program: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uac1_legacy.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x600) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000440)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0xd}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000340)) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000000)={0x80, 0x9, 0x2, 0xe05, 0x20000, 0x28e7}) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg1\x00', 0x0}) sendto$packet(r1, &(0x7f00000000c0)="820e119803be9b2b27f1e6f7981efc4764bf3c748221b005c07a1e56f21f7c396932919bb83fbd32c142", 0x2a, 0x20008040, &(0x7f00000001c0)={0x11, 0xf7, r2, 0x1, 0x9, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, 0x14) symlinkat(&(0x7f0000000200)='./config/usb_gadget/g1/functions/uac1_legacy.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1/uac1_legacy.usb0\x00') setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000240)=0x1, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='dummy_udc.0\n\x00', 0xc) nanosleep(&(0x7f0000000500)={0x0, 0x2faf080}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uac1_legacy.usb0\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x600) (async) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000440)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0xd}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000340)) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000000)={0x80, 0x9, 0x2, 0xe05, 0x20000, 0x28e7}) (async) openat$nmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg1\x00'}) (async) sendto$packet(r1, &(0x7f00000000c0)="820e119803be9b2b27f1e6f7981efc4764bf3c748221b005c07a1e56f21f7c396932919bb83fbd32c142", 0x2a, 0x20008040, &(0x7f00000001c0)={0x11, 0xf7, r2, 0x1, 0x9, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, 0x14) (async) symlinkat(&(0x7f0000000200)='./config/usb_gadget/g1/functions/uac1_legacy.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1/uac1_legacy.usb0\x00') (async) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000240)=0x1, 0x4) (async) openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) (async) write(r3, &(0x7f0000000400)='dummy_udc.0\n\x00', 0xc) (async) nanosleep(&(0x7f0000000500)={0x0, 0x2faf080}, 0x0) (async) [ 94.736498][ T4637] Bluetooth: hci0: command tx timeout [ 94.952247][ T5309] configfs-gadget.g1 gadget.0: Hardware params: access 3, format 2, channels 2, rate 48000 [ 94.967569][ T5309] udc dummy_udc.0: failed to start g1: -19 [ 94.971952][ T5309] UDC core: g1: couldn't find an available UDC or it's busy [ 95.032014][ T5309] ================================================================== [ 95.035479][ T5309] BUG: KASAN: slab-use-after-free in filp_flush+0x31/0x190 [ 95.038644][ T5309] Read of size 8 at addr ffff888012a19d98 by task syz.0.0/5309 [ 95.041783][ T5309] [ 95.042806][ T5309] CPU: 0 UID: 0 PID: 5309 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 95.042820][ T5309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.042826][ T5309] Call Trace: [ 95.042833][ T5309] [ 95.042839][ T5309] dump_stack_lvl+0xe8/0x150 [ 95.042856][ T5309] print_address_description+0x55/0x1e0 [ 95.042870][ T5309] ? filp_flush+0x31/0x190 [ 95.042884][ T5309] print_report+0x58/0x70 [ 95.042895][ T5309] kasan_report+0x117/0x150 [ 95.042911][ T5309] ? filp_flush+0x31/0x190 [ 95.042924][ T5309] kasan_check_range+0x264/0x2c0 [ 95.042939][ T5309] filp_flush+0x31/0x190 [ 95.042953][ T5309] filp_close+0x1d/0x40 [ 95.042965][ T5309] gaudio_cleanup+0x54/0xf0 [ 95.043028][ T5309] f_audio_bind+0x4a0/0x630 [ 95.043043][ T5309] ? __pfx_f_audio_bind+0x10/0x10 [ 95.043057][ T5309] ? rcu_is_watching+0x16/0xb0 [ 95.043066][ T5309] ? usb_gadget_set_selfpowered+0xf5/0x260 [ 95.043083][ T5309] usb_add_function+0x2e1/0x9f0 [ 95.043096][ T5309] ? check_remote_wakeup_config+0x58/0x1c0 [ 95.043109][ T5309] configfs_composite_bind+0xde0/0x1410 [ 95.043124][ T5309] ? __pfx_configfs_composite_bind+0x10/0x10 [ 95.043137][ T5309] gadget_bind_driver+0x2ca/0x9e0 [ 95.043150][ T5309] ? __pfx_gadget_bind_driver+0x10/0x10 [ 95.043159][ T5309] really_probe+0x254/0xae0 [ 95.043205][ T5309] __driver_probe_device+0x1e8/0x360 [ 95.043222][ T5309] driver_probe_device+0x4f/0x240 [ 95.043232][ T5309] __driver_attach+0x339/0x600 [ 95.043247][ T5309] bus_for_each_dev+0x23b/0x2c0 [ 95.043260][ T5309] ? __pfx___driver_attach+0x10/0x10 [ 95.043274][ T5309] ? __pfx_bus_for_each_dev+0x10/0x10 [ 95.043286][ T5309] ? do_raw_spin_unlock+0x4d/0x200 [ 95.043299][ T5309] bus_add_driver+0x345/0x670 [ 95.043313][ T5309] driver_register+0x23a/0x320 [ 95.043324][ T5309] usb_gadget_register_driver_owner+0xf9/0x270 [ 95.043334][ T5309] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 95.043345][ T5309] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10 [ 95.043356][ T5309] configfs_write_iter+0x337/0x430 [ 95.043369][ T5309] vfs_write+0x612/0xba0 [ 95.043387][ T5309] ? __pfx_vfs_write+0x10/0x10 [ 95.043404][ T5309] ? __fget_files+0x2a/0x420 [ 95.043427][ T5309] ksys_write+0x150/0x270 [ 95.043442][ T5309] ? __pfx_ksys_write+0x10/0x10 [ 95.043459][ T5309] do_syscall_64+0x166/0x520 [ 95.043470][ T5309] ? trace_irq_disable+0x3b/0x140 [ 95.043483][ T5309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.043494][ T5309] ? clear_bhb_loop+0x70/0xc0 [ 95.043505][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.043516][ T5309] RIP: 0033:0x7f044ad9e0d9 [ 95.043526][ T5309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.043534][ T5309] RSP: 002b:00007f044bc95fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 95.043547][ T5309] RAX: ffffffffffffffda RBX: 00007f044b025fa0 RCX: 00007f044ad9e0d9 [ 95.043554][ T5309] RDX: 000000000000000c RSI: 0000200000000400 RDI: 0000000000000006 [ 95.043560][ T5309] RBP: 00007f044ae35024 R08: 0000000000000000 R09: 0000000000000000 [ 95.043566][ T5309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.043573][ T5309] R13: 00007f044b026038 R14: 00007f044b025fa0 R15: 00007ffdf31954c8 [ 95.043584][ T5309] [ 95.043587][ T5309] [ 95.180543][ T5309] Allocated by task 5309: [ 95.182361][ T5309] kasan_save_track+0x3e/0x80 [ 95.184296][ T5309] __kasan_slab_alloc+0x6c/0x80 [ 95.186367][ T5309] kmem_cache_alloc_noprof+0x2a4/0x5f0 [ 95.188630][ T5309] alloc_empty_file+0x5b/0x1d0 [ 95.190664][ T5309] path_openat+0xa2/0x1d60 [ 95.192631][ T5309] do_file_open+0x23e/0x4a0 [ 95.194537][ T5309] filp_open+0x16d/0x1d0 [ 95.196237][ T5309] gaudio_setup+0x11b/0xf10 [ 95.198208][ T5309] f_audio_bind+0x137/0x630 [ 95.200034][ T5309] usb_add_function+0x2e1/0x9f0 [ 95.202058][ T5309] configfs_composite_bind+0xde0/0x1410 [ 95.204369][ T5309] gadget_bind_driver+0x2ca/0x9e0 [ 95.206426][ T5309] really_probe+0x254/0xae0 [ 95.208392][ T5309] __driver_probe_device+0x1e8/0x360 [ 95.210551][ T5309] driver_probe_device+0x4f/0x240 [ 95.212678][ T5309] __driver_attach+0x339/0x600 [ 95.214679][ T5309] bus_for_each_dev+0x23b/0x2c0 [ 95.216736][ T5309] bus_add_driver+0x345/0x670 [ 95.218783][ T5309] driver_register+0x23a/0x320 [ 95.220712][ T5309] usb_gadget_register_driver_owner+0xf9/0x270 [ 95.223278][ T5309] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 95.225674][ T5309] configfs_write_iter+0x337/0x430 [ 95.227956][ T5309] vfs_write+0x612/0xba0 [ 95.229897][ T5309] ksys_write+0x150/0x270 [ 95.231829][ T5309] do_syscall_64+0x166/0x520 [ 95.233991][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.236593][ T5309] [ 95.237729][ T5309] Freed by task 76: [ 95.239371][ T5309] kasan_save_track+0x3e/0x80 [ 95.241462][ T5309] kasan_save_free_info+0x40/0x50 [ 95.243611][ T5309] __kasan_slab_free+0x5c/0x80 [ 95.245607][ T5309] slab_free_after_rcu_debug+0x12a/0x220 [ 95.247899][ T5309] rcu_core+0x794/0x10b0 [ 95.249693][ T5309] handle_softirqs+0x226/0x860 [ 95.251612][ T5309] do_softirq+0x77/0xd0 [ 95.253314][ T5309] __local_bh_enable_ip+0x100/0x140 [ 95.255413][ T5309] scomp_acomp_comp_decomp+0x79c/0xab0 [ 95.257672][ T5309] crypto_acomp_compress+0x4c7/0xbd0 [ 95.259816][ T5309] zswap_store+0xe3a/0x2050 [ 95.261761][ T5309] swap_writeout+0x96a/0x14d0 [ 95.263726][ T5309] shrink_folio_list+0x35bd/0x5330 [ 95.265880][ T5309] evict_folios+0x3821/0x49e0 [ 95.267865][ T5309] try_to_shrink_lruvec+0xb4f/0xed0 [ 95.270188][ T5309] shrink_one+0x233/0x730 [ 95.272086][ T5309] shrink_node+0x3303/0x3b60 [ 95.273967][ T5309] kswapd+0x17b6/0x31c0 [ 95.275652][ T5309] kthread+0x38b/0x480 [ 95.277368][ T5309] ret_from_fork+0x514/0xb70 [ 95.279337][ T5309] ret_from_fork_asm+0x1a/0x30 [ 95.281365][ T5309] [ 95.282342][ T5309] Last potentially related work creation: [ 95.284687][ T5309] kasan_save_stack+0x3e/0x60 [ 95.286632][ T5309] kasan_record_aux_stack+0xbd/0xd0 [ 95.288842][ T5309] kmem_cache_free+0x453/0x650 [ 95.291091][ T5309] task_work_run+0x1d9/0x270 [ 95.292955][ T5309] exit_to_user_mode_loop+0x204/0x770 [ 95.295264][ T5309] do_syscall_64+0x328/0x520 [ 95.297173][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.299697][ T5309] [ 95.300810][ T5309] Second to last potentially related work creation: [ 95.303583][ T5309] kasan_save_stack+0x3e/0x60 [ 95.305519][ T5309] kasan_record_aux_stack+0xbd/0xd0 [ 95.308003][ T5309] task_work_add+0xae/0x420 [ 95.309986][ T5309] __fput_deferred+0x152/0x390 [ 95.312066][ T5309] fput_close+0x11f/0x240 [ 95.313885][ T5309] filp_close+0x27/0x40 [ 95.315666][ T5309] gaudio_cleanup+0x54/0xf0 [ 95.317635][ T5309] f_audio_bind+0x4a0/0x630 [ 95.319549][ T5309] usb_add_function+0x2e1/0x9f0 [ 95.321581][ T5309] configfs_composite_bind+0xde0/0x1410 [ 95.323848][ T5309] gadget_bind_driver+0x2ca/0x9e0 [ 95.326019][ T5309] really_probe+0x254/0xae0 [ 95.327972][ T5309] __driver_probe_device+0x1e8/0x360 [ 95.330189][ T5309] driver_probe_device+0x4f/0x240 [ 95.332266][ T5309] __driver_attach+0x339/0x600 [ 95.334260][ T5309] bus_for_each_dev+0x23b/0x2c0 [ 95.336298][ T5309] bus_add_driver+0x345/0x670 [ 95.338281][ T5309] driver_register+0x23a/0x320 [ 95.340253][ T5309] usb_gadget_register_driver_owner+0xf9/0x270 [ 95.342853][ T5309] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 95.345108][ T5309] configfs_write_iter+0x337/0x430 [ 95.347189][ T5309] vfs_write+0x612/0xba0 [ 95.348832][ T5309] ksys_write+0x150/0x270 [ 95.350672][ T5309] do_syscall_64+0x166/0x520 [ 95.352568][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.354978][ T5309] [ 95.356004][ T5309] The buggy address belongs to the object at ffff888012a19c40 [ 95.356004][ T5309] which belongs to the cache filp of size 352 [ 95.361453][ T5309] The buggy address is located 344 bytes inside of [ 95.361453][ T5309] freed 352-byte region [ffff888012a19c40, ffff888012a19da0) [ 95.367039][ T5309] [ 95.368076][ T5309] The buggy address belongs to the physical page: [ 95.371007][ T5309] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12a19 [ 95.374710][ T5309] memcg:ffff8880125a9601 [ 95.376508][ T5309] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 95.379371][ T5309] page_type: f5(slab) [ 95.381209][ T5309] raw: 00fff00000000000 ffff888030414500 dead000000000100 dead000000000122 [ 95.384895][ T5309] raw: 0000000000000000 0000000800090009 00000000f5000000 ffff8880125a9601 [ 95.388462][ T5309] page dumped because: kasan: bad access detected [ 95.391286][ T5309] page_owner tracks the page as allocated [ 95.393698][ T5309] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4687, tgid 4687 (udevd), ts 32510917349, free_ts 32504070361 [ 95.402135][ T5309] post_alloc_hook+0x1f9/0x250 [ 95.404093][ T5309] get_page_from_freelist+0x21fe/0x2270 [ 95.406286][ T5309] __alloc_frozen_pages_noprof+0x18d/0x380 [ 95.408709][ T5309] allocate_slab+0x79/0x5e0 [ 95.410761][ T5309] refill_objects+0x2d5/0x350 [ 95.412816][ T5309] __pcs_replace_empty_main+0x2c3/0x6b0 [ 95.415252][ T5309] kmem_cache_alloc_noprof+0x386/0x5f0 [ 95.417584][ T5309] alloc_empty_file+0x5b/0x1d0 [ 95.419534][ T5309] path_openat+0xa2/0x1d60 [ 95.421443][ T5309] do_file_open+0x23e/0x4a0 [ 95.423413][ T5309] do_sys_openat2+0x115/0x200 [ 95.425472][ T5309] __x64_sys_openat+0x138/0x170 [ 95.427781][ T5309] do_syscall_64+0x166/0x520 [ 95.429882][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.432445][ T5309] page last free pid 4695 tgid 4695 stack trace: [ 95.435220][ T5309] __free_frozen_pages+0xc22/0xd20 [ 95.437385][ T5309] __slab_free+0x274/0x2c0 [ 95.439264][ T5309] qlist_free_all+0x99/0x100 [ 95.441202][ T5309] kasan_quarantine_reduce+0x148/0x160 [ 95.443504][ T5309] __kasan_slab_alloc+0x22/0x80 [ 95.445564][ T5309] kmem_cache_alloc_noprof+0x2a4/0x5f0 [ 95.447861][ T5309] do_getname+0x2e/0x250 [ 95.449737][ T5309] do_sys_openat2+0xcc/0x200 [ 95.451772][ T5309] __x64_sys_openat+0x138/0x170 [ 95.453929][ T5309] do_syscall_64+0x166/0x520 [ 95.455940][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.458471][ T5309] [ 95.459473][ T5309] Memory state around the buggy address: [ 95.461868][ T5309] ffff888012a19c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 95.465129][ T5309] ffff888012a19d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 95.468328][ T5309] >ffff888012a19d80: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 95.471686][ T5309] ^ [ 95.473811][ T5309] ffff888012a19e00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 95.477250][ T5309] ffff888012a19e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 95.480595][ T5309] ================================================================== [ 95.573915][ T5309] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 95.576976][ T5309] CPU: 0 UID: 0 PID: 5309 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 95.580757][ T5309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.584890][ T5309] Call Trace: [ 95.586341][ T5309] [ 95.587581][ T5309] vpanic+0x56d/0xa60 [ 95.589370][ T5309] ? __pfx_vpanic+0x10/0x10 [ 95.591329][ T5309] panic+0xc5/0xd0 [ 95.592921][ T5309] ? __pfx_panic+0x10/0x10 [ 95.594802][ T5309] ? preempt_schedule_thunk+0x16/0x40 [ 95.597012][ T5309] ? filp_flush+0x31/0x190 [ 95.598857][ T5309] ? preempt_schedule_thunk+0x16/0x40 [ 95.601147][ T5309] ? filp_flush+0x31/0x190 [ 95.603013][ T5309] check_panic_on_warn+0x89/0xb0 [ 95.605184][ T5309] ? filp_flush+0x31/0x190 [ 95.607057][ T5309] end_report+0x73/0x170 [ 95.608811][ T5309] ? filp_flush+0x31/0x190 [ 95.610733][ T5309] kasan_report+0x128/0x150 [ 95.612605][ T5309] ? filp_flush+0x31/0x190 [ 95.614390][ T5309] kasan_check_range+0x264/0x2c0 [ 95.616459][ T5309] filp_flush+0x31/0x190 [ 95.618208][ T5309] filp_close+0x1d/0x40 [ 95.620162][ T5309] gaudio_cleanup+0x54/0xf0 [ 95.622142][ T5309] f_audio_bind+0x4a0/0x630 [ 95.624050][ T5309] ? __pfx_f_audio_bind+0x10/0x10 [ 95.626147][ T5309] ? rcu_is_watching+0x16/0xb0 [ 95.628025][ T5309] ? usb_gadget_set_selfpowered+0xf5/0x260 [ 95.630272][ T5309] usb_add_function+0x2e1/0x9f0 [ 95.632256][ T5309] ? check_remote_wakeup_config+0x58/0x1c0 [ 95.634760][ T5309] configfs_composite_bind+0xde0/0x1410 [ 95.637137][ T5309] ? __pfx_configfs_composite_bind+0x10/0x10 [ 95.639673][ T5309] gadget_bind_driver+0x2ca/0x9e0 [ 95.641892][ T5309] ? __pfx_gadget_bind_driver+0x10/0x10 [ 95.644609][ T5309] really_probe+0x254/0xae0 [ 95.646802][ T5309] __driver_probe_device+0x1e8/0x360 [ 95.649144][ T5309] driver_probe_device+0x4f/0x240 [ 95.651676][ T5309] __driver_attach+0x339/0x600 [ 95.653760][ T5309] bus_for_each_dev+0x23b/0x2c0 [ 95.655824][ T5309] ? __pfx___driver_attach+0x10/0x10 [ 95.658092][ T5309] ? __pfx_bus_for_each_dev+0x10/0x10 [ 95.660496][ T5309] ? do_raw_spin_unlock+0x4d/0x200 [ 95.662638][ T5309] bus_add_driver+0x345/0x670 [ 95.664601][ T5309] driver_register+0x23a/0x320 [ 95.666671][ T5309] usb_gadget_register_driver_owner+0xf9/0x270 [ 95.669268][ T5309] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 95.671608][ T5309] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10 [ 95.674184][ T5309] configfs_write_iter+0x337/0x430 [ 95.676356][ T5309] vfs_write+0x612/0xba0 [ 95.678423][ T5309] ? __pfx_vfs_write+0x10/0x10 [ 95.680515][ T5309] ? __fget_files+0x2a/0x420 [ 95.682844][ T5309] ksys_write+0x150/0x270 [ 95.684689][ T5309] ? __pfx_ksys_write+0x10/0x10 [ 95.686711][ T5309] do_syscall_64+0x166/0x520 [ 95.688646][ T5309] ? trace_irq_disable+0x3b/0x140 [ 95.690747][ T5309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.693480][ T5309] ? clear_bhb_loop+0x70/0xc0 [ 95.695596][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.698211][ T5309] RIP: 0033:0x7f044ad9e0d9 [ 95.699959][ T5309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.707453][ T5309] RSP: 002b:00007f044bc95fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 95.710831][ T5309] RAX: ffffffffffffffda RBX: 00007f044b025fa0 RCX: 00007f044ad9e0d9 [ 95.714033][ T5309] RDX: 000000000000000c RSI: 0000200000000400 RDI: 0000000000000006 [ 95.717154][ T5309] RBP: 00007f044ae35024 R08: 0000000000000000 R09: 0000000000000000 [ 95.720272][ T5309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.723441][ T5309] R13: 00007f044b026038 R14: 00007f044b025fa0 R15: 00007ffdf31954c8 [ 95.726491][ T5309] [ 95.728106][ T5309] Kernel Offset: disabled [ 95.729905][ T5309] Rebooting in 86400 seconds..