Extracting prog: 5m23.339184013s Minimizing prog: 24m18.292411243s Simplifying prog options: 14m56.768818735s Extracting C: 5m10.7549645s Simplifying C: 0s extracting reproducer from 1 programs testing a last program of every proc single: executing 1 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rfkill-write$rfkill detailed listing: executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) program did not crash single: failed to extract reproducer single: executing 1 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rfkill-write$rfkill detailed listing: executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) program crashed: SYZFAIL: initialize_wifi_devices: failed set up IBSS network single: successfully extracted reproducer found reproducer with 2 syscalls minimizing guilty program testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rfkill detailed listing: executing program 0: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x801, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): write$rfkill detailed listing: executing program 0: write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rfkill-write$rfkill detailed listing: executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rfkill-write$rfkill detailed listing: executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x801, 0x0) write$rfkill(r0, 0x0, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rfkill-write$rfkill program crashed: no output from test machine a never seen crash title: no output from test machine, ignore simplifying guilty program options testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rfkill-write$rfkill detailed listing: executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) program crashed: SYZFAIL: initialize_wifi_devices: failed set up IBSS network extracting C reproducer testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rfkill-write$rfkill program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rfkill-write$rfkill detailed listing: executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) program did not crash testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rfkill-write$rfkill detailed listing: executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) program crashed: SYZFAIL: initialize_wifi_devices: failed set up IBSS network validation run: crashed=true testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rfkill-write$rfkill detailed listing: executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) program crashed: SYZFAIL: initialize_wifi_devices: failed set up IBSS network validation run: crashed=true testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rfkill-write$rfkill detailed listing: executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) program crashed: WARNING in call_timer_fn validation run: crashed=true reproducing took 58m4.321211213s repro crashed as (corrupted=false): ------------[ cut here ]------------ workqueue: cannot queue hci_cmd_timeout on wq hci2 WARNING: kernel/workqueue.c:2270 at __queue_work+0xd08/0x1150 kernel/workqueue.c:2269, CPU#0: syz-executor/7009 Modules linked in: CPU: 0 UID: 0 PID: 7009 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 RIP: 0010:__queue_work+0xd0c/0x1150 kernel/workqueue.c:2269 Code: 00 00 00 fc ff df 49 8d 94 24 78 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 04 04 00 00 48 8d 3d c8 ae 0c 0f 48 8b 75 18 <67> 48 0f b9 3a e9 2a f7 ff ff e8 c5 e5 38 00 90 0f 0b 90 e9 b2 f5 RSP: 0018:ffffc90000007be8 EFLAGS: 00010046 RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff1100c323151 RDX: ffff8880540b5178 RSI: ffffffff8a83d360 RDI: ffffffff90dc9570 RBP: ffff888061918a70 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000000000100 R11: 0000000000000000 R12: ffff8880540b5000 R13: 1ffff92000000f8f R14: ffffffff81cff7c0 R15: 0000000000000001 FS: 00005555931c7500(0000) GS:ffff888124342000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fefe42eb6b0 CR3: 000000002a694000 CR4: 00000000003526f0 Call Trace: call_timer_fn+0x19a/0x670 kernel/time/timer.c:1748 expire_timers kernel/time/timer.c:1794 [inline] __run_timers+0x570/0xb30 kernel/time/timer.c:2373 __run_timer_base kernel/time/timer.c:2385 [inline] __run_timer_base kernel/time/timer.c:2377 [inline] run_timer_base+0x114/0x190 kernel/time/timer.c:2394 run_timer_softirq+0x1a/0x50 kernel/time/timer.c:2404 handle_softirqs+0x1eb/0x9e0 kernel/softirq.c:622 __do_softirq kernel/softirq.c:656 [inline] invoke_softirq kernel/softirq.c:496 [inline] __irq_exit_rcu+0xef/0x150 kernel/softirq.c:723 irq_exit_rcu+0x9/0x30 kernel/softirq.c:739 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1056 [inline] sysvec_apic_timer_interrupt+0xa3/0xc0 arch/x86/kernel/apic/apic.c:1056 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 RIP: 0010:console_flush_one_record+0xac3/0xe50 kernel/printk/printk.c:3270 Code: 00 e8 b1 3a 29 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 cf 34 21 00 48 85 ed 0f 85 d7 01 00 00 e8 e1 39 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b RSP: 0018:ffffc9000490eb80 EFLAGS: 00000293 RAX: ffffffff8f511f58 RBX: ffffffff8f511f00 RCX: ffffffff81e79291 RDX: ffff888029f924c0 RSI: ffffffff81e7929f RDI: ffff888029f924c0 RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000f40 R13: ffffffff8f511f58 R14: ffffc9000490ec00 R15: dffffc0000000000 console_flush_all kernel/printk/printk.c:3343 [inline] __console_flush_and_unlock kernel/printk/printk.c:3373 [inline] console_unlock+0x103/0x260 kernel/printk/printk.c:3413 vprintk_emit+0x407/0x6b0 kernel/printk/printk.c:2479 dev_vprintk_emit+0x394/0x3e0 drivers/base/core.c:4913 dev_printk_emit+0xd2/0x10d drivers/base/core.c:4924 __netdev_printk+0x1d1/0x290 net/core/dev.c:12934 netdev_info+0xef/0x127 net/core/dev.c:12989 netif_change_name.cold+0xa0/0xb5 net/core/dev.c:1485 do_setlink.isra.0+0x31db/0x3e50 net/core/rtnetlink.c:3138 rtnl_changelink net/core/rtnetlink.c:3776 [inline] __rtnl_newlink net/core/rtnetlink.c:3935 [inline] rtnl_newlink+0x11bd/0x2380 net/core/rtnetlink.c:4072 rtnetlink_rcv_msg+0x95e/0xe90 net/core/rtnetlink.c:6958 netlink_rcv_skb+0x159/0x420 net/netlink/af_netlink.c:2550 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x5aa/0x870 net/netlink/af_netlink.c:1344 netlink_sendmsg+0x8b0/0xda0 net/netlink/af_netlink.c:1894 sock_sendmsg_nosec net/socket.c:727 [inline] __sock_sendmsg net/socket.c:742 [inline] __sys_sendto+0x468/0x4b0 net/socket.c:2206 __do_sys_sendto net/socket.c:2213 [inline] __se_sys_sendto net/socket.c:2209 [inline] __x64_sys_sendto+0xe0/0x1c0 net/socket.c:2209 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x106/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f083375cfce Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 RSP: 002b:00007fff251a1df8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 00005555931c7500 RCX: 00007f083375cfce RDX: 0000000000000030 RSI: 00007f0834543610 RDI: 0000000000000006 RBP: 0000000000000001 R08: 00007fff251a1e74 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 R13: 0000000000000000 R14: 00007f0834543610 R15: 0000000000000000 ---------------- Code disassembly (best guess): 0: 00 00 add %al,(%rax) 2: 00 fc add %bh,%ah 4: ff lcall (bad) 5: df 49 8d fisttps -0x73(%rcx) 8: 94 xchg %eax,%esp 9: 24 78 and $0x78,%al b: 01 00 add %eax,(%rax) d: 00 48 89 add %cl,-0x77(%rax) 10: f9 stc 11: 48 c1 e9 03 shr $0x3,%rcx 15: 80 3c 01 00 cmpb $0x0,(%rcx,%rax,1) 19: 0f 85 04 04 00 00 jne 0x423 1f: 48 8d 3d c8 ae 0c 0f lea 0xf0caec8(%rip),%rdi # 0xf0caeee 26: 48 8b 75 18 mov 0x18(%rbp),%rsi * 2a: 67 48 0f b9 3a ud1 (%edx),%rdi <-- trapping instruction 2f: e9 2a f7 ff ff jmp 0xfffff75e 34: e8 c5 e5 38 00 call 0x38e5fe 39: 90 nop 3a: 0f 0b ud2 3c: 90 nop 3d: e9 .byte 0xe9 3e: b2 f5 mov $0xf5,%dl final repro crashed as (corrupted=false): ------------[ cut here ]------------ workqueue: cannot queue hci_cmd_timeout on wq hci2 WARNING: kernel/workqueue.c:2270 at __queue_work+0xd08/0x1150 kernel/workqueue.c:2269, CPU#0: syz-executor/7009 Modules linked in: CPU: 0 UID: 0 PID: 7009 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 RIP: 0010:__queue_work+0xd0c/0x1150 kernel/workqueue.c:2269 Code: 00 00 00 fc ff df 49 8d 94 24 78 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 04 04 00 00 48 8d 3d c8 ae 0c 0f 48 8b 75 18 <67> 48 0f b9 3a e9 2a f7 ff ff e8 c5 e5 38 00 90 0f 0b 90 e9 b2 f5 RSP: 0018:ffffc90000007be8 EFLAGS: 00010046 RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff1100c323151 RDX: ffff8880540b5178 RSI: ffffffff8a83d360 RDI: ffffffff90dc9570 RBP: ffff888061918a70 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000000000100 R11: 0000000000000000 R12: ffff8880540b5000 R13: 1ffff92000000f8f R14: ffffffff81cff7c0 R15: 0000000000000001 FS: 00005555931c7500(0000) GS:ffff888124342000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fefe42eb6b0 CR3: 000000002a694000 CR4: 00000000003526f0 Call Trace: call_timer_fn+0x19a/0x670 kernel/time/timer.c:1748 expire_timers kernel/time/timer.c:1794 [inline] __run_timers+0x570/0xb30 kernel/time/timer.c:2373 __run_timer_base kernel/time/timer.c:2385 [inline] __run_timer_base kernel/time/timer.c:2377 [inline] run_timer_base+0x114/0x190 kernel/time/timer.c:2394 run_timer_softirq+0x1a/0x50 kernel/time/timer.c:2404 handle_softirqs+0x1eb/0x9e0 kernel/softirq.c:622 __do_softirq kernel/softirq.c:656 [inline] invoke_softirq kernel/softirq.c:496 [inline] __irq_exit_rcu+0xef/0x150 kernel/softirq.c:723 irq_exit_rcu+0x9/0x30 kernel/softirq.c:739 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1056 [inline] sysvec_apic_timer_interrupt+0xa3/0xc0 arch/x86/kernel/apic/apic.c:1056 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 RIP: 0010:console_flush_one_record+0xac3/0xe50 kernel/printk/printk.c:3270 Code: 00 e8 b1 3a 29 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 cf 34 21 00 48 85 ed 0f 85 d7 01 00 00 e8 e1 39 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b RSP: 0018:ffffc9000490eb80 EFLAGS: 00000293 RAX: ffffffff8f511f58 RBX: ffffffff8f511f00 RCX: ffffffff81e79291 RDX: ffff888029f924c0 RSI: ffffffff81e7929f RDI: ffff888029f924c0 RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000f40 R13: ffffffff8f511f58 R14: ffffc9000490ec00 R15: dffffc0000000000 console_flush_all kernel/printk/printk.c:3343 [inline] __console_flush_and_unlock kernel/printk/printk.c:3373 [inline] console_unlock+0x103/0x260 kernel/printk/printk.c:3413 vprintk_emit+0x407/0x6b0 kernel/printk/printk.c:2479 dev_vprintk_emit+0x394/0x3e0 drivers/base/core.c:4913 dev_printk_emit+0xd2/0x10d drivers/base/core.c:4924 __netdev_printk+0x1d1/0x290 net/core/dev.c:12934 netdev_info+0xef/0x127 net/core/dev.c:12989 netif_change_name.cold+0xa0/0xb5 net/core/dev.c:1485 do_setlink.isra.0+0x31db/0x3e50 net/core/rtnetlink.c:3138 rtnl_changelink net/core/rtnetlink.c:3776 [inline] __rtnl_newlink net/core/rtnetlink.c:3935 [inline] rtnl_newlink+0x11bd/0x2380 net/core/rtnetlink.c:4072 rtnetlink_rcv_msg+0x95e/0xe90 net/core/rtnetlink.c:6958 netlink_rcv_skb+0x159/0x420 net/netlink/af_netlink.c:2550 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x5aa/0x870 net/netlink/af_netlink.c:1344 netlink_sendmsg+0x8b0/0xda0 net/netlink/af_netlink.c:1894 sock_sendmsg_nosec net/socket.c:727 [inline] __sock_sendmsg net/socket.c:742 [inline] __sys_sendto+0x468/0x4b0 net/socket.c:2206 __do_sys_sendto net/socket.c:2213 [inline] __se_sys_sendto net/socket.c:2209 [inline] __x64_sys_sendto+0xe0/0x1c0 net/socket.c:2209 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x106/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f083375cfce Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 RSP: 002b:00007fff251a1df8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 00005555931c7500 RCX: 00007f083375cfce RDX: 0000000000000030 RSI: 00007f0834543610 RDI: 0000000000000006 RBP: 0000000000000001 R08: 00007fff251a1e74 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 R13: 0000000000000000 R14: 00007f0834543610 R15: 0000000000000000 ---------------- Code disassembly (best guess): 0: 00 00 add %al,(%rax) 2: 00 fc add %bh,%ah 4: ff lcall (bad) 5: df 49 8d fisttps -0x73(%rcx) 8: 94 xchg %eax,%esp 9: 24 78 and $0x78,%al b: 01 00 add %eax,(%rax) d: 00 48 89 add %cl,-0x77(%rax) 10: f9 stc 11: 48 c1 e9 03 shr $0x3,%rcx 15: 80 3c 01 00 cmpb $0x0,(%rcx,%rax,1) 19: 0f 85 04 04 00 00 jne 0x423 1f: 48 8d 3d c8 ae 0c 0f lea 0xf0caec8(%rip),%rdi # 0xf0caeee 26: 48 8b 75 18 mov 0x18(%rbp),%rsi * 2a: 67 48 0f b9 3a ud1 (%edx),%rdi <-- trapping instruction 2f: e9 2a f7 ff ff jmp 0xfffff75e 34: e8 c5 e5 38 00 call 0x38e5fe 39: 90 nop 3a: 0f 0b ud2 3c: 90 nop 3d: e9 .byte 0xe9 3e: b2 f5 mov $0xf5,%dl