Warning: Permanently added '10.128.1.22' (ED25519) to the list of known hosts. 2024/04/24 16:27:31 ignoring optional flag "sandboxArg"="0" 2024/04/24 16:27:31 parsed 1 programs 2024/04/24 16:27:34 executed programs: 0 [ 80.055710][ T3079] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.009780][ T41] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 90.193900][ T41] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 90.203180][ T41] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.211290][ T41] usb 1-1: Product: syz [ 90.215456][ T41] usb 1-1: Manufacturer: syz [ 90.220133][ T41] usb 1-1: SerialNumber: syz [ 90.234583][ T41] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 90.264472][ T2217] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 90.465674][ T3540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.474719][ T3540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.497074][ T2217] ath9k_htc 1-1:1.0: ath9k_htc: HTC initialized with 33 credits [ 91.505317][ T2217] ------------[ cut here ]------------ [ 91.510991][ T2217] UBSAN: array-index-out-of-bounds in drivers/net/wireless/ath/ath9k/htc_hst.c:26:51 [ 91.520536][ T2217] index 255 is out of range for type 'htc_endpoint [22]' [ 91.527596][ T2217] CPU: 1 PID: 2217 Comm: kworker/1:2 Not tainted 6.9.0-rc5-syzkaller-00104-ga160e1202ca3 #0 [ 91.537740][ T2217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 91.547871][ T2217] Workqueue: events request_firmware_work_func [ 91.554123][ T2217] Call Trace: [ 91.557397][ T2217] [ 91.560326][ T2217] dump_stack_lvl+0x16c/0x1f0 [ 91.565011][ T2217] __ubsan_handle_out_of_bounds+0x110/0x150 [ 91.570911][ T2217] htc_issue_send.constprop.0+0x20c/0x230 [ 91.576629][ T2217] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 91.582525][ T2217] ath9k_wmi_cmd+0x41d/0x610 [ 91.587124][ T2217] ath9k_regread+0xdb/0x160 [ 91.591725][ T2217] ? __pfx_ath9k_regread+0x10/0x10 [ 91.596931][ T2217] ? lockdep_hardirqs_on+0x7c/0x110 [ 91.602141][ T2217] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 91.607946][ T2217] ? __debug_object_init+0x34a/0x480 [ 91.613226][ T2217] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 91.619037][ T2217] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 91.624925][ T2217] ? __pfx_ath9k_regread+0x10/0x10 [ 91.630039][ T2217] ath9k_hw_init+0xf27/0x2bd0 [ 91.634820][ T2217] ? lockdep_init_map_type+0x16d/0x7d0 [ 91.640299][ T2217] ? __pfx_ath9k_hw_init+0x10/0x10 [ 91.645430][ T2217] ? lockdep_init_map_type+0x16d/0x7d0 [ 91.650905][ T2217] ath9k_htc_probe_device+0xb32/0x2660 [ 91.656382][ T2217] ? __pfx_ath9k_htc_probe_device+0x10/0x10 [ 91.662290][ T2217] ? usb_free_urb.part.0+0x52/0x110 [ 91.667490][ T2217] ? usb_free_urb+0x1f/0x30 [ 91.671990][ T2217] ? ath9k_hif_usb_alloc_urbs+0xbc5/0x1020 [ 91.677800][ T2217] ath9k_htc_hw_init+0x33/0x70 [ 91.682576][ T2217] ath9k_hif_usb_firmware_cb+0x272/0x620 [ 91.688226][ T2217] ? __pfx_ath9k_hif_usb_firmware_cb+0x10/0x10 [ 91.694390][ T2217] request_firmware_work_func+0x13a/0x250 [ 91.700116][ T2217] ? __pfx_request_firmware_work_func+0x10/0x10 [ 91.706477][ T2217] process_one_work+0x9a9/0x1ac0 [ 91.711435][ T2217] ? __pfx_kernfs_notify_workfn+0x10/0x10 [ 91.717161][ T2217] ? __pfx_process_one_work+0x10/0x10 [ 91.722564][ T2217] ? assign_work+0x1a0/0x250 [ 91.727177][ T2217] worker_thread+0x6c8/0xf70 [ 91.731771][ T2217] ? __kthread_parkme+0x148/0x220 [ 91.736803][ T2217] ? __pfx_worker_thread+0x10/0x10 [ 91.741913][ T2217] kthread+0x2c1/0x3a0 [ 91.745996][ T2217] ? _raw_spin_unlock_irq+0x23/0x50 [ 91.751215][ T2217] ? __pfx_kthread+0x10/0x10 [ 91.755822][ T2217] ret_from_fork+0x45/0x80 [ 91.760240][ T2217] ? __pfx_kthread+0x10/0x10 [ 91.764840][ T2217] ret_from_fork_asm+0x1a/0x30 [ 91.769622][ T2217] [ 91.772817][ T2217] ---[ end trace ]--- [ 91.776949][ T2217] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 91.784160][ T2217] CPU: 1 PID: 2217 Comm: kworker/1:2 Not tainted 6.9.0-rc5-syzkaller-00104-ga160e1202ca3 #0 [ 91.794605][ T2217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 91.804764][ T2217] Workqueue: events request_firmware_work_func [ 91.810926][ T2217] Call Trace: [ 91.814283][ T2217] [ 91.817206][ T2217] dump_stack_lvl+0x3d/0x1f0 [ 91.821799][ T2217] panic+0x6f5/0x7a0 [ 91.825686][ T2217] ? mark_held_locks+0x9f/0xe0 [ 91.830445][ T2217] ? __pfx_panic+0x10/0x10 [ 91.834852][ T2217] ? __pfx__printk+0x10/0x10 [ 91.839436][ T2217] ? check_panic_on_warn+0x1f/0xb0 [ 91.844541][ T2217] check_panic_on_warn+0xab/0xb0 [ 91.849473][ T2217] __ubsan_handle_out_of_bounds+0x137/0x150 [ 91.855368][ T2217] htc_issue_send.constprop.0+0x20c/0x230 [ 91.861093][ T2217] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 91.866901][ T2217] ath9k_wmi_cmd+0x41d/0x610 [ 91.871495][ T2217] ath9k_regread+0xdb/0x160 [ 91.876003][ T2217] ? __pfx_ath9k_regread+0x10/0x10 [ 91.881115][ T2217] ? lockdep_hardirqs_on+0x7c/0x110 [ 91.886312][ T2217] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 91.892314][ T2217] ? __debug_object_init+0x34a/0x480 [ 91.897600][ T2217] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 91.903410][ T2217] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 91.909297][ T2217] ? __pfx_ath9k_regread+0x10/0x10 [ 91.914408][ T2217] ath9k_hw_init+0xf27/0x2bd0 [ 91.919088][ T2217] ? lockdep_init_map_type+0x16d/0x7d0 [ 91.924574][ T2217] ? __pfx_ath9k_hw_init+0x10/0x10 [ 91.929686][ T2217] ? lockdep_init_map_type+0x16d/0x7d0 [ 91.935143][ T2217] ath9k_htc_probe_device+0xb32/0x2660 [ 91.940609][ T2217] ? __pfx_ath9k_htc_probe_device+0x10/0x10 [ 91.946498][ T2217] ? usb_free_urb.part.0+0x52/0x110 [ 91.951695][ T2217] ? usb_free_urb+0x1f/0x30 [ 91.956213][ T2217] ? ath9k_hif_usb_alloc_urbs+0xbc5/0x1020 [ 91.962016][ T2217] ath9k_htc_hw_init+0x33/0x70 [ 91.966778][ T2217] ath9k_hif_usb_firmware_cb+0x272/0x620 [ 91.972410][ T2217] ? __pfx_ath9k_hif_usb_firmware_cb+0x10/0x10 [ 91.978566][ T2217] request_firmware_work_func+0x13a/0x250 [ 91.984288][ T2217] ? __pfx_request_firmware_work_func+0x10/0x10 [ 91.990528][ T2217] process_one_work+0x9a9/0x1ac0 [ 91.995463][ T2217] ? __pfx_kernfs_notify_workfn+0x10/0x10 [ 92.001176][ T2217] ? __pfx_process_one_work+0x10/0x10 [ 92.006540][ T2217] ? assign_work+0x1a0/0x250 [ 92.011147][ T2217] worker_thread+0x6c8/0xf70 [ 92.015793][ T2217] ? __kthread_parkme+0x148/0x220 [ 92.020813][ T2217] ? __pfx_worker_thread+0x10/0x10 [ 92.025916][ T2217] kthread+0x2c1/0x3a0 [ 92.030181][ T2217] ? _raw_spin_unlock_irq+0x23/0x50 [ 92.035378][ T2217] ? __pfx_kthread+0x10/0x10 [ 92.040137][ T2217] ret_from_fork+0x45/0x80 [ 92.044550][ T2217] ? __pfx_kthread+0x10/0x10 [ 92.049140][ T2217] ret_from_fork_asm+0x1a/0x30 [ 92.053979][ T2217] [ 92.057419][ T2217] Kernel Offset: disabled [ 92.061765][ T2217] Rebooting in 86400 seconds..