[ 39.109010][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.116778][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.126013][ T2849] device veth0_vlan entered promiscuous mode [ 39.288685][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.376685][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 39.385303][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.394997][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 39.403372][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.236586][ T9] device veth0_vlan left promiscuous mode [ 40.242897][ T9] device veth0_vlan left promiscuous mode Warning: Permanently added '10.128.0.106' (ED25519) to the list of known hosts. 2025/12/04 15:50:09 parsed 1 programs [ 58.839015][ T3066] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 60.710713][ T2639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.754432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.763605][ T2639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.772059][ T2639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.786509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.794867][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.804920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.813073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.083994][ T2639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.092565][ T2639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.105528][ T2639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.113486][ T2639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.121560][ T2639] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.129174][ T2639] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.138118][ T3075] device veth0_vlan entered promiscuous mode [ 61.300975][ T2639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.309324][ T2639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.391770][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.400872][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.415212][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.423743][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2025/12/04 15:50:12 executed programs: 0 [ 61.816435][ T9] device veth0_vlan left promiscuous mode [ 64.394125][ T2609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.404800][ T2609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.425141][ T2609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.440406][ T2609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.556785][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.590496][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.609866][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.628949][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.638057][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.646651][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.654913][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.663403][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.672049][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.679871][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.687546][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.695045][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.706759][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.714752][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.738628][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.754729][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.766666][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.782374][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.790977][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.800247][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.811107][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.830213][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.841079][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.856486][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.882664][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.891386][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.899864][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.908138][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.919379][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.933203][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.948278][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.964486][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.974465][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.983195][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.001427][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.010434][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.019574][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.028837][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.046735][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.064387][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.085727][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.093956][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.105926][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.114333][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.125062][ T89] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.140849][ T89] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.030955][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.045146][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.068338][ T3350] device veth0_vlan entered promiscuous mode [ 66.076854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.085766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.104082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.111849][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.126137][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.135531][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.148088][ T3349] device veth0_vlan entered promiscuous mode [ 66.165602][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.173709][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.183677][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.203372][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.266343][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.284383][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.299501][ T3356] device veth0_vlan entered promiscuous mode [ 66.310889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.319881][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.328247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.336866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.345454][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.353009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.366455][ T3357] device veth0_vlan entered promiscuous mode [ 66.372863][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.382181][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.401650][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.421385][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.433373][ T3355] device veth0_vlan entered promiscuous mode [ 66.442180][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.454814][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.480237][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.494688][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.502651][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.510774][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.879559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.893847][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.978855][ T89] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.994425][ T89] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.099287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.114723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.130291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.154714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.297634][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.306625][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.320582][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.334700][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.361645][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.383620][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.412544][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.426814][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.447509][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.464493][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.487041][ T89] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.515488][ T89] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.524795][ T89] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.554533][ T89] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2025/12/04 15:50:18 executed programs: 10 [ 67.645021][ T89] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.654224][ T89] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.662758][ T89] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.671869][ T89] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.764643][ T89] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.773173][ T89] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.783740][ T89] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.792278][ T89] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.884204][ T2678] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 67.904439][ T2675] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 68.014152][ T2677] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 68.074163][ T2596] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 68.154213][ T7] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 68.161966][ T2678] usb 3-1: Using ep0 maxpacket: 8 [ 68.167083][ T2675] usb 1-1: Using ep0 maxpacket: 8 [ 68.264209][ T2677] usb 7-1: Using ep0 maxpacket: 8 [ 68.314144][ T2596] usb 4-1: Using ep0 maxpacket: 8 [ 68.334315][ T2678] usb 3-1: unable to get BOS descriptor or descriptor too short [ 68.342114][ T2675] usb 1-1: unable to get BOS descriptor or descriptor too short [ 68.424182][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 68.429296][ T2678] usb 3-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid wMaxPacketSize 0 [ 68.439408][ T2675] usb 1-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid wMaxPacketSize 0 [ 68.449301][ T2677] usb 7-1: unable to get BOS descriptor or descriptor too short [ 68.457063][ T2678] usb 3-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 0 [ 68.466933][ T2675] usb 1-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 0 [ 68.474186][ T2596] usb 4-1: unable to get BOS descriptor or descriptor too short [ 68.476818][ T2678] usb 3-1: config 8 interface 0 has no altsetting 0 [ 68.490969][ T2675] usb 1-1: config 8 interface 0 has no altsetting 0 [ 68.554394][ T2677] usb 7-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid wMaxPacketSize 0 [ 68.564679][ T2677] usb 7-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 0 [ 68.574971][ T2677] usb 7-1: config 8 interface 0 has no altsetting 0 [ 68.584243][ T2596] usb 4-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid wMaxPacketSize 0 [ 68.594350][ T2596] usb 4-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 0 [ 68.604129][ T2596] usb 4-1: config 8 interface 0 has no altsetting 0 [ 68.604212][ T7] usb 2-1: unable to get BOS descriptor or descriptor too short [ 68.654264][ T2678] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 68.663691][ T2675] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 68.673020][ T2675] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.681252][ T2678] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.689342][ T7] usb 2-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid wMaxPacketSize 0 [ 68.699213][ T2675] usb 1-1: Product: syz [ 68.703349][ T2675] usb 1-1: Manufacturer: syz [ 68.708145][ T2678] usb 3-1: Product: syz [ 68.712298][ T2678] usb 3-1: Manufacturer: syz [ 68.716945][ T7] usb 2-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 0 [ 68.726930][ T2675] usb 1-1: SerialNumber: syz [ 68.731850][ T2678] usb 3-1: SerialNumber: syz [ 68.737588][ T7] usb 2-1: config 8 interface 0 has no altsetting 0 [ 68.744285][ T2677] usb 7-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 68.753297][ T2677] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.761576][ T2677] usb 7-1: Product: syz [ 68.765874][ T2677] usb 7-1: Manufacturer: syz [ 68.770548][ T2677] usb 7-1: SerialNumber: syz [ 68.784589][ T2596] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 68.794425][ T2596] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.802401][ T2596] usb 4-1: Product: syz [ 68.806691][ T2596] usb 4-1: Manufacturer: syz [ 68.811368][ T2596] usb 4-1: SerialNumber: syz [ 68.914220][ T7] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 68.923510][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.931650][ T7] usb 2-1: Product: syz [ 68.935885][ T7] usb 2-1: Manufacturer: syz [ 68.940472][ T7] usb 2-1: SerialNumber: syz [ 69.055231][ T2675] usb 1-1: selecting invalid altsetting 0 [ 69.075947][ T2678] usb 3-1: selecting invalid altsetting 0 [ 69.082316][ T2675] snd-usb-audio: probe of 1-1:8.0 failed with error -12 [ 69.096152][ T2675] usb 1-1: USB disconnect, device number 2 [ 69.104778][ T2677] usb 7-1: selecting invalid altsetting 0 [ 69.111217][ T2678] snd-usb-audio: probe of 3-1:8.0 failed with error -12 [ 69.125059][ T2678] usb 3-1: USB disconnect, device number 2 [ 69.132056][ T2677] snd-usb-audio: probe of 7-1:8.0 failed with error -12 [ 69.145195][ T2677] usb 7-1: USB disconnect, device number 2 [ 69.145340][ T2596] usb 4-1: selecting invalid altsetting 0 [ 69.193748][ T2596] snd-usb-audio: probe of 4-1:8.0 failed with error -12 [ 69.203372][ T2596] usb 4-1: USB disconnect, device number 2 [ 69.264742][ T7] usb 2-1: selecting invalid altsetting 0 [ 69.278225][ T7] snd-usb-audio: probe of 2-1:8.0 failed with error -12 [ 69.288471][ T7] usb 2-1: USB disconnect, device number 2 [ 69.464145][ T2675] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 69.484213][ T2678] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 69.504292][ T2677] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 69.574841][ T2596] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 69.644108][ T7] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 69.704175][ T2675] usb 1-1: Using ep0 maxpacket: 8 [ 69.724224][ T2678] usb 3-1: Using ep0 maxpacket: 8 [ 69.744274][ T2677] usb 7-1: Using ep0 maxpacket: 8 [ 69.834113][ T2596] usb 4-1: Using ep0 maxpacket: 8 [ 69.884280][ T2675] usb 1-1: unable to get BOS descriptor or descriptor too short [ 69.894173][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 69.904229][ T2678] usb 3-1: unable to get BOS descriptor or descriptor too short [ 69.924264][ T2677] usb 7-1: unable to get BOS descriptor or descriptor too short [ 69.964274][ T2675] usb 1-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid wMaxPacketSize 0 [ 69.974677][ T2675] usb 1-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 0 [ 69.984649][ T2678] usb 3-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid wMaxPacketSize 0 [ 69.994475][ T2675] usb 1-1: config 8 interface 0 has no altsetting 0 [ 70.001340][ T2678] usb 3-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 0 [ 70.004208][ T2596] usb 4-1: unable to get BOS descriptor or descriptor too short [ 70.011171][ T2678] usb 3-1: config 8 interface 0 has no altsetting 0 [ 70.025677][ T2677] usb 7-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid wMaxPacketSize 0 [ 70.035556][ T2677] usb 7-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 0 [ 70.045396][ T2677] usb 7-1: config 8 interface 0 has no altsetting 0 [ 70.064218][ T7] usb 2-1: unable to get BOS descriptor or descriptor too short [ 70.094196][ T2596] usb 4-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid wMaxPacketSize 0 [ 70.104237][ T2596] usb 4-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 0 [ 70.114106][ T2596] usb 4-1: config 8 interface 0 has no altsetting 0 [ 70.144254][ T7] usb 2-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid wMaxPacketSize 0 [ 70.154591][ T2675] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 70.163966][ T2675] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.172359][ T7] usb 2-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 0 [ 70.182331][ T7] usb 2-1: config 8 interface 0 has no altsetting 0 [ 70.189211][ T2675] usb 1-1: Product: syz [ 70.193379][ T2675] usb 1-1: Manufacturer: syz [ 70.198077][ T2675] usb 1-1: SerialNumber: syz [ 70.204256][ T2678] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 70.213295][ T2678] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.221517][ T2677] usb 7-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 70.230804][ T2677] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.239076][ T2678] usb 3-1: Product: syz [ 70.243230][ T2678] usb 3-1: Manufacturer: syz [ 70.247844][ T2677] usb 7-1: Product: syz [ 70.251977][ T2677] usb 7-1: Manufacturer: syz [ 70.256660][ T2678] usb 3-1: SerialNumber: syz [ 70.261494][ T2677] usb 7-1: SerialNumber: syz [ 70.294484][ T2596] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 70.303966][ T2596] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.312010][ T2596] usb 4-1: Product: syz [ 70.316267][ T2596] usb 4-1: Manufacturer: syz [ 70.320835][ T2596] usb 4-1: SerialNumber: syz [ 70.354193][ T7] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 70.363667][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.371959][ T7] usb 2-1: Product: syz [ 70.376328][ T7] usb 2-1: Manufacturer: syz [ 70.381083][ T7] usb 2-1: SerialNumber: syz [ 70.514955][ T2675] usb 1-1: selecting invalid altsetting 0 [ 70.531378][ T2675] snd-usb-audio: probe of 1-1:8.0 failed with error -12 [ 70.539439][ T4311] udevd[4311]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 70.556730][ T2675] usb 1-1: USB disconnect, device number 3 [ 70.594979][ T2678] usb 3-1: selecting invalid altsetting 0 [ 70.608695][ T2677] usb 7-1: selecting invalid altsetting 0 [ 70.615463][ T2678] snd-usb-audio: probe of 3-1:8.0 failed with error -12 [ 70.625367][ T4314] udevd[4314]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 70.625742][ T2678] usb 3-1: USB disconnect, device number 3 [ 70.670881][ T2677] snd-usb-audio: probe of 7-1:8.0 failed with error -12 [ 70.685163][ T2596] usb 4-1: selecting invalid altsetting 0 [ 70.686447][ T2677] usb 7-1: USB disconnect, device number 3 [ 70.694314][ T4314] udevd[4314]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 70.739960][ T2596] snd-usb-audio: probe of 4-1:8.0 failed with error -12 [ 70.740199][ T7] usb 2-1: selecting invalid altsetting 0 [ 70.748322][ T2596] usb 4-1: USB disconnect, device number 3 [ 70.756121][ T4314] udevd[4314]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 70.796986][ T7] snd-usb-audio: probe of 2-1:8.0 failed with error -12 [ 70.805515][ T7] usb 2-1: USB disconnect, device number 3 [ 70.807462][ T4314] udevd[4314]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 70.924159][ T2675] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 71.034121][ T2678] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 71.044208][ T2677] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 71.104324][ T2596] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 71.164132][ T2675] usb 1-1: Using ep0 maxpacket: 8 [ 71.174309][ T7] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 71.274145][ T2678] usb 3-1: Using ep0 maxpacket: 8 [ 71.284335][ T2677] usb 7-1: Using ep0 maxpacket: 8 [ 71.324319][ T2675] usb 1-1: unable to get BOS descriptor or descriptor too short [ 71.354127][ T2596] usb 4-1: Using ep0 maxpacket: 8 [ 71.404330][ T2675] usb 1-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid wMaxPacketSize 0 [ 71.414497][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 71.419598][ T2675] usb 1-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 0 [ 71.429432][ T2675] usb 1-1: config 8 interface 0 has no altsetting 0 [ 71.436138][ T2678] usb 3-1: unable to get BOS descriptor or descriptor too short [ 71.444308][ T2677] usb 7-1: unable to get BOS descriptor or descriptor too short [ 71.514304][ T2678] usb 3-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid wMaxPacketSize 0 [ 71.524403][ T2677] usb 7-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid wMaxPacketSize 0 [ 71.534561][ T2678] usb 3-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 0 [ 71.544758][ T2677] usb 7-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 0 [ 71.555084][ T2678] usb 3-1: config 8 interface 0 has no altsetting 0 [ 71.561796][ T2677] usb 7-1: config 8 interface 0 has no altsetting 0 [ 71.564129][ T2596] usb 4-1: unable to get BOS descriptor or descriptor too short [ 71.574429][ T7] usb 2-1: unable to get BOS descriptor or descriptor too short [ 71.594239][ T2675] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 71.603428][ T2675] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.612370][ T2675] usb 1-1: Product: syz [ 71.616683][ T2675] usb 1-1: Manufacturer: syz [ 71.621250][ T2675] usb 1-1: SerialNumber: syz [ 71.664291][ T7] usb 2-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid wMaxPacketSize 0 [ 71.664317][ T2596] usb 4-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid wMaxPacketSize 0 [ 71.674537][ T7] usb 2-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 0 [ 71.683905][ T2596] usb 4-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 0 [ 71.694405][ T7] usb 2-1: config 8 interface 0 has no altsetting 0 [ 71.703459][ T2596] usb 4-1: config 8 interface 0 has no altsetting 0 [ 71.734669][ T2678] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 71.743935][ T2677] usb 7-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 71.753101][ T2677] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.761132][ T2678] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.769179][ T2677] usb 7-1: Product: syz [ 71.773333][ T2677] usb 7-1: Manufacturer: syz [ 71.778058][ T2678] usb 3-1: Product: syz [ 71.782289][ T2678] usb 3-1: Manufacturer: syz [ 71.787073][ T2677] usb 7-1: SerialNumber: syz [ 71.792024][ T2678] usb 3-1: SerialNumber: syz [ 71.864210][ T7] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 71.873448][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.881501][ T7] usb 2-1: Product: syz [ 71.885807][ T7] usb 2-1: Manufacturer: syz [ 71.890704][ T7] usb 2-1: SerialNumber: syz [ 71.904839][ T2596] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 71.913994][ T2596] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.922349][ T2596] usb 4-1: Product: syz [ 71.926913][ T2596] usb 4-1: Manufacturer: syz [ 71.931494][ T2596] usb 4-1: SerialNumber: syz [ 71.965068][ T2675] usb 1-1: selecting invalid altsetting 0 [ 71.978581][ T2675] snd-usb-audio: probe of 1-1:8.0 failed with error -12 [ 71.986950][ T4314] udevd[4314]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 72.003088][ T2675] usb 1-1: USB disconnect, device number 4 [ 72.125066][ T2677] usb 7-1: selecting invalid altsetting 0 [ 72.178723][ T2677] ------------[ cut here ]------------ [ 72.185242][ T2677] ODEBUG: free active (active state 0) object type: timer_list hint: snd_usbmidi_error_timer+0x0/0x270 [ 72.196685][ T2677] WARNING: CPU: 0 PID: 2677 at lib/debugobjects.c:518 debug_print_object+0x16e/0x260 [ 72.206878][ T2677] Modules linked in: [ 72.210825][ T2677] CPU: 0 PID: 2677 Comm: kworker/0:8 Not tainted syzkaller #0 [ 72.218741][ T2677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 72.230020][ T2677] Workqueue: usb_hub_wq hub_event [ 72.235120][ T2677] RIP: 0010:debug_print_object+0x16e/0x260 [ 72.240911][ T2677] Code: dd a0 cc 1c 86 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 d2 00 00 00 48 8b 14 dd a0 cc 1c 86 48 c7 c7 80 c0 1c 86 e8 9d 5a dc 02 <0f> 0b 83 05 85 fb 6d 05 01 48 83 c4 20 5b 5d 41 5c 41 5d c3 c3 48 [ 72.260632][ T2677] RSP: 0018:ffffc9000254ed08 EFLAGS: 00010286 [ 72.266994][ T2677] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 72.274279][ C1] ================================================================== [ 72.274978][ T2677] RDX: 1ffff920004a9d2f RSI: 0000000000000008 RDI: fffff520004a9d93 [ 72.283151][ C1] BUG: KASAN: use-after-free in snd_usbmidi_error_timer+0x231/0x270 [ 72.291150][ T2677] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffc9000254e97f [ 72.299064][ C1] Read of size 1 at addr ffff888018054143 by task swapper/1/0 [ 72.299077][ C1] [ 72.299082][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 72.299088][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 72.299093][ C1] Call Trace: [ 72.299101][ C1] [ 72.299105][ C1] dump_stack_lvl+0x41/0x5e [ 72.299117][ C1] print_address_description.constprop.0.cold+0x6c/0x309 [ 72.299128][ C1] ? snd_usbmidi_error_timer+0x231/0x270 [ 72.299136][ C1] ? snd_usbmidi_error_timer+0x231/0x270 [ 72.299141][ C1] kasan_report.cold+0x83/0xdf [ 72.299147][ C1] ? snd_usbmidi_error_timer+0x231/0x270 [ 72.299152][ C1] snd_usbmidi_error_timer+0x231/0x270 [ 72.299157][ C1] ? call_timer_fn+0xcd/0x400 [ 72.299168][ C1] ? snd_usbmidi_out_work+0x10/0x10 [ 72.299173][ C1] call_timer_fn+0x163/0x400 [ 72.299178][ C1] ? timer_fixup_init+0x30/0x30 [ 72.299183][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 72.299192][ C1] ? __next_timer_interrupt+0xd0/0x1f0 [ 72.299198][ C1] ? snd_usbmidi_out_work+0x10/0x10 [ 72.299204][ C1] __run_timers.part.0+0x530/0x890 [ 72.299210][ C1] ? call_timer_fn+0x400/0x400 [ 72.299215][ C1] ? ktime_get+0xfb/0x240 [ 72.299220][ C1] ? lapic_next_event+0x4d/0x80 [ 72.299230][ C1] ? clockevents_program_event+0x1be/0x270 [ 72.299237][ C1] run_timer_softirq+0x65/0xf0 [ 72.299243][ C1] handle_softirqs+0x14f/0x590 [ 72.299249][ C1] irq_exit_rcu+0xd0/0x110 [ 72.299253][ C1] sysvec_apic_timer_interrupt+0x6a/0x90 [ 72.299262][ C1] [ 72.299264][ C1] [ 72.299267][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 72.299277][ C1] RIP: 0010:default_idle+0xb/0x10 [ 72.299284][ C1] Code: 54 49 89 f4 55 48 89 fd 2e 2e 2e 31 c0 4c 89 e2 48 89 ef 5d 41 5c 31 f6 e9 a2 c4 3b fd cc cc 66 90 0f 00 2d f7 85 4e 00 fb f4 0f 1f 40 00 41 54 be 08 00 00 00 53 65 48 8b 1c 25 00 6f 02 00 [ 72.299289][ C1] RSP: 0018:ffffc90000d57df8 EFLAGS: 00000246 [ 72.299297][ C1] RAX: 00000000000085ca RBX: ffff88813ff2d700 RCX: ffffffff85913c49 [ 72.299301][ C1] RDX: ffff8880ba33a808 RSI: 0000000000000004 RDI: 00000000000085ca [ 72.299304][ C1] RBP: ffffed1027fe5ae0 R08: 0000000000000001 R09: ffff8880ba33a80b [ 72.299307][ C1] R10: ffffed1017467501 R11: ffffffff8700f1c8 R12: 0000000000000001 [ 72.299311][ C1] R13: 0000000000000001 R14: ffffffff87fd0750 R15: 0000000000000000 [ 72.299314][ C1] ? rcu_eqs_enter.constprop.0+0x99/0xd0 [ 72.299321][ C1] ? rcu_dynticks_eqs_enter+0xa/0x20 [ 72.299328][ C1] default_idle_call+0x65/0x90 [ 72.299334][ C1] do_idle+0x3e6/0x560 [ 72.299342][ C1] ? arch_cpu_idle_exit+0x30/0x30 [ 72.299347][ C1] cpu_startup_entry+0x14/0x20 [ 72.299352][ C1] start_secondary+0x21a/0x2d0 [ 72.307586][ T2677] R10: fffff520004a9d2f R11: 0000000000000001 R12: ffffffff85e8d7a0 [ 72.314913][ C1] ? set_cpu_sibling_map+0x1980/0x1980 [ 72.314931][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 72.314941][ C1] [ 72.314944][ C1] [ 72.314947][ C1] Allocated by task 2677: [ 72.314961][ C1] kasan_save_stack+0x1b/0x40 [ 72.317275][ T2677] R13: ffffffff812e3030 R14: dead000000000100 R15: ffff888072450040 [ 72.324612][ C1] __kasan_kmalloc+0x7c/0x90 [ 72.324635][ C1] snd_usbmidi_in_endpoint_create+0x83/0x9e0 [ 72.324643][ C1] __snd_usbmidi_create+0xaad/0x16d0 [ 72.324648][ C1] create_composite_quirk+0x1da/0x450 [ 72.324652][ C1] usb_audio_probe+0x4ce/0x2760 [ 72.324660][ C1] usb_probe_interface+0x274/0x6a0 [ 72.324666][ C1] really_probe+0x1c2/0xb60 [ 72.324673][ C1] __driver_probe_device+0x27f/0x3e0 [ 72.324677][ C1] driver_probe_device+0x44/0x110 [ 72.324681][ C1] __device_attach_driver+0x14a/0x270 [ 72.324686][ C1] bus_for_each_drv+0x11e/0x1a0 [ 72.324689][ C1] __device_attach+0x19e/0x440 [ 72.324693][ C1] bus_probe_device+0x19d/0x250 [ 72.334931][ T2677] FS: 0000000000000000(0000) GS:ffff8880ba200000(0000) knlGS:0000000000000000 [ 72.338088][ C1] device_add+0x9bb/0x1b30 [ 72.340913][ T2677] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.345465][ C1] usb_set_configuration+0x9f4/0x1630 [ 72.345473][ C1] usb_generic_driver_probe+0x74/0xa0 [ 72.345481][ C1] usb_probe_device+0x95/0x240 [ 72.345484][ C1] really_probe+0x1c2/0xb60 [ 72.345489][ C1] __driver_probe_device+0x27f/0x3e0 [ 72.345494][ C1] driver_probe_device+0x44/0x110 [ 72.352482][ T2677] CR2: 00007fb0667772e0 CR3: 000000007127e000 CR4: 00000000003506f0 [ 72.358090][ C1] __device_attach_driver+0x14a/0x270 [ 72.358099][ C1] bus_for_each_drv+0x11e/0x1a0 [ 72.358102][ C1] __device_attach+0x19e/0x440 [ 72.358106][ C1] bus_probe_device+0x19d/0x250 [ 72.358109][ C1] device_add+0x9bb/0x1b30 [ 72.358117][ C1] usb_new_device.cold+0x59c/0xdc6 [ 72.358125][ C1] hub_event+0x1a2b/0x3890 [ 72.358132][ C1] process_one_work+0x85b/0x1350 [ 72.363743][ T2677] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 72.368474][ C1] worker_thread+0x708/0xf40 [ 72.368480][ C1] kthread+0x347/0x420 [ 72.368486][ C1] ret_from_fork+0x1f/0x30 [ 72.368495][ C1] [ 72.368498][ C1] Freed by task 2677: [ 72.368503][ C1] kasan_save_stack+0x1b/0x40 [ 72.374173][ T2675] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 72.379519][ C1] kasan_set_track+0x1c/0x30 [ 72.384246][ T2677] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 72.389775][ C1] kasan_set_free_info+0x20/0x30 [ 72.394447][ T2677] Call Trace: [ 72.399234][ C1] __kasan_slab_free+0xe0/0x110 [ 72.404082][ T2677] [ 72.409474][ C1] kfree+0xd9/0x510 [ 72.414970][ T2677] ? do_raw_spin_unlock+0x171/0x230 [ 72.419807][ C1] snd_usbmidi_rawmidi_free+0xa0/0x150 [ 72.424658][ T2677] debug_check_no_obj_freed+0x3f4/0x530 [ 72.428929][ C1] snd_rawmidi_free.part.0+0x32d/0x500 [ 72.433745][ T2677] ? debug_object_assert_init+0x300/0x300 [ 72.439511][ C1] snd_rawmidi_dev_free+0x2d/0x40 [ 72.439517][ C1] __snd_device_free+0x16c/0x2a0 [ 72.439523][ C1] snd_device_free_all+0xb9/0x1c0 [ 72.439527][ C1] release_card_device+0x61/0x1b0 [ 72.439534][ C1] device_release+0x93/0x200 [ 72.439541][ C1] kobject_put+0x139/0x410 [ 72.439546][ C1] snd_card_free+0x137/0x160 [ 72.439551][ C1] usb_audio_probe+0x18ea/0x2760 [ 72.439559][ C1] usb_probe_interface+0x274/0x6a0 [ 72.439565][ C1] really_probe+0x1c2/0xb60 [ 72.439571][ C1] __driver_probe_device+0x27f/0x3e0 [ 72.439575][ C1] driver_probe_device+0x44/0x110 [ 72.439580][ C1] __device_attach_driver+0x14a/0x270 [ 72.439585][ C1] bus_for_each_drv+0x11e/0x1a0 [ 72.439589][ C1] __device_attach+0x19e/0x440 [ 72.439593][ C1] bus_probe_device+0x19d/0x250 [ 72.439597][ C1] device_add+0x9bb/0x1b30 [ 72.439603][ C1] usb_set_configuration+0x9f4/0x1630 [ 72.439608][ C1] usb_generic_driver_probe+0x74/0xa0 [ 72.439615][ C1] usb_probe_device+0x95/0x240 [ 72.439619][ C1] really_probe+0x1c2/0xb60 [ 72.444617][ T2677] ? debug_object_assert_init+0x300/0x300 [ 72.449094][ C1] __driver_probe_device+0x27f/0x3e0 [ 72.453478][ T2677] ? kasan_set_track+0x1c/0x30 [ 72.459076][ C1] driver_probe_device+0x44/0x110 [ 72.459081][ C1] __device_attach_driver+0x14a/0x270 [ 72.459086][ C1] bus_for_each_drv+0x11e/0x1a0 [ 72.459090][ C1] __device_attach+0x19e/0x440 [ 72.459094][ C1] bus_probe_device+0x19d/0x250 [ 72.459098][ C1] device_add+0x9bb/0x1b30 [ 72.459106][ C1] usb_new_device.cold+0x59c/0xdc6 [ 72.459112][ C1] hub_event+0x1a2b/0x3890 [ 72.459120][ C1] process_one_work+0x85b/0x1350 [ 72.459127][ C1] worker_thread+0x708/0xf40 [ 72.459131][ C1] kthread+0x347/0x420 [ 72.459137][ C1] ret_from_fork+0x1f/0x30 [ 72.459146][ C1] [ 72.459148][ C1] The buggy address belongs to the object at ffff888018054000 [ 72.459148][ C1] which belongs to the cache kmalloc-512 of size 512 [ 72.459154][ C1] The buggy address is located 323 bytes inside of [ 72.459154][ C1] 512-byte region [ffff888018054000, ffff888018054200) [ 72.459160][ C1] The buggy address belongs to the page: [ 72.459173][ C1] page:ffffea0000601500 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18054 [ 72.459187][ C1] head:ffffea0000601500 order:2 compound_mapcount:0 compound_pincount:0 [ 72.459192][ C1] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 72.459209][ C1] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff88800d441c80 [ 72.459217][ C1] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 72.459220][ C1] page dumped because: kasan: bad access detected [ 72.459228][ C1] page_owner tracks the page as allocated [ 72.459231][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1455, ts 5704335416, free_ts 5696753371 [ 72.459240][ C1] get_page_from_freelist+0x1223/0x2e90 [ 72.459247][ C1] __alloc_pages+0x1b2/0x470 [ 72.459251][ C1] allocate_slab+0x2ee/0x430 [ 72.459255][ C1] ___slab_alloc+0xb19/0x11a0 [ 72.459259][ C1] kmem_cache_alloc_trace+0x33f/0x390 [ 72.459264][ C1] alloc_bprm+0x4c/0x850 [ 72.459270][ C1] kernel_execve+0x38/0x400 [ 72.459274][ C1] call_usermodehelper_exec_async+0x2c1/0x500 [ 72.459281][ C1] ret_from_fork+0x1f/0x30 [ 72.459285][ C1] page last free stack trace: [ 72.459287][ C1] free_pcp_prepare+0x29d/0x750 [ 72.459292][ C1] free_unref_page+0x19/0x5a0 [ 72.459297][ C1] stack_depot_save+0x160/0x440 [ 72.459304][ C1] kasan_save_stack+0x32/0x40 [ 72.459310][ C1] __kasan_slab_alloc+0x61/0x80 [ 72.459316][ C1] kmem_cache_alloc+0x22c/0x390 [ 72.459320][ C1] __kernfs_new_node+0xc7/0x750 [ 72.462234][ T2677] ? snd_usbmidi_in_endpoint_delete+0xcf/0x180 [ 72.465137][ C1] kernfs_new_node+0x123/0x240 [ 72.465144][ C1] kernfs_create_link+0xad/0x220 [ 72.465149][ C1] sysfs_do_create_link_sd+0x7c/0xf0 [ 72.465154][ C1] device_add+0x572/0x1b30 [ 72.465161][ C1] cdev_device_add+0xee/0x220 [ 72.465166][ C1] evdev_connect+0x33e/0x470 [ 72.465172][ C1] input_attach_handler+0xfb/0x150 [ 72.471117][ T2677] ? kasan_set_track+0x1c/0x30 [ 72.476103][ C1] input_register_device.cold+0xb1/0x2a0 [ 72.476114][ C1] atkbd_connect+0x66c/0x8e0 [ 72.476121][ C1] [ 72.476123][ C1] Memory state around the buggy address: [ 72.476128][ C1] ffff888018054000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 72.476133][ C1] ffff888018054080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 72.476136][ C1] >ffff888018054100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 72.476138][ C1] ^ [ 72.476142][ C1] ffff888018054180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 72.495841][ T2677] ? snd_rawmidi_free.part.0+0x32d/0x500 [ 72.501925][ C1] ffff888018054200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 72.509925][ T2677] kfree+0x113/0x510 [ 72.517843][ C1] ================================================================== [ 72.517848][ C1] Disabling lock debugging due to kernel taint [ 72.517931][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 72.525997][ T2677] ? mutex_is_locked+0xe/0x40 [ 72.534033][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B syzkaller #0 [ 72.534040][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 72.534045][ C1] Call Trace: [ 72.534049][ C1] [ 72.534052][ C1] dump_stack_lvl+0x41/0x5e [ 72.534060][ C1] panic+0x1e3/0x461 [ 72.534066][ C1] ? __warn_printk+0xee/0xee [ 72.534070][ C1] ? snd_usbmidi_error_timer+0x231/0x270 [ 72.534078][ C1] ? snd_usbmidi_error_timer+0x231/0x270 [ 72.534083][ C1] ? do_raw_spin_unlock+0x50/0x230 [ 72.534089][ C1] ? snd_usbmidi_error_timer+0x231/0x270 [ 72.534094][ C1] ? snd_usbmidi_error_timer+0x231/0x270 [ 72.534098][ C1] check_panic_on_warn.cold+0x14/0x2b [ 72.534102][ C1] end_report.cold+0x41/0x5c [ 72.534110][ C1] kasan_report.cold+0x71/0xdf [ 72.534116][ C1] ? snd_usbmidi_error_timer+0x231/0x270 [ 72.534122][ C1] snd_usbmidi_error_timer+0x231/0x270 [ 72.534128][ C1] ? call_timer_fn+0xcd/0x400 [ 72.534137][ C1] ? snd_usbmidi_out_work+0x10/0x10 [ 72.534142][ C1] call_timer_fn+0x163/0x400 [ 72.534148][ C1] ? timer_fixup_init+0x30/0x30 [ 72.534153][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 72.534159][ C1] ? __next_timer_interrupt+0xd0/0x1f0 [ 72.534165][ C1] ? snd_usbmidi_out_work+0x10/0x10 [ 72.534170][ C1] __run_timers.part.0+0x530/0x890 [ 72.534174][ C1] ? call_timer_fn+0x400/0x400 [ 72.534179][ C1] ? ktime_get+0xfb/0x240 [ 72.534183][ C1] ? lapic_next_event+0x4d/0x80 [ 72.534193][ C1] ? clockevents_program_event+0x1be/0x270 [ 72.534200][ C1] run_timer_softirq+0x65/0xf0 [ 72.534204][ C1] handle_softirqs+0x14f/0x590 [ 72.534209][ C1] irq_exit_rcu+0xd0/0x110 [ 72.534214][ C1] sysvec_apic_timer_interrupt+0x6a/0x90 [ 72.534224][ C1] [ 72.534226][ C1] [ 72.534228][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 72.534239][ C1] RIP: 0010:default_idle+0xb/0x10 [ 72.534247][ C1] Code: 54 49 89 f4 55 48 89 fd 2e 2e 2e 31 c0 4c 89 e2 48 89 ef 5d 41 5c 31 f6 e9 a2 c4 3b fd cc cc 66 90 0f 00 2d f7 85 4e 00 fb f4 0f 1f 40 00 41 54 be 08 00 00 00 53 65 48 8b 1c 25 00 6f 02 00 [ 72.534253][ C1] RSP: 0018:ffffc90000d57df8 EFLAGS: 00000246 [ 72.534261][ C1] RAX: 00000000000085ca RBX: ffff88813ff2d700 RCX: ffffffff85913c49 [ 72.534265][ C1] RDX: ffff8880ba33a808 RSI: 0000000000000004 RDI: 00000000000085ca [ 72.534268][ C1] RBP: ffffed1027fe5ae0 R08: 0000000000000001 R09: ffff8880ba33a80b [ 72.534272][ C1] R10: ffffed1017467501 R11: ffffffff8700f1c8 R12: 0000000000000001 [ 72.534276][ C1] R13: 0000000000000001 R14: ffffffff87fd0750 R15: 0000000000000000 [ 72.534280][ C1] ? rcu_eqs_enter.constprop.0+0x99/0xd0 [ 72.534286][ C1] ? rcu_dynticks_eqs_enter+0xa/0x20 [ 72.534290][ C1] default_idle_call+0x65/0x90 [ 72.534295][ C1] do_idle+0x3e6/0x560 [ 72.534301][ C1] ? arch_cpu_idle_exit+0x30/0x30 [ 72.534305][ C1] cpu_startup_entry+0x14/0x20 [ 72.534309][ C1] start_secondary+0x21a/0x2d0 [ 72.534314][ C1] ? set_cpu_sibling_map+0x1980/0x1980 [ 72.534319][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 72.534327][ C1] [ 72.534615][ C1] Kernel Offset: disabled [ 73.709639][ C1] Rebooting in 86400 seconds..