[   14.720287][ T5601] 8021q: adding VLAN 0 to HW filter on device bond0
[   14.724192][ T5601] eql: remember to turn off Van-Jacobson compression on your slave devices
[   14.771771][    T9] gvnic 0000:00:00.0 enp0s0: Device link is up.
[   14.781006][ T5510] IPv6: ADDRCONF(NETDEV_CHANGE): enp0s0: link becomes ready
Starting sshd: OK

syzkaller
Warning: Permanently added '10.128.1.6' (ECDSA) to the list of known hosts.
executing program
syzkaller login: [   33.735962][ T5931] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5931 'syz-executor235'
[   33.742028][ T5931] loop0: detected capacity change from 0 to 512
[   33.746224][ T5931] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   33.753662][ T5931] EXT4-fs (loop0): 1 truncate cleaned up
[   33.754862][ T5931] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: writeback.
[   33.760772][ T5931] ------------[ cut here ]------------
[   33.761985][ T5931] WARNING: CPU: 1 PID: 5931 at mm/slab_common.c:935 free_large_kmalloc+0x34/0x12c
[   33.764014][ T5931] Modules linked in:
[   33.764866][ T5931] CPU: 1 PID: 5931 Comm: syz-executor235 Not tainted 6.3.0-rc7-syzkaller-g14f8db1c0f9a #0
[   33.766903][ T5931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023
[   33.769056][ T5931] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[   33.770737][ T5931] pc : free_large_kmalloc+0x34/0x12c
[   33.771839][ T5931] lr : kfree+0xf8/0x19c
[   33.772695][ T5931] sp : ffff80001e5a74e0
[   33.773536][ T5931] x29: ffff80001e5a74e0 x28: ffff0000deac34d8 x27: ffff0000e23195a4
[   33.775208][ T5931] x26: dfff800000000000 x25: 0000000000000020 x24: ffff0000c7a3ad00
[   33.776914][ T5931] x23: ffff0000c7a3a400 x22: 0000000000000000 x21: ffff800008809968
[   33.778674][ T5931] x20: ffff0000e23195a4 x19: fffffc000388c640 x18: ffff80001e5a6e80
[   33.780400][ T5931] x17: ffff800015d6d000 x16: ffff80001236e294 x15: ffff800008a6cf5c
[   33.782123][ T5931] x14: ffff800008a6cb2c x13: ffff800008062fb8 x12: 0000000000000003
[   33.783765][ T5931] x11: 0000000000000000 x10: 0000000000000000 x9 : 05ffc0000000202a
[   33.785396][ T5931] x8 : ffff800018986000 x7 : ffff800008063224 x6 : ffff800008063434
[   33.787094][ T5931] x5 : ffff0000d182bf38 x4 : ffff80001e5a72b0 x3 : 0000000000000000
[   33.788817][ T5931] x2 : 0000000000000006 x1 : ffff0000e23195a4 x0 : fffffc000388c640
[   33.790504][ T5931] Call trace:
[   33.791237][ T5931]  free_large_kmalloc+0x34/0x12c
[   33.792301][ T5931]  kfree+0xf8/0x19c
[   33.793115][ T5931]  kvfree+0x40/0x50
[   33.793955][ T5931]  ext4_expand_extra_isize_ea+0xcec/0x16b4
[   33.795209][ T5931]  __ext4_expand_extra_isize+0x290/0x348
[   33.796430][ T5931]  __ext4_mark_inode_dirty+0x448/0x848
[   33.797595][ T5931]  __ext4_unlink+0x768/0x998
[   33.798591][ T5931]  ext4_unlink+0x1b4/0x6a0
[   33.799578][ T5931]  vfs_unlink+0x2f0/0x508
[   33.800542][ T5931]  do_unlinkat+0x4c8/0x82c
[   33.801481][ T5931]  __arm64_sys_unlinkat+0xcc/0xfc
[   33.802519][ T5931]  invoke_syscall+0x98/0x2c0
[   33.803514][ T5931]  el0_svc_common+0x138/0x258
[   33.804492][ T5931]  do_el0_svc+0x64/0x198
[   33.805354][ T5931]  el0_svc+0x4c/0x15c
[   33.806193][ T5931]  el0t_64_sync_handler+0x84/0xf0
[   33.807288][ T5931]  el0t_64_sync+0x190/0x194
[   33.808315][ T5931] irq event stamp: 16132
[   33.809182][ T5931] hardirqs last  enabled at (16131): [<ffff80000896749c>] kasan_quarantine_put+0x1a0/0x1c8
[   33.811366][ T5931] hardirqs last disabled at (16132): [<ffff800012369e90>] el1_dbg+0x24/0x80
[   33.813234][ T5931] softirqs last  enabled at (15474): [<ffff800008033374>] local_bh_enable+0x10/0x34
[   33.815241][ T5931] softirqs last disabled at (15472): [<ffff800008033340>] local_bh_disable+0x10/0x34
[   33.817239][ T5931] ---[ end trace 0000000000000000 ]---
[   33.819307][ T5931] object pointer: 0x000000001bcaf4ec
[   33.820407][ T5931] ==================================================================
[   33.822165][ T5931] BUG: KASAN: invalid-free in kfree+0xf8/0x19c
[   33.823470][ T5931] Free of addr ffff0000e23195a4 by task syz-executor235/5931
[   33.825038][ T5931] 
[   33.825489][ T5931] CPU: 1 PID: 5931 Comm: syz-executor235 Tainted: G        W          6.3.0-rc7-syzkaller-g14f8db1c0f9a #0
[   33.827855][ T5931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023
[   33.830082][ T5931] Call trace:
[   33.830790][ T5931]  dump_backtrace+0x1b8/0x1e4
[   33.831795][ T5931]  show_stack+0x2c/0x44
[   33.832666][ T5931]  dump_stack_lvl+0xd0/0x124
[   33.833654][ T5931]  print_report+0x174/0x514
[   33.834653][ T5931]  kasan_report_invalid_free+0xc4/0x114
[   33.835804][ T5931]  __kasan_kfree_large+0xa4/0xc0
[   33.836828][ T5931]  free_large_kmalloc+0x64/0x12c
[   33.837930][ T5931]  kfree+0xf8/0x19c
[   33.838748][ T5931]  kvfree+0x40/0x50
[   33.839511][ T5931]  ext4_expand_extra_isize_ea+0xcec/0x16b4
[   33.840769][ T5931]  __ext4_expand_extra_isize+0x290/0x348
[   33.841909][ T5931]  __ext4_mark_inode_dirty+0x448/0x848
[   33.843140][ T5931]  __ext4_unlink+0x768/0x998
[   33.844135][ T5931]  ext4_unlink+0x1b4/0x6a0
[   33.845050][ T5931]  vfs_unlink+0x2f0/0x508
[   33.845895][ T5931]  do_unlinkat+0x4c8/0x82c
[   33.846771][ T5931]  __arm64_sys_unlinkat+0xcc/0xfc
[   33.847743][ T5931]  invoke_syscall+0x98/0x2c0
[   33.848766][ T5931]  el0_svc_common+0x138/0x258
[   33.849760][ T5931]  do_el0_svc+0x64/0x198
[   33.850651][ T5931]  el0_svc+0x4c/0x15c
[   33.851457][ T5931]  el0t_64_sync_handler+0x84/0xf0
[   33.852566][ T5931]  el0t_64_sync+0x190/0x194
[   33.853479][ T5931] 
[   33.853951][ T5931] The buggy address belongs to the physical page:
[   33.855282][ T5931] page:00000000c0a5c392 refcount:2 mapcount:0 mapping:0000000007c227a9 index:0x1 pfn:0x122319
[   33.857424][ T5931] memcg:ffff0000c1964000
[   33.858366][ T5931] aops:def_blk_aops ino:700000
[   33.859371][ T5931] flags: 0x5ffc0000002203e(referenced|uptodate|dirty|lru|active|private|mappedtodisk|node=0|zone=2|lastcpupid=0x7ff)
[   33.861948][ T5931] raw: 05ffc0000002203e fffffc00061e7788 ffff0000c0036030 ffff0000c149ca10
[   33.863755][ T5931] raw: 0000000000000001 ffff0000e1554570 00000002ffffffff ffff0000c1964000
[   33.865491][ T5931] page dumped because: kasan: bad access detected
[   33.866872][ T5931] 
[   33.867340][ T5931] Memory state around the buggy address:
[   33.868548][ T5931]  ffff0000e2319480: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   33.870293][ T5931]  ffff0000e2319500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   33.871992][ T5931] >ffff0000e2319580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   33.873695][ T5931]                                ^
[   33.874749][ T5931]  ffff0000e2319600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   33.876393][ T5931]  ffff0000e2319680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   33.878183][ T5931] ==================================================================
[   33.880109][ T5931] Disabling lock debugging due to kernel taint