./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor659572545
<...>
Warning: Permanently added '10.128.0.181' (ECDSA) to the list of known hosts.
execve("./syz-executor659572545", ["./syz-executor659572545"], 0x7fff982dbe50 /* 10 vars */) = 0
brk(NULL) = 0x555556bd9000
brk(0x555556bd9c40) = 0x555556bd9c40
arch_prctl(ARCH_SET_FS, 0x555556bd9300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor659572545", 4096) = 27
brk(0x555556bfac40) = 0x555556bfac40
brk(0x555556bfb000) = 0x555556bfb000
mprotect(0x7fbda67a3000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI) = 3
syzkaller login: [ 38.625905][ T3607] ------------[ cut here ]------------
[ 38.631399][ T3607] memcpy: detected field-spanning write (size 8) of single field "&compat_event->pointer" at net/wireless/wext-core.c:623 (size 4)
[ 38.645475][ T3607] WARNING: CPU: 0 PID: 3607 at net/wireless/wext-core.c:623 wireless_send_event+0xab5/0xca0
[ 38.655792][ T3607] Modules linked in:
[ 38.659756][ T3607] CPU: 1 PID: 3607 Comm: syz-executor659 Not tainted 6.0.0-rc6-next-20220921-syzkaller #0
[ 38.669713][ T3607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2022
[ 38.679850][ T3607] RIP: 0010:wireless_send_event+0xab5/0xca0
[ 38.685788][ T3607] Code: fa ff ff e8 cd b9 db f8 b9 04 00 00 00 4c 89 e6 48 c7 c2 e0 56 11 8b 48 c7 c7 20 56 11 8b c6 05 94 8e 2a 05 01 e8 b8 b0 a6 00 <0f> 0b e9 9b fa ff ff e8 6f ef 27 f9 e9 a6 fd ff ff e8 c5 ef 27 f9
[ 38.705437][ T3607] RSP: 0018:ffffc90003b2fbc0 EFLAGS: 00010286
[ 38.711588][ T3607] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[ 38.719597][ T3607] RDX: ffff888021d157c0 RSI: ffffffff81620348 RDI: fffff52000765f6a
[ 38.727574][ T3607] RBP: ffff88801e15c780 R08: 0000000000000005 R09: 0000000000000000
[ 38.735591][ T3607] R10: 0000000080000000 R11: 20676e696e6e6170 R12: 0000000000000008
[ 38.743588][ T3607] R13: ffff888025a72640 R14: ffff8880225d402c R15: ffff8880225d4034
[ 38.751606][ T3607] FS: 0000555556bd9300(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
[ 38.760564][ T3607] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 38.767137][ T3607] CR2: 00007fbda677dfb8 CR3: 000000007b976000 CR4: 00000000003506e0
[ 38.775133][ T3607] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 38.783119][ T3607] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 38.791552][ T3607] Call Trace:
[ 38.794829][ T3607]
[ 38.797752][ T3607] ? rtnetlink_ifinfo_prep+0x410/0x410
[ 38.803241][ T3607] ? mutex_lock_io_nested+0x1190/0x1190
[ 38.808822][ T3607] ? dev_load+0x79/0x200
[ 38.813059][ T3607] ioctl_standard_call+0x155/0x1f0
[ 38.818199][ T3607] ? cfg80211_wext_freq+0x1b0/0x1b0
[ 38.823408][ T3607] ? iw_handler_get_private+0x1a0/0x1a0
[ 38.828982][ T3607] ? cfg80211_wext_freq+0x1b0/0x1b0
[ 38.834194][ T3607] wireless_process_ioctl+0xc8/0x4c0
[ 38.839514][ T3607] ? call_commit_handler+0x120/0x120
[ 38.844818][ T3607] wext_handle_ioctl+0x26b/0x280
[ 38.849778][ T3607] ? compat_standard_call+0x340/0x340
[ 38.855177][ T3607] sock_ioctl+0x285/0x640
[ 38.859541][ T3607] ? br_ioctl_call+0xa0/0xa0
[ 38.864140][ T3607] ? lock_downgrade+0x6e0/0x6e0
[ 38.869295][ T3607] ? bpf_lsm_file_ioctl+0x5/0x10
[ 38.874231][ T3607] ? br_ioctl_call+0xa0/0xa0
[ 38.878849][ T3607] __x64_sys_ioctl+0x193/0x200
[ 38.883632][ T3607] do_syscall_64+0x35/0xb0
[ 38.888076][ T3607] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 38.893989][ T3607] RIP: 0033:0x7fbda6736af9
[ 38.898421][ T3607] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 38.918067][ T3607] RSP: 002b:00007ffd45e80138 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 38.926466][ T3607] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbda6736af9
[ 38.934459][ T3607] RDX: 0000000020000000 RSI: 0000000000008b04 RDI: 0000000000000003
[ 38.942461][ T3607] RBP: 00007fbda66faca0 R08: 0000000000000000 R09: 0000000000000000
[ 38.950569][ T3607] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbda66fad30
[ 38.958571][ T3607] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 38.966551][ T3607]
[ 38.969589][ T3607] Kernel panic - not syncing: panic_on_warn set ...
[ 38.976168][ T3607] CPU: 1 PID: 3607 Comm: syz-executor659 Not tainted 6.0.0-rc6-next-20220921-syzkaller #0
[ 38.986042][ T3607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2022
[ 38.996084][ T3607] Call Trace:
[ 38.999349][ T3607]
[ 39.002268][ T3607] dump_stack_lvl+0xcd/0x134
[ 39.006876][ T3607] panic+0x2c8/0x622
[ 39.010769][ T3607] ? panic_print_sys_info.part.0+0x110/0x110
[ 39.016754][ T3607] ? __warn.cold+0x24b/0x350
[ 39.021331][ T3607] ? wireless_send_event+0xab5/0xca0
[ 39.026610][ T3607] __warn.cold+0x25c/0x350
[ 39.031019][ T3607] ? __wake_up_klogd.part.0+0x99/0xf0
[ 39.036396][ T3607] ? wireless_send_event+0xab5/0xca0
[ 39.041697][ T3607] report_bug+0x1bc/0x210
[ 39.046042][ T3607] handle_bug+0x3c/0x60
[ 39.050217][ T3607] exc_invalid_op+0x14/0x40
[ 39.054719][ T3607] asm_exc_invalid_op+0x16/0x20
[ 39.059589][ T3607] RIP: 0010:wireless_send_event+0xab5/0xca0
[ 39.065498][ T3607] Code: fa ff ff e8 cd b9 db f8 b9 04 00 00 00 4c 89 e6 48 c7 c2 e0 56 11 8b 48 c7 c7 20 56 11 8b c6 05 94 8e 2a 05 01 e8 b8 b0 a6 00 <0f> 0b e9 9b fa ff ff e8 6f ef 27 f9 e9 a6 fd ff ff e8 c5 ef 27 f9
[ 39.085109][ T3607] RSP: 0018:ffffc90003b2fbc0 EFLAGS: 00010286
[ 39.091177][ T3607] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[ 39.099151][ T3607] RDX: ffff888021d157c0 RSI: ffffffff81620348 RDI: fffff52000765f6a
[ 39.107125][ T3607] RBP: ffff88801e15c780 R08: 0000000000000005 R09: 0000000000000000
[ 39.115095][ T3607] R10: 0000000080000000 R11: 20676e696e6e6170 R12: 0000000000000008
[ 39.123067][ T3607] R13: ffff888025a72640 R14: ffff8880225d402c R15: ffff8880225d4034
[ 39.131047][ T3607] ? vprintk+0x88/0x90
[ 39.135130][ T3607] ? rtnetlink_ifinfo_prep+0x410/0x410
[ 39.140605][ T3607] ? mutex_lock_io_nested+0x1190/0x1190
[ 39.146167][ T3607] ? dev_load+0x79/0x200
[ 39.150420][ T3607] ioctl_standard_call+0x155/0x1f0
[ 39.155550][ T3607] ? cfg80211_wext_freq+0x1b0/0x1b0
[ 39.160763][ T3607] ? iw_handler_get_private+0x1a0/0x1a0
[ 39.166321][ T3607] ? cfg80211_wext_freq+0x1b0/0x1b0
[ 39.171526][ T3607] wireless_process_ioctl+0xc8/0x4c0
[ 39.176828][ T3607] ? call_commit_handler+0x120/0x120
[ 39.182136][ T3607] wext_handle_ioctl+0x26b/0x280
[ 39.187097][ T3607] ? compat_standard_call+0x340/0x340
[ 39.192499][ T3607] sock_ioctl+0x285/0x640
[ 39.196845][ T3607] ? br_ioctl_call+0xa0/0xa0
[ 39.201450][ T3607] ? lock_downgrade+0x6e0/0x6e0
[ 39.206310][ T3607] ? bpf_lsm_file_ioctl+0x5/0x10
[ 39.211255][ T3607] ? br_ioctl_call+0xa0/0xa0
[ 39.215852][ T3607] __x64_sys_ioctl+0x193/0x200
[ 39.220635][ T3607] do_syscall_64+0x35/0xb0
[ 39.225069][ T3607] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 39.230980][ T3607] RIP: 0033:0x7fbda6736af9
[ 39.235394][ T3607] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 39.256141][ T3607] RSP: 002b:00007ffd45e80138 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 39.264563][ T3607] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbda6736af9
[ 39.272538][ T3607] RDX: 0000000020000000 RSI: 0000000000008b04 RDI: 0000000000000003
[ 39.280518][ T3607] RBP: 00007fbda66faca0 R08: 0000000000000000 R09: 0000000000000000
[ 39.288493][ T3607] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbda66fad30
[ 39.296473][ T3607] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 39.304455][ T3607]
[ 39.307619][ T3607] Kernel Offset: disabled
[ 39.311939][ T3607] Rebooting in 86400 seconds..