[ OK ] Finished Update UTMP about System Runlevel Changes. [ 84.799427] audit: type=1400 audit(1748246636.378:6): avc: denied { checkpoint_restore } for pid=223 comm="agetty" capability=40 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:63757' (ECDSA) to the list of known hosts. 2025/05/26 08:04:03 fuzzer started 2025/05/26 08:04:03 dialing manager at localhost:46087 syzkaller login: [ 92.529711] cgroup: Unknown subsys name 'net' [ 92.661256] cgroup: Unknown subsys name 'cpuset' [ 92.701348] cgroup: Unknown subsys name 'rlimit' 2025/05/26 08:04:18 syscalls: 200 2025/05/26 08:04:18 code coverage: enabled 2025/05/26 08:04:18 comparison tracing: enabled 2025/05/26 08:04:18 extra coverage: enabled 2025/05/26 08:04:18 setuid sandbox: enabled 2025/05/26 08:04:18 namespace sandbox: enabled 2025/05/26 08:04:18 Android sandbox: enabled 2025/05/26 08:04:18 fault injection: enabled 2025/05/26 08:04:18 leak checking: enabled 2025/05/26 08:04:18 net packet injection: enabled 2025/05/26 08:04:18 net device setup: enabled 2025/05/26 08:04:18 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/05/26 08:04:18 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/05/26 08:04:18 USB emulation: enabled 2025/05/26 08:04:18 hci packet injection: enabled 2025/05/26 08:04:18 wifi device emulation: enabled 2025/05/26 08:04:18 802.15.4 emulation: enabled 2025/05/26 08:04:18 fetching corpus: 0, signal 0/0 (executing program) 2025/05/26 08:04:20 starting 8 fuzzer processes 08:04:20 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x7, 0x408040) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000080)) r1 = syz_open_dev$sg(&(0x7f0000000200), 0x1, 0x90002) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000240)) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002880)={&(0x7f0000000280)=@abs, 0x6e, &(0x7f00000026c0)=[{&(0x7f0000000300)=""/111, 0x6f}, {&(0x7f0000000380)=""/255, 0xff}, {&(0x7f0000000480)=""/232, 0xe8}, {&(0x7f0000000580)=""/56, 0x38}, {&(0x7f00000005c0)=""/190, 0xbe}, {&(0x7f0000000680)=""/20, 0x14}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x8, &(0x7f0000002740)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x138}, 0x60) ioctl$SG_GET_COMMAND_Q(r5, 0x2270, &(0x7f00000028c0)) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000002b80), 0x400, 0x0) r9 = getpgid(r7) ioctl$BINDER_GET_FROZEN_INFO(r8, 0xc00c620f, &(0x7f0000002bc0)={r9}) bind$bt_sco(r2, &(0x7f0000002c00)={0x1f, @none}, 0x8) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r4, 0x40046210, &(0x7f0000002c40)=0x1) ioctl$EVIOCGKEY(r6, 0x80404518, &(0x7f0000002c80)=""/119) socket$netlink(0x10, 0x3, 0x1) syz_open_dev$sg(&(0x7f0000002d00), 0x76d, 0x40000) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f0000002d40)=0x9) recvmsg$unix(r8, &(0x7f0000002f80)={&(0x7f0000002d80), 0x6e, &(0x7f0000002e00), 0x0, &(0x7f0000002e40)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x120}, 0x60) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r10, 0x40046210, &(0x7f0000002fc0)) ioctl$SG_GET_COMMAND_Q(r11, 0x2270, &(0x7f0000003000)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000003180)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000003140)='./file0\x00', 0x3, 0x402000, 0x12345}, 0x200) 08:04:20 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2000) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000040)=""/119) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000100)={0x55, 0xc335, 0x200, {0x9, 0x800}, {0x3f, 0x34d}, @period={0x5d, 0x0, 0x3f, 0x5, 0xffe0, {0x93a, 0x2f, 0x1, 0x7ff}, 0x8, &(0x7f00000000c0)=[0x9, 0x3, 0x3ff, 0x1, 0x2, 0x336, 0x8, 0xd6]}}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x10201, 0x0) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000180)={0x2, 0x1, 0xab51, 0x2}, 0x10) epoll_create1(0x80000) connect$bt_sco(r1, &(0x7f00000001c0), 0x8) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000200)=""/62, &(0x7f0000000240)=0x3e) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x400081, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r3, 0x11, 0x1, &(0x7f00000002c0)=""/24, &(0x7f0000000300)=0x18) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) socket$netlink(0x10, 0x3, 0x5) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f00000003c0)=0x1, 0x4) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000400)=""/185) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000a80)={0x158, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x50, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x0, 0x1, 0xe}, @flat=@weak_binder={0x77622a85, 0x1200, 0x2}}, &(0x7f0000000540)={0x0, 0x18, 0x38}}}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000580)={@flat=@binder={0x73622a85, 0x0, 0x1}, @fda={0x66646185, 0x1, 0x0, 0x8}, @fd}, &(0x7f0000000600)={0x0, 0x18, 0x38}}}, @clear_death={0x400c630f, 0x2}, @enter_looper, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)={@ptr={0x70742a85, 0x1, &(0x7f0000000640)=""/172, 0xac, 0x1, 0x38}, @fd={0x66642a85, 0x0, r4}, @fd}, &(0x7f0000000780)={0x0, 0x28, 0x40}}}, @acquire={0x40046305, 0x2}, @register_looper, @dead_binder_done, @enter_looper, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000007c0)={@fd={0x66642a85, 0x0, r5}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000840)={0x0, 0x18, 0x30}}, 0x400}], 0x5a, 0x0, &(0x7f0000000a00)="c3278ce76cb668bf6b7796328e46ee90675b93502266ff8ecbbd162bbf934ec17c2fdfa66633f7b32051282823eef1972a5a536a76c932cc6d5f8e2716ccd77c791c6b9df0a51fca968c07ec319bf65d39d134ed3809ccd5a6ac"}) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000b00)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 08:04:20 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r1, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x27}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c8d0}, 0x4000000) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000001c0), 0x10002, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x101400, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), r0) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xe0, r3, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0x2e, 0x7, 'system_u:object_r:dlm_control_device_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:tetex_data_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:sulogin_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000}, 0x80) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/242, 0xf2}, {&(0x7f0000001540)=""/170, 0xaa}, {&(0x7f0000001600)=""/19, 0x13}], 0x4, &(0x7f0000001680)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x90}, 0x12002) getgroups(0x4, &(0x7f0000001780)=[0xee00, 0xee01, r5, 0xee01]) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001800), r2) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x30, r6, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) write$tcp_mem(r4, &(0x7f0000001900)={0x3, 0x20, 0x800, 0x20, 0x3f}, 0x48) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000019c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x1c, r7, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x4000000) init_module(&(0x7f0000001ac0)='!\x00', 0x2, &(0x7f0000001b00)='/proc/thread-self\x00') init_module(&(0x7f0000001b40)='\x00', 0x1, &(0x7f0000001b80)='\\)-.\x00') clock_settime(0x6, &(0x7f0000001bc0)={0x77359400}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001c00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 08:04:20 executing program 3: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x10000000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@free_buffer, @increfs_done={0x40106308, 0x1}], 0x6b, 0x0, &(0x7f0000000080)="d73e354e2814b695e4b1475025fe03d9633d1b6fd64d24cb12e203d6b778b73d95c5f977c48b2ec6776c8b0a114e68ecc352c54e5ff3e70fb645bf245a4389be858b0c7429da9b6cefd52dc00c56cd013390145c4f9eba3fab4c17f851514bccfc0de15bc3e5c9d2f20bab"}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000140)=0xb44) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000001c0)=""/188) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000280)=0xab) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f00000002c0)=""/35) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x1010, r2, 0x8000000) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000300)=0x6) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs2/custom1\x00', 0x1004, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000001540)={0x78, 0x0, &(0x7f00000004c0)=[@request_death, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000400)={@fda={0x66646185, 0x4, 0x2, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/70, 0x46, 0x2, 0x24}, @fda={0x66646185, 0x0, 0x1, 0x36}}, &(0x7f0000000480)={0x0, 0x20, 0x48}}}, @exit_looper, @register_looper, @free_buffer, @clear_death={0x400c630f, 0x1}], 0x1000, 0x0, &(0x7f0000000540)="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"}) r5 = syz_open_dev$sg(&(0x7f0000001580), 0x0, 0x8000) r6 = openat$full(0xffffffffffffff9c, &(0x7f00000015c0), 0x30000, 0x0) mmap$binder(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x11, r6, 0x9a) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001600)='./binderfs/custom0\x00', 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r6, 0x2286, &(0x7f0000001640)) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000001bc0)={0x5, &(0x7f0000001b80)=[{0x5, 0x1f, 0x81, 0xfffff31c}, {0x101, 0x6, 0xcd}, {0xfe7, 0x0, 0x9, 0x6}, {0x401, 0x4, 0x0, 0x7}, {0x1ff, 0x2, 0x40}]}) syz_io_uring_submit(r3, r0, &(0x7f0000001cc0)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0x10000, &(0x7f0000001c80)=[r5, r8, r7, 0xffffffffffffffff, r5, r2, r5, 0xffffffffffffffff], 0x8, 0x0, 0x1}, 0x20) 08:04:20 executing program 4: getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0x5, 0x8, 0x4, @mcast2, @local, 0x7, 0x8, 0x4, 0x200}}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000140)={0x0, @in={0x2, 0x7f, @multicast2}, @ethernet={0x6}, @vsock={0x28, 0x0, 0xffffffff}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x100, 0x9}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000200)=0x3f, 0x4) getsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000240), &(0x7f0000000280)=0x4) prctl$PR_SVE_SET_VL(0x32, 0x5303) prctl$PR_SVE_SET_VL(0x32, 0x3f2e4) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)) recvmsg$unix(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)=""/117, 0x75}], 0x1, &(0x7f0000000440)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x128}, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000005c0), 0x800, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x810, r4, 0x8000000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000600), 0x4) pselect6(0x40, &(0x7f0000000640)={0x10001, 0x1, 0x8, 0x3, 0x80000000, 0x6, 0x0, 0x1}, &(0x7f0000000680)={0x3ff, 0x4, 0x6, 0xffffffff00000000, 0xbc4, 0x7, 0x7, 0x7}, 0xfffffffffffffffd, &(0x7f00000006c0), &(0x7f0000000740)={&(0x7f0000000700)={[0x101]}, 0x8}) setsockopt$inet6_udp_int(r2, 0x11, 0x66, &(0x7f0000000780)=0x4f6, 0x4) prctl$PR_SVE_SET_VL(0x32, 0x2a023) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000840)={'syztnl0\x00', &(0x7f00000007c0)={'ip6tnl0\x00', r0, 0x3b, 0x3, 0x1, 0x7, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7800, 0x10, 0x0, 0x5}}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000880)={'syztnl2\x00', r0, 0x2f, 0x7, 0x7, 0x3, 0x4, @empty, @empty, 0x10, 0x8000, 0x4000000, 0x7}}) [ 108.876013] audit: type=1400 audit(1748246660.457:7): avc: denied { execmem } for pid=273 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 08:04:20 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x20d40, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000040)) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x8000, 0x8000) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000100)={0x53, 0x8, 0x3, {0x401}, {0x100, 0x9}, @rumble={0x76c, 0x8001}}) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000140)=""/57) r2 = syz_open_dev$evdev(&(0x7f0000000180), 0x4, 0x2042c0) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f00000001c0)=""/132) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000280)={0xc07, 0x4, 0xb0, 0x2, 0x5, 0x9}) r3 = syz_open_dev$evdev(&(0x7f0000000940), 0x4, 0x10000) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000980)=""/4096) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x6, 0x50, r0, 0x10000000) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000001980)=""/60) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f00000019c0), &(0x7f0000001a00)=0x4) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001a40), 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001ac0)=""/157, 0x9d}, {&(0x7f0000001b80)=""/33, 0x21}, {&(0x7f0000001bc0)=""/166, 0xa6}, {&(0x7f0000001c80)=""/138, 0x8a}, {&(0x7f0000001d40)=""/153, 0x99}], 0x5, &(0x7f0000001e80)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x158}, 0x1) ioctl$EVIOCSABS3F(r4, 0x401845ff, &(0x7f0000002040)={0x1, 0xff, 0xf24, 0xd40, 0xcde, 0x4}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000002100)={'syztnl2\x00', &(0x7f0000002080)={'ip6tnl0\x00', 0x0, 0x2f, 0x20, 0x3, 0x8, 0x2f, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x7, 0x5, 0x6}}) io_uring_setup(0x6bf6, &(0x7f0000002140)={0x0, 0xf1fa, 0x20, 0x0, 0x353}) socket$inet6_udp(0xa, 0x2, 0x0) 08:04:20 executing program 6: nanosleep(&(0x7f0000000000)={0x77359400}, 0x0) clock_gettime(0x5, &(0x7f0000000040)) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000080), 0x6e, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/109, 0x6d}, {&(0x7f0000000180)=""/210, 0xd2}, {&(0x7f0000000280)=""/12, 0xc}, {&(0x7f00000002c0)=""/4096, 0x1000}], 0x4, &(0x7f0000001300)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf8}, 0x40002000) bind$802154_dgram(r3, &(0x7f0000001440)={0x24, @long={0x3, 0xffff}}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000001480)) recvmsg$unix(r2, &(0x7f0000001980)={&(0x7f00000014c0)=@abs, 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001540)=""/50, 0x32}, {&(0x7f0000001580)=""/41, 0x29}, {&(0x7f00000015c0)=""/40, 0x28}, {&(0x7f0000001600)=""/110, 0x6e}, {&(0x7f0000001680)=""/35, 0x23}, {&(0x7f00000016c0)=""/117, 0x75}, {&(0x7f0000001740)=""/89, 0x59}], 0x7, &(0x7f0000001840)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x128}, 0x0) setsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f00000019c0), 0x4) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000001a00)={0xaa, 0x2, 0x4, "7a9d6a5422c6cb30c5da12454a175f92224d0a3c43ff520a3ae16fafd03ae30cb4501a1f75bc582174c700e8dd3c094d65a30121313bde2ab30c21d9206a11588cf6f39228f3f466422da04ff6b2731b6cb1137e81f5a8ee490d2c582ef20a292e57b0b3b0874d8385fb1ad2121037f93694555166c5d4cbfef7453d7ef702b9005788198881cb7954c9a50c1e4892ba34adfd3d1907666281119bed556374f7a753deeea3db26dd878e"}) clock_settime(0x0, &(0x7f0000001ac0)={0x77359400}) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000001b00)=""/62) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000001b40)=""/93) pselect6(0x40, &(0x7f0000001bc0)={0x7fff, 0x0, 0x57f9cc7d, 0x3ff, 0x9, 0x8, 0x9, 0x81}, &(0x7f0000001c00)={0x7f, 0xad9, 0x2, 0x7, 0xfffffffffffff6f3, 0x1, 0xfffffffffffff184, 0x7}, &(0x7f0000001c40)={0x2, 0x3, 0x7, 0x9, 0x4, 0xffffffffe5db5dec, 0xc7, 0x3d0}, &(0x7f0000001c80)={0x0, 0x989680}, &(0x7f0000001d00)={&(0x7f0000001cc0)={[0x8]}, 0x8}) r6 = epoll_create1(0x0) fstat(r6, &(0x7f0000001d40)) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001dc0)=0xf38) syz_emit_vhci(&(0x7f0000001e00)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xef}, "effed2291db4f8ccad475118aa9c9824e2ca867034d3b665a6e6592cd4df14462efa633fddb5a1c5324af6b57eb760b3608fcd45d4a15700d3d6e124e667c04ac0f7744466978b4a0c8efca0f874da6198262ffc00df9f7a4be6df3d04c65035905c067d0630c9cd6a0393f21d331372e512dde605cb3fa070266bfa89573347a24c6f21a1d7602dffd01d3711c4f45a24d1da2a2a863dad734a2607caf8e94c8c35a82a16b94eff51df55caffbb8992aa63392d3d13b67ad40fa553747f7d7c19045933f7c061c02399f992025ac8b61374ad67918eef38aa726038c41a08c9ed0a93e97356800712bd91d08095b2"}, 0xf3) getsockopt$bt_sco_SCO_OPTIONS(r4, 0x11, 0x1, &(0x7f0000001f00)=""/24, &(0x7f0000001f40)=0x18) epoll_create1(0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000001fc0)={0x0, 0x20, 0x2, 0x20, 0x2}, 0x48) 08:04:20 executing program 7: set_robust_list(&(0x7f0000000100)={&(0x7f0000000040)={&(0x7f0000000000)}, 0x3, &(0x7f00000000c0)={&(0x7f0000000080)}}, 0x18) r0 = getpgid(0x0) get_robust_list(r0, &(0x7f0000000200)=&(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, &(0x7f0000000240)=0x18) r1 = getpgrp(r0) get_robust_list(r0, &(0x7f0000000340)=&(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)}}, &(0x7f0000000380)=0x18) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) getpgid(r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xa4, r4, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xa4}, 0x1, 0x0, 0x0, 0x840}, 0x4081) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000600)={0x3}) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r4, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040040}, 0x4004) socketpair(0x2a, 0x800, 0x3f, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000780)=0x5, 0x4) waitid(0x1, r1, &(0x7f00000007c0), 0x8, &(0x7f0000000840)) set_robust_list(&(0x7f0000000980)={0x0, 0xffff, &(0x7f0000000940)={&(0x7f0000000900)}}, 0x18) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80540005}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x98, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:cgroup_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:netcontrol_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x800) r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000b40), 0x8c000, 0x0) ioctl$RNDZAPENTCNT(r7, 0x5204, &(0x7f0000000b80)=0x5) [ 110.385213] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 110.394702] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 110.397270] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 110.401721] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 110.403972] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 110.412432] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 110.414152] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 110.424842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 110.428608] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 110.430379] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 110.456404] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 110.462521] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 110.465992] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 110.484872] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 110.498965] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 110.521777] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 110.532760] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 110.535373] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 110.547975] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 110.553219] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 110.633786] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 110.637655] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 110.645605] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 110.647652] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 110.653893] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 110.656432] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 110.662427] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 110.662935] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 110.668037] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 110.668883] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 110.680614] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 110.683972] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 110.686719] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 110.695269] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 110.697591] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 110.697922] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 110.701280] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 110.716646] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 110.720543] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 110.733714] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 112.526640] Bluetooth: hci1: command tx timeout [ 112.526653] Bluetooth: hci0: command tx timeout [ 112.590368] Bluetooth: hci3: command tx timeout [ 112.590649] Bluetooth: hci2: command tx timeout [ 112.781173] Bluetooth: hci5: command tx timeout [ 112.782145] Bluetooth: hci6: command tx timeout [ 112.782204] Bluetooth: hci7: command tx timeout [ 112.782815] Bluetooth: hci4: command tx timeout [ 114.573454] Bluetooth: hci0: command tx timeout [ 114.574013] Bluetooth: hci1: command tx timeout [ 114.637387] Bluetooth: hci3: command tx timeout [ 114.638529] Bluetooth: hci2: command tx timeout [ 114.829454] Bluetooth: hci4: command tx timeout [ 114.829744] Bluetooth: hci6: command tx timeout [ 114.830185] Bluetooth: hci7: command tx timeout [ 114.831020] Bluetooth: hci5: command tx timeout [ 116.621449] Bluetooth: hci0: command tx timeout [ 116.622021] Bluetooth: hci1: command tx timeout [ 116.688300] Bluetooth: hci2: command tx timeout [ 116.688806] Bluetooth: hci3: command tx timeout [ 116.878299] Bluetooth: hci6: command tx timeout [ 116.878801] Bluetooth: hci4: command tx timeout [ 116.879376] Bluetooth: hci5: command tx timeout [ 116.879438] Bluetooth: hci7: command tx timeout [ 118.669188] Bluetooth: hci0: command tx timeout [ 118.669687] Bluetooth: hci1: command tx timeout [ 118.733182] Bluetooth: hci3: command tx timeout [ 118.733813] Bluetooth: hci2: command tx timeout [ 118.925328] Bluetooth: hci5: command tx timeout [ 118.925834] Bluetooth: hci7: command tx timeout [ 118.927675] Bluetooth: hci4: command tx timeout [ 118.928138] Bluetooth: hci6: command tx timeout [ 172.847579] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 172.855658] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 172.857747] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 172.862333] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 172.866587] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 172.868536] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 172.875803] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 172.879036] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 172.885544] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 172.889116] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 172.964301] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 172.968516] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 172.973109] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 172.981540] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 172.992541] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 172.998546] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 173.004452] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 173.009613] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 173.019946] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 173.024392] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 173.030439] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 173.036639] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 173.040410] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 173.052131] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 173.056865] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 173.219646] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 173.221203] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 173.223904] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 173.227517] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 173.231822] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 173.293326] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 173.296313] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 173.298334] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 173.302879] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 173.310172] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 173.383611] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 173.397101] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 173.406411] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 173.458606] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 173.476869] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 174.925187] Bluetooth: hci0: command tx timeout [ 174.925205] Bluetooth: hci1: command tx timeout [ 175.117357] Bluetooth: hci4: command tx timeout [ 175.117399] Bluetooth: hci3: command tx timeout [ 175.181180] Bluetooth: hci2: command tx timeout [ 175.311210] Bluetooth: hci6: command tx timeout [ 175.437167] Bluetooth: hci7: command tx timeout [ 175.565186] Bluetooth: hci5: command tx timeout [ 176.973125] Bluetooth: hci0: command tx timeout [ 176.974114] Bluetooth: hci1: command tx timeout [ 177.165372] Bluetooth: hci3: command tx timeout [ 177.166575] Bluetooth: hci4: command tx timeout [ 177.229439] Bluetooth: hci2: command tx timeout [ 177.357214] Bluetooth: hci6: command tx timeout [ 177.485995] Bluetooth: hci7: command tx timeout [ 177.613137] Bluetooth: hci5: command tx timeout [ 179.021380] Bluetooth: hci1: command tx timeout [ 179.021616] Bluetooth: hci0: command tx timeout [ 179.213967] Bluetooth: hci4: command tx timeout [ 179.214521] Bluetooth: hci3: command tx timeout [ 179.277128] Bluetooth: hci2: command tx timeout [ 179.406338] Bluetooth: hci6: command tx timeout [ 179.533218] Bluetooth: hci7: command tx timeout [ 179.661996] Bluetooth: hci5: command tx timeout [ 181.069296] Bluetooth: hci1: command tx timeout [ 181.069445] Bluetooth: hci0: command tx timeout [ 181.263144] Bluetooth: hci3: command tx timeout [ 181.263629] Bluetooth: hci4: command tx timeout [ 181.326121] Bluetooth: hci2: command tx timeout [ 181.454457] Bluetooth: hci6: command tx timeout [ 181.581309] Bluetooth: hci7: command tx timeout [ 181.709161] Bluetooth: hci5: command tx timeout [ 235.370927] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 235.374671] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 235.379233] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 235.391689] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 235.397848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 235.441987] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 235.449751] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 235.456519] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 235.491223] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 235.503540] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 235.507012] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 235.509753] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 235.512523] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 235.519388] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 235.526707] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 235.715924] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 235.719149] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 235.723583] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 235.729935] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 235.746788] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 235.762598] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 235.762661] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 235.771417] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 235.793251] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 235.803374] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 235.826851] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 235.842534] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 235.850420] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 235.881489] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 235.920018] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 235.979650] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 235.989687] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 235.993539] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 235.998018] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 236.009595] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 236.012745] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 236.023826] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 236.035854] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 236.041925] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 236.043932] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 237.453182] Bluetooth: hci0: command tx timeout [ 237.581270] Bluetooth: hci2: command tx timeout [ 237.581326] Bluetooth: hci1: command tx timeout [ 237.837228] Bluetooth: hci3: command tx timeout [ 237.901901] Bluetooth: hci4: command tx timeout [ 237.965196] Bluetooth: hci5: command tx timeout [ 238.093405] Bluetooth: hci6: command tx timeout [ 238.093567] Bluetooth: hci7: command tx timeout [ 239.502127] Bluetooth: hci0: command tx timeout [ 239.629140] Bluetooth: hci2: command tx timeout [ 239.629177] Bluetooth: hci1: command tx timeout [ 239.885186] Bluetooth: hci3: command tx timeout [ 239.950175] Bluetooth: hci4: command tx timeout [ 240.013223] Bluetooth: hci5: command tx timeout [ 240.141465] Bluetooth: hci6: command tx timeout [ 240.141961] Bluetooth: hci7: command tx timeout [ 241.549163] Bluetooth: hci0: command tx timeout [ 241.677113] Bluetooth: hci1: command tx timeout [ 241.679120] Bluetooth: hci2: command tx timeout [ 241.933158] Bluetooth: hci3: command tx timeout [ 241.997142] Bluetooth: hci4: command tx timeout [ 242.061132] Bluetooth: hci5: command tx timeout [ 242.189462] Bluetooth: hci7: command tx timeout [ 242.189926] Bluetooth: hci6: command tx timeout [ 243.597395] Bluetooth: hci0: command tx timeout [ 243.725389] Bluetooth: hci2: command tx timeout [ 243.725857] Bluetooth: hci1: command tx timeout [ 243.981150] Bluetooth: hci3: command tx timeout [ 244.046072] Bluetooth: hci4: command tx timeout [ 244.109458] Bluetooth: hci5: command tx timeout [ 244.237155] Bluetooth: hci7: command tx timeout [ 244.237594] Bluetooth: hci6: command tx timeout [ 297.903262] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 297.906814] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 297.916718] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 297.919673] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 297.931240] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 297.934474] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 297.936791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 297.941955] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 297.946626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 297.954921] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 297.988683] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 297.994588] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 298.003626] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 298.011807] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 298.025577] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 298.112595] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 298.128303] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 298.131836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 298.146032] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 298.156810] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 298.259411] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 298.269016] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 298.294479] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 298.303318] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 298.309711] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 298.314333] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 298.355730] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 298.366901] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 298.370597] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 298.372802] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 298.380941] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 298.410590] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 298.416880] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 298.440685] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 298.442423] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 298.478729] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 298.516461] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 298.527547] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 298.537537] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 298.537807] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 299.981385] Bluetooth: hci0: command tx timeout [ 299.982406] Bluetooth: hci1: command tx timeout [ 300.110150] Bluetooth: hci2: command tx timeout [ 300.239102] Bluetooth: hci3: command tx timeout [ 300.493314] Bluetooth: hci5: command tx timeout [ 300.494227] Bluetooth: hci4: command tx timeout [ 300.622340] Bluetooth: hci7: command tx timeout [ 300.623249] Bluetooth: hci6: command tx timeout [ 302.030245] Bluetooth: hci0: command tx timeout [ 302.030738] Bluetooth: hci1: command tx timeout [ 302.157322] Bluetooth: hci2: command tx timeout [ 302.285145] Bluetooth: hci3: command tx timeout [ 302.542571] Bluetooth: hci5: command tx timeout [ 302.543097] Bluetooth: hci4: command tx timeout [ 302.669365] Bluetooth: hci7: command tx timeout [ 302.669854] Bluetooth: hci6: command tx timeout [ 304.077171] Bluetooth: hci1: command tx timeout [ 304.077666] Bluetooth: hci0: command tx timeout [ 304.205408] Bluetooth: hci2: command tx timeout [ 304.333142] Bluetooth: hci3: command tx timeout [ 304.589140] Bluetooth: hci4: command tx timeout [ 304.589623] Bluetooth: hci5: command tx timeout [ 304.717150] Bluetooth: hci7: command tx timeout [ 304.717646] Bluetooth: hci6: command tx timeout [ 306.125496] Bluetooth: hci0: command tx timeout [ 306.125984] Bluetooth: hci1: command tx timeout [ 306.253184] Bluetooth: hci2: command tx timeout [ 306.381154] Bluetooth: hci3: command tx timeout [ 306.637529] Bluetooth: hci5: command tx timeout [ 306.638018] Bluetooth: hci4: command tx timeout [ 306.766080] Bluetooth: hci6: command tx timeout [ 306.766576] Bluetooth: hci7: command tx timeout [ 360.358517] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 360.364675] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 360.368356] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 360.374591] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 360.381769] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 360.433262] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 360.436649] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 360.439091] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 360.441933] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 360.443549] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 360.619703] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 360.620964] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 360.622375] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 360.624994] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 360.629001] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 360.667729] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 360.674021] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 360.688614] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 360.694007] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 360.708668] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 360.820866] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 360.840774] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 360.850418] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 360.857897] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 360.867472] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 360.925391] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 360.929873] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 360.937006] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 360.943280] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 360.947291] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 361.113743] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 361.123249] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 361.177568] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 361.255381] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 361.350656] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 362.072875] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 362.099589] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 362.115786] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 362.129020] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 362.147185] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 362.445693] Bluetooth: hci0: command tx timeout [ 362.510406] Bluetooth: hci1: command tx timeout [ 362.701528] Bluetooth: hci2: command tx timeout [ 362.765840] Bluetooth: hci3: command tx timeout [ 363.021192] Bluetooth: hci4: command tx timeout [ 363.021976] Bluetooth: hci5: command tx timeout [ 363.469272] Bluetooth: hci6: command tx timeout [ 364.366274] Bluetooth: hci7: command tx timeout [ 364.493530] Bluetooth: hci0: command tx timeout [ 364.557727] Bluetooth: hci1: command tx timeout [ 364.750088] Bluetooth: hci2: command tx timeout [ 364.814078] Bluetooth: hci3: command tx timeout [ 365.069216] Bluetooth: hci5: command tx timeout [ 365.069704] Bluetooth: hci4: command tx timeout [ 365.517341] Bluetooth: hci6: command tx timeout [ 366.413423] Bluetooth: hci7: command tx timeout [ 366.541291] Bluetooth: hci0: command tx timeout [ 366.605423] Bluetooth: hci1: command tx timeout [ 366.797332] Bluetooth: hci2: command tx timeout [ 366.863142] Bluetooth: hci3: command tx timeout [ 367.117189] Bluetooth: hci4: command tx timeout [ 367.117677] Bluetooth: hci5: command tx timeout [ 367.565154] Bluetooth: hci6: command tx timeout [ 368.461478] Bluetooth: hci7: command tx timeout [ 368.589208] Bluetooth: hci0: command tx timeout [ 368.653472] Bluetooth: hci1: command tx timeout [ 368.845140] Bluetooth: hci2: command tx timeout [ 368.909103] Bluetooth: hci3: command tx timeout [ 369.166256] Bluetooth: hci5: command tx timeout [ 369.166721] Bluetooth: hci4: command tx timeout [ 369.613270] Bluetooth: hci6: command tx timeout [ 370.510071] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 08:09:22 Registers: info registers vcpu 0 RAX=0000010c57985088 RBX=0000000000000000 RCX=00000000000006e0 RDX=000000000000010c RSI=ffff88806ce238c0 RDI=0000000000053cff RBP=ffff88806ce238c0 RSP=ffff88806ce08ed8 R8 =0000000000000001 R9 =0000000000000000 R10=00000000000efe9e R11=0000000000000001 R12=0000000000053cff R13=0000000000000000 R14=0000000000000000 R15=ffff88806ce28080 RIP=ffffffff813274e5 RFL=00000016 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe2c00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7fc0df68e0 CR3=000000002e1ce000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=00000000475e76a4 RBX=ffff888015169b80 RCX=00000000dfb8078e RDX=0000000085cb9a3e RSI=000000008301a466 RDI=0000000081125d94 RBP=ffff88801516a5d8 RSP=ffff88806cf088d0 R8 =0000000000000002 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffff88801516a628 R13=0000000008cd3ea4 R14=0000000000000000 R15=0000000000000002 RIP=ffffffff815192e3 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe1600000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f22de4ce260 CR3=000000000d4c1000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000