Warning: Permanently added '10.128.1.168' (ED25519) to the list of known hosts.
2026/07/28 20:41:22 parsed 1 programs
2026/07/28 20:41:22 serving rpc on tcp://36237
[ 24.732930][ T28] audit: type=1400 audit(1785271282.066:64): avc: denied { node_bind } for pid=294 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 24.753714][ T28] audit: type=1400 audit(1785271282.066:65): avc: denied { module_request } for pid=294 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 25.908613][ T28] audit: type=1400 audit(1785271283.246:66): avc: denied { mounton } for pid=300 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 25.911753][ T300] cgroup: Unknown subsys name 'net'
[ 25.931407][ T28] audit: type=1400 audit(1785271283.246:67): avc: denied { mount } for pid=300 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 25.958640][ T28] audit: type=1400 audit(1785271283.266:68): avc: denied { unmount } for pid=300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 25.959013][ T300] cgroup: Unknown subsys name 'devices'
[ 26.100310][ T300] cgroup: Unknown subsys name 'hugetlb'
[ 26.105963][ T300] cgroup: Unknown subsys name 'rlimit'
[ 26.218632][ T28] audit: type=1400 audit(1785271283.556:69): avc: denied { setattr } for pid=300 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 26.241938][ T28] audit: type=1400 audit(1785271283.556:70): avc: denied { create } for pid=300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 26.262374][ T28] audit: type=1400 audit(1785271283.556:71): avc: denied { write } for pid=300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 26.282701][ T28] audit: type=1400 audit(1785271283.556:72): avc: denied { read } for pid=300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 26.302191][ T304] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[ 26.303452][ T28] audit: type=1400 audit(1785271283.556:73): avc: denied { mounton } for pid=300 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[ 26.341012][ T300] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 26.997010][ T306] request_module fs-gadgetfs succeeded, but still no fs?
[ 27.127405][ T315] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.134648][ T315] bridge0: port 1(bridge_slave_0) entered disabled state
[ 27.142199][ T315] device bridge_slave_0 entered promiscuous mode
[ 27.149984][ T315] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.157015][ T315] bridge0: port 2(bridge_slave_1) entered disabled state
[ 27.164583][ T315] device bridge_slave_1 entered promiscuous mode
[ 27.210425][ T315] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.217484][ T315] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 27.224791][ T315] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.231849][ T315] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 27.252962][ T10] bridge0: port 1(bridge_slave_0) entered disabled state
[ 27.260287][ T10] bridge0: port 2(bridge_slave_1) entered disabled state
[ 27.267644][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 27.275866][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 27.285047][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 27.293385][ T10] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.300450][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 27.310297][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 27.318628][ T10] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.325666][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 27.338316][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 27.347539][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 27.363072][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 27.374731][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 27.383053][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 27.390634][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 27.400316][ T315] device veth0_vlan entered promiscuous mode
[ 27.410762][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 27.419895][ T315] device veth1_macvtap entered promiscuous mode
[ 27.429441][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 27.440552][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 28.269427][ T8] device bridge_slave_1 left promiscuous mode
[ 28.275801][ T8] bridge0: port 2(bridge_slave_1) entered disabled state
[ 28.283626][ T8] device bridge_slave_0 left promiscuous mode
[ 28.290337][ T8] bridge0: port 1(bridge_slave_0) entered disabled state
[ 28.298838][ T8] device veth1_macvtap left promiscuous mode
[ 28.304975][ T8] device veth0_vlan left promiscuous mode
2026/07/28 20:41:25 executed programs: 0
[ 28.445969][ T370] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.455354][ T370] bridge0: port 1(bridge_slave_0) entered disabled state
[ 28.462892][ T370] device bridge_slave_0 entered promiscuous mode
[ 28.470319][ T370] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.477359][ T370] bridge0: port 2(bridge_slave_1) entered disabled state
[ 28.484945][ T370] device bridge_slave_1 entered promiscuous mode
[ 28.530370][ T370] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.537418][ T370] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 28.544697][ T370] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.551744][ T370] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 28.571613][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 28.579286][ T43] bridge0: port 1(bridge_slave_0) entered disabled state
[ 28.586510][ T43] bridge0: port 2(bridge_slave_1) entered disabled state
[ 28.595427][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 28.603755][ T43] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.610835][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 28.620171][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 28.628430][ T43] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.635455][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 28.647171][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 28.656500][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 28.671613][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 28.684085][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 28.692968][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 28.700467][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 28.709422][ T370] device veth0_vlan entered promiscuous mode
[ 28.720180][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 28.729384][ T370] device veth1_macvtap entered promiscuous mode
[ 28.739942][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 28.749837][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 29.038418][ T374] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[ 29.219341][ T374] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 29.230273][ T374] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 29.239371][ T374] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 29.248462][ T374] usb 3-1: config 0 descriptor??
[ 29.455218][ T374] usbhid 3-1:0.0: can't add hid device: -71
[ 29.461259][ T374] usbhid: probe of 3-1:0.0 failed with error -71
[ 29.468231][ T374] usb 3-1: USB disconnect, device number 2
[ 30.028286][ T374] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[ 30.209475][ T374] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 30.220439][ T374] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[ 30.229535][ T374] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 30.238190][ T374] usb 3-1: config 0 descriptor??
[ 31.059007][ T374] aiptek 3-1:0.0: Aiptek using 400 ms programming speed
[ 31.066496][ T374] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input4
[ 31.099295][ C0] ================================================================================
[ 31.108596][ C0] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31
[ 31.117189][ C0] index 1319 is out of range for type 'const int[34]'
[ 31.123951][ C0] CPU: 0 PID: 307 Comm: udevd Not tainted syzkaller #0
[ 31.130795][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 31.140866][ C0] Call Trace:
[ 31.144172][ C0]
[ 31.147011][ C0] __dump_stack+0x21/0x24
[ 31.151348][ C0] dump_stack_lvl+0x110/0x170
[ 31.156112][ C0] ? __cfi_dump_stack_lvl+0x8/0x8
[ 31.161161][ C0] dump_stack+0x15/0x24
[ 31.165344][ C0] ubsan_epilogue+0xe/0x40
[ 31.169762][ C0] __ubsan_handle_out_of_bounds+0xdf/0xf0
[ 31.175483][ C0] aiptek_irq+0x2045/0x29b0
[ 31.179981][ C0] ? kcov_remote_start+0xef/0x370
[ 31.185006][ C0] ? usb_unanchor_urb+0xa1/0xc0
[ 31.189862][ C0] __usb_hcd_giveback_urb+0x360/0x520
[ 31.195234][ C0] usb_hcd_giveback_urb+0x11f/0x3e0
[ 31.200432][ C0] dummy_timer+0xa25/0x3270
[ 31.204957][ C0] ? __cfi_dummy_timer+0x10/0x10
[ 31.209899][ C0] ? timerqueue_del+0xd3/0x120
[ 31.214685][ C0] ? __cfi_dummy_timer+0x10/0x10
[ 31.219633][ C0] __hrtimer_run_queues+0x398/0x890
[ 31.224845][ C0] ? hrtimer_interrupt+0x8c0/0x8c0
[ 31.229960][ C0] hrtimer_run_softirq+0x19b/0x260
[ 31.235066][ C0] handle_softirqs+0x1d7/0x600
[ 31.239833][ C0] __irq_exit_rcu+0x52/0xf0
[ 31.244331][ C0] irq_exit_rcu+0x9/0x10
[ 31.248568][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0
[ 31.254199][ C0]
[ 31.257133][ C0]
[ 31.260064][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20
[ 31.266057][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x36/0x60
[ 31.272216][ C0] Code: 70 07 91 7e 65 8b 15 71 07 91 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 6c 0b 00 00 00 74 2c 8b 91 48 0b 00 00 <83> fa 02 75 21 48 8b 91 50 0b 00 00 48 8b 32 48 8d 7e 01 8b 89 4c
[ 31.291820][ C0] RSP: 0018:ffffc900016c7ab8 EFLAGS: 00000246
[ 31.297908][ C0] RAX: ffffffff81c0b8f4 RBX: ffffc900016c7d90 RCX: ffff88810fac3cc0
[ 31.305879][ C0] RDX: 0000000000000000 RSI: 000000000000000c RDI: 0000000000000020
[ 31.313847][ C0] RBP: ffffc900016c7ab8 R08: ffffc900016c7dff R09: 1ffff920002d8fbf
[ 31.321815][ C0] R10: dffffc0000000000 R11: fffff520002d8fc0 R12: dffffc0000000000
[ 31.329788][ C0] R13: 0000000000000000 R14: ffff888124715d40 R15: 000000000000000c
[ 31.337778][ C0] ? generic_fillattr+0x3c4/0x5f0
[ 31.342803][ C0] generic_fillattr+0x3c4/0x5f0
[ 31.347655][ C0] kernfs_iop_getattr+0x25f/0x360
[ 31.352685][ C0] ? __cfi_kernfs_iop_getattr+0x10/0x10
[ 31.358246][ C0] vfs_statx+0x3b7/0x6b0
[ 31.362587][ C0] ? vfs_fstatat+0x80/0x80
[ 31.367004][ C0] __se_sys_newfstatat+0x142/0x440
[ 31.372112][ C0] ? __x64_sys_newfstatat+0xb0/0xb0
[ 31.377395][ C0] ? percpu_counter_add_batch+0x13c/0x160
[ 31.383122][ C0] ? __fput+0x66d/0x8f0
[ 31.387281][ C0] ? __cfi_mem_cgroup_handle_over_high+0x10/0x10
[ 31.393602][ C0] ? fput+0x15b/0x1a0
[ 31.397582][ C0] __x64_sys_newfstatat+0x9b/0xb0
[ 31.402600][ C0] x64_sys_call+0x77c/0x9a0
[ 31.407098][ C0] do_syscall_64+0x4c/0xa0
[ 31.411511][ C0] ? clear_bhb_loop+0x30/0x80
[ 31.416192][ C0] ? clear_bhb_loop+0x30/0x80
[ 31.420865][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 31.426766][ C0] RIP: 0033:0x7fab39711b0a
[ 31.431188][ C0] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7
[ 31.450791][ C0] RSP: 002b:00007fff93bf3298 EFLAGS: 00000206 ORIG_RAX: 0000000000000106
[ 31.459205][ C0] RAX: ffffffffffffffda RBX: 00007fff93bf47c0 RCX: 00007fab39711b0a
[ 31.467171][ C0] RDX: 00007fff93bf32a0 RSI: 00007fff93bf3330 RDI: 00000000ffffff9c
[ 31.475135][ C0] RBP: 000055aba7a98330 R08: 00007fff93bf47c0 R09: 0000000000000000
[ 31.483096][ C0] R10: 0000000000000100 R11: 0000000000000206 R12: 000055aba7a98420
[ 31.491063][ C0] R13: 00007fff93bf3330 R14: 000055aba7a928d0 R15: 00007fff93bf4fc0
[ 31.499043][ C0]
[ 31.502064][ C0] ================================================================================
[ 31.511338][ C0] ==================================================================
[ 31.519388][ C0] BUG: KASAN: global-out-of-bounds in aiptek_irq+0x2063/0x29b0
[ 31.526932][ C0] Read of size 4 at addr ffffffff85e6699c by task udevd/307
[ 31.534206][ C0]
[ 31.536540][ C0] CPU: 0 PID: 307 Comm: udevd Not tainted syzkaller #0
[ 31.543380][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 31.553426][ C0] Call Trace:
[ 31.556711][ C0]
[ 31.559563][ C0] __dump_stack+0x21/0x24
[ 31.563891][ C0] dump_stack_lvl+0x110/0x170
[ 31.568570][ C0] ? __cfi_dump_stack_lvl+0x8/0x8
[ 31.573610][ C0] ? _printk+0xda/0x128
[ 31.577775][ C0] ? aiptek_irq+0x2063/0x29b0
[ 31.582459][ C0] print_address_description+0x71/0x200
[ 31.588016][ C0] print_report+0x4a/0x60
[ 31.592357][ C0] kasan_report+0x122/0x150
[ 31.596873][ C0] ? aiptek_irq+0x2063/0x29b0
[ 31.601582][ C0] __asan_report_load4_noabort+0x14/0x20
[ 31.607220][ C0] aiptek_irq+0x2063/0x29b0
[ 31.612165][ C0] ? kcov_remote_start+0xef/0x370
[ 31.617204][ C0] ? usb_unanchor_urb+0xa1/0xc0
[ 31.622073][ C0] __usb_hcd_giveback_urb+0x360/0x520
[ 31.627458][ C0] usb_hcd_giveback_urb+0x11f/0x3e0
[ 31.632673][ C0] dummy_timer+0xa25/0x3270
[ 31.637201][ C0] ? __cfi_dummy_timer+0x10/0x10
[ 31.642151][ C0] ? timerqueue_del+0xd3/0x120
[ 31.646929][ C0] ? __cfi_dummy_timer+0x10/0x10
[ 31.651902][ C0] __hrtimer_run_queues+0x398/0x890
[ 31.657125][ C0] ? hrtimer_interrupt+0x8c0/0x8c0
[ 31.662256][ C0] hrtimer_run_softirq+0x19b/0x260
[ 31.667379][ C0] handle_softirqs+0x1d7/0x600
[ 31.672155][ C0] __irq_exit_rcu+0x52/0xf0
[ 31.676666][ C0] irq_exit_rcu+0x9/0x10
[ 31.680918][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0
[ 31.686568][ C0]
[ 31.689509][ C0]
[ 31.692447][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20
[ 31.698457][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x36/0x60
[ 31.704625][ C0] Code: 70 07 91 7e 65 8b 15 71 07 91 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 6c 0b 00 00 00 74 2c 8b 91 48 0b 00 00 <83> fa 02 75 21 48 8b 91 50 0b 00 00 48 8b 32 48 8d 7e 01 8b 89 4c
[ 31.724503][ C0] RSP: 0018:ffffc900016c7ab8 EFLAGS: 00000246
[ 31.730585][ C0] RAX: ffffffff81c0b8f4 RBX: ffffc900016c7d90 RCX: ffff88810fac3cc0
[ 31.738564][ C0] RDX: 0000000000000000 RSI: 000000000000000c RDI: 0000000000000020
[ 31.746542][ C0] RBP: ffffc900016c7ab8 R08: ffffc900016c7dff R09: 1ffff920002d8fbf
[ 31.754522][ C0] R10: dffffc0000000000 R11: fffff520002d8fc0 R12: dffffc0000000000
[ 31.762497][ C0] R13: 0000000000000000 R14: ffff888124715d40 R15: 000000000000000c
[ 31.770480][ C0] ? generic_fillattr+0x3c4/0x5f0
[ 31.775555][ C0] generic_fillattr+0x3c4/0x5f0
[ 31.780425][ C0] kernfs_iop_getattr+0x25f/0x360
[ 31.785464][ C0] ? __cfi_kernfs_iop_getattr+0x10/0x10
[ 31.791034][ C0] vfs_statx+0x3b7/0x6b0
[ 31.795303][ C0] ? vfs_fstatat+0x80/0x80
[ 31.799738][ C0] __se_sys_newfstatat+0x142/0x440
[ 31.804867][ C0] ? __x64_sys_newfstatat+0xb0/0xb0
[ 31.810077][ C0] ? percpu_counter_add_batch+0x13c/0x160
[ 31.815816][ C0] ? __fput+0x66d/0x8f0
[ 31.819986][ C0] ? __cfi_mem_cgroup_handle_over_high+0x10/0x10
[ 31.826324][ C0] ? fput+0x15b/0x1a0
[ 31.830318][ C0] __x64_sys_newfstatat+0x9b/0xb0
[ 31.835355][ C0] x64_sys_call+0x77c/0x9a0
[ 31.839877][ C0] do_syscall_64+0x4c/0xa0
[ 31.844306][ C0] ? clear_bhb_loop+0x30/0x80
[ 31.849171][ C0] ? clear_bhb_loop+0x30/0x80
[ 31.853865][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 31.859786][ C0] RIP: 0033:0x7fab39711b0a
[ 31.864214][ C0] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7
[ 31.883829][ C0] RSP: 002b:00007fff93bf3298 EFLAGS: 00000206 ORIG_RAX: 0000000000000106
[ 31.892277][ C0] RAX: ffffffffffffffda RBX: 00007fff93bf47c0 RCX: 00007fab39711b0a
[ 31.900258][ C0] RDX: 00007fff93bf32a0 RSI: 00007fff93bf3330 RDI: 00000000ffffff9c
[ 31.908234][ C0] RBP: 000055aba7a98330 R08: 00007fff93bf47c0 R09: 0000000000000000
[ 31.916209][ C0] R10: 0000000000000100 R11: 0000000000000206 R12: 000055aba7a98420
[ 31.924207][ C0] R13: 00007fff93bf3330 R14: 000055aba7a928d0 R15: 00007fff93bf4fc0
[ 31.932189][ C0]
[ 31.935222][ C0]
[ 31.937553][ C0] The buggy address belongs to the variable:
[ 31.943526][ C0] .str.17+0x5c/0x60
[ 31.947449][ C0]
[ 31.949809][ C0] The buggy address belongs to the physical page:
[ 31.956236][ C0] page:ffffea0000179980 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5e66
[ 31.966405][ C0] flags: 0x1000(reserved|zone=0)
[ 31.971363][ C0] raw: 0000000000001000 ffffea0000179988 ffffea0000179988 0000000000000000
[ 31.979954][ C0] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[ 31.988538][ C0] page dumped because: kasan: bad access detected
[ 31.994967][ C0] page_owner info is not present (never set?)
[ 32.001033][ C0]
[ 32.003369][ C0] Memory state around the buggy address:
[ 32.008997][ C0] ffffffff85e66880: 00 00 00 00 07 f9 f9 f9 f9 f9 f9 f9 00 00 00 00
[ 32.017057][ C0] ffffffff85e66900: 05 f9 f9 f9 f9 f9 f9 f9 00 00 00 00 00 02 f9 f9
[ 32.025125][ C0] >ffffffff85e66980: f9 f9 f9 f9 00 00 00 00 00 00 00 00 f9 f9 f9 f9
[ 32.033184][ C0] ^
[ 32.038036][ C0] ffffffff85e66a00: 00 00 00 00 00 00 00 00 06 f9 f9 f9 00 f9 f9 f9
[ 32.046111][ C0] ffffffff85e66a80: 00 07 f9 f9 00 02 f9 f9 00 00 00 00 00 03 f9 f9
[ 32.054178][ C0] ==================================================================
[ 32.062236][ C0] Disabling lock debugging due to kernel taint
[ 32.068389][ C0] ================================================================================
[ 32.077662][ C0] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:763:30
[ 32.086252][ C0] index 1320 is out of range for type 'const int[34]'
[ 32.093156][ C0] CPU: 0 PID: 307 Comm: udevd Tainted: G B syzkaller #0
[ 32.101505][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 32.111668][ C0] Call Trace:
[ 32.114962][ C0]
[ 32.117814][ C0] __dump_stack+0x21/0x24
[ 32.122159][ C0] dump_stack_lvl+0x110/0x170
[ 32.126850][ C0] ? __cfi_dump_stack_lvl+0x8/0x8
[ 32.131885][ C0] dump_stack+0x15/0x24
[ 32.136053][ C0] ubsan_epilogue+0xe/0x40
[ 32.140498][ C0] __ubsan_handle_out_of_bounds+0xdf/0xf0
[ 32.146239][ C0] aiptek_irq+0x1f14/0x29b0
[ 32.150749][ C0] ? kcov_remote_start+0xef/0x370
[ 32.155802][ C0] __usb_hcd_giveback_urb+0x360/0x520
[ 32.161212][ C0] usb_hcd_giveback_urb+0x11f/0x3e0
[ 32.166439][ C0] dummy_timer+0xa25/0x3270
[ 32.170974][ C0] ? __cfi_dummy_timer+0x10/0x10
[ 32.175932][ C0] ? timerqueue_del+0xd3/0x120
[ 32.180713][ C0] ? __cfi_dummy_timer+0x10/0x10
[ 32.185672][ C0] __hrtimer_run_queues+0x398/0x890
[ 32.190900][ C0] ? hrtimer_interrupt+0x8c0/0x8c0
[ 32.196033][ C0] hrtimer_run_softirq+0x19b/0x260
[ 32.201154][ C0] handle_softirqs+0x1d7/0x600
[ 32.205932][ C0] __irq_exit_rcu+0x52/0xf0
[ 32.210445][ C0] irq_exit_rcu+0x9/0x10
[ 32.214699][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0
[ 32.220347][ C0]
[ 32.223288][ C0]
[ 32.226228][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20
[ 32.232242][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x36/0x60
[ 32.238412][ C0] Code: 70 07 91 7e 65 8b 15 71 07 91 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 6c 0b 00 00 00 74 2c 8b 91 48 0b 00 00 <83> fa 02 75 21 48 8b 91 50 0b 00 00 48 8b 32 48 8d 7e 01 8b 89 4c
[ 32.258017][ C0] RSP: 0018:ffffc900016c7ab8 EFLAGS: 00000246
[ 32.264094][ C0] RAX: ffffffff81c0b8f4 RBX: ffffc900016c7d90 RCX: ffff88810fac3cc0
[ 32.272071][ C0] RDX: 0000000000000000 RSI: 000000000000000c RDI: 0000000000000020
[ 32.280055][ C0] RBP: ffffc900016c7ab8 R08: ffffc900016c7dff R09: 1ffff920002d8fbf
[ 32.288037][ C0] R10: dffffc0000000000 R11: fffff520002d8fc0 R12: dffffc0000000000
[ 32.296022][ C0] R13: 0000000000000000 R14: ffff888124715d40 R15: 000000000000000c
[ 32.304005][ C0] ? generic_fillattr+0x3c4/0x5f0
[ 32.309082][ C0] generic_fillattr+0x3c4/0x5f0
[ 32.313965][ C0] kernfs_iop_getattr+0x25f/0x360
[ 32.319013][ C0] ? __cfi_kernfs_iop_getattr+0x10/0x10
[ 32.324572][ C0] vfs_statx+0x3b7/0x6b0
[ 32.328830][ C0] ? vfs_fstatat+0x80/0x80
[ 32.333265][ C0] __se_sys_newfstatat+0x142/0x440
[ 32.338399][ C0] ? __x64_sys_newfstatat+0xb0/0xb0
[ 32.343678][ C0] ? percpu_counter_add_batch+0x13c/0x160
[ 32.349422][ C0] ? __fput+0x66d/0x8f0
[ 32.353593][ C0] ? __cfi_mem_cgroup_handle_over_high+0x10/0x10
[ 32.359929][ C0] ? fput+0x15b/0x1a0
[ 32.363931][ C0] __x64_sys_newfstatat+0x9b/0xb0
[ 32.368981][ C0] x64_sys_call+0x77c/0x9a0
[ 32.373500][ C0] do_syscall_64+0x4c/0xa0
[ 32.377924][ C0] ? clear_bhb_loop+0x30/0x80
[ 32.382610][ C0] ? clear_bhb_loop+0x30/0x80
[ 32.387296][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 32.393206][ C0] RIP: 0033:0x7fab39711b0a
[ 32.397626][ C0] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7
[ 32.417240][ C0] RSP: 002b:00007fff93bf3298 EFLAGS: 00000206 ORIG_RAX: 0000000000000106
[ 32.425673][ C0] RAX: ffffffffffffffda RBX: 00007fff93bf47c0 RCX: 00007fab39711b0a
[ 32.433650][ C0] RDX: 00007fff93bf32a0 RSI: 00007fff93bf3330 RDI: 00000000ffffff9c
[ 32.441632][ C0] RBP: 000055aba7a98330 R08: 00007fff93bf47c0 R09: 0000000000000000
[ 32.449613][ C0] R10: 0000000000000100 R11: 0000000000000206 R12: 000055aba7a98420
[ 32.457595][ C0] R13: 00007fff93bf3330 R14: 000055aba7a928d0 R15: 00007fff93bf4fc0
[ 32.465576][ C0]
[ 32.468598][ C0] ================================================================================
[ 32.495613][ T28] kauditd_printk_skb: 34 callbacks suppressed
[ 32.495627][ T28] audit: type=1400 audit(1785271289.826:108): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[ 32.501683][ T24] usb 3-1: USB disconnect, device number 3
[ 32.502111][ C0] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
[ 32.537482][ T28] audit: type=1400 audit(1785271289.826:109): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 32.558958][ T28] audit: type=1400 audit(1785271289.826:110): avc: denied { write } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 32.580356][ T28] audit: type=1400 audit(1785271289.826:111): avc: denied { add_name } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 32.600947][ T28] audit: type=1400 audit(1785271289.836:112): avc: denied { create } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 32.621627][ T28] audit: type=1400 audit(1785271289.836:113): avc: denied { append open } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 32.645021][ T28] audit: type=1400 audit(1785271289.836:114): avc: denied { getattr } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1