program: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./myconfig/usb_gadget/g1\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./myconfig/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./myconfig/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./myconfig/usb_gadget/g1/functions/uac2.usb0/p_srate\x00', 0x1, 0x0) write(r0, &(0x7f0000000040)='44104,48000,88200I96000,176400,192000,352800,384p00,70560', 0x39) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x30, r3, 0x5, 0x0, 0x2, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}]}]}, 0x30}}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000780), r1) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000800)={0x102c, r5, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x1018, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "a6cc24f6bf5d3d0fa264d92f325e01cb8e254106381409c4dd6aec663fba214cc16717c478bc44dd54671c7eaf206bc6343cff8fbafe3c7c03b21fa01cd3aafd20681a32e6ed7dc1430510cc59204c83fe0edde440b9dfe800e9cdf030426afe7f307688edab4146974e09b50e9dc9e4c7c658ea016683832e17a05b80adbb264a9d58b22f30717353799e5cdd794f4b8ef4740862d7527725473f8f45bc6046f0201ced4ceed2f2fbe60f335336668d6624268823b9ecadf476da8c84aa446b97cb2b659b1a7bd915f48773bf5abd60b42070c0df76a6bfd41d7534161b0fa423a012743b822aee164e1837d9288691396d29788dc536f669f20b7d7ad86b0da6a89df6c528e6f509f5f1ee6e40e68af49a78857444cb275654ede28dff5bc43d0728c8d5ae5d00ee88f3e0abae8b54ba2c04f62fd3a1e1c05f8a1f554ba8b909ba1c3a7c7186f45b5cc6d0cfdbfed363f52c480e6f695b8ecb8d0271df94f7c8902a01d78c77b45b1236ad949aa9a3a4291fe5de005a2c37bd56e8082f0b0c541ebcda1a5973e6c870e7bcbd3225d8006d2ec91e981fef7dd5d8c3c16ddb1c6079d58bf9c3ee691bf4cd3bc67814e0480b68737974b7b374b24ef40cd298b1a9f1088cf4063e0c8e915b243f0b162e7bb1ae8ee2405632235b735c6d4ab2a9eb688593dfc81b02d66864061ddd1d8c62b485933e5ab5f383d4b0df4e82255e6774c3e176bf6fc3ec3c3330a7bb9c5a21736aa37cfa8796668245d67dcaeff55d7eeb96aa4acea843007dddf1185bef4c8a1a79f6c454092f6c41936ac6e3183aff9e3411b85f57d5776ba7dc0a952b1b4bcbade07e3f8526cb62e8e834bba59f88ebeba54c7f0cc068fabf6173ab221d0a976315e150551e48797668b5e66b0abbed98a223deaf93533b060974f53f4953ad77d856d67799e8110490672f46401ba015b79b5a62f48ea231e30ef1da2a3d5e1544d8acee53e8e5fd7e30779410bf93561ebbbb4f017d675c92d5b75f7801db09f3788a6d242eeddbd2fa3260ccd463ddbf53b3a9acc2b751d5bc95419d5f71e86b3240404916f7aac27d240eac7ea2d182114cb1d992070415b50f8b838dfde69a636c633ac6c8b8daeb2633264dd905bef8d49c8bedf504313a2ba415cd3fca0c510aa2c6b83594f801bc7f905fff55fb21b36a5747a31bbcf1571d8663772cfa47aec849e0f4e67f47183cd4b94191d6c674497b18bad129cfbeaf3f180d5f2f7174d560ae4b88bfbc38e92a46d26c1173e13fdd12292525f40aa1970eb21d6b44049e0f1e739151b12efefa668e29e85f4a31d35fb9e1df8e3a933b6c63af8420f6e82e819014117805b96a553e36a2bc8c08018a96799827d41bbd30a5725779e7f20d5765708b9de20b7e35dbf562665e53de0cebaa0df7d332cefb9e8276de43317f848679beb1d9f5bb73eb6aab599c5b351751bd23d75d6d1915f21c463ac4c163278713d7ad66b87d8b1af2edd970faf595eb08c4f11aa2e5d4dcbc46142af7f8fe4a634fe3e3160c9b601f922754e00a2bbe5272168d1e3415f23dafb114363f0826f29de14fbe924a44eeec690b9b047d109ca11ca23ab03e5dbe8b5d5ddbcbc1ee379c18c41b2e2aaeb8aafd19b7d6de8b3ca01bac847344bfc930657c11ab1fa593eb080d44a13643c3d5ca9bd9167ac64f9ce7dd4a4ac5136ea828e571fc3648a1159b33da1c275809fb032cb7502941f188bc9b22c302b85318f211ab507a00ff2f7f93ded6abc8489535287b46485d6fe481dc2c5f2cadb44c38def83bef107b113d3e144d6e10551dd14137c022b56988af8b043219892f435848f0431a15cfee9a6b6e2cac6b10d70189c53ecb8419e98e0ddfba58940e6a78479429e270bd02f751e67649b29b10fabed6bab0502020e42481767e83cc51d2689df602d681d096243a9dd7e7744ffc63eec8460d3ca7ad6dd24c8f31df5159cd4562cd36eb87c74fc8888a441bb65ffae8c8c1c62071c7bddae86ef4ba0ab4a0e06f0c73833d5d9a3ce37299bbeae3d0d3594e3a6184432693a818623d0a8493e5ba0a604697b523b1038c57ea351d716089b6087171d44b72f22a87887a70d98d659bb101aec0a5c568966ec9c6fa31efbd799f25f339212aed88c8348c9ad33799b9daae201380d792ee569613966ab257f4d1ef094cd17a81b11e957614b96fb95036c6e28e69f65971502bebd060497ad994aef7c2b6299fd11fc289bef3961da43c10b6cc9a8b15954ef775c9cc25a0148d7eb4d52a20e214cb2979532c3e5a40290ed1f9dadff461e92f26ed2d9db548bffa592d033e4f8ff32dae14bdc6164f5ae4ea0e66ea5d67811fb9c154c2da4dd5fadda26a349d64468b30e157f2e71324150355dec976498d87e15e95ab0b2e5ee69acb7bcf52d6b0496dfe1a0fdc8041d843d401b8deed074ea6151f9862cba702623af0d4f0604ae24793f83d2278eea58a36ef799ca1e232869427b06cf0d8511c5a44180a28609f2f430bdd0e630d8b2e007ec261304b9dff2874e9b15f097796fe5dcb9ca65cfebef80867e9a096e68b3d27eda1d9ba1a99a3cb0a98fa42bf837eb12df811c5681dfd7bb1c47bd8c32d8aa08cd46819b4f8b23939df7b13219293f8f9b7c2499b3053c10815b18f9fbcf2e9788ff26ae8fabb8aec6010aab2be5cfd0df97d902c876edd71b8cb18ae94c49c30eabba0ca2f38dafc929a684373f7ed2043f275ec9700567da54b0ad8f22f88e07d50005685efb812a2383344fa28d65448f916de5a4afc8caee1b02f7dbf0519a63a4aff46d0ece256e9bce886b0a64e480fcc58a7745b816698b62fcab103785e357c0142427cc1fee898606c4711d8e7915bede6277497bce07416aeb797288ba4e34a83ff16642c49c592ce559426dbc36d5622920d2ef412a5a02cb9af6057f390921b3059911df11108bad6af1a172961348a723131a64afcf17f28441ac467db8c624fed392a64a1ccfd4fb58d149d9ca54ecbe9d3f3ba293434136a8ae80d585d319a0519fde7a199ec8d6c6a29ad87e0fdb42a443d97d78d402853577e49a87cfce8b8584b4c790f714bee3b01097e2a8922cef7a0ceab1f0f0d8302b592e9eab56426f79232cabfad1c4f6af5497a79aab12d1352cc46053ed408cbb531293ccb88e7b2d46edb095c81fd55a89968f81303970232b0cda6f6ec9a04b5ca2e861afb3635cf3b9394d134e6a1dda5c0ace29a3464d423fd9bb54b11872275193d4c7cd27fc61bc60fe12a86eafe3ced51499d0ff3e56d220866d00e7214e212146c412b70fa9c1407db1c8ea0c1a2d6d825146d7c090c979c3faa504cbbfa5be8c8b1229d227e9b184cc4414e4224070acf6e2cfb9d38efd0cc7c1116be603b9bcdc3b59b33fc31bf3291df0631440c17563901eeb993cd2cd6137a0e44e3c72184c9bec33f7f565b0bf1554b6844b2c67a78997cd32410a79911d7c3a31abe76dcc35cae72b4ef3eb208073ac5ff2d193e776c3ca822d186b29794de5d5f317435359e8d23fd7e05623ce10149465db1aaa9f99f7dec1c70cef9b1e81048649731ed00299d9bf4409ee40cdef62bb6c6867079dc81d91385c35a1464f1ddfb459b9aacd79c0867f8c48c9f59813853738748088161764a44cee7432c25493b3321368065dca155a8b80d1e5682e03bb988c7c39109b1cbdeb9de95ecd53ea4191aa2d56c64a16c04e3508338de17e7420f3d48de7e96944ad0e3edcdf2266f8b0ae6d3584562cabe2561a3ecd92cb65d2edbf1aaadd89d5d79e2f237fac1d72848b0cb1fe0cb9c8802862e9238a6185193b5fa640d3b71d5834f0b1ab343d0141567b2c4e075f00ef64f9feb6140c00d42c59650689ce923511c92ef481e5c5fb44390692349bbbe131e02bd8be5402f295f79db24fb8abe2db593604bf1c35a99630145ecf7fc8dbbbc35b2f18e72edba00e5a0f849ba044e21e7c270df156c2bad670b0f4b99c1a212c50aad6c57a6f7c9adffa3e30da6cccc58558aab751ffc6ffbddef3d7fa7c5cc3decc68d424f37b839b215aa484b955311d321b16655b5bffc93cd9c459c12a07f729195eb87b44f06aa8f623d224ff5d8a5adf75534bee2bc0ff945a6767556ceeb09e077b82919d9b8c5686a318e33d4b7ceec41229f5a4beb46c2e078790783b3d9d19afd3cb52cd42b7867db3352d2e98d948ee102b6531ce3a954bd9ac59e4e3eba4ea08241634ffcd045bd8a07655e4c9cdb8ed0f760c94c995c1cb53023c3345435b399b5324afdf17592d18e2d47a15206c4f8e723b85b7b5695af8301fba4fdb83ed332dfd569fd9f969f937fd8cdb0044fb017ae5755e7876c0c555cacc19df953e497e9102de0d14b5936f02269dfe08cdb9556d1fc22e86fe2aecea19ce85c20c9f60f78c90bae4da076b44d352a25733d37e1d64d0aeae630a23108fed878edc62e9c7e6de12208f72705714f8ddb86226127a2b2f65b01aeee4e59de006bdd7cc7631e854389745eb982f334451498eea97fb6591a11233eac8a579809a5c9ea63ec549c12a19a570ff459f17eebb59f11219176987c4b2bb68ab10175d69d1e4b95d1b378f424a187939074ad4558865599a9b2c78e6b1e2df43f8a02fa0a69c2a20ea2eaf6d6ffa7671e850b7c7d6364d51316997a7718ff2166edb9a49a7af24c31f4cc51dae5bb9db43f7512cda686f7bf4b5a0b96e53f7fe0188ebd4614476716f43f0bd9889e44a4cb1efdad9775010c59e99fe56a5cf37c08a90e09eb55707bcd86e01625750f19936043f583ca3bfc70c5996a0ad529a6dca818df7323d8d920080e38081764a2e81444a39a2d3aabc906a3c41abc31b2dda633d350d060cb85c09c27ce0744d9045420684c77a4525c04eb4e419ba5498177954c51275c9460a266a6765080ab08fe5f5b89e7f6b9f1e2afb43ad68186efdc059f05a5bbb0f4b4bacb40045c37a956a9957fdb5a8f1659ef6a7a6f739c70eb656f72600d5e111cf91d9ff3e5c32bcb259a65b5aee9d0836370dd825b41ef1f09b9339039018c7d75adcaebe9aefa7c9aa751cd0f30db4889eba08309dc6f8d15940e0ad6f4909117969e4a9dcb7df41c8e3e7511b4b0505bc10aac6279f900d29663cac0fefecf7b707497a394ce0f6e06f10f0ecbf7231c90992670b4174b9e172862a0a4f90f5c38fd8aaef756e1f7c9f6217b2ec1a7741a8e64c42640e168293b843e678c9b51fdfb0bdf9b92bd320f68a7a15ded6d307fd69ca9e0c26174e95e5bf06e5e0a528bc4f5e9da74a6ead38332feaa9f4a899748a8597f8381ec258a2565639b14eaa6db3f47d013ca6327002c476ea74fb569ba8f5e3b381433255ce2f9e0d39fce4d23fd63a8e185845418f1166779233f37ca2a4a7dccd1950ffd51094bfb711dba7fd2db4dc0dbd5a8ca5522af9908c9a164559cea23d019b9f2e69fc2a8d06c2a7233147e89b5e69ceaa8b388bb1efc36c4928a27ce78ff8650e183b39fa6265a6872cae885767e35fa38ded6987847937095fd914e72a9e8f93e41029848fd024c37dbb0292919459d2022ecfe05a541777c6ac68514280b115e386f6dcd80fdb9d3098f443d8f009e3c9197502b81bb59ee87e745a1c71e64d9236ee3ce8455f4e5b53c400556f8b499576034f7755c60ee9bc5838c855df65c0c1eb2ad8391aeac4a4193c8258752c4d12e693ed905620df22477479db4f861f8cd2e44778370fe68628f597d809d013555e5beee0fe8c947e41f77d1d57b7586760ae0c9b6884ad653"}]}]}, 0x102c}, 0x1, 0x0, 0x0, 0x800}, 0x80) symlinkat(&(0x7f0000000580)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./myconfig/usb_gadget/g1/configs/c.1/uac2.usb0\x00') openat(0xffffffffffffff9c, &(0x7f0000000600)='./myconfig/usb_gadget/g1/UDC\x00', 0x1, 0x0) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./myconfig/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r6, &(0x7f0000000640)='usbip-vudc.0', 0xc) (async) write(r6, &(0x7f0000000640)='usbip-vudc.0', 0xc) [ 94.410936][ T4642] Bluetooth: hci0: command tx timeout [ 94.520122][ T5320] ================================================================== [ 94.523781][ T5320] BUG: KASAN: invalid-free in f_uac2_opts_p_srate_store+0x225/0x2b0 [ 94.527299][ T5320] Free of addr ffff888000211198 by task syz.0.0/5320 [ 94.530198][ T5320] [ 94.531313][ T5320] CPU: 0 UID: 0 PID: 5320 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 94.531328][ T5320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.531334][ T5320] Call Trace: [ 94.531342][ T5320] [ 94.531347][ T5320] dump_stack_lvl+0xe8/0x150 [ 94.531366][ T5320] print_address_description+0x55/0x1e0 [ 94.531380][ T5320] print_report+0x58/0x70 [ 94.531391][ T5320] ? f_uac2_opts_p_srate_store+0x225/0x2b0 [ 94.531403][ T5320] kasan_report_invalid_free+0xea/0x110 [ 94.531417][ T5320] ? f_uac2_opts_p_srate_store+0x225/0x2b0 [ 94.531429][ T5320] ? f_uac2_opts_p_srate_store+0x225/0x2b0 [ 94.531440][ T5320] __kasan_slab_pre_free+0x104/0x120 [ 94.531453][ T5320] kfree+0x173/0x640 [ 94.531462][ T5320] ? f_uac2_opts_p_srate_store+0x225/0x2b0 [ 94.531474][ T5320] f_uac2_opts_p_srate_store+0x225/0x2b0 [ 94.531487][ T5320] ? __pfx_f_uac2_opts_p_srate_store+0x10/0x10 [ 94.531498][ T5320] ? down_read+0x2be/0x330 [ 94.531512][ T5320] ? __pfx_f_uac2_opts_p_srate_store+0x10/0x10 [ 94.531523][ T5320] configfs_write_iter+0x337/0x430 [ 94.531543][ T5320] vfs_write+0x612/0xba0 [ 94.531561][ T5320] ? __pfx_vfs_write+0x10/0x10 [ 94.531577][ T5320] ? __fget_files+0x2a/0x420 [ 94.531594][ T5320] ksys_write+0x150/0x270 [ 94.531603][ T5320] ? __pfx_ksys_write+0x10/0x10 [ 94.531619][ T5320] do_syscall_64+0x166/0x520 [ 94.531632][ T5320] ? trace_irq_disable+0x3b/0x140 [ 94.531647][ T5320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.531657][ T5320] ? clear_bhb_loop+0x70/0xc0 [ 94.531668][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.531678][ T5320] RIP: 0033:0x7f4f55f9e0d9 [ 94.531689][ T5320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.531698][ T5320] RSP: 002b:00007f4f523f4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 94.531710][ T5320] RAX: ffffffffffffffda RBX: 00007f4f56225fa0 RCX: 00007f4f55f9e0d9 [ 94.531717][ T5320] RDX: 0000000000000039 RSI: 0000200000000040 RDI: 0000000000000003 [ 94.531724][ T5320] RBP: 00007f4f56035024 R08: 0000000000000000 R09: 0000000000000000 [ 94.531729][ T5320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.531736][ T5320] R13: 00007f4f56226038 R14: 00007f4f56225fa0 R15: 00007fff057aefe8 [ 94.531747][ T5320] [ 94.531751][ T5320] [ 94.629182][ T5320] Allocated by task 5320: [ 94.631132][ T5320] kasan_save_track+0x3e/0x80 [ 94.633155][ T5320] __kasan_kmalloc+0x93/0xb0 [ 94.635179][ T5320] __kmalloc_node_track_caller_noprof+0x4c7/0x740 [ 94.637900][ T5320] kstrdup+0x42/0x100 [ 94.639550][ T5320] f_uac2_opts_p_srate_store+0x11f/0x2b0 [ 94.641990][ T5320] configfs_write_iter+0x337/0x430 [ 94.644089][ T5320] vfs_write+0x612/0xba0 [ 94.645849][ T5320] ksys_write+0x150/0x270 [ 94.647613][ T5320] do_syscall_64+0x166/0x520 [ 94.649491][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.651884][ T5320] [ 94.653238][ T5320] The buggy address belongs to the object at ffff888000211180 [ 94.653238][ T5320] which belongs to the cache kmalloc-64 of size 64 [ 94.658774][ T5320] The buggy address is located 24 bytes inside of [ 94.658774][ T5320] 58-byte region [ffff888000211180, ffff8880002111ba) [ 94.664170][ T5320] [ 94.665218][ T5320] The buggy address belongs to the physical page: [ 94.667714][ T5320] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x211 [ 94.671347][ T5320] flags: 0x7ff00000000000(node=0|zone=0|lastcpupid=0x7ff) [ 94.674284][ T5320] page_type: f5(slab) [ 94.676005][ T5320] raw: 007ff00000000000 ffff88801b0418c0 dead000000000100 dead000000000122 [ 94.679541][ T5320] raw: 0000000000000000 0000000800200020 00000000f5000000 0000000000000000 [ 94.682965][ T5320] page dumped because: kasan: bad access detected [ 94.685522][ T5320] page_owner tracks the page as allocated [ 94.687581][ T5320] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 8418808852 [ 94.695218][ T5320] post_alloc_hook+0x1f9/0x250 [ 94.697386][ T5320] get_page_from_freelist+0x2209/0x2280 [ 94.699838][ T5320] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 94.702319][ T5320] allocate_slab+0x7c/0x5e0 [ 94.704330][ T5320] refill_objects+0x2d5/0x350 [ 94.706438][ T5320] __pcs_replace_empty_main+0x2c3/0x6b0 [ 94.708852][ T5320] __kmalloc_cache_noprof+0x3ab/0x660 [ 94.711232][ T5320] iommu_group_alloc_device+0x57/0x3a0 [ 94.713604][ T5320] __iommu_probe_device+0x8ea/0x1260 [ 94.715746][ T5320] probe_iommu_group+0x2e/0x60 [ 94.717659][ T5320] bus_for_each_dev+0x23b/0x2c0 [ 94.719677][ T5320] bus_iommu_probe+0xc5/0x470 [ 94.721564][ T5320] iommu_device_register+0x1af/0x210 [ 94.723468][ T5320] intel_iommu_init+0x6dc/0x8a0 [ 94.725542][ T5320] pci_iommu_init+0x38/0x70 [ 94.727511][ T5320] do_one_initcall+0x250/0x870 [ 94.729575][ T5320] page_owner free stack trace missing [ 94.731925][ T5320] [ 94.732998][ T5320] Memory state around the buggy address: [ 94.735490][ T5320] ffff888000211080: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 94.738797][ T5320] ffff888000211100: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 94.742208][ T5320] >ffff888000211180: 00 00 00 00 00 00 00 02 fc fc fc fc fc fc fc fc [ 94.745737][ T5320] ^ [ 94.747855][ T5320] ffff888000211200: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 94.751251][ T5320] ffff888000211280: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 94.754556][ T5320] ================================================================== [ 94.789871][ T5320] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 94.792914][ T5320] CPU: 0 UID: 0 PID: 5320 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 94.796767][ T5320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.801085][ T5320] Call Trace: [ 94.802564][ T5320] [ 94.803879][ T5320] vpanic+0x56d/0xa60 [ 94.805628][ T5320] ? __pfx_vpanic+0x10/0x10 [ 94.807554][ T5320] ? __pfx___schedule+0x10/0x10 [ 94.809682][ T5320] panic+0xc5/0xd0 [ 94.811345][ T5320] ? __pfx_panic+0x10/0x10 [ 94.813260][ T5320] ? preempt_schedule_common+0x7f/0xd0 [ 94.815550][ T5320] check_panic_on_warn+0x89/0xb0 [ 94.817580][ T5320] end_report+0x73/0x170 [ 94.819379][ T5320] ? f_uac2_opts_p_srate_store+0x225/0x2b0 [ 94.821753][ T5320] kasan_report_invalid_free+0xfa/0x110 [ 94.824132][ T5320] ? f_uac2_opts_p_srate_store+0x225/0x2b0 [ 94.826606][ T5320] ? f_uac2_opts_p_srate_store+0x225/0x2b0 [ 94.829095][ T5320] __kasan_slab_pre_free+0x104/0x120 [ 94.831390][ T5320] kfree+0x173/0x640 [ 94.832919][ T5320] ? f_uac2_opts_p_srate_store+0x225/0x2b0 [ 94.835328][ T5320] f_uac2_opts_p_srate_store+0x225/0x2b0 [ 94.837667][ T5320] ? __pfx_f_uac2_opts_p_srate_store+0x10/0x10 [ 94.840199][ T5320] ? down_read+0x2be/0x330 [ 94.842049][ T5320] ? __pfx_f_uac2_opts_p_srate_store+0x10/0x10 [ 94.844495][ T5320] configfs_write_iter+0x337/0x430 [ 94.846570][ T5320] vfs_write+0x612/0xba0 [ 94.848374][ T5320] ? __pfx_vfs_write+0x10/0x10 [ 94.850450][ T5320] ? __fget_files+0x2a/0x420 [ 94.852297][ T5320] ksys_write+0x150/0x270 [ 94.854097][ T5320] ? __pfx_ksys_write+0x10/0x10 [ 94.856221][ T5320] do_syscall_64+0x166/0x520 [ 94.858240][ T5320] ? trace_irq_disable+0x3b/0x140 [ 94.860422][ T5320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.863026][ T5320] ? clear_bhb_loop+0x70/0xc0 [ 94.865003][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.867590][ T5320] RIP: 0033:0x7f4f55f9e0d9 [ 94.869492][ T5320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.877381][ T5320] RSP: 002b:00007f4f523f4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 94.880928][ T5320] RAX: ffffffffffffffda RBX: 00007f4f56225fa0 RCX: 00007f4f55f9e0d9 [ 94.884328][ T5320] RDX: 0000000000000039 RSI: 0000200000000040 RDI: 0000000000000003 [ 94.887743][ T5320] RBP: 00007f4f56035024 R08: 0000000000000000 R09: 0000000000000000 [ 94.891164][ T5320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.894517][ T5320] R13: 00007f4f56226038 R14: 00007f4f56225fa0 R15: 00007fff057aefe8 [ 94.897850][ T5320] [ 94.899578][ T5320] Kernel Offset: disabled [ 94.901393][ T5320] Rebooting in 86400 seconds..