Warning: Permanently added '10.128.0.238' (ED25519) to the list of known hosts. 2024/09/11 21:48:54 ignoring optional flag "sandboxArg"="0" 2024/09/11 21:48:54 parsed 1 programs [ 72.570147][ T29] audit: type=1400 audit(1726091334.581:113): avc: denied { unlink } for pid=3128 comm="syz-executor" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" 2024/09/11 21:48:54 executed programs: 0 [ 72.654403][ T3128] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 74.988616][ T29] audit: type=1400 audit(1726091337.001:114): avc: denied { create } for pid=3133 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 75.009654][ T29] audit: type=1400 audit(1726091337.001:115): avc: denied { write } for pid=3133 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 75.031266][ T29] audit: type=1400 audit(1726091337.021:116): avc: denied { read } for pid=3133 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 81.958871][ T29] audit: type=1400 audit(1726091343.961:117): avc: denied { write } for pid=3588 comm="syz-executor.0" name="raw-gadget" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 81.982296][ T29] audit: type=1400 audit(1726091343.971:118): avc: denied { ioctl } for pid=3588 comm="syz-executor.0" path="/dev/raw-gadget" dev="devtmpfs" ino=140 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 82.228483][ T36] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 82.422639][ T36] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 82.432003][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.440144][ T36] usb 1-1: Product: syz [ 82.444493][ T36] usb 1-1: Manufacturer: syz [ 82.449138][ T36] usb 1-1: SerialNumber: syz [ 82.462550][ T36] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 82.530772][ T43] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 82.733251][ T3589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.742705][ T3589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.766719][ T43] ath9k_htc 1-1:1.0: ath9k_htc: HTC initialized with 33 credits [ 83.774987][ T43] ------------[ cut here ]------------ [ 83.780686][ T43] UBSAN: array-index-out-of-bounds in drivers/net/wireless/ath/ath9k/htc_hst.c:26:51 [ 83.790216][ T43] index 255 is out of range for type 'htc_endpoint [22]' [ 83.797308][ T43] CPU: 1 UID: 0 PID: 43 Comm: kworker/1:2 Not tainted 6.11.0-rc7-syzkaller-00138-ge5fa8db0be3e #0 [ 83.807900][ T43] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 83.817975][ T43] Workqueue: events request_firmware_work_func [ 83.824181][ T43] Call Trace: [ 83.827480][ T43] [ 83.830497][ T43] dump_stack_lvl+0x16c/0x1f0 [ 83.835177][ T43] __ubsan_handle_out_of_bounds+0x110/0x150 [ 83.841074][ T43] htc_issue_send.constprop.0+0x20c/0x230 [ 83.846813][ T43] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 83.852619][ T43] ath9k_wmi_cmd+0x41d/0x610 [ 83.857311][ T43] ath9k_regread+0xdb/0x160 [ 83.861838][ T43] ? __pfx_ath9k_regread+0x10/0x10 [ 83.866954][ T43] ? lockdep_hardirqs_on+0x7c/0x110 [ 83.872145][ T43] ? __debug_object_init+0x34a/0x480 [ 83.877450][ T43] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 83.883427][ T43] ? __pfx_ath9k_regread+0x10/0x10 [ 83.888664][ T43] ath9k_hw_init+0xf27/0x2bd0 [ 83.893391][ T43] ? lockdep_init_map_type+0x16d/0x7d0 [ 83.898935][ T43] ? __pfx_ath9k_hw_init+0x10/0x10 [ 83.904055][ T43] ? lockdep_init_map_type+0x16d/0x7d0 [ 83.909533][ T43] ath9k_htc_probe_device+0xb32/0x2660 [ 83.915041][ T43] ? __pfx_ath9k_htc_probe_device+0x10/0x10 [ 83.920958][ T43] ? usb_free_urb.part.0+0x3e/0x100 [ 83.926180][ T43] ? usb_free_urb+0x1f/0x30 [ 83.930684][ T43] ? ath9k_hif_usb_alloc_urbs+0xbc5/0x1020 [ 83.936518][ T43] ath9k_htc_hw_init+0x33/0x70 [ 83.941547][ T43] ath9k_hif_usb_firmware_cb+0x272/0x620 [ 83.947301][ T43] ? __pfx_ath9k_hif_usb_firmware_cb+0x10/0x10 [ 83.953451][ T43] request_firmware_work_func+0x13a/0x250 [ 83.959209][ T43] ? __pfx_request_firmware_work_func+0x10/0x10 [ 83.965453][ T43] process_one_work+0x9c5/0x1b40 [ 83.969599][ T9] usb 1-1: USB disconnect, device number 2 [ 83.970394][ T43] ? __pfx_lock_acquire+0x10/0x10 [ 83.981328][ T43] ? __pfx_process_one_work+0x10/0x10 [ 83.986749][ T43] ? assign_work+0x1a0/0x250 [ 83.991470][ T43] worker_thread+0x6c8/0xed0 [ 83.996199][ T43] ? __kthread_parkme+0x148/0x220 [ 84.001344][ T43] ? __pfx_worker_thread+0x10/0x10 [ 84.006583][ T43] kthread+0x2c1/0x3a0 [ 84.010658][ T43] ? _raw_spin_unlock_irq+0x23/0x50 [ 84.015863][ T43] ? __pfx_kthread+0x10/0x10 [ 84.020630][ T43] ret_from_fork+0x45/0x80 [ 84.025067][ T43] ? __pfx_kthread+0x10/0x10 [ 84.029677][ T43] ret_from_fork_asm+0x1a/0x30 [ 84.034463][ T43] [ 84.048415][ T43] ---[ end trace ]--- [ 84.052462][ T43] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 84.059640][ T43] CPU: 1 UID: 0 PID: 43 Comm: kworker/1:2 Not tainted 6.11.0-rc7-syzkaller-00138-ge5fa8db0be3e #0 [ 84.070217][ T43] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 84.080260][ T43] Workqueue: events request_firmware_work_func [ 84.086454][ T43] Call Trace: [ 84.089741][ T43] [ 84.092668][ T43] dump_stack_lvl+0x3d/0x1f0 [ 84.097253][ T43] panic+0x6dc/0x7c0 [ 84.101146][ T43] ? __pfx_panic+0x10/0x10 [ 84.105559][ T43] ? __pfx__printk+0x10/0x10 [ 84.110253][ T43] ? check_panic_on_warn+0x1f/0xb0 [ 84.115363][ T43] check_panic_on_warn+0xab/0xb0 [ 84.120300][ T43] __ubsan_handle_out_of_bounds+0x137/0x150 [ 84.126281][ T43] htc_issue_send.constprop.0+0x20c/0x230 [ 84.131995][ T43] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 84.137800][ T43] ath9k_wmi_cmd+0x41d/0x610 [ 84.142388][ T43] ath9k_regread+0xdb/0x160 [ 84.146913][ T43] ? __pfx_ath9k_regread+0x10/0x10 [ 84.152126][ T43] ? lockdep_hardirqs_on+0x7c/0x110 [ 84.157335][ T43] ? __debug_object_init+0x34a/0x480 [ 84.162621][ T43] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 84.168546][ T43] ? __pfx_ath9k_regread+0x10/0x10 [ 84.173669][ T43] ath9k_hw_init+0xf27/0x2bd0 [ 84.178345][ T43] ? lockdep_init_map_type+0x16d/0x7d0 [ 84.183800][ T43] ? __pfx_ath9k_hw_init+0x10/0x10 [ 84.188931][ T43] ? lockdep_init_map_type+0x16d/0x7d0 [ 84.194394][ T43] ath9k_htc_probe_device+0xb32/0x2660 [ 84.199867][ T43] ? __pfx_ath9k_htc_probe_device+0x10/0x10 [ 84.205775][ T43] ? usb_free_urb.part.0+0x3e/0x100 [ 84.211003][ T43] ? usb_free_urb+0x1f/0x30 [ 84.215506][ T43] ? ath9k_hif_usb_alloc_urbs+0xbc5/0x1020 [ 84.221606][ T43] ath9k_htc_hw_init+0x33/0x70 [ 84.226389][ T43] ath9k_hif_usb_firmware_cb+0x272/0x620 [ 84.232069][ T43] ? __pfx_ath9k_hif_usb_firmware_cb+0x10/0x10 [ 84.238406][ T43] request_firmware_work_func+0x13a/0x250 [ 84.244150][ T43] ? __pfx_request_firmware_work_func+0x10/0x10 [ 84.250412][ T43] process_one_work+0x9c5/0x1b40 [ 84.255364][ T43] ? __pfx_lock_acquire+0x10/0x10 [ 84.260387][ T43] ? __pfx_process_one_work+0x10/0x10 [ 84.265758][ T43] ? assign_work+0x1a0/0x250 [ 84.270347][ T43] worker_thread+0x6c8/0xed0 [ 84.274940][ T43] ? __kthread_parkme+0x148/0x220 [ 84.279959][ T43] ? __pfx_worker_thread+0x10/0x10 [ 84.285064][ T43] kthread+0x2c1/0x3a0 [ 84.289131][ T43] ? _raw_spin_unlock_irq+0x23/0x50 [ 84.294326][ T43] ? __pfx_kthread+0x10/0x10 [ 84.298909][ T43] ret_from_fork+0x45/0x80 [ 84.303345][ T43] ? __pfx_kthread+0x10/0x10 [ 84.307925][ T43] ret_from_fork_asm+0x1a/0x30 [ 84.312711][ T43] [ 84.316039][ T43] Kernel Offset: disabled [ 84.320385][ T43] Rebooting in 86400 seconds..