last executing test programs:

1.859854624s ago: executing program 0 (id=61):
syz_usb_connect(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8f, 0x3b, 0x60, 0x10, 0x711, 0x200, 0x99a1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x5d, 0x1, 0x2, 0x8, 0xfc, 0x7a, 0xe0, [], [{{0x9, 0x5, 0xc, 0x2, 0x3ff, 0x6f, 0x6, 0x8}}, {{0x9, 0x5, 0x5, 0x2, 0x200, 0x4, 0x9, 0x9}}]}}]}}]}}, 0x0)

628.842099ms ago: executing program 2 (id=79):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x45057bf4ccb05c67, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc9b}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

628.536566ms ago: executing program 0 (id=80):
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000340)='./file1\x00', 0x1804810, &(0x7f0000000180)=ANY=[], 0x76, 0x682, &(0x7f0000000640)="$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")
renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4)

558.461061ms ago: executing program 2 (id=82):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newtaction={0x48, 0x30, 0x2, 0x70bd25, 0x0, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000b95000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000040)=0x40)

508.871056ms ago: executing program 1 (id=83):
r0 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)="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", 0x1000, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000000)={r1, 0x1000, &(0x7f0000002a80)=""/4096})

508.514037ms ago: executing program 2 (id=84):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)

428.788578ms ago: executing program 1 (id=85):
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x8, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000b60901000000000065000c000000000018010000646c6c2500000000002020207b9af8ff000000002d9a00000000000037090000f8ffffffb702000008000000b70300000000000015000000060000003d93000000000000b5030000000000008500000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="640100001900010000000000040000001d0100001500040001000080fe02000031171e44b2b50e8f040000001e0106000000fd0000ec058cdecf0fa4f69652b23bf9968d372a0ddfe196faa30f83514813d0527685407bc8366e2838397d6abc25357799ac708b65efffdb10e1376a4f6d4ab9949102000036dbf30bf928c37695658578feb8f3cce47f43a42919c288f7d5430ffc0226139916866a978312dd970e64629d7cd799c5e08b64de41458eb8951a54a7cf29a810823e869f5c087d15d9d3bae1c089701f970f8e7ce853654222f07959e7cdcfcf27332cb82016ccd91be54e588f6ea7b5c35a62c0ceaa4e90b29c3edc16f20db3d7fb4d6236232de07ccd7d7301f46a287dd296abe9baba499721311e1597853a2d0c7e1e64f827d31e6917175792398e0edaa900000000000000000002c900c08ac1d7b606000000000000000000000000000008000900", @ANYRES32, @ANYBLOB="080005"], 0x164}}, 0x0)

428.337036ms ago: executing program 0 (id=86):
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f00000000c0)='0', 0xfe73)
r2 = syz_io_uring_setup(0x66f, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000380)=<r3=>0x0, &(0x7f0000000200)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27})
io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0)

358.304812ms ago: executing program 1 (id=87):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x48, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x102}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MTU={0x8, 0x4, 0xfffffffd}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0)

267.716795ms ago: executing program 0 (id=88):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x6, &(0x7f0000000380)='\a', 0x1)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4)
sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=""/5, 0x5}, 0x9d39}], 0x1, 0x12141, 0x0)

267.460908ms ago: executing program 1 (id=89):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r0, 0x29, 0x13, &(0x7f0000000280), 0x4)

267.028495ms ago: executing program 2 (id=90):
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x2c8, &(0x7f0000000700)="$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")
syz_emit_ethernet(0x4e, &(0x7f00000007c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@multicast2}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @ssrr={0x89, 0x3, 0xce}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)

217.359602ms ago: executing program 0 (id=91):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
write$binfmt_elf32(r4, &(0x7f00000014c0)=ANY=[], 0x46b)
sendmmsg$inet(r4, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0xa6}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1200}}, 0x0)

148.713453ms ago: executing program 2 (id=92):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_int(r0, 0x29, 0xce, 0x0, 0x0)

148.329678ms ago: executing program 1 (id=93):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)

147.687113ms ago: executing program 0 (id=94):
r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000740), 0x0, 0x559e, &(0x7f0000005680)="$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")
ioctl$BTRFS_IOC_SEND(r0, 0x40489426, 0x0)

67.340461ms ago: executing program 2 (id=95):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f0000000300)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@sysvgroups}]}, 0x1, 0x42f, &(0x7f0000000940)="$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")
setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000001f00)=ANY=[], 0xe00f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)

0s ago: executing program 1 (id=96):
pipe2$watch_queue(&(0x7f0000000000)={<r0=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f00000000c0)={0x1, 0x0, [{0x8, 0x0, 0x2, [0x10, 0x4, 0x3, 0xfff, 0x3ff, 0x4, 0x401, 0x7]}]})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:38662' (ED25519) to the list of known hosts.
syzkaller login: [   56.989610][ T5818] cgroup: Unknown subsys name 'net'
[   57.082401][ T5818] cgroup: Unknown subsys name 'cpuset'
[   57.087907][ T5818] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.651073][ T5818] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   65.384985][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   65.389102][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   65.391817][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   65.398466][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   65.401275][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   65.464370][ T5234] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   65.468165][ T5234] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   65.476563][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   65.488732][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   65.498208][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   65.522581][ T5855] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   65.526032][ T5855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   65.529084][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   65.533984][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   65.538849][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   65.683383][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   65.804745][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.808249][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.810879][ T5845] bridge_slave_0: entered allmulticast mode
[   65.814734][ T5845] bridge_slave_0: entered promiscuous mode
[   65.833820][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.836660][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.839900][ T5845] bridge_slave_1: entered allmulticast mode
[   65.843596][ T5845] bridge_slave_1: entered promiscuous mode
[   65.925281][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.930463][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.966612][ T5845] team0: Port device team_slave_0 added
[   65.976567][ T5845] team0: Port device team_slave_1 added
[   65.979936][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   66.014039][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   66.027479][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.029761][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.038513][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.076030][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.078605][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.086219][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.132256][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.134831][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.137792][ T5850] bridge_slave_0: entered allmulticast mode
[   66.141151][ T5850] bridge_slave_0: entered promiscuous mode
[   66.175630][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.178120][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.180849][ T5850] bridge_slave_1: entered allmulticast mode
[   66.184033][ T5850] bridge_slave_1: entered promiscuous mode
[   66.210852][ T5845] hsr_slave_0: entered promiscuous mode
[   66.213533][ T5845] hsr_slave_1: entered promiscuous mode
[   66.231820][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.234225][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.237291][ T5852] bridge_slave_0: entered allmulticast mode
[   66.240841][ T5852] bridge_slave_0: entered promiscuous mode
[   66.244839][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.247954][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.250767][ T5852] bridge_slave_1: entered allmulticast mode
[   66.253944][ T5852] bridge_slave_1: entered promiscuous mode
[   66.259500][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.288032][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.320535][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.344254][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.352481][ T5850] team0: Port device team_slave_0 added
[   66.376517][ T5850] team0: Port device team_slave_1 added
[   66.380277][ T5852] team0: Port device team_slave_0 added
[   66.398169][ T5852] team0: Port device team_slave_1 added
[   66.430760][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.433577][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.444348][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.468364][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.471117][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.480831][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.486206][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.489333][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.499447][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.518503][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.521255][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.531328][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.604772][ T5850] hsr_slave_0: entered promiscuous mode
[   66.608436][ T5850] hsr_slave_1: entered promiscuous mode
[   66.611455][ T5850] debugfs: 'hsr0' already exists in 'hsr'
[   66.613769][ T5850] Cannot create hsr debugfs directory
[   66.662108][ T5852] hsr_slave_0: entered promiscuous mode
[   66.664419][ T5852] hsr_slave_1: entered promiscuous mode
[   66.666563][ T5852] debugfs: 'hsr0' already exists in 'hsr'
[   66.669160][ T5852] Cannot create hsr debugfs directory
[   66.786707][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.800435][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.818655][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.839638][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.969785][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.980231][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.989014][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   67.004270][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   67.113372][ T5852] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   67.122458][ T5852] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   67.141975][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.145697][ T5852] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   67.156312][ T5852] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   67.199664][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   67.224838][ T3132] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.228048][ T3132] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.248592][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.251201][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.276699][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.332418][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   67.348673][ T5845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   67.364472][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.367244][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.385879][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.388713][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.408923][ T5234] Bluetooth: hci0: command tx timeout
[   67.443723][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.485639][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   67.495772][ T1049] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.498574][ T1049] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.512153][ T1049] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.514796][ T1049] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.568143][ T5234] Bluetooth: hci2: command tx timeout
[   67.569388][ T5848] Bluetooth: hci1: command tx timeout
[   67.612592][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.675857][ T5845] veth0_vlan: entered promiscuous mode
[   67.694181][ T5845] veth1_vlan: entered promiscuous mode
[   67.735777][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.753850][ T5845] veth0_macvtap: entered promiscuous mode
[   67.762316][ T5845] veth1_macvtap: entered promiscuous mode
[   67.804680][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.810752][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.833242][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.838204][ T5850] veth0_vlan: entered promiscuous mode
[   67.862927][ T5864] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.869043][ T5850] veth1_vlan: entered promiscuous mode
[   67.881873][ T5864] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.892690][ T5864] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.906909][ T5864] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.966748][ T5852] veth0_vlan: entered promiscuous mode
[   67.982463][ T5850] veth0_macvtap: entered promiscuous mode
[   67.993729][ T5850] veth1_macvtap: entered promiscuous mode
[   67.999776][ T3132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.002841][ T3132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.027963][ T5852] veth1_vlan: entered promiscuous mode
[   68.049168][ T3039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.053166][ T3039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.054150][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.074404][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.112286][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.135835][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   68.137737][ T5852] veth0_macvtap: entered promiscuous mode
[   68.144817][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.148023][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.150749][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.168692][ T5852] veth1_macvtap: entered promiscuous mode
[   68.208635][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.222977][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.243888][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.257497][ T3039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.261259][ T3039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.268369][ T5912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'.
[   68.277853][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.286631][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.309212][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.365763][ T3039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.376487][ T3039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.422946][ T3132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.426077][ T3132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.486426][ T3132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.491019][ T3132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.584382][ T5917] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3)
[   68.595816][ T5919] loop2: detected capacity change from 0 to 8
[   68.635913][ T5919] SQUASHFS error: xz decompression failed, data probably corrupt
[   68.641367][ T5919] SQUASHFS error: Failed to read block 0x108: -5
[   68.645658][ T5919] SQUASHFS error: Unable to read metadata cache entry [106]
[   68.648800][ T5919] SQUASHFS error: Unable to read inode 0x11f
[   68.808380][ T5925] loop2: detected capacity change from 0 to 2048
[   68.835126][ T5926] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   68.899844][ T5925] NILFS (loop2): error -2 truncating bmap (ino=16)
[   68.964583][ T5925] syz.2.7 (5925) used greatest stack depth: 19528 bytes left
[   69.390737][ T5935] netlink: 52 bytes leftover after parsing attributes in process `syz.2.12'.
[   69.394320][ T5935] netlink: 52 bytes leftover after parsing attributes in process `syz.2.12'.
[   69.436919][ T5928] loop1: detected capacity change from 0 to 40427
[   69.443955][ T5935] netlink: 52 bytes leftover after parsing attributes in process `syz.2.12'.
[   69.451688][ T5928] F2FS-fs (loop1): Wrong SSA boundary, start(3584) end(4096) blocks(0)
[   69.458095][ T5928] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   69.466179][ T5928] F2FS-fs (loop1): build fault injection type: 0x6
[   69.482450][ T5928] F2FS-fs (loop1): invalid crc value
[   69.487307][ T5848] Bluetooth: hci0: command tx timeout
[   69.591356][ T5928] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[   69.601132][ T5928] F2FS-fs (loop1): Start checkpoint disabled!
[   69.622012][ T5928] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   69.628262][ T5928] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[   69.647946][ T5848] Bluetooth: hci2: command tx timeout
[   69.648640][ T5234] Bluetooth: hci1: command tx timeout
[   69.730520][ T5950] af_packet: tpacket_rcv: packet too big, clamped from 3698 to 4294967272. macoff=96
[   69.753794][ T1049] kworker/u10:4: attempt to access beyond end of device
[   69.753794][ T1049] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   69.766928][ T1049] CPU: 1 UID: 0 PID: 1049 Comm: kworker/u10:4 Not tainted syzkaller #0 PREEMPT(full) 
[   69.766975][ T1049] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   69.766985][ T1049] Workqueue: writeback wb_workfn (flush-7:1)
[   69.767011][ T1049] Call Trace:
[   69.767017][ T1049]  <TASK>
[   69.767040][ T1049]  dump_stack_lvl+0x189/0x250
[   69.767062][ T1049]  ? __pfx_dump_stack_lvl+0x10/0x10
[   69.767077][ T1049]  ? __pfx_queue_work_on+0x10/0x10
[   69.767091][ T1049]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   69.767109][ T1049]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   69.767135][ T1049]  f2fs_handle_critical_error+0x37c/0x540
[   69.767161][ T1049]  f2fs_write_end_io+0x886/0xb60
[   69.767190][ T1049]  __submit_merged_bio+0x27a/0x6a0
[   69.767213][ T1049]  __submit_merged_write_cond+0x255/0x530
[   69.767237][ T1049]  f2fs_write_data_pages+0x261d/0x3000
[   69.767284][ T1049]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   69.767315][ T1049]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[   69.767354][ T1049]  ? stack_trace_save+0x9c/0xe0
[   69.767399][ T1049]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[   69.767428][ T1049]  ? trace_f2fs_writepages+0x7f/0x200
[   69.767447][ T1049]  ? f2fs_write_node_pages+0x478/0x6e0
[   69.767469][ T1049]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[   69.767498][ T1049]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   69.767517][ T1049]  do_writepages+0x32e/0x550
[   69.767540][ T1049]  ? reacquire_held_locks+0x127/0x1d0
[   69.767553][ T1049]  ? writeback_sb_inodes+0x384/0x1010
[   69.767577][ T1049]  __writeback_single_inode+0x145/0xff0
[   69.767594][ T1049]  ? do_raw_spin_unlock+0x4d/0x240
[   69.767613][ T1049]  writeback_sb_inodes+0x6c7/0x1010
[   69.767652][ T1049]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   69.767710][ T1049]  ? rcu_is_watching+0x15/0xb0
[   69.767732][ T1049]  wb_writeback+0x43b/0xaf0
[   69.767755][ T1049]  ? queue_io+0x321/0x590
[   69.767773][ T1049]  ? __pfx_wb_writeback+0x10/0x10
[   69.767797][ T1049]  ? _raw_spin_unlock_irq+0x23/0x50
[   69.767817][ T1049]  wb_workfn+0x409/0xef0
[   69.767844][ T1049]  ? __pfx_wb_workfn+0x10/0x10
[   69.767862][ T1049]  ? __lock_acquire+0xab9/0xd20
[   69.767891][ T1049]  ? process_scheduled_works+0x9ef/0x17b0
[   69.767910][ T1049]  ? _raw_spin_unlock_irq+0x23/0x50
[   69.767924][ T1049]  ? process_scheduled_works+0x9ef/0x17b0
[   69.767935][ T1049]  ? process_scheduled_works+0x9ef/0x17b0
[   69.767950][ T1049]  process_scheduled_works+0xae1/0x17b0
[   69.767988][ T1049]  ? __pfx_process_scheduled_works+0x10/0x10
[   69.768016][ T1049]  worker_thread+0x8a0/0xda0
[   69.768032][ T1049]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   69.768054][ T1049]  ? __kthread_parkme+0x7b/0x200
[   69.768078][ T1049]  kthread+0x711/0x8a0
[   69.768096][ T1049]  ? __pfx_worker_thread+0x10/0x10
[   69.768108][ T1049]  ? __pfx_kthread+0x10/0x10
[   69.768126][ T1049]  ? _raw_spin_unlock_irq+0x23/0x50
[   69.768140][ T1049]  ? lockdep_hardirqs_on+0x9c/0x150
[   69.768156][ T1049]  ? __pfx_kthread+0x10/0x10
[   69.768173][ T1049]  ret_from_fork+0x3fc/0x770
[   69.768190][ T1049]  ? __pfx_ret_from_fork+0x10/0x10
[   69.768209][ T1049]  ? __switch_to_asm+0x39/0x70
[   69.768224][ T1049]  ? __switch_to_asm+0x33/0x70
[   69.768238][ T1049]  ? __pfx_kthread+0x10/0x10
[   69.768254][ T1049]  ret_from_fork_asm+0x1a/0x30
[   69.768285][ T1049]  </TASK>
[   69.899872][ T5948] loop2: detected capacity change from 0 to 4096
[   69.924538][ T5948] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[   69.945986][ T1049] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   70.024972][ T5948] ntfs3(loop2): Failed to load $Extend (-22).
[   70.027207][ T5948] ntfs3(loop2): Failed to initialize $Extend.
[   70.194648][ T5959] binder: 5958:5959 ioctl 400c620e 9999999999999999 returned -14
[   70.257211][ T5909] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[   70.471530][ T5970] process 'syz.1.25' launched './file0' with NULL argv: empty string added
[   71.092126][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.094443][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.120874][ T5909] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x19, changing to 0x9
[   71.125394][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 197, setting to 64
[   71.137080][ T5909] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a
[   71.140706][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   71.175396][ T5909] usb 1-1: config 0 descriptor??
[   71.179699][ T5954] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   71.186229][ T5909] pegasus_notetaker 1-1:0.0: probe with driver pegasus_notetaker failed with error -22
[   71.327615][ T5913] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   71.407750][ T1269] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   71.460036][ T5312] usb 1-1: USB disconnect, device number 2
[   71.494806][ T5913] usb 2-1: config 0 has an invalid interface number: 56 but max is 0
[   71.500154][ T5913] usb 2-1: config 0 has no interface number 0
[   71.502623][ T5913] usb 2-1: config 0 interface 56 altsetting 114 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   71.508248][ T5913] usb 2-1: config 0 interface 56 altsetting 114 endpoint 0x81 has invalid wMaxPacketSize 0
[   71.513227][ T5913] usb 2-1: config 0 interface 56 has no altsetting 0
[   71.515879][ T5913] usb 2-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00
[   71.519894][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   71.528994][ T5913] usb 2-1: config 0 descriptor??
[   71.567551][ T1269] usb 3-1: Using ep0 maxpacket: 8
[   71.568604][ T5234] Bluetooth: hci0: command tx timeout
[   71.573893][ T1269] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   71.578000][ T1269] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   71.581782][ T1269] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   71.585620][ T1269] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   71.590678][ T1269] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   71.594297][ T1269] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   71.728965][ T5234] Bluetooth: hci1: command tx timeout
[   71.737244][ T5234] Bluetooth: hci2: command tx timeout
[   71.813264][ T1269] usb 3-1: GET_CAPABILITIES returned 0
[   71.815694][ T1269] usbtmc 3-1:16.0: can't read capabilities
[   71.951168][ T5913] uclogic 0003:28BD:0933.0001: interface is invalid, ignoring
[   72.020719][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   72.025957][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   72.029656][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   72.032880][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   72.036209][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   72.039052][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   72.043907][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   72.046862][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   72.049684][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   72.054192][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   72.057139][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   72.060076][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   72.063107][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   72.066342][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   72.069623][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   72.072398][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   72.122393][ T5987] loop0: detected capacity change from 0 to 128
[   72.140463][ T1269] usb 3-1: USB disconnect, device number 2
[   72.161031][ T5913] usb 2-1: USB disconnect, device number 2
[   72.239275][ T5990] loop0: detected capacity change from 0 to 512
[   72.269303][ T5990] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.274147][ T5990] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   72.306657][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.018153][ T6001] evm: overlay not supported
[   73.317926][ T6015] binder_alloc: 6013: binder_alloc_buf, no vma
[   73.434269][ T6022] netlink: 44 bytes leftover after parsing attributes in process `syz.0.49'.
[   73.437953][ T6022] netlink: 12 bytes leftover after parsing attributes in process `syz.0.49'.
[   73.440888][ T6022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.49'.
[   73.530501][ T6026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.50'.
[   73.541135][ T6026] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   73.671503][ T5234] Bluetooth: hci0: command tx timeout
[   73.763525][ T6039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.56'.
[   73.807809][ T5848] Bluetooth: hci1: command tx timeout
[   73.811033][ T5234] Bluetooth: hci2: command tx timeout
[   74.567725][ T5913] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   74.717663][ T5913] usb 1-1: Using ep0 maxpacket: 16
[   74.721616][ T5913] usb 1-1: config 0 has an invalid interface number: 93 but max is 0
[   74.725029][ T5913] usb 1-1: config 0 has no interface number 0
[   74.729274][ T5913] usb 1-1: config 0 interface 93 altsetting 1 bulk endpoint 0xC has invalid maxpacket 1023
[   74.735510][ T5913] usb 1-1: config 0 interface 93 has no altsetting 0
[   74.742053][ T5913] usb 1-1: New USB device found, idVendor=0711, idProduct=0200, bcdDevice=99.a1
[   74.745856][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   74.756028][ T5913] usb 1-1: Product: syz
[   74.758667][ T5913] usb 1-1: Manufacturer: syz
[   74.760667][ T5913] usb 1-1: SerialNumber: syz
[   74.770659][ T5913] usb 1-1: config 0 descriptor??
[   74.774201][ T6050] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   74.996703][ T5913] mct_u232 1-1:0.93: MCT U232 converter detected
[   75.005921][ T5913] mct_u232 ttyUSB0: expected endpoint missing
[   75.015568][ T5913] usb 1-1: USB disconnect, device number 3
[   75.021470][ T5913] mct_u232 1-1:0.93: device disconnected
[   75.140388][ T6071] loop2: detected capacity change from 0 to 1024
[   75.164281][ T6071] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   75.176225][ T6076] loop1: detected capacity change from 0 to 256
[   75.188198][ T6076] exfat: Deprecated parameter 'utf8'
[   75.212346][   T33] audit: type=1800 audit(1755689498.317:2): pid=6076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.72" name="file2" dev="loop1" ino=1048592 res=0 errno=0
[   75.242643][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.643026][ T6093] loop0: detected capacity change from 0 to 1024
[   75.771430][ T6102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.85'.
[   75.847370][ T6106] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[   75.922889][ T6112] loop2: detected capacity change from 0 to 256
[   75.930131][ T6112] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[   75.937025][ T6112] FAT-fs (loop2): bogus number of directory entries (1)
[   75.949113][ T6112] FAT-fs (loop2): Can't find a valid FAT filesystem
[   76.125175][ T6123] loop2: detected capacity change from 0 to 512
[   76.138075][ T6123] EXT4-fs: Ignoring removed i_version option
[   76.146302][ T6123] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   76.157038][ T6123] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   76.170080][ T6123] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   76.175305][ T6123] EXT4-fs (loop2): 1 truncate cleaned up
[   76.181715][ T6123] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   76.211811][ T5850] EXT4-fs warning (device loop2): ext4_xattr_inode_create:1469: refuse to create EA inode when umounting
[   76.227456][ T5850] ------------[ cut here ]------------
[   76.229719][ T5850] WARNING: CPU: 0 PID: 5850 at fs/ext4/xattr.c:1470 ext4_xattr_inode_lookup_create+0xa80/0x1c20
[   76.233728][ T5850] Modules linked in:
[   76.235615][ T5850] CPU: 0 UID: 0 PID: 5850 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[   76.240404][ T5850] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   76.244396][ T5850] RIP: 0010:ext4_xattr_inode_lookup_create+0xa80/0x1c20
[   76.247109][ T5850] Code: 8b 74 24 10 e9 d4 03 00 00 e8 ec b3 3a ff 48 89 df 48 c7 c6 f9 c2 97 8d ba bd 05 00 00 48 c7 c1 00 e3 9f 8b e8 21 28 fc ff 90 <0f> 0b 90 49 c7 c7 ea ff ff ff 4c 8b 74 24 10 e9 bb 03 00 00 48 8d
[   76.254448][ T5850] RSP: 0018:ffffc9000368f3e0 EFLAGS: 00010246
[   76.256816][ T5850] RAX: cccd1dfaa29e8300 RBX: ffff8880302d0000 RCX: cccd1dfaa29e8300
[   76.260219][ T5850] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[   76.263376][ T5850] RBP: ffffc9000368f570 R08: ffffc9000368efc7 R09: 1ffff920006d1df8
[   76.266470][ T5850] R10: dffffc0000000000 R11: fffff520006d1df9 R12: 1ffff920006d1e90
[   76.270096][ T5850] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88802bffb290
[   76.273307][ T5850] FS:  00005555824c4500(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[   76.276843][ T5850] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   76.280539][ T5850] CR2: 0000001b32323ffc CR3: 00000000252e0000 CR4: 00000000000006f0
[   76.282992][ T5850] Call Trace:
[   76.284118][ T5850]  <TASK>
[   76.285772][ T5850]  ? __pfx___might_resched+0x10/0x10
[   76.288729][ T5850]  ? __pfx_ext4_xattr_inode_lookup_create+0x10/0x10
[   76.291377][ T5850]  ? ext4_xattr_block_set+0xd6/0x2ac0
[   76.293445][ T5850]  ext4_xattr_block_set+0x223/0x2ac0
[   76.295469][ T5850]  ? __pfx___might_resched+0x10/0x10
[   76.298248][ T5850]  ? __pfx_check_xattrs+0x10/0x10
[   76.300282][ T5850]  ? __pfx_ext4_xattr_block_set+0x10/0x10
[   76.302146][ T5850]  ? ext4_xattr_block_find+0x2d4/0x350
[   76.303815][ T5850]  ext4_expand_extra_isize_ea+0x12d5/0x1ea0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   76.305761][ T5850]  __ext4_expand_extra_isize+0x30d/0x400
[   76.308562][ T5850]  __ext4_mark_inode_dirty+0x46c/0x700
[   76.310778][ T5850]  ext4_dirty_inode+0xd0/0x110
[   76.312582][ T5850]  ? __pfx_ext4_dirty_inode+0x10/0x10
[   76.314726][ T5850]  __mark_inode_dirty+0x2d1/0xdf0
[   76.316774][ T5850]  iput+0x1ee/0x9d0
[   76.318576][ T5850]  __dentry_kill+0x209/0x660
[   76.320447][ T5850]  ? shrink_kill+0x8d/0x2c0
[   76.322286][ T5850]  shrink_kill+0xa9/0x2c0
[   76.324036][ T5850]  shrink_dentry_list+0x2e0/0x5e0
[   76.326909][ T5850]  shrink_dcache_parent+0xa1/0x2c0
[   76.329633][ T5850]  ? __pfx_shrink_dcache_parent+0x10/0x10
[   76.331937][ T5850]  ? call_rcu+0x6ff/0x9c0
[   76.333676][ T5850]  do_one_tree+0x23/0xe0
[   76.335387][ T5850]  shrink_dcache_for_umount+0xa0/0x170
[   76.337764][ T5850]  generic_shutdown_super+0x67/0x2c0
[   76.339912][ T5850]  kill_block_super+0x44/0x90
[   76.341867][ T5850]  ext4_kill_sb+0x68/0xb0
[   76.343602][ T5850]  deactivate_locked_super+0xbc/0x130
[   76.345758][ T5850]  cleanup_mnt+0x425/0x4c0
[   76.347666][ T5850]  ? lockdep_hardirqs_on+0x9c/0x150
[   76.349790][ T5850]  task_work_run+0x1d4/0x260
[   76.351687][ T5850]  ? __pfx_task_work_run+0x10/0x10
[   76.353774][ T5850]  ? __x64_sys_umount+0x122/0x160
[   76.355760][ T5850]  ? exit_to_user_mode_loop+0x40/0x110
[   76.358089][ T5850]  exit_to_user_mode_loop+0xec/0x110
[   76.360159][ T5850]  do_syscall_64+0x2bd/0x3b0
[   76.362042][ T5850]  ? lockdep_hardirqs_on+0x9c/0x150
[   76.364125][ T5850]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   76.366607][ T5850]  ? exc_page_fault+0x9f/0xf0
[   76.368778][ T5850]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   76.371107][ T5850] RIP: 0033:0x7f7bf9b8ff17
[   76.372885][ T5850] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   76.380277][ T5850] RSP: 002b:00007ffccb1b9f18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   76.383564][ T5850] RAX: 0000000000000000 RBX: 00007f7bf9c11c05 RCX: 00007f7bf9b8ff17
[   76.386642][ T5850] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffccb1b9fd0
[   76.389795][ T5850] RBP: 00007ffccb1b9fd0 R08: 0000000000000000 R09: 0000000000000000
[   76.392786][ T5850] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffccb1bb060
[   76.395759][ T5850] R13: 00007f7bf9c11c05 R14: 000000000001293f R15: 00007ffccb1bb0a0
[   76.399018][ T5850]  </TASK>
[   76.400270][ T5850] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   76.403422][ T5850] CPU: 0 UID: 0 PID: 5850 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[   76.406772][ T5850] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   76.410859][ T5850] Call Trace:
[   76.412209][ T5850]  <TASK>
[   76.413403][ T5850]  dump_stack_lvl+0x99/0x250
[   76.415276][ T5850]  ? __asan_memcpy+0x40/0x70
[   76.417148][ T5850]  ? __pfx_dump_stack_lvl+0x10/0x10
[   76.418935][ T5850]  ? __pfx__printk+0x10/0x10
[   76.420385][ T5850]  vpanic+0x281/0x750
[   76.421678][ T5850]  ? __pfx__printk+0x10/0x10
[   76.423036][ T5850]  ? __pfx_vpanic+0x10/0x10
[   76.424323][ T5850]  ? is_bpf_text_address+0x26/0x2b0
[   76.426032][ T5850]  panic+0xb9/0xc0
[   76.427200][ T5850]  ? __pfx_panic+0x10/0x10
[   76.428589][ T5850]  __warn+0x31b/0x4b0
[   76.430051][ T5850]  ? ext4_xattr_inode_lookup_create+0xa80/0x1c20
[   76.432428][ T5850]  ? ext4_xattr_inode_lookup_create+0xa80/0x1c20
[   76.434317][ T5850]  report_bug+0x2be/0x4f0
[   76.436101][ T5850]  ? ext4_xattr_inode_lookup_create+0xa80/0x1c20
[   76.438618][ T5850]  ? ext4_xattr_inode_lookup_create+0xa80/0x1c20
[   76.440867][ T5850]  ? ext4_xattr_inode_lookup_create+0xa82/0x1c20
[   76.442829][ T5850]  handle_bug+0x84/0x160
[   76.444156][ T5850]  exc_invalid_op+0x1a/0x50
[   76.445602][ T5850]  asm_exc_invalid_op+0x1a/0x20
[   76.447155][ T5850] RIP: 0010:ext4_xattr_inode_lookup_create+0xa80/0x1c20
[   76.449266][ T5850] Code: 8b 74 24 10 e9 d4 03 00 00 e8 ec b3 3a ff 48 89 df 48 c7 c6 f9 c2 97 8d ba bd 05 00 00 48 c7 c1 00 e3 9f 8b e8 21 28 fc ff 90 <0f> 0b 90 49 c7 c7 ea ff ff ff 4c 8b 74 24 10 e9 bb 03 00 00 48 8d
[   76.456717][ T5850] RSP: 0018:ffffc9000368f3e0 EFLAGS: 00010246
[   76.459233][ T5850] RAX: cccd1dfaa29e8300 RBX: ffff8880302d0000 RCX: cccd1dfaa29e8300
[   76.462419][ T5850] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[   76.465550][ T5850] RBP: ffffc9000368f570 R08: ffffc9000368efc7 R09: 1ffff920006d1df8
[   76.468753][ T5850] R10: dffffc0000000000 R11: fffff520006d1df9 R12: 1ffff920006d1e90
[   76.471358][ T5850] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88802bffb290
[   76.473859][ T5850]  ? __pfx___might_resched+0x10/0x10
[   76.475483][ T5850]  ? __pfx_ext4_xattr_inode_lookup_create+0x10/0x10
[   76.477680][ T5850]  ? ext4_xattr_block_set+0xd6/0x2ac0
[   76.479469][ T5850]  ext4_xattr_block_set+0x223/0x2ac0
[   76.481360][ T5850]  ? __pfx___might_resched+0x10/0x10
[   76.483498][ T5850]  ? __pfx_check_xattrs+0x10/0x10
[   76.485522][ T5850]  ? __pfx_ext4_xattr_block_set+0x10/0x10
[   76.487814][ T5850]  ? ext4_xattr_block_find+0x2d4/0x350
[   76.489988][ T5850]  ext4_expand_extra_isize_ea+0x12d5/0x1ea0
[   76.492329][ T5850]  __ext4_expand_extra_isize+0x30d/0x400
[   76.494138][ T5850]  __ext4_mark_inode_dirty+0x46c/0x700
[   76.495827][ T5850]  ext4_dirty_inode+0xd0/0x110
[   76.497315][ T5850]  ? __pfx_ext4_dirty_inode+0x10/0x10
[   76.498969][ T5850]  __mark_inode_dirty+0x2d1/0xdf0
[   76.500522][ T5850]  iput+0x1ee/0x9d0
[   76.501669][ T5850]  __dentry_kill+0x209/0x660
[   76.503101][ T5850]  ? shrink_kill+0x8d/0x2c0
[   76.504922][ T5850]  shrink_kill+0xa9/0x2c0
[   76.506436][ T5850]  shrink_dentry_list+0x2e0/0x5e0
[   76.508140][ T5850]  shrink_dcache_parent+0xa1/0x2c0
[   76.509737][ T5850]  ? __pfx_shrink_dcache_parent+0x10/0x10
[   76.511543][ T5850]  ? call_rcu+0x6ff/0x9c0
[   76.513199][ T5850]  do_one_tree+0x23/0xe0
[   76.514837][ T5850]  shrink_dcache_for_umount+0xa0/0x170
[   76.516497][ T5850]  generic_shutdown_super+0x67/0x2c0
[   76.518436][ T5850]  kill_block_super+0x44/0x90
[   76.519887][ T5850]  ext4_kill_sb+0x68/0xb0
[   76.521619][ T5850]  deactivate_locked_super+0xbc/0x130
[   76.523546][ T5850]  cleanup_mnt+0x425/0x4c0
[   76.524972][ T5850]  ? lockdep_hardirqs_on+0x9c/0x150
[   76.526830][ T5850]  task_work_run+0x1d4/0x260
[   76.528369][ T5850]  ? __pfx_task_work_run+0x10/0x10
[   76.529956][ T5850]  ? __x64_sys_umount+0x122/0x160
[   76.531989][ T5850]  ? exit_to_user_mode_loop+0x40/0x110
[   76.534178][ T5850]  exit_to_user_mode_loop+0xec/0x110
[   76.536327][ T5850]  do_syscall_64+0x2bd/0x3b0
[   76.538001][ T5850]  ? lockdep_hardirqs_on+0x9c/0x150
[   76.539470][ T5850]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   76.541964][ T5850]  ? exc_page_fault+0x9f/0xf0
[   76.543856][ T5850]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   76.545558][ T5850] RIP: 0033:0x7f7bf9b8ff17
[   76.546881][ T5850] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   76.553575][ T5850] RSP: 002b:00007ffccb1b9f18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   76.556701][ T5850] RAX: 0000000000000000 RBX: 00007f7bf9c11c05 RCX: 00007f7bf9b8ff17
[   76.559171][ T5850] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffccb1b9fd0
[   76.562189][ T5850] RBP: 00007ffccb1b9fd0 R08: 0000000000000000 R09: 0000000000000000
[   76.565016][ T5850] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffccb1bb060
[   76.567525][ T5850] R13: 00007f7bf9c11c05 R14: 000000000001293f R15: 00007ffccb1bb0a0
[   76.570419][ T5850]  </TASK>
[   76.572026][ T5850] Kernel Offset: disabled
[   76.573418][ T5850] Rebooting in 86400 seconds..

VM DIAGNOSIS:
11:31:39  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffffff33bdc60 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffffff99dee630 RSP=ffffc9000368eb30
R8 =ffff888106c10237 R9 =1ffff11020d82046 R10=dffffc0000000000 R11=ffffffff854efea0
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff17 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00005555824c4500 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b32323ffc CR3=00000000252e0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fa92bd87498 00007fa92bd87470 XMM03=00007fa92bd874a8 00007fa92bd874a0
XMM04=00007fa92c8ed100 00007fa92bd87460 XMM05=00007fa92bd87478 00007fa92bd874c0
XMM06=00007fa92bd874b8 00007fa92bd874b0 XMM07=00007fa92bd874a8 00007fa92bd874a0
XMM08=0000000000000000 00007fa92bc12ee7 XMM09=0000000000000000 00007fa92bc12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff8e139ea0 RBP=ffffffff8172c195 RSP=ffffc90003f0ef98
R8 =0000000000000000 R9 =0000000000000000 R10=ffffc90003f0f158 R11=ffffffff81ac3910
R12=0000000000000002 R13=ffffffff8e139ea0 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff819d5bb8 RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007ff7cb7276c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ff7c15ff000 CR3=0000000025ee4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=00007ff7cb7265a0 00007ff7cb726580
XMM02=00007ff7cb7266e0 00007ff7cb726560 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00007ff7cb7265a0 XMM05=0000000000000000 00007ff7cb7266e0
XMM06=00007ff7cb7266e0 00007ff7cb726560 XMM07=00007ff7cb7265a0 00007ff7cb726580
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 00007ff7caa12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
