Warning: Permanently added '10.128.1.95' (ED25519) to the list of known hosts. 2026/07/29 12:24:50 parsed 1 programs 2026/07/29 12:24:50 serving rpc on tcp://43969 [ 84.539909][ T5610] cgroup: Unknown subsys name 'net' [ 84.761375][ T5610] cgroup: Unknown subsys name 'cpuset' [ 84.816286][ T5610] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.524171][ T5610] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.911190][ T821] cfg80211: failed to load regulatory.db [ 91.396250][ T5644] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.399719][ T5644] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.399895][ T5644] bridge_slave_0: entered allmulticast mode [ 91.401954][ T5644] bridge_slave_0: entered promiscuous mode [ 91.418492][ T5644] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.418611][ T5644] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.418802][ T5644] bridge_slave_1: entered allmulticast mode [ 91.424438][ T5644] bridge_slave_1: entered promiscuous mode [ 91.469955][ T5644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.472394][ T5644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.512875][ T5644] team0: Port device team_slave_0 added [ 91.514891][ T5644] team0: Port device team_slave_1 added [ 91.551861][ T5644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.551871][ T5644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.551884][ T5644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.554400][ T5644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.554415][ T5644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.554436][ T5644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.699944][ T5644] hsr_slave_0: entered promiscuous mode [ 91.701510][ T5644] hsr_slave_1: entered promiscuous mode [ 92.072888][ T5644] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.128803][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.132142][ T5644] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.180012][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.478716][ T5644] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.499706][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.502274][ T5644] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.544002][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.689543][ T5644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.735103][ T5644] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.760398][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.760521][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.801279][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.802121][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.190597][ T5644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.265099][ T5644] veth0_vlan: entered promiscuous mode [ 93.282979][ T5644] veth1_vlan: entered promiscuous mode [ 93.331425][ T5644] veth0_macvtap: entered promiscuous mode [ 93.335094][ T5644] veth1_macvtap: entered promiscuous mode [ 93.358801][ T5644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.384612][ T5644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.451238][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.453709][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.475111][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.482409][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.260844][ T3313] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.601350][ T3313] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.804054][ T3447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.804078][ T3447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.923336][ T1184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.923356][ T1184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.779915][ T3313] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.272085][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.286660][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.289159][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.290610][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.291273][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.755274][ T3313] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.581545][ T3313] bridge_slave_1: left allmulticast mode [ 97.581657][ T3313] bridge_slave_1: left promiscuous mode [ 97.595541][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.790804][ T3313] bridge_slave_0: left allmulticast mode [ 97.790838][ T3313] bridge_slave_0: left promiscuous mode [ 97.791087][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.556242][ T3313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.647058][ T3313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.668883][ T3313] bond0 (unregistering): Released all slaves [ 98.733292][ T5259] 8021q: adding VLAN 0 to HW filter on device eth1 [ 99.117000][ T3313] hsr_slave_0: left promiscuous mode [ 99.173839][ T3313] hsr_slave_1: left promiscuous mode [ 99.182568][ T3313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.182655][ T3313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.232459][ T3313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.232487][ T3313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.446337][ T3313] veth1_macvtap: left promiscuous mode [ 99.446592][ T3313] veth0_macvtap: left promiscuous mode [ 99.446861][ T3313] veth1_vlan: left promiscuous mode [ 99.478362][ T3313] veth0_vlan: left promiscuous mode [ 100.206148][ T3313] team0 (unregistering): Port device team_slave_1 removed [ 100.246282][ T3313] team0 (unregistering): Port device team_slave_0 removed [ 100.409735][ T5259] 8021q: adding VLAN 0 to HW filter on device eth2 [ 101.299479][ T5259] 8021q: adding VLAN 0 to HW filter on device eth3 [ 101.960357][ T5259] 8021q: adding VLAN 0 to HW filter on device eth4 2026/07/29 12:25:10 executed programs: 0 [ 102.763058][ T4913] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 102.790603][ T4913] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 102.791587][ T4913] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 102.792964][ T4913] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 102.794603][ T4913] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 103.765915][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.766051][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.766149][ T5801] bridge_slave_0: entered allmulticast mode [ 103.767584][ T5801] bridge_slave_0: entered promiscuous mode [ 103.769410][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.769528][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.769620][ T5801] bridge_slave_1: entered allmulticast mode [ 103.770969][ T5801] bridge_slave_1: entered promiscuous mode [ 103.821303][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.824939][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.897476][ T5801] team0: Port device team_slave_0 added [ 103.900564][ T5801] team0: Port device team_slave_1 added [ 103.936630][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.936641][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.936654][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.941350][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.941365][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.941386][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.028464][ T5801] hsr_slave_0: entered promiscuous mode [ 104.029742][ T5801] hsr_slave_1: entered promiscuous mode [ 104.887808][ T59] Bluetooth: hci0: command tx timeout [ 106.977126][ T59] Bluetooth: hci0: command tx timeout [ 107.097710][ T5801] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 107.154065][ T5801] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 107.156205][ T5801] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 107.191572][ T5801] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 107.193890][ T5801] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 107.234963][ T5801] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 107.240142][ T5801] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 107.274989][ T5801] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 107.429050][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.479380][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.503212][ T3390] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.503336][ T3390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.548123][ T3390] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.548284][ T3390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.224448][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.487520][ T5801] veth0_vlan: entered promiscuous mode [ 108.518178][ T5801] veth1_vlan: entered promiscuous mode [ 108.693698][ T5801] veth0_macvtap: entered promiscuous mode [ 108.709649][ T5801] veth1_macvtap: entered promiscuous mode [ 108.731529][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.768981][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.812594][ T5797] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.812922][ T5797] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.814352][ T5797] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.815362][ T5797] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.045757][ T59] Bluetooth: hci0: command tx timeout [ 109.273704][ T5797] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.273724][ T5797] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.335074][ T1184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.335094][ T1184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/07/29 12:25:17 executed programs: 2 [ 109.488733][ T5957] ================================================================== [ 109.488744][ T5957] BUG: KASAN: invalid-free in f_uac2_opts_p_srate_store+0x225/0x2b0 [ 109.488771][ T5957] Free of addr ffff8880360a68c6 by task syz.0.17/5957 [ 109.488779][ T5957] [ 109.488795][ T5957] CPU: 1 UID: 0 PID: 5957 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 109.488809][ T5957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 109.488821][ T5957] Call Trace: [ 109.488825][ T5957] [ 109.488830][ T5957] dump_stack_lvl+0xe8/0x150 [ 109.488847][ T5957] print_address_description+0x55/0x1e0 [ 109.488863][ T5957] print_report+0x58/0x70 [ 109.488875][ T5957] ? f_uac2_opts_p_srate_store+0x225/0x2b0 [ 109.488888][ T5957] kasan_report_invalid_free+0xea/0x110 [ 109.488901][ T5957] ? f_uac2_opts_p_srate_store+0x225/0x2b0 [ 109.488920][ T5957] ? f_uac2_opts_p_srate_store+0x225/0x2b0 [ 109.488933][ T5957] __kasan_slab_pre_free+0x104/0x120 [ 109.488944][ T5957] kfree+0x173/0x6c0 [ 109.488952][ T5957] ? f_uac2_opts_p_srate_store+0x225/0x2b0 [ 109.488966][ T5957] f_uac2_opts_p_srate_store+0x225/0x2b0 [ 109.488980][ T5957] ? __pfx_f_uac2_opts_p_srate_store+0x10/0x10 [ 109.488993][ T5957] ? down_read+0x156/0x200 [ 109.489006][ T5957] ? __pfx_down_read+0x10/0x10 [ 109.489017][ T5957] ? configfs_write_iter+0xf2/0x430 [ 109.489028][ T5957] ? configfs_write_iter+0xf2/0x430 [ 109.489039][ T5957] ? __pfx_f_uac2_opts_p_srate_store+0x10/0x10 [ 109.489053][ T5957] configfs_write_iter+0x33a/0x430 [ 109.489064][ T5957] vfs_write+0x61e/0xbb0 [ 109.489078][ T5957] ? __pfx_vfs_write+0x10/0x10 [ 109.489090][ T5957] ? __pfx_do_futex+0x10/0x10 [ 109.489102][ T5957] ? kmem_cache_free+0x187/0x6c0 [ 109.489116][ T5957] ksys_write+0x156/0x270 [ 109.489127][ T5957] ? __pfx_ksys_write+0x10/0x10 [ 109.489140][ T5957] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.489150][ T5957] do_syscall_64+0x174/0x580 [ 109.489162][ T5957] ? trace_irq_disable+0x3b/0x140 [ 109.489172][ T5957] ? clear_bhb_loop+0x40/0x90 [ 109.489182][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.489192][ T5957] RIP: 0033:0x7f8571a7de99 [ 109.489205][ T5957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.489213][ T5957] RSP: 002b:00007ffd19d11828 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 109.489224][ T5957] RAX: ffffffffffffffda RBX: 00007f8571d05fa0 RCX: 00007f8571a7de99 [ 109.489231][ T5957] RDX: 0000000000000020 RSI: 0000200000000040 RDI: 0000000000000003 [ 109.489238][ T5957] RBP: 00007f8571b13eaf R08: 0000000000000000 R09: 0000000000000000 [ 109.489244][ T5957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.489249][ T5957] R13: 00007f8571d05fac R14: 00007f8571d05fa0 R15: 00007f8571d05fa0 [ 109.489260][ T5957] [ 109.489263][ T5957] [ 109.489266][ T5957] Allocated by task 5957: [ 109.489271][ T5957] kasan_save_track+0x3e/0x80 [ 109.489280][ T5957] __kasan_kmalloc+0x93/0xb0 [ 109.489289][ T5957] __kmalloc_node_track_caller_noprof+0x57f/0x7c0 [ 109.489298][ T5957] kstrdup+0x42/0x100 [ 109.489310][ T5957] f_uac2_opts_p_srate_store+0x11f/0x2b0 [ 109.489322][ T5957] configfs_write_iter+0x33a/0x430 [ 109.489331][ T5957] vfs_write+0x61e/0xbb0 [ 109.489341][ T5957] ksys_write+0x156/0x270 [ 109.489351][ T5957] do_syscall_64+0x174/0x580 [ 109.489360][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.489369][ T5957] [ 109.489371][ T5957] The buggy address belongs to the object at ffff8880360a68c0 [ 109.489371][ T5957] which belongs to the cache kmalloc-32 of size 32 [ 109.489379][ T5957] The buggy address is located 6 bytes inside of [ 109.489379][ T5957] 32-byte region [ffff8880360a68c0, ffff8880360a68e0) [ 109.489388][ T5957] [ 109.489391][ T5957] The buggy address belongs to the physical page: [ 109.489402][ T5957] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880360a6000 pfn:0x360a6 [ 109.489418][ T5957] flags: 0x80000000000200(workingset|node=0|zone=1) [ 109.489429][ T5957] page_type: f5(slab) [ 109.489439][ T5957] raw: 0080000000000200 ffff88813ffb1780 ffffea0000e30c50 ffffea0000d95110 [ 109.489447][ T5957] raw: ffff8880360a6000 000000080040003a 00000000f5000000 0000000000000000 [ 109.489452][ T5957] page dumped because: kasan: bad access detected [ 109.489459][ T5957] page_owner tracks the page as allocated [ 109.489463][ T5957] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5617, tgid 5617 (udevd), ts 90717372327, free_ts 90687047252 [ 109.489480][ T5957] post_alloc_hook+0x1f9/0x250 [ 109.489489][ T5957] get_page_from_freelist+0x262a/0x26a0 [ 109.489499][ T5957] __alloc_frozen_pages_noprof+0x18d/0x380 [ 109.489509][ T5957] allocate_slab+0x79/0x5e0 [ 109.489521][ T5957] refill_objects+0x2d8/0x350 [ 109.489532][ T5957] __pcs_replace_empty_main+0x330/0x690 [ 109.489543][ T5957] __kmalloc_noprof+0x544/0x780 [ 109.489552][ T5957] tomoyo_encode+0x2ad/0x570 [ 109.489564][ T5957] tomoyo_realpath_from_path+0x5fa/0x640 [ 109.489575][ T5957] tomoyo_check_open_permission+0x229/0x470 [ 109.489584][ T5957] security_file_open+0xa9/0x240 [ 109.489594][ T5957] do_dentry_open+0x4be/0x1420 [ 109.489602][ T5957] vfs_open+0x3b/0x350 [ 109.489609][ T5957] path_openat+0x2e60/0x3850 [ 109.489620][ T5957] do_file_open+0x23e/0x4a0 [ 109.489630][ T5957] do_sys_openat2+0x115/0x200 [ 109.489637][ T5957] page last free pid 20 tgid 20 stack trace: [ 109.489643][ T5957] __free_frozen_pages+0x10e7/0x11c0 [ 109.489651][ T5957] tlb_remove_table_rcu+0x85/0x100 [ 109.489662][ T5957] rcu_cpu_kthread+0x950/0x1480 [ 109.489672][ T5957] smpboot_thread_fn+0x57c/0xa80 [ 109.489685][ T5957] kthread+0x388/0x470 [ 109.489698][ T5957] ret_from_fork+0x514/0xb70 [ 109.489712][ T5957] ret_from_fork_asm+0x1a/0x30 [ 109.489720][ T5957] [ 109.489722][ T5957] Memory state around the buggy address: [ 109.489727][ T5957] ffff8880360a6780: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 109.489733][ T5957] ffff8880360a6800: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 109.489739][ T5957] >ffff8880360a6880: fa fb fb fb fc fc fc fc 00 00 00 00 fc fc fc fc [ 109.489744][ T5957] ^ [ 109.489749][ T5957] ffff8880360a6900: 00 00 03 fc fc fc fc fc fa fb fb fb fc fc fc fc [ 109.489754][ T5957] ffff8880360a6980: 00 00 00 00 fc fc fc fc fa fb fb fb fc fc fc fc [ 109.489759][ T5957] ================================================================== [ 109.489768][ T5957] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 109.489775][ T5957] CPU: 1 UID: 0 PID: 5957 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 109.489786][ T5957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 109.489791][ T5957] Call Trace: [ 109.489795][ T5957] [ 109.489798][ T5957] vpanic+0x56c/0xa60 [ 109.489809][ T5957] ? __pfx_vpanic+0x10/0x10 [ 109.489820][ T5957] panic+0xc5/0xd0 [ 109.489828][ T5957] ? __pfx_panic+0x10/0x10 [ 109.489837][ T5957] ? rcu_is_watching+0x15/0xb0 [ 109.489851][ T5957] check_panic_on_warn+0x89/0xb0 [ 109.489861][ T5957] end_report+0x73/0x170 [ 109.489871][ T5957] ? f_uac2_opts_p_srate_store+0x225/0x2b0 [ 109.489884][ T5957] kasan_report_invalid_free+0xfa/0x110 [ 109.489896][ T5957] ? f_uac2_opts_p_srate_store+0x225/0x2b0 [ 109.489914][ T5957] ? f_uac2_opts_p_srate_store+0x225/0x2b0 [ 109.489928][ T5957] __kasan_slab_pre_free+0x104/0x120 [ 109.489938][ T5957] kfree+0x173/0x6c0 [ 109.489946][ T5957] ? f_uac2_opts_p_srate_store+0x225/0x2b0 [ 109.489961][ T5957] f_uac2_opts_p_srate_store+0x225/0x2b0 [ 109.489975][ T5957] ? __pfx_f_uac2_opts_p_srate_store+0x10/0x10 [ 109.489988][ T5957] ? down_read+0x156/0x200 [ 109.489998][ T5957] ? __pfx_down_read+0x10/0x10 [ 109.490009][ T5957] ? configfs_write_iter+0xf2/0x430 [ 109.490024][ T5957] ? configfs_write_iter+0xf2/0x430 [ 109.490035][ T5957] ? __pfx_f_uac2_opts_p_srate_store+0x10/0x10 [ 109.490049][ T5957] configfs_write_iter+0x33a/0x430 [ 109.490060][ T5957] vfs_write+0x61e/0xbb0 [ 109.490073][ T5957] ? __pfx_vfs_write+0x10/0x10 [ 109.490085][ T5957] ? __pfx_do_futex+0x10/0x10 [ 109.490095][ T5957] ? kmem_cache_free+0x187/0x6c0 [ 109.490109][ T5957] ksys_write+0x156/0x270 [ 109.490120][ T5957] ? __pfx_ksys_write+0x10/0x10 [ 109.490133][ T5957] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.490147][ T5957] do_syscall_64+0x174/0x580 [ 109.490158][ T5957] ? trace_irq_disable+0x3b/0x140 [ 109.490167][ T5957] ? clear_bhb_loop+0x40/0x90 [ 109.490177][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.490187][ T5957] RIP: 0033:0x7f8571a7de99 [ 109.490194][ T5957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.490202][ T5957] RSP: 002b:00007ffd19d11828 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 109.490212][ T5957] RAX: ffffffffffffffda RBX: 00007f8571d05fa0 RCX: 00007f8571a7de99 [ 109.490219][ T5957] RDX: 0000000000000020 RSI: 0000200000000040 RDI: 0000000000000003 [ 109.490225][ T5957] RBP: 00007f8571b13eaf R08: 0000000000000000 R09: 0000000000000000 [ 109.490231][ T5957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.490236][ T5957] R13: 00007f8571d05fac R14: 00007f8571d05fa0 R15: 00007f8571d05fa0 [ 109.490247][ T5957] [ 109.490780][ T5957] Kernel Offset: disabled