Warning: Permanently added '10.128.1.86' (ED25519) to the list of known hosts. 2026/07/03 09:16:26 parsed 1 programs 2026/07/03 09:16:26 serving rpc on tcp://34939 [ 23.866316][ T30] audit: type=1400 audit(1783070186.381:64): avc: denied { node_bind } for pid=293 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 23.887018][ T30] audit: type=1400 audit(1783070186.381:65): avc: denied { module_request } for pid=293 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 24.520035][ T30] audit: type=1400 audit(1783070187.041:66): avc: denied { mounton } for pid=299 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.521129][ T299] cgroup: Unknown subsys name 'net' [ 24.542802][ T30] audit: type=1400 audit(1783070187.041:67): avc: denied { mount } for pid=299 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.570044][ T30] audit: type=1400 audit(1783070187.071:68): avc: denied { unmount } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.570191][ T299] cgroup: Unknown subsys name 'devices' [ 24.678462][ T299] cgroup: Unknown subsys name 'hugetlb' [ 24.684065][ T299] cgroup: Unknown subsys name 'rlimit' [ 24.795805][ T30] audit: type=1400 audit(1783070187.311:69): avc: denied { setattr } for pid=299 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.818959][ T30] audit: type=1400 audit(1783070187.311:70): avc: denied { create } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.839429][ T30] audit: type=1400 audit(1783070187.311:71): avc: denied { write } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.859725][ T30] audit: type=1400 audit(1783070187.311:72): avc: denied { read } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.865276][ T303] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.879914][ T30] audit: type=1400 audit(1783070187.321:73): avc: denied { mounton } for pid=299 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.961553][ T299] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.344394][ T305] request_module fs-gadgetfs succeeded, but still no fs? [ 25.834787][ T349] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.841864][ T349] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.849254][ T349] device bridge_slave_0 entered promiscuous mode [ 25.855981][ T349] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.863010][ T349] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.870324][ T349] device bridge_slave_1 entered promiscuous mode [ 25.902990][ T349] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.910055][ T349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.917344][ T349] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.924356][ T349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.932168][ T345] syz-executor (345) used greatest stack depth: 21976 bytes left [ 25.944175][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.951360][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.958780][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.966131][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.975037][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.983134][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.990155][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.998595][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.006745][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.013779][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.024630][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.033543][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.045637][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.056477][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.064550][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.072074][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.080149][ T349] device veth0_vlan entered promiscuous mode [ 26.089188][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.097967][ T349] device veth1_macvtap entered promiscuous mode [ 26.106276][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.115864][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.147489][ T349] syz-executor (349) used greatest stack depth: 21736 bytes left 2026/07/03 09:16:28 executed programs: 0 [ 26.407991][ T366] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.415033][ T366] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.422655][ T366] device bridge_slave_0 entered promiscuous mode [ 26.429954][ T366] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.437059][ T366] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.444303][ T366] device bridge_slave_1 entered promiscuous mode [ 26.483800][ T366] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.490910][ T366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.498206][ T366] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.505224][ T366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.526266][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.533855][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.541081][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.550073][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.558346][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.565372][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.578870][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.587070][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.594079][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.604645][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.614236][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.629352][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.641130][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.649539][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.657725][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.666018][ T366] device veth0_vlan entered promiscuous mode [ 26.677236][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.687256][ T366] device veth1_macvtap entered promiscuous mode [ 26.696769][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.719009][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.996900][ T370] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 27.337755][ T45] device bridge_slave_1 left promiscuous mode [ 27.343898][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.351374][ T45] device bridge_slave_0 left promiscuous mode [ 27.357579][ T370] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.366950][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.368457][ T370] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 27.384498][ T370] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.392779][ T45] device veth1_macvtap left promiscuous mode [ 27.393720][ T370] usb 3-1: config 0 descriptor?? [ 27.399125][ T45] device veth0_vlan left promiscuous mode [ 27.746901][ T370] usbhid 3-1:0.0: can't add hid device: -71 [ 27.752836][ T370] usbhid: probe of 3-1:0.0 failed with error -71 [ 27.760860][ T370] usb 3-1: USB disconnect, device number 2 [ 28.216905][ T370] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 28.587050][ T370] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.597961][ T370] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 28.606991][ T370] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.615586][ T370] usb 3-1: config 0 descriptor?? [ 29.526997][ T371] UDC core: couldn't find an available UDC or it's busy: -16 [ 29.534382][ T371] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 29.546907][ T370] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 29.554466][ T370] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input4 [ 30.146856][ C0] ================================================================================ [ 30.156150][ C0] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31 [ 30.164724][ C0] index 547 is out of range for type 'const int[34]' [ 30.171366][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 30.178359][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 30.188405][ C0] Call Trace: [ 30.191674][ C0] [ 30.194506][ C0] __dump_stack+0x21/0x30 [ 30.198829][ C0] dump_stack_lvl+0x110/0x170 [ 30.203476][ C0] ? show_regs_print_info+0x20/0x20 [ 30.208648][ C0] dump_stack+0x15/0x20 [ 30.212777][ C0] ubsan_epilogue+0xe/0x40 [ 30.217168][ C0] __ubsan_handle_out_of_bounds+0xdf/0xf0 [ 30.222861][ C0] aiptek_irq+0x2045/0x29b0 [ 30.227340][ C0] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 30.233121][ C0] ? kcov_remote_start+0xf3/0x350 [ 30.238117][ C0] ? usb_unanchor_urb+0xa1/0xc0 [ 30.242937][ C0] __usb_hcd_giveback_urb+0x32f/0x4f0 [ 30.248279][ C0] usb_hcd_giveback_urb+0x11d/0x3f0 [ 30.253447][ C0] ? _raw_spin_unlock+0x4d/0x70 [ 30.258272][ C0] ? usb_hcd_unlink_urb_from_ep+0x10e/0x120 [ 30.264134][ C0] dummy_timer+0xa34/0x31d0 [ 30.268612][ C0] ? dummy_free_streams+0x5c0/0x5c0 [ 30.273783][ C0] ? dummy_free_streams+0x5c0/0x5c0 [ 30.278952][ C0] call_timer_fn+0x38/0x290 [ 30.283431][ C0] ? dummy_free_streams+0x5c0/0x5c0 [ 30.288599][ C0] __run_timers+0x637/0x9a0 [ 30.293090][ C0] ? calc_index+0x200/0x200 [ 30.297566][ C0] ? sched_clock_cpu+0x18/0x3d0 [ 30.302405][ C0] run_timer_softirq+0x6a/0xf0 [ 30.307149][ C0] handle_softirqs+0x250/0x560 [ 30.311903][ C0] ? irqtime_account_irq+0xbe/0x390 [ 30.317075][ C0] __irq_exit_rcu+0x52/0xf0 [ 30.321550][ C0] irq_exit_rcu+0x9/0x10 [ 30.325764][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 30.331369][ C0] [ 30.334276][ C0] [ 30.337184][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 30.343152][ C0] RIP: 0010:default_idle+0xf/0x20 [ 30.348164][ C0] Code: 8c 4b ff ff ff 4c 89 f7 e8 6e d2 f5 fc e9 3e ff ff ff 00 00 cc cc 00 00 cc cc 00 55 48 89 e5 66 90 0f 00 2d 43 12 52 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 55 48 89 e5 41 [ 30.367752][ C0] RSP: 0018:ffffffff86607d78 EFLAGS: 00000246 [ 30.373800][ C0] RAX: 000000000000410a RBX: ffffffff8661c400 RCX: 000000000000410a [ 30.381750][ C0] RDX: 0000000000000001 RSI: ffffffff85638320 RDI: ffffffff856382e0 [ 30.389741][ C0] RBP: ffffffff86607d78 R08: ffff8881f7038c73 R09: 1ffff1103ee0718e [ 30.397694][ C0] R10: dffffc0000000000 R11: ffffed103ee0718f R12: 0000000000000000 [ 30.405648][ C0] R13: 1ffffffff0cc3880 R14: dffffc0000000000 R15: dffffc0000000000 [ 30.413605][ C0] arch_cpu_idle+0xa/0x10 [ 30.417921][ C0] default_idle_call+0x71/0x1d0 [ 30.422755][ C0] do_idle+0x368/0x620 [ 30.426806][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 30.431991][ C0] ? radix_tree_lookup+0x248/0x290 [ 30.437088][ C0] ? debug_smp_processor_id+0x17/0x20 [ 30.442453][ C0] cpu_startup_entry+0x18/0x20 [ 30.447226][ C0] rest_init+0x10a/0x130 [ 30.451468][ C0] ? time_init+0x40/0x40 [ 30.455702][ C0] arch_call_rest_init+0xe/0x10 [ 30.460540][ C0] start_kernel+0x46d/0x4e0 [ 30.465027][ C0] x86_64_start_reservations+0x2a/0x30 [ 30.470476][ C0] x86_64_start_kernel+0x5b/0x60 [ 30.475395][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 30.481273][ C0] [ 30.484305][ C0] ================================================================================ [ 30.493573][ C0] ================================================================== [ 30.501611][ C0] BUG: KASAN: global-out-of-bounds in aiptek_irq+0x2063/0x29b0 [ 30.509143][ C0] Read of size 4 at addr ffffffff857ee3ec by task swapper/0/0 [ 30.516579][ C0] [ 30.518881][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 30.525885][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 30.535919][ C0] Call Trace: [ 30.539179][ C0] [ 30.542007][ C0] __dump_stack+0x21/0x30 [ 30.546329][ C0] dump_stack_lvl+0x110/0x170 [ 30.550987][ C0] ? show_regs_print_info+0x20/0x20 [ 30.556166][ C0] ? load_image+0x3f0/0x3f0 [ 30.560694][ C0] ? dump_stack_lvl+0x134/0x170 [ 30.565525][ C0] print_address_description+0x7f/0x2c0 [ 30.571056][ C0] ? aiptek_irq+0x2063/0x29b0 [ 30.575719][ C0] kasan_report+0x10f/0x150 [ 30.580207][ C0] ? aiptek_irq+0x2063/0x29b0 [ 30.584867][ C0] __asan_report_load4_noabort+0x14/0x20 [ 30.590485][ C0] aiptek_irq+0x2063/0x29b0 [ 30.594971][ C0] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 30.600761][ C0] ? kcov_remote_start+0xf3/0x350 [ 30.605769][ C0] ? usb_unanchor_urb+0xa1/0xc0 [ 30.610599][ C0] __usb_hcd_giveback_urb+0x32f/0x4f0 [ 30.615957][ C0] usb_hcd_giveback_urb+0x11d/0x3f0 [ 30.621137][ C0] ? _raw_spin_unlock+0x4d/0x70 [ 30.625974][ C0] ? usb_hcd_unlink_urb_from_ep+0x10e/0x120 [ 30.631848][ C0] dummy_timer+0xa34/0x31d0 [ 30.636339][ C0] ? dummy_free_streams+0x5c0/0x5c0 [ 30.641521][ C0] ? dummy_free_streams+0x5c0/0x5c0 [ 30.646700][ C0] call_timer_fn+0x38/0x290 [ 30.651187][ C0] ? dummy_free_streams+0x5c0/0x5c0 [ 30.656367][ C0] __run_timers+0x637/0x9a0 [ 30.660854][ C0] ? calc_index+0x200/0x200 [ 30.665339][ C0] ? sched_clock_cpu+0x18/0x3d0 [ 30.670174][ C0] run_timer_softirq+0x6a/0xf0 [ 30.674929][ C0] handle_softirqs+0x250/0x560 [ 30.679680][ C0] ? irqtime_account_irq+0xbe/0x390 [ 30.684864][ C0] __irq_exit_rcu+0x52/0xf0 [ 30.689349][ C0] irq_exit_rcu+0x9/0x10 [ 30.693576][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 30.699190][ C0] [ 30.702106][ C0] [ 30.705017][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 30.710988][ C0] RIP: 0010:default_idle+0xf/0x20 [ 30.716020][ C0] Code: 8c 4b ff ff ff 4c 89 f7 e8 6e d2 f5 fc e9 3e ff ff ff 00 00 cc cc 00 00 cc cc 00 55 48 89 e5 66 90 0f 00 2d 43 12 52 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 55 48 89 e5 41 [ 30.735618][ C0] RSP: 0018:ffffffff86607d78 EFLAGS: 00000246 [ 30.742714][ C0] RAX: 000000000000410a RBX: ffffffff8661c400 RCX: 000000000000410a [ 30.750668][ C0] RDX: 0000000000000001 RSI: ffffffff85638320 RDI: ffffffff856382e0 [ 30.758621][ C0] RBP: ffffffff86607d78 R08: ffff8881f7038c73 R09: 1ffff1103ee0718e [ 30.767185][ C0] R10: dffffc0000000000 R11: ffffed103ee0718f R12: 0000000000000000 [ 30.775137][ C0] R13: 1ffffffff0cc3880 R14: dffffc0000000000 R15: dffffc0000000000 [ 30.783099][ C0] arch_cpu_idle+0xa/0x10 [ 30.787414][ C0] default_idle_call+0x71/0x1d0 [ 30.792251][ C0] do_idle+0x368/0x620 [ 30.796304][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 30.801483][ C0] ? radix_tree_lookup+0x248/0x290 [ 30.806578][ C0] ? debug_smp_processor_id+0x17/0x20 [ 30.811934][ C0] cpu_startup_entry+0x18/0x20 [ 30.816680][ C0] rest_init+0x10a/0x130 [ 30.820902][ C0] ? time_init+0x40/0x40 [ 30.825125][ C0] arch_call_rest_init+0xe/0x10 [ 30.829956][ C0] start_kernel+0x46d/0x4e0 [ 30.834441][ C0] x86_64_start_reservations+0x2a/0x30 [ 30.839882][ C0] x86_64_start_kernel+0x5b/0x60 [ 30.844801][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 30.850677][ C0] [ 30.853678][ C0] [ 30.855978][ C0] The buggy address belongs to the variable: [ 30.861927][ C0] .str.60+0xc/0x20 [ 30.865716][ C0] [ 30.868017][ C0] Memory state around the buggy address: [ 30.873621][ C0] ffffffff857ee280: f9 f9 f9 f9 06 f9 f9 f9 00 01 f9 f9 04 f9 f9 f9 [ 30.881657][ C0] ffffffff857ee300: 00 f9 f9 f9 06 f9 f9 f9 07 f9 f9 f9 06 f9 f9 f9 [ 30.889697][ C0] >ffffffff857ee380: 00 04 f9 f9 05 f9 f9 f9 00 03 f9 f9 00 03 f9 f9 [ 30.897733][ C0] ^ [ 30.905423][ C0] ffffffff857ee400: 00 00 00 00 03 f9 f9 f9 f9 f9 f9 f9 00 00 00 00 [ 30.913462][ C0] ffffffff857ee480: 03 f9 f9 f9 f9 f9 f9 f9 00 00 00 00 01 f9 f9 f9 [ 30.921514][ C0] ================================================================== [ 30.929575][ C0] Disabling lock debugging due to kernel taint [ 30.935713][ C0] ================================================================================ [ 30.944962][ C0] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:763:30 [ 30.953613][ C0] index 548 is out of range for type 'const int[34]' [ 30.960273][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B syzkaller #0 [ 30.968664][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 30.978695][ C0] Call Trace: [ 30.981953][ C0] [ 30.984780][ C0] __dump_stack+0x21/0x30 [ 30.989090][ C0] dump_stack_lvl+0x110/0x170 [ 30.993748][ C0] ? show_regs_print_info+0x20/0x20 [ 30.998924][ C0] dump_stack+0x15/0x20 [ 31.003059][ C0] ubsan_epilogue+0xe/0x40 [ 31.007462][ C0] __ubsan_handle_out_of_bounds+0xdf/0xf0 [ 31.013164][ C0] aiptek_irq+0x1f14/0x29b0 [ 31.017652][ C0] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 31.023442][ C0] ? kcov_remote_start+0xf3/0x350 [ 31.028447][ C0] __usb_hcd_giveback_urb+0x32f/0x4f0 [ 31.033800][ C0] usb_hcd_giveback_urb+0x11d/0x3f0 [ 31.038976][ C0] ? _raw_spin_unlock+0x4d/0x70 [ 31.043807][ C0] ? usb_hcd_unlink_urb_from_ep+0x10e/0x120 [ 31.049678][ C0] dummy_timer+0xa34/0x31d0 [ 31.054178][ C0] ? dummy_free_streams+0x5c0/0x5c0 [ 31.059362][ C0] ? dummy_free_streams+0x5c0/0x5c0 [ 31.064544][ C0] call_timer_fn+0x38/0x290 [ 31.069031][ C0] ? dummy_free_streams+0x5c0/0x5c0 [ 31.074216][ C0] __run_timers+0x637/0x9a0 [ 31.078700][ C0] ? calc_index+0x200/0x200 [ 31.083186][ C0] ? sched_clock_cpu+0x18/0x3d0 [ 31.088016][ C0] run_timer_softirq+0x6a/0xf0 [ 31.092764][ C0] handle_softirqs+0x250/0x560 [ 31.097511][ C0] ? irqtime_account_irq+0xbe/0x390 [ 31.102687][ C0] __irq_exit_rcu+0x52/0xf0 [ 31.107175][ C0] irq_exit_rcu+0x9/0x10 [ 31.111400][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 31.117014][ C0] [ 31.119923][ C0] [ 31.122836][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 31.128796][ C0] RIP: 0010:default_idle+0xf/0x20 [ 31.133805][ C0] Code: 8c 4b ff ff ff 4c 89 f7 e8 6e d2 f5 fc e9 3e ff ff ff 00 00 cc cc 00 00 cc cc 00 55 48 89 e5 66 90 0f 00 2d 43 12 52 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 55 48 89 e5 41 [ 31.153391][ C0] RSP: 0018:ffffffff86607d78 EFLAGS: 00000246 [ 31.159437][ C0] RAX: 000000000000410a RBX: ffffffff8661c400 RCX: 000000000000410a [ 31.167388][ C0] RDX: 0000000000000001 RSI: ffffffff85638320 RDI: ffffffff856382e0 [ 31.175337][ C0] RBP: ffffffff86607d78 R08: ffff8881f7038c73 R09: 1ffff1103ee0718e [ 31.183290][ C0] R10: dffffc0000000000 R11: ffffed103ee0718f R12: 0000000000000000 [ 31.191244][ C0] R13: 1ffffffff0cc3880 R14: dffffc0000000000 R15: dffffc0000000000 [ 31.199200][ C0] arch_cpu_idle+0xa/0x10 [ 31.203512][ C0] default_idle_call+0x71/0x1d0 [ 31.208346][ C0] do_idle+0x368/0x620 [ 31.212399][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 31.217578][ C0] ? radix_tree_lookup+0x248/0x290 [ 31.222674][ C0] ? debug_smp_processor_id+0x17/0x20 [ 31.228027][ C0] cpu_startup_entry+0x18/0x20 [ 31.232776][ C0] rest_init+0x10a/0x130 [ 31.236998][ C0] ? time_init+0x40/0x40 [ 31.241222][ C0] arch_call_rest_init+0xe/0x10 [ 31.246056][ C0] start_kernel+0x46d/0x4e0 [ 31.250543][ C0] x86_64_start_reservations+0x2a/0x30 [ 31.255982][ C0] x86_64_start_kernel+0x5b/0x60 [ 31.260898][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 31.266772][ C0] [ 31.269770][ C0] ================================================================================ [ 31.281505][ T39] usb 3-1: USB disconnect, device number 3