Warning: Permanently added '10.128.0.97' (ED25519) to the list of known hosts. 2024/07/03 20:39:12 ignoring optional flag "sandboxArg"="0" 2024/07/03 20:39:12 parsed 1 programs 2024/07/03 20:39:16 executed programs: 0 [ 86.892014][ T2985] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.846407][ T645] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 97.043494][ T645] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 97.052879][ T645] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.060964][ T645] usb 1-1: Product: syz [ 97.065307][ T645] usb 1-1: Manufacturer: syz [ 97.070211][ T645] usb 1-1: SerialNumber: syz [ 97.082915][ T645] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 97.116423][ T24] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 97.318145][ T3446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.327345][ T3446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.349051][ T24] ath9k_htc 1-1:1.0: ath9k_htc: HTC initialized with 33 credits [ 98.357229][ T24] ------------[ cut here ]------------ [ 98.363078][ T24] UBSAN: array-index-out-of-bounds in drivers/net/wireless/ath/ath9k/htc_hst.c:26:51 [ 98.373023][ T24] index 255 is out of range for type 'htc_endpoint [22]' [ 98.380240][ T24] CPU: 1 PID: 24 Comm: kworker/1:0 Not tainted 6.10.0-rc6-syzkaller-00108-g179264157bba #0 [ 98.390391][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 98.400686][ T24] Workqueue: events request_firmware_work_func [ 98.406880][ T24] Call Trace: [ 98.410186][ T24] [ 98.413123][ T24] dump_stack_lvl+0x16c/0x1f0 [ 98.417945][ T24] __ubsan_handle_out_of_bounds+0x110/0x150 [ 98.423852][ T24] htc_issue_send.constprop.0+0x20c/0x230 [ 98.429686][ T24] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 98.435774][ T24] ath9k_wmi_cmd+0x41d/0x610 [ 98.440553][ T24] ath9k_regread+0xdb/0x160 [ 98.445304][ T24] ? __pfx_ath9k_regread+0x10/0x10 [ 98.450622][ T24] ? lockdep_hardirqs_on+0x7c/0x110 [ 98.455831][ T24] ? __debug_object_init+0x34a/0x480 [ 98.461120][ T24] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 98.467131][ T24] ? __pfx_ath9k_regread+0x10/0x10 [ 98.472298][ T24] ath9k_hw_init+0xf27/0x2bd0 [ 98.477006][ T24] ? lockdep_init_map_type+0x16d/0x7d0 [ 98.482499][ T24] ? __pfx_ath9k_hw_init+0x10/0x10 [ 98.487663][ T24] ? lockdep_init_map_type+0x16d/0x7d0 [ 98.493160][ T24] ath9k_htc_probe_device+0xb32/0x2660 [ 98.498799][ T24] ? __pfx_ath9k_htc_probe_device+0x10/0x10 [ 98.504828][ T24] ? usb_free_urb.part.0+0x52/0x110 [ 98.510202][ T24] ? usb_free_urb+0x1f/0x30 [ 98.514883][ T24] ? ath9k_hif_usb_alloc_urbs+0xbc5/0x1020 [ 98.520783][ T24] ath9k_htc_hw_init+0x33/0x70 [ 98.525641][ T24] ath9k_hif_usb_firmware_cb+0x272/0x620 [ 98.531638][ T24] ? __pfx_ath9k_hif_usb_firmware_cb+0x10/0x10 [ 98.537992][ T24] request_firmware_work_func+0x13a/0x250 [ 98.543751][ T24] ? __pfx_request_firmware_work_func+0x10/0x10 [ 98.550008][ T24] process_one_work+0x9c5/0x1b40 [ 98.553267][ T9] usb 1-1: USB disconnect, device number 2 [ 98.555101][ T24] ? __pfx_kernfs_notify_workfn+0x10/0x10 [ 98.567256][ T24] ? __pfx_process_one_work+0x10/0x10 [ 98.572726][ T24] ? assign_work+0x1a0/0x250 [ 98.577363][ T24] worker_thread+0x6c8/0xf30 [ 98.581983][ T24] ? __pfx_worker_thread+0x10/0x10 [ 98.587208][ T24] kthread+0x2c1/0x3a0 [ 98.591310][ T24] ? _raw_spin_unlock_irq+0x23/0x50 [ 98.596537][ T24] ? __pfx_kthread+0x10/0x10 [ 98.601147][ T24] ret_from_fork+0x45/0x80 [ 98.605732][ T24] ? __pfx_kthread+0x10/0x10 [ 98.610325][ T24] ret_from_fork_asm+0x1a/0x30 [ 98.615277][ T24] [ 98.624895][ T24] ---[ end trace ]--- [ 98.629042][ T24] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 98.636235][ T24] CPU: 1 PID: 24 Comm: kworker/1:0 Not tainted 6.10.0-rc6-syzkaller-00108-g179264157bba #0 [ 98.646907][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 98.657091][ T24] Workqueue: events request_firmware_work_func [ 98.663365][ T24] Call Trace: [ 98.666674][ T24] [ 98.669656][ T24] dump_stack_lvl+0x3d/0x1f0 [ 98.674395][ T24] panic+0x6f5/0x7a0 [ 98.678314][ T24] ? __pfx_panic+0x10/0x10 [ 98.682822][ T24] ? __pfx__printk+0x10/0x10 [ 98.687638][ T24] ? check_panic_on_warn+0x1f/0xb0 [ 98.692744][ T24] check_panic_on_warn+0xab/0xb0 [ 98.697675][ T24] __ubsan_handle_out_of_bounds+0x137/0x150 [ 98.703581][ T24] htc_issue_send.constprop.0+0x20c/0x230 [ 98.709338][ T24] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 98.715157][ T24] ath9k_wmi_cmd+0x41d/0x610 [ 98.719770][ T24] ath9k_regread+0xdb/0x160 [ 98.724281][ T24] ? __pfx_ath9k_regread+0x10/0x10 [ 98.729416][ T24] ? lockdep_hardirqs_on+0x7c/0x110 [ 98.734658][ T24] ? __debug_object_init+0x34a/0x480 [ 98.740423][ T24] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 98.746358][ T24] ? __pfx_ath9k_regread+0x10/0x10 [ 98.751645][ T24] ath9k_hw_init+0xf27/0x2bd0 [ 98.756507][ T24] ? lockdep_init_map_type+0x16d/0x7d0 [ 98.761981][ T24] ? __pfx_ath9k_hw_init+0x10/0x10 [ 98.767192][ T24] ? lockdep_init_map_type+0x16d/0x7d0 [ 98.772672][ T24] ath9k_htc_probe_device+0xb32/0x2660 [ 98.778159][ T24] ? __pfx_ath9k_htc_probe_device+0x10/0x10 [ 98.784056][ T24] ? usb_free_urb.part.0+0x52/0x110 [ 98.789314][ T24] ? usb_free_urb+0x1f/0x30 [ 98.793941][ T24] ? ath9k_hif_usb_alloc_urbs+0xbc5/0x1020 [ 98.799937][ T24] ath9k_htc_hw_init+0x33/0x70 [ 98.804806][ T24] ath9k_hif_usb_firmware_cb+0x272/0x620 [ 98.810452][ T24] ? __pfx_ath9k_hif_usb_firmware_cb+0x10/0x10 [ 98.816689][ T24] request_firmware_work_func+0x13a/0x250 [ 98.822434][ T24] ? __pfx_request_firmware_work_func+0x10/0x10 [ 98.829282][ T24] process_one_work+0x9c5/0x1b40 [ 98.834938][ T24] ? __pfx_kernfs_notify_workfn+0x10/0x10 [ 98.840771][ T24] ? __pfx_process_one_work+0x10/0x10 [ 98.846159][ T24] ? assign_work+0x1a0/0x250 [ 98.851072][ T24] worker_thread+0x6c8/0xf30 [ 98.855866][ T24] ? __pfx_worker_thread+0x10/0x10 [ 98.861008][ T24] kthread+0x2c1/0x3a0 [ 98.865104][ T24] ? _raw_spin_unlock_irq+0x23/0x50 [ 98.870310][ T24] ? __pfx_kthread+0x10/0x10 [ 98.874918][ T24] ret_from_fork+0x45/0x80 [ 98.879361][ T24] ? __pfx_kthread+0x10/0x10 [ 98.883973][ T24] ret_from_fork_asm+0x1a/0x30 [ 98.888840][ T24] [ 98.892207][ T24] Kernel Offset: disabled [ 98.896563][ T24] Rebooting in 86400 seconds..