[Bug 2125250] Re: UBSAN: array-index-out-of-bounds in /build/linux-1ylo5V/linux-6.8.0/drivers/input/mouse/focaltech.c:221:17

Hi, All.
I've faced exactly with the same behaviour.
And hardware is Asus as well.

uname -a
Linux E402MA 6.8.0-100-generic #100-Ubuntu SMP PREEMPT_DYNAMIC Tue Jan 13 16:40:06 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux


2026-02-23T21:46:56.583079+02:00 E402MA kernel: ------------[ cut here ]------------
2026-02-23T21:46:56.583086+02:00 E402MA kernel: UBSAN: array-index-out-of-bounds in /build/linux-ylyFjh/linux-6.8.0/drivers/input/mouse/focaltech.c:222:17
2026-02-23T21:46:56.583093+02:00 E402MA kernel: index -1 is out of range for type 'focaltech_finger_state [5]'
2026-02-23T21:46:56.583502+02:00 E402MA kernel: CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.8.0-100-generic #100-Ubuntu
2026-02-23T21:46:56.583519+02:00 E402MA kernel: Hardware name: ASUSTeK COMPUTER INC. E402MA/E402MA, BIOS E402MA.207 01/28/2016
2026-02-23T21:46:56.583528+02:00 E402MA kernel: Call Trace:
2026-02-23T21:46:56.583535+02:00 E402MA kernel: <IRQ>
2026-02-23T21:46:56.583543+02:00 E402MA kernel: dump_stack_lvl+0x76/0xa0
2026-02-23T21:46:56.583551+02:00 E402MA kernel: dump_stack+0x10/0x20
2026-02-23T21:46:56.583559+02:00 E402MA kernel: __ubsan_handle_out_of_bounds+0xc6/0x110
2026-02-23T21:46:56.583568+02:00 E402MA kernel: focaltech_process_packet+0x3f8/0x400 [psmouse]
2026-02-23T21:46:56.583575+02:00 E402MA kernel: focaltech_process_byte+0x23/0x30 [psmouse]
2026-02-23T21:46:56.583636+02:00 E402MA kernel: psmouse_handle_byte+0x19/0x130 [psmouse]
2026-02-23T21:46:56.583650+02:00 E402MA kernel: psmouse_receive_byte+0x91/0x300 [psmouse]
2026-02-23T21:46:56.583659+02:00 E402MA kernel: ps2_interrupt+0xb7/0x1b0
2026-02-23T21:46:56.583667+02:00 E402MA kernel: serio_interrupt+0x4c/0xa0
2026-02-23T21:46:56.583675+02:00 E402MA kernel: i8042_interrupt+0x196/0x4c0
2026-02-23T21:46:56.583682+02:00 E402MA kernel: __handle_irq_event_percpu+0x4f/0x1b0
2026-02-23T21:46:56.583690+02:00 E402MA kernel: handle_irq_event+0x39/0x80
2026-02-23T21:46:56.583697+02:00 E402MA kernel: handle_edge_irq+0x8c/0x250
2026-02-23T21:46:56.583705+02:00 E402MA kernel: __common_interrupt+0x51/0xf0
2026-02-23T21:46:56.583712+02:00 E402MA kernel: common_interrupt+0x9f/0xb0
2026-02-23T21:46:56.583720+02:00 E402MA kernel: </IRQ>
2026-02-23T21:46:56.583727+02:00 E402MA kernel: <TASK>
2026-02-23T21:46:56.583734+02:00 E402MA kernel: asm_common_interrupt+0x27/0x40
2026-02-23T21:46:56.583741+02:00 E402MA kernel: RIP: 0010:cpuidle_enter_state+0xda/0x730
2026-02-23T21:46:56.583749+02:00 E402MA kernel: Code: b5 f4 fe e8 38 ef ff ff 8b 53 04 49 89 c7 0f 1f 44 00 00 31 ff e8 46 44 f3 fe 80 7d d0 00 0f 85 61 02 00 00 fb 0f 1f 44 00 00 <45> 85 f6 0
f 88 f7 01 00 00 4d 63 ee 49 83 fd 0a 0f 83 17 05 00 00
2026-02-23T21
...

Now I've disabled internal pointing device in BIOS. Working via x2x.

Regards,
Max

--
You received this bug notification because you are subscribed to linux
in Ubuntu.
Matching subscriptions: Bgg, Bmail, Nb
https://bugs.launchpad.net/bugs/2125250

Title:
UBSAN: array-index-out-of-bounds in
/build/linux-1ylo5V/linux-6.8.0/drivers/input/mouse/focaltech.c:221:17

Status in linux package in Ubuntu:
New

Bug description:
I'm facing this error in the journal.

It likely still happens in a recent kernel since I haven't seen any
change in the problematic piece of code
drivers/input/mouse/focaltech.c

This is on noble (6.8.0-83-generic #83-Ubuntu)
sept. 19 14:35:03 Albert2 kernel: ------------[ cut here ]------------
sept. 19 14:35:03 Albert2 kernel: UBSAN: array-index-out-of-bounds in /build/linux-1ylo5V/linux-6.8.0/drivers/input/mouse/focaltech.c:221:17
sept. 19 14:35:03 Albert2 kernel: index -1 is out of range for type 'focaltech_finger_state [5]'
sept. 19 14:35:03 Albert2 kernel: CPU: 2 PID: 0 Comm: swapper/2 Not tainted 6.8.0-83-generic #83-Ubuntu
sept. 19 14:35:03 Albert2 kernel: Hardware name: ASUSTeK COMPUTER INC. UX303LNB/UX303LNB, BIOS UX303LNB.206 01/22/2015
sept. 19 14:35:03 Albert2 kernel: Call Trace:
sept. 19 14:35:03 Albert2 kernel: <IRQ>
sept. 19 14:35:03 Albert2 kernel: dump_stack_lvl+0x76/0xa0
sept. 19 14:35:03 Albert2 kernel: dump_stack+0x10/0x20
sept. 19 14:35:03 Albert2 kernel: __ubsan_handle_out_of_bounds+0xc6/0x110
sept. 19 14:35:03 Albert2 kernel: focaltech_process_packet+0x3d0/0x400 [psmouse]
sept. 19 14:35:03 Albert2 kernel: focaltech_process_byte+0x23/0x30 [psmouse]
sept. 19 14:35:03 Albert2 kernel: psmouse_handle_byte+0x19/0x130 [psmouse]
sept. 19 14:35:03 Albert2 kernel: psmouse_receive_byte+0x91/0x300 [psmouse]
sept. 19 14:35:03 Albert2 kernel: ps2_interrupt+0xb7/0x1b0
sept. 19 14:35:03 Albert2 kernel: serio_interrupt+0x4c/0xa0
sept. 19 14:35:03 Albert2 kernel: i8042_interrupt+0x196/0x4c0
sept. 19 14:35:03 Albert2 kernel: __handle_irq_event_percpu+0x4f/0x1b0
sept. 19 14:35:03 Albert2 kernel: handle_irq_event+0x39/0x80
sept. 19 14:35:03 Albert2 kernel: handle_edge_irq+0x8c/0x250
sept. 19 14:35:03 Albert2 kernel: __common_interrupt+0x51/0xf0
sept. 19 14:35:03 Albert2 kernel: common_interrupt+0x9f/0xb0
sept. 19 14:35:03 Albert2 kernel: </IRQ>
sept. 19 14:35:03 Albert2 kernel: <TASK>
sept. 19 14:35:03 Albert2 kernel: asm_common_interrupt+0x27/0x40
sept. 19 14:35:03 Albert2 kernel: RIP: 0010:cpuidle_enter_state+0xda/0x730
sept. 19 14:35:03 Albert2 kernel: Code: 05 f5 fe e8 38 ee ff ff 8b 53 04 49 89 c7 0f 1f 44 00 00 31 ff e8 36 94 f3 fe 80 7d d0 00 0f 85 61 02 00 00 fb 0f 1f 44 00 00 <45> 85 f6 0f 88 f7 01 00 00 4d 63 ee 49 83 fd 0a 0f 83 17 05 00 00
sept. 19 14:35:03 Albert2 kernel: RSP: 0018:ffffbf28c00f3e18 EFLAGS: 00000246
sept. 19 14:35:03 Albert2 kernel: RAX: 0000000000000000 RBX: ffff97dce6d55a60 RCX: 0000000000000000
sept. 19 14:35:03 Albert2 kernel: RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000
sept. 19 14:35:03 Albert2 kernel: RBP: ffffbf28c00f3e68 R08: 0000000000000000 R09: 0000000000000000
sept. 19 14:35:03 Albert2 kernel: R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff928e68a0
sept. 19 14:35:03 Albert2 kernel: R13: 0000000000000008 R14: 0000000000000008 R15: 0000001f22eb3ce7
sept. 19 14:35:03 Albert2 kernel: ? cpuidle_enter_state+0xca/0x730
sept. 19 14:35:03 Albert2 kernel: cpuidle_enter+0x2e/0x50
sept. 19 14:35:03 Albert2 kernel: call_cpuidle+0x23/0x60
sept. 19 14:35:03 Albert2 kernel: cpuidle_idle_call+0x11d/0x190
sept. 19 14:35:03 Albert2 kernel: do_idle+0x87/0xf0
sept. 19 14:35:03 Albert2 kernel: cpu_startup_entry+0x2a/0x30
sept. 19 14:35:03 Albert2 kernel: start_secondary+0x129/0x160
sept. 19 14:35:03 Albert2 kernel: secondary_startup_64_no_verify+0x184/0x18b
sept. 19 14:35:03 Albert2 kernel: </TASK>
sept. 19 14:35:03 Albert2 kernel: ---[ end trace ]---

Note that I had the same error on jammy (5.15.0-153-generic
#163-Ubuntu)

sept. 19 13:09:38 Albert2 kernel: ================================================================================
sept. 19 13:09:38 Albert2 kernel: UBSAN: array-index-out-of-bounds in /build/linux-s9dSph/linux-5.15.0/drivers/input/mouse/focaltech.c:222:29
sept. 19 13:09:38 Albert2 kernel: index -1 is out of range for type 'focaltech_finger_state [5]'
sept. 19 13:09:38 Albert2 kernel: CPU: 2 PID: 0 Comm: swapper/2 Tainted: P OE 5.15.0-153-generic #163-Ubuntu
sept. 19 13:09:38 Albert2 kernel: Hardware name: ASUSTeK COMPUTER INC. UX303LNB/UX303LNB, BIOS UX303LNB.206 01/22/2015
sept. 19 13:09:38 Albert2 kernel: Call Trace:
sept. 19 13:09:38 Albert2 kernel: <IRQ>
sept. 19 13:09:38 Albert2 kernel: show_stack+0x52/0x5c
sept. 19 13:09:38 Albert2 kernel: dump_stack_lvl+0x4a/0x63
sept. 19 13:09:38 Albert2 kernel: dump_stack+0x10/0x16
sept. 19 13:09:38 Albert2 kernel: ubsan_epilogue+0x9/0x36
sept. 19 13:09:38 Albert2 kernel: __ubsan_handle_out_of_bounds.cold+0x44/0x49
sept. 19 13:09:38 Albert2 kernel: focaltech_process_packet+0x366/0x3a0 [psmouse]
sept. 19 13:09:38 Albert2 kernel: focaltech_process_byte+0x21/0x30 [psmouse]
sept. 19 13:09:38 Albert2 kernel: psmouse_handle_byte+0x19/0x70 [psmouse]
sept. 19 13:09:38 Albert2 kernel: psmouse_interrupt+0xd8/0x410 [psmouse]
sept. 19 13:09:38 Albert2 kernel: serio_interrupt+0x4d/0xa0
sept. 19 13:09:38 Albert2 kernel: i8042_interrupt+0x1b4/0x370
sept. 19 13:09:38 Albert2 kernel: __handle_irq_event_percpu+0x42/0x170
sept. 19 13:09:38 Albert2 kernel: handle_irq_event+0x59/0xb0
sept. 19 13:09:38 Albert2 kernel: handle_edge_irq+0x8c/0x230
sept. 19 13:09:38 Albert2 kernel: __common_interrupt+0x52/0xe0
sept. 19 13:09:38 Albert2 kernel: common_interrupt+0x89/0xa0
sept. 19 13:09:38 Albert2 kernel: </IRQ>
sept. 19 13:09:38 Albert2 kernel: <TASK>
sept. 19 13:09:38 Albert2 kernel: asm_common_interrupt+0x27/0x40
sept. 19 13:09:38 Albert2 kernel: RIP: 0010:cpuidle_enter_state+0xd9/0x620
sept. 19 13:09:38 Albert2 kernel: Code: 3d cc 60 37 4a e8 d7 b6 66 ff 49 89 c7 0f 1f 44 00 00 31 ff e8 28 c4 66 ff 80 7d d0 00 0f 85 61 01 00 00 fb 66 0f 1f 44 00 00 <45> 85 f6 0f 88 6d 01 00 00 4d 63 ee 49 83 fd 09 0f 87 e7 03 00 00
sept. 19 13:09:38 Albert2 kernel: RSP: 0018:ffffb400800e3e28 EFLAGS: 00000246
sept. 19 13:09:38 Albert2 kernel: RAX: ffff901566d320c0 RBX: ffffd4007fd00000 RCX: 0000000000000000
sept. 19 13:09:38 Albert2 kernel: RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000
sept. 19 13:09:38 Albert2 kernel: RBP: ffffb400800e3e78 R08: 0000001ea069a684 R09: 00000000001b7740
sept. 19 13:09:38 Albert2 kernel: R10: 0000000000000009 R11: 071c71c71c71c71c R12: ffffffffb72d6fa0
sept. 19 13:09:38 Albert2 kernel: R13: 0000000000000006 R14: 0000000000000006 R15: 0000001ea069a684
sept. 19 13:09:38 Albert2 kernel: ? cpuidle_enter_state+0xc8/0x620
sept. 19 13:09:38 Albert2 kernel: cpuidle_enter+0x2e/0x50
sept. 19 13:09:38 Albert2 kernel: cpuidle_idle_call+0x142/0x1e0
sept. 19 13:09:38 Albert2 kernel: do_idle+0x83/0xf0
sept. 19 13:09:38 Albert2 kernel: cpu_startup_entry+0x20/0x30
sept. 19 13:09:38 Albert2 kernel: start_secondary+0x12a/0x180
sept. 19 13:09:38 Albert2 kernel: secondary_startup_64_no_verify+0xc2/0xcb
sept. 19 13:09:38 Albert2 kernel: </TASK>
sept. 19 13:09:38 Albert2 kernel: ================================================================================
---
ProblemType: Bug
ApportVersion: 2.20.11-0ubuntu82.10
Architecture: amd64
AudioDevicesInUse:
 USER PID ACCESS COMMAND
 /dev/snd/controlC0: fabien 5742 F.... pulseaudio
 /dev/snd/controlC1: fabien 5742 F.... pulseaudio
CRDA: N/A
CasperMD5CheckResult: unknown
CurrentDesktop: ubuntu:GNOME
DistroRelease: Ubuntu 22.04
HibernationDevice: RESUME=UUID=70d9afbb-2d9a-4b6e-88f0-68d461d2b003
InstallationDate: Installed on 2015-07-13 (3721 days ago)
InstallationMedia: Ubuntu 14.04.2 LTS "Trusty Tahr" - Release amd64 (20150218.1)
Lsusb:
 Bus 002 Device 002: ID 0bda:9210 Realtek Semiconductor Corp. RTL9210 M.2 NVME Adapter
 Bus 002 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub
 Bus 001 Device 003: ID 8087:0a2a Intel Corp. Bluetooth wireless interface
 Bus 001 Device 002: ID 064e:9700 Suyin Corp. Asus Integrated Webcam
 Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
MachineType: ASUSTeK COMPUTER INC. UX303LNB
NonfreeKernelModules: nvidia_modeset nvidia
Package: linux (not installed)
ProcEnviron:
 TERM=xterm-256color
 PATH=(custom, no user)
 XDG_RUNTIME_DIR=<set>
 LANG=fr_FR.UTF-8
 SHELL=/bin/bash
ProcFB: 0 i915drmfb
ProcKernelCmdLine: BOOT_IMAGE=/boot/vmlinuz-5.15.0-153-generic root=UUID=d0293d5f-398e-4356-b7fd-055cfc3abb3a ro quiet splash vt.handoff=7
ProcVersionSignature: Ubuntu 5.15.0-153.163-generic 5.15.185
RelatedPackageVersions:
 linux-restricted-modules-5.15.0-153-generic N/A
 linux-backports-modules-5.15.0-153-generic N/A
 linux-firmware 20220329.git681281e4-0ubuntu3.39
Tags: jammy
Uname: Linux 5.15.0-153-generic x86_64
UpgradeStatus: Upgraded to jammy on 2025-06-07 (104 days ago)
UserGroups: adm bumblebee cdrom dip lpadmin plugdev sambashare sudo
_MarkForUpload: True
dmi.bios.date: 01/22/2015
dmi.bios.release: 5.6
dmi.bios.vendor: American Megatrends Inc.
dmi.bios.version: UX303LNB.206
dmi.board.asset.tag: ATN12345678901234567
dmi.board.name: UX303LNB
dmi.board.vendor: ASUSTeK COMPUTER INC.
dmi.board.version: 1.0
dmi.chassis.asset.tag: No Asset Tag
dmi.chassis.type: 10
dmi.chassis.vendor: ASUSTeK COMPUTER INC.
dmi.chassis.version: 1.0
dmi.modalias: dmi:bvnAmericanMegatrendsInc.:bvrUX303LNB.206:bd01/22/2015:br5.6:svnASUSTeKCOMPUTERINC.:pnUX303LNB:pvr1.0:rvnASUSTeKCOMPUTERINC.:rnUX303LNB:rvr1.0:cvnASUSTeKCOMPUTERINC.:ct10:cvr1.0:skuASUS-NotebookSKU:
dmi.product.family: UX
dmi.product.name: UX303LNB
dmi.product.sku: ASUS-NotebookSKU
dmi.product.version: 1.0
dmi.sys.vendor: ASUSTeK COMPUTER INC.
---
ProblemType: Bug
ApportVersion: 2.28.1-0ubuntu3.8
Architecture: amd64
AudioDevicesInUse:
 USER PID ACCESS COMMAND
 /dev/snd/controlC1: fabien 2378 F.... wireplumber
 /dev/snd/controlC0: fabien 2378 F.... wireplumber
 /dev/snd/seq: fabien 2371 F.... pipewire
CRDA: N/A
CasperMD5CheckResult: unknown
CurrentDesktop: ubuntu:GNOME
DistroRelease: Ubuntu 24.04
HibernationDevice: RESUME=UUID=70d9afbb-2d9a-4b6e-88f0-68d461d2b003
InstallationDate: Installed on 2015-07-13 (3722 days ago)
InstallationMedia: Ubuntu 14.04.2 LTS "Trusty Tahr" - Release amd64 (20150218.1)
Lsusb:
 Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
 Bus 001 Device 002: ID 064e:9700 Suyin Corp. Asus Integrated Webcam
 Bus 001 Device 003: ID 8087:0a2a Intel Corp. Bluetooth wireless interface
 Bus 002 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub
 Bus 002 Device 002: ID 0bda:9210 Realtek Semiconductor Corp. RTL9210 M.2 NVME Adapter
MachineType: ASUSTeK COMPUTER INC. UX303LNB
NonfreeKernelModules: nvidia_modeset nvidia
Package: linux (not installed)
ProcEnviron:
 LANG=fr_FR.UTF-8
 PATH=(custom, no user)
 SHELL=/bin/bash
 TERM=xterm-256color
 XDG_RUNTIME_DIR=<set>
ProcFB: 0 i915drmfb
ProcKernelCmdLine: BOOT_IMAGE=/boot/vmlinuz-6.8.0-83-generic root=UUID=9737a659-57d0-4b16-857c-df68048312a7 ro quiet splash resume=UUID=70d9afbb-2d9a-4b6e-88f0-68d461d2b003 vt.handoff=7
ProcVersionSignature: Ubuntu 6.8.0-83.83-generic 6.8.12
PulseList: Error: command ['pacmd', 'list'] failed with exit code 1: No PulseAudio daemon running, or not running as session daemon.
RelatedPackageVersions:
 linux-restricted-modules-6.8.0-83-generic N/A
 linux-backports-modules-6.8.0-83-generic N/A
 linux-firmware 20240318.git3b128b60-0ubuntu2.17
Tags: noble
Uname: Linux 6.8.0-83-generic x86_64
UpgradeStatus: Upgraded to noble on 2025-09-19 (1 days ago)
UserGroups: adm bumblebee cdrom dip lpadmin plugdev sambashare sudo
_MarkForUpload: True
dmi.bios.date: 01/22/2015
dmi.bios.release: 5.6
dmi.bios.vendor: American Megatrends Inc.
dmi.bios.version: UX303LNB.206
dmi.board.asset.tag: ATN12345678901234567
dmi.board.name: UX303LNB
dmi.board.vendor: ASUSTeK COMPUTER INC.
dmi.board.version: 1.0
dmi.chassis.asset.tag: No Asset Tag
dmi.chassis.type: 10
dmi.chassis.vendor: ASUSTeK COMPUTER INC.
dmi.chassis.version: 1.0
dmi.modalias: dmi:bvnAmericanMegatrendsInc.:bvrUX303LNB.206:bd01/22/2015:br5.6:svnASUSTeKCOMPUTERINC.:pnUX303LNB:pvr1.0:rvnASUSTeKCOMPUTERINC.:rnUX303LNB:rvr1.0:cvnASUSTeKCOMPUTERINC.:ct10:cvr1.0:skuASUS-NotebookSKU:
dmi.product.family: UX
dmi.product.name: UX303LNB
dmi.product.sku: ASUS-NotebookSKU
dmi.product.version: 1.0
dmi.sys.vendor: ASUSTeK COMPUTER INC.


In attachment you'll find first the ones for jammy (kernel 5.15), then the ones for noble (kernel 6.8) and finally the kernel log of the previous boot which has the error. The current boot showed the error only later. So there also an additional dmesg output.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2125250/+subscriptions