last executing test programs: 236.248187ms ago: executing program 1 (id=2): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7012fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a030200020000000000000200000009000200"], 0x80}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xd, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000220000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) 141.340941ms ago: executing program 1 (id=6): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x9, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0xffffffffffffffff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8, 0x9, r2}, @CGW_DST_IF={0x8, 0xa, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 94.459739ms ago: executing program 1 (id=7): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92, 0x0, 0x0, 0x10, &(0x7f0000000480), &(0x7f0000000540), 0x8, 0x15, 0x8, 0x0, 0x0}}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001158000000000000800000850000006d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0xb7023a96bcaf1bd3, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r1, 0x4d, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 0s ago: executing program 1 (id=8): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@jqfmt_vfsold}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.143' (ED25519) to the list of known hosts. [ 31.264070][ T6562] cgroup: Unknown subsys name 'net' [ 31.413788][ T6562] cgroup: Unknown subsys name 'cpuset' [ 31.415676][ T6562] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 31.570531][ T6562] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 33.837277][ T6582] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 33.837816][ T6582] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 33.838023][ T6582] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 33.851877][ T6584] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 33.852474][ T6584] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 33.852727][ T6584] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 33.853003][ T6584] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 33.853342][ T6584] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 33.853558][ T6584] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 33.854701][ T6575] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 33.856580][ T6587] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 33.858176][ T6588] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 33.858556][ T6588] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 33.858696][ T6588] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 33.858992][ T6588] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 33.859203][ T6588] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 33.861195][ T6588] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 33.861610][ T6588] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 33.861945][ T6588] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 33.862600][ T6587] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 33.863891][ T6588] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 33.865462][ T6588] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 33.865888][ T6588] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 33.866098][ T6588] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 33.866927][ T6588] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 34.012061][ T6572] chnl_net:caif_netlink_parms(): no params data found [ 34.049304][ T6574] chnl_net:caif_netlink_parms(): no params data found [ 34.089717][ T6572] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.091227][ T6572] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.092394][ T6572] bridge_slave_0: entered allmulticast mode [ 34.092956][ T6572] bridge_slave_0: entered promiscuous mode [ 34.108724][ T6572] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.110047][ T6572] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.111495][ T6572] bridge_slave_1: entered allmulticast mode [ 34.112915][ T6572] bridge_slave_1: entered promiscuous mode [ 34.140444][ T6573] chnl_net:caif_netlink_parms(): no params data found [ 34.142053][ T6574] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.142200][ T6574] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.142262][ T6574] bridge_slave_0: entered allmulticast mode [ 34.142882][ T6574] bridge_slave_0: entered promiscuous mode [ 34.160481][ T6572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.164263][ T6574] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.165458][ T6574] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.166818][ T6574] bridge_slave_1: entered allmulticast mode [ 34.168422][ T6574] bridge_slave_1: entered promiscuous mode [ 34.174663][ T6572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.190995][ T6572] team0: Port device team_slave_0 added [ 34.201518][ T6572] team0: Port device team_slave_1 added [ 34.208723][ T6574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.216880][ T6572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.218244][ T6572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.222350][ T6572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.227137][ T6574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.230614][ T6578] chnl_net:caif_netlink_parms(): no params data found [ 34.238350][ T6572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.238374][ T6572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.238389][ T6572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.284510][ T6574] team0: Port device team_slave_0 added [ 34.291582][ T6573] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.292085][ T6573] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.292194][ T6573] bridge_slave_0: entered allmulticast mode [ 34.293004][ T6573] bridge_slave_0: entered promiscuous mode [ 34.294474][ T6574] team0: Port device team_slave_1 added [ 34.313909][ T6572] hsr_slave_0: entered promiscuous mode [ 34.314281][ T6572] hsr_slave_1: entered promiscuous mode [ 34.314730][ T6573] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.314757][ T6573] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.314808][ T6573] bridge_slave_1: entered allmulticast mode [ 34.315230][ T6573] bridge_slave_1: entered promiscuous mode [ 34.324124][ T6585] chnl_net:caif_netlink_parms(): no params data found [ 34.341360][ T6574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.341388][ T6574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.341402][ T6574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.349805][ T6573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.358110][ T6574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.359335][ T6574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.362214][ T6574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.362523][ T6578] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.362764][ T6578] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.362841][ T6578] bridge_slave_0: entered allmulticast mode [ 34.363284][ T6578] bridge_slave_0: entered promiscuous mode [ 34.364066][ T6578] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.364097][ T6578] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.364164][ T6578] bridge_slave_1: entered allmulticast mode [ 34.364556][ T6578] bridge_slave_1: entered promiscuous mode [ 34.374522][ T6573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.388306][ T6578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.398334][ T6578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.409748][ T6573] team0: Port device team_slave_0 added [ 34.420993][ T6573] team0: Port device team_slave_1 added [ 34.422003][ T6578] team0: Port device team_slave_0 added [ 34.423666][ T6578] team0: Port device team_slave_1 added [ 34.445915][ T6574] hsr_slave_0: entered promiscuous mode [ 34.447424][ T6574] hsr_slave_1: entered promiscuous mode [ 34.448634][ T6574] debugfs: 'hsr0' already exists in 'hsr' [ 34.449668][ T6574] Cannot create hsr debugfs directory [ 34.457851][ T6585] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.459151][ T6585] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.460530][ T6585] bridge_slave_0: entered allmulticast mode [ 34.461980][ T6585] bridge_slave_0: entered promiscuous mode [ 34.468100][ T6573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.468122][ T6573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.468133][ T6573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.468703][ T6573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.468710][ T6573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.468723][ T6573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.483045][ T6578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.483064][ T6578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.483082][ T6578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.483360][ T6585] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.483789][ T6585] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.483855][ T6585] bridge_slave_1: entered allmulticast mode [ 34.484316][ T6585] bridge_slave_1: entered promiscuous mode [ 34.491437][ T6578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.491453][ T6578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.491469][ T6578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.526123][ T6585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.537041][ T6585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.540214][ T6573] hsr_slave_0: entered promiscuous mode [ 34.541536][ T6573] hsr_slave_1: entered promiscuous mode [ 34.543071][ T6573] debugfs: 'hsr0' already exists in 'hsr' [ 34.544093][ T6573] Cannot create hsr debugfs directory [ 34.569456][ T6578] hsr_slave_0: entered promiscuous mode [ 34.569798][ T6578] hsr_slave_1: entered promiscuous mode [ 34.570016][ T6578] debugfs: 'hsr0' already exists in 'hsr' [ 34.570028][ T6578] Cannot create hsr debugfs directory [ 34.571296][ T6585] team0: Port device team_slave_0 added [ 34.580711][ T6585] team0: Port device team_slave_1 added [ 34.611857][ T6585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.611882][ T6585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.611898][ T6585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.621883][ T6585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.621913][ T6585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.621926][ T6585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.647078][ T6572] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.650330][ T6572] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.661067][ T6572] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.674415][ T6572] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.684477][ T6585] hsr_slave_0: entered promiscuous mode [ 34.684815][ T6585] hsr_slave_1: entered promiscuous mode [ 34.685015][ T6585] debugfs: 'hsr0' already exists in 'hsr' [ 34.685027][ T6585] Cannot create hsr debugfs directory [ 34.727478][ T6574] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 34.732711][ T6574] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 34.734956][ T6574] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 34.737286][ T6574] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 34.765095][ T6572] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.765143][ T6572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.765337][ T6572] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.765360][ T6572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.777455][ T6578] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.784989][ T6578] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.787497][ T6578] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.791896][ T6578] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.806732][ T6574] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.806784][ T6574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.806865][ T6574] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.806890][ T6574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.807485][ T6573] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 34.813760][ T6573] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 34.816346][ T6573] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 34.826117][ T6573] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 34.834103][ T6578] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.834139][ T6578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.834206][ T6578] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.834229][ T6578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.856020][ T6585] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 34.858840][ T6585] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 34.861887][ T6573] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.861930][ T6573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.862009][ T6573] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.862032][ T6573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.867069][ T6585] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 34.871886][ T6585] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 34.883291][ T6585] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.883335][ T6585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.883414][ T6585] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.883440][ T6585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.910860][ T6574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.922027][ T1579] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.923671][ T1579] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.925967][ T1579] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.927357][ T1579] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.929708][ T1579] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.931298][ T1579] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.933576][ T1579] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.934967][ T1579] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.937496][ T1579] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.938872][ T1579] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.945644][ T6574] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.954591][ T6572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.960949][ T1579] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.961001][ T1579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.967076][ T1579] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.967114][ T1579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.971928][ T6585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.987431][ T6572] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.989499][ T6578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.000518][ T6578] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.009221][ T6573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.009746][ T216] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.009764][ T216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.014454][ T6574] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.017569][ T6585] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.019739][ T4397] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.019781][ T4397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.027313][ T216] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.027352][ T216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.032825][ T4397] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.032866][ T4397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.043770][ T4397] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.043823][ T4397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.045831][ T6573] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.058185][ T216] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.058227][ T216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.059150][ T216] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.059167][ T216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.077999][ T216] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.078051][ T216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.127078][ T6574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.178367][ T6574] veth0_vlan: entered promiscuous mode [ 35.180112][ T6574] veth1_vlan: entered promiscuous mode [ 35.187282][ T6574] veth0_macvtap: entered promiscuous mode [ 35.188301][ T6574] veth1_macvtap: entered promiscuous mode [ 35.205219][ T6574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.206244][ T6574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.213950][ T2713] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.214805][ T2713] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.214836][ T2713] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.214851][ T2713] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.270756][ T6578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.288048][ T6573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.295953][ T6585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.302471][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.302501][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.311840][ T6572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.343381][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.343417][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.359667][ T6578] veth0_vlan: entered promiscuous mode [ 35.364963][ T6578] veth1_vlan: entered promiscuous mode [ 35.374520][ T6572] veth0_vlan: entered promiscuous mode [ 35.384731][ T6578] veth0_macvtap: entered promiscuous mode [ 35.387489][ T6578] veth1_macvtap: entered promiscuous mode [ 35.397047][ T6572] veth1_vlan: entered promiscuous mode [ 35.399280][ T6574] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 35.416088][ T6573] veth0_vlan: entered promiscuous mode [ 35.431485][ T6578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.439375][ T6573] veth1_vlan: entered promiscuous mode [ 35.441705][ T6578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.457756][ T6573] veth0_macvtap: entered promiscuous mode [ 35.459274][ T6573] veth1_macvtap: entered promiscuous mode [ 35.468907][ T6572] veth0_macvtap: entered promiscuous mode [ 35.471081][ T2035] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.472781][ T2035] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.472816][ T2035] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.472834][ T2035] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.480589][ T6585] veth0_vlan: entered promiscuous mode [ 35.484188][ T6572] veth1_macvtap: entered promiscuous mode [ 35.496992][ T6573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.501863][ T6585] veth1_vlan: entered promiscuous mode [ 35.520156][ T6572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.521167][ T6572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.538775][ T216] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.538824][ T216] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.538846][ T216] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.538861][ T216] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.544555][ T6573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.553571][ T2035] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.566822][ T2035] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.566883][ T2035] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.566905][ T2035] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.591132][ T3470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.593431][ T3470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.636965][ T6694] loop1: detected capacity change from 0 to 512 [ 35.666188][ T6585] veth0_macvtap: entered promiscuous mode [ 35.667237][ T6585] veth1_macvtap: entered promiscuous mode [ 35.670818][ T6694] ------------[ cut here ]------------ [ 35.670840][ T6694] EA inode 11 i_nlink=2 [ 35.675195][ T6694] WARNING: fs/ext4/xattr.c:1058 at ext4_xattr_inode_update_ref+0x444/0x44c, CPU#0: syz.1.8/6694 [ 35.676841][ T6694] Modules linked in: [ 35.677414][ T6694] CPU: 0 UID: 0 PID: 6694 Comm: syz.1.8 Not tainted syzkaller #0 PREEMPT [ 35.678731][ T6694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 35.680116][ T6694] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 35.681235][ T6694] pc : ext4_xattr_inode_update_ref+0x444/0x44c [ 35.682138][ T6694] lr : ext4_xattr_inode_update_ref+0x444/0x44c [ 35.683042][ T6694] sp : ffff8000a1586cc0 [ 35.683683][ T6694] x29: ffff8000a1586d70 x28: 0000000000000000 x27: 1fffe0001c2a6dcd [ 35.684862][ T6694] x26: dfff800000000000 x25: ffff8000a1586ce0 x24: ffff7000142b0d9c [ 35.686011][ T6694] x23: ffff800092e86000 x22: ffff0000e1536cb8 x21: 0000000000000002 [ 35.687226][ T6694] x20: 0000000000000001 x19: ffff0000e1536c78 x18: 1fffe0003377d090 [ 35.688407][ T6694] x17: ffff80008f86e000 x16: ffff800082e5c71c x15: 0000000000000001 [ 35.689609][ T6694] x14: 1fffe0003377fb48 x13: 0000000000000000 x12: 0000000000000000 [ 35.690784][ T6694] x11: 0000000000080000 x10: 0000000000000003 x9 : aa17c5d54b485400 [ 35.692003][ T6694] x8 : aa17c5d54b485400 x7 : ffff80008049e510 x6 : 0000000000000000 [ 35.693178][ T6694] x5 : 0000000000000001 x4 : 0000000000000001 x3 : 0000000000000010 [ 35.694361][ T6694] x2 : 0000000000000006 x1 : ffff80008b5a9be0 x0 : 0000000000000001 [ 35.695549][ T6694] Call trace: [ 35.696054][ T6694] ext4_xattr_inode_update_ref+0x444/0x44c (P) [ 35.697020][ T6694] ext4_xattr_set_entry+0x928/0x15c0 [ 35.697823][ T6694] ext4_xattr_ibody_set+0x204/0x5fc [ 35.698591][ T6694] ext4_expand_extra_isize_ea+0xf00/0x1830 [ 35.699429][ T6694] __ext4_expand_extra_isize+0x2a0/0x37c [ 35.700242][ T6694] __ext4_mark_inode_dirty+0x3a8/0x6fc [ 35.701108][ T6694] ext4_evict_inode+0x8dc/0x1058 [ 35.701838][ T6694] evict+0x4e0/0xa74 [ 35.702442][ T6694] iput+0xc54/0xfdc [ 35.703072][ T6694] ext4_process_orphan+0x240/0x2b4 [ 35.703222][ T632] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.703245][ T632] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.704376][ T632] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.704487][ T632] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.708308][ T6694] ext4_orphan_cleanup+0x930/0x107c [ 35.709059][ T6694] ext4_fill_super+0x47e8/0x4f5c [ 35.709783][ T6694] get_tree_bdev_flags+0x360/0x414 [ 35.710540][ T6694] get_tree_bdev+0x2c/0x3c [ 35.711188][ T6694] ext4_get_tree+0x28/0x38 [ 35.711855][ T6694] vfs_get_tree+0x90/0x28c [ 35.712511][ T6694] do_new_mount+0x284/0x944 [ 35.713232][ T6694] path_mount+0x5b4/0xdfc [ 35.713928][ T6694] __arm64_sys_mount+0x3e8/0x468 [ 35.714612][ T6694] invoke_syscall+0x98/0x254 [ 35.715320][ T6694] el0_svc_common+0xe8/0x23c [ 35.715957][ T6694] do_el0_svc+0x48/0x58 [ 35.716571][ T6694] el0_svc+0x5c/0x26c [ 35.717133][ T6694] el0t_64_sync_handler+0x84/0x12c [ 35.717880][ T6694] el0t_64_sync+0x198/0x19c [ 35.718485][ T6694] irq event stamp: 2274 [ 35.719087][ T6694] hardirqs last enabled at (2273): [] finish_lock_switch+0xb0/0x1c0 [ 35.720469][ T6694] hardirqs last disabled at (2274): [] el1_brk64+0x20/0x54 [ 35.721640][ T6694] softirqs last enabled at (1236): [] local_bh_enable+0x10/0x34 [ 35.722961][ T6694] softirqs last disabled at (1234): [] local_bh_disable+0x10/0x34 [ 35.724286][ T6694] ---[ end trace 0000000000000000 ]--- [ 35.726249][ T6694] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.8: iget: bad extra_isize 90 (inode size 256) [ 35.729545][ T6694] EXT4-fs (loop1): Remounting filesystem read-only [ 35.729702][ T6694] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 35.729779][ T6694] EXT4-fs (loop1): 1 orphan inode deleted [ 35.730252][ T6694] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.741435][ T6574] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.744050][ T2035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.744063][ T2035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.794005][ T6585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.801073][ T3470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.802620][ T3470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.806631][ T6585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.811038][ T3470] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.811797][ T3470] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.811817][ T3470] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.811836][ T3470] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.827526][ T5698] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.827561][ T5698] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.854542][ T632] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.854574][ T632] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.872607][ T5698] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.872644][ T5698] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.932938][ T6581] Bluetooth: hci1: command tx timeout [ 35.933156][ T53] Bluetooth: hci3: command tx timeout [ 35.942365][ T53] Bluetooth: hci4: command tx timeout [ 35.942911][ T53] Bluetooth: hci0: command tx timeout [ 35.944397][ T6581] Bluetooth: hci2: command tx timeout [ 38.012179][ T6581] Bluetooth: hci2: command tx timeout [ 38.012227][ T53] Bluetooth: hci4: command tx timeout [ 38.012247][ T53] Bluetooth: hci3: command tx timeout [ 38.012261][ T53] Bluetooth: hci1: command tx timeout [ 38.012330][ T6588] Bluetooth: hci0: command tx timeout [ 40.092431][ T6581] Bluetooth: hci0: command tx timeout [ 40.092492][ T53] Bluetooth: hci3: command tx timeout [ 40.092507][ T6581] Bluetooth: hci4: command tx timeout [ 40.093797][ T6588] Bluetooth: hci1: command tx timeout [ 40.096654][ T6587] Bluetooth: hci2: command tx timeout [ 42.172179][ T6166] Bluetooth: hci0: command tx timeout [ 42.172224][ T6587] Bluetooth: hci1: command tx timeout [ 42.182531][ T6587] Bluetooth: hci2: command tx timeout [ 42.182574][ T6166] Bluetooth: hci4: command tx timeout [ 42.182589][ T6588] Bluetooth: hci3: command tx timeout