Warning: Permanently added '10.128.0.92' (ED25519) to the list of known hosts.
2026/06/10 13:10:12 parsed 1 programs
[ 26.193515][ T24] audit: type=1400 audit(1781097012.070:64): avc: denied { node_bind } for pid=287 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 26.214612][ T24] audit: type=1400 audit(1781097012.070:65): avc: denied { create } for pid=287 comm="syz-execprog" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 26.234484][ T24] audit: type=1400 audit(1781097012.070:66): avc: denied { module_request } for pid=287 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 27.138405][ T24] audit: type=1400 audit(1781097013.020:67): avc: denied { mounton } for pid=293 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 27.141654][ T293] cgroup: Unknown subsys name 'net'
[ 27.161287][ T24] audit: type=1400 audit(1781097013.020:68): avc: denied { mount } for pid=293 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 27.188523][ T24] audit: type=1400 audit(1781097013.050:69): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 27.189005][ T293] cgroup: Unknown subsys name 'devices'
[ 27.298295][ T293] cgroup: Unknown subsys name 'hugetlb'
[ 27.303895][ T293] cgroup: Unknown subsys name 'rlimit'
[ 27.452512][ T24] audit: type=1400 audit(1781097013.330:70): avc: denied { setattr } for pid=293 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 27.475673][ T24] audit: type=1400 audit(1781097013.330:71): avc: denied { create } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 27.496198][ T24] audit: type=1400 audit(1781097013.330:72): avc: denied { write } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 27.506911][ T297] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
[ 27.517048][ T24] audit: type=1400 audit(1781097013.330:73): avc: denied { read } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[ 27.592024][ T293] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 28.103193][ T301] request_module fs-gadgetfs succeeded, but still no fs?
[ 28.114086][ T301] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation
[ 28.492016][ T334] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.499429][ T334] bridge0: port 1(bridge_slave_0) entered disabled state
[ 28.507071][ T334] device bridge_slave_0 entered promiscuous mode
[ 28.514163][ T334] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.521372][ T334] bridge0: port 2(bridge_slave_1) entered disabled state
[ 28.528833][ T334] device bridge_slave_1 entered promiscuous mode
[ 28.568256][ T334] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.575309][ T334] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 28.582675][ T334] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.589721][ T334] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 28.608535][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 28.616430][ T317] bridge0: port 1(bridge_slave_0) entered disabled state
[ 28.623664][ T317] bridge0: port 2(bridge_slave_1) entered disabled state
[ 28.633185][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 28.641466][ T317] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.648539][ T317] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 28.657234][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 28.665418][ T317] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.672478][ T317] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 28.684601][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 28.693876][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 28.707966][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 28.719092][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 28.727415][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 28.734825][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 28.743215][ T334] device veth0_vlan entered promiscuous mode
[ 28.752960][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 28.761999][ T334] device veth1_macvtap entered promiscuous mode
[ 28.777559][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 28.787558][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
2026/06/10 13:10:15 executed programs: 0
[ 29.314768][ T386] bridge0: port 1(bridge_slave_0) entered blocking state
[ 29.322548][ T386] bridge0: port 1(bridge_slave_0) entered disabled state
[ 29.330124][ T386] device bridge_slave_0 entered promiscuous mode
[ 29.338508][ T386] bridge0: port 2(bridge_slave_1) entered blocking state
[ 29.345584][ T386] bridge0: port 2(bridge_slave_1) entered disabled state
[ 29.353464][ T386] device bridge_slave_1 entered promiscuous mode
[ 29.392487][ T386] bridge0: port 2(bridge_slave_1) entered blocking state
[ 29.399547][ T386] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 29.406832][ T386] bridge0: port 1(bridge_slave_0) entered blocking state
[ 29.413874][ T386] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 29.431755][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 29.439458][ T317] bridge0: port 1(bridge_slave_0) entered disabled state
[ 29.447140][ T317] bridge0: port 2(bridge_slave_1) entered disabled state
[ 29.455707][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 29.463938][ T317] bridge0: port 1(bridge_slave_0) entered blocking state
[ 29.471056][ T317] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 29.480331][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 29.488672][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 29.496896][ T317] bridge0: port 2(bridge_slave_1) entered blocking state
[ 29.503913][ T317] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 29.515081][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 29.523236][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 29.532237][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 29.540488][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 29.553231][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 29.561739][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 29.578489][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 29.586352][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 29.594715][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 29.602422][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 29.611065][ T386] device veth0_vlan entered promiscuous mode
[ 29.624408][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 29.632517][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 29.642085][ T386] device veth1_macvtap entered promiscuous mode
[ 29.654915][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 29.662669][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 29.670979][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 29.680147][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 29.688391][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 29.976647][ T388] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[ 29.997300][ T9] device bridge_slave_1 left promiscuous mode
[ 30.003429][ T9] bridge0: port 2(bridge_slave_1) entered disabled state
[ 30.011127][ T9] device bridge_slave_0 left promiscuous mode
[ 30.017346][ T9] bridge0: port 1(bridge_slave_0) entered disabled state
[ 30.025095][ T9] device veth1_macvtap left promiscuous mode
[ 30.031283][ T9] device veth0_vlan left promiscuous mode
[ 30.346662][ T388] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 30.357600][ T388] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 30.367586][ T388] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 30.377476][ T388] usb 3-1: config 0 descriptor??
[ 30.706694][ T388] usbhid 3-1:0.0: can't add hid device: -71
[ 30.712777][ T388] usbhid: probe of 3-1:0.0 failed with error -71
[ 30.719957][ T388] usb 3-1: USB disconnect, device number 2
[ 31.176613][ T388] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[ 31.536677][ T388] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 31.547665][ T388] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[ 31.556791][ T388] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 31.565491][ T388] usb 3-1: config 0 descriptor??
[ 32.486749][ T394] udc-core: couldn't find an available UDC or it's busy
[ 32.493763][ T394] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 32.506638][ T388] aiptek 3-1:0.0: Aiptek using 400 ms programming speed
[ 32.514280][ T388] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input4
[ 33.096609][ C1] ================================================================================
[ 33.105912][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31
[ 33.114489][ C1] index 547 is out of range for type 'const int[34]'
[ 33.121170][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0
[ 33.128179][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 33.138262][ C1] Call Trace:
[ 33.141583][ C1]
[ 33.144453][ C1] __dump_stack+0x21/0x24
[ 33.148781][ C1] dump_stack_lvl+0x1a7/0x208
[ 33.153458][ C1] ? show_regs_print_info+0x18/0x18
[ 33.158658][ C1] dump_stack+0x15/0x1c
[ 33.162829][ C1] ubsan_epilogue+0xe/0x40
[ 33.167252][ C1] __ubsan_handle_out_of_bounds+0xdf/0xf0
[ 33.172962][ C1] aiptek_irq+0x1fdf/0x2860
[ 33.177490][ C1] ? debug_smp_processor_id+0x17/0x20
[ 33.182851][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80
[ 33.188646][ C1] ? usb_unanchor_urb+0xa1/0xc0
[ 33.193501][ C1] __usb_hcd_giveback_urb+0x333/0x4f0
[ 33.198864][ C1] usb_hcd_giveback_urb+0x119/0x410
[ 33.204071][ C1] ? _raw_spin_unlock+0x4d/0x70
[ 33.208926][ C1] ? usb_hcd_unlink_urb_from_ep+0x10e/0x120
[ 33.214814][ C1] dummy_timer+0x8be/0x30e0
[ 33.219394][ C1] ? dummy_free_streams+0x5b0/0x5b0
[ 33.224585][ C1] ? dummy_free_streams+0x5b0/0x5b0
[ 33.229774][ C1] call_timer_fn+0x38/0x290
[ 33.234462][ C1] ? dummy_free_streams+0x5b0/0x5b0
[ 33.239674][ C1] __run_timers+0x650/0x9e0
[ 33.244457][ C1] ? calc_index+0x200/0x200
[ 33.248976][ C1] ? sched_clock_cpu+0x1b/0x3d0
[ 33.253829][ C1] run_timer_softirq+0x6a/0xf0
[ 33.258603][ C1] __do_softirq+0x255/0x563
[ 33.263103][ C1] asm_call_irq_on_stack+0xf/0x20
[ 33.268114][ C1]
[ 33.271048][ C1] do_softirq_own_stack+0x60/0x80
[ 33.276069][ C1] __irq_exit_rcu+0x128/0x150
[ 33.280784][ C1] irq_exit_rcu+0x9/0x10
[ 33.285024][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0
[ 33.290671][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 33.296663][ C1] RIP: 0010:default_idle+0x12/0x20
[ 33.301765][ C1] Code: 44 2a 00 00 49 bd 00 00 00 00 00 fc ff df e9 67 ff ff ff e8 d0 f7 fa ff 55 48 89 e5 0f 1f 44 00 00 0f 00 2d b0 f6 61 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 55 48 89 e5 41 57 41 56
[ 33.321366][ C1] RSP: 0018:ffffc90000107db8 EFLAGS: 00000252
[ 33.327778][ C1] RAX: ffff8881f7100000 RBX: ffff888100293b40 RCX: 0000000000006fde
[ 33.336090][ C1] RDX: 0000000000000001 RSI: ffffffff85409040 RDI: ffffffff85409000
[ 33.344060][ C1] RBP: ffffc90000107db8 R08: ffff8881f71573d3 R09: 1ffff1103ee2ae7a
[ 33.352024][ C1] R10: dffffc0000000000 R11: ffffed103ee2ae7b R12: 0000000000000000
[ 33.359992][ C1] R13: 1ffff11020052768 R14: dffffc0000000000 R15: dffffc0000000000
[ 33.367967][ C1] arch_cpu_idle+0xa/0x10
[ 33.372287][ C1] default_idle_call+0x71/0x1d0
[ 33.377157][ C1] do_idle+0x217/0x620
[ 33.381226][ C1] ? idle_inject_timer_fn+0x60/0x60
[ 33.386430][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80
[ 33.392235][ C1] cpu_startup_entry+0x18/0x20
[ 33.397003][ C1] start_secondary+0x2e9/0x3a0
[ 33.401774][ C1] secondary_startup_64_no_verify+0xad/0xbb
[ 33.407674][ C1] ================================================================================
[ 33.416967][ C1] ==================================================================
[ 33.425129][ C1] BUG: KASAN: global-out-of-bounds in aiptek_irq+0x1ffd/0x2860
[ 33.432762][ C1] Read of size 4 at addr ffffffff855b380c by task swapper/1/0
[ 33.440211][ C1]
[ 33.442553][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0
[ 33.449577][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 33.459644][ C1] Call Trace:
[ 33.462943][ C1]
[ 33.465810][ C1] __dump_stack+0x21/0x24
[ 33.470150][ C1] dump_stack_lvl+0x1a7/0x208
[ 33.474838][ C1] ? show_regs_print_info+0x18/0x18
[ 33.480055][ C1] ? thaw_kernel_threads+0x220/0x220
[ 33.485361][ C1] print_address_description+0x7f/0x2c0
[ 33.490911][ C1] ? aiptek_irq+0x1ffd/0x2860
[ 33.495596][ C1] kasan_report+0xe2/0x130
[ 33.500025][ C1] ? aiptek_irq+0x1ffd/0x2860
[ 33.504709][ C1] __asan_report_load4_noabort+0x14/0x20
[ 33.510347][ C1] aiptek_irq+0x1ffd/0x2860
[ 33.514857][ C1] ? debug_smp_processor_id+0x17/0x20
[ 33.520236][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80
[ 33.526047][ C1] ? usb_unanchor_urb+0xa1/0xc0
[ 33.530903][ C1] __usb_hcd_giveback_urb+0x333/0x4f0
[ 33.536295][ C1] usb_hcd_giveback_urb+0x119/0x410
[ 33.541504][ C1] ? _raw_spin_unlock+0x4d/0x70
[ 33.546358][ C1] ? usb_hcd_unlink_urb_from_ep+0x10e/0x120
[ 33.552340][ C1] dummy_timer+0x8be/0x30e0
[ 33.556859][ C1] ? dummy_free_streams+0x5b0/0x5b0
[ 33.562059][ C1] ? dummy_free_streams+0x5b0/0x5b0
[ 33.567263][ C1] call_timer_fn+0x38/0x290
[ 33.571769][ C1] ? dummy_free_streams+0x5b0/0x5b0
[ 33.576968][ C1] __run_timers+0x650/0x9e0
[ 33.581479][ C1] ? calc_index+0x200/0x200
[ 33.585989][ C1] ? sched_clock_cpu+0x1b/0x3d0
[ 33.590843][ C1] run_timer_softirq+0x6a/0xf0
[ 33.595613][ C1] __do_softirq+0x255/0x563
[ 33.600121][ C1] asm_call_irq_on_stack+0xf/0x20
[ 33.605143][ C1]
[ 33.608088][ C1] do_softirq_own_stack+0x60/0x80
[ 33.613118][ C1] __irq_exit_rcu+0x128/0x150
[ 33.617909][ C1] irq_exit_rcu+0x9/0x10
[ 33.622161][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0
[ 33.627798][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 33.633779][ C1] RIP: 0010:default_idle+0x12/0x20
[ 33.638888][ C1] Code: 44 2a 00 00 49 bd 00 00 00 00 00 fc ff df e9 67 ff ff ff e8 d0 f7 fa ff 55 48 89 e5 0f 1f 44 00 00 0f 00 2d b0 f6 61 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 55 48 89 e5 41 57 41 56
[ 33.658494][ C1] RSP: 0018:ffffc90000107db8 EFLAGS: 00000252
[ 33.664563][ C1] RAX: ffff8881f7100000 RBX: ffff888100293b40 RCX: 0000000000006fde
[ 33.672537][ C1] RDX: 0000000000000001 RSI: ffffffff85409040 RDI: ffffffff85409000
[ 33.680512][ C1] RBP: ffffc90000107db8 R08: ffff8881f71573d3 R09: 1ffff1103ee2ae7a
[ 33.688487][ C1] R10: dffffc0000000000 R11: ffffed103ee2ae7b R12: 0000000000000000
[ 33.696463][ C1] R13: 1ffff11020052768 R14: dffffc0000000000 R15: dffffc0000000000
[ 33.704445][ C1] arch_cpu_idle+0xa/0x10
[ 33.708801][ C1] default_idle_call+0x71/0x1d0
[ 33.713657][ C1] do_idle+0x217/0x620
[ 33.717726][ C1] ? idle_inject_timer_fn+0x60/0x60
[ 33.722927][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80
[ 33.728735][ C1] cpu_startup_entry+0x18/0x20
[ 33.733503][ C1] start_secondary+0x2e9/0x3a0
[ 33.738272][ C1] secondary_startup_64_no_verify+0xad/0xbb
[ 33.744169][ C1]
[ 33.746503][ C1] The buggy address belongs to the variable:
[ 33.752482][ C1] .str.57+0xc/0x20
[ 33.756282][ C1]
[ 33.758612][ C1] Memory state around the buggy address:
[ 33.764250][ C1] ffffffff855b3700: 04 f9 f9 f9 00 f9 f9 f9 06 f9 f9 f9 07 f9 f9 f9
[ 33.772314][ C1] ffffffff855b3780: 06 f9 f9 f9 00 04 f9 f9 05 f9 f9 f9 00 03 f9 f9
[ 33.780384][ C1] >ffffffff855b3800: 00 03 f9 f9 00 00 00 00 03 f9 f9 f9 f9 f9 f9 f9
[ 33.788447][ C1] ^
[ 33.792779][ C1] ffffffff855b3880: 00 00 00 00 03 f9 f9 f9 f9 f9 f9 f9 00 00 00 00
[ 33.800845][ C1] ffffffff855b3900: 01 f9 f9 f9 f9 f9 f9 f9 00 00 00 00 f9 f9 f9 f9
[ 33.808905][ C1] ==================================================================
[ 33.816968][ C1] Disabling lock debugging due to kernel taint
[ 33.823123][ C1] ================================================================================
[ 33.832400][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:763:30
[ 33.840985][ C1] index 548 is out of range for type 'const int[34]'
[ 33.847666][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B syzkaller #0
[ 33.856081][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 33.866138][ C1] Call Trace:
[ 33.869442][ C1]
[ 33.872334][ C1] __dump_stack+0x21/0x24
[ 33.876673][ C1] dump_stack_lvl+0x1a7/0x208
[ 33.881359][ C1] ? show_regs_print_info+0x18/0x18
[ 33.886581][ C1] ? _raw_spin_lock_irqsave+0xc2/0x130
[ 33.892049][ C1] ? __kasan_check_read+0x11/0x20
[ 33.897073][ C1] dump_stack+0x15/0x1c
[ 33.901237][ C1] ubsan_epilogue+0xe/0x40
[ 33.905658][ C1] __ubsan_handle_out_of_bounds+0xdf/0xf0
[ 33.911464][ C1] aiptek_irq+0x1ebf/0x2860
[ 33.915972][ C1] ? debug_smp_processor_id+0x17/0x20
[ 33.921348][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80
[ 33.927162][ C1] ? usb_unanchor_urb+0xa1/0xc0
[ 33.932026][ C1] __usb_hcd_giveback_urb+0x333/0x4f0
[ 33.937403][ C1] usb_hcd_giveback_urb+0x119/0x410
[ 33.942607][ C1] ? _raw_spin_unlock+0x4d/0x70
[ 33.947462][ C1] ? usb_hcd_unlink_urb_from_ep+0x10e/0x120
[ 33.953358][ C1] dummy_timer+0x8be/0x30e0
[ 33.957901][ C1] ? dummy_free_streams+0x5b0/0x5b0
[ 33.963107][ C1] ? dummy_free_streams+0x5b0/0x5b0
[ 33.968314][ C1] call_timer_fn+0x38/0x290
[ 33.972821][ C1] ? dummy_free_streams+0x5b0/0x5b0
[ 33.978021][ C1] __run_timers+0x650/0x9e0
[ 33.982528][ C1] ? calc_index+0x200/0x200
[ 33.987031][ C1] ? sched_clock_cpu+0x1b/0x3d0
[ 33.991915][ C1] run_timer_softirq+0x6a/0xf0
[ 33.996680][ C1] __do_softirq+0x255/0x563
[ 34.001184][ C1] asm_call_irq_on_stack+0xf/0x20
[ 34.006203][ C1]
[ 34.009144][ C1] do_softirq_own_stack+0x60/0x80
[ 34.014175][ C1] __irq_exit_rcu+0x128/0x150
[ 34.018852][ C1] irq_exit_rcu+0x9/0x10
[ 34.023096][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0
[ 34.028735][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 34.034717][ C1] RIP: 0010:default_idle+0x12/0x20
[ 34.039832][ C1] Code: 44 2a 00 00 49 bd 00 00 00 00 00 fc ff df e9 67 ff ff ff e8 d0 f7 fa ff 55 48 89 e5 0f 1f 44 00 00 0f 00 2d b0 f6 61 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 55 48 89 e5 41 57 41 56
[ 34.059558][ C1] RSP: 0018:ffffc90000107db8 EFLAGS: 00000252
[ 34.065628][ C1] RAX: ffff8881f7100000 RBX: ffff888100293b40 RCX: 0000000000006fde
[ 34.073603][ C1] RDX: 0000000000000001 RSI: ffffffff85409040 RDI: ffffffff85409000
[ 34.081582][ C1] RBP: ffffc90000107db8 R08: ffff8881f71573d3 R09: 1ffff1103ee2ae7a
[ 34.089673][ C1] R10: dffffc0000000000 R11: ffffed103ee2ae7b R12: 0000000000000000
[ 34.097650][ C1] R13: 1ffff11020052768 R14: dffffc0000000000 R15: dffffc0000000000
[ 34.105637][ C1] arch_cpu_idle+0xa/0x10
[ 34.109968][ C1] default_idle_call+0x71/0x1d0
[ 34.114821][ C1] do_idle+0x217/0x620
[ 34.118897][ C1] ? idle_inject_timer_fn+0x60/0x60
[ 34.124102][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80
[ 34.129996][ C1] cpu_startup_entry+0x18/0x20
[ 34.134761][ C1] start_secondary+0x2e9/0x3a0
[ 34.139536][ C1] secondary_startup_64_no_verify+0xad/0xbb
[ 34.145429][ C1] ================================================================================
[ 34.157741][ T396] usb 3-1: USB disconnect, device number 3