last executing test programs: 1.323007867s ago: executing program 3 (id=4): r0 = syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x2200045, &(0x7f0000000340)=ANY=[], 0x0, 0x2c6, &(0x7f0000000840)="$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") statfs(&(0x7f0000000000)='./file0\x00', 0x0) fstatfs(r0, 0x0) 1.197403742s ago: executing program 1 (id=3): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002300)=""/3, 0x3}], 0x1}, 0x7}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "4c15aaebf8115bf12fb9ac190d3133d9bf7a4e2668737c8f", "442d8d09655ef5b39b9341017e8c61aab6f4f84873750b8763fb610be2f0a0e5"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 849.644593ms ago: executing program 3 (id=5): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f00000008c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000640)={0x84, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000810}, 0x4004040) 384.242057ms ago: executing program 1 (id=6): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ifreq(r0, 0x8970, &(0x7f0000000080)={'ip_vti0\x00', @ifru_map={0x0, 0x1, 0x7fff, 0x3, 0x7, 0x3}}) 290.70583ms ago: executing program 3 (id=7): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f0000000000), 0x5, 0x4ba, &(0x7f00000002c0)="$eJzs3N9rHNUeAPDvbJJNe9vc7O291x/9YVerGPyRNGnVPgj+QKEvgqAP9TGmaalNG2ki2BJsFKmP0r+g+ij4F/ikL6KCoPiqj4IIRfLS2gcZmd2dZLPZjZs0m22Tzwe2OWfOzJxzZubMnjmnswFsW+XsnyRid0T8HBGD1ejyFcrVPzcX5ib+XJibSCJNX/sjqax3Y2FuIl81325XLTJUiCh8mMS+JvnOXLx0dnxqavJCLT4ye+7tkZmLl548c2789OTpyfNjx44dPTL6zNNjT21IPQeysu59b3r//cffuPrKxImrb377eVbe3bX0GwtzxeVblPLA3ohIG/f3fBt5lqO8/FjWeWRtxb/jDdSFk94uFoQ16YmI7HT1Vdr/YPTE0skbjJc/iCh0tXxA56RpmvavWJrdFXZmgfkU2MKS6HYJgO7Iv/Gz5/j8s8ldkK66/kL1ASir983ap5rSW3nyKZeqz0YDHcq/HAcj4ta1E/O3rkXDeAoAQCd8mfV/nmjW/yvEPXXr/bs2N1SKiP9ExJ6I+G9E/C8i/h9RWffeiLiv3YyT5lMjK/s/P+5cZ9XakvX/nq3NbS3v/y2Oe5d6arGBSv37klNnpiYP147JUPT1Z/HRVfL46qWfPm6VVo6IrO+Xf7L8875grRy/9zYM0J0cnx2/nTrXu34wYm9vs/onizMBSexY9/4HihFnHvtsf6v0f67/KjZgnin9NOLR6vmfj4b655LV5ydHdsTU5OGR/KpY6bsfrrzaKv/bqv8GuP5+xL+aXv+L9S8l9fO1M2vOovfKLx+1fKZZ7/VfTF6vhPNJ23fHZ2cvjEYUk/mVy8eWts3j+fpZ/YcONW//eyL++qS23b6IyC7iAxHxQETlqS0r+4MR8VBEHFrlAHzz4sNvZX+/X1f9Oyur/8k1nf/6QF80LmkW6Dn79Ret8m/v/B+thIZqS5buf2lPq/1WM8/vW60LeFsHDwAAAO4Shcr/gU+SiOq4ye66tGL2HD09M/v4qel3zp+sppWir5CPdA3WjYeO1saG8/hYQ/xIZdw4TdN0ZyU+PDE91ak5daA9u6rtvzC8eC8oFIaHq2m/NYyuPdeVEgIdtaZ5tFZvtAF3pfbav4YPW9Fi+1/5JmBO44ctqtr+ewa7XQ5g8/m9Fti+mrX/yxE3u1AUYJP5/oftS/uH7Wut7b/UoXIAm8/3P2xLy1+JL0Ybr/O3FdhzfGP2szUDkSwd+Z5ul6d/fZtH4Q45mPWBpElSYXHJgV/zH4YotL3n4oYULFZbpz8i2t3h5disg9ntOxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDG+DsAAP//KI/hOg==") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYBLOB="001000008000000008000f0020"], 0xe8}}, 0x0) 290.148691ms ago: executing program 2 (id=2): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_icmp(0xa, 0x2, 0x3a) 230.523853ms ago: executing program 1 (id=8): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@data_err_ignore}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@grpid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3c}}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}]}, 0x5, 0x476, &(0x7f00000006c0)="$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") r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 0s ago: executing program 0 (id=1): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000000c0)='./file0\x00', 0x10108c0, &(0x7f00000006c0)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt,shortname=win95\x00\x00ni_xlate=0,showexec,shortname=winnt,shortname=win95,nonumtairodir,nonumtail=0,shortname=mixed,nfs=nostale_ro,utf8=0,\x00', @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESHEX], 0x1, 0x26c, &(0x7f0000000340)="$eJzs3U9rU1kYB+A3bTpJC0OyGCgzDMwdZjOr0HaYfcrQgWECipKFriw2RWlqoYWCLtruit9Bv4Iu3QouxK1fQASpghvrqgshEm//JDWJjZpG7PNs+nLu++Ock17upYueXPl1eWlhZW1xd3cn8vlMZMtRjr1MFGMkRiO1FQDA92Sv0Yg3jdSw1wIAnA7vfwA4e3q9/zNbh2PnT39lAMCgfNHf/yMDWRIAMGAXL13+f7ZSmbuQJPmI5e316no1/Zlen12M61GPWkxFId5FNA6l9b//VeamkqaXxcgvb46k+c316mh7fjoKUeycn05SUW3mDvJjMbGffzYRtZiJQvzUOT/TMf9D/PlHy/ylKMTTq7ES9ViIZjbN5yJiYzpJ/jlXOZbPfegDAAAAAAAAAAAAAAAAAAAAAIBBKCWHiu3n36Tn95RK3a6n+dbzgcZ7nQ/U2Dx2vk42fskOd+8AAAAAAAAAAAAAAAAAAADwrVi7eWtpvl6vrfYqbjy592gnlwY+2dy7yOzP219qu2fP+Ml2caz48fcXdzpdykWu38/n84qxiGgdSfanfPjbACf9WsXjnWs//7U2+Xe3nsi2jtxubrWtp8uNlB3UB/66ENG1J9/3Ddla3D8oym8/6jm4lWqr48P+xU3eLc8/2Hj+6qSpHg+NxuggHkUAAAAAAAAAAAAAAAAAAHDmHf3T77BXAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADDc/T9//0WuWgbyXdt3hr2HgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4H0AAAD//7qXlSU=") timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000280)=""/59, 0x5e) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.74' (ED25519) to the list of known hosts. syzkaller login: [ 66.123661][ T5761] cgroup: Unknown subsys name 'net' [ 66.261052][ T5761] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.585727][ T5761] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.005153][ T5774] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.013617][ T5774] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.021247][ T5774] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.029470][ T5774] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.040376][ T5774] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.053986][ T5777] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.062043][ T5779] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.071644][ T5779] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.079462][ T5779] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.089556][ T5777] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.131909][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.137781][ T5777] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.140618][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.146984][ T5777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.154631][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.166999][ T5779] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.168051][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.183898][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.188646][ T5779] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 69.191522][ T5782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 69.198320][ T5779] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.205521][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 69.219332][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.224711][ T5779] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.586289][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 69.688683][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 69.715011][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 69.811730][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.819837][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.827215][ T5775] bridge_slave_0: entered allmulticast mode [ 69.833880][ T5775] bridge_slave_0: entered promiscuous mode [ 69.865946][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.873074][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.880466][ T5775] bridge_slave_1: entered allmulticast mode [ 69.887375][ T5775] bridge_slave_1: entered promiscuous mode [ 69.907837][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.916623][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.923707][ T5772] bridge_slave_0: entered allmulticast mode [ 69.930548][ T5772] bridge_slave_0: entered promiscuous mode [ 69.939653][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.947040][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.954155][ T5772] bridge_slave_1: entered allmulticast mode [ 69.960882][ T5772] bridge_slave_1: entered promiscuous mode [ 69.981480][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 70.033426][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.046112][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.061443][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.069547][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.077139][ T5783] bridge_slave_0: entered allmulticast mode [ 70.083778][ T5783] bridge_slave_0: entered promiscuous mode [ 70.092703][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.104405][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.130040][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.137825][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.146015][ T5783] bridge_slave_1: entered allmulticast mode [ 70.152639][ T5783] bridge_slave_1: entered promiscuous mode [ 70.199789][ T5775] team0: Port device team_slave_0 added [ 70.211931][ T5772] team0: Port device team_slave_0 added [ 70.227381][ T5775] team0: Port device team_slave_1 added [ 70.235190][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.252014][ T5772] team0: Port device team_slave_1 added [ 70.259599][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.328110][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.335310][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.361681][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.386645][ T5783] team0: Port device team_slave_0 added [ 70.392682][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.401497][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.408699][ T5776] bridge_slave_0: entered allmulticast mode [ 70.416001][ T5776] bridge_slave_0: entered promiscuous mode [ 70.423425][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.431211][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.459586][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.471250][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.478625][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.504594][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.517260][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.524215][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.550217][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.562998][ T5783] team0: Port device team_slave_1 added [ 70.578243][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.585427][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.592855][ T5776] bridge_slave_1: entered allmulticast mode [ 70.599577][ T5776] bridge_slave_1: entered promiscuous mode [ 70.626255][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.660469][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.667546][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.693676][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.719730][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.734560][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.741513][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.769755][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.818025][ T5775] hsr_slave_0: entered promiscuous mode [ 70.824434][ T5775] hsr_slave_1: entered promiscuous mode [ 70.851951][ T5776] team0: Port device team_slave_0 added [ 70.886794][ T5772] hsr_slave_0: entered promiscuous mode [ 70.892931][ T5772] hsr_slave_1: entered promiscuous mode [ 70.899335][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.907483][ T5772] Cannot create hsr debugfs directory [ 70.916160][ T5776] team0: Port device team_slave_1 added [ 70.925875][ T5783] hsr_slave_0: entered promiscuous mode [ 70.932012][ T5783] hsr_slave_1: entered promiscuous mode [ 70.939254][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.946858][ T5783] Cannot create hsr debugfs directory [ 71.042726][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.049767][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.075901][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.092463][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.099548][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.126684][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.265353][ T5782] Bluetooth: hci1: command tx timeout [ 71.267762][ T5088] Bluetooth: hci0: command tx timeout [ 71.271132][ T5779] Bluetooth: hci3: command tx timeout [ 71.276772][ T51] Bluetooth: hci2: command tx timeout [ 71.294119][ T5776] hsr_slave_0: entered promiscuous mode [ 71.300485][ T5776] hsr_slave_1: entered promiscuous mode [ 71.307092][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.314725][ T5776] Cannot create hsr debugfs directory [ 71.433630][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.440198][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.480896][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.493535][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.504435][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.533817][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.593988][ T5772] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.613275][ T5772] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.633680][ T5772] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.653517][ T5772] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.700989][ T5783] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.711024][ T5783] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.739766][ T5783] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.753185][ T5783] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.822202][ T5776] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.833554][ T5776] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.855174][ T5776] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.871625][ T5776] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.898534][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.957096][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.982161][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.989487][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.018179][ T3521] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.025326][ T3521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.062120][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.083989][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.128463][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.148997][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.171698][ T3559] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.178810][ T3559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.190399][ T3559] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.197506][ T3559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.218108][ T3521] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.225260][ T3521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.259061][ T3521] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.266219][ T3521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.304269][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.382781][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.434148][ T5772] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.456898][ T3559] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.464017][ T3559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.513160][ T3559] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.520386][ T3559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.727773][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.758222][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.860551][ T5775] veth0_vlan: entered promiscuous mode [ 72.915976][ T5783] veth0_vlan: entered promiscuous mode [ 72.923587][ T5775] veth1_vlan: entered promiscuous mode [ 72.942053][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.966727][ T5783] veth1_vlan: entered promiscuous mode [ 73.019816][ T5775] veth0_macvtap: entered promiscuous mode [ 73.030867][ T5775] veth1_macvtap: entered promiscuous mode [ 73.051532][ T5772] veth0_vlan: entered promiscuous mode [ 73.083723][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.093749][ T5772] veth1_vlan: entered promiscuous mode [ 73.104056][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.113529][ T5783] veth0_macvtap: entered promiscuous mode [ 73.137180][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.150321][ T5783] veth1_macvtap: entered promiscuous mode [ 73.175895][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.189594][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.200515][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.209455][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.220916][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.234186][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.248901][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.267763][ T5772] veth0_macvtap: entered promiscuous mode [ 73.289315][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.300009][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.312656][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.323640][ T5783] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.333084][ T5783] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.343613][ T5783] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.352971][ T51] Bluetooth: hci2: command tx timeout [ 73.352999][ T51] Bluetooth: hci0: command tx timeout [ 73.354690][ T51] Bluetooth: hci1: command tx timeout [ 73.358703][ T5088] Bluetooth: hci3: command tx timeout [ 73.378500][ T5783] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.401696][ T5772] veth1_macvtap: entered promiscuous mode [ 73.469622][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.480303][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.490561][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.503036][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.516927][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.538579][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.551857][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.562219][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.572686][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.583656][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.594098][ T5776] veth0_vlan: entered promiscuous mode [ 73.622342][ T5772] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.631315][ T5772] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.640087][ T5772] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.649110][ T5772] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.691417][ T5776] veth1_vlan: entered promiscuous mode [ 73.719972][ T3474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.732207][ T3474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.755281][ T3559] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.763214][ T3559] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.852511][ T5036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.861947][ T5036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.893021][ T5776] veth0_macvtap: entered promiscuous mode [ 73.903068][ T5776] veth1_macvtap: entered promiscuous mode [ 73.913140][ T5036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.924071][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.934171][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.938307][ T5036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.002165][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.024865][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.040430][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.050898][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.060858][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.071582][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.083309][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.094416][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.117048][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.139373][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.151624][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.162033][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.172768][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.186490][ T5834] syz.3.4[5834]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 74.196878][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.213793][ T5834] loop3: detected capacity change from 0 to 512 [ 74.222315][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.231893][ T5776] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.249757][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.262815][ T5776] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.285112][ T5776] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.305257][ T5834] ======================================================= [ 74.305257][ T5834] WARNING: The mand mount option has been deprecated and [ 74.305257][ T5834] and is ignored by this kernel. Remove the mand [ 74.305257][ T5834] option from the mount to silence this warning. [ 74.305257][ T5834] ======================================================= [ 74.334987][ T5776] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.463545][ T5834] FAT-fs (loop3): FAT read failed (blocknr 128) [ 74.492526][ T5838] FAT-fs (loop3): FAT read failed (blocknr 128) [ 74.973393][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.997484][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.021334][ T5840] netlink: 'syz.3.5': attribute type 10 has an invalid length. [ 75.097970][ T5840] team0: Port device dummy0 added [ 75.140885][ T5840] syz.3.5 (5840) used greatest stack depth: 20688 bytes left [ 75.196020][ T3474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.219268][ T3474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.289444][ T5849] loop1: detected capacity change from 0 to 512 [ 75.298873][ T5848] loop3: detected capacity change from 0 to 512 [ 75.330476][ T5849] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 75.387975][ T5848] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.7: bad orphan inode 13 [ 75.422369][ T5849] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.8: bg 0: block 127: padding at end of block bitmap is not set [ 75.425490][ T5088] Bluetooth: hci3: command tx timeout [ 75.447245][ T5088] Bluetooth: hci1: command tx timeout [ 75.453199][ T5088] Bluetooth: hci0: command tx timeout [ 75.459304][ T51] Bluetooth: hci2: command tx timeout [ 75.495973][ T5849] ------------[ cut here ]------------ [ 75.501711][ T5849] EA inode 11 i_nlink=0 [ 75.502079][ T5848] ext4_test_bit(bit=12, block=4) = 1 [ 75.536056][ T5848] is_bad_inode(inode)=0 [ 75.540273][ T5848] NEXT_ORPHAN(inode)=0 [ 75.544356][ T5848] max_ino=32 [ 75.565444][ T5849] WARNING: CPU: 1 PID: 5849 at fs/ext4/xattr.c:1059 ext4_xattr_inode_update_ref+0x53c/0x590 [ 75.572915][ T5855] loop0: detected capacity change from 0 to 256 [ 75.575695][ T5849] Modules linked in: [ 75.575745][ T5849] CPU: 1 PID: 5849 Comm: syz.1.8 Not tainted syzkaller #0 [ 75.593862][ T5849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 75.604114][ T5849] RIP: 0010:ext4_xattr_inode_update_ref+0x53c/0x590 [ 75.610934][ T5849] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 85 d2 98 ff 49 8b 37 48 c7 c7 60 dc de 8a 89 da e8 54 44 0a ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 ab fe ff ff e8 2e c1 41 08 [ 75.630738][ T5849] RSP: 0018:ffffc900049ff2e0 EFLAGS: 00010246 [ 75.632624][ T5848] i_nlink=1 [ 75.636920][ T5849] RAX: 6d558863065fef00 RBX: 0000000000000000 RCX: 0000000000080000 [ 75.636939][ T5849] RDX: ffffc9000d79b000 RSI: 0000000000042268 RDI: 0000000000042269 [ 75.636953][ T5849] RBP: ffffc900049ff3d0 R08: ffff8880b8f28c53 R09: 1ffff110171e518a [ 75.636969][ T5849] R10: dffffc0000000000 R11: ffffed10171e518b R12: dffffc0000000000 [ 75.636983][ T5849] R13: ffff8880781fd4a8 R14: ffff8880781fd2b0 R15: ffff8880781fd300 [ 75.636999][ T5849] FS: 00007f57d9a806c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 75.637017][ T5849] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.637032][ T5849] CR2: 000055804497a350 CR3: 000000002b769000 CR4: 00000000003506e0 [ 75.637050][ T5849] Call Trace: [ 75.637071][ T5849] [ 75.637085][ T5849] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 75.637124][ T5849] ? __ext4_journal_ensure_credits+0x30/0x450 [ 75.653421][ T5855] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 75.657530][ T5849] ext4_xattr_inode_dec_ref_all+0x9ad/0x1060 [ 75.688778][ T5848] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.690419][ T5849] ? ext4_xattr_delete_inode+0xd10/0xd10 [ 75.760107][ T5849] ? __ext4_journal_ensure_credits+0x450/0x450 [ 75.766499][ T5849] ext4_xattr_delete_inode+0xb3e/0xd10 [ 75.772007][ T5849] ? up_write+0x1c3/0x410 [ 75.776436][ T5849] ? ext4_expand_extra_isize_ea+0x1e80/0x1e80 [ 75.782558][ T5849] ext4_evict_inode+0xaaf/0xea0 [ 75.787492][ T5849] ? _raw_spin_unlock+0x28/0x40 [ 75.792390][ T5849] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 75.798405][ T5849] ? do_raw_spin_unlock+0x121/0x230 [ 75.803640][ T5849] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 75.809693][ T5849] evict+0x4ca/0x8d0 [ 75.813629][ T5849] ? proc_nr_inodes+0x230/0x230 [ 75.818546][ T5849] ? do_raw_spin_unlock+0x121/0x230 [ 75.823783][ T5849] ? _raw_spin_unlock+0x28/0x40 [ 75.829631][ T5849] ? iput+0x706/0x920 [ 75.833677][ T5849] ext4_orphan_cleanup+0xbec/0x1420 [ 75.838970][ T5849] ? ext4_orphan_del+0xbf0/0xbf0 [ 75.843930][ T5849] ? ext4_register_li_request+0x183/0x940 [ 75.849725][ T5849] ? errseq_check_and_advance+0x66/0x120 [ 75.855513][ T5849] ext4_fill_super+0x5eea/0x67b0 [ 75.861050][ T5849] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 75.867872][ T5849] ? __might_sleep+0xe0/0xe0 [ 75.872499][ T5849] ? read_lock_is_recursive+0x20/0x20 [ 75.878048][ T5849] ? snprintf+0xe9/0x140 [ 75.882341][ T5849] ? down_read_killable+0x340/0x340 [ 75.887718][ T5849] ? setup_bdev_super+0x56b/0x660 [ 75.892781][ T5849] get_tree_bdev+0x3f3/0x520 [ 75.897478][ T5849] ? vfs_parse_fs_string+0x170/0x170 [ 75.902797][ T5849] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 75.910905][ T5849] ? setup_bdev_super+0x660/0x660 [ 75.916086][ T5849] ? apparmor_capable+0x137/0x1a0 [ 75.921145][ T5849] ? bpf_lsm_capable+0x9/0x10 [ 75.925905][ T5849] ? security_capable+0x89/0xb0 [ 75.930795][ T5849] vfs_get_tree+0x8c/0x280 [ 75.935277][ T5849] do_new_mount+0x24b/0xa40 [ 75.939802][ T5849] __se_sys_mount+0x2e7/0x3d0 [ 75.944594][ T5849] ? __x64_sys_mount+0xc0/0xc0 [ 75.949400][ T5849] ? lockdep_hardirqs_on+0x98/0x150 [ 75.954716][ T5849] ? __x64_sys_mount+0x20/0xc0 [ 75.959510][ T5849] do_syscall_64+0x55/0xb0 [ 75.964541][ T5849] ? clear_bhb_loop+0x40/0x90 [ 75.969381][ T5849] ? clear_bhb_loop+0x40/0x90 [ 75.974086][ T5849] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 75.980076][ T5849] RIP: 0033:0x7f57d8b9e0ca [ 75.985082][ T5849] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.004819][ T5849] RSP: 002b:00007f57d9a7fe58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 76.013272][ T5849] RAX: ffffffffffffffda RBX: 00007f57d9a7fee0 RCX: 00007f57d8b9e0ca [ 76.021350][ T5849] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007f57d9a7fea0 [ 76.029398][ T5849] RBP: 0000200000000180 R08: 00007f57d9a7fee0 R09: 0000000000000000 [ 76.037521][ T5849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 76.045643][ T5849] R13: 00007f57d9a7fea0 R14: 0000000000000476 R15: 00002000000001c0 [ 76.053663][ T5849] [ 76.056761][ T5849] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 76.064064][ T5849] CPU: 1 PID: 5849 Comm: syz.1.8 Not tainted syzkaller #0 [ 76.071188][ T5849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 76.081260][ T5849] Call Trace: [ 76.084553][ T5849] [ 76.087495][ T5849] dump_stack_lvl+0x18c/0x250 [ 76.092198][ T5849] ? show_regs_print_info+0x20/0x20 [ 76.097416][ T5849] ? load_image+0x420/0x420 [ 76.101953][ T5849] panic+0x2dc/0x730 [ 76.105884][ T5849] ? bpf_jit_dump+0xd0/0xd0 [ 76.110432][ T5849] __warn+0x2e0/0x470 [ 76.114440][ T5849] ? ext4_xattr_inode_update_ref+0x53c/0x590 [ 76.120449][ T5849] ? ext4_xattr_inode_update_ref+0x53c/0x590 [ 76.126460][ T5849] report_bug+0x2be/0x4f0 [ 76.130812][ T5849] ? ext4_xattr_inode_update_ref+0x53c/0x590 [ 76.136819][ T5849] ? ext4_xattr_inode_update_ref+0x53c/0x590 [ 76.142826][ T5849] ? ext4_xattr_inode_update_ref+0x53e/0x590 [ 76.148834][ T5849] handle_bug+0xcf/0x120 [ 76.153101][ T5849] exc_invalid_op+0x1a/0x50 [ 76.157631][ T5849] asm_exc_invalid_op+0x1a/0x20 [ 76.162509][ T5849] RIP: 0010:ext4_xattr_inode_update_ref+0x53c/0x590 [ 76.169131][ T5849] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 85 d2 98 ff 49 8b 37 48 c7 c7 60 dc de 8a 89 da e8 54 44 0a ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 ab fe ff ff e8 2e c1 41 08 [ 76.188752][ T5849] RSP: 0018:ffffc900049ff2e0 EFLAGS: 00010246 [ 76.194817][ T5849] RAX: 6d558863065fef00 RBX: 0000000000000000 RCX: 0000000000080000 [ 76.202781][ T5849] RDX: ffffc9000d79b000 RSI: 0000000000042268 RDI: 0000000000042269 [ 76.210833][ T5849] RBP: ffffc900049ff3d0 R08: ffff8880b8f28c53 R09: 1ffff110171e518a [ 76.218804][ T5849] R10: dffffc0000000000 R11: ffffed10171e518b R12: dffffc0000000000 [ 76.226770][ T5849] R13: ffff8880781fd4a8 R14: ffff8880781fd2b0 R15: ffff8880781fd300 [ 76.234758][ T5849] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 76.240400][ T5849] ? __ext4_journal_ensure_credits+0x30/0x450 [ 76.246470][ T5849] ext4_xattr_inode_dec_ref_all+0x9ad/0x1060 [ 76.252466][ T5849] ? ext4_xattr_delete_inode+0xd10/0xd10 [ 76.258103][ T5849] ? __ext4_journal_ensure_credits+0x450/0x450 [ 76.264266][ T5849] ext4_xattr_delete_inode+0xb3e/0xd10 [ 76.269747][ T5849] ? up_write+0x1c3/0x410 [ 76.274076][ T5849] ? ext4_expand_extra_isize_ea+0x1e80/0x1e80 [ 76.280157][ T5849] ext4_evict_inode+0xaaf/0xea0 [ 76.285009][ T5849] ? _raw_spin_unlock+0x28/0x40 [ 76.289867][ T5849] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 76.295774][ T5849] ? do_raw_spin_unlock+0x121/0x230 [ 76.300989][ T5849] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 76.306890][ T5849] evict+0x4ca/0x8d0 [ 76.310797][ T5849] ? proc_nr_inodes+0x230/0x230 [ 76.315652][ T5849] ? do_raw_spin_unlock+0x121/0x230 [ 76.320856][ T5849] ? _raw_spin_unlock+0x28/0x40 [ 76.325708][ T5849] ? iput+0x706/0x920 [ 76.329687][ T5849] ext4_orphan_cleanup+0xbec/0x1420 [ 76.334890][ T5849] ? ext4_orphan_del+0xbf0/0xbf0 [ 76.339827][ T5849] ? ext4_register_li_request+0x183/0x940 [ 76.345551][ T5849] ? errseq_check_and_advance+0x66/0x120 [ 76.351185][ T5849] ext4_fill_super+0x5eea/0x67b0 [ 76.356135][ T5849] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 76.362371][ T5849] ? __might_sleep+0xe0/0xe0 [ 76.366961][ T5849] ? read_lock_is_recursive+0x20/0x20 [ 76.372331][ T5849] ? snprintf+0xe9/0x140 [ 76.376591][ T5849] ? down_read_killable+0x340/0x340 [ 76.381790][ T5849] ? setup_bdev_super+0x56b/0x660 [ 76.386811][ T5849] get_tree_bdev+0x3f3/0x520 [ 76.391396][ T5849] ? vfs_parse_fs_string+0x170/0x170 [ 76.396675][ T5849] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 76.402909][ T5849] ? setup_bdev_super+0x660/0x660 [ 76.407933][ T5849] ? apparmor_capable+0x137/0x1a0 [ 76.412957][ T5849] ? bpf_lsm_capable+0x9/0x10 [ 76.417635][ T5849] ? security_capable+0x89/0xb0 [ 76.422487][ T5849] vfs_get_tree+0x8c/0x280 [ 76.426899][ T5849] do_new_mount+0x24b/0xa40 [ 76.431400][ T5849] __se_sys_mount+0x2e7/0x3d0 [ 76.436073][ T5849] ? __x64_sys_mount+0xc0/0xc0 [ 76.440835][ T5849] ? lockdep_hardirqs_on+0x98/0x150 [ 76.446034][ T5849] ? __x64_sys_mount+0x20/0xc0 [ 76.450805][ T5849] do_syscall_64+0x55/0xb0 [ 76.455222][ T5849] ? clear_bhb_loop+0x40/0x90 [ 76.459892][ T5849] ? clear_bhb_loop+0x40/0x90 [ 76.464565][ T5849] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 76.470469][ T5849] RIP: 0033:0x7f57d8b9e0ca [ 76.474882][ T5849] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.494757][ T5849] RSP: 002b:00007f57d9a7fe58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 76.503170][ T5849] RAX: ffffffffffffffda RBX: 00007f57d9a7fee0 RCX: 00007f57d8b9e0ca [ 76.511139][ T5849] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007f57d9a7fea0 [ 76.519113][ T5849] RBP: 0000200000000180 R08: 00007f57d9a7fee0 R09: 0000000000000000 [ 76.527078][ T5849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 76.535044][ T5849] R13: 00007f57d9a7fea0 R14: 0000000000000476 R15: 00002000000001c0 [ 76.543026][ T5849] [ 76.546274][ T5849] Kernel Offset: disabled [ 76.550633][ T5849] Rebooting in 86400 seconds..