------------[ cut here ]------------ WARNING: CPU: 0 PID: 10829 at net/mac80211/rx.c:4708 ieee80211_rx_list+0x1ba1/0x23a0 net/mac80211/rx.c:4708 Kernel panic - not syncing: panic_on_warn set ... CPU: 0 PID: 10829 Comm: syz-executor.0 Not tainted 5.9.0-rc7-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x198/0x1fd lib/dump_stack.c:118 panic+0x382/0x7fb kernel/panic.c:231 __warn.cold+0x20/0x4b kernel/panic.c:600 report_bug+0x1bd/0x210 lib/bug.c:198 handle_bug+0x38/0x90 arch/x86/kernel/traps.c:234 exc_invalid_op+0x14/0x40 arch/x86/kernel/traps.c:254 asm_exc_invalid_op+0x12/0x20 arch/x86/include/asm/idtentry.h:536 RIP: 0010:ieee80211_rx_list+0x1ba1/0x23a0 net/mac80211/rx.c:4708 Code: 00 00 48 89 df e8 5f f3 ec f9 e9 08 02 00 00 e8 55 1d ac f9 48 c7 84 24 c4 00 00 00 10 00 00 00 e9 cd ed ff ff e8 3f 1d ac f9 <0f> 0b e9 77 f0 ff ff e8 33 1d ac f9 44 89 e6 48 89 ef e8 28 2d 9d RSP: 0018:ffffc90000007c98 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff87ca0800 RDX: ffff8880942340c0 RSI: ffffffff87ca2151 RDI: 0000000000000001 RBP: ffff888096483cc0 R08: 0000000000000000 R09: ffffffff8d0c09e7 R10: 0000000000000000 R11: 0000000000000000 R12: ffff88804a293148 R13: ffff88804a290580 R14: ffff88804a290c80 R15: 0000000000000001 ieee80211_rx_napi+0xf7/0x3d0 net/mac80211/rx.c:4800 ieee80211_rx include/net/mac80211.h:4435 [inline] ieee80211_tasklet_handler+0xd3/0x130 net/mac80211/main.c:235 tasklet_action_common.constprop.0+0x237/0x470 kernel/softirq.c:559 __do_softirq+0x1f8/0xb23 kernel/softirq.c:298 asm_call_irq_on_stack+0xf/0x20 __run_on_irqstack arch/x86/include/asm/irq_stack.h:26 [inline] run_on_irqstack_cond arch/x86/include/asm/irq_stack.h:77 [inline] do_softirq_own_stack+0x9b/0xd0 arch/x86/kernel/irq_64.c:77 invoke_softirq kernel/softirq.c:393 [inline] __irq_exit_rcu kernel/softirq.c:423 [inline] irq_exit_rcu+0x235/0x280 kernel/softirq.c:435 sysvec_apic_timer_interrupt+0x51/0xf0 arch/x86/kernel/apic/apic.c:1091 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:581 RIP: 0010:preempt_schedule_irq+0xb5/0x1b0 kernel/sched/core.c:4785 Code: 81 09 54 f9 4c 89 f0 48 c1 e8 03 80 3c 18 00 0f 85 b9 00 00 00 48 83 3d 20 61 d4 01 00 0f 84 a5 00 00 00 fb 66 0f 1f 44 00 00 01 00 00 00 e8 21 ce ff ff 4c 89 e8 48 c1 e8 03 80 3c 18 00 0f RSP: 0018:ffffc900061f6a78 EFLAGS: 00000282 RAX: 1ffffffff13f8d7f RBX: dffffc0000000000 RCX: ffffffff815b7ef2 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 RBP: ffffed1012846818 R08: 0000000000000001 R09: ffffffff8d0c0a9f R10: fffffbfff1a18153 R11: 0000000000000001 R12: ffff8880942340c0 R13: ffffffff89fc6be0 R14: ffffffff89fc6bf8 R15: 0000000000000000 irqentry_exit_cond_resched kernel/entry/common.c:358 [inline] irqentry_exit_cond_resched kernel/entry/common.c:350 [inline] irqentry_exit+0x65/0x90 kernel/entry/common.c:388 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:581 RIP: 0010:write_comp_data+0x2f/0x80 kernel/kcov.c:218 Code: 05 c6 c4 8b 7e 65 48 8b 34 25 c0 fe 01 00 a9 00 01 ff 00 74 0f f6 c4 01 74 59 8b 86 2c 14 00 00 85 c0 74 4f 8b 86 08 14 00 00 <83> f8 03 75 44 48 8b 86 10 14 00 00 8b b6 0c 14 00 00 4c 8b 00 48 RSP: 0018:ffffc900061f6b68 EFLAGS: 00000246 RAX: 0000000000000002 RBX: 000000000000000b RCX: ffffffff8719c798 RDX: 0000000000000000 RSI: ffff8880942340c0 RDI: 0000000000000005 RBP: ffffffff89520160 R08: 0000000000000000 R09: ffffc900061f6cc7 R10: 000000000000000a R11: 0000000000000000 R12: 000000000000000b R13: ffffc900061f6cd0 R14: ffff88804c25e040 R15: ffffc900061f6c70 __sanitizer_cov_trace_switch+0x45/0x70 kernel/kcov.c:320 ipv6_get_saddr_eval net/ipv6/addrconf.c:1526 [inline] ipv6_get_saddr_eval+0x68/0x1030 net/ipv6/addrconf.c:1505 __ipv6_dev_get_saddr+0x1ce/0x500 net/ipv6/addrconf.c:1680 ipv6_dev_get_saddr+0x83b/0xba0 net/ipv6/addrconf.c:1815 ip6_route_get_saddr include/net/ip6_route.h:145 [inline] ip6_dst_lookup_tail+0xc4f/0x1700 net/ipv6/ip6_output.c:1031 ip6_dst_lookup_flow+0x8c/0x1d0 net/ipv6/ip6_output.c:1156 sctp_v6_get_dst+0x644/0x1bb0 net/sctp/ipv6.c:279 sctp_transport_route+0x125/0x350 net/sctp/transport.c:297 sctp_packet_config+0x973/0xd20 net/sctp/output.c:103 sctp_outq_select_transport+0x1e4/0x740 net/sctp/outqueue.c:859 sctp_outq_flush_ctrl.constprop.0+0x291/0xc40 net/sctp/outqueue.c:893 sctp_outq_flush+0xfb/0x2380 net/sctp/outqueue.c:1186 sctp_cmd_interpreter net/sctp/sm_sideeffect.c:1801 [inline] sctp_side_effects net/sctp/sm_sideeffect.c:1185 [inline] sctp_do_sm+0x4ee/0x4e50 net/sctp/sm_sideeffect.c:1156 sctp_primitive_ASSOCIATE+0x98/0xc0 net/sctp/primitive.c:73 sctp_sendmsg_to_asoc+0xb44/0x2090 net/sctp/socket.c:1823 sctp_sendmsg+0x1025/0x1cf0 net/sctp/socket.c:2013 inet_sendmsg+0x99/0xe0 net/ipv4/af_inet.c:817 sock_sendmsg_nosec net/socket.c:651 [inline] sock_sendmsg+0xcf/0x120 net/socket.c:671 ____sys_sendmsg+0x6e8/0x810 net/socket.c:2353 ___sys_sendmsg+0xf3/0x170 net/socket.c:2407 __sys_sendmsg+0xe5/0x1b0 net/socket.c:2440 do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46 entry_SYSCALL_64_after_hwframe+0x44/0xa9 RIP: 0033:0x45dd99 Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007f01bb16fc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 0000000000028100 RCX: 000000000045dd99 RDX: 0000000000000060 RSI: 0000000020000400 RDI: 0000000000000005 RBP: 000000000118bf60 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c R13: 00007ffd3ed7a49f R14: 00007f01bb1709c0 R15: 000000000118bf2c Kernel Offset: disabled Rebooting in 86400 seconds..