UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
misc raw-gadget: fail, usb_gadget_register_driver returned -16
BUG: Bad rss-counter state mm:00000000f28e858c type:MM_ANONPAGES val:-8 Comm:systemd-udevd Pid:3986
kmemleak: Found object by alias at 0x607f1a63e254
CPU: 1 UID: 0 PID: 3993 Comm: syz-executor.2 Tainted: G        W           6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) 
Tainted: [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
 <TASK>
 dump_stack_lvl+0xca/0x120
 __lookup_object+0x94/0xb0
 delete_object_full+0x27/0x70
 free_percpu+0x30/0x1160
 futex_hash_free+0x38/0xc0
 mmput+0x2d3/0x390
 do_exit+0x79d/0x2970
 do_group_exit+0xd3/0x2a0
 __x64_sys_exit_group+0x3e/0x50
 x64_sys_call+0x18c5/0x18d0
 do_syscall_64+0xbf/0x360
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7effaa825b19
Code: Unable to access opcode bytes at 0x7effaa825aef.
RSP: 002b:00007ffe04e10ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007effaa825b19
RDX: 00007effaa7d872b RSI: ffffffffffffffbc RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000001b2d323810 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffe04e10fe0
 </TASK>
kmemleak: Object (percpu) 0x607f1a63e250 (size 8):
kmemleak:   comm "syz-executor.7", pid 3997, jiffies 4294804262
kmemleak:   min_count = 1
kmemleak:   count = 0
kmemleak:   flags = 0x21
kmemleak:   checksum = 0
kmemleak:   backtrace:
 pcpu_alloc_noprof+0x87a/0x1170
 percpu_ref_init+0x37/0x400
 ioctx_alloc+0x368/0x1e10
 __x64_sys_io_setup+0xc8/0x1f0
 do_syscall_64+0xbf/0x360
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
kmemleak: Found object by alias at 0x607f1a63db3c
CPU: 0 UID: 0 PID: 3994 Comm: syz-executor.4 Tainted: G        W           6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) 
Tainted: [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
 <TASK>
 dump_stack_lvl+0xca/0x120
 __lookup_object+0x94/0xb0
 delete_object_full+0x27/0x70
 free_percpu+0x30/0x1160
 futex_hash_free+0x38/0xc0
 mmput+0x2d3/0x390
 do_exit+0x79d/0x2970
 do_group_exit+0xd3/0x2a0
 __x64_sys_exit_group+0x3e/0x50
 x64_sys_call+0x18c5/0x18d0
 do_syscall_64+0xbf/0x360
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f781d4c9b19
Code: Unable to access opcode bytes at 0x7f781d4c9aef.
RSP: 002b:00007ffeecbb19b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007f781d4c9b19
RDX: 00007f781d47c72b RSI: ffffffffffffffbc RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000001b2d1225ac R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffeecbb1aa0
 </TASK>
kmemleak: Object (percpu) 0x607f1a63db38 (size 16):
kmemleak:   comm "syz-executor.1", pid 280, jiffies 4294804223
kmemleak:   min_count = 1
kmemleak:   count = 0
kmemleak:   flags = 0x21
kmemleak:   checksum = 0
kmemleak:   backtrace:
 pcpu_alloc_noprof+0x87a/0x1170
 __percpu_counter_init_many+0x44/0x360
 mm_init+0xcac/0x1170
 copy_process+0x3ab7/0x73c0
 kernel_clone+0xea/0x7f0
 __do_sys_clone+0xce/0x120
 do_syscall_64+0xbf/0x360
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
kmemleak: Found object by alias at 0x607f1a63db40
CPU: 1 UID: 0 PID: 3998 Comm: syz-executor.5 Tainted: G        W           6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) 
Tainted: [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
 <TASK>
 dump_stack_lvl+0xca/0x120
 __lookup_object+0x94/0xb0
 delete_object_full+0x27/0x70
 free_percpu+0x30/0x1160
 futex_hash_free+0x38/0xc0
 mmput+0x2d3/0x390
 do_exit+0x79d/0x2970
 do_group_exit+0xd3/0x2a0
 get_signal+0x2315/0x2340
 arch_do_signal_or_restart+0x80/0x790
 exit_to_user_mode_loop+0x8b/0x110
 do_syscall_64+0x2f7/0x360
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fd215a8db19
Code: Unable to access opcode bytes at 0x7fd215a8daef.
RSP: 002b:00007fd213003218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: fffffffffffffe00 RBX: 00007fd215ba0f68 RCX: 00007fd215a8db19
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd215ba0f68
RBP: 00007fd215ba0f60 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd215ba0f6c
R13: 00007ffc6c82fd2f R14: 00007fd213003300 R15: 0000000000022000
 </TASK>
kmemleak: Object (percpu) 0x607f1a63db38 (size 16):
kmemleak:   comm "syz-executor.1", pid 280, jiffies 4294804223
kmemleak:   min_count = 1
kmemleak:   count = 0
kmemleak:   flags = 0x21
kmemleak:   checksum = 0
kmemleak:   backtrace:
 pcpu_alloc_noprof+0x87a/0x1170
 __percpu_counter_init_many+0x44/0x360
 mm_init+0xcac/0x1170
 copy_process+0x3ab7/0x73c0
 kernel_clone+0xea/0x7f0
 __do_sys_clone+0xce/0x120
 do_syscall_64+0xbf/0x360
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
kmemleak: Cannot insert 0x607f1a63db40 into the object search tree (overlaps existing)
CPU: 1 UID: 0 PID: 4006 Comm: syz-executor.1 Tainted: G        W           6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) 
Tainted: [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
 <TASK>
 dump_stack_lvl+0xca/0x120
 __link_object+0x190/0x210
 __create_object+0x48/0x80
 pcpu_alloc_noprof+0x87a/0x1170
 percpu_ref_init+0x37/0x400
 io_uring_setup+0x44c/0x2000
 __x64_sys_io_uring_setup+0xc8/0x170
 do_syscall_64+0xbf/0x360
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f7037bceb19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f7035144108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
RAX: ffffffffffffffda RBX: 00007f7037ce1f60 RCX: 00007f7037bceb19
RDX: 0000000020ffd000 RSI: 0000000020000000 RDI: 0000000000006373
RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0
R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0
R13: 0000000020ffd000 R14: 0000000020000080 R15: 0000000020c8a000
 </TASK>
kmemleak: Kernel memory leak detector disabled
kmemleak: Object (percpu) 0x607f1a63db38 (size 16):
kmemleak:   comm "syz-executor.1", pid 280, jiffies 4294804223
kmemleak:   min_count = 1
kmemleak:   count = 0
kmemleak:   flags = 0x21
kmemleak:   checksum = 0
kmemleak:   backtrace:
 pcpu_alloc_noprof+0x87a/0x1170
 __percpu_counter_init_many+0x44/0x360
 mm_init+0xcac/0x1170
 copy_process+0x3ab7/0x73c0
 kernel_clone+0xea/0x7f0
 __do_sys_clone+0xce/0x120
 do_syscall_64+0xbf/0x360
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
kmemleak: Found object by alias at 0x607f1a63db44
CPU: 0 UID: 0 PID: 4007 Comm: syz-executor.6 Tainted: G        W           6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) 
Tainted: [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
 <TASK>
 dump_stack_lvl+0xca/0x120
 __lookup_object+0x94/0xb0
 delete_object_full+0x27/0x70
 free_percpu+0x30/0x1160
 futex_hash_free+0x38/0xc0
 mmput+0x2d3/0x390
 do_exit+0x79d/0x2970
 do_group_exit+0xd3/0x2a0
 get_signal+0x2315/0x2340
 arch_do_signal_or_restart+0x80/0x790
 exit_to_user_mode_loop+0x8b/0x110
 do_syscall_64+0x2f7/0x360
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f047307ab19
Code: Unable to access opcode bytes at 0x7f047307aaef.
RSP: 002b:00007f04705f0218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: fffffffffffffe00 RBX: 00007f047318df68 RCX: 00007f047307ab19
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f047318df68
RBP: 00007f047318df60 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f047318df6c
R13: 00007fff509bc67f R14: 00007f04705f0300 R15: 0000000000022000
 </TASK>
kmemleak: Object (percpu) 0x607f1a63db38 (size 16):
kmemleak:   comm "syz-executor.1", pid 280, jiffies 4294804223
kmemleak:   min_count = 1
kmemleak:   count = 0
kmemleak:   flags = 0x21
kmemleak:   checksum = 0
kmemleak:   backtrace:
 pcpu_alloc_noprof+0x87a/0x1170
 __percpu_counter_init_many+0x44/0x360
 mm_init+0xcac/0x1170
 copy_process+0x3ab7/0x73c0
 kernel_clone+0xea/0x7f0
 __do_sys_clone+0xce/0x120
 do_syscall_64+0xbf/0x360
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
kmemleak: Found object by alias at 0x607f1a63db40
CPU: 0 UID: 0 PID: 4010 Comm: modprobe Tainted: G        W           6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) 
Tainted: [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
 <IRQ>
 dump_stack_lvl+0xca/0x120
 __lookup_object+0x94/0xb0
 delete_object_full+0x27/0x70
 free_percpu+0x30/0x1160
 __percpu_ref_exit+0xa9/0x100
 percpu_ref_switch_to_atomic_rcu+0x2e5/0x480
 rcu_core+0x7c8/0x1800
 handle_softirqs+0x1b1/0x770
 __irq_exit_rcu+0xc4/0x100
 irq_exit_rcu+0x9/0x20
 sysvec_apic_timer_interrupt+0x70/0x80
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20
RIP: 0010:lock_release+0x87/0x290
Code: 00 00 65 4c 8b 35 f1 a6 32 06 41 8b b6 54 0a 00 00 85 f6 0f 85 d7 00 00 00 48 81 7d 00 00 7d 89 87 0f 84 c9 00 00 00 9c 41 5d <fa> 65 ff 05 79 e6 32 06 8b 0d df e6 f1 04 c7 44 24 08 01 00 00 00
RSP: 0000:ffff888017a677d0 EFLAGS: 00000206
RAX: 0000000000000000 RBX: ffff888017a67bd8 RCX: ffffffff86896ea4
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
RBP: ffffffff85c1c760 R08: ffffffff86896ea8 R09: ffff888017a678c8
R10: 000000000003bea3 R11: 0000000000024b22 R12: ffffffff81358702
R13: 0000000000000206 R14: ffff8880169b0000 R15: ffff888017a67888
 unwind_next_frame+0x3b7/0x2540
 arch_stack_walk+0x86/0xf0
 stack_trace_save+0x8e/0xc0
 kasan_save_stack+0x24/0x50
 kasan_save_track+0x14/0x30
 __kasan_slab_alloc+0x59/0x70
 kmem_cache_alloc_noprof+0x205/0x690
 __anon_vma_prepare+0x2ee/0x590
 __vmf_anon_prepare+0x11f/0x250
 __handle_mm_fault+0x961/0x3260
 handle_mm_fault+0x2c3/0x9b0
 do_user_addr_fault+0x4fa/0xeb0
 exc_page_fault+0xb0/0x180
 asm_exc_page_fault+0x26/0x30
RIP: 0033:0x7f4cace49e04
Code: 00 00 00 0f 1f 00 55 48 89 e5 41 57 49 89 ff 41 56 41 55 41 54 53 48 83 ec 38 0f 31 48 c1 e2 20 48 09 d0 48 8d 15 74 90 02 00 <48> 89 05 75 87 02 00 48 8b 05 66 90 02 00 49 89 d4 4c 2b 25 e4 91
RSP: 002b:00007ffe04804530 EFLAGS: 00010202
RAX: 0000005ad46529e0 RBX: 0000000000000000 RCX: 0000000000000000
RDX: 00007f4cace72e78 RSI: 0000000000000000 RDI: 00007ffe048045a0
RBP: 00007ffe04804590 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe048045a0
 </TASK>
kmemleak: Object (percpu) 0x607f1a63db38 (size 16):
kmemleak:   comm "syz-executor.1", pid 280, jiffies 4294804223
kmemleak:   min_count = 1
kmemleak:   count = 0
kmemleak:   flags = 0x21
kmemleak:   checksum = 0
kmemleak:   backtrace:
 pcpu_alloc_noprof+0x87a/0x1170
 __percpu_counter_init_many+0x44/0x360
 mm_init+0xcac/0x1170
 copy_process+0x3ab7/0x73c0
 kernel_clone+0xea/0x7f0
 __do_sys_clone+0xce/0x120
 do_syscall_64+0xbf/0x360
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
kmemleak: Automatic memory scanning thread ended
kmemleak: Found object by alias at 0x607f1a63db3c
CPU: 0 UID: 0 PID: 288 Comm: syz-executor.6 Tainted: G        W           6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) 
Tainted: [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
 <IRQ>
 dump_stack_lvl+0xca/0x120
 __lookup_object+0x94/0xb0
 delete_object_full+0x27/0x70
 free_percpu+0x30/0x1160
 percpu_counter_destroy_many+0x188/0x2b0
 __io_uring_free+0x134/0x1e0
 __put_task_struct+0xfb/0x510
 rcu_core+0x7c8/0x1800
 handle_softirqs+0x1b1/0x770
 __irq_exit_rcu+0xc4/0x100
 irq_exit_rcu+0x9/0x20
 sysvec_apic_timer_interrupt+0x70/0x80
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20
RIP: 0010:stack_depot_save_flags+0xbb/0xa20
Code: c0 29 c1 01 d8 41 c1 c0 06 44 31 c1 41 89 c8 29 cb 01 c1 41 c1 c0 08 44 31 c3 41 89 d8 29 d8 01 cb 41 c1 c0 10 44 31 c0 29 c1 <41> 89 c8 89 c1 01 d8 c1 c9 0d 44 31 c1 29 cb 41 89 d8 89 cb 01 c1
RSP: 0018:ffff88801915f668 EFLAGS: 00000206
RAX: 000000000d7cb8e4 RBX: 00000000db527d7e RCX: 00000000298bec50
RDX: 000000000000000c RSI: ffff88801915f6e8 RDI: 0000000000000012
RBP: 0000000000000000 R08: 00000000d84aa449 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000
R13: 0000000000000000 R14: ffff88801915f6d0 R15: 000000000000000c
 kasan_save_stack+0x34/0x50
 kasan_record_aux_stack+0x89/0xa0
 __call_rcu_common.constprop.0+0x70/0x960
 free_pids+0x45/0x80
 release_task+0xc77/0x1870
 wait_consider_task+0x2e68/0x3bd0
 __do_wait+0x218/0x8f0
 do_wait+0x19f/0x560
 kernel_wait4+0x14e/0x260
 __do_sys_wait4+0x141/0x150
 do_syscall_64+0xbf/0x360
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f0473078fb7
Code: 89 7c 24 10 48 89 4c 24 18 e8 d5 50 02 00 4c 8b 54 24 18 8b 54 24 14 41 89 c0 48 8b 74 24 08 8b 7c 24 10 b8 3d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 89 44 24 10 e8 05 51 02 00 8b 44
RSP: 002b:00007fff509bc8a0 EFLAGS: 00000293 ORIG_RAX: 000000000000003d
RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007f0473078fb7
RDX: 0000000040000001 RSI: 00007fff509bc92c RDI: 00000000ffffffff
RBP: 00007fff509bc92c R08: 0000000000000000 R09: 00007f047316a000
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032
R13: 00000000000218d1 R14: 0000000000000014 R15: 00007fff509bc990
 </TASK>
kmemleak: Object (percpu) 0x607f1a63db38 (size 16):
kmemleak:   comm "syz-executor.1", pid 280, jiffies 4294804223
kmemleak:   min_count = 1
kmemleak:   count = 0
kmemleak:   flags = 0x21
kmemleak:   checksum = 0
kmemleak:   backtrace:
 pcpu_alloc_noprof+0x87a/0x1170
 __percpu_counter_init_many+0x44/0x360
 mm_init+0xcac/0x1170
 copy_process+0x3ab7/0x73c0
 kernel_clone+0xea/0x7f0
 __do_sys_clone+0xce/0x120
 do_syscall_64+0xbf/0x360
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
BUG: Bad rss-counter state mm:00000000922baaf9 type:MM_ANONPAGES val:-32 Comm:syz-executor.1 Pid:4006
misc raw-gadget: fail, usb_gadget_register_driver returned -16
BUG: Bad rss-counter state mm:000000007cc82d4f type:MM_FILEPAGES val:1162039344 Comm:syz-executor.1 Pid:4035
BUG: Bad rss-counter state mm:000000007cc82d4f type:MM_ANONPAGES val:82 Comm:syz-executor.1 Pid:4035
BUG: Bad rss-counter state mm:000000007cc82d4f type:MM_SWAPENTS val:-2 Comm:syz-executor.1 Pid:4035
BUG: Bad rss-counter state mm:000000007cc82d4f type:MM_SHMEMPAGES val:-2 Comm:syz-executor.1 Pid:4035
----------------
Code disassembly (best guess):
   0:	00 00                	add    %al,(%rax)
   2:	65 4c 8b 35 f1 a6 32 	mov    %gs:0x632a6f1(%rip),%r14        # 0x632a6fb
   9:	06
   a:	41 8b b6 54 0a 00 00 	mov    0xa54(%r14),%esi
  11:	85 f6                	test   %esi,%esi
  13:	0f 85 d7 00 00 00    	jne    0xf0
  19:	48 81 7d 00 00 7d 89 	cmpq   $0xffffffff87897d00,0x0(%rbp)
  20:	87
  21:	0f 84 c9 00 00 00    	je     0xf0
  27:	9c                   	pushfq
  28:	41 5d                	pop    %r13
* 2a:	fa                   	cli <-- trapping instruction
  2b:	65 ff 05 79 e6 32 06 	incl   %gs:0x632e679(%rip)        # 0x632e6ab
  32:	8b 0d df e6 f1 04    	mov    0x4f1e6df(%rip),%ecx        # 0x4f1e717
  38:	c7 44 24 08 01 00 00 	movl   $0x1,0x8(%rsp)
  3f:	00