program:
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1\x00', 0x1ff)
symlinkat(&(0x7f0000000880)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000008c0)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r0, &(0x7f0000000940)='dummy_udc.0', 0xb) (fail_nth: 46)
qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xb8000)
[ 86.407047][ T5289] Bluetooth: hci0: command tx timeout
[ 86.433441][ T5324] FAULT_INJECTION: forcing a failure.
[ 86.433441][ T5324] name failslab, interval 1, probability 0, space 0, times 1
[ 86.440291][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 86.440309][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 86.440316][ T5324] Call Trace:
[ 86.440320][ T5324]
[ 86.440325][ T5324] dump_stack_lvl+0xe8/0x150
[ 86.440389][ T5324] should_fail_ex+0x40c/0x560
[ 86.440441][ T5324] should_failslab+0xa8/0x100
[ 86.440456][ T5324] __kmalloc_cache_noprof+0xa8/0x660
[ 86.440470][ T5324] ? snd_device_alloc+0x73/0x140
[ 86.440511][ T5324] ? snd_device_alloc+0x73/0x140
[ 86.440526][ T5324] snd_device_alloc+0x73/0x140
[ 86.440547][ T5324] snd_rawmidi_init+0x20d/0x840
[ 86.440568][ T5324] snd_rawmidi_new+0xb5/0x140
[ 86.440583][ T5324] snd_ump_attach_legacy_rawmidi+0x44e/0x8c0
[ 86.440604][ T5324] ? __pfx_snd_ump_attach_legacy_rawmidi+0x10/0x10
[ 86.440626][ T5324] f_midi2_bind+0x11c5/0x2c40
[ 86.440638][ T5324] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 86.440665][ T5324] ? __pfx_f_midi2_bind+0x10/0x10
[ 86.440674][ T5324] ? driver_register+0x23a/0x320
[ 86.440686][ T5324] ? gadget_dev_desc_UDC_store+0x1c9/0x2f0
[ 86.440697][ T5324] ? configfs_write_iter+0x337/0x430
[ 86.440709][ T5324] ? vfs_write+0x612/0xba0
[ 86.440722][ T5324] ? do_syscall_64+0x174/0x580
[ 86.440732][ T5324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 86.440770][ T5324] ? __kmalloc_noprof+0x396/0x720
[ 86.440784][ T5324] usb_add_function+0x2e1/0x9f0
[ 86.440798][ T5324] ? check_remote_wakeup_config+0x58/0x1c0
[ 86.440814][ T5324] configfs_composite_bind+0xde0/0x1410
[ 86.440834][ T5324] ? __pfx_configfs_composite_bind+0x10/0x10
[ 86.440848][ T5324] gadget_bind_driver+0x2ca/0x9e0
[ 86.440866][ T5324] ? __pfx_gadget_bind_driver+0x10/0x10
[ 86.440877][ T5324] really_probe+0x254/0xae0
[ 86.440890][ T5324] __driver_probe_device+0x1e8/0x360
[ 86.440903][ T5324] driver_probe_device+0x4f/0x240
[ 86.440915][ T5324] __driver_attach+0x339/0x600
[ 86.440927][ T5324] bus_for_each_dev+0x23b/0x2c0
[ 86.440941][ T5324] ? __pfx___driver_attach+0x10/0x10
[ 86.440950][ T5324] ? __pfx_bus_for_each_dev+0x10/0x10
[ 86.440966][ T5324] ? do_raw_spin_unlock+0x4d/0x210
[ 86.440981][ T5324] bus_add_driver+0x345/0x670
[ 86.441000][ T5324] driver_register+0x23a/0x320
[ 86.441013][ T5324] usb_gadget_register_driver_owner+0xf9/0x270
[ 86.441028][ T5324] gadget_dev_desc_UDC_store+0x1c9/0x2f0
[ 86.441039][ T5324] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10
[ 86.441052][ T5324] configfs_write_iter+0x337/0x430
[ 86.441068][ T5324] vfs_write+0x612/0xba0
[ 86.441087][ T5324] ? __pfx_vfs_write+0x10/0x10
[ 86.441108][ T5324] ? __fget_files+0x2a/0x420
[ 86.441127][ T5324] ksys_write+0x150/0x270
[ 86.441142][ T5324] ? __pfx_ksys_write+0x10/0x10
[ 86.441161][ T5324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 86.441173][ T5324] do_syscall_64+0x174/0x580
[ 86.441183][ T5324] ? clear_bhb_loop+0x40/0x90
[ 86.441197][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 86.441207][ T5324] RIP: 0033:0x7f9508f9de99
[ 86.441219][ T5324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 86.441227][ T5324] RSP: 002b:00007f9509ebcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 86.441239][ T5324] RAX: ffffffffffffffda RBX: 00007f9509225fa0 RCX: 00007f9508f9de99
[ 86.441247][ T5324] RDX: 000000000000000b RSI: 0000200000000940 RDI: 0000000000000003
[ 86.441253][ T5324] RBP: 00007f9509ebd050 R08: 0000000000000000 R09: 0000000000000000
[ 86.441259][ T5324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 86.441264][ T5324] R13: 00007f9509226038 R14: 00007f9509225fa0 R15: 00007ffffb99a8c8
[ 86.441283][ T5324]
[ 86.441993][ T5324] ==================================================================
[ 86.586957][ T5324] BUG: KASAN: double-free in snd_rawmidi_free+0x3cb/0x420
[ 86.589751][ T5324] Free of addr ffff888037a62000 by task syz.0.0/5324
[ 86.592571][ T5324]
[ 86.593622][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 86.593636][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 86.593642][ T5324] Call Trace:
[ 86.593650][ T5324]
[ 86.593655][ T5324] dump_stack_lvl+0xe8/0x150
[ 86.593674][ T5324] print_address_description+0x55/0x1e0
[ 86.593690][ T5324] print_report+0x58/0x70
[ 86.593702][ T5324] ? snd_rawmidi_free+0x3cb/0x420
[ 86.593714][ T5324] kasan_report_invalid_free+0xea/0x110
[ 86.593728][ T5324] ? snd_rawmidi_free+0x3cb/0x420
[ 86.593741][ T5324] ? snd_rawmidi_free+0x3cb/0x420
[ 86.593752][ T5324] __kasan_slab_pre_free+0x104/0x120
[ 86.593765][ T5324] kfree+0x173/0x640
[ 86.593774][ T5324] ? snd_rawmidi_free+0x3cb/0x420
[ 86.593786][ T5324] ? __pfx_snd_ump_endpoint_free+0x10/0x10
[ 86.593798][ T5324] snd_rawmidi_free+0x3cb/0x420
[ 86.593810][ T5324] snd_rawmidi_dev_free+0x38/0x50
[ 86.593822][ T5324] snd_device_free_all+0x2c7/0x7a0
[ 86.593835][ T5324] ? __pfx_snd_mixer_oss_notify_handler+0x10/0x10
[ 86.593849][ T5324] release_card_device+0x75/0x1b0
[ 86.593861][ T5324] ? __pfx_release_card_device+0x10/0x10
[ 86.593872][ T5324] device_release+0xc4/0x1f0
[ 86.593884][ T5324] kobject_put+0x222/0x550
[ 86.593897][ T5324] f_midi2_bind+0x1441/0x2c40
[ 86.593909][ T5324] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 86.593927][ T5324] ? __pfx_f_midi2_bind+0x10/0x10
[ 86.593937][ T5324] ? driver_register+0x23a/0x320
[ 86.593947][ T5324] ? gadget_dev_desc_UDC_store+0x1c9/0x2f0
[ 86.593958][ T5324] ? configfs_write_iter+0x337/0x430
[ 86.593970][ T5324] ? vfs_write+0x612/0xba0
[ 86.593982][ T5324] ? do_syscall_64+0x174/0x580
[ 86.593991][ T5324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 86.594009][ T5324] ? __kmalloc_noprof+0x396/0x720
[ 86.594021][ T5324] usb_add_function+0x2e1/0x9f0
[ 86.594034][ T5324] ? check_remote_wakeup_config+0x58/0x1c0
[ 86.594048][ T5324] configfs_composite_bind+0xde0/0x1410
[ 86.594064][ T5324] ? __pfx_configfs_composite_bind+0x10/0x10
[ 86.594077][ T5324] gadget_bind_driver+0x2ca/0x9e0
[ 86.594090][ T5324] ? __pfx_gadget_bind_driver+0x10/0x10
[ 86.594100][ T5324] really_probe+0x254/0xae0
[ 86.594111][ T5324] __driver_probe_device+0x1e8/0x360
[ 86.594121][ T5324] driver_probe_device+0x4f/0x240
[ 86.594132][ T5324] __driver_attach+0x339/0x600
[ 86.594142][ T5324] bus_for_each_dev+0x23b/0x2c0
[ 86.594154][ T5324] ? __pfx___driver_attach+0x10/0x10
[ 86.594163][ T5324] ? __pfx_bus_for_each_dev+0x10/0x10
[ 86.594176][ T5324] ? do_raw_spin_unlock+0x4d/0x210
[ 86.594188][ T5324] bus_add_driver+0x345/0x670
[ 86.594202][ T5324] driver_register+0x23a/0x320
[ 86.594213][ T5324] usb_gadget_register_driver_owner+0xf9/0x270
[ 86.594225][ T5324] gadget_dev_desc_UDC_store+0x1c9/0x2f0
[ 86.594236][ T5324] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10
[ 86.594247][ T5324] configfs_write_iter+0x337/0x430
[ 86.594261][ T5324] vfs_write+0x612/0xba0
[ 86.594275][ T5324] ? __pfx_vfs_write+0x10/0x10
[ 86.594290][ T5324] ? __fget_files+0x2a/0x420
[ 86.594304][ T5324] ksys_write+0x150/0x270
[ 86.594317][ T5324] ? __pfx_ksys_write+0x10/0x10
[ 86.594331][ T5324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 86.594342][ T5324] do_syscall_64+0x174/0x580
[ 86.594351][ T5324] ? clear_bhb_loop+0x40/0x90
[ 86.594363][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 86.594373][ T5324] RIP: 0033:0x7f9508f9de99
[ 86.594384][ T5324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 86.594393][ T5324] RSP: 002b:00007f9509ebcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 86.594405][ T5324] RAX: ffffffffffffffda RBX: 00007f9509225fa0 RCX: 00007f9508f9de99
[ 86.594412][ T5324] RDX: 000000000000000b RSI: 0000200000000940 RDI: 0000000000000003
[ 86.594419][ T5324] RBP: 00007f9509ebd050 R08: 0000000000000000 R09: 0000000000000000
[ 86.594425][ T5324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 86.594430][ T5324] R13: 00007f9509226038 R14: 00007f9509225fa0 R15: 00007ffffb99a8c8
[ 86.594440][ T5324]
[ 86.594443][ T5324]
[ 86.758166][ T5324] Allocated by task 5324:
[ 86.759852][ T5324] kasan_save_track+0x3e/0x80
[ 86.761562][ T5324] __kasan_kmalloc+0x93/0xb0
[ 86.763477][ T5324] __kmalloc_cache_noprof+0x32d/0x660
[ 86.765746][ T5324] snd_ump_attach_legacy_rawmidi+0xb3/0x8c0
[ 86.768279][ T5324] f_midi2_bind+0x11c5/0x2c40
[ 86.770392][ T5324] usb_add_function+0x2e1/0x9f0
[ 86.772344][ T5324] configfs_composite_bind+0xde0/0x1410
[ 86.774550][ T5324] gadget_bind_driver+0x2ca/0x9e0
[ 86.776623][ T5324] really_probe+0x254/0xae0
[ 86.778566][ T5324] __driver_probe_device+0x1e8/0x360
[ 86.780755][ T5324] driver_probe_device+0x4f/0x240
[ 86.782849][ T5324] __driver_attach+0x339/0x600
[ 86.784838][ T5324] bus_for_each_dev+0x23b/0x2c0
[ 86.786933][ T5324] bus_add_driver+0x345/0x670
[ 86.788872][ T5324] driver_register+0x23a/0x320
[ 86.790700][ T5324] usb_gadget_register_driver_owner+0xf9/0x270
[ 86.793120][ T5324] gadget_dev_desc_UDC_store+0x1c9/0x2f0
[ 86.795374][ T5324] configfs_write_iter+0x337/0x430
[ 86.797368][ T5324] vfs_write+0x612/0xba0
[ 86.799157][ T5324] ksys_write+0x150/0x270
[ 86.800878][ T5324] do_syscall_64+0x174/0x580
[ 86.802798][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 86.805211][ T5324]
[ 86.806246][ T5324] Freed by task 5324:
[ 86.807976][ T5324] kasan_save_track+0x3e/0x80
[ 86.809944][ T5324] kasan_save_free_info+0x40/0x50
[ 86.811974][ T5324] __kasan_slab_free+0x5c/0x80
[ 86.813972][ T5324] kfree+0x1c5/0x640
[ 86.815755][ T5324] snd_ump_attach_legacy_rawmidi+0x4c3/0x8c0
[ 86.818901][ T5324] f_midi2_bind+0x11c5/0x2c40
[ 86.820897][ T5324] usb_add_function+0x2e1/0x9f0
[ 86.822961][ T5324] configfs_composite_bind+0xde0/0x1410
[ 86.825259][ T5324] gadget_bind_driver+0x2ca/0x9e0
[ 86.827340][ T5324] really_probe+0x254/0xae0
[ 86.829288][ T5324] __driver_probe_device+0x1e8/0x360
[ 86.831491][ T5324] driver_probe_device+0x4f/0x240
[ 86.833615][ T5324] __driver_attach+0x339/0x600
[ 86.835619][ T5324] bus_for_each_dev+0x23b/0x2c0
[ 86.837387][ T5324] bus_add_driver+0x345/0x670
[ 86.839328][ T5324] driver_register+0x23a/0x320
[ 86.841361][ T5324] usb_gadget_register_driver_owner+0xf9/0x270
[ 86.843928][ T5324] gadget_dev_desc_UDC_store+0x1c9/0x2f0
[ 86.846231][ T5324] configfs_write_iter+0x337/0x430
[ 86.848417][ T5324] vfs_write+0x612/0xba0
[ 86.850144][ T5324] ksys_write+0x150/0x270
[ 86.851887][ T5324] do_syscall_64+0x174/0x580
[ 86.853828][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 86.856341][ T5324]
[ 86.857371][ T5324] The buggy address belongs to the object at ffff888037a62000
[ 86.857371][ T5324] which belongs to the cache kmalloc-4k of size 4096
[ 86.863108][ T5324] The buggy address is located 0 bytes inside of
[ 86.863108][ T5324] 4096-byte region [ffff888037a62000, ffff888037a63000)
[ 86.868399][ T5324]
[ 86.869398][ T5324] The buggy address belongs to the physical page:
[ 86.871993][ T5324] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x37a60
[ 86.875543][ T5324] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 86.878978][ T5324] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff)
[ 86.882101][ T5324] page_type: f5(slab)
[ 86.883769][ T5324] raw: 04fff00000000040 ffff88801b042140 dead000000000100 dead000000000122
[ 86.887367][ T5324] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000
[ 86.890887][ T5324] head: 04fff00000000040 ffff88801b042140 dead000000000100 dead000000000122
[ 86.894418][ T5324] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000
[ 86.897993][ T5324] head: 04fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[ 86.901546][ T5324] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 86.905101][ T5324] page dumped because: kasan: bad access detected
[ 86.907811][ T5324] page_owner tracks the page as allocated
[ 86.910107][ T5324] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4704, tgid 4704 (udevadm), ts 29985892271, free_ts 29033254542
[ 86.918441][ T5324] post_alloc_hook+0x1f9/0x250
[ 86.920476][ T5324] get_page_from_freelist+0x21fa/0x2270
[ 86.922799][ T5324] __alloc_frozen_pages_noprof+0x18d/0x380
[ 86.925239][ T5324] allocate_slab+0x79/0x5e0
[ 86.927169][ T5324] refill_objects+0x2d5/0x350
[ 86.929159][ T5324] __pcs_replace_empty_main+0x2bf/0x6b0
[ 86.931470][ T5324] __kmalloc_noprof+0x485/0x720
[ 86.933274][ T5324] tomoyo_realpath_from_path+0xef/0x640
[ 86.935308][ T5324] tomoyo_path_perm+0x283/0x560
[ 86.937500][ T5324] security_inode_getattr+0x12b/0x310
[ 86.939829][ T5324] vfs_getattr+0x23/0x70
[ 86.941627][ T5324] vfs_statx_path+0x2b/0x230
[ 86.943630][ T5324] vfs_statx+0x12e/0x200
[ 86.945400][ T5324] vfs_fstatat+0x11b/0x170
[ 86.947269][ T5324] __x64_sys_newfstatat+0x151/0x200
[ 86.949454][ T5324] do_syscall_64+0x174/0x580
[ 86.951419][ T5324] page last free pid 4690 tgid 4690 stack trace:
[ 86.953996][ T5324] __free_frozen_pages+0xc1e/0xd10
[ 86.956270][ T5324] __slab_free+0x274/0x2c0
[ 86.958150][ T5324] qlist_free_all+0x99/0x100
[ 86.960081][ T5324] kasan_quarantine_reduce+0x148/0x160
[ 86.962347][ T5324] __kasan_slab_alloc+0x22/0x80
[ 86.964383][ T5324] __kmalloc_noprof+0x311/0x720
[ 86.966386][ T5324] tomoyo_supervisor+0xc53/0x1560
[ 86.968664][ T5324] tomoyo_env_perm+0x151/0x1f0
[ 86.970734][ T5324] tomoyo_find_next_domain+0x1332/0x1a90
[ 86.973096][ T5324] tomoyo_bprm_check_security+0x11b/0x180
[ 86.975542][ T5324] security_bprm_check+0x85/0x240
[ 86.977665][ T5324] bprm_execve+0x918/0x1630
[ 86.979600][ T5324] do_execveat_common+0x4f4/0x670
[ 86.981625][ T5324] __x64_sys_execve+0x97/0xc0
[ 86.983610][ T5324] do_syscall_64+0x174/0x580
[ 86.985553][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 86.988002][ T5324]
[ 86.989039][ T5324] Memory state around the buggy address:
[ 86.991420][ T5324] ffff888037a61f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 86.994763][ T5324] ffff888037a61f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 86.998124][ T5324] >ffff888037a62000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 87.001537][ T5324] ^
[ 87.003252][ T5324] ffff888037a62080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 87.006650][ T5324] ffff888037a62100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 87.009930][ T5324] ==================================================================
[ 87.037734][ T5324] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 87.040879][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 87.044364][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 87.048765][ T5324] Call Trace:
[ 87.050201][ T5324]
[ 87.051494][ T5324] vpanic+0x56c/0xa60
[ 87.053205][ T5324] ? __pfx_vpanic+0x10/0x10
[ 87.055120][ T5324] panic+0xc5/0xd0
[ 87.056894][ T5324] ? __pfx_panic+0x10/0x10
[ 87.058836][ T5324] ? preempt_schedule_thunk+0x16/0x40
[ 87.061143][ T5324] ? preempt_schedule_thunk+0x16/0x40
[ 87.063399][ T5324] check_panic_on_warn+0x89/0xb0
[ 87.065461][ T5324] end_report+0x73/0x170
[ 87.067351][ T5324] ? snd_rawmidi_free+0x3cb/0x420
[ 87.069581][ T5324] kasan_report_invalid_free+0xfa/0x110
[ 87.071981][ T5324] ? snd_rawmidi_free+0x3cb/0x420
[ 87.074141][ T5324] ? snd_rawmidi_free+0x3cb/0x420
[ 87.076311][ T5324] __kasan_slab_pre_free+0x104/0x120
[ 87.078568][ T5324] kfree+0x173/0x640
[ 87.080257][ T5324] ? snd_rawmidi_free+0x3cb/0x420
[ 87.082389][ T5324] ? __pfx_snd_ump_endpoint_free+0x10/0x10
[ 87.084856][ T5324] snd_rawmidi_free+0x3cb/0x420
[ 87.087027][ T5324] snd_rawmidi_dev_free+0x38/0x50
[ 87.089171][ T5324] snd_device_free_all+0x2c7/0x7a0
[ 87.091415][ T5324] ? __pfx_snd_mixer_oss_notify_handler+0x10/0x10
[ 87.094083][ T5324] release_card_device+0x75/0x1b0
[ 87.096242][ T5324] ? __pfx_release_card_device+0x10/0x10
[ 87.098698][ T5324] device_release+0xc4/0x1f0
[ 87.100668][ T5324] kobject_put+0x222/0x550
[ 87.102568][ T5324] f_midi2_bind+0x1441/0x2c40
[ 87.104554][ T5324] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 87.106919][ T5324] ? __pfx_f_midi2_bind+0x10/0x10
[ 87.108976][ T5324] ? driver_register+0x23a/0x320
[ 87.111131][ T5324] ? gadget_dev_desc_UDC_store+0x1c9/0x2f0
[ 87.113614][ T5324] ? configfs_write_iter+0x337/0x430
[ 87.115925][ T5324] ? vfs_write+0x612/0xba0
[ 87.117916][ T5324] ? do_syscall_64+0x174/0x580
[ 87.119939][ T5324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 87.122295][ T5324] ? __kmalloc_noprof+0x396/0x720
[ 87.124446][ T5324] usb_add_function+0x2e1/0x9f0
[ 87.126586][ T5324] ? check_remote_wakeup_config+0x58/0x1c0
[ 87.129095][ T5324] configfs_composite_bind+0xde0/0x1410
[ 87.131405][ T5324] ? __pfx_configfs_composite_bind+0x10/0x10
[ 87.133908][ T5324] gadget_bind_driver+0x2ca/0x9e0
[ 87.136136][ T5324] ? __pfx_gadget_bind_driver+0x10/0x10
[ 87.138515][ T5324] really_probe+0x254/0xae0
[ 87.140490][ T5324] __driver_probe_device+0x1e8/0x360
[ 87.142726][ T5324] driver_probe_device+0x4f/0x240
[ 87.144831][ T5324] __driver_attach+0x339/0x600
[ 87.146889][ T5324] bus_for_each_dev+0x23b/0x2c0
[ 87.148979][ T5324] ? __pfx___driver_attach+0x10/0x10
[ 87.151197][ T5324] ? __pfx_bus_for_each_dev+0x10/0x10
[ 87.153502][ T5324] ? do_raw_spin_unlock+0x4d/0x210
[ 87.155681][ T5324] bus_add_driver+0x345/0x670
[ 87.157697][ T5324] driver_register+0x23a/0x320
[ 87.159732][ T5324] usb_gadget_register_driver_owner+0xf9/0x270
[ 87.162187][ T5324] gadget_dev_desc_UDC_store+0x1c9/0x2f0
[ 87.164437][ T5324] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10
[ 87.166938][ T5324] configfs_write_iter+0x337/0x430
[ 87.169063][ T5324] vfs_write+0x612/0xba0
[ 87.170829][ T5324] ? __pfx_vfs_write+0x10/0x10
[ 87.172780][ T5324] ? __fget_files+0x2a/0x420
[ 87.174702][ T5324] ksys_write+0x150/0x270
[ 87.176533][ T5324] ? __pfx_ksys_write+0x10/0x10
[ 87.178652][ T5324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 87.181164][ T5324] do_syscall_64+0x174/0x580
[ 87.183139][ T5324] ? clear_bhb_loop+0x40/0x90
[ 87.185103][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 87.187522][ T5324] RIP: 0033:0x7f9508f9de99
[ 87.189398][ T5324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 87.197119][ T5324] RSP: 002b:00007f9509ebcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 87.200673][ T5324] RAX: ffffffffffffffda RBX: 00007f9509225fa0 RCX: 00007f9508f9de99
[ 87.204027][ T5324] RDX: 000000000000000b RSI: 0000200000000940 RDI: 0000000000000003
[ 87.207371][ T5324] RBP: 00007f9509ebd050 R08: 0000000000000000 R09: 0000000000000000
[ 87.210698][ T5324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 87.213970][ T5324] R13: 00007f9509226038 R14: 00007f9509225fa0 R15: 00007ffffb99a8c8
[ 87.217259][ T5324]
[ 87.219046][ T5324] Kernel Offset: disabled
[ 87.220796][ T5324] Rebooting in 86400 seconds..