------------[ cut here ]------------ WARNING: CPU: 0 PID: 6115 at kernel/kcov.c:872 kcov_remote_start+0x55a/0x7f0 kernel/kcov.c:872 Modules linked in: CPU: 0 UID: 0 PID: 6115 Comm: syz.3.43 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 RIP: 0010:kcov_remote_start+0x55a/0x7f0 kernel/kcov.c:872 Code: ff 4c 89 ff be 03 00 00 00 e8 02 3d 08 03 e9 eb fa ff ff e8 98 be b9 09 f7 c3 00 02 00 00 0f 84 da fa ff ff e9 5a fc ff ff 90 <0f> 0b 90 e8 7e d7 b9 09 89 c0 48 c7 c7 08 d7 a0 92 48 03 3c c5 10 RSP: 0018:ffffc9000add7270 EFLAGS: 00010002 RAX: 0000000080000200 RBX: 0000000000000246 RCX: 0000000000000002 RDX: 0000000000000000 RSI: ffffffff8be33660 RDI: ffffffff8be33620 RBP: ffffc9000add74d0 R08: 0000000000000001 R09: 0000000000000000 R10: dffffc0000000000 R11: fffffbfff1f47067 R12: ffff8880b8628708 R13: ffffffff81bfb4d7 R14: ffff888032ed5a00 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff888125c1b000(0063) knlGS:00000000f54d5b40 CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 CR2: 00007f7b5bea5a90 CR3: 000000003158c000 CR4: 00000000003526f0 Call Trace: kcov_remote_start_common include/linux/kcov.h:50 [inline] ieee80211_rx_list+0x52c/0x2a90 net/mac80211/rx.c:5405 ieee80211_rx_napi+0x1a8/0x3d0 net/mac80211/rx.c:5446 ieee80211_rx include/net/mac80211.h:5210 [inline] ieee80211_handle_queued_frames+0xe8/0x1f0 net/mac80211/main.c:453 ieee80211_stop_device+0x3e/0xf0 net/mac80211/util.c:1563 ieee80211_do_stop+0x17e7/0x1fb0 net/mac80211/iface.c:721 ieee80211_stop+0x1b1/0x240 net/mac80211/iface.c:814 __dev_close_many+0x364/0x6f0 net/core/dev.c:1755 netif_close_many+0x225/0x410 net/core/dev.c:1780 netif_close+0x158/0x210 net/core/dev.c:1797 dev_close+0x10a/0x220 net/core/dev_api.c:220 cfg80211_shutdown_all_interfaces+0xd4/0x220 net/wireless/core.c:277 cfg80211_rfkill_set_block+0x2d/0x50 net/wireless/core.c:307 rfkill_set_block+0x1cf/0x440 net/rfkill/core.c:346 rfkill_fop_write+0x44b/0x570 net/rfkill/core.c:1301 vfs_write+0x27b/0xb30 fs/read_write.c:684 ksys_write+0x145/0x250 fs/read_write.c:738 do_syscall_32_irqs_on arch/x86/entry/syscall_32.c:83 [inline] __do_fast_syscall_32+0xb6/0x2b0 arch/x86/entry/syscall_32.c:306 do_fast_syscall_32+0x34/0x80 arch/x86/entry/syscall_32.c:331 entry_SYSENTER_compat_after_hwframe+0x84/0x8e RIP: 0023:0xf7fd6539 Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 RSP: 002b:00000000f54d555c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 ---------------- Code disassembly (best guess): 0: 03 74 b4 01 add 0x1(%rsp,%rsi,4),%esi 4: 10 07 adc %al,(%rdi) 6: 03 74 b0 01 add 0x1(%rax,%rsi,4),%esi a: 10 08 adc %cl,(%rax) c: 03 74 d8 01 add 0x1(%rax,%rbx,8),%esi 20: 00 51 52 add %dl,0x52(%rcx) 23: 55 push %rbp 24: 89 e5 mov %esp,%ebp 26: 0f 34 sysenter 28: cd 80 int $0x80 * 2a: 5d pop %rbp <-- trapping instruction 2b: 5a pop %rdx 2c: 59 pop %rcx 2d: c3 ret 2e: 90 nop 2f: 90 nop 30: 90 nop 31: 90 nop 32: 90 nop 33: 90 nop 34: 90 nop 35: 90 nop 36: 90 nop 37: 90 nop 38: 90 nop 39: 90 nop 3a: 90 nop 3b: 90 nop 3c: 90 nop 3d: 90 nop 3e: 90 nop 3f: 90 nop