program: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/first_group\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='2', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/num_groups\x00', 0x1, 0x0) write(r2, &(0x7f00000006c0)='6', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/midi1_first_group\x00', 0x1, 0x0) write(r3, &(0x7f0000000780)='2', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/midi1_num_groups\x00', 0x1, 0x0) write(r4, &(0x7f0000000840)='6', 0x1) symlinkat(&(0x7f0000000880)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000008c0)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000940)='dummy_udc.0', 0xb) (fail_nth: 45) [ 73.915340][ T5320] FAULT_INJECTION: forcing a failure. [ 73.915340][ T5320] name failslab, interval 1, probability 0, space 0, times 1 [ 73.921553][ T5320] CPU: 0 UID: 0 PID: 5320 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 73.921571][ T5320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.921579][ T5320] Call Trace: [ 73.921584][ T5320] [ 73.921589][ T5320] dump_stack_lvl+0xe8/0x150 [ 73.921654][ T5320] should_fail_ex+0x40c/0x560 [ 73.921704][ T5320] should_failslab+0xa8/0x100 [ 73.921722][ T5320] __kmalloc_cache_noprof+0xa8/0x660 [ 73.921763][ T5320] ? snd_device_alloc+0x73/0x140 [ 73.921806][ T5320] ? snd_device_alloc+0x73/0x140 [ 73.921824][ T5320] snd_device_alloc+0x73/0x140 [ 73.921839][ T5320] snd_rawmidi_init+0x20d/0x840 [ 73.921863][ T5320] snd_rawmidi_new+0xb5/0x140 [ 73.921881][ T5320] snd_ump_attach_legacy_rawmidi+0x44e/0x8c0 [ 73.921905][ T5320] ? __pfx_snd_ump_attach_legacy_rawmidi+0x10/0x10 [ 73.921947][ T5320] f_midi2_bind+0x11c5/0x2c40 [ 73.921962][ T5320] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 73.921990][ T5320] ? __pfx_f_midi2_bind+0x10/0x10 [ 73.922001][ T5320] ? driver_register+0x23a/0x320 [ 73.922014][ T5320] ? gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 73.922027][ T5320] ? configfs_write_iter+0x337/0x430 [ 73.922040][ T5320] ? vfs_write+0x612/0xba0 [ 73.922055][ T5320] ? do_syscall_64+0x174/0x580 [ 73.922066][ T5320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.922110][ T5320] ? __kmalloc_noprof+0x396/0x720 [ 73.922125][ T5320] usb_add_function+0x2e1/0x9f0 [ 73.922141][ T5320] ? check_remote_wakeup_config+0x58/0x1c0 [ 73.922159][ T5320] configfs_composite_bind+0xde0/0x1410 [ 73.922183][ T5320] ? __pfx_configfs_composite_bind+0x10/0x10 [ 73.922199][ T5320] gadget_bind_driver+0x2ca/0x9e0 [ 73.922220][ T5320] ? __pfx_gadget_bind_driver+0x10/0x10 [ 73.922231][ T5320] really_probe+0x254/0xae0 [ 73.922247][ T5320] __driver_probe_device+0x1e8/0x360 [ 73.922261][ T5320] driver_probe_device+0x4f/0x240 [ 73.922276][ T5320] __driver_attach+0x339/0x600 [ 73.922289][ T5320] bus_for_each_dev+0x23b/0x2c0 [ 73.922304][ T5320] ? __pfx___driver_attach+0x10/0x10 [ 73.922316][ T5320] ? __pfx_bus_for_each_dev+0x10/0x10 [ 73.922334][ T5320] ? do_raw_spin_unlock+0x4d/0x210 [ 73.922350][ T5320] bus_add_driver+0x345/0x670 [ 73.922369][ T5320] driver_register+0x23a/0x320 [ 73.922384][ T5320] usb_gadget_register_driver_owner+0xf9/0x270 [ 73.922399][ T5320] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 73.922411][ T5320] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10 [ 73.922424][ T5320] configfs_write_iter+0x337/0x430 [ 73.922442][ T5320] vfs_write+0x612/0xba0 [ 73.922463][ T5320] ? __pfx_vfs_write+0x10/0x10 [ 73.922494][ T5320] ? __fget_files+0x2a/0x420 [ 73.922514][ T5320] ksys_write+0x150/0x270 [ 73.922531][ T5320] ? __pfx_ksys_write+0x10/0x10 [ 73.922553][ T5320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.922566][ T5320] do_syscall_64+0x174/0x580 [ 73.922576][ T5320] ? trace_irq_disable+0x3b/0x140 [ 73.922590][ T5320] ? clear_bhb_loop+0x40/0x90 [ 73.922605][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.922616][ T5320] RIP: 0033:0x7ff3a8b9de99 [ 73.922628][ T5320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.922638][ T5320] RSP: 002b:00007ff3a9a0efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 73.922651][ T5320] RAX: ffffffffffffffda RBX: 00007ff3a8e25fa0 RCX: 00007ff3a8b9de99 [ 73.922659][ T5320] RDX: 000000000000000b RSI: 0000200000000940 RDI: 0000000000000008 [ 73.922666][ T5320] RBP: 00007ff3a9a0f050 R08: 0000000000000000 R09: 0000000000000000 [ 73.922672][ T5320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 73.922678][ T5320] R13: 00007ff3a8e26038 R14: 00007ff3a8e25fa0 R15: 00007ffcbb14fc18 [ 73.922699][ T5320] [ 74.087502][ T5320] ================================================================== [ 74.090847][ T5320] BUG: KASAN: double-free in snd_rawmidi_free+0x3cb/0x420 [ 74.093822][ T5320] Free of addr ffff88803c8f6000 by task syz.0.0/5320 [ 74.096518][ T5320] [ 74.097564][ T5320] CPU: 0 UID: 0 PID: 5320 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 74.097579][ T5320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.097586][ T5320] Call Trace: [ 74.097592][ T5320] [ 74.097598][ T5320] dump_stack_lvl+0xe8/0x150 [ 74.097618][ T5320] print_address_description+0x55/0x1e0 [ 74.097635][ T5320] print_report+0x58/0x70 [ 74.097648][ T5320] ? snd_rawmidi_free+0x3cb/0x420 [ 74.097662][ T5320] kasan_report_invalid_free+0xea/0x110 [ 74.097677][ T5320] ? snd_rawmidi_free+0x3cb/0x420 [ 74.097691][ T5320] ? snd_rawmidi_free+0x3cb/0x420 [ 74.097704][ T5320] __kasan_slab_pre_free+0x104/0x120 [ 74.097717][ T5320] kfree+0x173/0x640 [ 74.097727][ T5320] ? snd_rawmidi_free+0x3cb/0x420 [ 74.097768][ T5320] ? __pfx_snd_ump_endpoint_free+0x10/0x10 [ 74.097782][ T5320] snd_rawmidi_free+0x3cb/0x420 [ 74.097797][ T5320] snd_rawmidi_dev_free+0x38/0x50 [ 74.097810][ T5320] snd_device_free_all+0x2c7/0x7a0 [ 74.097824][ T5320] ? __pfx_snd_mixer_oss_notify_handler+0x10/0x10 [ 74.097839][ T5320] release_card_device+0x75/0x1b0 [ 74.097851][ T5320] ? __pfx_release_card_device+0x10/0x10 [ 74.097864][ T5320] device_release+0xc4/0x1f0 [ 74.097877][ T5320] kobject_put+0x222/0x550 [ 74.097892][ T5320] f_midi2_bind+0x1441/0x2c40 [ 74.097906][ T5320] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 74.097924][ T5320] ? __pfx_f_midi2_bind+0x10/0x10 [ 74.097936][ T5320] ? driver_register+0x23a/0x320 [ 74.097947][ T5320] ? gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 74.097958][ T5320] ? configfs_write_iter+0x337/0x430 [ 74.097971][ T5320] ? vfs_write+0x612/0xba0 [ 74.097984][ T5320] ? do_syscall_64+0x174/0x580 [ 74.097994][ T5320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.098023][ T5320] ? __kmalloc_noprof+0x396/0x720 [ 74.098034][ T5320] usb_add_function+0x2e1/0x9f0 [ 74.098047][ T5320] ? check_remote_wakeup_config+0x58/0x1c0 [ 74.098061][ T5320] configfs_composite_bind+0xde0/0x1410 [ 74.098077][ T5320] ? __pfx_configfs_composite_bind+0x10/0x10 [ 74.098090][ T5320] gadget_bind_driver+0x2ca/0x9e0 [ 74.098104][ T5320] ? __pfx_gadget_bind_driver+0x10/0x10 [ 74.098115][ T5320] really_probe+0x254/0xae0 [ 74.098128][ T5320] __driver_probe_device+0x1e8/0x360 [ 74.098139][ T5320] driver_probe_device+0x4f/0x240 [ 74.098151][ T5320] __driver_attach+0x339/0x600 [ 74.098162][ T5320] bus_for_each_dev+0x23b/0x2c0 [ 74.098176][ T5320] ? __pfx___driver_attach+0x10/0x10 [ 74.098186][ T5320] ? __pfx_bus_for_each_dev+0x10/0x10 [ 74.098201][ T5320] ? do_raw_spin_unlock+0x4d/0x210 [ 74.098215][ T5320] bus_add_driver+0x345/0x670 [ 74.098230][ T5320] driver_register+0x23a/0x320 [ 74.098243][ T5320] usb_gadget_register_driver_owner+0xf9/0x270 [ 74.098256][ T5320] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 74.098268][ T5320] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10 [ 74.098281][ T5320] configfs_write_iter+0x337/0x430 [ 74.098296][ T5320] vfs_write+0x612/0xba0 [ 74.098313][ T5320] ? __pfx_vfs_write+0x10/0x10 [ 74.098329][ T5320] ? __fget_files+0x2a/0x420 [ 74.098344][ T5320] ksys_write+0x150/0x270 [ 74.098360][ T5320] ? __pfx_ksys_write+0x10/0x10 [ 74.098375][ T5320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.098387][ T5320] do_syscall_64+0x174/0x580 [ 74.098398][ T5320] ? trace_irq_disable+0x3b/0x140 [ 74.098412][ T5320] ? clear_bhb_loop+0x40/0x90 [ 74.098424][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.098435][ T5320] RIP: 0033:0x7ff3a8b9de99 [ 74.098452][ T5320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.098461][ T5320] RSP: 002b:00007ff3a9a0efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 74.098474][ T5320] RAX: ffffffffffffffda RBX: 00007ff3a8e25fa0 RCX: 00007ff3a8b9de99 [ 74.098483][ T5320] RDX: 000000000000000b RSI: 0000200000000940 RDI: 0000000000000008 [ 74.098490][ T5320] RBP: 00007ff3a9a0f050 R08: 0000000000000000 R09: 0000000000000000 [ 74.098496][ T5320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 74.098503][ T5320] R13: 00007ff3a8e26038 R14: 00007ff3a8e25fa0 R15: 00007ffcbb14fc18 [ 74.098514][ T5320] [ 74.098518][ T5320] [ 74.266140][ T5320] Allocated by task 5320: [ 74.267969][ T5320] kasan_save_track+0x3e/0x80 [ 74.269947][ T5320] __kasan_kmalloc+0x93/0xb0 [ 74.271888][ T5320] __kmalloc_cache_noprof+0x32d/0x660 [ 74.274141][ T5320] snd_ump_attach_legacy_rawmidi+0xb3/0x8c0 [ 74.276579][ T5320] f_midi2_bind+0x11c5/0x2c40 [ 74.278556][ T5320] usb_add_function+0x2e1/0x9f0 [ 74.280612][ T5320] configfs_composite_bind+0xde0/0x1410 [ 74.282961][ T5320] gadget_bind_driver+0x2ca/0x9e0 [ 74.285060][ T5320] really_probe+0x254/0xae0 [ 74.286977][ T5320] __driver_probe_device+0x1e8/0x360 [ 74.289171][ T5320] driver_probe_device+0x4f/0x240 [ 74.291325][ T5320] __driver_attach+0x339/0x600 [ 74.293317][ T5320] bus_for_each_dev+0x23b/0x2c0 [ 74.295375][ T5320] bus_add_driver+0x345/0x670 [ 74.297335][ T5320] driver_register+0x23a/0x320 [ 74.299360][ T5320] usb_gadget_register_driver_owner+0xf9/0x270 [ 74.301951][ T5320] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 74.304253][ T5320] configfs_write_iter+0x337/0x430 [ 74.306407][ T5320] vfs_write+0x612/0xba0 [ 74.308202][ T5320] ksys_write+0x150/0x270 [ 74.309941][ T5320] do_syscall_64+0x174/0x580 [ 74.311879][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.314420][ T5320] [ 74.315436][ T5320] Freed by task 5320: [ 74.317097][ T5320] kasan_save_track+0x3e/0x80 [ 74.319067][ T5320] kasan_save_free_info+0x40/0x50 [ 74.321200][ T5320] __kasan_slab_free+0x5c/0x80 [ 74.323173][ T5320] kfree+0x1c5/0x640 [ 74.324722][ T5320] snd_ump_attach_legacy_rawmidi+0x4c3/0x8c0 [ 74.327211][ T5320] f_midi2_bind+0x11c5/0x2c40 [ 74.329123][ T5320] usb_add_function+0x2e1/0x9f0 [ 74.331153][ T5320] configfs_composite_bind+0xde0/0x1410 [ 74.333370][ T5320] gadget_bind_driver+0x2ca/0x9e0 [ 74.335481][ T5320] really_probe+0x254/0xae0 [ 74.337342][ T5320] __driver_probe_device+0x1e8/0x360 [ 74.339521][ T5320] driver_probe_device+0x4f/0x240 [ 74.341634][ T5320] __driver_attach+0x339/0x600 [ 74.343582][ T5320] bus_for_each_dev+0x23b/0x2c0 [ 74.345616][ T5320] bus_add_driver+0x345/0x670 [ 74.347586][ T5320] driver_register+0x23a/0x320 [ 74.349564][ T5320] usb_gadget_register_driver_owner+0xf9/0x270 [ 74.352077][ T5320] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 74.354398][ T5320] configfs_write_iter+0x337/0x430 [ 74.356457][ T5320] vfs_write+0x612/0xba0 [ 74.358208][ T5320] ksys_write+0x150/0x270 [ 74.359983][ T5320] do_syscall_64+0x174/0x580 [ 74.361913][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.364320][ T5320] [ 74.365364][ T5320] The buggy address belongs to the object at ffff88803c8f6000 [ 74.365364][ T5320] which belongs to the cache kmalloc-4k of size 4096 [ 74.371050][ T5320] The buggy address is located 0 bytes inside of [ 74.371050][ T5320] 4096-byte region [ffff88803c8f6000, ffff88803c8f7000) [ 74.376341][ T5320] [ 74.377343][ T5320] The buggy address belongs to the physical page: [ 74.379945][ T5320] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3c8f0 [ 74.383488][ T5320] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 74.386945][ T5320] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 74.390112][ T5320] page_type: f5(slab) [ 74.391800][ T5320] raw: 04fff00000000040 ffff88801b042140 dead000000000100 dead000000000122 [ 74.395297][ T5320] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 74.398852][ T5320] head: 04fff00000000040 ffff88801b042140 dead000000000100 dead000000000122 [ 74.402459][ T5320] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 74.405966][ T5320] head: 04fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 74.409562][ T5320] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 74.413296][ T5320] page dumped because: kasan: bad access detected [ 74.416028][ T5320] page_owner tracks the page as allocated [ 74.418448][ T5320] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4707, tgid 4707 (udevd), ts 39571949618, free_ts 39415476208 [ 74.426792][ T5320] post_alloc_hook+0x1f9/0x250 [ 74.428744][ T5320] get_page_from_freelist+0x21fa/0x2270 [ 74.430943][ T5320] __alloc_frozen_pages_noprof+0x18d/0x380 [ 74.433283][ T5320] allocate_slab+0x79/0x5e0 [ 74.435167][ T5320] refill_objects+0x2d5/0x350 [ 74.437066][ T5320] __pcs_replace_empty_main+0x2bf/0x6b0 [ 74.439310][ T5320] __kmalloc_noprof+0x485/0x720 [ 74.441321][ T5320] tomoyo_realpath_from_path+0xef/0x640 [ 74.443674][ T5320] tomoyo_path_perm+0x283/0x560 [ 74.445849][ T5320] security_inode_getattr+0x12b/0x310 [ 74.448173][ T5320] __x64_sys_newfstat+0x133/0x270 [ 74.450326][ T5320] do_syscall_64+0x174/0x580 [ 74.452317][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.454907][ T5320] page last free pid 4712 tgid 4712 stack trace: [ 74.457581][ T5320] __free_frozen_pages+0xc1e/0xd10 [ 74.459810][ T5320] __slab_free+0x274/0x2c0 [ 74.461758][ T5320] qlist_free_all+0x99/0x100 [ 74.463746][ T5320] kasan_quarantine_reduce+0x148/0x160 [ 74.466782][ T5320] __kasan_slab_alloc+0x22/0x80 [ 74.469026][ T5320] kmem_cache_alloc_noprof+0x2a0/0x5f0 [ 74.471401][ T5320] do_getname+0x2e/0x250 [ 74.473306][ T5320] do_readlinkat+0xc8/0x510 [ 74.475303][ T5320] __x64_sys_readlink+0x7f/0x90 [ 74.477358][ T5320] do_syscall_64+0x174/0x580 [ 74.479380][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.481933][ T5320] [ 74.483030][ T5320] Memory state around the buggy address: [ 74.485454][ T5320] ffff88803c8f5f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 74.488863][ T5320] ffff88803c8f5f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 74.492292][ T5320] >ffff88803c8f6000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 74.495728][ T5320] ^ [ 74.497477][ T5320] ffff88803c8f6080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 74.500863][ T5320] ffff88803c8f6100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 74.504312][ T5320] ================================================================== [ 74.510622][ T5320] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 74.513796][ T5320] CPU: 0 UID: 0 PID: 5320 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 74.517548][ T5320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.521980][ T5320] Call Trace: [ 74.523483][ T5320] [ 74.524727][ T5320] vpanic+0x56c/0xa60 [ 74.526475][ T5320] ? __pfx_vpanic+0x10/0x10 [ 74.528439][ T5320] panic+0xc5/0xd0 [ 74.530151][ T5320] ? __pfx_panic+0x10/0x10 [ 74.532149][ T5320] ? preempt_schedule_thunk+0x16/0x40 [ 74.534520][ T5320] ? preempt_schedule_thunk+0x16/0x40 [ 74.536755][ T5320] check_panic_on_warn+0x89/0xb0 [ 74.538830][ T5320] end_report+0x73/0x170 [ 74.540711][ T5320] ? snd_rawmidi_free+0x3cb/0x420 [ 74.542905][ T5320] kasan_report_invalid_free+0xfa/0x110 [ 74.545239][ T5320] ? snd_rawmidi_free+0x3cb/0x420 [ 74.547477][ T5320] ? snd_rawmidi_free+0x3cb/0x420 [ 74.549624][ T5320] __kasan_slab_pre_free+0x104/0x120 [ 74.551913][ T5320] kfree+0x173/0x640 [ 74.553642][ T5320] ? snd_rawmidi_free+0x3cb/0x420 [ 74.555746][ T5320] ? __pfx_snd_ump_endpoint_free+0x10/0x10 [ 74.558097][ T5320] snd_rawmidi_free+0x3cb/0x420 [ 74.560201][ T5320] snd_rawmidi_dev_free+0x38/0x50 [ 74.562296][ T5320] snd_device_free_all+0x2c7/0x7a0 [ 74.564386][ T5320] ? __pfx_snd_mixer_oss_notify_handler+0x10/0x10 [ 74.566978][ T5320] release_card_device+0x75/0x1b0 [ 74.569044][ T5320] ? __pfx_release_card_device+0x10/0x10 [ 74.571423][ T5320] device_release+0xc4/0x1f0 [ 74.573516][ T5320] kobject_put+0x222/0x550 [ 74.575462][ T5320] f_midi2_bind+0x1441/0x2c40 [ 74.577459][ T5320] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 74.579981][ T5320] ? __pfx_f_midi2_bind+0x10/0x10 [ 74.582163][ T5320] ? driver_register+0x23a/0x320 [ 74.584301][ T5320] ? gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 74.586779][ T5320] ? configfs_write_iter+0x337/0x430 [ 74.589043][ T5320] ? vfs_write+0x612/0xba0 [ 74.590926][ T5320] ? do_syscall_64+0x174/0x580 [ 74.592987][ T5320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.595638][ T5320] ? __kmalloc_noprof+0x396/0x720 [ 74.597713][ T5320] usb_add_function+0x2e1/0x9f0 [ 74.599618][ T5320] ? check_remote_wakeup_config+0x58/0x1c0 [ 74.602182][ T5320] configfs_composite_bind+0xde0/0x1410 [ 74.604479][ T5320] ? __pfx_configfs_composite_bind+0x10/0x10 [ 74.607027][ T5320] gadget_bind_driver+0x2ca/0x9e0 [ 74.609159][ T5320] ? __pfx_gadget_bind_driver+0x10/0x10 [ 74.611619][ T5320] really_probe+0x254/0xae0 [ 74.613540][ T5320] __driver_probe_device+0x1e8/0x360 [ 74.615802][ T5320] driver_probe_device+0x4f/0x240 [ 74.618031][ T5320] __driver_attach+0x339/0x600 [ 74.620102][ T5320] bus_for_each_dev+0x23b/0x2c0 [ 74.622267][ T5320] ? __pfx___driver_attach+0x10/0x10 [ 74.624566][ T5320] ? __pfx_bus_for_each_dev+0x10/0x10 [ 74.626880][ T5320] ? do_raw_spin_unlock+0x4d/0x210 [ 74.628991][ T5320] bus_add_driver+0x345/0x670 [ 74.630965][ T5320] driver_register+0x23a/0x320 [ 74.632978][ T5320] usb_gadget_register_driver_owner+0xf9/0x270 [ 74.635711][ T5320] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 74.638185][ T5320] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10 [ 74.640888][ T5320] configfs_write_iter+0x337/0x430 [ 74.643167][ T5320] vfs_write+0x612/0xba0 [ 74.645013][ T5320] ? __pfx_vfs_write+0x10/0x10 [ 74.647086][ T5320] ? __fget_files+0x2a/0x420 [ 74.649120][ T5320] ksys_write+0x150/0x270 [ 74.651030][ T5320] ? __pfx_ksys_write+0x10/0x10 [ 74.653137][ T5320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.655725][ T5320] do_syscall_64+0x174/0x580 [ 74.657743][ T5320] ? trace_irq_disable+0x3b/0x140 [ 74.659945][ T5320] ? clear_bhb_loop+0x40/0x90 [ 74.662079][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.664526][ T5320] RIP: 0033:0x7ff3a8b9de99 [ 74.666384][ T5320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.674139][ T5320] RSP: 002b:00007ff3a9a0efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 74.677487][ T5320] RAX: ffffffffffffffda RBX: 00007ff3a8e25fa0 RCX: 00007ff3a8b9de99 [ 74.680723][ T5320] RDX: 000000000000000b RSI: 0000200000000940 RDI: 0000000000000008 [ 74.684072][ T5320] RBP: 00007ff3a9a0f050 R08: 0000000000000000 R09: 0000000000000000 [ 74.687255][ T5320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 74.690473][ T5320] R13: 00007ff3a8e26038 R14: 00007ff3a8e25fa0 R15: 00007ffcbb14fc18 [ 74.693771][ T5320] [ 74.695502][ T5320] Kernel Offset: disabled [ 74.697365][ T5320] Rebooting in 86400 seconds..