.248477][ T472] EXT4-fs error (device loop6): ext4_readdir:223: inode #11: comm syz-executor: path /0/file1/lost+found: directory fails checksum at offset 0 [ 53.278218][ T474] EXT4-fs error (device loop1): ext4_empty_dir:3077: inode #11: comm syz-executor: Directory block failed checksum [ 53.310728][ T470] EXT4-fs warning (device loop0): dx_probe:806: inode #2: comm syz-executor: Unrecognised inode hash code 89 [ 53.316062][ T474] EXT4-fs error (device loop1): ext4_readdir:223: inode #11: comm syz-executor: path /0/file1/lost+found: directory fails checksum at offset 0 [ 53.405992][ T470] EXT4-fs warning (device loop0): dx_probe:946: inode #2: comm syz-executor: Corrupt directory, running e2fsck is recommended [ 53.457464][ T472] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:404: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 53.478384][ T472] EXT4-fs warning (device loop6): dx_probe:806: inode #2: comm syz-executor: Unrecognised inode hash code 89 [ 53.490818][ T474] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:404: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 53.494319][ T470] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 4: comm syz-executor: path /0/file1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4293793778, rec_len=62303, size=1024 fake=0 [ 53.508579][ T474] EXT4-fs warning (device loop1): dx_probe:806: inode #2: comm syz-executor: Unrecognised inode hash code 89 [ 53.528010][ T472] EXT4-fs warning (device loop6): dx_probe:946: inode #2: comm syz-executor: Corrupt directory, running e2fsck is recommended [ 53.561024][ T470] EXT4-fs warning (device loop0): dx_probe:806: inode #2: comm syz-executor: Unrecognised inode hash code 89 [ 53.596526][ T474] EXT4-fs warning (device loop1): dx_probe:946: inode #2: comm syz-executor: Corrupt directory, running e2fsck is recommended [ 53.598233][ T470] EXT4-fs warning (device loop0): dx_probe:946: inode #2: comm syz-executor: Corrupt directory, running e2fsck is recommended [ 53.623792][ T470] EXT4-fs error (device loop0): ext4_readdir:223: inode #11: comm syz-executor: path /0/file1/lost+found: directory fails checksum at offset 0 [ 53.649964][ T470] EXT4-fs error (device loop0): ext4_readdir:223: inode #11: comm syz-executor: path /0/file1/lost+found: directory fails checksum at offset 1024 [ 53.665392][ T470] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:404: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 53.681386][ T470] EXT4-fs error (device loop0): ext4_readdir:223: inode #11: comm syz-executor: path /0/file1/lost+found: directory fails checksum at offset 3072 [ 53.696604][ T470] EXT4-fs error (device loop0): ext4_readdir:223: inode #11: comm syz-executor: path /0/file1/lost+found: directory fails checksum at offset 5120 [ 53.722070][ T470] EXT4-fs error (device loop0): ext4_readdir:223: inode #11: comm syz-executor: path /0/file1/lost+found: directory fails checksum at offset 8192 [ 53.752176][ T470] EXT4-fs warning (device loop0): dx_probe:806: inode #2: comm syz-executor: Unrecognised inode hash code 89 [ 53.764227][ T470] EXT4-fs warning (device loop0): dx_probe:946: inode #2: comm syz-executor: Corrupt directory, running e2fsck is recommended [ 53.777669][ T470] EXT4-fs error (device loop0): ext4_empty_dir:3077: inode #11: comm syz-executor: Directory block failed checksum [ 53.800586][ T470] EXT4-fs error (device loop0): ext4_readdir:223: inode #11: comm syz-executor: path /0/file1/lost+found: directory fails checksum at offset 0 [ 53.815759][ T470] EXT4-fs error (device loop0): ext4_readdir:223: inode #11: comm syz-executor: path /0/file1/lost+found: directory fails checksum at offset 1024 [ 53.832702][ T470] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:404: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 53.849963][ T470] EXT4-fs warning (device loop0): dx_probe:806: inode #2: comm syz-executor: Unrecognised inode hash code 89 [ 53.869468][ T470] EXT4-fs warning (device loop0): dx_probe:946: inode #2: comm syz-executor: Corrupt directory, running e2fsck is recommended [ 53.890640][ T24] audit: type=1400 audit(1768236233.350:125): avc: denied { read } for pid=522 comm="syz-executor" dev="nsfs" ino=4026531999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.965471][ T24] audit: type=1400 audit(1768236233.350:126): avc: denied { open } for pid=522 comm="syz-executor" path="net:[4026531999]" dev="nsfs" ino=4026531999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 54.028220][ T522] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.036185][ T522] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.043764][ T522] device bridge_slave_0 entered promiscuous mode [ 54.050823][ T522] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.058119][ T522] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.066075][ T522] device bridge_slave_1 entered promiscuous mode [ 54.133258][ T524] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.140349][ T524] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.158926][ T524] device bridge_slave_0 entered promiscuous mode [ 54.184156][ T524] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.191317][ T524] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.199621][ T524] device bridge_slave_1 entered promiscuous mode [ 54.241346][ T522] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.248627][ T522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.256012][ T522] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.263174][ T522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.331501][ T547] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.338923][ T547] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.346731][ T547] device bridge_slave_0 entered promiscuous mode [ 54.358481][ T524] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.365853][ T524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.373268][ T524] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.380339][ T524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.390953][ T547] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.398068][ T547] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.405497][ T547] device bridge_slave_1 entered promiscuous mode [ 54.463033][ T546] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.470114][ T546] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.477939][ T546] device bridge_slave_0 entered promiscuous mode [ 54.487481][ T546] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.494632][ T546] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.502579][ T546] device bridge_slave_1 entered promiscuous mode [ 54.534167][ T559] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.541490][ T559] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.549184][ T559] device bridge_slave_0 entered promiscuous mode [ 54.556505][ T559] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.563775][ T559] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.571464][ T559] device bridge_slave_1 entered promiscuous mode [ 54.596042][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.603853][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.612758][ T492] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.620131][ T492] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.627637][ T492] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.660969][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.669816][ T492] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.676916][ T492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.710148][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.775944][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.783587][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.791762][ T492] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.798848][ T492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.806818][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.815480][ T492] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.823366][ T492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.831172][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.839686][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.849079][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.883958][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.892432][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.900716][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.909393][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.918035][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.926094][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.937901][ T522] device veth0_vlan entered promiscuous mode [ 54.964657][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.973020][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.981278][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.990193][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.999269][ T492] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.006631][ T492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.014209][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.023091][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.031212][ T492] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.038325][ T492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.045814][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.054359][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.062688][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.070180][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.077797][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.107074][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.115657][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.124758][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.141449][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.149196][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.162817][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.171445][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.180342][ T492] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.187470][ T492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.195284][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.203929][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.212295][ T492] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.219318][ T492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.232255][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.240051][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.248637][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.257345][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.265947][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.274231][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.282191][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.295851][ T524] device veth0_vlan entered promiscuous mode [ 55.323079][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.331186][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.339963][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.347884][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.357116][ T522] device veth1_macvtap entered promiscuous mode [ 55.372202][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.381920][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.390286][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.414498][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.423306][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.431471][ T492] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.438749][ T492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.446659][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.455283][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.464179][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.473075][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.481246][ T492] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.488587][ T492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.496158][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.504420][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.512387][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.520027][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.528880][ T547] device veth0_vlan entered promiscuous mode [ 55.538796][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.550340][ T524] device veth1_macvtap entered promiscuous mode [ 55.560075][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.568342][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.576880][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.593788][ T546] device veth0_vlan entered promiscuous mode [ 55.605817][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.614536][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.623521][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.632612][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.649455][ T547] device veth1_macvtap entered promiscuous mode [ 55.661130][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.669948][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.678926][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.687481][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.696186][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2026/01/12 16:43:55 executed programs: 25 [ 55.722654][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.731629][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.740876][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.749390][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.757912][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.793836][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.802563][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.818970][ T546] device veth1_macvtap entered promiscuous mode [ 55.828436][ T566] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 55.837694][ T566] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.856689][ T566] EXT4-fs error (device loop7): dx_make_map:1303: inode #2: block 20: comm syz.7.35: bad entry in directory: inode out of bounds - offset=792, inode=1633771873, rec_len=220, size=1012 fake=0 [ 55.876640][ T112] device bridge_slave_1 left promiscuous mode [ 55.883216][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.891340][ T112] device bridge_slave_0 left promiscuous mode [ 55.894557][ T566] EXT4-fs error (device loop7) in do_split:2059: Corrupt filesystem [ 55.899623][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.915131][ T112] device bridge_slave_1 left promiscuous mode [ 55.921285][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.928980][ T112] device bridge_slave_0 left promiscuous mode [ 55.935417][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.946323][ T112] device bridge_slave_1 left promiscuous mode [ 55.953821][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.963181][ T112] device bridge_slave_0 left promiscuous mode [ 55.969330][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.977355][ T112] device bridge_slave_1 left promiscuous mode [ 55.983715][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.991361][ T112] device bridge_slave_0 left promiscuous mode [ 55.997979][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.009004][ T522] EXT4-fs warning (device loop7): dx_probe:806: inode #2: comm syz-executor: Unrecognised inode hash code 89 [ 56.026262][ T574] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 56.029055][ T570] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue [ 56.035883][ T574] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.056854][ T112] device veth1_macvtap left promiscuous mode [ 56.063196][ T112] device veth0_vlan left promiscuous mode [ 56.065066][ T570] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.079406][ T574] EXT4-fs error (device loop2): dx_make_map:1303: inode #2: block 20: comm syz.2.37: bad entry in directory: inode out of bounds - offset=792, inode=1633771873, rec_len=220, size=1012 fake=0 [ 56.079724][ T574] EXT4-fs error (device loop2) in do_split:2059: Corrupt filesystem [ 56.106667][ T522] EXT4-fs warning (device loop7): dx_probe:946: inode #2: comm syz-executor: Corrupt directory, running e2fsck is recommended [ 56.120643][ T112] device veth1_macvtap left promiscuous mode [ 56.126975][ T112] device veth0_vlan left promiscuous mode [ 56.132986][ T522] EXT4-fs error (device loop7): ext4_readdir:263: inode #2: block 4: comm syz-executor: path /0/file1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4293793778, rec_len=62303, size=1024 fake=0 [ 56.153856][ T522] EXT4-fs warning (device loop7): dx_probe:806: inode #2: comm syz-executor: Unrecognised inode hash code 89 [ 56.153861][ T112] device veth1_macvtap left promiscuous mode [ 56.153945][ T112] device veth0_vlan left promiscuous mode [ 56.177477][ T522] EXT4-fs warning (device loop7): dx_probe:946: inode #2: comm syz-executor: Corrupt directory, running e2fsck is recommended [ 56.179843][ T431] udevd[431]: incorrect ext4 checksum on /dev/loop2 [ 56.195782][ T522] EXT4-fs error (device loop7): ext4_readdir:223: inode #11: comm syz-executor: path /0/file1/lost+found: directory fails checksum at offset 0 [ 56.204890][ T570] EXT4-fs error (device loop8): ext4_dx_csum_set:529: inode #2: comm syz.8.27: dir seems corrupt? Run e2fsck -D. [ 56.225868][ T547] EXT4-fs warning (device loop2): dx_probe:806: inode #2: comm syz-executor: Unrecognised inode hash code 89 [ 56.237702][ T112] device veth1_macvtap left promiscuous mode [ 56.243904][ T112] device veth0_vlan left promiscuous mode [ 56.246116][ T547] EXT4-fs warning (device loop2): dx_probe:946: inode #2: comm syz-executor: Corrupt directory, running e2fsck is recommended [ 56.250068][ T522] EXT4-fs error (device loop7): ext4_readdir:223: inode #11: comm syz-executor: path /0/file1/lost+found: directory fails checksum at offset 1024 [ 56.263709][ T547] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 4: comm syz-executor: path /0/file1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4293793778, rec_len=62303, size=1024 fake=0 [ 56.280936][ T522] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:404: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 56.314628][ T524] EXT4-fs warning (device loop8): dx_probe:806: inode #2: comm syz-executor: Unrecognised inode hash code 89 [ 56.327905][ T522] EXT4-fs error (device loop7): ext4_readdir:223: inode #11: comm syz-executor: path /0/file1/lost+found: directory fails checksum at offset 3072 [ 56.343487][ T547] EXT4-fs warning (device loop2): dx_probe:806: inode #2: comm syz-executor: Unrecognised inode hash code 89 [ 56.352603][ T524] EXT4-fs warning (device loop8): dx_probe:946: inode #2: comm syz-executor: Corrupt directory, running e2fsck is recommended [ 56.356424][ T547] EXT4-fs warning (device loop2): dx_probe:946: inode #2: comm syz-executor: Corrupt directory, running e2fsck is recommended [ 56.382518][ T522] EXT4-fs error (device loop7): ext4_readdir:223: inode #11: comm syz-executor: path /0/file1/lost+found: directory fails checksum at offset 5120 [ 56.398859][ T524] EXT4-fs error (device loop8): ext4_readdir:263: inode #2: block 4: comm syz-executor: path /0/file1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4293793778, rec_len=62303, size=1024 fake=0 [ 56.398871][ T522] EXT4-fs error (device loop7): ext4_readdir:223: inode #11: comm syz-executor: path /0/file1/lost+found: directory fails checksum at offset 8192 [ 56.399665][ T547] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path /0/file1/lost+found: directory fails checksum at offset 0 [ 56.426445][ T524] EXT4-fs warning (device loop8): dx_probe:806: inode #2: comm syz-executor: Unrecognised inode hash code 89 [ 56.435493][ T522] EXT4-fs warning (device loop7): dx_probe:806: inode #2: comm syz-executor: Unrecognised inode hash code 89 [ 56.455119][ T547] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path /0/file1/lost+found: directory fails checksum at offset 1024 [ 56.461760][ T522] EXT4-fs warning (device loop7): dx_probe:946: inode #2: comm syz-executor: Corrupt directory, running e2fsck is recommended [ 56.488793][ T112] ------------[ cut here ]------------ [ 56.501125][ T522] EXT4-fs error (device loop7): ext4_empty_dir:3077: inode #11: comm syz-executor: Directory block failed checksum [ 56.507501][ T547] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:404: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 56.519784][ T522] EXT4-fs error (device loop7): ext4_readdir:223: inode #11: comm syz-executor: path /0/file1/lost+found: directory fails checksum at offset 0 [ 56.535360][ T524] EXT4-fs warning (device loop8): dx_probe:946: inode #2: comm syz-executor: Corrupt directory, running e2fsck is recommended [ 56.550617][ T522] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:404: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 56.563752][ T112] kernel BUG at net/ipv4/fib_semantics.c:2019! [ 56.580145][ T522] EXT4-fs warning (device loop7): dx_probe:806: inode #2: comm syz-executor: Unrecognised inode hash code 89 [ 56.587367][ T547] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path /0/file1/lost+found: directory fails checksum at offset 3072 [ 56.597637][ T522] EXT4-fs warning (device loop7): dx_probe:946: inode #2: comm syz-executor: Corrupt directory, running e2fsck is recommended [ 56.613770][ T524] EXT4-fs warning (device loop8): ext4_dirblock_csum_verify:404: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 56.642114][ T112] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 56.648279][ T112] CPU: 0 PID: 112 Comm: kworker/u4:2 Tainted: G B syzkaller #0 [ 56.657468][ T112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 56.667569][ T112] Workqueue: netns cleanup_net [ 56.672373][ T112] RIP: 0010:fib_sync_down_dev+0x817/0x820 [ 56.678119][ T112] Code: f8 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ed f8 ff ff 48 89 df e8 a8 9c bf fd e9 e0 f8 ff ff e8 4e 29 95 00 e8 19 ae 85 fd <0f> 0b 0f 1f 80 00 00 00 00 55 48 89 e5 41 57 41 56 41 55 41 54 53 [ 56.698127][ T112] RSP: 0018:ffffc90000b67720 EFLAGS: 00010293 [ 56.704228][ T112] RAX: ffffffff83ddf667 RBX: 1ffff110219de2e5 RCX: ffff88810df462c0 [ 56.712326][ T112] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 56.720573][ T112] RBP: ffffc90000b67840 R08: ffff88810df462c0 R09: 0000000000000005 [ 56.728985][ T112] R10: 0000000000000015 R11: 0000000000000000 R12: ffff88812c57f080 [ 56.737227][ T112] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88810cef16c8 [ 56.745233][ T112] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 56.754341][ T112] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.760953][ T112] CR2: 0000555577d98528 CR3: 000000010cfbc000 CR4: 00000000003506b0 [ 56.769174][ T112] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 56.777483][ T112] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 56.785476][ T112] Call Trace: [ 56.788880][ T112] ? ip_ma_put+0xf7/0x140 [ 56.793308][ T112] ? fib_sync_mtu+0x480/0x480 [ 56.798039][ T112] ? ip_mc_down+0x1b0/0x240 [ 56.802572][ T112] ? inetdev_event+0x2c7/0x1030 [ 56.807460][ T112] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 56.813292][ T112] ? devinet_exit_net+0x220/0x220 [ 56.818493][ T112] fib_netdev_event+0x316/0x5d0 [ 56.823582][ T112] raw_notifier_call_chain+0x90/0x100 [ 56.828983][ T112] dev_close_many+0x330/0x4d0 [ 56.833860][ T112] ? __dev_open+0x4c0/0x4c0 [ 56.838515][ T112] ? slab_free_freelist_hook+0xc5/0x190 [ 56.844215][ T112] ? __kasan_check_read+0x11/0x20 [ 56.849501][ T112] unregister_netdevice_many+0x44c/0x1980 [ 56.855255][ T112] ? alloc_netdev_mqs+0xc80/0xc80 [ 56.860317][ T112] ? unregister_netdevice_queue+0x1aa/0x360 [ 56.866331][ T112] ? list_netdevice+0x4c0/0x4c0 [ 56.871312][ T112] ? br_dev_delete+0xfc/0x110 [ 56.874994][ T547] BUG: Bad rss-counter state mm:ffff888128813700 type:MM_FILEPAGES val:16 [ 56.876177][ T112] default_device_exit_batch+0x330/0x390 [ 56.885305][ T547] BUG: non-zero pgtables_bytes on freeing mm: 8192 [ 56.890813][ T112] ? default_device_exit+0x390/0x390 [ 56.898260][ T524] EXT4-fs error (device loop8): ext4_readdir:223: inode #11: comm syz-executor: path /0/file1/lost+found: directory fails checksum at offset 0 [ 56.902774][ T112] ? wait_woken+0x180/0x180 [ 56.902791][ T112] ? rtnl_unlock+0xe/0x10 [ 56.902800][ T112] ? default_device_exit+0x390/0x390 [ 56.902811][ T112] cleanup_net+0x5fb/0xb70 [ 56.902823][ T112] ? __kasan_check_write+0x14/0x20 [ 56.902832][ T112] ? ops_init+0x4a0/0x4a0 [ 56.902845][ T112] ? read_word_at_a_time+0x12/0x20 [ 56.902853][ T112] ? strscpy+0x9b/0x290 [ 56.902863][ T112] process_one_work+0x6e1/0xba0 [ 56.902873][ T112] worker_thread+0xa6a/0x13b0 [ 56.902885][ T112] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 56.902896][ T112] ? __kasan_check_read+0x11/0x20 [ 56.902906][ T112] kthread+0x346/0x3d0 [ 56.902913][ T112] ? worker_clr_flags+0x190/0x190 [ 56.902921][ T112] ? kthread_blkcg+0xd0/0xd0 [ 56.902931][ T112] ret_from_fork+0x1f/0x30 [ 56.902937][ T112] Modules linked in: [ 56.905678][ T112] ---[ end trace 7f183d760ee5fdf9 ]--- [ 56.905695][ T112] RIP: 0010:fib_sync_down_dev+0x817/0x820 [ 56.905704][ T112] Code: f8 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ed f8 ff ff 48 89 df e8 a8 9c bf fd e9 e0 f8 ff ff e8 4e 29 95 00 e8 19 ae 85 fd <0f> 0b 0f 1f 80 00 00 00 00 55 48 89 e5 41 57 41 56 41 55 41 54 53 [ 56.905709][ T112] RSP: 0018:ffffc90000b67720 EFLAGS: 00010293 [ 56.905720][ T112] RAX: ffffffff83ddf667 RBX: 1ffff110219de2e5 RCX: ffff88810df462c0 [ 56.905725][ T112] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 56.905731][ T112] RBP: ffffc90000b67840 R08: ffff88810df462c0 R09: 0000000000000005 [ 56.905736][ T112] R10: 0000000000000015 R11: 0000000000000000 R12: ffff88812c57f080 [ 56.905742][ T112] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88810cef16c8 [ 56.905749][ T112] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 56.905755][ T112] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.905760][ T112] CR2: 0000555577d98528 CR3: 000000010cfbc000 CR4: 00000000003506b0 [ 56.905769][ T112] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 56.905774][ T112] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 56.905779][ T112] Kernel panic - not syncing: Fatal exception [ 56.905916][ T112] Kernel Offset: disabled [ 57.127789][ T112] Rebooting in 86400 seconds..