program:
r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000340)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x1000, 0x3a, '\\x00#\x00', 0x3a, '/dev/bus/usb/00#/00#\x00', 0x3a, './config/usb_gadget/g1'}, 0x51)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000000)="240000001a005f0414f9f4070009040081020000000000000000000008000f0001000000", 0x24)
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0)
r2 = syz_open_dev$vbi(&(0x7f0000000a00), 0x3, 0x2)
ioctl$VIDIOC_S_STD(r2, 0x40085618, &(0x7f0000000000)=0x800)
shmat(0x0, 0x0, 0x4000)
ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, &(0x7f0000000100)={0xfff7, [0x7, 0x6, 0x401, 0x4, 0x1, 0x0, 0x9, 0x8, 0x2, 0x7f, 0x4, 0xf, 0x8, 0xf1, 0xd, 0xffff, 0xfbed, 0x0, 0x50, 0x9, 0x31, 0x7fff, 0xbb, 0x7ff, 0x7, 0x5, 0x0, 0x5, 0x0, 0x3, 0x1000, 0x3, 0x81, 0x209, 0x1040, 0x9c6, 0x7, 0x200, 0x8, 0x2, 0x9, 0xe, 0x7, 0x6, 0x1, 0x35d, 0x8000, 0x100], 0x7})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uac1_legacy.usb0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
rmdir(&(0x7f00000001c0)='./config/usb_gadget/g1\x00')
symlinkat(&(0x7f0000000200)='./config/usb_gadget/g1/functions/uac1_legacy.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1/uac1_legacy.usb0\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r3, &(0x7f0000000400)='dummy_udc.0\n\x00', 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x7c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000240)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
nanosleep(&(0x7f0000000500)={0x0, 0x2faf080}, 0x0)
openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) (async)
write$binfmt_register(r0, &(0x7f0000000340)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x1000, 0x3a, '\\x00#\x00', 0x3a, '/dev/bus/usb/00#/00#\x00', 0x3a, './config/usb_gadget/g1'}, 0x51) (async)
socket(0x10, 0x3, 0x0) (async)
write(r1, &(0x7f0000000000)="240000001a005f0414f9f4070009040081020000000000000000000008000f0001000000", 0x24) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) (async)
syz_open_dev$vbi(&(0x7f0000000a00), 0x3, 0x2) (async)
ioctl$VIDIOC_S_STD(r2, 0x40085618, &(0x7f0000000000)=0x800) (async)
shmat(0x0, 0x0, 0x4000) (async)
ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, &(0x7f0000000100)={0xfff7, [0x7, 0x6, 0x401, 0x4, 0x1, 0x0, 0x9, 0x8, 0x2, 0x7f, 0x4, 0xf, 0x8, 0xf1, 0xd, 0xffff, 0xfbed, 0x0, 0x50, 0x9, 0x31, 0x7fff, 0xbb, 0x7ff, 0x7, 0x5, 0x0, 0x5, 0x0, 0x3, 0x1000, 0x3, 0x81, 0x209, 0x1040, 0x9c6, 0x7, 0x200, 0x8, 0x2, 0x9, 0xe, 0x7, 0x6, 0x1, 0x35d, 0x8000, 0x100], 0x7}) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uac1_legacy.usb0\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) (async)
rmdir(&(0x7f00000001c0)='./config/usb_gadget/g1\x00') (async)
symlinkat(&(0x7f0000000200)='./config/usb_gadget/g1/functions/uac1_legacy.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1/uac1_legacy.usb0\x00') (async)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) (async)
write(r3, &(0x7f0000000400)='dummy_udc.0\n\x00', 0xc) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x7c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000240)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async)
nanosleep(&(0x7f0000000500)={0x0, 0x2faf080}, 0x0) (async)
[ 94.388115][ T5327] configfs-gadget.g1 gadget.0: Hardware params: access 3, format 2, channels 2, rate 48000
[ 94.393388][ T5327] udc dummy_udc.0: failed to start g1: -19
[ 94.398075][ T5327] UDC core: g1: couldn't find an available UDC or it's busy
[ 94.431619][ T44] Bluetooth: hci0: command tx timeout
[ 94.508126][ T5328] ==================================================================
[ 94.511457][ T5328] BUG: KASAN: slab-use-after-free in filp_flush+0x31/0x190
[ 94.514545][ T5328] Read of size 8 at addr ffff88803fdd4698 by task syz.0.0/5328
[ 94.517678][ T5328]
[ 94.518750][ T5328] CPU: 0 UID: 0 PID: 5328 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 94.518764][ T5328] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 94.518770][ T5328] Call Trace:
[ 94.518777][ T5328]
[ 94.518783][ T5328] dump_stack_lvl+0xe8/0x150
[ 94.518801][ T5328] print_address_description+0x55/0x1e0
[ 94.518816][ T5328] ? filp_flush+0x31/0x190
[ 94.518828][ T5328] print_report+0x58/0x70
[ 94.518841][ T5328] kasan_report+0x117/0x150
[ 94.518856][ T5328] ? filp_flush+0x31/0x190
[ 94.518870][ T5328] kasan_check_range+0x264/0x2c0
[ 94.518884][ T5328] filp_flush+0x31/0x190
[ 94.518895][ T5328] filp_close+0x1d/0x40
[ 94.518907][ T5328] gaudio_cleanup+0x54/0xf0
[ 94.518957][ T5328] f_audio_bind+0x4a0/0x630
[ 94.518974][ T5328] ? __pfx_f_audio_bind+0x10/0x10
[ 94.518985][ T5328] ? rcu_is_watching+0x15/0xb0
[ 94.518996][ T5328] ? usb_gadget_set_selfpowered+0xf5/0x260
[ 94.519007][ T5328] usb_add_function+0x2e1/0x9f0
[ 94.519021][ T5328] ? check_remote_wakeup_config+0x58/0x1c0
[ 94.519036][ T5328] configfs_composite_bind+0xde0/0x1410
[ 94.519053][ T5328] ? __pfx_configfs_composite_bind+0x10/0x10
[ 94.519067][ T5328] gadget_bind_driver+0x2ca/0x9e0
[ 94.519081][ T5328] ? __pfx_gadget_bind_driver+0x10/0x10
[ 94.519092][ T5328] really_probe+0x254/0xae0
[ 94.519138][ T5328] __driver_probe_device+0x1e8/0x360
[ 94.519150][ T5328] driver_probe_device+0x4f/0x240
[ 94.519161][ T5328] __driver_attach+0x339/0x600
[ 94.519171][ T5328] bus_for_each_dev+0x23b/0x2c0
[ 94.519185][ T5328] ? __pfx___driver_attach+0x10/0x10
[ 94.519195][ T5328] ? __pfx_bus_for_each_dev+0x10/0x10
[ 94.519210][ T5328] ? do_raw_spin_unlock+0x4d/0x210
[ 94.519223][ T5328] bus_add_driver+0x345/0x670
[ 94.519238][ T5328] driver_register+0x23a/0x320
[ 94.519250][ T5328] usb_gadget_register_driver_owner+0xf9/0x270
[ 94.519263][ T5328] gadget_dev_desc_UDC_store+0x1c9/0x2f0
[ 94.519275][ T5328] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10
[ 94.519288][ T5328] configfs_write_iter+0x337/0x430
[ 94.519303][ T5328] vfs_write+0x612/0xba0
[ 94.519317][ T5328] ? __pfx_vfs_write+0x10/0x10
[ 94.519333][ T5328] ? __fget_files+0x2a/0x420
[ 94.519347][ T5328] ksys_write+0x150/0x270
[ 94.519362][ T5328] ? __pfx_ksys_write+0x10/0x10
[ 94.519378][ T5328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.519389][ T5328] do_syscall_64+0x174/0x580
[ 94.519402][ T5328] ? trace_irq_disable+0x3b/0x140
[ 94.519415][ T5328] ? clear_bhb_loop+0x40/0x90
[ 94.519426][ T5328] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.519436][ T5328] RIP: 0033:0x7fa44179df99
[ 94.519449][ T5328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 94.519457][ T5328] RSP: 002b:00007fa44262cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 94.519469][ T5328] RAX: ffffffffffffffda RBX: 00007fa441a26090 RCX: 00007fa44179df99
[ 94.519476][ T5328] RDX: 000000000000000c RSI: 0000200000000400 RDI: 0000000000000007
[ 94.519482][ T5328] RBP: 00007fa441834ec4 R08: 0000000000000000 R09: 0000000000000000
[ 94.519489][ T5328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 94.519495][ T5328] R13: 00007fa441a26128 R14: 00007fa441a26090 R15: 00007ffffd675cf8
[ 94.519506][ T5328]
[ 94.519509][ T5328]
[ 94.656343][ T5328] Allocated by task 5327:
[ 94.658206][ T5328] kasan_save_track+0x3e/0x80
[ 94.660281][ T5328] __kasan_slab_alloc+0x6c/0x80
[ 94.662313][ T5328] kmem_cache_alloc_noprof+0x2a0/0x5f0
[ 94.664409][ T5328] alloc_empty_file+0x5b/0x1d0
[ 94.666384][ T5328] path_openat+0x8f/0x3830
[ 94.668224][ T5328] do_file_open+0x23e/0x4a0
[ 94.670140][ T5328] filp_open+0x16d/0x1d0
[ 94.671920][ T5328] gaudio_setup+0x11b/0xf10
[ 94.673866][ T5328] f_audio_bind+0x137/0x630
[ 94.675855][ T5328] usb_add_function+0x2e1/0x9f0
[ 94.677886][ T5328] configfs_composite_bind+0xde0/0x1410
[ 94.680175][ T5328] gadget_bind_driver+0x2ca/0x9e0
[ 94.682217][ T5328] really_probe+0x254/0xae0
[ 94.684183][ T5328] __driver_probe_device+0x1e8/0x360
[ 94.686417][ T5328] driver_probe_device+0x4f/0x240
[ 94.688434][ T5328] __driver_attach+0x339/0x600
[ 94.690310][ T5328] bus_for_each_dev+0x23b/0x2c0
[ 94.692234][ T5328] bus_add_driver+0x345/0x670
[ 94.694120][ T5328] driver_register+0x23a/0x320
[ 94.696021][ T5328] usb_gadget_register_driver_owner+0xf9/0x270
[ 94.698547][ T5328] gadget_dev_desc_UDC_store+0x1c9/0x2f0
[ 94.700845][ T5328] configfs_write_iter+0x337/0x430
[ 94.702953][ T5328] vfs_write+0x612/0xba0
[ 94.704808][ T5328] ksys_write+0x150/0x270
[ 94.706670][ T5328] do_syscall_64+0x174/0x580
[ 94.708613][ T5328] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.711144][ T5328]
[ 94.712213][ T5328] Freed by task 4998:
[ 94.713915][ T5328] kasan_save_track+0x3e/0x80
[ 94.716010][ T5328] kasan_save_free_info+0x40/0x50
[ 94.718120][ T5328] __kasan_slab_free+0x5c/0x80
[ 94.720178][ T5328] slab_free_after_rcu_debug+0x12a/0x220
[ 94.722498][ T5328] rcu_core+0x78b/0x10a0
[ 94.724350][ T5328] handle_softirqs+0x225/0x840
[ 94.726305][ T5328] __irq_exit_rcu+0xca/0x220
[ 94.728292][ T5328] irq_exit_rcu+0x9/0x30
[ 94.730172][ T5328] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 94.732553][ T5328] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 94.735121][ T5328]
[ 94.736204][ T5328] Last potentially related work creation:
[ 94.738474][ T5328] kasan_save_stack+0x3e/0x60
[ 94.740398][ T5328] kasan_record_aux_stack+0xbd/0xd0
[ 94.742637][ T5328] kmem_cache_free+0x44f/0x650
[ 94.744631][ T5328] task_work_run+0x1d9/0x270
[ 94.746583][ T5328] exit_to_user_mode_loop+0x1fa/0x730
[ 94.748781][ T5328] do_syscall_64+0x353/0x580
[ 94.750806][ T5328] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.753293][ T5328]
[ 94.754365][ T5328] Second to last potentially related work creation:
[ 94.757132][ T5328] kasan_save_stack+0x3e/0x60
[ 94.759038][ T5328] kasan_record_aux_stack+0xbd/0xd0
[ 94.761208][ T5328] task_work_add+0xae/0x420
[ 94.763146][ T5328] __fput_deferred+0x143/0x380
[ 94.765174][ T5328] fput_close+0x11f/0x240
[ 94.767005][ T5328] filp_close+0x27/0x40
[ 94.768783][ T5328] gaudio_cleanup+0x54/0xf0
[ 94.770741][ T5328] f_audio_bind+0x4a0/0x630
[ 94.772681][ T5328] usb_add_function+0x2e1/0x9f0
[ 94.774728][ T5328] configfs_composite_bind+0xde0/0x1410
[ 94.777040][ T5328] gadget_bind_driver+0x2ca/0x9e0
[ 94.779286][ T5328] really_probe+0x254/0xae0
[ 94.781356][ T5328] __driver_probe_device+0x1e8/0x360
[ 94.783593][ T5328] driver_probe_device+0x4f/0x240
[ 94.785678][ T5328] __driver_attach+0x339/0x600
[ 94.787713][ T5328] bus_for_each_dev+0x23b/0x2c0
[ 94.789830][ T5328] bus_add_driver+0x345/0x670
[ 94.791779][ T5328] driver_register+0x23a/0x320
[ 94.793774][ T5328] usb_gadget_register_driver_owner+0xf9/0x270
[ 94.796155][ T5328] gadget_dev_desc_UDC_store+0x1c9/0x2f0
[ 94.798637][ T5328] configfs_write_iter+0x337/0x430
[ 94.800816][ T5328] vfs_write+0x612/0xba0
[ 94.802641][ T5328] ksys_write+0x150/0x270
[ 94.804400][ T5328] do_syscall_64+0x174/0x580
[ 94.806274][ T5328] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.808715][ T5328]
[ 94.809798][ T5328] The buggy address belongs to the object at ffff88803fdd4540
[ 94.809798][ T5328] which belongs to the cache filp of size 352
[ 94.815359][ T5328] The buggy address is located 344 bytes inside of
[ 94.815359][ T5328] freed 352-byte region [ffff88803fdd4540, ffff88803fdd46a0)
[ 94.821200][ T5328]
[ 94.822275][ T5328] The buggy address belongs to the physical page:
[ 94.824961][ T5328] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3fdd4
[ 94.828620][ T5328] memcg:ffff888043daa801
[ 94.830473][ T5328] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff)
[ 94.833564][ T5328] page_type: f5(slab)
[ 94.835335][ T5328] raw: 04fff00000000000 ffff888030414500 dead000000000100 dead000000000122
[ 94.839027][ T5328] raw: 0000000000000000 0000000800090009 00000000f5000000 ffff888043daa801
[ 94.842693][ T5328] page dumped because: kasan: bad access detected
[ 94.845356][ T5328] page_owner tracks the page as allocated
[ 94.847769][ T5328] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4702, tgid 4702 (udevd), ts 36560779423, free_ts 28542285631
[ 94.855781][ T5328] post_alloc_hook+0x1f9/0x250
[ 94.857781][ T5328] get_page_from_freelist+0x21fa/0x2270
[ 94.860022][ T5328] __alloc_frozen_pages_noprof+0x18d/0x380
[ 94.862359][ T5328] allocate_slab+0x79/0x5e0
[ 94.864208][ T5328] refill_objects+0x2d5/0x350
[ 94.866144][ T5328] __pcs_replace_empty_main+0x2bf/0x6b0
[ 94.868341][ T5328] kmem_cache_alloc_noprof+0x382/0x5f0
[ 94.870636][ T5328] alloc_empty_file+0x5b/0x1d0
[ 94.872620][ T5328] path_openat+0x8f/0x3830
[ 94.874554][ T5328] do_file_open+0x23e/0x4a0
[ 94.876341][ T5328] do_sys_openat2+0x115/0x200
[ 94.878156][ T5328] __x64_sys_openat+0x138/0x170
[ 94.880072][ T5328] do_syscall_64+0x174/0x580
[ 94.881888][ T5328] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.884339][ T5328] page last free pid 1 tgid 1 stack trace:
[ 94.886769][ T5328] __free_frozen_pages+0xc1e/0xd10
[ 94.888809][ T5328] kasan_depopulate_vmalloc_pte+0x6d/0x90
[ 94.891038][ T5328] __apply_to_page_range+0xbd8/0x1420
[ 94.893078][ T5328] __kasan_release_vmalloc+0xa2/0xd0
[ 94.895144][ T5328] purge_vmap_node+0x220/0x960
[ 94.897072][ T5328] __purge_vmap_area_lazy+0x783/0xb40
[ 94.899370][ T5328] _vm_unmap_aliases+0x732/0x7e0
[ 94.901415][ T5328] change_page_attr_set_clr+0x307/0xf60
[ 94.903743][ T5328] set_memory_nx+0xd6/0x110
[ 94.905671][ T5328] free_kernel_image_pages+0x85/0x100
[ 94.907844][ T5328] kernel_init+0x31/0x1d0
[ 94.909603][ T5328] ret_from_fork+0x514/0xb70
[ 94.911562][ T5328] ret_from_fork_asm+0x1a/0x30
[ 94.913579][ T5328]
[ 94.914582][ T5328] Memory state around the buggy address:
[ 94.916834][ T5328] ffff88803fdd4580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 94.920117][ T5328] ffff88803fdd4600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 94.923525][ T5328] >ffff88803fdd4680: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[ 94.926843][ T5328] ^
[ 94.929308][ T5328] ffff88803fdd4700: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 94.932954][ T5328] ffff88803fdd4780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 94.936247][ T5328] ==================================================================
[ 95.054186][ T5328] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 95.057144][ T5328] CPU: 0 UID: 0 PID: 5328 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 95.060717][ T5328] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 95.065045][ T5328] Call Trace:
[ 95.066481][ T5328]
[ 95.067661][ T5328] vpanic+0x56c/0xa60
[ 95.069335][ T5328] ? __pfx_vpanic+0x10/0x10
[ 95.071226][ T5328] panic+0xc5/0xd0
[ 95.072796][ T5328] ? __pfx_panic+0x10/0x10
[ 95.074680][ T5328] ? preempt_schedule_thunk+0x16/0x40
[ 95.076897][ T5328] ? filp_flush+0x31/0x190
[ 95.078788][ T5328] ? preempt_schedule_thunk+0x16/0x40
[ 95.081039][ T5328] ? filp_flush+0x31/0x190
[ 95.082961][ T5328] check_panic_on_warn+0x89/0xb0
[ 95.085034][ T5328] ? filp_flush+0x31/0x190
[ 95.086984][ T5328] end_report+0x73/0x170
[ 95.088793][ T5328] ? filp_flush+0x31/0x190
[ 95.090786][ T5328] kasan_report+0x128/0x150
[ 95.092744][ T5328] ? filp_flush+0x31/0x190
[ 95.094697][ T5328] kasan_check_range+0x264/0x2c0
[ 95.096830][ T5328] filp_flush+0x31/0x190
[ 95.098671][ T5328] filp_close+0x1d/0x40
[ 95.100473][ T5328] gaudio_cleanup+0x54/0xf0
[ 95.102446][ T5328] f_audio_bind+0x4a0/0x630
[ 95.104387][ T5328] ? __pfx_f_audio_bind+0x10/0x10
[ 95.106559][ T5328] ? rcu_is_watching+0x15/0xb0
[ 95.108554][ T5328] ? usb_gadget_set_selfpowered+0xf5/0x260
[ 95.111108][ T5328] usb_add_function+0x2e1/0x9f0
[ 95.113203][ T5328] ? check_remote_wakeup_config+0x58/0x1c0
[ 95.115603][ T5328] configfs_composite_bind+0xde0/0x1410
[ 95.117833][ T5328] ? __pfx_configfs_composite_bind+0x10/0x10
[ 95.120343][ T5328] gadget_bind_driver+0x2ca/0x9e0
[ 95.122519][ T5328] ? __pfx_gadget_bind_driver+0x10/0x10
[ 95.124740][ T5328] really_probe+0x254/0xae0
[ 95.126665][ T5328] __driver_probe_device+0x1e8/0x360
[ 95.128858][ T5328] driver_probe_device+0x4f/0x240
[ 95.130969][ T5328] __driver_attach+0x339/0x600
[ 95.132944][ T5328] bus_for_each_dev+0x23b/0x2c0
[ 95.135262][ T5328] ? __pfx___driver_attach+0x10/0x10
[ 95.138085][ T5328] ? __pfx_bus_for_each_dev+0x10/0x10
[ 95.140951][ T5328] ? do_raw_spin_unlock+0x4d/0x210
[ 95.143490][ T5328] bus_add_driver+0x345/0x670
[ 95.145969][ T5328] driver_register+0x23a/0x320
[ 95.148441][ T5328] usb_gadget_register_driver_owner+0xf9/0x270
[ 95.151103][ T5328] gadget_dev_desc_UDC_store+0x1c9/0x2f0
[ 95.153440][ T5328] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10
[ 95.155930][ T5328] configfs_write_iter+0x337/0x430
[ 95.158110][ T5328] vfs_write+0x612/0xba0
[ 95.159999][ T5328] ? __pfx_vfs_write+0x10/0x10
[ 95.161977][ T5328] ? __fget_files+0x2a/0x420
[ 95.163912][ T5328] ksys_write+0x150/0x270
[ 95.165736][ T5328] ? __pfx_ksys_write+0x10/0x10
[ 95.167833][ T5328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.170547][ T5328] do_syscall_64+0x174/0x580
[ 95.172495][ T5328] ? trace_irq_disable+0x3b/0x140
[ 95.174948][ T5328] ? clear_bhb_loop+0x40/0x90
[ 95.177299][ T5328] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.179792][ T5328] RIP: 0033:0x7fa44179df99
[ 95.181669][ T5328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 95.189602][ T5328] RSP: 002b:00007fa44262cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 95.193079][ T5328] RAX: ffffffffffffffda RBX: 00007fa441a26090 RCX: 00007fa44179df99
[ 95.196267][ T5328] RDX: 000000000000000c RSI: 0000200000000400 RDI: 0000000000000007
[ 95.199562][ T5328] RBP: 00007fa441834ec4 R08: 0000000000000000 R09: 0000000000000000
[ 95.202743][ T5328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 95.206063][ T5328] R13: 00007fa441a26128 R14: 00007fa441a26090 R15: 00007ffffd675cf8
[ 95.209395][ T5328]
[ 95.211057][ T5328] Kernel Offset: disabled
[ 95.212854][ T5328] Rebooting in 86400 seconds..