search

svpcom / rtl8812au

Patched rtl88xxau drivers for wfb-ng
https://github.com/svpcom/wfb-ng
GNU General Public License v2.0
103 stars 64 forks source link

array-index-out-of-bounds in rtl8812au/core/rtw_wlan_util.c" when loading rtl8821au wifi usb adaptor #39

Open sardChen opened 3 hours ago

sardChen commented 3 hours ago

When executing fuzzing test for loading rtl8812au, I found four array-index-out-of-bounds bugs reported by UBSAN in dmesg logs:

[   57.124613] RTL8226B_RTL8221B 2.5Gbps PHY r8169-0-600:00: attached PHY driver (mii_bus:phy_addr=r8169-0-600:00, irq=MAC)
[   57.300696] r8169 0000:06:00.0 enp6s0: Link is Down
[   57.401734] iwlwifi 0000:07:00.0: Registered PHC clock: iwlwifi-PTP, with index: 0
[   57.737859] kauditd_printk_skb: 39 callbacks suppressed
[   57.737862] audit: type=1400 audit(1730531948.070:51): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/lib/snapd/snap-confine" pid=1120 comm="apparmor_parser"
[   57.758247] audit: type=1400 audit(1730531948.090:52): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/lib/snapd/snap-confine//mount-namespace-capture-helper" pid=1120 comm="apparmor_parser"
[   58.127340] audit: type=1400 audit(1730531948.459:53): apparmor="DENIED" operation="capable" class="cap" profile="/usr/sbin/cupsd" pid=1075 comm="cupsd" capability=12  capname="net_admin"
[   59.189439] ================================================================================
[   59.189446] UBSAN: array-index-out-of-bounds in /home/sandy/workplace/wifiTool/driver/8812au/rtl8812au/core/rtw_wlan_util.c:1838:48
[   59.189449] index 1 is out of range for type 'u8 [1]'
[   59.189452] CPU: 4 PID: 0 Comm: swapper/4 Tainted: G           OE      6.6.58 #1
[   59.189454] Hardware name: Gigabyte Technology Co., Ltd. B660M GAMING AC DDR4/B660M GAMING AC DDR4, BIOS F4 01/17/2022
[   59.189456] Call Trace:
[   59.189457]  <IRQ>
[   59.189458]  dump_stack_lvl+0x48/0x70
[   59.189465]  dump_stack+0x10/0x20
[   59.189467]  __ubsan_handle_out_of_bounds+0xa2/0x100
[   59.189470]  ? detach_if_pending+0x217/0x2e0
[   59.189474]  HT_caps_handler+0x107c/0x1570 [88XXau_wfb]
[   59.189561]  ? __pfx_HT_caps_handler+0x10/0x10 [88XXau_wfb]
[   59.189624]  ? __kasan_check_write+0x14/0x30
[   59.189627]  ? _raw_spin_unlock_bh+0x1d/0x30
[   59.189631]  ? rtw_get_stainfo+0x27d/0x340 [88XXau_wfb]
[   59.189703]  OnAssocRsp+0x44d/0x620 [88XXau_wfb]
[   59.189764]  mgt_dispatcher+0x62c/0xba0 [88XXau_wfb]
[   59.189823]  ? __pfx_mgt_dispatcher+0x10/0x10 [88XXau_wfb]
[   59.189879]  ? __pfx_rtw_get_stainfo+0x10/0x10 [88XXau_wfb]
[   59.189949]  ? rtw_get_bcmc_stainfo+0x77/0xb0 [88XXau_wfb]
[   59.190014]  ? __pfx_rtw_get_bcmc_stainfo+0x10/0x10 [88XXau_wfb]
[   59.190076]  ? _raw_spin_unlock_bh+0x1d/0x30
[   59.190078]  validate_recv_mgnt_frame+0x1f7/0xcf0 [88XXau_wfb]
[   59.190142]  validate_recv_frame+0x425/0x7b0 [88XXau_wfb]
[   59.190204]  ? __pfx_validate_recv_frame+0x10/0x10 [88XXau_wfb]
[   59.190265]  recv_func+0xec/0xf90 [88XXau_wfb]
[   59.190326]  ? __asan_memcpy+0x4e/0x80
[   59.190328]  pre_recv_entry+0xeb/0x510 [88XXau_wfb]
[   59.190389]  recvbuf2recvframe+0x118/0x8b0 [88XXau_wfb]
[   59.190474]  usb_recv_tasklet+0x8e/0x260 [88XXau_wfb]
[   59.190555]  tasklet_action_common.constprop.0+0x275/0x670
[   59.190559]  tasklet_action+0x22/0x30
[   59.190561]  handle_softirqs+0x192/0x5d0
[   59.190564]  __irq_exit_rcu+0x15c/0x1b0
[   59.190567]  irq_exit_rcu+0xe/0x20
[   59.190569]  common_interrupt+0xa4/0xb0
[   59.190572]  </IRQ>
[   59.190573]  <TASK>
[   59.190574]  asm_common_interrupt+0x27/0x40
[   59.190576] RIP: 0010:cpuidle_enter_state+0x1df/0x520
[   59.190579] Code: 01 73 dd 48 83 c4 28 44 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d 31 d2 31 c9 31 f6 31 ff 45 31 c0 c3 cc cc cc cc fb 0f 1f 44 00 00 <45> 85 f6 0f 89 06 ff ff ff 48 c7 43 18 00 00 00 00 49 83 fd 09 0f
[   59.190581] RSP: 0000:ffff888100d77d30 EFLAGS: 00000246
[   59.190584] RAX: 0000000000000000 RBX: ffff88885c24ffe0 RCX: 0000000000000000
[   59.190585] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   59.190587] RBP: ffff888100d77d80 R08: 0000000000000000 R09: 0000000000000000
[   59.190588] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffffb7c627c0
[   59.190589] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000dc7f6e718
[   59.190592]  ? __pfx_menu_select+0x10/0x10
[   59.190596]  cpuidle_enter+0x4f/0xb0
[   59.190598]  call_cpuidle+0x47/0xd0
[   59.190601]  do_idle+0x372/0x460
[   59.190604]  ? __pfx_do_idle+0x10/0x10
[   59.190607]  cpu_startup_entry+0x58/0x70
[   59.190610]  start_secondary+0x220/0x2b0
[   59.190612]  ? __pfx_start_secondary+0x10/0x10
[   59.190615]  secondary_startup_64_no_verify+0x18f/0x19b
[   59.190619]  </TASK>
[   59.190624] ================================================================================
[   59.190626] ================================================================================
[   59.190627] UBSAN: array-index-out-of-bounds in /home/sandy/workplace/wifiTool/driver/8812au/rtl8812au/core/rtw_wlan_util.c:1843:75
[   59.190642] index 2 is out of range for type 'u8 [1]'
[   59.190644] CPU: 4 PID: 0 Comm: swapper/4 Tainted: G           OE      6.6.58 #1
[   59.190646] Hardware name: Gigabyte Technology Co., Ltd. B660M GAMING AC DDR4/B660M GAMING AC DDR4, BIOS F4 01/17/2022
[   59.190647] Call Trace:
[   59.190648]  <IRQ>
[   59.190649]  dump_stack_lvl+0x48/0x70
[   59.190652]  dump_stack+0x10/0x20
[   59.190654]  __ubsan_handle_out_of_bounds+0xa2/0x100
[   59.190656]  ? detach_if_pending+0x217/0x2e0
[   59.190659]  HT_caps_handler+0x265/0x1570 [88XXau_wfb]
[   59.190735]  ? __pfx_HT_caps_handler+0x10/0x10 [88XXau_wfb]
[   59.190832]  ? __kasan_check_write+0x14/0x30
[   59.190836]  ? _raw_spin_unlock_bh+0x1d/0x30
[   59.190840]  ? rtw_get_stainfo+0x27d/0x340 [88XXau_wfb]
[   59.190959]  OnAssocRsp+0x44d/0x620 [88XXau_wfb]
[   59.191022]  mgt_dispatcher+0x62c/0xba0 [88XXau_wfb]
[   59.191080]  ? __pfx_mgt_dispatcher+0x10/0x10 [88XXau_wfb]
[   59.191135]  ? __pfx_rtw_get_stainfo+0x10/0x10 [88XXau_wfb]
[   59.191205]  ? rtw_get_bcmc_stainfo+0x77/0xb0 [88XXau_wfb]
[   59.191271]  ? __pfx_rtw_get_bcmc_stainfo+0x10/0x10 [88XXau_wfb]
[   59.191335]  ? _raw_spin_unlock_bh+0x1d/0x30
[   59.191338]  validate_recv_mgnt_frame+0x1f7/0xcf0 [88XXau_wfb]
[   59.191403]  validate_recv_frame+0x425/0x7b0 [88XXau_wfb]
[   59.191468]  ? __pfx_validate_recv_frame+0x10/0x10 [88XXau_wfb]
[   59.191531]  recv_func+0xec/0xf90 [88XXau_wfb]
[   59.191593]  ? __asan_memcpy+0x4e/0x80
[   59.191596]  pre_recv_entry+0xeb/0x510 [88XXau_wfb]
[   59.191658]  recvbuf2recvframe+0x118/0x8b0 [88XXau_wfb]
[   59.191740]  usb_recv_tasklet+0x8e/0x260 [88XXau_wfb]
[   59.191817]  tasklet_action_common.constprop.0+0x275/0x670
[   59.191821]  tasklet_action+0x22/0x30
[   59.191824]  handle_softirqs+0x192/0x5d0
[   59.191827]  __irq_exit_rcu+0x15c/0x1b0
[   59.191829]  irq_exit_rcu+0xe/0x20
[   59.191832]  common_interrupt+0xa4/0xb0
[   59.191834]  </IRQ>
[   59.191835]  <TASK>
[   59.191836]  asm_common_interrupt+0x27/0x40
[   59.191838] RIP: 0010:cpuidle_enter_state+0x1df/0x520
[   59.191840] Code: 01 73 dd 48 83 c4 28 44 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d 31 d2 31 c9 31 f6 31 ff 45 31 c0 c3 cc cc cc cc fb 0f 1f 44 00 00 <45> 85 f6 0f 89 06 ff ff ff 48 c7 43 18 00 00 00 00 49 83 fd 09 0f
[   59.191842] RSP: 0000:ffff888100d77d30 EFLAGS: 00000246
[   59.191844] RAX: 0000000000000000 RBX: ffff88885c24ffe0 RCX: 0000000000000000
[   59.191846] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   59.191847] RBP: ffff888100d77d80 R08: 0000000000000000 R09: 0000000000000000
[   59.191848] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffffb7c627c0
[   59.191849] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000dc7f6e718
[   59.191852]  ? __pfx_menu_select+0x10/0x10
[   59.191856]  cpuidle_enter+0x4f/0xb0
[   59.191858]  call_cpuidle+0x47/0xd0
[   59.191861]  do_idle+0x372/0x460
[   59.191864]  ? __pfx_do_idle+0x10/0x10
[   59.191867]  cpu_startup_entry+0x58/0x70
[   59.191870]  start_secondary+0x220/0x2b0
[   59.191872]  ? __pfx_start_secondary+0x10/0x10
[   59.191874]  secondary_startup_64_no_verify+0x18f/0x19b
[   59.191878]  </TASK>
[   59.191881] ================================================================================
[   59.191883] ================================================================================
[   59.191885] UBSAN: array-index-out-of-bounds in /home/sandy/workplace/wifiTool/driver/8812au/rtl8812au/core/rtw_wlan_util.c:1849:76
[   59.191887] index 2 is out of range for type 'u8 [1]'
[   59.191888] CPU: 4 PID: 0 Comm: swapper/4 Tainted: G           OE      6.6.58 #1
[   59.191890] Hardware name: Gigabyte Technology Co., Ltd. B660M GAMING AC DDR4/B660M GAMING AC DDR4, BIOS F4 01/17/2022
[   59.191891] Call Trace:
[   59.191892]  <IRQ>
[   59.191893]  dump_stack_lvl+0x48/0x70
[   59.191896]  dump_stack+0x10/0x20
[   59.191898]  __ubsan_handle_out_of_bounds+0xa2/0x100
[   59.191900]  ? detach_if_pending+0x217/0x2e0
[   59.191902]  HT_caps_handler+0x306/0x1570 [88XXau_wfb]
[   59.192005]  ? __pfx_HT_caps_handler+0x10/0x10 [88XXau_wfb]
[   59.192095]  ? __kasan_check_write+0x14/0x30
[   59.192097]  ? _raw_spin_unlock_bh+0x1d/0x30
[   59.192100]  ? rtw_get_stainfo+0x27d/0x340 [88XXau_wfb]
[   59.192171]  OnAssocRsp+0x44d/0x620 [88XXau_wfb]
[   59.192231]  mgt_dispatcher+0x62c/0xba0 [88XXau_wfb]
[   59.192289]  ? __pfx_mgt_dispatcher+0x10/0x10 [88XXau_wfb]
[   59.192344]  ? __pfx_rtw_get_stainfo+0x10/0x10 [88XXau_wfb]
[   59.192414]  ? rtw_get_bcmc_stainfo+0x77/0xb0 [88XXau_wfb]
[   59.192480]  ? __pfx_rtw_get_bcmc_stainfo+0x10/0x10 [88XXau_wfb]
[   59.192545]  ? _raw_spin_unlock_bh+0x1d/0x30
[   59.192547]  validate_recv_mgnt_frame+0x1f7/0xcf0 [88XXau_wfb]
[   59.192612]  validate_recv_frame+0x425/0x7b0 [88XXau_wfb]
[   59.192674]  ? __pfx_validate_recv_frame+0x10/0x10 [88XXau_wfb]
[   59.192734]  recv_func+0xec/0xf90 [88XXau_wfb]
[   59.192794]  ? __asan_memcpy+0x4e/0x80
[   59.192796]  pre_recv_entry+0xeb/0x510 [88XXau_wfb]
[   59.192856]  recvbuf2recvframe+0x118/0x8b0 [88XXau_wfb]
[   59.192936]  usb_recv_tasklet+0x8e/0x260 [88XXau_wfb]
[   59.193014]  tasklet_action_common.constprop.0+0x275/0x670
[   59.193018]  tasklet_action+0x22/0x30
[   59.193020]  handle_softirqs+0x192/0x5d0
[   59.193023]  __irq_exit_rcu+0x15c/0x1b0
[   59.193026]  irq_exit_rcu+0xe/0x20
[   59.193028]  common_interrupt+0xa4/0xb0
[   59.193030]  </IRQ>
[   59.193031]  <TASK>
[   59.193032]  asm_common_interrupt+0x27/0x40
[   59.193034] RIP: 0010:cpuidle_enter_state+0x1df/0x520
[   59.193035] Code: 01 73 dd 48 83 c4 28 44 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d 31 d2 31 c9 31 f6 31 ff 45 31 c0 c3 cc cc cc cc fb 0f 1f 44 00 00 <45> 85 f6 0f 89 06 ff ff ff 48 c7 43 18 00 00 00 00 49 83 fd 09 0f
[   59.193037] RSP: 0000:ffff888100d77d30 EFLAGS: 00000246
[   59.193039] RAX: 0000000000000000 RBX: ffff88885c24ffe0 RCX: 0000000000000000
[   59.193041] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   59.193042] RBP: ffff888100d77d80 R08: 0000000000000000 R09: 0000000000000000
[   59.193043] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffffb7c627c0
[   59.193044] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000dc7f6e718
[   59.193047]  ? __pfx_menu_select+0x10/0x10
[   59.193050]  cpuidle_enter+0x4f/0xb0
[   59.193052]  call_cpuidle+0x47/0xd0
[   59.193054]  do_idle+0x372/0x460
[   59.193057]  ? __pfx_do_idle+0x10/0x10
[   59.193060]  cpu_startup_entry+0x58/0x70
[   59.193063]  start_secondary+0x220/0x2b0
[   59.193065]  ? __pfx_start_secondary+0x10/0x10
[   59.193067]  secondary_startup_64_no_verify+0x18f/0x19b
[   59.193070]  </TASK>
[   59.193073] ================================================================================
[   59.193075] ================================================================================
[   59.193076] UBSAN: array-index-out-of-bounds in /home/sandy/workplace/wifiTool/driver/8812au/rtl8812au/core/rtw_wlan_util.c:1852:34
[   59.193078] index 2 is out of range for type 'u8 [1]'
[   59.193080] CPU: 4 PID: 0 Comm: swapper/4 Tainted: G           OE      6.6.58 #1
[   59.193081] Hardware name: Gigabyte Technology Co., Ltd. B660M GAMING AC DDR4/B660M GAMING AC DDR4, BIOS F4 01/17/2022
[   59.193082] Call Trace:
[   59.193083]  <IRQ>
[   59.193084]  dump_stack_lvl+0x48/0x70
[   59.193087]  dump_stack+0x10/0x20
[   59.193089]  __ubsan_handle_out_of_bounds+0xa2/0x100
[   59.193091]  ? detach_if_pending+0x217/0x2e0
[   59.193093]  HT_caps_handler+0x337/0x1570 [88XXau_wfb]
[   59.193192]  ? __pfx_HT_caps_handler+0x10/0x10 [88XXau_wfb]
[   59.193272]  ? __kasan_check_write+0x14/0x30
[   59.193274]  ? _raw_spin_unlock_bh+0x1d/0x30
[   59.193276]  ? rtw_get_stainfo+0x27d/0x340 [88XXau_wfb]
[   59.193346]  OnAssocRsp+0x44d/0x620 [88XXau_wfb]
[   59.193409]  mgt_dispatcher+0x62c/0xba0 [88XXau_wfb]
[   59.193470]  ? __pfx_mgt_dispatcher+0x10/0x10 [88XXau_wfb]
[   59.193526]  ? __pfx_rtw_get_stainfo+0x10/0x10 [88XXau_wfb]
[   59.193593]  ? rtw_get_bcmc_stainfo+0x77/0xb0 [88XXau_wfb]
[   59.193657]  ? __pfx_rtw_get_bcmc_stainfo+0x10/0x10 [88XXau_wfb]
[   59.193720]  ? _raw_spin_unlock_bh+0x1d/0x30
[   59.193723]  validate_recv_mgnt_frame+0x1f7/0xcf0 [88XXau_wfb]
[   59.193788]  validate_recv_frame+0x425/0x7b0 [88XXau_wfb]
[   59.193851]  ? __pfx_validate_recv_frame+0x10/0x10 [88XXau_wfb]
[   59.193913]  recv_func+0xec/0xf90 [88XXau_wfb]
[   59.193974]  ? __asan_memcpy+0x4e/0x80
[   59.193977]  pre_recv_entry+0xeb/0x510 [88XXau_wfb]
[   59.194041]  recvbuf2recvframe+0x118/0x8b0 [88XXau_wfb]
[   59.194124]  usb_recv_tasklet+0x8e/0x260 [88XXau_wfb]
[   59.194204]  tasklet_action_common.constprop.0+0x275/0x670
[   59.194207]  tasklet_action+0x22/0x30
[   59.194209]  handle_softirqs+0x192/0x5d0
[   59.194212]  __irq_exit_rcu+0x15c/0x1b0
[   59.194215]  irq_exit_rcu+0xe/0x20
[   59.194217]  common_interrupt+0xa4/0xb0
[   59.194219]  </IRQ>
[   59.194220]  <TASK>
[   59.194221]  asm_common_interrupt+0x27/0x40
[   59.194223] RIP: 0010:cpuidle_enter_state+0x1df/0x520
[   59.194224] Code: 01 73 dd 48 83 c4 28 44 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d 31 d2 31 c9 31 f6 31 ff 45 31 c0 c3 cc cc cc cc fb 0f 1f 44 00 00 <45> 85 f6 0f 89 06 ff ff ff 48 c7 43 18 00 00 00 00 49 83 fd 09 0f
[   59.194226] RSP: 0000:ffff888100d77d30 EFLAGS: 00000246
[   59.194228] RAX: 0000000000000000 RBX: ffff88885c24ffe0 RCX: 0000000000000000
[   59.194229] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   59.194231] RBP: ffff888100d77d80 R08: 0000000000000000 R09: 0000000000000000
[   59.194232] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffffb7c627c0
[   59.194233] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000dc7f6e718
[   59.194235]  ? __pfx_menu_select+0x10/0x10
[   59.194238]  cpuidle_enter+0x4f/0xb0
[   59.194241]  call_cpuidle+0x47/0xd0
[   59.194243]  do_idle+0x372/0x460
[   59.194246]  ? __pfx_do_idle+0x10/0x10
[   59.194249]  cpu_startup_entry+0x58/0x70
[   59.194251]  start_secondary+0x220/0x2b0
[   59.194253]  ? __pfx_start_secondary+0x10/0x10
[   59.194256]  secondary_startup_64_no_verify+0x18f/0x19b
[   59.194259]  </TASK>
[   59.194265] ================================================================================
[   61.086446] audit: type=1400 audit(1730531951.418:54): apparmor="DENIED" operation="capable" class="cap" profile="/usr/lib/snapd/snap-confine" pid=1214 comm="snap-confine" capability=12  capname="net_admin"
[   61.086531] audit: type=1400 audit(1730531951.419:55): apparmor="DENIED" operation="capable" class="cap" profile="/usr/lib/snapd/snap-confine" pid=1214 comm="snap-confine" capability=38  capname="perfmon"
[   61.770987] wlp7s0: authenticate with 62:ca:db:1e:de:b5
[   61.775761] wlp7s0: send auth to 62:ca:db:1e:de:b5 (try 1/3)
[   61.777252] wlp7s0: authenticated
[   61.778410] wlp7s0: associate with 62:ca:db:1e:de:b5 (try 1/3)
[   61.781086] wlp7s0: RX AssocResp from 62:ca:db:1e:de:b5 (capab=0x1531 status=0 aid=3)
[   61.783025] wlp7s0: associated
[   63.095986] audit: type=1400 audit(1730531953.428:56): apparmor="DENIED" operation="sendmsg" class="net" profile="/usr/lib/snapd/snap-confine" pid=1214 comm="snap-confine" family="unix" sock_type="stream" protocol=0 requested_mask="send" denied_mask="send"
[   63.096071] audit: type=1400 audit(1730531953.428:57): apparmor="DENIED" operation="sendmsg" class="net" profile="/usr/lib/snapd/snap-confine" pid=1214 comm="snap-confine" family="unix" sock_type="stream" protocol=0 requested_mask="send" denied_mask="send"
[   73.304379] rfkill: input handler disabled
[   92.969652] audit: type=1400 audit(1730531982.970:58): apparmor="DENIED" operation="capable" class="cap" profile="/usr/lib/snapd/snap-confine" pid=1707 comm="snap-confine" capability=12  capname="net_admin"
[   92.969703] audit: type=1400 audit(1730531982.970:59): apparmor="DENIED" operation="capable" class="cap" profile="/usr/lib/snapd/snap-confine" pid=1707 comm="snap-confine" capability=38  capname="perfmon"
[   93.641941] rfkill: input handler enabled
[  103.504865] rfkill: input handler disabled
[  109.613850] audit: type=1400 audit(1730531999.569:60): apparmor="DENIED" operation="capable" class="cap" profile="/usr/lib/snapd/snap-confine" pid=2129 comm="snap-confine" capability=12  capname="net_admin"
[  109.613879] audit: type=1400 audit(1730531999.569:61): apparmor="DENIED" operation="capable" class="cap" profile="/usr/lib/snapd/snap-confine" pid=2129 comm="snap-confine" capability=38  capname="perfmon"
[  134.149668] Bluetooth: RFCOMM TTY layer initialized
[  134.149683] Bluetooth: RFCOMM socket layer initialized
[  134.149699] Bluetooth: RFCOMM ver 1.11
[  156.207064] audit: type=1400 audit(1730532046.171:62): apparmor="DENIED" operation="open" class="file" profile="snap.snap-store.ubuntu-software" name="/etc/appstream.conf" pid=2129 comm="snap-store" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
svpcom commented 2 hours ago

@sardChen Do you use v5.2.20? Please shown lines rtl8812au/core/rtw_wlan_util.c:1838:48 in your driver